auditagent-toolkit 0.2.0__py3-none-any.whl

auditagent_toolkit-0.2.0.dist-info/METADATA

@@ -0,0 +1,453 @@
+Metadata-Version: 2.5
+Name: auditagent-toolkit
+Version: 0.2.0
+Summary: Toolkit modular de auditoría técnica en Python (solo stdlib)
+Project-URL: Homepage, https://github.com/mgonzalez88201-creator/auditagent-toolkit
+Project-URL: Repository, https://github.com/mgonzalez88201-creator/auditagent-toolkit
+Project-URL: Issues, https://github.com/mgonzalez88201-creator/auditagent-toolkit/issues
+Project-URL: Changelog, https://github.com/mgonzalez88201-creator/auditagent-toolkit/blob/main/CHANGELOG.md
+Author-email: Mago <271898130+mgonzalez88201-creator@users.noreply.github.com>
+Maintainer-email: Mago <271898130+mgonzalez88201-creator@users.noreply.github.com>
+License:                                  Apache License
+                                   Version 2.0, January 2004
+                                http://www.apache.org/licenses/
+        
+           TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+        
+           1. Definitions.
+        
+              "License" shall mean the terms and conditions for use, reproduction,
+              and distribution as defined by Sections 1 through 9 of this document.
+        
+              "Licensor" shall mean the copyright owner or entity authorized by
+              the copyright owner that is granting the License.
+        
+              "Legal Entity" shall mean the union of the acting entity and all
+              other entities that control, are controlled by, or are under common
+              control with that entity. For the purposes of this definition,
+              "control" means (i) the power, direct or indirect, to cause the
+              direction or management of such entity, whether by contract or
+              otherwise, or (ii) ownership of fifty percent (50%) or more of the
+              outstanding shares, or (iii) beneficial ownership of such entity.
+        
+              "You" (or "Your") shall mean an individual or Legal Entity
+              exercising permissions granted by this License.
+        
+              "Source" form shall mean the preferred form for making modifications,
+              including but not limited to software source code, documentation
+              source, and configuration files.
+        
+              "Object" form shall mean any form resulting from mechanical
+              transformation or translation of a Source form, including but
+              not limited to compiled object code, generated documentation,
+              and conversions to other media types.
+        
+              "Work" shall mean the work of authorship, whether in Source or
+              Object form, made available under the License, as indicated by a
+              copyright notice that is included in or attached to the work
+              (an example is provided in the Appendix below).
+        
+              "Derivative Works" shall mean any work, whether in Source or Object
+              form, that is based on (or derived from) the Work and for which the
+              editorial revisions, annotations, elaborations, or other modifications
+              represent, as a whole, an original work of authorship. For the purposes
+              of this License, Derivative Works shall not include works that remain
+              separable from, or merely link (or bind by name) to the interfaces of,
+              the Work and Derivative Works thereof.
+        
+              "Contribution" shall mean any work of authorship, including
+              the original version of the Work and any modifications or additions
+              to that Work or Derivative Works thereof, that is intentionally
+              submitted to Licensor for inclusion in the Work by the copyright owner
+              or by an individual or Legal Entity authorized to submit on behalf of
+              the copyright owner. For the purposes of this definition, "submitted"
+              means any form of electronic, verbal, or written communication sent
+              to the Licensor or its representatives, including but not limited to
+              communication on electronic mailing lists, source code control systems,
+              and issue tracking systems that are managed by, or on behalf of, the
+              Licensor for the purpose of discussing and improving the Work, but
+              excluding communication that is conspicuously marked or otherwise
+              designated in writing by the copyright owner as "Not a Contribution."
+        
+              "Contributor" shall mean Licensor and any individual or Legal Entity
+              on behalf of whom a Contribution has been received by Licensor and
+              subsequently incorporated within the Work.
+        
+           2. Grant of Copyright License. Subject to the terms and conditions of
+              this License, each Contributor hereby grants to You a perpetual,
+              worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+              copyright license to reproduce, prepare Derivative Works of,
+              publicly display, publicly perform, sublicense, and distribute the
+              Work and such Derivative Works in Source or Object form.
+        
+           3. Grant of Patent License. Subject to the terms and conditions of
+              this License, each Contributor hereby grants to You a perpetual,
+              worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+              (except as stated in this section) patent license to make, have made,
+              use, offer to sell, sell, import, and otherwise transfer the Work,
+              where such license applies only to those patent claims licensable
+              by such Contributor that are necessarily infringed by their
+              Contribution(s) alone or by combination of their Contribution(s)
+              with the Work to which such Contribution(s) was submitted. If You
+              institute patent litigation against any entity (including a
+              cross-claim or counterclaim in a lawsuit) alleging that the Work
+              or a Contribution incorporated within the Work constitutes direct
+              or contributory patent infringement, then any patent licenses
+              granted to You under this License for that Work shall terminate
+              as of the date such litigation is filed.
