feat(ffi): add python and wasm bindings

Author: SSL-ACTX

.github/workflows/python-wheels.yml

@@ -0,0 +1,75 @@
+name: Build Python wheels
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+jobs:
+  build-wheels:
+    name: Build wheels (${{ matrix.platform }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-22.04
+            platform: manylinux_x86_64
+          - os: ubuntu-22.04
+            platform: manylinux_aarch64
+          - os: macos-13
+            platform: macos_x86_64
+          - os: macos-14
+            platform: macos_aarch64
+          - os: windows-2022
+            platform: windows_x86_64
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          command: build
+          args: --release --out dist
+          maturin-version: "1.5.1"
+          manylinux: auto
+          target: ${{ matrix.platform }}
+          features: python-ffi
+
+      - name: Upload wheels
+        uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.platform }}
+          path: dist/*.whl
+
+  sdist:
+    name: Build sdist
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+          maturin-version: "1.5.1"
+          features: python-ffi
+
+      - name: Upload sdist
+        uses: actions/upload-artifact@v4
+        with:
+          name: sdist
+          path: dist/*.tar.gz

Cargo.toml

@@ -9,30 +9,39 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 memmap2 = "0.9"
 memchr = "2.7"
-ratatui = "0.26"
-crossterm = "0.27"
+ratatui = { version = "0.26", optional = true }
+crossterm = { version = "0.27", optional = true }
 clap = { version = "4.4", features = ["derive"] }
 owo-colors = { version = "4.0", features = ["supports-colors"] }
-ureq = "2.9"
-tempfile = "3.10"
+ureq = { version = "2.9", optional = true }
+tempfile = { version = "3.10", optional = true }
 aho-corasick = "1.1"
 base64 = "0.21"
 ignore = "0.4.25"
 rayon = "1.11.0"
 log = "0.4"
-env_logger = "0.10"
+env_logger = { version = "0.10", optional = true }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 tree-sitter = { version = "0.25", optional = true }
 tree-sitter-javascript = { version = "0.25", optional = true }
 syntect = { version = "5.2", optional = true }
 pyo3 = { version = "0.21", features = ["extension-module", "abi3-py311"], optional = true }
+wasm-bindgen = { version = "0.2.92", optional = true }
+serde-wasm-bindgen = { version = "0.6", optional = true }
 
 [features]
-default = []
+default = ["native"]
+native = ["ureq", "tempfile", "env_logger", "ratatui", "crossterm"]
 js-ast = ["tree-sitter", "tree-sitter-javascript"]
 highlighting = ["syntect"]
 python-ffi = ["pyo3"]
+wasm-ffi = ["wasm-bindgen", "serde-wasm-bindgen"]
+
+[[bin]]
+name = "argus"
+path = "src/main.rs"
+required-features = ["native"]
 
 [profile.release]
 opt-level = 3

README.md

@@ -177,6 +177,18 @@ print(scan_json(opts))
 
 ---
 
+## WASM Support
+
+Build a WASM module with in-memory scanning (no filesystem access) using the `wasm-ffi` feature.
+
+```bash
+cargo build --target wasm32-unknown-unknown --release --no-default-features --features wasm-ffi
+```
+
+The module exports `scan_bytes_json(bytes, options)` and `scan_bytes_count(bytes, options)`.
+
+---
+
 ## Deep Analysis and Security Heuristics
 
 argus moves beyond simple pattern matching by applying a suite of heuristics to every potential match. When using `--deep-scan`, the following specific analysis modules are activated:

python/argus_ffi/py.typed

@@ -0,0 +1,15 @@
+def test_import_and_scan_json():
+    import argus_ffi
+
+    opts = argus_ffi.ScanOptions(
+        targets=["."],
+        keywords=["token"],
+        entropy=False,
+        deep_scan=False,
+        flow_scan=False,
+        request_trace=False,
+        mode="scan",
+    )
+
+    out = argus_ffi.scan_json(opts)
+    assert isinstance(out, str)