chainwall 0.1.0

package/dist/auditor/mcp-analyzer.js

@@ -0,0 +1,145 @@
+import { readFileSync, existsSync, statSync } from 'node:fs';
+import { resolve } from 'node:path';
+// Regexes to extract tool/resource registrations from MCP server source
+const TOOL_REGISTRATION_PATTERNS = [
+    /\.tool\(\s*["'`]([^"'`]+)["'`]/g, // server.tool("name", ...)
+    /\.addTool\(\s*["'`]([^"'`]+)["'`]/g, // server.addTool("name", ...)
+    /name:\s*["'`]([^"'`]+)["'`]/g, // { name: "toolname" }
+];
+const RESOURCE_REGISTRATION_PATTERNS = [
+    /\.resource\(\s*["'`]([^"'`]+)["'`]/g, // server.resource("name", ...)
+    /\.addResource\(\s*["'`]([^"'`]+)["'`]/g, // server.addResource("name", ...)
+];
+// Capability indicators
+const CAPABILITY_PATTERNS = [
+    { pattern: /readFile|readdir|readFileSync|fs\.read|opendir/i, capability: 'filesystem-read', riskWeight: 20 },
+    { pattern: /writeFile|writeFileSync|fs\.write|appendFile/i, capability: 'filesystem-write', riskWeight: 30 },
+    { pattern: /exec|spawn|execFile|execSync|child_process/i, capability: 'command-execution', riskWeight: 40 },
+    { pattern: /fetch|axios|https?\.request|got\(|node-fetch/i, capability: 'network-access', riskWeight: 15 },
+    { pattern: /createConnection|pg\.|mysql|mongodb|redis/i, capability: 'database-access', riskWeight: 25 },
+    { pattern: /env\[|process\.env/i, capability: 'env-access', riskWeight: 10 },
+    { pattern: /unlink|rmdir|rm\s+-/i, capability: 'file-deletion', riskWeight: 35 },
+];
+function extractMatches(source, patterns) {
+    const names = new Set();
+    for (const pattern of patterns) {
+        // Create fresh RegExp to reset lastIndex since we're reusing patterns
+        const regex = new RegExp(pattern.source, pattern.flags);
+        let match;
+        while ((match = regex.exec(source)) !== null) {
+            if (match[1] && match[1].length < 100) { // sanity check
+                names.add(match[1]);
+            }
+            if (match.index === regex.lastIndex)
+                regex.lastIndex++;
+        }
+    }
+    return [...names];
+}
+function resolveEntryFile(serverDef) {
+    const command = String(serverDef.command ?? '');
+    const args = Array.isArray(serverDef.args) ? serverDef.args.map(String) : [];
+    // If command is node/npx/tsx, the first arg is typically the script
+    if (/\b(node|tsx|npx)\b/.test(command)) {
+        for (const arg of args) {
+            // Skip flags
+            if (arg.startsWith('-'))
+                continue;
+            // If it's an npm package name (e.g. @modelcontextprotocol/server-filesystem), skip
+            if (arg.startsWith('@') && !arg.startsWith('@/'))
+                continue;
+            // Try to resolve the path
+            const resolved = resolve(arg);
+            if (existsSync(resolved))
+                return resolved;
+            // Try with common extensions
+            for (const ext of ['.js', '.ts', '.mjs', '.cjs']) {
+                const withExt = resolved + ext;
+                if (existsSync(withExt))
+                    return withExt;
+            }
+            // Check if it's a directory with index
+            for (const ext of ['.js', '.ts', '.mjs']) {
+                const index = resolve(resolved, 'index' + ext);
+                if (existsSync(index))
+                    return index;
+            }
+        }
+    }
+    return null;
+}
+function computeRiskScore(capabilities, toolCount, hasExec, hasFS) {
+    let score = 0;
+    // Base score from capabilities
+    for (const cap of CAPABILITY_PATTERNS) {
+        if (capabilities.includes(cap.capability)) {
+            score += cap.riskWeight;
+        }
+    }
+    // Tool count factor (more tools = more surface area)
+    score += Math.min(20, toolCount * 2);
+    // Direct flags
+    if (hasExec)
+        score = Math.max(score, 60);
+    if (hasFS)
+        score = Math.max(score, 40);
+    if (hasExec && hasFS)
+        score = Math.max(score, 80);
+    score = Math.min(100, score);
+    let label;
+    if (score >= 70)
+        label = 'high';
+    else if (score >= 40)
+        label = 'medium';
+    else
+        label = 'low';
+    return { score, label };
+}
+export function analyzeMCPServer(server, serverDef) {
+    // Try to read local source
+    const entryFile = serverDef ? resolveEntryFile(serverDef) : null;
+    if (entryFile) {
+        try {
+            const size = statSync(entryFile).size;
+            if (size > 10 * 1024 * 1024)
+                throw new Error('file too large'); // skip files over 10MB
+            const source = readFileSync(entryFile, 'utf-8');
+            const toolNames = extractMatches(source, TOOL_REGISTRATION_PATTERNS);
+            const resourceNames = extractMatches(source, RESOURCE_REGISTRATION_PATTERNS);
+            const capabilities = [];
+            for (const cap of CAPABILITY_PATTERNS) {
+                if (cap.pattern.test(source)) {
+                    capabilities.push(cap.capability);
+                }
+            }
+            const { score, label } = computeRiskScore(capabilities, toolNames.length, server.hasCommandExecution || capabilities.includes('command-execution'), server.hasFilesystemAccess || capabilities.includes('filesystem-read') || capabilities.includes('filesystem-write'));
+            return {
+                riskScore: score,
+                riskLabel: label,
+                toolNames: toolNames.length > 0 ? toolNames : server.tools,
+                resourceNames,
+                capabilities,
+                analysisMethod: 'source',
+            };
+        }
+        catch {
+            // Fall through to args-only analysis
+        }
+    }
+    // Args-only fallback
+    const capabilities = [];
+    if (server.hasFilesystemAccess)
+        capabilities.push('filesystem-read');
+    if (server.hasCommandExecution)
+        capabilities.push('command-execution');
+    const { score, label } = computeRiskScore(capabilities, server.tools.length, server.hasCommandExecution, server.hasFilesystemAccess);
+    return {
+        riskScore: score,
+        riskLabel: label,
+        toolNames: server.tools,
+        resourceNames: [],
+        capabilities,
+        analysisMethod: 'args-only',
+    };
+}
+//# sourceMappingURL=mcp-analyzer.js.map

