contrastapi 1.22.4__tar.gz → 1.22.5__tar.gz

{contrastapi-1.22.4 → contrastapi-1.22.5}/.gitignore

@@ -18,3 +18,12 @@ research_landing*.md
 .coverage
 deploy/
 .aider*
+
+# SDK build artifacts (regenerated per release)
+sdk/python/dist/
+
+sdk/node/publish_v*.txt
+sdk/python/publish_v*.txt
+
+# One-shot CLI verification reports
+cli_prompt_verify.md

{contrastapi-1.22.4 → contrastapi-1.22.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: contrastapi
-Version: 1.22.4
+Version: 1.22.5
 Summary: Official Python SDK for ContrastAPI — security intelligence for developers and AI agents
 Project-URL: Homepage, https://contrastcyber.com
 Project-URL: Documentation, https://api.contrastcyber.com/docs

contrastapi-1.22.5/contrastapi/_version.py

@@ -0,0 +1 @@
+__version__ = "1.22.5"

{contrastapi-1.22.4 → contrastapi-1.22.5}/contrastapi/exceptions.py

@@ -8,6 +8,7 @@ the parsed `ErrorDetail` envelope (dict) from the wire — `.code`, `.message`,
 
 from __future__ import annotations
 
+import math
 from typing import Any
 
 # Wire-boundary defensive caps mirror server-side `_ERROR_MESSAGE_MAX_LEN` /
@@ -67,7 +68,7 @@ def _coerce_retry_after(value: Any) -> int | None:
         return None
     # Reject NaN — `int(float('nan'))` raises ValueError but inf raises
     # OverflowError; both must be silently dropped to None per defensive policy.
-    if isinstance(value, float) and (value != value or value in (float("inf"), float("-inf"))):
+    if isinstance(value, float) and (math.isnan(value) or math.isinf(value)):
         return None
     try:
         as_int = int(value)

{contrastapi-1.22.4 → contrastapi-1.22.5}/contrastapi/models.py

@@ -70,6 +70,9 @@ class CveResponse(TypedDict, total=False):
     cvss_v3: float
     cvss_breakdown: dict[str, Any]
     cwe_id: str
+    cwes: list[str]  # v1.28.0 (B4A) — all CWE identifiers, Primary first
+    vulnerability_status: str  # v1.29.0 (B5) — NVD lifecycle (Analyzed/Modified/Rejected/...)
+    cve_tags: list[str]  # v1.29.0 (B5) — NVD cveTags (e.g. 'disputed')
     epss: dict[str, Any]
     kev: dict[str, Any]
     affected_products: list[dict[str, Any]]
@@ -78,9 +81,16 @@ class CveResponse(TypedDict, total=False):
     modified: str
     references: list[str]
     total_references: int
+    total_references_unique: int  # v1.29.0 (B6A) — unique-URL count from refs_with_tags
+    references_full: list[dict[str, Any]]  # v1.29.0 (B6B) — [{url, tags, source}] when ?include_reference_tags=true
     patch_available: bool
     patch_url: str
     sources: list[str]
+    cvss_v2: float  # v1.29.0 (B7) — CVSS v2.0 base score (always emitted)
+    cvss_v2_vector: str  # v1.29.0 (B7) — CVSS v2.0 vector string
+    severity_sources: list[dict[str, Any]]  # v1.29.0 (B7) — per-source severity breakdown
+    severity_consensus: str  # v1.29.0 (B7) — majority-bucket consensus
+    severity_disagreement: bool  # v1.29.0 (B7) — true when sources disagree
     verdict: Verdict
     next_calls: list[PivotHint]
 
@@ -103,6 +113,8 @@ class KevDetailResponse(TypedDict, total=False):
     cve_id: str
     in_kev: bool
     date_added: str
+    date_updated: str  # v1.29.0 (B5) — feed update timestamp
+    date_removed: str  # v1.29.0 (B5) — soft-delete lifecycle (null when still active)
     due_date: str
     required_action: str
     known_ransomware_use: bool
@@ -147,6 +159,51 @@ class ExploitResponse(TypedDict, total=False):
     next_calls: list[PivotHint]
 
