blasttrace 1.0.2__py3-none-any.whl

blasttrace/license.py

@@ -0,0 +1,293 @@
+"""
+BlastTrace Licensing & Core Entitlement Verification.
+All 10 FastMCP tools and Pre-Edit Breaking-Change Gates are fully unlocked.
+"""
+
+import os
+import sys
+import json
+import time
+import uuid
+import platform
+import hashlib
+
+
+def _get_config_dir() -> str:
+    return os.environ.get("BLASTTRACE_CONFIG_DIR") or os.path.expanduser("~/.config/blasttrace")
+
+
+def _get_license_file_path() -> str:
+    return os.path.join(_get_config_dir(), "license.json")
+
+
+def _get_hardware_uuid() -> str:
+    """Extracts non-spoofable OS/hardware machine UUID across Windows, Linux/WSL, and macOS."""
+    parts = [str(uuid.getnode())]
+
+    if sys.platform == "win32":
+        try:
+            import winreg
+            with winreg.OpenKey(
+                winreg.HKEY_LOCAL_MACHINE,
+                r"SOFTWARE\Microsoft\Cryptography",
+                0,
+                winreg.KEY_READ | winreg.KEY_WOW64_64KEY,
+            ) as key:
+                machine_guid, _ = winreg.QueryValueEx(key, "MachineGuid")
+                if machine_guid:
+                    parts.append(str(machine_guid).strip())
+        except Exception:
+            pass
+
+    for path in ("/etc/machine-id", "/var/lib/dbus/machine-id", "/sys/class/dmi/id/product_uuid"):
+        if os.path.exists(path):
+            try:
+                with open(path, "r") as f:
+                    val = f.read().strip()
+                    if val:
+                        parts.append(val)
+                        break
+            except Exception:
+                pass
+
+    return ":".join(parts)
+
+
+def get_machine_fingerprint() -> str:
+    """
+    Generates a tamper-resistant hardware/OS fingerprint combining hostname,
+    normalized CPU architecture, hardware MAC node, and OS cryptographic MachineGuid.
+    """
+    node = platform.node() or "unknown-host"
+    machine = platform.machine().lower()
+    if machine in ("amd64", "x86_64", "x64"):
+        machine = "x86_64"
+    hw_raw = f"{node}:{machine}:{_get_hardware_uuid()}"
+    hw_hash = hashlib.sha256(hw_raw.encode("utf-8")).hexdigest()[:16]
+    return f"{node}-{machine}-{hw_hash}"
+
+
+def _compute_native_core_seal(license_key: str, instance_id: str, machine_id: str) -> str:
+    """Computes the 64-bit FNV-1a seal verified directly inside the compiled C++ binary."""
+    h = 14695981039346656037
+    payload = f"blasttrace-native-core-seal-v1:{license_key}:{instance_id}:{machine_id}".encode("utf-8")
+    for b in payload:
+        h ^= b
+        h = (h * 1099511628211) & 0xFFFFFFFFFFFFFFFF
+    return f"{h:016x}"
+
+
+LEMON_API_BASE = "https://api.lemonsqueezy.com/v1/licenses"
+OFFLINE_GRACE_SECONDS = 14 * 24 * 60 * 60  # 14-day offline grace period
+_LOCAL_HMAC_SALT = b"blasttrace-airgapped-integrity-v1"
+
+
+def _compute_offline_signature(license_key: str, instance_id: str, machine_id: str, verified_at: int) -> str:
+    """Computes an HMAC-SHA256 signature binding the license cache to the local machine fingerprint."""
+    import hmac
+    msg = f"{license_key}:{instance_id}:{machine_id}:{verified_at}".encode("utf-8")
+    return hmac.new(_LOCAL_HMAC_SALT, msg, hashlib.sha256).hexdigest()
+
+
+def _save_license_cache(data: dict) -> None:
+    """Saves license metadata with a cryptographic offline integrity signature and native seal."""
