hackmyagent 0.7.2 → 0.8.0

package/dist/arp/interceptors/a2a-protocol.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.A2AProtocolInterceptor = void 0;
+const ai_threats_1 = require("../patterns/ai-threats");
+/**
+ * A2A Protocol interceptor -- scans agent-to-agent messages for
+ * identity spoofing, delegation abuse, and embedded prompt injection.
+ *
+ * Enforces a trusted agent list and validates message content.
+ */
+class A2AProtocolInterceptor {
+    constructor(engine, trustedAgents) {
+        this.type = 'a2a-protocol';
+        this.active = false;
+        this.engine = engine;
+        this.trustedAgents = new Set(trustedAgents ?? []);
+    }
+    async start() {
+        this.active = true;
+    }
+    async stop() {
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    /**
+     * Scan an A2A message for identity spoofing, delegation abuse,
+     * and embedded prompt injection.
+     *
+     * @param from - Sending agent identifier
+     * @param to - Receiving agent identifier
+     * @param content - Message content
+     */
+    scanMessage(from, to, content) {
+        if (!this.active)
+            return { detected: false, matches: [] };
+        const allMatches = [];
+        // Check trusted agent list
+        if (this.trustedAgents.size > 0 && !this.trustedAgents.has(from)) {
+            this.engine.emit({
+                source: 'a2a-protocol',
+                category: 'violation',
+                severity: 'high',
+                description: `A2A message from untrusted agent: ${from}`,
+                data: {
+                    from,
+                    to,
+                    reason: 'untrusted-agent',
+                    trustedAgents: Array.from(this.trustedAgents),
+                },
+            });
+            allMatches.push({
+                pattern: {
+                    id: 'A2A-TRUST',
+                    category: 'a2a-attack',
+                    description: 'Message from untrusted agent',
+                    pattern: /./,
+                    severity: 'high',
+                },
+                matchedText: from,
+            });
+        }
+        // Scan for A2A-specific attack patterns
+        const a2aResult = (0, ai_threats_1.scanText)(content, ai_threats_1.PATTERN_SETS.a2aPatterns);
+        if (a2aResult.detected) {
+            for (const match of a2aResult.matches) {
+                this.engine.emit({
+                    source: 'a2a-protocol',
+                    category: 'threat',
+                    severity: match.pattern.severity,
+                    description: `[${match.pattern.id}] ${match.pattern.description} from ${from} to ${to}`,
+                    data: {
+                        patternId: match.pattern.id,
+                        patternCategory: match.pattern.category,
+                        from,
+                        to,
+                        matchedText: match.matchedText,
+                    },
+                });
+            }
+            allMatches.push(...a2aResult.matches);
+        }
+        // Also scan for prompt injection embedded in A2A messages
+        const injectionResult = (0, ai_threats_1.scanText)(content, ai_threats_1.PATTERN_SETS.promptInjection);
+        if (injectionResult.detected) {
+            for (const match of injectionResult.matches) {
+                this.engine.emit({
+                    source: 'a2a-protocol',
+                    category: 'threat',
+                    severity: match.pattern.severity,
+                    description: `[${match.pattern.id}] Prompt injection in A2A message from ${from} to ${to}`,
+                    data: {
+                        patternId: match.pattern.id,
+                        patternCategory: 'prompt-injection-via-a2a',
+                        from,
+                        to,
+                        matchedText: match.matchedText,
+                    },
+                });
+            }
+            allMatches.push(...injectionResult.matches);
+        }
+        return {
+            detected: allMatches.length > 0,
+            matches: allMatches,
+        };
+    }
+}
+exports.A2AProtocolInterceptor = A2AProtocolInterceptor;
+//# sourceMappingURL=a2a-protocol.js.map

