opena2a-cli 0.5.4 → 0.5.6

package/dist/commands/mcp-audit.d.ts

@@ -0,0 +1,50 @@
+interface McpCommandOptions {
+    subcommand: string;
+    server?: string;
+    targetDir: string;
+    ci?: boolean;
+    format?: string;
+    verbose?: boolean;
+}
+interface McpServerEntry {
+    name: string;
+    transport: 'stdio' | 'sse';
+    command?: string;
+    args?: string[];
+    url?: string;
+    env?: Record<string, string>;
+    capabilities?: string[];
+    pinnedVersion: boolean;
+    sourceFile: string;
+    sourceLabel: string;
+}
+/**
+ * MCP server identity audit, sign, and verify.
+ */
+export declare function mcpCommand(options: McpCommandOptions): Promise<number>;
+interface ConfigSource {
+    filePath: string;
+    label: string;
+}
+declare function getConfigSources(targetDir: string): ConfigSource[];
+declare function parseConfigFile(filePath: string, label: string): McpServerEntry[];
+declare function extractCapabilities(config: any): string[];
+declare function detectPinnedVersion(command?: string, args?: string[]): boolean;
+declare function getIdentityDir(targetDir: string): string;
+declare function getIdentityPath(targetDir: string, serverName: string): string;
+declare function computeConfigHash(entry: McpServerEntry): string;
+declare function fetchTrustScore(serverName: string): Promise<number | null>;
+declare function findServer(targetDir: string, serverName: string): McpServerEntry | null;
+export declare const _internals: {
+    parseConfigFile: typeof parseConfigFile;
+    getConfigSources: typeof getConfigSources;
+    computeConfigHash: typeof computeConfigHash;
+    findServer: typeof findServer;
+    getIdentityPath: typeof getIdentityPath;
+    getIdentityDir: typeof getIdentityDir;
+    extractCapabilities: typeof extractCapabilities;
+    detectPinnedVersion: typeof detectPinnedVersion;
+    fetchTrustScore: typeof fetchTrustScore;
+};
+export {};
+//# sourceMappingURL=mcp-audit.d.ts.map

package/dist/commands/mcp-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit.d.ts","sourceRoot":"","sources":["../../src/commands/mcp-audit.ts"],"names":[],"mappings":"AAMA,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD;;GAEG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB5E;AAID,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iBAAS,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,CAS3D;AAED,iBAAS,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE,CAqC1E;AAED,iBAAS,mBAAmB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,EAAE,CAMlD;AAED,iBAAS,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAOvE;AAED,iBAAS,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,iBAAS,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,iBAAS,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAKxD;AAID,iBAAe,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAezE;AA4WD,iBAAS,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAQhF;AAcD,eAAO,MAAM,UAAU;;;;;;;;;;CAUtB,CAAC"}

package/dist/commands/mcp-audit.js

@@ -0,0 +1,501 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._internals = void 0;
+exports.mcpCommand = mcpCommand;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const os = __importStar(require("node:os"));
+const crypto = __importStar(require("node:crypto"));
+const colors_js_1 = require("../util/colors.js");
+/**
+ * MCP server identity audit, sign, and verify.
