agent-threat-rules 4.1.5 → 4.2.0

package/dist/adapters/openshell-filter.d.ts

@@ -3,7 +3,10 @@
  *
  * Implements the external content-filter contract proposed in
  * NVIDIA/OpenShell#1272 ("L7 content inspection hooks — scriptable
- * request/response filtering"): the OpenShell *supervisor* (outside the agent
+ * request/response filtering"). That proposal was closed as not planned on
+ * 2026-06-11 (OpenShell's maintainers pointed to their middleware RFC,
+ * NVIDIA/OpenShell#1733), so no OpenShell release runs this filter. The
+ * contract: the OpenShell *supervisor* (outside the agent
  * sandbox) runs this as a script against L7 request/response bodies. The body
  * arrives on stdin; the script signals the verdict via exit code:
  *
@@ -13,10 +16,14 @@
  *
  * Two run modes:
  *   one-shot (default): read the whole body from stdin, evaluate, exit.
- *       Matches the #1272 contract literally. Cold-starts the engine per call.
+ *       Matches the #1272 contract literally. Cold-starts the engine per call:
+ *       starting Node, loading the rule set and compiling its patterns take
+ *       hundreds of milliseconds to about a second.
  *   serve (--serve):    read NDJSON requests line-by-line from stdin and write
  *       one NDJSON verdict per line. Loads the rule set ONCE, so per-request
- *       latency is just regex evaluation (sub-ms). Production path for a
+ *       latency is just regex evaluation: a median of about a millisecond for
+ *       a short body, tens of milliseconds for a multi-kilobyte one
+ *       (scripts/bench-evaluate-latency.ts). Intended path for a
  *       persistent guard service (cf. NVIDIA/OpenShell#1733 RFC 0005). A bad
  *       line (or an engine error) yields a per-line error verdict and the
  *       stream continues — one malformed body cannot take the inspector offline.

package/dist/adapters/openshell-filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openshell-filter.d.ts","sourceRoot":"","sources":["../../src/adapters/openshell-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAMH,qFAAqF;AACrF,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/C,mDAAmD;AACnD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAmBxC,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AAmCD;;;GAGG;AACH,qBAAa,eAAe;IAKd,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,WAAW,CAAgC;gBAEtB,OAAO,EAAE,aAAa;IAKnD,kEAAkE;IAClE,OAAO,CAAC,YAAY;IAKpB;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAmBpD;AAID,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAGjE;AAOD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAUrE"}
+{"version":3,"file":"openshell-filter.d.ts","sourceRoot":"","sources":["../../src/adapters/openshell-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAMH,qFAAqF;AACrF,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/C,mDAAmD;AACnD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAmBxC,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AAmCD;;;GAGG;AACH,qBAAa,eAAe;IAKd,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,WAAW,CAAgC;gBAEtB,OAAO,EAAE,aAAa;IAKnD,kEAAkE;IAClE,OAAO,CAAC,YAAY;IAKpB;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAmBpD;AAID,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAGjE;AAOD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAUrE"}

package/dist/adapters/openshell-filter.js

@@ -3,7 +3,10 @@
  *
  * Implements the external content-filter contract proposed in
  * NVIDIA/OpenShell#1272 ("L7 content inspection hooks — scriptable
- * request/response filtering"): the OpenShell *supervisor* (outside the agent
+ * request/response filtering"). That proposal was closed as not planned on
+ * 2026-06-11 (OpenShell's maintainers pointed to their middleware RFC,
+ * NVIDIA/OpenShell#1733), so no OpenShell release runs this filter. The
+ * contract: the OpenShell *supervisor* (outside the agent
  * sandbox) runs this as a script against L7 request/response bodies. The body
  * arrives on stdin; the script signals the verdict via exit code:
  *
@@ -13,10 +16,14 @@
  *
  * Two run modes:
  *   one-shot (default): read the whole body from stdin, evaluate, exit.
- *       Matches the #1272 contract literally. Cold-starts the engine per call.
+ *       Matches the #1272 contract literally. Cold-starts the engine per call:
+ *       starting Node, loading the rule set and compiling its patterns take
+ *       hundreds of milliseconds to about a second.
  *   serve (--serve):    read NDJSON requests line-by-line from stdin and write
  *       one NDJSON verdict per line. Loads the rule set ONCE, so per-request
- *       latency is just regex evaluation (sub-ms). Production path for a
+ *       latency is just regex evaluation: a median of about a millisecond for
+ *       a short body, tens of milliseconds for a multi-kilobyte one
+ *       (scripts/bench-evaluate-latency.ts). Intended path for a
  *       persistent guard service (cf. NVIDIA/OpenShell#1733 RFC 0005). A bad
  *       line (or an engine error) yields a per-line error verdict and the
  *       stream continues — one malformed body cannot take the inspector offline.

