mcp-lint 0.3.0 → 0.5.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 robert19001-cmyk
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 robert19001-cmyk
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,6 +4,7 @@
 [![npm downloads](https://img.shields.io/npm/dm/mcp-lint)](https://www.npmjs.com/package/mcp-lint)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Node.js ≥20](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](https://nodejs.org)
+[![MCP server ready](https://img.shields.io/badge/MCP-server_ready-6f42c1)](#mcp-server)
 
 **Lint MCP server tool schemas for cross-client compatibility.**
 
@@ -55,6 +56,9 @@ mcp-lint fix tools.json --in-place
 
 # Generate a config file
 mcp-lint init
+
+# Run as an MCP server
+mcp-lint-server
 ```
 
 ---
@@ -326,7 +330,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: robert19001-cmyk/mcp-lint@v0.3.0
+      - uses: robert19001-cmyk/mcp-lint@v0.5.0
         with:
           input: tools.json
           severity: warning
@@ -440,6 +444,160 @@ const fixed = applyFixes(tools, diagnostics);
 
 ---
 
+## `mcp-lint preflight` — Runtime Decision Firewall
+
+**Lint catches bad schemas. Preflight catches bad actions.**
+
+At runtime, your agent is about to call a tool — delete a file, send a request, charge a card. Preflight sits between the agent and the action and answers:
+
+- Is it allowed?
+- How risky is it? (0.0–1.0 deterministic score)
+- Is it reversible?
+- Does it need human approval?
+- Is there a safer alternative?
+
+```bash
+$ mcp-lint preflight action.json --policy preflight.yml
+
+Preflight Decision
+────────────────────────────────────────
+Decision:      DENY
+Risk score:    1.00
+Reversibility: irreversible
+Policies:      block-destructive-prod
+Reasons:       base_shell, destructive_pattern, sensitive_target, irreversible_operation
+```
+
+### Action format
+
+```json
+{
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf /prod/data",
+  "target": "/prod/data",
+  "context": { "environment": "prod" }
+}
+```
+
+### Policy file (YAML)
+
+```yaml
+version: 1
+defaults:
+  approval_threshold: 0.70
+  block_threshold: 0.92
+
+rules:
+  - id: block-prod-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf"]
+      target_matches: ["/prod", "/etc"]
+    effect: deny
+
+  - id: rewrite-tmp-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf ./tmp"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+      target: ./tmp
+
+  - id: approval-payments
+    when:
+      tool_type: payment
+    effect: require_approval
+```
+
+Sample policies in `examples/policies/`: `default.yml`, `strict.yml`, `permissive-dev.yml`.
+
+### SDK — embed in your MCP server or agent runtime
+
+```typescript
+import { preflight, loadPolicy } from 'mcp-lint/preflight';
+
+const policy = await loadPolicy('./preflight.yml');
+
+const decision = preflight(
+  {
+    tool_type: 'shell',
+    tool_name: 'bash',
+    action: 'rm -rf /tmp',
+    target: '/tmp',
+  },
+  policy,
+);
+
+if (decision.decision === 'deny') {
+  throw new Error(`Blocked: ${decision.reasons.join(', ')}`);
+}
+if (decision.decision === 'require_approval') {
+  await askUser(decision);
+}
+if (decision.decision === 'allow_with_rewrite') {
+  return executeSafer(decision.safe_alternative);
+}
+```
+
+### Exit codes
+
+| Code | Meaning |
+|------|---------|
+| `0`  | allow / allow_with_rewrite |
+| `1`  | require_approval |
+| `2`  | deny / error |
+
+Use them directly in shell wrappers or CI gates.
+
+---
+
+## MCP Server
+
+`mcp-lint` also ships as a stdio MCP server for Claude Desktop, Claude Code, Cursor, VS Code, and registry scanners such as Glama.
+
+```bash
+npx -y mcp-lint@latest mcp-lint-server
+```
+
+Client config:
+
+```json
+{
+  "mcpServers": {
+    "mcp-lint": {
+      "command": "npx",
+      "args": ["-y", "mcp-lint@latest", "mcp-lint-server"]
+    }
+  }
+}
+```
+
+Available MCP tools:
+
+| Tool | Purpose |
+|------|---------|
+| `mcp_lint_list_rules` | List built-in rules, clients, severities, and fixability |
+| `mcp_lint_explain_rule` | Explain one rule with examples and auto-fix notes |
+| `mcp_lint_check_tools` | Lint MCP tool schemas passed as JSON |
+| `mcp_lint_fix_tools` | Return safely auto-fixed tool schemas without writing files |
+| `mcp_lint_preflight_action` | Score a proposed agent action and return allow/deny/approval/rewrite |
+
+All server tools are read-only from the host perspective: they return diagnostics, fixed JSON, or policy decisions and never execute the action being evaluated.
