@bryan-thompson/inspector-assessment-client 1.29.0 → 1.30.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/assets/{OAuthCallback-9Gbb39Ii.js → OAuthCallback-BbE88qbF.js} +1 -1
- package/dist/assets/{OAuthDebugCallback-B76J2MBn.js → OAuthDebugCallback-CfRYq1JG.js} +1 -1
- package/dist/assets/{index-CHTOR9VI.js → index-CsUB73MT.js} +4 -4
- package/dist/index.html +1 -1
- package/lib/lib/assessment/configTypes.d.ts +38 -0
- package/lib/lib/assessment/configTypes.d.ts.map +1 -1
- package/lib/lib/assessment/configTypes.js +30 -7
- package/lib/lib/assessment/coreTypes.d.ts +14 -0
- package/lib/lib/assessment/coreTypes.d.ts.map +1 -1
- package/lib/lib/assessment/coreTypes.js +3 -0
- package/lib/lib/assessment/index.d.ts +1 -0
- package/lib/lib/assessment/index.d.ts.map +1 -1
- package/lib/lib/assessment/index.js +1 -0
- package/lib/lib/assessment/progressTypes.d.ts +13 -0
- package/lib/lib/assessment/progressTypes.d.ts.map +1 -1
- package/lib/lib/assessment/progressTypes.js +1 -0
- package/lib/lib/assessment/resultTypes.d.ts +8 -0
- package/lib/lib/assessment/resultTypes.d.ts.map +1 -1
- package/lib/lib/moduleScoring.d.ts +11 -0
- package/lib/lib/moduleScoring.d.ts.map +1 -1
- package/lib/lib/moduleScoring.js +11 -0
- package/lib/lib/securityPatterns.d.ts +3 -2
- package/lib/lib/securityPatterns.d.ts.map +1 -1
- package/lib/lib/securityPatterns.js +150 -2
- package/lib/services/assessment/AssessmentOrchestrator.d.ts +31 -0
- package/lib/services/assessment/AssessmentOrchestrator.d.ts.map +1 -1
- package/lib/services/assessment/AssessmentOrchestrator.js +23 -0
- package/lib/services/assessment/ResponseValidator.d.ts +3 -0
- package/lib/services/assessment/ResponseValidator.d.ts.map +1 -1
- package/lib/services/assessment/ResponseValidator.js +3 -0
- package/lib/services/assessment/TestDataGenerator.d.ts +3 -0
- package/lib/services/assessment/TestDataGenerator.d.ts.map +1 -1
- package/lib/services/assessment/TestDataGenerator.js +3 -0
- package/lib/services/assessment/TestScenarioEngine.d.ts +3 -0
- package/lib/services/assessment/TestScenarioEngine.d.ts.map +1 -1
- package/lib/services/assessment/TestScenarioEngine.js +3 -0
- package/lib/services/assessment/config/performanceConfig.d.ts +8 -0
- package/lib/services/assessment/config/performanceConfig.d.ts.map +1 -1
- package/lib/services/assessment/config/performanceConfig.js +7 -0
- package/lib/services/assessment/lib/claudeCodeBridge.d.ts +3 -0
- package/lib/services/assessment/lib/claudeCodeBridge.d.ts.map +1 -1
- package/lib/services/assessment/lib/claudeCodeBridge.js +3 -0
- package/lib/services/assessment/lib/errors.d.ts +3 -0
- package/lib/services/assessment/lib/errors.d.ts.map +1 -1
- package/lib/services/assessment/lib/errors.js +3 -0
- package/lib/services/assessment/lib/timeoutUtils.d.ts +3 -0
- package/lib/services/assessment/lib/timeoutUtils.d.ts.map +1 -1
- package/lib/services/assessment/lib/timeoutUtils.js +3 -0
- package/lib/services/assessment/modules/annotations/index.d.ts +6 -1
- package/lib/services/assessment/modules/annotations/index.d.ts.map +1 -1
- package/lib/services/assessment/modules/annotations/index.js +6 -1
- package/lib/services/assessment/modules/index.d.ts +5 -0
- package/lib/services/assessment/modules/index.d.ts.map +1 -1
- package/lib/services/assessment/modules/index.js +5 -0
- package/lib/services/assessment/modules/securityTests/SecurityPayloadGenerator.d.ts.map +1 -1
- package/lib/services/assessment/modules/securityTests/SecurityPayloadGenerator.js +86 -0
- package/lib/services/assessment/modules/securityTests/SecurityPayloadTester.d.ts.map +1 -1
- package/lib/services/assessment/modules/securityTests/SecurityPayloadTester.js +26 -0
- package/lib/services/assessment/modules/securityTests/SecurityResponseAnalyzer.d.ts +58 -0
- package/lib/services/assessment/modules/securityTests/SecurityResponseAnalyzer.d.ts.map +1 -1
- package/lib/services/assessment/modules/securityTests/SecurityResponseAnalyzer.js +402 -1
- package/lib/services/assessment/modules/securityTests/index.d.ts +6 -1
- package/lib/services/assessment/modules/securityTests/index.d.ts.map +1 -1
- package/lib/services/assessment/modules/securityTests/index.js +6 -1
- package/lib/services/assessment/orchestratorHelpers.d.ts +3 -0
- package/lib/services/assessment/orchestratorHelpers.d.ts.map +1 -1
- package/lib/services/assessment/orchestratorHelpers.js +8 -3
