pyproject.toml

[project]
name = "buzz-captions"
# Change also in Makefile and buzz/__version__.py
version = "1.4.5"
description = ""
authors = [{ name = "Chidi Williams", email = "williamschidi1@gmail.com" }]
requires-python = ">=3.12,<3.13"
readme = "README.md"
# License format change to remove warning in PyPI will cause snap not to build
license = { text = "MIT" }
dependencies = [
    "sounddevice>=0.5.3,<0.6",
    "humanize>=4.4.0,<5",
    "PyQt6==6.9.1",
    "PyQt6-Qt6==6.9.1",
    "PyQt6-sip==13.10.2",
    "openai>=1.14.2,<2",
    "keyring>=25.0.0,<26",
    "platformdirs>=4.2.1,<5",
    "dataclasses-json>=0.6.4,<0.7",
    "numpy>=1.21.2,<2",
    "requests>=2.31.0,<3",
    "yt-dlp>=2026.2.21",
    "stable-ts>=2.19.1,<3",
    "faster-whisper>=1.2.1,<2",
    "openai-whisper==20250625",
    "transformers>=4.53,<5",
    "accelerate>=1.12.0,<2",
    "peft>=0.14.0,<1",
    # Overriden in uv.tool section below to ensure CUDA 12.9 compatibility
    # Skip on Intel Macs (x86_64), use 0.49.0 on ARM Macs, 0.45.0+ elsewhere
    "bitsandbytes>=0.45.0; sys_platform != 'darwin' or platform_machine != 'x86_64'",
    "polib>=1.2.0,<2",
    "srt-equalizer>=0.1.10,<0.2",
    # For Intel macOS (x86_64) - use older versions that support Intel
    "torch==2.2.2; sys_platform == 'darwin' and platform_machine == 'x86_64'",
    "torchaudio==2.2.2; sys_platform == 'darwin' and platform_machine == 'x86_64'",
    "ctranslate2==4.3.1; sys_platform == 'darwin' and platform_machine == 'x86_64'",
    # For ARM macOS (arm64) - use latest CPU-only versions from PyPI
    "torch==2.8.0; sys_platform == 'darwin' and platform_machine == 'arm64'",
    "torchaudio==2.8.0; sys_platform == 'darwin' and platform_machine == 'arm64'",
    "ctranslate2>=4.6.2,<5; sys_platform == 'darwin' and platform_machine == 'arm64'",
    # For Linux/Windows - use CUDA versions from pytorch index
    "torch==2.8.0; sys_platform != 'darwin'",
    "torchaudio==2.8.0; sys_platform != 'darwin'",
    "ctranslate2>=4.6.2,<5; sys_platform != 'darwin'",
    # faster whisper need cudnn 9
    "nvidia-cudnn-cu12>=9,<10; sys_platform != 'darwin'",
    # CUDA runtime libraries are provided by torch dependencies, no need to specify explicitly
    "darkdetect>=0.8.0,<0.9",
    "dora-search>=0.1.12,<0.2",
    "diffq>=0.2.4,<0.3",
    "einops>=0.8.1,<0.9",
    "flake8>=7.1.2,<8",
    "hydra-colorlog>=1.2.0,<2",
    "hydra-core>=1.3.2,<2",
    "julius>=0.2.7,<0.3",
    "lameenc>=1.8.1,<2",
    "museval>=0.4.1,<0.5",
    "mypy>=1.15.0,<2",
    "openunmix>=1.3.0,<2",
    "pyyaml>=6.0.2,<7",
    "submitit>=1.5.2,<2",
    "tqdm>=4.67.1,<5",
    "treetable>=0.2.5,<0.3",
    "soundfile>=0.13.1,<0.14",
    "urllib3>=2.7.0,<3",  # CVE-2026-44432/44431/21441
    "posthog>=3.23.0,<4",
    # This version works, newer have issues on Windows
    "onnxruntime==1.18.1",
    "onnx>=1.21.0",  # Required for nemo-toolkit; >=1.21 clears CVE-2026-34445/34446/27489 etc.
    "vulkan>=1.3.275.1,<2",
    "hf-xet>=1.1.5,<2",
    "hatchling>=1.28.0",
    "cmake>=4.2.0,<5",
    # 2.5.3 is last versions with cuda 12
    "nemo-toolkit[asr]==2.5.3; sys_platform != 'darwin' or platform_machine != 'x86_64'",
    "nltk>=3.9.4",  # CVE-2026-33230/33231 + PYSEC-2026-96/98/99
    "uroman>=1.3.1.1",
    "lhotse==1.32.1",
    "coverage==7.12.0",
    "certifi>=2025.11.12",
    "truststore>=0.10.0",
    "torchcodec>=0.9.0; sys_platform != 'darwin' or platform_machine != 'x86_64'",
    "torch>=2.2.2",
    "torchaudio>=2.2.2",
    "datasets>=4.4.1",
    "websockets>=12.0,<14",
    # ── Security floors for transitive deps (CVE mitigation, non-breaking) ──
    # These are pulled in by torch/nemo/datasets/aiohttp; pinning minimum
    # secure versions clears 56 advisories with no API breakage. See SECURITY.md.
    "aiohttp>=3.13.4",        # 18 advisories (CVE-2025-69223.. / CVE-2026-345xx)
    "requests>=2.33.0",       # CVE-2026-25645
    "pillow>=12.2.0",         # CVE-2026-25990/40192/42308..42311
    "werkzeug>=3.1.6",        # CVE-2026-21860/27199
    "idna>=3.15",             # CVE-2026-45409
    "protobuf>=5.29.6,<6",    # CVE-2026-0994
    "gitpython>=3.1.50",      # CVE-2026-42215/42284/44244 + GHSA
    "mako>=1.3.12",           # CVE-2026-44307
    "pygments>=2.20.0",       # CVE-2026-4539
    "filelock>=3.20.3",       # CVE-2025-68146 / CVE-2026-22701
    "marshmallow>=3.26.2,<4", # CVE-2025-68480 (stay on 3.x — 4.x is breaking)
    "jaraco.context>=6.1.0",  # CVE-2026-23949
    "virtualenv>=20.36.1,<21",# CVE-2026-22702 (stay on 20.x)
]
repository = "https://github.com/chidiwilliams/buzz"
documentation = "https://chidiwilliams.github.io/buzz/docs"

