ai-trust 0.2.3 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -4
- package/dist/commands/audit.d.ts.map +1 -1
- package/dist/commands/audit.js +13 -38
- package/dist/commands/audit.js.map +1 -1
- package/dist/commands/check.d.ts.map +1 -1
- package/dist/commands/check.js +12 -35
- package/dist/commands/check.js.map +1 -1
- package/dist/telemetry/contribute.d.ts +38 -13
- package/dist/telemetry/contribute.d.ts.map +1 -1
- package/dist/telemetry/contribute.js +119 -78
- package/dist/telemetry/contribute.js.map +1 -1
- package/dist/telemetry/index.d.ts +2 -2
- package/dist/telemetry/index.d.ts.map +1 -1
- package/dist/telemetry/index.js +2 -2
- package/dist/telemetry/index.js.map +1 -1
- package/dist/telemetry/opt-in.d.ts +20 -13
- package/dist/telemetry/opt-in.d.ts.map +1 -1
- package/dist/telemetry/opt-in.js +87 -112
- package/dist/telemetry/opt-in.js.map +1 -1
- package/package.json +2 -1
package/README.md
CHANGED
|
@@ -1,5 +1,4 @@
|
|
|
1
|
-
> **[OpenA2A](https://github.com/opena2a-org/opena2a)**: [CLI](https://github.com/opena2a-org/opena2a) · [HackMyAgent](https://github.com/opena2a-org/hackmyagent) · [Secretless](https://github.com/opena2a-org/secretless-ai) · [AIM](https://github.com/opena2a-org/agent-identity-management) · [Browser Guard](https://github.com/opena2a-org/AI-BrowserGuard) · [DVAA](https://github.com/opena2a-org/damn-vulnerable-ai-agent)
|
|
2
|
-
|
|
1
|
+
> **[OpenA2A](https://github.com/opena2a-org/opena2a)**: [CLI](https://github.com/opena2a-org/opena2a) · [HackMyAgent](https://github.com/opena2a-org/hackmyagent) · [Secretless](https://github.com/opena2a-org/secretless-ai) · [AIM](https://github.com/opena2a-org/agent-identity-management) · [Browser Guard](https://github.com/opena2a-org/AI-BrowserGuard) · [DVAA](https://github.com/opena2a-org/damn-vulnerable-ai-agent)
|
|
3
2
|
# ai-trust
|
|
4
3
|
|
|
5
4
|
Trust verification CLI for AI packages. Queries the OpenA2A Registry trust graph for security scans, community consensus, dependency risk, and known advisories.
|
|
@@ -47,6 +46,8 @@ Expected output:
|
|
|
47
46
|
Findings: 0 critical, 0 high, 2 medium
|
|
48
47
|
```
|
|
49
48
|
|
|
49
|
+
|
|
50
|
+
|
|
50
51
|
## Built-in Help
|
|
51
52
|
|
|
52
53
|
```bash
|
|
@@ -198,8 +199,10 @@ See [docs/USE-CASES.md](docs/USE-CASES.md) for the full index.
|
|
|
198
199
|
|
|
199
200
|
## Links
|
|
200
201
|
|
|
201
|
-
- [OpenA2A](https://opena2a.org)
|
|
202
|
-
- [OpenA2A
|
|
202
|
+
- [OpenA2A Registry](https://registry.opena2a.org) — trust scores and scan data
|
|
203
|
+
- [OpenA2A CLI](https://github.com/opena2a-org/opena2a) — unified security CLI
|
|
204
|
+
- [HackMyAgent](https://github.com/opena2a-org/hackmyagent) — local scanning for unverified packages
|
|
205
|
+
- [opena2a.org](https://opena2a.org) — full platform
|
|
203
206
|
|
|
204
207
|
## License
|
|
205
208
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuH3D"}
|
package/dist/commands/audit.js
CHANGED
|
@@ -8,7 +8,7 @@ import { parseDependencyFile } from "../utils/parser.js";
|
|
|
8
8
|
import { formatBatchResults, formatJson, } from "../output/formatter.js";
|
|
9
9
|
import { isHmaAvailable, scanPackage } from "../scanner/index.js";
|
|
10
10
|
import { confirm } from "../utils/prompt.js";
|
|
11
|
-
import { isContributeEnabled,
|
|
11
|
+
import { isContributeEnabled, queueScanResult, flushQueue, recordScanAndMaybeShowTip, } from "../telemetry/index.js";
|
|
12
12
|
export function registerAuditCommand(program) {
|
|
13
13
|
program
|
|
14
14
|
.command("audit <file>")
|
|
@@ -130,49 +130,24 @@ async function scanMissingPackages(notFound, allResults, opts, registryUrl) {
|
|
|
130
130
|
}
|
|
131
131
|
/**
|
|
132
132
|
* Handle community contribution after audit scanning.
|
|
133
|
-
* Follows the same opt-in flow as check:
|
|
133
|
+
* Follows the same opt-in flow as check: queue + flush.
|
|
134
134
|
*/
|
|
135
135
|
async function handleAuditContribution(scannedResults, opts, registryUrl) {
|
|
136
|
-
//
|
|
137
|
-
|
|
138
|
-
|
|
136
|
+
// Show tip after 3rd scan (non-blocking, replaces old interactive prompt)
|
|
137
|
+
const tip = recordScanAndMaybeShowTip();
|
|
138
|
+
if (tip) {
|
|
139
|
+
process.stderr.write(tip + "\n");
|
|
139
140
|
}
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
await submitAnonymizedTelemetry(name, scanResult, registryUrl);
|
|
143
|
-
}
|
|
141
|
+
const shouldContribute = opts.contribute || isContributeEnabled() === true;
|
|
142
|
+
if (!shouldContribute)
|
|
144
143
|
return;
|
|
145
|
-
|
|
146
|
-
const configEnabled = isContributeEnabled();
|
|
147
|
-
if (configEnabled === true) {
|
|
148
|
-
// Already opted in: auto-contribute anonymized telemetry
|
|
144
|
+
try {
|
|
149
145
|
for (const { name, scanResult } of scannedResults) {
|
|
150
|
-
|
|
146
|
+
queueScanResult(name, scanResult.scan.findings);
|
|
151
147
|
}
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
return;
|
|
156
|
-
}
|
|
157
|
-
// Not yet configured: check if we should prompt
|
|
158
|
-
if (shouldPromptContribute()) {
|
|
159
|
-
const enabled = await showContributePrompt();
|
|
160
|
-
if (enabled) {
|
|
161
|
-
for (const { name, scanResult } of scannedResults) {
|
|
162
|
-
await submitAnonymizedTelemetry(name, scanResult, registryUrl);
|
|
163
|
-
}
|
|
164
|
-
}
|
|
165
|
-
}
|
|
166
|
-
}
|
|
167
|
-
/**
|
|
168
|
-
* Submit anonymized telemetry to the registry (opt-in contribution).
