@portel/photon 1.0.0

package/dist/schema-extractor.js

@@ -0,0 +1,396 @@
+/**
+ * Schema Extractor
+ *
+ * Extracts JSON schemas from TypeScript method signatures and JSDoc comments
+ * Also extracts constructor parameters for config injection
+ * Supports Templates (@Template) and Static resources (@Static)
+ *
+ * Now uses TypeScript's compiler API for robust type parsing
+ */
+import * as fs from 'fs/promises';
+import * as ts from 'typescript';
+/**
+ * Extract schemas from a Photon MCP class file
+ */
+export class SchemaExtractor {
+    /**
+     * Extract method schemas from source code file
+     */
+    async extractFromFile(filePath) {
+        try {
+            const source = await fs.readFile(filePath, 'utf-8');
+            return this.extractFromSource(source);
+        }
+        catch (error) {
+            console.error(`Failed to extract schemas from ${filePath}: ${error.message}`);
+            return [];
+        }
+    }
+    /**
+     * Extract all metadata (tools, templates, statics) from source code
+     */
+    extractAllFromSource(source) {
+        const tools = [];
+        const templates = [];
+        const statics = [];
+        try {
+            // If source doesn't contain a class declaration, wrap it in one
+            let sourceToParse = source;
+            if (!source.includes('class ')) {
+                sourceToParse = `export default class Temp {\n${source}\n}`;
+            }
+            // Parse source file into AST
+            const sourceFile = ts.createSourceFile('temp.ts', sourceToParse, ts.ScriptTarget.Latest, true);
+            // Helper to process a method declaration
+            const processMethod = (member) => {
+                const methodName = member.name.getText(sourceFile);
+                const jsdoc = this.getJSDocComment(member, sourceFile);
+                // Extract parameter type information
+                const paramsType = this.getFirstParameterType(member, sourceFile);
+                if (!paramsType) {
+                    return; // Skip methods without proper params
+                }
+                // Build schema from TypeScript type
+                const { properties, required } = this.buildSchemaFromType(paramsType, sourceFile);
+                // Extract descriptions from JSDoc
+                const paramDocs = this.extractParamDocs(jsdoc);
+                // Merge descriptions into properties
+                Object.keys(properties).forEach(key => {
+                    if (paramDocs.has(key)) {
+                        properties[key].description = paramDocs.get(key);
+                    }
+                });
+                const description = this.extractDescription(jsdoc);
+                const inputSchema = {
+                    type: 'object',
+                    properties,
+                    ...(required.length > 0 ? { required } : {}),
+                };
+                // Check if this is a Template
+                if (this.hasTemplateTag(jsdoc)) {
+                    templates.push({
+                        name: methodName,
+                        description,
+                        inputSchema,
+                    });
+                }
+                // Check if this is a Static resource
+                else if (this.hasStaticTag(jsdoc)) {
+                    const uri = this.extractStaticURI(jsdoc) || `static://${methodName}`;
+                    const mimeType = this.extractMimeType(jsdoc);
+                    statics.push({
+                        name: methodName,
+                        uri,
+                        description,
+                        mimeType,
+                        inputSchema,
+                    });
+                }
+                // Otherwise, it's a regular tool
+                else {
+                    tools.push({
+                        name: methodName,
+                        description,
+                        inputSchema,
+                    });
+                }
+            };
+            // Visit all nodes in the AST
+            const visit = (node) => {
+                // Look for class declarations
+                if (ts.isClassDeclaration(node)) {
+                    node.members.forEach((member) => {
+                        // Look for async methods
+                        if (ts.isMethodDeclaration(member) &&
+                            member.modifiers?.some(m => m.kind === ts.SyntaxKind.AsyncKeyword)) {
+                            processMethod(member);
+                        }
+                    });
+                }
+                ts.forEachChild(node, visit);
+            };
+            visit(sourceFile);
+        }
+        catch (error) {
+            console.error('Failed to parse TypeScript source:', error.message);
+        }
+        return { tools, templates, statics };
+    }
+    /**
+     * Extract schemas from source code string (backward compatibility)
+     */
