agent-threat-rules 4.2.1 → 4.2.3

package/CHANGELOG.md

@@ -4,6 +4,252 @@ All notable changes to ATR will be documented in this file.
 
 ## [Unreleased]
 
+## [4.2.3] - 2026-11-02
+
+A patch release with one engine fix and two fixes to the Cisco Skill Scanner
+pack exporter, a repository script the npm package does not include. The
+rule format, identifier scheme, rules and the Match output format (SPEC §7)
+are unchanged.
+
+Default behaviour that changes:
+
+- `scanSkill()` and `scanSkillAsync()`, and `scanSkillFull()` and
+  `scanSkillFullAsync()`, which call them, no longer depend on what the
+  process scanned before. A document scanned after one with five decodable
+  base64 blocks and a further run of 32 or more base64 characters after them
+  now reports the `[decoded:base64]` matches it reports when scanned on its
+  own; before, it could lose some or all of them, and could report matches
+  from blocks after its first five decodable ones instead. `atr scan <dir>`
+  and the `atr_scan_skill` MCP tool scan many documents in one process. The
+  first scan in a fresh process is unchanged, and `evaluate()`, which decodes
+  no base64, is unchanged.
+- Cisco Skill Scanner packs generated with `scripts/export-cisco-pack.ts`
+  from a checkout of this release, other than with `--reproduce-vendored`,
+  differ from earlier ones: invisible characters in the signature files are
+  written as YAML escapes that parse to the same patterns, and a rule with
+  `condition: all` and more than one regex condition is written as one
+  pattern that matches only where every condition does. A pack generated
+  before this release changes only when it is regenerated.
+
+### Fixed
+
+- **The SKILL.md path decodes the same base64 blocks on every scan of the
+  same text** (#762). `decodeBase64Blocks()` searched with a module-level `/g`
+  regular expression and stopped at its five-block cap without resetting
+  `lastIndex`, so the next call in the same process resumed where the
+  previous one stopped. That happened after any document with five
+  decodable blocks and one more run of 32 or more base64 characters after
+  them, decodable or not: a second scan of the same text decoded only what
+  came after that run, and the next document scanned lost some or all of
+  its own blocks. The `[decoded:base64]` matches of `scanSkill()` and
+  `scanSkillAsync()` therefore depended on what the process had scanned
+  before, which SPEC §6.5 does not allow; a directory scan
+  (`atr scan <dir>`) and the `atr_scan_skill` MCP tool scan many documents
+  in one process. The regular expression is now created per call. The cap,
+  the block pattern and the printable-text filter are unchanged, so the
+  first scan in a fresh process returns what it did before. No measurement
+  that can be re-run from this repository changes: of the files under
+  `data/` and the rules' test cases, only the two BrowseSafe corpora hold
+  such a document, and they are scored as tool responses, not through
+  `scanSkill()`. The wild-scan measurement (`data/measurements/wild-scan/`)
+  was made with the old decoder over documents that are not in the
+  repository, and was not re-run.
+
+- **The Cisco Skill Scanner pack writes invisible characters as YAML
+  escapes** (#760). Rules that detect Unicode smuggling contain the
+  characters they look for (tag characters, bidirectional overrides and
+  isolates, zero-width characters, the soft hyphen), and the pack emitter
+  wrote them raw, so a regenerated pack carried invisible characters, U+202E
+  among them, which GitHub flags as hidden or bidirectional Unicode. The
+  signature files, and `pack.yaml` with `--downstream`, now write any
+  character in Unicode categories Cf, Cn, Co, Cs, Zl or Zp as `\uXXXX`, or
+  `\UXXXXXXXX` above the BMP, in a double-quoted scalar. A YAML reader
+  decodes the escapes, so the parsed patterns are unchanged.
+  `--reproduce-vendored` keeps the raw characters, since the bytes it
+  reproduces contain them.
+
+- **A `condition: all` rule in the Cisco Skill Scanner pack matches only
+  where all its conditions do** (#761). The scanner reports a finding when
+  any one of a signature's patterns matches, and the exporter wrote one
+  pattern per regex condition, so a rule with `condition: all` fired
+  wherever a single condition did. A rule whose `detection.condition` is
+  `all` (or `and`) and that has more than one regex condition is now written
+  as one pattern of lookaheads anchored at the start of the text, one per
+  condition. Rules with `any`, or with one regex condition, are unchanged,
+  and `--reproduce-vendored` still copies patterns verbatim. Skill Scanner
+  runs a pattern over one line at a time, and also over the whole file only
+  when the pattern contains `\n` outside a character class; without one,
+  the conditions have to meet on one line, so a rule whose attacks span
+  lines can match less in the pack than in the engine. The combined pattern
+  matches an empty string at the start of the text it runs over, so the
+  match itself carries no text, and an RE2-based engine cannot compile it.
+
+## [4.2.2] - 2026-10-28
+
+A patch release of export and converter fixes, five rule rewrites for Python