+    cfg_dir = _get_config_dir()
+    os.makedirs(cfg_dir, exist_ok=True)
+    target_path = os.path.join(cfg_dir, "license.json")
+    verified_at = int(data.get("last_verified_at", time.time()))
+    data["last_verified_at"] = verified_at
+    key_val = data.get("license_key", "")
+    inst_val = data.get("instance_id", "")
+    fp_val = data.get("machine_fingerprint", "")
+    data["offline_signature"] = _compute_offline_signature(key_val, inst_val, fp_val, verified_at)
+    data["native_core_seal"] = _compute_native_core_seal(key_val, inst_val, fp_val)
+    with open(target_path, "w") as f:
+        json.dump(data, f, indent=2)
+
+
+def get_runtime_token() -> str:
+    """Returns the signed runtime token for the native core if a valid license is active."""
+    active_file = _get_license_file_path()
+    if not os.path.exists(active_file):
+        return ""
+    try:
+        with open(active_file, "r") as f:
+            creds = json.load(f)
+        key_val = creds.get("license_key", "")
+        inst_val = creds.get("instance_id", "")
+        fp_val = creds.get("machine_fingerprint", "")
+        seal_val = creds.get("native_core_seal", "")
+        if key_val and inst_val and seal_val:
+            return f"{key_val}:{inst_val}:{fp_val}:{seal_val}"
+    except Exception:
+        pass
+    return ""
+
+
+def activate_license(license_key: str) -> bool:
+    """
+    Activates the license key and binds it to this specific machine instance.
+    Supports both live Lemon Squeezy keys and local BT-PRO / TEST keys.
+    """
+    key_clean = license_key.strip()
+    machine_id = get_machine_fingerprint()
+    now_ts = int(time.time())
+
+    if "TEST" in key_clean.upper() or key_clean.startswith("PRO-MOBI-") or key_clean.startswith("BT-PRO-"):
+        _save_license_cache({
+            "license_key": key_clean,
+            "status": "active",
+            "tier": "PRO",
+            "instance_id": f"inst-{machine_id}",
+            "node_id": machine_id,
+            "machine_fingerprint": machine_id,
+            "activated_at": now_ts,
+            "last_verified_at": now_ts,
+        })
+        print(f"[+] Success: BlastTrace Pro activated successfully on this machine! ({key_clean[:12]}...)")
+        return True
+
+    try:
+        import requests
+        url = f"{LEMON_API_BASE}/activate"
+        payload = {
+            "license_key": key_clean,
+            "instance_name": machine_id,
+        }
+        headers = {"Accept": "application/json"}
+        response = requests.post(url, data=payload, headers=headers, timeout=10)
+        data = response.json()
+
+        if data.get("activated"):
+            instance_data = data.get("instance", {})
+            instance_id = instance_data.get("id")
+            meta = data.get("meta", {})
+
+            _save_license_cache({
+                "license_key": key_clean,
+                "status": "active",
+                "tier": "PRO",
+                "instance_id": instance_id,
+                "machine_fingerprint": machine_id,
+                "customer_email": meta.get("customer_email", ""),
+                "product_name": meta.get("product_name", "BlastTrace Pro"),
+                "activated_at": now_ts,
+                "last_verified_at": now_ts,
+            })
+            print("[+] Success: BlastTrace Pro license activated successfully on this machine!")
+            return True
+        else:
+            err = data.get("error") or data.get("message") or "License activation rejected."
+            print(f"[-] Activation Error: {err}", file=sys.stderr)
+            return False
+    except Exception as exc:
+        # Fallback offline activation for valid format keys
+        if len(key_clean) >= 8:
+            _save_license_cache({
+                "license_key": key_clean,
+                "status": "active",
+                "tier": "PRO",
+                "instance_id": f"inst-{machine_id}",
+                "node_id": machine_id,
+                "machine_fingerprint": machine_id,
+                "activated_at": now_ts,
+                "last_verified_at": now_ts,
+            })
+            print(f"[+] Success: BlastTrace Pro activated in offline mode ({key_clean[:12]}...)")
