@triedotdev/mcp 1.0.92 → 1.0.94

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (74) hide show
  1. package/dist/{agent-smith-QYDXPFPJ.js → agent-smith-MYQ35URL.js} +5 -5
  2. package/dist/{agent-smith-runner-GXGDJTSR.js → agent-smith-runner-4TBONXCP.js} +5 -5
  3. package/dist/cache-manager-RMPRPD5T.js +10 -0
  4. package/dist/{chunk-ZOKQJZKN.js → chunk-AZRCKBGF.js} +8 -8
  5. package/dist/{chunk-NMGINYYX.js → chunk-CKM6A3G6.js} +4 -4
  6. package/dist/{chunk-5DQLHWTT.js → chunk-E2ZATINO.js} +73 -26
  7. package/dist/chunk-E2ZATINO.js.map +1 -0
  8. package/dist/{chunk-LT7MKIXU.js → chunk-FFWNZUG2.js} +2 -2
  9. package/dist/{chunk-76Q5DMYV.js → chunk-FK6DQKDY.js} +22 -6
  10. package/dist/chunk-FK6DQKDY.js.map +1 -0
  11. package/dist/{chunk-PSVRO76R.js → chunk-HLSBTOVE.js} +8 -8
  12. package/dist/{chunk-MURGTWG4.js → chunk-IFGF33R5.js} +2 -2
  13. package/dist/{chunk-3HDWOSLX.js → chunk-IIF5XDCJ.js} +128 -48
  14. package/dist/chunk-IIF5XDCJ.js.map +1 -0
  15. package/dist/chunk-JAAIHNOE.js +298 -0
  16. package/dist/chunk-JAAIHNOE.js.map +1 -0
  17. package/dist/{chunk-FK3DUQ5T.js → chunk-JO6RVXS6.js} +57 -6
  18. package/dist/chunk-JO6RVXS6.js.map +1 -0
  19. package/dist/{chunk-74NPKTZV.js → chunk-ODWDESYP.js} +2 -2
  20. package/dist/{chunk-LP4MVJDW.js → chunk-OEYIOOYB.js} +2 -2
  21. package/dist/{chunk-SJFJ6GLR.js → chunk-OWBWNXSC.js} +2 -2
  22. package/dist/{chunk-R6YM6YSV.js → chunk-Q764X2WD.js} +7 -7
  23. package/dist/{chunk-HFQ5ORON.js → chunk-RE6ZWXJC.js} +3 -3
  24. package/dist/{chunk-KWDNYWOR.js → chunk-RNJ6JKMA.js} +4 -4
  25. package/dist/{chunk-T5UOH56R.js → chunk-RYRVEO2B.js} +3 -3
  26. package/dist/{chunk-IYMJTY27.js → chunk-STEFLYPR.js} +62 -7
  27. package/dist/{chunk-IYMJTY27.js.map → chunk-STEFLYPR.js.map} +1 -1
  28. package/dist/{chunk-RDOJCRKJ.js → chunk-WT3XQCG2.js} +2 -2
  29. package/dist/{chunk-P6XMIUD7.js → chunk-Y62VM3ER.js} +6 -6
  30. package/dist/cli/create-agent.js +3 -3
  31. package/dist/cli/main.js +16 -16
  32. package/dist/cli/yolo-daemon.js +18 -18
  33. package/dist/{git-5WJHCMNO.js → git-45LZUUYA.js} +5 -5
  34. package/dist/{goal-manager-ESJCJXFS.js → goal-manager-HOZ7R2QV.js} +6 -6
  35. package/dist/guardian-agent-RB2UQP5V.js +21 -0
  36. package/dist/index.js +25 -25
  37. package/dist/{issue-store-JZ2LCQEG.js → issue-store-DXIOP6AK.js} +4 -4
  38. package/dist/{progress-PH6NNWZM.js → progress-LHI66U7B.js} +2 -2
  39. package/dist/{vibe-code-signatures-MHFK5KXF.js → vibe-code-signatures-C5A4BHXD.js} +3 -3
  40. package/dist/{vulnerability-signatures-DRIYDFG3.js → vulnerability-signatures-SVIHJQO5.js} +3 -3
  41. package/dist/workers/agent-worker.js +9 -9
  42. package/package.json +1 -1
  43. package/dist/cache-manager-7SKX3IGO.js +0 -10
  44. package/dist/chunk-3HDWOSLX.js.map +0 -1
  45. package/dist/chunk-5DQLHWTT.js.map +0 -1
  46. package/dist/chunk-76Q5DMYV.js.map +0 -1
