rust-py-audit 0.3.0__tar.gz → 0.3.2__tar.gz

rust_py_audit-0.3.2/.github/workflows/release.yml

@@ -0,0 +1,208 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  # Nothing gets built, and nothing reaches PyPI, until this passes. Publishing
+  # to PyPI is irreversible: a bad wheel cannot be replaced, only yanked.
+  test:
+    name: Test (Rust + Python)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      # --no-default-features drops extension-module, which tells the linker to
+      # leave libpython symbols undefined. That is correct for the wheel but
+      # produces a test binary that cannot link on Linux.
+      - name: Rust unit tests
+        env:
+          PYO3_PYTHON: python
+        run: cargo test --no-default-features --lib
+
+      - name: Build, install the extension and run the Python tests
+        # `pip install` drives the maturin build backend, so it compiles the
+        # Rust extension and installs it (plus the dev extras) into the
+        # runner's Python — no virtualenv needed, unlike `maturin develop`,
+        # which aborts when it cannot find one.
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install ".[dev]"
+          python -m pytest
+
+  linux:
+    runs-on: ubuntu-latest
+    needs: test
+    strategy:
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        env:
+          # `ring` (puxado por `rustls`, via `reqwest`) falha ao cross-compilar
+          # sua assembly pregenerada para aarch64 dentro do container manylinux
+          # do maturin-action: o cross-gcc não define `__ARM_ARCH` por padrão
+          # nesse ambiente, e o preprocessor de `ring` exige essa macro
+          # (erro: "ARM assembler must define __ARM_ARCH"). Forçar a macro via
+          # CFLAGS é o workaround padrão para esse problema conhecido — não
+          # afeta o build x86_64 (a env var é específica do target aarch64).
+          CFLAGS_aarch64_unknown_linux_gnu: -D__ARM_ARCH=8
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+          manylinux: auto
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-linux-${{ matrix.target }}
+          path: dist
+
+  musllinux:
+    runs-on: ubuntu-latest
+    needs: test
+    strategy:
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+          manylinux: musllinux_1_2
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-musllinux-${{ matrix.target }}
+          path: dist
+
+  windows:
+    runs-on: windows-latest
+    needs: test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          architecture: x64
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: x64
+          args: --release --out dist --find-interpreter
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-windows-x64
+          path: dist
+
+  macos:
+    runs-on: macos-latest
+    needs: test
+    strategy:
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-macos-${{ matrix.target }}
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    needs: test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-sdist
+          path: dist
+
+  release:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs: [test, linux, musllinux, windows, macos, sdist]
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: wheels-*
+          path: dist
+          merge-multiple: true
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install maturin
+        run: python -m pip install --upgrade maturin requests
+
+      # A sanity check before anything leaves the runner: publishing an
+      # incomplete set is worse than not publishing, because PyPI never lets a
+      # filename be reused — a half-uploaded version can only be completed,
+      # never replaced.
+      - name: Verify the artifact set is complete
+        run: |
+          set -euo pipefail
+          ls -la dist/
+          test -n "$(find dist -name '*.tar.gz' -print -quit)" \
+            || { echo "::error::sdist ausente — abortando antes de publicar"; exit 1; }
+          wheels=$(find dist -name '*.whl' | wc -l)
+          echo "wheels: $wheels"
+          test "$wheels" -ge 7 \
+            || { echo "::error::só $wheels wheels; esperado >= 7 (2 linux, 2 musl, 1 win, 2 macos)"; exit 1; }
+
+      # PyPI returns a transient 500 often enough to matter, and the upload is
+      # file-by-file: a failure halfway leaves the version published in part.
+      # --skip-existing makes the retry idempotent (already-uploaded files are
+      # skipped by name), so a second attempt finishes the job instead of
+      # failing on the files that did make it.
+      - name: Publish to PyPI (with retry)
+        uses: nick-fields/retry@v3
+        env:
+          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        with:
+          timeout_minutes: 15
+          max_attempts: 4
+          retry_wait_seconds: 45
+          command: maturin upload --non-interactive --skip-existing dist/*
+
+      # Proves the release is actually complete, rather than trusting an exit
+      # code that a partial upload can still produce.
+      - name: Verify every file reached PyPI
+        run: |
+          set -euo pipefail
+          python - <<'PY'
+          import os, sys, glob, time, requests
+          version = os.environ["GITHUB_REF_NAME"].lstrip("v")
+          local = {os.path.basename(p) for p in glob.glob("dist/*")}
+          url = f"https://pypi.org/pypi/rust-py-audit/{version}/json"
+          for attempt in range(6):          # PyPI's JSON API is cached
+              response = requests.get(url, timeout=30)
+              if response.status_code == 200:
+                  remote = {f["filename"] for f in response.json()["urls"]}
+                  missing = local - remote
+                  if not missing:
+                      print(f"OK: {len(remote)} arquivos publicados na {version}")
+                      sys.exit(0)
+              else:
+                  missing = local
+              print(f"tentativa {attempt + 1}: faltam {len(missing)}")
+              time.sleep(20)
+          print("::error::faltaram arquivos no PyPI:")
+          for name in sorted(missing):
+              print(f"  - {name}")
+          sys.exit(1)
+          PY

