hackmyagent 0.17.5 → 0.17.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.integrity-manifest.json +1 -1
- package/dist/cli.js +244 -22
- package/dist/cli.js.map +1 -1
- package/dist/hardening/scanner.d.ts +7 -0
- package/dist/hardening/scanner.d.ts.map +1 -1
- package/dist/hardening/scanner.js +17 -2
- package/dist/hardening/scanner.js.map +1 -1
- package/dist/nanomind-core/orchestrate.d.ts.map +1 -1
- package/dist/nanomind-core/orchestrate.js +48 -14
- package/dist/nanomind-core/orchestrate.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../src/nanomind-core/orchestrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC;IACpC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,eAAe,EAAE,EACnC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,
|
|
1
|
+
{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../src/nanomind-core/orchestrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC;IACpC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,eAAe,EAAE,EACnC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAyH9B"}
|
|
@@ -107,11 +107,28 @@ async function orchestrateNanoMind(targetDir, existingFindings, options = {}) {
|
|
|
107
107
|
if (analm) {
|
|
108
108
|
const ready = await isAnalystReady();
|
|
109
109
|
if (ready) {
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
110
|
+
const failed = nmResult.mergedFindings.filter(f => !f.passed && !f.fixed);
|
|
111
|
+
if (failed.length > 0) {
|
|
112
|
+
if (!silent)
|
|
113
|
+
process.stderr.write('Running AnaLM analysis...\n');
|
|
114
|
+
result.analystFindings = await runAnalystOnFindings(nmResult.mergedFindings, runAnalystInference);
|
|
115
|
+
if (!silent && result.analystFindings.length > 0) {
|
|
116
|
+
process.stderr.write(`AnaLM: ${result.analystFindings.length} finding(s) analyzed\n`);
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
else {
|
|
120
|
+
// Clean scan -- generate an intel report summary instead
|
|
121
|
+
if (!silent)
|
|
122
|
+
process.stderr.write('Running AnaLM intel report...\n');
|
|
123
|
+
const allFindings = nmResult.mergedFindings;
|
|
124
|
+
const summary = `Clean scan: ${allFindings.length} checks passed, ${nmResult.compiledArtifacts} artifacts compiled. No security findings.`;
|
|
125
|
+
const intelResponse = await runAnalystInference({
|
|
126
|
+
taskType: 'intelReport',
|
|
127
|
+
content: summary,
|
|
128
|
+
});
|
|
129
|
+
if (intelResponse) {
|
|
130
|
+
result.analystFindings = [intelResponse];
|
|
131
|
+
}
|
|
115
132
|
}
|
|
116
133
|
}
|
|
117
134
|
else {
|
|
@@ -121,10 +138,13 @@ async function orchestrateNanoMind(targetDir, existingFindings, options = {}) {
|
|
|
121
138
|
}
|
|
122
139
|
}
|
|
123
140
|
else if (!silent && !ci) {
|
|
124
|
-
//
|
|
125
|
-
const
|
|
126
|
-
if (
|
|
127
|
-
|
|
141
|
+
// Show hint only if analyst is available and there are findings to analyze
|
|
142
|
+
const failed = nmResult.mergedFindings.filter(f => !f.passed && !f.fixed);
|
|
143
|
+
if (failed.length > 0) {
|
|
144
|
+
const ready = await isAnalystReady();
|
|
145
|
+
if (ready) {
|
|
146
|
+
result.analystHint = 'Add --analm for AI-powered threat analysis';
|
|
147
|
+
}
|
|
128
148
|
}
|
|
129
149
|
}
|
|
130
150
|
return result;
|
|
@@ -157,17 +177,31 @@ async function runAnalystOnFindings(findings, runInference) {
|
|
|
157
177
|
.slice(0, 10);
|
|
158
178
|
for (const finding of prioritized) {
|
|
159
179
|
// Choose task type based on finding category
|
|
160
|
-
const
|
|
161
|
-
|
|
162
|
-
const
|
|
163
|
-
|
|
164
|
-
|
|
180
|
+
const checkId = finding.checkId || '';
|
|
181
|
+
const category = (finding.category || '').toLowerCase();
|
|
182
|
+
const attackClass = finding.attackClass || '';
|
|
183
|
+
let taskType;
|
|
184
|
+
if (checkId.startsWith('CRED') || attackClass === 'credential_abuse') {
|
|
185
|
+
taskType = 'credentialContextClassification';
|
|
186
|
+
}
|
|
187
|
+
else if (category === 'governance' || category === 'trust-hierarchy' ||
|
|
188
|
+
checkId.startsWith('AST-GOV') || checkId.startsWith('AST-GOVERN') ||
|
|
189
|
+
checkId.startsWith('AST-PROMPT') || checkId.startsWith('AST-HEARTBEAT')) {
|
|
190
|
+
taskType = 'governanceReasoning';
|
|
191
|
+
}
|
|
192
|
+
else if (finding.severity === 'critical' || finding.severity === 'high') {
|
|
193
|
+
taskType = 'threatAnalysis';
|
|
194
|
+
}
|
|
195
|
+
else {
|
|
196
|
+
taskType = 'checkExplanation';
|
|
197
|
+
}
|
|
165
198
|
const content = [
|
|
166
199
|
finding.name,
|
|
167
200
|
finding.description,
|
|
168
201
|
finding.message,
|
|
169
202
|
finding.file ? `File: ${finding.file}` : '',
|
|
