torusguard 0.9.4 → 1.0.0

package/.torusguard/workflows/memory.md

@@ -0,0 +1,53 @@
+---
+description: TorusGuard Adaptive Security Memory Engine — view memory stats, export/import intelligence, apply TTL decay, and manage false positives.
+tools: Read, Grep, Glob, Bash
+version: 1.0.0
+agent: reviewer
+lifecycle-phase: Intelligence / Memory
+required-skills:
+  - torusguard
+scripts-binding:
+  - .torusguard/scripts/memory_engine.py
+---
+
+# /torusguard memory — Adaptive Security Memory Engine & Intelligence Management
+
+$ARGUMENTS
+
+---
+
+## Objective
+Inspect, manage, export, import, or compact persistent local security memory patterns, context window cards, and false positive suppressions.
+
+---
+
+## Subcommands & Usage
+
+| Command | Action | Description |
+| :--- | :--- | :--- |
+| `npx torusguard memory` | Status | Display memory stats, pattern count, and context token estimate |
+| `npx torusguard memory context` | Context Dump | Output the active pre-computed context window cards |
+| `npx torusguard memory fp --rule <RULE_ID>` | False Positive | Suppress rule as false positive across future scans |
+| `npx torusguard memory decay [--ttl 90]` | TTL Decay | Apply confidence decay to stale, unconfirmed patterns |
+| `npx torusguard memory export --path <FILE>` | Export | Export memory bundle for team sharing |
+| `npx torusguard memory import --path <FILE>` | Import | Merge external memory bundle into local project intelligence |
+| `npx torusguard memory compact` | Compaction | Archive raw events older than 30 days into single archive |
+
+---
+
+## Execution Steps
+
+1. **Verify Memory Subsystem:** Confirm `.torusguard/memory/` exists and is shielded by `.gitignore`.
+2. **Execute Requested Action:** Invoke `.torusguard/scripts/memory_engine.py` with appropriate action flag:
+   ```bash
+   python .torusguard/scripts/memory_engine.py --action status
+   ```
+3. **Verify Context Token Budget:** Confirm `context.json` remains within token budget ($\le 2,000$ tokens).
+4. **Display Intelligence Card:** Render summary card to user.
+
+---
+
+## Privacy & Security Invariants
+- Memory files remain strictly local under `.torusguard/memory/` and are always gitignored.
+- Memory files are never packaged into npm release tarballs.
+- Export operations only occur when explicitly invoked by user command.

package/README.md

@@ -1,12 +1,13 @@
 <div align="center">
-  <img src="TorusGuard.png" alt="TorusGuard Security Banner" width="480" style="max-width: 100%; height: auto; border-radius: 8px;">
+  <img src="https://raw.githubusercontent.com/githubmofo/TorusGuard/main/TorusGuard.png" alt="TorusGuard Security Banner" width="480" style="max-width: 100%; height: auto; border-radius: 8px;">
 
   # TorusGuard
 
   **Autonomous Security Guardrails, Governed Remediation, and Authorized Runtime Validation for AI-Built Web Applications.**
 
