@bryan-thompson/inspector-assessment 1.36.5 → 1.38.0

package/client/lib/services/assessment/modules/TemporalAssessor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TemporalAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/TemporalAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,uBAAuB,EAEvB,kBAAkB,EAGnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAiB9C,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,kBAAkB,CAAqB;IAG/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IAGjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAK;gBAE5B,MAAM,EAAE,uBAAuB;IAQrC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAqEvD,UAAU;IAuHxB,OAAO,CAAC,gBAAgB;IAkKxB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsC3B,OAAO,CAAC,uBAAuB;IAa/B,OAAO,CAAC,mBAAmB;IA+C3B,OAAO,CAAC,uBAAuB;CA+DhC"}
+{"version":3,"file":"TemporalAssessor.d.ts","sourceRoot":"","sources":["../../../../src/services/assessment/modules/TemporalAssessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,uBAAuB,EAEvB,kBAAkB,EAGnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAiB9C,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,kBAAkB,CAAqB;IAG/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IAGjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAK;gBAE5B,MAAM,EAAE,uBAAuB;IAQrC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAqEvD,UAAU;IAwHxB,OAAO,CAAC,gBAAgB;IA2LxB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsC3B,OAAO,CAAC,uBAAuB;IAa/B,OAAO,CAAC,mBAAmB;IA+C3B,OAAO,CAAC,uBAAuB;CA+DhC"}

package/client/lib/services/assessment/modules/TemporalAssessor.js

@@ -144,7 +144,8 @@ export class TemporalAssessor extends BaseAssessor {
             }
         }
         // Analyze responses for temporal behavior changes
-        const result = this.analyzeResponses(tool, responses);
+        // Issue #168: Pass context for external API dependency awareness
+        const result = this.analyzeResponses(tool, responses, context);
         // Analyze definitions for mutation (rug pull via description change)
         const definitionMutation = this.mutationDetector.detectDefinitionMutation(definitionSnapshots);
         return {
@@ -167,7 +168,7 @@ export class TemporalAssessor extends BaseAssessor {
             severity: definitionMutation !== null || result.vulnerable ? "HIGH" : "NONE",
         };
     }
-    analyzeResponses(tool, responses) {
+    analyzeResponses(tool, responses, context) {
         if (responses.length === 0) {
             return {
                 tool: tool.name,
@@ -205,6 +206,17 @@ export class TemporalAssessor extends BaseAssessor {
             else if (isStateful) {
                 // Original stateful tool logic: schema comparison + behavioral content check
                 // Content variance is allowed as long as schema is consistent
+                // Issue #166: Check for isError variance first (external API behavior)
+                // For stateful tools, error vs success responses are expected from external APIs
+                const baselineIsError = responses[0].response?.isError === true;
+                const currentIsError = responses[i].response?.isError === true;
+                // Issue #168: Check context-based detection first, fall back to VarianceClassifier
+                const isExternalAPI = context.externalAPIDependencies?.toolsWithExternalAPIDependency.has(tool.name) ?? this.varianceClassifier.isExternalAPITool(tool);
+                if (baselineIsError !== currentIsError && isExternalAPI) {
+                    // External API tool with error vs success variance - LEGITIMATE, not a deviation
+                    this.logger.info(`${tool.name}: API error vs success variance at invocation ${i + 1} (expected for external API)`);
+                    continue; // Skip to next invocation, don't count as deviation
+                }
                 let isDifferent = !this.varianceClassifier.compareSchemas(responses[0].response, responses[i].response);
                 // Secondary detection: Check for content semantic changes (rug pull patterns)
                 // This catches cases where schema is same but content shifts from helpful to harmful
@@ -222,7 +234,8 @@ export class TemporalAssessor extends BaseAssessor {
             else if (isResourceCreating) {
                 // Issue #69: Use variance classification for resource-creating tools
                 // These need intelligent classification to distinguish ID variance from rug pulls
-                const classification = this.varianceClassifier.classifyVariance(responses[0].response, responses[i].response);
+                // Issue #166: Pass tool for external API error variance handling
+                const classification = this.varianceClassifier.classifyVariance(responses[0].response, responses[i].response, tool);
                 varianceDetails.push({
                     invocation: i + 1,
                     classification,

