@mneme-ai/core 2.23.2 → 2.25.0

package/dist/mcp_fuzzer/engine.js

@@ -0,0 +1,376 @@
+/**
+ * v2.24.0 — MCP fuzzer engine.
+ *
+ * Spawns the target MCP server as a child process (default: the local
+ * `mneme mcp` bin), sends each vector's payload, awaits responses with a
+ * per-vector timeout, runs the detector, and returns a structured report
+ * card. The engine is transport-agnostic at the API surface — only stdio
+ * is implemented here; SSE/HTTP can be added later by swapping the IO
+ * layer.
+ *
+ * Determinism: vector ids define seed; mutation engine takes a seed
+ * parameter; HMAC chain over canonical body makes the report tamper-
+ * evident so it can be re-verified offline.
+ */
+import { spawn } from "node:child_process";
+import { createHmac } from "node:crypto";
+import { VECTORS_108 } from "./vectors.js";
+const HMAC_KEY = process.env["MNEME_MCP_FUZZ_KEY"] ?? "mneme-mcp-fuzzer-v1";
+function canon(v) {
+    if (v === null || typeof v !== "object")
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return "[" + v.map(canon).join(",") + "]";
+    const keys = Object.keys(v).sort();
+    return "{" + keys.map((k) => JSON.stringify(k) + ":" + canon(v[k])).join(",") + "}";
+}
+function sha256Hex(s) {
+    return createHmac("sha256", "mneme-mcp-fuzz-digest").update(s).digest("hex");
+}
+function hmacHex(payload, prev) {
+    return createHmac("sha256", HMAC_KEY).update(prev + "|" + payload).digest("hex");
+}
+class StdioMcpClient {
+    child;
+    buf = "";
+    pending = new Map();
+    allFrames = [];
+    // Some frames have null id (notifications); those land in nullIdFrames.
+    nullIdFrames = [];
+    constructor(target) {
+        if (target.kind === "local") {
+            // Default: spawn the local mneme CLI in MCP mode.
+            const node = process.execPath;
+            const bin = process.env["MNEME_CLI_BIN"] ?? "packages/cli/bin/mneme.js";
+            this.child = spawn(node, [bin, "mcp"], {
+                cwd: target.cwd,
+                env: { ...process.env, ...(target.env ?? {}), MNEME_WARMCALL: "0", MNEME_MUSCLE_BYPASS: "0" },
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+        }
+        else {
+            this.child = spawn(target.cmd.exe, target.cmd.args, {
+                cwd: target.cwd,
+                env: { ...process.env, ...(target.env ?? {}) },
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+        }
+        this.child.stdout.setEncoding("utf8");
+        this.child.stdout.on("data", (chunk) => this.onStdout(chunk));
+        // Drain stderr to avoid backpressure but don't fail the run.
+        this.child.stderr.setEncoding("utf8");
+        this.child.stderr.on("data", () => { });
+        this.child.on("error", () => { });
+    }
+    onStdout(chunk) {
+        this.buf += chunk;
+        let nl;
+        while ((nl = this.buf.indexOf("\n")) !== -1) {
+            const line = this.buf.slice(0, nl);
+            this.buf = this.buf.slice(nl + 1);
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            let parsed = null;
+            try {
+                parsed = JSON.parse(trimmed);
+            }
+            catch { /* leave null */ }
+            this.allFrames.push({ id: parsed?.id ?? undefined, raw: trimmed, parsed });
+            if (parsed && (parsed.id === undefined || parsed.id === null)) {
+                this.nullIdFrames.push(parsed);
+                continue;
+            }
+            if (parsed && parsed.id !== undefined) {
+                const k = parsed.id;
+                const next = this.pending.get(k);
+                if (next) {
+                    this.pending.delete(k);
+                    next(parsed);
+                }
+            }
+        }
+    }
+    async sendAndWait(frame, expectedId, timeoutMs) {
+        const line = typeof frame === "string" ? frame : JSON.stringify(frame);
+        if (expectedId === null) {
+            // notification — no response expected; just send + a short idle wait
+            this.child.stdin.write(line + "\n");
+            await new Promise((r) => setTimeout(r, 50));
+            return null;
+        }
+        return await new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(expectedId);
+                resolve(null);
+            }, timeoutMs);
+            this.pending.set(expectedId, (r) => {
