patchi 0.7.5__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- patchi/__init__.py +1 -0
- patchi/__main__.py +13 -0
- patchi/cli/__init__.py +0 -0
- patchi/cli/command_families.py +235 -0
- patchi/cli/commands/__init__.py +0 -0
- patchi/cli/commands/access_cmd.py +65 -0
- patchi/cli/commands/agent_stats_cmd.py +273 -0
- patchi/cli/commands/agents_cmd.py +187 -0
- patchi/cli/commands/ai_cmd.py +308 -0
- patchi/cli/commands/assure_cmd.py +538 -0
- patchi/cli/commands/audit_cmd.py +286 -0
- patchi/cli/commands/auto_cmd.py +110 -0
- patchi/cli/commands/blame_cmd.py +53 -0
- patchi/cli/commands/chains_cmd.py +327 -0
- patchi/cli/commands/charter_cmd.py +173 -0
- patchi/cli/commands/chat_cmd.py +597 -0
- patchi/cli/commands/check_cmd.py +232 -0
- patchi/cli/commands/cleanup_cmd.py +328 -0
- patchi/cli/commands/cockpit_cmd.py +208 -0
- patchi/cli/commands/commands_cmd.py +160 -0
- patchi/cli/commands/cross_repo_cmd.py +113 -0
- patchi/cli/commands/deps_cmd.py +110 -0
- patchi/cli/commands/dev_check_cmd.py +342 -0
- patchi/cli/commands/dev_cmd.py +445 -0
- patchi/cli/commands/doctor_cmd.py +457 -0
- patchi/cli/commands/findings_cmd.py +187 -0
- patchi/cli/commands/fix_cmd.py +648 -0
- patchi/cli/commands/fix_review_cmd.py +273 -0
- patchi/cli/commands/heatmap_cmd.py +62 -0
- patchi/cli/commands/help_cmd.py +159 -0
- patchi/cli/commands/hosted_cmd.py +980 -0
- patchi/cli/commands/init.py +456 -0
- patchi/cli/commands/key_cmd.py +571 -0
- patchi/cli/commands/learn_cmd.py +140 -0
- patchi/cli/commands/link_cmd.py +104 -0
- patchi/cli/commands/log_cmd.py +57 -0
- patchi/cli/commands/memory_cmd.py +215 -0
- patchi/cli/commands/model_cmd.py +207 -0
- patchi/cli/commands/notify_cmd.py +213 -0
- patchi/cli/commands/notify_prompts.py +29 -0
- patchi/cli/commands/patch_cmd.py +231 -0
- patchi/cli/commands/plan_cmd.py +128 -0
- patchi/cli/commands/plugins_cmd.py +307 -0
- patchi/cli/commands/queue_cmd.py +152 -0
- patchi/cli/commands/quick_cmd.py +159 -0
- patchi/cli/commands/ready_cmd.py +292 -0
- patchi/cli/commands/report_cmd.py +416 -0
- patchi/cli/commands/restrict_cmd.py +127 -0
- patchi/cli/commands/review_cmd.py +225 -0
- patchi/cli/commands/rules_cmd.py +233 -0
- patchi/cli/commands/scan_cmd.py +1908 -0
- patchi/cli/commands/settings_cmd.py +45 -0
- patchi/cli/commands/status_cmd.py +679 -0
- patchi/cli/commands/test_cmd.py +1052 -0
- patchi/cli/commands/trend_cmd.py +296 -0
- patchi/cli/commands/undo_cmd.py +235 -0
- patchi/cli/commands/update_cmd.py +345 -0
- patchi/cli/commands/verify_cmd.py +56 -0
- patchi/cli/commands/vr_cmd.py +440 -0
- patchi/cli/commands/watch_cmd.py +304 -0
- patchi/cli/commands/web_cmd.py +114 -0
- patchi/cli/console.py +101 -0
- patchi/cli/display/__init__.py +1 -0
- patchi/cli/display/live_audit.py +269 -0
- patchi/cli/display/live_progress.py +169 -0
- patchi/cli/framework.py +241 -0
- patchi/cli/logo.py +128 -0
- patchi/cli/main.py +222 -0
- patchi/cli/registry.py +1171 -0
- patchi/cli/style.py +68 -0
- patchi/cli/themes.py +187 -0
- patchi/cli/ux.py +444 -0
- patchi/core/__init__.py +0 -0
- patchi/core/agents/__init__.py +0 -0
- patchi/core/agents/api_fuzzer_agent.py +141 -0
- patchi/core/agents/attack_agent.py +242 -0
- patchi/core/agents/base.py +1012 -0
- patchi/core/agents/bug_predictor_agent.py +58 -0
- patchi/core/agents/build_tool_validator.py +150 -0
- patchi/core/agents/cache.py +192 -0
- patchi/core/agents/chaos_agent.py +133 -0
- patchi/core/agents/cicd_generator.py +240 -0
- patchi/core/agents/comment_scanner.py +280 -0
- patchi/core/agents/console_logging_agent.py +156 -0
- patchi/core/agents/coordinator.py +858 -0
- patchi/core/agents/core_scanner.py +269 -0
- patchi/core/agents/coverage_prioritizer.py +181 -0
- patchi/core/agents/dead_code_hygiene.py +296 -0
- patchi/core/agents/dead_code_scanner.py +692 -0
- patchi/core/agents/dependency_scanner.py +725 -0
- patchi/core/agents/doc_claim_agent.py +573 -0
- patchi/core/agents/duplicate_scanner.py +568 -0
- patchi/core/agents/env_scanner.py +410 -0
- patchi/core/agents/feature_flag_agent.py +89 -0
- patchi/core/agents/frontend_framework_agent.py +133 -0
- patchi/core/agents/goroutine_agent.py +82 -0
- patchi/core/agents/governor.py +1972 -0
- patchi/core/agents/i18n_agent.py +95 -0
- patchi/core/agents/license_compliance.py +247 -0
- patchi/core/agents/linking_agent.py +251 -0
- patchi/core/agents/memory_profiler_agent.py +102 -0
- patchi/core/agents/modernization_agent.py +84 -0
- patchi/core/agents/mutation_agent.py +174 -0
- patchi/core/agents/nl_query_agent.py +74 -0
- patchi/core/agents/promise_rejection_agent.py +100 -0
- patchi/core/agents/refactoring_agent.py +286 -0
- patchi/core/agents/resource_leak_agent.py +91 -0
- patchi/core/agents/route_graph_scanner.py +951 -0
- patchi/core/agents/run_agent.py +106 -0
- patchi/core/agents/rust_unwrap_agent.py +100 -0
- patchi/core/agents/sbom_generator.py +284 -0
- patchi/core/agents/scanners.py +67 -0
- patchi/core/agents/side/__init__.py +1 -0
- patchi/core/agents/side/build_agent.py +65 -0
- patchi/core/agents/side/format_agent.py +50 -0
- patchi/core/agents/side/install_agent.py +63 -0
- patchi/core/agents/side_file_scanner.py +549 -0
- patchi/core/agents/snapshot_drift_detector.py +146 -0
- patchi/core/agents/spa_route_inventory.py +203 -0
- patchi/core/agents/test_scanner.py +442 -0
- patchi/core/agents/tool_health.py +109 -0
- patchi/core/agents/tool_runner.py +162 -0
