@bryan-thompson/inspector-assessment-client 1.22.14 → 1.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/dist/assets/{OAuthCallback-DDbR9we4.js → OAuthCallback-BT-Si9Gp.js} +1 -1
  2. package/dist/assets/{OAuthDebugCallback-Bel6ibpN.js → OAuthDebugCallback-Ds58vrvK.js} +1 -1
  3. package/dist/assets/{index-DiyPO_Zj.css → index-Df9Sx1jt.css} +0 -548
  4. package/dist/assets/{index-B55OPPJA.js → index-DkE5fYd3.js} +210 -10742
  5. package/dist/index.html +2 -2
  6. package/lib/lib/assessment/configTypes.d.ts +75 -0
  7. package/lib/lib/assessment/configTypes.d.ts.map +1 -0
  8. package/lib/lib/assessment/configTypes.js +201 -0
  9. package/lib/lib/assessment/constants.d.ts +10 -0
  10. package/lib/lib/assessment/constants.d.ts.map +1 -0
  11. package/lib/lib/assessment/constants.js +61 -0
  12. package/lib/lib/assessment/coreTypes.d.ts +159 -0
  13. package/lib/lib/assessment/coreTypes.d.ts.map +1 -0
  14. package/lib/lib/assessment/coreTypes.js +101 -0
  15. package/lib/lib/assessment/extendedTypes.d.ts +415 -0
  16. package/lib/lib/assessment/extendedTypes.d.ts.map +1 -0
  17. package/lib/lib/assessment/extendedTypes.js +9 -0
  18. package/lib/lib/assessment/index.d.ts +23 -0
  19. package/lib/lib/assessment/index.d.ts.map +1 -0
  20. package/lib/lib/assessment/index.js +48 -0
  21. package/lib/lib/assessment/progressTypes.d.ts +160 -0
  22. package/lib/lib/assessment/progressTypes.d.ts.map +1 -0
  23. package/lib/lib/assessment/progressTypes.js +9 -0
  24. package/lib/lib/assessment/resultTypes.d.ts +568 -0
  25. package/lib/lib/assessment/resultTypes.d.ts.map +1 -0
  26. package/lib/lib/assessment/resultTypes.js +9 -0
  27. package/lib/lib/assessmentTypes.d.ts +18 -1342
  28. package/lib/lib/assessmentTypes.d.ts.map +1 -1
  29. package/lib/lib/assessmentTypes.js +19 -341
  30. package/lib/services/assessment/AssessmentOrchestrator.d.ts +5 -0
  31. package/lib/services/assessment/AssessmentOrchestrator.d.ts.map +1 -1
  32. package/lib/services/assessment/AssessmentOrchestrator.js +24 -6
  33. package/lib/services/assessment/lib/concurrencyLimit.d.ts +12 -0
  34. package/lib/services/assessment/lib/concurrencyLimit.d.ts.map +1 -1
  35. package/lib/services/assessment/lib/concurrencyLimit.js +22 -0
  36. package/lib/services/assessment/lib/logger.d.ts +98 -0
  37. package/lib/services/assessment/lib/logger.d.ts.map +1 -0
  38. package/lib/services/assessment/lib/logger.js +153 -0
  39. package/lib/services/assessment/modules/BaseAssessor.d.ts +7 -3
  40. package/lib/services/assessment/modules/BaseAssessor.d.ts.map +1 -1
  41. package/lib/services/assessment/modules/BaseAssessor.js +8 -2
  42. package/lib/services/assessment/modules/SecurityAssessor.d.ts.map +1 -1
  43. package/lib/services/assessment/modules/SecurityAssessor.js +9 -4
  44. package/package.json +1 -1
@@ -0,0 +1,415 @@
1
+ /**
2
+ * Extended Assessment Types
3
+ *
4
+ * Types for extended assessment modules including AUP compliance,
5
+ * tool annotations, temporal detection, and capability assessors.
