@bryan-thompson/inspector-assessment-client 1.35.2 → 1.36.0

package/lib/services/assessment/modules/ManifestValidationAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ManifestValidationAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ManifestValidationAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAM7B,MAAM,uBAAuB,CAAC;AAM/B,qBAAa,0BAA2B,SAAQ,YAAY;IAC1D;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IAqLxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+CzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAqCpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA+B1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;YACW,yBAAyB;IAqFvC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0C3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA+ChC"}
+{"version":3,"file":"ManifestValidationAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ManifestValidationAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,KAAK,EACV,4BAA4B,EAS7B,MAAM,uBAAuB,CAAC;AAO/B;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAwCR;AA+BD,qBAAa,0BAA2B,SAAQ,YAAY;IAC1D;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAcpB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IAiMxC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+CzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAqCpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA+B1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA4B7B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAyE9B;;OAEG;YACW,cAAc;IAuC5B;;OAEG;YACW,yBAAyB;IAmEvC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0C3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA+ChC"}

package/lib/services/assessment/modules/ManifestValidationAssessor.js

@@ -14,6 +14,67 @@ import { BaseAssessor } from "./BaseAssessor.js";
 const REQUIRED_FIELDS = ["name", "version", "mcp_config"];
 const RECOMMENDED_FIELDS = ["description", "author", "repository"];
 const CURRENT_MANIFEST_VERSION = "0.3";
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/;
+/**
+ * Calculate Levenshtein distance between two strings
+ * Uses space-optimized two-row algorithm for O(min(n,m)) memory
+ * Used for "did you mean?" suggestions on mismatched tool names (Issue #140)
+ * Exported for testing (Issue #141 - ISSUE-002)
+ */
+export function levenshteinDistance(a, b, maxDist) {
+    // Early termination optimizations
+    if (a === b)
+        return 0;
+    if (a.length === 0)
+        return b.length;
+    if (b.length === 0)
+        return a.length;
+    // If length difference exceeds max distance, no need to compute
+    if (maxDist && Math.abs(a.length - b.length) > maxDist) {
+        return maxDist + 1;
+    }
+    // Ensure a is the shorter string (optimize space)
+    if (a.length > b.length) {
+        [a, b] = [b, a];
+    }
+    // Two-row algorithm: only keep previous and current row
+    let prev = Array.from({ length: a.length + 1 }, (_, i) => i);
+    let curr = new Array(a.length + 1);
+    for (let i = 1; i <= b.length; i++) {
+        curr[0] = i;
+        for (let j = 1; j <= a.length; j++) {
+            if (b.charAt(i - 1) === a.charAt(j - 1)) {
+                curr[j] = prev[j - 1];
+            }
+            else {
+                curr[j] = Math.min(prev[j - 1] + 1, // substitution
+                curr[j - 1] + 1, // insertion
+                prev[j] + 1);
+            }
+        }
+        // Swap rows
+        [prev, curr] = [curr, prev];
+    }
+    return prev[a.length];
+}
+/**
+ * Find closest matching tool name from a set
+ * Returns match if distance <= threshold (default: 10 chars or 40% of length)
+ * Generous threshold to catch common renames like "data" -> "resources"
+ */
+function findClosestMatch(name, candidates, threshold) {
+    const maxDist = threshold ?? Math.max(10, Math.floor(name.length * 0.4));
+    let closest = null;
+    let minDist = Infinity;
+    for (const candidate of candidates) {
+        const dist = levenshteinDistance(name.toLowerCase(), candidate.toLowerCase(), maxDist);
+        if (dist < minDist && dist <= maxDist) {
+            minDist = dist;
+            closest = candidate;
+        }
+    }
+    return closest;
+}
 export class ManifestValidationAssessor extends BaseAssessor {
     /**
      * Get mcp_config from manifest (supports both root and nested v0.3 format)
@@ -33,6 +94,57 @@ export class ManifestValidationAssessor extends BaseAssessor {
         }
         return undefined;
     }
+    /**
+     * Extract contact information from manifest (Issue #141 - D4 check)
+     * Supports: author object, author string (email parsing), repository fallback
+     *
+     * @param manifest - The parsed manifest JSON
+     * @returns Extracted contact info or undefined if no contact info found
