sigil_guard

defmodule SigilGuard.MixProject do
  use Mix.Project

  @version "1.0.0"
  @source_url "https://github.com/refpath/sigil_guard"

  def project do
    [
      app: :sigil_guard,
      version: @version,
      elixir: "~> 1.18",
      start_permanent: Mix.env() == :prod,
      deps: deps(),
      elixirc_paths: elixirc_paths(Mix.env()),
      description: description(),
      package: package(),
      source_url: @source_url,
      homepage_url: @source_url,
      hex: [
        ignore_advisories: [
          "CVE-2026-43966",
          "CVE-2026-43969",
          "CVE-2026-43971"
        ]
      ],
      docs: docs(),
      dialyzer: dialyzer(),
      test_coverage: [tool: ExCoveralls],
      aliases: aliases(),
      name: "SigilGuard"
    ]
  end

  def application do
    [
      extra_applications: [:logger, :crypto],
      mod: {SigilGuard.Application, []}
    ]
  end

  def cli do
    [
      preferred_envs: [
        coveralls: :test,
        "coveralls.detail": :test,
        "coveralls.html": :test,
        "coveralls.lcov": :test,
        cover: :test,
        "cover.html": :test
      ]
    ]
  end

  defp elixirc_paths(:test), do: ["lib", "test/support"]
  defp elixirc_paths(_), do: ["lib"]

  defp deps do
    [
      # Core
      {:jason, "~> 1.4"},
      {:nimble_options, "~> 1.1"},
      {:telemetry, "~> 1.0"},

      # Code quality
      {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
      {:dialyxir, "~> 1.4", only: [:dev, :test], runtime: false},
      {:sobelow, "~> 0.13", only: [:dev, :test], runtime: false},
      {:mix_audit, "~> 2.1", only: [:dev, :test], runtime: false},
      {:ex_check, "~> 0.16", only: [:dev, :test], runtime: false},

      # Documentation
      {:ex_doc, "~> 0.35", only: [:dev, :test], runtime: false},
      {:doctor, "~> 0.22", only: [:dev, :test], runtime: false},
      {:doctest_formatter, "~> 0.4", only: [:dev, :test], runtime: false},

      # Testing
      {:excoveralls, "~> 0.18", only: :test},
      {:bypass, "~> 2.1", only: :test},
      {:muex, "~> 0.8.1", only: [:dev, :test], runtime: false},
      {:stream_data, "~> 1.4", only: :test},

      # Benchmarks
      {:benchee, "~> 1.3", only: :dev, runtime: false},
      {:benchee_markdown, "~> 0.3", only: :dev, runtime: false},

      # Release
      {:git_ops, "~> 2.6", only: :dev, runtime: false}
    ]
  end

  defp description do
    "In-process, OTP-supervised security runtime for MCP and agent-tool " <>
      "boundaries with deterministic policy, Agent Trust attestations, and signed evidence."
  end

  defp package do
    [
      name: "sigil_guard",
      licenses: ["MIT"],
      links: %{
        "GitHub" => @source_url,
        "Documentation" => "https://hexdocs.pm/sigil_guard",
        "Migration Guide" => @source_url <> "/blob/main/MIGRATING-1.0.md"
      },
      files: ~w[
        lib
        guides
        notebooks
        docs/README.md
        bench/output/benchmarks.md
        .formatter.exs
        mix.exs
        README.md
        LICENSE
        SECURITY.md
        CONTRIBUTING.md
        AGENTS.md
        CHANGELOG.md
        MIGRATING-1.0.md
      ],
      maintainers: ["Tobias Bohwalli <hi@futhr.io>"]
    ]
  end