+    extractFromSource(source) {
+        return this.extractAllFromSource(source).tools;
+    }
+    /**
+     * Get JSDoc comment for a node
+     */
+    getJSDocComment(node, sourceFile) {
+        // Use TypeScript's JSDoc extraction
+        const jsDocs = node.jsDoc;
+        if (jsDocs && jsDocs.length > 0) {
+            const jsDoc = jsDocs[0];
+            const comment = jsDoc.comment;
+            // Get full JSDoc text including tags
+            const fullText = sourceFile.getFullText();
+            const start = jsDoc.pos;
+            const end = jsDoc.end;
+            const jsDocText = fullText.substring(start, end);
+            // Extract content between /** and */
+            const match = jsDocText.match(/\/\*\*([\s\S]*?)\*\//);
+            return match ? match[1] : '';
+        }
+        return '';
+    }
+    /**
+     * Get the first parameter's type node
+     */
+    getFirstParameterType(method, sourceFile) {
+        if (method.parameters.length === 0) {
+            return undefined;
+        }
+        const firstParam = method.parameters[0];
+        return firstParam.type;
+    }
+    /**
+     * Build JSON schema from TypeScript type node
+     */
+    buildSchemaFromType(typeNode, sourceFile) {
+        const properties = {};
+        const required = [];
+        // Handle type literal (object type)
+        if (ts.isTypeLiteralNode(typeNode)) {
+            typeNode.members.forEach((member) => {
+                if (ts.isPropertySignature(member) && member.name) {
+                    const propName = member.name.getText(sourceFile);
+                    const isOptional = member.questionToken !== undefined;
+                    if (!isOptional) {
+                        required.push(propName);
+                    }
+                    if (member.type) {
+                        properties[propName] = this.typeNodeToSchema(member.type, sourceFile);
+                    }
+                    else {
+                        properties[propName] = { type: 'object' };
+                    }
+                }
+            });
+        }
+        return { properties, required };
+    }
+    /**
+     * Convert TypeScript type node to JSON schema
+     */
+    typeNodeToSchema(typeNode, sourceFile) {
+        const schema = {};
+        // Handle union types
+        if (ts.isUnionTypeNode(typeNode)) {
+            schema.anyOf = typeNode.types.map(t => this.typeNodeToSchema(t, sourceFile));
+            return schema;
+        }
+        // Handle intersection types
+        if (ts.isIntersectionTypeNode(typeNode)) {
+            schema.allOf = typeNode.types.map(t => this.typeNodeToSchema(t, sourceFile));
+            return schema;
+        }
+        // Handle array types
+        if (ts.isArrayTypeNode(typeNode)) {
+            schema.type = 'array';
+            schema.items = this.typeNodeToSchema(typeNode.elementType, sourceFile);
+            return schema;
+        }
+        // Handle type reference (e.g., Array<string>)
+        if (ts.isTypeReferenceNode(typeNode)) {
+            const typeName = typeNode.typeName.getText(sourceFile);
+            if (typeName === 'Array' && typeNode.typeArguments && typeNode.typeArguments.length > 0) {
+                schema.type = 'array';
+                schema.items = this.typeNodeToSchema(typeNode.typeArguments[0], sourceFile);
+                return schema;
+            }
+            // For other type references, default to object
+            schema.type = 'object';
+            return schema;
+        }
+        // Handle literal types
+        if (ts.isLiteralTypeNode(typeNode)) {
+            const literal = typeNode.literal;
+            if (ts.isStringLiteral(literal)) {
+                schema.type = 'string';
+                schema.enum = [literal.text];
+                return schema;
+            }
+            if (ts.isNumericLiteral(literal)) {
+                schema.type = 'number';
+                schema.enum = [parseFloat(literal.text)];
+                return schema;
+            }
+            if (literal.kind === ts.SyntaxKind.TrueKeyword || literal.kind === ts.SyntaxKind.FalseKeyword) {
+                schema.type = 'boolean';
+                return schema;
+            }
+        }
+        // Handle tuple types
+        if (ts.isTupleTypeNode(typeNode)) {
+            schema.type = 'array';
+            schema.items = typeNode.elements.map(e => this.typeNodeToSchema(e, sourceFile));
+            return schema;
+        }
+        // Handle type literal (nested object)
+        if (ts.isTypeLiteralNode(typeNode)) {
+            schema.type = 'object';
+            const { properties, required } = this.buildSchemaFromType(typeNode, sourceFile);
+            schema.properties = properties;
+            if (required.length > 0) {
+                schema.required = required;
+            }
+            return schema;
+        }
+        // Handle keyword types (string, number, boolean, etc.)
