@kenhkl/agent-moss 0.2.0

package/dist/cli.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/cli.js

@@ -0,0 +1,624 @@
+#!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// node_modules/tsup/assets/esm_shims.js
+import path from "path";
+import { fileURLToPath } from "url";
+var init_esm_shims = __esm({
+  "node_modules/tsup/assets/esm_shims.js"() {
+    "use strict";
+  }
+});
+
+// src/engine/heuristic.ts
+function runHeuristicCheck(input) {
+  const command = `${input.aNext.actionType}: ${input.aNext.actionDetail}`;
+  const matched = [];
+  let highestSeverity = "low";
+  for (const rule of DANGEROUS_PATTERNS) {
+    if (rule.pattern.test(command)) {
+      matched.push(rule.description);
+      if (severityRank(rule.severity) > severityRank(highestSeverity)) {
+        highestSeverity = rule.severity;
+      }
+    }
+  }
+  if (matched.length > 0) {
+    return {
+      allowed: false,
+      reason: `\u68C0\u6D4B\u5230\u9AD8\u5371\u64CD\u4F5C: ${matched.join(", ")}`,
+      riskLevel: highestSeverity,
+      riskType: "dangerous_command",
+      confidence: 95,
+      source: "heuristic",
+      violatedLayers: ["1"]
+    };
+  }
+  return null;
+}
+function severityRank(s) {
+  const ranks = { low: 1, medium: 2, high: 3, critical: 4 };
+  return ranks[s] || 0;
+}
+var DANGEROUS_PATTERNS;
+var init_heuristic = __esm({
+  "src/engine/heuristic.ts"() {
+    "use strict";
+    init_esm_shims();
+    DANGEROUS_PATTERNS = [
+      { pattern: /rm\s+-rf\s+\/\s*$|rm\s+-rf\s+\/\*/, severity: "critical", description: "\u9012\u5F52\u5F3A\u5236\u5220\u9664\u6839\u76EE\u5F55" },
+      { pattern: /rm\s+-rf\s+\/home\/\*|rm\s+-rf\s+\/root/, severity: "critical", description: "\u5220\u9664\u7528\u6237\u4E3B\u76EE\u5F55" },
+      { pattern: /rm\s+-rf\s+\/etc|rm\s+-rf\s+\/var/, severity: "critical", description: "\u5220\u9664\u7CFB\u7EDF\u76EE\u5F55" },
+      { pattern: /curl\s+.*\|\s*(bash|sh|zsh)/, severity: "critical", description: "curl pipe shell \u6267\u884C" },
+      { pattern: /wget\s+.*\|\s*(bash|sh)/, severity: "critical", description: "wget pipe shell \u6267\u884C" },
+      { pattern: />\s*\/dev\/sda|dd\s+if=.*of=\/dev\//, severity: "critical", description: "\u78C1\u76D8\u76F4\u63A5\u5199\u5165" },
+      { pattern: /mkfs\./, severity: "critical", description: "\u683C\u5F0F\u5316\u6587\u4EF6\u7CFB\u7EDF" },
+      { pattern: /chmod\s+777\s+\//, severity: "high", description: "\u4FEE\u6539\u6839\u76EE\u5F55\u6743\u9650\u4E3A777" },
+      { pattern: /chown\s+-R\s+\w+:\w+\s+\//, severity: "high", description: "\u9012\u5F52\u4FEE\u6539\u6839\u76EE\u5F55\u6240\u6709\u8005" },
+      { pattern: /eval\s+\$\(curl|eval\s+\$\(wget/, severity: "critical", description: "eval \u8FDC\u7A0B\u4EE3\u7801\u6267\u884C" },
+      { pattern: /\/dev\/tcp\/|bash\s+-i\s+>&/, severity: "critical", description: "\u53CD\u5F39 Shell" },
+      { pattern: /nc\s+-[el]\s+.*\d{1,5}/, severity: "high", description: "Netcat \u53CD\u5F39\u8FDE\u63A5" },
+      { pattern: /:\(\)\s*\{.*:\|:&.*\};:/, severity: "critical", description: "Fork Bomb" },
+      { pattern: /sudo\s+rm\s+-rf/, severity: "high", description: "sudo \u5F3A\u5236\u5220\u9664" },
+      { pattern: /git\s+clone\s+.*\|.*bash/, severity: "high", description: "git clone pipe shell" },
+      { pattern: /pip\s+install\s+.*\|\s*bash/, severity: "high", description: "pip install pipe shell" },
+      { pattern: /npm\s+install\s+-g\s+.*\|\s*bash/, severity: "high", description: "npm install pipe shell" },
+      { pattern: /export\s+.*(?:TOKEN|KEY|SECRET|PASSWORD)/i, severity: "medium", description: "\u5BFC\u51FA\u654F\u611F\u51ED\u8BC1" },
+      { pattern: /base64\s+-d\s+.*\|\s*bash/, severity: "critical", description: "base64 \u89E3\u7801\u6267\u884C" }
+    ];
+  }
+});
+
+// src/engine/logic-rules.ts
+function runLogicCheck(input) {
+  const { actionHistory, aNext, cwd } = input;
+  const command = aNext.actionDetail;
+  const resolvedCwd = cwd || "/";
+  if (aNext.actionType === "write" || aNext.actionType === "file_write" || aNext.actionType === "write_to_file") {
+    const hadRead = actionHistory.some(
+      (h) => (h.actionType === "read" || h.actionType === "file_read" || h.actionType === "read_file") && h.actionDetail.includes(cwd)
+    );
+    if (!hadRead && actionHistory.length === 0) {
+    }
+  }
+  if (containsSensitivePath(command, resolvedCwd)) {
+    return {
+      allowed: false,
+      reason: "\u5C1D\u8BD5\u8BBF\u95EE\u7CFB\u7EDF\u654F\u611F\u8DEF\u5F84",
+      riskLevel: "high",
+      riskType: "sensitive_path_access",
+      confidence: 90,
+      source: "logic_rule",
+      violatedLayers: ["2"]
+    };
+  }
+  if (command.includes("sudo") || command.includes("su -") || command.includes("chmod u+s") || command.includes("setuid")) {
+    const adminContext = actionHistory.some(
+      (h) => h.actionDetail.includes("sudo") || h.actionDetail.includes("apt") || h.actionDetail.includes("systemctl")
+    );
+    if (!adminContext && actionHistory.length === 0) {
+      return {
+        allowed: false,
+        reason: "\u68C0\u6D4B\u5230\u63D0\u6743\u64CD\u4F5C\uFF0C\u672A\u53D1\u73B0\u5408\u6CD5\u7BA1\u7406\u4E0A\u4E0B\u6587",
+        riskLevel: "high",
+        riskType: "privilege_escalation",
+        confidence: 85,
+        source: "logic_rule",
+        violatedLayers: ["2"]
+      };
+    }
+  }
+  if (command.includes("ssh") || command.includes("scp") || command.includes("rsync")) {
+    const targetHost = extractRemoteHost(command);
+    if (targetHost && !isLocalHost(targetHost)) {
+      return {
+        allowed: false,
+        reason: `\u5C1D\u8BD5\u6A2A\u5411\u79FB\u52A8\u5230\u8FDC\u7A0B\u4E3B\u673A: ${targetHost}`,
+        riskLevel: "medium",
+        riskType: "lateral_movement",
+        confidence: 80,
+        source: "logic_rule",
+        violatedLayers: ["2"]
+      };
+    }
+  }
+  return null;
+}
+function containsSensitivePath(command, cwd) {
+  const expandedCwd = cwd.replace(/^~/, process.env.HOME || "/home/user");
+  for (const p of ROOT_SENSITIVE_PATHS) {
+    if (command.includes(p)) return true;
+  }
+  for (const p of HOME_SENSITIVE_PATHS) {
+    if (command.includes(p) || command.includes(`${expandedCwd}/${p}`)) return true;
+  }
+  if ((command.includes("rm ") || command.includes("unlink")) && (command.includes("/etc/") || command.includes("/root/") || command.includes("/var/log/"))) {
+    return true;
+  }
+  return false;
+}
+function extractRemoteHost(command) {
+  const m = command.match(/(?:ssh|scp|rsync)\s+(?:-[\w]+\s+)*(\S+@\S+|\b(?!-)[\w.-]+\b)/);
+  return m ? m[1] : null;
+}
+function isLocalHost(host) {
+  const localNames = ["localhost", "127.0.0.1", "::1", process.env.HOSTNAME || "", "0.0.0.0"];
+  return localNames.includes(host.replace(/.*@/, ""));
+}
+var ROOT_SENSITIVE_PATHS, HOME_SENSITIVE_PATHS;
+var init_logic_rules = __esm({
+  "src/engine/logic-rules.ts"() {
+    "use strict";
+    init_esm_shims();
+    ROOT_SENSITIVE_PATHS = [
+      "/etc/shadow",
+      "/etc/passwd",
+      "/etc/sudoers",
+      "/root/.ssh",
+      "/root/.bashrc",
+      "/boot",
+      "/sys",
+      "/proc"
+    ];
+    HOME_SENSITIVE_PATHS = [
+      ".ssh/id_rsa",
+      ".ssh/authorized_keys",
+      ".aws/credentials",
+      ".gitconfig",
+      ".gnupg"
+    ];
+  }
+});
+
+// src/config.ts
+function getLLMConfig() {
+  return llmConfig;
+}
+function isLLMAvailable() {
+  return llmConfig.apiKey.length > 0;
+}
+var llmConfig;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    init_esm_shims();
+    llmConfig = {
+      provider: "openai",
+      baseUrl: process.env.AGENT_MOSS_LLM_BASE_URL || "https://api.openai.com/v1",
+      apiKey: process.env.AGENT_MOSS_LLM_API_KEY || "",
+      model: process.env.AGENT_MOSS_LLM_MODEL || "gpt-4o",
+      temperature: parseFloat(process.env.AGENT_MOSS_LLM_TEMPERATURE || "0.1"),
+      maxTokens: parseInt(process.env.AGENT_MOSS_LLM_MAX_TOKENS || "4096", 10)
+    };
+  }
+});
+
