guardlink 1.0.0

package/dist/types/index.d.ts

@@ -0,0 +1,254 @@
+/**
+ * GuardLink — Core type definitions
+ * Mirrors the canonical schema from §5 of the specification.
+ */
+export type Severity = 'critical' | 'high' | 'medium' | 'low';
+export type SeverityAlias = 'P0' | 'P1' | 'P2' | 'P3';
+export type DataClassification = 'pii' | 'phi' | 'financial' | 'secrets' | 'internal' | 'public';
+export type AnnotationVerb = 'asset' | 'threat' | 'control' | 'mitigates' | 'exposes' | 'accepts' | 'transfers' | 'flows' | 'boundary' | 'validates' | 'audit' | 'owns' | 'handles' | 'assumes' | 'comment' | 'shield' | 'shield:begin' | 'shield:end';
+export interface SourceLocation {
+    file: string;
+    line: number;
+    end_line?: number | null;
+    parent_symbol?: string | null;
+}
+export interface BaseAnnotation {
+    verb: AnnotationVerb;
+    location: SourceLocation;
+    description?: string;
+    raw: string;
+}
+export interface AssetAnnotation extends BaseAnnotation {
+    verb: 'asset';
+    path: string;
+    id?: string;
+}
+export interface ThreatAnnotation extends BaseAnnotation {
+    verb: 'threat';
+    name: string;
+    canonical_name: string;
+    id?: string;
+    severity?: Severity;
+    external_refs: string[];
+}
+export interface ControlAnnotation extends BaseAnnotation {
+    verb: 'control';
+    name: string;
+    canonical_name: string;
+    id?: string;
+}
+export interface MitigatesAnnotation extends BaseAnnotation {
+    verb: 'mitigates';
+    asset: string;
+    threat: string;
+    control?: string;
+}
+export interface ExposesAnnotation extends BaseAnnotation {
+    verb: 'exposes';
+    asset: string;
+    threat: string;
+    severity?: Severity;
+    external_refs: string[];
+}
+export interface AcceptsAnnotation extends BaseAnnotation {
+    verb: 'accepts';
+    threat: string;
+    asset: string;
+}
+export interface TransfersAnnotation extends BaseAnnotation {
+    verb: 'transfers';
+    threat: string;
+    source: string;
+    target: string;
+}
+export interface FlowsAnnotation extends BaseAnnotation {
+    verb: 'flows';
+    source: string;
+    target: string;
+    mechanism?: string;
+}
+export interface BoundaryAnnotation extends BaseAnnotation {
+    verb: 'boundary';
+    asset_a: string;
+    asset_b: string;
+    id?: string;
+}
+export interface ValidatesAnnotation extends BaseAnnotation {
+    verb: 'validates';
+    control: string;
+    asset: string;
+}
+export interface AuditAnnotation extends BaseAnnotation {
+    verb: 'audit';
+    asset: string;
+}
+export interface OwnsAnnotation extends BaseAnnotation {
+    verb: 'owns';
+    owner: string;
+    asset: string;
+}
+export interface HandlesAnnotation extends BaseAnnotation {
+    verb: 'handles';
+    classification: DataClassification;
+    asset: string;
+}
+export interface AssumesAnnotation extends BaseAnnotation {
+    verb: 'assumes';
+    asset: string;
+}
+export interface ShieldAnnotation extends BaseAnnotation {
+    verb: 'shield' | 'shield:begin' | 'shield:end';
+}
+export interface CommentAnnotation extends BaseAnnotation {
+    verb: 'comment';
+}
+export type Annotation = AssetAnnotation | ThreatAnnotation | ControlAnnotation | MitigatesAnnotation | ExposesAnnotation | AcceptsAnnotation | TransfersAnnotation | FlowsAnnotation | BoundaryAnnotation | ValidatesAnnotation | AuditAnnotation | OwnsAnnotation | HandlesAnnotation | AssumesAnnotation | CommentAnnotation | ShieldAnnotation;
+export interface ThreatModel {
+    version: '1.0.0';
+    project: string;
+    generated_at: string;
+    source_files: number;
+    annotations_parsed: number;
+    assets: ThreatModelAsset[];
+    threats: ThreatModelThreat[];
+    controls: ThreatModelControl[];
+    mitigations: ThreatModelMitigation[];
+    exposures: ThreatModelExposure[];
+    acceptances: ThreatModelAcceptance[];
+    transfers: ThreatModelTransfer[];
+    flows: ThreatModelFlow[];
+    boundaries: ThreatModelBoundary[];
+    validations: ThreatModelValidation[];
+    audits: ThreatModelAudit[];
+    ownership: ThreatModelOwnership[];
+    data_handling: ThreatModelDataHandling[];
+    assumptions: ThreatModelAssumption[];
+    shields: ThreatModelShield[];
+    comments: ThreatModelComment[];
+    coverage: CoverageStats;
+}
+export interface ThreatModelAsset {
+    path: string[];
+    id?: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelThreat {
+    name: string;
+    canonical_name: string;
+    id?: string;
+    severity?: Severity;
+    external_refs: string[];
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelControl {
+    name: string;
+    canonical_name: string;
+    id?: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelMitigation {
+    asset: string;
+    threat: string;
+    control?: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelExposure {
+    asset: string;
+    threat: string;
+    severity?: Severity;
+    external_refs: string[];
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelAcceptance {
+    threat: string;
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelTransfer {
+    threat: string;
+    source: string;
+    target: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelFlow {
+    source: string;
+    target: string;
+    mechanism?: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelBoundary {
+    asset_a: string;
+    asset_b: string;
+    id?: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelValidation {
+    control: string;
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelAudit {
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelOwnership {
+    owner: string;
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelDataHandling {
+    classification: DataClassification;
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelAssumption {
+    asset: string;
+    description?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelShield {
+    reason?: string;
+    location: SourceLocation;
+}
+export interface ThreatModelComment {
+    description?: string;
+    location: SourceLocation;
+}
+export interface CoverageStats {
+    total_symbols: number;
+    annotated_symbols: number;
+    coverage_percent: number;
+    unannotated_critical: UnannotatedSymbol[];
+}
+export interface UnannotatedSymbol {
+    file: string;
+    line: number;
+    kind: string;
+    name: string;
+}
+export interface ParseDiagnostic {
+    level: 'error' | 'warning';
+    message: string;
+    file: string;
+    line: number;
+    raw?: string;
+}
+export interface ParseResult {
+    annotations: Annotation[];
+    diagnostics: ParseDiagnostic[];
+    files_parsed: number;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjG,MAAM,MAAM,cAAc,GAEtB,OAAO,GAAG,QAAQ,GAAG,SAAS,GAE9B,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAExE,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAEtD,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,YAAY,CAAC;AAIzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAID,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,kBAAkB,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,YAAY,CAAC;CAChD;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,eAAe,GACf,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,CAAC;AAIrB,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAE3B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,WAAW,EAAE,qBAAqB,EAAE,CAAC;IACrC,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,WAAW,EAAE,qBAAqB,EAAE,CAAC;IACrC,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,WAAW,EAAE,qBAAqB,EAAE,CAAC;IACrC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,aAAa,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,qBAAqB,EAAE,CAAC;IACrC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAE/B,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,kBAAkB,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/types/index.js

