ferret-scan 2.1.2 → 2.3.0

package/dist/utils/schemas.d.ts

@@ -18,8 +18,8 @@ export declare const ThreatIndicatorSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     category: string;
     value: string;
-    type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-    severity: "critical" | "high" | "medium" | "low";
+    type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+    severity: "high" | "medium" | "low" | "critical";
     description: string;
     confidence: number;
     source: string;
@@ -30,8 +30,8 @@ export declare const ThreatIndicatorSchema: z.ZodObject<{
 }, {
     category: string;
     value: string;
-    type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-    severity: "critical" | "high" | "medium" | "low";
+    type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+    severity: "high" | "medium" | "low" | "critical";
     description: string;
     confidence: number;
     source: string;
@@ -102,8 +102,8 @@ export declare const ThreatDatabaseSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -114,8 +114,8 @@ export declare const ThreatDatabaseSchema: z.ZodObject<{
     }, {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -154,8 +154,8 @@ export declare const ThreatDatabaseSchema: z.ZodObject<{
     indicators: {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -184,8 +184,8 @@ export declare const ThreatDatabaseSchema: z.ZodObject<{
     indicators: {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -246,16 +246,16 @@ export declare const QuarantineEntrySchema: z.ZodObject<{
     }>;
 }, "strip", z.ZodTypeAny, {
     id: string;
+    reason: string;
     metadata: {
         category: string;
         severity: string;
         riskScore: number;
         originalPermissions?: string | undefined;
     };
+    findings: any[];
     originalPath: string;
     quarantinePath: string;
-    reason: string;
-    findings: any[];
     quarantineDate: string;
     fileSize: number;
     fileHash: string;
@@ -263,16 +263,16 @@ export declare const QuarantineEntrySchema: z.ZodObject<{
     restoredDate?: string | undefined;
 }, {
     id: string;
+    reason: string;
     metadata: {
         category: string;
         severity: string;
         riskScore: number;
         originalPermissions?: string | undefined;
     };
+    findings: any[];
     originalPath: string;
     quarantinePath: string;
-    reason: string;
-    findings: any[];
     quarantineDate: string;
     fileSize: number;
     fileHash: string;
@@ -312,16 +312,16 @@ export declare const QuarantineDatabaseSchema: z.ZodObject<{
         }>;
     }, "strip", z.ZodTypeAny, {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -329,16 +329,16 @@ export declare const QuarantineDatabaseSchema: z.ZodObject<{
         restoredDate?: string | undefined;
     }, {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -364,16 +364,16 @@ export declare const QuarantineDatabaseSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     entries: {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -392,16 +392,16 @@ export declare const QuarantineDatabaseSchema: z.ZodObject<{
 }, {
     entries: {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -968,18 +968,18 @@ export declare const BaselineFindingSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     match: string;
     line: number;
-    hash: string;
     ruleId: string;
     file: string;
+    hash: string;
     acceptedDate: string;
     reason?: string | undefined;
     expiresDate?: string | undefined;
 }, {
     match: string;
     line: number;
-    hash: string;
     ruleId: string;
     file: string;
+    hash: string;
     acceptedDate: string;
     reason?: string | undefined;
     expiresDate?: string | undefined;
@@ -1001,18 +1001,18 @@ export declare const BaselineSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
     }, {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
@@ -1020,33 +1020,33 @@ export declare const BaselineSchema: z.ZodObject<{
     checksum: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     version: string;
-    lastUpdated: string;
     findings: {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
     }[];
+    lastUpdated: string;
     createdDate: string;
     description?: string | undefined;
     checksum?: string | undefined;
 }, {
     version: string;
-    lastUpdated: string;
     findings: {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