package/client/lib/services/assessment/modules/annotations/AlignmentChecker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AlignmentChecker.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/AlignmentChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAuFxC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,kBAAkB,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AA0CD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,CAiNnE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,GACT,oBAAoB,CAAC,kBAAkB,CAAC,CA6D1C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,EAAE,CAqBtE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAmD3E;AAqCD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,CAAC,EAAE,wBAAwB,GAC5C,oBAAoB,CA0JtB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,gBAAgB,CA8BlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,sBAAsB,CA2BxB"}
+{"version":3,"file":"AlignmentChecker.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/AlignmentChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAuFxC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,kBAAkB,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AA0CD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,CAiNnE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,GACT,oBAAoB,CAAC,kBAAkB,CAAC,CA6D1C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,EAAE,CAqBtE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAmD3E;AAqCD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,CAAC,EAAE,wBAAwB,GAC5C,oBAAoB,CA0JtB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,gBAAgB,CAoClB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,oBAAoB,EAAE,EAC/B,UAAU,EAAE,MAAM,GACjB,sBAAsB,CA2BxB"}

package/client/lib/services/assessment/modules/annotations/AlignmentChecker.js

@@ -433,8 +433,12 @@ export function determineAnnotationStatus(results, totalTools) {
     if (totalTools === 0)
         return "PASS";
     const annotatedCount = results.filter((r) => r.hasAnnotations).length;
-    const poisonedCount = results.filter((r) => r.descriptionPoisoning?.detected === true).length;
-    if (poisonedCount > 0)
+    // Issue #167: Only fail for actionable poisoning (MEDIUM or HIGH risk)
+    // LOW risk (e.g., length-only) is informational and should not cause FAIL
+    const actionablePoisonedCount = results.filter((r) => r.descriptionPoisoning?.detected === true &&
+        (r.descriptionPoisoning.riskLevel === "MEDIUM" ||
+            r.descriptionPoisoning.riskLevel === "HIGH")).length;
+    if (actionablePoisonedCount > 0)
         return "FAIL";
     const misalignedCount = results.filter((r) => r.alignmentStatus === "MISALIGNED").length;
     const destructiveWithoutHint = results.filter((r) => r.inferredBehavior?.expectedDestructive === true &&

package/client/lib/services/assessment/modules/annotations/DescriptionPoisoningDetector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DescriptionPoisoningDetector.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/DescriptionPoisoningDetector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9C,oFAAoF;IACpF,aAAa,CAAC,EAAE;QACd,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;CACH;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,gBAAgB,EAwT5D,CAAC;AASF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CAoE3E"}
+{"version":3,"file":"DescriptionPoisoningDetector.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/annotations/DescriptionPoisoningDetector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9C,oFAAoF;IACpF,aAAa,CAAC,EAAE;QACd,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;CACH;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,gBAAgB,EAwT5D,CAAC;AASF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,mBAAmB,CA8E3E"}

package/client/lib/services/assessment/modules/annotations/DescriptionPoisoningDetector.js

@@ -318,6 +318,7 @@ export function scanDescriptionForPoisoning(tool) {
     const matches = [];
     // Length-based heuristic (Issue #119, Challenge #15)
     // Excessively long descriptions may be used to hide malicious content
+    // Issue #167: Length check moved AFTER pattern scan - severity depends on other patterns
     let lengthWarning;
     if (description.length > DESCRIPTION_LENGTH_WARNING_THRESHOLD) {
         lengthWarning = {
@@ -325,13 +326,7 @@ export function scanDescriptionForPoisoning(tool) {
             threshold: DESCRIPTION_LENGTH_WARNING_THRESHOLD,
             isExcessive: true,
         };
-        matches.push({
-            name: "excessive_description_length",
-            pattern: `length > ${DESCRIPTION_LENGTH_WARNING_THRESHOLD}`,
-            severity: "MEDIUM",
-            category: "suspicious_length",
-            evidence: `Description is ${description.length} characters (threshold: ${DESCRIPTION_LENGTH_WARNING_THRESHOLD})`,
-        });
+        // NOTE: matches.push moved to after pattern loop (Issue #167)
     }
     for (const patternDef of DESCRIPTION_POISONING_PATTERNS) {
         // Create a fresh regex to reset lastIndex
@@ -351,6 +346,20 @@ export function scanDescriptionForPoisoning(tool) {
                 break;
         }
     }
+    // Issue #167: Add length warning AFTER pattern scan with conditional severity
+    // Long descriptions alone are LOW (informational), but length + other patterns = MEDIUM
+    if (lengthWarning) {
+        const hasOtherPatterns = matches.length > 0;
+        matches.push({
+            name: "excessive_description_length",
+            pattern: `length > ${DESCRIPTION_LENGTH_WARNING_THRESHOLD}`,
+            severity: hasOtherPatterns ? "MEDIUM" : "LOW",
+            category: "suspicious_length",
+            evidence: hasOtherPatterns
+                ? `Description is ${description.length} characters AND contains ${matches.length} suspicious pattern(s)`
+                : `Description is ${description.length} characters (informational - no suspicious patterns detected)`,
+        });
+    }
     // Determine overall risk level based on highest severity match
     let riskLevel = "NONE";
     if (matches.some((m) => m.severity === "HIGH")) {

