npm - @mcp-shark/mcp-shark - Versions diffs - 1.5.13 → 1.7.2 - Mend

@mcp-shark/mcp-shark 1.5.13 → 1.7.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (158) hide show

package/README.md +482 -56
package/bin/mcp-shark.js +146 -52
package/core/cli/AutoFixEngine.js +93 -0
package/core/cli/ConfigScanner.js +193 -0
package/core/cli/DataLoader.js +200 -0
package/core/cli/DeclarativeRuleEngine.js +363 -0
package/core/cli/DoctorCommand.js +218 -0
package/core/cli/FixHandlers.js +222 -0
package/core/cli/HtmlReportGenerator.js +203 -0
package/core/cli/IdeConfigPaths.js +175 -0
package/core/cli/ListCommand.js +255 -0
package/core/cli/LockCommand.js +164 -0
package/core/cli/LockDiffEngine.js +152 -0
package/core/cli/RuleRegistryConfig.js +131 -0
package/core/cli/ScanCommand.js +244 -0
package/core/cli/ScanService.js +200 -0
package/core/cli/SecretDetector.js +92 -0
package/core/cli/SharkScoreCalculator.js +109 -0
package/core/cli/ToolClassifications.js +51 -0
package/core/cli/ToxicFlowAnalyzer.js +212 -0
package/core/cli/UpdateCommand.js +188 -0
package/core/cli/WalkthroughGenerator.js +195 -0
package/core/cli/WatchCommand.js +129 -0
package/core/cli/YamlRuleEngine.js +197 -0
package/core/cli/data/rule-packs/aauth-visibility.json +117 -0
package/core/cli/data/rule-packs/agentic-security-2026.json +180 -0
package/core/cli/data/rule-packs/general-security.json +173 -0
package/core/cli/data/rule-packs/owasp-mcp-2026.json +244 -0
package/core/cli/data/rule-packs/toxic-flow-heuristics.json +21 -0
package/core/cli/data/rule-sources.json +5 -0
package/core/cli/data/secret-patterns.json +18 -0
package/core/cli/data/tool-classifications.json +111 -0
package/core/cli/data/toxic-flow-rules.json +47 -0
package/core/cli/index.js +23 -0
package/core/cli/output/Banner.js +52 -0
package/core/cli/output/Formatter.js +183 -0
package/core/cli/output/JsonFormatter.js +106 -0
package/core/cli/output/index.js +16 -0
package/core/cli/secureRegistryFetch.js +157 -0
package/core/cli/symbols.js +16 -0
package/core/configs/environment.js +3 -1
package/core/configs/index.js +3 -64
package/core/container/DependencyContainer.js +4 -1
package/core/mcp-server/index.js +4 -1
package/core/mcp-server/server/external/all.js +10 -3
package/core/mcp-server/server/external/config.js +62 -5
package/core/models/RequestFilters.js +3 -0
package/core/repositories/PacketRepository.js +16 -0
package/core/services/AuditService.js +2 -0
package/core/services/ConfigService.js +9 -1
package/core/services/ConfigTransformService.js +34 -2
package/core/services/RequestService.js +58 -5
package/core/services/ServerManagementService.js +59 -4
package/core/services/security/StaticRulesService.js +69 -13
package/core/services/security/TrafficAnalysisService.js +19 -1
package/core/services/security/TrafficToxicFlowService.js +154 -0
package/core/services/security/aauthGraph.js +199 -0
package/core/services/security/aauthParser.js +274 -0
package/core/services/security/aauthSelfTest.js +346 -0
package/core/services/security/index.js +2 -1
package/core/services/security/rules/index.js +25 -59
package/core/services/security/rules/scans/configPermissions.js +91 -0
package/core/services/security/rules/scans/duplicateToolNames.js +85 -0
package/core/services/security/rules/scans/insecureTransport.js +148 -0
package/core/services/security/rules/scans/missingContainment.js +123 -0
package/core/services/security/rules/scans/shellEnvInjection.js +101 -0
package/core/services/security/rules/scans/unsafeDefaults.js +99 -0
package/core/services/security/toolsListFromTrafficParser.js +70 -0
package/core/tui/App.js +144 -0
package/core/tui/FindingsPanel.js +115 -0
package/core/tui/FixPanel.js +132 -0
package/core/tui/Header.js +51 -0
package/core/tui/HelpBar.js +42 -0
package/core/tui/ServersPanel.js +109 -0
package/core/tui/ToxicFlowsPanel.js +100 -0
package/core/tui/h.js +8 -0
package/core/tui/index.js +11 -0
package/core/tui/render.js +22 -0
package/package.json +24 -16
package/ui/dist/assets/index-D6zDrtMV.js +81 -0
package/ui/dist/index.html +1 -1
package/ui/server/controllers/AauthController.js +279 -0
package/ui/server/controllers/RequestController.js +12 -1
package/ui/server/controllers/SecurityFindingsController.js +46 -1
package/ui/server/routes/aauth.js +18 -0
