patchi 0.7.5__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (496) hide show
  1. patchi/__init__.py +1 -0
  2. patchi/__main__.py +13 -0
  3. patchi/cli/__init__.py +0 -0
  4. patchi/cli/command_families.py +235 -0
  5. patchi/cli/commands/__init__.py +0 -0
  6. patchi/cli/commands/access_cmd.py +65 -0
  7. patchi/cli/commands/agent_stats_cmd.py +273 -0
  8. patchi/cli/commands/agents_cmd.py +187 -0
  9. patchi/cli/commands/ai_cmd.py +308 -0
  10. patchi/cli/commands/assure_cmd.py +538 -0
  11. patchi/cli/commands/audit_cmd.py +286 -0
  12. patchi/cli/commands/auto_cmd.py +110 -0
  13. patchi/cli/commands/blame_cmd.py +53 -0
  14. patchi/cli/commands/chains_cmd.py +327 -0
  15. patchi/cli/commands/charter_cmd.py +173 -0
  16. patchi/cli/commands/chat_cmd.py +597 -0
  17. patchi/cli/commands/check_cmd.py +232 -0
  18. patchi/cli/commands/cleanup_cmd.py +328 -0
  19. patchi/cli/commands/cockpit_cmd.py +208 -0
  20. patchi/cli/commands/commands_cmd.py +160 -0
  21. patchi/cli/commands/cross_repo_cmd.py +113 -0
  22. patchi/cli/commands/deps_cmd.py +110 -0
  23. patchi/cli/commands/dev_check_cmd.py +342 -0
  24. patchi/cli/commands/dev_cmd.py +445 -0
  25. patchi/cli/commands/doctor_cmd.py +457 -0
  26. patchi/cli/commands/findings_cmd.py +187 -0
  27. patchi/cli/commands/fix_cmd.py +648 -0
  28. patchi/cli/commands/fix_review_cmd.py +273 -0
  29. patchi/cli/commands/heatmap_cmd.py +62 -0
  30. patchi/cli/commands/help_cmd.py +159 -0
  31. patchi/cli/commands/hosted_cmd.py +980 -0
  32. patchi/cli/commands/init.py +456 -0
  33. patchi/cli/commands/key_cmd.py +571 -0
  34. patchi/cli/commands/learn_cmd.py +140 -0
  35. patchi/cli/commands/link_cmd.py +104 -0
  36. patchi/cli/commands/log_cmd.py +57 -0
  37. patchi/cli/commands/memory_cmd.py +215 -0
  38. patchi/cli/commands/model_cmd.py +207 -0
  39. patchi/cli/commands/notify_cmd.py +213 -0
  40. patchi/cli/commands/notify_prompts.py +29 -0
  41. patchi/cli/commands/patch_cmd.py +231 -0
  42. patchi/cli/commands/plan_cmd.py +128 -0
  43. patchi/cli/commands/plugins_cmd.py +307 -0
  44. patchi/cli/commands/queue_cmd.py +152 -0
  45. patchi/cli/commands/quick_cmd.py +159 -0
  46. patchi/cli/commands/ready_cmd.py +292 -0
  47. patchi/cli/commands/report_cmd.py +416 -0
  48. patchi/cli/commands/restrict_cmd.py +127 -0
  49. patchi/cli/commands/review_cmd.py +225 -0
  50. patchi/cli/commands/rules_cmd.py +233 -0
  51. patchi/cli/commands/scan_cmd.py +1908 -0
  52. patchi/cli/commands/settings_cmd.py +45 -0
  53. patchi/cli/commands/status_cmd.py +679 -0
  54. patchi/cli/commands/test_cmd.py +1052 -0
  55. patchi/cli/commands/trend_cmd.py +296 -0
  56. patchi/cli/commands/undo_cmd.py +235 -0
  57. patchi/cli/commands/update_cmd.py +345 -0
  58. patchi/cli/commands/verify_cmd.py +56 -0
  59. patchi/cli/commands/vr_cmd.py +440 -0
  60. patchi/cli/commands/watch_cmd.py +304 -0
  61. patchi/cli/commands/web_cmd.py +114 -0
  62. patchi/cli/console.py +101 -0
  63. patchi/cli/display/__init__.py +1 -0
  64. patchi/cli/display/live_audit.py +269 -0
  65. patchi/cli/display/live_progress.py +169 -0
  66. patchi/cli/framework.py +241 -0
  67. patchi/cli/logo.py +128 -0
  68. patchi/cli/main.py +222 -0
  69. patchi/cli/registry.py +1171 -0
  70. patchi/cli/style.py +68 -0
  71. patchi/cli/themes.py +187 -0
  72. patchi/cli/ux.py +444 -0
  73. patchi/core/__init__.py +0 -0
  74. patchi/core/agents/__init__.py +0 -0
  75. patchi/core/agents/api_fuzzer_agent.py +141 -0
  76. patchi/core/agents/attack_agent.py +242 -0
  77. patchi/core/agents/base.py +1012 -0
  78. patchi/core/agents/bug_predictor_agent.py +58 -0
  79. patchi/core/agents/build_tool_validator.py +150 -0
  80. patchi/core/agents/cache.py +192 -0
  81. patchi/core/agents/chaos_agent.py +133 -0
  82. patchi/core/agents/cicd_generator.py +240 -0
  83. patchi/core/agents/comment_scanner.py +280 -0
  84. patchi/core/agents/console_logging_agent.py +156 -0
  85. patchi/core/agents/coordinator.py +858 -0
  86. patchi/core/agents/core_scanner.py +269 -0
  87. patchi/core/agents/coverage_prioritizer.py +181 -0
  88. patchi/core/agents/dead_code_hygiene.py +296 -0
  89. patchi/core/agents/dead_code_scanner.py +692 -0
  90. patchi/core/agents/dependency_scanner.py +725 -0
  91. patchi/core/agents/doc_claim_agent.py +573 -0
  92. patchi/core/agents/duplicate_scanner.py +568 -0
  93. patchi/core/agents/env_scanner.py +410 -0
  94. patchi/core/agents/feature_flag_agent.py +89 -0
  95. patchi/core/agents/frontend_framework_agent.py +133 -0
  96. patchi/core/agents/goroutine_agent.py +82 -0
  97. patchi/core/agents/governor.py +1972 -0
  98. patchi/core/agents/i18n_agent.py +95 -0
  99. patchi/core/agents/license_compliance.py +247 -0
  100. patchi/core/agents/linking_agent.py +251 -0
  101. patchi/core/agents/memory_profiler_agent.py +102 -0
  102. patchi/core/agents/modernization_agent.py +84 -0
  103. patchi/core/agents/mutation_agent.py +174 -0
  104. patchi/core/agents/nl_query_agent.py +74 -0
  105. patchi/core/agents/promise_rejection_agent.py +100 -0
  106. patchi/core/agents/refactoring_agent.py +286 -0
