npm - @offgridsec/kira-lite-mcp - Versions diffs - 0.1.2 - Mend

@offgridsec/kira-lite-mcp 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (73) hide show

package/CHANGELOG.md +29 -0
package/INSTALL.md +330 -0
package/LICENSE +96 -0
package/PRIVACY.md +54 -0
package/README.md +370 -0
package/config/CLAUDE.md +26 -0
package/config/settings.local.json +25 -0
package/dist/config.d.ts +6 -0
package/dist/config.js +1 -0
package/dist/core/engines/kira-core.d.ts +16 -0
package/dist/core/engines/kira-core.js +1 -0
package/dist/core/engines/osv.d.ts +4 -0
package/dist/core/engines/osv.js +1 -0
package/dist/core/engines/runner.d.ts +11 -0
package/dist/core/engines/runner.js +1 -0
package/dist/core/scanner.d.ts +19 -0
package/dist/core/scanner.js +1 -0
package/dist/core/types.d.ts +72 -0
package/dist/core/types.js +1 -0
package/dist/core/utils.d.ts +8 -0
package/dist/core/utils.js +1 -0
package/dist/index.d.ts +2 -0
package/dist/index.js +2 -0
package/dist/rules/c-cpp.d.ts +2 -0
package/dist/rules/c-cpp.js +1 -0
package/dist/rules/cicd.d.ts +2 -0
package/dist/rules/cicd.js +1 -0
package/dist/rules/csharp.d.ts +2 -0
package/dist/rules/csharp.js +1 -0
package/dist/rules/docker.d.ts +2 -0
package/dist/rules/docker.js +1 -0
package/dist/rules/go.d.ts +2 -0
package/dist/rules/go.js +1 -0
package/dist/rules/index.d.ts +30 -0
package/dist/rules/index.js +1 -0
package/dist/rules/java.d.ts +2 -0
package/dist/rules/java.js +1 -0
package/dist/rules/javascript-extended.d.ts +12 -0
package/dist/rules/javascript-extended.js +1 -0
package/dist/rules/javascript.d.ts +2 -0
package/dist/rules/javascript.js +1 -0
package/dist/rules/kubernetes.d.ts +2 -0
package/dist/rules/kubernetes.js +1 -0
package/dist/rules/php.d.ts +2 -0
package/dist/rules/php.js +1 -0
package/dist/rules/python-extended.d.ts +12 -0
package/dist/rules/python-extended.js +1 -0
package/dist/rules/python.d.ts +2 -0
package/dist/rules/python.js +1 -0
package/dist/rules/ruby.d.ts +2 -0
package/dist/rules/ruby.js +1 -0
package/dist/rules/secrets-extended.d.ts +2 -0
package/dist/rules/secrets-extended.js +1 -0
package/dist/rules/secrets.d.ts +2 -0
package/dist/rules/secrets.js +1 -0
package/dist/rules/shell.d.ts +2 -0
package/dist/rules/shell.js +1 -0
package/dist/rules/terraform.d.ts +2 -0
package/dist/rules/terraform.js +1 -0
package/dist/telemetry.d.ts +8 -0
package/dist/telemetry.js +1 -0
package/dist/tools/fix-vulnerability.d.ts +36 -0
package/dist/tools/fix-vulnerability.js +1 -0
package/dist/tools/scan-code.d.ts +29 -0
package/dist/tools/scan-code.js +1 -0
package/dist/tools/scan-dependencies.d.ts +6 -0
package/dist/tools/scan-dependencies.js +1 -0
package/dist/tools/scan-diff.d.ts +36 -0
package/dist/tools/scan-diff.js +1 -0
package/dist/tools/scan-file.d.ts +24 -0
package/dist/tools/scan-file.js +1 -0
package/hook.mjs +72 -0
package/package.json +66 -0

package/dist/tools/scan-diff.js ADDED Viewed

@@ -0,0 +1 @@

package/dist/tools/scan-file.d.ts ADDED Viewed

@@ -0,0 +1,24 @@
+import { ScanResult } from "../core/types.js";
+export interface ScanFileInput {
+    file_path: string;
+    language?: string;
+}
+export declare function scanFile(input: ScanFileInput): Promise<ScanResult>;
+export declare const scanFileToolDefinition: {
+    name: "scan_file";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            file_path: {
+                type: "string";
+                description: string;
+            };
+            language: {
+                type: "string";
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};

