meritmcp 0.1.1

package/dist/src/report/sarif.js

@@ -0,0 +1,118 @@
+import { RULES, securitySeverityNumber, sarifLevel } from "../security/owasp-map.js";
+import { sha256 } from "../snapshot/canonicalize.js";
+const INFO_URI = "https://github.com/meritmcp/meritmcp";
+export function toSarif(report, version = "0.1.0") {
+    const issues = collectIssues(report);
+    const ruleMap = new Map();
+    for (const i of issues)
+        if (!ruleMap.has(i.ruleId))
+            ruleMap.set(i.ruleId, i);
+    const rules = [...ruleMap.values()].map((i) => ({
+        id: i.ruleId,
+        name: i.ruleName,
+        shortDescription: { text: i.shortDescription },
+        helpUri: i.helpUri ?? INFO_URI,
+        defaultConfiguration: { level: i.level },
+        properties: {
+            ...(i.securitySeverity ? { "security-severity": i.securitySeverity } : {}),
+            tags: i.tags,
+        },
+    }));
+    const results = issues.map((i) => ({
+        ruleId: i.ruleId,
+        level: i.level,
+        message: { text: i.message },
+        locations: [
+            {
+                physicalLocation: {
+                    artifactLocation: { uri: i.location },
+                    region: { startLine: 1 },
+                },
+            },
+        ],
+        partialFingerprints: { merit: sha256(`${i.ruleId}|${i.location}|${i.message}`).slice(0, 20) },
+    }));
+    return {
+        $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "Merit",
+                        informationUri: INFO_URI,
+                        version,
+                        rules,
+                    },
+                },
+                results,
+            },
+        ],
+    };
+}
+function collectIssues(report) {
+    const issues = [];
+    // --- Security findings ---
+    for (const f of report.security.findings) {
+        const meta = RULES[f.ruleId];
+        issues.push({
+            ruleId: f.ruleId,
+            ruleName: meta?.title ?? f.ruleId,
+            shortDescription: meta?.title ?? f.ruleId,
+            level: sarifLevel(f.severity),
+            message: f.message,
+            location: f.location ?? "mcp-server://",
+            helpUri: meta?.helpUri,
+            securitySeverity: securitySeverityNumber(f.severity),
+            tags: ["security", "owasp-mcp", f.owasp ?? "", `confidence:${f.confidence}`].filter(Boolean),
+        });
+    }
+    // --- Functional test failures ---
+    for (const t of report.functional.results.filter((r) => !r.passed)) {
+        issues.push({
+            ruleId: "FUNCTIONAL-test-failed",
+            ruleName: "Functional test failed",
+            shortDescription: "A Merit functional test did not pass",
+            level: "error",
+            message: `${t.name}: ${t.detail}`,
+            location: "mcp-server://functional",
+            tags: ["functional"],
+        });
+    }
+    // --- Schema drift ---
+    const d = report.functional.drift;
+    if (d?.hasSnapshot) {
+        for (const n of d.removed)
+            issues.push(driftIssue("DRIFT-tool-removed", "error", `Tool removed since snapshot: ${n}`, n, false));
+        for (const n of d.schemaChanged)
+            issues.push(driftIssue("DRIFT-schema-changed", "error", `Breaking schema change since snapshot: ${n}`, n, false));
+        for (const n of d.descriptionOnly)
+            issues.push(driftIssue("DRIFT-rug-pull", "warning", `Description-only change (possible tool-poisoning rug-pull): ${n}`, n, true));
+    }
+    // --- Conformance failures (applicable only) ---
+    for (const s of report.conformance.scenarios.filter((x) => x.applicable && !x.passed)) {
+        issues.push({
+            ruleId: "CONFORMANCE-scenario-failed",
+            ruleName: "Conformance scenario failed",
+            shortDescription: "A scenario from the official MCP conformance suite failed",
+            level: "warning",
+            message: `${s.scenario}: ${s.error ?? "failed"}`,
+            location: `mcp-server://conformance/${s.scenario}`,
+            tags: ["conformance"],
+        });
+    }
+    return issues;
+}
+function driftIssue(ruleId, level, message, tool, security) {
+    return {
+        ruleId,
+        ruleName: ruleId,
+        shortDescription: "Tool surface changed since the committed snapshot",
+        level,
+        message,
+        location: `mcp-server://tool/${tool}`,
+        securitySeverity: security ? securitySeverityNumber("medium") : undefined,
+        tags: security ? ["security", "schema-drift"] : ["schema-drift"],
+    };
+}
+//# sourceMappingURL=sarif.js.map

