ai-trust 0.2.1 → 0.2.4

package/dist/telemetry/opt-in.js

@@ -1,26 +1,54 @@
 /**
- * Contribution Opt-In Prompt
+ * Contribution Consent and Scan Counting
  *
- * Handles the user's consent to share anonymized scan findings
- * with the OpenA2A Registry. Prompts on first scan and once at
- * scan #10, then never again.
+ * Manages the user's consent to share anonymized scan findings
+ * with the OpenA2A Registry. Uses a delayed consent tip shown
+ * after the 3rd scan (non-interactive, no blocking prompts).
  *
- * Shares ~/.opena2a/config.json with the rest of the OpenA2A ecosystem
- * (opena2a-cli, hackmyagent) so opt-in carries across tools.
+ * Config/counting is delegated to @opena2a/shared (the canonical
+ * source for ~/.opena2a/config.json). If @opena2a/shared is not
+ * available at runtime, falls back to a local implementation.
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { dirname, join } from "path";
-/**
- * Resolve the path to the OpenA2A config file.
- */
+import { join } from "path";
+/** Resolved backend -- lazy-initialized on first call. */
+let _backend;
+function resolveBackend() {
+    if (_backend)
+        return _backend;
+    // When OPENA2A_HOME is set, always use local backend so the custom
+    // home directory is respected (important for testing and isolation).
+    if (!process.env.OPENA2A_HOME) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const shared = require("@opena2a/shared");
+            if (typeof shared.isContributeEnabled === "function" &&
+                typeof shared.setContributeEnabled === "function" &&
+                typeof shared.incrementScanCount === "function" &&
+                typeof shared.shouldPromptContribute === "function" &&
+                typeof shared.dismissContributePrompt === "function") {
+                _backend = {
+                    isContributeEnabled: shared.isContributeEnabled,
+                    setContributeEnabled: shared.setContributeEnabled,
+                    incrementScanCount: shared.incrementScanCount,
+                    getScanCount: shared.getScanCount || (() => 0),
+                    shouldPromptContribute: shared.shouldPromptContribute,
+                    dismissContributePrompt: shared.dismissContributePrompt,
+                };
+                return _backend;
+            }
+        }
+        catch {
+            // @opena2a/shared not installed -- fall through to local backend
+        }
+    }
+    _backend = createLocalBackend();
+    return _backend;
+}
 function getConfigPath() {
-    const home = process.env.OPENA2A_HOME || join(homedir(), ".opena2a");
+    const home = process.env.OPENA2A_HOME || join(require("os").homedir(), ".opena2a");
     return join(home, "config.json");
 }
-/**
- * Read the OpenA2A config file. Returns empty object if missing or invalid.
- */
 function readConfig() {
     const configPath = getConfigPath();
     try {
@@ -29,156 +57,157 @@ function readConfig() {
         }
     }
     catch {
-        // Corrupt config file -- treat as empty
+        // Corrupt config -- treat as empty
     }
     return {};
 }
-/**
- * Write the OpenA2A config file, preserving existing fields.
- */
 function writeConfig(config) {
     const configPath = getConfigPath();
-    const dir = dirname(configPath);
+    const dir = require("path").dirname(configPath);
     mkdirSync(dir, { recursive: true });
     writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", {
         mode: 0o600,
     });
 }
+/** Cooldown for the consent tip: 30 days after dismissal. */
+const TIP_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
+function createLocalBackend() {
+    return {
+        isContributeEnabled() {
+            const config = readConfig();
+            return config.contribute?.enabled === true;
+        },
+        setContributeEnabled(enabled) {
+            const config = readConfig();
+            if (!config.contribute)
+                config.contribute = {};
+            config.contribute.enabled = enabled;
+            writeConfig(config);
+        },
+        incrementScanCount() {
+            const config = readConfig();
+            if (!config.telemetry)
+                config.telemetry = {};
+            config.telemetry.scanCount = (config.telemetry.scanCount ?? 0) + 1;
+            writeConfig(config);
+            return config.telemetry.scanCount;
+        },
+        getScanCount() {
+            const config = readConfig();
+            return config.telemetry?.scanCount ?? 0;
+        },
+        shouldPromptContribute() {
+            const config = readConfig();
+            // Already decided -- do not prompt
+            if (config.contribute?.enabled === true ||
+                config.contribute?.enabled === false) {
+                return false;
+            }
+            const count = config.telemetry?.scanCount ?? 0;
+            if (count < 3)
+                return false;
+            // Check cooldown
+            const dismissed = config.telemetry?.contributePromptDismissedAt;
+            if (dismissed) {
+                const dismissedMs = new Date(dismissed).getTime();
+                if (Date.now() - dismissedMs < TIP_COOLDOWN_MS)
+                    return false;
+            }
+            return true;
+        },
+        dismissContributePrompt() {
+            const config = readConfig();
+            if (!config.telemetry)
+                config.telemetry = {};
+            config.telemetry.contributePromptDismissedAt = new Date().toISOString();
+            writeConfig(config);
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
 /**
  * Check whether the contribution setting is enabled.
