deployproof 0.2.0__tar.gz → 0.2.2__tar.gz

{deployproof-0.2.0/src/deployproof.egg-info → deployproof-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 0.2.0
+Version: 0.2.2
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -32,10 +32,10 @@ Dynamic: license-file
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v0.2.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v0.2.2-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
-[![Tests](https://img.shields.io/badge/tests-93%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
+[![Tests](https://img.shields.io/badge/tests-94%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
 [![Stress Tests](https://img.shields.io/badge/stress%20tests-11%2F11%20passed-2ea44f.svg)](stress_fixtures/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
@@ -189,7 +189,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.2.0",
+  "version": "0.2.2",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -271,6 +271,7 @@ deployproof check --json
 
 ## What This Doesn't Do
 
+- **Test-only diffs are not yet caught.** If a diff modifies or weakens assertions in a test file without changing the corresponding source file, DeployProof currently sees zero modified source lines and passes with 0 mutants evaluated. This is a known gap — see [INVESTIGATION_blastradius.md](INVESTIGATION_blastradius.md) for the reverse-mapping approach being evaluated to close it. Until this lands, DeployProof does not protect against test suites being weakened directly.
 - **Not a full-repo audit.** Checks are scoped to files changed in the current session (git diff). Files you haven't touched are not re-evaluated.
 - **Python only.** Mutation testing and import extraction currently support Python files only. Other languages are not scanned.
 - **No auto-fix.** DeployProof reports findings; it does not modify your code, rewrite imports, or suggest patches.
@@ -288,7 +289,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.2.0):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 93 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.2.2):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 94 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.2.0 → deployproof-0.2.2}/README.md

@@ -2,10 +2,10 @@
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v0.2.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v0.2.2-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
-[![Tests](https://img.shields.io/badge/tests-93%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
+[![Tests](https://img.shields.io/badge/tests-94%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
 [![Stress Tests](https://img.shields.io/badge/stress%20tests-11%2F11%20passed-2ea44f.svg)](stress_fixtures/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
@@ -159,7 +159,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.2.0",
+  "version": "0.2.2",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -241,6 +241,7 @@ deployproof check --json
 
 ## What This Doesn't Do
 
+- **Test-only diffs are not yet caught.** If a diff modifies or weakens assertions in a test file without changing the corresponding source file, DeployProof currently sees zero modified source lines and passes with 0 mutants evaluated. This is a known gap — see [INVESTIGATION_blastradius.md](INVESTIGATION_blastradius.md) for the reverse-mapping approach being evaluated to close it. Until this lands, DeployProof does not protect against test suites being weakened directly.
 - **Not a full-repo audit.** Checks are scoped to files changed in the current session (git diff). Files you haven't touched are not re-evaluated.
 - **Python only.** Mutation testing and import extraction currently support Python files only. Other languages are not scanned.
 - **No auto-fix.** DeployProof reports findings; it does not modify your code, rewrite imports, or suggest patches.
@@ -258,7 +259,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.2.0):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 93 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.2.2):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 94 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.2.0 → deployproof-0.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deployproof"
-version = "0.2.0"
+version = "0.2.2"
 description = "A deterministic AI-code deployability checker that catches what coverage misses."
 readme = "README.md"
 requires-python = ">=3.10"

{deployproof-0.2.0 → deployproof-0.2.2}/src/deployproof/__init__.py

@@ -1,2 +1,2 @@
 """DeployProof - Deterministic AI-Code Deployability Checker."""
-__version__ = "0.2.0"
+__version__ = "0.2.2"

{deployproof-0.2.0 → deployproof-0.2.2}/src/deployproof/cli.py

@@ -82,7 +82,7 @@ def handle_check(args: argparse.Namespace) -> int:
         for f in target_files:
             try:
                 loc = len(f.read_text(encoding='utf-8', errors='replace').splitlines())
-                if loc < LARGE_FILE_LOC_THRESHOLD:
+                if loc >= LARGE_FILE_LOC_THRESHOLD:
                     try:
                         rel = f.relative_to(repo_root or cwd)
                     except ValueError:

{deployproof-0.2.0 → deployproof-0.2.2}/src/deployproof/dependencies.py

@@ -983,7 +983,7 @@ def query_pypi_registry(
     url = f"https://pypi.org/pypi/{canonical_pkg}/json"
     req = urllib.request.Request(
         url,
-        headers={"User-Agent": "DeployProof/0.2.0 (https://github.com/SVSPraveen/DeployProof)"},
+        headers={"User-Agent": "DeployProof/0.2.2 (https://github.com/SVSPraveen/DeployProof)"},
     )
 
     try:

{deployproof-0.2.0 → deployproof-0.2.2}/src/deployproof/mutator.py

@@ -2,6 +2,7 @@
 import ast
 import atexit
 import copy
+import importlib.util
 import os
 import re
 import shutil
@@ -57,7 +58,7 @@ _PREV_SIGTERM: Any = None
 _PREV_SIGBREAK: Any = None
 
 def _restore_current_mutant_file() -> None:
-    """Immediately restore the currently mutated file on disk if one is active."""
+    """Immediately restore the currently mutated file on disk if one is active and clear its specific bytecode cache."""
     global _CURRENT_MUTATED_FILE, _CURRENT_ORIGINAL_CONTENT
     if _CURRENT_MUTATED_FILE is not None and _CURRENT_ORIGINAL_CONTENT is not None:
         target_path = _CURRENT_MUTATED_FILE
@@ -70,6 +71,17 @@ def _restore_current_mutant_file() -> None:
                 f"Please verify this file's contents before committing or running tests.\n"
             )
             sys.stderr.flush()
+
+        # Remove specific __pycache__ .pyc entry for target_path if it exists
+        try:
+            pyc_path_str = importlib.util.cache_from_source(str(target_path))
+            if pyc_path_str:
+                pyc_file = Path(pyc_path_str)
+                if pyc_file.is_file():
+                    pyc_file.unlink(missing_ok=True)
+        except (OSError, ValueError):
+            pass
+
         _CURRENT_MUTATED_FILE = None
         _CURRENT_ORIGINAL_CONTENT = None
 atexit.register(_restore_current_mutant_file)

{deployproof-0.2.0 → deployproof-0.2.2}/src/deployproof/reporter.py

@@ -10,7 +10,7 @@ from deployproof.secrets import SecretsScanResult
 from deployproof.symlinks import SymlinkScanResult
 LARGE_FILE_LOC_THRESHOLD = 300
 
-def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: str='0.2.0') -> str:
+def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: str='0.2.2') -> str:
     """Format all scan findings and mutation results as a structured JSON string."""
     root = (repo_root or Path.cwd()).resolve()
     strict_mocks_triggered = bool(strict_mocks and mock_result and (mock_result.total_findings > 0))

{deployproof-0.2.0 → deployproof-0.2.2/src/deployproof.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 0.2.0
+Version: 0.2.2
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -32,10 +32,10 @@ Dynamic: license-file
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v0.2.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v0.2.2-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
-[![Tests](https://img.shields.io/badge/tests-93%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
+[![Tests](https://img.shields.io/badge/tests-94%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
 [![Stress Tests](https://img.shields.io/badge/stress%20tests-11%2F11%20passed-2ea44f.svg)](stress_fixtures/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
@@ -189,7 +189,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "0.2.0",
+  "version": "0.2.2",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -271,6 +271,7 @@ deployproof check --json
 
 ## What This Doesn't Do
 
+- **Test-only diffs are not yet caught.** If a diff modifies or weakens assertions in a test file without changing the corresponding source file, DeployProof currently sees zero modified source lines and passes with 0 mutants evaluated. This is a known gap — see [INVESTIGATION_blastradius.md](INVESTIGATION_blastradius.md) for the reverse-mapping approach being evaluated to close it. Until this lands, DeployProof does not protect against test suites being weakened directly.
 - **Not a full-repo audit.** Checks are scoped to files changed in the current session (git diff). Files you haven't touched are not re-evaluated.
 - **Python only.** Mutation testing and import extraction currently support Python files only. Other languages are not scanned.
 - **No auto-fix.** DeployProof reports findings; it does not modify your code, rewrite imports, or suggest patches.
@@ -288,7 +289,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v0.2.0):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 93 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
+- **Current (v0.2.2):** Diff-scoped AST mutation testing (with recursive `test/`/`tests/` discovery, AST column-offset snippet reconstruction, and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner (including unquoted .env values and prefix validation), GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, 94 unit tests, machine-readable `--json` output, and Tier 2 CI verification via GitHub Actions (mutmut).
 - **Next:** Multi-language mutation support and expanded ecosystem rule packs.
 
