@kryptosai/mcp-observatory 1.28.2 → 1.28.3

package/dist/src/adapters/http.js

@@ -11,38 +11,47 @@ export class HttpAdapter {
         if (target.authToken) {
             headers["Authorization"] = `Bearer ${target.authToken}`;
         }
-        const client = new Client({ name: "mcp-observatory", version: TOOL_VERSION }, { capabilities: {} });
         const stderrLines = [];
         const url = new URL(target.url);
         if (url.protocol !== "http:" && url.protocol !== "https:") {
             throw new Error(`Unsupported protocol "${url.protocol}" — only http: and https: are allowed.`);
         }
         const timeoutMs = target.timeoutMs ?? 15_000;
+        let mcpClient;
         let activeTransport;
+        const makeClient = () => new Client({ name: "mcp-observatory", version: TOOL_VERSION }, { capabilities: {} });
         try {
+            mcpClient = makeClient();
             let transport = new StreamableHTTPClientTransport(url, { requestInit: { headers } });
             if (options?.record)
                 transport = new RecordingTransport(transport);
-            await client.connect(transport, { timeout: timeoutMs });
+            await mcpClient.connect(transport, { timeout: timeoutMs });
             activeTransport = transport;
         }
         catch {
             stderrLines.push("Streamable HTTP failed, falling back to SSE.");
+            if (mcpClient) {
+                await mcpClient.close().catch(() => undefined);
+                mcpClient = undefined;
+            }
         }
         if (!activeTransport) {
             try {
+                mcpClient = makeClient();
                 let transport = new SSEClientTransport(url, { requestInit: { headers } });
                 if (options?.record)
                     transport = new RecordingTransport(transport);
-                await client.connect(transport, { timeout: timeoutMs });
+                await mcpClient.connect(transport, { timeout: timeoutMs });
                 activeTransport = transport;
             }
             catch (error) {
                 const rawMessage = errorMessage(error);
-                await client.close().catch(() => undefined); // Cleanup errors are non-fatal
+                if (mcpClient)
+                    await mcpClient.close().catch(() => undefined);
                 throw new AdapterConnectError(target, rawMessage, stderrLines);
             }
         }
+        const client = mcpClient;
         const serverVersion = client.getServerVersion();
         return {
             client,

package/dist/src/adapters/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/adapters/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAInG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,OAAO,CAAC,MAAwB,EAAE,OAA+B;QACrE,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,EAClD,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;QAEF,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,QAAQ,wCAAwC,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAE7C,IAAI,eAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,SAAS,GAAc,IAAI,6BAA6B,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAChG,IAAI,OAAO,EAAE,MAAM;gBAAE,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,SAAS,GAAc,IAAI,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrF,IAAI,OAAO,EAAE,MAAM;oBAAE,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACnE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxD,eAAe,GAAG,SAAS,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACvC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B;gBAC5E,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAEhD,OAAO;YACL,MAAM;YACN,kBAAkB,EAAE,MAAM,CAAC,qBAAqB,EAAE;YAClD,UAAU,EAAE,aAAa,EAAE,IAAI;YAC/B,aAAa,EAAE,aAAa,EAAE,OAAO;YACrC,WAAW;YACX,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACxD,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/adapters/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAInG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,OAAO,CAAC,MAAwB,EAAE,OAA+B;QACrE,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,QAAQ,wCAAwC,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAE7C,IAAI,SAA6B,CAAC;QAClC,IAAI,eAAsC,CAAC;QAE3C,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,IAAI,MAAM,CACR,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,EAClD,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;QAEJ,IAAI,CAAC;YACH,SAAS,GAAG,UAAU,EAAE,CAAC;YACzB,IAAI,SAAS,GAAc,IAAI,6BAA6B,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAChG,IAAI,OAAO,EAAE,MAAM;gBAAE,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3D,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/C,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,SAAS,GAAG,UAAU,EAAE,CAAC;gBACzB,IAAI,SAAS,GAAc,IAAI,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrF,IAAI,OAAO,EAAE,MAAM;oBAAE,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACnE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3D,eAAe,GAAG,SAAS,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,SAAS;oBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9D,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,SAAmB,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAEhD,OAAO;YACL,MAAM;YACN,kBAAkB,EAAE,MAAM,CAAC,qBAAqB,EAAE;YAClD,UAAU,EAAE,aAAa,EAAE,IAAI;YAC/B,aAAa,EAAE,aAAa,EAAE,OAAO;YACrC,WAAW;YACX,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACxD,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/src/checks/runtime-profile.d.ts