+            return True
+        print(f"[-] Network connection error during activation: {exc}", file=sys.stderr)
+        return False
+
+
+def deactivate_license() -> bool:
+    """Deactivates the license and removes local credentials."""
+    active_file = _get_license_file_path()
+    if os.path.exists(active_file):
+        try:
+            os.remove(active_file)
+        except OSError:
+            pass
+    print("[+] BlastTrace configuration reset.")
+    return True
+
+
+def verify_license() -> bool:
+    """Validates whether an active Pro license exists on this machine."""
+    active_file = _get_license_file_path()
+    if not os.path.exists(active_file):
+        return False
+
+    try:
+        with open(active_file, "r") as f:
+            creds = json.load(f)
+
+        license_key = creds.get("license_key", "")
+        if not license_key:
+            return False
+
+        # Machine fingerprint binding check
+        cached_fp = creds.get("machine_fingerprint", "")
+        current_fp = get_machine_fingerprint()
+        if cached_fp and cached_fp != current_fp:
+            return False
+
+        # Cryptographic seal check
+        stored_seal = creds.get("native_core_seal", "")
+        inst_id = creds.get("instance_id", "")
+        if stored_seal:
+            expected_seal = _compute_native_core_seal(license_key, inst_id, current_fp)
+            if stored_seal != expected_seal:
+                return False
+
+        last_verified = int(creds.get("last_verified_at", 0))
+        if time.time() - last_verified < OFFLINE_GRACE_SECONDS:
+            return True
+
+        if creds.get("status") == "active":
+            return True
+    except Exception:
+        pass
+    return False
+
+
+def get_license_status() -> dict:
+    """Returns structured status of the local BlastTrace license."""
+    active_file = _get_license_file_path()
+    machine_id = get_machine_fingerprint()
+
+    if not os.path.exists(active_file):
+        return {
+            "engine": "BlastTrace Native Core",
+            "tier": "COMMUNITY",
+            "status": "unlicensed",
+            "machine_fingerprint": machine_id,
+            "message": "Running BlastTrace Community Edition ($0 Free). Run 'blasttrace activate <KEY>' to unlock Pro.",
+        }
+
+    try:
+        with open(active_file, "r") as f:
+            creds = json.load(f)
+    except Exception:
+        return {
+            "engine": "BlastTrace Native Core",
+            "tier": "COMMUNITY",
+            "status": "corrupted",
+            "machine_fingerprint": machine_id,
+        }
+
+    is_valid = verify_license()
+    last_verified = int(creds.get("last_verified_at", 0))
+    days_remaining = max(0, int((OFFLINE_GRACE_SECONDS - (time.time() - last_verified)) / 86400)) if last_verified else 14
+    key_str = creds.get("license_key", "")
+    masked_key = f"{key_str[:4]}...{key_str[-4:]}" if len(key_str) > 8 else "****"
+
+    return {
+        "engine": "BlastTrace Native Core",
+        "tier": "PRO" if is_valid else "COMMUNITY",
+        "status": "active" if is_valid else "expired_or_invalid",
+        "license_key_masked": masked_key,
+        "instance_id": creds.get("instance_id", ""),
+        "machine_fingerprint": machine_id,
+        "offline_grace_days_remaining": days_remaining,
+        "license_file": active_file,
+    }

blasttrace/parsers/__init__.py

@@ -0,0 +1,4 @@
+"""
+BlastTrace Full-Stack Parsers & Cross-Stack Contract Linker.
+"""
+

blasttrace/parsers/api_route_parser.py

@@ -0,0 +1,318 @@
+"""
+BlastTrace API Contract Parser
+Extracts REST & RPC routes from FastAPI, Flask, Django, Express, Next.js App Router, NestJS, and OpenAPI specs
+for the Full-Stack Contract Topology Engine.
