PyBreeze 1.0.26__tar.gz → 1.0.27__tar.gz

{pybreeze-1.0.26 → pybreeze-1.0.27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pybreeze
-Version: 1.0.26
+Version: 1.0.27
 Summary: IDE for multi automation
 Author-email: JE-Chen <jechenmailman@gmail.com>
 Project-URL: Homepage, https://github.com/Intergration-Automation-Testing/AutomationEditor
@@ -109,18 +109,19 @@ PyBreeze is not just a code editor — it is a command center for the automation
   - Mermaid `flowchart` / `graph` import
   - Save/Open as `.diagram.json`, export to PNG or SVG
   - Undo/redo, align, distribute, grid, snap, and zoom controls
-- **cURL Import** — Paste a `curl` command copied from your browser's dev tools and generate a ready-to-run script for the target of your choice: **Python `requests`**, an **APITestka Python** snippet (`test_api_method_requests(...)`), an **APITestka JSON action** (`[["AT_test_api_method", {...}]]`) that `execute_files` runs directly, or a **LoadDensity** Locust load-test (`start_test(...)`). (These are the HTTP-oriented modules; a curl request has no meaningful mapping to the browser or desktop-GUI automation modules.) Parses the method, URL, headers, body, basic auth, `-G` query parameters, `-F` multipart form fields (file uploads become `files=open(...)`), the `--json` shortcut (which also sets the JSON `Content-Type`/`Accept`), and `-d @file` bodies (which become `open(...).read()`, while `--data-raw` stays literal) — all with multi-line `\` / `^` continuations. It knows the arity of curl's common flags, so value-taking options like `--max-time 30` or `-o out.json` never leak into the URL; it URL-encodes `--data-urlencode` values the way curl does; and it infers `POST` when a body or form is present and sends JSON bodies as JSON. Targets include Python `requests`, a ready-to-run **pytest test** (a named `test_...` function that sends the request and asserts the status), APITestka (Python and JSON action), and a LoadDensity load test. Pick one from the dropdown, then copy the result, **open it straight into a new editor tab**, or **save it to a `.py` / `.json` file** (the extension follows the chosen target). A repeated `-H` is handled the way HTTP handles it — the values are combined into one header (with `; ` for cookies) rather than the last one silently winning, and names are matched case-insensitively so an explicit header always beats one implied by another flag. One click also **hands the parsed URL to the URL parser/builder**, query string and all. The parser is pure logic and never executes the command.
+- **cURL Import** — Paste a `curl` command copied from your browser's dev tools and generate a ready-to-run script for the target of your choice: **Python `requests`**, an **APITestka Python** snippet (`test_api_method_requests(...)`), an **APITestka JSON action** (`[["AT_test_api_method", {...}]]`) that `execute_files` runs directly, or a **LoadDensity** Locust load-test (`start_test(...)`). (These are the HTTP-oriented modules; a curl request has no meaningful mapping to the browser or desktop-GUI automation modules.) Parses the method, URL, headers, body, basic auth, `-G` query parameters, `-F` multipart form fields (file uploads become `files=open(...)`), the `--json` shortcut (which also sets the JSON `Content-Type`/`Accept`), and `-d @file` bodies (which become `open(...).read()`, while `--data-raw` stays literal) — all with multi-line `\` / `^` continuations. It knows the arity of curl's common flags, so value-taking options like `--max-time 30` or `-o out.json` never leak into the URL; it URL-encodes `--data-urlencode` values the way curl does; and it infers `POST` when a body or form is present and sends JSON bodies as JSON. Targets include Python `requests`, a ready-to-run **pytest test** (a named `test_...` function that sends the request and asserts the status), APITestka (Python and JSON action), and a LoadDensity load test. Pick one from the dropdown, then copy the result, **open it straight into a new editor tab**, or **save it to a `.py` / `.json` file** (the extension follows the chosen target). A repeated `-H` is handled the way HTTP handles it — the values are combined into one header (with `; ` for cookies) rather than the last one silently winning, and names are matched case-insensitively so an explicit header always beats one implied by another flag. One click also hands the parsed parts to the tool that specialises in them: the **URL to the URL parser/builder** (query string and all) or the **headers to the header analyzer**. The parser is pure logic and never executes the command.
+- **HAR Import** — "Copy as cURL" captures one request; **Save all as HAR** captures the session. Open that `.har` export and every recorded call is listed with its method, path, status and media type — page furniture (stylesheets, images, fonts) filtered out by default so what remains is the API traffic. Select the calls you want, or take everything listed, and generate one script for the whole set using the same targets as the cURL importer: a **pytest file** with one test per call (repeated endpoints get numbered names so no test silently replaces another), an **APITestka action list** that replays the flow in capture order, a **`requests` walkthrough**, an APITestka Python script, or LoadDensity runs. Recorded headers, cookies, query parameters and bodies (raw, URL-encoded and multipart, including file uploads) all come across; HTTP/2 pseudo-headers are dropped and a `Cookie` header that duplicates the recorded cookie list is removed, so the generated code sends each value once. A single selected request produces exactly what the cURL importer would, so the two tools never disagree. HAR is JSON, so this needs nothing beyond the standard library, and nothing is ever replayed for you.
