crackerjack 0.34.1__tar.gz → 0.35.0__tar.gz

{crackerjack-0.34.1 → crackerjack-0.35.0}/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.35.0] - 2025-09-15
+
+### Fixed
+
+- cli: Add 'auto' option to BumpOption enum and fix URL formatting
+
+### Documentation
+
+- config: Update CHANGELOG, CLAUDE, pyproject
+
+## [0.34.2] - 2025-09-15
+
+### Fixed
+
+- security: Suppress verbose logging and fix commit validation error (parentheses allowed)
+
 ## [0.34.0] - 2025-09-15
 
 ### Changed

{crackerjack-0.34.1 → crackerjack-0.35.0}/CLAUDE.md

@@ -347,3 +347,5 @@ from ..models.protocols import TestManagerProtocol
 - make sure to run `python -m crackerjack` after every editing/debugging cycle for quality checking
 - always put implementation plans in a md doc for review and reference
 - think when you need to think, think harder when you need to think harder
+
+# Test debug logging

{crackerjack-0.34.1 → crackerjack-0.35.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crackerjack
-Version: 0.34.1
+Version: 0.35.0
 Summary: Crackerjack Python project management tool
 Project-URL: documentation, https://github.com/lesleslie/crackerjack
 Project-URL: homepage, https://github.com/lesleslie/crackerjack

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/__main__.py

@@ -11,7 +11,6 @@ from crackerjack.services.git import GitService
 
 from .cli import (
     CLI_OPTIONS,
-    BumpOption,
     create_options,
     handle_interactive_mode,
     handle_standard_mode,
@@ -1220,9 +1219,9 @@ def main(
     update_precommit: bool = CLI_OPTIONS["update_precommit"],
     verbose: bool = CLI_OPTIONS["verbose"],
     debug: bool = CLI_OPTIONS["debug"],
-    publish: BumpOption | None = CLI_OPTIONS["publish"],
-    all: BumpOption | None = CLI_OPTIONS["all"],
-    bump: BumpOption | None = CLI_OPTIONS["bump"],
+    publish: str | None = CLI_OPTIONS["publish"],
+    all: str | None = CLI_OPTIONS["all"],
+    bump: str | None = CLI_OPTIONS["bump"],
     strip_code: bool = CLI_OPTIONS["strip_code"],
     run_tests: bool = CLI_OPTIONS["run_tests"],
     benchmark: bool = CLI_OPTIONS["benchmark"],

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/agents/documentation_agent.py

@@ -325,8 +325,8 @@ class DocumentationAgent(SubAgent):
 
 All notable changes to this project will be documented in this file.
 
-The format is based on [Keep a Changelog](https: //keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https: //semver.org/spec/v2.0.0.html).
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 {entry}
 """

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/cli/options.py

@@ -2,15 +2,36 @@ import typing as t
 import warnings
 from enum import Enum
 
+import click
 import typer
 from pydantic import BaseModel, field_validator, model_validator
 
 
+def parse_bump_option_with_flag_support(
+    ctx: click.Context, param: click.Parameter, value: str | None
+) -> str | None:
+    """Parse bump option that supports both flag usage (-p) and value usage (-p patch)."""
+    if value is None:
+        return None
+
+    # If the value starts with a dash, it's likely another flag that typer mistakenly captured
+    if value.startswith("-"):
+        # Put the value back into the arguments for typer to process
+        if hasattr(ctx, "protected_args"):
+            ctx.protected_args.insert(0, value)
+        elif hasattr(ctx, "args"):
+            ctx.args.insert(0, value)
+        return "interactive"
+
+    return value
+
+
 class BumpOption(str, Enum):
     patch = "patch"
     minor = "minor"
     major = "major"
     interactive = "interactive"
+    auto = "auto"
 