package/dist/src/report/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../../src/report/sarif.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAErD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAgBxD,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,OAAO,GAAG,OAAO;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE,EAAE,CAAC,CAAC,MAAM;QACZ,IAAI,EAAE,CAAC,CAAC,QAAQ;QAChB,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE;QAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ;QAC9B,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QACxC,UAAU,EAAE;YACV,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,EAAE,CAAC,CAAC,IAAI;SACb;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QAC5B,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;iBACzB;aACF;SACF;QACD,mBAAmB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC9F,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO;wBACb,cAAc,EAAE,QAAQ;wBACxB,OAAO;wBACP,KAAK;qBACN;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,4BAA4B;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,MAAM;YACjC,gBAAgB,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,MAAM;YACzC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,eAAe;YACvC,OAAO,EAAE,IAAI,EAAE,OAAO;YACtB,gBAAgB,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpD,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SAC7F,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,wBAAwB;YAClC,gBAAgB,EAAE,sCAAsC;YACxD,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE;YACjC,QAAQ,EAAE,yBAAyB;YACnC,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,OAAO,EAAE,gCAAgC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,OAAO,EAAE,0CAA0C,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACnJ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe;YAC/B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,SAAS,EAAE,+DAA+D,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACtI,CAAC;IAED,iDAAiD;IACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,6BAA6B;YACrC,QAAQ,EAAE,6BAA6B;YACvC,gBAAgB,EAAE,2DAA2D;YAC7E,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE;YAChD,QAAQ,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE;YAClD,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,KAAY,EAAE,OAAe,EAAE,IAAY,EAAE,QAAiB;IAChG,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,MAAM;QAChB,gBAAgB,EAAE,mDAAmD;QACrE,KAAK;QACL,OAAO;QACP,QAAQ,EAAE,qBAAqB,IAAI,EAAE;QACrC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;QACrF,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/src/report/score.js

@@ -0,0 +1,59 @@
+export const DEFAULT_SCORING = {
+    weights: { functional: 0.3, conformance: 0.3, security: 0.4 },
+    securityPenalties: { critical: 40, high: 20, medium: 8, low: 3 },
+    confidenceMultiplier: { high: 1.0, medium: 0.5, low: 0.2 },
+    rugPullPenalty: 15,
+    capScore: 49,
+    bands: { brightgreen: 85, green: 70, yellow: 50, red: 30 },
+};
+export function securityScore(findings, cfg = DEFAULT_SCORING) {
+    let score = 100;
+    for (const f of findings)
+        score -= cfg.securityPenalties[f.severity] * cfg.confidenceMultiplier[f.confidence];
+    return clamp(score);
+}
+export function hasHardFail(findings) {
+    return findings.some((f) => f.confidence === "high" && (f.severity === "critical" || f.severity === "high"));
+}
+export function assemble(parts, cfg = DEFAULT_SCORING) {
+    const active = [];
+    if (parts.functional.ran && parts.functional.score !== null)
+        active.push({ weight: cfg.weights.functional, score: parts.functional.score });
+    if (parts.conformance.ran && parts.conformance.score !== null)
+        active.push({ weight: cfg.weights.conformance, score: parts.conformance.score });
+    if (parts.security.ran && parts.security.score !== null)
+        active.push({ weight: cfg.weights.security, score: parts.security.score });
+    const totalWeight = active.reduce((s, a) => s + a.weight, 0) || 1;
+    let score = Math.round(active.reduce((s, a) => s + (a.weight / totalWeight) * a.score, 0));
+    if (parts.functional.drift?.descriptionOnly.length)
+        score = clamp(score - cfg.rugPullPenalty);
+    const capped = parts.security.ran && hasHardFail(parts.security.findings);
+    if (capped)
+        score = Math.min(score, cfg.capScore);
+    const allFunctionalPassed = parts.functional.ran ? parts.functional.passed === parts.functional.total : true;
+    const verdict = !capped && allFunctionalPassed && score >= cfg.bands.yellow ? "PASS" : "FAIL";
+    return {
+        verdict,
+        score,
+        capped,
+        functional: parts.functional,
+        conformance: parts.conformance,
+        security: parts.security,
+        weights: cfg.weights,
+    };
+}
+export function bandColor(score, failed, cfg = DEFAULT_SCORING) {
+    if (failed || score < cfg.bands.red)
+        return "red";
+    if (score >= cfg.bands.brightgreen)
+        return "brightgreen";
+    if (score >= cfg.bands.green)
+        return "green";
+    if (score >= cfg.bands.yellow)
+        return "yellow";
+    return "orange";
+}
+function clamp(n) {
+    return Math.max(0, Math.min(100, n));
+}
+//# sourceMappingURL=score.js.map