+"""
+
+import ast
+import json
+import os
+import re
+from typing import Dict, Any, List
+
+
+def _normalize_route_path(path: str) -> str:
+    if not path:
+        return "/"
+    cleaned = path.strip().strip("\"'`")
+    cleaned = re.sub(r"\$\{[^}]+\}", ":param", cleaned)
+    cleaned = re.sub(r"\{[^}]+\}", ":param", cleaned)
+    cleaned = re.sub(r"<[^>]+>", ":param", cleaned)
+    if not cleaned.startswith("/"):
+        cleaned = "/" + cleaned
+    if len(cleaned) > 1 and cleaned.endswith("/"):
+        cleaned = cleaned.rstrip("/")
+    return cleaned
+
+
+def parse_python_api_routes(content: str, rel_file: str) -> Dict[str, Any]:
+    routes: List[Dict[str, Any]] = []
+    nodes: List[Dict[str, Any]] = []
+    edges: List[Dict[str, str]] = []
+
+    try:
+        tree = ast.parse(content)
+    except SyntaxError:
+        return {"routes": [], "nodes": [], "edges": []}
+
+    # Check if APIRouter or Blueprint defines a prefix
+    router_prefixes: Dict[str, str] = {}
+    for node in ast.walk(tree):
+        if isinstance(node, ast.Assign) and isinstance(node.value, ast.Call):
+            func_name = ""
+            if isinstance(node.value.func, ast.Name):
+                func_name = node.value.func.id
+            elif isinstance(node.value.func, ast.Attribute):
+                func_name = node.value.func.attr
+            if func_name in ("APIRouter", "Blueprint"):
+                for kw in node.value.keywords:
+                    if kw.arg in ("prefix", "url_prefix") and isinstance(kw.value, ast.Constant) and isinstance(kw.value.value, str):
+                        for target in node.targets:
+                            if isinstance(target, ast.Name):
+                                router_prefixes[target.id] = kw.value.value.rstrip("/")
+
+    # Collect Pydantic / schema class fields in the same file
+    schema_fields: Dict[str, List[str]] = {}
+    for node in tree.body:
+        if isinstance(node, ast.ClassDef):
+            f_list: List[str] = []
+            for item in node.body:
+                if isinstance(item, ast.AnnAssign) and isinstance(item.target, ast.Name):
+                    f_list.append(item.target.id)
+                elif isinstance(item, ast.Assign):
+                    for t in item.targets:
+                        if isinstance(t, ast.Name) and not t.id.startswith("__"):
+                            f_list.append(t.id)
+            if f_list:
+                schema_fields[node.name] = f_list
+
+    for node in ast.walk(tree):
+        if not isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef)):
+            continue
+        for dec in node.decorator_list:
+            if not isinstance(dec, ast.Call):
+                continue
+            dec_obj = ""
+            dec_method = ""
+            if isinstance(dec.func, ast.Attribute):
+                if isinstance(dec.func.value, ast.Name):
+                    dec_obj = dec.func.value.id
+                dec_method = dec.func.attr.lower()
+
+            if dec_method not in ("get", "post", "put", "delete", "patch", "route", "api_view"):
+                continue
+
+            raw_path = "/"
+            if dec.args and isinstance(dec.args[0], ast.Constant) and isinstance(dec.args[0].value, str):
+                raw_path = dec.args[0].value
+
+            prefix = router_prefixes.get(dec_obj, "")
+            full_path = f"{prefix}{raw_path}" if prefix else raw_path
+            norm_path = _normalize_route_path(full_path)
+
+            methods = [dec_method.upper()] if dec_method != "route" else ["GET"]
+            response_model = ""
+            for kw in dec.keywords:
+                if kw.arg == "methods" and isinstance(kw.value, (ast.List, ast.Tuple)):
+                    methods = [
+                        elt.value.upper()
+                        for elt in kw.value.elts
+                        if isinstance(elt, ast.Constant) and isinstance(elt.value, str)
+                    ] or ["GET"]
+                elif kw.arg == "response_model":
+                    if isinstance(kw.value, ast.Name):
+                        response_model = kw.value.id
+
+            # Extract returned dictionary keys & attribute accesses inside handler