   [![npm version](https://img.shields.io/npm/v/torusguard.svg?style=flat-square&color=cb3837&logo=npm)](https://www.npmjs.com/package/torusguard)
-  [![Release](https://img.shields.io/badge/Release-v0.9.4-blue.svg?style=flat-square)](https://github.com/githubmofo/TorusGuard/releases/latest)
+  [![GitHub Packages](https://img.shields.io/badge/GitHub%20Packages-v1.0.0-181717.svg?style=flat-square&logo=github)](https://github.com/githubmofo/TorusGuard/pkgs/npm/torusguard)
+  [![Release](https://img.shields.io/badge/Release-v1.0.0-blue.svg?style=flat-square)](https://github.com/githubmofo/TorusGuard/releases/latest)
   [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg?style=flat-square)](LICENSE)
   [![Python 3.10+](https://img.shields.io/badge/Python-3.10%2B-blue.svg?style=flat-square&logo=python&logoColor=white)](https://python.org)
   [![Node.js 18+](https://img.shields.io/badge/Node.js-18%2B-339933.svg?style=flat-square&logo=node.js&logoColor=white)](https://nodejs.org)
@@ -142,6 +143,7 @@ When Track 2 is initialized, the complete 11-command palette becomes available i
 | `/torusguard recheck`<br>*(or `/torusguard-recheck`)* | `skills/torusguard-recheck` | Phase 6 | Executes differential re-audit strictly on modified files to verify fix closure. | No |
 | `/torusguard report`<br>*(or `/torusguard-report`)* | `skills/torusguard-report` | Phase 7 | Emits executive summary markdown and OASIS SARIF v2.1.0 CI artifacts. | No |
 | `/torusguard status`<br>*(or `/torusguard-status`)* | `skills/torusguard-status` | Diagnostic | Inspects active security posture, thresholds, and recent run history. | No |
+| `/torusguard memory` | `skills/torusguard` | Intelligence | Inspects, exports, imports, or compacts persistent security memory context. | Yes (`.torusguard/memory/`) |
 | `/torusguard full` | `skills/torusguard-full` | End-to-End | Orchestrates the entire 7-stage security cycle in one coordinated sequence. | **Yes (Governed)** |
 
 ---
@@ -258,6 +260,14 @@ $$\text{Score} = (w_d \cdot D) + (w_e \cdot E) + (w_c \cdot C_{ast}) - P_{fp} -
 ### 3. Stable Line-Shift Invariant Fingerprinting (`primaryLocationLineHash`)
 Traditional static tools break finding identity when a developer inserts 2 lines at the top of a file. TorusGuard computes a stable SHA-256 hash across the AST node content, enclosing function scope, and syntactic tokens. Findings maintain permanent tracking identity across Git commits and branch renames.
 
+### 4. Adaptive Security Memory Engine (`.torusguard/memory/`)
+Traditional scanners are stateless — they scan, report, and forget. TorusGuard v1.0.0 introduces persistent, local-first intelligence that learns from every audit, fix, and verification:
+* **4-Tier Intelligence Architecture:** Raw event append-log (`events/`) ──► Distilled pattern store (`patterns.json`) ──► Pre-computed context window (`context.json`) ──► Project security profile (`profile.json`).
+* **Structured JSON Cards:** Pre-computes context cards within a strict $\le 2,000$ token budget for instant, hallucination-free injection into AI coding agent prompts.
+* **Confidence Amplification & TTL Decay:** Multi-file fix verifications boost pattern confidence up to 98%, while unconfirmed patterns decay gracefully over 90 days.
+* **Zero-Leakage Guarantee:** Memory is strictly gitignored (`*`), excluded from npm distribution tarballs, and stored only in the user's project.
+* **CLI Memory Management:** Inspect, export, import, or compact memory via `npx torusguard memory`.
+
 ---
 
 ## 🛡️ Rule Catalog & Detection Families (71 Canonical Rules)

package/bin/torusguard.js

@@ -15,14 +15,16 @@ const command = args[0] || 'init';
 const rootDir = path.resolve(__dirname, '..');
 const cwd = process.cwd();
 
-// ANSI Color Helpers
+// ─── ANSI Color Helpers ───────────────────────────────────────────────────────
 const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
 const RESET = '\x1b[0m';
 const CYAN = '\x1b[36m';
 const GREEN = '\x1b[32m';
 const YELLOW = '\x1b[33m';
+const WHITE = '\x1b[97m';
 const GRAY = '\x1b[90m';
-const DIM = '\x1b[2m';
+const RED = '\x1b[31m';
 
