agentic-threat-hunting-framework 0.2.1__tar.gz → 0.2.2__tar.gz

{agentic_threat_hunting_framework-0.2.1/agentic_threat_hunting_framework.egg-info → agentic_threat_hunting_framework-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentic-threat-hunting-framework
-Version: 0.2.1
+Version: 0.2.2
 Summary: Agentic Threat Hunting Framework - Memory and AI for threat hunters
 Author-email: Sydney Marrone <athf@nebulock.io>
 Maintainer-email: Sydney Marrone <athf@nebulock.io>

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2/agentic_threat_hunting_framework.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentic-threat-hunting-framework
-Version: 0.2.1
+Version: 0.2.2
 Summary: Agentic Threat Hunting Framework - Memory and AI for threat hunters
 Author-email: Sydney Marrone <athf@nebulock.io>
 Maintainer-email: Sydney Marrone <athf@nebulock.io>

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/__version__.py

@@ -1,3 +1,3 @@
 """Version information for ATHF."""
 
-__version__ = "0.2.1"
+__version__ = "0.2.2"

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/commands/context.py

@@ -197,7 +197,7 @@ def _build_context(
 
 def _read_and_optimize(file_path: Path) -> str:
     """Read file and optimize for token efficiency."""
-    content = file_path.read_text()
+    content = file_path.read_text(encoding='utf-8')
 
     # First pass: Remove all control characters except tabs and newlines
     # Control characters are U+0000 through U+001F (0-31), except tab (9), LF (10), CR (13)
@@ -234,7 +234,7 @@ def _find_hunts_by_tactic(tactic: str) -> List[Path]:
     normalized_tactic = tactic.replace("-", " ").lower()
 
     for hunt_file in hunts_dir.glob("H-*.md"):
-        content = hunt_file.read_text()
+        content = hunt_file.read_text(encoding='utf-8')
 
         # Check YAML frontmatter for tactics field
         if content.startswith("---"):
@@ -263,7 +263,7 @@ def _find_hunts_by_platform(platform: str) -> List[Path]:
     normalized_platform = platform.lower()
 
     for hunt_file in hunts_dir.glob("H-*.md"):
-        content = hunt_file.read_text()
+        content = hunt_file.read_text(encoding='utf-8')
 
         # Check YAML frontmatter for platform field
         if content.startswith("---"):

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/commands/investigate.py

@@ -3,7 +3,7 @@
 import json
 from datetime import datetime
 from pathlib import Path
-from typing import Optional
+from typing import List, Optional, Tuple
 
 import click
 import yaml
@@ -82,8 +82,8 @@ def new(
     title: Optional[str],
     investigation_type: Optional[str],
     tags: Optional[str],
-    data_source: tuple[str, ...],
-    related_hunt: tuple[str, ...],
+    data_source: Tuple[str, ...],
+    related_hunt: Tuple[str, ...],
     investigator: Optional[str],
     non_interactive: bool,
 ) -> None:
@@ -200,9 +200,9 @@ def _render_investigation_template(
     title: str,
     investigator: str,
     investigation_type: str,
-    tags: list[str],
-    data_sources: list[str],
-    related_hunts: list[str],
+    tags: List[str],
+    data_sources: List[str],
+    related_hunts: List[str],
 ) -> str:
     """Render investigation template with provided values.
 
@@ -569,8 +569,8 @@ def validate(investigation_id: str) -> None:
 def promote(
     investigation_id: str,
     technique: Optional[str],
-    tactic: tuple[str, ...],
-    platform: tuple[str, ...],
+    tactic: Tuple[str, ...],
+    platform: Tuple[str, ...],
     status: str,
     non_interactive: bool,
 ) -> None:

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/commands/similar.py

@@ -121,7 +121,7 @@ def _get_hunt_text(hunt_id: str) -> Optional[str]:
     hunt_file = Path(f"hunts/{hunt_id}.md")
     if not hunt_file.exists():
         return None
-    return hunt_file.read_text()
+    return hunt_file.read_text(encoding='utf-8')
 
 
 def _find_similar_hunts(
@@ -156,7 +156,7 @@ def _find_similar_hunts(
         if exclude_hunt and hunt_id == exclude_hunt:
             continue
 
-        content = hunt_file.read_text()
+        content = hunt_file.read_text(encoding='utf-8')
         metadata = _extract_hunt_metadata(content)
 
         # Extract searchable text (weighted semantic sections)

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/core/attack_matrix.py

@@ -4,7 +4,7 @@ This module contains reference data for the MITRE ATT&CK Enterprise matrix,
 including tactic ordering and technique counts.
 """
 
-from typing import Dict, TypedDict
+from typing import Dict, List, TypedDict
 
 
 class TacticInfo(TypedDict):
@@ -122,7 +122,7 @@ def get_tactic_technique_count(tactic_key: str) -> int:
     return 0
 
 
-def get_sorted_tactics() -> list[str]:
+def get_sorted_tactics() -> List[str]:
     """Get all tactic keys sorted by ATT&CK matrix order.
 
