maintainability-agent 3.7.4__tar.gz → 3.7.5__tar.gz

{maintainability_agent-3.7.4/src/maintainability_agent.egg-info → maintainability_agent-3.7.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maintainability-agent
-Version: 3.7.4
+Version: 3.7.5
 Summary: Maintainability gate and AI remediation prompt generator for CI.
 Author: Marshall Guillory
 License: MIT
@@ -46,7 +46,7 @@ Dynamic: license-file
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.4**.
+Version **3.7.5**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -88,7 +88,7 @@ and gives this command. Its scanners decide what it can grade — see
 don't add its `[mcp]` extra to this environment (it pins `mcp<2`).
 
 ```bash
-pip install 'secure-code-agent>=0.12.1'
+pip install 'secure-code-agent>=0.12.2'
 brew install gitleaks osv-scanner semgrep checkov   # its scanners; pip install bandit
 ```
 

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/README.md

@@ -5,7 +5,7 @@
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.4**.
+Version **3.7.5**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -47,7 +47,7 @@ and gives this command. Its scanners decide what it can grade — see
 don't add its `[mcp]` extra to this environment (it pins `mcp<2`).
 
 ```bash
-pip install 'secure-code-agent>=0.12.1'
+pip install 'secure-code-agent>=0.12.2'
 brew install gitleaks osv-scanner semgrep checkov   # its scanners; pip install bandit
 ```
 

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "maintainability-agent"
-version = "3.7.4"
+version = "3.7.5"
 description = "Maintainability gate and AI remediation prompt generator for CI."
 readme = "README.md"
 # 3.11, not 3.10. `_discovery`, `_pillars` and `_runner` all import

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5/src/maintainability_agent.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maintainability-agent
-Version: 3.7.4
+Version: 3.7.5
 Summary: Maintainability gate and AI remediation prompt generator for CI.
 Author: Marshall Guillory
 License: MIT
@@ -46,7 +46,7 @@ Dynamic: license-file
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.4**.
+Version **3.7.5**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -88,7 +88,7 @@ and gives this command. Its scanners decide what it can grade — see
 don't add its `[mcp]` extra to this environment (it pins `mcp<2`).
 
 ```bash
-pip install 'secure-code-agent>=0.12.1'
+pip install 'secure-code-agent>=0.12.2'
 brew install gitleaks osv-scanner semgrep checkov   # its scanners; pip install bandit
 ```
 

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/src/maintainability_audit/__init__.py

@@ -1,3 +1,3 @@
 """Maintainability Audit CI."""
 
-__version__ = "3.7.4"
+__version__ = "3.7.5"

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/src/maintainability_audit/_security_delegate.py

@@ -55,9 +55,15 @@ from ._runner import Invocation, Outcome, run
 #: whichever release is installed, when it falls in this range, and says so
 #: when it does not. The ceiling is the next major: within 0.x the pillar
 #: document is versioned by its own `schema_version`, which the reader checks.
-SUPPORTED_FLOOR = (0, 12, 1)
+#:
+#: **The floor is 0.12.2, not the first release with this contract (D182).**
+#: 0.12.1 writes the same schema v2 document, and matches `.scignore.yaml`
+#: `paths:` globs against absolute finding paths. This audit always hands it an
+#: absolute root, so under 0.12.1 every reviewed `paths:` suppression is ignored
+#: and its finding counts as live in the pillar every skin shows (D179).
+SUPPORTED_FLOOR = (0, 12, 2)
 SUPPORTED_CEILING = (1,)
-REQUIREMENT = "secure-code-agent>=0.12.1,<1"
+REQUIREMENT = "secure-code-agent>=0.12.2,<1"
 
 #: How long the child may run before the pillar is reported as unmeasured.
 DEFAULT_TIMEOUT_SECONDS = 300

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/src/maintainability_audit/config.py

@@ -20,7 +20,7 @@ from ._operator_reads import (
 # still the door every caller comes through.
 __all__ = ["DEFAULT_CONFIG", "DEFAULT_IDIOM_GROUPS", "PROJECT_URL", "VERSION"]
 
-VERSION = "3.7.4"
+VERSION = "3.7.5"
 
 PROJECT_URL = "https://github.com/marshallguillory86/maintainability-agent"
 

{maintainability_agent-3.7.4 → maintainability_agent-3.7.5}/tests/test_security_pillar_runs_and_shows.py

@@ -151,13 +151,18 @@ def test_a_missing_delegate_is_stated_with_its_remedy(tmp_path, monkeypatch) ->
     assert remedies and "pip install" in remedies[0]["install"], report["environment_work_order"]
 
 
-@pytest.mark.parametrize("installed", ["0.10.0", "0.12.0", "1.0.0"])
+@pytest.mark.parametrize("installed", ["0.10.0", "0.12.0", "0.12.1", "1.0.0"])
 def test_an_unsupported_release_is_stated_not_run(tmp_path, monkeypatch, installed) -> None:
     """D177: installed but outside the supported range is a reason and a remedy, never a run.
 
     secure-code-agent is no longer a package dependency, so the version a machine has is
     whatever it has. Running a release outside the range would read a contract this
     audit has not been checked against.
+
+    D182: 0.12.1 writes the same pillar contract and is still refused. It matches
+    `.scignore.yaml` `paths:` globs against absolute paths, so on the absolute root this
+    audit always passes it, a reviewed suppression is ignored and its finding counts as
+    live in the pillar every skin shows.
     """
     import importlib.machinery
     import importlib.metadata as metadata