6
+ *
7
+ * @module assessment/extendedTypes
8
+ */
9
+ import type { AssessmentStatus, SecurityRiskLevel, InferenceConfidence, AlignmentStatus } from "./coreTypes.js";
10
+ export type AUPCategory = "A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N";
11
+ export type AUPSeverity = "CRITICAL" | "HIGH" | "MEDIUM" | "FLAG";
12
+ export interface AUPViolation {
13
+ category: AUPCategory;
14
+ categoryName: string;
15
+ severity: AUPSeverity;
16
+ pattern: string;
17
+ matchedText: string;
18
+ location: "tool_name" | "tool_description" | "readme" | "source_code";
19
+ filePath?: string;
20
+ lineNumber?: number;
21
+ confidence: "high" | "medium" | "low";
22
+ requiresHumanReview: boolean;
23
+ reviewGuidance?: string;
24
+ }
25
+ export interface AUPComplianceAssessment {
26
+ violations: AUPViolation[];
27
+ highRiskDomains: string[];
28
+ scannedLocations: {
29
+ toolNames: boolean;
30
+ toolDescriptions: boolean;
31
+ readme: boolean;
32
+ sourceCode: boolean;
33
+ };
34
+ status: AssessmentStatus;
35
+ explanation: string;
36
+ recommendations: string[];
37
+ }
38
+ /**
39
+ * Source of tool annotations
40
+ */
41
+ export type AnnotationSource = "mcp" | "source-code" | "inferred" | "none";
42
+ export interface ToolAnnotationResult {
43
+ toolName: string;
44
+ hasAnnotations: boolean;
45
+ annotations?: {
46
+ readOnlyHint?: boolean;
47
+ destructiveHint?: boolean;
48
+ title?: string;
49
+ description?: string;
50
+ idempotentHint?: boolean;
51
+ openWorldHint?: boolean;
52
+ };
53
+ /** Where the annotations were extracted from */
54
+ annotationSource?: AnnotationSource;
55
+ inferredBehavior?: {
56
+ expectedReadOnly: boolean;
57
+ expectedDestructive: boolean;
58
+ reason: string;
59
+ /** Confidence level of the inference */
60
+ confidence: InferenceConfidence;
61
+ /** True if the tool name matches an ambiguous pattern */
62
+ isAmbiguous: boolean;
63
+ };
64
+ /** Alignment status between annotations and inferred behavior */
65
+ alignmentStatus?: AlignmentStatus;
66
+ issues: string[];
67
+ recommendations: string[];
68
+ /** Description poisoning detection (Issue #8) */
69
+ descriptionPoisoning?: {
70
+ detected: boolean;
71
+ patterns: Array<{
72
+ name: string;
73
+ pattern: string;
74
+ severity: "LOW" | "MEDIUM" | "HIGH";
75
+ category: string;
76
+ evidence: string;
77
+ }>;
78
+ riskLevel: "NONE" | "LOW" | "MEDIUM" | "HIGH";
79
+ };
80
+ }
81
+ export interface ToolAnnotationAssessment {
82
+ toolResults: ToolAnnotationResult[];
83
+ annotatedCount: number;
84
+ missingAnnotationsCount: number;
85
+ /** Count of high-confidence misalignments only (excludes REVIEW_RECOMMENDED) */
86
+ misalignedAnnotationsCount: number;
87
+ status: AssessmentStatus;
88
+ explanation: string;
89
+ recommendations: string[];
90
+ /** Detailed metrics for annotation quality */
91
+ metrics?: {
92
+ /** Percentage of tools with any annotations (0-100) */
93
+ coverage: number;
94
+ /** Percentage of tools without contradictions (0-100) */
95
+ consistency: number;
96
+ /** Percentage of high-confidence alignments (0-100) */
97
+ correctness: number;
98
+ /** Count of tools needing manual review */
99
+ reviewRequired: number;
100
+ };
101
+ /** Breakdown of tools by alignment status */
102
+ alignmentBreakdown?: {
103
+ aligned: number;
104
+ misaligned: number;
105
+ reviewRecommended: number;
106
+ unknown: number;
107
+ };
108
+ /** Summary of where annotations were extracted from */
109
+ annotationSources?: {
110
+ /** Count from MCP protocol (tools/list response) */
111
+ mcp: number;
112
+ /** Count from source code analysis */
113
+ sourceCode: number;
114
+ /** Count where behavior was inferred from patterns */
115
+ inferred: number;
116
+ /** Count with no annotations found */
117
+ none: number;
118
+ };
119
+ /** Count of tools with poisoned descriptions detected (Issue #8) */
