contrastapi 1.22.4__tar.gz → 1.23.0__tar.gz

contrastapi-1.23.0/.gitignore

@@ -0,0 +1,34 @@
+__pycache__/
+*.pyc
+*.pyo
+.pytest_cache/
+*.db
+*.db-wal
+*.db-shm
+venv/
+.env
+test_*.db
+.mcpregistry_*
+scripts/*
+!scripts/backfill_mitre_fields.py
+!scripts/refresh_sigma.sh
+plans/
+.npmrc
+node_modules/
+research_landing*.md
+.coverage
+deploy/
+.aider*
+
+# SDK build artifacts (regenerated per release)
+sdk/python/dist/
+
+sdk/node/publish_v*.txt
+sdk/python/publish_v*.txt
+
+# One-shot CLI verification reports
+cli_prompt_verify.md
+
+# Local-dev fallback artifacts (BASE_DIR-relative when env vars unset)
+app/mcp_tools.jsonl
+app/glama.json

{contrastapi-1.22.4 → contrastapi-1.23.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: contrastapi
-Version: 1.22.4
+Version: 1.23.0
 Summary: Official Python SDK for ContrastAPI — security intelligence for developers and AI agents
 Project-URL: Homepage, https://contrastcyber.com
 Project-URL: Documentation, https://api.contrastcyber.com/docs
@@ -32,7 +32,7 @@ Description-Content-Type: text/markdown
 
 Official Python client for [ContrastAPI](https://api.contrastcyber.com) — security intelligence for developers and AI agents.
 
-42 MCP tools / 50+ HTTP endpoints: CVE / EPSS / KEV / CWE, MITRE ATLAS (AI/ML attacks) + bulk drill, MITRE D3FEND defenses, domain audit, IOC + threat intel, OSINT, code-security checks, and more. No API key required for the free tier (100 req/hr).
+53 MCP tools / 50+ HTTP endpoints: CVE / EPSS / KEV / CWE, MITRE ATLAS (AI/ML attacks) + bulk drill, MITRE D3FEND defenses, domain audit, IOC + threat intel, OSINT, code-security checks, and more. No API key required for the free tier (30 req/hr).
 
 ## Install
 
@@ -100,7 +100,7 @@ Shortcuts swallow per-leg `ContrastAPIError` so partial failures still return wh
 Pass an API key as the first positional argument or as `api_key=`:
 
 ```python
-client = ContrastAPI("cc_<your-key>")            # 1000 req/hr (Pro tier)
+client = ContrastAPI("cc_<your-key>")            # 500 req/hr (Pro tier)
 ```
 
 Get a key at [contrastcyber.com/pricing](https://contrastcyber.com/pricing).
@@ -144,15 +144,16 @@ except RateLimitError as exc:
 | `ioc` | `lookup`, `hash`, `phishing`, `bulk` |
 | `atlas` | `technique`, `technique_search`, `bulk_technique_lookup`, `case_study`, `case_study_search` |
 | `d3fend` | `defense`, `defense_search`, `defense_for_attack`, `coverage` |
-| `domain` | `report`, `dns`, `whois`, `subdomains`, `certs`, `ssl`, `tech`, `threat`, `monitor`, `vulns`, `audit`, `wayback`, `bulk` |
+| `domain` | `report`, `dns`, `whois`, `subdomains`, `certs`, `ssl`, `tech`, `threat`, `monitor`, `vulns`, `audit`, `wayback`, `robots`, `redirect`, `brand`, `seo`, `bulk` |
 | `ip` | `lookup`, `threat_report` |
 | `asn` | `lookup` |
-| `email` | `mx`, `disposable` |
+| `email` | `mx`, `disposable`, `security_posture`, `verify` |
 | `phone` | `lookup` |
 | `password` | `check` (k-anonymity SHA-1 prefix) |
 | `username` | `lookup` |
 | `check` | `secrets`, `injection`, `headers`, `dependencies` |
 | `scan` | `headers` (live HTTP scan) |
+| `sigma` | `lookup` (by UUID), `bulk` (≤50 rule IDs) |
 
 The async client (`AsyncContrastAPI`) exposes the same namespace surface 1:1 — every method is `async def`.
 
