aura-security 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (115) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +446 -0
  3. package/deploy/AWS-DEPLOYMENT.md +358 -0
  4. package/deploy/terraform/main.tf +362 -0
  5. package/deploy/terraform/terraform.tfvars.example +6 -0
  6. package/dist/agents/base.d.ts +44 -0
  7. package/dist/agents/base.js +96 -0
  8. package/dist/agents/index.d.ts +14 -0
  9. package/dist/agents/index.js +17 -0
  10. package/dist/agents/policy/evaluator.d.ts +15 -0
  11. package/dist/agents/policy/evaluator.js +183 -0
  12. package/dist/agents/policy/index.d.ts +12 -0
  13. package/dist/agents/policy/index.js +15 -0
  14. package/dist/agents/policy/validator.d.ts +15 -0
  15. package/dist/agents/policy/validator.js +182 -0
  16. package/dist/agents/scanners/gitleaks.d.ts +14 -0
  17. package/dist/agents/scanners/gitleaks.js +155 -0
  18. package/dist/agents/scanners/grype.d.ts +14 -0
  19. package/dist/agents/scanners/grype.js +109 -0
  20. package/dist/agents/scanners/index.d.ts +15 -0
  21. package/dist/agents/scanners/index.js +27 -0
  22. package/dist/agents/scanners/npm-audit.d.ts +13 -0
  23. package/dist/agents/scanners/npm-audit.js +129 -0
  24. package/dist/agents/scanners/semgrep.d.ts +14 -0
  25. package/dist/agents/scanners/semgrep.js +131 -0
  26. package/dist/agents/scanners/trivy.d.ts +14 -0
  27. package/dist/agents/scanners/trivy.js +122 -0
  28. package/dist/agents/types.d.ts +137 -0
  29. package/dist/agents/types.js +91 -0
  30. package/dist/auditor/index.d.ts +3 -0
  31. package/dist/auditor/index.js +2 -0
  32. package/dist/auditor/pipeline.d.ts +19 -0
  33. package/dist/auditor/pipeline.js +240 -0
  34. package/dist/auditor/validator.d.ts +17 -0
  35. package/dist/auditor/validator.js +58 -0
  36. package/dist/aura/client.d.ts +29 -0
  37. package/dist/aura/client.js +125 -0
  38. package/dist/aura/index.d.ts +4 -0
  39. package/dist/aura/index.js +2 -0
  40. package/dist/aura/server.d.ts +45 -0
  41. package/dist/aura/server.js +343 -0
  42. package/dist/cli.d.ts +17 -0
  43. package/dist/cli.js +1433 -0
  44. package/dist/client/index.d.ts +41 -0
  45. package/dist/client/index.js +170 -0
  46. package/dist/compliance/index.d.ts +40 -0
  47. package/dist/compliance/index.js +292 -0
  48. package/dist/database/index.d.ts +77 -0
  49. package/dist/database/index.js +395 -0
  50. package/dist/index.d.ts +25 -0
  51. package/dist/index.js +762 -0
  52. package/dist/integrations/aura-scanner.d.ts +69 -0
  53. package/dist/integrations/aura-scanner.js +155 -0
  54. package/dist/integrations/aws-scanner.d.ts +63 -0
  55. package/dist/integrations/aws-scanner.js +624 -0
  56. package/dist/integrations/config.d.ts +69 -0
  57. package/dist/integrations/config.js +212 -0
  58. package/dist/integrations/github.d.ts +45 -0
  59. package/dist/integrations/github.js +201 -0
  60. package/dist/integrations/gitlab.d.ts +36 -0
  61. package/dist/integrations/gitlab.js +110 -0
  62. package/dist/integrations/index.d.ts +11 -0
  63. package/dist/integrations/index.js +11 -0
  64. package/dist/integrations/local-scanner.d.ts +146 -0
  65. package/dist/integrations/local-scanner.js +1654 -0
  66. package/dist/integrations/notifications.d.ts +99 -0
  67. package/dist/integrations/notifications.js +305 -0
  68. package/dist/integrations/scanners.d.ts +57 -0
  69. package/dist/integrations/scanners.js +217 -0
  70. package/dist/integrations/slop-scanner.d.ts +69 -0
  71. package/dist/integrations/slop-scanner.js +155 -0
  72. package/dist/integrations/webhook.d.ts +37 -0
  73. package/dist/integrations/webhook.js +256 -0
  74. package/dist/orchestrator/index.d.ts +72 -0
  75. package/dist/orchestrator/index.js +187 -0
  76. package/dist/output/index.d.ts +152 -0
  77. package/dist/output/index.js +399 -0
  78. package/dist/pipeline/index.d.ts +72 -0
  79. package/dist/pipeline/index.js +313 -0
  80. package/dist/sbom/index.d.ts +94 -0
  81. package/dist/sbom/index.js +298 -0
  82. package/dist/schemas/index.d.ts +2 -0
  83. package/dist/schemas/index.js +2 -0
  84. package/dist/schemas/input.schema.d.ts +87 -0
  85. package/dist/schemas/input.schema.js +44 -0
  86. package/dist/schemas/output.schema.d.ts +115 -0
  87. package/dist/schemas/output.schema.js +64 -0
  88. package/dist/serve-visualizer.d.ts +2 -0
  89. package/dist/serve-visualizer.js +78 -0
  90. package/dist/slop/client.d.ts +29 -0
  91. package/dist/slop/client.js +125 -0
  92. package/dist/slop/index.d.ts +4 -0
  93. package/dist/slop/index.js +2 -0
  94. package/dist/slop/server.d.ts +45 -0
  95. package/dist/slop/server.js +343 -0
  96. package/dist/types/events.d.ts +62 -0
  97. package/dist/types/events.js +2 -0
  98. package/dist/types/index.d.ts +1 -0
  99. package/dist/types/index.js +1 -0
  100. package/dist/visualizer/index.d.ts +4 -0
  101. package/dist/visualizer/index.js +181 -0
  102. package/dist/websocket/index.d.ts +88 -0
  103. package/dist/websocket/index.js +195 -0
  104. package/dist/zones/index.d.ts +7 -0
  105. package/dist/zones/index.js +7 -0
  106. package/dist/zones/manager.d.ts +101 -0
  107. package/dist/zones/manager.js +304 -0
  108. package/dist/zones/types.d.ts +78 -0
  109. package/dist/zones/types.js +33 -0
  110. package/package.json +84 -0
  111. package/visualizer/app.js +0 -0
  112. package/visualizer/index-minimal.html +1771 -0
  113. package/visualizer/index.html +2933 -0
  114. package/visualizer/landing.html +1328 -0
  115. package/visualizer/styles.css +0 -0
@@ -0,0 +1,33 @@
1
+ /**
2
+ * Aura Protocol - Zone Types
3
+ *
4
+ * Zones are isolated execution environments that contain agents.
