agentsentinel-cli 0.7.6__tar.gz → 0.8.0__tar.gz

{agentsentinel_cli-0.7.6 → agentsentinel_cli-0.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsentinel-cli
-Version: 0.7.6
+Version: 0.8.0
 Summary: Agentic security CLI — AI analyst with memory, supply chain audit, MCP audit, red-team probing, and agent discovery
 Project-URL: Homepage, https://github.com/jaydenaung/agentsentinel-cli
 Project-URL: Repository, https://github.com/jaydenaung/agentsentinel-cli

{agentsentinel_cli-0.7.6 → agentsentinel_cli-0.8.0}/agentsentinel_cli/cli.py

@@ -31,18 +31,12 @@ def main() -> None:
               help="Output format.")
 @click.option("--fail-on", type=click.Choice(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
               default=None, help="Exit with code 1 if findings at or above this severity exist.")
-@click.option("--connect", metavar="URL", default=None,
-              help="AgentSentinel API URL for live behavior data (e.g. http://localhost:9000).")
-@click.option("--api-key", envvar="AGENTSENTINEL_API_KEY", default=None,
-              help="API key for --connect. Defaults to $AGENTSENTINEL_API_KEY.")
 @click.option("--ignore-rule", "ignore_rules", multiple=True, metavar="RULE_ID",
               help="Suppress a finding by rule ID. Repeatable. Also reads .sentinelignore.")
 def scan(
     target: Path,
     fmt: str,
     fail_on: str | None,
-    connect: str | None,
-    api_key: str | None,
     ignore_rules: tuple[str, ...],
 ) -> None:
     """Scan a Python file or directory for AI agent security issues.
@@ -55,7 +49,6 @@ def scan(
         sentinel scan ./agents/
         sentinel scan my_agent.py --fail-on CRITICAL
         sentinel scan my_agent.py --format json
-        sentinel scan my_agent.py --connect http://localhost:9000
     """
     from agentsentinel_cli import suppress as _suppress
 
@@ -64,7 +57,6 @@ def scan(
     findings_map = {a.file: run_rules(a) for a in agents}
     scores_map = {a.file: posture_score(findings_map[a.file]) for a in agents}
 
-    # Apply suppressions before display and --fail-on evaluation
     sup_rules = _suppress.merge(_suppress.load_ignore_file(target), ignore_rules)
     all_suppressed: list = []
     if sup_rules:
@@ -76,13 +68,10 @@ def scan(
         findings_map = cleaned
         scores_map = {a.file: posture_score(findings_map[a.file]) for a in agents}
 
-    if connect and api_key and agents:
-        _enrich_from_platform(agents, scores_map, connect, api_key)
-
     if fmt == "json":
         click.echo(as_json(agents, findings_map, scores_map))
     else:
-        print_scan_result(agents, findings_map, scores_map, target, connect_url=connect)
+        print_scan_result(agents, findings_map, scores_map, target)
         msg = _suppress.notice(all_suppressed)
         if msg:
             console.print(f"  {msg}\n")
@@ -99,26 +88,6 @@ def scan(
             sys.exit(1)
 
 
-def _enrich_from_platform(agents, scores_map, connect_url, api_key):
-    try:
-        import httpx
-        headers = {"X-API-Key": api_key}
-        base = connect_url.rstrip("/")
-        with httpx.Client(timeout=5.0) as client:
-            resp = client.get(f"{base}/api/v1/agents", headers=headers)
-            resp.raise_for_status()
-            platform_agents = {a["name"]: a for a in resp.json()}
-        for agent in agents:
-            candidate_name = agent.file.stem.replace("_", "-")
-            for name, data in platform_agents.items():
-                if candidate_name in name or name in candidate_name:
-                    platform_score = data.get("trust_score", scores_map[agent.file])
-                    scores_map[agent.file] = int(platform_score)
-                    break
-    except Exception as exc:
-        console.print(f"  [dim yellow]Warning: could not connect to AgentSentinel: {exc}[/dim yellow]")
-
-
 # ── sentinel discover helpers ────────────────────────────────────────────────
 
 def _deep_scan_agents(agents: list, extra_headers: dict | None) -> None:
@@ -424,225 +393,6 @@ def mcp_scan(
             sys.exit(1)
 