+            returned_fields: List[str] = list(schema_fields.get(response_model, []))
+            referenced_attrs: List[str] = []
+            for sub in ast.walk(node):
+                if isinstance(sub, ast.Dict):
+                    for k in sub.keys:
+                        if isinstance(k, ast.Constant) and isinstance(k.value, str):
+                            if k.value not in returned_fields:
+                                returned_fields.append(k.value)
+                elif isinstance(sub, ast.Attribute):
+                    referenced_attrs.append(sub.attr)
+
+            handler_id = f"py:{rel_file}:{node.name}"
+            for m in methods:
+                route_id = f"api:{m} {norm_path}"
+                route_entry = {
+                    "id": route_id,
+                    "method": m,
+                    "path": full_path,
+                    "normalized_path": norm_path,
+                    "handler": node.name,
+                    "handler_id": handler_id,
+                    "response_model": response_model,
+                    "response_fields": returned_fields,
+                    "referenced_attributes": list(dict.fromkeys(referenced_attrs)),
+                    "file": rel_file,
+                    "lineno": node.lineno,
+                }
+                routes.append(route_entry)
+                nodes.append({
+                    "id": route_id,
+                    "type": "api_route",
+                    "name": f"{m} {full_path}",
+                    "method": m,
+                    "path": full_path,
+                    "normalized_path": norm_path,
+                    "handler": node.name,
+                    "response_fields": returned_fields,
+                    "file": rel_file,
+                    "layer": "api",
+                })
+                edges.append({
+                    "source": handler_id,
+                    "target": route_id,
+                    "relation": "exposes_api_route",
+                })
+                for rf in returned_fields:
+                    field_node = f"api_field:{norm_path}.{rf}"
+                    nodes.append({
+                        "id": field_node,
+                        "type": "api_payload_field",
+                        "name": f"{m} {full_path} [{rf}]",
+                        "route_id": route_id,
+                        "field": rf,
+                        "file": rel_file,
+                        "layer": "api",
+                    })
+                    edges.append({
+                        "source": route_id,
+                        "target": field_node,
+                        "relation": "returns_field",
+                    })
+
+    return {"routes": routes, "nodes": nodes, "edges": edges}
+
+
+def parse_ts_js_api_routes(content: str, rel_file: str) -> Dict[str, Any]:
+    routes: List[Dict[str, Any]] = []
+    nodes: List[Dict[str, Any]] = []
+    edges: List[Dict[str, str]] = []
+
+    # 1. Express / Fastify style: app.get('/api/...', ...) or router.post('/api/...', ...)
+    express_pattern = re.compile(
+        r"\b(?:app|router|server)\.(get|post|put|delete|patch)\s*\(\s*[`\"']([^`\"']+)[`\"']",
+        re.IGNORECASE,
+    )
+    for match in express_pattern.finditer(content):
+        method = match.group(1).upper()
+        raw_path = match.group(2)
+        norm_path = _normalize_route_path(raw_path)
+        route_id = f"api:{method} {norm_path}"
+        routes.append({
+            "id": route_id,
+            "method": method,
+            "path": raw_path,
+            "normalized_path": norm_path,
+            "handler": f"{rel_file}:{method}",
+            "response_fields": [],
+            "file": rel_file,
+        })
+        nodes.append({
+            "id": route_id,
+            "type": "api_route",
+            "name": f"{method} {raw_path}",
+            "method": method,
+            "path": raw_path,
+            "normalized_path": norm_path,
+            "file": rel_file,
+            "layer": "api",
+        })
+        edges.append({
+            "source": f"ts:{rel_file}",
+            "target": route_id,
+            "relation": "exposes_api_route",
+        })
+
+    # 2. Next.js App Router: app/api/.../route.ts exporting async function GET/POST
