@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/scanner/index.js

@@ -0,0 +1,414 @@
+/**
+ * AgentScanner -- Discovery engine for AI agent definitions across platforms.
+ *
+ * Scans project directories to detect agent configurations from Claude Code,
+ * OpenAI, Cursor, and Gemini platforms. Determines governance status and
+ * capabilities for each discovered agent.
+ *
+ * GATE 9: T-146
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { createLogger } from '../util/log.js';
+const log = createLogger('agent-scanner');
+/**
+ * Governance markers that indicate an agent has governance controls applied.
+ * Presence of these in agent content or project structure raises governance status.
+ */
+const GOVERNANCE_MARKERS = [
+    'PERMISSIONS.md',
+    'governance-runtime',
+    'deny-by-default',
+    'tamper-detection',
+    'SHA-256',
+    'capability-bundle',
+    'cycle-lock',
+    'approval-queue',
+    'audit-log',
+    '@connexum/ai-governance',
+];
+/**
+ * Patterns that indicate agent capabilities from file content.
+ */
+const CAPABILITY_PATTERNS = [
+    { pattern: /\bBash\b/i, capability: 'bash' },
+    { pattern: /\bWebSearch\b/i, capability: 'web-search' },
+    { pattern: /\bWebFetch\b/i, capability: 'web-fetch' },
+    { pattern: /\bPlaywright\b|mcp__playwright/i, capability: 'browser' },
+    { pattern: /\bRead\b.*file|file.*\bRead\b/i, capability: 'file-read' },
+    { pattern: /\bEdit\b.*file|file.*\bEdit\b|Write.*file/i, capability: 'file-write' },
+    { pattern: /\bgit\b/i, capability: 'git' },
+    { pattern: /\bAPI\b.*key|api[_-]?key/i, capability: 'api-keys' },
+    { pattern: /\bdeploy\b/i, capability: 'deploy' },
+    { pattern: /\bexecute\b.*code|code.*\bexecute\b/i, capability: 'code-execution' },
+];
+export class AgentScanner {
+    /**
+     * Scan a project directory for agent definitions across all supported platforms.
+     */
+    scan(projectDir) {
+        const resolvedDir = path.resolve(projectDir);
+        log.info(`Scanning project directory: ${resolvedDir}`);
+        const agents = [];
+        // Check for governance infrastructure in the project
+        const hasGovernanceInfra = this.detectGovernanceInfrastructure(resolvedDir);
+        // Scan each platform
+        agents.push(...this.scanClaudeCode(resolvedDir, hasGovernanceInfra));
+        agents.push(...this.scanOpenAI(resolvedDir, hasGovernanceInfra));
+        agents.push(...this.scanCursor(resolvedDir, hasGovernanceInfra));
+        agents.push(...this.scanGemini(resolvedDir, hasGovernanceInfra));
+        const stats = this.computeStats(agents);
+        log.info(`Scan complete: ${stats.total} agents found`, {
+            governed: stats.governed,
+            partial: stats.partial,
+            ungoverned: stats.ungoverned,
+        });
+        return {
+            agents,
+            projectDir: resolvedDir,
+            scannedAt: new Date().toISOString(),
+            stats,
+        };
+    }
+    /**
+     * Detect whether the project has governance infrastructure installed.
+     */
+    detectGovernanceInfrastructure(projectDir) {
+        const markers = new Set();
+        // Check for .claude/permissions/ directory
+        const permDir = path.join(projectDir, '.claude', 'permissions');
+        if (fs.existsSync(permDir)) {
+            markers.add('permissions-dir');
+        }
+        // Check for governance config files
+        const governanceFiles = [
+            path.join(projectDir, '.claude', 'governance.json'),
+            path.join(projectDir, '.governance', 'config.json'),
+            path.join(projectDir, 'governance.config.json'),
+        ];
+        for (const f of governanceFiles) {
+            if (fs.existsSync(f)) {
+                markers.add('governance-config');
+                break;
+            }
+        }
+        // Check for hooks directory
+        const hooksDir = path.join(projectDir, '.claude', 'hooks');
+        if (fs.existsSync(hooksDir)) {
+            markers.add('hooks');
+        }
+        // Check CLAUDE.md for governance references
+        const claudeMd = path.join(projectDir, 'CLAUDE.md');
+        if (fs.existsSync(claudeMd)) {
+            try {
+                const content = fs.readFileSync(claudeMd, 'utf-8');
+                for (const marker of GOVERNANCE_MARKERS) {
+                    if (content.includes(marker)) {
+                        markers.add(`claude-md:${marker}`);
+                    }
+                }
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+        return markers;
+    }
+    /**
+     * Scan for Claude Code agent definitions.