 - **JWT Decoder** — Paste a JSON Web Token and read its header and payload as pretty-printed JSON, with standard timestamp claims (`exp`, `iat`, `nbf`, `auth_time`) rendered as readable UTC times. Inspection only — the signature is never verified and the token is never trusted.
 - **Timestamp Converter** — Enter a Unix epoch value (seconds or milliseconds, auto-detected) or an ISO-8601 date-time (with `Z` or an offset) and get every representation back in UTC. Deterministic and independent of the local time zone.
 - **Hash Generator** — Compute SHA-256, SHA-512, SHA-1 and MD5 digests of any text at once. A general-purpose checksum tool (MD5/SHA-1 are provided for interoperability with `usedforsecurity=False`, never for security decisions).
 - **Query ⇄ JSON** — Convert an `application/x-www-form-urlencoded` query string to pretty JSON and back, URL-decoding and -encoding as needed. Repeated keys become JSON arrays and vice versa. Copy the result, open it in an editor tab, or save it to a file.
 - **URL Parser / Builder** — Paste a URL to see its scheme, host, port, path, query, fragment and credentials as an editable JSON object, tweak any part, and turn it back into a URL. Round-trips both ways, brackets IPv6 literals, and re-encodes query parameters for you. The cURL importer can send a request's URL straight here.
-- **HTTP Header Analyzer** — Paste a request or response header block (from dev tools, `curl -i`, or a proxy log) and read back every field plus what is worth knowing about it: names sent more than once, `Set-Cookie` entries missing `Secure` / `HttpOnly` / `SameSite`, a wildcard CORS policy (and the wildcard-plus-credentials combination browsers reject outright), an HSTS `max-age` too short to survive a restart, CSP `unsafe-inline` / `unsafe-eval`, product banners, deprecated headers, and — for responses — the security headers that are absent. Headers carrying credentials are reported by name only; their values are never copied into the report. The Response Inspector hands its headers here in one click.
+- **HTTP Header Analyzer** — Paste a request or response header block (from dev tools, `curl -i`, or a proxy log) and read back every field plus what is worth knowing about it: names sent more than once, `Set-Cookie` entries missing `Secure` / `HttpOnly` / `SameSite`, a wildcard CORS policy (and the wildcard-plus-credentials combination browsers reject outright), an HSTS `max-age` too short to survive a restart, CSP `unsafe-inline` / `unsafe-eval`, product banners, deprecated headers, and — for responses — the security headers that are absent. Headers carrying credentials are reported by name only; their values are never copied into the report. The cURL importer and the Response Inspector both hand their headers here in one click, and a bearer token spotted in any header opens in the JWT decoder, already decoded.
 - **Regex Tester** — Try a regular expression against sample text with `IGNORECASE` / `MULTILINE` / `DOTALL` / `VERBOSE` flags, and see every match with its offsets, numbered groups and named groups. Invalid patterns report a friendly error instead of crashing.
 - **HTTP Status Reference** — Search the full HTTP status code table (sourced from the standard library, so it stays current) by code prefix or keyword, with the reason phrase, description and status class for each.
 - **Text Diff** — Compare two pieces of text (for example an expected vs. actual API response) side by side and get a unified diff plus a one-line summary of how many lines were added or removed. Copy the diff, open it in an editor tab, or save it to a file.
 - **JSON Format** — Pretty-print or minify a JSON payload, with a clear validation error when the input is not valid JSON. Copy the result, open it in a new editor tab, or save it to a file.
-- **Response Inspector** — Paste a raw HTTP response and get a decoded summary in one step: the status code is looked up in the HTTP reference, headers are parsed, a JSON body is pretty-printed, and any JWTs anywhere in the text (for example an `Authorization: Bearer` header) are decoded with their timestamp claims shown in UTC. Ties the HTTP-status, JSON-format and JWT tools together, and can open a found status code, JWT, or the whole header block directly in its dedicated tool tab, pre-filled.
+- **Response Inspector** — Paste a raw HTTP response and get a decoded summary in one step: the status code is looked up in the HTTP reference, headers are parsed, a JSON body is pretty-printed, and any JWTs anywhere in the text (for example an `Authorization: Bearer` header) are decoded with their timestamp claims shown in UTC. Ties the HTTP-status, JSON-format and JWT tools together, and can open a found status code, JWT, the whole header block, or a JSON body directly in its dedicated tool tab, pre-filled.
 - **File Tree Context Menu** — Right-click any file or folder in the project tree to create files/folders, rename, delete, copy absolute or relative paths, or reveal the item in your platform file manager. Renaming or deleting a file that is currently open in an editor tab keeps the tab in sync.
 - **Package Manager** — Install automation modules and build tools directly from the IDE menu without leaving the editor.
 - **Integrated Documentation** — Quick access to documentation and GitHub pages for each automation module directly from the menu bar.
@@ -252,6 +253,7 @@ PyBreeze UI (PySide6)
 │   ├── Skill Send GUI
 │   ├── Diagram Editor (WYSIWYG, Mermaid import, PNG/SVG export)
 │   ├── cURL Import (curl → Python requests code)
+│   ├── HAR Import (browser session → test suite)
 │   ├── JWT Decoder (header/payload inspection)
 │   ├── Timestamp Converter (epoch ⇄ ISO-8601)
 │   ├── Hash Generator (SHA-256/512, SHA-1, MD5)

