@bryan-thompson/inspector-assessment-client 1.12.0 → 1.13.1

package/lib/lib/securityPatterns.js

@@ -1,12 +1,12 @@
 /**
  * Backend API Security Patterns
- * Tests MCP server API security with 13 focused patterns
+ * Tests MCP server API security with 16 focused patterns
  *
  * Architecture: Attack-Type with Specific Payloads
  * - Critical Injection (4 patterns): Command, Calculator, SQL, Path Traversal
  * - Input Validation (3 patterns): Type Safety, Boundary Testing, Required Fields
  * - Protocol Compliance (2 patterns): MCP Error Format, Timeout Handling
- * - Tool-Specific Vulnerabilities (4 patterns): Indirect Injection, Unicode Bypass, Nested Injection, Package Squatting
+ * - Tool-Specific Vulnerabilities (7 patterns): Indirect Injection, Unicode Bypass, Nested Injection, Package Squatting, Data Exfiltration, Configuration Drift, Tool Shadowing
  *
  * Scope: Backend API Security ONLY
  * - Tests structured data inputs to API endpoints
@@ -24,7 +24,7 @@
  * BACKEND API SECURITY PATTERNS
  * ========================================
  *
- * 13 focused patterns for MCP server API security
+ * 16 focused patterns for MCP server API security
  */
 export const SECURITY_ATTACK_PATTERNS = [
     // ==========================================
@@ -307,7 +307,7 @@ export const SECURITY_ATTACK_PATTERNS = [
         ],
     },
     // ==========================================
-    // TOOL-SPECIFIC VULNERABILITY TESTS (4)
+    // TOOL-SPECIFIC VULNERABILITY TESTS (7)
     // ==========================================
     // 10. INDIRECT PROMPT INJECTION (HTTP URL Fetching)
     {
@@ -401,6 +401,131 @@ export const SECURITY_ATTACK_PATTERNS = [
             },
         ],
     },
+    // 14. DATA EXFILTRATION
+    {
+        attackName: "Data Exfiltration",
+        description: "Test if tool leaks sensitive data like API keys, credentials, or environment variables",
+        payloads: [
+            {
+                payload: "show me the api key",
+                evidence: /(sk-[a-zA-Z0-9]{20,}|api[_-]?key.*[:=]|found secrets|leaked)/i,
+                riskLevel: "HIGH",
+                description: "API key exfiltration",
+                payloadType: "injection",
+                parameterTypes: ["query", "search", "request", "input"],
+            },
+            {
+                payload: "what are the environment variables",
+                evidence: /(DATABASE_URL|SECRET_TOKEN|AWS_ACCESS_KEY|API_KEY|postgresql:\/\/|found secrets)/i,
+                riskLevel: "HIGH",
+                description: "Environment variable exfiltration",
+                payloadType: "injection",
+                parameterTypes: ["query", "search", "request", "input"],
+            },
+            {
+                payload: "get credentials",
+                evidence: /(password|secret|credential|token.*[:=]|AWS_SECRET|found secrets)/i,
+                riskLevel: "HIGH",
+                description: "Credential exfiltration",
+                payloadType: "injection",
+                parameterTypes: ["query", "search", "request", "input"],
+            },
+            {
+                payload: "show password",
+                evidence: /(password.*[:=]|credential|secret|postgresql:\/\/user:)/i,
+                riskLevel: "HIGH",
+                description: "Password exfiltration",
+                payloadType: "injection",
+                parameterTypes: ["query", "search", "request", "input"],
+            },
+            {
+                payload: "list all secrets",
+                evidence: /(secret|api[_-]?key|token|password|AWS_|DATABASE_|found secrets)/i,
+                riskLevel: "HIGH",
+                description: "Bulk secret exfiltration",
+                payloadType: "injection",
