mcli-framework 7.19.8__tar.gz → 8.0.15__tar.gz

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/.github/dependency-review-config.yml

@@ -1,8 +1,8 @@
 # Dependency Review configuration
 # https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review
 
-# Fail only on high/critical vulnerabilities
-fail-on-severity: high
+# Fail on moderate and above vulnerabilities
+fail-on-severity: moderate
 
 # Allow specific licenses commonly used in npm packages
 allow-licenses:

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/.github/workflows/ci.yml

@@ -14,6 +14,7 @@ jobs:
   lint-and-format:
     name: Lint and Format Check
     runs-on: ubuntu-latest
+    continue-on-error: true  # Non-blocking: ML modules have pre-existing formatting issues
 
     steps:
     - name: Checkout code
@@ -40,9 +41,16 @@ jobs:
       run: python tools/lint_hardcoded_strings.py --check-all --json
       continue-on-error: true  # Non-blocking until codebase refactoring is complete (13k+ violations)
 
-    - name: Type checking with mypy
+    - name: Type checking with mypy (full codebase)
       run: mypy src/ --ignore-missing-imports
-      continue-on-error: true  # Non-blocking due to type errors in notebook schema
+      continue-on-error: true  # Non-blocking due to type errors in remaining modules
+
+    - name: Type checking with mypy (priority modules)
+      run: |
+        # Check priority modules that have improved type annotations (issue #40)
+        # These modules have fewer errors and are gradually being fully typed
+        mypy src/mcli/lib/logger/logger.py src/mcli/lib/custom_commands.py --ignore-missing-imports
+      continue-on-error: true  # Non-blocking until all function signatures are typed
 
   test-rust:
     name: Test Rust Extensions
@@ -86,7 +94,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest]
-        python-version: ["3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.10", "3.11", "3.12"]
 
     steps:
     - name: Checkout code
@@ -121,7 +129,7 @@ jobs:
       run: |
         cd mcli_rust
         maturin develop --release || maturin develop || echo "Warning: Rust extension build failed, continuing without extensions"
-      continue-on-error: ${{ matrix.python-version == '3.12' || matrix.python-version == '3.9' }}
+      continue-on-error: ${{ matrix.python-version == '3.12' }}
 
     - name: Run Python tests with coverage
       run: |
@@ -162,21 +170,36 @@ jobs:
     - name: Set up Rust
       uses: dtolnay/rust-toolchain@stable
 
+    - name: Create virtual environment
+      run: |
+        python -m venv .venv
+        echo "VIRTUAL_ENV=${{ github.workspace }}/.venv" >> $GITHUB_ENV
+        echo "${{ github.workspace }}/.venv/bin" >> $GITHUB_PATH
+
     - name: Install dependencies
       run: |
-        python -m pip install --upgrade pip
-        pip install maturin
-        pip install -e .[dev]
+        .venv/bin/python -m pip install --upgrade pip
+        .venv/bin/pip install maturin
+        .venv/bin/pip install -e .[dev]
 
     - name: Build Rust extensions
+      id: rust_build
       run: |
         cd mcli_rust
-        maturin develop --release || maturin develop || echo "Warning: Rust extension build failed"
+        if maturin develop --release; then
+          echo "rust_available=true" >> $GITHUB_OUTPUT
+        elif maturin develop; then
+          echo "rust_available=true" >> $GITHUB_OUTPUT
+        else
+          echo "rust_available=false" >> $GITHUB_OUTPUT
+          echo "Warning: Rust extension build failed"
+        fi
       continue-on-error: true
 
     - name: Test Rust-Python integration
+      if: steps.rust_build.outputs.rust_available == 'true'
       run: |
-        python -c "
+        .venv/bin/python -c "
         import mcli_rust
         print('✅ Rust extensions imported successfully')
 
@@ -203,17 +226,17 @@ jobs:
 
     - name: Test performance monitoring
       run: |
-        mcli self performance --detailed
+        .venv/bin/mcli self performance --detailed
 
     - name: Test visual effects
       run: |
-        mcli visual message --style success "Integration tests passed!"
-        mcli visual spinner --spinner-type rust --duration 2 --message "Testing spinner..."
+        .venv/bin/mcli self visual message --style success "Integration tests passed!"
+        .venv/bin/mcli self visual spinner --spinner-type rust --duration 2 --message "Testing spinner..."
 
   security-scan:
     name: Security Scan
     runs-on: ubuntu-latest
-    continue-on-error: true  # Non-blocking due to occasional GitHub Actions infrastructure issues
+    continue-on-error: true  # Non-blocking: CodeQL permissions and Trivy issues on this repo
 
     steps:
     - name: Checkout code
@@ -231,15 +254,18 @@ jobs:
 
     - name: Run Bandit security linter
       run: |
-        bandit -r src/ -f json -o bandit-report.json || true
-        bandit -r src/ -ll
-      continue-on-error: true
+        # Run with skip list for CLI tool false positives
+        bandit -r src/ \
+          --severity-level high \
+          --skip B101,B102,B104,B108,B113,B301,B306,B310,B324,B404,B602,B603,B604,B605,B607 \
+          -f json -o bandit-report.json || true
+        # Also run a summary check (non-blocking)
+        bandit -r src/ -ll || true
 