|
|
169
|
-
*/
|
|
170
|
-
async function submitAnonymizedTelemetry(name, scanResult, registryUrl) {
|
|
171
|
-
try {
|
|
172
|
-
const payload = buildContributionPayload(name, scanResult.scan.findings);
|
|
173
|
-
const result = await submitContribution(payload, registryUrl);
|
|
174
|
-
if (result.success) {
|
|
175
|
-
console.error(chalk.green(` Anonymized scan data shared: ${name}`));
|
|
148
|
+
const ok = await flushQueue(registryUrl);
|
|
149
|
+
if (ok) {
|
|
150
|
+
console.error(chalk.green(` Anonymized scan data shared: ${scannedResults.length} package(s)`));
|
|
176
151
|
}
|
|
177
152
|
}
|
|
178
153
|
catch {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,
|
|
1
|
+
{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CACV,0DAA0D,CAC3D;SACA,MAAM,CACL,qBAAqB,EACrB,+BAA+B,EAC/B,GAAG,CACJ;SACA,MAAM,CACL,gBAAgB,EAChB,+CAA+C,CAChD;SACA,MAAM,CACL,cAAc,EACd,+CAA+C,CAChD;SACA,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAkB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAG9B,CAAC;QAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAEjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,iCAAiC,QAAQ,CAAC,MAAM,kEAAkE,CACnH,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAEnD,qCAAqC;YACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,mBAAmB,CACvB,QAAQ,EACR,QAAQ,CAAC,OAAO,EAChB,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAC;YACJ,CAAC;iBAAM,IACL,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,IAAI,CAAC,WAAW;gBACjB,OAAO,CAAC,KAAK,CAAC,KAAK,EACnB,CAAC;gBACD,6BAA6B;gBAC7B,MAAM,UAAU,GAAG,MAAM,OAAO,CAC9B,GAAG,QAAQ,CAAC,MAAM,4CAA4C,EAC9D,KAAK,CACN,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,EAAE,CAAC;wBAC9B,OAAO,CAAC,KAAK,CACX,8DAA8D,CAC/D,CAAC;wBACF,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAChD,CAAC;yBAAM,CAAC;wBACN,MAAM,mBAAmB,CACvB,QAAQ,EACR,QAAQ,CAAC,OAAO,EAChB,IAAI,EACJ,UAAU,CAAC,WAAW,CACvB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,GAAG,QAAQ,CAC1C,CAAC;YACF,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,OAAe,CAAC;YACpB,IACE,GAAG,YAAY,KAAK;gBACpB,MAAM,IAAI,GAAG;gBACZ,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAChD,CAAC;gBACD,OAAO,GAAG,mBAAmB,IAAI,EAAE,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,QAAuB,EACvB,UAAyB,EACzB,IAAkB,EAClB,WAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,8DAA8D,CAC/D,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAChE,CAAC;IAEF,MAAM,cAAc,GAA+C,EAAE,CAAC;IAEtE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAE/C,6BAA6B;YAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,UAAU,CAAC,GAAG,CAAC,GAAG;oBAChB,GAAG,UAAU,CAAC,GAAG,CAAC;oBAClB,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU,EAAE,OAAO;iBACpB,CAAC;YACJ,CAAC;YAED,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,uBAAuB,CAC3B,cAAc,EACd,IAAI,EACJ,WAAW,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CACpC,cAA0D,EAC1D,IAAkB,EAClB,WAAmB;IAEnB,0EAA0E;IAC1E,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,gBAAgB,GACpB,IAAI,CAAC,UAAU,IAAI,mBAAmB,EAAE,KAAK,IAAI,CAAC;IAEpD,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAE9B,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,cAAc,EAAE,CAAC;YAClD,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,KAAK,CACT,kCAAkC,cAAc,CAAC,MAAM,aAAa,CACrE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2E3D"}
|
package/dist/commands/check.js
CHANGED
|
@@ -10,7 +10,7 @@ import { formatCheckResult, formatScanResult, formatJson, } from "../output/form
|
|
|
10
10
|
import { resolveAndLog } from "../utils/resolve.js";
|
|
11
11
|
import { isHmaAvailable, scanPackage } from "../scanner/index.js";
|
|
12
12
|
import { confirm } from "../utils/prompt.js";
|
|
13
|
-
import { isContributeEnabled,
|
|
13
|
+
import { isContributeEnabled, queueScanResult, flushQueue, recordScanAndMaybeShowTip, } from "../telemetry/index.js";
|
|
14
14
|
export function registerCheckCommand(program) {
|
|
15
15
|
program
|
|
16
16
|
.command("check <name>")
|
|
@@ -123,47 +123,24 @@ async function handleScanFlow(name, client, globalOpts, opts, statusMessage) {
|
|
|
123
123
|
await handleContribute(name, scanResult, globalOpts, opts);
|
|
124
124
|
}
|
|
125
125
|
async function handleContribute(name, scanResult, globalOpts, opts) {
|
|
126
|
-
//
|
|
127
|
-
|
|
126
|
+
// Show tip after 3rd scan (non-blocking, replaces old interactive prompt)
|
|
127
|
+
const tip = recordScanAndMaybeShowTip();
|
|
128
|
+
if (tip) {
|
|
129
|
+
process.stderr.write(tip + "\n");
|
|
130
|
+
}
|
|
128
131
|
// Determine contribution mode:
|
|
129
132
|
// 1. --contribute flag: always contribute anonymized telemetry
|
|
130
133
|
// 2. Config enabled: auto-contribute anonymized telemetry
|
|
131
|
-
// 3. Not configured:
|
|
132
|
-
|
|
133
|
-
if (
|
|
134
|
-
await submitAnonymizedTelemetry(name, scanResult, globalOpts.registryUrl);
|
|
135
|
-
return;
|
|
136
|
-
}
|
|
137
|
-
const configEnabled = isContributeEnabled();
|
|
138
|
-
if (configEnabled === true) {
|
|
139
|
-
// Already opted in: auto-contribute anonymized telemetry
|
|
140
|
-
await submitAnonymizedTelemetry(name, scanResult, globalOpts.registryUrl);
|
|
134
|
+
// 3. Not configured or disabled: skip
|
|
135
|
+
const shouldContribute = opts.contribute || isContributeEnabled() === true;
|
|
136
|
+
if (!shouldContribute)
|
|
141
137
|
return;
|
|
142
|
-
}
|
|
143
|
-
if (configEnabled === false) {
|
|
144
|
-
// Explicitly opted out: skip
|
|
145
|
-
return;
|
|
146
|
-
}
|
|
147
|
-
// Not yet configured: check if we should prompt
|
|
148
|
-
if (shouldPromptContribute()) {
|
|
149
|
-
const enabled = await showContributePrompt();
|
|
150
|
-
if (enabled) {
|
|
151
|
-
await submitAnonymizedTelemetry(name, scanResult, globalOpts.registryUrl);
|
|
152
|
-
}
|
|
153
|
-
}
|
|
154
|
-
}
|
|
155
|
-
/**
|
|
156
|
-
* Submit anonymized telemetry to the registry (opt-in contribution).
|
|
157
|
-
* Only sends checkId, pass/fail, and severity. No file paths, descriptions, or code.