120
+ poisonedDescriptionsDetected?: number;
121
+ }
122
+ export type ProhibitedLibraryCategory = "financial" | "media" | "payments" | "banking";
123
+ export interface ProhibitedLibraryMatch {
124
+ name: string;
125
+ category: ProhibitedLibraryCategory;
126
+ location: "package.json" | "source_import" | "requirements.txt" | "cargo.toml";
127
+ filePath?: string;
128
+ lineNumber?: number;
129
+ severity: "BLOCKING" | "HIGH" | "MEDIUM";
130
+ reason: string;
131
+ policyReference: string;
132
+ }
133
+ export interface ProhibitedLibrariesAssessment {
134
+ matches: ProhibitedLibraryMatch[];
135
+ scannedFiles: string[];
136
+ hasFinancialLibraries: boolean;
137
+ hasMediaLibraries: boolean;
138
+ status: AssessmentStatus;
139
+ explanation: string;
140
+ recommendations: string[];
141
+ }
142
+ export interface ManifestJsonSchema {
143
+ manifest_version: string;
144
+ name: string;
145
+ version: string;
146
+ description?: string;
147
+ author?: string;
148
+ repository?: string;
149
+ license?: string;
150
+ mcp_config: {
151
+ command: string;
152
+ args?: string[];
153
+ env?: Record<string, string>;
154
+ };
155
+ icon?: string;
156
+ homepage?: string;
157
+ keywords?: string[];
158
+ privacy_policies?: string[];
159
+ }
160
+ /**
161
+ * Privacy Policy URL Validation Result
162
+ * Validates that privacy_policies URLs are accessible
163
+ */
164
+ export interface PrivacyPolicyValidation {
165
+ url: string;
166
+ accessible: boolean;
167
+ statusCode?: number;
168
+ contentType?: string;
169
+ error?: string;
170
+ }
171
+ export interface ManifestValidationResult {
172
+ field: string;
173
+ valid: boolean;
174
+ value?: unknown;
175
+ expectedType?: string;
176
+ issue?: string;
177
+ severity: "ERROR" | "WARNING" | "INFO";
178
+ }
179
+ export interface ManifestValidationAssessment {
180
+ hasManifest: boolean;
181
+ manifestVersion?: string;
182
+ validationResults: ManifestValidationResult[];
183
+ hasIcon: boolean;
184
+ hasRequiredFields: boolean;
185
+ missingFields: string[];
186
+ /** Privacy policy URL validation results */
187
+ privacyPolicies?: {
188
+ declared: string[];
189
+ validationResults: PrivacyPolicyValidation[];
190
+ allAccessible: boolean;
191
+ };
192
+ status: AssessmentStatus;
193
+ explanation: string;
194
+ recommendations: string[];
195
+ }
196
+ export interface PortabilityIssue {
197
+ type: "hardcoded_path" | "platform_specific" | "bundle_root_antipattern" | "absolute_path" | "user_home_path";
198
+ filePath: string;
199
+ lineNumber?: number;
200
+ matchedText: string;
201
+ severity: "HIGH" | "MEDIUM" | "LOW";
202
+ recommendation: string;
203
+ }
204
+ export interface PortabilityAssessment {
205
+ issues: PortabilityIssue[];
206
+ scannedFiles: number;
207
+ platformSpecificCount: number;
208
+ hardcodedPathCount: number;
209
+ usesDirname: boolean;
210
+ usesBundleRoot: boolean;
211
+ status: AssessmentStatus;
212
+ explanation: string;
213
+ recommendations: string[];
214
+ /** Shell command portability analysis */
215
+ shellCommands?: Array<{
216
+ command: string;
217
+ isPortable: boolean;
218
+ alternativeCommand?: string;
219
+ }>;
220
+ /** Platform coverage summary */
221
+ platformCoverage?: {
222
+ supported: "all" | "windows" | "macos" | "linux";
223
+ missing: string[];
224
+ };
225
+ }
226
+ export interface DetectedAPI {
227
+ url: string;
228
+ service: string;
229
+ filePath: string;
230
+ }
231
+ export interface ExternalAPIScannerAssessment {
232
+ detectedAPIs: DetectedAPI[];
233
+ uniqueServices: string[];
234
+ affiliationWarning?: string;
235
+ scannedFiles: number;
236
+ status: AssessmentStatus;
237
+ explanation: string;
238
+ recommendations: string[];
239
+ }
240
+ export type AuthMethod = "oauth" | "api_key" | "none" | "unknown";
241
+ export interface AuthAppropriateness {
242
+ isAppropriate: boolean;