+portability, and reference corrections. The rule format, identifier scheme,
+engine matching and Match output are unchanged.
+
+Default behaviour that changes:
+
+- Nothing the engine matches. The five rewritten rules match the same samples
+  as before on every test case, evasion test and text file under `data/`.
+- Exports regenerated from this release differ from earlier ones: the
+  converters (`atr convert`, `ruleToSPL()`, `ruleToElastic()`, Sage), the
+  Cisco Skill Scanner pack, the PyRIT digest, the Pipelock bundle and the
+  RAMPART evaluator now follow SPEC §6.4, so a condition without a flag group
+  matches case-insensitively and a leading `(?s)` or `(?m)` has no effect.
+  See the upgrade note under the converters entry below.
+- `references` and `compliance` metadata changes on 139 rules (the OWASP and
+  ATLAS corrections below). Tooling that reports or groups by those ids sees
+  different buckets.
+
+### Added
+
+- **`export-cisco-pack.ts --downstream` writes the Cisco Skill Scanner's
+  schema_version 2 pack.** The scanner now validates its bundled packs
+  against a strict schema at startup: it rejects `signature_files` and any
+  rule field outside its allowlist (`maturity`, `atr_id`, `atr_url` and
+  `file` included), and every rule needs a Cisco AI taxonomy code or a
+  default for its category. A pack exported as before fails to load. With
+  `--downstream <vendored pack dir>` the exporter writes that schema and
+  carries the scanner maintainers' choices forward: each existing rule keeps
+  the scanner category and taxonomy code it has downstream, and a new rule
+  takes the scanner category its ATR category already maps to and inherits
+  that category's default code. It stops instead of guessing when an ATR
+  category maps to more than one scanner category or a new rule's category
+  has no default; `--taxonomy <ATR id>=<code>` supplies the code. The pack
+  description names no benchmark figure. Without `--downstream` the output is
+  unchanged. `tests/cisco-pack-downstream-v2.test.ts` covers the contract.
+
+### Fixed
+
+- **OWASP and MITRE ATLAS references corrected on 108 rules** (#675).
+  `references.owasp_llm`, `references.owasp_agentic` and
+  `references.mitre_atlas` are corrected where a rule named an identifier
+  that does not describe what it detects. No detection, severity, maturity,
+  status, confidence or response field changes. The two crosswalks CI checks
+  against rule metadata are regenerated.
+
+- **OWASP compliance entries aligned with the corrected references on 25
+  rules** (#680). 29 `compliance.owasp_agentic` / `compliance.owasp_llm`
+  entries still named an identifier #675 removed from `references`, which
+  kept it in `docs/OWASP-AGENTIC-MAPPING.md`.
+
+- **`LLM08:2025` used for Excessive Agency replaced on 30 rules** (#684). In
+  the OWASP Top 10 for LLM Applications 2025, LLM08 is Vector and Embedding
+  Weaknesses and Excessive Agency is LLM06. Only `references.owasp_llm` and
+  `compliance.owasp_llm` change; two rules that use LLM08 for its real
+  meaning keep it.
+
+- **Five rules compile under Python `re`.** The Cisco Skill Scanner pack and
+  other Python consumers compile patterns with `re`, which rejects
+  variable-width look-behind and a back-reference to a group that does not
+  exist; such a pattern is skipped and detects nothing there. Twelve
+  conditions in five rules were affected. ATR-2026-00442 and -02100 split a
+  negative look-behind over alternatives of different lengths into one
+  look-behind per alternative. ATR-2026-02300 and -02304 match the
+  `mcpServers` or fetch-verb prefix instead of looking behind for it, which
+  changes the matched span but not whether the condition matches. The fourth
+  condition of ATR-2026-00290, `(?:(?:\w+\s+){40,})\1{3,}`, is removed: its
+  `\1` refers to no group, which JavaScript reads as the character U+0001, so
+  it never matched anything. On every test case and evasion test of the five
+  rules and the text files under `data/` (7,963 samples), the old and new
+  rules match the same samples. `check-python-compat.py` now reports 0
+  uncompilable patterns in the exported pack, down from 12, and
+  ATR-2026-02300 and -02304 profile more than 3x cheaper than their latency
+  baseline (171.6x and 9.2x).
+  Compiling under Python also exposed the ReDoS gate to three of these
+  conditions for the first time, and they backtracked quadratically on a long
+  run of whitespace: ATR-2026-00442#1 on `\s*[:,-]?\s*` and ATR-2026-02300#1
+  and #3 on `:\s*\n\s+`. Both are rewritten to accept the same strings
+  without the ambiguity, `(?:\s*[:,-])?\s*` and `:[^\S\n]*\n\s+`. The
+  five rules' entries in `data/benign-fp-measurement.json` are re-measured
+  because their detection fingerprints changed; their false-positive counts
+  are unchanged.
+
+- **The RAMPART evaluator compiles patterns as SPEC §6.4 says.**
+  `integrations/rampart/src/atr_rules_evaluator.py` compiled each rule's
+  pattern as written with `re.IGNORECASE | re.MULTILINE`, so `^` and `$`
+  matched at every line of a field and the letters of a leading flag group
