@panguard-ai/atr 1.4.2 → 1.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (182) hide show
  1. package/dist/index.d.ts +4 -22
  2. package/dist/index.d.ts.map +1 -1
  3. package/dist/index.js +4 -14
  4. package/dist/index.js.map +1 -1
  5. package/dist/quality.d.ts +8 -0
  6. package/dist/quality.d.ts.map +1 -0
  7. package/dist/quality.js +8 -0
  8. package/dist/quality.js.map +1 -0
  9. package/package.json +15 -49
  10. package/dist/cli.d.ts +0 -14
  11. package/dist/cli.d.ts.map +0 -1
  12. package/dist/cli.js +0 -744
  13. package/dist/cli.js.map +0 -1
  14. package/dist/coverage-analyzer.d.ts +0 -43
  15. package/dist/coverage-analyzer.d.ts.map +0 -1
  16. package/dist/coverage-analyzer.js +0 -329
  17. package/dist/coverage-analyzer.js.map +0 -1
  18. package/dist/engine.d.ts +0 -136
  19. package/dist/engine.d.ts.map +0 -1
  20. package/dist/engine.js +0 -781
  21. package/dist/engine.js.map +0 -1
  22. package/dist/loader.d.ts +0 -21
  23. package/dist/loader.d.ts.map +0 -1
  24. package/dist/loader.js +0 -149
  25. package/dist/loader.js.map +0 -1
  26. package/dist/mcp-server.d.ts +0 -13
  27. package/dist/mcp-server.d.ts.map +0 -1
  28. package/dist/mcp-server.js +0 -244
  29. package/dist/mcp-server.js.map +0 -1
  30. package/dist/mcp-tools/coverage-gaps.d.ts +0 -13
  31. package/dist/mcp-tools/coverage-gaps.d.ts.map +0 -1
  32. package/dist/mcp-tools/coverage-gaps.js +0 -57
  33. package/dist/mcp-tools/coverage-gaps.js.map +0 -1
  34. package/dist/mcp-tools/list-rules.d.ts +0 -17
  35. package/dist/mcp-tools/list-rules.d.ts.map +0 -1
  36. package/dist/mcp-tools/list-rules.js +0 -45
  37. package/dist/mcp-tools/list-rules.js.map +0 -1
  38. package/dist/mcp-tools/scan.d.ts +0 -18
  39. package/dist/mcp-tools/scan.d.ts.map +0 -1
  40. package/dist/mcp-tools/scan.js +0 -87
  41. package/dist/mcp-tools/scan.js.map +0 -1
  42. package/dist/mcp-tools/submit-proposal.d.ts +0 -12
  43. package/dist/mcp-tools/submit-proposal.d.ts.map +0 -1
  44. package/dist/mcp-tools/submit-proposal.js +0 -116
  45. package/dist/mcp-tools/submit-proposal.js.map +0 -1
  46. package/dist/mcp-tools/threat-summary.d.ts +0 -12
  47. package/dist/mcp-tools/threat-summary.d.ts.map +0 -1
  48. package/dist/mcp-tools/threat-summary.js +0 -72
  49. package/dist/mcp-tools/threat-summary.js.map +0 -1
  50. package/dist/mcp-tools/validate.d.ts +0 -15
  51. package/dist/mcp-tools/validate.d.ts.map +0 -1
  52. package/dist/mcp-tools/validate.js +0 -57
  53. package/dist/mcp-tools/validate.js.map +0 -1
  54. package/dist/modules/index.d.ts +0 -144
  55. package/dist/modules/index.d.ts.map +0 -1
  56. package/dist/modules/index.js +0 -82
  57. package/dist/modules/index.js.map +0 -1
  58. package/dist/modules/semantic.d.ts +0 -105
  59. package/dist/modules/semantic.d.ts.map +0 -1
  60. package/dist/modules/semantic.js +0 -289
  61. package/dist/modules/semantic.js.map +0 -1
  62. package/dist/modules/session.d.ts +0 -70
  63. package/dist/modules/session.d.ts.map +0 -1
  64. package/dist/modules/session.js +0 -163
  65. package/dist/modules/session.js.map +0 -1
  66. package/dist/rule-scaffolder.d.ts +0 -39
  67. package/dist/rule-scaffolder.d.ts.map +0 -1
  68. package/dist/rule-scaffolder.js +0 -171
  69. package/dist/rule-scaffolder.js.map +0 -1
  70. package/dist/session-tracker.d.ts +0 -56
