opena2a-cli 0.6.3 → 0.7.0

package/dist/report/detect-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect-html.d.ts","sourceRoot":"","sources":["../../src/report/detect-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAS1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAyI/D"}
+{"version":3,"file":"detect-html.d.ts","sourceRoot":"","sources":["../../src/report/detect-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAS1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA0I/D"}

package/dist/report/detect-html.js

@@ -162,8 +162,9 @@ body{background:var(--bg);color:var(--text);font-family:var(--font);font-size:14
   if(report.mcpServers.length>0){h+='<div style="font-size:12px;color:var(--dim);margin-bottom:8px;">Export full asset list for your CMDB: <span style="color:var(--primary);">opena2a detect --export-csv assets.csv</span></div>';}
   h+='<div class="card">';
   if(report.mcpServers.length===0){h+='<div style="color:var(--dim);">No MCP servers found</div>';}
-  if(pMcp.length>0){h+='<div class="mcp-group"><div class="mcp-group-title">Project-local ('+pMcp.length+')</div>';for(var k=0;k<pMcp.length;k++){var sv=pMcp[k];var caps=(sv.capabilities||[]).filter(function(c){return c!=='unknown';});h+='<div class="mcp-row"><div class="mcp-name">'+esc(sv.name)+(sv.verified?' <span class="status-badge status-pass">verified</span>':'')+'</div>';if(caps.length>0){h+='<div class="mcp-caps">'+caps.map(function(c){return capDescs[c]||c;}).join(' | ')+'</div>';}h+='</div>';}h+='</div>';}
-  if(gMcp.length>0){h+='<div class="mcp-group"><div class="mcp-group-title">Machine-wide ('+gMcp.length+')</div>';var sens=gMcp.filter(function(x){return(x.capabilities||[]).some(function(c){return['shell-access','database','payments','cloud-services'].indexOf(c)!==-1;});});if(sens.length>0){for(var m=0;m<sens.length;m++){var sm=sens[m];var sc2=(sm.capabilities||[]).filter(function(c){return c!=='unknown';});h+='<div class="mcp-row"><div class="mcp-name">'+esc(sm.name)+'</div>';if(sc2.length>0){h+='<div class="mcp-caps">'+sc2.map(function(c){return capDescs[c]||c;}).join(' | ')+'</div>';}h+='</div>';}var ot=gMcp.length-sens.length;if(ot>0){h+='<div style="color:var(--dim);font-size:12px;padding:6px 0;">+ '+ot+' more with standard access</div>';}}else{h+='<div style="color:var(--dim);font-size:12px;">'+gMcp.length+' server'+(gMcp.length!==1?'s':'')+' with standard access</div>';}h+='</div>';}
+  function trustBadge(sv){if(!sv.registryData)return'';var sc=Math.round(sv.registryData.trustScore*100);var col=sc>=70?'var(--pass)':sc>=40?'var(--warn)':'var(--fail)';var label='Trust: '+sc+'/100';if(sv.registryData.communityScans>0){label+=' | '+sv.registryData.communityScans+' scan'+(sv.registryData.communityScans!==1?'s':'');}return' <span style="font-size:11px;padding:2px 6px;border-radius:3px;background:'+col+'22;color:'+col+';border:1px solid '+col+'44;">'+label+'</span>';}
+  if(pMcp.length>0){h+='<div class="mcp-group"><div class="mcp-group-title">Project-local ('+pMcp.length+')</div>';for(var k=0;k<pMcp.length;k++){var sv=pMcp[k];var caps=(sv.capabilities||[]).filter(function(c){return c!=='unknown';});h+='<div class="mcp-row"><div class="mcp-name">'+esc(sv.name)+(sv.verified?' <span class="status-badge status-pass">verified</span>':'')+trustBadge(sv)+'</div>';if(caps.length>0){h+='<div class="mcp-caps">'+caps.map(function(c){return capDescs[c]||c;}).join(' | ')+'</div>';}h+='</div>';}h+='</div>';}
+  if(gMcp.length>0){h+='<div class="mcp-group"><div class="mcp-group-title">Machine-wide ('+gMcp.length+')</div>';var sens=gMcp.filter(function(x){return(x.capabilities||[]).some(function(c){return['shell-access','database','payments','cloud-services'].indexOf(c)!==-1;});});if(sens.length>0){for(var m=0;m<sens.length;m++){var sm=sens[m];var sc2=(sm.capabilities||[]).filter(function(c){return c!=='unknown';});h+='<div class="mcp-row"><div class="mcp-name">'+esc(sm.name)+trustBadge(sm)+'</div>';if(sc2.length>0){h+='<div class="mcp-caps">'+sc2.map(function(c){return capDescs[c]||c;}).join(' | ')+'</div>';}h+='</div>';}var ot=gMcp.length-sens.length;if(ot>0){h+='<div style="color:var(--dim);font-size:12px;padding:6px 0;">+ '+ot+' more with standard access</div>';}}else{h+='<div style="color:var(--dim);font-size:12px;">'+gMcp.length+' server'+(gMcp.length!==1?'s':'')+' with standard access</div>';}h+='</div>';}
   h+='</div>';
 
