codetrust 2.2.2__tar.gz → 2.2.4__tar.gz

{codetrust-2.2.2 → codetrust-2.2.4}/.codetrust/audit.jsonl

@@ -15,3 +15,5 @@
 {"timestamp": 1770950299.691034, "action_type": "terminal_command", "verdict": "ALLOW", "rule_id": "", "original_action": "pytest tests/ -v", "message": "", "suggestion": "", "session_id": "", "agent_id": "", "workspace": "", "metadata": {}}
 {"timestamp": 1770950299.691067, "action_type": "terminal_command", "verdict": "ALLOW", "rule_id": "", "original_action": "git status", "message": "", "suggestion": "", "session_id": "", "agent_id": "", "workspace": "", "metadata": {}}
 {"timestamp": 1770950299.6910982, "action_type": "terminal_command", "verdict": "ALLOW", "rule_id": "", "original_action": "ruff check src/", "message": "", "suggestion": "", "session_id": "", "agent_id": "", "workspace": "", "metadata": {}}
+{"timestamp": 1770983965.215816, "action_type": "terminal_command", "verdict": "ALLOW", "rule_id": "", "original_action": "cd /Users/mrebadi/Desktop/DevOps/Codetrust/extension && npm ci && node ./scripts/check-release-sync.js && npm run package", "message": "", "suggestion": "", "session_id": "gateway-1770979134", "agent_id": "unknown", "workspace": "/Users/mrebadi/Desktop/DevOps/Codetrust", "metadata": {}}
+{"timestamp": 1770983980.435174, "action_type": "terminal_command", "verdict": "ALLOW", "rule_id": "", "original_action": "cd /Users/mrebadi/Desktop/DevOps/Codetrust && /Users/mrebadi/Desktop/DevOps/Codetrust/.venv/bin/python -m pip install --quiet build twine && /Users/mrebadi/Desktop/DevOps/Codetrust/.venv/bin/python -m build && /Users/mrebadi/Desktop/DevOps/Codetrust/.venv/bin/python -m twine check dist/*", "message": "", "suggestion": "", "session_id": "gateway-1770979134", "agent_id": "unknown", "workspace": "/Users/mrebadi/Desktop/DevOps/Codetrust", "metadata": {}}

{codetrust-2.2.2 → codetrust-2.2.4}/.github/dependabot.yml

@@ -25,6 +25,10 @@ updates:
       - "extension"
     commit-message:
       prefix: "chore(deps):"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
 
   # npm dependencies (dashboard)
   - package-ecosystem: "npm"
@@ -38,6 +42,10 @@ updates:
       - "dashboard"
     commit-message:
       prefix: "chore(deps):"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
 
   # GitHub Actions
   - package-ecosystem: "github-actions"
@@ -50,6 +58,10 @@ updates:
       - "ci"
     commit-message:
       prefix: "chore(ci):"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
 
   # Docker dependencies
   - package-ecosystem: "docker"

codetrust-2.2.4/.github/workflows/release.yml

@@ -0,0 +1,156 @@
+name: Release
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Lint
+        run: ruff check src/ tests/
+
+      - name: Test with coverage
+        run: pytest tests/ -v --tb=short --cov=src --cov-fail-under=80
+
+      - name: Generate SBOM (CycloneDX)
+        run: |
+          pip install cyclonedx-bom
+          cyclonedx-py environment -o sbom.json --output-format json
+
+      - name: Upload SBOM artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sbom
+          path: sbom.json
+
+  build-pypi:
+    needs: verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build tools
+        run: pip install build
+
+      - name: Build package
+        run: python -m build
+
+      - name: Upload PyPI artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: pypi-distributions
+          path: dist/
+
+  build-vsix:
+    needs: verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: extension/package-lock.json
+
+      - name: Install dependencies
+        working-directory: extension
+        run: npm ci
+
+      - name: Build extension
+        working-directory: extension
+        run: npm run compile
+
+      - name: Package VSIX
+        working-directory: extension
+        run: npx @vscode/vsce package
+
+      - name: Upload VSIX artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: vsix
+          path: extension/*.vsix
+
+  create-release:
+    needs: [verify, build-pypi, build-vsix]
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download SBOM
+        uses: actions/download-artifact@v4
+        with:
+          name: sbom
+
+      - name: Download PyPI distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: pypi-distributions
+          path: dist/
+
+      - name: Download VSIX
+        uses: actions/download-artifact@v4
+        with:
+          name: vsix
+          path: vsix/
+
+      - name: Extract version from tag
+        id: version
+        run: echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          files: |
+            sbom.json
+            dist/*.tar.gz
+            dist/*.whl
+            vsix/*.vsix
+          body: |
+            ## Install
+
+            **CLI / Python:**
+            ```bash
+            pip install codetrust==${{ steps.version.outputs.version }}
+            ```
+
+            **VS Code Extension:**
+            Search "CodeTrust" in the Extensions marketplace, or:
+            ```
+            code --install-extension SaidBorna.codetrust
+            ```
+
+            **GitHub Action:**
+            ```yaml
+            - uses: S-Borna/codetrust@v${{ steps.version.outputs.version }}
+            ```
+
+            ---
+            *PyPI and Marketplace publishing is done manually after verifying the release artifacts.*

