hackmyagent 0.7.2 → 0.8.1

package/dist/arp/interceptors/filesystem.js

@@ -0,0 +1,199 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesystemInterceptor = void 0;
+const path = __importStar(require("path"));
+/** Sensitive paths that should never be accessed by an agent */
+const SENSITIVE_PATHS = [
+    '.ssh', '.aws', '.gnupg', '.kube', '.config/gcloud',
+    '.docker/config.json', '.npmrc', '.pypirc',
+    '.git-credentials', 'wallet.json',
+    '.bashrc', '.zshrc', '.bash_profile', '.profile',
+    '.gitconfig', '.env', '.netrc', '.pgpass',
+];
+/**
+ * Filesystem interceptor — hooks fs module functions to intercept
+ * ALL file operations at the application level.
+ *
+ * Advantages over fs.watch:
+ * - Catches reads (fs.watch only sees writes/renames)
+ * - Catches operations in ALL directories (not just watched paths)
+ * - Zero latency: events fire before the I/O happens
+ * - 100% accuracy: no debouncing artifacts, no missed events
+ * - Full operation context: knows read vs write vs delete vs mkdir
+ */
+class FilesystemInterceptor {
+    constructor(engine, allowedPaths, excludePaths) {
+        this.type = 'filesystem';
+        this.originals = null;
+        this.active = false;
+        this.engine = engine;
+        this.allowedPaths = new Set(allowedPaths ?? []);
+        this.excludePaths = new Set(excludePaths ?? []);
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        this.fsModule = require('fs');
+    }
+    async start() {
+        if (this.active)
+            return;
+        this.originals = {};
+        const self = this;
+        const mod = this.fsModule;
+        const originals = this.originals;
+        // Hook write operations
+        for (const fn of ['writeFile', 'writeFileSync', 'appendFile', 'appendFileSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleWrite(filePath, fn);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        // Hook read operations
+        for (const fn of ['readFile', 'readFileSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleRead(filePath);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        // Hook mkdir
+        for (const fn of ['mkdir', 'mkdirSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (dirPath, ...rest) {
+                if (typeof dirPath === 'string' && !self.isExcluded(dirPath))
+                    self.handleWrite(dirPath, fn);
+                return originals[fn].call(mod, dirPath, ...rest);
+            };
+        }
+        // Hook unlink/rm
+        for (const fn of ['unlink', 'unlinkSync']) {
+            originals[fn] = mod[fn];
+            mod[fn] = function (filePath, ...rest) {
+                if (typeof filePath === 'string' && !self.isExcluded(filePath))
+                    self.handleDelete(filePath);
+                return originals[fn].call(mod, filePath, ...rest);
+            };
+        }
+        this.active = true;
+    }
+    async stop() {
+        if (!this.active || !this.originals)
+            return;
+        const mod = this.fsModule;
+        for (const [fn, original] of Object.entries(this.originals)) {
+            mod[fn] = original;
+        }
+        this.originals = null;
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    isSensitivePath(filePath) {
+        const normalized = path.resolve(filePath);
+        return SENSITIVE_PATHS.some((sp) => normalized.includes(sp) || path.basename(filePath).startsWith('.env'));
+    }
+    isOutsideAllowed(filePath) {
+        if (this.allowedPaths.size === 0)
+            return false;
+        const normalized = path.resolve(filePath);
+        return !Array.from(this.allowedPaths).some((ap) => normalized.startsWith(path.resolve(ap)));
+    }
+    isExcluded(filePath) {
+        if (this.excludePaths.size === 0)
+            return false;
+        const normalized = path.resolve(filePath);
+        return Array.from(this.excludePaths).some((ep) => normalized.startsWith(path.resolve(ep)));
+    }
+    handleWrite(filePath, operation) {
+        const sensitive = this.isSensitivePath(filePath);
+        const outsideAllowed = this.isOutsideAllowed(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'high',
+                description: `Intercepted write to sensitive path: ${filePath} (${operation})`,
+                data: { path: filePath, operation, sensitive: true, intercepted: true },
+            });
+            return;
+        }
+        if (outsideAllowed) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'anomaly',
+                severity: 'medium',
+                description: `Intercepted write outside allowed paths: ${filePath}`,
+                data: { path: filePath, operation, allowed: false, intercepted: true },
+            });
+            return;
+        }
+        this.engine.emit({
+            source: 'filesystem',
+            category: 'normal',
+            severity: 'info',
+            description: `Intercepted file operation: ${operation} ${filePath}`,
+            data: { path: filePath, operation, intercepted: true },
+        });
+    }
+    handleRead(filePath) {
+        const sensitive = this.isSensitivePath(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'high',
+                description: `Intercepted read of sensitive path: ${filePath}`,
+                data: { path: filePath, operation: 'read', sensitive: true, intercepted: true },
+            });
+        }
+    }
+    handleDelete(filePath) {
+        const sensitive = this.isSensitivePath(filePath);
+        if (sensitive) {
+            this.engine.emit({
+                source: 'filesystem',
+                category: 'violation',
+                severity: 'critical',
+                description: `Intercepted deletion of sensitive path: ${filePath}`,
+                data: { path: filePath, operation: 'delete', sensitive: true, intercepted: true },
+            });
+        }
+    }
+}
+exports.FilesystemInterceptor = FilesystemInterceptor;
+//# sourceMappingURL=filesystem.js.map