@@ -0,0 +1,5 @@
+import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import { type ObservedCheck } from "./base.js";
+import type { RuntimeProfile } from "../types.js";
+export declare function analyzeRuntimeProfile(tools: Tool[]): RuntimeProfile;
+export declare function runRuntimeProfileCheck(tools: Tool[]): ObservedCheck;

package/dist/src/checks/runtime-profile.js

@@ -0,0 +1,214 @@
+import { performance } from "node:perf_hooks";
+import { makeCheckResult } from "./base.js";
+const EGRESS_PARAM_PATTERNS = [
+    /^url$/i, /^uri$/i, /^endpoint$/i, /^host$/i, /^hostname$/i,
+    /^server$/i, /^address$/i, /^base_?url$/i,
+    /^webhook$/i, /^callback$/i, /^domain$/i, /^origin$/i,
+];
+const EGRESS_DESC_PATTERNS = [
+    /\burl\b/i, /\bhttps?\b/i, /\bendpoint\b/i,
+    /\bhost\b/i, /\bapi\b/i, /\bwebhook\b/i,
+];
+const MUTATION_PARAM_PATTERNS = [
+    /^path$/i, /^file$/i, /^filename$/i, /^filepath$/i, /^filePath$/i,
+    /^directory$/i, /^dir$/i, /^folder$/i,
+    /^env$/i, /^environ$/i, /^environment$/i,
+    /^command$/i, /^cmd$/i, /^exec$/i, /^shell$/i,
+];
+const MUTATION_DESC_PATTERNS = [
+    /\bwrite\b/i, /\bdelete\b/i, /\bremove\b/i, /\bcreate\b/i,
+    /\bexecute\b/i, /\brun\b/i, /\bset\b/i, /\bupdate\b/i,
+    /\bmodify\b/i, /\bsave\b/i, /\bfile\b/i, /\bpath\b/i,
+    /\bdirectory\b/i, /\benvironment\b/i, /\bcommand\b/i,
+];
+const MUTATION_NAME_PATTERNS = [
+    /write/i, /delete/i, /remove/i, /create/i,
+    /exec(ute)?/i, /run/i, /set/i, /update/i,
+    /modify/i, /save/i,
+];
+function inferProtocol(value) {
+    if (/^https:\/\//i.test(value))
+        return "HTTPS";
+    if (/^http:\/\//i.test(value))
+        return "HTTP";
+    if (/^wss?:\/\//i.test(value))
+        return "WSS";
+    if (/^tcp:\/\//i.test(value))
+        return "TCP";
+    if (/^udp:\/\//i.test(value))
+        return "UDP";
+    return "unknown";
+}
+function inferMutationResource(paramName) {
+    if (/^env|^environ/i.test(paramName))
+        return "environment";
+    if (/^(command|cmd|exec|shell)$/i.test(paramName))
+        return "network";
+    return "filesystem";
+}
+function inferMutationOperation(toolName, paramName) {
+    if (/\bdelet|remov\b/i.test(toolName))
+        return "delete";
+    if (/\bwrit|creat|sav\b/i.test(toolName))
+        return "write";
+    if (/\bexec|run|command|shell|cmd\b/i.test(toolName) || /^command|cmd|exec|shell$/i.test(paramName))
+        return "execute";
+    return "write";
+}
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+function inferMutationScope(schemaProperties, paramName, _toolName) {
+    if (/^env|^environ/i.test(paramName))
+        return "global";
+    if (/^(command|cmd|exec|shell)$/i.test(paramName))
+        return "specific_path";
+    if (schemaProperties?.[paramName]?.default !== undefined)
+        return "specific_path";
+    return "working_directory";
+}
+function stringValue(value) {
+    if (typeof value === "string")
+        return value;
+    return JSON.stringify(value);
+}
+function normalizeToolSchema(tool) {
+    const schema = tool.inputSchema;
+    const properties = schema?.["properties"];
+    const propertyNames = properties ? Object.keys(properties) : [];
+    const propertyDescriptions = propertyNames
+        .map((name) => stringValue(properties[name]?.description ?? ""))
+        .filter(Boolean);
+    return {
+        name: tool.name,
+        description: stringValue(tool.description ?? ""),
+        propertyNames,
+        propertyDescriptions,
+        properties,
+    };
+}
+export function analyzeRuntimeProfile(tools) {
+    const egress = [];
+    const mutations = [];
+    for (const tool of tools) {
+        const normalized = normalizeToolSchema(tool);
+        for (const paramName of normalized.propertyNames) {
+            if (EGRESS_PARAM_PATTERNS.some((p) => p.test(paramName))) {
+                const paramSchema = normalized.properties?.[paramName];
+                const defaultVal = stringValue(paramSchema?.default ?? paramSchema?.example ?? paramName);
+                egress.push({
+                    target: defaultVal,
+                    protocol: inferProtocol(defaultVal),
+                    source: "tool_schema",
+                    confidence: "high",
+                });
+            }
+            if (MUTATION_PARAM_PATTERNS.some((p) => p.test(paramName))) {
+                mutations.push({
