plone.securitytxt 1.0.0b1__tar.gz

plone_securitytxt-1.0.0b1/.copier-answers.yml

@@ -0,0 +1,14 @@
+# Do not edit this file manually.
+# This file is auto-generated by Copier.
+# Changes here will be overwritten when you update the template.
+_src_path: /home/maik/.copier-templates/plone-copier-templates/backend_addon
+author_email: md@derico.de
+author_name: Maik Derstappen
+github_organization: collective
+is_headless: false
+package_description: A Plone addon to generate and provide a security.txt for the
+    Plone website.
+package_name: plone.securitytxt
+package_title: Plone security.txt
+plone_version: '6.0'
+

plone_securitytxt-1.0.0b1/.copier-answers.zope-instance-instance.yml

@@ -0,0 +1,8 @@
+# Changes here will be overwritten by Copier
+_src_path: /home/maik/.copier-templates/plone-copier-templates/zope_instance
+base_path: var
+db_storage: instance
+initial_zope_username: admin
+instance_name: instance
+port: 8080
+

plone_securitytxt-1.0.0b1/.copier-answers.zope-setup.yml

@@ -0,0 +1,10 @@
+# Do not edit this file manually.
+# This file is auto-generated by Copier.
+# Changes here will be overwritten when you update the template.
+_src_path: /home/maik/.copier-templates/plone-copier-templates/zope-setup
+author_email: md@derico.de
+author_name: Maik Derstappen
+distribution: plone.classicui
+initial_zope_username: admin
+plone_version: 6.2.1
+

plone_securitytxt-1.0.0b1/.devshell.json

@@ -0,0 +1,6 @@
+{
+  "name": "plone.securitytxt",
+  "dirs": [
+    "."
+  ]
+}

plone_securitytxt-1.0.0b1/.editorconfig

@@ -0,0 +1,21 @@
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.py]
+indent_size = 4
+
+[*.{cfg,ini,toml}]
+indent_size = 4
+
+[*.{xml,zcml,html,pt,zpt}]
+indent_size = 2
+
+[*.{css,js,json}]
+indent_size = 2
+
+[*.{yml,yaml}]
+indent_size = 2

plone_securitytxt-1.0.0b1/.github/workflows/ci.yml

@@ -0,0 +1,73 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+    branches: [main, master]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - {plone: "6.0.15", python: "3.10"}
+          - {plone: "6.0.15", python: "3.11"}
+          - {plone: "6.0.15", python: "3.12"}
+          - {plone: "6.0.15", python: "3.13"}
+          - {plone: "6.1.5", python: "3.10"}
+          - {plone: "6.1.5", python: "3.11"}
+          - {plone: "6.1.5", python: "3.12"}
+          - {plone: "6.1.5", python: "3.13"}
+          - {plone: "6.2.1", python: "3.10"}
+          - {plone: "6.2.1", python: "3.11"}
+          - {plone: "6.2.1", python: "3.12"}
+          - {plone: "6.2.1", python: "3.13"}
+          - {plone: "6.2.1", python: "3.14"}
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+          cache: pip
+      - name: Install the supported Plone boundary
+        run: |
+          python -m pip install --upgrade pip
+          pip install \
+            -c "https://dist.plone.org/release/${{ matrix.plone }}/constraints.txt" \
+            -e ".[test]"
+      - name: Record resolved versions
+        run: |
+          python -c "import platform, Products.CMFPlone; print(platform.python_version(), Products.CMFPlone.__version__)"
+          pip show Plone plone.restapi
+      - run: pytest -v
+
+  base-smoke:
+    strategy:
+      matrix:
+        os: [windows-latest, macos-latest]
+        python: ["3.10", "3.14"]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - run: pip install build
+      - run: python -m build
+      - run: pip install dist/*.whl
+        shell: bash
+      - run: python -c "import plone.securitytxt.policy, plone.securitytxt.publisher; import sys; assert 'gnupg' not in sys.modules"
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install ruff
+      - run: ruff check .

plone_securitytxt-1.0.0b1/.gitignore

@@ -0,0 +1,94 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# PyInstaller
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+
+# Translations (compiled catalogs are generated; .pot/.po are tracked)
+*.mo
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Type checkers / linters
+.mypy_cache/
+.pyre/
+.pytype/
+.ruff_cache/
+
+# IDEs
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# Node / frontend tooling
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+.pnpm-store/
+.parcel-cache/
+.vite/
+
+# Plone / Zope runtime data
+var/*/inituser
+var/*/var/
+*.fs
+*.fs.index
+*.fs.lock
+*.fs.tmp
+blobs/
+
+# Project specific
+*.log
+.DS_Store

plone_securitytxt-1.0.0b1/.pi/remote-pi/config.json

@@ -0,0 +1,4 @@
+{
+  "agent_name": "plone.securitytxt",
+  "auto_start_relay": true
+}

