agent-threat-rules 0.4.0 → 1.0.0

package/dist/flywheel.js

@@ -1,121 +0,0 @@
-/**
- * Flywheel Manager -- automates the threat detection → rule generation → promotion cycle.
- *
- * Flow:
- * 1. Tier 4 (LLM) detects novel threat → auto-scaffold rule
- * 2. Rule enters shadow mode → ShadowEvaluator tracks FP rate
- * 3. FP < threshold after N evaluations → auto-promote to stable
- * 4. Promoted rule distributes to all users via Threat Cloud
- *
- * Machine speed, not human speed. No manual proposals or voting required.
- *
- * @module agent-threat-rules/flywheel
- */
-import { RuleScaffolder } from './rule-scaffolder.js';
-import { ShadowEvaluator } from './shadow-evaluator.js';
-export class FlywheelManager {
-    scaffolder;
-    shadow;
-    config;
-    existingIds = new Set();
-    constructor(config = {}) {
-        this.scaffolder = new RuleScaffolder({ author: 'ATR Flywheel (auto-generated)' });
-        this.shadow = new ShadowEvaluator();
-        this.config = {
-            maxFPRate: config.maxFPRate ?? 0.001,
-            minEvaluations: config.minEvaluations ?? 1000,
-            onPromote: config.onPromote ?? (() => { }),
-            onShadowRule: config.onShadowRule ?? (() => { }),
-        };
-    }
-    /**
-     * Called when Tier 4 (LLM semantic) detects a novel threat.
-     * Auto-generates a shadow rule from the detection.
-     */
-    async onTier4Detection(match, event) {
-        // Only generate from high-confidence Tier 4 matches
-        if (match.confidence < 0.7)
-            return null;
-        // Extract category and severity from the match
-        const category = match.rule.tags?.category ?? 'prompt-injection';
-        const severity = match.rule.severity ?? 'medium';
-        // Build example payloads from ATTACK PATTERNS, not just raw content.
-        // Priority: matched patterns > event fields > event content
-        const payloads = [];
-        // 1. Matched patterns from the Tier 4 detection — these ARE the attack signals
-        if (match.matchedPatterns.length > 0) {
-            payloads.push(...match.matchedPatterns.filter((p) => p.length > 5));
-        }
-        // 2. Event fields (tool_args, tool_response, etc.) — more specific than content
-        if (event.fields) {
-            for (const value of Object.values(event.fields)) {
-                if (value && value.length > 10) {
-                    payloads.push(value.slice(0, 500));
-                }
-            }
-        }
-        // 3. Event content as fallback — but only if we don't have better signals
-        if (payloads.length === 0 && event.content) {
-            payloads.push(event.content.slice(0, 500));
-        }
-        // Ensure at least one payload
-        if (payloads.length === 0) {
-            payloads.push(match.rule.description ?? match.rule.title);
-        }
-        const input = {
-            title: `Auto: ${match.rule.description?.slice(0, 60) ?? match.rule.title}`,
-            category: category,
-            severity: severity,
-            attackDescription: match.rule.description ?? match.matchedPatterns.join('; '),
-            examplePayloads: payloads,
-        };
-        try {
-            const result = this.scaffolder.scaffold(input, this.existingIds);
-            const ruleYaml = result.yaml;
-            // Parse back to ATRRule object
-            const { default: yaml } = await import('js-yaml');
-            const rule = yaml.load(ruleYaml);
-            rule.status = 'experimental';
-            this.existingIds.add(result.id);
-            this.shadow.addRule(rule);
-            await this.config.onShadowRule(rule);
-            return rule;
-        }
-        catch {
-            return null;
-        }
-    }
-    /**
-     * Called for every event -- runs shadow evaluation.
-     * Returns shadow matches (for logging only, not verdict).
-     */
-    evaluateShadow(event) {
-        return this.shadow.evaluate(event);
-    }
-    /** Record user feedback on a shadow match */
-    recordFeedback(ruleId, isTruePositive) {
-        this.shadow.recordFeedback(ruleId, isTruePositive);
-    }
-    /**
-     * Check for rules ready to promote and execute promotion.