+                    resource: inferMutationResource(paramName),
+                    operation: inferMutationOperation(tool.name, paramName),
+                    scope: inferMutationScope(normalized.properties, paramName, tool.name),
+                    source: "tool_schema",
+                });
+            }
+        }
+        for (const desc of normalized.propertyDescriptions) {
+            if (EGRESS_DESC_PATTERNS.some((p) => p.test(desc))) {
+                egress.push({
+                    target: desc,
+                    protocol: "unknown",
+                    source: "description_analysis",
+                    confidence: "medium",
+                });
+            }
+            if (MUTATION_DESC_PATTERNS.some((p) => p.test(desc))) {
+                mutations.push({
+                    resource: "filesystem",
+                    operation: "write",
+                    scope: "working_directory",
+                    source: "description_analysis",
+                });
+            }
+        }
+        if (EGRESS_DESC_PATTERNS.some((p) => p.test(normalized.description))) {
+            egress.push({
+                target: normalized.name,
+                protocol: "unknown",
+                source: "description_analysis",
+                confidence: "low",
+            });
+        }
+        if (MUTATION_DESC_PATTERNS.some((p) => p.test(normalized.description))) {
+            mutations.push({
+                resource: "filesystem",
+                operation: "write",
+                scope: "working_directory",
+                source: "description_analysis",
+            });
+        }
+        if (MUTATION_NAME_PATTERNS.some((p) => p.test(normalized.name))) {
+            mutations.push({
+                resource: "filesystem",
+                operation: inferMutationOperation(tool.name, ""),
+                scope: "working_directory",
+                source: "description_analysis",
+            });
+        }
+    }
+    const confidence = egress.some((e) => e.confidence === "high") || mutations.some((m) => m.source === "tool_schema")
+        ? "high"
+        : egress.length > 0 || mutations.length > 0
+            ? "medium"
+            : "low";
+    return {
+        egress: egress.length > 0 ? egress : undefined,
+        stateMutations: mutations.length > 0 ? mutations : undefined,
+        analyzedAt: new Date().toISOString(),
+        confidence,
+    };
+}
+function structuredEgressFindings(entries) {
+    return entries.map((e) => ({ ...e }));
+}
+function structuredMutationFindings(entries) {
+    return entries.map((m) => ({ ...m }));
+}
+export function runRuntimeProfileCheck(tools) {
+    const startedAt = performance.now();
+    const profile = analyzeRuntimeProfile(tools);
+    const egressCount = profile.egress?.length ?? 0;
+    const mutationCount = profile.stateMutations?.length ?? 0;
+    let status;
+    let message;
+    if (egressCount === 0 && mutationCount === 0) {
+        status = "pass";
+        message = "No egress or state mutation indicators detected in tool schemas.";
+    }
+    else if (profile.confidence === "high") {
+        status = "partial";
+        message = `Detected ${egressCount} potential egress target(s) and ${mutationCount} potential state mutation(s) with high confidence.`;
+    }
+    else {
+        status = "pass";
+        message = `Detected ${egressCount} potential egress target(s) and ${mutationCount} potential state mutation(s) with low confidence.`;
+    }
+    const evidenceList = [];
+    if (egressCount > 0 || mutationCount > 0) {
+        evidenceList.push({
+            endpoint: "runtime-profile/analyze",
+            advertised: true,
+            responded: true,
+            minimalShapePresent: true,
+            itemCount: egressCount + mutationCount,
+            diagnostics: [
+                `Egress entries: ${egressCount}`,
+                `State mutations: ${mutationCount}`,
+                `Confidence: ${profile.confidence}`,
+            ],
+            findings: [
+                ...(profile.egress ? structuredEgressFindings(profile.egress) : []),
+                ...(profile.stateMutations ? structuredMutationFindings(profile.stateMutations) : []),
+            ],
+        });
+    }
+    return { result: makeCheckResult("runtime-profile", status, performance.now() - startedAt, message, evidenceList) };
+}
+//# sourceMappingURL=runtime-profile.js.map