+// src/engine/skill-loader.ts
+import { readFileSync, readdirSync, existsSync } from "fs";
+import { resolve, dirname } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function loadSkills() {
+  if (cachedSkills) return cachedSkills;
+  if (!existsSync(SKILLS_DIR)) {
+    console.warn("[AgentMoss] Skills directory not found:", SKILLS_DIR);
+    cachedSkills = [];
+    return cachedSkills;
+  }
+  const files = readdirSync(SKILLS_DIR).filter((f) => f.endsWith(".md"));
+  cachedSkills = files.map((f) => {
+    const content = readFileSync(resolve(SKILLS_DIR, f), "utf-8");
+    return `### ${f.replace(".md", "")}
+${content}`;
+  });
+  console.log(`[AgentMoss] Loaded ${cachedSkills.length} skills`);
+  return cachedSkills;
+}
+var __filename2, __dirname2, SKILLS_DIR, cachedSkills;
+var init_skill_loader = __esm({
+  "src/engine/skill-loader.ts"() {
+    "use strict";
+    init_esm_shims();
+    __filename2 = fileURLToPath2(import.meta.url);
+    __dirname2 = dirname(__filename2);
+    SKILLS_DIR = resolve(__dirname2, "../../agent_moss/skills");
+    cachedSkills = null;
+  }
+});
+
+// src/engine/template-loader.ts
+import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { resolve as resolve2, dirname as dirname2 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
+function loadTemplates() {
+  if (cachedTemplates) return cachedTemplates;
+  cachedTemplates = {};
+  if (!existsSync2(TEMPLATES_DIR)) {
+    console.warn("[AgentMoss] Templates directory not found:", TEMPLATES_DIR);
+    return cachedTemplates;
+  }
+  for (const file of TEMPLATE_FILES) {
+    const filePath = resolve2(TEMPLATES_DIR, file);
+    if (existsSync2(filePath)) {
+      const key = file.replace(".txt", "").replace("_template", "");
+      cachedTemplates[key] = readFileSync2(filePath, "utf-8");
+    }
+  }
+  console.log(`[AgentMoss] Loaded ${Object.keys(cachedTemplates).length} templates`);
+  return cachedTemplates;
+}
+var __filename3, __dirname3, TEMPLATES_DIR, TEMPLATE_FILES, cachedTemplates;
+var init_template_loader = __esm({
+  "src/engine/template-loader.ts"() {
+    "use strict";
+    init_esm_shims();
+    __filename3 = fileURLToPath3(import.meta.url);
+    __dirname3 = dirname2(__filename3);
+    TEMPLATES_DIR = resolve2(__dirname3, "../../agent_moss/templates");
+    TEMPLATE_FILES = ["prompt1_template.txt", "prompt2_template.txt", "security_judge_template.txt"];
+    cachedTemplates = null;
+  }
+});
+
+// src/engine/llm-analyzer.ts
+import OpenAI from "openai";
+async function runLLMAnalysis(input, previous) {
+  if (!isLLMAvailable()) {
+    console.log("[AgentMoss] LLM not configured, skipping deep analysis");
+    return {
+      allowed: true,
+      reason: "LLM \u672A\u914D\u7F6E\uFF0C\u8DF3\u8FC7\u6DF1\u5C42\u5206\u6790",
+      riskLevel: "low",
+      riskType: "",
+      confidence: 50,
+      source: "llm",
+      violatedLayers: []
+    };
+  }
+  const config = getLLMConfig();
+  const cacheKey = `${input.aNext.actionType}:${input.aNext.actionDetail}`;
+  const cached = llmCache.get(cacheKey);
+  if (cached) {
+    console.log("[AgentMoss] LLM cache hit");
+    return cached;
+  }
+  const skills = loadSkills();
+  const templates = loadTemplates();
+  const prompt = buildPrompt(input, previous, skills, templates);
+  const result = await analyzeWithLLM(prompt, config);
+  if (llmCache.size >= LLM_CACHE_MAX) {
+    const firstKey = llmCache.keys().next().value;
+    if (firstKey) llmCache.delete(firstKey);
+  }
+  llmCache.set(cacheKey, result);
+  return result;
+}
+function buildPrompt(input, previous, skills, templates) {
+  const skillContext = skills.length > 0 ? skills.join("\n---\n") : "(\u65E0\u53EF\u7528 Skill)";
+  const historyStr = input.actionHistory.map((h, i) => `${i + 1}. [${h.actionType}] ${h.actionDetail}`).join("\n") || "(\u65E0\u5386\u53F2\u64CD\u4F5C)";
+  const templateName = previous.heuristic || previous.logic ? "prompt2" : "prompt1";
+  const baseTemplate = templates[templateName] || templates["prompt1"] || "";
+  return `${baseTemplate}
+
+## \u5F53\u524D\u64CD\u4F5C\u4E0A\u4E0B\u6587
+- \u4F1A\u8BDD ID: ${input.sessionId}
+- \u7528\u6237\u4EFB\u52A1: ${input.promptSession || "\u672A\u6307\u5B9A"}
+- \u64CD\u4F5C\u7CFB\u7EDF: ${input.osType}
+- \u5DE5\u4F5C\u76EE\u5F55: ${input.cwd || "/"}
+- \u64CD\u4F5C\u539F\u56E0: ${input.reason || "\u672A\u8BF4\u660E"}
+- \u5386\u53F2\u64CD\u4F5C\u5E8F\u5217:
+${historyStr}
+
+- \u5373\u5C06\u6267\u884C\u7684\u64CD\u4F5C:
+  \u7C7B\u578B: ${input.aNext.actionType}
+  \u8BE6\u60C5: ${input.aNext.actionDetail}
+
+## \u53EF\u7528\u5B89\u5168 Skill
+${skillContext}
+
+\u8BF7\u6839\u636E\u4EE5\u4E0A\u4FE1\u606F\uFF0C\u5BF9\u5373\u5C06\u6267\u884C\u7684\u64CD\u4F5C\u8FDB\u884C\u5B89\u5168\u5224\u65AD\u3002\u4F60\u5FC5\u987B\u8F93\u51FA\u4E25\u683C\u7684 JSON \u683C\u5F0F\uFF0C
+\u4E0D\u8981\u5305\u542B\u4EFB\u4F55\u5176\u4ED6\u6587\u5B57\u3001\u6CE8\u91CA\u6216 markdown \u6807\u8BB0\u3002
+
+\u8F93\u51FA\u683C\u5F0F:
+{"allowed": true/false, "reason": "\u5224\u65AD\u7406\u7531", "riskLevel": "low|medium|high|critical", "riskType": "\u98CE\u9669\u7C7B\u578B", "confidence": 0-100}`;
+}
+async function analyzeWithLLM(prompt, config) {
+  console.log(`[AgentMoss] LLM analyzing with model: ${config.model}, url: ${config.baseUrl}`);
+  const client = new OpenAI({
+    baseURL: config.baseUrl,
+    apiKey: config.apiKey,
+    timeout: 3e4
+  });
+  try {
+    const response = await client.chat.completions.create({
+      model: config.model,
+      temperature: config.temperature || 0.1,
+      max_tokens: config.maxTokens || 1024,
+      messages: [
+        { role: "system", content: "\u4F60\u662F\u4E00\u4E2A AI Agent \u5B89\u5168\u5BA1\u8BA1\u4E13\u5BB6\u3002\u4F60\u7684\u4EFB\u52A1\u662F\u5206\u6790\u5373\u5C06\u6267\u884C\u7684\u547D\u4EE4\u662F\u5426\u5B89\u5168\u3002\u4F60\u5FC5\u987B\u53EA\u8F93\u51FA\u7EAF JSON\uFF0C\u4E0D\u8981\u5305\u542B\u4EFB\u4F55 markdown \u6807\u8BB0\u3001\u4EE3\u7801\u5757\u6216\u5176\u4ED6\u6587\u5B57\u3002" },
+        { role: "user", content: prompt }
+      ]
+    });
+    const content = response.choices[0]?.message?.content || "{}";
+    console.log(`[AgentMoss] LLM raw response: ${content.substring(0, 300)}`);
+    let jsonStr = content.trim();
+    if (jsonStr.startsWith("```")) {
+      jsonStr = jsonStr.replace(/^```[\w]*\n?/, "").replace(/\n?```$/, "");
+    }
+    const parsed = JSON.parse(jsonStr);
+    return {
+      allowed: parsed.allowed !== false,
+      // default to Allow if missing
+      reason: parsed.reason || "LLM \u5206\u6790\u5B8C\u6210",
+      riskLevel: ["low", "medium", "high", "critical"].includes(parsed.riskLevel) ? parsed.riskLevel : "low",
+      riskType: parsed.riskType || "",
+      confidence: typeof parsed.confidence === "number" ? Math.min(100, Math.max(0, parsed.confidence)) : 70,
+      source: "llm",
+      violatedLayers: ["3"]
+    };
+  } catch (err) {
+    console.error("[AgentMoss] LLM call failed:", err.message);
+    return {
+      allowed: true,
+      reason: `LLM \u8C03\u7528\u5931\u8D25: ${err.message}`,
+      riskLevel: "low",
+      riskType: "",
+      confidence: 30,
+      source: "llm",
+      violatedLayers: []
+    };
+  }
+}
+var llmCache, LLM_CACHE_MAX;
+var init_llm_analyzer = __esm({
+  "src/engine/llm-analyzer.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_config();
+    init_skill_loader();
+    init_template_loader();
+    llmCache = /* @__PURE__ */ new Map();
+    LLM_CACHE_MAX = 200;
+  }
+});
+
+// src/engine/coordinator.ts
+var coordinator_exports = {};
+__export(coordinator_exports, {
+  runAnalysis: () => runAnalysis
+});
+async function runAnalysis(input) {
+  const heuristicResult = runHeuristicCheck(input);
+  if (heuristicResult && !heuristicResult.allowed) {
+    return heuristicResult;
+  }
+  const logicResult = runLogicCheck(input);
+  if (logicResult && !logicResult.allowed) {
+    return logicResult;
+  }
+  const llmResult = await runLLMAnalysis(input, {
