@securecode-ai/mcp 0.5.4 → 0.5.6

package/dist/attack/agentScanProtocol.js

@@ -6,13 +6,119 @@
  * Types are duplicated (not shared) between the API and MCP repos.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AGENT_SCAN_DEFAULTS = void 0;
+exports.FIX_VERIFY_DEFAULTS = exports.VerifyBudgetTracker = exports.VERIFY_DEFAULTS = exports.AGENT_SCAN_SUPPORTED_ACTIONS = exports.AGENT_SCAN_PROTOCOL_VERSION = exports.AGENT_SCAN_DEFAULTS = void 0;
+exports.defaultClientCapabilities = defaultClientCapabilities;
+exports.defaultVerifyBudget = defaultVerifyBudget;
+exports.defaultFixVerifyBudget = defaultFixVerifyBudget;
 exports.AGENT_SCAN_DEFAULTS = {
-    maxSteps: 30,
-    costCapUsd: 0.50,
-    wallClockMs: 300_000,
+    initialSteps: 40,
+    extensionSize: 10,
+    hardMaxSteps: 80,
+    maxSteps: 80,
+    costCapUsd: 1.20,
+    wallClockMs: 720_000,
     perStepEstimateUsd: 0.08,
     creditsPerRun: 5,
     dailyRunLimit: 20,
+    blockedReadRecoveryLimit: 5,
 };
+// ── Protocol versioning + capability negotiation ─────────────────────────────
+//
+// When the API adds a new agent action, old MCPs that don't know about it
+// would crash trying to execute it. Capability negotiation lets the API
+// filter the LLM's action enum to only include actions the connected MCP
+// actually supports, preventing the mismatch.
+//
+// PROTOCOL_VERSION is bumped when the wire contract changes in a way that
+// is not backward-compatible (e.g., a required field is added). Adding a
+// new optional action type only requires adding it to SUPPORTED_ACTIONS
+// and bumping the MCP version — the API filters its schema accordingly.
+exports.AGENT_SCAN_PROTOCOL_VERSION = 5;
+exports.AGENT_SCAN_SUPPORTED_ACTIONS = [
+    'read_file', 'search_code', 'trace_flow', 'trace_flow_cross_file',
+    'check_guard', 'check_policy', 'get_endpoints', 'list_imports',
+    'list_files', 'call_graph', 'git_blame', 'git_history', 'git_diff',
+    'check_dependencies', 'read_config', 'find_definition', 'find_references', 'find_tests', 'run_tests',
+    'finish',
+];
+function defaultClientCapabilities() {
+    return {
+        protocolVersion: exports.AGENT_SCAN_PROTOCOL_VERSION,
+        supportedActions: exports.AGENT_SCAN_SUPPORTED_ACTIONS,
+    };
+}
+exports.VERIFY_DEFAULTS = {
+    maxFindings: 10,
+    maxRoundsPerFinding: 12,
+    maxLlmCalls: 60, // 10 findings × 12 rounds × 2 calls = 240 max; default to ~25%
+    maxWallClockMs: 10 * 60_000, // 10 minutes
+    costCapUsd: 0.80,
+};
+function defaultVerifyBudget(overrides) {
+    return {
+        maxFindings: overrides?.maxFindings ?? exports.VERIFY_DEFAULTS.maxFindings,
+        maxRoundsPerFinding: overrides?.maxRoundsPerFinding ?? exports.VERIFY_DEFAULTS.maxRoundsPerFinding,
+        maxLlmCalls: overrides?.maxLlmCalls ?? exports.VERIFY_DEFAULTS.maxLlmCalls,
+        maxWallClockMs: overrides?.maxWallClockMs ?? exports.VERIFY_DEFAULTS.maxWallClockMs,
+        costCapUsd: overrides?.costCapUsd ?? exports.VERIFY_DEFAULTS.costCapUsd,
+    };
+}
+/** Mutable tracker used by the verify loop to enforce a VerifyBudget. */
+class VerifyBudgetTracker {
+    findingsAttempted = 0;
+    roundsUsed = 0;
+    llmCallsUsed = 0;
+    costSpentUsd = 0;
+    startedAtMs = Date.now();
+    budget;
+    constructor(budget) {
+        this.budget = budget;
+    }
+    get wallClockElapsedMs() { return Date.now() - this.startedAtMs; }
+    canAttemptFinding() {
+        if (this.findingsAttempted >= this.budget.maxFindings)
+            return false;
+        if (this.llmCallsUsed >= this.budget.maxLlmCalls)
+            return false;
+        if (this.wallClockElapsedMs >= this.budget.maxWallClockMs)
+            return false;
+        if (this.costSpentUsd >= this.budget.costCapUsd)
+            return false;
+        return true;
+    }
+    canAttemptRound() {
+        if (this.llmCallsUsed + 2 > this.budget.maxLlmCalls)
+            return false; // need generate + analyze
+        if (this.wallClockElapsedMs >= this.budget.maxWallClockMs)
