@ninelives/agent-governance-sdk 5.0.1

package/dist/index.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerSandboxProvider = exports.defaultSandboxConfig = exports.ExecutionStatus = exports.SessionStatus = exports.OciManifestAdapter = exports.ContextPoisoningDetector = exports.CascadeContainmentManager = exports.SurfaceParityChecker = exports.GovernanceVerifier = exports.RingBreachError = exports.RingEnforcer = exports.DENY_REASON = exports.PLACEHOLDER_RE = exports.auditDigest = exports.DenyReceipt = exports.CredentialError = exports.CredentialProfile = exports.CredentialHandle = exports.CredentialInjector = exports.CredentialVault = exports.PromptDefenseEvaluator = exports.OPABackend = exports.CedarBackend = exports.ShadowDiscovery = exports.LifecycleState = exports.LifecycleManager = exports.McpThreatType = exports.McpSecurityScanner = exports.TraceCapture = exports.SLOTracker = exports.GovernanceMetrics = exports.ErrorBudgetTracker = exports.CircuitBreaker = exports.KillSwitch = exports.FrameworkInvocationHandle = exports.GenericFrameworkAdapter = exports.AgentMeshClient = exports.AuditLogger = exports.extractK8sFacets = exports.extractSqlFacets = exports.extractProtocolFacets = exports.defaultRegistry = exports.FacetRegistry = exports.PolicyConflictResolver = exports.PolicyEngine = exports.TrustManager = exports.safeBase64Decode = exports.stripKeyPrefix = exports.IdentityRegistry = exports.AgentIdentity = void 0;
+exports.PolicyScope = exports.ExecutionRing = exports.ConflictResolutionStrategy = exports.RegistryError = exports.RegistryClient = exports.MeshClient = exports.SecureChannel = exports.DoubleRatchet = exports.ed25519ToX25519 = exports.generateX25519KeyPair = exports.X3DHKeyManager = void 0;
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+var identity_1 = require("./identity");
+Object.defineProperty(exports, "AgentIdentity", { enumerable: true, get: function () { return identity_1.AgentIdentity; } });
+Object.defineProperty(exports, "IdentityRegistry", { enumerable: true, get: function () { return identity_1.IdentityRegistry; } });
+Object.defineProperty(exports, "stripKeyPrefix", { enumerable: true, get: function () { return identity_1.stripKeyPrefix; } });
+Object.defineProperty(exports, "safeBase64Decode", { enumerable: true, get: function () { return identity_1.safeBase64Decode; } });
+var trust_1 = require("./trust");
+Object.defineProperty(exports, "TrustManager", { enumerable: true, get: function () { return trust_1.TrustManager; } });
+var policy_1 = require("./policy");
+Object.defineProperty(exports, "PolicyEngine", { enumerable: true, get: function () { return policy_1.PolicyEngine; } });
+Object.defineProperty(exports, "PolicyConflictResolver", { enumerable: true, get: function () { return policy_1.PolicyConflictResolver; } });
+var protocol_facets_1 = require("./protocol-facets");
+Object.defineProperty(exports, "FacetRegistry", { enumerable: true, get: function () { return protocol_facets_1.FacetRegistry; } });
+Object.defineProperty(exports, "defaultRegistry", { enumerable: true, get: function () { return protocol_facets_1.defaultRegistry; } });
+Object.defineProperty(exports, "extractProtocolFacets", { enumerable: true, get: function () { return protocol_facets_1.extractProtocolFacets; } });
+Object.defineProperty(exports, "extractSqlFacets", { enumerable: true, get: function () { return protocol_facets_1.extractSqlFacets; } });
+Object.defineProperty(exports, "extractK8sFacets", { enumerable: true, get: function () { return protocol_facets_1.extractK8sFacets; } });
+var audit_1 = require("./audit");
+Object.defineProperty(exports, "AuditLogger", { enumerable: true, get: function () { return audit_1.AuditLogger; } });
+var client_1 = require("./client");
+Object.defineProperty(exports, "AgentMeshClient", { enumerable: true, get: function () { return client_1.AgentMeshClient; } });
+var framework_adapter_1 = require("./framework-adapter");
+Object.defineProperty(exports, "GenericFrameworkAdapter", { enumerable: true, get: function () { return framework_adapter_1.GenericFrameworkAdapter; } });
+Object.defineProperty(exports, "FrameworkInvocationHandle", { enumerable: true, get: function () { return framework_adapter_1.FrameworkInvocationHandle; } });
+var kill_switch_1 = require("./kill-switch");