package/client/lib/services/assessment/modules/securityTests/AnnotationAwareSeverity.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Annotation-Aware Severity Adjustment
+ *
+ * Reduces false positives by considering tool annotations when scoring
+ * vulnerability severity.
+ *
+ * Issue #170: Security module should consider tool annotations to reduce
+ * false positives for read-only servers.
+ *
+ * @module securityTests/AnnotationAwareSeverity
+ */
+import type { SecurityAnnotations, SecurityRiskLevel } from "../../../../lib/assessment/coreTypes.js";
+/**
+ * Result of annotation-aware severity adjustment.
+ */
+export interface SeverityAdjustment {
+    /** Adjusted risk level after considering annotations */
+    adjustedRiskLevel: SecurityRiskLevel;
+    /** Whether an adjustment was made */
+    wasAdjusted: boolean;
+    /** Reason for adjustment (human-readable) */
+    adjustmentReason?: string;
+    /** Original risk level before adjustment */
+    originalRiskLevel: SecurityRiskLevel;
+}
+/**
+ * Adjust vulnerability severity based on tool annotations.
+ *
+ * This function implements the false positive reduction logic from Issue #170.
+ * Read-only tools (readOnlyHint=true) have execution-type vulnerabilities
+ * downgraded to LOW, and closed-world tools (openWorldHint=false) have
+ * exfiltration-type vulnerabilities downgraded to LOW.
+ *
+ * @param attackName - Name of the attack pattern (e.g., "Command Injection")
+ * @param originalRiskLevel - Original risk level from payload definition
+ * @param toolAnnotations - Extracted annotations for this specific tool
+ * @param serverIsReadOnly - Whether ALL server tools are read-only
+ * @param serverIsClosed - Whether ALL server tools are closed-world
+ * @returns SeverityAdjustment with potentially adjusted risk level
+ *
+ * @example
+ * ```typescript
+ * const adjustment = adjustSeverityForAnnotations(
+ *   "Command Injection",
+ *   "HIGH",
+ *   { readOnlyHint: true, source: "mcp" },
+ *   true,
+ *   false
+ * );
+ * // adjustment.wasAdjusted === true
+ * // adjustment.adjustedRiskLevel === "LOW"
+ * ```
+ */
+export declare function adjustSeverityForAnnotations(attackName: string, originalRiskLevel: SecurityRiskLevel, toolAnnotations: SecurityAnnotations | undefined, serverIsReadOnly: boolean, serverIsClosed: boolean): SeverityAdjustment;
+//# sourceMappingURL=AnnotationAwareSeverity.d.ts.map

package/client/lib/services/assessment/modules/securityTests/AnnotationAwareSeverity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnnotationAwareSeverity.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/AnnotationAwareSeverity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AA+BpC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wDAAwD;IACxD,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,qCAAqC;IACrC,WAAW,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,EAAE,mBAAmB,GAAG,SAAS,EAChD,gBAAgB,EAAE,OAAO,EACzB,cAAc,EAAE,OAAO,GACtB,kBAAkB,CA0DpB"}

package/client/lib/services/assessment/modules/securityTests/AnnotationAwareSeverity.js

