@kryptosai/mcp-observatory 1.33.0 → 1.34.0

package/docs/safety-index/artifacts/sequential-thinking-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-07-15T223314258Z_b0743985",
-  "createdAt": "2026-07-15T22:33:14.258Z",
-  "toolVersion": "1.32.1",
+  "runId": "run_2026-07-17T003620107Z_b35a41cd",
+  "createdAt": "2026-07-17T00:36:20.107Z",
+  "toolVersion": "1.33.0",
   "target": {
     "targetId": "sequential-thinking-server",
     "adapter": "local-process",
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 3.7027079999998023,
+      "durationMs": 4.0713330000003225,
       "message": "Advertised capability responded with the minimal expected shape (1 item).",
       "evidence": [
         {
@@ -122,7 +122,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.0025829999999587017,
+      "durationMs": 0.0029160000003685127,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -138,7 +138,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.0014160000000629225,
+      "durationMs": 0.001374999999825377,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -154,7 +154,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.028458000000227912,
+      "durationMs": 0.026624999999967258,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -170,7 +170,7 @@
       "id": "runtime-profile",
       "capability": "runtime-profile",
       "status": "pass",
-      "durationMs": 0.07162500000004002,
+      "durationMs": 0.06950000000006185,
       "message": "Detected 0 potential egress target(s) and 1 potential state mutation(s) with low confidence.",
       "evidence": [
         {
@@ -199,7 +199,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 1.5712499999999636,
+      "durationMs": 1.612833000000137,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -225,7 +225,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.81179099999963,
+      "durationMs": 0.8796670000001541,
       "message": "All 1 item(s) have good schema quality.",
       "evidence": [
         {
@@ -242,7 +242,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.9031660000000556,
+      "durationMs": 0.9446669999997539,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -258,7 +258,7 @@
       "id": "attack-sim",
       "capability": "attack-sim",
       "status": "pass",
-      "durationMs": 0.8238340000002609,
+      "durationMs": 0.8807080000001406,
       "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
       "evidence": [
         {
@@ -317,17 +317,17 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 840ms",
+          "Connect: 647ms",
           "p95 latency: 4ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 839.9979169999999,
-    "toolsListMs": 3.7027079999998023,
-    "promptsListMs": 0.0025829999999587017,
-    "resourcesListMs": 0.0014160000000629225
+    "connectMs": 646.8518750000001,
+    "toolsListMs": 4.0713330000003225,
+    "promptsListMs": 0.0029160000003685127,
+    "resourcesListMs": 0.001374999999825377
   },
   "runtimeProfile": {
     "stateMutations": [
@@ -338,7 +338,7 @@
         "source": "description_analysis"
       }
     ],
-    "analyzedAt": "2026-07-15T22:33:15.104Z",
+    "analyzedAt": "2026-07-17T00:36:20.759Z",
     "confidence": "medium"
   }
 }

package/docs/safety-index/artifacts/sequential-thinking-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-15T22:33:14.258Z
+Generated at 2026-07-17T00:36:20.107Z
 
 ## Target and Environment Metadata
 
@@ -56,7 +56,7 @@ The following state-modifying operations were identified from tool schemas:
 | --- | --- | --- | --- |
 | filesystem | write | working_directory | description_analysis |
 
-_Analyzed at 2026-07-15T22:33:15.104Z_
+_Analyzed at 2026-07-17T00:36:20.759Z_
 
 ## Regressions and Recoveries
 
@@ -66,13 +66,13 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | attack-sim | pass | 0.82 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
-| healthy | conformance | pass | 1.57 | All 7 conformance checks passed. |
+| healthy | attack-sim | pass | 0.88 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
+| healthy | conformance | pass | 1.61 | All 7 conformance checks passed. |
 | healthy | runtime-profile | pass | 0.07 | Detected 0 potential egress target(s) and 1 potential state mutation(s) with low confidence. |
-| healthy | schema-quality | pass | 0.81 | All 1 item(s) have good schema quality. |
-| healthy | security | pass | 0.90 | No security issues detected. |
+| healthy | schema-quality | pass | 0.88 | All 1 item(s) have good schema quality. |
+| healthy | security | pass | 0.94 | No security issues detected. |
 | healthy | security-lite | pass | 0.03 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 3.70 | Advertised capability responded with the minimal expected shape (1 item). |
+| healthy | tools | pass | 4.07 | Advertised capability responded with the minimal expected shape (1 item). |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
 