  47. package/dist/chunk-D25EIBPO.js +0 -183
  48. package/dist/chunk-D25EIBPO.js.map +0 -1
  49. package/dist/chunk-FK3DUQ5T.js.map +0 -1
  50. package/dist/guardian-agent-IXG3YWFP.js +0 -21
  51. /package/dist/{agent-smith-QYDXPFPJ.js.map → agent-smith-MYQ35URL.js.map} +0 -0
  52. /package/dist/{agent-smith-runner-GXGDJTSR.js.map → agent-smith-runner-4TBONXCP.js.map} +0 -0
  53. /package/dist/{cache-manager-7SKX3IGO.js.map → cache-manager-RMPRPD5T.js.map} +0 -0
  54. /package/dist/{chunk-ZOKQJZKN.js.map → chunk-AZRCKBGF.js.map} +0 -0
  55. /package/dist/{chunk-NMGINYYX.js.map → chunk-CKM6A3G6.js.map} +0 -0
  56. /package/dist/{chunk-LT7MKIXU.js.map → chunk-FFWNZUG2.js.map} +0 -0
  57. /package/dist/{chunk-PSVRO76R.js.map → chunk-HLSBTOVE.js.map} +0 -0
  58. /package/dist/{chunk-MURGTWG4.js.map → chunk-IFGF33R5.js.map} +0 -0
  59. /package/dist/{chunk-74NPKTZV.js.map → chunk-ODWDESYP.js.map} +0 -0
  60. /package/dist/{chunk-LP4MVJDW.js.map → chunk-OEYIOOYB.js.map} +0 -0
  61. /package/dist/{chunk-SJFJ6GLR.js.map → chunk-OWBWNXSC.js.map} +0 -0
  62. /package/dist/{chunk-R6YM6YSV.js.map → chunk-Q764X2WD.js.map} +0 -0
  63. /package/dist/{chunk-HFQ5ORON.js.map → chunk-RE6ZWXJC.js.map} +0 -0
  64. /package/dist/{chunk-KWDNYWOR.js.map → chunk-RNJ6JKMA.js.map} +0 -0
  65. /package/dist/{chunk-T5UOH56R.js.map → chunk-RYRVEO2B.js.map} +0 -0
  66. /package/dist/{chunk-RDOJCRKJ.js.map → chunk-WT3XQCG2.js.map} +0 -0
  67. /package/dist/{chunk-P6XMIUD7.js.map → chunk-Y62VM3ER.js.map} +0 -0
  68. /package/dist/{git-5WJHCMNO.js.map → git-45LZUUYA.js.map} +0 -0
  69. /package/dist/{goal-manager-ESJCJXFS.js.map → goal-manager-HOZ7R2QV.js.map} +0 -0
  70. /package/dist/{guardian-agent-IXG3YWFP.js.map → guardian-agent-RB2UQP5V.js.map} +0 -0
  71. /package/dist/{issue-store-JZ2LCQEG.js.map → issue-store-DXIOP6AK.js.map} +0 -0
  72. /package/dist/{progress-PH6NNWZM.js.map → progress-LHI66U7B.js.map} +0 -0
  73. /package/dist/{vibe-code-signatures-MHFK5KXF.js.map → vibe-code-signatures-C5A4BHXD.js.map} +0 -0
  74. /package/dist/{vulnerability-signatures-DRIYDFG3.js.map → vulnerability-signatures-SVIHJQO5.js.map} +0 -0
@@ -1,14 +1,14 @@
1
1
  import {
2
2
  AgentSmithSkill,
3
3
  PATTERN_HUNTER_CONFIGS
4
- } from "./chunk-KWDNYWOR.js";
5
- import "./chunk-74NPKTZV.js";
6
- import "./chunk-RDOJCRKJ.js";
7
- import "./chunk-D25EIBPO.js";
4
+ } from "./chunk-RNJ6JKMA.js";
5
+ import "./chunk-ODWDESYP.js";
6
+ import "./chunk-WT3XQCG2.js";
7
+ import "./chunk-JAAIHNOE.js";
8
8
  import "./chunk-DGUM43GV.js";
9
9
  export {
10
10
  AgentSmithSkill as AgentSmithAgent,
11
11
  AgentSmithSkill,
12
12
  PATTERN_HUNTER_CONFIGS
13
13
  };
14
- //# sourceMappingURL=agent-smith-QYDXPFPJ.js.map
14
+ //# sourceMappingURL=agent-smith-MYQ35URL.js.map
@@ -1,17 +1,17 @@
1
1
  import {
2
2
  AgentSmithSkill
3
- } from "./chunk-KWDNYWOR.js";
3
+ } from "./chunk-RNJ6JKMA.js";
4
4
  import {
5
5
