@panguard-ai/atr 1.4.3 → 1.5.1

package/dist/skill-fingerprint.js

@@ -0,0 +1,284 @@
+/**
+ * Skill Behavioral Fingerprint
+ *
+ * Tracks what each skill "normally does" across invocations, then detects
+ * behavioral drift when a previously-trusted skill starts acting differently.
+ *
+ * Solves the "installed then turns malicious" scenario:
+ * - First N invocations: build fingerprint (what APIs, what patterns, what scope)
+ * - After fingerprint stabilizes: flag any deviation as anomaly
+ *
+ * @module agent-threat-rules/skill-fingerprint
+ */
+import { createHash } from 'node:crypto';
+import { extractCapabilities as sharedExtractCapabilities, } from './capability-extractor.js';
+// ---------------------------------------------------------------------------
+// Capability extraction (shared with tier0-invariant.ts)
+// ---------------------------------------------------------------------------
+/** Wrapper for shared extractCapabilities, mapping to local format */
+function extractCapabilities(text) {
+    const caps = sharedExtractCapabilities(text);
+    return {
+        filesystemOps: [...caps.filesystemOps],
+        networkTargets: [...caps.networkTargets],
+        envAccesses: [...caps.envAccesses],
+        processExecs: [...caps.processExecs],
+        outputPatterns: [...caps.outputPatterns],
+    };
+}
+// ---------------------------------------------------------------------------
+// Fingerprint Store
+// ---------------------------------------------------------------------------
+/** Default invocations needed before fingerprint is considered stable */
+const DEFAULT_STABILITY_THRESHOLD = 10;
+/** Consecutive invocations with no new capabilities to mark stable */
+const DEFAULT_STABLE_STREAK = 5;
+/** Maximum number of skills to track */
+const MAX_SKILLS = 5_000;
+export class SkillFingerprintStore {
+    fingerprints = new Map();
+    stabilityThreshold;
+    stableStreak;
+    constructor(config) {
+        this.stabilityThreshold = config?.stabilityThreshold ?? DEFAULT_STABILITY_THRESHOLD;
+        this.stableStreak = config?.stableStreak ?? DEFAULT_STABLE_STREAK;
+    }
+    /**
+     * Record a skill invocation and detect behavioral anomalies.
+     * Returns anomalies if the fingerprint was stable and new capabilities appeared.
+     */
+    recordInvocation(skillName, event) {
+        const now = Date.now();
+        const fp = this.getOrCreate(skillName, now);
+        fp.invocationCount++;
+        fp.lastSeen = now;
+        // Extract capabilities from event content + fields
+        const content = [
+            event.content ?? '',
+            event.fields?.['tool_args'] ?? '',
+            event.fields?.['tool_response'] ?? '',
+        ].join('\n');
+        const caps = extractCapabilities(content);
+        // Check for anomalies (only if fingerprint is stable)
+        const anomalies = [];
+        const isStable = fp.stableHash !== null;
+        if (isStable) {
+            // Detect NEW capabilities not in the stable fingerprint
+            for (const op of caps.filesystemOps) {
+                if (!fp.filesystemOps.has(op)) {
+                    anomalies.push({
+                        skillName,
+                        anomalyType: 'new_filesystem_op',
+                        description: `Skill "${skillName}" performing new filesystem operation: ${op} (not in baseline)`,
+                        severity: op === 'delete' ? 'critical' : op === 'write' ? 'high' : 'medium',
+                        newValue: op,
+                        timestamp: now,
+                    });
+                }
+            }
+            for (const target of caps.networkTargets) {
+                if (!fp.networkTargets.has(target)) {
+                    anomalies.push({
+                        skillName,
+                        anomalyType: 'new_network_target',
+                        description: `Skill "${skillName}" contacting new network target: ${target}`,
+                        severity: 'high',
+                        newValue: target,
+                        timestamp: now,
+                    });
+                }
+            }
+            for (const env of caps.envAccesses) {
+                if (!fp.envAccesses.has(env)) {
+                    const isSensitive = /(?:KEY|SECRET|TOKEN|PASSWORD|CREDENTIAL)/i.test(env);
+                    anomalies.push({
+                        skillName,