package/dist/adapters/openshell-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"openshell-filter.js","sourceRoot":"","sources":["../../src/adapters/openshell-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AASzC,mEAAmE;AACnE,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpE,aAAa,EAAE,CAAC;IAChB,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAgCD;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,SAAoB;IAChD,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAe,EAAE,OAAe,EAAE,QAAiB;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QAC5B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QACnC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,SAAS;QACtD,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,mBAAmB,EAAE,OAAO;QAC5B,4BAA4B,EAAE,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ;KACrF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IAKG;IAJZ,MAAM,CAAY;IAClB,QAAQ,CAAS;IAC1B,WAAW,GAA2B,IAAI,CAAC;IAEnD,YAA6B,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,kEAAkE;IAC1D,YAAY;QAClB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAE7D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAe;YACxB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEvF,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAChD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC5E,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAEhF,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC;IACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,IAAI,WAAW,qCAAqC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;IACvF,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrD,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS;QACrF,QAAQ,EAAE,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,MAAM;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAkB;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,KAAK,IAAK,KAAgB,CAAC,MAAM,CAAC;QAClC,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,UAAU,CAAC,MAAuB,EAAE,UAAkB;IACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,MAAuB;IAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,EAAsB,CAAC;QAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmC,CAAC;YAC/D,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,+EAA+E;QAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY,EAAE,EAAE,CAAC;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACvG,IAAI,kBAAkB,EAAE,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"openshell-filter.js","sourceRoot":"","sources":["../../src/adapters/openshell-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AASzC,mEAAmE;AACnE,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpE,aAAa,EAAE,CAAC;IAChB,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAgCD;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,SAAoB;IAChD,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAe,EAAE,OAAe,EAAE,QAAiB;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QAC5B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QACnC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,SAAS;QACtD,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,mBAAmB,EAAE,OAAO;QAC5B,4BAA4B,EAAE,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ;KACrF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IAKG;IAJZ,MAAM,CAAY;IAClB,QAAQ,CAAS;IAC1B,WAAW,GAA2B,IAAI,CAAC;IAEnD,YAA6B,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,kEAAkE;IAC1D,YAAY;QAClB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAE7D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAe;YACxB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEvF,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAChD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC5E,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAEhF,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC;IACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,IAAI,WAAW,qCAAqC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;IACvF,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrD,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS;QACrF,QAAQ,EAAE,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,MAAM;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAkB;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,KAAK,IAAK,KAAgB,CAAC,MAAM,CAAC;QAClC,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,UAAU,CAAC,MAAuB,EAAE,UAAkB;IACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,MAAuB;IAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,EAAsB,CAAC;QAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmC,CAAC;YAC/D,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,+EAA+E;QAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY,EAAE,EAAE,CAAC;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACvG,IAAI,kBAAkB,EAAE,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/adapters/stdio-adapter.js

@@ -75,7 +75,7 @@ export class StdioAdapter {
     async alert(ctx) {
         const alertMsg = {
             type: "alert",
-            severity: ctx.verdict.highestSeverity,
+            severity: ctx.verdict.highestSeverity ?? ctx.verdict.advisorySeverity ?? null,
             reason: ctx.verdict.reason,
             matchCount: ctx.verdict.matchCount,
         };
@@ -89,7 +89,7 @@ export class StdioAdapter {
         if (process.env.ATR_SHADOW_LOG) {
             const shadowMsg = {
                 type: "shadow",
-                severity: ctx.verdict.highestSeverity,
+                severity: ctx.verdict.highestSeverity ?? ctx.verdict.advisorySeverity ?? null,
                 reason: ctx.verdict.reason,
                 matchCount: ctx.verdict.matchCount,
                 ruleIds: ctx.matches.map((m) => m.rule.id),
@@ -116,7 +116,7 @@ export class StdioAdapter {
     async escalate(ctx) {
         const escalation = {
             type: "escalation",
-            severity: ctx.verdict.highestSeverity,
+            severity: ctx.verdict.highestSeverity ?? ctx.verdict.advisorySeverity ?? null,
             reason: ctx.verdict.reason,
             matchCount: ctx.verdict.matchCount,
         };