package/dist/arp/interceptors/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../src/arp/interceptors/filesystem.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAI7B,gEAAgE;AAChE,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB;IACnD,qBAAqB,EAAE,QAAQ,EAAE,SAAS;IAC1C,kBAAkB,EAAE,aAAa;IACjC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU;IAChD,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS;CAC1C,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAa,qBAAqB;IAYhC,YAAY,MAAmB,EAAE,YAAuB,EAAE,YAAuB;QAXxE,SAAI,GAAgB,YAAY,CAAC;QAQlC,cAAS,GAAoC,IAAI,CAAC;QAClD,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,iEAAiE;QACjE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,wBAAwB;QACxB,KAAK,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAChF,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC/F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,aAAa;QACb,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,OAAgB,EAAE,GAAG,IAAe;gBACtD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACnD,CAAC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,KAAK,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,QAAiB,EAAE,GAAG,IAAe;gBACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC5F,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACjC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CACtE,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAChD,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/C,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,SAAiB;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,wCAAwC,QAAQ,KAAK,SAAS,GAAG;gBAC9E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aACxE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,4CAA4C,QAAQ,EAAE;gBACnE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;aACvE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,+BAA+B,SAAS,IAAI,QAAQ,EAAE;YACnE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,uCAAuC,QAAQ,EAAE;gBAC9D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAChF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,2CAA2C,QAAQ,EAAE;gBAClE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxKD,sDAwKC"}

package/dist/arp/interceptors/mcp-protocol.d.ts

@@ -0,0 +1,25 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+import { type ScanResult } from '../patterns/ai-threats';
+/**
+ * MCP Protocol interceptor -- scans MCP tool calls for path traversal,
+ * command injection, and SSRF exploitation patterns.
+ *
+ * Enforces tool allowlists and validates parameters at the protocol level.
+ */
+export declare class MCPProtocolInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly allowedTools;
+    private active;
+    constructor(engine: EventEngine, allowedTools?: string[]);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    /**
+     * Scan an MCP tool call for exploitation patterns.
+     * Checks tool name against allowlist and scans all parameter values.
+     */
+    scanToolCall(toolName: string, args: Record<string, unknown>): ScanResult;
+}
+//# sourceMappingURL=mcp-protocol.d.ts.map

package/dist/arp/interceptors/mcp-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/mcp-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEjF;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,OAAO;IACpD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU;CAuD1E"}