-     * Call periodically (e.g., every 15 minutes).
-     */
-    async promoteReady() {
-        const candidates = this.shadow.getPromotionCandidates(this.config.maxFPRate, this.config.minEvaluations);
-        for (const candidate of candidates) {
-            // Promote: change status from experimental to stable
-            const promoted = { ...candidate.rule, status: 'stable' };
-            await this.config.onPromote(promoted, candidate.stats);
-        }
-        return candidates;
-    }
-    /** Get shadow evaluator stats */
-    getShadowStats() {
-        return this.shadow.getAllStats();
-    }
-    /** Number of rules in shadow mode */
-    shadowRuleCount() {
-        return this.shadow.size();
-    }
-}
-//# sourceMappingURL=flywheel.js.map

package/dist/flywheel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"flywheel.js","sourceRoot":"","sources":["../src/flywheel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,cAAc,EAAsB,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAA2B,MAAM,uBAAuB,CAAC;AAajF,MAAM,OAAO,eAAe;IACT,UAAU,CAAiB;IAC3B,MAAM,CAAkB;IACxB,MAAM,CAA2B;IACjC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjD,YAAY,SAAyB,EAAE;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;YACpC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;SAChD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAe,EAAE,KAAiB;QACvD,oDAAoD;QACpD,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAExC,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,kBAAkB,CAAC;QACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAEjD,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,+EAA+E;QAC/E,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,gFAAgF;QAChF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAkB;YAC3B,KAAK,EAAE,SAAS,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE;YAC1E,QAAQ,EAAE,QAAqC;YAC/C,QAAQ,EAAE,QAAqC;YAC/C,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7E,eAAe,EAAE,QAAQ;SAC1B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;YAE7B,+BAA+B;YAC/B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAY,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;YAE7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE1B,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAErC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,KAAiB;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,6CAA6C;IAC7C,cAAc,CAAC,MAAc,EAAE,cAAuB;QACpD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EACrB,IAAI,CAAC,MAAM,CAAC,cAAc,CAC3B,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,qDAAqD;YACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;YAClE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,qCAAqC;IACrC,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/hook-handler.d.ts

@@ -1,61 +0,0 @@
-/**
- * Hook Handler - Bridges Claude Code hooks to the ATR engine.
- *
- * Converts HookInput (PreToolUse/PostToolUse) into AgentEvents,
- * evaluates them, and returns HookOutput for the agent host.
- *
- * Supports a stdio JSON-lines loop for use as a Claude Code hook process.
- *
- * CRITICAL: Fail-open on all errors -- default to "allow" so a
- * bug in the guard never blocks legitimate agent operations.
- *
- * @module agent-threat-rules/hook-handler
- */
-import type { HookInput, HookOutput } from './types.js';
-import type { ATREngine } from './engine.js';
-import type { ActionExecutor } from './action-executor.js';
-export interface HookHandlerConfig {
-    readonly engine: ATREngine;
-    readonly executor: ActionExecutor;
-    readonly timeoutMs?: number;
-    readonly failOpen?: boolean;
-}
-export declare class HookHandler {
-    private readonly engine;
-    private readonly executor;
-    private readonly timeoutMs;
-    private readonly failOpen;
-    constructor(config: HookHandlerConfig);
-    /**
-     * Handle a PreToolUse hook event.
-     * Converts input to an AgentEvent, evaluates, and returns a HookOutput.
-     */
-    handlePreToolUse(input: HookInput): Promise<HookOutput>;
-    /**
-     * Handle a PostToolUse hook event.
-     * Scans the tool output for threats.
-     */
-    handlePostToolUse(input: HookInput): Promise<HookOutput>;
-    /**
-     * Start a stdio JSON-lines loop.
-     *
-     * Reads one JSON object per line from stdin, dispatches to the
-     * appropriate handler, and writes one JSON line to stdout.