     def __str__(self) -> str:
         return str(self.value)
@@ -91,7 +112,7 @@ class Options(BaseModel):
     strip_code: bool | None = None  # Replaces clean
     run_tests: bool = False  # Replaces test
     ai_fix: bool | None = None  # Replaces ai_agent
-    full_release: BumpOption | None = None  # Replaces all
+    full_release: str | None = None  # Replaces all
     show_progress: bool | None = None  # Replaces track_progress
     advanced_monitor: bool | None = None  # Replaces enhanced_monitor
     coverage_report: bool | None = None  # Replaces coverage_status
@@ -223,6 +244,11 @@ class Options(BaseModel):
             return None
         if value == "":
             return BumpOption.interactive
+
+        # Handle case where typer parsed a flag as the value (e.g., -p -c becomes value="-c")
+        if isinstance(value, str) and value.startswith("-"):
+            return BumpOption.interactive
+
         try:
             return BumpOption(value.lower())
         except ValueError:
@@ -275,9 +301,12 @@ CLI_OPTIONS = {
         None,
         "-p",
         "--publish",
+        callback=parse_bump_option_with_flag_support,
         help=(
-            "Bump version and publish to PyPI (patch, minor, major). "
-            "Use 'interactive' to be prompted for version selection."
+            "Bump version and publish to PyPI (patch, minor, major, auto). "
+            "Use 'interactive' to be prompted for version selection. "
+            "Use 'auto' to automatically use AI recommendations. "
+            "When used as a flag (-p), defaults to 'interactive'."
         ),
         case_sensitive=False,
     ),
@@ -285,14 +314,16 @@ CLI_OPTIONS = {
         None,
         "-a",
         "--all",
-        help="Full release workflow: bump version, run quality checks, and publish (patch, minor, major).",
+        callback=parse_bump_option_with_flag_support,
+        help="Full release workflow: bump version, run quality checks, and publish (patch, minor, major, auto). When used as a flag (-a), defaults to 'interactive'.",
         case_sensitive=False,
     ),
     "bump": typer.Option(
         None,
         "-b",
         "--bump",
-        help="Bump version (patch, minor, major).",
+        callback=parse_bump_option_with_flag_support,
+        help="Bump version (patch, minor, major, auto). When used as a flag (-b), defaults to 'interactive'.",
         case_sensitive=False,
     ),
     "benchmark": typer.Option(
@@ -644,7 +675,8 @@ CLI_OPTIONS = {
         None,
         "-a",
         "--full-release",
-        help="Complete release workflow: strip code, run tests, bump version, and publish. Equivalent to `-x -t -p <version> -c`.",
+        callback=parse_bump_option_with_flag_support,
+        help="Complete release workflow: strip code, run tests, bump version, and publish (patch, minor, major, auto). Equivalent to `-x -t -p <version> -c`. When used as a flag (-a), defaults to 'interactive'.",
         case_sensitive=False,
     ),
     "show_progress": typer.Option(
@@ -869,8 +901,8 @@ def create_options(
     update_precommit: bool,
     verbose: bool,
     debug: bool,
-    publish: BumpOption | None,
-    bump: BumpOption | None,
+    publish: str | None,
+    bump: str | None,
     benchmark: bool,
     test_workers: int,
     test_timeout: int,
@@ -953,7 +985,7 @@ def create_options(
     strip_code: bool | None = None,
     run_tests: bool = False,
     ai_fix: bool | None = None,
-    full_release: BumpOption | None = None,
+    full_release: str | None = None,
     show_progress: bool | None = None,
     advanced_monitor: bool | None = None,
     coverage_report: bool | None = None,

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/managers/publish_manager.py

@@ -284,7 +284,7 @@ class PublishManagerImpl:
                 [
                     "keyring",
                     "get",
-                    "https: //upload.pypi.org/legacy/",
+                    "https://upload.pypi.org/legacy/",
                     "__token__",
                 ],
             )
@@ -315,7 +315,7 @@ class PublishManagerImpl:
             " 1. Set environment variable: export UV_PUBLISH_TOKEN=<your-pypi-token>",
         )
         self.console.print(
-            " 2. Use keyring: keyring set[t.Any] https: //upload.pypi.org/legacy/ __token__",
+            " 2. Use keyring: keyring set[t.Any] https://upload.pypi.org/legacy/ __token__",
         )
         self.console.print(
             " 3. Ensure token starts with 'pypi-' and is properly formatted",
@@ -434,7 +434,7 @@ class PublishManagerImpl:
         package_name = self._get_package_name()
 
         if package_name and current_version:
-            url = f"https: //pypi.org/project/{package_name}/{current_version}/"
+            url = f"https://pypi.org/project/{package_name}/{current_version}/"
             self.console.print(f"[cyan]🔗[/ cyan] Package URL: {url}")
 
     def _get_package_name(self) -> str | None:

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/mcp/progress_components.py

@@ -157,11 +157,9 @@ class JobDataCollector:
                 "network_operations",
                 timeout=5.0,
             ):
-                websocket_base = self.websocket_url.replace(
-                    "ws: //", "http: //"
-                ).replace(
-                    "wss: //",
-                    "https: //",
+                websocket_base = self.websocket_url.replace("ws://", "http://").replace(
+                    "wss://",
+                    "https://",
                 )
 
                 async with (

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/services/dependency_monitor.py