+Object.defineProperty(exports, "KillSwitch", { enumerable: true, get: function () { return kill_switch_1.KillSwitch; } });
+var metrics_1 = require("./metrics");
+Object.defineProperty(exports, "CircuitBreaker", { enumerable: true, get: function () { return metrics_1.CircuitBreaker; } });
+Object.defineProperty(exports, "ErrorBudgetTracker", { enumerable: true, get: function () { return metrics_1.ErrorBudgetTracker; } });
+Object.defineProperty(exports, "GovernanceMetrics", { enumerable: true, get: function () { return metrics_1.GovernanceMetrics; } });
+Object.defineProperty(exports, "SLOTracker", { enumerable: true, get: function () { return metrics_1.SLOTracker; } });
+Object.defineProperty(exports, "TraceCapture", { enumerable: true, get: function () { return metrics_1.TraceCapture; } });
+var mcp_1 = require("./mcp");
+Object.defineProperty(exports, "McpSecurityScanner", { enumerable: true, get: function () { return mcp_1.McpSecurityScanner; } });
+Object.defineProperty(exports, "McpThreatType", { enumerable: true, get: function () { return mcp_1.McpThreatType; } });
+var lifecycle_1 = require("./lifecycle");
+Object.defineProperty(exports, "LifecycleManager", { enumerable: true, get: function () { return lifecycle_1.LifecycleManager; } });
+Object.defineProperty(exports, "LifecycleState", { enumerable: true, get: function () { return lifecycle_1.LifecycleState; } });
+var discovery_1 = require("./discovery");
+Object.defineProperty(exports, "ShadowDiscovery", { enumerable: true, get: function () { return discovery_1.ShadowDiscovery; } });
+var cedar_1 = require("./policy-backends/cedar");
+Object.defineProperty(exports, "CedarBackend", { enumerable: true, get: function () { return cedar_1.CedarBackend; } });
+var opa_1 = require("./policy-backends/opa");
+Object.defineProperty(exports, "OPABackend", { enumerable: true, get: function () { return opa_1.OPABackend; } });
+var prompt_defense_1 = require("./prompt-defense");
+Object.defineProperty(exports, "PromptDefenseEvaluator", { enumerable: true, get: function () { return prompt_defense_1.PromptDefenseEvaluator; } });
+// Credential Vault & Injection (issue #2535 / #2481)
+var credential_vault_1 = require("./credential-vault");
+Object.defineProperty(exports, "CredentialVault", { enumerable: true, get: function () { return credential_vault_1.CredentialVault; } });
+Object.defineProperty(exports, "CredentialInjector", { enumerable: true, get: function () { return credential_vault_1.CredentialInjector; } });
+Object.defineProperty(exports, "CredentialHandle", { enumerable: true, get: function () { return credential_vault_1.CredentialHandle; } });
+Object.defineProperty(exports, "CredentialProfile", { enumerable: true, get: function () { return credential_vault_1.CredentialProfile; } });
+Object.defineProperty(exports, "CredentialError", { enumerable: true, get: function () { return credential_vault_1.CredentialError; } });
+Object.defineProperty(exports, "DenyReceipt", { enumerable: true, get: function () { return credential_vault_1.DenyReceipt; } });
+Object.defineProperty(exports, "auditDigest", { enumerable: true, get: function () { return credential_vault_1.auditDigest; } });
+Object.defineProperty(exports, "PLACEHOLDER_RE", { enumerable: true, get: function () { return credential_vault_1.PLACEHOLDER_RE; } });
+Object.defineProperty(exports, "DENY_REASON", { enumerable: true, get: function () { return credential_vault_1.DENY_REASON; } });
+var rings_1 = require("./rings");
+Object.defineProperty(exports, "RingEnforcer", { enumerable: true, get: function () { return rings_1.RingEnforcer; } });
+Object.defineProperty(exports, "RingBreachError", { enumerable: true, get: function () { return rings_1.RingBreachError; } });
+var verify_1 = require("./verify");
+Object.defineProperty(exports, "GovernanceVerifier", { enumerable: true, get: function () { return verify_1.GovernanceVerifier; } });
+var surface_parity_1 = require("./surface-parity");
+Object.defineProperty(exports, "SurfaceParityChecker", { enumerable: true, get: function () { return surface_parity_1.SurfaceParityChecker; } });
+var cascade_containment_1 = require("./cascade-containment");
+Object.defineProperty(exports, "CascadeContainmentManager", { enumerable: true, get: function () { return cascade_containment_1.CascadeContainmentManager; } });
+var context_poisoning_1 = require("./context-poisoning");
