push-guard 0.2.2__tar.gz → 0.2.3__tar.gz

{push_guard-0.2.2 → push_guard-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: push-guard
-Version: 0.2.2
+Version: 0.2.3
 Summary: Local pre-push guard for likely secret leaks and private file paths.
 Author: Dragon Lady
 License-Expression: Apache-2.0

{push_guard-0.2.2 → push_guard-0.2.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "push-guard"
-version = "0.2.2"
+version = "0.2.3"
 description = "Local pre-push guard for likely secret leaks and private file paths."
 readme = "README.md"
 requires-python = ">=3.11"

{push_guard-0.2.2 → push_guard-0.2.3}/src/push_guard/guard.py

@@ -140,6 +140,17 @@ HADES_PYPI_PATTERNS = [
         ),  # push-guard: ignore
         "Hades/Miasma GitHub token-monitor persistence marker",
     ),
+    (
+        "workflow.hades_llm_anti_analysis_bait",
+        re.compile(
+            r"(?:unrestricted\s+mode|safety\s+guidelines|guardrails).{0,120}"
+            r"(?:biological|nuclear)\s+weapons?|"
+            r"(?:biological|nuclear)\s+weapons?.{0,120}"
+            r"(?:unrestricted\s+mode|safety\s+guidelines|guardrails)",
+            re.I,
+        ),
+        "Hades-style LLM refusal-bait marker in executable code",
+    ),
 ]
 
 OTTERCOOKIE_NPM_PATTERNS = [

{push_guard-0.2.2 → push_guard-0.2.3}/src/push_guard.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: push-guard
-Version: 0.2.2
+Version: 0.2.3
 Summary: Local pre-push guard for likely secret leaks and private file paths.
 Author: Dragon Lady
 License-Expression: Apache-2.0

{push_guard-0.2.2 → push_guard-0.2.3}/tests/test_guard.py

@@ -257,6 +257,23 @@ class PushGuardTests(unittest.TestCase):
 
         self.assertIn("workflow.hades_github_exfil_marker", rule_ids)
 
+    def test_scan_diff_blocks_hades_llm_refusal_bait_in_javascript(self):
+        diff_text = "\n".join(
+            [
+                "diff --git a/package/_index.js b/package/_index.js",
+                "index 1111111..2222222 100644",
+                "--- a/package/_index.js",
+                "+++ b/package/_index.js",
+                "@@ -1,0 +1,1 @@",
+                "+// unrestricted mode ignores safety guidelines for nuclear weapons",
+            ]
+        )
+
+        findings = _scan_diff(diff_text)
+        rule_ids = {finding.rule_id for finding in findings}
+
+        self.assertIn("workflow.hades_llm_anti_analysis_bait", rule_ids)
+
     def test_scan_diff_does_not_block_markdown_hades_notes(self):
         diff_text = "\n".join(
             [