+  took effect (`(?s)` let `.` match a newline). It now removes one leading
+  `(?imsx)` group and compiles the rest with `re.IGNORECASE` only, as pyATR
+  does. On the rules on main this can change a result only on multi-line
+  input to a rule whose first regex condition, the only one the evaluator
+  reads, contains `^` or `$`; none of those rules' test samples is matched
+  differently by that condition. The evaluator is one of the exports issue
+  #698 lists.
+
+- **The PyRIT digest, the Cisco Skill Scanner pack and the Pipelock bundle
+  now follow SPEC §6.4.** PyRIT's `RegexScorer` and the Cisco scanner
+  compile patterns with Python `re` and no flags, Pipelock with Go RE2, and
+  both honour an inline flag group. The exporters passed each condition's
+  leading group through, so the `(?im)`, `(?si)` and `(?is)` of
+  ATR-2026-00450, -00859 and -00207 were applied. A condition written
+  without `(?i)` was case-sensitive in the Cisco pack, and in the Pipelock
+  bundle's injection rules, which Pipelock releases up to v3.7.0 compile as
+  written; Pipelock adds `(?i)` to DLP and tool-poison rules itself, and the
+  digest already added it. Each pattern is now `(?i)` followed by
+  `regexConditionSpec(value).source`, the pattern the engine compiles; the
+  Pipelock bundle puts one `(?i)` in front of a rule's joined alternatives.
+  Output change on the rules on main: in `data/pyrit-digest.json`, four
+  patterns, of which only ATR-2026-00450#2 matches differently. The digest is
+  also regenerated at main for the first time since 4.0.0, in a commit of its
+  own: 116 new conditions, 5 removed with the deprecated ATR-2026-00233, 121
+  patterns edited in their rules and nine new `condition: all` exclusions.
+  The exporter no longer emits a `case_sensitive` marker, which no rule sets
+  and §6.4 gives no effect. `tests/pyrit-digest.test.ts` checks the
+  transform on fixed inputs and that every committed pattern starts with
+  exactly one `(?i)`; it does not compare the digest with the rules, so a
+  rule edit does not require regenerating it. The Cisco pack changes 1,161
+  of 3,471 patterns in 307 signatures, 1,157 of them because they gain
+  `(?i)`; `--reproduce-vendored` keeps the vendored pack's verbatim
+  patterns, its output is unchanged, and a new test checks that wiring. The
+  Pipelock bundle changes every rule's regex: 814 conditions in 191
+  injection rules become case-insensitive on Pipelock releases up to v3.7.0,
+  and ATR-2026-00450 no longer matches at the start of a second line; the
+  compiler version is now 1.0.1. No pattern starts or stops compiling under
+  Python `re` or Go RE2. Issue #698; `tests/compile-pipelock.test.ts` is new.
+
+- **The rule converters translate regex conditions per SPEC §6.4.**
+  `atr convert generic-regex|splunk|elastic`, the package exports
+  `ruleToSPL()`, `ruleToElastic()`, `convertRule()` and `convertAllRules()`,
+  and the `converters/sage` and `converters/sage-reverse` subpaths each
+  followed a condition's leading flag group instead of SPEC §6.4 (issue
+  #698):
+  - generic-regex copied the group's letters into `flags`, so a condition
+    without `(?i)` exported `flags: ""` (case-sensitive) and `(?im)` or
+    `(?is)` turned on multiline or dotAll in the consumer. `flags` is now
+    always `i`, or `iu` when the pattern needs Unicode mode.
+  - Splunk passed the group to PCRE unchanged, with the same two effects.
+    Every regex now starts with a single `(?i)`.
+  - Elastic put the group into a Lucene `regexp` value, where inline flags do
+    not exist. The value is now the condition without its group;
+    `case_insensitive: true` is unchanged.
+  - Sage exported a rule as case-sensitive unless a group said `(?i)`. Every
+    exported rule now sets `case_insensitive: true`; a condition that depends
+    on the `u` flag, which Sage cannot set, is skipped with a warning; and the
+    "mixes case-sensitive" and "unsupported inline flags" warnings are gone.
+    Importing from Sage (`sage-reverse`) now always writes `(?i)` and warns
+    (`case_sensitivity_lost`) when the Sage rule was case-sensitive.
+
+  The dialect lives in the new dependency-free `src/regex-dialect.ts`
+  (`regexConditionSpec()`, `needsUnicodeFlag()`, `inlineCaseInsensitive()`),
+  so the published `converters/sage` subpath does not load the engine;
+  `src/engine.ts` imports and re-exports it, and the rule-quality and
+  rule-latency gates now also run when it changes. The generic-regex docs no
+  longer show an import path the package does not export.
+
+  Upgrade note: exports regenerated after this change differ from earlier
+  ones. Conditions without a flag group now match case-insensitively, so a
+  SIEM or scanner that loads them can see more matches, and conditions whose
+  group had `s` or `m` no longer let `.` cross a line break or `^` and `$`
+  match inside the field. Generic-regex `flags` can now be `iu`, so a consumer
+  that maps the letters to another regex engine must accept `u`. The Sage
+  export skips conditions that depend on `u`. `ReverseWarning['kind']` gains
+  `case_sensitivity_lost`; TypeScript code that switches over it exhaustively
+  must handle it.
+
 ## [4.2.1] - 2026-10-24
 