package/dist/adapters/stdio-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio-adapter.js","sourceRoot":"","sources":["../../src/adapters/stdio-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,SAAS,UAAU,CACjB,MAA8B,EAC9B,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,OAAO,EAAE,IAAI;QACb,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,OAAO,CAAC;IACP,cAAc,GAAc,EAAE,CAAC;IAEhD;;;OAGG;IACH,cAAc;QACZ,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAqB;QACpC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAqB;QACrC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAqB;QACnC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,SAAS;SACnD,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAqB;QAC3C,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;SACtC,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CACf,oBAAoB,EACpB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAqB;QACtC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;SAC7B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe;YACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAqB;QAChC,kEAAkE;QAClE,mEAAmE;QACnE,0DAA0D;QAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe;gBACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;gBAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,UAAU,CACf,QAAQ,EACR,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAqB;QAClC,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;gBACpB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAChD;YACD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAqB;QAClC,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe;YACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAqB;QAC3C,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CACf,oBAAoB,EACpB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAqB;QACnC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"stdio-adapter.js","sourceRoot":"","sources":["../../src/adapters/stdio-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,SAAS,UAAU,CACjB,MAA8B,EAC9B,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,OAAO,EAAE,IAAI;QACb,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,OAAO,CAAC;IACP,cAAc,GAAc,EAAE,CAAC;IAEhD;;;OAGG;IACH,cAAc;QACZ,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAqB;QACpC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAqB;QACrC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAqB;QACnC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,SAAS;SACnD,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAqB;QAC3C,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;SACtC,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CACf,oBAAoB,EACpB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAqB;QACtC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;SAC7B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAqB;QAC/B,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAC7E,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAqB;QAChC,kEAAkE;QAClE,mEAAmE;QACnE,0DAA0D;QAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI;gBAC7E,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;gBAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,UAAU,CACf,QAAQ,EACR,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAqB;QAClC,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;gBACpB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAChD;YACD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAqB;QAClC,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAC7E,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAqB;QAC3C,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CACf,oBAAoB,EACpB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAqB;QACnC,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;SAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/cli/mcp-tools-document.d.ts

@@ -0,0 +1,40 @@
+/**
+ * An MCP `tools/list` document is a list of tool definitions, not an event.
+ *
+ * `atr scan tools.json` on `{"tools":[{"name":"add","description":"...","inputSchema":{...}}]}`
+ * — or on the JSON-RPC response `{"jsonrpc":"2.0","id":1,"result":{"tools":[...]}}` — used to
+ * wrap the document as one event, find no `content` on it, skip it, and report
+ * "nothing was scanned". That is the input a tool-poisoning check most often starts from.
+ *
+ * Each tool becomes its own `mcp_exchange` event:
+ *   - `content` is the tool definition as JSON, the whole object. It carries the name, the
+ *     description and the input schema, including per-parameter descriptions, extra property
+ *     fields, `required` and defaults: every one of those reaches the model, and the
+ *     full-schema-poisoning rules anchor on the schema structure (`inputSchema`, `properties`).
+ *   - `fields.tool_name` is the tool's name and `fields.tool_description` its top-level
+ *     description, for the rules that read those fields. They are set only when the definition
+ *     carries them as strings, never filled with something else.
+ * One event per tool keeps a finding attributable to a tool name.
+ *
+ * The CLI scans these events on an engine constructed with `toolDefinitions: true`, so the rules
+ * written for a tool being called do not run on them (src/tool-definition-scope.ts).
+ *
+ * @module agent-threat-rules/cli/mcp-tools-document
+ */
+import type { AgentEvent } from '../types.js';
+type JsonObject = Record<string, unknown>;
+/** One mcp_exchange event for one tool definition. */
+export declare function toolDefinitionToEvent(tool: JsonObject, timestamp: string): AgentEvent;
+/**
+ * Events for a `tools/list` document, or null when the input is not one.
+ *
+ * Accepted: `{"tools":[...]}`, `{"result":{"tools":[...]}}` (a JSON-RPC response), and a
+ * non-empty JSON array whose every element is one of those (a log of several responses).
+ * A document that lists no tools yields an empty array, so the caller reports that nothing
+ * was scanned instead of a clean result. A tools entry that is not an object yields an event
+ * with no content, which the caller counts as skipped. An object that is already an event (string
+ * content, or an event type) is never read as a tools/list document, tools array or not.
+ */
+export declare function toolsDocumentToEvents(parsed: unknown): AgentEvent[] | null;
+export {};
+//# sourceMappingURL=mcp-tools-document.d.ts.map

