mcp-sentinel 0.1.0

package/dist/index.js

@@ -0,0 +1,165 @@
+import { readFile, writeFile } from "node:fs/promises";
+import chalk from "chalk";
+import { parseArgs } from "./cli.js";
+import { connectToServer, getServerInfo, getServerCapabilities, listTools, listResources, listResourceTemplates, listPrompts, getInstructions, disconnect, } from "./scanner.js";
+import { analyzeTools, summarize } from "./analyzer.js";
+import { scanWithAguara } from "./aguara.js";
+import { formatOutput, formatJson, formatDiff, formatPolicyResult, formatError } from "./formatter.js";
+import { formatMarkdown } from "./markdown.js";
+import { diffScans } from "./diff.js";
+import { discoverServers } from "./config.js";
+import { loadPolicy, findPolicy, evaluatePolicy } from "./policy.js";
+function targetLabel(target) {
+    if (target.type === "stdio") {
+        return `${target.command} ${target.args.join(" ")}`.trim();
+    }
+    return target.url;
+}
+async function scanServer(target, timeout) {
+    const startTime = Date.now();
+    const connection = await connectToServer(target, timeout);
+    try {
+        const server = getServerInfo(connection.client);
+        const capabilities = getServerCapabilities(connection.client);
+        const [rawTools, resources, resourceTemplates, prompts] = await Promise.all([
+            listTools(connection.client, capabilities.tools),
+            listResources(connection.client, capabilities.resources),
+            listResourceTemplates(connection.client, capabilities.resources),
+            listPrompts(connection.client, capabilities.prompts),
+        ]);
+        const instructions = getInstructions(connection.client);
+        const tools = analyzeTools(rawTools);
+        const toolSummary = summarize(tools);
+        const aguara = await scanWithAguara(rawTools);
+        const scanDuration = Date.now() - startTime;
+        return {
+            server, capabilities, tools, toolSummary,
+            resources, resourceTemplates, prompts, instructions,
+            aguara, scanDuration,
+        };
+    }
+    finally {
+        await disconnect(connection);
+    }
+}
+async function loadBaseline(filePath) {
+    const raw = await readFile(filePath, "utf-8");
+    return JSON.parse(raw);
+}
+async function main() {
+    const options = parseArgs(process.argv);
+    if (options === null)
+        return;
+    if (options.noColor) {
+        process.env["FORCE_COLOR"] = "0";
+    }
+    // Discover servers from config files if --config is set
+    if (options.config) {
+        const discovered = await discoverServers();
+        if (discovered.length === 0) {
+            console.error(formatError("No MCP servers found in config files."));
+            process.exit(1);
+        }
+        console.log(chalk.bold(`Found ${discovered.length} server(s) in config files:\n`));
+        for (const s of discovered) {
+            console.log(`  ${chalk.dim(s.source)} ${chalk.cyan(s.name)}`);
+            options.targets.push(s.target);
+        }
+        console.log("");
+    }
+    const results = [];
+    for (const target of options.targets) {
+        try {
+            const result = await scanServer(target, options.timeout);
+            results.push(result);
+            if (!options.json && options.diff === false) {
+                console.log(formatOutput(result));
+            }
+        }
+        catch (err) {
+            const label = targetLabel(target);
+            const message = err instanceof Error ? err.message : "Unknown error";
+            console.error(formatError(`[${label}] ${message}`));
+        }
+    }
+    if (results.length === 0) {
+        console.error(formatError("No servers were scanned successfully."));
+        process.exit(1);
+    }
+    // Diff mode
+    if (options.diff !== false) {
+        const baseline = await loadBaseline(options.diff);
+        for (const current of results) {
+            const diff = diffScans(baseline, current);
+            if (options.json) {
+                console.log(JSON.stringify(diff, null, 2));
+            }
+            else {
+                console.log(formatDiff(diff));
+            }
+        }
+        return;
+    }
+    if (options.json) {
+        const output = results.length === 1 ? results[0] : results;
+        console.log(formatJson(output));
+    }
+    if (options.markdown !== false) {
+        const md = formatMarkdown(results);
+        await writeFile(options.markdown, md, "utf-8");
+        console.log(`Report saved to ${options.markdown}`);
+    }
+    // Policy enforcement
+    let policy = null;
+    if (options.policy !== false) {
+        const policyPath = options.policy === "auto" ? await findPolicy() : options.policy;
