Metadata-Version: 2.4
Name: passshore-engine
Version: 0.1.1
Summary: AI 代码质量守门人 / AI code quality gatekeeper — 167 standards, 7 deep scanners, adaptive Quality Gate, FixPR
Home-page: https://github.com/passshore/passshore-engine
Author: PassShore Team
Author-email: team@passshore.com
Requires-Python: >=3.11
Description-Content-Type: text/markdown
Requires-Dist: httpx>=0.27
Requires-Dist: pyyaml>=6.0
Requires-Dist: pydantic>=2.0
Dynamic: author
Dynamic: author-email
Dynamic: home-page
Dynamic: requires-python

<!--
  PassShore Engine — 中英双语 README
  中文在上，英文在下。PyPI 会渲染 Markdown。
-->

# PassShore Engine

> **中文**：AI 代码质量的守门人。167 条标准 + 7 个深度扫描器 + 自适应质量门禁。  
> **English**: AI code quality gatekeeper. 167 standards + 7 deep scanners + adaptive Quality Gate.

---

## 📖 中文说明

### 这是什么？

PassShore Engine 是 [PassShore](https://passshore.com) 的质量检测核心引擎。它把 AI 生成的代码和人类编写的代码放在同一个质量标尺下衡量——用**行业标准工具**（bandit、radon、ruff）而非自创规则。

### 核心能力

| 模块 | 功能 |
|------|------|
| **167 条标准** | 覆盖安全、架构、API、数据、权限、性能、合规、等保、DSMM |
| **7 个深度扫描器** | 依赖漏洞、BOLA/BFLA、OpenAPI、GraphQL、协议合规、Secrets、SAST |
| **Quality Gate** | 自适应阈值门禁，按项目成熟度（骨架→成长→稳定→成熟）自动调整 |
| **FixPR** | 自动修复代码问题并生成 PR |
| **技术债评估** | 基于行业基准的量化技术债计算 |

### 安装

```bash
pip install passshore-engine
```

需要 Python ≥ 3.11。

### 快速使用

```python
# 全量分析
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"质量评分: {result['quality_score']}")
print(f"安全问题: {result['summary']['security_issues']}")

# 合规检查 + 质量门禁
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))
```

### 许可证

MIT

---

## 📖 English

### What is this?

PassShore Engine is the core quality inspection engine for [PassShore](https://passshore.com). It measures AI-generated and human-written code against the same quality standards — using **real industry-standard tools** (bandit, radon, ruff) rather than custom rules.

### Key Features

| Module | Purpose |
|--------|---------|
| **167 Standards** | Security, architecture, API, data, permission, performance, compliance |
| **7 Deep Scanners** | Dependency vulns, BOLA/BFLA, OpenAPI, GraphQL, protocol, secrets, SAST |
| **Quality Gate** | Adaptive thresholds — auto-tunes by project maturity (Skeleton → Growth → Stable → Mature) |
| **FixPR** | Auto-fix code issues and generate PRs |
| **Tech Debt** | Quantified tech-debt assessment against industry baselines |

### Installation

```bash
pip install passshore-engine
```

Requires Python ≥ 3.11.

### Quick Start

```python
# Full analysis
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"Quality score: {result['quality_score']}")

# Compliance check + Quality Gate
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))
```

### License

MIT
