@securecode-ai/mcp 0.5.4 → 0.5.6

package/dist/approval/policy.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_POLICIES = void 0;
+exports.getToolPolicy = getToolPolicy;
+exports.validateAllToolsHavePolicies = validateAllToolsHavePolicies;
+exports.TOOL_POLICIES = {
+    'securecode.scan': {
+        name: 'securecode.scan',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.map': {
+        name: 'securecode.map',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.scan-dependencies': {
+        name: 'securecode.scan-dependencies',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.scan-batch': {
+        name: 'securecode.scan-batch',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.scan-secrets': {
+        name: 'securecode.scan-secrets',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.agent-scan': {
+        name: 'securecode.agent-scan',
+        category: 'read-only',
+        requiresApproval: false,
+        approvalNote: 'Agent scan investigation is read-only. Fix generation within agent-scan requires its own approval prompt.',
+    },
+    'securecode.record-false-positive': {
+        name: 'securecode.record-false-positive',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.get-agent-memory': {
+        name: 'securecode.get-agent-memory',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.clear-agent-memory': {
+        name: 'securecode.clear-agent-memory',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.add-known-fact': {
+        name: 'securecode.add-known-fact',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.review-findings': {
+        name: 'securecode.review-findings',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.decide-finding': {
+        name: 'securecode.decide-finding',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.clear-finding-reviews': {
+        name: 'securecode.clear-finding-reviews',
+        category: 'read-only',
+        requiresApproval: false,
+    },
+    'securecode.fix': {
+        name: 'securecode.fix',
+        category: 'paid-generation',
+        requiresApproval: true,
+        approvalNote: 'Fix generation calls /fix (consumes credits) and returns a patch. Approval required before the API call.',
+    },
+    'securecode.run-tests': {
+        name: 'securecode.run-tests',
+        category: 'paid-generation',
+        requiresApproval: true,
+        approvalNote: 'Test execution runs code in a sandbox. Approval required before execution.',
+    },
+    'securecode.attack': {
+        name: 'securecode.attack',
+        category: 'paid-generation',
+        requiresApproval: true,
+        approvalNote: 'Attack sends HTTP probes to a localhost server. Approval required. Currently disabled via SECURECODE_ATTACK_ENABLED.',
+    },
+};
+function getToolPolicy(toolName) {
+    return exports.TOOL_POLICIES[toolName];
+}
+function validateAllToolsHavePolicies(registeredTools) {
+    const missing = [];
+    for (const name of registeredTools) {
+        if (!exports.TOOL_POLICIES[name]) {
+            missing.push(name);
+        }
+    }
+    return missing;
+}
+//# sourceMappingURL=policy.js.map

package/dist/approval/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/approval/policy.ts"],"names":[],"mappings":";;;AAgGA,sCAEC;AAED,oEAQC;AAnGY,QAAA,aAAa,GAA+B;IACrD,iBAAiB,EAAE;QACf,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,gBAAgB,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,8BAA8B,EAAE;QAC5B,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,uBAAuB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,yBAAyB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,uBAAuB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,2GAA2G;KAC5H;IACD,kCAAkC,EAAE;QAChC,IAAI,EAAE,kCAAkC;QACxC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,6BAA6B,EAAE;QAC3B,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,+BAA+B,EAAE;QAC7B,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,2BAA2B,EAAE;QACzB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,4BAA4B,EAAE;QAC1B,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,2BAA2B,EAAE;QACzB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,kCAAkC,EAAE;QAChC,IAAI,EAAE,kCAAkC;QACxC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,KAAK;KAC1B;IACD,gBAAgB,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,iBAAiB;QAC3B,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,0GAA0G;KAC3H;IACD,sBAAsB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,iBAAiB;QAC3B,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,4EAA4E;KAC7F;IACD,mBAAmB,EAAE;QACjB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,sHAAsH;KACvI;CACJ,CAAC;AAEF,SAAgB,aAAa,CAAC,QAAgB;IAC1C,OAAO,qBAAa,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,4BAA4B,CAAC,eAAyB;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,CAAC,qBAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/approval/types.d.ts

@@ -1,3 +1,4 @@
+export type OperationCategory = 'read-only' | 'sandboxed-verification' | 'paid-generation' | 'workspace-mutation';
 export interface ApprovalRequest {
     id: string;
     tool: string;
@@ -5,22 +6,30 @@ export interface ApprovalRequest {
     operationHash: string;
     createdAt: number;
     expiresAt: number;
+    decisionToken: string;
+    category: OperationCategory;
+    workspaceId: string | null;
 }
 export interface ApprovalResult {
     approved: boolean;
     reason: string;
     requestId: string;
     duration: number;
+    category?: OperationCategory;
 }
+export type AuditReason = 'approved' | 'denied' | 'timeout' | 'cancelled' | 'expired' | 'invalid-token' | 'replayed' | 'shutdown';
 export interface AuditEntry {
     timestamp: string;
     requestId: string;
     tool: string;
     operationHash: string;
+    category: OperationCategory | 'unknown';
+    workspaceId: string | null;
     approved: boolean;
-    reason: string;
+    reason: AuditReason;
     durationMs: number;
 }
 export declare function hashOperation(tool: string, ...parts: unknown[]): string;
-export declare function createApprovalRequest(tool: string, summary: string, operationParts: unknown[], timeoutMs?: number): ApprovalRequest;
+export declare function workspaceIdFromRoot(workspaceRoot: string | null): string | null;
+export declare function createApprovalRequest(tool: string, summary: string, operationParts: unknown[], timeoutMs?: number, category?: OperationCategory, workspaceRoot?: string | null): ApprovalRequest;
 export declare function isExpired(req: ApprovalRequest, now?: number): boolean;

