@srhot/mcp-guard 0.1.0

package/dist/rules/MCP03_TOOL_POISONING.js

@@ -0,0 +1,37 @@
+import { lineNumberForIndex } from "../scanner/fileLoader.js";
+const poisoningPatterns = [
+    /ignore\s+(?:all\s+)?previous\s+instructions/gi,
+    /reveal\s+secrets/gi,
+    /send\s+private\s+files/gi,
+    /exfiltrate/gi,
+    /hidden\s+instruction/gi,
+    /system\s+prompt/gi,
+    /developer\s+message/gi,
+    /bypass\s+policy/gi,
+    /do\s+not\s+tell\s+the\s+user/gi
+];
+export const MCP03_TOOL_POISONING = {
+    id: "MCP03_TOOL_POISONING",
+    scan(context) {
+        const findings = [];
+        for (const file of context.files) {
+            for (const regex of poisoningPatterns) {
+                for (const match of file.content.matchAll(regex)) {
+                    findings.push({
+                        id: "MCP03_TOOL_POISONING",
+                        title: "Suspicious tool instruction",
+                        severity: "HIGH",
+                        category: "Tool Integrity",
+                        message: "Tool metadata or source text contains instruction-like content that could poison an agent.",
+                        filePath: file.filePath,
+                        lineNumber: lineNumberForIndex(file.content, match.index ?? 0),
+                        evidence: match[0],
+                        recommendation: "Remove hidden instructions from tool descriptions and keep tool metadata limited to user-visible behavior."
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+};
+//# sourceMappingURL=MCP03_TOOL_POISONING.js.map

package/dist/rules/MCP03_TOOL_POISONING.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP03_TOOL_POISONING.js","sourceRoot":"","sources":["../../src/rules/MCP03_TOOL_POISONING.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,iBAAiB,GAAG;IACxB,+CAA+C;IAC/C,oBAAoB;IACpB,0BAA0B;IAC1B,cAAc;IACd,wBAAwB;IACxB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,gCAAgC;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,EAAE,EAAE,sBAAsB;IAC1B,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,sBAAsB;wBAC1B,KAAK,EAAE,6BAA6B;wBACpC,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,gBAAgB;wBAC1B,OAAO,EACL,4FAA4F;wBAC9F,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;wBAC9D,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,cAAc,EACZ,4GAA4G;qBAC/G,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/MCP05_COMMAND_EXECUTION.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const MCP05_COMMAND_EXECUTION: Rule;

package/dist/rules/MCP05_COMMAND_EXECUTION.js

@@ -0,0 +1,39 @@
+import { lineNumberForIndex } from "../scanner/fileLoader.js";
+const commandPatterns = [
+    { label: "child_process usage", regex: /\bchild_process\b/gi },
+    { label: "exec call", regex: /\bexec\s*\(/gi },
+    { label: "spawn call", regex: /\bspawn\s*\(/gi },
+    { label: "shell true option", regex: /\bshell\s*:\s*true\b/gi },
+    { label: "arbitrary command input", regex: /arbitrary\s+command\s+input/gi },
+    { label: "run_command tool", regex: /\brun_command\b/gi },
+    { label: "run_shell tool", regex: /\brun_shell\b/gi },
+    { label: "PowerShell command", regex: /\bpowershell\b/gi },
+    { label: "bash -c command", regex: /\bbash\s+-c\b/gi },
+    { label: "recursive deletion", regex: /\brm\s+-rf\b/gi },
+    { label: "pipe to shell", regex: /\bcurl\b\s*\|\s*sh\b/gi }
+];
+export const MCP05_COMMAND_EXECUTION = {
+    id: "MCP05_COMMAND_EXECUTION",
+    scan(context) {
+        const findings = [];
+        for (const file of context.files) {
+            for (const pattern of commandPatterns) {
+                for (const match of file.content.matchAll(pattern.regex)) {
+                    findings.push({
+                        id: "MCP05_COMMAND_EXECUTION",
+                        title: "Risky command execution surface",
+                        severity: "HIGH",
+                        category: "Command Execution",
+                        message: `Detected ${pattern.label}, which can expose the host to command execution risk.`,
+                        filePath: file.filePath,
+                        lineNumber: lineNumberForIndex(file.content, match.index ?? 0),
+                        evidence: match[0],
+                        recommendation: "Avoid arbitrary shell execution. If command execution is required, use a strict allowlist, fixed arguments, and explicit user consent."
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+};
+//# sourceMappingURL=MCP05_COMMAND_EXECUTION.js.map