-     *
-     * Exits cleanly when stdin closes.
-     */
-    startStdioLoop(): Promise<void>;
-    /**
-     * Dispatch a HookInput to the appropriate handler.
-     */
-    private dispatch;
-    /**
-     * Evaluate an event with timeout and convert the verdict to HookOutput.
-     */
-    private evaluateAndRespond;
-    /**
-     * Handle errors with fail-open or fail-closed behavior.
-     */
-    private handleError;
-}
-//# sourceMappingURL=hook-handler.d.ts.map

package/dist/hook-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-handler.d.ts","sourceRoot":"","sources":["../src/hook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAEV,SAAS,EACT,UAAU,EAEX,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAmED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;gBAEvB,MAAM,EAAE,iBAAiB;IAOrC;;;OAGG;IACG,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAS7D;;;OAGG;IACG,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAS9D;;;;;;;OAOG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBrC;;OAEG;YACW,QAAQ;IAWtB;;OAEG;YACW,kBAAkB;IAoBhC;;OAEG;IACH,OAAO,CAAC,WAAW;CAapB"}

package/dist/hook-handler.js

@@ -1,178 +0,0 @@
-/**
- * Hook Handler - Bridges Claude Code hooks to the ATR engine.
- *
- * Converts HookInput (PreToolUse/PostToolUse) into AgentEvents,
- * evaluates them, and returns HookOutput for the agent host.
- *
- * Supports a stdio JSON-lines loop for use as a Claude Code hook process.
- *
- * CRITICAL: Fail-open on all errors -- default to "allow" so a
- * bug in the guard never blocks legitimate agent operations.
- *
- * @module agent-threat-rules/hook-handler
- */
-import { createInterface } from 'node:readline';
-/** Default evaluation timeout in milliseconds */
-const DEFAULT_TIMEOUT_MS = 5_000;
-/**
- * Create an "allow" hook output, used as the safe default.
- */
-function allowOutput(reason) {
-    return Object.freeze({
-        decision: 'allow',
-        reason: reason ?? 'No threat detected.',
-    });
-}
-/**
- * Convert a HookInput into an AgentEvent for engine evaluation.
- */
-function hookInputToEvent(input) {
-    const isPreTool = input.hook === 'PreToolUse';
-    const type = isPreTool ? 'tool_call' : 'tool_response';
-    const toolInput = input.tool_input ?? {};
-    const content = typeof toolInput['content'] === 'string'
-        ? toolInput['content']
-        : JSON.stringify(toolInput);
-    const fields = {
-        tool_name: input.tool_name ?? '',
-        tool_args: JSON.stringify(toolInput),
-        content,
-    };
-    // For PostToolUse, include output/response if present
-    if (!isPreTool) {
-        const output = toolInput['output'] ?? toolInput['response'];
-        if (typeof output === 'string') {
-            fields['tool_response'] = output;
-        }
-    }
-    return Object.freeze({
-        type,
-        timestamp: input.timestamp ?? new Date().toISOString(),
-        content,
-        fields: Object.freeze(fields),
-        sessionId: input.session_id,
-    });
-}
-/**
- * Run a promise with a timeout. Resolves to the promise result
- * or rejects with a timeout error.
- */
-function withTimeout(promise, ms) {
-    return new Promise((resolve, reject) => {
-        const timer = setTimeout(() => {
-            reject(new Error(`Evaluation timed out after ${ms}ms`));
-        }, ms);
-        promise.then((value) => { clearTimeout(timer); resolve(value); }, (err) => { clearTimeout(timer); reject(err); });
-    });
-}
-export class HookHandler {
-    engine;
-    executor;
-    timeoutMs;
-    failOpen;
-    constructor(config) {
-        this.engine = config.engine;
-        this.executor = config.executor;
-        this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-        this.failOpen = config.failOpen ?? true;
-    }
-    /**
-     * Handle a PreToolUse hook event.
-     * Converts input to an AgentEvent, evaluates, and returns a HookOutput.