package/dist/src/checks/runtime-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-profile.js","sourceRoot":"","sources":["../../../src/checks/runtime-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,OAAO,EAAE,eAAe,EAAsB,MAAM,WAAW,CAAC;AAGhE,MAAM,qBAAqB,GAAG;IAC5B,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa;IAC3D,WAAW,EAAE,YAAY,EAAE,cAAc;IACzC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW;CACtD,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,UAAU,EAAE,aAAa,EAAE,eAAe;IAC1C,WAAW,EAAE,UAAU,EAAE,cAAc;CACxC,CAAC;AAEF,MAAM,uBAAuB,GAAG;IAC9B,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa;IACjE,cAAc,EAAE,QAAQ,EAAE,WAAW;IACrC,QAAQ,EAAE,YAAY,EAAE,gBAAgB;IACxC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU;CAC9C,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa;IACzD,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa;IACrD,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IACpD,gBAAgB,EAAE,kBAAkB,EAAE,cAAc;CACrD,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACzC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;IACxC,SAAS,EAAE,OAAO;CACnB,CAAC;AAEF,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/C,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,aAAa,CAAC;IAC3D,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,SAAiB;IACjE,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvD,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,SAAS,kBAAkB,CAAC,gBAAqE,EAAE,SAAiB,EAAE,SAAiB;IACrI,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtD,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,eAAe,CAAC;IAC1E,IAAI,gBAAgB,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACjF,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IAOrC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAkD,CAAC;IACvE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAwD,CAAC;IACjG,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,oBAAoB,GAAG,aAAa;SACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAW,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;SAChE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAChD,aAAa;QACb,oBAAoB;QACpB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YACjD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC1F,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;oBACnC,MAAM,EAAE,aAAa;oBACrB,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC3D,SAAS,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,qBAAqB,CAAC,SAAS,CAAC;oBAC1C,SAAS,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;oBACvD,KAAK,EAAE,kBAAkB,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;oBACtE,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACnD,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,sBAAsB;oBAC9B,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrD,SAAS,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,YAAY;oBACtB,SAAS,EAAE,OAAO;oBAClB,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE,sBAAsB;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,UAAU,CAAC,IAAI;gBACvB,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,sBAAsB;gBAC9B,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACvE,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,OAAO;gBAClB,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChD,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;QAC9F,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,KAAK,CAAC;IAEd,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC9C,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC5D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAsB;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAwB;IAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC;IAE1D,IAAI,MAAmC,CAAC;IACxC,IAAI,OAAe,CAAC;IAEpB,IAAI,WAAW,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,GAAG,kEAAkE,CAAC;IAC/E,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,GAAG,SAAS,CAAC;QACnB,OAAO,GAAG,YAAY,WAAW,mCAAmC,aAAa,oDAAoD,CAAC;IACxI,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,GAAG,YAAY,WAAW,mCAAmC,aAAa,mDAAmD,CAAC;IACvI,CAAC;IAED,MAAM,YAAY,GAAsB,EAAE,CAAC;IAC3C,IAAI,WAAW,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACzC,YAAY,CAAC,IAAI,CAAC;YAChB,QAAQ,EAAE,yBAAyB;YACnC,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,WAAW,GAAG,aAAa;YACtC,WAAW,EAAE;gBACX,mBAAmB,WAAW,EAAE;gBAChC,oBAAoB,aAAa,EAAE;gBACnC,eAAe,OAAO,CAAC,UAAU,EAAE;aACpC;YACD,QAAQ,EAAE;gBACR,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;AACtH,CAAC"}