package/dist/rules/MCP05_COMMAND_EXECUTION.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP05_COMMAND_EXECUTION.js","sourceRoot":"","sources":["../../src/rules/MCP05_COMMAND_EXECUTION.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,eAAe,GAA4C;IAC/D,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAC9D,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE;IAC9C,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAChD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAC/D,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAC5E,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACzD,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACrD,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC1D,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACtD,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACxD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE;CAC5D,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,EAAE,EAAE,yBAAyB;IAC7B,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzD,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,yBAAyB;wBAC7B,KAAK,EAAE,iCAAiC;wBACxC,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,mBAAmB;wBAC7B,OAAO,EAAE,YAAY,OAAO,CAAC,KAAK,wDAAwD;wBAC1F,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;wBAC9D,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,cAAc,EACZ,wIAAwI;qBAC3I,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/MCP07_INSUFFICIENT_AUTH.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const MCP07_INSUFFICIENT_AUTH: Rule;

package/dist/rules/MCP07_INSUFFICIENT_AUTH.js

@@ -0,0 +1,63 @@
+import { parse as parseYaml } from "yaml";
+const configExtensions = /\.(json|ya?ml)$/i;
+export const MCP07_INSUFFICIENT_AUTH = {
+    id: "MCP07_INSUFFICIENT_AUTH",
+    scan(context) {
+        const findings = [];
+        for (const file of context.files.filter((candidate) => configExtensions.test(candidate.filePath))) {
+            const parsed = parseConfig(file);
+            const contentSuggestsRemote = /\bhttps?:\/\//i.test(file.content) ||
+                /"host"\s*:\s*"0\.0\.0\.0"/i.test(file.content) ||
+                /\btransport\s*:\s*http/i.test(file.content);
+            const explicitlyMissingAuth = /\bauth\s*[:=]\s*false\b/i.test(file.content) ||
+                /\bauthentication\s*[:=]\s*["']?none/i.test(file.content);
+            if ((contentSuggestsRemote && !hasAuth(parsed)) || explicitlyMissingAuth) {
+                findings.push({
+                    id: "MCP07_INSUFFICIENT_AUTH",
+                    title: "Remote MCP endpoint without sufficient auth",
+                    severity: explicitlyMissingAuth ? "HIGH" : "MEDIUM",
+                    category: "Authentication",
+                    message: "Configuration exposes a remote HTTP surface without clear authentication controls.",
+                    filePath: file.filePath,
+                    lineNumber: 1,
+                    evidence: explicitlyMissingAuth
+                        ? "auth: false or authentication: none"
+                        : "remote endpoint without auth",
+                    recommendation: "Require authentication for remote transports and document the expected credential flow."
+                });
+            }
+        }
+        return findings;
+    }
+};
+function parseConfig(file) {
+    try {
+        return file.filePath.endsWith(".json") ? JSON.parse(file.content) : parseYaml(file.content);
+    }
+    catch {
+        return undefined;
+    }
+}
+function hasAuth(value) {
+    if (!value || typeof value !== "object") {
+        return false;
+    }
+    if (Array.isArray(value)) {
+        return value.some(hasAuth);
+    }
+    const record = value;
+    for (const [key, child] of Object.entries(record)) {
+        const normalizedKey = key.toLowerCase();
+        if (["auth", "authentication", "apikey", "tokenrequired", "requireauth"].includes(normalizedKey)) {
+            if (child === false || child === "none") {
+                return false;
+            }
+            return true;
+        }
+        if (hasAuth(child)) {
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=MCP07_INSUFFICIENT_AUTH.js.map