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claudeCodeBridge.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/claudeCodeBridge.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"claudeCodeBridge.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/claudeCodeBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,QAAQ,EAAE;QACR,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,WAAW,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,OAAO,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,CAAC;IACtB,eAAe,EAAE,OAAO,GAAG,iBAAiB,GAAG,OAAO,CAAC;IACvD,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE;QACpB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;KAClE,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,WAAW,CAAC;CACtE;AAED;;GAEG;AACH,eAAO,MAAM,0BAA0B,EAAE,sBAaxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,sBAarC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,sBAiBrC,CAAC;AAEF;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,MAAM,CAAC,CAAS;gBAEZ,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,MAAM;IAgB3D;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,sBAAsB,CAAC,UAAU,CAAC,GAAG,OAAO;IAgB5E;;OAEG;IACH,YAAY,IAAI,KAAK,GAAG,MAAM;IAI9B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAwBzC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IA8B5B;;;OAGG;YACW,kBAAkB;IA+EhC;;OAEG;YACW,gBAAgB;IA4B9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;;;OAIG;IACG,mBAAmB,CACvB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;IA2C5C;;OAEG;IACG,iBAAiB,CACrB,IAAI,EAAE,IAAI,EACV,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,GACA,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAgD1C;;OAEG;IACG,qBAAqB,CACzB,IAAI,EAAE,IAAI,EACV,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAuCvC;;;OAGG;IACG,sBAAsB,CAC1B,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAqC5C;;OAEG;IACG,mBAAmB,CACvB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QACT,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,GAAG,IAAI,CAAC;IA2CT;;;;;;OAMG;IACG,uBAAuB,CAC3B,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;CA0DlD"}
|
|
@@ -9,6 +9,9 @@
|
|
|
9
9
|
* - Semantic AUP violation analysis
|
|
10
10
|
* - Tool behavior inference for annotation validation
|
|
11
11
|
* - Documentation quality assessment
|
|
12
|
+
*
|
|
13
|
+
* @internal
|
|
14
|
+
* @module assessment/lib/claudeCodeBridge
|
|
12
15
|
*/
|
|
13
16
|
import { execFileSync, execSync } from "child_process";
|
|
14
17
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/errors.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,oBAAY,aAAa;IACvB,qEAAqE;IACrE,UAAU,eAAe;IACzB,sDAAsD;IACtD,QAAQ,aAAa;IACrB,qEAAqE;IACrE,UAAU,eAAe;IACzB,oCAAoC;IACpC,OAAO,YAAY;IACnB,oCAAoC;IACpC,KAAK,UAAU;IACf,0BAA0B;IAC1B,OAAO,YAAY;CACpB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,IAAI,EAAE,aAAa;aACnB,WAAW,EAAE,OAAO;aACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,aAAa,EACnB,WAAW,GAAE,OAAc,EAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAUnD;;OAEG;IACH,MAAM,IAAI,SAAS;CASpB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,IAAI,EAAE,aAAa,CAAC;IACpB,2CAA2C;IAC3C,WAAW,EAAE,OAAO,CAAC;IACrB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAsC7D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAwB1D"}
|
|
@@ -8,6 +8,9 @@
|
|
|
8
8
|
* 1. Clears setTimeout when operation completes (prevents timer leaks)
|
|
9
9
|
* 2. Uses AbortController for signal-based cancellation
|
|
10
10
|
* 3. Provides consistent error messages
|
|
11
|
+
*
|
|
12
|
+
* @internal
|
|
13
|
+
* @module assessment/lib/timeoutUtils
|
|
11
14
|
*/
|
|
12
15
|
export interface TimeoutOptions {
|
|
13
16
|
/** Timeout in milliseconds */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"timeoutUtils.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/timeoutUtils.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"timeoutUtils.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/lib/timeoutUtils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,CAAC,CAAC,CA2BZ;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,CAAC,CAAC,EACjD,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACvC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,CAAC,CAAC,CAqBZ"}
|
|
@@ -8,6 +8,9 @@
|
|
|
8
8
|
* 1. Clears setTimeout when operation completes (prevents timer leaks)
|
|
9
9
|
* 2. Uses AbortController for signal-based cancellation
|
|
10
10
|
* 3. Provides consistent error messages
|
|
11
|
+
*
|
|
12
|
+
* @internal
|
|
13
|
+
* @module assessment/lib/timeoutUtils
|
|
11
14
|
*/
|
|
12
15
|
/**
|
|
13
16
|
* Execute a promise with timeout and proper cleanup.