package/dist/src/checks/security-rules.js

@@ -124,6 +124,24 @@ export const SECURITY_RULES = [
             return null;
         },
     },
+    {
+        id: "unicode-obfuscation-description",
+        severity: "high",
+        name: "Unicode obfuscation in tool description",
+        match(tool) {
+            const desc = tool.description ?? "";
+            const unicodeRegex = /[\u200B-\u200D\uFEFF\u2060\u00AD\u202A-\u202E\u2066-\u2069\u{E0001}\u{E0020}-\u{E007F}]/gu;
+            if (unicodeRegex.test(desc)) {
+                return {
+                    ruleId: this.id,
+                    severity: this.severity,
+                    toolName: tool.name,
+                    message: `Tool "${tool.name}" description contains hidden Unicode characters (zero-width spaces, bidi overrides, or tag sequences) that can obscure true intent.`,
+                };
+            }
+            return null;
+        },
+    },
 ];
 /** Credential patterns to scan in tool response content. */
 export const CREDENTIAL_PATTERNS = [

package/dist/src/checks/security-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-rules.js","sourceRoot":"","sources":["../../../src/checks/security-rules.ts"],"names":[],"mappings":"AAuBA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI;CAC1E,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,uBAAuB;IACvB,kBAAkB;IAClB,sBAAsB;IACtB,kBAAkB;CACnB,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW;CAC/C,CAAC;AAEF,SAAS,gBAAgB,CAAC,MAAgC;IACxD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,OAAO,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,IAAI;YACR,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,oBAAoB,cAAc,gDAAgD;iBAC9G,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,8CAA8C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI;iBAChG,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,+CAA+C;iBAC3E,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;IAED;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,IAAI;YACR,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/F,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,aAAa,GACjB,QAAQ,KAAK,KAAK;gBAClB,WAAW,KAAK,IAAI;gBACpB,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjE,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,8DAA8D;iBAC1F,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;IAED;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC;YACjE,MAAM,WAAW,GAAG,WAAW,IAAI,WAAW,CAAC;YAE/C,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;gBAC3B,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,qDAAqD;iBACjF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,EAAE,CAAC,sBAAsB,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7D,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,+DAA+D;iBAC3F,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;gBACxG,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,qDAAqD;iBACjF,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACvD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAC1D,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE;IAC3D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mEAAmE,EAAE;CACzG,CAAC"}
+{"version":3,"file":"security-rules.js","sourceRoot":"","sources":["../../../src/checks/security-rules.ts"],"names":[],"mappings":"AAuBA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI;CAC1E,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,uBAAuB;IACvB,kBAAkB;IAClB,sBAAsB;IACtB,kBAAkB;CACnB,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW;CAC/C,CAAC;AAEF,SAAS,gBAAgB,CAAC,MAAgC;IACxD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,OAAO,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,IAAI;YACR,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,oBAAoB,cAAc,gDAAgD;iBAC9G,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,8CAA8C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI;iBAChG,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,+CAA+C;iBAC3E,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;IAED;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,IAAI;YACR,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/F,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,aAAa,GACjB,QAAQ,KAAK,KAAK;gBAClB,WAAW,KAAK,IAAI;gBACpB,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjE,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,8DAA8D;iBAC1F,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;IAED;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC;YACjE,MAAM,WAAW,GAAG,WAAW,IAAI,WAAW,CAAC;YAE/C,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;gBAC3B,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,qDAAqD;iBACjF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,EAAE,CAAC,sBAAsB,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7D,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,+DAA+D;iBAC3F,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;gBACxG,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,qDAAqD;iBACjF,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;IAED;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,yCAAyC;QAC/C,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,2FAA2F,CAAC;YACjH,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,sIAAsI;iBAClK,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACvD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAC1D,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE;IAC3D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mEAAmE,EAAE;CACzG,CAAC"}

