torusguard 1.3.6 → 2.0.0-alpha

package/bin/torusguard.js

@@ -15,6 +15,51 @@ const command = args[0] || 'init';
 const rootDir = path.resolve(__dirname, '..');
 const cwd = process.cwd();
 
+// Parse version flag immediately
+if (command === '--version' || command === '-v' || command === 'version') {
+  let ver = '1.4.0';
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(rootDir, 'package.json'), 'utf-8'));
+    ver = pkg.version || ver;
+  } catch (e) {}
+  console.log(`torusguard v${ver}`);
+  process.exit(0);
+}
+
+function parseTargetAndArgs(cliArgs) {
+  let target = '.';
+  const remaining = [];
+  for (let i = 1; i < cliArgs.length; i++) {
+    const a = cliArgs[i];
+    if (a === '--target' || a === '-t' || a === '--root') {
+      if (i + 1 < cliArgs.length) {
+        target = cliArgs[i + 1];
+        i++;
+      }
+    } else if (a.startsWith('--target=') || a.startsWith('--root=')) {
+      target = a.split('=')[1];
+    } else {
+      remaining.push(a);
+    }
+  }
+  if (target === '.' && remaining.length > 0 && !remaining[0].startsWith('-')) {
+    target = remaining.shift();
+  }
+  return { target, remaining };
+}
+
+function compareSemver(a, b) {
+  const pa = a.replace(/^v/, '').split('.').map(n => parseInt(n, 10) || 0);
+  const pb = b.replace(/^v/, '').split('.').map(n => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    const na = pa[i] || 0;
+    const nb = pb[i] || 0;
+    if (na > nb) return 1;
+    if (na < nb) return -1;
+  }
+  return 0;
+}
+
 // ─── ANSI Color Helpers ───────────────────────────────────────────────────────
 const BOLD = '\x1b[1m';
 const DIM = '\x1b[2m';
@@ -169,12 +214,13 @@ function cardHeader(title, subtitle = '', version = 'v1.3.6', borderColor = CYAN
 
 function printHelp() {
   console.log();
-  console.log(cardHeader('🛡️  T O R U S G U A R D   C L I', 'Autonomous Security Engine for AI-Built Applications', 'v1.3.6'));
+  console.log(cardHeader('🛡️  T O R U S G U A R D   C L I', 'Autonomous Security Engine for AI-Built Applications', 'v1.4.0'));
   console.log(`\n  ${BOLD}Usage:${RESET}  ${GREEN}npx torusguard${RESET} ${WHITE}[command]${RESET} ${GRAY}[options]${RESET}\n`);
 
   console.log(cardBorderTop('Commands'));
   console.log(formatBoxLine(`${GREEN}init${RESET}        Scaffold ${BOLD}.torusguard/${RESET} workspace + unlock slash commands`));
   console.log(formatBoxLine(`${GREEN}status${RESET}      Display active security posture, memory, rules, & stack`));
+  console.log(formatBoxLine(`${GREEN}update${RESET}      Check npm registry for updates (--install to auto-upgrade)`));
   console.log(formatBoxLine(`${GREEN}rules${RESET}       Auto-sync memory to AI IDE rules (.cursorrules, CLAUDE.md)`));
   console.log(formatBoxLine(`${GREEN}memory${RESET}      Manage persistent security memory (export, hook, learn)`));
   console.log(formatBoxLine(`${GREEN}audit${RESET}       Run static AST security scan on target project`));
@@ -198,6 +244,7 @@ function printHelp() {
   console.log(formatBoxLine(`${GRAY}--target <dir>${RESET}   Target directory to analyze or scaffold ${DIM}(default: .)${RESET}`));
   console.log(formatBoxLine(`${GRAY}--force${RESET}          Overwrite existing workspace and re-scaffold`));
   console.log(formatBoxLine(`${GRAY}--yes, -y${RESET}        Non-interactive auto-approval for patch application`));
+  console.log(formatBoxLine(`${GRAY}--version, -v${RESET}    Display TorusGuard package version`));
   console.log(cardBorderBottom());
 
