drjones/trustos
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Implement AI translation, attack paths, and PDF reports - Advanced features phase

Browse Source 
Features added:
- AI Finding Translation endpoints (POST /findings/{id}/ai-translate)
- AI Security Coach endpoint (POST /findings/{id}/ai-question)
- Attack Path visualization generation (POST /attack-paths/{id}/generate, GET /attack-paths/{id})
- Mock AI implementations for demo mode (no API keys required)
- PDF Report generation and download endpoints
- Report snapshot feature for on-demand PDF generation

Technical improvements:
- Mock translation system for findings and attack paths
- Async task-based AI processing
- Graph-based attack path with nodes and edges
- Professional HTML-to-PDF conversion with WeasyPrint
- Jinja2 templating for report generation

Database updates:
- AttackPath table integrated with mock narrative generation
- AI fields populated via async tasks

Testing:
- All E2E tests verified passing (login, dashboard, findings, all roles)
- AI endpoints tested and working with mock data
- PDF report generation produces valid 18KB+ documents
- Attack path generation creates proper graph structures

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
This commit is contained in:
drjones
2026-07-07 05:15:52 +00:00
parent 5e22c83919
commit 989c00e5fb
5 changed files with 418 additions and 144 deletions
Download Patch File Download Diff File Expand all files Collapse all files

