hackmyagent 0.7.2 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +191 -0
- package/README.md +66 -28
- package/dist/arp/cli/index.d.ts +3 -0
- package/dist/arp/cli/index.d.ts.map +1 -0
- package/dist/arp/cli/index.js +219 -0
- package/dist/arp/cli/index.js.map +1 -0
- package/dist/arp/config/loader.d.ts +8 -0
- package/dist/arp/config/loader.d.ts.map +1 -0
- package/dist/arp/config/loader.js +102 -0
- package/dist/arp/config/loader.js.map +1 -0
- package/dist/arp/enforcement/kill-switch.d.ts +22 -0
- package/dist/arp/enforcement/kill-switch.d.ts.map +1 -0
- package/dist/arp/enforcement/kill-switch.js +122 -0
- package/dist/arp/enforcement/kill-switch.js.map +1 -0
- package/dist/arp/engine/event-engine.d.ts +29 -0
- package/dist/arp/engine/event-engine.d.ts.map +1 -0
- package/dist/arp/engine/event-engine.js +233 -0
- package/dist/arp/engine/event-engine.js.map +1 -0
- package/dist/arp/index.d.ts +81 -0
- package/dist/arp/index.d.ts.map +1 -0
- package/dist/arp/index.js +239 -0
- package/dist/arp/index.js.map +1 -0
- package/dist/arp/intelligence/adapters.d.ts +45 -0
- package/dist/arp/intelligence/adapters.d.ts.map +1 -0
- package/dist/arp/intelligence/adapters.js +222 -0
- package/dist/arp/intelligence/adapters.js.map +1 -0
- package/dist/arp/intelligence/anomaly.d.ts +32 -0
- package/dist/arp/intelligence/anomaly.d.ts.map +1 -0
- package/dist/arp/intelligence/anomaly.js +80 -0
- package/dist/arp/intelligence/anomaly.js.map +1 -0
- package/dist/arp/intelligence/budget.d.ts +33 -0
- package/dist/arp/intelligence/budget.d.ts.map +1 -0
- package/dist/arp/intelligence/budget.js +150 -0
- package/dist/arp/intelligence/budget.js.map +1 -0
- package/dist/arp/intelligence/coordinator.d.ts +43 -0
- package/dist/arp/intelligence/coordinator.d.ts.map +1 -0
- package/dist/arp/intelligence/coordinator.js +301 -0
- package/dist/arp/intelligence/coordinator.js.map +1 -0
- package/dist/arp/interceptors/a2a-protocol.d.ts +29 -0
- package/dist/arp/interceptors/a2a-protocol.d.ts.map +1 -0
- package/dist/arp/interceptors/a2a-protocol.js +111 -0
- package/dist/arp/interceptors/a2a-protocol.js.map +1 -0
- package/dist/arp/interceptors/filesystem.d.ts +33 -0
- package/dist/arp/interceptors/filesystem.d.ts.map +1 -0
- package/dist/arp/interceptors/filesystem.js +199 -0
- package/dist/arp/interceptors/filesystem.js.map +1 -0
- package/dist/arp/interceptors/mcp-protocol.d.ts +25 -0
- package/dist/arp/interceptors/mcp-protocol.d.ts.map +1 -0
- package/dist/arp/interceptors/mcp-protocol.js +126 -0
- package/dist/arp/interceptors/mcp-protocol.js.map +1 -0
- package/dist/arp/interceptors/network.d.ts +26 -0
- package/dist/arp/interceptors/network.d.ts.map +1 -0
- package/dist/arp/interceptors/network.js +146 -0
- package/dist/arp/interceptors/network.js.map +1 -0
- package/dist/arp/interceptors/process.d.ts +26 -0
- package/dist/arp/interceptors/process.d.ts.map +1 -0
- package/dist/arp/interceptors/process.js +157 -0
- package/dist/arp/interceptors/process.js.map +1 -0
- package/dist/arp/interceptors/prompt.d.ts +29 -0
- package/dist/arp/interceptors/prompt.d.ts.map +1 -0
- package/dist/arp/interceptors/prompt.js +82 -0
- package/dist/arp/interceptors/prompt.js.map +1 -0
- package/dist/arp/license/index.d.ts +59 -0
- package/dist/arp/license/index.d.ts.map +1 -0
- package/dist/arp/license/index.js +78 -0
- package/dist/arp/license/index.js.map +1 -0
- package/dist/arp/monitors/filesystem.d.ts +21 -0
- package/dist/arp/monitors/filesystem.d.ts.map +1 -0
- package/dist/arp/monitors/filesystem.js +141 -0
- package/dist/arp/monitors/filesystem.js.map +1 -0
- package/dist/arp/monitors/network.d.ts +32 -0
- package/dist/arp/monitors/network.d.ts.map +1 -0
- package/dist/arp/monitors/network.js +301 -0
- package/dist/arp/monitors/network.js.map +1 -0
- package/dist/arp/monitors/process.d.ts +24 -0
- package/dist/arp/monitors/process.d.ts.map +1 -0
- package/dist/arp/monitors/process.js +205 -0
- package/dist/arp/monitors/process.js.map +1 -0
- package/dist/arp/patterns/ai-threats.d.ts +48 -0
- package/dist/arp/patterns/ai-threats.d.ts.map +1 -0
- package/dist/arp/patterns/ai-threats.js +215 -0
- package/dist/arp/patterns/ai-threats.js.map +1 -0
- package/dist/arp/proxy/forward.d.ts +23 -0
- package/dist/arp/proxy/forward.d.ts.map +1 -0
- package/dist/arp/proxy/forward.js +152 -0
- package/dist/arp/proxy/forward.js.map +1 -0
- package/dist/arp/proxy/server.d.ts +45 -0
- package/dist/arp/proxy/server.d.ts.map +1 -0
- package/dist/arp/proxy/server.js +331 -0
- package/dist/arp/proxy/server.js.map +1 -0
- package/dist/arp/reporting/local-log.d.ts +22 -0
- package/dist/arp/reporting/local-log.d.ts.map +1 -0
- package/dist/arp/reporting/local-log.js +116 -0
- package/dist/arp/reporting/local-log.js.map +1 -0
- package/dist/arp/types.d.ts +230 -0
- package/dist/arp/types.d.ts.map +1 -0
- package/dist/arp/types.js +4 -0
- package/dist/arp/types.js.map +1 -0
- package/dist/attack/custom-payloads.d.ts +11 -0
- package/dist/attack/custom-payloads.d.ts.map +1 -0
- package/dist/attack/custom-payloads.js +108 -0
- package/dist/attack/custom-payloads.js.map +1 -0
- package/dist/attack/fail-policy.d.ts +16 -0
- package/dist/attack/fail-policy.d.ts.map +1 -0
- package/dist/attack/fail-policy.js +36 -0
- package/dist/attack/fail-policy.js.map +1 -0
- package/dist/attack/index.d.ts +12 -0
- package/dist/attack/index.d.ts.map +1 -0
- package/dist/attack/index.js +30 -0
- package/dist/attack/index.js.map +1 -0
- package/dist/attack/payloads/a2a-attacks.d.ts +12 -0
- package/dist/attack/payloads/a2a-attacks.d.ts.map +1 -0
- package/dist/attack/payloads/a2a-attacks.js +221 -0
- package/dist/attack/payloads/a2a-attacks.js.map +1 -0
