svarog-forge 2.2.0__tar.gz → 2.2.2__tar.gz

{svarog_forge-2.2.0 → svarog_forge-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: svarog-forge
-Version: 2.2.0
+Version: 2.2.2
 Summary: Forge. The smithy itself — AI-powered project forge from idea to deployment.
 Project-URL: Homepage, https://github.com/SvarogForge/forge
 Project-URL: Repository, https://github.com/SvarogForge/forge

svarog_forge-2.2.2/forge/__init__.py

@@ -0,0 +1,6 @@
+"""⚒️ Forge — AI smithy for Hermes Agent."""
+
+from forge.cli import main, status, log, run_security_audit, display_audit_results
+
+__version__ = "2.2.2"
+__all__ = ["main", "status", "log", "run_security_audit", "display_audit_results"]

svarog_forge-2.2.0/forge.py → svarog_forge-2.2.2/forge/cli.py

@@ -1,224 +1,223 @@
-#!/usr/bin/env python3
-"""
-⚒️ Forge — AI smithy orchestrator.
-
-Part of SvarogForge (github.com/SvarogForge/forge).
-For Hermes Agent (hermes-agent.nousresearch.com).
-
-Usage:
-    python forge.py --plan "Telegram bot for tracking GitHub stars"
-    python forge.py --plan "..." --scout-only
-    python forge.py --resume crucible
-    python forge.py --status
-    python forge.py --audit              # Security audit on current directory
-    python forge.py --audit --plan "..."  # Full cycle with security audit
-"""
-
-import argparse
-import json
-import subprocess
-import sys
-from datetime import datetime
-
-
-VERSION = "2.2.0"
-
-
-def log(phase: str, message: str, level: str = "INFO"):
-    """Structured logging for forge pipeline."""
-    ts = datetime.now().strftime("%H:%M:%S")
-    print(f"[{ts}] [{level}] [{phase}] {message}")
-
-
-def status():
-    """Show current forge pipeline status."""
-    print(f"⚒️ Forge v{VERSION}")
-    print("   Pipeline: ready")
-    print("   Phases: scout → gate → assemble → 🛡️audit → crucible → 🛡️audit → deliver → 🛡️audit")
-    print("   Use: python forge.py --plan 'your idea'")
-    print("   Security: python forge.py --audit")
-
-
-def run_security_audit() -> dict:
-    """Run full security audit: files + commit messages."""
-    # File security scan
-    try:
-        result = subprocess.run(
-            [sys.executable, "forge-verify.py", "--security", "--json"],
-            capture_output=True, text=True, timeout=60
-        )
-        if result.returncode == 0:
-            scan_results = json.loads(result.stdout)
-        else:
-            try:
-                scan_results = json.loads(result.stdout)
-            except json.JSONDecodeError:
-                scan_results = {
-                    "findings": [],
-                    "error": f"Security audit failed: {result.stderr[:200]}",
-                    "total_findings": 0,
-                }
-    except FileNotFoundError:
-        scan_results = {"findings": [{"risk": "🔴", "label": "🚫 forge-verify.py not found", "file": "N/A", "line": 0, "match": "Missing forge-verify.py"}], "total_findings": 1}
-    except subprocess.TimeoutExpired:
-        scan_results = {"findings": [{"risk": "🟡", "label": "⏱️ Security audit timed out", "file": "N/A", "line": 0, "match": "Timeout >60s"}], "total_findings": 1}
-
-    # Commit message scan
-    try:
-        commit_result = subprocess.run(
-            [sys.executable, "forge-verify.py", "--commits", "--json"],
-            input="\n".join(_get_recent_commits()),
-            capture_output=True, text=True, timeout=30
-        )
-        if commit_result.returncode == 0:
-            commit_data = json.loads(commit_result.stdout)
-        else:
-            try:
-                commit_data = json.loads(commit_result.stdout)
-            except json.JSONDecodeError:
-                commit_data = {"findings": [], "total_messages": 0, "total_findings": 0}
-    except Exception:
-        commit_data = {"findings": [], "total_messages": 0, "total_findings": 0}
-
-    # Merge findings
-    all_findings = scan_results.get("findings", [])
-    for cf in commit_data.get("findings", []):
-        cf["file"] = "commit_message"
-        cf["line"] = 0
-        all_findings.append(cf)
-
-    scan_results["findings"] = all_findings
-    scan_results["total_findings"] = len(all_findings)
-    scan_results["commit_messages_scanned"] = commit_data.get("total_messages", 0)
-    return scan_results
-
-
-def _get_recent_commits(count: int = 10) -> list[str]:
-    """Get recent commit subjects for scanning."""
-    try:
-        result = subprocess.run(