   var nw=(report.aiConfigs||[]).filter(function(c){return c.risk!=='low';});

package/dist/report/detect-html.js.map

@@ -1 +1 @@
-{"version":3,"file":"detect-html.js","sourceRoot":"","sources":["../../src/report/detect-html.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWH,gDAyIC;AAjJD,4CAA8B;AAE9B,SAAS,GAAG,CAAC,CAA4B;IACvC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACxE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEtC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAwEsB,QAAQ,MAAM,QAAQ,OAAO,GAAG,OAAO,EAAE;;;;;mDAKrB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoDnD,CAAC;AACT,CAAC"}
+{"version":3,"file":"detect-html.js","sourceRoot":"","sources":["../../src/report/detect-html.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWH,gDA0IC;AAlJD,4CAA8B;AAE9B,SAAS,GAAG,CAAC,CAA4B;IACvC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACxE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEtC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAwEsB,QAAQ,MAAM,QAAQ,OAAO,GAAG,OAAO,EAAE;;;;;mDAKrB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAqDnD,CAAC;AACT,CAAC"}

package/dist/util/governance-scoring.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Shared governance scoring utility.
+ *
+ * Calculates a governance score (0-100) based on agent governance status,
+ * MCP server verification, AI config risk, and identity posture.
+ * Used by both `detect` and `review` commands.
+ */
+export interface GovernanceScoringAgent {
+    governanceStatus: string;
+    identityStatus: string;
+}
+export interface GovernanceScoringMcpServer {
+    verified: boolean;
+    source: string;
+    risk: string;
+}
+export interface GovernanceScoringAiConfig {
+    risk: string;
+}
+export interface GovernanceScoringIdentity {
+    aimIdentities: number;
+    soulFiles: number;
+}
+export interface GovernanceScoringInput {
+    agents: GovernanceScoringAgent[];
+    mcpServers: GovernanceScoringMcpServer[];
+    aiConfigs: GovernanceScoringAiConfig[];
+    identity: GovernanceScoringIdentity;
+}
+/**
+ * Calculate governance score (0-100, where 100 = fully governed).
+ *
+ * Internally computes deductions for gaps, then inverts:
+ *   governanceScore = 100 - deductions
+ *
+ * This way users see 100 as the goal and the score goes UP as they fix things.
+ */
+export declare function calculateGovernanceScore(input: GovernanceScoringInput): {
+    governanceScore: number;
+    deductions: number;
+};
+//# sourceMappingURL=governance-scoring.d.ts.map

package/dist/util/governance-scoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-scoring.d.ts","sourceRoot":"","sources":["../../src/util/governance-scoring.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,UAAU,EAAE,0BAA0B,EAAE,CAAC;IACzC,SAAS,EAAE,yBAAyB,EAAE,CAAC;IACvC,QAAQ,EAAE,yBAAyB,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,sBAAsB,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAsCvH"}

