hackmyagent 0.7.2 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +191 -0
- package/README.md +66 -28
- package/dist/arp/cli/index.d.ts +3 -0
- package/dist/arp/cli/index.d.ts.map +1 -0
- package/dist/arp/cli/index.js +219 -0
- package/dist/arp/cli/index.js.map +1 -0
- package/dist/arp/config/loader.d.ts +8 -0
- package/dist/arp/config/loader.d.ts.map +1 -0
- package/dist/arp/config/loader.js +102 -0
- package/dist/arp/config/loader.js.map +1 -0
- package/dist/arp/enforcement/kill-switch.d.ts +22 -0
- package/dist/arp/enforcement/kill-switch.d.ts.map +1 -0
- package/dist/arp/enforcement/kill-switch.js +122 -0
- package/dist/arp/enforcement/kill-switch.js.map +1 -0
- package/dist/arp/engine/event-engine.d.ts +29 -0
- package/dist/arp/engine/event-engine.d.ts.map +1 -0
- package/dist/arp/engine/event-engine.js +233 -0
- package/dist/arp/engine/event-engine.js.map +1 -0
- package/dist/arp/index.d.ts +81 -0
- package/dist/arp/index.d.ts.map +1 -0
- package/dist/arp/index.js +239 -0
- package/dist/arp/index.js.map +1 -0
- package/dist/arp/intelligence/adapters.d.ts +45 -0
- package/dist/arp/intelligence/adapters.d.ts.map +1 -0
- package/dist/arp/intelligence/adapters.js +222 -0
- package/dist/arp/intelligence/adapters.js.map +1 -0
- package/dist/arp/intelligence/anomaly.d.ts +32 -0
- package/dist/arp/intelligence/anomaly.d.ts.map +1 -0
- package/dist/arp/intelligence/anomaly.js +80 -0
- package/dist/arp/intelligence/anomaly.js.map +1 -0
- package/dist/arp/intelligence/budget.d.ts +33 -0
- package/dist/arp/intelligence/budget.d.ts.map +1 -0
- package/dist/arp/intelligence/budget.js +150 -0
- package/dist/arp/intelligence/budget.js.map +1 -0
- package/dist/arp/intelligence/coordinator.d.ts +43 -0
- package/dist/arp/intelligence/coordinator.d.ts.map +1 -0
- package/dist/arp/intelligence/coordinator.js +301 -0
- package/dist/arp/intelligence/coordinator.js.map +1 -0
- package/dist/arp/interceptors/a2a-protocol.d.ts +29 -0
- package/dist/arp/interceptors/a2a-protocol.d.ts.map +1 -0
- package/dist/arp/interceptors/a2a-protocol.js +111 -0
- package/dist/arp/interceptors/a2a-protocol.js.map +1 -0
- package/dist/arp/interceptors/filesystem.d.ts +33 -0
- package/dist/arp/interceptors/filesystem.d.ts.map +1 -0
- package/dist/arp/interceptors/filesystem.js +199 -0
- package/dist/arp/interceptors/filesystem.js.map +1 -0
- package/dist/arp/interceptors/mcp-protocol.d.ts +25 -0
- package/dist/arp/interceptors/mcp-protocol.d.ts.map +1 -0
- package/dist/arp/interceptors/mcp-protocol.js +126 -0
- package/dist/arp/interceptors/mcp-protocol.js.map +1 -0
- package/dist/arp/interceptors/network.d.ts +26 -0
- package/dist/arp/interceptors/network.d.ts.map +1 -0
- package/dist/arp/interceptors/network.js +146 -0
- package/dist/arp/interceptors/network.js.map +1 -0
- package/dist/arp/interceptors/process.d.ts +26 -0
- package/dist/arp/interceptors/process.d.ts.map +1 -0
- package/dist/arp/interceptors/process.js +157 -0
- package/dist/arp/interceptors/process.js.map +1 -0
- package/dist/arp/interceptors/prompt.d.ts +29 -0
- package/dist/arp/interceptors/prompt.d.ts.map +1 -0
- package/dist/arp/interceptors/prompt.js +82 -0
- package/dist/arp/interceptors/prompt.js.map +1 -0
- package/dist/arp/license/index.d.ts +59 -0
- package/dist/arp/license/index.d.ts.map +1 -0
- package/dist/arp/license/index.js +78 -0
- package/dist/arp/license/index.js.map +1 -0
- package/dist/arp/monitors/filesystem.d.ts +21 -0
- package/dist/arp/monitors/filesystem.d.ts.map +1 -0
- package/dist/arp/monitors/filesystem.js +141 -0
- package/dist/arp/monitors/filesystem.js.map +1 -0
- package/dist/arp/monitors/network.d.ts +32 -0
- package/dist/arp/monitors/network.d.ts.map +1 -0
- package/dist/arp/monitors/network.js +301 -0
- package/dist/arp/monitors/network.js.map +1 -0
- package/dist/arp/monitors/process.d.ts +24 -0
- package/dist/arp/monitors/process.d.ts.map +1 -0
- package/dist/arp/monitors/process.js +205 -0
- package/dist/arp/monitors/process.js.map +1 -0
- package/dist/arp/patterns/ai-threats.d.ts +48 -0
- package/dist/arp/patterns/ai-threats.d.ts.map +1 -0
- package/dist/arp/patterns/ai-threats.js +215 -0
- package/dist/arp/patterns/ai-threats.js.map +1 -0
- package/dist/arp/proxy/forward.d.ts +23 -0
- package/dist/arp/proxy/forward.d.ts.map +1 -0
- package/dist/arp/proxy/forward.js +152 -0
- package/dist/arp/proxy/forward.js.map +1 -0
- package/dist/arp/proxy/server.d.ts +45 -0
- package/dist/arp/proxy/server.d.ts.map +1 -0
- package/dist/arp/proxy/server.js +331 -0
- package/dist/arp/proxy/server.js.map +1 -0
- package/dist/arp/reporting/local-log.d.ts +22 -0
- package/dist/arp/reporting/local-log.d.ts.map +1 -0
- package/dist/arp/reporting/local-log.js +116 -0
- package/dist/arp/reporting/local-log.js.map +1 -0
- package/dist/arp/types.d.ts +230 -0
- package/dist/arp/types.d.ts.map +1 -0
- package/dist/arp/types.js +4 -0
- package/dist/arp/types.js.map +1 -0
- package/dist/attack/custom-payloads.d.ts +11 -0
- package/dist/attack/custom-payloads.d.ts.map +1 -0
- package/dist/attack/custom-payloads.js +108 -0