+        if (policyPath !== null) {
+            policy = await loadPolicy(policyPath);
+            if (!options.json) {
+                console.log(`\n${chalk.bold("\u{1F6E1}\uFE0F  Policy:")} ${policyPath}\n`);
+            }
+        }
+        else if (options.policy === "auto") {
+            // No policy file found, skip silently
+        }
+        else {
+            console.error(formatError(`Policy file not found: ${options.policy}`));
+            process.exit(1);
+        }
+    }
+    if (policy !== null) {
+        let anyFailed = false;
+        const policyResults = [];
+        for (const scanResult of results) {
+            const pr = evaluatePolicy(policy, scanResult);
+            policyResults.push({ server: scanResult.server.name, result: pr });
+            if (!pr.passed)
+                anyFailed = true;
+            if (!options.json) {
+                console.log(formatPolicyResult(pr, scanResult.server.name));
+            }
+        }
+        if (!options.json) {
+            console.log("");
+        }
+        else {
+            console.log(JSON.stringify(policyResults, null, 2));
+        }
+        if (anyFailed) {
+            process.exit(2);
+        }
+        return;
+    }
+    // CI exit code: exit 2 if aguara found issues
+    if (options.failOnFindings) {
+        const hasFindings = results.some((r) => r.aguara.findings.length > 0);
+        if (hasFindings) {
+            process.exit(2);
+        }
+    }
+}
+main().catch((err) => {
+    console.error(formatError(err instanceof Error ? err.message : "Unexpected error"));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EACL,eAAe,EAAE,aAAa,EAAE,qBAAqB,EACrD,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,WAAW,EAC5D,eAAe,EAAE,UAAU,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGrE,SAAS,WAAW,CAAC,MAAoB;IACvC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAoB,EAAE,OAAe;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE9D,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1E,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC;YACxD,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC;YAChE,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE5C,OAAO;YACL,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW;YACxC,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY;YACnD,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAE7B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;IACnC,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,+BAA+B,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,YAAY;IACZ,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACnF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACrC,sCAAsC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,0BAA0B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,aAAa,GAAyE,EAAE,CAAC;QAE/F,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC9C,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,EAAE,CAAC,MAAM;gBAAE,SAAS,GAAG,IAAI,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/markdown.d.ts

@@ -0,0 +1,3 @@
+import type { ScanResult } from "./types.js";
+export declare function formatMarkdown(results: ScanResult[]): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../src/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAe3D,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAkG5D"}

package/dist/markdown.js

@@ -0,0 +1,106 @@
+function truncate(text, max) {
+    return text.length > max ? text.slice(0, max - 3) + "..." : text;
+}
+function formatToolRow(analyzed) {
+    const desc = truncate(analyzed.tool.description, 80);
+    const params = analyzed.tool.parameters.map((p) => {
+        const req = p.required ? "**" : "";
+        return `${req}${p.name}${req} (${p.type})`;
+    }).join(", ");
+    return `| \`${analyzed.tool.name}\` | ${analyzed.category} | ${desc} | ${params} |`;
+}
+export function formatMarkdown(results) {
+    const lines = [];
+    const timestamp = new Date().toISOString().split("T")[0];
+    lines.push("# MCP Sentinel Report");
+    lines.push("");
+    lines.push(`Generated: ${timestamp}`);
+    lines.push("");
+    for (const result of results) {
+        lines.push(`## ${result.server.name} v${result.server.version}`);
+        lines.push("");
+        // Capabilities
+        const caps = [];
+        if (result.capabilities.tools)
+            caps.push("tools");
+        if (result.capabilities.resources)
+            caps.push("resources");
+        if (result.capabilities.prompts)
+            caps.push("prompts");
+        if (result.capabilities.logging)
+            caps.push("logging");
+        lines.push(`- **Capabilities:** ${caps.join(", ") || "none"}`);
+        lines.push(`- **Scan time:** ${result.scanDuration}ms`);