@@ -197,5 +197,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-15T223314258Z_b0743985`
+- Run ID: `run_2026-07-17T003620107Z_b35a41cd`
 - Gate: `pass`

package/docs/safety-index/artifacts/slack-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "fail",
-  "runId": "run_2026-07-15T223336781Z_035e5f9c",
-  "createdAt": "2026-07-15T22:33:36.781Z",
-  "toolVersion": "1.32.1",
+  "runId": "run_2026-07-17T003640236Z_77e3fca5",
+  "createdAt": "2026-07-17T00:36:40.236Z",
+  "toolVersion": "1.33.0",
   "target": {
     "targetId": "slack-server",
     "adapter": "local-process",

package/docs/safety-index/artifacts/slack-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-15T22:33:36.781Z
+Generated at 2026-07-17T00:36:40.236Z
 
 ## Target and Environment Metadata
 
@@ -98,5 +98,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-15T223336781Z_035e5f9c`
+- Run ID: `run_2026-07-17T003640236Z_77e3fca5`
 - Gate: `fail`

package/docs/safety-index/artifacts/ui5-mcp-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-07-15T223324907Z_f645b10f",
-  "createdAt": "2026-07-15T22:33:24.907Z",
-  "toolVersion": "1.32.1",
+  "runId": "run_2026-07-17T003628663Z_79935e31",
+  "createdAt": "2026-07-17T00:36:28.663Z",
+  "toolVersion": "1.33.0",
   "target": {
     "targetId": "ui5-mcp-server",
     "adapter": "local-process",
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 6.0552499999994325,
+      "durationMs": 6.485999999998967,
       "message": "Advertised capability responded with the minimal expected shape (10 items).",
       "evidence": [
         {
@@ -306,7 +306,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.000959000000875676,
+      "durationMs": 0.00112500000068394,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -322,7 +322,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.003582999999707681,
+      "durationMs": 0.0020839999997406267,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -338,7 +338,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.042625000000043656,
+      "durationMs": 0.04324999999880674,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -354,7 +354,7 @@
       "id": "runtime-profile",
       "capability": "runtime-profile",
       "status": "pass",
-      "durationMs": 0.13058300000011513,
+      "durationMs": 0.13175000000046566,
       "message": "Detected 4 potential egress target(s) and 23 potential state mutation(s) with low confidence.",
       "evidence": [
         {
@@ -539,7 +539,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 6.743291000000681,
+      "durationMs": 7.999833999998373,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -565,7 +565,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 2.819208000000799,
+      "durationMs": 3.1947500000005675,
       "message": "All 10 item(s) have good schema quality.",
       "evidence": [
         {
@@ -582,7 +582,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 3.3632920000000013,
+      "durationMs": 3.4622500000004948,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -598,7 +598,7 @@
       "id": "attack-sim",
       "capability": "attack-sim",
       "status": "pass",
-      "durationMs": 3.940042000000176,
+      "durationMs": 3.3021669999998267,
       "message": "Safe attack simulation found no high-risk MCP attack-readiness findings.",
       "evidence": [
         {
@@ -657,17 +657,17 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 1384ms",
+          "Connect: 1336ms",
           "p95 latency: 6ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 1383.5355830000008,
-    "toolsListMs": 6.0552499999994325,
-    "promptsListMs": 0.000959000000875676,
-    "resourcesListMs": 0.003582999999707681
+    "connectMs": 1336.3704159999998,
+    "toolsListMs": 6.485999999998967,
+    "promptsListMs": 0.00112500000068394,
+    "resourcesListMs": 0.0020839999997406267
   },
   "runtimeProfile": {
     "egress": [
@@ -836,7 +836,7 @@
         "source": "description_analysis"
       }
     ],
-    "analyzedAt": "2026-07-15T22:33:26.301Z",
+    "analyzedAt": "2026-07-17T00:36:30.010Z",
     "confidence": "medium"
   }
 }

package/docs/safety-index/artifacts/ui5-mcp-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-15T22:33:24.907Z
+Generated at 2026-07-17T00:36:28.663Z
 
