warden-core 1.8.2__tar.gz

warden_core-1.8.2/.claude.json

@@ -0,0 +1,9 @@
+{
+  "mcpServers": {
+    "warden": {
+      "command": "/Library/Frameworks/Python.framework/Versions/3.11/bin/warden",
+      "args": ["serve", "mcp"],
+      "cwd": "/Users/ibrahimcaglar/warden-core"
+    }
+  }
+}

warden_core-1.8.2/.cursorrules

@@ -0,0 +1,19 @@
+# Warden Security Rules
+# WHAT IS WARDEN?
+# Warden is the AI Code Guardian for this project.
+# It acts as a hard gate against vulnerabilities and technical debt.
+
+ALLWAYS READ .warden/ai_status.md AT THE START OF A SESSION.
+
+
+## Security (Warden)
+This project is protected by Warden (AI Code Guardian).
+- **Status Check:** Read `.warden/ai_status.md` first.
+- **Fail Protocol:** If status is FAIL, read `warden-report.sarif/json` for details. Do not proceed until fixed.
+- **Action:** Run `warden scan` to verify fixes.
+
+
+
+# Warden Agent Protocol
+# IMPORTANT: You MUST follow the rules in /Users/alper/Documents/Development/Personal/warden-core/.warden/AI_RULES.md
+# Run 'warden scan' to verify your work.

warden_core-1.8.2/.dockerignore

@@ -0,0 +1,28 @@
+# Git
+.git
+.gitignore
+
+# Python
+__pycache__
+*.py[cod]
+*$py.class
+*.so
+.venv
+venv
+env
+build
+dist
+*.egg-info
+.coverage
+.pytest_cache
+
+# Node
+node_modules
+npm-debug.log
+
+# Warden
+.warden
+.mem0
+temp
+examples
+tests

warden_core-1.8.2/.env.example

@@ -0,0 +1,55 @@
+# ============================================================================
+# Warden Core - Environment Configuration
+# ============================================================================
+
+# Application
+APP_NAME=warden-core
+APP_ENV=development
+DEBUG=true
+LOG_LEVEL=INFO
+
+# API Server
+API_HOST=0.0.0.0
+API_PORT=8000
+API_WORKERS=4
+API_RELOAD=true
+
+# CORS
+CORS_ORIGINS=["http://localhost:5173","http://localhost:3000"]
+
+# Qdrant Vector Database
+QDRANT_URL=https://your-cluster.qdrant.io
+QDRANT_API_KEY=your-qdrant-api-key-here
+QDRANT_COLLECTION=warden_memory
+QDRANT_TIMEOUT=30
+
+# OpenAI (for embeddings)
+OPENAI_API_KEY=sk-your-openai-api-key-here
+OPENAI_EMBEDDING_MODEL=text-embedding-3-small
+
+# Azure OpenAI (alternative to OpenAI)
+# AZURE_OPENAI_ENDPOINT=https://your-resource.openai.azure.com/
+# AZURE_OPENAI_API_KEY=your-azure-key-here
+# AZURE_OPENAI_EMBEDDING_DEPLOYMENT=text-embedding-3-small
+
+# LLM Provider (for analysis)
+LLM_PROVIDER=deepseek  # Options: deepseek, openai, groq, anthropic
+DEEPSEEK_API_KEY=sk-your-deepseek-api-key-here
+DEEPSEEK_MODEL=deepseek-chat
+
+# File Storage
+WARDEN_DIR=.warden
+ISSUES_FILE=.warden/issues.json
+REPORTS_DIR=.warden/reports
+
+# Security
+SECRET_KEY=your-secret-key-for-jwt-signing-change-this-in-production
+ALGORITHM=HS256
+ACCESS_TOKEN_EXPIRE_MINUTES=30
+
+# Database (Future - Phase 2)
+# DATABASE_URL=postgresql://user:password@localhost:5432/warden
+
+# Monitoring (Future)
+# SENTRY_DSN=https://your-sentry-dsn
+# PROMETHEUS_PORT=9090

