pyossmtool 0.0.1__py3-none-any.whl

pyossmtool/__init__.py

@@ -0,0 +1,3 @@
+"""pyossmtool — quality-gate orchestrator for AI-assisted development."""
+
+__version__ = "0.0.1"

pyossmtool/bundle/catalog/checks/bandit.scan.yaml

@@ -0,0 +1,13 @@
+id: bandit.scan
+tool: bandit
+name: Bandit Security Scan
+description: Scan Python code for common security issues.
+argv:
+  - -r
+  - "{target}"
+  - -f
+  - json
+  - -q
+parser: bandit_json
+success:
+  exit_codes: [0, 1]

pyossmtool/bundle/catalog/checks/codespell.spelling.yaml

@@ -0,0 +1,12 @@
+id: codespell.spelling
+tool: codespell
+name: Codespell
+description: Check prose for common misspellings.
+argv:
+  - "{target}"
+parser: codespell_text
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - codespell -w {target}

pyossmtool/bundle/catalog/checks/deadcode.scan.yaml

@@ -0,0 +1,13 @@
+id: deadcode.scan
+tool: deadcode
+name: Deadcode Scan
+description: Find unused Python definitions.
+argv:
+  - --no-color
+  - "{target}"
+parser: deadcode_text
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - deadcode --no-color {target}

pyossmtool/bundle/catalog/checks/gate.acronym-allowlist.yaml

@@ -0,0 +1,14 @@
+id: gate.acronym-allowlist
+tool: script
+name: Acronym Allowlist Gate
+description: Require documented expansions for acronyms in contributor prose.
+script: bundled:gates/acronym-allowlist.sh
+parser: gate_json
+output_file: .pyossmtool/reports/gate.acronym-allowlist.json
+argv: []
+config:
+  bundled: gates/acronym-allowlist.yaml
+  project_file: .pyossmtool/configs/gates/gate.acronym-allowlist.yaml
+  allowlist_bundled: acronyms.yaml
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/gate.folder-breadth.yaml

@@ -0,0 +1,14 @@
+id: gate.folder-breadth
+tool: script
+name: Folder Breadth Gate
+description: Cap direct sibling file counts in leaf directories.
+script: bundled:gates/folder-breadth.sh
+parser: gate_json
+output_file: .pyossmtool/reports/gate.folder-breadth.json
+argv: []
+config:
+  bundled: gates/folder-breadth.yaml
+  project_file: .pyossmtool/configs/gates/gate.folder-breadth.yaml
+  allowlist_bundled: folder-breadth.txt
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/gate.module-private-vars.yaml

@@ -0,0 +1,14 @@
+id: gate.module-private-vars
+tool: script
+name: Module Private Vars Gate
+description: Forbid module-level names with a single leading underscore.
+script: bundled:gates/module-private-vars.sh
+parser: gate_json
+output_file: .pyossmtool/reports/gate.module-private-vars.json
+argv: []
+config:
+  bundled: gates/module-private-vars.yaml
+  project_file: .pyossmtool/configs/gates/gate.module-private-vars.yaml
+  allowlist_bundled: module-private-vars.txt
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/gate.module-size.yaml

@@ -0,0 +1,14 @@
+id: gate.module-size
+tool: script
+name: Module Size Gate
+description: Enforce portfolio and new-file line limits on Python modules.
+script: bundled:gates/module-size.sh
+parser: gate_json
+output_file: .pyossmtool/reports/gate.module-size.json
+argv: []
+config:
+  bundled: gates/module-size.yaml
+  project_file: .pyossmtool/configs/gates/gate.module-size.yaml
+  allowlist_bundled: module-size.txt
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/gitleaks.secrets.yaml

@@ -0,0 +1,21 @@
+id: gitleaks.secrets
+tool: gitleaks
+name: Gitleaks Secret Scan
+description: Scan repository for leaked secrets.
+argv:
+  - detect
+  - --source
+  - "{target}"
+  - --no-banner
+  - --redact
+  - --report-format
+  - json
+  - --report-path
+  - .pyossmtool/gitleaks-report.json
+parser: gitleaks_json
+success:
+  exit_codes: [0]
+output_file: .pyossmtool/gitleaks-report.json
+remediation:
+  suggested_commands:
+    - gitleaks detect --source {target}

pyossmtool/bundle/catalog/checks/hadolint.dockerfile.yaml

@@ -0,0 +1,16 @@
+id: hadolint.dockerfile
+tool: hadolint
+name: Hadolint
+description: Lint Dockerfiles.
+argv:
+- --format
+- json
+- '{target}'
+parser: hadolint_json
+success:
+  exit_codes:
+  - 0
+  - 1
+remediation:
+  suggested_commands:
+  - hadolint {target}

