deployproof 0.1.6__tar.gz → 0.1.7__tar.gz

{deployproof-0.1.6/src/deployproof.egg-info → deployproof-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 0.1.6
+Version: 0.1.7
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -92,7 +92,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.1.6",
+  "version": "0.1.7",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -191,7 +191,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.1.6):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.1.7):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks` and deduplicated decorator detection), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.1.6 → deployproof-0.1.7}/README.md

@@ -62,7 +62,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.1.6",
+  "version": "0.1.7",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -161,7 +161,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.1.6):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.1.7):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks` and deduplicated decorator detection), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.1.6 → deployproof-0.1.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deployproof"
-version = "0.1.6"
+version = "0.1.7"
 description = "A deterministic AI-code deployability checker that catches what coverage misses."
 readme = "README.md"
 requires-python = ">=3.10"

{deployproof-0.1.6 → deployproof-0.1.7}/src/deployproof/__init__.py

@@ -1,2 +1,2 @@
 """DeployProof: Deterministic deployability verification for AI-assisted code."""
-__version__ = "0.1.6"
+__version__ = "0.1.7"

{deployproof-0.1.6 → deployproof-0.1.7}/src/deployproof/dependencies.py

@@ -891,7 +891,7 @@ def query_pypi_registry(
     url = f"https://pypi.org/pypi/{norm_name}/json"
     req = urllib.request.Request(
         url,
-        headers={"User-Agent": "DeployProof/0.1.6 (https://github.com/SVSPraveen/DeployProof)"},
+        headers={"User-Agent": "DeployProof/0.1.7 (https://github.com/SVSPraveen/DeployProof)"},
     )
 
     try:

{deployproof-0.1.6 → deployproof-0.1.7}/src/deployproof/mocks.py

@@ -43,6 +43,7 @@ class MockDetector(ast.NodeVisitor):
         self.modified_lines = modified_lines
         self.findings: List[MockFinding] = []
         self._seen_lines_and_types: Set[Tuple[int, str]] = set()
+        self._decorator_call_nodes: Set[int] = set()
 
     def _add_finding(self, lineno: int, mock_type: str, description: str) -> None:
         if self.modified_lines is not None and lineno not in self.modified_lines:
@@ -105,6 +106,19 @@ class MockDetector(ast.NodeVisitor):
                     )
         self.generic_visit(node)
 
+    def _check_decorators(self, node: ast.AST) -> None:
+        decorators = getattr(node, "decorator_list", [])
+        for dec in decorators:
+            if isinstance(dec, ast.Call):
+                self._decorator_call_nodes.add(id(dec))
+            if self._is_patch_target_node(dec):
+                lineno = getattr(dec, "lineno", getattr(node, "lineno", 1))
+                self._add_finding(lineno, "patch_decorator", "@patch decorator")
+
+    def visit_ClassDef(self, node: ast.ClassDef) -> None:
+        self._check_decorators(node)
+        self.generic_visit(node)
+
     def visit_FunctionDef(self, node: ast.FunctionDef) -> None:
         self._check_func(node)
         self.generic_visit(node)
@@ -126,11 +140,7 @@ class MockDetector(ast.NodeVisitor):
                         f"{arg.arg} fixture parameter in {getattr(node, 'name', 'function')}()",
                     )
 
-        decorators = getattr(node, "decorator_list", [])
-        for dec in decorators:
-            if self._is_patch_target_node(dec):
-                lineno = getattr(dec, "lineno", getattr(node, "lineno", 1))
-                self._add_finding(lineno, "patch_decorator", "@patch decorator")
+        self._check_decorators(node)
 
     def _is_patch_target_node(self, node: ast.AST) -> bool:
         if isinstance(node, ast.Call):
@@ -152,6 +162,11 @@ class MockDetector(ast.NodeVisitor):
         return False
 
     def visit_Call(self, node: ast.Call) -> None:
+        # If this call is an @patch decorator call, it is already recorded as patch_decorator
+        if id(node) in self._decorator_call_nodes:
+            self.generic_visit(node)
+            return
+
         if isinstance(node.func, ast.Attribute):
             if isinstance(node.func.value, ast.Name) and node.func.value.id == "monkeypatch":
                 self._add_finding(

{deployproof-0.1.6 → deployproof-0.1.7}/src/deployproof/reporter.py

@@ -26,7 +26,7 @@ def format_json_report(
     strict_error_handling: bool = False,
     repo_root: Optional[Path] = None,
     threshold: float = 80.0,
-    version: str = "0.1.6",
+    version: str = "0.1.7",
 ) -> str:
     """Format all scan findings and mutation results as a structured JSON string."""
     root = (repo_root or Path.cwd()).resolve()

{deployproof-0.1.6 → deployproof-0.1.7/src/deployproof.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 0.1.6
+Version: 0.1.7
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -92,7 +92,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.1.6",
+  "version": "0.1.7",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -191,7 +191,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.1.6):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.1.7):** Diff-scoped AST mutation testing, secrets scanner (including unquoted .env values), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with recursive `-r` requirements scanning and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks` and deduplicated decorator detection), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.1.6 → deployproof-0.1.7}/tests/test_cli.py

@@ -9,7 +9,7 @@ from deployproof.cli import create_parser, main
 
 def test_version():
     """Verify version string is accessible."""
-    assert __version__ == "0.1.6"
+    assert __version__ == "0.1.7"
 
 
 def test_parser_version(capsys):
@@ -19,7 +19,7 @@ def test_parser_version(capsys):
         parser.parse_args(["--version"])
     assert exc_info.value.code == 0
     captured = capsys.readouterr()
-    assert "deployproof 0.1.6" in captured.out or "deployproof 0.1.6" in captured.err
+    assert "deployproof 0.1.7" in captured.out or "deployproof 0.1.7" in captured.err
 
 
 def test_parser_help(capsys):
@@ -105,7 +105,7 @@ def test_main_check_json_output_passing(capsys):
 
         data = json.loads(captured.out)
         assert data["status"] == "passed"
-        assert data["version"] == "0.1.6"
+        assert data["version"] == "0.1.7"
         assert data["summary"]["mutation_score"] == 100.0
         assert data["summary"]["secrets_found"] == 0
         assert data["summary"]["symlink_escapes_found"] == 0