+            return false;
+        if (this.costSpentUsd >= this.budget.costCapUsd)
+            return false;
+        return true;
+    }
+    /** Remaining wall-clock in ms; floored at 1000 to avoid zero-timeout spawns. */
+    remainingWallClockMs() {
+        return Math.max(1000, this.budget.maxWallClockMs - this.wallClockElapsedMs);
+    }
+    recordLlmCall(costUsd) {
+        this.llmCallsUsed += 1;
+        this.costSpentUsd += costUsd;
+    }
+}
+exports.VerifyBudgetTracker = VerifyBudgetTracker;
+exports.FIX_VERIFY_DEFAULTS = {
+    maxFindings: 1,
+    maxRoundsPerFinding: 3,
+    maxLlmCalls: 6,
+    maxWallClockMs: 120_000,
+    costCapUsd: 0.20,
+};
+function defaultFixVerifyBudget(overrides) {
+    return {
+        maxFindings: overrides?.maxFindings ?? exports.FIX_VERIFY_DEFAULTS.maxFindings,
+        maxRoundsPerFinding: overrides?.maxRoundsPerFinding ?? exports.FIX_VERIFY_DEFAULTS.maxRoundsPerFinding,
+        maxLlmCalls: overrides?.maxLlmCalls ?? exports.FIX_VERIFY_DEFAULTS.maxLlmCalls,
+        maxWallClockMs: overrides?.maxWallClockMs ?? exports.FIX_VERIFY_DEFAULTS.maxWallClockMs,
+        costCapUsd: overrides?.costCapUsd ?? exports.FIX_VERIFY_DEFAULTS.costCapUsd,
+    };
+}
 //# sourceMappingURL=agentScanProtocol.js.map

package/dist/attack/agentScanProtocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentScanProtocol.js","sourceRoot":"","sources":["../../src/attack/agentScanProtocol.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEU,QAAA,mBAAmB,GAAG;IAC/B,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,OAAO;IACpB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,EAAE;CACX,CAAC"}
+{"version":3,"file":"agentScanProtocol.js","sourceRoot":"","sources":["../../src/attack/agentScanProtocol.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkEH,8DAKC;AA0nBD,kDAQC;AAoED,wDAQC;AAnxBY,QAAA,mBAAmB,GAAG;IAC/B,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,OAAO;IACpB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,EAAE;IACjB,wBAAwB,EAAE,CAAC;CACrB,CAAC;AAEX,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AAE3D,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAEhC,QAAA,4BAA4B,GAA0B;IAC/D,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB;IACjE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc;IAC9D,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU;IAClE,oBAAoB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW;IACpG,QAAQ;CACX,CAAC;AA+BF,SAAgB,yBAAyB;IACrC,OAAO;QACH,eAAe,EAAE,mCAA2B;QAC5C,gBAAgB,EAAE,oCAA4B;KACjD,CAAC;AACN,CAAC;AAknBY,QAAA,eAAe,GAAG;IAC3B,WAAW,EAAE,EAAE;IACf,mBAAmB,EAAE,EAAE;IACvB,WAAW,EAAE,EAAE,EAAW,+DAA+D;IACzF,cAAc,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa;IAC1C,UAAU,EAAE,IAAI;CACV,CAAC;AAEX,SAAgB,mBAAmB,CAAC,SAAiC;IACjE,OAAO;QACH,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,uBAAe,CAAC,WAAW;QAClE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,IAAI,uBAAe,CAAC,mBAAmB;QAC1F,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,uBAAe,CAAC,WAAW;QAClE,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,uBAAe,CAAC,cAAc;QAC3E,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,uBAAe,CAAC,UAAU;KAClE,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,MAAa,mBAAmB;IAC5B,iBAAiB,GAAG,CAAC,CAAC;IACtB,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAG,CAAC,CAAC;IACjB,YAAY,GAAG,CAAC,CAAC;IACR,WAAW,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,CAAe;IAE9B,YAAY,MAAoB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,kBAAkB,KAAa,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE1E,iBAAiB;QACb,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,eAAe;QACX,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC,CAAC,0BAA0B;QAC7F,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,gFAAgF;IAChF,oBAAoB;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChF,CAAC;IAED,aAAa,CAAC,OAAe;QACzB,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC;IACjC,CAAC;CACJ;AAtCD,kDAsCC;AAmBY,QAAA,mBAAmB,GAAG;IAC/B,WAAW,EAAE,CAAC;IACd,mBAAmB,EAAE,CAAC;IACtB,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,OAAO;IACvB,UAAU,EAAE,IAAI;CACV,CAAC;AAEX,SAAgB,sBAAsB,CAAC,SAAiC;IACpE,OAAO;QACH,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,2BAAmB,CAAC,WAAW;QACtE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,IAAI,2BAAmB,CAAC,mBAAmB;QAC9F,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,2BAAmB,CAAC,WAAW;QACtE,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,2BAAmB,CAAC,cAAc;QAC/E,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,2BAAmB,CAAC,UAAU;KACtE,CAAC;AACN,CAAC"}