{pybreeze-1.0.26 → pybreeze-1.0.27}/README.md

@@ -76,18 +76,19 @@ PyBreeze is not just a code editor — it is a command center for the automation
   - Mermaid `flowchart` / `graph` import
   - Save/Open as `.diagram.json`, export to PNG or SVG
   - Undo/redo, align, distribute, grid, snap, and zoom controls
-- **cURL Import** — Paste a `curl` command copied from your browser's dev tools and generate a ready-to-run script for the target of your choice: **Python `requests`**, an **APITestka Python** snippet (`test_api_method_requests(...)`), an **APITestka JSON action** (`[["AT_test_api_method", {...}]]`) that `execute_files` runs directly, or a **LoadDensity** Locust load-test (`start_test(...)`). (These are the HTTP-oriented modules; a curl request has no meaningful mapping to the browser or desktop-GUI automation modules.) Parses the method, URL, headers, body, basic auth, `-G` query parameters, `-F` multipart form fields (file uploads become `files=open(...)`), the `--json` shortcut (which also sets the JSON `Content-Type`/`Accept`), and `-d @file` bodies (which become `open(...).read()`, while `--data-raw` stays literal) — all with multi-line `\` / `^` continuations. It knows the arity of curl's common flags, so value-taking options like `--max-time 30` or `-o out.json` never leak into the URL; it URL-encodes `--data-urlencode` values the way curl does; and it infers `POST` when a body or form is present and sends JSON bodies as JSON. Targets include Python `requests`, a ready-to-run **pytest test** (a named `test_...` function that sends the request and asserts the status), APITestka (Python and JSON action), and a LoadDensity load test. Pick one from the dropdown, then copy the result, **open it straight into a new editor tab**, or **save it to a `.py` / `.json` file** (the extension follows the chosen target). A repeated `-H` is handled the way HTTP handles it — the values are combined into one header (with `; ` for cookies) rather than the last one silently winning, and names are matched case-insensitively so an explicit header always beats one implied by another flag. One click also **hands the parsed URL to the URL parser/builder**, query string and all. The parser is pure logic and never executes the command.
+- **cURL Import** — Paste a `curl` command copied from your browser's dev tools and generate a ready-to-run script for the target of your choice: **Python `requests`**, an **APITestka Python** snippet (`test_api_method_requests(...)`), an **APITestka JSON action** (`[["AT_test_api_method", {...}]]`) that `execute_files` runs directly, or a **LoadDensity** Locust load-test (`start_test(...)`). (These are the HTTP-oriented modules; a curl request has no meaningful mapping to the browser or desktop-GUI automation modules.) Parses the method, URL, headers, body, basic auth, `-G` query parameters, `-F` multipart form fields (file uploads become `files=open(...)`), the `--json` shortcut (which also sets the JSON `Content-Type`/`Accept`), and `-d @file` bodies (which become `open(...).read()`, while `--data-raw` stays literal) — all with multi-line `\` / `^` continuations. It knows the arity of curl's common flags, so value-taking options like `--max-time 30` or `-o out.json` never leak into the URL; it URL-encodes `--data-urlencode` values the way curl does; and it infers `POST` when a body or form is present and sends JSON bodies as JSON. Targets include Python `requests`, a ready-to-run **pytest test** (a named `test_...` function that sends the request and asserts the status), APITestka (Python and JSON action), and a LoadDensity load test. Pick one from the dropdown, then copy the result, **open it straight into a new editor tab**, or **save it to a `.py` / `.json` file** (the extension follows the chosen target). A repeated `-H` is handled the way HTTP handles it — the values are combined into one header (with `; ` for cookies) rather than the last one silently winning, and names are matched case-insensitively so an explicit header always beats one implied by another flag. One click also hands the parsed parts to the tool that specialises in them: the **URL to the URL parser/builder** (query string and all) or the **headers to the header analyzer**. The parser is pure logic and never executes the command.
+- **HAR Import** — "Copy as cURL" captures one request; **Save all as HAR** captures the session. Open that `.har` export and every recorded call is listed with its method, path, status and media type — page furniture (stylesheets, images, fonts) filtered out by default so what remains is the API traffic. Select the calls you want, or take everything listed, and generate one script for the whole set using the same targets as the cURL importer: a **pytest file** with one test per call (repeated endpoints get numbered names so no test silently replaces another), an **APITestka action list** that replays the flow in capture order, a **`requests` walkthrough**, an APITestka Python script, or LoadDensity runs. Recorded headers, cookies, query parameters and bodies (raw, URL-encoded and multipart, including file uploads) all come across; HTTP/2 pseudo-headers are dropped and a `Cookie` header that duplicates the recorded cookie list is removed, so the generated code sends each value once. A single selected request produces exactly what the cURL importer would, so the two tools never disagree. HAR is JSON, so this needs nothing beyond the standard library, and nothing is ever replayed for you.
 - **JWT Decoder** — Paste a JSON Web Token and read its header and payload as pretty-printed JSON, with standard timestamp claims (`exp`, `iat`, `nbf`, `auth_time`) rendered as readable UTC times. Inspection only — the signature is never verified and the token is never trusted.
 - **Timestamp Converter** — Enter a Unix epoch value (seconds or milliseconds, auto-detected) or an ISO-8601 date-time (with `Z` or an offset) and get every representation back in UTC. Deterministic and independent of the local time zone.
 - **Hash Generator** — Compute SHA-256, SHA-512, SHA-1 and MD5 digests of any text at once. A general-purpose checksum tool (MD5/SHA-1 are provided for interoperability with `usedforsecurity=False`, never for security decisions).
 - **Query ⇄ JSON** — Convert an `application/x-www-form-urlencoded` query string to pretty JSON and back, URL-decoding and -encoding as needed. Repeated keys become JSON arrays and vice versa. Copy the result, open it in an editor tab, or save it to a file.
 - **URL Parser / Builder** — Paste a URL to see its scheme, host, port, path, query, fragment and credentials as an editable JSON object, tweak any part, and turn it back into a URL. Round-trips both ways, brackets IPv6 literals, and re-encodes query parameters for you. The cURL importer can send a request's URL straight here.
-- **HTTP Header Analyzer** — Paste a request or response header block (from dev tools, `curl -i`, or a proxy log) and read back every field plus what is worth knowing about it: names sent more than once, `Set-Cookie` entries missing `Secure` / `HttpOnly` / `SameSite`, a wildcard CORS policy (and the wildcard-plus-credentials combination browsers reject outright), an HSTS `max-age` too short to survive a restart, CSP `unsafe-inline` / `unsafe-eval`, product banners, deprecated headers, and — for responses — the security headers that are absent. Headers carrying credentials are reported by name only; their values are never copied into the report. The Response Inspector hands its headers here in one click.
+- **HTTP Header Analyzer** — Paste a request or response header block (from dev tools, `curl -i`, or a proxy log) and read back every field plus what is worth knowing about it: names sent more than once, `Set-Cookie` entries missing `Secure` / `HttpOnly` / `SameSite`, a wildcard CORS policy (and the wildcard-plus-credentials combination browsers reject outright), an HSTS `max-age` too short to survive a restart, CSP `unsafe-inline` / `unsafe-eval`, product banners, deprecated headers, and — for responses — the security headers that are absent. Headers carrying credentials are reported by name only; their values are never copied into the report. The cURL importer and the Response Inspector both hand their headers here in one click, and a bearer token spotted in any header opens in the JWT decoder, already decoded.
 - **Regex Tester** — Try a regular expression against sample text with `IGNORECASE` / `MULTILINE` / `DOTALL` / `VERBOSE` flags, and see every match with its offsets, numbered groups and named groups. Invalid patterns report a friendly error instead of crashing.
 - **HTTP Status Reference** — Search the full HTTP status code table (sourced from the standard library, so it stays current) by code prefix or keyword, with the reason phrase, description and status class for each.
 - **Text Diff** — Compare two pieces of text (for example an expected vs. actual API response) side by side and get a unified diff plus a one-line summary of how many lines were added or removed. Copy the diff, open it in an editor tab, or save it to a file.
 - **JSON Format** — Pretty-print or minify a JSON payload, with a clear validation error when the input is not valid JSON. Copy the result, open it in a new editor tab, or save it to a file.
-- **Response Inspector** — Paste a raw HTTP response and get a decoded summary in one step: the status code is looked up in the HTTP reference, headers are parsed, a JSON body is pretty-printed, and any JWTs anywhere in the text (for example an `Authorization: Bearer` header) are decoded with their timestamp claims shown in UTC. Ties the HTTP-status, JSON-format and JWT tools together, and can open a found status code, JWT, or the whole header block directly in its dedicated tool tab, pre-filled.
+- **Response Inspector** — Paste a raw HTTP response and get a decoded summary in one step: the status code is looked up in the HTTP reference, headers are parsed, a JSON body is pretty-printed, and any JWTs anywhere in the text (for example an `Authorization: Bearer` header) are decoded with their timestamp claims shown in UTC. Ties the HTTP-status, JSON-format and JWT tools together, and can open a found status code, JWT, the whole header block, or a JSON body directly in its dedicated tool tab, pre-filled.
 - **File Tree Context Menu** — Right-click any file or folder in the project tree to create files/folders, rename, delete, copy absolute or relative paths, or reveal the item in your platform file manager. Renaming or deleting a file that is currently open in an editor tab keeps the tab in sync.
 - **Package Manager** — Install automation modules and build tools directly from the IDE menu without leaving the editor.
 - **Integrated Documentation** — Quick access to documentation and GitHub pages for each automation module directly from the menu bar.
@@ -219,6 +220,7 @@ PyBreeze UI (PySide6)
 │   ├── Skill Send GUI
 │   ├── Diagram Editor (WYSIWYG, Mermaid import, PNG/SVG export)
 │   ├── cURL Import (curl → Python requests code)
+│   ├── HAR Import (browser session → test suite)
 │   ├── JWT Decoder (header/payload inspection)
 │   ├── Timestamp Converter (epoch ⇄ ISO-8601)
 │   ├── Hash Generator (SHA-256/512, SHA-1, MD5)