- package/dist/attack/custom-payloads.js.map +1 -0
- package/dist/attack/fail-policy.d.ts +16 -0
- package/dist/attack/fail-policy.d.ts.map +1 -0
- package/dist/attack/fail-policy.js +36 -0
- package/dist/attack/fail-policy.js.map +1 -0
- package/dist/attack/index.d.ts +12 -0
- package/dist/attack/index.d.ts.map +1 -0
- package/dist/attack/index.js +30 -0
- package/dist/attack/index.js.map +1 -0
- package/dist/attack/payloads/a2a-attacks.d.ts +12 -0
- package/dist/attack/payloads/a2a-attacks.d.ts.map +1 -0
- package/dist/attack/payloads/a2a-attacks.js +221 -0
- package/dist/attack/payloads/a2a-attacks.js.map +1 -0
- package/dist/attack/payloads/capability-abuse.d.ts +8 -0
- package/dist/attack/payloads/capability-abuse.d.ts.map +1 -0
- package/dist/attack/payloads/capability-abuse.js +222 -0
- package/dist/attack/payloads/capability-abuse.js.map +1 -0
- package/dist/attack/payloads/context-manipulation.d.ts +8 -0
- package/dist/attack/payloads/context-manipulation.d.ts.map +1 -0
- package/dist/attack/payloads/context-manipulation.js +217 -0
- package/dist/attack/payloads/context-manipulation.js.map +1 -0
- package/dist/attack/payloads/data-exfiltration.d.ts +8 -0
- package/dist/attack/payloads/data-exfiltration.d.ts.map +1 -0
- package/dist/attack/payloads/data-exfiltration.js +249 -0
- package/dist/attack/payloads/data-exfiltration.js.map +1 -0
- package/dist/attack/payloads/index.d.ts +29 -0
- package/dist/attack/payloads/index.d.ts.map +1 -0
- package/dist/attack/payloads/index.js +76 -0
- package/dist/attack/payloads/index.js.map +1 -0
- package/dist/attack/payloads/jailbreak.d.ts +8 -0
- package/dist/attack/payloads/jailbreak.d.ts.map +1 -0
- package/dist/attack/payloads/jailbreak.js +265 -0
- package/dist/attack/payloads/jailbreak.js.map +1 -0
- package/dist/attack/payloads/mcp-exploitation.d.ts +12 -0
- package/dist/attack/payloads/mcp-exploitation.d.ts.map +1 -0
- package/dist/attack/payloads/mcp-exploitation.js +221 -0
- package/dist/attack/payloads/mcp-exploitation.js.map +1 -0
- package/dist/attack/payloads/prompt-injection.d.ts +8 -0
- package/dist/attack/payloads/prompt-injection.d.ts.map +1 -0
- package/dist/attack/payloads/prompt-injection.js +262 -0
- package/dist/attack/payloads/prompt-injection.js.map +1 -0
- package/dist/attack/scanner.d.ts +84 -0
- package/dist/attack/scanner.d.ts.map +1 -0
- package/dist/attack/scanner.js +509 -0
- package/dist/attack/scanner.js.map +1 -0
- package/dist/attack/types.d.ts +153 -0
- package/dist/attack/types.d.ts.map +1 -0
- package/dist/attack/types.js +46 -0
- package/dist/attack/types.js.map +1 -0
- package/dist/benchmarks/index.d.ts +16 -0
- package/dist/benchmarks/index.d.ts.map +1 -0
- package/dist/benchmarks/index.js +27 -0
- package/dist/benchmarks/index.js.map +1 -0
- package/dist/benchmarks/oasb-1.d.ts +112 -0
- package/dist/benchmarks/oasb-1.d.ts.map +1 -0
- package/dist/benchmarks/oasb-1.js +1124 -0
- package/dist/benchmarks/oasb-1.js.map +1 -0
- package/dist/checker/check-skill.d.ts +48 -0
- package/dist/checker/check-skill.d.ts.map +1 -0
- package/dist/checker/check-skill.js +105 -0
- package/dist/checker/check-skill.js.map +1 -0
- package/dist/checker/index.d.ts +12 -0
- package/dist/checker/index.d.ts.map +1 -0
- package/dist/checker/index.js +16 -0
- package/dist/checker/index.js.map +1 -0
- package/dist/checker/permission-analyzer.d.ts +12 -0
- package/dist/checker/permission-analyzer.d.ts.map +1 -0
- package/dist/checker/permission-analyzer.js +84 -0
- package/dist/checker/permission-analyzer.js.map +1 -0
- package/dist/checker/publisher-verifier.d.ts +34 -0
- package/dist/checker/publisher-verifier.d.ts.map +1 -0
- package/dist/checker/publisher-verifier.js +121 -0
- package/dist/checker/publisher-verifier.js.map +1 -0
- package/dist/checker/skill-identifier.d.ts +14 -0
- package/dist/checker/skill-identifier.d.ts.map +1 -0
- package/dist/checker/skill-identifier.js +55 -0
- package/dist/checker/skill-identifier.js.map +1 -0
- package/dist/cli.d.ts +7 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +3534 -0
- package/dist/cli.js.map +1 -0
- package/dist/hardening/index.d.ts +7 -0
- package/dist/hardening/index.d.ts.map +1 -0
- package/dist/hardening/index.js +9 -0
- package/dist/hardening/index.js.map +1 -0
- package/dist/hardening/scanner.d.ts +147 -0
- package/dist/hardening/scanner.d.ts.map +1 -0
- package/dist/hardening/scanner.js +5445 -0
- package/dist/hardening/scanner.js.map +1 -0
- package/dist/hardening/security-check.d.ts +85 -0
- package/dist/hardening/security-check.d.ts.map +1 -0
- package/dist/hardening/security-check.js +6 -0
- package/dist/hardening/security-check.js.map +1 -0
- package/dist/index.d.ts +38 -4
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +91 -3525
- package/dist/index.js.map +1 -1
- package/dist/mcp-server.js +10 -10
- package/dist/mcp-server.js.map +1 -1
- package/dist/oasb/config/dvaa-targets.d.ts +13 -0
- package/dist/oasb/config/dvaa-targets.d.ts.map +1 -0
- package/dist/oasb/config/dvaa-targets.js +89 -0
- package/dist/oasb/config/dvaa-targets.js.map +1 -0
