mcp-lint 0.3.0 → 0.5.0

package/dist/preflight/engine.js

@@ -0,0 +1,73 @@
+import { matchRule } from './policy.js';
+import { scoreAction } from './scorer.js';
+const DEFAULT_APPROVAL_THRESHOLD = 0.7;
+const DEFAULT_BLOCK_THRESHOLD = 0.92;
+export function preflight(action, policy) {
+    validateAction(action);
+    const { score, reasons, reversibility } = scoreAction(action);
+    const approvalThreshold = policy?.defaults?.approval_threshold ?? DEFAULT_APPROVAL_THRESHOLD;
+    const blockThreshold = policy?.defaults?.block_threshold ?? DEFAULT_BLOCK_THRESHOLD;
+    const matched = [];
+    if (policy) {
+        for (const rule of policy.rules) {
+            if (matchRule(rule, action, score)) {
+                matched.push(rule);
+            }
+        }
+    }
+    let decision = null;
+    let safeAlternative = undefined;
+    const policyReasons = [];
+    for (const rule of matched) {
+        if (rule.reason)
+            policyReasons.push(rule.reason);
+        if (rule.effect === 'deny') {
+            decision = 'deny';
+            break;
+        }
+        if (rule.effect === 'require_approval') {
+            decision = 'require_approval';
+        }
+        else if (rule.effect === 'allow_with_rewrite' && decision === null) {
+            decision = 'allow_with_rewrite';
+            safeAlternative = rule.rewrite;
+        }
+        else if (rule.effect === 'allow' && decision === null) {
+            decision = 'allow';
+        }
+    }
+    if (decision === null) {
+        if (score >= blockThreshold) {
+            decision = 'deny';
+            policyReasons.push('risk_above_block_threshold');
+        }
+        else if (score >= approvalThreshold) {
+            decision = 'require_approval';
+            policyReasons.push('risk_above_approval_threshold');
+        }
+        else {
+            decision = 'allow';
+        }
+    }
+    return {
+        decision,
+        risk_score: Number(score.toFixed(2)),
+        reversibility,
+        estimated_cost_usd: action.estimated_cost_usd ?? 0,
+        matched_policies: matched.map((r) => r.id),
+        reasons: [...reasons, ...policyReasons],
+        safe_alternative: safeAlternative,
+    };
+}
+function validateAction(action) {
+    if (!action || typeof action !== 'object') {
+        throw new Error('Action must be an object');
+    }
+    if (!action.tool_type)
+        throw new Error('Action missing tool_type');
+    if (!action.tool_name)
+        throw new Error('Action missing tool_name');
+    if (typeof action.action !== 'string')
+        throw new Error('Action missing action string');
+}
+//# sourceMappingURL=engine.js.map

package/dist/preflight/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/preflight/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,MAAe;IACvD,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9D,MAAM,iBAAiB,GAAG,MAAM,EAAE,QAAQ,EAAE,kBAAkB,IAAI,0BAA0B,CAAC;IAC7F,MAAM,cAAc,GAAG,MAAM,EAAE,QAAQ,EAAE,eAAe,IAAI,uBAAuB,CAAC;IAEpF,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAwB,IAAI,CAAC;IACzC,IAAI,eAAe,GAAG,SAAS,CAAC;IAChC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,GAAG,MAAM,CAAC;YAClB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACvC,QAAQ,GAAG,kBAAkB,CAAC;QAChC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrE,QAAQ,GAAG,oBAAoB,CAAC;YAChC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxD,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;YAC5B,QAAQ,GAAG,MAAM,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACtC,QAAQ,GAAG,kBAAkB,CAAC;YAC9B,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,aAAa;QACb,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,CAAC;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;QACvC,gBAAgB,EAAE,eAAe;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACzF,CAAC"}

package/dist/preflight/index.d.ts

@@ -0,0 +1,4 @@
+export { preflight } from './engine.js';
+export { loadPolicy, parsePolicy, matchRule } from './policy.js';
+export { scoreAction } from './scorer.js';
+export type { Action, Decision, DecisionType, Effect, Policy, PolicyRule, Rewrite, Reversibility, ToolType, } from './types.js';

package/dist/preflight/index.js

@@ -0,0 +1,4 @@
+export { preflight } from './engine.js';
+export { loadPolicy, parsePolicy, matchRule } from './policy.js';
+export { scoreAction } from './scorer.js';
+//# sourceMappingURL=index.js.map

package/dist/preflight/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preflight/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/preflight/policy.d.ts