+     */
+    extractContactInfo(manifest) {
+        // 1. Check author object format (npm-style)
+        if (typeof manifest.author === "object" && manifest.author !== null) {
+            const authorObj = manifest.author;
+            return {
+                email: authorObj.email,
+                url: authorObj.url,
+                name: authorObj.name,
+                source: "author_object",
+            };
+        }
+        // 2. Check author string (may contain email: "Name <email@example.com>")
+        if (typeof manifest.author === "string" && manifest.author.trim()) {
+            const emailMatch = manifest.author.match(/<([a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,})>/);
+            return {
+                name: manifest.author.replace(/<[^>]+>/, "").trim() || undefined,
+                email: emailMatch?.[1],
+                source: "author_string",
+            };
+        }
+        // 3. Fallback to repository (provides contact via issues)
+        if (manifest.repository) {
+            return {
+                url: manifest.repository,
+                source: "repository",
+            };
+        }
+        return undefined;
+    }
+    /**
+     * Extract version information from manifest (Issue #141 - D5 check)
+     *
+     * @param manifest - The parsed manifest JSON
+     * @returns Extracted version info or undefined if no version found
+     */
+    extractVersionInfo(manifest) {
+        if (!manifest.version)
+            return undefined;
+        return {
+            version: manifest.version,
+            valid: true,
+            semverCompliant: SEMVER_PATTERN.test(manifest.version),
+        };
+    }
     /**
      * Run manifest validation assessment
      */
@@ -129,6 +241,11 @@ export class ManifestValidationAssessor extends BaseAssessor {
         // Validate version format
         this.testCount++;
         validationResults.push(this.validateVersionFormat(manifest.version));
+        // Validate tool names match server (Issue #140)
+        if (manifest.tools && context.tools.length > 0) {
+            const toolResults = this.validateToolNamesMatch(manifest, context.tools);
+            validationResults.push(...toolResults);
+        }
         // Validate privacy policy URLs if present
         let privacyPolicies;
         if (manifest.privacy_policies &&
@@ -164,6 +281,9 @@ export class ManifestValidationAssessor extends BaseAssessor {
         const status = this.determineManifestStatus(validationResults, hasRequiredFields);
         const explanation = this.generateExplanation(validationResults, hasRequiredFields, hasIcon, privacyPolicies);
         const recommendations = this.generateRecommendations(validationResults, privacyPolicies);
+        // Extract D4/D5 fields (Issue #141)
+        const contactInfo = this.extractContactInfo(manifest);
+        const versionInfo = this.extractVersionInfo(manifest);
         this.logger.info(`Assessment complete: ${validationResults.filter((r) => r.valid).length}/${validationResults.length} checks passed`);
         return {
             hasManifest: true,
@@ -173,6 +293,8 @@ export class ManifestValidationAssessor extends BaseAssessor {
             hasRequiredFields,
             missingFields,
             privacyPolicies,
+            contactInfo,
+            versionInfo,
             status,
             explanation,
             recommendations,
@@ -426,9 +548,7 @@ export class ManifestValidationAssessor extends BaseAssessor {
                 severity: "ERROR",
             };
         }
-        // Check for semver format
-        const semverPattern = /^\d+\.\d+\.\d+(-[a-zA-Z0-9.]+)?(\+[a-zA-Z0-9.]+)?$/;
-        if (!semverPattern.test(version)) {
+        if (!SEMVER_PATTERN.test(version)) {
             return {
                 field: "version (format)",
                 valid: false,
@@ -444,6 +564,98 @@ export class ManifestValidationAssessor extends BaseAssessor {
             severity: "INFO",
         };
     }
+    /**
+     * Validate manifest tool declarations against actual server tools (Issue #140)
+     * Compares tool names in manifest.tools against context.tools from tools/list
+     * Uses Levenshtein distance for "did you mean?" suggestions
+     */
+    validateToolNamesMatch(manifest, serverTools) {
+        const results = [];
+        // Skip if manifest doesn't declare tools
+        if (!manifest.tools || manifest.tools.length === 0) {
+            return results;
+        }
+        this.testCount++;
+        const manifestToolNames = new Set(manifest.tools.map((t) => t.name));
+        const serverToolNames = new Set(serverTools.map((t) => t.name));
+        // Check for tools declared in manifest but not on server
