@panguard-ai/atr 1.4.3 → 1.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (274) hide show
  1. package/dist/action-executor.d.ts +44 -0
  2. package/dist/action-executor.d.ts.map +1 -0
  3. package/dist/action-executor.js +130 -0
  4. package/dist/action-executor.js.map +1 -0
  5. package/dist/adapters/default-adapter.d.ts +24 -0
  6. package/dist/adapters/default-adapter.d.ts.map +1 -0
  7. package/dist/adapters/default-adapter.js +51 -0
  8. package/dist/adapters/default-adapter.js.map +1 -0
  9. package/dist/adapters/stdio-adapter.d.ts +30 -0
  10. package/dist/adapters/stdio-adapter.d.ts.map +1 -0
  11. package/dist/adapters/stdio-adapter.js +128 -0
  12. package/dist/adapters/stdio-adapter.js.map +1 -0
  13. package/dist/badge.d.ts +42 -0
  14. package/dist/badge.d.ts.map +1 -0
  15. package/dist/badge.js +163 -0
  16. package/dist/badge.js.map +1 -0
  17. package/dist/capability-extractor.d.ts +35 -0
  18. package/dist/capability-extractor.d.ts.map +1 -0
  19. package/dist/capability-extractor.js +91 -0
  20. package/dist/capability-extractor.js.map +1 -0
  21. package/dist/cli/scan-handler.d.ts +21 -0
  22. package/dist/cli/scan-handler.d.ts.map +1 -0
  23. package/dist/cli/scan-handler.js +276 -0
  24. package/dist/cli/scan-handler.js.map +1 -0
  25. package/dist/cli/tc-pipeline.d.ts +18 -0
  26. package/dist/cli/tc-pipeline.d.ts.map +1 -0
  27. package/dist/cli/tc-pipeline.js +295 -0
  28. package/dist/cli/tc-pipeline.js.map +1 -0
  29. package/dist/cli.d.ts +12 -0
  30. package/dist/cli.d.ts.map +1 -0
  31. package/dist/cli.js +894 -0
  32. package/dist/cli.js.map +1 -0
  33. package/dist/content-hash.d.ts +7 -0
  34. package/dist/content-hash.d.ts.map +1 -0
  35. package/dist/content-hash.js +10 -0
  36. package/dist/content-hash.js.map +1 -0
  37. package/dist/converters/elastic.d.ts +36 -0
  38. package/dist/converters/elastic.d.ts.map +1 -0
  39. package/dist/converters/elastic.js +125 -0
  40. package/dist/converters/elastic.js.map +1 -0
  41. package/dist/converters/generic-regex.d.ts +37 -0
  42. package/dist/converters/generic-regex.d.ts.map +1 -0
  43. package/dist/converters/generic-regex.js +59 -0
  44. package/dist/converters/generic-regex.js.map +1 -0
  45. package/dist/converters/index.d.ts +32 -0
  46. package/dist/converters/index.d.ts.map +1 -0
  47. package/dist/converters/index.js +38 -0
  48. package/dist/converters/index.js.map +1 -0
  49. package/dist/converters/sarif.d.ts +18 -0
  50. package/dist/converters/sarif.d.ts.map +1 -0
  51. package/dist/converters/sarif.js +142 -0
  52. package/dist/converters/sarif.js.map +1 -0
  53. package/dist/converters/splunk.d.ts +19 -0
  54. package/dist/converters/splunk.d.ts.map +1 -0
  55. package/dist/converters/splunk.js +148 -0
  56. package/dist/converters/splunk.js.map +1 -0
  57. package/dist/coverage-analyzer.d.ts +43 -0
  58. package/dist/coverage-analyzer.d.ts.map +1 -0
  59. package/dist/coverage-analyzer.js +329 -0
  60. package/dist/coverage-analyzer.js.map +1 -0
  61. package/dist/embedding/build-corpus.d.ts +15 -0
  62. package/dist/embedding/build-corpus.d.ts.map +1 -0
  63. package/dist/embedding/build-corpus.js +105 -0
  64. package/dist/embedding/build-corpus.js.map +1 -0
  65. package/dist/embedding/model-loader.d.ts +41 -0
  66. package/dist/embedding/model-loader.d.ts.map +1 -0
  67. package/dist/embedding/model-loader.js +90 -0
  68. package/dist/embedding/model-loader.js.map +1 -0
  69. package/dist/embedding/vector-store.d.ts +41 -0