+    heuristic: heuristicResult,
+    logic: logicResult
+  });
+  return llmResult;
+}
+var init_coordinator = __esm({
+  "src/engine/coordinator.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_heuristic();
+    init_logic_rules();
+    init_llm_analyzer();
+  }
+});
+
+// src/cli.ts
+init_esm_shims();
+
+// src/server.ts
+init_esm_shims();
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+
+// src/routes.ts
+init_esm_shims();
+
+// src/models.ts
+init_esm_shims();
+import { z } from "zod";
+var ActionItemSchema = z.object({
+  action_type: z.string().describe("Action type, e.g. bash, file_read, file_write"),
+  action_detail: z.string().describe("Action detail / command content")
+});
+var AnalyzeRequestSchema = z.object({
+  session_id: z.string().describe("Session / agent unique identifier"),
+  prompt_session: z.string().default("").describe("User original prompt"),
+  action_history: z.array(ActionItemSchema).default([]).describe("Historical action sequence"),
+  a_next: ActionItemSchema.describe("Next action to be executed"),
+  reason: z.string().default("").describe("Reason for executing this action"),
+  os_type: z.string().default("").describe("OS type: 'linux', 'windows', or empty for auto-detect"),
+  cwd: z.string().default("").describe("Current working directory"),
+  metadata: z.record(z.unknown()).optional().describe("Extended metadata")
+});
+var AnalyzeResponseSchema = z.object({
+  decision: z.enum(["Allow", "Deny"]).describe("Allow or Deny"),
+  reason: z.string().describe("Decision reason"),
+  risk_level: z.enum(["low", "medium", "high", "critical"]).default("low"),
+  risk_type: z.string().default(""),
+  violated_layers: z.array(z.string()).default([]),
+  policy: z.string().default(""),
+  violated_policy: z.string().default(""),
+  confidence: z.number().int().min(0).max(100).default(100),
+  analysis_duration_ms: z.number().default(0)
+});
+var HealthResponseSchema = z.object({
+  status: z.string().default("healthy"),
+  version: z.string().default("0.2.0")
+});
+
+// src/routes.ts
+init_coordinator();
+async function healthRoute(c) {
+  return c.json(HealthResponseSchema.parse({}));
+}
+async function analyzeRoute(c) {
+  const t0 = performance.now();
+  try {
+    const body = await c.req.json();
+    const req = AnalyzeRequestSchema.parse(body);
+    let osType = req.os_type;
+    if (!osType) {
+      osType = process.platform === "win32" ? "windows" : "linux";
+    }
+    const result = await runAnalysis({
+      sessionId: req.session_id,
+      promptSession: req.prompt_session,
+      actionHistory: req.action_history.map((h) => ({
+        actionType: h.action_type,
+        actionDetail: h.action_detail
+      })),
+      aNext: {
+        actionType: req.a_next.action_type,
+        actionDetail: req.a_next.action_detail
+      },
+      reason: req.reason,
+      osType,
+      cwd: req.cwd
+    });
+    const durationMs = performance.now() - t0;
+    return c.json(
+      AnalyzeResponseSchema.parse({
+        decision: result.allowed ? "Allow" : "Deny",
+        reason: result.reason,
+        risk_level: result.riskLevel,
+        risk_type: result.riskType,
+        violated_layers: result.violatedLayers,
+        policy: "",
+        violated_policy: "",
+        confidence: result.confidence,
+        analysis_duration_ms: Math.round(durationMs * 10) / 10
+      })
+    );
+  } catch (err) {
+    console.error("[AgentMoss] Analysis error:", err);
+    if (err instanceof SyntaxError) {
+      return c.json({ error: "Invalid JSON", detail: err.message }, 400);
+    }
+    if (err?.issues) {
+      return c.json({ error: "Validation error", detail: err.issues }, 400);
+    }
+    return c.json({ error: "Internal error", detail: String(err) }, 500);
+  }
+}
+
+// src/server.ts
+function createApp() {
+  const app = new Hono();
+  app.use("*", cors({ origin: "*", allowMethods: ["GET", "POST", "OPTIONS"], allowHeaders: ["*"] }));
+  app.use("*", logger());
+  app.get("/api/v1/health", healthRoute);
+  app.post("/api/v1/analyze", analyzeRoute);
+  return app;
+}
+
+// src/cli.ts
+function printHelp() {
+  console.log(`AgentMoss security analysis engine (TypeScript v0.2.0)
+
+Commands:
+  init                  Generate input.json template
+  analyze <input>       Run security analysis on input JSON
+  server                Start HTTP API server
+
+Server options:
+  --host <host>         Listen host (default: 127.0.0.1)
+  --port <port>         Listen port (default: 9090)
+`);
+}
+async function main() {
+  const args = process.argv.slice(2);
+  const command = args[0];
+  if (!command || command === "--help" || command === "-h") {
+    printHelp();
+    process.exit(command ? 0 : 1);
+  }
+  switch (command) {
+    case "init": {
+      const output = args[2] || "input.json";
+      const fs = await import("fs");
+      const template = {
+        session_id: "my-session-001",
+        prompt_session: "Read /var/log/app.log and analyze errors",
+        action_history: [],
+        a_next: { action_type: "bash", action_detail: "cat /var/log/app.log" },
+        reason: "Need to read log file for error analysis",
+        os_type: "",
+        cwd: "/home/user/project"
+      };
+      fs.writeFileSync(output, JSON.stringify(template, null, 2), "utf-8");
+      console.log(`Template written to ${output}`);
+      break;
+    }
+    case "analyze": {
+      if (!args[1]) {
+        console.error("Usage: agent-moss analyze <input.json>");
+        process.exit(1);
+      }
+      const fs = await import("fs");
+      const path2 = await import("path");
+      const { runAnalysis: runAnalysis2 } = await Promise.resolve().then(() => (init_coordinator(), coordinator_exports));
+      const filePath = path2.resolve(args[1]);
+      const data = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+      const result = await runAnalysis2({
+        sessionId: data.session_id || "unknown",
+        promptSession: data.prompt_session || "",
+        actionHistory: (data.action_history || []).map((h) => ({
+          actionType: h.action_type || h.name || "",
+          actionDetail: h.action_detail || ""
+        })),
+        aNext: {
+          actionType: data.a_next?.action_type || "",
+          actionDetail: data.a_next?.action_detail || ""
+        },
+        reason: data.reason || "",
+        osType: data.os_type || (process.platform === "win32" ? "windows" : "linux"),
+        cwd: data.cwd || process.cwd()
+      });
+      console.log(JSON.stringify(result, null, 2));
+      process.exit(result.allowed ? 0 : 1);
+      break;
+    }
+    case "server": {
+      let host = "127.0.0.1";
+      let port = 9090;
+      for (let i = 1; i < args.length; i++) {
+        if (args[i] === "--host" && args[i + 1]) host = args[++i];
+        else if (args[i] === "--port" && args[i + 1]) port = parseInt(args[++i], 10);
+      }
+      const { serve } = await import("@hono/node-server");
+      const app = createApp();
+      console.log(`AgentMoss HTTP server on ${host}:${port}`);
+      serve({ fetch: app.fetch, hostname: host, port }, (info) => {
+        console.log(`Listening on http://${host}:${port}`);
+      });
+      break;
+    }
+    default:
+      console.error(`Unknown command: ${command}`);
+      printHelp();
+      process.exit(1);
+  }
+}
+main().catch((err) => {
+  console.error("Fatal error:", err);
