Cloud/K8s Support and Multi-Index RAG Expansion

.codacyrc

@@ -0,0 +1,25 @@
+{
+  "exclude_paths": [
+    "banners/**",
+    "docs/**",
+    "modules/rootkit/**",
+    "parquets/**",
+    "persistent_chroma_db/**",
+    "sessions/**",
+    "static/**",
+    "test/**",
+    "external/**",
+    "**/*.png",
+    "**/*.ico",
+    "**/*.ttf",
+    "**/*.so",
+    "**/*.o",
+    "**/*.pyc",
+    "**/*.db",
+    "**/*.bin",
+    "**/*.exe",
+    "**/*.elf",
+    "**/*.macho",
+    "**/*.gz"
+  ]
+}

.eslintignore

@@ -0,0 +1,21 @@
+banners/
+docs/
+modules/rootkit/
+parquets/
+persistent_chroma_db/
+sessions/
+static/
+test/
+external/
+*.png
+*.ico
+*.ttf
+*.so
+*.o
+*.pyc
+*.db
+*.bin
+*.exe
+*.elf
+*.macho
+*.gz

.eslintrc.json

@@ -0,0 +1,27 @@
+{
+  "env": {
+    "browser": true,
+    "es2021": true,
+    "node": true
+  },
+  "extends": "eslint:recommended",
+  "parserOptions": {
+    "ecmaVersion": 12,
+    "sourceType": "module"
+  },
+  "rules": {},
+  "ignorePatterns": [
+    "banners/",
+    "docs/",
+    "modules/rootkit/",
+    "parquets/",
+    "persistent_chroma_db/",
+    "sessions/",
+    "static/",
+    "*.png",
+    "*.ico",
+    "*.ttf",
+    "*.so",
+    "*.o"
+  ]
+}

.pylintrc

@@ -0,0 +1,3 @@
+[MASTER]
+ignore=banners,docs,modules/rootkit,parquets,persistent_chroma_db,sessions,static,test,external
+ignore-patterns=.*\.png,.*\.ico,.*\.ttf,.*\.so,.*\.o,.*\.pyc,.*\.db,.*\.bin,.*\.exe,.*\.elf,.*\.macho,.*\.gz

modules/moe_router.py

@@ -198,6 +198,26 @@ def update(self, reward: float, detection_prob: float) -> None:
             "Gemma 2 9B for output analysis, log parsing, and report synthesis."
         ),
     ),
+    ExpertProfile(
+        expert_id="groq_cloud",
+        backend="groq",
+        model="llama-3.3-70b-versatile",
+        capabilities=["cloud_enum", "cloud_exploit", "iam_analysis"],
+        base_weight=0.75,
+        cost_tier=2,
+        latency_ms=2000,
+        description="Specialized expert for AWS/Azure/GCP enumeration and IAM exploitation.",
+    ),
+    ExpertProfile(
+        expert_id="groq_container",
+        backend="groq",
+        model="llama-3.3-70b-versatile",
+        capabilities=["container_escape", "k8s_enum", "docker_audit"],
+        base_weight=0.75,
+        cost_tier=2,
+        latency_ms=2000,
+        description="Specialized expert for Kubernetes, Docker, and container escape techniques.",
+    ),
 ]
 
 

modules/obs_parser.py

@@ -56,6 +56,8 @@ class FindingType(str, Enum):
     DOMAIN          = "domain"
     EMAIL           = "email"
     ERROR           = "error"
+    CLOUD_ROLE      = "cloud_role"
+    K8S_RESOURCE    = "k8s_resource"
 
 
 @dataclass
@@ -315,6 +317,38 @@ def extract(self, text: str, host: str) -> List[Finding]:
         return results
 
 
+class _CloudIdentityExtractor(Extractor):
+    """Extracts IAM roles, ARNs, and K8s resources from cloud tool output."""
+    _PATTERNS = [
+        # AWS ARN
+        re.compile(r'arn:aws:iam::\d{12}:[a-zA-Z0-9:/._-]+'),
+        # Azure Resource ID
+        re.compile(r'/subscriptions/[a-f0-9-]{36}/resourceGroups/[a-zA-Z0-9._-]+'),
+        # K8s resources
+        re.compile(r'\b(pod|deployment|service|namespace|secret)/[a-z0-9-]{1,63}\b'),
+    ]
+
+    def extract(self, text: str, host: str) -> List[Finding]:
+        seen: set = set()
+        results: List[Finding] = []
+        for pat in self._PATTERNS:
+            for m in pat.finditer(text):
+                val = m.group()
+                if val not in seen:
+                    seen.add(val)
+                    ftype = FindingType.CLOUD_ROLE
+                    if "arn:aws" in val or "/subscriptions/" in val:
+                        ftype = FindingType.CLOUD_ROLE
+                    else:
+                        ftype = FindingType.K8S_RESOURCE
+
+                    results.append(Finding(
+                        ftype, val,
+                        host=host, confidence=0.95, raw=m.group()
+                    ))
+        return results
+
+
 # ---------------------------------------------------------------------------
 # Success heuristic
 # ---------------------------------------------------------------------------
@@ -372,6 +406,7 @@ def __init__(self) -> None:
             _UsernameExtractor(),
             _DomainExtractor(),
             _ErrorExtractor(),
+            _CloudIdentityExtractor(),
         ]:
             self._registry.register(ext)