@@ -0,0 +1,4 @@
+import type { Action, Policy, PolicyRule } from './types.js';
+export declare function loadPolicy(path: string): Promise<Policy>;
+export declare function parsePolicy(yaml: string): Policy;
+export declare function matchRule(rule: PolicyRule, action: Action, riskScore: number): boolean;

package/dist/preflight/policy.js

@@ -0,0 +1,97 @@
+import { readFile } from 'node:fs/promises';
+import YAML from 'yaml';
+export async function loadPolicy(path) {
+    const raw = await readFile(path, 'utf8');
+    const parsed = YAML.parse(raw);
+    return normalizePolicy(parsed);
+}
+export function parsePolicy(yaml) {
+    const parsed = YAML.parse(yaml);
+    return normalizePolicy(parsed);
+}
+function normalizePolicy(parsed) {
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('Policy file is empty or not an object');
+    }
+    const rules = Array.isArray(parsed.rules) ? parsed.rules : [];
+    for (const [idx, rule] of rules.entries()) {
+        if (!rule.id)
+            throw new Error(`Policy rule #${idx} missing "id"`);
+        if (!rule.when)
+            throw new Error(`Policy rule "${rule.id}" missing "when"`);
+        if (!rule.effect)
+            throw new Error(`Policy rule "${rule.id}" missing "effect"`);
+    }
+    return {
+        version: parsed.version ?? 1,
+        defaults: parsed.defaults ?? {},
+        budgets: parsed.budgets ?? {},
+        rules,
+    };
+}
+export function matchRule(rule, action, riskScore) {
+    const w = rule.when;
+    if (w.tool_type) {
+        const types = Array.isArray(w.tool_type) ? w.tool_type : [w.tool_type];
+        if (!types.includes(action.tool_type))
+            return false;
+    }
+    if (w.tool_name) {
+        const names = Array.isArray(w.tool_name) ? w.tool_name : [w.tool_name];
+        if (!names.includes(action.tool_name))
+            return false;
+    }
+    if (w.action_matches && w.action_matches.length > 0) {
+        const hit = w.action_matches.some((m) => action.action.includes(m));
+        if (!hit)
+            return false;
+    }
+    if (w.target_matches && w.target_matches.length > 0) {
+        const target = action.target ?? '';
+        const hit = w.target_matches.some((m) => matchesGlob(target, m));
+        if (!hit)
+            return false;
+    }
+    if (w.domain_not_in_allowlist) {
+        const domain = extractDomain(action);
+        const allow = w.allowlist ?? [];
+        if (!domain)
+            return false;
+        if (allow.includes(domain))
+            return false;
+    }
+    if (typeof w.min_risk === 'number') {
+        if (riskScore < w.min_risk)
+            return false;
+    }
+    if (typeof w.max_cost_usd === 'number') {
+        const cost = action.estimated_cost_usd ?? 0;
+        if (cost <= w.max_cost_usd)
+            return false;
+    }
+    return true;
+}
+function matchesGlob(value, pattern) {
+    if (pattern.includes('**') || pattern.includes('*')) {
+        const regex = new RegExp('^' +
+            pattern
+                .replace(/[.+?^${}()|[\]\\]/g, '\\$&')
+                .replace(/\*\*/g, '§§')
+                .replace(/\*/g, '[^/]*')
+                .replace(/§§/g, '.*') +
+            '$');
+        return regex.test(value);
+    }
+    return value.includes(pattern);
+}
+function extractDomain(action) {
+    const candidate = action.target ?? action.action;
+    const match = candidate.match(/https?:\/\/([^/\s]+)/i);
+    if (match)
+        return match[1].toLowerCase();
+    if (action.context && typeof action.context.domain === 'string') {
+        return action.context.domain.toLowerCase();
+    }
+    return null;
+}
+//# sourceMappingURL=policy.js.map