+  process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../node_modules/tsup/assets/esm_shims.js","../src/engine/heuristic.ts","../src/engine/logic-rules.ts","../src/config.ts","../src/engine/skill-loader.ts","../src/engine/template-loader.ts","../src/engine/llm-analyzer.ts","../src/engine/coordinator.ts","../src/cli.ts","../src/server.ts","../src/routes.ts","../src/models.ts"],"sourcesContent":["// Shim globals in esm bundle\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst getFilename = () => fileURLToPath(import.meta.url)\nconst getDirname = () => path.dirname(getFilename())\n\nexport const __dirname = /* @__PURE__ */ getDirname()\nexport const __filename = /* @__PURE__ */ getFilename()\n","import { SecurityJudgment, HeuristicResult } from './types';\nimport type { AnalysisInput } from './coordinator';\n\n/**\n * Layer 1: Heuristic static detection.\n * Uses regex patterns to detect dangerous commands and user-defined rules.\n * Runs in < 1ms, no LLM cost.\n */\n\n// High-risk command patterns (synced with Python version)\nconst DANGEROUS_PATTERNS: { pattern: RegExp; severity: string; description: string }[] = [\n  { pattern: /rm\\s+-rf\\s+\\/\\s*$|rm\\s+-rf\\s+\\/\\*/, severity: 'critical', description: '递归强制删除根目录' },\n  { pattern: /rm\\s+-rf\\s+\\/home\\/\\*|rm\\s+-rf\\s+\\/root/, severity: 'critical', description: '删除用户主目录' },\n  { pattern: /rm\\s+-rf\\s+\\/etc|rm\\s+-rf\\s+\\/var/, severity: 'critical', description: '删除系统目录' },\n  { pattern: /curl\\s+.*\\|\\s*(bash|sh|zsh)/, severity: 'critical', description: 'curl pipe shell 执行' },\n  { pattern: /wget\\s+.*\\|\\s*(bash|sh)/, severity: 'critical', description: 'wget pipe shell 执行' },\n  { pattern: />\\s*\\/dev\\/sda|dd\\s+if=.*of=\\/dev\\//, severity: 'critical', description: '磁盘直接写入' },\n  { pattern: /mkfs\\./, severity: 'critical', description: '格式化文件系统' },\n  { pattern: /chmod\\s+777\\s+\\//, severity: 'high', description: '修改根目录权限为777' },\n  { pattern: /chown\\s+-R\\s+\\w+:\\w+\\s+\\//, severity: 'high', description: '递归修改根目录所有者' },\n  { pattern: /eval\\s+\\$\\(curl|eval\\s+\\$\\(wget/, severity: 'critical', description: 'eval 远程代码执行' },\n  { pattern: /\\/dev\\/tcp\\/|bash\\s+-i\\s+>&/, severity: 'critical', description: '反弹 Shell' },\n  { pattern: /nc\\s+-[el]\\s+.*\\d{1,5}/, severity: 'high', description: 'Netcat 反弹连接' },\n  { pattern: /:\\(\\)\\s*\\{.*:\\|:&.*\\};:/, severity: 'critical', description: 'Fork Bomb' },\n  { pattern: /sudo\\s+rm\\s+-rf/, severity: 'high', description: 'sudo 强制删除' },\n  { pattern: /git\\s+clone\\s+.*\\|.*bash/, severity: 'high', description: 'git clone pipe shell' },\n  { pattern: /pip\\s+install\\s+.*\\|\\s*bash/, severity: 'high', description: 'pip install pipe shell' },\n  { pattern: /npm\\s+install\\s+-g\\s+.*\\|\\s*bash/, severity: 'high', description: 'npm install pipe shell' },\n  { pattern: /export\\s+.*(?:TOKEN|KEY|SECRET|PASSWORD)/i, severity: 'medium', description: '导出敏感凭证' },\n  { pattern: /base64\\s+-d\\s+.*\\|\\s*bash/, severity: 'critical', description: 'base64 解码执行' },\n];\n\nexport function runHeuristicCheck(input: AnalysisInput): SecurityJudgment | null {\n  const command = `${input.aNext.actionType}: ${input.aNext.actionDetail}`;\n  const matched: string[] = [];\n  let highestSeverity = 'low';\n\n  // Check dangerous patterns\n  for (const rule of DANGEROUS_PATTERNS) {\n    if (rule.pattern.test(command)) {\n      matched.push(rule.description);\n      if (severityRank(rule.severity) > severityRank(highestSeverity)) {\n        highestSeverity = rule.severity;\n      }\n    }\n  }\n\n  if (matched.length > 0) {\n    return {\n      allowed: false,\n      reason: `检测到高危操作: ${matched.join(', ')}`,\n      riskLevel: highestSeverity as SecurityJudgment['riskLevel'],\n      riskType: 'dangerous_command',\n      confidence: 95,\n      source: 'heuristic',\n      violatedLayers: ['1'],\n    };\n  }\n\n  return null; // No match, pass to next layer\n}\n\nfunction severityRank(s: string): number {\n  const ranks: Record<string, number> = { low: 1, medium: 2, high: 3, critical: 4 };\n  return ranks[s] || 0;\n}\n","import { SecurityJudgment } from './types';\nimport type { AnalysisInput } from './coordinator';\n\n/**\n * Layer 2: Logic rule detection.\n * Checks behavioral patterns: read-before-write, intent consistency,\n * sensitive path access, privilege escalation, and lateral movement.\n * Runs in < 1ms, no LLM cost.\n */\n\nconst ROOT_SENSITIVE_PATHS = [\n  '/etc/shadow',\n  '/etc/passwd',\n  '/etc/sudoers',\n  '/root/.ssh',\n  '/root/.bashrc',\n  '/boot',\n  '/sys',\n  '/proc',\n];\n\nconst HOME_SENSITIVE_PATHS = [\n  '.ssh/id_rsa',\n  '.ssh/authorized_keys',\n  '.aws/credentials',\n  '.gitconfig',\n  '.gnupg',\n];\n\nexport function runLogicCheck(input: AnalysisInput): SecurityJudgment | null {\n  const { actionHistory, aNext, cwd } = input;\n  const command = aNext.actionDetail;\n  const resolvedCwd = cwd || '/';\n\n  // Rule 1: Read-before-write principle\n  if (aNext.actionType === 'write' || aNext.actionType === 'file_write' || aNext.actionType === 'write_to_file') {\n    const hadRead = actionHistory.some(\n      h => (h.actionType === 'read' || h.actionType === 'file_read' || h.actionType === 'read_file') &&\n           h.actionDetail.includes(cwd)\n    );\n    if (!hadRead && actionHistory.length === 0) {\n      // Only flag if there's a history (skip first action)\n    }\n  }\n\n  // Rule 2: Sensitive path access\n  if (containsSensitivePath(command, resolvedCwd)) {\n    return {\n      allowed: false,\n      reason: '尝试访问系统敏感路径',\n      riskLevel: 'high',\n      riskType: 'sensitive_path_access',\n      confidence: 90,\n      source: 'logic_rule',\n      violatedLayers: ['2'],\n    };\n  }\n\n  // Rule 3: Privilege escalation detection\n  if (command.includes('sudo') || command.includes('su -') || command.includes('chmod u+s') || command.includes('setuid')) {\n    // Check if previous actions suggest legitimate admin work\n    const adminContext = actionHistory.some(h =>\n      h.actionDetail.includes('sudo') || h.actionDetail.includes('apt') || h.actionDetail.includes('systemctl')\n    );\n    if (!adminContext && actionHistory.length === 0) {\n      return {\n        allowed: false,\n        reason: '检测到提权操作，未发现合法管理上下文',\n        riskLevel: 'high',\n        riskType: 'privilege_escalation',\n        confidence: 85,\n        source: 'logic_rule',\n        violatedLayers: ['2'],\n      };\n    }\n  }\n\n  // Rule 4: Lateral movement detection\n  if (command.includes('ssh') || command.includes('scp') || command.includes('rsync')) {\n    const targetHost = extractRemoteHost(command);\n    if (targetHost && !isLocalHost(targetHost)) {\n      return {\n        allowed: false,\n        reason: `尝试横向移动到远程主机: ${targetHost}`,\n        riskLevel: 'medium',\n        riskType: 'lateral_movement',\n        confidence: 80,\n        source: 'logic_rule',\n        violatedLayers: ['2'],\n      };\n    }\n  }\n\n  return null; // Pass to next layer\n}\n\nfunction containsSensitivePath(command: string, cwd: string): boolean {\n  const expandedCwd = cwd.replace(/^~/, process.env.HOME || '/home/user');\n  for (const p of ROOT_SENSITIVE_PATHS) {\n    if (command.includes(p)) return true;\n  }\n  for (const p of HOME_SENSITIVE_PATHS) {\n    if (command.includes(p) || command.includes(`${expandedCwd}/${p}`)) return true;\n  }\n  // Check file deletion of sensitive paths\n  if ((command.includes('rm ') || command.includes('unlink')) &&\n      (command.includes('/etc/') || command.includes('/root/') || command.includes('/var/log/'))) {\n    return true;\n  }\n  return false;\n}\n\nfunction extractRemoteHost(command: string): string | null {\n  // Match ssh/scp/rsync host pattern: user@host or hostname\n  const m = command.match(/(?:ssh|scp|rsync)\\s+(?:-[\\w]+\\s+)*(\\S+@\\S+|\\b(?!-)[\\w.-]+\\b)/);\n  return m ? m[1] : null;\n}\n\nfunction isLocalHost(host: string): boolean {\n  const localNames = ['localhost', '127.0.0.1', '::1', process.env.HOSTNAME || '', '0.0.0.0'];\n  return localNames.includes(host.replace(/.