gitgalaxy 2.0.8__tar.gz → 2.1.0__tar.gz

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/.github/workflows/codeql.yml

@@ -24,10 +24,10 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         # If you have specific queries you want to run, you can specify them here.
@@ -35,6 +35,6 @@ jobs:
         queries: security-extended,security-and-quality
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:${{matrix.language}}"

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/.github/workflows/deploy-docs.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Required for git info/history (like last updated timestamps)
 
@@ -25,7 +25,7 @@ jobs:
           git config user.email 41898282+github-actions[bot]@users.noreply.github.com
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.x
 

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/.github/workflows/publish.yml

@@ -21,12 +21,12 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0  # <--- ADD THIS so it downloads your Git tags!
 
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: "3.10"
 

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/.gitignore

@@ -71,3 +71,17 @@ site/museum/
 museum/
 updated_results_expanded_story/
 updated_results_2/
+gitgalaxy/README gitgalaxy.md
+gitgalaxy/core/README core.md
+gitgalaxy/physics/README physics.md
+gitgalaxy/recorders/README recorder.md
+gitgalaxy/security/README security.md
+gitgalaxy/standards/README standards.md
+gitgalaxy/tools/README tools.md
+gitgalaxy/tools/ai_guardrails/README ai.md
+gitgalaxy/tools/cobol_to_cobol/README c2c.md
+gitgalaxy/tools/cobol_to_java/README c2j.md
+gitgalaxy/tools/compliance/README sbom.md
+gitgalaxy/tools/network_auditing/README network.md
+gitgalaxy/tools/supply_chain_security/README supply_chain.md
+gitgalaxy/tools/terabyte_log_scanning/README terabyte.md

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.0.8
+Version: 2.1.0
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io
@@ -173,15 +173,20 @@ Unindexed, tactical log analysis operating at 0.07 GB/sec. It streams massive da
 ### [AI Agent Guardrails & Codebase Protection](gitgalaxy/tools/ai_guardrails/)
 Specialized keyword sensors protecting both your application and your codebase. The AppSec Sensor detects weaponized LLM features (RCE funnels, exfiltration risks), while the Dev Agent Firewall evaluates token mass and blast radius to restrict autonomous coding agents from modifying dangerous over context token-draining files. Helps identify which files need to be chunked to reduce context overload.
 
-  ## Local Browser-Based 3D Codebase Visualization
+## Local Browser-Based 3D Codebase Visualization
 
 If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
 
 Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip` of your raw repository) directly into [GitGalaxy.io](https://gitgalaxy.io/). All rendering and scanning happens entirely in your browser's local memory.
 
-![GitGalaxy 3D structural mapping of API exposure and state flux risks in the Apollo 11 legacy codebase](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/apollo-11_state_flux.png)
+### 🔭 Watch GitGalaxy in Action
 
-![GitGalaxy native SQLite3 database schema for AST-free enterprise codebase mapping and cybersecurity auditing](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/sqlite_overview.png)
+**Mapping 3.2 Million Lines of C++ in 11 Seconds | OpenCV** [![OpenCV Demo](https://img.youtube.com/vi/3ScQCSUBdZw/maxresdefault.jpg)](https://youtu.be/3ScQCSUBdZw)
+
+**Visualizing Architectural Risk | Ruby on Rails** [![Ruby on Rails Demo](https://img.youtube.com/vi/3ScQCSUBdZw/maxresdefault.jpg)](https://youtu.be/3ScQCSUBdZw) 
+*(Note: Replace the video IDs in this link with your actual Rails video ID)*
+
+![GitGalaxy Meta Visualizer 3D star map rendering complex software repository structures and K-means clustering archetypes in the browser](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/metavisualizer.png)
 
 ## Zero-Trust Data Security
 
@@ -191,10 +196,6 @@ Your code never leaves your machine. GitGalaxy performs 100% of its scanning and
 * **Ephemeral Memory Processing:** Repositories are unpacked into a volatile memory buffer (RAM) and are automatically purged when the browser tab is closed.
 * **Privacy-by-Design:** Even when using the web-based viewer, the data remains behind the user's firewall at all times.
 