  107. patchi/core/agents/resource_leak_agent.py +91 -0
  108. patchi/core/agents/route_graph_scanner.py +951 -0
  109. patchi/core/agents/run_agent.py +106 -0
  110. patchi/core/agents/rust_unwrap_agent.py +100 -0
  111. patchi/core/agents/sbom_generator.py +284 -0
  112. patchi/core/agents/scanners.py +67 -0
  113. patchi/core/agents/side/__init__.py +1 -0
  114. patchi/core/agents/side/build_agent.py +65 -0
  115. patchi/core/agents/side/format_agent.py +50 -0
  116. patchi/core/agents/side/install_agent.py +63 -0
  117. patchi/core/agents/side_file_scanner.py +549 -0
  118. patchi/core/agents/snapshot_drift_detector.py +146 -0
  119. patchi/core/agents/spa_route_inventory.py +203 -0
  120. patchi/core/agents/test_scanner.py +442 -0
  121. patchi/core/agents/tool_health.py +109 -0
  122. patchi/core/agents/tool_runner.py +162 -0
  123. patchi/core/agents/type_scanner.py +168 -0
  124. patchi/core/agents/ui_scanner.py +558 -0
  125. patchi/core/ai/__init__.py +20 -0
  126. patchi/core/ai/agent_audit.py +153 -0
  127. patchi/core/ai/agent_profiler.py +277 -0
  128. patchi/core/ai/client.py +499 -0
  129. patchi/core/ai/cost_tracker.py +107 -0
  130. patchi/core/ai/model_router.py +318 -0
  131. patchi/core/ai/orchestrator.py +625 -0
  132. patchi/core/ai/prompts.py +681 -0
  133. patchi/core/ai/smart.py +302 -0
  134. patchi/core/ai/tool_executor.py +24 -0
  135. patchi/core/ai/tools/__init__.py +10 -0
  136. patchi/core/ai/tools/executor.py +621 -0
  137. patchi/core/ai/tools/realize.py +1160 -0
  138. patchi/core/ai/tools/registry.py +1577 -0
  139. patchi/core/assurance/__init__.py +33 -0
  140. patchi/core/assurance/builder.py +211 -0
  141. patchi/core/assurance/graph.py +342 -0
  142. patchi/core/assurance/invariants.py +168 -0
  143. patchi/core/atomic.py +61 -0
  144. patchi/core/attackers/__init__.py +17 -0
  145. patchi/core/attackers/api_abuse.py +89 -0
  146. patchi/core/attackers/auth_bypass.py +73 -0
  147. patchi/core/attackers/base.py +91 -0
  148. patchi/core/attackers/business_logic.py +88 -0
  149. patchi/core/attackers/planner.py +108 -0
  150. patchi/core/attackers/priv_escalation.py +88 -0
  151. patchi/core/attackers/recon.py +87 -0
  152. patchi/core/brain/__init__.py +0 -0
  153. patchi/core/brain/ast_utils/__init__.py +81 -0
  154. patchi/core/brain/ast_utils/assignments.py +219 -0
  155. patchi/core/brain/ast_utils/calls.py +139 -0
  156. patchi/core/brain/ast_utils/config.py +132 -0
  157. patchi/core/brain/ast_utils/control_flow.py +74 -0
  158. patchi/core/brain/ast_utils/dead_symbols.py +205 -0
  159. patchi/core/brain/ast_utils/decorators.py +108 -0
  160. patchi/core/brain/ast_utils/helpers.py +144 -0
  161. patchi/core/brain/ast_utils/imports.py +169 -0
  162. patchi/core/brain/ast_utils/scan.py +143 -0
  163. patchi/core/brain/ast_utils/taint.py +310 -0
  164. patchi/core/brain/audit.py +379 -0
  165. patchi/core/brain/baseline.py +195 -0
  166. patchi/core/brain/blast_radius.py +312 -0
  167. patchi/core/brain/body_tags.py +144 -0
  168. patchi/core/brain/brain.py +1161 -0
  169. patchi/core/brain/brain_context.py +393 -0
  170. patchi/core/brain/brain_watcher.py +340 -0
  171. patchi/core/brain/charter.py +473 -0
  172. patchi/core/brain/classifier.py +214 -0
  173. patchi/core/brain/cockpit.py +350 -0
  174. patchi/core/brain/code_query.py +710 -0
  175. patchi/core/brain/contract.py +889 -0
  176. patchi/core/brain/contract_diff.py +155 -0
  177. patchi/core/brain/council.py +800 -0
  178. patchi/core/brain/cross_repo.py +104 -0
  179. patchi/core/brain/dead_code_tools.py +157 -0
  180. patchi/core/brain/doc_validator.py +197 -0
  181. patchi/core/brain/domain_activator.py +2183 -0
  182. patchi/core/brain/enriched_context.py +220 -0
  183. patchi/core/brain/file_corpus.py +220 -0
  184. patchi/core/brain/framework.py +953 -0
  185. patchi/core/brain/freshness.py +273 -0
  186. patchi/core/brain/git_aware.py +206 -0
  187. patchi/core/brain/heatmap.py +104 -0
  188. patchi/core/brain/ignore_parser.py +153 -0
  189. patchi/core/brain/import_graph.py +486 -0
  190. patchi/core/brain/languages.py +397 -0
  191. patchi/core/brain/layered_brain.py +419 -0
  192. patchi/core/brain/learning.py +229 -0
  193. patchi/core/brain/orphaned_endpoints.py +313 -0
  194. patchi/core/brain/personas/__init__.py +648 -0
  195. patchi/core/brain/personas/bad_user.py +165 -0
  196. patchi/core/brain/personas/base.py +349 -0
  197. patchi/core/brain/proactive.py +807 -0
  198. patchi/core/brain/project_context.py +121 -0
  199. patchi/core/brain/project_reader.py +521 -0
  200. patchi/core/brain/reasoning.py +269 -0
  201. patchi/core/brain/route_detector/__init__.py +15 -0
  202. patchi/core/brain/route_detector/base.py +31 -0
  203. patchi/core/brain/route_detector/csharp.py +209 -0
  204. patchi/core/brain/route_detector/file_based.py +81 -0
  205. patchi/core/brain/route_detector/go.py +152 -0
  206. patchi/core/brain/route_detector/java.py +195 -0
  207. patchi/core/brain/route_detector/javascript.py +197 -0
  208. patchi/core/brain/route_detector/php.py +158 -0
