@kryptosai/mcp-observatory 0.27.0 → 1.28.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/COMMERCIAL.md +28 -2
- package/CONTRIBUTORS.md +39 -0
- package/README.md +114 -22
- package/dist/src/action-receipt.d.ts +20 -0
- package/dist/src/action-receipt.js +85 -0
- package/dist/src/action-receipt.js.map +1 -0
- package/dist/src/adapters/http.js +1 -5
- package/dist/src/adapters/http.js.map +1 -1
- package/dist/src/audit.d.ts +64 -0
- package/dist/src/audit.js +359 -0
- package/dist/src/audit.js.map +1 -0
- package/dist/src/cassette.js +3 -2
- package/dist/src/cassette.js.map +1 -1
- package/dist/src/checks/attack-sim.d.ts +20 -0
- package/dist/src/checks/attack-sim.js +316 -0
- package/dist/src/checks/attack-sim.js.map +1 -0
- package/dist/src/ci-issue.js +4 -3
- package/dist/src/ci-issue.js.map +1 -1
- package/dist/src/cli.js +25 -4
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/attack-sim.d.ts +2 -0
- package/dist/src/commands/attack-sim.js +220 -0
- package/dist/src/commands/attack-sim.js.map +1 -0
- package/dist/src/commands/audit.d.ts +2 -0
- package/dist/src/commands/audit.js +132 -0
- package/dist/src/commands/audit.js.map +1 -0
- package/dist/src/commands/init-ci.d.ts +3 -0
- package/dist/src/commands/init-ci.js +78 -13
- package/dist/src/commands/init-ci.js.map +1 -1
- package/dist/src/commands/legacy.js +8 -1
- package/dist/src/commands/legacy.js.map +1 -1
- package/dist/src/commands/receipt.d.ts +2 -0
- package/dist/src/commands/receipt.js +113 -0
- package/dist/src/commands/receipt.js.map +1 -0
- package/dist/src/commands/scan.js +30 -6
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/score.js +63 -0
- package/dist/src/commands/score.js.map +1 -1
- package/dist/src/commands/serve.js +9 -1
- package/dist/src/commands/serve.js.map +1 -1
- package/dist/src/commands/setup-ci-conversion.d.ts +3 -1
- package/dist/src/commands/setup-ci-conversion.js +23 -8
- package/dist/src/commands/setup-ci-conversion.js.map +1 -1
- package/dist/src/commands/telemetry.js +20 -14
- package/dist/src/commands/telemetry.js.map +1 -1
- package/dist/src/commands/test.js +31 -2
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/findings.d.ts +1 -0
- package/dist/src/findings.js +42 -1
- package/dist/src/findings.js.map +1 -1
- package/dist/src/history.js +3 -2
- package/dist/src/history.js.map +1 -1
- package/dist/src/index.d.ts +4 -0
- package/dist/src/index.js +4 -0
- package/dist/src/index.js.map +1 -1
- package/dist/src/integrations/smithery.js +5 -1
- package/dist/src/integrations/smithery.js.map +1 -1
- package/dist/src/receipt.d.ts +100 -0
- package/dist/src/receipt.js +375 -0
- package/dist/src/receipt.js.map +1 -0
- package/dist/src/reporters/attack-sim.d.ts +2 -0
- package/dist/src/reporters/attack-sim.js +89 -0
- package/dist/src/reporters/attack-sim.js.map +1 -0
- package/dist/src/reporters/pr-comment.js +20 -6
- package/dist/src/reporters/pr-comment.js.map +1 -1
- package/dist/src/reporters/sarif.js +11 -1
- package/dist/src/reporters/sarif.js.map +1 -1
- package/dist/src/runner.d.ts +3 -0
- package/dist/src/runner.js +5 -0
- package/dist/src/runner.js.map +1 -1
- package/dist/src/score.js +1 -1
- package/dist/src/score.js.map +1 -1
- package/dist/src/security-profiles.d.ts +13 -0
- package/dist/src/security-profiles.js +59 -0
- package/dist/src/security-profiles.js.map +1 -0
- package/dist/src/storage.js +3 -2
- package/dist/src/storage.js.map +1 -1
- package/dist/src/telemetry.d.ts +10 -0
- package/dist/src/telemetry.js +17 -1
- package/dist/src/telemetry.js.map +1 -1
- package/dist/src/types.d.ts +1 -1
- package/dist/src/utils/files.d.ts +1 -0
- package/dist/src/utils/files.js +21 -0
- package/dist/src/utils/files.js.map +1 -0
- package/dist/src/utils/ids.js +18 -5
- package/dist/src/utils/ids.js.map +1 -1
- package/dist/src/utils/url.d.ts +2 -0
- package/dist/src/utils/url.js +15 -0
- package/dist/src/utils/url.js.map +1 -0
- package/dist/src/validate.js +1 -1
- package/dist/src/validate.js.map +1 -1
- package/docs/10x-agentic-growth-sprint.md +47 -0
- package/docs/agent-ecosystem-promotion-plan.md +244 -0
- package/docs/agent-tasks.md +95 -0
- package/docs/agentic-contributor-outreach.md +52 -0
- package/docs/automatic-ci-integration.md +33 -0
- package/docs/campaign-attribution.md +58 -0
- package/docs/code-scanning-demo.md +57 -0
- package/docs/commercial-boundary.md +83 -0
- package/docs/contributor-proof-cards/README.md +33 -0
- package/docs/contributor-recognition.md +92 -0
- package/docs/examples/nsa-mcp-audit-report.md +372 -0
- package/docs/examples/nsa-mcp-results.sarif +930 -0
- package/docs/examples/nsa-mcp-score.json +13 -0
- package/docs/feishu-lark-mcp.md +1 -1
- package/docs/github-code-scanning-for-mcp.md +1 -1
- package/docs/government-enterprise-pilot.md +93 -0
- package/docs/launch.md +64 -0
- package/docs/mcp-attack-simulator.md +57 -0
- package/docs/mcp-receipts.md +109 -0
- package/docs/mcp-server-safety-index.md +29 -22
- package/docs/nsa-mcp-audit-ci.md +88 -0
- package/docs/procurement-one-pager.md +74 -0
- package/docs/proof.md +5 -2
- package/docs/public-guidance-crosswalk.md +48 -0
- package/docs/receipt-graph.md +54 -0
- package/docs/safety-index/artifacts/antv-chart-server.json +40 -22
- package/docs/safety-index/artifacts/antv-chart-server.md +22 -9
- package/docs/safety-index/artifacts/browsermcp-server.json +36 -18
- package/docs/safety-index/artifacts/browsermcp-server.md +22 -9
- package/docs/safety-index/artifacts/context7-server.json +83 -26
- package/docs/safety-index/artifacts/context7-server.md +33 -20
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +2438 -0
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +176 -0
- package/docs/safety-index/artifacts/everything-server.json +150 -57
- package/docs/safety-index/artifacts/everything-server.md +36 -23
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +162 -19
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +25 -12
- package/docs/safety-index/artifacts/filesystem-server.json +221 -19
- package/docs/safety-index/artifacts/filesystem-server.md +24 -11
- package/docs/safety-index/artifacts/kubernetes-server.attack.json +1559 -0
- package/docs/safety-index/artifacts/kubernetes-server.attack.md +43 -0