  70. package/dist/embedding/vector-store.d.ts.map +1 -0
  71. package/dist/embedding/vector-store.js +70 -0
  72. package/dist/embedding/vector-store.js.map +1 -0
  73. package/dist/engine.d.ts +222 -0
  74. package/dist/engine.d.ts.map +1 -0
  75. package/dist/engine.js +1185 -0
  76. package/dist/engine.js.map +1 -0
  77. package/dist/eval/corpus.d.ts +42 -0
  78. package/dist/eval/corpus.d.ts.map +1 -0
  79. package/dist/eval/corpus.js +427 -0
  80. package/dist/eval/corpus.js.map +1 -0
  81. package/dist/eval/eval-harness.d.ts +44 -0
  82. package/dist/eval/eval-harness.d.ts.map +1 -0
  83. package/dist/eval/eval-harness.js +296 -0
  84. package/dist/eval/eval-harness.js.map +1 -0
  85. package/dist/eval/index.d.ts +13 -0
  86. package/dist/eval/index.d.ts.map +1 -0
  87. package/dist/eval/index.js +9 -0
  88. package/dist/eval/index.js.map +1 -0
  89. package/dist/eval/metrics.d.ts +74 -0
  90. package/dist/eval/metrics.d.ts.map +1 -0
  91. package/dist/eval/metrics.js +108 -0
  92. package/dist/eval/metrics.js.map +1 -0
  93. package/dist/eval/pint-corpus.d.ts +34 -0
  94. package/dist/eval/pint-corpus.d.ts.map +1 -0
  95. package/dist/eval/pint-corpus.js +113 -0
  96. package/dist/eval/pint-corpus.js.map +1 -0
  97. package/dist/eval/rule-corpus.d.ts +9 -0
  98. package/dist/eval/rule-corpus.d.ts.map +1 -0
  99. package/dist/eval/rule-corpus.js +4780 -0
  100. package/dist/eval/rule-corpus.js.map +1 -0
  101. package/dist/eval/rule-metrics.d.ts +34 -0
  102. package/dist/eval/rule-metrics.d.ts.map +1 -0
  103. package/dist/eval/rule-metrics.js +92 -0
  104. package/dist/eval/rule-metrics.js.map +1 -0
  105. package/dist/eval/run-eval.d.ts +7 -0
  106. package/dist/eval/run-eval.d.ts.map +1 -0
  107. package/dist/eval/run-eval.js +11 -0
  108. package/dist/eval/run-eval.js.map +1 -0
  109. package/dist/eval/run-pint-benchmark.d.ts +18 -0
  110. package/dist/eval/run-pint-benchmark.d.ts.map +1 -0
  111. package/dist/eval/run-pint-benchmark.js +159 -0
  112. package/dist/eval/run-pint-benchmark.js.map +1 -0
  113. package/dist/eval/skill-benchmark.d.ts +66 -0
  114. package/dist/eval/skill-benchmark.d.ts.map +1 -0
  115. package/dist/eval/skill-benchmark.js +194 -0
  116. package/dist/eval/skill-benchmark.js.map +1 -0
  117. package/dist/flywheel.d.ts +54 -0
  118. package/dist/flywheel.d.ts.map +1 -0
  119. package/dist/flywheel.js +121 -0
  120. package/dist/flywheel.js.map +1 -0
  121. package/dist/hook-handler.d.ts +61 -0
  122. package/dist/hook-handler.d.ts.map +1 -0
  123. package/dist/hook-handler.js +178 -0
  124. package/dist/hook-handler.js.map +1 -0
  125. package/dist/index.d.ts +8 -0
  126. package/dist/index.d.ts.map +1 -0
  127. package/{src/index.ts → dist/index.js} +1 -0
  128. package/dist/index.js.map +1 -0
  129. package/dist/layer-integration.d.ts +55 -0
  130. package/dist/layer-integration.d.ts.map +1 -0
  131. package/dist/layer-integration.js +187 -0
  132. package/dist/layer-integration.js.map +1 -0
  133. package/dist/loader.d.ts +18 -0
  134. package/dist/loader.d.ts.map +1 -0
  135. package/dist/loader.js +129 -0
  136. package/dist/loader.js.map +1 -0
  137. package/dist/mcp-server.d.ts +13 -0
  138. package/dist/mcp-server.d.ts.map +1 -0
  139. package/dist/mcp-server.js +246 -0
  140. package/dist/mcp-server.js.map +1 -0
  141. package/dist/mcp-tools/coverage-gaps.d.ts +13 -0
  142. package/dist/mcp-tools/coverage-gaps.d.ts.map +1 -0
  143. package/dist/mcp-tools/coverage-gaps.js +55 -0