|
|
@@ -1,8 +1,13 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Annotations Assessment Module
|
|
3
|
-
*
|
|
3
|
+
*
|
|
4
|
+
* Exports all annotation-related components for analyzing MCP tool annotations.
|
|
5
|
+
* Includes behavior inference, architecture detection, and description analysis.
|
|
4
6
|
*
|
|
5
7
|
* Enhanced in Issue #57 with architecture detection and multi-signal behavior inference.
|
|
8
|
+
*
|
|
9
|
+
* @public
|
|
10
|
+
* @module assessment/annotations
|
|
6
11
|
*/
|
|
7
12
|
export { DESCRIPTION_POISONING_PATTERNS, scanDescriptionForPoisoning, type PoisoningPattern, type PoisoningScanResult, } from "./DescriptionPoisoningDetector.js";
|
|
8
13
|
export { READONLY_CONTRADICTION_KEYWORDS, RUN_READONLY_EXEMPT_SUFFIXES, DESTRUCTIVE_CONTRADICTION_KEYWORDS, containsKeyword, isRunKeywordExempt, isActionableConfidence, detectAnnotationDeception, type DeceptionResult, } from "./AnnotationDeceptionDetector.js";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/index.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,EAClC,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,IAAI,IAAI,gBAAgB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGzE,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC"}
|
|
@@ -1,8 +1,13 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Annotations Assessment Module
|
|
3
|
-
*
|
|
3
|
+
*
|
|
4
|
+
* Exports all annotation-related components for analyzing MCP tool annotations.
|
|
5
|
+
* Includes behavior inference, architecture detection, and description analysis.
|
|
4
6
|
*
|
|
5
7
|
* Enhanced in Issue #57 with architecture detection and multi-signal behavior inference.
|
|
8
|
+
*
|
|
9
|
+
* @public
|
|
10
|
+
* @module assessment/annotations
|
|
6
11
|
*/
|
|
7
12
|
export { DESCRIPTION_POISONING_PATTERNS, scanDescriptionForPoisoning, } from "./DescriptionPoisoningDetector.js";
|
|
8
13
|
export { READONLY_CONTRADICTION_KEYWORDS, RUN_READONLY_EXEMPT_SUFFIXES, DESTRUCTIVE_CONTRADICTION_KEYWORDS, containsKeyword, isRunKeywordExempt, isActionableConfidence, detectAnnotationDeception, } from "./AnnotationDeceptionDetector.js";
|
|
@@ -37,6 +37,7 @@
|
|
|
37
37
|
* - MCPSpecComplianceAssessor → use ProtocolComplianceAssessor
|
|
38
38
|
* - ProtocolConformanceAssessor → use ProtocolComplianceAssessor
|
|
39
39
|
*
|
|
40
|
+
* @public
|
|
40
41
|
* @module assessment/modules
|
|
41
42
|
*/
|
|
42
43
|
export { BaseAssessor } from "./BaseAssessor.js";
|
|
@@ -67,24 +68,28 @@ export * from "./securityTests/index.js";
|
|
|
67
68
|
*/
|
|
68
69
|
export * from "./annotations/index.js";
|
|
69
70
|
/**
|
|
71
|
+
* @public
|
|
70
72
|
* @deprecated Use DeveloperExperienceAssessor instead.
|
|
71
73
|
* DocumentationAssessor has been merged into DeveloperExperienceAssessor.
|
|
72
74
|
* This export will be removed in v2.0.0.
|
|
73
75
|
*/
|
|
74
76
|
export { DocumentationAssessor } from "./DocumentationAssessor.js";
|
|
75
77
|
/**
|
|
78
|
+
* @public
|
|
76
79
|
* @deprecated Use DeveloperExperienceAssessor instead.
|
|
77
80
|
* UsabilityAssessor has been merged into DeveloperExperienceAssessor.
|
|
78
81
|
* This export will be removed in v2.0.0.
|
|
79
82
|
*/
|
|
80
83
|
export { UsabilityAssessor } from "./UsabilityAssessor.js";
|
|
81
84
|
/**
|
|
85
|
+
* @public
|
|
82
86
|
* @deprecated Use ProtocolComplianceAssessor instead.
|
|
83
87
|
* MCPSpecComplianceAssessor has been merged into ProtocolComplianceAssessor.
|
|
84
88
|
* This export will be removed in v2.0.0.