- package/docs/safety-index/artifacts/kubernetes-server.attack.sarif +2857 -0
- package/docs/safety-index/artifacts/kubernetes-server.json +1573 -0
- package/docs/safety-index/artifacts/kubernetes-server.md +176 -0
- package/docs/safety-index/artifacts/memory-server.json +93 -32
- package/docs/safety-index/artifacts/memory-server.md +45 -25
- package/docs/safety-index/artifacts/opentofu-server.json +44 -18
- package/docs/safety-index/artifacts/opentofu-server.md +23 -10
- package/docs/safety-index/artifacts/playwright-mcp-server.json +177 -21
- package/docs/safety-index/artifacts/playwright-mcp-server.md +27 -14
- package/docs/safety-index/artifacts/promptopia-server.json +45 -19
- package/docs/safety-index/artifacts/promptopia-server.md +21 -8
- package/docs/safety-index/artifacts/puppeteer-server.json +77 -22
- package/docs/safety-index/artifacts/puppeteer-server.md +28 -15
- package/docs/safety-index/artifacts/ref-tools-server.json +36 -18
- package/docs/safety-index/artifacts/ref-tools-server.md +21 -8
- package/docs/safety-index/artifacts/sequential-thinking-server.json +38 -21
- package/docs/safety-index/artifacts/sequential-thinking-server.md +22 -9
- package/docs/safety-index/targets.json +90 -14
- package/docs/security-due-diligence.md +87 -0
- package/docs/setup-ci-doctor.md +13 -1
- package/docs/target-gallery.md +49 -0
- package/docs/target-registry.md +5 -1
- package/docs/tool-call-receipts.md +115 -0
- package/examples/insecure-mcp-server/mcp-observatory.target.json +13 -0
- package/examples/insecure-mcp-server/server.mjs +62 -0
- package/package.json +31 -2
- package/schemas/run-artifact.schema.json +1 -0
- package/scripts/postinstall.mjs +138 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"smithery.js","sourceRoot":"","sources":["../../../src/integrations/smithery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAmDjD,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,+EAA+E;AAE/E,SAAS,OAAO,CAAC,MAAuB;IACtC,OAAO,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,sCAAsC;KACrD,CAAC;IACF,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,GAAW,EAAE,MAAuB;IAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,sBAAsB,CAC9B,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,EAClE,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,UAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,eAAU,GAAV,UAAU,CAAQ;QAGlC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,gBAAgB;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,QAAqB;IAErB,MAAM,KAAK,GACT,QAAQ,CAAC,WAAW,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAE3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAA8B;IACrE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,aAAa,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,SAAS,wBAAwB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,mBAAmB;IACnB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,iDAAiD,UAAU,GAAG,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,aAAa;IACb,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,UAAU,OAAO,IAAI,CACrF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,MAAM,IAAI,MAAM,KAAK,CAAC,UAAU,QAAQ,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sBAAsB;IACtB,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClG,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,EAAE,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9G,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,eAAe;IACf,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,MAAuB;IAEvB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAsB,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAuB,EACvB,OAA8C;IAE9C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,SAAS,CAA6B,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAA2D,EAC3D,MAAuB,EACvB,OAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnD,MAAM,OAAO,GACX,EAAE,CAAC;IAEL,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA0F;IAE1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,eAAe,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,gBAAgB;IAChB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE9C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,cAAc;QACd,MAAM,MAAM,GAAG,UAAU;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,aAAa;YACrB,KAAK,EAAE,CAAC,CAAC,UAAW,CAAC,KAAK,CAAC,OAAO;YAClC,KAAK,EAAE,CAAC,CAAC,UAAW,CAAC,KAAK,CAAC,KAAK;YAChC,IAAI,EAAE,CAAC,CAAC,UAAW,CAAC,QAAQ,CAAC,IAAI;SAClC,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAErC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E,SAAS,mBAAmB,CAAC,KAA0B;IACrD,uCAAuC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CACtD,CAAC;IAEF,IAAI,QAAQ,EAAE,GAAG,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE;gBACR,YAAY,EAAE,KAAK,CAAC,aAAa;gBACjC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;SACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,iEAAiE;IACjE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,aAAa;QAC7B,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC;QACjC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE;YACR,YAAY,EAAE,KAAK,CAAC,aAAa;YACjC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"smithery.js","sourceRoot":"","sources":["../../../src/integrations/smithery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAmDjD,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,+EAA+E;AAE/E,SAAS,OAAO,CAAC,MAAuB;IACtC,IAAI,KAAK,GAAG,MAAM,EAAE,OAAO,IAAI,gBAAgB,CAAC;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,sCAAsC;KACrD,CAAC;IACF,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,GAAW,EAAE,MAAuB;IAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,sBAAsB,CAC9B,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,EAClE,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,UAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,eAAU,GAAV,UAAU,CAAQ;QAGlC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,gBAAgB;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,QAAqB;IAErB,MAAM,KAAK,GACT,QAAQ,CAAC,WAAW,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAE3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAA8B;IACrE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,aAAa,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,SAAS,wBAAwB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