   console.log(`\n  ${BOLD}AI Chat Commands:${RESET}`);
@@ -219,7 +266,18 @@ if (command === 'help' || command === '--help' || command === '-h') {
 }
 
 if (command === 'status') {
-  const cfgPath = path.join(cwd, '.torusguard', 'config', 'torusguard.json');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const statusScript = path.join(targetDir, '.torusguard', 'scripts', 'status_runner.py');
+  const fallbackStatusScript = path.join(rootDir, '.torusguard', 'scripts', 'status_runner.py');
+  const actualStatusScript = fs.existsSync(statusScript) ? statusScript : fallbackStatusScript;
+
+  if (fs.existsSync(actualStatusScript)) {
+    const proc = spawnSync(pythonCmd, [actualStatusScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
+    process.exit(proc.status !== null ? proc.status : 0);
+  }
+
+  const cfgPath = path.join(targetDir, '.torusguard', 'config', 'torusguard.json');
   if (fs.existsSync(cfgPath)) {
     try {
       const cfg = JSON.parse(fs.readFileSync(cfgPath, 'utf-8'));
@@ -441,11 +499,13 @@ if (command === 'rules') {
 
 // Subcommand: audit
 if (command === 'audit') {
-  const auditScript = path.join(cwd, '.torusguard', 'scripts', 'audit_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const auditScript = path.join(targetDir, '.torusguard', 'scripts', 'audit_runner.py');
   const fallbackAuditScript = path.join(rootDir, '.torusguard', 'scripts', 'audit_runner.py');
   const actualAuditScript = fs.existsSync(fallbackAuditScript) ? fallbackAuditScript : auditScript;
 
-  const proc = spawnSync(pythonCmd, [actualAuditScript, ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualAuditScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
@@ -455,7 +515,7 @@ if (command === 'report') {
   const wantSarif = args.includes('--sarif') || (!wantHtml && args[1] !== 'html');
 
   // Resolve target directory (supports --target and --root)
-  const rootIdx = args.indexOf('--root') !== -1 ? args.indexOf('--root') : args.indexOf('--target');
+  const rootIdx = args.indexOf('--root') !== -1 ? args.indexOf('--root') : (args.indexOf('--target') !== -1 ? args.indexOf('--target') : args.indexOf('-t'));
   let targetRoot = cwd;
   if (rootIdx !== -1 && args[rootIdx + 1]) {
     targetRoot = path.resolve(cwd, args[rootIdx + 1]);
@@ -518,69 +578,179 @@ if (command === 'report') {
 
 // Subcommand: harden
 if (command === 'harden') {
-  const scriptPath = path.join(cwd, '.torusguard', 'scripts', 'harden_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const scriptPath = path.join(targetDir, '.torusguard', 'scripts', 'harden_runner.py');
   const fallbackScript = path.join(rootDir, '.torusguard', 'scripts', 'harden_runner.py');
   const actualScript = fs.existsSync(fallbackScript) ? fallbackScript : scriptPath;
 
-  const proc = spawnSync(pythonCmd, [actualScript, ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
 // Subcommand: apply
 if (command === 'apply') {
-  const scriptPath = path.join(cwd, '.torusguard', 'scripts', 'apply_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const scriptPath = path.join(targetDir, '.torusguard', 'scripts', 'apply_runner.py');
   const fallbackScript = path.join(rootDir, '.torusguard', 'scripts', 'apply_runner.py');
   const actualScript = fs.existsSync(fallbackScript) ? fallbackScript : scriptPath;
 
-  const proc = spawnSync(pythonCmd, [actualScript, ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
 // Subcommand: rollback
 if (command === 'rollback') {
-  const scriptPath = path.join(cwd, '.torusguard', 'scripts', 'apply_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const scriptPath = path.join(targetDir, '.torusguard', 'scripts', 'apply_runner.py');
   const fallbackScript = path.join(rootDir, '.torusguard', 'scripts', 'apply_runner.py');
   const actualScript = fs.existsSync(fallbackScript) ? fallbackScript : scriptPath;
 