 ## Contributing

{deployproof-0.2.0 → deployproof-0.2.2}/tests/test_cli.py

@@ -9,7 +9,7 @@ from deployproof.cli import create_parser, main
 
 def test_version():
     """Verify version string is accessible."""
-    assert __version__ == "0.2.0"
+    assert __version__ == "0.2.2"
 
 
 def test_parser_version(capsys):
@@ -19,7 +19,7 @@ def test_parser_version(capsys):
         parser.parse_args(["--version"])
     assert exc_info.value.code == 0
     captured = capsys.readouterr()
-    assert "deployproof 0.2.0" in captured.out or "deployproof 0.2.0" in captured.err
+    assert "deployproof 0.2.2" in captured.out or "deployproof 0.2.2" in captured.err
 
 
 def test_parser_help(capsys):
@@ -105,7 +105,7 @@ def test_main_check_json_output_passing(capsys):
 
         data = json.loads(captured.out)
         assert data["status"] == "passed"
-        assert data["version"] == "0.2.0"
+        assert data["version"] == "0.2.2"
         assert data["summary"]["mutation_score"] == 100.0
         assert data["summary"]["secrets_found"] == 0
         assert data["summary"]["symlink_escapes_found"] == 0

{deployproof-0.2.0 → deployproof-0.2.2}/tests/test_mutator.py

@@ -287,7 +287,7 @@ def test_real_subprocess_os_signal_interrupt_restoration():
     import sys
     import time
 
-    with tempfile.TemporaryDirectory() as tmpdir:
+    with tempfile.TemporaryDirectory(ignore_cleanup_errors=True) as tmpdir:
         tmp_path = Path(tmpdir).resolve()
         src_file = tmp_path / "calc.py"
         orig_code = (
@@ -368,6 +368,44 @@ def test_real_subprocess_os_signal_interrupt_restoration():
 
         # Target source file MUST be restored to original content immediately
         assert src_file.read_text(encoding="utf-8") == mod_code
+        time.sleep(0.2)
+
+
+def test_restore_removes_pyc_cache_file():
+    """Verify that _restore_current_mutant_file unlinks the exact .pyc cache file without removing other cache files."""
+    import importlib.util
+    import py_compile
+    from deployproof import mutator
+
+    with tempfile.TemporaryDirectory() as tmpdir:
+        tmp_path = Path(tmpdir).resolve()
+        src1 = tmp_path / "module1.py"
+        src1.write_text("def func1(): return 1\n", encoding="utf-8")
+        src2 = tmp_path / "module2.py"
+        src2.write_text("def func2(): return 2\n", encoding="utf-8")
+
+        # Compile both to generate .pyc files in __pycache__
+        py_compile.compile(str(src1), doraise=True)
+        py_compile.compile(str(src2), doraise=True)
+
+        pyc1_path = Path(importlib.util.cache_from_source(str(src1)))
+        pyc2_path = Path(importlib.util.cache_from_source(str(src2)))
+
+        assert pyc1_path.is_file(), "pyc1 should exist before restoration"
+        assert pyc2_path.is_file(), "pyc2 should exist before restoration"
+
+        # Simulate active mutant tracking on src1
+        mutator._CURRENT_MUTATED_FILE = src1
+        mutator._CURRENT_ORIGINAL_CONTENT = "def func1(): return 100\n"
+
+        # Trigger restoration (as happens on interrupt / atexit)
+        mutator._restore_current_mutant_file()
+
+        # src1 should be restored and its specific .pyc removed
+        assert src1.read_text(encoding="utf-8") == "def func1(): return 100\n"
+        assert not pyc1_path.exists(), "src1's specific .pyc must be deleted"
+        assert pyc2_path.is_file(), "unrelated src2's .pyc must remain intact"
+