code-standards 8.135.5__tar.gz → 8.136.2__tar.gz

{code_standards-8.135.5 → code_standards-8.136.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-standards
-Version: 8.135.5
+Version: 8.136.2
 Summary: One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy.
 Project-URL: Homepage, https://code-standards.sarj.ai/
 Project-URL: Documentation, https://code-standards.sarj.ai/cli/
@@ -30,10 +30,10 @@ Requires-Dist: pyyaml==6.0.3
 Requires-Dist: referencing==0.37.0
 Requires-Dist: repo-standards==6.12.9
 Requires-Dist: ruff==0.17.2
-Requires-Dist: sarj-iac-lint==0.30.1
-Requires-Dist: sarj-python-lint==1.79.0
-Requires-Dist: sarj-rule-contracts==0.4.1
-Requires-Dist: sarj-sql-lint==0.28.0
+Requires-Dist: sarj-iac-lint==0.30.2
+Requires-Dist: sarj-python-lint==1.81.0
+Requires-Dist: sarj-rule-contracts==0.4.2
+Requires-Dist: sarj-sql-lint==0.29.0
 Requires-Dist: shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')
 Requires-Dist: typer==0.27.3
 Description-Content-Type: text/markdown

{code_standards-8.135.5 → code_standards-8.136.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "code-standards"
-version = "8.135.5"
+version = "8.136.2"
 description = "One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy."
 readme = "README.md"
 requires-python = ">=3.14"
@@ -17,7 +17,7 @@ classifiers = [
   "Topic :: Software Development :: Quality Assurance",
 ]
 dependencies = [
-  "sarj-rule-contracts==0.4.1",
+  "sarj-rule-contracts==0.4.2",
   "pathspec==1.1.1",
   "basedpyright==1.40.2",
   "deptry==0.25.1",
@@ -31,9 +31,9 @@ dependencies = [
   "repo-standards==6.12.9",
   "ruff==0.17.2",
   "shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')",
-  "sarj-iac-lint==0.30.1",
-  "sarj-python-lint==1.79.0",
-  "sarj-sql-lint==0.28.0",
+  "sarj-iac-lint==0.30.2",
+  "sarj-python-lint==1.81.0",
+  "sarj-sql-lint==0.29.0",
   "typer==0.27.3",
 ]
 

{code_standards-8.135.5 → code_standards-8.136.2}/src/sarj_standards/_meta.py

@@ -6,7 +6,7 @@ from pathlib import Path
 
 try:
     __version__ = version("code-standards")
-except PackageNotFoundError:  # running from an uninstalled source tree
+except PackageNotFoundError:
     __version__ = "0.0.0.dev0"
 
 CONFIGS_DIR: Path = Path(__file__).resolve().parent / "configs"

{code_standards-8.135.5 → code_standards-8.136.2}/src/sarj_standards/api.py

@@ -109,8 +109,7 @@ def _analysis_manifest(root: Path, mode: AnalysisMode) -> Manifest | None:
     try:
         return load_manifest(root)
     except ValueError:
-        # Corpus evaluation is intentionally portable across consumer manifest
-        # generations. Current manifests still contribute path exclusions.
+        # Legacy manifests may still supply path exclusions.
         return None
 
 
@@ -1213,7 +1212,12 @@ def _sync_target_changes(source: Path, destination: Path) -> bool:
         return True
 
 
-def _object_list(value: object, label: str) -> list[object]:
+def _object_list(
+    value: object,  # sarj-noqa: SARJ528 -- Shallow validation preserves unchecked array elements.
+    label: str,
+) -> list[  # sarj-noqa: SARJ528 -- Shallow validation preserves unchecked array elements.
+    object
+]:
     if not is_object_list(value):
         msg = f"{label} must be an array"
         raise TypeError(msg)

{code_standards-8.135.5 → code_standards-8.136.2}/src/sarj_standards/cli/main.py

@@ -15,10 +15,10 @@ import subprocess  # ruff: ignore[suspicious-subprocess-import] -- repository co
 import sys
 import tempfile
 from types import MappingProxyType
-from typing import TYPE_CHECKING, Annotated, Final, NoReturn, TypeIs
+from typing import TYPE_CHECKING, Annotated, Final, NoReturn
 
 from packaging.version import InvalidVersion, Version
-from pydantic import BaseModel, ValidationError
+from pydantic import BaseModel, JsonValue, ValidationError
 from repo_standards.core.commit_message import check_local_commit_message_file
 import typer
 