rust_py_audit-0.3.2/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+Todas as mudanças relevantes deste projeto são registradas aqui.
+
+O formato segue [Keep a Changelog](https://keepachangelog.com/pt-BR/1.1.0/),
+e o versionamento segue [SemVer](https://semver.org/lang/pt-BR/).
+
+## [0.3.2] - 2026-08-11
+
+Release de infraestrutura: nada muda no comportamento da biblioteca.
+
+### Corrigido
+
+- **A publicação não roda mais sem teste.** O `release.yml` era o único
+  workflow do repositório e só tinha jobs de build: `git push --tags`
+  publicava no PyPI sem nenhum `cargo test` nem `pytest`. Agora existe um job
+  `test` e todos os jobs de wheel, o de sdist e o de release declaram
+  `needs: test`. (BACKLOG2 P1-1)
+- **O upload aguenta o 500 do PyPI.** O upload é arquivo por arquivo e sem
+  transação — uma falha no meio deixa a versão publicada pela metade, e o PyPI
+  nunca permite reusar um nome de arquivo. O passo de publicação agora tem
+  retry (4 tentativas), continua usando `--skip-existing` para ser idempotente,
+  confere o conjunto de artefatos **antes** de subir qualquer coisa (aborta se
+  faltar o sdist) e valida contra a API do PyPI **depois**, listando nome por
+  nome o que não chegou. (BACKLOG2 P1-9)
+
+### Adicionado
+
+- Este `CHANGELOG.md`. (BACKLOG2 P1-5)
+
+## [0.3.1] e anteriores
+
+Sem changelog retroativo. O histórico do que entrou em cada versão está no
+`ROADMAP.md`, e o das mudanças no `git log`.
+
+Resumo do que o projeto entrega hoje:
+
+- `AuditLogger` com log append-only em JSONL e cadeia de hashes encadeada.
+- `verify()` para detectar adulteração da cadeia.
+- Integração com o ImmutableLog nos modos remoto e híbrido.
+- Middlewares para FastAPI e Django.
+- Wheels `abi3-py310` — uma wheel por plataforma, válida da 3.10 em diante.
+
+### Limitação conhecida (não corrigida nesta versão)
+
+⚠️ **Múltiplos processos escrevendo no mesmo arquivo quebram a cadeia.** Cada
+processo mantém seu próprio `last_hash` em memória e não há `flock` no append,
+então dois workers gunicorn apontando para o mesmo JSONL produzem uma cadeia
+inconsistente — e `verify()` acusa corrupção. O modo de falha é silencioso até
+alguém rodar `verify()`. Ver **P2-4** no `BACKLOG2.md`.

