ballpython 2.0.3__tar.gz → 2.0.5__tar.gz

{ballpython-2.0.3 → ballpython-2.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ballpython
-Version: 2.0.3
+Version: 2.0.5
 Summary: The Ultimate Static Python Intelligence, Healing, Type Verification, and Security Suite
 Author: Developer
 License-Expression: MIT
@@ -78,7 +78,7 @@ Add `ballpython` to your `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/moonrox420/ball-python
-    rev: v2.0.3
+    rev: v2.0.5
     hooks:
       - id: pycleaner
         args: ["check"]

{ballpython-2.0.3 → ballpython-2.0.5}/README.md

@@ -59,7 +59,7 @@ Add `ballpython` to your `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/moonrox420/ball-python
-    rev: v2.0.3
+    rev: v2.0.5
     hooks:
       - id: pycleaner
         args: ["check"]

{ballpython-2.0.3 → ballpython-2.0.5}/ballpython.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ballpython
-Version: 2.0.3
+Version: 2.0.5
 Summary: The Ultimate Static Python Intelligence, Healing, Type Verification, and Security Suite
 Author: Developer
 License-Expression: MIT
@@ -78,7 +78,7 @@ Add `ballpython` to your `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/moonrox420/ball-python
-    rev: v2.0.3
+    rev: v2.0.5
     hooks:
       - id: pycleaner
         args: ["check"]

{ballpython-2.0.3 → ballpython-2.0.5}/pycleaner/__init__.py

@@ -18,7 +18,7 @@ from pycleaner.discovery import (
     is_protected_file,
 )
 
-__version__ = "2.0.3"
+__version__ = "2.0.5"
 __all__ = [
     "BaselineFingerprint",
     "BaselineManager",

{ballpython-2.0.3 → ballpython-2.0.5}/pycleaner/cli.py

@@ -567,7 +567,7 @@ def _resolve_cli_command(args: argparse.Namespace) -> str:
         return "all"
     if getattr(args, "check", False):
         return "check"
-    return "ultimate"
+    return "fix"
 
 
 def _run_all_command(

{ballpython-2.0.3 → ballpython-2.0.5}/pycleaner/frameworks/__init__.py

@@ -103,6 +103,7 @@ def get_default_registry() -> FrameworkRegistry:
         FastAPIPlugin,
         PydanticPlugin,
         PytestPlugin,
+        PyTorchPlugin,
         SQLAlchemyPlugin,
     )
 
@@ -112,4 +113,5 @@ def get_default_registry() -> FrameworkRegistry:
     reg.register(FastAPIPlugin())
     reg.register(SQLAlchemyPlugin())
     reg.register(DataclassPlugin())
+    reg.register(PyTorchPlugin())
     return reg

{ballpython-2.0.3 → ballpython-2.0.5}/pycleaner/frameworks/plugins.py

@@ -2,7 +2,7 @@
 pycleaner.frameworks.plugins
 ============================
 
-Concrete Framework Plugins for Pydantic, Pytest, FastAPI, SQLAlchemy, and Dataclasses.
+Concrete Framework Plugins for Pydantic, Pytest, FastAPI, SQLAlchemy, Dataclasses, and PyTorch.
 """
 
 from __future__ import annotations
@@ -50,15 +50,18 @@ class PydanticPlugin:
         for node in ast.walk(tree):
             if isinstance(node, ast.Import):
                 for alias in node.names:
-                    if alias.name.split(".")[0] == "pydantic":
+                    if alias.name.split(".")[0] in ("pydantic", "pydantic_settings"):
                         return True
             elif isinstance(node, ast.ImportFrom):
-                if node.module and node.module.split(".")[0] == "pydantic":
+                if node.module and node.module.split(".")[0] in (
+                    "pydantic",
+                    "pydantic_settings",
+                ):
                     return True
         return False
 
     def get_protected_names(self, tree: ast.AST) -> set[str]:
-        return {"model_config", "Config", "ConfigDict"}
+        return {"model_config", "Config", "ConfigDict", "model_post_init"}
 