 // Detect available Python binary (python or python3)
 let pythonCmd = 'python';
@@ -45,24 +47,42 @@ try {
 
 function printHelp() {
   console.log(`
-  ${CYAN}╭──────────────────────────────────────────────────────────────────────────╮${RESET}
-  ${CYAN}│${RESET}  ${BOLD}🛡️  TORUSGUARD CLI v0.9.4${RESET}                     ${GRAY}[Autonomous Security Engine]${RESET} ${CYAN}│${RESET}
-  ${CYAN}│${RESET}  ${DIM}Governed Remediation & Security Guardrails for AI Web Applications${RESET}      ${CYAN}│${RESET}
-  ${CYAN}╰──────────────────────────────────────────────────────────────────────────╯${RESET}
-
-  ${BOLD}Usage:${RESET}
-    ${GREEN}npx torusguard${RESET} [command] [options]
-
-  ${BOLD}Commands:${RESET}
-    ${CYAN}init${RESET}          Scaffold ${BOLD}.torusguard/${RESET} workspace and unlock all 11 slash commands
-    ${CYAN}status${RESET}        Display active security posture, configured rules, and stack
-    ${CYAN}audit${RESET}         Execute static security AST audit on target project
-    ${CYAN}report${RESET}        Export OASIS SARIF v2.1.0 security telemetry
-    ${CYAN}help${RESET}          Show this interactive command guide
-
-  ${BOLD}Options:${RESET}
-    ${GRAY}--target <dir>${RESET}  Target directory to analyze or scaffold ${DIM}(default: .)${RESET}
-    ${GRAY}--force${RESET}         Overwrite existing configuration and re-scaffold templates
+  ${CYAN}╭─────────────────────────────────────────────────────────────────────────╮${RESET}
+  ${CYAN}│${RESET}                                                                         ${CYAN}│${RESET}
+  ${CYAN}│${RESET}   ${BOLD}${WHITE}🛡️  T O R U S G U A R D   C L I${RESET}                          ${GRAY}v1.0.0${RESET}   ${CYAN}│${RESET}
+  ${CYAN}│${RESET}   ${DIM}Autonomous Security Engine for AI-Built Applications${RESET}               ${CYAN}│${RESET}
+  ${CYAN}│${RESET}                                                                         ${CYAN}│${RESET}
+  ${CYAN}╰─────────────────────────────────────────────────────────────────────────╯${RESET}
+
+  ${BOLD}Usage:${RESET}  ${GREEN}npx torusguard${RESET} ${WHITE}[command]${RESET} ${GRAY}[options]${RESET}
+
+  ${CYAN}┌─────────────────────────────────────────────────────────────────────────┐${RESET}
+  ${CYAN}│${RESET}  ${BOLD}Commands${RESET}                                                              ${CYAN}│${RESET}
+  ${CYAN}├─────────────────────────────────────────────────────────────────────────┤${RESET}
+  ${CYAN}│${RESET}  ${GREEN}init${RESET}      Scaffold ${BOLD}.torusguard/${RESET} workspace + unlock 12 slash commands   ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GREEN}status${RESET}    Display active security posture, memory, rules, and stack   ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GREEN}memory${RESET}    Manage persistent security memory (export, import, decay)   ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GREEN}audit${RESET}     Run static AST security scan on the target project          ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GREEN}report${RESET}    Export OASIS SARIF v2.1.0 structured telemetry              ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GREEN}help${RESET}      Show this interactive command guide                         ${CYAN}│${RESET}
+  ${CYAN}├─────────────────────────────────────────────────────────────────────────┤${RESET}
+  ${CYAN}│${RESET}  ${BOLD}Options${RESET}                                                               ${CYAN}│${RESET}
+  ${CYAN}├─────────────────────────────────────────────────────────────────────────┤${RESET}
+  ${CYAN}│${RESET}  ${GRAY}--target <dir>${RESET}   Target directory to analyze or scaffold ${DIM}(default: .)${RESET}  ${CYAN}│${RESET}
+  ${CYAN}│${RESET}  ${GRAY}--force${RESET}          Overwrite existing workspace and re-scaffold          ${CYAN}│${RESET}
+  ${CYAN}└─────────────────────────────────────────────────────────────────────────┘${RESET}
+
+  ${BOLD}AI Chat Commands:${RESET}
+    ${DIM}In your AI IDE chat, use any of these slash commands:${RESET}
+    ${CYAN}/torusguard${RESET}          Main orchestrator (status, audit, harden, memory)
+    ${CYAN}/torusguard-audit${RESET}    Static AST security scan
+    ${CYAN}/torusguard-harden${RESET}   Generate governed fix patches
+    ${CYAN}/torusguard-apply${RESET}    Apply patches with rollback snapshots
+    ${CYAN}/torusguard-report${RESET}   Executive security posture report
+    ${CYAN}/torusguard-status${RESET}   Read-only workspace diagnostic
+
+  ${DIM}Documentation:${RESET}  ${CYAN}https://github.com/githubmofo/TorusGuard${RESET}
+  ${DIM}NPM Package:${RESET}   ${CYAN}https://npmjs.com/package/torusguard${RESET}
 `);
 }
 
