patchi 0.7.5__py3-none-any.whl

patchi/core/config.py

@@ -0,0 +1,311 @@
+"""
+Config system for Patchi.
+
+Reads and writes .patchi/config.json in the current project directory.
+All other modules import config through here — never read the JSON directly.
+"""
+
+import json
+from pathlib import Path
+from typing import Any
+
+from patchi.core.constants import (
+    CONFIG_FILE,
+    MEMORY_DIR,
+    MEMORY_FILES,
+    PATCHI_DIR,
+    QUEUE_FILE,
+    SNAPSHOT_DIR,
+    DeviceTier,
+    MemoryCategory,
+    Mode,
+    QueueMode,
+    RestrictionType,
+)
+
+# ── Default config ─────────────────────────────────────────────────────────────
+
+
+def _default_config() -> dict:
+    return {
+        "mode": Mode.CONFIRM.value,
+        "queue_mode": QueueMode.SINGLE.value,
+        "device_tier": DeviceTier.MID.value,
+        "fps": 60,
+        "theme": "dark",
+        "restrictions": [],
+        "ignore_paths": ["node_modules", ".git", "__pycache__", ".patchi"],
+        "scan_depth": None,
+        "brain_freshness_any_change": True,
+        "watch_mode": False,
+        "risk_threshold": 30,
+        "max_fixes_per_cycle": None,
+        "dead_code_confirmation": "follow_mode",
+        "require_blast_radius_on_high_risk": True,
+        "show_confidence_scores": True,
+        "ai": {
+            "local_model_path": None,
+            "local_model_name": None,
+            "keys": [],
+            "cost_limit_enabled": False,
+            "cost_limit": None,
+            "cost_limit_per_run": None,
+        },
+        "notifications": [],
+        "quiet_hours": {
+            "enabled": False,
+            "start": "22:00",
+            "end": "08:00",
+            "timezone": "UTC",
+        },
+        "digest_frequency": "daily",
+        "queue_max_depth": 50,
+        "scan_bus": {"enabled": True, "shards": 4},
+        "max_scanner_agents": 8,
+        "max_security_agents": 19,
+        "max_test_agents": 3,
+        "onboarding_complete": False,
+        "pipeline": {
+            "enabled": True,
+            "interceptor": {
+                "enabled": True,
+                "mode": "asgi",
+                "block_threshold": 0.7,
+                "rate_limit": 100,
+                "exclude_paths": ["/health", "/metrics", "/static", "/favicon.ico"],
+            },
+            "sigma_rules_dir": ".patchi/sigma",
+        },
+    }
+
+
+# ── Patchi root detection ──────────────────────────────────────────────────────
+
+
+def find_project_root(start: Path | None = None) -> Path | None:
+    """
+    Walk up from start (default: cwd) looking for a .patchi directory.
+    Returns the project root Path if found, else None.
+    """
+    current = start or Path.cwd()
+    while True:
+        if (current / PATCHI_DIR).is_dir():
+            return current
+        parent = current.parent
+        if parent == current:
+            return None
+        current = parent
+
+
+def require_project_root() -> Path:
+    """Like find_project_root but raises if not found."""
+    root = find_project_root()
+    if root is None:
+        raise RuntimeError("No .patchi directory found. Run 'p init' in your project folder first.")
+    return root
+
+
+# ── Low-level JSON helpers ─────────────────────────────────────────────────────
+
+
+def _config_path(root: Path) -> Path:
+    return root / CONFIG_FILE
+
+
+def _read_raw(root: Path) -> dict:
+    path = _config_path(root)
+    if not path.exists():
+        return {}
+    with path.open("r", encoding="utf-8") as f:
+        return json.load(f)
+
+
+def _write_raw(root: Path, data: dict) -> None:
+    path = _config_path(root)
+    path.parent.mkdir(parents=True, exist_ok=True)
+    with path.open("w", encoding="utf-8") as f:
+        json.dump(data, f, indent=2)
+
+
+# ── Public API ─────────────────────────────────────────────────────────────────
+
+
+def init_project(root: Path, device_tier: DeviceTier | None = None) -> dict:
+    """
+    Create the full .patchi directory structure and write default config.
+    Safe to call on an already-initialised project (merges, does not overwrite).