,mBAAmB;IACnB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,iDAAiD,UAAU,GAAG,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,aAAa;IACb,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,UAAU,OAAO,IAAI,CACrF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,MAAM,IAAI,MAAM,KAAK,CAAC,UAAU,QAAQ,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sBAAsB;IACtB,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClG,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,EAAE,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9G,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,eAAe;IACf,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,MAAuB;IAEvB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAsB,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAuB,EACvB,OAA8C;IAE9C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,SAAS,CAA6B,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAA2D,EAC3D,MAAuB,EACvB,OAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnD,MAAM,OAAO,GACX,EAAE,CAAC;IAEL,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA0F;IAE1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,eAAe,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,gBAAgB;IAChB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE9C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,cAAc;QACd,MAAM,MAAM,GAAG,UAAU;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,aAAa;YACrB,KAAK,EAAE,CAAC,CAAC,UAAW,CAAC,KAAK,CAAC,OAAO;YAClC,KAAK,EAAE,CAAC,CAAC,UAAW,CAAC,KAAK,CAAC,KAAK;YAChC,IAAI,EAAE,CAAC,CAAC,UAAW,CAAC,QAAQ,CAAC,IAAI;SAClC,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAErC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E,SAAS,mBAAmB,CAAC,KAA0B;IACrD,uCAAuC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CACtD,CAAC;IAEF,IAAI,QAAQ,EAAE,GAAG,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE;gBACR,YAAY,EAAE,KAAK,CAAC,aAAa;gBACjC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;SACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,iEAAiE;IACjE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,aAAa;QAC7B,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC;QACjC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE;YACR,YAAY,EAAE,KAAK,CAAC,aAAa;YACjC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,100 @@
|
|
|
1
|
+
import { type AuditReport, type AuditSeverity, type TrustStatus } from "./audit.js";
|
|
2
|
+
import type { TargetConfig } from "./types.js";
|
|
3
|
+
export type ReceiptEnvironmentClass = "local" | "ci" | "public_safety_index" | "private_fleet";
|
|
4
|
+
export type ReceiptState = "ready_for_ci" | "needs_review" | "blocked" | "could_not_evaluate";
|
|
5
|
+
export type ReceiptAction = "allow" | "gate" | "rerun" | "quarantine" | "escalate";
|
|
6
|
+
export type ReceiptFormat = "json" | "markdown";
|
|
7
|
+
export interface ReceiptSubject {
|
|
8
|
+
mcp_server_name: string;
|
|
9
|
+
package_or_repo: string | null;
|
|
10
|
+
source: "local-process" | "http" | "target-config" | "unknown";
|
|
11
|
+
startup_command: string | null;
|
|
12
|
+
version: string | null;
|
|
13
|
+
resolved_identity: string | null;
|
|
14
|
+
target_path_or_url: string | null;
|
|
15
|
+
commit_sha: string | null;
|
|
16
|
+
package_manager: string | null;
|
|
17
|
+
}
|
|
18
|
+
export interface ReceiptRunContext {
|
|
19
|
+
generated_at: string;
|
|
20
|
+
mcp_observatory_version: string;
|
|
21
|
+
profile: string;
|
|
22
|
+
safe_mode_statement: string;
|
|
23
|
+
environment_class: ReceiptEnvironmentClass;
|
|
24
|
+
command_invoked: string;
|
|
25
|
+
config_file_used: string | null;
|
|
26
|
+
runner_os: string | null;
|
|
27
|
+
working_directory: string | null;
|
|
28
|
+
}
|
|
29
|
+
export interface ReceiptEvidence {
|
|
30
|
+
json_report_path: string | null;
|
|
31
|
+
json_report_sha256: string | null;
|
|
32
|
+
markdown_report_path: string | null;
|
|
33
|
+
markdown_report_sha256: string | null;
|
|
34
|
+
html_report_path: string | null;
|
|
35
|
+
html_report_sha256: string | null;
|
|
36
|
+
sarif_path: string | null;
|
|
37
|
+
sarif_sha256: string | null;
|
|
38
|
+
schema_summary: string;
|
|
39
|
+
tool_surface_summary: string;
|
|
40
|
+
attack_simulation_summary: string;
|
|
41
|
+
baseline_or_drift_summary: string;
|
|
42
|
+
}
|
|
43
|
+
export interface ReceiptVerdict {
|
|
44
|
+
score: number;
|
|
45
|
+
status: TrustStatus;
|
|
46
|
+
state: ReceiptState;
|
|
47
|
+
action: ReceiptAction;
|
|
48
|
+
reason: string;
|
|
49
|
+
}
|
|
50
|
+
export interface ReceiptFinding {
|
|
51
|
+
id: string;
|
|
52
|
+
title: string;
|
|
53
|
+
severity: AuditSeverity;
|
|
54
|
+
control_area: string;
|
|
55
|
+
evidence_summary: string;
|
|
56
|
+
recommended_fix: string;
|
|
57
|
+
blocks_ci: boolean;
|
|
58
|
+
fingerprint: string;
|
|
59
|
+
}
|
|
60
|
+
export interface ReceiptReproduction {
|
|
61
|
+
rerun_command: string;
|
|
62
|
+
ci_command: string;
|
|
63
|
+
sarif_upload_hint: string;
|
|
64
|
+
expected_artifacts: string[];
|
|
65
|
+
}
|
|
66
|
+
export interface ReceiptCta {
|
|
67
|
+
id: string;
|
|
68
|
+
label: string;
|
|
69
|
+
description: string;
|
|
70
|
+
}
|
|
71
|
+
export interface McpReceipt {
|
|
72
|
+
receipt_type: "mcp-observatory-receipt";
|
|
73
|
+
schema_version: "1.0.0";
|
|
74
|
+
subject: ReceiptSubject;
|
|
75
|
+
run_context: ReceiptRunContext;
|
|
76
|
+
evidence: ReceiptEvidence;
|
|
77
|
+
verdict: ReceiptVerdict;
|
|
78
|
+
findings: ReceiptFinding[];
|
|
79
|
+
reproduction: ReceiptReproduction;
|
|
80
|
+
maintainer_cta: ReceiptCta[];
|
|
81
|
+
buyer_cta: ReceiptCta[];
|
|
82
|
+
}
|
|
83
|
+
export interface ReceiptEvidenceOptions {
|
|
84
|
+
jsonReportPath?: string;
|
|
85
|
+
markdownReportPath?: string;
|
|
86
|
+
htmlReportPath?: string;
|
|
87
|
+
sarifPath?: string;
|
|
88
|
+
}
|
|
89
|
+
export interface BuildReceiptOptions extends ReceiptEvidenceOptions {
|
|
90
|
+
commandInvoked?: string;
|
|
91
|
+
configFileUsed?: string;
|
|
92
|
+
environmentClass?: ReceiptEnvironmentClass;
|
|
93
|
+
outputPath?: string;
|
|
94
|
+
topFindingsLimit?: number;
|
|
95
|
+
}
|
|
96
|
+
export declare function mapStatusToReceiptVerdict(report: AuditReport): ReceiptVerdict;
|
|
97
|
+