package/ui/server/routes/requests.js +8 -1
package/ui/server/routes/security.js +5 -1
package/ui/server/setup.js +224 -6
package/ui/server/swagger/paths/components.js +55 -0
package/ui/server/swagger/paths/securityTrafficFlows.js +59 -0
package/ui/server/swagger/paths.js +2 -2
package/ui/server/swagger/swagger.js +5 -2
package/ui/server.js +1 -1
package/ui/src/App.jsx +26 -52
package/ui/src/PacketFilters.jsx +31 -1
package/ui/src/PacketList.jsx +2 -2
package/ui/src/Security.jsx +10 -0
package/ui/src/TabNavigation.jsx +8 -0
package/ui/src/components/AAuthBadge.jsx +92 -0
package/ui/src/components/AauthExplorer/AauthExplorerGraph.jsx +231 -0
package/ui/src/components/AauthExplorer/AauthExplorerView.jsx +387 -0
package/ui/src/components/AauthExplorer/NodeDetailPanel.jsx +272 -0
package/ui/src/components/App/ActionMenu.jsx +4 -31
package/ui/src/components/App/ApiDocsButton.jsx +0 -1
package/ui/src/components/App/ShutdownButton.jsx +0 -1
package/ui/src/components/App/useAppState.js +19 -26
package/ui/src/components/DetailsTab/AAuthIdentitySection.jsx +119 -0
package/ui/src/components/DetailsTab/RequestDetailsSection.jsx +2 -0
package/ui/src/components/DetailsTab/ResponseDetailsSection.jsx +2 -0
package/ui/src/components/DetectedPathsList.jsx +1 -5
package/ui/src/components/FileInput.jsx +0 -1
package/ui/src/components/PacketFilters/AAuthPostureFilter.jsx +81 -0
package/ui/src/components/RequestRow/RequestRowMain.jsx +7 -1
package/ui/src/components/Security/AAuthPosturePanel.jsx +360 -0
package/ui/src/components/Security/ScannerContent.jsx +33 -1
package/ui/src/components/Security/TrafficToxicFlowsPanel.jsx +253 -0
package/ui/src/components/Security/securityApi.js +15 -0
package/ui/src/components/Security/useSecurity.js +60 -3
package/ui/src/components/ServerControl.jsx +0 -1
package/ui/src/components/TabNavigation/DesktopTabs.jsx +0 -11
package/ui/src/components/TabNavigationIcons.jsx +5 -0
package/ui/src/components/ViewModeTabs.jsx +0 -1
package/ui/src/utils/animations.js +26 -9
package/core/services/security/rules/scans/agentic01GoalHijack.js +0 -130
package/core/services/security/rules/scans/agentic02ToolMisuse.js +0 -129
package/core/services/security/rules/scans/agentic03IdentityAbuse.js +0 -130
package/core/services/security/rules/scans/agentic04SupplyChain.js +0 -130
package/core/services/security/rules/scans/agentic06MemoryPoisoning.js +0 -130
package/core/services/security/rules/scans/agentic07InsecureCommunication.js +0 -135
package/core/services/security/rules/scans/agentic08CascadingFailures.js +0 -135
package/core/services/security/rules/scans/agentic09TrustExploitation.js +0 -135
package/core/services/security/rules/scans/agentic10RogueAgent.js +0 -130
package/core/services/security/rules/scans/hardcodedSecrets.js +0 -130
package/core/services/security/rules/scans/mcp01TokenMismanagement.js +0 -127
package/core/services/security/rules/scans/mcp02ScopeCreep.js +0 -130
package/core/services/security/rules/scans/mcp03ToolPoisoning.js +0 -132
package/core/services/security/rules/scans/mcp04SupplyChain.js +0 -131
package/core/services/security/rules/scans/mcp06PromptInjection.js +0 -200
package/core/services/security/rules/scans/mcp07InsufficientAuth.js +0 -130
package/core/services/security/rules/scans/mcp08LackAudit.js +0 -129
package/core/services/security/rules/scans/mcp09ShadowServers.js +0 -129
package/core/services/security/rules/scans/mcp10ContextInjection.js +0 -130
package/ui/dist/assets/index-CiCSDYf-.js +0 -97
package/ui/server/routes/help.js +0 -44
package/ui/server/swagger/paths/help.js +0 -82
package/ui/src/HelpGuide/HelpGuideContent.jsx +0 -118
package/ui/src/HelpGuide/HelpGuideFooter.jsx +0 -59
package/ui/src/HelpGuide/HelpGuideHeader.jsx +0 -57
package/ui/src/HelpGuide.jsx +0 -78
package/ui/src/IntroTour.jsx +0 -154
package/ui/src/components/App/HelpButton.jsx +0 -90
package/ui/src/components/TourOverlay.jsx +0 -117
package/ui/src/components/TourTooltip/TourTooltipButtons.jsx +0 -120
package/ui/src/components/TourTooltip/TourTooltipHeader.jsx +0 -71
package/ui/src/components/TourTooltip/TourTooltipIcons.jsx +0 -54
package/ui/src/components/TourTooltip/useTooltipPosition.js +0 -135
package/ui/src/components/TourTooltip.jsx +0 -91
package/ui/src/config/tourSteps.jsx +0 -140