  144. package/dist/mcp-tools/coverage-gaps.js.map +1 -0
  145. package/dist/mcp-tools/list-rules.d.ts +17 -0
  146. package/dist/mcp-tools/list-rules.d.ts.map +1 -0
  147. package/dist/mcp-tools/list-rules.js +45 -0
  148. package/dist/mcp-tools/list-rules.js.map +1 -0
  149. package/dist/mcp-tools/scan-skill.d.ts +17 -0
  150. package/dist/mcp-tools/scan-skill.d.ts.map +1 -0
  151. package/dist/mcp-tools/scan-skill.js +65 -0
  152. package/dist/mcp-tools/scan-skill.js.map +1 -0
  153. package/dist/mcp-tools/scan.d.ts +24 -0
  154. package/dist/mcp-tools/scan.d.ts.map +1 -0
  155. package/dist/mcp-tools/scan.js +94 -0
  156. package/dist/mcp-tools/scan.js.map +1 -0
  157. package/dist/mcp-tools/submit-proposal.d.ts +12 -0
  158. package/dist/mcp-tools/submit-proposal.d.ts.map +1 -0
  159. package/dist/mcp-tools/submit-proposal.js +103 -0
  160. package/dist/mcp-tools/submit-proposal.js.map +1 -0
  161. package/dist/mcp-tools/threat-summary.d.ts +12 -0
  162. package/dist/mcp-tools/threat-summary.d.ts.map +1 -0
  163. package/dist/mcp-tools/threat-summary.js +74 -0
  164. package/dist/mcp-tools/threat-summary.js.map +1 -0
  165. package/dist/mcp-tools/validate.d.ts +15 -0
  166. package/dist/mcp-tools/validate.d.ts.map +1 -0
  167. package/dist/mcp-tools/validate.js +51 -0
  168. package/dist/mcp-tools/validate.js.map +1 -0
  169. package/dist/modules/embedding.d.ts +71 -0
  170. package/dist/modules/embedding.d.ts.map +1 -0
  171. package/dist/modules/embedding.js +141 -0
  172. package/dist/modules/embedding.js.map +1 -0
  173. package/dist/modules/index.d.ts +144 -0
  174. package/dist/modules/index.d.ts.map +1 -0
  175. package/dist/modules/index.js +82 -0
  176. package/dist/modules/index.js.map +1 -0
  177. package/dist/modules/semantic.d.ts +106 -0
  178. package/dist/modules/semantic.d.ts.map +1 -0
  179. package/dist/modules/semantic.js +359 -0
  180. package/dist/modules/semantic.js.map +1 -0
  181. package/dist/modules/session.d.ts +70 -0
  182. package/dist/modules/session.d.ts.map +1 -0
  183. package/dist/modules/session.js +128 -0
  184. package/dist/modules/session.js.map +1 -0
  185. package/dist/quality/adapters/atr.d.ts +65 -0
  186. package/dist/quality/adapters/atr.d.ts.map +1 -0
  187. package/dist/quality/adapters/atr.js +154 -0
  188. package/dist/quality/adapters/atr.js.map +1 -0
  189. package/dist/quality/adapters/index.d.ts +10 -0
  190. package/dist/quality/adapters/index.d.ts.map +1 -0
  191. package/dist/quality/adapters/index.js +10 -0
  192. package/dist/quality/adapters/index.js.map +1 -0
  193. package/dist/quality/compute-confidence.d.ts +45 -0
  194. package/dist/quality/compute-confidence.d.ts.map +1 -0
  195. package/dist/quality/compute-confidence.js +133 -0
  196. package/dist/quality/compute-confidence.js.map +1 -0
  197. package/dist/quality/index.d.ts +36 -0
  198. package/dist/quality/index.d.ts.map +1 -0
  199. package/dist/quality/index.js +39 -0
  200. package/dist/quality/index.js.map +1 -0
  201. package/dist/quality/quality-gate.d.ts +86 -0
  202. package/dist/quality/quality-gate.d.ts.map +1 -0
  203. package/dist/quality/quality-gate.js +187 -0
  204. package/dist/quality/quality-gate.js.map +1 -0
  205. package/dist/quality/types.d.ts +129 -0
  206. package/dist/quality/types.d.ts.map +1 -0
  207. package/dist/quality/types.js +10 -0
  208. package/dist/quality/types.js.map +1 -0
  209. package/dist/quality/validate-maturity.d.ts +51 -0
  210. package/dist/quality/validate-maturity.d.ts.map +1 -0