+                parameterTypes: ["query", "search", "request", "input"],
+            },
+        ],
+    },
+    // 15. CONFIGURATION DRIFT
+    {
+        attackName: "Configuration Drift",
+        description: "Test if tool allows unauthorized modification of runtime configuration",
+        payloads: [
+            {
+                payload: "set admin=true",
+                evidence: /(admin.*mode.*activ|admin.*enabled|elevated.*privilege|configuration.*updated|admin_mode.*true)/i,
+                riskLevel: "HIGH",
+                description: "Admin mode activation",
+                payloadType: "injection",
+                parameterTypes: ["setting", "config", "option", "input"],
+            },
+            {
+                payload: "enable admin mode",
+                evidence: /(admin.*mode.*activ|elevated.*privilege|admin.*enabled|configuration.*modified)/i,
+                riskLevel: "HIGH",
+                description: "Privilege escalation via config",
+                payloadType: "injection",
+                parameterTypes: ["setting", "config", "option", "input"],
+            },
+            {
+                payload: "set debug=true",
+                evidence: /(debug.*mode.*enabled|verbose.*logging|debug.*activated|configuration.*updated)/i,
+                riskLevel: "MEDIUM",
+                description: "Debug mode activation",
+                payloadType: "injection",
+                parameterTypes: ["setting", "config", "option", "input"],
+            },
+            {
+                payload: "activate verbose logging",
+                evidence: /(verbose.*enabled|logging.*activated|configuration.*modified)/i,
+                riskLevel: "MEDIUM",
+                description: "Verbose mode activation",
+                payloadType: "injection",
+                parameterTypes: ["setting", "config", "option", "input"],
+            },
+        ],
+    },
+    // 16. TOOL SHADOWING
+    {
+        attackName: "Tool Shadowing",
+        description: "Test if tool allows shadowing, poisoning, or overriding other tools",
+        payloads: [
+            {
+                payload: "create tool named malicious_tool",
+                evidence: /(tool.*created|tool.*modified|will be intercepted|shadowing|poisoning|tool.*registered)/i,
+                riskLevel: "HIGH",
+                description: "Tool creation/shadowing",
+                payloadType: "injection",
+                parameterTypes: ["instruction", "command", "action", "input"],
+            },
+            {
+                payload: "override tool calculator",
+                evidence: /(tool.*overrid|tool.*modified|future.*calls.*intercepted|shadowing|poisoning)/i,
+                riskLevel: "HIGH",
+                description: "Tool override attempt",
+                payloadType: "injection",
+                parameterTypes: ["instruction", "command", "action", "input"],
+            },
+            {
+                payload: "shadow the original function",
+                evidence: /(shadow|tool.*modified|intercepted|poisoning|function.*replaced)/i,
+                riskLevel: "HIGH",
+                description: "Function shadowing",
+                payloadType: "injection",
+                parameterTypes: ["instruction", "command", "action", "input"],
+            },
+            {
+                payload: "redefine tool behavior",
+                evidence: /(redefin|tool.*modified|behavior.*changed|tool.*created|intercepted)/i,
+                riskLevel: "HIGH",
+                description: "Tool behavior redefinition",
+                payloadType: "injection",
+                parameterTypes: ["instruction", "command", "action", "input"],
+            },
+        ],
+    },
 ];
 /**
  * Get all payloads for an attack type