package/dist/cli/mcp-tools-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools-document.d.ts","sourceRoot":"","sources":["../../src/cli/mcp-tools-document.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAoC1C,sDAAsD;AACtD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAarF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,EAAE,GAAG,IAAI,CAc1E"}

package/dist/cli/mcp-tools-document.js

@@ -0,0 +1,95 @@
+/**
+ * An MCP `tools/list` document is a list of tool definitions, not an event.
+ *
+ * `atr scan tools.json` on `{"tools":[{"name":"add","description":"...","inputSchema":{...}}]}`
+ * — or on the JSON-RPC response `{"jsonrpc":"2.0","id":1,"result":{"tools":[...]}}` — used to
+ * wrap the document as one event, find no `content` on it, skip it, and report
+ * "nothing was scanned". That is the input a tool-poisoning check most often starts from.
+ *
+ * Each tool becomes its own `mcp_exchange` event:
+ *   - `content` is the tool definition as JSON, the whole object. It carries the name, the
+ *     description and the input schema, including per-parameter descriptions, extra property
+ *     fields, `required` and defaults: every one of those reaches the model, and the
+ *     full-schema-poisoning rules anchor on the schema structure (`inputSchema`, `properties`).
+ *   - `fields.tool_name` is the tool's name and `fields.tool_description` its top-level
+ *     description, for the rules that read those fields. They are set only when the definition
+ *     carries them as strings, never filled with something else.
+ * One event per tool keeps a finding attributable to a tool name.
+ *
+ * The CLI scans these events on an engine constructed with `toolDefinitions: true`, so the rules
+ * written for a tool being called do not run on them (src/tool-definition-scope.ts).
+ *
+ * @module agent-threat-rules/cli/mcp-tools-document
+ */
+function isObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/** Event types an AgentEvent carries (src/types.ts AgentEvent['type']). */
+const EVENT_TYPES = new Set([
+    'llm_input',
+    'llm_output',
+    'tool_call',
+    'tool_response',
+    'mcp_exchange',
+    'agent_behavior',
+    'multi_agent_message',
+]);
+/**
+ * An object that is already an event: string `content`, or a `type` that is an event type. Such an
+ * object stays on the event path even when it also carries a `tools` array (an LLM request logged
+ * with its tool list, for example): reading it as a tools/list document would drop its content.
+ */
+function looksLikeEvent(doc) {
+    return typeof doc['content'] === 'string' || (typeof doc['type'] === 'string' && EVENT_TYPES.has(doc['type']));
+}
+/** The tools array of a `tools/list` result, bare or inside a JSON-RPC envelope; else null. */
+function toolsArrayOf(doc) {
+    if (!isObject(doc))
+        return null;
+    if (looksLikeEvent(doc))
+        return null;
+    if (Array.isArray(doc['tools']))
+        return doc['tools'];
+    const result = doc['result'];
+    if (isObject(result) && Array.isArray(result['tools']))
+        return result['tools'];
+    return null;
+}
+/** One mcp_exchange event for one tool definition. */
+export function toolDefinitionToEvent(tool, timestamp) {
+    const name = tool['name'];
+    const description = tool['description'];
+    const fields = {
+        ...(typeof name === 'string' && name !== '' ? { tool_name: name } : {}),
+        ...(typeof description === 'string' && description !== '' ? { tool_description: description } : {}),
+    };
+    return {
+        type: 'mcp_exchange',
+        timestamp,
+        content: JSON.stringify(tool),
+        ...(Object.keys(fields).length > 0 ? { fields } : {}),
+    };
+}
+/**
+ * Events for a `tools/list` document, or null when the input is not one.
+ *
+ * Accepted: `{"tools":[...]}`, `{"result":{"tools":[...]}}` (a JSON-RPC response), and a
+ * non-empty JSON array whose every element is one of those (a log of several responses).
+ * A document that lists no tools yields an empty array, so the caller reports that nothing
+ * was scanned instead of a clean result. A tools entry that is not an object yields an event
+ * with no content, which the caller counts as skipped. An object that is already an event (string
+ * content, or an event type) is never read as a tools/list document, tools array or not.
+ */
+export function toolsDocumentToEvents(parsed) {
+    const documents = Array.isArray(parsed) ? parsed : [parsed];
+    if (documents.length === 0)
+        return null;
+    const toolLists = documents.map(toolsArrayOf);
+    if (toolLists.some((list) => list === null))
+        return null;
+    const timestamp = new Date().toISOString();
+    return toolLists.flatMap((tools) => tools.map((tool) => isObject(tool)
+        ? toolDefinitionToEvent(tool, timestamp)
+        : { type: 'mcp_exchange', timestamp, content: '' }));
+}
+//# sourceMappingURL=mcp-tools-document.js.map