+ */
+async function mcpCommand(options) {
+    switch (options.subcommand) {
+        case 'audit':
+            return handleAudit(options);
+        case 'sign':
+            return handleSign(options);
+        case 'verify':
+            return handleVerify(options);
+        default:
+            process.stderr.write(`Unknown mcp subcommand: ${options.subcommand}\n`);
+            process.stderr.write('\nUsage: opena2a mcp <audit|sign|verify>\n\n');
+            process.stderr.write('  audit               Audit MCP server configurations\n');
+            process.stderr.write('  sign <server>       Sign an MCP server with AIM identity\n');
+            process.stderr.write('  verify <server>     Verify server signature and trust score\n');
+            return 1;
+    }
+}
+function getConfigSources(targetDir) {
+    const home = os.homedir();
+    return [
+        { filePath: path.join(home, '.claude', 'mcp_servers.json'), label: 'Claude Code' },
+        { filePath: path.join(home, '.cursor', 'mcp.json'), label: 'Cursor' },
+        { filePath: path.join(home, '.config', 'windsurf', 'mcp.json'), label: 'Windsurf' },
+        { filePath: path.join(targetDir, 'mcp.json'), label: 'project-local' },
+        { filePath: path.join(targetDir, '.mcp.json'), label: 'project-local' },
+    ];
+}
+function parseConfigFile(filePath, label) {
+    try {
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const servers = parsed.mcpServers ?? parsed;
+        if (typeof servers !== 'object' || servers === null)
+            return [];
+        const entries = [];
+        for (const [name, config] of Object.entries(servers)) {
+            if (typeof config !== 'object' || config === null)
+                continue;
+            const hasUrl = typeof config.url === 'string';
+            const hasCommand = typeof config.command === 'string';
+            if (!hasUrl && !hasCommand)
+                continue;
+            const transport = hasUrl ? 'sse' : 'stdio';
+            const args = Array.isArray(config.args) ? config.args.map(String) : undefined;
+            const capabilities = extractCapabilities(config);
+            const pinnedVersion = detectPinnedVersion(config.command, args);
+            entries.push({
+                name,
+                transport,
+                command: config.command,
+                args,
+                url: config.url,
+                env: config.env,
+                capabilities,
+                pinnedVersion,
+                sourceFile: filePath,
+                sourceLabel: label,
+            });
+        }
+        return entries;
+    }
+    catch {
+        return [];
+    }
+}
+function extractCapabilities(config) {
+    const caps = [];
+    if (config.tools)
+        caps.push('tools');
+    if (config.resources)
+        caps.push('resources');
+    if (config.prompts)
+        caps.push('prompts');
+    return caps;
+}
+function detectPinnedVersion(command, args) {
+    if (!args)
+        return false;
+    // Look for version specifiers like @1.2.3 in package names
+    for (const arg of args) {
+        if (arg.match(/@\d+\.\d+/))
+            return true;
+    }
+    return false;
+}
+function getIdentityDir(targetDir) {
+    return path.join(targetDir, '.opena2a', 'mcp-identities');
+}
+function getIdentityPath(targetDir, serverName) {
+    return path.join(getIdentityDir(targetDir), `${serverName}.json`);
+}
+function computeConfigHash(entry) {
+    const data = entry.transport === 'stdio'
+        ? JSON.stringify({ command: entry.command, args: entry.args })
+        : JSON.stringify({ url: entry.url });
+    return crypto.createHash('sha256').update(data).digest('hex');
+}
+// ── Registry trust score ──────────────────────────────────────────────
+async function fetchTrustScore(serverName) {
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 5000);
+        const resp = await fetch(`https://registry.opena2a.org/api/v1/packages/${encodeURIComponent(serverName)}`, { signal: controller.signal });
+        clearTimeout(timeout);
+        if (!resp.ok)
+            return null;
+        const data = await resp.json();
+        return typeof data.trustScore === 'number' ? data.trustScore : null;
+    }
+    catch {
+        return null;
+    }
+}
+// ── Subcommand: audit ─────────────────────────────────────────────────
+async function handleAudit(options) {
+    const sources = getConfigSources(options.targetDir);
+    const isJson = options.format === 'json';
+    // Collect all servers grouped by source
+    const grouped = [];
+    for (const source of sources) {
+        const servers = parseConfigFile(source.filePath, source.label);
+        if (servers.length > 0) {
+            grouped.push({ source, servers });
+        }
+    }
+    const allServers = grouped.flatMap(g => g.servers);
+    // Check identity status for each server
+    const identityDir = getIdentityDir(options.targetDir);
+    const identityStatus = new Map();
+    for (const server of allServers) {
+        const idPath = getIdentityPath(options.targetDir, server.name);
+        const signed = fs.existsSync(idPath);
+        let verified = false;
+        if (signed) {
+            try {
+                const identity = JSON.parse(fs.readFileSync(idPath, 'utf-8'));
