pycodegate 0.2.0__tar.gz → 0.3.0__tar.gz

{pycodegate-0.2.0 → pycodegate-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pycodegate
-Version: 0.2.0
+Version: 0.3.0
 Summary: Trust, but verify. The quality gate for AI-generated Python code.
 Project-URL: Homepage, https://github.com/themohitkhare/pycodegate
 Project-URL: Repository, https://github.com/themohitkhare/pycodegate

{pycodegate-0.2.0 → pycodegate-0.3.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "pycodegate"
-version = "0.2.0"
+version = "0.3.0"
 description = "Trust, but verify. The quality gate for AI-generated Python code."
 readme = "README.md"
 requires-python = ">=3.10"

{pycodegate-0.2.0 → pycodegate-0.3.0}/src/pycodegate/constants.py

@@ -29,4 +29,12 @@ FRAMEWORK_CATEGORY_MAP: dict = {
     Category.DJANGO: Category.SECURITY,
     Category.FASTAPI: Category.CORRECTNESS,
     Category.FLASK: Category.SECURITY,
+    Category.PYDANTIC: Category.CORRECTNESS,
+    Category.SQLALCHEMY: Category.SECURITY,
+    Category.CELERY: Category.CORRECTNESS,
+    Category.REQUESTS: Category.SECURITY,
+    Category.LOGGING: Category.CORRECTNESS,
+    Category.PANDAS: Category.CORRECTNESS,
+    Category.PYTEST: Category.CORRECTNESS,
+    Category.NUMPY: Category.CORRECTNESS,
 }

{pycodegate-0.2.0 → pycodegate-0.3.0}/src/pycodegate/discover.py

@@ -23,6 +23,7 @@ def discover_project(project_path: str) -> ProjectInfo:
         test_framework=_detect_test_framework(deps),
         has_type_hints=_detect_type_hints(root),
         source_file_count=len(find_python_files(project_path)),
+        frameworks=_detect_frameworks(deps),
     )
 
 
@@ -76,6 +77,32 @@ def _detect_framework(deps: set[str]) -> str | None:
     return None
 
 
+def _detect_frameworks(deps: set[str]) -> list[str]:
+    """Detect all frameworks and libraries present in project dependencies."""
+    found: list[str] = []
+    if "django" in deps or "django-rest-framework" in deps or "djangorestframework" in deps:
+        found.append("django")
+    if "fastapi" in deps:
+        found.append("fastapi")
+    if "flask" in deps:
+        found.append("flask")
+    if "pydantic" in deps:
+        found.append("pydantic")
+    if "sqlalchemy" in deps:
+        found.append("sqlalchemy")
+    if "celery" in deps:
+        found.append("celery")
+    if "requests" in deps or "httpx" in deps:
+        found.append("requests")
+    if "pandas" in deps:
+        found.append("pandas")
+    if "pytest" in deps:
+        found.append("pytest")
+    if "numpy" in deps:
+        found.append("numpy")
+    return found
+
+
 def _detect_package_manager(root: Path) -> str | None:
     if (root / "uv.lock").exists():
         return "uv"

