funifier-mcp 0.3.17 → 0.3.19

package/dist/mcp/tools/_audit.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditManifestSchema = exports.auditEntrySchema = void 0;
+exports.resolvePrincipal = resolvePrincipal;
+exports.runAudit = runAudit;
+const zod_1 = require("zod");
+const _scope_engine_1 = require("./_scope-engine");
+// ─── Schema (T7) ─────────────────────────────────────────────────────────────
+exports.auditEntrySchema = zod_1.z.object({
+    method: zod_1.z.string().transform((m) => m.toUpperCase()),
+    path: zod_1.z.string().transform((p) => p.startsWith("/v3") ? p : `/v3${p.startsWith("/") ? p : `/${p}`}`),
+    auth: zod_1.z.string().min(1, { message: "auth is required" }),
+    evidence: zod_1.z.string().min(1, { message: "evidence is required" }),
+    confidence: zod_1.z.enum(["high", "low"]).default("high"),
+});
+exports.auditManifestSchema = zod_1.z.object({
+    version: zod_1.z.literal(1),
+    entries: zod_1.z.array(exports.auditEntrySchema).max(500, { message: "Manifest must not exceed 500 entries" }),
+});
+function resolvePrincipal(auth, security) {
+    const apps = security.apps ?? [];
+    const roles = security.roles ?? [];
+    // "public" or "role:public" → scope of role named "public"
+    if (auth === "public" || auth === "role:public") {
+        const role = roles.find((r) => r.name === "public");
+        if (!role)
+            return { kind: "missing-principal", label: "role:public", scope: "" };
+        return { kind: "role", label: "role:public", scope: role.scope };
+    }
+    // "player" → alias for "role:player" (SecurityFilter.java:153-211: Bearer embeds role scope at login)
+    if (auth === "player" || auth === "role:player") {
+        const role = roles.find((r) => r.name === "player");
+        if (!role)
+            return { kind: "missing-principal", label: "role:player", scope: "" };
+        return { kind: "role", label: "role:player", scope: role.scope };
+    }
+    // "role:<name>" → generic named role
+    if (auth.startsWith("role:")) {
+        const roleName = auth.slice(5);
+        const role = roles.find((r) => r.name === roleName);
+        if (!role)
+            return { kind: "missing-principal", label: auth, scope: "" };
+        return { kind: "role", label: auth, scope: role.scope };
+    }
+    // "app:<name>" → app entry scope (SecurityFilter.java:153-211: Basic API_KEY:APP_SECRET)
+    if (auth.startsWith("app:")) {
+        const appName = auth.slice(4);
+        const app = apps.find((a) => a.name === appName);
+        if (!app)
+            return { kind: "missing-principal", label: auth, scope: "" };
+        return { kind: "app", label: auth, scope: app.scope };
+    }
+    return { kind: "missing-principal", label: auth, scope: "" };
+}
+// ─── Audit diff (T8) ─────────────────────────────────────────────────────────
+// read_all/write_all/delete_all can be narrowed to exact verb_entity tokens.
+// "database" is a keyword with no narrower alternative — handled separately.
+const NARROWABLE_BROAD_TOKENS = new Set(["read_all", "write_all", "delete_all"]);
+/** Compute the minimal exact token set that would replace `broadToken` for its matched entries. */
+function computeNarrowing(broadToken, scope, entries) {
+    const exactTokens = new Set();
+    for (const entry of entries) {
+        const decision = (0, _scope_engine_1.evaluateScope)(scope, entry.method, entry.path);
+        if (decision.allowed && decision.matchedToken === broadToken) {
+            exactTokens.add(`${(0, _scope_engine_1.verbFor)(entry.method)}_${(0, _scope_engine_1.entityFull)(entry.path)}`);
+            const cleanPath = entry.path.split("?")[0];
+            if (cleanPath === "/v3/database" || cleanPath.startsWith("/v3/database/")) {
+                exactTokens.add("database");
+            }
+        }
+    }
+    return [...exactTokens].sort();
+}
+/** Per-principal missing/excess/manual-review diff against the principal's scope. */
+function computePrincipalDiff(label, scope, entries) {
+    const findings = [];
+    const publicEntries = entries.filter((e) => (0, _scope_engine_1.isPublicPath)(e.method, e.path));
+    const checkedEntries = entries.filter((e) => !(0, _scope_engine_1.isPublicPath)(e.method, e.path));
+    // Informational: public-path entries are excluded from missing/excess math
+    for (const entry of publicEntries) {
+        findings.push({
+            severity: "public-no-scope-needed",
+            principal: label,
+            rule: "public-path",
+            evidence: entry.evidence,
+            path: entry.path,
+            method: entry.method,
+            detail: `${entry.method} ${entry.path} is a public path — no scope required.`,
+        });
+    }
+    // Missing: entries that would be denied
+    for (const entry of checkedEntries) {
+        const decision = (0, _scope_engine_1.evaluateScope)(scope, entry.method, entry.path);
+        if (!decision.allowed) {
+            findings.push({
+                severity: "missing",
+                principal: label,
+                rule: decision.rule,
+                evidence: entry.evidence,
+                path: entry.path,
+                method: entry.method,
+                requiredTokens: decision.requiredTokens,
+                detail: `${entry.method} ${entry.path} would be denied — missing: [${decision.requiredTokens.join(", ")}].` +