+Object.defineProperty(exports, "ContextPoisoningDetector", { enumerable: true, get: function () { return context_poisoning_1.ContextPoisoningDetector; } });
+var oci_manifest_1 = require("./oci-manifest");
+Object.defineProperty(exports, "OciManifestAdapter", { enumerable: true, get: function () { return oci_manifest_1.OciManifestAdapter; } });
+var sandbox_1 = require("./sandbox");
+Object.defineProperty(exports, "SessionStatus", { enumerable: true, get: function () { return sandbox_1.SessionStatus; } });
+Object.defineProperty(exports, "ExecutionStatus", { enumerable: true, get: function () { return sandbox_1.ExecutionStatus; } });
+Object.defineProperty(exports, "defaultSandboxConfig", { enumerable: true, get: function () { return sandbox_1.defaultSandboxConfig; } });
+Object.defineProperty(exports, "DockerSandboxProvider", { enumerable: true, get: function () { return sandbox_1.DockerSandboxProvider; } });
+// E2E Encryption (AgentMesh Wire Protocol v1.0)
+var encryption_1 = require("./encryption");
+Object.defineProperty(exports, "X3DHKeyManager", { enumerable: true, get: function () { return encryption_1.X3DHKeyManager; } });
+Object.defineProperty(exports, "generateX25519KeyPair", { enumerable: true, get: function () { return encryption_1.generateX25519KeyPair; } });
+Object.defineProperty(exports, "ed25519ToX25519", { enumerable: true, get: function () { return encryption_1.ed25519ToX25519; } });
+Object.defineProperty(exports, "DoubleRatchet", { enumerable: true, get: function () { return encryption_1.DoubleRatchet; } });
+Object.defineProperty(exports, "SecureChannel", { enumerable: true, get: function () { return encryption_1.SecureChannel; } });
+Object.defineProperty(exports, "MeshClient", { enumerable: true, get: function () { return encryption_1.MeshClient; } });
+Object.defineProperty(exports, "RegistryClient", { enumerable: true, get: function () { return encryption_1.RegistryClient; } });
+Object.defineProperty(exports, "RegistryError", { enumerable: true, get: function () { return encryption_1.RegistryError; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "ConflictResolutionStrategy", { enumerable: true, get: function () { return types_1.ConflictResolutionStrategy; } });
+Object.defineProperty(exports, "ExecutionRing", { enumerable: true, get: function () { return types_1.ExecutionRing; } });
+Object.defineProperty(exports, "PolicyScope", { enumerable: true, get: function () { return types_1.PolicyScope; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,uCAAuC;AACvC,kCAAkC;AAClC,uCAA+F;AAAtF,yGAAA,aAAa,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAC1E,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AACrB,mCAAgE;AAAvD,sGAAA,YAAY,OAAA;AAAE,gHAAA,sBAAsB,OAAA;AAE7C,qDAM2B;AALzB,gHAAA,aAAa,OAAA;AACb,kHAAA,eAAe,OAAA;AACf,wHAAA,qBAAqB,OAAA;AACrB,mHAAA,gBAAgB,OAAA;AAChB,mHAAA,gBAAgB,OAAA;AAGlB,iCAAsC;AAA7B,oGAAA,WAAW,OAAA;AACpB,mCAA2C;AAAlC,yGAAA,eAAe,OAAA;AACxB,yDAAyF;AAAhF,4HAAA,uBAAuB,OAAA;AAAE,8HAAA,yBAAyB,OAAA;AAC3D,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qCAMmB;AALjB,yGAAA,cAAc,OAAA;AACd,6GAAA,kBAAkB,OAAA;AAClB,4GAAA,iBAAiB,OAAA;AACjB,qGAAA,UAAU,OAAA;AACV,uGAAA,YAAY,OAAA;AAEd,6BAA0D;AAAjD,yGAAA,kBAAkB,OAAA;AAAE,oGAAA,aAAa,OAAA;AAE1C,yCAA+D;AAAtD,6GAAA,gBAAgB,OAAA;AAAE,2GAAA,cAAc,OAAA;AAEzC,yCAA8C;AAArC,4GAAA,eAAe,OAAA;AACxB,iDAAuD;AAA9C,qGAAA,YAAY,OAAA;AACrB,6CAAmD;AAA1C,iGAAA,UAAU,OAAA;AACnB,mDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,qDAAqD;AACrD,uDAU4B;AAT1B,mHAAA,eAAe,OAAA;AACf,sHAAA,kBAAkB,OAAA;AAClB,oHAAA,gBAAgB,OAAA;AAChB,qHAAA,iBAAiB,OAAA;AACjB,mHAAA,eAAe,OAAA;AACf,+GAAA,WAAW,OAAA;AACX,+GAAA,WAAW,OAAA;AACX,kHAAA,cAAc,OAAA;AACd,+GAAA,WAAW,OAAA;AAab,iCAAwD;AAA/C,qGAAA,YAAY,OAAA;AAAE,wGAAA,eAAe,OAAA;AACtC,mCAA8C;AAArC,4GAAA,kBAAkB,OAAA;AAC3B,mDAAwD;AAA/C,sHAAA,oBAAoB,OAAA;AAC7B,6DAAkE;AAAzD,gIAAA,yBAAyB,OAAA;AAClC,yDAA+D;AAAtD,6HAAA,wBAAwB,OAAA;AACjC,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAC3B,qCAKmB;AAJjB,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,+GAAA,oBAAoB,OAAA;AACpB,gHAAA,qBAAqB,OAAA;AAUvB,gDAAgD;AAChD,2CAOsB;AANpB,4GAAA,cAAc,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAAE,6GAAA,eAAe,OAAA;AACtD,2GAAA,aAAa,OAAA;AACb,2GAAA,aAAa,OAAA;AACb,wGAAA,UAAU,OAAA;AACV,4GAAA,cAAc,OAAA;AACd,2GAAA,aAAa,OAAA;AAUf,iCAIiB;AAHf,mHAAA,0BAA0B,OAAA;AAC1B,sGAAA,aAAa,OAAA;AACb,oGAAA,WAAW,OAAA"}

