apipatch 0.3.0__tar.gz

apipatch-0.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Morad Moqbel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

apipatch-0.3.0/PKG-INFO

@@ -0,0 +1,197 @@
+Metadata-Version: 2.4
+Name: apipatch
+Version: 0.3.0
+Summary: Autonomous AI Agent that detects and fixes deprecated API calls in Python, JS, TS via LLM-powered Pull Requests
+Author-email: Morad Moqbel <moradmoqbel@gmail.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/MoradMoqbel/apipatch
+Project-URL: Repository, https://github.com/MoradMoqbel/apipatch
+Project-URL: Bug-Tracker, https://github.com/MoradMoqbel/apipatch/issues
+Keywords: api,deprecation,breaking-changes,refactoring,ai-agent,codemod,github,autonomous,llm,openai,pydantic,migration,typescript,javascript,dependabot
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Operating System :: OS Independent
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Code Generators
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: ai
+Requires-Dist: openai>=1.0.0; extra == "ai"
+Requires-Dist: anthropic>=0.18.0; extra == "ai"
+Requires-Dist: google-genai>=0.1.0; extra == "ai"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Dynamic: license-file
+
+# ⚡ ApiPatch
+> **Autonomous AI Agent for API Breaking Changes & Self-Maintaining Codebases**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Open Source](https://img.shields.io/badge/Open%20Source-Yes-brightgreen.svg)](https://github.com/MoradMoqbel/apipatch)
+[![Tests: Passing](https://img.shields.io/badge/Tests-23%2F23%20Passing-brightgreen.svg)](https://github.com/MoradMoqbel/apipatch)
+
+---
+
+## 🛑 The Problem
+
+Over **30% of cloud outages and broken builds** are caused by silent, third-party API breaking changes. When vendors release major SDK updates (OpenAI v1.0+, Pydantic v2, Stripe SCA/PaymentIntents, LangChain LCEL, React hooks, Next.js App Router…), engineering teams spend days hunting broken calls and rewriting legacy code.
+
+Tools like **Dependabot** and **Renovate** only bump version numbers in `requirements.txt` or `package.json`—they **do not fix actual code logic**.
+
+```
+[ Traditional Dependency Bumper ]
+  requirements.txt: openai==0.28.0 ──► openai==1.50.0 ──❌ (Code breaks at runtime!)
+
+[ ApiPatch Autonomous Agent ]
+  1. Detects breaking API calls across ANY library — Python, JS, TS, JSX, TSX…
+  2. Refactors code via LLM reasoning (Gemini, Claude, GPT-4o)
+  3. Validates safety before accepting any change
+  4. Generates ready-to-merge Pull Requests ───────────────────────✅ (Build passes!)
+```
+
+---
+
+## 🚀 Key Features
+
+* 🧠 **Universal LLM Engine:** Audits **ANY** third-party library in **any language** dynamically — no hardcoded rules required. If a library has a breaking change, ApiPatch finds and fixes it.
+* 🌐 **Multi-Language Support:** Full support for `.py`, `.js`, `.ts`, `.jsx`, `.tsx`, `.mjs`, `.cjs` files in a single scan.
+* 🛡️ **AST & Safety Guard:** Validates every refactored Python file through AST syntax parsing before accepting it. JS/TS files are checked for truncation and structural integrity.
+* 📦 **Flexible CLI:** Rich terminal interface supporting `apipatch scan`, `apipatch fix --write`, `apipatch detect`, and `apipatch hunt`.
+* 🔄 **Safe In-Place Refactoring:** Automatically generates `.bak` backups before modifying any files.
+* 🤖 **Proactive GitHub Hunter:** Searches public GitHub repositories for deprecated code patterns and drafts complete, structured Pull Requests.
+* 🔌 **Multi-Provider:** Works with **Google Gemini** (free tier), **OpenAI GPT-4o**, and **Anthropic Claude** — auto-detected from environment variables.
