mcp-app-lint 0.1.6 → 0.1.8

package/README.md

@@ -4,16 +4,72 @@ SARIF findings about what an MCP App declares and what its HTML does. Meant to b
 scanners and CI, or by hand on a package, a directory, or the JSON a server returned.
 
 ```
+npx mcp-app-lint --url https://example.com/mcp        # a running server over Streamable HTTP
+npx mcp-app-lint --stdio "node dist/server.js"        # a local server, started as a process
 npx mcp-app-lint --dir ./my-server                    # a package directory, built or source
 npx mcp-app-lint --package @scope/name                # an npm package: downloaded, scanned, deleted
 npx mcp-app-lint --read read.json --list list.json --tools tools.json
-                                                      # results of resources/read, resources/list, tools/list
+                                                      # saved results of resources/read, resources/list, tools/list
 npx mcp-app-lint --html app.html                      # one UI document
 npx mcp-app-lint --a2ui stream.jsonl                  # A2UI v0.9 messages: one, a JSON array, { messages } or JSONL
+npx mcp-app-lint --html dist/app.html --suggest-csp   # the _meta.ui.csp the document needs
+npx mcp-app-lint --mcp                                # run as an MCP server over stdio (see below)
 ```
 
 Options: `--out file.sarif`, `--format sarif|text`, `--fail-on error|warning|note|none` (default
-`error`; the exit code is 1 when a finding reaches the threshold, 2 on usage errors).
+`error`; the exit code is 1 when a finding reaches the threshold, 2 on usage errors and on a
+server that cannot be reached), `--header "Name: value"` (repeatable, for `--url`), `--timeout ms`
+(per request to a live server, default 20000), `--suggest-csp`.
+
+## A running server
+
+`--url` and `--stdio` ask the server what it publishes, the same way a host does: `initialize`,
+`resources/list`, `resources/read` for every UI resource (`text/html` or `ui://`), `tools/list`.
+They never call a tool. Findings point at the resource (`ui://…`) or at `tools/list`, and a summary
+of what was read goes to stderr, so stdout stays a clean SARIF log.
+
+```
+npx mcp-app-lint --url https://example.com/mcp --header "Authorization: Bearer $TOKEN" --format text
+npx mcp-app-lint --stdio "node dist/index.js --stdio" --format text
+```
+
+`--url` speaks Streamable HTTP (JSON or SSE answers, session header, a `DELETE` to end the session).
+A 401 or 403 means the server wants credentials: pass them with `--header`. `--stdio` runs the
+command through the shell in the current directory, keeps the server's stderr out of the output
+(its last lines go into the error if it exits), answers its `ping`, and closes stdin when done. The
+SARIF log records the command line with header values, URL credentials and query values, and
+`NAME=value` assignments in the `--stdio` command masked, since code scanning stores it.
+
+## Suggested CSP
+
+`--suggest-csp` prints, instead of findings, the `_meta.ui.csp` each UI document needs, as JSON
+keyed by document (or one block per document with `--format text`):
+
+```json
+{
+  "ui://weather/view": {
+    "connectDomains": ["https://api.weather.example", "wss://live.weather.example"],
+    "resourceDomains": ["https://fonts.googleapis.com", "https://fonts.gstatic.com", "https://img.weather.example"]
+  }
+}
+```
+
+The keys follow the host formula in the specification: `connectDomains` for `fetch`, `WebSocket`,
+`EventSource`, XHR and `sendBeacon`; `resourceDomains` for scripts (including module imports from a
+URL), stylesheets and CSS `url()`/`@import` (in `<style>` and `style` attributes), images (`src`,
+`srcset`, `poster`) and media;
+`frameDomains` for iframes. Links (`<a href>`, `rel="canonical"`, `preconnect`) need nothing. A
+Google Fonts stylesheet brings `fonts.gstatic.com` with it. It is static: a URL the script assembles
+at run time is not seen, so run it on the built document and add such hosts by hand. `null` means
+no origin has a known key. MCPAPP001 carries the same suggestion in its message and in
+`properties.suggestedCsp`.
+
+A bundle often holds a URL as a plain string that a library fetches later: a map tile template
+(`url: "https://tile.example.org/{z}/{x}/{y}.png"`), a CDN base URL in a template literal. The key
+cannot be told from the code, so these origins are listed as hints, not put into the declaration:
+on a line of their own with `--format text`, on stderr next to the JSON (stdout stays the
+declaration to copy), and as `mentioned` from the MCP tool. Link targets, XML namespaces,
+framework documentation hosts and placeholders such as `*.example.com` are left out.
 
 ## Use in CI (GitHub code scanning)
 
@@ -75,6 +131,8 @@ npx mcp-app-lint --dir . --format sarif --out mcp-app-lint.sarif --fail-on error
 | MCPAPP017 | meta-list-read-mismatch | warning | `resources/read` and `resources/list` both declare a field (`csp`, `permissions`, `domain`) with different values; a listing with no CSP is not a mismatch, since the SDK puts the CSP in the read result |
 | MCPAPP018 | meta-read-wider-than-list | error | both declare a CSP and the read-time one adds an entry (domain or wildcard) the listing did not declare under the same key |
 | MCPAPP019 | csp-sink-tenant-host | note | one bucket, worker or app on a storage or serverless service from the denylist (`acct.blob.core.windows.net`, `pub-<id>.r2.dev`); fine while the owner keeps the name |
+| MCPAPP020 | csp-unused-domain | note | a declared entry whose host the document never mentions: the policy is wider than the UI needs. Only where the exact document is known (a read result, a live server); a host the script assembles from parts at run time is reported too |
+| MCPAPP021 | csp-host-undeclared | warning | the UI declares a CSP, but the document loads from or calls an origin under a key that does not allow it (see Suggested CSP); the host blocks the request and the UI breaks |
 
 ### A2UI rules
 
@@ -111,10 +169,35 @@ Apps MIME type or `ui://` (hosts, renderers, SDKs) are not treated as serving a
 looked for in the package's HTML documents only: a `fetch` in server code is not bound by the CSP,
 so it does not count.
 
