@inkog-io/mcp 1.0.0 → 1.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api/client.d.ts +7 -6
- package/dist/api/client.d.ts.map +1 -1
- package/dist/api/client.js +28 -23
- package/dist/api/client.js.map +1 -1
- package/dist/api/types.d.ts +278 -135
- package/dist/api/types.d.ts.map +1 -1
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +22 -3
- package/dist/config.js.map +1 -1
- package/dist/tools/audit-a2a.d.ts.map +1 -1
- package/dist/tools/audit-a2a.js +219 -123
- package/dist/tools/audit-a2a.js.map +1 -1
- package/dist/tools/audit-mcp.d.ts.map +1 -1
- package/dist/tools/audit-mcp.js +114 -68
- package/dist/tools/audit-mcp.js.map +1 -1
- package/dist/tools/compliance.d.ts.map +1 -1
- package/dist/tools/compliance.js +199 -38
- package/dist/tools/compliance.js.map +1 -1
- package/dist/tools/explain.d.ts.map +1 -1
- package/dist/tools/explain.js +67 -42
- package/dist/tools/explain.js.map +1 -1
- package/dist/tools/governance.d.ts.map +1 -1
- package/dist/tools/governance.js +174 -39
- package/dist/tools/governance.js.map +1 -1
- package/dist/tools/mlbom.d.ts.map +1 -1
- package/dist/tools/mlbom.js +162 -142
- package/dist/tools/mlbom.js.map +1 -1
- package/dist/tools/scan.d.ts.map +1 -1
- package/dist/tools/scan.js +63 -10
- package/dist/tools/scan.js.map +1 -1
- package/package.json +1 -1
package/dist/api/client.d.ts
CHANGED
|
@@ -54,19 +54,20 @@ export declare class InkogClient {
|
|
|
54
54
|
}): Promise<ScanResponse>;
|
|
55
55
|
/**
|
|
56
56
|
* Verify AGENTS.md governance declarations against actual code.
|
|
57
|
-
*
|
|
57
|
+
* IMPORTANT: Requires a scanId from a previous scan. Direct file upload is only
|
|
58
|
+
* supported via multipart form with an AGENTS.md file.
|
|
58
59
|
*/
|
|
59
|
-
verifyGovernance(
|
|
60
|
-
scanId
|
|
60
|
+
verifyGovernance(options: {
|
|
61
|
+
scanId: string;
|
|
61
62
|
}): Promise<GovernanceVerifyResponse>;
|
|
62
63
|
/**
|
|
63
64
|
* Generate compliance report for a regulatory framework.
|
|
64
|
-
*
|
|
65
|
+
* IMPORTANT: Requires a scanId from a previous scan.
|
|
65
66
|
*/
|
|
66
|
-
generateComplianceReport(
|
|
67
|
+
generateComplianceReport(options: {
|
|
68
|
+
scanId: string;
|
|
67
69
|
framework?: ComplianceFramework | 'all';
|
|
68
70
|
format?: 'markdown' | 'json' | 'pdf';
|
|
69
|
-
scanId?: string;
|
|
70
71
|
}): Promise<ComplianceReportResponse>;
|
|
71
72
|
/**
|
|
72
73
|
* Get detailed explanation and remediation for a finding or pattern
|
package/dist/api/client.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,MAAM,EAGZ,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EAEX,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM;aAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,qBAAa,cAAe,SAAQ,aAAa;gBACnC,OAAO,SAAmE;CAIvF;AAED,qBAAa,mBAAoB,SAAQ,aAAa;aAElC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAClC,OAAO,SAAwB;CAKlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,KAAK,CAAC,EAAE,KAAK;gBAD7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,KAAK,YAAA;CAKhC;AAeD,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM;IAKrD;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;YACW,OAAO;
|
|
1
|
+