@@ -0,0 +1,135 @@
+/**
+ * Annotation-Aware Severity Adjustment
+ *
+ * Reduces false positives by considering tool annotations when scoring
+ * vulnerability severity.
+ *
+ * Issue #170: Security module should consider tool annotations to reduce
+ * false positives for read-only servers.
+ *
+ * @module securityTests/AnnotationAwareSeverity
+ */
+/**
+ * Attack patterns that should be downgraded for read-only tools.
+ * These involve code/command execution which read-only tools cannot perform.
+ */
+const EXECUTION_TYPE_ATTACKS = [
+    "Command Injection", // RCE via shell commands
+    "Calculator Injection", // Code evaluation via calculator
+    "Code Execution", // Direct code execution
+    "Path Traversal", // File system modification
+    "Cross-Tool State Bypass", // State manipulation attacks
+    "Chained Exploitation", // Multi-tool execution chains
+    "Tool Output Injection", // Output tampering
+    "Nested Injection", // Recursive injection attacks
+    "Auth Bypass", // Authentication manipulation
+    "Session Management", // Session state modification
+];
+/**
+ * Attack patterns that should be downgraded for closed-world tools.
+ * These involve external network access which closed-world tools don't have.
+ */
+const EXFILTRATION_TYPE_ATTACKS = [
+    "Indirect Prompt Injection", // External content injection
+    "Data Exfiltration", // Data leakage to external services
+    "Token Theft", // Credential exfiltration
+    "Secret Leakage", // Sensitive data exposure
+    "SSRF", // Server-side request forgery
+];
+/**
+ * Adjust vulnerability severity based on tool annotations.
+ *
+ * This function implements the false positive reduction logic from Issue #170.
+ * Read-only tools (readOnlyHint=true) have execution-type vulnerabilities
+ * downgraded to LOW, and closed-world tools (openWorldHint=false) have
+ * exfiltration-type vulnerabilities downgraded to LOW.
+ *
+ * @param attackName - Name of the attack pattern (e.g., "Command Injection")
+ * @param originalRiskLevel - Original risk level from payload definition
+ * @param toolAnnotations - Extracted annotations for this specific tool
+ * @param serverIsReadOnly - Whether ALL server tools are read-only
+ * @param serverIsClosed - Whether ALL server tools are closed-world
+ * @returns SeverityAdjustment with potentially adjusted risk level
+ *
+ * @example
+ * ```typescript
+ * const adjustment = adjustSeverityForAnnotations(
+ *   "Command Injection",
+ *   "HIGH",
+ *   { readOnlyHint: true, source: "mcp" },
+ *   true,
+ *   false
+ * );
+ * // adjustment.wasAdjusted === true
+ * // adjustment.adjustedRiskLevel === "LOW"
+ * ```
+ */
+export function adjustSeverityForAnnotations(attackName, originalRiskLevel, toolAnnotations, serverIsReadOnly, serverIsClosed) {
+    // Check if we have valid per-tool annotations
+    const hasValidAnnotations = toolAnnotations && toolAnnotations.source !== "none";
+    // Check 1: Per-tool read-only for execution-type attacks
+    // If tool declares readOnlyHint=true, it cannot execute commands
+    if (hasValidAnnotations && toolAnnotations.readOnlyHint === true) {
+        if (isExecutionTypeAttack(attackName)) {
+            return {
+                adjustedRiskLevel: "LOW",
+                wasAdjusted: true,
+                adjustmentReason: `Tool has readOnlyHint=true; ${attackName} downgraded from ${originalRiskLevel} to LOW (cannot execute)`,
+                originalRiskLevel,
+            };
+        }
+    }
+    // Check 2: Per-tool closed-world for exfiltration-type attacks
+    // If tool declares openWorldHint=false, it cannot access external resources
+    if (hasValidAnnotations && toolAnnotations.openWorldHint === false) {
+        if (isExfiltrationType(attackName)) {
+            return {
+                adjustedRiskLevel: "LOW",
+                wasAdjusted: true,
+                adjustmentReason: `Tool has openWorldHint=false; ${attackName} downgraded from ${originalRiskLevel} to LOW (no external access)`,
+                originalRiskLevel,
+            };
+        }
+    }
+    // Check 3: Server-level read-only flag provides additional context
+    // Even if specific tool annotation is missing, server-level flag applies
+    if (serverIsReadOnly && isExecutionTypeAttack(attackName)) {
+        return {
+            adjustedRiskLevel: "LOW",
+            wasAdjusted: true,
+            adjustmentReason: `Server is 100% read-only; ${attackName} downgraded from ${originalRiskLevel} to LOW`,
+            originalRiskLevel,
+        };
+    }
+    // Check 4: Server-level closed flag
+    if (serverIsClosed && isExfiltrationType(attackName)) {
+        return {
+            adjustedRiskLevel: "LOW",
+            wasAdjusted: true,
+            adjustmentReason: `Server is 100% closed-world; ${attackName} downgraded from ${originalRiskLevel} to LOW`,
+            originalRiskLevel,
+        };
+    }
+    // No adjustment needed
+    return {
+        adjustedRiskLevel: originalRiskLevel,
+        wasAdjusted: false,
+        originalRiskLevel,
+    };
+}
+/**
+ * Check if attack name matches execution-type patterns.
+ * Only checks if attackName contains the pattern (not bidirectional)
+ * to prevent security bypass (e.g., "command" matching "Command Injection").
+ */
+function isExecutionTypeAttack(attackName) {
+    return EXECUTION_TYPE_ATTACKS.some((pattern) => attackName.toLowerCase().includes(pattern.toLowerCase()));
+}
+/**
+ * Check if attack name matches exfiltration-type patterns.
+ * Only checks if attackName contains the pattern (not bidirectional)
+ * to prevent security bypass.
+ */
+function isExfiltrationType(attackName) {
+    return EXFILTRATION_TYPE_ATTACKS.some((pattern) => attackName.toLowerCase().includes(pattern.toLowerCase()));
+}

package/client/lib/services/assessment/modules/securityTests/ErrorClassifier.d.ts