-  const proc = spawnSync(pythonCmd, [actualScript, '--rollback', ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualScript, targetDir, '--rollback', ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
 // Subcommand: recheck / verify
 if (command === 'recheck' || command === 'verify') {
-  const scriptPath = path.join(cwd, '.torusguard', 'scripts', 'recheck_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const scriptPath = path.join(targetDir, '.torusguard', 'scripts', 'recheck_runner.py');
   const fallbackScript = path.join(rootDir, '.torusguard', 'scripts', 'recheck_runner.py');
   const actualScript = fs.existsSync(fallbackScript) ? fallbackScript : scriptPath;
 
-  const proc = spawnSync(pythonCmd, [actualScript, ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
 // Subcommand: recipes
 if (command === 'recipes') {
-  const scriptPath = path.join(cwd, '.torusguard', 'scripts', 'recipes_runner.py');
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
+  const scriptPath = path.join(targetDir, '.torusguard', 'scripts', 'recipes_runner.py');
   const fallbackScript = path.join(rootDir, '.torusguard', 'scripts', 'recipes_runner.py');
   const actualScript = fs.existsSync(fallbackScript) ? fallbackScript : scriptPath;
 
-  const proc = spawnSync(pythonCmd, [actualScript, ...args.slice(1)], { stdio: 'inherit', cwd });
+  const proc = spawnSync(pythonCmd, [actualScript, targetDir, ...remaining], { stdio: 'inherit', cwd: targetDir });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
 // Subcommand: init (scaffold workspace)
 if (command === 'init') {
+  const { target, remaining } = parseTargetAndArgs(args);
+  const targetDir = path.resolve(cwd, target);
   const localBootstrap = path.join(rootDir, 'skills', 'torusguard', 'bootstrap.py');
   const localInstall = path.join(rootDir, 'install.py');
   const scriptToRun = fs.existsSync(localBootstrap) ? localBootstrap : localInstall;
 
-  const scriptArgs = [scriptToRun, '--full-commands', ...args.slice(1)];
+  const scriptArgs = [scriptToRun, '--full-commands', '--target', targetDir, ...remaining];
   const proc = spawnSync(pythonCmd, scriptArgs, {
     stdio: 'inherit',
-    cwd: cwd,
+    cwd: targetDir,
   });
   process.exit(proc.status !== null ? proc.status : 0);
 }
 