package/dist/attack/agentTrace.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Agent trace — structured per-step event logging for agent scan runs.
+ *
+ * Every tool call, LLM call, blocked action, and verify round is recorded
+ * as a structured event correlated by runId + stepIndex. Events are stored
+ * locally in `.securecode/agent-runs/<runId>/events.jsonl` (one JSON per
+ * line) for replay and debugging.
+ *
+ * Privacy: local tool observations and source code NEVER leave the machine.
+ * The API logs metadata only (model, tokens, cost, latency, action type).
+ *
+ * Retention: 7 days or 20 runs per workspace, whichever is less.
+ */
+export type AgentEventType = 'run_started' | 'step_requested' | 'action_selected' | 'tool_completed' | 'tool_blocked' | 'model_retry' | 'critique_completed' | 'verify_round' | 'finding_finalized' | 'run_completed';
+export interface AgentTraceEvent {
+    timestamp: string;
+    runId: string;
+    stepIndex: number;
+    eventType: AgentEventType;
+    /** Action type selected by the LLM (action_selected, tool_completed, tool_blocked). */
+    actionType?: string;
+    /** Tool observation (tool_completed only) — redacted + truncated. */
+    observation?: string;
+    /** Blocked reason (tool_blocked only). */
+    blockedReason?: string;
+    /** LLM metadata (step_requested, action_selected, model_retry). */
+    model?: string;
+    provider?: string;
+    tokens?: number;
+    costUsd?: number;
+    latencyMs?: number;
+    fallbackFired?: boolean;
+    /** Verify round metadata (verify_round). */
+    verifyRound?: number;
+    verifyVerdict?: string;
+    /** Finding metadata (finding_finalized). */
+    findingType?: string;
+    findingLine?: number;
+    findingConfidence?: number;
+    findingProven?: string;
+    findingEvidenceLevel?: string;
+    /** Run status (run_started, run_completed). */
+    runStatus?: string;
+    /** Error message (any event type). */
+    error?: string;
+}
+export declare class AgentTraceLogger {
+    private workspaceRoot;
+    private runId;
+    private stepIndex;
+    private events;
+    constructor(workspaceRoot: string, runId: string);
+    log(event: Omit<AgentTraceEvent, 'timestamp' | 'runId' | 'stepIndex'>): void;
+    nextStep(): void;
+    logRunStarted(): void;
+    logStepRequested(model?: string, tokens?: number, costUsd?: number, latencyMs?: number): void;
+    logActionSelected(actionType: string, model?: string, fallbackFired?: boolean): void;
+    logToolCompleted(actionType: string, observation: string, latencyMs?: number): void;
+    logToolBlocked(actionType: string, reason: string): void;
+    logModelRetry(error: string): void;
+    logCritiqueCompleted(verdict: string, issues: number): void;
+    logVerifyRound(round: number, verdict: string): void;
+    logFindingFinalized(type: string, line: number, confidence: number, proven: string, evidenceLevel?: string): void;
+    logRunCompleted(status: string): void;
+    getEvents(): AgentTraceEvent[];
+}
+export declare function readTraceEvents(workspaceRoot: string, runId: string): AgentTraceEvent[];
+export declare function listRecentRuns(workspaceRoot: string): {
+    runId: string;
+    createdAt: string;
+    eventCount: number;
+}[];
+export declare function formatTraceForReplay(events: AgentTraceEvent[]): string;

package/dist/attack/agentTrace.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * Agent trace — structured per-step event logging for agent scan runs.