- package/dist/oasb/harness/arp-wrapper.d.ts +29 -0
- package/dist/oasb/harness/arp-wrapper.d.ts.map +1 -0
- package/dist/oasb/harness/arp-wrapper.js +134 -0
- package/dist/oasb/harness/arp-wrapper.js.map +1 -0
- package/dist/oasb/harness/dvaa-client.d.ts +46 -0
- package/dist/oasb/harness/dvaa-client.d.ts.map +1 -0
- package/dist/oasb/harness/dvaa-client.js +98 -0
- package/dist/oasb/harness/dvaa-client.js.map +1 -0
- package/dist/oasb/harness/dvaa-manager.d.ts +17 -0
- package/dist/oasb/harness/dvaa-manager.d.ts.map +1 -0
- package/dist/oasb/harness/dvaa-manager.js +132 -0
- package/dist/oasb/harness/dvaa-manager.js.map +1 -0
- package/dist/oasb/harness/event-collector.d.ts +33 -0
- package/dist/oasb/harness/event-collector.d.ts.map +1 -0
- package/dist/oasb/harness/event-collector.js +86 -0
- package/dist/oasb/harness/event-collector.js.map +1 -0
- package/dist/oasb/harness/metrics.d.ts +14 -0
- package/dist/oasb/harness/metrics.d.ts.map +1 -0
- package/dist/oasb/harness/metrics.js +56 -0
- package/dist/oasb/harness/metrics.js.map +1 -0
- package/dist/oasb/harness/mock-llm-adapter.d.ts +34 -0
- package/dist/oasb/harness/mock-llm-adapter.d.ts.map +1 -0
- package/dist/oasb/harness/mock-llm-adapter.js +69 -0
- package/dist/oasb/harness/mock-llm-adapter.js.map +1 -0
- package/dist/oasb/harness/types.d.ts +74 -0
- package/dist/oasb/harness/types.d.ts.map +1 -0
- package/dist/oasb/harness/types.js +3 -0
- package/dist/oasb/harness/types.js.map +1 -0
- package/dist/plugins/core.d.ts +109 -0
- package/dist/plugins/core.d.ts.map +1 -0
- package/dist/plugins/core.js +30 -0
- package/dist/plugins/core.js.map +1 -0
- package/dist/plugins/credvault.d.ts +22 -0
- package/dist/plugins/credvault.d.ts.map +1 -0
- package/dist/plugins/credvault.js +374 -0
- package/dist/plugins/credvault.js.map +1 -0
- package/dist/plugins/signcrypt.d.ts +27 -0
- package/dist/plugins/signcrypt.d.ts.map +1 -0
- package/dist/plugins/signcrypt.js +317 -0
- package/dist/plugins/signcrypt.js.map +1 -0
- package/dist/plugins/skillguard.d.ts +25 -0
- package/dist/plugins/skillguard.d.ts.map +1 -0
- package/dist/plugins/skillguard.js +346 -0
- package/dist/plugins/skillguard.js.map +1 -0
- package/dist/registry/client.d.ts +125 -0
- package/dist/registry/client.d.ts.map +1 -0
- package/dist/registry/client.js +308 -0
- package/dist/registry/client.js.map +1 -0
- package/dist/registry/index.d.ts +3 -0
- package/dist/registry/index.d.ts.map +1 -0
- package/dist/registry/index.js +10 -0
- package/dist/registry/index.js.map +1 -0
- package/dist/scanner/external-scanner.d.ts +13 -0
- package/dist/scanner/external-scanner.d.ts.map +1 -0
- package/dist/scanner/external-scanner.js +299 -0
- package/dist/scanner/external-scanner.js.map +1 -0
- package/dist/scanner/index.d.ts +6 -0
- package/dist/scanner/index.d.ts.map +1 -0
- package/dist/scanner/index.js +9 -0
- package/dist/scanner/index.js.map +1 -0
- package/dist/scanner/types.d.ts +32 -0
- package/dist/scanner/types.d.ts.map +1 -0
- package/dist/scanner/types.js +6 -0
- package/dist/scanner/types.js.map +1 -0
- package/dist/semantic/deep-scan.d.ts +13 -0
- package/dist/semantic/deep-scan.d.ts.map +1 -0
- package/dist/semantic/deep-scan.js +63 -0
- package/dist/semantic/deep-scan.js.map +1 -0
- package/dist/semantic/index.d.ts +17 -0
- package/dist/semantic/index.d.ts.map +1 -0
- package/dist/semantic/index.js +39 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/integration/cost-estimator.d.ts +17 -0
- package/dist/semantic/integration/cost-estimator.d.ts.map +1 -0
- package/dist/semantic/integration/cost-estimator.js +54 -0
- package/dist/semantic/integration/cost-estimator.js.map +1 -0
- package/dist/semantic/integration/finding-adapter.d.ts +34 -0
- package/dist/semantic/integration/finding-adapter.d.ts.map +1 -0
- package/dist/semantic/integration/finding-adapter.js +41 -0
- package/dist/semantic/integration/finding-adapter.js.map +1 -0
- package/dist/semantic/integration/oasb-upgrader.d.ts +20 -0
- package/dist/semantic/integration/oasb-upgrader.d.ts.map +1 -0
- package/dist/semantic/integration/oasb-upgrader.js +47 -0
- package/dist/semantic/integration/oasb-upgrader.js.map +1 -0
- package/dist/semantic/llm/budget.d.ts +50 -0
- package/dist/semantic/llm/budget.d.ts.map +1 -0
- package/dist/semantic/llm/budget.js +139 -0
- package/dist/semantic/llm/budget.js.map +1 -0
- package/dist/semantic/llm/cache.d.ts +36 -0
- package/dist/semantic/llm/cache.d.ts.map +1 -0
- package/dist/semantic/llm/cache.js +103 -0
- package/dist/semantic/llm/cache.js.map +1 -0
- package/dist/semantic/llm/client.d.ts +49 -0
- package/dist/semantic/llm/client.d.ts.map +1 -0
- package/dist/semantic/llm/client.js +64 -0
- package/dist/semantic/llm/client.js.map +1 -0
- package/dist/semantic/llm/index.d.ts +33 -0
- package/dist/semantic/llm/index.d.ts.map +1 -0
- package/dist/semantic/llm/index.js +129 -0
- package/dist/semantic/llm/index.js.map +1 -0
- package/dist/semantic/llm/prompts.d.ts +30 -0
- package/dist/semantic/llm/prompts.d.ts.map +1 -0
- package/dist/semantic/llm/prompts.js +120 -0