- patchi/core/agents/type_scanner.py +168 -0
- patchi/core/agents/ui_scanner.py +558 -0
- patchi/core/ai/__init__.py +20 -0
- patchi/core/ai/agent_audit.py +153 -0
- patchi/core/ai/agent_profiler.py +277 -0
- patchi/core/ai/client.py +499 -0
- patchi/core/ai/cost_tracker.py +107 -0
- patchi/core/ai/model_router.py +318 -0
- patchi/core/ai/orchestrator.py +625 -0
- patchi/core/ai/prompts.py +681 -0
- patchi/core/ai/smart.py +302 -0
- patchi/core/ai/tool_executor.py +24 -0
- patchi/core/ai/tools/__init__.py +10 -0
- patchi/core/ai/tools/executor.py +621 -0
- patchi/core/ai/tools/realize.py +1160 -0
- patchi/core/ai/tools/registry.py +1577 -0
- patchi/core/assurance/__init__.py +33 -0
- patchi/core/assurance/builder.py +211 -0
- patchi/core/assurance/graph.py +342 -0
- patchi/core/assurance/invariants.py +168 -0
- patchi/core/atomic.py +61 -0
- patchi/core/attackers/__init__.py +17 -0
- patchi/core/attackers/api_abuse.py +89 -0
- patchi/core/attackers/auth_bypass.py +73 -0
- patchi/core/attackers/base.py +91 -0
- patchi/core/attackers/business_logic.py +88 -0
- patchi/core/attackers/planner.py +108 -0
- patchi/core/attackers/priv_escalation.py +88 -0
- patchi/core/attackers/recon.py +87 -0
- patchi/core/brain/__init__.py +0 -0
- patchi/core/brain/ast_utils/__init__.py +81 -0
- patchi/core/brain/ast_utils/assignments.py +219 -0
- patchi/core/brain/ast_utils/calls.py +139 -0
- patchi/core/brain/ast_utils/config.py +132 -0
- patchi/core/brain/ast_utils/control_flow.py +74 -0
- patchi/core/brain/ast_utils/dead_symbols.py +205 -0
- patchi/core/brain/ast_utils/decorators.py +108 -0
- patchi/core/brain/ast_utils/helpers.py +144 -0
- patchi/core/brain/ast_utils/imports.py +169 -0
- patchi/core/brain/ast_utils/scan.py +143 -0
- patchi/core/brain/ast_utils/taint.py +310 -0
- patchi/core/brain/audit.py +379 -0
- patchi/core/brain/baseline.py +195 -0
- patchi/core/brain/blast_radius.py +312 -0
- patchi/core/brain/body_tags.py +144 -0
- patchi/core/brain/brain.py +1161 -0
- patchi/core/brain/brain_context.py +393 -0
- patchi/core/brain/brain_watcher.py +340 -0
- patchi/core/brain/charter.py +473 -0
- patchi/core/brain/classifier.py +214 -0
- patchi/core/brain/cockpit.py +350 -0
- patchi/core/brain/code_query.py +710 -0
- patchi/core/brain/contract.py +889 -0
- patchi/core/brain/contract_diff.py +155 -0
- patchi/core/brain/council.py +800 -0
- patchi/core/brain/cross_repo.py +104 -0
- patchi/core/brain/dead_code_tools.py +157 -0
- patchi/core/brain/doc_validator.py +197 -0
- patchi/core/brain/domain_activator.py +2183 -0
- patchi/core/brain/enriched_context.py +220 -0
- patchi/core/brain/file_corpus.py +220 -0
- patchi/core/brain/framework.py +953 -0
- patchi/core/brain/freshness.py +273 -0
- patchi/core/brain/git_aware.py +206 -0
- patchi/core/brain/heatmap.py +104 -0
- patchi/core/brain/ignore_parser.py +153 -0
- patchi/core/brain/import_graph.py +486 -0
- patchi/core/brain/languages.py +397 -0
- patchi/core/brain/layered_brain.py +419 -0
- patchi/core/brain/learning.py +229 -0
- patchi/core/brain/orphaned_endpoints.py +313 -0
- patchi/core/brain/personas/__init__.py +648 -0
- patchi/core/brain/personas/bad_user.py +165 -0
- patchi/core/brain/personas/base.py +349 -0
- patchi/core/brain/proactive.py +807 -0
- patchi/core/brain/project_context.py +121 -0
- patchi/core/brain/project_reader.py +521 -0
- patchi/core/brain/reasoning.py +269 -0
- patchi/core/brain/route_detector/__init__.py +15 -0
- patchi/core/brain/route_detector/base.py +31 -0
- patchi/core/brain/route_detector/csharp.py +209 -0
- patchi/core/brain/route_detector/file_based.py +81 -0
- patchi/core/brain/route_detector/go.py +152 -0
- patchi/core/brain/route_detector/java.py +195 -0
- patchi/core/brain/route_detector/javascript.py +197 -0
- patchi/core/brain/route_detector/php.py +158 -0
- patchi/core/brain/route_detector/python.py +193 -0
- patchi/core/brain/route_detector/registry.py +25 -0
- patchi/core/brain/route_detector/ruby.py +134 -0
- patchi/core/brain/route_detector/rust.py +216 -0
- patchi/core/brain/route_detector/swift.py +118 -0
- patchi/core/brain/route_mapper.py +265 -0
- patchi/core/brain/scanner.py +2136 -0
- patchi/core/brain/secrets.py +280 -0
- patchi/core/brain/symbol_graph.py +1955 -0
- patchi/core/brain/team.py +28 -0
- patchi/core/brain/trace_log.py +132 -0
- patchi/core/brain/type_checker/__init__.py +65 -0
- patchi/core/brain/type_checker/base.py +60 -0
- patchi/core/brain/type_checker/csharp.py +59 -0
- patchi/core/brain/type_checker/dart.py +59 -0
- patchi/core/brain/type_checker/go.py +81 -0
- patchi/core/brain/type_checker/java.py +75 -0
- patchi/core/brain/type_checker/kotlin.py +75 -0
- patchi/core/brain/type_checker/php.py +88 -0
- patchi/core/brain/type_checker/python.py +87 -0
- patchi/core/brain/type_checker/rust.py +81 -0
- patchi/core/brain/type_checker/swift.py +59 -0
- patchi/core/brain/type_checker/typescript.py +298 -0
- patchi/core/brain/understander.py +130 -0
- patchi/core/brain/verify.py +379 -0
- patchi/core/campaigns/__init__.py +14 -0
- patchi/core/campaigns/base.py +62 -0
- patchi/core/campaigns/data_flow_abuse.py +153 -0
- patchi/core/campaigns/orchestrator.py +140 -0
- patchi/core/campaigns/state_transitions.py +178 -0
- patchi/core/ci_bundle.py +104 -0
- patchi/core/config.py +311 -0
- patchi/core/constants.py +245 -0
- patchi/core/debug/__init__.py +25 -0
- patchi/core/debug/adapters/__init__.py +11 -0
- patchi/core/debug/adapters/codelldb.py +379 -0
