attacklm 0.9.2__tar.gz → 0.9.8__tar.gz

attacklm-0.9.8/.github/workflows/ci.yml

@@ -0,0 +1,33 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev,extract]"
+          pip install torch --index-url https://download.pytorch.org/whl/cpu
+
+      - name: Run tests
+        run: pytest tests/ -v
+
+      - name: Lint
+        run: ruff check src/ tests/ scripts/
+        continue-on-error: true

attacklm-0.9.8/.github/workflows/release.yml

@@ -0,0 +1,86 @@
+# AttackLM — Publish to PyPI
+#
+# Trigger: push a tag matching v* (e.g., git tag v0.9.4 && git push origin v0.9.4)
+#
+# Uses PyPI Trusted Publishing (OIDC). The repository is configured as a
+# trusted publisher on PyPI with environment name "pypi".
+# No API tokens or passwords are stored in GitHub secrets.
+
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  validate:
+    name: Validate version
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate version
+        run: |
+          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
+          PKG_VERSION=$(grep -oP '__version__\s*=\s*"\K[^"]+' src/attacklm/__version__.py)
+          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
+            echo "Tag v${TAG_VERSION} != package __version__ ${PKG_VERSION}"
+            exit 1
+          fi
+          echo "Version $PKG_VERSION validated"
+
+  test:
+    name: Run tests
+    needs: validate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install
+        run: |
+          pip install -e ".[dev,extract]"
+          pip install torch --index-url https://download.pytorch.org/whl/cpu
+
+      - name: Test
+        run: pytest tests/ -v
+
+  build:
+    name: Build distribution
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install build
+        run: pip install build
+
+      - name: Build
+        run: python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

{attacklm-0.9.2 → attacklm-0.9.8}/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## [0.9.5] — 2026-07-05 — CI/CD, test fixes, CLI tests, GitHub Releases
+
+### Added
+- **GitHub Actions CI**: `.github/workflows/ci.yml` — runs on push/PR to main, matrix across Python 3.11/3.12/3.13, full test suite + ruff lint
+- **PyPI publish workflow**: `.github/workflows/release.yml` — OIDC Trusted Publishing, validate → test → build → publish pipeline on tag push
+- **CLI subcommand tests**: `tests/test_cli.py` — 33 tests covering all 8 subcommands (train, init, balance, build, infer, eval, demo, gui) plus edge cases
+- **GitHub Releases**: Created releases for v0.8.3 through v0.9.4 with full CHANGELOG notes
+
+### Fixed
+- **11 test failures resolved** (414 tests passing, up from 333):
+  - `test_eval_loader.py`: Fixed mock structure (transformers.utils, peft), missing adapter_path arg, CWD pollution, empty string handling
+  - `test_eval_retention.py`: Fixed CWD capture in test_adapter_relative_path
+  - `test_memory_optimization.py`: Added transformers mock before train_template import
+  - `_eval_loader.py`: Empty model_id_or_path now raises ValueError
+
+---
+
+## [0.9.3] — 2026-07-04 — Remove deprecated hyphenated commands, --compile + QLoRA guard
+
+### Removed
+- **Deprecated hyphenated commands**: All 22 `attacklm-*` console scripts removed from `pyproject.toml` and `cli.py` after the v0.8.x deprecation window. Use `attacklm <subcommand>` instead.
+  - `attacklm-train` → `attacklm train`
+  - `attacklm-train-all` → `attacklm train --all`
+  - `attacklm-train-lora` → `attacklm train`
+  - `attacklm-hpo` → `attacklm train --hpo`
+  - `attacklm-extract` → `attacklm init --extract-only`
+  - `attacklm-buckets` → `attacklm init --buckets-only`
+  - `attacklm-attribute` → `attacklm init --attribute-only`
+  - `attacklm-clone` → `attacklm init --clone-only`
+  - `attacklm-init` → `attacklm init`
+  - `attacklm-balance` → `attacklm balance`
+  - `attacklm-merge` → `attacklm build --merge-only`
+  - `attacklm-gguf` → `attacklm build --gguf-only`
+  - `attacklm-build` → `attacklm build`
+  - `attacklm-infer` → `attacklm infer`
+  - `attacklm-demo` → `attacklm demo`
+  - `attacklm-eval` → `attacklm eval`
+  - `attacklm-collect-ref` → `attacklm eval --collect-ref`
+  - `attacklm-score` → `attacklm eval --score`
+  - `attacklm-compare` → `attacklm eval --compare`
+  - `attacklm-golden` → `attacklm eval --golden`
+  - `attacklm-pipeline` → `attacklm pipeline`
+- **Deprecated wrapper code**: Removed `_deprecated()` helper, `_DEPRECATED_MSG` constant, and all 19 `main_*` wrapper functions from `src/attacklm/cli.py`
+
+### Added
+- **`--compile` + QLoRA incompatibility guard**: `train_template.py` now exits with a clear error if `--compile` is used with default 4-bit QLoRA (BitsAndBytes NF4). torch.compile is incompatible with quantized models. Users are directed to use `--use-galore` or `--use-deepspeed` for full-parameter training with compilation.
+- **5 new tests** in `test_memory_optimization.py` verifying the compile+QLoRA guard and compatibility with GaLore, DeepSpeed, and Unsloth
+
+### Changed
+- **All script references updated**: 30+ references across 10 script files, 5 extractors, GUI, and pipeline config updated from hyphenated to subcommand form
+- **Documentation**: `CONTRIBUTING.md` and `EVALUATION.md` updated with new command forms
+
+---
+
 ## [0.9.0] — 2026-07-01 — Memory optimization: DeepSpeed, torch.compile, LOMO
 