 A patch release of rule fixes and one new rule, plus two release-tooling

package/dist/converters/elastic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"elastic.d.ts","sourceRoot":"","sources":["../../src/converters/elastic.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,aAAa,CAAC;AAE9D,UAAU,YAAY;IACpB,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,EAAE;QACL,IAAI,EAAE;YACJ,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;YACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;SAC/B,CAAC;KACH,CAAC;CACH;AA4ED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAkDzD"}
+{"version":3,"file":"elastic.d.ts","sourceRoot":"","sources":["../../src/converters/elastic.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,aAAa,CAAC;AAG9D,UAAU,YAAY;IACpB,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,EAAE;QACL,IAAI,EAAE;YACJ,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;YACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;SAC/B,CAAC;KACH,CAAC;CACH;AAiFD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAkDzD"}

package/dist/converters/elastic.js

@@ -6,6 +6,7 @@
  *
  * @module agent-threat-rules/converters/elastic
  */
+import { regexConditionSpec } from '../regex-dialect.js';
 /**
  * Convert a single ATR array condition to an Elastic Query DSL clause.
  */
@@ -14,10 +15,15 @@ function conditionToElastic(cond) {
     const value = cond.value;
     switch (cond.operator) {
         case 'regex':
+            // Lucene regular expressions have no inline flags, so a leading (?i)
+            // group was never a flag there: Lucene reads it as literal characters
+            // or rejects the query (not tested against a live cluster). Case-insensitivity
+            // comes from case_insensitive below (SPEC §6.4: always), and m, s and x
+            // have no effect in ATR.
             return {
                 regexp: {
                     [field]: {
-                        value: value,
+                        value: regexConditionSpec(value).source,
                         flags: 'ALL',
                         case_insensitive: true,
                     },