@@ -29,6 +29,20 @@ export declare class ErrorClassifier {
      * Check if caught exception indicates connection/server failure
      */
     isConnectionErrorFromException(error: unknown): boolean;
+    /**
+     * Check if response indicates transient error worth retrying.
+     * Transient errors (ECONNREFUSED, ETIMEDOUT, etc.) may resolve on retry.
+     * Permanent errors (unknown tool, unauthorized) will not.
+     *
+     * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+     */
+    isTransientError(response: CompatibilityCallToolResult): boolean;
+    /**
+     * Check if caught exception indicates transient error worth retrying.
+     *
+     * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+     */
+    isTransientErrorFromException(error: unknown): boolean;
     /**
      * Internal: Check if text indicates connection/server failure
      */

package/client/lib/services/assessment/modules/securityTests/ErrorClassifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ErrorClassifier.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/ErrorClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAQjF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IAKjE;;OAEG;IACH,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQvD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgBjC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,2BAA2B,GAAG,mBAAmB;IAKzE;;OAEG;IACH,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB;IAQ/D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,SAAS;IAsBlE;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;CAUtE"}
+{"version":3,"file":"ErrorClassifier.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/ErrorClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AASjF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IAKjE;;OAEG;IACH,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQvD;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IAKhE;;;;OAIG;IACH,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQtD;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgBjC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,2BAA2B,GAAG,mBAAmB;IAKzE;;OAEG;IACH,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB;IAQ/D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,SAAS;IAsBlE;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;CAUtE"}

package/client/lib/services/assessment/modules/securityTests/ErrorClassifier.js

@@ -5,7 +5,7 @@
  * Extracted from SecurityResponseAnalyzer.ts (Issue #53)
  * Handles: connection error detection, error classification, error info extraction
  */
-import { CONNECTION_ERROR_PATTERNS, ERROR_CLASSIFICATION_PATTERNS, matchesAny, hasMcpErrorPrefix, } from "./SecurityPatternLibrary.js";
+import { CONNECTION_ERROR_PATTERNS, ERROR_CLASSIFICATION_PATTERNS, matchesAny, hasMcpErrorPrefix, isTransientErrorPattern, } from "./SecurityPatternLibrary.js";
 /**
  * Classifies errors from tool responses and exceptions
  */
@@ -27,6 +27,29 @@ export class ErrorClassifier {
         }
         return false;
     }
+    /**
+     * Check if response indicates transient error worth retrying.
+     * Transient errors (ECONNREFUSED, ETIMEDOUT, etc.) may resolve on retry.
+     * Permanent errors (unknown tool, unauthorized) will not.
+     *
+     * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+     */
+    isTransientError(response) {
+        const text = this.extractResponseContent(response).toLowerCase();
+        return isTransientErrorPattern(text);
+    }
+    /**
+     * Check if caught exception indicates transient error worth retrying.
+     *
+     * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+     */
+    isTransientErrorFromException(error) {
+        if (error instanceof Error) {
+            const message = error.message.toLowerCase();
+            return isTransientErrorPattern(message);
+        }
+        return false;
+    }
     /**
      * Internal: Check if text indicates connection/server failure
      */

package/client/lib/services/assessment/modules/securityTests/SafeResponseDetector.d.ts

@@ -34,6 +34,12 @@ export declare class SafeResponseDetector {
      * Check if response is an HTTP error (Issue #26)
      */
     isHttpErrorResponse(responseText: string): boolean;
+    /**
+     * Check if response is an AppleScript syntax error (Issue #175)
+     * These errors should not be flagged as XXE vulnerabilities even when
+     * the XXE payload is echoed back in the error message.
+     */
+    isAppleScriptSyntaxError(responseText: string): boolean;
     /**
      * Check if response is just reflection (safe)
      * Two-layer defense: Match reflection patterns, verify NO execution evidence

package/client/lib/services/assessment/modules/securityTests/SafeResponseDetector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafeResponseDetector.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SafeResponseDetector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAgBjF;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,iBAAiB,CAA4B;;IAMrD;;OAEG;IACH,oBAAoB,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAQzE;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIlD;;;;;;OAMG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IA8EnD;;OAEG;IACH,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIrD;;OAEG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIjD;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IA0CrE;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;CAUtE"}
+{"version":3,"file":"SafeResponseDetector.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SafeResponseDetector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAiBjF;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,iBAAiB,CAA4B;;IAMrD;;OAEG;IACH,oBAAoB,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAQzE;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIlD;;;;OAIG;IACH,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIvD;;;;;;OAMG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IA8EnD;;OAEG;IACH,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIrD;;OAEG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAIjD;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO;IA0CrE;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;CAUtE"}

package/client/lib/services/assessment/modules/securityTests/SafeResponseDetector.js