package/dist/rules/MCP07_INSUFFICIENT_AUTH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP07_INSUFFICIENT_AUTH.js","sourceRoot":"","sources":["../../src/rules/MCP07_INSUFFICIENT_AUTH.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,EAAE,EAAE,yBAAyB;IAC7B,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CACpD,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAC1C,EAAE,CAAC;YACF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,qBAAqB,GACzB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC/C,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,qBAAqB,GACzB,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC7C,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE5D,IAAI,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;gBACzE,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,6CAA6C;oBACpD,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBACnD,QAAQ,EAAE,gBAAgB;oBAC1B,OAAO,EACL,oFAAoF;oBACtF,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,qBAAqB;wBAC7B,CAAC,CAAC,qCAAqC;wBACvC,CAAC,CAAC,8BAA8B;oBAClC,cAAc,EACZ,yFAAyF;iBAC5F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,IAAgB;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,IACE,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC5F,CAAC;YACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/rules/MCP08_AUDIT_GAP.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const MCP08_AUDIT_GAP: Rule;

package/dist/rules/MCP08_AUDIT_GAP.js

@@ -0,0 +1,30 @@
+export const MCP08_AUDIT_GAP = {
+    id: "MCP08_AUDIT_GAP",
+    scan(context) {
+        if (!context.policy.require.auditLogging) {
+            return [];
+        }
+        const hasAuditLogging = context.files.some((file) => /(?:auditLogging|audit_logging|auditLog)\s*["']?\s*:\s*true/i.test(file.content));
+        if (hasAuditLogging) {
+            return [];
+        }
+        const anchor = context.files.find((file) => /mcp\.(json|ya?ml)$/i.test(file.filePath)) ?? context.files[0];
+        if (!anchor) {
+            return [];
+        }
+        return [
+            {
+                id: "MCP08_AUDIT_GAP",
+                title: "Audit logging requirement not satisfied",
+                severity: "MEDIUM",
+                category: "Audit",
+                message: "Policy requires audit logging, but the scanned project does not declare auditLogging: true.",
+                filePath: anchor.filePath,
+                lineNumber: 1,
+                evidence: "require.auditLogging: true",
+                recommendation: "Enable audit logging in the MCP server configuration and retain logs for security review."
+            }
+        ];
+    }
+};
+//# sourceMappingURL=MCP08_AUDIT_GAP.js.map

package/dist/rules/MCP08_AUDIT_GAP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP08_AUDIT_GAP.js","sourceRoot":"","sources":["../../src/rules/MCP08_AUDIT_GAP.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAS;IACnC,EAAE,EAAE,iBAAiB;IACrB,IAAI,CAAC,OAAO;QACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CACjF,CAAC;QAEF,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,yCAAyC;gBAChD,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EACL,6FAA6F;gBAC/F,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,4BAA4B;gBACtC,cAAc,EACZ,2FAA2F;aAC9F;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/rules/MCP09_SHADOW_SERVER.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const MCP09_SHADOW_SERVER: Rule;

