@inkog-io/mcp 1.0.0

package/dist/tools/audit-mcp.js

@@ -0,0 +1,259 @@
+/**
+ * inkog_audit_mcp_server Tool
+ *
+ * P1 - MCP Server Security Auditing (THE ECOSYSTEM PLAY)
+ *
+ * Security audit any MCP server from the registry or GitHub repository.
+ * Checks for:
+ * - Excessive permissions (file system, network, exec)
+ * - Data exfiltration risks
+ * - Input validation gaps
+ * - Credential handling issues
+ * - Tool permission boundaries
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const AuditMcpArgsSchema = z
+    .object({
+    server_name: z
+        .string()
+        .optional()
+        .describe('MCP server name from registry (e.g., "github", "slack", "postgres")'),
+    repository_url: z
+        .string()
+        .url()
+        .optional()
+        .describe('Direct GitHub repository URL to audit'),
+})
+    .refine((data) => data.server_name !== undefined || data.repository_url !== undefined, {
+    message: 'Either server_name or repository_url must be provided',
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatSeverityIcon(severity) {
+    switch (severity) {
+        case 'CRITICAL':
+            return '🔴';
+        case 'HIGH':
+            return '🟠';
+        case 'MEDIUM':
+            return '🟡';
+        case 'LOW':
+            return '🟢';
+        default:
+            return '⚪';
+    }
+}
+function formatSecurityScore(score) {
+    if (score >= 90) {
+        return `✅ ${score}/100 (Excellent)`;
+    }
+    else if (score >= 70) {
+        return `🟢 ${score}/100 (Good)`;
+    }
+    else if (score >= 50) {
+        return `🟡 ${score}/100 (Fair)`;
+    }
+    else if (score >= 30) {
+        return `🟠 ${score}/100 (Poor)`;
+    }
+    else {
+        return `🔴 ${score}/100 (Critical)`;
+    }
+}
+function formatIssue(issue) {
+    const icon = formatSeverityIcon(issue.severity);
+    let output = `${icon} [${issue.severity}] ${issue.title}\n`;
+    output += `   Category: ${issue.category}\n`;
+    output += `   ${issue.description}\n`;
+    if (issue.file !== undefined) {
+        const location = issue.line !== undefined ? `${issue.file}:${issue.line}` : issue.file;
+        output += `   📍 ${location}\n`;
+    }
+    output += `   💡 ${issue.recommendation}`;
+    return output;
+}
+function formatToolPermissions(permissions) {
+    let output = '';
+    for (const [tool, perms] of Object.entries(permissions)) {
+        output += `\n🔧 ${tool}:\n`;
+        if (perms.reads.length > 0) {
+            output += `   📖 Reads: ${perms.reads.join(', ')}\n`;
+        }
+        if (perms.writes.length > 0) {
+            output += `   ✏️  Writes: ${perms.writes.join(', ')}\n`;
+        }
+        if (perms.executes.length > 0) {
+            output += `   ⚡ Executes: ${perms.executes.join(', ')}\n`;
+        }
+        if (perms.network.length > 0) {
+            output += `   🌐 Network: ${perms.network.join(', ')}\n`;
+        }
+    }
+    return output;
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function auditMcpHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = AuditMcpArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}\n\nProvide either server_name (from MCP registry) or repository_url (GitHub URL).`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Call Inkog API
+        const client = getClient();
+        const auditOptions = {};
+        if (args.server_name !== undefined) {
+            auditOptions.serverName = args.server_name;
+        }
+        if (args.repository_url !== undefined) {
+            auditOptions.repositoryUrl = args.repository_url;
+        }
+        const response = await client.auditMcpServer(auditOptions);
+        // Build formatted output
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║           🔒 MCP Server Security Audit                ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        // Server info
+        output += `📦 Server: ${response.serverInfo.displayName ?? response.serverInfo.name}\n`;
+        if (response.serverInfo.description !== undefined) {