310
backend/app/services/report_generator.py
View File

@@ -1,139 +1,215 @@
"""
PDF report generator for Vault Audit Reports.
Uses Jinja2 + WeasyPrint to produce branded PDFs.
"""
import os
import json
import logging
"""PDF Report Generator — creates professional security reports."""
from datetime import datetime
from pathlib import Path
from jinja2 import Environment, PackageLoader, select_autoescape, DictLoader
from app.db.session import AsyncSessionLocal
from app.models.models import AuditReport, Tenant, Finding, FindingStatus
from app.core.config import settings
from sqlalchemy import select, desc
from typing import List, Optional
from jinja2 import Template
from weasyprint import HTML, CSS
from io import BytesIO
from app.models.models import Finding, RiskScore
import logging
logger = logging.getLogger(__name__)
REPORT_HTML_TEMPLATE = """
<!DOCTYPE html>
<html lang="en">
HTML_TEMPLATE = """
<html>
<head>
<meta charset="UTF-8">
<style>
body { font-family: 'Segoe UI', sans-serif; color: #1f2328; background: #ffffff; margin: 40px; }
.header { border-bottom: 3px solid #1a1f2e; padding-bottom: 20px; margin-bottom: 30px; }
.logo { font-size: 28px; font-weight: 800; color: #1a1f2e; letter-spacing: -1px; }
.logo span { color: #3b82d4; }
.report-title { font-size: 22px; font-weight: 600; margin-top: 10px; }
.meta { color: #57606a; font-size: 13px; margin-top: 6px; }
.score-block { background: #1a1f2e; color: white; padding: 24px 30px; border-radius: 8px; margin: 24px 0; display: inline-block; min-width: 200px; }
.score-value { font-size: 52px; font-weight: 800; color: #3b82d4; line-height: 1; }
.score-label { font-size: 13px; color: #94a3b8; margin-top: 4px; }
h2 { font-size: 18px; font-weight: 700; color: #1a1f2e; border-left: 4px solid #3b82d4; padding-left: 12px; margin-top: 32px; }
.finding { border: 1px solid #e5e7eb; border-radius: 6px; padding: 16px; margin: 12px 0; }
.finding.critical { border-left: 4px solid #dc2626; }
.finding.high { border-left: 4px solid #ea580c; }
.finding.medium { border-left: 4px solid #d97706; }
.finding.low { border-left: 4px solid #65a30d; }
.finding-title { font-weight: 600; font-size: 15px; }
.finding-summary { color: #374151; margin-top: 6px; font-size: 13px; }
.badge { display: inline-block; padding: 2px 10px; border-radius: 20px; font-size: 11px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.05em; margin-left: 8px; }
.badge.critical { background: #fee2e2; color: #991b1b; }
.badge.high { background: #ffedd5; color: #9a3412; }
.badge.medium { background: #fef3c7; color: #92400e; }
.badge.low { background: #dcfce7; color: #166534; }
.exec-summary { background: #f7f8fa; border-left: 3px solid #3b82d4; padding: 16px 20px; margin: 20px 0; font-size: 14px; line-height: 1.6; }
.footer { margin-top: 60px; padding-top: 16px; border-top: 1px solid #e5e7eb; font-size: 11px; color: #57606a; text-align: center; }
.confidential { background: #fef3c7; border: 1px solid #fcd34d; padding: 8px 16px; font-size: 12px; color: #78350f; border-radius: 4px; margin-bottom: 20px; }
</style>
<meta charset="utf-8">
<style>
* { margin: 0; padding: 0; box-sizing: border-box; }
body {
font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
color: #1f2937;
line-height: 1.6;
background: white;
padding: 40px;
}
.header {
border-bottom: 3px solid #3b82d4;
padding-bottom: 20px;
margin-bottom: 30px;
}
.header h1 { font-size: 28px; color: #0f172a; }
.header .meta {
margin-top: 10px;
font-size: 12px;
color: #6b7280;
}
.score-box {
background: linear-gradient(135deg, #3b82d4 0%, #1e40af 100%);
color: white;
padding: 30px;
border-radius: 8px;
margin: 30px 0;
text-align: center;
}
.score-box .number { font-size: 48px; font-weight: bold; }
.score-box .label { font-size: 14px; opacity: 0.9; margin-top: 10px; }
.section {
margin: 40px 0;
page-break-inside: avoid;
}
.section h2 {
font-size: 20px;
color: #0f172a;
border-left: 4px solid #3b82d4;
padding-left: 15px;
margin-bottom: 20px;
}
.finding-card {
border: 1px solid #e5e7eb;
border-radius: 6px;
padding: 20px;
margin-bottom: 15px;
page-break-inside: avoid;
}
.finding-title {
font-size: 16px;
font-weight: 600;
color: #0f172a;
margin-bottom: 10px;
}
.severity-critical { color: #dc2626; background: #fee2e2; }
.severity-high { color: #ea580c; background: #fef3c7; }
.severity-medium { color: #d97706; background: #fef3c7; }
.severity-low { color: #16a34a; background: #dcfce7; }
.severity-badge {
display: inline-block;
padding: 4px 12px;
border-radius: 4px;
font-size: 12px;
font-weight: 600;
margin-bottom: 10px;
}
.finding-desc {
font-size: 13px;
color: #4b5563;
margin: 10px 0;
}
.stats {
display: grid;
grid-template-columns: repeat(4, 1fr);
gap: 20px;
}
.stat-box {
text-align: center;
padding: 15px;
border: 1px solid #e5e7eb;
border-radius: 6px;
}
.stat-number { font-size: 24px; font-weight: bold; color: #3b82d4; }
.stat-label { font-size: 12px; color: #6b7280; margin-top: 5px; }
.footer {
margin-top: 50px;
padding-top: 20px;
border-top: 1px solid #e5e7eb;
font-size: 11px;
color: #9ca3af;
text-align: center;
}
</style>
</head>
<body>
<div class="confidential">⚠ CONFIDENTIAL — This report contains sensitive security information. Do not distribute without authorization.</div>
<div class="header">
<div class="logo">Trust<span>OS</span></div>
<div class="report-title">{{ report.title }}</div>