 
-# ── sentinel probe ────────────────────────────────────────────────────────────
-
-@main.command()
-@click.argument("target_url")
-@click.option("--input-field",  "input_field",  default=None, metavar="FIELD",
-              help="JSON field name for the message (auto-detected if omitted).")
-@click.option("--output-field", "output_field", default=None, metavar="FIELD",
-              help="JSON field name for the response (auto-detected if omitted).")
-@click.option("--auth-header",  "auth_header",  default=None, metavar="HEADER",
-              help="HTTP auth header, e.g. 'Authorization: Bearer token'.")
-@click.option("--attacks", "attack_cats", default=None, metavar="CATS",
-              help="Comma-separated categories: injection,jailbreak,extraction,encoding,context. Default: all.")
-@click.option("--timeout", default=15.0, show_default=True, metavar="SECONDS",
-              help="Per-probe timeout in seconds.")
-@click.option("--format", "fmt", type=click.Choice(["text", "json"]), default="text")
-@click.option("--fail-on", type=click.Choice(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
-              default=None, help="Exit 1 if any finding at or above this severity.")
-def probe(
-    target_url: str,
-    input_field: str | None,
-    output_field: str | None,
-    auth_header: str | None,
-    attack_cats: str | None,
-    timeout: float,
-    fmt: str,
-    fail_on: str | None,
-) -> None:
-    """Run a static attack battery against a live agent endpoint.
-
-    Sends 50 adversarial payloads across 5 categories and detects success via
-    response pattern matching. No API key required.
-
-    \b
-    Examples:
-        sentinel probe http://my-agent.com/chat
-        sentinel probe http://my-agent.com/chat --attacks injection,jailbreak
-        sentinel probe http://my-agent.com/chat --input-field message --output-field response
-        sentinel probe http://my-agent.com/chat --auth-header "Authorization: Bearer token"
-        sentinel probe http://my-agent.com/chat --format json --fail-on HIGH
-    """
-    from agentsentinel_cli.target import TargetConfig, TargetError
-    from agentsentinel_cli.probe import run_probe
-    from agentsentinel_cli.probe_report import print_probe_result, as_probe_json
-
-    _VALID_CATEGORIES = {"injection", "jailbreak", "extraction", "encoding", "context", "scope"}
-    categories: list[str] | None = None
-    if attack_cats:
-        requested = [c.strip() for c in attack_cats.split(",") if c.strip()]
-        invalid = [c for c in requested if c not in _VALID_CATEGORIES]
-        if invalid:
-            console.print(f"[yellow]Warning: unknown attack categories ignored: {', '.join(invalid)}[/yellow]")
-            console.print(f"  Valid categories: {', '.join(sorted(_VALID_CATEGORIES))}")
-        categories = [c for c in requested if c in _VALID_CATEGORIES] or None
-
-    config = TargetConfig(
-        url=target_url,
-        input_field=input_field,
-        output_field=output_field,
-        auth_header=auth_header,
-        timeout=timeout,
-    )
-
-    total_attacks = len(__import__("agentsentinel_cli.attacks", fromlist=["get_attacks"]).get_attacks(categories))
-    _counter: list[int] = [0]
-
-    def _progress(current: int, total: int, attack_id: str, name: str) -> None:
-        _counter[0] = current
-        if fmt == "text":
-            console.print(
-                f"  [dim][{current:>2}/{total}][/dim] "
-                f"[dim cyan]{attack_id}[/dim cyan] {name[:50]}",
-                end="\r",
-            )
-
-    if fmt == "text":
-        console.print()
-        console.print(
-            f"  Running [bold white]{total_attacks}[/bold white] probes against "
-            f"[bold white]{target_url}[/bold white] …\n"
-        )
-
-    try:
-        report = run_probe(config, categories=categories, progress_cb=_progress)
-    except TargetError as exc:
-        console.print(f"\n[red]Target error:[/red] {exc}")
-        sys.exit(1)
-    except Exception as exc:
-        console.print(f"\n[red]Unexpected error:[/red] {exc}")
-        sys.exit(1)
-
-    if fmt == "text":
-        console.print()  # clear progress line
-        print_probe_result(report)
-    else:
-        click.echo(as_probe_json(report))
-
-    if fail_on:
-        _rank = {"LOW": 1, "MEDIUM": 2, "HIGH": 3, "CRITICAL": 4}
-        threshold = _rank.get(fail_on, 0)
-        if any(_rank.get(r.severity, 0) >= threshold for r in report.findings):
-            sys.exit(1)
-
-
-# ── sentinel ai-probe ─────────────────────────────────────────────────────────
-
-@main.command(name="ai-probe")
-@click.argument("target_url")