+            output += `   ${response.serverInfo.description}\n`;
+        }
+        output += `🔗 Repository: ${response.serverInfo.repository}\n`;
+        if (response.serverInfo.license !== undefined) {
+            output += `📄 License: ${response.serverInfo.license}\n`;
+        }
+        output += `🔧 Tools: ${response.serverInfo.tools.join(', ')}\n\n`;
+        // Security score
+        output += `📊 Security Score: ${formatSecurityScore(response.securityScore)}\n\n`;
+        // Issues summary
+        const critical = response.issues.filter((i) => i.severity === 'CRITICAL').length;
+        const high = response.issues.filter((i) => i.severity === 'HIGH').length;
+        const medium = response.issues.filter((i) => i.severity === 'MEDIUM').length;
+        const low = response.issues.filter((i) => i.severity === 'LOW').length;
+        if (response.issues.length === 0) {
+            output += '✅ No security issues detected!\n\n';
+        }
+        else {
+            output += `📋 Security Issues: ${response.issues.length}\n`;
+            output += `   🔴 Critical: ${critical} | 🟠 High: ${high} | 🟡 Medium: ${medium} | 🟢 Low: ${low}\n\n`;
+        }
+        // Data flow risks
+        if (response.dataFlowRisks.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '⚠️  DATA FLOW RISKS\n\n';
+            for (const risk of response.dataFlowRisks) {
+                output += `   • ${risk}\n`;
+            }
+            output += '\n';
+        }
+        // Tool permissions
+        if (Object.keys(response.toolPermissions).length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🔐 TOOL PERMISSIONS ANALYSIS\n';
+            output += formatToolPermissions(response.toolPermissions);
+            output += '\n';
+        }
+        // Detailed issues
+        if (response.issues.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🔍 SECURITY ISSUES\n\n';
+            // Critical and high first
+            const criticalHigh = response.issues.filter((i) => i.severity === 'CRITICAL' || i.severity === 'HIGH');
+            const mediumLow = response.issues.filter((i) => i.severity === 'MEDIUM' || i.severity === 'LOW');
+            for (const issue of criticalHigh) {
+                output += formatIssue(issue) + '\n\n';
+            }
+            if (mediumLow.length > 0 && criticalHigh.length > 0) {
+                output += '--- Lower Severity ---\n\n';
+            }
+            for (const issue of mediumLow) {
+                output += formatIssue(issue) + '\n\n';
+            }
+        }
+        // Recommendations
+        if (response.recommendations.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '💡 RECOMMENDATIONS\n\n';
+            for (let i = 0; i < response.recommendations.length; i++) {
+                output += `${i + 1}. ${response.recommendations[i]}\n`;
+            }
+        }
+        // Footer
+        output += '\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n';
+        output += 'MCP Server Audit powered by Inkog AI Security Platform\n';
+        output += 'Learn more: https://inkog.io/mcp-security\n';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nGet your free key at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const auditMcpTool = {
+    tool: {
+        name: 'inkog_audit_mcp_server',
+        description: 'Security audit any MCP server from the registry or GitHub. Analyzes tool permissions, data flow risks, input validation, and potential vulnerabilities. Essential for vetting third-party MCP servers before installation.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                server_name: {
+                    type: 'string',
+                    description: 'MCP server name from registry (e.g., "github", "slack", "postgres")',
+                },
+                repository_url: {
+                    type: 'string',
+                    description: 'Direct GitHub repository URL to audit',
+                },
+            },
+        },
+    },
+    handler: auditMcpHandler,
+};
+//# sourceMappingURL=audit-mcp.js.map