pyossmtool/bundle/catalog/checks/jscpd.duplication.yaml

@@ -0,0 +1,19 @@
+id: jscpd.duplication
+tool: jscpd
+name: JSCPD Duplication Scan
+description: Detect duplicated code blocks above threshold.
+argv:
+  - "{target}"
+  - --reporters
+  - json
+  - --silent
+  - --min-lines
+  - "3"
+  - --min-tokens
+  - "20"
+parser: jscpd_json
+success:
+  exit_codes: [0]
+policy:
+  max_duplication_percent: 50
+output_file: report/jscpd-report.json

pyossmtool/bundle/catalog/checks/markdownlint.check.yaml

@@ -0,0 +1,17 @@
+id: markdownlint.check
+tool: markdownlint
+name: Markdownlint
+description: Lint Markdown files for style issues.
+argv:
+- -c
+- '{config}'
+- -j
+- '{target}'
+parser: markdownlint_json
+success:
+  exit_codes:
+  - 0
+  - 1
+remediation:
+  suggested_commands:
+  - markdownlint {target}

pyossmtool/bundle/catalog/checks/mdformat.apply.yaml

@@ -0,0 +1,10 @@
+id: mdformat.apply
+tool: mdformat
+name: mdformat Apply
+description: Apply Markdown formatting.
+mode: format
+argv:
+  - "{target}"
+parser: noop
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/mdformat.format.yaml

@@ -0,0 +1,14 @@
+id: mdformat.format
+tool: mdformat
+name: mdformat Check
+description: Verify Markdown formatting without applying changes.
+argv:
+- --check
+- '{target}'
+parser: mdformat_text
+success:
+  exit_codes:
+  - 0
+remediation:
+  suggested_commands:
+  - mdformat {target}

pyossmtool/bundle/catalog/checks/mutmut.run.yaml

@@ -0,0 +1,13 @@
+id: mutmut.run
+tool: mutmut
+name: Mutmut Mutation Testing
+description: Run mutation tests (slow; requires [tool.mutmut] in pyproject.toml).
+argv:
+  - run
+parser: mutmut_text
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - mutmut run
+    - mutmut results

pyossmtool/bundle/catalog/checks/pydeps.cycles.yaml

@@ -0,0 +1,14 @@
+id: pydeps.cycles
+tool: pydeps
+name: Pydeps Import Cycles
+description: Fail when Python import cycles are detected.
+argv:
+  - "{target}"
+  - --show-cycles
+  - --no-show
+parser: pydeps_cycles_text
+success:
+  exit_codes: [0, 1, 2]
+remediation:
+  suggested_commands:
+    - pydeps {target} --show-cycles --no-show

pyossmtool/bundle/catalog/checks/pytest.coverage.yaml

@@ -0,0 +1,19 @@
+id: pytest.coverage
+tool: pytest
+name: Pytest Coverage
+description: Run tests with coverage floor enforcement.
+argv:
+  - "{target}"
+  - --cov={cov}
+  - --cov-report=term-missing
+  - --cov-fail-under=80
+  - -q
+parser: pytest_text
+success:
+  exit_codes: [0]
+policy:
+  min_coverage_percent: 80
+  coverage_source: src/
+remediation:
+  suggested_commands:
+    - pytest {target} --cov={cov}

pyossmtool/bundle/catalog/checks/pytest.test.yaml

@@ -0,0 +1,14 @@
+id: pytest.test
+tool: pytest
+name: Pytest
+description: Run the project test suite.
+argv:
+  - "{target}"
+  - -q
+  - --tb=line
+parser: pytest_text
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - pytest {target}

pyossmtool/bundle/catalog/checks/radon.cc.yaml

@@ -0,0 +1,13 @@
+id: radon.cc
+tool: radon
+name: Radon Cyclomatic Complexity
+description: Fail when function complexity rank exceeds policy.
+argv:
+  - cc
+  - "{target}"
+  - -j
+parser: radon_cc_json
+success:
+  exit_codes: [0]
+policy:
+  max_complexity_rank: A

pyossmtool/bundle/catalog/checks/radon.mi.yaml

@@ -0,0 +1,13 @@
+id: radon.mi
+tool: radon
+name: Radon Maintainability Index
+description: Fail when module maintainability rank exceeds policy.
+argv:
+  - mi
+  - "{target}"
+  - -j
+parser: radon_mi_json
+success:
+  exit_codes: [0]
+policy:
+  max_complexity_rank: A

pyossmtool/bundle/catalog/checks/ruff.format.apply.yaml

@@ -0,0 +1,11 @@
+id: ruff.format.apply
+tool: ruff
+name: Ruff Format Apply
+description: Apply Ruff formatting to Python sources.
+mode: format
+argv:
+  - format
+  - "{target}"
+parser: noop
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/ruff.format.yaml

