@bryan-thompson/inspector-assessment-client 1.26.5 → 1.26.7

package/lib/services/assessment/modules/ExternalAPIScannerAssessor.js

@@ -74,13 +74,13 @@ const SKIP_FILE_PATTERNS = [
 ];
 export class ExternalAPIScannerAssessor extends BaseAssessor {
     async assess(context) {
-        this.log("Starting external API scanner assessment");
+        this.logger.info("Starting external API scanner assessment");
         this.resetTestCount();
         const detectedAPIs = [];
         let scannedFiles = 0;
         // Check if source code analysis is enabled
         if (!context.sourceCodeFiles || !context.config.enableSourceCodeAnalysis) {
-            this.log("Source code analysis not enabled, skipping external API scan");
+            this.logger.info("Source code analysis not enabled, skipping external API scan");
             return this.createNoSourceResult();
         }
         // Scan each source file
@@ -100,7 +100,7 @@ export class ExternalAPIScannerAssessor extends BaseAssessor {
         const status = this.computeStatus(detectedAPIs, affiliationWarning);
         const explanation = this.generateExplanation(detectedAPIs, uniqueServices, affiliationWarning, scannedFiles);
         const recommendations = this.generateRecommendations(uniqueServices, affiliationWarning);
-        this.log(`External API scan complete: ${detectedAPIs.length} APIs found in ${scannedFiles} files`);
+        this.logger.info(`External API scan complete: ${detectedAPIs.length} APIs found in ${scannedFiles} files`);
         return {
             detectedAPIs,
             uniqueServices,

package/lib/services/assessment/modules/FunctionalityAssessor.js

@@ -23,23 +23,23 @@ export class FunctionalityAssessor extends BaseAssessor {
             const selectedTools = tools.filter((tool) => selectedNames.has(tool.name));
             // Empty array means user explicitly selected 0 tools
             if (this.config.selectedToolsForTesting.length === 0) {
-                this.log(`User selected 0 tools for functionality testing - skipping tests`);
+                this.logger.info(`User selected 0 tools for functionality testing - skipping tests`);
                 return [];
             }
             // If no tools matched the names (config out of sync), log warning but respect selection
             if (selectedTools.length === 0) {
-                this.log(`Warning: No tools matched selection (${this.config.selectedToolsForTesting.join(", ")})`);
+                this.logger.info(`Warning: No tools matched selection (${this.config.selectedToolsForTesting.join(", ")})`);
                 return [];
             }
-            this.log(`Testing ${selectedTools.length} selected tools out of ${tools.length} for functionality`);
+            this.logger.info(`Testing ${selectedTools.length} selected tools out of ${tools.length} for functionality`);
             return selectedTools;
         }
         // Default: test all tools
-        this.log(`Testing all ${tools.length} tools for functionality`);
+        this.logger.info(`Testing all ${tools.length} tools for functionality`);
         return tools;
     }
     async assess(context) {
-        this.log(`Starting functionality assessment${this.config.reviewerMode ? " (reviewer mode - quick verification)" : ""}`);
+        this.logger.info(`Starting functionality assessment${this.config.reviewerMode ? " (reviewer mode - quick verification)" : ""}`);
         const toolResults = [];
         const brokenTools = [];
         let workingTools = 0;
@@ -71,7 +71,7 @@ export class FunctionalityAssessor extends BaseAssessor {
             batchCount = 0;
             lastBatchTime = Date.now();
         };
-        this.log(`Testing ${toolsToTest.length} tools with concurrency limit of ${concurrency}`);
+        this.logger.info(`Testing ${toolsToTest.length} tools with concurrency limit of ${concurrency}`);
         const results = await Promise.all(toolsToTest.map((tool) => limit(async () => {
             this.testCount++;
             completedTests++;
@@ -103,7 +103,7 @@ export class FunctionalityAssessor extends BaseAssessor {
             else if (result.status === "broken") {
                 brokenTools.push(result.toolName);
                 if (this.config.skipBrokenTools) {
-                    this.log(`Skipping further tests for broken tool: ${result.toolName}`);
+                    this.logger.info(`Skipping further tests for broken tool: ${result.toolName}`);
                 }
             }
         }
@@ -141,7 +141,7 @@ export class FunctionalityAssessor extends BaseAssessor {
             const cleanedParams = schema
                 ? cleanParams(testParams, schema)
                 : testParams;
-            this.log(`Testing tool: ${tool.name} with params: ${JSON.stringify(cleanedParams)}`);
+            this.logger.info(`Testing tool: ${tool.name} with params: ${JSON.stringify(cleanedParams)}`);
             // Execute tool with timeout
             const response = await this.executeWithTimeout(callTool(tool.name, cleanedParams), this.config.testTimeout);
             const executionTime = Date.now() - startTime;
@@ -197,7 +197,7 @@ export class FunctionalityAssessor extends BaseAssessor {
             };
         }
         catch (error) {
-            this.logError(`Tool execution failed: ${tool.name}`, error);
+            this.logger.error(`Tool execution failed: ${tool.name}`, { error });
             return {
                 toolName: tool.name,
                 tested: true,