  71. package/dist/session-tracker.d.ts.map +0 -1
  72. package/dist/session-tracker.js +0 -175
  73. package/dist/session-tracker.js.map +0 -1
  74. package/dist/skill-fingerprint.d.ts +0 -96
  75. package/dist/skill-fingerprint.d.ts.map +0 -1
  76. package/dist/skill-fingerprint.js +0 -336
  77. package/dist/skill-fingerprint.js.map +0 -1
  78. package/dist/types.d.ts +0 -211
  79. package/dist/types.d.ts.map +0 -1
  80. package/dist/types.js +0 -6
  81. package/dist/types.js.map +0 -1
  82. package/rules/agent-manipulation/ATR-2026-00030-cross-agent-attack.yaml +0 -177
  83. package/rules/agent-manipulation/ATR-2026-00032-goal-hijacking.yaml +0 -137
  84. package/rules/agent-manipulation/ATR-2026-00074-cross-agent-privilege-escalation.yaml +0 -117
  85. package/rules/agent-manipulation/ATR-2026-00076-inter-agent-message-spoofing.yaml +0 -167
  86. package/rules/agent-manipulation/ATR-2026-00077-human-trust-exploitation.yaml +0 -146
  87. package/rules/agent-manipulation/ATR-2026-00108-consensus-sybil-attack.yaml +0 -105
  88. package/rules/agent-manipulation/ATR-2026-00116-a2a-message-validation.yaml +0 -92
  89. package/rules/agent-manipulation/ATR-2026-00117-agent-identity-spoofing.yaml +0 -92
  90. package/rules/agent-manipulation/ATR-2026-00118-approval-fatigue.yaml +0 -89
  91. package/rules/agent-manipulation/ATR-2026-00119-social-engineering-via-agent.yaml +0 -89
  92. package/rules/agent-manipulation/ATR-2026-00132-casual-authority-escalation.yaml +0 -99
  93. package/rules/agent-manipulation/ATR-2026-00139-casual-authority-redirect.yaml +0 -53
  94. package/rules/context-exfiltration/ATR-2026-00020-system-prompt-leak.yaml +0 -177
  95. package/rules/context-exfiltration/ATR-2026-00021-api-key-exposure.yaml +0 -178
  96. package/rules/context-exfiltration/ATR-2026-00075-agent-memory-manipulation.yaml +0 -117
  97. package/rules/context-exfiltration/ATR-2026-00102-disguised-analytics-exfiltration.yaml +0 -71
  98. package/rules/context-exfiltration/ATR-2026-00113-credential-theft.yaml +0 -89
  99. package/rules/context-exfiltration/ATR-2026-00114-oauth-token-abuse.yaml +0 -89
  100. package/rules/context-exfiltration/ATR-2026-00115-env-var-harvesting.yaml +0 -90
  101. package/rules/context-exfiltration/ATR-2026-00136-tool-response-data-piggyback.yaml +0 -100
  102. package/rules/context-exfiltration/ATR-2026-00141-example-format-key-leak.yaml +0 -52
  103. package/rules/context-exfiltration/ATR-2026-00142-piggyback-transition-words.yaml +0 -55
  104. package/rules/context-exfiltration/ATR-2026-00145-obfuscated-key-disclosure.yaml +0 -49
  105. package/rules/context-exfiltration/ATR-2026-00146-env-var-existence-probe.yaml +0 -49
  106. package/rules/data-poisoning/ATR-2026-00070-data-poisoning.yaml +0 -162
  107. package/rules/excessive-autonomy/ATR-2026-00050-runaway-agent-loop.yaml +0 -136
  108. package/rules/excessive-autonomy/ATR-2026-00051-resource-exhaustion.yaml +0 -139
  109. package/rules/excessive-autonomy/ATR-2026-00052-cascading-failure.yaml +0 -155
  110. package/rules/excessive-autonomy/ATR-2026-00098-unauthorized-financial-action.yaml +0 -157
  111. package/rules/excessive-autonomy/ATR-2026-00099-high-risk-tool-gate.yaml +0 -176
  112. package/rules/model-security/ATR-2026-00072-model-behavior-extraction.yaml +0 -117