@@ -76,28 +96,74 @@ if (command === 'status') {
   if (fs.existsSync(cfgPath)) {
     try {
       const cfg = JSON.parse(fs.readFileSync(cfgPath, 'utf-8'));
+      const stackLang = cfg.detected_stack?.language || 'Not yet detected';
+      const stackFw = cfg.detected_stack?.framework || 'Not yet detected';
+      const stackDb = cfg.detected_stack?.data_layer || 'Not yet detected';
+      const stackStatus = cfg.detected_stack ? `${GREEN}Detected${RESET}` : `${YELLOW}Pending first audit${RESET}`;
+
+      // Memory telemetry
+      const memProfilePath = path.join(cwd, '.torusguard', 'memory', 'profile.json');
+      const memContextPath = path.join(cwd, '.torusguard', 'memory', 'context.json');
+      let memPatterns = 0;
+      let memEvents = 0;
+      let memTokens = 0;
+      let memFixRate = 'N/A';
+      if (fs.existsSync(memProfilePath)) {
+        try {
+          const prof = JSON.parse(fs.readFileSync(memProfilePath, 'utf-8'));
+          memPatterns = prof.active_patterns_count || 0;
+          memEvents = prof.total_events || 0;
+          memFixRate = prof.fix_rate_percentage !== null && prof.fix_rate_percentage !== undefined ? `${prof.fix_rate_percentage}%` : 'N/A';
+        } catch (e) {}
+      }
+      if (fs.existsSync(memContextPath)) {
+        try {
+          const ctx = JSON.parse(fs.readFileSync(memContextPath, 'utf-8'));
+          memTokens = ctx.token_estimate || 0;
+        } catch (e) {}
+      }
+
       console.log(`
-  ${CYAN}╭──────────────────────────────────────────────────────────────────────────╮${RESET}
-  ${CYAN}│${RESET}  ${BOLD}🛡️  TORUSGUARD ACTIVE SECURITY POSTURE${RESET}                          ${GRAY}v0.9.4${RESET} ${CYAN}│${RESET}
-  ${CYAN}╰──────────────────────────────────────────────────────────────────────────╯${RESET}
-
-  ${BOLD}▸ Workspace Location:${RESET}   ${GREEN}${cwd}${RESET}
-  ${BOLD}▸ Governance Mode:${RESET}      ${GREEN}Full Local Governance (.torusguard/)${RESET}
-
-  ${BOLD}⏺ Environment & Stack:${RESET}
-    ${GRAY}⎿ Language:${RESET}          ${BOLD}${cfg.detected_stack?.language || 'TypeScript'}${RESET}
-    ${GRAY}⎿ Framework:${RESET}         ${BOLD}${cfg.detected_stack?.framework || 'None (Generic Web)'}${RESET}
-    ${GRAY}⎿ Data Layer:${RESET}        ${BOLD}${cfg.detected_stack?.data_layer || 'None'}${RESET}
-    ${GRAY}⎿ Rules Catalog:${RESET}     ${GREEN}71 Canonical Security Rules Active${RESET}
-
-  ${BOLD}⏺ Governance Telemetry:${RESET}
-    ${GRAY}⎿ Severity Floor:${RESET}    ${YELLOW}${cfg.severity_threshold || 'medium'}${RESET}
-    ${GRAY}⎿ Runs Directory:${RESET}    ${CYAN}${cfg.runs_dir || '.torusguard/runs'}${RESET}
-    ${GRAY}⎿ Ponytail Bounds:${RESET}   ${GREEN}≤ 35 additions, ≤ 25 deletions${RESET}
-
-  ${CYAN}╭──────────────────────────────────────────────────────────────────────────╮${RESET}
-  ${CYAN}│${RESET}  ${BOLD}💡 Quick Action:${RESET} In your AI chat, run ${CYAN}/torusguard-audit${RESET} to scan.      ${CYAN}│${RESET}
-  ${CYAN}╰──────────────────────────────────────────────────────────────────────────╯${RESET}
+  ${CYAN}╭─────────────────────────────────────────────────────────────────────────╮${RESET}
+  ${CYAN}│${RESET}                                                                         ${CYAN}│${RESET}
+  ${CYAN}│${RESET}   ${BOLD}${WHITE}🛡️  TORUSGUARD SECURITY POSTURE${RESET}                        ${GRAY}v1.0.0${RESET}   ${CYAN}│${RESET}