- patchi/core/debug/adapters/node.py +222 -0
- patchi/core/debug/adapters/powershell.py +210 -0
- patchi/core/debug/adapters/python.py +244 -0
- patchi/core/debug/capture.py +210 -0
- patchi/core/debug/dap_client.py +268 -0
- patchi/core/detector/__init__.py +0 -0
- patchi/core/detector/audit.py +194 -0
- patchi/core/detector/bus.py +226 -0
- patchi/core/detector/dispatcher.py +275 -0
- patchi/core/detector/event.py +254 -0
- patchi/core/detector/sigma_engine.py +378 -0
- patchi/core/detector/triage.py +289 -0
- patchi/core/export/sarif.py +113 -0
- patchi/core/fix/__init__.py +17 -0
- patchi/core/fix/applier.py +574 -0
- patchi/core/fix/base.py +510 -0
- patchi/core/fix/code_fixer.py +169 -0
- patchi/core/fix/dead_code_remover.py +131 -0
- patchi/core/fix/fix_agents.py +775 -0
- patchi/core/fix/patch.py +444 -0
- patchi/core/fix/risk_gate.py +383 -0
- patchi/core/fix/security_fixer.py +93 -0
- patchi/core/fix/verify_loop.py +204 -0
- patchi/core/fuzz/__init__.py +8 -0
- patchi/core/fuzz/corpus.py +137 -0
- patchi/core/fuzz/input_fuzzer.py +256 -0
- patchi/core/fuzz/sequence_fuzzer.py +162 -0
- patchi/core/fuzz/state_fuzzer.py +236 -0
- patchi/core/health.py +407 -0
- patchi/core/hosted/__init__.py +1 -0
- patchi/core/hosted/anomaly.py +298 -0
- patchi/core/hosted/audit_log.py +102 -0
- patchi/core/hosted/compliance_report.py +148 -0
- patchi/core/hosted/ip_reputation.py +169 -0
- patchi/core/hosted/log_parsers.py +251 -0
- patchi/core/hosted/tokens.py +127 -0
- patchi/core/hosted/watchlist.py +164 -0
- patchi/core/hosted/webhooks.py +156 -0
- patchi/core/memory.py +437 -0
- patchi/core/notifications/__init__.py +18 -0
- patchi/core/notifications/channels.py +192 -0
- patchi/core/notifications/digest.py +141 -0
- patchi/core/notifications/escalation.py +158 -0
- patchi/core/notifications/notifier.py +182 -0
- patchi/core/notifications/quiet_hours.py +69 -0
- patchi/core/plugins/__init__.py +48 -0
- patchi/core/plugins/analyzer.py +326 -0
- patchi/core/plugins/analyzers/__init__.py +6 -0
- patchi/core/plugins/analyzers/dead_code_analyzer.py +120 -0
- patchi/core/plugins/analyzers/secret_scanner.py +158 -0
- patchi/core/plugins/analyzers/todo_scanner.py +115 -0
- patchi/core/plugins/registry.py +335 -0
- patchi/core/queue.py +375 -0
- patchi/core/reliability/__init__.py +13 -0
- patchi/core/reliability/chaos.py +163 -0
- patchi/core/reliability/fault_injector.py +172 -0
- patchi/core/reliability/idempotency.py +128 -0
- patchi/core/reliability/recovery.py +147 -0
- patchi/core/runtime/__init__.py +5 -0
- patchi/core/runtime/tracer.py +230 -0
- patchi/core/scan_bus.py +156 -0
- patchi/core/security/__init__.py +1 -0
- patchi/core/security/ai_validator.py +462 -0
- patchi/core/security/app_mapper.py +216 -0
- patchi/core/security/app_profile.py +464 -0
- patchi/core/security/attack_feedback.py +141 -0
- patchi/core/security/attack_scenarios/__init__.py +1 -0
- patchi/core/security/attack_tree.py +176 -0
- patchi/core/security/auth_audit_agent.py +344 -0
- patchi/core/security/authz_agent.py +602 -0
- patchi/core/security/auto_fix_proactive.py +620 -0
- patchi/core/security/auto_fixer.py +660 -0
- patchi/core/security/auto_ticket.py +53 -0
- patchi/core/security/bandit_agent.py +152 -0
- patchi/core/security/blast_radius.py +226 -0
- patchi/core/security/browser_tester.py +333 -0
- patchi/core/security/business_logic_agent.py +263 -0
- patchi/core/security/catch_block_auditor.py +395 -0
- patchi/core/security/cdn_cache_agent.py +357 -0
- patchi/core/security/chain_analyzer.py +321 -0
- patchi/core/security/chain_to_assurance.py +168 -0
- patchi/core/security/charter.py +510 -0
- patchi/core/security/cloud_waf_detector.py +295 -0
- patchi/core/security/codeql_agent.py +233 -0
- patchi/core/security/compliance_agent.py +348 -0
- patchi/core/security/confidence_gate.py +423 -0
- patchi/core/security/container_scanner.py +282 -0
- patchi/core/security/crypto_agent.py +378 -0
- patchi/core/security/cve_monitor.py +262 -0
- patchi/core/security/dast_agent.py +865 -0
- patchi/core/security/defectdojo.py +238 -0
- patchi/core/security/defenders/__init__.py +75 -0
- patchi/core/security/defenders/auth_middleware.py +115 -0
- patchi/core/security/defenders/base.py +97 -0
- patchi/core/security/defenders/block_ip.py +71 -0
- patchi/core/security/defenders/block_ws_origin.py +36 -0
- patchi/core/security/defenders/crypto_fix.py +118 -0
- patchi/core/security/defenders/enforce_rate_limit.py +108 -0
- patchi/core/security/defenders/fix_code.py +93 -0
- patchi/core/security/defenders/invalidate_session.py +40 -0
- patchi/core/security/defenders/patch_config.py +70 -0
- patchi/core/security/defenders/rotate_secret.py +54 -0
- patchi/core/security/defenders/suspend_account.py +41 -0
- patchi/core/security/defenders/update_dependency.py +160 -0
- patchi/core/security/defense_layer.py +217 -0
- patchi/core/security/dependency_vulnerability_agent.py +616 -0
- patchi/core/security/detection_pipeline.py +289 -0
- patchi/core/security/dns_security_agent.py +497 -0
- patchi/core/security/domain_activator_v2.py +913 -0
- patchi/core/security/domain_loader.py +1004 -0
- patchi/core/security/domains/__init__.py +0 -0
- patchi/core/security/email_authentication_agent.py +417 -0
- patchi/core/security/env_var_validator.py +304 -0
- patchi/core/security/evidence.py +100 -0
- patchi/core/security/falco_runtime_agent.py +387 -0
- patchi/core/security/fix-playbooks/__init__.py +0 -0