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,MAAM,EAGZ,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EAEX,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM;aAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,qBAAa,cAAe,SAAQ,aAAa;gBACnC,OAAO,SAAmE;CAIvF;AAED,qBAAa,mBAAoB,SAAQ,aAAa;aAElC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAClC,OAAO,SAAwB;CAKlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,KAAK,CAAC,EAAE,KAAK;gBAD7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,KAAK,YAAA;CAKhC;AAeD,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM;IAKrD;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;YACW,OAAO;IAqGrB,OAAO,CAAC,KAAK;IAQb;;OAEG;IACG,IAAI,CACR,KAAK,EAAE,SAAS,EAAE,EAClB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;KAC3C,GACA,OAAO,CAAC,YAAY,CAAC;IAYxB;;;;OAIG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAcrC;;;OAGG;IACG,wBAAwB,CAAC,OAAO,EAAE;QACtC,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;QACxC,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,KAAK,CAAC;KACtC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAgBrC;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc5B;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqB7B;;;OAGG;IACG,aAAa,CACjB,KAAK,EAAE,SAAS,EAAE,EAClB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,aAAa,CAAC;IAmBzB;;;OAGG;IACG,QAAQ,CACZ,KAAK,EAAE,SAAS,EAAE,EAClB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,WAAW,CAAC;QACvB,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,gBAAgB,CAAC;CAkB7B;AAQD,wBAAgB,SAAS,IAAI,WAAW,CAGvC;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAEnF;AAED,wBAAgB,WAAW,IAAI,IAAI,CAElC"}
|
package/dist/api/client.js
CHANGED
|
@@ -96,7 +96,8 @@ export class InkogClient {
|
|
|
96
96
|
clearTimeout(timeoutId);
|
|
97
97
|
// Handle rate limiting
|
|
98
98
|
if (response.status === 429) {
|
|
99
|
-
const
|
|
99
|
+
const retryAfterRaw = parseInt(response.headers.get('Retry-After') ?? '60', 10);
|
|
100
|
+
const retryAfter = Number.isNaN(retryAfterRaw) ? 60 : retryAfterRaw;
|
|
100
101
|
throw new InkogRateLimitError(retryAfter);
|
|
101
102
|
}
|
|
102
103
|
// Handle authentication errors
|
|
@@ -164,41 +165,37 @@ export class InkogClient {
|
|
|
164
165
|
}
|
|
165
166
|
/**
|
|
166
167
|
* Verify AGENTS.md governance declarations against actual code.
|
|
167
|
-
*
|
|
168
|
+
* IMPORTANT: Requires a scanId from a previous scan. Direct file upload is only
|
|
169
|
+
* supported via multipart form with an AGENTS.md file.
|
|
168
170
|
*/
|
|
169
|
-
async verifyGovernance(
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
body.scan_id = options.scanId;
|
|
173
|
-
}
|
|
174
|
-
else if (files.length > 0) {
|
|
175
|
-
body.files = files;
|
|
171
|
+
async verifyGovernance(options) {
|
|
172
|
+
if (!options.scanId) {
|
|
173
|
+
throw new Error('scanId is required. Run a scan first, then verify governance.');
|
|
176
174
|
}
|
|
177
175
|
return this.request({
|
|
178
176
|
method: 'POST',
|
|
179
177
|
path: 'governance/verify',
|
|
180
|
-
body
|
|
178
|
+
body: {
|
|
179
|
+
scan_id: options.scanId,
|
|
180
|
+
},
|
|
181
181
|
});
|
|
182
182
|
}
|
|
183
183
|
/**
|
|
184
184
|
* Generate compliance report for a regulatory framework.
|
|
185
|
-
*
|
|
185
|
+
* IMPORTANT: Requires a scanId from a previous scan.