+  ${CYAN}│${RESET}                                                                         ${CYAN}│${RESET}
+  ${CYAN}╰─────────────────────────────────────────────────────────────────────────╯${RESET}
+
+  ${BOLD}▸ Workspace:${RESET}        ${GREEN}${cwd}${RESET}
+  ${BOLD}▸ Governance:${RESET}       ${GREEN}Full Local Governance (.torusguard/)${RESET}
+
+  ${CYAN}┌── Environment & Stack ──────────────────────────────────────────────────┐${RESET}
+  ${CYAN}│${RESET}  Language:          ${BOLD}${stackLang}${RESET}
+  ${CYAN}│${RESET}  Framework:         ${BOLD}${stackFw}${RESET}
+  ${CYAN}│${RESET}  Data Layer:        ${BOLD}${stackDb}${RESET}
+  ${CYAN}│${RESET}  Stack Detection:   ${stackStatus}
+  ${CYAN}└─────────────────────────────────────────────────────────────────────────┘${RESET}
+
+  ${CYAN}┌── Security Memory Engine ───────────────────────────────────────────────┐${RESET}
+  ${CYAN}│${RESET}  Patterns Learned:  ${GREEN}${memPatterns} active patterns${RESET}
+  ${CYAN}│${RESET}  Events Recorded:   ${WHITE}${memEvents} events (local-first log)${RESET}
+  ${CYAN}│${RESET}  Context Window:    ${CYAN}${memTokens} / 2,000 tokens${RESET} (${Math.round((memTokens / 2000) * 100)}% utilized)
+  ${CYAN}│${RESET}  Fix Velocity Rate: ${YELLOW}${memFixRate}${RESET}
+  ${CYAN}└─────────────────────────────────────────────────────────────────────────┘${RESET}
+
+  ${CYAN}┌── Governance Telemetry ─────────────────────────────────────────────────┐${RESET}
+  ${CYAN}│${RESET}  Rules Catalog:     ${GREEN}71 Canonical Security Rules${RESET} (11 families)
+  ${CYAN}│${RESET}  Severity Floor:    ${YELLOW}${cfg.severity_threshold || 'medium'}${RESET}
+  ${CYAN}│${RESET}  Runs Directory:    ${DIM}${cfg.runs_dir || '.torusguard/runs'}${RESET}
+  ${CYAN}│${RESET}  Ponytail Bounds:   ${GREEN}<= 35 additions, <= 25 deletions${RESET}
+  ${CYAN}└─────────────────────────────────────────────────────────────────────────┘${RESET}
+
+  ${CYAN}┌── Rule Families ────────────────────────────────────────────────────────┐${RESET}
+  ${CYAN}│${RESET}  ${YELLOW}TG-SEC${RESET}     Secrets & Credentials    ${YELLOW}TG-DB${RESET}      Database Safety
+  ${CYAN}│${RESET}  ${YELLOW}TG-INPUT${RESET}   Input Validation         ${YELLOW}TG-AUTH${RESET}    Authentication
+  ${CYAN}│${RESET}  ${YELLOW}TG-CLIENT${RESET}  Client Bundle Leaks      ${YELLOW}TG-DIFF${RESET}    Diff Inspection
+  ${CYAN}│${RESET}  ${YELLOW}TG-AGENT${RESET}   AI Agent Security        ${YELLOW}TG-EDGE${RESET}    Serverless
+  ${CYAN}│${RESET}  ${YELLOW}TG-SUPPLY${RESET}  Supply Chain & CI/CD     ${YELLOW}TG-SSRF${RESET}    Outbound Net
+  ${CYAN}│${RESET}  ${YELLOW}TG-BIZ${RESET}     Business Logic
+  ${CYAN}└─────────────────────────────────────────────────────────────────────────┘${RESET}
+
+  ${DIM}Quick Action:${RESET} In your AI chat, run ${CYAN}/torusguard-audit${RESET} to scan.
 `);
       process.exit(0);
     } catch (e) {
@@ -105,13 +171,77 @@ if (command === 'status') {
     }
   } else {
     console.log(`
-  ${YELLOW}Notice:${RESET} No .torusguard workspace found in current directory.
-  Run ${GREEN}npx torusguard init${RESET} to scaffold full workspace governance.
+  ${YELLOW}⚠${RESET}  No .torusguard workspace found in current directory.
+     Run ${GREEN}npx torusguard init${RESET} to scaffold full workspace governance.
 `);
     process.exit(0);
   }
 }
 
