attacklm 0.9.4__tar.gz → 0.9.8__tar.gz

attacklm-0.9.8/.github/workflows/ci.yml

@@ -0,0 +1,33 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev,extract]"
+          pip install torch --index-url https://download.pytorch.org/whl/cpu
+
+      - name: Run tests
+        run: pytest tests/ -v
+
+      - name: Lint
+        run: ruff check src/ tests/ scripts/
+        continue-on-error: true

attacklm-0.9.8/.github/workflows/release.yml

@@ -0,0 +1,86 @@
+# AttackLM — Publish to PyPI
+#
+# Trigger: push a tag matching v* (e.g., git tag v0.9.4 && git push origin v0.9.4)
+#
+# Uses PyPI Trusted Publishing (OIDC). The repository is configured as a
+# trusted publisher on PyPI with environment name "pypi".
+# No API tokens or passwords are stored in GitHub secrets.
+
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  validate:
+    name: Validate version
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate version
+        run: |
+          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
+          PKG_VERSION=$(grep -oP '__version__\s*=\s*"\K[^"]+' src/attacklm/__version__.py)
+          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
+            echo "Tag v${TAG_VERSION} != package __version__ ${PKG_VERSION}"
+            exit 1
+          fi
+          echo "Version $PKG_VERSION validated"
+
+  test:
+    name: Run tests
+    needs: validate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install
+        run: |
+          pip install -e ".[dev,extract]"
+          pip install torch --index-url https://download.pytorch.org/whl/cpu
+
+      - name: Test
+        run: pytest tests/ -v
+
+  build:
+    name: Build distribution
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install build
+        run: pip install build
+
+      - name: Build
+        run: python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

{attacklm-0.9.4 → attacklm-0.9.8}/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.9.5] — 2026-07-05 — CI/CD, test fixes, CLI tests, GitHub Releases
+
+### Added
+- **GitHub Actions CI**: `.github/workflows/ci.yml` — runs on push/PR to main, matrix across Python 3.11/3.12/3.13, full test suite + ruff lint
+- **PyPI publish workflow**: `.github/workflows/release.yml` — OIDC Trusted Publishing, validate → test → build → publish pipeline on tag push
+- **CLI subcommand tests**: `tests/test_cli.py` — 33 tests covering all 8 subcommands (train, init, balance, build, infer, eval, demo, gui) plus edge cases
+- **GitHub Releases**: Created releases for v0.8.3 through v0.9.4 with full CHANGELOG notes
+
+### Fixed
+- **11 test failures resolved** (414 tests passing, up from 333):
+  - `test_eval_loader.py`: Fixed mock structure (transformers.utils, peft), missing adapter_path arg, CWD pollution, empty string handling
+  - `test_eval_retention.py`: Fixed CWD capture in test_adapter_relative_path
+  - `test_memory_optimization.py`: Added transformers mock before train_template import
+  - `_eval_loader.py`: Empty model_id_or_path now raises ValueError
+
+---
+
 ## [0.9.3] — 2026-07-04 — Remove deprecated hyphenated commands, --compile + QLoRA guard
 
 ### Removed

{attacklm-0.9.4 → attacklm-0.9.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: attacklm
-Version: 0.9.4
+Version: 0.9.8
 Summary: A high-performance fine-tuning pipeline (QLoRA, GaLore, Q-GaLore, Spectrum, PiSSA, DeepSpeed) for creating MITRE ATT&CK-grounded security AI assistants
 Project-URL: Homepage, https://github.com/Veedubin/AttackLM
 Project-URL: Repository, https://github.com/Veedubin/AttackLM
@@ -94,6 +94,7 @@ Provides-Extra: dev
 Requires-Dist: ipython; extra == 'dev'
 Requires-Dist: mypy; extra == 'dev'
 Requires-Dist: pytest; extra == 'dev'
+Requires-Dist: rich; extra == 'dev'
 Requires-Dist: ruff; extra == 'dev'
 Requires-Dist: scipy>=1.11; extra == 'dev'
 Provides-Extra: eval

{attacklm-0.9.4 → attacklm-0.9.8}/pyproject.toml

@@ -209,6 +209,7 @@ dev = [
     "mypy",
     "ipython",
     "scipy>=1.11",  # needed for eval tests (Spearman correlation)
+    "rich",          # needed by train_template.py (imported in tests)
 ]
 eval = [
     "scipy>=1.11",  # for Spearman correlation in golden_vectors.py

{attacklm-0.9.4 → attacklm-0.9.8}/scripts/_eval_loader.py

@@ -50,7 +50,7 @@ def resolve_model_path(model_id_or_path: str) -> str:
     Otherwise, return it as-is (assumed to be an HF Hub model ID).
     """
     if not model_id_or_path:
-        return model_id_or_path
+        raise ValueError("model_id_or_path must not be empty")
     p = model_id_or_path.rstrip("/")
     is_path = (
         p.startswith(("/", "./", "../", "~/"))

attacklm-0.9.8/src/attacklm/__version__.py

@@ -0,0 +1 @@
+__version__ = "0.9.8"

{attacklm-0.9.4 → attacklm-0.9.8}/tests/test_balance_buckets.py

@@ -203,25 +203,30 @@ class TestOutputPathResolution(unittest.TestCase):
 
     def test_no_timestamp_with_completed_dir_refuses(self):
         """--no-timestamp refuses to clobber a completed run."""
-        # models/attacklm-3b_16g is a real completed run in the repo
-        with self.assertRaises(FileExistsError) as ctx:
-            self.train_template.resolve_output_path(
-                "models/attacklm-3b_16g",
-                no_timestamp=True,
-                force=False,
-            )
-        self.assertIn("Refusing to clobber", str(ctx.exception))
+        with tempfile.TemporaryDirectory() as tmp:
+            model_dir = Path(tmp) / "completed_model"
+            model_dir.mkdir()
+            (model_dir / "state.json").write_text('{"completed": true}')
+            with self.assertRaises(FileExistsError) as ctx:
+                self.train_template.resolve_output_path(
+                    str(model_dir),
+                    no_timestamp=True,
+                    force=False,
+                )
+            self.assertIn("Refusing to clobber", str(ctx.exception))
 
     def test_no_timestamp_with_force_allows(self):
         """--no-timestamp + --force on a completed run is allowed."""
-        out = self.train_template.resolve_output_path(
-            "models/attacklm-3b_16g",
-            no_timestamp=True,
-            force=True,
-        )
-        self.assertTrue(
-            out.endswith("models/attacklm-3b_16g") or "attacklm-3b_16g" in out
-        )
+        with tempfile.TemporaryDirectory() as tmp:
+            model_dir = Path(tmp) / "completed_model"
+            model_dir.mkdir()
+            (model_dir / "state.json").write_text('{"completed": true}')
+            out = self.train_template.resolve_output_path(
+                str(model_dir),
+                no_timestamp=True,
+                force=True,
+            )
+            self.assertTrue(out.endswith("completed_model") or "completed_model" in out)
 
 
 class TestCapResolution(unittest.TestCase):