|
|
186
186
|
*/
|
|
187
|
-
async generateComplianceReport(
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
format: options?.format ?? 'markdown',
|
|
191
|
-
};
|
|
192
|
-
if (options?.scanId) {
|
|
193
|
-
body.scan_id = options.scanId;
|
|
194
|
-
}
|
|
195
|
-
else if (files.length > 0) {
|
|
196
|
-
body.files = files;
|
|
187
|
+
async generateComplianceReport(options) {
|
|
188
|
+
if (!options.scanId) {
|
|
189
|
+
throw new Error('scanId is required. Run a scan first, then generate compliance report.');
|
|
197
190
|
}
|
|
198
191
|
return this.request({
|
|
199
192
|
method: 'POST',
|
|
200
193
|
path: 'compliance/report',
|
|
201
|
-
body
|
|
194
|
+
body: {
|
|
195
|
+
scan_id: options.scanId,
|
|
196
|
+
framework: options.framework ?? 'eu-ai-act',
|
|
197
|
+
format: options.format ?? 'markdown',
|
|
198
|
+
},
|
|
202
199
|
});
|
|
203
200
|
}
|
|
204
201
|
/**
|
|
@@ -222,10 +219,18 @@ export class InkogClient {
|
|
|
222
219
|
if (options.serverName === undefined && options.repositoryUrl === undefined) {
|
|
223
220
|
throw new Error('Either serverName or repositoryUrl must be provided');
|
|
224
221
|
}
|
|
222
|
+
// Convert to snake_case for backend API
|
|
223
|
+
const body = {};
|
|
224
|
+
if (options.serverName) {
|
|
225
|
+
body.server_name = options.serverName;
|
|
226
|
+
}
|
|
227
|
+
if (options.repositoryUrl) {
|
|
228
|
+
body.repository_url = options.repositoryUrl;
|
|
229
|
+
}
|
|
225
230
|
return this.request({
|
|
226
231
|
method: 'POST',
|
|
227
232
|
path: 'mcp/audit',
|
|
228
|
-
body
|
|
233
|
+
body,
|
|
229
234
|
});
|
|
230
235
|
}
|
|
231
236
|
/**
|
package/dist/api/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,EAEX,SAAS,EACT,SAAS,GACV,MAAM,cAAc,CAAC;AAgBtB,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,UAAkB,EAClB,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,aAAa;IAC/C,YAAY,OAAO,GAAG,gEAAgE;QACpF,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IAElC;IADlB,YACkB,UAAkB,EAClC,OAAO,GAAG,qBAAqB;QAE/B,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAHlB,eAAU,GAAV,UAAU,CAAQ;QAIlC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGxB;IAFlB,YACE,OAAe,EACC,KAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAoBD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,MAAM,OAAO,WAAW;IACL,MAAM,CAAS;IACf,MAAM,CAAqB;IAE5C,YAAY,MAAwB,EAAE,MAAe;QACnD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,OAAO,CAAI,OAAuB;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAEnE,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,OAAO,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAErE,MAAM,YAAY,GAAgB;oBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;wBACtC,YAAY,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;wBACtD,GAAG,OAAO,CAAC,OAAO;qBACnB;oBACD,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;gBAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAEhD,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,uBAAuB;gBACvB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,EAEX,SAAS,EACT,SAAS,GACV,MAAM,cAAc,CAAC;AAgBtB,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,UAAkB,EAClB,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,aAAa;IAC/C,YAAY,OAAO,GAAG,gEAAgE;QACpF,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IAElC;IADlB,YACkB,UAAkB,EAClC,OAAO,GAAG,qBAAqB;QAE/B,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAHlB,eAAU,GAAV,UAAU,CAAQ;QAIlC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGxB;IAFlB,YACE,OAAe,EACC,KAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAoBD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,MAAM,OAAO,WAAW;IACL,MAAM,CAAS;IACf,MAAM,CAAqB;IAE5C,YAAY,MAAwB,EAAE,MAAe;QACnD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,OAAO,CAAI,OAAuB;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAEnE,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,OAAO,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAErE,MAAM,YAAY,GAAgB;oBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;wBACtC,YAAY,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;wBACtD,GAAG,OAAO,CAAC,OAAO;qBACnB;oBACD,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;gBAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAEhD,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,uBAAuB;gBACvB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;oBAChF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;oBACpE,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,cAAc,EAAE,CAAC;gBAC7B,CAAC;gBAED,sBAAsB;gBACtB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAyB,CAAC;oBACpF,MAAM,IAAI,aAAa,CACrB,SAAS,CAAC,KAAK,EAAE,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,EAC3E,SAAS,CAAC,KAAK,EAAE,IAAI,IAAI,WAAW,EACpC,QAAQ,CAAC,MAAM,EACf,SAAS,CAAC,KAAK,EAAE,OAAO,CACzB,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAEtE,yCAAyC;gBACzC,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;oBACpC,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,oDAAoD;gBACpD,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;oBACxF,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxB,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,sBAAsB;gBACtB,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACpC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBAC9D,CAAC;gBAED,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1E,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;gBACnE,CAAC;gBAED,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAkB,EAClB,OAGC;QAED,OAAO,IAAI,CAAC,OAAO,CAAe;YAChC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,KAAK;gBACL,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU;gBACrC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAEtB;QACC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAA2B;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO,CAAC,MAAM;aACxB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAAC,OAI9B;QACC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAA2B;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW;gBAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAGpB;QACC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,qDAAqD;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;QAEvD,OAAO,IAAI,CAAC,OAAO,CAAkB;YACnC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,SAAS,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAGpB;QACC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,wCAAwC;QACxC,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAmB;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACjB,KAAkB,EAClB,OAIC;QAED,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,WAAW;YACtC,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,IAAI,IAAI;SACjE,CAAC;QAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAgB;YACjC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAkB,EAClB,OAIC;QAED,MAAM,IAAI,GAA4B;YACpC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,aAAa;YAC5C,uBAAuB,EAAE,OAAO,EAAE,qBAAqB,IAAI,IAAI;SAChE,CAAC;QAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAmB;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF,IAAI,aAAa,GAAuB,IAAI,CAAC;AAE7C,MAAM,UAAU,SAAS;IACvB,aAAa,KAAK,IAAI,WAAW,EAAE,CAAC;IACpC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,MAAe;IACpE,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC"}