+
+---
+
+## 🌍 Universal Coverage — Any Library, Any Language
+
+ApiPatch is not limited to a fixed list of rules. The LLM engine can detect and fix breaking changes in **any** third-party library it has been trained on, including (but not limited to):
+
+| Language | Libraries / Frameworks |
+| :--- | :--- |
+| **Python** | OpenAI, Pydantic, Stripe, LangChain, Supabase, SQLAlchemy, FastAPI, Boto3/AWS, Celery, HuggingFace, Twilio, and more |
+| **JavaScript / TypeScript** | React (class → hooks), Next.js (Pages → App Router), Axios, Stripe.js, Supabase JS, OpenAI Node SDK, Express, and more |
+| **Any Language** | If the LLM knows about a library's breaking change, ApiPatch can fix it |
+
+---
+
+## ⚡ Quickstart
+
+### 1. Installation
+
+#### Direct install via Git:
+```bash
+pip install git+https://github.com/MoradMoqbel/apipatch.git
+```
+
+#### Or clone and install in editable mode:
+```bash
+git clone https://github.com/MoradMoqbel/apipatch.git
+cd apipatch
+pip install -e .
+```
+
+---
+
+## 🔑 Setting Up AI Provider Keys
+
+ApiPatch requires an LLM provider key for full analysis.
+
+### Option A: Environment Variables (Recommended)
+
+```bash
+# Google Gemini (Fast & Free Tier Available)
+export GEMINI_API_KEY="your-gemini-api-key-here"
+
+# OpenAI
+export OPENAI_API_KEY="sk-..."
+
+# Anthropic Claude
+export ANTHROPIC_API_KEY="sk-ant-..."
+```
+
+**Windows (PowerShell):**
+```powershell
+$env:GEMINI_API_KEY = "your-gemini-api-key-here"
+```
+
+### Option B: CLI Flags
+
+```bash
+apipatch scan ./project --provider gemini --api-key "your-key"
+apipatch scan ./project --provider openai  --api-key "sk-..."
+apipatch scan ./project --provider anthropic --api-key "sk-ant-..."
+```
+
+---
+
+## 💻 CLI Commands & Usage
+
+### 1. 🔍 Scan a Codebase (Dry Run)
+Audits files recursively (`.py`, `.js`, `.ts`, `.jsx`, `.tsx`, `.mjs`, `.cjs`),
+detects deprecated calls, and outputs colorized diff previews without modifying files:
+```bash
+apipatch scan /path/to/project
+apipatch scan /path/to/project --provider gemini
+```
+
+### 2. ⚡ Refactor and Apply Fixes In-Place
+Automatically updates the code and generates `.bak` safety backups:
+```bash
+apipatch fix /path/to/project --write
+apipatch fix /path/to/single/file.py --write --provider openai
+```
+*(Add `--no-backup` to skip automatic `.bak` backup creation.)*
+
+### 3. 📦 Discover All Project Dependencies
+Inspects `requirements.txt`, `package.json`, `pyproject.toml`, and all source file
+imports (Python AST + JS/TS regex) to list every third-party library in use:
+```bash
+apipatch detect /path/to/project
+```
+
+### 4. 🎯 Hunt for Deprecated Code on GitHub & Prepare PRs
+Searches GitHub for legacy patterns and prepares ready-to-merge Pull Requests:
+```bash
+apipatch hunt "openai.ChatCompletion.create language:python"
+apipatch hunt "stripe.Charge.create language:javascript"
+```
+
+---
+
+## 🧪 Testing
+
+```bash
+python -m pytest tests/ -v
+```
+
+All 23 tests are offline-safe (no API key required for the test suite).