- package/dist/semantic/llm/prompts.js.map +1 -0
- package/dist/semantic/structural/credential-context.d.ts +14 -0
- package/dist/semantic/structural/credential-context.d.ts.map +1 -0
- package/dist/semantic/structural/credential-context.js +295 -0
- package/dist/semantic/structural/credential-context.js.map +1 -0
- package/dist/semantic/structural/index.d.ts +28 -0
- package/dist/semantic/structural/index.d.ts.map +1 -0
- package/dist/semantic/structural/index.js +138 -0
- package/dist/semantic/structural/index.js.map +1 -0
- package/dist/semantic/structural/instruction.d.ts +19 -0
- package/dist/semantic/structural/instruction.d.ts.map +1 -0
- package/dist/semantic/structural/instruction.js +167 -0
- package/dist/semantic/structural/instruction.js.map +1 -0
- package/dist/semantic/structural/mcp-config.d.ts +22 -0
- package/dist/semantic/structural/mcp-config.d.ts.map +1 -0
- package/dist/semantic/structural/mcp-config.js +294 -0
- package/dist/semantic/structural/mcp-config.js.map +1 -0
- package/dist/semantic/structural/permission-model.d.ts +16 -0
- package/dist/semantic/structural/permission-model.d.ts.map +1 -0
- package/dist/semantic/structural/permission-model.js +121 -0
- package/dist/semantic/structural/permission-model.js.map +1 -0
- package/dist/semantic/types.d.ts +122 -0
- package/dist/semantic/types.d.ts.map +1 -0
- package/dist/semantic/types.js +10 -0
- package/dist/semantic/types.js.map +1 -0
- package/package.json +25 -14
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.FilesystemMonitor = void 0;
|
|
37
|
+
const fs = __importStar(require("fs"));
|
|
38
|
+
const path = __importStar(require("path"));
|
|
39
|
+
/** Sensitive paths that should never be accessed by an agent */
|
|
40
|
+
const SENSITIVE_PATHS = [
|
|
41
|
+
'.ssh', '.aws', '.gnupg', '.kube', '.config/gcloud',
|
|
42
|
+
'.docker/config.json', '.npmrc', '.pypirc',
|
|
43
|
+
'.git-credentials', 'wallet.json',
|
|
44
|
+
'.bashrc', '.zshrc', '.bash_profile', '.profile',
|
|
45
|
+
'.gitconfig', '.env', '.netrc', '.pgpass',
|
|
46
|
+
];
|
|
47
|
+
/**
|
|
48
|
+
* Filesystem monitor — watches for file access outside expected paths.
|
|
49
|
+
* Uses fs.watch (cross-platform, efficient, no polling).
|
|
50
|
+
*/
|
|
51
|
+
class FilesystemMonitor {
|
|
52
|
+
constructor(engine, watchPaths, allowedPaths) {
|
|
53
|
+
this.type = 'filesystem';
|
|
54
|
+
this.watchers = [];
|
|
55
|
+
this.debounceMap = new Map();
|
|
56
|
+
this.debounceMs = 1000;
|
|
57
|
+
this.engine = engine;
|
|
58
|
+
this.watchPaths = watchPaths ?? [process.cwd()];
|
|
59
|
+
this.allowedPaths = new Set(allowedPaths ?? []);
|
|
60
|
+
}
|
|
61
|
+
async start() {
|
|
62
|
+
for (const watchPath of this.watchPaths) {
|
|
63
|
+
try {
|
|
64
|
+
const resolved = fs.realpathSync(watchPath);
|
|
65
|
+
const watcher = fs.watch(resolved, { recursive: true }, (eventType, filename) => {
|
|
66
|
+
if (!filename)
|
|
67
|
+
return;
|
|
68
|
+
this.handleEvent(eventType, filename, resolved);
|
|
69
|
+
});
|
|
70
|
+
watcher.on('error', () => {
|
|
71
|
+
// Watcher error — likely permission denied or path removed
|
|
72
|
+
});
|
|
73
|
+
this.watchers.push(watcher);
|
|
74
|
+
}
|
|
75
|
+
catch {
|
|
76
|
+
// Path doesn't exist or not accessible
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
async stop() {
|
|
81
|
+
for (const watcher of this.watchers) {
|
|
82
|
+
watcher.close();
|
|
83
|
+
}
|
|
84
|
+
this.watchers = [];
|
|
85
|
+
for (const timer of this.debounceMap.values()) {
|
|
86
|
+
clearTimeout(timer);
|
|
87
|
+
}
|
|
88
|
+
this.debounceMap.clear();
|
|
89
|
+
}
|
|
90
|
+
isRunning() {
|
|
91
|
+
return this.watchers.length > 0;
|
|
92
|
+
}
|
|
93
|
+
handleEvent(eventType, filename, basePath) {
|
|
94
|
+
// Debounce: many editors trigger multiple events per save
|
|
95
|
+
const key = `${eventType}:${filename}`;
|
|
96
|
+
if (this.debounceMap.has(key))
|
|
97
|
+
return;
|
|
98
|
+
this.debounceMap.set(key, setTimeout(() => {
|
|
99
|
+
this.debounceMap.delete(key);
|
|
100
|
+
}, this.debounceMs));
|
|
101
|
+
const fullPath = path.join(basePath, filename);
|
|
102
|
+
// Check if this touches sensitive paths
|
|
103
|
+
const isSensitive = SENSITIVE_PATHS.some((sp) => filename.includes(sp) || fullPath.includes(sp));
|
|
104
|
+
if (isSensitive) {
|
|
105
|
+
this.engine.emit({
|
|
106
|
+
source: 'filesystem',
|
|
107
|
+
category: 'violation',
|
|
108
|
+
severity: 'high',
|
|
109
|
+
description: `Access to sensitive path: ${filename} (${eventType})`,
|
|
110
|
+
data: { path: filename, eventType, sensitive: true },
|
|
111
|
+
});
|
|
112
|
+
return;
|
|
113
|
+
}
|
|
114
|
+
// Check if outside allowed paths
|
|
115
|
+
if (this.allowedPaths.size > 0) {
|
|
116
|
+
const isAllowed = Array.from(this.allowedPaths).some((ap) => fullPath.startsWith(ap));
|
|
117
|
+
if (!isAllowed) {
|
|
118
|
+
this.engine.emit({
|
|
119
|
+
source: 'filesystem',
|
|
120
|
+
category: 'anomaly',
|
|
121
|
+
severity: 'medium',
|
|
122
|
+
description: `File access outside allowed paths: ${filename}`,
|
|
123
|
+