package/dist/tools/scan-file.js ADDED Viewed

@@ -0,0 +1 @@

package/hook.mjs ADDED Viewed

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+// Kira-Lite post-write hook for Claude Code
+// Scans files after Edit/Write to catch anything the MCP pre-scan missed.
+import { KiraScanner } from "./dist/core/scanner.js";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { detectLanguage } from "./dist/rules/index.js";
+// Check config — if manual mode, skip the hook entirely
+try {
+  const configPath = join(homedir(), ".kira-lite", "config.json");
+  const raw = readFileSync(configPath, "utf-8");
+  const config = JSON.parse(raw);
+  if (config?.scanMode === "manual") {
+    process.exit(0);
+  }
+} catch {
+  // No config or invalid — continue with default behavior
+}
+const scanner = new KiraScanner();
+// Read hook input from stdin (Claude Code passes JSON with tool details)
+let input = "";
+process.stdin.setEncoding("utf-8");
+process.stdin.on("data", (chunk) => (input += chunk));
+process.stdin.on("end", async () => {
+  try {
+    const hookData = JSON.parse(input);
+    const filePath = hookData?.tool_input?.file_path;
+    if (!filePath) process.exit(0);
+    // Read the file that was just written
+    let code;
+    try {
+      code = readFileSync(filePath, "utf-8");
+    } catch {
+      process.exit(0); // file doesn't exist or can't read — skip
+    }
+    const language = detectLanguage(filePath);
+    // Use regex-only scan for speed (hooks should be fast)
+    const result = scanner.scanRegex({ code, language, filename: filePath });
+    const critical = result.findings.filter(
+      (f) => f.severity === "critical" || f.severity === "high"
+    );
+    if (critical.length > 0) {
+      console.error(
+        `\n⚠ Kira-Lite: ${critical.length} critical/high vulnerabilities in ${filePath}:`
+      );
+      for (const f of critical) {
+        console.error(`  [${f.severity.toUpperCase()}] ${f.title} (line ${f.line})`);
+      }
+      console.error("");
+      // Exit 1 = block the tool call, Claude will see the error and fix it
+      process.exit(1);
+    }
+    // Clean — allow it through
+    process.exit(0);
+  } catch {
+    // Don't block on hook errors
+    process.exit(0);
+  }
+});

package/package.json ADDED Viewed

@@ -0,0 +1,66 @@
+{
+  "name": "@offgridsec/kira-lite-mcp",
+  "version": "0.1.2",
+  "description": "Kira-Lite MCP Server — Real-time security scanning for AI coding assistants",
+  "author": "Offgrid Security <contact@offgridsec.com>",
+  "homepage": "https://offgridsec.com",
+  "license": "Elastic-2.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "kira-lite-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "!dist/**/__tests__",
+    "config/",
+    "hook.mjs",
+    "LICENSE",
+    "README.md",
+    "INSTALL.md",
+    "CHANGELOG.md",
+    "PRIVACY.md"
+  ],
+  "keywords": [
+    "mcp",
+    "security",
+    "scanner",
+    "sast",
+    "owasp",
+    "cwe",
+    "ai",
+    "claude",
+    "cursor",
+    "windsurf",
+    "code-security",
+    "vulnerability-detection"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "build:publish": "tsc && node scripts/obfuscate.mjs",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run build:publish",
+    "test": "node --test dist/**/*.test.js",
+    "verify-binary": "node scripts/verify-binary.mjs"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "posthog-node": "^4.3.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "javascript-obfuscator": "^4.2.2",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "optionalDependencies": {
+    "@offgridsec/kira-core-darwin-arm64": "0.2.0",
+    "@offgridsec/kira-core-darwin-x64": "0.2.0",
+    "@offgridsec/kira-core-linux-arm64": "0.2.0",
+    "@offgridsec/kira-core-linux-x64": "0.2.0",
+    "@offgridsec/kira-core-win32-x64": "0.2.0"
+  }
+}