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/extend_multi_language/extend_english.py

@@ -332,6 +332,25 @@ pybreeze_english_word_dict = {
     "curl_import_target_apitestka_action": "APITestka (JSON action)",
     "curl_import_target_loaddensity_python": "LoadDensity (Python)",
     "curl_import_open_url_button": "Open URL in parser / builder",
+    "curl_import_open_headers_button": "Open headers in analyzer",
+    # HAR Import — Menu
+    "extend_tools_menu_har_import_tab_action": "HAR Import Tab",
+    "extend_tools_menu_har_import_tab_label": "HAR Import",
+    "extend_tools_menu_har_import_dock_action": "HAR Import Dock",
+    "extend_tools_menu_har_import_dock_title": "HAR Import",
+    # HAR Import — Widget
+    "har_import_open_button": "Open .har file...",
+    "har_import_file_dialog_title": "Open a HAR export",
+    "har_import_file_filter": "HAR export (*.har *.json)",
+    "har_import_api_only": "Only API-like requests",
+    "har_import_summary": "{total} request(s), {api} API-like — {hosts}",
+    "har_import_generate_selected": "Generate for selection",
+    "har_import_generate_all": "Generate for all listed",
+    "har_import_no_selection": "Select one or more requests, or generate for all listed.",
+    "har_import_empty_hint":
+        "Open a .har file saved from your browser's dev tools (Network → Save all as HAR).",
+    "har_import_error": "Could not read the HAR export: {error}",
+    "har_import_read_error": "Could not open the file: {error}",
     # Shared output actions (copy / open in editor / save to file)
     "output_actions_copy": "Copy",
     "output_actions_open_editor": "Open in editor tab",
@@ -469,6 +488,7 @@ pybreeze_english_word_dict = {
     "response_open_jwt_button": "Open JWT in decoder",
     "response_open_status_button": "Open status in reference",
     "response_open_headers_button": "Open headers in analyzer",
+    "response_open_body_button": "Open body in JSON format",
     "response_empty_hint": "Paste a response above, then click analyze.",
     "response_status_label": "== Status ==",
     "response_headers_label": "== Headers ==",
@@ -493,6 +513,7 @@ pybreeze_english_word_dict = {
     "header_analyzer_empty_hint": "Paste a header block above, then click analyze.",
     "header_analyzer_level_warning": "WARNING",
     "header_analyzer_level_info": "INFO",
+    "header_analyzer_open_jwt_button": "Open token in JWT decoder",
     # HTTP Header Analyzer — Findings ({header} is the header, {detail} its value)
     "header_finding_duplicate_header":
         "{header}: sent {detail} times; the receiver joins the values into one.",

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/extend_multi_language/extend_traditional_chinese.py