+// Subcommand: memory
+if (command === 'memory') {
+  const sub = args[1] || 'status';
+  const memScript = path.join(cwd, '.torusguard', 'scripts', 'memory_engine.py');
+  const fallbackMemScript = path.join(rootDir, '.torusguard', 'scripts', 'memory_engine.py');
+  const actualMemScript = fs.existsSync(memScript) ? memScript : fallbackMemScript;
+
+  let pyArgs = [actualMemScript];
+  if (sub === 'status') {
+    pyArgs.push('--action', 'status');
+  } else if (sub === 'context') {
+    pyArgs.push('--action', 'context');
+  } else if (sub === 'distill') {
+    pyArgs.push('--action', 'distill');
+  } else if (sub === 'decay') {
+    pyArgs.push('--action', 'decay');
+    const ttlIdx = args.indexOf('--ttl');
+    if (ttlIdx !== -1 && args[ttlIdx + 1]) {
+      pyArgs.push('--ttl', args[ttlIdx + 1]);
+    }
+  } else if (sub === 'compact') {
+    pyArgs.push('--action', 'compact');
+    const ageIdx = args.indexOf('--older-than');
+    if (ageIdx !== -1 && args[ageIdx + 1]) {
+      pyArgs.push('--older-than', args[ageIdx + 1]);
+    }
+  } else if (sub === 'export') {
+    pyArgs.push('--action', 'export');
+    const pathIdx = args.indexOf('--path') !== -1 ? args.indexOf('--path') : args.indexOf('-p');
+    if (pathIdx !== -1 && args[pathIdx + 1]) {
+      pyArgs.push('--target', args[pathIdx + 1]);
+    } else {
+      pyArgs.push('--target', 'torusguard-memory-export.json');
+    }
+  } else if (sub === 'import') {
+    pyArgs.push('--action', 'import');
+    const pathIdx = args.indexOf('--path') !== -1 ? args.indexOf('--path') : args.indexOf('-p');
+    if (pathIdx !== -1 && args[pathIdx + 1]) {
+      pyArgs.push('--source', args[pathIdx + 1]);
+    } else {
+      console.error(`${RED}Error: --path <file> is required for memory import${RESET}`);
+      process.exit(1);
+    }
+  } else if (sub === 'fp') {
+    pyArgs.push('--action', 'fp');
+    const ruleIdx = args.indexOf('--rule') !== -1 ? args.indexOf('--rule') : args.indexOf('-r');
+    if (ruleIdx !== -1 && args[ruleIdx + 1]) {
+      pyArgs.push('--rule-id', args[ruleIdx + 1]);
+    } else {
+      console.error(`${RED}Error: --rule <rule_id> is required for fp suppression${RESET}`);
+      process.exit(1);
+    }
+    const reasonIdx = args.indexOf('--reason');
+    if (reasonIdx !== -1 && args[reasonIdx + 1]) {
+      pyArgs.push('--reason', args[reasonIdx + 1]);
+    }
+  } else {
+    pyArgs.push('--action', sub, ...args.slice(2));
+  }
+
+  const proc = spawnSync(pythonCmd, pyArgs, { stdio: 'inherit', cwd });
+  process.exit(proc.status !== null ? proc.status : 0);
+}
+
 // Locate bootstrap / runner scripts
 const localBootstrap = path.join(rootDir, 'skills', 'torusguard', 'bootstrap.py');
 const localInstall = path.join(rootDir, 'install.py');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "torusguard",
-  "version": "0.9.4",
+  "version": "1.0.0",
   "description": "Security guardrails, governed remediation, and authorized runtime validation for AI-built web applications.",
   "main": "bin/torusguard.js",
   "bin": {