  209. patchi/core/brain/route_detector/python.py +193 -0
  210. patchi/core/brain/route_detector/registry.py +25 -0
  211. patchi/core/brain/route_detector/ruby.py +134 -0
  212. patchi/core/brain/route_detector/rust.py +216 -0
  213. patchi/core/brain/route_detector/swift.py +118 -0
  214. patchi/core/brain/route_mapper.py +265 -0
  215. patchi/core/brain/scanner.py +2136 -0
  216. patchi/core/brain/secrets.py +280 -0
  217. patchi/core/brain/symbol_graph.py +1955 -0
  218. patchi/core/brain/team.py +28 -0
  219. patchi/core/brain/trace_log.py +132 -0
  220. patchi/core/brain/type_checker/__init__.py +65 -0
  221. patchi/core/brain/type_checker/base.py +60 -0
  222. patchi/core/brain/type_checker/csharp.py +59 -0
  223. patchi/core/brain/type_checker/dart.py +59 -0
  224. patchi/core/brain/type_checker/go.py +81 -0
  225. patchi/core/brain/type_checker/java.py +75 -0
  226. patchi/core/brain/type_checker/kotlin.py +75 -0
  227. patchi/core/brain/type_checker/php.py +88 -0
  228. patchi/core/brain/type_checker/python.py +87 -0
  229. patchi/core/brain/type_checker/rust.py +81 -0
  230. patchi/core/brain/type_checker/swift.py +59 -0
  231. patchi/core/brain/type_checker/typescript.py +298 -0
  232. patchi/core/brain/understander.py +130 -0
  233. patchi/core/brain/verify.py +379 -0
  234. patchi/core/campaigns/__init__.py +14 -0
  235. patchi/core/campaigns/base.py +62 -0
  236. patchi/core/campaigns/data_flow_abuse.py +153 -0
  237. patchi/core/campaigns/orchestrator.py +140 -0
  238. patchi/core/campaigns/state_transitions.py +178 -0
  239. patchi/core/ci_bundle.py +104 -0
  240. patchi/core/config.py +311 -0
  241. patchi/core/constants.py +245 -0
  242. patchi/core/debug/__init__.py +25 -0
  243. patchi/core/debug/adapters/__init__.py +11 -0
  244. patchi/core/debug/adapters/codelldb.py +379 -0
  245. patchi/core/debug/adapters/node.py +222 -0
  246. patchi/core/debug/adapters/powershell.py +210 -0
  247. patchi/core/debug/adapters/python.py +244 -0
  248. patchi/core/debug/capture.py +210 -0
  249. patchi/core/debug/dap_client.py +268 -0
  250. patchi/core/detector/__init__.py +0 -0
  251. patchi/core/detector/audit.py +194 -0
  252. patchi/core/detector/bus.py +226 -0
  253. patchi/core/detector/dispatcher.py +275 -0
  254. patchi/core/detector/event.py +254 -0
  255. patchi/core/detector/sigma_engine.py +378 -0
  256. patchi/core/detector/triage.py +289 -0
  257. patchi/core/export/sarif.py +113 -0
  258. patchi/core/fix/__init__.py +17 -0
  259. patchi/core/fix/applier.py +574 -0
  260. patchi/core/fix/base.py +510 -0
  261. patchi/core/fix/code_fixer.py +169 -0
  262. patchi/core/fix/dead_code_remover.py +131 -0
  263. patchi/core/fix/fix_agents.py +775 -0
  264. patchi/core/fix/patch.py +444 -0
  265. patchi/core/fix/risk_gate.py +383 -0
  266. patchi/core/fix/security_fixer.py +93 -0
  267. patchi/core/fix/verify_loop.py +204 -0
  268. patchi/core/fuzz/__init__.py +8 -0
  269. patchi/core/fuzz/corpus.py +137 -0
  270. patchi/core/fuzz/input_fuzzer.py +256 -0
  271. patchi/core/fuzz/sequence_fuzzer.py +162 -0
  272. patchi/core/fuzz/state_fuzzer.py +236 -0
  273. patchi/core/health.py +407 -0
  274. patchi/core/hosted/__init__.py +1 -0
  275. patchi/core/hosted/anomaly.py +298 -0
  276. patchi/core/hosted/audit_log.py +102 -0
  277. patchi/core/hosted/compliance_report.py +148 -0
  278. patchi/core/hosted/ip_reputation.py +169 -0
  279. patchi/core/hosted/log_parsers.py +251 -0
  280. patchi/core/hosted/tokens.py +127 -0
  281. patchi/core/hosted/watchlist.py +164 -0
  282. patchi/core/hosted/webhooks.py +156 -0
  283. patchi/core/memory.py +437 -0
  284. patchi/core/notifications/__init__.py +18 -0
  285. patchi/core/notifications/channels.py +192 -0
  286. patchi/core/notifications/digest.py +141 -0
  287. patchi/core/notifications/escalation.py +158 -0
  288. patchi/core/notifications/notifier.py +182 -0
  289. patchi/core/notifications/quiet_hours.py +69 -0
  290. patchi/core/plugins/__init__.py +48 -0
  291. patchi/core/plugins/analyzer.py +326 -0
  292. patchi/core/plugins/analyzers/__init__.py +6 -0
  293. patchi/core/plugins/analyzers/dead_code_analyzer.py +120 -0
  294. patchi/core/plugins/analyzers/secret_scanner.py +158 -0
  295. patchi/core/plugins/analyzers/todo_scanner.py +115 -0
  296. patchi/core/plugins/registry.py +335 -0
  297. patchi/core/queue.py +375 -0
  298. patchi/core/reliability/__init__.py +13 -0
  299. patchi/core/reliability/chaos.py +163 -0
  300. patchi/core/reliability/fault_injector.py +172 -0
  301. patchi/core/reliability/idempotency.py +128 -0
  302. patchi/core/reliability/recovery.py +147 -0
  303. patchi/core/runtime/__init__.py +5 -0
  304. patchi/core/runtime/tracer.py +230 -0
  305. patchi/core/scan_bus.py +156 -0
  306. patchi/core/security/__init__.py +1 -0
  307. patchi/core/security/ai_validator.py +462 -0
  308. patchi/core/security/app_mapper.py +216 -0
  309. patchi/core/security/app_profile.py +464 -0
  310. patchi/core/security/attack_feedback.py +141 -0
  311. patchi/core/security/attack_scenarios/__init__.py +1 -0
