@securecode-ai/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SecureCode
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,71 @@
+# SecureCode MCP
+
+Standalone MCP (Model Context Protocol) server for SecureCode AI. Provides security scanning tools to AI coding assistants — Cursor, Claude Code, Codex, Windsurf, and other compatible MCP clients — without requiring the VS Code extension.
+
+## Install
+
+```bash
+npm install -g @securecode-ai/mcp
+```
+
+## Authenticate
+
+```bash
+securecode-mcp login
+```
+
+Or set the `SECURECODE_API_TOKEN` environment variable.
+
+## MCP client configuration
+
+### Cursor / Windsurf
+
+```json
+{
+  "mcpServers": {
+    "securecode": {
+      "command": "securecode-mcp",
+      "args": ["serve", "--workspace", "/path/to/your/project"]
+    }
+  }
+}
+```
+
+### Claude Code
+
+```bash
+claude mcp add securecode -s user -- securecode-mcp serve --workspace /path/to/your/project
+```
+
+## Tools
+
+| Tool | Description | Approval |
+|------|-------------|----------|
+| `securecode.scan` | Scan code for vulnerabilities using the AI pipeline | No |
+| `securecode.map` | Get the Project Map (endpoints, middleware, auth) | No |
+| `securecode.fix` | Generate a patch for a specific finding | Yes |
+| `securecode.attack` | Endpoint red-team testing (beta) | Yes |
+
+## CLI
+
+```bash
+securecode-mcp serve [--workspace <path>]    Start the MCP stdio server
+securecode-mcp login [--api-url <url>]      Store your API token
+securecode-mcp status                       Show auth status
+securecode-mcp logout                       Remove credentials
+```
+
+## Security
+
+- No API token in MCP client configuration — credentials are stored in `~/.securecode/credentials.json` (mode 0600) or the `SECURECODE_API_TOKEN` env var.
+- File reads are confined to the `--workspace` root.
+- Fixes are returned for review and never auto-applied.
+- No telemetry.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test
+```

package/dist/api/client.d.ts

@@ -0,0 +1,22 @@
+export declare class ApiClientError extends Error {
+    readonly status: number;
+    readonly apiCode: string | undefined;
+    readonly remaining: number | undefined;
+    constructor(status: number, apiCode: string | undefined, message: string, remaining: number | undefined);
+    static isInsufficientCredits(err: unknown): boolean;
+    static isAuthFailure(err: unknown): boolean;
+    static isRateLimit(err: unknown): boolean;
+    static isServerUnavailable(err: unknown): boolean;
+}
+export interface ApiClientOptions {
+    baseUrl: string;
+    token: string;
+    timeoutMs?: number;
+}
+export declare class ApiClient {
+    private readonly baseUrl;
+    private readonly token;
+    private readonly timeoutMs;
+    constructor(opts: ApiClientOptions);
+    postJson<T>(path: string, body: unknown): Promise<T>;
+}

