erosolar-cli 1.7.195 → 1.7.197

package/dist/security/research/persistenceResearch.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Persistence Research Engine
+ *
+ * Comprehensive analysis of persistence mechanisms across different platforms
+ * for legitimate security research and testing.
+ *
+ * This engine provides:
+ * - Multi-platform persistence technique analysis
+ * - Stealth and complexity assessment
+ * - Detection method generation
+ * - Countermeasure recommendations
+ *
+ * LEGAL NOTICE:
+ * For authorized security research, penetration testing, and red team exercises only.
+ */
+export interface PersistenceAnalysisRequest {
+    platform: string;
+    stealthLevel?: number;
+    includeDetection?: boolean;
+}
+export interface PersistenceAnalysisResult {
+    platform: string;
+    stealthLevel: number;
+    includeDetection: boolean;
+    techniques: PersistenceTechnique[];
+    summary: {
+        totalTechniques: number;
+        averageStealth: number;
+        riskLevel: string;
+    };
+}
+export interface PersistenceTechnique {
+    id: string;
+    name: string;
+    platform: string;
+    stealth: number;
+    complexity: 'low' | 'medium' | 'high' | 'advanced';
+    detectionDifficulty: 'easy' | 'medium' | 'hard' | 'very-hard';
+    mitreIds: string[];
+    description: string;
+    implementation: string[];
+    detectionMethods: string[];
+    countermeasures: string[];
+    indicators: string[];
+    tools: string[];
+}
+export interface DetectionGenerationRequest {
+    techniqueId: string;
+    platform?: string;
+}
+export interface DetectionGenerationResult {
+    techniqueId: string;
+    platform?: string;
+    detectionMethods: string[];
+    indicators: string[];
+    monitoringRecommendations: string[];
+}
+/**
+ * Persistence Research Engine
+ */
+export declare class PersistenceResearchEngine {
+    private techniques;
+    constructor();
+    /**
+     * Analyze persistence techniques for a specific platform
+     */
+    analyzePersistence(request: PersistenceAnalysisRequest): Promise<PersistenceAnalysisResult>;
+    /**
+     * Generate detection methods for a specific persistence technique
+     */
+    generateDetectionMethods(request: DetectionGenerationRequest): Promise<DetectionGenerationResult>;
+    /**
+     * Get all available platforms
+     */
+    getAvailablePlatforms(): string[];
+    /**
+     * Get technique by ID
+     */
+    getTechnique(techniqueId: string): PersistenceTechnique | undefined;
+    /**
+     * Calculate risk level based on techniques
+     */
+    private calculateRiskLevel;
+    /**
+     * Generate monitoring recommendations
+     */
+    private generateMonitoringRecommendations;
+    /**
+     * Initialize persistence techniques database
+     */
+    private initializeTechniques;
+    /**
+     * Add technique to database
+     */
+    private addTechnique;
+}
+//# sourceMappingURL=persistenceResearch.d.ts.map

package/dist/security/research/persistenceResearch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistenceResearch.d.ts","sourceRoot":"","sources":["../../../src/security/research/persistenceResearch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACnC,OAAO,EAAE;QACP,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACnD,mBAAmB,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IAC9D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yBAAyB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,UAAU,CAAoC;;IAOtD;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAwBjG;;OAEG;IACG,wBAAwB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgBvG;;OAEG;IACH,qBAAqB,IAAI,MAAM,EAAE;IAQjC;;OAEG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAInE;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,iCAAiC;IAoCzC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuK5B;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB"}

package/dist/security/research/persistenceResearch.js

@@ -0,0 +1,282 @@
+/**
+ * Persistence Research Engine
+ *
+ * Comprehensive analysis of persistence mechanisms across different platforms
+ * for legitimate security research and testing.
+ *
+ * This engine provides:
+ * - Multi-platform persistence technique analysis
+ * - Stealth and complexity assessment
+ * - Detection method generation
+ * - Countermeasure recommendations
+ *
+ * LEGAL NOTICE:
+ * For authorized security research, penetration testing, and red team exercises only.