  312. patchi/core/security/attack_tree.py +176 -0
  313. patchi/core/security/auth_audit_agent.py +344 -0
  314. patchi/core/security/authz_agent.py +602 -0
  315. patchi/core/security/auto_fix_proactive.py +620 -0
  316. patchi/core/security/auto_fixer.py +660 -0
  317. patchi/core/security/auto_ticket.py +53 -0
  318. patchi/core/security/bandit_agent.py +152 -0
  319. patchi/core/security/blast_radius.py +226 -0
  320. patchi/core/security/browser_tester.py +333 -0
  321. patchi/core/security/business_logic_agent.py +263 -0
  322. patchi/core/security/catch_block_auditor.py +395 -0
  323. patchi/core/security/cdn_cache_agent.py +357 -0
  324. patchi/core/security/chain_analyzer.py +321 -0
  325. patchi/core/security/chain_to_assurance.py +168 -0
  326. patchi/core/security/charter.py +510 -0
  327. patchi/core/security/cloud_waf_detector.py +295 -0
  328. patchi/core/security/codeql_agent.py +233 -0
  329. patchi/core/security/compliance_agent.py +348 -0
  330. patchi/core/security/confidence_gate.py +423 -0
  331. patchi/core/security/container_scanner.py +282 -0
  332. patchi/core/security/crypto_agent.py +378 -0
  333. patchi/core/security/cve_monitor.py +262 -0
  334. patchi/core/security/dast_agent.py +865 -0
  335. patchi/core/security/defectdojo.py +238 -0
  336. patchi/core/security/defenders/__init__.py +75 -0
  337. patchi/core/security/defenders/auth_middleware.py +115 -0
  338. patchi/core/security/defenders/base.py +97 -0
  339. patchi/core/security/defenders/block_ip.py +71 -0
  340. patchi/core/security/defenders/block_ws_origin.py +36 -0
  341. patchi/core/security/defenders/crypto_fix.py +118 -0
  342. patchi/core/security/defenders/enforce_rate_limit.py +108 -0
  343. patchi/core/security/defenders/fix_code.py +93 -0
  344. patchi/core/security/defenders/invalidate_session.py +40 -0
  345. patchi/core/security/defenders/patch_config.py +70 -0
  346. patchi/core/security/defenders/rotate_secret.py +54 -0
  347. patchi/core/security/defenders/suspend_account.py +41 -0
  348. patchi/core/security/defenders/update_dependency.py +160 -0
  349. patchi/core/security/defense_layer.py +217 -0
  350. patchi/core/security/dependency_vulnerability_agent.py +616 -0
  351. patchi/core/security/detection_pipeline.py +289 -0
  352. patchi/core/security/dns_security_agent.py +497 -0
  353. patchi/core/security/domain_activator_v2.py +913 -0
  354. patchi/core/security/domain_loader.py +1004 -0
  355. patchi/core/security/domains/__init__.py +0 -0
  356. patchi/core/security/email_authentication_agent.py +417 -0
  357. patchi/core/security/env_var_validator.py +304 -0
  358. patchi/core/security/evidence.py +100 -0
  359. patchi/core/security/falco_runtime_agent.py +387 -0
  360. patchi/core/security/fix-playbooks/__init__.py +0 -0
  361. patchi/core/security/gated_finding.py +85 -0
  362. patchi/core/security/git_diff_activator.py +367 -0
  363. patchi/core/security/governance.py +208 -0
  364. patchi/core/security/gradual_gate.py +34 -0
  365. patchi/core/security/history.py +315 -0
  366. patchi/core/security/iac_scanner.py +250 -0
  367. patchi/core/security/ignore_expiry.py +111 -0
  368. patchi/core/security/ignore_learner.py +416 -0
  369. patchi/core/security/injection_agent.py +319 -0
  370. patchi/core/security/insecure_randomness_agent.py +288 -0
  371. patchi/core/security/intent_analyzer.py +326 -0
  372. patchi/core/security/jwt_agent.py +453 -0
  373. patchi/core/security/kubernetes_agent.py +638 -0
  374. patchi/core/security/layer2_orchestrator.py +341 -0
  375. patchi/core/security/llm_security_agent.py +252 -0
  376. patchi/core/security/misconfig_agent.py +600 -0
  377. patchi/core/security/mobile_security_agent.py +474 -0
  378. patchi/core/security/network_agent.py +376 -0
  379. patchi/core/security/noise_filter.py +274 -0
  380. patchi/core/security/orchestrator.py +313 -0
  381. patchi/core/security/pattern_context.py +125 -0
  382. patchi/core/security/pattern_loader.py +101 -0
  383. patchi/core/security/pentest/__init__.py +4 -0
  384. patchi/core/security/pentest/base.py +58 -0
  385. patchi/core/security/pentest/dalfox_adapter.py +40 -0
  386. patchi/core/security/pentest/ffuf_adapter.py +48 -0
  387. patchi/core/security/pentest/nuclei_adapter.py +50 -0
  388. patchi/core/security/pentest/registry.py +80 -0
  389. patchi/core/security/pentest/shannon_adapter.py +107 -0
  390. patchi/core/security/pentest/sqlmap_adapter.py +56 -0
  391. patchi/core/security/pentest/zap_adapter.py +52 -0
  392. patchi/core/security/plan_auditor.py +276 -0
  393. patchi/core/security/policy_engine.py +272 -0
  394. patchi/core/security/prechecks.py +172 -0
  395. patchi/core/security/precommit_hook.py +247 -0
  396. patchi/core/security/privacy_agent.py +361 -0
  397. patchi/core/security/push_notification_agent.py +417 -0
  398. patchi/core/security/pysa_agent.py +143 -0
  399. patchi/core/security/reasoning.py +442 -0
  400. patchi/core/security/red_team_agent.py +184 -0
  401. patchi/core/security/red_team_engine.py +1142 -0
  402. patchi/core/security/remediation.py +360 -0