package/ui/dist/index.html CHANGED Viewed

@@ -7,7 +7,7 @@
     <title>MCP Shark</title>
     <link rel="icon" type="image/png" href="/og-image.png" />
     <link rel="apple-touch-icon" href="/og-image.png" />
-    <script type="module" crossorigin src="/assets/index-CiCSDYf-.js"></script>
+    <script type="module" crossorigin src="/assets/index-D6zDrtMV.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Cc-IUa83.css">
   </head>
   <body>

package/ui/server/controllers/AauthController.js ADDED Viewed

@@ -0,0 +1,279 @@
+import { Defaults } from '#core/constants/Defaults.js';
+import { StatusCodes } from '#core/constants/StatusCodes.js';
+import { RequestFilters } from '#core/models/RequestFilters.js';
+import { buildAauthGraph } from '#core/services/security/aauthGraph.js';
+import { parseAauthForPacket, summarizeAauth } from '#core/services/security/aauthParser.js';
+import { detectHttpUpstreams, runAauthSelfTest } from '#core/services/security/aauthSelfTest.js';
+/**
+ * Controller for AAuth-visibility HTTP endpoints.
+ *
+ * Every response describes what was OBSERVED on the wire. Nothing is
+ * cryptographically verified by mcp-shark.
+ */
+export class AauthController {
+  constructor(requestService, auditService, logger) {
+    this.requestService = requestService;
+    this.auditService = auditService;
+    this.logger = logger;
+  }
+  /**
+   * GET /api/aauth/posture
+   * Summary of AAuth posture across captured traffic.
+   */
+  getPosture(_req, res) {
+    try {
+      const filters = new RequestFilters({
+        limit: Defaults.EXPORT_LIMIT,
+        offset: Defaults.DEFAULT_OFFSET,
+      });
+      const packets = this.requestService.getRequests(filters);
+      const summary = summarizeAauth(packets);
+      const total = summary.total || 0;
+      const signedRatio = total > 0 ? summary.counts.signed / total : 0;
+      res.json({
+        observed: true,
+        verified: false,
+        total_packets: total,
+        counts: summary.counts,
+        signed_ratio: signedRatio,
+        unique_agents: summary.unique_agents,
+        unique_missions: summary.unique_missions,
+        note: 'mcp-shark records AAuth signals as observed only. No signature verification is performed.',
+      });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error in AAuth posture');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to compute AAuth posture',
+        details: error.message,
+      });
+    }
+  }
+  /**
+   * GET /api/aauth/missions
+   * List unique mission IDs observed, with packet counts and time spans.
+   */
+  getMissions(_req, res) {
+    try {
+      const filters = new RequestFilters({
+        limit: Defaults.EXPORT_LIMIT,
+        offset: Defaults.DEFAULT_OFFSET,
+      });
+      const packets = this.requestService.getRequests(filters);
+      const missions = new Map();
+      for (const p of packets) {
+        const mission = p?.aauth?.mission;
+        if (!mission) {
+          continue;
+        }
+        const existing = missions.get(mission) || {
+          mission_id: mission,
+          packet_count: 0,
+          first_frame: p.frame_number,
+          last_frame: p.frame_number,
+          first_ts_iso: p.timestamp_iso,
+          last_ts_iso: p.timestamp_iso,
+          agents: new Set(),
+          servers: new Set(),
+        };
+        existing.packet_count += 1;
+        if (p.frame_number < existing.first_frame) {
+          existing.first_frame = p.frame_number;
+          existing.first_ts_iso = p.timestamp_iso;
+        }
+        if (p.frame_number > existing.last_frame) {
+          existing.last_frame = p.frame_number;
+          existing.last_ts_iso = p.timestamp_iso;
+        }
+        if (p.aauth?.agent) {
+          existing.agents.add(p.aauth.agent);
+        }
+        if (p.remote_address) {
+          existing.servers.add(p.remote_address);
+        }
+        missions.set(mission, existing);
+      }
+      const result = [...missions.values()].map((m) => ({
+        ...m,
+        agents: [...m.agents],
+        servers: [...m.servers],
+      }));
+      res.json({ observed: true, verified: false, missions: result });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error in AAuth missions');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to compute AAuth missions',
+        details: error.message,
+      });
+    }
+  }
+  /**
+   * GET /api/aauth/graph
+   * Knowledge-graph of AAuth signals observed across captured traffic.
+   *
+   * Returns nodes (agents, missions, resources, signing algs, access modes)
+   * and edges (calls, pursues, targets, signs-with, requires) plus a
+   * categories list. Suitable for direct rendering in a force-layout.
+   */
+  getGraph(_req, res) {