+        const mismatches = [];
+        for (const name of manifestToolNames) {
+            if (!serverToolNames.has(name)) {
+                const suggestion = findClosestMatch(name, serverToolNames);
+                mismatches.push({ manifest: name, suggestion });
+            }
+        }
+        // Check for tools on server but not declared in manifest
+        const undeclaredTools = [];
+        for (const name of serverToolNames) {
+            if (!manifestToolNames.has(name)) {
+                undeclaredTools.push(name);
+            }
+        }
+        // Report mismatches with suggestions
+        if (mismatches.length > 0) {
+            const issueLines = mismatches.map((m) => m.suggestion
+                ? `"${m.manifest}" (did you mean "${m.suggestion}"?)`
+                : `"${m.manifest}"`);
+            results.push({
+                field: "tools (manifest vs server)",
+                valid: false,
+                value: mismatches,
+                issue: `Manifest declares tools not found on server: ${issueLines.join(", ")}`,
+                severity: "WARNING",
+            });
+        }
+        if (undeclaredTools.length > 0) {
+            results.push({
+                field: "tools (undeclared)",
+                valid: false,
+                value: undeclaredTools,
+                issue: `Server has tools not declared in manifest: ${undeclaredTools.join(", ")}`,
+                severity: "INFO",
+            });
+        }
+        // All matched
+        if (mismatches.length === 0 && undeclaredTools.length === 0) {
+            results.push({
+                field: "tools (manifest vs server)",
+                valid: true,
+                value: `${manifestToolNames.size} tools matched`,
+                severity: "INFO",
+            });
+        }
+        return results;
+    }
+    /**
+     * Fetch with retry logic for transient network failures
+     */
+    async fetchWithRetry(url, method, retries = 2, backoffMs = 100) {
+        let lastError = null;
+        for (let attempt = 0; attempt <= retries; attempt++) {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), 5000);
+            try {
+                const response = await fetch(url, {
+                    method,
+                    signal: controller.signal,
+                    redirect: "follow",
+                });
+                clearTimeout(timeoutId);
+                return response;
+            }
+            catch (error) {
+                clearTimeout(timeoutId);
+                lastError = error instanceof Error ? error : new Error(String(error));
+                // Don't retry on last attempt
+                if (attempt < retries) {
+                    // Exponential backoff
+                    await new Promise((resolve) => setTimeout(resolve, backoffMs * Math.pow(2, attempt)));
+                }
+            }
+        }
+        // All retries exhausted
+        throw lastError;
+    }
     /**
      * Validate privacy policy URLs are accessible
      */
@@ -467,15 +679,8 @@ export class ManifestValidationAssessor extends BaseAssessor {
                 continue;
             }
             try {
-                // Use HEAD request for efficiency, fallback to GET if needed
-                const controller = new AbortController();
-                const timeoutId = setTimeout(() => controller.abort(), 5000);
-                const response = await fetch(url, {
-                    method: "HEAD",
-                    signal: controller.signal,
-                    redirect: "follow",
-                });
-                clearTimeout(timeoutId);
+                // Use HEAD request for efficiency with retry logic
+                const response = await this.fetchWithRetry(url, "HEAD");
                 results.push({
                     url,
                     accessible: response.ok,
@@ -489,14 +694,7 @@ export class ManifestValidationAssessor extends BaseAssessor {
                     error: headError instanceof Error ? headError.message : String(headError),
                 });
                 try {
-                    const controller = new AbortController();
-                    const timeoutId = setTimeout(() => controller.abort(), 5000);
-                    const response = await fetch(url, {
-                        method: "GET",
-                        signal: controller.signal,
-                        redirect: "follow",
-                    });
-                    clearTimeout(timeoutId);
+                    const response = await this.fetchWithRetry(url, "GET");
                     results.push({
                         url,
                         accessible: response.ok,