+                        anomalyType: 'new_env_access',
+                        description: `Skill "${skillName}" accessing new env var: ${env}`,
+                        severity: isSensitive ? 'critical' : 'medium',
+                        newValue: env,
+                        timestamp: now,
+                    });
+                }
+            }
+            for (const proc of caps.processExecs) {
+                if (!fp.processExecs.has(proc)) {
+                    anomalies.push({
+                        skillName,
+                        anomalyType: 'new_process_exec',
+                        description: `Skill "${skillName}" executing new process: ${proc}`,
+                        severity: 'critical',
+                        newValue: proc,
+                        timestamp: now,
+                    });
+                }
+            }
+            for (const pat of caps.outputPatterns) {
+                if (!fp.outputPatterns.has(pat)) {
+                    anomalies.push({
+                        skillName,
+                        anomalyType: 'new_output_pattern',
+                        description: `Skill "${skillName}" exhibiting new pattern: ${pat}`,
+                        severity: pat === 'exfiltration' ? 'critical' : 'high',
+                        newValue: pat,
+                        timestamp: now,
+                    });
+                }
+            }
+        }
+        // Update fingerprint with observed capabilities
+        let newCapsSeen = false;
+        for (const op of caps.filesystemOps) {
+            if (!fp.filesystemOps.has(op)) {
+                fp.filesystemOps.add(op);
+                newCapsSeen = true;
+            }
+        }
+        for (const t of caps.networkTargets) {
+            if (!fp.networkTargets.has(t)) {
+                fp.networkTargets.add(t);
+                newCapsSeen = true;
+            }
+        }
+        for (const e of caps.envAccesses) {
+            if (!fp.envAccesses.has(e)) {
+                fp.envAccesses.add(e);
+                newCapsSeen = true;
+            }
+        }
+        for (const p of caps.processExecs) {
+            if (!fp.processExecs.has(p)) {
+                fp.processExecs.add(p);
+                newCapsSeen = true;
+            }
+        }
+        for (const o of caps.outputPatterns) {
+            if (!fp.outputPatterns.has(o)) {
+                fp.outputPatterns.add(o);
+                newCapsSeen = true;
+            }
+        }
+        // Track stability
+        if (!isStable) {
+            if (newCapsSeen) {
+                fp.stableStreak = 0;
+            }
+            else {
+                fp.stableStreak++;
+            }
+            // Mark stable when threshold met
+            if (fp.invocationCount >= this.stabilityThreshold &&
+                fp.stableStreak >= this.stableStreak) {
+                fp.stableHash = this.computeCapabilityHash(fp);
+            }
+        }
+        return anomalies;
+    }
+    /**
+     * Get an immutable fingerprint snapshot for a skill.
+     */
+    getFingerprint(skillName) {
+        const fp = this.fingerprints.get(skillName);
+        if (!fp)
+            return undefined;
+        return {
+            skillName: fp.skillName,
+            invocationCount: fp.invocationCount,
+            firstSeen: fp.firstSeen,
+            lastSeen: fp.lastSeen,
+            isStable: fp.stableHash !== null,
+            capabilities: {
+                filesystemOps: new Set(fp.filesystemOps),
+                networkTargets: new Set(fp.networkTargets),
+                envAccesses: new Set(fp.envAccesses),
+                processExecs: new Set(fp.processExecs),
+                outputPatterns: new Set(fp.outputPatterns),
+            },
+            capabilityHash: fp.stableHash ?? this.computeCapabilityHash(fp),
+        };
+    }
+    /** Get all tracked skill names */
+    getTrackedSkills() {
+        return [...this.fingerprints.keys()];
+    }
+    /** Get count of stable fingerprints */
+    getStableCount() {
+        let count = 0;
+        for (const fp of this.fingerprints.values()) {
+            if (fp.stableHash !== null)
+                count++;
+        }
+        return count;
+    }
+    /** Get total tracked skills */
+    getTrackedCount() {
+        return this.fingerprints.size;
+    }
+    /**
+     * Reset a skill's fingerprint (e.g., after a legitimate update).