+## As an MCP server
+
+`mcp-app-lint --mcp` serves the checks over stdio, so an agent that builds an MCP App can run them
+while it works. Install the package, then register it with the client, for example in Claude Code:
+
+```
+npm install --global mcp-app-lint
+claude mcp add mcp-app-lint -- mcp-app-lint --mcp
+```
+
+| Tool | Input | Output |
+| --- | --- | --- |
+| `lint_ui_resource` | `html`, `meta` (the read result's `_meta`), `list_meta`, `uri` | findings for the document and its `_meta.ui` |
+| `suggest_csp` | `html` | the `_meta.ui.csp` the document needs, or `null` |
+| `lint_tools` | `tools` (a `tools/list` array) | findings |
+| `lint_a2ui` | `messages` (array, JSON or JSONL text) | findings |
+| `lint_directory` | `path` of a package directory | findings, with file and line |
+| `lint_server` | `url` of a Streamable HTTP endpoint, `headers` | findings for what the server publishes |
+
+Every tool is marked read-only. Findings come as text (one line each) and as `structuredContent`
+(`counts` by level and the findings). No tool starts a process: a local stdio server is linted from
+the command line with `--stdio`, where the user sees the command.
+
 The MCP Apps rules come out of the [MCP Apps UI census](../../census) in this repository; the analyzer is
 shared. The HTML sink detection is `eslint-plugin-render-policy`'s `no-unsafe-innerhtml`. The sink
 denylist is `@render-policy/core`'s. The package also exports the analysis functions (`analyzeHtml`,
-`analyzeUiMeta`, `compareListRead`, `scanPackageDir`, `lintA2uiMessages`, `parseA2uiMessages`, …) and `categorizeDomain`, the heuristic host
+`analyzeUiMeta`, `compareListRead`, `scanPackageDir`, `lintA2uiMessages`, `parseA2uiMessages`,
+`cspNeeds`, `suggestCsp`, `lintSnapshot`, …), the read-only clients (`McpHttpClient`,
+`McpStdioClient`, `snapshotServer`), the MCP server (`serveMcp`, `handleMessage`) and `categorizeDomain`, the heuristic host
 category (fonts, analytics, maps, storage, media, cdn, api, …) the census report tabulates; it is
 data for aggregates, not a rule.
 

package/dist/analyze.d.mts

@@ -137,6 +137,8 @@ export declare function analyzeHtml(html: unknown): {
     externalHosts: string[];
     networkHosts: string[];
     sinkHosts: string[];
+    cspNeeds: import("./csp.mjs").CspNeeds;
+    cspMentioned: string[];
 };
 /**
  * Short lines and not too many of them: written by a person, not emitted by a bundler.

package/dist/analyze.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"analyze.d.mts","sourceRoot":"","sources":["../src/analyze.mjs"],"names":[],"mappings":"AAgBG,YAA+B,MAAM,GAA3B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAQ;AAEpC,YAAoF,MAAM,GAAhF,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,gBAAgB,CAAQ;AAK9F,eAAO,MAAM,OAAO,8BAA8B,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAHlB,OAGkB,GAFhB,MAAM,GAAG,IAAI,CAWzB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAFvB,OAEuB;;;;;;;;;;;;;;;;;;;;;;EAoBjC;AAeD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAH7B,OAG6B,EAAE,QAAQ,EAFvC,OAEuC;;;;;;;;;;;;;;EAWjD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAFvB,OAEuB;;;;;;EAkBjC;AAED,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB,UAA0G,CAAC;AAyDrI,YAA+D,eAAe,GAApE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAiB;AAI9E,YAAkB,QAAQ,GAC1B;IAAmB,IAAI,EAAZ,MAAM,CACjB;IAAmB,MAAM,EAAd,MAAM,CACjB;;;;IAAoB,WAAW,EAApB,OAAO,CAClB;;;;IAAoB,OAAO,EAAhB,OAAO,CAClB;IAAmB,OAAO,EAAf,MAAM,CACnB;CAAA,CAAA;AAZD;;;GAGG;AACH;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B,eAAe,EAAE,CAc7B;AAqBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAFrB,OAEqB;;;;qBAMA,MAAM,EAAE;;;;;;;kBAOX,KAAK,CAAC,eAAe,GAAG;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;;;;WAIxD,QAAQ,EAAE;;;;;;mBAMF,MAAM,EAAE;kBAET,MAAM,EAAE;eACX,MAAM,EAAE;EAiDjC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAFvB,MAEuB,WAKjC;AAEG,YAA0C,YAAY,GAA5C,UAAU,CAAC,OAAO,WAAW,CAAC,CAAc;AAA1D,6DAA6D;AAE7D;;;;;GAKG;AACH,wBAAgB,aAAa,CAJc,CAAC,SAA9B;IAAE,aAAa,EAAE,MAAM,EAAE,CAAA;CAAK,EAId,QAAQ,EAH3B,CAG2B,GAFzB,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAIvC"}
+{"version":3,"file":"analyze.d.mts","sourceRoot":"","sources":["../src/analyze.mjs"],"names":[],"mappings":"AAiBG,YAA+B,MAAM,GAA3B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAQ;AAEpC,YAAoF,MAAM,GAAhF,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,gBAAgB,CAAQ;AAK9F,eAAO,MAAM,OAAO,8BAA8B,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAHlB,OAGkB,GAFhB,MAAM,GAAG,IAAI,CAWzB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAFvB,OAEuB;;;;;;;;;;;;;;;;;;;;;;EAoBjC;AAeD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAH7B,OAG6B,EAAE,QAAQ,EAFvC,OAEuC;;;;;;;;;;;;;;EAWjD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAFvB,OAEuB;;;;;;EAkBjC;AAED,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB,UAA0G,CAAC;AAyDrI,YAA+D,eAAe,GAApE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAiB;AAI9E,YAAkB,QAAQ,GAC1B;IAAmB,IAAI,EAAZ,MAAM,CACjB;IAAmB,MAAM,EAAd,MAAM,CACjB;;;;IAAoB,WAAW,EAApB,OAAO,CAClB;;;;IAAoB,OAAO,EAAhB,OAAO,CAClB;IAAmB,OAAO,EAAf,MAAM,CACnB;CAAA,CAAA;AAZD;;;GAGG;AACH;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B,eAAe,EAAE,CAc7B;AAqBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAFrB,OAEqB;;;;qBAMA,MAAM,EAAE;;;;;;;kBAOX,KAAK,CAAC,eAAe,GAAG;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;;;;WAIxD,QAAQ,EAAE;;;;;;mBAMF,MAAM,EAAE;kBAET,MAAM,EAAE;eACX,MAAM,EAAE;;kBAIL,MAAM,EAAE;EAkDpC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAFvB,MAEuB,WAKjC;AAEG,YAA0C,YAAY,GAA5C,UAAU,CAAC,OAAO,WAAW,CAAC,CAAc;AAA1D,6DAA6D;AAE7D;;;;;GAKG;AACH,wBAAgB,aAAa,CAJc,CAAC,SAA9B;IAAE,aAAa,EAAE,MAAM,EAAE,CAAA;CAAK,EAId,QAAQ,EAH3B,CAG2B,GAFzB,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAIvC"}

package/dist/cli.d.mts

@@ -9,9 +9,21 @@ export type CliOptions = {
     tools?: string;
     html?: string;
     a2ui?: string;
+    url?: string;
+    stdio?: string;
+    headers: Record<string, string>;
+    timeout?: number;
     out?: string;
+    suggestCsp?: boolean;
+    mcp?: boolean;
     help?: boolean;
 };
+/**
+ * The command line as the SARIF log records it, which code scanning stores and shows: header values,
+ * credentials and query values in a URL, and environment assignments in a --stdio command are masked.
+ * @param {readonly string[]} argv
+ */
+export declare function redactArgv(argv: readonly string[]): string[];
 /**
  * The command line, without the process exit: resolves to the exit code (0 clean, 1 findings at or
  * above --fail-on, 2 usage error). Throws on unreadable input or a failed download.