+        const typeText = typeNode.getText(sourceFile);
+        switch (typeText) {
+            case 'string':
+                schema.type = 'string';
+                break;
+            case 'number':
+                schema.type = 'number';
+                break;
+            case 'boolean':
+                schema.type = 'boolean';
+                break;
+            case 'any':
+            case 'unknown':
+                // No type restriction
+                break;
+            default:
+                // Default to object for complex types
+                schema.type = 'object';
+        }
+        return schema;
+    }
+    /**
+     * Extract constructor parameters for config injection
+     */
+    extractConstructorParams(source) {
+        const params = [];
+        try {
+            const sourceFile = ts.createSourceFile('temp.ts', source, ts.ScriptTarget.Latest, true);
+            const visit = (node) => {
+                if (ts.isClassDeclaration(node)) {
+                    node.members.forEach((member) => {
+                        if (ts.isConstructorDeclaration(member)) {
+                            member.parameters.forEach((param) => {
+                                if (param.name && ts.isIdentifier(param.name)) {
+                                    const name = param.name.getText(sourceFile);
+                                    const type = param.type ? param.type.getText(sourceFile) : 'any';
+                                    const isOptional = param.questionToken !== undefined || param.initializer !== undefined;
+                                    const hasDefault = param.initializer !== undefined;
+                                    let defaultValue = undefined;
+                                    if (param.initializer) {
+                                        defaultValue = this.extractDefaultValue(param.initializer, sourceFile);
+                                    }
+                                    params.push({
+                                        name,
+                                        type,
+                                        isOptional,
+                                        hasDefault,
+                                        defaultValue,
+                                    });
+                                }
+                            });
+                        }
+                    });
+                }
+                ts.forEachChild(node, visit);
+            };
+            visit(sourceFile);
+        }
+        catch (error) {
+            console.error('Failed to extract constructor params:', error.message);
+        }
+        return params;
+    }
+    /**
+     * Extract default value from initializer
+     */
+    extractDefaultValue(initializer, sourceFile) {
+        // String literals
+        if (ts.isStringLiteral(initializer)) {
+            return initializer.text;
+        }
+        // Numeric literals
+        if (ts.isNumericLiteral(initializer)) {
+            return parseFloat(initializer.text);
+        }
+        // Boolean literals
+        if (initializer.kind === ts.SyntaxKind.TrueKeyword) {
+            return true;
+        }
+        if (initializer.kind === ts.SyntaxKind.FalseKeyword) {
+            return false;
+        }
+        // For complex expressions (function calls, etc.), return as string
+        return initializer.getText(sourceFile);
+    }
+    /**
+     * Extract main description from JSDoc comment
+     */
+    extractDescription(jsdocContent) {
+        // Split by @param to get only the description part
+        const beforeParams = jsdocContent.split(/@param/)[0];
+        // Remove leading * from each line and trim
+        const lines = beforeParams
+            .split('\n')
+            .map((line) => line.trim().replace(/^\*\s?/, ''))
+            .filter((line) => line && !line.startsWith('@')); // Exclude @tags and empty lines
+        // Take only the last meaningful line (the actual method description)
+        // This filters out file headers
+        const meaningfulLines = lines.filter(line => line.length > 5); // Filter out short lines
+        const description = meaningfulLines.length > 0
+            ? meaningfulLines[meaningfulLines.length - 1]
+            : lines.join(' ');
+        // Clean up multiple spaces
+        return description.replace(/\s+/g, ' ').trim() || 'No description';
+    }
+    /**
+     * Extract parameter descriptions from JSDoc @param tags
+     */
+    extractParamDocs(jsdocContent) {
+        const paramDocs = new Map();
+        const paramRegex = /@param\s+(\w+)\s+(.+)/g;
+        let match;
+        while ((match = paramRegex.exec(jsdocContent)) !== null) {
+            const [, paramName, description] = match;
+            paramDocs.set(paramName, description.trim());
+        }
+        return paramDocs;
+    }
+    /**
+     * Check if JSDoc contains @Template tag