package/dist/auditor/mcp-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-analyzer.js","sourceRoot":"","sources":["../../src/auditor/mcp-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,wEAAwE;AACxE,MAAM,0BAA0B,GAAG;IACjC,iCAAiC,EAAc,2BAA2B;IAC1E,oCAAoC,EAAY,8BAA8B;IAC9E,8BAA8B,EAAkB,uBAAuB;CACxE,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,qCAAqC,EAAW,+BAA+B;IAC/E,wCAAwC,EAAQ,kCAAkC;CACnF,CAAC;AAEF,wBAAwB;AACxB,MAAM,mBAAmB,GAAkE;IACzF,EAAE,OAAO,EAAE,iDAAiD,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;IAC7G,EAAE,OAAO,EAAE,+CAA+C,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE;IAC5G,EAAE,OAAO,EAAE,6CAA6C,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE;IAC3G,EAAE,OAAO,EAAE,+CAA+C,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE;IAC1G,EAAE,OAAO,EAAE,4CAA4C,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;IACxG,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE;IAC5E,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE;CACjF,CAAC;AAEF,SAAS,cAAc,CAAC,MAAc,EAAE,QAAkB;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,sEAAsE;QACtE,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,eAAe;gBACtD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAkC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7E,oEAAoE;IACpE,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,aAAa;YACb,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,mFAAmF;YACnF,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3D,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC1C,6BAA6B;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAG,QAAQ,GAAG,GAAG,CAAC;gBAC/B,IAAI,UAAU,CAAC,OAAO,CAAC;oBAAE,OAAO,OAAO,CAAC;YAC1C,CAAC;YACD,uCAAuC;YACvC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC;gBAC/C,IAAI,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAsB,EAAE,SAAiB,EAAE,OAAgB,EAAE,KAAc;IACnG,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,+BAA+B;IAC/B,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IAErC,eAAe;IACf,IAAI,OAAO;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,KAAK;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,OAAO,IAAI,KAAK;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE7B,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,MAAM,CAAC;SAC3B,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,QAAQ,CAAC;;QAClC,KAAK,GAAG,KAAK,CAAC;IAEnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,SAAmC;IACrF,2BAA2B;IAC3B,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjE,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;YACtC,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,uBAAuB;YACvF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;YACrE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACtC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,gBAAgB,CACvC,YAAY,EACZ,SAAS,CAAC,MAAM,EAChB,MAAM,CAAC,mBAAmB,IAAI,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACxE,MAAM,CAAC,mBAAmB,IAAI,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CACpH,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;gBAC1D,aAAa;gBACb,YAAY;gBACZ,cAAc,EAAE,QAAQ;aACzB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,mBAAmB;QAAE,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,mBAAmB;QAAE,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAEvE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,gBAAgB,CACvC,YAAY,EACZ,MAAM,CAAC,KAAK,CAAC,MAAM,EACnB,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,mBAAmB,CAC3B,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,aAAa,EAAE,EAAE;QACjB,YAAY;QACZ,cAAc,EAAE,WAAW;KAC5B,CAAC;AACJ,CAAC"}