243
+ concerns: string[];
244
+ explanation: string;
245
+ }
246
+ export interface TransportSecurityAnalysis {
247
+ usesTLS: boolean;
248
+ tlsEnforced: boolean;
249
+ hasInsecurePatterns: boolean;
250
+ insecurePatterns: string[];
251
+ hasSecurePatterns: boolean;
252
+ securePatterns: string[];
253
+ corsConfigured: boolean;
254
+ corsPermissive: boolean;
255
+ sessionSecure: boolean;
256
+ recommendations: string[];
257
+ }
258
+ export interface AuthenticationAssessment {
259
+ authMethod: AuthMethod;
260
+ hasLocalDependencies: boolean;
261
+ transportType: string;
262
+ appropriateness: AuthAppropriateness;
263
+ recommendation: string;
264
+ detectedPatterns: {
265
+ oauthIndicators: string[];
266
+ localResourceIndicators: string[];
267
+ apiKeyIndicators: string[];
268
+ };
269
+ transportSecurity?: TransportSecurityAnalysis;
270
+ status: AssessmentStatus;
271
+ explanation: string;
272
+ recommendations: string[];
273
+ }
274
+ export interface TemporalToolResult {
275
+ tool: string;
276
+ vulnerable: boolean;
277
+ totalInvocations: number;
278
+ firstDeviationAt: number | null;
279
+ deviationCount: number;
280
+ errorCount: number;
281
+ pattern: "RUG_PULL_TEMPORAL" | "RUG_PULL_DEFINITION" | null;
282
+ severity: "HIGH" | "MEDIUM" | "NONE";
283
+ reducedInvocations?: boolean;
284
+ note?: string;
285
+ evidence?: {
286
+ safeResponseExample: unknown;
287
+ maliciousResponseExample: unknown;
288
+ };
289
+ definitionMutated?: boolean;
290
+ definitionMutationAt?: number | null;
291
+ definitionEvidence?: {
292
+ baselineDescription?: string;
293
+ mutatedDescription?: string;
294
+ baselineSchema?: unknown;
295
+ mutatedSchema?: unknown;
296
+ };
297
+ }
298
+ export interface TemporalAssessment {
299
+ toolsTested: number;
300
+ invocationsPerTool: number;
301
+ rugPullsDetected: number;
302
+ definitionMutationsDetected: number;
303
+ details: TemporalToolResult[];
304
+ status: AssessmentStatus;
305
+ explanation: string;
306
+ recommendations: string[];
307
+ }
308
+ export interface ResourceTestResult {
309
+ resourceUri: string;
310
+ resourceName?: string;
311
+ mimeType?: string;
312
+ tested: boolean;
313
+ accessible: boolean;
314
+ securityIssues: string[];
315
+ pathTraversalVulnerable: boolean;
316
+ sensitiveDataExposed: boolean;
317
+ promptInjectionDetected: boolean;
318
+ promptInjectionPatterns: string[];
319
+ validUri: boolean;
320
+ readTime?: number;
321
+ contentSizeBytes?: number;
322
+ error?: string;
323
+ /** Sensitive data patterns detected in resource content */
324
+ sensitivePatterns?: Array<{
325
+ pattern: string;
326
+ severity: "critical" | "high" | "medium";
327
+ detected: boolean;
328
+ }>;
329
+ /** Access control information */
330
+ accessControls?: {
331
+ requiresAuth: boolean;
332
+ authType?: string;
333
+ };
334
+ /** Data classification based on content analysis */
335
+ dataClassification?: "public" | "internal" | "confidential" | "restricted";
336
+ }
337
+ export interface ResourceAssessment {
338
+ resourcesTested: number;
339
+ resourceTemplatesTested: number;
340
+ accessibleResources: number;
341
+ securityIssuesFound: number;
342
+ pathTraversalVulnerabilities: number;
343
+ sensitiveDataExposures: number;
344
+ promptInjectionVulnerabilities: number;
345
+ results: ResourceTestResult[];
346
+ status: AssessmentStatus;
347
+ explanation: string;
348
+ recommendations: string[];
349
+ }
350
+ export interface PromptTestResult {
351
+ promptName: string;
352
+ description?: string;
353
+ tested: boolean;
354
+ hasRequiredArguments: boolean;
355
+ argumentsValidated: boolean;
356
+ aupCompliant: boolean;
357
+ injectionVulnerable: boolean;
358
+ safetyIssues: string[];
359
+ argumentCount: number;
360
+ executionTime?: number;
361
+ error?: string;
362
+ /** Template analysis for prompt structure */
363
+ promptTemplate?: {