package/dist/api/client.js

@@ -0,0 +1,141 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiClient = exports.ApiClientError = void 0;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const DEFAULT_TIMEOUT_MS = 180_000;
+const MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
+class ApiClientError extends Error {
+    status;
+    apiCode;
+    remaining;
+    constructor(status, apiCode, message, remaining) {
+        super(message);
+        this.status = status;
+        this.apiCode = apiCode;
+        this.remaining = remaining;
+        this.name = 'ApiClientError';
+    }
+    static isInsufficientCredits(err) {
+        return err instanceof ApiClientError && err.status === 402;
+    }
+    static isAuthFailure(err) {
+        return err instanceof ApiClientError && err.status === 401;
+    }
+    static isRateLimit(err) {
+        return err instanceof ApiClientError && err.status === 429;
+    }
+    static isServerUnavailable(err) {
+        return err instanceof ApiClientError && err.status === 503;
+    }
+}
+exports.ApiClientError = ApiClientError;
+class ApiClient {
+    baseUrl;
+    token;
+    timeoutMs;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/$/, '');
+        this.token = opts.token;
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    }
+    async postJson(path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const payload = JSON.stringify(body);
+        const parsed = new URL(url);
+        const lib = parsed.protocol === 'https:' ? https : http;
+        return new Promise((resolve, reject) => {
+            const req = lib.request({
+                hostname: parsed.hostname,
+                port: parsed.port || (parsed.protocol === 'https:' ? 443 : 80),
+                path: parsed.pathname + parsed.search,
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Content-Length': Buffer.byteLength(payload),
+                    Authorization: `Bearer ${this.token}`,
+                },
+            }, (res) => {
+                let raw = '';
+                let aborted = false;
+                res.on('data', (chunk) => {
+                    if (raw.length + chunk.length > MAX_RESPONSE_BYTES) {
+                        aborted = true;
+                        req.destroy();
+                        reject(new ApiClientError(502, undefined, 'Response too large', undefined));
+                        return;
+                    }
+                    raw += chunk.toString('utf8');
+                });
+                res.on('end', () => {
+                    if (aborted)
+                        return;
+                    let data;
+                    try {
+                        data = raw ? JSON.parse(raw) : {};
+                    }
+                    catch {
+                        data = { raw };
+                    }
+                    const status = res.statusCode ?? 0;
+                    if (status >= 200 && status < 300) {
+                        resolve(data);
+                    }
+                    else {
+                        const apiErr = {
+                            status,
+                            code: data.code || data.error_code,
+                            message: data.error || data.message || `HTTP ${status}`,
+                            remaining: data.remaining,
+                        };
+                        reject(new ApiClientError(apiErr.status, apiErr.code, apiErr.message, apiErr.remaining));
+                    }
+                });
+            });
+            req.on('error', (err) => {
+                reject(new ApiClientError(0, undefined, `Network error: ${err.message}`, undefined));
+            });
+            req.setTimeout(this.timeoutMs, () => {
+                req.destroy();
+                reject(new ApiClientError(0, undefined, `Request timed out after ${this.timeoutMs}ms`, undefined));
+            });
+            req.write(payload);
+            req.end();
+        });
+    }
+}
+exports.ApiClient = ApiClient;
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,6CAA+B;AAG/B,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,MAAa,cAAe,SAAQ,KAAK;IAEjB;IACA;IAEA;IAJpB,YACoB,MAAc,EACd,OAA2B,EAC3C,OAAe,EACC,SAA6B;QAE7C,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAoB;QAE3B,cAAS,GAAT,SAAS,CAAoB;QAG7C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,qBAAqB,CAAC,GAAY;QACrC,OAAO,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAY;QAC7B,OAAO,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,GAAY;QAC3B,OAAO,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,GAAY;QACnC,OAAO,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IAC/D,CAAC;CACJ;AA1BD,wCA0BC;AAQD,MAAa,SAAS;IACD,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAAS;IAEnC,YAAY,IAAsB;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,IAAa;QACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAExD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CACnB;gBACI,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC5C,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;iBACxC;aACJ,EACD,CAAC,GAAG,EAAE,EAAE;gBACJ,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;wBACjD,OAAO,GAAG,IAAI,CAAC;wBACf,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;wBAC5E,OAAO;oBACX,CAAC;oBACD,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACf,IAAI,OAAO;wBAAE,OAAO;oBACpB,IAAI,IAAS,CAAC;oBACd,IAAI,CAAC;wBACD,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACL,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;oBACnB,CAAC;oBACD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;oBACnC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;wBAChC,OAAO,CAAC,IAAS,CAAC,CAAC;oBACvB,CAAC;yBAAM,CAAC;wBACJ,MAAM,MAAM,GAAa;4BACrB,MAAM;4BACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;4BAClC,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,QAAQ,MAAM,EAAE;4BACvD,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC5B,CAAC;wBACF,MAAM,CAAC,IAAI,cAAc,CACrB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,SAAS,CACnB,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CACJ,CAAC;YAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAChC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,2BAA2B,IAAI,CAAC,SAAS,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YACvG,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AApFD,8BAoFC"}