- patchi/core/security/gated_finding.py +85 -0
- patchi/core/security/git_diff_activator.py +367 -0
- patchi/core/security/governance.py +208 -0
- patchi/core/security/gradual_gate.py +34 -0
- patchi/core/security/history.py +315 -0
- patchi/core/security/iac_scanner.py +250 -0
- patchi/core/security/ignore_expiry.py +111 -0
- patchi/core/security/ignore_learner.py +416 -0
- patchi/core/security/injection_agent.py +319 -0
- patchi/core/security/insecure_randomness_agent.py +288 -0
- patchi/core/security/intent_analyzer.py +326 -0
- patchi/core/security/jwt_agent.py +453 -0
- patchi/core/security/kubernetes_agent.py +638 -0
- patchi/core/security/layer2_orchestrator.py +341 -0
- patchi/core/security/llm_security_agent.py +252 -0
- patchi/core/security/misconfig_agent.py +600 -0
- patchi/core/security/mobile_security_agent.py +474 -0
- patchi/core/security/network_agent.py +376 -0
- patchi/core/security/noise_filter.py +274 -0
- patchi/core/security/orchestrator.py +313 -0
- patchi/core/security/pattern_context.py +125 -0
- patchi/core/security/pattern_loader.py +101 -0
- patchi/core/security/pentest/__init__.py +4 -0
- patchi/core/security/pentest/base.py +58 -0
- patchi/core/security/pentest/dalfox_adapter.py +40 -0
- patchi/core/security/pentest/ffuf_adapter.py +48 -0
- patchi/core/security/pentest/nuclei_adapter.py +50 -0
- patchi/core/security/pentest/registry.py +80 -0
- patchi/core/security/pentest/shannon_adapter.py +107 -0
- patchi/core/security/pentest/sqlmap_adapter.py +56 -0
- patchi/core/security/pentest/zap_adapter.py +52 -0
- patchi/core/security/plan_auditor.py +276 -0
- patchi/core/security/policy_engine.py +272 -0
- patchi/core/security/prechecks.py +172 -0
- patchi/core/security/precommit_hook.py +247 -0
- patchi/core/security/privacy_agent.py +361 -0
- patchi/core/security/push_notification_agent.py +417 -0
- patchi/core/security/pysa_agent.py +143 -0
- patchi/core/security/reasoning.py +442 -0
- patchi/core/security/red_team_agent.py +184 -0
- patchi/core/security/red_team_engine.py +1142 -0
- patchi/core/security/remediation.py +360 -0
- patchi/core/security/request_interceptor.py +294 -0
- patchi/core/security/runtime_validator.py +245 -0
- patchi/core/security/saml_sso_agent.py +401 -0
- patchi/core/security/sast_agent.py +213 -0
- patchi/core/security/sast_gate.py +95 -0
- patchi/core/security/scheduler.py +287 -0
- patchi/core/security/secrets_runtime_agent.py +476 -0
- patchi/core/security/security_agents.py +175 -0
- patchi/core/security/security_config.py +551 -0
- patchi/core/security/security_probe.py +762 -0
- patchi/core/security/security_taint.py +1005 -0
- patchi/core/security/sensitive_data_agent.py +271 -0
- patchi/core/security/service_mesh_agent.py +412 -0
- patchi/core/security/session_management_agent.py +245 -0
- patchi/core/security/ssrf_agent.py +422 -0
- patchi/core/security/supply_chain.py +449 -0
- patchi/core/security/threat_model_generator.py +378 -0
- patchi/core/security/threat_model_updater.py +196 -0
- patchi/core/security/tool_adapters.py +135 -0
- patchi/core/security/tool_verify.py +173 -0
- patchi/core/security/websocket_security_agent.py +188 -0
- patchi/core/snapshot.py +242 -0
- patchi/core/tenant.py +386 -0
- patchi/core/testing/__init__.py +17 -0
- patchi/core/testing/_browser.py +147 -0
- patchi/core/testing/ads_agent.py +141 -0
- patchi/core/testing/api_contract_agent.py +450 -0
- patchi/core/testing/app_discovery_agent.py +641 -0
- patchi/core/testing/app_launcher.py +184 -0
- patchi/core/testing/browser_test_agent.py +516 -0
- patchi/core/testing/e2e_flow_agent.py +354 -0
- patchi/core/testing/flake_detector_agent.py +292 -0
- patchi/core/testing/gate.py +31 -0
- patchi/core/testing/live_test_runner.py +304 -0
- patchi/core/testing/live_v2/__init__.py +1 -0
- patchi/core/testing/live_v2/browser_pool.py +349 -0
- patchi/core/testing/live_v2/browser_test_runner.py +313 -0
- patchi/core/testing/live_v2/runner.py +626 -0
- patchi/core/testing/live_v2/screenshot_manager.py +474 -0
- patchi/core/testing/live_v2/stress_orchestrator.py +523 -0
- patchi/core/testing/live_v2/video_recorder.py +303 -0
- patchi/core/testing/regression_agent.py +302 -0
- patchi/core/testing/security_test_agent.py +253 -0
- patchi/core/testing/stress_test_agent.py +203 -0
- patchi/core/testing/test_agents.py +50 -0
- patchi/core/testing/test_config.py +194 -0
- patchi/core/testing/ui_accessibility_agent.py +324 -0
- patchi/core/testing/ui_button_agent.py +294 -0
- patchi/core/testing/ui_layout_agent.py +330 -0
- patchi/core/testing/unit_test_agent.py +1149 -0
- patchi/core/testing/visual_regression_agent.py +260 -0
- patchi/web/__init__.py +1 -0
- patchi/web/api/__init__.py +1 -0
- patchi/web/api/brain_map.py +114 -0
- patchi/web/api/charts.py +47 -0
- patchi/web/api/chat.py +224 -0
- patchi/web/api/cicd.py +576 -0
- patchi/web/api/dast_evidence.py +49 -0
- patchi/web/api/dev_check.py +320 -0
- patchi/web/api/fix.py +134 -0
- patchi/web/api/guard.py +65 -0
- patchi/web/api/hosted.py +128 -0
- patchi/web/api/hosted_v2.py +234 -0
- patchi/web/api/live_testing.py +699 -0
- patchi/web/api/scan.py +582 -0
- patchi/web/api/smart.py +111 -0
- patchi/web/api/tenant.py +117 -0
- patchi/web/api/tools.py +85 -0
- patchi/web/api_legacy.py +2401 -0
- patchi/web/app.py +310 -0
- patchi/web/events.py +483 -0
- patchi/web/routes/__init__.py +1 -0
- patchi/web/routes/assurance.py +541 -0
- patchi/web/routes/brain.py +36 -0