+// Subcommand: update
+if (command === 'update') {
+  const https = require('https');
+  const pkgJsonPath = path.join(rootDir, 'package.json');
+  let currentVersion = '1.4.0';
+  try {
+    if (fs.existsSync(pkgJsonPath)) {
+      currentVersion = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8')).version || currentVersion;
+    }
+  } catch (e) {}
+
+  console.log();
+  console.log(cardHeader('🛡️  TORUSGUARD UPDATE CHECK', 'Package Distribution & Registry Verifier', `v${currentVersion}`));
+  console.log(`\n  ${DIM}Checking npm registry for updates...${RESET}`);
+
+  const autoInstall = args.includes('--install') || args.includes('-i') || args.includes('--yes') || args.includes('-y');
+
+  function printUpdateOffline(reason) {
+    console.log();
+    console.log(cardBorderTop('Offline / Registry Unreachable', YELLOW));
+    console.log(formatBoxLine(`Current:    ${WHITE}v${currentVersion}${RESET}`, 67, '│', YELLOW));
+    console.log(formatBoxLine(`Notice:     ${DIM}${reason}${RESET}`, 67, '│', YELLOW));
+    console.log(formatBoxLine(`Manual:     ${BOLD}${CYAN}npm update torusguard${RESET} or ${BOLD}${CYAN}npm i -g torusguard@latest${RESET}`, 67, '│', YELLOW));
+    console.log(cardBorderBottom(YELLOW));
+    console.log();
+    process.exit(0);
+  }
+
+  const req = https.get('https://registry.npmjs.org/torusguard/latest', {
+    headers: { 'User-Agent': `torusguard-cli/${currentVersion}` },
+    timeout: 6000
+  }, (res) => {
+    let raw = '';
+    res.on('data', chunk => raw += chunk);
+    res.on('end', () => {
+      try {
+        const data = JSON.parse(raw);
+        const latestVersion = data.version;
+        if (!latestVersion) {
+          printUpdateOffline('No version field returned in npm registry response');
+          return;
+        }
+
+        const isNewer = compareSemver(latestVersion, currentVersion) > 0;
+        console.log();
+        console.log(cardBorderTop('Version Telemetry', CYAN));
+        console.log(formatBoxLine(`Installed Version: ${WHITE}v${currentVersion}${RESET}`));
+        console.log(formatBoxLine(`Latest on NPM:     ${BOLD}${GREEN}v${latestVersion}${RESET}`));
+        console.log(cardBorderBottom(CYAN));
+        console.log();
+
+        if (isNewer) {
+          console.log(cardBorderTop('Update Available', YELLOW, true));
+          console.log(formatBoxLine(`${YELLOW}A new version of TorusGuard is available!${RESET}`, 67, '║', YELLOW));
+          console.log(formatBoxLine(`Global:  ${BOLD}${WHITE}npm install -g torusguard@latest${RESET}`, 67, '║', YELLOW));
+          console.log(formatBoxLine(`Local:   ${BOLD}${WHITE}npm install torusguard@latest${RESET}`, 67, '║', YELLOW));
+          console.log(cardBorderBottom(YELLOW, true));
+          console.log();
+
+          if (autoInstall) {
+            console.log(`  ${CYAN}Auto-installing latest version via npm...${RESET}`);
+            const npmProc = spawnSync('npm', ['install', '-g', 'torusguard@latest'], { stdio: 'inherit' });
+            if (npmProc.status === 0) {
+              console.log(`\n  ${GREEN}✔ Successfully upgraded TorusGuard to v${latestVersion}!${RESET}\n`);
+            } else {
+              console.error(`\n  ${RED}✖ Failed to auto-install update. Run: npm install -g torusguard@latest${RESET}\n`);
+            }
+          } else {
+            console.log(`  ${DIM}Tip: Run with ${CYAN}npx torusguard update --install${DIM} to auto-upgrade.${RESET}\n`);
+          }
+        } else {
+          console.log(cardBorderTop('Status: Up To Date', GREEN, true));
+          console.log(formatBoxLine(`${GREEN}✔ TorusGuard is up to date (v${currentVersion})${RESET}`, 67, '║', GREEN));
+          console.log(cardBorderBottom(GREEN, true));
+          console.log();
+        }
+        process.exit(0);
+      } catch (err) {
+        printUpdateOffline(err.message);
+      }
+    });
+  });
+
+  req.on('error', (err) => printUpdateOffline(err.message));
+  req.on('timeout', () => {
+    req.destroy();
+    printUpdateOffline('npm registry request timed out (6000ms)');
+  });
+}
+
 // Unknown command fallback
-console.error(`\n  ${RED}✖ Unknown command:${RESET} ${WHITE}${command}${RESET}`);
-console.error(`  Run ${GREEN}npx torusguard help${RESET} for available commands.\n`);
-process.exit(1);
+const KNOWN_COMMANDS = new Set([
+  'init', 'status', 'rules', 'memory', 'diff-guard', 'audit',
+  'report', 'harden', 'apply', 'rollback', 'recheck', 'verify',
+  'recipes', 'update', 'help', '--help', '-h', '--version', '-v', 'version'
+]);
+
+if (!KNOWN_COMMANDS.has(command)) {
+  console.error(`\n  ${RED}✖ Unknown command:${RESET} ${WHITE}${command}${RESET}`);
+  console.error(`  Run ${GREEN}npx torusguard help${RESET} for available commands.\n`);
+  process.exit(1);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "torusguard",
-  "version": "1.3.6",
+  "version": "2.0.0-alpha",
   "description": "Security guardrails, governed remediation, and authorized runtime validation for AI-built web applications.",
   "main": "bin/torusguard.js",
   "bin": {
@@ -17,8 +17,12 @@
   "scripts": {
     "test": "python harness/runner.py",
     "init": "node bin/torusguard.js init",
+    "status": "node bin/torusguard.js status",
     "audit": "node bin/torusguard.js audit",
-    "status": "node bin/torusguard.js status"
+    "harden": "node bin/torusguard.js harden",
+    "apply": "node bin/torusguard.js apply",
+    "recipes": "node bin/torusguard.js recipes",
+    "update": "node bin/torusguard.js update"
   },
   "keywords": [
     "security",