pycodegate-0.3.0/src/pycodegate/rules/__init__.py

@@ -0,0 +1,55 @@
+"""Rule registry for pycodegate."""
+
+from __future__ import annotations
+
+from pycodegate.rules.architecture import ArchitectureRules
+from pycodegate.rules.base import BaseRules
+from pycodegate.rules.celery import CeleryRules
+from pycodegate.rules.complexity import ComplexityRules
+from pycodegate.rules.correctness import CorrectnessRules
+from pycodegate.rules.dependencies import DependencyRules as DependencyRules
+from pycodegate.rules.django import DjangoRules
+from pycodegate.rules.fastapi import FastAPIRules
+from pycodegate.rules.flask import FlaskRules
+from pycodegate.rules.imports import ImportsRules as ImportsRules
+from pycodegate.rules.logging_rules import LoggingRules
+from pycodegate.rules.numpy_rules import NumpyRules
+from pycodegate.rules.pandas_rules import PandasRules
+from pycodegate.rules.performance import PerformanceRules
+from pycodegate.rules.pydantic import PydanticRules
+from pycodegate.rules.pytest_rules import PytestRules
+from pycodegate.rules.requests_rules import RequestsRules
+from pycodegate.rules.security import SecurityRules
+from pycodegate.rules.sqlalchemy import SQLAlchemyRules
+from pycodegate.rules.structure import StructureRules as StructureRules
+
+
+def get_all_rule_sets() -> list[BaseRules]:
+    """Return all available rule sets."""
+    return [
+        SecurityRules(),
+        PerformanceRules(),
+        ArchitectureRules(),
+        CorrectnessRules(),
+        ComplexityRules(),
+    ]
+
+
+_FRAMEWORK_MAP: dict[str, type[BaseRules]] = {
+    "django": DjangoRules,
+    "fastapi": FastAPIRules,
+    "flask": FlaskRules,
+    "pydantic": PydanticRules,
+    "sqlalchemy": SQLAlchemyRules,
+    "celery": CeleryRules,
+    "requests": RequestsRules,
+    "logging": LoggingRules,
+    "pandas": PandasRules,
+    "pytest": PytestRules,
+    "numpy": NumpyRules,
+}
+
+
+def get_framework_rules(frameworks: list[str]) -> list[BaseRules]:
+    """Return framework/library-specific rule sets for all detected frameworks."""
+    return [_FRAMEWORK_MAP[f]() for f in frameworks if f in _FRAMEWORK_MAP]