+                const currentHash = computeConfigHash(server);
+                verified = identity.configHash === currentHash;
+            }
+            catch {
+                verified = false;
+            }
+        }
+        identityStatus.set(server.name, { signed, verified });
+    }
+    // Fetch trust scores (best-effort, parallel)
+    const trustScores = new Map();
+    if (!options.ci) {
+        const promises = allServers.map(async (s) => {
+            const score = await fetchTrustScore(s.name);
+            trustScores.set(s.name, score);
+        });
+        await Promise.all(promises);
+    }
+    // Count summary
+    const total = allServers.length;
+    const signedCount = [...identityStatus.values()].filter(s => s.signed).length;
+    const verifiedCount = [...identityStatus.values()].filter(s => s.verified).length;
+    const trustCount = [...trustScores.values()].filter(s => s !== null).length;
+    if (isJson) {
+        const result = {
+            servers: allServers.map(s => ({
+                name: s.name,
+                transport: s.transport,
+                command: s.transport === 'stdio' ? [s.command, ...(s.args ?? [])].join(' ') : undefined,
+                url: s.url,
+                sourceFile: s.sourceFile,
+                sourceLabel: s.sourceLabel,
+                pinnedVersion: s.pinnedVersion,
+                capabilities: s.capabilities,
+                signed: identityStatus.get(s.name)?.signed ?? false,
+                verified: identityStatus.get(s.name)?.verified ?? false,
+                trustScore: trustScores.get(s.name) ?? null,
+            })),
+            summary: { total, signed: signedCount, verified: verifiedCount, trustScores: trustCount },
+        };
+        process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+        return 0;
+    }
+    // Text output
+    if (total === 0) {
+        process.stdout.write((0, colors_js_1.bold)('MCP Server Audit') + '\n');
+        process.stdout.write((0, colors_js_1.gray)('='.repeat(50)) + '\n\n');
+        process.stdout.write((0, colors_js_1.dim)('No MCP server configurations found.') + '\n');
+        process.stdout.write((0, colors_js_1.dim)('Checked locations:') + '\n');
+        for (const source of sources) {
+            process.stdout.write((0, colors_js_1.dim)(`  ${source.filePath}`) + '\n');
+        }
+        return 0;
+    }
+    process.stdout.write((0, colors_js_1.bold)('MCP Server Audit') + '\n');
+    process.stdout.write((0, colors_js_1.gray)('='.repeat(50)) + '\n\n');
+    for (const group of grouped) {
+        const shortPath = group.source.filePath.replace(os.homedir(), '~');
+        process.stdout.write((0, colors_js_1.bold)(`Source: ${shortPath}`) + (0, colors_js_1.dim)(` (${group.source.label})`) + '\n');
+        for (const server of group.servers) {
+            const status = identityStatus.get(server.name);
+            const signLabel = status?.signed ? (0, colors_js_1.green)('signed') : (0, colors_js_1.yellow)('not signed');
+            const trustScore = trustScores.get(server.name);
+            const trustLabel = trustScore !== null && trustScore !== undefined
+                ? (0, colors_js_1.cyan)(`trust: ${trustScore}`)
+                : (0, colors_js_1.dim)('no trust score');
+            const commandStr = server.transport === 'stdio'
+                ? [server.command, ...(server.args ?? [])].filter(a => a !== '-y').join(' ')
+                : server.url ?? '';
+            const nameCol = server.name.padEnd(20);
+            const transportCol = server.transport.padEnd(8);
+            process.stdout.write(`  ${nameCol} ${(0, colors_js_1.dim)(transportCol)} ${(0, colors_js_1.dim)(commandStr.substring(0, 45).padEnd(45))}  ${signLabel}  ${trustLabel}\n`);
+            if (options.verbose) {
+                if (server.pinnedVersion) {
+                    process.stdout.write((0, colors_js_1.dim)(`                     version pinned`) + '\n');
+                }
+                if (server.capabilities && server.capabilities.length > 0) {
+                    process.stdout.write((0, colors_js_1.dim)(`                     capabilities: ${server.capabilities.join(', ')}`) + '\n');
+                }
+                if (server.env) {
+                    const envKeys = Object.keys(server.env);
+                    process.stdout.write((0, colors_js_1.dim)(`                     env vars: ${envKeys.join(', ')}`) + '\n');
+                }
+                if (status?.signed) {
+                    process.stdout.write((0, colors_js_1.dim)(`                     identity: .opena2a/mcp-identities/${server.name}.json`) + '\n');
+                }
+                const fullCmd = server.transport === 'stdio'
+                    ? [server.command, ...(server.args ?? [])].join(' ')
+                    : server.url ?? '';
+                if (fullCmd.length > 45) {
+                    process.stdout.write((0, colors_js_1.dim)(`                     full command: ${fullCmd}`) + '\n');
+                }
+            }
+        }
+        process.stdout.write('\n');
+    }
+    process.stdout.write((0, colors_js_1.bold)('Summary') + '\n');
+    process.stdout.write(`  Servers found:     ${total}\n`);
+    process.stdout.write(`  Signed:            ${signedCount} / ${total}\n`);