package/dist/cli/mcp-tools-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools-document.js","sourceRoot":"","sources":["../../src/cli/mcp-tools-document.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,2EAA2E;AAC3E,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,WAAW;IACX,YAAY;IACZ,WAAW;IACX,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAe;IACrC,OAAO,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,qBAAqB,CAAC,IAAgB,EAAE,SAAiB;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,MAAM,GAA2B;QACrC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpG,CAAC;IACF,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAQ,SAAyB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAc,EAAE,CAC7B,QAAQ,CAAC,IAAI,CAAC;QACZ,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC;QACxC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CACrD,CACF,CAAC;AACJ,CAAC"}

package/dist/cli/scan-handler.d.ts

@@ -6,6 +6,7 @@
  */
 import type { ScanType } from '../types.js';
 import type { Lane } from '../quality/rule-contract.js';
+import { type ModelDecisions } from '../verdict.js';
 export interface ScanOptions {
     readonly rules?: string;
     readonly json?: boolean;
@@ -21,6 +22,13 @@ export interface ScanOptions {
     readonly semanticModel?: string;
     readonly semanticTimeout?: string;
     readonly semanticNoJsonMode?: boolean;
+    /**
+     * What a match a model decided (here, a semantic rule's judge) may do.
+     * 'advisory' (default): listed, marked, and not counted toward --fail-on, and
+     * written to SARIF at level note with properties.enforced false. 'enforce':
+     * counted and written like any match.
+     */
+    readonly modelDecisions?: ModelDecisions;
     /**
      * Detection lane (which rule maturities may fire). Undefined means the
      * engine's built-in default; `src/cli.ts` resolves `--lane` and `ATR_LANE`

package/dist/cli/scan-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan-handler.d.ts","sourceRoot":"","sources":["../../src/cli/scan-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAoC,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAsBxD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CA0B5D;AAED,6FAA6F;AAC7F,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Df"}
+{"version":3,"file":"scan-handler.d.ts","sourceRoot":"","sources":["../../src/cli/scan-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAoC,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAIxD,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAoBpE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CA0B5D;AAED,6FAA6F;AAC7F,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/cli/scan-handler.js

