@weave_protocol/mund 0.4.2 → 0.5.0

package/dist/index.d.ts

@@ -5,4 +5,11 @@
 export { ThreatIntelManager, threatIntel } from './threat-intel-manager.js';
 export { threatIntelTools, createThreatIntelToolHandlers } from './threat-intel-tools.js';
 export * from './threat-intel-types.js';
+export { scan, SCAN_TYPES } from './scan.js';
+export type { ScanType, ScanOptions, ScanResult } from './scan.js';
+export { AnalyzerEngine, getAnalyzers, SecretScanner, PIIDetector, CodeAnalyzer, InjectionDetector, ExfiltrationDetector, McpServerAnalyzer, } from './analyzers/index.js';
+export { DEFAULT_RULES } from './constants.js';
+export { computeRiskScore, labelForScore } from './scoring.js';
+export type { RiskScore } from './scoring.js';
+export type { Severity, SecurityIssue, DetectionRule, IAnalyzer } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC1F,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC1F,cAAc,yBAAyB,CAAC;AAGxC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EACL,cAAc,EAAE,YAAY,EAC5B,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,GACrG,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -5,6 +5,11 @@
 export { ThreatIntelManager, threatIntel } from './threat-intel-manager.js';
 export { threatIntelTools, createThreatIntelToolHandlers } from './threat-intel-tools.js';
 export * from './threat-intel-types.js';
+// Scanning
+export { scan, SCAN_TYPES } from './scan.js';
+export { AnalyzerEngine, getAnalyzers, SecretScanner, PIIDetector, CodeAnalyzer, InjectionDetector, ExfiltrationDetector, McpServerAnalyzer, } from './analyzers/index.js';
+export { DEFAULT_RULES } from './constants.js';
+export { computeRiskScore, labelForScore } from './scoring.js';
 // Importing this module has no side effects. Run directly (`node dist/index.js`,
 // as older MCP configs do), it still starts the server; the bin points at server.js.
 import { realpathSync } from 'node:fs';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC1F,cAAc,yBAAyB,CAAC;AAExC,iFAAiF;AACjF,qFAAqF;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,IAAI,eAAe;IAAE,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC1F,cAAc,yBAAyB,CAAC;AAExC,WAAW;AACX,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EACL,cAAc,EAAE,YAAY,EAC5B,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,GACrG,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI/D,iFAAiF;AACjF,qFAAqF;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,IAAI,eAAe;IAAE,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC"}

package/dist/scan.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Library scan: the same analyzers and default rules as the mund_scan_content
+ * tool, returning issues plus a 0–100 risk score.
+ */
+import { type RiskScore } from './scoring.js';
+import type { DetectionRule, SecurityIssue } from './types.js';
+/** Friendly scan types → analyzer types. */
+export declare const SCAN_TYPES: {
+    readonly secrets: readonly ["secret"];
+    readonly pii: readonly ["pii"];
+    readonly injection: readonly ["injection"];
+    readonly exfiltration: readonly ["exfiltration"];
+    readonly code: readonly ["code_pattern"];
+};
+export type ScanType = keyof typeof SCAN_TYPES;
+export interface ScanOptions {
+    /** Limit to these scan types; default: all analyzers. */
+    types?: ScanType[];
+    /** Rules to apply; default: Mund's built-in rules. */
+    rules?: DetectionRule[];
+}
+export interface ScanResult {
+    issues: SecurityIssue[];
+    risk: RiskScore;
+}
+export declare function scan(content: string, options?: ScanOptions): Promise<ScanResult>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE/D,4CAA4C;AAC5C,eAAO,MAAM,UAAU;;;;;;CAMb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,UAAU,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,sDAAsD;IACtD,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ1F"}

