openpitstop 1.0.0

package/dist/memory/store.js

@@ -0,0 +1,131 @@
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import crypto from "node:crypto";
+import { safeExec } from "../analyzers/util.js";
+import { buildEdges } from "../analyzers/dependencyGraph.js";
+const GLOBAL_DIR = path.join(os.homedir(), ".pitstop", "memory");
+const LOCAL_MIRROR = path.join(".pitstop", "memory.jsonl");
+/**
+ * Identify "this repo" by hashing the git remote URL (fallback: absolute path).
+ * The hash determines the memory file name so memory is stable across checkouts.
+ */
+export function identifyRepo(repo) {
+    const r = safeExec("git", ["config", "--get", "remote.origin.url"], repo, 10000);
+    const remote = r.stdout.trim();
+    const seed = remote || path.resolve(repo);
+    return crypto.createHash("sha256").update(seed).digest("hex").slice(0, 16);
+}
+export function globalMemoryPath(repo) {
+    return path.join(GLOBAL_DIR, `${identifyRepo(repo)}.jsonl`);
+}
+export function localMemoryPath(repo) {
+    return path.join(repo, LOCAL_MIRROR);
+}
+export function loadEntries(repo) {
+    const paths = [globalMemoryPath(repo), localMemoryPath(repo)];
+    const entries = [];
+    const seen = new Set();
+    for (const p of paths) {
+        if (!fs.existsSync(p))
+            continue;
+        for (const line of fs.readFileSync(p, "utf8").split(/\r?\n/)) {
+            const t = line.trim();
+            if (!t)
+                continue;
+            try {
+                const e = JSON.parse(t);
+                if (e.id) {
+                    if (seen.has(e.id))
+                        continue;
+                    seen.add(e.id);
+                }
+                entries.push(e);
+            }
+            catch {
+                /* skip malformed line */
+            }
+        }
+    }
+    return entries;
+}
+export function addEntry(repo, input) {
+    const entry = {
+        id: crypto.randomUUID(),
+        timestamp: new Date().toISOString(),
+        type: input.type,
+        summary: input.summary,
+        context: input.context ?? "",
+        relatedFiles: input.relatedFiles ?? [],
+    };
+    const globalPath = globalMemoryPath(repo);
+    fs.mkdirSync(path.dirname(globalPath), { recursive: true });
+    fs.appendFileSync(globalPath, JSON.stringify(entry) + "\n");
+    if (input.mirror) {
+        const local = localMemoryPath(repo);
+        fs.mkdirSync(path.dirname(local), { recursive: true });
+        fs.appendFileSync(local, JSON.stringify(entry) + "\n");
+    }
+    return entry;
+}
+/**
+ * 1–2 hop undirected neighborhood of the given files in the dependency graph,
+ * as a set of absolute paths. Used to decide whether a memory entry is
+ * "relevant" to a file or cluster.
+ */
+export function buildNeighborhood(repo, files) {
+    const absFiles = files.map((f) => path.resolve(repo, f));
+    const built = buildEdges(repo);
+    const adj = new Map();
+    const link = (a, b) => {
+        if (!adj.has(a))
+            adj.set(a, new Set());
+        adj.get(a).add(b);
+    };
+    if (built) {
+        for (const [u, deps] of built.edges) {
+            link(u, u);
+            for (const v of deps) {
+                link(u, v);
+                link(v, u);
+            }
+        }
+    }
+    const neighborhood = new Set(absFiles);
+    const queue = absFiles.map((f) => [f, 0]);
+    while (queue.length) {
+        const [n, d] = queue.shift();
+        if (d >= 2)
+            continue;
+        for (const nb of adj.get(n) ?? []) {
+            if (!neighborhood.has(nb)) {
+                neighborhood.add(nb);
+                queue.push([nb, d + 1]);
+            }
+        }
+    }
+    return neighborhood;
+}
+export function relevantEntriesForFiles(repo, files) {
+    const neighborhood = buildNeighborhood(repo, files);
+    const seen = new Set();
+    const out = [];
+    for (const e of loadEntries(repo)) {
+        const hit = e.relatedFiles.some((f) => neighborhood.has(path.resolve(repo, f)));
+        if (!hit)
+            continue;
+        if (e.id) {
+            if (seen.has(e.id))
+                continue;
+            seen.add(e.id);
+        }
+        out.push(e);
+    }
+    // newest first
+    out.sort((a, b) => (a.timestamp < b.timestamp ? 1 : -1));
+    return out;
+}
+export function relevantEntries(repo, filePath) {
+    return relevantEntriesForFiles(repo, [filePath]);
+}
+//# sourceMappingURL=store.js.map

package/dist/memory/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/memory/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAa7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAE3D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAC;gBACvC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;oBACT,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAAE,SAAS;oBAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjB,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAe;IACpD,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;KACvC,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAE5D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAe;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAuB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,EAAsB,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACrB,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,KAAe;IACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,eAAe;IACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB;IAC5D,OAAO,uBAAuB,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/pen/dynamic.d.ts

@@ -0,0 +1,36 @@
+/**
+ * pen/dynamic.ts — the dynamic phase of `pitstop pen`.
+ *
+ * Boots the app-under-test under the pen sandbox (`templates/pen/preload.cjs`
+ * for Node/JS) and fires a battery of live attacks at the discovered routes.
+ * Every attack is recorded (method, path, payload, status, response snippet)
+ * and its outcome is checked against BOTH the response and the sandbox
+ * evidence stream.
+ *
+ * Non-Node stacks (Go/Rust/Python/.NET/Java/Dart) are sandboxed with an
+ * HTTP(S)_PROXY recording proxy instead of the nock preload: outbound calls
+ * from apps honoring the proxy are recorded and never forwarded anywhere real.
+ * That proxy cannot observe subprocess spawns, so for those stacks
+ * command-injection is capped at "indicated" (response-echo), never "proven".
+ *
+ * Honesty rules:
+ *   - Attack requests may legitimately crash bits of the app (a 500 is a
+ *     finding too: `crash-on-input`). The app is this user's own repo, started
+ *     by the user, on a local port, with all external network traffic
+ *     intercepted and logged.
+ *   - "proven" is reserved for findings where the sandbox recorded a canary —
+ *     e.g. a spawn containing our marker (command injection) or an outbound
+ *     HTTP call to our canary host (SSRF). Everything else is "indicated".
+ */
+import type { PenFinding, PenRoute } from "./types.js";
+export interface PenDynamicOutcome {
+    status: "ok" | "aborted";
+    note?: string;
+    routesProbed: number;
+    attacks: number;
+    bootMs: number;
+    durationMs: number;
+    outboundEvents: number;
+    findings: PenFinding[];
+}
+export declare function runDynamic(repo: string, routes: PenRoute[]): Promise<PenDynamicOutcome>;