|
|
85
89
|
*/
|
|
86
90
|
export { MCPSpecComplianceAssessor } from "./MCPSpecComplianceAssessor.js";
|
|
87
91
|
/**
|
|
92
|
+
* @public
|
|
88
93
|
* @deprecated Use ProtocolComplianceAssessor instead.
|
|
89
94
|
* ProtocolConformanceAssessor has been merged into ProtocolComplianceAssessor.
|
|
90
95
|
* This export will be removed in v2.0.0.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/index.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAM9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAMhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAMlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAMpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAM1E;;;GAGG;AACH,cAAc,iBAAiB,CAAC;AAEhC;;;GAGG;AACH,cAAc,eAAe,CAAC;AAM9B;;;;;GAKG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;;;GAKG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE;;;;;GAKG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAM5E,YAAY,EAEV,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,EAE3B,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAEV,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AAEtC,YAAY,EAEV,gBAAgB,EAChB,aAAa,GACd,MAAM,gCAAgC,CAAC"}
|
|
@@ -37,6 +37,7 @@
|
|
|
37
37
|
* - MCPSpecComplianceAssessor → use ProtocolComplianceAssessor
|
|
38
38
|
* - ProtocolConformanceAssessor → use ProtocolComplianceAssessor
|
|
39
39
|
*
|
|
40
|
+
* @public
|
|
40
41
|
* @module assessment/modules
|
|
41
42
|
*/
|
|
42
43
|
// Base class
|
|
@@ -86,24 +87,28 @@ export * from "./annotations/index.js";
|
|
|
86
87
|
// Deprecated Exports (backward compatibility - will be removed in v2.0.0)
|
|
87
88
|
// ============================================================================
|
|
88
89
|
/**
|
|
90
|
+
* @public
|
|
89
91
|
* @deprecated Use DeveloperExperienceAssessor instead.
|
|
90
92
|
* DocumentationAssessor has been merged into DeveloperExperienceAssessor.
|
|
91
93
|
* This export will be removed in v2.0.0.
|
|
92
94
|
*/
|
|
93
95
|
export { DocumentationAssessor } from "./DocumentationAssessor.js";
|
|
94
96
|
/**
|
|
97
|
+
* @public
|
|
95
98
|
* @deprecated Use DeveloperExperienceAssessor instead.
|
|
96
99
|
* UsabilityAssessor has been merged into DeveloperExperienceAssessor.
|
|
97
100
|
* This export will be removed in v2.0.0.
|
|
98
101
|
*/
|
|
99
102
|
export { UsabilityAssessor } from "./UsabilityAssessor.js";
|
|
100
103
|
/**
|
|
104
|
+
* @public
|
|
101
105
|
* @deprecated Use ProtocolComplianceAssessor instead.
|
|
102
106
|
* MCPSpecComplianceAssessor has been merged into ProtocolComplianceAssessor.
|
|
103
107
|
* This export will be removed in v2.0.0.
|
|
104
108
|
*/
|
|
105
109
|
export { MCPSpecComplianceAssessor } from "./MCPSpecComplianceAssessor.js";
|
|
106
110
|
/**
|
|
111
|
+
* @public
|
|
107
112
|
* @deprecated Use ProtocolComplianceAssessor instead.
|
|
108
113
|
* ProtocolConformanceAssessor has been merged into ProtocolComplianceAssessor.
|
|
109
114
|
* This export will be removed in v2.0.0.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"SecurityPayloadGenerator.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPayloadGenerator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD;;GAEG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,iBAAiB,CAAuC;IAEhE;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO;IAUvC;;OAEG;IACH,oBAAoB,CAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,GACT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"SecurityPayloadGenerator.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPayloadGenerator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD;;GAEG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,iBAAiB,CAAuC;IAEhE;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO;IAUvC;;OAEG;IACH,oBAAoB,CAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,GACT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAqQ1B;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO;IASjC;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;CAQ7C"}
|
|
@@ -79,6 +79,92 @@ export class SecurityPayloadGenerator {
|
|
|
79
79
|
}
|
|
80
80
|
}
|
|
81
81
|
}
|
|
82
|
+
// PRIORITY 2.5: Handle session payloads (Issue #111, Challenge #12)
|
|
83
|
+
// Session payloads need companion parameters for proper testing
|
|
84
|
+
if (!payloadInjected && payload.payloadType === "session") {
|
|
85
|
+