package/dist/rules/MCP09_SHADOW_SERVER.js

@@ -0,0 +1,64 @@
+import { parse as parseYaml } from "yaml";
+export const MCP09_SHADOW_SERVER = {
+    id: "MCP09_SHADOW_SERVER",
+    scan(context) {
+        if (context.policy.allowlist.servers.length === 0) {
+            return [];
+        }
+        const allowlist = new Set(context.policy.allowlist.servers);
+        const findings = [];
+        for (const file of context.files.filter((candidate) => /mcp\.(json|ya?ml)$/i.test(candidate.filePath))) {
+            for (const serverName of extractServerNames(file)) {
+                if (!allowlist.has(serverName)) {
+                    findings.push({
+                        id: "MCP09_SHADOW_SERVER",
+                        title: "Shadow MCP server",
+                        severity: "MEDIUM",
+                        category: "Inventory",
+                        message: `Server "${serverName}" is not present in the policy allowlist.`,
+                        filePath: file.filePath,
+                        lineNumber: 1,
+                        evidence: serverName,
+                        recommendation: "Add expected MCP servers to the allowlist and investigate unrecognized server definitions."
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+};
+function extractServerNames(file) {
+    const parsed = parseConfig(file);
+    const names = new Set();
+    collectNames(parsed, names);
+    return [...names];
+}
+function parseConfig(file) {
+    try {
+        return file.filePath.endsWith(".json") ? JSON.parse(file.content) : parseYaml(file.content);
+    }
+    catch {
+        return undefined;
+    }
+}
+function collectNames(value, names) {
+    if (!value || typeof value !== "object") {
+        return;
+    }
+    if (Array.isArray(value)) {
+        value.forEach((child) => collectNames(child, names));
+        return;
+    }
+    const record = value;
+    if (typeof record.name === "string") {
+        names.add(record.name);
+    }
+    if (record.servers && typeof record.servers === "object" && !Array.isArray(record.servers)) {
+        for (const [name, child] of Object.entries(record.servers)) {
+            names.add(name);
+            collectNames(child, names);
+        }
+    }
+    Object.values(record).forEach((child) => collectNames(child, names));
+}
+//# sourceMappingURL=MCP09_SHADOW_SERVER.js.map

package/dist/rules/MCP09_SHADOW_SERVER.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP09_SHADOW_SERVER.js","sourceRoot":"","sources":["../../src/rules/MCP09_SHADOW_SERVER.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,qBAAqB;IACzB,IAAI,CAAC,OAAO;QACV,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CACpD,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAC/C,EAAE,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,qBAAqB;wBACzB,KAAK,EAAE,mBAAmB;wBAC1B,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,WAAW;wBACrB,OAAO,EAAE,WAAW,UAAU,2CAA2C;wBACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,CAAC;wBACb,QAAQ,EAAE,UAAU;wBACpB,cAAc,EACZ,4FAA4F;qBAC/F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAkB;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAkC,CAAC,EAAE,CAAC;YACtF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/rules/MCP10_CONTEXT_OVERSHARING.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const MCP10_CONTEXT_OVERSHARING: Rule;

package/dist/rules/MCP10_CONTEXT_OVERSHARING.js

@@ -0,0 +1,39 @@
+import { lineNumberForIndex } from "../scanner/fileLoader.js";
+const broadExposurePatterns = [
+    { label: "filesystem root", regex: /["']\/["']/g },
+    { label: "root glob", regex: /["']\/\*\*?["']/g },
+    { label: "Windows drive root", regex: /["']C:\\\\?["']/gi },
+    { label: "Windows user directory", regex: /C:\\\\?Users\b/gi },
+    { label: "Unix home directory", regex: /["']\/home["']/gi },
+    { label: "macOS users directory", regex: /["']\/Users["']/g },
+    { label: "HOME variable", regex: /\$\{HOME\}/g },
+    {
+        label: "entire workspace read/write",
+        regex: /entire\s+workspace\s+with\s+read\/write\s+access/gi
+    }
+];
+export const MCP10_CONTEXT_OVERSHARING = {
+    id: "MCP10_CONTEXT_OVERSHARING",
+    scan(context) {
+        const findings = [];
+        for (const file of context.files) {
+            for (const pattern of broadExposurePatterns) {
+                for (const match of file.content.matchAll(pattern.regex)) {
+                    findings.push({
+                        id: "MCP10_CONTEXT_OVERSHARING",
+                        title: "Overly broad context exposure",
+                        severity: "HIGH",
+                        category: "Context Boundaries",
+                        message: `Detected ${pattern.label}, which can expose more files or resources than an agent needs.`,
+                        filePath: file.filePath,
+                        lineNumber: lineNumberForIndex(file.content, match.index ?? 0),
+                        evidence: match[0],
+                        recommendation: "Restrict filesystem and resource access to the smallest explicit paths required by the MCP tool."
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+};
+//# sourceMappingURL=MCP10_CONTEXT_OVERSHARING.js.map