+        lines.push("");
+        // Tools
+        if (result.tools.length > 0) {
+            lines.push(`### Tools (${result.tools.length}: ${result.toolSummary.read} read, ${result.toolSummary.write} write, ${result.toolSummary.admin} admin)`);
+            lines.push("");
+            lines.push("| Tool | Category | Description | Parameters |");
+            lines.push("|------|----------|-------------|------------|");
+            for (const tool of result.tools) {
+                lines.push(formatToolRow(tool));
+            }
+            lines.push("");
+        }
+        // Resources
+        if (result.resources.length > 0 || result.resourceTemplates.length > 0) {
+            const total = result.resources.length + result.resourceTemplates.length;
+            lines.push(`### Resources (${total})`);
+            lines.push("");
+            lines.push("| URI | Name | Type |");
+            lines.push("|-----|------|------|");
+            for (const r of result.resources) {
+                lines.push(`| \`${r.uri}\` | ${r.name} | ${r.mimeType} |`);
+            }
+            for (const r of result.resourceTemplates) {
+                lines.push(`| \`${r.uriTemplate}\` | ${r.name} | ${r.mimeType} |`);
+            }
+            lines.push("");
+        }
+        // Prompts
+        if (result.prompts.length > 0) {
+            lines.push(`### Prompts (${result.prompts.length})`);
+            lines.push("");
+            lines.push("| Prompt | Description | Arguments |");
+            lines.push("|--------|-------------|-----------|");
+            for (const p of result.prompts) {
+                const args = p.arguments.map((a) => `${a.required ? "**" : ""}${a.name}${a.required ? "**" : ""}`).join(", ");
+                lines.push(`| \`${p.name}\` | ${truncate(p.description, 60)} | ${args} |`);
+            }
+            lines.push("");
+        }
+        // Instructions
+        if (result.instructions !== null) {
+            lines.push("### Server Instructions");
+            lines.push("");
+            lines.push("```");
+            lines.push(result.instructions);
+            lines.push("```");
+            lines.push("");
+        }
+        // Aguara
+        if (result.aguara.available && result.aguara.findings.length > 0) {
+            lines.push("### Security Findings (Aguara)");
+            lines.push("");
+            lines.push("| Severity | Rule | Description |");
+            lines.push("|----------|------|-------------|");
+            for (const f of result.aguara.findings) {
+                lines.push(`| ${f.severity} | ${f.ruleId} | ${f.ruleName} |`);
+            }
+            lines.push("");
+            lines.push(`> ${result.aguara.summary}`);
+            lines.push("");
+        }
+        else if (!result.aguara.available) {
+            lines.push(`> ${result.aguara.summary}`);
+            lines.push("");
+        }
+    }
+    lines.push("---");
+    lines.push("");
+    lines.push("Deep scan: [aguarascan.com](https://aguarascan.com)");
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=markdown.js.map

package/dist/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../src/markdown.ts"],"names":[],"mappings":"AAEA,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,QAAsB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;IAC7C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,QAAQ,CAAC,QAAQ,MAAM,IAAI,MAAM,MAAM,IAAI,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAqB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAE1D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,eAAe;QACf,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,QAAQ;QACR,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,CAAC,IAAI,UAAU,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC;YACxJ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,YAAY;QACZ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,GAAG,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,UAAU;QACV,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9G,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,eAAe;QACf,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,SAAS;QACT,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,5 @@
+import type { Policy, PolicyResult, ScanResult } from "./types.js";
+export declare function evaluatePolicy(policy: Policy, result: ScanResult): PolicyResult;
+export declare function loadPolicy(filePath: string): Promise<Policy>;
+export declare function findPolicy(): Promise<string | null>;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAA+B,YAAY,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAwF9G,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,YAAY,CAqE/E;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlE;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUzD"}