-            ["git", "log", f"--max-count={count}", "--format=%s"],
-            capture_output=True, text=True, timeout=10
-        )
-        return result.stdout.strip().splitlines()
-    except Exception:
-        return []
-
-
-def display_audit_results(results: dict):
-    """Display security audit results."""
-    findings = results.get("findings", [])
-    commit_count = results.get("commit_messages_scanned", 0)
-    
-    if not findings:
-        msg = f"  🛡️ Security Audit: ✅ PASSED — clean"
-        if commit_count:
-            msg += f" (scanned {commit_count} commits)"
-        print(f"\n{msg}")
-        return True
-
-    red = [f for f in findings if f.get("risk") == "🔴"]
-    yellow = [f for f in findings if f.get("risk") == "🟡"]
-
-    if red:
-        print(f"\n  🛡️ Security Audit: ❌ FAILED — {len(red)} blocking issue(s)")
-        for f in red:
-            label = "commit" if f.get("file") == "commit_message" else f"{f['file']}:{f['line']}"
-            print(f"    🔴 {label} — {f['match']}")
-        return False
-    elif yellow:
-        print(f"\n  🛡️ Security Audit: ⚠️ WARNINGS — {len(yellow)} medium issue(s)")
-        for f in yellow:
-            label = "commit" if f.get("file") == "commit_message" else f"{f['file']}:{f['line']}"
-            print(f"    🟡 {label} — {f['match']}")
-            if f.get("commit_msg"):
-                print(f"         ↳ {f['commit_msg']}")
-        if commit_count:
-            print(f"  (scanned {commit_count} commits)")
-        return True
-    else:
-        msg = f"  🛡️ Security Audit: ✅ PASSED — clean"
-        if commit_count:
-            msg += f" (scanned {commit_count} commits)"
-        print(f"\n{msg}")
-        return True
-
-
-def main():
-    parser = argparse.ArgumentParser(
-        description="⚒️ Forge — AI smithy orchestrator",
-        formatter_class=argparse.RawDescriptionHelpFormatter,
-        epilog="""
-Examples:
-  python forge.py --plan "Telegram bot for tracking GitHub stars"
-  python forge.py --plan "..." --scout-only
-  python forge.py --resume crucible
-  python forge.py --status
-  python forge.py --audit
-  python forge.py --audit --json
-        """,
-    )
-    parser.add_argument("--plan", type=str, help="Project idea to forge")
-    parser.add_argument("--scout-only", action="store_true", help="Only run market research")
-    parser.add_argument("--resume", type=str, help="Resume from phase: gate, assemble, crucible, deliver")
-    parser.add_argument("--status", action="store_true", help="Show pipeline status")
-    parser.add_argument("--version", action="store_true", help="Show version")
-    parser.add_argument("--audit", action="store_true", help="Run security audit on current directory")
-    parser.add_argument("--json", action="store_true", help="JSON output (with --audit)")
-
-    args = parser.parse_args()
-
-    if args.version:
-        print(f"Forge v{VERSION}")
-        sys.exit(0)
-
-    # Security audit mode
-    if args.audit and not args.plan and not args.resume:
-        log("AUDIT", "Running security audit...")
-        results = run_security_audit()
-        if args.json:
-            print(json.dumps(results, indent=2, ensure_ascii=False))
-        else:
-            passed = display_audit_results(results)
-        sys.exit(0 if passed else 1)
-
-    if args.status or not any([args.plan, args.resume, args.audit, args.version]):
-        status()
-        sys.exit(0)
-
-    idea = args.plan or "Unknown"
-
-    log("START", f"⚒️ Forge starting for: {idea}")
-
-    if args.scout_only:
-        log("SCOUT", f"Market research for: {idea}")
-        print(json.dumps({
-            "phase": "scout",
-            "idea": idea,
-            "message": "Run delegate_task for 3 parallel scouts",
-            "next": "review reports → gate"
-        }, indent=2))
-    elif args.resume:
-        log("RESUME", f"Resuming from phase: {args.resume}")
-    else:
-        log("SCOUT", "Phase 1: Dispatching Talaria scouts...")
-        pipeline = {
-            "scout": "3 parallel scouts (competitors, demand, architecture)",
-            "gate": "User approval required",
-            "assemble": "5 sub-agents + hands-on fixes",
-            "security_audit_1": "🛡️ After assembly — secrets, personal data, NSFW, Discord",
-            "crucible": "Verification checklist + pre-release security audit",
-            "security_audit_2": "🛡️ Before release — repo contents, CVE, README-reality",