export declare function buildMcpReceipt(report: AuditReport, target: TargetConfig, options?: BuildReceiptOptions): Promise<McpReceipt>;
|
|
98
|
+
export declare function renderReceiptMarkdown(receipt: McpReceipt): string;
|
|
99
|
+
export declare function renderReceipt(receipt: McpReceipt, format: ReceiptFormat): string;
|
|
100
|
+
export declare function receiptFormatFromPath(outputPath: string | undefined, fallback: ReceiptFormat): ReceiptFormat;
|
|
@@ -0,0 +1,375 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
import { existsSync } from "node:fs";
|
|
3
|
+
import { readFile } from "node:fs/promises";
|
|
4
|
+
import os from "node:os";
|
|
5
|
+
import path from "node:path";
|
|
6
|
+
import { auditScore, renderAuditMarkdown, renderAuditSarif } from "./audit.js";
|
|
7
|
+
const SAFE_MODE_STATEMENT = "Safe-mode only: MCP Observatory inspects metadata, schemas, startup behavior, and inert attack-readiness evidence. It does not execute destructive payloads, exfiltrate secrets, or contact attacker-controlled callbacks.";
|
|
8
|
+
function quoteArg(value) {
|
|
9
|
+
if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value))
|
|
10
|
+
return value;
|
|
11
|
+
return JSON.stringify(value);
|
|
12
|
+
}
|
|
13
|
+
function targetCommand(target) {
|
|
14
|
+
if (target.adapter === "http")
|
|
15
|
+
return target.url;
|
|
16
|
+
return [target.command, ...target.args].map(quoteArg).join(" ");
|
|
17
|
+
}
|
|
18
|
+
function targetPackageOrRepo(target) {
|
|
19
|
+
const metadata = target.metadata ?? {};
|
|
20
|
+
return metadata["package"] ?? metadata["repo"] ?? metadata["repository"] ?? metadata["source"] ?? null;
|
|
21
|
+
}
|
|
22
|
+
function packageManager(target) {
|
|
23
|
+
if (target.adapter !== "local-process")
|
|
24
|
+
return null;
|
|
25
|
+
if (target.command === "npx" || target.command === "npm" || target.args.some((arg) => arg.includes("npm")))
|
|
26
|
+
return "npm";
|
|
27
|
+
if (target.command === "pnpm" || target.args.some((arg) => arg.includes("pnpm")))
|
|
28
|
+
return "pnpm";
|
|
29
|
+
if (target.command === "yarn" || target.args.some((arg) => arg.includes("yarn")))
|
|
30
|
+
return "yarn";
|
|
31
|
+
if (target.command === "uvx" || target.command === "uv")
|
|
32
|
+
return "uv";
|
|
33
|
+
if (target.command === "pipx" || target.command === "python" || target.command === "python3")
|
|
34
|
+
return "python";
|
|
35
|
+
return null;
|
|
36
|
+
}
|
|
37
|
+
function resolvedIdentity(report, target) {
|
|
38
|
+
const serverName = report.artifact.target.serverName;
|
|
39
|
+
const serverVersion = report.artifact.target.serverVersion;
|
|
40
|
+
if (serverName && serverVersion)
|
|
41
|
+
return `${serverName}@${serverVersion}`;
|
|
42
|
+
if (serverName)
|
|
43
|
+
return serverName;
|
|
44
|
+
if (target.adapter === "local-process" && target.command === "npx") {
|
|
45
|
+
const pkg = target.args.find((arg) => !arg.startsWith("-"));
|
|
46
|
+
return pkg ?? null;
|
|
47
|
+
}
|
|
48
|
+
return null;
|
|
49
|
+
}
|
|
50
|
+
function safeWorkingDirectory(target) {
|
|
51
|
+
if (target.adapter !== "local-process" || !target.cwd)
|
|
52
|
+
return null;
|
|
53
|
+
const resolved = path.resolve(target.cwd);
|
|
54
|
+
const home = os.homedir();
|
|
55
|
+
if (resolved === home || resolved.startsWith(`${home}${path.sep}`))
|
|
56
|
+
return null;
|
|
57
|
+
return resolved;
|
|
58
|
+
}
|
|
59
|
+
function safePath(value) {
|
|
60
|
+
if (!value)
|
|
61
|
+
return null;
|
|
62
|
+
const resolved = path.resolve(value);
|
|
63
|
+
const home = os.homedir();
|
|
64
|
+
if (resolved === home || resolved.startsWith(`${home}${path.sep}`))
|
|
65
|
+
return path.basename(value);
|
|
66
|
+
return value;
|
|
67
|
+
}
|
|
68
|
+
function inferEnvironmentClass() {
|
|
69
|
+
if (process.env["MCP_OBSERVATORY_PUBLIC_SAFETY_INDEX"] === "1")
|
|
70
|
+
return "public_safety_index";
|
|
71
|
+
if (process.env["MCP_OBSERVATORY_PRIVATE_FLEET"] === "1")
|
|
72
|
+
return "private_fleet";
|
|
73
|
+
if (process.env["CI"] === "true" || process.env["GITHUB_ACTIONS"] === "true")
|
|
74
|
+
return "ci";
|
|
75
|
+
return "local";
|
|
76
|
+
}
|
|
77
|
+
function sha256Text(value) {
|
|
78
|
+
return createHash("sha256").update(value).digest("hex");
|
|
79
|
+
}
|
|
80
|
+
async function sha256File(filePath) {
|
|
81
|
+
if (!filePath || !existsSync(filePath))
|
|
82
|
+
return null;
|
|
83
|
+
return sha256Text(await readFile(filePath, "utf8"));
|
|
84
|
+
}
|
|
85
|
+
function schemaSummary(report) {
|
|
86
|
+
const schemaCheck = report.artifact.checks.find((check) => check.id === "schema-quality");
|
|
87
|
+
if (!schemaCheck)
|
|
88
|
+
return "No dedicated schema-quality check was present.";
|
|
89
|
+
const findingCount = schemaCheck.evidence.reduce((sum, evidence) => sum + (evidence.findings?.length ?? 0), 0);
|
|
90
|
+
return `${schemaCheck.status}: ${schemaCheck.message}${findingCount > 0 ? ` (${findingCount} schema finding(s))` : ""}`;
|
|
91
|
+
}
|
|
92
|
+
function toolSurfaceSummary(report) {
|
|
93
|
+
const toolsCheck = report.artifact.checks.find((check) => check.id === "tools");
|
|
94
|
+
if (!toolsCheck)
|
|
95
|
+
return "Tool surface was not listed.";
|
|
96
|
+
const identifiers = toolsCheck.evidence.flatMap((evidence) => evidence.identifiers ?? []);
|
|
97
|
+
const count = identifiers.length > 0 ? identifiers.length : toolsCheck.evidence.reduce((sum, evidence) => sum + (evidence.itemCount ?? 0), 0);
|
|
98
|
+
const sample = identifiers.slice(0, 5).join(", ");
|
|
99
|
+
return `${toolsCheck.status}: ${count} tool(s) observed${sample ? ` (${sample}${identifiers.length > 5 ? ", ..." : ""})` : ""}.`;
|
|
100
|
+
}
|
|
101
|
+
function attackSimulationSummary(report) {
|
|
102
|
+
const attackCheck = report.artifact.checks.find((check) => check.id === "attack-sim");
|
|
103
|
+
if (!attackCheck)
|
|
104
|
+
return "Attack simulation evidence was not generated for this run.";
|
|
105
|
+
const findingCount = attackCheck.evidence.reduce((sum, evidence) => sum + (evidence.findings?.length ?? 0), 0);
|
|
106
|
+
return `${attackCheck.status}: ${attackCheck.message}${findingCount > 0 ? ` (${findingCount} attack-sim finding(s))` : ""}`;
|
|
107
|
+
}
|
|
108
|
+
function driftSummary(report) {
|
|
109
|
+