- package/dist/attack/payloads/capability-abuse.d.ts +8 -0
- package/dist/attack/payloads/capability-abuse.d.ts.map +1 -0
- package/dist/attack/payloads/capability-abuse.js +222 -0
- package/dist/attack/payloads/capability-abuse.js.map +1 -0
- package/dist/attack/payloads/context-manipulation.d.ts +8 -0
- package/dist/attack/payloads/context-manipulation.d.ts.map +1 -0
- package/dist/attack/payloads/context-manipulation.js +217 -0
- package/dist/attack/payloads/context-manipulation.js.map +1 -0
- package/dist/attack/payloads/data-exfiltration.d.ts +8 -0
- package/dist/attack/payloads/data-exfiltration.d.ts.map +1 -0
- package/dist/attack/payloads/data-exfiltration.js +249 -0
- package/dist/attack/payloads/data-exfiltration.js.map +1 -0
- package/dist/attack/payloads/index.d.ts +29 -0
- package/dist/attack/payloads/index.d.ts.map +1 -0
- package/dist/attack/payloads/index.js +76 -0
- package/dist/attack/payloads/index.js.map +1 -0
- package/dist/attack/payloads/jailbreak.d.ts +8 -0
- package/dist/attack/payloads/jailbreak.d.ts.map +1 -0
- package/dist/attack/payloads/jailbreak.js +265 -0
- package/dist/attack/payloads/jailbreak.js.map +1 -0
- package/dist/attack/payloads/mcp-exploitation.d.ts +12 -0
- package/dist/attack/payloads/mcp-exploitation.d.ts.map +1 -0
- package/dist/attack/payloads/mcp-exploitation.js +221 -0
- package/dist/attack/payloads/mcp-exploitation.js.map +1 -0
- package/dist/attack/payloads/prompt-injection.d.ts +8 -0
- package/dist/attack/payloads/prompt-injection.d.ts.map +1 -0
- package/dist/attack/payloads/prompt-injection.js +262 -0
- package/dist/attack/payloads/prompt-injection.js.map +1 -0
- package/dist/attack/scanner.d.ts +84 -0
- package/dist/attack/scanner.d.ts.map +1 -0
- package/dist/attack/scanner.js +509 -0
- package/dist/attack/scanner.js.map +1 -0
- package/dist/attack/types.d.ts +153 -0
- package/dist/attack/types.d.ts.map +1 -0
- package/dist/attack/types.js +46 -0
- package/dist/attack/types.js.map +1 -0
- package/dist/benchmarks/index.d.ts +16 -0
- package/dist/benchmarks/index.d.ts.map +1 -0
- package/dist/benchmarks/index.js +27 -0
- package/dist/benchmarks/index.js.map +1 -0
- package/dist/benchmarks/oasb-1.d.ts +112 -0
- package/dist/benchmarks/oasb-1.d.ts.map +1 -0
- package/dist/benchmarks/oasb-1.js +1124 -0
- package/dist/benchmarks/oasb-1.js.map +1 -0
- package/dist/checker/check-skill.d.ts +48 -0
- package/dist/checker/check-skill.d.ts.map +1 -0
- package/dist/checker/check-skill.js +105 -0
- package/dist/checker/check-skill.js.map +1 -0
- package/dist/checker/index.d.ts +12 -0
- package/dist/checker/index.d.ts.map +1 -0
- package/dist/checker/index.js +16 -0
- package/dist/checker/index.js.map +1 -0
- package/dist/checker/permission-analyzer.d.ts +12 -0
- package/dist/checker/permission-analyzer.d.ts.map +1 -0
- package/dist/checker/permission-analyzer.js +84 -0
- package/dist/checker/permission-analyzer.js.map +1 -0
- package/dist/checker/publisher-verifier.d.ts +34 -0
- package/dist/checker/publisher-verifier.d.ts.map +1 -0
- package/dist/checker/publisher-verifier.js +121 -0
- package/dist/checker/publisher-verifier.js.map +1 -0
- package/dist/checker/skill-identifier.d.ts +14 -0
- package/dist/checker/skill-identifier.d.ts.map +1 -0
- package/dist/checker/skill-identifier.js +55 -0
- package/dist/checker/skill-identifier.js.map +1 -0
- package/dist/cli.d.ts +7 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +3534 -0
- package/dist/cli.js.map +1 -0
- package/dist/hardening/index.d.ts +7 -0
- package/dist/hardening/index.d.ts.map +1 -0
- package/dist/hardening/index.js +9 -0
- package/dist/hardening/index.js.map +1 -0
- package/dist/hardening/scanner.d.ts +147 -0
- package/dist/hardening/scanner.d.ts.map +1 -0
- package/dist/hardening/scanner.js +5445 -0
- package/dist/hardening/scanner.js.map +1 -0
- package/dist/hardening/security-check.d.ts +85 -0
- package/dist/hardening/security-check.d.ts.map +1 -0
- package/dist/hardening/security-check.js +6 -0
- package/dist/hardening/security-check.js.map +1 -0
- package/dist/index.d.ts +38 -4
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +91 -3525
- package/dist/index.js.map +1 -1
- package/dist/mcp-server.js +10 -10
- package/dist/mcp-server.js.map +1 -1
- package/dist/oasb/config/dvaa-targets.d.ts +13 -0
- package/dist/oasb/config/dvaa-targets.d.ts.map +1 -0
- package/dist/oasb/config/dvaa-targets.js +89 -0
- package/dist/oasb/config/dvaa-targets.js.map +1 -0
- package/dist/oasb/harness/arp-wrapper.d.ts +29 -0
- package/dist/oasb/harness/arp-wrapper.d.ts.map +1 -0
- package/dist/oasb/harness/arp-wrapper.js +134 -0
- package/dist/oasb/harness/arp-wrapper.js.map +1 -0
- package/dist/oasb/harness/dvaa-client.d.ts +46 -0
- package/dist/oasb/harness/dvaa-client.d.ts.map +1 -0
- package/dist/oasb/harness/dvaa-client.js +98 -0
- package/dist/oasb/harness/dvaa-client.js.map +1 -0
- package/dist/oasb/harness/dvaa-manager.d.ts +17 -0
- package/dist/oasb/harness/dvaa-manager.d.ts.map +1 -0
- package/dist/oasb/harness/dvaa-manager.js +132 -0
- package/dist/oasb/harness/dvaa-manager.js.map +1 -0
- package/dist/oasb/harness/event-collector.d.ts +33 -0
- package/dist/oasb/harness/event-collector.d.ts.map +1 -0
- package/dist/oasb/harness/event-collector.js +86 -0
- package/dist/oasb/harness/event-collector.js.map +1 -0
- package/dist/oasb/harness/metrics.d.ts +14 -0
- package/dist/oasb/harness/metrics.d.ts.map +1 -0
- package/dist/oasb/harness/metrics.js +56 -0
- package/dist/oasb/harness/metrics.js.map +1 -0
- package/dist/oasb/harness/mock-llm-adapter.d.ts +34 -0
- package/dist/oasb/harness/mock-llm-adapter.d.ts.map +1 -0