+    process.stdout.write(`  Verified:          ${verifiedCount} / ${total}\n`);
+    process.stdout.write(`  Trust scores:      ${trustCount} / ${total}\n`);
+    process.stdout.write('\n');
+    process.stdout.write((0, colors_js_1.bold)('Next Steps') + '\n');
+    process.stdout.write(`  ${(0, colors_js_1.cyan)('opena2a mcp sign <name>')}       Sign an MCP server with AIM identity\n`);
+    process.stdout.write(`  ${(0, colors_js_1.cyan)('opena2a mcp verify <name>')}     Verify server signature and trust score\n`);
+    return 0;
+}
+// ── Subcommand: sign ──────────────────────────────────────────────────
+async function handleSign(options) {
+    const serverName = options.server;
+    if (!serverName) {
+        process.stderr.write('Missing required argument: <server-name>\n');
+        process.stderr.write('Usage: opena2a mcp sign <server-name>\n');
+        return 1;
+    }
+    // Find the server in configs
+    const server = findServer(options.targetDir, serverName);
+    if (!server) {
+        process.stderr.write(`MCP server "${serverName}" not found in any configuration file.\n`);
+        process.stderr.write('Run "opena2a mcp audit" to see available servers.\n');
+        return 1;
+    }
+    // Load aim-core
+    const aimCore = await loadAimCore();
+    if (!aimCore)
+        return 1;
+    const isJson = options.format === 'json';
+    try {
+        // Generate Ed25519 keypair
+        const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+        const pubKeyDer = publicKey.export({ type: 'spki', format: 'der' });
+        const privKeyDer = privateKey.export({ type: 'pkcs8', format: 'der' });
+        const pubKeyHex = pubKeyDer.toString('hex');
+        const privKeyHex = privKeyDer.toString('hex');
+        // Compute config hash
+        const configHash = computeConfigHash(server);
+        // Sign the config hash
+        const signature = crypto.sign(null, Buffer.from(configHash), privateKey).toString('hex');
+        // Compute fingerprint
+        const fingerprint = crypto.createHash('sha256').update(pubKeyDer).digest('hex').substring(0, 16);
+        // Store identity
+        const identityDir = getIdentityDir(options.targetDir);
+        fs.mkdirSync(identityDir, { recursive: true });
+        const identity = {
+            serverName,
+            publicKey: pubKeyHex,
+            privateKey: privKeyHex,
+            configHash,
+            signature,
+            createdAt: new Date().toISOString(),
+        };
+        const idPath = getIdentityPath(options.targetDir, serverName);
+        fs.writeFileSync(idPath, JSON.stringify(identity, null, 2));
+        if (isJson) {
+            process.stdout.write(JSON.stringify({
+                status: 'signed',
+                serverName,
+                fingerprint,
+                configHash,
+                identityFile: idPath,
+            }, null, 2) + '\n');
+            return 0;
+        }
+        process.stdout.write((0, colors_js_1.green)('MCP server signed successfully') + '\n\n');
+        process.stdout.write(`  Server:       ${(0, colors_js_1.bold)(serverName)}\n`);
+        process.stdout.write(`  Transport:    ${server.transport}\n`);
+        process.stdout.write(`  Fingerprint:  ${(0, colors_js_1.cyan)(fingerprint)}\n`);
+        process.stdout.write(`  Config hash:  ${(0, colors_js_1.dim)(configHash.substring(0, 32) + '...')}\n`);
+        process.stdout.write(`  Stored in:    ${(0, colors_js_1.dim)(idPath)}\n`);
+        return 0;
+    }
+    catch (err) {
+        process.stderr.write(`Failed to sign server: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+}
+// ── Subcommand: verify ────────────────────────────────────────────────
+async function handleVerify(options) {
+    const serverName = options.server;
+    if (!serverName) {
+        process.stderr.write('Missing required argument: <server-name>\n');
+        process.stderr.write('Usage: opena2a mcp verify <server-name>\n');
+        return 1;
+    }
+    const isJson = options.format === 'json';
+    // Check identity file exists
+    const idPath = getIdentityPath(options.targetDir, serverName);
+    if (!fs.existsSync(idPath)) {
+        if (isJson) {
+            process.stdout.write(JSON.stringify({
+                status: 'not_signed',
+                serverName,
+                message: 'No identity file found. Run "opena2a mcp sign" first.',
+            }, null, 2) + '\n');
+            return 1;
+        }
+        process.stderr.write(`No identity found for MCP server "${serverName}".\n`);
+        process.stderr.write(`Run "opena2a mcp sign ${serverName}" to create one.\n`);
+        return 1;
+    }
+    // Load identity
+    let identity;
+    try {
+        identity = JSON.parse(fs.readFileSync(idPath, 'utf-8'));
+    }
+    catch {
+        process.stderr.write(`Failed to read identity file: ${idPath}\n`);
+        return 1;
+    }
+    // Find server in configs
+    const server = findServer(options.targetDir, serverName);
+    // Verify signature
+    let signatureValid = false;
+    let configMatch = false;
+    try {
+        const pubKeyObj = crypto.createPublicKey({
+            key: Buffer.from(identity.publicKey, 'hex'),
+            type: 'spki',
+            format: 'der',
+        });