@@ -310,6 +310,25 @@ pybreeze_traditional_chinese_word_dict = {
     "curl_import_target_apitestka_action": "APITestka（JSON action）",
     "curl_import_target_loaddensity_python": "LoadDensity（Python）",
     "curl_import_open_url_button": "在 URL 解析／組建器開啟網址",
+    "curl_import_open_headers_button": "在分析器開啟標頭",
+    # HAR 匯入 — 選單
+    "extend_tools_menu_har_import_tab_action": "HAR 匯入分頁",
+    "extend_tools_menu_har_import_tab_label": "HAR 匯入",
+    "extend_tools_menu_har_import_dock_action": "HAR 匯入停駐窗格",
+    "extend_tools_menu_har_import_dock_title": "HAR 匯入",
+    # HAR 匯入 — 介面
+    "har_import_open_button": "開啟 .har 檔...",
+    "har_import_file_dialog_title": "開啟 HAR 匯出檔",
+    "har_import_file_filter": "HAR 匯出檔 (*.har *.json)",
+    "har_import_api_only": "只列出像 API 的請求",
+    "har_import_summary": "{total} 個請求，其中 {api} 個像 API — {hosts}",
+    "har_import_generate_selected": "為選取項產生",
+    "har_import_generate_all": "為列出的全部產生",
+    "har_import_no_selection": "請選取一個以上的請求，或改用「為列出的全部產生」。",
+    "har_import_empty_hint":
+        "請開啟從瀏覽器開發者工具存出的 .har 檔（Network → Save all as HAR）。",
+    "har_import_error": "無法讀取這份 HAR 匯出檔：{error}",
+    "har_import_read_error": "無法開啟檔案：{error}",
     # 共用輸出動作（複製 / 開成分頁 / 存檔）
     "output_actions_copy": "複製",
     "output_actions_open_editor": "開成編輯器分頁",
@@ -447,6 +466,7 @@ pybreeze_traditional_chinese_word_dict = {
     "response_open_jwt_button": "在解碼器開啟 JWT",
     "response_open_status_button": "在參考開啟狀態碼",
     "response_open_headers_button": "在分析器開啟標頭",
+    "response_open_body_button": "在 JSON 格式化開啟內容",
     "response_empty_hint": "請先在上方貼上回應，再按分析。",
     "response_status_label": "== 狀態 Status ==",
     "response_headers_label": "== 標頭 Headers ==",
@@ -471,6 +491,7 @@ pybreeze_traditional_chinese_word_dict = {
     "header_analyzer_empty_hint": "請先在上方貼上標頭，再按分析。",
     "header_analyzer_level_warning": "警告",
     "header_analyzer_level_info": "資訊",
+    "header_analyzer_open_jwt_button": "在 JWT 解碼器開啟權杖",
     # HTTP 標頭分析器 — 發現（{header} 為標頭名稱，{detail} 為其值）
     "header_finding_duplicate_header":
         "{header}：送出 {detail} 次，接收端會把這些值合併成一個。",

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/pybreeze_ui/menu/tools/tools_menu.py

@@ -19,6 +19,7 @@ from pybreeze.pybreeze_ui.tools_gui.curl_import_gui import CurlImportGUI
 from pybreeze.pybreeze_ui.tools_gui.diff_gui import DiffGUI
 from pybreeze.pybreeze_ui.tools_gui.json_format_gui import JsonFormatGUI
 from pybreeze.pybreeze_ui.tools_gui.jwt_decoder_gui import JwtDecoderGUI
+from pybreeze.pybreeze_ui.tools_gui.har_import_gui import HarImportGUI
 from pybreeze.pybreeze_ui.tools_gui.hash_gui import HashGUI
 from pybreeze.pybreeze_ui.tools_gui.header_analyzer_gui import HeaderAnalyzerGUI
 from pybreeze.pybreeze_ui.tools_gui.http_status_gui import HttpStatusGUI
@@ -114,6 +115,17 @@ def build_tools_menu(ui_we_want_to_set: PyBreezeMainWindow):
     ))
     ui_we_want_to_set.tools_menu.addAction(ui_we_want_to_set.tools_curl_import_action)
 
+    # HAR Import
+    ui_we_want_to_set.tools_har_import_action = QAction(language_wrapper.language_word_dict.get(
+        "extend_tools_menu_har_import_tab_action"
+    ))
+    ui_we_want_to_set.tools_har_import_action.triggered.connect(lambda: ui_we_want_to_set.tab_widget.addTab(
+        HarImportGUI(ui_we_want_to_set), language_wrapper.language_word_dict.get(
+            "extend_tools_menu_har_import_tab_label"
+        )
+    ))
+    ui_we_want_to_set.tools_menu.addAction(ui_we_want_to_set.tools_har_import_action)
+
     # JWT Decoder
     ui_we_want_to_set.tools_jwt_decoder_action = QAction(language_wrapper.language_word_dict.get(
         "extend_tools_menu_jwt_decoder_tab_action"
@@ -292,6 +304,13 @@ def extend_dock_menu(ui_we_want_to_set: PyBreezeMainWindow):
         lambda: add_dock(ui_we_want_to_set, "CurlImport"))
     ui_we_want_to_set.dock_menu.addAction(ui_we_want_to_set.tools_curl_import_dock_action)
 
+    # HAR Import Dock
+    ui_we_want_to_set.tools_har_import_dock_action = QAction(language_wrapper.language_word_dict.get(
+        "extend_tools_menu_har_import_dock_action"))
+    ui_we_want_to_set.tools_har_import_dock_action.triggered.connect(
+        lambda: add_dock(ui_we_want_to_set, "HarImport"))
+    ui_we_want_to_set.dock_menu.addAction(ui_we_want_to_set.tools_har_import_dock_action)
+
     # JWT Decoder Dock
     ui_we_want_to_set.tools_jwt_decoder_dock_action = QAction(language_wrapper.language_word_dict.get(
         "extend_tools_menu_jwt_decoder_dock_action"))
@@ -385,6 +404,7 @@ _DOCK_WIDGETS: dict[str, tuple[str, Callable[[PyBreezeMainWindow], object]]] = {
         "extend_tools_menu_diagram_editor_dock_title", lambda _win: DiagramEditorWidget()),
     "CurlImport": (
         "extend_tools_menu_curl_import_dock_title", lambda win: CurlImportGUI(win)),
+    "HarImport": ("extend_tools_menu_har_import_dock_title", lambda win: HarImportGUI(win)),
     "JwtDecoder": (
         "extend_tools_menu_jwt_decoder_dock_title", lambda win: JwtDecoderGUI(main_window=win)),
     "Timestamp": ("extend_tools_menu_timestamp_dock_title", lambda win: TimestampGUI(win)),