-     */
-    async handlePreToolUse(input) {
-        try {
-            const event = hookInputToEvent(input);
-            return await this.evaluateAndRespond(event);
-        }
-        catch (err) {
-            return this.handleError(err);
-        }
-    }
-    /**
-     * Handle a PostToolUse hook event.
-     * Scans the tool output for threats.
-     */
-    async handlePostToolUse(input) {
-        try {
-            const event = hookInputToEvent(input);
-            return await this.evaluateAndRespond(event);
-        }
-        catch (err) {
-            return this.handleError(err);
-        }
-    }
-    /**
-     * Start a stdio JSON-lines loop.
-     *
-     * Reads one JSON object per line from stdin, dispatches to the
-     * appropriate handler, and writes one JSON line to stdout.
-     *
-     * Exits cleanly when stdin closes.
-     */
-    async startStdioLoop() {
-        const rl = createInterface({
-            input: process.stdin,
-            crlfDelay: Infinity,
-        });
-        for await (const line of rl) {
-            const trimmed = line.trim();
-            if (!trimmed)
-                continue;
-            let output;
-            try {
-                const input = JSON.parse(trimmed);
-                output = await this.dispatch(input);
-            }
-            catch (err) {
-                output = this.handleError(err);
-            }
-            process.stdout.write(JSON.stringify(output) + '\n');
-        }
-    }
-    /**
-     * Dispatch a HookInput to the appropriate handler.
-     */
-    async dispatch(input) {
-        switch (input.hook) {
-            case 'PreToolUse':
-                return this.handlePreToolUse(input);
-            case 'PostToolUse':
-                return this.handlePostToolUse(input);
-            default:
-                return allowOutput(`Unknown hook type: ${String(input.hook)}`);
-        }
-    }
-    /**
-     * Evaluate an event with timeout and convert the verdict to HookOutput.
-     */
-    async evaluateAndRespond(event) {
-        const { verdict } = await withTimeout(this.engine.evaluateWithVerdict(event, this.executor), this.timeoutMs);
-        const matchedRules = verdict.matches.map((m) => m.rule.id);
-        return Object.freeze({
-            decision: verdict.outcome,
-            reason: verdict.reason,
-            message: verdict.outcome === 'deny'
-                ? `Blocked: ${verdict.reason}`
-                : undefined,
-            matched_rules: matchedRules.length > 0
-                ? Object.freeze(matchedRules)
-                : undefined,
-        });
-    }
-    /**
-     * Handle errors with fail-open or fail-closed behavior.
-     */
-    handleError(err) {
-        const message = err instanceof Error ? err.message : String(err);
-        process.stderr.write(`[atr-guard] Error: ${message}\n`);
-        if (this.failOpen) {
-            return allowOutput(`Guard error (fail-open): ${message}`);
-        }
-        return Object.freeze({
-            decision: 'deny',
-            reason: `Guard error (fail-closed): ${message}`,
-        });
-    }
-}
-//# sourceMappingURL=hook-handler.js.map

package/dist/hook-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-handler.js","sourceRoot":"","sources":["../src/hook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAUhD,iDAAiD;AACjD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AASjC;;GAEG;AACH,SAAS,WAAW,CAAC,MAAe;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAyB;QACnC,MAAM,EAAE,MAAM,IAAI,qBAAqB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAgB;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;IAEvD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;QACtD,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAE9B,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;QAChC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,OAAO;KACR,CAAC;IAEF,sDAAsD;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtD,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,UAAU;KAC5B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,OAAmB,EACnB,EAAU;IAEV,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,CAAC,GAAG,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,WAAW;IACL,MAAM,CAAY;IAClB,QAAQ,CAAiB;IACzB,SAAS,CAAS;IAClB,QAAQ,CAAU;IAEnC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAgB;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,eAAe,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,MAAkB,CAAC;YAEvB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;gBAC/C,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CAAC,KAAgB;QACrC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACvC;gBACE,OAAO,WAAW,CAAC,sBAAsB,MAAM,CAAE,KAA4C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,KAAiB;QAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CACnC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,EACrD,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,OAAO,CAAC,OAAO;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,MAAM;gBACjC,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE;gBAC9B,CAAC,CAAC,SAAS;YACb,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7B,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAY;QAC9B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAExD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,WAAW,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAwB;YAClC,MAAM,EAAE,8BAA8B,OAAO,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,62 +0,0 @@
-/**
- * ATR (Agent Threat Rules) - Detection format for AI Agent threats
- *
- * ATR is the detection layer: it evaluates agent events against rules
- * and returns match results. It does NOT execute response actions,
- * send notifications, or manage dashboards. Those are the responsibility
- * of products built on ATR (e.g., LlamaFirewall, or your own).