package/dist/preflight/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/preflight/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAClD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;IACnD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB;IAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,MAAc,EAAE,SAAiB;IAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAEpB,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,CAAC,uBAAuB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,IAAI,CAAC,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,OAAe;IACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG;YACD,OAAO;iBACJ,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;iBACrC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;iBACtB,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;iBACvB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACvB,GAAG,CACN,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAQ,MAAM,CAAC,OAAO,CAAC,MAAiB,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/preflight/scorer.d.ts

@@ -0,0 +1,7 @@
+import type { Action, Reversibility } from './types.js';
+export interface ScoreBreakdown {
+    score: number;
+    reasons: string[];
+    reversibility: Reversibility;
+}
+export declare function scoreAction(action: Action): ScoreBreakdown;

package/dist/preflight/scorer.js

@@ -0,0 +1,121 @@
+const BASE_SCORES = {
+    file_read: 0.1,
+    file_write: 0.35,
+    file_delete: 0.75,
+    shell: 0.5,
+    http: 0.35,
+    mcp_tool: 0.3,
+    email: 0.6,
+    payment: 0.95,
+    database: 0.7,
+    other: 0.4,
+};
+const DESTRUCTIVE_PATTERNS = [
+    /\brm\s+-rf\b/i,
+    /\brmdir\s+\/s\b/i,
+    /\bdel\s+\/s\b/i,
+    /\bdrop\s+table\b/i,
+    /\btruncate\s+table\b/i,
+    /\bformat\s+\/\w+/i,
+    /\bmkfs\b/i,
+    /\b:\(\)\{\s*:\|:&\s*\};:/,
+    /\bgit\s+push\s+.*--force\b/i,
+    /\bgit\s+reset\s+--hard\b/i,
+];
+const SENSITIVE_TARGETS = [
+    /\/etc\b/,
+    /\/prod\b/,
+    /\/production\b/,
+    /\/app\/data\b/,
+    /\.env(\.|$)/,
+    /\bsecrets?\b/i,
+    /\bcredentials?\b/i,
+    /\/root\b/,
+    /\bC:\\Windows\b/i,
+];
+const MASS_OPERATION_PATTERNS = [
+    /\*\*\/\*/,
+    /\brecursive\b/i,
+    /\s+-r\b/,
+    /\s+-R\b/,
+    /\bALL\b/,
+];
+export function scoreAction(action) {
+    const reasons = [];
+    let score = BASE_SCORES[action.tool_type] ?? 0.4;
+    reasons.push(`base_${action.tool_type}`);
+    const actionText = action.action ?? '';
+    const targetText = action.target ?? '';
+    const haystack = `${actionText} ${targetText}`;
+    let destructive = false;
+    for (const pattern of DESTRUCTIVE_PATTERNS) {
+        if (pattern.test(haystack)) {
+            destructive = true;
+            score += 0.25;
+            reasons.push('destructive_pattern');
+            break;
+        }
+    }
+    if (action.tool_type === 'file_delete') {
+        destructive = true;
+    }
+    for (const pattern of SENSITIVE_TARGETS) {
+        if (pattern.test(haystack)) {
+            score += 0.2;
+            reasons.push('sensitive_target');
+            break;
+        }
+    }
+    for (const pattern of MASS_OPERATION_PATTERNS) {
+        if (pattern.test(haystack)) {
+            score += 0.1;
+            reasons.push('mass_operation');
+            break;
+        }
+    }
+    if (action.context?.environment === 'prod' || action.context?.environment === 'production') {
+        score += 0.15;
+        reasons.push('prod_environment');
+    }
+    const cost = action.estimated_cost_usd ?? 0;
+    if (cost >= 10) {
+        score += 0.15;
+        reasons.push('high_cost');
+    }
+    else if (cost >= 1) {
+        score += 0.05;
+        reasons.push('nontrivial_cost');
+    }
+    score = Math.min(1, Math.max(0, score));
+    const reversibility = computeReversibility(action, destructive);
+    if (reversibility === 'irreversible') {
+        reasons.push('irreversible_operation');
+    }
+    return { score, reasons, reversibility };
+}
+function computeReversibility(action, destructive) {
+    if (destructive)
+        return 'irreversible';
+    switch (action.tool_type) {
+        case 'file_read':
+            return 'reversible';
+        case 'file_write':
+            return 'partially_reversible';
+        case 'file_delete':
+            return 'irreversible';
+        case 'payment':
+        case 'email':
+            return 'irreversible';
+        case 'http':
+            return 'partially_reversible';
+        case 'database':
+            return 'partially_reversible';
+        case 'shell':
+            return 'partially_reversible';
+        case 'mcp_tool':
+            return 'partially_reversible';
+        default:
+            return 'partially_reversible';
+    }
+}
+//# sourceMappingURL=scorer.js.map