- package/dist/oasb/harness/mock-llm-adapter.js +69 -0
- package/dist/oasb/harness/mock-llm-adapter.js.map +1 -0
- package/dist/oasb/harness/types.d.ts +74 -0
- package/dist/oasb/harness/types.d.ts.map +1 -0
- package/dist/oasb/harness/types.js +3 -0
- package/dist/oasb/harness/types.js.map +1 -0
- package/dist/plugins/core.d.ts +109 -0
- package/dist/plugins/core.d.ts.map +1 -0
- package/dist/plugins/core.js +30 -0
- package/dist/plugins/core.js.map +1 -0
- package/dist/plugins/credvault.d.ts +22 -0
- package/dist/plugins/credvault.d.ts.map +1 -0
- package/dist/plugins/credvault.js +374 -0
- package/dist/plugins/credvault.js.map +1 -0
- package/dist/plugins/signcrypt.d.ts +27 -0
- package/dist/plugins/signcrypt.d.ts.map +1 -0
- package/dist/plugins/signcrypt.js +317 -0
- package/dist/plugins/signcrypt.js.map +1 -0
- package/dist/plugins/skillguard.d.ts +25 -0
- package/dist/plugins/skillguard.d.ts.map +1 -0
- package/dist/plugins/skillguard.js +346 -0
- package/dist/plugins/skillguard.js.map +1 -0
- package/dist/registry/client.d.ts +125 -0
- package/dist/registry/client.d.ts.map +1 -0
- package/dist/registry/client.js +308 -0
- package/dist/registry/client.js.map +1 -0
- package/dist/registry/index.d.ts +3 -0
- package/dist/registry/index.d.ts.map +1 -0
- package/dist/registry/index.js +10 -0
- package/dist/registry/index.js.map +1 -0
- package/dist/scanner/external-scanner.d.ts +13 -0
- package/dist/scanner/external-scanner.d.ts.map +1 -0
- package/dist/scanner/external-scanner.js +299 -0
- package/dist/scanner/external-scanner.js.map +1 -0
- package/dist/scanner/index.d.ts +6 -0
- package/dist/scanner/index.d.ts.map +1 -0
- package/dist/scanner/index.js +9 -0
- package/dist/scanner/index.js.map +1 -0
- package/dist/scanner/types.d.ts +32 -0
- package/dist/scanner/types.d.ts.map +1 -0
- package/dist/scanner/types.js +6 -0
- package/dist/scanner/types.js.map +1 -0
- package/dist/semantic/deep-scan.d.ts +13 -0
- package/dist/semantic/deep-scan.d.ts.map +1 -0
- package/dist/semantic/deep-scan.js +63 -0
- package/dist/semantic/deep-scan.js.map +1 -0
- package/dist/semantic/index.d.ts +17 -0
- package/dist/semantic/index.d.ts.map +1 -0
- package/dist/semantic/index.js +39 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/integration/cost-estimator.d.ts +17 -0
- package/dist/semantic/integration/cost-estimator.d.ts.map +1 -0
- package/dist/semantic/integration/cost-estimator.js +54 -0
- package/dist/semantic/integration/cost-estimator.js.map +1 -0
- package/dist/semantic/integration/finding-adapter.d.ts +34 -0
- package/dist/semantic/integration/finding-adapter.d.ts.map +1 -0
- package/dist/semantic/integration/finding-adapter.js +41 -0
- package/dist/semantic/integration/finding-adapter.js.map +1 -0
- package/dist/semantic/integration/oasb-upgrader.d.ts +20 -0
- package/dist/semantic/integration/oasb-upgrader.d.ts.map +1 -0
- package/dist/semantic/integration/oasb-upgrader.js +47 -0
- package/dist/semantic/integration/oasb-upgrader.js.map +1 -0
- package/dist/semantic/llm/budget.d.ts +50 -0
- package/dist/semantic/llm/budget.d.ts.map +1 -0
- package/dist/semantic/llm/budget.js +139 -0
- package/dist/semantic/llm/budget.js.map +1 -0
- package/dist/semantic/llm/cache.d.ts +36 -0
- package/dist/semantic/llm/cache.d.ts.map +1 -0
- package/dist/semantic/llm/cache.js +103 -0
- package/dist/semantic/llm/cache.js.map +1 -0
- package/dist/semantic/llm/client.d.ts +49 -0
- package/dist/semantic/llm/client.d.ts.map +1 -0
- package/dist/semantic/llm/client.js +64 -0
- package/dist/semantic/llm/client.js.map +1 -0
- package/dist/semantic/llm/index.d.ts +33 -0
- package/dist/semantic/llm/index.d.ts.map +1 -0
- package/dist/semantic/llm/index.js +129 -0
- package/dist/semantic/llm/index.js.map +1 -0
- package/dist/semantic/llm/prompts.d.ts +30 -0
- package/dist/semantic/llm/prompts.d.ts.map +1 -0
- package/dist/semantic/llm/prompts.js +120 -0
- package/dist/semantic/llm/prompts.js.map +1 -0
- package/dist/semantic/structural/credential-context.d.ts +14 -0
- package/dist/semantic/structural/credential-context.d.ts.map +1 -0
- package/dist/semantic/structural/credential-context.js +295 -0
- package/dist/semantic/structural/credential-context.js.map +1 -0
- package/dist/semantic/structural/index.d.ts +28 -0
- package/dist/semantic/structural/index.d.ts.map +1 -0
- package/dist/semantic/structural/index.js +138 -0
- package/dist/semantic/structural/index.js.map +1 -0
- package/dist/semantic/structural/instruction.d.ts +19 -0
- package/dist/semantic/structural/instruction.d.ts.map +1 -0
- package/dist/semantic/structural/instruction.js +167 -0
- package/dist/semantic/structural/instruction.js.map +1 -0
- package/dist/semantic/structural/mcp-config.d.ts +22 -0
- package/dist/semantic/structural/mcp-config.d.ts.map +1 -0
- package/dist/semantic/structural/mcp-config.js +294 -0
- package/dist/semantic/structural/mcp-config.js.map +1 -0
- package/dist/semantic/structural/permission-model.d.ts +16 -0
- package/dist/semantic/structural/permission-model.d.ts.map +1 -0
- package/dist/semantic/structural/permission-model.js +121 -0
- package/dist/semantic/structural/permission-model.js.map +1 -0
- package/dist/semantic/types.d.ts +122 -0
- package/dist/semantic/types.d.ts.map +1 -0
- package/dist/semantic/types.js +10 -0
- package/dist/semantic/types.js.map +1 -0
- package/package.json +25 -14
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.loadConfig = loadConfig;
|
|
37
|
+
exports.defaultConfig = defaultConfig;
|
|
38
|
+
const fs = __importStar(require("fs"));
|
|
39
|
+
const path = __importStar(require("path"));
|
|
40
|
+
/**
|
|
41
|
+
* Load ARP config from YAML or JSON file.