package/dist/arp/interceptors/mcp-protocol.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCPProtocolInterceptor = void 0;
+const ai_threats_1 = require("../patterns/ai-threats");
+/**
+ * MCP Protocol interceptor -- scans MCP tool calls for path traversal,
+ * command injection, and SSRF exploitation patterns.
+ *
+ * Enforces tool allowlists and validates parameters at the protocol level.
+ */
+class MCPProtocolInterceptor {
+    constructor(engine, allowedTools) {
+        this.type = 'mcp-protocol';
+        this.active = false;
+        this.engine = engine;
+        this.allowedTools = new Set(allowedTools ?? []);
+    }
+    async start() {
+        this.active = true;
+    }
+    async stop() {
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    /**
+     * Scan an MCP tool call for exploitation patterns.
+     * Checks tool name against allowlist and scans all parameter values.
+     */
+    scanToolCall(toolName, args) {
+        if (!this.active)
+            return { detected: false, matches: [] };
+        // Check tool allowlist
+        if (this.allowedTools.size > 0 && !this.allowedTools.has(toolName)) {
+            this.engine.emit({
+                source: 'mcp-protocol',
+                category: 'violation',
+                severity: 'high',
+                description: `MCP tool not in allowlist: ${toolName}`,
+                data: {
+                    toolName,
+                    reason: 'not-in-allowlist',
+                    allowedTools: Array.from(this.allowedTools),
+                },
+            });
+            return {
+                detected: true,
+                matches: [{
+                        pattern: {
+                            id: 'MCP-ALLOWLIST',
+                            category: 'mcp-exploitation',
+                            description: 'Tool not in allowlist',
+                            pattern: /./,
+                            severity: 'high',
+                        },
+                        matchedText: toolName,
+                    }],
+            };
+        }
+        // Flatten all parameter values into a single string for scanning
+        const paramText = flattenArgs(args);
+        const result = (0, ai_threats_1.scanText)(paramText, ai_threats_1.PATTERN_SETS.mcpPatterns);
+        if (result.detected) {
+            for (const match of result.matches) {
+                this.engine.emit({
+                    source: 'mcp-protocol',
+                    category: 'threat',
+                    severity: match.pattern.severity,
+                    description: `[${match.pattern.id}] ${match.pattern.description} in tool "${toolName}"`,
+                    data: {
+                        patternId: match.pattern.id,
+                        patternCategory: match.pattern.category,
+                        toolName,
+                        matchedText: match.matchedText,
+                        args: sanitizeArgs(args),
+                    },
+                });
+            }
+        }
+        return result;
+    }
+}
+exports.MCPProtocolInterceptor = MCPProtocolInterceptor;
+/** Recursively flatten object values into a single string for scanning */
+function flattenArgs(obj, depth = 0) {
+    if (depth > 10)
+        return '';
+    const parts = [];
+    for (const value of Object.values(obj)) {
+        if (typeof value === 'string') {
+            parts.push(value);
+        }
+        else if (typeof value === 'number' || typeof value === 'boolean') {
+            parts.push(String(value));
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === 'string') {
+                    parts.push(item);
+                }
+                else if (typeof item === 'object' && item !== null) {
+                    parts.push(flattenArgs(item, depth + 1));
+                }
+            }
+        }
+        else if (typeof value === 'object' && value !== null) {
+            parts.push(flattenArgs(value, depth + 1));
+        }
+    }
+    return parts.join('\n');
+}
+/** Sanitize args for logging (truncate long strings) */
+function sanitizeArgs(args) {
+    const result = {};
+    for (const [key, value] of Object.entries(args)) {
+        if (typeof value === 'string' && value.length > 200) {
+            result[key] = value.slice(0, 200) + '...[truncated]';
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=mcp-protocol.js.map

package/dist/arp/interceptors/mcp-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.js","sourceRoot":"","sources":["../../../src/arp/interceptors/mcp-protocol.ts"],"names":[],"mappings":";;;AAEA,uDAAiF;AAEjF;;;;;GAKG;AACH,MAAa,sBAAsB;IAMjC,YAAY,MAAmB,EAAE,YAAuB;QAL/C,SAAI,GAAgB,cAAc,CAAC;QAGpC,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,QAAgB,EAAE,IAA6B;QAC1D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1D,uBAAuB;QACvB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,8BAA8B,QAAQ,EAAE;gBACrD,IAAI,EAAE;oBACJ,QAAQ;oBACR,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;iBAC5C;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,CAAC;wBACR,OAAO,EAAE;4BACP,EAAE,EAAE,eAAe;4BACnB,QAAQ,EAAE,kBAAkB;4BAC5B,WAAW,EAAE,uBAAuB;4BACpC,OAAO,EAAE,GAAG;4BACZ,QAAQ,EAAE,MAAM;yBACjB;wBACD,WAAW,EAAE,QAAQ;qBACtB,CAAC;aACH,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,qBAAQ,EAAC,SAAS,EAAE,yBAAY,CAAC,WAAW,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,WAAW,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,aAAa,QAAQ,GAAG;oBACvF,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;wBAC3B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;wBACvC,QAAQ;wBACR,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAlFD,wDAkFC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAA4B,EAAE,KAAK,GAAG,CAAC;IAC1D,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;qBAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACrD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAA+B,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAgC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/arp/interceptors/network.d.ts