@@ -5,7 +5,7 @@
  * Extracted from SecurityResponseAnalyzer.ts (Issue #53)
  * Handles: MCP validation, HTTP errors, reflection detection, validation rejection
  */
-import { VALIDATION_ERROR_PATTERNS, STATUS_PATTERNS, REFLECTION_PATTERNS, SEARCH_RESULT_PATTERNS, CREATION_PATTERNS, TEXT_REJECTION_PATTERNS, RESULT_REJECTION_PATTERNS, isHttpError, matchesAny, hasLLMInjectionMarkers, hasOutputInjectionVulnerability, } from "./SecurityPatternLibrary.js";
+import { VALIDATION_ERROR_PATTERNS, STATUS_PATTERNS, REFLECTION_PATTERNS, SEARCH_RESULT_PATTERNS, CREATION_PATTERNS, TEXT_REJECTION_PATTERNS, RESULT_REJECTION_PATTERNS, isHttpError, matchesAny, hasLLMInjectionMarkers, hasOutputInjectionVulnerability, isAppleScriptSyntaxError as isAppleScriptSyntaxErrorPattern, } from "./SecurityPatternLibrary.js";
 import { ExecutionArtifactDetector } from "./ExecutionArtifactDetector.js";
 /**
  * Detects safe response patterns indicating proper tool behavior
@@ -30,6 +30,14 @@ export class SafeResponseDetector {
     isHttpErrorResponse(responseText) {
         return isHttpError(responseText);
     }
+    /**
+     * Check if response is an AppleScript syntax error (Issue #175)
+     * These errors should not be flagged as XXE vulnerabilities even when
+     * the XXE payload is echoed back in the error message.
+     */
+    isAppleScriptSyntaxError(responseText) {
+        return isAppleScriptSyntaxErrorPattern(responseText);
+    }
     /**
      * Check if response is just reflection (safe)
      * Two-layer defense: Match reflection patterns, verify NO execution evidence

package/client/lib/services/assessment/modules/securityTests/SecurityPatternLibrary.d.ts

@@ -96,7 +96,7 @@ export declare const OUTPUT_INJECTION_METADATA: {
  */
 export declare const CONNECTION_ERROR_PATTERNS: {
     /** Unambiguous connection errors */
-    readonly unambiguous: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+    readonly unambiguous: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
     /** Only apply when response starts with MCP error prefix */
     readonly contextual: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
     /** MCP error prefix pattern */
@@ -111,6 +111,48 @@ export declare const ERROR_CLASSIFICATION_PATTERNS: {
     readonly server: RegExp;
     readonly protocol: RegExp;
 };
+/**
+ * Transient error patterns that are worth retrying.
+ * These indicate temporary network/server issues that may resolve.
+ * Used by: isTransientError(), isTransientErrorFromException()
+ *
+ * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+ */
+export declare const TRANSIENT_ERROR_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+/**
+ * Permanent error patterns that should NOT be retried.
+ * These indicate issues that will not resolve with retry.
+ * Used by: isTransientError() to short-circuit retry logic
+ *
+ * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+ */
+export declare const PERMANENT_ERROR_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
+/**
+ * Check if error text indicates a transient error worth retrying.
+ * @param text Error message or response text
+ * @returns true if error is transient and should be retried
+ */
+export declare function isTransientErrorPattern(text: string): boolean;
+/**
+ * Issue #175: AppleScript syntax error patterns to exclude from XXE detection
+ *
+ * AppleScript errors can trigger false positives when:
+ * 1. The tool returns an AppleScript syntax error (e.g., -2750 duplicate parameter)
+ * 2. The XXE payload is echoed back in the error message
+ * 3. XXE evidence patterns match "parameter" + "entity" combination
+ *
+ * These patterns detect AppleScript-specific errors by:
+ * - Error code ranges (-27xx, -25xx are AppleScript domain)
+ * - AppleScript-specific syntax error messages
+ * - Common AppleScript error patterns
+ */
+export declare const APPLESCRIPT_SYNTAX_ERROR_PATTERNS: RegExp[];
+/**
+ * Check if error text indicates an AppleScript syntax error (Issue #175)
+ * @param text Error message or response text
+ * @returns true if error is an AppleScript syntax error
+ */
+export declare function isAppleScriptSyntaxError(text: string): boolean;
 /**
  * Status patterns indicating safe response handling
  * Used by: isReflectionResponse()