package/dist/cli.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.mts","sourceRoot":"","sources":["../src/cli.mjs"],"names":[],"mappings":"AAqBG,OAAQ,KAAA,EAAE,QAAQ,EAAE,MAAM,aAAa,CACvC;AAGA,YAAkB,UAAU,GAC5B;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAoB,GAAG,AAAvB,CACA,EADW,MAAM,CACjB;IAAoB,OAAO,AAA3B,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,KAAK,AAAzB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,GAAG,AAAvB,CACA,EADW,MAAM,CACjB;IAAqB,IAAI,AAAzB,CAA0B,EAAf,OAAO,CAAQ;CAAA,CAAA;AAgD7B;;;;;;GAMG;AACH,wBAAsB,GAAG,CAAC,IAAI,EAJnB,SAAS,MAAM,EAII,EAAE,EAAE,MAAuB,EAAE,MAAuB,EAAE,AAHjF,CACA,EADQ;IAAE,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;CAGU,GAF5E,OAAO,CAAC,MAAM,CAAC,CA2D3B"}
+{"version":3,"file":"cli.d.mts","sourceRoot":"","sources":["../src/cli.mjs"],"names":[],"mappings":"AA4BG,OAAQ,KAAA,EAAE,QAAQ,EAAE,MAAM,aAAa,CACvC;AAMA,YAAkB,UAAU,GAC5B;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAoB,GAAG,AAAvB,CACA,EADW,MAAM,CACjB;IAAoB,OAAO,AAA3B,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,KAAK,AAAzB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,GAAG,AAAvB,CACA,EADW,MAAM,CACjB;IAAoB,KAAK,AAAzB,CACA,EADW,MAAM,CACjB;IAAmC,OAAO,EAA/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACjC;IAAoB,OAAO,AAA3B,CACA,EADW,MAAM,CACjB;IAAoB,GAAG,AAAvB,CACA,EADW,MAAM,CACjB;IAAqB,UAAU,AAA/B,CACA,EADW,OAAO,CAClB;IAAqB,GAAG,AAAxB,CACA,EADW,OAAO,CAClB;IAAqB,IAAI,AAAzB,CAA0B,EAAf,OAAO,CAAQ;CAAA,CAAA;AAsH7B;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAFpB,SAAS,MAAM,EAEK,YAoB9B;AAED;;;;;;GAMG;AACH,wBAAsB,GAAG,CAAC,IAAI,EAJnB,SAAS,MAAM,EAII,EAAE,EAAE,MAAuB,EAAE,MAAuB,EAAE,AAHjF,CACA,EADQ;IAAE,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;CAGU,GAF5E,OAAO,CAAC,MAAM,CAAC,CA8G3B"}