+                clearTimeout(timer);
+                resolve(r);
+            });
+            try {
+                this.child.stdin.write(line + "\n");
+            }
+            catch {
+                clearTimeout(timer);
+                this.pending.delete(expectedId);
+                resolve(null);
+            }
+        });
+    }
+    alive() {
+        return this.child.exitCode === null && !this.child.killed;
+    }
+    async close() {
+        try {
+            this.child.stdin.end();
+        }
+        catch { /* ignore */ }
+        try {
+            this.child.kill("SIGTERM");
+        }
+        catch { /* ignore */ }
+        await new Promise((r) => setTimeout(r, 80));
+        try {
+            this.child.kill("SIGKILL");
+        }
+        catch { /* ignore */ }
+    }
+}
+/** Extract the JSON-RPC id from a payload step (object or raw string). */
+function payloadId(p) {
+    if (p.noResponse)
+        return null;
+    if (typeof p.send === "string") {
+        try {
+            const obj = JSON.parse(p.send);
+            return typeof obj.id === "number" || typeof obj.id === "string" ? obj.id : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    const o = p.send;
+    return typeof o.id === "number" || typeof o.id === "string" ? o.id : null;
+}
+/** Run a single vector against the live MCP client. */
+async function runVector(client, v) {
+    const t0 = Date.now();
+    const responses = [];
+    const perStepTimeout = v.timeoutMs ?? 5000;
+    for (const step of v.payload) {
+        const expectedId = payloadId(step);
+        const stepTimeout = step.timeoutMs ?? perStepTimeout;
+        const r = await client.sendAndWait(step.send, expectedId, stepTimeout);
+        responses.push(r);
+    }
+    let det;
+    try {
+        det = v.detector(responses);
+    }
+    catch (e) {
+        det = { verdict: "inconclusive", reason: `detector threw: ${e.message}` };
+    }
+    return {
+        vectorId: v.id,
+        category: v.category,
+        severity: v.severity,
+        verdict: det.verdict,
+        reason: det.reason,
+        detail: det.detail,
+        dtMs: Date.now() - t0,
+        // Cap raw response size in report card to avoid bloat.
+        responses: responses.map((r) => {
+            if (!r)
+                return r;
+            const s = canon(r);
+            if (s.length > 2000) {
+                return { id: r.id, ...(r.error ? { error: { code: r.error.code, message: r.error.message } } : {}), __truncated: true };
+            }
+            return r;
+        }),
+    };
+}
+/** Filter vectors by ids or categories. */
+function selectVectors(filter) {
+    if (!filter || filter.length === 0)
+        return VECTORS_108;
+    const ids = new Set(filter);
+    const cats = new Set(filter);
+    return VECTORS_108.filter((v) => ids.has(v.id) || cats.has(v.category));
+}
+/** Build the Intelligent Second Brain wisdom verdict over a run. */
+function buildWisdom(results) {
+    const failed = results.filter((r) => r.verdict === "fail");
+    const warned = results.filter((r) => r.verdict === "warn");
+    const critFailed = failed.filter((r) => r.severity === "critical");
+    // Headline + traffic light.
+    let headline;
+    let trafficLight;
+    if (critFailed.length > 0) {
+        headline = `❌ CRITICAL — ${critFailed.length} critical / ${failed.length} total failures across 108 vectors`;
+        trafficLight = "red";
+    }
+    else if (failed.length > 0) {
+        headline = `⚠ DEGRADED — ${failed.length} failures across 108 vectors (no critical)`;
+        trafficLight = "yellow";
+    }
+    else if (warned.length > 0) {
+        headline = `🟡 PASS-WITH-WARNINGS — 0 failures, ${warned.length} warnings`;
+        trafficLight = "yellow";
+    }
+    else {
+        headline = `✅ CLEAN — 108/108 vectors pass; spec-compliant + hardened`;
+        trafficLight = "green";
+    }
+    // Remediations.
+    const remediations = failed.slice(0, 20).map((r) => {
+        const v = VECTORS_108.find((vec) => vec.id === r.vectorId);
+        return {
+            vectorId: r.vectorId,
+            cve: v?.cve,
+            action: `${v?.title ?? r.vectorId}: ${v?.spec ?? "see vector spec"}`,
+        };
+    });
+    // CVE posture — for every CVE listed on any vector, was it caught by a pass?