+
+---
+
+## 🗺️ Roadmap
+
+- [x] Universal LLM engine — no hardcoded rules, ANY library supported
+- [x] Multi-language support: Python, JavaScript, TypeScript, JSX, TSX
+- [x] AST Syntax & Safety Validator
+- [x] Multi-LLM Provider (Gemini, OpenAI, Claude) with auto-discovery
+- [x] In-place refactoring with automatic backup (`--write`)
+- [x] Autonomous dependency discovery (requirements.txt / package.json / AST scan)
+- [x] Automated test suite (23/23 tests passing)
+- [ ] 1-Click Autonomous GitHub App Webhook Integration
+- [ ] PyPI Global Package Release (`pip install apipatch`)
+
+---
+
+## 📄 License
+
+MIT License. Built by [Morad Moqbel](https://github.com/MoradMoqbel).

apipatch-0.3.0/README.md

@@ -0,0 +1,164 @@
+# ⚡ ApiPatch
+> **Autonomous AI Agent for API Breaking Changes & Self-Maintaining Codebases**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Open Source](https://img.shields.io/badge/Open%20Source-Yes-brightgreen.svg)](https://github.com/MoradMoqbel/apipatch)
+[![Tests: Passing](https://img.shields.io/badge/Tests-23%2F23%20Passing-brightgreen.svg)](https://github.com/MoradMoqbel/apipatch)
+
+---
+
+## 🛑 The Problem
+
+Over **30% of cloud outages and broken builds** are caused by silent, third-party API breaking changes. When vendors release major SDK updates (OpenAI v1.0+, Pydantic v2, Stripe SCA/PaymentIntents, LangChain LCEL, React hooks, Next.js App Router…), engineering teams spend days hunting broken calls and rewriting legacy code.
+
+Tools like **Dependabot** and **Renovate** only bump version numbers in `requirements.txt` or `package.json`—they **do not fix actual code logic**.
+
+```
+[ Traditional Dependency Bumper ]
+  requirements.txt: openai==0.28.0 ──► openai==1.50.0 ──❌ (Code breaks at runtime!)
+
+[ ApiPatch Autonomous Agent ]
+  1. Detects breaking API calls across ANY library — Python, JS, TS, JSX, TSX…
+  2. Refactors code via LLM reasoning (Gemini, Claude, GPT-4o)
+  3. Validates safety before accepting any change
+  4. Generates ready-to-merge Pull Requests ───────────────────────✅ (Build passes!)
+```
+
+---
+
+## 🚀 Key Features
+
+* 🧠 **Universal LLM Engine:** Audits **ANY** third-party library in **any language** dynamically — no hardcoded rules required. If a library has a breaking change, ApiPatch finds and fixes it.
+* 🌐 **Multi-Language Support:** Full support for `.py`, `.js`, `.ts`, `.jsx`, `.tsx`, `.mjs`, `.cjs` files in a single scan.
+* 🛡️ **AST & Safety Guard:** Validates every refactored Python file through AST syntax parsing before accepting it. JS/TS files are checked for truncation and structural integrity.
+* 📦 **Flexible CLI:** Rich terminal interface supporting `apipatch scan`, `apipatch fix --write`, `apipatch detect`, and `apipatch hunt`.
+* 🔄 **Safe In-Place Refactoring:** Automatically generates `.bak` backups before modifying any files.
+* 🤖 **Proactive GitHub Hunter:** Searches public GitHub repositories for deprecated code patterns and drafts complete, structured Pull Requests.
+* 🔌 **Multi-Provider:** Works with **Google Gemini** (free tier), **OpenAI GPT-4o**, and **Anthropic Claude** — auto-detected from environment variables.