+     */
+    hasTemplateTag(jsdocContent) {
+        return /@Template/i.test(jsdocContent);
+    }
+    /**
+     * Check if JSDoc contains @Static tag
+     */
+    hasStaticTag(jsdocContent) {
+        return /@Static/i.test(jsdocContent);
+    }
+    /**
+     * Extract URI pattern from @Static tag
+     * Example: @Static github://repos/{owner}/{repo}/readme
+     */
+    extractStaticURI(jsdocContent) {
+        const match = jsdocContent.match(/@Static\s+([\w:\/\{\}\-_.]+)/i);
+        return match ? match[1].trim() : null;
+    }
+    /**
+     * Extract MIME type from @mimeType tag
+     * Example: @mimeType text/markdown
+     */
+    extractMimeType(jsdocContent) {
+        const match = jsdocContent.match(/@mimeType\s+([\w\/\-+.]+)/i);
+        return match ? match[1].trim() : undefined;
+    }
+}
+//# sourceMappingURL=schema-extractor.js.map

package/dist/schema-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-extractor.js","sourceRoot":"","sources":["../src/schema-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AASjC;;GAEG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,kCAAkC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAAc;QACjC,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,gEAAgE;YAChE,IAAI,aAAa,GAAG,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,aAAa,GAAG,gCAAgC,MAAM,KAAK,CAAC;YAC9D,CAAC;YAED,6BAA6B;YAC7B,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,SAAS,EACT,aAAa,EACb,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,CACL,CAAC;YAEF,yCAAyC;YACzC,MAAM,aAAa,GAAG,CAAC,MAA4B,EAAE,EAAE;gBACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACnD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAEvD,qCAAqC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,CAAC,qCAAqC;gBAC/C,CAAC;gBAED,oCAAoC;gBACpC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAElF,kCAAkC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE/C,qCAAqC;gBACrC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBACpC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAG;oBAClB,IAAI,EAAE,QAAiB;oBACvB,UAAU;oBACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C,CAAC;gBAEF,8BAA8B;gBAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,UAAU;wBAChB,WAAW;wBACX,WAAW;qBACZ,CAAC,CAAC;gBACL,CAAC;gBACD,qCAAqC;qBAChC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,YAAY,UAAU,EAAE,CAAC;oBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBAE7C,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,UAAU;wBAChB,GAAG;wBACH,WAAW;wBACX,QAAQ;wBACR,WAAW;qBACZ,CAAC,CAAC;gBACL,CAAC;gBACD,iCAAiC;qBAC5B,CAAC;oBACJ,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,UAAU;wBAChB,WAAW;wBACX,WAAW;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YAEF,6BAA6B;YAC7B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE;gBAC9B,8BAA8B;gBAC9B,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC9B,yBAAyB;wBACzB,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;4BAC9B,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;4BACvE,aAAa,CAAC,MAAM,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,KAAK,CAAC,UAAU,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAa,EAAE,UAAyB;QAC9D,oCAAoC;QACpC,MAAM,MAAM,GAAI,IAAY,CAAC,KAAK,CAAC;QACnC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9B,qCAAqC;YACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEjD,qCAAqC;YACrC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAA4B,EAAE,UAAyB;QACnF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACxC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAqB,EAAE,UAAyB;QAC1E,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,oCAAoC;QACpC,IAAI,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBAClC,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBACjD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;oBAEtD,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC1B,CAAC;oBAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;wBAChB,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACxE,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;oBAC5C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAqB,EAAE,UAAyB;QACvE,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,qBAAqB;QACrB,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,IAAI,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,qBAAqB;QACrB,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,8CAA8C;QAC9C,IAAI,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAEvD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxF,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC;gBACtB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC5E,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,+CAA+C;YAC/C,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,uBAAuB;QACvB,IAAI,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YACjC,IAAI,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvB,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvB,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC9F,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,sCAAsC;QACtC,IAAI,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChF,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;YAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC7B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,uDAAuD;QACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvB,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;gBACxB,MAAM;YACR,KAAK,KAAK,CAAC;YACX,KAAK,SAAS;gBACZ,sBAAsB;gBACtB,MAAM;YACR;gBACE,sCAAsC;gBACtC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QAC3B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,MAAc;QACrC,MAAM,MAAM,GAAuB,EAAE,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,SAAS,EACT,MAAM,EACN,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,CACL,CAAC;YAEF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE;gBAC9B,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC9B,IAAI,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;4BACxC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gCAClC,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oCAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oCAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oCACjE,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;oCACxF,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;oCAEnD,IAAI,YAAY,GAAQ,SAAS,CAAC;oCAClC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;wCACtB,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oCACzE,CAAC;oCAED,MAAM,CAAC,IAAI,CAAC;wCACV,IAAI;wCACJ,IAAI;wCACJ,UAAU;wCACV,UAAU;wCACV,YAAY;qCACb,CAAC,CAAC;gCACL,CAAC;4BACH,CAAC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,KAAK,CAAC,UAAU,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,WAA0B,EAAE,UAAyB;QAC/E,kBAAkB;QAClB,IAAI,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,WAAW,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,mBAAmB;QACnB,IAAI,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,mBAAmB;QACnB,IAAI,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mEAAmE;QACnE,OAAO,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,YAAoB;QAC7C,mDAAmD;QACnD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAErD,2CAA2C;QAC3C,MAAM,KAAK,GAAG,YAAY;aACvB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gCAAgC;QAEpF,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB;QACxF,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;YAC5C,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpB,2BAA2B;QAC3B,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IACrE,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,YAAoB;QAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAE5C,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC;YACzC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,YAAoB;QACzC,OAAO,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,YAAoB;QACvC,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,YAAoB;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,YAAoB;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;CACF"}

package/dist/security-scanner.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Security Scanner - Check dependencies for known vulnerabilities
+ */
+export interface VulnerabilityInfo {
+    severity: 'info' | 'low' | 'moderate' | 'high' | 'critical';
+    title: string;
+    url?: string;
+    via?: string[];
+    range?: string;
+}
+export interface DependencyAuditResult {
+    dependency: string;
+    version: string;
+    vulnerabilities: VulnerabilityInfo[];
+    hasVulnerabilities: boolean;
+}
+export interface MCPAuditResult {
+    mcpName: string;
+    dependencies: DependencyAuditResult[];
+    totalVulnerabilities: number;
+    criticalCount: number;
+    highCount: number;
+    moderateCount: number;
+    lowCount: number;
+}
+export declare class SecurityScanner {
+    /**
+     * Audit dependencies for a specific MCP
+     */
+    auditMCP(mcpName: string, dependencies: string[]): Promise<MCPAuditResult>;
+    /**
+     * Audit a single dependency
+     */
+    private auditDependency;
+    /**
+     * Extract relevant vulnerabilities from npm audit output
+     */
+    private extractVulnerabilities;
+    /**
+     * Quick check if dependency has known vulnerabilities
+     */
+    hasVulnerabilities(dependency: string): Promise<boolean>;
+    /**
+     * Get severity color for terminal output
+     */
+    getSeveritySymbol(severity: string): string;
+    /**
+     * Format audit result for display
+     */
+    formatAuditResult(result: MCPAuditResult): string;
+}
+//# sourceMappingURL=security-scanner.d.ts.map