|
|
158
|
-
*/
|
|
159
|
-
async function submitAnonymizedTelemetry(name, scanResult, registryUrl) {
|
|
160
138
|
try {
|
|
161
|
-
|
|
162
|
-
const
|
|
163
|
-
if (
|
|
139
|
+
queueScanResult(name, scanResult.scan.findings);
|
|
140
|
+
const ok = await flushQueue(globalOpts.registryUrl);
|
|
141
|
+
if (ok) {
|
|
164
142
|
console.error(chalk.green("Anonymized scan data shared with the community."));
|
|
165
143
|
}
|
|
166
|
-
// Silent on failure -- non-blocking
|
|
167
144
|
}
|
|
168
145
|
catch {
|
|
169
146
|
// Non-fatal: telemetry submission should never crash the scan
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,
|
|
1
|
+
{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAW/B,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CACL,mBAAmB,EACnB,4DAA4D,CAC7D;SACA,MAAM,CACL,mBAAmB,EACnB,sDAAsD,CACvD;SACA,MAAM,CACL,cAAc,EACd,oDAAoD,CACrD;SACA,MAAM,CAAC,WAAW,EAAE,iCAAiC,CAAC;SACtD,MAAM,CAAC,UAAU,EAAE,mCAAmC,CAAC;SACvD,MAAM,CACL,kBAAkB,EAClB,kCAAkC,EAClC,IAAI,CACL;SACA,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAkB,EAAE,EAAE;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAG9B,CAAC;QAEF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAExD,uBAAuB;YACvB,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,cAAc,CAClB,IAAI,EACJ,MAAM,EACN,UAAU,EACV,IAAI,EACJ,gBAAgB,CACjB,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,IACE,MAAM,CAAC,KAAK;gBACZ,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,EAC9D,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC/D,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CACnD,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;gBACrC,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,MAAsB,EACtB,UAAkD,EAClD,IAAkB;IAElB,8CAA8C;IAC9C,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,cAAc,CAClB,IAAI,EACJ,MAAM,EACN,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,sCAAsC,CACvD,CAAC;QACF,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,YAAY,IAAI,6EAA6E,CAAC;QAC1G,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,sCAAsC,CAAC,CACnE,CAAC;IAEF,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;QAAE,OAAO;IAErC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,MAAsB,EACtB,UAAkD,EAClD,IAAkB,EAClB,aAAqB;IAErB,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;QAAE,OAAO;IAErC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAEzC,IAAI,UAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,sBAAsB;IACtB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,2EAA2E;IAC3E,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,8BAA8B;IAC9B,MAAM,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,UAAsB,EACtB,UAAkD,EAClD,IAAkB;IAElB,0EAA0E;IAC1E,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,+BAA+B;IAC/B,+DAA+D;IAC/D,0DAA0D;IAC1D,sCAAsC;IAEtC,MAAM,gBAAgB,GACpB,IAAI,CAAC,UAAU,IAAI,mBAAmB,EAAE,KAAK,IAAI,CAAC;IAEpD,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAE9B,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,8DAA8D,CAC/D,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -1,9 +1,16 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Community Contribution Module
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
4
|
+
* Delegates to @opena2a/contribute for queue management and batch submission.
|
|
5
|
+
*
|
|
6
|
+
* Queue file: ~/.opena2a/contribute-queue.json
|
|
7
|
+
* Endpoint: POST api.oa2a.org/api/v1/contribute
|
|
8
|
+
*
|
|
9
|
+
* PRIVACY: Only summary statistics are sent (totalChecks, passed,
|
|
10
|
+
* severity counts, score, verdict). No file paths, no source code,
|
|
11
|
+
* no raw finding descriptions, no PII.
|
|
6
12
|
*/
|
|
13
|
+
import { getContributorToken, type ContributionEvent as SharedContributionEvent, type ContributionBatch as SharedContributionBatch } from "@opena2a/contribute";
|
|
7
14
|
import type { HmaFinding } from "../scanner/hma.js";
|
|
8
15
|
/** Anonymized finding sent to the registry. Only check ID, result, and severity. */
|
|
9
16
|
export interface ContributionFinding {
|
|
@@ -11,7 +18,7 @@ export interface ContributionFinding {
|
|
|
11
18
|
result: "pass" | "fail";
|
|
12
19
|
severity: string;
|
|
13
20
|
}
|
|
14
|
-
/**
|
|
21
|
+
/** Legacy payload type. Callers should migrate to queueScanResult(). */
|
|
15
22
|
export interface ContributionPayload {
|
|
16
23
|
contributorToken: string;
|
|
17
24
|
packageName: string;
|
|
@@ -28,27 +35,45 @@ export interface ContributionResult {
|
|
|
28
35
|
scanId?: string;
|
|
29
36
|
error?: string;
|
|
30
37
|
}
|
|
38
|
+
/** Re-export ContributionEvent from the shared library. */
|
|
39
|
+
export type ContributionEvent = SharedContributionEvent;
|
|
40
|
+
/** Re-export ContributionBatch from the shared library. */
|
|
41
|
+
export type ContributionBatch = SharedContributionBatch;
|
|
31
42
|
/**
|
|
32
43
|
* Generate a stable per-device contributor token.
|
|
44
|
+
* Delegates to @opena2a/contribute. SHA256(hostname + username + random salt
|
|
45
|
+
* stored at ~/.opena2a/contributor-salt).
|
|
46
|
+
*/
|
|
47
|
+
export { getContributorToken as generateContributorToken };
|
|
48
|
+
/**
|
|
49
|
+
* Queue a scan result as a ContributionEvent.
|
|
33
50
|
*
|
|
34
|
-
*
|
|
35
|
-
*
|
|
36
|
-
*
|
|
51
|
+
* Delegates to @opena2a/contribute for queue management and batch
|
|
52
|
+
* submission. Converts the detailed finding list into an anonymized
|
|
53
|
+
* summary: only counts and severity distribution, no file paths or
|
|
54
|
+
* descriptions.
|
|
55
|
+
*/
|
|
56
|
+
export declare function queueScanResult(packageName: string, findings: HmaFinding[], durationMs?: number): void;
|
|
57
|
+
/**
|
|
58
|
+
* Flush queued events to the OpenA2A Registry.
|
|
59
|
+
* Returns true if submission succeeded (or queue was empty).
|
|
60
|
+
* Delegates to @opena2a/contribute.
|
|
37
61
|
*/
|
|
38
|
-
export declare function
|
|
62
|
+
export declare function flushQueue(registryUrl?: string, verbose?: boolean): Promise<boolean>;
|
|
39
63
|
/**
|
|
40
64
|
* Build an anonymized contribution payload from scan findings.
|
|
41
65
|
*
|
|
42
|
-
*
|
|
43
|
-
*
|
|
44
|
-
*
|
|
66
|
+
* @deprecated Use queueScanResult() + flushQueue() instead. Kept for
|
|
67
|
+
* backward compatibility. The per-finding payload format is superseded
|
|
68
|
+
* by the summary-based ContributionEvent format.
|
|
45
69
|
*/
|
|
46
70
|
export declare function buildContributionPayload(packageName: string, findings: HmaFinding[]): ContributionPayload;
|
|
47
71
|
/**
|
|
48
|
-
* Submit
|
|
72
|
+
* Submit a contribution payload to the registry.
|
|
49
73
|
*
|
|
50
|
-
*
|
|
51
|
-
*
|
|
74
|
+
* @deprecated Use queueScanResult() + flushQueue() instead. This legacy
|
|
75
|
+
* function now queues the event internally and flushes, rather than
|
|
76
|
+
* posting per-finding payloads directly.