package/dist/api/types.d.ts

@@ -0,0 +1,129 @@
+export interface ScanRequest {
+    code: string;
+    language: string;
+    filePath?: string;
+    scanDepth?: 'auto' | 'deep';
+    workspaceHints?: {
+        frameworkHint?: string;
+        relatedFiles?: Array<{
+            path: string;
+            content: string;
+            role: string;
+        }>;
+        endpointContext?: unknown;
+    };
+}
+export interface ScanFinding {
+    check_id?: string;
+    type?: string;
+    path?: string;
+    start?: {
+        line: number;
+        col?: number;
+    };
+    end?: {
+        line: number;
+        col?: number;
+    };
+    message?: string;
+    severity?: string;
+    extra?: {
+        message?: string;
+        severity?: string;
+        lines?: string;
+        fix?: string;
+    };
+}
+export interface FinalFinding {
+    final_id: string;
+    type: string;
+    severity: string;
+    confidence: number;
+    location: {
+        line_start: number;
+        line_end: number;
+    };
+    evidence_snippet: string;
+    decision_basis: string;
+    why_real?: string;
+    fix_strategy?: string;
+    fix_snippet?: string;
+}
+export interface ScanResponse {
+    scanType: 'basic' | 'advanced';
+    scanTypeMessage?: string | null;
+    scanId?: string;
+    findings?: ScanFinding[];
+    finalFindings?: FinalFinding[];
+    groupedFindings?: unknown;
+    scanSummary?: string;
+    remainingAIScans?: number;
+    aiScanLimit?: number | null;
+    plan?: string;
+    degraded?: boolean;
+    costs?: {
+        totalCostUsd: number;
+        stages: Array<{
+            stage: string;
+            provider: string;
+            model: string;
+            costUsd: number;
+            degraded: boolean;
+            fallbackFired: boolean;
+        }>;
+    };
+    scanCredits?: number;
+    attackerCredits?: number;
+}
+export interface FixRequest {
+    code: string;
+    language: string;
+    vulnerability: {
+        type: string;
+        line_start: number;
+        line_end: number;
+        evidence_snippet: string;
+    };
+    framework?: string;
+}
+export interface FixResponse {
+    fixed_code: string;
+    diff?: string;
+    fix_summary?: string;
+    security_notes?: string[];
+    why_secure?: string;
+    imports_needed?: string[];
+    confidence?: number;
+}
+export interface ApiError {
+    status: number;
+    code?: string;
+    message: string;
+    remaining?: number;
+    scanType?: string;
+}
+export interface EndpointContext {
+    method: string;
+    path: string;
+    mountedPath?: string;
+    handlerName: string;
+    sourceFile: string;
+    line: number;
+    middleware: unknown[];
+    params: unknown[];
+    authScheme: string;
+    dataLayer: string;
+    validatorLibrary: string;
+    callGraph: unknown[];
+    responseShape: string;
+    confidence: number;
+    runtimeConfirmed: boolean;
+}
+export interface ProjectMap {
+    endpoints: EndpointContext[];
+    files?: Record<string, {
+        endpoints?: EndpointContext[];
+    }>;
+    builtAt?: string;
+    version?: number;
+}

package/dist/api/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/api/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/api/types.ts"],"names":[],"mappings":""}

package/dist/approval/auditLog.d.ts

@@ -0,0 +1,3 @@
+import type { AuditEntry } from './types';
+export declare function appendAudit(entry: AuditEntry): void;
+export declare function readAudit(limit?: number): AuditEntry[];

package/dist/approval/auditLog.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appendAudit = appendAudit;
+exports.readAudit = readAudit;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const AUDIT_DIR = path.join(os.homedir(), '.securecode');
+const AUDIT_FILE = path.join(AUDIT_DIR, 'approval-audit.log');
+function appendAudit(entry) {
+    try {
+        if (!fs.existsSync(AUDIT_DIR)) {
+            fs.mkdirSync(AUDIT_DIR, { recursive: true, mode: 0o700 });
+        }
+        const line = JSON.stringify(entry) + '\n';
+        fs.appendFileSync(AUDIT_FILE, line, { mode: 0o600 });
+    }
+    catch {
+        // best effort — audit failure must not block the operation
+    }
+}
+function readAudit(limit = 100) {
+    try {
+        if (!fs.existsSync(AUDIT_FILE))
+            return [];
+        const raw = fs.readFileSync(AUDIT_FILE, 'utf8');
+        const lines = raw.trim().split('\n').filter(Boolean);
+        return lines.slice(-limit).map((line) => JSON.parse(line));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=auditLog.js.map

package/dist/approval/auditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditLog.js","sourceRoot":"","sources":["../../src/approval/auditLog.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,kCAUC;AAED,8BASC;AA7BD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAGzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAE9D,SAAgB,WAAW,CAAC,KAAiB;IACzC,IAAI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC1C,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACL,2DAA2D;IAC/D,CAAC;AACL,CAAC;AAED,SAAgB,SAAS,CAAC,QAAgB,GAAG;IACzC,IAAI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC"}

package/dist/approval/broker.d.ts

@@ -0,0 +1,11 @@
+import { type ApprovalResult } from './types';
+export declare class ApprovalBroker {
+    private server;
+    private port;
+    private pending;
+    start(): Promise<number>;
+    stop(): Promise<void>;
+    getPort(): number;
+    requestApproval(tool: string, summary: string, operationParts: unknown[], timeoutMs?: number): Promise<ApprovalResult>;
+    private handle;
+}