package/dist/scan.js

@@ -0,0 +1,25 @@
+/**
+ * Library scan: the same analyzers and default rules as the mund_scan_content
+ * tool, returning issues plus a 0–100 risk score.
+ */
+import { AnalyzerEngine, getAnalyzers } from './analyzers/index.js';
+import { DEFAULT_RULES } from './constants.js';
+import { computeRiskScore } from './scoring.js';
+/** Friendly scan types → analyzer types. */
+export const SCAN_TYPES = {
+    secrets: ['secret'],
+    pii: ['pii'],
+    injection: ['injection'],
+    exfiltration: ['exfiltration'],
+    code: ['code_pattern'],
+};
+export async function scan(content, options = {}) {
+    let analyzers = getAnalyzers();
+    if (options.types?.length) {
+        const wanted = new Set(options.types.flatMap((t) => SCAN_TYPES[t] ?? []));
+        analyzers = analyzers.filter((a) => wanted.has(a.type));
+    }
+    const issues = await new AnalyzerEngine(analyzers).analyzeAll(content, options.rules ?? DEFAULT_RULES);
+    return { issues, risk: computeRiskScore(issues) };
+}
+//# sourceMappingURL=scan.js.map

package/dist/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,cAAc,CAAC;AAGhE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;IACnB,GAAG,EAAE,CAAC,KAAK,CAAC;IACZ,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;CACd,CAAC;AAgBX,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAe,EAAE,UAAuB,EAAE;IACnE,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;IACvG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@weave_protocol/mund",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "The Guardian Protocol - MCP-based security monitoring for agentic AI systems",
   "main": "dist/index.js",
   "bin": {

package/src/index.ts

@@ -7,6 +7,18 @@ export { ThreatIntelManager, threatIntel } from './threat-intel-manager.js';
 export { threatIntelTools, createThreatIntelToolHandlers } from './threat-intel-tools.js';
 export * from './threat-intel-types.js';
 
+// Scanning
+export { scan, SCAN_TYPES } from './scan.js';
+export type { ScanType, ScanOptions, ScanResult } from './scan.js';
+export {
+  AnalyzerEngine, getAnalyzers,
+  SecretScanner, PIIDetector, CodeAnalyzer, InjectionDetector, ExfiltrationDetector, McpServerAnalyzer,
+} from './analyzers/index.js';
+export { DEFAULT_RULES } from './constants.js';
+export { computeRiskScore, labelForScore } from './scoring.js';
+export type { RiskScore } from './scoring.js';
+export type { Severity, SecurityIssue, DetectionRule, IAnalyzer } from './types.js';
+
 // Importing this module has no side effects. Run directly (`node dist/index.js`,
 // as older MCP configs do), it still starts the server; the bin points at server.js.
 import { realpathSync } from 'node:fs';

package/src/scan.ts

@@ -0,0 +1,42 @@
+/**
+ * Library scan: the same analyzers and default rules as the mund_scan_content
+ * tool, returning issues plus a 0–100 risk score.
+ */
+
+import { AnalyzerEngine, getAnalyzers } from './analyzers/index.js';
+import { DEFAULT_RULES } from './constants.js';
+import { computeRiskScore, type RiskScore } from './scoring.js';
+import type { DetectionRule, SecurityIssue } from './types.js';
+
+/** Friendly scan types → analyzer types. */
+export const SCAN_TYPES = {
+  secrets: ['secret'],
+  pii: ['pii'],
+  injection: ['injection'],
+  exfiltration: ['exfiltration'],
+  code: ['code_pattern'],
+} as const;
+
+export type ScanType = keyof typeof SCAN_TYPES;
+
+export interface ScanOptions {
+  /** Limit to these scan types; default: all analyzers. */
+  types?: ScanType[];
+  /** Rules to apply; default: Mund's built-in rules. */
+  rules?: DetectionRule[];
+}
+
+export interface ScanResult {
+  issues: SecurityIssue[];
+  risk: RiskScore;
+}
+
+export async function scan(content: string, options: ScanOptions = {}): Promise<ScanResult> {
+  let analyzers = getAnalyzers();
+  if (options.types?.length) {
+    const wanted = new Set<string>(options.types.flatMap((t) => SCAN_TYPES[t] ?? []));
+    analyzers = analyzers.filter((a) => wanted.has(a.type));
+  }
+  const issues = await new AnalyzerEngine(analyzers).analyzeAll(content, options.rules ?? DEFAULT_RULES);
+  return { issues, risk: computeRiskScore(issues) };
+}