@panguard-ai/atr 1.4.3 → 1.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/action-executor.d.ts +44 -0
- package/dist/action-executor.d.ts.map +1 -0
- package/dist/action-executor.js +130 -0
- package/dist/action-executor.js.map +1 -0
- package/dist/adapters/default-adapter.d.ts +24 -0
- package/dist/adapters/default-adapter.d.ts.map +1 -0
- package/dist/adapters/default-adapter.js +51 -0
- package/dist/adapters/default-adapter.js.map +1 -0
- package/dist/adapters/stdio-adapter.d.ts +30 -0
- package/dist/adapters/stdio-adapter.d.ts.map +1 -0
- package/dist/adapters/stdio-adapter.js +128 -0
- package/dist/adapters/stdio-adapter.js.map +1 -0
- package/dist/badge.d.ts +42 -0
- package/dist/badge.d.ts.map +1 -0
- package/dist/badge.js +163 -0
- package/dist/badge.js.map +1 -0
- package/dist/capability-extractor.d.ts +35 -0
- package/dist/capability-extractor.d.ts.map +1 -0
- package/dist/capability-extractor.js +91 -0
- package/dist/capability-extractor.js.map +1 -0
- package/dist/cli/scan-handler.d.ts +21 -0
- package/dist/cli/scan-handler.d.ts.map +1 -0
- package/dist/cli/scan-handler.js +276 -0
- package/dist/cli/scan-handler.js.map +1 -0
- package/dist/cli/tc-pipeline.d.ts +18 -0
- package/dist/cli/tc-pipeline.d.ts.map +1 -0
- package/dist/cli/tc-pipeline.js +295 -0
- package/dist/cli/tc-pipeline.js.map +1 -0
- package/dist/cli.d.ts +12 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +894 -0
- package/dist/cli.js.map +1 -0
- package/dist/content-hash.d.ts +7 -0
- package/dist/content-hash.d.ts.map +1 -0
- package/dist/content-hash.js +10 -0
- package/dist/content-hash.js.map +1 -0
- package/dist/converters/elastic.d.ts +36 -0
- package/dist/converters/elastic.d.ts.map +1 -0
- package/dist/converters/elastic.js +125 -0
- package/dist/converters/elastic.js.map +1 -0
- package/dist/converters/generic-regex.d.ts +37 -0
- package/dist/converters/generic-regex.d.ts.map +1 -0
- package/dist/converters/generic-regex.js +59 -0
- package/dist/converters/generic-regex.js.map +1 -0
- package/dist/converters/index.d.ts +32 -0
- package/dist/converters/index.d.ts.map +1 -0
- package/dist/converters/index.js +38 -0
- package/dist/converters/index.js.map +1 -0
- package/dist/converters/sarif.d.ts +18 -0
- package/dist/converters/sarif.d.ts.map +1 -0
- package/dist/converters/sarif.js +142 -0
- package/dist/converters/sarif.js.map +1 -0
- package/dist/converters/splunk.d.ts +19 -0
- package/dist/converters/splunk.d.ts.map +1 -0
- package/dist/converters/splunk.js +148 -0
- package/dist/converters/splunk.js.map +1 -0
- package/dist/coverage-analyzer.d.ts +43 -0
- package/dist/coverage-analyzer.d.ts.map +1 -0
- package/dist/coverage-analyzer.js +329 -0
- package/dist/coverage-analyzer.js.map +1 -0
- package/dist/embedding/build-corpus.d.ts +15 -0
- package/dist/embedding/build-corpus.d.ts.map +1 -0
- package/dist/embedding/build-corpus.js +105 -0
- package/dist/embedding/build-corpus.js.map +1 -0
- package/dist/embedding/model-loader.d.ts +41 -0
- package/dist/embedding/model-loader.d.ts.map +1 -0
- package/dist/embedding/model-loader.js +90 -0
- package/dist/embedding/model-loader.js.map +1 -0
- package/dist/embedding/vector-store.d.ts +41 -0
- package/dist/embedding/vector-store.d.ts.map +1 -0
- package/dist/embedding/vector-store.js +70 -0
- package/dist/embedding/vector-store.js.map +1 -0
- package/dist/engine.d.ts +222 -0
- package/dist/engine.d.ts.map +1 -0
- package/dist/engine.js +1185 -0
- package/dist/engine.js.map +1 -0
- package/dist/eval/corpus.d.ts +42 -0
- package/dist/eval/corpus.d.ts.map +1 -0
- package/dist/eval/corpus.js +427 -0
- package/dist/eval/corpus.js.map +1 -0
- package/dist/eval/eval-harness.d.ts +44 -0
- package/dist/eval/eval-harness.d.ts.map +1 -0
- package/dist/eval/eval-harness.js +296 -0
- package/dist/eval/eval-harness.js.map +1 -0
- package/dist/eval/index.d.ts +13 -0
- package/dist/eval/index.d.ts.map +1 -0
- package/dist/eval/index.js +9 -0
- package/dist/eval/index.js.map +1 -0
- package/dist/eval/metrics.d.ts +74 -0
- package/dist/eval/metrics.d.ts.map +1 -0
- package/dist/eval/metrics.js +108 -0