package/dist/util/governance-scoring.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * Shared governance scoring utility.
+ *
+ * Calculates a governance score (0-100) based on agent governance status,
+ * MCP server verification, AI config risk, and identity posture.
+ * Used by both `detect` and `review` commands.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.calculateGovernanceScore = calculateGovernanceScore;
+/**
+ * Calculate governance score (0-100, where 100 = fully governed).
+ *
+ * Internally computes deductions for gaps, then inverts:
+ *   governanceScore = 100 - deductions
+ *
+ * This way users see 100 as the goal and the score goes UP as they fix things.
+ */
+function calculateGovernanceScore(input) {
+    let deductions = 0;
+    // Ungoverned agents: 15 points each
+    for (const agent of input.agents) {
+        if (agent.governanceStatus === 'no governance')
+            deductions += 15;
+        if (agent.identityStatus === 'no identity')
+            deductions += 10;
+    }
+    // Unverified MCP servers -- only project-local servers affect the score.
+    // Global/machine-wide servers (Claude plugins, ~/.cursor, etc.) are shown
+    // for awareness but don't penalize the project governance score because
+    // the user cannot verify them at the project level.
+    for (const server of input.mcpServers) {
+        if (server.verified)
+            continue;
+        const isProjectLocal = server.source.includes('(project)');
+        if (!isProjectLocal)
+            continue;
+        if (server.risk === 'critical')
+            deductions += 20;
+        else if (server.risk === 'high')
+            deductions += 12;
+        else if (server.risk === 'medium')
+            deductions += 5;
+        else
+            deductions += 2;
+    }
+    // AI config risk
+    for (const config of input.aiConfigs) {
+        if (config.risk === 'critical')
+            deductions += 25;
+        else if (config.risk === 'high')
+            deductions += 15;
+        else if (config.risk === 'medium')
+            deductions += 5;
+    }
+    // Governance gap: no AIM identity is a multiplier
+    if (input.identity.aimIdentities === 0 && input.agents.length > 0)
+        deductions += 20;
+    if (input.identity.soulFiles === 0 && input.agents.length > 0)
+        deductions += 10;
+    // Cap deductions at 100, round
+    deductions = Math.min(Math.round(deductions), 100);
+    return { governanceScore: 100 - deductions, deductions };
+}
+//# sourceMappingURL=governance-scoring.js.map

package/dist/util/governance-scoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-scoring.js","sourceRoot":"","sources":["../../src/util/governance-scoring.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAqCH,4DAsCC;AA9CD;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,KAA6B;IACpE,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,oCAAoC;IACpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,gBAAgB,KAAK,eAAe;YAAE,UAAU,IAAI,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,cAAc,KAAK,aAAa;YAAE,UAAU,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,oDAAoD;IACpD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,QAAQ;YAAE,SAAS;QAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,UAAU,IAAI,EAAE,CAAC;aAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,UAAU,IAAI,EAAE,CAAC;aAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,UAAU,IAAI,CAAC,CAAC;;YAC9C,UAAU,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,iBAAiB;IACjB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,UAAU,IAAI,EAAE,CAAC;aAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,UAAU,IAAI,EAAE,CAAC;aAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,UAAU,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,kDAAkD;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,IAAI,EAAE,CAAC;IACpF,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,IAAI,EAAE,CAAC;IAEhF,+BAA+B;IAC/B,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnD,OAAO,EAAE,eAAe,EAAE,GAAG,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC;AAC3D,CAAC"}

package/dist/util/registry-enrichment.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Registry enrichment -- queries the OpenA2A Registry for community trust data
+ * about detected MCP servers and agents.
+ *
+ * Used by `opena2a detect --registry` to annotate scan results with trust scores,
+ * community scan counts, and verification status from the public registry.
+ */
+export interface RegistryEnrichment {
+    name: string;
+    packageType: string;
+    trustScore: number;
+    trustLevel: number;
+    verdict: string;
+    communityScans: number;
+    verified: boolean;
+    scanStatus: string;
+}
+export interface RegistryBatchResult {
+    packageId: string;
+    name: string;
+    packageType: string;
+    trustLevel: number;
+    trustScore: number;
+    verdict: string;
+    confidence: number;
+    scanStatus: string;
+    communityScans: number;
+}
+export interface RegistryBatchResponse {
+    queriedAt: string;
+    results: RegistryBatchResult[];
+    total: number;
+}
+/**
+ * Enrich a list of assets with community trust data from the OpenA2A Registry.
+ *
+ * Uses the batch endpoint for efficiency. Handles errors gracefully -- if the
+ * registry is unreachable, slow, or returns unexpected data, returns an empty
+ * map instead of throwing.
+ *
+ * @param assets  Array of { name, type } to query (e.g. MCP server names)
+ * @param registryBaseUrl  Base URL of the registry (no trailing slash)
+ * @returns Map of "name:type" -> enrichment data
+ */
+export declare function enrichFromRegistry(assets: {
+    name: string;
+    type: string;
+}[], registryBaseUrl?: string): Promise<Map<string, RegistryEnrichment>>;
+/**
+ * Format a trust score (0-1 float) as a human-readable "X/100" string.
+ */
+export declare function formatTrustScore(score: number): string;
+/**
+ * Build a concise trust label for text output.
+ * Examples: "Trust: 92/100 | 45 community scans"
+ *           "Trust: 50/100 | listed"
+ *           "No registry data"
+ */
+export declare function formatTrustLabel(enrichment: RegistryEnrichment | undefined): string;
+//# sourceMappingURL=registry-enrichment.d.ts.map