+    const allCves = new Map();
+    for (const v of VECTORS_108) {
+        if (!v.cve)
+            continue;
+        const result = results.find((r) => r.vectorId === v.id);
+        for (const cve of v.cve) {
+            const cur = allCves.get(cve);
+            const mitigatedNow = result?.verdict === "pass";
+            if (!cur || (!cur.mitigated && mitigatedNow)) {
+                allCves.set(cve, { mitigated: mitigatedNow, via: v.id });
+            }
+        }
+    }
+    const cvePosture = [...allCves.entries()].map(([cve, m]) => ({ cve, mitigated: m.mitigated, via: m.via }));
+    // Mutation suggestions — for each failure propose a clear variant.
+    const mutations = failed.slice(0, 8).map((r) => ({
+        vectorId: r.vectorId,
+        variant: `mutate-${r.vectorId}-${(r.dtMs % 7) + 1}`,
+        rationale: `Failure shape: ${r.reason}. Next run: vary input size / depth / encoding.`,
+    }));
+    return {
+        headline,
+        trafficLight,
+        remediations,
+        cvePosture,
+        mutationsForNextRun: mutations,
+    };
+}
+/** Aggregate per-category / per-severity counts. */
+function summarize(results) {
+    const bySeverity = {};
+    const byCategory = {};
+    for (const sev of ["info", "low", "medium", "high", "critical"]) {
+        bySeverity[sev] = { pass: 0, fail: 0 };
+    }
+    for (const c of ["handshake", "schema", "method", "tool", "resource", "prompt", "policy", "concurrency", "transport"]) {
+        byCategory[c] = { pass: 0, fail: 0 };
+    }
+    let pass = 0, warn = 0, fail = 0, inconclusive = 0;
+    for (const r of results) {
+        if (r.verdict === "pass") {
+            pass++;
+            bySeverity[r.severity].pass++;
+            byCategory[r.category].pass++;
+        }
+        else if (r.verdict === "fail") {
+            fail++;
+            bySeverity[r.severity].fail++;
+            byCategory[r.category].fail++;
+        }
+        else if (r.verdict === "warn") {
+            warn++;
+        }
+        else {
+            inconclusive++;
+        }
+    }
+    return { total: results.length, pass, warn, fail, inconclusive, bySeverity, byCategory };
+}
+// ─── HMAC ledger (single-process) ────────────────────────────────────────
+let lastReportLink = "0".repeat(64);
+/** Reset the in-memory chain link (tests). */
+export function __resetFuzzChainForTest() {
+    lastReportLink = "0".repeat(64);
+}
+/**
+ * Main entry: spawn target MCP server, fire all (or filtered) vectors,
+ * build the report card, HMAC-chain it, return.
+ */
+export async function runFuzz(target, opts = {}) {
+    const startedAt = new Date().toISOString();
+    const t0 = Date.now();
+    const vectors = selectVectors(opts.filter);
+    const client = new StdioMcpClient(target);
+    // Initial wait — give the server a brief moment to start the transport.
+    // The boot-fast refactor (v2.24.0) makes this < 100ms in practice.
+    await new Promise((r) => setTimeout(r, 200));
+    const results = [];
+    for (const v of vectors) {
+        const r = await runVector(client, v);
+        results.push(r);
+        if (opts.failFast && r.verdict === "fail" && (r.severity === "critical" || r.severity === "high"))
+            break;
+    }
+    await client.close();
+    const finishedAt = new Date().toISOString();
+    const totalMs = Date.now() - t0;
+    const summary = summarize(results);
+    const wisdom = buildWisdom(results);
+    // Build canonical body (without hmac field), digest + chain.
