agent-threat-rules 0.4.0 → 1.0.0

package/dist/modules/embedding.js

@@ -1,141 +0,0 @@
-/**
- * Embedding Module -- Tier 2.5 semantic similarity detection.
- *
- * Compares incoming text against pre-computed attack embeddings using
- * cosine similarity. Catches paraphrases, multilingual attacks, and
- * semantic variants that regex cannot detect.
- *
- * Uses all-MiniLM-L6-v2 (384 dimensions, ~22MB, runs locally in JS/WASM).
- * No API calls. Optional dependency: @xenova/transformers.
- *
- * @module agent-threat-rules/modules/embedding
- */
-import { VectorStore, loadVectorEntries, } from '../embedding/vector-store.js';
-// ---------------------------------------------------------------------------
-// Module
-// ---------------------------------------------------------------------------
-export class EmbeddingModule {
-    config;
-    name = 'embedding';
-    description = 'Vector similarity detection against known attack embeddings';
-    version = '0.1.0';
-    functions = [
-        {
-            name: 'similarity_search',
-            description: 'Find nearest known attacks by embedding similarity',
-            args: [
-                {
-                    name: 'field',
-                    type: 'string',
-                    required: false,
-                    description: 'Event field to embed (default: content)',
-                },
-                {
-                    name: 'threshold',
-                    type: 'number',
-                    required: false,
-                    description: 'Similarity threshold override',
-                },
-            ],
-        },
-    ];
-    store;
-    model;
-    threshold;
-    topK;
-    initialized = false;
-    constructor(config = {}) {
-        this.config = config;
-        this.threshold = config.similarityThreshold ?? 0.65;
-        this.topK = config.topK ?? 3;
-        this.model = config.model ?? null;
-        this.store = new VectorStore(config.attackVectors);
-    }
-    async initialize() {
-        if (this.initialized)
-            return;
-        // Load attack vectors from data
-        if (this.config.attackVectorsData) {
-            const entries = loadVectorEntries(this.config.attackVectorsData);
-            this.store = this.store.withEntries(entries);
-        }
-        // Load attack vectors from file
-        if (this.config.attackVectorsPath) {
-            try {
-                const { readFileSync } = await import('node:fs');
-                const data = JSON.parse(readFileSync(this.config.attackVectorsPath, 'utf-8'));
-                const entries = loadVectorEntries(data);
-                this.store = this.store.withEntries(entries);
-            }
-            catch {
-                // File not found = no pre-computed vectors, continue without them
-            }
-        }
-        // Load model if not provided
-        if (!this.model) {
-            try {
-                const { TransformersJSModel } = await import('../embedding/model-loader.js');
-                this.model = new TransformersJSModel();
-                await this.model.initialize();
-            }
-            catch (err) {
-                // Model not available = module degrades gracefully
-                const msg = err instanceof Error ? err.message : String(err);
-                console.warn(`[embedding] Model not available: ${msg}. Module disabled.`);
-                this.model = null;
-            }
-        }
-        this.initialized = true;
-    }
-    async evaluate(event, condition) {
-        if (!this.model || this.store.size() === 0) {
-            return { matched: false, value: 0, description: 'Embedding module not initialized' };
-        }
-        // Extract text to embed
-        const field = condition.args?.field ?? 'content';
-        const text = field === 'content'
-            ? event.content
-            : event.fields?.[field] ?? event.content;
-        if (!text || text.length < 5) {
-            return { matched: false, value: 0, description: 'Input too short for embedding' };
-        }
-        // Truncate to avoid excessive token usage
-        const truncated = text.slice(0, 512);
-        try {
-            // Encode input
-            const queryVec = await this.model.encode(truncated);
-            // Search for similar attacks
-            const threshold = condition.args?.threshold ?? this.threshold;
-            const results = this.store.search(queryVec, this.topK, threshold);
-            if (results.length === 0) {
-                return { matched: false, value: 0, description: 'No similar attacks found' };
-            }
-            const top = results[0];
-            return {
-                matched: true,
-                value: top.similarity,
-                description: `Similar to known attack: "${top.entry.label}" (${top.entry.category}, similarity: ${top.similarity.toFixed(3)})`,
-            };
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            return { matched: false, value: 0, description: `Embedding error: ${msg}` };
-        }
-    }
-    /** Get search results with full details (for debugging/testing) */
-    async searchDetailed(text, threshold) {
-        if (!this.model || this.store.size() === 0)
-            return [];
-        const queryVec = await this.model.encode(text.slice(0, 512));
-        return this.store.search(queryVec, this.topK, threshold ?? this.threshold);
-    }
-    async destroy() {
-        this.model = null;
-        this.initialized = false;
-    }
-    /** Check if module is operational */
-    isAvailable() {
-        return this.initialized && this.model !== null && this.store.size() > 0;
-    }
-}
-//# sourceMappingURL=embedding.js.map