+     */
+    resetFingerprint(skillName) {
+        this.fingerprints.delete(skillName);
+    }
+    /**
+     * Evict fingerprints not seen since cutoffMs ago.
+     */
+    cleanup(cutoffMs) {
+        const cutoff = Date.now() - cutoffMs;
+        let evicted = 0;
+        for (const [name, fp] of this.fingerprints) {
+            if (fp.lastSeen < cutoff) {
+                this.fingerprints.delete(name);
+                evicted++;
+            }
+        }
+        return evicted;
+    }
+    // -----------------------------------------------------------------------
+    // Private
+    // -----------------------------------------------------------------------
+    getOrCreate(skillName, now) {
+        const existing = this.fingerprints.get(skillName);
+        if (existing)
+            return existing;
+        // Evict oldest if at capacity
+        if (this.fingerprints.size >= MAX_SKILLS) {
+            let oldestName;
+            let oldestTime = Infinity;
+            for (const [name, fp] of this.fingerprints) {
+                if (fp.lastSeen < oldestTime) {
+                    oldestTime = fp.lastSeen;
+                    oldestName = name;
+                }
+            }
+            if (oldestName)
+                this.fingerprints.delete(oldestName);
+        }
+        const fp = {
+            skillName,
+            invocationCount: 0,
+            firstSeen: now,
+            lastSeen: now,
+            filesystemOps: new Set(),
+            networkTargets: new Set(),
+            envAccesses: new Set(),
+            processExecs: new Set(),
+            outputPatterns: new Set(),
+            stableHash: null,
+            stableStreak: 0,
+        };
+        this.fingerprints.set(skillName, fp);
+        return fp;
+    }
+    computeCapabilityHash(fp) {
+        const parts = [
+            [...fp.filesystemOps].sort().join(','),
+            [...fp.networkTargets].sort().join(','),
+            [...fp.envAccesses].sort().join(','),
+            [...fp.processExecs].sort().join(','),
+            [...fp.outputPatterns].sort().join(','),
+        ];
+        return createHash('sha256').update(parts.join('|')).digest('hex').slice(0, 16);
+    }
+}
+//# sourceMappingURL=skill-fingerprint.js.map

package/dist/skill-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-fingerprint.js","sourceRoot":"","sources":["../src/skill-fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,mBAAmB,IAAI,yBAAyB,GAEjD,MAAM,2BAA2B,CAAC;AAiEnC,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,sEAAsE;AACtE,SAAS,mBAAmB,CAAC,IAAY;IAOvC,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO;QACL,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;QACtC,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QACxC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QAClC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QACpC,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,wCAAwC;AACxC,MAAM,UAAU,GAAG,KAAK,CAAC;AASzB,MAAM,OAAO,qBAAqB;IACf,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,kBAAkB,CAAS;IAC3B,YAAY,CAAS;IAEtC,YAAY,MAA+B;QACzC,IAAI,CAAC,kBAAkB,GAAG,MAAM,EAAE,kBAAkB,IAAI,2BAA2B,CAAC;QACpF,IAAI,CAAC,YAAY,GAAG,MAAM,EAAE,YAAY,IAAI,qBAAqB,CAAC;IACpE,CAAC;IAED;;;OAGG;IACH,gBAAgB,CACd,SAAiB,EACjB,KAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5C,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC;QAElB,mDAAmD;QACnD,MAAM,OAAO,GAAG;YACd,KAAK,CAAC,OAAO,IAAI,EAAE;YACnB,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;YACjC,KAAK,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE1C,sDAAsD;QACtD,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QAExC,IAAI,QAAQ,EAAE,CAAC;YACb,wDAAwD;YACxD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9B,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS;wBACT,WAAW,EAAE,mBAAmB;wBAChC,WAAW,EAAE,UAAU,SAAS,0CAA0C,EAAE,oBAAoB;wBAChG,QAAQ,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBAC3E,QAAQ,EAAE,EAAE;wBACZ,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS;wBACT,WAAW,EAAE,oBAAoB;wBACjC,WAAW,EAAE,UAAU,SAAS,oCAAoC,MAAM,EAAE;wBAC5E,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,MAAM;wBAChB,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,WAAW,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC1E,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS;wBACT,WAAW,EAAE,gBAAgB;wBAC7B,WAAW,EAAE,UAAU,SAAS,4BAA4B,GAAG,EAAE;wBACjE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;wBAC7C,QAAQ,EAAE,GAAG;wBACb,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACrC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS;wBACT,WAAW,EAAE,kBAAkB;wBAC/B,WAAW,EAAE,UAAU,SAAS,4BAA4B,IAAI,EAAE;wBAClE,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,IAAI;wBACd,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS;wBACT,WAAW,EAAE,oBAAoB;wBACjC,WAAW,EAAE,UAAU,SAAS,6BAA6B,GAAG,EAAE;wBAClE,QAAQ,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;wBACtD,QAAQ,EAAE,GAAG;wBACb,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;YAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;YAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;YAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;YAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;YAAC,CAAC;QAClF,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,WAAW,EAAE,CAAC;gBAChB,EAAE,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,YAAY,EAAE,CAAC;YACpB,CAAC;YAED,iCAAiC;YACjC,IACE,EAAE,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB;gBAC7C,EAAE,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EACpC,CAAC;gBACD,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAE1B,OAAO;YACL,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,eAAe,EAAE,EAAE,CAAC,eAAe;YACnC,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,UAAU,KAAK,IAAI;YAChC,YAAY,EAAE;gBACZ,aAAa,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC;gBACxC,cAAc,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC;gBAC1C,WAAW,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC;gBACpC,YAAY,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC;gBACtC,cAAc,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC;aAC3C;YACD,cAAc,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,gBAAgB;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,uCAAuC;IACvC,cAAc;QACZ,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,UAAU,KAAK,IAAI;gBAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+BAA+B;IAC/B,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB;QAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,IAAI,EAAE,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACzB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,UAAU;IACV,0EAA0E;IAElE,WAAW,CAAC,SAAiB,EAAE,GAAW;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,8BAA8B;QAC9B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;YACzC,IAAI,UAA8B,CAAC;YACnC,IAAI,UAAU,GAAG,QAAQ,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,IAAI,EAAE,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;oBAC7B,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC;oBACzB,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,IAAI,UAAU;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,GAAuB;YAC7B,SAAS;YACT,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;YACb,aAAa,EAAE,IAAI,GAAG,EAAE;YACxB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,CAAC;SAChB,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,qBAAqB,CAAC,EAAsB;QAClD,MAAM,KAAK,GAAG;YACZ,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACtC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;SACxC,CAAC;QACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/tc-reporter.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Threat Cloud Reporter — turns any ATR integration into a global sensor endpoint.
+ *
+ * Usage:
+ *   import { ATREngine, createTCReporter } from 'agent-threat-rules';
+ *
+ *   const engine = new ATREngine({
+ *     reporter: createTCReporter(),          // anonymous, no API key needed
+ *   });
+ *
+ *   // or with explicit config:
+ *   const engine = new ATREngine({
+ *     reporter: createTCReporter({
+ *       tcUrl: 'https://tc.panguard.ai',
+ *       apiKey: process.env.TC_API_KEY,
+ *       batchSize: 50,
+ *       flushIntervalMs: 60_000,
+ *     }),
+ *   });
+ *
+ * Privacy: only ruleId, severity, category, confidence, contentHash, and timestamp
+ * are sent. scanTarget is sanitized to a short label (max 64 chars, no path separators).
+ * No raw content, no PII, no file paths.