|
|
42
|
+
* Falls back to sensible defaults if no config found.
|
|
43
|
+
*/
|
|
44
|
+
function loadConfig(configPath) {
|
|
45
|
+
if (configPath) {
|
|
46
|
+
return parseConfigFile(configPath);
|
|
47
|
+
}
|
|
48
|
+
// Auto-discover config
|
|
49
|
+
const candidates = [
|
|
50
|
+
'arp.yaml', 'arp.yml', 'arp.json',
|
|
51
|
+
'.opena2a/arp.yaml', '.opena2a/arp.yml', '.opena2a/arp.json',
|
|
52
|
+
];
|
|
53
|
+
for (const candidate of candidates) {
|
|
54
|
+
const fullPath = path.resolve(process.cwd(), candidate);
|
|
55
|
+
if (fs.existsSync(fullPath)) {
|
|
56
|
+
return parseConfigFile(fullPath);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
return defaultConfig();
|
|
60
|
+
}
|
|
61
|
+
function parseConfigFile(filePath) {
|
|
62
|
+
const content = fs.readFileSync(filePath, 'utf-8');
|
|
63
|
+
const ext = path.extname(filePath).toLowerCase();
|
|
64
|
+
if (ext === '.json') {
|
|
65
|
+
return { ...defaultConfig(), ...JSON.parse(content) };
|
|
66
|
+
}
|
|
67
|
+
// YAML parsing (dynamic import to keep it optional)
|
|
68
|
+
try {
|
|
69
|
+
const yaml = require('js-yaml');
|
|
70
|
+
return { ...defaultConfig(), ...yaml.load(content) };
|
|
71
|
+
}
|
|
72
|
+
catch {
|
|
73
|
+
throw new Error(`Failed to parse config: ${filePath}. Install js-yaml for YAML support.`);
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
function defaultConfig() {
|
|
77
|
+
return {
|
|
78
|
+
agentName: path.basename(process.cwd()),
|
|
79
|
+
agentDescription: undefined,
|
|
80
|
+
declaredCapabilities: [],
|
|
81
|
+
dataDir: path.join(process.cwd(), '.opena2a', 'arp'),
|
|
82
|
+
monitors: {
|
|
83
|
+
process: { enabled: true, intervalMs: 5000 },
|
|
84
|
+
network: { enabled: true, intervalMs: 10000 },
|
|
85
|
+
filesystem: { enabled: true },
|
|
86
|
+
skill: { enabled: false },
|
|
87
|
+
heartbeat: { enabled: false },
|
|
88
|
+
},
|
|
89
|
+
rules: [],
|
|
90
|
+
intelligence: {
|
|
91
|
+
enabled: true,
|
|
92
|
+
adapter: 'agent-proxy',
|
|
93
|
+
budgetUsd: 5.0,
|
|
94
|
+
maxTokensPerCall: 300,
|
|
95
|
+
maxCallsPerHour: 20,
|
|
96
|
+
minSeverityForLlm: 'medium',
|
|
97
|
+
enableBatching: true,
|
|
98
|
+
batchWindowMs: 300000,
|
|
99
|
+
},
|
|
100
|
+
};
|
|
101
|
+
}
|
|
102
|
+
//# sourceMappingURL=loader.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/arp/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,gCAmBC;AAmBD,sCAyBC;AAvED,uCAAyB;AACzB,2CAA6B;AAG7B;;;GAGG;AACH,SAAgB,UAAU,CAAC,UAAmB;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,SAAS,EAAE,UAAU;QACjC,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB;KAC7D,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,qCAAqC,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,gBAAgB,EAAE,SAAS;QAC3B,oBAAoB,EAAE,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC;QACpD,QAAQ,EAAE;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;YAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;YAC7C,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACzB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC9B;QACD,KAAK,EAAE,EAAE;QACT,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,GAAG;YACrB,eAAe,EAAE,EAAE;YACnB,iBAAiB,EAAE,QAAQ;YAC3B,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,MAAM;SACtB;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import type { EnforcementAction, EnforcementResult, ARPEvent } from '../types';
|
|
2
|
+
export type AlertCallback = (event: ARPEvent, result: EnforcementResult) => void | Promise<void>;
|
|
3
|
+
/**
|
|
4
|
+
* Enforcement engine — executes actions on agent processes.
|
|
5
|
+
* Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
|
|
6
|
+
*/
|
|
7
|
+
export declare class EnforcementEngine {
|
|
8
|
+
private paused;
|
|
9
|
+
private onAlert?;
|
|
10
|
+
constructor(onAlert?: AlertCallback);
|
|
11
|
+
/** Register or replace the alert callback */
|
|
12
|
+
setAlertCallback(callback: AlertCallback): void;
|
|
13
|
+
/** Execute an enforcement action */
|
|
14
|
+
execute(action: EnforcementAction, event: ARPEvent, targetPid?: number): Promise<EnforcementResult>;
|
|
15
|
+
/** Resume a paused process */
|
|
16
|
+
resume(pid: number): boolean;
|
|
17
|
+
/** Get list of paused PIDs */
|
|
18
|
+
getPausedPids(): number[];
|
|
19
|
+
private pauseProcess;
|
|
20
|
+
private killProcess;
|
|
21
|
+
}
|
|
22
|
+
//# sourceMappingURL=kill-switch.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"kill-switch.d.ts","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE/E,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjG;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;gBAEpB,OAAO,CAAC,EAAE,aAAa;IAInC,6CAA6C;IAC7C,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,oCAAoC;IAC9B,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BzG,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAY5B,8BAA8B;IAC9B,aAAa,IAAI,MAAM,EAAE;IAIzB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,WAAW;CAqCpB"}
|
|
@@ -0,0 +1,122 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.EnforcementEngine = void 0;
|
|
4
|
+
/**
|
|
5
|
+
* Enforcement engine — executes actions on agent processes.