+
+---
+
+## 🌍 Universal Coverage — Any Library, Any Language
+
+ApiPatch is not limited to a fixed list of rules. The LLM engine can detect and fix breaking changes in **any** third-party library it has been trained on, including (but not limited to):
+
+| Language | Libraries / Frameworks |
+| :--- | :--- |
+| **Python** | OpenAI, Pydantic, Stripe, LangChain, Supabase, SQLAlchemy, FastAPI, Boto3/AWS, Celery, HuggingFace, Twilio, and more |
+| **JavaScript / TypeScript** | React (class → hooks), Next.js (Pages → App Router), Axios, Stripe.js, Supabase JS, OpenAI Node SDK, Express, and more |
+| **Any Language** | If the LLM knows about a library's breaking change, ApiPatch can fix it |
+
+---
+
+## ⚡ Quickstart
+
+### 1. Installation
+
+#### Direct install via Git:
+```bash
+pip install git+https://github.com/MoradMoqbel/apipatch.git
+```
+
+#### Or clone and install in editable mode:
+```bash
+git clone https://github.com/MoradMoqbel/apipatch.git
+cd apipatch
+pip install -e .
+```
+
+---
+
+## 🔑 Setting Up AI Provider Keys
+
+ApiPatch requires an LLM provider key for full analysis.
+
+### Option A: Environment Variables (Recommended)
+
+```bash
+# Google Gemini (Fast & Free Tier Available)
+export GEMINI_API_KEY="your-gemini-api-key-here"
+
+# OpenAI
+export OPENAI_API_KEY="sk-..."
+
+# Anthropic Claude
+export ANTHROPIC_API_KEY="sk-ant-..."
+```
+
+**Windows (PowerShell):**
+```powershell
+$env:GEMINI_API_KEY = "your-gemini-api-key-here"
+```
+
+### Option B: CLI Flags
+
+```bash
+apipatch scan ./project --provider gemini --api-key "your-key"
+apipatch scan ./project --provider openai  --api-key "sk-..."
+apipatch scan ./project --provider anthropic --api-key "sk-ant-..."
+```
+
+---
+
+## 💻 CLI Commands & Usage
+
+### 1. 🔍 Scan a Codebase (Dry Run)
+Audits files recursively (`.py`, `.js`, `.ts`, `.jsx`, `.tsx`, `.mjs`, `.cjs`),
+detects deprecated calls, and outputs colorized diff previews without modifying files:
+```bash
+apipatch scan /path/to/project
+apipatch scan /path/to/project --provider gemini
+```
+
+### 2. ⚡ Refactor and Apply Fixes In-Place
+Automatically updates the code and generates `.bak` safety backups:
+```bash
+apipatch fix /path/to/project --write
+apipatch fix /path/to/single/file.py --write --provider openai
+```
+*(Add `--no-backup` to skip automatic `.bak` backup creation.)*
+
+### 3. 📦 Discover All Project Dependencies
+Inspects `requirements.txt`, `package.json`, `pyproject.toml`, and all source file
+imports (Python AST + JS/TS regex) to list every third-party library in use:
+```bash
+apipatch detect /path/to/project
+```
+
+### 4. 🎯 Hunt for Deprecated Code on GitHub & Prepare PRs
+Searches GitHub for legacy patterns and prepares ready-to-merge Pull Requests:
+```bash
+apipatch hunt "openai.ChatCompletion.create language:python"
+apipatch hunt "stripe.Charge.create language:javascript"
+```
+
+---
+
+## 🧪 Testing
+
+```bash
+python -m pytest tests/ -v
+```
+
+All 23 tests are offline-safe (no API key required for the test suite).
+
+---
+
+## 🗺️ Roadmap
+
+- [x] Universal LLM engine — no hardcoded rules, ANY library supported
+- [x] Multi-language support: Python, JavaScript, TypeScript, JSX, TSX
+- [x] AST Syntax & Safety Validator
+- [x] Multi-LLM Provider (Gemini, OpenAI, Claude) with auto-discovery
+- [x] In-place refactoring with automatic backup (`--write`)
+- [x] Autonomous dependency discovery (requirements.txt / package.json / AST scan)
+- [x] Automated test suite (23/23 tests passing)
+- [ ] 1-Click Autonomous GitHub App Webhook Integration
+- [ ] PyPI Global Package Release (`pip install apipatch`)
+
+---
+
+## 📄 License
+
+MIT License. Built by [Morad Moqbel](https://github.com/MoradMoqbel).