|
|
52
77
|
*/
|
|
53
78
|
export declare function submitContribution(payload: ContributionPayload, registryUrl?: string): Promise<ContributionResult>;
|
|
54
79
|
//# sourceMappingURL=contribute.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"contribute.d.ts","sourceRoot":"","sources":["../../src/telemetry/contribute.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"contribute.d.ts","sourceRoot":"","sources":["../../src/telemetry/contribute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,mBAAmB,EAEnB,KAAK,iBAAiB,IAAI,uBAAuB,EACjD,KAAK,iBAAiB,IAAI,uBAAuB,EAClD,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAUpD,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;CACvC;AAED,2CAA2C;AAC3C,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAExD,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAMxD;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,IAAI,wBAAwB,EAAE,CAAC;AAiC3D;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,UAAU,EAAE,EACtB,UAAU,SAAI,GACb,IAAI,CA+BN;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAElB;AAMD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,UAAU,EAAE,GACrB,mBAAmB,CAiBrB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,mBAAmB,EAC5B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,CAAC,CAyC7B"}
|
|
@@ -1,49 +1,33 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Community Contribution Module
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
4
|
+
* Delegates to @opena2a/contribute for queue management and batch submission.
|
|
5
|
+
*
|
|
6
|
+
* Queue file: ~/.opena2a/contribute-queue.json
|
|
7
|
+
* Endpoint: POST api.oa2a.org/api/v1/contribute
|
|
8
|
+
*
|
|
9
|
+
* PRIVACY: Only summary statistics are sent (totalChecks, passed,
|
|
10
|
+
* severity counts, score, verdict). No file paths, no source code,
|
|
11
|
+
* no raw finding descriptions, no PII.
|
|
6
12
|
*/
|
|
7
|
-
import {
|
|
8
|
-
import {
|
|
9
|
-
import { hostname, type as osType, userInfo } from "os";
|
|
10
|
-
import { join } from "path";
|
|
13
|
+
import { contribute, getContributorToken, queueEvent, } from "@opena2a/contribute";
|
|
14
|
+
import { type as osType } from "os";
|
|
11
15
|
import { createRequire } from "node:module";
|
|
12
16
|
const require = createRequire(import.meta.url);
|
|
13
17
|
const pkg = require("../../package.json");
|
|
14
18
|
const VERSION = pkg.version;
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
*/
|
|
19
|
-
function getOpena2aHome() {
|
|
20
|
-
return (process.env.OPENA2A_HOME || join(require("os").homedir(), ".opena2a"));
|
|
21
|
-
}
|
|
19
|
+
// ---------------------------------------------------------------------------
|
|
20
|
+
// Contributor token (delegated to @opena2a/contribute)
|
|
21
|
+
// ---------------------------------------------------------------------------
|
|
22
22
|
/**
|
|
23
23
|
* Generate a stable per-device contributor token.
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
* The salt is generated once on first call and persisted locally.
|
|
27
|
-
* Shared with hackmyagent so the same device gets the same token.
|
|
28
|
-
*/
|
|
29
|
-
export function generateContributorToken() {
|
|
30
|
-
const home = getOpena2aHome();
|
|
31
|
-
const saltPath = join(home, "contributor-salt");
|
|
32
|
-
let salt;
|
|
33
|
-
if (existsSync(saltPath)) {
|
|
34
|
-
salt = readFileSync(saltPath, "utf-8").trim();
|
|
35
|
-
}
|
|
36
|
-
else {
|
|
37
|
-
salt = randomBytes(32).toString("hex");
|
|
38
|
-
mkdirSync(home, { recursive: true });
|
|
39
|
-
writeFileSync(saltPath, salt, { mode: 0o600 });
|
|
40
|
-
}
|
|
41
|
-
const input = `${hostname()}|${userInfo().username}|${salt}`;
|
|
42
|
-
return createHash("sha256").update(input).digest("hex");
|
|
43
|
-
}
|
|
44
|
-
/**
|
|
45
|
-
* Map the Node.js os.type() value to the server-accepted osType enum.
|
|
24
|
+
* Delegates to @opena2a/contribute. SHA256(hostname + username + random salt
|
|
25
|
+
* stored at ~/.opena2a/contributor-salt).
|
|
46
26
|
*/
|
|
27
|
+
export { getContributorToken as generateContributorToken };
|
|
28
|
+
// ---------------------------------------------------------------------------
|
|
29
|
+
// OS type resolution
|
|
30
|
+
// ---------------------------------------------------------------------------
|
|
47
31
|
function resolveOsType() {
|
|
48
32
|
const t = osType();
|
|
49
33
|
if (t === "Darwin")
|
|
@@ -52,12 +36,76 @@ function resolveOsType() {
|
|
|
52
36
|
return "windows";
|
|
53
37
|
return "linux";
|
|
54
38
|
}
|
|
39
|
+
// ---------------------------------------------------------------------------
|
|
40
|
+
// Verdict computation
|
|
41
|
+
// ---------------------------------------------------------------------------
|
|
42
|
+
function computeVerdict(findings) {
|
|
43
|
+
const critical = findings.filter((f) => !f.passed && f.severity === "critical").length;
|
|
44
|
+
const high = findings.filter((f) => !f.passed && f.severity === "high").length;
|
|
45
|
+
if (critical > 0)
|
|
46
|
+
return "fail";
|
|
47
|
+
if (high > 0)
|
|
48
|
+
return "warn";
|
|
49
|
+
return "pass";
|
|
50
|
+
}
|
|
51
|
+
// ---------------------------------------------------------------------------
|
|
52
|
+
// Queue a scan result (delegates to @opena2a/contribute)
|
|
53
|
+
// ---------------------------------------------------------------------------
|
|
54
|
+
/**
|
|
55
|
+
* Queue a scan result as a ContributionEvent.
|
|
56
|
+
*
|
|
57
|
+
* Delegates to @opena2a/contribute for queue management and batch
|
|
58
|
+
* submission. Converts the detailed finding list into an anonymized
|
|
59
|
+
* summary: only counts and severity distribution, no file paths or
|
|
60
|
+
* descriptions.
|
|
61
|
+
*/
|
|
62
|
+
export function queueScanResult(packageName, findings, durationMs = 0) {
|
|
63
|
+
const total = findings.length;
|
|
64
|
+
const passed = findings.filter((f) => f.passed).length;
|
|
65
|
+
const failed = findings.filter((f) => !f.passed);
|
|
66
|
+
const critical = failed.filter((f) => f.severity === "critical").length;
|
|
67
|
+
const high = failed.filter((f) => f.severity === "high").length;
|
|
68
|
+
const medium = failed.filter((f) => f.severity === "medium").length;
|
|
69
|
+
const low = failed.filter((f) => f.severity === "low").length;
|
|
70
|
+
const score = total > 0 ? Math.round((passed / total) * 100) : 0;
|
|
71
|
+
const verdict = computeVerdict(findings);
|
|
72
|
+
// Delegate to @opena2a/contribute -- fire-and-forget since the
|
|
73
|
+
// shared library handles queue persistence internally.