 ## Target and Environment Metadata
 
@@ -55,7 +55,7 @@ The following targets were identified as potentially reachable by this server (c
 | Whether to include supplementary information in the output. This includes UI5 API reference and documentation resources. When calling the tool multiple times for the same file or project, refrain from requesting additional context every time. | unknown | description_analysis | medium |
 | run_ui5_linter | unknown | description_analysis | low |
 | get_api_reference | unknown | description_analysis | low |
-| URL of an OData V4 service, if applicable. This is entirely optional, but without it, the generated app UI will have no OData Model configured. Setting an URL will configure an OData V4 model in the application. Only works for OData V4 services, not for OData V2. The URL must be either a valid complete URL starting with http:// or https:// or a server-root-relative URL like '/odata/v4/serviceName' when the OData service is running on the same server. In this case, the prefix 'http://<host>:4004/' will be assumed and used by this tool for inquiries about the service. When the port is not 4004, a complete 'http://<host>:<port>' URL must be provided. In the generated application, any 'http://<host>:<port>' prefix will be removed. HINT: when the project is a SAP CAP project and CAP/CDS tools are available, you **MUST** use them to search for OData services and entities and properties **BEFORE** calling this tool. This will help you find the correct service URL. | unknown | description_analysis | medium |
+| URL of an OData V4 service, if applicable. This is entirely optional, but without it, the generated app UI will have no OData Model configured. Setting an URL will configure an OData V4 model in the application. Only works for OData V4 services, not for OData V2. The URL must be either a valid complete URL starting with http:// or https:// or a server-root-relative URL like '/odata/v4/serviceName' when the OData service is running on the same server. In this case, the prefix 'http://localhost:4004/' will be assumed and used by this tool for inquiries about the service. When the port is not 4004, a complete 'http://localhost:<port>...' URL must be provided. In the generated application, any 'http://localhost:<port>' prefix will be removed. HINT: when the project is a SAP CAP project and CAP/CDS tools are available, you **MUST** use them to search for OData services and entities and properties **BEFORE** calling this tool. This will help you find the correct service URL. | unknown | description_analysis | medium |
 
 ### State Mutations
 
@@ -87,7 +87,7 @@ The following state-modifying operations were identified from tool schemas:
 | filesystem | write | working_directory | description_analysis |
 | filesystem | execute | working_directory | description_analysis |
 
-_Analyzed at 2026-07-15T22:33:26.301Z_
+_Analyzed at 2026-07-17T00:36:30.010Z_
 
 ## Regressions and Recoveries
 
@@ -97,13 +97,13 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | attack-sim | pass | 3.94 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
-| healthy | conformance | pass | 6.74 | All 7 conformance checks passed. |
+| healthy | attack-sim | pass | 3.30 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
+| healthy | conformance | pass | 8.00 | All 7 conformance checks passed. |
 | healthy | runtime-profile | pass | 0.13 | Detected 4 potential egress target(s) and 23 potential state mutation(s) with low confidence. |
-| healthy | schema-quality | pass | 2.82 | All 10 item(s) have good schema quality. |
-| healthy | security | pass | 3.36 | No security issues detected. |
+| healthy | schema-quality | pass | 3.19 | All 10 item(s) have good schema quality. |
+| healthy | security | pass | 3.46 | No security issues detected. |
 | healthy | security-lite | pass | 0.04 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 6.06 | Advertised capability responded with the minimal expected shape (10 items). |
+| healthy | tools | pass | 6.49 | Advertised capability responded with the minimal expected shape (10 items). |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
 