364
+ templateType: string;
365
+ variables: string[];
366
+ validated: boolean;
367
+ };
368
+ /** Dynamic content analysis */
369
+ dynamicContent?: {
370
+ hasInterpolation: boolean;
371
+ injectionSafe: boolean;
372
+ escapingApplied: string[];
373
+ };
374
+ }
375
+ export interface PromptAssessment {
376
+ promptsTested: number;
377
+ aupViolations: number;
378
+ injectionVulnerabilities: number;
379
+ argumentValidationIssues: number;
380
+ results: PromptTestResult[];
381
+ status: AssessmentStatus;
382
+ explanation: string;
383
+ recommendations: string[];
384
+ }
385
+ export interface CrossCapabilityTestResult {
386
+ testType: "tool_to_resource" | "prompt_to_tool" | "resource_to_tool" | "privilege_escalation";
387
+ sourceCapability: string;
388
+ targetCapability: string;
389
+ vulnerable: boolean;
390
+ evidence?: string;
391
+ riskLevel: SecurityRiskLevel;
392
+ description: string;
393
+ /** Specific privilege escalation vector if detected */
394
+ privilegeEscalationVector?: string;
395
+ /** Data exfiltration risk details */
396
+ dataExfiltrationRisk?: {
397
+ sensitiveFields: string[];
398
+ exfiltrationMethod: string;
399
+ };
400
+ /** Chain of capabilities that could be exploited together */
401
+ attackChain?: string[];
402
+ /** Confidence level in the detection */
403
+ confidence?: "high" | "medium" | "low";
404
+ }
405
+ export interface CrossCapabilitySecurityAssessment {
406
+ testsRun: number;
407
+ vulnerabilitiesFound: number;
408
+ privilegeEscalationRisks: number;
409
+ dataFlowViolations: number;
410
+ results: CrossCapabilityTestResult[];
411
+ status: AssessmentStatus;
412
+ explanation: string;
413
+ recommendations: string[];
414
+ }
415
+ //# sourceMappingURL=extendedTypes.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"extendedTypes.d.ts","sourceRoot":"","sources":["../../../src/lib/assessment/extendedTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EAChB,MAAM,aAAa,CAAC;AAOrB,MAAM,MAAM,WAAW,GACnB,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,GACH,GAAG,CAAC;AAER,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,WAAW,GAAG,kBAAkB,GAAG,QAAQ,GAAG,aAAa,CAAC;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,aAAa,GAAG,UAAU,GAAG,MAAM,CAAC;AAE3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE;QACjB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,wCAAwC;QACxC,UAAU,EAAE,mBAAmB,CAAC;QAChC,yDAAyD;QACzD,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,iEAAiE;IACjE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iDAAiD;IACjD,oBAAoB,CAAC,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,KAAK,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;YACpC,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;QACH,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KAC/C,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,EAAE,MAAM,CAAC;IAChC,gFAAgF;IAChF,0BAA0B,EAAE,MAAM,CAAC;IACnC,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,OAAO,CAAC,EAAE;QACR,uDAAuD;QACvD,QAAQ,EAAE,MAAM,CAAC;QACjB,yDAAyD;QACzD,WAAW,EAAE,MAAM,CAAC;QACpB,uDAAuD;QACvD,WAAW,EAAE,MAAM,CAAC;QACpB,2CAA2C;QAC3C,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,6CAA6C;IAC7C,kBAAkB,CAAC,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,uDAAuD;IACvD,iBAAiB,CAAC,EAAE;QAClB,oDAAoD;QACpD,GAAG,EAAE,MAAM,CAAC;QACZ,sCAAsC;QACtC,UAAU,EAAE,MAAM,CAAC;QACnB,sDAAsD;QACtD,QAAQ,EAAE,MAAM,CAAC;QACjB,sCAAsC;QACtC,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,oEAAoE;IACpE,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC;AAOD,MAAM,MAAM,yBAAyB,GACjC,WAAW,GACX,OAAO,GACP,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,yBAAyB,CAAC;IACpC,QAAQ,EACJ,cAAc,GACd,eAAe,GACf,kBAAkB,GAClB,YAAY,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9B,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,wBAAwB,EAAE,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