-![GitGalaxy interactive WebGPU data HUD displaying real-time software architecture metrics, forensic analysis, and file-level risk telemetry](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/data_hud.png)
-
-![GitGalaxy Meta Visualizer 3D star map rendering complex software repository structures and K-means clustering archetypes in the browser](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/metavisualizer.png)
-
 ## License & Copyright
 
 Copyright (c) 2026 Joe Esquibel

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/README.md

@@ -150,15 +150,20 @@ Unindexed, tactical log analysis operating at 0.07 GB/sec. It streams massive da
 ### [AI Agent Guardrails & Codebase Protection](gitgalaxy/tools/ai_guardrails/)
 Specialized keyword sensors protecting both your application and your codebase. The AppSec Sensor detects weaponized LLM features (RCE funnels, exfiltration risks), while the Dev Agent Firewall evaluates token mass and blast radius to restrict autonomous coding agents from modifying dangerous over context token-draining files. Helps identify which files need to be chunked to reduce context overload.
 
-  ## Local Browser-Based 3D Codebase Visualization
+## Local Browser-Based 3D Codebase Visualization
 
 If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
 
 Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip` of your raw repository) directly into [GitGalaxy.io](https://gitgalaxy.io/). All rendering and scanning happens entirely in your browser's local memory.
 
-![GitGalaxy 3D structural mapping of API exposure and state flux risks in the Apollo 11 legacy codebase](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/apollo-11_state_flux.png)
+### 🔭 Watch GitGalaxy in Action
 
-![GitGalaxy native SQLite3 database schema for AST-free enterprise codebase mapping and cybersecurity auditing](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/sqlite_overview.png)
+**Mapping 3.2 Million Lines of C++ in 11 Seconds | OpenCV** [![OpenCV Demo](https://img.youtube.com/vi/3ScQCSUBdZw/maxresdefault.jpg)](https://youtu.be/3ScQCSUBdZw)
+
+**Visualizing Architectural Risk | Ruby on Rails** [![Ruby on Rails Demo](https://img.youtube.com/vi/3ScQCSUBdZw/maxresdefault.jpg)](https://youtu.be/3ScQCSUBdZw) 
+*(Note: Replace the video IDs in this link with your actual Rails video ID)*
+
+![GitGalaxy Meta Visualizer 3D star map rendering complex software repository structures and K-means clustering archetypes in the browser](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/metavisualizer.png)
 
 ## Zero-Trust Data Security
 
@@ -168,10 +173,6 @@ Your code never leaves your machine. GitGalaxy performs 100% of its scanning and
 * **Ephemeral Memory Processing:** Repositories are unpacked into a volatile memory buffer (RAM) and are automatically purged when the browser tab is closed.
 * **Privacy-by-Design:** Even when using the web-based viewer, the data remains behind the user's firewall at all times.
 
-![GitGalaxy interactive WebGPU data HUD displaying real-time software architecture metrics, forensic analysis, and file-level risk telemetry](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/data_hud.png)
-
-![GitGalaxy Meta Visualizer 3D star map rendering complex software repository structures and K-means clustering archetypes in the browser](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/metavisualizer.png)
-
 ## License & Copyright
 
 Copyright (c) 2026 Joe Esquibel

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/action.yml

@@ -32,7 +32,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: '3.10'
 

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/core/network_risk_sensor.py

@@ -275,16 +275,16 @@ class NetworkRiskSensor:
             
             if "telemetry" not in s: s["telemetry"] = {}
             s["telemetry"]["network_metrics"] = {
-                "pagerank_score": None,
-                "normalized_blast_radius": None, 
-                "betweenness_score": None,
-                "closeness_score": None,
+                "pagerank_score": 0.0,
+                "normalized_blast_radius": 0.0, 
+                "betweenness_score": 0.0,
+                "closeness_score": 0.0,
                 "in_degree": in_d,
                 "out_degree": out_d,
                 "producer_ratio": round(producer_ratio, 3),
                 "ecosystem_role": ecosystem_role,
-                "systemic_threat_vector": None,
-                "is_algorithmic_bottleneck": None
+                "systemic_threat_vector": [],
+                "is_algorithmic_bottleneck": False
             }
             s["telemetry"]["popularity"] = in_d
             