- package/dist/eval/metrics.js.map +1 -0
- package/dist/eval/pint-corpus.d.ts +34 -0
- package/dist/eval/pint-corpus.d.ts.map +1 -0
- package/dist/eval/pint-corpus.js +113 -0
- package/dist/eval/pint-corpus.js.map +1 -0
- package/dist/eval/rule-corpus.d.ts +9 -0
- package/dist/eval/rule-corpus.d.ts.map +1 -0
- package/dist/eval/rule-corpus.js +4780 -0
- package/dist/eval/rule-corpus.js.map +1 -0
- package/dist/eval/rule-metrics.d.ts +34 -0
- package/dist/eval/rule-metrics.d.ts.map +1 -0
- package/dist/eval/rule-metrics.js +92 -0
- package/dist/eval/rule-metrics.js.map +1 -0
- package/dist/eval/run-eval.d.ts +7 -0
- package/dist/eval/run-eval.d.ts.map +1 -0
- package/dist/eval/run-eval.js +11 -0
- package/dist/eval/run-eval.js.map +1 -0
- package/dist/eval/run-pint-benchmark.d.ts +18 -0
- package/dist/eval/run-pint-benchmark.d.ts.map +1 -0
- package/dist/eval/run-pint-benchmark.js +159 -0
- package/dist/eval/run-pint-benchmark.js.map +1 -0
- package/dist/eval/skill-benchmark.d.ts +66 -0
- package/dist/eval/skill-benchmark.d.ts.map +1 -0
- package/dist/eval/skill-benchmark.js +194 -0
- package/dist/eval/skill-benchmark.js.map +1 -0
- package/dist/flywheel.d.ts +54 -0
- package/dist/flywheel.d.ts.map +1 -0
- package/dist/flywheel.js +121 -0
- package/dist/flywheel.js.map +1 -0
- package/dist/hook-handler.d.ts +61 -0
- package/dist/hook-handler.d.ts.map +1 -0
- package/dist/hook-handler.js +178 -0
- package/dist/hook-handler.js.map +1 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.d.ts.map +1 -0
- package/{src/index.ts → dist/index.js} +1 -0
- package/dist/index.js.map +1 -0
- package/dist/layer-integration.d.ts +55 -0
- package/dist/layer-integration.d.ts.map +1 -0
- package/dist/layer-integration.js +187 -0
- package/dist/layer-integration.js.map +1 -0
- package/dist/loader.d.ts +18 -0
- package/dist/loader.d.ts.map +1 -0
- package/dist/loader.js +129 -0
- package/dist/loader.js.map +1 -0
- package/dist/mcp-server.d.ts +13 -0
- package/dist/mcp-server.d.ts.map +1 -0
- package/dist/mcp-server.js +246 -0
- package/dist/mcp-server.js.map +1 -0
- package/dist/mcp-tools/coverage-gaps.d.ts +13 -0
- package/dist/mcp-tools/coverage-gaps.d.ts.map +1 -0
- package/dist/mcp-tools/coverage-gaps.js +55 -0
- package/dist/mcp-tools/coverage-gaps.js.map +1 -0
- package/dist/mcp-tools/list-rules.d.ts +17 -0
- package/dist/mcp-tools/list-rules.d.ts.map +1 -0
- package/dist/mcp-tools/list-rules.js +45 -0
- package/dist/mcp-tools/list-rules.js.map +1 -0
- package/dist/mcp-tools/scan-skill.d.ts +17 -0
- package/dist/mcp-tools/scan-skill.d.ts.map +1 -0
- package/dist/mcp-tools/scan-skill.js +65 -0
- package/dist/mcp-tools/scan-skill.js.map +1 -0
- package/dist/mcp-tools/scan.d.ts +24 -0
- package/dist/mcp-tools/scan.d.ts.map +1 -0
- package/dist/mcp-tools/scan.js +94 -0
- package/dist/mcp-tools/scan.js.map +1 -0
- package/dist/mcp-tools/submit-proposal.d.ts +12 -0
- package/dist/mcp-tools/submit-proposal.d.ts.map +1 -0
- package/dist/mcp-tools/submit-proposal.js +103 -0
- package/dist/mcp-tools/submit-proposal.js.map +1 -0
- package/dist/mcp-tools/threat-summary.d.ts +12 -0
- package/dist/mcp-tools/threat-summary.d.ts.map +1 -0
- package/dist/mcp-tools/threat-summary.js +74 -0
- package/dist/mcp-tools/threat-summary.js.map +1 -0
- package/dist/mcp-tools/validate.d.ts +15 -0
- package/dist/mcp-tools/validate.d.ts.map +1 -0
- package/dist/mcp-tools/validate.js +51 -0
- package/dist/mcp-tools/validate.js.map +1 -0
- package/dist/modules/embedding.d.ts +71 -0
- package/dist/modules/embedding.d.ts.map +1 -0
- package/dist/modules/embedding.js +141 -0
- package/dist/modules/embedding.js.map +1 -0
- package/dist/modules/index.d.ts +144 -0
- package/dist/modules/index.d.ts.map +1 -0
- package/dist/modules/index.js +82 -0
- package/dist/modules/index.js.map +1 -0
- package/dist/modules/semantic.d.ts +106 -0
- package/dist/modules/semantic.d.ts.map +1 -0
- package/dist/modules/semantic.js +359 -0
- package/dist/modules/semantic.js.map +1 -0
- package/dist/modules/session.d.ts +70 -0
- package/dist/modules/session.d.ts.map +1 -0
- package/dist/modules/session.js +128 -0