package/dist/kill-switch.d.ts

@@ -0,0 +1,22 @@
+import { KillSwitchConfig, KillSwitchResult } from './types';
+export interface KillContext {
+    action?: string;
+    reason: string;
+}
+type KillHandler = (agentId: string, context: KillContext) => void | Promise<void>;
+export declare class KillSwitch {
+    private readonly enabled;
+    private readonly defaultSubstituteAgentId?;
+    private readonly handlers;
+    private readonly compensations;
+    private readonly substitutes;
+    private readonly history;
+    constructor(config?: KillSwitchConfig);
+    registerHandler(agentId: string, handler: KillHandler): void;
+    registerCompensation(agentId: string, handler: KillHandler): void;
+    registerSubstitute(agentId: string, substituteAgentId: string): void;
+    getHistory(): KillSwitchResult[];
+    kill(agentId: string, context: KillContext): Promise<KillSwitchResult>;
+}
+export {};
+//# sourceMappingURL=kill-switch.d.ts.map

package/dist/kill-switch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.d.ts","sourceRoot":"","sources":["../src/kill-switch.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnF,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAS;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAEtC,MAAM,GAAE,gBAAqB;IAKzC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI;IAM5D,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI;IAMjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,IAAI;IAIpE,UAAU,IAAI,gBAAgB,EAAE;IAI1B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA8B7E"}

package/dist/kill-switch.js

@@ -0,0 +1,60 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KillSwitch = void 0;
+class KillSwitch {
+    enabled;
+    defaultSubstituteAgentId;
+    handlers = new Map();
+    compensations = new Map();
+    substitutes = new Map();
+    history = [];
+    constructor(config = {}) {
+        this.enabled = config.enabled ?? true;
+        this.defaultSubstituteAgentId = config.defaultSubstituteAgentId;
+    }
+    registerHandler(agentId, handler) {
+        const existing = this.handlers.get(agentId) ?? [];
+        existing.push(handler);
+        this.handlers.set(agentId, existing);
+    }
+    registerCompensation(agentId, handler) {
+        const existing = this.compensations.get(agentId) ?? [];
+        existing.push(handler);
+        this.compensations.set(agentId, existing);
+    }
+    registerSubstitute(agentId, substituteAgentId) {
+        this.substitutes.set(agentId, substituteAgentId);
+    }
+    getHistory() {
+        return [...this.history];
+    }
+    async kill(agentId, context) {
+        if (!this.enabled) {
+            throw new Error('Kill switch is disabled');
+        }
+        const handlers = this.handlers.get(agentId) ?? [];
+        const compensations = this.compensations.get(agentId) ?? [];
+        for (const handler of handlers) {
+            await handler(agentId, context);
+        }
+        for (const compensation of compensations) {
+            await compensation(agentId, context);
+        }
+        const handoffAgentId = this.substitutes.get(agentId) ?? this.defaultSubstituteAgentId;
+        const result = {
+            agentId,
+            action: context.action,
+            reason: context.reason,
+            killedAt: new Date().toISOString(),
+            callbacksExecuted: handlers.length,
+            compensationsExecuted: compensations.length,
+            handoffAgentId,
+        };
+        this.history.push(result);
+        return result;
+    }
+}
+exports.KillSwitch = KillSwitch;
+//# sourceMappingURL=kill-switch.js.map

package/dist/kill-switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../src/kill-switch.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAWlC,MAAa,UAAU;IACJ,OAAO,CAAU;IACjB,wBAAwB,CAAU;IAClC,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC5C,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO,GAAuB,EAAE,CAAC;IAElD,YAAY,SAA2B,EAAE;QACvC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,wBAAwB,GAAG,MAAM,CAAC,wBAAwB,CAAC;IAClE,CAAC;IAED,eAAe,CAAC,OAAe,EAAE,OAAoB;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,oBAAoB,CAAC,OAAe,EAAE,OAAoB;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,kBAAkB,CAAC,OAAe,EAAE,iBAAyB;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnD,CAAC;IAED,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAoB;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAE5D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,wBAAwB,CAAC;QACtF,MAAM,MAAM,GAAqB;YAC/B,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,iBAAiB,EAAE,QAAQ,CAAC,MAAM;YAClC,qBAAqB,EAAE,aAAa,CAAC,MAAM;YAC3C,cAAc;SACf,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA/DD,gCA+DC"}