package/dist/src/report/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../../../src/report/score.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;IAC7D,iBAAiB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;IAChE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IAC1D,cAAc,EAAE,EAAE;IAClB,QAAQ,EAAE,EAAE;IACZ,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;CAC3D,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,QAAmB,EAAE,MAAqB,eAAe;IACrF,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,KAAK,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAmB;IAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,KAAoG,EACpG,MAAqB,eAAe;IAEpC,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,IAAI;QACzD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI;QAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAE7E,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAE9F,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,MAAM;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAElD,MAAM,mBAAmB,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,MAAM,OAAO,GAAoB,CAAC,MAAM,IAAI,mBAAmB,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAE/G,OAAO;QACL,OAAO;QACP,KAAK;QACL,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,MAAe,EAAE,MAAqB,eAAe;IAC5F,IAAI,MAAM,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/src/security/engine.js

@@ -0,0 +1,27 @@
+import { scanSecrets } from "./static/secrets.js";
+import { scanUnicode } from "./static/unicode.js";
+import { scanDeps } from "./static/deps-osv.js";
+import { probeInjection } from "./probe/injection.js";
+import { probeAuth } from "./probe/authz.js";
+import { securityScore } from "../report/score.js";
+export async function runSecurity(input) {
+    const findings = [];
+    // --- STATIC: tool metadata (names + descriptions) ---
+    const metaInputs = input.tools.map((t) => ({
+        label: `tool "${t.name}" metadata`,
+        text: `${t.name}\n${t.description ?? ""}\n${JSON.stringify(t.inputSchema ?? {})}`,
+        location: `mcp-server://tool/${t.name}`,
+    }));
+    findings.push(...scanSecrets(metaInputs));
+    findings.push(...scanUnicode(metaInputs));
+    // --- STATIC: dependencies (requires --src) ---
+    if (input.srcDir)
+        findings.push(...(await scanDeps(input.srcDir)));
+    // --- PROBE: command injection ---
+    if (input.probe)
+        findings.push(...(await probeInjection(input.client, input.tools)));
+    // --- PROBE: auth (HTTP only) ---
+    findings.push(...probeAuth(input.transport, input.url, input.transport === "http"));
+    return { findings, score: securityScore(findings) };
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/security/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/security/engine.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAgBnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAoB;IACpD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,uDAAuD;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,YAAY;QAClC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,IAAI,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE;QACjF,QAAQ,EAAE,qBAAqB,CAAC,CAAC,IAAI,EAAE;KACxC,CAAC,CAAC,CAAC;IACJ,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEnE,mCAAmC;IACnC,IAAI,KAAK,CAAC,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAErF,kCAAkC;IAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC;IAEpF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/src/security/owasp-map.js