package/client/lib/services/assessment/modules/securityTests/SecurityPatternLibrary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityPatternLibrary.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPatternLibrary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kEAAkE;;IAIlE,8DAA8D;;IAG9D,kCAAkC;;IAGlC,gCAAgC;;CAExB,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,2JAmB5B,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,2GAazB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,mFAU3B,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAWT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE7D;AAMD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,2LAuBvB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,iCAAiC;;IAejC,0DAA0D;;CAElD,CAAC;AAMX;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,2KA4BxB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,uDAAuD;;IAOvD,oDAAoD;;CAO5C,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,oCAAoC;;IAqBpC,4DAA4D;;IAW5D,+BAA+B;;CAEvB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;CAMhC,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,eAAe,mJAkBlB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,mBAAmB,2rBAwGtB,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc5B,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;EAiCjC,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAyB3B,CAAC;AAMX;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,iCAAiC,EAAE,oBAAoB,EA0FnE,CAAC;AAEF;;;;;;;;GAQG;AAKH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,IAAM,CAAC;AAMxC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,MAAM,EACN;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,CAgCxC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB5E;AAED,eAAO,MAAM,2BAA2B,EAAE,oBAAoB,EAuE7D,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,2FAWzB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,iBAAiB,mHAcpB,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,mFAU1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mDAM9B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,2DAO1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB,2DAO5B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,6BAA6B,yKAWhC,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,kBAAkB,mGAYrB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,QACO,CAAC;AAMhD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAC8B,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,2EAS3B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,oRA4B9B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;CAK7B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;IAClC,iCAAiC;;IAQjC,mDAAmD;;IAInD,gDAAgD;;IAIhD,oCAAoC;;IAEpC,6CAA6C;;CAIrC,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;IACpC,oDAAoD;;IAOpD,wCAAwC;;CAEhC,CAAC;AAMX;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAyB3B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAyB1B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,iLAarB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,mBAAmB,yEAOtB,CAAC;AAEX;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAMD;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKrE"}
+{"version":3,"file":"SecurityPatternLibrary.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/SecurityPatternLibrary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kEAAkE;;IAIlE,8DAA8D;;IAG9D,kCAAkC;;IAGlC,gCAAgC;;CAExB,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,2JAmB5B,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,2GAazB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,mFAU3B,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAWT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE7D;AAMD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,2LAuBvB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,iCAAiC;;IAejC,0DAA0D;;CAElD,CAAC;AAMX;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,2KA4BxB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,uDAAuD;;IAOvD,oDAAoD;;CAO5C,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,oCAAoC;;IAsBpC,4DAA4D;;IAW5D,+BAA+B;;CAEvB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;CAMhC,CAAC;AAMX;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mFAU3B,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mDAM3B,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,EAcrD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI9D;AAMD;;;GAGG;AACH,eAAO,MAAM,eAAe,mJAkBlB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,mBAAmB,2rBAwGtB,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc5B,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;EAiCjC,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAyB3B,CAAC;AAMX;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,iCAAiC,EAAE,oBAAoB,EA0FnE,CAAC;AAEF;;;;;;;;GAQG;AAKH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,IAAM,CAAC;AAMxC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,MAAM,EACN;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,CAgCxC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB5E;AAED,eAAO,MAAM,2BAA2B,EAAE,oBAAoB,EAuE7D,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,2FAWzB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,iBAAiB,mHAcpB,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,mFAU1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mDAM9B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB,2DAO1B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,yBAAyB,2DAO5B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,6BAA6B,yKAWhC,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,kBAAkB,mGAYrB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,QACO,CAAC;AAMhD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAC8B,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,2EAS3B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,2BAA2B,oRA4B9B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;CAK7B,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;IAClC,iCAAiC;;IAQjC,mDAAmD;;IAInD,gDAAgD;;IAIhD,oCAAoC;;IAEpC,6CAA6C;;CAIrC,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;IACpC,oDAAoD;;IAOpD,wCAAwC;;CAEhC,CAAC;AAMX;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAyB3B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAyB1B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB,iLAarB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,mBAAmB,yEAOtB,CAAC;AAEX;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAMD;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKrE"}

package/client/lib/services/assessment/modules/securityTests/SecurityPatternLibrary.js