     }[];
+    lastUpdated: string;
     createdDate: string;
     description?: string | undefined;
     checksum?: string | undefined;
@@ -1071,6 +1071,10 @@ export declare function safeParseJSON<T>(content: string, schema: z.ZodType<T>,
  * Useful when you already have a parsed object
  */
 export declare function validateSchema<T>(data: unknown, schema: z.ZodType<T>): ParseResult<T>;
+/** Validates a comma-separated severity string parsed from the CLI. */
+export declare const SeverityValueSchema: z.ZodEnum<["CRITICAL", "HIGH", "MEDIUM", "LOW", "INFO"]>;
+/** Validates a comma-separated category string parsed from the CLI. */
+export declare const ThreatCategoryValueSchema: z.ZodEnum<["exfiltration", "credentials", "injection", "backdoors", "supply-chain", "permissions", "persistence", "obfuscation", "ai-specific", "advanced-hiding", "behavioral"]>;
 declare const _default: {
     ThreatIndicatorSchema: z.ZodObject<{
         value: z.ZodString;
@@ -1087,8 +1091,8 @@ declare const _default: {
     }, "strip", z.ZodTypeAny, {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -1099,8 +1103,8 @@ declare const _default: {
     }, {
         category: string;
         value: string;
-        type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-        severity: "critical" | "high" | "medium" | "low";
+        type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+        severity: "high" | "medium" | "low" | "critical";
         description: string;
         confidence: number;
         source: string;
@@ -1171,8 +1175,8 @@ declare const _default: {
         }, "strip", z.ZodTypeAny, {
             category: string;
             value: string;
-            type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-            severity: "critical" | "high" | "medium" | "low";
+            type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+            severity: "high" | "medium" | "low" | "critical";
             description: string;
             confidence: number;
             source: string;
@@ -1183,8 +1187,8 @@ declare const _default: {
         }, {
             category: string;
             value: string;
-            type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-            severity: "critical" | "high" | "medium" | "low";
+            type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+            severity: "high" | "medium" | "low" | "critical";
             description: string;
             confidence: number;
             source: string;
@@ -1223,8 +1227,8 @@ declare const _default: {
         indicators: {
             category: string;
             value: string;
-            type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-            severity: "critical" | "high" | "medium" | "low";
+            type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+            severity: "high" | "medium" | "low" | "critical";
             description: string;
             confidence: number;
             source: string;
@@ -1253,8 +1257,8 @@ declare const _default: {
         indicators: {
             category: string;
             value: string;
-            type: "domain" | "url" | "ip" | "hash" | "email" | "filename" | "package" | "pattern" | "signature";
-            severity: "critical" | "high" | "medium" | "low";
+            type: "url" | "pattern" | "domain" | "ip" | "hash" | "email" | "filename" | "package" | "signature";
+            severity: "high" | "medium" | "low" | "critical";
             description: string;
             confidence: number;
             source: string;
@@ -1299,16 +1303,16 @@ declare const _default: {
         }>;
     }, "strip", z.ZodTypeAny, {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -1316,16 +1320,16 @@ declare const _default: {
         restoredDate?: string | undefined;
     }, {
         id: string;
+        reason: string;
         metadata: {
             category: string;
             severity: string;
             riskScore: number;
             originalPermissions?: string | undefined;
         };
+        findings: any[];
         originalPath: string;
         quarantinePath: string;
-        reason: string;
-        findings: any[];
         quarantineDate: string;
         fileSize: number;
         fileHash: string;
@@ -1365,16 +1369,16 @@ declare const _default: {
             }>;
         }, "strip", z.ZodTypeAny, {
             id: string;
+            reason: string;
             metadata: {
                 category: string;
                 severity: string;
                 riskScore: number;
                 originalPermissions?: string | undefined;
             };
+            findings: any[];
             originalPath: string;
             quarantinePath: string;
-            reason: string;
-            findings: any[];
             quarantineDate: string;
             fileSize: number;
             fileHash: string;
@@ -1382,16 +1386,16 @@ declare const _default: {
             restoredDate?: string | undefined;
         }, {
             id: string;
+            reason: string;
             metadata: {
                 category: string;
                 severity: string;
                 riskScore: number;
                 originalPermissions?: string | undefined;
             };
+            findings: any[];
             originalPath: string;
             quarantinePath: string;
-            reason: string;
-            findings: any[];
             quarantineDate: string;
             fileSize: number;
             fileHash: string;
@@ -1417,16 +1421,16 @@ declare const _default: {
     }, "strip", z.ZodTypeAny, {
         entries: {
             id: string;
+            reason: string;
             metadata: {
                 category: string;
                 severity: string;
                 riskScore: number;
                 originalPermissions?: string | undefined;
             };
+            findings: any[];
             originalPath: string;
             quarantinePath: string;
-            reason: string;
-            findings: any[];
             quarantineDate: string;
             fileSize: number;
             fileHash: string;
@@ -1445,16 +1449,16 @@ declare const _default: {
     }, {
         entries: {
             id: string;
+            reason: string;
             metadata: {
                 category: string;
                 severity: string;
                 riskScore: number;
                 originalPermissions?: string | undefined;
             };
+            findings: any[];
             originalPath: string;
             quarantinePath: string;
-            reason: string;
-            findings: any[];
             quarantineDate: string;
             fileSize: number;
             fileHash: string;
@@ -2021,18 +2025,18 @@ declare const _default: {
     }, "strip", z.ZodTypeAny, {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
     }, {
         match: string;
         line: number;
-        hash: string;
         ruleId: string;
         file: string;
+        hash: string;
         acceptedDate: string;
         reason?: string | undefined;
         expiresDate?: string | undefined;
@@ -2054,18 +2058,18 @@ declare const _default: {
         }, "strip", z.ZodTypeAny, {
             match: string;
             line: number;
-            hash: string;
             ruleId: string;
             file: string;
+            hash: string;
             acceptedDate: string;
             reason?: string | undefined;
             expiresDate?: string | undefined;
         }, {
             match: string;
             line: number;
-            hash: string;
             ruleId: string;
             file: string;
+            hash: string;
             acceptedDate: string;
             reason?: string | undefined;
             expiresDate?: string | undefined;
@@ -2073,37 +2077,39 @@ declare const _default: {
         checksum: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         version: string;
-        lastUpdated: string;
         findings: {
             match: string;
             line: number;
-            hash: string;
             ruleId: string;
             file: string;
+            hash: string;
             acceptedDate: string;
             reason?: string | undefined;
             expiresDate?: string | undefined;
         }[];
+        lastUpdated: string;
         createdDate: string;
         description?: string | undefined;
         checksum?: string | undefined;
     }, {
         version: string;
-        lastUpdated: string;
         findings: {
             match: string;
             line: number;
-            hash: string;
             ruleId: string;
             file: string;
+            hash: string;
             acceptedDate: string;
             reason?: string | undefined;
             expiresDate?: string | undefined;