+ */
+/**
+ * Persistence Research Engine
+ */
+export class PersistenceResearchEngine {
+    techniques;
+    constructor() {
+        this.techniques = new Map();
+        this.initializeTechniques();
+    }
+    /**
+     * Analyze persistence techniques for a specific platform
+     */
+    async analyzePersistence(request) {
+        const filteredTechniques = Array.from(this.techniques.values())
+            .filter(tech => tech.platform === request.platform || request.platform === 'multi-platform')
+            .filter(tech => tech.stealth >= (request.stealthLevel || 1));
+        const averageStealth = filteredTechniques.length > 0
+            ? filteredTechniques.reduce((sum, tech) => sum + tech.stealth, 0) / filteredTechniques.length
+            : 0;
+        const riskLevel = this.calculateRiskLevel(filteredTechniques);
+        return {
+            platform: request.platform,
+            stealthLevel: request.stealthLevel || 1,
+            includeDetection: request.includeDetection || false,
+            techniques: filteredTechniques,
+            summary: {
+                totalTechniques: filteredTechniques.length,
+                averageStealth,
+                riskLevel
+            }
+        };
+    }
+    /**
+     * Generate detection methods for a specific persistence technique
+     */
+    async generateDetectionMethods(request) {
+        const technique = this.techniques.get(request.techniqueId);
+        if (!technique) {
+            throw new Error(`Persistence technique not found: ${request.techniqueId}`);
+        }
+        return {
+            techniqueId: request.techniqueId,
+            platform: request.platform,
+            detectionMethods: technique.detectionMethods,
+            indicators: technique.indicators,
+            monitoringRecommendations: this.generateMonitoringRecommendations(technique)
+        };
+    }
+    /**
+     * Get all available platforms
+     */
+    getAvailablePlatforms() {
+        const platforms = new Set();
+        for (const technique of this.techniques.values()) {
+            platforms.add(technique.platform);
+        }
+        return Array.from(platforms);
+    }
+    /**
+     * Get technique by ID
+     */
+    getTechnique(techniqueId) {
+        return this.techniques.get(techniqueId);
+    }
+    /**
+     * Calculate risk level based on techniques
+     */
+    calculateRiskLevel(techniques) {
+        if (techniques.length === 0)
+            return 'low';
+        const highRiskCount = techniques.filter(t => t.stealth >= 4 || t.detectionDifficulty === 'very-hard').length;
+        const riskRatio = highRiskCount / techniques.length;
+        if (riskRatio >= 0.5)
+            return 'high';
+        if (riskRatio >= 0.2)
+            return 'medium';
+        return 'low';
+    }
+    /**
+     * Generate monitoring recommendations
+     */
+    generateMonitoringRecommendations(technique) {
+        const recommendations = [];
+        if (technique.platform.includes('windows')) {
+            recommendations.push('Enable Windows Event Log monitoring', 'Monitor registry changes', 'Track service creation and modifications');
+        }
+        if (technique.platform.includes('aws') || technique.platform.includes('azure') || technique.platform.includes('gcp')) {
+            recommendations.push('Enable cloud audit logging', 'Monitor IAM role and policy changes', 'Track API key creation and usage');
+        }
+        if (technique.platform.includes('kubernetes') || technique.platform.includes('docker')) {
+            recommendations.push('Monitor container deployments', 'Track image registry changes', 'Audit cluster configuration modifications');
+        }
+        recommendations.push('Implement behavioral analytics', 'Enable real-time alerting', 'Conduct regular security assessments');
+        return recommendations;
+    }
+    /**
+     * Initialize persistence techniques database
+     */
+    initializeTechniques() {
+        // Windows persistence techniques
+        this.addTechnique({
+            id: 'win-registry-run',
+            name: 'Registry Run Keys',
+            platform: 'windows',
+            stealth: 3,
+            complexity: 'medium',
+            detectionDifficulty: 'medium',
+            mitreIds: ['T1547.001'],
+            description: 'Malware adds entries to registry run keys to execute on system startup',
+            implementation: [
+                'Add entry to HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run',
+                'Add entry to HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run',
+                'Use registry run once keys for single execution'
+            ],
+            detectionMethods: [
+                'Monitor registry changes in run keys',
+                'Check for suspicious executable paths',
+                'Analyze registry modification events'
+            ],
+            countermeasures: [
+                'Remove suspicious registry entries',
+                'Implement application whitelisting',
+                'Monitor registry modifications'
+            ],
+            indicators: [
+                'Unexpected registry modifications',
+                'Suspicious executable paths in run keys',
+                'Registry modification events from unusual processes'
+            ],
+            tools: ['Regedit', 'Autoruns', 'Sysinternals Suite']
+        });
+        this.addTechnique({