+ *
+ * @module tc-reporter
+ */
+import type { ATRReporter } from './engine.js';
+export interface TCReporterConfig {
+    /** Threat Cloud endpoint. Default: https://tc.panguard.ai */
+    readonly tcUrl?: string;
+    /** Optional API key for authenticated reporting. Default: env TC_API_KEY */
+    readonly apiKey?: string;
+    /** Flush buffer when it reaches this size. Default: 50 */
+    readonly batchSize?: number;
+    /** Periodic flush interval in ms. Default: 60000 (60s) */
+    readonly flushIntervalMs?: number;
+    /** Unique client ID. Default: random UUID per process */
+    readonly clientId?: string;
+    /** Called on flush errors. Default: no-op (silent). Provide your own logger. */
+    readonly onError?: (error: Error) => void;
+}
+/**
+ * Create an ATRReporter that buffers detection events and POSTs them
+ * to ATR Threat Cloud in batches. Each reporter instance = one sensor endpoint.
+ */
+export declare function createTCReporter(config?: TCReporterConfig): ATRReporter & {
+    flush(): Promise<void>;
+    destroy(): Promise<void>;
+};
+//# sourceMappingURL=tc-reporter.d.ts.map

package/dist/tc-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-reporter.d.ts","sourceRoot":"","sources":["../src/tc-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAsC,MAAM,aAAa,CAAC;AAInF,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAC3C;AAYD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG;IACzE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CA4HA"}

package/dist/tc-reporter.js

@@ -0,0 +1,164 @@
+/**
+ * Threat Cloud Reporter — turns any ATR integration into a global sensor endpoint.
+ *
+ * Usage:
+ *   import { ATREngine, createTCReporter } from 'agent-threat-rules';
+ *
+ *   const engine = new ATREngine({
+ *     reporter: createTCReporter(),          // anonymous, no API key needed
+ *   });
+ *
+ *   // or with explicit config:
+ *   const engine = new ATREngine({
+ *     reporter: createTCReporter({
+ *       tcUrl: 'https://tc.panguard.ai',
+ *       apiKey: process.env.TC_API_KEY,
+ *       batchSize: 50,
+ *       flushIntervalMs: 60_000,
+ *     }),
+ *   });
+ *
+ * Privacy: only ruleId, severity, category, confidence, contentHash, and timestamp
+ * are sent. scanTarget is sanitized to a short label (max 64 chars, no path separators).
+ * No raw content, no PII, no file paths.
+ *
+ * @module tc-reporter
+ */
+import { randomUUID } from 'node:crypto';
+const MAX_BUFFER = 1000;
+/**
+ * Create an ATRReporter that buffers detection events and POSTs them
+ * to ATR Threat Cloud in batches. Each reporter instance = one sensor endpoint.
+ */
+export function createTCReporter(config) {
+    const tcUrl = (config?.tcUrl ?? 'https://tc.panguard.ai').replace(/\/+$/, '');
+    const apiKey = config?.apiKey ?? process.env.TC_API_KEY ?? '';
+    const batchSize = config?.batchSize ?? 50;
+    const flushIntervalMs = config?.flushIntervalMs ?? 60_000;
+    const clientId = config?.clientId ?? randomUUID();
+    const onError = config?.onError ?? (() => { });
+    // Enforce HTTPS for non-localhost
+    if (tcUrl.startsWith('http://') && !isLocalhost(tcUrl)) {
+        throw new Error('HTTPS required for Threat Cloud endpoint (use https://)');
+    }
+    let buffer = [];
+    let flushing = false;
+    let flushTimer = null;
+    // Start periodic flush
+    flushTimer = setInterval(() => { void flushBuffer(); }, flushIntervalMs);
+    // Don't keep the process alive just for flushing
+    if (flushTimer && typeof flushTimer === 'object' && 'unref' in flushTimer) {
+        flushTimer.unref();
+    }
+    async function flushBuffer() {
+        if (flushing || buffer.length === 0)
+            return;
+        flushing = true;
+        const batch = [...buffer];
+        buffer = [];
+        // Map ATR events to TC ThreatDataSchema format
+        const tcEvents = batch.map((e) => ({
+            attackSourceIP: clientId,
+            attackType: e.category,
+            mitreTechnique: e.ruleId,
+            ruleMatched: e.ruleId,
+            timestamp: e.timestamp,
+            region: 'unknown',
+            // Extra fields for richer data (TC ignores unknown fields via Zod passthrough)