+     */
+    scanClaudeCode(projectDir, infraMarkers) {
+        const agents = [];
+        // 1. Scan .claude/agents/*.md
+        const agentsDir = path.join(projectDir, '.claude', 'agents');
+        if (fs.existsSync(agentsDir)) {
+            try {
+                const files = fs.readdirSync(agentsDir).filter(f => f.endsWith('.md'));
+                for (const file of files) {
+                    const filePath = path.join(agentsDir, file);
+                    const name = path.basename(file, '.md');
+                    const content = this.safeReadFile(filePath);
+                    const capabilities = this.extractCapabilities(content);
+                    const governanceStatus = this.assessGovernanceStatus(content, infraMarkers, name, projectDir);
+                    agents.push({
+                        name,
+                        platform: 'claude',
+                        filePath,
+                        governanceStatus,
+                        capabilities,
+                    });
+                }
+            }
+            catch {
+                log.warn(`Failed to read agents directory: ${agentsDir}`);
+            }
+        }
+        // 2. Check CLAUDE.md for inline agent definitions
+        const claudeMd = path.join(projectDir, 'CLAUDE.md');
+        if (fs.existsSync(claudeMd)) {
+            const content = this.safeReadFile(claudeMd);
+            if (content && this.containsAgentDefinitions(content)) {
+                const capabilities = this.extractCapabilities(content);
+                const governanceStatus = this.assessGovernanceStatus(content, infraMarkers, 'claude-md', projectDir);
+                agents.push({
+                    name: 'claude-md-config',
+                    platform: 'claude',
+                    filePath: claudeMd,
+                    governanceStatus,
+                    capabilities,
+                });
+            }
+        }
+        // 3. Check .claude/settings.json
+        const settingsJson = path.join(projectDir, '.claude', 'settings.json');
+        if (fs.existsSync(settingsJson)) {
+            const content = this.safeReadFile(settingsJson);
+            if (content) {
+                try {
+                    const settings = JSON.parse(content);
+                    if (settings.agents || settings.permissions || settings.tools) {
+                        const capabilities = this.extractSettingsCapabilities(settings);
+                        agents.push({
+                            name: 'claude-settings',
+                            platform: 'claude',
+                            filePath: settingsJson,
+                            governanceStatus: infraMarkers.size > 2 ? 'partial' : 'ungoverned',
+                            capabilities,
+                        });
+                    }
+                }
+                catch {
+                    // Invalid JSON, skip
+                }
+            }
+        }
+        return agents;
+    }
+    /**
+     * Scan for OpenAI agent definitions.
+     */
+    scanOpenAI(projectDir, infraMarkers) {
+        const agents = [];
+        // Check .openai/ directory
+        const openaiDir = path.join(projectDir, '.openai');
+        if (fs.existsSync(openaiDir)) {
+            try {
+                const files = fs.readdirSync(openaiDir).filter(f => f.endsWith('.json') || f.endsWith('.yaml') || f.endsWith('.yml'));
+                for (const file of files) {
+                    const filePath = path.join(openaiDir, file);
+                    const name = path.basename(file, path.extname(file));
+                    const content = this.safeReadFile(filePath);
+                    const capabilities = this.extractCapabilities(content);
+                    agents.push({
+                        name,
+                        platform: 'openai',
+                        filePath,
+                        governanceStatus: 'ungoverned',
+                        capabilities,
+                    });
+                }
+            }
+            catch {
+                log.warn(`Failed to read OpenAI directory: ${openaiDir}`);
+            }
+        }
+        // Check openai.json in project root
+        const openaiJson = path.join(projectDir, 'openai.json');
+        if (fs.existsSync(openaiJson)) {
+            const content = this.safeReadFile(openaiJson);
+            const capabilities = this.extractCapabilities(content);
+            agents.push({
+                name: 'openai-config',
+                platform: 'openai',
+                filePath: openaiJson,
+                governanceStatus: 'ungoverned',
+                capabilities,
+            });
+        }
+        return agents;
+    }
+    /**
+     * Scan for Cursor agent definitions.