pycodegate-0.3.0/src/pycodegate/rules/celery.py

@@ -0,0 +1,177 @@
+"""Celery-specific rules: missing bind, retry without exc, broad autoretry, direct call."""
+
+from __future__ import annotations
+
+import ast
+
+from pycodegate.rules.base import BaseRules
+from pycodegate.types import Category, Diagnostic, Severity
+
+_TASK_DECORATOR_ATTRS = {"task"}
+_TASK_DECORATOR_NAMES = {"shared_task"}
+_TASK_CALLER_PREFIXES = {"app", "celery"}
+
+
+def _is_task_decorator(dec: ast.expr) -> bool:
+    """Return True if *dec* looks like @app.task, @celery.task, or @shared_task."""
+    if isinstance(dec, ast.Attribute) and dec.attr in _TASK_DECORATOR_ATTRS:
+        if isinstance(dec.value, ast.Name) and dec.value.id in _TASK_CALLER_PREFIXES:
+            return True
+    if isinstance(dec, ast.Name) and dec.id in _TASK_DECORATOR_NAMES:
+        return True
+    if isinstance(dec, ast.Call):
+        return _is_task_decorator(dec.func)
+    return False
+
+
+def _decorator_call(dec: ast.expr) -> ast.Call | None:
+    """Return the Call node if the decorator is called, else None."""
+    if isinstance(dec, ast.Call):
+        return dec
+    return None
+
+
+class CeleryRules(BaseRules):
+    """Celery framework-specific checks."""
+
+    def check(self, source: str, filename: str) -> list[Diagnostic]:
+        tree = self._parse(source)
+        if tree is None:
+            return []
+
+        diags: list[Diagnostic] = []
+
+        # First pass: collect task function names for direct-call detection.
+        task_names: set[str] = set()
+        for node in ast.walk(tree):
+            if isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef)):
+                for dec in node.decorator_list:
+                    if _is_task_decorator(dec):
+                        task_names.add(node.name)
+
+        # Second pass: all checks.
+        for node in ast.walk(tree):
+            if isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef)):
+                diags.extend(self._check_task_func(node, filename))
+            elif isinstance(node, ast.ExceptHandler):
+                diags.extend(self._check_retry_no_exc(node, filename))
+            elif isinstance(node, ast.Call):
+                diags.extend(self._check_direct_call(node, task_names, filename))
+
+        return diags
+
+    def _check_task_func(self, node, filename) -> list[Diagnostic]:
+        """Run task-decorator checks on a single function node."""
+        diags: list[Diagnostic] = []
+        for dec in node.decorator_list:
+            if not _is_task_decorator(dec):
+                continue
+            diags.extend(self._check_missing_bind(node, dec, filename))
+            call = _decorator_call(dec)
+            if call is not None:
+                diags.extend(self._check_broad_autoretry(node, call, filename))
+        return diags
+
+    # ------------------------------------------------------------------
+    # Rule: celery-missing-bind
+    # ------------------------------------------------------------------
+    def _check_missing_bind(self, func_node, decorator, filename) -> list[Diagnostic]:
+        args = func_node.args
+        first_arg = args.args[0].arg if args.args else None
+        if first_arg != "self":
+            return []
+
+        call = _decorator_call(decorator)
+        if call is not None and any(
+            kw.arg == "bind" and isinstance(kw.value, ast.Constant) and kw.value.value is True
+            for kw in call.keywords
+        ):
+            return []
+
+        return [
+            Diagnostic(
+                file_path=filename,
+                rule="celery-missing-bind",
+                severity=Severity.ERROR,
+                category=Category.CELERY,
+                message=f"Task '{func_node.name}' uses 'self' but decorator is missing bind=True",
+                help="Add bind=True to the task decorator",