@@ -162,7 +163,7 @@ The async client (`AsyncContrastAPI`) exposes the same namespace surface 1:1 —
 | --- | --- | --- |
 | Sync | ✅ (Promise-based) | ✅ (`ContrastAPI`) |
 | Async | (Promise model) | ✅ (`AsyncContrastAPI`) |
-| Namespace count | 13 | 14 (adds `username`) |
+| Namespace count | 13 | 15 (adds `username`, `sigma`) |
 | `bulk_technique_lookup` (ATLAS) | (added in v1.4.0) | ✅ |
 | `wayback` archive lookup | (added in v1.4.0) | ✅ |
 | Typed errors | `Error` subclasses | full hierarchy with envelope fields |

{contrastapi-1.22.4 → contrastapi-1.23.0}/README.md

@@ -2,7 +2,7 @@
 
 Official Python client for [ContrastAPI](https://api.contrastcyber.com) — security intelligence for developers and AI agents.
 
-42 MCP tools / 50+ HTTP endpoints: CVE / EPSS / KEV / CWE, MITRE ATLAS (AI/ML attacks) + bulk drill, MITRE D3FEND defenses, domain audit, IOC + threat intel, OSINT, code-security checks, and more. No API key required for the free tier (100 req/hr).
+53 MCP tools / 50+ HTTP endpoints: CVE / EPSS / KEV / CWE, MITRE ATLAS (AI/ML attacks) + bulk drill, MITRE D3FEND defenses, domain audit, IOC + threat intel, OSINT, code-security checks, and more. No API key required for the free tier (30 req/hr).
 
 ## Install
 
@@ -70,7 +70,7 @@ Shortcuts swallow per-leg `ContrastAPIError` so partial failures still return wh
 Pass an API key as the first positional argument or as `api_key=`:
 
 ```python
-client = ContrastAPI("cc_<your-key>")            # 1000 req/hr (Pro tier)
+client = ContrastAPI("cc_<your-key>")            # 500 req/hr (Pro tier)
 ```
 
 Get a key at [contrastcyber.com/pricing](https://contrastcyber.com/pricing).
@@ -114,15 +114,16 @@ except RateLimitError as exc:
 | `ioc` | `lookup`, `hash`, `phishing`, `bulk` |
 | `atlas` | `technique`, `technique_search`, `bulk_technique_lookup`, `case_study`, `case_study_search` |
 | `d3fend` | `defense`, `defense_search`, `defense_for_attack`, `coverage` |
-| `domain` | `report`, `dns`, `whois`, `subdomains`, `certs`, `ssl`, `tech`, `threat`, `monitor`, `vulns`, `audit`, `wayback`, `bulk` |
+| `domain` | `report`, `dns`, `whois`, `subdomains`, `certs`, `ssl`, `tech`, `threat`, `monitor`, `vulns`, `audit`, `wayback`, `robots`, `redirect`, `brand`, `seo`, `bulk` |
 | `ip` | `lookup`, `threat_report` |
 | `asn` | `lookup` |
-| `email` | `mx`, `disposable` |
+| `email` | `mx`, `disposable`, `security_posture`, `verify` |
 | `phone` | `lookup` |
 | `password` | `check` (k-anonymity SHA-1 prefix) |
 | `username` | `lookup` |
 | `check` | `secrets`, `injection`, `headers`, `dependencies` |
 | `scan` | `headers` (live HTTP scan) |
+| `sigma` | `lookup` (by UUID), `bulk` (≤50 rule IDs) |
 
 The async client (`AsyncContrastAPI`) exposes the same namespace surface 1:1 — every method is `async def`.
 
@@ -132,7 +133,7 @@ The async client (`AsyncContrastAPI`) exposes the same namespace surface 1:1 —
 | --- | --- | --- |
 | Sync | ✅ (Promise-based) | ✅ (`ContrastAPI`) |
 | Async | (Promise model) | ✅ (`AsyncContrastAPI`) |
-| Namespace count | 13 | 14 (adds `username`) |
+| Namespace count | 13 | 15 (adds `username`, `sigma`) |
 | `bulk_technique_lookup` (ATLAS) | (added in v1.4.0) | ✅ |
 | `wayback` archive lookup | (added in v1.4.0) | ✅ |
 | Typed errors | `Error` subclasses | full hierarchy with envelope fields |

contrastapi-1.23.0/contrastapi/_version.py

@@ -0,0 +1 @@
+__version__ = "1.23.0"

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/client.py

@@ -9,9 +9,9 @@ Both classes accept the same options (`api_key`, `base_url`, `timeout`,
 `allow_insecure`) and expose the same namespace property names. Choose whichever
 matches your application's I/O model.
 