@@ -452,13 +452,13 @@ class DependencyMonitorService:
 
         import requests
 
-        url = f"https: //pypi.org/pypi/{package}/json"
+        url = f"https://pypi.org/pypi/{package}/json"
         self._validate_pypi_url(url)
 
         parsed = urlparse(url)
 
         if parsed.scheme != "https" or parsed.netloc != "pypi.org":
-            msg = f"Invalid URL: only https: //pypi.org URLs are allowed, got {url}"
+            msg = f"Invalid URL: only https://pypi.org URLs are allowed, got {url}"
             raise ValueError(msg)
 
         response = requests.get(url, timeout=10, verify=True)

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/services/health_metrics.py

@@ -347,11 +347,11 @@ class HealthMetricsService:
         try:
             from urllib.parse import urlparse
 
-            url = f"https: //pypi.org/pypi/{package_name}/json"
+            url = f"https://pypi.org/pypi/{package_name}/json"
 
             parsed = urlparse(url)
             if parsed.scheme != "https" or parsed.netloc != "pypi.org":
-                msg = f"Invalid URL: only https: //pypi.org URLs are allowed, got {url}"
+                msg = f"Invalid URL: only https://pypi.org URLs are allowed, got {url}"
                 raise ValueError(msg)
 
             if not parsed.path.startswith("/pypi/") or not parsed.path.endswith(

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/services/secure_subprocess.py

@@ -318,20 +318,47 @@ class SecureSubprocessExecutor:
                 )
                 continue
 
-            if self._has_dangerous_patterns(arg, i, issues):
+            if self._has_dangerous_patterns(arg, i, issues, command):
                 continue
 
             validated_command.append(arg)
 
         return validated_command, issues
 
-    def _has_dangerous_patterns(self, arg: str, index: int, issues: list[str]) -> bool:
+    def _has_dangerous_patterns(
+        self, arg: str, index: int, issues: list[str], command: list[str]
+    ) -> bool:
         # First check if this is an allowed git pattern
         for git_pattern in self.allowed_git_patterns:
             if re.match(git_pattern, arg):
                 return False  # It's an allowed git pattern, don't flag as dangerous
 
-        # Check for dangerous patterns
+        # Special handling for git commit messages
+        if self._is_git_commit_message(index, command):
+            # For git commit messages, only check for truly dangerous patterns
+            # Parentheses are common in commit messages and should be allowed
+            safe_commit_patterns = [
+                r"[;&|`$]",  # Still dangerous in commit messages
+                r"\.\./",  # Path traversal
+                r"\$\{.*\}",  # Variable expansion
+                r"`.*`",  # Command substitution
+                r"\$\(.*\)",  # Command substitution (but allow simple parentheses)
+                r">\s*/",  # Redirection to paths
+                r"<\s*/",  # Redirection from paths
+            ]
+
+            for pattern in safe_commit_patterns:
+                if re.search(pattern, arg):
+                    # Allow simple parentheses that don't look like command substitution
+                    if pattern == r"\$\(.*\)" and not re.search(r"\$\(", arg):
+                        continue
+                    issues.append(
+                        f"Dangerous pattern '{pattern}' in argument {index}: {arg[:50]}"
+                    )
+                    return True
+            return False
+
+        # Check for dangerous patterns in other contexts
         for pattern in self.dangerous_patterns:
             if re.search(pattern, arg):
                 issues.append(
@@ -340,6 +367,18 @@ class SecureSubprocessExecutor:
                 return True
         return False
 
+    def _is_git_commit_message(self, index: int, command: list[str]) -> bool:
+        """Check if the current argument is likely a git commit message."""
+        # Check if we have a git commit command structure: git commit -m <message>
+        if (
+            len(command) >= 3
+            and command[0] == "git"
+            and command[1] == "commit"
+            and command[2] == "-m"
+        ):
+            return index == 3
+        return False
+
     def _validate_executable_permissions(
         self, validated_command: list[str], issues: list[str]
     ) -> None:

{crackerjack-0.34.1 → crackerjack-0.35.0}/crackerjack/services/security_logger.py