@@ -10,6 +10,8 @@ import { ATREngine } from '../engine.js';
 import { scanResultToSARIF } from '../converters/sarif.js';
 import { createTCReporter, resolveTcUrl } from '../tc-reporter.js';
 import { createSemanticJudgeFromConfig } from './semantic-judge-config.js';
+import { isModelDecided } from '../verdict.js';
+import { toolsDocumentToEvents } from './mcp-tools-document.js';
 const SEVERITY_ORDER = ['informational', 'low', 'medium', 'high', 'critical'];
 // ANSI colors
 const RED = '\x1b[31m';
@@ -114,6 +116,36 @@ export async function cmdScanUnified(target, rulesDir, options) {
     }
 }
 // ── MCP Event Scan ─────────────────────────────────────────────
+/**
+ * A `.mcp.json` is a configuration document, not an event.
+ *
+ * `atr scan .mcp.json` — the invocation the README shows — parsed the file, wrapped it as one
+ * event, found no `content` on it and skipped it, while the summary still said one event had been
+ * scanned. The rules never saw a single server, so a config that sets `NODE_OPTIONS` to a require
+ * payload came back as `threats_detected: 0` instead of as an error.
+ *
+ * Each server becomes its own event, with the config as its content, which is the shape the MCP
+ * rules evaluate (ATR-2026-02300, the rule written for exactly this `.mcp.json` env-block surface,
+ * fires on it — see tests/cli-mcp-config-scan.test.ts). One event per server also keeps a finding
+ * attributable to a server name.
+ */
+function configDocumentToEvents(parsed) {
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        return null;
+    const servers = parsed.mcpServers;
+    if (!servers || typeof servers !== 'object' || Array.isArray(servers))
+        return null;
+    const timestamp = new Date().toISOString();
+    const events = [];
+    for (const [name, config] of Object.entries(servers)) {
+        events.push({
+            type: 'mcp_exchange',
+            timestamp,
+            content: JSON.stringify({ mcpServers: { [name]: config } }),
+        });
+    }
+    return events.length > 0 ? events : null;
+}
 async function scanMcpEvents(eventsPath, rulesDir, options, reporter) {
     const fileStat = statSync(eventsPath);
     if (fileStat.size > 50 * 1024 * 1024) {
@@ -122,9 +154,18 @@ async function scanMcpEvents(eventsPath, rulesDir, options, reporter) {
     }
     const raw = readFileSync(eventsPath, 'utf-8');
     let events;
+    // Whether the input is a tools/list document: every event is then a tool definition, and the
+    // engine is told so (toolDefinitions), so the rules written for a tool being called do not run
+    // on it (src/tool-definition-scope.ts). Config documents and event files are scanned as before.
+    let toolDefinitions = false;
     try {
         const parsed = JSON.parse(raw);
-        events = Array.isArray(parsed) ? parsed : [parsed];
+        // A config document becomes one event per server, a tools/list document one event per
+        // tool; every other input is unchanged.
+        const configEvents = configDocumentToEvents(parsed);
+        const toolEvents = configEvents === null ? toolsDocumentToEvents(parsed) : null;
+        toolDefinitions = toolEvents !== null;
+        events = configEvents ?? toolEvents ?? (Array.isArray(parsed) ? parsed : [parsed]);
     }
     catch {
         console.error(`${RED}Error: Invalid JSON in ${eventsPath}${RESET}`);
@@ -136,7 +177,10 @@ async function scanMcpEvents(eventsPath, rulesDir, options, reporter) {
         reporter,
         semanticJudge: semantic.judge,
         ...(options.lane ? { lane: options.lane } : {}),
+        ...(options.modelDecisions ? { modelDecisions: options.modelDecisions } : {}),
+        ...(toolDefinitions ? { toolDefinitions: true } : {}),
     });
+    const heldBack = (m) => engine.getModelDecisions() === 'advisory' && isModelDecided(m);
     await engine.loadRules();
     if (semantic.enabled && !options.json && !options.sarif) {
         console.error(`${DIM}Semantic judge: enabled for method=semantic rules${RESET}`);
@@ -146,9 +190,14 @@ async function scanMcpEvents(eventsPath, rulesDir, options, reporter) {
     const allResults = [];
     let totalThreats = 0;
     let failHits = 0;
+    let eventsEvaluated = 0;
+    let eventsSkipped = 0;
     for (const event of events) {
-        if (!event.content)
-            continue; // skip malformed events
+        if (!event.content) {
+            eventsSkipped += 1; // skip malformed events, but never silently
+            continue;
+        }
+        eventsEvaluated += 1;
         const result = semantic.enabled
             ? await engine.evaluateFullAsync(event, eventsPath)
             : engine.evaluateFull(event, eventsPath);