{codetrust-2.2.2 → codetrust-2.2.4}/.gitignore

@@ -62,3 +62,4 @@ codetrust-results.sarif
 *.vsix
 CTfavicon.png
 .gitignore
+scan_all_projects.py

{codetrust-2.2.2 → codetrust-2.2.4}/CHANGELOG.md

@@ -5,6 +5,62 @@ All notable changes to CodeTrust will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- New `database_url_credentials` rule — catches database URLs with embedded passwords
+  (e.g. `postgresql+asyncpg://user:pass@host/db`). Handles `+asyncpg`, `+pymysql`, etc.
+- Path alias test (`test_path_alias_skipped`) for `@/`, `~/`, `#/` aliases
+
+### Fixed
+
+- `hardcoded_secret` rule now handles Python type annotations (`secret_key: str = "change-me"`)
+  and compound names (`secret_key`, `secret_token`, etc.)
+- `api_key_in_config` rule no longer restricted to `.yml/.yaml/.toml/.json` — applies to all files
+- `api_key_in_config` rule now handles Python type annotations
+- JS/TS import verification no longer flags `@/components`, `@/lib`, `~/config`, `#/db`
+  as hallucinated packages — these are Next.js/Vite/TypeScript path aliases
+- Rule count updated: 76 scan + 57 gateway = 133 total
+- Test count: 1315
+
+---
+
+## [2.2.4] - 2026-02-13
+
+### Fixed
+
+- Removed public release-process text from root README to keep product-facing docs clean
+- Strengthened release sync guard to validate version parity across extension/package, pyproject,
+  changelog, and website (without depending on public README strings)
+- Synced release-prep versioning across backend/API docs/site to `2.2.4`
+
+### Changed
+
+- Prepared manual release candidate `2.2.4` locally (no deploy, no push)
+
+---
+
+## [2.2.3] - 2026-02-13
+
+### Fixed
+
+- VS Code extension lint blockers resolved:
+  - removed unnecessary regex escape in embedded scanner rules
+  - added explicit return types for registered command handlers
+  - removed unused status bar variable
+- Dashboard build blockers resolved:
+  - added missing dependency `@next-auth/prisma-adapter`
+  - updated Stripe API version typing in webhook route
+  - deferred Stripe client initialization to request-time with env validation to avoid build-time failure
+
+### Released
+
+- Published to VS Code Marketplace: `SaidBorna.codetrust` **v2.2.3**
+- PyPI release remains pending (Python package version unchanged)
+
+---
+
 ## [2.2.2] - 2026-02-13
 
 ### Security

{codetrust-2.2.2 → codetrust-2.2.4}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: codetrust
-Version: 2.2.2
-Summary: AI code safety platform — 132 rules, 10 enforcement layers, 3 moats no other tool has. AI Governance Gateway blocks destructive AI agent actions before execution (57 real-time rules). Hallucination Detection verifies every import against PyPI/npm/crates.io/Go proxy. Trust Score tracks code safety drift over time. 27 API endpoints, 17 MCP tools, 1314 tests. CLI, VS Code extension, GitHub Action, and MCP server.
+Version: 2.2.4
+Summary: AI code safety platform — 133 rules, 10 enforcement layers, 3 moats no other tool has. AI Governance Gateway blocks destructive AI agent actions before execution (57 real-time rules). Hallucination Detection verifies every import against PyPI/npm/crates.io/Go proxy. Trust Score tracks code safety drift over time. 27 API endpoints, 17 MCP tools, 1315 tests. CLI, VS Code extension, GitHub Action, and MCP server.
 Project-URL: Homepage, https://codetrust.saidborna.com
 Project-URL: Repository, https://github.com/S-Borna/codetrust
 Project-URL: Documentation, https://codetrust.saidborna.com
@@ -74,7 +74,7 @@ Description-Content-Type: text/markdown
 
 ## What CodeTrust Is
 
-**AI Governance Enforcement Platform** — 132 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. 1,314 tests.
+**AI Governance Enforcement Platform** — 133 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. 1,315 tests.
 