+    const body = {
+        spec: { name: "MCP-FUZZER", version: "1.0" },
+        target: target.cwd,
+        startedAt,
+        finishedAt,
+        totalMs,
+        results,
+        summary,
+        wisdom,
+    };
+    const bodyCanon = canon(body);
+    const bodyDigest = sha256Hex(bodyCanon);
+    lastReportLink = hmacHex(bodyDigest, lastReportLink);
+    const seq = parseInt(lastReportLink.slice(0, 8), 16); // pseudo-sequence (not load-bearing)
+    const reportCard = {
+        ...body,
+        hmac: lastReportLink,
+        seq,
+        bodyDigest,
+    };
+    return { reportCard };
+}
+/** Verify a report card's HMAC against a known previous chain head. */
+export function verifyReport(card, expectedPrevChainLink = "0".repeat(64)) {
+    const { hmac, seq: _seq, bodyDigest, ...body } = card;
+    const bodyCanon = canon(body);
+    const recomputedDigest = sha256Hex(bodyCanon);
+    if (recomputedDigest !== bodyDigest)
+        return { ok: false, reason: "bodyDigest mismatch" };
+    const expectedHmac = hmacHex(recomputedDigest, expectedPrevChainLink);
+    if (expectedHmac !== hmac)
+        return { ok: false, reason: "hmac mismatch (wrong key OR wrong prev chain link)" };
+    return { ok: true };
+}
+/** Render a one-line headline + 5-line summary block for human terminal. */
+export function renderShort(card) {
+    const s = card.summary;
+    return [
+        card.wisdom.headline,
+        ``,
+        `Target:    ${card.target}`,
+        `Spec:      ${card.spec.name} v${card.spec.version}`,
+        `Duration:  ${(card.totalMs / 1000).toFixed(2)}s · ${card.results.length} vectors`,
+        `Verdict:   pass=${s.pass} warn=${s.warn} fail=${s.fail} inconclusive=${s.inconclusive}`,
+        `HMAC:      ${card.hmac.slice(0, 16)}…  (seq ${card.seq})`,
+        ``,
+        `Top failures:`,
+        ...card.wisdom.remediations.slice(0, 5).map((r) => `  ✗ ${r.vectorId} — ${r.action}${r.cve?.length ? `  [${r.cve.join(",")}]` : ""}`),
+    ];
+}
+//# sourceMappingURL=engine.js.map

package/dist/mcp_fuzzer/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/mcp_fuzzer/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,qBAAqB,CAAC;AAE5E,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACnH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY;IAC5C,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAmBD,MAAM,cAAc;IACV,KAAK,CAAiC;IACtC,GAAG,GAAG,EAAE,CAAC;IACT,OAAO,GAAoD,IAAI,GAAG,EAAE,CAAC;IACrE,SAAS,GAAY,EAAE,CAAC;IAChC,wEAAwE;IAChE,YAAY,GAAmB,EAAE,CAAC;IAE1C,YAAY,MAAmB;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,kDAAkD;YAClD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,2BAA2B,CAAC;YACxE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE;gBACrC,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;gBAC7F,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAmC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAI,CAAC,GAAG,EAAE,MAAM,CAAC,GAAI,CAAC,IAAI,EAAE;gBACpD,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;gBAC9C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAmC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,6DAA6D;QAC7D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAe,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA8C,CAAC,CAAC,CAAC;IAC/E,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC;QAClB,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,MAAM,GAAwB,IAAI,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAqB,CAAC;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAsB,EACtB,UAAkC,EAClC,SAAiB;QAEjB,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,qEAAqE;YACrE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACpC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;YACxD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAA6B,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAA6B,EAAE,CAAC,CAAC,EAAE,EAAE;gBACpD,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YAC5C,MAAM,CAAC;gBACL,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAA6B,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,CAAkD;IACnE,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAA6B,CAAC;YAC3D,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAgC,CAAC;IAC7C,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,uDAAuD;AACvD,KAAK,UAAU,SAAS,CAAC,MAAsB,EAAE,CAAe;IAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,MAAM,cAAc,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACvE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IACpC,OAAO,CAAC,EAAE,CAAC;QAAC,GAAG,GAAG,EAAE,OAAO,EAAE,cAAuB,EAAE,MAAM,EAAE,mBAAoB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAAC,CAAC;IAC5G,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,EAAE;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;QACrB,uDAAuD;QACvD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7B,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAkB,CAAC;YAC1I,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAS,aAAa,CAAC,MAAiB;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAoB,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,OAA0B;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACnE,4BAA4B;IAC5B,IAAI,QAAgB,CAAC;IACrB,IAAI,YAA2C,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,GAAG,gBAAgB,UAAU,CAAC,MAAM,eAAe,MAAM,CAAC,MAAM,oCAAoC,CAAC;QAC7G,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,GAAG,gBAAgB,MAAM,CAAC,MAAM,4CAA4C,CAAC;QACrF,YAAY,GAAG,QAAQ,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,GAAG,uCAAuC,MAAM,CAAC,MAAM,WAAW,CAAC;QAC3E,YAAY,GAAG,QAAQ,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,2DAA2D,CAAC;QACvE,YAAY,GAAG,OAAO,CAAC;IACzB,CAAC;IACD,gBAAgB;IAChB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,EAAE,CAAC,EAAE,GAAG;YACX,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,IAAI,IAAI,iBAAiB,EAAE;SACrE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,6EAA6E;IAC7E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,SAAS;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,YAAY,GAAG,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;YAChD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,YAAY,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3G,mEAAmE;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE;QACnD,SAAS,EAAE,kBAAkB,CAAC,CAAC,MAAM,iDAAiD;KACvF,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAS,SAAS,CAAC,OAA0B;IAC3C,MAAM,UAAU,GAAG,EAAsD,CAAC;IAC1E,MAAM,UAAU,GAAG,EAAsD,CAAC;IAC1E,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAe,EAAE,CAAC;QAC9E,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAe,EAAE,CAAC;QACpI,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,EAAE,CAAC;YACP,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC;YACP,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,CAAC;YACN,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC3F,CAAC;AAED,4EAA4E;AAE5E,IAAI,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpC,8CAA8C;AAC9C,MAAM,UAAU,uBAAuB;IACrC,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC;AAMD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAmB,EAAE,OAAmB,EAAE;IACtE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1C,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;YAAE,MAAM;IAC3G,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEpC,6DAA6D;IAC7D,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,EAAE,IAAI,EAAE,YAAqB,EAAE,OAAO,EAAE,KAAK,EAAE;QACrD,MAAM,EAAE,MAAM,CAAC,GAAG;QAClB,SAAS;QACT,UAAU;QACV,OAAO;QACP,OAAO;QACP,OAAO;QACP,MAAM;KACP,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACxC,cAAc,GAAG,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qCAAqC;IAE3F,MAAM,UAAU,GAAe;QAC7B,GAAG,IAAI;QACP,IAAI,EAAE,cAAc;QACpB,GAAG;QACH,UAAU;KACX,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,wBAAgC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAE9C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,gBAAgB,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,gBAAgB,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzF,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IACtE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IAC9G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvB,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,QAAQ;QACpB,EAAE;QACF,cAAc,IAAI,CAAC,MAAM,EAAE;QAC3B,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;QACpD,cAAc,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,UAAU;QAClF,mBAAmB,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,YAAY,EAAE;QACxF,cAAc,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,GAAG,GAAG;QAC1D,EAAE;QACF,eAAe;QACf,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KACtI,CAAC;AACJ,CAAC"}

package/dist/mcp_fuzzer/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * v2.24.0 — MCP fuzzer public surface.
+ */
+export * from "./types.js";
+export { VECTORS_108, VECTOR_COUNT } from "./vectors.js";
+export { runFuzz, verifyReport, renderShort, __resetFuzzChainForTest } from "./engine.js";
+export type { SpawnTarget, FuzzRunResult } from "./engine.js";
+export { storeReport, readLatestReport, listReports } from "./storage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp_fuzzer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp_fuzzer/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC1F,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/mcp_fuzzer/index.js

@@ -0,0 +1,8 @@
+/**
+ * v2.24.0 — MCP fuzzer public surface.
+ */
+export * from "./types.js";
+export { VECTORS_108, VECTOR_COUNT } from "./vectors.js";
+export { runFuzz, verifyReport, renderShort, __resetFuzzChainForTest } from "./engine.js";
+export { storeReport, readLatestReport, listReports } from "./storage.js";
+//# sourceMappingURL=index.js.map

package/dist/mcp_fuzzer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp_fuzzer/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE1F,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/mcp_fuzzer/mcp_fuzzer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp_fuzzer.test.d.ts.map

package/dist/mcp_fuzzer/mcp_fuzzer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp_fuzzer.test.d.ts","sourceRoot":"","sources":["../../src/mcp_fuzzer/mcp_fuzzer.test.ts"],"names":[],"mappings":""}

package/dist/mcp_fuzzer/mcp_fuzzer.test.js

@@ -0,0 +1,128 @@
+// v2.24.0 — MCP fuzzer unit tests.