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/pybreeze_ui/tools_gui/curl_import_gui.py

@@ -10,10 +10,11 @@ URL parser/builder tool for further editing.
 from __future__ import annotations
 
 from PySide6.QtWidgets import (
-    QComboBox, QLabel, QPushButton, QTextEdit, QVBoxLayout, QWidget
+    QComboBox, QHBoxLayout, QLabel, QPushButton, QTextEdit, QVBoxLayout, QWidget
 )
 from je_editor import language_wrapper
 
+from pybreeze.pybreeze_ui.tools_gui.header_analyzer_gui import HeaderAnalyzerGUI
 from pybreeze.pybreeze_ui.tools_gui.output_actions import OutputActions
 from pybreeze.pybreeze_ui.tools_gui.tool_tabs import open_tool_tab
 from pybreeze.pybreeze_ui.tools_gui.url_builder_gui import UrlBuilderGUI
@@ -60,10 +61,18 @@ class CurlImportGUI(QWidget):
         self.output_edit = QTextEdit()
         self.output_edit.setReadOnly(True)
 
-        # Cross-tool action: send the parsed URL to the URL parser/builder.
+        # Cross-tool actions: hand the parsed parts to the tool that specialises
+        # in them, rather than making the user copy them across.
         self.open_url_button = QPushButton(word.get("curl_import_open_url_button"))
         self.open_url_button.clicked.connect(self.open_url_in_builder)
         self.open_url_button.setEnabled(False)
+        self.open_headers_button = QPushButton(word.get("curl_import_open_headers_button"))
+        self.open_headers_button.clicked.connect(self.open_headers_in_analyzer)
+        self.open_headers_button.setEnabled(False)
+
+        cross_tool = QHBoxLayout()
+        cross_tool.addWidget(self.open_url_button)
+        cross_tool.addWidget(self.open_headers_button)
 
         # Shared copy / open-in-editor / save actions. The extension and basename
         # follow the selected target; open/save are no-ops until a valid template.
@@ -77,9 +86,10 @@ class CurlImportGUI(QWidget):
         for widget in (
             self.input_label, self.input_edit,
             self.target_label, self.target_select, self.convert_button,
-            self.output_label, self.output_edit, self.open_url_button,
+            self.output_label, self.output_edit,
         ):
             layout.addWidget(widget)
+        layout.addLayout(cross_tool)
         layout.addLayout(self.actions.button_row())
         self.setLayout(layout)
 
@@ -97,6 +107,7 @@ class CurlImportGUI(QWidget):
         self._generated_code = None
         self._request = None
         self.open_url_button.setEnabled(False)
+        self.open_headers_button.setEnabled(False)
 
     def convert(self) -> None:
         """Parse the input command and show the template for the chosen target."""
@@ -118,6 +129,7 @@ class CurlImportGUI(QWidget):
         self._generated_code = code
         self._request = request
         self.open_url_button.setEnabled(bool(request.url))
+        self.open_headers_button.setEnabled(bool(request.headers))
         self.output_edit.setPlainText(code)
 
     def open_url_in_builder(self) -> QWidget | None:
@@ -132,3 +144,14 @@ class CurlImportGUI(QWidget):
             self._main_window,
             UrlBuilderGUI(main_window=self._main_window, initial_url=self._request.full_url),
             "extend_tools_menu_url_builder_tab_label")
+
+    def open_headers_in_analyzer(self) -> QWidget | None:
+        """Open the command's headers in the header analyzer, already analysed."""
+        if self._request is None or not self._request.headers:
+            return None
+        block = "\n".join(
+            f"{name}: {value}" for name, value in self._request.headers.items())
+        return open_tool_tab(
+            self._main_window,
+            HeaderAnalyzerGUI(main_window=self._main_window, initial_headers=block),
+            "extend_tools_menu_header_analyzer_tab_label")