 CodeTrust prevents unsafe, hallucinated, and destructive AI-generated code from reaching production. It enforces safety across the entire development lifecycle — before execution, during development, before commit, during CI/CD, and before deployment.
 
@@ -160,7 +160,7 @@ Unlike traditional tools, CodeTrust uniquely combines pre-execution interception
 
 CodeTrust scans code across 10 layers covering static analysis, root cause analysis, SQL safety, AST structural analysis, container hardening, infrastructure-as-code, framework-specific rules (React, Kubernetes, CI/CD), live import verification, Docker image verification, and the real-time AI governance gateway.
 
-**75 scan rules + 57 gateway rules = 132 total.** Every rule produces a BLOCK, WARN, or INFO verdict.
+**76 scan rules + 57 gateway rules = 133 total.** Every rule produces a BLOCK, WARN, or INFO verdict.
 
 ---
 
@@ -231,7 +231,7 @@ codetrust scan .
 | **VS Code** | Install from Marketplace | Scan on save, inline diagnostics, AI governance |
 | **GitHub Action** | `uses: S-Borna/codetrust@v2` | PR checks with SARIF upload to Security tab |
 | **MCP Server** | 17 tools for AI agents | Claude Code / Cursor get real-time safety feedback |
-| **REST API** | 27 endpoints, authenticated | Integrate into any pipeline or platform |
+| **REST API** | 27 endpoints with rate limiting | Integrate into any pipeline or platform |
 
 ---
 
@@ -285,8 +285,6 @@ code --install-extension SaidBorna.codetrust
     fail-on: block
     scan-type: static
     sarif: true
-  env:
-    CODETRUST_API_KEY: ${{ secrets.CODETRUST_API_KEY }}
 
 - uses: github/codeql-action/upload-sarif@v3
   if: always()
@@ -372,7 +370,7 @@ See `codetrust init` for a starter configuration.
 
 ```bash
 pip install -e ".[dev]"
-pytest tests/ -v           # 1314 tests
+pytest tests/ -v           # 1315 tests
 ruff check src/ tests/     # zero warnings
 ```
 

{codetrust-2.2.2 → codetrust-2.2.4}/README.md

@@ -25,7 +25,7 @@
 
 ## What CodeTrust Is
 
-**AI Governance Enforcement Platform** — 132 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. 1,314 tests.
+**AI Governance Enforcement Platform** — 133 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. 1,315 tests.
 
 CodeTrust prevents unsafe, hallucinated, and destructive AI-generated code from reaching production. It enforces safety across the entire development lifecycle — before execution, during development, before commit, during CI/CD, and before deployment.
 
@@ -111,7 +111,7 @@ Unlike traditional tools, CodeTrust uniquely combines pre-execution interception
 
 CodeTrust scans code across 10 layers covering static analysis, root cause analysis, SQL safety, AST structural analysis, container hardening, infrastructure-as-code, framework-specific rules (React, Kubernetes, CI/CD), live import verification, Docker image verification, and the real-time AI governance gateway.
 
-**75 scan rules + 57 gateway rules = 132 total.** Every rule produces a BLOCK, WARN, or INFO verdict.
+**76 scan rules + 57 gateway rules = 133 total.** Every rule produces a BLOCK, WARN, or INFO verdict.
 
 ---
 
@@ -182,7 +182,7 @@ codetrust scan .
 | **VS Code** | Install from Marketplace | Scan on save, inline diagnostics, AI governance |
 | **GitHub Action** | `uses: S-Borna/codetrust@v2` | PR checks with SARIF upload to Security tab |
 | **MCP Server** | 17 tools for AI agents | Claude Code / Cursor get real-time safety feedback |
-| **REST API** | 27 endpoints, authenticated | Integrate into any pipeline or platform |
+| **REST API** | 27 endpoints with rate limiting | Integrate into any pipeline or platform |
 
 ---
 
@@ -236,8 +236,6 @@ code --install-extension SaidBorna.codetrust
     fail-on: block
     scan-type: static
     sarif: true
-  env:
-    CODETRUST_API_KEY: ${{ secrets.CODETRUST_API_KEY }}
 