 ### Added

{attacklm-0.9.2 → attacklm-0.9.8}/CONTRIBUTING.md

@@ -94,7 +94,7 @@ Buckets live in `data/datasets/buckets/<bucket_name>/` and contain a
 uv pip install -e ".[all,dev]"
 
 # Run a sanity check on the training pipeline
-attacklm-train \
+attacklm train \
   --dataset data/datasets/combined/combined_*.jsonl \
   --output /tmp/test-output --dry-run
 ```

{attacklm-0.9.2 → attacklm-0.9.8}/EVALUATION.md

@@ -64,7 +64,7 @@ For each candidate, run these 4 patterns in order:
 
 ### Step 1: Golden Vectors (Pattern 2) — Fast Regression Gate
 
-**Script**: `python scripts/golden_vectors.py validate ...`
+**Command**: `attacklm eval --golden ...`
 
 **Duration**: < 2 minutes
 
@@ -77,7 +77,7 @@ For each candidate, run these 4 patterns in order:
 
 ### Step 2: Reference Scoring (Pattern 1) — Quality Comparison
 
-**Script**: `python scripts/score_candidates.py ...` then `python scripts/compare_scores.py ...`
+**Command**: `attacklm eval --collect-ref ...` then `attacklm eval --compare ...`
 
 **Duration**: ~15 minutes
 
@@ -87,7 +87,7 @@ For each candidate, run these 4 patterns in order:
 
 ### Step 3: Domain Benchmark (Pattern 3) — Capability Evaluation
 
-**Script**: `python scripts/domain_bench.py ...`
+**Command**: `attacklm eval --score ...`
 
 **Duration**: ~10 minutes
 
@@ -100,7 +100,7 @@ For each candidate, run these 4 patterns in order:
 
 ### Step 4: Speed Benchmark (Pattern 4) — Performance Comparison
 
-**Script**: `python scripts/speed_bench.py ...`
+**Command**: `attacklm eval --speed ...` (or via `scripts/speed_bench.py`)
 
 **Duration**: ~5 minutes
 
@@ -144,13 +144,13 @@ When iterating quickly (e.g., testing hyperparameter changes), run only:
 
 ```bash
 # Fast gate: 2 minutes
-python scripts/golden_vectors.py validate \
+attacklm eval --golden \
   --base-model <model> --adapter <adapter> \
   --golden data/golden/vectors.json \
   --output /tmp/golden_check.json
 
 # If PASS, run domain benchmark: 10 minutes
-python scripts/domain_bench.py \
+attacklm eval --score \
   --base-model <model> --adapter <adapter> \
   --questions data/bench/questions.jsonl \
   --output /tmp/bench_check.json