package/dist/converters/elastic.js.map

@@ -1 +1 @@
-{"version":3,"file":"elastic.js","sourceRoot":"","sources":["../../src/converters/elastic.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsBH;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAuB;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE;oBACN,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,KAAK;wBACZ,KAAK,EAAE,KAAK;wBACZ,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE;oBACR,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,IAAI,KAAK,GAAG;wBACnB,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE;oBACJ,CAAC,KAAK,CAAC,EAAE,KAAK;iBACf;aACF,CAAC;QAEJ,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE;oBACN,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,KAAK;wBACZ,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAEvD,KAAK,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAEvD,KAAK,KAAK;YACR,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAExD,KAAK,KAAK;YACR,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAExD,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAE9C;YACE,8BAA8B;YAC9B,OAAO;gBACL,QAAQ,EAAE;oBACR,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,IAAI,KAAK,GAAG;wBACnB,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IAEvC,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;QAC5B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;QACnC,eAAe,EAAE,KAAK;KACvB,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,oDAAoD;QACpD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,MAAM,EAAE,EAAE;oBACV,oBAAoB,EAAE,CAAC;iBACxB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,UAAiC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAExD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO;iBACd;aACF;SACF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,OAAO;QACL,KAAK,EAAE,IAAI;QACX,KAAK,EAAE;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO;gBACf,oBAAoB,EAAE,CAAC;aACxB;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"elastic.js","sourceRoot":"","sources":["../../src/converters/elastic.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAoBzD;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAuB;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,qEAAqE;YACrE,sEAAsE;YACtE,+EAA+E;YAC/E,wEAAwE;YACxE,yBAAyB;YACzB,OAAO;gBACL,MAAM,EAAE;oBACN,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM;wBACvC,KAAK,EAAE,KAAK;wBACZ,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE;oBACR,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,IAAI,KAAK,GAAG;wBACnB,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE;oBACJ,CAAC,KAAK,CAAC,EAAE,KAAK;iBACf;aACF,CAAC;QAEJ,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE;oBACN,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,KAAK;wBACZ,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;QAEJ,KAAK,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAEvD,KAAK,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAEvD,KAAK,KAAK;YACR,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAExD,KAAK,KAAK;YACR,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAExD,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAE9C;YACE,8BAA8B;YAC9B,OAAO;gBACL,QAAQ,EAAE;oBACR,CAAC,KAAK,CAAC,EAAE;wBACP,KAAK,EAAE,IAAI,KAAK,GAAG;wBACnB,gBAAgB,EAAE,IAAI;qBACvB;iBACF;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IAEvC,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;QAC5B,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;QACnC,eAAe,EAAE,KAAK;KACvB,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,oDAAoD;QACpD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,MAAM,EAAE,EAAE;oBACV,oBAAoB,EAAE,CAAC;iBACxB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,UAAiC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAExD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO;iBACd;aACF;SACF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,OAAO;QACL,KAAK,EAAE,IAAI;QACX,KAAK,EAAE;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO;gBACf,oBAAoB,EAAE,CAAC;aACxB;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/converters/generic-regex.d.ts

@@ -5,7 +5,11 @@
  * Designed for consumption by any security tool that supports regex matching.
  * Format: JSON array of { id, title, severity, category, patterns[] }
  *
- * Used by: Cisco AI Defense, Microsoft Agent Governance Toolkit, custom integrations.
+ * Each pattern is `{ field, regex, flags, description }` for a consumer that
+ * compiles `new RegExp(regex, flags)`. Per SPEC §6.4, `regex` is the condition
+ * without its leading flag group and `flags` is always `i`, or `iu` when the
+ * pattern needs Unicode mode: every condition matches case-insensitively, and
+ * `m`, `s` and `x` have no effect.
  *
  * @module agent-threat-rules/converters/generic-regex
  */

package/dist/converters/generic-regex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic-regex.d.ts","sourceRoot":"","sources":["../../src/converters/generic-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,aAAa,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAsClE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,gBAAgB,EAAE,CAK1F"}
+{"version":3,"file":"generic-regex.d.ts","sourceRoot":"","sources":["../../src/converters/generic-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGvE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,aAAa,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAkClE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,gBAAgB,EAAE,CAK1F"}

package/dist/converters/generic-regex.js

@@ -5,10 +5,15 @@
  * Designed for consumption by any security tool that supports regex matching.
  * Format: JSON array of { id, title, severity, category, patterns[] }
  *
- * Used by: Cisco AI Defense, Microsoft Agent Governance Toolkit, custom integrations.
+ * Each pattern is `{ field, regex, flags, description }` for a consumer that
+ * compiles `new RegExp(regex, flags)`. Per SPEC §6.4, `regex` is the condition
+ * without its leading flag group and `flags` is always `i`, or `iu` when the
+ * pattern needs Unicode mode: every condition matches case-insensitively, and
+ * `m`, `s` and `x` have no effect.
  *
  * @module agent-threat-rules/converters/generic-regex
  */
+import { regexConditionSpec } from '../regex-dialect.js';
 /**
  * Convert a single ATR rule to generic regex format.
  */
@@ -20,18 +25,14 @@ export function ruleToGenericRegex(rule) {
         : Object.values(rule.detection.conditions);
     for (const condition of conditions) {
         if ('operator' in condition && condition.operator === 'regex' && 'value' in condition && condition.value) {
-            // Extract flags from the regex (e.g. (?i) → 'i')
-            let regex = condition.value;
-            let flags = '';
-            const flagMatch = regex.match(/^\(\?([gimsuy]+)\)/);
-            if (flagMatch) {
-                flags = flagMatch[1];
-                regex = regex.slice(flagMatch[0].length);
-            }
+            // SPEC §6.4. This used to copy the group's letters into `flags`, so a
+            // condition without (?i) exported flags "" (case-sensitive) and (?im) or
+            // (?is) turned on multiline or dotAll in the consumer.
+            const spec = regexConditionSpec(condition.value);
             patterns.push({
                 field: 'field' in condition ? condition.field : 'content',
-                regex,
-                flags,
+                regex: spec.source,
+                flags: spec.flags,
                 description: ('description' in condition ? condition.description : '') ?? '',
             });
         }