  211. package/dist/quality/validate-maturity.js +134 -0
  212. package/dist/quality/validate-maturity.js.map +1 -0
  213. package/dist/quality.d.ts +8 -0
  214. package/dist/quality.d.ts.map +1 -0
  215. package/dist/quality.js +8 -0
  216. package/dist/quality.js.map +1 -0
  217. package/dist/rule-scaffolder.d.ts +53 -0
  218. package/dist/rule-scaffolder.d.ts.map +1 -0
  219. package/dist/rule-scaffolder.js +301 -0
  220. package/dist/rule-scaffolder.js.map +1 -0
  221. package/dist/session-tracker.d.ts +58 -0
  222. package/dist/session-tracker.d.ts.map +1 -0
  223. package/dist/session-tracker.js +176 -0
  224. package/dist/session-tracker.js.map +1 -0
  225. package/dist/shadow-evaluator.d.ts +48 -0
  226. package/dist/shadow-evaluator.d.ts.map +1 -0
  227. package/dist/shadow-evaluator.js +129 -0
  228. package/dist/shadow-evaluator.js.map +1 -0
  229. package/dist/skill-fingerprint.d.ts +85 -0
  230. package/dist/skill-fingerprint.d.ts.map +1 -0
  231. package/dist/skill-fingerprint.js +284 -0
  232. package/dist/skill-fingerprint.js.map +1 -0
  233. package/dist/tc-reporter.d.ts +50 -0
  234. package/dist/tc-reporter.d.ts.map +1 -0
  235. package/dist/tc-reporter.js +164 -0
  236. package/dist/tc-reporter.js.map +1 -0
  237. package/dist/tier0-invariant.d.ts +49 -0
  238. package/dist/tier0-invariant.d.ts.map +1 -0
  239. package/dist/tier0-invariant.js +185 -0
  240. package/dist/tier0-invariant.js.map +1 -0
  241. package/dist/tier1-blacklist.d.ts +48 -0
  242. package/dist/tier1-blacklist.d.ts.map +1 -0
  243. package/dist/tier1-blacklist.js +92 -0
  244. package/dist/tier1-blacklist.js.map +1 -0
  245. package/dist/types.d.ts +232 -0
  246. package/dist/types.d.ts.map +1 -0
  247. package/dist/types.js +6 -0
  248. package/dist/types.js.map +1 -0
  249. package/dist/verdict.d.ts +26 -0
  250. package/dist/verdict.d.ts.map +1 -0
  251. package/dist/verdict.js +127 -0
  252. package/dist/verdict.js.map +1 -0
  253. package/package.json +16 -4
  254. package/.github/ISSUE_TEMPLATE/evasion-report.yml +0 -75
  255. package/.github/ISSUE_TEMPLATE/false-positive.yml +0 -31
  256. package/.github/ISSUE_TEMPLATE/mirofish-prediction.yml +0 -128
  257. package/.github/ISSUE_TEMPLATE/new-rule.yml +0 -37
  258. package/.github/PULL_REQUEST_TEMPLATE.md +0 -23
  259. package/.github/workflows/rule-quality.yml +0 -203
  260. package/.github/workflows/validate.yml +0 -42
  261. package/CHANGELOG.md +0 -30
  262. package/CONTRIBUTING.md +0 -168
  263. package/CONTRIBUTORS.md +0 -28
  264. package/COVERAGE.md +0 -135
  265. package/LIMITATIONS.md +0 -154
  266. package/SECURITY.md +0 -48
  267. package/THREAT-MODEL.md +0 -243
  268. package/docs/contribution-paths.md +0 -202
  269. package/docs/mirofish-prediction-guide.md +0 -304
  270. package/docs/quick-start.md +0 -245
  271. package/docs/rule-writing-guide.md +0 -647
  272. package/docs/schema-spec.md +0 -594
  273. package/examples/how-to-write-a-rule.md +0 -251
  274. package/tsconfig.json +0 -17
@@ -0,0 +1,295 @@
1
+ /**
2
+ * Standardized Threat Cloud pipeline commands.
3
+ *
4
+ * atr tc sync Push repo rules → TC (updates metrics + website)
5
+ * atr tc pull Pull confirmed TC rules → repo (validate + write)
6
+ * atr tc crystallize Send missed attacks → TC LLM → new proposals
7
+ * atr tc status Show TC state (rules, proposals, threats)
8
+ *
9
+ * All commands are idempotent and safe to run repeatedly.
10
+ * CI workflows call these same commands — no ad-hoc scripts.