@@ -122,20 +122,26 @@ class SecurityLogger:
         self._setup_security_logger()
 
     def _setup_security_logger(self) -> None:
-        self.logger.setLevel(logging.DEBUG)
+        debug_enabled = os.environ.get("CRACKERJACK_DEBUG", "0") == "1"
+
+        # Set appropriate logger level based on debug mode
+        if debug_enabled:
+            self.logger.setLevel(logging.DEBUG)
+        else:
+            # Suppress all security logs during normal operation
+            self.logger.setLevel(logging.CRITICAL + 10)
 
         if not self.logger.handlers:
             console_handler = logging.StreamHandler()
 
-            debug_enabled = os.environ.get("CRACKERJACK_DEBUG", "0") == "1"
             if debug_enabled:
-                console_handler.setLevel(logging.WARNING)
+                console_handler.setLevel(logging.DEBUG)
             else:
                 # Suppress all security logs during normal operation
                 console_handler.setLevel(logging.CRITICAL + 10)
 
             formatter = logging.Formatter(
-                "%(asctime)s - SECURITY - %(levelname)s-%(message)s"
+                "%(asctime)s - SECURITY - %(levelname)s - %(message)s"
             )
             console_handler.setFormatter(formatter)
             self.logger.addHandler(console_handler)

{crackerjack-0.34.1 → crackerjack-0.35.0}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "crackerjack"
-version = "0.34.1"
+version = "0.35.0"
 description = "Crackerjack Python project management tool"
 readme = "README.md"
 authors = [

{crackerjack-0.34.1 → crackerjack-0.35.0}/uv.lock

@@ -165,15 +165,15 @@ css = [
 
 [[package]]
 name = "blessed"
-version = "1.21.0"
+version = "1.22.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jinxed", marker = "sys_platform == 'win32'" },
     { name = "wcwidth" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/0c/5e/3cada2f7514ee2a76bb8168c71f9b65d056840ebb711962e1ec08eeaa7b0/blessed-1.21.0.tar.gz", hash = "sha256:ece8bbc4758ab9176452f4e3a719d70088eb5739798cd5582c9e05f2a28337ec", size = 6660011, upload-time = "2025-04-26T21:56:58.199Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/7c/51/a72df7730aa34a94bc43cebecb7b63ffa42f019868637dbeb45e0620d26e/blessed-1.22.0.tar.gz", hash = "sha256:1818efb7c10015478286f21a412fcdd31a3d8b94a18f6d926e733827da7a844b", size = 6660050, upload-time = "2025-09-15T19:15:26.551Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ea/8e/0a37e44878fd76fac9eff5355a1bf760701f53cb5c38cdcd59a8fd9ab2a2/blessed-1.21.0-py2.py3-none-any.whl", hash = "sha256:f831e847396f5a2eac6c106f4dfadedf46c4f804733574b15fe86d2ed45a9588", size = 84727, upload-time = "2025-04-26T16:58:29.919Z" },
+    { url = "https://files.pythonhosted.org/packages/11/b7/a19b55c4cd0b5ca5009ca11d3634994758a1a446976b8e7afa25e719613c/blessed-1.22.0-py2.py3-none-any.whl", hash = "sha256:a1fed52d708a1aa26dfb8d3eaecf6f4714bff590e728baeefcb44f2c16c8de82", size = 85078, upload-time = "2025-09-15T19:15:24.787Z" },
 ]
 
 [[package]]
@@ -398,7 +398,7 @@ wheels = [
 
 [[package]]
 name = "crackerjack"
-version = "0.34.1"
+version = "0.34.2"
 source = { editable = "." }
 dependencies = [
     { name = "aiofiles" },
@@ -963,7 +963,7 @@ wheels = [
 
 [[package]]
 name = "huggingface-hub"
-version = "0.34.4"
+version = "0.34.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "filelock" },
@@ -975,9 +975,9 @@ dependencies = [
     { name = "tqdm" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/45/c9/bdbe19339f76d12985bc03572f330a01a93c04dffecaaea3061bdd7fb892/huggingface_hub-0.34.4.tar.gz", hash = "sha256:a4228daa6fb001be3f4f4bdaf9a0db00e1739235702848df00885c9b5742c85c", size = 459768, upload-time = "2025-08-08T09:14:52.365Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/1f/08/306b0d3db3679b3c07cab9ce117a920de77f3ea4dba6ba27646660518619/huggingface_hub-0.34.5.tar.gz", hash = "sha256:f676c6db41bc3fbd4020f520c842a0548f4c9a3f698dbfa6514bd8e41c3ab52a", size = 460006, upload-time = "2025-09-15T14:24:24.734Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/39/7b/bb06b061991107cd8783f300adff3e7b7f284e330fd82f507f2a1417b11d/huggingface_hub-0.34.4-py3-none-any.whl", hash = "sha256:9b365d781739c93ff90c359844221beef048403f1bc1f1c123c191257c3c890a", size = 561452, upload-time = "2025-08-08T09:14:50.159Z" },
+    { url = "https://files.pythonhosted.org/packages/79/3d/55ef77a0539b0124efd47d8b3759bf49e880f57729f7123c0311b41a9bb8/huggingface_hub-0.34.5-py3-none-any.whl", hash = "sha256:fea377adc6e9b6c239c1450e41a1409cbf2c6364d289c04c31d7dbaa222842e3", size = 562219, upload-time = "2025-09-15T14:24:22.851Z" },
 ]
 