package/skills/torusguard/bootstrap.py

@@ -135,7 +135,7 @@ def print_header():
     print(f"""
   {CYAN}╭─────────────────────────────────────────────────────────────────────────╮{RESET}
   {CYAN}│{RESET}                                                                         {CYAN}│{RESET}
-  {CYAN}│{RESET}   {BOLD}{WHITE}🛡️  T O R U S G U A R D{RESET}                                  {GRAY}v1.3.0{RESET}   {CYAN}│{RESET}
+  {CYAN}│{RESET}   {BOLD}{WHITE}🛡️  T O R U S G U A R D{RESET}                                  {GRAY}v1.4.0{RESET}   {CYAN}│{RESET}
   {CYAN}│{RESET}   {DIM}Autonomous Security Engine for AI-Built Applications{RESET}               {CYAN}│{RESET}
   {CYAN}│{RESET}                                                                         {CYAN}│{RESET}
   {CYAN}╰─────────────────────────────────────────────────────────────────────────╯{RESET}
@@ -220,7 +220,7 @@ def print_already_initialized(target_root, cfg):
 
   {BOLD}▸ Project Root:{RESET}       {GREEN}{target_root}{RESET}
   {BOLD}▸ Workspace:{RESET}          {GREEN}.torusguard/{RESET} {DIM}(Already Initialized){RESET}
-  {BOLD}▸ Version:{RESET}            {CYAN}{cfg.get('version', '1.3.0')}{RESET}
+  {BOLD}▸ Version:{RESET}            {CYAN}{cfg.get('version', '1.4.0')}{RESET}
   {BOLD}▸ Severity Floor:{RESET}     {YELLOW}{cfg.get('severity_threshold', 'medium')}{RESET}
 
   {DIM}To refresh templates or re-scaffold, run:{RESET}
@@ -228,7 +228,7 @@ def print_already_initialized(target_root, cfg):
 """)
 
 
-def scaffold_workspace(target_root=None, force=False, full_commands=False):
+def scaffold_workspace(target_root=None, force=False, full_commands=False, template=None, run_audit=False):
     """Scaffold the .torusguard workspace into the target project root."""
     target_root = Path(target_root or find_project_root()).resolve()
     torusguard_target = target_root / ".torusguard"
@@ -379,12 +379,26 @@ def scaffold_workspace(target_root=None, force=False, full_commands=False):
         except Exception:
             detected_stack = None
 
+    TEMPLATE_MAP = {
+        "golang": {"language": "Go", "framework": "Gin/Fiber", "data_layer": "database/sql"},
+        "go": {"language": "Go", "framework": "Gin/Fiber", "data_layer": "database/sql"},
+        "nextjs": {"language": "TypeScript", "framework": "Next.js", "data_layer": "Prisma ORM"},
+        "fastapi": {"language": "Python", "framework": "FastAPI", "data_layer": "SQLAlchemy"},
+        "express": {"language": "JavaScript", "framework": "Express", "data_layer": "Mongoose"},
+        "django": {"language": "Python", "framework": "Django", "data_layer": "Django ORM"},
+        "react": {"language": "JavaScript/TypeScript", "framework": "React / Vite", "data_layer": "Supabase"}
+    }
+    if template and template.lower() in TEMPLATE_MAP:
+        detected_stack = TEMPLATE_MAP[template.lower()]
+
     config_file = torusguard_target / "config" / "torusguard.json"
     if config_file.exists():
         try:
             with open(config_file, "r", encoding="utf-8") as f:
                 cfg = json.load(f)
-            if detected_stack and detected_stack.get("framework") != "None":
+            if template and template.lower() in TEMPLATE_MAP:
+                cfg["detected_stack"] = TEMPLATE_MAP[template.lower()]
+            elif detected_stack and detected_stack.get("framework") != "None":
                 cfg["detected_stack"] = {
                     "language": detected_stack.get("language"),
                     "framework": detected_stack.get("framework"),
@@ -516,15 +530,40 @@ Parse the requested action from `$ARGUMENTS` (e.g. `audit`, `verify`, `web-valid
 