  113. package/rules/model-security/ATR-2026-00073-malicious-finetuning-data.yaml +0 -110
  114. package/rules/privilege-escalation/ATR-2026-00040-privilege-escalation.yaml +0 -177
  115. package/rules/privilege-escalation/ATR-2026-00041-scope-creep.yaml +0 -126
  116. package/rules/privilege-escalation/ATR-2026-00107-delayed-execution-bypass.yaml +0 -69
  117. package/rules/privilege-escalation/ATR-2026-00110-eval-injection.yaml +0 -92
  118. package/rules/privilege-escalation/ATR-2026-00111-shell-escape.yaml +0 -93
  119. package/rules/privilege-escalation/ATR-2026-00112-dynamic-import-exploitation.yaml +0 -89
  120. package/rules/privilege-escalation/ATR-2026-00143-casual-privilege-escalation.yaml +0 -53
  121. package/rules/privilege-escalation/ATR-2026-00144-rationalized-safety-bypass.yaml +0 -49
  122. package/rules/prompt-injection/ATR-2026-00001-direct-prompt-injection.yaml +0 -563
  123. package/rules/prompt-injection/ATR-2026-00002-indirect-prompt-injection.yaml +0 -216
  124. package/rules/prompt-injection/ATR-2026-00003-jailbreak-attempt.yaml +0 -397
  125. package/rules/prompt-injection/ATR-2026-00004-system-prompt-override.yaml +0 -308
  126. package/rules/prompt-injection/ATR-2026-00005-multi-turn-injection.yaml +0 -183
  127. package/rules/prompt-injection/ATR-2026-00080-encoding-evasion.yaml +0 -88
  128. package/rules/prompt-injection/ATR-2026-00081-semantic-multi-turn.yaml +0 -85
  129. package/rules/prompt-injection/ATR-2026-00082-fingerprint-evasion.yaml +0 -84
  130. package/rules/prompt-injection/ATR-2026-00083-indirect-tool-injection.yaml +0 -87
  131. package/rules/prompt-injection/ATR-2026-00084-structured-data-injection.yaml +0 -86
  132. package/rules/prompt-injection/ATR-2026-00085-audit-evasion.yaml +0 -84
  133. package/rules/prompt-injection/ATR-2026-00086-visual-spoofing.yaml +0 -88
  134. package/rules/prompt-injection/ATR-2026-00087-rule-probing.yaml +0 -82
  135. package/rules/prompt-injection/ATR-2026-00088-adaptive-countermeasure.yaml +0 -84
  136. package/rules/prompt-injection/ATR-2026-00089-polymorphic-skill.yaml +0 -85
  137. package/rules/prompt-injection/ATR-2026-00090-threat-intel-exfil.yaml +0 -84
  138. package/rules/prompt-injection/ATR-2026-00091-nested-payload.yaml +0 -88
  139. package/rules/prompt-injection/ATR-2026-00092-consensus-poisoning.yaml +0 -92
  140. package/rules/prompt-injection/ATR-2026-00093-gradual-escalation.yaml +0 -86
  141. package/rules/prompt-injection/ATR-2026-00094-audit-bypass.yaml +0 -86
  142. package/rules/prompt-injection/ATR-2026-00097-cjk-injection-patterns.yaml +0 -339
  143. package/rules/prompt-injection/ATR-2026-00104-persona-hijacking.yaml +0 -74
  144. package/rules/prompt-injection/ATR-2026-00130-indirect-authority-claim.yaml +0 -97
  145. package/rules/prompt-injection/ATR-2026-00131-fictional-academic-framing.yaml +0 -93
  146. package/rules/prompt-injection/ATR-2026-00133-paraphrase-injection.yaml +0 -111
  147. package/rules/prompt-injection/ATR-2026-00137-authority-claim-injection.yaml +0 -52
  148. package/rules/prompt-injection/ATR-2026-00138-fictional-framing-bypass.yaml +0 -51
  149. package/rules/prompt-injection/ATR-2026-00140-indirect-reference-reversal.yaml +0 -52
  150. package/rules/prompt-injection/ATR-2026-00148-language-switch-injection.yaml +0 -71