{attacklm-0.9.2 → attacklm-0.9.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: attacklm
-Version: 0.9.2
+Version: 0.9.8
 Summary: A high-performance fine-tuning pipeline (QLoRA, GaLore, Q-GaLore, Spectrum, PiSSA, DeepSpeed) for creating MITRE ATT&CK-grounded security AI assistants
 Project-URL: Homepage, https://github.com/Veedubin/AttackLM
 Project-URL: Repository, https://github.com/Veedubin/AttackLM
@@ -94,6 +94,7 @@ Provides-Extra: dev
 Requires-Dist: ipython; extra == 'dev'
 Requires-Dist: mypy; extra == 'dev'
 Requires-Dist: pytest; extra == 'dev'
+Requires-Dist: rich; extra == 'dev'
 Requires-Dist: ruff; extra == 'dev'
 Requires-Dist: scipy>=1.11; extra == 'dev'
 Provides-Extra: eval

{attacklm-0.9.2 → attacklm-0.9.8}/attacklm-gui/src/attacklm_gui/screens/command_forms.py

@@ -1,7 +1,6 @@
 """Simpler command form screens for non-training AttackLM commands.
 
-Updated for v0.8.0 unified CLI: uses 'attacklm <subcommand>' format
-instead of the old hyphenated commands.
+Uses the unified 'attacklm <subcommand>' CLI format (v0.8.0+).
 """
 
 from __future__ import annotations
@@ -329,7 +328,7 @@ class EvalFormScreen(_BaseCommandScreen):
 
 
 class PipelineFormScreen(_BaseCommandScreen):
-    """Run the training pipeline using 'attacklm-pipeline' (unchanged)."""
+    """Run the training pipeline using 'attacklm pipeline'."""
 
     def compose(self) -> ComposeResult:
         with Container(id="cmd-container"):
@@ -345,7 +344,7 @@ class PipelineFormScreen(_BaseCommandScreen):
             self.app.pop_screen()
         elif event.button.id == "btn-run":
             values = self._get_values()
-            cmd = ["attacklm-pipeline"]
+            cmd = ["attacklm", "pipeline"]
             if values.get("config"):
                 cmd.extend(["--config", values["config"]])
             import asyncio

{attacklm-0.9.2 → attacklm-0.9.8}/attacklm-gui/src/attacklm_gui/screens/train_form.py

@@ -319,7 +319,7 @@ class TrainFormScreen(Screen):
         return values
 
     def _build_command(self, values: dict) -> list[str]:
-        """Build the attacklm-train command from form values."""
+        """Build the attacklm train command from form values."""
         cmd = ["attacklm", "train"]
 
         # Required

{attacklm-0.9.2 → attacklm-0.9.8}/pipeline.example.yaml

@@ -1,7 +1,7 @@
 # AttackLM Training Pipeline — Example Configuration
 # 
 # Usage:
-#   attacklm-pipeline --config pipeline.example.yaml
+#   attacklm pipeline --config pipeline.example.yaml
 #
 # Each job runs sequentially: train → merge → gguf → install.
 # If a stage fails, the pipeline skips to the next job.

{attacklm-0.9.2 → attacklm-0.9.8}/pyproject.toml

@@ -209,6 +209,7 @@ dev = [
     "mypy",
     "ipython",
     "scipy>=1.11",  # needed for eval tests (Spearman correlation)
+    "rich",          # needed by train_template.py (imported in tests)
 ]
 eval = [
     "scipy>=1.11",  # for Spearman correlation in golden_vectors.py
@@ -226,45 +227,21 @@ all-rocm = ["attacklm[train-rocm,extract,convert]"]
 
 # ── Console script entry points ───────────────────────────────────────────────
 #
-# v0.8.0+: The unified ``attacklm`` command (subcommand-based) is the primary
-# interface.  The old hyphenated commands are DEPRECATED but kept for one
-# release cycle.  They print a deprecation warning and delegate to the new
-# subcommand.  They will be removed in v0.9.0.
+# v0.8.0+ introduced the unified ``attacklm`` command (subcommand-based).
+# The old hyphenated commands (attacklm-train, attacklm-merge, etc.) were
+# deprecated in v0.8.x and removed in v0.9.3.
 