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/galaxyscope.py

@@ -371,20 +371,38 @@ def _process_file_worker(rel_path: str) -> Dict[str, Any]:
             if is_file_profiling: phase_times["5.5_Security_Lens"] = time.perf_counter() - t_security
             # ----------------------------------------------------
             
-            # Phase 6: Raw Imports
+            # Phase 6: Raw Imports & Named Tokens
             t_imports = time.perf_counter()
             raw_imports = set()
+            named_tokens = set() # <--- NEW: Initialize token tracker
+            
             if not is_inert:
+                # 1. Extract raw file dependencies
                 import_regex = lang_defs.get(lang_id, {}).get("rules", {}).get("_dependency_capture")
                 if import_regex:
                     try:
                         for match in import_regex.finditer(content_buffer):
-                            # Grab the first non-empty capture group (the actual dependency name)
                             extracted_path = next((g for g in match.groups() if g), None)
                             if extracted_path:
                                 raw_imports.add(extracted_path)
                     except Exception:
                         pass
+                        
+                # 2. ---> NEW: Extract Named Imports (TS/JS/Python) <---
+                try:
+                    # Captures 'import { a, b }' and 'from x import a, b'
+                    import_blocks = re.findall(r'(?:import\s+\{([^}]+)\}|from\s+[\w.]+\s+import\s+([^({\n]+))', content_buffer)
+                    for block in import_blocks:
+                        for match in block:
+                            if match:
+                                # Split by comma, handle 'as' aliases
+                                for token in match.split(','):
+                                    clean_token = token.split(' as ')[0].strip()
+                                    if clean_token:
+                                        named_tokens.add(clean_token)
+                except Exception:
+                    pass
+                    
             if is_file_profiling: phase_times["6_Import_Regex"] = time.perf_counter() - t_imports
 
             # Phase 7: Tokenization & Census
@@ -429,7 +447,8 @@ def _process_file_worker(rel_path: str) -> Dict[str, Any]:
             "prior_lock": has_prior,
             "coding_loc": refraction["coding_loc"],
             "doc_loc": refraction["doc_loc"],
-            "raw_imports": list(raw_imports),          
+            "raw_imports": list(raw_imports),
+            "named_tokens": list(named_tokens), # <--- NEW: Send tokens to Orchestrator
             "popularity_hits": popularity_hits,
             "regex_telemetry": logic_data.pop("regex_telemetry", {}) if is_profiling else {}
         }
@@ -1247,6 +1266,15 @@ class Orchestrator:
         # --- NEW: CALCULATE THE GLOBAL TEST UMBRELLA ---
         total_loc = 0
         test_loc = 0
+        
+        # ==============================================================
+        # ---> NEW: BUILD GLOBAL TOKEN TRACKER <---
+        # ==============================================================
+        self.used_tokens = set()
+        for meta in self.cryolink.values():
+            self.used_tokens.update(meta.get("named_tokens", []))
+        # ==============================================================
+
         for rel_path, meta in self.cryolink.items():
             loc = meta.get("coding_loc", 0)
             total_loc += loc
@@ -1273,6 +1301,25 @@ class Orchestrator:
             meta["metadata"]["folder_dominant_lang"] = folder_dominant_langs.get(folder, meta.get("lang_id", "unknown"))
             # -----------------------------------------------------------------
             
+            # =================================================================
+            # ---> THE NETWORK GRAVITY FIX <---
+            # If the file is imported by the ecosystem, its "orphans" are actually its API.
+            # =================================================================
+            popularity = self.popularity_scores.get(rel_path, 0)
+            if popularity > 0 and "equations" in meta:
+                orphans = meta["equations"].get("design_slop_orphans", 0)
+                if orphans > 0:
+                    # 1. Convert the dead weight into API Exposure
+                    meta["equations"]["api"] = meta["equations"].get("api", 0) + orphans
+                    # 2. Wipe the Technical Debt
+                    meta["equations"]["design_slop_orphans"] = 0
+                    
+                    # 3. Heal the function metadata
+                    for func in meta.get("functions", []):
+                        if func.get("usage_status") == 1:
+                            func["usage_status"] = 0
+            # =================================================================
+            
             meta["temporal_telemetry"] = self.chronometer.get_temporal_signals(rel_path)
             meta["authors"] = meta["temporal_telemetry"].get("authors", {})
             stem = Path(rel_path).stem.lower()

