@shield-agent/kya 0.24.2 → 0.26.0

package/dist/discover/push.js

@@ -0,0 +1,40 @@
+/**
+ * Hosted sync for discovery snapshots.
+ *
+ * Pushes the local endpoint inventory to `POST /api/v1/kya/endpoints` on the
+ * hosted console. This is fire-and-forget from the scanner's perspective: it
+ * returns an outcome object so the CLI can print status, but it never throws.
+ */
+import { CLI_VERSION } from "../version.js";
+function stripTrailingSlash(url) {
+    return url.endsWith("/") ? url.slice(0, -1) : url;
+}
+export async function pushDiscoverySnapshot(snapshot, opts) {
+    const baseUrl = stripTrailingSlash(opts.baseUrl.trim());
+    const url = `${baseUrl}/api/v1/kya/endpoints`;
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    try {
+        const res = await fetchFn(url, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${opts.apiKey.trim()}`,
+                "Content-Type": "application/json; charset=utf-8",
+                "User-Agent": `shield-agent-kya-cli/${CLI_VERSION}`,
+            },
+            body: JSON.stringify(snapshot),
+            signal: AbortSignal.timeout(timeoutMs),
+            redirect: "error",
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            return { ok: false, status: res.status, error: `HTTP ${res.status}${text ? ` ${text}` : ""}` };
+        }
+        return { ok: true, status: res.status };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { ok: false, status: 0, error: message };
+    }
+}
+//# sourceMappingURL=push.js.map

package/dist/discover/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/discover/push.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAgB5C,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAA2B,EAC3B,IAAiB;IAEjB,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,OAAO,uBAAuB,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;gBAC7C,cAAc,EAAE,iCAAiC;gBACjD,YAAY,EAAE,wBAAwB,WAAW,EAAE;aACpD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/discover/scan.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Endpoint discovery scanner.
+ *
+ * Collects a best-effort inventory of AI agents, IDE extensions, desktop apps,
+ * model runtimes, and MCP servers present on the local workstation. The scanner
+ * only inspects paths and config files; it never executes discovered binaries
+ * and never connects to runtime ports.
+ */
+import type { DiscoveryCategory } from "./catalog.js";
+export type Confidence = "high" | "medium" | "low";
+export interface DiscoveryEvidence {
+    readonly path?: string;
+    readonly version?: string;
+    readonly port?: number;
+    readonly command?: string;
+    readonly configPath?: string;
+}
+export interface DiscoveryFinding {
+    readonly id: string;
+    readonly name: string;
+    readonly vendor: string;
+    readonly category: DiscoveryCategory;
+    readonly source: string;
+    readonly confidence: Confidence;
+    readonly evidence: DiscoveryEvidence;
+}
+export interface DiscoveryCoverage {
+    readonly attempted: readonly string[];
+    readonly unavailable: readonly string[];
+    readonly truncated: boolean;
+}
+export interface DiscoverySnapshot {
+    readonly endpointUid: string;
+    readonly hostnameHash: string;
+    readonly os: "darwin" | "linux" | "win32" | "unknown";
+    readonly capturedAt: string;
+    readonly inventory: readonly DiscoveryFinding[];
+    readonly coverage: DiscoveryCoverage;
+}
+export interface ScanOptions {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly cwd?: string;
+    readonly now?: Date;
+    /** Injected fs-ish object for tests. */
+    readonly fs?: ScanFs;
+    /** Override PATH directories (defaults to process.env.PATH). */
+    readonly pathDirs?: readonly string[];
+    /** Override home dir used for redaction (defaults to os.homedir()). */
+    readonly homeDir?: string;
+    /** Override OS platform (defaults to process.platform). */
+    readonly platform?: string;
+}
+export interface ScanFs {
+    existsSync(path: string): boolean;
+    statSync(path: string): {
+        isFile(): boolean;
+        isDirectory(): boolean;
+        mode: number;
+        size: number;
+    };
+    readdirSync(path: string): readonly string[];
+    readFileSync(path: string, encoding: "utf8"): string;
+}
+export declare function buildEndpointId(os: DiscoverySnapshot["os"]): {