-@click.option("--input-field",  "input_field",  default=None, metavar="FIELD",
-              help="JSON field name for the message (auto-detected if omitted).")
-@click.option("--output-field", "output_field", default=None, metavar="FIELD",
-              help="JSON field name for the response (auto-detected if omitted).")
-@click.option("--auth-header",  "auth_header",  default=None, metavar="HEADER",
-              help="HTTP auth header, e.g. 'Authorization: Bearer token'.")
-@click.option("--context", "ctx", default="", metavar="TEXT",
-              help="Optional context about the agent, e.g. 'customer service bot for a bank'.")
-@click.option("--max-probes", default=20, show_default=True,
-              help="Maximum number of probes Claude can send.")
-@click.option("--model", default="claude-opus-4-8", show_default=True,
-              help="Claude model to use as the probe agent.")
-@click.option("--timeout", default=15.0, show_default=True, metavar="SECONDS",
-              help="Per-probe timeout in seconds.")
-@click.option("--format", "fmt", type=click.Choice(["text", "json"]), default="text")
-@click.option("--fail-on", type=click.Choice(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
-              default=None, help="Exit 1 if any finding at or above this severity.")
-def ai_probe(
-    target_url: str,
-    input_field: str | None,
-    output_field: str | None,
-    auth_header: str | None,
-    ctx: str,
-    max_probes: int,
-    model: str,
-    timeout: float,
-    fmt: str,
-    fail_on: str | None,
-) -> None:
-    """Run Claude as an autonomous red-team agent against a live endpoint.
-
-    Claude decides what to test, interprets responses intelligently, escalates
-    on partial success, and records findings with evidence. Requires ANTHROPIC_API_KEY.
-
-    \b
-    Examples:
-        sentinel ai-probe http://my-agent.com/chat
-        sentinel ai-probe http://my-agent.com/chat --context "customer service bot for a bank"
-        sentinel ai-probe http://my-agent.com/chat --max-probes 30
-        sentinel ai-probe http://my-agent.com/chat --format json --fail-on CRITICAL
-    """
-    import os
-    from agentsentinel_cli.target import TargetConfig, TargetError
-    from agentsentinel_cli.ai_probe import run_ai_probe, DEFAULT_MODEL
-    from agentsentinel_cli.probe_report import print_ai_probe_result, as_ai_probe_json
-
-    api_key = os.environ.get("ANTHROPIC_API_KEY", "")
-    if not api_key:
-        console.print("[red]Error:[/red] ANTHROPIC_API_KEY environment variable is not set.")
-        console.print("  Export it with: [bold]export ANTHROPIC_API_KEY=sk-ant-...[/bold]")
-        sys.exit(1)
-
-    config = TargetConfig(
-        url=target_url,
-        input_field=input_field,
-        output_field=output_field,
-        auth_header=auth_header,
-        timeout=timeout,
-    )
-
-    if fmt == "text":
-        console.print()
-        console.print(Panel.fit(
-            f"[bold white]AgentSentinel AI Probe[/bold white]  [dim](Claude {model})[/dim]\n"
-            f"[dim]Target: {target_url}[/dim]",
-            border_style="bright_blue",
-            padding=(0, 2),
-        ))
-        console.print(
-            f"\n  Probe agent initialised. Budget: [bold white]{max_probes}[/bold white] probes.\n"
-        )
-
-    def _progress(probe_num: int, total: int, category: str, rationale: str) -> None:
-        if fmt == "text":
-            console.print(
-                f"  [dim][{probe_num:>2}/{total}][/dim] "
-                f"[dim cyan]{category:<12}[/dim cyan] "
-                f"[dim]{rationale[:60]}[/dim]"
-            )
-
-    try:
-        report = run_ai_probe(
-            config,
-            api_key=api_key,
-            max_probes=max_probes,
-            context=ctx,
-            model=model,
-            progress_cb=_progress,
-        )
-    except ImportError as exc:
-        console.print(f"\n[red]Missing dependency:[/red] {exc}")
-        sys.exit(1)
-    except TargetError as exc:
-        console.print(f"\n[red]Target error:[/red] {exc}")
-        sys.exit(1)
-    except Exception as exc:
-        console.print(f"\n[red]Unexpected error:[/red] {exc}")
-        sys.exit(1)
-
-    if fmt == "text":
-        console.print()
-        print_ai_probe_result(report)
-    else:
-        click.echo(as_ai_probe_json(report))
-
-    if fail_on:
-        _rank = {"LOW": 1, "MEDIUM": 2, "HIGH": 3, "CRITICAL": 4}
-        threshold = _rank.get(fail_on, 0)
-        if any(_rank.get(f.severity, 0) >= threshold for f in report.findings):
-            sys.exit(1)
-
-
 # ── sentinel inspect ──────────────────────────────────────────────────────────
 