@@ -0,0 +1,56 @@
+export const OWASP_HELP = "https://owasp.org/www-project-mcp-top-10/";
+export const RULES = {
+    "MCP01-secret": {
+        ruleId: "MCP01-secret",
+        owasp: "MCP01:2025",
+        title: "Exposed secret or token",
+        defaultSeverity: "high",
+        remediation: "Remove the credential from tool metadata/output; load it from an environment variable or secret store at runtime and rotate the leaked value.",
+        helpUri: OWASP_HELP,
+    },
+    "MCP03a-unicode": {
+        ruleId: "MCP03a-unicode",
+        owasp: "MCP03:2025",
+        title: "Invisible/abusable Unicode in tool metadata (tool poisoning)",
+        defaultSeverity: "high",
+        remediation: "Strip zero-width, bidirectional-override and tag characters from tool names/descriptions/schemas; they hide instructions from humans while the model still reads them.",
+        helpUri: OWASP_HELP,
+    },
+    "MCP04-dep": {
+        ruleId: "MCP04-dep",
+        owasp: "MCP04:2025",
+        title: "Vulnerable dependency",
+        defaultSeverity: "medium",
+        remediation: "Upgrade the dependency to a fixed version (see the linked OSV/GHSA advisory).",
+        helpUri: OWASP_HELP,
+    },
+    "MCP05-cmd-injection": {
+        ruleId: "MCP05-cmd-injection",
+        owasp: "MCP05:2025",
+        title: "Command injection",
+        defaultSeverity: "critical",
+        remediation: "Never pass tool input to a shell. Use argument arrays (execFile/spawn without a shell), strict allow-lists, and input validation.",
+        helpUri: OWASP_HELP,
+    },
+    "MCP07-auth": {
+        ruleId: "MCP07-auth",
+        owasp: "MCP07:2025",
+        title: "Insufficient authentication / authorization",
+        defaultSeverity: "high",
+        remediation: "Require auth on the MCP endpoint; return 401 with an RFC 9728 WWW-Authenticate header and publish /.well-known/oauth-protected-resource.",
+        helpUri: OWASP_HELP,
+    },
+};
+/** SARIF security-severity is a 0.1–10.0 string (drives GitHub code-scanning ranking). */
+export function securitySeverityNumber(sev) {
+    return { critical: "9.5", high: "8.0", medium: "5.0", low: "3.0" }[sev];
+}
+/** SARIF level for defaultConfiguration. */
+export function sarifLevel(sev) {
+    if (sev === "critical" || sev === "high")
+        return "error";
+    if (sev === "medium")
+        return "warning";
+    return "note";
+}
+//# sourceMappingURL=owasp-map.js.map

package/dist/src/security/owasp-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owasp-map.js","sourceRoot":"","sources":["../../../src/security/owasp-map.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,UAAU,GAAG,2CAA2C,CAAC;AAWtE,MAAM,CAAC,MAAM,KAAK,GAA6B;IAC7C,cAAc,EAAE;QACd,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,yBAAyB;QAChC,eAAe,EAAE,MAAM;QACvB,WAAW,EAAE,+IAA+I;QAC5J,OAAO,EAAE,UAAU;KACpB;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,8DAA8D;QACrE,eAAe,EAAE,MAAM;QACvB,WAAW,EAAE,wKAAwK;QACrL,OAAO,EAAE,UAAU;KACpB;IACD,WAAW,EAAE;QACX,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,uBAAuB;QAC9B,eAAe,EAAE,QAAQ;QACzB,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,UAAU;KACpB;IACD,qBAAqB,EAAE;QACrB,MAAM,EAAE,qBAAqB;QAC7B,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,mBAAmB;QAC1B,eAAe,EAAE,UAAU;QAC3B,WAAW,EAAE,mIAAmI;QAChJ,OAAO,EAAE,UAAU;KACpB;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,6CAA6C;QACpD,eAAe,EAAE,MAAM;QACvB,WAAW,EAAE,0IAA0I;QACvJ,OAAO,EAAE,UAAU;KACpB;CACF,CAAC;AAEF,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,GAAa;IAClD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,GAAa;IACtC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/security/probe/authz.js