package/dist/auditor/mcp-detector.d.ts

@@ -0,0 +1,17 @@
+export interface MCPServer {
+    name: string;
+    sourceFile: string;
+    hasFilesystemAccess: boolean;
+    hasCommandExecution: boolean;
+    tools: string[];
+    riskScore?: number;
+    riskLabel?: string;
+    analysisMethod?: 'source' | 'args-only';
+    capabilities?: string[];
+}
+export interface MCPDetectionResult {
+    servers: MCPServer[];
+    configFiles: string[];
+}
+export declare function detectMCPServers(): MCPDetectionResult;
+//# sourceMappingURL=mcp-detector.d.ts.map

package/dist/auditor/mcp-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-detector.d.ts","sourceRoot":"","sources":["../../src/auditor/mcp-detector.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAyED,wBAAgB,gBAAgB,IAAI,kBAAkB,CAqBrD"}

package/dist/auditor/mcp-detector.js

@@ -0,0 +1,86 @@
+import { readFileSync, existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir, platform } from 'node:os';
+import { analyzeMCPServer } from './mcp-analyzer.js';
+const FS_TOOL_KEYWORDS = ['filesystem', 'read_file', 'write_file', 'list_directory', 'read', 'write', 'file'];
+const EXEC_TOOL_KEYWORDS = ['bash', 'shell', 'exec', 'command', 'terminal', 'run'];
+function getMCPConfigPaths() {
+    const home = homedir();
+    const paths = [
+        join(home, '.mcp.json'),
+        join(home, 'mcp.json'),
+    ];
+    const plat = platform();
+    if (plat === 'darwin') {
+        paths.push(join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json'));
+    }
+    else if (plat === 'linux') {
+        paths.push(join(home, '.config', 'claude', 'claude_desktop_config.json'));
+    }
+    // Cursor MCP config
+    paths.push(join(home, '.cursor', 'mcp.json'));
+    return paths;
+}
+function extractServers(config, sourceFile) {
+    const servers = [];
+    const serverMap = (config.mcpServers ?? config.mcp_servers ?? config['mcpServers'] ?? {});
+    if (typeof serverMap !== 'object' || serverMap === null)
+        return servers;
+    for (const [name, value] of Object.entries(serverMap)) {
+        if (typeof value !== 'object' || value === null)
+            continue;
+        const serverDef = value;
+        // Extract tool names from various config formats
+        const tools = [];
+        const capabilities = serverDef.capabilities;
+        const toolsDef = serverDef.tools ?? capabilities?.tools;
+        if (Array.isArray(toolsDef)) {
+            for (const t of toolsDef) {
+                if (typeof t === 'string')
+                    tools.push(t);
+                else if (typeof t === 'object' && t !== null && 'name' in t)
+                    tools.push(String(t.name));
+            }
+        }
+        // Also check command/args for hints
+        const command = String(serverDef.command ?? '');
+        const args = Array.isArray(serverDef.args) ? serverDef.args.map(String) : [];
+        const allText = [name, command, ...args, ...tools].join(' ').toLowerCase();
+        const hasFilesystemAccess = FS_TOOL_KEYWORDS.some((kw) => allText.includes(kw));
+        const hasCommandExecution = EXEC_TOOL_KEYWORDS.some((kw) => allText.includes(kw));
+        servers.push({ name, sourceFile, hasFilesystemAccess, hasCommandExecution, tools });
+        const analysis = analyzeMCPServer(servers[servers.length - 1], serverDef);
+        servers[servers.length - 1].riskScore = analysis.riskScore;
+        servers[servers.length - 1].riskLabel = analysis.riskLabel;
+        servers[servers.length - 1].analysisMethod = analysis.analysisMethod;
+        servers[servers.length - 1].capabilities = analysis.capabilities;
+        // Merge discovered tool names if source analysis found more
+        if (analysis.toolNames.length > servers[servers.length - 1].tools.length) {
+            servers[servers.length - 1].tools = analysis.toolNames;
+        }
+    }
+    return servers;
+}
+export function detectMCPServers() {
+    const configPaths = getMCPConfigPaths();
+    const allServers = [];
+    const foundConfigFiles = [];
+    for (const configPath of configPaths) {
+        if (!existsSync(configPath))
+            continue;
+        try {
+            const size = statSync(configPath).size;
+            if (size > 10 * 1024 * 1024)
+                continue; // skip files over 10MB
+            const raw = readFileSync(configPath, 'utf-8');
+            const config = JSON.parse(raw);
+            foundConfigFiles.push(configPath);
+            allServers.push(...extractServers(config, configPath));
+        }
+        catch {
+            // skip malformed configs
+        }
+    }
+    return { servers: allServers, configFiles: foundConfigFiles };
+}
+//# sourceMappingURL=mcp-detector.js.map

package/dist/auditor/mcp-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-detector.js","sourceRoot":"","sources":["../../src/auditor/mcp-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAmBrD,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9G,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAEnF,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;KACvB,CAAC;IAEF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAE9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B,EAAE,UAAkB;IACzE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;IAErH,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAExE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;QAEnD,iDAAiD;QACjD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,SAAS,CAAC,YAAmD,CAAC;QACnF,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,IAAI,YAAY,EAAE,KAAK,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;qBACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3E,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAElF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpF,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAC3B,SAAS,CACV,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC3D,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC3D,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;QACrE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QACjE,4DAA4D;QAC5D,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACvC,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;gBAAE,SAAS,CAAC,uBAAuB;YAC9D,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAChE,CAAC"}

