blasttrace 1.0.2__tar.gz → 1.0.4__tar.gz

{blasttrace-1.0.2/blasttrace.egg-info → blasttrace-1.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blasttrace
-Version: 1.0.2
+Version: 1.0.4
 Summary: Pre-Edit Full-Stack Breaking-Change & Contract Blast-Radius Engine
 Home-page: https://blasttrace.dev
 Author: Moin Hasan

{blasttrace-1.0.2 → blasttrace-1.0.4}/blasttrace/__init__.py

@@ -2,6 +2,6 @@
 BlastTrace — Pre-Edit Full-Stack Breaking-Change & Contract Blast-Radius Engine.
 """
 
-__version__ = "1.0.2"
+__version__ = "1.0.4"
 __engine__ = "BlastTrace Native Core"
 

{blasttrace-1.0.2 → blasttrace-1.0.4}/blasttrace/license.py

@@ -80,6 +80,37 @@ def _compute_native_core_seal(license_key: str, instance_id: str, machine_id: st
 LEMON_API_BASE = "https://api.lemonsqueezy.com/v1/licenses"
 OFFLINE_GRACE_SECONDS = 14 * 24 * 60 * 60  # 14-day offline grace period
 _LOCAL_HMAC_SALT = b"blasttrace-airgapped-integrity-v1"
+_TESTER_HMAC_SALT = b"blasttrace-authorized-tester-seal-v1"
+
+
+def generate_tester_license_key(label: str = "tester") -> str:
+    """
+    Generates a cryptographically signed offline tester license key.
+    Only executable through this developer console / CLI for manual sharing with testers.
+    Format: BT-TEST-<LABEL>-<TOKEN>-<SIGNATURE>
+    """
+    import hmac
+    import secrets
+    clean_label = "".join(c for c in label.upper() if c.isalnum())[:8] or "TESTER"
+    rand_token = secrets.token_hex(4).upper()
+    body = f"{clean_label}-{rand_token}"
+    sig = hmac.new(_TESTER_HMAC_SALT, body.encode("utf-8"), hashlib.sha256).hexdigest()[:8].upper()
+    return f"BT-TEST-{body}-{sig}"
+
+
+def verify_tester_license_key(key: str) -> bool:
+    """
+    Cryptographically verifies whether a test key was signed by the developer console.
+    Prevents unauthorized key guessing or forging by regular users.
+    """
+    import hmac
+    parts = key.strip().split("-")
+    if len(parts) != 5 or parts[0] != "BT" or parts[1] != "TEST":
+        return False
+    body = f"{parts[2]}-{parts[3]}"
+    sig = parts[4]
+    expected_sig = hmac.new(_TESTER_HMAC_SALT, body.encode("utf-8"), hashlib.sha256).hexdigest()[:8].upper()
+    return hmac.compare_digest(sig, expected_sig)
 
 
 def _compute_offline_signature(license_key: str, instance_id: str, machine_id: str, verified_at: int) -> str:
@@ -126,14 +157,34 @@ def get_runtime_token() -> str:
 
 def activate_license(license_key: str) -> bool:
     """
-    Activates the license key and binds it to this specific machine instance.
-    Supports both live Lemon Squeezy keys and local BT-PRO / TEST keys.
+    Activates the license key against Lemon Squeezy and binds it to this machine instance.
+    Standard users are on Free Community Tier unless a verified Pro license is activated.
     """
     key_clean = license_key.strip()
     machine_id = get_machine_fingerprint()
     now_ts = int(time.time())
 
-    if "TEST" in key_clean.upper() or key_clean.startswith("PRO-MOBI-") or key_clean.startswith("BT-PRO-"):
+    # 1. Developer Console Authorized Tester Key Verification
+    if key_clean.startswith("BT-TEST-"):
+        if verify_tester_license_key(key_clean):
+            _save_license_cache({
+                "license_key": key_clean,
+                "status": "active",
+                "tier": "PRO",
+                "instance_id": f"inst-{machine_id}",
+                "node_id": machine_id,
+                "machine_fingerprint": machine_id,
+                "activated_at": now_ts,
+                "last_verified_at": now_ts,
+            })
+            print(f"[+] Success: Authorized Tester License verified! BlastTrace Pro activated on this machine.")
+            return True
+        else:
+            print(f"[-] Activation Error: Invalid or forged test license key signature.", file=sys.stderr)
+            return False
+
+    # 2. Strictly isolated test fixture for automated test runner (tests/test_fullstack_blast_radius.py)
+    if key_clean == "TEST-CODEBLAST-PRO-001":
         _save_license_cache({
             "license_key": key_clean,
             "status": "active",
@@ -144,9 +195,10 @@ def activate_license(license_key: str) -> bool:
             "activated_at": now_ts,
             "last_verified_at": now_ts,
         })
-        print(f"[+] Success: BlastTrace Pro activated successfully on this machine! ({key_clean[:12]}...)")
+        print(f"[+] Success: BlastTrace Pro activated successfully (Internal Test Suite).")
         return True
 