+        signatureValid = crypto.verify(null, Buffer.from(identity.configHash), pubKeyObj, Buffer.from(identity.signature, 'hex'));
+    }
+    catch {
+        signatureValid = false;
+    }
+    if (server) {
+        const currentHash = computeConfigHash(server);
+        configMatch = currentHash === identity.configHash;
+    }
+    // Fetch trust score
+    const trustScore = await fetchTrustScore(serverName);
+    // Compute fingerprint
+    let fingerprint = '';
+    try {
+        const pubKeyDer = Buffer.from(identity.publicKey, 'hex');
+        fingerprint = crypto.createHash('sha256').update(pubKeyDer).digest('hex').substring(0, 16);
+    }
+    catch {
+        fingerprint = 'unknown';
+    }
+    const passed = signatureValid && configMatch;
+    if (isJson) {
+        process.stdout.write(JSON.stringify({
+            status: passed ? 'verified' : 'failed',
+            serverName,
+            signatureValid,
+            configMatch,
+            configFound: server !== null,
+            fingerprint,
+            trustScore,
+            createdAt: identity.createdAt,
+        }, null, 2) + '\n');
+        return passed ? 0 : 1;
+    }
+    process.stdout.write((0, colors_js_1.bold)('MCP Server Verification') + '\n');
+    process.stdout.write((0, colors_js_1.gray)('='.repeat(50)) + '\n\n');
+    process.stdout.write(`  Server:          ${(0, colors_js_1.bold)(serverName)}\n`);
+    process.stdout.write(`  Fingerprint:     ${(0, colors_js_1.cyan)(fingerprint)}\n`);
+    process.stdout.write(`  Created:         ${(0, colors_js_1.dim)(identity.createdAt)}\n\n`);
+    process.stdout.write(`  Signature:       ${signatureValid ? (0, colors_js_1.green)('valid') : (0, colors_js_1.red)('invalid')}\n`);
+    process.stdout.write(`  Config match:    ${configMatch ? (0, colors_js_1.green)('current config matches signed config') : (server ? (0, colors_js_1.red)('config has changed since signing') : (0, colors_js_1.yellow)('server not found in current configs'))}\n`);
+    if (trustScore !== null) {
+        process.stdout.write(`  Trust score:     ${(0, colors_js_1.cyan)(String(trustScore))}\n`);
+    }
+    else {
+        process.stdout.write(`  Trust score:     ${(0, colors_js_1.dim)('not available')}\n`);
+    }
+    process.stdout.write('\n');
+    if (passed) {
+        process.stdout.write((0, colors_js_1.green)('PASS') + ' -- server identity verified\n');
+    }
+    else {
+        process.stdout.write((0, colors_js_1.red)('FAIL') + ' -- verification failed\n');
+        if (!signatureValid) {
+            process.stdout.write((0, colors_js_1.dim)('  The cryptographic signature could not be verified.') + '\n');
+        }
+        if (!configMatch && server) {
+            process.stdout.write((0, colors_js_1.dim)('  The server configuration has changed since it was signed.') + '\n');
+            process.stdout.write((0, colors_js_1.dim)('  Run "opena2a mcp sign ' + serverName + '" to re-sign.') + '\n');
+        }
+        if (!server) {
+            process.stdout.write((0, colors_js_1.dim)('  The server was not found in any configuration file.') + '\n');
+        }
+    }
+    return passed ? 0 : 1;
+}
+// ── Helpers ───────────────────────────────────────────────────────────
+function findServer(targetDir, serverName) {
+    const sources = getConfigSources(targetDir);
+    for (const source of sources) {
+        const servers = parseConfigFile(source.filePath, source.label);
+        const found = servers.find(s => s.name === serverName);
+        if (found)
+            return found;
+    }
+    return null;
+}
+async function loadAimCore() {
+    try {
+        return await import('@opena2a/aim-core');
+    }
+    catch {
+        process.stderr.write('aim-core is not available.\n');
+        process.stderr.write('Install: npm install @opena2a/aim-core\n');
+        return null;
+    }
+}
+// ── Exports for testing ───────────────────────────────────────────────
+exports._internals = {
+    parseConfigFile,
+    getConfigSources,
+    computeConfigHash,
+    findServer,
+    getIdentityPath,
+    getIdentityDir,
+    extractCapabilities,
+    detectPinnedVersion,
+    fetchTrustScore,
+};
+//# sourceMappingURL=mcp-audit.js.map

package/dist/commands/mcp-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit.js","sourceRoot":"","sources":["../../src/commands/mcp-audit.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,gCAgBC;AAxDD,4CAA8B;AAC9B,gDAAkC;AAClC,4CAA8B;AAC9B,oDAAsC;AACtC,iDAA8E;AAiC9E;;GAEG;AACI,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;QAC/B;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;YACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AASD,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,OAAO;QACL,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;QAClF,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;QACrE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;QACnF,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;QACtE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAa;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAwB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC;QACjE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAE/D,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAE5D,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