codejury 0.13.2__tar.gz → 0.13.3__tar.gz

{codejury-0.13.2 → codejury-0.13.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codejury
-Version: 0.13.2
+Version: 0.13.3
 Summary: AI code security review: an adversarial diff-audit engine and an agent-driven whole-repo review methodology, with security knowledge as rich rules
 Author: AISecLabs
 License-Expression: MIT

{codejury-0.13.2 → codejury-0.13.3}/codejury/diff/engine.py

@@ -19,8 +19,9 @@ class AuditError(RuntimeError):
 
     Raised instead of returning an empty findings list, so a failed or blank
     call is never reported as a clean audit. The prompt requires a JSON object
-    (an empty ``{"findings": []}`` when there is nothing to report), so a reply
-    that yields no object is a failure, not a pass."""
+    carrying a ``findings`` key (an empty ``{"findings": []}`` when there is
+    nothing to report), so a reply that yields no object, or an object without
+    that key, is a failure, not a pass."""
 
 
 class AuditRunner:
@@ -39,9 +40,10 @@ class AuditRunner:
             max_tokens=self._max_tokens,
         )
         obj = extract_json_object(result.text)
-        if obj is None:
+        if obj is None or "findings" not in obj:
             raise AuditError(
-                "could not parse a JSON audit result from the model reply; "
-                "treating it as a failed audit rather than a clean pass"
+                "the model reply was not a valid audit result (no JSON object, or a "
+                "JSON object without a `findings` key); treating it as a failed "
+                "audit rather than a clean pass"
             )
         return findings_from_list(obj.get("findings"))

{codejury-0.13.2 → codejury-0.13.3}/codejury.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codejury
-Version: 0.13.2
+Version: 0.13.3
 Summary: AI code security review: an adversarial diff-audit engine and an agent-driven whole-repo review methodology, with security knowledge as rich rules
 Author: AISecLabs
 License-Expression: MIT

{codejury-0.13.2 → codejury-0.13.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codejury"
-version = "0.13.2"
+version = "0.13.3"
 description = "AI code security review: an adversarial diff-audit engine and an agent-driven whole-repo review methodology, with security knowledge as rich rules"
 readme = "README.md"
 requires-python = ">=3.12"

{codejury-0.13.2 → codejury-0.13.3}/tests/test_diff_engine.py

@@ -73,6 +73,17 @@ def test_engine_raises_on_unparseable_reply():
         AuditRunner(provider=MockProvider(default=""), model="m").run(_DIFF)
 
 
+def test_engine_raises_on_wrong_shape_json():
+    # valid JSON but no `findings` key is a malformed reply, not a clean audit
+    import pytest
+
+    from codejury.diff.engine import AuditError
+
+    for bad in ("{}", '{"result": "ok"}'):
+        with pytest.raises(AuditError):
+            AuditRunner(provider=MockProvider(default=bad), model="m").run(_DIFF)
+
+
 def test_prompt_carries_diff_focus_and_do_not_report():
     p = standard_audit_prompt(_DIFF, rules="RULE-X", context="def caller(): ...")
     assert "SELECT * FROM u" in p          # the diff