+    Returns the resulting config dict.
+    """
+    # Directories
+    for directory in [
+        root / PATCHI_DIR,
+        root / MEMORY_DIR,
+        root / SNAPSHOT_DIR,
+    ]:
+        directory.mkdir(parents=True, exist_ok=True)
+
+    # Memory files — touch if missing
+    for category, rel_path in MEMORY_FILES.items():
+        mem_path = root / rel_path
+        if not mem_path.exists():
+            _write_json(mem_path, _default_memory(category))
+
+    # Queue file
+    queue_path = root / QUEUE_FILE
+    if not queue_path.exists():
+        _write_json(queue_path, {"items": [], "paused": False})
+
+    # Config — merge defaults with existing
+    existing = _read_raw(root)
+    defaults = _default_config()
+    if device_tier:
+        defaults["device_tier"] = device_tier.value
+        defaults["fps"] = device_tier.default_fps()
+    merged = {**defaults, **existing}
+    _write_raw(root, merged)
+
+    return merged
+
+
+def _default_memory(category: MemoryCategory) -> dict | list:
+    empties: dict[MemoryCategory, dict | list] = {
+        MemoryCategory.BRAIN: {},
+        MemoryCategory.PATCHES: [],
+        MemoryCategory.FAILED: [],
+        MemoryCategory.SCANS: {},
+        MemoryCategory.ISSUES: [],
+        MemoryCategory.RESTRICTIONS: [],
+        MemoryCategory.TOKENS: [],
+        MemoryCategory.LAYERS: {},
+        MemoryCategory.CHARTER: {},
+    }
+    return empties[category]
+
+
+def _write_json(path: Path, data: Any) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    with path.open("w", encoding="utf-8") as f:
+        json.dump(data, f, indent=2)
+
+
+def load(root: Path | None = None) -> dict:
+    """Load config for the current project. Merges with defaults for forward compat."""
+    root = root or require_project_root()
+    raw = _read_raw(root)
+    return {**_default_config(), **raw}
+
+
+def save(config: dict, root: Path | None = None) -> None:
+    """Write config back to disk."""
+    root = root or require_project_root()
+    _write_raw(root, config)
+
+
+def get(key: str, root: Path | None = None) -> Any:
+    """Get a single top-level config value."""
+    return load(root)[key]
+
+
+def set_value(key: str, value: Any, root: Path | None = None) -> None:
+    """Update a single config key and save."""
+    root = root or require_project_root()
+    config = load(root)
+    # Support dot-notation for nested keys (e.g. "ai.local_model_name")
+    parts = key.split(".")
+    node = config
+    for part in parts[:-1]:
+        node = node.setdefault(part, {})
+    node[parts[-1]] = value
+    save(config, root)
+
+
+# ── Mode helpers ───────────────────────────────────────────────────────────────
+
+
+def get_mode(root: Path | None = None) -> Mode:
+    return Mode(get("mode", root))
+
+
+def set_mode(mode: Mode, root: Path | None = None) -> None:
+    set_value("mode", mode.value, root)
+
+
+def get_queue_mode(root: Path | None = None) -> QueueMode:
+    return QueueMode(get("queue_mode", root))
+
+
+def set_queue_mode(mode: QueueMode, root: Path | None = None) -> None:
+    set_value("queue_mode", mode.value, root)
+
+
+# ── Restriction helpers ────────────────────────────────────────────────────────
+
+
+def get_restrictions(root: Path | None = None) -> list[dict]:
+    return get("restrictions", root)
+
+
+def add_restriction(
+    path: str, rtype: RestrictionType, reason: str = "", root: Path | None = None
+) -> None:
+    root = root or require_project_root()
+    config = load(root)
+    # No duplicates