|
|
6
|
+
* Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
|
|
7
|
+
*/
|
|
8
|
+
class EnforcementEngine {
|
|
9
|
+
constructor(onAlert) {
|
|
10
|
+
this.paused = new Set();
|
|
11
|
+
this.onAlert = onAlert;
|
|
12
|
+
}
|
|
13
|
+
/** Register or replace the alert callback */
|
|
14
|
+
setAlertCallback(callback) {
|
|
15
|
+
this.onAlert = callback;
|
|
16
|
+
}
|
|
17
|
+
/** Execute an enforcement action */
|
|
18
|
+
async execute(action, event, targetPid) {
|
|
19
|
+
const pid = targetPid ?? event.data.pid;
|
|
20
|
+
switch (action) {
|
|
21
|
+
case 'log':
|
|
22
|
+
return { action, success: true, reason: 'Event logged', event };
|
|
23
|
+
case 'alert': {
|
|
24
|
+
const result = { action, success: true, reason: `Alert raised: ${event.description}`, event };
|
|
25
|
+
if (this.onAlert) {
|
|
26
|
+
try {
|
|
27
|
+
await this.onAlert(event, result);
|
|
28
|
+
}
|
|
29
|
+
catch { /* callback errors don't block enforcement */ }
|
|
30
|
+
}
|
|
31
|
+
return result;
|
|
32
|
+
}
|
|
33
|
+
case 'pause':
|
|
34
|
+
return this.pauseProcess(pid, event);
|
|
35
|
+
case 'kill':
|
|
36
|
+
return this.killProcess(pid, event);
|
|
37
|
+
default:
|
|
38
|
+
return { action, success: false, reason: `Unknown action: ${action}`, event };
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
/** Resume a paused process */
|
|
42
|
+
resume(pid) {
|
|
43
|
+
if (!this.paused.has(pid))
|
|
44
|
+
return false;
|
|
45
|
+
try {
|
|
46
|
+
process.kill(pid, 'SIGCONT');
|
|
47
|
+
this.paused.delete(pid);
|
|
48
|
+
return true;
|
|
49
|
+
}
|
|
50
|
+
catch {
|
|
51
|
+
this.paused.delete(pid);
|
|
52
|
+
return false;
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
/** Get list of paused PIDs */
|
|
56
|
+
getPausedPids() {
|
|
57
|
+
return Array.from(this.paused);
|
|
58
|
+
}
|
|
59
|
+
pauseProcess(pid, event) {
|
|
60
|
+
if (!pid) {
|
|
61
|
+
return { action: 'pause', success: false, reason: 'No PID to pause', event };
|
|
62
|
+
}
|
|
63
|
+
try {
|
|
64
|
+
process.kill(pid, 'SIGSTOP');
|
|
65
|
+
this.paused.add(pid);
|
|
66
|
+
return {
|
|
67
|
+
action: 'pause',
|
|
68
|
+
targetPid: pid,
|
|
69
|
+
success: true,
|
|
70
|
+
reason: `Paused PID ${pid}: ${event.description}`,
|
|
71
|
+
event,
|
|
72
|
+
};
|
|
73
|
+
}
|
|
74
|
+
catch (err) {
|
|
75
|
+
return {
|
|
76
|
+
action: 'pause',
|
|
77
|
+
targetPid: pid,
|
|
78
|
+
success: false,
|
|
79
|
+
reason: `Failed to pause PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
|
|
80
|
+
event,
|
|
81
|
+
};
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
killProcess(pid, event) {
|
|
85
|
+
if (!pid) {
|
|
86
|
+
return { action: 'kill', success: false, reason: 'No PID to kill', event };
|
|
87
|
+
}
|
|
88
|
+
try {
|
|
89
|
+
// Graceful first
|
|
90
|
+
process.kill(pid, 'SIGTERM');
|
|
91
|
+
// Give 5 seconds, then force kill
|
|
92
|
+
setTimeout(() => {
|
|
93
|
+
try {
|
|
94
|
+
process.kill(pid, 0); // Check if still alive
|
|
95
|
+
process.kill(pid, 'SIGKILL');
|
|
96
|
+
}
|
|
97
|
+
catch {
|
|
98
|
+
// Already dead — good
|
|
99
|
+
}
|
|
100
|
+
}, 5000).unref();
|
|
101
|
+
this.paused.delete(pid);
|
|
102
|
+
return {
|
|
103
|
+
action: 'kill',
|
|
104
|
+
targetPid: pid,
|
|
105
|
+
success: true,
|
|
106
|
+
reason: `Killed PID ${pid}: ${event.description}`,
|
|
107
|
+
event,
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
catch (err) {
|
|
111
|
+
return {
|
|
112
|
+
action: 'kill',
|
|
113
|
+
targetPid: pid,
|
|
114
|
+
success: false,
|
|
115
|
+
reason: `Failed to kill PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
|
|
116
|
+
event,
|
|
117
|
+
};
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
}
|
|
121
|
+
exports.EnforcementEngine = EnforcementEngine;
|
|
122
|
+
//# sourceMappingURL=kill-switch.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":";;;AAIA;;;GAGG;AACH,MAAa,iBAAiB;IAI5B,YAAY,OAAuB;QAH3B,WAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAIjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,6CAA6C;IAC7C,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,OAAO,CAAC,MAAyB,EAAE,KAAe,EAAE,SAAkB;QAC1E,MAAM,GAAG,GAAG,SAAS,IAAK,KAAK,CAAC,IAAI,CAAC,GAA0B,CAAC;QAEhE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAElE,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC;gBACjH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;gBACpG,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEvC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEtC;gBACE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,GAAuB,EAAE,KAAe;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACzF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAuB,EAAE,KAAe;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAE7B,kCAAkC;YAClC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB;oBAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAEjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACxF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAzHD,8CAyHC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import type { ARPEvent, ARPConfig, EventSeverity, EventCategory, EnforcementResult } from '../types';
|
|
2
|
+
type EventHandler = (event: ARPEvent) => void | Promise<void>;
|
|
3
|
+
type EnforcementHandler = (result: EnforcementResult) => void | Promise<void>;
|
|
4
|
+
/**
|
|
5
|
+
* Central event bus — receives events from monitors, evaluates rules,
|
|
6
|
+
* decides enforcement actions. The "brain" between monitors and enforcement.
