torusguard 1.4.0 → 2.0.0-alpha

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/.torusguard/auth.json +5 -0
  2. package/.torusguard/rules_catalog.json +242 -518
  3. package/.torusguard/scripts/__pycache__/apply_runner.cpython-314.pyc +0 -0
  4. package/.torusguard/scripts/__pycache__/audit_runner.cpython-314.pyc +0 -0
  5. package/.torusguard/scripts/__pycache__/harden_runner.cpython-314.pyc +0 -0
  6. package/.torusguard/scripts/__pycache__/html_reporter.cpython-314.pyc +0 -0
  7. package/.torusguard/scripts/__pycache__/manifest_builder.cpython-314.pyc +0 -0
  8. package/.torusguard/scripts/__pycache__/recipes_runner.cpython-314.pyc +0 -0
  9. package/.torusguard/scripts/__pycache__/report_sync.cpython-314.pyc +0 -0
  10. package/.torusguard/snapshots/20260921-182638/go.mod.bak +11 -0
  11. package/.torusguard/snapshots/20260921-185213/file.go.bak +5 -0
  12. package/README.md +315 -393
  13. package/package.json +1 -1
  14. package/skills/torusguard/__pycache__/bootstrap.cpython-314.pyc +0 -0
  15. package/skills/torusguard/payload/TORUSGUARD.md +145 -145
  16. package/skills/torusguard/payload/agents/auditor.md +41 -41
  17. package/skills/torusguard/payload/agents/profiler.md +49 -49
  18. package/skills/torusguard/payload/agents/remediator.md +41 -41
  19. package/skills/torusguard/payload/agents/reviewer.md +39 -39
  20. package/skills/torusguard/payload/agents/validator.md +46 -46
  21. package/skills/torusguard/payload/config/scope.json +24 -24
  22. package/skills/torusguard/payload/references/csharp-security.md +41 -41
  23. package/skills/torusguard/payload/references/go-security.md +41 -41
  24. package/skills/torusguard/payload/references/java-security.md +40 -40
  25. package/skills/torusguard/payload/references/polyglot-security-matrix.md +25 -25
  26. package/skills/torusguard/payload/references/rust-security.md +40 -40
  27. package/skills/torusguard/payload/rules/custom/.gitkeep +1 -1
  28. package/skills/torusguard/payload/rules/custom/README.md +30 -30
  29. package/skills/torusguard/payload/scripts/rules_sync.py +321 -321
  30. package/skills/torusguard/payload/scripts/safety_gate.py +64 -64
  31. package/skills/torusguard/payload/skills/torusguard/references/csharp-security.md +41 -41
  32. package/skills/torusguard/payload/skills/torusguard/references/go-security.md +41 -41
  33. package/skills/torusguard/payload/skills/torusguard/references/java-security.md +40 -40
  34. package/skills/torusguard/payload/skills/torusguard/references/polyglot-security-matrix.md +25 -25
  35. package/skills/torusguard/payload/skills/torusguard/references/rust-security.md +40 -40
  36. package/skills/torusguard/payload/templates/audit-report.template.md +54 -54
  37. package/skills/torusguard/payload/templates/authorization.template.md +34 -34
  38. package/skills/torusguard/payload/templates/finding-card.template.md +32 -32
  39. package/skills/torusguard/payload/templates/remediation-bundle.template.md +35 -35
@@ -1,34 +1,34 @@
1
- # TorusGuard Target Authorization Record
2
-
3
- **Authorization ID:** `{{authorization_id}}`
4
- **Generated At:** `{{timestamp}}`
5
- **Valid Until:** `{{valid_until}}`
6
-
7
- ---
8
-
9
- ## 1. Target Identification
10
- - **Project / Application:** `{{target_name}}`
11
- - **Target URL / Hosts:** `{{target_hosts}}`
12
- - **Scope Type:** `{{scope_type}}`
13
-
14
- ---
15
-
16
- ## 2. Permitted Boundaries
17
- - **Allowed Path Prefixes:**
18
- {{allowed_path_prefixes_list}}
19
-
20
- - **Explicitly Forbidden / Excluded Paths:**
21
- {{forbidden_paths_list}}
22
-
23
- - **Max Navigation Depth:** `{{max_depth}}`
24
- - **Max Request Budget:** `{{max_requests}}`
25
- - **Allow State-Changing Methods:** `{{allow_state_changing_methods}}`
26
-
27
- ---
28
-
29
- ## 3. Owner Confirmation & Legal Statement
30
- > [!IMPORTANT]
31
- > The target application owner has confirmed that this testing environment is authorized for non-destructive, bounded runtime security validation.
