agent-orcha 0.0.5 → 0.0.8

package/dist/templates/knowledge/security-incidents.knowledge.yaml

@@ -0,0 +1,46 @@
+name: security-incidents
+description: Cybersecurity threat intelligence — CVEs, advisories, malware, ICS alerts from CISA, NVD, and other feeds
+
+source:
+  type: file
+  path: knowledge/security-incidents/incidents.json
+
+loader:
+  type: json
+
+splitter:
+  type: recursive
+  chunkSize: 800
+  chunkOverlap: 100
+
+embedding: default
+
+search:
+  defaultK: 8
+
+graph:
+  directMapping:
+    entities:
+      - type: Incident
+        idColumn: id
+        nameColumn: title
+        properties: [description, severity, category, source, publishedAt]
+      - type: Severity
+        idColumn: severity
+        nameColumn: severity
+        properties: []
+      - type: Category
+        idColumn: category
+        nameColumn: category
+        properties: []
+    relationships:
+      - type: HAS_SEVERITY
+        source: Incident
+        target: Severity
+        sourceIdColumn: id
+        targetIdColumn: severity
+      - type: IN_CATEGORY
+        source: Incident
+        target: Category
+        sourceIdColumn: id
+        targetIdColumn: category

package/dist/templates/knowledge/{example.knowledge.yaml → transcripts.knowledge.yaml}

@@ -1,5 +1,5 @@
-name: example
-description: Example vector store for semantic search
+name: transcripts
+description: Call transcripts for employee performance and conversation analysis
 
 source:
   type: directory
@@ -15,11 +15,15 @@ splitter:
   chunkSize: 1000
   chunkOverlap: 200
 
-embedding: default  # References embedding config in llm.json
+embedding: default
 
 search:
-  defaultK: 4
+  defaultK: 6
   scoreThreshold: 0.2
 
 metadata:
-  category: example
+  category: corporate
+  tags:
+    - transcripts
+    - calls
+    - performance