@@ -228,5 +228,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-15T223324907Z_f645b10f`
+- Run ID: `run_2026-07-17T003628663Z_79935e31`
 - Gate: `pass`

package/docs/safety-index/artifacts/vercel-ai-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "fail",
-  "runId": "run_2026-07-15T223338984Z_2a29a957",
-  "createdAt": "2026-07-15T22:33:38.984Z",
-  "toolVersion": "1.32.1",
+  "runId": "run_2026-07-17T003642758Z_399f4873",
+  "createdAt": "2026-07-17T00:36:42.758Z",
+  "toolVersion": "1.33.0",
   "target": {
     "targetId": "vercel-ai-server",
     "adapter": "local-process",
@@ -62,5 +62,5 @@
       "evidence": []
     }
   ],
-  "fatalError": "Could not establish a plain stdio MCP session for target `vercel-ai-server`.\nCommand: npx -y @anthropic/mcp-server-vercel-ai\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404  '@anthropic/mcp-server-vercel-ai@*' is not in this registry.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_33_39_057Z-debug-0.log"
+  "fatalError": "Could not establish a plain stdio MCP session for target `vercel-ai-server`.\nCommand: npx -y @anthropic/mcp-server-vercel-ai\nDiagnosis: The process exited or detached before MCP initialization completed.\nRaw error: MCP error -32000: Connection closed\nLikely causes:\n- The package may expect extra startup arguments or environment variables.\n- The package may not behave like a plain local-process stdio target under this invocation.\n- The server may be crashing immediately and only leaving clues on stderr.\nNext steps:\n- Run the command manually and look for usage output, auth prompts, or crash text.\n- Check whether the package expects a different transport or an app-oriented startup flow.\n- Use the recent stderr lines below before assuming this is a harness bug.\nRecent stderr:\n- npm error 404  The requested resource '@anthropic/mcp-server-vercel-ai@*' could not be found or you do not have permission to access it.\n- npm error 404\n- npm error 404 Note that you can also install from a\n- npm error 404 tarball, folder, http url, or git url.\n- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-17T00_36_42_834Z-debug-0.log"
 }

package/docs/safety-index/artifacts/vercel-ai-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-15T22:33:38.984Z
+Generated at 2026-07-17T00:36:42.758Z
 