|
|
7
|
+
*/
|
|
8
|
+
export declare class EventEngine {
|
|
9
|
+
private handlers;
|
|
10
|
+
private enforcementHandlers;
|
|
11
|
+
private rules;
|
|
12
|
+
private eventBuffer;
|
|
13
|
+
private readonly maxBufferSize;
|
|
14
|
+
constructor(config: ARPConfig);
|
|
15
|
+
/** Register a handler for all events (for logging, reporting, etc.) */
|
|
16
|
+
onEvent(handler: EventHandler): void;
|
|
17
|
+
/** Register a handler for enforcement actions */
|
|
18
|
+
onEnforcement(handler: EnforcementHandler): void;
|
|
19
|
+
/** Emit an event from a monitor — evaluates rules and triggers actions */
|
|
20
|
+
emit(event: Omit<ARPEvent, 'id' | 'timestamp' | 'classifiedBy'>): Promise<ARPEvent>;
|
|
21
|
+
/** Update an event's classification (called by L1/L2 after re-analysis) */
|
|
22
|
+
reclassify(event: ARPEvent, newCategory: EventCategory, newSeverity: EventSeverity, classifiedBy: ARPEvent['classifiedBy']): ARPEvent;
|
|
23
|
+
/** Get recent events matching criteria (for threshold evaluation) */
|
|
24
|
+
getRecentEvents(windowMs: number, source?: string): ARPEvent[];
|
|
25
|
+
private evaluateRules;
|
|
26
|
+
private ruleMatches;
|
|
27
|
+
}
|
|
28
|
+
export {};
|
|
29
|
+
//# sourceMappingURL=event-engine.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"event-engine.d.ts","sourceRoot":"","sources":["../../../src/arp/engine/event-engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EAET,aAAa,EACb,aAAa,EAEb,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAElB,KAAK,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAQ9E;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,SAAS;IAI7B,uEAAuE;IACvE,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIpC,iDAAiD;IACjD,aAAa,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIhD,0EAA0E;IACpE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,cAAc,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsDzF,2EAA2E;IAC3E,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,QAAQ;IAOrI,qEAAqE;IACrE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAU9D,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,WAAW;CAwBpB"}
|
|
@@ -0,0 +1,233 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.EventEngine = void 0;
|
|
37
|
+
const crypto = __importStar(require("crypto"));
|
|
38
|
+
const SEVERITY_ORDER = ['info', 'low', 'medium', 'high', 'critical'];
|
|
39
|
+
function severityGte(a, b) {
|
|
40
|
+
return SEVERITY_ORDER.indexOf(a) >= SEVERITY_ORDER.indexOf(b);
|
|
41
|
+
}
|
|
42
|
+
/**
|
|
43
|
+
* Central event bus — receives events from monitors, evaluates rules,
|
|
44
|
+
* decides enforcement actions. The "brain" between monitors and enforcement.
|
|
45
|
+
*/
|
|
46
|
+
class EventEngine {
|
|
47
|
+
constructor(config) {
|
|
48
|
+
this.handlers = [];
|
|
49
|
+
this.enforcementHandlers = [];
|
|
50
|
+
this.eventBuffer = [];
|
|
51
|
+
this.maxBufferSize = 10000;
|
|
52
|
+
this.rules = config.rules ?? defaultRules();
|
|
53
|
+
}
|
|
54
|
+
/** Register a handler for all events (for logging, reporting, etc.) */
|
|
55
|
+
onEvent(handler) {
|
|
56
|
+
this.handlers.push(handler);
|
|
57
|
+
}
|
|
58
|
+
/** Register a handler for enforcement actions */
|
|
59
|
+
onEnforcement(handler) {
|
|
60
|
+
this.enforcementHandlers.push(handler);
|
|
61
|
+
}
|
|
62
|
+
/** Emit an event from a monitor — evaluates rules and triggers actions */
|
|
63
|
+
async emit(event) {
|
|
64
|
+
const fullEvent = {
|
|
65
|
+
...event,
|
|
66
|
+
id: crypto.randomUUID(),
|
|
67
|
+
timestamp: new Date().toISOString(),
|
|
68
|
+
classifiedBy: 'L0-rules',
|
|
69
|
+
};
|
|
70
|
+
// Buffer for threshold rules
|
|
71
|
+
this.eventBuffer.push(fullEvent);
|
|
72
|
+
if (this.eventBuffer.length > this.maxBufferSize) {
|
|
73
|
+
this.eventBuffer = this.eventBuffer.slice(-this.maxBufferSize / 2);
|
|
74
|
+
}
|
|
75
|
+
// Notify all event handlers
|
|
76
|
+
for (const handler of this.handlers) {
|
|
77
|
+
try {
|
|
78
|
+
await handler(fullEvent);
|
|
79
|
+
}
|
|
80
|
+
catch {
|
|
81
|
+
// Handler errors don't block the pipeline
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
// Evaluate rules
|
|
85
|
+
const matchedRules = this.evaluateRules(fullEvent);
|
|
86
|
+
for (const rule of matchedRules) {
|
|
87
|
+
// If rule requires LLM confirmation, emit a pending-confirmation event
|
|
88
|
+
// and skip immediate enforcement (L2 will handle it later)
|
|
89
|
+
if (rule.requireLlmConfirmation) {
|
|
90
|
+
fullEvent.data._pendingConfirmation = true;
|
|
91
|
+
fullEvent.data._pendingAction = rule.action;
|
|
92
|
+
fullEvent.data._pendingRule = rule.name;
|
|
93
|
+
continue;
|
|
94
|
+
}
|
|
95
|
+
const result = {
|
|
96
|
+
action: rule.action,
|
|
97
|
+
success: true,
|
|
98
|
+
reason: `Rule "${rule.name}" matched: ${fullEvent.description}`,
|
|
99
|
+
event: fullEvent,
|
|
100
|
+
};
|
|
101
|
+
for (const handler of this.enforcementHandlers) {
|
|
102
|
+
try {
|
|
103
|
+
await handler(result);
|
|
104
|
+
}
|
|
105
|
+
catch {
|
|
106
|
+
// Enforcement handler errors don't block
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
return fullEvent;
|
|
111
|
+
}
|
|
112
|
+
/** Update an event's classification (called by L1/L2 after re-analysis) */
|
|
113
|
+
reclassify(event, newCategory, newSeverity, classifiedBy) {
|
|
114
|
+
event.category = newCategory;
|
|
115
|
+
event.severity = newSeverity;
|
|
116
|
+
event.classifiedBy = classifiedBy;
|
|
117
|
+
return event;
|
|
118
|
+
}
|
|
119
|
+
/** Get recent events matching criteria (for threshold evaluation) */
|
|
120
|
+
getRecentEvents(windowMs, source) {
|
|
121
|
+
const cutoff = Date.now() - windowMs;
|
|
122
|
+
return this.eventBuffer.filter((e) => {
|
|
123
|
+
const eventTime = new Date(e.timestamp).getTime();
|
|
124
|
+
if (eventTime < cutoff)
|
|
125
|
+
return false;
|
|
126
|
+
if (source && e.source !== source)
|
|
127
|
+
return false;
|
|
128
|
+
return true;
|
|
129
|
+
});
|
|
130
|
+
}
|
|
131
|
+
evaluateRules(event) {
|
|
132
|
+
const matched = [];
|
|
133
|
+
for (const rule of this.rules) {
|
|
134
|
+
if (this.ruleMatches(rule, event)) {
|
|
135
|
+
matched.push(rule);
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
return matched;