@@ -29,7 +29,6 @@ from sarj_standards.libs.adoption.configs import CONFIG_NAMES
 from sarj_standards.libs.filesystem import is_link_like
 from sarj_standards.libs.linting.policy import Policy
 from sarj_standards.libs.rules import RuleSelector
-from sarj_standards.libs.typed_containers import is_object_mapping
 
 
 _TEXT_DIAGNOSTIC_LIMIT: Final = 50
@@ -46,7 +45,7 @@ if TYPE_CHECKING:
 
 
 class _CorpusLintReport(BaseModel):
-    diagnostics: list[dict[str, object]]
+    diagnostics: list[dict[str, JsonValue]]
 
 
 _NEXT_STEPS = (
@@ -1551,7 +1550,7 @@ def _cmd_rule_evaluate_manifest(args: _Args, root: Path) -> int:
 
     command = _corpus_evaluation_command(args)
 
-    diagnostics: list[dict[str, object]] = []
+    diagnostics: list[dict[str, JsonValue]] = []
     batches: list[dict[str, object]] = []
 
     def observe(source: object, batch: object, stdout: bytes, _stderr: bytes) -> None:
@@ -1634,19 +1633,18 @@ def _corpus_evaluation_command(args: _Args) -> list[str]:
 
 
 def _corpus_diagnostic(
-    diagnostic: dict[str, object],
+    diagnostic: dict[str, JsonValue],
     corpus: str,
     *,
     private: bool,
-) -> dict[str, object]:
-    def rewrite(value: object) -> object:
-        if _is_object_list(value):
+) -> dict[str, JsonValue]:
+    def rewrite(value: JsonValue) -> JsonValue:
+        if isinstance(value, list):
             return [rewrite(item) for item in value]
-        table = _object_table(value)
-        if table is None:
+        if not isinstance(value, dict):
             return value
-        rewritten: dict[str, object] = {}
-        for key, item in table.items():
+        rewritten: dict[str, JsonValue] = {}
+        for key, item in value.items():
             if key == "path" and isinstance(item, str):
                 rewritten[key] = "<private-corpus-file>" if private else f"{corpus}/{item}"
             else:
@@ -1654,21 +1652,10 @@ def _corpus_diagnostic(
         return rewritten
 
     rendered = rewrite(diagnostic)
-    table = _object_table(rendered)
-    if table is None:  # pragma: no cover - input is a dictionary.
+    if not isinstance(rendered, dict):  # pragma: no cover - input is a dictionary.
         msg = "corpus diagnostic rendering failed"
         raise TypeError(msg)
-    return table
-
-
-def _is_object_list(value: object) -> TypeIs[list[object]]:
-    return isinstance(value, list)
-
-
-def _object_table(value: object) -> dict[str, object] | None:
-    if not is_object_mapping(value):
-        return None
-    return {key: item for key, item in value.items() if isinstance(key, str)}
+    return rendered
 
 
 def cmd_observe(args: _Args) -> int:
@@ -1829,7 +1816,7 @@ def _validate_analysis_output(args: _Args, root: Path) -> bool:
     return False
 
 
-def _machine_adoption_gate(root: Path) -> object | None:
+def _machine_adoption_gate(root: Path) -> AnalysisReport | None:
     from sarj_standards.libs.adoption import doctor, service  # ruff: ignore[import-outside-top-level] -- load sarj_standards.libs.adoption only when this selected operation executes.
     from sarj_standards.libs.diagnostics import (  # ruff: ignore[import-outside-top-level] -- load sarj_standards.libs.diagnostics only when this selected operation executes.
         Completion,
@@ -1939,7 +1926,7 @@ def _merge_sync_findings(
     return _SyncFindings(diagnostics=diagnostics, issues=issues)
 
 
-def _machine_input_error(root: Path, message: str) -> object:
+def _machine_input_error(root: Path, message: str) -> AnalysisReport:
     from sarj_standards.libs.diagnostics import (  # ruff: ignore[import-outside-top-level] -- machine formats stay lazy
         Completion,
         ExecutionIssue,
@@ -2020,8 +2007,7 @@ def _prepare_report_parent(root: Path, output: Path) -> None:
 