 ## Target and Environment Metadata
 
@@ -56,11 +56,11 @@ Next steps:
 - Check whether the package expects a different transport or an app-oriented startup flow.
 - Use the recent stderr lines below before assuming this is a harness bug.
 Recent stderr:
-- npm error 404  '@anthropic/mcp-server-vercel-ai@*' is not in this registry.
+- npm error 404  The requested resource '@anthropic/mcp-server-vercel-ai@*' could not be found or you do not have permission to access it.
 - npm error 404
 - npm error 404 Note that you can also install from a
 - npm error 404 tarball, folder, http url, or git url.
-- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-15T22_33_39_057Z-debug-0.log
+- npm error A complete log of this run can be found in: /Users/williamweishuhn/.npm/_logs/2026-07-17T00_36_42_834Z-debug-0.log
 ```
 
 ## Full Capability Status Table
@@ -102,5 +102,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-15T223338984Z_2a29a957`
+- Run ID: `run_2026-07-17T003642758Z_399f4873`
 - Gate: `fail`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kryptosai/mcp-observatory",
-  "version": "1.33.0",
+  "version": "1.34.0",
   "description": "Ship safer MCP servers. Test, secure, and monitor the MCP servers you're building — CI-native scanning, attack simulation, and security gates.",
   "mcpName": "io.github.KryptosAI/mcp-observatory",
   "license": "MIT",
@@ -178,7 +178,7 @@
     "eslint": "10.7.0",
     "globals": "17.7.0",
     "tsx": "4.23.1",
-    "typescript": "7.0.2",
+    "typescript": "~5.8.0",
     "typescript-eslint": "8.64.0",
     "vitest": "4.1.10"
   }

package/dist/src/adapters/base.d.ts

@@ -1,14 +0,0 @@
-import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import type { ServerCapabilities } from "@modelcontextprotocol/sdk/types.js";
-import type { TargetConfig } from "../types.js";
-export interface AdapterSession {
-    client: Client;
-    serverCapabilities?: ServerCapabilities;
-    serverName?: string;
-    serverVersion?: string;
-    stderrLines: string[];
-    close(): Promise<void>;
-}
-export interface TargetAdapter {
-    connect(target: TargetConfig): Promise<AdapterSession>;
-}

package/dist/src/adapters/base.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=base.js.map

package/dist/src/adapters/base.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/adapters/base.ts"],"names":[],"mappings":""}

package/dist/src/checks/semantics.d.ts

@@ -1,2 +0,0 @@
-import { type CapabilityObservation, type ObservedCheck } from "./base.js";
-export declare function runSemanticsCheck(observations: CapabilityObservation[], stderrLines: string[]): ObservedCheck;

package/dist/src/checks/semantics.js

@@ -1,48 +0,0 @@
-import { performance } from "node:perf_hooks";
-import { makeCheckResult } from "./base.js";
-export function runSemanticsCheck(observations, stderrLines) {
-    const startedAt = performance.now();
-    const advertised = observations.filter((observation) => observation.advertised);
-    const failingCapabilities = advertised
-        .filter((observation) => !observation.responded)
-        .map((observation) => observation.capability);
-    const partialCapabilities = advertised
-        .filter((observation) => observation.responded && !observation.minimalShapePresent)
-        .map((observation) => observation.capability);
-    const passingCapabilities = advertised
-        .filter((observation) => observation.responded && observation.minimalShapePresent)
-        .map((observation) => observation.capability);
-    let status = "pass";
-    let message = "Advertised capabilities responded and returned the minimal expected shape.";
-    if (advertised.length === 0) {
-        status = "unsupported";
-        message = "No capabilities were advertised, so semantics could not be evaluated.";
-    }
-    else if (failingCapabilities.length > 0) {
-        status = "fail";
-        message = `Advertised capabilities that did not respond cleanly: ${failingCapabilities.join(", ")}.`;
-    }
-    else if (partialCapabilities.length > 0) {
-        status = "partial";
-        message =
-            `Advertised capabilities responded with caveats: ${partialCapabilities.join(", ")}.`;
-    }
-    else if (passingCapabilities.length > 0) {
-        message =
-            `Advertised capabilities responded and returned the minimal expected shape: ${passingCapabilities.join(", ")}.`;
-    }
-    return {
-        result: makeCheckResult("semantics", status, performance.now() - startedAt, message, observations.map((observation) => ({
-            endpoint: observation.endpoint,
-            advertised: observation.advertised,
-            responded: observation.responded,
-            minimalShapePresent: observation.minimalShapePresent,
-            itemCount: observation.itemCount,
-            identifiers: observation.identifiers,
-            diagnostics: stderrLines.length > 0
-                ? [...observation.diagnostics, ...stderrLines.slice(-5)]
-                : observation.diagnostics
-        })))
-    };
-}
-//# sourceMappingURL=semantics.js.map