  403. patchi/core/security/request_interceptor.py +294 -0
  404. patchi/core/security/runtime_validator.py +245 -0
  405. patchi/core/security/saml_sso_agent.py +401 -0
  406. patchi/core/security/sast_agent.py +213 -0
  407. patchi/core/security/sast_gate.py +95 -0
  408. patchi/core/security/scheduler.py +287 -0
  409. patchi/core/security/secrets_runtime_agent.py +476 -0
  410. patchi/core/security/security_agents.py +175 -0
  411. patchi/core/security/security_config.py +551 -0
  412. patchi/core/security/security_probe.py +762 -0
  413. patchi/core/security/security_taint.py +1005 -0
  414. patchi/core/security/sensitive_data_agent.py +271 -0
  415. patchi/core/security/service_mesh_agent.py +412 -0
  416. patchi/core/security/session_management_agent.py +245 -0
  417. patchi/core/security/ssrf_agent.py +422 -0
  418. patchi/core/security/supply_chain.py +449 -0
  419. patchi/core/security/threat_model_generator.py +378 -0
  420. patchi/core/security/threat_model_updater.py +196 -0
  421. patchi/core/security/tool_adapters.py +135 -0
  422. patchi/core/security/tool_verify.py +173 -0
  423. patchi/core/security/websocket_security_agent.py +188 -0
  424. patchi/core/snapshot.py +242 -0
  425. patchi/core/tenant.py +386 -0
  426. patchi/core/testing/__init__.py +17 -0
  427. patchi/core/testing/_browser.py +147 -0
  428. patchi/core/testing/ads_agent.py +141 -0
  429. patchi/core/testing/api_contract_agent.py +450 -0
  430. patchi/core/testing/app_discovery_agent.py +641 -0
  431. patchi/core/testing/app_launcher.py +184 -0
  432. patchi/core/testing/browser_test_agent.py +516 -0
  433. patchi/core/testing/e2e_flow_agent.py +354 -0
  434. patchi/core/testing/flake_detector_agent.py +292 -0
  435. patchi/core/testing/gate.py +31 -0
  436. patchi/core/testing/live_test_runner.py +304 -0
  437. patchi/core/testing/live_v2/__init__.py +1 -0
  438. patchi/core/testing/live_v2/browser_pool.py +349 -0
  439. patchi/core/testing/live_v2/browser_test_runner.py +313 -0
  440. patchi/core/testing/live_v2/runner.py +626 -0
  441. patchi/core/testing/live_v2/screenshot_manager.py +474 -0
  442. patchi/core/testing/live_v2/stress_orchestrator.py +523 -0
  443. patchi/core/testing/live_v2/video_recorder.py +303 -0
  444. patchi/core/testing/regression_agent.py +302 -0
  445. patchi/core/testing/security_test_agent.py +253 -0
  446. patchi/core/testing/stress_test_agent.py +203 -0
  447. patchi/core/testing/test_agents.py +50 -0
  448. patchi/core/testing/test_config.py +194 -0
  449. patchi/core/testing/ui_accessibility_agent.py +324 -0
  450. patchi/core/testing/ui_button_agent.py +294 -0
  451. patchi/core/testing/ui_layout_agent.py +330 -0
  452. patchi/core/testing/unit_test_agent.py +1149 -0
  453. patchi/core/testing/visual_regression_agent.py +260 -0
  454. patchi/web/__init__.py +1 -0
  455. patchi/web/api/__init__.py +1 -0
  456. patchi/web/api/brain_map.py +114 -0
  457. patchi/web/api/charts.py +47 -0
  458. patchi/web/api/chat.py +224 -0
  459. patchi/web/api/cicd.py +576 -0
  460. patchi/web/api/dast_evidence.py +49 -0
  461. patchi/web/api/dev_check.py +320 -0
  462. patchi/web/api/fix.py +134 -0
  463. patchi/web/api/guard.py +65 -0
  464. patchi/web/api/hosted.py +128 -0
  465. patchi/web/api/hosted_v2.py +234 -0
  466. patchi/web/api/live_testing.py +699 -0
  467. patchi/web/api/scan.py +582 -0
  468. patchi/web/api/smart.py +111 -0
  469. patchi/web/api/tenant.py +117 -0
  470. patchi/web/api/tools.py +85 -0
  471. patchi/web/api_legacy.py +2401 -0
  472. patchi/web/app.py +310 -0
  473. patchi/web/events.py +483 -0
  474. patchi/web/routes/__init__.py +1 -0
  475. patchi/web/routes/assurance.py +541 -0
  476. patchi/web/routes/brain.py +36 -0
  477. patchi/web/routes/charter.py +227 -0
  478. patchi/web/routes/chat.py +23 -0
  479. patchi/web/routes/dashboard.py +558 -0
  480. patchi/web/routes/dashboard_v2.py +402 -0
  481. patchi/web/routes/findings.py +330 -0
  482. patchi/web/routes/guard.py +35 -0
  483. patchi/web/routes/history.py +126 -0
  484. patchi/web/routes/landing.py +52 -0
  485. patchi/web/routes/live_testing.py +24 -0
  486. patchi/web/routes/review.py +57 -0
  487. patchi/web/routes/self_improvement.py +110 -0
  488. patchi/web/routes/settings.py +49 -0
  489. patchi/web/routes/tokens.py +29 -0
  490. patchi/web/spawn.py +139 -0
  491. patchi/web/ws.py +141 -0
  492. patchi-0.7.5.dist-info/METADATA +315 -0
  493. patchi-0.7.5.dist-info/RECORD +496 -0
  494. patchi-0.7.5.dist-info/WHEEL +5 -0
  495. patchi-0.7.5.dist-info/licenses/LICENSE +60 -0
  496. patchi-0.7.5.dist-info/top_level.txt +1 -0
@@ -0,0 +1,571 @@
1
+ """
2
+ `p key` — Manage API keys for AI providers.
3
+
4
+ Subcommands:
5
+ p key add — interactive: pick provider, paste key, save
6
+ p key list — show all keys with status
7
+ p key remove <name> — remove a key by nickname
8
+ p key test [name] — fire a cheap test request against one or all keys
9
+
10
+ Keys are stored in .patchi/.env (gitignored).
11
+ Only the nickname + provider name are stored in config.json — never the raw key.