package/lib/services/assessment/modules/MCPSpecComplianceAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MCPSpecComplianceAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/MCPSpecComplianceAssessor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,2BAA2B,EAM3B,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,OAAO,CAAC,GAAG,CAAc;gBAEb,MAAM,EAAE,uBAAuB;IAa3C;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,2BAA2B,CAAC;IAyHvC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;OAGG;YACW,sBAAsB;IA6BpC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAyB/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;OAGG;YACW,mBAAmB;IAsCjC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAoDnC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IA0FnC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyFjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA4B9B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA2C7B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAoF5B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyBjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;CA0DtC"}
+{"version":3,"file":"MCPSpecComplianceAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/MCPSpecComplianceAssessor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,2BAA2B,EAM3B,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,OAAO,CAAC,GAAG,CAAc;gBAEb,MAAM,EAAE,uBAAuB;IAa3C;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,2BAA2B,CAAC;IAyHvC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA4B9B;;;OAGG;YACW,sBAAsB;IA6BpC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAyB/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;OAGG;YACW,mBAAmB;IAsCjC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAoDnC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IA8FnC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyFjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA4B9B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA2C7B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAoF5B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyBjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;CA0DtC"}

package/lib/services/assessment/modules/MCPSpecComplianceAssessor.js

@@ -90,7 +90,7 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
         const totalChecks = checksArray.length;
         const complianceScore = (passedCount / totalChecks) * 100;
         // Log score/check consistency for debugging
-        this.log(`MCP Compliance: ${passedCount}/${totalChecks} checks passed (${complianceScore.toFixed(1)}%)`);
+        this.logger.info(`MCP Compliance: ${passedCount}/${totalChecks} checks passed (${complianceScore.toFixed(1)}%)`);
         // Determine status based on protocol checks only
         let status;
         if (!protocolChecks.serverInfoValidity.passed) {
@@ -135,16 +135,16 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
         const metadata = context.serverInfo?.metadata;
         const protocolVersion = metadata?.protocolVersion;
         if (protocolVersion) {
-            this.log(`Using protocol version from metadata: ${protocolVersion}`);
+            this.logger.info(`Using protocol version from metadata: ${protocolVersion}`);
             return protocolVersion;
         }
         // Fall back to server version
         if (context.serverInfo?.version) {
-            this.log(`Using server version as protocol version: ${context.serverInfo.version}`);
+            this.logger.info(`Using server version as protocol version: ${context.serverInfo.version}`);
             return context.serverInfo.version;
         }
         // Default if no version information available
-        this.log("No protocol version information available, using default");
+        this.logger.info("No protocol version information available, using default");
         return "2025-06-18"; // Current MCP spec version as fallback
     }
     /**
@@ -183,14 +183,14 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
         // Check if name is properly set (should be a string, not null/undefined)
         if (serverInfo.name !== undefined && serverInfo.name !== null) {
             if (typeof serverInfo.name !== "string") {
-                this.log("Server info name is not a string");
+                this.logger.info("Server info name is not a string");
                 return false;
             }
         }