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/Cargo.lock

@@ -1597,7 +1597,7 @@ dependencies = [
 
 [[package]]
 name = "rust_py_audit"
-version = "0.3.0"
+version = "0.3.2"
 dependencies = [
  "httpmock",
  "pyo3",

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rust_py_audit"
-version = "0.3.0"
+version = "0.3.2"
 edition = "2021"
 description = "Auditoria de eventos com cadeia de hashes (SHA-256) para apps Python, core em Rust via PyO3."
 license = "MIT"

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rust-py-audit
-Version: 0.3.0
+Version: 0.3.2
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -409,6 +409,16 @@ For each queued event:
 
 ---
 
+## Roadmap
+
+`rust-py-audit` is mature (v0.3.0): the SHA-256 hash chain, JSONL storage,
+FastAPI/Django middlewares, and the ImmutableLog `local`/`remote`/`hybrid`
+integration are shipped and stable. Directional ideas under consideration (log
+rotation, incremental verification, more delivery backends, an async client, a
+Flask middleware) are tracked in [ROADMAP.md](./ROADMAP.md).
+
+---
+
 ## Building from Source
 
 Requires Rust and [maturin](https://github.com/PyO3/maturin).

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/README.md

@@ -372,6 +372,16 @@ For each queued event:
 
 ---
 
+## Roadmap
+
+`rust-py-audit` is mature (v0.3.0): the SHA-256 hash chain, JSONL storage,
+FastAPI/Django middlewares, and the ImmutableLog `local`/`remote`/`hybrid`
+integration are shipped and stable. Directional ideas under consideration (log
+rotation, incremental verification, more delivery backends, an async client, a
+Flask middleware) are tracked in [ROADMAP.md](./ROADMAP.md).
+
+---
+
 ## Building from Source
 
 Requires Rust and [maturin](https://github.com/PyO3/maturin).

rust_py_audit-0.3.2/ROADMAP.md

@@ -0,0 +1,68 @@
+# Roadmap — rust-py-audit
+
+Direction for `rust-py-audit`: a tamper-evident audit log for Python with a Rust
+core (PyO3 + maturin). The library is already mature (v0.3.0) — the SHA-256 hash
+chain, JSONL storage, FastAPI/Django middlewares, and the ImmutableLog
+`local`/`remote`/`hybrid` integration are shipped and stable. This document tracks
+what is done and the **directional** ideas under consideration.
+
+> Status legend: ✅ shipped · 🔜 planned (next) · 💡 idea (no version yet) · ⚠️ note
+
+> ⚠️ Beyond "shipped", items below are **inferred directions, not commitments**.
+> Confirm priorities with the maintainer before planning a release around them.
+
+---
+
+## Shipped — up to v0.3.0
+
+- ✅ `AuditLogger` with `log(...)`, `verify()`, `last_hash()`.
+- ✅ **SHA-256 hash chain** — each event embeds the previous event's hash; any
+  edit, deletion, or reordering is detected by `verify()` (re-read from disk,
+  never trusts an in-memory cache).
+- ✅ Append-only **JSONL** storage — one event per line, no database.
+- ✅ Thread-safe — the chain stays linear under concurrency.
+- ✅ Free-form JSON-serializable `metadata`.
+- ✅ FastAPI and Django middlewares (log state-changing requests:
+  POST/PUT/PATCH/DELETE).
+- ✅ **ImmutableLog integration** — `local`/`remote`/`hybrid` modes, automatic
+  retry with idempotency key, pending queue (`audit.pending.jsonl`),
+  `flush_pending()`, and transient (`pending`) vs permanent (`failed`) failure
+  handling that never takes down the application response.
+- ✅ `severity`, `immutable_trail`, and `env` delivery metadata (never enter the
+  hash, so `verify()` stays valid after `flush_pending()`).
+- ✅ ImmutableLog HTTP client runs in the Rust core (PyO3 + reqwest).
+
+---
+
+## Directional ideas (no version assigned — confirm before planning)
+
+- 💡 **Log rotation / segmentation** — roll the JSONL by size or date while
+  preserving chain continuity across segments (carry the last hash forward).
+- 💡 **Incremental verification** — verify only events appended since the last
+  known-good hash, instead of re-reading the whole file every time.
+- 💡 **More delivery backends** — additional sinks alongside ImmutableLog (e.g.
+  S3/object storage, syslog, a generic webhook), reusing the retry/pending logic.
+- 💡 **Async client** — non-blocking delivery path for high-throughput async apps.
+- 💡 **Flask middleware** — parity with the FastAPI/Django adapters.
+- 💡 **Query/read helpers** — iterate or filter recorded events (by actor, action,
+  resource, time range) without hand-parsing the JSONL.
+- 💡 **Benchmarks suite** — hashing + append throughput under concurrency.
+
+---
+
+## Known limitations (by design, for now)
+
+- Local JSONL is single-file and append-only (no built-in rotation yet).
+- `verify()` re-reads the entire file (O(n)); fine for typical logs, see the
+  incremental-verification idea above for very large files.
+- ImmutableLog delivery is synchronous on the `log()` path (bounded by
+  `timeout_ms` + retries); `hybrid` mode never raises, queuing transient failures.
+
+---
+
+## Contributing to the roadmap
+
+Versions and ordering are indicative and may shift. Bump the version in **both**
+`Cargo.toml` and `pyproject.toml` (kept in sync) plus `__version__`, ship tests
+(`cargo test --no-default-features` + `pytest`), then tag `vX.Y.Z` to trigger the
+release workflow (Trusted Publishing / OIDC to PyPI).