+     */
+    scanCursor(projectDir, infraMarkers) {
+        const agents = [];
+        // Check .cursor/ directory
+        const cursorDir = path.join(projectDir, '.cursor');
+        if (fs.existsSync(cursorDir)) {
+            try {
+                const files = fs.readdirSync(cursorDir).filter(f => f.endsWith('.json') || f.endsWith('.md') || f === 'rules');
+                for (const file of files) {
+                    const filePath = path.join(cursorDir, file);
+                    // Skip if it's a directory (like rules/)
+                    if (fs.statSync(filePath).isDirectory())
+                        continue;
+                    const name = path.basename(file, path.extname(file));
+                    const content = this.safeReadFile(filePath);
+                    const capabilities = this.extractCapabilities(content);
+                    agents.push({
+                        name: `cursor-${name}`,
+                        platform: 'cursor',
+                        filePath,
+                        governanceStatus: 'ungoverned',
+                        capabilities,
+                    });
+                }
+            }
+            catch {
+                log.warn(`Failed to read Cursor directory: ${cursorDir}`);
+            }
+        }
+        // Check .cursorrules in project root
+        const cursorRules = path.join(projectDir, '.cursorrules');
+        if (fs.existsSync(cursorRules)) {
+            const content = this.safeReadFile(cursorRules);
+            const capabilities = this.extractCapabilities(content);
+            agents.push({
+                name: 'cursorrules',
+                platform: 'cursor',
+                filePath: cursorRules,
+                governanceStatus: 'ungoverned',
+                capabilities,
+            });
+        }
+        return agents;
+    }
+    /**
+     * Scan for Gemini agent definitions.
+     */
+    scanGemini(projectDir, infraMarkers) {
+        const agents = [];
+        // Check .gemini/ directory
+        const geminiDir = path.join(projectDir, '.gemini');
+        if (fs.existsSync(geminiDir)) {
+            try {
+                const files = fs.readdirSync(geminiDir).filter(f => f.endsWith('.json') || f.endsWith('.yaml') || f.endsWith('.yml') || f.endsWith('.md'));
+                for (const file of files) {
+                    const filePath = path.join(geminiDir, file);
+                    if (fs.statSync(filePath).isDirectory())
+                        continue;
+                    const name = path.basename(file, path.extname(file));
+                    const content = this.safeReadFile(filePath);
+                    const capabilities = this.extractCapabilities(content);
+                    agents.push({
+                        name: `gemini-${name}`,
+                        platform: 'gemini',
+                        filePath,
+                        governanceStatus: 'ungoverned',
+                        capabilities,
+                    });
+                }
+            }
+            catch {
+                log.warn(`Failed to read Gemini directory: ${geminiDir}`);
+            }
+        }
+        return agents;
+    }
+    /**
+     * Determine governance status for a Claude Code agent.
+     */
+    assessGovernanceStatus(content, infraMarkers, agentName, projectDir) {
+        let agentScore = 0; // Score from agent-specific evidence
+        let infraScore = 0; // Score from project-level infrastructure
+        // Check for agent-specific permissions file (strong signal)
+        const permFile = path.join(projectDir, '.claude', 'permissions', `${agentName}.md`);
+        if (fs.existsSync(permFile)) {
+            agentScore += 4;
+        }
+        // Check content for governance markers
+        for (const marker of GOVERNANCE_MARKERS) {
+            if (content.toLowerCase().includes(marker.toLowerCase())) {
+                agentScore += 1;
+            }
+        }
+        // Infrastructure markers provide partial credit only
+        if (infraMarkers.has('permissions-dir'))
+            infraScore += 1;
+        if (infraMarkers.has('governance-config'))
+            infraScore += 1;
+        if (infraMarkers.has('hooks'))
+            infraScore += 1;
+        // Agent-specific evidence is required for elevated governance status.