package/dist/client.d.mts

@@ -0,0 +1,178 @@
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+export type ClientOptions = {
+    /**
+     * per request
+     */
+    timeoutMs?: number;
+    /**
+     * `clientInfo.name` sent at initialize
+     */
+    clientName?: string;
+    clientVersion?: string;
+};
+export type ServerSnapshot = {
+    serverInfo: Record<string, any> | null;
+    /**
+     * the resources/list entries
+     */
+    resources: any[];
+    /**
+     * the resources/read content items of the UI resources
+     */
+    contents: any[];
+    /**
+     * the tools/list entries ([] when the server has no tools capability)
+     */
+    tools: any[];
+    /**
+     * reads that failed; the rest is still linted
+     */
+    errors: {
+        uri: string;
+        message: string;
+    }[];
+};
+export declare const UI_MIME_PREFIX = "text/html";
+/** @type {(r: any) => boolean} */
+export declare const isUiResource: (r: any) => boolean;
+/**
+ * initialize, then the requests every client shares. Subclasses provide `request` and `notify`.
+ */
+declare class BaseClient {
+    timeoutMs: number;
+    clientName: string;
+    clientVersion: string;
+    nextId: number;
+    /** @type {Record<string, any> | null} */
+    serverInfo: Record<string, any> | null;
+    /** @type {Record<string, any>} */
+    capabilities: Record<string, any>;
+    /** @param {ClientOptions} options */
+    constructor({ timeoutMs, clientName, clientVersion }?: ClientOptions);
+    /**
+     * @param {string} method
+     * @param {Record<string, unknown>} [params]
+     * @returns {Promise<any>}
+     */
+    request(method: string, params?: Record<string, unknown>): Promise<any>;
+    /**
+     * @param {string} method
+     * @param {Record<string, unknown>} [params]
+     * @returns {Promise<void>}
+     */
+    notify(method: string, params?: Record<string, unknown>): Promise<void>;
+    initialize(): Promise<any>;
+    /**
+     * Every page of a paginated list (at most 50 pages).
+     * @param {string} method
+     * @param {string} key
+     */
+    listAll(method: string, key: string): Promise<any[]>;
+    listResources(): Promise<any[]>;
+    listTools(): Promise<any[]>;
+    /** @param {string} uri */
+    readResource(uri: string): Promise<any>;
+    close(): Promise<void>;
+}
+/**
+ * Streamable HTTP. `headers` go on every request (for example an Authorization header).
+ */
+export declare class McpHttpClient extends BaseClient {
+    url: string;
+    fetch: typeof fetch;
+    userAgent: string;
+    headers: Record<string, string>;
+    /** @type {string | null} */
+    sessionId: string | null;
+    /**
+     * @param {string} url
+     * @param {ClientOptions & { userAgent?: string, headers?: Record<string, string>, fetch?: typeof globalThis.fetch }} [options]
+     */
+    constructor(url: string, { userAgent, headers, fetch, ...options }?: ClientOptions & {
+        userAgent?: string;
+        headers?: Record<string, string>;
+        fetch?: typeof globalThis.fetch;
+    });
+    /**
+     * @param {{ jsonrpc: string, id?: number, method: string, params: unknown }} body
+     * @param {{ expectBody?: boolean }} [options]
+     * @returns {Promise<any>}
+     */
+    post(body: {
+        jsonrpc: string;
+        id?: number;
+        method: string;
+        params: unknown;
+    }, { expectBody }?: {
+        expectBody?: boolean;
+    }): Promise<any>;
+    /**
+     * Ends the session on the server, if it gave one; a server that does not support it is fine.
+     * @override
+     */
+    close(): Promise<void>;
+}
+/**
+ * The JSON-RPC message with the given id (or the first one) out of an SSE body.
+ * @param {string} text
+ * @param {number} [id]
+ * @returns {any}
+ */
+export declare function firstJsonRpcFromSse(text: string, id?: number): any;
+/**
+ * A local server started as a child process: `command` runs through the shell, so it is written
+ * the way the user types it (`node dist/server.js`, `uv run server.py`). The server's stderr is
+ * kept (the last lines go into a startup error) and not printed.
+ */
+export declare class McpStdioClient extends BaseClient {
+    command: string;
+    /** @type {ChildProcessWithoutNullStreams} */
+    child: ChildProcessWithoutNullStreams;
+    /** @type {Map<number, { resolve: (v: any) => void, reject: (e: Error) => void, method: string, timer: NodeJS.Timeout }>} */
+    pending: Map<number, {
+        resolve: (v: any) => void;
+        reject: (e: Error) => void;
+        method: string;
+        timer: NodeJS.Timeout;
+    }>;
+    stderrTail: string;
+    buffer: string;
+    /** @type {Error | null} */
+    exited: Error | null;
+    /**
+     * @param {string} command
+     * @param {ClientOptions & { cwd?: string, env?: NodeJS.ProcessEnv }} [options]
+     */
+    constructor(command: string, { cwd, env, ...options }?: ClientOptions & {
+        cwd?: string;
+        env?: NodeJS.ProcessEnv;
+    });
+    /** @param {Error} error */
+    fail(error: Error): void;
+    /** @param {string} chunk */
+    onData(chunk: string): void;
+    /** @param {any} message */
+    onMessage(message: any): void;
+    /** @param {unknown} message */
+    write(message: unknown): void;
+    /**
+     * Closes stdin, the shutdown the stdio transport defines, then terminates a server that lingers.
+     * @override
+     */
+    close(): Promise<void>;
+}
+/**
+ * Classify an error thrown by a client: auth, egress-blocked, not-mcp, http, timeout, network, spawn, exit, protocol.
+ * @param {any} error
+ * @returns {string}
+ */
+export declare function failureKind(error: any): string;
+/**
+ * Everything the linter reads from a live server: listing, the read result of every UI resource,
+ * tools. A failed read is recorded and the rest goes on; a failed initialize or listing throws.
+ * @param {BaseClient} client
+ * @returns {Promise<ServerSnapshot>}
+ */
+export declare function snapshotServer(client: BaseClient): Promise<ServerSnapshot>;
+export { BaseClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/client.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.mts","sourceRoot":"","sources":["../src/client.mjs"],"names":[],"mappings":"AAUG,OAAQ,KAAA,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAA;AAGpE,YAAkB,aAAa,GAC/B;;;;IAAoB,SAAS,AAA7B,CACA,EADW,MAAM,CACjB;;;;IAAoB,UAAU,AAA9B,CACA,EADW,MAAM,CACjB;IAAoB,aAAa,AAAjC,CAAkC,EAAvB,MAAM,CAAiB;CAAA,CAAA;AAIlC,YAAkB,cAAc,GAChC;IAAuC,UAAU,EAAtC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CACrC;;;;IAAkB,SAAS,EAAhB,GAAG,EAAE,CAChB;;;;IAAkB,QAAQ,EAAf,GAAG,EAAE,CAChB;;;;IAAkB,KAAK,EAAZ,GAAG,EAAE,CAChB;;;;IAA+C,MAAM,EAA1C;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAC/C;CAAA,CAAA;AAGD,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C,kCAAkC;AAClC,eAAO,MAAM,YAAY,EADd,CAAC,CAAC,EAAE,GAAG,KAAK,OAC4G,CAAC;AAEpI;;GAEG;AACH,cAAM,UAAU;IAGP,SAAS;IACT,UAAU;IACV,aAAa;IACb,MAAM;IACX,yCAAyC;IACpC,UAAU,EADJ,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAErC,kCAAkC;IAC7B,YAAY,EADN,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IARhC,qCAAqC;IACrC,YAAY,EAAE,SAAiB,EAAE,UAA2B,EAAE,aAA4B,EAAE,GADhF,aACqF,EAShG;IAED;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAJT,MAIS,EAAE,MAAM,AAHzB,CACA,EADQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAGA,GAFpB,OAAO,CAAC,GAAG,CAAC,CAIxB;IAED;;;;OAIG;IACG,MAAM,CAAC,MAAM,EAJR,MAIQ,EAAE,MAAM,AAHxB,CACA,EADQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAGD,GAFnB,OAAO,CAAC,IAAI,CAAC,CAIzB;IAEK,UAAU,iBAUf;IAED;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAHT,MAGS,EAAE,GAAG,EAFd,MAEc,kBAWxB;IAED,aAAa,mBAEZ;IAED,SAAS,mBAER;IAED,0BAA0B;IACpB,YAAY,CAAC,GAAG,EADV,MACU,gBAGrB;IAEK,KAAK,kBAAK;CACjB;AASD;;GAEG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAOpC,GAAG;IACH,KAAK;IACL,SAAS;IACT,OAAO;IACZ,4BAA4B;IACvB,SAAS,EADH,MAAM,GAAG,IAAI;IAV1B;;;OAGG;IACH,YAAY,GAAG,EAHJ,MAGI,EAAE,EAAE,SAAS,EAAE,OAAY,EAAE,KAAwB,EAAE,GAAG,OAAO,EAAE,AAF/E,CAA4H,EAApH,aAAa,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;KAE3B,EAQtF;IAuBD;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAJJ;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAI3D,EAAE,EAAE,UAAiB,EAAE,AAHnC,CACA,EADQ;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAGU,GAF9B,OAAO,CAAC,GAAG,CAAC,CAsCxB;IAED;;;OAGG;IACG,KAAK,kBAYV;CACF;AA0BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAJ7B,MAI6B,EAAE,EAAE,AAHzC,CACA,EADQ,MAGiC,GAF/B,GAAG,CAoBf;AAED;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAOrC,OAAO;IACZ,6CAA6C;IACxC,KAAK,EADC,8BAA8B;IAEzC,4HAA4H;IACvH,OAAO,EADD,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAA;KAAE,CAAC;IAEnH,UAAU;IACV,MAAM;IACX,2BAA2B;IACtB,MAAM,EADA,KAAK,GAAG,IAAI;IAbzB;;;OAGG;IACH,YAAY,OAAO,EAHR,MAGQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,AAF1C,CAA4E,EAApE,aAAa,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;KAEhB,EAwBjD;IAED,2BAA2B;IAC3B,IAAI,CAAC,KAAK,EADE,KACF,QAOT;IAED,4BAA4B;IAC5B,MAAM,CAAC,KAAK,EADA,MACA,QAgBX;IAED,2BAA2B;IAC3B,SAAS,CAAC,OAAO,EADL,GACK,QAchB;IAED,+BAA+B;IAC/B,KAAK,CAAC,OAAO,EADD,OACC,QAEZ;IA4BD;;;OAGG;IACG,KAAK,kBASV;CACF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAHtB,GAGsB,GAFpB,MAAM,CAQlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAHhC,UAGgC,GAF9B,OAAO,CAAC,cAAc,CAAC,CAkBnC;AAgBD,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/csp.d.mts