package/dist/arp/interceptors/a2a-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-protocol.js","sourceRoot":"","sources":["../../../src/arp/interceptors/a2a-protocol.ts"],"names":[],"mappings":";;;AAEA,uDAAiF;AAEjF;;;;;GAKG;AACH,MAAa,sBAAsB;IAMjC,YAAY,MAAmB,EAAE,aAAwB;QALhD,SAAI,GAAgB,cAAc,CAAC;QAGpC,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,IAAY,EAAE,EAAU,EAAE,OAAe;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1D,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,2BAA2B;QAC3B,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,qCAAqC,IAAI,EAAE;gBACxD,IAAI,EAAE;oBACJ,IAAI;oBACJ,EAAE;oBACF,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;iBAC9C;aACF,CAAC,CAAC;YAEH,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE;oBACP,EAAE,EAAE,WAAW;oBACf,QAAQ,EAAE,YAAY;oBACtB,WAAW,EAAE,8BAA8B;oBAC3C,OAAO,EAAE,GAAG;oBACZ,QAAQ,EAAE,MAAM;iBACjB;gBACD,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,GAAG,IAAA,qBAAQ,EAAC,OAAO,EAAE,yBAAY,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,WAAW,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,SAAS,IAAI,OAAO,EAAE,EAAE;oBACvF,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;wBAC3B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;wBACvC,IAAI;wBACJ,EAAE;wBACF,WAAW,EAAE,KAAK,CAAC,WAAW;qBAC/B;iBACF,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,0DAA0D;QAC1D,MAAM,eAAe,GAAG,IAAA,qBAAQ,EAAC,OAAO,EAAE,yBAAY,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,WAAW,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,0CAA0C,IAAI,OAAO,EAAE,EAAE;oBAC1F,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;wBAC3B,eAAe,EAAE,0BAA0B;wBAC3C,IAAI;wBACJ,EAAE;wBACF,WAAW,EAAE,KAAK,CAAC,WAAW;qBAC/B;iBACF,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC/B,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;CACF;AA7GD,wDA6GC"}

package/dist/arp/interceptors/filesystem.d.ts

@@ -0,0 +1,33 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+/**
+ * Filesystem interceptor — hooks fs module functions to intercept
+ * ALL file operations at the application level.
+ *
+ * Advantages over fs.watch:
+ * - Catches reads (fs.watch only sees writes/renames)
+ * - Catches operations in ALL directories (not just watched paths)
+ * - Zero latency: events fire before the I/O happens
+ * - 100% accuracy: no debouncing artifacts, no missed events
+ * - Full operation context: knows read vs write vs delete vs mkdir
+ */
+export declare class FilesystemInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly allowedPaths;
+    private readonly excludePaths;
+    private readonly fsModule;
+    private originals;
+    private active;
+    constructor(engine: EventEngine, allowedPaths?: string[], excludePaths?: string[]);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    private isSensitivePath;
+    private isOutsideAllowed;
+    private isExcluded;
+    private handleWrite;
+    private handleRead;
+    private handleDelete;
+}
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/arp/interceptors/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/filesystem.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAW1D;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,YAAW,OAAO;IACnD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAG3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAE3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,SAAS,CAAyC;IAC1D,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAQ3E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+CtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAY3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,WAAW;IAmCnB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,YAAY;CAarB"}