- package/dist/modules/session.js.map +1 -0
- package/dist/quality/adapters/atr.d.ts +65 -0
- package/dist/quality/adapters/atr.d.ts.map +1 -0
- package/dist/quality/adapters/atr.js +154 -0
- package/dist/quality/adapters/atr.js.map +1 -0
- package/dist/quality/adapters/index.d.ts +10 -0
- package/dist/quality/adapters/index.d.ts.map +1 -0
- package/dist/quality/adapters/index.js +10 -0
- package/dist/quality/adapters/index.js.map +1 -0
- package/dist/quality/compute-confidence.d.ts +45 -0
- package/dist/quality/compute-confidence.d.ts.map +1 -0
- package/dist/quality/compute-confidence.js +133 -0
- package/dist/quality/compute-confidence.js.map +1 -0
- package/dist/quality/index.d.ts +36 -0
- package/dist/quality/index.d.ts.map +1 -0
- package/dist/quality/index.js +39 -0
- package/dist/quality/index.js.map +1 -0
- package/dist/quality/quality-gate.d.ts +86 -0
- package/dist/quality/quality-gate.d.ts.map +1 -0
- package/dist/quality/quality-gate.js +187 -0
- package/dist/quality/quality-gate.js.map +1 -0
- package/dist/quality/types.d.ts +129 -0
- package/dist/quality/types.d.ts.map +1 -0
- package/dist/quality/types.js +10 -0
- package/dist/quality/types.js.map +1 -0
- package/dist/quality/validate-maturity.d.ts +51 -0
- package/dist/quality/validate-maturity.d.ts.map +1 -0
- package/dist/quality/validate-maturity.js +134 -0
- package/dist/quality/validate-maturity.js.map +1 -0
- package/dist/quality.d.ts +8 -0
- package/dist/quality.d.ts.map +1 -0
- package/dist/quality.js +8 -0
- package/dist/quality.js.map +1 -0
- package/dist/rule-scaffolder.d.ts +53 -0
- package/dist/rule-scaffolder.d.ts.map +1 -0
- package/dist/rule-scaffolder.js +301 -0
- package/dist/rule-scaffolder.js.map +1 -0
- package/dist/session-tracker.d.ts +58 -0
- package/dist/session-tracker.d.ts.map +1 -0
- package/dist/session-tracker.js +176 -0
- package/dist/session-tracker.js.map +1 -0
- package/dist/shadow-evaluator.d.ts +48 -0
- package/dist/shadow-evaluator.d.ts.map +1 -0
- package/dist/shadow-evaluator.js +129 -0
- package/dist/shadow-evaluator.js.map +1 -0
- package/dist/skill-fingerprint.d.ts +85 -0
- package/dist/skill-fingerprint.d.ts.map +1 -0
- package/dist/skill-fingerprint.js +284 -0
- package/dist/skill-fingerprint.js.map +1 -0
- package/dist/tc-reporter.d.ts +50 -0
- package/dist/tc-reporter.d.ts.map +1 -0
- package/dist/tc-reporter.js +164 -0
- package/dist/tc-reporter.js.map +1 -0
- package/dist/tier0-invariant.d.ts +49 -0
- package/dist/tier0-invariant.d.ts.map +1 -0
- package/dist/tier0-invariant.js +185 -0
- package/dist/tier0-invariant.js.map +1 -0
- package/dist/tier1-blacklist.d.ts +48 -0
- package/dist/tier1-blacklist.d.ts.map +1 -0
- package/dist/tier1-blacklist.js +92 -0
- package/dist/tier1-blacklist.js.map +1 -0
- package/dist/types.d.ts +232 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +6 -0
- package/dist/types.js.map +1 -0
- package/dist/verdict.d.ts +26 -0
- package/dist/verdict.d.ts.map +1 -0
- package/dist/verdict.js +127 -0
- package/dist/verdict.js.map +1 -0
- package/package.json +16 -4
- package/.github/ISSUE_TEMPLATE/evasion-report.yml +0 -75
- package/.github/ISSUE_TEMPLATE/false-positive.yml +0 -31
- package/.github/ISSUE_TEMPLATE/mirofish-prediction.yml +0 -128
- package/.github/ISSUE_TEMPLATE/new-rule.yml +0 -37
- package/.github/PULL_REQUEST_TEMPLATE.md +0 -23
- package/.github/workflows/rule-quality.yml +0 -203
- package/.github/workflows/validate.yml +0 -42
- package/CHANGELOG.md +0 -30
- package/CONTRIBUTING.md +0 -168
- package/CONTRIBUTORS.md +0 -28
- package/COVERAGE.md +0 -135
- package/LIMITATIONS.md +0 -154
- package/SECURITY.md +0 -48
- package/THREAT-MODEL.md +0 -243
- package/docs/contribution-paths.md +0 -202
- package/docs/mirofish-prediction-guide.md +0 -304
- package/docs/quick-start.md +0 -245
- package/docs/rule-writing-guide.md +0 -647
- package/docs/schema-spec.md +0 -594
- package/examples/how-to-write-a-rule.md +0 -251
- package/tsconfig.json +0 -17
|
@@ -0,0 +1,295 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Standardized Threat Cloud pipeline commands.