@@ -0,0 +1,63 @@
+export type CspNeeds = {
+    connectDomains: string[];
+    resourceDomains: string[];
+    frameDomains: string[];
+};
+/**
+ * The origins a document needs, by CSP key, sorted and without duplicates.
+ * @param {unknown} html
+ * @returns {CspNeeds}
+ */
+export declare function cspNeeds(html: unknown): CspNeeds;
+/**
+ * Origins of absolute URL literals the document holds without a call or attribute that tells which
+ * key they need (`url: "https://tiles.example/{z}/{x}/{y}.png"` handed to a map library, a base URL
+ * in a template literal). They may or may not be fetched; `--suggest-csp` lists them so a person
+ * decides. Origins already in `needs`, link targets, XML namespace hosts, framework documentation
+ * hosts and placeholders (`*.example.com`, localhost) are left out.
+ * @param {unknown} html
+ * @param {CspNeeds} [needs]
+ * @returns {string[]}
+ */
+export declare function mentionedOrigins(html: unknown, needs?: CspNeeds): string[];
+/**
+ * A suggestion in the `_meta.ui.csp` shape: only the keys with origins, or null when the document
+ * needs none (the restrictive default fits it).
+ * @param {CspNeeds} needs
+ * @returns {Partial<CspNeeds> | null}
+ */
+export declare function suggestCsp(needs: CspNeeds): Partial<CspNeeds> | null;
+/**
+ * The needs of several documents (a package with more than one), merged.
+ * @param {Iterable<Partial<CspNeeds> | undefined>} all
+ * @returns {CspNeeds}
+ */
+export declare function mergeNeeds(all: Iterable<Partial<CspNeeds> | undefined>): CspNeeds;
+/**
+ * Does one declared entry allow the origin? Hosts are compared, not schemes or ports: a host that
+ * builds the CSP may widen schemes (https to wss), and a false "undeclared" is worse than a missed one.
+ * @param {string} entry
+ * @param {string} origin
+ */
+export declare function entryCovers(entry: string, origin: string): boolean;
+/**
+ * Needed origins the declared CSP does not allow, by key. The host blocks them: a broken UI.
+ * @param {Record<string, unknown> | null | undefined} csp the declared `_meta.ui.csp`
+ * @param {CspNeeds} needs
+ * @returns {Partial<CspNeeds>}
+ */
+export declare function undeclaredOrigins(csp: Record<string, unknown> | null | undefined, needs: CspNeeds): Partial<CspNeeds>;
+/**
+ * Declared entries whose host the document never mentions: wider than the UI needs. Wildcards,
+ * scheme-only and local-scheme entries are left to the other rules; `baseUriDomains` is not
+ * checked. The test is a substring search over the whole document, so a host that appears only
+ * in a URL assembled at run time from parts is reported; the rule says so.
+ * @param {Record<string, unknown> | null | undefined} csp
+ * @param {unknown} html
+ * @returns {{ key: keyof CspNeeds, entry: string }[]}
+ */
+export declare function unusedEntries(csp: Record<string, unknown> | null | undefined, html: unknown): {
+    key: keyof CspNeeds;
+    entry: string;
+}[];
+//# sourceMappingURL=csp.d.mts.map

package/dist/csp.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.mts","sourceRoot":"","sources":["../src/csp.mjs"],"names":[],"mappings":"AAUG,YAA2F,QAAQ,GAAzF;IAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAU;AA+BtG;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAHlB,OAGkB,GAFhB,QAAQ,CAqCpB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAJ1B,OAI0B,EAAE,KAAK,AAHzC,CACA,EADQ,QAGkD,GAFhD,MAAM,EAAE,CAgBpB;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAHrB,QAGqB,GAFnB,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAKpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAHnB,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,SAAS,CAGnB,GAFjB,QAAQ,CASpB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAHtB,MAGsB,EAAE,MAAM,EAF9B,MAE8B,WAOxC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAJ1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAIP,EAAE,KAAK,EAHjC,QAGiC,GAF/B,OAAO,CAAC,QAAQ,CAAC,CAW7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAIX,EAAE,IAAI,EAH5B,OAG4B,GAF1B;IAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAcpD"}