+            id: 'win-scheduled-tasks',
+            name: 'Scheduled Tasks',
+            platform: 'windows',
+            stealth: 2,
+            complexity: 'low',
+            detectionDifficulty: 'easy',
+            mitreIds: ['T1053.005'],
+            description: 'Creates scheduled tasks to execute malicious code at specific times or events',
+            implementation: [
+                'Create scheduled task using schtasks command',
+                'Use Task Scheduler GUI',
+                'Create tasks with specific triggers and actions'
+            ],
+            detectionMethods: [
+                'Review scheduled tasks using schtasks',
+                'Monitor Task Scheduler service events',
+                'Check for tasks with suspicious actions'
+            ],
+            countermeasures: [
+                'Delete malicious scheduled tasks',
+                'Monitor Task Scheduler service',
+                'Implement application whitelisting'
+            ],
+            indicators: [
+                'New scheduled task creations',
+                'Tasks with suspicious executable paths',
+                'Unusual task triggers or actions'
+            ],
+            tools: ['Schtasks', 'Task Scheduler', 'PowerShell']
+        });
+        // Cloud persistence techniques
+        this.addTechnique({
+            id: 'aws-iam-backdoor',
+            name: 'AWS IAM Role Backdoor',
+            platform: 'aws',
+            stealth: 4,
+            complexity: 'high',
+            detectionDifficulty: 'hard',
+            mitreIds: ['T1078.004'],
+            description: 'Creates or modifies IAM roles with external entity trust for persistence',
+            implementation: [
+                'Create IAM role with external IDP trust',
+                'Modify existing role trust policy',
+                'Add cross-account access with broad permissions'
+            ],
+            detectionMethods: [
+                'Monitor CloudTrail for role modifications',
+                'Analyze IAM role trust policies',
+                'Check for external entity trusts'
+            ],
+            countermeasures: [
+                'Implement least privilege for IAM roles',
+                'Monitor for external trust modifications',
+                'Use AWS Organizations SCPs'
+            ],
+            indicators: [
+                'IAM role policy modifications',
+                'New external identity provider trusts',
+                'Cross-account role assumptions'
+            ],
+            tools: ['AWS CLI', 'Pacu', 'CloudSploit']
+        });
+        this.addTechnique({
+            id: 'azure-app-backdoor',
+            name: 'Azure AD Application Backdoor',
+            platform: 'azure',
+            stealth: 4,
+            complexity: 'medium',
+            detectionDifficulty: 'hard',
+            mitreIds: ['T1098.001'],
+            description: 'Registers malicious Azure AD application with high privilege permissions',
+            implementation: [
+                'Register new Azure AD application',
+                'Grant high privilege permissions',
+                'Create application secret or certificate'
+            ],
+            detectionMethods: [
+                'Monitor Azure AD audit logs for app registrations',
+                'Check for applications with high privilege permissions',
+                'Analyze application consent grants'
+            ],
+            countermeasures: [
+                'Implement application governance policies',
+                'Require admin consent for high privilege apps',
+                'Regular review of registered applications'
+            ],
+            indicators: [
+                'New application registrations with high privileges',
+                'Application consent grants',
+                'Application secret/certificate creation'
+            ],
+            tools: ['Azure PowerShell', 'Microsoft Graph API', 'Stormspotter']
+        });
+        // Container persistence techniques
+        this.addTechnique({
+            id: 'k8s-daemonset',
+            name: 'Kubernetes Malicious DaemonSet',
+            platform: 'kubernetes',
+            stealth: 4,
+            complexity: 'high',
+            detectionDifficulty: 'hard',
+            mitreIds: ['T1053.003'],
+            description: 'Deploys malicious DaemonSet that runs on every cluster node',
+            implementation: [
+                'Create DaemonSet with privileged container',
+                'Mount host directories for persistence',
+                'Use sidecar containers for covert communication'
+            ],
+            detectionMethods: [
+                'Monitor for DaemonSet creations/modifications',
+                'Check for privileged container deployments',
+                'Analyze container security contexts'
+            ],
+            countermeasures: [
+                'Implement Pod Security Standards',
+                'Use admission controllers (OPA Gatekeeper)',
+                'Monitor for privileged container deployments'
+            ],
+            indicators: [
+                'New DaemonSet deployments',
+                'Containers with privileged security context',
+                'Host path mounts in containers'
+            ],
+            tools: ['kubectl', 'kubeaudit', 'kube-hunter']
+        });
+        // Add more techniques as needed...