- *
- * ATR 是偵測層：評估 agent 事件、回傳匹配結果。
- * 不執行回應動作、不發通知、不管 dashboard。
- * 那些是建立在 ATR 之上的產品的責任。
- *
- * @module agent-threat-rules
- */
-export { ATREngine } from './engine.js';
-export type { ATREngineConfig } from './engine.js';
-export { loadRuleFile, loadRulesFromDirectory, validateRule } from './loader.js';
-export { SessionTracker } from './session-tracker.js';
-export type { SessionStateSnapshot } from './session-tracker.js';
-export { InvariantChecker } from './tier0-invariant.js';
-export type { SkillManifest, InvariantViolation, InvariantViolationType } from './tier0-invariant.js';
-export { InMemoryBlacklist, buildBlacklistMatch } from './tier1-blacklist.js';
-export type { BlacklistProvider, BlacklistEntry } from './tier1-blacklist.js';
-export { extractCapabilities } from './capability-extractor.js';
-export type { ExtractedCapabilities } from './capability-extractor.js';
-export { EmbeddingModule } from './modules/embedding.js';
-export type { EmbeddingModuleConfig } from './modules/embedding.js';
-export { VectorStore, loadVectorEntries } from './embedding/vector-store.js';
-export type { VectorEntry, SearchResult } from './embedding/vector-store.js';
-export { TransformersJSModel, MockEmbeddingModel } from './embedding/model-loader.js';
-export type { EmbeddingModel } from './embedding/model-loader.js';
-export { ModuleRegistry } from './modules/index.js';
-export type { ATRModule, ModuleCondition, ModuleResult } from './modules/index.js';
-export { SessionModule } from './modules/session.js';
-/** @beta - Experimental, not production-tested */
-export { SemanticModule } from './modules/semantic.js';
-export type { SemanticModuleConfig } from './modules/semantic.js';
-/** @beta - Experimental, not production-tested */
-export { SkillFingerprintStore } from './skill-fingerprint.js';
-export type { SkillFingerprint, BehaviorAnomaly, SkillFingerprintConfig, } from './skill-fingerprint.js';
-export type { SemanticLayerConfig } from './layer-integration.js';
-export { RuleScaffolder } from './rule-scaffolder.js';
-export type { ScaffoldInput, ScaffoldResult, ScaffoldOptions } from './rule-scaffolder.js';
-export { CoverageAnalyzer } from './coverage-analyzer.js';
-export type { CoverageGap, CoverageReport } from './coverage-analyzer.js';
-export { convertRule, convertAllRules } from './converters/index.js';
-export type { ConvertedQuery, SIEMFormat } from './converters/index.js';
-export { ruleToSPL } from './converters/splunk.js';
-export { ruleToElastic } from './converters/elastic.js';
-export { ShadowEvaluator } from './shadow-evaluator.js';
-export type { PromotionCandidate } from './shadow-evaluator.js';
-export { FlywheelManager } from './flywheel.js';
-export type { FlywheelConfig } from './flywheel.js';
-export { computeVerdict, SEVERITY_RANK, isAutoResponseEnabled } from './verdict.js';
-export { ActionExecutor } from './action-executor.js';
-export type { ActionExecutorConfig } from './action-executor.js';
-export { DefaultAdapter } from './adapters/default-adapter.js';
-export { StdioAdapter } from './adapters/stdio-adapter.js';
-export { HookHandler } from './hook-handler.js';
-export type { HookHandlerConfig } from './hook-handler.js';