package/dist/lifecycle.d.ts

@@ -0,0 +1,50 @@
+/** Valid lifecycle states for a managed agent. */
+export declare enum LifecycleState {
+    Provisioning = "provisioning",
+    Active = "active",
+    Suspended = "suspended",
+    Rotating = "rotating",
+    Degraded = "degraded",
+    Quarantined = "quarantined",
+    Decommissioning = "decommissioning",
+    Decommissioned = "decommissioned"
+}
+/** A recorded lifecycle transition event. */
+export interface LifecycleEvent {
+    agent_id: string;
+    from_state: LifecycleState;
+    to_state: LifecycleState;
+    reason: string;
+    timestamp: string;
+    initiated_by: string;
+}
+/**
+ * Manages the lifecycle of a single agent, enforcing valid state transitions
+ * and maintaining an ordered event log.
+ */
+export declare class LifecycleManager {
+    private _state;
+    private readonly _events;
+    private readonly _agentId;
+    constructor(agentId: string);
+    /** Current lifecycle state. */
+    get state(): LifecycleState;
+    /** Ordered list of recorded lifecycle events. */
+    get events(): LifecycleEvent[];
+    /**
+     * Transition to `toState`. Throws if the transition is not allowed from
+     * the current state.
+     */
+    transition(toState: LifecycleState, reason: string, initiatedBy: string): LifecycleEvent;
+    /** Check whether a transition to `toState` is valid from the current state. */
+    canTransition(toState: LifecycleState): boolean;
+    /** Activate the agent (from provisioning, suspended, rotating, degraded, or quarantined). */
+    activate(reason?: string): LifecycleEvent;
+    /** Suspend the agent. */
+    suspend(reason: string): LifecycleEvent;
+    /** Quarantine the agent due to a security or trust issue. */
+    quarantine(reason: string): LifecycleEvent;
+    /** Begin decommissioning the agent. */
+    decommission(reason: string): LifecycleEvent;
+}
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":"AAOA,kDAAkD;AAClD,oBAAY,cAAc;IACxB,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAiCD;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA+C;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,OAAO,EAAE,MAAM;IAI3B,+BAA+B;IAC/B,IAAI,KAAK,IAAI,cAAc,CAE1B;IAED,iDAAiD;IACjD,IAAI,MAAM,IAAI,cAAc,EAAE,CAE7B;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc;IAqBxF,+EAA+E;IAC/E,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAM/C,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,GAAE,MAA0B,GAAG,cAAc;IAI5D,yBAAyB;IACzB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAIvC,6DAA6D;IAC7D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAI1C,uCAAuC;IACvC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;CAG7C"}

package/dist/lifecycle.js

@@ -0,0 +1,113 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LifecycleManager = exports.LifecycleState = void 0;
+// ── Agent Lifecycle Manager ──
+// State-machine that governs an agent's lifecycle from provisioning to
+// decommission, enforcing valid transitions and recording an event log.
+/** Valid lifecycle states for a managed agent. */
+var LifecycleState;
+(function (LifecycleState) {
+    LifecycleState["Provisioning"] = "provisioning";
+    LifecycleState["Active"] = "active";
+    LifecycleState["Suspended"] = "suspended";
+    LifecycleState["Rotating"] = "rotating";
+    LifecycleState["Degraded"] = "degraded";
+    LifecycleState["Quarantined"] = "quarantined";
+    LifecycleState["Decommissioning"] = "decommissioning";
+    LifecycleState["Decommissioned"] = "decommissioned";
+})(LifecycleState || (exports.LifecycleState = LifecycleState = {}));
+/** Allowed transitions keyed by current state. */
+const VALID_TRANSITIONS = {
+    [LifecycleState.Provisioning]: [LifecycleState.Active],
+    [LifecycleState.Active]: [
+        LifecycleState.Suspended,
+        LifecycleState.Rotating,
+        LifecycleState.Degraded,
+        LifecycleState.Quarantined,
+        LifecycleState.Decommissioning,
+    ],
+    [LifecycleState.Suspended]: [
+        LifecycleState.Active,
+        LifecycleState.Decommissioning,
+    ],
+    [LifecycleState.Rotating]: [
+        LifecycleState.Active,
+        LifecycleState.Degraded,
+    ],
+    [LifecycleState.Degraded]: [
+        LifecycleState.Active,
+        LifecycleState.Quarantined,
+        LifecycleState.Decommissioning,
+    ],
+    [LifecycleState.Quarantined]: [
+        LifecycleState.Active,
+        LifecycleState.Decommissioning,
+    ],
+    [LifecycleState.Decommissioning]: [LifecycleState.Decommissioned],
+    [LifecycleState.Decommissioned]: [],
+};
+/**
+ * Manages the lifecycle of a single agent, enforcing valid state transitions
+ * and maintaining an ordered event log.
+ */
+class LifecycleManager {
+    _state = LifecycleState.Provisioning;
+    _events = [];
+    _agentId;
+    constructor(agentId) {
+        this._agentId = agentId;
+    }
+    /** Current lifecycle state. */
+    get state() {
+        return this._state;
+    }
+    /** Ordered list of recorded lifecycle events. */
+    get events() {
+        return [...this._events];
+    }
+    /**
+     * Transition to `toState`. Throws if the transition is not allowed from
+     * the current state.
+     */
+    transition(toState, reason, initiatedBy) {
+        if (!this.canTransition(toState)) {
+            throw new Error(`Invalid lifecycle transition: ${this._state} → ${toState}`);
+        }
+        const event = {
+            agent_id: this._agentId,
+            from_state: this._state,
+            to_state: toState,
+            reason,
+            timestamp: new Date().toISOString(),
+            initiated_by: initiatedBy,
+        };
+        this._state = toState;
+        this._events.push(event);
+        return event;
+    }
+    /** Check whether a transition to `toState` is valid from the current state. */
+    canTransition(toState) {
+        return VALID_TRANSITIONS[this._state].includes(toState);
+    }
+    // ── Convenience methods ──
+    /** Activate the agent (from provisioning, suspended, rotating, degraded, or quarantined). */
+    activate(reason = 'Agent activated') {
+        return this.transition(LifecycleState.Active, reason, 'system');
+    }
+    /** Suspend the agent. */
+    suspend(reason) {
+        return this.transition(LifecycleState.Suspended, reason, 'system');
+    }
+    /** Quarantine the agent due to a security or trust issue. */
+    quarantine(reason) {
+        return this.transition(LifecycleState.Quarantined, reason, 'system');
+    }
+    /** Begin decommissioning the agent. */
+    decommission(reason) {
+        return this.transition(LifecycleState.Decommissioning, reason, 'system');
+    }
+}
+exports.LifecycleManager = LifecycleManager;
+//# sourceMappingURL=lifecycle.js.map