         }[];
+        lastUpdated: string;
         createdDate: string;
         description?: string | undefined;
         checksum?: string | undefined;
     }>;
+    SeverityValueSchema: z.ZodEnum<["CRITICAL", "HIGH", "MEDIUM", "LOW", "INFO"]>;
+    ThreatCategoryValueSchema: z.ZodEnum<["exfiltration", "credentials", "injection", "backdoors", "supply-chain", "permissions", "persistence", "obfuscation", "ai-specific", "advanced-hiding", "behavioral"]>;
     safeParseJSON: typeof safeParseJSON;
     validateSchema: typeof validateSchema;
 };

package/dist/utils/schemas.js

@@ -235,6 +235,17 @@ export function validateSchema(data, schema) {
         };
     }
 }
+// ============================================
+// CLI-parsed value schemas
+// ============================================
+/** Validates a comma-separated severity string parsed from the CLI. */
+export const SeverityValueSchema = z.enum(['CRITICAL', 'HIGH', 'MEDIUM', 'LOW', 'INFO']);
+/** Validates a comma-separated category string parsed from the CLI. */
+export const ThreatCategoryValueSchema = z.enum([
+    'exfiltration', 'credentials', 'injection', 'backdoors',
+    'supply-chain', 'permissions', 'persistence', 'obfuscation',
+    'ai-specific', 'advanced-hiding', 'behavioral',
+]);
 export default {
     ThreatIndicatorSchema,
     ThreatSourceSchema,
@@ -244,6 +255,8 @@ export default {
     ConfigFileSchema,
     BaselineFindingSchema,
     BaselineSchema,
+    SeverityValueSchema,
+    ThreatCategoryValueSchema,
     safeParseJSON,
     validateSchema,
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ferret-scan",
-  "version": "2.1.2",
-  "description": "Comprehensive AI Agent Security Platform - scan, monitor, and secure AI CLI configurations with IDE integrations, behavior analysis, and compliance frameworks",
+  "version": "2.3.0",
+  "description": "Static security scanner for AI CLI and MCP configurations — detects credential leaks, prompt injection, jailbreaks, and supply chain risks",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -25,9 +25,15 @@
     "lint": "eslint src",
     "lint:fix": "eslint src --fix",
     "prepare": "npm run build",
-    "prepublishOnly": "npm run build && npm run test && npm run lint",
+    "schema:generate": "node scripts/generate-json-schema.mjs",
+    "schema:check": "node scripts/generate-json-schema.mjs --check",
+    "prepublishOnly": "npm run build && npm run schema:generate && npm run test",
     "scan": "node bin/ferret.js scan",
-    "check:resources": "node -e \"console.log('RAM:', Math.round(process.memoryUsage().heapUsed / 1024 / 1024) + 'MB')\""
+    "check:resources": "node -e \"console.log('RAM:', Math.round(process.memoryUsage().heapUsed / 1024 / 1024) + 'MB')\"",
+    "bench": "npm run build && node scripts/bench.mjs",
+    "bench:json": "npm run build && node scripts/bench.mjs --json",
+    "bench:compare": "node scripts/bench-compare.mjs",
+    "docs:api": "typedoc"
   },
   "keywords": [
     "ai-cli",
@@ -80,7 +86,9 @@
     "npm": ">=9.0.0"
   },
   "os": [
-    "!win32"
+    "linux",
+    "darwin",
+    "win32"
   ],
   "cpu": [
     "x64",
@@ -101,15 +109,15 @@
   },
   "dependencies": {
     "boxen": "^7.1.1",
-    "chalk": "^5.3.0",
-    "chokidar": "^3.5.3",
+    "chalk": "^5.6.2",
+    "chokidar": "^3.6.0",
     "commander": "^12.1.0",
-    "glob": "^10.3.10",
-    "ignore": "^5.3.1",
-    "ora": "^8.0.1",
-    "table": "^6.8.1",
-    "yaml": "^2.3.4",
-    "zod": "^3.22.4"
+    "glob": "^10.5.0",
+    "ignore": "^5.3.2",
+    "ora": "^8.2.0",
+    "table": "^6.9.0",
+    "yaml": "^2.8.3",
+    "zod": "^3.25.76"
   },
   "peerDependencies": {
     "typescript": ">=5.0.0"
@@ -120,15 +128,22 @@
     }
   },
   "devDependencies": {
+    "@babel/preset-env": "^7.29.2",
     "@eslint/js": "^9.26.0",
-    "@types/jest": "^29.5.11",
-    "@types/node": "^20.11.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.19.39",
     "@typescript-eslint/eslint-plugin": "^8.54.0",
     "@typescript-eslint/parser": "^8.54.0",
-    "eslint": "^9.26.0",
+    "babel-jest": "^30.3.0",
+    "eslint": "^9.39.4",
+    "fast-check": "^4.7.0",
     "jest": "^29.7.0",
-    "ts-jest": "^29.1.1",
-    "typescript": "^5.0.0",
-    "typescript-eslint": "^8.54.0"
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.54.0",
+    "zod-to-json-schema": "^3.25.2"
+  },
+  "optionalDependencies": {
+    "re2": "1.24.0"
   }
 }