         // Check if metadata is properly formatted (should be an object if present)
         if (serverInfo.metadata !== undefined && serverInfo.metadata !== null) {
             if (typeof serverInfo.metadata !== "object") {
-                this.log("Server info metadata is not an object");
+                this.logger.info("Server info metadata is not an object");
                 return false;
             }
         }
@@ -297,7 +297,7 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
         const totalTools = tools.length;
         const coveragePercent = totalTools > 0 ? Math.round((withOutputSchema / totalTools) * 100) : 0;
         // Log for debugging
-        this.log(`Structured output support: ${withOutputSchema}/${totalTools} tools (${coveragePercent}%)`);
+        this.logger.info(`Structured output support: ${withOutputSchema}/${totalTools} tools (${coveragePercent}%)`);
         const coverage = {
             totalTools,
             withOutputSchema,
@@ -344,11 +344,11 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
             }
             // Check listChanged notification support
             if (capabilities.resources.listChanged) {
-                this.log("Server declares resources.listChanged notification support");
+                this.logger.info("Server declares resources.listChanged notification support");
             }
             // Check subscribe support
             if (capabilities.resources.subscribe) {
-                this.log("Server declares resource subscription support");
+                this.logger.info("Server declares resource subscription support");
             }
             this.testCount++;
         }
@@ -362,13 +362,13 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
             }
             // Check listChanged notification support
             if (capabilities.prompts.listChanged) {
-                this.log("Server declares prompts.listChanged notification support");
+                this.logger.info("Server declares prompts.listChanged notification support");
             }
             this.testCount++;
         }
         // Check logging capability
         if (capabilities.logging) {
-            this.log("Server declares logging capability");
+            this.logger.info("Server declares logging capability");
             this.testCount++;
         }
         // Determine pass/fail
@@ -433,7 +433,7 @@ export class MCPSpecComplianceAssessor extends BaseAssessor {
             (transport === "http" || transport === "streamable-http")) {
             // For HTTP transport on 2025-06-18+, headers are required
             // We assume compliance if using the new protocol version
-            this.log(`HTTP transport detected with protocol ${protocolVersion} - header compliance assumed`);
+            this.logger.info(`HTTP transport detected with protocol ${protocolVersion} - header compliance assumed`);
         }
         // Determine confidence based on detection method
         const confidence = hasTransportMetadata ? "medium" : "low";

package/lib/services/assessment/modules/ManifestValidationAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ManifestValidationAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ManifestValidationAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAK7B,MAAM,uBAAuB,CAAC;AAM/B,qBAAa,0BAA2B,SAAQ,YAAY;IAC1D;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IA6JxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+CzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAqCpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA+B1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;YACW,yBAAyB;IAoFvC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0C3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA+ChC"}
+{"version":3,"file":"ManifestValidationAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ManifestValidationAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAK7B,MAAM,uBAAuB,CAAC;AAM/B,qBAAa,0BAA2B,SAAQ,YAAY;IAC1D;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IA6JxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+CzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAqCpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA+B1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;YACW,yBAAyB;IAqFvC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0C3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA+ChC"}