+    try {
+      const filters = new RequestFilters({
+        limit: Defaults.EXPORT_LIMIT,
+        offset: Defaults.DEFAULT_OFFSET,
+      });
+      const packets = this.requestService.getRequests(filters);
+      const graph = buildAauthGraph(packets);
+      res.json({ observed: true, verified: false, ...graph });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error building AAuth graph');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to build AAuth graph',
+        details: error.message,
+      });
+    }
+  }
+  /**
+   * GET /api/aauth/upstreams
+   * Lists the HTTP MCP upstreams currently configured for mcp-shark — used by
+   * the UI to show "we'll target N detected upstreams" before running a self
+   * test.
+   */
+  getUpstreams(_req, res) {
+    try {
+      const upstreams = detectHttpUpstreams();
+      res.json({ count: upstreams.length, upstreams });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error reading mcp-shark upstreams');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to read upstreams',
+        details: error.message,
+      });
+    }
+  }
+  /**
+   * GET /api/aauth/node/:category/:id
+   * Returns the recently observed packets backing a single graph node.
+   * This is what powers the "node detail" side panel on the AAuth Explorer.
+   */
+  getNodePackets(req, res) {
+    try {
+      const { category, id } = req.params;
+      if (!category || !id) {
+        res.status(StatusCodes.BAD_REQUEST).json({ error: 'category and id are required' });
+        return;
+      }
+      const decodedId = decodeURIComponent(id);
+      const filters = new RequestFilters({
+        limit: Defaults.EXPORT_LIMIT,
+        offset: Defaults.DEFAULT_OFFSET,
+      });
+      const packets = this.requestService.getRequests(filters);
+      const matching = [];
+      for (const p of packets) {
+        const aauth = parseAauthForPacket(p);
+        if (matchesNode(p, aauth, category, decodedId)) {
+          matching.push({
+            frame_number: p.frame_number,
+            timestamp_iso: p.timestamp_iso,
+            direction: p.direction,
+            method: p.method,
+            url: p.url,
+            host: p.host,
+            status_code: p.status_code,
+            jsonrpc_method: p.jsonrpc_method,
+            posture: aauth.posture,
+            agent: aauth.agent,
+            mission: aauth.mission,
+            sig_alg: aauth.sig_alg,
+            sig_keyid_short: aauth.sig_keyid_short,
+            requirement: aauth.requirement,
+          });
+          if (matching.length >= 100) {
+            break;
+          }
+        }
+      }
+      res.json({
+        category,
+        id: decodedId,
+        packet_count: matching.length,
+        packets: matching,
+      });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error fetching node packets');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to fetch node packets',
+        details: error.message,
+      });
+    }
+  }
+  /**
+   * POST /api/aauth/self-test
+   * Generate synthetic AAuth-shaped traffic and write it through the audit
+   * pipeline so it appears identically to live captured traffic. Auto-detects
+   * configured HTTP upstreams; falls back to a placeholder triple. Body is
+   * optional and accepts `{ rounds: number }`.
+   */
+  runSelfTest(req, res) {
+    try {
+      const result = runAauthSelfTest(
+        { auditService: this.auditService, logger: this.logger },
+        { rounds: req.body?.rounds }
+      );
+      res.json({ observed: true, verified: false, ...result });
+    } catch (error) {
+      this.logger.error({ error: error.message }, 'Error running AAuth self-test');
+      res.status(StatusCodes.INTERNAL_SERVER_ERROR).json({
+        error: 'Failed to run AAuth self-test',
+        details: error.message,
+      });
+    }
+  }
+}
+function matchesNode(packet, aauth, category, id) {
+  switch (category) {
+    case 'agent':
+      return aauth.agent === id;
+    case 'mission':
+      return aauth.mission === id;
+    case 'resource': {
+      const host =
+        packet?.host ||
+        packet?.remote_address ||
+        (typeof packet?.url === 'string'
+          ? (() => {
+              try {
+                return new URL(packet.url).host;
+              } catch {
+                return null;
+              }
+            })()
+          : null);
+      return host === id;
+    }
+    case 'signing':
+      return aauth.sig_alg === id;
+    case 'access': {
+      if (!aauth.requirement) {
+        return false;
+      }
+      const m = aauth.requirement.match(/mode\s*=\s*"?([A-Za-z0-9_-]+)"?/i);
+      return m && m[1] === id;
+    }
+    default:
+      return false;
+  }
+}