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/physics/signal_processor.py

@@ -837,13 +837,13 @@ class SignalProcessor:
             # ---> N-DIMENSIONAL AI NETWORK POSTURE <---
             if ai_files:
                 # Find the most heavily relied-upon AI node in the graph
-                ai_files.sort(key=lambda x: x.get("telemetry", {}).get("network_metrics", {}).get("pagerank_score", 0.0), reverse=True)
+                ai_files.sort(key=lambda x: x.get("telemetry", {}).get("network_metrics", {}).get("pagerank_score") or 0.0, reverse=True)
                 primary_ai_node = ai_files[0]
                 net_mets = primary_ai_node.get("telemetry", {}).get("network_metrics", {})
                 
                 role = net_mets.get("ecosystem_role", "Unknown")
-                pr = net_mets.get("normalized_blast_radius", 0.0)
-                btw = net_mets.get("betweenness_score", 0.0)
+                pr = net_mets.get("normalized_blast_radius") or 0.0
+                btw = net_mets.get("betweenness_score") or 0.0
                 
                 ai_topology["insights"].append(f"Structural Posture: The primary AI integration acts as a '{role}' within the repository.")
                 
@@ -1675,9 +1675,9 @@ class SignalProcessor:
             rv = file_data.get("risk_vector", [])
             p = file_data.get("path", "")
             
-            btw = net.get("betweenness_score", 0.0)
-            close = net.get("closeness_score", 0.0)
-            pr = net.get("normalized_blast_radius", 0.0)
+            btw = net.get("betweenness_score") or 0.0
+            close = net.get("closeness_score") or 0.0
+            pr = net.get("normalized_blast_radius") or 0.0
             
             flux_risk = rv[flux_idx] if flux_idx >= 0 and len(rv) > flux_idx else 0.0
             err_risk = rv[err_idx] if err_idx >= 0 and len(rv) > err_idx else 0.0

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/standards/language_lens.py

@@ -202,6 +202,13 @@ class LanguageDetector:
         
         # We explicitly add .txt and .log to the prose override list
         if ext in {'.md', '.mdx', '.rst', '.rtf', '.txt', '.log'}:
+            # ---> THE FIX: Catch disguised payloads before the early exit! <---
+            shebang_lang = self._tier_2_fingerprint_check(content_sample, ext)
+            if shebang_lang and shebang_lang != "undeterminable":
+                self.logger.warning(f"[{name}] IDENTITY CRISIS: Prose Ext '{ext}' contradicts Shebang '{shebang_lang}'")
+                result["anomaly_flags"].append(f"Identity Masking: Prose Extension ({ext}) vs Shebang ({shebang_lang})")
+                return self._forge_result("undeterminable", 0.0, 5, f"Identity Conflict ({ext} != {shebang_lang})", result, content_sample)
+                
             target_id = "markdown" if ext in {'.md', '.mdx'} else "plaintext"
             return self._forge_result(target_id, self.thresholds.get("PROSE_CONFIDENCE", 0.95), 1, f"Prose Extension ({ext})", result, content_sample)
         

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/standards/language_standards.py