package/dist/index.d.mts

@@ -1,23 +1,30 @@
 export { lintA2uiMessages, parseA2uiMessages } from './a2ui.mjs';
+export { failureKind, firstJsonRpcFromSse, isUiResource, McpHttpClient, McpStdioClient, snapshotServer } from './client.mjs';
+export { cspNeeds, entryCovers, mentionedOrigins, mergeNeeds, suggestCsp, undeclaredOrigins, unusedEntries } from './csp.mjs';
 export { analyzeHtml, analyzeTools, analyzeUiMeta, compareListRead, ESCAPE_FUNCTIONS, isHandwritten, postMessageStarCalls, UI_MIME, uiMetaOf, withSinkHosts } from './analyze.mjs';
 export { categorizeDomain, categorizeHost, classifyDomains, DOMAIN_CATEGORIES, parseDomainPattern, sinkFor, sinkScope } from './domains.mjs';
-export { levelOf, lintHtml, lintPackageScan, lintResource, lintTools, lintUiMeta } from './lint.mjs';
+export { levelOf, lintHtml, lintPackageScan, lintResource, lintSnapshot, lintTools, lintUiMeta } from './lint.mjs';
 export { downloadTarball, extractTarball, packageMeta, scanPackage, scanPackageDir, searchPackages, UI_SDKS } from './npm.mjs';
 export { RULES, RULE_INDEX, ruleByName } from './rules.mjs';
 export { toSarif, toText, TOOL_VERSION } from './sarif.mjs';
 export { run } from './cli.mjs';
+export { handleMessage, serveMcp, TOOLS as MCP_TOOLS } from './server.mjs';
 export type A2uiEntry = import('./a2ui.mjs').A2uiEntry;
 export type UiMeta = import('./analyze.mjs').UiMeta;
 export type CspKey = import('./analyze.mjs').CspKey;
 export type HtmlAnalysis = import('./analyze.mjs').HtmlAnalysis;
 export type HtmlSink = import('./analyze.mjs').HtmlSink;
 export type PostMessageCall = import('./analyze.mjs').PostMessageCall;
+export type ClientOptions = import('./client.mjs').ClientOptions;
+export type ServerSnapshot = import('./client.mjs').ServerSnapshot;
+export type CspNeeds = import('./csp.mjs').CspNeeds;
 export type DomainPattern = import('./domains.mjs').DomainPattern;
 export type DomainCategory = import('./domains.mjs').DomainCategory;
 export type ClassifiedDomains = import('./domains.mjs').ClassifiedDomains;
 export type SinkScope = import('./domains.mjs').SinkScope;
 export type Finding = import('./lint.mjs').Finding;
 export type ResourceInput = import('./lint.mjs').ResourceInput;
+export type Snapshot = import('./lint.mjs').Snapshot;
 export type PackageMeta = import('./npm.mjs').PackageMeta;
 export type PackageScan = import('./npm.mjs').PackageScan;
 export type ScanOptions = import('./npm.mjs').ScanOptions;
@@ -31,12 +38,16 @@ export type Level = import('./rules.mjs').Level;
  * @typedef {import('./analyze.mjs').HtmlAnalysis} HtmlAnalysis
  * @typedef {import('./analyze.mjs').HtmlSink} HtmlSink
  * @typedef {import('./analyze.mjs').PostMessageCall} PostMessageCall
+ * @typedef {import('./client.mjs').ClientOptions} ClientOptions
+ * @typedef {import('./client.mjs').ServerSnapshot} ServerSnapshot
+ * @typedef {import('./csp.mjs').CspNeeds} CspNeeds
  * @typedef {import('./domains.mjs').DomainPattern} DomainPattern
  * @typedef {import('./domains.mjs').DomainCategory} DomainCategory
  * @typedef {import('./domains.mjs').ClassifiedDomains} ClassifiedDomains
  * @typedef {import('./domains.mjs').SinkScope} SinkScope
  * @typedef {import('./lint.mjs').Finding} Finding
  * @typedef {import('./lint.mjs').ResourceInput} ResourceInput
+ * @typedef {import('./lint.mjs').Snapshot} Snapshot
  * @typedef {import('./npm.mjs').PackageMeta} PackageMeta
  * @typedef {import('./npm.mjs').PackageScan} PackageScan
  * @typedef {import('./npm.mjs').ScanOptions} ScanOptions

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mjs"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnL,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC7I,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/H,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG7B,YAA0C,SAAS,GAAzC,OAAO,YAAY,EAAE,SAAS,CAAW;AACnD,YAA0C,MAAM,GAAtC,OAAO,eAAe,EAAE,MAAM,CAAQ;AAChD,YAA0C,MAAM,GAAtC,OAAO,eAAe,EAAE,MAAM,CAAQ;AAChD,YAAgD,YAAY,GAAlD,OAAO,eAAe,EAAE,YAAY,CAAc;AAC5D,YAA4C,QAAQ,GAA1C,OAAO,eAAe,EAAE,QAAQ,CAAU;AACpD,YAAmD,eAAe,GAAxD,OAAO,eAAe,EAAE,eAAe,CAAiB;AAClE,YAAiD,aAAa,GAApD,OAAO,eAAe,EAAE,aAAa,CAAe;AAC9D,YAAkD,cAAc,GAAtD,OAAO,eAAe,EAAE,cAAc,CAAgB;AAChE,YAAqD,iBAAiB,GAA5D,OAAO,eAAe,EAAE,iBAAiB,CAAmB;AACtE,YAA6C,SAAS,GAA5C,OAAO,eAAe,EAAE,SAAS,CAAW;AACtD,YAAwC,OAAO,GAArC,OAAO,YAAY,EAAE,OAAO,CAAS;AAC/C,YAA8C,aAAa,GAAjD,OAAO,YAAY,EAAE,aAAa,CAAe;AAC3D,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA0C,UAAU,GAA1C,OAAO,WAAW,EAAE,UAAU,CAAY;AACpD,YAAsC,IAAI,GAAhC,OAAO,aAAa,EAAE,IAAI,CAAM;AAC1C,YAAuC,KAAK,GAAlC,OAAO,aAAa,EAAE,KAAK,CAAO;AAlB/C;;;;;;;;;;;;;;;;;;;GAmBG"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mjs"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7H,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC9H,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnL,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC7I,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/H,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,cAAc,CAAC;AAGxE,YAA0C,SAAS,GAAzC,OAAO,YAAY,EAAE,SAAS,CAAW;AACnD,YAA0C,MAAM,GAAtC,OAAO,eAAe,EAAE,MAAM,CAAQ;AAChD,YAA0C,MAAM,GAAtC,OAAO,eAAe,EAAE,MAAM,CAAQ;AAChD,YAAgD,YAAY,GAAlD,OAAO,eAAe,EAAE,YAAY,CAAc;AAC5D,YAA4C,QAAQ,GAA1C,OAAO,eAAe,EAAE,QAAQ,CAAU;AACpD,YAAmD,eAAe,GAAxD,OAAO,eAAe,EAAE,eAAe,CAAiB;AAClE,YAAgD,aAAa,GAAnD,OAAO,cAAc,EAAE,aAAa,CAAe;AAC7D,YAAiD,cAAc,GAArD,OAAO,cAAc,EAAE,cAAc,CAAgB;AAC/D,YAAwC,QAAQ,GAAtC,OAAO,WAAW,EAAE,QAAQ,CAAU;AAChD,YAAiD,aAAa,GAApD,OAAO,eAAe,EAAE,aAAa,CAAe;AAC9D,YAAkD,cAAc,GAAtD,OAAO,eAAe,EAAE,cAAc,CAAgB;AAChE,YAAqD,iBAAiB,GAA5D,OAAO,eAAe,EAAE,iBAAiB,CAAmB;AACtE,YAA6C,SAAS,GAA5C,OAAO,eAAe,EAAE,SAAS,CAAW;AACtD,YAAwC,OAAO,GAArC,OAAO,YAAY,EAAE,OAAO,CAAS;AAC/C,YAA8C,aAAa,GAAjD,OAAO,YAAY,EAAE,aAAa,CAAe;AAC3D,YAAyC,QAAQ,GAAvC,OAAO,YAAY,EAAE,QAAQ,CAAU;AACjD,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA2C,WAAW,GAA5C,OAAO,WAAW,EAAE,WAAW,CAAa;AACtD,YAA0C,UAAU,GAA1C,OAAO,WAAW,EAAE,UAAU,CAAY;AACpD,YAAsC,IAAI,GAAhC,OAAO,aAAa,EAAE,IAAI,CAAM;AAC1C,YAAuC,KAAK,GAAlC,OAAO,aAAa,EAAE,KAAK,CAAO;AAtB/C;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/lint.d.mts