package/dist/templates/knowledge/transport-ot/systems.csv

@@ -0,0 +1,117 @@
+system_name,vendor,category,protocol,sector,description,os_firmware,known_software,cpe_id
+Positive Train Control (PTC),Wabtec,train-control,I-ETMS/220 MHz RF,railroad,Federally mandated system preventing train-to-train collisions and overspeed derailments on Class I railroads,VxWorks Cert (onboard vital); Linux (base station),.NET/C#; SQL Server; GPS/GNSS; GoLINC Edge,cpe:2.3:a:wabtec:i-etms:*:*:*:*:*:*:*:*
+European Train Control System (ETCS),Various (Alstom/Siemens/Hitachi),train-control,Eurobalise/Euroloop,railroad,Core signaling component of ERTMS providing continuous speed supervision and movement authority,VxWorks Cert 653 (onboard vital); QNX Neutrino (non-vital); Linux (ground),SCADE Suite; Eurobalise S21; GSM-R/GPRS stack; Artesyn ControlSafe SIL4,N/A
+Communications-Based Train Control (CBTC),Thales/Alstom/Siemens,train-control,802.11/LTE,metro,Moving-block signaling system using continuous train-to-wayside communication for urban rail,VxWorks Cert 653 (vital); Linux (ATS/non-vital),Thales SelTrac G8; Alstom Urbalis 400; Siemens Trainguard MT; CLEARSY B-method,N/A
+Automatic Train Protection (ATP),Alstom/Bombardier,train-control,Track circuits/Balises,railroad,Safety system enforcing speed limits and signal compliance through automatic brake application,VxWorks Cert (vital); proprietary RTOS (legacy),SCADE Suite; Alstom iVPI; Artesyn ControlSafe SIL4,N/A
+Automatic Train Operation (ATO),Alstom/Thales,train-control,CBTC/radio,metro,System automating acceleration braking and door operation under GoA2-GoA4 automation grades,VxWorks Cert 653 (vital); Linux (non-vital),Alstom Urbalis ATO; CLEARSY Safety Platform; Thales SelTrac ATO,N/A
+Automatic Train Supervision (ATS),Hitachi Rail/Thales,train-control,IP/proprietary,metro,Central system managing train regulation timetable adherence and service recovery across the network,Windows Server; Linux,.NET; SQL Server/Oracle; Java; OPC-UA; SCADA middleware,N/A
+Chinese Train Control System (CTCS),CRSC,train-control,Balise/GSM-R,railroad,Chinese national train control standard with levels 0-4 deployed across high-speed and conventional rail,VxWorks Cert (onboard ATP vital); Linux (RBC ground),CRSC CTCS-3 ATP/ATO; GSM-R stack; Eurobalise-compatible transponders,N/A
+Advanced Train Management System (ATMS),Lockheed Martin,train-control,GPS/RF/cellular,railroad,Australian centralized train management system using satellite positioning for remote desert rail,Linux; proprietary RTOS (safety layer),GPS dual-antenna; cellular/RF stack; Driver Machine Interface; Train Control & Display,N/A
+Train Protection and Warning System (TPWS),Various,train-control,Track-mounted loops,railroad,UK safety overlay system providing overspeed and signal-passed-at-danger protection,Proprietary firmware; FPGA-based (Altera Cyclone V SoC),Thales TPU Mk4; AWS integration; Mors Smitt track-mounted loops,N/A
+Centralized Traffic Control (CTC),Wabtec/Hitachi Rail,signaling,Serial/IP,railroad,Dispatching system allowing remote control of signals and switches from a central office,Windows Server,.NET/C#/VB.NET; SQL Server; SCADA interfaces; Wabtec TMDS,N/A
+Electronic Interlocking,Siemens/Alstom/Hitachi Rail,signaling,Proprietary fieldbus,railroad,Computer-based system preventing conflicting signal and switch states at junctions,Proprietary RTOS (Siemens SIMATIC S7); proprietary (Alstom/Hitachi),Siemens Sicas S7; Alstom Smartlock 400; Hitachi MicroLok II; SIL4,cpe:2.3:h:siemens:simatic_s7-400:*:*:*:*:*:*:*:*
+Solid State Interlocking (SSI),Westinghouse/Alstom,signaling,Serial data link,railroad,First-generation processor-based interlocking using geographic data to control signaling routes,Proprietary firmware (2oo3 hardware),SSI core application; Geographic Data Language (GDL); Trackside Functional Modules,N/A
+Computer-Based Interlocking (CBI),Hitachi Rail/Thales,signaling,Ethernet/proprietary,railroad,Modern interlocking platform with redundant processors and formal methods safety verification,VxWorks Cert 653 (Artesyn ControlSafe); proprietary RTOS,Hitachi MicroLok II; Thales PIPC G2; Artesyn ControlSafe,N/A
+Crossing Warning System,Siemens/Alstom,signaling,Track circuit/serial,railroad,Automated activation of gates lights and bells at highway-rail grade crossings,Proprietary embedded firmware,Alstom PMD-4/XP4; PWM motor control; track circuit interface; vital relay logic,N/A
+Wayside Signal Controller,Alstom/Hitachi Rail,signaling,Vital relay/serial,railroad,Field equipment controlling signal aspects based on interlocking logic and track occupancy,Proprietary RTOS; VxWorks Cert (COTS platforms),Alstom iVPI; Hitachi MicroLok II; vital relay interfaces,N/A
+Automatic Block Signaling (ABS),GE/Alstom,signaling,Track circuit/relay,railroad,Fixed-block signaling dividing track into blocks with automatic signal control based on occupancy,Proprietary firmware (relay legacy); Linux (GE Tempo),GE Tempo Railway Solutions; track circuit detection; relay logic,N/A
+Moving Block Signaling,Thales/Siemens,signaling,Radio/CBTC,metro,Dynamic train separation based on real-time position rather than fixed block boundaries,VxWorks Cert 653 (vital); Linux (non-vital),Thales SelTrac G7/G8; Siemens Trainguard MT; Artesyn ControlSafe SIL4,N/A
+Point Machine (Switch Motor),Alstom/Siemens/Voestalpine,signaling,Serial/relay,railroad,Electromechanical device physically moving switch rails to route trains between tracks,Proprietary embedded firmware,Voestalpine zentrak Object Controller; EULYNX/IEC 62443; NFC diagnostics,N/A
+Axle Counter System,Frauscher/Thales,track-monitoring,RS-485/Ethernet,railroad,Track vacancy detection using electromagnetic wheel sensors as alternative to track circuits,Proprietary RTOS (SIL4-certified),CAN bus stack; Ethernet/IP; OPC UA; EULYNX protocol stack,N/A