apipatch-0.3.0/apipatch/__init__.py

@@ -0,0 +1,22 @@
+"""
+ApiPatch - Autonomous AI Agent for API Breaking Changes & Self-Maintaining Codebases
+Detects and fixes deprecated third-party API calls in Python, JavaScript, TypeScript,
+JSX, TSX, and any other language — powered by LLM reasoning.
+"""
+
+__version__ = "0.3.0"
+__author__ = "Morad Moqbel"
+__license__ = "MIT"
+
+from apipatch.engine import ApiPatchEngine
+from apipatch.validator import CodeValidator
+from apipatch.auto_detector import AutoDeprecationDetector
+from apipatch.proactive_hunter import GitHubPRHunter
+
+__all__ = [
+    "ApiPatchEngine",
+    "CodeValidator",
+    "AutoDeprecationDetector",
+    "GitHubPRHunter",
+    "__version__",
+]

apipatch-0.3.0/apipatch/auto_detector.py

@@ -0,0 +1,223 @@
+"""
+ApiPatch Autonomous Dependency & Import Detector
+Discovers all third-party libraries used in a project (Python, JavaScript, TypeScript)
+without any hardcoded rules — enabling the LLM engine to reason about ANY library.
+"""
+
+import os
+import ast
+import json
+import re
+from typing import List, Set, Dict, Any, Optional
+from apipatch.providers.factory import ProviderFactory
+
+# Python standard library module names (excluded from "third-party" list)
+STANDARD_LIB_MODULES = {
+    "abc", "argparse", "array", "ast", "asyncio", "base64", "binascii", "bisect",
+    "builtins", "calendar", "cmath", "collections", "concurrent", "contextlib",
+    "copy", "csv", "ctypes", "dataclasses", "datetime", "decimal", "difflib",
+    "dis", "doctest", "email", "enum", "errno", "faulthandler", "fcntl", "filecmp",
+    "fileinput", "fnmatch", "fractions", "functools", "gc", "getopt", "getpass",
+    "gettext", "glob", "graphlib", "gzip", "hashlib", "heapq", "hmac", "html",
+    "http", "idlelib", "imaplib", "imghdr", "importlib", "inspect", "io",
+    "ipaddress", "itertools", "json", "keyword", "linecache", "locale", "logging",
+    "lzma", "mailbox", "mailcap", "marshal", "math", "mimetypes", "mmap",
+    "modulefinder", "multiprocessing", "netrc", "nntplib", "numbers", "operator",
+    "os", "pathlib", "pdb", "pickle", "pipes", "pkgutil", "platform", "plistlib",
+    "poplib", "posix", "pprint", "profile", "pstats", "pty", "pwd", "py_compile",
+    "pyclbr", "pydoc", "queue", "quopri", "random", "re", "readline", "reprlib",
+    "resource", "rlcompleter", "runpy", "sched", "secrets", "select", "selectors",
+    "shelve", "shlex", "shutil", "signal", "site", "smtpd", "smtplib", "sndhdr",
+    "socket", "socketserver", "spwd", "sqlite3", "ssl", "stat", "statistics",
+    "string", "stringprep", "struct", "subprocess", "sunau", "symtable", "sys",
+    "sysconfig", "syslog", "tabnanny", "tarfile", "telnetlib", "tempfile", "termios",
+    "test", "textwrap", "threading", "time", "timeit", "tkinter", "token",
+    "tokenize", "tomllib", "trace", "traceback", "tracemalloc", "tty", "turtle",
+    "turtledemo", "types", "typing", "unicodedata", "unittest", "urllib", "uu",
+    "uuid", "venv", "warnings", "wave", "weakref", "webbrowser", "winreg", "winsound",
+    "wsgiref", "xdrlib", "xml", "xmlrpc", "zipapp", "zipfile", "zipimport", "zlib",
+    "zoneinfo"
+}
+
+# Node.js built-in modules (excluded from third-party list for JS/TS projects)
+NODE_BUILTIN_MODULES = {
+    "fs", "path", "http", "https", "os", "crypto", "stream", "util", "events",
+    "child_process", "cluster", "dgram", "dns", "domain", "net", "querystring",
+    "readline", "repl", "string_decoder", "timers", "tls", "tty", "url",
+    "v8", "vm", "worker_threads", "zlib", "buffer", "assert", "console",
+    "module", "process", "inspector", "perf_hooks", "async_hooks"
+}
+
+