  defp docs do
    [
      main: "readme-1",
      extras: [
        "README.md": [title: "Overview"],
        "docs/README.md": [title: "Architecture"],
        "notebooks/README.md": [title: "Livebook Tutorials"],
        "notebooks/quick-start.livemd": [title: "Tutorial 1 — Quick Start"],
        "notebooks/policy-and-lethal-trifecta.livemd": [
          title: "Tutorial 2 — Policy And The Lethal Trifecta"
        ],
        "notebooks/ai-agent-under-attack.livemd": [
          title: "Tutorial 3 — An AI Agent Under Attack"
        ],
        "notebooks/agent-trust-gateway.livemd": [
          title: "Tutorial 4 — The Agent Trust Gateway"
        ],
        "notebooks/threat-scenarios.livemd": [title: "Tutorial 5 — Threat Lab"],
        "notebooks/mcp-v2-and-apps.livemd": [title: "Tutorial 6 — MCP v2 And Apps"],
        "notebooks/runtime-streaming-and-telemetry.livemd": [
          title: "Tutorial 7 — Runtime, Streaming, And Telemetry"
        ],
        "notebooks/trust-bundles-identity-and-vault.livemd": [
          title: "Tutorial 8 — Trust Bundles, Identity, And Vault"
        ],
        "notebooks/agent-to-agent-trust.livemd": [
          title: "Tutorial 9 — Agent-To-Agent Trust"
        ],
        "notebooks/audit-export-and-proofs.livemd": [
          title: "Tutorial 10 — Audit Evidence And Proofs"
        ],
        "notebooks/hermes-integration.livemd": [
          title: "Tutorial 11 — Hermes Integration"
        ],
        "guides/cheatsheet.cheatmd": [title: "Cheatsheet"],
        "guides/threat-model.md": [title: "Threat Model"],
        "guides/integrations/hermes-mcp.md": [title: "Hermes MCP Integration"],
        "guides/integrations/jido.md": [title: "Jido Integration"],
        "guides/integrations/langchain-reqllm.md": [title: "LangChain and ReqLLM Integration"],
        "guides/integrations/tidewave.md": [title: "Tidewave Integration"],
        "guides/release-and-anchoring.md": [title: "Release and Anchoring"],
        "bench/output/benchmarks.md": [title: "Benchmarks"],
        "MIGRATING-1.0.md": [title: "Migrating to 1.0"],
        "CHANGELOG.md": [title: "Changelog"],
        "SECURITY.md": [title: "Security"],
        "CONTRIBUTING.md": [title: "Contributing"],
        "AGENTS.md": [title: "AI Agents"],
        LICENSE: [title: "License"]
      ],
      groups_for_extras: [
        Tutorials: ~r/notebooks/,
        "Getting Started": ~r/README/,
        Guides: ~r/guides/,
        Performance: ~r/benchmarks/,
        Reference: ~r/MIGRATING|CHANGELOG|SECURITY|CONTRIBUTING|AGENTS|LICENSE/
      ],
      groups_for_modules: [
        "Mix Tasks": [
          Mix.Tasks.Sigil.DocsLint,
          Mix.Tasks.Sigil.LivebookCheck,
          Mix.Tasks.Sigil.MigrationGate,
          Mix.Tasks.SigilGuard.ReleaseStatement,
          Mix.Tasks.SigilGuard.Sbom,
          Mix.Tasks.SigilGuard.VerifyReleaseRef
        ],
        "Core API": [
          SigilGuard,
          SigilGuard.AdaptiveDetector,
          SigilGuard.AgentCard,
          SigilGuard.AgentTrust,
          SigilGuard.Scanner,
          SigilGuard.Scanner.Pipeline,
          SigilGuard.Policy,
          SigilGuard.Confirmation,
          SigilGuard.Attestation,
          SigilGuard.Attestation.AgentPredicate,
          SigilGuard.Attestation.Digest,
          SigilGuard.Attestation.Envelope,
          SigilGuard.Attestation.Statement,
          SigilGuard.Canonical.JCS,