-            "deliver": "Release + documentation",
-            "security_audit_3": "🛡️ After release — release notes, PyPI, CI logs",
-        }
-        print(json.dumps({
-            "pipeline": pipeline,
-            "idea": idea,
-            "version": VERSION,
-            "next_step": "Run 'python forge.py --audit' for security scan"
-        }, indent=2, ensure_ascii=False))
-
-
-if __name__ == "__main__":
-    main()
+"""CLI entry point for Forge."""
+import argparse
+import json
+import subprocess
+import sys
+from datetime import datetime
+
+
+VERSION = "2.2.2"
+
+
+def log(phase: str, message: str, level: str = "INFO"):
+    """Structured logging for forge pipeline."""
+    ts = datetime.now().strftime("%H:%M:%S")
+    print(f"[{ts}] [{level}] [{phase}] {message}")
+
+
+def status():
+    """Show current forge pipeline status."""
+    print(f"⚒️ Forge v{VERSION}")
+    print("   Pipeline: ready")
+    print("   Phases: scout → gate → assemble → 🛡️audit → crucible → 🛡️audit → deliver → 🛡️audit")
+    print("   Use: python forge.py --plan 'your idea'")
+    print("   Security: python forge.py --audit")
+
+
+def run_security_audit() -> dict:
+    """Run full security audit: files + commit messages."""
+    # Try forge-verify.py next to package, or on PATH
+    verify_script = find_verify_script()
+    
+    if verify_script:
+        try:
+            result = subprocess.run(
+                [sys.executable, verify_script, "--security", "--json"],
+                capture_output=True, text=True, timeout=60
+            )
+            if result.returncode == 0:
+                scan_results = json.loads(result.stdout)
+            else:
+                try:
+                    scan_results = json.loads(result.stdout)
+                except json.JSONDecodeError:
+                    scan_results = {
+                        "findings": [],
+                        "error": f"Security audit failed: {result.stderr[:200]}",
+                        "total_findings": 0,
+                    }
+        except subprocess.TimeoutExpired:
+            scan_results = {"findings": [{"risk": "🟡", "label": "⏱️ Security audit timed out", "file": "N/A", "line": 0, "match": "Timeout >60s"}], "total_findings": 1}
+    else:
+        scan_results = {"findings": [], "total_findings": 0}
+    
+    # Commit message scan
+    try:
+        result = subprocess.run(
+            ["git", "log", "--max-count=10", "--format=%s"],
+            capture_output=True, text=True, timeout=10
+        )
+        commits = result.stdout.strip().splitlines()
+    except Exception:
+        commits = []
+
+    if verify_script:
+        try:
+            commit_result = subprocess.run(
+                [sys.executable, verify_script, "--commits", "--json"],
+                input="\n".join(commits),
+                capture_output=True, text=True, timeout=30
+            )
+            if commit_result.returncode == 0:
+                commit_data = json.loads(commit_result.stdout)
+            else:
+                try:
+                    commit_data = json.loads(commit_result.stdout)
+                except json.JSONDecodeError:
+                    commit_data = {"findings": [], "total_messages": 0, "total_findings": 0}
+        except Exception:
+            commit_data = {"findings": [], "total_messages": 0, "total_findings": 0}
+    else:
+        commit_data = {"findings": [], "total_messages": 0, "total_findings": 0}
+
+    all_findings = scan_results.get("findings", [])
+    for cf in commit_data.get("findings", []):
+        cf["file"] = "commit_message"
+        cf["line"] = 0
+        all_findings.append(cf)
+
+    scan_results["findings"] = all_findings
+    scan_results["total_findings"] = len(all_findings)
+    scan_results["commit_messages_scanned"] = commit_data.get("total_messages", 0)
+    return scan_results
+
+
+def find_verify_script():
+    """Locate forge-verify.py."""
+    # Check next to the installed package
+    import os
+    pkg_dir = os.path.dirname(__file__)
+    for candidate in [
+        os.path.join(os.path.dirname(pkg_dir), "forge-verify.py"),
+        os.path.join(os.getcwd(), "forge-verify.py"),
+    ]:
+        if os.path.exists(candidate):
+            return candidate
+    return None
+
+
+def display_audit_results(results: dict):
+    """Display security audit results."""
+    findings = results.get("findings", [])