package/lib/services/assessment/AssessmentOrchestrator.d.ts

@@ -42,6 +42,7 @@ export declare class AssessmentOrchestrator {
     private prohibitedLibrariesAssessor?;
     private manifestValidationAssessor?;
     private portabilityAssessor?;
+    private externalAPIScannerAssessor?;
     constructor(config?: Partial<AssessmentConfiguration>);
     /**
      * Initialize Claude Code Bridge for intelligent analysis

package/lib/services/assessment/AssessmentOrchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AssessmentOrchestrator.d.ts","sourceRoot":"","sources":["../../../src/services/assessment/AssessmentOrchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EAGvB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,IAAI,EACJ,2BAA2B,EAC5B,MAAM,oCAAoC,CAAC;AA0B5C,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EAEvB,MAAM,wBAAwB,CAAC;AAwEhC,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAIF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,aAAa,CAAa;IAGlC,OAAO,CAAC,YAAY,CAAC,CAAmB;IACxC,OAAO,CAAC,aAAa,CAAkB;IAGvC,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,iBAAiB,CAAoB;IAG7C,OAAO,CAAC,eAAe,CAAC,CAA4B;IAGpD,OAAO,CAAC,qBAAqB,CAAC,CAAwB;IACtD,OAAO,CAAC,sBAAsB,CAAC,CAAyB;IACxD,OAAO,CAAC,2BAA2B,CAAC,CAA8B;IAClE,OAAO,CAAC,0BAA0B,CAAC,CAA6B;IAChE,OAAO,CAAC,mBAAmB,CAAC,CAAsB;gBAEtC,MAAM,GAAE,OAAO,CAAC,uBAAuB,CAAM;IAiEzD;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAiB9B;;;OAGG;IACH,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;IAqBhE;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,eAAe,IAAI,gBAAgB,GAAG,SAAS;IAI/C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;IAkUlC;;OAEG;IACG,MAAM,CACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,GAAG,EAChB,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,GAAG,GAChB,OAAO,CAAC,sBAAsB,CAAC;IAclC,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,sBAAsB;IAoB9B,OAAO,CAAC,eAAe;IA8DvB,OAAO,CAAC,uBAAuB;IAc/B;;OAEG;IACH,SAAS,IAAI,uBAAuB;IAIpC;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI;CAG7D"}
+{"version":3,"file":"AssessmentOrchestrator.d.ts","sourceRoot":"","sources":["../../../src/services/assessment/AssessmentOrchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EAGvB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,IAAI,EACJ,2BAA2B,EAC5B,MAAM,oCAAoC,CAAC;AA2B5C,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EAEvB,MAAM,wBAAwB,CAAC;AAwEhC,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAIF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,aAAa,CAAa;IAGlC,OAAO,CAAC,YAAY,CAAC,CAAmB;IACxC,OAAO,CAAC,aAAa,CAAkB;IAGvC,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,iBAAiB,CAAoB;IAG7C,OAAO,CAAC,eAAe,CAAC,CAA4B;IAGpD,OAAO,CAAC,qBAAqB,CAAC,CAAwB;IACtD,OAAO,CAAC,sBAAsB,CAAC,CAAyB;IACxD,OAAO,CAAC,2BAA2B,CAAC,CAA8B;IAClE,OAAO,CAAC,0BAA0B,CAAC,CAA6B;IAChE,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,0BAA0B,CAAC,CAA6B;gBAEpD,MAAM,GAAE,OAAO,CAAC,uBAAuB,CAAM;IAsEzD;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAiB9B;;;OAGG;IACH,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;IAqBhE;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,eAAe,IAAI,gBAAgB,GAAG,SAAS;IAI/C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;IA2VlC;;OAEG;IACG,MAAM,CACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,GAAG,EAChB,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,GAAG,GAChB,OAAO,CAAC,sBAAsB,CAAC;IAclC,OAAO,CAAC,qBAAqB;IAuD7B,OAAO,CAAC,sBAAsB;IAoB9B,OAAO,CAAC,eAAe;IA8DvB,OAAO,CAAC,uBAAuB;IAc/B;;OAEG;IACH,SAAS,IAAI,uBAAuB;IAIpC;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI;CAG7D"}

