Metadata-Version: 2.4
Name: armorone
Version: 0.1.0
Summary: ArmorOne: Next-Gen Autonomous SAST, DevSecOps & Agentic Code Security Platform
Author-email: ArmorOne Security Team <security@armorone.io>
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.11
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: fastapi>=0.110.0
Requires-Dist: uvicorn[standard]>=0.28.0
Requires-Dist: pydantic[email]>=2.6.0
Requires-Dist: pydantic-settings>=2.2.0
Requires-Dist: sqlmodel>=0.0.16
Requires-Dist: sqlalchemy>=2.0.28
Requires-Dist: alembic>=1.13.1
Requires-Dist: asyncpg>=0.29.0
Requires-Dist: psycopg2-binary>=2.9.9
Requires-Dist: typer>=0.12.0
Requires-Dist: rich>=13.7.1
Requires-Dist: textual>=0.53.0
Requires-Dist: python-dotenv>=1.0.1
Requires-Dist: pyyaml>=6.0.1
Requires-Dist: jsonschema>=4.21.1
Requires-Dist: httpx>=0.27.0
Requires-Dist: truststore>=0.9.0; python_version >= "3.10"
Requires-Dist: mcp>=1.0.0; python_version < "3.14"
Requires-Dist: celery>=5.3.6
Requires-Dist: redis>=5.0.3
Requires-Dist: fakeredis>=2.21.0
Requires-Dist: bcrypt>=4.1.0
Requires-Dist: pyjwt>=2.8.0
Requires-Dist: semgrep>=1.65.0
Requires-Dist: bandit>=1.7.8
Provides-Extra: dev
Requires-Dist: pytest>=8.1.0; extra == "dev"
Requires-Dist: pytest-asyncio>=0.23.5; extra == "dev"
Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
Requires-Dist: aiosqlite>=0.20.0; extra == "dev"
Requires-Dist: ruff>=0.3.2; extra == "dev"
Requires-Dist: mypy>=1.9.0; extra == "dev"
Requires-Dist: types-pyyaml>=6.0.12; extra == "dev"
Requires-Dist: types-jsonschema>=4.21.0; extra == "dev"
Dynamic: license-file

# ArmorOne SAST 🛡️

**ArmorOne** is an ultra-fast, multi-engine Static Application Security Testing (SAST), DevSecOps governance, and Agentic AI security platform built for the modern software development lifecycle.

[![PyPI Version](https://img.shields.io/pypi/v/armorone.svg)](https://pypi.org/project/armorone/)
[![Python Versions](https://img.shields.io/pypi/pyversions/armorone.svg)](https://pypi.org/project/armorone/)
[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Documentation: Sync](https://img.shields.io/badge/docs-11%2F11%20synced-brightgreen.svg)](docs/)

---

## ⚡ Quick Installation

### Option 1: Modern Isolated Python CLI (`uv tool` / `pipx` - Recommended)
```bash
# Using uv (fast & isolated):
uv tool install armorone

# Or using pipx:
pipx install armorone
```

### Option 2: Standard pip
```bash
pip install armorone
```

Then provision the two Go engines the CLI shells out to:

```bash
armorone setup
```

---

## 🚀 Instant Usage

```bash
# Run multi-engine security scan across current repository (Semgrep, Gitleaks, Bandit, Trivy)
armorone scan .

# Sub-10s differential scan (scans only modified lines in git diff)
armorone scan . --diff

# Interactively review and apply auto-remediation patches
armorone fix <finding_fingerprint> --dry-run

# Launch interactive full-screen terminal triage dashboard
armorone triage

# Start FastMCP server for AI coding assistants (Antigravity, Cursor, Claude Code, Gemini)
armorone mcp run
```

---

## 🌟 Core Architecture & Key Features

- **Multi-Engine Ingestion**: Aggregates Semgrep, Gitleaks, Bandit, and Trivy into a unified, deduplicated `ArmorOneFinding` schema.
- **⚡ Dual-Mode Remediation**:
  - **Mode B (Deterministic Polyglot CST)**: <5ms, $0 token cost, 0% hallucination concrete syntax tree patch generator across **Python, TypeScript/JavaScript, Go, Java, and C/C++**.
  - **Mode A (Code Graph Program Slicing + LLM)**: Backward taint slicing and context-isolated prompt synthesis for complex architectural refactors.
- **🤖 Native FastMCP Integration**: Connects seamlessly to Google Antigravity, Cursor, Claude Code, Gemini CLI, and Windsurf via JSON-RPC stdio.
- **🔒 Sovereign Air-Gapped Mode (Model D)**: 100% offline rootless container distribution with zero telemetry and zero external network egress.

---

## 📚 Documentation & Guides

- 👨‍💻 [Developer Quickstart Guide](docs/developer_quickstart.md)
- ❓ [Frequently Asked Questions (FAQ) & Knowledge Base](docs/user_faq.md)
- 🚀 [DevOps & CI/CD Pipeline Guide](docs/devops_cicd_guide.md)
- 🔒 [Air-Gapped Sovereign Deployment Manual](docs/airgapped_zero_llm_mode.md)
- 🏗️ [Contributor & Core Architecture Guide](docs/contributor_architecture.md)

---

## 📜 License
Apache License 2.0. See [LICENSE](LICENSE) for details.