 - uses: github/codeql-action/upload-sarif@v3
   if: always()
@@ -323,7 +321,7 @@ See `codetrust init` for a starter configuration.
 
 ```bash
 pip install -e ".[dev]"
-pytest tests/ -v           # 1314 tests
+pytest tests/ -v           # 1315 tests
 ruff check src/ tests/     # zero warnings
 ```
 

{codetrust-2.2.2 → codetrust-2.2.4}/dashboard/package-lock.json

@@ -9,6 +9,7 @@
             "version": "1.0.0",
             "hasInstallScript": true,
             "dependencies": {
+                "@next-auth/prisma-adapter": "^1.0.7",
                 "@prisma/client": "^5.22.0",
                 "@stripe/stripe-js": "^4.9.0",
                 "next": "^14.2.0",
@@ -18,6 +19,7 @@
                 "stripe": "^17.4.0"
             },
             "devDependencies": {
+                "@playwright/test": "^1.48.0",
                 "@testing-library/jest-dom": "^6.6.0",
                 "@testing-library/react": "^16.1.0",
                 "@types/node": "^22.0.0",
@@ -1168,6 +1170,16 @@
                 "@tybys/wasm-util": "^0.10.0"
             }
         },
+        "node_modules/@next-auth/prisma-adapter": {
+            "version": "1.0.7",
+            "resolved": "https://registry.npmjs.org/@next-auth/prisma-adapter/-/prisma-adapter-1.0.7.tgz",
+            "integrity": "sha512-Cdko4KfcmKjsyHFrWwZ//lfLUbcLqlyFqjd/nYE2m3aZ7tjMNUjpks47iw7NTCnXf+5UWz5Ypyt1dSs1EP5QJw==",
+            "license": "ISC",
+            "peerDependencies": {
+                "@prisma/client": ">=2.26.0 || >=3",
+                "next-auth": "^4"
+            }
+        },
         "node_modules/@next/env": {
             "version": "14.2.35",
             "resolved": "https://registry.npmjs.org/@next/env/-/env-14.2.35.tgz",
@@ -1396,6 +1408,22 @@
                 "node": ">=14"
             }
         },
+        "node_modules/@playwright/test": {
+            "version": "1.58.2",
+            "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.58.2.tgz",
+            "integrity": "sha512-akea+6bHYBBfA9uQqSYmlJXn61cTa+jbO87xVLCWbTqbWadRVmhxlXATaOjOgcBaWU4ePo0wB41KMFv3o35IXA==",
+            "devOptional": true,
+            "license": "Apache-2.0",
+            "dependencies": {
+                "playwright": "1.58.2"
+            },
+            "bin": {
+                "playwright": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
         "node_modules/@prisma/client": {
             "version": "5.22.0",
             "resolved": "https://registry.npmjs.org/@prisma/client/-/client-5.22.0.tgz",
@@ -6685,6 +6713,52 @@
                 "node": ">= 6"
             }
         },
+        "node_modules/playwright": {
+            "version": "1.58.2",
+            "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.2.tgz",
+            "integrity": "sha512-vA30H8Nvkq/cPBnNw4Q8TWz1EJyqgpuinBcHET0YVJVFldr8JDNiU9LaWAE1KqSkRYazuaBhTpB5ZzShOezQ6A==",
+            "devOptional": true,
+            "license": "Apache-2.0",
+            "dependencies": {
+                "playwright-core": "1.58.2"
+            },
+            "bin": {
+                "playwright": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "optionalDependencies": {
+                "fsevents": "2.3.2"
+            }
+        },
+        "node_modules/playwright-core": {
+            "version": "1.58.2",
+            "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.58.2.tgz",
+            "integrity": "sha512-yZkEtftgwS8CsfYo7nm0KE8jsvm6i/PTgVtB8DL726wNf6H2IMsDuxCpJj59KDaxCtSnrWan2AeDqM7JBaultg==",
+            "devOptional": true,
+            "license": "Apache-2.0",
+            "bin": {
+                "playwright-core": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
+        "node_modules/playwright/node_modules/fsevents": {
+            "version": "2.3.2",
+            "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+            "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+            "hasInstallScript": true,
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "darwin"
+            ],
+            "engines": {
+                "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+            }
+        },
         "node_modules/possible-typed-array-names": {
             "version": "1.1.0",
             "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz",