+    existing_paths = {r["path"] for r in config["restrictions"]}
+    if path not in existing_paths:
+        config["restrictions"].append(
+            {
+                "path": path,
+                "type": rtype.value,
+                "reason": reason,
+                "enabled": True,
+            }
+        )
+        save(config, root)
+
+
+def remove_restriction(path: str, root: Path | None = None) -> bool:
+    root = root or require_project_root()
+    config = load(root)
+    before = len(config["restrictions"])
+    config["restrictions"] = [r for r in config["restrictions"] if r["path"] != path]
+    save(config, root)
+    return len(config["restrictions"]) < before
+
+
+def toggle_restriction(path: str, enabled: bool, root: Path | None = None) -> bool:
+    root = root or require_project_root()
+    config = load(root)
+    for r in config["restrictions"]:
+        if r["path"] == path:
+            r["enabled"] = enabled
+            save(config, root)
+            return True
+    return False
+
+
+# ── Dev access token helpers ───────────────────────────────────────────────────
+
+
+def add_dev_token(name: str, env_var: str, root: Path | None = None) -> None:
+    root = root or require_project_root()
+    config = load(root)
+    tokens = config.get("dev_tokens", [])
+    if not any(t["name"] == name for t in tokens):
+        tokens.append({"name": name, "env_var": env_var})
+        config["dev_tokens"] = tokens
+        save(config, root)
+
+
+def remove_dev_token(name: str, root: Path | None = None) -> bool:
+    root = root or require_project_root()
+    config = load(root)
+    tokens = config.get("dev_tokens", [])
+    before = len(tokens)
+    config["dev_tokens"] = [t for t in tokens if t["name"] != name]
+    save(config, root)
+    return len(config["dev_tokens"]) < before
+
+
+def list_dev_tokens(root: Path | None = None) -> list[dict]:
+    return load(root).get("dev_tokens", [])

patchi/core/constants.py

@@ -0,0 +1,245 @@
+"""
+Shared constants for Patchi.
+Every magic string lives here. Nothing is scattered across modules.
+"""
+
+import os
+from enum import StrEnum
+
+
+def is_offline() -> bool:
+    """True when PATCHI_OFFLINE=1 (set by `p scan --offline` / CI gate).
+
+    Offline mode is a hard contract: NO network calls of any kind — not just
+    AI provider calls. Network-probing agents (CVE/OSV lookups, live app
+    crawling, runtime validation) must honor this or `--offline` silently
+    leaks traffic and hangs on blocked egress.
+    """
+    return bool(os.environ.get("PATCHI_OFFLINE"))
+
+
+# ── Modes ─────────────────────────────────────────────────────────────────────
+
+
+class Mode(StrEnum):
+    CONFIRM = "confirm"  # every action requires approval
+    AUTO = "auto"  # safe fixes auto-apply, risky ones ask
+    AUTOPILOT = "autopilot"  # full trust, Patchi decides everything
+
+    def label(self) -> str:
+        return self.value.upper()
+
+    def color(self) -> str:
+        return {"confirm": "cyan", "auto": "yellow", "autopilot": "green"}[self.value]
+
+
+# ── Queue modes ────────────────────────────────────────────────────────────────
+
+
+class QueueMode(StrEnum):
+    SINGLE = "single"  # one task at a time
+    MULTI = "multi"  # auto-scaled parallel
+    OFF = "off"  # full speed, no queue
+
+    def description(self) -> str:
+        return {
+            "single": "One task at a time. Lowest resource use. Safe on any device.",
+            "multi": "Parallel tasks. Auto-scaled to your hardware.",