+        // Infrastructure alone cannot classify an agent as governed or partial.
+        const totalScore = agentScore + infraScore;
+        if (agentScore >= 3 && totalScore >= 5)
+            return 'governed';
+        if (agentScore >= 1 && totalScore >= 3)
+            return 'partial';
+        return 'ungoverned';
+    }
+    /**
+     * Extract capabilities from agent file content.
+     */
+    extractCapabilities(content) {
+        const capabilities = [];
+        for (const { pattern, capability } of CAPABILITY_PATTERNS) {
+            if (pattern.test(content)) {
+                capabilities.push(capability);
+            }
+        }
+        return [...new Set(capabilities)];
+    }
+    /**
+     * Extract capabilities from a parsed settings JSON object.
+     */
+    extractSettingsCapabilities(settings) {
+        const capabilities = [];
+        if (settings.tools && Array.isArray(settings.tools)) {
+            capabilities.push(...settings.tools.map((t) => typeof t === 'string' ? t : String(t)));
+        }
+        if (settings.allowedTools && Array.isArray(settings.allowedTools)) {
+            capabilities.push(...settings.allowedTools.map((t) => typeof t === 'string' ? t : String(t)));
+        }
+        return [...new Set(capabilities)];
+    }
+    /**
+     * Check if CLAUDE.md content contains agent-like definitions.
+     */
+    containsAgentDefinitions(content) {
+        const agentPatterns = [
+            /agent[s]?\s*:/i,
+            /## Agent/i,
+            /role\s*:/i,
+            /capabilities\s*:/i,
+            /tools\s*:/i,
+            /permissions\s*:/i,
+        ];
+        let matchCount = 0;
+        for (const pattern of agentPatterns) {
+            if (pattern.test(content))
+                matchCount++;
+        }
+        return matchCount >= 2;
+    }
+    /**
+     * Safely read a file, returning empty string on failure.
+     */
+    safeReadFile(filePath) {
+        try {
+            return fs.readFileSync(filePath, 'utf-8');
+        }
+        catch {
+            return '';
+        }
+    }
+    /**
+     * Compute aggregate statistics from discovered agents.
+     */
+    computeStats(agents) {
+        return {
+            total: agents.length,
+            governed: agents.filter(a => a.governanceStatus === 'governed').length,
+            partial: agents.filter(a => a.governanceStatus === 'partial').length,
+            ungoverned: agents.filter(a => a.governanceStatus === 'ungoverned').length,
+        };
+    }
+}
+// DA-MED-NEW-1 (P1H-01b): re-export the manifest-integrity rule class so
+// consumers of `@connexum/ai-governance/scanner` can run the MANI rules
+// without reaching into an internal path.