const driftFindings = report.findings.filter((finding) => finding.rule_id.includes("drift") || finding.category.includes("drift"));
|
|
110
|
+
if (driftFindings.length === 0)
|
|
111
|
+
return "No baseline or drift finding was included in this receipt.";
|
|
112
|
+
return `${driftFindings.length} baseline/drift finding(s) summarized.`;
|
|
113
|
+
}
|
|
114
|
+
export function mapStatusToReceiptVerdict(report) {
|
|
115
|
+
if (report.artifact.fatalError) {
|
|
116
|
+
return {
|
|
117
|
+
score: report.summary.score,
|
|
118
|
+
status: report.summary.trust_status,
|
|
119
|
+
state: "could_not_evaluate",
|
|
120
|
+
action: "rerun",
|
|
121
|
+
reason: report.artifact.fatalError.split("\n")[0] ?? "Evaluation did not complete.",
|
|
122
|
+
};
|
|
123
|
+
}
|
|
124
|
+
const counts = report.summary.severity_counts;
|
|
125
|
+
const status = auditScore(report).status;
|
|
126
|
+
if (counts.critical > 0 || status === "critical_risk") {
|
|
127
|
+
return { score: report.summary.score, status, state: "blocked", action: "escalate", reason: "Critical MCP release-gate findings require escalation before agent dependency." };
|
|
128
|
+
}
|
|
129
|
+
if (counts.high > 0 || status === "high_risk") {
|
|
130
|
+
return { score: report.summary.score, status, state: "blocked", action: "gate", reason: "High-risk MCP findings should block CI until reviewed or fixed." };
|
|
131
|
+
}
|
|
132
|
+
if (counts.medium > 0 || status === "needs_review") {
|
|
133
|
+
return { score: report.summary.score, status, state: "needs_review", action: "gate", reason: "Medium-risk MCP findings need maintainer review before broad agent dependency." };
|
|
134
|
+
}
|
|
135
|
+
return { score: report.summary.score, status, state: "ready_for_ci", action: "allow", reason: "No blocking MCP readiness findings were detected." };
|
|
136
|
+
}
|
|
137
|
+
function findingRank(severity) {
|
|
138
|
+
return severity === "critical" ? 5
|
|
139
|
+
: severity === "high" ? 4
|
|
140
|
+
: severity === "medium" ? 3
|
|
141
|
+
: severity === "low" ? 2
|
|
142
|
+
: 1;
|
|
143
|
+
}
|
|
144
|
+
function summarizeEvidence(finding) {
|
|
145
|
+
const evidence = JSON.stringify(finding.evidence ?? {});
|
|
146
|
+
if (evidence.length <= 240)
|
|
147
|
+
return evidence;
|
|
148
|
+
return `${evidence.slice(0, 237)}...`;
|
|
149
|
+
}
|
|
150
|
+
function blocksCi(severity) {
|
|
151
|
+
return severity === "critical" || severity === "high" || severity === "medium";
|
|
152
|
+
}
|
|
153
|
+
function receiptFindings(report, limit) {
|
|
154
|
+
return [...report.findings]
|
|
155
|
+
.sort((a, b) => findingRank(b.severity) - findingRank(a.severity) || a.title.localeCompare(b.title))
|
|
156
|
+
.slice(0, limit)
|
|
157
|
+
.map((finding) => ({
|
|
158
|
+
id: finding.id,
|
|
159
|
+
title: finding.title,
|
|
160
|
+
severity: finding.severity,
|
|
161
|
+
control_area: finding.control_mappings[0] ?? "trust_boundaries",
|
|
162
|
+
evidence_summary: summarizeEvidence(finding),
|
|
163
|
+
recommended_fix: finding.recommendation,
|
|
164
|
+
blocks_ci: blocksCi(finding.severity),
|
|
165
|
+
fingerprint: finding.fingerprint,
|
|
166
|
+
}));
|
|
167
|
+
}
|
|
168
|
+
function ciCommand(target) {
|
|
169
|
+
return `mcp-observatory setup-ci --all --command ${quoteArg(targetCommand(target))} --sarif --schedule weekly`;
|
|
170
|
+
}
|
|
171
|
+
function rerunCommand(target, profile) {
|
|
172
|
+
return `mcp-observatory audit ${targetCommand(target)} --profile ${quoteArg(profile)} --format json --output report.json`;
|
|
173
|
+
}
|
|
174
|
+
export async function buildMcpReceipt(report, target, options = {}) {
|
|
175
|
+
const jsonReportText = JSON.stringify(report, null, 2);
|
|
176
|
+
const markdownReportText = renderAuditMarkdown(report);
|
|
177
|
+
const sarifText = renderAuditSarif(report);
|
|
178
|
+
const expectedArtifacts = [
|
|
179
|
+
options.jsonReportPath ?? "report.json",
|
|
180
|
+
options.markdownReportPath ?? "report.md",
|
|
181
|
+
options.sarifPath ?? "results.sarif",
|
|
182
|
+
];
|
|
183
|
+
const metadata = target.metadata ?? {};
|
|
184
|
+
return {
|
|
185
|
+
receipt_type: "mcp-observatory-receipt",
|
|
186
|
+
schema_version: "1.0.0",
|
|
187
|
+
subject: {
|
|
188
|
+
mcp_server_name: report.artifact.target.serverName ?? target.targetId,
|
|
189
|
+
package_or_repo: targetPackageOrRepo(target),
|
|
190
|
+
source: target.adapter === "http" ? "http" : "local-process",
|
|
191
|
+
startup_command: target.adapter === "local-process" ? targetCommand(target) : null,
|
|
192
|
+
version: report.artifact.target.serverVersion ?? metadata["version"] ?? null,
|
|
193
|
+
resolved_identity: resolvedIdentity(report, target),
|
|
194
|
+
target_path_or_url: target.adapter === "http" ? target.url : safePath(target.cwd),
|
|
195
|
+
commit_sha: metadata["commit_sha"] ?? metadata["commit"] ?? process.env["GITHUB_SHA"] ?? null,
|
|
196
|
+
package_manager: packageManager(target),
|
|
197
|
+
},
|
|
198
|
+
run_context: {
|
|
199
|
+
generated_at: report.summary.generated_at,
|
|
200
|
+
mcp_observatory_version: report.artifact.toolVersion,
|
|
201
|
+
profile: report.summary.profile,
|
|
202
|
+
safe_mode_statement: SAFE_MODE_STATEMENT,
|
|
203
|
+
environment_class: options.environmentClass ?? inferEnvironmentClass(),
|
|
204
|
+
command_invoked: options.commandInvoked ?? rerunCommand(target, report.summary.profile),
|
|
205
|
+
config_file_used: safePath(options.configFileUsed),
|
|
206
|
+
runner_os: report.artifact.environment.platform,
|
|
207
|
+
working_directory: safeWorkingDirectory(target),
|
|
208
|
+
},
|
|
209
|
+
evidence: {
|
|
210
|
+
json_report_path: options.jsonReportPath ?? null,
|
|
211
|
+
json_report_sha256: options.jsonReportPath ? await sha256File(options.jsonReportPath) : sha256Text(jsonReportText),
|
|
212
|
+
markdown_report_path: options.markdownReportPath ?? null,
|
|
213
|
+
markdown_report_sha256: options.markdownReportPath ? await sha256File(options.markdownReportPath) : sha256Text(markdownReportText),
|
|
214
|
+
html_report_path: options.htmlReportPath ?? null,
|
|
215
|
+
html_report_sha256: await sha256File(options.htmlReportPath),
|
|
216
|
+
sarif_path: options.sarifPath ?? null,
|
|
217
|
+
sarif_sha256: options.sarifPath ? await sha256File(options.sarifPath) : sha256Text(sarifText),