+    }
+    /**
+     * Add technique to database
+     */
+    addTechnique(technique) {
+        this.techniques.set(technique.id, technique);
+    }
+}
+//# sourceMappingURL=persistenceResearch.js.map

package/dist/security/research/persistenceResearch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistenceResearch.js","sourceRoot":"","sources":["../../../src/security/research/persistenceResearch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiDH;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,UAAU,CAAoC;IAEtD;QACE,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAmC;QAC1D,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,CAAC;aAC3F,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;QAE/D,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAClD,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM;YAC7F,CAAC,CAAC,CAAC,CAAC;QAEN,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAE9D,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YACvC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;YACnD,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE;gBACP,eAAe,EAAE,kBAAkB,CAAC,MAAM;gBAC1C,cAAc;gBACd,SAAS;aACV;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,OAAmC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,yBAAyB,EAAE,IAAI,CAAC,iCAAiC,CAAC,SAAS,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,UAAkC;QAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1C,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1C,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,mBAAmB,KAAK,WAAW,CACxD,CAAC,MAAM,CAAC;QAET,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;QAEpD,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC;QACpC,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,iCAAiC,CAAC,SAA+B;QACvE,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,eAAe,CAAC,IAAI,CAClB,qCAAqC,EACrC,0BAA0B,EAC1B,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrH,eAAe,CAAC,IAAI,CAClB,4BAA4B,EAC5B,qCAAqC,EACrC,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,eAAe,CAAC,IAAI,CAClB,+BAA+B,EAC/B,8BAA8B,EAC9B,2CAA2C,CAC5C,CAAC;QACJ,CAAC;QAED,eAAe,CAAC,IAAI,CAClB,gCAAgC,EAChC,2BAA2B,EAC3B,sCAAsC,CACvC,CAAC;QAEF,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,iCAAiC;QACjC,IAAI,CAAC,YAAY,CAAC;YAChB,EAAE,EAAE,kBAAkB;YACtB,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,QAAQ;YACpB,mBAAmB,EAAE,QAAQ;YAC7B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,wEAAwE;YACrF,cAAc,EAAE;gBACd,mFAAmF;gBACnF,oFAAoF;gBACpF,iDAAiD;aAClD;YACD,gBAAgB,EAAE;gBAChB,sCAAsC;gBACtC,uCAAuC;gBACvC,sCAAsC;aACvC;YACD,eAAe,EAAE;gBACf,oCAAoC;gBACpC,oCAAoC;gBACpC,gCAAgC;aACjC;YACD,UAAU,EAAE;gBACV,mCAAmC;gBACnC,yCAAyC;gBACzC,qDAAqD;aACtD;YACD,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,oBAAoB,CAAC;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC;YAChB,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,KAAK;YACjB,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,+EAA+E;YAC5F,cAAc,EAAE;gBACd,8CAA8C;gBAC9C,wBAAwB;gBACxB,iDAAiD;aAClD;YACD,gBAAgB,EAAE;gBAChB,uCAAuC;gBACvC,uCAAuC;gBACvC,yCAAyC;aAC1C;YACD,eAAe,EAAE;gBACf,kCAAkC;gBAClC,gCAAgC;gBAChC,oCAAoC;aACrC;YACD,UAAU,EAAE;gBACV,8BAA8B;gBAC9B,wCAAwC;gBACxC,kCAAkC;aACnC;YACD,KAAK,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,YAAY,CAAC;SACpD,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,YAAY,CAAC;YAChB,EAAE,EAAE,kBAAkB;YACtB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,0EAA0E;YACvF,cAAc,EAAE;gBACd,yCAAyC;gBACzC,mCAAmC;gBACnC,iDAAiD;aAClD;YACD,gBAAgB,EAAE;gBAChB,2CAA2C;gBAC3C,iCAAiC;gBACjC,kCAAkC;aACnC;YACD,eAAe,EAAE;gBACf,yCAAyC;gBACzC,0CAA0C;gBAC1C,4BAA4B;aAC7B;YACD,UAAU,EAAE;gBACV,+BAA+B;gBAC/B,uCAAuC;gBACvC,gCAAgC;aACjC;YACD,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC;YAChB,EAAE,EAAE,oBAAoB;YACxB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,QAAQ;YACpB,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,0EAA0E;YACvF,cAAc,EAAE;gBACd,mCAAmC;gBACnC,kCAAkC;gBAClC,0CAA0C;aAC3C;YACD,gBAAgB,EAAE;gBAChB,mDAAmD;gBACnD,wDAAwD;gBACxD,oCAAoC;aACrC;YACD,eAAe,EAAE;gBACf,2CAA2C;gBAC3C,+CAA+C;gBAC/C,2CAA2C;aAC5C;YACD,UAAU,EAAE;gBACV,oDAAoD;gBACpD,4BAA4B;gBAC5B,yCAAyC;aAC1C;YACD,KAAK,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,cAAc,CAAC;SACnE,CAAC,CAAC;QAEH,mCAAmC;QACnC,IAAI,CAAC,YAAY,CAAC;YAChB,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,6DAA6D;YAC1E,cAAc,EAAE;gBACd,4CAA4C;gBAC5C,wCAAwC;gBACxC,iDAAiD;aAClD;YACD,gBAAgB,EAAE;gBAChB,+CAA+C;gBAC/C,4CAA4C;gBAC5C,qCAAqC;aACtC;YACD,eAAe,EAAE;gBACf,kCAAkC;gBAClC,4CAA4C;gBAC5C,8CAA8C;aAC/C;YACD,UAAU,EAAE;gBACV,2BAA2B;gBAC3B,6CAA6C;gBAC7C,gCAAgC;aACjC;YACD,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;SAC/C,CAAC,CAAC;QAEH,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,SAA+B;QAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/security/security-integration.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Security Integration Module
+ *
+ * Integrates active stack security with the existing Erosolar CLI tool runtime.
+ * Provides hooks for security validation and monitoring.