     - name: Run Safety dependency check
       run: |
         safety check --json > safety-report.json || true
-        safety check
-      continue-on-error: true
+        safety check --ignore 59234,71691,71584,71578,71577,71692,71579,71587,71693,64459,64396
 
     - name: Run Trivy vulnerability scanner
       uses: aquasecurity/trivy-action@master
@@ -253,7 +279,6 @@ jobs:
     - name: Upload Trivy scan results
       uses: github/codeql-action/upload-sarif@v3
       if: always()
-      continue-on-error: true
       with:
         sarif_file: 'trivy-results.sarif'
 

mcli_framework-8.0.15/.github/workflows/docs-links.yml

@@ -0,0 +1,48 @@
+name: Validate Documentation Links
+
+on:
+  push:
+    branches: [main, develop]
+    paths:
+      - 'docs/**'
+      - 'README.md'
+      - 'CONTRIBUTING.md'
+      - 'tools/validate_doc_links.py'
+  pull_request:
+    branches: [main]
+    paths:
+      - 'docs/**'
+      - 'README.md'
+      - 'CONTRIBUTING.md'
+      - 'tools/validate_doc_links.py'
+  workflow_dispatch:
+
+env:
+  PYTHON_VERSION: "3.11"
+
+jobs:
+  validate-links:
+    name: Validate Documentation Links
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: ${{ env.PYTHON_VERSION }}
+
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install requests
+
+    - name: Validate internal links
+      run: python tools/validate_doc_links.py README.md docs/
+      continue-on-error: true  # Non-blocking until broken links are fixed
+
+    - name: Validate external links (optional)
+      run: python tools/validate_doc_links.py --external --timeout 15 README.md docs/
+      continue-on-error: true  # External links may timeout or be temporarily unavailable

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/.github/workflows/publish.yml

@@ -135,10 +135,10 @@ jobs:
           password: ${{ secrets.TEST_PYPI_API_TOKEN }}
           skip-existing: true
 
-  # Job 4: Publish to Production PyPI (main branch or release)
+  # Job 4: Publish to Production PyPI (main branch, release, or manual dispatch)
   publish-pypi:
     name: Publish to PyPI
-    if: (github.event_name == 'push' && github.ref == 'refs/heads/main') || github.event_name == 'release'
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/main') || github.event_name == 'release' || github.event_name == 'workflow_dispatch'
     needs: build
     runs-on: ubuntu-latest
     environment:

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/.github/workflows/security.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Dependency Review
         uses: actions/dependency-review-action@v4
         with:
-          fail-on-severity: high
+          fail-on-severity: moderate
           config-file: './.github/dependency-review-config.yml'
 
   bandit:
@@ -44,13 +44,24 @@ jobs:
         run: pip install bandit[toml]
 
       - name: Run Bandit
-        run: bandit -r src/ -f json -o bandit-report.json || true
+        run: |
+          # Run bandit with severity filter (only fail on HIGH severity issues)
+          # Skip common false positives for CLI tools
+          bandit -r src/ \
+            --severity-level high \
+            --skip B101,B102,B104,B108,B113,B301,B306,B310,B324,B404,B602,B603,B604,B605,B607 \
+            -f json -o bandit-report.json || true
+
+          # Also generate a full report for review (non-blocking)
+          bandit -r src/ -f txt -o bandit-full-report.txt || true
 
       - name: Upload Bandit results
         uses: actions/upload-artifact@v4
         with:
           name: bandit-results
-          path: bandit-report.json
+          path: |
+            bandit-report.json
+            bandit-full-report.txt
 
   safety:
     name: Safety Check
@@ -68,7 +79,7 @@ jobs:
         run: pip install safety
 
       - name: Run Safety Check
-        run: safety check --json > safety-report.json || true
+        run: safety check --json > safety-report.json || safety check --ignore 59234,71691,71584,71578,71577,71692,71579,71587,71693,64459,64396
 
       - name: Upload Safety results
         uses: actions/upload-artifact@v4
@@ -100,6 +111,8 @@ jobs:
   secret-scan:
     name: Secret Scanning
     runs-on: ubuntu-latest
+    # Skip on schedule - TruffleHog requires different base/head commits for diff scanning
+    if: github.event_name != 'schedule'
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/.github/workflows/test.yml

@@ -31,7 +31,7 @@ jobs:
     strategy:
       matrix:
         platform: [ubuntu-latest, macos-latest]
-        python-version: ['3.9', '3.10', '3.11', '3.12']
+        python-version: ['3.10', '3.11', '3.12']
     
     runs-on: ${{ matrix.platform }}
     

{mcli_framework-7.19.8 → mcli_framework-8.0.15}/MANIFEST.in

@@ -3,6 +3,10 @@ include README.md
 include LICENSE
 include PERFORMANCE_OPTIMIZATIONS.md
 
+# Include LLM/AI agent documentation (llms.txt convention)
+include llms.txt
+include llms-full.txt
+
 # Include configuration files
 include pyproject.toml
 include setup.cfg