package/dist/auditor/remediation.d.ts

@@ -0,0 +1,26 @@
+import type { MCPServer } from './mcp-detector.js';
+import type { VSCodeExtension } from './vscode-extension-scanner.js';
+import type { EnvExposure } from './env-auditor.js';
+import type { ScanFinding } from '../rules/types.js';
+export type RiskLevel = 'safe' | 'caution';
+export interface RemediationAction {
+    type: string;
+    riskLevel: RiskLevel;
+    label: string;
+    description: string;
+    target: string;
+    execute: () => Promise<RemediationResult>;
+}
+export interface RemediationResult {
+    success: boolean;
+    message: string;
+    backupPath?: string;
+}
+export declare function restoreBackup(backupPath: string, originalPath: string): RemediationResult;
+export declare function createBackup(filePath: string): string;
+export declare function getActionsForMCPServer(server: MCPServer): RemediationAction[];
+export declare function getActionsForVSCodeExtension(ext: VSCodeExtension): RemediationAction[];
+export declare function getActionsForEnvExposure(env: EnvExposure): RemediationAction[];
+export declare function getActionsForPermissionFinding(finding: ScanFinding): RemediationAction[];
+export declare function getActionsForExposure(filePath: string): RemediationAction[];
+//# sourceMappingURL=remediation.d.ts.map

package/dist/auditor/remediation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAazF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOrD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,iBAAiB,EAAE,CAmD7E;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,iBAAiB,EAAE,CAwBtF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,EAAE,CAgD9E;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,WAAW,GAAG,iBAAiB,EAAE,CAgCxF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAuC3E"}