@@ -1242,7 +1242,7 @@ LANGUAGE_DEFINITIONS = {
             # ONLY executable logic blocks. EXCLUDES types/classes. 
             #
             # =====================================================================
-            # [LLM CONTEXT: C# "IRON WALL" FUNCTION EXTRACTOR & REDOS SHIELD]
+            # [ CONTEXT: C# "IRON WALL" FUNCTION EXTRACTOR & REDOS SHIELD]
             # PURPOSE: Anchors executable logic blocks (methods) in C# up to C# 14.
             # VULNERABILITY: C# allows massive return types (e.g., nested tuples), 
             #   generics, and explicit interface implementations. If spaces are allowed 
@@ -2007,7 +2007,7 @@ LANGUAGE_DEFINITIONS = {
             ),
             "func_start": re.compile(
                 # =====================================================================
-                # [LLM CONTEXT: C++ FUNCTION AST EXTRACTOR & REDOS SHIELD]
+                # [ CONTEXT: C++ FUNCTION AST EXTRACTOR & REDOS SHIELD]
                 # PURPOSE: Anchors executable logic blocks (methods/functions) in C++.
                 # VULNERABILITY: C++ allows multi-line function signatures and complex 
                 #   return types (e.g., `std::vector<int> \n myFunc()`). In files with 
@@ -4857,7 +4857,7 @@ LANGUAGE_DEFINITIONS = {
             ),
             # 4. func_start (The Satellite Spawner)
             # =====================================================================
-            # [LLM CONTEXT: FORTRAN FUNCTION AST EXTRACTOR & REDOS SHIELD]
+            # [ CONTEXT: FORTRAN FUNCTION AST EXTRACTOR & REDOS SHIELD]
             # PURPOSE: Anchors executable logic blocks (Program, Subroutine, Function, Entry) 
             #   across 60+ years of Fortran dialects (F77 through F2018).
             # VULNERABILITY: Fortran allows extreme signature variability: prefix stacking 
@@ -6535,7 +6535,7 @@ LANGUAGE_DEFINITIONS = {
             ),
             # 4. func_start: Satellite Spawner. Anchors logic blocks (Paragraphs and Sections).
             # =====================================================================
-            # [LLM CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD]
+            # [ CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD]
             # PURPOSE: Anchors executable logic blocks (Paragraphs and Sections) in COBOL.
             # VULNERABILITY: COBOL spans 60 years of formatting rules (Fixed vs Free format).
             #   Without strict column boundaries, standard verbs or data definitions 

{gitgalaxy-2.0.8 → gitgalaxy-2.1.0}/gitgalaxy/tools/cobol_to_java/cobol_to_java_build_forge.py

@@ -72,6 +72,12 @@ def generate_pom_xml(group_id: str, artifact_id: str) -> str:
             <artifactId>spring-boot-starter-test</artifactId>
             <scope>test</scope>
         </dependency>
+        
+        <dependency>
+            <groupId>com.h2database</groupId>
+            <artifactId>h2</artifactId>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
     