package/dist/arp/interceptors/filesystem.js

@@ -0,0 +1,199 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesystemInterceptor = void 0;
+const path = __importStar(require("path"));
+/** Sensitive paths that should never be accessed by an agent */
+const SENSITIVE_PATHS = [
+    '.ssh', '.aws', '.gnupg', '.kube', '.config/gcloud',
+    '.docker/config.json', '.npmrc', '.pypirc',
+    '.git-credentials', 'wallet.json',
+    '.bashrc', '.zshrc', '.bash_profile', '.profile',
+    '.gitconfig', '.env', '.netrc', '.pgpass',
+];
+/**
+ * Filesystem interceptor — hooks fs module functions to intercept
+ * ALL file operations at the application level.
+ *
+ * Advantages over fs.watch:
+ * - Catches reads (fs.watch only sees writes/renames)
+ * - Catches operations in ALL directories (not just watched paths)
+ * - Zero latency: events fire before the I/O happens
+ * - 100% accuracy: no debouncing artifacts, no missed events
+ * - Full operation context: knows read vs write vs delete vs mkdir
+ */
+class FilesystemInterceptor {
+    constructor(engine, allowedPaths, excludePaths) {
+        this.type = 'filesystem';
+        this.originals = null;
+        this.active = false;
+        this.engine = engine;
+        this.allowedPaths = new Set(allowedPaths ?? []);
+        this.excludePaths = new Set(excludePaths ?? []);
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        this.fsModule = require('fs');
+    }
+    async start() {
+        if (this.active)
+            return;
+        this.originals = {};
+        const self = this;
+        const mod = this.fsModule;
+        const originals = this.originals;
+        // Hook write operations
+        for (const fn of ['writeFile', 'writeFileSync', 'appendFile', 'appendFileSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleWrite(filePath, fn);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        // Hook read operations
+        for (const fn of ['readFile', 'readFileSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleRead(filePath);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        // Hook mkdir
+        for (const fn of ['mkdir', 'mkdirSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (dirPath, ...rest) {
+                if (typeof dirPath === 'string' && !self.isExcluded(dirPath))
+                    self.handleWrite(dirPath, fn);
+                return originals[fn].call(mod, dirPath, ...rest);
+            };
+        }
+        // Hook unlink/rm
+        for (const fn of ['unlink', 'unlinkSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleDelete(filePath);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        this.active = true;
+    }
+    async stop() {
+        if (!this.active || !this.originals)
+            return;
+        const mod = this.fsModule;
+        for (const [fn, original] of Object.entries(this.originals)) {
+            mod[fn] = original;
+        }
+        this.originals = null;
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    isSensitivePath(filePath) {
+        const normalized = path.resolve(filePath);
+        return SENSITIVE_PATHS.some((sp) => normalized.includes(sp) || path.basename(filePath).startsWith('.env'));
+    }
+    isOutsideAllowed(filePath) {
+        if (this.allowedPaths.size === 0)
+            return false;
+        const normalized = path.resolve(filePath);
+        return !Array.from(this.allowedPaths).some((ap) => normalized.startsWith(path.resolve(ap)));
+    }
+    isExcluded(filePath) {
+        if (this.excludePaths.size === 0)
+            return false;
+        const normalized = path.resolve(filePath);
+        return Array.from(this.excludePaths).some((ep) => normalized.startsWith(path.resolve(ep)));
+    }
+    handleWrite(filePath, operation) {
+        const sensitive = this.isSensitivePath(filePath);
+        const outsideAllowed = this.isOutsideAllowed(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'high',
+                description: `Intercepted write to sensitive path: ${filePath} (${operation})`,
+                data: { path: filePath, operation, sensitive: true, intercepted: true },
+            });
+            return;
+        }
+        if (outsideAllowed) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'anomaly',
+                severity: 'medium',
+                description: `Intercepted write outside allowed paths: ${filePath}`,
+                data: { path: filePath, operation, allowed: false, intercepted: true },
+            });
+            return;
+        }
+        this.engine.emit({
+            source: 'filesystem',
+            category: 'normal',
+            severity: 'info',
+            description: `Intercepted file operation: ${operation} ${filePath}`,
+            data: { path: filePath, operation, intercepted: true },
+        });
+    }
+    handleRead(filePath) {
+        const sensitive = this.isSensitivePath(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'high',
+                description: `Intercepted read of sensitive path: ${filePath}`,
+                data: { path: filePath, operation: 'read', sensitive: true, intercepted: true },
+            });
+        }
+    }
+    handleDelete(filePath) {
+        const sensitive = this.isSensitivePath(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'critical',
+                description: `Intercepted deletion of sensitive path: ${filePath}`,
+                data: { path: filePath, operation: 'delete', sensitive: true, intercepted: true },
+            });
+        }
+    }
+}
+exports.FilesystemInterceptor = FilesystemInterceptor;
+//# sourceMappingURL=filesystem.js.map