package/dist/policy.js

@@ -0,0 +1,162 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+const VALID_CATEGORIES = new Set(["read", "write", "admin"]);
+function validatePolicy(raw) {
+    if (typeof raw !== "object" || raw === null) {
+        throw new Error("Policy file must be a YAML object");
+    }
+    const obj = raw;
+    const rules = {};
+    if (obj["deny"] !== undefined) {
+        if (typeof obj["deny"] !== "object" || obj["deny"] === null) {
+            throw new Error("Policy 'deny' must be an object");
+        }
+        const deny = obj["deny"];
+        rules.deny = {};
+        if (deny["categories"] !== undefined) {
+            if (!Array.isArray(deny["categories"])) {
+                throw new Error("Policy 'deny.categories' must be an array");
+            }
+            for (const c of deny["categories"]) {
+                if (!VALID_CATEGORIES.has(String(c))) {
+                    throw new Error(`Invalid category '${String(c)}' in deny.categories. Valid: read, write, admin`);
+                }
+            }
+            rules.deny.categories = deny["categories"];
+        }
+        if (deny["tools"] !== undefined) {
+            if (!Array.isArray(deny["tools"])) {
+                throw new Error("Policy 'deny.tools' must be an array");
+            }
+            rules.deny.tools = deny["tools"].map(String);
+        }
+    }
+    if (obj["require"] !== undefined) {
+        if (typeof obj["require"] !== "object" || obj["require"] === null) {
+            throw new Error("Policy 'require' must be an object");
+        }
+        const req = obj["require"];
+        rules.require = {};
+        if (req["aguara"] !== undefined) {
+            if (req["aguara"] !== "clean") {
+                throw new Error("Policy 'require.aguara' must be 'clean'");
+            }
+            rules.require.aguara = "clean";
+        }
+        if (req["maxTools"] !== undefined) {
+            const n = Number(req["maxTools"]);
+            if (!Number.isInteger(n) || n < 0) {
+                throw new Error("Policy 'require.maxTools' must be a non-negative integer");
+            }
+            rules.require.maxTools = n;
+        }
+    }
+    if (obj["allow"] !== undefined) {
+        if (typeof obj["allow"] !== "object" || obj["allow"] === null) {
+            throw new Error("Policy 'allow' must be an object");
+        }
+        const allow = obj["allow"];
+        rules.allow = {};
+        if (allow["tools"] !== undefined) {
+            if (!Array.isArray(allow["tools"])) {
+                throw new Error("Policy 'allow.tools' must be an array");
+            }
+            rules.allow.tools = allow["tools"].map(String);
+        }
+    }
+    return { rules };
+}
+function matchesPattern(name, pattern) {
+    if (pattern.includes("*")) {
+        const regex = new RegExp("^" + pattern.replace(/\*/g, ".*") + "$");
+        return regex.test(name);
+    }
+    return name === pattern;
+}
+export function evaluatePolicy(policy, result) {
+    const violations = [];
+    const { rules } = policy;
+    const allowedTools = rules.allow?.tools;
+    // deny.categories
+    if (rules.deny?.categories !== undefined) {
+        for (const tool of result.tools) {
+            if (rules.deny.categories.includes(tool.category)) {
+                // Check if explicitly allowed
+                if (allowedTools !== undefined && allowedTools.some((p) => matchesPattern(tool.tool.name, p))) {
+                    continue;
+                }
+                violations.push({
+                    rule: "deny.categories",
+                    message: `Tool '${tool.tool.name}' has denied category '${tool.category}'`,
+                    severity: "error",
+                });
+            }
+        }
+    }
+    // deny.tools
+    if (rules.deny?.tools !== undefined) {
+        for (const tool of result.tools) {
+            for (const pattern of rules.deny.tools) {
+                if (matchesPattern(tool.tool.name, pattern)) {
+                    if (allowedTools !== undefined && allowedTools.some((p) => matchesPattern(tool.tool.name, p))) {
+                        continue;
+                    }
+                    violations.push({
+                        rule: "deny.tools",
+                        message: `Tool '${tool.tool.name}' matches denied pattern '${pattern}'`,
+                        severity: "error",
+                    });
+                }
+            }
+        }
+    }
+    // require.aguara
+    if (rules.require?.aguara === "clean") {
+        if (!result.aguara.available) {
+            violations.push({
+                rule: "require.aguara",