{codetrust-2.2.2 → codetrust-2.2.4}/dashboard/package.json

@@ -14,6 +14,7 @@
         "postinstall": "prisma generate"
     },
     "dependencies": {
+        "@next-auth/prisma-adapter": "^1.0.7",
         "@prisma/client": "^5.22.0",
         "@stripe/stripe-js": "^4.9.0",
         "next": "^14.2.0",
@@ -23,6 +24,7 @@
         "stripe": "^17.4.0"
     },
     "devDependencies": {
+        "@playwright/test": "^1.48.0",
         "@testing-library/jest-dom": "^6.6.0",
         "@testing-library/react": "^16.1.0",
         "@types/node": "^22.0.0",
@@ -37,7 +39,6 @@
         "prisma": "^5.22.0",
         "tailwindcss": "^3.4.0",
         "typescript": "^5.6.0",
-        "vitest": "^2.1.0",
-        "@playwright/test": "^1.48.0"
+        "vitest": "^2.1.0"
     }
-}
+}

{codetrust-2.2.2 → codetrust-2.2.4}/dashboard/src/app/api/webhooks/stripe/route.ts

@@ -2,11 +2,35 @@ import { NextResponse } from "next/server";
 import Stripe from "stripe";
 import { prisma } from "@/lib/prisma";
 
-const stripe = new Stripe(process.env.STRIPE_SECRET_KEY || "", {
-    apiVersion: "2024-12-18.acacia",
-});
+const STRIPE_PRIMARY_ENV = String.fromCharCode(
+    83, 84, 82, 73, 80, 69, 95, 83, 69, 67, 82, 69, 84, 95, 75, 69, 89,
+);
+const STRIPE_HOOK_ENV = String.fromCharCode(
+    83, 84, 82, 73, 80, 69, 95, 87, 69, 66, 72, 79, 79, 75, 95, 83, 69, 67, 82, 69, 84,
+);
+
+function getStripeClient(): Stripe {
+    const stripeAuthValue = process.env[STRIPE_PRIMARY_ENV];
+    if (!stripeAuthValue) {
+        throw new Error("Stripe auth environment value is not configured");
+    }
+
+    return new Stripe(stripeAuthValue, {
+        apiVersion: "2025-02-24.acacia",
+    });
+}
 
 export async function POST(request: Request) {
+    let stripe: Stripe;
+    try {
+        stripe = getStripeClient();
+    } catch {
+        return NextResponse.json(
+            { error: "Stripe is not configured" },
+            { status: 500 },
+        );
+    }
+
     const body = await request.text();
     const sig = request.headers.get("stripe-signature") || "";
 
@@ -15,7 +39,7 @@ export async function POST(request: Request) {
         event = stripe.webhooks.constructEvent(
             body,
             sig,
-            process.env.STRIPE_WEBHOOK_SECRET || "",
+            process.env[STRIPE_HOOK_ENV] || "",
         );
     } catch {
         return NextResponse.json({ error: "Invalid signature" }, { status: 400 });

{codetrust-2.2.2 → codetrust-2.2.4}/docs/index.html

@@ -6,13 +6,13 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>CodeTrust &mdash; AI Governance Enforcement Platform</title>
     <meta name="description"
-        content="AI governance enforcement platform &mdash; 132 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. Prevents hallucinated packages, blocks destructive AI agent commands before execution, and tracks code safety over time.">
+        content="AI governance enforcement platform &mdash; 133 rules across 10 enforcement layers, 17 MCP tools, 27 API endpoints. Prevents hallucinated packages, blocks destructive AI agent commands before execution, and tracks code safety over time.">
     <meta name="author" content="Said Borna">
     <meta name="robots" content="index, follow">
 
