@adversarylabs/sdk 0.1.5 → 0.1.8

package/dist/manifest.d.ts

@@ -0,0 +1,49 @@
+export declare const ADVERSARY_MANIFEST_FILE_NAME = "adversary.yaml";
+export declare const ADVERSARY_MANIFEST_MAX_BYTES: number;
+export interface DetectionManifest {
+    files?: string[];
+    entrypoint?: string;
+}
+export interface TriggerManifest {
+    manual?: boolean;
+    files_changed?: string[];
+}
+export interface RuntimeManifest {
+    name?: "node" | "process";
+    image?: string;
+    version?: string;
+    command: string[];
+}
+export interface FilesystemPermissionsManifest {
+    read?: string[];
+    write?: string[];
+}
+export interface EnvironmentPermissionsManifest {
+    allow?: string[];
+}
+export interface PermissionsManifest {
+    filesystem?: FilesystemPermissionsManifest;
+    network?: boolean;
+    environment?: EnvironmentPermissionsManifest;
+    enforcement?: "advisory" | "required";
+}
+export interface FindingsManifest {
+    format?: "adversary.review.v1";
+}
+export interface AdversaryManifest {
+    name: string;
+    version?: string;
+    description?: string;
+    triggers?: TriggerManifest;
+    detection?: DetectionManifest;
+    runtime: RuntimeManifest;
+    permissions?: PermissionsManifest;
+    findings?: FindingsManifest;
+}
+export declare class ManifestValidationError extends Error {
+    readonly issues: string[];
+    constructor(message: string, issues?: string[]);
+}
+export declare function parseAdversaryManifest(source: string | Uint8Array): AdversaryManifest;
+export declare function validateAdversaryManifest(value: unknown): AdversaryManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAC7D,eAAO,MAAM,4BAA4B,QAAU,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,8BAA8B,CAAC;IAC7C,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CACvC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAMD,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,EAAO;CAKnD;AAID,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,iBAAiB,CAiCrF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAO3E"}