+    endpointUid: string;
+    hostnameHash: string;
+};
+export declare function scanCliBinaries(pathDirs: readonly string[], fs: ScanFs, platformName: string): DiscoveryFinding[];
+export declare function scanIdeExtensions(extensionRoots: readonly string[], fs: ScanFs): DiscoveryFinding[];
+export declare function scanDesktopApps(appDirs: readonly string[], fs: ScanFs, platformName: string): DiscoveryFinding[];
+export declare function scanModelRuntimes(pathDirs: readonly string[], fs: ScanFs, platformName: string): DiscoveryFinding[];
+export declare function scanMcpServers(configPaths: readonly string[], fs: ScanFs): DiscoveryFinding[];
+export declare function scanEndpoint(options?: ScanOptions): DiscoverySnapshot;
+//# sourceMappingURL=scan.d.ts.map

package/dist/discover/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/discover/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IACpB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,MAAM;IACrB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,IAAI,OAAO,CAAC;QAAC,WAAW,IAAI,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClG,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IAC7C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CACtD;AA8DD,wBAAgB,eAAe,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,CAOA;AA4DD,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,gBAAgB,EAAE,CA+BpB;AAED,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,EAAE,EAAE,MAAM,GACT,gBAAgB,EAAE,CAuDpB;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,gBAAgB,EAAE,CAuCpB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,gBAAgB,EAAE,CAoEpB;AA2BD,wBAAgB,cAAc,CAC5B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,EAAE,EAAE,MAAM,GACT,gBAAgB,EAAE,CA2BpB;AAaD,wBAAgB,YAAY,CAAC,OAAO,GAAE,WAAgB,GAAG,iBAAiB,CAgDzE"}

package/dist/discover/scan.js

@@ -0,0 +1,448 @@
+/**
+ * Endpoint discovery scanner.
+ *
+ * Collects a best-effort inventory of AI agents, IDE extensions, desktop apps,
+ * model runtimes, and MCP servers present on the local workstation. The scanner
+ * only inspects paths and config files; it never executes discovered binaries
+ * and never connects to runtime ports.
+ */
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { homedir, hostname, userInfo } from "node:os";
+import { join, sep } from "node:path";
+import { discoveryCatalog, knownDiscoveryVendors } from "./catalog.js";
+const ATTEMPTED_CATEGORIES = [
+    "cli-binaries",
+    "ide-extensions",
+    "desktop-apps",
+    "model-runtimes",
+    "mcp-servers",
+];
+function nodeFs() {
+    return { existsSync, statSync, readdirSync, readFileSync };
+}
+function defaultPathDirs(env) {
+    const raw = env.PATH ?? "";
+    return raw
+        .split(process.platform === "win32" ? ";" : ":")
+        .map((p) => p.trim())
+        .filter((p) => p.length > 0);
+}
+function sha256(input) {
+    return createHash("sha256").update(input).digest("hex");
+}
+function detectOs(raw) {
+    const p = raw ?? process.platform;
+    if (p === "darwin")
+        return "darwin";
+    if (p === "linux")
+        return "linux";
+    if (p === "win32")
+        return "win32";
+    return "unknown";
+}
+function redactValue(value, home) {
+    if (typeof value === "string") {
+        const prefix = home.endsWith(sep) ? home : home + sep;
+        if (value === home)
+            return "~";
+        if (value.startsWith(prefix))
+            return "~" + sep + value.slice(prefix.length);
+    }
+    return value;
+}
+function redactEvidence(evidence, home) {
+    const out = {};
+    for (const [key, value] of Object.entries(evidence)) {
+        out[key] = redactValue(value, home);
+    }
+    return out;
+}
+function isExecutable(st, isWindows) {
+    if (!st.isFile())
+        return false;
+    if (isWindows)
+        return true; // extension check is done by caller
+    // eslint-disable-next-line no-bitwise
+    return (st.mode & constants.S_IXUSR) !== 0 || (st.mode & constants.S_IXOTH) !== 0;
+}
+function isWindowsPlatform(platformName) {
+    return platformName === "win32";
+}
+export function buildEndpointId(os) {
+    const host = hostname();
+    const user = userInfo().username;
+    const hostnameHash = sha256(host);
+    const userHash = sha256(user);
