pyproject.toml

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "seekrit"
version = "0.11.0"
description = "Read-path SDK for seekrit — resolve and decrypt secrets client-side with a service token."
readme = "README.md"
requires-python = ">=3.9"
license = "MIT"
authors = [{ name = "seekrit" }]
keywords = ["seekrit", "secrets", "secrets-manager", "encryption", "zero-knowledge"]
classifiers = [
  "Development Status :: 4 - Beta",
  "Intended Audience :: Developers",
  "Programming Language :: Python :: 3",
  "Topic :: Security :: Cryptography",
]
dependencies = ["cryptography>=41"]

[project.optional-dependencies]
# `seekrit.transport` — the httpx transports that substitute
# {{seekrit:NAME}} placeholders into outbound requests.
httpx = ["httpx>=0.24"]
# `seekrit.transport_httpx2` — the same transports against httpx2, which is a
# separate distribution rather than a newer httpx. A client that takes an
# `httpx2.BaseTransport` cannot accept the httpx 0.x one.
httpx2 = ["httpx2>=2.0"]
# `seekrit.langchain` — agent middleware for per-request and per-tool
# credential scoping. Brings httpx along, since the middleware is only
# useful paired with the transport.
langchain = ["httpx>=0.24", "langchain>=1.0"]
# `seekrit.pydantic_ai` — a WrapperToolset that scopes each tool call. Brings
# httpx along for the same reason.
pydantic-ai = ["httpx>=0.24", "pydantic-ai>=1.0"]
# `seekrit.crewai` — a BaseInterceptor that substitutes into a CrewAI
# provider's outbound request, plus hooks that scope credentials per agent and
# per tool. httpx again: the interceptor rewrites an httpx.Request.
crewai = ["httpx>=0.24", "crewai>=1.15"]

# `seekrit.hermes` — Hermes Agent secret sources. No extra: the module imports
# Hermes lazily (only inside `register()`), so there is no third-party dependency
# to install — it is importable wherever Hermes itself is.
#
# `seekrit.litellm` — a LiteLLM custom secret manager. No extra either, and for
# the same reason: it imports LiteLLM only inside `secret_manager_class()`, and
# it only ever runs inside a process that already is LiteLLM. An extra would
# pull one of the heaviest trees in this ecosystem into a zero-dependency SDK.
[project.entry-points."hermes_agent.plugins"]
seekrit = "seekrit.hermes:register"

[project.urls]
Homepage = "https://seekrit.dev"
Documentation = "https://seekrit.dev/docs"
Source = "https://github.com/seekritdev/python-sdk"

[tool.hatch.build.targets.wheel]
packages = ["src/seekrit"]

[tool.hatch.build.targets.sdist]
include = ["src/seekrit", "tests", "testdata", "examples", "e2e", "README.md"]