  151. package/rules/skill-compromise/ATR-2026-00060-skill-impersonation.yaml +0 -155
  152. package/rules/skill-compromise/ATR-2026-00061-description-behavior-mismatch.yaml +0 -100
  153. package/rules/skill-compromise/ATR-2026-00062-hidden-capability.yaml +0 -98
  154. package/rules/skill-compromise/ATR-2026-00063-skill-chain-attack.yaml +0 -99
  155. package/rules/skill-compromise/ATR-2026-00064-over-permissioned-skill.yaml +0 -117
  156. package/rules/skill-compromise/ATR-2026-00065-skill-update-attack.yaml +0 -95
  157. package/rules/skill-compromise/ATR-2026-00066-parameter-injection.yaml +0 -108
  158. package/rules/skill-compromise/ATR-2026-00120-skill-instruction-injection.yaml +0 -121
  159. package/rules/skill-compromise/ATR-2026-00121-skill-dangerous-script.yaml +0 -165
  160. package/rules/skill-compromise/ATR-2026-00122-skill-weaponized-instruction.yaml +0 -114
  161. package/rules/skill-compromise/ATR-2026-00123-skill-overreach-permissions.yaml +0 -118
  162. package/rules/skill-compromise/ATR-2026-00124-skill-name-squatting.yaml +0 -98
  163. package/rules/skill-compromise/ATR-2026-00125-context-poisoning-compaction.yaml +0 -93
  164. package/rules/skill-compromise/ATR-2026-00126-skill-rug-pull-setup.yaml +0 -99
  165. package/rules/skill-compromise/ATR-2026-00127-subcommand-overflow.yaml +0 -74
  166. package/rules/skill-compromise/ATR-2026-00128-html-comment-hidden-payload.yaml +0 -79
  167. package/rules/skill-compromise/ATR-2026-00129-unicode-smuggling.yaml +0 -73
  168. package/rules/skill-compromise/ATR-2026-00134-fork-claim-impersonation.yaml +0 -86
  169. package/rules/skill-compromise/ATR-2026-00135-exfil-url-in-instructions.yaml +0 -82
  170. package/rules/skill-compromise/ATR-2026-00147-fork-impersonation.yaml +0 -48
  171. package/rules/tool-poisoning/ATR-2026-00010-mcp-malicious-response.yaml +0 -239
  172. package/rules/tool-poisoning/ATR-2026-00011-tool-output-injection.yaml +0 -196
  173. package/rules/tool-poisoning/ATR-2026-00012-unauthorized-tool-call.yaml +0 -201
  174. package/rules/tool-poisoning/ATR-2026-00013-tool-ssrf.yaml +0 -219
  175. package/rules/tool-poisoning/ATR-2026-00095-supply-chain-poisoning.yaml +0 -93
  176. package/rules/tool-poisoning/ATR-2026-00096-registry-poisoning.yaml +0 -95
  177. package/rules/tool-poisoning/ATR-2026-00100-consent-bypass-instruction.yaml +0 -82
  178. package/rules/tool-poisoning/ATR-2026-00101-trust-escalation-override.yaml +0 -68
  179. package/rules/tool-poisoning/ATR-2026-00103-hidden-safety-bypass-instruction.yaml +0 -73
  180. package/rules/tool-poisoning/ATR-2026-00105-silent-action-concealment.yaml +0 -69
  181. package/rules/tool-poisoning/ATR-2026-00106-schema-description-contradiction.yaml +0 -68
  182. package/spec/atr-schema.yaml +0 -404
package/dist/index.d.ts CHANGED
@@ -1,26 +1,8 @@
1
1
  /**
2
- * ATR (Agent Threat Rules) - Detection rules for AI Agent threats
2
+ * @panguard-ai/atr Thin wrapper around agent-threat-rules npm package.
3
3
  *
4
- * ATR is an open standard for writing detection rules specifically
5
- * for AI agent threats. Think "Sigma for AI Agents."
6
- *
7
- * @module agent-threat-rules
4
+ * All detection logic, rules, and types come from the upstream ATR project.
5
+ * This package exists only so monorepo consumers can import from '@panguard-ai/atr'.