     <build>

gitgalaxy-2.1.0/gitgalaxy/tools/cobol_to_java/cobol_to_java_test_forge.py

@@ -0,0 +1,104 @@
+#!/usr/bin/env python3
+# ==============================================================================
+# GitGalaxy Spoke: Java Spring Test Forge (Phase 3)
+# Purpose: Auto-generates JUnit 5 and Spring Boot integration tests to 
+#          mathematically prove the translated architecture compiles and runs.
+# ==============================================================================
+import argparse
+import sys
+import json
+from pathlib import Path
+
+def generate_context_test(package_name: str, class_name: str) -> str:
+    """Forges a @SpringBootTest to ensure the entire dependency injection context loads."""
+    return f"""package {package_name};
+
+import org.junit.jupiter.api.Test;
+import org.springframework.boot.test.context.SpringBootTest;
+
+@SpringBootTest
+class {class_name}ApplicationTests {{
+
+    @Test
+    void contextLoads() {{
+        // If the application.yml is broken or a @Service is missing, 
+        // this test will fail immediately, catching structural regressions.
+    }}
+}}
+"""
+
+def generate_controller_test(package_name: str, class_name: str, endpoint_path: str) -> str:
+    """Forges a @WebMvcTest to verify REST API mappings without booting the full server."""
+    service_var = class_name[0].lower() + class_name[1:]
+    
+    return f"""package {package_name}.controller;
+
+import {package_name}.service.{class_name}Service;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.servlet.WebMvcTest;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.test.web.servlet.MockMvc;
+
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+@WebMvcTest({class_name}Controller.class)
+class {class_name}ControllerTest {{
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    @MockBean
+    private {class_name}Service {service_var}Service;
+
+    @Test
+    void testEndpointRouting() throws Exception {{
+        // Verifies the @RequestMapping and @PostMapping forged by the API Contract script
+        mockMvc.perform(post("/api/v1/{endpoint_path}/execute")
+                .contentType("application/json")
+                .content("{{}}")) // Empty JSON payload for structural routing test
+               .andExpect(status().isOk()); // Or isNoContent() based on outputs
+    }}
+}}
+"""
+
+def main():
+    parser = argparse.ArgumentParser(description="GitGalaxy Java Test Forge")
+    parser.add_argument("ir_file", help="Path to the GitGalaxy _ir.json state dump")
+    parser.add_argument("--pkg", default="com.gitgalaxy.modernized", help="Base Java package name")
+    args = parser.parse_args()
+
+    ir_path = Path(args.ir_file).resolve()
+    if not ir_path.exists():
+        sys.exit(1)
+
+    try:
+        ir_state = json.loads(ir_path.read_text(encoding='utf-8'))
+        
+        # Determine class names
+        prog_id = ir_state.get("metadata", {}).get("file_name", "Unknown").split('.')[0]
+        class_name = "".join(word.capitalize() for word in prog_id.split('-'))
+        endpoint_path = prog_id.lower()
+        
+        # Target output directories (Assuming standard Maven layout)
+        test_dir = ir_path.parent / "src" / "test" / "java" / args.pkg.replace('.', '/')
+        test_dir.mkdir(parents=True, exist_ok=True)
+        
+        # 1. Forge Context Test
+        context_code = generate_context_test(args.pkg, class_name)
+        (test_dir / f"{class_name}ApplicationTests.java").write_text(context_code, encoding='utf-8')
+        
+        # 2. Forge Controller Test
+        controller_test_dir = test_dir / "controller"
+        controller_test_dir.mkdir(exist_ok=True)
+        controller_code = generate_controller_test(args.pkg, class_name, endpoint_path)
+        (controller_test_dir / f"{class_name}ControllerTest.java").write_text(controller_code, encoding='utf-8')
+
+        print(f"🧪 Spring Boot Test Suite Forged for {class_name}")
+
+    except Exception as e:
+        print(f"Error forging Java tests: {e}")
+
+if __name__ == "__main__":
+    main()