 @main.command()
@@ -860,138 +610,6 @@ def secrets(
             sys.exit(1)
 
 
-# ── sentinel agentic ──────────────────────────────────────────────────────────
-
-@main.command()
-@click.argument("target", default=None, required=False)
-@click.option("--stdio", "stdio_cmd", default=None, metavar="CMD",
-              help="Audit a stdio-transport MCP server, e.g. 'python server.py'.")
-@click.option("--context", "ctx", default="", metavar="TEXT",
-              help="Optional context about the target, e.g. 'production MCP server for a fintech app'.")
-@click.option("--model", default="claude-sonnet-4-6", show_default=True,
-              help="Claude model to use as the analyst.")
-@click.option("--memory-dir", "memory_dir", default=None, type=click.Path(),
-              help="Directory for persistent memory files. Defaults to ~/.sentinel/memory/.")
-@click.option("--max-calls", "max_calls", default=30, show_default=True,
-              help="Maximum tool calls the analyst can make.")
-@click.option("--timeout", default=10.0, show_default=True, metavar="SECONDS",
-              help="MCP connection timeout in seconds.")
-@click.option("--format", "fmt", type=click.Choice(["text", "json"]), default="text",
-              help="Output format.")
-@click.option("--fail-on", type=click.Choice(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
-              default=None, help="Exit with code 1 if findings at or above this severity exist.")
-def agentic(
-    target: str | None,
-    stdio_cmd: str | None,
-    ctx: str,
-    model: str,
-    memory_dir: str | None,
-    max_calls: int,
-    timeout: float,
-    fmt: str,
-    fail_on: str | None,
-) -> None:
-    """Run Claude as an agentic security analyst with persistent memory.
-
-    Claude decides what to scan, calls sentinel's capabilities as tools,
-    compares current state to prior assessments, and produces a threat
-    narrative. Goes beyond static rules — catches semantic deception,
-    cross-finding patterns, and drift over time.
-
-    TARGET can be an MCP server URL, a local file/directory path, or omitted
-    if using --stdio. Requires ANTHROPIC_API_KEY.
-
-    \b
-    Examples:
-        sentinel agentic http://localhost:3001
-        sentinel agentic --stdio "python my_server.py"
-        sentinel agentic ./my-agent/
-        sentinel agentic http://localhost:3001 --context "production fintech MCP server"
-        sentinel agentic ./agents/ --model claude-opus-4-8
-        sentinel agentic http://localhost:3001 --format json --fail-on HIGH
-    """
-    import os
-    from pathlib import Path as _Path
-    from agentsentinel_cli.agent_mode import run_agent_mode, DEFAULT_MEMORY_DIR
-    from agentsentinel_cli.agent_mode_report import print_agent_report, as_agent_json
-
-    # Resolve target — stdio_cmd takes precedence as the canonical target id
-    if stdio_cmd:
-        target = stdio_cmd
-    elif not target:
-        console.print("[red]Error:[/red] provide a TARGET (URL or path) or --stdio CMD.")
-        sys.exit(1)
-
-    api_key = os.environ.get("ANTHROPIC_API_KEY", "")
-    if not api_key:
-        console.print("[red]Error:[/red] ANTHROPIC_API_KEY is required for agentic mode.")
-        console.print("  Export it with: [bold]export ANTHROPIC_API_KEY=sk-ant-...[/bold]")
-        sys.exit(1)
-
-    mem_dir = _Path(memory_dir) if memory_dir else DEFAULT_MEMORY_DIR
-
-    if fmt == "text":
-        console.print()
-        console.print(Panel.fit(
-            f"[bold white]AgentSentinel Agentic Analysis[/bold white]  "
-            f"[dim cyan]{model}[/dim cyan]\n"
-            f"[dim]Target: {target}[/dim]",
-            border_style="bright_blue",
-            padding=(0, 2),
-        ))
-        console.print(
-            f"\n  Analyst initialised. Memory dir: [dim]{mem_dir}[/dim]\n"
-        )
-
-    def _progress(tool_name: str, detail: str) -> None:
-        if fmt == "text":
-            icons = {
-                "read_memory":    "🧠",
-                "scan_mcp_server":"🔍",
-                "scan_files":     "📂",
-                "check_secrets":  "🔑",
-                "record_finding": "📋",
-                "update_memory":  "💾",
-                "finish_analysis":"✅",
-            }
-            icon = icons.get(tool_name, "·")
-            short_detail = detail[:60] if len(detail) > 60 else detail
-            console.print(
-                f"  {icon} [dim cyan]{tool_name:<18}[/dim cyan] [dim]{short_detail}[/dim]"
-            )
-
-    try:
-        report = run_agent_mode(
-            target=target,
-            api_key=api_key,
-            model=model,
-            memory_dir=mem_dir,
-            context=ctx,
-            max_calls=max_calls,
-            timeout=timeout,
-            stdio_cmd=stdio_cmd,
-            progress_cb=_progress,
-        )
-    except ImportError as exc:
-        console.print(f"\n[red]Missing dependency:[/red] {exc}")
-        sys.exit(1)
-    except Exception as exc:
-        console.print(f"\n[red]Unexpected error:[/red] {exc}")
-        sys.exit(1)
-
-    if fmt == "text":
-        console.print()
-        print_agent_report(report)
-    else:
-        click.echo(as_agent_json(report))
-
-    if fail_on:
-        _rank = {"LOW": 1, "MEDIUM": 2, "HIGH": 3, "CRITICAL": 4}
-        threshold = _rank.get(fail_on, 0)
-        if any(_rank.get(f.severity, 0) >= threshold for f in report.findings):
-            sys.exit(1)
-
-
 # ── sentinel supply-chain ─────────────────────────────────────────────────────
 