+            "off": "Full speed. Everything runs immediately.",
+        }[self.value]
+
+
+# ── Queue item states ──────────────────────────────────────────────────────────
+
+
+class QueueItemState(StrEnum):
+    WAITING = "waiting"
+    ACTIVE = "active"
+    DONE = "done"
+    FAILED = "failed"
+    SKIPPED = "skipped"
+
+
+# ── Restriction types ──────────────────────────────────────────────────────────
+
+
+class RestrictionType(StrEnum):
+    NO_TOUCH = "no_touch"  # Patchi never reads, scans, or modifies
+    SCAN_ONLY = "scan_only"  # read and report, never fix
+    SENSITIVE = "sensitive"  # acknowledges existence, never reads contents
+
+
+# ── Memory categories ──────────────────────────────────────────────────────────
+
+
+class MemoryCategory(StrEnum):
+    BRAIN = "brain"
+    PATCHES = "patches"
+    FAILED = "failed"
+    SCANS = "scans"
+    ISSUES = "issues"
+    RESTRICTIONS = "restrictions"
+    TOKENS = "tokens"
+    LAYERS = "layers"
+    CHARTER = "charter"
+
+
+# ── Risk levels ────────────────────────────────────────────────────────────────
+
+
+class RiskLevel(StrEnum):
+    LOW = "low"  # 0–30:  safe to auto-apply
+    MEDIUM = "medium"  # 31–60: logic changes, requires review in confirm mode
+    HIGH = "high"  # 61–100: auth, payments, data — always ask
+
+    @staticmethod
+    def from_score(score: int) -> "RiskLevel":
+        if score <= 30:
+            return RiskLevel.LOW
+        if score <= 60:
+            return RiskLevel.MEDIUM
+        return RiskLevel.HIGH
+
+    def color(self) -> str:
+        return {"low": "green", "medium": "yellow", "high": "red"}[self.value]
+
+
+# ── Device tiers ───────────────────────────────────────────────────────────────
+
+
+class DeviceTier(StrEnum):
+    LOW = "low"  # < 4 GB RAM
+    MID = "mid"  # 4–16 GB
+    HIGH = "high"  # 16 GB+
+
+    def max_parallel_agents(self) -> int:
+        return {"low": 3, "mid": 8, "high": 20}[self.value]
+
+    def default_fps(self) -> int:
+        return {"low": 30, "mid": 60, "high": 60}[self.value]
+
+    def max_brain_map_nodes(self) -> int:
+        return {"low": 100, "mid": 500, "high": 0}[self.value]  # 0 = unlimited
+
+    def max_ants(self) -> int:
+        return {"low": 50, "mid": 200, "high": 0}[self.value]  # 0 = unlimited
+
+
+# ── Paths ──────────────────────────────────────────────────────────────────────
+
+PATCHI_DIR = ".patchi"
+CONFIG_FILE = f"{PATCHI_DIR}/config.json"
+MEMORY_DIR = f"{PATCHI_DIR}/memory"
+SNAPSHOT_DIR = f"{PATCHI_DIR}/snapshots"
+QUEUE_FILE = f"{PATCHI_DIR}/queue.json"
+
+MEMORY_FILES: dict[MemoryCategory, str] = {
+    MemoryCategory.BRAIN: f"{MEMORY_DIR}/brain.json",
+    MemoryCategory.PATCHES: f"{MEMORY_DIR}/patches.json",
+    MemoryCategory.FAILED: f"{MEMORY_DIR}/failed_patches.json",
+    MemoryCategory.SCANS: f"{MEMORY_DIR}/scan_results.json",
+    MemoryCategory.ISSUES: f"{MEMORY_DIR}/known_issues.json",
+    MemoryCategory.RESTRICTIONS: f"{MEMORY_DIR}/restrictions.json",
+    MemoryCategory.TOKENS: f"{MEMORY_DIR}/dev_tokens.json",
+    MemoryCategory.LAYERS: f"{MEMORY_DIR}/layers.json",
+    MemoryCategory.CHARTER: f"{MEMORY_DIR}/charter.json",
+}
+
+# ── Queue limits ───────────────────────────────────────────────────────────────
+
+QUEUE_WARN_DEPTH = 40
+QUEUE_MAX_DEPTH = 50
+
+# ── AI provider registry ──────────────────────────────────────────────────────
+# Single source of truth for all provider base URLs and default models.
+# Every module that needs provider info imports from here.