package/dist/modules/embedding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"embedding.js","sourceRoot":"","sources":["../../src/modules/embedding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,WAAW,EACX,iBAAiB,GAGlB,MAAM,8BAA8B,CAAC;AA4BtC,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,OAAO,eAAe;IAgCG;IA/BpB,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,6DAA6D,CAAC;IAC5E,OAAO,GAAG,OAAO,CAAC;IAElB,SAAS,GAAG;QACnB;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,oDAAoD;YACjE,IAAI,EAAE;gBACJ;oBACE,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAiB;oBACvB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,yCAAyC;iBACvD;gBACD;oBACE,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAiB;oBACvB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,+BAA+B;iBAC7C;aACF;SACF;KACF,CAAC;IAEM,KAAK,CAAc;IACnB,KAAK,CAAwB;IACpB,SAAS,CAAS;IAClB,IAAI,CAAS;IACtB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,SAAgC,EAAE;QAAlC,WAAM,GAAN,MAAM,CAA4B;QAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9E,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;gBAC7E,IAAI,CAAC,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mDAAmD;gBACnD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,oCAAoC,GAAG,oBAAoB,CAAC,CAAC;gBAC1E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAiB,EAAE,SAA0B;QAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;QACvF,CAAC;QAED,wBAAwB;QACxB,MAAM,KAAK,GAAI,SAAS,CAAC,IAAI,EAAE,KAAgB,IAAI,SAAS,CAAC;QAC7D,MAAM,IAAI,GACR,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC;QAE7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;QACpF,CAAC;QAED,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,eAAe;YACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAEpD,6BAA6B;YAC7B,MAAM,SAAS,GAAI,SAAS,CAAC,IAAI,EAAE,SAAoB,IAAI,IAAI,CAAC,SAAS,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAElE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;YAC/E,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,GAAG,CAAC,UAAU;gBACrB,WAAW,EAAE,6BAA6B,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,iBAAiB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;aAC/H,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,SAAkB;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,qCAAqC;IACrC,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/modules/index.d.ts

@@ -1,144 +0,0 @@
-/**
- * ATR Module System
- *
- * Extensible detection modules beyond regex pattern matching.
- * Inspired by YARA modules, adapted for AI agent threat detection.
- *
- * Built-in modules:
- * - session: Cross-event behavioral analysis using SessionTracker
- * - semantic: AI-driven semantic threat analysis using LLM-as-judge (v0.2)
- *
- * Reserved namespaces (planned):
- * - embedding: Vector similarity detection (v0.3)
- * - protocol: MCP/transport-level inspection (v0.3)
- * - entropy: Information-theoretic anomaly detection (v0.4)
- * - tokenizer: Token-level analysis for smuggling detection (v0.4)
- *
- * @module agent-threat-rules/modules
- */
-import type { AgentEvent } from '../types.js';
-/**
- * Condition defined by a module (used in rule YAML).
- *
- * Example in YAML:
- * ```yaml
- * detection:
- *   conditions:
- *     high_frequency:
- *       module: session
- *       function: call_frequency
- *       args:
- *         tool_name: "execute_code"
- *         window: "5m"
- *       operator: gt
- *       threshold: 10
- *   condition: "high_frequency"
- * ```
- */
-export interface ModuleCondition {
-    /** Module name (e.g., "session", "embedding") */
-    module: string;
-    /** Function within the module to call */
-    function: string;
-    /** Arguments passed to the module function */
-    args: Record<string, unknown>;
-    /** Comparison operator for the result */
-    operator: 'gt' | 'lt' | 'eq' | 'gte' | 'lte';
-    /** Threshold value to compare against */
-    threshold: number;
-}
-/**
- * Result returned by a module evaluation.
- */
-export interface ModuleResult {
-    /** Whether the condition was met */
-    matched: boolean;
-    /** Numeric value produced by the module (for threshold comparison) */
-    value: number;
-    /** Human-readable description of the result */
-    description: string;
-}
-/**
- * Interface that all ATR detection modules must implement.
- *
- * Modules extend ATR's detection beyond regex by providing
- * custom evaluation logic (behavioral analysis, embedding
- * similarity, protocol inspection, etc.).
- */
-export interface ATRModule {
-    /** Unique module name (used in rule YAML) */
-    readonly name: string;
-    /** Human-readable description */
-    readonly description: string;
-    /** Module version */
-    readonly version: string;
-    /**
-     * List of functions this module provides.
-     * Each function can be referenced in rule conditions.
-     */
-    readonly functions: ReadonlyArray<{
-        name: string;
-        description: string;
-        args: ReadonlyArray<{
-            name: string;
-            type: 'string' | 'number' | 'boolean';
-            required: boolean;
-            description: string;
-        }>;
-    }>;
-    /**
-     * Initialize the module. Called once when the engine starts.
-     * Use for setup, connection pooling, model loading, etc.
-     */
-    initialize(): Promise<void>;
-    /**
-     * Evaluate a module condition against an agent event.
-     *
-     * @param event - The agent event being evaluated
-     * @param condition - The module condition from the rule
-     * @returns Module evaluation result
-     */
-    evaluate(event: AgentEvent, condition: ModuleCondition): Promise<ModuleResult>;
-    /**
-     * Clean up module resources. Called when the engine shuts down.
-     */
-    destroy(): Promise<void>;
-}
-/**
- * Registry for ATR detection modules.
- */
-export declare class ModuleRegistry {
-    private readonly modules;
-    /** Reserved module namespaces (cannot be registered by third parties) */
-    private static readonly RESERVED;
-    /**
-     * Register a detection module.
-     * @throws if module name is already registered or reserved
-     */
-    register(module: ATRModule): void;
-    /**
-     * Check if a module name is reserved by the ATR core team.
-     */
-    isReserved(name: string): boolean;
-    /**
-     * Get a registered module by name.
-     */
-    get(name: string): ATRModule | undefined;
-    /**
-     * List all registered modules.
-     */
-    list(): ReadonlyArray<{
-        name: string;
-        version: string;
-        description: string;
-    }>;
-    /**
-     * Initialize all registered modules.
-     */
-    initializeAll(): Promise<void>;
-    /**
-     * Destroy all registered modules.
-     */
-    destroyAll(): Promise<void>;
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC;IAC7C,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,qBAAqB;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,aAAa,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;YACtC,QAAQ,EAAE,OAAO,CAAC;YAClB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE/E;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IAExD,yEAAyE;IACzE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAO7B;IAEH;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAOjC;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIxC;;OAEG;IACH,IAAI,IAAI,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ7E;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAMpC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAKlC"}