@@ -0,0 +1,26 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+/**
+ * Network interceptor — hooks net.Socket.prototype.connect to intercept
+ * ALL outbound TCP connections at the application level.
+ *
+ * Advantages over lsof/ss polling:
+ * - Zero latency: events fire before the connection is made
+ * - 100% accuracy: no missed connections between poll intervals
+ * - No system tool dependency: works in sandboxed/container environments
+ * - Covers all Node.js networking (http, https, fetch, net.connect)
+ */
+export declare class NetworkInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly allowedHosts;
+    private originalConnect;
+    private active;
+    constructor(engine: EventEngine, allowedHosts?: string[]);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    private parseConnectArgs;
+    private handleConnection;
+}
+//# sourceMappingURL=network.d.ts.map

package/dist/arp/interceptors/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/network.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAS1D;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,OAAO;IAChD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,eAAe,CAAoD;IAC3E,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,gBAAgB;CA2CzB"}

package/dist/arp/interceptors/network.js

@@ -0,0 +1,146 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkInterceptor = void 0;
+const net = __importStar(require("net"));
+/** Known exfiltration/suspicious destinations */
+const SUSPICIOUS_HOSTS = [
+    'webhook.site', 'requestbin', 'ngrok.io', 'pipedream.net',
+    'hookbin.com', 'burpcollaborator', 'interact.sh', 'oastify.com',
+    'pastebin.com', 'transfer.sh',
+];
+/**
+ * Network interceptor — hooks net.Socket.prototype.connect to intercept
+ * ALL outbound TCP connections at the application level.
+ *
+ * Advantages over lsof/ss polling:
+ * - Zero latency: events fire before the connection is made
+ * - 100% accuracy: no missed connections between poll intervals
+ * - No system tool dependency: works in sandboxed/container environments
+ * - Covers all Node.js networking (http, https, fetch, net.connect)
+ */
+class NetworkInterceptor {
+    constructor(engine, allowedHosts) {
+        this.type = 'network';
+        this.originalConnect = null;
+        this.active = false;
+        this.engine = engine;
+        this.allowedHosts = new Set(allowedHosts ?? []);
+    }
+    async start() {
+        if (this.active)
+            return;
+        this.originalConnect = net.Socket.prototype.connect;
+        const self = this;
+        // Patch net.Socket.prototype.connect to intercept all TCP connections
+        net.Socket.prototype.connect = function (...args) {
+            const parsed = self.parseConnectArgs(args);
+            if (parsed) {
+                self.handleConnection(parsed.host, parsed.port);
+            }
+            return self.originalConnect.apply(this, args);
+        };
+        this.active = true;
+    }
+    async stop() {
+        if (!this.active || !this.originalConnect)
+            return;
+        net.Socket.prototype.connect = this.originalConnect;
+        this.originalConnect = null;
+        this.active = false;
+    }
+    isRunning() {
+        return this.active;
+    }
+    parseConnectArgs(args) {
+        if (args.length === 0)
+            return null;
+        let first = args[0];
+        // Node.js internals normalize args as [options, callback] array
+        if (Array.isArray(first)) {
+            first = first[0];
+        }
+        if (typeof first === 'object' && first !== null) {
+            const opts = first;
+            const port = opts.port;
+            const host = opts.host ?? '127.0.0.1';
+            if (typeof port === 'number') {
+                return { host, port };
+            }
+        }
+        else if (typeof first === 'number') {
+            const host = typeof args[1] === 'string' ? args[1] : '127.0.0.1';
+            return { host, port: first };
+        }
+        return null;
+    }
+    handleConnection(host, port) {
+        const dest = `${host}:${port}`;
+        // Check for suspicious hosts
+        const isSuspicious = SUSPICIOUS_HOSTS.some((h) => host.includes(h));
+        if (isSuspicious) {
+            this.engine.emit({
+                source: 'network',
+                category: 'threat',
+                severity: 'critical',
+                description: `Intercepted connection to suspicious host: ${dest}`,
+                data: {
+                    remoteAddr: host,
+                    remotePort: port,
+                    intercepted: true,
+                },
+            });
+            return;
+        }
+        // Check allowed hosts
+        const isAllowed = this.allowedHosts.size === 0 ||
+            this.allowedHosts.has(host) ||
+            Array.from(this.allowedHosts).some((h) => host === h || host.endsWith('.' + h));
+        this.engine.emit({
+            source: 'network',
+            category: isAllowed ? 'normal' : 'anomaly',
+            severity: isAllowed ? 'info' : 'medium',
+            description: `Intercepted outbound connection: ${dest}`,
+            data: {
+                remoteAddr: host,
+                remotePort: port,
+                allowed: isAllowed,
+                intercepted: true,
+            },
+        });
+    }
+}
+exports.NetworkInterceptor = NetworkInterceptor;
+//# sourceMappingURL=network.js.map