+        
+           4. Redistribution. You may reproduce and distribute copies of the
+              Work or Derivative Works thereof in any medium, with or without
+              modifications, and in Source or Object form, provided that You
+              meet the following conditions:
+        
+              (a) You must give any other recipients of the Work or
+                  Derivative Works a copy of this License; and
+        
+              (b) You must cause any modified files to carry prominent notices
+                  stating that You changed the files; and
+        
+              (c) You must retain, in the Source form of any Derivative Works
+                  that You distribute, all copyright, patent, trademark, and
+                  attribution notices from the Source form of the Work,
+                  excluding those notices that do not pertain to any part of
+                  the Derivative Works; and
+        
+              (d) If the Work includes a "NOTICE" text file as part of its
+                  distribution, then any Derivative Works that You distribute must
+                  include a readable copy of the attribution notices contained
+                  within such NOTICE file, excluding those notices that do not
+                  pertain to any part of the Derivative Works, in at least one
+                  of the following places: within a NOTICE text file distributed
+                  as part of the Derivative Works; within the Source form or
+                  documentation, if provided along with the Derivative Works; or,
+                  within a display generated by the Derivative Works, if and
+                  wherever such third-party notices normally appear. The contents
+                  of the NOTICE file are for informational purposes only and
+                  do not modify the License. You may add Your own attribution
+                  notices within Derivative Works that You distribute, alongside
+                  or as an addendum to the NOTICE text from the Work, provided
+                  that such additional attribution notices cannot be construed
+                  as modifying the License.
+        
+              You may add Your own copyright statement to Your modifications and
+              may provide additional or different license terms and conditions
+              for use, reproduction, or distribution of Your modifications, or
+              for any such Derivative Works as a whole, provided Your use,
+              reproduction, and distribution of the Work otherwise complies with
+              the conditions stated in this License.
+        
+           5. Submission of Contributions. Unless You explicitly state otherwise,
+              any Contribution intentionally submitted for inclusion in the Work
+              by You to the Licensor shall be under the terms and conditions of
+              this License, without any additional terms or conditions.
+              Notwithstanding the above, nothing herein shall supersede or modify
+              the terms of any separate license agreement you may have executed
+              with Licensor regarding such Contributions.
+        
+           6. Trademarks. This License does not grant permission to use the trade
+              names, trademarks, service marks, or product names of the Licensor,
+              except as required for reasonable and customary use in describing the
+              origin of the Work and reproducing the content of the NOTICE file.
+        
+           7. Disclaimer of Warranty. Unless required by applicable law or
+              agreed to in writing, Licensor provides the Work (and each
+              Contributor provides its Contributions) on an "AS IS" BASIS,
+              WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+              implied, including, without limitation, any warranties or conditions
+              of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+              PARTICULAR PURPOSE. You are solely responsible for determining the
+              appropriateness of using or redistributing the Work and assume any
+              risks associated with Your exercise of permissions under this License.
+        
+           8. Limitation of Liability. In no event and under no legal theory,
+              whether in tort (including negligence), contract, or otherwise,
+              unless required by applicable law (such as deliberate and grossly
+              negligent acts) or agreed to in writing, shall any Contributor be
+              liable to You for damages, including any direct, indirect, special,
+              incidental, or consequential damages of any character arising as a
+              result of this License or out of the use or inability to use the
+              Work (including but not limited to damages for loss of goodwill,
+              work stoppage, computer failure or malfunction, or any and all
+              other commercial damages or losses), even if such Contributor
+              has been advised of the possibility of such damages.
+        
+           9. Accepting Warranty or Additional Liability. While redistributing
+              the Work or Derivative Works thereof, You may choose to offer,
+              and charge a fee for, acceptance of support, warranty, indemnity,
+              or other liability obligations and/or rights consistent with this
+              License. However, in accepting such obligations, You may act only
+              on Your own behalf and on Your sole responsibility, not on behalf
+              of any other Contributor, and only if You agree to indemnify,
+              defend, and hold each Contributor harmless for any liability
+              incurred by, or claims asserted against, such Contributor by reason
+              of your accepting any such warranty or additional liability.
+        
+           END OF TERMS AND CONDITIONS
+        
+           APPENDIX: How to apply the Apache License to your work.