|
package/dist/api/types.d.ts
CHANGED
|
@@ -71,208 +71,351 @@ export declare const ScanRequestSchema: z.ZodObject<{
|
|
|
71
71
|
export type ScanRequest = z.infer<typeof ScanRequestSchema>;
|
|
72
72
|
export interface ScanResponse {
|
|
73
73
|
success: boolean;
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
article: string;
|
|
88
|
-
status: 'PASS' | 'FAIL' | 'PARTIAL';
|
|
89
|
-
description: string;
|
|
90
|
-
findingCount: number;
|
|
91
|
-
}
|
|
92
|
-
export interface FrameworkStatus {
|
|
93
|
-
framework: string;
|
|
94
|
-
status: 'PASS' | 'FAIL' | 'PARTIAL';
|
|
95
|
-
items: string[];
|
|
96
|
-
findingCount: number;
|
|
74
|
+
scan_id: string;
|
|
75
|
+
risk_score: number;
|
|
76
|
+
files_scanned: number;
|
|
77
|
+
scan_duration?: string;
|
|
78
|
+
summary: {
|
|
79
|
+
total: number;
|
|
80
|
+
critical: number;
|
|
81
|
+
high: number;
|
|
82
|
+
medium: number;
|
|
83
|
+
low: number;
|
|
84
|
+
};
|
|
85
|
+
findings?: Finding[];
|
|
86
|
+
governance?: GovernanceVerifyResponse;
|
|
97
87
|
}
|
|
98
|
-
export interface
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
88
|
+
export interface DeclaredCapability {
|
|
89
|
+
name: string;
|
|
90
|
+
constraint_type: string;
|
|
91
|
+
status: string;
|
|
92
|
+
line?: number;
|
|
93
|
+
description?: string;
|
|
103
94
|
}
|
|
104
95
|
export interface GovernanceMismatch {
|
|
105
|
-
|
|
96
|
+
capability: string;
|
|
97
|
+
expected: string;
|
|
106
98
|
actual: string;
|
|
99
|
+
severity: string;
|
|
107
100
|
file: string;
|
|
108
101
|
line: number;
|
|
109
|
-
|
|
110
|
-
|
|
102
|
+
evidence?: string;
|
|
103
|
+
}
|
|
104
|
+
export interface GovernanceVerifySummary {
|
|
105
|
+
total_declarations: number;
|
|
106
|
+
valid_declarations: number;
|
|
107
|
+
violated_constraints: number;
|
|
108
|
+
unverified_items: number;
|
|
109
|
+
files_analyzed: number;
|
|
111
110
|
}
|
|
112
111
|
export interface GovernanceVerifyResponse {
|
|
113
112
|
success: boolean;
|
|
114
|
-
|
|
115
|
-
|
|
113
|
+
overall_status: string;
|
|
114
|
+
score: number;
|
|
115
|
+
declared_capabilities: DeclaredCapability[];
|
|
116
116
|
mismatches: GovernanceMismatch[];
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
complianceScore
|
|
121
|
-
recommendation?: string;
|
|
117
|
+
recommendations: string[];
|
|
118
|
+
summary?: GovernanceVerifySummary;
|
|
119
|
+
hasAgentsMd?: boolean;
|
|
120
|
+
complianceScore?: number;
|
|
122
121
|
}
|
|
123
122
|
export interface ComplianceReportRequest {
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
format: 'markdown' | 'json' | 'pdf';
|
|
123
|
+
scan_id?: string;
|
|
124
|
+
frameworks: ComplianceFramework[];
|
|
125
|
+
format?: 'markdown' | 'json' | 'pdf';
|
|
126
|
+
organization?: string;
|
|
127
|
+
path?: string;
|
|
130
128
|
}
|
|
131
129
|
export interface ComplianceArticle {
|
|
132
130
|
id: string;
|
|
133
131
|
title: string;
|
|
134
|
-
status:
|
|
135
|
-
|
|
136
|
-
|
|
132
|
+
status: string;
|
|
133
|
+
score: number;
|
|
134
|
+
requirements: string[];
|
|
135
|
+
findings: string[];
|
|
136
|
+
evidence?: string;
|
|
137
|
+
remediation?: string;
|
|
138
|
+
}
|
|
139
|
+
export interface ComplianceCategory {
|
|
140
|
+
id: string;
|
|
141
|
+
name: string;
|
|
142
|
+
status: string;
|
|
143
|
+
finding_ids: string[];
|
|
144
|
+
description: string;
|
|
145
|
+
impact?: string;
|
|
146
|
+
}
|
|
147
|
+
