doc-ai-slopcheck 1.2.0__tar.gz

doc_ai_slopcheck-1.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Euraika
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

doc_ai_slopcheck-1.2.0/PKG-INFO

@@ -0,0 +1,217 @@
+Metadata-Version: 2.4
+Name: doc-ai-slopcheck
+Version: 1.2.0
+Summary: Deterministic scanner for AI-style code failures. 73 rules for Python, JS/TS, Go, C/C++, SQL.
+License-Expression: MIT
+License-File: LICENSE
+Keywords: static-analysis,linter,ai-code,code-quality,security,github-actions
+Author: Euraika
+Author-email: info@euraika.net
+Requires-Python: >=3.12
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Provides-Extra: ast
+Provides-Extra: github
+Requires-Dist: PyYAML (>=6.0)
+Requires-Dist: pydantic (>=2.8)
+Requires-Dist: requests (>=2.32) ; extra == "github"
+Requires-Dist: tree-sitter (>=0.23) ; extra == "ast"
+Requires-Dist: typer (>=0.12)
+Project-URL: Homepage, https://github.com/Digitalist-Open-Cloud/AI-Slopcheck
+Project-URL: Issues, https://github.com/Digitalist-Open-Cloud/AI-Slopcheck/issues
+Project-URL: Repository, https://github.com/Digitalist-Open-Cloud/AI-Slopcheck
+Description-Content-Type: text/markdown
+
+# doc-ai-slopcheck
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![Rules](https://img.shields.io/badge/rules-73-blue)]()
+
+**Deterministic scanner for AI-style code failures. 73 rules. No LLM. No backend.**
+
+Digitalist fork of [ai-slopcheck](https://github.com/Euraika-Labs/ai_slopcheck) by Euraika, which is no longer published.
+
+> Catches the mistakes AI coding assistants leave behind — stub functions, silent error handling, hallucinated placeholders, hardcoded secrets, and 68 more patterns across Python, JS/TS, Go, C/C++, SQL, and Markdown.
+
+---
+
+## Install
+
+```bash
+pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git
+```
+
+## Quick Start
+
+```bash
+# Scan a project
+doc-ai-slopcheck scan . --output findings.json --fail-on warning
+
+# View results
+doc-ai-slopcheck summary findings.json
+
+# GitHub Security tab (SARIF)
+doc-ai-slopcheck sarif findings.json
+
+# Only scan changed files (CI)
+doc-ai-slopcheck scan . --changed-files git --fail-on warning
+```
+
+## What It Catches
+
+| Category | Rules | Examples |
+|----------|:-----:|---------|
+| **AI Detection** | 16 | Stub functions, instruction comments, plan/task IDs in comments, conversational bleed, identity refusals |
+| **Security** | 7 | Hardcoded secrets, SQL injection, XSS, weak hashing, obfuscated code |
+| **JavaScript / Node** | 11 | await-in-loop, unguarded JSON.parse, loose equality, React antipatterns |
+| **Go** | 3 | Ignored errors, missing defer, wrong error wrapping |
+| **Python** | 1 | Mutable default arguments |
+| **Cross-Language** | 17 | Debug code, unreachable code, deep inheritance, dangerous shell in markdown |
+| **Data-Flow** | 4 | Contradictory null checks, lock safety, IDOR risk, thread-unsafe globals |
+| **Quality** | 9 | Large functions (>150 lines), copy-pasted code across files, plus opt-in deep nesting |
+| **API Contract** | 1 | Removed routes, deprecated endpoints |
+| **Repo-Specific** | 1 | Import boundary violations |
+| **Meta** | 1 | Unused suppression directives |
+
+## Features
+
+- **73 deterministic rules** — no LLM, no network, no randomness
+- **6 languages** — Python, JS/TS, Go, C/C++, SQL, Markdown
+- **Inline suppression** — `# slopcheck: ignore[rule_id]`, or `# slopcheck: ignore-next[duplicate_code]` above a copied block
+- **SARIF output** — integrates with GitHub Security tab
+- **HTML report** — standalone, shareable page (`doc-ai-slopcheck html findings.json > report.html`)
+- **Diff-only mode** — scan only changed files (`--changed-files git`)
+- **Baselines** — suppress existing findings, fail only on new ones
+- **API snapshots** — detect removed API routes
+- **Tree-sitter** — optional AST context for better precision