package/dist/util/registry-enrichment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-enrichment.d.ts","sourceRoot":"","sources":["../../src/util/registry-enrichment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAaD;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EACxC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAuD1C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,MAAM,CAenF"}

package/dist/util/registry-enrichment.js

@@ -0,0 +1,104 @@
+"use strict";
+/**
+ * Registry enrichment -- queries the OpenA2A Registry for community trust data
+ * about detected MCP servers and agents.
+ *
+ * Used by `opena2a detect --registry` to annotate scan results with trust scores,
+ * community scan counts, and verification status from the public registry.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enrichFromRegistry = enrichFromRegistry;
+exports.formatTrustScore = formatTrustScore;
+exports.formatTrustLabel = formatTrustLabel;
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const REGISTRY_TIMEOUT_MS = 5000;
+const DEFAULT_REGISTRY_BASE = 'https://api.oa2a.org';
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Enrich a list of assets with community trust data from the OpenA2A Registry.
+ *
+ * Uses the batch endpoint for efficiency. Handles errors gracefully -- if the
+ * registry is unreachable, slow, or returns unexpected data, returns an empty
+ * map instead of throwing.
+ *
+ * @param assets  Array of { name, type } to query (e.g. MCP server names)
+ * @param registryBaseUrl  Base URL of the registry (no trailing slash)
+ * @returns Map of "name:type" -> enrichment data
+ */
+async function enrichFromRegistry(assets, registryBaseUrl) {
+    const enrichments = new Map();
+    if (assets.length === 0) {
+        return enrichments;
+    }
+    const baseUrl = (registryBaseUrl || DEFAULT_REGISTRY_BASE).replace(/\/+$/, '');
+    const batchUrl = `${baseUrl}/api/v1/trust/batch`;
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), REGISTRY_TIMEOUT_MS);
+        const body = JSON.stringify({
+            packages: assets.map((a) => ({ name: a.name, type: a.type })),
+        });
+        const response = await fetch(batchUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body,
+            signal: controller.signal,
+        });
+        clearTimeout(timeout);
+        if (!response.ok) {
+            return enrichments;
+        }
+        const data = (await response.json());
+        if (!data.results || !Array.isArray(data.results)) {
+            return enrichments;
+        }
+        for (const result of data.results) {
+            const key = `${result.name}:${result.packageType}`;
+            enrichments.set(key, {
+                name: result.name,
+                packageType: result.packageType,
+                trustScore: result.trustScore,
+                trustLevel: result.trustLevel,
+                verdict: result.verdict,
+                communityScans: result.communityScans,
+                verified: result.verdict === 'verified' || result.trustLevel >= 4,
+                scanStatus: result.scanStatus,
+            });
+        }
+    }
+    catch {
+        // Registry unreachable, timed out, or returned bad data -- skip enrichment
+    }
+    return enrichments;
+}
+/**
+ * Format a trust score (0-1 float) as a human-readable "X/100" string.
+ */
+function formatTrustScore(score) {
+    return `${Math.round(score * 100)}/100`;
+}
+/**
+ * Build a concise trust label for text output.
+ * Examples: "Trust: 92/100 | 45 community scans"
+ *           "Trust: 50/100 | listed"
+ *           "No registry data"
+ */
+function formatTrustLabel(enrichment) {
+    if (!enrichment) {
+        return 'No registry data';
+    }
+    const score = formatTrustScore(enrichment.trustScore);
+    const parts = [`Trust: ${score}`];
+    if (enrichment.communityScans > 0) {
+        parts.push(`${enrichment.communityScans} community scan${enrichment.communityScans !== 1 ? 's' : ''}`);
+    }
+    else if (enrichment.verdict) {
+        parts.push(enrichment.verdict);
+    }
+    return parts.join(' | ');
+}
+//# sourceMappingURL=registry-enrichment.js.map

package/dist/util/registry-enrichment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-enrichment.js","sourceRoot":"","sources":["../../src/util/registry-enrichment.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAyDH,gDA0DC;AAKD,4CAEC;AAQD,4CAeC;AA9GD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAErD,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAwC,EACxC,eAAwB;IAExB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,eAAe,IAAI,qBAAqB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,OAAO,qBAAqB,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC9D,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAE9D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC;gBACjE,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,UAA0C;IACzE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IAElC,IAAI,UAAU,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,kBAAkB,UAAU,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,CAAC;SAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/util/report-submission.d.ts