 
 def _write_report(root: Path, output: Path, payload: str, *, output_format: str) -> None:
-    # Revalidate immediately before the write as a defense against a parent path
-    # being replaced after the pre-analysis check.
+    # Recheck the parent path immediately before writing to prevent replacement races.
     destination = _report_destination(root, output, output_format=output_format)
     parent = destination.parent
     descriptor, temporary_name = tempfile.mkstemp(prefix=f".{destination.name}.", suffix=".tmp", dir=parent)
@@ -2582,8 +2568,7 @@ def _baseline_analysis_reports(args: _Args, root: Path, selected: list[str] | No
         operations.append(partial(_baseline_external_report, root, selected, trust, "shellcheck"))
     if args.jobs == 1 or len(operations) <= 1:
         return [operation() for operation in operations]
-    # Multiple operations share one bounded pool with serial inner analyzers;
-    # a single operation uses its own worker budget. Check every result first.
+    # Inner analyzers run serially under this shared worker budget.
     with ThreadPoolExecutor(max_workers=args.jobs, thread_name_prefix="baseline") as workers:
         pending = [workers.submit(operation) for operation in operations]
         return [result.result() for result in pending]
@@ -2599,8 +2584,7 @@ def _baseline_scan_rules(args: _Args) -> _BaselineScanRules:
     scoped_rules = _analysis_rules_for_baseline(args.baseline_rules) if args.baseline_cmd == "update" else None
     upstream_eslint = bool(_upstream_eslint_rules_for_baseline(args.baseline_rules))
     if upstream_eslint and scoped_rules is not None:
-        # One selected ESLint scan below covers both upstream and custom
-        # findings. Validate custom selectors before removing that duplicate scan.
+        # Validate selectors before combining their upstream and custom scans.
         for selector in scoped_rules:
             if (
                 selector.startswith("eslint:")

{code_standards-8.135.5 → code_standards-8.136.2}/src/sarj_standards/configs/cli-reference.v1.json

@@ -3316,6 +3316,6 @@
   },
   "program": "code-standards",
   "schemaVersion": 1,
-  "summary": "Adopt, check, fix, diagnose, and update sarj-ai standards (v8.135.5).",
-  "version": "8.135.5"
+  "summary": "Adopt, check, fix, diagnose, and update sarj-ai standards (v8.136.2).",
+  "version": "8.136.2"
 }

{code_standards-8.135.5 → code_standards-8.136.2}/src/sarj_standards/configs/rule-calibration-campaign.v1.json

@@ -2862,6 +2862,14 @@
       "evidence": "Twenty-eight focused settings checks cover repeated Python field namespaces, environment-alias independence, owned and inherited fields, ClassVar and Final metadata, private fields, generated and test exclusions, imported BaseSettings ancestry, stable locations and exact suppressions. Private source, paths and identifying pins stay outside public artifacts. Follow-up: packages/python/benchmarks/service-contracts-and-ids-100-passes.json records 100 distinct semantic cases (39 true positives, 61 true negatives, no labeled false positives/negatives), five exact motivating blocking findings, deterministic three-trial cold/warm measurements on 296 guarded sample files, and completed local canonical gates. Private source and identifying pins remain local. Exact-head CI and broader review remain separate gates. The second post-merge audit passed 100 distinct native checks against the actual published sarj-python-lint 1.76.0 wheel, 25 per repaired rule, with zero failures or skips.",
       "outcome": "Stage SARJ532 at WARNING without autofix. At least two directly owned public BaseSettings fields must share a complete Python namespace token; environment aliases alone do not qualify. Forty-four matching groups in the private sample remain API/environment review advisories. Preserve existing loading, aliases, defaults and source precedence when grouping manually."
     },
+    {
+      "task": "rule-audit/sql/new-table-inline-constraints",
+      "family": "sql",
+      "ruleId": "new-table-inline-constraints",
+      "state": "pending",
+      "evidence": "Authored semantic fixtures cover primary keys, uniqueness, foreign keys, checks and plain unique column indexes on proven fresh tables. Near-miss controls preserve existing-table and online-validation migrations, forward foreign-key dependencies, transaction and migration-section boundaries, quoted identifiers, malformed input and indexes with separate PostgreSQL contracts. Final canonical verification and exact-head CI remain required; private source, paths and identifying pins remain local.",
+      "outcome": "Enforce SARJ121 as an error at the explicit user request, without autofix. Preserve constraint names and options when moving eligible declarations into CREATE TABLE. Ordinary, partial, expression, concurrent and option-bearing indexes remain separate; conditional or unproved table freshness abstains. Calibration remains pending rather than claiming completed release qualification."
+    },
     {
       "task": "rule-audit/sql/no-analytical-queries-in-transactional-db",
       "family": "sql",