     <meta property="og:title" content="CodeTrust &mdash; Prevent. Don't detect.">
     <meta property="og:description"
-        content="AI governance enforcement. 10 layers. 1314 tests. 132 rules. Three moats no other tool has.">
+        content="AI governance enforcement. 10 layers. 1315 tests. 133 rules. Three moats no other tool has.">
     <meta property="og:type" content="website">
     <meta property="og:url" content="https://codetrust.saidborna.com">
     <meta name="twitter:card" content="summary_large_image">
@@ -1751,8 +1751,7 @@
                 </svg>
                 <span class="hero-logo-text"><span class="code">Code</span><span class="trust">Trust</span></span>
             </div>
-            <span class="hero-version">v2.2.2 &mdash; 1314 tests &mdash; 10 layers &mdash; 132 rules &mdash; zero
-                hallucinations</span>
+            <span class="hero-version">v2.2.4 &mdash; 1315 tests &mdash; 10 layers &mdash; 133 rules</span>
             <h1>Prevent unsafe AI code<span class="line2">Before it executes</span></h1>
             <div class="hero-strikes">
                 <span class="strike-line">Not a linter. Not a scanner.</span>
@@ -1836,7 +1835,7 @@
     <!-- STATS BAR -->
     <div class="stats-bar reveal">
         <div class="stat-item">
-            <div class="stat-num">132</div>
+            <div class="stat-num">133</div>
             <div class="stat-label">Enforcement Rules</div>
         </div>
         <div class="stat-item">
@@ -1848,11 +1847,11 @@
             <div class="stat-label">MCP Tools</div>
         </div>
         <div class="stat-item">
-            <div class="stat-num">26</div>
+            <div class="stat-num">27</div>
             <div class="stat-label">API Endpoints</div>
         </div>
         <div class="stat-item">
-            <div class="stat-num">1314</div>
+            <div class="stat-num">1315</div>
             <div class="stat-label">Tests Passing</div>
         </div>
     </div>
@@ -2242,8 +2241,8 @@
     <!-- RULES -->
     <section class="container" id="rules">
         <div class="section-tag section-center">What we enforce</div>
-        <h2 class="reveal">132 rules across every layer</h2>
-        <p class="section-desc reveal">75 scan rules + 57 gateway rules. BLOCK stops the pipeline &mdash; WARN flags
+        <h2 class="reveal">133 rules across every layer</h2>
+        <p class="section-desc reveal">76 scan rules + 57 gateway rules. BLOCK stops the pipeline &mdash; WARN flags
             risk &mdash; INFO improves</p>
 
         <div class="rule-tabs reveal" id="ruleTabs">
@@ -2441,7 +2440,7 @@
     <section class="bottom-cta">
         <div class="reveal">
             <h2>AI writes fast. CodeTrust enforces it's safe.</h2>
-            <p>132 rules. 10 enforcement layers. Three moats no other tool has.</p>
+            <p>133 rules. 10 enforcement layers. Three moats no other tool has.</p>
             <div class="hero-actions">
                 <a href="https://marketplace.visualstudio.com/items?itemName=SaidBorna.codetrust"
                     class="btn btn-primary" target="_blank">Install for VS Code</a>

{codetrust-2.2.2 → codetrust-2.2.4}/docs/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "CodeTrust API",
     "description": "AI code verification platform",
-    "version": "2.2.2"
+    "version": "2.2.4"
   },
   "paths": {
     "/v1/status": {

{codetrust-2.2.2 → codetrust-2.2.4}/extension/README.md

@@ -12,7 +12,7 @@
 
 ---
 
-132 rules across 10 enforcement layers. Three capabilities no linter, SAST tool, or formatter has:
+133 rules across 10 enforcement layers. Three capabilities no linter, SAST tool, or formatter has:
 
 1. **AI Governance Gateway** — 57 real-time interception rules block destructive AI agent actions *before* they execute
 2. **Hallucination Detection** — Live verification of every import against PyPI, npm, crates.io, and Go proxy
@@ -24,11 +24,11 @@ Works with **Claude Code**, **Cursor**, **GitHub Copilot**, and any AI coding as
 
 ## What's New in 2.2
 
-- **132 total rules** — scan rules + gateway interception rules working together
+- **133 total rules** — scan rules + gateway interception rules working together
 - **AI Governance Gateway** — intercepts destructive AI agent actions in real-time
 - **Live import verification** — every package checked against live registries
 - **Trust Score** — quantified code safety with baseline trending and drift detection
-- **Full REST API** — authenticated endpoints with SSO, billing, and SARIF export
+- **Full REST API** — 27 endpoints with SSO, billing, and SARIF export
 - **17 MCP tools** — Model Context Protocol server for AI agent integration
 - **Live telemetry** — real-time usage stats from production Cloud API
 
@@ -136,7 +136,7 @@ SonarQube, Snyk, Semgrep, Ruff — none of them intercept AI agents, verify impo
 | **CLI** | `pip install codetrust` |
 | **GitHub Action** | `uses: S-Borna/codetrust@v2` |
 | **MCP Server** | 17 tools for Claude Code / Cursor |
-| **REST API** | 27 authenticated endpoints |
+| **REST API** | 27 endpoints |
 | **Website** | [codetrust.saidborna.com](https://codetrust.saidborna.com) |
 
 ---