11
+ *
12
+ * @module agent-threat-rules/cli/tc-pipeline
13
+ */
14
+ import { readFileSync, writeFileSync, existsSync, readdirSync, statSync, mkdirSync, unlinkSync } from 'node:fs';
15
+ import { resolve, join } from 'node:path';
16
+ import { execSync } from 'node:child_process';
17
+ const RED = '\x1b[31m';
18
+ const GREEN = '\x1b[32m';
19
+ const DIM = '\x1b[2m';
20
+ const BOLD = '\x1b[1m';
21
+ const RESET = '\x1b[0m';
22
+ function getConfig(options) {
23
+ return {
24
+ tcUrl: (options['tc-url'] ?? process.env['TC_URL'] ?? 'https://tc.panguard.ai').replace(/\/+$/, ''),
25
+ adminKey: options['tc-key'] ?? process.env['TC_ADMIN_API_KEY'] ?? process.env['TC_API_KEY'] ?? '',
26
+ rulesDir: resolve(options['rules'] ?? 'rules'),
27
+ dryRun: options['dry-run'] === 'true',
28
+ };
29
+ }
30
+ function authHeaders(adminKey) {
31
+ const h = { 'Content-Type': 'application/json' };
32
+ if (adminKey)
33
+ h['Authorization'] = `Bearer ${adminKey}`;
34
+ return h;
35
+ }
36
+ // ── atr tc sync ───────────────────────────────────────────────
37
+ export async function cmdTCSync(options) {
38
+ const cfg = getConfig(options);
39
+ console.log(`\n${BOLD}ATR TC Sync${RESET}`);
40
+ console.log(`${DIM}Push repo rules → Threat Cloud${RESET}\n`);
41
+ const rules = [];
42
+ for (const cat of readdirSync(cfg.rulesDir)) {
43
+ const catDir = join(cfg.rulesDir, cat);
44
+ if (!statSync(catDir).isDirectory())
45
+ continue;
46
+ for (const f of readdirSync(catDir).filter(f => f.endsWith('.yaml'))) {
47
+ const content = readFileSync(join(catDir, f), 'utf-8');
48
+ const id = content.match(/^id:\s*(\S+)/m)?.[1] ?? f;
49
+ const num = parseInt(id.match(/(\d{5})$/)?.[1] ?? '0');
50
+ rules.push({ ruleId: id, ruleContent: content, source: num >= 137 ? 'atr-community' : 'atr' });
51
+ }
52
+ }
53
+ console.log(` Rules found: ${rules.length}`);
54
+ if (cfg.dryRun) {
55
+ console.log(` ${DIM}[DRY RUN] Would sync ${rules.length} rules to ${cfg.tcUrl}${RESET}`);
56
+ return;
57
+ }
58
+ if (!cfg.adminKey) {
59
+ console.error(` ${RED}Error: TC admin key required. Set TC_ADMIN_API_KEY or --tc-key${RESET}`);
60
+ process.exit(1);
61
+ }
62
+ const resp = await fetch(`${cfg.tcUrl}/api/rules`, {
63
+ method: 'POST',
64
+ headers: authHeaders(cfg.adminKey),
65
+ body: JSON.stringify({ rules }),
66
+ signal: AbortSignal.timeout(30_000),
67
+ });
68
+ const data = await resp.json();
69
+ if (data.ok) {
70
+ console.log(` ${GREEN}Synced: ${data.data?.count ?? rules.length} rules → ${cfg.tcUrl}${RESET}`);
71
+ }
72
+ else {
73
+ console.error(` ${RED}Failed: ${JSON.stringify(data)}${RESET}`);
74
+ process.exit(1);
75
+ }
76
+ // Verify metrics
77
+ const metrics = await fetch(`${cfg.tcUrl}/api/metrics`, { signal: AbortSignal.timeout(5000) })
78
+ .then(r => r.json());
79
+ console.log(` TC metrics: ${metrics.data?.totalAtrRules ?? '?'} rules`);
80
+ }
81
+ // ── atr tc pull ───────────────────────────────────────────────
82
+ export async function cmdTCPull(options) {
83
+ const cfg = getConfig(options);
84
+ const SYNC_FILE = resolve('data/.tc-last-sync');
85
+ console.log(`\n${BOLD}ATR TC Pull${RESET}`);
86
+ console.log(`${DIM}Pull confirmed TC rules → repo${RESET}\n`);
87
+ // Determine since timestamp
88
+ const since = options['since']
89
+ ?? (existsSync(SYNC_FILE) ? readFileSync(SYNC_FILE, 'utf-8').trim() : '');
90
+ const sinceParam = since || new Date(Date.now() - 7 * 86400000).toISOString();
91
+ const resp = await fetch(`${cfg.tcUrl}/api/atr-rules?since=${encodeURIComponent(sinceParam)}`, {
92
+ signal: AbortSignal.timeout(15_000),
93
+ });
94
+ const raw = await resp.json();
95
+ if (!raw.ok) {
96
+ console.error(` ${RED}TC API error${RESET}`);
97
+ process.exit(1);
98
+ }
99
+ // Find existing rule IDs in repo
100
+ const existingIds = new Set();
101
+ for (const cat of readdirSync(cfg.rulesDir)) {
102
+ const catDir = join(cfg.rulesDir, cat);
103
+ if (!statSync(catDir).isDirectory())
104
+ continue;
105
+ for (const f of readdirSync(catDir).filter(f => f.endsWith('.yaml'))) {
106
+ const id = readFileSync(join(catDir, f), 'utf-8').match(/^id:\s*(\S+)/m)?.[1];
107
+ if (id)
108
+ existingIds.add(id);
109
+ }
110
+ }
111
+ const newRules = raw.data.filter(r => {
112
+ const id = r.ruleContent.match(/^id:\s*(\S+)/m)?.[1] ?? '';
113
+ return !existingIds.has(id) && r.source !== 'atr';
114