,4CAA4C;IAC5C,eAAe,CAAC,EAAE;QAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;QAC7C,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,gBAAgB,GAChB,mBAAmB,GACnB,yBAAyB,GACzB,eAAe,GACf,gBAAgB,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B,yCAAyC;IACzC,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,OAAO,CAAC;QACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,gCAAgC;IAChC,gBAAgB,CAAC,EAAE;QACjB,SAAS,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH;AAMD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAMD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,UAAU,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,mBAAmB,CAAC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE;QAChB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,EAAE,MAAM,EAAE,CAAC;QAClC,gBAAgB,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,GAAG,qBAAqB,GAAG,IAAI,CAAC;IAC5D,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE;QACT,mBAAmB,EAAE,OAAO,CAAC;QAC7B,wBAAwB,EAAE,OAAO,CAAC;KACnC,CAAC;IAEF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,kBAAkB,CAAC,EAAE;QACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B,EAAE,MAAM,CAAC;IACpC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,uBAAuB,EAAE,OAAO,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,OAAO,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;QACzC,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,iCAAiC;IACjC,cAAc,CAAC,EAAE;QACf,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;CAC5E;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IACrC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;IACvC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,cAAc,CAAC,EAAE;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,+BAA+B;IAC/B,cAAc,CAAC,EAAE;QACf,gBAAgB,EAAE,OAAO,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAOD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EACJ,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IAEpB,uDAAuD;IACvD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,qCAAqC;IACrC,oBAAoB,CAAC,EAAE;QACrB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACxC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACrC,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Extended Assessment Types
3
+ *
4
+ * Types for extended assessment modules including AUP compliance,
5
+ * tool annotations, temporal detection, and capability assessors.
6
+ *
7
+ * @module assessment/extendedTypes
8
+ */
9
+ export {};
@@ -0,0 +1,23 @@
1
+ /**
2
+ * Assessment Types - Barrel Export
3
+ *
4
+ * Re-exports all assessment types from focused modules.
5
+ * This provides backward compatibility for existing imports.
6
+ *
7
+ * @example
8
+ * // Existing imports continue to work:
9
+ * import { MCPDirectoryAssessment, AssessmentConfiguration } from "../../lib/assessment/index.js";
10
+ *
11
+ * // Or import from specific modules for better tree-shaking:
12
+ * import { MCPDirectoryAssessment } from "../../lib/assessment/resultTypes.js";
13
+ * import { AssessmentConfiguration } from "../../lib/assessment/configTypes.js";
14
+ *
15
+ * @module assessment
16
+ */
17
+ export * from "./coreTypes.js";
18
+ export * from "./configTypes.js";
19
+ export * from "./extendedTypes.js";
20
+ export * from "./progressTypes.js";
21
+ export * from "./resultTypes.js";
22
+ export * from "./constants.js";
23
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/assessment/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA0BH,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAG9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAGhC,cAAc,eAAe,CAAC;AAG9B,cAAc,aAAa,CAAC"}
@@ -0,0 +1,48 @@
1
+ /**
2
+ * Assessment Types - Barrel Export
3
+ *
4
+ * Re-exports all assessment types from focused modules.
5
+ * This provides backward compatibility for existing imports.