+                    (entry.confidence === "low" ? " (low-confidence entry)" : ""),
+            });
+        }
+    }
+    // Excess + manual-review: analyse scope tokens against observed usage
+    const scopeTokens = scope.replace(/ /g, "").split(",").filter(Boolean);
+    const used = (0, _scope_engine_1.usedTokens)(scope, checkedEntries.map((e) => ({ method: e.method, path: e.path })));
+    for (const token of scopeTokens) {
+        if (_scope_engine_1.MANUAL_REVIEW_TOKENS.has(token)) {
+            findings.push({
+                severity: "manual-review",
+                principal: label,
+                rule: "non-path-token",
+                detail: `'${token}' cannot be verified from path analysis — manual review required.`,
+            });
+            continue;
+        }
+        if (!used.has(token)) {
+            findings.push({
+                severity: "excess",
+                principal: label,
+                rule: "unused-token",
+                excessTokens: [token],
+                detail: `'${token}' is granted but no manifest entry requires it.`,
+            });
+        }
+        else if (NARROWABLE_BROAD_TOKENS.has(token)) {
+            // Broad token is used but could be replaced by exact tokens (PSEC-10)
+            const narrowing = computeNarrowing(token, scope, checkedEntries);
+            findings.push({
+                severity: "excess",
+                principal: label,
+                rule: "broad-token-narrowable",
+                excessTokens: [token],
+                narrowingSuggestion: narrowing,
+                detail: `'${token}' authorizes your entries but could be narrowed to [${narrowing.join(", ")}]. Broad token grants access beyond observed usage.`,
+            });
+        }
+        // Non-broad token that IS used → not excess, no finding
+    }
+    return findings;
+}
+// ─── Danger rules (T9) ───────────────────────────────────────────────────────
+/** Static danger findings derived from the live security document alone — manifest-independent. */
+function computeDangerFindings(security) {
+    const findings = [];
+    const apps = security.apps ?? [];
+    const roles = security.roles ?? [];
+    const publicRole = roles.find((r) => r.name === "public");
+    const playerRole = roles.find((r) => r.name === "player");
+    if (publicRole) {
+        const tokens = publicRole.scope.replace(/ /g, "").split(",").filter(Boolean);
+        for (const t of ["write_all", "delete_all", "database"]) {
+            if (tokens.includes(t)) {
+                findings.push({
+                    severity: "danger",
+                    principal: "role:public",
+                    rule: "public-role-dangerous-token",
+                    detail: `Role 'public' has '${t}' — unauthenticated callers can perform privileged operations.`,
+                });
+            }
+        }
+        for (const t of ["read_encrypted_field_values", "read_encrypted_player_password"]) {
+            if (tokens.includes(t)) {
+                findings.push({
+                    severity: "danger",
+                    principal: "role:public",
+                    rule: "public-role-encrypted-access",
+                    detail: `Role 'public' has '${t}' — encrypted data accessible to unauthenticated callers.`,
+                });
+            }
+        }
+    }
+    if (playerRole) {
+        const tokens = playerRole.scope.replace(/ /g, "").split(",").filter(Boolean);
+        for (const t of ["read_encrypted_field_values", "read_encrypted_player_password"]) {
+            if (tokens.includes(t)) {
+                findings.push({
+                    severity: "danger",
+                    principal: "role:player",
+                    rule: "player-role-encrypted-access",
+                    detail: `Role 'player' has '${t}' — encrypted data accessible to all authenticated players.`,
+                });
+            }
+        }
+    }
+    for (const app of apps) {
+        if (!app.scope || !app.scope.replace(/ /g, "")) {
+            findings.push({
+                severity: "danger",
+                principal: `app:${app.name}`,
+                rule: "empty-scope-app",
+                detail: `App '${app.name}' has an empty scope — no API calls will be authorized.`,
+            });
+        }
+    }
+    return findings;
+}
+// ─── Main audit function ──────────────────────────────────────────────────────
+function runAudit(manifest, security) {
+    const findings = [];
+    const notes = [];
+    // Danger findings fire regardless of manifest content (T9)
+    findings.push(...computeDangerFindings(security));
+    // Per-principal diff (T7, T8)
+    const byAuth = new Map();
+    for (const entry of manifest.entries) {
+        const list = byAuth.get(entry.auth) ?? [];
+        list.push(entry);
+        byAuth.set(entry.auth, list);
+    }
+    for (const [auth, entries] of byAuth) {
+        const principal = resolvePrincipal(auth, security);
+        if (principal.kind === "missing-principal") {
+            findings.push({
+                severity: "missing-principal",
+                principal: principal.label,
+                rule: "unknown-principal",
+                detail: `Principal '${auth}' not found in the live security document — entries for this auth context cannot be evaluated.`,
+            });
+            continue;
+        }