package/dist/auditor/remediation.js

@@ -0,0 +1,222 @@
+import { readFileSync, writeFileSync, copyFileSync, existsSync, chmodSync, mkdirSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+export function restoreBackup(backupPath, originalPath) {
+    try {
+        if (!existsSync(backupPath)) {
+            return { success: false, message: `Backup not found: ${backupPath}` };
+        }
+        copyFileSync(backupPath, originalPath);
+        return { success: true, message: `Restored ${originalPath.split('/').pop()} from backup` };
+    }
+    catch (err) {
+        if (err.code === 'EACCES') {
+            return { success: false, message: 'Permission denied' };
+        }
+        return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
+    }
+}
+export function createBackup(filePath) {
+    let backupPath = `${filePath}.bak`;
+    if (existsSync(backupPath)) {
+        backupPath = `${filePath}.bak.${Date.now()}`;
+    }
+    copyFileSync(filePath, backupPath);
+    return backupPath;
+}
+export function getActionsForMCPServer(server) {
+    const actions = [];
+    actions.push({
+        type: 'remove-mcp-server',
+        riskLevel: 'caution',
+        label: `Remove ${server.name} from config`,
+        description: `Removes the "${server.name}" server entry from ${server.sourceFile}. A backup will be created.`,
+        target: server.sourceFile,
+        execute: async () => {
+            try {
+                if (!existsSync(server.sourceFile)) {
+                    return { success: false, message: `File not found: ${server.sourceFile}` };
+                }
+                const content = readFileSync(server.sourceFile, 'utf-8');
+                let parsed;
+                try {
+                    parsed = JSON.parse(content);
+                }
+                catch {
+                    return { success: false, message: `Failed to parse config: ${server.sourceFile}` };
+                }
+                const backupPath = createBackup(server.sourceFile);
+                // Try mcpServers key (Claude Desktop, Cursor style)
+                const mcpServers = parsed.mcpServers;
+                if (mcpServers && server.name in mcpServers) {
+                    delete mcpServers[server.name];
+                    writeFileSync(server.sourceFile, JSON.stringify(parsed, null, 2) + '\n');
+                    return { success: true, message: `Removed ${server.name} from config`, backupPath };
+                }
+                // Try servers key (other formats)
+                const servers = parsed.servers;
+                if (servers && server.name in servers) {
+                    delete servers[server.name];
+                    writeFileSync(server.sourceFile, JSON.stringify(parsed, null, 2) + '\n');
+                    return { success: true, message: `Removed ${server.name} from config`, backupPath };
+                }
+                return { success: false, message: `Server "${server.name}" not found in config` };
+            }
+            catch (err) {
+                if (err.code === 'EACCES') {
+                    return { success: false, message: 'Permission denied' };
+                }
+                return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
+            }
+        },
+    });
+    return actions;
+}
+export function getActionsForVSCodeExtension(ext) {
+    return [
+        {
+            type: 'disable-vscode-extension',
+            riskLevel: 'safe',
+            label: `Disable ${ext.name}`,
+            description: `Runs "code --disable-extension ${ext.id}" to disable the extension.`,
+            target: ext.id,
+            execute: async () => {
+                try {
+                    execFileSync('code', ['--disable-extension', ext.id], {
+                        timeout: 10_000,
+                        stdio: ['pipe', 'pipe', 'pipe'],
+                    });
+                    return { success: true, message: `Disabled extension: ${ext.name}` };
+                }
+                catch (err) {
+                    if (err.code === 'ENOENT') {
+                        return { success: false, message: '"code" command not found. Is VS Code in PATH?' };
+                    }
+                    return { success: false, message: `Failed to disable: ${err instanceof Error ? err.message : String(err)}` };
+                }
+            },
+        },
+    ];
+}
+export function getActionsForEnvExposure(env) {
+    const profileFiles = [
+        join(homedir(), '.bashrc'),
+        join(homedir(), '.zshrc'),
+        join(homedir(), '.profile'),
+        join(homedir(), '.bash_profile'),
+        join(homedir(), '.zprofile'),
+    ];
+    const actions = [];
+    for (const profilePath of profileFiles) {
+        if (!existsSync(profilePath))
+            continue;
+        let content;
+        try {