@@ -0,0 +1,17 @@
+export function probeAuth(transport, url, unauthenticatedSucceeded) {
+    if (transport !== "http")
+        return [];
+    if (!unauthenticatedSucceeded)
+        return [];
+    return [
+        {
+            ruleId: "MCP07-auth",
+            owasp: "MCP07:2025",
+            severity: "medium",
+            confidence: "medium",
+            message: "Server accepted an unauthenticated MCP session (no token supplied). If this endpoint is not meant to be public, require OAuth per RFC 9728.",
+            location: url ?? "(http endpoint)",
+        },
+    ];
+}
+//# sourceMappingURL=authz.js.map

package/dist/src/security/probe/authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.js","sourceRoot":"","sources":["../../../../src/security/probe/authz.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,SAAS,CAAC,SAA2B,EAAE,GAAuB,EAAE,wBAAiC;IAC/G,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,wBAAwB;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO;QACL;YACE,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,6IAA6I;YACtJ,QAAQ,EAAE,GAAG,IAAI,iBAAiB;SACnC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/security/probe/injection.js

@@ -0,0 +1,79 @@
+export async function probeInjection(client, tools) {
+    const findings = [];
+    for (const tool of tools) {
+        const stringParams = stringPropsOf(tool.inputSchema);
+        if (stringParams.length === 0)
+            continue;
+        let confirmed = null;
+        for (const param of stringParams) {
+            const marker = `MCPV${Math.random().toString(36).slice(2, 8).toUpperCase()}`;
+            const a = 30 + Math.floor(Math.random() * 60);
+            const b = 30 + Math.floor(Math.random() * 60);
+            const product = a * b;
+            const proof = `${marker}${product}`; // appears only if a shell echoed the marker AND expanded $((a*b))
+            const arith = `$((${a}*${b}))`;
+            const payloads = [
+                `echo ${marker}`, // whole-input exec → exact-echo match (bash + cmd.exe)
+                `${marker}${arith}`, // bash whole-input → "<marker><product>: not found"
+                `; echo ${marker}${arith}`, // bash concatenation injection
+                `& echo ${marker}${arith}`, // bash/cmd concatenation injection
+                "`echo " + marker + arith + "`", // bash backtick injection
+            ];
+            for (const payload of payloads) {
+                const args = baselineArgs(tool.inputSchema);
+                args[param] = payload;
+                let out = "";
+                try {
+                    out = (await client.callTool(tool.name, args)).text;
+                }
+                catch {
+                    continue; // call rejected (e.g. validation) — not an injection signal
+                }
+                if (out.trim() === marker) {
+                    confirmed = { param, payload, how: "echo executed by a shell" };
+                    break;
+                }
+                if (out.includes(proof)) {
+                    confirmed = { param, payload, how: "shell arithmetic $((a*b)) expansion" };
+                    break;
+                }
+            }
+            if (confirmed)
+                break;
+        }
+        if (confirmed) {
+            findings.push({
+                ruleId: "MCP05-cmd-injection",
+                owasp: "MCP05:2025",
+                severity: "critical",
+                confidence: "high",
+                message: `Tool "${tool.name}" passed argument "${confirmed.param}" to an OS shell (confirmed via ${confirmed.how}; canary: ${confirmed.payload}).`,
+                location: `mcp-server://tool/${tool.name}`,
+            });
+        }
+    }
+    return findings;
+}
+function stringPropsOf(schema) {
+    const s = schema;
+    if (!s?.properties)
+        return [];
+    return Object.entries(s.properties)
+        .filter(([, def]) => def.type === "string")
+        .map(([name]) => name);
+}
+/** Fill required params with benign placeholders so unrelated validation doesn't reject the probe. */
+function baselineArgs(schema) {
+    const s = schema;
+    const out = {};
+    if (!s?.properties)
+        return out;
+    for (const name of s.required ?? []) {
+        const def = s.properties[name];
+        if (!def)
+            continue;
+        out[name] = def.type === "number" || def.type === "integer" ? 1 : def.type === "boolean" ? true : "test";
+    }
+    return out;
+}
+//# sourceMappingURL=injection.js.map