package/dist/preflight/scorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer.js","sourceRoot":"","sources":["../../src/preflight/scorer.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAA6B;IAC5C,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,MAAM,oBAAoB,GAAa;IACrC,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,WAAW;IACX,0BAA0B;IAC1B,6BAA6B;IAC7B,2BAA2B;CAC5B,CAAC;AAEF,MAAM,iBAAiB,GAAa;IAClC,SAAS;IACT,UAAU;IACV,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,eAAe;IACf,mBAAmB;IACnB,UAAU;IACV,kBAAkB;CACnB,CAAC;AAEF,MAAM,uBAAuB,GAAa;IACxC,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC;AAQF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IAE/C,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,IAAI,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACpC,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QACvC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,GAAG,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,MAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,GAAG,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,YAAY,EAAE,CAAC;QAC3F,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAExC,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhE,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,WAAoB;IAChE,IAAI,WAAW;QAAE,OAAO,cAAc,CAAC;IACvC,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,WAAW;YACd,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,sBAAsB,CAAC;QAChC,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC;QACxB,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACV,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC;QAChC;YACE,OAAO,sBAAsB,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/preflight/types.d.ts

@@ -0,0 +1,57 @@
+export type ToolType = 'shell' | 'file_read' | 'file_write' | 'file_delete' | 'http' | 'mcp_tool' | 'email' | 'payment' | 'database' | 'other';
+export type Reversibility = 'reversible' | 'partially_reversible' | 'irreversible';
+export type DecisionType = 'allow' | 'deny' | 'require_approval' | 'allow_with_rewrite';
+export type Effect = 'allow' | 'deny' | 'require_approval' | 'allow_with_rewrite';
+export interface Action {
+    actor_id?: string;
+    workspace_id?: string;
+    tool_type: ToolType;
+    tool_name: string;
+    action: string;
+    target?: string;
+    context?: Record<string, unknown>;
+    estimated_cost_usd?: number;
+}
+export interface Rewrite {
+    tool_type: ToolType;
+    tool_name?: string;
+    action: string;
+    target?: string;
+}
+export interface PolicyRule {
+    id: string;
+    when: {
+        tool_type?: ToolType | ToolType[];
+        tool_name?: string | string[];
+        action_matches?: string[];
+        target_matches?: string[];
+        domain_not_in_allowlist?: boolean;
+        allowlist?: string[];
+        min_risk?: number;
+        max_cost_usd?: number;
+    };
+    effect: Effect;
+    rewrite?: Rewrite;
+    reason?: string;
+}
+export interface Policy {
+    version: number;
+    defaults?: {
+        approval_threshold?: number;
+        block_threshold?: number;
+    };
+    budgets?: {
+        max_http_cost_usd_per_action?: number;
+        max_model_cost_usd_per_action?: number;
+    };
+    rules: PolicyRule[];
+}
+export interface Decision {
+    decision: DecisionType;
+    risk_score: number;
+    reversibility: Reversibility;
+    estimated_cost_usd: number;
+    matched_policies: string[];
+    reasons: string[];
+    safe_alternative?: Rewrite;
+}

package/dist/preflight/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/preflight/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/preflight/types.ts"],"names":[],"mappings":""}