|
|
74
|
+
contribute.scanResult({
|
|
75
|
+
tool: "ai-trust",
|
|
76
|
+
toolVersion: VERSION,
|
|
77
|
+
packageName,
|
|
78
|
+
ecosystem: "npm",
|
|
79
|
+
totalChecks: total,
|
|
80
|
+
passed,
|
|
81
|
+
critical,
|
|
82
|
+
high,
|
|
83
|
+
medium,
|
|
84
|
+
low,
|
|
85
|
+
score,
|
|
86
|
+
verdict,
|
|
87
|
+
durationMs,
|
|
88
|
+
}).catch(() => {
|
|
89
|
+
// Non-fatal: contribution should never crash the scan
|
|
90
|
+
});
|
|
91
|
+
}
|
|
92
|
+
/**
|
|
93
|
+
* Flush queued events to the OpenA2A Registry.
|
|
94
|
+
* Returns true if submission succeeded (or queue was empty).
|
|
95
|
+
* Delegates to @opena2a/contribute.
|
|
96
|
+
*/
|
|
97
|
+
export async function flushQueue(registryUrl, verbose) {
|
|
98
|
+
return contribute.flush(registryUrl, verbose);
|
|
99
|
+
}
|
|
100
|
+
// ---------------------------------------------------------------------------
|
|
101
|
+
// Legacy API (kept for backward compatibility with existing callers/tests)
|
|
102
|
+
// ---------------------------------------------------------------------------
|
|
55
103
|
/**
|
|
56
104
|
* Build an anonymized contribution payload from scan findings.
|
|
57
105
|
*
|
|
58
|
-
*
|
|
59
|
-
*
|
|
60
|
-
*
|
|
106
|
+
* @deprecated Use queueScanResult() + flushQueue() instead. Kept for
|
|
107
|
+
* backward compatibility. The per-finding payload format is superseded
|
|
108
|
+
* by the summary-based ContributionEvent format.
|
|
61
109
|
*/
|
|
62
110
|
export function buildContributionPayload(packageName, findings) {
|
|
63
111
|
const contributionFindings = findings.map((f) => ({
|
|
@@ -66,7 +114,7 @@ export function buildContributionPayload(packageName, findings) {
|
|
|
66
114
|
severity: f.severity,
|
|
67
115
|
}));
|
|
68
116
|
return {
|
|
69
|
-
contributorToken:
|
|
117
|
+
contributorToken: getContributorToken(),
|
|
70
118
|
packageName,
|
|
71
119
|
packageVersion: "",
|
|
72
120
|
ecosystem: "npm",
|
|
@@ -77,47 +125,40 @@ export function buildContributionPayload(packageName, findings) {
|
|
|
77
125
|
};
|
|
78
126
|
}
|
|
79
127
|
/**
|
|
80
|
-
* Submit
|
|
128
|
+
* Submit a contribution payload to the registry.
|
|
81
129
|
*
|
|
82
|
-
*
|
|
83
|
-
*
|
|
130
|
+
* @deprecated Use queueScanResult() + flushQueue() instead. This legacy
|
|
131
|
+
* function now queues the event internally and flushes, rather than
|
|
132
|
+
* posting per-finding payloads directly.
|
|
84
133
|
*/
|
|
85
134
|
export async function submitContribution(payload, registryUrl) {
|
|
86
|
-
const
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
}
|
|
114
|
-
catch (err) {
|
|
115
|
-
const message = err instanceof Error ? err.message : "Unknown error";
|
|
116
|
-
// AbortError means timeout
|
|
117
|
-
if (message.includes("abort") || message.includes("Abort")) {
|
|
118
|
-
return { success: false, error: "Request timed out (10s)" };
|
|
119
|
-
}
|
|
120
|
-
return { success: false, error: message };
|
|
121
|
-
}
|
|
135
|
+
const event = {
|
|
136
|
+
type: "scan_result",
|
|
137
|
+
tool: "ai-trust",
|
|
138
|
+
toolVersion: payload.aiTrustVersion,
|
|
139
|
+
timestamp: payload.scanTimestamp,
|
|
140
|
+
package: {
|
|
141
|
+
name: payload.packageName,
|
|
142
|
+
ecosystem: payload.ecosystem,
|
|
143
|
+
},
|
|
144
|
+
scanSummary: {
|
|
145
|
+
totalChecks: payload.findings.length,
|
|
146
|
+
passed: payload.findings.filter((f) => f.result === "pass").length,
|
|
147
|
+
critical: payload.findings.filter((f) => f.result === "fail" && f.severity === "critical").length,
|
|
148
|
+
high: payload.findings.filter((f) => f.result === "fail" && f.severity === "high").length,
|
|
149
|
+
medium: payload.findings.filter((f) => f.result === "fail" && f.severity === "medium").length,
|
|
150
|
+
low: payload.findings.filter((f) => f.result === "fail" && f.severity === "low").length,
|
|
151
|
+
score: payload.findings.length > 0
|
|
152
|
+
? Math.round((payload.findings.filter((f) => f.result === "pass").length /
|
|
153
|
+
payload.findings.length) *
|
|
154
|
+
100)
|
|
155
|
+
: 0,
|
|
156
|
+
verdict: "pass",
|
|
157
|
+
durationMs: 0,
|
|
158
|
+
},
|
|
159
|
+
};
|
|
160
|
+
queueEvent(event);
|
|
161
|
+
const ok = await flushQueue(registryUrl);
|
|
162
|
+
return { success: ok };
|
|
122
163
|
}
|
|
123
164
|
//# sourceMappingURL=contribute.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"contribute.js","sourceRoot":"","sources":["../../src/telemetry/contribute.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"contribute.js","sourceRoot":"","sources":["../../src/telemetry/contribute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,UAAU,GAGX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAW,GAAG,CAAC,OAAO,CAAC;AAsCpC,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,IAAI,wBAAwB,EAAE,CAAC;AAE3D,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,aAAa;IACpB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,CAAC,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,cAAc,CAAC,QAAsB;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAC9C,CAAC,MAAM,CAAC;IACT,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1C,CAAC,MAAM,CAAC;IACT,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,QAAsB,EACtB,UAAU,GAAG,CAAC;IAEd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzC,+DAA+D;IAC/D,uDAAuD;IACvD,UAAU,CAAC,UAAU,CAAC;QACpB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,OAAO;QACpB,WAAW;QACX,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;QAClB,MAAM;QACN,QAAQ;QACR,IAAI;QACJ,MAAM;QACN,GAAG;QACH,KAAK;QACL,OAAO;QACP,UAAU;KACX,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,sDAAsD;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAoB,EACpB,OAAiB;IAEjB,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,QAAsB;IAEtB,MAAM,oBAAoB,GAA0B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB;QACxD,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,gBAAgB,EAAE,mBAAmB,EAAE;QACvC,WAAW;QACX,cAAc,EAAE,EAAE;QAClB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,aAAa,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B,EAC5B,WAAoB;IAEpB,MAAM,KAAK,GAAsB;QAC/B,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,OAAO,CAAC,cAAc;QACnC,SAAS,EAAE,OAAO,CAAC,aAAa;QAChC,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,WAAW,EAAE;YACX,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;YACpC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;YAClE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CACxD,CAAC,MAAM;YACR,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CACpD,CAAC,MAAM;YACR,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACtD,CAAC,MAAM;YACR,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CACnD,CAAC,MAAM;YACR,KAAK,EACH,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CACR,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;oBACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACxB,GAAG,CACN;gBACH,CAAC,CAAC,CAAC;YACP,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,CAAC;SACd;KACF,CAAC;IAEF,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACzB,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Telemetry module -- community contribution of anonymized scan findings.