|
|
139
|
+
}
|
|
140
|
+
ruleMatches(rule, event) {
|
|
141
|
+
const c = rule.condition;
|
|
142
|
+
if (c.source && c.source !== event.source)
|
|
143
|
+
return false;
|
|
144
|
+
if (c.category && c.category !== event.category)
|
|
145
|
+
return false;
|
|
146
|
+
if (c.minSeverity && !severityGte(event.severity, c.minSeverity))
|
|
147
|
+
return false;
|
|
148
|
+
// Field matching
|
|
149
|
+
if (c.fieldMatch) {
|
|
150
|
+
for (const [key, pattern] of Object.entries(c.fieldMatch)) {
|
|
151
|
+
const value = getNestedValue(event, key);
|
|
152
|
+
if (value === undefined)
|
|
153
|
+
return false;
|
|
154
|
+
if (!matchPattern(String(value), pattern))
|
|
155
|
+
return false;
|
|
156
|
+
}
|
|
157
|
+
}
|
|
158
|
+
// Threshold
|
|
159
|
+
if (c.threshold) {
|
|
160
|
+
const recent = this.getRecentEvents(c.threshold.windowMs, c.source);
|
|
161
|
+
if (recent.length < c.threshold.count)
|
|
162
|
+
return false;
|
|
163
|
+
}
|
|
164
|
+
return true;
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
exports.EventEngine = EventEngine;
|
|
168
|
+
function getNestedValue(obj, path) {
|
|
169
|
+
const parts = path.split('.');
|
|
170
|
+
let current = obj;
|
|
171
|
+
for (const part of parts) {
|
|
172
|
+
if (current === null || current === undefined || typeof current !== 'object')
|
|
173
|
+
return undefined;
|
|
174
|
+
current = current[part];
|
|
175
|
+
}
|
|
176
|
+
return current;
|
|
177
|
+
}
|
|
178
|
+
function matchPattern(value, pattern) {
|
|
179
|
+
// Simple glob matching: * matches any sequence
|
|
180
|
+
const regex = new RegExp('^' + pattern.replace(/[.*+?^${}()|[\]\\]/g, '\\$&').replace(/\\\*/g, '.*') + '$');
|
|
181
|
+
return regex.test(value);
|
|
182
|
+
}
|
|
183
|
+
/** Default rules — sensible security defaults */
|
|
184
|
+
function defaultRules() {
|
|
185
|
+
return [
|
|
186
|
+
{
|
|
187
|
+
name: 'critical-threat',
|
|
188
|
+
condition: { category: 'threat', minSeverity: 'critical' },
|
|
189
|
+
action: 'kill',
|
|
190
|
+
requireLlmConfirmation: true,
|
|
191
|
+
},
|
|
192
|
+
{
|
|
193
|
+
name: 'high-violation',
|
|
194
|
+
condition: { category: 'violation', minSeverity: 'high' },
|
|
195
|
+
action: 'alert',
|
|
196
|
+
},
|
|
197
|
+
{
|
|
198
|
+
name: 'anomaly-burst',
|
|
199
|
+
condition: {
|
|
200
|
+
category: 'anomaly',
|
|
201
|
+
threshold: { count: 10, windowMs: 60000 },
|
|
202
|
+
},
|
|
203
|
+
action: 'alert',
|
|
204
|
+
requireLlmConfirmation: true,
|
|
205
|
+
},
|
|
206
|
+
// AI-layer default rules
|
|
207
|
+
{
|
|
208
|
+
name: 'prompt-injection-detected',
|
|
209
|
+
condition: { source: 'prompt', category: 'threat', minSeverity: 'high' },
|
|
210
|
+
action: 'alert',
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
name: 'credential-leak-detected',
|
|
214
|
+
condition: {
|
|
215
|
+
source: 'prompt',
|
|
216
|
+
category: 'threat',
|
|
217
|
+
fieldMatch: { 'data.patternId': 'OL-001' },
|
|
218
|
+
},
|
|
219
|
+
action: 'alert',
|
|
220
|
+
},
|
|
221
|
+
{
|
|
222
|
+
name: 'mcp-exploitation-detected',
|
|
223
|
+
condition: { source: 'mcp-protocol', category: 'threat', minSeverity: 'high' },
|
|
224
|
+
action: 'alert',
|
|
225
|
+
},
|
|
226
|
+
{
|
|
227
|
+
name: 'a2a-spoofing-detected',
|
|
228
|
+
condition: { source: 'a2a-protocol', category: 'threat', minSeverity: 'high' },
|
|
229
|
+
action: 'alert',
|
|
230
|
+
},
|
|
231
|
+
];
|
|
232
|
+
}
|
|
233
|
+
//# sourceMappingURL=event-engine.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"event-engine.js","sourceRoot":"","sources":["../../../src/arp/engine/event-engine.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAcjC,MAAM,cAAc,GAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEtF,SAAS,WAAW,CAAC,CAAgB,EAAE,CAAgB;IACrD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAa,WAAW;IAOtB,YAAY,MAAiB;QANrB,aAAQ,GAAmB,EAAE,CAAC;QAC9B,wBAAmB,GAAyB,EAAE,CAAC;QAE/C,gBAAW,GAAe,EAAE,CAAC;QACpB,kBAAa,GAAG,KAAK,CAAC;QAGrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,uEAAuE;IACvE,OAAO,CAAC,OAAqB;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,iDAAiD;IACjD,aAAa,CAAC,OAA2B;QACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI,CAAC,KAA0D;QACnE,MAAM,SAAS,GAAa;YAC1B,GAAG,KAAK;YACR,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,UAAU;SACzB,CAAC;QAEF,6BAA6B;QAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QAED,iBAAiB;QACjB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,uEAAuE;YACvE,2DAA2D;YAC3D,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAChC,SAAS,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC5C,SAAS,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAsB;gBAChC,MAAM,EAAE,IAAI,CAAC,MAA2B;gBACxC,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,cAAc,SAAS,CAAC,WAAW,EAAE;gBAC/D,KAAK,EAAE,SAAS;aACjB,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2EAA2E;IAC3E,UAAU,CAAC,KAAe,EAAE,WAA0B,EAAE,WAA0B,EAAE,YAAsC;QACxH,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC7B,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC7B,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qEAAqE;IACrE,eAAe,CAAC,QAAgB,EAAE,MAAe;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAClD,IAAI,SAAS,GAAG,MAAM;gBAAE,OAAO,KAAK,CAAC;YACrC,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,KAAe;QACnC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,IAAe,EAAE,KAAe;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAEzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/E,iBAAiB;QACjB,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,KAA2C,EAAE,GAAG,CAAC,CAAC;gBAC/E,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnID,kCAmIC;AAED,SAAS,cAAc,CAAC,GAA4B,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC/F,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe;IAClD,+CAA+C;IAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,GAAG,CAClF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,iDAAiD;AACjD,SAAS,YAAY;IACnB,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,sBAAsB,EAAE,IAAI;SAC7B;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE;YACzD,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE;gBACT,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC1C;YACD,MAAM,EAAE,OAAO;YACf,sBAAsB,EAAE,IAAI;SAC7B;QACD,yBAAyB;QACzB;YACE,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YACxE,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE;gBACT,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE;aAC3C;YACD,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YAC9E,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YAC9E,MAAM,EAAE,OAAO;SAChB;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