data: { path: filename, eventType, allowed: false },
|
|
124
|
+
});
|
|
125
|
+
return;
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
// Normal event — only emit for creates and renames (not every write)
|
|
129
|
+
if (eventType === 'rename') {
|
|
130
|
+
this.engine.emit({
|
|
131
|
+
source: 'filesystem',
|
|
132
|
+
category: 'normal',
|
|
133
|
+
severity: 'info',
|
|
134
|
+
description: `File created/renamed: ${filename}`,
|
|
135
|
+
data: { path: filename, eventType },
|
|
136
|
+
});
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
}
|
|
140
|
+
exports.FilesystemMonitor = FilesystemMonitor;
|
|
141
|
+
//# sourceMappingURL=filesystem.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../src/arp/monitors/filesystem.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAI7B,gEAAgE;AAChE,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB;IACnD,qBAAqB,EAAE,QAAQ,EAAE,SAAS;IAC1C,kBAAkB,EAAE,aAAa;IACjC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU;IAChD,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS;CAC1C,CAAC;AAEF;;;GAGG;AACH,MAAa,iBAAiB;IAS5B,YACE,MAAmB,EACnB,UAAqB,EACrB,YAAuB;QAXhB,SAAI,GAAgB,YAAY,CAAC;QAClC,aAAQ,GAAmB,EAAE,CAAC;QAIrB,gBAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;QAC/D,eAAU,GAAG,IAAI,CAAC;QAOjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;oBAC9E,IAAI,CAAC,QAAQ;wBAAE,OAAO;oBACtB,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACvB,2DAA2D;gBAC7D,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,CAAC;IAEO,WAAW,CAAC,SAAiB,EAAE,QAAgB,EAAE,QAAgB;QACvE,0DAA0D;QAC1D,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAEtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE;YACxC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/C,wCAAwC;QACxC,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAC/C,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,6BAA6B,QAAQ,KAAK,SAAS,GAAG;gBACnE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CACxB,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,YAAY;oBACpB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,sCAAsC,QAAQ,EAAE;oBAC7D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,yBAAyB,QAAQ,EAAE;gBAChD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AA/GD,8CA+GC"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
import type { Monitor, MonitorType } from '../types';
|
|
2
|
+
import type { EventEngine } from '../engine/event-engine';
|
|
3
|
+
/**
|
|
4
|
+
* Network monitor — tracks outbound connections using lsof/ss.
|
|
5
|
+
* Detects connections to suspicious hosts, new outbound destinations,
|
|
6
|
+
* and unexpected port usage.
|
|
7
|
+
*/
|
|
8
|
+
export declare class NetworkMonitor implements Monitor {
|
|
9
|
+
readonly type: MonitorType;
|
|
10
|
+
private timer?;
|
|
11
|
+
private readonly engine;
|
|
12
|
+
private readonly intervalMs;
|
|
13
|
+
private readonly allowedHosts;
|
|
14
|
+
private knownDestinations;
|
|
15
|
+
constructor(engine: EventEngine, intervalMs?: number, allowedHosts?: string[]);
|
|
16
|
+
start(): Promise<void>;
|
|
17
|
+
stop(): Promise<void>;
|
|
18
|
+
isRunning(): boolean;
|
|
19
|
+
private poll;
|
|
20
|
+
private getConnections;
|
|
21
|
+
private parseLsof;
|
|
22
|
+
private parseSs;
|
|
23
|
+
/** Parse /proc/net/tcp (Linux) — no external tools required */
|
|
24
|
+
private parseProcNetTcp;
|
|
25
|
+
/** Parse hex address:port from /proc/net/tcp (e.g., "0100007F:0050") */
|
|
26
|
+
private parseHexAddr;
|
|
27
|
+
/** Parse netstat output — available on most systems as last resort */
|
|
28
|
+
private parseNetstat;
|
|
29
|
+
/** Split "addr.port" or "addr:port" into components */
|
|
30
|
+
private splitAddrPort;
|
|
31
|
+
}
|
|
32
|
+
//# sourceMappingURL=network.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/arp/monitors/network.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAmB1D;;;;GAIG;AACH,qBAAa,cAAe,YAAW,OAAO;IAC5C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAa;IACvC,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,iBAAiB,CAAqB;gBAElC,MAAM,EAAE,WAAW,EAAE,UAAU,GAAE,MAAc,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAM9E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,IAAI;IA0DZ,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,SAAS;IAiCjB,OAAO,CAAC,OAAO;IA+Bf,+DAA+D;IAC/D,OAAO,CAAC,eAAe;IA8BvB,wEAAwE;IACxE,OAAO,CAAC,YAAY;IAiBpB,sEAAsE;IACtE,OAAO,CAAC,YAAY;IAmCpB,uDAAuD;IACvD,OAAO,CAAC,aAAa;CAetB"}
|
|
@@ -0,0 +1,301 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.NetworkMonitor = void 0;
|
|
37
|
+
const child_process_1 = require("child_process");
|
|
38
|
+
const fs = __importStar(require("fs"));
|
|
39
|
+
const os = __importStar(require("os"));
|
|
40
|
+
/** Known exfiltration/suspicious destinations */
|
|
41
|
+
const SUSPICIOUS_HOSTS = [
|
|
42
|
+
'webhook.site', 'requestbin', 'ngrok.io', 'pipedream.net',
|
|
43
|
+
'hookbin.com', 'burpcollaborator', 'interact.sh', 'oastify.com',
|
|
44
|
+
'pastebin.com', 'transfer.sh',
|
|
45
|
+
];
|
|
46
|
+
/**
|
|
47
|
+
* Network monitor — tracks outbound connections using lsof/ss.