-All 14 namespaces (cve, cwe, ioc, atlas, d3fend, domain, ip, asn, email, phone,
-password, username, check, scan) are exposed as instance attributes. The async
-client mirrors the sync surface 1:1 — same names, async methods.
+All 15 namespaces (cve, cwe, ioc, atlas, d3fend, domain, ip, asn, email, phone,
+password, username, check, scan, sigma) are exposed as instance attributes. The
+async client mirrors the sync surface 1:1 — same names, async methods.
 """
 
 from __future__ import annotations
@@ -41,6 +41,7 @@ from .namespaces.intel import (
 )
 from .namespaces.ioc import AsyncIoc, Ioc
 from .namespaces.security import AsyncCheck, AsyncScan, Check, Scan
+from .namespaces.sigma import AsyncSigma, Sigma
 
 
 class ContrastAPI:
@@ -86,6 +87,7 @@ class ContrastAPI:
         self.username = Username(self._transport)
         self.check = Check(self._transport)
         self.scan = Scan(self._transport)
+        self.sigma = Sigma(self._transport)
 
     @property
     def version(self) -> str:
@@ -150,6 +152,7 @@ class AsyncContrastAPI:
         self.username = AsyncUsername(self._transport)
         self.check = AsyncCheck(self._transport)
         self.scan = AsyncScan(self._transport)
+        self.sigma = AsyncSigma(self._transport)
 
     @property
     def version(self) -> str:

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/exceptions.py

@@ -8,6 +8,7 @@ the parsed `ErrorDetail` envelope (dict) from the wire — `.code`, `.message`,
 
 from __future__ import annotations
 
+import math
 from typing import Any
 
 # Wire-boundary defensive caps mirror server-side `_ERROR_MESSAGE_MAX_LEN` /
@@ -67,7 +68,7 @@ def _coerce_retry_after(value: Any) -> int | None:
         return None
     # Reject NaN — `int(float('nan'))` raises ValueError but inf raises
     # OverflowError; both must be silently dropped to None per defensive policy.
-    if isinstance(value, float) and (value != value or value in (float("inf"), float("-inf"))):
+    if isinstance(value, float) and (math.isnan(value) or math.isinf(value)):
         return None
     try:
         as_int = int(value)

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/models.py

@@ -70,6 +70,9 @@ class CveResponse(TypedDict, total=False):
     cvss_v3: float
     cvss_breakdown: dict[str, Any]
     cwe_id: str
+    cwes: list[str]  # v1.28.0 (B4A) — all CWE identifiers, Primary first
+    vulnerability_status: str  # v1.29.0 (B5) — NVD lifecycle (Analyzed/Modified/Rejected/...)
+    cve_tags: list[str]  # v1.29.0 (B5) — NVD cveTags (e.g. 'disputed')
     epss: dict[str, Any]
     kev: dict[str, Any]
     affected_products: list[dict[str, Any]]
@@ -78,9 +81,16 @@ class CveResponse(TypedDict, total=False):
     modified: str
     references: list[str]
     total_references: int
+    total_references_unique: int  # v1.29.0 (B6A) — unique-URL count from refs_with_tags
+    references_full: list[dict[str, Any]]  # v1.29.0 (B6B) — [{url, tags, source}] when ?include_reference_tags=true
     patch_available: bool
     patch_url: str
     sources: list[str]
+    cvss_v2: float  # v1.29.0 (B7) — CVSS v2.0 base score (always emitted)
+    cvss_v2_vector: str  # v1.29.0 (B7) — CVSS v2.0 vector string
+    severity_sources: list[dict[str, Any]]  # v1.29.0 (B7) — per-source severity breakdown
+    severity_consensus: str  # v1.29.0 (B7) — majority-bucket consensus
+    severity_disagreement: bool  # v1.29.0 (B7) — true when sources disagree
     verdict: Verdict
     next_calls: list[PivotHint]
 