|
|
218
|
+
schema_summary: schemaSummary(report),
|
|
219
|
+
tool_surface_summary: toolSurfaceSummary(report),
|
|
220
|
+
attack_simulation_summary: attackSimulationSummary(report),
|
|
221
|
+
baseline_or_drift_summary: driftSummary(report),
|
|
222
|
+
},
|
|
223
|
+
verdict: mapStatusToReceiptVerdict(report),
|
|
224
|
+
findings: receiptFindings(report, options.topFindingsLimit ?? 5),
|
|
225
|
+
reproduction: {
|
|
226
|
+
rerun_command: rerunCommand(target, report.summary.profile),
|
|
227
|
+
ci_command: ciCommand(target),
|
|
228
|
+
sarif_upload_hint: "Generate SARIF with `mcp-observatory audit <target> --format sarif --output results.sarif`, then upload it with GitHub Code Scanning.",
|
|
229
|
+
expected_artifacts: expectedArtifacts,
|
|
230
|
+
},
|
|
231
|
+
maintainer_cta: [
|
|
232
|
+
{ id: "claim_or_update_receipt", label: "Claim this receipt", description: "Confirm the target command and update the receipt with maintainer-approved startup details." },
|
|
233
|
+
{ id: "add_ci", label: "Add CI gate", description: "Run the CI command so every release keeps this MCP receipt current." },
|
|
234
|
+
{ id: "fix_findings", label: "Fix blocking findings", description: "Address findings that block CI or require review." },
|
|
235
|
+
{ id: "request_rerun", label: "Request rerun", description: "Ask MCP Observatory to regenerate this receipt after fixes or target changes." },
|
|
236
|
+
{ id: "provide_safe_startup_mode", label: "Provide safe startup mode", description: "Share a no-secret, non-destructive startup command for public receipt generation." },
|
|
237
|
+
],
|
|
238
|
+
buyer_cta: [
|
|
239
|
+
{ id: "request_private_fleet_receipt_pack", label: "Request private fleet receipt pack", description: "Generate receipts for internal MCP servers without publishing private evidence." },
|
|
240
|
+
{ id: "request_attack_simulation_evidence_pack", label: "Request attack simulation evidence pack", description: "Package safe-mode attack simulation evidence for security review." },
|
|
241
|
+
{ id: "request_ci_sarif_rollout", label: "Request CI/SARIF rollout", description: "Add release gates and GitHub Code Scanning for MCP dependencies." },
|
|
242
|
+
{ id: "request_government_enterprise_pilot", label: "Request government/enterprise pilot", description: "Map receipts to procurement-friendly security evidence and pilot deliverables." },
|
|
243
|
+
],
|
|
244
|
+
};
|
|
245
|
+
}
|
|
246
|
+
function markdownTable(rows) {
|
|
247
|
+
if (rows.length === 0)
|
|
248
|
+
return "";
|
|
249
|
+
return [
|
|
250
|
+
`| ${rows[0].join(" | ")} |`,
|
|
251
|
+
`| ${rows[0].map(() => "---").join(" | ")} |`,
|
|
252
|
+
...rows.slice(1).map((row) => `| ${row.join(" | ")} |`),
|
|
253
|
+
].join("\n");
|
|
254
|
+
}
|
|
255
|
+
function cell(value) {
|
|
256
|
+
const text = value == null ? "" : typeof value === "string" ? value : JSON.stringify(value);
|
|
257
|
+
return text.replaceAll("|", "\\|").replaceAll("\n", " ");
|
|
258
|
+
}
|
|
259
|
+
export function renderReceiptMarkdown(receipt) {
|
|
260
|
+
const lines = [
|
|
261
|
+
"# MCP Observatory Receipt",
|
|
262
|
+
"",
|
|
263
|
+
"A scan finds facts. A report explains facts. A receipt makes facts portable, reproducible, citable, and actionable.",
|
|
264
|
+
"",
|
|
265
|
+
"## Verdict",
|
|
266
|
+
"",
|
|
267
|
+
`**State:** \`${receipt.verdict.state}\``,
|
|
268
|
+
`**Action:** \`${receipt.verdict.action}\``,
|
|
269
|
+
`**Trust status:** \`${receipt.verdict.status}\``,
|
|
270
|
+
`**Score:** ${receipt.verdict.score}/100`,
|
|
271
|
+
`**Reason:** ${receipt.verdict.reason}`,
|
|
272
|
+
"",
|
|
273
|
+
"## Subject",
|
|
274
|
+
"",
|
|
275
|
+
markdownTable([
|
|
276
|
+
["Field", "Value"],
|
|
277
|
+
["MCP server", cell(receipt.subject.mcp_server_name)],
|
|
278
|
+
["Package or repo", cell(receipt.subject.package_or_repo)],
|
|
279
|
+
["Source", receipt.subject.source],
|
|
280
|
+
["Startup command", cell(receipt.subject.startup_command)],
|
|
281
|
+
["Version", cell(receipt.subject.version)],
|
|
282
|
+
["Resolved identity", cell(receipt.subject.resolved_identity)],
|
|
283
|
+
["Target path or URL", cell(receipt.subject.target_path_or_url)],
|
|
284
|
+
["Commit SHA", cell(receipt.subject.commit_sha)],
|
|
285
|
+
["Package manager", cell(receipt.subject.package_manager)],
|
|
286
|
+
]),
|
|
287
|
+
"",
|
|
288
|
+
"## Run Context",
|
|
289
|
+
"",
|
|
290
|
+
markdownTable([
|
|
291
|
+
["Field", "Value"],
|
|
292
|
+
["Generated at", receipt.run_context.generated_at],
|
|
293
|
+
["MCP Observatory version", receipt.run_context.mcp_observatory_version],
|
|
294
|
+
["Profile", receipt.run_context.profile],
|
|
295
|
+
["Environment", receipt.run_context.environment_class],
|
|
296
|
+
["Command invoked", cell(receipt.run_context.command_invoked)],
|
|
297
|
+
["Config file", cell(receipt.run_context.config_file_used)],
|
|
298
|
+
["Runner OS", cell(receipt.run_context.runner_os)],
|
|
299
|
+
["Working directory", cell(receipt.run_context.working_directory)],
|
|
300
|
+
]),
|
|
301
|
+
"",
|
|
302
|
+
`> ${receipt.run_context.safe_mode_statement}`,
|
|
303
|
+
"",
|
|
304
|
+
"## Evidence",
|
|
305
|
+
"",
|
|
306
|
+
markdownTable([
|
|
307
|
+
["Artifact", "Path", "SHA-256"],
|
|
308
|
+
["JSON report", cell(receipt.evidence.json_report_path), cell(receipt.evidence.json_report_sha256)],
|
|
309
|
+
["Markdown report", cell(receipt.evidence.markdown_report_path), cell(receipt.evidence.markdown_report_sha256)],
|
|
310
|
+
["HTML report", cell(receipt.evidence.html_report_path), cell(receipt.evidence.html_report_sha256)],
|
|
311
|
+
["SARIF", cell(receipt.evidence.sarif_path), cell(receipt.evidence.sarif_sha256)],
|
|
312
|
+
]),
|
|
313
|
+
"",
|
|
314
|
+
`- Schema summary: ${receipt.evidence.schema_summary}`,
|
|
315
|
+
`- Tool surface summary: ${receipt.evidence.tool_surface_summary}`,
|
|
316
|
+
`- Attack simulation summary: ${receipt.evidence.attack_simulation_summary}`,
|
|
317
|
+
`- Baseline/drift summary: ${receipt.evidence.baseline_or_drift_summary}`,
|
|
318
|
+
"",
|
|
319
|
+
"## Top Findings",
|
|
320
|
+
"",
|
|
321
|
+
receipt.findings.length === 0
|
|
322
|
+
? "No top findings were included in this receipt."