|
|
48
|
+
* Detects connections to suspicious hosts, new outbound destinations,
|
|
49
|
+
* and unexpected port usage.
|
|
50
|
+
*/
|
|
51
|
+
class NetworkMonitor {
|
|
52
|
+
constructor(engine, intervalMs = 10000, allowedHosts) {
|
|
53
|
+
this.type = 'network';
|
|
54
|
+
this.knownDestinations = new Set();
|
|
55
|
+
this.engine = engine;
|
|
56
|
+
this.intervalMs = intervalMs;
|
|
57
|
+
this.allowedHosts = new Set(allowedHosts ?? []);
|
|
58
|
+
}
|
|
59
|
+
async start() {
|
|
60
|
+
// Initial snapshot
|
|
61
|
+
const connections = this.getConnections();
|
|
62
|
+
for (const conn of connections) {
|
|
63
|
+
this.knownDestinations.add(`${conn.remoteAddr}:${conn.remotePort}`);
|
|
64
|
+
}
|
|
65
|
+
this.timer = setInterval(() => this.poll(), this.intervalMs);
|
|
66
|
+
if (this.timer.unref)
|
|
67
|
+
this.timer.unref();
|
|
68
|
+
}
|
|
69
|
+
async stop() {
|
|
70
|
+
if (this.timer) {
|
|
71
|
+
clearInterval(this.timer);
|
|
72
|
+
this.timer = undefined;
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
isRunning() {
|
|
76
|
+
return this.timer !== undefined;
|
|
77
|
+
}
|
|
78
|
+
poll() {
|
|
79
|
+
try {
|
|
80
|
+
const connections = this.getConnections();
|
|
81
|
+
for (const conn of connections) {
|
|
82
|
+
const dest = `${conn.remoteAddr}:${conn.remotePort}`;
|
|
83
|
+
// Check for suspicious hosts
|
|
84
|
+
const isSuspicious = SUSPICIOUS_HOSTS.some((h) => conn.remoteAddr.includes(h));
|
|
85
|
+
if (isSuspicious) {
|
|
86
|
+
this.engine.emit({
|
|
87
|
+
source: 'network',
|
|
88
|
+
category: 'threat',
|
|
89
|
+
severity: 'critical',
|
|
90
|
+
description: `Connection to suspicious host: ${dest}`,
|
|
91
|
+
data: {
|
|
92
|
+
remoteAddr: conn.remoteAddr,
|
|
93
|
+
remotePort: conn.remotePort,
|
|
94
|
+
protocol: conn.protocol,
|
|
95
|
+
pid: conn.pid,
|
|
96
|
+
},
|
|
97
|
+
});
|
|
98
|
+
continue;
|
|
99
|
+
}
|
|
100
|
+
// Check for new outbound destinations
|
|
101
|
+
if (!this.knownDestinations.has(dest)) {
|
|
102
|
+
const isAllowed = this.allowedHosts.size === 0 ||
|
|
103
|
+
this.allowedHosts.has(conn.remoteAddr) ||
|
|
104
|
+
Array.from(this.allowedHosts).some((h) => conn.remoteAddr === h || conn.remoteAddr.endsWith('.' + h));
|
|
105
|
+
this.engine.emit({
|
|
106
|
+
source: 'network',
|
|
107
|
+
category: isAllowed ? 'normal' : 'anomaly',
|
|
108
|
+
severity: isAllowed ? 'info' : 'medium',
|
|
109
|
+
description: `New outbound connection: ${dest}`,
|
|
110
|
+
data: {
|
|
111
|
+
remoteAddr: conn.remoteAddr,
|
|
112
|
+
remotePort: conn.remotePort,
|
|
113
|
+
protocol: conn.protocol,
|
|
114
|
+
pid: conn.pid,
|
|
115
|
+
allowed: isAllowed,
|
|
116
|
+
},
|
|
117
|
+
});
|
|
118
|
+
this.knownDestinations.add(dest);
|
|
119
|
+
}
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
catch {
|
|
123
|
+
// lsof/ss failed — skip
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
getConnections() {
|
|
127
|
+
const platform = os.platform();
|
|
128
|
+
if (platform === 'darwin') {
|
|
129
|
+
// macOS: try lsof first, fall back to netstat
|
|
130
|
+
const lsof = this.parseLsof();
|
|
131
|
+
if (lsof.length > 0)
|
|
132
|
+
return lsof;
|
|
133
|
+
return this.parseNetstat();
|
|
134
|
+
}
|
|
135
|
+
// Linux: try ss first, fall back to /proc/net/tcp, then netstat
|
|
136
|
+
const ss = this.parseSs();
|
|
137
|
+
if (ss.length > 0)
|
|
138
|
+
return ss;
|
|
139
|
+
const proc = this.parseProcNetTcp();
|
|
140
|
+
if (proc.length > 0)
|
|
141
|
+
return proc;
|
|
142
|
+
return this.parseNetstat();
|
|
143
|
+
}
|
|
144
|
+
parseLsof() {
|
|
145
|
+
const connections = [];
|
|
146
|
+
try {
|
|
147
|
+
const output = (0, child_process_1.execSync)('lsof -i -n -P 2>/dev/null | grep ESTABLISHED', { encoding: 'utf-8', timeout: 5000 });
|
|
148
|
+
for (const line of output.trim().split('\n')) {
|
|
149
|
+
if (!line)
|
|
150
|
+
continue;
|
|
151
|
+
const parts = line.split(/\s+/);
|
|
152
|
+
if (parts.length < 9)
|
|
153
|
+
continue;
|
|
154
|
+
const nameField = parts[8] ?? '';
|
|
155
|
+
const match = nameField.match(/(\S+):(\d+)->(\S+):(\d+)/);
|
|
156
|
+
if (!match)
|
|
157
|
+
continue;
|
|
158
|
+
connections.push({
|
|
159
|
+
protocol: parts[7]?.includes('TCP') ? 'tcp' : 'udp',
|
|
160
|
+
localAddr: match[1],
|
|
161
|
+
localPort: parseInt(match[2]),
|
|
162
|
+
remoteAddr: match[3],
|
|
163
|
+
remotePort: parseInt(match[4]),
|
|
164
|
+
state: 'ESTABLISHED',
|
|
165
|
+
pid: parseInt(parts[1]) || undefined,
|
|
166
|
+
});
|
|
167
|
+
}
|
|
168
|
+
}
|
|
169
|
+
catch {
|
|
170
|
+
// lsof not available or no connections
|
|
171
|
+
}
|
|
172
|
+
return connections;
|
|
173
|
+
}
|
|
174
|
+
parseSs() {
|
|
175
|
+
const connections = [];
|
|
176
|
+
try {
|
|
177
|
+
const output = (0, child_process_1.execSync)('ss -tpn state established 2>/dev/null', { encoding: 'utf-8', timeout: 5000 });
|
|
178
|
+
for (const line of output.trim().split('\n').slice(1)) {
|
|
179
|
+
if (!line)
|
|
180
|
+
continue;
|
|
181
|
+
const parts = line.split(/\s+/);
|
|
182
|
+
if (parts.length < 5)
|
|