package/dist/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,gCAAgC;AAChC,uEAAuE;AACvE,wEAAwE;AAExE,kDAAkD;AAClD,IAAY,cASX;AATD,WAAY,cAAc;IACxB,+CAA6B,CAAA;IAC7B,mCAAiB,CAAA;IACjB,yCAAuB,CAAA;IACvB,uCAAqB,CAAA;IACrB,uCAAqB,CAAA;IACrB,6CAA2B,CAAA;IAC3B,qDAAmC,CAAA;IACnC,mDAAiC,CAAA;AACnC,CAAC,EATW,cAAc,8BAAd,cAAc,QASzB;AAYD,kDAAkD;AAClD,MAAM,iBAAiB,GAA6C;IAClE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;IACtD,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;QACvB,cAAc,CAAC,SAAS;QACxB,cAAc,CAAC,QAAQ;QACvB,cAAc,CAAC,QAAQ;QACvB,cAAc,CAAC,WAAW;QAC1B,cAAc,CAAC,eAAe;KAC/B;IACD,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE;QAC1B,cAAc,CAAC,MAAM;QACrB,cAAc,CAAC,eAAe;KAC/B;IACD,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,cAAc,CAAC,MAAM;QACrB,cAAc,CAAC,QAAQ;KACxB;IACD,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE;QACzB,cAAc,CAAC,MAAM;QACrB,cAAc,CAAC,WAAW;QAC1B,cAAc,CAAC,eAAe;KAC/B;IACD,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE;QAC5B,cAAc,CAAC,MAAM;QACrB,cAAc,CAAC,eAAe;KAC/B;IACD,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC;IACjE,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,EAAE;CACpC,CAAC;AAEF;;;GAGG;AACH,MAAa,gBAAgB;IACnB,MAAM,GAAmB,cAAc,CAAC,YAAY,CAAC;IAC5C,OAAO,GAAqB,EAAE,CAAC;IAC/B,QAAQ,CAAS;IAElC,YAAY,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,+BAA+B;IAC/B,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,OAAuB,EAAE,MAAc,EAAE,WAAmB;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,MAAM,MAAM,OAAO,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAmB;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,WAAW;SAC1B,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,aAAa,CAAC,OAAuB;QACnC,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,4BAA4B;IAE5B,6FAA6F;IAC7F,QAAQ,CAAC,SAAiB,iBAAiB;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,yBAAyB;IACzB,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;IAED,6DAA6D;IAC7D,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,uCAAuC;IACvC,YAAY,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;CACF;AAtED,4CAsEC"}