@@ -2,6 +2,7 @@
  * From analysis to findings (see Finding below).
  */
 import { analyzeTools } from './analyze.mjs';
+import type { CspNeeds } from './csp.mjs';
 import type { PackageScan } from './npm.mjs';
 import type { Level } from './rules.mjs';
 export type Finding = {
@@ -36,8 +37,9 @@ export type ResourceInput = {
  * @param {unknown} meta
  * @param {string} uri
  * @param {readonly string[]} [hosts]
+ * @param {Partial<CspNeeds>} [needs] the origins the UI needs, for the suggestion MCPAPP001 carries
  */
-export declare function lintUiMeta(meta: unknown, uri: string, hosts?: readonly string[]): Finding[];
+export declare function lintUiMeta(meta: unknown, uri: string, hosts?: readonly string[], needs?: Partial<CspNeeds>): Finding[];
 /**
  * Findings about a UI resource as served: listing entry, read result content item, HTML.
  * @param {ResourceInput} resource
@@ -55,6 +57,29 @@ export declare function lintHtml(html: string, uri: string): Finding[];
  * @param {string} [uri]
  */
 export declare function lintTools(tools: unknown, uri?: string): Finding[];
+export type Snapshot = {
+    /**
+     * resources/read content items (each with its `uri`)
+     */
+    contents: readonly any[];
+    /**
+     * resources/list entries, for the list/read comparison
+     */
+    resources?: readonly any[];
+    /**
+     * tools/list entries
+     */
+    tools?: readonly any[];
+};
+/**
+ * Findings about everything a server publishes: each UI resource as listed and read, and its tools.
+ * @param {Snapshot} snapshot
+ * @param {{ uri?: string, toolsUri?: string }} [where] fallback uri of a content item without one; location of tool findings
+ */
+export declare function lintSnapshot({ contents, resources, tools }: Snapshot, { uri, toolsUri }?: {
+    uri?: string;
+    toolsUri?: string;
+}): Finding[];
 /**
  * Findings about a scanned package directory (see scanPackageDir). `root` prefixes file locations.
  * @param {PackageScan} scan

package/dist/lint.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"lint.d.mts","sourceRoot":"","sources":["../src/lint.mjs"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAe,YAAY,EAA2D,MAAM,eAAe,CAAC;AAMhH,OAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,WAAW,CACxC;AAAA,OAAQ,KAAA,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAMpC,YAAkB,OAAO,GACzB;IAAmB,MAAM,EAAd,MAAM,CACjB;;;;IAAmB,KAAK,AAAxB,CACA,EADW,KAAK,CAChB;IAAmB,OAAO,EAAf,MAAM,CACjB;IAAmB,GAAG,EAAX,MAAM,CACjB;IAAyD,MAAM,AAA/D,CACA,EADW;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CACtD;IAA4C,OAAO,AAAnD,CACA,EADW;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CACzC;IAAqC,UAAU,AAA/C,CAAgD,EAArC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAc;CAAA,CAAA;AAE/C,YAAuD,YAAY,GAAzD,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC,CAAc;AAIpE,YAAkB,aAAa,GAC/B;IAAmB,GAAG,EAAX,MAAM,CACjB;IAAqB,QAAQ,AAA7B,CACA,EADW,OAAO,CAClB;IAAqB,QAAQ,AAA7B,CACA,EADW,OAAO,CAClB;IAA2B,IAAI,AAA/B,CAAgC,EAArB,MAAM,GAAG,IAAI,CAAQ;CAAA,CAAA;AAgDnC;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAJpB,OAIoB,EAAE,GAAG,EAHzB,MAGyB,EAAE,KAAK,AAFxC,CAAkC,EAA1B,SAAS,MAAM,EAEsB,aAgB/C;AASD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAAE,GAAG,EAAE,QAAe,EAAE,QAAe,EAAE,IAAW,EAAE,EAFxE,aAEwE,aAalF;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAHlB,MAGkB,EAAE,GAAG,EAFvB,MAEuB,aAEjC;AAiCD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAHpB,OAGoB,EAAE,GAAG,AAFjC,CAAqB,EAAb,MAEwC,aAelD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAHzB,WAGyB,EAAE,IAAI,AAFvC,CAAsB,EAAd,MAEqC,aAsB/C;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAHnB,MAGmB,GAFjB,KAAK,CAIjB;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"lint.d.mts","sourceRoot":"","sources":["../src/lint.mjs"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAe,YAAY,EAA2D,MAAM,eAAe,CAAC;AAOhH,OAAQ,KAAA,EAAE,QAAQ,EAAE,MAAM,WAAW,CACrC;AAAA,OAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,WAAW,CACxC;AAAA,OAAQ,KAAA,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAMpC,YAAkB,OAAO,GACzB;IAAmB,MAAM,EAAd,MAAM,CACjB;;;;IAAmB,KAAK,AAAxB,CACA,EADW,KAAK,CAChB;IAAmB,OAAO,EAAf,MAAM,CACjB;IAAmB,GAAG,EAAX,MAAM,CACjB;IAAyD,MAAM,AAA/D,CACA,EADW;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CACtD;IAA4C,OAAO,AAAnD,CACA,EADW;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CACzC;IAAqC,UAAU,AAA/C,CAAgD,EAArC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAc;CAAA,CAAA;AAE/C,YAAuD,YAAY,GAAzD,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC,CAAc;AAIpE,YAAkB,aAAa,GAC/B;IAAmB,GAAG,EAAX,MAAM,CACjB;IAAqB,QAAQ,AAA7B,CACA,EADW,OAAO,CAClB;IAAqB,QAAQ,AAA7B,CACA,EADW,OAAO,CAClB;IAA2B,IAAI,AAA/B,CAAgC,EAArB,MAAM,GAAG,IAAI,CAAQ;CAAA,CAAA;AAgDnC;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EALpB,OAKoB,EAAE,GAAG,EAJzB,MAIyB,EAAE,KAAK,AAHxC,CACA,EADQ,SAAS,MAAM,EAGsB,EAAE,KAAK,AAFpD,CACF,EADU,OAAO,CAAC,QAAQ,CAEwC,aAgBlE;AAmCD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAAE,GAAG,EAAE,QAAe,EAAE,QAAe,EAAE,IAAW,EAAE,EAFxE,aAEwE,aAclF;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAHlB,MAGkB,EAAE,GAAG,EAFvB,MAEuB,aAEjC;AAiCD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAHpB,OAGoB,EAAE,GAAG,AAFjC,CAAqB,EAAb,MAEwC,aAelD;AAIE,YAAkB,QAAQ,GAC1B;;;;IAA2B,QAAQ,EAAxB,SAAS,GAAG,EAAE,CACzB;;;;IAA4B,SAAS,AAArC,CACA,EADW,SAAS,GAAG,EAAE,CACzB;;;;IAA4B,KAAK,AAAjC,CACF,EADa,SAAS,GAAG,EAAE,CAC3B;CAAA,CAAA;AAKD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,SAAc,EAAE,KAAU,EAAE,EAH1D,QAG0D,EAAE,EAAE,GAAsB,EAAE,QAAuB,EAAE,AAFvH,CACF,EADU;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAEmF,aAU9H;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAHzB,WAGyB,EAAE,IAAI,AAFvC,CAAsB,EAAd,MAEqC,aA2B/C;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAHnB,MAGmB,GAFjB,KAAK,CAIjB;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/rules.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.mts","sourceRoot":"","sources":["../src/rules.mjs"],"names":[],"mappings":"AAAA,oDAAoD;AACpD;;;;GAIG;AALC,YAAwC,KAAK,GAAnC,OAAO,GAAG,SAAS,GAAG,MAAM,CAAO;AAI9C,YAA6G,IAAI,GAAvG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAM;AAKpH;;;GAGG;AACH,eAAO,MAAM,KAAK,EAFR,SAAS,IAAI,EA6BtB,CAAC;AAEF,eAAO,MAAM,UAAU,qBAAwD,CAAC;AAChF,2BAA2B;AAC3B,eAAO,MAAM,UAAU,SADX,MAAM,qBACoD,CAAC"}
+{"version":3,"file":"rules.d.mts","sourceRoot":"","sources":["../src/rules.mjs"],"names":[],"mappings":"AAAA,oDAAoD;AACpD;;;;GAIG;AALC,YAAwC,KAAK,GAAnC,OAAO,GAAG,SAAS,GAAG,MAAM,CAAO;AAI9C,YAA6G,IAAI,GAAvG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAM;AAKpH;;;GAGG;AACH,eAAO,MAAM,KAAK,EAFR,SAAS,IAAI,EA+BtB,CAAC;AAEF,eAAO,MAAM,UAAU,qBAAwD,CAAC;AAChF,2BAA2B;AAC3B,eAAO,MAAM,UAAU,SADX,MAAM,qBACoD,CAAC"}