package/lib/services/assessment/modules/ManifestValidationAssessor.js

@@ -19,7 +19,7 @@ export class ManifestValidationAssessor extends BaseAssessor {
      * Run manifest validation assessment
      */
     async assess(context) {
-        this.log("Starting manifest validation assessment");
+        this.logger.info("Starting manifest validation assessment");
         this.testCount = 0;
         // Check if manifest is available
         if (!context.manifestJson && !context.manifestRaw) {
@@ -91,7 +91,7 @@ export class ManifestValidationAssessor extends BaseAssessor {
         if (manifest.privacy_policies &&
             Array.isArray(manifest.privacy_policies) &&
             manifest.privacy_policies.length > 0) {
-            this.log(`Validating ${manifest.privacy_policies.length} privacy policy URL(s)`);
+            this.logger.info(`Validating ${manifest.privacy_policies.length} privacy policy URL(s)`);
             const policyResults = await this.validatePrivacyPolicyUrls(manifest.privacy_policies);
             privacyPolicies = {
                 declared: manifest.privacy_policies,
@@ -121,7 +121,7 @@ export class ManifestValidationAssessor extends BaseAssessor {
         const status = this.determineManifestStatus(validationResults, hasRequiredFields);
         const explanation = this.generateExplanation(validationResults, hasRequiredFields, hasIcon, privacyPolicies);
         const recommendations = this.generateRecommendations(validationResults, privacyPolicies);
-        this.log(`Assessment complete: ${validationResults.filter((r) => r.valid).length}/${validationResults.length} checks passed`);
+        this.logger.info(`Assessment complete: ${validationResults.filter((r) => r.valid).length}/${validationResults.length} checks passed`);
         return {
             hasManifest: true,
             manifestVersion: manifest.manifest_version,
@@ -413,7 +413,9 @@ export class ManifestValidationAssessor extends BaseAssessor {
                 new URL(url);
             }
             catch (error) {
-                this.logError(`Invalid privacy policy URL format: ${url}`, error);
+                this.logger.error(`Invalid privacy policy URL format: ${url}`, {
+                    error,
+                });
                 results.push({
                     url,
                     accessible: false,
@@ -460,7 +462,9 @@ export class ManifestValidationAssessor extends BaseAssessor {
                     });
                 }
                 catch (fetchError) {
-                    this.logError(`Failed to fetch privacy policy URL: ${url}`, fetchError);
+                    this.logger.error(`Failed to fetch privacy policy URL: ${url}`, {
+                        error: fetchError,
+                    });
                     results.push({
                         url,
                         accessible: false,

package/lib/services/assessment/modules/PortabilityAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PortabilityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/PortabilityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,qBAAqB,EAGtB,MAAM,uBAAuB,CAAC;AA8H/B,qBAAa,mBAAoB,SAAQ,YAAY;IACnD;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAuHxE;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAiD5B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAuE/B;;OAEG;IACH,OAAO,CAAC,QAAQ;IAiIhB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkBtB;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAmClC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAqC3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAmDhC"}
+{"version":3,"file":"PortabilityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/PortabilityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,qBAAqB,EAGtB,MAAM,uBAAuB,CAAC;AA8H/B,qBAAa,mBAAoB,SAAQ,YAAY;IACnD;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAyHxE;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAiD5B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAuE/B;;OAEG;IACH,OAAO,CAAC,QAAQ;IAiIhB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkBtB;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAmClC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAqC3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAmDhC"}

package/lib/services/assessment/modules/PortabilityAssessor.js

@@ -124,7 +124,7 @@ export class PortabilityAssessor extends BaseAssessor {
      * Run portability assessment
      */
     async assess(context) {
-        this.log("Starting portability assessment");
+        this.logger.info("Starting portability assessment");
         this.testCount = 0;
         const issues = [];
         let scannedFiles = 0;
@@ -159,7 +159,7 @@ export class PortabilityAssessor extends BaseAssessor {
         }
         // Check source code files if available
         if (context.sourceCodeFiles && context.config.enableSourceCodeAnalysis) {
-            this.log("Scanning source code files for portability issues...");
+            this.logger.info("Scanning source code files for portability issues...");
             for (const [filePath, content] of context.sourceCodeFiles) {
                 // Skip irrelevant files
                 if (this.shouldSkipFile(filePath))
@@ -185,7 +185,7 @@ export class PortabilityAssessor extends BaseAssessor {
         const status = this.determinePortabilityStatus(issues, usesDirname, usesBundleRoot);
         const explanation = this.generateExplanation(issues, usesDirname, usesBundleRoot, scannedFiles);
         const recommendations = this.generateRecommendations(issues, usesDirname, usesBundleRoot);
-        this.log(`Assessment complete: ${issues.length} portability issues found`);
+        this.logger.info(`Assessment complete: ${issues.length} portability issues found`);
         // NEW: Analyze shell commands and platform coverage (Issue #9)
         const shellCommands = this.analyzeShellCommands(context);
         const platformCoverage = this.analyzePlatformCoverage(issues);