|
|
323
|
+
: markdownTable([
|
|
324
|
+
["Severity", "Title", "Control", "Blocks CI", "Fingerprint", "Fix"],
|
|
325
|
+
...receipt.findings.map((finding) => [
|
|
326
|
+
finding.severity,
|
|
327
|
+
cell(finding.title),
|
|
328
|
+
cell(finding.control_area),
|
|
329
|
+
finding.blocks_ci ? "yes" : "no",
|
|
330
|
+
finding.fingerprint,
|
|
331
|
+
cell(finding.recommended_fix),
|
|
332
|
+
]),
|
|
333
|
+
]),
|
|
334
|
+
"",
|
|
335
|
+
"## Reproduction",
|
|
336
|
+
"",
|
|
337
|
+
"Rerun this evaluation:",
|
|
338
|
+
"",
|
|
339
|
+
"```bash",
|
|
340
|
+
receipt.reproduction.rerun_command,
|
|
341
|
+
"```",
|
|
342
|
+
"",
|
|
343
|
+
"Add CI:",
|
|
344
|
+
"",
|
|
345
|
+
"```bash",
|
|
346
|
+
receipt.reproduction.ci_command,
|
|
347
|
+
"```",
|
|
348
|
+
"",
|
|
349
|
+
receipt.reproduction.sarif_upload_hint,
|
|
350
|
+
"",
|
|
351
|
+
"Expected artifacts:",
|
|
352
|
+
"",
|
|
353
|
+
...receipt.reproduction.expected_artifacts.map((artifact) => `- \`${artifact}\``),
|
|
354
|
+
"",
|
|
355
|
+
"## Maintainer Actions",
|
|
356
|
+
"",
|
|
357
|
+
...receipt.maintainer_cta.map((cta) => `- **${cta.label}:** ${cta.description}`),
|
|
358
|
+
"",
|
|
359
|
+
"## Buyer Actions",
|
|
360
|
+
"",
|
|
361
|
+
...receipt.buyer_cta.map((cta) => `- **${cta.label}:** ${cta.description}`),
|
|
362
|
+
];
|
|
363
|
+
return lines.join("\n");
|
|
364
|
+
}
|
|
365
|
+
export function renderReceipt(receipt, format) {
|
|
366
|
+
if (format === "json")
|
|
367
|
+
return JSON.stringify(receipt, null, 2);
|
|
368
|
+
return renderReceiptMarkdown(receipt);
|
|
369
|
+
}
|
|
370
|
+
export function receiptFormatFromPath(outputPath, fallback) {
|
|
371
|
+
if (!outputPath)
|
|
372
|
+
return fallback;
|
|
373
|
+
return /\.json$/i.test(outputPath) ? "json" : "markdown";
|
|
374
|
+
}
|
|
375
|
+
//# sourceMappingURL=receipt.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAA0F,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA2GvK,MAAM,mBAAmB,GAAG,4NAA4N,CAAC;AAEzP,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AACzG,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAChG,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAChG,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC9G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmB,EAAE,MAAoB;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;IAC3D,IAAI,UAAU,IAAI,aAAa;QAAE,OAAO,GAAG,UAAU,IAAI,aAAa,EAAE,CAAC;IACzE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAoB;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IAC7F,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IACjF,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAA4B;IACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC;IAC1F,IAAI,CAAC,WAAW;QAAE,OAAO,gDAAgD,CAAC;IAC1E,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/G,OAAO,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC1H,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,UAAU;QAAE,OAAO,8BAA8B,CAAC;IACvD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9I,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,oBAAoB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACnI,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAmB;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;IACtF,IAAI,CAAC,WAAW;QAAE,OAAO,4DAA4D,CAAC;IACtF,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/G,OAAO,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9H,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnI,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,4DAA4D,CAAC;IACpG,OAAO,GAAG,aAAa,CAAC,MAAM,wCAAwC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAmB;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;YAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;YACnC,KAAK,EAAE,oBAAoB;YAC3B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,8BAA8B;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,gFAAgF,EAAE,CAAC;IACjL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAC9J,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gFAAgF,EAAE,CAAC;IAClL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;AACtJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAuB;IAC1C,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAkC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,QAAuB;IACvC,OAAO,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,QAAQ,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB,EAAE,KAAa;IACzD,OAAO,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;SACxB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SACnG,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,kBAAkB;QAC/D,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAC5C,eAAe,EAAE,OAAO,CAAC,cAAc;QACvC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB;IACrC,OAAO,4CAA4C,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC;AACjH,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB,EAAE,OAAe;IACzD,OAAO,yBAAyB,aAAa,CAAC,MAAM,CAAC,cAAc,QAAQ,CAAC,OAAO,CAAC,qCAAqC,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAmB,EAAE,MAAoB,EAAE,UAA+B,EAAE;IAChH,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,iBAAiB,GAAG;QACxB,OAAO,CAAC,cAAc,IAAI,aAAa;QACvC,OAAO,CAAC,kBAAkB,IAAI,WAAW;QACzC,OAAO,CAAC,SAAS,IAAI,eAAe;KACrC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,YAAY,EAAE,yBAAyB;QACvC,cAAc,EAAE,OAAO;QACvB,OAAO,EAAE;YACP,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ;YACrE,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;YAC5D,eAAe,EAAE,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YAClF,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI;YAC5E,iBAAiB,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;YACnD,kBAAkB,EAAE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YACjF,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI;YAC7F,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC;SACxC;QACD,WAAW,EAAE;YACX,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;YACzC,uBAAuB,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACpD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;YAC/B,mBAAmB,EAAE,mBAAmB;YACxC,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,IAAI,qBAAqB,EAAE;YACtE,eAAe,EAAE,OAAO,CAAC,cAAc,IAAI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YACvF,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;YAClD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ;YAC/C,iBAAiB,EAAE,oBAAoB,CAAC,MAAM,CAAC;SAChD;QACD,QAAQ,EAAE;YACR,gBAAgB,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAChD,kBAAkB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAClH,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;YACxD,sBAAsB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAClI,gBAAgB,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAChD,kBAAkB,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC;YAC5D,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACrC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7F,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC;YACrC,oBAAoB,EAAE,kBAAkB,CAAC,MAAM,CAAC;YAChD,yBAAyB,EAAE,uBAAuB,CAAC,MAAM,CAAC;YAC1D,yBAAyB,EAAE,YAAY,CAAC,MAAM,CAAC;SAChD;QACD,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC;QAC1C,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAChE,YAAY,EAAE;YACZ,aAAa,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAC3D,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC;YAC7B,iBAAiB,EAAE,uIAAuI;YAC1J,kBAAkB,EAAE,iBAAiB;SACtC;QACD,cAAc,EAAE;YACd,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,6FAA6F,EAAE;YAC1K,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,qEAAqE,EAAE;YAC1H,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,mDAAmD,EAAE;YACxH,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,+EAA+E,EAAE;YAC7I,EAAE,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,mFAAmF,EAAE;SAC1K;QACD,SAAS,EAAE;YACT,EAAE,EAAE,EAAE,oCAAoC,EAAE,KAAK,EAAE,oCAAoC,EAAE,WAAW,EAAE,iFAAiF,EAAE;YACzL,EAAE,EAAE,EAAE,yCAAyC,EAAE,KAAK,EAAE,yCAAyC,EAAE,WAAW,EAAE,mEAAmE,EAAE;YACrL,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,kEAAkE,EAAE;