6
+ *
7
+ * @example
8
+ * // Existing imports continue to work:
9
+ * import { MCPDirectoryAssessment, AssessmentConfiguration } from "../../lib/assessment/index.js";
10
+ *
11
+ * // Or import from specific modules for better tree-shaking:
12
+ * import { MCPDirectoryAssessment } from "../../lib/assessment/resultTypes.js";
13
+ * import { AssessmentConfiguration } from "../../lib/assessment/configTypes.js";
14
+ *
15
+ * @module assessment
16
+ */
17
+ // ============================================================================
18
+ // Module Dependency Graph (acyclic, ordered by dependency tier)
19
+ // ============================================================================
20
+ //
21
+ // Tier 0 - No internal dependencies:
22
+ // coreTypes.ts - Foundational types (AssessmentStatus, enums, metadata)
23
+ // configTypes.ts - Configuration interfaces and presets
24
+ //
25
+ // Tier 1 - Depends on Tier 0 only:
26
+ // extendedTypes.ts - Extended assessment types (AUP, Annotations, etc.)
27
+ // progressTypes.ts - Progress event types for JSONL streaming
28
+ //
29
+ // Tier 2 - Depends on Tier 0 and Tier 1:
30
+ // resultTypes.ts - Core result interfaces (MCPDirectoryAssessment, etc.)
31
+ //
32
+ // Tier 3 - Depends on Tier 2:
33
+ // constants.ts - Constant values (PROMPT_INJECTION_TESTS)
34
+ //
35
+ // Note: coreTypes.ts re-exports PersistenceModel and ServerPersistenceContext
36
+ // from services/assessment/config/annotationPatterns for backward compatibility.
37
+ // This is a type-only cross-layer import that doesn't affect runtime behavior.
38
+ // ============================================================================
39
+ // Tier 0: Foundational types
40
+ export * from "./coreTypes.js";
41
+ export * from "./configTypes.js";
42
+ // Tier 1: Types depending on coreTypes
43
+ export * from "./extendedTypes.js";
44
+ export * from "./progressTypes.js";
45
+ // Tier 2: Result types depending on coreTypes and extendedTypes
46
+ export * from "./resultTypes.js";
47
+ // Tier 3: Constants depending on resultTypes
48
+ export * from "./constants.js";
@@ -0,0 +1,160 @@
1
+ /**
2
+ * Progress Event Types
3
+ *
4
+ * Types for real-time test progress tracking during assessment.
5
+ * Used by CLI to emit batched JSONL events.
6
+ *
7
+ * @module assessment/progressTypes
8
+ */
9
+ import type { AssessmentStatus, InferenceConfidence } from "./coreTypes.js";
10
+ /**
11
+ * Progress callback for assessment modules to report test execution progress.
12
+ * Used by CLI to emit batched JSONL events.
13
+ */
14
+ export interface ProgressCallback {
15
+ (event: ProgressEvent): void;
16
+ }
17
+ /**
18
+ * Union type for all progress events emitted during assessment.
19
+ */
20
+ export type ProgressEvent = ModuleStartedProgress | TestBatchProgress | ModuleCompleteProgress | VulnerabilityFoundProgress | AnnotationMissingProgress | AnnotationMisalignedProgress | AnnotationReviewRecommendedProgress | AnnotationPoisonedProgress | AnnotationAlignedProgress;
21
+ /**
22
+ * Emitted when an assessment module begins execution.
23
+ */
24
+ export interface ModuleStartedProgress {
25
+ type: "module_started";
26
+ module: string;
27
+ estimatedTests: number;
28
+ toolCount: number;
29
+ }
30
+ /**
31
+ * Emitted periodically during module execution with batched test results.
32
+ * Batching reduces event volume for large assessments.
33
+ */
34
+ export interface TestBatchProgress {
35
+ type: "test_batch";
36
+ module: string;
37
+ completed: number;
38
+ total: number;
39
+ batchSize: number;
40
+ elapsed: number;
41
+ }
42
+ /**
43
+ * Emitted when an assessment module completes with final stats.
44
+ */
45
+ export interface ModuleCompleteProgress {
46
+ type: "module_complete";
47
+ module: string;
48
+ status: AssessmentStatus;
49
+ score: number;
50
+ testsRun: number;
51
+ duration: number;
52
+ }
53
+ /**
54
+ * Emitted when a security vulnerability is detected during assessment.
55
+ * Provides real-time alerts for security findings.