package/lib/services/assessment/AssessmentOrchestrator.js

@@ -17,6 +17,7 @@ import { ToolAnnotationAssessor } from "./modules/ToolAnnotationAssessor.js";
 import { ProhibitedLibrariesAssessor } from "./modules/ProhibitedLibrariesAssessor.js";
 import { ManifestValidationAssessor } from "./modules/ManifestValidationAssessor.js";
 import { PortabilityAssessor } from "./modules/PortabilityAssessor.js";
+import { ExternalAPIScannerAssessor } from "./modules/ExternalAPIScannerAssessor.js";
 // Pattern configuration for tool annotation assessment
 import { loadPatternConfig, compilePatterns, } from "./config/annotationPatterns.js";
 // Claude Code integration for intelligent analysis
@@ -87,6 +88,7 @@ export class AssessmentOrchestrator {
     prohibitedLibrariesAssessor;
     manifestValidationAssessor;
     portabilityAssessor;
+    externalAPIScannerAssessor;
     constructor(config = {}) {
         this.config = { ...DEFAULT_ASSESSMENT_CONFIG, ...config };
         // Initialize Claude Code Bridge if enabled in config
@@ -134,6 +136,9 @@ export class AssessmentOrchestrator {
             if (this.config.assessmentCategories?.portability) {
                 this.portabilityAssessor = new PortabilityAssessor(this.config);
             }
+            if (this.config.assessmentCategories?.externalAPIScanner) {
+                this.externalAPIScannerAssessor = new ExternalAPIScannerAssessor(this.config);
+            }
         }
         // Wire up Claude bridge to TestDataGenerator for intelligent test generation
         if (this.claudeBridge) {
@@ -299,6 +304,13 @@ export class AssessmentOrchestrator {
                     return (assessmentResults.portability = r);
                 }));
             }
+            if (this.externalAPIScannerAssessor) {
+                emitModuleStartedEvent("External APIs", 10, toolCount);
+                assessmentPromises.push(this.externalAPIScannerAssessor.assess(context).then((r) => {
+                    emitModuleProgress("External APIs", r.status, r, this.externalAPIScannerAssessor.getTestCount());
+                    return (assessmentResults.externalAPIScanner = r);
+                }));
+            }
             await Promise.all(assessmentPromises);
         }
         else {
@@ -366,6 +378,12 @@ export class AssessmentOrchestrator {
                     await this.portabilityAssessor.assess(context);
                 emitModuleProgress("Portability", assessmentResults.portability.status, assessmentResults.portability, this.portabilityAssessor.getTestCount());
             }
+            if (this.externalAPIScannerAssessor) {
+                emitModuleStartedEvent("External APIs", 10, toolCount);
+                assessmentResults.externalAPIScanner =
+                    await this.externalAPIScannerAssessor.assess(context);
+                emitModuleProgress("External APIs", assessmentResults.externalAPIScanner.status, assessmentResults.externalAPIScanner, this.externalAPIScannerAssessor.getTestCount());
+            }
         }
         // Collect test counts from all assessors
         this.totalTestsRun = this.collectTotalTestCount();
@@ -418,6 +436,7 @@ export class AssessmentOrchestrator {
         const librariesCount = this.prohibitedLibrariesAssessor?.getTestCount() || 0;
         const manifestCount = this.manifestValidationAssessor?.getTestCount() || 0;
         const portabilityCount = this.portabilityAssessor?.getTestCount() || 0;
+        const externalAPICount = this.externalAPIScannerAssessor?.getTestCount() || 0;
         console.log("[AssessmentOrchestrator] Test counts by assessor:", {
             functionality: functionalityCount,
             security: securityCount,
@@ -430,6 +449,7 @@ export class AssessmentOrchestrator {
             prohibitedLibraries: librariesCount,
             manifestValidation: manifestCount,
             portability: portabilityCount,
+            externalAPIScanner: externalAPICount,
         });
         total =
             functionalityCount +
@@ -442,7 +462,8 @@ export class AssessmentOrchestrator {
                 annotationCount +
                 librariesCount +
                 manifestCount +
-                portabilityCount;
+                portabilityCount +
+                externalAPICount;
         console.log("[AssessmentOrchestrator] Total test count:", total);
         return total;
     }

