Developer Guide

# Required for LLM features
GEMINI_API_KEY=AIza...Get from: https://aistudio.google.com/apikey

# Optional: Increases NVD rate limit from 5 to 50 req/30s
NVD_API_KEY=your-nvd-key-here

# Alternative LLM providers (optional)
OPENAI_API_KEY=sk-...
ANTHROPIC_API_KEY=sk-ant-...

# Security (optional)
JWT_SECRET=your-secret-key
CORS_ORIGINS=https://your-domain.com

# Health check
curl http://localhost:8000/health

# Research a CVE
curl -X POST http://localhost:8000/agent/research \
  -H "Content-Type: application/json" \
  -d '{"cve_id": "CVE-2024-4577"}'

# Full pipeline (Windows x64)
curl -X POST http://localhost:8000/pipeline/run \
  -H "Content-Type: application/json" \
  -d '{
    "cve_id": "CVE-2024-4577",
    "os_type": "windows",
    "architecture": "x64"
  }'

# By product (auto-searches NVD)
curl -X POST http://localhost:8000/pipeline/run \
  -H "Content-Type: application/json" \
  -d '{
    "product": "Notepad++",
    "os_type": "windows"
  }'

# Batch process multiple CVEs
curl -X POST http://localhost:8000/pipeline/batch \
  -H "Content-Type: application/json" \
  -d '{
    "cve_ids": ["CVE-2024-4577", "CVE-2024-3001"],
    "os_type": "windows"
  }'

# Read a generated file
curl "http://localhost:8000/runs/20260326_120000_abc123/file?path=research/research.json"

const ws = new WebSocket('ws://localhost:8000/ws');

ws.onopen = () => console.log('Connected to event stream');
ws.onmessage = (event) => {
  const data = JSON.parse(event.data);
  
  if (data.type === 'backlog') {
    console.log('History:', data.events.length, 'events');
    data.events.forEach(handleEvent);
  } else {
    handleEvent(data);
  }
};

function handleEvent(ev) {
  console.log(`${ev.event_type} from ${ev.source}:`, ev.data);
  
  if (ev.event_type === 'agent_start') {
    updateUI('Agent started:', ev.data.cve);
  }
  if (ev.event_type === 'tool_result') {
    updateProgress(ev.data);
  }
  if (ev.event_type === 'pipeline_end') {
    showResults(ev.data);
  }
}

from __future__ import annotations
from typing import Dict, Any
from src.events.bus import EventType, Event

class MyCustomAgent:
    def __init__(self):
        self.name = "my_custom_agent"

    async def analyze(self, data: Dict[str, Any], emit_fn) -> Dict[str, Any]:
        # Emit start event
        await emit_fn(self.name, EventType.AGENT_START, {
            "task": data.get("task"),
            "run_id": data.get("run_id")
        })
        
        # Do work...
        await emit_fn(self.name, EventType.TOOL_CALL, {
            "tool": "my_tool",
            "action": "analyze"
        })
        
        # Emit result
        result = {"analysis": "completed", "items": 42}
        await emit_fn(self.name, EventType.TOOL_RESULT, result)
        
        # Emit end
        await emit_fn(self.name, EventType.AGENT_END, {
            "run_id": data.get("run_id"),
            "status": "success"
        })
        
        return result

# Import your agent
from src.agents.my_agent import MyCustomAgent

# Initialize agent
_my_agent = MyCustomAgent()

# Add endpoint
@app.post("/agent/custom")
async def custom_analysis(data: CustomInput):
    async def _emit(source, etype, payload):
        await event_bus.emit(Event(
            event_type=etype,
            source=source,
            data=payload
        ))
    
    result = await _my_agent.analyze(
        data={"task": data.task, "run_id": _make_run_id()},
        emit_fn=_emit
    )
    return {"status": "ok", "result": result}

FROM python:3.11-slim
WORKDIR /app
COPY backend/requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY backend/ .
ENV PYTHONPATH=/app
EXPOSE 8000
CMD ["uvicorn", "src.api.main:app", "--host", "0.0.0.0"]

# Production keys (use secrets management!)
GEMINI_API_KEY=production-key
NVD_API_KEY=production-nvd-key

# Security
JWT_SECRET=secure-random-secret
ALLOWED_ORIGINS=https://app.your-domain.com

# Performance
UVICORN_WORKERS=4
MAX_CONCURRENT_PIPELINES=10

# Storage
RUNS_DIR=/data/avip/runs

apiVersion: apps/v1
kind: Deployment
metadata:
  name: avip-backend
spec:
  replicas: 3
  selector:
    matchLabels:
      app: avip-backend
  template:
    spec:
      containers:
      - name: backend
        image: your-registry/avip:latest
        ports:
        - containerPort: 8000
        env:
        - name: GEMINI_API_KEY
          valueFrom:
            secretKeyRef:
              name: avip-secrets
              key: gemini-api-key
        resources:
          requests:
            memory: "512Mi"
            cpu: "250m"
          limits:
            memory: "1Gi"
            cpu: "1000m"