+                message: "Policy requires aguara but it is not installed",
+                severity: "error",
+            });
+        }
+        else if (result.aguara.findings.length > 0) {
+            violations.push({
+                rule: "require.aguara",
+                message: `Aguara found ${result.aguara.findings.length} security issue(s)`,
+                severity: "error",
+            });
+        }
+    }
+    // require.maxTools
+    if (rules.require?.maxTools !== undefined) {
+        if (result.tools.length > rules.require.maxTools) {
+            violations.push({
+                rule: "require.maxTools",
+                message: `Server exposes ${result.tools.length} tools, policy allows max ${rules.require.maxTools}`,
+                severity: "error",
+            });
+        }
+    }
+    return { passed: violations.length === 0, violations };
+}
+export async function loadPolicy(filePath) {
+    const resolved = resolve(filePath);
+    const raw = await readFile(resolved, "utf-8");
+    const parsed = parseYaml(raw);
+    return validatePolicy(parsed);
+}
+const DEFAULT_PATHS = [".mcp-policy.yml", ".mcp-policy.yaml"];
+export async function findPolicy() {
+    for (const path of DEFAULT_PATHS) {
+        try {
+            await readFile(resolve(path), "utf-8");
+            return path;
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAErE,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAA4B,CAAC;QACpD,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QAEhB,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAmB,CAAC;QAC/D,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAA4B,CAAC;QACtD,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;QAEnB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;QACjC,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAA4B,CAAC;QACtD,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QAEjB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,KAAK,OAAO,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAkB;IAC/D,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;IAExC,kBAAkB;IAClB,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,8BAA8B;gBAC9B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9F,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,IAAI,CAAC,QAAQ,GAAG;oBAC1E,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC5C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9F,SAAS;oBACX,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B,OAAO,GAAG;wBACvE,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,gDAAgD;gBACzD,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,gBAAgB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,oBAAoB;gBAC1E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,6BAA6B,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACnG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAY,SAAS,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,17 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { ServerInfo, ServerCapabilities, ServerTarget, ToolInfo, ResourceInfo, ResourceTemplateInfo, PromptInfo } from "./types.js";
+export interface ScanConnection {
+    client: Client;
+    transport: Transport;
+}
+export declare function connectToServer(target: ServerTarget, timeout: number): Promise<ScanConnection>;
+export declare function getServerInfo(client: Client): ServerInfo;
+export declare function getServerCapabilities(client: Client): ServerCapabilities;
+export declare function listTools(client: Client, supported: boolean): Promise<ToolInfo[]>;
+export declare function listResources(client: Client, supported: boolean): Promise<ResourceInfo[]>;
+export declare function listResourceTemplates(client: Client, supported: boolean): Promise<ResourceTemplateInfo[]>;
+export declare function listPrompts(client: Client, supported: boolean): Promise<PromptInfo[]>;
+export declare function getInstructions(client: Client): string | null;
+export declare function disconnect(connection: ScanConnection): Promise<void>;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,QAAQ,EAER,YAAY,EACZ,oBAAoB,EACpB,UAAU,EAEX,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;CACtB;AAiBD,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAezB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAMxD;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAQxE;AAwBD,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAUvF;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAc/F;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAc/G;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAiB3F;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO7D;AAED,wBAAsB,UAAU,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1E"}

package/dist/scanner.js