[project.scripts]
buzz = "buzz.buzz:main"

[dependency-groups]
dev = [
    "autopep8>=2.3.2,<3",
    "pyinstaller>=6.12.0,<7",
    "pyinstaller-hooks-contrib~=2025.1",
    "six>=1.16.0,<2",
    "pytest>=7.1.3,<8",
    "pytest-cov>=4.0.0,<5",
    "pytest-qt>=4.1.0,<5",
    "pytest-xvfb>=2.0.0,<3",
    "pytest-mock>=3.12.0,<4",
    "pytest-timeout>=2.4.0,<3",
    "pylint>=2.15.5,<3",
    "pre-commit>=2.20.0,<3",
    "pytest-benchmark>=4.0.0,<5",
    "ruff>=0.1.3,<0.2",
]
build = [
    "cmake>=4.2.0,<5",
    "polib>=1.2.0,<2",
]

[tool.uv]
index-strategy = "unsafe-best-match"
default-groups = [
    "dev",
    "build",
]

# Should be removed after nemo-toolkit update to 2.6.0
# Forcing a CUDA 12.9 compatable bitsandbytes version
# ARM Macs use 0.49.0, others use 0.47.0 (Intel Macs skip entirely via marker)
override-dependencies = [
  "bitsandbytes==0.49.0; sys_platform == 'darwin' and platform_machine == 'arm64'",
  "bitsandbytes==0.47.0; sys_platform != 'darwin'",
]

[tool.uv.sources]
torch = [
    { index = "PyPI", marker = "sys_platform == 'darwin'" },
    { index = "pytorch-cu129", marker = "sys_platform != 'darwin'" },
]
torchaudio = [
    { index = "PyPI", marker = "sys_platform == 'darwin'" },
    { index = "pytorch-cu129", marker = "sys_platform != 'darwin'" },
]

[[tool.uv.index]]
name = "nvidia"
url = "https://pypi.ngc.nvidia.com/"

[[tool.uv.index]]
name = "pytorch-cu129"
url = "https://download.pytorch.org/whl/cu129"

[[tool.uv.index]]
name = "PyPI"
url = "https://pypi.org/simple/"
default = true

[tool.hatch.metadata]
allow-direct-references = true

[tool.hatch.build.targets.sdist]
include = [
    "buzz",
    "buzz/whisper_cpp/*",
    "buzz/locale/*/LC_MESSAGES/buzz.mo",
    "demucs_repo",
    "whisper_diarization",
    "deepmultilingualpunctuation",
    "ctc_forced_aligner",
]

[tool.hatch.build.targets.wheel]
include = [
    "buzz",
    "buzz/whisper_cpp/*",
    "buzz/locale/*/LC_MESSAGES/buzz.mo",
    "whisper_diarization",
    "deepmultilingualpunctuation",
    "ctc_forced_aligner",
]
# Map demucs_repo/demucs to top-level demucs/ so 'import demucs' works
sources = {"demucs_repo/demucs" = "demucs"}

[tool.hatch.build.hooks.custom]

[build-system]
requires = ["hatchling", "cmake>=4.2.0,<5", "polib>=1.2.0,<2", "pybind11", "setuptools>=80.9.0"]
build-backend = "hatchling.build"

[tool.coverage.report]
exclude_also = [
    "if sys.platform == \"win32\":",
    "if platform.system\\(\\) == \"Windows\":",
    "if platform.system\\(\\) == \"Linux\":",
    "if platform.system\\(\\) == \"Darwin\":",
]

[tool.ruff]
exclude = [
    "**/whisper.cpp",
]