praxis-sec 1.1.0 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/cli/agents/abom-generator.js +1 -1
  2. package/cli/agents/agent-attestation-agent.js +16 -2
  3. package/cli/agents/agent-config-scanner.js +1 -1
  4. package/cli/agents/agent-telemetry-agent.js +8 -1
  5. package/cli/agents/ai-infra-inventory-agent.js +482 -453
  6. package/cli/agents/base-agent.js +61 -1
  7. package/cli/agents/endpoint-agent-abuse-agent.js +2 -2
  8. package/cli/agents/git-history-scanner.js +1 -1
  9. package/cli/agents/html-reporter.js +3 -3
  10. package/cli/agents/index.js +2 -2
  11. package/cli/agents/injection-tester.js +8 -1
  12. package/cli/agents/mcp-security-agent.js +7 -1
  13. package/cli/agents/memory-poisoning-agent.js +1 -1
  14. package/cli/agents/model-file-scanner.js +1 -1
  15. package/cli/agents/orchestrator.js +11 -6
  16. package/cli/agents/prompt-injection-prober.js +228 -224
  17. package/cli/bin/praxis.js +7 -3
  18. package/cli/commands/agent-fix.js +1091 -1245
  19. package/cli/commands/audit.js +1228 -1216
  20. package/cli/commands/baseline.js +1 -1
  21. package/cli/commands/benchmark.js +1 -1
  22. package/cli/commands/ci.js +45 -21
  23. package/cli/commands/deps.js +11 -5
  24. package/cli/commands/env-audit.js +1 -1
  25. package/cli/commands/fix.js +1 -1
  26. package/cli/commands/mcp.js +2 -2
  27. package/cli/commands/openclaw.js +1 -1
  28. package/cli/commands/red-team.js +350 -350
  29. package/cli/commands/remediate.js +1 -1
  30. package/cli/commands/rotate.js +1 -1
  31. package/cli/commands/rules.js +1 -1
  32. package/cli/commands/scan.js +554 -554
  33. package/cli/commands/score.js +1 -1
  34. package/cli/commands/undo.js +22 -77
  35. package/cli/commands/vibe-check.js +1 -1
  36. package/cli/core/fix-plan.js +274 -0
  37. package/cli/core/fs.js +27 -0
  38. package/cli/core/git-clone.js +8 -6
  39. package/cli/core/glob.js +56 -0
  40. package/cli/core/output/html-theme.js +158 -158
  41. package/cli/core/output/sarif.js +2 -2
  42. package/cli/core/web/jobs.js +2 -2
  43. package/cli/core/web/server.js +19 -8
  44. package/cli/data/threatpacks/latest.json +41 -41
  45. package/cli/integrations/github-action.js +136 -0
  46. package/cli/utils/plugin-loader.js +15 -95
  47. package/cli/utils/rule-import.js +227 -227
  48. package/cli/utils/rule-registry.js +425 -425
  49. package/cli/utils/scan-fingerprint.js +1 -1
  50. package/cli/utils/score-history.js +118 -118
  51. package/docs/USAGE.md +16 -9
  52. package/docs/design/WEB-UI.md +4 -5
  53. package/package.json +13 -4
package/cli/commands/remediate.js CHANGED
@@ -38,7 +38,7 @@ import { execSync, execFileSync } from 'child_process';
38
38
  import chalk from 'chalk';
39
39
  import ora from 'ora';
40
40
  import writeFileAtomic from 'write-file-atomic';
41
- import fg from 'fast-glob';
41
+ import fg from '../core/glob.js';
42
42
  import {
43
43
  SECRET_PATTERNS,
44
44
  SKIP_DIRS,
package/cli/commands/rotate.js CHANGED
@@ -26,7 +26,7 @@ import readline from 'readline';
26
26
  import { execSync } from 'child_process';
27
27
  import chalk from 'chalk';
28
28
  import ora from 'ora';
29
- import fg from 'fast-glob';
29
+ import fg from '../core/glob.js';
30
30
  import {
31
31
  SECRET_PATTERNS,
32
32
  SKIP_DIRS,
package/cli/commands/rules.js CHANGED
@@ -8,7 +8,7 @@
8
8
  * The manifest is the important half. A bundle without it would imply Praxis is
9
9
  * nothing but its patterns; the manifest names the layers that have no Semgrep
10
10
  * equivalent (AST/taint, the probe corpus, entropy heuristics). See
11
- * docs/ and P-IMP-059 in the improvement plan.
11
+ * docs/USAGE.md.
12
12
  */
13
13
 
14
14
  import path from 'path';