@@ -0,0 +1,147 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+function createTransport(target) {
+    switch (target.type) {
+        case "stdio":
+            return new StdioClientTransport({
+                command: target.command,
+                args: target.args,
+                stderr: "pipe",
+            });
+        case "sse":
+            return new SSEClientTransport(new URL(target.url));
+        case "streamable-http":
+            return new StreamableHTTPClientTransport(new URL(target.url));
+    }
+}
+export async function connectToServer(target, timeout) {
+    const transport = createTransport(target);
+    const client = new Client({
+        name: "mcp-sentinel",
+        version: "0.1.0",
+    });
+    const connectPromise = client.connect(transport);
+    const timeoutPromise = new Promise((_resolve, reject) => {
+        setTimeout(() => reject(new Error(`Connection timed out after ${timeout}ms`)), timeout);
+    });
+    await Promise.race([connectPromise, timeoutPromise]);
+    return { client, transport };
+}
+export function getServerInfo(client) {
+    const info = client.getServerVersion();
+    return {
+        name: info?.name ?? "unknown",
+        version: info?.version ?? "unknown",
+    };
+}
+export function getServerCapabilities(client) {
+    const caps = client.getServerCapabilities();
+    return {
+        tools: caps?.tools !== undefined,
+        resources: caps?.resources !== undefined,
+        prompts: caps?.prompts !== undefined,
+        logging: caps?.logging !== undefined,
+    };
+}
+function extractSchemaProperties(schema) {
+    const properties = schema["properties"];
+    if (typeof properties !== "object" || properties === null) {
+        return [];
+    }
+    const requiredArr = Array.isArray(schema["required"]) ? schema["required"] : [];
+    const props = properties;
+    const result = [];
+    for (const [name, def] of Object.entries(props)) {
+        result.push({
+            name,
+            type: typeof def["type"] === "string" ? def["type"] : "unknown",
+            required: requiredArr.includes(name),
+            description: typeof def["description"] === "string" ? def["description"] : "",
+        });
+    }
+    return result;
+}
+export async function listTools(client, supported) {
+    if (!supported)
+        return [];
+    const result = await client.listTools();
+    return result.tools.map((tool) => ({
+        name: tool.name,
+        description: tool.description ?? "",
+        parameters: extractSchemaProperties(tool.inputSchema),
+        rawInputSchema: tool.inputSchema,
+    }));
+}
+export async function listResources(client, supported) {
+    if (!supported)
+        return [];
+    try {
+        const result = await client.listResources();
+        return result.resources.map((r) => ({
+            uri: r.uri,
+            name: r.name ?? "",
+            description: typeof r.description === "string" ? r.description : "",
+            mimeType: typeof r.mimeType === "string" ? r.mimeType : "",
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+export async function listResourceTemplates(client, supported) {
+    if (!supported)
+        return [];
+    try {
+        const result = await client.listResourceTemplates();
+        return result.resourceTemplates.map((r) => ({
+            uriTemplate: r.uriTemplate,
+            name: r.name ?? "",
+            description: typeof r.description === "string" ? r.description : "",
+            mimeType: typeof r.mimeType === "string" ? r.mimeType : "",
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+export async function listPrompts(client, supported) {
+    if (!supported)
+        return [];
+    try {
+        const result = await client.listPrompts();
+        return result.prompts.map((p) => ({
+            name: p.name,
+            description: typeof p.description === "string" ? p.description : "",
+            arguments: Array.isArray(p.arguments) ? p.arguments.map((a) => ({
+                name: a.name,
+                description: typeof a.description === "string" ? a.description : "",
+                required: a.required === true,
+            })) : [],
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+export function getInstructions(client) {
+    try {
+        const instructions = client.getInstructions();
+        return typeof instructions === "string" && instructions.length > 0 ? instructions : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function disconnect(connection) {
+    try {
+        await connection.client.close();
+    }
+    catch { /* cleanup */ }
+    try {
+        await connection.transport.close();
+    }
+    catch { /* cleanup */ }
+}
+//# sourceMappingURL=scanner.js.map