 [[package]]
@@ -1003,15 +1003,15 @@ wheels = [
 
 [[package]]
 name = "hypothesis"
-version = "6.138.16"
+version = "6.138.17"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "attrs" },
     { name = "sortedcontainers" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/21/2f/3f41181a7054f8049c0c2ef2eb8a86f43c2bfb0da7b0aba69c24019f56eb/hypothesis-6.138.16.tar.gz", hash = "sha256:08f9015dadc877ce5ca04752efc56df797238148a44d1c69db656ed29bfbbf73", size = 466040, upload-time = "2025-09-13T23:26:07.448Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d2/d9/933014091e35e849a1555bc87866809dd985bb558d43734e5b9cd2191c1f/hypothesis-6.138.17.tar.gz", hash = "sha256:2419eef387211c63bed091938cf17fa909898f064d320e996bcd90383f5ce3c6", size = 466016, upload-time = "2025-09-15T22:09:21.512Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ac/f3/6aa509411e72828ad1c6ed107e9efe7b3e1464e8ef620bb39338954bff58/hypothesis-6.138.16-py3-none-any.whl", hash = "sha256:63dde4b45a04caef2a59ccae5541083cbadfe7605435e7a23454fe7c2113577c", size = 533690, upload-time = "2025-09-13T23:26:03.93Z" },
+    { url = "https://files.pythonhosted.org/packages/92/81/fbb1beddafb8bfc1deff69cbf6e2aaba10c1c7bdafe7a323845539ba14af/hypothesis-6.138.17-py3-none-any.whl", hash = "sha256:b2cf91f1926445cf4d44f5ec9a955c7f637f93e34247ac04e4fb44d010141c85", size = 533688, upload-time = "2025-09-15T22:09:18.063Z" },
 ]
 
 [[package]]
@@ -2604,7 +2604,7 @@ wheels = [
 
 [[package]]
 name = "session-mgmt-mcp"
-version = "0.3.6"
+version = "0.3.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "crackerjack" },
@@ -2622,9 +2622,9 @@ dependencies = [
     { name = "transformers" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/35/d2/ae271696455f988eee9334874775340799cd1834329ed0b1926cdbec1fc9/session_mgmt_mcp-0.3.6.tar.gz", hash = "sha256:ab83b1010ce9d2230442610b892d9405cb541f38b07539244fecbb1944d1de0f", size = 489393, upload-time = "2025-09-15T10:20:29.602Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ed/ce/c062659fbb3b4b05f71ad5c5229b80310d1297aa38abe8f1ca14447272a6/session_mgmt_mcp-0.3.7.tar.gz", hash = "sha256:e8c2a251772ee06d4e8b1d53b7f413af1d745e2886467ca9db96b058adfba23d", size = 491514, upload-time = "2025-09-16T02:27:32.692Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ce/50/1865f3ad40a7ced8342530729e0fbf494b2fb9a4e2c8dd4a507ef0d2d135/session_mgmt_mcp-0.3.6-py3-none-any.whl", hash = "sha256:219e5e06c589747e1400ba5dd2935e7886707d5ed7ed56eeaf9041d9308f72d0", size = 218158, upload-time = "2025-09-15T10:20:27.697Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/41/ffb2a66455d9fe29efe7c46387295a604f29fc006f522edda0fe7784114e/session_mgmt_mcp-0.3.7-py3-none-any.whl", hash = "sha256:eacf82edd79d9a012642181c5769eb5d9f768d3ad98ee17c06dc16600517d483", size = 219032, upload-time = "2025-09-16T02:27:30.908Z" },
 ]
 
 [[package]]