+ *
+ * Every tool call, LLM call, blocked action, and verify round is recorded
+ * as a structured event correlated by runId + stepIndex. Events are stored
+ * locally in `.securecode/agent-runs/<runId>/events.jsonl` (one JSON per
+ * line) for replay and debugging.
+ *
+ * Privacy: local tool observations and source code NEVER leave the machine.
+ * The API logs metadata only (model, tokens, cost, latency, action type).
+ *
+ * Retention: 7 days or 20 runs per workspace, whichever is less.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentTraceLogger = void 0;
+exports.readTraceEvents = readTraceEvents;
+exports.listRecentRuns = listRecentRuns;
+exports.formatTraceForReplay = formatTraceForReplay;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const RUNS_DIR = '.securecode';
+const MAX_RUN_AGE_MS = 7 * 24 * 60 * 60 * 1000;
+const MAX_RUNS_PER_WORKSPACE = 20;
+function eventsFilePath(workspaceRoot, runId) {
+    return path.join(workspaceRoot, RUNS_DIR, 'agent-runs', runId, 'events.jsonl');
+}
+function ensureRunDir(workspaceRoot, runId) {
+    const dir = path.dirname(eventsFilePath(workspaceRoot, runId));
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    return dir;
+}
+class AgentTraceLogger {
+    workspaceRoot;
+    runId;
+    stepIndex = 0;
+    events = [];
+    constructor(workspaceRoot, runId) {
+        this.workspaceRoot = workspaceRoot;
+        this.runId = runId;
+        ensureRunDir(workspaceRoot, runId);
+    }
+    log(event) {
+        const fullEvent = {
+            timestamp: new Date().toISOString(),
+            runId: this.runId,
+            stepIndex: this.stepIndex,
+            ...event,
+        };
+        this.events.push(fullEvent);
+        try {
+            fs.appendFileSync(eventsFilePath(this.workspaceRoot, this.runId), JSON.stringify(fullEvent) + '\n', 'utf8');
+        }
+        catch { /* best-effort — tracing must never break the scan */ }
+    }
+    nextStep() {
+        this.stepIndex++;
+    }
+    logRunStarted() {
+        this.log({ eventType: 'run_started', runStatus: 'started' });
+    }
+    logStepRequested(model, tokens, costUsd, latencyMs) {
+        this.log({ eventType: 'step_requested', model, tokens, costUsd, latencyMs });
+    }
+    logActionSelected(actionType, model, fallbackFired) {
+        this.log({ eventType: 'action_selected', actionType, model, fallbackFired });
+    }
+    logToolCompleted(actionType, observation, latencyMs) {
+        this.log({ eventType: 'tool_completed', actionType, observation: observation.slice(0, 2000), latencyMs });
+    }
+    logToolBlocked(actionType, reason) {
+        this.log({ eventType: 'tool_blocked', actionType, blockedReason: reason });
+    }
+    logModelRetry(error) {
+        this.log({ eventType: 'model_retry', error });
+    }
+    logCritiqueCompleted(verdict, issues) {
+        this.log({ eventType: 'critique_completed', error: `${verdict} (${issues} issues)` });
+    }
+    logVerifyRound(round, verdict) {
+        this.log({ eventType: 'verify_round', verifyRound: round, verifyVerdict: verdict });
+    }
+    logFindingFinalized(type, line, confidence, proven, evidenceLevel) {
+        this.log({
+            eventType: 'finding_finalized',
+            findingType: type, findingLine: line, findingConfidence: confidence,
+            findingProven: proven, findingEvidenceLevel: evidenceLevel,
+        });
+    }
+    logRunCompleted(status) {
+        this.log({ eventType: 'run_completed', runStatus: status });
+    }
+    getEvents() {
+        return [...this.events];
+    }
+}
+exports.AgentTraceLogger = AgentTraceLogger;
+function readTraceEvents(workspaceRoot, runId) {
+    const filePath = eventsFilePath(workspaceRoot, runId);
+    try {
+        const content = fs.readFileSync(filePath, 'utf8');
+        return content
+            .split('\n')
+            .filter(Boolean)
+            .map(line => JSON.parse(line));
+    }
+    catch {
+        return [];
+    }
+}
+function listRecentRuns(workspaceRoot) {
+    const runsDir = path.join(workspaceRoot, RUNS_DIR, 'agent-runs');
+    if (!fs.existsSync(runsDir))
+        return [];
+    const entries = [];
+    const now = Date.now();
+    for (const dir of fs.readdirSync(runsDir)) {