@@ -157,48 +206,85 @@ async function scanMcpEvents(eventsPath, rulesDir, options, reporter) {
             allResults.push({ event, result, filtered });
             totalThreats += filtered.length;
             if (failIdx >= 0) {
-                failHits += filtered.filter((m) => SEVERITY_ORDER.indexOf(m.rule.severity) >= failIdx).length;
+                failHits += filtered.filter((m) => !heldBack(m) && SEVERITY_ORDER.indexOf(m.rule.severity) >= failIdx).length;
             }
         }
     }
+    // An event that never reached the engine is not a clean result, and the counts have to say so:
+    // `events_scanned` used to be `events.length`, computed before the skip.
+    if (events.length === 0) {
+        console.error(`${RED}Error: nothing was scanned — the input contains no events and no tools${RESET}`);
+    }
+    else if (eventsEvaluated === 0) {
+        console.error(`${RED}Error: nothing was scanned — ${eventsSkipped} event(s) had no content${RESET}`);
+    }
+    else if (eventsSkipped > 0) {
+        console.error(`${DIM}Warning: ${eventsSkipped} event(s) had no content and were not scanned${RESET}`);
+    }
+    // On a tools/list document some rules do not run (src/tool-definition-scope.ts): say so, and how
+    // many, so "not run" cannot read as "ran and found nothing"; and name the tool of each result.
+    const scope = engine.getToolDefinitionScope();
+    const scopeReport = scope
+        ? { tool_definition_scope: true, rules_evaluated: scope.rulesEvaluated, rules_skipped_by_scope: scope.rulesSkippedByScope }
+        : {};
+    const toolNameOf = (event) => toolDefinitions ? event.fields?.['tool_name'] : undefined;
     if (options.sarif) {
-        const sarifResults = allResults.map(({ result, filtered }) => ({
-            ...result,
-            matches: filtered,
-            threat_count: filtered.length,
-        }));
+        const toolNames = new Map();
+        const sarifResults = allResults.map(({ event, result, filtered }) => {
+            const scoped = { ...result, matches: filtered, threat_count: filtered.length };
+            const name = toolNameOf(event);
+            if (name !== undefined)
+                toolNames.set(scoped, name);
+            return scoped;
+        });
         const version = process.env['npm_package_version'] ?? '1.0.0';
-        console.log(JSON.stringify(scanResultToSARIF(sarifResults, version), null, 2));
-        return failHits;
+        console.log(JSON.stringify(scanResultToSARIF(sarifResults, version, {
+            heldBack,
+            ...(scope ? { runProperties: scopeReport } : {}),
+            resultProperties: (r) => (toolNames.has(r) ? { tool_name: toolNames.get(r) } : undefined),
+        }), null, 2));
+        return eventsEvaluated === 0 ? 1 : failHits;
     }
     if (options.json) {
         console.log(JSON.stringify({
             scan_type: 'mcp',
-            events_scanned: events.length,
+            events_scanned: eventsEvaluated,
+            events_skipped: eventsSkipped,
             threats_detected: totalThreats,
             rules_loaded: engine.getRuleCount(),
-            results: allResults.map(({ event, result, filtered }) => ({
-                content_hash: result.content_hash,
-                event: {
-                    type: event.type,
-                    timestamp: event.timestamp,
-                    content_preview: event.content.slice(0, 100),
-                },
-                matches: filtered.map(formatMatchJson),
-            })),
+            ...scopeReport,
+            results: allResults.map(({ event, result, filtered }) => {
+                const toolName = toolNameOf(event);
+                return {
+                    content_hash: result.content_hash,
+                    event: {
+                        type: event.type,
+                        timestamp: event.timestamp,
+                        ...(toolName !== undefined ? { tool_name: toolName } : {}),
+                        content_preview: event.content.slice(0, 100),
+                    },
+                    matches: filtered.map((m) => formatMatchJson(m, heldBack(m))),
+                };
+            }),
         }, null, 2));
-        return failHits;
+        return eventsEvaluated === 0 ? 1 : failHits;
+    }
+    printScanHeader('MCP', eventsEvaluated, engine.getRuleCount(), totalThreats);
+    if (scope) {
+        console.log(`${DIM}  Tool definitions: ${scope.rulesSkippedByScope} rule(s) written for a tool being called were not run; ${scope.rulesEvaluated} were.${RESET}\n`);
     }
-    printScanHeader('MCP', events.length, engine.getRuleCount(), totalThreats);