package/dist/manifest.js

@@ -0,0 +1,89 @@
+import { readFileSync } from "node:fs";
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { parseAllDocuments } from "yaml";
+export const ADVERSARY_MANIFEST_FILE_NAME = "adversary.yaml";
+export const ADVERSARY_MANIFEST_MAX_BYTES = 1 << 20;
+export class ManifestValidationError extends Error {
+    issues;
+    constructor(message, issues = []) {
+        super(message);
+        this.name = "ManifestValidationError";
+        this.issues = issues;
+    }
+}
+let manifestValidator;
+export function parseAdversaryManifest(source) {
+    const text = typeof source === "string" ? source : new TextDecoder().decode(source);
+    const size = Buffer.byteLength(text, "utf8");
+    if (size > ADVERSARY_MANIFEST_MAX_BYTES) {
+        throw new ManifestValidationError(`adversary.yaml is too large: ${size} bytes exceeds ${ADVERSARY_MANIFEST_MAX_BYTES} bytes`);
+    }
+    const documents = parseAllDocuments(text, {
+        prettyErrors: true,
+        uniqueKeys: true,
+    });
+    if (documents.length !== 1) {
+        throw new ManifestValidationError("manifest must contain exactly one YAML document");
+    }
+    const document = documents[0];
+    if (document === undefined || document.contents === null) {
+        throw new ManifestValidationError("manifest is empty");
+    }
+    if (document.errors.length > 0) {
+        const issues = document.errors.map((error) => error.message);
+        throw new ManifestValidationError(`decode manifest YAML: ${issues.join("; ")}`, issues);
+    }
+    let value;
+    try {
+        value = document.toJS({ maxAliasCount: 0 });
+    }
+    catch (error) {
+        const issue = error instanceof Error ? error.message : String(error);
+        throw new ManifestValidationError(`decode manifest YAML: ${issue}`, [issue]);
+    }
+    return validateAdversaryManifest(value);
+}
+export function validateAdversaryManifest(value) {
+    const validator = getManifestValidator();
+    if (!validator(value)) {
+        const issues = (validator.errors ?? []).map(formatSchemaError);
+        throw new ManifestValidationError(`invalid adversary manifest: ${issues.join("; ")}`, issues);
+    }
+    return normalizeLegacyPermissions(value);
+}
+function getManifestValidator() {
+    if (manifestValidator !== undefined)
+        return manifestValidator;
+    const schema = JSON.parse(readFileSync(new URL("../schemas/adversary.manifest.v1.schema.json", import.meta.url), "utf8"));
+    manifestValidator = new Ajv2020({
+        allErrors: true,
+        strict: true,
+    }).compile(schema);
+    return manifestValidator;
+}
+function formatSchemaError(error) {
+    const path = `manifest${error.instancePath.replaceAll("/", ".")}`;
+    if (error.keyword === "pattern" && error.schemaPath === "#/$defs/portableProjectPath/pattern") {
+        return `${path} must be a portable project-relative path`;
+    }
+    if (error.keyword === "additionalProperties") {
+        return `${path} contains unknown field ${JSON.stringify(error.params.additionalProperty)}`;
+    }
+    if (error.keyword === "required") {
+        return `${path} is missing required field ${JSON.stringify(error.params.missingProperty)}`;
+    }
+    return `${path} ${error.message ?? `failed ${error.keyword} validation`}`;
+}
+function normalizeLegacyPermissions(manifest) {
+    if (manifest.permissions?.env === undefined)
+        return manifest;
+    const { env, ...permissions } = manifest.permissions;
+    return {
+        ...manifest,
+        permissions: {
+            ...permissions,
+            environment: { allow: env },
+        },
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAA2C,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;AAC7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,IAAI,EAAE,CAAC;AA0DpD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAAW;IAE1B,YAAY,OAAe,EAAE,SAAmB,EAAE;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,IAAI,iBAAwE,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CAAC,MAA2B;IAChE,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,4BAA4B,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAC/B,gCAAgC,IAAI,kBAAkB,4BAA4B,QAAQ,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE;QACxC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,iDAAiD,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,YAAY,CAAC,IAAI,GAAG,CAAC,8CAA8C,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/F,CAAC;IACF,iBAAiB,GAAG,IAAI,OAAO,CAAC;QAC9B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,OAAO,CAA0B,MAAM,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,MAAM,IAAI,GAAG,WAAW,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,qCAAqC,EAAE,CAAC;QAC9F,OAAO,GAAG,IAAI,2CAA2C,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;QAC7C,OAAO,GAAG,IAAI,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,IAAI,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,KAAK,CAAC,OAAO,aAAa,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAiC;IACnE,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC;IACrD,OAAO;QACL,GAAG,QAAQ;QACX,WAAW,EAAE;YACX,GAAG,WAAW;YACd,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;SAC5B;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { Ajv2020, type ErrorObject, type ValidateFunction } from \"ajv/dist/2020.js\";\nimport { parseAllDocuments } from \"yaml\";\n\nexport const ADVERSARY_MANIFEST_FILE_NAME = \"adversary.yaml\";\nexport const ADVERSARY_MANIFEST_MAX_BYTES = 1 << 20;\n\nexport interface DetectionManifest {\n  files?: string[];\n  entrypoint?: string;\n}\n\nexport interface TriggerManifest {\n  manual?: boolean;\n  files_changed?: string[];\n}\n\nexport interface RuntimeManifest {\n  name?: \"node\" | \"process\";\n  image?: string;\n  version?: string;\n  command: string[];\n}\n\nexport interface FilesystemPermissionsManifest {\n  read?: string[];\n  write?: string[];\n}\n\nexport interface EnvironmentPermissionsManifest {\n  allow?: string[];\n}\n\nexport interface PermissionsManifest {\n  filesystem?: FilesystemPermissionsManifest;\n  network?: boolean;\n  environment?: EnvironmentPermissionsManifest;\n  enforcement?: \"advisory\" | \"required\";\n}\n\ninterface LegacyPermissionsManifest extends PermissionsManifest {\n  env?: string[];\n}\n\nexport interface FindingsManifest {\n  format?: \"adversary.review.v1\";\n}\n\nexport interface AdversaryManifest {\n  name: string;\n  version?: string;\n  description?: string;\n  triggers?: TriggerManifest;\n  detection?: DetectionManifest;\n  runtime: RuntimeManifest;\n  permissions?: PermissionsManifest;\n  findings?: FindingsManifest;\n}\n\ninterface ParsedAdversaryManifest extends Omit<AdversaryManifest, \"permissions\"> {\n  permissions?: LegacyPermissionsManifest;\n}\n\nexport class ManifestValidationError extends Error {\n  readonly issues: string[];\n\n  constructor(message: string, issues: string[] = []) {\n    super(message);\n    this.name = \"ManifestValidationError\";\n    this.issues = issues;\n  }\n}\n\nlet manifestValidator: ValidateFunction<ParsedAdversaryManifest> | undefined;\n\nexport function parseAdversaryManifest(source: string | Uint8Array): AdversaryManifest {\n  const text = typeof source === \"string\" ? source : new TextDecoder().decode(source);\n  const size = Buffer.byteLength(text, \"utf8\");\n  if (size > ADVERSARY_MANIFEST_MAX_BYTES) {\n    throw new ManifestValidationError(\n      `adversary.yaml is too large: ${size} bytes exceeds ${ADVERSARY_MANIFEST_MAX_BYTES} bytes`,\n    );\n  }\n\n  const documents = parseAllDocuments(text, {\n    prettyErrors: true,\n    uniqueKeys: true,\n  });\n  if (documents.length !== 1) {\n    throw new ManifestValidationError(\"manifest must contain exactly one YAML document\");\n  }\n  const document = documents[0];\n  if (document === undefined || document.contents === null) {\n    throw new ManifestValidationError(\"manifest is empty\");\n  }\n  if (document.errors.length > 0) {\n    const issues = document.errors.map((error) => error.message);\n    throw new ManifestValidationError(`decode manifest YAML: ${issues.join(\"; \")}`, issues);\n  }\n\n  let value: unknown;\n  try {\n    value = document.toJS({ maxAliasCount: 0 });\n  } catch (error) {\n    const issue = error instanceof Error ? error.message : String(error);\n    throw new ManifestValidationError(`decode manifest YAML: ${issue}`, [issue]);\n  }\n  return validateAdversaryManifest(value);\n}\n\nexport function validateAdversaryManifest(value: unknown): AdversaryManifest {\n  const validator = getManifestValidator();\n  if (!validator(value)) {\n    const issues = (validator.errors ?? []).map(formatSchemaError);\n    throw new ManifestValidationError(`invalid adversary manifest: ${issues.join(\"; \")}`, issues);\n  }\n  return normalizeLegacyPermissions(value);\n}\n\nfunction getManifestValidator(): ValidateFunction<ParsedAdversaryManifest> {\n  if (manifestValidator !== undefined) return manifestValidator;\n  const schema = JSON.parse(\n    readFileSync(new URL(\"../schemas/adversary.manifest.v1.schema.json\", import.meta.url), \"utf8\"),\n  );\n  manifestValidator = new Ajv2020({\n    allErrors: true,\n    strict: true,\n  }).compile<ParsedAdversaryManifest>(schema);\n  return manifestValidator;\n}\n\nfunction formatSchemaError(error: ErrorObject): string {\n  const path = `manifest${error.instancePath.replaceAll(\"/\", \".\")}`;\n  if (error.keyword === \"pattern\" && error.schemaPath === \"#/$defs/portableProjectPath/pattern\") {\n    return `${path} must be a portable project-relative path`;\n  }\n  if (error.keyword === \"additionalProperties\") {\n    return `${path} contains unknown field ${JSON.stringify(error.params.additionalProperty)}`;\n  }\n  if (error.keyword === \"required\") {\n    return `${path} is missing required field ${JSON.stringify(error.params.missingProperty)}`;\n  }\n  return `${path} ${error.message ?? `failed ${error.keyword} validation`}`;\n}\n\nfunction normalizeLegacyPermissions(manifest: ParsedAdversaryManifest): AdversaryManifest {\n  if (manifest.permissions?.env === undefined) return manifest;\n  const { env, ...permissions } = manifest.permissions;\n  return {\n    ...manifest,\n    permissions: {\n      ...permissions,\n      environment: { allow: env },\n    },\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adversarylabs/sdk",
-  "version": "0.1.5",
+  "version": "0.1.8",
   "description": "Small TypeScript SDK for authoring Adversaries.",
   "type": "module",
   "license": "MIT",
@@ -22,6 +22,7 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./schemas/adversary.manifest.v1": "./schemas/adversary.manifest.v1.schema.json",
     "./schemas/adversary.input.v1": "./schemas/adversary.input.v1.schema.json",
     "./schemas/adversary.review.v1": "./schemas/adversary.review.v1.schema.json"
   },
@@ -44,6 +45,7 @@
     "vitest": "^4.1.10"
   },
   "dependencies": {
-    "ajv": "^8.20.0"
+    "ajv": "^8.20.0",
+    "yaml": "^2.8.1"
   }
 }