  *
  * Returns:
- *   true  - user explicitly opted in, or --contribute flag used
- *   false - user explicitly opted out, or --no-contribute flag used
- *   undefined - not yet configured (should prompt)
+ *   true  - user explicitly opted in
+ *   false - user explicitly opted out (or default in shared backend)
+ *   undefined - not yet configured
  */
 export function isContributeEnabled() {
-    const config = readConfig();
-    if (config.contribute?.enabled === true)
-        return true;
-    if (config.contribute?.enabled === false)
-        return false;
-    return undefined;
+    return resolveBackend().isContributeEnabled() || undefined;
 }
 /**
- * Check whether we should show the contribution prompt.
+ * Check whether we should show the contribution tip.
  *
- * Prompt conditions:
- *   1. contribute.enabled is undefined (never asked) and this is the first scan
- *   2. contribute.enabled is undefined and scan count has reached 10 (second chance)
- *
- * Returns false if:
- *   - contribute.enabled is explicitly set (true or false)
- *   - Non-interactive environment (no TTY)
- *   - Already prompted at scan #10
+ * Returns true after the 3rd scan if the user hasn't opted in,
+ * opted out, or dismissed the tip within the last 30 days.
  */
 export function shouldPromptContribute() {
-    // Never prompt in non-interactive environments
-    if (!process.stdin.isTTY || !process.stdout.isTTY)
-        return false;
-    const config = readConfig();
-    // Already configured -- never prompt
-    if (config.contribute?.enabled === true ||
-        config.contribute?.enabled === false) {
-        return false;
-    }
-    const scanCount = config.contribute?.scanCount ?? 0;
-    // First scan (scanCount === 0): prompt
-    if (scanCount === 0)
-        return true;
-    // Tenth scan: prompt once more (second chance)
-    if (scanCount >= 9 && !config.contribute?.promptedAtTen)
-        return true;
-    return false;
+    return resolveBackend().shouldPromptContribute();
 }
 /**
- * Increment the scan count in the config file.
- * Called after each scan completes, regardless of contribution setting.
+ * Increment the scan count. Called after each scan completes,
+ * regardless of contribution setting.
  */
 export function incrementScanCount() {
-    const config = readConfig();
-    if (!config.contribute) {
-        config.contribute = {};
-    }
-    config.contribute.scanCount = (config.contribute.scanCount ?? 0) + 1;
-    writeConfig(config);
+    return resolveBackend().incrementScanCount();
 }
 /**
  * Save the user's contribution choice to the config file.
  */
 export function saveContributeChoice(enabled) {
-    const config = readConfig();
-    if (!config.contribute) {
-        config.contribute = {};
+    resolveBackend().setContributeEnabled(enabled);
+    if (!enabled) {
+        resolveBackend().dismissContributePrompt();
     }
-    config.contribute.enabled = enabled;
-    // Track that we prompted at scan #10 so we don't ask again
-    const scanCount = config.contribute.scanCount ?? 0;
-    if (scanCount >= 9) {
-        config.contribute.promptedAtTen = true;
-    }
-    writeConfig(config);
 }
 /**
- * Display the contribution opt-in prompt and return the user's choice.
+ * Record a scan and return a consent tip string if the threshold is reached.
  *
- * Uses raw stdin to read a single keypress (Y/N).
- * Returns true if the user opted in, false otherwise.
+ * After the 3rd scan, returns a non-interactive tip encouraging the user
+ * to enable contribution. Returns null if tip should not be shown.
+ * This replaces the previous interactive Y/N prompt.
  */
-export async function showContributePrompt() {
-    const lines = [
+export function recordScanAndMaybeShowTip() {
+    incrementScanCount();
+    if (!shouldPromptContribute())
+        return null;
+    // Mark as shown so we respect the 30-day cooldown
+    resolveBackend().dismissContributePrompt();
+    return [
         "",
-        "Help improve security for the AI agent community.",
+        "  Tip: Your scans help build community trust data for MCP servers and AI agents.",
+        "  Share anonymized results so other developers can make informed security decisions.",
+        "  Enable: npx ai-trust check --contribute  (or: opena2a config contribute on)",
         "",
-        "Share anonymized scan findings with the OpenA2A Registry?",
-        "No personal data. No source code. Only check pass/fail results.",
-        "You can opt out anytime: opena2a config set contribute false",
-        "",
-        "[Y] Yes, contribute   [N] No thanks",
-    ];
-    for (const line of lines) {
-        process.stderr.write(line + "\n");
-    }
-    const answer = await readSingleKey();
-    const enabled = answer.toLowerCase() === "y";
-    saveContributeChoice(enabled);
-    if (enabled) {
-        process.stderr.write("\nContribution enabled. Thank you.\n");
-    }
-    else {
-        process.stderr.write("\nContribution disabled. You can enable it later: opena2a config set contribute true\n");
+    ].join("\n");
+}
+/**
+ * Display the contribution opt-in prompt and return the user's choice.
