hackmyagent-core 0.1.0

package/dist/scanner/external-scanner.test.js

@@ -0,0 +1,302 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const external_scanner_1 = require("./external-scanner");
+const http = __importStar(require("http"));
+(0, vitest_1.describe)('ExternalScanner', () => {
+    let scanner;
+    (0, vitest_1.beforeEach)(() => {
+        scanner = new external_scanner_1.ExternalScanner();
+    });
+    (0, vitest_1.describe)('scan', () => {
+        (0, vitest_1.it)('returns a scan result with required fields', async () => {
+            const result = await scanner.scan('localhost', {
+                timeout: 1000,
+                skipPortScan: true,
+            });
+            (0, vitest_1.expect)(result).toMatchObject({
+                id: vitest_1.expect.any(String),
+                target: 'localhost',
+                score: vitest_1.expect.any(Number),
+                grade: vitest_1.expect.any(String),
+                findings: vitest_1.expect.any(Array),
+                duration: vitest_1.expect.any(Number),
+                timestamp: vitest_1.expect.any(Date),
+                openPorts: vitest_1.expect.any(Array),
+            });
+        });
+        (0, vitest_1.it)('calculates grade based on score', async () => {
+            const result = await scanner.scan('localhost', { skipPortScan: true });
+            // Grade should be A-F based on score
+            (0, vitest_1.expect)(['A', 'B', 'C', 'D', 'F']).toContain(result.grade);
+        });
+        (0, vitest_1.it)('returns duration in milliseconds', async () => {
+            const result = await scanner.scan('localhost', {
+                timeout: 1000,
+                skipPortScan: true,
+            });
+            (0, vitest_1.expect)(result.duration).toBeGreaterThanOrEqual(0);
+            (0, vitest_1.expect)(result.duration).toBeLessThan(30000);
+        });
+    });
+    (0, vitest_1.describe)('port scanning', () => {
+        let server;
+        let port;
+        (0, vitest_1.beforeEach)(async () => {
+            server = http.createServer((req, res) => {
+                res.writeHead(200, { 'Content-Type': 'text/plain' });
+                res.end('OK');
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+        });
+        (0, vitest_1.afterEach)(async () => {
+            await new Promise((resolve) => server.close(() => resolve()));
+        });
+        (0, vitest_1.it)('detects open ports', async () => {
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 2000,
+            });
+            (0, vitest_1.expect)(result.openPorts).toContain(port);
+        });
+        (0, vitest_1.it)('does not report closed ports', async () => {
+            // Use a port that's likely closed but within valid range (1-65535)
+            // Pick port+1 if port < 65000, otherwise port-1000 to stay within range
+            const closedPort = port < 65000 ? port + 1 : port - 1000;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [closedPort],
+                timeout: 1000,
+            });
+            (0, vitest_1.expect)(result.openPorts).not.toContain(closedPort);
+        });
+    });
+    (0, vitest_1.describe)('security checks', () => {
+        let server;
+        let port;
+        (0, vitest_1.afterEach)(async () => {
+            if (server) {
+                await new Promise((resolve) => server.close(() => resolve()));
+            }
+        });
+        (0, vitest_1.it)('detects exposed MCP SSE endpoint', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/sse' || req.url === '/mcp/sse') {
+                    res.writeHead(200, { 'Content-Type': 'text/event-stream' });
+                    res.end('data: test\n\n');
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const sseFinding = result.findings.find((f) => f.checkId === 'MCP-SSE');
+            (0, vitest_1.expect)(sseFinding).toBeDefined();
+            (0, vitest_1.expect)(sseFinding?.severity).toBe('critical');
+        });
+        (0, vitest_1.it)('detects exposed MCP tools endpoint', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/tools' || req.url === '/mcp/tools') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ tools: [{ name: 'test' }] }));
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const toolsFinding = result.findings.find((f) => f.checkId === 'MCP-TOOLS');
+            (0, vitest_1.expect)(toolsFinding).toBeDefined();
+            (0, vitest_1.expect)(toolsFinding?.severity).toBe('critical');
+        });
+        (0, vitest_1.it)('detects exposed config files', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/.claude/settings.json') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ settings: true }));
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const configFinding = result.findings.find((f) => f.checkId === 'CONFIG-EXPOSED');
+            (0, vitest_1.expect)(configFinding).toBeDefined();
+            (0, vitest_1.expect)(configFinding?.severity).toBe('critical');
+        });
+        (0, vitest_1.it)('detects exposed CLAUDE.md', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/CLAUDE.md') {
+                    res.writeHead(200, { 'Content-Type': 'text/markdown' });
+                    res.end('# System Instructions\n\nYou are a helpful assistant.');
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const claudeFinding = result.findings.find((f) => f.checkId === 'CLAUDE-MD-EXPOSED');
+            (0, vitest_1.expect)(claudeFinding).toBeDefined();
+            (0, vitest_1.expect)(claudeFinding?.severity).toBe('high');
+        });
+        (0, vitest_1.it)('detects exposed API keys in responses', async () => {
+            server = http.createServer((req, res) => {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({
+                    config: {
+                        apiKey: 'sk-ant-api03-realkey1234567890abcdef',
+                    },
+                }));
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const apiKeyFinding = result.findings.find((f) => f.checkId === 'API-KEY-EXPOSED');
+            (0, vitest_1.expect)(apiKeyFinding).toBeDefined();
+            (0, vitest_1.expect)(apiKeyFinding?.severity).toBe('critical');
+        });
+        (0, vitest_1.it)('detects VSCode MCP config exposure', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/.vscode/mcp.json') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ servers: {} }));
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const configFinding = result.findings.find((f) => f.checkId === 'CONFIG-EXPOSED' && f.path?.includes('.vscode'));
+            (0, vitest_1.expect)(configFinding).toBeDefined();
+        });
+        (0, vitest_1.it)('detects Cursor MCP config exposure', async () => {
+            server = http.createServer((req, res) => {
+                if (req.url === '/.cursor/mcp.json') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ servers: {} }));
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            const configFinding = result.findings.find((f) => f.checkId === 'CONFIG-EXPOSED' && f.path?.includes('.cursor'));
+            (0, vitest_1.expect)(configFinding).toBeDefined();
+        });
+    });
+    (0, vitest_1.describe)('score calculation', () => {
+        (0, vitest_1.it)('returns 100 for target with no findings', async () => {
+            const result = await scanner.scan('localhost', { skipPortScan: true });
+            // With no accessible ports, should have no findings
+            (0, vitest_1.expect)(result.score).toBe(100);
+            (0, vitest_1.expect)(result.grade).toBe('A');
+        });
+        (0, vitest_1.it)('deducts points for critical findings', async () => {
+            let server;
+            server = http.createServer((req, res) => {
+                res.writeHead(200, { 'Content-Type': 'text/event-stream' });
+                res.end('data: test\n\n');
+            });
+            await new Promise((resolve) => {
+                server.listen(0, '127.0.0.1', () => resolve());
+            });
+            const port = server.address().port;
+            const result = await scanner.scan('127.0.0.1', {
+                ports: [port],
+                timeout: 5000,
+            });
+            // Critical finding should reduce score
+            (0, vitest_1.expect)(result.score).toBeLessThan(100);
+            await new Promise((resolve) => server.close(() => resolve()));
+        });
+    });
+});
+//# sourceMappingURL=external-scanner.test.js.map