|
|
3
|
+
*
|
|
4
|
+
* atr tc sync Push repo rules → TC (updates metrics + website)
|
|
5
|
+
* atr tc pull Pull confirmed TC rules → repo (validate + write)
|
|
6
|
+
* atr tc crystallize Send missed attacks → TC LLM → new proposals
|
|
7
|
+
* atr tc status Show TC state (rules, proposals, threats)
|
|
8
|
+
*
|
|
9
|
+
* All commands are idempotent and safe to run repeatedly.
|
|
10
|
+
* CI workflows call these same commands — no ad-hoc scripts.
|
|
11
|
+
*
|
|
12
|
+
* @module agent-threat-rules/cli/tc-pipeline
|
|
13
|
+
*/
|
|
14
|
+
import { readFileSync, writeFileSync, existsSync, readdirSync, statSync, mkdirSync, unlinkSync } from 'node:fs';
|
|
15
|
+
import { resolve, join } from 'node:path';
|
|
16
|
+
import { execSync } from 'node:child_process';
|
|
17
|
+
const RED = '\x1b[31m';
|
|
18
|
+
const GREEN = '\x1b[32m';
|
|
19
|
+
const DIM = '\x1b[2m';
|
|
20
|
+
const BOLD = '\x1b[1m';
|
|
21
|
+
const RESET = '\x1b[0m';
|
|
22
|
+
function getConfig(options) {
|
|
23
|
+
return {
|
|
24
|
+
tcUrl: (options['tc-url'] ?? process.env['TC_URL'] ?? 'https://tc.panguard.ai').replace(/\/+$/, ''),
|
|
25
|
+
adminKey: options['tc-key'] ?? process.env['TC_ADMIN_API_KEY'] ?? process.env['TC_API_KEY'] ?? '',
|
|
26
|
+
rulesDir: resolve(options['rules'] ?? 'rules'),
|
|
27
|
+
dryRun: options['dry-run'] === 'true',
|
|
28
|
+
};
|
|
29
|
+
}
|
|
30
|
+
function authHeaders(adminKey) {
|
|
31
|
+
const h = { 'Content-Type': 'application/json' };
|
|
32
|
+
if (adminKey)
|
|
33
|
+
h['Authorization'] = `Bearer ${adminKey}`;
|
|
34
|
+
return h;
|
|
35
|
+
}
|
|
36
|
+
// ── atr tc sync ───────────────────────────────────────────────
|
|
37
|
+
export async function cmdTCSync(options) {
|
|
38
|
+
const cfg = getConfig(options);
|
|
39
|
+
console.log(`\n${BOLD}ATR TC Sync${RESET}`);
|
|
40
|
+
console.log(`${DIM}Push repo rules → Threat Cloud${RESET}\n`);
|
|
41
|
+
const rules = [];
|
|
42
|
+
for (const cat of readdirSync(cfg.rulesDir)) {
|
|
43
|
+
const catDir = join(cfg.rulesDir, cat);
|
|
44
|
+
if (!statSync(catDir).isDirectory())
|
|
45
|
+
continue;
|
|
46
|
+
for (const f of readdirSync(catDir).filter(f => f.endsWith('.yaml'))) {
|
|
47
|
+
const content = readFileSync(join(catDir, f), 'utf-8');
|
|
48
|
+
const id = content.match(/^id:\s*(\S+)/m)?.[1] ?? f;
|
|
49
|
+
const num = parseInt(id.match(/(\d{5})$/)?.[1] ?? '0');
|
|
50
|
+
rules.push({ ruleId: id, ruleContent: content, source: num >= 137 ? 'atr-community' : 'atr' });
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
console.log(` Rules found: ${rules.length}`);
|
|
54
|
+
if (cfg.dryRun) {
|
|
55
|
+
console.log(` ${DIM}[DRY RUN] Would sync ${rules.length} rules to ${cfg.tcUrl}${RESET}`);
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
if (!cfg.adminKey) {
|
|
59
|
+
console.error(` ${RED}Error: TC admin key required. Set TC_ADMIN_API_KEY or --tc-key${RESET}`);
|
|
60
|
+
process.exit(1);
|
|
61
|
+
}
|
|
62
|
+
const resp = await fetch(`${cfg.tcUrl}/api/rules`, {
|
|
63
|
+
method: 'POST',
|
|
64
|
+
headers: authHeaders(cfg.adminKey),
|
|
65
|
+
body: JSON.stringify({ rules }),
|
|
66
|
+
signal: AbortSignal.timeout(30_000),
|
|
67
|
+
});
|
|
68
|
+
const data = await resp.json();
|
|
69
|
+
if (data.ok) {
|
|
70
|
+
console.log(` ${GREEN}Synced: ${data.data?.count ?? rules.length} rules → ${cfg.tcUrl}${RESET}`);
|
|
71
|
+
}
|
|
72
|
+
else {
|
|
73
|
+
console.error(` ${RED}Failed: ${JSON.stringify(data)}${RESET}`);
|
|
74
|
+
process.exit(1);
|
|
75
|
+
}
|
|
76
|
+
// Verify metrics
|
|
77
|
+
const metrics = await fetch(`${cfg.tcUrl}/api/metrics`, { signal: AbortSignal.timeout(5000) })
|
|
78
|
+
.then(r => r.json());
|
|
79
|
+
console.log(` TC metrics: ${metrics.data?.totalAtrRules ?? '?'} rules`);
|
|
80
|
+
}
|
|
81
|
+
// ── atr tc pull ───────────────────────────────────────────────
|
|
82
|
+
export async function cmdTCPull(options) {
|
|
83
|
+