+        const filePath = path.join(runsDir, dir, 'events.jsonl');
+        if (!fs.existsSync(filePath))
+            continue;
+        const stat = fs.statSync(filePath);
+        const ageMs = now - stat.mtimeMs;
+        if (ageMs > MAX_RUN_AGE_MS) {
+            try {
+                fs.rmSync(path.join(runsDir, dir), { recursive: true, force: true });
+            }
+            catch { }
+            continue;
+        }
+        const lineCount = fs.readFileSync(filePath, 'utf8').split('\n').filter(Boolean).length;
+        entries.push({
+            runId: dir,
+            createdAt: new Date(stat.mtimeMs).toISOString(),
+            eventCount: lineCount,
+        });
+    }
+    entries.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    if (entries.length > MAX_RUNS_PER_WORKSPACE) {
+        for (const e of entries.slice(MAX_RUNS_PER_WORKSPACE)) {
+            try {
+                fs.rmSync(path.join(runsDir, e.runId), { recursive: true, force: true });
+            }
+            catch { }
+        }
+    }
+    return entries.slice(0, MAX_RUNS_PER_WORKSPACE);
+}
+function formatTraceForReplay(events) {
+    if (events.length === 0)
+        return 'No events recorded.';
+    const lines = [`Agent run replay (${events.length} events):`];
+    let currentStep = -1;
+    for (const e of events) {
+        if (e.stepIndex !== currentStep) {
+            currentStep = e.stepIndex;
+            lines.push('');
+            lines.push(`── Step ${currentStep} ──`);
+        }
+        switch (e.eventType) {
+            case 'run_started':
+                lines.push(`  [run_started] run started`);
+                break;
+            case 'step_requested':
+                lines.push(`  [step_requested] model=${e.model || '?'} tokens=${e.tokens || 0} cost=$${(e.costUsd || 0).toFixed(4)} ${e.latencyMs || 0}ms`);
+                break;
+            case 'action_selected':
+                lines.push(`  [action_selected] ${e.actionType} (model=${e.model || '?'}${e.fallbackFired ? ' FALLBACK' : ''})`);
+                break;
+            case 'tool_completed':
+                lines.push(`  [tool_completed] ${e.actionType} → ${(e.observation || '').slice(0, 100)}...`);
+                break;
+            case 'tool_blocked':
+                lines.push(`  [tool_blocked] ${e.actionType} — ${e.blockedReason}`);
+                break;
+            case 'model_retry':
+                lines.push(`  [model_retry] ${e.error}`);
+                break;
+            case 'critique_completed':
+                lines.push(`  [critique_completed] ${e.error}`);
+                break;
+            case 'verify_round':
+                lines.push(`  [verify_round] round ${e.verifyRound} → ${e.verifyVerdict}`);
+                break;
+            case 'finding_finalized':
+                lines.push(`  [finding_finalized] ${e.findingType} L${e.findingLine} conf=${e.findingConfidence} proven=${e.findingProven} evidence=${e.findingEvidenceLevel || '?'}`);
+                break;
+            case 'run_completed':
+                lines.push(`  [run_completed] status=${e.runStatus}`);
+                break;
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=agentTrace.js.map

package/dist/attack/agentTrace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentTrace.js","sourceRoot":"","sources":["../../src/attack/agentTrace.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoJH,0CAWC;AAED,wCAmCC;AAED,oDAgDC;AApPD,uCAAyB;AACzB,2CAA6B;AA+C7B,MAAM,QAAQ,GAAG,aAAa,CAAC;AAC/B,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,SAAS,cAAc,CAAC,aAAqB,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,aAAqB,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAa,gBAAgB;IACjB,aAAa,CAAS;IACtB,KAAK,CAAS;IACd,SAAS,GAAW,CAAC,CAAC;IACtB,MAAM,GAAsB,EAAE,CAAC;IAEvC,YAAY,aAAqB,EAAE,KAAa;QAC5C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,KAAiE;QACjE,MAAM,SAAS,GAAoB;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,KAAK;SACX,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,CAAC;YACD,EAAE,CAAC,cAAc,CACb,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,EAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,EAChC,MAAM,CACT,CAAC;QACN,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,aAAa;QACT,