+                line=func_node.lineno,
+                column=func_node.col_offset,
+                cost=2.0,
+            )
+        ]
+
+    # ------------------------------------------------------------------
+    # Rule: celery-retry-no-exc
+    # ------------------------------------------------------------------
+    def _check_retry_no_exc(self, handler: ast.ExceptHandler, filename: str) -> list[Diagnostic]:
+        diags: list[Diagnostic] = []
+        for node in ast.walk(handler):
+            if not isinstance(node, ast.Call):
+                continue
+            if isinstance(node.func, ast.Attribute) and node.func.attr == "retry":
+                if isinstance(node.func.value, ast.Name) and node.func.value.id == "self":
+                    has_exc = any(kw.arg == "exc" for kw in node.keywords)
+                    if not has_exc:
+                        diags.append(
+                            Diagnostic(
+                                file_path=filename,
+                                rule="celery-retry-no-exc",
+                                severity=Severity.WARNING,
+                                category=Category.CELERY,
+                                message="self.retry() called without exc keyword — original traceback is lost",
+                                help="Pass exc=exc to self.retry() to preserve the traceback",
+                                line=node.lineno,
+                                column=node.col_offset,
+                                cost=1.0,
+                            )
+                        )
+        return diags
+
+    # ------------------------------------------------------------------
+    # Rule: celery-broad-autoretry
+    # ------------------------------------------------------------------
+    def _check_broad_autoretry(self, func_node, call: ast.Call, filename: str) -> list[Diagnostic]:
+        for kw in call.keywords:
+            if kw.arg != "autoretry_for":
+                continue
+            if isinstance(kw.value, ast.Tuple):
+                for elt in kw.value.elts:
+                    if isinstance(elt, ast.Name) and elt.id in {"Exception", "BaseException"}:
+                        return [
+                            Diagnostic(
+                                file_path=filename,
+                                rule="celery-broad-autoretry",
+                                severity=Severity.WARNING,
+                                category=Category.CELERY,
+                                message=f"Task '{func_node.name}' uses autoretry_for with broad {elt.id}",
+                                help="Narrow autoretry_for to specific exception types",
+                                line=kw.value.lineno,
+                                column=kw.value.col_offset,
+                                cost=1.0,
+                            )
+                        ]
+        return []
+
+    # ------------------------------------------------------------------
+    # Rule: celery-direct-call
+    # ------------------------------------------------------------------
+    def _check_direct_call(
+        self, node: ast.Call, task_names: set[str], filename: str
+    ) -> list[Diagnostic]:
+        if isinstance(node.func, ast.Name) and node.func.id in task_names:
+            return [
+                Diagnostic(
+                    file_path=filename,
+                    rule="celery-direct-call",
+                    severity=Severity.WARNING,
+                    category=Category.CELERY,
+                    message=f"Task '{node.func.id}' called directly — runs synchronously, not via worker",
+                    help="Use .delay() or .apply_async() to dispatch to a Celery worker",
+                    line=node.lineno,
+                    column=node.col_offset,
+                    cost=0.5,
+                )
+            ]
+        return []