const cfg = getConfig(options);
|
|
84
|
+
const SYNC_FILE = resolve('data/.tc-last-sync');
|
|
85
|
+
console.log(`\n${BOLD}ATR TC Pull${RESET}`);
|
|
86
|
+
console.log(`${DIM}Pull confirmed TC rules → repo${RESET}\n`);
|
|
87
|
+
// Determine since timestamp
|
|
88
|
+
const since = options['since']
|
|
89
|
+
?? (existsSync(SYNC_FILE) ? readFileSync(SYNC_FILE, 'utf-8').trim() : '');
|
|
90
|
+
const sinceParam = since || new Date(Date.now() - 7 * 86400000).toISOString();
|
|
91
|
+
const resp = await fetch(`${cfg.tcUrl}/api/atr-rules?since=${encodeURIComponent(sinceParam)}`, {
|
|
92
|
+
signal: AbortSignal.timeout(15_000),
|
|
93
|
+
});
|
|
94
|
+
const raw = await resp.json();
|
|
95
|
+
if (!raw.ok) {
|
|
96
|
+
console.error(` ${RED}TC API error${RESET}`);
|
|
97
|
+
process.exit(1);
|
|
98
|
+
}
|
|
99
|
+
// Find existing rule IDs in repo
|
|
100
|
+
const existingIds = new Set();
|
|
101
|
+
for (const cat of readdirSync(cfg.rulesDir)) {
|
|
102
|
+
const catDir = join(cfg.rulesDir, cat);
|
|
103
|
+
if (!statSync(catDir).isDirectory())
|
|
104
|
+
continue;
|
|
105
|
+
for (const f of readdirSync(catDir).filter(f => f.endsWith('.yaml'))) {
|
|
106
|
+
const id = readFileSync(join(catDir, f), 'utf-8').match(/^id:\s*(\S+)/m)?.[1];
|
|
107
|
+
if (id)
|
|
108
|
+
existingIds.add(id);
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
const newRules = raw.data.filter(r => {
|
|
112
|
+
const id = r.ruleContent.match(/^id:\s*(\S+)/m)?.[1] ?? '';
|
|
113
|
+
return !existingIds.has(id) && r.source !== 'atr';
|
|
114
|
+
});
|
|
115
|
+
console.log(` TC rules: ${raw.data.length} | Already in repo: ${raw.data.length - newRules.length} | New: ${newRules.length}`);
|
|
116
|
+
if (newRules.length === 0) {
|
|
117
|
+
console.log(` ${GREEN}Up to date.${RESET}`);
|
|
118
|
+
if (!cfg.dryRun)
|
|
119
|
+
writeFileSync(SYNC_FILE, new Date().toISOString());
|
|
120
|
+
return;
|
|
121
|
+
}
|
|
122
|
+
// Find next rule ID
|
|
123
|
+
let maxId = 0;
|
|
124
|
+
for (const cat of readdirSync(cfg.rulesDir)) {
|
|
125
|
+
const catDir = join(cfg.rulesDir, cat);
|
|
126
|
+
if (!statSync(catDir).isDirectory())
|
|
127
|
+
continue;
|
|
128
|
+
for (const f of readdirSync(catDir)) {
|
|
129
|
+
const m = f.match(/ATR-2026-(\d{5})/);
|
|
130
|
+
if (m)
|
|
131
|
+
maxId = Math.max(maxId, parseInt(m[1], 10));
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
let nextId = maxId + 1;
|
|
135
|
+
const written = [];
|
|
136
|
+
for (const rule of newRules) {
|
|
137
|
+
let content = rule.ruleContent;
|
|
138
|
+
// Replace draft IDs
|
|
139
|
+
if (content.includes('DRAFT')) {
|
|
140
|
+
const realId = `ATR-2026-${String(nextId).padStart(5, '0')}`;
|
|
141
|
+
content = content.replace(/ATR-2026-DRAFT-[A-Za-z0-9]+|ATR-2026-DRAFT|ATR-DRAFT/g, realId);
|
|
142
|
+
nextId++;
|
|
143
|
+
}
|
|
144
|
+
// Auto-fix LLM YAML: double-quoted regex → single-quoted
|
|
145
|
+
content = content.replace(/^(\s+value:\s*)"((?:[^"\\]|\\.)*)"\s*$/gm, (_, prefix, regex) => `${prefix}'${regex.replace(/'/g, "''")}'`);
|
|
146
|
+
const id = content.match(/^id:\s*(\S+)/m)?.[1] ?? 'unknown';
|
|
147
|
+
const category = content.match(/category:\s*(\S+)/m)?.[1] ?? 'prompt-injection';
|
|
148
|
+
const sub = content.match(/subcategory:\s*(\S+)/m)?.[1] ?? id.toLowerCase();
|
|
149
|
+
const slug = sub.replace(/[^a-z0-9-]/g, '-').slice(0, 40);
|
|
150
|
+
const catDir = join(cfg.rulesDir, category);
|
|
151
|
+
if (!existsSync(catDir))
|
|
152
|
+
mkdirSync(catDir, { recursive: true });
|
|
153
|
+
const filePath = join(catDir, `${id}-${slug}.yaml`);
|
|
154
|
+
if (cfg.dryRun) {
|
|
155
|
+
console.log(` ${DIM}[DRY RUN] ${filePath}${RESET}`);
|
|
156
|
+
continue;
|
|
157
|
+
}
|
|
158
|
+
writeFileSync(filePath, content);
|
|
159
|
+
// Validate
|
|
160
|
+
try {
|
|
161
|
+
execSync(`node dist/cli.js validate "${filePath}"`, { encoding: 'utf-8', stdio: 'pipe' });
|
|
162
|
+
written.push(filePath);