package/dist/arp/interceptors/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../src/arp/interceptors/filesystem.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAI7B,gEAAgE;AAChE,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB;IACnD,qBAAqB,EAAE,QAAQ,EAAE,SAAS;IAC1C,kBAAkB,EAAE,aAAa;IACjC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU;IAChD,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS;CAC1C,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAa,qBAAqB;IAYhC,YAAY,MAAmB,EAAE,YAAuB,EAAE,YAAuB;QAXxE,SAAI,GAAgB,YAAY,CAAC;QAQlC,cAAS,GAAoC,IAAI,CAAC;QAClD,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,iEAAiE;QACjE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,wBAAwB;QACxB,KAAK,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAChF,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC/F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,aAAa;QACb,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,OAAgB,EAAE,GAAG,IAAe;gBACtD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACnD,CAAC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,KAAK,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC5F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACjC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CACtE,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAChD,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/C,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,SAAiB;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,wCAAwC,QAAQ,KAAK,SAAS,GAAG;gBAC9E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aACxE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,4CAA4C,QAAQ,EAAE;gBACnE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;aACvE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,+BAA+B,SAAS,IAAI,QAAQ,EAAE;YACnE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,uCAAuC,QAAQ,EAAE;gBAC9D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAChF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,2CAA2C,QAAQ,EAAE;gBAClE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxKD,sDAwKC"}

package/dist/arp/interceptors/mcp-protocol.d.ts

@@ -0,0 +1,25 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+import { type ScanResult } from '../patterns/ai-threats';
+/**
+ * MCP Protocol interceptor -- scans MCP tool calls for path traversal,
+ * command injection, and SSRF exploitation patterns.
+ *
+ * Enforces tool allowlists and validates parameters at the protocol level.
+ */
+export declare class MCPProtocolInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly allowedTools;
+    private active;
+    constructor(engine: EventEngine, allowedTools?: string[]);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    /**
+     * Scan an MCP tool call for exploitation patterns.
+     * Checks tool name against allowlist and scans all parameter values.
+     */
+    scanToolCall(toolName: string, args: Record<string, unknown>): ScanResult;
+}
+//# sourceMappingURL=mcp-protocol.d.ts.map

package/dist/arp/interceptors/mcp-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/mcp-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEjF;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,OAAO;IACpD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU;CAuD1E"}

package/dist/arp/interceptors/mcp-protocol.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCPProtocolInterceptor = void 0;
+const ai_threats_1 = require("../patterns/ai-threats");
+/**
+ * MCP Protocol interceptor -- scans MCP tool calls for path traversal,
+ * command injection, and SSRF exploitation patterns.
+ *
+ * Enforces tool allowlists and validates parameters at the protocol level.
+ */
+class MCPProtocolInterceptor {
+    constructor(engine, allowedTools) {
+        this.type = 'mcp-protocol';
+        this.active = false;
+        this.engine = engine;
+        this.allowedTools = new Set(allowedTools ?? []);
+    }
+    async start() {
+        this.active = true;
+    }
+    async stop() {
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    /**
+     * Scan an MCP tool call for exploitation patterns.
+     * Checks tool name against allowlist and scans all parameter values.
+     */
+    scanToolCall(toolName, args) {
+        if (!this.active)
+            return { detected: false, matches: [] };
+        // Check tool allowlist
+        if (this.allowedTools.size > 0 && !this.allowedTools.has(toolName)) {
+            this.engine.emit({
+                source: 'mcp-protocol',
+                category: 'violation',
+                severity: 'high',
+                description: `MCP tool not in allowlist: ${toolName}`,
+                data: {
+                    toolName,
+                    reason: 'not-in-allowlist',
+                    allowedTools: Array.from(this.allowedTools),
+                },
+            });
+            return {
+                detected: true,
+                matches: [{
+                        pattern: {
+                            id: 'MCP-ALLOWLIST',
+                            category: 'mcp-exploitation',
+                            description: 'Tool not in allowlist',
+                            pattern: /./,
+                            severity: 'high',
+                        },
+                        matchedText: toolName,
+                    }],
+            };
+        }
+        // Flatten all parameter values into a single string for scanning
+        const paramText = flattenArgs(args);
+        const result = (0, ai_threats_1.scanText)(paramText, ai_threats_1.PATTERN_SETS.mcpPatterns);
+        if (result.detected) {
+            for (const match of result.matches) {
+                this.engine.emit({
+                    source: 'mcp-protocol',
+                    category: 'threat',
+                    severity: match.pattern.severity,
+                    description: `[${match.pattern.id}] ${match.pattern.description} in tool "${toolName}"`,
+                    data: {
+                        patternId: match.pattern.id,
+                        patternCategory: match.pattern.category,
+                        toolName,
+                        matchedText: match.matchedText,
+                        args: sanitizeArgs(args),
+                    },
+                });
+            }
+        }
+        return result;
+    }
+}
+exports.MCPProtocolInterceptor = MCPProtocolInterceptor;
+/** Recursively flatten object values into a single string for scanning */
+function flattenArgs(obj, depth = 0) {
+    if (depth > 10)
+        return '';
+    const parts = [];
+    for (const value of Object.values(obj)) {
+        if (typeof value === 'string') {
+            parts.push(value);
+        }
+        else if (typeof value === 'number' || typeof value === 'boolean') {
+            parts.push(String(value));
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === 'string') {
+                    parts.push(item);
+                }
+                else if (typeof item === 'object' && item !== null) {
+                    parts.push(flattenArgs(item, depth + 1));
+                }
+            }
+        }
+        else if (typeof value === 'object' && value !== null) {
+            parts.push(flattenArgs(value, depth + 1));
+        }
+    }
+    return parts.join('\n');
+}
+/** Sanitize args for logging (truncate long strings) */
+function sanitizeArgs(args) {
+    const result = {};
+    for (const [key, value] of Object.entries(args)) {
+        if (typeof value === 'string' && value.length > 200) {
+            result[key] = value.slice(0, 200) + '...[truncated]';
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=mcp-protocol.js.map

