@inkog-io/mcp 1.0.20 → 1.0.21

package/dist/tools/deep-scan.js

@@ -0,0 +1,296 @@
+import path from 'node:path';
+import { z } from 'zod';
+import { getClient, InkogApiError, InkogAuthError, InkogNetworkError, InkogRateLimitError, } from '../api/client.js';
+import { getRelativePaths, readDirectory } from '../utils/file-reader.js';
+const DeepScanArgsSchema = z.object({
+    path: z.string().describe('File or directory path to scan'),
+    agent_name: z
+        .string()
+        .optional()
+        .describe('Agent name for dashboard identification (auto-detected from path if not provided)'),
+});
+const POLL_INTERVAL_MS = 5000;
+const MAX_POLL_DURATION_MS = 30 * 60 * 1000; // 30 minutes
+async function deepScanHandler(rawArgs) {
+    const parseResult = DeepScanArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No scannable files found in: ${args.path}\n\nSupported file types: .py, .js, .ts, .go, .java, .rb, .yaml, .json, .md`,
+                    },
+                ],
+            };
+        }
+        const files = getRelativePaths(readResult.files, args.path);
+        const agentName = args.agent_name ?? path.basename(args.path).replace(/\.[^.]+$/, '') ?? undefined;
+        const client = getClient();
+        const triggerResponse = await client.triggerDeepScan(files, {
+            agentName,
+        });
+        const startTime = Date.now();
+        const deadline = startTime + MAX_POLL_DURATION_MS;
+        let statusResponse;
+        while (Date.now() < deadline) {
+            await sleep(POLL_INTERVAL_MS);
+            try {
+                statusResponse = await client.getDeepScanStatus(triggerResponse.scan_id);
+            }
+            catch {
+                continue;
+            }
+            if (statusResponse.status === 'completed') {
+                break;
+            }
+            if (statusResponse.status === 'failed') {
+                let errorMsg = 'Unknown error';
+                if (statusResponse.scan?.error) {
+                    errorMsg = typeof statusResponse.scan.error === 'string'
+                        ? statusResponse.scan.error
+                        : JSON.stringify(statusResponse.scan.error);
+                }
+                else if (statusResponse.scan?.user_agent && typeof statusResponse.scan.user_agent === 'string') {
+                    const ua = statusResponse.scan.user_agent;
+                    if (ua.startsWith('deep-checks-error: ')) {
+                        errorMsg = ua.replace('deep-checks-error: ', '');
+                    }
+                }
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Deep scan failed: ${errorMsg}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        }
+        if (statusResponse?.status !== 'completed') {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Deep scan timed out after 30 minutes. The scan may still be running — check results at:\nhttps://app.inkog.io/dashboard/results/${triggerResponse.scan_id}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const elapsedSecs = Math.round((Date.now() - startTime) / 1000);
+        const elapsedMin = Math.floor(elapsedSecs / 60);
+        const elapsedSecRem = elapsedSecs % 60;
+        const elapsedStr = `${elapsedMin}m${String(elapsedSecRem).padStart(2, '0')}s`;
+        const scan = statusResponse.scan;
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║           🔬 Inkog Deep Scan Results                ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        output += `Completed in ${elapsedStr}\n\n`;
+        if (scan) {
+            const filesScanned = asNumber(scan.files_scanned);
+            const riskScore = asNumber(scan.risk_score);
+            const findingsCount = asNumber(scan.findings_count);
+            const criticalCount = asNumber(scan.critical_count);
+            const highCount = asNumber(scan.high_count);
+            const mediumCount = asNumber(scan.medium_count);
+            const lowCount = asNumber(scan.low_count);
+            output += `📁 Files scanned: ${filesScanned}\n`;
+            output += `📊 Risk score: ${riskScore}/100\n`;
+            if (scan.governance_score !== undefined && scan.governance_score !== null) {
+                output += `🏛️  Governance score: ${asNumber(scan.governance_score)}/100\n`;
+            }
+            output += '\n';
+            if (findingsCount === 0) {
+                output += '✅ No security findings detected!\n';
+            }
+            else {
+                output += `📋 Total findings: ${findingsCount}\n`;
+                output += `   🔴 Critical: ${criticalCount} | 🟠 High: ${highCount} | 🟡 Medium: ${mediumCount} | 🟢 Low: ${lowCount}\n`;
+            }
+            const findings = extractDeepFindings(scan);
+            if (findings.length > 0) {
+                output += '\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                for (const f of findings) {
+                    const severity = asString(f.severity).toUpperCase();
+                    const title = asString(f.title) || asString(f.description) || 'Unknown finding';
+                    const file = f.file ? asString(f.file) : undefined;
+                    const line = f.line ? Number(f.line) : undefined;
+                    const category = f.category ? asString(f.category) : undefined;
+                    const remediation = f.remediation ? asString(f.remediation) : undefined;
+                    const icon = severityIcon(severity);
+                    output += `${icon} [${severity}] ${title}\n`;
+                    if (file) {
+                        output += line ? `   📍 ${file}:${line}\n` : `   📍 ${file}\n`;
+                    }
+                    if (category) {
+                        output += `   📊 ${category}\n`;
+                    }
+                    if (remediation) {
+                        output += `   💡 ${remediation}\n`;
+                    }
+                    output += '\n';
+                }
+            }
+        }
+        output += `View full results: https://app.inkog.io/dashboard/results/${statusResponse.scan_id}\n`;
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nTo use Inkog, you need an API key.\n\n1. Sign up for free at https://app.inkog.io\n2. Set your API key: export INKOG_API_KEY=sk_live_...\n3. Try again!',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogApiError && error.statusCode === 403) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔒 Deep scan requires the Inkog Deep role.\n\nContact your admin to enable it at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogRateLimitError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `⏱️ Rate Limited\n\nToo many requests. Please retry after ${error.retryAfter} seconds.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}\n\nPlease check your internet connection and try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogApiError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `API error: ${error.message}${error.details ? `\n\nDetails: ${JSON.stringify(error.details)}` : ''}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const message = error instanceof Error ? error.message : 'Unknown error occurred';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Error: ${message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function severityIcon(severity) {
+    switch (severity) {
+        case 'CRITICAL': return '🔴';
+        case 'HIGH': return '🟠';
+        case 'MEDIUM': return '🟡';
+        case 'LOW': return '🟢';
+        default: return '⚪';
+    }
+}
+function asNumber(v) {
+    if (typeof v === 'number')
+        return v;
+    return 0;
+}
+function asString(v) {
+    if (typeof v === 'string')
+        return v;
+    return '';
+}
+function extractDeepFindings(scan) {
+    const findingsRaw = scan.findings;
+    if (findingsRaw === undefined || findingsRaw === null)
+        return [];
+    let reportData = findingsRaw;
+    if (typeof findingsRaw === 'string') {
+        try {
+            reportData = JSON.parse(findingsRaw);
+        }
+        catch {
+            return [];
+        }
+    }
+    if (typeof reportData === 'object' && reportData !== null && !Array.isArray(reportData)) {
+        const report = reportData;
+        if (Array.isArray(report.findings)) {
+            return report.findings.filter((f) => typeof f === 'object' && f !== null);
+        }
+        return [];
+    }
+    if (Array.isArray(reportData)) {
+        return reportData.filter((f) => typeof f === 'object' && f !== null);
+    }
+    return [];
+}
+export const deepScanTool = {
+    tool: {
+        name: 'inkog_deep_scan',
+        description: 'Inkog Deep scan for AI agents. Uses advanced analysis to detect complex vulnerabilities, logic flaws, and security issues that pattern-based scanning may miss. Requires the Inkog Deep role. IMPORTANT: Deep scans typically take around 10 minutes — inform the user before starting and let them know the scan is running.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'File or directory path to scan',
+                },
+                agent_name: {
+                    type: 'string',
+                    description: 'Agent name for dashboard identification (auto-detected from path if not provided)',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: deepScanHandler,
+};
+//# sourceMappingURL=deep-scan.js.map