package/dist/rules/MCP10_CONTEXT_OVERSHARING.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP10_CONTEXT_OVERSHARING.js","sourceRoot":"","sources":["../../src/rules/MCP10_CONTEXT_OVERSHARING.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,qBAAqB,GAA4C;IACrE,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE;IAClD,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACjD,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC3D,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC9D,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC3D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE;IAChD;QACE,KAAK,EAAE,6BAA6B;QACpC,KAAK,EAAE,oDAAoD;KAC5D;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAS;IAC7C,EAAE,EAAE,2BAA2B;IAC/B,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;gBAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzD,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,2BAA2B;wBAC/B,KAAK,EAAE,+BAA+B;wBACtC,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,oBAAoB;wBAC9B,OAAO,EAAE,YAAY,OAAO,CAAC,KAAK,iEAAiE;wBACnG,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;wBAC9D,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,cAAc,EACZ,kGAAkG;qBACrG,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,10 @@
+import type { Rule } from "../types.js";
+import { MCP01_SECRET_EXPOSURE } from "./MCP01_SECRET_EXPOSURE.js";
+import { MCP03_TOOL_POISONING } from "./MCP03_TOOL_POISONING.js";
+import { MCP05_COMMAND_EXECUTION } from "./MCP05_COMMAND_EXECUTION.js";
+import { MCP07_INSUFFICIENT_AUTH } from "./MCP07_INSUFFICIENT_AUTH.js";
+import { MCP08_AUDIT_GAP } from "./MCP08_AUDIT_GAP.js";
+import { MCP09_SHADOW_SERVER } from "./MCP09_SHADOW_SERVER.js";
+import { MCP10_CONTEXT_OVERSHARING } from "./MCP10_CONTEXT_OVERSHARING.js";
+export declare const rules: Rule[];
+export { MCP01_SECRET_EXPOSURE, MCP03_TOOL_POISONING, MCP05_COMMAND_EXECUTION, MCP07_INSUFFICIENT_AUTH, MCP08_AUDIT_GAP, MCP09_SHADOW_SERVER, MCP10_CONTEXT_OVERSHARING };

package/dist/rules/index.js

@@ -0,0 +1,18 @@
+import { MCP01_SECRET_EXPOSURE } from "./MCP01_SECRET_EXPOSURE.js";
+import { MCP03_TOOL_POISONING } from "./MCP03_TOOL_POISONING.js";
+import { MCP05_COMMAND_EXECUTION } from "./MCP05_COMMAND_EXECUTION.js";
+import { MCP07_INSUFFICIENT_AUTH } from "./MCP07_INSUFFICIENT_AUTH.js";
+import { MCP08_AUDIT_GAP } from "./MCP08_AUDIT_GAP.js";
+import { MCP09_SHADOW_SERVER } from "./MCP09_SHADOW_SERVER.js";
+import { MCP10_CONTEXT_OVERSHARING } from "./MCP10_CONTEXT_OVERSHARING.js";
+export const rules = [
+    MCP01_SECRET_EXPOSURE,
+    MCP03_TOOL_POISONING,
+    MCP05_COMMAND_EXECUTION,
+    MCP07_INSUFFICIENT_AUTH,
+    MCP08_AUDIT_GAP,
+    MCP09_SHADOW_SERVER,
+    MCP10_CONTEXT_OVERSHARING
+];
+export { MCP01_SECRET_EXPOSURE, MCP03_TOOL_POISONING, MCP05_COMMAND_EXECUTION, MCP07_INSUFFICIENT_AUTH, MCP08_AUDIT_GAP, MCP09_SHADOW_SERVER, MCP10_CONTEXT_OVERSHARING };
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,KAAK,GAAW;IAC3B,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;IACf,mBAAmB;IACnB,yBAAyB;CAC1B,CAAC;AAEF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EAC1B,CAAC"}

package/dist/scanner/fileLoader.d.ts

@@ -0,0 +1,3 @@
+import type { LoadedFile } from "../types.js";
+export declare function loadFiles(targetPath: string): Promise<LoadedFile[]>;
+export declare function lineNumberForIndex(content: string, index: number): number;