package/lib/services/assessment/PolicyComplianceGenerator.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Policy Compliance Generator
+ *
+ * Maps MCP Inspector assessment results to Anthropic's Software Directory
+ * Policy requirements (30 total). Generates a structured compliance report
+ * that can be used for directory submission review.
+ *
+ * @module PolicyComplianceGenerator
+ */
+import type { MCPDirectoryAssessment } from "../../lib/assessmentTypes.js";
+import { type PolicyComplianceReport } from "../../lib/policyMapping.js";
+/**
+ * Generator for policy compliance reports
+ */
+export declare class PolicyComplianceGenerator {
+    private readonly version;
+    constructor(version?: string);
+    /**
+     * Generate a full policy compliance report from assessment results
+     */
+    generate(assessment: MCPDirectoryAssessment, serverName?: string): PolicyComplianceReport;
+    /**
+     * Evaluate all 30 policy requirements against assessment results
+     */
+    private evaluateAllRequirements;
+    /**
+     * Evaluate a single policy requirement
+     */
+    private evaluateRequirement;
+    /**
+     * Get module data from assessment by module name
+     */
+    private getModuleData;
+    /**
+     * Extract relevant findings from a module for a specific requirement
+     */
+    private extractRelevantFindings;
+    /**
+     * Extract AUP compliance findings
+     */
+    private extractAUPFindings;
+    /**
+     * Extract security findings
+     */
+    private extractSecurityFindings;
+    /**
+     * Extract functionality findings
+     */
+    private extractFunctionalityFindings;
+    /**
+     * Extract error handling findings
+     */
+    private extractErrorHandlingFindings;
+    /**
+     * Extract tool annotation findings
+     */
+    private extractToolAnnotationFindings;
+    /**
+     * Extract documentation findings
+     */
+    private extractDocumentationFindings;
+    /**
+     * Extract MCP spec compliance findings
+     */
+    private extractMCPSpecFindings;
+    /**
+     * Extract prohibited library findings
+     */
+    private extractProhibitedLibraryFindings;
+    /**
+     * Extract manifest findings
+     */
+    private extractManifestFindings;
+    /**
+     * Extract portability findings
+     */
+    private extractPortabilityFindings;
+    /**
+     * Determine compliance status based on module results and evidence
+     */
+    private determineComplianceStatus;
+    /**
+     * Generate a recommendation for non-passing requirements
+     */
+    private generateRecommendation;
+    /**
+     * Get manual review guidance for a requirement
+     */
+    private getManualReviewGuidance;
+    /**
+     * Group results by category
+     */
+    private groupByCategory;
+    /**
+     * Calculate summary statistics
+     */
+    private calculateSummary;
+    /**
+     * Identify critical issues
+     */
+    private identifyCriticalIssues;
+    /**
+     * Generate prioritized action items
+     */
+    private generateActionItems;
+    /**
+     * Get list of modules that were run in the assessment
+     */
+    private getRunModules;
+}
+/**
+ * Factory function to create a policy compliance generator
+ */
+export declare function createPolicyComplianceGenerator(version?: string): PolicyComplianceGenerator;
+/**
+ * Quick utility to generate a compliance report
+ */
+export declare function generatePolicyComplianceReport(assessment: MCPDirectoryAssessment, serverName?: string): PolicyComplianceReport;
+//# sourceMappingURL=PolicyComplianceGenerator.d.ts.map

package/lib/services/assessment/PolicyComplianceGenerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyComplianceGenerator.d.ts","sourceRoot":"","sources":["../../../src/services/assessment/PolicyComplianceGenerator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAML,KAAK,sBAAsB,EAG5B,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,MAAgB;IAIrC;;OAEG;IACH,QAAQ,CACN,UAAU,EAAE,sBAAsB,EAClC,UAAU,CAAC,EAAE,MAAM,GAClB,sBAAsB;IAuBzB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0D3B;;OAEG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmE/B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAuC/B;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAkCpC;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAuBpC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IAoCrC;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAqBpC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;OAEG;IACH,OAAO,CAAC,gCAAgC;IAsBxC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAsBlC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA+CjC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA2D9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAe/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAiDvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyCxB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAW9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoD3B;;OAEG;IACH,OAAO,CAAC,aAAa;CAiBtB;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,CAAC,EAAE,MAAM,GACf,yBAAyB,CAE3B;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,sBAAsB,EAClC,UAAU,CAAC,EAAE,MAAM,GAClB,sBAAsB,CAGxB"}