+ });
115
+ console.log(` TC rules: ${raw.data.length} | Already in repo: ${raw.data.length - newRules.length} | New: ${newRules.length}`);
116
+ if (newRules.length === 0) {
117
+ console.log(` ${GREEN}Up to date.${RESET}`);
118
+ if (!cfg.dryRun)
119
+ writeFileSync(SYNC_FILE, new Date().toISOString());
120
+ return;
121
+ }
122
+ // Find next rule ID
123
+ let maxId = 0;
124
+ for (const cat of readdirSync(cfg.rulesDir)) {
125
+ const catDir = join(cfg.rulesDir, cat);
126
+ if (!statSync(catDir).isDirectory())
127
+ continue;
128
+ for (const f of readdirSync(catDir)) {
129
+ const m = f.match(/ATR-2026-(\d{5})/);
130
+ if (m)
131
+ maxId = Math.max(maxId, parseInt(m[1], 10));
132
+ }
133
+ }
134
+ let nextId = maxId + 1;
135
+ const written = [];
136
+ for (const rule of newRules) {
137
+ let content = rule.ruleContent;
138
+ // Replace draft IDs
139
+ if (content.includes('DRAFT')) {
140
+ const realId = `ATR-2026-${String(nextId).padStart(5, '0')}`;
141
+ content = content.replace(/ATR-2026-DRAFT-[A-Za-z0-9]+|ATR-2026-DRAFT|ATR-DRAFT/g, realId);
142
+ nextId++;
143
+ }
144
+ // Auto-fix LLM YAML: double-quoted regex → single-quoted
145
+ content = content.replace(/^(\s+value:\s*)"((?:[^"\\]|\\.)*)"\s*$/gm, (_, prefix, regex) => `${prefix}'${regex.replace(/'/g, "''")}'`);
146
+ const id = content.match(/^id:\s*(\S+)/m)?.[1] ?? 'unknown';
147
+ const category = content.match(/category:\s*(\S+)/m)?.[1] ?? 'prompt-injection';
148
+ const sub = content.match(/subcategory:\s*(\S+)/m)?.[1] ?? id.toLowerCase();
149
+ const slug = sub.replace(/[^a-z0-9-]/g, '-').slice(0, 40);
150
+ const catDir = join(cfg.rulesDir, category);
151
+ if (!existsSync(catDir))
152
+ mkdirSync(catDir, { recursive: true });
153
+ const filePath = join(catDir, `${id}-${slug}.yaml`);
154
+ if (cfg.dryRun) {
155
+ console.log(` ${DIM}[DRY RUN] ${filePath}${RESET}`);
156
+ continue;
157
+ }
158
+ writeFileSync(filePath, content);
159
+ // Validate
160
+ try {
161
+ execSync(`node dist/cli.js validate "${filePath}"`, { encoding: 'utf-8', stdio: 'pipe' });
162
+ written.push(filePath);
163
+ console.log(` ${GREEN}+${RESET} ${id} (${category}/${slug})`);
164
+ }
165
+ catch {
166
+ console.log(` ${RED}x${RESET} ${id} — invalid, removed`);
167
+ unlinkSync(filePath);
168
+ }
169
+ }
170
+ if (!cfg.dryRun)
171
+ writeFileSync(SYNC_FILE, new Date().toISOString());
172
+ console.log(`\n ${BOLD}${written.length} rules pulled.${RESET}`);
173
+ }
174
+ // ── atr tc crystallize ────────────────────────────────────────
175
+ export async function cmdTCCrystallize(options) {
176
+ const cfg = getConfig(options);
177
+ console.log(`\n${BOLD}ATR TC Crystallize${RESET}`);
178
+ console.log(`${DIM}Send missed attacks → TC LLM → proposals${RESET}\n`);
179
+ // Load engine + adversarial samples
180
+ const { ATREngine } = await import('../engine.js');
181
+ const engine = new ATREngine({ rulesDir: cfg.rulesDir });
182
+ await engine.loadRules();
183
+ const samplesPath = resolve('data/autoresearch/adversarial-samples.json');
184
+ if (!existsSync(samplesPath)) {
185
+ console.error(` ${RED}No adversarial samples at ${samplesPath}${RESET}`);
186
+ process.exit(1);
187
+ }
188
+ const samples = JSON.parse(readFileSync(samplesPath, 'utf-8'));
189
+ // Find missed attacks
190
+ const missed = new Map();
191
+ for (const s of samples) {
192
+ const m = engine.evaluate({
193
+ type: 'tool_response', timestamp: new Date().toISOString(),
194
+ content: s.payload, fields: { content: s.payload },
195
+ });
196
+ if (m.length === 0) {
197
+ const list = missed.get(s.technique) ?? [];
198
+ list.push(s);
199
+ missed.set(s.technique, list);
200
+ }
201
+ }
202
+ const techniques = [...missed.entries()].filter(([, items]) => items.length >= 5);
203
+ const totalMissed = techniques.reduce((s, [, i]) => s + i.length, 0);
204
+ console.log(` Samples: ${samples.length} | Missed: ${totalMissed} | Techniques: ${techniques.length}`);
205
+ if (techniques.length === 0) {
206
+ console.log(` ${GREEN}All samples covered. Nothing to crystallize.${RESET}`);
207
+ return;
208
+ }
209
+ if (cfg.dryRun) {
210
+ for (const [tech, items] of techniques) {
211
+ console.log(` ${DIM}[DRY RUN] ${tech}: ${items.length} samples${RESET}`);
212
+ }
213
+ return;
214
+ }
215
+ let created = 0;
216
+ let errors = 0;
217
+ for (const [tech, items] of techniques) {