package/dist/src/security/probe/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../../../src/security/probe/injection.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAiB,EAAE,KAAiB;IACvE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAExC,IAAI,SAAS,GAA2D,IAAI,CAAC;QAE7E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7E,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,CAAC,kEAAkE;YACvG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,MAAM,QAAQ,GAAG;gBACf,QAAQ,MAAM,EAAE,EAAE,uDAAuD;gBACzE,GAAG,MAAM,GAAG,KAAK,EAAE,EAAE,oDAAoD;gBACzE,UAAU,MAAM,GAAG,KAAK,EAAE,EAAE,+BAA+B;gBAC3D,UAAU,MAAM,GAAG,KAAK,EAAE,EAAE,mCAAmC;gBAC/D,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,GAAG,EAAE,0BAA0B;aAC5D,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;gBACtB,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,4DAA4D;gBACxE,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;oBAC1B,SAAS,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC;oBAChE,MAAM;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,SAAS,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC;oBAC3E,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,SAAS;gBAAE,MAAM;QACvB,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,qBAAqB;gBAC7B,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,sBAAsB,SAAS,CAAC,KAAK,mCAAmC,SAAS,CAAC,GAAG,aAAa,SAAS,CAAC,OAAO,IAAI;gBAClJ,QAAQ,EAAE,qBAAqB,IAAI,CAAC,IAAI,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD,SAAS,aAAa,CAAC,MAAe;IACpC,MAAM,CAAC,GAAG,MAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,EAAE,UAAU;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CAAC,MAAe;IACnC,MAAM,CAAC,GAAG,MAAgC,CAAC;IAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC,CAAC,EAAE,UAAU;QAAE,OAAO,GAAG,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/security/static/deps-osv.js

@@ -0,0 +1,129 @@
+// MCP04 — supply-chain / dependency CVEs via OSV.dev (authoritative; we don't build
+// a vuln DB). Needs --src pointing at the server's project. Prefers package-lock.json
+// (resolved versions) over package.json. Network failure => skip (never crash the gate).
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+const OSV_BATCH = "https://api.osv.dev/v1/querybatch";
+const OSV_VULN = "https://api.osv.dev/v1/vulns/";
+const DETAIL_LOOKUP_CAP = 40;
+export async function scanDeps(srcDir) {
+    const deps = collectNpmDeps(srcDir);
+    if (deps.length === 0)
+        return [];
+    const queries = deps.map((d) => ({ package: { name: d.name, ecosystem: "npm" }, version: d.version }));
+    let results;
+    try {
+        const res = await fetch(OSV_BATCH, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ queries }),
+        });
+        if (!res.ok)
+            return [];
+        results = (await res.json()).results ?? [];
+    }
+    catch {
+        return []; // offline → skip
+    }
+    // Collect unique vuln ids, then enrich a bounded number with severity/summary.
+    const hits = [];
+    results.forEach((r, i) => {
+        const dep = deps[i];
+        for (const v of r.vulns ?? [])
+            hits.push({ dep, id: v.id });
+    });
+    const details = await enrich(hits.slice(0, DETAIL_LOOKUP_CAP).map((h) => h.id));
+    const findings = [];
+    for (const h of hits) {
+        const d = details.get(h.id);
+        findings.push({
+            ruleId: "MCP04-dep",
+            owasp: "MCP04:2025",
+            severity: d?.severity ?? "medium",
+            confidence: "high",
+            message: `${h.dep.name}@${h.dep.version}: ${h.id}${d?.summary ? ` — ${d.summary}` : ""}`,
+            location: `package.json (${h.dep.name})`,
+        });
+    }
+    return findings;
+}
+async function enrich(ids) {
+    const out = new Map();
+    await Promise.all(ids.map(async (id) => {
+        try {
+            const res = await fetch(OSV_VULN + id);
+            if (!res.ok)
+                return;
+            const v = (await res.json());
+            out.set(id, { severity: severityFromCvss(v.severity), summary: v.summary });
+        }
+        catch {
+            /* ignore single-vuln lookup failures */
+        }
+    }));
+    return out;
+}
+function severityFromCvss(severity) {
+    // OSV severity[].score is a CVSS vector string; pull the numeric base score if present.
+    const vec = severity?.find((s) => s.score)?.score ?? "";
+    const m = /\/?(?:CVSS:[\d.]+\/)?.*?(\d+(?:\.\d+)?)\b/.exec(vec);
+    const n = m ? Number(m[1]) : NaN;
+    if (Number.isNaN(n))
+        return "medium";
+    if (n >= 9.0)
+        return "critical";
+    if (n >= 7.0)
+        return "high";
+    if (n >= 4.0)
+        return "medium";
+    return "low";
+}
+function readJson(path) {
+    return JSON.parse(readFileSync(path, "utf8").replace(/^/, ""));
+}
+function collectNpmDeps(srcDir) {
+    const lock = join(srcDir, "package-lock.json");
+    if (existsSync(lock)) {
+        try {
+            const j = readJson(lock);
+            const out = [];
+            for (const [path, info] of Object.entries(j.packages ?? {})) {
+                const marker = "node_modules/";
+                const idx = path.lastIndexOf(marker);
+                if (idx === -1 || !info.version)
+                    continue;
+                out.push({ name: path.slice(idx + marker.length), version: info.version });
+            }
+            if (out.length)
+                return dedupe(out);
+        }
+        catch {
+            /* fall through to package.json */
+        }
+    }
+    const pkgPath = join(srcDir, "package.json");
+    if (existsSync(pkgPath)) {
+        try {
+            const j = readJson(pkgPath);
+            const all = { ...j.dependencies, ...j.devDependencies };
+            return Object.entries(all).map(([name, ver]) => ({ name, version: String(ver).replace(/^[\^~>=<\s]+/, "") }));
+        }
+        catch {
+            return [];
+        }
+    }
+    return [];
+}
+function dedupe(deps) {
+    const seen = new Set();
+    const out = [];
+    for (const d of deps) {
+        const k = `${d.name}@${d.version}`;
+        if (seen.has(k))
+            continue;
+        seen.add(k);
+        out.push(d);
+    }
+    return out;
+}
+//# sourceMappingURL=deps-osv.js.map