package/dist/tools/audit-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-mcp.js","sourceRoot":"","sources":["../../src/tools/audit-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIhF,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;IAClF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,uCAAuC,CAAC;CACrD,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE;IACrF,OAAO,EAAE,uDAAuD;CACjE,CAAC,CAAC;AAIL,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,KAAK,KAAK,kBAAkB,CAAC;IACtC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,KAAK,iBAAiB,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC;IAC5D,MAAM,IAAI,gBAAgB,KAAK,CAAC,QAAQ,IAAI,CAAC;IAC7C,MAAM,IAAI,MAAM,KAAK,CAAC,WAAW,IAAI,CAAC;IAEtC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACvF,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,SAAS,KAAK,CAAC,cAAc,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAQC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,IAAI,KAAK,CAAC;QAE5B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,kBAAkB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAAC,OAAgC;IAC7D,qBAAqB;IACrB,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,oFAAoF;iBAC1I;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAiB,WAAW,CAAC,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAoD,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,YAAY,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC;QACnD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAE3D,yBAAyB;QACzB,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,6DAA6D,CAAC;QACxE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,cAAc;QACd,MAAM,IAAI,cAAc,QAAQ,CAAC,UAAU,CAAC,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;QACxF,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,kBAAkB,QAAQ,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;QAC/D,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,QAAQ,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,aAAa,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAElE,iBAAiB;QACjB,MAAM,IAAI,sBAAsB,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;QAElF,iBAAiB;QACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;QAEvE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,oCAAoC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,uBAAuB,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC;YAC5D,MAAM,IAAI,mBAAmB,QAAQ,eAAe,IAAI,iBAAiB,MAAM,cAAc,GAAG,MAAM,CAAC;QACzG,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,yBAAyB,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,QAAQ,IAAI,IAAI,CAAC;YAC7B,CAAC;YACD,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,gCAAgC,CAAC;YAC3C,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC;YAEnC,0BAA0B;YAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;YACF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CACvD,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;YACxC,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,4BAA4B,CAAC;YACzC,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;YACxC,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YACzD,CAAC;QACH,CAAC;QAED,SAAS;QACT,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,0DAA0D,CAAC;QACrE,MAAM,IAAI,6CAA6C,CAAC;QAExD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kEAAkE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE;QACJ,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,4NAA4N;QAC9N,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qEAAqE;iBACnF;gBACD,cAAc,EAAE;oBACd,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uCAAuC;iBACrD;aACF;SACF;KACF;IACD,OAAO,EAAE,eAAe;CACzB,CAAC"}