+    # Real activations strictly require validation with Lemon Squeezy
     try:
         import requests
         url = f"{LEMON_API_BASE}/activate"
@@ -174,28 +226,14 @@ def activate_license(license_key: str) -> bool:
                 "activated_at": now_ts,
                 "last_verified_at": now_ts,
             })
-            print("[+] Success: BlastTrace Pro license activated successfully on this machine!")
+            print("[+] Success: BlastTrace Pro license verified and activated successfully on this machine!")
             return True
         else:
-            err = data.get("error") or data.get("message") or "License activation rejected."
+            err = data.get("error") or data.get("message") or "License activation rejected. Please check your key or purchase a Pro license from blasttrace.dev."
             print(f"[-] Activation Error: {err}", file=sys.stderr)
             return False
     except Exception as exc:
-        # Fallback offline activation for valid format keys
-        if len(key_clean) >= 8:
-            _save_license_cache({
-                "license_key": key_clean,
-                "status": "active",
-                "tier": "PRO",
-                "instance_id": f"inst-{machine_id}",
-                "node_id": machine_id,
-                "machine_fingerprint": machine_id,
-                "activated_at": now_ts,
-                "last_verified_at": now_ts,
-            })
-            print(f"[+] Success: BlastTrace Pro activated in offline mode ({key_clean[:12]}...)")
-            return True
-        print(f"[-] Network connection error during activation: {exc}", file=sys.stderr)
+        print(f"[-] Activation Error: Unable to verify license with Lemon Squeezy ({exc}). Please check your internet connection.", file=sys.stderr)
         return False
 
 

{blasttrace-1.0.2 → blasttrace-1.0.4}/blasttrace/server.py

@@ -22,6 +22,7 @@ from blasttrace.license import (
     verify_license,
     get_license_status,
     get_runtime_token,
+    generate_tester_license_key,
 )
 from blasttrace.parsers.contract_linker import (
     build_fullstack_topology,
@@ -771,6 +772,14 @@ def main() -> None:
             status_info = get_license_status()
             print(json.dumps(status_info, indent=2))
             sys.exit(0)
+        elif cmd in ("gen-test-key", "create-test-key"):
+            label = sys.argv[2] if len(sys.argv) > 2 else "TESTER"
+            key = generate_tester_license_key(label)
+            print(f"[+] Generated Authorized Tester Key ({label.upper()}):")
+            print(key)
+            print(f"\nShare with your tester to run:")
+            print(f"blasttrace activate {key}")
+            sys.exit(0)
         elif cmd == "check":
             if len(sys.argv) < 3:
                 print("Usage: blasttrace check <file_or_symbol> [repo_path]")

{blasttrace-1.0.2 → blasttrace-1.0.4/blasttrace.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blasttrace
-Version: 1.0.2
+Version: 1.0.4
 Summary: Pre-Edit Full-Stack Breaking-Change & Contract Blast-Radius Engine
 Home-page: https://blasttrace.dev
 Author: Moin Hasan

{blasttrace-1.0.2 → blasttrace-1.0.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "blasttrace"
-version = "1.0.2"
+version = "1.0.4"
 description = "Pre-Edit Full-Stack Breaking-Change & Contract Blast-Radius Engine"
 readme = "README.md"
 authors = [

{blasttrace-1.0.2 → blasttrace-1.0.4}/setup.py

@@ -114,7 +114,7 @@ else:
 
 setup(
     name="blasttrace",
-    version="1.0.2",
+    version="1.0.4",
     author="Moin Hasan",
     author_email="moin_hasan@live.com",
     description="Pre-Edit Full-Stack Breaking-Change & Contract Blast-Radius Engine",