pytagmanager 0.3.0__tar.gz → 0.3.2__tar.gz

pytagmanager-0.3.2/.cargo/audit.toml

@@ -0,0 +1,16 @@
+# cargo-audit configuration.
+#
+# Ignored advisories (each with the reason it cannot be fixed by upgrading).
+[advisories]
+ignore = [
+    # `async-std` (RUSTSEC-2025-0052) is a transitive, unmodifiable dependency:
+    #   pytagmanager -> mudfish-browser (external git dep, Mullassery/MudFish
+    #   @ rev 71176fa) -> chromiumoxide 0.7 -> async-std.
+    # chromiumoxide 0.7 enables its `async-std-runtime` feature by *default*,
+    # and Cargo features are additive, so downstream cannot disable it. It is
+    # removed in chromiumoxide 0.9 (tokio-only), but the parent
+    # `mudfish-browser` pins `chromiumoxide = "0.7"` and lives in the external
+    # MudFish repository, which is out of scope to edit. No downstream fix is
+    # available; tracked upstream until MudFish adopts chromiumoxide >= 0.9.
+    "RUSTSEC-2025-0052",
+]

{pytagmanager-0.3.0 → pytagmanager-0.3.2}/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -21,7 +21,7 @@ body:
     id: python-version
     attributes:
       label: Python version
-      placeholder: "3.9 / 3.11 / ..."
+      placeholder: "3.10 / 3.12 / ..."
     validations:
       required: true
 

{pytagmanager-0.3.0 → pytagmanager-0.3.2}/.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
 
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.9"
+          python-version: "3.12"
 
       - name: Create virtualenv
         run: |
@@ -38,7 +38,7 @@ jobs:
           echo "VIRTUAL_ENV=$PWD/.venv" >> "$GITHUB_ENV"
 
       - name: Install Python build/test tooling
-        run: python -m pip install --upgrade pip maturin pytest
+        run: python -m pip install --upgrade pip setuptools maturin pytest
 
       - name: Build and install the extension module (maturin develop)
         run: maturin develop
@@ -49,6 +49,11 @@ jobs:
       - name: Install Playwright's Chromium browser
         run: playwright install --with-deps chromium
 
+      - name: Lint Python (ruff)
+        run: |
+          python -m pip install ruff
+          ruff check --select E9,F63,F7,F82 python
+
       - name: pytest tests/python
         run: pytest tests/python -v
 
@@ -71,11 +76,11 @@ jobs:
 
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.9"
+          python-version: "3.12"
 
       - name: Install pip-audit and this project's declared dependencies
         run: |
-          python -m pip install --upgrade pip pip-audit
+          python -m pip install --upgrade pip setuptools pip-audit
           python -m pip install 'click>=8.0' 'playwright>=1.40' 'pyyaml>=6.0' \
             'google-api-python-client>=2.100' 'google-auth>=2.23' \
             'google-auth-oauthlib>=1.1'

{pytagmanager-0.3.0 → pytagmanager-0.3.2}/.gitignore

@@ -9,3 +9,9 @@ __pycache__/
 dist/
 *.so
 *.pyd
+
+# macOS
+.DS_Store
+**/.DS_Store
+
+graphify-out/

pytagmanager-0.3.2/.graphifyignore

@@ -0,0 +1,31 @@
+# Graphify ignore file - https://docs.graphify.com/reference/configuration
+# Keep the scan (and therefore the agent's graph) focused on real source.
+.git/
+.github/
+graphify-out/
+
+# Build output / artifacts
+target/
+dist/
+build/
+*.egg-info/
+node_modules/
+.venv/
+venv/
+env/
+
+# Caches
+__pycache__/
+*.pyc
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.tox/
+.nox/
+.coverage
+htmlcov/
+
+# Vendored / generated
+*.min.js
+*.min.css
+*.lock

{pytagmanager-0.3.0 → pytagmanager-0.3.2}/CHANGELOG.md

@@ -10,7 +10,38 @@ notes, not reconstructed from memory — see `ROADMAP_HONEST.md` for the
 authoritative, continuously-updated built-vs-not-built breakdown; this
 file is a release-oriented complement to it, not a duplicate.
 
-## [Unreleased]
+## [0.3.2] - 2026-10-17
+
+### Fixed
+- Audit remediation: security hardening, correctness fixes, and lint/CI gates.
+
+## [0.3.1] - 2026-10-12
+
+### Fixed
+
+- **The Phase 1.8 interactive-element objectives had no canonical event
+  mapping, so seven of the fourteen objectives the heuristics engine can
+  emit silently fell through to the generic fallback in every exporter.**
+  `recommend/heuristics.py` can produce `Cart Modification`, `Wishlist
+  Intent`, `Content Discovery`, `Pagination`, `Video Engagement`,
+  `Navigation`, and `Modal Interaction`, but `export/_taxonomy.py`'s
+  `CANONICAL_EVENT_MAP` only covered the original seven, so those
+  recommendations exported as the platform-neutral `custom_event` (and,
+  in GA4/Segment/RudderStack, as their generic default event name). Added
+  real, platform-neutral canonical keys (`remove_from_cart`,
+  `add_to_wishlist`, `content_discovery`, `pagination`,
+  `video_engagement`, `navigation`, `modal_interaction`) plus matching
+  spec entries in `ga4.py` (using GA4's documented `remove_from_cart` /
+  `add_to_wishlist` / `video_start` recommended events where they exist),
+  `segment.py`, and `rudderstack.py` (e.g. Segment's Ecommerce v2 spec
+  name `Product Removed`). `intent/ollama_classifier.py`'s `_TAXONOMY`,
+  despite a comment claiming it "matches recommend/heuristics.py's
+  taxonomy," was also missing these seven — so the LLM classification
+  path could never emit them either; it now matches. New tests in
+  `tests/python/test_exporters.py` assert every heuristic objective has a
+  non-fallback canonical event, every canonical event has a spec entry in
+  all three name-mapping exporters, and the Ollama taxonomy equals the
+  heuristic taxonomy exactly.
 
 ## [0.3.0] - 2026-10-04