Metadata-Version: 2.4
Name: supply-chain-security-academy
Version: 0.1.0
Summary: Enterprise security training platform for supply chain threats
Requires-Python: >=3.11
Requires-Dist: aiosqlite>=0.19.0
Requires-Dist: alembic>=1.13.1
Requires-Dist: fastapi>=0.109.0
Requires-Dist: httpx>=0.26.0
Requires-Dist: jinja2>=3.1.3
Requires-Dist: passlib[bcrypt]>=1.7.4
Requires-Dist: pydantic-settings>=2.1.0
Requires-Dist: pydantic>=2.5.3
Requires-Dist: pyjwt>=2.8.0
Requires-Dist: python-jose[cryptography]>=3.3.0
Requires-Dist: python-multipart>=0.0.6
Requires-Dist: slack-sdk>=3.26.2
Requires-Dist: sqlalchemy>=2.0.25
Requires-Dist: stripe>=7.11.0
Requires-Dist: uvicorn[standard]>=0.27.0
Provides-Extra: dev
Requires-Dist: black>=24.1.1; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23.3; extra == 'dev'
Requires-Dist: pytest-cov>=4.1.0; extra == 'dev'
Requires-Dist: pytest>=7.4.4; extra == 'dev'
Requires-Dist: ruff>=0.1.14; extra == 'dev'
Description-Content-Type: text/markdown

# Supply Chain Security Academy

Transform your team into supply chain security experts with enterprise-grade training and compliance reporting.

## What is this?

Supply Chain Security Academy is a B2B SaaS platform that gamifies npm supply chain security training for enterprise teams. Built on proven game mechanics from npm-threat-detector-game, it adds team management, Slack integration, and SOC2-compliant reporting—purpose-built for security teams during procurement windows opened by real-world threats like the Axios NPM breach.

## Features

- **Team Management** – Invite users, track progress per seat, manage roles and permissions
- **Interactive Challenges** – 20+ hands-on npm threat detection scenarios and best practices
- **Admin Dashboard** – Real-time completion rates, time-per-challenge analytics, and team leaderboards
- **Slack Integration** – Weekly challenge notifications and achievement celebrations in your workspace
- **Compliance Exports** – SOC2/ISO27001-ready PDF reports documenting training completion hours
- **Flexible Pricing** – Freemium model with free tier (5 challenges, single-player) and Pro tier ($49/seat/year)
- **Stripe Checkout** – Secure billing for individuals and teams

## Quick Start

### Installation

```bash
# Clone the repository
git clone <repo-url>
cd supply-chain-security-academy

# Install dependencies
pip install -e .

# Copy environment template
cp .env.example .env

# Configure your credentials
# Update .env with database URL, Stripe keys, Slack bot token, etc.

# Initialize database
python -m backend.database init

# Run the server
python -m backend.main
```

### Environment Setup

Create a `.env` file with:
```
DATABASE_URL=postgresql://user:password@localhost/academy
STRIPE_SECRET_KEY=sk_...
SLACK_BOT_TOKEN=xoxb-...
JWT_SECRET=your-secret-key
ENVIRONMENT=development
```

## Usage Examples

### Create a Team Account
```bash
POST /api/teams
{
  "name": "Acme Security",
  "email": "security@acme.com",
  "seats": 5
}
```

### Invite Team Members
```bash
POST /api/teams/{team_id}/invitations
{
  "email": "engineer@acme.com",
  "role": "player"
}
```

### Generate Compliance Report
```bash
GET /api/teams/{team_id}/compliance-report?format=pdf
```

### Configure Slack Integration
```bash
POST /api/integrations/slack
{
  "team_id": "team_123",
  "bot_token": "xoxb-...",
  "channel": "#security-training"
}
```

## Tech Stack

- **Backend**: Python 3.11, FastAPI
- **Database**: PostgreSQL
- **Authentication**: JWT
- **Payments**: Stripe
- **Integrations**: Slack API
- **Compliance**: SOC2-ready audit logging
- **ORM**: SQLAlchemy

## License

MIT