+export { evaluateManifest, evaluateManifests, } from './manifest-integrity.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/scanner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AA0C1C;;;GAGG;AACH,MAAM,kBAAkB,GAAG;IACzB,gBAAgB;IAChB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,SAAS;IACT,mBAAmB;IACnB,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,yBAAyB;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAmD;IAC1E,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5C,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE;IACrD,EAAE,OAAO,EAAE,iCAAiC,EAAE,UAAU,EAAE,SAAS,EAAE;IACrE,EAAE,OAAO,EAAE,gCAAgC,EAAE,UAAU,EAAE,WAAW,EAAE;IACtE,EAAE,OAAO,EAAE,4CAA4C,EAAE,UAAU,EAAE,YAAY,EAAE;IACnF,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE;IAC1C,EAAE,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,UAAU,EAAE;IAChE,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE;IAChD,EAAE,OAAO,EAAE,sCAAsC,EAAE,UAAU,EAAE,gBAAgB,EAAE;CAClF,CAAC;AAEF,MAAM,OAAO,YAAY;IACvB;;OAEG;IACH,IAAI,CAAC,UAAkB;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,qDAAqD;QACrD,MAAM,kBAAkB,GAAG,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,CAAC;QAE5E,qBAAqB;QACrB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAExC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,KAAK,eAAe,EAAE;YACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,8BAA8B,CAAC,UAAkB;QACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,2CAA2C;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;QAED,oCAAoC;QACpC,MAAM,eAAe,GAAG;YACtB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,iBAAiB,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC;SAChD,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACjC,MAAM;YACR,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;oBACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,UAAkB,EAAE,YAAyB;QAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,8BAA8B;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;oBAE9F,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI;wBACJ,QAAQ,EAAE,QAAQ;wBAClB,QAAQ;wBACR,gBAAgB;wBAChB,YAAY;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,OAAO,IAAI,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;gBAErG,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,QAAQ;oBAClB,gBAAgB;oBAChB,YAAY;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrC,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;wBAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;wBAChE,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,iBAAiB;4BACvB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,YAAY;4BACtB,gBAAgB,EAAE,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;4BAClE,YAAY;yBACb,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,UAAkB,EAAE,YAAyB;QAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACjE,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAEvD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI;wBACJ,QAAQ,EAAE,QAAQ;wBAClB,QAAQ;wBACR,gBAAgB,EAAE,YAAY;wBAC9B,YAAY;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,gBAAgB,EAAE,YAAY;gBAC9B,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,UAAkB,EAAE,YAAyB;QAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAC1D,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC5C,yCAAyC;oBACzC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;wBAAE,SAAS;oBAElD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAEvD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU,IAAI,EAAE;wBACtB,QAAQ,EAAE,QAAQ;wBAClB,QAAQ;wBACR,gBAAgB,EAAE,YAAY;wBAC9B,YAAY;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,WAAW;gBACrB,gBAAgB,EAAE,YAAY;gBAC9B,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,UAAkB,EAAE,YAAyB;QAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtF,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;wBAAE,SAAS;oBAElD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAEvD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU,IAAI,EAAE;wBACtB,QAAQ,EAAE,QAAQ;wBAClB,QAAQ;wBACR,gBAAgB,EAAE,YAAY;wBAC9B,YAAY;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,OAAe,EACf,YAAyB,EACzB,SAAiB,EACjB,UAAkB;QAElB,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,qCAAqC;QACzD,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,0CAA0C;QAE9D,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC;QACpF,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;QAED,uCAAuC;QACvC,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzD,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC;QACzD,IAAI,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC;QAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC;QAE/C,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;QAE3C,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAC1D,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACzD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,OAAe;QACzC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,mBAAmB,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,2BAA2B,CAAC,QAAiC;QACnE,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,IAAI,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CACrD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAC5D,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CACtC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,OAAe;QAC9C,MAAM,aAAa,GAAG;YACpB,gBAAgB;YAChB,WAAW;YACX,WAAW;YACX,mBAAmB;YACnB,YAAY;YACZ,kBAAkB;SACnB,CAAC;QAEF,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,UAAU,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgB;QACnC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAyB;QAC5C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,MAAM;YACtE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,MAAM;YACpE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,YAAY,CAAC,CAAC,MAAM;SAC3E,CAAC;IACJ,CAAC;CACF;AAED,yEAAyE;AACzE,wEAAwE;AACxE,0CAA0C;AAC1C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAIlB,MAAM,sBAAsB,CAAC"}

package/dist/esm/scanner/manifest-integrity.js

@@ -0,0 +1,151 @@
+/**
+ * DA-MED-NEW-1 (P1H-01b): Manifest-integrity scanner rule class.
+ *
+ * Customer-facing scanner rules that detect the same defect class that
+ * caused Claude Code's subagent loader to silently drop 19/20 agents on
+ * 2026-04-21: agent manifests with missing required fields, invalid
+ * field values, or name/filename mismatches. Each finding is HIGH
+ * severity.