183
|
+
continue;
|
|
184
|
+
const local = parts[3]?.split(':') ?? [];
|
|
185
|
+
const remote = parts[4]?.split(':') ?? [];
|
|
186
|
+
connections.push({
|
|
187
|
+
protocol: 'tcp',
|
|
188
|
+
localAddr: local.slice(0, -1).join(':'),
|
|
189
|
+
localPort: parseInt(local[local.length - 1] ?? '0'),
|
|
190
|
+
remoteAddr: remote.slice(0, -1).join(':'),
|
|
191
|
+
remotePort: parseInt(remote[remote.length - 1] ?? '0'),
|
|
192
|
+
state: 'ESTABLISHED',
|
|
193
|
+
});
|
|
194
|
+
}
|
|
195
|
+
}
|
|
196
|
+
catch {
|
|
197
|
+
// ss not available
|
|
198
|
+
}
|
|
199
|
+
return connections;
|
|
200
|
+
}
|
|
201
|
+
/** Parse /proc/net/tcp (Linux) — no external tools required */
|
|
202
|
+
parseProcNetTcp() {
|
|
203
|
+
const connections = [];
|
|
204
|
+
try {
|
|
205
|
+
const content = fs.readFileSync('/proc/net/tcp', 'utf-8');
|
|
206
|
+
for (const line of content.trim().split('\n').slice(1)) {
|
|
207
|
+
const parts = line.trim().split(/\s+/);
|
|
208
|
+
if (parts.length < 4)
|
|
209
|
+
continue;
|
|
210
|
+
const state = parseInt(parts[3], 16);
|
|
211
|
+
if (state !== 1)
|
|
212
|
+
continue; // 01 = ESTABLISHED
|
|
213
|
+
const local = this.parseHexAddr(parts[1]);
|
|
214
|
+
const remote = this.parseHexAddr(parts[2]);
|
|
215
|
+
if (!local || !remote)
|
|
216
|
+
continue;
|
|
217
|
+
connections.push({
|
|
218
|
+
protocol: 'tcp',
|
|
219
|
+
localAddr: local.addr,
|
|
220
|
+
localPort: local.port,
|
|
221
|
+
remoteAddr: remote.addr,
|
|
222
|
+
remotePort: remote.port,
|
|
223
|
+
state: 'ESTABLISHED',
|
|
224
|
+
});
|
|
225
|
+
}
|
|
226
|
+
}
|
|
227
|
+
catch {
|
|
228
|
+
// /proc/net/tcp not available (macOS, containers without /proc)
|
|
229
|
+
}
|
|
230
|
+
return connections;
|
|
231
|
+
}
|
|
232
|
+
/** Parse hex address:port from /proc/net/tcp (e.g., "0100007F:0050") */
|
|
233
|
+
parseHexAddr(hexPair) {
|
|
234
|
+
const [hexAddr, hexPort] = hexPair.split(':');
|
|
235
|
+
if (!hexAddr || !hexPort)
|
|
236
|
+
return null;
|
|
237
|
+
const port = parseInt(hexPort, 16);
|
|
238
|
+
const addrNum = parseInt(hexAddr, 16);
|
|
239
|
+
// /proc/net/tcp stores addresses in little-endian
|
|
240
|
+
const addr = [
|
|
241
|
+
addrNum & 0xff,
|
|
242
|
+
(addrNum >> 8) & 0xff,
|
|
243
|
+
(addrNum >> 16) & 0xff,
|
|
244
|
+
(addrNum >> 24) & 0xff,
|
|
245
|
+
].join('.');
|
|
246
|
+
return { addr, port };
|
|
247
|
+
}
|
|
248
|
+
/** Parse netstat output — available on most systems as last resort */
|
|
249
|
+
parseNetstat() {
|
|
250
|
+
const connections = [];
|
|
251
|
+
try {
|
|
252
|
+
const output = (0, child_process_1.execSync)('netstat -an 2>/dev/null | grep ESTABLISHED', { encoding: 'utf-8', timeout: 5000 });
|
|
253
|
+
for (const line of output.trim().split('\n')) {
|
|
254
|
+
if (!line)
|
|
255
|
+
continue;
|
|
256
|
+
const parts = line.trim().split(/\s+/);
|
|
257
|
+
if (parts.length < 5)
|
|
258
|
+
continue;
|
|
259
|
+
const proto = parts[0];
|
|
260
|
+
if (!proto.startsWith('tcp'))
|
|
261
|
+
continue;
|
|
262
|
+
const localParts = this.splitAddrPort(parts[3]);
|
|
263
|
+
const remoteParts = this.splitAddrPort(parts[4]);
|
|
264
|
+
if (!localParts || !remoteParts)
|
|
265
|
+
continue;
|
|
266
|
+
connections.push({
|
|
267
|
+
protocol: 'tcp',
|
|
268
|
+
localAddr: localParts.addr,
|
|
269
|
+
localPort: localParts.port,
|
|
270
|
+
remoteAddr: remoteParts.addr,
|
|
271
|
+
remotePort: remoteParts.port,
|
|
272
|
+
state: 'ESTABLISHED',
|
|
273
|
+
});
|
|
274
|
+
}
|
|
275
|
+
}
|
|
276
|
+
catch {
|
|
277
|
+
// netstat not available
|
|
278
|
+
}
|
|
279
|
+
return connections;
|
|
280
|
+
}
|
|
281
|
+
/** Split "addr.port" or "addr:port" into components */
|
|
282
|
+
splitAddrPort(value) {
|
|
283
|
+
// Try colon separator first (Linux netstat, IPv6)
|
|
284
|
+
const colonIdx = value.lastIndexOf(':');
|
|
285
|
+
if (colonIdx > 0) {
|
|
286
|
+
const port = parseInt(value.slice(colonIdx + 1));
|
|
287
|
+
if (!isNaN(port))
|
|
288
|
+
return { addr: value.slice(0, colonIdx), port };
|
|
289
|
+
}
|
|
290
|
+
// macOS netstat uses dot separator: "127.0.0.1.8080"
|
|
291
|
+
const dotIdx = value.lastIndexOf('.');
|
|
292
|
+
if (dotIdx > 0) {
|
|
293
|
+
const port = parseInt(value.slice(dotIdx + 1));
|
|
294
|
+
if (!isNaN(port))
|
|
295
|
+
return { addr: value.slice(0, dotIdx), port };
|
|
296
|
+
}
|
|
297
|
+
return null;
|
|
298
|
+
}
|
|
299
|
+
}
|
|
300
|
+
exports.NetworkMonitor = NetworkMonitor;
|
|
301
|
+