218
+ const tools = items.slice(0, 8).map((s, i) => ({
219
+ name: `${tech}_${i}`,
220
+ description: s.payload,
221
+ }));
222
+ try {
223
+ const resp = await fetch(`${cfg.tcUrl}/api/analyze-skills`, {
224
+ method: 'POST',
225
+ headers: { 'Content-Type': 'application/json' },
226
+ body: JSON.stringify({ skills: [{ package: `crystallize-${tech}-${Date.now()}`, tools }] }),
227
+ signal: AbortSignal.timeout(60_000),
228
+ });
229
+ if (!resp.ok) {
230
+ const text = await resp.text();
231
+ // Skip HTML errors (TC overloaded)
232
+ if (text.startsWith('<!')) {
233
+ errors++;
234
+ continue;
235
+ }
236
+ }
237
+ const data = await resp.json();
238
+ const r = data.data?.results?.[0];
239
+ const p = r?.proposalCount ?? 0;
240
+ created += p;
241
+ const tag = r?.cached ? `${DIM}cached${RESET}` : (p > 0 ? `${GREEN}+${p}${RESET}` : `${DIM}0${RESET}`);
242
+ console.log(` ${tech} (${items.length}) → ${tag}`);
243
+ await new Promise(r => setTimeout(r, 5000));
244
+ }
245
+ catch {
246
+ errors++;
247
+ console.log(` ${tech} → ${RED}error${RESET}`);
248
+ }
249
+ }
250
+ console.log(`\n ${BOLD}Proposals: ${created} | Errors: ${errors}${RESET}`);
251
+ }
252
+ // ── atr tc status ─────────────────────────────────────────────
253
+ export async function cmdTCStatus(options) {
254
+ const cfg = getConfig(options);
255
+ console.log(`\n${BOLD}ATR Threat Cloud Status${RESET}`);
256
+ console.log(`${DIM}${cfg.tcUrl}${RESET}\n`);
257
+ const [stats, metrics] = await Promise.all([
258
+ fetch(`${cfg.tcUrl}/api/stats`, { signal: AbortSignal.timeout(5000) }).then(r => r.json()).catch(() => null),
259
+ fetch(`${cfg.tcUrl}/api/metrics`, { signal: AbortSignal.timeout(5000) }).then(r => r.json()).catch(() => null),
260
+ ]);
261
+ if (!stats?.data) {
262
+ console.error(` ${RED}Cannot reach TC at ${cfg.tcUrl}${RESET}`);
263
+ process.exit(1);
264
+ }
265
+ const s = stats.data;
266
+ const p = s['proposalStats'];
267
+ const m = metrics?.data;
268
+ // Count local rules
269
+ let localRules = 0;
270
+ for (const cat of readdirSync(cfg.rulesDir)) {
271
+ const catDir = join(cfg.rulesDir, cat);
272
+ if (!statSync(catDir).isDirectory())
273
+ continue;
274
+ localRules += readdirSync(catDir).filter(f => f.endsWith('.yaml')).length;
275
+ }
276
+ const tcRules = s['totalRules'] ?? 0;
277
+ const synced = localRules === tcRules;
278
+ console.log(` ${BOLD}Rules${RESET}`);
279
+ console.log(` Local repo: ${localRules}`);
280
+ console.log(` TC: ${tcRules} ${synced ? GREEN + '(synced)' + RESET : RED + '(out of sync — run: atr tc sync)' + RESET}`);
281
+ console.log(` Metrics API: ${m?.['totalAtrRules'] ?? '?'}`);
282
+ console.log(`\n ${BOLD}Proposals${RESET}`);
283
+ console.log(` Pending: ${p?.['pending'] ?? 0}`);
284
+ console.log(` Canary: ${p?.['canary'] ?? 0}`);
285
+ console.log(` Confirmed: ${p?.['confirmed'] ?? 0}`);
286
+ console.log(` Rejected: ${p?.['rejected'] ?? 0}`);
287
+ console.log(` Total: ${p?.['total'] ?? 0}`);
288
+ console.log(`\n ${BOLD}Data${RESET}`);
289
+ console.log(` Threats: ${s['totalThreats'] ?? 0} (24h: ${s['last24hThreats'] ?? 0})`);
290
+ console.log(` Skill scans: ${s['skillThreatsTotal'] ?? 0}`);
291
+ console.log(` Blacklist: ${s['skillBlacklistTotal'] ?? 0}`);
292
+ console.log(` Protected: ${m?.['totalAgentsProtected'] ?? 0} devices`);
293
+ console.log('');
294
+ }
295
+ //# sourceMappingURL=tc-pipeline.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tc-pipeline.js","sourceRoot":"","sources":["../../src/cli/tc-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AASxB,SAAS,SAAS,CAAC,OAA2C;IAC5D,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnG,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QACjG,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,MAAM;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACzE,IAAI,QAAQ;QAAE,CAAC,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,EAAE,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA2C;IACzE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,iCAAiC,KAAK,IAAI,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAmE,EAAE,CAAC;IACjF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9C,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,wBAAwB,KAAK,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,iEAAiE,KAAK,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,YAAY,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA+C,CAAC;IAE5E,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;SAC3F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAyC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,IAAI,EAAE,aAAa,IAAI,GAAG,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA2C;IACzE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,iCAAiC,KAAK,IAAI,CAAC,CAAC;IAE9D,4BAA4B;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;WACzB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,wBAAwB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAC7F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAA2F,CAAC;IACvH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,KAAK,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAEhF,iCAAiC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,EAAE;gBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAE/B,oBAAoB;QACpB,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,YAAY,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,uDAAuD,EAAE,MAAM,CAAC,CAAC;YAC3F,MAAM,EAAE,CAAC;QACX,CAAC;QAED,yDAAyD;QACzD,OAAO,GAAG,OAAO,CAAC,OAAO,CACvB,0CAA0C,EAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAChE,CAAC;QAEF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QAEpD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,aAAa,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjC,WAAW;QACX,IAAI,CAAC;YACH,QAAQ,CAAC,8BAA8B,QAAQ,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,EAAE,qBAAqB,CAAC,CAAC;YAC1D,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,iBAAiB,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA2C;IAChF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,2CAA2C,KAAK,IAAI,CAAC,CAAC;IAExE,oCAAoC;IACpC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAEzB,MAAM,WAAW,GAAG,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,6BAA6B,WAAW,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAE/D,sBAAsB;IACtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YACxB,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,MAAM,cAAc,WAAW,kBAAkB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,+CAA+C,KAAK,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,aAAa,IAAI,KAAK,KAAK,CAAC,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE;YACpB,WAAW,EAAE,CAAC,CAAC,OAAO;SACvB,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,qBAAqB,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC3F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,mCAAmC;gBACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,MAAM,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAgG,CAAC;YAC7H,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,OAAO,cAAc,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2C;IAC3E,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,0BAA0B,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC;IAE5C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC5G,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAC/G,CAAyF,CAAC;IAE3F,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,sBAAsB,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,KAAK,CAAC,IAA+B,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,CAA2B,CAAC;IACvD,MAAM,CAAC,GAAG,OAAO,EAAE,IAA2C,CAAC;IAE/D,oBAAoB;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9C,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,CAAC;IAED,MAAM,OAAO,GAAI,CAAC,CAAC,YAAY,CAAY,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC;IAEtC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,kCAAkC,GAAG,KAAK,EAAE,CAAC,CAAC;IACrI,OAAO,CAAC,GAAG,CAAC,oBAAqB,CAAC,EAAE,CAAC,eAAe,CAAY,IAAI,GAAG,EAAE,CAAC,CAAC;IAE3E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,oBAAqB,CAAC,EAAE,CAAC,sBAAsB,CAAY,IAAI,CAAC,UAAU,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}
package/dist/cli.d.ts ADDED
@@ -0,0 +1,12 @@
1
+ #!/usr/bin/env node
2
+ /**
3
+ * ATR CLI - Command-line interface for Agent Threat Rules
4
+ *
5
+ * Usage:
6
+ * npx agent-threat-rules scan <events.json> Scan events against all rules
7
+ * npx agent-threat-rules validate <rule.yaml> Validate a rule file
8
+ * npx agent-threat-rules test <rule.yaml> Run a rule's test cases
9
+ * npx agent-threat-rules stats Show rule collection stats
10
+ */
11
+ export {};
12
+ //# sourceMappingURL=cli.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}