          SigilGuard.CapabilityManifest,
          SigilGuard.Context,
          SigilGuard.Decision,
          SigilGuard.Hooks,
          SigilGuard.HTTPClient,
          SigilGuard.Identity,
          SigilGuard.Identity.Binding,
          SigilGuard.Identity.Static,
          SigilGuard.Lifecycle,
          SigilGuard.PatternSets,
          SigilGuard.Patterns,
          SigilGuard.Quarantine,
          SigilGuard.RepoPolicy,
          SigilGuard.RepoPolicy.Decision,
          SigilGuard.TrustProfile,
          SigilGuard.Verdict
        ],
        "Boundary Policy": [
          SigilGuard.Boundary,
          SigilGuard.BoundaryPolicy,
          SigilGuard.BoundaryPolicy.Contract,
          SigilGuard.BoundaryPolicy.File,
          SigilGuard.BoundaryPolicy.Match
        ],
        "Runtime Gate": [
          SigilGuard.Runtime.Gate,
          SigilGuard.Runtime.Stream
        ],
        "MCP Gateway": [
          SigilGuard.MCP.AppResource,
          SigilGuard.MCP.Gateway,
          SigilGuard.MCP.Protocol,
          SigilGuard.MCP.SecurityPayload,
          SigilGuard.ToolGateway,
          SigilGuard.ToolGateway.Base,
          SigilGuard.TransportExamples
        ],
        Audit: [
          SigilGuard.Audit,
          SigilGuard.Audit.Action,
          SigilGuard.Audit.Anchor,
          SigilGuard.Audit.Anchor.Receipt,
          SigilGuard.Audit.Anchor.Store,
          SigilGuard.Audit.Anchor.Store.HTTP,
          SigilGuard.Audit.Anchor.Store.LocalFile,
          SigilGuard.Audit.Actor,
          SigilGuard.Audit.Checkpoint,
          SigilGuard.Audit.CloudEvents,
          SigilGuard.Audit.EventType,
          SigilGuard.Audit.Evidence,
          SigilGuard.Audit.ExecutionResult,
          SigilGuard.Audit.Export,
          SigilGuard.Audit.Logger,
          SigilGuard.Audit.Proof,
          SigilGuard.Audit.Witness
        ],
        Assessment: [
          SigilGuard.Assessment.OSCAL
        ],
        "Signing & Vault": [
          SigilGuard.Signer,
          SigilGuard.Signer.Ed25519,
          SigilGuard.Vault,
          SigilGuard.Vault.Entry,
          SigilGuard.Vault.InMemory
        ],
        Backend: [
          SigilGuard.Backend,
          SigilGuard.Backend.Elixir
        ],
        Runtime: [
          SigilGuard.Application,
          SigilGuard.Runtime,
          SigilGuard.Config,
          SigilGuard.ConfigError,
          SigilGuard.ReplayStore,
          SigilGuard.Telemetry
        ],
        "Trust Bundles": [
          SigilGuard.TrustBundle,
          SigilGuard.TrustBundle.Cache,
          SigilGuard.TrustBundle.Quarantine,
          SigilGuard.TrustBundle.Schema,
          SigilGuard.TrustBundle.Verify
        ]
      ],
      skip_undefined_reference_warnings_on: [
        "CHANGELOG.md",
        "MIGRATING-1.0.md"
      ],
      source_ref: "v#{@version}",
      source_url: @source_url,
      formatters: ["html"]
    ]
  end

  defp dialyzer do
    [
      plt_file: {:no_warn, "priv/plts/dialyxir.plt"},
      plt_add_apps: [:mix, :ex_unit, :xmerl],
      flags: [:error_handling, :missing_return, :underspecs]
    ]
  end

  defp aliases do
    [
      setup: ["deps.get", "deps.compile"],
      lint: ["format --check-formatted", "credo --strict", "dialyzer"],
      "test.cover": ["coveralls"],
      bench: ["run bench/run.exs"],
      ci: ["setup", "lint", "test.cover"],

      # Release
      release: ["git_ops.release"]
    ]
  end
end