@@ -0,0 +1,6 @@
+/**
+ * GuardLink — Core type definitions
+ * Mirrors the canonical schema from §5 of the specification.
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/package.json

@@ -0,0 +1,97 @@
+{
+  "name": "guardlink",
+  "version": "1.0.0",
+  "description": "GuardLink — Security annotations for code. Threat modeling that lives in your codebase.",
+  "type": "module",
+  "bin": {
+    "guardlink": "./dist/cli/index.js",
+    "guardlink-mcp": "./dist/mcp/index.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./parser": {
+      "import": "./dist/parser/index.js",
+      "types": "./dist/parser/index.d.ts"
+    },
+    "./init": {
+      "import": "./dist/init/index.js",
+      "types": "./dist/init/index.d.ts"
+    },
+    "./report": {
+      "import": "./dist/report/index.js",
+      "types": "./dist/report/index.d.ts"
+    },
+    "./diff": {
+      "import": "./dist/diff/index.js",
+      "types": "./dist/diff/index.d.ts"
+    },
+    "./analyzer": {
+      "import": "./dist/analyzer/index.js",
+      "types": "./dist/analyzer/index.d.ts"
+    },
+    "./mcp": {
+      "import": "./dist/mcp/index.js",
+      "types": "./dist/mcp/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src/",
+    "cli": "tsx src/cli/index.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "guardlink",
+    "security",
+    "threat-modeling",
+    "annotations",
+    "sast",
+    "sarif",
+    "devsecops",
+    "mcp",
+    "appsec",
+    "code-annotations",
+    "threat-model"
+  ],
+  "author": "BugB Technologies (https://bugb.io)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Bugb-Technologies/guardlink.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Bugb-Technologies/guardlink/issues"
+  },
+  "homepage": "https://github.com/Bugb-Technologies/guardlink#readme",
+  "engines": {
+    "node": ">=18"
+  },
+  "devDependencies": {
+    "@types/gradient-string": "^1.1.6",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "chalk": "^5.4.0",
+    "commander": "^13.0.0",
+    "fast-glob": "^3.3.0",
+    "gradient-string": "^3.0.0"
+  }
+}