deployproof 1.0.1__tar.gz → 1.1.0__tar.gz

{deployproof-1.0.1/src/deployproof.egg-info → deployproof-1.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 1.0.1
+Version: 1.1.0
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -33,7 +33,7 @@ Dynamic: license-file
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.0-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -289,7 +289,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.0",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -389,7 +389,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.0}/README.md

@@ -2,7 +2,7 @@
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.0-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -258,7 +258,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.0",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -358,7 +358,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deployproof"
-version = "1.0.1"
+version = "1.1.0"
 description = "A deterministic AI-code deployability checker that catches what coverage misses."
 readme = "README.md"
 requires-python = ">=3.10"

{deployproof-1.0.1 → deployproof-1.1.0}/src/deployproof/__init__.py

@@ -1,2 +1,2 @@
 """DeployProof - Deterministic AI-Code Deployability Checker."""
-__version__ = "1.0.1"
+__version__ = "1.1.0"

{deployproof-1.0.1 → deployproof-1.1.0}/src/deployproof/dependencies.py

@@ -1047,10 +1047,15 @@ def query_pypi_registry(
     # Map import name to PyPI distribution name if known
     canonical_pkg = normalize_package_name(norm_name)
 
+    try:
+        from deployproof import __version__
+    except ImportError:
+        __version__ = "1.1.0"
+
     url = f"https://pypi.org/pypi/{canonical_pkg}/json"
     req = urllib.request.Request(
         url,
-        headers={"User-Agent": "DeployProof/1.0.0 (https://github.com/SVSPraveen/DeployProof)"},
+        headers={"User-Agent": f"DeployProof/{__version__} (https://github.com/SVSPraveen/DeployProof)"},
     )
 
     try:

{deployproof-1.0.1 → deployproof-1.1.0}/src/deployproof/reporter.py

@@ -2,6 +2,7 @@
 import json
 from pathlib import Path
 from typing import Any, Dict, List, Optional
+from deployproof import __version__
 from deployproof.control_flow import ControlFlowScanSummary
 from deployproof.dependencies import DependencyScanSummary
 from deployproof.mocks import MockScanSummary
@@ -10,8 +11,9 @@ from deployproof.secrets import SecretsScanResult
 from deployproof.symlinks import SymlinkScanResult
 LARGE_FILE_LOC_THRESHOLD = 300
 
-def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: str='1.0.0') -> str:
+def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: Optional[str]=None) -> str:
     """Format all scan findings and mutation results as a structured JSON string."""
+    effective_version = version or __version__
     root = (repo_root or Path.cwd()).resolve()
     strict_mocks_triggered = bool(strict_mocks and mock_result and (mock_result.total_findings > 0))
     strict_error_triggered = bool(strict_error_handling and control_flow_result and (control_flow_result.total_findings > 0))
@@ -94,7 +96,7 @@ def format_json_report(result: MutationResult, target_files: List[Path], secrets
             except ValueError:
                 rel_f = f.file_path.as_posix()
             control_flow_findings_data.append({'file': rel_f, 'line': f.line_number, 'rule': f.rule_id, 'severity': f.severity, 'snippet': f.snippet, 'message': f.message})
-    data: Dict[str, Any] = {'version': version, 'status': status_str, 'summary': {'target_files_count': len(target_files), 'mutation_score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'secrets_found': len(secrets_findings_data), 'symlink_escapes_found': len(symlink_escapes_data), 'dependency_findings': {'high_risk': dependency_result.high_risk_count if dependency_result else 0, 'medium_risk': dependency_result.medium_risk_count if dependency_result else 0, 'ok': dependency_result.ok_count if dependency_result else 0, 'unknown': dependency_result.unknown_count if dependency_result else 0, 'unscanned': len(unscanned_sources_data)}, 'mock_usages_found': len(mock_findings_data), 'control_flow_findings': len(control_flow_findings_data), 'strict_mocks_active': strict_mocks, 'strict_mocks_triggered': strict_mocks_triggered, 'strict_error_handling_active': strict_error_handling, 'strict_error_handling_triggered': strict_error_triggered}, 'scope': {'target_files': scope_files}, 'mutation_testing': {'score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'total_mutants': result.total_mutants, 'killed_mutants': result.killed_mutants, 'survived_mutants_count': len(surviving_mutants_data), 'runner_errors_count': len(result.runner_errors), 'valid_mutants_count': result.killed_mutants + len(surviving_mutants_data), 'duration_seconds': result.duration_seconds, 'surviving_mutants': surviving_mutants_data, 'skipped_constructs': skipped_constructs_data, 'untested_files': untested_files_data}, 'secrets': {'clean': len(secrets_findings_data) == 0, 'files_scanned': secrets_result.files_scanned if secrets_result else len(target_files), 'findings': secrets_findings_data}, 'symlinks': {'clean': len(symlink_escapes_data) == 0, 'files_scanned': symlink_result.files_scanned if symlink_result else len(target_files), 'findings': symlink_escapes_data}, 'dependencies': {'clean': bool(not dep_findings_data), 'total_scanned': dependency_result.total_scanned if dependency_result else 0, 'findings': dep_findings_data, 'unscanned_sources': unscanned_sources_data}, 'mocks': {'clean': len(mock_findings_data) == 0, 'strict_gate_triggered': strict_mocks_triggered, 'findings': mock_findings_data}, 'control_flow': {'clean': len(control_flow_findings_data) == 0, 'strict_gate_triggered': strict_error_triggered, 'findings': control_flow_findings_data}}
+    data: Dict[str, Any] = {'version': effective_version, 'status': status_str, 'summary': {'target_files_count': len(target_files), 'mutation_score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'secrets_found': len(secrets_findings_data), 'symlink_escapes_found': len(symlink_escapes_data), 'dependency_findings': {'high_risk': dependency_result.high_risk_count if dependency_result else 0, 'medium_risk': dependency_result.medium_risk_count if dependency_result else 0, 'ok': dependency_result.ok_count if dependency_result else 0, 'unknown': dependency_result.unknown_count if dependency_result else 0, 'unscanned': len(unscanned_sources_data)}, 'mock_usages_found': len(mock_findings_data), 'control_flow_findings': len(control_flow_findings_data), 'strict_mocks_active': strict_mocks, 'strict_mocks_triggered': strict_mocks_triggered, 'strict_error_handling_active': strict_error_handling, 'strict_error_handling_triggered': strict_error_triggered}, 'scope': {'target_files': scope_files}, 'mutation_testing': {'score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'total_mutants': result.total_mutants, 'killed_mutants': result.killed_mutants, 'survived_mutants_count': len(surviving_mutants_data), 'runner_errors_count': len(result.runner_errors), 'valid_mutants_count': result.killed_mutants + len(surviving_mutants_data), 'duration_seconds': result.duration_seconds, 'surviving_mutants': surviving_mutants_data, 'skipped_constructs': skipped_constructs_data, 'untested_files': untested_files_data}, 'secrets': {'clean': len(secrets_findings_data) == 0, 'files_scanned': secrets_result.files_scanned if secrets_result else len(target_files), 'findings': secrets_findings_data}, 'symlinks': {'clean': len(symlink_escapes_data) == 0, 'files_scanned': symlink_result.files_scanned if symlink_result else len(target_files), 'findings': symlink_escapes_data}, 'dependencies': {'clean': bool(not dep_findings_data), 'total_scanned': dependency_result.total_scanned if dependency_result else 0, 'findings': dep_findings_data, 'unscanned_sources': unscanned_sources_data}, 'mocks': {'clean': len(mock_findings_data) == 0, 'strict_gate_triggered': strict_mocks_triggered, 'findings': mock_findings_data}, 'control_flow': {'clean': len(control_flow_findings_data) == 0, 'strict_gate_triggered': strict_error_triggered, 'findings': control_flow_findings_data}}
     return json.dumps(data, indent=2)
 