+ *
+ * Rule IDs:
+ *   - MANI-001: Missing required field (name, description, tools, role)
+ *   - MANI-002: Invalid field type (e.g. tools is a string when an array
+ *     is required, platform is not a recognised enum member)
+ *   - MANI-003: Name / filename mismatch (`foo.md` has `name: bar` in
+ *     front-matter, a source of silent drops when the loader indexes
+ *     by filename and dispatches by name)
+ *
+ * @connexum/ai-governance
+ */
+import { createLogger } from '../util/log.js';
+const log = createLogger('manifest-integrity');
+/** Required front-matter fields for a Claude Code `.claude/agents/*.md` file. */
+const REQUIRED_FIELDS = [
+    'name',
+    'description',
+    'tools',
+    'role',
+];
+/** Permitted enum values for the `platform` field, when present. */
+const PLATFORM_ENUM = [
+    'Claude', 'OpenAI', 'Gemini', 'DeepSeek', 'Microsoft', 'Amazon', 'Meta', 'Other',
+];
+function filenameNoExt(file) {
+    const base = file.split('/').pop() ?? file;
+    const dot = base.lastIndexOf('.');
+    return dot > 0 ? base.slice(0, dot) : base;
+}
+/**
+ * Run the three manifest-integrity rules against a single parsed manifest.
+ * Returns every finding; callers can filter by severity or rule ID.
+ */
+export function evaluateManifest(input) {
+    const findings = [];
+    const { file, manifest } = input;
+    // MANI-001: the manifest itself is missing
+    if (!manifest || typeof manifest !== 'object') {
+        findings.push({
+            ruleId: 'MANI-001',
+            severity: 'HIGH',
+            field: null,
+            file,
+            message: 'Manifest is empty or not a valid object. Front-matter may have failed to parse.',
+            remediation: 'Add a YAML front-matter block at the top of the file with `name`, ' +
+                '`description`, `tools`, and `role` fields. Without a valid manifest, ' +
+                'the subagent loader may silently drop this agent.',
+        });
+        return findings;
+    }
+    // MANI-001: required field presence
+    for (const field of REQUIRED_FIELDS) {
+        const v = manifest[field];
+        if (v === undefined || v === null || v === '') {
+            findings.push({
+                ruleId: 'MANI-001',
+                severity: 'HIGH',
+                field,
+                file,
+                message: `Required manifest field "${field}" is missing or empty.`,
+                remediation: `Add the "${field}" field to the front-matter. Loaders that ` +
+                    'index by presence of required fields silently skip agents when ' +
+                    'a required field is absent, resulting in attribution drift.',
+            });
+        }
+    }
+    // MANI-002: invalid field types
+    const nameVal = manifest.name;
+    if (nameVal !== undefined && (typeof nameVal !== 'string' || String(nameVal).length === 0)) {
+        findings.push({
+            ruleId: 'MANI-002',
+            severity: 'HIGH',
+            field: 'name',
+            file,
+            message: `Field "name" must be a non-empty string, got ${typeof nameVal}.`,
+            remediation: 'Set `name: "<agent-name>"` in the front-matter as a plain string.',
+        });
+    }
+    const descVal = manifest.description;
+    if (descVal !== undefined && typeof descVal !== 'string') {
+        findings.push({
+            ruleId: 'MANI-002',
+            severity: 'HIGH',
+            field: 'description',
+            file,
+            message: `Field "description" must be a string, got ${typeof descVal}.`,
+            remediation: 'Quote the description as a single-line string.',
+        });
+    }
+    const toolsVal = manifest.tools;
+    if (toolsVal !== undefined && !Array.isArray(toolsVal) && typeof toolsVal !== 'string') {
+        findings.push({
+            ruleId: 'MANI-002',
+            severity: 'HIGH',
+            field: 'tools',
+            file,
+            message: `Field "tools" must be an array or comma-separated string, got ${typeof toolsVal}.`,
+            remediation: 'Use either `tools: [Read, Edit]` or `tools: "Read, Edit"`.',
+        });
+    }
