qalita 2.5.4__py3-none-any.whl → 2.6.1__py3-none-any.whl

qalita/_frontend/package.json

@@ -9,18 +9,18 @@
     "lint": "next lint"
   },
   "dependencies": {
-    "next": "16.0.10",
+    "next": "16.1.1",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-markdown": "^10.1.0",
     "remark-gfm": "^4.0.0",
-    "socket.io-client": "^4.7.0"
+    "socket.io-client": "^4.8.3"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",
-    "autoprefixer": "^10.4.22",
+    "autoprefixer": "^10.4.23",
     "postcss": "^8.5.6",
     "tailwindcss": "^3.4.18",
     "typescript": "^5.5.0"

qalita/_frontend/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{},"webpack":null,"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.js","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":true,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/qalita-cli/qalita-cli/frontend","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"serverSourceMaps":false,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"dynamicOnHover":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":1,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":false,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":false,"lockDistDir":true,"isolatedDevBuild":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.js","turbopack":{"root":"/home/runner/work/qalita-cli/qalita-cli/frontend"},"distDirRoot":".next"}
+const nextConfig = {"distDir":"./.next","cacheComponents":false,"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","assetPrefix":"","output":"standalone","trailingSlash":false,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":false},"reactMaxHeadersLength":6000,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"basePath":"","expireTime":31536000,"generateEtags":true,"poweredByHeader":true,"cacheHandlers":{},"cacheMaxMemorySize":52428800,"compress":true,"i18n":null,"httpAgentOptions":{"keepAlive":true},"pageExtensions":["tsx","ts","jsx","js"],"useFileSystemPublicRoutes":true,"experimental":{"ppr":false,"staleTimes":{"dynamic":0,"static":300},"dynamicOnHover":false,"inlineCss":false,"authInterrupts":false,"fetchCacheKeyPrefix":"","isrFlushToDisk":true,"optimizeCss":false,"nextScriptWorkers":false,"disableOptimizedLoading":false,"largePageDataBytes":128000,"serverComponentsHmrCache":true,"caseSensitiveRoutes":false,"validateRSCRequestHeaders":false,"useSkewCookie":false,"preloadEntriesOnStart":true,"hideLogsAfterAbort":false,"removeUncaughtErrorAndRejectionListeners":false,"imgOptConcurrency":null,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"imgOptTimeoutInSeconds":7,"proxyClientMaxBodySize":10485760,"trustHostHeader":false,"isExperimentalCompile":false}}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

qalita/commands/pack.py

@@ -415,7 +415,7 @@ def validate_pack_directory(pack_directory: str) -> int:
         # Security: safe_path_join validates path stays within base directory
         try:
             props_path = safe_path_join(validated_dir, "properties.yaml")  # lgtm[py/path-injection]
-            with open(props_path, "w", encoding="utf-8") as f:
+            with open(props_path, "w", encoding="utf-8") as f:  # nosec B108  # lgtm[py/path-injection]
                 yaml.dump(properties, f)
         except Exception:
             # non-fatal
@@ -568,9 +568,9 @@ def load_json_config(base_dir, filename):
         logger.error(f"Invalid file path: {e}")
         return {}
         
-    if os.path.exists(file_path):
+    if os.path.exists(file_path):  # nosec B108  # lgtm[py/path-injection]
         try:
-            with open(file_path, "r", encoding="utf-8") as file:
+            with open(file_path, "r", encoding="utf-8") as file:  # nosec B108  # lgtm[py/path-injection]
                 return json.load(file)
         except Exception as e:
             logger.error(f"Error loading JSON config from {file_path}: {str(e)}")

qalita/commands/source.py

@@ -167,7 +167,7 @@ def validate_source(config):
                     try:
                         # Security: validate_file_path sanitizes the path before use
                         validated_path = validate_file_path(source["config"]["path"])  # lgtm[py/path-injection]
-                        if not os.access(validated_path, os.R_OK):
+                        if not os.access(validated_path, os.R_OK):  # nosec B108  # lgtm[py/path-injection]
                             logger.error(
                                 f"Source [{source['name']}] has a path in config, but it cannot be accessed"
                             )

qalita/internal/utils.py

@@ -102,9 +102,10 @@ def validate_directory_path(path: str) -> str:  # lgtm[py/path-injection]
     if not abs_path:
         raise ValueError("Path resolves to empty string")
     