package/dist/security-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.d.ts","sourceRoot":"","sources":["../src/security-scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,iBAAiB,EAAE,CAAC;IACrC,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,qBAAqB,EAAE,CAAC;IACtC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,eAAe;IAC1B;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAoChF;;OAEG;YACW,eAAe;IAuC7B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA2B9B;;OAEG;IACG,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB9D;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAU3C;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM;CAsBlD"}

package/dist/security-scanner.js

@@ -0,0 +1,172 @@
+/**
+ * Security Scanner - Check dependencies for known vulnerabilities
+ */
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import * as path from 'path';
+import * as os from 'os';
+import * as fs from 'fs/promises';
+const execAsync = promisify(exec);
+export class SecurityScanner {
+    /**
+     * Audit dependencies for a specific MCP
+     */
+    async auditMCP(mcpName, dependencies) {
+        const results = [];
+        let totalVulnerabilities = 0;
+        let criticalCount = 0;
+        let highCount = 0;
+        let moderateCount = 0;
+        let lowCount = 0;
+        for (const dep of dependencies) {
+            const result = await this.auditDependency(mcpName, dep);
+            results.push(result);
+            if (result.hasVulnerabilities) {
+                totalVulnerabilities += result.vulnerabilities.length;
+                result.vulnerabilities.forEach(vuln => {
+                    switch (vuln.severity) {
+                        case 'critical':
+                            criticalCount++;
+                            break;
+                        case 'high':
+                            highCount++;
+                            break;
+                        case 'moderate':
+                            moderateCount++;
+                            break;
+                        case 'low':
+                            lowCount++;
+                            break;
+                    }
+                });
+            }
+        }
+        return {
+            mcpName,
+            dependencies: results,
+            totalVulnerabilities,
+            criticalCount,
+            highCount,
+            moderateCount,
+            lowCount,
+        };
+    }
+    /**
+     * Audit a single dependency
+     */
+    async auditDependency(mcpName, dependency) {
+        // Parse dependency string (name@version)
+        const parts = dependency.split('@');
+        const version = parts.pop() || 'latest';
+        const name = parts.join('@'); // Handle scoped packages like @org/package
+        const depPath = path.join(os.homedir(), '.cache', 'photon-mcp', 'dependencies', mcpName);
+        try {
+            // Check if dependency directory exists
+            await fs.access(depPath);
+            // Run npm audit in the dependency directory
+            const { stdout } = await execAsync('npm audit --json', {
+                cwd: depPath,
+                timeout: 30000,
+            });
+            const auditData = JSON.parse(stdout);
+            const vulnerabilities = this.extractVulnerabilities(auditData, name);
+            return {
+                dependency: name,
+                version,
+                vulnerabilities,
+                hasVulnerabilities: vulnerabilities.length > 0,
+            };
+        }
+        catch (error) {
+            // If npm audit fails or directory doesn't exist, assume no vulnerabilities
+            // (dependency might not be installed yet)
+            return {
+                dependency: name,
+                version,
+                vulnerabilities: [],
+                hasVulnerabilities: false,
+            };
+        }
+    }
+    /**
+     * Extract relevant vulnerabilities from npm audit output
+     */
+    extractVulnerabilities(auditData, packageName) {
+        const vulnerabilities = [];
+        if (!auditData.vulnerabilities) {
+            return vulnerabilities;
+        }
+        // npm audit v7+ format
+        for (const [vulnPackage, vulnData] of Object.entries(auditData.vulnerabilities)) {
+            const vuln = vulnData;
+            // Check if this vulnerability affects our target package
+            if (vulnPackage === packageName || vuln.via?.includes(packageName)) {
+                vulnerabilities.push({
+                    severity: vuln.severity || 'moderate',
+                    title: vuln.name || vulnPackage,
+                    url: vuln.url,
+                    via: vuln.via?.filter((v) => typeof v === 'string'),
+                    range: vuln.range,
+                });
+            }
+        }
+        return vulnerabilities;
+    }
+    /**
+     * Quick check if dependency has known vulnerabilities
+     */
+    async hasVulnerabilities(dependency) {
+        try {
+            // Use npm view to check if package exists
+            const parts = dependency.split('@');
+            const version = parts.pop() || 'latest';