*@/, ''));\n}\n","import type { LLMConfig } from './engine/types';\n\n/** Global LLM configuration, initialized from env vars or defaults */\nlet llmConfig: LLMConfig = {\n  provider: 'openai',\n  baseUrl: process.env.AGENT_MOSS_LLM_BASE_URL || 'https://api.openai.com/v1',\n  apiKey: process.env.AGENT_MOSS_LLM_API_KEY || '',\n  model: process.env.AGENT_MOSS_LLM_MODEL || 'gpt-4o',\n  temperature: parseFloat(process.env.AGENT_MOSS_LLM_TEMPERATURE || '0.1'),\n  maxTokens: parseInt(process.env.AGENT_MOSS_LLM_MAX_TOKENS || '4096', 10),\n};\n\nexport function getLLMConfig(): Readonly<LLMConfig> {\n  return llmConfig;\n}\n\nexport function updateLLMConfig(partial: Partial<LLMConfig>): void {\n  llmConfig = { ...llmConfig, ...partial };\n}\n\n/** Check if LLM analysis is available (API key configured) */\nexport function isLLMAvailable(): boolean {\n  return llmConfig.apiKey.length > 0;\n}\n","import { readFileSync, readdirSync, existsSync } from 'fs';\nimport { resolve, dirname } from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Skill files are in ../../agent_moss/skills/ (shared with Python version)\nconst SKILLS_DIR = resolve(__dirname, '../../agent_moss/skills');\n\nlet cachedSkills: string[] | null = null;\n\nexport function loadSkills(): string[] {\n  if (cachedSkills) return cachedSkills;\n\n  if (!existsSync(SKILLS_DIR)) {\n    console.warn('[AgentMoss] Skills directory not found:', SKILLS_DIR);\n    cachedSkills = [];\n    return cachedSkills;\n  }\n\n  const files = readdirSync(SKILLS_DIR).filter(f => f.endsWith('.md'));\n  cachedSkills = files.map(f => {\n    const content = readFileSync(resolve(SKILLS_DIR, f), 'utf-8');\n    return `### ${f.replace('.md', '')}\\n${content}`;\n  });\n\n  console.log(`[AgentMoss] Loaded ${cachedSkills.length} skills`);\n  return cachedSkills;\n}\n\n/** Reload skills (for hot-reload) */\nexport function reloadSkills(): void {\n  cachedSkills = null;\n  loadSkills();\n}\n","import { readFileSync, existsSync } from 'fs';\nimport { resolve, dirname } from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\nconst TEMPLATES_DIR = resolve(__dirname, '../../agent_moss/templates');\n\nconst TEMPLATE_FILES = ['prompt1_template.txt', 'prompt2_template.txt', 'security_judge_template.txt'];\n\nlet cachedTemplates: Record<string, string> | null = null;\n\nexport function loadTemplates(): Record<string, string> {\n  if (cachedTemplates) return cachedTemplates;\n\n  cachedTemplates = {};\n\n  if (!existsSync(TEMPLATES_DIR)) {\n    console.warn('[AgentMoss] Templates directory not found:', TEMPLATES_DIR);\n    return cachedTemplates;\n  }\n\n  for (const file of TEMPLATE_FILES) {\n    const filePath = resolve(TEMPLATES_DIR, file);\n    if (existsSync(filePath)) {\n      const key = file.replace('.txt', '').replace('_template', '');\n      cachedTemplates[key] = readFileSync(filePath, 'utf-8');\n    }\n  }\n\n  console.log(`[AgentMoss] Loaded ${Object.keys(cachedTemplates).length} templates`);\n  return cachedTemplates;\n}\n\nexport function reloadTemplates(): void {\n  cachedTemplates = null;\n  loadTemplates();\n}\n","import { SecurityJudgment } from './types';\nimport type { AnalysisInput } from './coordinator';\nimport { getLLMConfig, isLLMAvailable } from '../config';\nimport { loadSkills } from './skill-loader';\nimport { loadTemplates } from './template-loader';\nimport OpenAI from 'openai';\n\n// LRU cache to avoid duplicate LLM calls for identical commands\nconst llmCache = new Map<string, SecurityJudgment>();\nconst LLM_CACHE_MAX = 200;\n\ninterface PreviousResults {\n  heuristic: SecurityJudgment | null;\n  logic: SecurityJudgment | null;\n}\n\n/**\n * Layer 3: LLM + Skill semantic analysis.\n * Only called when layers 1 and 2 both pass.\n * Loads skills from the shared skills directory and uses LLM for deep analysis.\n */\nexport async function runLLMAnalysis(\n  input: AnalysisInput,\n  previous: PreviousResults\n): Promise<SecurityJudgment> {\n  if (!isLLMAvailable()) {\n    console.log('[AgentMoss] LLM not configured, skipping deep analysis');\n    return {\n      allowed: true,\n      reason: 'LLM 未配置，跳过深层分析',\n      riskLevel: 'low',\n      riskType: '',\n      confidence: 50,\n      source: 'llm',\n      violatedLayers: [],\n    };\n  }\n\n  const config = getLLMConfig();\n\n  // Check LRU cache\n  const cacheKey = `${input.aNext.actionType}:${input.aNext.actionDetail}`;\n  const cached = llmCache.get(cacheKey);\n  if (cached) {\n    console.log('[AgentMoss] LLM cache hit');\n    return cached;\n  }\n\n  // Load skills and templates (cached)\n  const skills = loadSkills();\n  const templates = loadTemplates();\n\n  // Build the analysis prompt\n  const prompt = buildPrompt(input, previous, skills, templates);\n\n  // Call LLM\n  const result = await analyzeWithLLM(prompt, config);\n\n  // Cache result\n  if (llmCache.size >= LLM_CACHE_MAX) {\n    const firstKey = llmCache.keys().next().value;\n    if (firstKey) llmCache.delete(firstKey);\n  }\n  llmCache.set(cacheKey, result);\n\n  return result;\n}\n\nfunction buildPrompt(\n  input: AnalysisInput,\n  previous: PreviousResults,\n  skills: string[],\n  templates: Record<string, string>\n): string {\n  const skillContext = skills.length > 0 ? skills.join('\\n---\\n') : '(无可用 Skill)';\n  const historyStr = input.actionHistory\n    .map((h, i) => `${i + 1}. [${h.actionType}] ${h.actionDetail}`)\n    .join('\\n') || '(无历史操作)';\n\n  const templateName = previous.heuristic || previous.logic ? 'prompt2' : 'prompt1';\n  const baseTemplate = templates[templateName] || templates['prompt1'] || '';\n\n  return `${baseTemplate}\n\n## 当前操作上下文\n- 会话 ID: ${input.sessionId}\n- 用户任务: ${input.promptSession || '未指定'}\n- 操作系统: ${input.osType}\n- 工作目录: ${input.cwd || '/'}\n- 操作原因: ${input.reason || '未说明'}\n- 历史操作序列:\n${historyStr}\n\n- 即将执行的操作:\n  类型: ${input.aNext.actionType}\n  详情: ${input.aNext.actionDetail}\n\n## 可用安全 Skill\n${skillContext}\n\n请根据以上信息，对即将执行的操作进行安全判断。你必须输出严格的 JSON 格式，\n不要包含任何其他文字、注释或 markdown 标记。\n\n输出格式:\n{\"allowed\": true/false, \"reason\": \"判断理由\", \"riskLevel\": \"low|medium|high|critical\", \"riskType\": \"风险类型\", \"confidence\": 0-100}`;\n}\n\nasync function analyzeWithLLM(prompt: string, config: ReturnType<typeof getLLMConfig>): Promise<SecurityJudgment> {\n  console.log(`[AgentMoss] LLM analyzing with model: ${config.model}, url: ${config.baseUrl}`);\n\n  const client = new OpenAI({\n    baseURL: config.baseUrl,\n    apiKey: config.apiKey,\n    timeout: 30000,\n  });\n\n  try {\n    const response = await client.chat.completions.create({\n      model: config.model,\n      temperature: config.temperature || 0.1,\n      max_tokens: config.maxTokens || 1024,\n      messages: [\n        { role: 'system', content: '你是一个 AI Agent 安全审计专家。你的任务是分析即将执行的命令是否安全。你必须只输出纯 JSON，不要包含任何 markdown 标记、代码块或其他文字。' },\n        { role: 'user', content: prompt },\n      ],\n    });\n\n    const content = response.choices[0]?.message?.content || '{}';\n    console.log(`[AgentMoss] LLM raw response: ${content.substring(0, 300)}`);\n\n    // Parse JSON — strip markdown code fences if present\n    let jsonStr = content.trim();\n    if (jsonStr.startsWith('```')) {\n      jsonStr = jsonStr.replace(/^```[\\w]*\\n?/, '').replace(/\\n?```$/, '');\n    }\n    const parsed = JSON.parse(jsonStr);\n\n    return {\n      allowed: parsed.allowed !== false, // default to Allow if missing\n      reason: parsed.reason || 'LLM 分析完成',\n      riskLevel: ['low', 'medium', 'high', 'critical'].includes(parsed.riskLevel) ? parsed.riskLevel : 'low',\n      riskType: parsed.riskType || '',\n      confidence: typeof parsed.confidence === 'number' ? Math.min(100, Math.max(0, parsed.confidence)) : 70,\n      source: 'llm',\n      violatedLayers: ['3'],\n    };\n  } catch (err) {\n    console.error('[AgentMoss] LLM call failed:', (err as Error).message);\n    return {\n      allowed: true,\n      reason: `LLM 调用失败: ${(err as Error).message}`,\n      riskLevel: 'low',\n      riskType: '',\n      confidence: 30,\n      source: 'llm',\n      violatedLayers: [],\n    };\n  }\n}\n","import { SecurityJudgment } from './types';\nimport { runHeuristicCheck } from './heuristic';\nimport { runLogicCheck } from './logic-rules';\nimport { runLLMAnalysis } from './llm-analyzer';\n\nexport interface AnalysisInput {\n  sessionId: string;\n  promptSession: string;\n  actionHistory: { actionType: string; actionDetail: string }[];\n  aNext: { actionType: string; actionDetail: string };\n  reason: string;\n  osType: string;\n  cwd: string;\n}\n\n/**\n * Three-layer defense coordinator.