  getAIStatusMessage,
6
6
  isAIAvailable,
7
7
  runAIAnalysis
8
- } from "./chunk-74NPKTZV.js";
8
+ } from "./chunk-ODWDESYP.js";
9
9
  import {
10
10
  getWorkingDirectory
11
- } from "./chunk-RDOJCRKJ.js";
11
+ } from "./chunk-WT3XQCG2.js";
12
12
  import {
13
13
  isInteractiveMode
14
- } from "./chunk-D25EIBPO.js";
14
+ } from "./chunk-JAAIHNOE.js";
15
15
  import "./chunk-DGUM43GV.js";
16
16
 
17
17
  // src/tools/agent-smith-runner.ts
@@ -570,4 +570,4 @@ ${getAIStatusMessage()}`);
570
570
  export {
571
571
  runAgentSmith
572
572
  };
573
- //# sourceMappingURL=agent-smith-runner-GXGDJTSR.js.map
573
+ //# sourceMappingURL=agent-smith-runner-4TBONXCP.js.map
@@ -0,0 +1,10 @@
1
+ import {
2
+ CacheManager
3
+ } from "./chunk-RE6ZWXJC.js";
4
+ import "./chunk-WT3XQCG2.js";
5
+ import "./chunk-JAAIHNOE.js";
6
+ import "./chunk-DGUM43GV.js";
7
+ export {
8
+ CacheManager
9
+ };
10
+ //# sourceMappingURL=cache-manager-RMPRPD5T.js.map
@@ -3,33 +3,33 @@ import {
3
3
  Triager,
4
4
  detectStack,
5
5
  loadConfig
6
- } from "./chunk-R6YM6YSV.js";
6
+ } from "./chunk-Q764X2WD.js";
7
7
  import {
8
8
  getDiff,
9
9
  getRecentCommits,
10
10
  getStagedChanges,
11
11
  getUncommittedChanges,
12
12
  getWorkingTreeDiff
13
- } from "./chunk-76Q5DMYV.js";
13
+ } from "./chunk-FK6DQKDY.js";
14
14
  import {
15
15
  ContextGraph
16
- } from "./chunk-P6XMIUD7.js";
16
+ } from "./chunk-Y62VM3ER.js";
17
17
  import {
18
18
  scanForVulnerabilities
19
- } from "./chunk-FK3DUQ5T.js";
19
+ } from "./chunk-JO6RVXS6.js";
20
20
  import {
21
21
  storeIssues
22
- } from "./chunk-LP4MVJDW.js";
22
+ } from "./chunk-OEYIOOYB.js";
23
23
  import {
24
24
  scanForVibeCodeIssues
25
- } from "./chunk-IYMJTY27.js";
25
+ } from "./chunk-STEFLYPR.js";
26
26
  import {
27
27
  Trie
28
28
  } from "./chunk-6NLHFIYA.js";
29
29
  import {
30
30
  getTrieDirectory,
31
31
  getWorkingDirectory
32
- } from "./chunk-RDOJCRKJ.js";
32
+ } from "./chunk-WT3XQCG2.js";
33
33
 
34
34
  // src/cli/checkpoint.ts
35
35
  import { existsSync } from "fs";
@@ -1690,4 +1690,4 @@ export {
1690
1690
  LearningEngine,
1691
1691
  LinearIngester
1692
1692
  };
1693
- //# sourceMappingURL=chunk-ZOKQJZKN.js.map
1693
+ //# sourceMappingURL=chunk-AZRCKBGF.js.map
@@ -1,16 +1,16 @@
1
1
  import {
2
2
  getGuardianState
3
- } from "./chunk-T5UOH56R.js";
3
+ } from "./chunk-RYRVEO2B.js";
4
4
  import {
5
5
  BackupManager,
6
6
  atomicWriteJSON,
7
7
  getMemoryStats,
8
8
  safeParseAndValidate,
9
9
  searchIssues
10
- } from "./chunk-LP4MVJDW.js";
10
+ } from "./chunk-OEYIOOYB.js";
11
11
  import {
12
12
  getTrieDirectory
13
- } from "./chunk-RDOJCRKJ.js";
13
+ } from "./chunk-WT3XQCG2.js";
14
14
 
15
15
  // src/guardian/insight-store.ts
16
16
  import { mkdir, readFile } from "fs/promises";
@@ -1042,4 +1042,4 @@ export {
1042
1042
  getGoalManager,
1043
1043
  clearGoalManagers
1044
1044
  };
1045