+            const name = parts.join('@');
+            const { stdout } = await execAsync(`npm view ${name}@${version} version`, {
+                timeout: 10000,
+            });
+            // If we get here, package exists. Now check for advisories
+            // Note: npm doesn't provide a direct API for this without installing,
+            // but we can check the npm registry API
+            return false; // Default to false for now
+        }
+        catch (error) {
+            // Package doesn't exist or other error
+            return false;
+        }
+    }
+    /**
+     * Get severity color for terminal output
+     */
+    getSeveritySymbol(severity) {
+        switch (severity) {
+            case 'critical': return '🔴';
+            case 'high': return '🟠';
+            case 'moderate': return '🟡';
+            case 'low': return '🔵';
+            default: return 'ℹ️';
+        }
+    }
+    /**
+     * Format audit result for display
+     */
+    formatAuditResult(result) {
+        if (result.totalVulnerabilities === 0) {
+            return `✅ ${result.mcpName}: No vulnerabilities found`;
+        }
+        let output = `⚠️  ${result.mcpName}: ${result.totalVulnerabilities} vulnerabilities found\n`;
+        if (result.criticalCount > 0) {
+            output += `   🔴 Critical: ${result.criticalCount}\n`;
+        }
+        if (result.highCount > 0) {
+            output += `   🟠 High: ${result.highCount}\n`;
+        }
+        if (result.moderateCount > 0) {
+            output += `   🟡 Moderate: ${result.moderateCount}\n`;
+        }
+        if (result.lowCount > 0) {
+            output += `   🔵 Low: ${result.lowCount}\n`;
+        }
+        return output;
+    }
+}
+//# sourceMappingURL=security-scanner.js.map

package/dist/security-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../src/security-scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AA2BlC,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,YAAsB;QACpD,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC9B,oBAAoB,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;gBACtD,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACpC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACtB,KAAK,UAAU;4BAAE,aAAa,EAAE,CAAC;4BAAC,MAAM;wBACxC,KAAK,MAAM;4BAAE,SAAS,EAAE,CAAC;4BAAC,MAAM;wBAChC,KAAK,UAAU;4BAAE,aAAa,EAAE,CAAC;4BAAC,MAAM;wBACxC,KAAK,KAAK;4BAAE,QAAQ,EAAE,CAAC;4BAAC,MAAM;oBAChC,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,YAAY,EAAE,OAAO;YACrB,oBAAoB;YACpB,aAAa;YACb,SAAS;YACT,aAAa;YACb,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,UAAkB;QAC/D,yCAAyC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;QAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAEzF,IAAI,CAAC;YACH,uCAAuC;YACvC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEzB,4CAA4C;YAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE;gBACrD,GAAG,EAAE,OAAO;gBACZ,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAErE,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,OAAO;gBACP,eAAe;gBACf,kBAAkB,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;aAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,2EAA2E;YAC3E,0CAA0C;YAC1C,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,OAAO;gBACP,eAAe,EAAE,EAAE;gBACnB,kBAAkB,EAAE,KAAK;aAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,SAAc,EAAE,WAAmB;QAChE,MAAM,eAAe,GAAwB,EAAE,CAAC;QAEhD,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,GAAG,QAAe,CAAC;YAE7B,yDAAyD;YACzD,IAAI,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAEnE,eAAe,CAAC,IAAI,CAAC;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,UAAU;oBACrC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,WAAW;oBAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBACxD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB;QACzC,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,IAAI,IAAI,OAAO,UAAU,EAAE;gBACxE,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,2DAA2D;YAC3D,sEAAsE;YACtE,wCAAwC;YACxC,OAAO,KAAK,CAAC,CAAC,2BAA2B;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uCAAuC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU,CAAC,CAAC,OAAO,IAAI,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC;YACzB,KAAK,UAAU,CAAC,CAAC,OAAO,IAAI,CAAC;YAC7B,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC;YACxB,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,MAAsB;QACtC,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,MAAM,CAAC,OAAO,4BAA4B,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,oBAAoB,0BAA0B,CAAC;QAE7F,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mBAAmB,MAAM,CAAC,aAAa,IAAI,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,MAAM,CAAC,SAAS,IAAI,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mBAAmB,MAAM,CAAC,aAAa,IAAI,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,MAAM,CAAC,QAAQ,IAAI,CAAC;QAC9C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}