\n * Runs layers sequentially: heuristic → logic → LLM.\n * If layer 1 or 2 returns Deny, skip subsequent layers.\n */\nexport async function runAnalysis(input: AnalysisInput): Promise<SecurityJudgment> {\n  // Layer 1: Heuristic static detection (fast)\n  const heuristicResult = runHeuristicCheck(input);\n  if (heuristicResult && !heuristicResult.allowed) {\n    return heuristicResult;\n  }\n\n  // Layer 2: Logic rule detection (fast)\n  const logicResult = runLogicCheck(input);\n  if (logicResult && !logicResult.allowed) {\n    return logicResult;\n  }\n\n  // Layer 3: LLM + Skill semantic analysis (slow, only if both above passed)\n  const llmResult = await runLLMAnalysis(input, {\n    heuristic: heuristicResult,\n    logic: logicResult,\n  });\n\n  return llmResult;\n}\n","#!/usr/bin/env node\n/**\n * AgentMoss CLI — TypeScript version.\n * Supports: init | analyze | server\n */\n\nimport { parseArgs } from 'util';\nimport { createApp } from './server';\n\nfunction printHelp(): void {\n  console.log(`AgentMoss security analysis engine (TypeScript v0.2.0)\n\nCommands:\n  init                  Generate input.json template\n  analyze <input>       Run security analysis on input JSON\n  server                Start HTTP API server\n\nServer options:\n  --host <host>         Listen host (default: 127.0.0.1)\n  --port <port>         Listen port (default: 9090)\n`);\n}\n\nasync function main(): Promise<void> {\n  const args = process.argv.slice(2);\n  const command = args[0];\n\n  if (!command || command === '--help' || command === '-h') {\n    printHelp();\n    process.exit(command ? 0 : 1);\n  }\n\n  switch (command) {\n    case 'init': {\n      const output = args[2] || 'input.json';\n      const fs = await import('fs');\n      const template = {\n        session_id: 'my-session-001',\n        prompt_session: 'Read /var/log/app.log and analyze errors',\n        action_history: [],\n        a_next: { action_type: 'bash', action_detail: 'cat /var/log/app.log' },\n        reason: 'Need to read log file for error analysis',\n        os_type: '',\n        cwd: '/home/user/project',\n      };\n      fs.writeFileSync(output, JSON.stringify(template, null, 2), 'utf-8');\n      console.log(`Template written to ${output}`);\n      break;\n    }\n\n    case 'analyze': {\n      if (!args[1]) {\n        console.error('Usage: agent-moss analyze <input.json>');\n        process.exit(1);\n      }\n      const fs = await import('fs');\n      const path = await import('path');\n      const { runAnalysis } = await import('./engine/coordinator');\n      const filePath = path.resolve(args[1]);\n      const data = JSON.parse(fs.readFileSync(filePath, 'utf-8'));\n      const result = await runAnalysis({\n        sessionId: data.session_id || 'unknown',\n        promptSession: data.prompt_session || '',\n        actionHistory: (data.action_history || []).map((h: any) => ({\n          actionType: h.action_type || h.name || '',\n          actionDetail: h.action_detail || '',\n        })),\n        aNext: {\n          actionType: data.a_next?.action_type || '',\n          actionDetail: data.a_next?.action_detail || '',\n        },\n        reason: data.reason || '',\n        osType: data.os_type || (process.platform === 'win32' ? 'windows' : 'linux'),\n        cwd: data.cwd || process.cwd(),\n      });\n      console.log(JSON.stringify(result, null, 2));\n      process.exit(result.allowed ? 0 : 1);\n      break;\n    }\n\n    case 'server': {\n      let host = '127.0.0.1';\n      let port = 9090;\n\n      for (let i = 1; i < args.length; i++) {\n        if (args[i] === '--host' && args[i + 1]) host = args[++i];\n        else if (args[i] === '--port' && args[i + 1]) port = parseInt(args[++i], 10);\n      }\n\n      // Import @hono/node-server dynamically\n      const { serve } = await import('@hono/node-server');\n      const app = createApp();\n      console.log(`AgentMoss HTTP server on ${host}:${port}`);\n      serve({ fetch: app.fetch, hostname: host, port }, (info) => {\n        console.log(`Listening on http://${host}:${port}`);\n      });\n      break;\n    }\n\n    default:\n      console.error(`Unknown command: ${command}`);\n      printHelp();\n      process.exit(1);\n  }\n}\n\nmain().catch((err) => {\n  console.error('Fatal error:', err);\n  process.exit(1);\n});\n","import { Hono } from 'hono';\nimport { cors } from 'hono/cors';\nimport { logger } from 'hono/logger';\nimport { analyzeRoute, healthRoute } from './routes';\n\nexport function createApp(): Hono {\n  const app = new Hono();\n\n  // Middleware\n  app.use('*', cors({ origin: '*', allowMethods: ['GET', 'POST', 'OPTIONS'], allowHeaders: ['*'] }));\n  app.use('*', logger());\n\n  // Routes\n  app.get('/api/v1/health', healthRoute);\n  app.post('/api/v1/analyze', analyzeRoute);\n\n  return app;\n}\n\nexport function startServer(host = '127.0.0.1', port = 9090): { serve: () => void } {\n  const app = createApp();\n  return {\n    serve: () => {\n      console.log(`AgentMoss HTTP server on ${host}:${port}`);\n      // In utilityProcess mode, use Bun.serve or Node adapter\n      // Use @hono/node-server for Node.js environments\n      const { serve: honoServe } = require('@hono/node-server');\n      honoServe({ fetch: app.fetch, hostname: host, port });\n    },\n  };\n}\n","import type { Context } from 'hono';\nimport { AnalyzeRequestSchema, AnalyzeResponseSchema, HealthResponseSchema } from './models';\nimport { runAnalysis } from './engine/coordinator';\n\nexport async function healthRoute(c: Context) {\n  return c.json(HealthResponseSchema.parse({}));\n}\n\nexport async function analyzeRoute(c: Context) {\n  const t0 = performance.now();\n\n  try {\n    const body = await c.req.json();\n    const req = AnalyzeRequestSchema.parse(body);\n\n    // OS auto-detect\n    let osType = req.os_type;\n    if (!osType) {\n      osType = process.platform === 'win32' ? 'windows' : 'linux';\n    }\n\n    const result = await runAnalysis({\n      sessionId: req.session_id,\n      promptSession: req.prompt_session,\n      actionHistory: req.action_history.map(h => ({\n        actionType: h.action_type,\n        actionDetail: h.action_detail,\n      })),\n      aNext: {\n        actionType: req.a_next.action_type,\n        actionDetail: req.a_next.action_detail,\n      },\n      reason: req.reason,\n      osType,\n      cwd: req.cwd,\n    });\n\n    const durationMs = performance.now() - t0;\n\n    return c.json(\n      AnalyzeResponseSchema.parse({\n        decision: result.allowed ? 'Allow' : 'Deny',\n        reason: result.reason,\n        risk_level: result.riskLevel,\n        risk_type: result.riskType,\n        violated_layers: result.violatedLayers,\n        policy: '',\n        violated_policy: '',\n        confidence: result.confidence,\n        analysis_duration_ms: Math.round(durationMs * 10) / 10,\n      })\n    );\n  } catch (err) {\n    console.error('[AgentMoss] Analysis error:', err);\n    if (err instanceof SyntaxError) {\n      return c.json({ error: 'Invalid JSON', detail: err.message }, 400);\n    }\n    if ((err as any)?.issues) {\n      return c.json({ error: 'Validation error', detail: (err as any).issues }, 400);\n    }\n    return c.json({ error: 'Internal error', detail: String(err) }, 500);\n  }\n}\n","import { z } from 'zod';\n\n/** Single action in history or next action */\nexport const ActionItemSchema = z.object({\n  action_type: z.string().describe('Action type, e.g. bash, file_read, file_write'),\n  action_detail: z.string().describe('Action detail / command content'),\n});\n\nexport const AnalyzeRequestSchema = z.object({\n  session_id: z.string().describe('Session / agent unique identifier'),\n  prompt_session: z.string().default('').describe('User original prompt'),\n  action_history: z.array(ActionItemSchema).default([]).describe('Historical action sequence'),\n  a_next: ActionItemSchema.describe('Next action to be executed'),\n  reason: z.string().default('').describe('Reason for executing this action'),\n  os_type: z.string().default('').describe(\"OS type: 'linux', 'windows', or empty for auto-detect\"),\n  cwd: z.string().default('').describe('Current working directory'),\n  metadata: z.record(z.unknown()).optional().describe('Extended metadata'),\n});\n\nexport const AnalyzeResponseSchema = z.object({\n  decision: z.enum(['Allow', 'Deny']).describe('Allow or Deny'),\n  reason: z.string().describe('Decision reason'),\n  risk_level: z.enum(['low', 'medium', 'high', 'critical']).default('low'),\n  risk_type: z.string().default(''),\n  violated_layers: z.array(z.string()).default([]),\n  policy: z.string().default(''),\n  violated_policy: z.string().default(''),\n  confidence: z.number().int().min(0).max(100).default(100),\n  analysis_duration_ms: z.number().default(0),\n});\n\nexport const HealthResponseSchema = z.object({\n  status: z.string().default('healthy'),\n  version: z.string().default('0.2.0'),\n});\n\nexport type ActionItem = z.infer<typeof ActionItemSchema>;\nexport type AnalyzeRequest = z.infer<typeof AnalyzeRequestSchema>;\nexport type AnalyzeResponse = z.infer<typeof AnalyzeResponseSchema>;\nexport type HealthResponse = z.infer<typeof HealthResponseSchema>;\n"],"mappings":";;;;;;;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAF9B;AAAA;AAAA;AAAA;AAAA;;;ACgCO,SAAS,kBAAkB,OAA+C;AAC/E,QAAM,UAAU,GAAG,MAAM,MAAM,UAAU,KAAK,MAAM,MAAM,YAAY;AACtE,QAAM,UAAoB,CAAC;AAC3B,MAAI,kBAAkB;AAGtB,aAAW,QAAQ,oBAAoB;AACrC,QAAI,KAAK,QAAQ,KAAK,OAAO,GAAG;AAC9B,cAAQ,KAAK,KAAK,WAAW;AAC7B,UAAI,aAAa,KAAK,QAAQ,IAAI,aAAa,eAAe,GAAG;AAC/D,0BAAkB,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,+CAAY,QAAQ,KAAK,IAAI,CAAC;AAAA,MACtC,WAAW;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,gBAAgB,CAAC,GAAG;AAAA,IACtB;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,aAAa,GAAmB;AACvC,QAAM,QAAgC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAChF,SAAO,MAAM,CAAC,KAAK;AACrB;AAjEA,IAUM;AAVN;AAAA;AAAA;AAAA;AAUA,IAAM,qBAAmF;AAAA,MACvF,EAAE,SAAS,qCAAqC,UAAU,YAAY,aAAa,yDAAY;AAAA,MAC/F,EAAE,SAAS,2CAA2C,UAAU,YAAY,aAAa,6CAAU;AAAA,MACnG,EAAE,SAAS,qCAAqC,UAAU,YAAY,aAAa,uCAAS;AAAA,MAC5F,EAAE,SAAS,+BAA+B,UAAU,YAAY,aAAa,+BAAqB;AAAA,MAClG,EAAE,SAAS,2BAA2B,UAAU,YAAY,aAAa,+BAAqB;AAAA,MAC9F,EAAE,SAAS,uCAAuC,UAAU,YAAY,aAAa,uCAAS;AAAA,MAC9F,EAAE,SAAS,UAAU,UAAU,YAAY,aAAa,6CAAU;AAAA,MAClE,EAAE,SAAS,oBAAoB,UAAU,QAAQ,aAAa,sDAAc;AAAA,MAC5E,EAAE,SAAS,6BAA6B,UAAU,QAAQ,aAAa,+DAAa;AAAA,MACpF,EAAE,SAAS,mCAAmC,UAAU,YAAY,aAAa,4CAAc;AAAA,MAC/F,EAAE,SAAS,+BAA+B,UAAU,YAAY,aAAa,qBAAW;AAAA,MACxF,EAAE,SAAS,0BAA0B,UAAU,QAAQ,aAAa,kCAAc;AAAA,MAClF,EAAE,SAAS,2BAA2B,UAAU,YAAY,aAAa,YAAY;AAAA,MACrF,EAAE,SAAS,mBAAmB,UAAU,QAAQ,aAAa,gCAAY;AAAA,MACzE,EAAE,SAAS,4BAA4B,UAAU,QAAQ,aAAa,uBAAuB;AAAA,MAC7F,EAAE,SAAS,+BAA+B,UAAU,QAAQ,aAAa,yBAAyB;AAAA,MAClG,EAAE,SAAS,oCAAoC,UAAU,QAAQ,aAAa,yBAAyB;AAAA,MACvG,EAAE,SAAS,6CAA6C,UAAU,UAAU,aAAa,uCAAS;AAAA,MAClG,EAAE,SAAS,6BAA6B,UAAU,YAAY,aAAa,kCAAc;AAAA,IAC3F;AAAA;AAAA;;;ACDO,SAAS,cAAc,OAA+C;AAC3E,QAAM,EAAE,eAAe,OAAO,IAAI,IAAI;AACtC,QAAM,UAAU,MAAM;AACtB,QAAM,cAAc,OAAO;AAG3B,MAAI,MAAM,eAAe,WAAW,MAAM,eAAe,gBAAgB,MAAM,eAAe,iBAAiB;AAC7G,UAAM,UAAU,cAAc;AAAA,MAC5B,QAAM,EAAE,eAAe,UAAU,EAAE,eAAe,eAAe,EAAE,eAAe,gBAC7E,EAAE,aAAa,SAAS,GAAG;AAAA,IAClC;AACA,QAAI,CAAC,WAAW,cAAc,WAAW,GAAG;AAAA,IAE5C;AAAA,EACF;AAGA,MAAI,sBAAsB,SAAS,WAAW,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,gBAAgB,CAAC,GAAG;AAAA,IACtB;AAAA,EACF;AAGA,MAAI,QAAQ,SAAS,MAAM,KAAK,QAAQ,SAAS,MAAM,KAAK,QAAQ,SAAS,WAAW,KAAK,QAAQ,SAAS,QAAQ,GAAG;AAEvH,UAAM,eAAe,cAAc;AAAA,MAAK,OACtC,EAAE,aAAa,SAAS,MAAM,KAAK,EAAE,aAAa,SAAS,KAAK,KAAK,EAAE,aAAa,SAAS,WAAW;AAAA,IAC1G;AACA,QAAI,CAAC,gBAAgB,cAAc,WAAW,GAAG;AAC/C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,QAAQ;AAAA,QACR,gBAAgB,CAAC,GAAG;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAGA,MAAI,QAAQ,SAAS,KAAK,KAAK,QAAQ,SAAS,KAAK,KAAK,QAAQ,SAAS,OAAO,GAAG;AACnF,UAAM,aAAa,kBAAkB,OAAO;AAC5C,QAAI,cAAc,CAAC,YAAY,UAAU,GAAG;AAC1C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,uEAAgB,UAAU;AAAA,QAClC,WAAW;AAAA,QACX,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,QAAQ;AAAA,QACR,gBAAgB,CAAC,GAAG;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAiB,KAAsB;AACpE,QAAM,cAAc,IAAI,QAAQ,MAAM,QAAQ,IAAI,QAAQ,YAAY;AACtE,aAAW,KAAK,sBAAsB;AACpC,QAAI,QAAQ,SAAS,CAAC,EAAG,QAAO;AAAA,EAClC;AACA,aAAW,KAAK,sBAAsB;AACpC,QAAI,QAAQ,SAAS,CAAC,KAAK,QAAQ,SAAS,GAAG,WAAW,IAAI,CAAC,EAAE,EAAG,QAAO;AAAA,EAC7E;AAEA,OAAK,QAAQ,SAAS,KAAK,KAAK,QAAQ,SAAS,QAAQ,OACpD,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,QAAQ,KAAK,QAAQ,SAAS,WAAW,IAAI;AAC9F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,SAAgC;AAEzD,QAAM,IAAI,QAAQ,MAAM,8DAA8D;AACtF,SAAO,IAAI,EAAE,CAAC,IAAI;AACpB;AAEA,SAAS,YAAY,MAAuB;AAC1C,QAAM,aAAa,CAAC,aAAa,aAAa,OAAO,QAAQ,IAAI,YAAY,IAAI,SAAS;AAC1F,SAAO,WAAW,SAAS,KAAK,QAAQ,OAAO,EAAE,CAAC;AACpD;AAzHA,IAUM,sBAWA;AArBN;AAAA;AAAA;AAAA;AAUA,IAAM,uBAAuB;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,IAAM,uBAAuB;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA;;;ACfO,SAAS,eAAoC;AAClD,SAAO;AACT;AAOO,SAAS,iBAA0B;AACxC,SAAO,UAAU,OAAO,SAAS;AACnC;AAvBA,IAGI;AAHJ;AAAA;AAAA;AAAA;AAGA,IAAI,YAAuB;AAAA,MACzB,UAAU;AAAA,MACV,SAAS,QAAQ,IAAI,2BAA2B;AAAA,MAChD,QAAQ,QAAQ,IAAI,0BAA0B;AAAA,MAC9C,OAAO,QAAQ,IAAI,wBAAwB;AAAA,MAC3C,aAAa,WAAW,QAAQ,IAAI,8BAA8B,KAAK;AAAA,MACvE,WAAW,SAAS,QAAQ,IAAI,6BAA6B,QAAQ,EAAE;AAAA,IACzE;AAAA;AAAA;;;ACVA,SAAS,cAAc,aAAa,kBAAkB;AACtD,SAAS,SAAS,eAAe;AACjC,SAAS,iBAAAA,sBAAqB;AAUvB,SAAS,aAAuB;AACrC,MAAI,aAAc,QAAO;AAEzB,MAAI,CAAC,WAAW,UAAU,GAAG;AAC3B,YAAQ,KAAK,2CAA2C,UAAU;AAClE,mBAAe,CAAC;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,YAAY,UAAU,EAAE,OAAO,OAAK,EAAE,SAAS,KAAK,CAAC;AACnE,iBAAe,MAAM,IAAI,OAAK;AAC5B,UAAM,UAAU,aAAa,QAAQ,YAAY,CAAC,GAAG,OAAO;AAC5D,WAAO,OAAO,EAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,EAAK,OAAO;AAAA,EAChD,CAAC;AAED,UAAQ,IAAI,sBAAsB,aAAa,MAAM,SAAS;AAC9D,SAAO;AACT;AA7BA,IAIMC,aACAC,YAGA,YAEF;AAVJ;AAAA;AAAA;AAAA;AAIA,IAAMD,cAAaD,eAAc,YAAY,GAAG;AAChD,IAAME,aAAY,QAAQD,WAAU;AAGpC,IAAM,aAAa,QAAQC,YAAW,yBAAyB;AAE/D,IAAI,eAAgC;AAAA;AAAA;;;ACVpC,SAAS,gBAAAC,eAAc,cAAAC,mBAAkB;AACzC,SAAS,WAAAC,UAAS,WAAAC,gBAAe;AACjC,SAAS,iBAAAC,sBAAqB;AAWvB,SAAS,gBAAwC;AACtD,MAAI,gBAAiB,QAAO;AAE5B,oBAAkB,CAAC;AAEnB,MAAI,CAACH,YAAW,aAAa,GAAG;AAC9B,YAAQ,KAAK,8CAA8C,aAAa;AACxE,WAAO;AAAA,EACT;AAEA,aAAW,QAAQ,gBAAgB;AACjC,UAAM,WAAWC,SAAQ,eAAe,IAAI;AAC5C,QAAID,YAAW,QAAQ,GAAG;AACxB,YAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,EAAE,QAAQ,aAAa,EAAE;AAC5D,sBAAgB,GAAG,IAAID,cAAa,UAAU,OAAO;AAAA,IACvD;AAAA,EACF;AAEA,UAAQ,IAAI,sBAAsB,OAAO,KAAK,eAAe,EAAE,MAAM,YAAY;AACjF,SAAO;AACT;AAjCA,IAIMK,aACAC,YAEA,eAEA,gBAEF;AAXJ;AAAA;AAAA;AAAA;AAIA,IAAMD,cAAaD,eAAc,YAAY,GAAG;AAChD,IAAME,aAAYH,SAAQE,WAAU;AAEpC,IAAM,gBAAgBH,SAAQI,YAAW,4BAA4B;AAErE,IAAM,iBAAiB,CAAC,wBAAwB,wBAAwB,6BAA6B;AAErG,IAAI,kBAAiD;AAAA;AAAA;;;ACNrD,OAAO,YAAY;AAgBnB,eAAsB,eACpB,OACA,UAC2B;AAC3B,MAAI,CAAC,eAAe,GAAG;AACrB,YAAQ,IAAI,wDAAwD;AACpE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,SAAS,aAAa;AAG5B,QAAM,WAAW,GAAG,MAAM,MAAM,UAAU,IAAI,MAAM,MAAM,YAAY;AACtE,QAAM,SAAS,SAAS,IAAI,QAAQ;AACpC,MAAI,QAAQ;AACV,YAAQ,IAAI,2BAA2B;AACvC,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,WAAW;AAC1B,QAAM,YAAY,cAAc;AAGhC,QAAM,SAAS,YAAY,OAAO,UAAU,QAAQ,SAAS;AAG7D,QAAM,SAAS,MAAM,eAAe,QAAQ,MAAM;AAGlD,MAAI,SAAS,QAAQ,eAAe;AAClC,UAAM,WAAW,SAAS,KAAK,EAAE,KAAK,EAAE;AACxC,QAAI,SAAU,UAAS,OAAO,QAAQ;AAAA,EACxC;AACA,WAAS,IAAI,UAAU,MAAM;AAE7B,SAAO;AACT;AAEA,SAAS,YACP,OACA,UACA,QACA,WACQ;AACR,QAAM,eAAe,OAAO,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI;AAClE,QAAM,aAAa,MAAM,cACtB,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,EAAE,YAAY,EAAE,EAC7D,KAAK,IAAI,KAAK;AAEjB,QAAM,eAAe,SAAS,aAAa,SAAS,QAAQ,YAAY;AACxE,QAAM,eAAe,UAAU,YAAY,KAAK,UAAU,SAAS,KAAK;AAExE,SAAO,GAAG,YAAY;AAAA;AAAA;AAAA,qBAGb,MAAM,SAAS;AAAA,8BAChB,MAAM,iBAAiB,oBAAK;AAAA,8BAC5B,MAAM,MAAM;AAAA,8BACZ,MAAM,OAAO,GAAG;AAAA,8BAChB,MAAM,UAAU,oBAAK;AAAA;AAAA,EAE7B,UAAU;AAAA;AAAA;AAAA,kBAGJ,MAAM,MAAM,UAAU;AAAA,kBACtB,MAAM,MAAM,YAAY;AAAA;AAAA;AAAA,EAG9B,