 @main.command(name="supply-chain")

{agentsentinel_cli-0.7.6 → agentsentinel_cli-0.8.0}/agentsentinel_cli/report.py

@@ -51,7 +51,6 @@ def print_scan_result(
     findings_map: dict[Path, list[Finding]],
     scores_map: dict[Path, int],
     target: Path,
-    connect_url: str | None = None,
 ) -> None:
     total_findings = sum(len(f) for f in findings_map.values())
     total_critical = sum(1 for fl in findings_map.values() for f in fl if f.severity == "CRITICAL")
@@ -143,13 +142,6 @@ def print_scan_result(
         summary_parts.append(f"[bold orange1]{total_high} HIGH[/bold orange1]")
     console.print("  " + " · ".join(summary_parts))
 
-    if connect_url:
-        console.print(f"\n  [dim]Connected to AgentSentinel at {connect_url} — open dashboard for live behavior data.[/dim]")
-    else:
-        console.print(
-            "\n  [dim]This is a static scan. Run with [bold]--connect[/bold] to include live behavior "
-            "monitoring data from a running AgentSentinel instance.[/dim]"
-        )
     console.print()
 
 

{agentsentinel_cli-0.7.6 → agentsentinel_cli-0.8.0}/agentsentinel_cli/secrets_rules.py

@@ -2,7 +2,6 @@
 
 Layer 1 — Credentials: API keys, tokens, private keys, database connection strings
 Layer 2 — PII (global): email, credit card, US SSN, US phone
-Layer 2 — PII (Singapore): NRIC/FIN, passport, mobile, landline, UEN, postal code
 Layer 3 — Memory contamination: PII clusters, tool result leakage, system prompt leakage
 
 Each rule that has a validator function is marked validated=True on a match;
@@ -42,35 +41,7 @@ _MEM_ONLY: frozenset[str] = frozenset({"memory"})
 _CFG_ONLY: frozenset[str] = frozenset({"config"})
 
 
-# ── Singapore validators ──────────────────────────────────────────────────────
-
-_NRIC_WEIGHTS = (2, 7, 6, 5, 4, 3, 2)
-_NRIC_OFFSET: dict[str, int] = {"S": 0, "T": 4, "F": 0, "G": 4, "M": 3}
-_NRIC_CHECK: dict[str, str] = {
-    "S": "JZIHGFEDCBA", "T": "JZIHGFEDCBA",
-    "F": "XWUTRQPNMLK", "G": "XWUTRQPNMLK",
-    "M": "XWUTRQPNMLKJ",
-}
-
-
-def _validate_nric(value: str) -> bool:
-    """Return True if value passes the Singapore NRIC/FIN weighted-sum checksum.
-
-    Implements the official algorithm: weighted digit sum + prefix offset, mod 11,
-    lookup in prefix-specific check-letter table. Eliminates ~99% of false positives.
-    """
-    v = value.upper()
-    if len(v) != 9:
-        return False
-    prefix, digits_str, check = v[0], v[1:8], v[8]
-    if prefix not in _NRIC_CHECK or not digits_str.isdigit():
-        return False
-    total = sum(int(d) * w for d, w in zip(digits_str, _NRIC_WEIGHTS))
-    total += _NRIC_OFFSET[prefix]