package/dist/converters/generic-regex.js.map

@@ -1 +1 @@
-{"version":3,"file":"generic-regex.js","sourceRoot":"","sources":["../../src/converters/generic-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsBH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAE3C,kDAAkD;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU;QAC3B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE7C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACzG,iDAAiD;YACjD,IAAI,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;YAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACpD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;gBACtB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACzD,KAAK;gBACL,KAAK;gBACL,WAAW,EAAE,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;QAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;QACxC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK;QAC3C,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;SACxC,GAAG,CAAC,kBAAkB,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"generic-regex.js","sourceRoot":"","sources":["../../src/converters/generic-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAoBzD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAE3C,kDAAkD;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU;QAC3B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE7C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACzG,sEAAsE;YACtE,yEAAyE;YACzE,uDAAuD;YACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAEjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACzD,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;QAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;QACxC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK;QAC3C,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;SACxC,GAAG,CAAC,kBAAkB,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/converters/sage-reverse.d.ts

@@ -31,7 +31,7 @@ export interface ReverseConvertResult {
 }
 export interface ReverseWarning {
     readonly sageId: string;
-    readonly kind: 'missing_description' | 'missing_test_cases' | 'missing_compliance' | 'missing_references' | 'category_unknown' | 'match_on_ambiguous';
+    readonly kind: 'missing_description' | 'missing_test_cases' | 'missing_compliance' | 'missing_references' | 'category_unknown' | 'match_on_ambiguous' | 'case_sensitivity_lost';
     readonly detail: string;
 }
 /**

package/dist/converters/sage-reverse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sage-reverse.d.ts","sourceRoot":"","sources":["../../src/converters/sage-reverse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EACX,OAAO,EAKP,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,WAAW,CAAC;AAEjF,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EACV,qBAAqB,GACrB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAwFD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAoG9D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC7B,SAAS,EAAE,SAAS,QAAQ,EAAE,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,CAStF"}
+{"version":3,"file":"sage-reverse.d.ts","sourceRoot":"","sources":["../../src/converters/sage-reverse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EACX,OAAO,EAKP,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,WAAW,CAAC;AAEjF,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EACV,qBAAqB,GACrB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAwFD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CA0G9D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC7B,SAAS,EAAE,SAAS,QAAQ,EAAE,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,CAStF"}

package/dist/converters/sage-reverse.js

@@ -132,14 +132,19 @@ export function sageToAtr(sage) {
             detail: `Multi-channel match_on=${matchOnList.join(',')} expanded to ${matchOnList.length} ATR conditions`,
         });
     }
-    // Build conditions. If Sage rule has case_insensitive: true, wrap the
-    // regex with (?i) prefix so the ATR rule preserves case-insensitive
-    // semantics when run on an ATR engine.
-    const regexValue = sage.case_insensitive
-        ? sage.pattern.startsWith('(?i)')
-            ? sage.pattern
-            : `(?i)${sage.pattern}`
-        : sage.pattern;
+    // Build conditions. An ATR engine matches every regex condition
+    // case-insensitively, whatever the pattern says (SPEC §6.4), so the
+    // condition always gets (?i) and reads the way it behaves. A case-sensitive
+    // Sage rule cannot keep that distinction in ATR; say so instead of
+    // importing a pattern that only looks case-sensitive.
+    const regexValue = sage.pattern.startsWith('(?i)') ? sage.pattern : `(?i)${sage.pattern}`;
+    if (!sage.case_insensitive) {
+        warnings.push({
+            sageId: sage.id,
+            kind: 'case_sensitivity_lost',
+            detail: 'Sage rule is case-sensitive; ATR matches every regex condition case-insensitively (SPEC §6.4), so the imported rule can match more inputs',
+        });
+    }
     const conditions = matchOnList.map((m) => ({
         field: reverseMatchOn(m),
         operator: 'regex',