|
|
3
3
|
*/
|
|
4
|
-
export { generateContributorToken, buildContributionPayload, submitContribution, type ContributionFinding, type ContributionPayload, type ContributionResult, } from "./contribute.js";
|
|
5
|
-
export { isContributeEnabled, shouldPromptContribute, incrementScanCount, saveContributeChoice, showContributePrompt, } from "./opt-in.js";
|
|
4
|
+
export { generateContributorToken, buildContributionPayload, submitContribution, queueScanResult, flushQueue, type ContributionFinding, type ContributionPayload, type ContributionResult, type ContributionEvent, type ContributionBatch, } from "./contribute.js";
|
|
5
|
+
export { isContributeEnabled, shouldPromptContribute, incrementScanCount, saveContributeChoice, showContributePrompt, recordScanAndMaybeShowTip, } from "./opt-in.js";
|
|
6
6
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC"}
|
package/dist/telemetry/index.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Telemetry module -- community contribution of anonymized scan findings.
|
|
3
3
|
*/
|
|
4
|
-
export { generateContributorToken, buildContributionPayload, submitContribution, } from "./contribute.js";
|
|
5
|
-
export { isContributeEnabled, shouldPromptContribute, incrementScanCount, saveContributeChoice, showContributePrompt, } from "./opt-in.js";
|
|
4
|
+
export { generateContributorToken, buildContributionPayload, submitContribution, queueScanResult, flushQueue, } from "./contribute.js";
|
|
5
|
+
export { isContributeEnabled, shouldPromptContribute, incrementScanCount, saveContributeChoice, showContributePrompt, recordScanAndMaybeShowTip, } from "./opt-in.js";
|
|
6
6
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,UAAU,GAMX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC"}
|
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Contribution
|
|
2
|
+
* Contribution Consent and Scan Counting
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
* with the OpenA2A Registry.
|
|
4
|
+
* Manages the user's consent to share anonymized scan findings
|
|
5
|
+
* with the OpenA2A Registry. Uses a delayed consent tip shown
|
|
6
|
+
* after the 3rd scan (non-interactive, no blocking prompts).
|
|
6
7
|
*
|
|
7
8
|
* Config/counting is delegated to @opena2a/shared (the canonical
|
|
8
9
|
* source for ~/.opena2a/config.json). If @opena2a/shared is not
|
|
@@ -14,33 +15,39 @@
|
|
|
14
15
|
* Returns:
|
|
15
16
|
* true - user explicitly opted in
|
|
16
17
|
* false - user explicitly opted out (or default in shared backend)
|
|
17
|
-
* undefined - not yet configured
|
|
18
|
-
* defaults to false, so callers should rely on
|
|
19
|
-
* shouldPromptContribute() for prompt logic)
|
|
18
|
+
* undefined - not yet configured
|
|
20
19
|
*/
|
|
21
20
|
export declare function isContributeEnabled(): boolean | undefined;
|
|
22
21
|
/**
|
|
23
|
-
* Check whether we should show the contribution
|
|
22
|
+
* Check whether we should show the contribution tip.
|
|
24
23
|
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
* and cooldown/dismiss logic.
|
|
24
|
+
* Returns true after the 3rd scan if the user hasn't opted in,
|
|
25
|
+
* opted out, or dismissed the tip within the last 30 days.
|
|
28
26
|
*/
|
|
29
27
|
export declare function shouldPromptContribute(): boolean;
|
|
30
28
|
/**
|
|
31
29
|
* Increment the scan count. Called after each scan completes,
|
|
32
30
|
* regardless of contribution setting.
|
|
33
31
|
*/
|
|
34
|
-
export declare function incrementScanCount():
|
|
32
|
+
export declare function incrementScanCount(): number;
|
|
35
33
|
/**
|
|
36
34
|
* Save the user's contribution choice to the config file.
|
|
37
35
|
*/
|
|
38
36
|
export declare function saveContributeChoice(enabled: boolean): void;
|
|
37
|
+
/**
|
|
38
|
+
* Record a scan and return a consent tip string if the threshold is reached.
|
|
39
|
+
*
|
|
40
|
+
* After the 3rd scan, returns a non-interactive tip encouraging the user
|
|
41
|
+
* to enable contribution. Returns null if tip should not be shown.
|
|
42
|
+
* This replaces the previous interactive Y/N prompt.
|
|
43
|
+
*/
|
|
44
|
+
export declare function recordScanAndMaybeShowTip(): string | null;
|
|
39
45
|
/**
|
|
40
46
|
* Display the contribution opt-in prompt and return the user's choice.
|
|
41
47
|
*
|
|
42
|
-
*
|
|
43
|
-
*
|
|
48
|
+
* @deprecated Use recordScanAndMaybeShowTip() instead. This is kept
|
|
49
|
+
* for backward compatibility but now shows a non-interactive tip
|
|
50
|
+
* rather than blocking for input.
|
|
44
51
|
*/
|
|
45
52
|
export declare function showContributePrompt(): Promise<boolean>;
|
|
46
53
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"opt-in.d.ts","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"opt-in.d.ts","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAoKH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,GAAG,SAAS,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAK3D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,GAAG,IAAI,CAezD;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAM7D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,UAAQ,GAAG,IAAI,CAKtD"}
|
package/dist/telemetry/opt-in.js
CHANGED
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Contribution
|
|
2
|
+
* Contribution Consent and Scan Counting
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
* with the OpenA2A Registry.
|
|
4
|
+
* Manages the user's consent to share anonymized scan findings
|
|
5
|
+
* with the OpenA2A Registry. Uses a delayed consent tip shown
|
|
6
|
+
* after the 3rd scan (non-interactive, no blocking prompts).
|
|
6
7
|
*
|
|
7
8
|
* Config/counting is delegated to @opena2a/shared (the canonical
|
|
8
9
|
* source for ~/.opena2a/config.json). If @opena2a/shared is not
|
|
@@ -15,30 +16,31 @@ let _backend;
|
|
|
15
16
|
function resolveBackend() {
|
|
16
17
|
if (_backend)
|
|
17
18
|
return _backend;
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
typeof shared.