+
+### Docker
+
+```bash
+docker build -t mcp-lint-server .
+docker run --rm -i mcp-lint-server
+```
+
+The repository includes `glama.json` and a production Dockerfile so MCP directories can build, start, and introspect the server.
+
+---
+
 ## License
 
 MIT © Robert

package/dist/cli/commands/preflight.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from 'commander';
+export declare function registerPreflightCommand(program: Command): void;

package/dist/cli/commands/preflight.js

@@ -0,0 +1,109 @@
+import { readFile } from 'node:fs/promises';
+import chalk from 'chalk';
+import { preflight } from '../../preflight/engine.js';
+import { loadPolicy } from '../../preflight/policy.js';
+export function registerPreflightCommand(program) {
+    program
+        .command('preflight [action-file]')
+        .description('Evaluate a proposed agent action against a policy before execution')
+        .option('--policy <path>', 'Path to preflight policy YAML file')
+        .option('--format <format>', 'Output format: terminal|json', 'terminal')
+        .option('--no-color', 'Disable terminal colors')
+        .option('--stdin', 'Read action JSON from stdin')
+        .action(async (actionFile, options) => {
+        if (!options.color)
+            chalk.level = 0;
+        try {
+            const action = await readAction(actionFile, options.stdin ?? false);
+            const policy = options.policy ? await loadPolicy(options.policy) : undefined;
+            const decision = preflight(action, policy);
+            if (options.format === 'json') {
+                process.stdout.write(JSON.stringify(decision, null, 2) + '\n');
+            }
+            else {
+                process.stdout.write(renderTerminal(decision));
+            }
+            const exitCode = decisionExitCode(decision);
+            process.exit(exitCode);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err.message}\n`);
+            process.exit(2);
+        }
+    });
+}
+async function readAction(path, stdin) {
+    let raw;
+    if (stdin || !path) {
+        if (process.stdin.isTTY && !stdin) {
+            throw new Error('Specify an action file or use --stdin');
+        }
+        raw = await readStdin();
+    }
+    else {
+        raw = await readFile(path, 'utf8');
+    }
+    return JSON.parse(raw);
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function decisionExitCode(d) {
+    switch (d.decision) {
+        case 'allow':
+        case 'allow_with_rewrite':
+            return 0;
+        case 'require_approval':
+            return 1;
+        case 'deny':
+            return 2;
+    }
+}
+function renderTerminal(d) {
+    const lines = [];
+    const decisionColor = d.decision === 'deny'
+        ? chalk.red
+        : d.decision === 'require_approval'
+            ? chalk.yellow
+            : d.decision === 'allow_with_rewrite'
+                ? chalk.cyan
+                : chalk.green;
+    lines.push('');
+    lines.push(chalk.bold('Preflight Decision'));
+    lines.push('─'.repeat(40));
+    lines.push(`Decision:      ${decisionColor(d.decision.toUpperCase())}`);
+    lines.push(`Risk score:    ${riskColor(d.risk_score)}`);
+    lines.push(`Reversibility: ${d.reversibility}`);
+    lines.push(`Est. cost:     $${d.estimated_cost_usd.toFixed(2)}`);
+    if (d.matched_policies.length > 0) {
+        lines.push(`Policies:      ${d.matched_policies.join(', ')}`);
+    }
+    if (d.reasons.length > 0) {
+        lines.push(`Reasons:       ${d.reasons.join(', ')}`);
+    }
+    if (d.safe_alternative) {
+        lines.push('');
+        lines.push(chalk.bold('Safe alternative:'));
+        lines.push(`  ${d.safe_alternative.tool_type} → ${d.safe_alternative.action}`);
+        if (d.safe_alternative.target) {
+            lines.push(`  target: ${d.safe_alternative.target}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+function riskColor(score) {
+    const s = score.toFixed(2);
+    if (score >= 0.9)
+        return chalk.red(s);
+    if (score >= 0.7)
+        return chalk.yellow(s);
+    if (score >= 0.4)
+        return chalk.cyan(s);
+    return chalk.green(s);
+}
+//# sourceMappingURL=preflight.js.map

package/dist/cli/commands/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../../src/cli/commands/preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,UAAU,CAAC;SACvE,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC;SAC/C,MAAM,CAAC,SAAS,EAAE,6BAA6B,CAAC;SAChD,MAAM,CACL,KAAK,EACH,UAA8B,EAC9B,OAA6E,EAC7E,EAAE;QACF,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAwB,EAAE,KAAc;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAW;IACnC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,OAAO,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC;QACX,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC;QACX,KAAK,MAAM;YACT,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAW;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GACjB,CAAC,CAAC,QAAQ,KAAK,MAAM;QACnB,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,kBAAkB;YACjC,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,oBAAoB;gBACnC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAEtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,SAAS,MAAM,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/index.js