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "rust-py-audit"
-version = "0.3.0"
+version = "0.3.2"
 description = "Fast, tamper-evident event auditing (hash chain) for Python apps, with a Rust core."
 readme = "README.md"
 license = "MIT"

{rust_py_audit-0.3.0 → rust_py_audit-0.3.2}/python/rust_py_audit/__init__.py

@@ -8,5 +8,5 @@ que existe um módulo nativo por trás.
 
 from ._rust_py_audit import AuditLogger, hello
 
-__version__ = "0.3.0"
+__version__ = "0.3.2"
 __all__ = ["AuditLogger", "hello"]

rust_py_audit-0.3.0/.github/workflows/release.yml

@@ -1,117 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-  workflow_dispatch: {}
-
-permissions:
-  contents: read
-
-jobs:
-  linux:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        target: [x86_64, aarch64]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: PyO3/maturin-action@v1
-        env:
-          # `ring` (puxado por `rustls`, via `reqwest`) falha ao cross-compilar
-          # sua assembly pregenerada para aarch64 dentro do container manylinux
-          # do maturin-action: o cross-gcc não define `__ARM_ARCH` por padrão
-          # nesse ambiente, e o preprocessor de `ring` exige essa macro
-          # (erro: "ARM assembler must define __ARM_ARCH"). Forçar a macro via
-          # CFLAGS é o workaround padrão para esse problema conhecido — não
-          # afeta o build x86_64 (a env var é específica do target aarch64).
-          CFLAGS_aarch64_unknown_linux_gnu: -D__ARM_ARCH=8
-        with:
-          target: ${{ matrix.target }}
-          args: --release --out dist --find-interpreter
-          manylinux: auto
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wheels-linux-${{ matrix.target }}
-          path: dist
-
-  musllinux:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        target: [x86_64, aarch64]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: PyO3/maturin-action@v1
-        with:
-          target: ${{ matrix.target }}
-          args: --release --out dist --find-interpreter
-          manylinux: musllinux_1_2
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wheels-musllinux-${{ matrix.target }}
-          path: dist
-
-  windows:
-    runs-on: windows-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        with:
-          architecture: x64
-      - uses: PyO3/maturin-action@v1
-        with:
-          target: x64
-          args: --release --out dist --find-interpreter
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wheels-windows-x64
-          path: dist
-
-  macos:
-    runs-on: macos-latest
-    strategy:
-      matrix:
-        target: [x86_64, aarch64]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: PyO3/maturin-action@v1
-        with:
-          target: ${{ matrix.target }}
-          args: --release --out dist --find-interpreter
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wheels-macos-${{ matrix.target }}
-          path: dist
-
-  sdist:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: PyO3/maturin-action@v1
-        with:
-          command: sdist
-          args: --out dist
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wheels-sdist
-          path: dist
-
-  release:
-    name: Publish to PyPI
-    runs-on: ubuntu-latest
-    needs: [linux, musllinux, windows, macos, sdist]
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: wheels-*
-          path: dist
-          merge-multiple: true
-      - name: Publish to PyPI
-        uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-        with:
-          command: upload
-          args: --non-interactive --skip-existing dist/*