package/ui/server/controllers/RequestController.js CHANGED Viewed

@@ -8,11 +8,18 @@ import { RequestFilters } from '#core/models/RequestFilters.js';
  */
 export class RequestController {
-  constructor(requestService, exportService, serializationLib, logger) {
+  constructor(
+    requestService,
+    exportService,
+    serializationLib,
+    logger,
+    trafficToxicFlowService = null
+  ) {
     this.requestService = requestService;
     this.exportService = exportService;
     this.serializationLib = serializationLib;
     this.logger = logger;
+    this.trafficToxicFlowService = trafficToxicFlowService;
   }
   /**
@@ -43,6 +50,9 @@ export class RequestController {
       endTime: reqQuery.endTime || null,
       limit: reqQuery.limit,
       offset: reqQuery.offset,
+      aauthPosture: reqQuery.aauthPosture ? String(reqQuery.aauthPosture).trim() : null,
+      aauthAgent: reqQuery.aauthAgent ? String(reqQuery.aauthAgent).trim() : null,
+      aauthMission: reqQuery.aauthMission ? String(reqQuery.aauthMission).trim() : null,
     });
   }
@@ -90,6 +100,7 @@ export class RequestController {
   clearRequests(_req, res) {
     try {
       const result = this.requestService.clearRequests();
+      this.trafficToxicFlowService?.clear();
       res.json({
         success: true,
         message: `Cleared ${result.clearedTables.length} table(s): ${result.clearedTables.join(', ')}. All captured traffic has been cleared.`,