12
+ """
13
+ from __future__ import annotations
14
+
15
+ import logging
16
+ import os
17
+ from pathlib import Path
18
+
19
+ from rich.prompt import Confirm, Prompt
20
+ from rich.table import Table
21
+ from rich.text import Text
22
+
23
+ from patchi.cli.console import con
24
+ from patchi.core import config as cfg
25
+ from patchi.core.config import require_project_root
26
+
27
+ # ── Provider registry ──────────────────────────────────────────────────────────
28
+ # (name, base_url, model, test_prompt_path, key_env_prefix, docs_url)
29
+ PROVIDERS: list[dict] = [
30
+ {
31
+ "name": "Groq",
32
+ "base": "https://api.groq.com/openai/v1",
33
+ "model": "llama3-8b-8192",
34
+ "format": "openai",
35
+ "docs": "console.groq.com",
36
+ },
37
+ {
38
+ "name": "OpenAI",
39
+ "base": "https://api.openai.com/v1",
40
+ "model": "gpt-4o-mini",
41
+ "format": "openai",
42
+ "docs": "platform.openai.com",
43
+ },
44
+ {
45
+ "name": "Anthropic",
46
+ "base": "https://api.anthropic.com/v1",
47
+ "model": "claude-haiku-4-5-20251001",
48
+ "format": "anthropic",
49
+ "docs": "console.anthropic.com",
50
+ },
51
+ {
52
+ "name": "Google",
53
+ "base": "https://generativelanguage.googleapis.com/v1beta",
54
+ "model": "gemini-1.5-flash",
55
+ "format": "google",
56
+ "docs": "aistudio.google.com",
57
+ },
58
+ {
59
+ "name": "Mistral",
60
+ "base": "https://api.mistral.ai/v1",
61
+ "model": "mistral-small-latest",
62
+ "format": "openai",
63
+ "docs": "console.mistral.ai",
64
+ },
65
+ {
66
+ "name": "Cohere",
67
+ "base": "https://api.cohere.ai/v1",
68
+ "model": "command-r",
69
+ "format": "cohere",
70
+ "docs": "dashboard.cohere.com",
71
+ },
72
+ {
73
+ "name": "Together",
74
+ "base": "https://api.together.xyz/v1",
75
+ "model": "meta-llama/Llama-3-8b-chat-hf",
76
+ "format": "openai",
77
+ "docs": "api.together.xyz",
78
+ },
79
+ {
80
+ "name": "Fireworks",
81
+ "base": "https://api.fireworks.ai/inference/v1",
82
+ "model": "accounts/fireworks/models/llama-v3-8b-instruct",
83
+ "format": "openai",
84
+ "docs": "fireworks.ai",
85
+ },
86
+ {
87
+ "name": "Perplexity",
88
+ "base": "https://api.perplexity.ai",
89
+ "model": "llama-3.1-sonar-small-128k-online",
90
+ "format": "openai",
91
+ "docs": "www.perplexity.ai/settings",
92
+ },
93
+ {
94
+ "name": "OpenRouter",
95
+ "base": "https://openrouter.ai/api/v1",
96
+ "model": "meta-llama/llama-3-8b-instruct:free",
97
+ "format": "openai",
98
+ "docs": "openrouter.ai",
99
+ },
100
+ {
101
+ "name": "Custom",
102
+ "base": "",
103
+ "model": "",
104
+ "format": "openai",
105
+ "docs": "Enter your own provider details",
106
+ },
107
+ ]
108
+
109
+ PROVIDER_NAMES = [p["name"] for p in PROVIDERS]
110
+
111
+
112
+ _log = logging.getLogger("patchi.cli.key_cmd")
113
+
114
+
115
+ def _secure_key_input(prompt: str) -> str:
116
+ """
117
+ Securely read an API key from stdin, with support for pasting in PowerShell.
118
+
119
+ Uses getpass on Unix-like systems, but on Windows/PowerShell falls back to
120
+ a method that allows pasting (getpass blocks pasting in some PowerShell versions).
121
+ """
122
+ # Try getpass first (works on most Unix, blocks paste in some PowerShell)
123
+ try:
124
+ import getpass
125
+ return getpass.getpass(prompt + " ")
126
+ except Exception:
127
+ pass
128
+
129
+ # Fallback: use rich's Prompt but without password masking
130
+ # This allows pasting in PowerShell - the key is stored securely in .env anyway
131
+ from rich.prompt import Prompt
132
+ return Prompt.ask(prompt)
133
+
134
+
135
+ def _provider_by_name(name: str) -> dict | None:
136
+ for p in PROVIDERS:
137
+ if p["name"].lower() == name.lower():
138
+ return p
139
+ return None
140
+
141
+
142
+ # ── Commands ───────────────────────────────────────────────────────────────────
143
+
144
+
145
+ def run_add(root: Path | None = None) -> None:
146
+ """p key add — interactive key addition."""
147
+ try:
148
+ r = root or require_project_root()
149
+ except RuntimeError as e:
150
+ con.print(f"[red]{e}[/red]")
151
+ return
152
+
153
+ con.print()
154
+ con.print("[bold #F2EDD6]Add an API Key[/bold #F2EDD6]")
155
+ con.print()
156
+
157
+ # Show provider list
158
+ for i, p in enumerate(PROVIDERS, 1):
159
+ con.print(f" [bold]{i:>2}.[/bold] {p['name']:<14} [dim]{p['docs']}[/dim]")
160
+ con.print()
161
+
162
+ # Provider pick
163
+ raw = Prompt.ask("[#F2EDD6]Provider number or name[/#F2EDD6]")
164
+ provider_data = None
165
+ if raw.isdigit():
166
+ idx = int(raw) - 1
167
+ if 0 <= idx < len(PROVIDERS):
168
+ provider_data = PROVIDERS[idx]
169
+ else:
170
+ provider_data = _provider_by_name(raw)
171
+
172
+ if not provider_data:
173
+ con.print(f"[red]Unknown provider: {raw!r}[/red]")
174
+ return
175
+
176
+ provider_name = provider_data["name"]
177
+
178
+ # Handle Custom provider - prompt for details
179
+ if provider_name == "Custom":
180
+ provider_name = Prompt.ask("[#F2EDD6]Provider name[/#F2EDD6]")
181
+ if not provider_name.strip():
182
+ con.print("[red]Provider name is required.[/red]")
183
+ return
184
+ base_url = Prompt.ask("[#F2EDD6]API base URL[/#F2EDD6]", default="")
185
+ if not base_url.strip():
186
+ con.print("[red]Base URL is required.[/red]")
187
+ return
188
+ model = Prompt.ask("[#F2EDD6]Model name[/#F2EDD6]")
189
+ if not model.strip():
190
+ con.print("[red]Model name is required.[/red]")
191
+ return
192
+ format_choices = ["openai", "anthropic", "google", "cohere"]
193
+ fmt = Prompt.ask("[#F2EDD6]API format[/#F2EDD6]", choices=format_choices, default="openai")
194
+ provider_data = {
195
+ "name": provider_name,
196
+ "base": base_url.strip(),
197
+ "model": model.strip(),
198
+ "format": fmt,
199
+ "docs": "custom",
200
+ }
201
+
202
+ # Nickname
203
+ nickname = Prompt.ask(
204
+ "[#F2EDD6]Nickname for this key[/#F2EDD6]",
205
+ default=provider_name,
206
+ )
207
+
208
+ # Key input - use secure input that works in PowerShell
209
+ key_value = _secure_key_input("[#F2EDD6]Paste your API key[/#F2EDD6]")
210
+ if not key_value.strip():
211
+ con.print("[red]No key entered.[/red]")
212
+ return
213
+
214
+ # Build env var name
215
+ env_var = f"PATCHI_KEY_{nickname.upper().replace(' ', '_').replace('-', '_')}"