- patchi/web/routes/charter.py +227 -0
- patchi/web/routes/chat.py +23 -0
- patchi/web/routes/dashboard.py +558 -0
- patchi/web/routes/dashboard_v2.py +402 -0
- patchi/web/routes/findings.py +330 -0
- patchi/web/routes/guard.py +35 -0
- patchi/web/routes/history.py +126 -0
- patchi/web/routes/landing.py +52 -0
- patchi/web/routes/live_testing.py +24 -0
- patchi/web/routes/review.py +57 -0
- patchi/web/routes/self_improvement.py +110 -0
- patchi/web/routes/settings.py +49 -0
- patchi/web/routes/tokens.py +29 -0
- patchi/web/spawn.py +139 -0
- patchi/web/ws.py +141 -0
- patchi-0.7.5.dist-info/METADATA +315 -0
- patchi-0.7.5.dist-info/RECORD +496 -0
- patchi-0.7.5.dist-info/WHEEL +5 -0
- patchi-0.7.5.dist-info/licenses/LICENSE +60 -0
- patchi-0.7.5.dist-info/top_level.txt +1 -0
|
@@ -0,0 +1,152 @@
|
|
|
1
|
+
import logging
|
|
2
|
+
import re
|
|
3
|
+
|
|
4
|
+
from patchi.core.brain.route_detector.base import BaseRouteDetector
|
|
5
|
+
from patchi.core.brain.route_detector.registry import register_detector
|
|
6
|
+
|
|
7
|
+
_GO_HTTP_METHODS = {"get", "post", "put", "delete", "patch", "head", "options"}
|
|
8
|
+
|
|
9
|
+
_GIN_PATTERNS = {"r", "router", "engine"}
|
|
10
|
+
_ECHO_PATTERNS = {"e", "echo"}
|
|
11
|
+
_FIBER_PATTERNS = {"app"}
|
|
12
|
+
|
|
13
|
+
_FRAMEWORK_MAP: list[tuple[set[str], str]] = [
|
|
14
|
+
(_GIN_PATTERNS, "Gin"),
|
|
15
|
+
(_ECHO_PATTERNS, "Echo"),
|
|
16
|
+
(_FIBER_PATTERNS, "Fiber"),
|
|
17
|
+
]
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
_log = logging.getLogger("patchi.brain.go")
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
@register_detector("go")
|
|
24
|
+
class GoRouteDetector(BaseRouteDetector):
|
|
25
|
+
def detect(self, content: str, file_path: str) -> list[dict]:
|
|
26
|
+
routes = self._detect_ts(content, file_path)
|
|
27
|
+
if routes:
|
|
28
|
+
return routes
|
|
29
|
+
return self._detect_fallback(content, file_path)
|
|
30
|
+
|
|
31
|
+
def _detect_ts(self, content: str, file_path: str) -> list[dict] | None:
|
|
32
|
+
try:
|
|
33
|
+
from patchi.core.brain.languages import Lang, _build_parser
|
|
34
|
+
|
|
35
|
+
parser = _build_parser(Lang.GO)
|
|
36
|
+
tree = parser.parse(bytes(content, "utf-8"))
|
|
37
|
+
except Exception as e:
|
|
38
|
+
_log.warning("GoRouteDetector._detect_ts failed: %s", e)
|
|
39
|
+
return None
|
|
40
|
+
|
|
41
|
+
routes: list[dict] = []
|
|
42
|
+
self._walk(tree.root_node, bytes(content, "utf-8"), content, file_path, routes)
|
|
43
|
+
return routes
|
|
44
|
+
|
|
45
|
+
def _walk(
|
|
46
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
47
|
+
) -> None:
|
|
48
|
+
ntype = getattr(node, "type", "")
|
|
49
|
+
if ntype == "call_expression":
|
|
50
|
+
self._check_call(node, buf, content, file_path, routes)
|
|
51
|
+
for child in getattr(node, "named_children", None) or getattr(node, "children", []):
|
|
52
|
+
self._walk(child, buf, content, file_path, routes)
|
|
53
|
+
|
|
54
|
+
def _check_call(
|
|
55
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
56
|
+
) -> None:
|
|
57
|
+
func = self._child_by_field(node, "function")
|
|
58
|
+
if func is None or getattr(func, "type", "") != "selector_expression":
|
|
59
|
+
return
|
|
60
|
+
|
|
61
|
+
operand = self._child_by_field(func, "operand")
|
|
62
|
+
field = self._child_by_field(func, "field")
|
|
63
|
+
if operand is None or field is None:
|
|
64
|
+
return
|
|
65
|
+
|
|
66
|
+
obj_name = self._node_text(operand).lower()
|
|
67
|
+
method_name = self._node_text(field).lower()
|
|
68
|
+
|
|
69
|
+
if method_name not in _GO_HTTP_METHODS:
|
|
70
|
+
return
|
|
71
|
+
|
|
72
|
+
framework = ""
|
|
73
|
+
for patterns, fw in _FRAMEWORK_MAP:
|
|
74
|
+
if obj_name in patterns:
|
|
75
|
+
framework = fw
|
|
76
|
+
break
|
|
77
|
+
if not framework:
|
|
78
|
+
return
|
|
79
|
+
|
|
80
|
+
args = self._child_by_field(node, "arguments")
|
|
81
|
+
path = ""
|
|
82
|
+
if args and getattr(args, "named_child_count", 0) > 0:
|
|
83
|
+
first = args.named_child(0)
|
|
84
|
+
if first and first.type in (
|
|
85
|
+
"interpreted_string_literal",
|
|
86
|
+
"raw_string_literal",
|
|
87
|
+
"string_literal",
|
|
88
|
+
):
|
|
89
|
+
raw = self._node_text(first)
|
|
90
|
+
path = raw.strip('"`')
|
|
91
|
+
|
|
92
|
+
if not path:
|
|
93
|
+
return
|
|
94
|
+
|
|
95
|
+
handler = ""
|
|
96
|
+
if args and getattr(args, "named_child_count", 0) >= 2:
|
|
97
|
+
second = args.named_child(1)
|
|
98
|
+
if second and second.type == "identifier":
|
|
99
|
+
handler = self._node_text(second)
|
|
100
|
+
|
|
101
|
+
line = getattr(node, "start_point", (0, 0))[0] + 1
|
|
102
|
+
routes.append(
|
|
103
|
+
self._make_route(
|
|
104
|
+
method_name.upper(), path, handler, file_path, line, framework=framework
|
|
105
|
+
)
|
|
106
|
+
)
|
|
107
|
+
|
|
108
|
+
def _child_by_field(self, node: object, field: str) -> object | None:
|
|
109
|
+
if hasattr(node, "child_by_field_name"):
|
|
110
|
+
return node.child_by_field_name(field)
|
|
111
|
+
return None
|
|
112
|
+
|
|
113
|
+
def _node_text(self, node: object) -> str:
|
|
114
|
+
try:
|
|
115
|
+
raw = getattr(node, "text", b"")
|
|
116
|
+
if isinstance(raw, bytes):
|
|
117
|
+
return raw.decode("utf-8", errors="replace")
|
|
118
|
+
return str(raw)
|
|
119
|
+
except Exception as e:
|
|
120
|
+
_log.debug("GoRouteDetector._node_text failed: %s", e)
|
|
121
|
+
return ""
|
|
122
|
+
|
|
123
|
+