+Hot Box Detector (HBD),Wabtec/Progress Rail,track-monitoring,Serial/cellular,freight,Wayside detector measuring bearing temperatures on passing rolling stock to prevent derailments,Proprietary embedded firmware,Infrared signal processing; serial/cellular communication stack,N/A
+Dragging Equipment Detector,Progress Rail,track-monitoring,Serial/cellular,freight,Wayside system detecting components hanging below normal clearance on passing trains,Proprietary embedded firmware,Microprocessor signal processing; analog sensor firmware,N/A
+Wheel Impact Load Detector (WILD),Salient Systems,track-monitoring,Ethernet/serial,freight,Measures vertical wheel forces to identify defective wheels and flat spots,Proprietary embedded firmware,Strain gauge DSP; Wheel Data Management System (WDMS),N/A
+Broken Rail Detection System,Harmon/Progress Rail,track-monitoring,Track circuit/audio freq,railroad,Continuous monitoring using track circuit or acoustic methods to detect rail fractures,Proprietary embedded firmware,Audio frequency track circuit DSP; voltage/current measurement,N/A
+Overhead Catenary Monitoring,Ricardo/Mermec,track-monitoring,LiDAR/vision,railroad,Automated inspection of overhead line geometry and wear using sensor-equipped vehicles,Windows (industrial PC),RAMSYS data management; Trackware analysis; machine learning; LiDAR processing,N/A
+Wheel Flat Detection System,Argenia/Wabtec,track-monitoring,Acoustic/vibration,railroad,Acoustic or vibration-based trackside monitoring identifying wheel surface defects on passing trains,Proprietary embedded firmware,Acoustic/vibration DSP; LTE CAT 1 cellular modem stack,N/A
+Track Geometry Measurement System,Plasser & Theurer/Mermec,track-monitoring,Inertial/laser/GPS,railroad,High-speed recording vehicle measuring rail gauge alignment profile and twist for maintenance planning,Windows (industrial PC),ALC analysis software; InertialTrackGeometry; inertial/laser/GPS sensor fusion,N/A
+Rail Flaw Detection (Ultrasonic),Sperry Rail/Nordco,track-monitoring,Ultrasonic/serial,railroad,Non-destructive testing vehicles using ultrasonic transducers to detect internal rail defects,Windows (analysis workstation),DCS.NET inspection software; Sperry SDMS; Nordco pattern recognition AI,N/A
+Pantograph Monitoring System,Mermec/Ricardo,track-monitoring,Vision/force sensors,railroad,Camera and force measurement systems detecting pantograph-catenary contact anomalies,Windows/Linux (NVIDIA GPU),Machine learning/computer vision; 3D point cloud processing; PanMon/CatMon,N/A
+Vegetation Encroachment Detection,Fugro/Trimble,track-monitoring,LiDAR/GPS,railroad,Aerial or vehicle-mounted LiDAR surveying identifying vegetation clearance violations along corridors,Windows,FugroViewer; Sense.LiDAR ML classification; Trimble GNSS/INS processing,N/A
+Structure Gauge Monitoring,Mermec/Amberg,track-monitoring,LiDAR/laser,railroad,Measuring tunnel and infrastructure clearance profiles to ensure safe passage of rolling stock,Windows,Amberg Rail 3.x; Amberg Clearance analysis; Profiler LiDAR integration,N/A
+GSM-R Radio,Nokia/Ericsson,communications,GSM-R 900 MHz,railroad,Dedicated railway mobile communication standard for voice and ETCS data on European rail networks,Enea OSE RTOS (Ericsson); Wind River Linux (Nokia),GSM-R protocol stack; ETCS signaling interface; BTS management software,N/A
+TETRA Radio System,Motorola/Airbus DS,communications,TETRA 380-400 MHz,metro,Digital trunked radio system used for mission-critical voice and data in transit operations,Proprietary RTOS (Motorola); proprietary firmware (Airbus),TETRA protocol stack; TEA encryption algorithms; AT command interface,cpe:2.3:o:motorola:mtm5400_firmware:*:*:*:*:*:*:*:*
+LTE-R/FRMCS,Nokia/Ericsson/Huawei,communications,LTE 700-900 MHz,railroad,Future Railway Mobile Communication System replacing GSM-R with broadband capabilities,Linux; Enea OSE RTOS (base station),3GPP LTE/5G NR stack; FRMCS application layer; Nokia Flexi Multiradio 10,N/A
+End of Train Device (EOT/FRED),Wabtec/Cattron,communications,457 MHz RF,freight,Telemetry device on last car transmitting brake pipe pressure and providing emergency braking,QNX Neutrino RTOS (ARM Cortex-A5),TrainLink telemetry; 457 MHz RF protocol stack; brake pipe pressure monitoring,N/A
+Train-to-Ground Communication Gateway,Thales/Nokia,communications,LTE/Wi-Fi,metro,Onboard router providing broadband connectivity between train systems and wayside infrastructure,Linux (embedded),LTE/Wi-Fi protocol stacks; VPN/encryption libraries; ETCS data relay,N/A
+Emergency Telephone System,GAI-Tronics/Zenitel,communications,SIP/IP,metro,Platform and tunnel emergency communication stations connected to central operations,Embedded Linux (GAI-Tronics); proprietary firmware (Zenitel),SIP/VoIP stack; embedded web server; TLS/HTTPS; ONVIF,N/A
+Distributed Antenna System (DAS),CommScope/Corning,communications,LTE/5G/Wi-Fi,metro,In-tunnel and station RF distribution network providing cellular and radio coverage underground,Proprietary embedded firmware,A.I.M.O.S. management system; ERA C-RAN software; SNMP; auto-discovery,N/A
+Public Address System (PA),Bosch/TOA,communications,IP/CobraNet,metro,Centralized audio announcement system for stations and trains with pre-recorded and live messaging,Proprietary embedded firmware (Bosch Praesideo/Praesensa),OMNEO/Dante audio networking; SIP protocol; embedded web server; CobraNet,cpe:2.3:h:bosch:praesideo:-:*:*:*:*:*:*:*
+Locomotive Remote Control (Beltpack),Cattron/Wabtec,communications,900 MHz spread spectrum,freight,Wireless remote control allowing yard operators to control locomotive movements during switching,Proprietary embedded firmware,900 MHz spread spectrum RF stack; safety interlock firmware; AccuSpeed control,N/A