 [project.scripts]
-# New unified CLI
+# Unified CLI (the only entry point since v0.9.3)
 attacklm = "attacklm.cli:main"
 
-# Deprecated (v0.8.x) — to be removed in v0.9.0
-attacklm-train = "attacklm.cli:main_train"
-attacklm-train-all = "attacklm.cli:main_train_all"
-attacklm-hpo = "attacklm.cli:main_hpo"
-attacklm-infer = "attacklm.cli:main_infer"
-attacklm-merge = "attacklm.cli:main_merge"
-attacklm-gguf = "attacklm.cli:main_gguf"
-attacklm-demo = "attacklm.cli:main_demo"
-attacklm-extract = "attacklm.cli:main_extract"
-attacklm-buckets = "attacklm.cli:main_buckets"
-attacklm-attribute = "attacklm.cli:main_attribute"
-attacklm-clone = "attacklm.cli:main_clone"
-attacklm-init = "attacklm.cli:main_init"
-attacklm-balance = "attacklm.cli:main_balance"
-attacklm-build = "attacklm.cli:main_build"
-attacklm-train-lora = "attacklm.cli:main_train_lora"
-attacklm-eval = "attacklm.cli:main_eval"
-attacklm-collect-ref = "attacklm.cli:main_collect_ref"
-attacklm-score = "attacklm.cli:main_score"
-attacklm-compare = "attacklm.cli:main_compare"
-attacklm-golden = "attacklm.cli:main_golden"
-attacklm-pipeline = "attacklm.scripts.pipeline:main"
-
 # ── Hatch build configuration ─────────────────────────────────────────────────
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/attacklm"]
 
 # Include scripts/ in the wheel so CLI entry points can find them.
-# Without this, `attacklm-train-all` etc. fail with "script not found"
+# Without this, the unified ``attacklm`` command fails with "script not found"
 # because _SCRIPTS_DIR resolves to site-packages/scripts/ which is empty.
 # scripts/ is ~200KB of Python — negligible for the wheel.
 [tool.hatch.build.targets.wheel.force-include]

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/_eval_loader.py

@@ -50,7 +50,7 @@ def resolve_model_path(model_id_or_path: str) -> str:
     Otherwise, return it as-is (assumed to be an HF Hub model ID).
     """
     if not model_id_or_path:
-        return model_id_or_path
+        raise ValueError("model_id_or_path must not be empty")
     p = model_id_or_path.rstrip("/")
     is_path = (
         p.startswith(("/", "./", "../", "~/"))

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/balance_buckets.py

@@ -67,9 +67,9 @@ Write a balanced JSONL to data/datasets/balanced/:
     python scripts/balance_buckets.py --profile 7b-128gb \\
         --output data/datasets/balanced/balanced_7b-128gb.jsonl
 
-Then pass that file to attacklm-train:
+Then pass that file to attacklm train:
 
-    attacklm-train --dataset data/datasets/balanced/balanced_7b-128gb.jsonl \\
+    attacklm train --dataset data/datasets/balanced/balanced_7b-128gb.jsonl \\
                    --output models/attacklm-7b-128gb \\
                    --base-model huihui-ai/Qwen2.5-Coder-7B-Instruct-abliterated
 
@@ -104,7 +104,7 @@ from pathlib import Path
 from typing import Iterable
 
 # Reuse the existing bucket plumbing.
-# When invoked as a console script (`attacklm-balance`), the working
+# When invoked as a console script (`attacklm balance`), the working
 # directory may not be the project root, so we need to make sure
 # sibling scripts in this directory are importable. Same pattern
 # as scripts/train_template.py.
@@ -1025,7 +1025,7 @@ def main(argv: list[str] | None = None) -> int:
     print(f"Wrote {len(selected):,} pairs ({size_mb:.1f} MB) to {args.output}")
     print(
         f"\nNext step:\n"
-        f"  attacklm-train --dataset {args.output} \\\n"
+        f"  attacklm train --dataset {args.output} \\\n"
         f"                 --output models/attacklm-{args.profile.replace('-', '_')}_<timestamp> \\\n"
         f"                 --base-model huihui-ai/Qwen2.5-Coder-3B-Instruct-abliterated"
     )

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/build.py

@@ -7,12 +7,12 @@ manifest at models/built/{name}_{timestamp}/.
 