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOd;AAEA,eAAe,eAAe,QAAgB,QAAoE;AAChH,UAAQ,IAAI,yCAAyC,OAAO,KAAK,UAAU,OAAO,OAAO,EAAE;AAE3F,QAAM,SAAS,IAAI,OAAO;AAAA,IACxB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,EACX,CAAC;AAED,MAAI;AACF,UAAM,WAAW,MAAM,OAAO,KAAK,YAAY,OAAO;AAAA,MACpD,OAAO,OAAO;AAAA,MACd,aAAa,OAAO,eAAe;AAAA,MACnC,YAAY,OAAO,aAAa;AAAA,MAChC,UAAU;AAAA,QACR,EAAE,MAAM,UAAU,SAAS,4WAAoF;AAAA,QAC/G,EAAE,MAAM,QAAQ,SAAS,OAAO;AAAA,MAClC;AAAA,IACF,CAAC;AAED,UAAM,UAAU,SAAS,QAAQ,CAAC,GAAG,SAAS,WAAW;AACzD,YAAQ,IAAI,iCAAiC,QAAQ,UAAU,GAAG,GAAG,CAAC,EAAE;AAGxE,QAAI,UAAU,QAAQ,KAAK;AAC3B,QAAI,QAAQ,WAAW,KAAK,GAAG;AAC7B,gBAAU,QAAQ,QAAQ,gBAAgB,EAAE,EAAE,QAAQ,WAAW,EAAE;AAAA,IACrE;AACA,UAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,WAAO;AAAA,MACL,SAAS,OAAO,YAAY;AAAA;AAAA,MAC5B,QAAQ,OAAO,UAAU;AAAA,MACzB,WAAW,CAAC,OAAO,UAAU,QAAQ,UAAU,EAAE,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY;AAAA,MACjG,UAAU,OAAO,YAAY;AAAA,MAC7B,YAAY,OAAO,OAAO,eAAe,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,UAAU,CAAC,IAAI;AAAA,MACpG,QAAQ;AAAA,MACR,gBAAgB,CAAC,GAAG;AAAA,IACtB;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,gCAAiC,IAAc,OAAO;AACpE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,iCAAc,IAAc,OAAO;AAAA,MAC3C,WAAW;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AACF;AA9JA,IAQM,UACA;AATN;AAAA;AAAA;AAAA;AAEA;AACA;AACA;AAIA,IAAM,WAAW,oBAAI,IAA8B;AACnD,IAAM,gBAAgB;AAAA;AAAA;;;ACTtB;AAAA;AAAA;AAAA;AAoBA,eAAsB,YAAY,OAAiD;AAEjF,QAAM,kBAAkB,kBAAkB,KAAK;AAC/C,MAAI,mBAAmB,CAAC,gBAAgB,SAAS;AAC/C,WAAO;AAAA,EACT;AAGA,QAAM,cAAc,cAAc,KAAK;AACvC,MAAI,eAAe,CAAC,YAAY,SAAS;AACvC,WAAO;AAAA,EACT;AAGA,QAAM,YAAY,MAAM,eAAe,OAAO;AAAA,IAC5C,WAAW;AAAA,IACX,OAAO;AAAA,EACT,CAAC;AAED,SAAO;AACT;AAxCA;AAAA;AAAA;AAAA;AACA;AACA;AACA;AAAA;AAAA;;;ACHA;;;ACAA;AAAA,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,cAAc;;;ACFvB;;;ACAA;AAAA,SAAS,SAAS;AAGX,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,SAAS,+CAA+C;AAAA,EAChF,eAAe,EAAE,OAAO,EAAE,SAAS,iCAAiC;AACtE,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,YAAY,EAAE,OAAO,EAAE,SAAS,mCAAmC;AAAA,EACnE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,sBAAsB;AAAA,EACtE,gBAAgB,EAAE,MAAM,gBAAgB,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,4BAA4B;AAAA,EAC3F,QAAQ,iBAAiB,SAAS,4BAA4B;AAAA,EAC9D,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,kCAAkC;AAAA,EAC1E,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,uDAAuD;AAAA,EAChG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,2BAA2B;AAAA,EAChE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,mBAAmB;AACzE,CAAC;AAEM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,UAAU,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS,eAAe;AAAA,EAC5D,QAAQ,EAAE,OAAO,EAAE,SAAS,iBAAiB;AAAA,EAC7C,YAAY,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,UAAU,CAAC,EAAE,QAAQ,KAAK;AAAA,EACvE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAChC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC/C,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC7B,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EACtC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,GAAG;AAAA,EACxD,sBAAsB,EAAE,OAAO,EAAE,QAAQ,CAAC;AAC5C,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,QAAQ,SAAS;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,QAAQ,OAAO;AACrC,CAAC;;;ADhCD;AAEA,eAAsB,YAAY,GAAY;AAC5C,SAAO,EAAE,KAAK,qBAAqB,MAAM,CAAC,CAAC,CAAC;AAC9C;AAEA,eAAsB,aAAa,GAAY;AAC7C,QAAM,KAAK,YAAY,IAAI;AAE3B,MAAI;AACF,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,UAAM,MAAM,qBAAqB,MAAM,IAAI;AAG3C,QAAI,SAAS,IAAI;AACjB,QAAI,CAAC,QAAQ;AACX,eAAS,QAAQ,aAAa,UAAU,YAAY;AAAA,IACtD;AAEA,UAAM,SAAS,MAAM,YAAY;AAAA,MAC/B,WAAW,IAAI;AAAA,MACf,eAAe,IAAI;AAAA,MACnB,eAAe,IAAI,eAAe,IAAI,QAAM;AAAA,QAC1C,YAAY,EAAE;AAAA,QACd,cAAc,EAAE;AAAA,MAClB,EAAE;AAAA,MACF,OAAO;AAAA,QACL,YAAY,IAAI,OAAO;AAAA,QACvB,cAAc,IAAI,OAAO;AAAA,MAC3B;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA,KAAK,IAAI;AAAA,IACX,CAAC;AAED,UAAM,aAAa,YAAY,IAAI,IAAI;AAEvC,WAAO,EAAE;AAAA,MACP,sBAAsB,MAAM;AAAA,QAC1B,UAAU,OAAO,UAAU,UAAU;AAAA,QACrC,QAAQ,OAAO;AAAA,QACf,YAAY,OAAO;AAAA,QACnB,WAAW,OAAO;AAAA,QAClB,iBAAiB,OAAO;AAAA,QACxB,QAAQ;AAAA,QACR,iBAAiB;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,sBAAsB,KAAK,MAAM,aAAa,EAAE,IAAI;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,QAAI,eAAe,aAAa;AAC9B,aAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,QAAQ,IAAI,QAAQ,GAAG,GAAG;AAAA,IACnE;AACA,QAAK,KAAa,QAAQ;AACxB,aAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,QAAS,IAAY,OAAO,GAAG,GAAG;AAAA,IAC/E;AACA,WAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,QAAQ,OAAO,GAAG,EAAE,GAAG,GAAG;AAAA,EACrE;AACF;;;ADzDO,SAAS,YAAkB;AAChC,QAAM,MAAM,IAAI,KAAK;AAGrB,MAAI,IAAI,KAAK,KAAK,EAAE,QAAQ,KAAK,cAAc,CAAC,OAAO,QAAQ,SAAS,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC;AACjG,MAAI,IAAI,KAAK,OAAO,CAAC;AAGrB,MAAI,IAAI,kBAAkB,WAAW;AACrC,MAAI,KAAK,mBAAmB,YAAY;AAExC,SAAO;AACT;;;ADRA,SAAS,YAAkB;AACzB,UAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAUb;AACD;AAEA,eAAe,OAAsB;AACnC,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,QAAM,UAAU,KAAK,CAAC;AAEtB,MAAI,CAAC,WAAW,YAAY,YAAY,YAAY,MAAM;AACxD,cAAU;AACV,YAAQ,KAAK,UAAU,IAAI,CAAC;AAAA,EAC9B;AAEA,UAAQ,SAAS;AAAA,IACf,KAAK,QAAQ;AACX,YAAM,SAAS,KAAK,CAAC,KAAK;AAC1B,YAAM,KAAK,MAAM,OAAO,IAAI;AAC5B,YAAM,WAAW;AAAA,QACf,YAAY;AAAA,QACZ,gBAAgB;AAAA,QAChB,gBAAgB,CAAC;AAAA,QACjB,QAAQ,EAAE,aAAa,QAAQ,eAAe,uBAAuB;AAAA,QACrE,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,KAAK;AAAA,MACP;AACA,SAAG,cAAc,QAAQ,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,OAAO;AACnE,cAAQ,IAAI,uBAAuB,MAAM,EAAE;AAC3C;AAAA,IACF;AAAA,IAEA,KAAK,WAAW;AACd,UAAI,CAAC,KAAK,CAAC,GAAG;AACZ,gBAAQ,MAAM,wCAAwC;AACtD,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,YAAM,KAAK,MAAM,OAAO,IAAI;AAC5B,YAAMC,QAAO,MAAM,OAAO,MAAM;AAChC,YAAM,EAAE,aAAAC,aAAY,IAAI,MAAM;AAC9B,YAAM,WAAWD,MAAK,QAAQ,KAAK,CAAC,CAAC;AACrC,YAAM,OAAO,KAAK,MAAM,GAAG,aAAa,UAAU,OAAO,CAAC;AAC1D,YAAM,SAAS,MAAMC,aAAY;AAAA,QAC/B,WAAW,KAAK,cAAc;AAAA,QAC9B,eAAe,KAAK,kBAAkB;AAAA,QACtC,gBAAgB,KAAK,kBAAkB,CAAC,GAAG,IAAI,CAAC,OAAY;AAAA,UAC1D,YAAY,EAAE,eAAe,EAAE,QAAQ;AAAA,UACvC,cAAc,EAAE,iBAAiB;AAAA,QACnC,EAAE;AAAA,QACF,OAAO;AAAA,UACL,YAAY,KAAK,QAAQ,eAAe;AAAA,UACxC,cAAc,KAAK,QAAQ,iBAAiB;AAAA,QAC9C;AAAA,QACA,QAAQ,KAAK,UAAU;AAAA,QACvB,QAAQ,KAAK,YAAY,QAAQ,aAAa,UAAU,YAAY;AAAA,QACpE,KAAK,KAAK,OAAO,QAAQ,IAAI;AAAA,MAC/B,CAAC;AACD,cAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C,cAAQ,KAAK,OAAO,UAAU,IAAI,CAAC;AACnC;AAAA,IACF;AAAA,IAEA,KAAK,UAAU;AACb,UAAI,OAAO;AACX,UAAI,OAAO;AAEX,eAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,YAAI,KAAK,CAAC,MAAM,YAAY,KAAK,IAAI,CAAC,EAAG,QAAO,KAAK,EAAE,CAAC;AAAA,iBAC/C,KAAK,CAAC,MAAM,YAAY,KAAK,IAAI,CAAC,EAAG,QAAO,SAAS,KAAK,EAAE,CAAC,GAAG,EAAE;AAAA,MAC7E;AAGA,YAAM,EAAE,MAAM,IAAI,MAAM,OAAO,mBAAmB;AAClD,YAAM,MAAM,UAAU;AACtB,cAAQ,IAAI,4BAA4B,IAAI,IAAI,IAAI,EAAE;AACtD,YAAM,EAAE,OAAO,IAAI,OAAO,UAAU,MAAM,KAAK,GAAG,CAAC,SAAS;AAC1D,gBAAQ,IAAI,uBAAuB,IAAI,IAAI,IAAI,EAAE;AAAA,MACnD,CAAC;AACD;AAAA,IACF;AAAA,IAEA;AACE,cAAQ,MAAM,oBAAoB,OAAO,EAAE;AAC3C,gBAAU;AACV,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,MAAM,gBAAgB,GAAG;AACjC,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["fileURLToPath","__filename","__dirname","readFileSync","existsSync","resolve","dirname","fileURLToPath","__filename","__dirname","path","runAnalysis"]}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@kenhkl/agent-moss",
+  "version": "0.2.0",
+  "description": "Multi-layer security analysis engine for AI agents (TypeScript)",
+  "type": "module",
+  "main": "dist/cli.js",
+  "bin": {
+    "agent-moss": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsx src/cli.ts server --port 9090",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.13.0",
+    "hono": "^4.6.0",
+    "openai": "^4.104.0",
+    "pino": "^9.5.0",
+    "pino-pretty": "^11.3.0",
+    "yaml": "^2.6.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.17.0",
+    "tsup": "^8.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0"
+  },
+  "license": "MIT"
+}