package/schemas/adversary.input.v1.schema.json

@@ -16,6 +16,37 @@
           "minLength": 1
         }
       }
+    },
+    "change": {
+      "type": ["object", "null"],
+      "additionalProperties": true,
+      "description": "The requested review scope. Null or absent when the runner asked for a full-target review without a change context.",
+      "properties": {
+        "type": {
+          "type": "string",
+          "description": "Change representation reported by the runner; \"diff\" today."
+        },
+        "base_ref": {
+          "type": "string",
+          "description": "Base revision of the reviewed change."
+        },
+        "head_ref": {
+          "type": "string",
+          "description": "Head revision of the reviewed change, or the WORKTREE sentinel for the uncommitted worktree."
+        },
+        "scan_mode": {
+          "type": "string",
+          "enum": ["changed", "all"],
+          "description": "\"changed\" restricts review to the change; \"all\" requests the entire target."
+        },
+        "changed_files": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Repository-relative paths the runner identified as changed."
+        }
+      }
     }
   }
 }

package/schemas/adversary.manifest.v1.schema.json

@@ -0,0 +1,159 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://adversary.dev/schemas/adversary.manifest.v1.schema.json",
+  "title": "Adversary Manifest v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["name", "runtime"],
+  "properties": {
+    "name": {
+      "type": "string",
+      "pattern": "^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?(?:/[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?)*$"
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-((?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\\+([0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*))?$"
+    },
+    "description": { "type": "string" },
+    "triggers": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "manual": { "type": "boolean" },
+        "files_changed": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/normalizedString" }
+        }
+      }
+    },
+    "detection": {
+      "type": "object",
+      "additionalProperties": false,
+      "minProperties": 1,
+      "properties": {
+        "files": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/normalizedString" }
+        },
+        "entrypoint": { "$ref": "#/$defs/portableProjectPath" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["command"],
+      "oneOf": [
+        {
+          "required": ["image"],
+          "properties": {
+            "image": true,
+            "name": false,
+            "version": false
+          }
+        },
+        {
+          "required": ["name", "version"],
+          "properties": {
+            "name": true,
+            "version": true,
+            "image": false
+          }
+        }
+      ],
+      "properties": {
+        "name": { "enum": ["node", "process"] },
+        "image": {
+          "type": "string",
+          "pattern": "^(?:(?:localhost|\\[[0-9A-Fa-f:]+\\]|[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*)(?::[0-9]{1,5})?/)?[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*(?:/[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*)*(?::[A-Za-z0-9_][A-Za-z0-9_.-]{0,127})?(?:@(?:sha256:[a-f0-9]{64}|sha384:[a-f0-9]{96}|sha512:[a-f0-9]{128}))?$"
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^(?:node@|v)?(?:[0-9]+(?:\\.[0-9]+){0,2}|[<>=~^*xX0-9., |+\\-]+)$"
+        },
+        "command": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/normalizedString" }
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "filesystem": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "read": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": { "$ref": "#/$defs/projectPath" }
+            },
+            "write": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": { "$ref": "#/$defs/projectPath" }
+            }
+          }
+        },
+        "network": { "type": "boolean" },
+        "environment": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "allow": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+              }
+            }
+          }
+        },
+        "env": {
+          "description": "Deprecated alias for environment.allow.",
+          "deprecated": true,
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+          }
+        },
+        "enforcement": { "enum": ["advisory", "required"] }
+      },
+      "not": {
+        "properties": {
+          "environment": true,
+          "env": true
+        },
+        "required": ["environment", "env"]
+      }
+    },
+    "findings": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "format": { "const": "adversary.review.v1" }
+      }
+    }
+  },
+  "$defs": {
+    "normalizedString": {
+      "type": "string",
+      "pattern": "^[^\\x00\\s](?:[^\\x00]*[^\\x00\\s])?$"
+    },
+    "portableProjectPath": {
+      "type": "string",
+      "pattern": "^(?!\\s)(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!(?:\\.{1,2})(?:/|$))(?!.*(?:/\\.{1,2})(?:/|$))(?!.*//)(?!.*\\s$)[^/]+(?:/[^/]+)*$"
+    },
+    "projectPath": {
+      "type": "string",
+      "pattern": "^(?:\\.|[^./:\\\\x00\\s](?:[^/:\\\\x00]*[^/:\\\\x00\\s])?|\\.[^./:\\\\x00\\s](?:[^/:\\\\x00]*[^/:\\\\x00\\s])?)(?:/(?:[^./:\\\\x00\\s](?:[^/:\\\\x00]*[^/:\\\\x00\\s])?|\\.[^./:\\\\x00\\s](?:[^/:\\\\x00]*[^/:\\\\x00\\s])?))*$"
+    }
+  }
+}

package/templates/basic/README.md

@@ -2,6 +2,11 @@
 
 Minimal TypeScript Adversary built with `@adversarylabs/sdk`.
 
+## Automatic detection
+
+`adversary auto` selects this starter when TypeScript files change. Adjust `detection.files` in
+`adversary.yaml` to match the technology or domain your adversary reviews.
+
 ```bash
 npm ci
 npm test

package/templates/basic/adversary.yaml

@@ -8,6 +8,11 @@ triggers:
     - "*"
     - "**/*"
 
+detection:
+  files:
+    - "*.ts"
+    - "**/*.ts"
+
 runtime:
   name: node
   version: "22"
@@ -21,7 +26,8 @@ permissions:
     write:
       - .adversary/results
   network: false
-  env: []
+  environment:
+    allow: []
 
 findings:
   format: adversary.review.v1