+        findings.push(...computePrincipalDiff(principal.label, principal.scope, entries));
+    }
+    // Completeness + freshness notes (T9)
+    if (manifest.entries.length === 0) {
+        notes.push("No manifest entries — danger findings above apply regardless. " +
+            "Run a full audit by providing all Funifier API calls your project makes.");
+    }
+    else {
+        notes.push("Excess findings are candidates for removal. They may be required by consumers outside this manifest. Verify before removing.");
+    }
+    // Bearer freshness: scope is embedded at login, role edits don't retroactively affect live tokens
+    notes.push("Bearer freshness: scope is embedded in the token at login time. " +
+        "Role scope changes take effect only on the player's next login — live tokens carry the scope at their issuance time.");
+    return { manifest_entries: manifest.entries.length, findings, notes };
+}
+//# sourceMappingURL=_audit.js.map

package/dist/mcp/tools/_audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_audit.js","sourceRoot":"","sources":["../../../src/mcp/tools/_audit.ts"],"names":[],"mappings":";;;AA4EA,4CAmCC;AAyKD,4BAkDC;AA1UD,6BAAwB;AACxB,mDAQyB;AAEzB,gFAAgF;AAEnE,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAClE;IACD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACxD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAChE,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACpD,CAAC,CAAC;AAEU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;CACjG,CAAC,CAAC;AAkDH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,QAA+B;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IAEnC,2DAA2D;IAC3D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAED,sGAAsG;IACtG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,yFAAyF;IACzF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,gFAAgF;AAEhF,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAEjF,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,UAAkB,EAAE,KAAa,EAAE,OAAqB;IAChF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAA,6BAAa,EAAC,KAAK,EAAE,KAAK,CAAC,MAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAC7D,WAAW,CAAC,GAAG,CAAC,GAAG,IAAA,uBAAO,EAAC,KAAK,CAAC,MAAoB,CAAC,IAAI,IAAA,0BAAU,EAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1E,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa,EAAE,OAAqB;IAC/E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,4BAAY,EAAC,CAAC,CAAC,MAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,4BAAY,EAAC,CAAC,CAAC,MAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5F,2EAA2E;IAC3E,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,wBAAwB;YAClC,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,wCAAwC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAA,6BAAa,EAAC,KAAK,EAAE,KAAK,CAAC,MAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,MAAM,EACJ,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,gCAAgC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACnG,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhG,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,oCAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,IAAI,KAAK,mEAAmE;aACrF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,KAAK,iDAAiD;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,sEAAsE;YACtE,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,YAAY,EAAE,CAAC,KAAK,CAAC;gBACrB,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI,KAAK,uDAAuD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD;aAClJ,CAAC,CAAC;QACL,CAAC;QACD,wDAAwD;IAC1D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,mGAAmG;AACnG,SAAS,qBAAqB,CAAC,QAA+B;IAC5D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IAEnC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE1D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,aAAa;oBACxB,IAAI,EAAE,6BAA6B;oBACnC,MAAM,EAAE,sBAAsB,CAAC,gEAAgE;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,EAAE,CAAC;YAClF,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,aAAa;oBACxB,IAAI,EAAE,8BAA8B;oBACpC,MAAM,EAAE,sBAAsB,CAAC,2DAA2D;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,EAAE,CAAC;YAClF,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,aAAa;oBACxB,IAAI,EAAE,8BAA8B;oBACpC,MAAM,EAAE,sBAAsB,CAAC,6DAA6D;iBAC7F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE;gBAC5B,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,QAAQ,GAAG,CAAC,IAAI,yDAAyD;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,SAAgB,QAAQ,CAAC,QAAuB,EAAE,QAA+B;IAC/E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAElD,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEnD,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,mBAAmB;gBAC7B,SAAS,EAAE,SAAS,CAAC,KAAK;gBAC1B,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,cAAc,IAAI,gGAAgG;aAC3H,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,sCAAsC;IACtC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,gEAAgE;YAC9D,0EAA0E,CAC7E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,8HAA8H,CAC/H,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,IAAI,CACR,kEAAkE;QAChE,sHAAsH,CACzH,CAAC;IAEF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC"}

package/dist/mcp/tools/_audit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=_audit.test.d.ts.map

package/dist/mcp/tools/_audit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_audit.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_audit.test.ts"],"names":[],"mappings":""}