+    const stableId = `${os}:${hostnameHash}:${userHash}`;
+    return { endpointUid: sha256(stableId), hostnameHash };
+}
+function pathCandidates(pathDirs) {
+    const catalog = discoveryCatalog();
+    const candidates = [];
+    for (const [entryId, entry] of catalog) {
+        for (const binary of entry.binaries) {
+            for (const dir of pathDirs) {
+                candidates.push({ entryId, binary, path: join(dir, binary) });
+            }
+        }
+    }
+    return candidates;
+}
+function extensionRootDirs(home, platformName) {
+    if (isWindowsPlatform(platformName)) {
+        const appdata = process.env.APPDATA ?? join(home, "AppData", "Roaming");
+        return [
+            join(appdata, "Cursor", "User", "globalStorage"),
+            join(appdata, "Code", "User", "globalStorage"),
+        ];
+    }
+    if (platformName === "darwin") {
+        return [
+            join(home, "Library", "Application Support", "Cursor", "User", "globalStorage"),
+            join(home, "Library", "Application Support", "Code", "User", "globalStorage"),
+        ];
+    }
+    return [
+        join(home, ".config", "Cursor", "User", "globalStorage"),
+        join(home, ".config", "Code", "User", "globalStorage"),
+    ];
+}
+function desktopAppDirs(platformName) {
+    if (platformName === "darwin")
+        return ["/Applications"];
+    if (platformName === "linux")
+        return ["/usr/share/applications", "/usr/local/share/applications"];
+    if (isWindowsPlatform(platformName)) {
+        const pf = process.env["ProgramFiles"] ?? "C:\\Program Files";
+        const pf86 = process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)";
+        return [pf, pf86];
+    }
+    return [];
+}
+function tryReadJsonFile(fs, path) {
+    try {
+        return JSON.parse(fs.readFileSync(path, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function scanCliBinaries(pathDirs, fs, platformName) {
+    const findings = [];
+    const catalog = discoveryCatalog();
+    const seen = new Set();
+    const isWin = isWindowsPlatform(platformName);
+    for (const { entryId, path } of pathCandidates(pathDirs)) {
+        const key = `${entryId}:${path}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        try {
+            const st = fs.statSync(path);
+            const candidatePath = isWin && !path.toLowerCase().endsWith(".exe") ? `${path}.exe` : path;
+            const candidateSt = candidatePath !== path && fs.existsSync(candidatePath)
+                ? fs.statSync(candidatePath)
+                : st;
+            if (!isExecutable(candidateSt, isWin))
+                continue;
+            const entry = catalog.get(entryId);
+            findings.push({
+                id: entryId,
+                name: entry.name,
+                vendor: entry.vendor,
+                category: entry.category,
+                source: `PATH:${path}`,
+                confidence: "high",
+                evidence: { path: candidatePath },
+            });
+        }
+        catch {
+            /* not found or not readable */
+        }
+    }
+    return findings;
+}
+export function scanIdeExtensions(extensionRoots, fs) {
+    const findings = [];
+    const catalog = discoveryCatalog();
+    const vendors = knownDiscoveryVendors();
+    const seen = new Set();
+    for (const root of extensionRoots) {
+        let entries = [];
+        try {
+            entries = fs.readdirSync(root);
+        }
+        catch {
+            continue;
+        }
+        for (const extId of entries) {
+            const lower = extId.toLowerCase();
+            let matchedEntry;
+            let confidence = "low";
+            for (const [id, entry] of catalog) {
+                for (const marker of entry.extensionMarkers) {
+                    if (lower.includes(marker.toLowerCase())) {
+                        matchedEntry = { id, name: entry.name, vendor: entry.vendor, category: entry.category };
+                        confidence = marker === entry.id ? "medium" : "low";
+                        break;
+                    }
+                }
+                if (matchedEntry)
+                    break;
+            }
+            if (!matchedEntry) {
+                // Generic vendor match: still report as ide-extension with unknown id.
