codedna 0.5.1__tar.gz → 0.6.0__tar.gz

{codedna-0.5.1 → codedna-0.6.0}/CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+## [0.6.0] - 2026-06-24 - "MAIL MONITOR" (MINOR)
+
+### Added
+- **`codedna mail` command** - Gmail monitor with importance scoring
+  - Reads `timurhanhz3@gmail.com` via IMAP + App Password
+  - App Password stored at `~/.codedna/gmail_app_password` (chmod 600)
+  - State persisted at `~/.codedna/mail_state.json` (last UID, incremental check)
+  - 6 importance categories with scoring:
+    - `security` (10): token found, breach, 2FA, compromised
+    - `security` (9): password reset, suspicious login, locked account
+    - `infra` (8): deploy fail, build fail, crash, outage, domain expire
+    - `billing` (8): invoice, payment failed, subscription, card declined
+    - `business` (6): meeting, call, proposal, contract
+    - `project` (4): published, release, deploy success
+  - Noise detection auto-skips: `Re:`, newsletter, marketing, noreply
+  - Options:
+    - `--since N` (default 7): look back N days
+    - `--threshold N` (default 5): min importance score
+    - `--new-only`: only show messages newer than last check (uses UID tracking)
+    - `--show-noise`: also display noise/promo messages
+    - `--reset`: reset state and re-check all messages
+  - Output: legacy CLI aesthetic (bold cyan header, category-colored boxes, summary panel)
+  - Use case: cron `codedna mail --new-only` for daily digest
+
+### Changed
+- Minor version bump 0.5.2 -> 0.6.0 (new user-facing command)
+
+## [0.5.2] - 2026-06-24 - "SECURITY CHECK"
+
+### Added
+- `codedna security-check` command - Pre-release security scanner
+  - Personal machine path detection (e.g. `/Users/yourname/`, `/home/user/`)
+  - Tracked secret detection (`.npmrc`, `.env*` in git)
+  - Secret pattern detection (npm, GitHub PAT, OpenAI, Anthropic, PyPI, generic API keys)
+  - `.gitignore` rule verification (.env, .npmrc, node_modules, __pycache__)
+  - Options: `--path` (custom root), `--strict` (exit on warnings)
+  - Output: legacy CLI aesthetic (4 categories, emoji markers, summary panel)
+  - Use case: run BEFORE `uv publish` or `git push` to catch leaks
+  - Critical response: exit 1 on personal paths, tracked secrets, or missing .env rules
+  - Detected the recent NatureCo CLI v5.7.0 issue (sasuke-notes paths + tracked .npmrc)
+
 ## [0.5.1] - 2026-06-24 — "Doctor English"
 
 ### 🔄 Changed

{codedna-0.5.1 → codedna-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codedna
-Version: 0.5.1
+Version: 0.6.0
 Summary: AI Code Transparency Tool - detect AI-written code and measure developer understanding
 Project-URL: Homepage, https://codedna.dev
 Project-URL: Repository, https://github.com/natureco-official/codedna

{codedna-0.5.1 → codedna-0.6.0}/codedna/__init__.py

@@ -1,4 +1,4 @@
 """CodeDNA — AI Code Transparency Tool."""
 
-__version__ = "0.5.1"
+__version__ = "0.6.0"
 __app_name__ = "codedna"

{codedna-0.5.1 → codedna-0.6.0}/codedna/cli.py

@@ -2146,6 +2146,316 @@ def demo(
     console.print()
 