@@ -6,16 +6,18 @@ import { registerInitCommand } from './cli/commands/init.js';
 import { registerCompatCommand } from './cli/commands/compat.js';
 import { registerExplainCommand } from './cli/commands/explain.js';
 import { registerDiffCommand } from './cli/commands/diff.js';
+import { registerPreflightCommand } from './cli/commands/preflight.js';
 const program = new Command();
 program
     .name('mcp-lint')
     .description('Lint MCP server tool schemas for cross-client compatibility')
-    .version('0.3.0');
+    .version('0.5.0');
 registerCheckCommand(program);
 registerFixCommand(program);
 registerInitCommand(program);
 registerCompatCommand(program);
 registerExplainCommand(program);
 registerDiffCommand(program);
+registerPreflightCommand(program);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAE7B,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAElC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/loaders/index.d.ts

@@ -0,0 +1,3 @@
+export { loadFile } from './file-loader.js';
+export { loadSSE } from './sse-loader.js';
+export { loadStdio } from './stdio-loader.js';

package/dist/loaders/index.js

@@ -0,0 +1,4 @@
+export { loadFile } from './file-loader.js';
+export { loadSSE } from './sse-loader.js';
+export { loadStdio } from './stdio-loader.js';
+//# sourceMappingURL=index.js.map

package/dist/loaders/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/loaders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/mcp-server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function createMcpLintServer(): McpServer;

package/dist/mcp-server.js

@@ -0,0 +1,242 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { pathToFileURL } from 'node:url';
+import { z } from 'zod';
+import { LintEngine } from './core/engine.js';
+import { applyFixes } from './core/fixer.js';
+import { computeQualityReport } from './core/quality-score.js';
+import { DEFAULT_CONFIG } from './config/config.js';
+import { allRules } from './rules/index.js';
+import { preflight } from './preflight/engine.js';
+import { parsePolicy } from './preflight/policy.js';
+const VERSION = '0.5.0';
+const ClientIdSchema = z.enum([
+    'claude',
+    'cursor',
+    'gemini',
+    'vscode',
+    'windsurf',
+    'cline',
+    'openai',
+    'continue',
+]);
+const SeveritySchema = z.enum(['error', 'warning', 'info']);
+const RuleSeveritySchema = z.union([SeveritySchema, z.literal('off')]);
+const JsonObjectSchema = z.object({}).passthrough();
+const MCPToolInputSchema = z.object({
+    name: z.string().min(1).describe('MCP tool name to lint.'),
+    description: z.string().optional().describe('Optional MCP tool description.'),
+    inputSchema: JsonObjectSchema.describe('JSON Schema object exposed by the MCP tool.'),
+});
+const ConfigShape = {
+    clients: z.array(ClientIdSchema).optional().describe('Only run rules for these MCP clients.'),
+    ignore: z.array(z.string()).optional().describe('Tool names to ignore.'),
+    rules: z.record(z.string(), RuleSeveritySchema).optional().describe('Rule severity overrides by rule id.'),
+    maxDepth: z.number().int().min(1).max(20).optional().describe('Maximum schema nesting depth before warning.'),
+};
+const ActionSchema = z.object({
+    actor_id: z.string().optional(),
+    workspace_id: z.string().optional(),
+    tool_type: z.enum([
+        'shell',
+        'file_read',
+        'file_write',
+        'file_delete',
+        'http',
+        'mcp_tool',
+        'email',
+        'payment',
+        'database',
+        'other',
+    ]),
+    tool_name: z.string().min(1),
+    action: z.string().min(1),
+    target: z.string().optional(),
+    context: z.record(z.string(), z.unknown()).optional(),
+    estimated_cost_usd: z.number().min(0).optional(),
+});
+function normalizeConfig(input) {
+    return {
+        clients: input.clients ?? DEFAULT_CONFIG.clients,
+        ignore: input.ignore ?? DEFAULT_CONFIG.ignore,
+        maxDepth: input.maxDepth ?? DEFAULT_CONFIG.maxDepth,
+        rules: input.rules,
+    };
+}
+function lintTools(tools, configInput) {
+    const config = normalizeConfig(configInput);
+    const engine = new LintEngine(allRules, config);
+    const diagnostics = engine.lint(tools);
+    const summary = {
+        tools: tools.length,
+        diagnostics: diagnostics.length,