package/dist/tools/compliance.d.ts

@@ -0,0 +1,14 @@
+/**
+ * inkog_compliance_report Tool
+ *
+ * P1 - Compliance Report Generation
+ *
+ * Generates compliance reports for regulatory frameworks:
+ * - EU AI Act (Articles 12, 14, 15)
+ * - NIST AI Risk Management Framework
+ * - ISO 42001 AI Management System
+ * - OWASP LLM Top 10
+ */
+import type { ToolDefinition } from './index.js';
+export declare const complianceTool: ToolDefinition;
+//# sourceMappingURL=compliance.d.ts.map

package/dist/tools/compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.d.ts","sourceRoot":"","sources":["../../src/tools/compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAuP7D,eAAO,MAAM,cAAc,EAAE,cA8B5B,CAAC"}

package/dist/tools/compliance.js

@@ -0,0 +1,255 @@
+/**
+ * inkog_compliance_report Tool
+ *
+ * P1 - Compliance Report Generation
+ *
+ * Generates compliance reports for regulatory frameworks:
+ * - EU AI Act (Articles 12, 14, 15)
+ * - NIST AI Risk Management Framework
+ * - ISO 42001 AI Management System
+ * - OWASP LLM Top 10
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+import { getRelativePaths, readDirectory } from '../utils/file-reader.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const ComplianceArgsSchema = z.object({
+    path: z.string().describe('Path to scan for compliance analysis'),
+    framework: z
+        .enum(['eu-ai-act', 'nist-ai-rmf', 'iso-42001', 'owasp-llm-top-10', 'all'])
+        .optional()
+        .default('eu-ai-act')
+        .describe('Compliance framework: eu-ai-act (default), nist-ai-rmf, iso-42001, owasp-llm-top-10, or all'),
+    format: z
+        .enum(['markdown', 'json', 'pdf'])
+        .optional()
+        .default('markdown')
+        .describe('Output format: markdown (default), json, or pdf'),
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function getFrameworkDisplayName(framework) {
+    switch (framework) {
+        case 'eu-ai-act':
+            return 'EU AI Act';
+        case 'nist-ai-rmf':
+            return 'NIST AI Risk Management Framework';
+        case 'iso-42001':
+            return 'ISO 42001 AI Management System';
+        case 'owasp-llm-top-10':
+            return 'OWASP LLM Top 10';
+        case 'all':
+            return 'All Frameworks';
+        default:
+            return framework;
+    }
+}
+function getStatusIcon(status) {
+    switch (status) {
+        case 'COMPLIANT':
+            return '✅';
+        case 'NON_COMPLIANT':
+            return '❌';
+        case 'PARTIAL':
+            return '⚠️';
+        case 'NOT_APPLICABLE':
+            return '➖';
+        default:
+            return '❓';
+    }
+}
+function formatArticle(article) {
+    const icon = getStatusIcon(article.status);
+    let output = `${icon} ${article.id}: ${article.title}\n`;
+    output += `   Status: ${article.status}\n`;
+    if (article.findings.length > 0) {
+        output += `   Findings: ${article.findings.length}\n`;
+        for (const finding of article.findings.slice(0, 3)) {
+            output += `     • ${finding.message} (${finding.file}:${finding.line})\n`;
+        }
+        if (article.findings.length > 3) {
+            output += `     ... and ${article.findings.length - 3} more\n`;
+        }
+    }
+    if (article.recommendations.length > 0) {
+        output += `   Recommendations:\n`;
+        for (const rec of article.recommendations) {
+            output += `     💡 ${rec}\n`;
+        }
+    }
+    return output;
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function complianceHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = ComplianceArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Read files from path
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No scannable files found in: ${args.path}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Get relative paths
+        const files = getRelativePaths(readResult.files, args.path);
+        // Call Inkog API
+        const client = getClient();
+        const response = await client.generateComplianceReport(files, {
+            framework: args.framework,
+            format: args.format,
+        });
+        // If format is markdown or pdf, return the pre-formatted content
+        if (args.format !== 'json' && response.reportContent !== undefined) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: response.reportContent,
+                    },
+                ],
+            };
+        }
+        // Build formatted output
+        const frameworkName = getFrameworkDisplayName(response.framework);
+        const overallIcon = getStatusIcon(response.overallStatus);
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║           📋 Compliance Report                        ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        output += `🏛️  Framework: ${frameworkName}\n`;
+        output += `📊 Compliance Score: ${response.complianceScore}/100\n`;
+        output += `${overallIcon} Overall Status: ${response.overallStatus}\n`;
+        output += `📅 Generated: ${response.generatedAt}\n\n`;
+        // Executive Summary
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '📝 EXECUTIVE SUMMARY\n\n';
+        output += response.executiveSummary + '\n\n';
+        // Article breakdown
+        if (response.articles.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '📑 ARTICLE BREAKDOWN\n\n';
+            // Group by status
+            const compliant = response.articles.filter((a) => a.status === 'COMPLIANT');
+            const nonCompliant = response.articles.filter((a) => a.status === 'NON_COMPLIANT');
+            const partial = response.articles.filter((a) => a.status === 'PARTIAL');
+            if (nonCompliant.length > 0) {
+                output += '❌ NON-COMPLIANT:\n\n';
+                for (const article of nonCompliant) {
+                    output += formatArticle(article) + '\n';
+                }
+            }
+            if (partial.length > 0) {
+                output += '⚠️  PARTIAL COMPLIANCE:\n\n';
+                for (const article of partial) {
+                    output += formatArticle(article) + '\n';
+                }
+            }
+            if (compliant.length > 0) {
+                output += '✅ COMPLIANT:\n\n';
+                for (const article of compliant) {
+                    output += `   ${article.id}: ${article.title}\n`;
+                }
+                output += '\n';
+            }
+        }
+        // EU AI Act specific note
+        if (response.framework === 'eu-ai-act') {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '📌 EU AI ACT NOTE\n\n';
+            output += 'Article 14 (Human Oversight) deadline: August 2, 2026\n';
+            output += 'Ensure all high-risk AI systems have:\n';
+            output += '• Human-in-the-loop controls\n';
+            output += '• Ability to interrupt operations\n';
+            output += '• Audit logging of all actions\n';
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nGet your free key at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const complianceTool = {
+    tool: {
+        name: 'inkog_compliance_report',
+        description: 'Generate a compliance report for EU AI Act, NIST AI RMF, ISO 42001, or OWASP LLM Top 10. Analyzes agent code and maps findings to regulatory requirements.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'Path to scan for compliance analysis',
+                },
+                framework: {
+                    type: 'string',
+                    enum: ['eu-ai-act', 'nist-ai-rmf', 'iso-42001', 'owasp-llm-top-10', 'all'],
+                    default: 'eu-ai-act',
+                    description: 'Compliance framework: eu-ai-act (default), nist-ai-rmf, iso-42001, owasp-llm-top-10, or all',
+                },
+                format: {
+                    type: 'string',
+                    enum: ['markdown', 'json', 'pdf'],
+                    default: 'markdown',
+                    description: 'Output format: markdown (default), json, or pdf',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: complianceHandler,
+};
+//# sourceMappingURL=compliance.js.map