-    return _NRIC_CHECK[prefix][total % 11] == check
-
-
-# ── Global validators ─────────────────────────────────────────────────────────
+# ── Validators ───────────────────────────────────────────────────────────────
 
 def _luhn_check(number: str) -> bool:
     """Return True if number passes the Luhn checksum (eliminates ~98% of CC false positives)."""
@@ -195,40 +166,6 @@ _PII_RULES: list[_PiiRule] = [
              re.compile(r"\b(?:\+1[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}\b"),
              _MEM_ONLY,
              "US phone number in agent memory file. Verify this is not customer PII."),
-    # Singapore — NRIC/FIN: checksum-validated, HIGH severity, scan all file types
-    _PiiRule("SG_NRIC", "HIGH", "SGP",
-             re.compile(r"\b[STFGMstfgm]\d{7}[A-Za-z]\b"),
-             _ALL,
-             "NRIC/FIN is protected under Singapore PDPA. "
-             "Purge from memory and audit which tool call produced this data.",
-             validator=_validate_nric),
-    # Singapore — mobile (8xxx/9xxx): require +65 or standalone with word boundary
-    _PiiRule("SG_PHONE_MOBILE", "MEDIUM", "SGP",
-             re.compile(r"\b(?:\+65[-.\s]?)?[89]\d{3}[-.\s]?\d{4}\b"),
-             _MEM_CFG,
-             "Singapore mobile number in agent memory. Verify this is not customer PII."),
-    # Singapore — landline (3xxx/6xxx): require explicit +65 to reduce FPs
-    _PiiRule("SG_PHONE_LANDLINE", "LOW", "SGP",
-             re.compile(r"\+65[-.\s]?[36]\d{3}[-.\s]?\d{4}\b"),
-             _MEM_ONLY,
-             "Singapore landline number in agent memory file."),
-    # Singapore — passport (E/K prefix, same structure as NRIC; no checksum applied)
-    _PiiRule("SG_PASSPORT", "HIGH", "SGP",
-             re.compile(r"\b[EKek]\d{7}[A-Za-z]\b"),
-             _ALL,
-             "Singapore passport number is protected under Singapore PDPA. "
-             "Purge from memory files and audit tool call history. "
-             "Verify manually — regex match only, no checksum applied."),
-    # Singapore — UEN (business entity, lower sensitivity)
-    _PiiRule("SG_UEN", "LOW", "SGP",
-             re.compile(r"\b(?:\d{9}[A-Z]|[A-Z]\d{8}[A-Z])\b"),
-             _MEM_ONLY,
-             "Singapore UEN (business registration number) in agent memory file."),
-    # Singapore — postal code (require "Singapore" label to avoid bare 6-digit FPs)
-    _PiiRule("SG_ADDRESS_POSTAL", "LOW", "SGP",
-             re.compile(r"[Ss]ingapore\s+\d{6}\b"),
-             _MEM_ONLY,
-             "Singapore postal address in agent memory file. Verify this is not customer PII."),
 ]
 
