Repository navigation
π Siber Akademi T-Zero v4.0.0 β Enterprise Zero-Hallucination AST Engine & 21 MCP Tools
·
10 commits
to main
since this release
β‘ Siber Akademi T-Zero Context Architect v4.0.0 (Enterprise Release)
π Highlights & Major Innovations
π Enterprise Zero-Leak & Core Security
- PBKDF2-HMAC-SHA256 Authenticated Backup: Upgraded
KeyringSecretsBackupManagerto NIST-compliant PBKDF2-HMAC-SHA256 (600,000 iterations, 16-byte random salt,b"TZB2"magic header, HMAC authentication tag) with transparent legacy XOR fallback. - AST Pre-Parse Secret Sanitization: Reordered secret masking in
app.pyso tokens and API keys are sanitized before AST parsing, preventing sensitive credentials from ever touching AST symbol memory. - Hardened Web Dashboard: Eliminated path traversal in
DashboardRequestHandlerby switching fromSimpleHTTPRequestHandlertoBaseHTTPRequestHandlerwith strict CORS, no-cache headers, and automatic file modification time (mtime) cache invalidation. - Precise Relative Import Boundaries:
ArchitectureRuleEnginenow correctly resolves relative imports (node.level > 0) and dotted submodules to enforce strict layer isolation.
π§ Zero-Hallucination AST Engine
- 100% Schema Preservation: Preserves field declarations, type annotations, and default values in Pydantic (
BaseModel),@dataclass,TypedDict,Enum, and SQLAlchemy ORM models during ultra context compression. - REST & API Endpoint Extractor: Automatically synthesizes FastAPI and Flask routes (
@app.get,@router.post, etc.) into formal Tier T-3 contract blocks. - Polyglot Brace-Balanced Parser: Deep multi-line brace balancing for Go, Rust, Java, C#, and C++ prevents truncated struct and interface signatures.
- PageRank + Git Recency Token Budgeting: Token budgets prioritize architectural core modules and recently modified files instead of arbitrary alphabetical slices.
- Fuzzy Did-You-Mean Guard:
ZeroHallucinationGuardvalidates proposed code against workspace AST contracts, offeringdifflib-powered suggestions for mismatched imports and parameters.
π€ 21 Autonomous MCP Tools
- Full suite of 21 tools synchronized across
tzero_mcp.py,addmcp.py,action.yml, and documentation. - Added
find_dead_code(DeadCodeFinder) to discover unreferenced functions and classes. - Added
detect_circular_dependenciesto catch import loops early. - High-performance
_ast_cacheand fast substring filtering for instant diff and impact analysis.
π CI/CD & Developer Experience (DX)
- GitHub PR Report Mode:
--pr-report <ref>generates rich architectural impact and risk tables, exporting directly to$GITHUB_STEP_SUMMARY. - SARIF 2.1.0 & JSON Export:
--audit <dir> --format sarifintegrates seamlessly into GitHub Advanced Security / Code Scanning. - Instant Quickstart:
uvx tzero-mcpruns the MCP server with zero manual installation. - 100% Test Coverage: 131 tests passing across Python 3.9 through 3.14 without regressions.
Full Changelog: v3.0.17...v4.0.0