{pycodegate-0.2.0 → pycodegate-0.3.0}/src/pycodegate/rules/dead_code.py

@@ -10,6 +10,7 @@ except ImportError:
     vulture = None  # type: ignore[assignment]
 
 from pycodegate.types import Category, Diagnostic, Severity
+from pycodegate.utils.file_discovery import IGNORE_DIRS
 
 
 class DeadCodeRules:
@@ -23,11 +24,13 @@ class DeadCodeRules:
         v = vulture.Vulture()
 
         py_files = list(Path(project_path).rglob("*.py"))
-        ignore = {".venv", "venv", "node_modules", "__pycache__", ".git", "dist", "build"}
         py_files = [
             f
             for f in py_files
-            if not any(part in ignore for part in f.relative_to(project_path).parts)
+            if not any(
+                part in IGNORE_DIRS or part.endswith(".egg-info")
+                for part in f.relative_to(project_path).parts
+            )
         ]
 
         if not py_files:

{pycodegate-0.2.0 → pycodegate-0.3.0}/src/pycodegate/rules/imports.py

@@ -32,7 +32,7 @@ class ImportsRules:
             return
         file_map[module_name] = filepath
 
-        for node in ast.walk(tree):
+        for node in ast.iter_child_nodes(tree):
             if isinstance(node, ast.Import):
                 for alias in node.names:
                     graph[module_name].add(alias.name)

pycodegate-0.3.0/src/pycodegate/rules/logging_rules.py

@@ -0,0 +1,124 @@
+"""Logging rules: f-string formatting, root logger, missing exc_info."""
+
+from __future__ import annotations
+
+import ast
+
+from pycodegate.rules.base import BaseRules
+from pycodegate.types import Category, Diagnostic, Severity
+
+_LOG_LEVELS = {"debug", "info", "warning", "error", "critical", "exception"}
+
+
+class LoggingRules(BaseRules):
+    """Logging-related checks."""
+
+    def check(self, source: str, filename: str) -> list[Diagnostic]:
+        tree = self._parse(source)
+        if tree is None:
+            return []
+
+        diags: list[Diagnostic] = []
+        diags.extend(self._check_fstring(tree, filename))
+        diags.extend(self._check_root_logger(tree, filename))
+        diags.extend(self._check_error_no_exc_info(tree, filename))
+        return diags
+
+    def _check_fstring(self, tree: ast.Module, filename: str) -> list[Diagnostic]:
+        diags: list[Diagnostic] = []
+        for node in ast.walk(tree):
+            if not isinstance(node, ast.Call):
+                continue
+            if not isinstance(node.func, ast.Attribute):
+                continue
+            if node.func.attr not in _LOG_LEVELS:
+                continue
+            if not node.args:
+                continue
+            first_arg = node.args[0]
+            is_fstring = isinstance(first_arg, ast.JoinedStr)
+            is_format_call = (
+                isinstance(first_arg, ast.Call)
+                and isinstance(first_arg.func, ast.Attribute)
+                and first_arg.func.attr == "format"
+                and isinstance(first_arg.func.value, (ast.Constant, ast.JoinedStr))
+            )
+            if is_fstring or is_format_call:
+                diags.append(
+                    Diagnostic(
+                        file_path=filename,
+                        rule="logging-fstring",
+                        severity=Severity.WARNING,
+                        category=Category.LOGGING,
+                        message="f-string in logging call defeats lazy evaluation and breaks log aggregation",
+                        help="Use %-style: logger.info('User %s logged in', user_id)",
+                        line=node.lineno,
+                        column=node.col_offset,
+                        cost=1.0,
+                    )
+                )
+        return diags
+
+    def _check_root_logger(self, tree: ast.Module, filename: str) -> list[Diagnostic]:
+        diags: list[Diagnostic] = []
+        for node in ast.walk(tree):
+            if not isinstance(node, ast.Call):
+                continue
+            if not isinstance(node.func, ast.Attribute):
+                continue
+            if node.func.attr not in _LOG_LEVELS:
+                continue
+            if not isinstance(node.func.value, ast.Name):
+                continue
+            if node.func.value.id != "logging":
+                continue
+            diags.append(
+                Diagnostic(
+                    file_path=filename,
+                    rule="logging-root-logger",
+                    severity=Severity.WARNING,
+                    category=Category.LOGGING,
+                    message="Using root logger directly — cannot be independently configured",
+                    help="Use logger = logging.getLogger(__name__) and call logger.info() instead",
+                    line=node.lineno,
+                    column=node.col_offset,
+                    cost=0.5,
+                )
+            )
+        return diags
+
+    def _check_error_no_exc_info(self, tree: ast.Module, filename: str) -> list[Diagnostic]:
+        diags: list[Diagnostic] = []
+        for node in ast.walk(tree):
+            if not isinstance(node, ast.ExceptHandler):
+                continue
+            for child in ast.walk(node):
+                if not isinstance(child, ast.Call):
+                    continue
+                if not isinstance(child.func, ast.Attribute):
+                    continue
+                if child.func.attr not in ("error", "warning"):
+                    continue
+                # If method is .exception(), it already includes exc_info
+                # but .exception() is not "error" or "warning", so skip check
+                has_exc_info = any(
+                    kw.arg == "exc_info"
+                    and isinstance(kw.value, ast.Constant)
+                    and kw.value.value is True
+                    for kw in child.keywords
+                )
+                if not has_exc_info:
+                    diags.append(
+                        Diagnostic(
+                            file_path=filename,
+                            rule="logging-error-no-exc-info",
+                            severity=Severity.WARNING,
+                            category=Category.LOGGING,
+                            message="logger.error() in except block without exc_info=True loses the traceback",
+                            help="Use logger.exception() or add exc_info=True",
+                            line=child.lineno,
+                            column=child.col_offset,
+                            cost=1.0,
+                        )
+                    )
+        return diags