@@ -103,6 +113,8 @@ class KevDetailResponse(TypedDict, total=False):
     cve_id: str
     in_kev: bool
     date_added: str
+    date_updated: str  # v1.29.0 (B5) — feed update timestamp
+    date_removed: str  # v1.29.0 (B5) — soft-delete lifecycle (null when still active)
     due_date: str
     required_action: str
     known_ransomware_use: bool
@@ -147,6 +159,51 @@ class ExploitResponse(TypedDict, total=False):
     next_calls: list[PivotHint]
 
 
+# --- v1.29.1: composite risk score + CVSS v3.x parser ---
+
+
+class CvssMetrics(TypedDict, total=False):
+    attack_vector: str
+    attack_complexity: str
+    privileges_required: str
+    user_interaction: str
+    scope: str
+    confidentiality_impact: str
+    integrity_impact: str
+    availability_impact: str
+
+
+class CvssDetailsResponse(TypedDict, total=False):
+    """v1.29.1 — `GET /v1/cvss/details?vector=...`."""
+
+    version: str
+    vector: str
+    base_score: float
+    base_severity: str
+    metrics: CvssMetrics
+    temporal_score: float | None
+    environmental_score: float | None
+    summary: str
+    verdict: Verdict
+    next_calls: list[PivotHint]
+
+
+class RiskScoreResponse(TypedDict, total=False):
+    """v1.29.1 — `GET /v1/cve/{cve_id}/risk_score`."""
+
+    cve_id: str
+    score: float
+    label: str  # CRITICAL / HIGH / MEDIUM / LOW
+    urgency: str
+    has_public_poc: bool
+    components: dict[str, Any]
+    boosters_applied: list[str]
+    recommendation: str
+    summary: str
+    verdict: Verdict
+    next_calls: list[PivotHint]
+
+
 # --- Bulk parity (v1.21.0+ unified status enum: ok/error/not_found/invalid_format) ---
 
 

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/namespaces/cve.py

@@ -10,9 +10,11 @@ from ..models import (
     BulkCveResponse,
     CveResponse,
     CveSearchResponse,
+    CvssDetailsResponse,
     CweLookupResponse,
     ExploitResponse,
     KevDetailResponse,
+    RiskScoreResponse,
 )
 
 
@@ -82,6 +84,14 @@ class Cve:
     def exploit(self, cve_id: str) -> ExploitResponse:
         return self._t.get(f"/v1/exploit/{_enc(cve_id)}")
 
+    def risk_score(self, cve_id: str) -> RiskScoreResponse:
+        """v1.29.1 — Composite risk score (CVSS+EPSS+KEV+PoC fusion, 0-100)."""
+        return self._t.get(f"/v1/cve/{_enc(cve_id)}/risk_score")
+
+    def cvss_details(self, vector: str) -> CvssDetailsResponse:
+        """v1.29.1 — Parse a CVSS v3.x vector into per-metric breakdown + recomputed score."""
+        return self._t.get("/v1/cvss/details", params={"vector": vector})
+
     def bulk(self, cve_ids: list[str]) -> BulkCveResponse:
         return self._t.post("/v1/cves/bulk", json_body={"cve_ids": _validate_bulk_ids(cve_ids)})
 
@@ -113,6 +123,14 @@ class AsyncCve:
     async def exploit(self, cve_id: str) -> ExploitResponse:
         return await self._t.aget(f"/v1/exploit/{_enc(cve_id)}")
 
+    async def risk_score(self, cve_id: str) -> RiskScoreResponse:
+        """v1.29.1 — Composite risk score (CVSS+EPSS+KEV+PoC fusion, 0-100)."""
+        return await self._t.aget(f"/v1/cve/{_enc(cve_id)}/risk_score")
+
+    async def cvss_details(self, vector: str) -> CvssDetailsResponse:
+        """v1.29.1 — Parse a CVSS v3.x vector into per-metric breakdown + recomputed score."""
+        return await self._t.aget("/v1/cvss/details", params={"vector": vector})
+
     async def bulk(self, cve_ids: list[str]) -> BulkCveResponse:
         return await self._t.apost("/v1/cves/bulk", json_body={"cve_ids": _validate_bulk_ids(cve_ids)})
 