package/lib/services/assessment/modules/ProhibitedLibrariesAssessor.d.ts

@@ -17,6 +17,11 @@ export declare class ProhibitedLibrariesAssessor extends BaseAssessor {
      * Run prohibited libraries assessment
      */
     assess(context: AssessmentContext): Promise<ProhibitedLibrariesAssessment>;
+    /**
+     * Create result when no files are available to scan (Issue #154)
+     * Follows the pattern established by ConformanceAssessor
+     */
+    private createSkippedResult;
     /**
      * Check if file is a source file worth scanning
      */

package/lib/services/assessment/modules/ProhibitedLibrariesAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProhibitedLibrariesAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ProhibitedLibrariesAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,6BAA6B,EAI9B,MAAM,uBAAuB,CAAC;AAS/B,qBAAa,2BAA4B,SAAQ,YAAY;IAC3D;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,6BAA6B,CAAC;IAiKzC;;OAEG;IACH,OAAO,CAAC,YAAY;IA0BpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqB1B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAiClC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoD3B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;CA2EhC"}
+{"version":3,"file":"ProhibitedLibrariesAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/ProhibitedLibrariesAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,6BAA6B,EAI9B,MAAM,uBAAuB,CAAC;AAS/B,qBAAa,2BAA4B,SAAQ,YAAY;IAC3D;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,6BAA6B,CAAC;IAkLzC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;OAEG;IACH,OAAO,CAAC,YAAY;IA0BpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqB1B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAiClC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoD3B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;CA2EhC"}

package/lib/services/assessment/modules/ProhibitedLibrariesAssessor.js

@@ -18,6 +18,15 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
     async assess(context) {
         this.logger.info("Starting prohibited libraries assessment");
         this.testCount = 0;
+        // Issue #154: Check if there are any files to scan
+        const hasPackageJson = Boolean(context.packageJson);
+        const hasSourceFiles = Boolean(context.sourceCodeFiles &&
+            context.config.enableSourceCodeAnalysis &&
+            context.sourceCodeFiles.size > 0);
+        if (!hasPackageJson && !hasSourceFiles) {
+            this.logger.info("No package.json or source files available, skipping assessment");
+            return this.createSkippedResult("No package.json or source files provided. Enable source code analysis with --source flag.");
+        }
         const matches = [];
         const scannedFiles = [];
         let hasFinancialLibraries = false;
@@ -137,6 +146,26 @@ export class ProhibitedLibrariesAssessor extends BaseAssessor {
             recommendations,
         };
     }
+    /**
+     * Create result when no files are available to scan (Issue #154)
+     * Follows the pattern established by ConformanceAssessor
+     */
+    createSkippedResult(reason) {
+        return {
+            matches: [],
+            scannedFiles: [],
+            hasFinancialLibraries: false,
+            hasMediaLibraries: false,
+            status: "NEED_MORE_INFO",
+            explanation: `Prohibited libraries assessment skipped: ${reason}`,
+            recommendations: [
+                "Provide --source <path> to enable package.json and source file scanning",
+                "Ensure the source path exists and contains package.json or source files",
+            ],
+            skipped: true,
+            skipReason: reason,
+        };
+    }
     /**
      * Check if file is a source file worth scanning
      */

package/lib/services/assessment/modules/SecurityAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/SecurityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAiB9D,OAAO,EACL,gBAAgB,EAGjB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAiC;IAErD;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAStD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;YACW,0BAA0B;gBAwBtC,MAAM,EAAE,OAAO,8BAA8B,EAAE,uBAAuB;IAwClE,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+OrE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;YACW,+BAA+B;IAiC7C;;;OAGG;YACW,yBAAyB;IA0CvC;;;;;;;OAOG;YACW,yBAAyB;IAmFvC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;CAgDnC"}
+{"version":3,"file":"SecurityAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/SecurityAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAiB9D,OAAO,EACL,gBAAgB,EAGjB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,gBAAgB,CAA2B;IACnD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAiC;IAErD;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAStD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAOjC;;;OAGG;YACW,0BAA0B;gBAwBtC,MAAM,EAAE,OAAO,8BAA8B,EAAE,uBAAuB;IAwClE,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA8PrE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;YACW,+BAA+B;IAiC7C;;;OAGG;YACW,yBAAyB;IA0CvC;;;;;;;OAOG;YACW,yBAAyB;IAmFvC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAkEnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;CAgDnC"}

