refactor: harmonization pass 2 — MailReport, injectable console, grade exit, ruff clean

- Rename FullReport → MailReport; FullReport kept as deprecated alias
- assessor: add logger, keyword-only assess(), --timeout/-T flag
- reporter: _console/console pattern, highlight=False, print_full_report(report, *, console=None)
- print_verdict(report, *, console=None) — extracts actions/grade internally
- Grade D/F → exit 1 in check command
- verdict: add LOW and INFO to VerdictSeverity
- Add constants.py (SMTP_DEFAULT_PORT, DNS_TIMEOUT, SMTP_TIMEOUT, HTTP_TIMEOUT)
- Add pytest-mock to dev deps
- ruff: fix E402 (logger placement), F401 (unused imports)

Author: t0kubetsu

CLAUDE.md

@@ -24,7 +24,7 @@ MTA-STS, TLSRPT, DNSSEC, SMTP diagnostics, and DNS blacklists for a given domain
 mailvalidator/
 ├── cli.py         → Typer CLI entry point; all sub-commands defined here
 ├── assessor.py    → assess() orchestrates the full check pipeline
-├── models.py      → All dataclasses (CheckResult, Status, *Result, FullReport)
+├── models.py      → All dataclasses (CheckResult, Status, *Result, MailReport; FullReport is a deprecated alias)
 ├── dns_utils.py   → Shared DNS helpers
 ├── reporter.py    → Rich rendering for each result type + save_report()
 ├── verdict.py     → Security verdict extraction: severity mapping, action deduplication

mailvalidator/assessor.py

@@ -9,6 +9,7 @@
 
 from __future__ import annotations
 
+import logging
 import socket
 from typing import Callable
 
@@ -22,7 +23,9 @@
 from mailvalidator.checks.smtp import check_smtp
 from mailvalidator.checks.spf import check_spf
 from mailvalidator.checks.tlsrpt import check_tlsrpt
-from mailvalidator.models import FullReport, MXRecord, SMTPDiagResult
+from mailvalidator.models import MailReport, MXRecord, SMTPDiagResult
+
+logger = logging.getLogger("mailvalidator")
 
 
 def _resolve_mx_ips(records: list[MXRecord]) -> list[str]:
@@ -48,8 +51,9 @@ def assess(
     run_smtp: bool = True,
     run_dnssec: bool = True,
     progress_cb: Callable[[str], None] | None = None,
-) -> FullReport:
-    """Run all mail server checks for *domain* and return a :class:`~mailvalidator.models.FullReport`.
+    timeout: float = 5.0,
+) -> MailReport:
+    """Run all mail server checks for *domain* and return a :class:`~mailvalidator.models.MailReport`.
 
     :param domain: The target domain name to assess (e.g. ``"example.com"``).
     :param smtp_port: TCP port used for SMTP diagnostics.  Defaults to ``25``.
@@ -63,16 +67,17 @@ def assess(
     :param progress_cb: Optional callable invoked with a short status string
         before each check group.  Useful for driving a progress spinner in
         the CLI.
-    :returns: Populated :class:`~mailvalidator.models.FullReport`; individual
+    :param timeout: DNS/network timeout in seconds.  Defaults to ``5.0``.
+    :returns: Populated :class:`~mailvalidator.models.MailReport`; individual
         fields are ``None`` when the corresponding check was skipped.
-    :rtype: ~mailvalidator.models.FullReport
+    :rtype: ~mailvalidator.models.MailReport
     """
 
     def _cb(msg: str) -> None:
         if progress_cb:
             progress_cb(msg)
 
-    report = FullReport(domain=domain)
+    report = MailReport(domain=domain)
 
     _cb("Checking MX records…")
     report.mx = check_mx(domain)

mailvalidator/cli.py

@@ -33,6 +33,7 @@
 
 from mailvalidator import __version__
 from mailvalidator.assessor import assess
+from mailvalidator.verdict import calculate_grade, extract_verdict_actions
 from mailvalidator.checks.bimi import check_bimi
 from mailvalidator.checks.blacklist import check_blacklist
 from mailvalidator.checks.dkim import check_dkim
@@ -218,6 +219,10 @@ def cmd_check(
         bool,
         typer.Option("--json", help="Output results as JSON."),
     ] = False,
+    timeout: Annotated[
+        float,
+        typer.Option("--timeout", "-T", help="DNS/network timeout in seconds."),
+    ] = 5.0,
 ) -> None:
     """Run all mail server checks for DOMAIN and print a full report."""
     with Progress(
@@ -237,6 +242,7 @@ def _progress_cb(msg: str) -> None:
             run_blacklist=not no_blacklist,
             run_dnssec=not no_dnssec,
             progress_cb=_progress_cb,
+            timeout=timeout,
         )
 
     if json_output:
@@ -245,6 +251,11 @@ def _progress_cb(msg: str) -> None:
 
     print_full_report(report)
 
+    actions = extract_verdict_actions(report)
+    grade = calculate_grade(actions)
+    if grade.letter in ("D", "F"):
+        raise typer.Exit(code=1)
+
     if output:
         try:
             save_report(output)

mailvalidator/constants.py

@@ -0,0 +1,6 @@
+"""mailvalidator runtime constants."""
+
+SMTP_DEFAULT_PORT: int = 25
+DNS_TIMEOUT: float = 5.0
+SMTP_TIMEOUT: float = 10.0
+HTTP_TIMEOUT: float = 10.0

mailvalidator/models.py

@@ -310,7 +310,7 @@ class DNSSECResult:
 
 
 @dataclass
-class FullReport:
+class MailReport:
     """Aggregated result of all checks run by :func:`mailvalidator.assessor.assess`.
 
     Individual fields are ``None`` or empty list when the corresponding check
@@ -342,3 +342,6 @@ class FullReport:
     blacklist: BlacklistResult | None = None
     dnssec_domain: DNSSECResult | None = None
     dnssec_mx: DNSSECResult | None = None
+
+
+FullReport = MailReport  # deprecated alias – use MailReport