+Positive Train Separation (PTS),Wabtec,train-control,GPS/RF,freight,Overlay system providing collision avoidance for freight operations in non-PTC territory,VxWorks Cert (onboard vital); Linux (base station),GPS/GNSS; 220MHz RF stack; GoLINC Edge,cpe:2.3:a:wabtec:i-etms:*:*:*:*:*:*:*:*
+Electronically Controlled Pneumatic Brakes (ECP),Wabtec/New York Air Brake,train-control,Trainline wire/RF,freight,Simultaneous application of brakes on all cars via electronic commands replacing pneumatic propagation delay,Proprietary embedded firmware,Wabtec ECP-4200 HEU/CCD; NYAB EP-60 TCC; AAR trainline protocol,N/A
+Crew Management System,GE Transportation/Wabtec,fleet-management,IP/cellular,freight,Scheduling and compliance system managing crew assignments hours-of-service and qualification tracking,Windows Server,Oracle DB; Java; .NET; SQL Server,cpe:2.3:a:wabtec:railconnect:*:*:*:*:*:*:*:*
+Locomotive Event Recorder,Wabtec/L3Harris,fleet-management,Proprietary,railroad,Black box recording speed location brake and throttle data for incident investigation,Proprietary embedded RTOS,IEEE 1482.1 compliant; AAR S9101B stack,N/A
+Rail Traffic Management System (TMS),Hitachi Rail/Thales,fleet-management,IP/proprietary,railroad,Enterprise platform for network-wide train planning scheduling and real-time management,Windows Server; Linux,Java; Oracle DB; PostgreSQL; Thales Aramis platform,N/A
+Automatic Vehicle Location (AVL),Trapeze/Clever Devices,fleet-management,GPS/cellular,metro,Real-time bus and rail vehicle tracking for fleet management and passenger information,Windows Server,.NET; MS SQL Server; Java; jQuery,N/A
+Computer-Aided Dispatch (CAD),Trapeze/HASTUS,fleet-management,IP/cellular,metro,Operations management system for scheduling dispatching and service adjustment,Windows Server,Oracle DB; MS SQL Server; .NET; GIRO HASTUS platform,N/A
+Freight Car Tracking (RFID),Amtech/Zebra,fleet-management,AEI RFID 900 MHz,freight,Automatic Equipment Identification using passive RFID tags on rolling stock read by wayside scanners,Proprietary embedded firmware,TransCore Encompass DSP; AAR AEI protocol stack; RS-232/RS-422,N/A
+Intermodal Terminal Operating System,Navis/TBA Group,fleet-management,IP/RFID,freight,Container yard management system coordinating crane rail and truck movements at intermodal facilities,Linux (RHEL); Windows Server,Java; Oracle DB; Groovy (Navis N4); Apache Tomcat,cpe:2.3:a:kaleris:navis_n4:*:*:*:*:*:*:*:*
+Locomotive Health Monitoring,Wabtec/Progress Rail,fleet-management,Cellular/satellite,freight,Onboard telemetry transmitting engine performance fuel consumption and fault diagnostics to central servers,Proprietary embedded RTOS; Linux,EMD EM2000 firmware; IntelliTrain; PR Uptime cloud (AWS),N/A
+Fuel Management System,Modius/FuelQuest,fleet-management,Serial/cellular,freight,Automated fuel dispensing tracking and inventory management at locomotive fueling facilities,Windows Server,MS SQL Server; .NET; microservices architecture,N/A
+SCADA for Traction Power,ABB/Siemens,power-systems,DNP3/Modbus,metro,Supervisory control of traction power substations feeding third rail or overhead catenary systems,Windows Server (10 LTSC/Server 2019),ABB Symphony Plus; Siemens WinCC OA; Oracle/MS SQL Server; DNP3 stack; OpenSSL,cpe:2.3:a:abb:symphony_plus:*:*:*:*:*:*:*:*
+Traction Power Substation RTU,SEL/GE,power-systems,DNP3/IEC 61850,metro,Remote terminal unit monitoring and controlling circuit breakers and rectifiers in substations,Embedded RTOS (proprietary),SEL RTAC firmware; IEC 61850 MMS stack; DNP3 stack; IEC 61131-3,cpe:2.3:a:selinc:sel-3530:*:*:*:*:*:*:*:*
+Tunnel Ventilation SCADA,ABB/Siemens,power-systems,Modbus/BACnet,metro,Supervisory control of tunnel fan systems for smoke extraction and environmental management,Windows Server; Linux (RHEL),Siemens WinCC OA; ABB Ability zenon; BACnet/Modbus stack; MS SQL Server,cpe:2.3:a:siemens:wincc_oa:*:*:*:*:*:*:*:*
+Uninterruptible Power Supply (UPS) for Signaling,Eaton/APC,power-systems,SNMP/Modbus,railroad,Battery-backed power systems ensuring continuous operation of safety-critical signaling equipment,Proprietary embedded firmware (NMC),Eaton Network-M2/M3; APC AOS firmware; SNMP stack; Treck TCP/IP; OpenSSL,cpe:2.3:o:apc:smart-ups_firmware:*:*:*:*:*:*:*:*
+Overhead Line Sectioning (OCS SCADA),ABB/Siemens,power-systems,IEC 61850/DNP3,railroad,Remote switching and fault isolation for overhead catenary power distribution sections,Windows Server (10 LTSC/Server 2019),ABB Symphony Plus; Siemens WinCC; IEC 61850/DNP3 stack; Oracle/MS SQL Server,cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*
+Third Rail Power Distribution SCADA,ABB/Schneider,power-systems,DNP3/Modbus,metro,Monitoring and control of DC traction power distribution via third rail including gap breakers,Windows Server,ABB Symphony Plus; Schneider ClearSCADA; DNP3/Modbus stack; MS SQL Server,cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:*
+Station Electrical SCADA,Schneider/ABB,power-systems,BACnet/Modbus,metro,Building management of station electrical systems including lighting HVAC and escalator power,Windows Server,Schneider EcoStruxure Building Operation; ABB Ability zenon; BACnet/Modbus; MS SQL Server,cpe:2.3:a:schneider-electric:ecostruxure_building_operation:*:*:*:*:*:*:*:*
+Wayside Energy Storage System,ABB/Siemens,power-systems,Modbus/IEC 61850,metro,Battery or supercapacitor systems capturing regenerative braking energy at substations,Windows Server; Linux,ABB Ability zenon; Siemens WinCC OA; IEC 61850/Modbus stack,cpe:2.3:a:abb:symphony_plus:*:*:*:*:*:*:*:*
+Automatic Fare Collection (AFC),Cubic/Thales,ticketing,NFC/RFID/IP,metro,Contactless smart card and mobile payment systems for transit fare processing,Windows Embedded/Windows IoT,OpenSSL; Java; .NET; SQL Server; NFC/RFID middleware,N/A