pybreeze-1.0.27/pybreeze/pybreeze_ui/tools_gui/har_import_gui.py

@@ -0,0 +1,188 @@
+"""A tool tab that turns a browser HAR export into automation scripts.
+
+"Copy as cURL" captures one request; **Save all as HAR** captures the session.
+This widget reads that export, lists the recorded requests (hiding page assets
+unless asked), and generates a script for the selected ones — a pytest file of
+several tests, an APITestka action list that replays the flow, and so on — using
+the same targets and output actions as the cURL importer.
+"""
+from __future__ import annotations
+
+from pathlib import Path
+
+from PySide6.QtWidgets import (
+    QAbstractItemView, QCheckBox, QComboBox, QFileDialog, QHBoxLayout, QLabel,
+    QListWidget, QPushButton, QTextEdit, QVBoxLayout, QWidget
+)
+from je_editor import language_wrapper
+
+from pybreeze.pybreeze_ui.tools_gui.output_actions import OutputActions
+from pybreeze.utils.curl_import.script_templates import TEMPLATE_TARGETS
+from pybreeze.utils.exception.exceptions import HarParseException
+from pybreeze.utils.har_import.har_codegen import generate_har_script
+from pybreeze.utils.har_import.har_parser import HarEntry, api_entries, parse_har, summarize
+from pybreeze.utils.logging.logger import pybreeze_logger
+
+# The single target that generates JSON rather than Python
+_JSON_TARGET = "apitestka_action"
+# Separator between hosts in the summary line
+_HOST_SEPARATOR = ", "
+# Hosts listed before the summary is shortened
+_MAX_LISTED_HOSTS = 3
+
+
+class HarImportGUI(QWidget):
+    """Open a ``.har`` export, pick recorded requests, and generate a script."""
+
+    def __init__(self, main_window=None) -> None:
+        """
+        :param main_window: the window whose ``tab_widget`` "open in editor" uses
+        """
+        super().__init__()
+        # Every request in the export, and the subset currently listed.
+        self._entries: list[HarEntry] = []
+        self._shown: list[HarEntry] = []
+        self._generated_code: str | None = None
+        word = language_wrapper.language_word_dict
+
+        self.open_button = QPushButton(word.get("har_import_open_button"))
+        self.open_button.clicked.connect(self.open_file)
+        self.api_only_check = QCheckBox(word.get("har_import_api_only"))
+        self.api_only_check.setChecked(True)
+        self.api_only_check.stateChanged.connect(self._refresh_entry_list)
+
+        top_row = QHBoxLayout()
+        top_row.addWidget(self.open_button)
+        top_row.addWidget(self.api_only_check)
+
+        self.summary_label = QLabel(word.get("har_import_empty_hint"))
+        self.entry_list = QListWidget()
+        self.entry_list.setSelectionMode(QAbstractItemView.SelectionMode.ExtendedSelection)
+
+        self.target_label = QLabel(word.get("curl_import_target_label"))
+        self.target_select = QComboBox()
+        for target_key, label_key in TEMPLATE_TARGETS:
+            self.target_select.addItem(word.get(label_key), target_key)
+
+        self.generate_selected_button = QPushButton(word.get("har_import_generate_selected"))
+        self.generate_selected_button.clicked.connect(self.generate_selected)
+        self.generate_all_button = QPushButton(word.get("har_import_generate_all"))
+        self.generate_all_button.clicked.connect(self.generate_all)
+
+        generate_row = QHBoxLayout()
+        generate_row.addWidget(self.generate_selected_button)
+        generate_row.addWidget(self.generate_all_button)
+
+        self.output_label = QLabel(word.get("curl_import_output_label"))
+        self.output_edit = QTextEdit()
+        self.output_edit.setReadOnly(True)
+
+        self.actions = OutputActions(
+            self, self.output_edit, main_window=main_window,
+            basename=lambda: "actions" if self.selected_target() == _JSON_TARGET else "session",
+            extension=lambda: "json" if self.selected_target() == _JSON_TARGET else "py",
+            is_valid=lambda: self._generated_code is not None)
+
+        layout = QVBoxLayout()
+        layout.addLayout(top_row)
+        layout.addWidget(self.summary_label)
+        layout.addWidget(self.entry_list)
+        layout.addWidget(self.target_label)
+        layout.addWidget(self.target_select)
+        layout.addLayout(generate_row)
+        layout.addWidget(self.output_label)
+        layout.addWidget(self.output_edit)
+        layout.addLayout(self.actions.button_row())
+        self.setLayout(layout)
+
+    def selected_target(self) -> str:
+        """Return the template key of the currently selected target."""
+        return self.target_select.currentData()
+
+    def open_file(self) -> str | None:
+        """Ask for a ``.har`` file, then load it; return the path or ``None``."""
+        word = language_wrapper.language_word_dict
+        path, _selected = QFileDialog.getOpenFileName(
+            self, word.get("har_import_file_dialog_title"), "",
+            word.get("har_import_file_filter"))
+        if not path:
+            return None
+        try:
+            text = Path(path).read_text(encoding="utf-8")
+        except OSError as error:
+            pybreeze_logger.info("har_import_gui.py read failed: %r", error)
+            self._report_error(word.get("har_import_read_error").format(error=str(error)))
+            return None
+        self.load_text(text)
+        return path
+
+    def load_text(self, text: str) -> bool:
+        """Parse *text* as a HAR export and list what it recorded.
+
+        :param text: the contents of a ``.har`` file
+        :return: whether the export parsed
+        """
+        try:
+            entries = parse_har(text)
+        except HarParseException as error:
+            pybreeze_logger.info("har_import_gui.py parse failed: %r", error)
+            self._entries = []
+            self._refresh_entry_list()
+            self._report_error(
+                language_wrapper.language_word_dict.get("har_import_error").format(
+                    error=str(error)))
+            return False
+        self._entries = entries
+        self._refresh_entry_list()
+        return True
+
+    def _report_error(self, message: str) -> None:
+        """Show *message* as the summary and clear any generated output."""
+        self._generated_code = None
+        self.summary_label.setText(message)
+        self.output_edit.setPlainText(message)
+
+    def _summary_text(self) -> str:
+        """Return the counts-and-hosts line describing the loaded export."""
+        word = language_wrapper.language_word_dict
+        if not self._entries:
+            return word.get("har_import_empty_hint")
+        summary = summarize(self._entries)
+        hosts = _HOST_SEPARATOR.join(summary.hosts[:_MAX_LISTED_HOSTS])
+        if len(summary.hosts) > _MAX_LISTED_HOSTS:
+            hosts = f"{hosts}…"
+        return word.get("har_import_summary").format(
+            total=summary.total, api=summary.api, hosts=hosts)
+
+    def _refresh_entry_list(self) -> None:
+        """Rebuild the list from the current export and the API-only filter."""
+        self._shown = api_entries(self._entries) if self.api_only_check.isChecked() \
+            else list(self._entries)
+        self.entry_list.clear()
+        self.entry_list.addItems([entry.summary() for entry in self._shown])
+        self.summary_label.setText(self._summary_text())
+
+    def selected_entries(self) -> list[HarEntry]:
+        """Return the listed entries the user selected, in capture order."""
+        rows = sorted(index.row() for index in self.entry_list.selectedIndexes())
+        return [self._shown[row] for row in rows if 0 <= row < len(self._shown)]
+
+    def _generate(self, entries: list[HarEntry], empty_hint_key: str) -> None:
+        """Generate a script for *entries*, or show the hint when there are none."""
+        word = language_wrapper.language_word_dict
+        if not entries:
+            self._generated_code = None
+            self.output_edit.setPlainText(word.get(empty_hint_key))
+            return
+        code = generate_har_script(
+            self.selected_target(), [entry.request for entry in entries])
+        self._generated_code = code
+        self.output_edit.setPlainText(code)
+
+    def generate_selected(self) -> None:
+        """Generate a script covering the selected requests."""
+        self._generate(self.selected_entries(), "har_import_no_selection")
+
+    def generate_all(self) -> None:
+        """Generate a script covering every request currently listed."""
+        self._generate(self._shown, "har_import_empty_hint")