+    commit_count = results.get("commit_messages_scanned", 0)
+
+    if not findings:
+        msg = f"  🛡️ Security Audit: ✅ PASSED — clean"
+        if commit_count:
+            msg += f" (scanned {commit_count} commits)"
+        print(f"\n{msg}")
+        return True
+
+    red = [f for f in findings if f.get("risk") == "🔴"]
+    yellow = [f for f in findings if f.get("risk") == "🟡"]
+
+    if red:
+        print(f"\n  🛡️ Security Audit: ❌ FAILED — {len(red)} blocking issue(s)")
+        for f in red:
+            label = "commit" if f.get("file") == "commit_message" else f"{f['file']}:{f['line']}"
+            print(f"    🔴 {label} — {f['match']}")
+        return False
+    elif yellow:
+        print(f"\n  🛡️ Security Audit: ⚠️ WARNINGS — {len(yellow)} medium issue(s)")
+        for f in yellow:
+            label = "commit" if f.get("file") == "commit_message" else f"{f['file']}:{f['line']}"
+            print(f"    🟡 {label} — {f['match']}")
+            if f.get("commit_msg"):
+                print(f"         ↳ {f['commit_msg']}")
+        if commit_count:
+            print(f"  (scanned {commit_count} commits)")
+        return True
+    else:
+        msg = f"  🛡️ Security Audit: ✅ PASSED — clean"
+        if commit_count:
+            msg += f" (scanned {commit_count} commits)"
+        print(f"\n{msg}")
+        return True
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="⚒️ Forge — AI smithy orchestrator",
+        formatter_class=argparse.RawDescriptionHelpFormatter,
+        epilog="""Examples:
+  forge --plan "Telegram bot for tracking GitHub stars"
+  forge --plan "..." --scout-only
+  forge --resume crucible
+  forge --status
+  forge --version
+  forge --audit
+  forge --audit --json
+        """,
+    )
+    parser.add_argument("--plan", type=str, help="Project idea to forge")
+    parser.add_argument("--scout-only", action="store_true", help="Only run market research")
+    parser.add_argument("--resume", type=str, help="Resume from phase: gate, assemble, crucible, deliver")
+    parser.add_argument("--status", action="store_true", help="Show pipeline status")
+    parser.add_argument("--version", action="store_true", help="Show version")
+    parser.add_argument("--audit", action="store_true", help="Run security audit on current directory")
+    parser.add_argument("--json", action="store_true", help="JSON output (with --audit)")
+
+    args = parser.parse_args()
+
+    if args.version:
+        print(f"Forge v{VERSION}")
+        sys.exit(0)
+
+    if args.audit and not args.plan and not args.resume:
+        log("AUDIT", "Running security audit...")
+        results = run_security_audit()
+        if args.json:
+            print(json.dumps(results, indent=2, ensure_ascii=False))
+        else:
+            passed = display_audit_results(results)
+        sys.exit(0 if passed else 1)
+
+    if args.status or not any([args.plan, args.resume, args.audit, args.version]):
+        status()
+        sys.exit(0)
+
+    idea = args.plan or "Unknown"
+    log("START", f"⚒️ Forge starting for: {idea}")
+
+    if args.scout_only:
+        log("SCOUT", f"Market research for: {idea}")
+        print(json.dumps({
+            "phase": "scout",
+            "idea": idea,
+            "message": "Run delegate_task for 3 parallel scouts",
+            "next": "review reports → gate"
+        }, indent=2))
+    elif args.resume:
+        log("RESUME", f"Resuming from phase: {args.resume}")
+    else:
+        log("SCOUT", "Phase 1: Dispatching Talaria scouts...")
+        pipeline = {
+            "scout": "3 parallel scouts (competitors, demand, architecture)",
+            "gate": "User approval required",
+            "assemble": "5 sub-agents + hands-on fixes",
+            "security_audit_1": "🛡️ After assembly — secrets, personal data, NSFW, Discord",
+            "crucible": "Verification checklist + pre-release security audit",
+            "security_audit_2": "🛡️ Before release — repo contents, CVE, README-reality",
+            "deliver": "Release + documentation",
+            "security_audit_3": "🛡️ After release — release notes, PyPI, CI logs",
+        }
+        print(json.dumps({
+            "pipeline": pipeline,
+            "idea": idea,
+            "version": VERSION,
+            "next_step": "Run 'forge --audit' for security scan"
+        }, indent=2, ensure_ascii=False))
+
+
+if __name__ == "__main__":
+    main()