+ *
+ * @deprecated Use recordScanAndMaybeShowTip() instead. This is kept
+ * for backward compatibility but now shows a non-interactive tip
+ * rather than blocking for input.
+ */
+export async function showContributePrompt() {
+    const tip = recordScanAndMaybeShowTip();
+    if (tip) {
+        process.stdout.write(tip + "\n");
     }
-    return enabled;
+    return false;
 }
 /**
- * Read a single keypress from stdin.
- * Falls back to 'n' after a 30-second timeout.
+ * Reset the backend (for testing).
+ * When forceLocal is true, skips @opena2a/shared resolution and uses the
+ * local file-based backend. This allows tests to control config via
+ * OPENA2A_HOME without the shared backend ignoring that env var.
  */
-function readSingleKey() {
-    return new Promise((resolve) => {
-        const stdin = process.stdin;
-        const wasRaw = stdin.isRaw;
-        // Timeout after 30 seconds -- default to 'n'
-        const timer = setTimeout(() => {
-            cleanup();
-            resolve("n");
-        }, 30_000);
-        function cleanup() {
-            clearTimeout(timer);
-            stdin.removeListener("data", onData);
-            if (stdin.isRaw !== wasRaw) {
-                stdin.setRawMode(wasRaw ?? false);
-            }
-            stdin.pause();
-        }
-        function onData(data) {
-            const char = data.toString().trim().toLowerCase();
-            cleanup();
-            resolve(char || "n");
-        }
-        stdin.setRawMode(true);
-        stdin.resume();
-        stdin.once("data", onData);
-    });
+export function _resetBackend(forceLocal = false) {
+    _backend = undefined;
+    if (forceLocal) {
+        _backend = createLocalBackend();
+    }
 }
 //# sourceMappingURL=opt-in.js.map

package/dist/telemetry/opt-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"opt-in.js","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAcrC;;GAEG;AACH,SAAS,aAAa;IACpB,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAChE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB;IACpC,+CAA+C;IAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEhE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,qCAAqC;IACrC,IACE,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI;QACnC,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,KAAK,EACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,CAAC,CAAC;IAEpD,uCAAuC;IACvC,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjC,+CAA+C;IAC/C,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa;QAAE,OAAO,IAAI,CAAC;IAErE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAEpC,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;IACnD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC;IACzC,CAAC;IAED,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,mDAAmD;QACnD,EAAE;QACF,2DAA2D;QAC3D,iEAAiE;QACjE,8DAA8D;QAC9D,EAAE;QACF,qCAAqC;KACtC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC;IAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,CACvC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa;IACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAE3B,6CAA6C;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,SAAS,MAAM,CAAC,IAAY;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"opt-in.js","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAe5B,0DAA0D;AAC1D,IAAI,QAAmC,CAAC;AAExC,SAAS,cAAc;IACrB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,mEAAmE;IACnE,qEAAqE;IACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC1C,IACE,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU;gBAChD,OAAO,MAAM,CAAC,oBAAoB,KAAK,UAAU;gBACjD,OAAO,MAAM,CAAC,kBAAkB,KAAK,UAAU;gBAC/C,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU;gBACnD,OAAO,MAAM,CAAC,uBAAuB,KAAK,UAAU,EACpD,CAAC;gBACD,QAAQ,GAAG;oBACT,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC9C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;oBACrD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;iBACxD,CAAC;gBACF,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAED,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAkBD,SAAS,aAAa;IACpB,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAChE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,SAAS,kBAAkB;IACzB,OAAO;QACL,mBAAmB;YACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;QAC7C,CAAC;QAED,oBAAoB,CAAC,OAAgB;YACnC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;YACpC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,kBAAkB;YAChB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,CAAC;QAED,YAAY;YACV,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,sBAAsB;YACpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,mCAAmC;YACnC,IACE,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI;gBACnC,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,KAAK,EACpC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;YAC/C,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE5B,iBAAiB;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC;YAChE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,eAAe;oBAAE,OAAO,KAAK,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uBAAuB;YACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,2BAA2B,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxE,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC,mBAAmB,EAAE,IAAI,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,cAAc,EAAE,CAAC,sBAAsB,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,cAAc,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB;IACvC,kBAAkB,EAAE,CAAC;IAErB,IAAI,CAAC,sBAAsB,EAAE;QAAE,OAAO,IAAI,CAAC;IAE3C,kDAAkD;IAClD,cAAc,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAE3C,OAAO;QACL,EAAE;QACF,kFAAkF;QAClF,sFAAsF;QACtF,+EAA+E;QAC/E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAU,GAAG,KAAK;IAC9C,QAAQ,GAAG,SAAS,CAAC;IACrB,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,11 @@
 {
   "name": "ai-trust",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "description": "Trust verification CLI for AI packages — check MCP servers, A2A agents, and AI tools before you install",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/opena2a-org/ai-trust.git"
+  },
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -33,6 +37,7 @@
   "author": "OpenA2A",
   "license": "Apache-2.0",
   "dependencies": {
+    "@opena2a/shared": "^0.1.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0"
   },