+                const vendor = vendors.find((v) => lower.includes(v));
+                if (vendor) {
+                    matchedEntry = {
+                        id: `ide-ext-${vendor}`,
+                        name: `${vendor} extension`,
+                        vendor,
+                        category: "ide-extension",
+                    };
+                    confidence = "low";
+                }
+            }
+            if (!matchedEntry)
+                continue;
+            const key = `${matchedEntry.id}:${extId}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            findings.push({
+                id: matchedEntry.id,
+                name: matchedEntry.name,
+                vendor: matchedEntry.vendor,
+                category: matchedEntry.category,
+                source: `IDE-EXT:${root}`,
+                confidence,
+                evidence: { path: join(root, extId) },
+            });
+        }
+    }
+    return findings;
+}
+export function scanDesktopApps(appDirs, fs, platformName) {
+    const findings = [];
+    const catalog = discoveryCatalog();
+    const seen = new Set();
+    for (const dir of appDirs) {
+        let entries = [];
+        try {
+            entries = fs.readdirSync(dir);
+        }
+        catch {
+            continue;
+        }
+        for (const name of entries) {
+            const lower = name.toLowerCase();
+            let matchedEntry;
+            for (const [id, entry] of catalog) {
+                for (const appName of entry.appNames) {
+                    if (lower.includes(appName.toLowerCase())) {
+                        matchedEntry = { id, name: entry.name, vendor: entry.vendor, category: "desktop-app" };
+                        break;
+                    }
+                }
+                if (matchedEntry)
+                    break;
+            }
+            if (!matchedEntry)
+                continue;
+            const key = `${matchedEntry.id}:${name}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            findings.push({
+                id: matchedEntry.id,
+                name: matchedEntry.name,
+                vendor: matchedEntry.vendor,
+                category: "desktop-app",
+                source: `APP:${dir}`,
+                confidence: platformName === "darwin" ? "high" : "medium",
+                evidence: { path: join(dir, name) },
+            });
+        }
+    }
+    return findings;
+}
+export function scanModelRuntimes(pathDirs, fs, platformName) {
+    const findings = [];
+    const catalog = discoveryCatalog();
+    const seen = new Set();
+    const isWin = isWindowsPlatform(platformName);
+    for (const [entryId, entry] of catalog) {
+        if (entry.category !== "model-runtime")
+            continue;
+        let foundPath;
+        for (const binary of entry.binaries) {
+            for (const dir of pathDirs) {
+                const p = join(dir, binary);
+                try {
+                    const st = fs.statSync(p);
+                    if (isExecutable(st, isWin)) {
+                        foundPath = p;
+                        break;
+                    }
+                }
+                catch {
+                    // Try .exe on Windows.
+                    if (isWin) {
+                        const pe = `${p}.exe`;
+                        try {
+                            const st = fs.statSync(pe);
+                            if (isExecutable(st, isWin)) {
+                                foundPath = pe;
+                                break;
+                            }
+                        }
+                        catch {
+                            /* ignore */
+                        }
+                    }
+                }
+            }
+            if (foundPath)
+                break;
+        }
+        if (foundPath) {
+            for (const port of entry.defaultPorts) {
+                const key = `${entryId}:${port}`;
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                findings.push({
+                    id: entryId,
+                    name: entry.name,
+                    vendor: entry.vendor,
+                    category: "model-runtime",
+                    source: `RUNTIME:${foundPath}`,
+                    confidence: "medium",
+                    evidence: { path: foundPath, port },
+                });
+            }
+            if (entry.defaultPorts.length === 0) {
+                const key = `${entryId}:${foundPath}`;
+                if (!seen.has(key)) {
+                    seen.add(key);
+                    findings.push({
+                        id: entryId,
+                        name: entry.name,
+                        vendor: entry.vendor,
+                        category: "model-runtime",
+                        source: `RUNTIME:${foundPath}`,
+                        confidence: "medium",
+                        evidence: { path: foundPath },
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+function collectMcpServersFromObject(obj) {
+    if (!obj || typeof obj !== "object")
+        return [];
+    const servers = obj["mcpServers"] ?? obj["servers"];
+    if (!servers || typeof servers !== "object" || Array.isArray(servers))
+        return [];
+    const out = [];
+    for (const [name, value] of Object.entries(servers)) {
+        if (!value || typeof value !== "object")
+            continue;
+        const v = value;
+        const command = typeof v.command === "string" ? v.command : undefined;
+        const url = typeof v.url === "string" ? v.url : undefined;
+        const args = Array.isArray(v.args)