export interface ComplianceFindingsSummary {
|
|
148
|
+
total: number;
|
|
149
|
+
critical: number;
|
|
150
|
+
high: number;
|
|
151
|
+
medium: number;
|
|
152
|
+
low: number;
|
|
153
|
+
}
|
|
154
|
+
export interface ComplianceRecommendation {
|
|
155
|
+
priority: string;
|
|
156
|
+
category: string;
|
|
157
|
+
title: string;
|
|
158
|
+
description: string;
|
|
159
|
+
article?: string;
|
|
160
|
+
effort?: string;
|
|
137
161
|
}
|
|
138
162
|
export interface ComplianceReportResponse {
|
|
139
163
|
success: boolean;
|
|
140
164
|
framework: ComplianceFramework;
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
165
|
+
overall_score: number;
|
|
166
|
+
risk_level: string;
|
|
167
|
+
report_id: string;
|
|
168
|
+
generated_at: string;
|
|
169
|
+
organization?: string;
|
|
170
|
+
scan_id?: string;
|
|
171
|
+
articles?: ComplianceArticle[];
|
|
172
|
+
categories?: ComplianceCategory[];
|
|
173
|
+
findings_summary: ComplianceFindingsSummary;
|
|
174
|
+
recommendations: ComplianceRecommendation[];
|
|
175
|
+
markdown_report?: string;
|
|
176
|
+
complianceScore?: number;
|
|
177
|
+
overallStatus?: string;
|
|
147
178
|
}
|
|
148
179
|
export interface ExplainRequest {
|
|
149
180
|
findingId?: string;
|
|
150
181
|
pattern?: string;
|
|
151
182
|
}
|
|
152
|
-
export interface
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
183
|
+
export interface CodeExamples {
|
|
184
|
+
vulnerable: string;
|
|
185
|
+
secure: string;
|
|
186
|
+
}
|
|
187
|
+
export interface ExplainReference {
|
|
188
|
+
title: string;
|
|
189
|
+
url: string;
|
|
190
|
+
}
|
|
191
|
+
export interface ExplainComplianceMapping {
|
|
192
|
+
eu_ai_act?: string[];
|
|
193
|
+
nist_ai_rmf?: string[];
|
|
194
|
+
owasp_llm_top_10?: string[];
|
|
195
|
+
iso_42001?: string[];
|
|
196
|
+
soc2?: string[];
|
|
197
|
+
owasp_agentic?: string[];
|
|
198
|
+
palo_alto?: string[];
|
|
199
|
+
mitre_attack?: string[];
|
|
157
200
|
}
|
|
158
201
|
export interface ExplainResponse {
|
|
159
202
|
success: boolean;
|
|
160
|
-
|
|
203
|
+
pattern_id: string;
|
|
161
204
|
title: string;
|
|
205
|
+
severity: string;
|
|
206
|
+
category: string;
|
|
162
207
|
description: string;
|
|
163
|
-
severity: Severity;
|
|
164
|
-
cwe?: string;
|
|
165
|
-
owaspLlm?: string;
|
|
166
|
-
riskTier: RiskTier;
|
|
167
|
-
explanation: string;
|
|
168
208
|
impact: string;
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
209
|
+
financial_risk?: string;
|
|
210
|
+
examples?: CodeExamples;
|
|
211
|
+
remediation: string;
|
|
212
|
+
remediation_steps: string[];
|
|
213
|
+
cwe: string[];
|
|
214
|
+
cvss: number;
|
|
215
|
+
owasp?: string[];
|
|
216
|
+
compliance_frameworks?: ExplainComplianceMapping;
|
|
217
|
+
references?: ExplainReference[];
|
|
218
|
+
pattern?: string;
|
|
219
|
+
cweId?: string;
|
|
220
|
+
riskTier?: RiskTier;
|
|
176
221
|
}
|
|
177
222
|
export interface McpServerInfo {
|
|
178
223
|
name: string;
|
|
179
|
-
|
|
224
|
+
version?: string;
|
|
180
225
|
description?: string;
|
|
181
|
-
repository
|
|
182
|
-
|
|
226
|
+
repository?: string;
|
|
227
|
+
author?: string;
|
|
183
228
|
license?: string;
|
|
184
|
-
|
|
185
|
-
|
|
229
|
+
registry_url?: string;
|
|
230
|
+
verified?: boolean;
|
|
186
231
|
}
|
|
187
|
-
export interface
|
|
188
|
-
|
|
189
|
-
|
|
232
|
+
export interface McpAuditResults {
|
|
233
|
+
overall_risk: string;
|
|
234
|
+
security_score: number;
|
|
235
|
+
tool_count: number;
|
|
236
|
+
resource_count: number;
|
|
237
|
+
findings_count: number;
|
|
238
|
+
critical_count: number;