package/dist/mcp.d.ts

@@ -0,0 +1,41 @@
+/** Threat categories recognised by the scanner. */
+export declare enum McpThreatType {
+    ToolPoisoning = "tool_poisoning",
+    Typosquatting = "typosquatting",
+    HiddenInstruction = "hidden_instruction",
+    RugPull = "rug_pull"
+}
+/** A single threat detected during a scan. */
+export interface McpThreat {
+    type: McpThreatType;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    description: string;
+    evidence?: string;
+}
+/** Result of scanning one MCP tool definition. */
+export interface McpScanResult {
+    tool_name: string;
+    threats: McpThreat[];
+    risk_score: number;
+    safe: boolean;
+}
+/** Minimal MCP tool definition accepted by the scanner. */
+export interface McpToolDefinition {
+    name: string;
+    description: string;
+    parameters?: Record<string, unknown>;
+}
+/**
+ * Scans MCP tool definitions for security threats.
+ */
+export declare class McpSecurityScanner {
+    /** Scan a single tool definition. */
+    scan(toolDefinition: McpToolDefinition): McpScanResult;
+    /** Scan multiple tool definitions. */
+    scanAll(tools: McpToolDefinition[]): McpScanResult[];
+    private detectToolPoisoning;
+    private detectTyposquatting;
+    private detectHiddenInstructions;
+    private detectRugPull;
+}
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAOA,mDAAmD;AACnD,oBAAY,aAAa;IACvB,aAAa,mBAAmB;IAChC,aAAa,kBAAkB;IAC/B,iBAAiB,uBAAuB;IACxC,OAAO,aAAa;CACrB;AAED,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AA4GD;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,qCAAqC;IACrC,IAAI,CAAC,cAAc,EAAE,iBAAiB,GAAG,aAAa;IAqBtD,sCAAsC;IACtC,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,aAAa,EAAE;IAMpD,OAAO,CAAC,mBAAmB;IAmC3B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,aAAa;CAmBtB"}