;YACtD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU;gBAAE,SAAS;YAErC,MAAM,SAAS,GAAoB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAEhE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,SAAS;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI;gBACJ,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,YAAY;gBACZ,aAAa;gBACb,UAAU,EAAE,QAAQ;gBACpB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAW;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB,EAAE,IAAe;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,2DAA2D;IAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAqB;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO;QACtC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,eAAe,CAAC,UAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB,gDAAgD,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAChF,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAC9B,CAAC;QACF,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAS,CAAC;QACtC,OAAO,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,WAAW,CAAC,OAA0B;IACnD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IAEzC,wCAAwC;IACxC,MAAM,OAAO,GAA0D,EAAE,CAAC;IAC1E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEnD,wCAAwC;IACxC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,cAAc,GAAwD,IAAI,GAAG,EAAE,CAAC;IACtF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAgB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC3E,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC9C,QAAQ,GAAG,QAAQ,CAAC,UAAU,KAAK,WAAW,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,6CAA6C;IAC7C,MAAM,WAAW,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,gBAAgB;IAChB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,aAAa,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAClF,MAAM,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAE5E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvF,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,KAAK;gBACnD,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,KAAK;gBACvD,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI;aAC5C,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE;SAC1F,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,cAAc;IACd,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,qCAAqC,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAEpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,WAAW,SAAS,EAAE,CAAC,GAAG,IAAA,eAAG,EAAC,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAE5F,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;gBAChE,CAAC,CAAC,IAAA,gBAAI,EAAC,UAAU,UAAU,EAAE,CAAC;gBAC9B,CAAC,CAAC,IAAA,eAAG,EAAC,gBAAgB,CAAC,CAAC;YAE1B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,KAAK,OAAO;gBAC7C,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC5E,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YAErB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAEhD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,IAAA,eAAG,EAAC,YAAY,CAAC,IAAI,IAAA,eAAG,EAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC;YAExI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,qCAAqC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,sCAAsC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC3G,CAAC;gBACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC3F,CAAC;gBACD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,0DAA0D,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,KAAK,OAAO;oBAC1C,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACpD,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;gBACrB,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,sCAAsC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,WAAW,MAAM,KAAK,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,aAAa,MAAM,KAAK,IAAI,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,UAAU,MAAM,KAAK,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,gBAAI,EAAC,yBAAyB,CAAC,+CAA+C,CAAC,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,gBAAI,EAAC,2BAA2B,CAAC,gDAAgD,CAAC,CAAC;IAE7G,OAAO,CAAC,CAAC;AACX,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,UAAU,CAAC,OAA0B;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6BAA6B;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,UAAU,0CAA0C,CAAC,CAAC;QAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IAEzC,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9C,sBAAsB;QACtB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE7C,uBAAuB;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEzF,sBAAsB;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjG,iBAAiB;QACjB,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAgB;YAC5B,UAAU;YACV,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;YACtB,UAAU;YACV,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE5D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,WAAW;gBACX,UAAU;gBACV,YAAY,EAAE,MAAM;aACrB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,gCAAgC,CAAC,GAAG,MAAM,CAAC,CAAC;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAA,gBAAI,EAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAA,gBAAI,EAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAA,eAAG,EAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAA,eAAG,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrG,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