+
+PROVIDERS: dict[str, dict] = {
+    "openai": {"base_url": "https://api.openai.com/v1", "model": "gpt-4o-mini", "format": "openai"},
+    "anthropic": {
+        "base_url": "https://api.anthropic.com",
+        "model": "claude-sonnet-4-20250514",
+        "format": "anthropic",
+    },
+    "google": {
+        "base_url": "https://generativelanguage.googleapis.com/v1beta",
+        "model": "gemini-2.0-flash",
+        "format": "openai",
+    },
+    "groq": {
+        "base_url": "https://api.groq.com/openai/v1",
+        "model": "llama-3.3-70b-versatile",
+        "format": "openai",
+    },
+    "mistral": {
+        "base_url": "https://api.mistral.ai/v1",
+        "model": "mistral-small-latest",
+        "format": "openai",
+    },
+    "cohere": {"base_url": "https://api.cohere.ai/v2", "model": "command-r", "format": "openai"},
+    "together": {
+        "base_url": "https://api.together.xyz/v1",
+        "model": "meta-llama/Llama-3-70b-chat-hf",
+        "format": "openai",
+    },
+    "fireworks": {
+        "base_url": "https://api.fireworks.ai/inference/v1",
+        "model": "accounts/fireworks/models/llama-v3p3-70b-instruct",
+        "format": "openai",
+    },
+    "perplexity": {
+        "base_url": "https://api.perplexity.ai",
+        "model": "llama-3.1-sonar-small-128k-online",
+        "format": "openai",
+    },
+    "openrouter": {
+        "base_url": "https://openrouter.ai/api/v1",
+        "model": "meta-llama/llama-3.3-70b-instruct:free",
+        "format": "openai",
+    },
+    "deepseek": {
+        "base_url": "https://api.deepseek.com/v1",
+        "model": "deepseek-chat",
+        "format": "openai",
+    },
+    "xai": {"base_url": "https://api.x.ai/v1", "model": "grok-2", "format": "openai"},
+    "nvidia": {
+        "base_url": "https://integrate.api.nvidia.com/v1",
+        "model": "meta/llama-3.1-70b-instruct",
+        "format": "openai",
+    },
+    "huggingface": {
+        "base_url": "https://api-inference.huggingface.co/v1",
+        "model": "meta-llama/Llama-3.3-70B-Instruct",
+        "format": "openai",
+    },
+    "pollinations": {
+        "base_url": "https://gen.pollinations.ai/v1",
+        "model": "openai",
+        "format": "openai",
+    },
+}
+
+# ── AI defaults ───────────────────────────────────────────────────────────────
+
+OLLAMA_BASE_URL = "http://localhost:11434"
+OLLAMA_GENERATE_URL = OLLAMA_BASE_URL + "/api/generate"
+OLLAMA_TAGS_URL = OLLAMA_BASE_URL + "/api/tags"
+ANTHROPIC_API_VERSION = "2023-06-01"
+HTTP_REQUEST_TIMEOUT = 60
+HTTP_REQUEST_TIMEOUT_SHORT = 15
+DEFAULT_MAX_TOKENS = 2000
+DEFAULT_TEMPERATURE = 0.3
+
+# ── Budget thresholds ─────────────────────────────────────────────────────────
+
+BUDGET_WARN_PCT = 75
+BUDGET_CRITICAL_PCT = 90
+
+# ── Brain ──────────────────────────────────────────────────────────────────────
+
+BRAIN_FRESHNESS_THRESHOLD = 50
+
+# ── Misc ───────────────────────────────────────────────────────────────────────
+
+PATCHI_VERSION = "0.7.5"

patchi/core/debug/__init__.py

@@ -0,0 +1,25 @@
+from patchi.core.debug.adapters.codelldb import CodeLLDBAdapter
+from patchi.core.debug.adapters.node import NodeDebugAdapter
+from patchi.core.debug.adapters.powershell import PowerShellDebugAdapter
+from patchi.core.debug.adapters.python import PythonDebugAdapter
+from patchi.core.debug.capture import (
+    DebugCapture,
+    capture_exception,
+    capture_powershell_crash,
+    capture_rust_crash,
+    debug_context_from_finding,
+)
+from patchi.core.debug.dap_client import DAPClient
+
+__all__ = [
+    "CodeLLDBAdapter",
+    "DAPClient",
+    "DebugCapture",
+    "NodeDebugAdapter",
+    "PowerShellDebugAdapter",
+    "PythonDebugAdapter",
+    "capture_exception",
+    "capture_powershell_crash",
+    "capture_rust_crash",
+    "debug_context_from_finding",
+]

patchi/core/debug/adapters/__init__.py

@@ -0,0 +1,11 @@
+from patchi.core.debug.adapters.codelldb import CodeLLDBAdapter
+from patchi.core.debug.adapters.node import NodeDebugAdapter
+from patchi.core.debug.adapters.powershell import PowerShellDebugAdapter
+from patchi.core.debug.adapters.python import PythonDebugAdapter
+
+__all__ = [
+    "CodeLLDBAdapter",
+    "NodeDebugAdapter",
+    "PowerShellDebugAdapter",
+    "PythonDebugAdapter",
+]