216
+
217
+ # Write to .patchi/.env
218
+ env_file = r / ".patchi" / ".env"
219
+ _write_env_var(env_file, env_var, key_value.strip())
220
+
221
+ # Add to .gitignore
222
+ _ensure_gitignore(r)
223
+
224
+ # Save to config
225
+ config = cfg.load(r)
226
+ keys: list[dict] = config.get("ai", {}).get("keys", [])
227
+
228
+ # Replace if nickname already exists
229
+ keys = [k for k in keys if k.get("nickname") != nickname]
230
+ keys.append(
231
+ {
232
+ "provider": provider_name,
233
+ "nickname": nickname,
234
+ "env_var": env_var,
235
+ "format": provider_data["format"],
236
+ "base_url": provider_data["base"],
237
+ "model": provider_data["model"],
238
+ "status": "untested",
239
+ }
240
+ )
241
+ cfg.set_value("ai.keys", keys, r)
242
+
243
+ con.print()
244
+ con.print(
245
+ f"[#4ADE80]✓[/#4ADE80] Key [bold]{nickname}[/bold] saved.\n"
246
+ f"[dim]Env var: {env_var} · File: .patchi/.env[/dim]"
247
+ )
248
+ con.print()
249
+
250
+ # Offer to test immediately
251
+ if Confirm.ask("Test this key now?", default=True):
252
+ run_test(nickname, root=r)
253
+
254
+
255
+ def run_list(root: Path | None = None) -> None:
256
+ """p key list"""
257
+ try:
258
+ r = root or require_project_root()
259
+ config = cfg.load(r)
260
+ except RuntimeError as e:
261
+ con.print(f"[red]{e}[/red]")
262
+ return
263
+
264
+ keys: list[dict] = config.get("ai", {}).get("keys", [])
265
+ local_model = config.get("ai", {}).get("local_model_name")
266
+
267
+ con.print()
268
+
269
+ if not keys and not local_model:
270
+ con.print("[dim]No AI keys configured.[/dim]")
271
+ con.print("[dim]Run [bold]p key add[/bold] to add one.[/dim]")
272
+ con.print()
273
+ return
274
+
275
+ table = Table(show_header=True, header_style="bold #C8621A", box=None, pad_edge=False)
276
+ table.add_column("Nickname", style="bold #F2EDD6", width=16)
277
+ table.add_column("Provider", style="#B8A898", width=12)
278
+ table.add_column("Model", style="dim", width=30)
279
+ table.add_column("Status", width=10)
280
+ table.add_column("Env Var", style="dim", width=28)
281
+
282
+ if local_model:
283
+ table.add_row(
284
+ "local",
285
+ "Ollama",
286
+ local_model,
287
+ Text("local", style="#4ADE80"),
288
+ "—",
289
+ )
290
+
291
+ for key in keys:
292
+ status_val = key.get("status", "untested")
293
+ status_colors = {
294
+ "ok": "#4ADE80",
295
+ "error": "red",
296
+ "untested": "dim",
297
+ }
298
+ status_text = Text(status_val, style=status_colors.get(status_val, "dim"))
299
+
300
+ table.add_row(
301
+ key.get("nickname", "?"),
302
+ key.get("provider", "?"),
303
+ key.get("model", "?"),
304
+ status_text,
305
+ key.get("env_var", "?"),
306
+ )
307
+
308
+ con.print(table)
309
+ con.print()
310
+ con.print("[dim]Run [bold]p key test[/bold] to verify all keys.[/dim]")
311
+ con.print()
312
+
313
+
314
+ def run_remove(nickname: str, root: Path | None = None) -> None:
315
+ """p key remove <nickname>"""
316
+ try:
317
+ r = root or require_project_root()
318
+ config = cfg.load(r)
319
+ except RuntimeError as e:
320
+ con.print(f"[red]{e}[/red]")
321
+ return
322
+
323
+ keys: list[dict] = config.get("ai", {}).get("keys", [])
324
+ target = next((k for k in keys if k.get("nickname") == nickname), None)
325
+
326
+ if not target:
327
+ con.print(f"[yellow]No key with nickname {nickname!r} found.[/yellow]")
328
+ return
329
+
330
+ env_var = target.get("env_var", "")
331
+ con.print(
332
+ f"[yellow]Remove key [bold]{nickname}[/bold] ({target.get('provider', '?')})?[/yellow]"
333
+ )
334
+ if Confirm.ask("Confirm removal", default=False):
335
+ keys = [k for k in keys if k.get("nickname") != nickname]
336
+ cfg.set_value("ai.keys", keys, r)
337
+ # Remove from .env file
338
+ if env_var:
339
+ _remove_env_var(r / ".patchi" / ".env", env_var)
340
+ con.print(f"[#4ADE80]✓[/#4ADE80] Key [bold]{nickname}[/bold] removed.")
341
+ else:
342
+ con.print("[dim]Cancelled.[/dim]")
343
+
344
+
345
+ def run_test(nickname: str | None = None, root: Path | None = None) -> None:
346
+ """p key test [nickname] — test one or all keys"""
347
+ try:
348
+ r = root or require_project_root()
349
+ config = cfg.load(r)
350
+ except RuntimeError as e:
351
+ con.print(f"[red]{e}[/red]")
352
+ return
353
+
354
+ # Load env from .patchi/.env
355
+ _load_env_file(r / ".patchi" / ".env")
356
+
357
+ keys: list[dict] = config.get("ai", {}).get("keys", [])
358
+ if nickname:
359
+ keys = [k for k in keys if k.get("nickname") == nickname]
360
+ if not keys:
361
+ con.print(f"[yellow]No key with nickname {nickname!r}.[/yellow]")
362
+ return
363
+
364
+ if not keys:
365
+ con.print("[dim]No keys to test.[/dim]")
366
+ return
367
+
368
+ con.print()
369
+ updated_keys: list[dict] = list(config.get("ai", {}).get("keys", []))
370
+
371
+ for key in keys:
372
+ nick = key.get("nickname", "?")
373
+ provider = key.get("provider", "?")
374
+ env_var = key.get("env_var", "")
375
+ fmt = key.get("format", "openai")
376
+ base_url = key.get("base_url", "")
377
+ model = key.get("model", "")
378
+
379
+ api_key = os.environ.get(env_var, "")
380
+ if not api_key:
381
+ con.print(
382
+ f" [yellow]⚠[/yellow] [bold]{nick}[/bold] — env var {env_var} not set or empty"
383
+ )
384
+ continue
385
+
386
+ con.print(f" Testing [bold]{nick}[/bold] ({provider})…", end=" ")
387
+
388
+ try:
389
+ result = _test_key(api_key, fmt, base_url, model)
390
+ if result["ok"]:
391
+ con.print(f"[#4ADE80]✓[/#4ADE80] [dim]{result['latency_ms']}ms[/dim]")
392
+ _update_key_status(updated_keys, nick, "ok")
393
+ else:
394
+ con.print(f"[red]✗[/red] [dim]{result['error']}[/dim]")
395
+ _update_key_status(updated_keys, nick, "error")
396
+ except Exception as e:
397
+ con.print(f"[red]✗[/red] [dim]{e}[/dim]")
398
+ _update_key_status(updated_keys, nick, "error")
399
+
400
+ cfg.set_value("ai.keys", updated_keys, r)
401
+ con.print()
402
+
403
+
404
+ # ── Key test probe ─────────────────────────────────────────────────────────────
405
+
406
+
407
+ def _test_key(api_key: str, fmt: str, base_url: str, model: str) -> dict:
408
+ """
409
+ Fire a minimal test request. Returns {ok, latency_ms, error}.