+            ? v.args.filter((a) => typeof a === "string")
+            : undefined;
+        out.push({ name, command, args, url });
+    }
+    return out;
+}
+export function scanMcpServers(configPaths, fs) {
+    const findings = [];
+    const seen = new Set();
+    for (const configPath of configPaths) {
+        const raw = tryReadJsonFile(fs, configPath);
+        const servers = collectMcpServersFromObject(raw);
+        for (const server of servers) {
+            const key = `${server.name}:${configPath}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            const command = server.command ?? server.url ?? "unknown";
+            findings.push({
+                id: "mcpserver",
+                name: server.name,
+                vendor: "unknown",
+                category: "mcp-server",
+                source: `MCP:${configPath}`,
+                confidence: "high",
+                evidence: {
+                    configPath,
+                    command,
+                    ...(server.args ? { args: server.args.join(" ") } : {}),
+                },
+            });
+        }
+    }
+    return findings;
+}
+function mcpConfigPaths(home, cwd) {
+    return [
+        join(cwd, ".mcp.json"),
+        join(cwd, "mcp.json"),
+        join(cwd, ".cursor", "mcp.json"),
+        join(home, ".mcp.json"),
+        join(home, "mcp.json"),
+        join(home, ".cursor", "mcp.json"),
+    ];
+}
+export function scanEndpoint(options = {}) {
+    const env = options.env ?? process.env;
+    const cwd = options.cwd ?? process.cwd();
+    const platformName = options.platform ?? process.platform;
+    const fs = options.fs ?? nodeFs();
+    const home = options.homeDir ?? homedir();
+    const os = detectOs(platformName);
+    const { endpointUid, hostnameHash } = buildEndpointId(os);
+    const pathDirs = options.pathDirs ?? defaultPathDirs(env);
+    const extensionRoots = extensionRootDirs(home, platformName);
+    const appDirs = desktopAppDirs(platformName);
+    const mcpPaths = mcpConfigPaths(home, cwd);
+    const unavailable = [];
+    if (pathDirs.length === 0)
+        unavailable.push("cli-binaries");
+    const cliFindings = scanCliBinaries(pathDirs, fs, platformName);
+    const extFindings = scanIdeExtensions(extensionRoots, fs);
+    const appFindings = scanDesktopApps(appDirs, fs, platformName);
+    const runtimeFindings = scanModelRuntimes(pathDirs, fs, platformName);
+    const mcpFindings = scanMcpServers(mcpPaths, fs);
+    const all = [
+        ...cliFindings,
+        ...extFindings,
+        ...appFindings,
+        ...runtimeFindings,
+        ...mcpFindings,
+    ];
+    const inventory = all.map((f) => ({
+        ...f,
+        evidence: redactEvidence(f.evidence, home),
+    }));
+    return {
+        endpointUid,
+        hostnameHash,
+        os,
+        capturedAt: (options.now ?? new Date()).toISOString(),
+        inventory,
+        coverage: {
+            attempted: [...ATTEMPTED_CATEGORIES],
+            unavailable,
+            truncated: false,
+        },
+    };
+}
+//# sourceMappingURL=scan.js.map

package/dist/discover/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/discover/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AA0DvE,MAAM,oBAAoB,GAAG;IAC3B,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,aAAa;CACL,CAAC;AAEX,SAAS,MAAM;IACb,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,GAAsB;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAClC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAClC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;QACtD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,QAA2B,EAAE,IAAY;IAC/D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAwB,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,EAAuC,EAAE,SAAkB;IAC/E,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;IAChE,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,YAAY,KAAK,OAAO,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAA2B;IAIzD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACjC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;IACrD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;AACzD,CAAC;AAQD,SAAS,cAAc,CAAC,QAA2B;IACjD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,YAAoB;IAC3D,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxE,OAAO;YACL,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC;YAC/E,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,IAAI,YAAY,KAAK,QAAQ;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,YAAY,KAAK,OAAO;QAAE,OAAO,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CAAC;IAClG,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,yBAAyB,CAAC;QAC3E,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,EAAU,EAAE,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAA2B,EAC3B,EAAU,EACV,YAAoB;IAEpB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC9C,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,aAAa,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3F,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;gBACxE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC5B,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC;gBAAE,SAAS;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,QAAQ,IAAI,EAAE;gBACtB,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,cAAiC,EACjC,EAAU;IAEV,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,YAAmG,CAAC;YACxG,IAAI,UAAU,GAAe,KAAK,CAAC;YACnC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBAClC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;oBAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBACzC,YAAY,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACxF,UAAU,GAAG,