const actionParams = ["action", "session_action", "operation", "type"];
|
|
86
|
+
for (const [key, prop] of Object.entries(schema.properties)) {
|
|
87
|
+
const propSchema = prop;
|
|
88
|
+
if (propSchema.type === "string") {
|
|
89
|
+
for (const actionParam of actionParams) {
|
|
90
|
+
if (key.toLowerCase().includes(actionParam.toLowerCase())) {
|
|
91
|
+
params[key] = payload.payload;
|
|
92
|
+
payloadInjected = true;
|
|
93
|
+
break;
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
if (payloadInjected)
|
|
97
|
+
break;
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
// Add companion parameters for session testing
|
|
101
|
+
if (payloadInjected) {
|
|
102
|
+
for (const [key, prop] of Object.entries(schema.properties)) {
|
|
103
|
+
const propSchema = prop;
|
|
104
|
+
if (propSchema.type !== "string")
|
|
105
|
+
continue;
|
|
106
|
+
if (params[key] !== undefined)
|
|
107
|
+
continue; // Skip already set params
|
|
108
|
+
const keyLower = key.toLowerCase();
|
|
109
|
+
// Provide test values for common session parameters
|
|
110
|
+
if (keyLower.includes("user") ||
|
|
111
|
+
keyLower.includes("username") ||
|
|
112
|
+
keyLower.includes("name")) {
|
|
113
|
+
params[key] = "testuser";
|
|
114
|
+
}
|
|
115
|
+
else if (keyLower.includes("session_id") ||
|
|
116
|
+
keyLower.includes("sessionid") ||
|
|
117
|
+
keyLower.includes("sid")) {
|
|
118
|
+
params[key] = "attacker_session_12345";
|
|
119
|
+
}
|
|
120
|
+
else if (keyLower.includes("password") ||
|
|
121
|
+
keyLower.includes("pass")) {
|
|
122
|
+
params[key] = "testpass123";
|
|
123
|
+
}
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
// PRIORITY 2.6: Handle crypto payloads (Issue #112, Challenge #13)
|
|
128
|
+
// Crypto payloads need companion parameters for proper testing
|
|
129
|
+
if (!payloadInjected && payload.payloadType === "crypto") {
|
|
130
|
+
const actionParams = ["action", "operation", "type"];
|
|
131
|
+
for (const [key, prop] of Object.entries(schema.properties)) {
|
|
132
|
+
const propSchema = prop;
|
|
133
|
+
if (propSchema.type === "string") {
|
|
134
|
+
for (const actionParam of actionParams) {
|
|
135
|
+
if (key.toLowerCase().includes(actionParam.toLowerCase())) {
|
|
136
|
+
params[key] = payload.payload;
|
|
137
|
+
payloadInjected = true;
|
|
138
|
+
break;
|
|
139
|
+
}
|
|
140
|
+
}
|
|
141
|
+
if (payloadInjected)
|
|
142
|
+
break;
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
// Add companion parameters for crypto testing
|
|
146
|
+
if (payloadInjected) {
|
|
147
|
+
for (const [key, prop] of Object.entries(schema.properties)) {
|
|
148
|
+
const propSchema = prop;
|
|
149
|
+
if (propSchema.type !== "string")
|
|
150
|
+
continue;
|
|
151
|
+
if (params[key] !== undefined)
|
|
152
|
+
continue; // Skip already set params
|
|
153
|
+
const keyLower = key.toLowerCase();
|
|
154
|
+
// Provide test values for common crypto parameters
|
|
155
|
+
if (keyLower.includes("password") ||
|
|
156
|
+
keyLower.includes("pass") ||
|
|
157
|
+
keyLower.includes("secret")) {
|
|
158
|
+
params[key] = "test_password_123";
|
|
159
|
+
}
|
|
160
|
+
else if (keyLower.includes("data") ||
|
|
161
|
+
keyLower.includes("input") ||
|
|
162
|
+
keyLower.includes("plaintext")) {
|
|
163
|
+
params[key] = "sensitive_data_to_encrypt";
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
}
|
|
82
168
|
// PRIORITY 3: Check for language-specific code execution parameters
|
|
83
169
|
for (const [key, prop] of Object.entries(schema.properties)) {
|
|
84
170
|
const propSchema = prop;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"SecurityPayloadTester.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPayloadTester.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAGjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,2BAA2B,EAC3B,IAAI,EACL,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGL,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAOhC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrD;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAO9B,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,kBAAkB;IAR5B,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,SAAS,CAAK;gBAGZ,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,UAAU,EAClB,kBAAkB,EAAE,CAAC,CAAC,EAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,CAAC,CAAC;IAOjB;;;OAGG;IACG,yBAAyB,CAC7B,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA2JhC;;;OAGG;IACG,qBAAqB,CACzB,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA8IhC;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,IAAI,EACV,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,GACxC,OAAO,CAAC,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"SecurityPayloadTester.