@@ -0,0 +1,14 @@
+id: ruff.format
+tool: ruff
+name: Ruff Format Check
+description: Verify Python formatting without applying changes.
+argv:
+  - format
+  - --check
+  - "{target}"
+parser: ruff_format_text
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - ruff format {target}

pyossmtool/bundle/catalog/checks/ruff.lint.yaml

@@ -0,0 +1,15 @@
+id: ruff.lint
+tool: ruff
+name: Ruff Lint
+description: Run ruff check on Python sources.
+argv:
+  - check
+  - "{target}"
+  - --output-format
+  - json
+parser: ruff_json
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - ruff check --fix {target}

pyossmtool/bundle/catalog/checks/ruff.unused.yaml

@@ -0,0 +1,17 @@
+id: ruff.unused
+tool: ruff
+name: Ruff Unused Imports
+description: Detect unused imports and variables (F401, F841).
+argv:
+  - check
+  - "{target}"
+  - --select
+  - F401,F841
+  - --output-format
+  - json
+parser: ruff_json
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - ruff check --select F401,F841 --fix {target}

pyossmtool/bundle/catalog/checks/semgrep.scan.yaml

@@ -0,0 +1,18 @@
+id: semgrep.scan
+tool: semgrep
+name: Semgrep Scan
+description: Static analysis for security and architecture patterns.
+argv:
+  - scan
+  - --config
+  - "{config}"
+  - "{target}"
+  - --error
+  - --json
+  - --quiet
+parser: semgrep_json
+success:
+  exit_codes: [0, 1]
+remediation:
+  suggested_commands:
+    - semgrep scan --config <rules> {target}

pyossmtool/bundle/catalog/checks/shellcheck.yaml

@@ -0,0 +1,13 @@
+id: shellcheck
+tool: shellcheck
+name: ShellCheck
+description: Lint shell scripts and output JSON diagnostics.
+argv:
+- -f
+- json
+- '{target}'
+parser: shellcheck_json
+success:
+  exit_codes:
+  - 0
+  - 1

pyossmtool/bundle/catalog/checks/shfmt.apply.yaml

@@ -0,0 +1,11 @@
+id: shfmt.apply
+tool: shfmt
+name: shfmt Apply
+description: Apply shell script formatting.
+mode: format
+argv:
+  - -w
+  - "{target}"
+parser: noop
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/shfmt.format.yaml

@@ -0,0 +1,14 @@
+id: shfmt.format
+tool: shfmt
+name: shfmt Format Check
+description: Verify shell script formatting via diff mode.
+argv:
+- -d
+- '{target}'
+parser: shfmt_diff
+success:
+  exit_codes:
+  - 0
+remediation:
+  suggested_commands:
+  - shfmt -w {target}

pyossmtool/bundle/catalog/checks/sourcery.review.yaml

@@ -0,0 +1,14 @@
+id: sourcery.review
+tool: sourcery
+name: Sourcery Review
+description: Automated code review suggestions (optional; may require Sourcery account).
+argv:
+  - review
+  - "{target}"
+  - --check
+parser: sourcery_text
+success:
+  exit_codes: [0, 1]
+remediation:
+  suggested_commands:
+    - sourcery review {target}

pyossmtool/bundle/catalog/checks/ty.check.yaml

@@ -0,0 +1,15 @@
+id: ty.check
+tool: ty
+name: ty Type Check
+description: Static type checking with concise diagnostics.
+argv:
+  - check
+  - "{target}"
+  - --output-format
+  - concise
+parser: ty_concise
+success:
+  exit_codes: [0]
+remediation:
+  suggested_commands:
+    - ty check {target}

pyossmtool/bundle/catalog/checks/vulture.scan.yaml

@@ -0,0 +1,16 @@
+id: vulture.scan
+tool: vulture
+name: Vulture Scan
+description: Find dead Python code with high confidence.
+argv:
+  - "{target}"
+  - --min-confidence
+  - "80"
+parser: vulture_text
+success:
+  exit_codes: [0, 3]
+policy:
+  min_confidence: 80
+remediation:
+  suggested_commands:
+    - vulture {target}

pyossmtool/bundle/catalog/checks/yamlfmt.apply.yaml

@@ -0,0 +1,10 @@
+id: yamlfmt.apply
+tool: yamlfmt
+name: yamlfmt Apply
+description: Apply YAML formatting.
+mode: format
+argv:
+  - "{target}"
+parser: noop
+success:
+  exit_codes: [0]

pyossmtool/bundle/catalog/checks/yamlfmt.format.yaml

@@ -0,0 +1,14 @@
+id: yamlfmt.format
+tool: yamlfmt
+name: yamlfmt Lint
+description: Lint YAML files for formatting issues.
+argv:
+- -lint
+- '{target}'
+parser: yamlfmt_text
+success:
+  exit_codes:
+  - 0
+remediation:
+  suggested_commands:
+  - yamlfmt {target}