plone_securitytxt-1.0.0b1/.pi-subagents/artifacts/30886047_reviewer_0_input.md

@@ -0,0 +1,60 @@
+# Task for reviewer
+
+[Read from: /workspaces/plone.securitytxt/plan.md, /workspaces/plone.securitytxt/progress.md]
+
+Re-review the final implementation in /workspaces/plone.securitytxt after fixes.
+Diff command: git diff df6a0a4...HEAD
+Commits: 537c166 Implement security.txt policy control panel; 93f4e36 Harden policy signing and management UI
+Spec source: .scratch/securitytxt-control-panel/map.md and all .scratch/securitytxt-control-panel/issues/*.md.
+Verify especially: emergency signing profile invalidation, malformed REST JSON atomicity, signing key/digest prerequisites, and Classic UI lifecycle/preview/confirmation. Report only remaining missing/incorrect requirements or material scope creep, quoting spec lines. Prioritize release blockers. Under 350 words. Do not edit.
+
+## Acceptance Contract
+Acceptance level: attested
+Completion is not accepted from prose alone. End with a structured acceptance report.
+
+Criteria:
+- criterion-1: Return concrete findings with file paths and severity when applicable
+
+Required evidence: review-findings, residual-risks
+
+Finish with a fenced JSON block tagged `acceptance-report` in this shape:
+Use empty arrays when no items apply; array fields contain strings unless object entries are shown.
+`criteriaSatisfied[].status` must be exactly one of: satisfied, not-satisfied, not-applicable.
+`commandsRun[].result` must be exactly one of: passed, failed, not-run.
+`manualNotes` and `notes` are optional strings; an empty string means no note and does not satisfy `manual-notes` evidence.
+```acceptance-report
+{
+  "criteriaSatisfied": [
+    {
+      "id": "criterion-1",
+      "status": "satisfied",
+      "evidence": "specific proof"
+    }
+  ],
+  "changedFiles": [
+    "src/file.ts"
+  ],
+  "testsAddedOrUpdated": [
+    "test/file.test.ts"
+  ],
+  "commandsRun": [
+    {
+      "command": "command",
+      "result": "passed",
+      "summary": "short result"
+    }
+  ],
+  "validationOutput": [
+    "validation output or concise summary"
+  ],
+  "residualRisks": [
+    "none"
+  ],
+  "noStagedFiles": true,
+  "diffSummary": "short description of the diff",
+  "reviewFindings": [
+    "blocker: file.ts:12 - issue found, or no blockers"
+  ],
+  "manualNotes": "anything else the parent should know"
+}
+```