package/dist/arp/interceptors/mcp-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.js","sourceRoot":"","sources":["../../../src/arp/interceptors/mcp-protocol.ts"],"names":[],"mappings":";;;AAEA,uDAAiF;AAEjF;;;;;GAKG;AACH,MAAa,sBAAsB;IAMjC,YAAY,MAAmB,EAAE,YAAuB;QAL/C,SAAI,GAAgB,cAAc,CAAC;QAGpC,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,QAAgB,EAAE,IAA6B;QAC1D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1D,uBAAuB;QACvB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,8BAA8B,QAAQ,EAAE;gBACrD,IAAI,EAAE;oBACJ,QAAQ;oBACR,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;iBAC5C;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,CAAC;wBACR,OAAO,EAAE;4BACP,EAAE,EAAE,eAAe;4BACnB,QAAQ,EAAE,kBAAkB;4BAC5B,WAAW,EAAE,uBAAuB;4BACpC,OAAO,EAAE,GAAG;4BACZ,QAAQ,EAAE,MAAM;yBACjB;wBACD,WAAW,EAAE,QAAQ;qBACtB,CAAC;aACH,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,qBAAQ,EAAC,SAAS,EAAE,yBAAY,CAAC,WAAW,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,WAAW,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,aAAa,QAAQ,GAAG;oBACvF,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;wBAC3B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;wBACvC,QAAQ;wBACR,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAlFD,wDAkFC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAA4B,EAAE,KAAK,GAAG,CAAC;IAC1D,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;qBAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACrD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAA+B,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAgC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/arp/interceptors/network.d.ts

@@ -0,0 +1,26 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+/**
+ * Network interceptor — hooks net.Socket.prototype.connect to intercept
+ * ALL outbound TCP connections at the application level.
+ *
+ * Advantages over lsof/ss polling:
+ * - Zero latency: events fire before the connection is made
+ * - 100% accuracy: no missed connections between poll intervals
+ * - No system tool dependency: works in sandboxed/container environments
+ * - Covers all Node.js networking (http, https, fetch, net.connect)
+ */
+export declare class NetworkInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly allowedHosts;
+    private originalConnect;
+    private active;
+    constructor(engine: EventEngine, allowedHosts?: string[]);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    private parseConnectArgs;
+    private handleConnection;
+}
+//# sourceMappingURL=network.d.ts.map

package/dist/arp/interceptors/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/network.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAS1D;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,OAAO;IAChD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,eAAe,CAAoD;IAC3E,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,gBAAgB;CA2CzB"}