dravix-agent 0.1.0

package/dist/index/pysa.d.ts

@@ -0,0 +1,91 @@
+import { Finding } from "../findings.js";
+export interface PysaBuildReport {
+    ok: boolean;
+    cacheDir: string;
+    findingsPath: string;
+    findingsCount: number;
+    durationMs: number;
+    reason?: string;
+}
+export interface PysaInfo {
+    built_at: number;
+    config_version: string;
+    pyre_version: string;
+    wsl_distro?: string;
+    n_findings: number;
+    files_analyzed: number;
+}
+interface WslInfo {
+    wslExe: string;
+    distro: string;
+}
+/** Locate wsl.exe on Windows. Returns null on non-Windows OR when WSL
+ * is not installed. Does NOT validate that a distro is present — that
+ * check belongs to ``probePyreInWsl``. */
+export declare function findWsl(): WslInfo | null;
+interface PyreProbe {
+    ok: boolean;
+    /** Exact command path to pyre we'll invoke (POSIX path inside WSL OR
+     * an absolute path on Linux/macOS). */
+    pyreBin: string;
+    version: string;
+    /** True iff we go through wsl.exe. False for native Linux/macOS. */
+    usesWsl: boolean;
+}
+export declare function probePyre(): Promise<PyreProbe | null>;
+/** Test-only probe-cache reset. */
+export declare function _resetPyreProbeCacheForTests(): void;
+export declare function pysaFindingsPath(projectRoot: string): string;
+export declare function pysaInfoPath(projectRoot: string): string;
+/** Read cached findings. Used by ``PysaEngine.run``. */
+export declare function readPysaFindings(projectRoot: string): Finding[];
+/** Convert a Windows path (``C:\Users\foo``) to a WSL POSIX path
+ * (``/mnt/c/Users/foo``). Idempotent on already-POSIX paths. */
+export declare function winToWslPath(p: string): string;
+/** Minimal Pyre configuration. We write it to a SCRATCH directory inside
+ * the cache (never into the user's repo) and point ``source_directories``
+ * at the actual project.
+ *
+ * ``excludes`` is a list of regex patterns Pyre uses to skip files. We
+ * exclude the obvious noise (node_modules/, .venv, __pycache__, dist/,
+ * build/, .git/, .aegis/) so Pysa focuses on the user's source. Without
+ * this, Pyre defaults to walking everything and the scan either takes
+ * 10x longer OR produces only findings from third-party packages. */
+declare function bootstrapPyreConfig(projectRootWsl: string): string;
+/** Minimal Pysa taint config. Defines a small but useful set of sources
+ * (Flask/Django/FastAPI request inputs, env vars, file reads) and sinks
+ * (SQL execute, OS command, eval/exec, file write, HTTP outbound). Real
+ * production configs are much richer — this is the seed that catches the
+ * most common CWE-78/89/79/918 patterns Pysa is famous for. */
+declare function bootstrapTaintConfig(): string;
+/** Minimal stub models — Pysa needs explicit source/sink annotations on
+ * common library calls. This is a tiny seed (Flask/FastAPI/sqlite3/os) —
+ * real configs ship hundreds. Enough to make the rules above fire on
+ * canonical patterns. */
+declare function bootstrapTaintModels(): string;
+declare function parsePysaOutput(rawJson: string, projectRoot: string): Finding[];
+declare function toRelPosix(filePath: string, projectRoot: string): string;
+/** Run Pysa on the project. Builds the bootstrap config in a SCRATCH dir
+ * (NEVER touches the user's repo), invokes ``pyre analyze``, parses the
+ * resulting taint-output.json, writes findings.jsonl into the per-project
+ * cache. Returns a structured report. Never throws — failures produce
+ * ``{ok:false, reason}``. */
+export declare function buildPysaTaint(projectRoot: string, opts?: {
+    force?: boolean;
+    timeoutMs?: number;
+}): Promise<PysaBuildReport>;
+export declare const _testing: {
+    winToWslPath: typeof winToWslPath;
+    parsePysaOutput: typeof parsePysaOutput;
+    toRelPosix: typeof toRelPosix;
+    bootstrapPyreConfig: typeof bootstrapPyreConfig;
+    bootstrapTaintConfig: typeof bootstrapTaintConfig;
+    bootstrapTaintModels: typeof bootstrapTaintModels;
+    CODE_TO_CWE: Record<number, {
+        cwe: string;
+        title: string;
+    }>;
+    PYSA_TAINT_CONFIG_VERSION: string;
+};
+export {};
+//# sourceMappingURL=pysa.d.ts.map

package/dist/index/pysa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pysa.d.ts","sourceRoot":"","sources":["../../src/index/pysa.ts"],"names":[],"mappings":"AA4CA,OAAO,EAAE,OAAO,EAAgC,MAAM,gBAAgB,CAAC;AAevE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AASD,UAAU,OAAO;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;0CAE0C;AAC1C,wBAAgB,OAAO,IAAI,OAAO,GAAG,IAAI,CAcxC;AAED,UAAU,SAAS;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ;2CACuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;CAClB;AAQD,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAiE3D;AAED,mCAAmC;AACnC,wBAAgB,4BAA4B,IAAI,IAAI,CAGnD;AAaD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,EAAE,CAe/D;AAID;gEACgE;AAChE,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ9C;AAID;;;;;;;;qEAQqE;AACrE,iBAAS,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAsB3D;AAED;;;;+DAI+D;AAC/D,iBAAS,oBAAoB,IAAI,MAAM,CAkDtC;AAED;;;yBAGyB;AACzB,iBAAS,oBAAoB,IAAI,MAAM,CA2CtC;AAiED,iBAAS,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,EAAE,CA4DxE;AAED,iBAAS,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CASjE;AAID;;;;6BAI6B;AAC7B,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAAC,eAAe,CAAC,CA4K1B;AAGD,eAAO,MAAM,QAAQ;;;;;;;;aAlSoB,MAAM;eAAS,MAAM;;;CA2S7D,CAAC"}