package/dist/tools/deep-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-scan.js","sourceRoot":"","sources":["../../src/tools/deep-scan.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,SAAS,EACT,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG1E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC3D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mFAAmF,CAAC;CACjG,CAAC,CAAC;AAIH,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAE1D,KAAK,UAAU,eAAe,CAAC,OAAgC;IAC7D,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAiB,WAAW,CAAC,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,6EAA6E;qBAC7H;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;QAEnG,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE;YAC1D,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;QAClD,IAAI,cAAc,CAAC;QAEnB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAE9B,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvC,IAAI,QAAQ,GAAG,eAAe,CAAC;gBAC/B,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;oBAC/B,QAAQ,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;wBACtD,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK;wBAC3B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChD,CAAC;qBAAM,IAAI,cAAc,CAAC,IAAI,EAAE,UAAU,IAAI,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACjG,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;wBACzC,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,qBAAqB,QAAQ,EAAE;yBACtC;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAAc,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mIAAmI,eAAe,CAAC,OAAO,EAAE;qBACnK;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,WAAW,GAAG,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;QAE9E,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC;QACjC,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,2DAA2D,CAAC;QACtE,MAAM,IAAI,8DAA8D,CAAC;QACzE,MAAM,IAAI,gBAAgB,UAAU,MAAM,CAAC;QAE3C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,IAAI,qBAAqB,YAAY,IAAI,CAAC;YAChD,MAAM,IAAI,kBAAkB,SAAS,QAAQ,CAAC;YAE9C,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC1E,MAAM,IAAI,0BAA0B,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,IAAI,CAAC;YAEf,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,oCAAoC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,sBAAsB,aAAa,IAAI,CAAC;gBAClD,MAAM,IAAI,mBAAmB,aAAa,eAAe,SAAS,iBAAiB,WAAW,cAAc,QAAQ,IAAI,CAAC;YAC3H,CAAC;YAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,+CAA+C,CAAC;gBAE1D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;oBACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC;oBAChF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACnD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACjD,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC/D,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAExE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACpC,MAAM,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,IAAI,CAAC;oBAC7C,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;oBACjE,CAAC;oBACD,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;oBAClC,CAAC;oBACD,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,IAAI,SAAS,WAAW,IAAI,CAAC;oBACrC,CAAC;oBACD,MAAM,IAAI,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6DAA6D,cAAc,CAAC,OAAO,IAAI,CAAC;QAElG,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gLAAgL;qBACvL;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,uGAAuG;qBAC9G;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4DAA4D,KAAK,CAAC,UAAU,WAAW;qBAC9F;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,0DAA0D;qBAChG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,cAAc,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;qBAC3G;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,UAAU,OAAO,EAAE;iBAC1B;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,OAAO,IAAI,CAAC;QAC7B,KAAK,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC;QACzB,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC;QAC3B,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC;QACxB,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;IAClC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAEjE,IAAI,UAAU,GAAY,WAAW,CAAC;IAEtC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE;QACJ,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,+TAA+T;QACjU,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gCAAgC;iBAC9C;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,eAAe;CACzB,CAAC"}