 
+# ---------------------------------------------------------------------------
+# codedna mail (Gmail monitor with importance scoring)
+# ---------------------------------------------------------------------------
+@app.command()
+def mail(
+    since: int = typer.Option(7, "--since", "-s", help="Look back N days (default: 7)"),
+    threshold: int = typer.Option(5, "--threshold", "-t", help="Min importance score (default: 5)"),
+    new_only: bool = typer.Option(False, "--new-only", help="Only show messages newer than last check"),
+    show_noise: bool = typer.Option(False, "--show-noise", help="Also show noise/promo messages"),
+    reset_state: bool = typer.Option(False, "--reset", help="Reset state and re-check all messages"),
+) -> None:
+    """Check Gmail for new important messages (security, billing, infra).
+
+    Reads from timurhanhz3@gmail.com via IMAP + App Password.
+    Scores each message by category and prints only those above threshold.
+
+    State is persisted at ~/.codedna/mail_state.json so subsequent runs only
+    show new messages.
+    """
+    from codedna.mail import (
+        check_mail, format_report, get_new_since_last_check,
+        _load_state, _save_state, MailMessage,
+    )
+
+    console.print()
+    console.print("[bold cyan]🧬 CodeDNA[/bold cyan] — Mail monitor: [dim]timurhanhz3@gmail.com[/dim]\n")
+
+    if reset_state:
+        from codedna.mail import _load_state
+        state = _load_state()
+        state["last_uid"] = "0"
+        _save_state(state)
+        console.print("  [green]✓[/green] Mail state reset")
+        console.print()
+        return
+
+    if new_only:
+        # Use UID-based check (only new since last run)
+        result = get_new_since_last_check()
+    else:
+        # Full check (look back N days)
+        result = check_mail(since_days=since, threshold=threshold)
+
+    # ── Render: legacy CLI aesthetic ──────────────────────────────────
+    console.print(f"[bold]─── Summary ───[/bold]")
+    console.print(f"  Total new: [cyan]{result.total_new}[/cyan] message(s)")
+    console.print(f"  Important: [bold {'red' if result.important else 'green'}]{len(result.important)}[/bold {'red' if result.important else 'green'}] (threshold ≥ {threshold})")
+    console.print(f"  Noise: [dim]{len(result.noise)}[/dim] skipped")
+    console.print()
+
+    if result.errors:
+        console.print("[bold red]─── Errors ───[/bold]")
+        for err in result.errors:
+            console.print(f"  [red]✗[/red] {err}")
+        console.print()
+
+    if result.important:
+        console.print("[bold]─── Important Messages ───[/bold]")
+        for m in result.important:
+            cat_color = {
+                "security": "red",
+                "billing": "yellow",
+                "infra": "yellow",
+                "project": "cyan",
+                "business": "magenta",
+            }.get(m.importance_category, "white")
+            console.print(f"  [{cat_color}]■[/{cat_color}] [bold {cat_color}][{m.importance_category}][/bold {cat_color}] score={m.importance_score}")
+            console.print(f"    From: {m.from_addr}")
+            console.print(f"    Subject: [bold]{m.subject}[/bold]")
+            console.print(f"    Date: [dim]{m.date}[/dim]")
+            if m.body_preview:
+                preview = m.body_preview[:200].replace("\n", " ").strip()
+                console.print(f"    Preview: [dim]{preview}…[/dim]")
+            console.print()
+
+    if show_noise and result.noise:
+        console.print("[bold dim]─── Noise (skipped) ───[/bold dim]")
+        for m in result.noise[:10]:  # limit to first 10
+            console.print(f"  [dim]— {m.subject[:80]}  ({m.from_addr})[/dim]")
+        if len(result.noise) > 10:
+            console.print(f"  [dim]… and {len(result.noise) - 10} more[/dim]")
+        console.print()
+
+    # ── Summary panel ────────────────────────────────────────────────
+    if result.important:
+        border = "red"
+        title = f"[bold red]🔥 {len(result.important)} Important Message(s) Found[/bold red]"
+        body = (
+            f"[red]Action needed: review the messages above.[/red]\n\n"
+            f"[dim]Next: run[/dim] [cyan]codedna mail --new-only[/cyan] [dim]for incremental updates.[/dim]"
+        )
+    elif result.total_new > 0:
+        border = "green"
+        title = "[bold green]✓ No important messages[/bold green]"
+        body = (
+            f"[green]{result.total_new} new message(s) checked, all noise/promo.[/green]\n\n"
+            f"[dim]Run[/dim] [cyan]codedna mail --show-noise[/cyan] [dim]to see all.[/dim]"
+        )
+    else:
+        border = "cyan"