     if (totalThreats === 0) {
-        console.log(`${GREEN}No threats detected.${RESET}\n`);
-        return failHits;
+        console.log(eventsEvaluated === 0
+            ? `${RED}Nothing was scanned.${RESET}\n`
+            : `${GREEN}No threats detected.${RESET}\n`);
+        return eventsEvaluated === 0 ? 1 : failHits;
     }
     for (const { event, filtered } of allResults) {
         const preview = event.content.slice(0, 80).replace(/\n/g, ' ');
-        console.log(`  ${DIM}Event: [${event.type}] "${preview}..."${RESET}`);
+        const toolName = toolNameOf(event);
+        console.log(`  ${DIM}Event: [${event.type}]${toolName !== undefined ? ` tool ${toolName}` : ''} "${preview}..."${RESET}`);
         for (const m of filtered) {
-            printMatch(m);
+            printMatch(m, heldBack(m));
         }
         console.log('');
     }
@@ -217,7 +303,9 @@ async function scanSkillFiles(targetPath, rulesDir, options, reporter) {
         reporter,
         semanticJudge: semantic.judge,
         ...(options.lane ? { lane: options.lane } : {}),
+        ...(options.modelDecisions ? { modelDecisions: options.modelDecisions } : {}),
     });
+    const heldBack = (m) => engine.getModelDecisions() === 'advisory' && isModelDecided(m);
     await engine.loadRules();
     if (semantic.enabled && !options.json && !options.sarif) {
         console.error(`${DIM}Semantic judge: enabled for method=semantic rules${RESET}`);
@@ -242,7 +330,7 @@ async function scanSkillFiles(targetPath, rulesDir, options, reporter) {
             allResults.push({ file, result, filtered });
             totalThreats += filtered.length;
             if (failIdx >= 0) {
-                failHits += filtered.filter((m) => SEVERITY_ORDER.indexOf(m.rule.severity) >= failIdx).length;
+                failHits += filtered.filter((m) => !heldBack(m) && SEVERITY_ORDER.indexOf(m.rule.severity) >= failIdx).length;
             }
         }
     }
@@ -253,7 +341,7 @@ async function scanSkillFiles(targetPath, rulesDir, options, reporter) {
             threat_count: filtered.length,
         }));
         const version = process.env['npm_package_version'] ?? '1.0.0';
-        console.log(JSON.stringify(scanResultToSARIF(sarifResults, version), null, 2));
+        console.log(JSON.stringify(scanResultToSARIF(sarifResults, version, { heldBack }), null, 2));
         return failHits;
     }
     if (options.json) {
@@ -265,7 +353,7 @@ async function scanSkillFiles(targetPath, rulesDir, options, reporter) {
             results: allResults.map(({ file, result, filtered }) => ({
                 file,
                 content_hash: result.content_hash,
-                matches: filtered.map(formatMatchJson),
+                matches: filtered.map((m) => formatMatchJson(m, heldBack(m))),
             })),
         }, null, 2));
         return failHits;
@@ -279,7 +367,7 @@ async function scanSkillFiles(targetPath, rulesDir, options, reporter) {
         const relPath = file.replace(process.cwd() + '/', '');
         console.log(`  ${BOLD}${relPath}${RESET}`);
         for (const m of filtered) {
-            printMatch(m);
+            printMatch(m, heldBack(m));
         }
         console.log('');
     }
@@ -318,13 +406,16 @@ function walkForSkills(dir, out) {
         }
     }
 }
-function formatMatchJson(m) {
+function formatMatchJson(m, heldBack) {
     return {
         rule_id: m.rule.id,
         title: m.rule.title,
         severity: m.rule.severity,
         confidence: m.confidence,
         matched_conditions: m.matchedConditions,
+        decided_by: m.decidedBy ?? null,
+        // false: a model decided it and it does not count toward --fail-on.
+        enforced: !heldBack,
     };
 }
 function printScanHeader(type, scanned, rulesLoaded, threats) {
@@ -338,9 +429,10 @@ function printScanHeader(type, scanned, rulesLoaded, threats) {
     console.log(`${DIM}  Open source (MIT). Star: https://github.com/Agent-Threat-Rule/agent-threat-rules${RESET}`);
     console.log('');
 }
-function printMatch(m) {
+function printMatch(m, heldBack) {
     const color = SEVERITY_COLORS[m.rule.severity] ?? '';
-    console.log(`    ${color}${m.rule.severity.toUpperCase().padEnd(13)}${RESET} ${m.rule.id} - ${m.rule.title}`);
+    const note = heldBack ? ` ${DIM}(decided by ${m.decidedBy}: reported, not counted toward --fail-on)${RESET}` : '';
+    console.log(`    ${color}${m.rule.severity.toUpperCase().padEnd(13)}${RESET} ${m.rule.id} - ${m.rule.title}${note}`);
     console.log(`    ${DIM}Confidence: ${(m.confidence * 100).toFixed(0)}% | Conditions: ${m.matchedConditions.join(', ')}${RESET}`);
 }
 //# sourceMappingURL=scan-handler.js.map