+- **Threaded** — multi-core scanning (`--jobs N`)
+- **Confidence filtering** — `--min-confidence medium` for high-signal-only mode
+
+## GitHub Actions
+
+```yaml
+name: slopcheck
+on: [pull_request]
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: '3.12' }
+      - run: pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git
+      - run: doc-ai-slopcheck scan . --output findings.json --fail-on warning
+      - run: doc-ai-slopcheck github-annotations findings.json
+      - run: doc-ai-slopcheck sarif findings.json > results.sarif
+      - uses: github/codeql-action/upload-sarif@v3
+        with: { sarif_file: results.sarif }
+```
+
+## Baselines (Incremental Adoption)
+
+```bash
+# First run: baseline existing findings
+doc-ai-slopcheck scan . --output findings.json --fail-on none
+doc-ai-slopcheck create-baseline findings.json
+
+# CI: only fail on NEW findings
+doc-ai-slopcheck scan . --baseline .slopcheck/baseline.json --fail-on warning
+```
+
+## CLI Reference
+
+| Command | Purpose |
+|---------|---------|
+| `doc-ai-slopcheck scan [paths]` | Scan files, write findings JSON |
+| `doc-ai-slopcheck summary <file>` | Markdown summary |
+| `doc-ai-slopcheck github-annotations <file>` | GitHub workflow annotations |
+| `doc-ai-slopcheck sarif <file>` | SARIF v2.1.0 output |
+| `doc-ai-slopcheck html <file> > report.html` | Standalone HTML report |
+| `doc-ai-slopcheck create-baseline <file>` | Create fingerprint baseline |
+| `doc-ai-slopcheck api-snapshot` | Snapshot API routes for contract checks |
+
+### Key `scan` Options
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `--fail-on` | `error` | Exit 1 at severity: `none` / `note` / `warning` / `error` |
+| `--min-confidence` | `low` | Filter: `low` / `medium` / `high` |
+| `--baseline` | — | Suppress fingerprints from baseline file |
+| `--changed-files` | — | `git` or `@file.txt` for diff-only mode |
+| `--jobs` | auto | Thread count (0=auto, 1=sequential) |
+| `--api-baseline` | — | API snapshot for contract comparison |
+
+## Configuration
+
+Create `.slopcheck/config.yaml` (or `.slopcheck.yaml`):
+
+```yaml
+rules:
+  # Disable a rule
+  js_loose_equality:
+    enabled: false
+  
+  # Enable an opt-in rule with custom threshold
+  deep_nesting:
+    enabled: true
+    max_depth: 5
+  
+  # Configure detection
+  hallucinated_placeholder:
+    allowed_domains: ["example.com", "localhost"]
+```
+
+## Tree-sitter (Optional)
+
+For better precision (~5% improvement on string/comment context detection):
+
+```bash
+pip install "doc-ai-slopcheck[ast] @ git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git"
+# Or manually:
+pip install tree-sitter-python tree-sitter-javascript tree-sitter-go tree-sitter-typescript
+```
+
+## Project Layout
+
+```
+doc_ai_slopcheck/
+├── cli.py                 — 6 CLI commands
+├── config.py              — 50+ Pydantic config models
+├── models.py              — Finding, ScanResult (stable contract)
+├── engine/
+│   ├── scanner.py         — Threaded orchestrator
+│   ├── duplication.py     — Cross-file copy-paste detector
+│   ├── suppression.py     — Inline ignore parser
+│   └── context_filter.py  — String/comment detector
+├── parsers/
+│   └── treesitter.py      — Optional AST adapter
+├── rules/
+│   ├── generic/           — 71 cross-repo rules
+│   └── repo/              — 1 architecture rule
+├── output/
+│   ├── sarif.py           — SARIF v2.1.0
+│   ├── annotations.py     — GitHub annotations
+│   └── markdown_summary.py
+└── state/
+    └── store.py           — Baseline persistence
+```
+
+## Development
+
+Requires Python 3.12+ and [Poetry](https://python-poetry.org/) 2.x.
+
+```bash
+poetry install            # add --all-extras for tree-sitter and requests
+poetry run pytest
+poetry run ruff check .
+poetry build
+```
+
+## License
+
+[MIT](LICENSE) — Euraika 2026. Fork maintained by Digitalist.
+