def _detect_fallback(self, content: str, file_path: str) -> list[dict]:
|
|
124
|
+
routes: list[dict] = []
|
|
125
|
+
http = "|".join(m.upper() for m in _GO_HTTP_METHODS)
|
|
126
|
+
for patterns, framework in _FRAMEWORK_MAP:
|
|
127
|
+
for obj in patterns:
|
|
128
|
+
pat = re.compile(
|
|
129
|
+
rf"""{re.escape(obj)}\.({http})\s*\(\s*["']([^"']+)["']""",
|
|
130
|
+
re.IGNORECASE,
|
|
131
|
+
)
|
|
132
|
+
for i, line in enumerate(content.splitlines(), 1):
|
|
133
|
+
m = pat.search(line)
|
|
134
|
+
if not m:
|
|
135
|
+
continue
|
|
136
|
+
handler = ""
|
|
137
|
+
hm = re.search(
|
|
138
|
+
r""",\s*(\w+)\s*\)""", line[m.end() :] if m.end() < len(line) else line
|
|
139
|
+
)
|
|
140
|
+
if hm:
|
|
141
|
+
handler = hm.group(1)
|
|
142
|
+
routes.append(
|
|
143
|
+
self._make_route(
|
|
144
|
+
m.group(1).upper(),
|
|
145
|
+
m.group(2),
|
|
146
|
+
handler,
|
|
147
|
+
file_path,
|
|
148
|
+
i,
|
|
149
|
+
framework=framework,
|
|
150
|
+
)
|
|
151
|
+
)
|
|
152
|
+
return routes
|
|
@@ -0,0 +1,195 @@
|
|
|
1
|
+
import logging
|
|
2
|
+
import re
|
|
3
|
+
|
|
4
|
+
from patchi.core.brain.route_detector.base import BaseRouteDetector
|
|
5
|
+
from patchi.core.brain.route_detector.registry import register_detector
|
|
6
|
+
|
|
7
|
+
_SPRING_MAPPINGS = {
|
|
8
|
+
"getmapping": "GET",
|
|
9
|
+
"postmapping": "POST",
|
|
10
|
+
"putmapping": "PUT",
|
|
11
|
+
"deletemapping": "DELETE",
|
|
12
|
+
"patchmapping": "PATCH",
|
|
13
|
+
"requestmapping": "ANY",
|
|
14
|
+
}
|
|
15
|
+
_SPRING_AUTH_ANNOTATIONS = {"preauthorize", "secured", "rolesallowed"}
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
_log = logging.getLogger("patchi.brain.java")
|
|
19
|
+
|
|
20
|
+
|
|
21
|
+
@register_detector("java")
|
|
22
|
+
class JavaRouteDetector(BaseRouteDetector):
|
|
23
|
+
def detect(self, content: str, file_path: str) -> list[dict]:
|
|
24
|
+
routes = self._detect_ts(content, file_path)
|
|
25
|
+
if routes:
|
|
26
|
+
return routes
|
|
27
|
+
return self._detect_fallback(content, file_path)
|
|
28
|
+
|
|
29
|
+
def _detect_ts(self, content: str, file_path: str) -> list[dict] | None:
|
|
30
|
+
try:
|
|
31
|
+
from patchi.core.brain.languages import Lang, _build_parser
|
|
32
|
+
|
|
33
|
+
parser = _build_parser(Lang.JAVA)
|
|
34
|
+
tree = parser.parse(bytes(content, "utf-8"))
|
|
35
|
+
except Exception as e:
|
|
36
|
+
_log.warning("JavaRouteDetector._detect_ts failed: %s", e)
|
|
37
|
+
return None
|
|
38
|
+
|
|
39
|
+
routes: list[dict] = []
|
|
40
|
+
self._walk(tree.root_node, bytes(content, "utf-8"), content, file_path, routes)
|
|
41
|
+
return routes
|
|
42
|
+
|
|
43
|
+
def _walk(
|
|
44
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
45
|
+
) -> None:
|
|
46
|
+
ntype = getattr(node, "type", "")
|
|
47
|
+
if ntype in ("marker_annotation", "annotation"):
|
|
48
|
+
self._check_annotation(node, buf, content, file_path, routes)
|
|
49
|
+
|
|
50
|
+
for child in getattr(node, "named_children", None) or getattr(node, "children", []):
|
|
51
|
+
self._walk(child, buf, content, file_path, routes)
|
|
52
|
+
|
|
53
|
+
def _check_annotation(
|
|
54
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
55
|
+
) -> None:
|
|
56
|
+
name_node = self._child_by_field(node, "name") or node
|
|
57
|
+
try:
|
|
58
|
+
ann_name = self._node_text(name_node).lower()
|
|
59
|
+
except Exception as e:
|
|
60
|
+
_log.warning("JavaRouteDetector._check_annotation failed: %s", e)
|
|
61
|
+
return
|
|
62
|
+
|
|
63
|
+
method = _SPRING_MAPPINGS.get(ann_name)
|
|
64
|
+
if method is None:
|
|
65
|
+
return
|
|
66
|
+
|
|
67
|
+
path = ""
|
|
68
|
+
args_node = self._child_by_field(node, "arguments")
|
|
69
|
+
if args_node:
|
|
70
|
+
try:
|
|
71
|
+
for child in getattr(args_node, "named_children", None) or getattr(
|
|
72
|
+
args_node, "children", []
|
|
73
|
+
):
|
|
74
|
+
if child.type in ("string_literal", "string"):
|
|
75
|
+
raw = self._node_text(child)
|
|
76
|
+
path = raw.strip('"')
|
|
77
|
+
break
|
|
78
|
+
except Exception as e:
|
|
79
|
+
_log.warning("JavaRouteDetector._check_annotation failed: %s", e)
|
|
80
|
+
|
|
81
|
+
if not path:
|
|
82
|
+
path = ""
|
|
83
|
+
|
|
84
|
+
handler = self._find_method_name(node)
|
|
85
|
+
line = getattr(node, "start_point", (0, 0))[0] + 1
|
|
86
|
+
|
|
87
|
+
auth = self._check_auth_annotations(node)
|
|
88
|
+
|
|
89
|
+
routes.append(
|
|
90
|
+
self._make_route(
|
|
91
|
+
method,
|
|
92
|
+
path,
|
|
93
|
+
handler,
|
|
94
|
+
file_path,
|
|
95
|
+
line,
|
|
96
|
+
framework="Spring Boot",
|
|
97
|
+
auth_required=auth if auth else None,
|
|
98
|
+
)
|
|
99
|
+
)
|
|
100
|
+
|
|
101
|
+
def _find_method_name(self, node: object) -> str:
|
|
102
|
+
cur = node
|
|
103
|
+
for _ in range(10):
|
|
104
|
+
cur = getattr(cur, "parent", None)
|
|
105
|
+
if cur is None:
|
|
106
|
+
break
|
|
107
|
+
if getattr(cur, "type", "") == "method_declaration":
|
|
108
|
+
name_node = self._child_by_field(cur, "name")
|
|
109
|
+
if name_node:
|
|
110
|
+
return self._node_text(name_node)
|
|
111
|
+
return ""
|
|
112
|
+
|
|
113
|
+
def _check_auth_annotations(self, node: object) -> bool:
|
|
114
|
+
cur = node
|
|
115
|
+
for _ in range(15):
|
|
116
|
+
cur = getattr(cur, "parent", None)
|
|
117
|
+
if cur is None:
|
|
118
|
+
break
|
|
119
|
+
if getattr(cur, "type", "") == "class_declaration":
|
|
120
|
+
for child in getattr(cur, "named_children", None) or getattr(cur, "children", []):
|
|
121
|
+
