refactor: Modernize SDK architecture, harden security, and enable O(1) routing

[skupriienko]

Links:

Jira

Actions:

• Core SDK & Routing Architecture:

  • O(1) Registry Routing: Implemented an immutable ROUTE_MAP registry, eliminating dynamic __getattr__ overhead and enabling efficient, static endpoint resolution.
  • TemplateContentBuilder: Added a fluent builder for Content API payloads with built-in schema validation (Fail-Fast pattern).
  • Pagination Stability: Fixed infinite loop edge-cases in .stream() generators by ensuring empty data blocks trigger termination.

• Security & Developer Experience (DX):

  • Path Traversal Mitigation (CWE-22): Hardened Endpoint._build_url with centralized sanitize_segment to neutralize directory traversal attempts in dynamic URI parameters.
  • Context Manager Enforcement: Strong promotion of with Client(...) as client: to mitigate CWE-772 (Missing Resource Release).
  • SSRF Guardrails: Implemented strict domain anchoring in Config.validate_config_url.
  • Enterprise Fuzzing: Integrated Atheris (libFuzzer) to expose edge-case parsing exceptions.

• Unit & Integration Tests:

  • Registry-First Testing: Added a comprehensive, parameterized test suite for 40+ endpoints ensuring full parity with legacy routing logic.
  • Performance Benchmarks: Integrated pytest-benchmark and cold-boot profiling to ensure SDK startup latency remains within strictly defined thresholds (<0.1s).
  • CI/CD Hardening: Segregated testing topologies (Unit/Integration/Regression) to ensure clean CI execution.

• CI/CD, Linting & Repository Management:

  • Defense in Depth: Integrated GitHub CodeQL, Google OSV-Scanner, and Semgrep (OWASP Top 10 ruleset) for automated security auditing.
  • Linting Resolution: Resolved all D10x, DOC201, and PLC0415 errors, enforcing strict Google-style documentation and import placement.
  • Supply Chain: Decoupled pip-audit into a standalone strict job.

• Documentation & Samples:

  • README Overhaul: Modernized all code snippets to enforce safe memory/socket management via Context Managers.
  • Release Prep: Synchronized CHANGELOG.md with 1.7.0 updates, updated PERFORMANCE.md with new benchmarks, and bumped version to 1.7.0.