8
6
  */
9
- export { ATREngine } from './engine.js';
10
- export type { ATREngineConfig } from './engine.js';
11
- export { SessionTracker } from './session-tracker.js';
12
- export type { SessionStateSnapshot } from './session-tracker.js';
13
- export { loadRuleFile, loadRulesFromDirectory, validateRule } from './loader.js';
14
- export { ModuleRegistry } from './modules/index.js';
15
- export type { ATRModule, ModuleCondition, ModuleResult } from './modules/index.js';
16
- export { SessionModule } from './modules/session.js';
17
- export { SemanticModule } from './modules/semantic.js';
18
- export type { SemanticModuleConfig } from './modules/semantic.js';
19
- export { SkillFingerprintStore } from './skill-fingerprint.js';
20
- export type { SkillFingerprint, BehaviorAnomaly, SkillFingerprintConfig, } from './skill-fingerprint.js';
21
- export { RuleScaffolder } from './rule-scaffolder.js';
22
- export type { ScaffoldInput, ScaffoldResult, ScaffoldOptions } from './rule-scaffolder.js';
23
- export { CoverageAnalyzer } from './coverage-analyzer.js';
24
- export type { CoverageGap, CoverageReport } from './coverage-analyzer.js';
25
- export type { ATRRule, ATRMatch, AgentEvent, AgentEventType, ATRAction, ATRCategory, ATRSeverity, ATRStatus, ATRConfidence, ATRSourceType, ATRMatchType, ATROperator, ATRReferences, ATRTags, ATRAgentSource, ATRDetection, ATRResponse, ATRTestCases, ATRTestCase, ATRPatternCondition, ATRBehavioralCondition, ATRSequenceCondition, ATRSequenceStep, } from './types.js';
7
+ export * from 'agent-threat-rules';
26
8
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1E,YAAY,EACV,OAAO,EACP,QAAQ,EACR,UAAU,EACV,cAAc,EACd,SAAS,EACT,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,cAAc,EACd,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,GAChB,MAAM,YAAY,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,oBAAoB,CAAC"}
package/dist/index.js CHANGED
@@ -1,18 +1,8 @@
1
1
  /**
2
- * ATR (Agent Threat Rules) - Detection rules for AI Agent threats
2
+ * @panguard-ai/atr Thin wrapper around agent-threat-rules npm package.
3
3
  *
4
- * ATR is an open standard for writing detection rules specifically
5
- * for AI agent threats. Think "Sigma for AI Agents."
6
- *
7
- * @module agent-threat-rules
4
+ * All detection logic, rules, and types come from the upstream ATR project.
5
+ * This package exists only so monorepo consumers can import from '@panguard-ai/atr'.
8
6
  */
9
- export { ATREngine } from './engine.js';
10
- export { SessionTracker } from './session-tracker.js';
11
- export { loadRuleFile, loadRulesFromDirectory, validateRule } from './loader.js';
12
- export { ModuleRegistry } from './modules/index.js';
13
- export { SessionModule } from './modules/session.js';
14
- export { SemanticModule } from './modules/semantic.js';
15
- export { SkillFingerprintStore } from './skill-fingerprint.js';
16
- export { RuleScaffolder } from './rule-scaffolder.js';
17
- export { CoverageAnalyzer } from './coverage-analyzer.js';
7
+ export * from 'agent-threat-rules';
18
8
  //# sourceMappingURL=index.js.map
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAM/D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,oBAAoB,CAAC"}
@@ -0,0 +1,8 @@
1
+ /**
2
+ * @panguard-ai/atr/quality — re-export of ATR Quality Standard library.
3
+ *
4
+ * Thin wrapper around agent-threat-rules/quality. See RFC-001 in the ATR
5
+ * repo for the full specification.
6
+ */
7
+ export * from 'agent-threat-rules/quality';
8
+ //# sourceMappingURL=quality.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"quality.d.ts","sourceRoot":"","sources":["../src/quality.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,4BAA4B,CAAC"}
@@ -0,0 +1,8 @@
1
+ /**
2
+ * @panguard-ai/atr/quality — re-export of ATR Quality Standard library.
3
+ *
4
+ * Thin wrapper around agent-threat-rules/quality. See RFC-001 in the ATR
5
+ * repo for the full specification.