package/lib/services/assessment/modules/SecurityAssessor.js

@@ -253,6 +253,12 @@ export class SecurityAssessor extends BaseAssessor {
         }
         // Issue #75: Aggregate auth bypass detection results
         const authBypassSummary = this.aggregateAuthBypassResults(allTests);
+        // Issue #152: Calculate test execution metadata for score validation
+        const totalTestsAttempted = allTests.length;
+        const validTestsCompleted = validTests.length;
+        const testCoveragePercent = totalTestsAttempted > 0
+            ? Math.round((validTestsCompleted / totalTestsAttempted) * 100)
+            : 0;
         return {
             promptInjectionTests: allTests,
             vulnerabilities,
@@ -263,6 +269,13 @@ export class SecurityAssessor extends BaseAssessor {
             // Issue #134: Test validity warning for response uniformity detection
             testValidityWarning: validityResult.warning,
             overallConfidence,
+            // Issue #152: Test execution metadata for score validation
+            testExecutionMetadata: {
+                totalTestsAttempted,
+                validTestsCompleted,
+                connectionErrorCount: connectionErrors.length,
+                testCoveragePercent,
+            },
         };
     }
     /**

package/lib/services/assessment/modules/annotations/AlignmentChecker.d.ts

@@ -38,9 +38,14 @@ export interface AlignmentMetricsResult {
     };
 }
 /**
- * Extract annotations from a tool
- * Checks multiple sources in priority order: annotations object, direct properties, metadata
+ * Enable or disable annotation debug logging (Issue #155)
+ * Called by CLI when --debug-annotations flag is provided
  */
+export declare function setAnnotationDebugMode(enabled: boolean): void;
+/**
+ * Check if annotation debug mode is enabled
+ */
+export declare function isAnnotationDebugEnabled(): boolean;
 export declare function extractAnnotations(tool: Tool): ExtractedAnnotations;
 /**
  * Extract extended metadata from tool (Issue #54)

package/lib/services/assessment/modules/annotations/AlignmentChecker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AlignmentChecker.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/AlignmentChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAoExC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,kBAAkB,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,CA8DnE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,GACT,oBAAoB,CAAC,kBAAkB,CAAC,CA6D1C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,EAAE,CAqBtE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAmD3E;AAqCD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,CAAC,EAAE,wBAAwB,GAC5C,oBAAoB,CA0JtB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,gBAAgB,CA8BlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,sBAAsB,CA2BxB"}
+{"version":3,"file":"AlignmentChecker.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/AlignmentChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAuFxC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,kBAAkB,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AA0CD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,CAiNnE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,GACT,oBAAoB,CAAC,kBAAkB,CAAC,CA6D1C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,EAAE,CAqBtE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAmD3E;AAqCD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,CAAC,EAAE,wBAAwB,GAC5C,oBAAoB,CA0JtB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,gBAAgB,CA8BlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,sBAAsB,CA2BxB"}