@@ -244,11 +244,12 @@ export const CONNECTION_ERROR_PATTERNS = {
         /MCP error -32700/i,
         /socket hang up/i,
         /ECONNREFUSED/i,
+        /ECONNRESET/i, // Connection reset by peer (Node.js error code)
         /ETIMEDOUT/i,
         /network error/i,
         /ERR_CONNECTION/i,
         /fetch failed/i,
-        /connection reset/i,
+        /connection reset/i, // TCP reset (generic form)
         /error POSTing to endpoint/i,
         /error GETting.*endpoint/i,
         /service unavailable/i,
@@ -279,6 +280,91 @@ export const ERROR_CLASSIFICATION_PATTERNS = {
     protocol: /-32001/i,
 };
 // =============================================================================
+// TRANSIENT ERROR PATTERNS (Issue #157: Connection retry logic)
+// =============================================================================
+/**
+ * Transient error patterns that are worth retrying.
+ * These indicate temporary network/server issues that may resolve.
+ * Used by: isTransientError(), isTransientErrorFromException()
+ *
+ * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+ */
+export const TRANSIENT_ERROR_PATTERNS = [
+    /ECONNREFUSED/i, // Server temporarily down
+    /ECONNRESET/i, // Connection reset by peer (Node.js error code)
+    /ETIMEDOUT/i, // Network timeout
+    /socket hang up/i, // Connection dropped
+    /fetch failed/i, // Network layer failure
+    /connection reset/i, // TCP reset (generic form)
+    /gateway timeout/i, // Proxy/load balancer timeout
+    /service unavailable/i, // 503 response
+    /ERR_CONNECTION/i, // Browser-style connection errors
+];
+/**
+ * Permanent error patterns that should NOT be retried.
+ * These indicate issues that will not resolve with retry.
+ * Used by: isTransientError() to short-circuit retry logic
+ *
+ * @see https://github.com/triepod-ai/inspector-assessment/issues/157
+ */
+export const PERMANENT_ERROR_PATTERNS = [
+    /unknown tool:/i, // Tool doesn't exist
+    /no such tool/i, // Tool doesn't exist
+    /unauthorized/i, // Auth failure (won't change on retry)
+    /forbidden/i, // Permission denied (won't change on retry)
+    /invalid.*token/i, // Bad credentials
+];
+/**
+ * Check if error text indicates a transient error worth retrying.
+ * @param text Error message or response text
+ * @returns true if error is transient and should be retried
+ */
+export function isTransientErrorPattern(text) {
+    // Check for permanent errors first (never retry these)
+    if (matchesAny(PERMANENT_ERROR_PATTERNS, text)) {
+        return false;
+    }
+    // Check for transient errors
+    return matchesAny(TRANSIENT_ERROR_PATTERNS, text);
+}
+// =============================================================================
+// APPLESCRIPT SYNTAX ERROR PATTERNS (Issue #175)
+// =============================================================================
+/**
+ * Issue #175: AppleScript syntax error patterns to exclude from XXE detection
+ *
+ * AppleScript errors can trigger false positives when:
+ * 1. The tool returns an AppleScript syntax error (e.g., -2750 duplicate parameter)
+ * 2. The XXE payload is echoed back in the error message
+ * 3. XXE evidence patterns match "parameter" + "entity" combination
+ *
+ * These patterns detect AppleScript-specific errors by:
+ * - Error code ranges (-27xx, -25xx are AppleScript domain)
+ * - AppleScript-specific syntax error messages
+ * - Common AppleScript error patterns
+ */
+export const APPLESCRIPT_SYNTAX_ERROR_PATTERNS = [
+    // AppleScript error code ranges
+    /-27\d{2}/, // -2700 to -2799 (AppleScript errors)
+    /-25\d{2}/, // -2500 to -2599 (AppleScript/OSA errors)
+    // AppleScript-specific error messages
+    /syntax error:.*«class \d+»/i, // AppleScript class syntax error
+    /applescript.*syntax.*error/i, // Generic AppleScript syntax error
+    /osascript.*error/i, // osascript command errors
+    // Specific errors that might match XXE patterns
+    /parameter.*specified.*more than once/i, // -2750 duplicate parameter
+    /parameter.*is.*specified.*more/i, // Variant of above
+    /duplicate\s+parameter\s+specification/i, // Another variant
+];
+/**
+ * Check if error text indicates an AppleScript syntax error (Issue #175)
+ * @param text Error message or response text
+ * @returns true if error is an AppleScript syntax error
+ */
+export function isAppleScriptSyntaxError(text) {
+    return APPLESCRIPT_SYNTAX_ERROR_PATTERNS.some((pattern) => pattern.test(text));
+}
+// =============================================================================
 // REFLECTION PATTERNS (safe response detection)
 // =============================================================================
 /**