⚡ ApiPatch

Autonomous AI Agent for API Breaking Changes & Self-Maintaining Codebases

🛑 The Problem

Over 30% of cloud outages and broken builds are caused by silent, third-party API breaking changes. When vendors release major SDK updates (OpenAI v1.0+, Pydantic v2, Stripe SCA/PaymentIntents, LangChain LCEL, React hooks, Next.js App Router…), engineering teams spend days hunting broken calls and rewriting legacy code.

Tools like Dependabot and Renovate only bump version numbers in requirements.txt or package.json—they do not fix actual code logic.

[ Traditional Dependency Bumper ]
  requirements.txt: openai==0.28.0 ──► openai==1.50.0 ──❌ (Code breaks at runtime!)

[ ApiPatch Autonomous Agent ]
  1. Detects breaking API calls across ANY library — Python, JS, TS, JSX, TSX…
  2. Refactors code via LLM reasoning (Gemini, Claude, GPT-4o)
  3. Validates safety before accepting any change
  4. Generates ready-to-merge Pull Requests ───────────────────────✅ (Build passes!)

🚀 Key Features

• 🤖 Autonomous GitHub PR Pipeline (apipatch pr): Scans an entire remote repository, auto-forks/branches, commits refactorings, and opens live Pull Requests with rich Markdown summaries.
• ⚡ GitHub App & Webhook Daemon (apipatch webhook): Listens for repository push events, verifies HMAC signatures, and autonomously runs the audit & PR pipeline in the background.
• 🔑 Smart Token Discovery: Automatically resolves GitHub tokens from CLI flags, GITHUB_TOKEN / GH_TOKEN env, github_token.txt file, or .env.
• 🧠 Universal LLM Engine: Audits ANY third-party library in any language dynamically — no hardcoded rules required.
• 🌐 Multi-Language Support: Full support for .py, .js, .ts, .jsx, .tsx, .mjs, .cjs files.
• 🛡️ AST & Safety Guard: Validates every refactored Python file through AST syntax parsing. JS/TS files checked for truncation and brace/bracket balance.
• 🔁 Automatic Retry: Exponential backoff retry (3 attempts) on transient LLM/network errors — no silent failures.
• 📦 Flexible CLI: Rich terminal interface with scan, fix --write, detect, hunt, pr, webhook, and --output report.json.
• 🔄 Safe In-Place Refactoring: Automatically generates .bak backups before modifying any files.
• 🔌 Multi-Provider: Works with Google Gemini (free tier), OpenAI GPT-4o, and Anthropic Claude — auto-detected from environment variables.
• 📊 JSON Report Output: Save scan results with --output report.json for CI/CD integration.

🌍 Universal Coverage — Any Library, Any Language

ApiPatch is not limited to a fixed list of rules. The LLM engine can detect and fix breaking changes in any third-party library it has been trained on, including (but not limited to):

⚡ Quickstart

1. Installation

pip install apipatch

Or install from Git (latest dev version):

pip install git+https://github.com/MoradMoqbel/apipatch.git

🔑 Setting Up AI & GitHub Tokens

AI Provider Keys

# Google Gemini (Fast & Free Tier Available)
export GEMINI_API_KEY="your-gemini-api-key-here"

# OpenAI
export OPENAI_API_KEY="sk-..."

# Anthropic Claude
export ANTHROPIC_API_KEY="sk-ant-..."

GitHub Token Setup

ApiPatch automatically resolves your GitHub token in this priority:

1. --token <ghp_...> CLI option
2. GITHUB_TOKEN or GH_TOKEN environment variable
3. github_token.txt in your working directory or project root
4. .env file

💻 CLI Commands & Usage

1. 🚀 Autonomous Live GitHub Pull Request

Audits an entire GitHub repository, forks if needed, commits modernized files, and opens a real live PR:

# Open live PR on repository
apipatch pr owner/repo

# Dry run / preview changes without opening PR
apipatch pr owner/repo --dry-run

# Specify custom base branch
apipatch pr owner/repo --branch main

2. ⚡ GitHub App Webhook Daemon

Runs the continuous webhook server to trigger autonomous PRs on every repository push:

apipatch webhook --port 8080 --secret "my_webhook_secret"

3. 🔍 Scan a Codebase Locally (Dry Run)

Audits files recursively (.py, .js, .ts, .jsx, .tsx, .mjs, .cjs), detects deprecated calls, and outputs colorized diff previews without modifying files:

apipatch scan /path/to/project
apipatch scan /path/to/project --provider gemini

4. ⚡ Refactor and Apply Fixes In-Place

Automatically updates the code and generates .bak safety backups:

apipatch fix /path/to/project --write
apipatch fix /path/to/single/file.py --write --provider openai

(Add --no-backup to skip automatic .bak backup creation.)

5. 📦 Discover All Project Dependencies

Inspects requirements.txt, package.json, pyproject.toml, and all source file imports (Python AST + JS/TS regex) to list every third-party library in use:

apipatch detect /path/to/project

6. 🎯 Hunt for Deprecated Code on GitHub & Submit PRs

Searches GitHub for legacy patterns and prepares/submits ready-to-merge Pull Requests:

apipatch hunt "openai.ChatCompletion.create language:python" --submit
apipatch hunt "stripe.Charge.create language:javascript"

🧪 Testing

pytest

All 76 tests are offline-safe and mocked (no external network or live LLM required for the test suite).

🗺️ Roadmap

• Universal LLM engine — no hardcoded rules, ANY library supported
• Multi-language support: Python, JavaScript, TypeScript, JSX, TSX
• AST Syntax & Safety Validator
• Multi-LLM Provider (Gemini, OpenAI, Claude) with auto-discovery
• In-place refactoring with automatic backup (--write)
• Autonomous dependency discovery (requirements.txt / package.json / AST scan)
• Automated test suite (76/76 tests passing)
• v0.5.0: Autonomous GitHub PR Engine (apipatch pr)
• v0.5.0: GitHub App Webhook Daemon (apipatch webhook)
• v0.5.0: Automatic token discovery (github_token.txt / env)
• v0.5.0: Multi-file atomic Git tree commits & auto-forking
• PyPI Release (pip install apipatch)

📄 License

MIT License. Built by Morad Moqbel.