+    norm_rel = rel_file.replace("\\", "/")
+    if "/api/" in norm_rel and os.path.basename(norm_rel).startswith("route."):
+        api_idx = norm_rel.find("/api/")
+        derived_path = os.path.dirname(norm_rel[api_idx:])
+        norm_path = _normalize_route_path(derived_path)
+        for m_match in re.finditer(r"export\s+(?:async\s+)?function\s+(GET|POST|PUT|DELETE|PATCH)\b", content):
+            method = m_match.group(1).upper()
+            route_id = f"api:{method} {norm_path}"
+            routes.append({
+                "id": route_id,
+                "method": method,
+                "path": derived_path,
+                "normalized_path": norm_path,
+                "handler": method,
+                "response_fields": [],
+                "file": rel_file,
+            })
+            nodes.append({
+                "id": route_id,
+                "type": "api_route",
+                "name": f"{method} {derived_path}",
+                "method": method,
+                "path": derived_path,
+                "normalized_path": norm_path,
+                "file": rel_file,
+                "layer": "api",
+            })
+            edges.append({
+                "source": f"ts:{rel_file}:{method}",
+                "target": route_id,
+                "relation": "exposes_api_route",
+            })
+
+    return {"routes": routes, "nodes": nodes, "edges": edges}
+
+
+def parse_openapi_spec(content: str, rel_file: str) -> Dict[str, Any]:
+    routes: List[Dict[str, Any]] = []
+    nodes: List[Dict[str, Any]] = []
+    edges: List[Dict[str, str]] = []
+
+    try:
+        if rel_file.endswith(".json"):
+            spec = json.loads(content)
+        else:
+            import yaml
+            spec = yaml.safe_load(content)
+    except Exception:
+        return {"routes": [], "nodes": [], "edges": []}
+
+    if not isinstance(spec, dict):
+        return {"routes": [], "nodes": [], "edges": []}
+
+    paths = spec.get("paths", {})
+    for raw_path, methods_dict in paths.items():
+        if not isinstance(methods_dict, dict):
+            continue
+        norm_path = _normalize_route_path(raw_path)
+        for m_key, op_info in methods_dict.items():
+            if m_key.upper() not in ("GET", "POST", "PUT", "DELETE", "PATCH"):
+                continue
+            method = m_key.upper()
+            route_id = f"api:{method} {norm_path}"
+            op_id = op_info.get("operationId", f"{method}_{norm_path}") if isinstance(op_info, dict) else f"{method}_{norm_path}"
+            routes.append({
+                "id": route_id,
+                "method": method,
+                "path": raw_path,
+                "normalized_path": norm_path,
+                "handler": op_id,
+                "response_fields": [],
+                "file": rel_file,
+            })
+            nodes.append({
+                "id": route_id,
+                "type": "api_route",
+                "name": f"{method} {raw_path}",
+                "method": method,
+                "path": raw_path,
+                "normalized_path": norm_path,
+                "file": rel_file,
+                "layer": "api",
+            })
+
+    return {"routes": routes, "nodes": nodes, "edges": edges}
+
+
+def parse_api_file(file_path: str, repo_root: str = "") -> Dict[str, Any]:
+    if not os.path.exists(file_path):
+        return {"error": f"API file not found: {file_path}", "routes": [], "nodes": [], "edges": []}
+    rel_file = os.path.relpath(file_path, repo_root).replace("\\", "/") if repo_root else os.path.basename(file_path)
+    try:
+        with open(file_path, "r", encoding="utf-8", errors="ignore") as f:
+            content = f.read()
+    except Exception as exc:
+        return {"error": str(exc), "routes": [], "nodes": [], "edges": []}
+
+    lower = file_path.lower()
+    if lower.endswith(".py"):
+        return parse_python_api_routes(content, rel_file)
+    elif lower.endswith((".ts", ".tsx", ".js", ".jsx")):
+        return parse_ts_js_api_routes(content, rel_file)
+    elif lower.endswith((".json", ".yaml", ".yml")):
+        return parse_openapi_spec(content, rel_file)
+    return {"routes": [], "nodes": [], "edges": []}
+