package/dist/scanner/external-scanner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-scanner.test.js","sourceRoot":"","sources":["../../src/scanner/external-scanner.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAyE;AACzE,yDAAqD;AAErD,2CAA6B;AAG7B,IAAA,iBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,OAAwB,CAAC;IAE7B,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,kCAAe,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,MAAM,EAAE,GAAG,EAAE;QACpB,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,aAAa,CAAC;gBAC3B,EAAE,EAAE,eAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,eAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACzB,KAAK,EAAE,eAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACzB,QAAQ,EAAE,eAAM,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC3B,QAAQ,EAAE,eAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC5B,SAAS,EAAE,eAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC3B,SAAS,EAAE,eAAM,CAAC,GAAG,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvE,qCAAqC;YACrC,IAAA,eAAM,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAClD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,IAAI,MAAmB,CAAC;QACxB,IAAI,IAAY,CAAC;QAEjB,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;YACpB,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;YACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,mEAAmE;YACnE,wEAAwE;YACxE,MAAM,UAAU,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,UAAU,CAAC;gBACnB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,IAAI,MAAmB,CAAC;QACxB,IAAI,IAAY,CAAC;QAEjB,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;YACnB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;oBACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC5D,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YACxE,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YACjC,IAAA,eAAM,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;oBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;YAC5E,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,IAAA,eAAM,EAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,wBAAwB,EAAE,CAAC;oBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC;YAClF,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAA,eAAM,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;oBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;oBACxD,GAAG,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC;YACrF,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAA,eAAM,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACrB,MAAM,EAAE;wBACN,MAAM,EAAE,sCAAsC;qBAC/C;iBACF,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC;YACnF,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAA,eAAM,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;oBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CACrE,CAAC;YACF,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;oBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CACrE,CAAC;YACF,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,IAAA,WAAE,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvE,oDAAoD;YACpD,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,MAAmB,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC7C,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,uCAAuC;YACvC,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAEvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scanner/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * External scanner module
+ */
+export { ExternalScanner } from './external-scanner';
+export type { ExternalScanResult, ExternalFinding, ScannerOptions, FindingSeverity, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/scanner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanner/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,SAAS,CAAC"}

package/dist/scanner/index.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * External scanner module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalScanner = void 0;
+var external_scanner_1 = require("./external-scanner");
+Object.defineProperty(exports, "ExternalScanner", { enumerable: true, get: function () { return external_scanner_1.ExternalScanner; } });
+//# sourceMappingURL=index.js.map

package/dist/scanner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scanner/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,uDAAqD;AAA5C,mHAAA,eAAe,OAAA"}

package/dist/scanner/types.d.ts

@@ -0,0 +1,32 @@
+/**
+ * External scanner types
+ */
+export type FindingSeverity = 'critical' | 'high' | 'medium' | 'low';
+export interface ExternalFinding {
+    id: string;
+    checkId: string;
+    severity: FindingSeverity;
+    title: string;
+    description: string;
+    port?: number;
+    path?: string;
+    evidence: string;
+    impact: string;
+    fix: string;
+}
+export interface ExternalScanResult {
+    id: string;
+    target: string;
+    score: number;
+    grade: string;
+    findings: ExternalFinding[];
+    duration: number;
+    timestamp: Date;
+    openPorts: number[];
+}
+export interface ScannerOptions {
+    timeout?: number;
+    ports?: number[];
+    skipPortScan?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/scanner/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/scanner/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/scanner/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * External scanner types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/scanner/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/scanner/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "hackmyagent-core",
+  "version": "0.1.0",
+  "description": "Core security scanning library for AI agents",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src --ext .ts"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.3",
+    "vitest": "^3.0.0"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "security",
+    "mcp",
+    "scanner"
+  ],
+  "author": "OpenA2A",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/opena2a-org/hackmyagent.git"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}