+        
+              To apply the Apache License to your work, attach the following
+              boilerplate notice, with the fields enclosed by brackets "[]"
+              replaced with your own identifying information. (Don't include
+              the brackets!)  The text should be enclosed in the appropriate
+              comment syntax for the file format. We also recommend that a
+              file or class name and description of purpose be included on the
+              same "printed page" as the copyright notice for easier
+              identification within third-party archives.
+        
+           Copyright 2026 Mago <271898130+mgonzalez88201-creator@users.noreply.github.com>
+        
+           Licensed under the Apache License, Version 2.0 (the "License");
+           you may not use this file except in compliance with the License.
+           You may obtain a copy of the License at
+        
+               http://www.apache.org/licenses/LICENSE-2.0
+        
+           Unless required by applicable law or agreed to in writing, software
+           distributed under the License is distributed on an "AS IS" BASIS,
+           WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+           See the License for the specific language governing permissions and
+           limitations under the License.
+License-File: LICENSE
+License-File: NOTICE
+Keywords: audit,code-quality,devops,security,static-analysis,stdlib,toolkit
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.10
+Provides-Extra: dev
+Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: coverage>=7.0; extra == 'dev'
+Requires-Dist: twine>=5.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# AuditAgent Toolkit
+
+> Toolkit modular de auditoría técnica en Python. Solo biblioteca estándar. 19 módulos independientes. Contrato JSON uniforme.
+
+[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![Python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-blue.svg)](https://www.python.org/)
+[![Status](https://img.shields.io/badge/status-alpha-orange.svg)]()
+
+## ¿Qué es?
+
+AuditAgent Toolkit es un conjunto de **herramientas modulares** para auditar repositorios de código. Cada módulo:
+
+- Tiene **una sola responsabilidad**.
+- Usa **solo la biblioteca estándar** de Python.
+- Produce **JSON conforme a un contrato uniforme**.
+- Declara **explícitamente sus limitaciones**.
+- Se puede ejecutar **independientemente** del resto.
+
+## ¿Qué audita?
+
+| Área | Módulo | Qué detecta |
+|---|---|---|
+| Inventario | `inventory` | Archivos, directorios, symlinks, tamaños |
+| Git | `git_state` | Estado, historial, remotos, identidades |
+| Privacidad | `sensitive_data` | Secretos, correos, rutas (con redacción) |
+| Escrituras | `write_surface` | APIs de escritura vía AST |
+| Contratos | `json_contracts` | JSON válidos, esquemas, validadores |
+| Pruebas | `test_runner` | Compilación y ejecución de tests |
+| Inmutabilidad | `readonly_immutability` | Snapshots antes/después |
+| Frontera de salida | `output_boundary` | Escrituras internas al repo |
+| Symlinks | `symlink_policy` | Enlaces internos, externos, rotos |
+| Ocultos | `hidden_policy` | include_hidden false/true |
+| Exclusiones | `exclusion_policy` | `.bak`, `.egg-info`, `__pycache__` |
+| Tamaños | `size_limits` | Límite-1, límite, límite+1 |
+| Binarios | `binary_handling` | NUL, UTF-8, bytes inválidos |
+| Permisos | `permission_handling` | chmod 000 |
+| Determinismo | `determinism` | Dos ejecuciones, JSON normalizado |
+| Atomicidad | `atomic_output` | Escritura atómica real |
+| Coherencia | `result_coherence` | Comparación entre dos resultados |
+| Puntuación | `score_module` | Score 0-100 por resultado |
+| Informe | `assemble_report` | Markdown agregado |
+
+## Instalación
+
+### Desde PyPI (próximamente)
+
+```bash
+pip install auditagent-toolkit
+```
+### Desde el repositorio (desarrollo)
+
+```bash
+git clone https://github.com/mgonzalez88201-creator/auditagent-toolkit.git
+cd auditagent-toolkit
+pip install -e .
+```
+
+### Requisitos
+
+- Python 3.10 o superior.
+- **Cero dependencias externas.**
+- Funciona en Linux, macOS y Windows.
+
+## Quickstart
+
+### Listar módulos y perfiles
+
+```bash
+auditagent list
+```
+
+### Ejecutar un módulo concreto
+
+```bash
+auditagent run inventory . --json-output /tmp/inventory.json
+```
+
+### Ejecutar un perfil completo
+
+```bash
+auditagent profile rapid . --output-dir /tmp/audit-results
+```
+
+**Perfiles disponibles:**
+
+- `rapid`: 6 módulos (inventario, git, privacidad, escrituras, contratos, pruebas).
+- `standard`: 10 módulos (rapid + inmutabilidad, frontera, determinismo, coherencia).
+- `deep`: 17 módulos (standard + symlinks, ocultos, exclusiones, límites, binarios, permisos, atomicidad).