if child.type in ("marker_annotation", "annotation"):
|
|
122
|
+
try:
|
|
123
|
+
name = self._node_text(
|
|
124
|
+
self._child_by_field(child, "name") or child
|
|
125
|
+
).lower()
|
|
126
|
+
if any(a in name for a in _SPRING_AUTH_ANNOTATIONS):
|
|
127
|
+
return True
|
|
128
|
+
except Exception as e:
|
|
129
|
+
_log.warning("JavaRouteDetector._check_auth_annotations failed: %s", e)
|
|
130
|
+
break
|
|
131
|
+
for child in getattr(node, "named_children", None) or getattr(node, "children", []):
|
|
132
|
+
if child.type in ("marker_annotation", "annotation"):
|
|
133
|
+
try:
|
|
134
|
+
name = self._node_text(self._child_by_field(child, "name") or child).lower()
|
|
135
|
+
if name in _SPRING_AUTH_ANNOTATIONS:
|
|
136
|
+
return True
|
|
137
|
+
except Exception as e:
|
|
138
|
+
_log.warning("JavaRouteDetector._check_auth_annotations failed: %s", e)
|
|
139
|
+
return False
|
|
140
|
+
|
|
141
|
+
def _child_by_field(self, node: object, field: str) -> object | None:
|
|
142
|
+
if hasattr(node, "child_by_field_name"):
|
|
143
|
+
return node.child_by_field_name(field)
|
|
144
|
+
return None
|
|
145
|
+
|
|
146
|
+
def _node_text(self, node: object) -> str:
|
|
147
|
+
try:
|
|
148
|
+
raw = getattr(node, "text", b"")
|
|
149
|
+
if isinstance(raw, bytes):
|
|
150
|
+
return raw.decode("utf-8", errors="replace")
|
|
151
|
+
return str(raw)
|
|
152
|
+
except Exception as e:
|
|
153
|
+
_log.debug("JavaRouteDetector._node_text failed: %s", e)
|
|
154
|
+
return ""
|
|
155
|
+
|
|
156
|
+
def _detect_fallback(self, content: str, file_path: str) -> list[dict]:
|
|
157
|
+
routes: list[dict] = []
|
|
158
|
+
ann_names = "|".join(_SPRING_MAPPINGS)
|
|
159
|
+
pat = re.compile(
|
|
160
|
+
rf"""@({ann_names})\s*\(\s*["']([^"']+)["']""",
|
|
161
|
+
re.IGNORECASE,
|
|
162
|
+
)
|
|
163
|
+
auth_pat = re.compile(r"@PreAuthorize|@Secured|@RolesAllowed", re.IGNORECASE)
|
|
164
|
+
|
|
165
|
+
lines = content.splitlines()
|
|
166
|
+
for i, line in enumerate(lines, 1):
|
|
167
|
+
m = pat.search(line)
|
|
168
|
+
if not m:
|
|
169
|
+
continue
|
|
170
|
+
method_str = m.group(1).upper()
|
|
171
|
+
path = m.group(2)
|
|
172
|
+
method = "ANY" if method_str == "REQUESTMAPPING" else method_str.replace("MAPPING", "")
|
|
173
|
+
|
|
174
|
+
handler = ""
|
|
175
|
+
for j in range(i, min(i + 5, len(lines) + 1)):
|
|
176
|
+
hm = re.match(r"\s*(?:public\s+)?\w+\s+(\w+)\s*\(", lines[j - 1])
|
|
177
|
+
if hm:
|
|
178
|
+
handler = hm.group(1)
|
|
179
|
+
break
|
|
180
|
+
|
|
181
|
+
ctx = "\n".join(lines[i : min(i + 5, len(lines))])
|
|
182
|
+
auth = bool(auth_pat.search(ctx))
|
|
183
|
+
|
|
184
|
+
routes.append(
|
|
185
|
+
self._make_route(
|
|
186
|
+
method,
|
|
187
|
+
path,
|
|
188
|
+
handler,
|
|
189
|
+
file_path,
|
|
190
|
+
i,
|
|
191
|
+
framework="Spring Boot",
|
|
192
|
+
auth_required=auth if auth else None,
|
|
193
|
+
)
|
|
194
|
+
)
|
|
195
|
+
return routes
|
|
@@ -0,0 +1,197 @@
|
|
|
1
|
+
import logging
|
|
2
|
+
import re
|
|
3
|
+
|
|
4
|
+
from patchi.core.brain.route_detector.base import BaseRouteDetector
|
|
5
|
+
from patchi.core.brain.route_detector.registry import register_detector
|
|
6
|
+
|
|
7
|
+
_AUTH_MIDDLEWARE = {"auth", "authenticate", "requireauth", "verifytoken", "isauthenticated"}
|
|
8
|
+
|
|
9
|
+
_EXPRESS_OBJECTS = {"app", "router", "route"}
|
|
10
|
+
_FASTIFY_OBJECTS = {"fastify"}
|
|
11
|
+
_HTTP_METHODS = {"get", "post", "put", "delete", "patch", "all", "use", "head", "options"}
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
_log = logging.getLogger("patchi.brain.javascript")
|
|
15
|
+
|
|
16
|
+
|
|
17
|
+
@register_detector("javascript")
|
|
18
|
+
@register_detector("typescript")
|
|
19
|
+
class JavaScriptRouteDetector(BaseRouteDetector):
|
|
20
|
+
def detect(self, content: str, file_path: str) -> list[dict]:
|
|
21
|
+
routes = self._detect_ts(content, file_path)
|
|
22
|
+
if routes:
|
|
23
|
+
return routes
|
|
24
|
+
|
|
25
|
+
routes = self._detect_ts_fallback(content, file_path)
|
|
26
|
+
return routes
|
|
27
|
+
|
|
28
|
+
def _detect_ts(self, content: str, file_path: str) -> list[dict] | None:
|
|
29
|
+
try:
|
|
30
|
+
from patchi.core.brain.languages import Lang, _build_parser
|
|
31
|
+
|
|
32
|
+
parser = _build_parser(Lang.TYPESCRIPT)
|
|
33
|
+
tree = parser.parse(bytes(content, "utf-8"))
|
|
34
|
+
except Exception as e:
|
|
35
|
+
_log.warning("JavaScriptRouteDetector._detect_ts failed: %s", e)
|
|
36
|
+
return None
|
|
37
|
+
|
|
38
|
+
routes: list[dict] = []
|
|
39
|
+
self._walk(tree.root_node, bytes(content, "utf-8"), content, file_path, routes)
|
|
40
|
+
return routes
|
|
41
|
+
|
|
42
|
+
def _walk(
|
|
43
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
44
|
+
) -> None:
|
|
45
|
+
ntype = getattr(node, "type", "")
|
|
46
|
+
if ntype == "call_expression":
|
|
47
|
+
self._check_call(node, buf, content, file_path, routes)
|
|
48
|
+
|
|
49
|
+
for child in getattr(node, "named_children", None) or getattr(node, "children", []):
|
|
50
|
+
self._walk(child, buf, content, file_path, routes)
|
|
51
|
+
|
|
52
|
+
def _check_call(
|
|
53
|
+
self, node: object, buf: bytes, content: str, file_path: str, routes: list[dict]
|
|
54
|
+
) -> None:
|
|
55
|
+
func = self._child_by_field(node, "function")
|
|
56
|
+
if func is None:
|
|
57
|
+
return
|
|
58
|
+
|
|
59
|
+
obj_name, method_name = self._get_member_expression(func)
|
|
60
|
+