package/lib/services/assessment/modules/ProhibitedLibrariesAssessor.js

@@ -16,7 +16,7 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
      * Run prohibited libraries assessment
      */
     async assess(context) {
-        this.log("Starting prohibited libraries assessment");
+        this.logger.info("Starting prohibited libraries assessment");
         this.testCount = 0;
         const matches = [];
         const scannedFiles = [];
@@ -24,7 +24,7 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
         let hasMediaLibraries = false;
         // Check package.json dependencies
         if (context.packageJson) {
-            this.log("Scanning package.json dependencies...");
+            this.logger.info("Scanning package.json dependencies...");
             this.testCount++;
             scannedFiles.push("package.json");
             const packageJson = context.packageJson;
@@ -64,7 +64,7 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
         }
         // Check source code files if available
         if (context.sourceCodeFiles && context.config.enableSourceCodeAnalysis) {
-            this.log("Scanning source code files...");
+            this.logger.info("Scanning source code files...");
             for (const [filePath, content] of context.sourceCodeFiles) {
                 // Check Python requirements files
                 if (filePath.endsWith("requirements.txt") ||
@@ -126,7 +126,7 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
         const status = this.calculateStatusFromMatches(uniqueMatches);
         const explanation = this.generateExplanation(uniqueMatches, hasFinancialLibraries, hasMediaLibraries, scannedFiles);
         const recommendations = this.generateRecommendations(uniqueMatches);
-        this.log(`Assessment complete: ${uniqueMatches.length} prohibited libraries found`);
+        this.logger.info(`Assessment complete: ${uniqueMatches.length} prohibited libraries found`);
         return {
             matches: uniqueMatches,
             scannedFiles,

package/lib/services/assessment/modules/PromptAssessor.js

@@ -67,7 +67,7 @@ export class PromptAssessor extends BaseAssessor {
         if (!context.prompts || context.prompts.length === 0) {
             return this.createNoPromptsResponse();
         }
-        this.log(`Testing ${context.prompts.length} prompts`);
+        this.logger.info(`Testing ${context.prompts.length} prompts`);
         // Test each prompt
         for (const prompt of context.prompts) {
             this.testCount++;
@@ -216,7 +216,7 @@ export class PromptAssessor extends BaseAssessor {
             return { success: true, unsafeContent, executionTime };
         }
         catch (error) {
-            this.logError(`Prompt execution failed: ${prompt.name}`, error);
+            this.logger.error(`Prompt execution failed: ${prompt.name}`, { error });
             return {
                 success: false,
                 unsafeContent: false,

package/lib/services/assessment/modules/ProtocolComplianceAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProtocolComplianceAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ProtocolComplianceAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,2BAA2B,EAM3B,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAmB9D;;;GAGG;AACH,MAAM,WAAW,4BAA6B,SAAQ,2BAA2B;IAC/E,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE;QAClB,mBAAmB,EAAE,aAAa,CAAC;QACnC,kBAAkB,EAAE,aAAa,CAAC;QAClC,uBAAuB,EAAE,aAAa,CAAC;KACxC,CAAC;CACH;AAED,qBAAa,0BAA2B,SAAQ,YAAY,CAAC,4BAA4B,CAAC;IACxF,OAAO,CAAC,GAAG,CAAc;gBAEb,MAAM,EAAE,uBAAuB;IAK3C;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IAyIxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;OAEG;YACW,sBAAsB;IAuBpC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAwC7B;;OAEG;YACW,mBAAmB;IAiCjC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAiDnC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;OAEG;YACW,wBAAwB;IA4GtC;;OAEG;YACW,uBAAuB;IA2FrC;;OAEG;YACW,4BAA4B;IAoD1C,OAAO,CAAC,yBAAyB;IAkEjC,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,sBAAsB;IA0B9B,OAAO,CAAC,qBAAqB;IAgC7B,OAAO,CAAC,oBAAoB;IA8E5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoC3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAqEhC"}
+{"version":3,"file":"ProtocolComplianceAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ProtocolComplianceAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,2BAA2B,EAM3B,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAmB9D;;;GAGG;AACH,MAAM,WAAW,4BAA6B,SAAQ,2BAA2B;IAC/E,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE;QAClB,mBAAmB,EAAE,aAAa,CAAC;QACnC,kBAAkB,EAAE,aAAa,CAAC;QAClC,uBAAuB,EAAE,aAAa,CAAC;KACxC,CAAC;CACH;AAED,qBAAa,0BAA2B,SAAQ,YAAY,CAAC,4BAA4B,CAAC;IACxF,OAAO,CAAC,GAAG,CAAc;gBAEb,MAAM,EAAE,uBAAuB;IAK3C;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IAyIxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;OAEG;YACW,sBAAsB;IAuBpC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAwC7B;;OAEG;YACW,mBAAmB;IAiCjC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAiDnC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;OAEG;YACW,wBAAwB;IA4GtC;;OAEG;YACW,uBAAuB;IA2FrC;;OAEG;YACW,4BAA4B;IAoD1C,OAAO,CAAC,yBAAyB;IAkEjC,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,sBAAsB;IA0B9B,OAAO,CAAC,qBAAqB;IAgC7B,OAAO,CAAC,oBAAoB;IA8E5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoC3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAqEhC"}