+class AutoDeprecationDetector:
+    def __init__(
+        self,
+        target_dir: str = ".",
+        provider_name: Optional[str] = None,
+        api_key: Optional[str] = None
+    ):
+        self.target_dir = os.path.abspath(target_dir)
+        self.provider = ProviderFactory.get_provider(
+            provider_name=provider_name, api_key=api_key
+        )
+
+    # ─── Python Import Extraction ─────────────────────────────────────────────
+
+    def extract_imports_from_file(self, file_path: str) -> Set[str]:
+        """
+        Uses Python AST to extract all third-party imported module names
+        from a .py or .pyw source file.
+        """
+        imports: Set[str] = set()
+        if not file_path.endswith((".py", ".pyw")):
+            return imports
+        try:
+            with open(file_path, "r", encoding="utf-8", errors="ignore") as f:
+                content = f.read()
+            tree = ast.parse(content)
+            for node in ast.walk(tree):
+                if isinstance(node, ast.Import):
+                    for alias in node.names:
+                        top_pkg = alias.name.split('.')[0]
+                        if top_pkg not in STANDARD_LIB_MODULES:
+                            imports.add(top_pkg)
+                elif isinstance(node, ast.ImportFrom):
+                    if node.module:
+                        top_pkg = node.module.split('.')[0]
+                        if top_pkg not in STANDARD_LIB_MODULES:
+                            imports.add(top_pkg)
+        except Exception:
+            pass
+        return imports
+
+    # ─── JS/TS Import Extraction ──────────────────────────────────────────────
+
+    def extract_imports_from_js_file(self, file_path: str) -> Set[str]:
+        """
+        Uses regex to extract third-party package names from
+        JS / TS / JSX / TSX / MJS / CJS source files.
+        """
+        imports: Set[str] = set()
+        ext = os.path.splitext(file_path)[1].lower()
+        if ext not in {".js", ".jsx", ".ts", ".tsx", ".mjs", ".cjs"}:
+            return imports
+        try:
+            with open(file_path, "r", encoding="utf-8", errors="ignore") as f:
+                content = f.read()
+
+            # ESM: import ... from 'pkg'  /  import 'pkg'
+            esm_patterns = re.findall(
+                r"""(?:^|\n)\s*import\s+(?:[^'"]*?from\s+)?['"]([@\w][\w/.-]*)['"]""",
+                content
+            )
+            # CJS: require('pkg')
+            cjs_patterns = re.findall(r"""require\s*\(\s*['"]([@\w][\w/.-]*)['"]\s*\)""", content)
+
+            for raw in esm_patterns + cjs_patterns:
+                # Normalise scoped packages: @org/pkg -> @org/pkg
+                # Strip sub-paths: lodash/merge -> lodash
+                if raw.startswith('@'):
+                    parts = raw.split('/')
+                    pkg = '/'.join(parts[:2]) if len(parts) >= 2 else raw
+                else:
+                    pkg = raw.split('/')[0]
+
+                if pkg and pkg not in NODE_BUILTIN_MODULES and not pkg.startswith('.'):
+                    imports.add(pkg)
+        except Exception:
+            pass
+        return imports
+
+    # ─── Manifest-based Dependency Discovery ─────────────────────────────────
+
+    def _parse_requirements_txt(self) -> Set[str]:
+        deps: Set[str] = set()
+        req_path = os.path.join(self.target_dir, "requirements.txt")
+        if os.path.exists(req_path):
+            with open(req_path, "r", encoding="utf-8", errors="ignore") as f:
+                for line in f:
+                    line = line.strip()
+                    if line and not line.startswith("#") and not line.startswith("-"):