//# sourceMappingURL=network.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/arp/monitors/network.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAyC;AACzC,uCAAyB;AACzB,uCAAyB;AAczB,iDAAiD;AACjD,MAAM,gBAAgB,GAAG;IACvB,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe;IACzD,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa;IAC/D,cAAc,EAAE,aAAa;CAC9B,CAAC;AAEF;;;;GAIG;AACH,MAAa,cAAc;IAQzB,YAAY,MAAmB,EAAE,aAAqB,KAAK,EAAE,YAAuB;QAP3E,SAAI,GAAgB,SAAS,CAAC;QAK/B,sBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAG5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAE1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAErD,6BAA6B;gBAC7B,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;gBAEF,IAAI,YAAY,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,kCAAkC,IAAI,EAAE;wBACrD,IAAI,EAAE;4BACJ,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,GAAG,EAAE,IAAI,CAAC,GAAG;yBACd;qBACF,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,sCAAsC;gBACtC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;wBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;wBACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAC3D,CAAC;oBAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;wBAC1C,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBACvC,WAAW,EAAE,4BAA4B,IAAI,EAAE;wBAC/C,IAAI,EAAE;4BACJ,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,GAAG,EAAE,IAAI,CAAC,GAAG;4BACb,OAAO,EAAE,SAAS;yBACnB;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAE/B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,8CAA8C;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC;QAED,gEAAgE;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEO,SAAS;QACf,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,8CAA8C,EAC9C,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS;gBAE/B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC1D,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAErB,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;oBACnD,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;oBACnB,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;oBACpB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC9B,KAAK,EAAE,aAAa;oBACpB,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,OAAO;QACb,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,uCAAuC,EACvC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS;gBAE/B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAE1C,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACvC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;oBACnD,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACzC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;oBACtD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,+DAA+D;IACvD,eAAe;QACrB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAC1D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS;gBAE/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrC,IAAI,KAAK,KAAK,CAAC;oBAAE,SAAS,CAAC,mBAAmB;gBAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;oBAAE,SAAS;gBAEhC,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,wEAAwE;IAChE,YAAY,CAAC,OAAe;QAClC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,kDAAkD;QAClD,MAAM,IAAI,GAAG;YACX,OAAO,GAAG,IAAI;YACd,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI;YACrB,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI;YACtB,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI;SACvB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,sEAAsE;IAC9D,YAAY;QAClB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS;gBAE/B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW;oBAAE,SAAS;gBAE1C,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,UAAU,CAAC,IAAI;oBAC1B,SAAS,EAAE,UAAU,CAAC,IAAI;oBAC1B,UAAU,EAAE,WAAW,CAAC,IAAI;oBAC5B,UAAU,EAAE,WAAW,CAAC,IAAI;oBAC5B,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,uDAAuD;IAC/C,aAAa,CAAC,KAAa;QACjC,kDAAkD;QAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC;QACD,qDAAqD;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AArRD,wCAqRC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import type { Monitor, MonitorType } from '../types';
|
|
2
|
+
import type { EventEngine } from '../engine/event-engine';
|
|
3
|
+
/**
|
|
4
|
+
* Process monitor — tracks agent lifecycle, child processes, and resource usage.
|
|
5
|
+
* Uses `ps` polling (cross-platform, no root required).
|
|
6
|
+
*/
|
|
7
|
+
export declare class ProcessMonitor implements Monitor {
|
|
8
|
+
readonly type: MonitorType;
|
|
9
|
+
private timer?;
|
|
10
|
+
private readonly engine;
|
|
11
|
+
private readonly intervalMs;
|
|
12
|
+
private knownPids;
|
|
13
|
+
private agentPid?;
|
|
14
|
+
constructor(engine: EventEngine, intervalMs?: number);
|
|
15
|
+
start(): Promise<void>;
|
|
16
|
+
stop(): Promise<void>;
|
|
17
|
+
isRunning(): boolean;
|
|
18
|
+
private poll;
|
|
19
|
+
/** Walk the full process tree to find all descendants of parentPid.
|
|
20
|
+
* Uses `ps -ax -o pid=,ppid=` which works on both macOS and Linux. */
|
|
21
|
+
private getDescendantPids;
|
|
22
|
+
private getProcessInfo;
|
|
23
|
+
}
|
|
24
|
+
//# sourceMappingURL=process.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../../src/arp/monitors/process.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAY,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAkB1D;;;GAGG;AACH,qBAAa,cAAe,YAAW,OAAO;IAC5C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAa;IACvC,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,MAAM,EAAE,WAAW,EAAE,UAAU,GAAE,MAAa;IAKpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,IAAI;IAgFZ;2EACuE;IACvE,OAAO,CAAC,iBAAiB;IAgCzB,OAAO,CAAC,cAAc;CAwBvB"}
|