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAM/D,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,iDAAiD;IACjD,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEjF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAQD;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEhE;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,cAAc,EAAE,CAE9C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,EAAE,CAEpC;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CA6B/F;AA2BD,eAAO,MAAM,mBAAmB,QAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAM/D,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,iDAAiD;IACjD,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEjF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAQD;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEhE;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,cAAc,EAAE,CAE9C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,EAAE,CAEpC;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CA6B/F;AAiCD,eAAO,MAAM,mBAAmB,QAAoB,CAAC"}

package/dist/tools/index.js

@@ -75,20 +75,26 @@ export async function callTool(name, args) {
 // Import and register all tools
 // This is done at module load time to ensure all tools are available
 import { scanTool } from './scan.js';
+import { deepScanTool } from './deep-scan.js';
 import { governanceTool } from './governance.js';
 import { complianceTool } from './compliance.js';
 import { explainTool } from './explain.js';
 import { auditMcpTool } from './audit-mcp.js';
 import { mlbomTool } from './mlbom.js';
 import { auditA2aTool } from './audit-a2a.js';
+import { skillScanTool } from './skill-scan.js';
+import { mcpScanTool } from './mcp-scan.js';
 // Register all tools
 registerTool(scanTool);
+registerTool(deepScanTool);
 registerTool(governanceTool);
 registerTool(complianceTool);
 registerTool(explainTool);
 registerTool(auditMcpTool);
 registerTool(mlbomTool);
 registerTool(auditA2aTool);
+registerTool(skillScanTool);
+registerTool(mcpScanTool);
 // Export tool count for debugging
 export const registeredToolCount = toolRegistry.size;
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,UAA0B;IACrD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAA6B;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,wBAAwB,IAAI,GAAG;iBACtC;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,UAAU,OAAO,EAAE;iBAC1B;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,gCAAgC;AAChC,qEAAqE;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,qBAAqB;AACrB,YAAY,CAAC,QAAQ,CAAC,CAAC;AACvB,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,WAAW,CAAC,CAAC;AAC1B,YAAY,CAAC,YAAY,CAAC,CAAC;AAC3B,YAAY,CAAC,SAAS,CAAC,CAAC;AACxB,YAAY,CAAC,YAAY,CAAC,CAAC;AAE3B,kCAAkC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,UAA0B;IACrD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAA6B;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,wBAAwB,IAAI,GAAG;iBACtC;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,UAAU,OAAO,EAAE;iBAC1B;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,gCAAgC;AAChC,qEAAqE;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,qBAAqB;AACrB,YAAY,CAAC,QAAQ,CAAC,CAAC;AACvB,YAAY,CAAC,YAAY,CAAC,CAAC;AAC3B,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,WAAW,CAAC,CAAC;AAC1B,YAAY,CAAC,YAAY,CAAC,CAAC;AAC3B,YAAY,CAAC,SAAS,CAAC,CAAC;AACxB,YAAY,CAAC,YAAY,CAAC,CAAC;AAC3B,YAAY,CAAC,aAAa,CAAC,CAAC;AAC5B,YAAY,CAAC,WAAW,CAAC,CAAC;AAE1B,kCAAkC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC"}

package/dist/tools/mcp-scan.d.ts

@@ -0,0 +1,11 @@
+/**
+ * inkog_mcp_scan Tool
+ *
+ * Scan MCP servers from registry or by repository URL for security vulnerabilities.
+ * Detects tool poisoning, command injection, data exfiltration, excessive permissions, and more.
+ *
+ * For skill package scanning, use inkog_skill_scan instead.
+ */
+import type { ToolDefinition } from './index.js';
+export declare const mcpScanTool: ToolDefinition;
+//# sourceMappingURL=mcp-scan.d.ts.map

package/dist/tools/mcp-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-scan.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAyU7D,eAAO,MAAM,WAAW,EAAE,cA6BzB,CAAC"}