-    if not os.path.exists(abs_path):
+    # Security: abs_path has been sanitized above through normalization and realpath
+    if not os.path.exists(abs_path):  # nosec B108  # lgtm[py/path-injection]
         raise FileNotFoundError(f"Directory does not exist: {abs_path}")
-    if not os.path.isdir(abs_path):
+    if not os.path.isdir(abs_path):  # nosec B108  # lgtm[py/path-injection]
         raise ValueError(f"Path is not a directory: {abs_path}")
     
     return abs_path
@@ -161,9 +162,10 @@ def validate_file_path(path: str) -> str:  # lgtm[py/path-injection]
     if not abs_path:
         raise ValueError("Path resolves to empty string")
     
-    if not os.path.exists(abs_path):
+    # Security: abs_path has been sanitized above through normalization and realpath
+    if not os.path.exists(abs_path):  # nosec B108  # lgtm[py/path-injection]
         raise FileNotFoundError(f"File does not exist: {abs_path}")
-    if not os.path.isfile(abs_path):
+    if not os.path.isfile(abs_path):  # nosec B108  # lgtm[py/path-injection]
         raise ValueError(f"Path is not a file: {abs_path}")
     
     return abs_path
@@ -222,7 +224,7 @@ def safe_path_check(path: str) -> str:  # lgtm[py/path-injection]
 
 
 def get_version():
-    return "2.5.4"
+    return "2.6.1"
 
 
 def make_tarfile(output_filename, source_dir):
@@ -335,8 +337,9 @@ def test_connection(config, type_):
             client = InsecureClient(url, user=config["user"])
             client.status(config["path"], strict=False)
         elif type_ == "folder":
+            # Security: validate_directory_path sanitizes the path before use
             folder_path = validate_directory_path(config["path"])  # lgtm[py/path-injection]
-            if not os.access(folder_path, os.R_OK):
+            if not os.access(folder_path, os.R_OK):  # nosec B108  # lgtm[py/path-injection]
                 raise Exception(f"No read access to folder {folder_path}")
         elif type_ == "oracle":
             # Use python-oracledb in thin mode (no Instant Client required)
@@ -351,8 +354,9 @@ def test_connection(config, type_):
             conn.close()
         # FTP support removed for security reasons
         elif type_ == "file":
+            # Security: validate_file_path sanitizes the path before use
             file_path = validate_file_path(config["path"])  # lgtm[py/path-injection]
-            if not os.access(file_path, os.R_OK):
+            if not os.access(file_path, os.R_OK):  # nosec B108  # lgtm[py/path-injection]
                 raise Exception(f"No read access to file {file_path}")
         else:
             logger.warning(f"Connection test not implemented for type {type_}")

qalita/web/app.py

@@ -5,7 +5,6 @@
 import os
 from flask import Flask, request
 from flask_socketio import SocketIO
-from waitress import serve
 
 # Global SocketIO instance
 socketio = None
@@ -115,9 +114,26 @@ def run_dashboard_ui(config_obj, host: str = "localhost", port: int = 7070):
     socketio = get_socketio()
     url = f"http://{host}:{port}"
     print(f"QALITA CLI UI is running. Open {url}")
-    # Use SocketIO's built-in server for WebSocket support
+
+    # Use gevent for production WebSocket support
     if socketio:
-        socketio.run(app, host=host, port=port, use_reloader=False, log_output=False, allow_unsafe_werkzeug=True)
+        try:
+            from gevent import pywsgi
+            from geventwebsocket.handler import WebSocketHandler
+
+            # Create gevent WSGI server with WebSocket support (production-ready)
+            server = pywsgi.WSGIServer(
+                (host, port),
+                app,
+                handler_class=WebSocketHandler,
+                log=None,  # Disable access logs for cleaner output
+            )
+            server.serve_forever()
+        except Exception:
+            # Fallback to waitress without WebSocket support
+            # This handles ImportError, zope.interface issues on Python 3.13, etc.
+            from waitress import serve
+            serve(app, host=host, port=port, _quiet=True)
     else:
         from waitress import serve
-        serve(app, host=host, port=port)
+        serve(app, host=host, port=port, _quiet=True)

{qalita-2.5.4.dist-info → qalita-2.6.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qalita
-Version: 2.5.4
+Version: 2.6.1
 Summary: QALITA Platform Command Line Interface
 Author-email: QALITA SAS <contact@qalita.io>
 License-File: LICENSE