pycodegate-0.3.0/src/pycodegate/rules/numpy_rules.py

@@ -0,0 +1,176 @@
+"""NumPy rules: array equality in boolean context, builtins on arrays, NaN in int arrays."""
+
+from __future__ import annotations
+
+import ast
+
+from pycodegate.rules.base import BaseRules
+from pycodegate.types import Category, Diagnostic, Severity
+
+_NP_ARRAY_CONSTRUCTORS = {"array", "zeros", "ones", "empty", "arange", "linspace"}
+_PYTHON_BUILTINS = {"sum", "max", "min", "any", "all"}
+
+
+class NumpyRules(BaseRules):
+    """Checks for common NumPy misuse."""
+
+    def check(self, source: str, filename: str) -> list[Diagnostic]:
+        tree = self._parse(source)
+        if tree is None:
+            return []
+
+        diags: list[Diagnostic] = []
+        for node in ast.walk(tree):
+            if isinstance(node, (ast.If, ast.While)):
+                diags.extend(self._check_array_equality(node, filename))
+            if isinstance(node, ast.Call):
+                diags.extend(self._check_builtin_on_array(node, filename))
+                diags.extend(self._check_nan_in_int_array(node, filename))
+        return diags
+
+    # ------------------------------------------------------------------
+    # Rule 1: numpy-array-equality
+    # ------------------------------------------------------------------
+
+    def _is_np_array_call(self, node: ast.expr) -> bool:
+        """Return True if the node is a call to an np array constructor."""
+        if not isinstance(node, ast.Call):
+            return False
+        func = node.func
+        return (
+            isinstance(func, ast.Attribute)
+            and isinstance(func.value, ast.Name)
+            and func.value.id == "np"
+            and func.attr in _NP_ARRAY_CONSTRUCTORS
+        )
+
+    def _compare_has_array(self, node: ast.Compare) -> bool:
+        """Return True if a Compare uses == or != with an np array call on either side."""
+        for op in node.ops:
+            if isinstance(op, (ast.Eq, ast.NotEq)):
+                all_operands = [node.left, *node.comparators]
+                if any(self._is_np_array_call(operand) for operand in all_operands):
+                    return True
+        return False
+
+    def _check_array_equality(self, node: ast.If | ast.While, filename: str) -> list[Diagnostic]:
+        test = node.test
+        flagged: list[ast.AST] = []
+
+        if isinstance(test, ast.Compare) and self._compare_has_array(test):
+            flagged.append(test)
+        elif isinstance(test, ast.BoolOp):
+            for value in test.values:
+                if isinstance(value, ast.Compare) and self._compare_has_array(value):
+                    flagged.append(value)
+
+        return [
+            Diagnostic(
+                file_path=filename,
+                rule="numpy-array-equality",
+                severity=Severity.ERROR,
+                category=Category.NUMPY,
+                message="Array comparison in boolean context — raises ValueError at runtime",
+                help="Use np.array_equal(a, b) or np.allclose(a, b) for float arrays",
+                line=cmp.lineno,
+                column=cmp.col_offset,
+                cost=2.0,
+            )
+            for cmp in flagged
+        ]
+
+    # ------------------------------------------------------------------
+    # Rule 2: numpy-builtin-on-array
+    # ------------------------------------------------------------------
+
+    def _is_np_call(self, node: ast.expr) -> bool:
+        """Return True if node is any call whose func involves 'np'."""
+        if not isinstance(node, ast.Call):
+            return False
+        func = node.func
+        return (
+            isinstance(func, ast.Attribute)
+            and isinstance(func.value, ast.Name)
+            and func.value.id == "np"
+        )
+
+    def _check_builtin_on_array(self, node: ast.Call, filename: str) -> list[Diagnostic]:
+        if not (isinstance(node.func, ast.Name) and node.func.id in _PYTHON_BUILTINS):
+            return []
+        if not node.args:
+            return []
+        if not self._is_np_call(node.args[0]):
+            return []
+        name = node.func.id
+        return [
+            Diagnostic(
+                file_path=filename,
+                rule="numpy-builtin-on-array",
+                severity=Severity.WARNING,
+                category=Category.NUMPY,
+                message=f"Python builtin '{name}()' on numpy array — use np.{name}() for correct results",
+                help=f"Replace with np.{name}() or array.{name}()",
+                line=node.lineno,
+                column=node.col_offset,
+                cost=1.0,
+            )
+        ]
+
+    # ------------------------------------------------------------------
+    # Rule 3: numpy-nan-in-int-array
+    # ------------------------------------------------------------------
+
+    def _check_nan_in_int_array(self, node: ast.Call, filename: str) -> list[Diagnostic]:
+        if not self._is_np_array_literal(node):
+            return []
+
+        elements = node.args[0].elts
+        has_int = any(self._is_int_literal(e) for e in elements)
+        has_none_or_nan = any(self._is_none_or_nan(e) for e in elements)
+
+        if not (has_int and has_none_or_nan):
+            return []
+        return [
+            Diagnostic(
+                file_path=filename,
+                rule="numpy-nan-in-int-array",
+                severity=Severity.WARNING,
+                category=Category.NUMPY,
+                message="Mixing integers with None/NaN in np.array() — silently coerces to object/float dtype",
+                help="Use a masked array or pandas nullable integer type instead",
+                line=node.lineno,
+                column=node.col_offset,
+                cost=1.0,
+            )
+        ]
+
+    @staticmethod
+    def _is_np_array_literal(node: ast.Call) -> bool:
+        func = node.func
+        return (
+            isinstance(func, ast.Attribute)
+            and isinstance(func.value, ast.Name)
+            and func.value.id == "np"
+            and func.attr == "array"
+            and bool(node.args)
+            and isinstance(node.args[0], ast.List)
+        )
+
+    @staticmethod
+    def _is_int_literal(elt: ast.expr) -> bool:
+        return (
+            isinstance(elt, ast.Constant)
+            and isinstance(elt.value, int)
+            and not isinstance(elt.value, bool)
+        )
+
+    @staticmethod
+    def _is_none_or_nan(elt: ast.expr) -> bool:
+        if isinstance(elt, ast.Constant) and elt.value is None:
+            return True
+        return (
+            isinstance(elt, ast.Attribute)
+            and isinstance(elt.value, ast.Name)
+            and elt.value.id == "np"
+            and elt.attr == "nan"
+        )