|
|
163
|
+
console.log(` ${GREEN}+${RESET} ${id} (${category}/${slug})`);
|
|
164
|
+
}
|
|
165
|
+
catch {
|
|
166
|
+
console.log(` ${RED}x${RESET} ${id} — invalid, removed`);
|
|
167
|
+
unlinkSync(filePath);
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
if (!cfg.dryRun)
|
|
171
|
+
writeFileSync(SYNC_FILE, new Date().toISOString());
|
|
172
|
+
console.log(`\n ${BOLD}${written.length} rules pulled.${RESET}`);
|
|
173
|
+
}
|
|
174
|
+
// ── atr tc crystallize ────────────────────────────────────────
|
|
175
|
+
export async function cmdTCCrystallize(options) {
|
|
176
|
+
const cfg = getConfig(options);
|
|
177
|
+
console.log(`\n${BOLD}ATR TC Crystallize${RESET}`);
|
|
178
|
+
console.log(`${DIM}Send missed attacks → TC LLM → proposals${RESET}\n`);
|
|
179
|
+
// Load engine + adversarial samples
|
|
180
|
+
const { ATREngine } = await import('../engine.js');
|
|
181
|
+
const engine = new ATREngine({ rulesDir: cfg.rulesDir });
|
|
182
|
+
await engine.loadRules();
|
|
183
|
+
const samplesPath = resolve('data/autoresearch/adversarial-samples.json');
|
|
184
|
+
if (!existsSync(samplesPath)) {
|
|
185
|
+
console.error(` ${RED}No adversarial samples at ${samplesPath}${RESET}`);
|
|
186
|
+
process.exit(1);
|
|
187
|
+
}
|
|
188
|
+
const samples = JSON.parse(readFileSync(samplesPath, 'utf-8'));
|
|
189
|
+
// Find missed attacks
|
|
190
|
+
const missed = new Map();
|
|
191
|
+
for (const s of samples) {
|
|
192
|
+
const m = engine.evaluate({
|
|
193
|
+
type: 'tool_response', timestamp: new Date().toISOString(),
|
|
194
|
+
content: s.payload, fields: { content: s.payload },
|
|
195
|
+
});
|
|
196
|
+
if (m.length === 0) {
|
|
197
|
+
const list = missed.get(s.technique) ?? [];
|
|
198
|
+
list.push(s);
|
|
199
|
+
missed.set(s.technique, list);
|
|
200
|
+
}
|
|
201
|
+
}
|
|
202
|
+
const techniques = [...missed.entries()].filter(([, items]) => items.length >= 5);
|
|
203
|
+
const totalMissed = techniques.reduce((s, [, i]) => s + i.length, 0);
|
|
204
|
+
console.log(` Samples: ${samples.length} | Missed: ${totalMissed} | Techniques: ${techniques.length}`);
|
|
205
|
+
if (techniques.length === 0) {
|
|
206
|
+
console.log(` ${GREEN}All samples covered. Nothing to crystallize.${RESET}`);
|
|
207
|
+
return;
|
|
208
|
+
}
|
|
209
|
+
if (cfg.dryRun) {
|
|
210
|
+
for (const [tech, items] of techniques) {
|
|
211
|
+
console.log(` ${DIM}[DRY RUN] ${tech}: ${items.length} samples${RESET}`);
|
|
212
|
+
}
|
|
213
|
+
return;
|
|
214
|
+
}
|
|
215
|
+
let created = 0;
|
|
216
|
+
let errors = 0;
|
|
217
|
+
for (const [tech, items] of techniques) {
|
|
218
|
+
const tools = items.slice(0, 8).map((s, i) => ({
|
|
219
|
+
name: `${tech}_${i}`,
|
|
220
|
+
description: s.payload,
|
|
221
|
+
}));
|
|
222
|
+
try {
|
|
223
|
+
const resp = await fetch(`${cfg.tcUrl}/api/analyze-skills`, {
|
|
224
|
+
method: 'POST',
|
|
225
|
+
headers: { 'Content-Type': 'application/json' },
|
|
226
|
+
body: JSON.stringify({ skills: [{ package: `crystallize-${tech}-${Date.now()}`, tools }] }),
|
|
227
|
+
signal: AbortSignal.timeout(60_000),
|
|
228
|
+
});
|
|
229
|
+
if (!resp.ok) {
|
|
230
|
+
const text = await resp.text();
|
|
231
|
+
// Skip HTML errors (TC overloaded)
|
|
232
|
+
if (text.startsWith('<!')) {
|
|
233
|
+
errors++;
|
|
234
|
+
continue;
|
|
235
|
+
}
|
|
236
|
+
}
|
|
237
|
+
const data = await resp.json();
|
|
238
|
+
const r = data.data?.results?.[0];
|
|
239
|
+
const p = r?.proposalCount ?? 0;
|
|
240
|
+
created += p;
|
|
241
|
+
const tag = r?.cached ? `${DIM}cached${RESET}` : (p > 0 ? `${GREEN}+${p}${RESET}` : `${DIM}0${RESET}`);
|
|
242
|
+
console.log(` ${tech} (${items.length}) → ${tag}`);
|
|
243
|
+
await new Promise(r => setTimeout(r, 5000));
|
|
244
|
+
}
|
|
245
|
+
catch {
|
|
246
|
+
errors++;
|
|
247
|
+
console.log(` ${tech} → ${RED}error${RESET}`);
|
|
248
|
+
}
|
|
249
|
+
}
|
|
250
|
+