+import { describe, it, expect } from "vitest";
+import { VECTORS_108, VECTOR_COUNT } from "./vectors.js";
+import { verifyReport, __resetFuzzChainForTest, renderShort } from "./engine.js";
+describe("MCP fuzzer — vector catalog", () => {
+    it("has exactly 108 vectors", () => {
+        expect(VECTOR_COUNT).toBe(108);
+        expect(VECTORS_108.length).toBe(108);
+    });
+    it("vector ids are unique", () => {
+        const ids = new Set(VECTORS_108.map((v) => v.id));
+        expect(ids.size).toBe(108);
+    });
+    it("each category has exactly 12 vectors", () => {
+        const cats = {};
+        for (const v of VECTORS_108)
+            cats[v.category] = (cats[v.category] ?? 0) + 1;
+        for (const c of ["handshake", "schema", "method", "tool", "resource", "prompt", "policy", "concurrency", "transport"]) {
+            expect(cats[c]).toBe(12);
+        }
+    });
+    it("each vector has a non-empty title + spec + detector", () => {
+        for (const v of VECTORS_108) {
+            expect(v.title.length).toBeGreaterThan(0);
+            expect(v.spec.length).toBeGreaterThan(0);
+            expect(typeof v.detector).toBe("function");
+            expect(Array.isArray(v.payload)).toBe(true);
+            expect(v.payload.length).toBeGreaterThan(0);
+        }
+    });
+    it("severity ladder is bounded", () => {
+        const allowed = new Set(["info", "low", "medium", "high", "critical"]);
+        for (const v of VECTORS_108)
+            expect(allowed.has(v.severity)).toBe(true);
+    });
+    it("CVE references are well-formed when present", () => {
+        for (const v of VECTORS_108) {
+            if (!v.cve)
+                continue;
+            for (const c of v.cve) {
+                expect(c).toMatch(/^CVE-\d{4}-\d+$/);
+            }
+        }
+    });
+    it("at least one vector cites each audit-finding class", () => {
+        // M1 initialize handshake
+        expect(VECTORS_108.find((v) => v.id === "vec-h01")).toBeDefined();
+        // M2 unknown-tool isError
+        expect(VECTORS_108.find((v) => v.id === "vec-t01")).toBeDefined();
+        // M3 honeypot gate
+        expect(VECTORS_108.find((v) => v.id === "vec-y01")).toBeDefined();
+        // M16 stderr — covered by engine; not a vector
+        // transport robustness
+        expect(VECTORS_108.find((v) => v.id === "vec-x01")).toBeDefined();
+    });
+});
+describe("MCP fuzzer — HMAC chain", () => {
+    function fakeCard(seq, hmac, bodyDigest) {
+        return {
+            spec: { name: "MCP-FUZZER", version: "1.0" },
+            target: "tmp",
+            startedAt: "2026-05-22T00:00:00.000Z",
+            finishedAt: "2026-05-22T00:00:01.000Z",
+            totalMs: 1000,
+            results: [],
+            summary: {
+                total: 0, pass: 0, warn: 0, fail: 0, inconclusive: 0,
+                bySeverity: {
+                    info: { pass: 0, fail: 0 }, low: { pass: 0, fail: 0 },
+                    medium: { pass: 0, fail: 0 }, high: { pass: 0, fail: 0 }, critical: { pass: 0, fail: 0 },
+                },
+                byCategory: {
+                    handshake: { pass: 0, fail: 0 }, schema: { pass: 0, fail: 0 }, method: { pass: 0, fail: 0 },
+                    tool: { pass: 0, fail: 0 }, resource: { pass: 0, fail: 0 }, prompt: { pass: 0, fail: 0 },
+                    policy: { pass: 0, fail: 0 }, concurrency: { pass: 0, fail: 0 }, transport: { pass: 0, fail: 0 },
+                },
+            },
+            wisdom: { headline: "test", trafficLight: "green", remediations: [], cvePosture: [], mutationsForNextRun: [] },
+            hmac,
+            seq,
+            bodyDigest,
+        };
+    }
+    it("verifyReport detects tampered bodyDigest", () => {
+        __resetFuzzChainForTest();
+        const card = fakeCard(1, "abcd", "deadbeef");
+        // Force a wrong digest
+        const v = verifyReport(card, "0".repeat(64));
+        expect(v.ok).toBe(false);
+    });
+});
+describe("MCP fuzzer — renderShort", () => {
+    function blankCard() {
+        return {
+            spec: { name: "MCP-FUZZER", version: "1.0" },
+            target: "tmp",
+            startedAt: "2026-05-22T00:00:00.000Z",
+            finishedAt: "2026-05-22T00:00:01.000Z",
+            totalMs: 1234,
+            results: [],
+            summary: {
+                total: 108, pass: 105, warn: 3, fail: 0, inconclusive: 0,
+                bySeverity: {
+                    info: { pass: 0, fail: 0 }, low: { pass: 0, fail: 0 },
+                    medium: { pass: 0, fail: 0 }, high: { pass: 0, fail: 0 }, critical: { pass: 0, fail: 0 },