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/namespaces/domain.py

@@ -27,6 +27,12 @@ def _enc(value: str) -> str:
     return quote(str(value), safe="")
 
 
+def _enc_path(value: str) -> str:
+    if value is None or value == "":
+        raise ValueError("Missing required parameter")
+    return "/".join(quote(seg, safe="") for seg in str(value).split("/"))
+
+
 def _validate_domains(domains: list[str]) -> list[str]:
     if not isinstance(domains, list) or not all(isinstance(d, str) for d in domains):
         raise ValueError("domains must be a list of strings")
@@ -81,6 +87,18 @@ class Domain:
     def wayback(self, domain: str) -> WaybackResponse:
         return self._t.get(f"/v1/archive/{_enc(domain)}")
 
+    def robots(self, domain: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/robots/{_enc(domain)}")
+
+    def redirect(self, url: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/redirect/{_enc_path(url)}")
+
+    def brand(self, domain: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/brand/{_enc(domain)}")
+
+    def seo(self, domain: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/seo/{_enc(domain)}")
+
     def bulk(self, domains: list[str]) -> BulkDomainResponse:
         return self._t.post("/v1/domains/bulk", json_body={"domains": _validate_domains(domains)})
 
@@ -125,5 +143,17 @@ class AsyncDomain:
     async def wayback(self, domain: str) -> WaybackResponse:
         return await self._t.aget(f"/v1/archive/{_enc(domain)}")
 
+    async def robots(self, domain: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/robots/{_enc(domain)}")
+
+    async def redirect(self, url: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/redirect/{_enc_path(url)}")
+
+    async def brand(self, domain: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/brand/{_enc(domain)}")
+
+    async def seo(self, domain: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/seo/{_enc(domain)}")
+
     async def bulk(self, domains: list[str]) -> BulkDomainResponse:
         return await self._t.apost("/v1/domains/bulk", json_body={"domains": _validate_domains(domains)})

{contrastapi-1.22.4 → contrastapi-1.23.0}/contrastapi/namespaces/intel.py

@@ -4,6 +4,7 @@ ip, asn, email, phone, password, username.
 
 from __future__ import annotations
 
+from typing import Any
 from urllib.parse import quote
 
 from .._transport import _AsyncTransport, _SyncTransport
@@ -82,6 +83,13 @@ class Email:
     def disposable(self, email: str) -> DisposableResponse:
         return self._t.get(f"/v1/email/disposable/{_enc(email)}")
 
+    def security_posture(self, domain: str, *, selectors: str | None = None) -> dict[str, Any]:
+        params = {"selectors": selectors} if selectors else None
+        return self._t.get(f"/v1/email/security-posture/{_enc(domain)}", params=params)
+
+    def verify(self, email: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/email/verify/{_enc(email)}")
+
 
 class AsyncEmail:
     def __init__(self, transport: _AsyncTransport) -> None:
@@ -93,6 +101,13 @@ class AsyncEmail:
     async def disposable(self, email: str) -> DisposableResponse:
         return await self._t.aget(f"/v1/email/disposable/{_enc(email)}")
 
+    async def security_posture(self, domain: str, *, selectors: str | None = None) -> dict[str, Any]:
+        params = {"selectors": selectors} if selectors else None
+        return await self._t.aget(f"/v1/email/security-posture/{_enc(domain)}", params=params)
+
+    async def verify(self, email: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/email/verify/{_enc(email)}")
+
 