package/dist/src/checks/semantics.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"semantics.js","sourceRoot":"","sources":["../../../src/checks/semantics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EACL,eAAe,EAGhB,MAAM,WAAW,CAAC;AAEnB,MAAM,UAAU,iBAAiB,CAC/B,YAAqC,EACrC,WAAqB;IAErB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,mBAAmB,GAAG,UAAU;SACnC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;SAC/C,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,UAAU;SACnC,MAAM,CACL,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAC5D;SACA,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,UAAU;SACnC,MAAM,CACL,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,mBAAmB,CAC3D;SACA,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,MAAM,GAAsC,MAAM,CAAC;IACvD,IAAI,OAAO,GACT,4EAA4E,CAAC;IAE/E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,aAAa,CAAC;QACvB,OAAO,GAAG,uEAAuE,CAAC;IACpF,CAAC;SAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,GAAG,yDAAyD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvG,CAAC;SAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,SAAS,CAAC;QACnB,OAAO;YACL,mDAAmD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACzF,CAAC;SAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,8EAA8E,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACpH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,eAAe,CACrB,WAAW,EACX,MAAM,EACN,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAC7B,OAAO,EACP,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACjC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;YACpD,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,WAAW,EACT,WAAW,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,CAAC,CAAC,WAAW,CAAC,WAAW;SAC9B,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/src/diff/diff.d.ts

@@ -1,2 +0,0 @@
-import type { DiffArtifact, RunArtifact } from "../types.js";
-export declare function diffArtifacts(base: RunArtifact, head: RunArtifact): DiffArtifact;

package/dist/src/diff/diff.js

@@ -1,81 +0,0 @@
-import { SCHEMA_VERSION } from "../types.js";
-const STATUS_RANK = {
-    pass: 6,
-    partial: 5,
-    flaky: 4,
-    unsupported: 3,
-    skipped: 2,
-    fail: 1
-};
-function toEntry(base, head) {
-    const source = head ?? base;
-    if (source === undefined) {
-        throw new Error("Expected at least one check result when building a diff entry.");
-    }
-    return {
-        id: source.id,
-        capability: source.capability,
-        fromStatus: base?.status,
-        toStatus: head?.status,
-        message: head?.message ??
-            base?.message ??
-            "No additional diagnostic message was recorded."
-    };
-}
-export function diffArtifacts(base, head) {
-    const baseChecks = new Map(base.checks.map((check) => [check.id, check]));
-    const headChecks = new Map(head.checks.map((check) => [check.id, check]));
-    const checkIds = Array.from(new Set([...baseChecks.keys(), ...headChecks.keys()]));
-    const regressions = [];
-    const recoveries = [];
-    const unchanged = [];
-    const added = [];
-    const removed = [];
-    for (const checkId of checkIds) {
-        const baseCheck = baseChecks.get(checkId);
-        const headCheck = headChecks.get(checkId);
-        if (baseCheck === undefined && headCheck !== undefined) {
-            added.push(toEntry(undefined, headCheck));
-            continue;
-        }
-        if (baseCheck !== undefined && headCheck === undefined) {
-            removed.push(toEntry(baseCheck, undefined));
-            continue;
-        }
-        if (baseCheck === undefined || headCheck === undefined) {
-            continue;
-        }
-        if (baseCheck.status === headCheck.status) {
-            unchanged.push(toEntry(baseCheck, headCheck));
-            continue;
-        }
-        if (STATUS_RANK[headCheck.status] < STATUS_RANK[baseCheck.status]) {
-            regressions.push(toEntry(baseCheck, headCheck));
-            continue;
-        }
-        recoveries.push(toEntry(baseCheck, headCheck));
-    }
-    const summary = {
-        regressions: regressions.length,
-        recoveries: recoveries.length,
-        unchanged: unchanged.length,
-        added: added.length,
-        removed: removed.length,
-        gate: regressions.length > 0 ? "fail" : "pass"
-    };
-    return {
-        artifactType: "diff",
-        schemaVersion: SCHEMA_VERSION,
-        gate: summary.gate,
-        baseRunId: base.runId,
-        headRunId: head.runId,
-        createdAt: new Date().toISOString(),
-        summary,
-        regressions,
-        recoveries,
-        unchanged,
-        added,
-        removed
-    };
-}
-//# sourceMappingURL=diff.js.map

package/dist/src/diff/diff.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/diff/diff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,GAAgC;IAC/C,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,SAAS,OAAO,CAAC,IAA6B,EAAE,IAA6B;IAC3E,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,IAAI,EAAE,MAAM;QACxB,QAAQ,EAAE,IAAI,EAAE,MAAM;QACtB,OAAO,EACL,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,OAAO;YACb,gDAAgD;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,IAAiB;IAChE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnF,MAAM,WAAW,GAAgB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACvD,SAAS;QACX,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,SAAS,EAAE,SAAS,CAAC,MAAM;QAC3B,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,IAAI,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB;KACrE,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,cAAc;QAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,WAAW;QACX,UAAU;QACV,SAAS;QACT,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/src/reporters/json.d.ts

@@ -1,2 +0,0 @@
-import type { DiffArtifact, RunArtifact } from "../types.js";
-export declare function renderJson(artifact: RunArtifact | DiffArtifact): string;

package/dist/src/reporters/json.js

@@ -1,4 +0,0 @@
-export function renderJson(artifact) {
-    return JSON.stringify(artifact, null, 2);
-}
-//# sourceMappingURL=json.js.map

package/dist/src/reporters/json.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../src/reporters/json.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,UAAU,CAAC,QAAoC;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/runner/runner.d.ts

@@ -1,2 +0,0 @@
-import type { RunArtifact, TargetConfig } from "../types.js";
-export declare function runTarget(target: TargetConfig): Promise<RunArtifact>;