package/dist/mcp.js

@@ -0,0 +1,233 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSecurityScanner = exports.McpThreatType = void 0;
+// ── MCP Security Scanner ──
+// Detects tool-poisoning, typosquatting, hidden-instruction, and rug-pull
+// threats in MCP tool definitions.
+/** Threat categories recognised by the scanner. */
+var McpThreatType;
+(function (McpThreatType) {
+    McpThreatType["ToolPoisoning"] = "tool_poisoning";
+    McpThreatType["Typosquatting"] = "typosquatting";
+    McpThreatType["HiddenInstruction"] = "hidden_instruction";
+    McpThreatType["RugPull"] = "rug_pull";
+})(McpThreatType || (exports.McpThreatType = McpThreatType = {}));
+// ── Well-known tool names for typosquatting detection ──
+const KNOWN_TOOL_NAMES = [
+    'read_file',
+    'write_file',
+    'execute_command',
+    'search',
+    'browse',
+    'fetch',
+    'list_directory',
+    'create_file',
+    'delete_file',
+    'run_script',
+    'get_weather',
+    'send_email',
+    'query_database',
+    'http_request',
+    'calculator',
+];
+// ── Detection helpers ──
+/** Patterns that suggest prompt-injection / tool-poisoning. */
+const POISONING_PATTERNS = [
+    /<system>/i,
+    /ignore previous/i,
+    /you must/i,
+    /disregard/i,
+    /override/i,
+    /forget (all|your|previous)/i,
+    /new instructions/i,
+    /act as/i,
+];
+/** Unicode zero-width and homoglyph code-points. */
+const ZERO_WIDTH_CHARS = [
+    '\u200B', // zero-width space
+    '\u200C', // zero-width non-joiner
+    '\u200D', // zero-width joiner
+    '\uFEFF', // BOM / zero-width no-break space
+    '\u00AD', // soft hyphen
+    '\u2060', // word joiner
+    '\u180E', // Mongolian vowel separator
+];
+/** Common Cyrillic / Greek homoglyphs for Latin letters. */
+const HOMOGLYPH_MAP = {
+    '\u0430': 'a', // Cyrillic а
+    '\u0435': 'e', // Cyrillic е
+    '\u043E': 'o', // Cyrillic о
+    '\u0440': 'p', // Cyrillic р
+    '\u0441': 'c', // Cyrillic с
+    '\u0443': 'y', // Cyrillic у
+    '\u0445': 'x', // Cyrillic х
+    '\u0456': 'i', // Cyrillic і
+    '\u0458': 'j', // Cyrillic ј
+    '\u03B1': 'a', // Greek α
+    '\u03BF': 'o', // Greek ο
+    '\u03C1': 'p', // Greek ρ
+};
+/** Instruction-like patterns used for rug-pull detection. */
+const INSTRUCTION_PATTERNS = [
+    /you (should|must|need to)/i,
+    /always /i,
+    /never /i,
+    /do not /i,
+    /important:/i,
+    /warning:/i,
+    /note:/i,
+    /step \d/i,
+    /first,/i,
+    /finally,/i,
+];
+const RUG_PULL_DESCRIPTION_LENGTH = 500;
+const RUG_PULL_MIN_INSTRUCTION_MATCHES = 2;
+// ── Levenshtein distance ──
+function levenshtein(a, b) {
+    const m = a.length;
+    const n = b.length;
+    const dp = Array.from({ length: m + 1 }, () => Array(n + 1).fill(0));
+    for (let i = 0; i <= m; i++)
+        dp[i][0] = i;
+    for (let j = 0; j <= n; j++)
+        dp[0][j] = j;
+    for (let i = 1; i <= m; i++) {
+        for (let j = 1; j <= n; j++) {
+            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+            dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost);
+        }
+    }
+    return dp[m][n];
+}
+// ── Severity scoring weights ──
+const SEVERITY_WEIGHT = {
+    low: 10,
+    medium: 25,
+    high: 50,
+    critical: 80,
+};
+// ── McpSecurityScanner ──
+/**
+ * Scans MCP tool definitions for security threats.
+ */
+class McpSecurityScanner {
+    /** Scan a single tool definition. */
+    scan(toolDefinition) {
+        const threats = [];
+        this.detectToolPoisoning(toolDefinition, threats);
+        this.detectTyposquatting(toolDefinition, threats);
+        this.detectHiddenInstructions(toolDefinition, threats);
+        this.detectRugPull(toolDefinition, threats);
+        const risk_score = Math.min(100, threats.reduce((sum, t) => sum + SEVERITY_WEIGHT[t.severity], 0));
+        return {
+            tool_name: toolDefinition.name,
+            threats,
+            risk_score,
+            safe: threats.length === 0,
+        };
+    }
+    /** Scan multiple tool definitions. */
+    scanAll(tools) {
+        return tools.map((t) => this.scan(t));
+    }
+    // ── Private detection methods ──
+    detectToolPoisoning(tool, threats) {
+        const text = tool.description;
+        for (const pattern of POISONING_PATTERNS) {
+            const match = pattern.exec(text);
+            if (match) {
+                threats.push({
+                    type: McpThreatType.ToolPoisoning,
+                    severity: 'critical',
+                    description: `Prompt-injection pattern detected in tool description: "${match[0]}"`,
+                    evidence: match[0],
+                });
+            }
+        }
+        // Detect encoded characters (percent-encoded payloads)
+        if (/%[0-9A-Fa-f]{2}/.test(text)) {
+            try {
+                const decoded = decodeURIComponent(text);
+                for (const pattern of POISONING_PATTERNS) {
+                    const match = pattern.exec(decoded);
+                    if (match) {
+                        threats.push({
+                            type: McpThreatType.ToolPoisoning,
+                            severity: 'critical',
+                            description: `Encoded prompt-injection detected after URL-decoding: "${match[0]}"`,
+                            evidence: match[0],
+                        });
+                    }
+                }
+            }
+            catch {
+                // malformed encoding – not a threat by itself
+            }
+        }
+    }
+    detectTyposquatting(tool, threats) {
+        const name = tool.name.toLowerCase();
+        for (const known of KNOWN_TOOL_NAMES) {
+            if (name === known)
+                continue; // exact match is fine
+            const dist = levenshtein(name, known);
+            if (dist > 0 && dist <= 2) {
+                threats.push({
+                    type: McpThreatType.Typosquatting,
+                    severity: dist === 1 ? 'high' : 'medium',
+                    description: `Tool name "${tool.name}" is suspiciously similar to known tool "${known}" (edit distance ${dist})`,
+                    evidence: known,
+                });
+            }
+        }
+    }
+    detectHiddenInstructions(tool, threats) {
+        const text = tool.description;
+        // Zero-width characters
+        for (const zwc of ZERO_WIDTH_CHARS) {
+            if (text.includes(zwc)) {
+                threats.push({
+                    type: McpThreatType.HiddenInstruction,
+                    severity: 'high',
+                    description: `Zero-width character U+${zwc.codePointAt(0).toString(16).toUpperCase().padStart(4, '0')} found in description`,
+                    evidence: `U+${zwc.codePointAt(0).toString(16).toUpperCase().padStart(4, '0')}`,
+                });
+                break; // one finding per category is enough
+            }
+        }
+        // Homoglyphs
+        for (const ch of text) {
+            if (HOMOGLYPH_MAP[ch]) {
+                threats.push({
+                    type: McpThreatType.HiddenInstruction,
+                    severity: 'high',
+                    description: `Homoglyph character detected: "${ch}" looks like "${HOMOGLYPH_MAP[ch]}" but is a different Unicode code point`,
+                    evidence: ch,
+                });
+                break; // one finding per category is enough
+            }
+        }
+    }
+    detectRugPull(tool, threats) {
+        const text = tool.description;
+        if (text.length <= RUG_PULL_DESCRIPTION_LENGTH)
+            return;
+        let instructionMatches = 0;
+        for (const pattern of INSTRUCTION_PATTERNS) {
+            if (pattern.test(text))
+                instructionMatches++;
+        }
+        if (instructionMatches >= RUG_PULL_MIN_INSTRUCTION_MATCHES) {
+            threats.push({
+                type: McpThreatType.RugPull,
+                severity: 'medium',
+                description: `Unusually long description (${text.length} chars) with ${instructionMatches} instruction-like patterns — possible rug-pull payload`,
+                evidence: `length=${text.length}, instruction_patterns=${instructionMatches}`,
+            });
+        }
+    }
+}
+exports.McpSecurityScanner = McpSecurityScanner;
+//# sourceMappingURL=mcp.js.map