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPayloadTester.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAGjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,2BAA2B,EAC3B,IAAI,EACL,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGL,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAOhC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrD;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAO9B,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,kBAAkB;IAR5B,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,SAAS,CAAK;gBAGZ,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,UAAU,EAClB,kBAAkB,EAAE,CAAC,CAAC,EAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,CAAC,CAAC;IAOjB;;;OAGG;IACG,yBAAyB,CAC7B,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA2JhC;;;OAGG;IACG,qBAAqB,CACzB,KAAK,EAAE,IAAI,EAAE,EACb,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,EACzC,UAAU,CAAC,EAAE,oBAAoB,GAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA8IhC;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,IAAI,EACV,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,2BAA2B,CAAC,GACxC,OAAO,CAAC,kBAAkB,CAAC;IA6P9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAO3B;;OAEG;IACH,OAAO,CAAC,KAAK;CAGd"}
|
|
@@ -339,6 +339,28 @@ export class SecurityPayloadTester {
|
|
|
339
339
|
outputInjectionMarkers: outputInjectionResult.markers,
|
|
340
340
|
outputInjectionEvidence: outputInjectionResult.evidence,
|
|
341
341
|
};
|
|
342
|
+
// Issue #111: Analyze session management patterns for Challenge #12
|
|
343
|
+
let sessionManagementFields = {};
|
|
344
|
+
if (attackName === "Session Management") {
|
|
345
|
+
const sessionResult = this.responseAnalyzer.analyzeSessionManagementResponse(response);
|
|
346
|
+
sessionManagementFields = {
|
|
347
|
+
sessionManagementDetected: sessionResult.detected,
|
|
348
|
+
sessionVulnerabilityType: sessionResult.vulnerabilityType,
|
|
349
|
+
sessionCweIds: sessionResult.cweIds,
|
|
350
|
+
sessionManagementEvidence: sessionResult.evidence,
|
|
351
|
+
};
|
|
352
|
+
}
|
|
353
|
+
// Issue #112: Analyze cryptographic failure patterns for Challenge #13
|
|
354
|
+
let cryptoFailureFields = {};
|
|
355
|
+
if (attackName === "Cryptographic Failures") {
|
|
356
|
+
const cryptoResult = this.responseAnalyzer.analyzeCryptographicFailures(response);
|
|
357
|
+
cryptoFailureFields = {
|
|
358
|
+
cryptoFailureDetected: cryptoResult.detected,
|
|
359
|
+
cryptoVulnerabilityType: cryptoResult.vulnerabilityType,
|
|
360
|
+
cryptoCweIds: cryptoResult.cweIds,
|
|
361
|
+
cryptoFailureEvidence: cryptoResult.evidence,
|
|
362
|
+
};
|
|
363
|
+
}
|
|
342
364
|
return {
|
|
343
365
|
testName: attackName,
|
|
344
366
|
description: payload.description,
|
|
@@ -357,6 +379,10 @@ export class SecurityPayloadTester {
|
|
|
357
379
|
...blacklistBypassFields,
|
|
358
380
|
// Issue #110: Output injection detection fields (Challenge #8)
|
|
359
381
|
...outputInjectionFields,
|
|
382
|
+
// Issue #111: Session management detection fields (Challenge #12)
|
|
383
|
+
...sessionManagementFields,
|
|
384
|
+
// Issue #112: Cryptographic failure detection fields (Challenge #13)
|
|
385
|
+
...cryptoFailureFields,
|
|
360
386
|
...confidenceResult,
|
|
361
387
|
};
|
|
362
388
|
}
|
|
@@ -65,6 +65,37 @@ export interface OutputInjectionResult {
|
|
|
65
65
|
markers?: string[];
|
|
66
66
|
evidence?: string;
|
|
67
67
|
}
|
|
68
|
+
/**
|
|
69
|
+
* Result of session management vulnerability analysis (Issue #111, Challenge #12)
|
|
70
|
+
* Detects 5 session management CWEs from mcp-vulnerable-testbed:
|
|
71
|
+
* - CWE-384: Session Fixation (accepts external session ID, no regeneration)
|
|
72
|
+
* - CWE-330: Predictable Tokens (session_{user}_{timestamp}_{counter})
|
|
73
|
+
* - CWE-613: No Session Timeout (expires_at: null, timeout_checked: false)
|
|
74
|
+
* - CWE-200: ID Exposure in URL (session_url contains session_id=)
|
|
75
|
+
*/
|
|
76
|
+
export interface SessionManagementResult {
|
|
77
|
+
detected: boolean;
|
|
78
|
+