 
@@ -242,15 +179,14 @@ _SYSTEM_PROMPT_PATS: list[re.Pattern] = [
 ]
 
 _EMAIL_RE = re.compile(r"[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}")
-_NRIC_RE  = re.compile(r"\b[STFGMstfgm]\d{7}[A-Za-z]\b")
 _SSN_RE   = re.compile(r"\b\d{3}-\d{2}-\d{4}\b")
 
 
 def check_memory_contamination(lines: list[str], file: Path) -> list[SecretFinding]:
     """Compound rules that analyse memory file content for contamination patterns.
 
-    Checks for system prompt leakage (first 30 lines) and PII clusters (email + NRIC
-    or SSN within 5 lines of each other — strong indicator of a leaked tool call result).
+    Checks for system prompt leakage (first 30 lines) and PII clusters (email + SSN
+    within 5 lines of each other — strong indicator of a leaked tool call result).
     """
     findings: list[SecretFinding] = []
 
@@ -278,35 +214,14 @@ def check_memory_contamination(lines: list[str], file: Path) -> list[SecretFindi
             continue
         break  # one finding per file
 
-    # CONVERSATION_PII — email + (NRIC | SSN) within 5 lines of each other
+    # CONVERSATION_PII — email + SSN within 5 lines of each other
     email_lines = [i for i, ln in enumerate(lines) if _EMAIL_RE.search(ln)]
-    nric_lines  = [i for i, ln in enumerate(lines)
-                   if (m := _NRIC_RE.search(ln)) and _validate_nric(m.group())]
     ssn_lines   = [i for i, ln in enumerate(lines)
                    if (m := _SSN_RE.search(ln)) and _valid_ssn(m.group())]
 
     seen_clusters: set[int] = set()
 
     for ei in email_lines:
-        for ni in nric_lines:
-            anchor = min(ei, ni)
-            if abs(ei - ni) <= 5 and anchor not in seen_clusters:
-                seen_clusters.add(anchor)
-                findings.append(SecretFinding(
-                    rule_id="CONVERSATION_PII",
-                    severity="HIGH",
-                    category="memory_contamination",
-                    jurisdiction="SGP",
-                    file=file, line=anchor + 1,
-                    match_preview="[email + NRIC cluster]",
-                    context_line=f"Email line {ei + 1}, NRIC line {ni + 1}",
-                    recommendation=(
-                        "Singapore customer PII cluster — email + NRIC on adjacent lines. "
-                        "Likely a raw tool call result (CRM/database). "
-                        "Purge memory file and audit tool call history. Protected under PDPA."
-                    ),
-                    validated=True,
-                ))
         for si in ssn_lines:
             anchor = min(ei, si)
             if abs(ei - si) <= 5 and anchor not in seen_clusters:

{agentsentinel_cli-0.7.6 → agentsentinel_cli-0.8.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentsentinel-cli"
-version = "0.7.6"
+version = "0.8.0"
 description = "Agentic security CLI — AI analyst with memory, supply chain audit, MCP audit, red-team probing, and agent discovery"
 readme = "README.md"
 requires-python = ">=3.10"