- //# sourceMappingURL=chunk-NMGINYYX.js.map
1045
+ //# sourceMappingURL=chunk-CKM6A3G6.js.map
@@ -1,39 +1,39 @@
1
1
  import {
2
2
  runShellCommand,
3
3
  runShellCommandSync
4
- } from "./chunk-MURGTWG4.js";
4
+ } from "./chunk-IFGF33R5.js";
5
5
  import {
6
6
  recordToGlobalMemory,
7
7
  updateGlobalMemoryMd
8
- } from "./chunk-LT7MKIXU.js";
8
+ } from "./chunk-FFWNZUG2.js";
9
9
  import {
10
10
  atomicWriteFile,
11
11
  atomicWriteJSON,
12
12
  autoResolveIssues,
13
13
  getIssueHash,
14
14
  storeIssues
15
- } from "./chunk-LP4MVJDW.js";
15
+ } from "./chunk-OEYIOOYB.js";
16
16
  import {
17
17
  checkFileLevelIssues,
18
18
  getVibeCodeTrie,
19
19
  scanForVibeCodeIssues
20
- } from "./chunk-IYMJTY27.js";
20
+ } from "./chunk-STEFLYPR.js";
21
21
  import {
22
22
  AgentSmithSkill,
23
23
  BaseSkill,
24
24
  output
25
- } from "./chunk-KWDNYWOR.js";
25
+ } from "./chunk-RNJ6JKMA.js";
26
26
  import {
27
27
  isAIAvailable,
28
28
  runAIAnalysis
29
- } from "./chunk-74NPKTZV.js";
29
+ } from "./chunk-ODWDESYP.js";
30
30
  import {
31
31
  getTrieDirectory,
32
32
  getWorkingDirectory
33
- } from "./chunk-RDOJCRKJ.js";
33
+ } from "./chunk-WT3XQCG2.js";
34
34
  import {
35
35
  isInteractiveMode
36
- } from "./chunk-D25EIBPO.js";
36
+ } from "./chunk-JAAIHNOE.js";
37
37
 
38
38
  // src/utils/project-info.ts
39
39
  import { readFile, writeFile, mkdir } from "fs/promises";
@@ -340,7 +340,7 @@ async function updateContextAfterScan(results, filesScanned, contextSignals, dur
340
340
  const currentHashes = new Set(allIssues.map((issue) => getIssueHash(issue)));
341
341
  const { resolved } = await autoResolveIssues(currentHashes, scannedFiles, workDir);
342
342
  if (resolved > 0) {
343
- const { isInteractiveMode: isInteractiveMode2 } = await import("./progress-PH6NNWZM.js");
343
+ const { isInteractiveMode: isInteractiveMode2 } = await import("./progress-LHI66U7B.js");
344
344
  if (!isInteractiveMode2()) {
345
345
  console.error(` \u2713 Auto-resolved ${resolved} issue${resolved > 1 ? "s" : ""} no longer detected`);
346
346
  }
@@ -4358,6 +4358,9 @@ var LegalSkill = class extends BaseSkill {
4358
4358
  async analyzeFiles(files, _context) {
4359
4359
  const issues = [];
4360
4360
  for (const file of files) {
4361
+ if (this.shouldExcludeTrieFile(file)) {
4362
+ continue;
4363
+ }
4361
4364
  try {
4362
4365
  const content = await this.readFile(file);
4363
4366
  issues.push(...this.checkLicenseCompliance(content, file));
@@ -4922,12 +4925,22 @@ var LegalSkill = class extends BaseSkill {
4922
4925
  if (/\bno\s+credit\s+card\s+required\b/i.test(line)) {
4923
4926
  continue;
4924
4927
  }
4925
- const isCardDataCodeSignal = (
4926
- // Typical variable / object-key names in code (high-signal)
4927
- /\b(cardNumber|card_number|cvv|cvc|pan|expMonth|expYear|expiry|expiration|cardholder(Name)?|billingZip|postalCode)\b/i.test(line) || // HTML/JSX form fields collecting card data (high-signal)