package/skills/torusguard/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard
-description: Security guardrails, governed remediation, and authorized runtime validation for AI-built web applications across Python and TypeScript.
-version: 0.9.4
+description: "Autonomous security engine: 71 rules across 11 families, governed remediation (Ponytail Protocol), SARIF v2.1.0 exports, and persistent security memory context for Python & TypeScript web applications."
+version: 1.0.0
 ---
 
 # TorusGuard Master Security Router
@@ -11,7 +11,7 @@ version: 0.9.4
 ---
 
 ## ⚡ Workspace Bootstrap Check
-1. **If `.torusguard/` exists on disk:** Full governance active. Route slash commands to local specialist workflows below.
+1. **If `.torusguard/` exists on disk:** Full governance active. Load `.torusguard/memory/context.json` into prompt context for local-first intelligence. Route commands to specialist workflows below.
 2. **If `.torusguard/` is absent (Autonomous AI Mode):** Operates standalone in any AI agent (Kimi, Antigravity, VS Code, Cursor). Apply in-memory security invariants:
    - Server-side auth & tenant scoping (`.filter(tenant=...)`).
    - Zero client-side secrets (`SUPABASE_SERVICE_ROLE_KEY`, live API keys).
@@ -36,6 +36,7 @@ Load **only** the designated sub-skill on demand to preserve the 1,000–1,500 t
 | `/torusguard recheck` | `skills/torusguard-recheck/SKILL.md` | `reviewer` |
 | `/torusguard report` | `skills/torusguard-report/SKILL.md` | `reviewer` |
 | `/torusguard status` | `skills/torusguard-status/SKILL.md` | `reviewer` |
+| `/torusguard memory` | `skills/torusguard/SKILL.md` | `reviewer` |
 | `/torusguard full` | `skills/torusguard-full/SKILL.md` | *All* |
 
 *Note: Never load all skills simultaneously. Lazy-load strictly on demand.*