package/lib/services/assessment/modules/annotations/AlignmentChecker.js

@@ -7,57 +7,155 @@
 import { scanDescriptionForPoisoning, } from "./DescriptionPoisoningDetector.js";
 import { detectAnnotationDeception, isActionableConfidence, } from "./AnnotationDeceptionDetector.js";
 import { inferBehavior } from "./BehaviorInference.js";
+/**
+ * Helper to resolve annotation value with fallback (Issue #150)
+ * Checks *Hint suffix first (MCP spec), then non-suffixed version as fallback
+ * This handles servers that use 'readOnly' instead of 'readOnlyHint'
+ *
+ * @param obj - The object to search for annotation properties
+ * @param hintKey - The MCP spec compliant key (e.g., 'readOnlyHint')
+ * @param fallbackKey - The non-suffixed fallback key (e.g., 'readOnly')
+ * @returns The boolean annotation value, or undefined if not found or not a boolean
+ */
+function resolveAnnotationValue(obj, hintKey, fallbackKey) {
+    if (!obj)
+        return undefined;
+    // Priority: *Hint version (MCP spec)
+    if (obj[hintKey] !== undefined) {
+        const val = obj[hintKey];
+        if (typeof val === "boolean")
+            return val;
+    }
+    // Fallback: non-suffixed version (Issue #150)
+    if (obj[fallbackKey] !== undefined) {
+        const val = obj[fallbackKey];
+        if (typeof val === "boolean")
+            return val;
+    }
+    return undefined;
+}
 /**
  * Extract annotations from a tool
  * Checks multiple sources in priority order: annotations object, direct properties, metadata
+ * Issue #150: Also checks non-suffixed property names (readOnly, destructive) as fallback
+ */
+/**
+ * Global debug flag for annotation extraction (Issue #155)
+ * Set via setAnnotationDebugMode() when --debug-annotations flag is used
+ */
+let annotationDebugMode = false;
+/**
+ * Enable or disable annotation debug logging (Issue #155)
+ * Called by CLI when --debug-annotations flag is provided
+ */
+export function setAnnotationDebugMode(enabled) {
+    annotationDebugMode = enabled;
+}
+/**
+ * Check if annotation debug mode is enabled
  */
+export function isAnnotationDebugEnabled() {
+    return annotationDebugMode;
+}
 export function extractAnnotations(tool) {
     const extendedTool = tool;
+    // Issue #155: Debug logging when --debug-annotations flag is enabled
+    if (annotationDebugMode) {
+        console.log("[DEBUG-ANNOTATIONS]", tool.name, "| keys:", Object.keys(tool), "| annotations:", JSON.stringify(extendedTool.annotations), "| direct.readOnlyHint:", extendedTool.readOnlyHint);
+    }
     // Priority 1: Check annotations object (MCP 2024-11 spec)
+    // Issue #150: Use resolveAnnotationValue to check both *Hint and non-suffixed versions
     if (extendedTool.annotations) {
-        const hasAnnotations = extendedTool.annotations.readOnlyHint !== undefined ||
-            extendedTool.annotations.destructiveHint !== undefined;
+        const annotationsObj = extendedTool.annotations;
+        const readOnlyValue = resolveAnnotationValue(annotationsObj, "readOnlyHint", "readOnly");
+        const destructiveValue = resolveAnnotationValue(annotationsObj, "destructiveHint", "destructive");
+        const hasAnnotations = readOnlyValue !== undefined || destructiveValue !== undefined;
         if (hasAnnotations) {
             return {
-                readOnlyHint: extendedTool.annotations.readOnlyHint,
-                destructiveHint: extendedTool.annotations.destructiveHint,
+                readOnlyHint: readOnlyValue,
+                destructiveHint: destructiveValue,
                 title: extendedTool.annotations.title || extendedTool.title,
                 description: tool.description,
-                idempotentHint: extendedTool.annotations.idempotentHint,
-                openWorldHint: extendedTool.annotations.openWorldHint,
+                idempotentHint: resolveAnnotationValue(annotationsObj, "idempotentHint", "idempotent"),
+                openWorldHint: resolveAnnotationValue(annotationsObj, "openWorldHint", "openWorld"),
                 source: "mcp",
             };
         }
     }
     // Priority 2: Check direct properties
-    if (extendedTool.readOnlyHint !== undefined ||
-        extendedTool.destructiveHint !== undefined) {
+    // Issue #150: Use resolveAnnotationValue to check both *Hint and non-suffixed versions
+    const directObj = extendedTool;
+    const directReadOnly = resolveAnnotationValue(directObj, "readOnlyHint", "readOnly");