package/examples/actions/destructive-delete.json

@@ -0,0 +1,11 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf /prod/data",
+  "target": "/prod/data",
+  "context": {
+    "environment": "prod"
+  }
+}

package/examples/actions/rewrite-tmp.json

@@ -0,0 +1,8 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf ./tmp",
+  "target": "./tmp"
+}

package/examples/actions/safe-read.json

@@ -0,0 +1,8 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "file_read",
+  "tool_name": "read",
+  "action": "cat package.json",
+  "target": "./package.json"
+}

package/examples/github-action.yml

@@ -0,0 +1,23 @@
+name: MCP Schema Lint (example)
+
+# Example workflow showing how to use mcp-lint in CI.
+# Copy this to your own repo and adjust the `input` path.
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Lint MCP tool schemas
+        uses: robert19001-cmyk/mcp-lint@v0.3.0
+        with:
+          input: tools.json
+          severity: warning
+          score: 'true'
+          fail_on: error

package/examples/policies/default.yml

@@ -0,0 +1,59 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.70
+  block_threshold: 0.92
+
+budgets:
+  max_http_cost_usd_per_action: 2
+  max_model_cost_usd_per_action: 1
+
+rules:
+  - id: block-destructive-prod
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf", "rmdir /s", "del /s"]
+      target_matches: ["/prod", "/etc", "/app/data", "C:\\Windows"]
+    effect: deny
+    reason: Destructive operations on production paths are forbidden
+
+  - id: approval-sensitive-write
+    when:
+      tool_type: file_write
+      target_matches: ["**/.env*", "**/secrets*", "**/credentials*"]
+    effect: require_approval
+    reason: Writing to sensitive files requires approval
+
+  - id: rewrite-tmp-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf ./tmp", "rm -rf ./cache", "rm -rf ./build"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+      target: ./tmp
+    reason: Prefer moving to trash over hard delete
+
+  - id: allow-workspace-writes
+    when:
+      tool_type: file_write
+      target_matches: ["./workspace/**", "./src/**", "./tests/**"]
+    effect: allow
+
+  - id: allow-local-reads
+    when:
+      tool_type: file_read
+    effect: allow
+
+  - id: approval-payments
+    when:
+      tool_type: payment
+    effect: require_approval
+    reason: All payments require human approval
+
+  - id: approval-external-email
+    when:
+      tool_type: email
+    effect: require_approval
+    reason: Outgoing email requires approval

package/examples/policies/permissive-dev.yml

@@ -0,0 +1,33 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.85
+  block_threshold: 0.98
+
+rules:
+  - id: block-prod-paths
+    when:
+      target_matches: ["/prod/**", "/production/**"]
+    effect: deny
+    reason: Never touch production paths from dev
+
+  - id: allow-all-reads
+    when:
+      tool_type: file_read
+    effect: allow
+
+  - id: allow-workspace
+    when:
+      tool_type: file_write
+      target_matches: ["./**"]
+    effect: allow
+
+  - id: rewrite-destructive-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+    reason: Use trash instead of hard delete even in dev

package/examples/policies/strict.yml

@@ -0,0 +1,42 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.40
+  block_threshold: 0.80
+
+rules:
+  - id: approval-all-shell
+    when:
+      tool_type: shell
+    effect: require_approval
+    reason: All shell commands require approval under strict policy
+
+  - id: approval-all-http
+    when:
+      tool_type: http
+      domain_not_in_allowlist: true
+      allowlist:
+        - api.github.com
+        - api.anthropic.com
+        - api.openai.com
+    effect: require_approval
+    reason: HTTP calls outside the allowlist require approval
+
+  - id: block-destructive
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf", "drop table", "truncate"]
+    effect: deny
+    reason: Destructive commands are never allowed
+
+  - id: block-secrets
+    when:
+      action_matches: [".env", "secrets", "credentials", "id_rsa"]
+    effect: deny
+    reason: Secrets must never be touched by an agent
+
+  - id: approval-payment
+    when:
+      tool_type: payment
+    effect: deny
+    reason: Agents cannot make payments in strict mode