     Returns:

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/core/hunt_manager.py

@@ -2,7 +2,7 @@
 
 import re
 from pathlib import Path
-from typing import Any, Dict, List, Optional
+from typing import Any, Dict, List, Optional, Set
 
 from athf.core.attack_matrix import ATTACK_TACTICS, TOTAL_TECHNIQUES, get_sorted_tactics
 from athf.core.hunt_parser import parse_hunt_file
@@ -261,7 +261,7 @@ class HuntManager:
                 "total_techniques": ATTACK_TACTICS[tactic_key]["technique_count"],
             }
 
-        all_unique_techniques: set[str] = set()
+        all_unique_techniques: Set[str] = set()
 
         for hunt in hunts:
             hunt_id = hunt.get("hunt_id", "UNKNOWN")

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/athf/core/investigation_parser.py

@@ -8,7 +8,7 @@ Investigation parser is simpler than hunt parser:
 
 import re
 from pathlib import Path
-from typing import Any, Dict, List
+from typing import Any, Dict, List, Tuple
 
 import yaml
 
@@ -85,7 +85,7 @@ class InvestigationParser:
 
         return content_without_fm.strip()
 
-    def validate(self) -> tuple[bool, List[str]]:
+    def validate(self) -> Tuple[bool, List[str]]:
         """Validate investigation structure.
 
         Lightweight validation - only checks minimal required fields.
@@ -140,7 +140,7 @@ def parse_investigation_file(file_path: Path) -> Dict[str, Any]:
     return parser.parse()
 
 
-def validate_investigation_file(file_path: Path) -> tuple[bool, List[str]]:
+def validate_investigation_file(file_path: Path) -> Tuple[bool, List[str]]:
     """Convenience function to validate an investigation file.
 
     Args:

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/docs/CHANGELOG.md

@@ -25,13 +25,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Security
 - None
 
+## [0.2.2] - 2024-12-17
+
+### Fixed
+- Type errors in `athf/core/attack_matrix.py` (added TypedDict for proper mypy checking)
+- Python 3.8 compatibility: `list[str]` → `List[str]` in `athf/core/attack_matrix.py`
+- Python 3.8 compatibility: `tuple[...]` → `Tuple[...]` in `athf/core/investigation_parser.py`
+- Python 3.8 compatibility: `tuple[...]`, `list[str]` → `Tuple[...]`, `List[str]` in `athf/commands/investigate.py`
+- Python 3.8 compatibility: `set[str]` → `Set[str]` in `athf/core/hunt_manager.py`
+- Python 3.8 compatibility: `int | str` → `Union[int, str]` in `athf/commands/env.py`
+- Windows UTF-8 encoding errors in `athf/commands/context.py` (3 instances) and `athf/commands/similar.py` (2 instances)
+- Test assertion errors in `tests/commands/test_env.py` for env info and activate commands
+- Mypy unused-ignore errors in `athf/commands/similar.py` (sklearn imports handled by --ignore-missing-imports flag)
+- CI/CD pipeline errors blocking builds on Python 3.8-3.12 across all platforms
+
 ## [0.2.1] - 2024-12-17
 
 ### Fixed
 - Type errors in `athf/core/attack_matrix.py` (added TypedDict for proper mypy checking)
-- Python 3.8 compatibility in `athf/commands/env.py` (Union syntax)
-- Removed unused type ignore comments in `athf/commands/similar.py`
-- CI/CD pipeline mypy errors blocking builds
+- Python 3.8 compatibility: `list[str]` → `List[str]` in `athf/core/attack_matrix.py`
+- Python 3.8 compatibility: `tuple[...]` → `Tuple[...]` in `athf/core/investigation_parser.py`
+- Python 3.8 compatibility: `tuple[...]`, `list[str]` → `Tuple[...]`, `List[str]` in `athf/commands/investigate.py`
+- Python 3.8 compatibility: `set[str]` → `Set[str]` in `athf/core/hunt_manager.py`
+- Python 3.8 compatibility: `int | str` → `Union[int, str]` in `athf/commands/env.py`
+- Windows UTF-8 encoding errors in `athf/commands/context.py` (3 instances) and `athf/commands/similar.py` (2 instances)
+- Test assertion errors in `tests/commands/test_env.py` for env info and activate commands
+- Mypy unused-ignore errors in `athf/commands/similar.py` (sklearn imports handled by --ignore-missing-imports flag)
+- CI/CD pipeline errors blocking builds on Python 3.8-3.12 across all platforms
 
 ## [0.2.0] - 2024-12-17
 

{agentic_threat_hunting_framework-0.2.1 → agentic_threat_hunting_framework-0.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentic-threat-hunting-framework"
-version = "0.2.1"
+version = "0.2.2"
 description = "Agentic Threat Hunting Framework - Memory and AI for threat hunters"
 readme = {file = "README.md", content-type = "text/markdown"}
 requires-python = ">=3.8"