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;wBACpD,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY;oBAAE,MAAM;YAC1B,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACX,YAAY,GAAG;wBACb,EAAE,EAAE,WAAW,MAAM,EAAE;wBACvB,IAAI,EAAE,GAAG,MAAM,YAAY;wBAC3B,MAAM;wBACN,QAAQ,EAAE,eAAe;qBAC1B,CAAC;oBACF,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,WAAW,IAAI,EAAE;gBACzB,UAAU;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,EAAU,EACV,YAAoB;IAEpB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,YAAmG,CAAC;YACxG,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAC1C,YAAY,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;wBACvF,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY;oBAAE,MAAM;YAC1B,CAAC;YACD,IAAI,CAAC,YAAY;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,OAAO,GAAG,EAAE;gBACpB,UAAU,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACzD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAA2B,EAC3B,EAAU,EACV,YAAoB;IAEpB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,QAAQ,KAAK,eAAe;YAAE,SAAS;QACjD,IAAI,SAA6B,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;wBAC5B,SAAS,GAAG,CAAC,CAAC;wBACd,MAAM;oBACR,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;oBACvB,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;wBACtB,IAAI,CAAC;4BACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;4BAC3B,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;gCAC5B,SAAS,GAAG,EAAE,CAAC;gCACf,MAAM;4BACR,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,YAAY;wBACd,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,SAAS;gBAAE,MAAM;QACvB,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,OAAO;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,eAAe;oBACzB,MAAM,EAAE,WAAW,SAAS,EAAE;oBAC9B,UAAU,EAAE,QAAQ;oBACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,QAAQ,EAAE,eAAe;wBACzB,MAAM,EAAE,WAAW,SAAS,EAAE;wBAC9B,UAAU,EAAE,QAAQ;wBACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,SAAS,2BAA2B,CAAC,GAAY;IAC/C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAI,GAA+B,CAAC,YAAY,CAAC,IAAK,GAA+B,CAAC,SAAS,CAAC,CAAC;IAC9G,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACjF,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAChC,CAAC,CAAE,CAAC,CAAC,IAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACzE,CAAC,CAAC,SAAS,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,WAA8B,EAC9B,EAAU;IAEV,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,OAAO,UAAU,EAAE;gBAC3B,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE;oBACR,UAAU;oBACV,OAAO;oBACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,GAAW;IAC/C,OAAO;QACL,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC;QACrB,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE3C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,iBAAiB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEjD,MAAM,GAAG,GAAG;QACV,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,eAAe;QAClB,GAAG,WAAW;KACf,CAAC;IAEF,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC;QACJ,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC3C,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,WAAW;QACX,YAAY;QACZ,EAAE;QACF,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACrD,SAAS;QACT,QAAQ,EAAE;YACR,SAAS,EAAE,CAAC,GAAG,oBAAoB,CAAC;YACpC,WAAW;YACX,SAAS,EAAE,KAAK;SACjB;KACF,CAAC;AACJ,CAAC"}

package/dist/discover/snapshot.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Local snapshot persistence for endpoint discovery.
+ *
+ * Writes timestamped discovery JSON under ~/.kya/discovery/ and keeps a
+ * `latest.json` copy for the receipt card and diff comparisons.
+ */
+import type { DiscoveryFinding, DiscoverySnapshot } from "./scan.js";
+export interface SnapshotFs {
+    mkdirSync(path: string, options: {
+        recursive: boolean;
+    }): void;
+    writeFileSync(path: string, data: string, encoding: "utf8"): void;
+    readFileSync(path: string, encoding: "utf8"): string;
+    existsSync(path: string): boolean;
+}
+export declare function snapshotDir(env?: NodeJS.ProcessEnv): string;
+export declare function writeDiscoverySnapshot(snapshot: DiscoverySnapshot, env?: NodeJS.ProcessEnv, fs?: SnapshotFs): {
+    path: string;
+    latestPath: string;
+};
+export declare function loadDiscoverySnapshot(path: string, fs?: Pick<SnapshotFs, "existsSync" | "readFileSync">): DiscoverySnapshot | undefined;
+export declare function loadLatestDiscoverySnapshot(env?: NodeJS.ProcessEnv, fs?: Pick<SnapshotFs, "existsSync" | "readFileSync">): DiscoverySnapshot | undefined;
+export interface DiscoveryDiff {
+    readonly added: readonly DiscoveryFinding[];
+    readonly removed: readonly DiscoveryFinding[];
+    readonly changed: readonly {
+        current: DiscoveryFinding;
+        previous: DiscoveryFinding;
+    }[];
+}
+export declare function diffDiscoverySnapshots(current: DiscoverySnapshot, previous: DiscoverySnapshot): DiscoveryDiff;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/discover/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/discover/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IACrD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAExE;AAMD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,UAAgC,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAStC;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,EAAE,GAAE,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,cAAc,CAAuB,GACxE,iBAAiB,GAAG,SAAS,CAW/B;AAED,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,cAAc,CAAuB,GACxE,iBAAiB,GAAG,SAAS,CAE/B;AAUD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,gBAAgB,CAAA;KAAE,EAAE,CAAC;CACxF;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,iBAAiB,GAC1B,aAAa,CAwCf"}