+            content = readFileSync(profilePath, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        const escapedKey = env.key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        const exportRegex = new RegExp(`^(\\s*export\\s+${escapedKey}=.*)$`, 'm');
+        if (exportRegex.test(content)) {
+            actions.push({
+                type: 'comment-env-export',
+                riskLevel: 'caution',
+                label: `Comment out ${env.key} in ${profilePath.split('/').pop()}`,
+                description: `Comments out "export ${env.key}=..." in ${profilePath}. Backup created.`,
+                target: profilePath,
+                execute: async () => {
+                    try {
+                        const current = readFileSync(profilePath, 'utf-8');
+                        const backupPath = createBackup(profilePath);
+                        const updated = current.replace(exportRegex, '# [chainwall] $1');
+                        writeFileSync(profilePath, updated);
+                        return { success: true, message: `Commented out ${env.key} in ${profilePath.split('/').pop()}`, backupPath };
+                    }
+                    catch (err) {
+                        if (err.code === 'EACCES') {
+                            return { success: false, message: 'Permission denied' };
+                        }
+                        return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
+                    }
+                },
+            });
+        }
+    }
+    return actions;
+}
+export function getActionsForPermissionFinding(finding) {
+    if (finding.category !== 'permission' || !finding.detail)
+        return [];
+    // Parse expected mode from detail string: "mode: 0644, expected: 0600, max: 0600"
+    const match = finding.detail.match(/expected:\s*0(\d+)/);
+    if (!match)
+        return [];
+    const expectedMode = parseInt(match[1], 8);
+    return [
+        {
+            type: 'fix-permissions',
+            riskLevel: 'safe',
+            label: `chmod 0${expectedMode.toString(8)} ${finding.filePath.split('/').pop()}`,
+            description: `Changes file permissions on ${finding.filePath} to 0${expectedMode.toString(8)}.`,
+            target: finding.filePath,
+            execute: async () => {
+                try {
+                    if (!existsSync(finding.filePath)) {
+                        return { success: false, message: 'File not found' };
+                    }
+                    chmodSync(finding.filePath, expectedMode);
+                    return { success: true, message: `Permissions updated to 0${expectedMode.toString(8)}` };
+                }
+                catch (err) {
+                    if (err.code === 'EACCES') {
+                        return { success: false, message: 'Permission denied' };
+                    }
+                    return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
+                }
+            },
+        },
+    ];
+}
+export function getActionsForExposure(filePath) {
+    return [
+        {
+            type: 'add-to-allowlist',
+            riskLevel: 'safe',
+            label: `Add ${filePath.split('/').pop()} to allowlist`,
+            description: `Adds "${filePath}" to ~/.llm-av/config.json allowlist.paths.`,
+            target: filePath,
+            execute: async () => {
+                try {
+                    const configDir = join(homedir(), '.llm-av');
+                    const configPath = join(configDir, 'config.json');
+                    if (!existsSync(configDir))
+                        mkdirSync(configDir, { recursive: true });
+                    let existing = {};
+                    try {
+                        existing = JSON.parse(readFileSync(configPath, 'utf-8'));
+                    }
+                    catch { /* start fresh */ }
+                    if (!existing.allowlist || typeof existing.allowlist !== 'object') {
+                        existing.allowlist = { paths: [], patterns: [], rules: [] };
+                    }
+                    const allowlist = existing.allowlist;
+                    if (!Array.isArray(allowlist.paths))
+                        allowlist.paths = [];
+                    if (allowlist.paths.includes(filePath)) {
+                        return { success: true, message: 'Path already in allowlist' };
+                    }
+                    allowlist.paths.push(filePath);
+                    writeFileSync(configPath, JSON.stringify(existing, null, 2) + '\n');
+                    return { success: true, message: `Added to allowlist: ${filePath.split('/').pop()}` };
+                }
+                catch (err) {
+                    return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
+                }
+            },
+        },
+    ];
+}
+//# sourceMappingURL=remediation.js.map