|
|
239
|
+
high_count: number;
|
|
240
|
+
files_analyzed: number;
|
|
241
|
+
lines_of_code: number;
|
|
242
|
+
analysis_duration: string;
|
|
243
|
+
}
|
|
244
|
+
export interface McpFinding {
|
|
245
|
+
id: string;
|
|
246
|
+
pattern_id: string;
|
|
190
247
|
title: string;
|
|
248
|
+
severity: string;
|
|
191
249
|
description: string;
|
|
192
250
|
file?: string;
|
|
193
251
|
line?: number;
|
|
194
|
-
|
|
252
|
+
code_snippet?: string;
|
|
253
|
+
remediation: string;
|
|
254
|
+
tool_name?: string;
|
|
255
|
+
resource_name?: string;
|
|
256
|
+
}
|
|
257
|
+
export interface McpPermissions {
|
|
258
|
+
file_access: boolean;
|
|
259
|
+
network_access: boolean;
|
|
260
|
+
code_execution: boolean;
|
|
261
|
+
database_access: boolean;
|
|
262
|
+
environment_access: boolean;
|
|
263
|
+
file_system_paths?: string[];
|
|
264
|
+
network_hosts?: string[];
|
|
265
|
+
execution_types?: string[];
|
|
266
|
+
scope: string;
|
|
267
|
+
}
|
|
268
|
+
export interface McpToolAnalysis {
|
|
269
|
+
name: string;
|
|
270
|
+
description?: string;
|
|
271
|
+
risk_level: string;
|
|
272
|
+
risk_reasons?: string[];
|
|
273
|
+
input_schema?: unknown;
|
|
274
|
+
output_schema?: unknown;
|
|
275
|
+
has_input_validation: boolean;
|
|
276
|
+
has_rate_limiting: boolean;
|
|
277
|
+
has_access_control: boolean;
|
|
278
|
+
attack_vectors?: string[];
|
|
279
|
+
finding_ids?: string[];
|
|
195
280
|
}
|
|
196
281
|
export interface McpAuditResponse {
|
|
197
282
|
success: boolean;
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
writes: string[];
|
|
204
|
-
executes: string[];
|
|
205
|
-
network: string[];
|
|
206
|
-
}>;
|
|
207
|
-
dataFlowRisks: string[];
|
|
283
|
+
server: McpServerInfo;
|
|
284
|
+
audit_results: McpAuditResults;
|
|
285
|
+
findings: McpFinding[];
|
|
286
|
+
permissions: McpPermissions;
|
|
287
|
+
tools: McpToolAnalysis[];
|
|
208
288
|
recommendations: string[];
|
|
289
|
+
report_id?: string;
|
|
290
|
+
generated_at: string;
|
|
291
|
+
data_source?: 'registry' | 'known_servers';
|
|
292
|
+
cache_warning?: string;
|
|
293
|
+
serverInfo?: McpServerInfo;
|
|
294
|
+
securityScore?: number;
|
|
295
|
+
issues?: McpFinding[];
|
|
296
|
+
}
|
|
297
|
+
export interface MLBOMSummary {
|
|
298
|
+
total_components: number;
|
|
299
|
+
models: number;
|
|
300
|
+
frameworks: number;
|
|
301
|
+
tools: number;
|
|
302
|
+
dependencies: number;
|
|
303
|
+
data_sources: number;
|
|
209
304
|
}
|
|
210
|
-
export interface
|
|
211
|
-
|
|
305
|
+
export interface MLBOMSupplier {
|
|
306
|
+
name: string;
|
|
307
|
+
url?: string;
|
|
308
|
+
contact?: string;
|
|
309
|
+
}
|
|
310
|
+
export interface MLBOMExternalRef {
|
|
311
|
+
type: string;
|
|
312
|
+
url: string;
|
|
313
|
+
}
|
|
314
|
+
export interface MLBOMComponent {
|
|
315
|
+
type: string;
|
|
212
316
|
name: string;
|
|
213
317
|
version?: string;
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
217
|
-
|
|
318
|
+
supplier?: MLBOMSupplier;
|
|
319
|
+
description?: string;
|
|
320
|
+
licenses?: string[];
|
|
321
|
+
external_refs?: MLBOMExternalRef[];
|
|
218
322
|
properties?: Record<string, string>;
|
|
219
|
-
vulnerabilities?: MlVulnerability[];
|
|
220
323
|
}
|
|
221
|
-
export interface
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
advisory?: string;
|
|
324
|
+
export interface MlbomCompleteness {
|
|
325
|
+
from_topology: number;
|
|
326
|
+
from_findings: number;
|
|
327
|
+
topology_nodes: number;
|
|
328
|
+
findings_count: number;
|
|
227
329
|
}
|
|
228
330
|