console.log(`\n ${BOLD}Proposals: ${created} | Errors: ${errors}${RESET}`);
|
|
251
|
+
}
|
|
252
|
+
// ── atr tc status ─────────────────────────────────────────────
|
|
253
|
+
export async function cmdTCStatus(options) {
|
|
254
|
+
const cfg = getConfig(options);
|
|
255
|
+
console.log(`\n${BOLD}ATR Threat Cloud Status${RESET}`);
|
|
256
|
+
console.log(`${DIM}${cfg.tcUrl}${RESET}\n`);
|
|
257
|
+
const [stats, metrics] = await Promise.all([
|
|
258
|
+
fetch(`${cfg.tcUrl}/api/stats`, { signal: AbortSignal.timeout(5000) }).then(r => r.json()).catch(() => null),
|
|
259
|
+
fetch(`${cfg.tcUrl}/api/metrics`, { signal: AbortSignal.timeout(5000) }).then(r => r.json()).catch(() => null),
|
|
260
|
+
]);
|
|
261
|
+
if (!stats?.data) {
|
|
262
|
+
console.error(` ${RED}Cannot reach TC at ${cfg.tcUrl}${RESET}`);
|
|
263
|
+
process.exit(1);
|
|
264
|
+
}
|
|
265
|
+
const s = stats.data;
|
|
266
|
+
const p = s['proposalStats'];
|
|
267
|
+
const m = metrics?.data;
|
|
268
|
+
// Count local rules
|
|
269
|
+
let localRules = 0;
|
|
270
|
+
for (const cat of readdirSync(cfg.rulesDir)) {
|
|
271
|
+
const catDir = join(cfg.rulesDir, cat);
|
|
272
|
+
if (!statSync(catDir).isDirectory())
|
|
273
|
+
continue;
|
|
274
|
+
localRules += readdirSync(catDir).filter(f => f.endsWith('.yaml')).length;
|
|
275
|
+
}
|
|
276
|
+
const tcRules = s['totalRules'] ?? 0;
|
|
277
|
+
const synced = localRules === tcRules;
|
|
278
|
+
console.log(` ${BOLD}Rules${RESET}`);
|
|
279
|
+
console.log(` Local repo: ${localRules}`);
|
|
280
|
+
console.log(` TC: ${tcRules} ${synced ? GREEN + '(synced)' + RESET : RED + '(out of sync — run: atr tc sync)' + RESET}`);
|
|
281
|
+
console.log(` Metrics API: ${m?.['totalAtrRules'] ?? '?'}`);
|
|
282
|
+
console.log(`\n ${BOLD}Proposals${RESET}`);
|
|
283
|
+
console.log(` Pending: ${p?.['pending'] ?? 0}`);
|
|
284
|
+
console.log(` Canary: ${p?.['canary'] ?? 0}`);
|
|
285
|
+
console.log(` Confirmed: ${p?.['confirmed'] ?? 0}`);
|
|
286
|
+
console.log(` Rejected: ${p?.['rejected'] ?? 0}`);
|
|
287
|
+
console.log(` Total: ${p?.['total'] ?? 0}`);
|
|
288
|
+
console.log(`\n ${BOLD}Data${RESET}`);
|
|
289
|
+
console.log(` Threats: ${s['totalThreats'] ?? 0} (24h: ${s['last24hThreats'] ?? 0})`);
|
|
290
|
+
console.log(` Skill scans: ${s['skillThreatsTotal'] ?? 0}`);
|
|
291
|
+
console.log(` Blacklist: ${s['skillBlacklistTotal'] ?? 0}`);
|
|
292
|
+
console.log(` Protected: ${m?.['totalAgentsProtected'] ?? 0} devices`);
|
|
293
|
+
console.log('');
|
|
294
|
+
}
|
|
295
|
+
//# sourceMappingURL=tc-pipeline.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tc-pipeline.js","sourceRoot":"","sources":["../../src/cli/tc-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AASxB,SAAS,SAAS,CAAC,OAA2C;IAC5D,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnG,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QACjG,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,MAAM;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACzE,IAAI,QAAQ;QAAE,CAAC,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,EAAE,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA2C;IACzE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,iCAAiC,KAAK,IAAI,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAmE,EAAE,CAAC;IACjF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9C,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,wBAAwB,KAAK,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,iEAAiE,KAAK,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,YAAY,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA+C,CAAC;IAE5E,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;SAC3F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAyC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,IAAI,EAAE,aAAa,IAAI,GAAG,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA2C;IACzE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,iCAAiC,KAAK,IAAI,CAAC,CAAC;IAE9D,4BAA4B;