4928
- /<input\b[^>]*(name|id|autoComplete)\s*=\s*["'{][^"'}]*(cc-number|cc-csc|cc-exp|card(number)?|cvv|cvc)[^"'}]*["'}][^>]*>/i.test(line) || // Server-side request body / params containing card fields (high-signal)
4929
- /\b(req|request)\.(body|query|params)\.[a-z0-9_]*(card|cvv|cvc|pan|exp)[a-z0-9_]*\b/i.test(line)
4928
+ const hasExplicitCardDataField = (
4929
+ // Explicit card number / CVV / CVC (very high signal)
4930
+ /\b(cardNumber|card_number|card[-_]?num|ccNumber|cc_number)\b/i.test(line) || /\b(cvv|cvc|securityCode|security_code|cardCode|card_code)\b/i.test(line) || // PAN (Primary Account Number) - very high signal
4931
+ /\bpan\b/i.test(line) && /\b(card|payment|credit|debit)\b/i.test(line)
4932
+ );
4933
+ const hasCardExpiryInPaymentContext = (
4934
+ // Expiry only counts if combined with payment-related terms
4935
+ /\b(expMonth|expYear|exp_month|exp_year|cardExp|card_exp)\b/i.test(line) || /\b(expiry|expiration)\b/i.test(line) && /\b(card|payment|credit|billing)\b/i.test(line)
4936
+ );
4937
+ const hasCardHolderData = (
4938
+ // Cardholder name is high signal
4939
+ /\b(cardholderName|cardholder_name|cardHolder|card_holder)\b/i.test(line)
4930
4940
  );
4941
+ const isCardDataCodeSignal = hasExplicitCardDataField || hasCardExpiryInPaymentContext || hasCardHolderData || // HTML/JSX form fields collecting card data (high-signal, very specific autocomplete values)
4942
+ /<input\b[^>]*(autoComplete|autocomplete)\s*=\s*["'{](cc-number|cc-csc|cc-exp)[^"'}]*["'}][^>]*>/i.test(line) || // Server-side request body containing explicit card fields
4943
+ /\b(req|request)\.(body|query|params)\.(cardNumber|cvv|cvc|ccNumber)\b/i.test(line);
4931
4944
  const isLowSignalCardMention = /\bcredit\s*card\b/i.test(line) || /\bcard\s*number\b/i.test(line);
4932
4945
  if (!isCardDataCodeSignal) {
4933
4946
  if (isLowSignalCardMention) continue;
@@ -5043,10 +5056,9 @@ var LegalSkill = class extends BaseSkill {
5043
5056
  }
5044
5057
  }
5045
5058
  const testimonialIndicator = /\btestimonial(s)?\b/i;
5046
- const reviewIndicator = /\b(review(s)?|rating(s)?|feedback)\b/i;
5047
- const fakeIndicator = /\b(fake|synthetic)\b/i;
5048
- const generatedIndicator = /\b(generated|ai[-\s]?generated|generated\s+by\s+ai)\b/i;
5049
- const engineeringReviewContext = /\b(code\s+review|pr\s+review|profile\s+review|review\s+agent|reviewer|super-reviewer|trie_super_reviewer)\b/i;
5059
+ const fakeTestimonialPattern = /\b(fake|synthetic|generated|fabricated)\s+(testimonial|review|rating|feedback)s?\b/i;
5060
+ const testimonialGenerationPattern = /\b(generate|create|make)\s+(fake|synthetic)?\s*(testimonial|review|rating)s?\b/i;
5061
+ const engineeringContext = /\b(code\s+review|pr\s+review|pull\s+request|profile\s+review|review\s+agent|reviewer|super-reviewer|trie|scout|ai[-\s]?generated\s+code|generated\s+(by\s+)?(ai|claude|gpt|llm|copilot)|code\s+generation|content\s+generation)\b/i;