gitgalaxy-2.1.0/gitgalaxy/tools/terabyte_log_scanning/README.md

@@ -0,0 +1,109 @@
+# GitGalaxy: High-Velocity Log Scanning & PII Detection
+
+[![Velocity](https://img.shields.io/badge/Velocity-2%2B_GB%2Fmin-00C957.svg)](#)
+[![Scale](https://img.shields.io/badge/Tested-10GB%2B_Files-00BFFF.svg)](#)
+[![Architecture](https://img.shields.io/badge/Architecture-Single__Pass_Stream-8A2BE2.svg)](#)
+
+During an active incident response or catastrophic data breach, standard tools fail. Basic `grep` lacks time-series context. Modern SIEMs (Splunk, ElasticSearch) require you to ingest and index data first—taking hours or days for massive database dumps.
+
+This suite provides a tactical, pipeline-ready solution: **ultra-high-velocity, unindexed binary streaming.** Running at over 2 GB per minute, our custom stream-processing engine reads data continuously without loading massive files into RAM. Perfect for active breach triage or automated CI/CD pipeline sanitization.
+
+---
+
+## Part 1: The PII Data Leak Hunter (`pii-leak-hunter`)
+[📖 Official Documentation](https://squid-protocol.github.io/gitgalaxy/04-06-pii-leak-hunter/)
+
+A specialized incident response tool. Designed to find hemorrhaging Personally Identifiable Information inside massive, raw data dumps.
+
+**How it works:**
+* **Binary-Level Regex:** Compiles structural patterns to raw bytes. Extreme CPU efficiency.
+* **Automated Masking:** Redacts toxic payloads before writing to safe evidence logs.
+* **Exfiltration Histograms:** Generates ASCII charts. Pinpoints exact breach minutes.
+
+**Performance Showcase:** Streamed a raw **1.00 GB compromised log file**. Completed in **25.72 seconds**. Detected and actively masked over **420,000 sensitive records**. Immediately exposed two distinct attack vectors (Customer data at 14:00, AWS Keys at 09:00).
+
+### Targeted Patterns
+The stream engine currently bypasses standard indexing to hunt and actively mask:
+* **VISA** (Credit Cards)
+* **MASTERCARD** (Credit Cards)
+* **SSN** (US Social Security Numbers)
+* **AWS_KEY** (AKIA, ASIA, AGPA, etc.)
+
+### Quickstart & Integration
+**Local CLI Execution:**
+By default, the tool saves the masked evidence log in the same directory as the target.
+```bash
+pii-leak-hunter /path/to/massive_database_dump.sql
+```
+
+**Using the `--out` Flag:**
+Route the safe, masked telemetry to a secure directory for analysis. 
+```bash
+pii-leak-hunter /path/to/production.log --out /var/secure_logs/
+```
+
+**GitHub Actions CI/CD Integration:**
+Automate sanitization before archiving logs.
+```yaml
+      - name: Run PII Leak Hunter
+        uses: squid-protocol/gitgalaxy@main
+        with:
+          tool: 'pii-leak-hunter'
+          target: './logs/production_dump.sql'
+          args: '--out ./sanitized_logs/'
+```
+
+---
+
+## Part 2: The Terabyte Log Scanner (`terabyte-log-scanner`)
+[📖 Official Documentation](https://squid-protocol.github.io/gitgalaxy/04-07-terabyte-log-scanner/)
+
+A runtime execution tracer. Connects static codebase architecture to physical runtime reality. Parses massive mainframe SMF logs or distributed traces to prove what code actually executes.
+
+**How it works:**
+* **Single-Pass Streaming:** Never loads the full file into RAM.
+* **Execution Verification:** Proves exact runtime execution frequencies.
+* **Zero-Hit Detection:** Mathematically proves if compiled legacy code is abandoned.
+* **Dynamic Sidecars:** Outputs telemetry JSON for 3D WebGPU traffic heatmaps.
+
+**Performance Showcase:**
+Ran against a raw **2.1GB production stream log**. Completed single-pass scan in **30.07 seconds**. Dynamically scaled ASCII histograms instantly exposed a massive brute-force anomaly isolated from background noise:
+
+```text
+ === TIME-SERIES: ERROR ===
+ (Filtering to Top 15 Highest Volume Spikes)
+ [2026-04-16 14:00] ███████████████████████████████████████ (5,759 hits)  <-- ANOMALY SPIKE
+ [2026-04-27 14:00] ███████████████████████████████████████ (5,753 hits)  <-- ANOMALY SPIKE
+ [2026-05-02 14:00] ███████████████████████████████████████ (5,718 hits)  <-- ANOMALY SPIKE
+```
+
+### Input Methods: Manual vs. Automated
+The tool requires one of two input methods to function. It will not run without a target list.
+
+**1. Manual Mode (`-k` or `--keywords`)**
+Best for quick, grep-style tactical hunts. Supply a space-separated list of targets.
+```bash
+terabyte-log-scanner /path/to/production.log -k ERROR TIMEOUT "DATA EXCEPTION"
+```
+
+**2. Automated Pipeline Mode (`--input_state`)**
+Best for CI/CD modernization pipelines. Supply a GitGalaxy Intermediate Representation (IR) JSON file. The script will automatically extract the targets from the `known_programs` array to hunt for dead code.
+```bash
+terabyte-log-scanner /path/to/production.log --input_state ../core/ir_state.json
+```
+
+*Required JSON Schema for Automated Mode:*
+```json
+{
+  "analysis": {
+    "known_programs": ["PROGRAM1", "PROGRAM2"]
+  }
+}
+```
+
+---
+### 🌌 Powered by the blAST Engine (Bypassing LLMs and ASTs)
+This suite is driven by our custom deterministic heuristics engine. It processes multi-dimensional data at extreme velocity without requiring rigid ASTs or hallucinating LLMs. 
+
+* 📖 **[The blAST Paradigm (ASTs vs LLMs)](https://squid-protocol.github.io/gitgalaxy/01-03-the-blast-paradigm/)**
+* 🪐 **[Return to the Main GitGalaxy Hub](https://github.com/squid-protocol/gitgalaxy)**