souleyez 2.28.0__tar.gz → 2.29.0__tar.gz

{souleyez-2.28.0 → souleyez-2.29.0}/BETA_README.md

@@ -27,7 +27,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.28.0
+## Version: 2.29.0
 
 ### What's Included
 
@@ -265,4 +265,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.28.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.29.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.28.0/souleyez.egg-info → souleyez-2.29.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: souleyez
-Version: 2.28.0
+Version: 2.29.0
 Summary: AI-Powered Penetration Testing Platform with 40+ integrated tools
 Author-email: CyberSoul Security <contact@cybersoulsecurity.com>
 Maintainer-email: CyberSoul Security <contact@cybersoulsecurity.com>
@@ -78,7 +78,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.28.0
+## Version: 2.29.0
 
 ### What's Included
 
@@ -316,4 +316,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.28.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.29.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.28.0 → souleyez-2.29.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "souleyez"
-version = "2.28.0"
+version = "2.29.0"
 description = "AI-Powered Penetration Testing Platform with 40+ integrated tools"
 readme = "BETA_README.md"
 license = {text = "MIT"}

souleyez-2.29.0/souleyez/__init__.py

@@ -0,0 +1 @@
+__version__ = '2.29.0'

{souleyez-2.28.0 → souleyez-2.29.0}/souleyez/docs/README.md

@@ -1,6 +1,6 @@
 # SoulEyez Documentation
 
-**Version:** 2.28.0
+**Version:** 2.29.0
 **Last Updated:** January 9, 2026
 **Organization:** CyberSoul Security
 

{souleyez-2.28.0 → souleyez-2.29.0}/souleyez/main.py

@@ -173,7 +173,7 @@ def _check_privileged_tools():
 
 
 @click.group()
-@click.version_option(version='2.28.0')
+@click.version_option(version='2.29.0')
 def cli():
     """SoulEyez - AI-Powered Pentesting Platform by CyberSoul Security"""
     from souleyez.log_config import init_logging

{souleyez-2.28.0 → souleyez-2.29.0}/souleyez/storage/schema.sql

@@ -6,6 +6,7 @@ CREATE TABLE IF NOT EXISTS engagements (
     owner_id INTEGER,
     estimated_hours FLOAT DEFAULT 0,
     actual_hours FLOAT DEFAULT 0,
+    scope_enforcement TEXT DEFAULT 'off',
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
     updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 );
@@ -21,6 +22,7 @@ CREATE TABLE IF NOT EXISTS hosts (
     mac_address TEXT,
     status TEXT DEFAULT 'up',
     access_level TEXT DEFAULT 'none',
+    scope_status TEXT DEFAULT 'unknown',
     notes TEXT,
     tags TEXT,
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
@@ -540,3 +542,37 @@ CREATE INDEX IF NOT EXISTS idx_wazuh_config_engagement ON wazuh_config(engagemen
 CREATE INDEX IF NOT EXISTS idx_detection_results_job ON detection_results(job_id);
 CREATE INDEX IF NOT EXISTS idx_detection_results_engagement ON detection_results(engagement_id);
 CREATE INDEX IF NOT EXISTS idx_detection_results_status ON detection_results(detection_status);
+
+-- Engagement Scope Validation (from migration 026)
+CREATE TABLE IF NOT EXISTS engagement_scope (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    engagement_id INTEGER NOT NULL,
+    scope_type TEXT NOT NULL,
+    value TEXT NOT NULL,
+    is_excluded BOOLEAN DEFAULT 0,
+    description TEXT,
+    added_by TEXT,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (engagement_id) REFERENCES engagements(id) ON DELETE CASCADE,
+    UNIQUE(engagement_id, scope_type, value)
+);
+
+CREATE TABLE IF NOT EXISTS scope_validation_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    engagement_id INTEGER NOT NULL,
+    job_id INTEGER,
+    target TEXT NOT NULL,
+    validation_result TEXT NOT NULL,
+    action_taken TEXT NOT NULL,
+    matched_scope_id INTEGER,
+    user_id TEXT,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (engagement_id) REFERENCES engagements(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_scope_engagement ON engagement_scope(engagement_id);
+CREATE INDEX IF NOT EXISTS idx_scope_type ON engagement_scope(scope_type);
+CREATE INDEX IF NOT EXISTS idx_scope_log_engagement ON scope_validation_log(engagement_id);
+CREATE INDEX IF NOT EXISTS idx_scope_log_result ON scope_validation_log(validation_result);
+CREATE INDEX IF NOT EXISTS idx_scope_log_timestamp ON scope_validation_log(created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_hosts_scope_status ON hosts(scope_status);