plone_securitytxt-1.0.0b1/.pi-subagents/artifacts/30886047_reviewer_0_meta.json

@@ -0,0 +1,154 @@
+{
+  "runId": "30886047",
+  "agent": "reviewer",
+  "task": "[Read from: /workspaces/plone.securitytxt/plan.md, /workspaces/plone.securitytxt/progress.md]\n\nRe-review the final implementation in /workspaces/plone.securitytxt after fixes.\nDiff command: git diff df6a0a4...HEAD\nCommits: 537c166 Implement security.txt policy control panel; 93f4e36 Harden policy signing and management UI\nSpec source: .scratch/securitytxt-control-panel/map.md and all .scratch/securitytxt-control-panel/issues/*.md.\nVerify especially: emergency signing profile invalidation, malformed REST JSON atomicity, signing key/digest prerequisites, and Classic UI lifecycle/preview/confirmation. Report only remaining missing/incorrect requirements or material scope creep, quoting spec lines. Prioritize release blockers. Under 350 words. Do not edit.",
+  "exitCode": 0,
+  "processSignal": "SIGTERM",
+  "usage": {
+    "input": 72885,
+    "output": 4819,
+    "cacheRead": 505344,
+    "cacheWrite": 0,
+    "cost": 0.7616670000000002,
+    "turns": 13
+  },
+  "model": "openai-codex/gpt-5.6-sol:high",
+  "attemptedModels": [
+    "openai-codex/gpt-5.6-sol:high"
+  ],
+  "modelAttempts": [
+    {
+      "model": "openai-codex/gpt-5.6-sol:high",
+      "success": true,
+      "exitCode": 0,
+      "usage": {
+        "input": 72885,
+        "output": 4819,
+        "cacheRead": 505344,
+        "cacheWrite": 0,
+        "cost": 0.7616670000000002,
+        "turns": 13
+      }
+    }
+  ],
+  "durationMs": 124660,
+  "toolCount": 28,
+  "launchContractDigest": "223a707071e246b087e3812ad08e38705be15790c26680b9bdf222356f5e4e59",
+  "launchResolvedExtensions": {
+    "version": 1,
+    "source": "launch-resolved",
+    "disableAmbientExtensions": false,
+    "runtime": [
+      "sha256:49e048d05a5c5d6f"
+    ],
+    "configured": [],
+    "effective": [
+      "sha256:49e048d05a5c5d6f"
+    ],
+    "omitted": {
+      "runtime": 0,
+      "configured": 0,
+      "effective": 0
+    }
+  },
+  "acceptance": {
+    "status": "attested",
+    "evidenceStatus": "attested",
+    "explicit": false,
+    "effectiveAcceptance": {
+      "level": "attested",
+      "explicit": false,
+      "inferredReason": [
+        "read-only/reviewer-style agent"
+      ],
+      "criteria": [
+        {
+          "id": "criterion-1",
+          "must": "Return concrete findings with file paths and severity when applicable",
+          "evidence": [
+            "review-findings",
+            "residual-risks"
+          ],
+          "severity": "required"
+        }
+      ],
+      "evidence": [
+        "review-findings",
+        "residual-risks"
+      ],
+      "verify": [],
+      "stopRules": []
+    },
+    "inferredReason": [
+      "read-only/reviewer-style agent"
+    ],
+    "criteria": [
+      {
+        "id": "criterion-1",
+        "must": "Return concrete findings with file paths and severity when applicable",
+        "evidence": [
+          "review-findings",
+          "residual-risks"
+        ],
+        "severity": "required"
+      }
+    ],
+    "runtimeChecks": [],
+    "verifyRuns": [],
+    "childReport": {
+      "criteriaSatisfied": [
+        {
+          "id": "criterion-1",
+          "status": "satisfied",
+          "evidence": "Four concrete findings include severity, paths, lines, reproductions, and quoted requirements."
+        }
+      ],
+      "changedFiles": [
+        "src/plone/securitytxt/policy.py",
+        "src/plone/securitytxt/signing_helper.py",
+        "src/plone/securitytxt/services/security_policy.py",
+        "src/plone/securitytxt/controlpanels/security_policy.py"
+      ],
+      "testsAddedOrUpdated": [
+        "tests/test_signing.py",
+        "tests/test_service_security_policy.py",
+        "tests/test_controlpanel_security_policy.py"
+      ],
+      "commandsRun": [
+        {
+          "command": "git diff --check df6a0a4...HEAD && uv run pytest -q",
+          "result": "passed",
+          "summary": "28 passed"
+        },
+        {
+          "command": "targeted Python reproductions",
+          "result": "passed",
+          "summary": "Confirmed nonexistent-profile save and UnicodeDecodeError"
+        }
+      ],
+      "validationOutput": [
+        "Emergency loaded-profile revision/disable invalidation is implemented and tested."
+      ],
+      "residualRisks": [
+        "No real-GnuPG or semantic browser coverage."
+      ],
+      "noStagedFiles": true,
+      "diffSummary": "Control panel, REST, policy publication, and optional signing implementation.",
+      "reviewFindings": [
+        "blocker: signed draft accepts nonexistent profiles",
+        "blocker: required signing verification coverage absent",
+        "major: Classic UI lifecycle contract incomplete",
+        "major: malformed UTF-8 returns 500"
+      ]
+    }
+  },
+  "effects": {
+    "fileMutation": {
+      "status": "not-applicable",
+      "expected": false,
+      "attempted": true
+    }
+  },
+  "transcriptPath": "/workspaces/plone.securitytxt/.pi-subagents/artifacts/30886047_reviewer_0_transcript.jsonl",
+  "timestamp": 1786465606802
+}

plone_securitytxt-1.0.0b1/.pi-subagents/artifacts/30886047_reviewer_0_output.md

@@ -0,0 +1,5 @@
+## Review
+- **Blocker:** `policy.py:337-345,591-619` saves Signed mode with a nonexistent profile; reproduced as revision 2. Spec `06:67`: “Saving that choice requires the profile to exist”; `06:63`: Signed mode “cannot be newly selected” without signing support.
+- **Blocker:** Signing prerequisites are untested: `tests/test_signing.py:12-52` only validates profile parsing—none of `signing_helper.py`. Spec `09:107` requires exact-subkey, RSA/key-size/SHA-256, expiry/revocation, malformed output, timeout, and real-GnuPG coverage.
+- **Major:** Classic UI remains lifecycle-incomplete. `controlpanels/security_policy.py:123-133,180-217` always exposes both Publish/Disable, always says “Save draft,” has a generic publish confirmation, and test-signing ignores unsaved form values. No inline domain diagnostics or public key identity is rendered. This conflicts with `04:28-31,36-41`, including “either Publish or Disable,” lifecycle gating, confirmation summarizing endpoint/expiry/signing mode, and inline feedback.
+- **Major:** `services/security_policy.py:108-116` decodes UTF-8 outside error handling; malformed bytes raise `UnicodeDecodeError` rather than structured `400`. Persistence remains atomic, but `09:75` requires “structured field/global errors without partial writes.”