package/dist/modules/index.js

@@ -1,82 +0,0 @@
-/**
- * ATR Module System
- *
- * Extensible detection modules beyond regex pattern matching.
- * Inspired by YARA modules, adapted for AI agent threat detection.
- *
- * Built-in modules:
- * - session: Cross-event behavioral analysis using SessionTracker
- * - semantic: AI-driven semantic threat analysis using LLM-as-judge (v0.2)
- *
- * Reserved namespaces (planned):
- * - embedding: Vector similarity detection (v0.3)
- * - protocol: MCP/transport-level inspection (v0.3)
- * - entropy: Information-theoretic anomaly detection (v0.4)
- * - tokenizer: Token-level analysis for smuggling detection (v0.4)
- *
- * @module agent-threat-rules/modules
- */
-/**
- * Registry for ATR detection modules.
- */
-export class ModuleRegistry {
-    modules = new Map();
-    /** Reserved module namespaces (cannot be registered by third parties) */
-    static RESERVED = new Set([
-        'session',
-        'semantic',
-        'embedding',
-        'protocol',
-        'entropy',
-        'tokenizer',
-    ]);
-    /**
-     * Register a detection module.
-     * @throws if module name is already registered or reserved
-     */
-    register(module) {
-        if (this.modules.has(module.name)) {
-            throw new Error(`Module "${module.name}" is already registered`);
-        }
-        this.modules.set(module.name, module);
-    }
-    /**
-     * Check if a module name is reserved by the ATR core team.
-     */
-    isReserved(name) {
-        return ModuleRegistry.RESERVED.has(name);
-    }
-    /**
-     * Get a registered module by name.
-     */
-    get(name) {
-        return this.modules.get(name);
-    }
-    /**
-     * List all registered modules.
-     */
-    list() {
-        return Array.from(this.modules.values()).map(m => ({
-            name: m.name,
-            version: m.version,
-            description: m.description,
-        }));
-    }
-    /**
-     * Initialize all registered modules.
-     */
-    async initializeAll() {
-        for (const module of this.modules.values()) {
-            await module.initialize();
-        }
-    }
-    /**
-     * Destroy all registered modules.
-     */
-    async destroyAll() {
-        for (const module of this.modules.values()) {
-            await module.destroy();
-        }
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/modules/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAoGH;;GAEG;AACH,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAExD,yEAAyE;IACjE,MAAM,CAAU,QAAQ,GAAG,IAAI,GAAG,CAAC;QACzC,SAAS;QACT,UAAU;QACV,WAAW;QACX,UAAU;QACV,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;IAEH;;;OAGG;IACH,QAAQ,CAAC,MAAiB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC"}