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/pybreeze_ui/tools_gui/header_analyzer_gui.py

@@ -10,10 +10,13 @@ from __future__ import annotations
 from PySide6.QtWidgets import QLabel, QPushButton, QTextEdit, QVBoxLayout, QWidget
 from je_editor import language_wrapper
 
+from pybreeze.pybreeze_ui.tools_gui.jwt_decoder_gui import JwtDecoderGUI
 from pybreeze.pybreeze_ui.tools_gui.output_actions import OutputActions
+from pybreeze.pybreeze_ui.tools_gui.tool_tabs import open_tool_tab
 from pybreeze.utils.header_tools.header_analyzer import (
     HeaderAnalysis, HeaderFinding, analyze_headers
 )
+from pybreeze.utils.jwt_tools.jwt_decoder import find_tokens
 
 
 def _finding_line(finding: HeaderFinding) -> str:
@@ -58,6 +61,7 @@ class HeaderAnalyzerGUI(QWidget):
         :param initial_headers: a header block to pre-fill and analyse on open
         """
         super().__init__()
+        self._main_window = main_window
         self._analysis: HeaderAnalysis | None = None
         word = language_wrapper.language_word_dict
 
@@ -73,6 +77,12 @@ class HeaderAnalyzerGUI(QWidget):
         self.output_edit = QTextEdit()
         self.output_edit.setReadOnly(True)
 
+        # Cross-tool action: a bearer token in a header is worth reading, and the
+        # decoder is the tool that reads it.
+        self.open_jwt_button = QPushButton(word.get("header_analyzer_open_jwt_button"))
+        self.open_jwt_button.clicked.connect(self.open_jwt_in_decoder)
+        self.open_jwt_button.setEnabled(False)
+
         self.actions = OutputActions(
             self, self.output_edit, main_window=main_window,
             basename="headers", extension="txt",
@@ -81,7 +91,7 @@ class HeaderAnalyzerGUI(QWidget):
         layout = QVBoxLayout()
         for widget in (
             self.input_label, self.input_edit, self.analyze_button,
-            self.output_label, self.output_edit,
+            self.output_label, self.output_edit, self.open_jwt_button,
         ):
             layout.addWidget(widget)
         layout.addLayout(self.actions.button_row())
@@ -91,18 +101,42 @@ class HeaderAnalyzerGUI(QWidget):
             self.input_edit.setPlainText(initial_headers)
             self.analyze()
 
+    def _clear_analysis(self, message: str) -> None:
+        """Forget the analysis and show *message* instead of a report."""
+        self._analysis = None
+        self.open_jwt_button.setEnabled(False)
+        self.output_edit.setPlainText(message)
+
     def analyze(self) -> None:
         """Analyse the pasted headers and show the report."""
         word = language_wrapper.language_word_dict
         text = self.input_edit.toPlainText().strip()
         if not text:
-            self._analysis = None
-            self.output_edit.setPlainText(word.get("header_analyzer_empty_hint"))
+            self._clear_analysis(word.get("header_analyzer_empty_hint"))
             return
         analysis = analyze_headers(text)
         if not analysis.fields:
-            self._analysis = None
-            self.output_edit.setPlainText(word.get("header_analyzer_no_headers"))
+            self._clear_analysis(word.get("header_analyzer_no_headers"))
             return
         self._analysis = analysis
+        self.open_jwt_button.setEnabled(bool(self.header_tokens()))
         self.output_edit.setPlainText(build_header_report(analysis))
+
+    def header_tokens(self) -> list[str]:
+        """Return the JWT-looking tokens carried by the analysed headers."""
+        if self._analysis is None:
+            return []
+        tokens: list[str] = []
+        for header in self._analysis.fields:
+            tokens.extend(token for token in find_tokens(header.value) if token not in tokens)
+        return tokens
+
+    def open_jwt_in_decoder(self) -> QWidget | None:
+        """Open the first token found in a header in the JWT decoder, decoded."""
+        tokens = self.header_tokens()
+        if not tokens:
+            return None
+        return open_tool_tab(
+            self._main_window,
+            JwtDecoderGUI(initial_token=tokens[0], main_window=self._main_window),
+            "extend_tools_menu_jwt_decoder_tab_label")

{pybreeze-1.0.26 → pybreeze-1.0.27}/pybreeze/pybreeze_ui/tools_gui/json_format_gui.py

@@ -15,9 +15,10 @@ from pybreeze.utils.logging.logger import pybreeze_logger
 class JsonFormatGUI(QWidget):
     """Paste JSON, then format it, minify it, or read its validation error."""
 
-    def __init__(self, main_window=None) -> None:
+    def __init__(self, main_window=None, initial_json: str | None = None) -> None:
         """
         :param main_window: window whose ``tab_widget`` "open in editor" uses
+        :param initial_json: JSON to pre-fill and format on open, if given
         """
         super().__init__()
         # The last valid result (not an error/hint), gating open/save.
@@ -56,6 +57,10 @@ class JsonFormatGUI(QWidget):
         layout.addLayout(self.actions.button_row())
         self.setLayout(layout)
 
+        if initial_json:
+            self.input_edit.setPlainText(initial_json)
+            self.format_json()
+
     def _run(self, transform) -> None:
         """Apply a JSON transform, showing the result or a friendly error."""
         word = language_wrapper.language_word_dict