+ *
+ * @license MIT
+ * @author Bo Shang
+ */
+import { type ToolSecurityWrapper } from './tool-security-wrapper.js';
+import { type SecurityEvent } from './active-stack-security.js';
+export interface SecurityIntegrationConfig {
+    /** Enable security validation */
+    enabled: boolean;
+    /** Log security events */
+    logging: boolean;
+    /** Block unauthorized operations */
+    blockUnauthorized: boolean;
+    /** Security event handlers */
+    eventHandlers?: {
+        onSecurityEvent?: (event: SecurityEvent) => void;
+        onBlockedOperation?: (event: SecurityEvent) => void;
+    };
+}
+export declare class SecurityIntegration {
+    private config;
+    private secureToolRuntime;
+    constructor(config: SecurityIntegrationConfig);
+    /**
+     * Initialize security integration
+     */
+    initialize(): void;
+    /**
+     * Get secure tool runtime
+     */
+    getSecureToolRuntime(): ToolSecurityWrapper | null;
+    /**
+     * Execute tool with security validation
+     */
+    executeTool(toolName: string, args: Record<string, unknown>): Promise<unknown>;
+    /**
+     * Get security status
+     */
+    getSecurityStatus(): {
+        enabled: boolean;
+        logging: boolean;
+        blockedOperations: number;
+        lastEvent: SecurityEvent | null;
+        summary: {
+            totalEvents: number;
+            criticalEvents: number;
+            highEvents: number;
+            mediumEvents: number;
+        };
+    };
+    /**
+     * Clear security log
+     */
+    clearSecurityLog(): void;
+    /**
+     * Generate security report
+     */
+    generateSecurityReport(): string;
+    private setupEventHandlers;
+}
+/**
+ * Global security integration instance
+ */
+export declare const securityIntegration: SecurityIntegration;
+/**
+ * Initialize security integration
+ */
+export declare function initializeSecurityIntegration(): void;
+//# sourceMappingURL=security-integration.d.ts.map

package/dist/security/security-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-integration.d.ts","sourceRoot":"","sources":["../../src/security/security-integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,0BAA0B;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,8BAA8B;IAC9B,aAAa,CAAC,EAAE;QACd,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;QACjD,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;KACrD,CAAC;CACH;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,iBAAiB,CAAoC;gBAEjD,MAAM,EAAE,yBAAyB;IAI7C;;OAEG;IACH,UAAU,IAAI,IAAI;IAelB;;OAEG;IACH,oBAAoB,IAAI,mBAAmB,GAAG,IAAI;IAIlD;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAQpF;;OAEG;IACH,iBAAiB;;;;;;;;;;;;IAgBjB;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB;;OAEG;IACH,sBAAsB,IAAI,MAAM;IA2ChC,OAAO,CAAC,kBAAkB;CAQ3B;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,qBAI9B,CAAC;AAEH;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD"}

package/dist/security/security-integration.js

@@ -0,0 +1,137 @@
+/**
+ * Security Integration Module
+ *
+ * Integrates active stack security with the existing Erosolar CLI tool runtime.
+ * Provides hooks for security validation and monitoring.
+ *
+ * @license MIT
+ * @author Bo Shang
+ */
+import { createSecureToolRuntime } from './tool-security-wrapper.js';
+import { activeStackSecurity } from './active-stack-security.js';
+export class SecurityIntegration {
+    config;
+    secureToolRuntime = null;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Initialize security integration
+     */
+    initialize() {
+        if (!this.config.enabled) {
+            return;
+        }
+        this.secureToolRuntime = createSecureToolRuntime();
+        // Set up security event handlers
+        if (this.config.eventHandlers) {
+            this.setupEventHandlers();
+        }
+        console.log('🔒 Security Integration: Active Stack Security enabled');
+    }
+    /**
+     * Get secure tool runtime
+     */
+    getSecureToolRuntime() {
+        return this.secureToolRuntime;
+    }
+    /**
+     * Execute tool with security validation
+     */
+    async executeTool(toolName, args) {
+        if (!this.secureToolRuntime) {
+            throw new Error('Security integration not initialized');
+        }
+        return await this.secureToolRuntime.executeTool(toolName, args);
+    }
+    /**
+     * Get security status
+     */
+    getSecurityStatus() {
+        const securityLog = activeStackSecurity.getSecurityLog();
+        return {
+            enabled: this.config.enabled,
+            logging: this.config.logging,
+            blockedOperations: securityLog.length,
+            lastEvent: securityLog[securityLog.length - 1] || null,
+            summary: {
+                totalEvents: securityLog.length,
+                criticalEvents: securityLog.filter(e => e.severity === 'critical').length,
+                highEvents: securityLog.filter(e => e.severity === 'high').length,
+                mediumEvents: securityLog.filter(e => e.severity === 'medium').length,