package/dist/arp/interceptors/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/arp/interceptors/network.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAA2B;AAI3B,iDAAiD;AACjD,MAAM,gBAAgB,GAAG;IACvB,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe;IACzD,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa;IAC/D,cAAc,EAAE,aAAa;CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAa,kBAAkB;IAO7B,YAAY,MAAmB,EAAE,YAAuB;QAN/C,SAAI,GAAgB,SAAS,CAAC;QAG/B,oBAAe,GAA+C,IAAI,CAAC;QACnE,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,sEAAsE;QACtE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,GAAG,UAA4B,GAAG,IAAe;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,IAAI,CAAC,eAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAuD,CAAC,CAAC;QACpG,CAAwC,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAClD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,gBAAgB,CAAC,IAAe;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,gEAAgE;QAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,KAAgC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAA0B,CAAC;YAC7C,MAAM,IAAI,GAAI,IAAI,CAAC,IAAe,IAAI,WAAW,CAAC;YAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,IAAY,EAAE,IAAY;QACjD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAE/B,6BAA6B;QAC7B,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CACjB,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,8CAA8C,IAAI,EAAE;gBACjE,IAAI,EAAE;oBACJ,UAAU,EAAE,IAAI;oBAChB,UAAU,EAAE,IAAI;oBAChB,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CACrC,CAAC;QAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC1C,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACvC,WAAW,EAAE,oCAAoC,IAAI,EAAE;YACvD,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,SAAS;gBAClB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;IACL,CAAC;CACF;AA7GD,gDA6GC"}

package/dist/arp/interceptors/process.d.ts

@@ -0,0 +1,26 @@
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+/**
+ * Process interceptor — hooks child_process.spawn/exec/execFile/fork to
+ * intercept ALL process creation at the application level.
+ *
+ * Advantages over ps polling:
+ * - Zero latency: events fire before the process is spawned
+ * - 100% accuracy: catches every spawn, even short-lived processes
+ * - No system tool dependency: works in sandboxed environments
+ * - Full argument visibility: sees the exact command and args
+ */
+export declare class ProcessInterceptor implements Monitor {
+    readonly type: MonitorType;
+    private readonly engine;
+    private readonly cpModule;
+    private originals;
+    private active;
+    constructor(engine: EventEngine);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    private handleSpawn;
+    private handleExec;
+}
+//# sourceMappingURL=process.d.ts.map

package/dist/arp/interceptors/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../../src/arp/interceptors/process.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAS1D;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,OAAO;IAChD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,SAAS,CAAyC;IAC1D,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,WAAW;IAMzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAY3B,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,WAAW;IAsBnB,OAAO,CAAC,UAAU;CAoBnB"}