vulnerabilityType: "SESSION_FIXATION" | "PREDICTABLE_TOKEN" | "NO_TIMEOUT" | "ID_IN_URL" | "NO_REGENERATION" | "UNKNOWN";
|
|
79
|
+
cweIds: string[];
|
|
80
|
+
evidence?: string;
|
|
81
|
+
}
|
|
82
|
+
/**
|
|
83
|
+
* Result of cryptographic failure analysis (Issue #112, Challenge #13)
|
|
84
|
+
* Detects OWASP A02:2021 Cryptographic Failures:
|
|
85
|
+
* - CWE-328: Weak Hash (MD5/SHA1 for passwords)
|
|
86
|
+
* - CWE-916: Static Salt / Weak KDF (static_salt_123, MD5 derivation)
|
|
87
|
+
* - CWE-330: Predictable RNG (random.random() with timestamp seed)
|
|
88
|
+
* - CWE-208: Timing Attack (non-constant-time comparison)
|
|
89
|
+
* - CWE-327: Broken Cipher (ECB mode, XOR cipher)
|
|
90
|
+
* - CWE-321: Hardcoded Key (key_source: "hardcoded")
|
|
91
|
+
* - CWE-326: Weak Key Length (key_length < 16)
|
|
92
|
+
*/
|
|
93
|
+
export interface CryptoFailureResult {
|
|
94
|
+
detected: boolean;
|
|
95
|
+
vulnerabilityType: "WEAK_HASH" | "STATIC_SALT" | "PREDICTABLE_RNG" | "TIMING_ATTACK" | "ECB_MODE" | "HARDCODED_KEY" | "WEAK_KDF" | "WEAK_KEY_LENGTH" | "UNKNOWN";
|
|
96
|
+
cweIds: string[];
|
|
97
|
+
evidence?: string;
|
|
98
|
+
}
|
|
68
99
|
/**
|
|
69
100
|
* Chain execution type classification (Issue #93, Challenge #6)
|
|
70
101
|
*/
|
|
@@ -160,6 +191,33 @@ export declare class SecurityResponseAnalyzer {
|
|
|
160
191
|
* @returns Analysis result with output injection detection status
|
|
161
192
|
*/
|
|
162
193
|
analyzeOutputInjectionResponse(response: CompatibilityCallToolResult): OutputInjectionResult;
|
|
194
|
+
/**
|
|
195
|
+
* Analyze response for session management vulnerabilities (Issue #111, Challenge #12)
|
|
196
|
+
* Detects 5 CWEs from mcp-vulnerable-testbed:
|
|
197
|
+
* - CWE-384: Session Fixation (accepts external session ID, no regeneration)
|
|
198
|
+
* - CWE-330: Predictable Tokens (session_{user}_{timestamp}_{counter})
|
|
199
|
+
* - CWE-613: No Session Timeout (expires_at: null, timeout_checked: false)
|
|
200
|
+
* - CWE-200: ID Exposure in URL (session_url contains session_id=)
|
|
201
|
+
*
|
|
202
|
+
* @param response The tool response to analyze
|
|
203
|
+
* @returns Analysis result with session management detection status
|
|
204
|
+
*/
|
|
205
|
+
analyzeSessionManagementResponse(response: CompatibilityCallToolResult): SessionManagementResult;
|
|
206
|
+
/**
|
|
207
|
+
* Analyze response for cryptographic failures (Issue #112, Challenge #13)
|
|
208
|
+
* Detects OWASP A02:2021 Cryptographic Failures from mcp-vulnerable-testbed:
|
|
209
|
+
* - CWE-328: Weak Hash (MD5/SHA1 for password hashing)
|
|
210
|
+
* - CWE-916: Static Salt / Weak KDF
|
|
211
|
+
* - CWE-330: Predictable RNG (random.random() with timestamp seed)
|
|
212
|
+
* - CWE-208: Timing Attack (non-constant-time comparison)
|
|
213
|
+
* - CWE-327: Broken Cipher (ECB mode, XOR)
|
|
214
|
+
* - CWE-321: Hardcoded Key (key_source: "hardcoded")
|
|
215
|
+
* - CWE-326: Weak Key Length (key_length < 16)
|
|
216
|
+
*
|
|
217
|
+
* @param response The tool response to analyze
|
|
218
|
+
* @returns Analysis result with cryptographic failure detection status
|
|
219
|
+
*/
|
|
220
|
+
analyzeCryptographicFailures(response: CompatibilityCallToolResult): CryptoFailureResult;
|
|
163
221
|
/**
|
|
164
222
|
* Analyze response for chain exploitation vulnerabilities (Issue #93, Challenge #6)
|
|
165
223
|
* Detects multi-tool chained exploitation attacks including:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"SecurityResponseAnalyzer.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityResponseAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,2BAA2B,EAC3B,IAAI,EACL,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAK1E,OAAO,EAAgB,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAoB,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYxE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,SAAS,CAAC;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EACT,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,GACX,SAAS,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,sBAAsB,GACtB,iBAAiB,GACjB,SAAS,GACT,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAClC,kBAAkB,GAClB,iBAAiB,GACjB,2BAA2B,GAC3B,gBAAgB,GAChB,qBAAqB,GACrB,iBAAiB,CAAC;AAEtB;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,kBAAkB,CAAC;IAC9B,uBAAuB,EAAE,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE;QACR,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE;;;;;;GAMG;AACH,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAmB;;IAc3C;;;;;;OAMG;IACH,eAAe,CACb,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,GACT,cAAc;IAqBjB;;OAEG;IACH,mBAAmB,CACjB,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,kBAAkB,CAAC,EAAE,2BAA2B,GAC/C,gBAAgB;IAWnB;;;OAGG;IACH,yBAAyB,CACvB,QAAQ,EAAE,2BAA2B,GACpC,gBAAgB;IAsFnB;;;;;;;;;OASG;IACH,2BAA2B,CACzB,QAAQ,EAAE,2BAA2B,GACpC,oBAAoB;IAmGvB;;;;;;;;;;OAUG;IACH,8BAA8B,CAC5B,QAAQ,EAAE,2BAA2B,GACpC,qBAAqB;IAyFxB;;;;;;;;;;;OAWG;IACH,8BAA8B,CAC5B,QAAQ,EAAE,2BAA2B,GACpC,qBAAqB;