 
+# --- v1.29.1: composite risk score + CVSS v3.x parser ---
+
+
+class CvssMetrics(TypedDict, total=False):
+    attack_vector: str
+    attack_complexity: str
+    privileges_required: str
+    user_interaction: str
+    scope: str
+    confidentiality_impact: str
+    integrity_impact: str
+    availability_impact: str
+
+
+class CvssDetailsResponse(TypedDict, total=False):
+    """v1.29.1 — `GET /v1/cvss/details?vector=...`."""
+
+    version: str
+    vector: str
+    base_score: float
+    base_severity: str
+    metrics: CvssMetrics
+    temporal_score: float | None
+    environmental_score: float | None
+    summary: str
+    verdict: Verdict
+    next_calls: list[PivotHint]
+
+
+class RiskScoreResponse(TypedDict, total=False):
+    """v1.29.1 — `GET /v1/cve/{cve_id}/risk_score`."""
+
+    cve_id: str
+    score: float
+    label: str  # CRITICAL / HIGH / MEDIUM / LOW
+    urgency: str
+    has_public_poc: bool
+    components: dict[str, Any]
+    boosters_applied: list[str]
+    recommendation: str
+    summary: str
+    verdict: Verdict
+    next_calls: list[PivotHint]
+
+
 # --- Bulk parity (v1.21.0+ unified status enum: ok/error/not_found/invalid_format) ---
 
 

{contrastapi-1.22.4 → contrastapi-1.22.5}/contrastapi/namespaces/cve.py

@@ -10,9 +10,11 @@ from ..models import (
     BulkCveResponse,
     CveResponse,
     CveSearchResponse,
+    CvssDetailsResponse,
     CweLookupResponse,
     ExploitResponse,
     KevDetailResponse,
+    RiskScoreResponse,
 )
 
 
@@ -82,6 +84,14 @@ class Cve:
     def exploit(self, cve_id: str) -> ExploitResponse:
         return self._t.get(f"/v1/exploit/{_enc(cve_id)}")
 
+    def risk_score(self, cve_id: str) -> RiskScoreResponse:
+        """v1.29.1 — Composite risk score (CVSS+EPSS+KEV+PoC fusion, 0-100)."""
+        return self._t.get(f"/v1/cve/{_enc(cve_id)}/risk_score")
+
+    def cvss_details(self, vector: str) -> CvssDetailsResponse:
+        """v1.29.1 — Parse a CVSS v3.x vector into per-metric breakdown + recomputed score."""
+        return self._t.get("/v1/cvss/details", params={"vector": vector})
+
     def bulk(self, cve_ids: list[str]) -> BulkCveResponse:
         return self._t.post("/v1/cves/bulk", json_body={"cve_ids": _validate_bulk_ids(cve_ids)})
 
@@ -113,6 +123,14 @@ class AsyncCve:
     async def exploit(self, cve_id: str) -> ExploitResponse:
         return await self._t.aget(f"/v1/exploit/{_enc(cve_id)}")
 
+    async def risk_score(self, cve_id: str) -> RiskScoreResponse:
+        """v1.29.1 — Composite risk score (CVSS+EPSS+KEV+PoC fusion, 0-100)."""
+        return await self._t.aget(f"/v1/cve/{_enc(cve_id)}/risk_score")
+
+    async def cvss_details(self, vector: str) -> CvssDetailsResponse:
+        """v1.29.1 — Parse a CVSS v3.x vector into per-metric breakdown + recomputed score."""
+        return await self._t.aget("/v1/cvss/details", params={"vector": vector})
+
     async def bulk(self, cve_ids: list[str]) -> BulkCveResponse:
         return await self._t.apost("/v1/cves/bulk", json_body={"cve_ids": _validate_bulk_ids(cve_ids)})
 

{contrastapi-1.22.4 → contrastapi-1.22.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "contrastapi"
-version = "1.22.4"
+version = "1.22.5"
 description = "Official Python SDK for ContrastAPI — security intelligence for developers and AI agents"
 readme = "README.md"
 license = "MIT"

{contrastapi-1.22.4 → contrastapi-1.22.5}/tests/test_namespaces.py

@@ -302,7 +302,7 @@ def test_d3fend_coverage_validation():
 @respx.mock
 def test_status_endpoint():
     route = respx.get("https://api.contrastcyber.com/v1/status").mock(
-        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.3"})
+        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.5"})
     )
     with ContrastAPI() as client:
         result = client.status()
@@ -322,4 +322,4 @@ def test_usage_endpoint():
 
 def test_client_exposes_version_string():
     with ContrastAPI() as client:
-        assert client.version == "1.22.3"
+        assert client.version == "1.22.5"

{contrastapi-1.22.4 → contrastapi-1.22.5}/tests/test_transport.py

@@ -22,7 +22,7 @@ from contrastapi import (
 
 
 def test_version_is_pinned():
-    assert __version__ == "1.22.3"
+    assert __version__ == "1.22.5"
 
 
 def test_default_base_url_is_https():
@@ -70,7 +70,7 @@ def test_get_returns_json_body():
 @respx.mock
 def test_user_agent_header_sent():
     route = respx.get("https://api.contrastcyber.com/v1/status").mock(
-        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.3"})
+        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.5"})
     )
     with ContrastAPI() as client:
         client.status()

contrastapi-1.22.4/contrastapi/_version.py

@@ -1 +0,0 @@
-__version__ = "1.22.3"