410
+ Uses urllib to avoid requiring httpx/requests.
411
+ """
412
+ import json
413
+ import time
414
+ import urllib.error
415
+ import urllib.request
416
+
417
+ start = time.monotonic()
418
+
419
+ if fmt == "openai":
420
+ url = f"{base_url}/chat/completions"
421
+ payload = json.dumps(
422
+ {
423
+ "model": model,
424
+ "messages": [{"role": "user", "content": "Say: ok"}],
425
+ "max_tokens": 5,
426
+ }
427
+ ).encode()
428
+ headers = {
429
+ "Authorization": f"Bearer {api_key}",
430
+ "Content-Type": "application/json",
431
+ }
432
+
433
+ elif fmt == "anthropic":
434
+ url = f"{base_url}/messages"
435
+ payload = json.dumps(
436
+ {
437
+ "model": model,
438
+ "max_tokens": 5,
439
+ "messages": [{"role": "user", "content": "Say: ok"}],
440
+ }
441
+ ).encode()
442
+ headers = {
443
+ "x-api-key": api_key,
444
+ "anthropic-version": "2023-06-01",
445
+ "Content-Type": "application/json",
446
+ }
447
+
448
+ elif fmt == "google":
449
+ url = f"{base_url}/models/{model}:generateContent?key={api_key}"
450
+ payload = json.dumps(
451
+ {
452
+ "contents": [{"parts": [{"text": "Say: ok"}]}],
453
+ "generationConfig": {"maxOutputTokens": 5},
454
+ }
455
+ ).encode()
456
+ headers = {"Content-Type": "application/json"}
457
+
458
+ elif fmt == "cohere":
459
+ url = f"{base_url}/generate"
460
+ payload = json.dumps(
461
+ {
462
+ "model": model,
463
+ "prompt": "Say: ok",
464
+ "max_tokens": 5,
465
+ }
466
+ ).encode()
467
+ headers = {
468
+ "Authorization": f"Bearer {api_key}",
469
+ "Content-Type": "application/json",
470
+ }
471
+
472
+ else:
473
+ return {"ok": False, "latency_ms": 0, "error": f"Unknown format: {fmt}"}
474
+
475
+ try:
476
+ req = urllib.request.Request(url, data=payload, headers=headers, method="POST")
477
+ with urllib.request.urlopen(req, timeout=10) as resp:
478
+ resp.read()
479
+ latency_ms = int((time.monotonic() - start) * 1000)
480
+ return {"ok": True, "latency_ms": latency_ms, "error": ""}
481
+
482
+ except urllib.error.HTTPError as e:
483
+ body = e.read().decode(errors="replace")[:200]
484
+ return {"ok": False, "latency_ms": 0, "error": f"HTTP {e.code}: {body}"}
485
+ except Exception as e:
486
+ return {"ok": False, "latency_ms": 0, "error": str(e)}
487
+
488
+
489
+ # ── .env helpers ───────────────────────────────────────────────────────────────
490
+
491
+
492
+ def _write_env_var(env_file: Path, key: str, value: str) -> None:
493
+ """Append or update a KEY=VALUE line in .env file."""
494
+ env_file.parent.mkdir(parents=True, exist_ok=True)
495
+
496
+ data = {}
497
+ if env_file.exists():
498
+ try:
499
+ content = env_file.read_text(encoding="utf-8")
500
+ for line in content.splitlines():
501
+ line = line.strip()
502
+ if "=" in line and not line.startswith("#"):
503
+ k, _, v = line.partition("=")
504
+ data[k.strip()] = v.strip()
505
+ except Exception as e:
506
+ _log.warning("_write_env_var failed: %s", e)
507
+ data = {}
508
+
509
+ data[key] = value
510
+ lines = [f"{k}={v}" for k, v in data.items()]
511
+ env_file.write_text("\n".join(lines) + "\n", encoding="utf-8")
512
+
513
+
514
+ def _remove_env_var(env_file: Path, key: str) -> None:
515
+ """Remove an entry from .env file."""
516
+ if not env_file.exists():
517
+ return
518
+
519
+ data = {}
520
+ try:
521
+ content = env_file.read_text(encoding="utf-8")
522
+ for line in content.splitlines():
523
+ line = line.strip()
524
+ if "=" in line and not line.startswith("#"):
525
+ k, _, v = line.partition("=")
526
+ data[k.strip()] = v.strip()
527
+ except Exception as e:
528
+ _log.warning("_remove_env_var failed: %s", e)
529
+ return
530
+
531
+ if key in data:
532
+ del data[key]
533
+ lines = [f"{k}={v}" for k, v in data.items()]
534
+ env_file.write_text("\n".join(lines) + "\n", encoding="utf-8")
535
+
536
+
537
+ def _load_env_file(env_file: Path) -> None:
538
+ """Load .env file into os.environ (only missing vars)."""
539
+ if not env_file.exists():
540
+ return
541
+
542
+ try:
543
+ content = env_file.read_text(encoding="utf-8")
544
+ for line in content.splitlines():
545
+ line = line.strip()
546
+ if "=" in line and not line.startswith("#"):
547
+ k, _, v = line.partition("=")
548
+ if k.strip() and k.strip() not in os.environ:
549
+ os.environ[k.strip()] = v.strip()
550
+ except Exception as e:
551
+ _log.warning("_load_env_file failed: %s", e)
552
+
553
+
554
+ def _ensure_gitignore(root: Path) -> None:
555
+ """Make sure .patchi/.env is in .gitignore."""
556
+ gitignore = root / ".gitignore"
557
+ entry = ".patchi/.env"
558
+ if gitignore.exists():
559
+ content = gitignore.read_text(encoding="utf-8")
560
+ if entry not in content:
561
+ with gitignore.open("a", encoding="utf-8") as f:
562
+ f.write(f"\n# Patchi key storage\n{entry}\n")
563
+ else:
564
+ gitignore.write_text(f"# Patchi key storage\n{entry}\n", encoding="utf-8")
565
+
566
+
567
+ def _update_key_status(keys: list[dict], nickname: str, status: str) -> None:
568
+ for k in keys:
569
+ if k.get("nickname") == nickname:
570
+ k["status"] = status
571
+ break