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;WACzB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,wBAAwB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAC7F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAA2F,CAAC;IACvH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,KAAK,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAEhF,iCAAiC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,EAAE;gBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAE/B,oBAAoB;QACpB,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,YAAY,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,uDAAuD,EAAE,MAAM,CAAC,CAAC;YAC3F,MAAM,EAAE,CAAC;QACX,CAAC;QAED,yDAAyD;QACzD,OAAO,GAAG,OAAO,CAAC,OAAO,CACvB,0CAA0C,EAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAChE,CAAC;QAEF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QAEpD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,aAAa,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjC,WAAW;QACX,IAAI,CAAC;YACH,QAAQ,CAAC,8BAA8B,QAAQ,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,EAAE,qBAAqB,CAAC,CAAC;YAC1D,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,iBAAiB,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA2C;IAChF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,2CAA2C,KAAK,IAAI,CAAC,CAAC;IAExE,oCAAoC;IACpC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAEzB,MAAM,WAAW,GAAG,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,6BAA6B,WAAW,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAE/D,sBAAsB;IACtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YACxB,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,MAAM,cAAc,WAAW,kBAAkB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,+CAA+C,KAAK,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,aAAa,IAAI,KAAK,KAAK,CAAC,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE;YACpB,WAAW,EAAE,CAAC,CAAC,OAAO;SACvB,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,qBAAqB,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC3F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,mCAAmC;gBACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,MAAM,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAgG,CAAC;YAC7H,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,OAAO,cAAc,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2C;IAC3E,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,0BAA0B,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC;IAE5C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC5G,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAC/G,CAAyF,CAAC;IAE3F,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,sBAAsB,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,KAAK,CAAC,IAA+B,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,CAA2B,CAAC;IACvD,MAAM,CAAC,GAAG,OAAO,EAAE,IAA2C,CAAC;IAE/D,oBAAoB;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,CAAC;IAED,MAAM,OAAO,GAAI,CAAC,CAAC,YAAY,CAAY,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC;IAEtC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,kCAAkC,GAAG,KAAK,EAAE,CAAC,CAAC;IACrI,OAAO,CAAC,GAAG,CAAC,oBAAqB,CAAC,EAAE,CAAC,eAAe,CAAY,IAAI,GAAG,EAAE,CAAC,CAAC;IAE3E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,oBAAqB,CAAC,EAAE,CAAC,sBAAsB,CAAY,IAAI,CAAC,UAAU,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}
|
package/dist/cli.d.ts
ADDED
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* ATR CLI - Command-line interface for Agent Threat Rules
|
|
4
|
+
*
|
|
5
|
+
* Usage:
|
|
6
|
+
* npx agent-threat-rules scan <events.json> Scan events against all rules
|
|
7
|
+
* npx agent-threat-rules validate <rule.yaml> Validate a rule file
|
|
8
|
+
* npx agent-threat-rules test <rule.yaml> Run a rule's test cases
|
|
9
|
+
* npx agent-threat-rules stats Show rule collection stats
|
|
10
|
+
*/
|
|
11
|
+
export {};
|
|
12
|
+
//# sourceMappingURL=cli.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}
|