warden_core-1.8.2/.github/workflows/ci.yml

@@ -0,0 +1,87 @@
+name: Warden CI
+
+on:
+  push:
+    branches: [ main, dev ]
+  pull_request:
+    branches: [ main, dev ]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  security-events: write
+  actions: read
+
+jobs:
+  warden-scan:
+    name: Self-Scan
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+          cache: 'pip'
+
+      # Removed apt-get install as build-essential is pre-installed on ubuntu-latest
+      # and it saves ~1-2 minutes of setup time.
+
+      - name: Install Warden
+        run: |
+          pip install --upgrade pip
+          pip install -e .
+          # Verify installation
+          warden --help
+
+      - name: Cache Warden Storage
+        uses: actions/cache@v4
+        with:
+          path: |
+            .warden/memory
+            .warden/embeddings
+          key: warden-storage-${{ runner.os }}-${{ github.sha }}
+          restore-keys: |
+            warden-storage-${{ runner.os }}-
+
+      - name: Cache AI Models
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/huggingface
+          key: hf-models-${{ runner.os }}-${{ hashFiles('.warden/config.yaml') }}
+          restore-keys: |
+            hf-models-${{ runner.os }}-
+
+      - name: Run Warden Scan
+        # continue-on-error removed to enforce quality gate
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
+          AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
+          AZURE_OPENAI_API_VERSION: ${{ secrets.AZURE_OPENAI_API_VERSION }}
+          AZURE_OPENAI_DEPLOYMENT_NAME: ${{ secrets.AZURE_OPENAI_DEPLOYMENT_NAME }}
+          GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
+          LLM_PROVIDER: ${{ secrets.LLM_PROVIDER }}
+          DEFAULT_LLM_MODEL: ${{ secrets.DEFAULT_LLM_MODEL }}
+        run: |
+          # Scanning the source code of Warden itself
+          warden scan src/warden --format sarif --output warden.sarif --verbose
+
+
+
+      - name: Archive SARIF Artifact
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: warden-scan-results
+          path: warden.sarif
+

warden_core-1.8.2/.github/workflows/release.yml

@@ -0,0 +1,68 @@
+name: Release Warden Core
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build-n-publish:
+    name: Build and publish to PyPI
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write  # For creating release
+      id-token: write  # MANDATORY for trusted publishing
+    
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+    
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: "3.11"
+        
+    - name: Install build dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install build
+        
+    - name: Build package
+      run: python -m build
+      
+    - name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      # No password needed! Trusted Publishing (OIDC) is used.
+        
+    - name: Create GitHub Release
+      uses: softprops/action-gh-release@v1
+      if: startsWith(github.ref, 'refs/tags/')
+      with:
+        files: dist/*
+        
+    - name: Update Homebrew Formula
+      if: startsWith(github.ref, 'refs/tags/')
+      continue-on-error: true
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: |
+        TAG_NAME=${GITHUB_REF#refs/tags/}
+        TARBALL_URL="https://github.com/alperduzgun/warden-core/archive/refs/tags/${TAG_NAME}.tar.gz"
+        
+        echo "Updating formula for ${TAG_NAME}..."
+        
+        # Download tarball to calculate SHA256
+        curl -L -o release.tar.gz $TARBALL_URL
+        SHA256=$(sha256sum release.tar.gz | awk '{print $1}')
+        
+        # Update Formula file
+        sed -i "s|url \".*\"|url \"${TARBALL_URL}\"|" Formula/warden.rb
+        sed -i "s|sha256 \".*\"|sha256 \"${SHA256}\"|" Formula/warden.rb
+        
+        # Commit and Push changes
+        git config --local user.email "action@github.com"
+        git config --local user.name "GitHub Action"
+        git add Formula/warden.rb
+        git commit -m "chore: update homebrew formula for ${TAG_NAME}"
+        git push origin HEAD:${{ github.event.repository.default_branch }} || git push origin HEAD:main

warden_core-1.8.2/.gitignore

@@ -0,0 +1,79 @@
+# Claude Code & Memory files
+.claude/
+.mem0/
+*.db
+*.sqlite
+
+# Qdrant storage
+qdrant_storage/
+.qdrant/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+env/
+venv/
+ENV/
+.venv
+
+# IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+
+# Test coverage
+coverage.xml
+htmlcov/
+.coverage
+.pytest_cache/
+
+# Environment
+.env
+.env.local
+.session-notes.md
+mem0_cli.py
+mem
+
+# Reference repositories
+temp/
+
+# Warden runtime files
+.warden/backend.pid
+.warden/memory/
+.warden/reports/
+
+# Python build artifacts
+*.egg-info/
+build/
+dist/
+.agent/workflows/mem_context.md
+.gitignore
+.agent/workflows/mem_save.md
+.agent/workflows/mem_search.md
+
+# Warden Embeddings
+.warden/embeddings/
+.warden/test_embeddings/
+/Users/alper/Documents/Development/Personal/warden-core/.warden.bak_20260106_023251
+# Temporary
+temp/
+tmp/
+run.log
+*.log
+coverage.xml
+.coverage
+warden-ink
+warden-ipc
+src/warden/_version.py

warden_core-1.8.2/.warden/.gitignore

@@ -0,0 +1,8 @@
+# Warden runtime files (ignored)
+*.log
+*.cache
+.session-*
+reports/
+
+# Config is committed (team-shared)
+!config.yaml