     def get_protected_decorators(self) -> set[str]:
         return self._VALIDATOR_DECORATORS
@@ -288,3 +291,74 @@ class DataclassPlugin:
         tree: ast.AST,
     ) -> bool:
         return name in self.get_protected_names(tree)
+
+
+class PyTorchPlugin:
+    """Understands PyTorch nn.Module, LightningModule, HuggingFace models, and datasets."""
+
+    name = "pytorch"
+    _MODULE_BASES = {
+        "Module",
+        "LightningModule",
+        "PreTrainedModel",
+        "Dataset",
+        "IterableDataset",
+        "Sampler",
+    }
+    _PROTECTED_METHODS = {
+        "forward",
+        "backward",
+        "training_step",
+        "validation_step",
+        "test_step",
+        "predict_step",
+        "configure_optimizers",
+        "optimizer_step",
+        "compute_loss",
+        "reset_parameters",
+        "extra_repr",
+        "state_dict",
+        "load_state_dict",
+        "collate_fn",
+    }
+
+    def is_applicable(self, tree: ast.AST, filepath: Path | str) -> bool:
+        torch_pkgs = {
+            "torch",
+            "torchvision",
+            "torchaudio",
+            "pytorch_lightning",
+            "lightning",
+            "transformers",
+            "accelerate",
+            "timm",
+        }
+        for node in ast.walk(tree):
+            if isinstance(node, ast.Import):
+                for alias in node.names:
+                    if alias.name.split(".")[0] in torch_pkgs:
+                        return True
+            elif isinstance(node, ast.ImportFrom):
+                if node.module and node.module.split(".")[0] in torch_pkgs:
+                    return True
+        return False
+
+    def get_protected_names(self, tree: ast.AST) -> set[str]:
+        return self._PROTECTED_METHODS
+
+    def get_protected_decorators(self) -> set[str]:
+        return set()
+
+    def is_protected_field(self, node: ast.AST, class_node: ast.ClassDef) -> bool:
+        return _has_base_named(class_node, self._MODULE_BASES)
+
+    def should_ignore_definition(
+        self,
+        name: str,
+        kind: str,
+        node: ast.AST,
+        context: str,
+        tree: ast.AST,
+    ) -> bool:
+        return name in self._PROTECTED_METHODS
+

{ballpython-2.0.3 → ballpython-2.0.5}/pycleaner/security_scanner.py

@@ -190,6 +190,24 @@ class _DangerousCallDetector(ast.NodeVisitor):
         self.filepath = filepath
         self.source_lines = source_lines
         self.findings: list[SecurityFinding] = []
+        self._is_test_module: bool = False
+
+    def check_tree(self, tree: ast.AST) -> None:
+        """Inspect imports to determine if module is a test file."""
+        for node in ast.walk(tree):
+            if isinstance(node, ast.Import):
+                for alias in node.names:
+                    if alias.name.split(".")[0] in ("pytest", "unittest", "mock"):
+                        self._is_test_module = True
+                        return
+            elif isinstance(node, ast.ImportFrom):
+                if node.module and node.module.split(".")[0] in (
+                    "pytest",
+                    "unittest",
+                    "mock",
+                ):
+                    self._is_test_module = True
+                    return
 
     def _get_snippet(self, lineno: int) -> str:
         if 1 <= lineno <= len(self.source_lines):
@@ -245,8 +263,11 @@ class _DangerousCallDetector(ast.NodeVisitor):
         parts = [p.lower() for p in Path(filepath).parts[:-1]]
         return any(p in ("tests", "test", "testing") for p in parts)
 
+    def _is_test(self) -> bool:
+        return self._is_test_module or self._is_test_path(self.filepath)
+
     def visit_Assert(self, node: ast.Assert) -> None:
-        if self._is_test_path(self.filepath):
+        if self._is_test():
             return
         self._add_finding(
             SecurityFinding(
@@ -429,7 +450,20 @@ class _DangerousCallDetector(ast.NodeVisitor):
         if isinstance(arg, ast.BinOp) and isinstance(arg.op, ast.Add):
             return True
         if isinstance(arg, ast.Call):
-            return isinstance(arg.func, ast.Attribute) and arg.func.attr == "format"
+            if isinstance(arg.func, ast.Attribute) and arg.func.attr == "format":
+                # Check for psycopg safe sql.SQL(...).format(...) query composition
+                val = arg.func.value
+                if isinstance(val, ast.Call):
+                    func = val.func
+                    func_id = ""
+                    if isinstance(func, ast.Name):
+                        func_id = func.id
+                    elif isinstance(func, ast.Attribute):
+                        func_id = func.attr
+                    if func_id == "SQL":
+                        return False
+                return True
+            return False
         if isinstance(arg, ast.BinOp) and isinstance(arg.op, ast.Mod):
             return isinstance(arg.left, ast.Constant) and isinstance(
                 arg.left.value, str
@@ -483,6 +517,7 @@ class SecurityScanner:
             tree = ast.parse(source, filename=filename)
             source_lines = source.splitlines()
             detector = _DangerousCallDetector(filename, source_lines)
+            detector.check_tree(tree)
             detector.visit(tree)
             findings.extend(detector.findings)
         except SyntaxError:

{ballpython-2.0.3 → ballpython-2.0.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ballpython"
-version = "2.0.3"
+version = "2.0.5"
 description = "The Ultimate Static Python Intelligence, Healing, Type Verification, and Security Suite"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -44,7 +44,7 @@ ballpython = ["py.typed"]
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 python_files = ["test_*.py"]
-addopts = "-p no:pytestqt --basetemp=.pytest_temp"
+addopts = "-p no:pytestqt"
 
 [tool.pycleaner]
 exclude = [

{ballpython-2.0.3 → ballpython-2.0.5}/tests/test_cli.py

@@ -357,6 +357,24 @@ class TestCLI(unittest.TestCase):
         self.assertIn("types: [python]", output)
         self.assertIn("https://github.com/moonrox420/ball-python", output)
 
+    def test_default_invocation_runs_fix_not_ultimate(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp_dir:
+            folder = Path(tmp_dir)
+            target = folder / "app.py"
+            target.write_text("def run(x)\n    return x\n", encoding="utf-8")
+
+            stdout_buf = io.StringIO()
+            with redirect_stdout(stdout_buf):
+                exit_code = main([str(folder)])
+            output = stdout_buf.getvalue()
+
+            self.assertEqual(exit_code, 0)
+            self.assertIn("def run(x):", target.read_text(encoding="utf-8"))
+            # Must NOT invoke 6-phase analytical ultimate runner
+            self.assertNotIn("Full Spectrum Analysis & Healing", output)
+            self.assertNotIn("Phase 2: Project Dependency Audit", output)
+
 
 if __name__ == "__main__":
     unittest.main()
+

{ballpython-2.0.3 → ballpython-2.0.5}/tests/test_frameworks.py

@@ -131,3 +131,54 @@ class Config:
     assert "timeout" not in names_flagged
     assert "retries" not in names_flagged
     assert "__post_init__" not in names_flagged
+
+
+def test_pytorch_model_methods_not_flagged(tmp_path: Path) -> None:
+    code = """
+import torch
+import torch.nn as nn
+
+class TransformerModel(nn.Module):
+    def __init__(self):
+        super().__init__()
+        self.linear = nn.Linear(10, 10)
+
+    def forward(self, x):
+        return self.linear(x)
+
+    def compute_loss(self, pred, target):
+        return (pred - target).sum()
+"""
+    f = tmp_path / "model.py"
+    f.write_text(code, encoding="utf-8")
+
+    detector = DeadCodeDetector()
+    report = detector.scan_project(tmp_path)
+
+    names_flagged = {item.name for item in report.items}
+    assert "forward" not in names_flagged
+    assert "compute_loss" not in names_flagged
+
+
+def test_pydantic_settings_and_model_post_init_not_flagged(tmp_path: Path) -> None:
+    code = """
+from pydantic_settings import BaseSettings, SettingsConfigDict
+
+class AppConfig(BaseSettings):
+    api_key: str = "secret"
+    model_config = SettingsConfigDict(env_file=".env")
+
+    def model_post_init(self, context) -> None:
+        pass
+"""
+    f = tmp_path / "settings.py"
+    f.write_text(code, encoding="utf-8")
+
+    detector = DeadCodeDetector()
+    report = detector.scan_project(tmp_path)
+
+    names_flagged = {item.name for item in report.items}
+    assert "api_key" not in names_flagged
+    assert "model_config" not in names_flagged
+    assert "model_post_init" not in names_flagged
+

{ballpython-2.0.3 → ballpython-2.0.5}/tests/test_security_scanner.py

@@ -210,3 +210,29 @@ class TestSecurityScanner:
     def test_security_report_by_category(self) -> None:
         report = SecurityReport(findings=[])
         assert len(report.by_category("dangerous-eval")) == 0
+
+    def test_assert_suppressed_in_module_importing_pytest(self) -> None:
+        source = textwrap.dedent("""
+            import pytest
+
+            def test_feature():
+                assert 1 + 1 == 2
+        """)
+        scanner = SecurityScanner(severity_threshold="LOW")
+        report = scanner.scan_source(source, filename="test_root_file.py")
+        categories = {f.category for f in report.findings}
+        assert "assert-in-production" not in categories
+
+    def test_safe_sql_composition_not_flagged(self) -> None:
+        source = textwrap.dedent("""
+            from psycopg import sql
+
+            def get_data(conn, tbl):
+                with conn.cursor() as cur:
+                    cur.execute(sql.SQL("SELECT count(*) FROM {}").format(sql.Identifier(tbl)))
+        """)
+        scanner = SecurityScanner()
+        report = scanner.scan_source(source, filename="query.py")
+        categories = {f.category for f in report.findings}
+        assert "sql-injection" not in categories
+