     # ── Success Card ────────────────────────────────────────────────────────
     print_success_card()
+
+    # ── Optional Immediate Audit ────────────────────────────────────────────
+    if run_audit:
+        audit_script = torusguard_target / "scripts" / "audit_runner.py"
+        if audit_script.is_file():
+            print(f"\n  {CYAN}▸ Running immediate baseline security audit (--audit)...{RESET}\n")
+            try:
+                import importlib.util
+                spec = importlib.util.spec_from_file_location("audit_runner", str(audit_script))
+                if spec and spec.loader:
+                    ar_mod = importlib.util.module_from_spec(spec)
+                    spec.loader.exec_module(ar_mod)
+                    if hasattr(ar_mod, "execute_audit"):
+                        ar_mod.execute_audit(target_root)
+            except Exception as e:
+                print(f"  {YELLOW}⚠ Immediate audit notice: {e}{RESET}")
+
     return True
 
 
 if __name__ == "__main__":
     parser = argparse.ArgumentParser(description="TorusGuard Autonomous Workspace Bootstrapper")
-    parser.add_argument("--target", type=str, help="Target project root directory")
+    parser.add_argument("--target", "-t", type=str, help="Target project root directory")
     parser.add_argument("--force", action="store_true", help="Force overwrite existing workspace")
     parser.add_argument("--full-commands", action="store_true", help="Unlock and register all 11 individual slash commands")
+    parser.add_argument("--template", choices=["golang", "go", "nextjs", "fastapi", "express", "django", "react"], help="Pre-configure target framework stack template")
+    parser.add_argument("--audit", action="store_true", help="Execute immediate baseline audit post-initialization")
     args = parser.parse_args()
 
-    success = scaffold_workspace(target_root=args.target, force=args.force, full_commands=args.full_commands)
+    success = scaffold_workspace(
+        target_root=args.target,
+        force=args.force,
+        full_commands=args.full_commands,
+        template=args.template,
+        run_audit=args.audit
+    )
     sys.exit(0 if success else 1)