 def format_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0) -> str:

{deployproof-1.0.1 → deployproof-1.1.0/src/deployproof.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 1.0.1
+Version: 1.1.0
 Summary: A deterministic AI-code deployability checker that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
@@ -33,7 +33,7 @@ Dynamic: license-file
 
 > Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.0-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -289,7 +289,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.0",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -389,7 +389,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.0}/tests/test_cli.py

@@ -9,7 +9,7 @@ from deployproof.cli import create_parser, main
 
 def test_version():
     """Verify version string is accessible."""
-    assert __version__ == "1.0.0"
+    assert isinstance(__version__, str) and len(__version__.split(".")) >= 3
 
 
 def test_parser_version(capsys):
@@ -19,7 +19,7 @@ def test_parser_version(capsys):
         parser.parse_args(["--version"])
     assert exc_info.value.code == 0
     captured = capsys.readouterr()
-    assert "deployproof 1.0.0" in captured.out or "deployproof 1.0.0" in captured.err
+    assert f"deployproof {__version__}" in captured.out or f"deployproof {__version__}" in captured.err
 
 
 def test_parser_help(capsys):
@@ -105,7 +105,7 @@ def test_main_check_json_output_passing(capsys):
 
         data = json.loads(captured.out)
         assert data["status"] == "passed"
-        assert data["version"] == "1.0.0"
+        assert data["version"] == __version__
         assert data["summary"]["mutation_score"] == 100.0
         assert data["summary"]["secrets_found"] == 0
         assert data["summary"]["symlink_escapes_found"] == 0
@@ -137,9 +137,10 @@ def test_main_check_json_output_multi_category_findings(tmp_path: Path, capsys,
     subprocess.run(["git", "config", "user.email", "test@example.com"], cwd=root, check=True)
 
     src = root / "service.py"
+    fake_key = "sk-" + "proj-abc123xyz123abc123xyz123abc123xyz123abc123xyz123"
     src.write_text(
         "import importlib\n\n"
-        "OPENAI_API_KEY = 'sk-proj-abc123xyz123abc123xyz123abc123xyz123abc123xyz123'\n\n"
+        f"OPENAI_API_KEY = '{fake_key}'\n\n"
         "def load_plugin():\n"
         "    return importlib.import_module('hallucinated_fake_package_xyz')\n\n"
         "def calculate(x: int) -> int:\n"