32
-
33
- - **Authorized By:** `{{authorized_by}}`
34
- - **Confirmation Status:** `Owner Confirmed`
1
+ # TorusGuard Target Authorization Record
2
+
3
+ **Authorization ID:** `{{authorization_id}}`
4
+ **Generated At:** `{{timestamp}}`
5
+ **Valid Until:** `{{valid_until}}`
6
+
7
+ ---
8
+
9
+ ## 1. Target Identification
10
+ - **Project / Application:** `{{target_name}}`
11
+ - **Target URL / Hosts:** `{{target_hosts}}`
12
+ - **Scope Type:** `{{scope_type}}`
13
+
14
+ ---
15
+
16
+ ## 2. Permitted Boundaries
17
+ - **Allowed Path Prefixes:**
18
+ {{allowed_path_prefixes_list}}
19
+
20
+ - **Explicitly Forbidden / Excluded Paths:**
21
+ {{forbidden_paths_list}}
22
+
23
+ - **Max Navigation Depth:** `{{max_depth}}`
24
+ - **Max Request Budget:** `{{max_requests}}`
25
+ - **Allow State-Changing Methods:** `{{allow_state_changing_methods}}`
26
+
27
+ ---
28
+
29
+ ## 3. Owner Confirmation & Legal Statement
30
+ > [!IMPORTANT]
31
+ > The target application owner has confirmed that this testing environment is authorized for non-destructive, bounded runtime security validation.
32
+
33
+ - **Authorized By:** `{{authorized_by}}`
34
+ - **Confirmation Status:** `Owner Confirmed`
@@ -1,32 +1,32 @@
1
- ### [{{rule_id}}] {{finding_title}}
2
-
3
- **Severity:** `{{severity_badge}}` | **Auditable Confidence:** `{{confidence_score}}/100 {{confidence_band_badge}}`
4
- **Finding ID:** `{{finding_id}}` | **Fingerprint:** `{{fingerprint_hash}}`
5
- **Target Location:** `{{file_path}}:{{line_number}}` (`{{code_symbol}}`)
6
- **Lifecycle Status:** `{{lifecycle_status}}` | **Exploitability:** `{{exploitability_status}}`
7
-
8
- ---
9
-
10
- #### 1. Provenance Chain
11
- - **Detection Rule:** `{{rule_id}}` (CWE-{{cwe_id}})
12
- - **Triggering Input:** `{{triggering_source}}`
13
- - **Sink Path:** `{{sink_expression}}`
14
-
15
- #### 2. Raw Verified Evidence
16
- ```{{code_language}}
17
- {{raw_evidence_snippet}}
18
- ```
19
- > **Evidence Checksum (SHA-256):** `{{evidence_sha256}}`
20
-
21
- #### 3. Objective Facts vs AI Interpretation
22
- - **Verified Facts:** {{raw_facts_summary}}
23
- - **AI Risk Analysis:** {{ai_interpretation}}
24
-
25
- #### 4. Remediation Diff (Minimal Churn)
26
- ```diff
27
- {{remediation_diff_preview}}
28
- ```
29
-
30
- #### 5. Retest & Verification
31
- - **Verification Method:** {{verification_method}}
32
- - **Current Retest Status:** `{{retest_status}}`
1
+ ### [{{rule_id}}] {{finding_title}}
2
+
3
+ **Severity:** `{{severity_badge}}` | **Auditable Confidence:** `{{confidence_score}}/100 {{confidence_band_badge}}`
4
+ **Finding ID:** `{{finding_id}}` | **Fingerprint:** `{{fingerprint_hash}}`
5
+ **Target Location:** `{{file_path}}:{{line_number}}` (`{{code_symbol}}`)