+    const directDestructive = resolveAnnotationValue(directObj, "destructiveHint", "destructive");
+    if (directReadOnly !== undefined || directDestructive !== undefined) {
         return {
-            readOnlyHint: extendedTool.readOnlyHint,
-            destructiveHint: extendedTool.destructiveHint,
+            readOnlyHint: directReadOnly,
+            destructiveHint: directDestructive,
             title: extendedTool.title,
             description: tool.description,
-            idempotentHint: extendedTool.idempotentHint,
-            openWorldHint: extendedTool.openWorldHint,
+            idempotentHint: resolveAnnotationValue(directObj, "idempotentHint", "idempotent"),
+            openWorldHint: resolveAnnotationValue(directObj, "openWorldHint", "openWorld"),
             source: "mcp",
         };
     }
     // Priority 3: Check metadata
+    // Issue #150: Use resolveAnnotationValue to check both *Hint and non-suffixed versions
     if (extendedTool.metadata) {
-        const hasMetadataAnnotations = extendedTool.metadata.readOnlyHint !== undefined ||
-            extendedTool.metadata.destructiveHint !== undefined;
+        const metadataObj = extendedTool.metadata;
+        const metaReadOnly = resolveAnnotationValue(metadataObj, "readOnlyHint", "readOnly");
+        const metaDestructive = resolveAnnotationValue(metadataObj, "destructiveHint", "destructive");
+        const hasMetadataAnnotations = metaReadOnly !== undefined || metaDestructive !== undefined;
         if (hasMetadataAnnotations) {
             return {
-                readOnlyHint: extendedTool.metadata.readOnlyHint,
-                destructiveHint: extendedTool.metadata.destructiveHint,
+                readOnlyHint: metaReadOnly,
+                destructiveHint: metaDestructive,
                 title: extendedTool.metadata.title || extendedTool.title,
                 description: tool.description,
-                idempotentHint: extendedTool.metadata.idempotentHint,
-                openWorldHint: extendedTool.metadata.openWorldHint,
+                idempotentHint: resolveAnnotationValue(metadataObj, "idempotentHint", "idempotent"),
+                openWorldHint: resolveAnnotationValue(metadataObj, "openWorldHint", "openWorld"),
+                source: "mcp",
+            };
+        }
+    }
+    // Priority 4: Check _meta object (MCP spec allows arbitrary data here)
+    // Issue #155: Some servers may store annotations in _meta
+    if (extendedTool._meta) {
+        const metaObj = extendedTool._meta;
+        const metaReadOnly = resolveAnnotationValue(metaObj, "readOnlyHint", "readOnly");
+        const metaDestructive = resolveAnnotationValue(metaObj, "destructiveHint", "destructive");
+        if (metaReadOnly !== undefined || metaDestructive !== undefined) {
+            return {
+                readOnlyHint: metaReadOnly,
+                destructiveHint: metaDestructive,
+                title: metaObj.title,
+                description: tool.description,
+                idempotentHint: resolveAnnotationValue(metaObj, "idempotentHint", "idempotent"),
+                openWorldHint: resolveAnnotationValue(metaObj, "openWorldHint", "openWorld"),
                 source: "mcp",
             };
         }
     }
+    // Priority 5: Check annotations.hints (nested structure some servers use)
+    // Issue #155: Handle servers that nest hints inside annotations object
+    if (extendedTool.annotations) {
+        const hintsObj = extendedTool.annotations
+            .hints;
+        if (hintsObj) {
+            const hintsReadOnly = resolveAnnotationValue(hintsObj, "readOnlyHint", "readOnly");
+            const hintsDestructive = resolveAnnotationValue(hintsObj, "destructiveHint", "destructive");
+            if (hintsReadOnly !== undefined || hintsDestructive !== undefined) {
+                return {
+                    readOnlyHint: hintsReadOnly,
+                    destructiveHint: hintsDestructive,
+                    title: extendedTool.annotations.title,
+                    description: tool.description,
+                    idempotentHint: resolveAnnotationValue(hintsObj, "idempotentHint", "idempotent"),
+                    openWorldHint: resolveAnnotationValue(hintsObj, "openWorldHint", "openWorld"),
+                    source: "mcp",
+                };
+            }
+        }
+    }
     return {
         title: extendedTool.title,
         description: tool.description,