package/dist/src/checks/security.js

@@ -63,26 +63,9 @@ function structuredFindings(findings) {
         return undefined;
     return findings.map((finding) => ({ ...finding }));
 }
-export function runLightweightSecurityCheck(tools, target) {
-    const startedAt = performance.now();
-    const findings = [];
-    // Rule: no-auth-http (target-level)
-    const authFinding = checkNoAuthHttp(target);
-    if (authFinding)
-        findings.push(authFinding);
-    // Tool-level rules against already-fetched tools
-    const toolInfos = tools.map(toolToInfo);
-    for (const tool of toolInfos) {
-        for (const rule of SECURITY_RULES) {
-            const finding = rule.match(tool);
-            if (finding)
-                findings.push(finding);
-        }
-    }
-    const activeFindings = filterSuppressedFindings(findings, target);
-    // Determine status based on highest severity
-    const hasHigh = activeFindings.some(f => f.severity === "high");
-    const hasMedium = activeFindings.some(f => f.severity === "medium");
+function buildSecurityCheckResult(findings, checkId, startedAt) {
+    const hasHigh = findings.some(f => f.severity === "high");
+    const hasMedium = findings.some(f => f.severity === "medium");
     let status;
     if (hasHigh) {
         status = "fail";
@@ -93,33 +76,49 @@ export function runLightweightSecurityCheck(tools, target) {
     else {
         status = "pass";
     }
-    const diagnostics = activeFindings.map(f => `[${f.severity}] ${f.message}`);
-    const toolNames = [...new Set(activeFindings.map(f => f.toolName))];
-    const message = activeFindings.length === 0
-        ? "No security issues detected (lightweight scan)."
-        : `Found ${activeFindings.length} security finding(s): ${activeFindings.filter(f => f.severity === "high").length} high, ${activeFindings.filter(f => f.severity === "medium").length} medium, ${activeFindings.filter(f => f.severity === "low").length} low.`;
+    const diagnostics = findings.map(f => `[${f.severity}] ${f.message}`);
+    const toolNames = [...new Set(findings.map(f => f.toolName))];
+    const endpoint = checkId === "security-lite" ? "security/scan-lite" : "security/scan";
+    const message = findings.length === 0
+        ? (checkId === "security-lite"
+            ? "No security issues detected (lightweight scan)."
+            : "No security issues detected.")
+        : `Found ${findings.length} security finding(s): ${findings.filter(f => f.severity === "high").length} high, ${findings.filter(f => f.severity === "medium").length} medium, ${findings.filter(f => f.severity === "low").length} low.`;
     const evidence = {
-        endpoint: "security/scan-lite",
+        endpoint,
         advertised: true,
         responded: true,
         minimalShapePresent: true,
-        itemCount: activeFindings.length,
+        itemCount: findings.length,
         identifiers: toolNames.length > 0 ? toolNames : undefined,
         diagnostics: diagnostics.length > 0 ? diagnostics : undefined,
-        findings: structuredFindings(activeFindings),
-    };
-    return {
-        result: makeCheckResult("security-lite", status, performance.now() - startedAt, message, [evidence]),
+        findings: structuredFindings(findings),
     };
+    return makeCheckResult(checkId, status, performance.now() - startedAt, message, [evidence]);
+}
+export function runLightweightSecurityCheck(tools, target) {
+    const startedAt = performance.now();
+    const findings = [];
+    const authFinding = checkNoAuthHttp(target);
+    if (authFinding)
+        findings.push(authFinding);
+    const toolInfos = tools.map(toolToInfo);
+    for (const tool of toolInfos) {
+        for (const rule of SECURITY_RULES) {
+            const finding = rule.match(tool);
+            if (finding)
+                findings.push(finding);
+        }
+    }
+    const activeFindings = filterSuppressedFindings(findings, target);
+    return { result: buildSecurityCheckResult(activeFindings, "security-lite", startedAt) };
 }
 export async function runSecurityCheck(context, previousChecks) {
     const startedAt = performance.now();
     const findings = [];
-    // Rule: no-auth-http (target-level, doesn't need tools)
     const authFinding = checkNoAuthHttp(context.target);
     if (authFinding)
         findings.push(authFinding);
-    // Tool-level rules
     const advertised = isCapabilityAdvertised(context.serverCapabilities, "tools");
     if (advertised) {
         try {
@@ -137,40 +136,9 @@ export async function runSecurityCheck(context, previousChecks) {
             // If we can't list tools, skip tool-level rules (other checks already report this)
         }
     }
-    // Credential scanning in response snapshots (from tools-invoke check)
     const credentialFindings = scanResponsesForCredentials(previousChecks);
     findings.push(...credentialFindings);
     const activeFindings = filterSuppressedFindings(findings, context.target);
-    // Determine status based on highest severity
-    const hasHigh = activeFindings.some(f => f.severity === "high");
-    const hasMedium = activeFindings.some(f => f.severity === "medium");
-    let status;
-    if (hasHigh) {
-        status = "fail";
-    }
-    else if (hasMedium) {
-        status = "partial";
-    }
-    else {
-        status = "pass";
-    }
-    const diagnostics = activeFindings.map(f => `[${f.severity}] ${f.message}`);
-    const toolNames = [...new Set(activeFindings.map(f => f.toolName))];
-    const message = activeFindings.length === 0
-        ? "No security issues detected."
-        : `Found ${activeFindings.length} security finding(s): ${activeFindings.filter(f => f.severity === "high").length} high, ${activeFindings.filter(f => f.severity === "medium").length} medium, ${activeFindings.filter(f => f.severity === "low").length} low.`;
-    const evidence = {
-        endpoint: "security/scan",
-        advertised: true,
-        responded: true,
-        minimalShapePresent: true,
-        itemCount: activeFindings.length,
-        identifiers: toolNames.length > 0 ? toolNames : undefined,
-        diagnostics: diagnostics.length > 0 ? diagnostics : undefined,
-        findings: structuredFindings(activeFindings),
-    };
-    return {
-        result: makeCheckResult("security", status, performance.now() - startedAt, message, [evidence]),
-    };
+    return { result: buildSecurityCheckResult(activeFindings, "security", startedAt) };
 }
 //# sourceMappingURL=security.js.map