5
+ * Each zone has its own memory space and can run in parallel with other zones.
6
+ */
7
+ // Default zone configurations
8
+ export const DEFAULT_ZONES = [
9
+ {
10
+ id: 'scanner-zone',
11
+ name: 'Scanner Zone',
12
+ type: 'scanner',
13
+ color: '#22c55e', // Green
14
+ description: 'Fast parallel scanning for secrets and vulnerabilities',
15
+ agentIds: ['gitleaks', 'trivy', 'semgrep', 'grype', 'npm-audit'],
16
+ },
17
+ {
18
+ id: 'policy-zone',
19
+ name: 'Policy Zone',
20
+ type: 'policy',
21
+ color: '#ef4444', // Red
22
+ description: 'Context-aware policy evaluation and false positive elimination',
23
+ agentIds: ['policy-evaluator', 'validator'],
24
+ },
25
+ {
26
+ id: 'reporting-zone',
27
+ name: 'Reporting Zone',
28
+ type: 'reporting',
29
+ color: '#3b82f6', // Blue
30
+ description: 'Generate reports and send notifications',
31
+ agentIds: ['sarif-reporter', 'slack-notifier', 'discord-notifier'],
32
+ },
33
+ ];
package/package.json ADDED
@@ -0,0 +1,84 @@
1
+ {
2
+ "name": "aura-security",
3
+ "version": "0.4.0",
4
+ "description": "Deterministic security auditing engine with optional AI advisory layer. Run as CLI, CI step, or service. AI does not make enforcement decisions.",
5
+ "type": "module",
6
+ "main": "dist/index.js",
7
+ "types": "dist/index.d.ts",
8
+ "bin": {
9
+ "aura-security": "dist/cli.js",
10
+ "aura": "dist/cli.js"
11
+ },
12
+ "files": [
13
+ "dist",
14
+ "visualizer",
15
+ "schemas",
16
+ "deploy",
17
+ "README.md",
18
+ "LICENSE"
19
+ ],
20
+ "scripts": {
21
+ "build": "tsc",
22
+ "start": "node dist/index.js",
23
+ "dev": "tsx src/index.ts",
24
+ "visualizer": "tsx src/serve-visualizer.ts",
25
+ "cli": "tsx src/cli.ts",
26
+ "full": "concurrently \"npm start\" \"npm run visualizer\"",
27
+ "test": "node --test dist/**/*.test.js",
28
+ "prepublishOnly": "npm run build",
29
+ "clean": "rm -rf dist"
30
+ },
31
+ "keywords": [
32
+ "security",
33
+ "auditor",
34
+ "scanner",
35
+ "aura",
36
+ "3d-visualizer",
37
+ "secrets",
38
+ "vulnerability",
39
+ "sast",
40
+ "gitleaks",
41
+ "trivy",
42
+ "semgrep",
43
+ "aws",
44
+ "devsecops",
45
+ "appsec",
46
+ "ci-cd"
47
+ ],
48
+ "author": "aurasecurity",
49
+ "license": "MIT",
50
+ "repository": {
51
+ "type": "git",
52
+ "url": "git+https://github.com/aurasecurityio/aura-security.git"
53
+ },
54
+ "bugs": {
55
+ "url": "https://github.com/aurasecurityio/aura-security/issues"
56
+ },
57
+ "homepage": "https://aurasecurity.io",
58
+ "dependencies": {
59
+ "@aws-sdk/client-ec2": "^3.968.0",
60
+ "@aws-sdk/client-iam": "^3.968.0",
61
+ "@aws-sdk/client-lambda": "^3.968.0",
62
+ "@aws-sdk/client-rds": "^3.968.0",
63
+ "@aws-sdk/client-s3": "^3.968.0",
64
+ "@aws-sdk/credential-providers": "^3.968.0",
65
+ "ajv": "^8.12.0",
66
+ "ajv-formats": "^2.1.1",
67
+ "better-sqlite3": "^12.6.0",
68
+ "ws": "^8.19.0"
69
+ },
70
+ "devDependencies": {
71
+ "@types/better-sqlite3": "^7.6.13",
72
+ "@types/node": "^20.0.0",
73
+ "@types/ws": "^8.18.1",
74
+ "concurrently": "^9.2.1",
75
+ "tsx": "^4.0.0",
76
+ "typescript": "^5.3.0"
77
+ },
78
+ "engines": {
79
+ "node": ">=18.0.0"
80
+ },
81
+ "publishConfig": {
82
+ "access": "public"
83
+ }
84
+ }
File without changes