package/lib/services/assessment/modules/annotations/index.d.ts

@@ -16,7 +16,7 @@ export { analyzeDescription, hasReadOnlyIndicators, hasDestructiveIndicators, ha
 export { analyzeInputSchema, analyzeOutputSchema, hasBulkOperationIndicators, hasPaginationParameters, hasForceFlags, INPUT_READONLY_PATTERNS, INPUT_DESTRUCTIVE_PATTERNS, INPUT_WRITE_PATTERNS, OUTPUT_READONLY_PATTERNS, OUTPUT_DESTRUCTIVE_PATTERNS, OUTPUT_WRITE_PATTERNS, type JSONSchema, } from "./SchemaAnalyzer.js";
 export { detectArchitecture, hasDatabaseToolPatterns, extractDatabasesFromDependencies, type Tool as ArchitectureTool, type ArchitectureContext, } from "./ArchitectureDetector.js";
 export { type ClaudeInference, type EnhancedToolAnnotationResult, } from "./types.js";
-export { extractAnnotations, extractExtendedMetadata, extractToolParams, scanInputSchemaDescriptions, assessSingleTool, determineAnnotationStatus, calculateMetrics, type ExtractedAnnotations, type AlignmentMetricsResult, } from "./AlignmentChecker.js";
+export { extractAnnotations, extractExtendedMetadata, extractToolParams, scanInputSchemaDescriptions, assessSingleTool, determineAnnotationStatus, calculateMetrics, setAnnotationDebugMode, isAnnotationDebugEnabled, type ExtractedAnnotations, type AlignmentMetricsResult, } from "./AlignmentChecker.js";
 export { generateExplanation, generateEnhancedExplanation, generateRecommendations, generateEnhancedRecommendations, } from "./ExplanationGenerator.js";
 export { emitAnnotationEvents, emitMismatchEvent } from "./EventEmitter.js";
 export { enhanceWithClaudeInference, createPatternBasedInference, } from "./ClaudeIntegration.js";

package/lib/services/assessment/modules/annotations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,EAClC,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,IAAI,IAAI,gBAAgB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,SAAS,CAAC;AAIjB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGzE,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,EAClC,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,IAAI,IAAI,gBAAgB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,SAAS,CAAC;AAKjB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGzE,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC"}

package/lib/services/assessment/modules/annotations/index.js

@@ -20,7 +20,8 @@ export { analyzeInputSchema, analyzeOutputSchema, hasBulkOperationIndicators, ha
 export { detectArchitecture, hasDatabaseToolPatterns, extractDatabasesFromDependencies, } from "./ArchitectureDetector.js";
 // Issue #105: Alignment Checker
 // Issue #119: Added scanInputSchemaDescriptions for Challenge #15
-export { extractAnnotations, extractExtendedMetadata, extractToolParams, scanInputSchemaDescriptions, assessSingleTool, determineAnnotationStatus, calculateMetrics, } from "./AlignmentChecker.js";
+// Issue #155: Added setAnnotationDebugMode for debug logging
+export { extractAnnotations, extractExtendedMetadata, extractToolParams, scanInputSchemaDescriptions, assessSingleTool, determineAnnotationStatus, calculateMetrics, setAnnotationDebugMode, isAnnotationDebugEnabled, } from "./AlignmentChecker.js";
 // Issue #105: Explanation Generator
 export { generateExplanation, generateEnhancedExplanation, generateRecommendations, generateEnhancedRecommendations, } from "./ExplanationGenerator.js";
 // Issue #105: Event Emitter

package/lib/services/assessment/modules/securityTests/ConfidenceScorer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfidenceScorer.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/ConfidenceScorer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmCD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;;;;;;OAgBG;IACH,mBAAmB,CACjB,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,kBAAkB,CAAC,EAAE,2BAA2B,GAC/C,gBAAgB;IA4JnB;;;;;OAKG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;IAOxE;;;;;OAKG;IACH,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO;CAOtD"}
+{"version":3,"file":"ConfidenceScorer.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/ConfidenceScorer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmCD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;;;;;;OAgBG;IACH,mBAAmB,CACjB,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,kBAAkB,CAAC,EAAE,2BAA2B,GAC/C,gBAAgB;IAgMnB;;;;;OAKG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;IAOxE;;;;;OAKG;IACH,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO;CAOtD"}