package/dist/approval/types.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.hashOperation = hashOperation;
+exports.workspaceIdFromRoot = workspaceIdFromRoot;
 exports.createApprovalRequest = createApprovalRequest;
 exports.isExpired = isExpired;
 const crypto = __importStar(require("crypto"));
@@ -41,7 +42,12 @@ function hashOperation(tool, ...parts) {
     const data = JSON.stringify({ tool, parts });
     return crypto.createHash('sha256').update(data).digest('hex').substring(0, 16);
 }
-function createApprovalRequest(tool, summary, operationParts, timeoutMs = 60_000) {
+function workspaceIdFromRoot(workspaceRoot) {
+    if (!workspaceRoot)
+        return null;
+    return crypto.createHash('sha256').update(workspaceRoot).digest('hex').substring(0, 16);
+}
+function createApprovalRequest(tool, summary, operationParts, timeoutMs = 60_000, category = 'paid-generation', workspaceRoot = null) {
     const now = Date.now();
     return {
         id: crypto.randomUUID(),
@@ -50,6 +56,9 @@ function createApprovalRequest(tool, summary, operationParts, timeoutMs = 60_000
         operationHash: hashOperation(tool, ...operationParts),
         createdAt: now,
         expiresAt: now + timeoutMs,
+        decisionToken: crypto.randomBytes(16).toString('hex'),
+        category,
+        workspaceId: workspaceIdFromRoot(workspaceRoot),
     };
 }
 function isExpired(req, now = Date.now()) {

package/dist/approval/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/approval/types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,sCAGC;AAED,sDAeC;AAED,8BAEC;AApDD,+CAAiC;AA4BjC,SAAgB,aAAa,CAAC,IAAY,EAAE,GAAG,KAAgB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAgB,qBAAqB,CACjC,IAAY,EACZ,OAAe,EACf,cAAyB,EACzB,YAAoB,MAAM;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACH,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI;QACJ,OAAO;QACP,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,cAAc,CAAC;QACrD,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,SAAS;KAC7B,CAAC;AACN,CAAC;AAED,SAAgB,SAAS,CAAC,GAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpE,OAAO,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/approval/types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,sCAGC;AAED,kDAGC;AAED,sDAoBC;AAED,8BAEC;AApFD,+CAAiC;AAkDjC,SAAgB,aAAa,CAAC,IAAY,EAAE,GAAG,KAAgB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAgB,mBAAmB,CAAC,aAA4B;IAC5D,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAgB,qBAAqB,CACjC,IAAY,EACZ,OAAe,EACf,cAAyB,EACzB,YAAoB,MAAM,EAC1B,WAA8B,iBAAiB,EAC/C,gBAA+B,IAAI;IAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACH,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI;QACJ,OAAO;QACP,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,cAAc,CAAC;QACrD,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,SAAS;QAC1B,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrD,QAAQ;QACR,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC;KAClD,CAAC;AACN,CAAC;AAED,SAAgB,SAAS,CAAC,GAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpE,OAAO,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;AAC/B,CAAC"}

package/dist/attack/agentScanExecutor.d.ts

@@ -8,5 +8,39 @@
  */
 import { ApiClient } from '../api/client';
 import type { ServerContext } from '../mcp/types';
-import type { AgentScanAction, AgentScanTarget } from './agentScanProtocol';
+import type { AgentScanAction, AgentScanTarget, ReadFileObservation, StructuredFlowResult } from './agentScanProtocol';
+export declare const MAX_OBSERVATION_CHARS = 16000;
+export declare const LARGE_FILE_THRESHOLD = 300;
+export declare function truncate(text: string): string;
+export declare function redact(text: string): string;
+export declare function extractFunctionMap(content: string, relPath: string): Promise<string | null>;
+export interface FunctionBoundary {
+    name: string;
+    startLine: number;
+    endLine: number;
+    kind: string;
+}
+export declare function extractFunctionBoundaries(content: string, relPath: string): Promise<FunctionBoundary[] | null>;
+/**
+ * Execute a read_file action and return structured metadata alongside the
+ * redacted observation string.
+ *
+ * The loop uses `actualStart..actualEnd` to record coverage — this is the
+ * range the executor actually delivered, which may differ from the requested
+ * range in three ways:
+ *
+ * 1. Requested range clamped to file bounds (e.g., endLine=2000 on a 500-line
+ *    file → actualEnd=500).
+ * 2. Large file (> LARGE_FILE_THRESHOLD) with no startLine/endLine → the
+ *    executor returns a function map, not raw content. `truncated === true`
+ *    and actualStart/actualEnd are 0 (no content lines delivered).
+ * 3. Small file with no startLine/endLine → full content returned,
+ *    actualStart=1, actualEnd=totalLines, truncated=false.
+ */
+export declare function executeReadFileAction(action: AgentScanAction, ctx: ServerContext): Promise<ReadFileObservation>;
 export declare function executeAction(action: AgentScanAction, ctx: ServerContext, runId: string, client: ApiClient, target: AgentScanTarget): Promise<string>;
+export interface FlowActionResult {
+    observation: string;
+    flowResult: StructuredFlowResult;
+}
+export declare function executeFlowAction(action: AgentScanAction, ctx: ServerContext, runId: string, client: ApiClient, target: AgentScanTarget): Promise<FlowActionResult>;