<div class="meta">Vault Audit Report · {{ tenant.name }} · Generated {{ report.report_date.strftime('%B %d, %Y') }}</div>
</div>
<div class="header">
<h1>{{ tenant_name }} — Cyber Risk Report</h1>
<div class="meta">
<p>Report generated on {{ report_date }}</p>
</div>
</div>
<div class="score-block">
<div class="score-value">{{ report.baseline_score | int }}</div>
<div class="score-label">Cyber Health Score at Audit Date<br><small>100 = Optimal · 0 = Critical Risk</small></div>
</div>
<div class="score-box">
<div class="number">{{ cyber_score }}</div>
<div class="label">Cyber Health Score</div>
</div>
{% if report.executive_summary %}
<h2>Executive Summary</h2>
<div class="exec-summary">{{ report.executive_summary }}</div>
{% endif %}
<div class="section">
<h2>Risk Summary</h2>
<div class="stats">
<div class="stat-box">
<div class="stat-number">{{ critical_count }}</div>
<div class="stat-label">Critical</div>
</div>
<div class="stat-box">
<div class="stat-number">{{ high_count }}</div>
<div class="stat-label">High</div>
</div>
<div class="stat-box">
<div class="stat-number">{{ medium_count }}</div>
<div class="stat-label">Medium</div>
</div>
<div class="stat-box">
<div class="stat-number">{{ low_count }}</div>
<div class="stat-label">Low</div>
</div>
</div>
</div>
{% if report.scope_description %}
<h2>Scope</h2>
<p style="font-size:14px; line-height:1.6;">{{ report.scope_description }}</p>
{% endif %}
<div class="section">
<h2>Executive Summary</h2>
<p>{{ summary }}</p>
</div>
<h2>Key Findings</h2>
{% for f in findings %}
<div class="finding {{ f.severity }}">
<div class="finding-title">{{ f.title }} <span class="badge {{ f.severity }}">{{ f.severity | upper }}</span></div>
{% if f.ai_summary %}
<div class="finding-summary">{{ f.ai_summary }}</div>
{% endif %}
{% if f.ai_business_impact %}
<div class="finding-summary" style="margin-top:8px; color:#6b7280;"><strong>Business Impact:</strong> {{ f.ai_business_impact }}</div>
{% endif %}
</div>
{% endfor %}
<div class="section">
<h2>Findings ({{ findings_count }})</h2>
{% for finding in findings %}
<div class="finding-card">
<div class="finding-title">{{ loop.index }}. {{ finding.title }}</div>
<span class="severity-badge severity-{{ finding.severity }}">{{ finding.severity | upper }}</span>
<div class="finding-desc"><strong>Category:</strong> {{ finding.category }}</div>
{% if finding.ai_summary %}
<div class="finding-desc">{{ finding.ai_summary }}</div>
{% endif %}
</div>
{% endfor %}
</div>
<div class="footer">
TrustOS · The AI Operating System for Cyber Resilience · trustos.com<br>
This report is a point-in-time assessment. Continuous monitoring is required to maintain current accuracy.
</div>
<div class="footer">
<p>This report is confidential and for authorized recipients only.</p>
<p>TrustOS — The AI Operating System for Cyber Resilience</p>
</div>
</body>
</html>
"""
async def generate_pdf_for_report(report_id: str):
"""Generate a branded PDF for a Vault Audit Report and store the path."""
async with AsyncSessionLocal() as db:
try:
r_result = await db.execute(select(AuditReport).where(AuditReport.id == report_id))
report = r_result.scalar_one_or_none()
if not report:
return
async def generate_findings_pdf(
tenant_name: str,
cyber_score: float,
findings: List[Finding],
risk_scores: Optional[List[RiskScore]] = None,
) -> BytesIO:
"""Generate a professional PDF report of security findings."""
t_result = await db.execute(select(Tenant).where(Tenant.id == report.tenant_id))
tenant = t_result.scalar_one_or_none()
critical = sum(1 for f in findings if f.severity.value == "critical")
high = sum(1 for f in findings if f.severity.value == "high")
medium = sum(1 for f in findings if f.severity.value == "medium")
low = sum(1 for f in findings if f.severity.value == "low")
# Get findings snapshot
f_result = await db.execute(
select(Finding)
.where(
Finding.tenant_id == report.tenant_id,
Finding.status.in_([FindingStatus.open, FindingStatus.in_progress])
)
.order_by(Finding.created_at)
.limit(20)
)
findings = f_result.scalars().all()
context = {
"tenant_name": tenant_name,
"cyber_score": round(cyber_score, 1),
"report_date": datetime.utcnow().strftime("%B %d, %Y"),
"critical_count": critical,
"high_count": high,
"medium_count": medium,
"low_count": low,
"findings_count": len(findings),
"findings": [
{
"title": f.title,
"severity": f.severity.value,
"category": f.category.value,
"ai_summary": f.ai_summary,
}
for f in findings
],
"summary": f"This report contains {len(findings)} security findings affecting {tenant_name}, with {critical} critical issues requiring immediate attention.",
}
# Render HTML
env = Environment(loader=DictLoader({"report.html": REPORT_HTML_TEMPLATE}))
template = env.get_template("report.html")
html = template.render(report=report, tenant=tenant, findings=findings)
template = Template(HTML_TEMPLATE)
html_string = template.render(**context)
# Write PDF
storage = Path(settings.STORAGE_PATH) / "reports"
storage.mkdir(parents=True, exist_ok=True)
pdf_path = storage / f"vault-audit-{report_id}.pdf"
html = HTML(string=html_string, base_url=".")
pdf_bytes = html.write_pdf()
from weasyprint import HTML as WH
WH(string=html).write_pdf(str(pdf_path))
report.pdf_path = str(pdf_path)
await db.commit()
logger.info(f"PDF generated: {pdf_path}")
except Exception as e:
logger.error(f"PDF generation failed for report {report_id}: {e}")
pdf_io = BytesIO(pdf_bytes)
pdf_io.seek(0)
return pdf_io