package/ui/server/controllers/SecurityFindingsController.js CHANGED Viewed

@@ -5,10 +5,16 @@ import { handleError, handleValidationError } from '../utils/errorHandler.js';
  * Controller for Security Detection and Findings HTTP endpoints
  */
 export class SecurityFindingsController {
-  constructor(securityDetectionService, serverManagementService, logger) {
+  constructor(
+    securityDetectionService,
+    serverManagementService,
+    logger,
+    trafficToxicFlowService = null
+  ) {
     this.securityService = securityDetectionService;
     this.serverManagementService = serverManagementService;
     this.logger = logger;
+    this.trafficToxicFlowService = trafficToxicFlowService;
   }
   /**
@@ -198,6 +204,7 @@ export class SecurityFindingsController {
   clearFindings = (_req, res) => {
     try {
       const deletedCount = this.securityService.clearAllFindings();
+      this.trafficToxicFlowService?.clear();
       return res.json({
         success: true,
         message: `Cleared ${deletedCount} finding${deletedCount !== 1 ? 's' : ''}`,
@@ -229,4 +236,42 @@ export class SecurityFindingsController {
       handleError(error, res, this.logger, 'Error deleting scan findings');
     }
   };
+  /**
+   * Cross-server toxic flows from observed tools/list traffic (live registry + last recompute).
+   */
+  getTrafficToxicFlows = (_req, res) => {
+    try {
+      if (!this.trafficToxicFlowService) {
+        return res.status(StatusCodes.SERVICE_UNAVAILABLE).json({
+          success: false,
+          error: 'Traffic toxic flow service is not available',
+        });
+      }
+      return res.json(this.trafficToxicFlowService.getSnapshot());
+    } catch (error) {
+      handleError(error, res, this.logger, 'Error getting traffic toxic flows');
+    }
+  };
+  /**
+   * Rebuild toxic-flow model from stored response packets (batch replay).
+   */
+  replayTrafficToxicFlows = (_req, res) => {
+    try {
+      if (!this.trafficToxicFlowService) {
+        return res.status(StatusCodes.SERVICE_UNAVAILABLE).json({
+          success: false,
+          error: 'Traffic toxic flow service is not available',
+        });
+      }
+      const stats = this.trafficToxicFlowService.rebuildFromDatabase();
+      return res.json({
+        ...this.trafficToxicFlowService.getSnapshot(),
+        replay: stats,
+      });
+    } catch (error) {
+      handleError(error, res, this.logger, 'Error replaying traffic toxic flows');
+    }
+  };
 }

package/ui/server/routes/aauth.js ADDED Viewed

@@ -0,0 +1,18 @@
+import { AauthController } from '../controllers/AauthController.js';
+export function createAauthRoutes(container) {
+  const requestService = container.getService('request');
+  const auditService = container.getService('audit');
+  const logger = container.getLibrary('logger');
+  const controller = new AauthController(requestService, auditService, logger);
+  return {
+    getPosture: (req, res) => controller.getPosture(req, res),
+    getMissions: (req, res) => controller.getMissions(req, res),
+    getGraph: (req, res) => controller.getGraph(req, res),
+    getUpstreams: (req, res) => controller.getUpstreams(req, res),
+    getNodePackets: (req, res) => controller.getNodePackets(req, res),
+    runSelfTest: (req, res) => controller.runSelfTest(req, res),
+  };
+}

package/ui/server/routes/requests.js CHANGED Viewed

@@ -5,8 +5,15 @@ export function createRequestsRoutes(container) {
   const exportService = container.getService('export');
   const serializationLib = container.getLibrary('serialization');
   const logger = container.getLibrary('logger');
+  const trafficToxicFlowService = container.getService('trafficToxicFlow');
-  const controller = new RequestController(requestService, exportService, serializationLib, logger);
+  const controller = new RequestController(
+    requestService,
+    exportService,
+    serializationLib,
+    logger,
+    trafficToxicFlowService
+  );
   const router = {};

package/ui/server/routes/security.js CHANGED Viewed

@@ -13,10 +13,12 @@ export function createSecurityRoutes(container) {
   const yaraEngineService = container.getService('yaraEngine');
   const logger = container.getLibrary('logger');
+  const trafficToxicFlowService = container.getService('trafficToxicFlow');
   const findingsController = new SecurityFindingsController(
     securityDetectionService,
     serverManagementService,
-    logger
+    logger,
+    trafficToxicFlowService
   );
   const sourcesController = new RuleSourcesController(
@@ -40,6 +42,8 @@ export function createSecurityRoutes(container) {
   router.getScanHistory = findingsController.getScanHistory;
   router.clearFindings = findingsController.clearFindings;
   router.deleteScanFindings = findingsController.deleteScanFindings;
+  router.getTrafficToxicFlows = findingsController.getTrafficToxicFlows;
+  router.replayTrafficToxicFlows = findingsController.replayTrafficToxicFlows;
   // YARA engine (RuleSourcesController)
   router.getEngineStatus = sourcesController.getEngineStatus;