YACtJ,EAAE,EAAE,EAAE,qCAAqC,EAAE,KAAK,EAAE,qCAAqC,EAAE,WAAW,EAAE,gFAAgF,EAAE;SAC3L;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAgB;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;QACL,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;QAC7B,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;QAC9C,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;KACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACvD,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,EAAE;QACF,qHAAqH;QACrH,EAAE;QACF,YAAY;QACZ,EAAE;QACF,gBAAgB,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI;QACzC,iBAAiB,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI;QAC3C,uBAAuB,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI;QACjD,cAAc,OAAO,CAAC,OAAO,CAAC,KAAK,MAAM;QACzC,eAAe,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QACvC,EAAE;QACF,YAAY;QACZ,EAAE;QACF,aAAa,CAAC;YACZ,CAAC,OAAO,EAAE,OAAO,CAAC;YAClB,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrD,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC9D,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAChE,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAChD,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;SAC3D,CAAC;QACF,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,aAAa,CAAC;YACZ,CAAC,OAAO,EAAE,OAAO,CAAC;YAClB,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC;YAClD,CAAC,yBAAyB,EAAE,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC;YACxE,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;YACxC,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC;YACtD,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAC9D,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YAC3D,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;SACnE,CAAC;QACF,EAAE;QACF,KAAK,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE;QAC9C,EAAE;QACF,aAAa;QACb,EAAE;QACF,aAAa,CAAC;YACZ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC;YAC/B,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACnG,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YAC/G,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACnG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;SAClF,CAAC;QACF,EAAE;QACF,qBAAqB,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE;QACtD,2BAA2B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE;QAClE,gCAAgC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,EAAE;QAC5E,6BAA6B,OAAO,CAAC,QAAQ,CAAC,yBAAyB,EAAE;QACzE,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,gDAAgD;YAClD,CAAC,CAAC,aAAa,CAAC;gBACd,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC;gBACnE,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBACnC,OAAO,CAAC,QAAQ;oBAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBACnB,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;oBAC1B,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;oBAChC,OAAO,CAAC,WAAW;oBACnB,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;iBAC9B,CAAC;aACH,CAAC;QACJ,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,wBAAwB;QACxB,EAAE;QACF,SAAS;QACT,OAAO,CAAC,YAAY,CAAC,aAAa;QAClC,KAAK;QACL,EAAE;QACF,SAAS;QACT,EAAE;QACF,SAAS;QACT,OAAO,CAAC,YAAY,CAAC,UAAU;QAC/B,KAAK;QACL,EAAE;QACF,OAAO,CAAC,YAAY,CAAC,iBAAiB;QACtC,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,GAAG,OAAO,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,IAAI,CAAC;QACjF,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;QAChF,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;KAC5E,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAmB,EAAE,MAAqB;IACtE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAA8B,EAAE,QAAuB;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC"}
|
|
@@ -0,0 +1,89 @@
|
|
|
1
|
+
import { extractObservatoryFindings } from "../findings.js";
|
|
2
|
+
import { buildActionReceipt } from "../action-receipt.js";
|
|
3
|
+
function table(rows) {
|
|
4
|
+
if (rows.length === 0)
|
|
5
|
+
return "_None._";
|
|
6
|
+
const [header, ...body] = rows;
|
|
7
|
+
if (!header)
|
|
8
|
+
return "_None._";
|
|
9
|
+
return [
|
|
10
|
+
`| ${header.join(" | ")} |`,
|
|
11
|
+
`| ${header.map(() => "---").join(" | ")} |`,
|
|
12
|
+
...body.map((row) => `| ${row.join(" | ")} |`),
|
|
13
|
+
].join("\n");
|
|
14
|
+
}
|
|
15
|
+
function escapeCell(value) {
|
|
16
|
+
return value.replaceAll("|", "\\|").replaceAll("\n", " ");
|
|
17
|
+
}
|
|
18
|
+
function codeBlock(value) {
|
|
19
|
+
return value.split("\n").map((line) => ` ${line}`).join("\n");
|
|
20
|
+
}
|
|
21
|
+
function attackFindings(artifact) {
|
|
22
|
+
return extractObservatoryFindings(artifact).filter((finding) => finding.checkId === "attack-sim");
|
|
23
|
+
}
|
|
24
|
+
export function renderAttackSimulationMarkdown(artifact, reproductionCommand) {
|
|
25
|
+
const findings = attackFindings(artifact);
|
|
26
|
+
const attackCheck = artifact.checks.find((check) => check.id === "attack-sim");
|
|
27
|
+
const high = findings.filter((finding) => finding.severity === "high").length;
|
|
28
|
+
const medium = findings.filter((finding) => finding.severity === "medium").length;
|
|
29
|
+
const low = findings.filter((finding) => finding.severity === "low").length;
|
|
30
|
+
const verdict = high > 0
|
|
31
|
+
? "High-risk simulated attack findings need review before agent dependency."
|
|
32
|
+
: medium > 0
|
|
33
|
+
? "Medium-risk simulated attack findings should be reviewed before production use."
|
|
34
|
+
: "No high-risk simulated attack findings were detected.";
|
|
35
|
+
const actionReceipt = buildActionReceipt(artifact);
|
|
36
|
+
return [
|
|
37
|
+
"# MCP Attack Simulation Report",
|
|
38
|
+
"",
|
|
39
|
+
`Generated at ${artifact.createdAt}`,
|
|
40
|
+
"",
|
|
41
|
+
"## Executive Verdict",
|
|
42
|
+
"",
|
|
43
|
+
`**${verdict}**`,
|
|
44
|
+
"",
|
|
45
|
+
`**Action receipt:** \`${actionReceipt.action}\` — ${actionReceipt.reason}`,
|
|
46
|
+
"",
|
|
47
|
+
table([
|
|
48
|
+
["Target", "Attack Check", "High", "Medium", "Low", "Total"],
|
|
49
|
+
[escapeCell(artifact.target.targetId), escapeCell(attackCheck?.status ?? "skipped"), String(high), String(medium), String(low), String(findings.length)],
|
|
50
|
+
]),
|
|
51
|
+
"",
|
|
52
|
+
"## Attack Classes Tested",
|
|
53
|
+
"",
|
|
54
|
+
"- Tool poisoning in tool, prompt, resource, and schema metadata.",
|
|
55
|
+
"- Exfiltration canary and credential-like exposure in captured evidence.",
|
|
56
|
+
"- Permission-boundary risk from broad parameters plus destructive behavior.",
|
|
57
|
+
"- Contract-drift readiness when a baseline artifact is supplied.",
|
|
58
|
+
"",
|
|
59
|
+
"## Findings",
|
|
60
|
+
"",
|
|
61
|
+
table([
|
|
62
|
+
["Severity", "Action", "Rule", "Subject", "Message", "Recommendation"],
|
|
63
|
+
...findings.map((finding) => [
|
|
64
|
+
finding.severity,
|
|
65
|
+
escapeCell(finding.recommendedAction ?? "gate"),
|
|
66
|
+
`\`${escapeCell(finding.ruleId)}\``,
|
|
67
|
+
escapeCell(`${finding.subject.type}:${finding.subject.name ?? ""}`),
|
|
68
|
+
escapeCell(finding.message),
|
|
69
|
+
escapeCell(finding.recommendation ?? "Review before release."),
|
|
70
|
+
]),
|
|
71
|
+
]),
|
|
72
|
+
"",
|
|
73
|
+
"## Reproduction Command",
|
|
74
|
+
"",
|
|
75
|
+
codeBlock(reproductionCommand),
|
|
76
|
+
"",
|
|
77
|
+
"## Maintainer Fixes",
|
|
78
|
+
"",
|
|
79
|
+
"- Keep MCP metadata factual, user-visible, and free of hidden instructions.",
|
|
80
|
+
"- Add strict schemas and avoid broad command/path/network parameters for destructive tools.",
|
|
81
|
+
"- Redact secret-like values from tool responses and captured logs.",
|
|
82
|
+
"- Review new or broadened tool surfaces before agents consume upgraded servers.",
|
|
83
|
+
"",
|
|
84
|
+
"## Safe Simulation Only",
|
|
85
|
+
"",
|
|
86
|
+
"This report uses inert metadata, schema, drift, and captured-evidence checks. It does not execute destructive payloads, contact attacker infrastructure, write/delete files, or exfiltrate real data.",
|
|
87
|
+
].join("\n");
|
|
88
|
+
}
|
|
89
|
+
//# sourceMappingURL=attack-sim.js.map
|