package/skills/torusguard/payload/.manifest.json

@@ -142,23 +142,24 @@
   "schemas/remediation.schema.json": "544904239f871dec9552973e01e09dc1f40dbb8330f20d98c319f3b24031d630",
   "schemas/retest.schema.json": "97c0407ca4365a524020c430912f686f698cc0de90043194621071e9fc681cc7",
   "schemas/runtime-evidence.schema.json": "929d2b094c1cd1f7f9db07be1eba5994e8002477eab3fd24140e1e973fd18cc1",
-  "scripts/apply_runner.py": "f9c5374ea213b77069293e45ed3d878d7f3f0e31497c55bc97885efc14bfa57c",
-  "scripts/audit_runner.py": "98a3975ff79f8ffb0343d5606dd84a603fd35d741e2def6d70f83bc1ee8f01ff",
+  "scripts/apply_runner.py": "b145a68a4bc10fcacb853f972aee81fa3607e32d282b2b850c5a63d8e72da890",
+  "scripts/audit_runner.py": "bc1e06ea5153ae326c4ad1de5d0cbb9503e618186623bea7cb8bb64d7b7b05ec",
   "scripts/diff_guard.py": "0dc178cdde1ac0ae1a1ea4b2eb2ce1756b2126f6156909cf55d85249f115fcbd",
   "scripts/finding_scorer.py": "a5315be6ee256c01c4539da3d1905ebc8d0840a356b83c55f9f6f2654a9f0c60",
-  "scripts/harden_runner.py": "f6f6922f2ade98b40f3de3e211459c62483e8aa274cbe4515dbd0d308956e6b4",
-  "scripts/html_reporter.py": "e9901a1dbeddd7b1dccd04afc9005d64954ccc1f14ba6ec4bdb4aa0ea8c2c66c",
-  "scripts/manifest_builder.py": "c0137927789a9e40a08243e630ac3c6990beb1b87807934e98906c8ad0b99a97",
+  "scripts/harden_runner.py": "5d5a40029c088ccb66790a9b0128bdefcd35883ef1dac78088ceb9531392a8f1",
+  "scripts/html_reporter.py": "655c57be39e13c177db8842ef471664e5853f3e43b9f2a63e590df40ff9c16cb",
+  "scripts/manifest_builder.py": "18db6979b341a87e9bf38fe06525365d12b07d532c0dbfd2ac3ef0f539dc1f6f",
   "scripts/memory_engine.py": "b715d0ca030e95eb06ad6eda99027535df8a7e37d64897c023be6a291cf13dc6",
   "scripts/monorepo_detector.py": "5603674136a5294ebfff89efeca0a546dd4a7deb1d184a2592ff21aff2131f73",
-  "scripts/recheck_runner.py": "dd6f35c98f6fd3d41d641bca419bb90739551c4900724a65447882b6d7dd4f54",
-  "scripts/recipes_runner.py": "6e057860e7d0e3b612a5b444b577255c9b7009b5dce0352098ab7d6c8c6659e7",
-  "scripts/report_sync.py": "c5f37c69e2e074c8ffd5953811907cf7c95e4c56f406ea16f3b5b9d878cfb774",
+  "scripts/recheck_runner.py": "89e93fcc6843493d7e5f0bf97065dbdb40106273a00e07f903250665ca25f6fb",
+  "scripts/recipes_runner.py": "090c06ef0de3c640a111c5646837233ceeaca494b161bd5edc630cc1371dca0e",
+  "scripts/report_sync.py": "5ebef684690200694a53af30db850d9808d03ec710ed21ef75c4de52b5e5217c",
   "scripts/rules_sync.py": "4101b2ca8036ff4f468800b32a8d08898e8640a74d14124af53d454706a62d3a",
   "scripts/run_manager.py": "b738ff70879e46547d32fac6befc61de9599f676411384280fb9819ea3ad7035",
   "scripts/safety_gate.py": "3379b7534b2590cf563717a448983ad8ed7e8f174f0ad65683d33e8a10f51558",
   "scripts/sarif_exporter.py": "86700765212adb3ab590ca72614bf3ad4ce7ce60e3193f7f3bd1a04d34d10f6e",
   "scripts/stack_detect.py": "c05a1ade4c8692025476bf7ea080a8f07c92e5d8e9a04f94c1654386352ffbdc",
+  "scripts/status_runner.py": "4c358c91950c7874bcc6a5f23f2d3fda62b0752efcf6c6b658adf02ed77c7752",
   "scripts/term_ui.py": "ca69398f85c86fe89526d6334b3ee866c890273997351113c3cc1765b7bd20c3",
   "skills/torusguard/SKILL.md": "4d5b8e43fa3c09e5e1079cbc3e2184654219a2c47b2272db394da749969318f8",
   "skills/torusguard/bootstrap.py": "3d946f388cb4befa739c9d3b1404255d9a8ea5770ebbb79e5a1b9839589e9bc7",
@@ -206,16 +207,30 @@
   "templates/authorization.template.md": "81ef843d42a19412c369f383b787465ac24173c0b14c1f5f211786eab3d10e8b",