-export type { ATRRule, ATRMatch, AgentEvent, AgentEventType, ATRAction, ATRCategory, ATRSeverity, ATRStatus, ATRConfidence, ATRSourceType, ATRMatchType, ATROperator, ATRReferences, ATRTags, ATRAgentSource, ATRDetection, ATRResponse, ATRTestCases, ATRTestCase, ATRPatternCondition, ATRBehavioralCondition, ATRSequenceCondition, ATRSequenceStep, VerdictOutcome, ATRVerdict, ActionResult, ExecutionContext, PlatformAdapter, HookInput, HookOutput, } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAGtG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,YAAY,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAGvE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC7E,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtF,YAAY,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,kDAAkD;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,kDAAkD;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG1E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EACV,OAAO,EACP,QAAQ,EACR,UAAU,EACV,cAAc,EACd,SAAS,EACT,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,cAAc,EACd,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,54 +0,0 @@
-/**
- * ATR (Agent Threat Rules) - Detection format for AI Agent threats
- *
- * ATR is the detection layer: it evaluates agent events against rules
- * and returns match results. It does NOT execute response actions,
- * send notifications, or manage dashboards. Those are the responsibility
- * of products built on ATR (e.g., LlamaFirewall, or your own).
- *
- * ATR 是偵測層：評估 agent 事件、回傳匹配結果。
- * 不執行回應動作、不發通知、不管 dashboard。
- * 那些是建立在 ATR 之上的產品的責任。
- *
- * @module agent-threat-rules
- */
-// ── Core Detection Layer (stable API) ───────────────────────────
-export { ATREngine } from './engine.js';
-export { loadRuleFile, loadRulesFromDirectory, validateRule } from './loader.js';
-export { SessionTracker } from './session-tracker.js';
-// ── Tier 0: Invariant Enforcement (hard boundaries) ──────────────
-export { InvariantChecker } from './tier0-invariant.js';
-// ── Tier 1: Blacklist Provider (known-bad lookup) ────────────────
-export { InMemoryBlacklist, buildBlacklistMatch } from './tier1-blacklist.js';
-// ── Shared Capability Extraction ─────────────────────────────────
-export { extractCapabilities } from './capability-extractor.js';
-// ── Tier 2.5: Embedding Similarity ───────────────────────────────
-export { EmbeddingModule } from './modules/embedding.js';
-export { VectorStore, loadVectorEntries } from './embedding/vector-store.js';
-export { TransformersJSModel, MockEmbeddingModel } from './embedding/model-loader.js';
-// ── Optional Detection Modules (Layer 2-3, beta) ────────────────
-export { ModuleRegistry } from './modules/index.js';
-export { SessionModule } from './modules/session.js';
-/** @beta - Experimental, not production-tested */
-export { SemanticModule } from './modules/semantic.js';
-/** @beta - Experimental, not production-tested */
-export { SkillFingerprintStore } from './skill-fingerprint.js';
-// ── Tooling (rule authoring and coverage analysis) ──────────────
-export { RuleScaffolder } from './rule-scaffolder.js';
-export { CoverageAnalyzer } from './coverage-analyzer.js';
-// ── SIEM Converters (Splunk SPL, Elasticsearch Query DSL) ────────
-export { convertRule, convertAllRules } from './converters/index.js';
-export { ruleToSPL } from './converters/splunk.js';
-export { ruleToElastic } from './converters/elastic.js';
-// ── Flywheel (auto rule generation + shadow + promotion) ─────────
-export { ShadowEvaluator } from './shadow-evaluator.js';
-export { FlywheelManager } from './flywheel.js';
-// ── Integration Helpers (for products built on ATR) ─────────────
-// These help products like LlamaFirewall, etc. build
-// protection layers on top of ATR detection results.