+
+### Generar un informe
+
+```bash
+auditagent run assemble_report /tmp/audit-results/*.json --title "Auditoría" --output /tmp/audit-results/INFORME.md
+```
+
+## Ejemplos
+
+### Auditar un repositorio local
+
+```bash
+auditagent profile standard /ruta/al/repo --output-dir /tmp/audit
+```
+
+### Auditar solo secretos
+
+```bash
+auditagent run sensitive_data /ruta/al/repo --json-output /tmp/secrets.json
+```
+
+### Auditar inmutabilidad de una CLI externa
+
+```bash
+auditagent run readonly_immutability /ruta/al/repo --request /tmp/request.json --command 'mi-cli scan --request {request} --output {output}' --json-output /tmp/readonly.json
+```
+
+### Puntuar un resultado
+
+```bash
+auditagent run score_module /tmp/secrets.json --json-output /tmp/score.json
+```
+
+## Contrato de salida
+
+Todos los módulos devuelven JSON conforme a `schemas/module_result.schema.json`:
+
+```json
+{
+  "schema_version": "1.0",
+  "module": "nombre",
+  "status": "PASS | WARN | FAIL | NOT_RUN | ERROR",
+  "confidence": "high | medium | low",
+  "root": "/ruta/resuelta",
+  "summary": {},
+  "findings": [],
+  "evidence": [],
+  "limitations": [],
+  "started_at": "2026-09-28T00:00:00+00:00",
+  "finished_at": "2026-09-28T00:00:01+00:00"
+}
+```
+
+Esto permite: comparar módulos, revisar un control, guardar evidencia reproducible, ensamblar informes sin re-ejecutar, integrar con CI/CD.
+
+## Principios de diseño
+
+1. **Solo stdlib.** Nunca dependencias externas.
+2. **No escribe en el repo auditado.** Solo en `--json-output`.
+3. **Cada módulo es independiente.** No requiere que otros se ejecuten antes.
+4. **Contrato uniforme.** Todos respetan el mismo schema.
+5. **Limitaciones explícitas.** Cada módulo declara qué NO cubre.
+6. **Redacción de datos sensibles.** Nunca imprime valores coincidentes.
+7. **Honestidad sobre evidencia.** Si el entorno invalida un caso, lo declara.
+
+## Estructura del proyecto
+
+```text
+auditagent-toolkit/
+├── LICENSE                    Apache 2.0
+├── NOTICE                     Atribución
+├── README.md                  Este archivo
+├── CHANGELOG.md               Historial de versiones
+├── INDEX.md                   Documentación de módulos
+├── VALIDATION.md              Historial de validación
+├── pyproject.toml             Metadata del paquete
+├── auditagent_manifest.json   Perfiles rapid/standard/deep
+├── validate_toolkit.py        Validador de sintaxis
+├── SHA256SUMS.txt             Checksums de integridad
+├── auditagent_tools/          19 módulos + cli.py
+├── examples/                  Plantillas y casos de uso
+└── schemas/                   JSON Schema del contrato
+```
+
+## Limitaciones conocidas
+
+- Los módulos dinámicos requieren una CLI externa y una plantilla de comando.
+- La extracción de rutas busca campos llamados `path` en JSON.
+- La detección de secretos es heurística (regex, sin entropía).
+- No sustituye aislamiento del sistema operativo.
+- No demuestra ausencia de carreras TOCTOU.
+
+Ver `VALIDATION.md` para el historial de pruebas realizadas.
+
+## Desarrollo
+
+### Ejecutar validación
+
+```bash
+python validate_toolkit.py
+```
+
+### Compilar todos los módulos
+
+```bash
+python -m py_compile auditagent_tools/*.py
+```
+
+## Contribuciones
+
+Aún no se aceptan contribuciones externas. Cuando se abra el proyecto, se publicará una guía de contribución.
+
+## Licencia
+
+**Apache License 2.0** — ver [LICENSE](LICENSE) y [NOTICE](NOTICE).
+
+## Autor
+
+**Mago** — [@mgonzalez88201-creator](https://github.com/mgonzalez88201-creator)
+
+## Estado
+
+Versión `0.2.0` — **alpha**. Funcional pero sin tests propios ni CI.