   "templates/finding-card.template.md": "8f756edbd3e4139d3da2fb96f35bd2d2b267b33b754f187b590a89584265c1e6",
   "templates/remediation-bundle.template.md": "4d85a540e3a2e74f9b21fc8a2a1072e27ca03e97cd67ca482f529cfe722acc4d",
-  "workflows/apply.md": "8dd37fecc44e2820e82c29e2c6b2970936734ed5102d36950889a9eb8b19dbab",
-  "workflows/audit.md": "7e78ebb885176d65e86ed45a90a4326b942d484c2b5c8bff1d7bda141790de2f",
+  "workflows/apply.md": "67e1002fc6e9d68e0c7d871c40b6f3c3b9c3919c8e02106a579882729c0f6b9f",
+  "workflows/audit.md": "eac9102ca88d53f71da474cd55717d431fd9c3b08c66d0760da9b53a659cf89a",
   "workflows/authorize.md": "28ca58cfc656e956f7cec8160f2aadc152abcde3eb5ad5588df149007afb0df8",
   "workflows/exploit-check.md": "41e77afe912be9266c5bc1e00fd796baff22a67973eb6e86d196d34f4d7bdfa4",
-  "workflows/harden.md": "24c62ea0233bf5cb21308497869790fa6f24b6cbb563fd2ebf858ff02b09bba9",
-  "workflows/init.md": "9a9aeaff6bd2217323ad72fb4043f46057deaa45eb3380f679d9aef3d36bfc8b",
+  "workflows/harden.md": "7d92132973ff867b99e0425e3aee3c4e91868cb5193ec601069af2e857b6697f",
+  "workflows/init.md": "611418577ff9d5719df459f56b3fa53b91eb3717b02c4b4e5e86ed483bed3bfa",
   "workflows/memory.md": "8ad2ec154176e2540c2859a28eff9f7c2dbca0217aa29d0f4aa88b87c43f8bef",
   "workflows/recheck.md": "42eecc3ba194564d48a6a88d8003e86cafe003503e887dc565314d4aa558e8fd",
-  "workflows/report.md": "b98652ee0552b7bb73eeb78dc80d2b0a108cc505523cbd1b3ada6064409e4629",
-  "workflows/status.md": "dfbc2b75ba45ff70b60522addca4032a667241364b0907cd77a43bf9271dfa56",
+  "workflows/recipes.md": "300c1fed0167e1a299fcd33c07db05630116b18a71ec2513c385862bba0f179b",
+  "workflows/report.md": "ecbd67bfa95bde3c0f51e06aac6fad70d5989b0be82245116cd7ba367f378a4c",
+  "workflows/status.md": "7f07e726bbb0488e48b718c2f36971634b1422bc2ddfbb381eb3e1ea67c1cfbf",
+  "workflows/torusguard-apply.md": "67e1002fc6e9d68e0c7d871c40b6f3c3b9c3919c8e02106a579882729c0f6b9f",
+  "workflows/torusguard-audit.md": "eac9102ca88d53f71da474cd55717d431fd9c3b08c66d0760da9b53a659cf89a",
+  "workflows/torusguard-authorize.md": "28ca58cfc656e956f7cec8160f2aadc152abcde3eb5ad5588df149007afb0df8",
+  "workflows/torusguard-exploit-check.md": "41e77afe912be9266c5bc1e00fd796baff22a67973eb6e86d196d34f4d7bdfa4",
+  "workflows/torusguard-harden.md": "7d92132973ff867b99e0425e3aee3c4e91868cb5193ec601069af2e857b6697f",
+  "workflows/torusguard-init.md": "611418577ff9d5719df459f56b3fa53b91eb3717b02c4b4e5e86ed483bed3bfa",
+  "workflows/torusguard-recheck.md": "42eecc3ba194564d48a6a88d8003e86cafe003503e887dc565314d4aa558e8fd",
+  "workflows/torusguard-recipes.md": "300c1fed0167e1a299fcd33c07db05630116b18a71ec2513c385862bba0f179b",
+  "workflows/torusguard-report.md": "ecbd67bfa95bde3c0f51e06aac6fad70d5989b0be82245116cd7ba367f378a4c",
+  "workflows/torusguard-status.md": "7f07e726bbb0488e48b718c2f36971634b1422bc2ddfbb381eb3e1ea67c1cfbf",
+  "workflows/torusguard-verify.md": "6412e123a9346240e5ba898a0da73d3409d9a215d6e8f202ab2eb5719b663731",
+  "workflows/torusguard-web-validate.md": "3b2a3d02b69469539b4a48ed3bd355362927cc21470dbcdeccba564a9e68a371",
+  "workflows/torusguard.md": "4b5da6d38dae6be277bd52782121cdb181a75f1400068041310ca69deae89589",
   "workflows/verify.md": "6412e123a9346240e5ba898a0da73d3409d9a215d6e8f202ab2eb5719b663731",
   "workflows/web-validate.md": "3b2a3d02b69469539b4a48ed3bd355362927cc21470dbcdeccba564a9e68a371"
 }