package/dist/auditor/remediation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAuBlC,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,YAAoB;IACpE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,UAAU,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,UAAU,GAAG,GAAG,QAAQ,MAAM,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,UAAU,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,UAAU,MAAM,CAAC,IAAI,cAAc;QAC1C,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,UAAU,6BAA6B;QAC7G,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC7E,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACzD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBACrF,CAAC;gBAED,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAEnD,oDAAoD;gBACpD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;gBAC5E,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC5C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,kCAAkC;gBAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;gBACtE,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;oBACtC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC5B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;gBAC1D,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACnG,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAoB;IAC/D,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE,kCAAkC,GAAG,CAAC,EAAE,6BAA6B;YAClF,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,YAAY,CAAC,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;wBACpD,OAAO,EAAE,MAAM;wBACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;qBAChC,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;oBACtF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC/G,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAgB;IACvD,MAAM,YAAY,GAAG;QACnB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;KAC7B,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACvC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,mBAAmB,UAAU,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,eAAe,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClE,WAAW,EAAE,wBAAwB,GAAG,CAAC,GAAG,YAAY,WAAW,mBAAmB;gBACtF,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;wBAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;wBACjE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;oBAC/G,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;wBAC1D,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACnG,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAoB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEpE,kFAAkF;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,UAAU,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChF,WAAW,EAAE,+BAA+B,OAAO,CAAC,QAAQ,QAAQ,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;YAC/F,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;oBACvD,CAAC;oBACD,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;oBAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3F,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;oBAC1D,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe;YACtD,WAAW,EAAE,SAAS,QAAQ,6CAA6C;YAC3E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBAElD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAEtE,IAAI,QAAQ,GAA4B,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;oBACtF,CAAC;oBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAE7B,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAClE,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAC9D,CAAC;oBACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAqC,CAAC;oBACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;wBAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;oBAE1D,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;oBACjE,CAAC;oBAED,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC/B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;gBACxF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/auditor/tool-detector.d.ts

@@ -0,0 +1,15 @@
+import type { AccessLevel, AITool } from './types.js';
+interface ToolDefinition {
+    name: string;
+    accessLevel: AccessLevel;
+    description: string;
+    paths: {
+        darwin?: string[];
+        linux?: string[];
+        win32?: string[];
+    };
+}
+export declare const TOOL_DEFINITIONS: ToolDefinition[];
+export declare function detectInstalledTools(): AITool[];
+export {};
+//# sourceMappingURL=tool-detector.d.ts.map

package/dist/auditor/tool-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-detector.d.ts","sourceRoot":"","sources":["../../src/auditor/tool-detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;CACH;AAUD,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAqL5C,CAAC;AA2BF,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CA0B/C"}