package/lib/services/assessment/modules/ProtocolComplianceAssessor.js

@@ -126,7 +126,7 @@ export class ProtocolComplianceAssessor extends BaseAssessor {
         // Track test count
         this.testCount = totalChecks;
         // Log score/check consistency for debugging
-        this.log(`Protocol Compliance: ${passedCount}/${totalChecks} checks passed (${complianceScore.toFixed(1)}%)`);
+        this.logger.info(`Protocol Compliance: ${passedCount}/${totalChecks} checks passed (${complianceScore.toFixed(1)}%)`);
         // Determine status based on protocol checks only
         let status;
         if (!protocolChecks.serverInfoValidity.passed) {
@@ -171,14 +171,14 @@ export class ProtocolComplianceAssessor extends BaseAssessor {
         const metadata = context.serverInfo?.metadata;
         const protocolVersion = metadata?.protocolVersion;
         if (protocolVersion) {
-            this.log(`Using protocol version from metadata: ${protocolVersion}`);
+            this.logger.info(`Using protocol version from metadata: ${protocolVersion}`);
             return protocolVersion;
         }
         if (context.serverInfo?.version) {
-            this.log(`Using server version as protocol version: ${context.serverInfo.version}`);
+            this.logger.info(`Using server version as protocol version: ${context.serverInfo.version}`);
             return context.serverInfo.version;
         }
-        this.log("No protocol version information available, using default");
+        this.logger.info("No protocol version information available, using default");
         return "2025-06-18";
     }
     /**
@@ -208,13 +208,13 @@ export class ProtocolComplianceAssessor extends BaseAssessor {
         }
         if (serverInfo.name !== undefined && serverInfo.name !== null) {
             if (typeof serverInfo.name !== "string") {
-                this.log("Server info name is not a string");
+                this.logger.info("Server info name is not a string");
                 return false;
             }
         }
         if (serverInfo.metadata !== undefined && serverInfo.metadata !== null) {
             if (typeof serverInfo.metadata !== "object") {
-                this.log("Server info metadata is not an object");
+                this.logger.info("Server info metadata is not an object");
                 return false;
             }
         }
@@ -310,7 +310,7 @@ export class ProtocolComplianceAssessor extends BaseAssessor {
         }
         const totalTools = tools.length;
         const coveragePercent = totalTools > 0 ? Math.round((withOutputSchema / totalTools) * 100) : 0;
-        this.log(`Structured output support: ${withOutputSchema}/${totalTools} tools (${coveragePercent}%)`);
+        this.logger.info(`Structured output support: ${withOutputSchema}/${totalTools} tools (${coveragePercent}%)`);
         const coverage = {
             totalTools,
             withOutputSchema,

package/lib/services/assessment/modules/ProtocolConformanceAssessor.js

@@ -268,7 +268,7 @@ export class ProtocolConformanceAssessor extends BaseAssessor {
             };
         }
         catch (error) {
-            this.logError("Content type validation failed", error);
+            this.logger.error("Content type validation failed", { error });
             return {
                 passed: false,
                 confidence: "medium",

package/lib/services/assessment/modules/ResourceAssessor.js

@@ -211,7 +211,7 @@ export class ResourceAssessor extends BaseAssessor {
         }
         const resources = context.resources || [];
         const templates = context.resourceTemplates || [];
-        this.log(`Testing ${resources.length} resources and ${templates.length} resource templates`);
+        this.logger.info(`Testing ${resources.length} resources and ${templates.length} resource templates`);
         // Test each resource
         for (const resource of resources) {
             this.testCount++;