|
|
1
|
+
{"version":3,"file":"SecurityResponseAnalyzer.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityResponseAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,2BAA2B,EAC3B,IAAI,EACL,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAK1E,OAAO,EAAgB,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAoB,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYxE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,SAAS,CAAC;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EACT,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,GACX,SAAS,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EACb,kBAAkB,GAClB,mBAAmB,GACnB,YAAY,GACZ,WAAW,GACX,iBAAiB,GACjB,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EACb,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,UAAU,GACV,eAAe,GACf,UAAU,GACV,iBAAiB,GACjB,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,sBAAsB,GACtB,iBAAiB,GACjB,SAAS,GACT,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAClC,kBAAkB,GAClB,iBAAiB,GACjB,2BAA2B,GAC3B,gBAAgB,GAChB,qBAAqB,GACrB,iBAAiB,CAAC;AAEtB;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,kBAAkB,CAAC;IAC9B,uBAAuB,EAAE,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE;QACR,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE;;;;;;GAMG;AACH,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAmB;;IAc3C;;;;;;OAMG;IACH,eAAe,CACb,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,GACT,cAAc;IAqBjB;;OAEG;IACH,mBAAmB,CACjB,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,kBAAkB,CAAC,EAAE,2BAA2B,GAC/C,gBAAgB;IAWnB;;;OAGG;IACH,yBAAyB,CACvB,QAAQ,EAAE,2BAA2B,GACpC,gBAAgB;IAsFnB;;;;;;;;;OASG;IACH,2BAA2B,CACzB,QAAQ,EAAE,2BAA2B,GACpC,oBAAoB;IAmGvB;;;;;;;;;;OAUG;IACH,8BAA8B,CAC5B,QAAQ,EAAE,2BAA2B,GACpC,qBAAqB;IAyFxB;;;;;;;;;;;OAWG;IACH,8BAA8B,CAC5B,QAAQ,EAAE,2BAA2B,GACpC,qBAAqB;IA6FxB;;;;;;;;;;OAUG;IACH,gCAAgC,CAC9B,QAAQ,EAAE,2BAA2B,GACpC,uBAAuB;IAwJ1B;;;;;;;;;;;;;OAaG;IACH,4BAA4B,CAC1B,QAAQ,EAAE,2BAA2B,GACpC,mBAAmB;IAoPtB;;;;;;;;;;;;OAYG;IACH,wBAAwB,CACtB,QAAQ,EAAE,2BAA2B,GACpC,yBAAyB;IA6D5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,kBAAkB,CAAC,QAAQ,EAAE,2BAA2B,GAAG;QACzD,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAwCD;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IAIjE;;OAEG;IACH,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAIvD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,2BAA2B,GAAG,mBAAmB;IAIzE;;OAEG;IACH,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB;IAI/D;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;IAQrE;;OAEG;IACH,oBAAoB,CAClB,SAAS,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EACvD,YAAY,EAAE,MAAM,GACnB,OAAO;IAIV;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIlD;;OAEG;IACH,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO;IAIrD;;OAEG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAInD;;;OAGG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAIpE;;OAEG;IACH,qCAAqC,CACnC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GACnB,OAAO;IAOV;;OAEG;IACH,yBAAyB,CACvB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,IAAI,GACV,kBAAkB;IAQrB;;OAEG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAInD;;OAEG;IACH,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIvD;;OAEG;IACH,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAI7D;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IAIrE;;OAEG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;IAOxE;;OAEG;IACH,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIrD;;OAEG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAQjD;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAyB/B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAqF7B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IA0DlC;;OAEG;IACH,OAAO,CAAC,wBAAwB;CAmBjC"}
|