package/dist/src/security/static/deps-osv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-osv.js","sourceRoot":"","sources":["../../../../src/security/static/deps-osv.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sFAAsF;AACtF,yFAAyF;AACzF,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,MAAM,SAAS,GAAG,mCAAmC,CAAC;AACtD,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AACjD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEvG,IAAI,OAAiD,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4D,CAAC,OAAO,IAAI,EAAE,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,iBAAiB;IAC9B,CAAC;IAED,+EAA+E;IAC/E,MAAM,IAAI,GAAoC,EAAE,CAAC;IACjD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,CAAC,EAAE,QAAQ,IAAI,QAAQ;YACjC,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACxF,QAAQ,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAa;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoD,CAAC;IACxE,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO;YACpB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+D,CAAC;YAC3F,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAoC;IAC5D,wFAAwF;IACxF,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IACxD,MAAM,CAAC,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAChC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAC5B,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAwD,CAAC;YAChF,MAAM,GAAG,GAAU,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5D,MAAM,MAAM,GAAG,eAAe,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAGzB,CAAC;YACF,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,IAAW;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/security/static/secrets.js

@@ -0,0 +1,57 @@
+const PATTERNS = [
+    { name: "AWS access key id", re: /\bAKIA[0-9A-Z]{16}\b/g, structured: true },
+    { name: "GitHub token", re: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/g, structured: true },
+    { name: "OpenAI/Anthropic-style key", re: /\bsk-(?:live|test|proj|ant)?-?[A-Za-z0-9]{16,}\b/g, structured: true },
+    { name: "Google API key", re: /\bAIza[0-9A-Za-z\-_]{35}\b/g, structured: true },
+    { name: "Slack token", re: /\bxox[baprs]-[0-9A-Za-z-]{10,}\b/g, structured: true },
+    { name: "Stripe secret key", re: /\bsk_live_[0-9A-Za-z]{16,}\b/g, structured: true },
+    { name: "generic high-entropy secret", re: /\b[A-Za-z0-9+/_-]{24,}\b/g, structured: false },
+];
+const SECRET_KEYWORDS = /(secret|token|api[_-]?key|password|passwd|auth|credential|bearer|access[_-]?key)/i;
+export function scanSecrets(inputs) {
+    const findings = [];
+    const seen = new Set();
+    for (const inp of inputs) {
+        for (const p of PATTERNS) {
+            p.re.lastIndex = 0;
+            let m;
+            while ((m = p.re.exec(inp.text)) !== null) {
+                const secret = m[0];
+                const corroborated = p.structured || (shannonEntropy(secret) >= 3.2 && SECRET_KEYWORDS.test(window(inp.text, m.index)));
+                if (!corroborated)
+                    continue;
+                const dedupeKey = `${inp.location}:${secret.slice(0, 16)}`;
+                if (seen.has(dedupeKey))
+                    continue;
+                seen.add(dedupeKey);
+                findings.push({
+                    ruleId: "MCP01-secret",
+                    owasp: "MCP01:2025",
+                    severity: "high",
+                    confidence: p.structured ? "high" : "medium",
+                    message: `Possible ${p.name} exposed in ${inp.label}: ${redact(secret)}`,
+                    location: inp.location,
+                });
+            }
+        }
+    }
+    return findings;
+}