+                },
+                byCategory: {
+                    handshake: { pass: 12, fail: 0 }, schema: { pass: 12, fail: 0 }, method: { pass: 12, fail: 0 },
+                    tool: { pass: 12, fail: 0 }, resource: { pass: 12, fail: 0 }, prompt: { pass: 12, fail: 0 },
+                    policy: { pass: 12, fail: 0 }, concurrency: { pass: 12, fail: 0 }, transport: { pass: 12, fail: 0 },
+                },
+            },
+            wisdom: { headline: "✅ CLEAN", trafficLight: "green", remediations: [], cvePosture: [], mutationsForNextRun: [] },
+            hmac: "feedface".repeat(8),
+            seq: 1,
+            bodyDigest: "deadbeef".repeat(8),
+        };
+    }
+    it("renders a single-line headline + summary block", () => {
+        const lines = renderShort(blankCard());
+        expect(lines[0]).toContain("CLEAN");
+        const text = lines.join("\n");
+        expect(text).toContain("pass=105");
+        expect(text).toContain("fail=0");
+        expect(text).toContain("MCP-FUZZER");
+    });
+});
+//# sourceMappingURL=mcp_fuzzer.test.js.map

package/dist/mcp_fuzzer/mcp_fuzzer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp_fuzzer.test.js","sourceRoot":"","sources":["../../src/mcp_fuzzer/mcp_fuzzer.test.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGjF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;YACtH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,SAAS;YACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,0BAA0B;QAC1B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,0BAA0B;QAC1B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,mBAAmB;QACnB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,+CAA+C;QAC/C,uBAAuB;QACvB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAY,EAAE,UAAkB;QAC7D,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5C,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,0BAA0B;YACrC,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE;YACX,OAAO,EAAE;gBACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;gBACpD,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;oBACrD,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;iBACzF;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC3F,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;oBACxF,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;iBACjG;aACF;YACD,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;YAC9G,IAAI;YACJ,GAAG;YACH,UAAU;SACX,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,uBAAuB,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7C,uBAAuB;QACvB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,SAAS,SAAS;QAChB,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5C,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,0BAA0B;YACrC,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE;YACX,OAAO,EAAE;gBACP,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;gBACxD,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;oBACrD,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;iBACzF;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9F,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC3F,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;iBACpG;aACF;YACD,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;YACjH,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1B,GAAG,EAAE,CAAC;YACN,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp_fuzzer/storage.d.ts

@@ -0,0 +1,27 @@
+/**
+ * v2.24.0 — Persist HMAC-chained MCP fuzz report cards.
+ *
+ * Cards land at `.mneme/mcp_fuzzer/<seq>-<utc>.json` AND get appended to
+ * an append-only ledger `.mneme/mcp_fuzzer/ledger.jsonl` (one line per
+ * card with hmac + bodyDigest only — fast skim).
+ */
+import type { ReportCard } from "./types.js";
+export declare function storeReport(repoRoot: string, card: ReportCard): {
+    path: string;
+    ledger: string;
+};
+export declare function readLatestReport(repoRoot: string): ReportCard | null;
+export interface LedgerEntry {
+    seq: number;
+    finishedAt: string;
+    pass: number;
+    fail: number;
+    warn: number;
+    trafficLight: "green" | "yellow" | "red" | "black";
+    headline: string;
+    hmac: string;
+    bodyDigest: string;
+    file: string;
+}
+export declare function listReports(repoRoot: string, limit?: number): LedgerEntry[];
+//# sourceMappingURL=storage.d.ts.map

package/dist/mcp_fuzzer/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/mcp_fuzzer/storage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBhG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAWpE;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,WAAW,EAAE,CASvE"}