 # --- Phone ---
 

contrastapi-1.23.0/contrastapi/namespaces/sigma.py

@@ -0,0 +1,42 @@
+"""Sigma namespace — detection-rule lookup by UUID + bulk lookup (≤50)."""
+
+from __future__ import annotations
+
+from typing import Any
+from urllib.parse import quote
+
+from .._transport import _AsyncTransport, _SyncTransport
+
+
+def _enc(value: str) -> str:
+    if value is None or value == "":
+        raise ValueError("Missing required parameter")
+    return quote(str(value), safe="")
+
+
+def _validate_rule_ids(rule_ids: list[str]) -> list[str]:
+    if not isinstance(rule_ids, list) or not all(isinstance(r, str) for r in rule_ids):
+        raise ValueError("rule_ids must be a list of strings")
+    return rule_ids
+
+
+class Sigma:
+    def __init__(self, transport: _SyncTransport) -> None:
+        self._t = transport
+
+    def lookup(self, rule_id: str) -> dict[str, Any]:
+        return self._t.get(f"/v1/sigma/{_enc(rule_id)}")
+
+    def bulk(self, rule_ids: list[str]) -> dict[str, Any]:
+        return self._t.post("/v1/sigma/bulk", json_body={"rule_ids": _validate_rule_ids(rule_ids)})
+
+
+class AsyncSigma:
+    def __init__(self, transport: _AsyncTransport) -> None:
+        self._t = transport
+
+    async def lookup(self, rule_id: str) -> dict[str, Any]:
+        return await self._t.aget(f"/v1/sigma/{_enc(rule_id)}")
+
+    async def bulk(self, rule_ids: list[str]) -> dict[str, Any]:
+        return await self._t.apost("/v1/sigma/bulk", json_body={"rule_ids": _validate_rule_ids(rule_ids)})

{contrastapi-1.22.4 → contrastapi-1.23.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "contrastapi"
-version = "1.22.4"
+version = "1.23.0"
 description = "Official Python SDK for ContrastAPI — security intelligence for developers and AI agents"
 readme = "README.md"
 license = "MIT"

{contrastapi-1.22.4 → contrastapi-1.23.0}/tests/test_namespaces.py

@@ -302,7 +302,7 @@ def test_d3fend_coverage_validation():
 @respx.mock
 def test_status_endpoint():
     route = respx.get("https://api.contrastcyber.com/v1/status").mock(
-        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.3"})
+        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.5"})
     )
     with ContrastAPI() as client:
         result = client.status()
@@ -322,4 +322,4 @@ def test_usage_endpoint():
 
 def test_client_exposes_version_string():
     with ContrastAPI() as client:
-        assert client.version == "1.22.3"
+        assert client.version == "1.23.0"

{contrastapi-1.22.4 → contrastapi-1.23.0}/tests/test_transport.py

@@ -22,7 +22,7 @@ from contrastapi import (
 
 
 def test_version_is_pinned():
-    assert __version__ == "1.22.3"
+    assert __version__ == "1.23.0"
 
 
 def test_default_base_url_is_https():
@@ -70,7 +70,7 @@ def test_get_returns_json_body():
 @respx.mock
 def test_user_agent_header_sent():
     route = respx.get("https://api.contrastcyber.com/v1/status").mock(
-        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.3"})
+        return_value=httpx.Response(200, json={"status": "ok", "version": "1.22.5"})
     )
     with ContrastAPI() as client:
         client.status()