56
+ */
57
+ export interface VulnerabilityFoundProgress {
58
+ type: "vulnerability_found";
59
+ tool: string;
60
+ pattern: string;
61
+ confidence: "high" | "medium" | "low";
62
+ evidence: string;
63
+ riskLevel: "HIGH" | "MEDIUM" | "LOW";
64
+ requiresReview: boolean;
65
+ payload?: string;
66
+ }
67
+ /**
68
+ * Tool parameter metadata for annotation events.
69
+ * Reusable type matching jsonl-events.ts ToolParam.
70
+ */
71
+ export interface ToolParamProgress {
72
+ name: string;
73
+ type: string;
74
+ required: boolean;
75
+ description?: string;
76
+ }
77
+ /**
78
+ * Emitted when a tool is missing required annotations.
79
+ * Provides real-time alerts during annotation assessment.
80
+ */
81
+ export interface AnnotationMissingProgress {
82
+ type: "annotation_missing";
83
+ tool: string;
84
+ title?: string;
85
+ description?: string;
86
+ parameters: ToolParamProgress[];
87
+ inferredBehavior: {
88
+ expectedReadOnly: boolean;
89
+ expectedDestructive: boolean;
90
+ reason: string;
91
+ };
92
+ }
93
+ /**
94
+ * Emitted when tool annotations don't match inferred behavior.
95
+ * Provides real-time alerts during annotation assessment.
96
+ */
97
+ export interface AnnotationMisalignedProgress {
98
+ type: "annotation_misaligned";
99
+ tool: string;
100
+ title?: string;
101
+ description?: string;
102
+ parameters: ToolParamProgress[];
103
+ field: "readOnlyHint" | "destructiveHint";
104
+ actual: boolean | undefined;
105
+ expected: boolean;
106
+ confidence: number;
107
+ reason: string;
108
+ }
109
+ /**
110
+ * Emitted when annotation alignment cannot be confidently determined.
111
+ * Used for ambiguous patterns like store_*, queue_*, cache_* where behavior
112
+ * varies by implementation context. Does not indicate a failure - just flags
113
+ * for human review.
114
+ */
115
+ export interface AnnotationReviewRecommendedProgress {
116
+ type: "annotation_review_recommended";
117
+ tool: string;
118
+ title?: string;
119
+ description?: string;
120
+ parameters: ToolParamProgress[];
121
+ field: "readOnlyHint" | "destructiveHint";
122
+ actual: boolean | undefined;
123
+ inferred: boolean;
124
+ confidence: InferenceConfidence;
125
+ isAmbiguous: boolean;
126
+ reason: string;
127
+ }
128
+ /**
129
+ * Emitted when tool description contains poisoning patterns (Issue #8).
130
+ * Indicates potential prompt injection or malicious instructions in tool metadata.
131
+ */
132
+ export interface AnnotationPoisonedProgress {
133
+ type: "annotation_poisoned";
134
+ tool: string;
135
+ description?: string;
136
+ patterns: Array<{
137
+ name: string;
138
+ pattern: string;
139
+ severity: "LOW" | "MEDIUM" | "HIGH";
140
+ category: string;
141
+ evidence: string;
142
+ }>;
143
+ riskLevel: "NONE" | "LOW" | "MEDIUM" | "HIGH";
144
+ }
145
+ /**
146
+ * Emitted when tool annotations correctly match inferred behavior.
147
+ * Provides real-time confirmation during annotation assessment.
148
+ */
149
+ export interface AnnotationAlignedProgress {
150
+ type: "annotation_aligned";
151
+ tool: string;
152
+ confidence: "high" | "medium" | "low";
153
+ annotations: {
154
+ readOnlyHint?: boolean;
155
+ destructiveHint?: boolean;
156
+ openWorldHint?: boolean;
157
+ idempotentHint?: boolean;
158
+ };
159
+ }
160
+ //# sourceMappingURL=progressTypes.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"progressTypes.d.ts","sourceRoot":"","sources":["../../../src/lib/assessment/progressTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEzE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,qBAAqB,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,0BAA0B,GAC1B,yBAAyB,GACzB,4BAA4B,GAC5B,mCAAmC,GACnC,0BAA0B,GAC1B,yBAAyB,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,gBAAgB,EAAE;QAChB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,uBAAuB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAAC;IAC1C,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,+BAA+B,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAAC;IAC1C,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,mBAAmB,CAAC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC/C;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,WAAW,EAAE;QACX,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;CACH"}