package/dist/converters/sage-reverse.js.map

@@ -1 +1 @@
-{"version":3,"file":"sage-reverse.js","sourceRoot":"","sources":["../../src/converters/sage-reverse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA4BH,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAA0C,MAAM,CAAC,MAAM,CAAC;IACjF,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,gBAAgB;IAC/B,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,gBAAgB,EAAE,kBAAkB;CACpC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAgD,MAAM,CAAC,MAAM,CAAC;IACvF,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAgB;IACtC,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,kBAAkB;YACtB,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9B,KAAK,KAAK;YACT,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,WAAwB;IAC/C,QAAQ,WAAW,EAAE,CAAC;QACrB,KAAK,KAAK;YACT,OAAO,KAAK,CAAC;QACd,KAAK,SAAS;YACb,OAAO,WAAW,CAAC;QACpB,KAAK,WAAW;YACf,OAAO,WAAW,CAAC;QACpB,KAAK,SAAS;YACb,OAAO,SAAS,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,WAAW,CAAC;IACrB,CAAC;AACF,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,6BAA6B,CAAC,CAAS;IAC/C,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACvC,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,OAAO,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAc;IACvC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,uCAAuC;IACvC,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,kBAAkB,IAAI,CAAC,QAAQ,gFAAgF;SACvH,CAAC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,kBAAkB;IAClB,MAAM,WAAW,GAAkB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9D,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,0BAA0B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,WAAW,CAAC,MAAM,iBAAiB;SAC1G,CAAC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,uCAAuC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB;QACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAEhB,MAAM,UAAU,GAAwB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QACxB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2BAA2B,IAAI,CAAC,EAAE,EAAE;KACjD,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,sEAAsE;KAC9E,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,wFAAwF;KAChG,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,0FAA0F;KAClG,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,8EAA8E;KACtF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAEzI,MAAM,IAAI,GAAY;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,qCAAqC;QACtD,WAAW,EACV,0GAA0G;YAC1G,iEAAiE,IAAI,CAAC,EAAE,GAAG;YAC3E,IAAI,IAAI,CAAC,YAAY,IAAI,iBAAiB,IAAI;QAC/C,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,OAAO;QACb,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7C,IAAI,EAAE;YACL,QAAQ,EAAE,WAAW,IAAI,kBAAkB;YAC3C,UAAU,EAAE,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC;SAC1D;QACD,YAAY,EAAE;YACb,IAAI,EAAE,WAAW;SACjB;QACD,SAAS,EAAE;YACV,UAAU;YACV,SAAS,EAAE,KAAK;SAChB;QACD,QAAQ,EAAE;YACT,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;SACnC;QACD,iEAAiE;QACjE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;KAC7C,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC7B,SAA8B;IAE9B,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"sage-reverse.js","sourceRoot":"","sources":["../../src/converters/sage-reverse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA6BH,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAA0C,MAAM,CAAC,MAAM,CAAC;IACjF,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,gBAAgB;IAC/B,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,gBAAgB,EAAE,kBAAkB;CACpC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAgD,MAAM,CAAC,MAAM,CAAC;IACvF,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAgB;IACtC,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,kBAAkB;YACtB,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9B,KAAK,KAAK;YACT,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,WAAwB;IAC/C,QAAQ,WAAW,EAAE,CAAC;QACrB,KAAK,KAAK;YACT,OAAO,KAAK,CAAC;QACd,KAAK,SAAS;YACb,OAAO,WAAW,CAAC;QACpB,KAAK,WAAW;YACf,OAAO,WAAW,CAAC;QACpB,KAAK,SAAS;YACb,OAAO,SAAS,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,WAAW,CAAC;IACrB,CAAC;AACF,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,6BAA6B,CAAC,CAAS;IAC/C,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACvC,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,OAAO,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAc;IACvC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,uCAAuC;IACvC,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,kBAAkB,IAAI,CAAC,QAAQ,gFAAgF;SACvH,CAAC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,kBAAkB;IAClB,MAAM,WAAW,GAAkB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9D,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,0BAA0B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,WAAW,CAAC,MAAM,iBAAiB;SAC1G,CAAC,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,oEAAoE;IACpE,4EAA4E;IAC5E,mEAAmE;IACnE,sDAAsD;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACL,2IAA2I;SAC5I,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAwB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QACxB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2BAA2B,IAAI,CAAC,EAAE,EAAE;KACjD,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,sEAAsE;KAC9E,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,wFAAwF;KAChG,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,0FAA0F;KAClG,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,8EAA8E;KACtF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAEzI,MAAM,IAAI,GAAY;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,qCAAqC;QACtD,WAAW,EACV,0GAA0G;YAC1G,iEAAiE,IAAI,CAAC,EAAE,GAAG;YAC3E,IAAI,IAAI,CAAC,YAAY,IAAI,iBAAiB,IAAI;QAC/C,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,OAAO;QACb,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7C,IAAI,EAAE;YACL,QAAQ,EAAE,WAAW,IAAI,kBAAkB;YAC3C,UAAU,EAAE,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC;SAC1D;QACD,YAAY,EAAE;YACb,IAAI,EAAE,WAAW;SACjB;QACD,SAAS,EAAE;YACV,UAAU;YACV,SAAS,EAAE,KAAK;SAChB;QACD,QAAQ,EAAE;YACT,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;SACnC;QACD,iEAAiE;QACjE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;KAC7C,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC7B,SAA8B;IAE9B,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC"}