package/dist/scanner/fileLoader.js

@@ -0,0 +1,48 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import fg from "fast-glob";
+import { toPosixPath } from "../utils/paths.js";
+const ignoredDirectories = [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/.git/**",
+    "**/coverage/**",
+    "**/.turbo/**"
+];
+export async function loadFiles(targetPath) {
+    const stat = await fs.stat(targetPath);
+    const root = stat.isDirectory() ? targetPath : path.dirname(targetPath);
+    const entries = stat.isDirectory()
+        ? await fg("**/*", {
+            cwd: root,
+            dot: true,
+            onlyFiles: true,
+            ignore: ignoredDirectories,
+            absolute: true
+        })
+        : [targetPath];
+    const files = [];
+    for (const filePath of entries.sort()) {
+        const content = await readTextFile(filePath);
+        if (content === undefined) {
+            continue;
+        }
+        files.push({
+            filePath,
+            relativePath: toPosixPath(path.relative(root, filePath)),
+            content
+        });
+    }
+    return files;
+}
+async function readTextFile(filePath) {
+    const buffer = await fs.readFile(filePath);
+    if (buffer.includes(0)) {
+        return undefined;
+    }
+    return buffer.toString("utf8");
+}
+export function lineNumberForIndex(content, index) {
+    return content.slice(0, Math.max(index, 0)).split(/\r?\n/).length;
+}
+//# sourceMappingURL=fileLoader.js.map

package/dist/scanner/fileLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileLoader.js","sourceRoot":"","sources":["../../src/scanner/fileLoader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,kBAAkB,GAAG;IACzB,oBAAoB;IACpB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB;IAChD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE;QAChC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;YACf,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;QACJ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEjB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ;YACR,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC/D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACpE,CAAC"}

package/dist/scanner/scanTarget.d.ts

@@ -0,0 +1,2 @@
+import type { ScanOptions, ScanResult } from "../types.js";
+export declare function scanTarget(options: ScanOptions): Promise<ScanResult>;

package/dist/scanner/scanTarget.js

@@ -0,0 +1,21 @@
+import path from "node:path";
+import { loadPolicy } from "../policy/loadPolicy.js";
+import { applyPolicy, summarizeFindings } from "../policy/policyEngine.js";
+import { rules } from "../rules/index.js";
+import { loadFiles } from "./fileLoader.js";
+export async function scanTarget(options) {
+    const targetPath = path.resolve(options.target);
+    const policy = await loadPolicy(options.policyPath);
+    const files = await loadFiles(targetPath);
+    const context = { targetPath, files, policy };
+    const rawFindings = rules.flatMap((rule) => rule.scan(context));
+    const findings = applyPolicy(rawFindings, policy);
+    const summary = summarizeFindings(findings);
+    return {
+        targetPath,
+        findings,
+        summary,
+        shouldFail: summary.failCount > 0
+    };
+}
+//# sourceMappingURL=scanTarget.js.map

package/dist/scanner/scanTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanTarget.js","sourceRoot":"","sources":["../../src/scanner/scanTarget.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAoB;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE5C,OAAO;QACL,UAAU;QACV,QAAQ;QACR,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,SAAS,GAAG,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,58 @@
+export type Severity = "INFO" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+export type RuleMode = "off" | "warn" | "error";
+export interface Finding {
+    id: string;
+    title: string;
+    severity: Severity;
+    category: string;
+    message: string;
+    filePath: string;
+    lineNumber?: number;
+    evidence: string;
+    recommendation: string;
+    policyLevel?: "warn" | "error";
+    failsScan?: boolean;
+}
+export interface LoadedFile {
+    filePath: string;
+    relativePath: string;
+    content: string;
+}
+export interface Policy {
+    rules: Record<string, RuleMode>;
+    allowlist: {
+        servers: string[];
+    };
+    deny: {
+        filesystemRoots: string[];
+        commands: string[];
+    };
+    require: {
+        auditLogging: boolean;
+        explicitToolConsent: boolean;
+    };
+}
+export interface RuleContext {
+    targetPath: string;
+    files: LoadedFile[];
+    policy: Policy;
+}
+export interface Rule {
+    id: string;
+    scan(context: RuleContext): Finding[];
+}
+export interface ScanOptions {
+    target: string;
+    policyPath?: string;
+}
+export interface ScanSummary {
+    total: number;
+    failCount: number;
+    bySeverity: Record<Severity, number>;
+}
+export interface ScanResult {
+    targetPath: string;
+    findings: Finding[];
+    summary: ScanSummary;
+    shouldFail: boolean;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/paths.d.ts