6
+ */
7
+ export * from 'agent-threat-rules/quality';
8
+ //# sourceMappingURL=quality.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"quality.js","sourceRoot":"","sources":["../src/quality.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,4BAA4B,CAAC"}
package/package.json CHANGED
@@ -1,75 +1,41 @@
1
1
  {
2
2
  "name": "@panguard-ai/atr",
3
- "version": "1.4.2",
3
+ "version": "1.5.0",
4
4
  "type": "module",
5
- "description": "Open detection rules for AI agent threats. Like Sigma, but for prompt injection, tool poisoning, and agent manipulation.",
5
+ "description": "Thin wrapper around agent-threat-rules re-exports all detection logic for monorepo consumers.",
6
6
  "main": "./dist/index.js",
7
7
  "types": "./dist/index.d.ts",
8
- "bin": {
9
- "atr": "./dist/cli.js",
10
- "agent-threat-rules": "./dist/cli.js"
11
- },
12
8
  "exports": {
13
9
  ".": {
14
- "import": "./dist/index.js",
15
- "types": "./dist/index.d.ts"
16
- },
17
- "./mcp": {
18
- "import": "./dist/mcp-server.js",
19
- "types": "./dist/mcp-server.d.ts"
10
+ "types": "./dist/index.d.ts",
11
+ "import": "./dist/index.js"
20
12
  },
21
- "./rules": "./rules",
22
- "./spec": "./spec/atr-schema.yaml"
23
- },
24
- "engines": {
25
- "node": ">=20.0.0"
26
- },
27
- "license": "MIT",
28
- "repository": {
29
- "type": "git",
30
- "url": "https://github.com/Agent-Threat-Rule/agent-threat-rules.git"
31
- },
32
- "homepage": "https://github.com/Agent-Threat-Rule/agent-threat-rules",
33
- "bugs": {
34
- "url": "https://github.com/Agent-Threat-Rule/agent-threat-rules/issues"
35
- },
36
- "keywords": [
37
- "ai-security",
38
- "agent-security",
39
- "prompt-injection",
40
- "threat-detection",
41
- "mcp-security",
42
- "llm-security",
43
- "atr"
44
- ],
45
- "publishConfig": {
46
- "access": "public"
13
+ "./quality": {
14
+ "types": "./dist/quality.d.ts",
15
+ "import": "./dist/quality.js"
16
+ }
47
17
  },
48
18
  "files": [
49
19
  "dist",
50
- "spec",
51
- "rules",
52
20
  "package.json",
53
21
  "README.md"
54
22
  ],
23
+ "publishConfig": {
24
+ "access": "public"
25
+ },
26
+ "license": "MIT",
55
27
  "scripts": {
56
28
  "build": "tsc --build",
57
29
  "clean": "rm -rf dist tsconfig.tsbuildinfo",
58
30
  "typecheck": "tsc --noEmit",
59
- "test": "vitest run",
60
- "dev": "tsc --build --watch",
61
- "validate": "tsx tests/validate-rules.ts",
31
+ "test": "echo 'Tests run in agent-threat-rules upstream'",
62
32
  "prepublishOnly": "npm run build"
63
33
  },
64
34
  "dependencies": {
65
- "@modelcontextprotocol/sdk": "^1.12.0",
66
- "js-yaml": "^4.1.0"
35
+ "agent-threat-rules": "^1.2.0"
67
36
  },
68
37
  "devDependencies": {
69
- "@types/js-yaml": "^4.0.9",
70
38
  "@types/node": "^22.14.0",
71
- "tsx": "^4.7.0",
72
- "typescript": "~5.7.3",
73
- "vitest": "^3.0.0"
39
+ "typescript": "~5.7.3"
74
40
  }
75
41
  }
package/dist/cli.d.ts DELETED
@@ -1,14 +0,0 @@
1
- #!/usr/bin/env node
2
- /**
3
- * ATR CLI - Command-line interface for Agent Threat Rules
4
- *
5
- * Console output and dynamic filesystem access are expected in a CLI tool.
6
- *
7
- * Usage:
8
- * npx agent-threat-rules scan <events.json> Scan events against all rules
9
- * npx agent-threat-rules validate <rule.yaml> Validate a rule file
10
- * npx agent-threat-rules test <rule.yaml> Run a rule's test cases
11
- * npx agent-threat-rules stats Show rule collection stats
12
- */
13
- export {};
14
- //# sourceMappingURL=cli.d.ts.map
package/dist/cli.d.ts.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;GAUG"}