+function window(text, idx) {
+    return text.slice(Math.max(0, idx - 40), idx + 40);
+}
+function redact(s) {
+    return s.length <= 8 ? "****" : `${s.slice(0, 4)}…${s.slice(-2)}`;
+}
+function shannonEntropy(s) {
+    const freq = {};
+    for (const c of s)
+        freq[c] = (freq[c] ?? 0) + 1;
+    let e = 0;
+    for (const k of Object.keys(freq)) {
+        const pr = freq[k] / s.length;
+        e -= pr * Math.log2(pr);
+    }
+    return e;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/src/security/static/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/security/static/secrets.ts"],"names":[],"mappings":"AAWA,MAAM,QAAQ,GAAoB;IAChC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5E,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iCAAiC,EAAE,UAAU,EAAE,IAAI,EAAE;IACjF,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,EAAE,mDAAmD,EAAE,UAAU,EAAE,IAAI,EAAE;IACjH,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,6BAA6B,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/E,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,mCAAmC,EAAE,UAAU,EAAE,IAAI,EAAE;IAClF,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,+BAA+B,EAAE,UAAU,EAAE,IAAI,EAAE;IACpF,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EAAE,2BAA2B,EAAE,UAAU,EAAE,KAAK,EAAE;CAC5F,CAAC;AAEF,MAAM,eAAe,GAAG,mFAAmF,CAAC;AAQ5G,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACnB,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpB,MAAM,YAAY,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxH,IAAI,CAAC,YAAY;oBAAE,SAAS;gBAE5B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC3D,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAClC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAEpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,cAAc;oBACtB,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBAC5C,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI,eAAe,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE;oBACxE,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAC9B,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/security/static/unicode.js

@@ -0,0 +1,37 @@
+const CATEGORIES = [
+    { name: "zero-width character", match: (cp) => [0x200b, 0x200c, 0x200d, 0x2060, 0xfeff].includes(cp) },
+    { name: "bidirectional override", match: (cp) => (cp >= 0x202a && cp <= 0x202e) || (cp >= 0x2066 && cp <= 0x2069) },
+    { name: "Unicode tag character", match: (cp) => cp >= 0xe0000 && cp <= 0xe007f },
+    { name: "soft hyphen / format control", match: (cp) => cp === 0x00ad },
+];
+export function scanUnicode(inputs) {
+    const findings = [];
+    for (const inp of inputs) {
+        const hits = new Map();
+        for (const ch of inp.text) {
+            const cp = ch.codePointAt(0);
+            if (cp === undefined)
+                continue;
+            for (const cat of CATEGORIES) {
+                if (cat.match(cp)) {
+                    const set = hits.get(cat.name) ?? new Set();
+                    set.add(cp);
+                    hits.set(cat.name, set);
+                }
+            }
+        }
+        for (const [cat, cps] of hits) {
+            const labels = [...cps].map((c) => `U+${c.toString(16).toUpperCase().padStart(4, "0")}`);
+            findings.push({
+                ruleId: "MCP03a-unicode",
+                owasp: "MCP03:2025",
+                severity: "high",
+                confidence: "high",
+                message: `Hidden ${cat} (${labels.join(", ")}) in ${inp.label} — classic tool-poisoning vector.`,
+                location: inp.location,
+            });
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=unicode.js.map