package/dist/modules/semantic.d.ts

@@ -1,106 +0,0 @@
-/**
- * ATR Semantic Module (Layer 3)
- *
- * AI-driven semantic analysis for detecting threats that bypass
- * regex patterns (Layer 1) and behavioral fingerprinting (Layer 2).
- *
- * Uses LLM-as-judge to evaluate whether an agent event represents
- * a genuine threat, even when the attacker uses:
- * - Semantic paraphrasing to avoid keyword matching
- * - Multi-language injection (non-English payloads)
- * - Context-aware social engineering
- * - Novel attack patterns not yet in the rule set
- *
- * Provider-agnostic: works with any OpenAI-compatible API.
- *
- * @module agent-threat-rules/modules/semantic
- */
-import type { AgentEvent } from '../types.js';
-import type { ATRModule, ModuleCondition, ModuleResult } from './index.js';
-export interface SemanticModuleConfig {
-    /** OpenAI-compatible API endpoint */
-    apiUrl: string;
-    /** API key */
-    apiKey: string;
-    /** Model to use (default: gpt-4o-mini for cost efficiency) */
-    model?: string;
-    /** Max tokens for analysis (default: 512) */
-    maxTokens?: number;
-    /** Temperature (default: 0.1 for consistency) */
-    temperature?: number;
-    /** Timeout in ms (default: 10000) */
-    timeout?: number;
-    /** Cache TTL in ms for identical content (default: 300000 = 5min) */
-    cacheTtlMs?: number;
-    /** Max cache entries (default: 1000) */
-    maxCacheSize?: number;
-}
-/**
- * Semantic detection module using LLM-as-judge.
- *
- * Usage in ATR YAML:
- * ```yaml
- * detection:
- *   conditions:
- *     semantic_check:
- *       module: semantic
- *       function: analyze_threat
- *       args:
- *         field: user_input
- *       operator: gte
- *       threshold: 0.7
- *   condition: "semantic_check"
- * ```
- */
-export declare class SemanticModule implements ATRModule {
-    readonly name = "semantic";
-    readonly description = "AI-driven semantic threat analysis (Layer 3)";
-    readonly version = "0.1.0";
-    readonly functions: readonly [{
-        readonly name: "analyze_threat";
-        readonly description: "Analyze text for semantic threat indicators using LLM";
-        readonly args: readonly [{
-            readonly name: "field";
-            readonly type: "string";
-            readonly required: false;
-            readonly description: "Event field to analyze (default: content)";
-        }];
-    }, {
-        readonly name: "is_injection";
-        readonly description: "Binary check: is this a prompt injection attempt?";
-        readonly args: readonly [{
-            readonly name: "field";
-            readonly type: "string";
-            readonly required: false;
-            readonly description: "Event field to analyze (default: content)";
-        }];
-    }, {
-        readonly name: "classify_attack";
-        readonly description: "Classify the type of attack (returns category confidence)";
-        readonly args: readonly [{
-            readonly name: "field";
-            readonly type: "string";
-            readonly required: false;
-            readonly description: "Event field to analyze (default: content)";
-        }, {
-            readonly name: "target_category";
-            readonly type: "string";
-            readonly required: true;
-            readonly description: "ATR category to check against";
-        }];
-    }];
-    private readonly config;
-    private readonly cache;
-    constructor(config: SemanticModuleConfig);
-    initialize(): Promise<void>;
-    evaluate(event: AgentEvent, condition: ModuleCondition): Promise<ModuleResult>;
-    destroy(): Promise<void>;
-    private analyzeWithCache;
-    private callLLM;
-    private callFPCheck;
-    private parseAnalysis;
-    private resolveEndpoint;
-    private hashContent;
-    private compareThreshold;
-}
-//# sourceMappingURL=semantic.d.ts.map

package/dist/modules/semantic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"semantic.d.ts","sourceRoot":"","sources":["../../src/modules/semantic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE3E,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc;IACd,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA6DD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,cAAe,YAAW,SAAS;IAC9C,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,WAAW,kDAAkD;IACtE,QAAQ,CAAC,OAAO,WAAW;IAE3B,QAAQ,CAAC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CP;IAEX,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;gBAE3C,MAAM,EAAE,oBAAoB;IAalC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;IA8C9E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAMhB,gBAAgB;YA4ChB,OAAO;YAsDP,WAAW;IAkDzB,OAAO,CAAC,aAAa;IA0BrB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,gBAAgB;CAUzB"}