export declare const VERSION = "0.2.0";
|
|
2
|
+
export type { ARPConfig, ARPEvent, MonitorType, EventCategory, EventSeverity, LLMAdapter, LLMAdapterType, LLMAssessment, LLMResponse, IntelligenceConfig, BudgetState, AlertRule, AlertCondition, MonitorConfig, InterceptorConfig, AILayerConfig, ProxyConfig, ProxyUpstream, EnforcementAction, EnforcementResult, Monitor, } from './types';
|
|
3
|
+
export { EventEngine } from './engine/event-engine';
|
|
4
|
+
export { IntelligenceCoordinator } from './intelligence/coordinator';
|
|
5
|
+
export { BudgetController } from './intelligence/budget';
|
|
6
|
+
export { AnomalyDetector } from './intelligence/anomaly';
|
|
7
|
+
export { AnthropicAdapter, OpenAIAdapter, OllamaAdapter, createAdapter, autoDetectAdapter } from './intelligence/adapters';
|
|
8
|
+
export { ProcessMonitor } from './monitors/process';
|
|
9
|
+
export { NetworkMonitor } from './monitors/network';
|
|
10
|
+
export { FilesystemMonitor } from './monitors/filesystem';
|
|
11
|
+
export { ProcessInterceptor } from './interceptors/process';
|
|
12
|
+
export { NetworkInterceptor } from './interceptors/network';
|
|
13
|
+
export { FilesystemInterceptor } from './interceptors/filesystem';
|
|
14
|
+
export { PromptInterceptor } from './interceptors/prompt';
|
|
15
|
+
export { MCPProtocolInterceptor } from './interceptors/mcp-protocol';
|
|
16
|
+
export { A2AProtocolInterceptor } from './interceptors/a2a-protocol';
|
|
17
|
+
export { EnforcementEngine, type AlertCallback } from './enforcement/kill-switch';
|
|
18
|
+
export { LocalLogger } from './reporting/local-log';
|
|
19
|
+
export { loadConfig, defaultConfig } from './config/loader';
|
|
20
|
+
export { scanText, PATTERN_SETS, ALL_PATTERNS, type ThreatPattern, type ScanResult } from './patterns/ai-threats';
|
|
21
|
+
export { ARPProxy, type ARPProxyDeps } from './proxy/server';
|
|
22
|
+
export { checkLicense, hasFeature, registerLicenseValidator, PREMIUM_FEATURES, type LicenseTier, type LicenseInfo, } from './license';
|
|
23
|
+
import type { ARPConfig, ARPEvent } from './types';
|
|
24
|
+
import { EventEngine } from './engine/event-engine';
|
|
25
|
+
import { IntelligenceCoordinator } from './intelligence/coordinator';
|
|
26
|
+
import { EnforcementEngine, type AlertCallback } from './enforcement/kill-switch';
|
|
27
|
+
/**
|
|
28
|
+
* Agent Runtime Protection — the main entry point.
|
|
29
|
+
*
|
|
30
|
+
* Provides 3-layer intelligent monitoring for AI agents:
|
|
31
|
+
* - L0: Rule-based event classification (free, every event)
|
|
32
|
+
* - L1: Statistical anomaly detection (free, flagged events)
|
|
33
|
+
* - L2: LLM-assisted assessment (micro-prompts, budget-controlled)
|
|
34
|
+
*
|
|
35
|
+
* Usage:
|
|
36
|
+
* const arp = new AgentRuntimeProtection({ agentName: 'my-agent' });
|
|
37
|
+
* await arp.start();
|
|
38
|
+
* // ... agent runs ...
|
|
39
|
+
* await arp.stop();
|
|
40
|
+
*/
|
|
41
|
+
export declare class AgentRuntimeProtection {
|
|
42
|
+
private readonly config;
|
|
43
|
+
private readonly engine;
|
|
44
|
+
private readonly intelligence;
|
|
45
|
+
private readonly enforcement;
|
|
46
|
+
private readonly logger;
|
|
47
|
+
private readonly monitors;
|
|
48
|
+
private running;
|
|
49
|
+
constructor(configOrPath?: ARPConfig | string);
|
|
50
|
+
/** Start all monitors */
|
|
51
|
+
start(): Promise<void>;
|
|
52
|
+
/** Stop all monitors and flush logs */
|
|
53
|
+
stop(): Promise<void>;
|
|
54
|
+
/** Check if ARP is running */
|
|
55
|
+
isRunning(): boolean;
|
|
56
|
+
/** Get current status */
|
|
57
|
+
getStatus(): {
|
|
58
|
+
running: boolean;
|
|
59
|
+
monitors: Array<{
|
|
60
|
+
type: string;
|
|
61
|
+
running: boolean;
|
|
62
|
+
}>;
|
|
63
|
+
budget: ReturnType<IntelligenceCoordinator['getBudgetStatus']>;
|
|
64
|
+
pausedPids: number[];
|
|
65
|
+
};
|
|
66
|
+
/** Get recent events */
|
|
67
|
+
getEvents(limit?: number): ARPEvent[];
|
|
68
|
+
/** Resume a paused process */
|
|
69
|
+
resume(pid: number): boolean;
|
|
70
|
+
/** Subscribe to all ARP events (for external integrations, test harnesses, etc.) */
|
|
71
|
+
onEvent(handler: (event: ARPEvent) => void | Promise<void>): void;
|
|
72
|
+
/** Subscribe to all enforcement results */
|
|
73
|
+
onEnforcement(handler: (result: import('./types').EnforcementResult) => void | Promise<void>): void;
|
|
74
|
+
/** Set the alert callback for the enforcement engine */
|
|
75
|
+
setAlertCallback(callback: AlertCallback): void;
|
|
76
|
+
/** Get the event engine (for custom integrations) */
|
|
77
|
+
getEngine(): EventEngine;
|
|
78
|
+
/** Get the enforcement engine (for test harnesses) */
|
|
79
|
+
getEnforcement(): EnforcementEngine;
|
|
80
|
+
}
|
|
81
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EACV,SAAS,EACT,QAAQ,EACR,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,GACR,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAW,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAalF;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,OAAO,CAAS;gBAEZ,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM;IA+D7C,yBAAyB;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,uCAAuC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B,8BAA8B;IAC9B,SAAS,IAAI,OAAO;IAIpB,yBAAyB;IACzB,SAAS,IAAI;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpD,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB;IASD,wBAAwB;IACxB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAIrC,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,oFAAoF;IACpF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjE,2CAA2C;IAC3C,aAAa,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAInG,wDAAwD;IACxD,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,qDAAqD;IACrD,SAAS,IAAI,WAAW;IAIxB,sDAAsD;IACtD,cAAc,IAAI,iBAAiB;CAGpC"}
|