+        title = "[bold cyan]✓ No new messages[/bold cyan]"
+        body = "[dim]Mailbox is up to date.[/dim]"
+
+    console.print()
+    console.print(Panel(body, title=title, border_style=border, padding=(1, 2)))
+    console.print()
+
+
+# ---------------------------------------------------------------------------
+# codedna security-check (pre-release secret & personal path scanner)
+# ---------------------------------------------------------------------------
+@app.command(name="security-check")
+def security_check(
+    path: Optional[Path] = typer.Option(None, "--path", "-p", help="Project root to scan (defaults to cwd)"),
+    strict: bool = typer.Option(False, "--strict", help="Exit 1 on any warning"),
+) -> None:
+    """Scan the project for personal paths, secrets, and missing .gitignore rules.
+
+    Run this BEFORE publishing or pushing to GitHub. Catches:
+    - Personal machine paths in code/README (e.g. /Users/yourname/...)
+    - Tracked secrets (.npmrc, .env*, api_key, token patterns)
+    - Missing .gitignore rules for sensitive files
+    """
+    import subprocess
+    from codedna.git_hook import find_git_root
+    import re
+
+    root = path or find_git_root() or Path.cwd()
+    if not root.exists():
+        console.print(f"  [red]✗[/red] Path not found: {root}")
+        raise typer.Exit(1)
+
+    console.print()
+    console.print(f"[bold cyan]🧬 CodeDNA[/bold cyan] — Security check: [dim]{root}[/dim]\n")
+
+    issues: list[tuple[str, str, str]] = []  # (severity, category, message)
+    warnings: list[tuple[str, str, str]] = []
+
+    def _ok(msg: str) -> None:
+        console.print(f"  [green]✓[/green] {msg}")
+
+    def _warn(msg: str) -> None:
+        console.print(f"  [yellow]⚠[/yellow]  {msg}")
+
+    def _fail(msg: str) -> None:
+        console.print(f"  [red]✗[/red] {msg}")
+
+    # ── 1. Personal machine paths ─────────────────────────────────────
+    console.print("[bold]─── 1. Personal Path Scan ───[/bold]")
+    personal_pattern = re.compile(r"/Users/[\w.-]+/|\/home\/[\w.-]+/|C:\\Users\\[\w.-]+\\")
+    found_personal: list[str] = []
+
+    # Scan README, source, and markdown files
+    scan_extensions = {".md", ".py", ".js", ".ts", ".json", ".sh", ".yml", ".yaml", ".toml"}
+    file_count = 0
+    for ext in scan_extensions:
+        for f in root.rglob(f"*{ext}"):
+            # Skip ignored dirs
+            if any(p in f.parts for p in [".git", "node_modules", "dist", "build", ".venv", "venv", "__pycache__"]):
+                continue
+            try:
+                content = f.read_text(errors="ignore")
+            except Exception:
+                continue
+            file_count += 1
+            matches = personal_pattern.findall(content)
+            if matches:
+                # Show unique paths
+                unique = set(matches)
+                for m in unique:
+                    if m not in found_personal:
+                        found_personal.append(m)
+                        rel = f.relative_to(root) if f.is_relative_to(root) else f
+                        _fail(f"Found: {m}  in  {rel}")
+                        issues.append(("fail", "personal-path", f"{m} in {rel}"))
+
+    if not found_personal:
+        _ok(f"No personal paths found ({file_count} files scanned)")
+    console.print()
+
+    # ── 2. Tracked secrets ────────────────────────────────────────────
+    console.print("[bold]─── 2. Tracked Secret Scan ───[/bold]")
+
+    # Check if .npmrc, .env*, .git/config is tracked
+    secret_files = [".npmrc", ".env", ".env.local", ".env.test", ".env.production"]
+    for sf in secret_files:
+        f = root / sf
+        if f.exists():
+            # Check if tracked
+            r = subprocess.run(
+                ["git", "ls-files", "--error-unmatch", str(f.relative_to(root))],
+                cwd=str(root), capture_output=True, text=True
+            )
+            if r.returncode == 0:
+                _fail(f"{sf} is tracked in git (contains secrets!)")
+                issues.append(("fail", "tracked-secret", f"{sf} tracked"))
+            else:
+                _ok(f"{sf} exists locally but is NOT tracked (safe)")
+        else:
+            _ok(f"{sf} not present")
+    console.print()
+
+    # ── 3. Secret patterns in tracked files ──────────────────────────
+    console.print("[bold]─── 3. Secret Pattern Scan ───[/bold]")
+    secret_patterns = {
+        "npm token": re.compile(r"npm_[A-Za-z0-9]{20,}"),
+        "GitHub PAT": re.compile(r"ghp_[A-Za-z0-9]{20,}"),
+        "OpenAI key": re.compile(r"sk-[A-Za-z0-9]{20,}"),
+        "Anthropic key": re.compile(r"sk-ant-[A-Za-z0-9]{20,}"),
+        "PyPI token": re.compile(r"pypi-[A-Za-z0-9]{20,}"),