if obj_name is None or method_name is None:
|
|
61
|
+
return
|
|
62
|
+
|
|
63
|
+
method_lower = method_name.lower()
|
|
64
|
+
if method_lower not in _HTTP_METHODS:
|
|
65
|
+
return
|
|
66
|
+
|
|
67
|
+
if obj_name in _EXPRESS_OBJECTS:
|
|
68
|
+
framework = "Express"
|
|
69
|
+
elif obj_name in _FASTIFY_OBJECTS:
|
|
70
|
+
framework = "Fastify"
|
|
71
|
+
else:
|
|
72
|
+
return
|
|
73
|
+
|
|
74
|
+
args = self._child_by_field(node, "arguments")
|
|
75
|
+
path = ""
|
|
76
|
+
if args and getattr(args, "named_child_count", 0) > 0:
|
|
77
|
+
first_arg = args.named_child(0)
|
|
78
|
+
if first_arg and first_arg.type in ("string", "template_string", "string_fragment"):
|
|
79
|
+
try:
|
|
80
|
+
raw = buf[first_arg.start_byte : first_arg.end_byte].decode(
|
|
81
|
+
"utf-8", errors="replace"
|
|
82
|
+
)
|
|
83
|
+
path = raw.strip("'\"`")
|
|
84
|
+
except Exception as e:
|
|
85
|
+
_log.warning("JavaScriptRouteDetector._check_call failed: %s", e)
|
|
86
|
+
path = ""
|
|
87
|
+
|
|
88
|
+
if not path:
|
|
89
|
+
return
|
|
90
|
+
|
|
91
|
+
handler = self._extract_handler(args, buf, content) if args else ""
|
|
92
|
+
line = getattr(node, "start_point", (0, 0))[0] + 1
|
|
93
|
+
auth = self._check_auth(args, content) if args else False
|
|
94
|
+
|
|
95
|
+
routes.append(
|
|
96
|
+
self._make_route(
|
|
97
|
+
method=method_lower.upper(),
|
|
98
|
+
path=path,
|
|
99
|
+
handler=handler,
|
|
100
|
+
file_path=file_path,
|
|
101
|
+
line=line,
|
|
102
|
+
framework=framework,
|
|
103
|
+
auth_required=auth if auth else None,
|
|
104
|
+
)
|
|
105
|
+
)
|
|
106
|
+
|
|
107
|
+
def _get_member_expression(self, func: object) -> tuple[str | None, str | None]:
|
|
108
|
+
ftype = getattr(func, "type", "")
|
|
109
|
+
if ftype == "member_expression":
|
|
110
|
+
obj = self._child_by_field(func, "object")
|
|
111
|
+
prop = self._child_by_field(func, "property")
|
|
112
|
+
if obj and prop:
|
|
113
|
+
obj_name = self._node_text(obj) if hasattr(obj, "text") else ""
|
|
114
|
+
prop_name = self._node_text(prop) if hasattr(prop, "text") else ""
|
|
115
|
+
return obj_name, prop_name
|
|
116
|
+
return None, None
|
|
117
|
+
|
|
118
|
+
def _child_by_field(self, node: object, field: str) -> object | None:
|
|
119
|
+
if hasattr(node, "child_by_field_name"):
|
|
120
|
+
return node.child_by_field_name(field)
|
|
121
|
+
return None
|
|
122
|
+
|
|
123
|
+
def _node_text(self, node: object) -> str:
|
|
124
|
+
try:
|
|
125
|
+
raw = getattr(node, "text", b"")
|
|
126
|
+
if isinstance(raw, bytes):
|
|
127
|
+
return raw.decode("utf-8", errors="replace")
|
|
128
|
+
return str(raw)
|
|
129
|
+
except Exception as e:
|
|
130
|
+
_log.debug("JavaScriptRouteDetector._node_text failed: %s", e)
|
|
131
|
+
return ""
|
|
132
|
+
|
|
133
|
+
def _extract_handler(self, args: object, buf: bytes, content: str) -> str:
|
|
134
|
+
try:
|
|
135
|
+
for i in range(getattr(args, "named_child_count", 0)):
|
|
136
|
+
child = args.named_child(i)
|
|
137
|
+
if child and child.type == "identifier":
|
|
138
|
+
return self._node_text(child)
|
|
139
|
+
for i in range(getattr(args, "named_child_count", 0)):
|
|
140
|
+
child = args.named_child(i)
|
|
141
|
+
if child and child.type == "arrow_function":
|
|
142
|
+
parent = getattr(child, "parent", None)
|
|
143
|
+
if parent and parent.type == "variable_declarator":
|
|
144
|
+
name_node = self._child_by_field(parent, "name")
|
|
145
|
+
if name_node:
|
|
146
|
+
return self._node_text(name_node)
|
|
147
|
+
except Exception as e:
|
|
148
|
+
_log.warning("JavaScriptRouteDetector._extract_handler failed: %s", e)
|
|
149
|
+
return ""
|
|
150
|
+
|
|
151
|
+
def _check_auth(self, args: object, content: str) -> bool:
|
|
152
|
+
try:
|
|
153
|
+
for i in range(getattr(args, "named_child_count", 0)):
|
|
154
|
+
child = args.named_child(i)
|
|
155
|
+
if child and child.type == "identifier":
|
|
156
|
+
name = self._node_text(child).lower()
|
|
157
|
+
if name in _AUTH_MIDDLEWARE:
|
|
158
|
+
return True
|
|
159
|
+
except Exception as e:
|
|
160
|
+
_log.warning("JavaScriptRouteDetector._check_auth failed: %s", e)
|
|
161
|
+
return False
|
|
162
|
+
|
|
163
|
+
def _detect_ts_fallback(self, content: str, file_path: str) -> list[dict]:
|
|
164
|
+
routes: list[dict] = []
|
|
165
|
+
for obj in _EXPRESS_OBJECTS | _FASTIFY_OBJECTS:
|
|
166
|
+
framework = "Express" if obj in _EXPRESS_OBJECTS else "Fastify"
|
|
167
|
+
pat = re.compile(
|
|
168
|
+
rf"""{re.escape(obj)}\.({"|".join(_HTTP_METHODS)})\s*\(\s*["'`]([^"'`]+)["'`]""",
|
|
169
|
+
re.IGNORECASE,
|
|
170
|
+
)
|
|
171
|
+
for i, line in enumerate(content.splitlines(), 1):
|
|
172
|
+
m = pat.search(line)
|
|
173
|
+
if not m:
|
|
174
|
+
continue
|
|
175
|
+
method = m.group(1).upper()
|
|
176
|
+
path = m.group(2)
|
|
177
|
+
handler = ""
|
|
178
|
+
hm = re.search(r""",\s*(?:async\s+)?(\w+)\s*\)?\s*$""", line)
|
|
179
|
+
if hm and hm.group(1) not in {"function", "async", "req", "res", "next"}:
|
|
180
|
+
handler = hm.group(1)
|
|
181
|
+
auth = bool(
|
|
182
|
+
re.search(
|
|
183
|
+
r"(?:auth|authenticate|requireAuth|verifyToken|isAuthenticated)", line
|
|
184
|
+
)
|
|
185
|
+
)
|
|
186
|
+
routes.append(
|
|
187
|
+
self._make_route(
|
|
188
|
+
method,
|
|
189
|
+
path,
|
|
190
|
+
handler,
|
|
191
|
+
file_path,
|
|
192
|
+
i,
|
|
193
|
+
framework=framework,
|
|
194
|
+
auth_required=auth if auth else None,
|
|
195
|
+
)
|
|
196
|
+
)
|
|
197
|
+
return routes
|