contrastapi-1.23.0/tests/test_v1_23_endpoints.py

@@ -0,0 +1,152 @@
+"""v1.23.0 — tests for the 8 endpoints added for API-surface parity:
+domain.robots / redirect / brand / seo, email.security_posture / verify,
+sigma.lookup / bulk. Mirrors test_namespaces.py: URL construction + body shape,
+sync + async parity samples.
+"""
+
+from __future__ import annotations
+
+import httpx
+import respx
+from contrastapi import AsyncContrastAPI, ContrastAPI
+
+BASE = "https://api.contrastcyber.com"
+RULE_ID = "11111111-2222-3333-4444-555555555555"
+
+
+# --- domain web-intel ---------------------------------------------------------
+
+
+@respx.mock
+def test_domain_robots_url():
+    route = respx.get(f"{BASE}/v1/robots/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    with ContrastAPI() as client:
+        client.domain.robots("example.com")
+    assert route.called
+
+
+@respx.mock
+def test_domain_redirect_preserves_path_separators():
+    """`/v1/redirect/{url:path}` — slashes in the URL survive the path encoder."""
+    target = "https://bit.ly/3xyz"
+    route = respx.get(url__regex=rf"{BASE}/v1/redirect/.+").mock(
+        return_value=httpx.Response(200, json={"hops": []})
+    )
+    with ContrastAPI() as client:
+        client.domain.redirect(target)
+    request_url = str(route.calls.last.request.url)
+    assert "bit.ly/3xyz" in request_url
+
+
+@respx.mock
+def test_domain_brand_url():
+    route = respx.get(f"{BASE}/v1/brand/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    with ContrastAPI() as client:
+        client.domain.brand("example.com")
+    assert route.called
+
+
+@respx.mock
+def test_domain_seo_url():
+    route = respx.get(f"{BASE}/v1/seo/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    with ContrastAPI() as client:
+        client.domain.seo("example.com")
+    assert route.called
+
+
+# --- email -------------------------------------------------------------------
+
+
+@respx.mock
+def test_email_security_posture_url():
+    route = respx.get(f"{BASE}/v1/email/security-posture/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    with ContrastAPI() as client:
+        client.email.security_posture("example.com")
+    assert route.called
+    assert dict(route.calls.last.request.url.params) == {}
+
+
+@respx.mock
+def test_email_security_posture_selectors_query():
+    route = respx.get(f"{BASE}/v1/email/security-posture/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    with ContrastAPI() as client:
+        client.email.security_posture("example.com", selectors="selector1,selector2")
+    assert dict(route.calls.last.request.url.params) == {"selectors": "selector1,selector2"}
+
+
+@respx.mock
+def test_email_verify_url():
+    route = respx.get(f"{BASE}/v1/email/verify/user%40example.com").mock(
+        return_value=httpx.Response(200, json={"email": "user@example.com"})
+    )
+    with ContrastAPI() as client:
+        client.email.verify("user@example.com")
+    assert route.called
+
+
+# --- sigma -------------------------------------------------------------------
+
+
+@respx.mock
+def test_sigma_lookup_url():
+    route = respx.get(f"{BASE}/v1/sigma/{RULE_ID}").mock(
+        return_value=httpx.Response(200, json={"rule": {}})
+    )
+    with ContrastAPI() as client:
+        client.sigma.lookup(RULE_ID)
+    assert route.called
+
+
+@respx.mock
+def test_sigma_bulk_body():
+    route = respx.post(f"{BASE}/v1/sigma/bulk").mock(
+        return_value=httpx.Response(200, json={"items": []})
+    )
+    with ContrastAPI() as client:
+        client.sigma.bulk([RULE_ID, "bad-id"])
+    import json
+
+    assert json.loads(route.calls.last.request.content) == {"rule_ids": [RULE_ID, "bad-id"]}
+
+
+# --- async parity ------------------------------------------------------------
+
+
+@respx.mock
+async def test_async_sigma_lookup_url():
+    route = respx.get(f"{BASE}/v1/sigma/{RULE_ID}").mock(
+        return_value=httpx.Response(200, json={"rule": {}})
+    )
+    async with AsyncContrastAPI() as client:
+        await client.sigma.lookup(RULE_ID)
+    assert route.called
+
+
+@respx.mock
+async def test_async_domain_seo_url():
+    route = respx.get(f"{BASE}/v1/seo/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    async with AsyncContrastAPI() as client:
+        await client.domain.seo("example.com")
+    assert route.called
+
+
+@respx.mock
+async def test_async_email_security_posture_url():
+    route = respx.get(f"{BASE}/v1/email/security-posture/example.com").mock(
+        return_value=httpx.Response(200, json={"domain": "example.com"})
+    )
+    async with AsyncContrastAPI() as client:
+        await client.email.security_posture("example.com")
+    assert route.called

contrastapi-1.22.4/.gitignore

@@ -1,20 +0,0 @@
-__pycache__/
-*.pyc
-*.pyo
-.pytest_cache/
-*.db
-*.db-wal
-*.db-shm
-venv/
-.env
-test_*.db
-.mcpregistry_*
-scripts/*
-!scripts/backfill_mitre_fields.py
-plans/
-.npmrc
-node_modules/
-research_landing*.md
-.coverage
-deploy/
-.aider*

contrastapi-1.22.4/contrastapi/_version.py

@@ -1 +0,0 @@
-__version__ = "1.22.3"