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,gBAAgB,CAAC,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,SAAkB;QAClF,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,iBAAiB,CAAC,UAAkB,EAAE,KAAc,EAAE,aAAuB;QACzE,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,gBAAgB,CAAC,UAAkB,EAAE,WAAmB,EAAE,SAAkB;QACxE,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,cAAc,CAAC,UAAkB,EAAE,MAAc;QAC7C,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,aAAa,CAAC,KAAa;QACvB,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,oBAAoB,CAAC,OAAe,EAAE,MAAc;QAChD,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,OAAO,KAAK,MAAM,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,cAAc,CAAC,KAAa,EAAE,OAAe;QACzC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,mBAAmB,CACf,IAAY,EAAE,IAAY,EAAE,UAAkB,EAAE,MAAc,EAAE,aAAsB;QAEtF,IAAI,CAAC,GAAG,CAAC;YACL,SAAS,EAAE,mBAAmB;YAC9B,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU;YACnE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,aAAa;SAC7D,CAAC,CAAC;IACP,CAAC;IAED,eAAe,CAAC,MAAc;QAC1B,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,SAAS;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACJ;AAlFD,4CAkFC;AAED,SAAgB,eAAe,CAAC,aAAqB,EAAE,KAAa;IAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,OAAO;aACT,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,SAAgB,cAAc,CAAC,aAAqB;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,OAAO,GAA+D,EAAE,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACtF,SAAS;QACb,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;YAC/C,UAAU,EAAE,SAAS;SACxB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAE/D,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QAC9F,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAyB;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAEtD,MAAM,KAAK,GAAa,CAAC,qBAAqB,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IAErB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,WAAW,GAAG,CAAC,CAAC,SAAS,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,WAAW,WAAW,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;YAClB,KAAK,aAAa;gBACd,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAC1C,MAAM;YACV,KAAK,gBAAgB;gBACjB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,KAAK,IAAI,GAAG,WAAW,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5I,MAAM;YACV,KAAK,iBAAiB;gBAClB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,UAAU,WAAW,CAAC,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACjH,MAAM;YACV,KAAK,gBAAgB;gBACjB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7F,MAAM;YACV,KAAK,cAAc;gBACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;gBACpE,MAAM;YACV,KAAK,aAAa;gBACd,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzC,MAAM;YACV,KAAK,oBAAoB;gBACrB,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,MAAM;YACV,KAAK,cAAc;gBACf,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC3E,MAAM;YACV,KAAK,mBAAmB;gBACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,iBAAiB,WAAW,CAAC,CAAC,aAAa,aAAa,CAAC,CAAC,oBAAoB,IAAI,GAAG,EAAE,CAAC,CAAC;gBACvK,MAAM;YACV,KAAK,eAAe;gBAChB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACtD,MAAM;QACd,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/attack/architectureScoutExecutor.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Architecture scout executor — dispatches each scout action to the right
+ * tool and returns a redacted, truncated observation string.
+ *
+ * This is a SUBSET of the agent-scan executor: only the
+ * architecture-relevant tools (read_file, search_code, list_files,
+ * list_imports, get_endpoints, call_graph, read_config, check_dependencies,
+ * find_definition, find_references). Vulnerability-confirmation tools
+ * (trace_flow, check_guard, check_policy, git_*, find_tests, run_tests)
+ * are NOT available — the scout surveys architecture, it does not confirm
+ * vulnerabilities.
+ *
+ * All tools run locally (no API round-trip — the scout has no equivalent
+ * of the agent-scan check_policy that calls back to the API).
+ */
+import type { ServerContext } from '../mcp/types';
+import type { ArchitectureScoutAction } from './architectureScoutProtocol';
+export declare function executeScoutAction(action: ArchitectureScoutAction, ctx: ServerContext): Promise<string>;