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
19
|
+
// When OPENA2A_HOME is set, always use local backend so the custom
|
|
20
|
+
// home directory is respected (important for testing and isolation).
|
|
21
|
+
if (!process.env.OPENA2A_HOME) {
|
|
22
|
+
try {
|
|
23
|
+
// eslint-disable-next-line @typescript-eslint/no-require-imports
|
|
24
|
+
const shared = require("@opena2a/shared");
|
|
25
|
+
if (typeof shared.isContributeEnabled === "function" &&
|
|
26
|
+
typeof shared.setContributeEnabled === "function" &&
|
|
27
|
+
typeof shared.incrementScanCount === "function" &&
|
|
28
|
+
typeof shared.shouldPromptContribute === "function" &&
|
|
29
|
+
typeof shared.dismissContributePrompt === "function") {
|
|
30
|
+
_backend = {
|
|
31
|
+
isContributeEnabled: shared.isContributeEnabled,
|
|
32
|
+
setContributeEnabled: shared.setContributeEnabled,
|
|
33
|
+
incrementScanCount: shared.incrementScanCount,
|
|
34
|
+
getScanCount: shared.getScanCount || (() => 0),
|
|
35
|
+
shouldPromptContribute: shared.shouldPromptContribute,
|
|
36
|
+
dismissContributePrompt: shared.dismissContributePrompt,
|
|
37
|
+
};
|
|
38
|
+
return _backend;
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
catch {
|
|
42
|
+
// @opena2a/shared not installed -- fall through to local backend
|
|
38
43
|
}
|
|
39
|
-
}
|
|
40
|
-
catch {
|
|
41
|
-
// @opena2a/shared not installed -- fall through to local backend
|
|
42
44
|
}
|
|
43
45
|
_backend = createLocalBackend();
|
|
44
46
|
return _backend;
|
|
@@ -67,58 +69,63 @@ function writeConfig(config) {
|
|
|
67
69
|
mode: 0o600,
|
|
68
70
|
});
|
|
69
71
|
}
|
|
72
|
+
/** Cooldown for the consent tip: 30 days after dismissal. */
|
|
73
|
+
const TIP_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
|
|
70
74
|
function createLocalBackend() {
|
|
71
75
|
return {
|
|
72
76
|
isContributeEnabled() {
|
|
73
77
|
const config = readConfig();
|
|
74
|
-
|
|
75
|
-
return true;
|
|
76
|
-
if (config.contribute?.enabled === false)
|
|
77
|
-
return false;
|
|
78
|
-
return undefined;
|
|
78
|
+
return config.contribute?.enabled === true;
|
|
79
79
|
},
|
|
80
80
|
setContributeEnabled(enabled) {
|
|
81
81
|
const config = readConfig();
|
|
82
82
|
if (!config.contribute)
|
|
83
83
|
config.contribute = {};
|
|
84
84
|
config.contribute.enabled = enabled;
|
|
85
|
-
const scanCount = config.contribute.scanCount ?? 0;
|
|
86
|
-
if (scanCount >= 9)
|
|
87
|
-
config.contribute.promptedAtTen = true;
|
|
88
85
|
writeConfig(config);
|
|
89
86
|
},
|
|
90
87
|
incrementScanCount() {
|
|
91
88
|
const config = readConfig();
|
|
92
|
-
if (!config.
|
|
93
|
-
config.
|
|
94
|
-
config.
|
|
89
|
+
if (!config.telemetry)
|
|
90
|
+
config.telemetry = {};
|
|
91
|
+
config.telemetry.scanCount = (config.telemetry.scanCount ?? 0) + 1;
|
|
95
92
|
writeConfig(config);
|
|
96
|
-
return config.
|
|
93
|
+
return config.telemetry.scanCount;
|
|
94
|
+
},
|
|
95
|
+
getScanCount() {
|
|
96
|
+
const config = readConfig();
|
|
97
|
+
return config.telemetry?.scanCount ?? 0;
|
|
97
98
|
},
|
|
98
99
|
shouldPromptContribute() {
|
|
99
100
|
const config = readConfig();
|
|
101
|
+
// Already decided -- do not prompt
|
|
100
102
|
if (config.contribute?.enabled === true ||
|
|
101
103
|
config.contribute?.enabled === false) {
|
|
102
104
|
return false;
|
|
103
105
|
}
|
|
104
|
-
const
|
|
105
|
-
if (
|
|
106
|
-
return
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
106
|
+
const count = config.telemetry?.scanCount ?? 0;
|
|
107
|
+
if (count < 3)
|
|
108
|
+
return false;
|
|
109
|
+
// Check cooldown
|
|
110
|
+
const dismissed = config.telemetry?.contributePromptDismissedAt;
|
|
111
|
+
if (dismissed) {
|
|
112
|
+
const dismissedMs = new Date(dismissed).getTime();
|
|
113
|
+
if (Date.now() - dismissedMs < TIP_COOLDOWN_MS)
|
|
114
|
+
return false;
|
|
115
|
+
}
|
|
116
|
+
return true;
|
|
110
117
|
},
|
|
111
118
|
dismissContributePrompt() {
|
|
112
119
|
const config = readConfig();
|
|
113
|
-
if (!config.
|
|
114
|
-
config.
|
|
115
|
-
config.
|
|
120
|
+
if (!config.telemetry)
|
|
121
|
+
config.telemetry = {};
|
|
122
|
+
config.telemetry.contributePromptDismissedAt = new Date().toISOString();
|
|
116
123
|
writeConfig(config);
|
|
117
124
|
},
|
|
118
125
|
};
|
|
119
126
|
}
|
|
120
127
|
// ---------------------------------------------------------------------------
|
|
121
|
-
// Public API
|
|
128
|
+
// Public API
|
|
122
129
|
// ---------------------------------------------------------------------------
|
|
123
130
|
/**
|
|
124
131
|
* Check whether the contribution setting is enabled.
|
|
@@ -126,23 +133,18 @@ function createLocalBackend() {
|
|
|
126
133
|
* Returns:
|
|
127
134
|
* true - user explicitly opted in
|
|
128
135
|
* false - user explicitly opted out (or default in shared backend)
|
|
129
|
-
* undefined - not yet configured
|
|
130
|
-
* defaults to false, so callers should rely on
|
|
131
|
-
* shouldPromptContribute() for prompt logic)
|
|
136
|
+
* undefined - not yet configured
|
|
132
137
|
*/
|
|
133
138
|
export function isContributeEnabled() {
|
|
134
|
-
return resolveBackend().isContributeEnabled();
|
|
139
|
+
return resolveBackend().isContributeEnabled() || undefined;
|
|
135
140
|
}
|
|
136
141
|
/**
|
|
137
|
-
* Check whether we should show the contribution
|
|
142
|
+
* Check whether we should show the contribution tip.
|
|
138
143
|
*
|
|
139
|
-
*
|
|
140
|
-
*
|
|
141
|
-
* and cooldown/dismiss logic.
|
|
144
|
+
* Returns true after the 3rd scan if the user hasn't opted in,
|
|
145
|
+
* opted out, or dismissed the tip within the last 30 days.
|
|
142
146
|
*/
|
|
143
147
|
export function shouldPromptContribute() {
|
|
144
|
-
if (!process.stdin.isTTY || !process.stdout.isTTY)
|
|
145
|
-
return false;
|
|
146
148
|
return resolveBackend().shouldPromptContribute();
|
|
147
149
|
}
|
|
148
150
|
/**
|
|
@@ -150,7 +152,7 @@ export function shouldPromptContribute() {
|
|
|
150
152
|
* regardless of contribution setting.
|
|
151
153
|
*/
|
|
152
154
|
export function incrementScanCount() {
|
|
153
|
-
resolveBackend().incrementScanCount();
|
|
155
|
+
return resolveBackend().incrementScanCount();
|
|
154
156
|
}
|
|
155
157
|
/**
|
|
156
158
|
* Save the user's contribution choice to the config file.