@@ -0,0 +1,2 @@
+export declare function toPosixPath(filePath: string): string;
+export declare function displayPath(filePath: string): string;

package/dist/utils/paths.js

@@ -0,0 +1,8 @@
+import path from "node:path";
+export function toPosixPath(filePath) {
+    return filePath.split(path.sep).join("/");
+}
+export function displayPath(filePath) {
+    return toPosixPath(path.relative(process.cwd(), filePath) || filePath);
+}
+//# sourceMappingURL=paths.js.map

package/dist/utils/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;AACzE,CAAC"}

package/dist/utils/severity.d.ts

@@ -0,0 +1,4 @@
+import type { Severity } from "../types.js";
+export declare const severityRank: Record<Severity, number>;
+export declare function shouldFailByDefault(severity: Severity): boolean;
+export declare function createSeverityCounts(): Record<Severity, number>;

package/dist/utils/severity.js

@@ -0,0 +1,20 @@
+export const severityRank = {
+    INFO: 0,
+    LOW: 1,
+    MEDIUM: 2,
+    HIGH: 3,
+    CRITICAL: 4
+};
+export function shouldFailByDefault(severity) {
+    return severityRank[severity] >= severityRank.HIGH;
+}
+export function createSeverityCounts() {
+    return {
+        INFO: 0,
+        LOW: 0,
+        MEDIUM: 0,
+        HIGH: 0,
+        CRITICAL: 0
+    };
+}
+//# sourceMappingURL=severity.js.map

package/dist/utils/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../../src/utils/severity.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,IAAI,EAAE,CAAC;QACP,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC"}

package/docs/architecture.md

@@ -0,0 +1,11 @@
+# Architecture
+
+MCP-Guard is intentionally small in v0.1.
+
+The CLI in `src/cli.ts` parses commands with Commander and delegates scans to `scanTarget`. The scanner loads target files, loads policy, runs every rule, applies policy, and returns a normalized `ScanResult`.
+
+Rules are independent modules under `src/rules`. Each rule receives loaded files and policy context, then returns plain `Finding` objects. The policy engine is the only layer that decides whether a finding fails the scan.
+
+Reporters are pure rendering functions. Console, JSON, and Markdown output are generated from the same scan result, which keeps CLI behavior deterministic and easy to test.
+
+The examples under `examples/` are the local test laboratory. They are synthetic and safe; they do not require credentials, external APIs, or live MCP servers.

package/docs/release.md

@@ -0,0 +1,42 @@
+# Release Checklist
+
+Use this checklist for publishing MCP-Guard to npm and GitHub.
+
+## npm
+
+```bash
+npm login
+npm whoami
+npm run lint
+npm test
+npm run build
+npm pack
+```
+
+Test the generated tarball locally:
+
+```bash
+npm install -g ./srhot-mcp-guard-0.1.0.tgz
+mcp-guard scan examples/safe-mcp-server
+mcp-guard scan examples/bad-mcp-server --no-fail
+npm uninstall -g @srhot/mcp-guard
+```
+
+Publish:
+
+```bash
+npm publish --access public
+```
+
+## GitHub
+
+```bash
+git tag v0.1.0
+git push origin v0.1.0
+```
+
+Then create a GitHub release for `v0.1.0` with a short summary, install commands, and a link to the README.
+
+## GitHub Actions History
+
+Old failed GitHub Actions runs remain visible in the Actions tab after fixes are pushed. That is normal. Use the latest workflow run for the current release status.