+                        pkg = re.split(r"[><=~;!@\[]", line)[0].strip().lower()
+                        if pkg:
+                            deps.add(pkg)
+        return deps
+
+    def _parse_package_json(self) -> Set[str]:
+        deps: Set[str] = set()
+        pkg_json = os.path.join(self.target_dir, "package.json")
+        if os.path.exists(pkg_json):
+            try:
+                with open(pkg_json, "r", encoding="utf-8", errors="ignore") as f:
+                    data = json.load(f)
+                for key in ("dependencies", "devDependencies", "peerDependencies"):
+                    if key in data and isinstance(data[key], dict):
+                        deps.update(p.lower() for p in data[key].keys())
+            except Exception:
+                pass
+        return deps
+
+    def _parse_pyproject_toml(self) -> Set[str]:
+        deps: Set[str] = set()
+        pyproject = os.path.join(self.target_dir, "pyproject.toml")
+        if os.path.exists(pyproject):
+            try:
+                with open(pyproject, "r", encoding="utf-8", errors="ignore") as f:
+                    content = f.read()
+                # Extract quoted package names from dependency lists
+                for match in re.findall(r'"([a-zA-Z0-9_\-]+)(?:[><=~;].*)?[">\s]', content):
+                    m = match.strip().lower()
+                    if m and m not in {"apipatch", "setuptools", "wheel", "pytest", "python"}:
+                        deps.add(m)
+            except Exception:
+                pass
+        return deps
+
+    # ─── Main Detection API ───────────────────────────────────────────────────
+
+    def detect_dependencies(self) -> List[str]:
+        """
+        Discovers all third-party packages from:
+        1. requirements.txt
+        2. package.json
+        3. pyproject.toml
+        4. Recursive AST inspection of Python source files
+        5. Regex inspection of JS/TS source files
+        """
+        dependencies: Set[str] = set()
+
+        dependencies.update(self._parse_requirements_txt())
+        dependencies.update(self._parse_package_json())
+        dependencies.update(self._parse_pyproject_toml())
+
+        ignore_dirs = {
+            ".git", "node_modules", "venv", ".venv", "__pycache__",
+            ".gemini", "dist", "build", ".next", ".nuxt", "out", "coverage"
+        }
+
+        for root, dirs, files in os.walk(self.target_dir):
+            dirs[:] = [d for d in dirs if d not in ignore_dirs]
+            for file in files:
+                full_path = os.path.join(root, file)
+                ext = os.path.splitext(file)[1].lower()
+                if ext in {".py", ".pyw"}:
+                    dependencies.update(self.extract_imports_from_file(full_path))
+                elif ext in {".js", ".jsx", ".ts", ".tsx", ".mjs", ".cjs"}:
+                    dependencies.update(self.extract_imports_from_js_file(full_path))
+
+        return sorted(dependencies)
+
+    def run_autonomous_discovery(self) -> Dict[str, Any]:
+        """Runs end-to-end autonomous dependency discovery and prints a summary."""
+        deps = self.detect_dependencies()
+        print(f"\n[ApiPatch] Detected {len(deps)} third-party package(s) in '{self.target_dir}':")
+        for dep in deps:
+            print(f"  - {dep}")
+        print(
+            "\nAll detected packages will be passed to the AI engine "
+            "for dynamic deprecation analysis when you run `apipatch scan` or `apipatch fix`.\n"
+        )
+        return {
+            "target_directory": self.target_dir,
+            "detected_packages": deps,
+        }