package/dist/src/checks/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/checks/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAyC,MAAM,WAAW,CAAC;AAC3G,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAuC,MAAM,qBAAqB,CAAC;AAG/G,SAAS,UAAU,CAAC,IAAU;IAC5B,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAoB;IAC3C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CACrF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAC5E,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,gBAAgB,MAAM,CAAC,QAAQ,qCAAqC;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAqB;IAErB,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YAAE,SAAS;QAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;gBACpD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,oBAAoB;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,QAAQ;wBACR,OAAO,EAAE,SAAS,QAAQ,0BAA0B,IAAI,GAAG;qBAC5D,CAAC,CAAC;oBACH,MAAM,CAAC,iCAAiC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA2B,EAAE,MAAoB;IACjF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACjC,OAAO,CAAC,CACN,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAChC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClC,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA2B;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAa,EACb,MAAoB;IAEpB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,oCAAoC;IACpC,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE5C,iDAAiD;IACjD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElE,6CAA6C;IAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACpE,IAAI,MAAmC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC;QACzC,CAAC,CAAC,iDAAiD;QACnD,CAAC,CAAC,SAAS,cAAc,CAAC,MAAM,yBAAyB,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,UAAU,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,YAAY,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC;IAElQ,MAAM,QAAQ,GAAoB;QAChC,QAAQ,EAAE,oBAAoB;QAC9B,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,cAAc,CAAC,MAAM;QAChC,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACzD,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,EAAE,kBAAkB,CAAC,cAAc,CAAC;KAC7C,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,eAAe,CACrB,eAAe,EACf,MAAM,EACN,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAC7B,OAAO,EACP,CAAC,QAAQ,CAAC,CACX;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,cAA6B;IAE7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,wDAAwD;IACxD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE5C,mBAAmB;IACnB,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,OAAO;wBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,cAAc,CAAC,CAAC;IACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACpE,IAAI,MAAmC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC;QACzC,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,SAAS,cAAc,CAAC,MAAM,yBAAyB,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,UAAU,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,YAAY,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC;IAElQ,MAAM,QAAQ,GAAoB;QAChC,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,cAAc,CAAC,MAAM;QAChC,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACzD,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,EAAE,kBAAkB,CAAC,cAAc,CAAC;KAC7C,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,eAAe,CACrB,UAAU,EACV,MAAM,EACN,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAC7B,OAAO,EACP,CAAC,QAAQ,CAAC,CACX;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/checks/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAyC,MAAM,WAAW,CAAC;AAC3G,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAuC,MAAM,qBAAqB,CAAC;AAG/G,SAAS,UAAU,CAAC,IAAU;IAC5B,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAoB;IAC3C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CACrF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAC5E,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,gBAAgB,MAAM,CAAC,QAAQ,qCAAqC;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAqB;IAErB,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YAAE,SAAS;QAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;gBACpD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,oBAAoB;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,QAAQ;wBACR,OAAO,EAAE,SAAS,QAAQ,0BAA0B,IAAI,GAAG;qBAC5D,CAAC,CAAC;oBACH,MAAM,CAAC,iCAAiC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA2B,EAAE,MAAoB;IACjF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACjC,OAAO,CAAC,CACN,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAChC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClC,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA2B;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAA2B,EAC3B,OAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC9D,IAAI,MAAmC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,CAAC;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,CAAC,CAAC,OAAO,KAAK,eAAe;YAC1B,CAAC,CAAC,iDAAiD;YACnD,CAAC,CAAC,8BAA8B,CAAC;QACrC,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,yBAAyB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,UAAU,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC;IAE1O,MAAM,QAAQ,GAAoB;QAChC,QAAQ;QACR,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,QAAQ,CAAC,MAAM;QAC1B,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACzD,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACvC,CAAC;IAEF,OAAO,eAAe,CACpB,OAAO,EACP,MAAM,EACN,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAC7B,OAAO,EACP,CAAC,QAAQ,CAAC,CACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAa,EACb,MAAoB;IAEpB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,cAA6B;IAE7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,OAAO;wBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,cAAc,CAAC,CAAC;IACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;AACrF,CAAC"}