170
203
|
finding.attackClass ? `Attack class: ${finding.attackClass}` : '',
|
|
204
|
+
finding.category ? `Category: ${finding.category}` : '',
|
|
171
205
|
].filter(Boolean).join('\n');
|
|
172
206
|
const response = await runInference({
|
|
173
207
|
taskType,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["../../src/nanomind-core/orchestrate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,
|
|
1
|
+
{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["../../src/nanomind-core/orchestrate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,kDA6HC;AAlID;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,gBAAmC,EACnC,UAAgC,EAAE;IAElC,MAAM,EAAE,UAAU,GAAG,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAElF,+CAA+C;IAC/C,uEAAuE;IACvE,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,cAAc,EAAE,CAAC,GAAG,gBAAgB,CAAC;YACrC,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,CAAC;YACpB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,0DAA0D;QAC1D,yEAAyE;QACzE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,MAAM,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvD,CAAC;QAED,sDAAsD;QACtD,gEAAgE;QAChE,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,+BAA+B,GAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE9B,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;QAChE,MAAM,QAAQ,GAAuB,MAAM,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAExF,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAEvE,IAAI,CAAC,MAAM,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,QAAQ,CAAC,iBAAiB,0BAA0B,WAAW,8BAA8B,CAC3G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,QAAQ,CAAC,eAAe,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,sEAAsE;QACtE,kDAAO,oCAAoC,IACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;aACrC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnB,MAAM,MAAM,GAAwB;YAClC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,YAAY,EAAE,QAAQ,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,mBAAmB,EAAE,WAAW;YAChC,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;QAEF,8DAA8D;QAC9D,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,wDAAa,iCAAiC,GAAC,CAAC;QAEhG,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBACjE,MAAM,CAAC,eAAe,GAAG,MAAM,oBAAoB,CACjD,QAAQ,CAAC,cAAc,EACvB,mBAAmB,CACpB,CAAC;oBACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,MAAM,CAAC,eAAe,CAAC,MAAM,wBAAwB,CAChE,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,yDAAyD;oBACzD,IAAI,CAAC,MAAM;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrE,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,CAAC;oBAC5C,MAAM,OAAO,GAAG,eAAe,WAAW,CAAC,MAAM,mBAAmB,QAAQ,CAAC,iBAAiB,4CAA4C,CAAC;oBAC3I,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC;wBAC9C,QAAQ,EAAE,aAAa;wBACvB,OAAO,EAAE,OAAO;qBACjB,CAAC,CAAC;oBACH,IAAI,aAAa,EAAE,CAAC;wBAClB,MAAM,CAAC,eAAe,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,CACnD,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1B,2EAA2E;YAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC1E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;gBACrC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,WAAW,GAAG,4CAA4C,CAAC;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO;YACL,cAAc,EAAE,CAAC,GAAG,gBAAgB,CAAC;YACrC,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,CAAC;YACpB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,aAAa;SAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,QAA2B,EAC3B,YAAkF;IAElF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,MAAM,WAAW,GAAG,MAAM;SACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,OAAO,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,6CAA6C;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAE9C,IAAI,QAAsI,CAAC;QAE3I,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;YACrE,QAAQ,GAAG,iCAAiC,CAAC;QAC/C,CAAC;aAAM,IACL,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,iBAAiB;YAC3D,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;YACjE,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,EACvE,CAAC;YACD,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1E,QAAQ,GAAG,gBAAgB,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,kBAAkB,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG;YACd,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3C,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;YACjE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;SACxD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YAClC,QAAQ;YACR,OAAO;YACP,OAAO,EAAE,aAAa,OAAO,CAAC,OAAO,eAAe,OAAO,CAAC,QAAQ,EAAE;SACvE,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|