+            severity: e.severity,
+            confidence: e.confidence,
+            contentHash: e.contentHash,
+            scanTarget: e.scanTarget,
+        }));
+        try {
+            const res = await fetch(`${tcUrl}/api/threats`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-Panguard-Client-Id': clientId,
+                    ...(apiKey ? { 'Authorization': `Bearer ${apiKey}` } : {}),
+                },
+                body: JSON.stringify({ events: tcEvents }),
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (!res.ok) {
+                buffer = [...batch, ...buffer].slice(0, MAX_BUFFER);
+                onError(new Error(`TC upload failed: HTTP ${res.status}`));
+            }
+        }
+        catch (err) {
+            buffer = [...batch, ...buffer].slice(0, MAX_BUFFER);
+            onError(err instanceof Error ? err : new Error(String(err)));
+        }
+        finally {
+            flushing = false;
+        }
+    }
+    function enqueue(event) {
+        buffer = [...buffer, event];
+        // Cap buffer to prevent memory leak
+        if (buffer.length >= MAX_BUFFER) {
+            buffer = buffer.slice(-MAX_BUFFER);
+        }
+        // Auto-flush when batch size reached
+        if (buffer.length >= batchSize) {
+            void flushBuffer();
+        }
+    }
+    const reporter = {
+        onDetection: (report) => {
+            enqueue({
+                ruleId: report.ruleId,
+                severity: report.severity,
+                category: report.category,
+                confidence: report.confidence,
+                contentHash: report.contentHash,
+                timestamp: report.timestamp,
+                scanTarget: sanitizeScanTarget(report.scanTarget),
+            });
+        },
+        onClean: (report) => {
+            enqueue({
+                ruleId: '__clean__',
+                severity: 'none',
+                category: 'clean',
+                confidence: 1,
+                contentHash: report.contentHash,
+                timestamp: report.timestamp,
+                scanTarget: sanitizeScanTarget(report.scanTarget),
+            });
+        },
+        /** Manually flush all buffered events to TC. Call before process exit. */
+        flush: flushBuffer,
+        /** Stop periodic flush timer and flush remaining events. Await to ensure delivery. */
+        async destroy() {
+            if (flushTimer) {
+                clearInterval(flushTimer);
+                flushTimer = null;
+            }
+            await flushBuffer();
+        },
+    };
+    return reporter;
+}
+/** Strip path separators and truncate to prevent PII leakage via scanTarget. */
+function sanitizeScanTarget(target) {
+    return target
+        .replace(/[/\\]/g, '-')
+        .replace(/\.\./g, '')
+        .slice(0, 64);
+}
+function isLocalhost(url) {
+    try {
+        const parsed = new URL(url);
+        const h = parsed.hostname;
+        return h === 'localhost'
+            || h === '127.0.0.1'
+            || h === '::1'
+            || h === '[::1]';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=tc-reporter.js.map

package/dist/tc-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-reporter.js","sourceRoot":"","sources":["../src/tc-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,GAAG,IAAI,CAAC;AA2BxB;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB;IAIxD,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,MAAM,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAiD,CAAC,CAAC,CAAC;IAE7F,kCAAkC;IAClC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,GAAkB,EAAE,CAAC;IAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAA0C,IAAI,CAAC;IAE7D,uBAAuB;IACvB,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACzE,iDAAiD;IACjD,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1E,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,WAAW;QACxB,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC5C,QAAQ,GAAG,IAAI,CAAC;QAEhB,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAC1B,MAAM,GAAG,EAAE,CAAC;QAEZ,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE,CAAC,CAAC,QAAQ;YACtB,cAAc,EAAE,CAAC,CAAC,MAAM;YACxB,WAAW,EAAE,CAAC,CAAC,MAAM;YACrB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,+EAA+E;YAC/E,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,cAAc,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,sBAAsB,EAAE,QAAQ;oBAChC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;gBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,KAAkB;QACjC,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5B,oCAAoC;QACpC,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QACD,qCAAqC;QACrC,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,KAAK,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAGV;QACF,WAAW,EAAE,CAAC,MAA0B,EAAE,EAAE;YAC1C,OAAO,CAAC;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC,MAAsB,EAAE,EAAE;YAClC,OAAO,CAAC;gBACN,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,CAAC;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAC1E,KAAK,EAAE,WAAW;QAElB,sFAAsF;QACtF,KAAK,CAAC,OAAO;YACX,IAAI,UAAU,EAAE,CAAC;gBACf,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1B,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,MAAM,WAAW,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,MAAc;IACxC,OAAO,MAAM;SACV,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC1B,OAAO,CAAC,KAAK,WAAW;eACnB,CAAC,KAAK,WAAW;eACjB,CAAC,KAAK,KAAK;eACX,CAAC,KAAK,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/tier0-invariant.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Tier 0: Invariant Enforcement
+ *
+ * Hard boundaries that enforce what a skill is ALLOWED to do,
+ * regardless of what its description says or how it phrases requests.
+ *
+ * This is NOT pattern matching. It is permission checking.
+ * A skill declares capabilities in its manifest. Any action outside
+ * the manifest is immediately denied with severity=critical.
+ *
+ * Inspired by Tesla's AEB (Automatic Emergency Braking):
+ * it doesn't care what the neural network thinks -- it enforces physics.
+ *
+ * @module agent-threat-rules/tier0-invariant
+ */
+import type { AgentEvent, ATRMatch } from './types.js';
+/** Skill capability manifest -- declares what a skill is allowed to do */
+export interface SkillManifest {
+    readonly skillId: string;
+    readonly allowedPaths?: readonly string[];
+    readonly allowedHosts?: readonly string[];
+    readonly allowedEnvVars?: readonly string[];
+    readonly allowedCommands?: readonly string[];
+    readonly maxNetworkCalls?: number;
+    readonly allowConfigModification?: boolean;
+}
+export type InvariantViolationType = 'path_scope' | 'host_scope' | 'env_scope' | 'command_scope' | 'config_modification' | 'network_limit';
+/** Result when an invariant is violated */
+export interface InvariantViolation {
+    readonly skillId: string;
+    readonly violationType: InvariantViolationType;
+    readonly description: string;
+    readonly observedValue: string;
+    readonly allowedValues: readonly string[];
+}
+export declare class InvariantChecker {
+    private readonly manifests;
+    constructor(manifests: ReadonlyMap<string, SkillManifest> | SkillManifest[]);
+    /**
+     * Check an event against the skill's manifest.
+     * Returns empty array if no violations (or no manifest for the skill).
+     */
+    check(event: AgentEvent): readonly InvariantViolation[];
+    /** Build a synthetic ATRMatch from an invariant violation */
+    buildDenyMatch(violation: InvariantViolation): ATRMatch;
+    /** Resolve skill ID from event metadata */
+    private resolveSkillId;
+}
+//# sourceMappingURL=tier0-invariant.d.ts.map

package/dist/tier0-invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier0-invariant.d.ts","sourceRoot":"","sources":["../src/tier0-invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAwB,MAAM,YAAY,CAAC;AA6B7E,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,YAAY,GACZ,WAAW,GACX,eAAe,GACf,qBAAqB,GACrB,eAAe,CAAC;AAEpB,2CAA2C;AAC3C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAMD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;gBAEnD,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,aAAa,EAAE;IAY3E;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,kBAAkB,EAAE;IAsGvD,6DAA6D;IAC7D,cAAc,CAAC,SAAS,EAAE,kBAAkB,GAAG,QAAQ;IAgCvD,2CAA2C;IAC3C,OAAO,CAAC,cAAc;CAKvB"}