q-armor-cli 0.1.0__cp313-none-any.whl

q_armor_cli-0.1.0.dist-info/METADATA

@@ -0,0 +1,105 @@
+Metadata-Version: 2.5
+Name: q-armor-cli
+Version: 0.1.0
+Summary: q-armor: the QArmor operator command line. Post-quantum posture of a TLS endpoint, the VQS of a validator, and the protection proxy.
+License-Expression: LicenseRef-Proprietary
+License-File: LICENSE
+Requires-Python: >=3.11
+Requires-Dist: q-armor-lib==0.1.0
+Provides-Extra: proxy
+Requires-Dist: q-armor-proxy==0.1.0; extra == 'proxy'
+Requires-Dist: uvicorn>=0.29; extra == 'proxy'
+Description-Content-Type: text/markdown
+
+# q-armor-cli
+
+**`q-armor`: post-quantum posture of any TLS endpoint, from your terminal, in one command.**
+
+[![PyPI](https://img.shields.io/pypi/v/q-armor-cli.svg)](https://pypi.org/project/q-armor-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/q-armor-cli.svg)](https://pypi.org/project/q-armor-cli/)
+[![Licence](https://img.shields.io/badge/licence-proprietary-1f6feb.svg)](https://idenq.io)
+
+> The traffic your validator is emitting right now is being recorded by somebody who cannot read it yet. Harvest Now, Decrypt Later is the one attack you cannot respond to after the fact, because the copy was taken years before the key broke. The first useful question is simple: what is this endpoint actually negotiating?
+
+```bash
+pip install q-armor-cli
+q-armor scan example.com
+```
+
+```
+hostname: example.com
+port: 443
+tls_version: TLSv1.3
+cipher_suite: TLS_AES_256_GCM_SHA384
+cert_key_type: rsa-2048
+cert_issuer: DigiCert Inc
+key_exchange_group: x25519
+signing_algo: rsa
+session_algo: x25519
+vqs_score: 80
+risk_tier: deny
+consensus_weight_factor: 0.1
+error: None
+```
+
+`vqs_score` is **exposure**, so higher is worse. RSA signing and an x25519 key
+exchange are both classical, both fall to Shor, and the consensus weight
+factor is what that costs a validator: one tenth of its vote.
+
+## Three commands
+
+```
+q-armor scan example.com            # post-quantum posture of a TLS endpoint
+q-armor vqs <validator-id>          # a validator's VQS
+q-armor proxy --port 8080           # start the protection proxy
+```
+
+Add `--json` to any of them and pipe it into whatever you already run.
+
+Three, and the list is not a matter of taste: `docs/priorities.md` (P1-11)
+says that before writing a CLI you have to answer **what an operator asks
+for**, "because a CLI without that case is surface to maintain".
+
+## What it will not do
+
+- **It does not reimplement detection.** Every command consumes
+  [`q-armor-lib`](https://pypi.org/project/q-armor-lib/). A second scanner
+  here would be another producer of the `key_establishment_class` axis,
+  diverging in silence.
+- **It does not let telemetry block your answer.** A `scan` reports what it
+  measured even if the border is down, misconfigured or refusing on consent
+  grounds. A command that failed because it could not report would be a
+  command that lies about what it has measured. `--no-telemetry` turns the
+  emission off outright.
+
+## Exit codes, so a script can tell the difference
+
+| Code | Meaning |
+|---|---|
+| `0` | It measured the endpoint |
+| `1` | Error |
+| `2` | It could not observe the endpoint: that is a **finding**, not a broken command |
+| `3` | `vqs` only: the local validator registry is not present |
+
+Code 3 is repository-root code (`services/state/validator_store.py`) that no
+wheel carries, so installed from PyPI the command says so by name with its own
+code instead of dying with an ImportError. It works from a checkout, until the
+registry moves to the platform's `POST /validators` (`docs/priorities.md`,
+P1-13).
+
+## The QArmor family
+
+Five packages, one version, published together from a single tag.
+
+| Package | What it is |
+|---|---|
+| [`q-armor-lib`](https://pypi.org/project/q-armor-lib/) | Detection, scoring and the control-plane client |
+| [`q-armor-cli`](https://pypi.org/project/q-armor-cli/) | This one: `q-armor`, the operator's command line |
+| [`q-armor-proxy`](https://pypi.org/project/q-armor-proxy/) | Enterprise runtime: protection proxy, firewall, SIEM webhook |
+| [`q-armor-chain`](https://pypi.org/project/q-armor-chain/) | DVN worker and `QArmorDVN.sol` |
+| [`q-armor-pqc`](https://pypi.org/project/q-armor-pqc/) | Interim ML-DSA-65 primitive |
+
+## Next
+
+Scanning is free. The collective canary network, real-time alerting and
+on-premise deployment are the paid tiers: [idenq.io](https://idenq.io)

q_armor_cli-0.1.0.dist-info/RECORD

@@ -0,0 +1,8 @@
+q_armor_cli-0.1.0.dist-info/METADATA,sha256=2gstxpTRQg60g5sh5ahs6ilVn31r76HgmWiyNowCfpA,4288
+q_armor_cli-0.1.0.dist-info/WHEEL,sha256=-zTsoBF2cM-n6FfeRTSHkZua7m6FZrGuqBAbmTcK2jk,89
+q_armor_cli-0.1.0.dist-info/entry_points.txt,sha256=tLaLxAHSQCREwJ0dJFRAOwQcqnpoy9RYxQIy9bAqzfU,50
+q_armor_cli-0.1.0.dist-info/licenses/LICENSE,sha256=_hSpUliph3myKpSwc1d-P3Rea95W79Sb6LQ1QHZAqAQ,1205
+q_armor_cli/__init__.pyc,sha256=p6nxRoMdIAC2KiPMq1LUMmQj20VIPvoOoRRHRiqWlz4,120
+q_armor_cli/__main__.pyc,sha256=MQN8R2rkil7EehG54SPyua7lh0-pwV2QyHDrVLKw-J4,216
+q_armor_cli/main.pyc,sha256=OlEZxWayETFyz0rfanlss64-NiVtpbefpD1wB-AGUqI,9578
+q_armor_cli-0.1.0.dist-info/RECORD,,

q_armor_cli-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.0
+Root-Is-Purelib: true
+Tag: cp313-none-any

q_armor_cli-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+q-armor = q_armor_cli.main:main

q_armor_cli-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,23 @@
+IdenQ Proprietary Licence
+
+Copyright (c) 2025-2026 IdenQ. All rights reserved.
+
+This software, its source code, its compiled forms and its documentation
+(the "Software") are the confidential and proprietary property of IdenQ.
+
+No licence, express or implied, is granted to any person or organisation to
+use, copy, reproduce, modify, merge, publish, distribute, sublicense, sell,
+reverse engineer, decompile or disassemble the Software, in whole or in part,
+except under the terms of a separate written agreement signed by IdenQ. Any
+such agreement governs the Software to the extent of its terms; everything it
+does not grant remains reserved.
+
+Access to the Software, including through a public package index or a
+repository, does not by itself grant any right to it.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL IDENQ
+BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
+CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.