svarog_forge-2.2.2/forge.py

@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+"""
+⚒️ Forge — AI smithy orchestrator.
+
+Part of SvarogForge (github.com/SvarogForge/forge).
+For Hermes Agent (hermes-agent.nousresearch.com).
+
+Usage:
+    python forge.py --plan "Telegram bot for tracking GitHub stars"
+    python forge.py --plan "..." --scout-only
+    python forge.py --resume crucible
+    python forge.py --status
+    python forge.py --audit              # Security audit on current directory
+    python forge.py --audit --plan "..."  # Full cycle with security audit
+"""
+
+from forge.cli import main
+
+if __name__ == "__main__":
+    main()

{svarog_forge-2.2.0 → svarog_forge-2.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "svarog-forge"
-version = "2.2.0"
+version = "2.2.2"
 description = "Forge. The smithy itself — AI-powered project forge from idea to deployment."
 readme = "README.md"
 license = {text = "MIT"}

svarog_forge-2.2.0/forge/__init__.py

@@ -1,3 +0,0 @@
-"""⚒️ Forge — AI smithy for Hermes Agent."""
-
-__version__ = "2.2.0"

svarog_forge-2.2.0/forge/cli.py

@@ -1,12 +0,0 @@
-"""CLI entry point for Forge — imported via pip-installed svarog-forge package."""
-import sys
-import os
-
-# Allow importing forge.py from the package root
-sys.path.insert(0, os.path.dirname(os.path.dirname(__file__)))
-
-from forge import main  # noqa: E402
-
-
-if __name__ == "__main__":
-    main()