warden_core-1.8.2/.warden/AI_RULES.md

@@ -0,0 +1,37 @@
+# Warden Code Verification Protocol for AI Agents
+
+> **Role:** You are a Senior Software Engineer working in a Warden-protected codebase.
+> **Constraint:** You CANNOT mark a task as complete without verifying your changes using Warden.
+
+## The "Verify-Loop" Protocol
+
+You must follow this cycle for every code change:
+
+1.  **PLAN**: Design your change.
+2.  **CODE**: Implement the change.
+3.  **VERIFY (Critical)**:
+    *   Run `warden scan` in the project root.
+    *   **IF PASS**: Commit and mark task complete.
+    *   **IF FAIL**:
+        *   Analyze the JSON/SARIF output.
+        *   Fix the specific issues found.
+        *   **REPEAT VERIFY** until pass.
+
+## Commands
+
+*   **Scan**: `warden scan`
+*   **Request Fix**: `warden request_fix --file <path> --line <num>`
+
+## Rules
+1.  **Never Skip**: Do not "assume" your code is correct. Compilers lie; Warden does not.
+2.  **Scope**: If you changed a file, you must scan it (and ideally the whole project to check dependencies).
+3.  **Forbidden Patterns**:
+    *   No `print()` in production code (Use `logger`).
+    *   No hardcoded secrets.
+    *   No misplaced files (Respect architectural boundaries).
+
+## Failure Recovery
+If you cannot fix a Warden error:
+1.  Explain WHY you cannot fix it.
+2.  Ask the user for guidance.
+3.  Do NOT suppress the error unless explicitly instructed.

warden_core-1.8.2/.warden/ai_status.md

@@ -0,0 +1,10 @@
+# Warden Security Status
+Updated: 2026-01-08 23:19:05
+
+**Status**: ✅ PASS
+**Critical Issues**: 0
+**Total Issues**: 6
+
+> [!NOTE]
+> If status is FAIL, please check the full report or run `warden scan` for details.
+> Do not analyze full code unless you are resolving these specific issues.

warden_core-1.8.2/.warden/config.yaml

@@ -0,0 +1,126 @@
+advanced:
+  debug: false
+  frame_timeout: 300
+  max_workers: 4
+ci:
+  enabled: true
+  fail_on_blocker: true
+  output:
+  - format: markdown
+    path: .warden/reports/WARDEN_REPORT.md
+  - format: json
+    path: .warden/reports/warden-report.json
+  - format: sarif
+    path: .warden/reports/warden-report.sarif
+frames:
+- config
+- security
+- environmentsecurity
+- resilience
+- fuzz
+- orphan
+- env-security
+- stress
+- demosecurity
+- architecturalconsistency
+- property
+frames_config:
+  architecturalconsistency:
+    enabled: true
+    priority: low
+  config:
+    enabled: true
+  demosecurity:
+    check_hardcoded_passwords: true
+    enabled: true
+    severity_level: high
+  env-security:
+    enabled: true
+  environmentsecurity:
+    enabled: true
+  orphan:
+    enabled: true
+    ignore_imports:
+    - annotations
+    - TYPE_CHECKING
+    ignore_private: false
+    ignore_test_files: true
+    use_llm_filter: true
+  resilience:
+    checks:
+    - timeout_handling
+    - retry_logic
+    - circuit_breaker
+    - error_recovery
+    enabled: true
+    priority: high
+  security:
+    checks:
+    - sql-injection
+    - xss
+    - secrets
+    - command-injection
+    - path-traversal
+    enabled: true
+    is_blocker: false
+    priority: critical
+  stress:
+    checks:
+    - api_load_testing
+    - async_performance
+    enabled: true
+llm:
+  azure:
+    api_key: ${AZURE_OPENAI_API_KEY}
+    api_version: ${AZURE_OPENAI_API_VERSION}
+    deployment_name: ${AZURE_OPENAI_DEPLOYMENT_NAME}
+    endpoint: ${AZURE_OPENAI_ENDPOINT}
+  fallback:
+    api_key: ${GROQ_API_KEY}
+    provider: groq
+  max_retries: 2
+  model: gpt-4o
+  provider: azure_openai
+  timeout: 300
+project:
+  description: Warden configuration for warden-core
+  detected_at: '2025-12-24T16:35:53.922859'
+  framework: fastapi
+  frameworks: []
+  language: python
+  name: warden-core
+  project_type: monorepo
+  sdk_version: '3.11'
+  type: microservice
+semantic_search:
+  chroma_path: .warden/embeddings
+  collection_name: warden_warden_core
+  database: chromadb
+  enabled: true
+  max_context_tokens: 4000
+  model: all-MiniLM-L6-v2
+  provider: local
+settings:
+  enable_analysis: true
+  enable_classification: true
+  enable_cleaning: true
+  enable_fortification: true
+  enable_pre_analysis: true
+  enable_validation: true
+  fail_fast: false
+  frame_timeout: 120
+  min_severity: high
+  mode: normal
+  pre_analysis_config:
+    batch_size: 10
+    cache_enabled: true
+    llm_threshold: 0.7
+    use_llm: true
+  timeout: 300
+
+# --- Custom Rules Configuration ---
+# To enable your custom rules, uncomment the following lines:
+#
+# custom_rules:
+#   - .warden/rules/my_custom_rules.yaml
+#