|
|
@@ -162,66 +164,39 @@ export function saveContributeChoice(enabled) {
|
|
|
162
164
|
}
|
|
163
165
|
}
|
|
164
166
|
/**
|
|
165
|
-
*
|
|
167
|
+
* Record a scan and return a consent tip string if the threshold is reached.
|
|
166
168
|
*
|
|
167
|
-
*
|
|
168
|
-
* Returns
|
|
169
|
+
* After the 3rd scan, returns a non-interactive tip encouraging the user
|
|
170
|
+
* to enable contribution. Returns null if tip should not be shown.
|
|
171
|
+
* This replaces the previous interactive Y/N prompt.
|
|
169
172
|
*/
|
|
170
|
-
export
|
|
171
|
-
|
|
173
|
+
export function recordScanAndMaybeShowTip() {
|
|
174
|
+
incrementScanCount();
|
|
175
|
+
if (!shouldPromptContribute())
|
|
176
|
+
return null;
|
|
177
|
+
// Mark as shown so we respect the 30-day cooldown
|
|
178
|
+
resolveBackend().dismissContributePrompt();
|
|
179
|
+
return [
|
|
172
180
|
"",
|
|
173
|
-
"
|
|
181
|
+
" Tip: Your scans help build community trust data for MCP servers and AI agents.",
|
|
182
|
+
" Share anonymized results so other developers can make informed security decisions.",
|
|
183
|
+
" Enable: npx ai-trust check --contribute (or: opena2a config contribute on)",
|
|
174
184
|
"",
|
|
175
|
-
|
|
176
|
-
"No personal data. No source code. Only check pass/fail results.",
|
|
177
|
-
"You can opt out anytime: opena2a config set contribute false",
|
|
178
|
-
"",
|
|
179
|
-
"[Y] Yes, contribute [N] No thanks",
|
|
180
|
-
];
|
|
181
|
-
for (const line of lines) {
|
|
182
|
-
process.stderr.write(line + "\n");
|
|
183
|
-
}
|
|
184
|
-
const answer = await readSingleKey();
|
|
185
|
-
const enabled = answer.toLowerCase() === "y";
|
|
186
|
-
saveContributeChoice(enabled);
|
|
187
|
-
if (enabled) {
|
|
188
|
-
process.stderr.write("\nContribution enabled. Thank you.\n");
|
|
189
|
-
}
|
|
190
|
-
else {
|
|
191
|
-
process.stderr.write("\nContribution disabled. You can enable it later: opena2a config set contribute true\n");
|
|
192
|
-
}
|
|
193
|
-
return enabled;
|
|
185
|
+
].join("\n");
|
|
194
186
|
}
|
|
195
187
|
/**
|
|
196
|
-
*
|
|
197
|
-
*
|
|
188
|
+
* Display the contribution opt-in prompt and return the user's choice.
|
|
189
|
+
*
|
|
190
|
+
* @deprecated Use recordScanAndMaybeShowTip() instead. This is kept
|
|
191
|
+
* for backward compatibility but now shows a non-interactive tip
|
|
192
|
+
* rather than blocking for input.
|
|
198
193
|
*/
|
|
199
|
-
function
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
cleanup();
|
|
206
|
-
resolve("n");
|
|
207
|
-
}, 30_000);
|
|
208
|
-
function cleanup() {
|
|
209
|
-
clearTimeout(timer);
|
|
210
|
-
stdin.removeListener("data", onData);
|
|
211
|
-
if (stdin.isRaw !== wasRaw) {
|
|
212
|
-
stdin.setRawMode(wasRaw ?? false);
|
|
213
|
-
}
|
|
214
|
-
stdin.pause();
|
|
215
|
-
}
|
|
216
|
-
function onData(data) {
|
|
217
|
-
const char = data.toString().trim().toLowerCase();
|
|
218
|
-
cleanup();
|
|
219
|
-
resolve(char || "n");
|
|
220
|
-
}
|
|
221
|
-
stdin.setRawMode(true);
|
|
222
|
-
stdin.resume();
|
|
223
|
-
stdin.once("data", onData);
|
|
224
|
-
});
|
|
194
|
+
export async function showContributePrompt() {
|
|
195
|
+
const tip = recordScanAndMaybeShowTip();
|
|
196
|
+
if (tip) {
|
|
197
|
+
process.stdout.write(tip + "\n");
|
|
198
|
+
}
|
|
199
|
+
return false;
|
|
225
200
|
}
|
|
226
201
|
/**
|
|
227
202
|
* Reset the backend (for testing).
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"opt-in.js","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"opt-in.js","sourceRoot":"","sources":["../../src/telemetry/opt-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAe5B,0DAA0D;AAC1D,IAAI,QAAmC,CAAC;AAExC,SAAS,cAAc;IACrB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,mEAAmE;IACnE,qEAAqE;IACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC1C,IACE,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU;gBAChD,OAAO,MAAM,CAAC,oBAAoB,KAAK,UAAU;gBACjD,OAAO,MAAM,CAAC,kBAAkB,KAAK,UAAU;gBAC/C,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU;gBACnD,OAAO,MAAM,CAAC,uBAAuB,KAAK,UAAU,EACpD,CAAC;gBACD,QAAQ,GAAG;oBACT,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC9C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;oBACrD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;iBACxD,CAAC;gBACF,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAED,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAkBD,SAAS,aAAa;IACpB,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAChE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,SAAS,kBAAkB;IACzB,OAAO;QACL,mBAAmB;YACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;QAC7C,CAAC;QAED,oBAAoB,CAAC,OAAgB;YACnC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;YACpC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,kBAAkB;YAChB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,CAAC;QAED,YAAY;YACV,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,sBAAsB;YACpB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,mCAAmC;YACnC,IACE,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI;gBACnC,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,KAAK,EACpC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;YAC/C,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE5B,iBAAiB;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC;YAChE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,eAAe;oBAAE,OAAO,KAAK,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uBAAuB;YACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,2BAA2B,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxE,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC,mBAAmB,EAAE,IAAI,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,cAAc,EAAE,CAAC,sBAAsB,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,cAAc,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,cAAc,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB;IACvC,kBAAkB,EAAE,CAAC;IAErB,IAAI,CAAC,sBAAsB,EAAE;QAAE,OAAO,IAAI,CAAC;IAE3C,kDAAkD;IAClD,cAAc,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAE3C,OAAO;QACL,EAAE;QACF,kFAAkF;QAClF,sFAAsF;QACtF,+EAA+E;QAC/E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAU,GAAG,KAAK;IAC9C,QAAQ,GAAG,SAAS,CAAC;IACrB,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "ai-trust",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.5",
|
|
4
4
|
"description": "Trust verification CLI for AI packages — check MCP servers, A2A agents, and AI tools before you install",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
@@ -37,6 +37,7 @@
|
|
|
37
37
|
"author": "OpenA2A",
|
|
38
38
|
"license": "Apache-2.0",
|
|
39
39
|
"dependencies": {
|
|
40
|
+
"@opena2a/contribute": "^0.1.0",
|
|
40
41
|
"@opena2a/shared": "^0.1.0",
|
|
41
42
|
"chalk": "^5.3.0",
|
|
42
43
|
"commander": "^12.1.0"
|