doc_ai_slopcheck-1.2.0/README.md

@@ -0,0 +1,188 @@
+# doc-ai-slopcheck
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![Rules](https://img.shields.io/badge/rules-73-blue)]()
+
+**Deterministic scanner for AI-style code failures. 73 rules. No LLM. No backend.**
+
+Digitalist fork of [ai-slopcheck](https://github.com/Euraika-Labs/ai_slopcheck) by Euraika, which is no longer published.
+
+> Catches the mistakes AI coding assistants leave behind — stub functions, silent error handling, hallucinated placeholders, hardcoded secrets, and 68 more patterns across Python, JS/TS, Go, C/C++, SQL, and Markdown.
+
+---
+
+## Install
+
+```bash
+pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git
+```
+
+## Quick Start
+
+```bash
+# Scan a project
+doc-ai-slopcheck scan . --output findings.json --fail-on warning
+
+# View results
+doc-ai-slopcheck summary findings.json
+
+# GitHub Security tab (SARIF)
+doc-ai-slopcheck sarif findings.json
+
+# Only scan changed files (CI)
+doc-ai-slopcheck scan . --changed-files git --fail-on warning
+```
+
+## What It Catches
+
+| Category | Rules | Examples |
+|----------|:-----:|---------|
+| **AI Detection** | 16 | Stub functions, instruction comments, plan/task IDs in comments, conversational bleed, identity refusals |
+| **Security** | 7 | Hardcoded secrets, SQL injection, XSS, weak hashing, obfuscated code |
+| **JavaScript / Node** | 11 | await-in-loop, unguarded JSON.parse, loose equality, React antipatterns |
+| **Go** | 3 | Ignored errors, missing defer, wrong error wrapping |
+| **Python** | 1 | Mutable default arguments |
+| **Cross-Language** | 17 | Debug code, unreachable code, deep inheritance, dangerous shell in markdown |
+| **Data-Flow** | 4 | Contradictory null checks, lock safety, IDOR risk, thread-unsafe globals |
+| **Quality** | 9 | Large functions (>150 lines), copy-pasted code across files, plus opt-in deep nesting |
+| **API Contract** | 1 | Removed routes, deprecated endpoints |
+| **Repo-Specific** | 1 | Import boundary violations |
+| **Meta** | 1 | Unused suppression directives |
+
+## Features
+
+- **73 deterministic rules** — no LLM, no network, no randomness
+- **6 languages** — Python, JS/TS, Go, C/C++, SQL, Markdown
+- **Inline suppression** — `# slopcheck: ignore[rule_id]`, or `# slopcheck: ignore-next[duplicate_code]` above a copied block
+- **SARIF output** — integrates with GitHub Security tab
+- **HTML report** — standalone, shareable page (`doc-ai-slopcheck html findings.json > report.html`)
+- **Diff-only mode** — scan only changed files (`--changed-files git`)
+- **Baselines** — suppress existing findings, fail only on new ones
+- **API snapshots** — detect removed API routes
+- **Tree-sitter** — optional AST context for better precision
+- **Threaded** — multi-core scanning (`--jobs N`)
+- **Confidence filtering** — `--min-confidence medium` for high-signal-only mode
+
+## GitHub Actions
+
+```yaml
+name: slopcheck
+on: [pull_request]
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: '3.12' }
+      - run: pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git
+      - run: doc-ai-slopcheck scan . --output findings.json --fail-on warning
+      - run: doc-ai-slopcheck github-annotations findings.json
+      - run: doc-ai-slopcheck sarif findings.json > results.sarif
+      - uses: github/codeql-action/upload-sarif@v3
+        with: { sarif_file: results.sarif }
+```
+
+## Baselines (Incremental Adoption)
+
+```bash