pyossmtool/bundle/catalog/checks/yamllint.check.yaml

@@ -0,0 +1,16 @@
+id: yamllint.check
+tool: yamllint
+name: Yamllint
+description: Lint YAML files for syntax and style issues.
+argv:
+- -f
+- parsable
+- '{target}'
+parser: yamllint_text
+success:
+  exit_codes:
+  - 0
+  - 1
+remediation:
+  suggested_commands:
+  - yamllint {target}

pyossmtool/bundle/catalog/tools/bandit.yaml

@@ -0,0 +1,20 @@
+id: bandit
+name: Bandit
+description: Security issue scanner for Python.
+install:
+  method: pip
+  package: bandit>=1.9.0
+binary: bandit
+documentation_url: https://bandit.readthedocs.io/
+config:
+  flag: -c
+  bundled: bandit.yaml
+  pyproject:
+  - tool
+  - bandit
+  use_pyproject_as_path: true
+ignore:
+  kind: flag_pairs
+  flag: -x
+files:
+- '**/*.py'

pyossmtool/bundle/catalog/tools/codespell.yaml

@@ -0,0 +1,17 @@
+id: codespell
+name: codespell
+description: Fix common misspellings in text files.
+install:
+  method: pip
+  package: codespell>=2.4.0
+binary: codespell
+documentation_url: https://github.com/codespell-project/codespell
+config:
+  pyproject:
+  - tool
+  - codespell
+ignore:
+  kind: skip_file
+  flag: --skip
+  file: codespell.skip
+files: []

pyossmtool/bundle/catalog/tools/deadcode.yaml

@@ -0,0 +1,13 @@
+id: deadcode
+name: deadcode
+description: Find unused Python code by static analysis.
+install:
+  method: pip
+  package: deadcode>=2.4.0
+binary: deadcode
+documentation_url: https://github.com/alanedwardes/deadcode
+ignore:
+  kind: prefix
+  prefix: --exclude=
+files:
+- '**/*.py'

pyossmtool/bundle/catalog/tools/gitleaks.yaml

@@ -0,0 +1,9 @@
+id: gitleaks
+name: Gitleaks
+description: Secret scanning for git repositories.
+install:
+  method: system
+  package: gitleaks
+binary: gitleaks
+documentation_url: https://github.com/gitleaks/gitleaks
+files: []

pyossmtool/bundle/catalog/tools/hadolint.yaml

@@ -0,0 +1,11 @@
+id: hadolint
+name: Hadolint
+description: Dockerfile linter.
+install:
+  method: system
+  package: hadolint
+binary: hadolint
+documentation_url: https://github.com/hadolint/hadolint
+files:
+- '**/Dockerfile'
+- '**/*.Dockerfile'

pyossmtool/bundle/catalog/tools/jscpd.yaml

@@ -0,0 +1,15 @@
+id: jscpd
+name: JSCPD
+description: Copy/paste detector for duplicated code.
+install:
+  method: npm
+  package: jscpd
+binary: jscpd
+documentation_url: https://docs.jscpd.io/
+ignore:
+  kind: config_overlay
+  format: json
+  file: jscpd.json
+  flag: --config
+  key: ignore
+files: []

pyossmtool/bundle/catalog/tools/markdownlint.yaml

@@ -0,0 +1,18 @@
+id: markdownlint
+name: markdownlint
+description: Markdown style linter (markdownlint-cli).
+install:
+  method: npm
+  package: markdownlint-cli
+binary: markdownlint
+documentation_url: https://github.com/DavidAnson/markdownlint
+config:
+  flag: -c
+  bundled: markdownlint.json
+  pass_flag: false
+  repo_files:
+  - .markdownlint.json
+  - .markdownlint.yaml
+  - .markdownlint.yml
+files:
+- '**/*.{md,markdown}'

pyossmtool/bundle/catalog/tools/mdformat.yaml

@@ -0,0 +1,13 @@
+id: mdformat
+name: mdformat
+description: Markdown formatter with --check mode.
+install:
+  method: pip
+  package: mdformat>=0.7.0
+binary: mdformat
+documentation_url: https://github.com/executablebooks/mdformat
+config:
+  repo_files:
+  - .mdformat.toml
+files:
+- '**/*.{md,markdown}'

pyossmtool/bundle/catalog/tools/mutmut.yaml

@@ -0,0 +1,10 @@
+id: mutmut
+name: mutmut
+description: Mutation testing for Python.
+install:
+  method: pip
+  package: mutmut>=3.6.0
+binary: mutmut
+documentation_url: https://mutmut.readthedocs.io/
+files:
+- '**/*.py'