5050
5062
  for (let i = 0; i < lines.length; i++) {
5051
5063
  const line = lines[i];
5052
5064
  const trimmed = line.trim();
@@ -5056,13 +5068,13 @@ var LegalSkill = class extends BaseSkill {
5056
5068
  const start = Math.max(0, i - 2);
5057
5069
  const end = Math.min(lines.length, i + 3);
5058
5070
  const window = lines.slice(start, end).join("\n");
5059
- const hasTestimonial = testimonialIndicator.test(window);
5060
- const hasReview = reviewIndicator.test(window);
5061
- const hasFake = fakeIndicator.test(window) || generatedIndicator.test(window);
5062
- if (!hasFake) continue;
5063
- if (engineeringReviewContext.test(window)) continue;
5064
- if (!isLikelyMarketingFile && !hasTestimonial) continue;
5065
- if (!(hasTestimonial || hasReview)) continue;
5071
+ if (engineeringContext.test(window)) continue;
5072
+ const hasFakeTestimonial = fakeTestimonialPattern.test(window);
5073
+ const hasTestimonialGeneration = testimonialGenerationPattern.test(window);
5074
+ const hasTestimonialWithFake = testimonialIndicator.test(window) && /\b(fake|synthetic|fabricated|made[-\s]?up)\b/i.test(window);
5075
+ if (!hasFakeTestimonial && !hasTestimonialGeneration && !(isLikelyMarketingFile && hasTestimonialWithFake)) {
5076
+ continue;
5077
+ }
5066
5078
  issues.push(this.createIssue(
5067
5079
  this.generateIssueId(),
5068
5080
  "critical",
@@ -5376,6 +5388,41 @@ var LegalSkill = class extends BaseSkill {
5376
5388
  }
5377
5389
  return issues;
5378
5390
  }
5391
+ /**
5392
+ * Check if a file is part of Trie's own codebase (to prevent self-detection false positives)
5393
+ */
5394
+ shouldExcludeTrieFile(filePath) {
5395
+ const normalizedPath = filePath.replace(/\\/g, "/");
5396
+ if (normalizedPath.includes("trie") && normalizedPath.includes("/src/")) {
5397
+ return true;
5398
+ }
5399
+ if (normalizedPath.includes("/skills/")) {
5400
+ return true;
5401
+ }
5402
+ if (normalizedPath.includes("/trie/")) {
5403
+ return true;
5404
+ }
5405
+ const fileName = normalizedPath.split("/").pop() || "";
5406
+ const TRIE_SCANNER_FILES = [
5407
+ "vulnerability-signatures.ts",
5408
+ "vulnerability-signatures.js",
5409
+ "vibe-code-signatures.ts",
5410
+ "vibe-code-signatures.js",
5411
+ "legal.ts",
5412
+ "legal.js",
5413
+ "security-scanner.ts",
5414
+ "security-scanner.js",
5415
+ "agent-smith.ts",
5416
+ "agent-smith.js",
5417
+ "security.ts",
5418
+ "security.js",
5419
+ "privacy.ts",
5420
+ "privacy.js",
5421
+ "soc2.ts",
5422
+ "soc2.js"
5423
+ ];
5424
+ return TRIE_SCANNER_FILES.includes(fileName);
5425
+ }
5379
5426
  };
5380
5427
 
5381
5428
  // src/skills/built-in/test.ts
@@ -10829,4 +10876,4 @@ export {
10829
10876
  CustomSkill,
10830
10877
  getSkillRegistry
10831
10878
  };
10832
- //# sourceMappingURL=chunk-5DQLHWTT.js.map
10879
+ //# sourceMappingURL=chunk-E2ZATINO.js.map