+# First run: baseline existing findings
+doc-ai-slopcheck scan . --output findings.json --fail-on none
+doc-ai-slopcheck create-baseline findings.json
+
+# CI: only fail on NEW findings
+doc-ai-slopcheck scan . --baseline .slopcheck/baseline.json --fail-on warning
+```
+
+## CLI Reference
+
+| Command | Purpose |
+|---------|---------|
+| `doc-ai-slopcheck scan [paths]` | Scan files, write findings JSON |
+| `doc-ai-slopcheck summary <file>` | Markdown summary |
+| `doc-ai-slopcheck github-annotations <file>` | GitHub workflow annotations |
+| `doc-ai-slopcheck sarif <file>` | SARIF v2.1.0 output |
+| `doc-ai-slopcheck html <file> > report.html` | Standalone HTML report |
+| `doc-ai-slopcheck create-baseline <file>` | Create fingerprint baseline |
+| `doc-ai-slopcheck api-snapshot` | Snapshot API routes for contract checks |
+
+### Key `scan` Options
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `--fail-on` | `error` | Exit 1 at severity: `none` / `note` / `warning` / `error` |
+| `--min-confidence` | `low` | Filter: `low` / `medium` / `high` |
+| `--baseline` | — | Suppress fingerprints from baseline file |
+| `--changed-files` | — | `git` or `@file.txt` for diff-only mode |
+| `--jobs` | auto | Thread count (0=auto, 1=sequential) |
+| `--api-baseline` | — | API snapshot for contract comparison |
+
+## Configuration
+
+Create `.slopcheck/config.yaml` (or `.slopcheck.yaml`):
+
+```yaml
+rules:
+  # Disable a rule
+  js_loose_equality:
+    enabled: false
+  
+  # Enable an opt-in rule with custom threshold
+  deep_nesting:
+    enabled: true
+    max_depth: 5
+  
+  # Configure detection
+  hallucinated_placeholder:
+    allowed_domains: ["example.com", "localhost"]
+```
+
+## Tree-sitter (Optional)
+
+For better precision (~5% improvement on string/comment context detection):
+
+```bash
+pip install "doc-ai-slopcheck[ast] @ git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git"
+# Or manually:
+pip install tree-sitter-python tree-sitter-javascript tree-sitter-go tree-sitter-typescript
+```
+
+## Project Layout
+
+```
+doc_ai_slopcheck/
+├── cli.py                 — 6 CLI commands
+├── config.py              — 50+ Pydantic config models
+├── models.py              — Finding, ScanResult (stable contract)
+├── engine/
+│   ├── scanner.py         — Threaded orchestrator
+│   ├── duplication.py     — Cross-file copy-paste detector
+│   ├── suppression.py     — Inline ignore parser
+│   └── context_filter.py  — String/comment detector
+├── parsers/
+│   └── treesitter.py      — Optional AST adapter
+├── rules/
+│   ├── generic/           — 71 cross-repo rules
+│   └── repo/              — 1 architecture rule
+├── output/
+│   ├── sarif.py           — SARIF v2.1.0
+│   ├── annotations.py     — GitHub annotations
+│   └── markdown_summary.py
+└── state/
+    └── store.py           — Baseline persistence
+```
+
+## Development
+
+Requires Python 3.12+ and [Poetry](https://python-poetry.org/) 2.x.
+
+```bash
+poetry install            # add --all-extras for tree-sitter and requests
+poetry run pytest
+poetry run ruff check .
+poetry build
+```
+
+## License
+
+[MIT](LICENSE) — Euraika 2026. Fork maintained by Digitalist.

doc_ai_slopcheck-1.2.0/doc_ai_slopcheck/__init__.py

@@ -0,0 +1,5 @@
+"""slopcheck package."""
+
+__all__ = ["__version__"]
+
+__version__ = "1.2.0"

doc_ai_slopcheck-1.2.0/doc_ai_slopcheck/__main__.py

@@ -0,0 +1,4 @@
+from doc_ai_slopcheck.cli import main
+
+if __name__ == "__main__":
+    main()