+Ticket Vending Machine (TVM),Scheidt & Bachmann/Cubic,ticketing,Ethernet/cellular,metro,Self-service kiosks for ticket purchase and account management at stations,Windows Embedded Standard/Windows IoT Enterprise,Java; .NET; SQL Server/SQLite; OpenSSL; touchscreen UI framework,N/A
+Account-Based Ticketing (ABT),Cubic/Littlepay,ticketing,EMV/NFC/IP,metro,Open-loop contactless payment system accepting bank cards and mobile wallets directly at fare gates,Linux (cloud); Windows Server,Java; .NET; PostgreSQL; OpenSSL; Docker; Kubernetes,N/A
+Fare Gate Controller,Cubic/Thales,ticketing,Ethernet/serial,metro,Turnstile or barrier gate controller validating tickets and managing passenger flow at station entries,Proprietary RTOS; Windows Embedded Compact,C/C++ firmware; OpenSSL; NFC/RFID stack; serial protocol drivers,N/A
+Passenger Information Display System (PIDS),Teleste/Daktronics,passenger-info,Ethernet/RS-485,metro,Real-time arrival and service information displays at stations and on trains,Linux (embedded),Qt/GTK; BusyBox; OpenSSL; MQTT/AMQP; Daktronics Venus 1500,N/A
+Onboard Passenger Wi-Fi,Icomera/Nomad Digital,passenger-info,LTE/Wi-Fi/satellite,railroad,Train-mounted system providing internet connectivity to passengers via cellular or satellite backhaul,Linux (embedded/hardened),Kubernetes; Docker; OpenSSL; iptables/nftables; hostapd; SureWAN,N/A
+Real-Time Passenger Information (RTPI),Clever Devices/Teleste,passenger-info,GTFS-RT/IP,metro,System generating and distributing live arrival predictions to apps displays and announcements,Windows Embedded; Linux,CleverCAD; .NET/Java; GTFS-RT libraries; SQL Server/PostgreSQL; OpenSSL,N/A
+Passenger Counting System,DILAX/Eurotech,passenger-info,IR sensors/3D cameras,metro,Automated counting of boarding and alighting passengers using sensors at vehicle doors,Linux (Yocto/embedded),BusyBox; OpenSSL; Python/C++; OpenCV,N/A
+Video Surveillance (CCTV),Bosch/Axis/Hikvision,surveillance,IP/ONVIF,metro,Networked camera systems for station and vehicle security monitoring and analytics,Linux (embedded/BusyBox),GoAhead/lighttpd web server; OpenSSL; FFmpeg; BusyBox; ONVIF stack,cpe:2.3:o:hikvision:ds-2cd2xx_firmware:*:*:*:*:*:*:*:* | cpe:2.3:o:axis:axis_os:*:*:*:*:*:*:*:*
+Station Fire Alarm System,Honeywell/Siemens,surveillance,BACnet/Modbus,metro,Integrated fire detection and suppression control across station facilities and tunnels,Proprietary RTOS (bare-metal),BACnet/Modbus stack; Cerberus Engineering Tool (Siemens),N/A
+Level Crossing Obstacle Detection,Honeywell/Bosch,surveillance,Radar/LiDAR,railroad,Sensor systems detecting vehicles or pedestrians trapped on grade crossings before train arrival,Proprietary RTOS; VxWorks,Radar signal processing; LiDAR SDK; Ethernet/IP stack,N/A
+Intrusion Detection System (Perimeter),Senstar/Magal,surveillance,Fiber optic/IP,railroad,Fence-mounted or buried sensor systems detecting unauthorized access to rail yards and critical infrastructure,Windows (management); proprietary firmware (sensors),Senstar Symphony; .NET; fiber optic sensing firmware,N/A
+License Plate Recognition (LPR),Genetec/Hikvision,surveillance,IP/ONVIF,highway,Camera systems reading vehicle plates for tolling enforcement and access control at transport facilities,Windows Server (Genetec); Linux (cameras),Genetec AutoVu; .NET; SQL Server; OpenCV; TensorFlow; ONVIF; OpenSSL,cpe:2.3:a:genetec:security_center:*:*:*:*:*:*:*:*
+Video Analytics Platform,BriefCam/Genetec,surveillance,IP/ONVIF,metro,AI-powered video analysis for abandoned object detection crowd density and behavior anomaly alerts,Windows Server,BriefCam VCA; .NET; SQL Server; CUDA/GPU drivers; deep learning frameworks; ONVIF,cpe:2.3:a:genetec:security_center:*:*:*:*:*:*:*:*
+Onboard CCTV Recorder,March Networks/Seon,surveillance,IP/802.11,metro,Vehicle-mounted video recording system with wireless offload at depots for security and incident review,Linux (hardened),FFmpeg; OpenSSL; BusyBox; SQLite; 802.11 drivers,N/A
+Platform Screen Doors (PSD),Faiveley/Knorr-Bremse,access-control,Profinet/Ethernet,metro,Automated barriers between platform and track synchronized with train door positions,Proprietary RTOS (safety-certified SIL),PROFINET stack; safety PLC firmware; C/C++ firmware,N/A
+Depot Access Control,HID Global/Gallagher,access-control,RFID/biometric/IP,railroad,Card reader and biometric systems controlling personnel entry to maintenance depots and control rooms,Windows Server (Gallagher Command Centre),Gallagher Command Centre; .NET; SQL Server; OSDP protocol; RFID/biometric SDKs; OpenSSL,cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
+Cyber-Physical Access Control (Rail Yards),Genetec/Honeywell,access-control,IP/Wiegand,freight,Integrated physical and cyber access management for critical rail yard infrastructure and server rooms,Windows Server,Genetec Security Center; Honeywell Pro-Watch; .NET; SQL Server; Wiegand/OSDP; OpenSSL,cpe:2.3:a:genetec:security_center:*:*:*:*:*:*:*:*
+Maritime AIS Transponder,Kongsberg/Saab,communications,VHF/TDMA,maritime,Automatic Identification System broadcasting vessel position speed and identity for collision avoidance,Proprietary embedded firmware,AIS/ITU-R M.1371 protocol; TDMA scheduling; GNSS receiver firmware,N/A
+Port Crane Control System,ABB/Siemens,power-systems,Profinet/Modbus,maritime,Automation and remote control systems for container and bulk cargo crane operations,Windows Embedded; proprietary PLC firmware,ABB AC500 PLC firmware; Siemens S7 PLC firmware; Profinet/Modbus TCP stack,N/A
+Vessel Traffic Service (VTS),Kongsberg/Wärtsilä,surveillance,Radar/AIS/VHF,maritime,Shore-based traffic monitoring and management system for port and waterway safety,Windows; Linux,AIS decoder; radar processing; VHF integration; .NET; PostgreSQL/Oracle,N/A