package/dist/server.d.mts

@@ -0,0 +1,33 @@
+import type { Readable, Writable } from 'node:stream';
+export type ToolDef = {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    annotations: {
+        readOnlyHint: true;
+        openWorldHint: boolean;
+    };
+    run: (args: Record<string, any>) => Promise<{
+        text: string;
+        structured: Record<string, unknown>;
+    }>;
+};
+/** @type {ToolDef[]} */
+export declare const TOOLS: ToolDef[];
+/**
+ * The answer to one JSON-RPC message, or null for a notification.
+ * @param {any} message
+ * @returns {Promise<Record<string, unknown> | null>}
+ */
+export declare function handleMessage(message: any): Promise<Record<string, unknown> | null>;
+/**
+ * Serves newline-delimited JSON-RPC until the input ends. Nothing but protocol messages goes to the output.
+ * @param {{ input?: Readable, output?: Pick<Writable, 'write'> }} [io]
+ * @returns {Promise<void>}
+ */
+export declare function serveMcp({ input, output }?: {
+    input?: Readable;
+    output?: Pick<Writable, 'write'>;
+}): Promise<void>;
+//# sourceMappingURL=server.d.mts.map

package/dist/server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.mts","sourceRoot":"","sources":["../src/server.mjs"],"names":[],"mappings":"AAgBG,OAAQ,KAAA,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CACjD;AAGA,YAAkB,OAAO,GACzB;IAAmB,IAAI,EAAZ,MAAM,CACjB;IAAmB,KAAK,EAAb,MAAM,CACjB;IAAmB,WAAW,EAAnB,MAAM,CACjB;IAAoC,WAAW,EAApC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAClC;IAA2D,WAAW,EAA3D;QAAE,YAAY,EAAE,IAAI,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CACzD;IAA0G,GAAG,EAAlG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAC1G;CAAA,CAAA;AA6BD,wBAAwB;AACxB,eAAO,MAAM,KAAK,EADP,OAAO,EAwHjB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAHhC,GAGgC,GAF9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAsCnD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,KAAqB,EAAE,MAAuB,EAAE,AAHxE,CACA,EADQ;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;CAGiB,GAFnE,OAAO,CAAC,IAAI,CAAC,CAuBzB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-app-lint",
-  "version": "0.1.6",
-  "description": "SARIF findings about what an MCP App declares (CSP domain lists, permissions, tool visibility) and what its HTML does (innerHTML sinks, postMessage to '*', external hosts, data sinks); A2UI message streams (openUrl schemes, sink hosts, data in URLs, markup in Text).",
+  "version": "0.1.8",
+  "description": "SARIF findings about what an MCP App declares (CSP domain lists, permissions, tool visibility) and what its HTML does (innerHTML sinks, postMessage to '*', external hosts, data sinks), read from a package, saved results or a live server over HTTP or stdio; suggested CSP; an MCP server mode; A2UI message streams (openUrl schemes, sink hosts, data in URLs, markup in Text).",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
   },
   "dependencies": {
     "@render-policy/core": "^0.1.4",
-    "eslint": "^10.11.0",
+    "eslint": "^10.12.0",
     "eslint-plugin-render-policy": "^0.1.2"
   },
   "publishConfig": {
@@ -43,7 +43,8 @@
     "sarif",
     "security",
     "csp",
-    "lint"
+    "lint",
+    "mcp-server"
   ],
   "repository": {
     "type": "git",

package/src/analyze.mjs

@@ -3,6 +3,7 @@
  * its tools, and the HTML of the resources themselves. No network here.
  */
 import { createRequire } from 'node:module';
+import { cspNeeds, mentionedOrigins } from './csp.mjs';
 import { classifyDomains, sinkFor } from './domains.mjs';
 
 /**
@@ -262,7 +263,12 @@ export function analyzeHtml(html) {
     // Hosts that script calls with an absolute URL (fetch, WebSocket, …), bundles included.
     networkHosts: /** @type {string[]} */ ([]),
     sinkHosts: /** @type {string[]} */ ([]),
+    // The origins the document loads from or calls, by the _meta.ui.csp key that must allow them.
+    cspNeeds: cspNeeds(text),
+    // Absolute URLs in the document whose key is unknown (see mentionedOrigins); hints, never findings.
+    cspMentioned: /** @type {string[]} */ ([]),
   };
+  result.cspMentioned = mentionedOrigins(text, result.cspNeeds);
   result.externalHosts = hostnames([...text.matchAll(URL_ATTR_RE)].map((m) => m[1] ?? '').filter((v) => /^(https?:)?\/\//i.test(v)));
   result.networkHosts = hostnames([...text.matchAll(NETWORK_CALL_RE)].map((m) => m[1] ?? ''));
   for (const match of text.matchAll(SCRIPT_RE)) {