+        errors: diagnostics.filter((d) => d.severity === 'error').length,
+        warnings: diagnostics.filter((d) => d.severity === 'warning').length,
+        info: diagnostics.filter((d) => d.severity === 'info').length,
+    };
+    return { config, diagnostics, summary };
+}
+function result(output) {
+    return {
+        content: [{ type: 'text', text: JSON.stringify(output, null, 2) }],
+        structuredContent: output,
+    };
+}
+export function createMcpLintServer() {
+    const server = new McpServer({
+        name: 'mcp-lint-mcp-server',
+        version: VERSION,
+    });
+    server.registerTool('mcp_lint_list_rules', {
+        title: 'List mcp-lint Rules',
+        description: 'List every built-in mcp-lint rule with severity, supported clients, fixability, and description.',
+        outputSchema: {
+            rules: z.array(JsonObjectSchema),
+            total: z.number(),
+        },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async () => {
+        const rules = allRules.map((rule) => ({
+            id: rule.id,
+            severity: rule.severity,
+            clients: rule.clients,
+            fixable: Boolean(rule.docs?.fixNote),
+            description: rule.description,
+        }));
+        return result({ total: rules.length, rules });
+    });
+    server.registerTool('mcp_lint_explain_rule', {
+        title: 'Explain mcp-lint Rule',
+        description: 'Return detailed documentation, examples, and auto-fix notes for one mcp-lint rule id.',
+        inputSchema: {
+            ruleId: z.string().min(1).describe('Rule id such as openai/no-additional-properties.'),
+        },
+        outputSchema: {
+            rule: JsonObjectSchema,
+        },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ ruleId }) => {
+        const rule = allRules.find((candidate) => candidate.id === ruleId);
+        if (!rule) {
+            throw new Error(`Unknown rule "${ruleId}". Use mcp_lint_list_rules to discover available rule ids.`);
+        }
+        return result({
+            rule: {
+                id: rule.id,
+                severity: rule.severity,
+                clients: rule.clients,
+                fixable: Boolean(rule.docs?.fixNote),
+                description: rule.description,
+                docs: rule.docs ?? null,
+            },
+        });
+    });
+    server.registerTool('mcp_lint_check_tools', {
+        title: 'Lint MCP Tool Schemas',
+        description: 'Lint MCP tool schemas for compatibility across Claude, Cursor, Gemini, VS Code, Windsurf, Cline, OpenAI Agents SDK, and Continue.dev.',
+        inputSchema: {
+            tools: z.array(MCPToolInputSchema).describe('Array of MCP tools with name, description, and inputSchema.'),
+            includeScore: z.boolean().default(false).describe('Include quality score and grade per tool.'),
+            ...ConfigShape,
+        },
+        outputSchema: {
+            summary: JsonObjectSchema,
+            diagnostics: z.array(JsonObjectSchema),
+            quality: JsonObjectSchema.optional(),
+        },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ tools, includeScore, clients, ignore, rules, maxDepth }) => {
+        const { diagnostics, summary } = lintTools(tools, {
+            clients,
+            ignore,
+            rules,
+            maxDepth,
+        });
+        const output = {
+            summary,
+            diagnostics,
+            ...(includeScore ? { quality: computeQualityReport(tools, diagnostics) } : {}),
+        };
+        return result(output);
+    });
+    server.registerTool('mcp_lint_fix_tools', {
+        title: 'Auto-fix MCP Tool Schemas',
+        description: 'Apply safe mcp-lint schema fixes and return the corrected tool definitions without writing to disk.',
+        inputSchema: {
+            tools: z.array(MCPToolInputSchema).describe('Array of MCP tools to lint and fix.'),
+            onlyRules: z.array(z.string()).optional().describe('Optional list of fixable rule ids to apply.'),
+            ...ConfigShape,
+        },
+        outputSchema: {
+            fixedTools: z.array(JsonObjectSchema),
+            fixesApplied: z.number(),
+            diagnosticsBeforeFix: z.array(JsonObjectSchema),
+            diagnosticsAfterFix: z.array(JsonObjectSchema),
+        },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ tools, onlyRules, clients, ignore, rules, maxDepth }) => {
+        const config = { clients, ignore, rules, maxDepth };
+        const before = lintTools(tools, config);
+        const fixedTools = applyFixes(tools, before.diagnostics, onlyRules);
+        const after = lintTools(fixedTools, config);
+        return result({
+            fixedTools,
+            fixesApplied: before.diagnostics.filter((d) => d.fix && (!onlyRules || onlyRules.includes(d.ruleId))).length,