export interface MlbomResponse {
|
|
229
331
|
success: boolean;
|
|
230
332
|
format: MlbomFormat;
|
|
231
|
-
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
333
|
+
bom: unknown;
|
|
334
|
+
summary: MLBOMSummary;
|
|
335
|
+
report_id?: string;
|
|
336
|
+
generated_at: string;
|
|
337
|
+
completeness?: MlbomCompleteness;
|
|
338
|
+
warning?: string;
|
|
339
|
+
components?: MLBOMComponent[];
|
|
340
|
+
version?: string;
|
|
341
|
+
generatedAt?: string;
|
|
342
|
+
}
|
|
343
|
+
export type A2AProtocol = 'a2a' | 'crewai' | 'langgraph' | 'autogen' | 'custom' | 'unknown';
|
|
344
|
+
export interface A2AAgent {
|
|
240
345
|
id: string;
|
|
241
346
|
name: string;
|
|
242
347
|
role?: string;
|
|
348
|
+
description?: string;
|
|
243
349
|
tools: string[];
|
|
244
|
-
|
|
245
|
-
file
|
|
246
|
-
line
|
|
350
|
+
delegation_targets: string[];
|
|
351
|
+
file?: string;
|
|
352
|
+
line?: number;
|
|
353
|
+
can_delegate: boolean;
|
|
354
|
+
can_receive_message: boolean;
|
|
355
|
+
has_memory: boolean;
|
|
356
|
+
has_auth_check: boolean;
|
|
357
|
+
has_rate_limiting: boolean;
|
|
358
|
+
trust_level?: string;
|
|
247
359
|
}
|
|
248
|
-
export interface
|
|
360
|
+
export interface A2ACommunication {
|
|
249
361
|
from: string;
|
|
250
362
|
to: string;
|
|
251
|
-
type:
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
363
|
+
type: string;
|
|
364
|
+
has_guards: boolean;
|
|
365
|
+
has_auth: boolean;
|
|
366
|
+
is_async: boolean;
|
|
367
|
+
max_depth?: number;
|
|
368
|
+
file?: string;
|
|
369
|
+
line?: number;
|
|
255
370
|
}
|
|
256
|
-
export interface
|
|
257
|
-
|
|
258
|
-
|
|
259
|
-
|
|
371
|
+
export interface A2AFinding {
|
|
372
|
+
id: string;
|
|
373
|
+
type: string;
|
|
374
|
+
severity: string;
|
|
260
375
|
description: string;
|
|
261
|
-
|
|
262
|
-
file
|
|
263
|
-
line
|
|
264
|
-
|
|
376
|
+
agents_involved: string[];
|
|
377
|
+
file?: string;
|
|
378
|
+
line?: number;
|
|
379
|
+
remediation: string;
|
|
380
|
+
}
|
|
381
|
+
export interface A2ATrustBoundary {
|
|
382
|
+
id: string;
|
|
383
|
+
name: string;
|
|
384
|
+
trust_level: string;
|
|
385
|
+
agent_ids: string[];
|
|
386
|
+
description?: string;
|
|
387
|
+
}
|
|
388
|
+
export interface A2ATrustAnalysis {
|
|
389
|
+
trust_boundaries: A2ATrustBoundary[];
|
|
390
|
+
cross_boundary_flows: number;
|
|
391
|
+
unguarded_delegations: number;
|
|
392
|
+
privilege_escalations: number;
|
|
393
|
+
circular_delegations?: string[][];
|
|
394
|
+
}
|
|
395
|
+
export interface A2ARiskAssessment {
|
|
396
|
+
overall_risk: string;
|
|
397
|
+
trust_boundary_violations: number;
|
|
398
|
+
unguarded_delegations: number;
|
|
399
|
+
critical_findings: number;
|
|
400
|
+
high_findings: number;
|
|
401
|
+
summary: string;
|
|
402
|
+
recommendations: string[];
|
|
265
403
|
}
|
|
266
404
|
export interface A2AAuditResponse {
|
|
267
405
|
success: boolean;
|
|
268
406
|
protocol: A2AProtocol;
|
|
269
|
-
agents:
|
|
270
|
-
|
|
271
|
-
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
407
|
+
agents: A2AAgent[];
|
|
408
|
+
communications: A2ACommunication[];
|
|
409
|
+
findings: A2AFinding[];
|
|
410
|
+
trust_analysis: A2ATrustAnalysis;
|
|
411
|
+
risk_assessment: A2ARiskAssessment;
|
|
412
|
+
report_id?: string;
|
|
413
|
+
generated_at: string;
|
|
414
|
+
warning?: string;
|
|
415
|
+
delegationGraph?: A2ACommunication[];
|
|
416
|
+
issues?: A2AFinding[];
|
|
417
|
+
securityScore?: number;
|
|
418
|
+
hasCycles?: boolean;
|
|
276
419
|
}
|
|
277
420
|
export interface ApiError {
|
|
278
421
|
code: string;
|