package/dist/src/checks/skill-scan.d.ts

@@ -0,0 +1,46 @@
+export type SkillScanSeverity = "high" | "medium" | "low" | "info";
+export interface SkillScanRule {
+    id: string;
+    severity: SkillScanSeverity;
+    name: string;
+    /** Regex patterns to match in file content */
+    patterns: RegExp[];
+}
+export interface SkillScanMatch {
+    line: number;
+    column: number;
+    pattern: string;
+    matchText: string;
+}
+export interface SkillScanFinding {
+    ruleId: string;
+    severity: SkillScanSeverity;
+    filePath: string;
+    message: string;
+    matches: SkillScanMatch[];
+}
+export interface SkillScanResult {
+    filePath: string;
+    findings: SkillScanFinding[];
+}
+export interface SkillScanSummary {
+    totalFiles: number;
+    totalFindings: number;
+    healthScore: number;
+    results: SkillScanResult[];
+}
+export declare const SKILL_SCAN_RULES: SkillScanRule[];
+export declare function findLineColumn(content: string, matchIndex: number): {
+    line: number;
+    column: number;
+};
+export declare function scanContent(filePath: string, content: string, rules: SkillScanRule[]): SkillScanFinding[];
+export declare function scanFile(filePath: string): Promise<SkillScanResult>;
+export declare function scanDirectory(dirPath: string): Promise<SkillScanResult[]>;
+export declare function scanPath(inputPath: string): Promise<SkillScanResult[]>;
+export declare function computeSkillHealthScore(results: SkillScanResult[]): number;
+export declare function summarizeScan(results: SkillScanResult[]): SkillScanSummary;
+export declare function renderSkillScanTerminal(results: SkillScanResult[], healthScore: number): string;
+export declare function renderSkillScanMarkdown(results: SkillScanResult[], healthScore: number): string;
+export declare function renderSkillScanJson(summary: SkillScanSummary): string;
+export declare function renderSkillScanSarif(results: SkillScanResult[], healthScore: number): string;