 This replaces the 3-command shell pipeline:
 
-    attacklm-merge --base X --adapter Y --output Z \\
-      && attacklm-gguf --input Z --install-lmstudio
+    attacklm build --merge-only -- --base X --adapter Y --output Z \\
+      && attacklm build --gguf-only -- --input Z --install-lmstudio
 
 with a single command:
 
-    attacklm-build --adapter models/attacklm-3b_16g \\
+    attacklm build --adapter models/attacklm-3b_16g \\
                    --base ./uncensored/ \\
                    --name attacklm-3b-16g \\
                    --install-lmstudio
@@ -29,24 +29,24 @@ orchestrator is just glue.
 Usage:
 
     # Full pipeline: merge + GGUF + LM Studio
-    attacklm-build --adapter models/attacklm-3b_16g \\
+    attacklm build --adapter models/attacklm-3b_16g \\
                    --base ./uncensored/ \\
                    --name attacklm-3b-16g
 
     # Skip LM Studio install, drop the GGUF in models/gguf/ only
-    attacklm-build --adapter models/attacklm-3b_16g \\
+    attacklm build --adapter models/attacklm-3b_16g \\
                    --base ./uncensored/ \\
                    --name attacklm-3b-16g \\
                    --no-install-lmstudio
 
     # Register with Ollama too
-    attacklm-build --adapter models/attacklm-3b_16g \\
+    attacklm build --adapter models/attacklm-3b_16g \\
                    --base ./uncensored/ \\
                    --name attacklm-3b-16g \\
                    --register-ollama
 
     # Use an already-merged model (skip the merge step)
-    attacklm-build --merged models/merged/attacklm-3b-16g \\
+    attacklm build --merged models/merged/attacklm-3b-16g \\
                    --name attacklm-3b-16g
 """
 
@@ -106,7 +106,7 @@ def main(argv: list[str] | None = None) -> int:
         "--adapter",
         type=Path,
         default=None,
-        help="Path to the LoRA adapter directory (output of attacklm-train).",
+        help="Path to the LoRA adapter directory (output of ``attacklm train``).",
     )
     parser.add_argument(
         "--merged",

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/convert_to_gguf.py

@@ -7,13 +7,13 @@ Step 2: llama-quantize → Q4_K_M
 
 Usage:
     # Convert all merged models:
-    attacklm-gguf
+    attacklm build --gguf-only
 
     # Convert a single model:
-    attacklm-gguf --input models/merged/attacklm
+    attacklm build --gguf-only -- --input models/merged/attacklm
 
     # Convert and install to LM Studio:
-    attacklm-gguf --install-lmstudio
+    attacklm build --gguf-only -- --install-lmstudio
 """
 