,YAAY,CAAC,OAA0B;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IAEzC,6BAA6B;IAC7B,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,MAAM,EAAE,YAAY;gBACpB,UAAU;gBACV,OAAO,EAAE,uDAAuD;aACjE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,UAAU,MAAM,CAAC,CAAC;QAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,UAAU,oBAAoB,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,IAAI,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAEzD,mBAAmB;IACnB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;YACvC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;YAC3C,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,cAAc,GAAG,MAAM,CAAC,MAAM,CAC5B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAChC,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CACvC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,WAAW,GAAG,WAAW,KAAK,QAAQ,CAAC,UAAU,CAAC;IACpD,CAAC;IAED,oBAAoB;IACpB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAErD,sBAAsB;IACtB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzD,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,IAAI,WAAW,CAAC;IAE7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACtC,UAAU;YACV,cAAc;YACd,WAAW;YACX,WAAW,EAAE,MAAM,KAAK,IAAI;YAC5B,WAAW;YACX,UAAU;YACV,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAEpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAA,gBAAI,EAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAA,gBAAI,EAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAA,eAAG,EAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,cAAc,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,WAAW,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,qCAAqC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEjN,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAA,gBAAI,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAA,eAAG,EAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,MAAM,CAAC,GAAG,gCAAgC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC;QAChE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,sDAAsD,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,6DAA6D,CAAC,GAAG,IAAI,CAAC,CAAC;YAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,0BAA0B,GAAG,UAAU,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,uDAAuD,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,yEAAyE;AAEzE,SAAS,UAAU,CAAC,SAAiB,EAAE,UAAkB;IACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AAE5D,QAAA,UAAU,GAAG;IACxB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;CAChB,CAAC"}

package/dist/commands/protect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protect.d.ts","sourceRoot":"","sources":["../../src/commands/protect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA6DH,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uCAAuC;IACvC,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,gCAAgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuBD;;GAEG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAketE"}
+{"version":3,"file":"protect.d.ts","sourceRoot":"","sources":["../../src/commands/protect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA6DH,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uCAAuC;IACvC,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,gCAAgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuBD;;GAEG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA0etE"}

package/dist/commands/protect.js

@@ -444,7 +444,7 @@ async function protect(options) {
                 catch {
                     // secretless not available -- assume local
                 }
-                if (currentBackend === '1password' || currentBackend === 'vault') {
+                if (currentBackend === '1password' || currentBackend === 'vault' || currentBackend === 'gcp-sm') {
                     // Already on a team vault -- skip the upgrade offer silently
                 }
                 else {
@@ -470,6 +470,11 @@ async function protect(options) {
                                 value: 'vault',
                                 description: 'Best for enterprises. Requires a running Vault server. Setup: brew install vault',
                             },
+                            {
+                                name: 'GCP Secret Manager      Cloud-native, IAM-integrated, auto-versioned',
+                                value: 'gcp-sm',
+                                description: 'Best for GCP users. Requires gcloud CLI or service account key.',
+                            },
                             {
                                 name: 'Keep local vault        File-based, works offline, no setup required',
                                 value: 'local',
@@ -498,6 +503,10 @@ async function protect(options) {
                         const { offerVaultMigration } = await import('./vault-migration.js');
                         await offerVaultMigration({ credentialCount: report.migrated, ci: options.ci });
                     }
+                    else if (backendChoice === 'gcp-sm') {
+                        const { offerGCPSMMigration } = await import('./gcp-sm-migration.js');
+                        await offerGCPSMMigration({ credentialCount: report.migrated, ci: options.ci });
+                    }
                 }
             }
             catch {