+            diagnosticsBeforeFix: before.diagnostics,
+            diagnosticsAfterFix: after.diagnostics,
+        });
+    });
+    server.registerTool('mcp_lint_preflight_action', {
+        title: 'Preflight Agent Action',
+        description: 'Evaluate a proposed agent tool call before execution and return allow, deny, approval, or safe rewrite guidance. This tool never executes the action.',
+        inputSchema: {
+            action: ActionSchema.describe('Action object to score and evaluate.'),
+            policyYaml: z.string().optional().describe('Optional mcp-lint preflight policy YAML. Defaults to built-in thresholds.'),
+        },
+        outputSchema: {
+            decision: JsonObjectSchema,
+        },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ action, policyYaml }) => {
+        const policy = policyYaml ? parsePolicy(policyYaml) : undefined;
+        return result({ decision: preflight(action, policy) });
+    });
+    return server;
+}
+async function main() {
+    const server = createMcpLintServer();
+    await server.connect(new StdioServerTransport());
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    main().catch((error) => {
+        process.stderr.write(`mcp-lint MCP server failed: ${error.message}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5B,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5D,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEvE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAEpD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC7E,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CACtF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC7F,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CAC9G,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;QAChB,OAAO;QACP,WAAW;QACX,YAAY;QACZ,aAAa;QACb,MAAM;QACN,UAAU;QACV,OAAO;QACP,SAAS;QACT,UAAU;QACV,OAAO;KACR,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,KAAsB;IAC7C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO;QAChD,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;QAC7C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ;QACnD,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB,EAAE,WAA4B;IAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;QAChE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QACpE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;KAC9D,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,MAA+B;IAC7C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,iBAAiB,EAAE,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,kGAAkG;QAC/G,YAAY,EAAE;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;SAClB;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC,CAAC;QACJ,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,uFAAuF;QACpG,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;SACvF;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,gBAAgB;SACvB;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,4DAA4D,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;gBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;aACxB;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,uIAAuI;QACpJ,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YAC1G,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YAC9F,GAAG,WAAW;SACf;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,gBAAgB;YACzB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACtC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;SACrC;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAkB,EAAE;YAC7D,OAAO;YACP,MAAM;YACN,KAAK;YACL,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG;YACb,OAAO;YACP,WAAW;YACX,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAkB,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,qGAAqG;QAClH,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YAClF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YACjG,GAAG,WAAW;SACf;QACD,YAAY,EAAE;YACZ,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC/C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;SAC/C;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAkB,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAkB,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC;YACZ,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;YAC5G,oBAAoB,EAAE,MAAM,CAAC,WAAW;YACxC,mBAAmB,EAAE,KAAK,CAAC,WAAW;SACvC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,uJAAuJ;QACpK,WAAW,EAAE;YACX,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;SACxH;QACD,YAAY,EAAE;YACZ,QAAQ,EAAE,gBAAgB;SAC3B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAAgC,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/preflight/engine.d.ts

@@ -0,0 +1,2 @@
+import type { Action, Decision, Policy } from './types.js';
+export declare function preflight(action: Action, policy?: Policy): Decision;