6
+ **Lifecycle Status:** `{{lifecycle_status}}` | **Exploitability:** `{{exploitability_status}}`
7
+
8
+ ---
9
+
10
+ #### 1. Provenance Chain
11
+ - **Detection Rule:** `{{rule_id}}` (CWE-{{cwe_id}})
12
+ - **Triggering Input:** `{{triggering_source}}`
13
+ - **Sink Path:** `{{sink_expression}}`
14
+
15
+ #### 2. Raw Verified Evidence
16
+ ```{{code_language}}
17
+ {{raw_evidence_snippet}}
18
+ ```
19
+ > **Evidence Checksum (SHA-256):** `{{evidence_sha256}}`
20
+
21
+ #### 3. Objective Facts vs AI Interpretation
22
+ - **Verified Facts:** {{raw_facts_summary}}
23
+ - **AI Risk Analysis:** {{ai_interpretation}}
24
+
25
+ #### 4. Remediation Diff (Minimal Churn)
26
+ ```diff
27
+ {{remediation_diff_preview}}
28
+ ```
29
+
30
+ #### 5. Retest & Verification
31
+ - **Verification Method:** {{verification_method}}
32
+ - **Current Retest Status:** `{{retest_status}}`
@@ -1,35 +1,35 @@
1
- # Remediation Bundle: `{{bundle_id}}`
2
-
3
- **Cluster ID:** `{{cluster_id}}`
4
- **Target Rule:** `{{rule_id}}` (`{{rule_title}}`)
5
- **Affected Files:** `{{affected_files}}`
6
-
7
- ---
8
-
9
- ## 1. Problem Statement & Risk
10
- {{problem_statement}}
11
-
12
- **Adversarial Abuse & Practical Impact:**
13
- {{risk_explanation}}
14
-
15
- ---
16
-
17
- ## 2. Governed Minimal Patch Plan
18
- - **Max Additions Boundary:** $\le 35$ lines (Proposed: `+{{additions_count}}`)
19
- - **Max Deletions Boundary:** $\le 25$ lines (Proposed: `-{{deletions_count}}`)
20
- - **Governance Review Level:** `{{governance_review_level}}`
21
-
22
- ### Framework-Native Diff
23
- ```diff
24
- {{candidate_patch_diff}}
25
- ```
26
-
27
- ---
28
-
29
- ## 3. Verification & Retest Method
30
- {{verification_method}}
31
-
32
- ---
33
-
34
- ## 4. Residual Risk & Edge Cases
35
- {{residual_risk_notes}}
1
+ # Remediation Bundle: `{{bundle_id}}`
2
+
3
+ **Cluster ID:** `{{cluster_id}}`
4
+ **Target Rule:** `{{rule_id}}` (`{{rule_title}}`)
5
+ **Affected Files:** `{{affected_files}}`
6
+
7
+ ---
8
+
9
+ ## 1. Problem Statement & Risk
10
+ {{problem_statement}}
11
+
12
+ **Adversarial Abuse & Practical Impact:**
13
+ {{risk_explanation}}
14
+
15
+ ---
16
+
17
+ ## 2. Governed Minimal Patch Plan
18
+ - **Max Additions Boundary:** $\le 35$ lines (Proposed: `+{{additions_count}}`)
19
+ - **Max Deletions Boundary:** $\le 25$ lines (Proposed: `-{{deletions_count}}`)
20
+ - **Governance Review Level:** `{{governance_review_level}}`
21
+
22
+ ### Framework-Native Diff
23
+ ```diff
24
+ {{candidate_patch_diff}}
25
+ ```
26
+
27
+ ---
28
+
29
+ ## 3. Verification & Retest Method
30
+ {{verification_method}}
31
+
32
+ ---
33
+
34
+ ## 4. Residual Risk & Edge Cases
35
+ {{residual_risk_notes}}