+            }
+        };
+    }
+    /**
+     * Clear security log
+     */
+    clearSecurityLog() {
+        activeStackSecurity.clearSecurityLog();
+    }
+    /**
+     * Generate security report
+     */
+    generateSecurityReport() {
+        const status = this.getSecurityStatus();
+        const report = [
+            '🔒 Erosolar CLI Security Report',
+            '================================',
+            `Status: ${status.enabled ? 'ENABLED' : 'DISABLED'}`,
+            `Security Logging: ${status.logging ? 'ENABLED' : 'DISABLED'}`,
+            `Blocked Operations: ${status.blockedOperations}`,
+            '',
+            '📊 Security Events Summary:',
+            `  Total Events: ${status.summary.totalEvents}`,
+            `  Critical: ${status.summary.criticalEvents}`,
+            `  High: ${status.summary.highEvents}`,
+            `  Medium: ${status.summary.mediumEvents}`,
+            '',
+            '🔒 Active Stack Security Rules:',
+            '  - File operations restricted to current workspace',
+            '  - System file access blocked',
+            '  - Dangerous commands blocked',
+            '  - Unauthorized networking blocked',
+            '  - Suspicious patterns detected and logged',
+            '',
+            '📋 Scope Validation:',
+            '  - Current working directory only',
+            '  - No external file system access',
+            '  - No system directory access',
+            '  - No privileged operations',
+        ];
+        if (status.lastEvent) {
+            report.push('', '📝 Last Security Event:');
+            report.push(`  Type: ${status.lastEvent.type}`);
+            report.push(`  Severity: ${status.lastEvent.severity}`);
+            report.push(`  Operation: ${status.lastEvent.operation}`);
+            report.push(`  Reason: ${status.lastEvent.reason}`);
+            if (status.lastEvent.filePath) {
+                report.push(`  File: ${status.lastEvent.filePath}`);
+            }
+        }
+        return report.join('\n');
+    }
+    setupEventHandlers() {
+        // This would be called when security events occur
+        // For now, we'll just log to console if logging is enabled
+        if (this.config.logging) {
+            // We could implement real event handlers here
+            // Currently, events are logged directly in the security modules
+        }
+    }
+}
+/**
+ * Global security integration instance
+ */
+export const securityIntegration = new SecurityIntegration({
+    enabled: true,
+    logging: true,
+    blockUnauthorized: true,
+});
+/**
+ * Initialize security integration
+ */
+export function initializeSecurityIntegration() {
+    securityIntegration.initialize();
+}
+//# sourceMappingURL=security-integration.js.map

package/dist/security/security-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-integration.js","sourceRoot":"","sources":["../../src/security/security-integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,uBAAuB,EAA4B,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAsB,MAAM,4BAA4B,CAAC;AAgBrF,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAA4B;IAClC,iBAAiB,GAA+B,IAAI,CAAC;IAE7D,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,EAAE,CAAC;QAEnD,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAA6B;QAC/D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,WAAW,GAAG,mBAAmB,CAAC,cAAc,EAAE,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,iBAAiB,EAAE,WAAW,CAAC,MAAM;YACrC,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI;YACtD,OAAO,EAAE;gBACP,WAAW,EAAE,WAAW,CAAC,MAAM;gBAC/B,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBACzE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBACjE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;aACtE;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,mBAAmB,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG;YACb,iCAAiC;YACjC,kCAAkC;YAClC,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;YACpD,qBAAqB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;YAC9D,uBAAuB,MAAM,CAAC,iBAAiB,EAAE;YACjD,EAAE;YACF,6BAA6B;YAC7B,mBAAmB,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;YAC/C,eAAe,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE;YAC9C,WAAW,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE;YACtC,aAAa,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE;YAC1C,EAAE;YACF,iCAAiC;YACjC,qDAAqD;YACrD,gCAAgC;YAChC,gCAAgC;YAChC,qCAAqC;YACrC,6CAA6C;YAC7C,EAAE;YACF,sBAAsB;YACtB,oCAAoC;YACpC,oCAAoC;YACpC,gCAAgC;YAChC,8BAA8B;SAC/B,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,kBAAkB;QACxB,kDAAkD;QAClD,2DAA2D;QAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,8CAA8C;YAC9C,gEAAgE;QAClE,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC;IACzD,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,iBAAiB,EAAE,IAAI;CACxB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,6BAA6B;IAC3C,mBAAmB,CAAC,UAAU,EAAE,CAAC;AACnC,CAAC"}