 import argparse
@@ -95,7 +95,7 @@ def _is_lora_adapter(model_dir: Path) -> bool:
     over from a previous training run), so the old "needs config.json" guard
     let it through and llama.cpp's converter then crashed on the wrong
     architecture. This check is explicit: if adapter_config.json says
-    PEFT_TYPE_LORA, refuse with a pointer to attacklm-merge.
+    PEFT_TYPE_LORA, refuse with a pointer to ``attacklm build --merge-only``.
     """
     ac = model_dir / "adapter_config.json"
     if not ac.exists():
@@ -204,7 +204,7 @@ def main() -> None:
         # from a previous run, so the old "needs config.json" guard passed
         # it through and llama.cpp's converter then crashed on the wrong
         # architecture with `Failed to detect model architecture`. Detect
-        # PEFT adapters early and point users at attacklm-merge.
+        # PEFT adapters early and point users at ``attacklm build --merge-only``.
         if _is_lora_adapter(input_path):
             # Try to read the auto-detected base from state.json (v0.1.6+)
             # or adapter_config.json (v0.1.5 and earlier) so the hint
@@ -237,11 +237,11 @@ def main() -> None:
                 f"  Need:  a directory with config.json + *.safetensors (full merged weights)"
             )
             print(f"\nFix: merge the adapter into the base first, then convert.")
-            print(f"  attacklm-merge --adapter {args.input} \\")
+            print(f"  attacklm build --merge-only -- --adapter {args.input} \\")
             print(f"                  --base {suggested_base} \\")
             print(f"                  --output models/merged/{input_path.name}")
             print(
-                f"  attacklm-gguf --input models/merged/{input_path.name}"
+                f"  attacklm build --gguf-only -- --input models/merged/{input_path.name}"
                 + (" --install-lmstudio" if args.install_lmstudio else "")
             )
             sys.exit(1)
@@ -250,7 +250,9 @@ def main() -> None:
         ):
             print(f"\nERROR: {args.input} is not a valid merged model directory")
             print("Expected a directory containing config.json and *.safetensors")
-            print("If this is a LoRA adapter, run `attacklm-merge` first (see above).")
+            print(
+                "If this is a LoRA adapter, run ``attacklm build --merge-only`` first (see above)."
+            )
             sys.exit(1)
         models = [input_path]
     else:
@@ -258,9 +260,9 @@ def main() -> None:
         if not models:
             print(f"\nERROR: No merged models found in {MERGED_DIR}")
             print(
-                "Run: attacklm-merge --adapter models/attacklm-single --output models/merged/attacklm"
+                "Run: attacklm build --merge-only -- --adapter models/attacklm-single --output models/merged/attacklm"
             )
-            print("  or: attacklm-merge --merge-all")
+            print("  or: attacklm build --merge-only -- --merge-all")
             sys.exit(1)
 
     GGUF_DIR.mkdir(parents=True, exist_ok=True)

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/extract_elastic_rules.py

@@ -278,7 +278,7 @@ def main() -> int:
 
     if not RULES_DIR.exists():
         print(f"Elastic rules directory not found: {RULES_DIR}", file=sys.stderr)
-        print("Run attacklm-clone or attacklm-init first.", file=sys.stderr)
+        print("Run attacklm init --clone-only or attacklm init first.", file=sys.stderr)
         return 1
 
     toml_files = sorted(RULES_DIR.rglob("*.toml"))

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/extract_mordor.py

@@ -331,7 +331,7 @@ def main() -> int:
     scenarios = find_scenarios()
     if not scenarios:
         print(f"No Mordor scenarios found in {MORDOR_DIR}", file=sys.stderr)
-        print("Run attacklm-clone or attacklm-init first.", file=sys.stderr)
+        print("Run attacklm init --clone-only or attacklm init first.", file=sys.stderr)
         return 1
 
     if args.max_files > 0:

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/extract_sigma_defensive.py

@@ -239,7 +239,7 @@ def main() -> int:
 
     if not RULES_DIR.exists():
         print(f"Sigma rules directory not found: {RULES_DIR}", file=sys.stderr)
-        print("Run attacklm-clone or attacklm-init first.", file=sys.stderr)
+        print("Run attacklm init --clone-only or attacklm init first.", file=sys.stderr)
         return 1
 
     yml_files = sorted(RULES_DIR.rglob("*.yml"))

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/extract_splunk_content.py

@@ -240,7 +240,7 @@ def main() -> int:
         print(
             f"Splunk detections directory not found: {DETECTIONS_DIR}", file=sys.stderr
         )
-        print("Run attacklm-clone or attacklm-init first.", file=sys.stderr)
+        print("Run attacklm init --clone-only or attacklm init first.", file=sys.stderr)
         return 1
 
     yml_files = sorted(DETECTIONS_DIR.rglob("*.yml"))

{attacklm-0.9.2 → attacklm-0.9.8}/scripts/extract_threathunter_playbook.py

@@ -230,7 +230,7 @@ def main() -> int:
 
     if not PLAYBOOKS_DIR.exists():
         print(f"Playbooks directory not found: {PLAYBOOKS_DIR}", file=sys.stderr)
-        print("Run attacklm-clone or attacklm-init first.", file=sys.stderr)
+        print("Run attacklm init --clone-only or attacklm init first.", file=sys.stderr)
         return 1
 
     md_files = sorted(PLAYBOOKS_DIR.rglob("*.md"))