package/lib/services/assessment/modules/SecurityAssessor.d.ts

@@ -1,11 +1,11 @@
 /**
  * Security Assessor Module
- * Tests for backend API security vulnerabilities using 23 focused patterns
+ * Tests for backend API security vulnerabilities using 26 focused patterns
  *
  * BASIC MODE (5 patterns - enableDomainTesting=false):
  *   Command Injection, Calculator Injection, SQL Injection, Path Traversal, Unicode Bypass
  *
- * ADVANCED MODE (all 23 patterns - enableDomainTesting=true):
+ * ADVANCED MODE (all 26 patterns - enableDomainTesting=true):
  *   - Critical Injection (6): Command, Calculator, SQL, Path Traversal, XXE, NoSQL
  *   - Input Validation (3): Type Safety, Boundary Testing, Required Fields
  *   - Protocol Compliance (2): MCP Error Format, Timeout Handling
@@ -14,6 +14,13 @@
  *   - Encoding Bypass (1): Unicode Bypass
  *   - Resource Exhaustion (1): DoS/Resource Exhaustion
  *   - Deserialization (1): Insecure Deserialization
+ *   - Auth Bypass (1): Fail-open authentication vulnerabilities (CVE-2025-52882)
+ *   - Cross-Tool State Bypass (1): Privilege escalation via shared state (Issue #92)
+ *   - Chained Exploitation (1): Multi-tool chain execution attacks (Issue #93)
+ *
+ * SEQUENCE TESTING (enableSequenceTesting - default true):
+ *   Tests for cross-tool privilege escalation by calling tool sequences
+ *   Tests for multi-tool chain exploitation attacks
  */
 import { SecurityAssessment } from "../../../lib/assessmentTypes.js";
 import { BaseAssessor } from "./BaseAssessor.js";
@@ -22,6 +29,8 @@ import { ClaudeCodeBridge } from "../lib/claudeCodeBridge.js";
 export declare class SecurityAssessor extends BaseAssessor {
     private payloadTester;
     private payloadGenerator;
+    private crossToolStateTester;
+    private chainTester;
     private claudeBridge;
     /**
      * Set the ClaudeCodeBridge for semantic analysis of security test results
@@ -47,6 +56,20 @@ export declare class SecurityAssessor extends BaseAssessor {
      * Perform additional security checks
      */
     private performAdditionalSecurityChecks;
+    /**
+     * Run cross-tool sequence tests for privilege escalation (Issue #92, Challenge #7)
+     * Tests tool pairs: modifier enables admin mode, then admin action succeeds
+     */
+    private runCrossToolSequenceTests;
+    /**
+     * Run chain exploitation tests (Issue #93, Challenge #6)
+     * Tests for multi-tool chain exploitation attacks including:
+     * - Arbitrary tool invocation without allowlist
+     * - Output injection via {{output}} template
+     * - Recursive chain execution (DoS potential)
+     * - State poisoning between chain steps
+     */
+    private runChainExploitationTests;
     /**
      * Determine overall risk level
      */

package/lib/services/assessment/modules/SecurityAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/SecurityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAS9D,OAAO,EACL,gBAAgB,EAGjB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,YAAY,CAAiC;IAErD;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAStD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;YACW,0BAA0B;gBAwBtC,MAAM,EAAE,OAAO,8BAA8B,EAAE,uBAAuB;IA8BlE,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA8JrE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAkC7B;;OAEG;YACW,+BAA+B;IAiC7C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;CAgDnC"}
+{"version":3,"file":"SecurityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/SecurityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAa9D,OAAO,EACL,gBAAgB,EAGjB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAiC;IAErD;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAStD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;YACW,0BAA0B;gBAwBtC,MAAM,EAAE,OAAO,8BAA8B,EAAE,uBAAuB;IAwClE,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsMrE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;YACW,+BAA+B;IAiC7C;;;OAGG;YACW,yBAAyB;IA0CvC;;;;;;;OAOG;YACW,yBAAyB;IAmFvC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;CAgDnC"}