+    const platformVal = manifest.platform;
+    if (platformVal !== undefined) {
+        if (typeof platformVal !== 'string' || !PLATFORM_ENUM.includes(platformVal)) {
+            findings.push({
+                ruleId: 'MANI-002',
+                severity: 'HIGH',
+                field: 'platform',
+                file,
+                message: `Field "platform" must be one of: ${PLATFORM_ENUM.join(', ')}.`,
+                remediation: 'Set the platform enum explicitly. An unrecognised platform ' +
+                    'leaves registry identity ambiguous and can route attribution ' +
+                    'to the wrong provider.',
+            });
+        }
+    }
+    // MANI-003: name / filename mismatch
+    const fileBase = filenameNoExt(file);
+    if (typeof nameVal === 'string' && nameVal.length > 0 && fileBase.length > 0) {
+        if (nameVal !== fileBase) {
+            findings.push({
+                ruleId: 'MANI-003',
+                severity: 'HIGH',
+                field: 'name',
+                file,
+                message: `Manifest name "${nameVal}" does not match filename "${fileBase}". ` +
+                    'Loaders that index by filename and dispatch by name will silently ' +
+                    'drop this agent.',
+                remediation: `Rename the file to "${nameVal}.md" OR change the manifest name ` +
+                    `field to "${fileBase}". The two must be identical so the loader ` +
+                    'can resolve the same identity on index and dispatch.',
+            });
+        }
+    }
+    log.debug(`Evaluated manifest ${file}: ${findings.length} finding(s)`);
+    return findings;
+}
+/**
+ * Convenience: evaluate many manifests and return a flat list of findings.
+ */
+export function evaluateManifests(inputs) {
+    return inputs.flatMap((i) => evaluateManifest(i));
+}
+//# sourceMappingURL=manifest-integrity.js.map

package/dist/esm/scanner/manifest-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-integrity.js","sourceRoot":"","sources":["../../../src/scanner/manifest-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAoB/C,iFAAiF;AACjF,MAAM,eAAe,GAAsB;IACzC,MAAM;IACN,aAAa;IACb,OAAO;IACP,MAAM;CACP,CAAC;AAEF,oEAAoE;AACpE,MAAM,aAAa,GAAsB;IACvC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;CACjF,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACnD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAEjC,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI;YACX,IAAI;YACJ,OAAO,EAAE,iFAAiF;YAC1F,WAAW,EACT,oEAAoE;gBACpE,uEAAuE;gBACvE,mDAAmD;SACtD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,GAAI,QAAoC,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,MAAM;gBAChB,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,4BAA4B,KAAK,wBAAwB;gBAClE,WAAW,EACT,YAAY,KAAK,4CAA4C;oBAC7D,iEAAiE;oBACjE,6DAA6D;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAI,QAAoC,CAAC,IAAI,CAAC;IAC3D,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,MAAM;YACb,IAAI;YACJ,OAAO,EAAE,gDAAgD,OAAO,OAAO,GAAG;YAC1E,WAAW,EAAE,mEAAmE;SACjF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAI,QAAoC,CAAC,WAAW,CAAC;IAClE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,aAAa;YACpB,IAAI;YACJ,OAAO,EAAE,6CAA6C,OAAO,OAAO,GAAG;YACvE,WAAW,EAAE,gDAAgD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAI,QAAoC,CAAC,KAAK,CAAC;IAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACvF,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,OAAO;YACd,IAAI;YACJ,OAAO,EAAE,iEAAiE,OAAO,QAAQ,GAAG;YAC5F,WAAW,EAAE,4DAA4D;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAI,QAAoC,CAAC,QAAQ,CAAC;IACnE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,UAAU;gBACjB,IAAI;gBACJ,OAAO,EAAE,oCAAoC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACxE,WAAW,EACT,6DAA6D;oBAC7D,+DAA+D;oBAC/D,wBAAwB;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;gBACb,IAAI;gBACJ,OAAO,EACL,kBAAkB,OAAO,8BAA8B,QAAQ,KAAK;oBACpE,oEAAoE;oBACpE,kBAAkB;gBACpB,WAAW,EACT,uBAAuB,OAAO,mCAAmC;oBACjE,aAAa,QAAQ,6CAA6C;oBAClE,sDAAsD;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,KAAK,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}