+Electronic Chart Display (ECDIS),Furuno/Kongsberg,fleet-management,IEC 61162/NMEA,maritime,Digital navigation system displaying electronic charts and integrating radar and AIS data,Windows (XP/7/10 Embedded),OpenSSL; Furuno chart engine; IEC 61174 libraries; NMEA 0183/2000 parsers,N/A
+Ship Security Alert System (SSAS),Cobham/Sailor,communications,Inmarsat/satellite,maritime,Covert distress alerting system transmitting vessel identity and position to flag state authorities,Proprietary embedded firmware,Inmarsat mini-C protocol; GMDSS messaging; LRIT; satellite transceiver firmware,N/A
+Port Terminal Operating System (TOS),Navis/Tideworks,fleet-management,IP/RFID,maritime,Container terminal management software coordinating vessel berth crane and yard operations,Linux (RHEL); Windows Server,Java (Navis N4); Oracle DB; React; Docker (Tideworks),cpe:2.3:a:kaleris:navis_n4:*:*:*:*:*:*:*:*
+Global Maritime Distress and Safety System (GMDSS),Furuno/JRC,communications,MF/HF/VHF/Inmarsat,maritime,Integrated maritime distress communication system using satellite and terrestrial radio networks,Proprietary embedded firmware,MF/HF/VHF DSC protocol; Inmarsat-C; NBDP/Telex; SDR firmware; NAVTEX decoder,N/A
+Ballast Water Management System,Alfa Laval/Wärtsilä,power-systems,Modbus/serial,maritime,Automated treatment and monitoring of ballast water to prevent invasive species transfer,Proprietary embedded RTOS,PLC firmware (Siemens/Allen-Bradley); Modbus RTU stack; PureBallast Connect,N/A
+Integrated Bridge System (IBS),Kongsberg/Wärtsilä,fleet-management,IEC 61162/NMEA 2000,maritime,Unified navigation workstation combining radar ECDIS conning and alarm management,Windows 7/10 Embedded,Kongsberg K-Bridge; Sensor Fusion libraries; IEC 61162 stack; OpenSSL,N/A
+Engine Room Automation System,Kongsberg/ABB,power-systems,Modbus/NMEA/CAN,maritime,SCADA monitoring and control of propulsion auxiliary engines and electrical power generation,Windows 7/10,Kongsberg K-Chief; ABB Ability Marine OCTOPUS; Modbus/NMEA/CAN bus stack,N/A
+Port SCADA for Utilities,Schneider/ABB,power-systems,DNP3/Modbus/IP,maritime,Supervisory control of port electrical water and fuel distribution infrastructure,Windows Server,Schneider EcoStruxure Power SCADA; ABB Symphony Plus; DNP3/Modbus; MS SQL Server/Oracle,cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:*
+Dynamic Message Sign (DMS),Daktronics/SWARCO,passenger-info,NTCIP/Ethernet,highway,Variable electronic signs displaying real-time traffic speed and incident messages,Proprietary firmware (VFC-3000); QNX (SWARCO),NTCIP 1203 stack; GoAhead web server; C/C++ firmware,N/A
+Ramp Metering Controller,Siemens/McCain,signaling,NTCIP/serial,highway,Traffic signal system regulating vehicle entry rates onto freeways to optimize flow,Linux (Siemens m60); OS-9 RTOS (McCain 2070),Siemens m60 Linux ATC; McCain 2070/170; NTCIP 1207; Caltrans TEES,N/A
+Traffic Management Center (TMC),Siemens/Iteris,fleet-management,NTCIP/IP,highway,Central operations facility monitoring and managing regional highway traffic conditions,Windows Server; Linux,Siemens TACTICS ATMS; MS SQL Server; NTCIP stack; .NET; Iteris ClearMobility,cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*
+Highway Advisory Radio (HAR),TAPCO/3M,passenger-info,AM 530/1610 kHz,highway,Low-power AM radio stations broadcasting traffic and incident information to motorists,Proprietary embedded RTOS,AM radio modulator; serial protocol drivers,N/A
+Traffic Signal Controller,Siemens/Econolite/McCain,signaling,NTCIP/serial/Ethernet,highway,Intersection signal controller managing phase timing vehicle detection and coordination,Linux (Siemens m60/Econolite Cobalt); OS-9 RTOS (McCain 2070),Econolite EOS; Siemens m60 ATC; McCain 2070LX; NTCIP 1202,cpe:2.3:a:econolite:eos:*:*:*:*:*:*:*:*
+Connected Vehicle Roadside Unit (RSU),Commsignia/Savari,communications,DSRC 5.9 GHz/C-V2X,highway,V2X communication unit at intersections broadcasting signal phase timing and safety messages,Linux (Qualcomm 9150 C-V2X),IEEE 802.11p DSRC stack; 3GPP C-V2X; SCMS security; SAE J2735/J2945,N/A
+Electronic Toll Collection (ETC),Kapsch/TransCore,ticketing,DSRC 5.8 GHz/RFID,highway,Automated toll collection using onboard transponders and overhead gantry readers,Proprietary embedded RTOS,DSRC 5.8 GHz stack; RFID middleware; OpenSSL; GNSS libraries,N/A
+Weigh-in-Motion (WIM),Kistler/IRD,track-monitoring,Piezo/strain gauge/IP,highway,Embedded road sensors measuring vehicle weight at highway speed for overweight enforcement,Windows (industrial PC),KiTraffic Digital/Plus; iSINC controller firmware; Lineas sensor DSP; REST API,N/A
+Road Weather Information System (RWIS),Vaisala/Campbell Scientific,track-monitoring,NTCIP/cellular,highway,Environmental sensors measuring pavement temperature precipitation and visibility for winter operations,Proprietary firmware (Vaisala DMU703; Campbell CR1000X),NTCIP stack; Vaisala Wx Horizon; CRBasic; PakBus protocol; Datex II,N/A
+Variable Speed Limit System,SWARCO/Siemens,signaling,NTCIP/Ethernet,highway,Dynamic speed limit signs adjusting posted speeds based on real-time traffic and weather conditions,Linux (Siemens m60); proprietary firmware (SWARCO ITC-3),SWARCO VRS 5000 TMS; NTCIP; Caltrans TEES 170,N/A
+Closed-Circuit Television (Highway),Axis/Pelco,surveillance,NTCIP/IP/ONVIF,highway,Traffic monitoring cameras providing live feeds to TMC operators for incident detection and verification,Linux (AXIS OS/Pelco Linux),ONVIF stack; NTCIP drivers; OpenSSL; lighttpd; FFmpeg; BusyBox,cpe:2.3:o:axis:axis_os:*:*:*:*:*:*:*:*
+Vehicle Detection System (Loops/Radar),Wavetronix/Sensys,track-monitoring,NTCIP/serial,highway,In-road or above-ground sensors counting vehicles and measuring speed occupancy and classification,Linux (Sensys FlexAP); proprietary firmware (Wavetronix),SmartSensor Manager; FMCW radar DSP; NTCIP stack; Modbus,N/A