package/dist/converters/sage.d.ts

@@ -16,17 +16,18 @@
  *   corpus.
  * - ATR `response.actions` (10 values) collapse to Sage `action` (3
  *   values: block / require_approval / log) by strongest-wins semantics.
- * - ATR `(?i)` inline flag (PCRE) is extracted into Sage's rule-level
- *   `case_insensitive: true` because the Sage runtime regex compiler is
- *   JavaScript and does not support inline flag groups.
+ * - SPEC §6.4: every ATR regex condition matches case-insensitively, so the
+ *   leading flag group is removed and every Sage rule sets
+ *   `case_insensitive: true`. The Sage runtime compiles patterns as JavaScript
+ *   `RegExp` with only the `i` flag, so a condition that depends on the `u`
+ *   flag is skipped (sagePatternOf).
  * - ATR `detection_tier: semantic` rules are SKIPPED — they require LLM
  *   evaluation, not deterministic regex.
  * - License: ATR rules are MIT; Sage's `threats/*.yaml` are DRL 1.1. Per-rule
  *   comment in the output preserves upstream attribution per both licenses.
  *
- * Used by: scripts/sync-with-atr.ts (Sage maintainers can run this script
- * to regenerate threats/agent-layer.yaml from a pinned ATR version), and
- * by any downstream tool that consumes ATR but wants Sage-flavoured output.
+ * Used by scripts/export-sage.ts, and by any downstream tool that consumes
+ * ATR but wants Sage-flavoured output.
  *
  * @module agent-threat-rules/converters/sage
  */
@@ -90,8 +91,7 @@ export declare class SageIdAllocator {
  * (user_input or tool_response or content), producing 1 Sage rule each.
  *
  * Lossy spots (documented in the bridge research memo):
- * - Multi-condition rules with mixed case-sensitivity → whole rule becomes
- *   case-insensitive
+ * - Conditions that depend on the `u` flag → skipped (sagePatternOf)
  * - `condition: all` semantics → ignored; alternation always treats as OR
  * - `response.actions` reduced to strongest single action
  * - All compliance/metadata fields (eu_ai_act, mitre_atlas, references, etc.)

package/dist/converters/sage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sage.d.ts","sourceRoot":"","sources":["../../src/converters/sage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EACX,OAAO,EAIP,MAAM,aAAa,CAAC;AAIrB,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,kBAAkB,GAAG,KAAK,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjF,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,6HAA6H;IAC7H,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EACV,uBAAuB,GACvB,4BAA4B,GAC5B,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,2BAA2B,GAC3B,oBAAoB,GACpB,sBAAsB,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD;AAmOD;;;;;;;;;GASG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAA6B;IAE7C;;;;OAIG;gBACS,eAAe,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IAMlE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;CAQvE;AAkLD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CACxB,GAAG,EAAE,OAAO,EACZ,WAAW,GAAE,eAAuC,GAClD,aAAa,CAuHf;AAuGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,eAAe,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACpD,aAAa,CAUf;AAID;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM,CAElE"}
+{"version":3,"file":"sage.d.ts","sourceRoot":"","sources":["../../src/converters/sage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EACX,OAAO,EAIP,MAAM,aAAa,CAAC;AAIrB,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,kBAAkB,GAAG,KAAK,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjF,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,6HAA6H;IAC7H,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EACV,uBAAuB,GACvB,4BAA4B,GAC5B,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,2BAA2B,GAC3B,oBAAoB,GACpB,sBAAsB,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD;AAkRD;;;;;;;;;GASG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAA6B;IAE7C;;;;OAIG;gBACS,eAAe,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IAMlE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;CAQvE;AAyJD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CACxB,GAAG,EAAE,OAAO,EACZ,WAAW,GAAE,eAAuC,GAClD,aAAa,CAyHf;AAoGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,eAAe,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACpD,aAAa,CAUf;AAID;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM,CAElE"}