package/dist/tools/compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.js","sourceRoot":"","sources":["../../src/tools/compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG1E,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACjE,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;SAC1E,QAAQ,EAAE;SACV,OAAO,CAAC,WAAW,CAAC;SACpB,QAAQ,CACP,6FAA6F,CAC9F;IACH,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;SACjC,QAAQ,EAAE;SACV,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,iDAAiD,CAAC;CAC/D,CAAC,CAAC;AAIH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,uBAAuB,CAAC,SAAsC;IACrE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,aAAa;YAChB,OAAO,mCAAmC,CAAC;QAC7C,KAAK,WAAW;YACd,OAAO,gCAAgC,CAAC;QAC1C,KAAK,kBAAkB;YACrB,OAAO,kBAAkB,CAAC;QAC5B,KAAK,KAAK;YACR,OAAO,gBAAgB,CAAC;QAC1B;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,gBAAgB;YACnB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAA0B;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC;IACzD,MAAM,IAAI,cAAc,OAAO,CAAC,MAAM,IAAI,CAAC;IAE3C,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,UAAU,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC;QACjE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,uBAAuB,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,WAAW,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,iBAAiB,CAAC,OAAgC;IAC/D,qBAAqB;IACrB,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAmB,WAAW,CAAC,IAAI,CAAC;IAE9C,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,EAAE;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE;YAC5D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,iEAAiE;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,QAAQ,CAAC,aAAa;qBAC7B;iBACF;aACF,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAE1D,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,6DAA6D,CAAC;QACxE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,MAAM,IAAI,mBAAmB,aAAa,IAAI,CAAC;QAC/C,MAAM,IAAI,wBAAwB,QAAQ,CAAC,eAAe,QAAQ,CAAC;QACnE,MAAM,IAAI,GAAG,WAAW,oBAAoB,QAAQ,CAAC,aAAa,IAAI,CAAC;QACvE,MAAM,IAAI,iBAAiB,QAAQ,CAAC,WAAW,MAAM,CAAC;QAEtD,oBAAoB;QACpB,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,0BAA0B,CAAC;QACrC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC;QAE7C,oBAAoB;QACpB,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,0BAA0B,CAAC;YAErC,kBAAkB;YAClB,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;YAExE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,sBAAsB,CAAC;gBACjC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;oBACnC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,6BAA6B,CAAC;gBACxC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC7B,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,MAAM,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC;gBACnD,CAAC;gBACD,MAAM,IAAI,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAAC;YAClC,MAAM,IAAI,yDAAyD,CAAC;YACpE,MAAM,IAAI,yCAAyC,CAAC;YACpD,MAAM,IAAI,gCAAgC,CAAC;YAC3C,MAAM,IAAI,qCAAqC,CAAC;YAChD,MAAM,IAAI,kCAAkC,CAAC;QAC/C,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kEAAkE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE;QACJ,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,4JAA4J;QAC9J,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sCAAsC;iBACpD;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,CAAC;oBAC1E,OAAO,EAAE,WAAW;oBACpB,WAAW,EACT,6FAA6F;iBAChG;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC;oBACjC,OAAO,EAAE,UAAU;oBACnB,WAAW,EAAE,iDAAiD;iBAC/D;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,iBAAiB;CAC3B,CAAC"}

package/dist/tools/explain.d.ts

@@ -0,0 +1,14 @@
+/**
+ * inkog_explain_finding Tool
+ *
+ * P1 - Finding Explanation and Remediation Guidance
+ *
+ * Provides detailed explanations for security findings including:
+ * - What the vulnerability is
+ * - Why it's dangerous
+ * - How to fix it
+ * - Code examples (vulnerable vs secure)
+ */
+import type { ToolDefinition } from './index.js';
+export declare const explainTool: ToolDefinition;
+//# sourceMappingURL=explain.d.ts.map

package/dist/tools/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/tools/explain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAuM7D,eAAO,MAAM,WAAW,EAAE,cAqBzB,CAAC"}