+        "Generic API key": re.compile(r"(?i)(api[_-]?key|token|secret)\s*[:=]\s*['\"][A-Za-z0-9_-]{16,}['\"]"),
+    }
+
+    found_secrets: list[tuple[str, str, str]] = []
+    for ext in [".py", ".js", ".ts", ".json", ".sh", ".md"]:
+        for f in root.rglob(f"*{ext}"):
+            if any(p in f.parts for p in [".git", "node_modules", "dist", "build", ".venv", "venv", "__pycache__", ".pytest_cache"]):
+                continue
+            try:
+                content = f.read_text(errors="ignore")
+            except Exception:
+                continue
+            for name, pattern in secret_patterns.items():
+                if pattern.search(content):
+                    rel = f.relative_to(root) if f.is_relative_to(root) else f
+                    # Skip if it's in a docstring example or test fixture
+                    if "example" in str(rel).lower() or "test" in str(rel).lower() or "fixture" in str(rel).lower():
+                        continue
+                    # Skip obvious placeholders
+                    if any(ph in content.lower() for ph in ["placeholder", "your_api_key", "xxx", "00000"]):
+                        continue
+                    found_secrets.append((name, str(rel), pattern.pattern[:30]))
+                    _fail(f"{name} pattern in {rel}")
+                    issues.append(("fail", "secret-pattern", f"{name} in {rel}"))
+
+    if not found_secrets:
+        _ok("No secret patterns found")
+    console.print()
+
+    # ── 4. .gitignore verification ────────────────────────────────────
+    console.print("[bold]─── 4. .gitignore Verification ───[/bold]")
+    gitignore = root / ".gitignore"
+    if not gitignore.exists():
+        _fail(".gitignore not found")
+        issues.append(("fail", "no-gitignore", "no .gitignore"))
+    else:
+        content = gitignore.read_text()
+        # Check critical rules
+        required_rules = {
+            ".env": False,
+            ".env.": False,
+            ".npmrc": False,
+            "node_modules": False,
+            "__pycache__": False,
+        }
+        for line in content.split("\n"):
+            line = line.strip()
+            for rule in required_rules:
+                if rule == line or (rule.endswith(".") and rule in line):
+                    required_rules[rule] = True
+
+        for rule, present in required_rules.items():
+            if present:
+                _ok(f".gitignore includes {rule} (or pattern)")
+            else:
+                _warn(f".gitignore missing {rule} rule")
+                warnings.append(("warn", "gitignore-missing", f"missing {rule}"))
+    console.print()
+
+    # ── Summary ───────────────────────────────────────────────────────
+    n_fail = len(issues)
+    n_warn = len(warnings)
+    console.print("[bold]─── Summary ───[/bold]")
+
+    if n_fail == 0 and n_warn == 0:
+        console.print("  [bold green]✓ All security checks passed — safe to publish.[/bold green]")
+        bilgi = (
+            f"[bold green]CodeDNA security: CLEAN[/bold green]\n\n"
+            f"[dim]All checks passed. No personal paths, no tracked secrets, no secret patterns.[/dim]\n\n"
+            f"[dim]Safe to run:[/dim] [cyan]npm publish[/cyan] [dim]or[/dim] [cyan]uv publish[/cyan]"
+        )
+        border = "green"
+    elif n_fail == 0:
+        console.print(f"  [bold yellow]⚠  {n_warn} warning(s), 0 critical issues.[/bold yellow]")
+        bilgi = (
+            f"[bold yellow]CodeDNA security: WARNINGS[/bold yellow]\n\n"
+            f"[dim]{n_warn} warning(s) to review, but no critical issues blocking publish.[/dim]\n\n"
+            f"[dim]Re-run after fixes:[/dim] [cyan]codedna security-check[/cyan]"
+        )
+        border = "yellow"
+    else:
+        console.print(f"  [bold red]✗  {n_fail} critical issue(s), {n_warn} warning(s).[/bold red]")
+        for sev, cat, msg in issues:
+            console.print(f"    [red]•[/red] [{cat}] {msg}")
+        bilgi = (
+            f"[bold red]CodeDNA security: BLOCKED[/bold red]\n\n"
+            f"[red]{n_fail} critical issue(s) must be fixed before publishing.[/red]\n\n"
+            f"[dim]Fix issues, add to .gitignore, then re-run:[/dim]\n"
+            f"[cyan]codedna security-check[/cyan]"
+        )
+        border = "red"
+
+    console.print()
+    console.print(Panel(bilgi, border_style=border, padding=(1, 2)))
+    console.print()
+
+    if n_fail > 0 or (strict and n_warn > 0):
+        raise typer.Exit(1)
+
+
 # ---------------------------------------------------------------------------
 # codedna setup (interactive AI analysis configuration wizard)
 # ---------------------------------------------------------------------------