+
+## Enlaces
+
+- [Documentación de módulos](INDEX.md)
+- [Historial de validación](VALIDATION.md)
+- [Changelog](CHANGELOG.md)
+- [Manifest de perfiles](auditagent_manifest.json)
+- [Contrato JSON](schemas/module_result.schema.json)

auditagent_toolkit-0.2.0.dist-info/RECORD

@@ -0,0 +1,27 @@
+auditagent_tools/__init__.py,sha256=PtGYITwzz82DsnJM-RFFKk59w6KWNi8xs2nvvz9aMrc,425
+auditagent_tools/assemble_report.py,sha256=oXWkWwTXbZmtsj_DvLyVcBv7I2uTfhulIBebzLjOGGw,2510
+auditagent_tools/atomic_output.py,sha256=eLbBXwlbUMm8ZSvzj14I0idqHCXsOnmKmxkoZNOD7CA,3992
+auditagent_tools/binary_handling.py,sha256=4o-EMCioTAxwXUY5YrI0BAnQnsEncSvn-dRtcgiKkqw,3665
+auditagent_tools/cli.py,sha256=Jtk6KODh2jAKXJdvo1NuSLnW_v4cjAugKoCaK4eB_8c,5738
+auditagent_tools/determinism.py,sha256=ntHwLyCjCvdzExw_VwUr1VsZ3x_1W6qKsv8NTS-qFRY,3661
+auditagent_tools/exclusion_policy.py,sha256=K0bU16L75PcOqh7vc5R9uZcsp9JC361zeF2Sbm6e9ZM,4517
+auditagent_tools/git_state.py,sha256=Wph5KRLVZsxd2cM58t6SaxEBGhKUEU3YE2_5NRVtH3w,3701
+auditagent_tools/hidden_policy.py,sha256=S7yOolu9Q6B7YdYb5PVpt7Pogmho51c4Yp1fMPWBn3E,4508
+auditagent_tools/inventory.py,sha256=SDN0ViSjoaZWWEaez7gOpZr-ks3JoXkTZOUCFbNEZVg,3268
+auditagent_tools/json_contracts.py,sha256=ewv9vWDgq2_YeWp2AGXYz3OKzNdO8a2e5fQsffGEypc,3402
+auditagent_tools/output_boundary.py,sha256=PkWXyiaPKVarp2vv5leE0ZAYGIYP_I7SCVErimUpYMQ,3262
+auditagent_tools/permission_handling.py,sha256=XrJzNRn2mQgzVI9FaxvT-uggQs2xs0IkFI3a-md0MYQ,3727
+auditagent_tools/readonly_immutability.py,sha256=yh0Gpve7Yu7uFa61FjePlOSPhVdxwc5R5um0EaTCtck,3961
+auditagent_tools/result_coherence.py,sha256=VcBfxcJkcPIXyN6ozdwjCUPvdUNTXOLilFOGg8a-6Xc,4014
+auditagent_tools/score_module.py,sha256=yAOz2fHBiSimiXgV3YqHp3T3h1z2SW_F_HTVZC5EwsA,2207
+auditagent_tools/sensitive_data.py,sha256=Xh2ossN6rnKCP3VzCpTCYklEV-BA-TKI36x_GwwqFLM,3932
+auditagent_tools/size_limits.py,sha256=puw-GsgWJkBeCRuou5zEfhACTkiLAylBLzWxfjMeZdk,4032
+auditagent_tools/symlink_policy.py,sha256=ioQ0HhR-p0TK0DqpsN6P1spax1eBAjn0tqYHouB1nSk,4390
+auditagent_tools/test_runner.py,sha256=wvESBaYsvQnSz2oMhTw3QRyVMtxW4hR3-K4SUbaKdCE,3280
+auditagent_tools/write_surface.py,sha256=0yrq1zuP5xRZ4Uibzm4Nrp0FkLFQP98lrh3NV0x3kcw,4183
+auditagent_toolkit-0.2.0.dist-info/METADATA,sha256=cX0jqxPYqFjExSvEoeMzcwe5sGnCqbdlrQpowXhynA0,21626
+auditagent_toolkit-0.2.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+auditagent_toolkit-0.2.0.dist-info/entry_points.txt,sha256=F7dmGlaiRg0iUUhCQpUcLj13_z94wpXRey3dWmpfRGQ,57
+auditagent_toolkit-0.2.0.dist-info/licenses/LICENSE,sha256=01B1qVL9OWNmrnSzseAIacA1EHt_34p7iJbMZnE085A,11394
+auditagent_toolkit-0.2.0.dist-info/licenses/NOTICE,sha256=48YA4kcrXLfORkOwiPdNK1jk7i7c0qewFvNCxocvasM,283
+auditagent_toolkit-0.2.0.dist-info/RECORD,,

auditagent_toolkit-0.2.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.4
+Root-Is-Purelib: true
+Tag: py3-none-any

auditagent_toolkit-0.2.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+auditagent = auditagent_tools.cli:main