{souleyez-2.28.0 → souleyez-2.29.0/souleyez.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: souleyez
-Version: 2.28.0
+Version: 2.29.0
 Summary: AI-Powered Penetration Testing Platform with 40+ integrated tools
 Author-email: CyberSoul Security <contact@cybersoulsecurity.com>
 Maintainer-email: CyberSoul Security <contact@cybersoulsecurity.com>
@@ -78,7 +78,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.28.0
+## Version: 2.29.0
 
 ### What's Included
 
@@ -316,4 +316,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.28.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.29.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.28.0 → souleyez-2.29.0}/tests/test_config.py

@@ -10,9 +10,18 @@ from pathlib import Path
 
 @pytest.fixture
 def temp_config(tmp_path, monkeypatch):
-    """Use temporary config file."""
+    """Use temporary config file and database."""
     config_file = tmp_path / "config.json"
     monkeypatch.setattr("souleyez.config.CONFIG_PATH", config_file)
+
+    # Also set up temp database to avoid conflicts with production db
+    db_path = tmp_path / "test.db"
+    import souleyez.storage.database as db_module
+    db_module._db = None  # Reset singleton
+
+    # Monkeypatch DB_PATH to use temp path
+    monkeypatch.setattr("souleyez.storage.database.DB_PATH", db_path)
+
     return config_file
 
 

{souleyez-2.28.0 → souleyez-2.29.0}/tests/test_result_handler_sqlmap.py

@@ -10,10 +10,17 @@ from souleyez.engine.result_handler import parse_sqlmap_job
 def test_result_handler_uses_injectable_url():
     """
     REGRESSION TEST: Ensure result_handler reads 'injectable_url' not 'target_url'.
-    
+
     This test prevents the bug where result_handler was reading the wrong key,
     causing auto-chaining to use just the IP instead of the full URL.
     """
+    # First create a test engagement (required for FK constraint)
+    from souleyez.storage.database import get_db
+    db = get_db()
+    db.execute(
+        "INSERT OR REPLACE INTO engagements (id, name, description) VALUES (1, 'test', 'Test engagement')"
+    )
+
     # Create a temporary log file
     log_content = """
 [INFO] testing URL 'http://10.0.0.82/mutillidae/?page=add-to-your-blog.php'
@@ -26,11 +33,11 @@ Parameter: User-Agent (User-Agent)
 [INFO] the back-end DBMS is MySQL
 back-end DBMS: MySQL >= 5.0.12
 """
-    
+
     with tempfile.NamedTemporaryFile(mode='w', delete=False, suffix='.log') as f:
         f.write(log_content)
         log_path = f.name
-    
+
     try:
         # Mock job
         job = {
@@ -39,7 +46,7 @@ back-end DBMS: MySQL >= 5.0.12
             'target': '10.0.0.82',  # Just the IP - this is what gets passed
             'engagement_id': 1
         }
-        
+
         # Parse the job
         result = parse_sqlmap_job(1, log_path, job)
         

{souleyez-2.28.0 → souleyez-2.29.0}/tests/test_storage.py

@@ -9,14 +9,15 @@ import pytest
 def temp_db(tmp_path, monkeypatch):
     """Create temporary database for tests."""
     db_path = tmp_path / "test_storage.db"
-    monkeypatch.setenv('SOULEYEZ_DB_PATH', str(db_path))
 
-    # Reset database singleton
-    from souleyez.storage.database import get_db
+    # Reset database singleton and create with explicit path
+    from souleyez.storage.database import Database
     import souleyez.storage.database as db_module
     db_module._db = None
 
-    db = get_db()
+    # Create database with explicit path (bypasses DB_PATH constant)
+    db = Database(str(db_path))
+    db_module._db = db  # Set as singleton so get_db() returns this instance
 
     # Create a test engagement to satisfy foreign key constraints
     db.execute(

souleyez-2.28.0/souleyez/__init__.py

@@ -1 +0,0 @@
-__version__ = '2.28.0'