+Airport Surface Detection Equipment (ASDE-X),Raytheon/Saab,surveillance,Radar/multilateration,aviation-ground,Ground surveillance system tracking aircraft and vehicles on airport surfaces to prevent runway incursions,UNIX/Linux (POSIX-based),ANSI C++; X-Windows; radar signal processing; multilateration fusion; ADS-B decoder,N/A
+Baggage Handling Control System,Siemens/Vanderlande,access-control,Profinet/OPC UA,aviation-ground,Automated sortation and tracking system for passenger luggage using PLCs and SCADA,Windows (SIMATIC WinCC); SIMATIC S7 RTOS,SIMATIC WinCC; STEP 7; OPC UA stack; PROFINET; .NET; SQL Server,cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*
+Airfield Lighting Control,ADB SAFEGATE/Honeywell,signaling,Serial/IP,aviation-ground,Centralized system controlling runway taxiway and approach lighting intensity and patterns,Linux (embedded); Windows Server (ALCMS),ADB SAFEGATE CORTEX ALCMS; ACE3 distributed control; Honeywell NAVITAS; L-890 FAA,N/A
+Airport Docking Guidance System,ADB SAFEGATE,signaling,IP/serial,aviation-ground,Visual guidance displays at gates directing pilots during final approach to parking position,Linux (embedded); Windows (management),ADB SAFEGATE Safedock X/FleX (A-VDGS); infrared laser/3D scanning; CORTEX Cloud,N/A
+Airport Access Control System,SITA/HID Global,access-control,RFID/biometric/IP,aviation-ground,Biometric and credential-based access management for secure areas of airport ground operations,Windows Server; Linux,Cisco ISE; .NET/Java; SQL Server/PostgreSQL; RFID/biometric SDKs; OSDP; OpenSSL,N/A
+Airside Vehicle Tracking,ADB SAFEGATE/Assaia,fleet-management,GPS/ADS-B/IP,aviation-ground,Real-time tracking of ground support equipment and vehicles on airport ramp and taxiways,Windows Server; Linux,Assaia ApronAI (Python/ML); PostgreSQL; SafeControl SAM platform; computer vision,N/A
+Airport Fuel Hydrant SCADA,Honeywell/Emerson,power-systems,Modbus/OPC UA,aviation-ground,Monitoring and control of underground fuel hydrant system including valve positions and flow rates,Windows Server,Honeywell Experion PKS; Emerson DeltaV; OPC UA/Modbus stack; MS SQL Server/Oracle,cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:*
+Industrial Ethernet Switches (Rail-Certified),Hirschmann/Moxa,network-infrastructure,Ethernet/PROFINET,railroad,Ruggedized managed switches with EN 50155 certification for onboard and wayside data networks,HiOS/HiEOS (Hirschmann); MIL Linux (Moxa),GoAhead web server; OpenSSL; SNMP stack; PROFINET/EtherNet-IP; RSTP/MRP,cpe:2.3:o:moxa:eds-408a_firmware:*:*:*:*:*:*:*:* | cpe:2.3:o:belden:hirschmann_firmware:*:*:*:*:*:*:*:*
+Railway Cybersecurity Gateway,Cylus/Cervello,network-infrastructure,IP/deep packet inspection,railroad,Network monitoring and anomaly detection appliance purpose-built for rail OT environments,Linux (hardened; duagon D527),CylusOne platform; deep packet inspection engine; OpenSSL; IEC 62443,N/A
+Operational Technology Firewall,Claroty/Nozomi Networks,network-infrastructure,IP/deep packet inspection,metro,Industrial firewall providing protocol-aware filtering and visibility for OT network segments,Linux (hardened N2OS for Nozomi),Nozomi Guardian; Claroty xDome; DPI engine; 500+ industrial protocol parsers; OpenSSL; PostgreSQL,cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*
+Data Diode (Unidirectional Gateway),Waterfall Security/Owl Cyber Defense,network-infrastructure,Hardware-enforced unidirectional,railroad,One-way data transfer device ensuring physical isolation of safety-critical networks from IT systems,Linux (hardened CIS-benchmarked),OPDS-Talon; proprietary segmentation/reassembly ASIC; OPC UA/Modbus replicators; OpenSSL,N/A
+Onboard Train Control Network,Duagon/Moxa,network-infrastructure,TCN/Ethernet (IEC 61375),railroad,Standardized consist and train-level communication backbone connecting onboard subsystems,VxWorks/QNX/Linux (dual-OS capable),IEC 61375 TCN stack; TRDP protocol; PikeOS/GreenHills Integrity; Moxa Industrial Linux,N/A
+Wayside Communication Network,Cisco/Nokia,network-infrastructure,MPLS/IP/fiber,railroad,Fiber-optic backbone along rail corridors connecting wayside equipment to central control systems,Cisco IOS-XR; Nokia SR OS,MPLS/RSVP-TE stack; BGP; SNMP; OpenSSL; OSPF/IS-IS; segment routing,cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:* | cpe:2.3:o:nokia:service_router_operating_system:*:*:*:*:*:*:*:*
+Safety PLC (SIL4),Siemens/HIMA/Pilz,signaling,PROFINET/ProfiSafe,railroad,Safety integrity level 4 programmable logic controllers used in vital signaling and interlocking applications,ADONIS RTOS (Siemens S7-1500F); proprietary safety RTOS (HIMA/Pilz),STEP 7 Safety; PROFINET/ProfiSafe; HIMA HIMax/HIMatrix; Pilz PAS4000; IEC 61508,cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*
+Remote Diagnostics Platform (PHM),Siemens Railigent/Alstom HealthHub,fleet-management,IP/MQTT/cellular,railroad,Predictive health monitoring platform aggregating sensor data from fleet for condition-based maintenance,Cloud (Azure MindSphere / AWS),Siemens MindSphere; Alstom HealthHub; MQTT broker; Apache Kafka; Python analytics,N/A
+Digital Twin Platform (Rail),Siemens/Bentley Systems,fleet-management,IP/OPC UA,railroad,Virtual replica of physical rail infrastructure enabling simulation planning and predictive analysis,Cloud (Microsoft Azure),Bentley iTwin (iModel.js/.NET); Siemens MindSphere; OPC UA stack; Azure IoT Hub,N/A
+Yard Automation System,Wabtec/Alstom,fleet-management,Radio/IP,freight,Automated hump yard classification system controlling retarders switches and car routing,Windows Server; Linux,Java; Oracle DB; cloud-native containers; radio communication stack,N/A