-export { computeVerdict, SEVERITY_RANK, isAutoResponseEnabled } from './verdict.js';
-export { ActionExecutor } from './action-executor.js';
-export { DefaultAdapter } from './adapters/default-adapter.js';
-export { StdioAdapter } from './adapters/stdio-adapter.js';
-export { HookHandler } from './hook-handler.js';
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mEAAmE;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,oEAAoE;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,oEAAoE;AACpE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG9E,oEAAoE;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGhE,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAE7E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGtF,mEAAmE;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,kDAAkD;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,kDAAkD;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAQ/D,mEAAmE;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,oEAAoE;AACpE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,mEAAmE;AACnE,qDAAqD;AACrD,qDAAqD;AACrD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/layer-integration.d.ts

@@ -1,55 +0,0 @@
-/**
- * Layer Integration Helpers
- *
- * Bridges the ATREngine (Layer 1 regex) with:
- * - SkillFingerprintStore (Layer 2 behavioral fingerprinting)
- * - SemanticModule (Layer 3 LLM-as-judge)
- *
- * Extracted from engine.ts to keep file sizes manageable.
- *
- * @module agent-threat-rules/layer-integration
- */
-import type { AgentEvent, ATRMatch } from './types.js';
-import type { SkillFingerprintStore } from './skill-fingerprint.js';
-import type { SemanticModule, SemanticModuleConfig } from './modules/semantic.js';
-/** Configuration for Layer 3 semantic analysis */
-export interface SemanticLayerConfig {
-    /** OpenAI-compatible API key */
-    readonly apiKey: string;
-    /** API base URL (default: https://api.openai.com) */
-    readonly baseUrl?: string;
-    /** Model identifier (default: gpt-4o-mini) */
-    readonly model?: string;
-}
-/**
- * Resolve the skill identifier from an agent event.
- * Returns undefined if no skill identifier is present.
- */
-export declare function resolveSkillId(event: AgentEvent): string | undefined;
-/**
- * Run Layer 2 fingerprint analysis on an event.
- * Returns additional ATRMatch entries for any detected anomalies.
- */
-export declare function runFingerprintLayer(store: SkillFingerprintStore, event: AgentEvent, skillId: string): readonly ATRMatch[];
-/**
- * Determine whether Layer 3 semantic analysis should run.
- *
- * Triggers when:
- * - Any Layer 1/2 match has medium or higher severity
- * - The event explicitly requests deep analysis via metadata
- */
-export declare function shouldRunSemanticLayer(layer1Matches: readonly ATRMatch[], event: AgentEvent): boolean;
-/**
- * Create a SemanticModule instance from simplified config.
- * Returns undefined if the semantic module cannot be imported.
- */
-export declare function createSemanticModuleFromConfig(config: SemanticLayerConfig): SemanticModuleConfig;
-/**
- * Run Layer 3 semantic analysis and return upgraded/new matches.
- *
- * The semantic module is called with `analyze_threat` to get a threat score.
- * If the score is >= 0.7, a synthetic high-severity match is produced.
- * If the score is 0.4-0.7, existing matches may have confidence boosted.
- */
-export declare function runSemanticLayer(semanticModule: SemanticModule, event: AgentEvent, existingMatches: readonly ATRMatch[]): Promise<readonly ATRMatch[]>;
-//# sourceMappingURL=layer-integration.d.ts.map

package/dist/layer-integration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"layer-integration.d.ts","sourceRoot":"","sources":["../src/layer-integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAwB,MAAM,YAAY,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAmB,MAAM,wBAAwB,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAMlF,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAcD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAYpE;AA+BD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,MAAM,GACd,SAAS,QAAQ,EAAE,CA0BrB;AAaD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,SAAS,QAAQ,EAAE,EAClC,KAAK,EAAE,UAAU,GAChB,OAAO,CAcT;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,GAC1B,oBAAoB,CAMtB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,cAAc,EAAE,cAAc,EAC9B,KAAK,EAAE,UAAU,EACjB,eAAe,EAAE,SAAS,QAAQ,EAAE,GACnC,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAkD9B"}