package/dist/templates/knowledge/transport-ot.knowledge.yaml

@@ -0,0 +1,55 @@
+name: transport-ot
+description: ICS/SCADA/IoT systems inventory with tech stack and CPE identifiers for CVE cross-referencing across railroad, transit, and transportation sectors
+
+source:
+  type: file
+  path: knowledge/transport-ot/systems.csv
+
+loader:
+  type: csv
+
+splitter:
+  type: character
+  chunkSize: 800
+  chunkOverlap: 0
+
+embedding: default
+
+search:
+  defaultK: 8
+
+graph:
+  directMapping:
+    entities:
+      - type: System
+        idColumn: system_name
+        nameColumn: system_name
+        properties: [vendor, protocol, sector, description, os_firmware, known_software, cpe_id]
+      - type: Vendor
+        idColumn: vendor
+        nameColumn: vendor
+        properties: []
+      - type: Category
+        idColumn: category
+        nameColumn: category
+        properties: []
+      - type: Sector
+        idColumn: sector
+        nameColumn: sector
+        properties: []
+    relationships:
+      - type: MADE_BY
+        source: System
+        target: Vendor
+        sourceIdColumn: system_name
+        targetIdColumn: vendor
+      - type: BELONGS_TO_CATEGORY
+        source: System
+        target: Category
+        sourceIdColumn: system_name
+        targetIdColumn: category
+      - type: USED_IN
+        source: System
+        target: Sector
+        sourceIdColumn: system_name
+        targetIdColumn: sector

package/dist/templates/knowledge/web-docs.knowledge.yaml

@@ -7,7 +7,7 @@ source:
   selector: ".mw-parser-output"
 
 loader:
-  type: text
+  type: html
 
 splitter:
   type: recursive

package/dist/templates/llm.json

@@ -1,44 +1,84 @@
 {
   "version": "1.0",
   "models": {
-    "default": {
-      "provider": "openai",
+    "default": "llama-cpp",
+    "mlx-serve": {
+      "provider": "local",
+      "engine": "mlx-serve",
+      "model": "Qwen3.5-4B-4bit",
+      "contextSize": 32768,
+      "reasoningBudget": 0
+    },
+    "llama-cpp": {
+      "provider": "local",
+      "engine": "llama-cpp",
+      "model": "Qwen3.5-4B-IQ4_NL",
+      "contextSize": 32768,
+      "reasoningBudget": 0
+    },
+    "lmstudio": {
+      "provider": "local",
+      "engine": "lmstudio",
       "baseUrl": "http://localhost:1234/v1",
-      "apiKey": "not-needed",
-      "model": "your-model-name",
-      "temperature": 0.7
+      "model": "qwen3.5-9b",
+      "reasoningBudget": 0
+    },
+    "ollama": {
+      "provider": "local",
+      "engine": "ollama",
+      "baseUrl": "http://localhost:11434/v1",
+      "model": "qwen3.5:latest",
+      "reasoningBudget": 0
     },
     "openai": {
       "provider": "openai",
-      "apiKey": "sk-your-openai-key-here",
-      "model": "gpt-4o",
-      "temperature": 0.7
+      "apiKey": "${OPENAI_API_KEY}",
+      "model": "gpt-5.4"
+    },
+    "anthropic": {
+      "provider": "anthropic",
+      "apiKey": "${ANTHROPIC_API_KEY}",
+      "model": "claude-sonnet-4-6"
     },
     "gemini": {
       "provider": "gemini",
-      "apiKey": "your-gemini-api-key-here",
-      "model": "gemini-2.5-flash",
-      "temperature": 0.7
+      "apiKey": "${GOOGLE_API_KEY}",
+      "model": "gemini-3.1-pro-preview"
     }
   },
   "embeddings": {
-    "default": {
-      "provider": "openai",
-      "baseUrl": "http://localhost:1234/v1",
-      "apiKey": "not-needed",
-      "model": "text-embedding-nomic-embed-text-v1.5",
-      "eosToken": " "
+    "default": "llama-cpp",
+    "llama-cpp": {
+      "provider": "local",
+      "engine": "llama-cpp",
+      "model": "nomic-embed-text-v1.5.Q4_K_M"
+    },
+    "mlx-serve": {
+      "provider": "local",
+      "engine": "mlx-serve",
+      "model": "all-MiniLM-L6-v2-4bit"
+    },
+    "lmstudio": {
+      "provider": "local",
+      "engine": "lmstudio",
+      "baseUrl": "http://192.168.2.61:1234/v1",
+      "model": "nomic-ai/text-embedding-nomic-embed-text-v1.5"
+    },
+    "ollama": {
+      "provider": "local",
+      "engine": "ollama",
+      "baseUrl": "http://localhost:11434/v1",
+      "model": "nomic-embed-text:v1.5"
     },
     "openai": {
       "provider": "openai",
-      "apiKey": "sk-your-openai-key-here",
-      "model": "text-embedding-3-small",
-      "dimensions": 1536
+      "apiKey": "${OPENAI_API_KEY}",
+      "model": "text-embedding-3-small"
     },
     "gemini": {
       "provider": "gemini",
-      "apiKey": "your-gemini-api-key-here",
+      "apiKey": "${GOOGLE_API_KEY}",
       "model": "gemini-embedding-001"
     }
   }
-}
+}

package/dist/templates/mcp.json

@@ -4,12 +4,15 @@
     "fetch": {
       "transport": "streamable-http",
       "url": "https://remote.mcpservers.org/fetch/mcp",
-      "description": "Web fetch capabilities for retrieving URLs and returning markdown",
-      "timeout": 30000,
-      "enabled": true
+      "description": "Web fetch capabilities for retrieving URLs and returning markdown"
     },
     "htmlhost": {
       "url": "https://htmlhost.jax.workers.dev/mcp"
+    },
+    "isac-reports": {
+      "transport": "streamable-http",
+      "url": "https://security.deploy.dalcu.com/mcp",
+      "description": "OSINT threat intelligence aggregator — CVEs, advisories, malware"
     }
   },
   "globalOptions": {
@@ -18,4 +21,4 @@
     "additionalToolNamePrefix": "",
     "defaultToolTimeout": 30000
   }
-}
+}