@@ -67,4 +67,36 @@ export declare function getRegistryUrl(): Promise<string>;
  * dismissed the prompt. This lets us demonstrate value first.
  */
 export declare function recordScanAndMaybePrompt(): Promise<void>;
+/**
+ * Normalize a detect result into the ScanReport format.
+ * Maps shadow AI findings so the registry can aggregate:
+ * - Which agents and MCP servers are in use across the community
+ * - What governance gaps are most common
+ * - Which MCP capabilities are widespread
+ */
+export declare function normalizeDetectReport(result: {
+    summary: {
+        governanceScore: number;
+        totalAgents: number;
+        mcpServers: number;
+        aiConfigs: number;
+    };
+    agents: {
+        name: string;
+        category: string;
+        governanceStatus: string;
+    }[];
+    mcpServers: {
+        name: string;
+        capabilities: string[];
+        source: string;
+    }[];
+    findings: {
+        severity: string;
+        category: string;
+        title: string;
+        whyItMatters: string;
+    }[];
+    scanDirectory: string;
+}): ScanReport;
 //# sourceMappingURL=report-submission.d.ts.map

package/dist/util/report-submission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-submission.d.ts","sourceRoot":"","sources":["../../src/util/report-submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,IAAI,CAgEzF;AAID,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAqClB;AASD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO5D;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAQtD;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa9D"}
+{"version":3,"file":"report-submission.d.ts","sourceRoot":"","sources":["../../src/util/report-submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,IAAI,CAgEzF;AAID,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAqClB;AASD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO5D;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAQtD;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa9D;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,OAAO,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACjG,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxF,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,UAAU,CA6Cb"}

package/dist/util/report-submission.js

@@ -18,6 +18,7 @@ exports.submitScanReport = submitScanReport;
 exports.isContributeEnabled = isContributeEnabled;
 exports.getRegistryUrl = getRegistryUrl;
 exports.recordScanAndMaybePrompt = recordScanAndMaybePrompt;
+exports.normalizeDetectReport = normalizeDetectReport;
 const colors_js_1 = require("./colors.js");
 // --- Governance scan normalization ---
 /**
@@ -162,6 +163,59 @@ async function recordScanAndMaybePrompt() {
         // Non-critical
     }
 }
+// --- Detect scan normalization ---
+/**
+ * Normalize a detect result into the ScanReport format.
+ * Maps shadow AI findings so the registry can aggregate:
+ * - Which agents and MCP servers are in use across the community
+ * - What governance gaps are most common
+ * - Which MCP capabilities are widespread
+ */
+function normalizeDetectReport(result) {
+    const score = result.summary.governanceScore;
+    let criticalCount = 0;
+    let highCount = 0;
+    let mediumCount = 0;
+    let lowCount = 0;
+    const findings = result.findings.map((f, i) => {
+        if (f.severity === 'critical')
+            criticalCount++;
+        else if (f.severity === 'high')
+            highCount++;
+        else if (f.severity === 'medium')
+            mediumCount++;
+        else
+            lowCount++;
+        return {
+            findingId: `DETECT-${f.category.toUpperCase()}-${String(i + 1).padStart(3, '0')}`,
+            severity: f.severity,
+            category: f.category,
+            title: f.title,
+            description: f.whyItMatters,
+        };
+    });
+    // Include MCP tool names for community intelligence
+    const mcpTools = result.mcpServers
+        .filter(s => s.source.includes('(project)'))
+        .map(s => s.name);
+    const verdict = score >= 80 ? 'pass' : score >= 50 ? 'warnings' : 'fail';
+    return {
+        packageName: 'shadow-ai-audit',
+        packageType: 'detect',
+        scannerName: 'opena2a-detect',
+        scannerVersion: '0.6.3',
+        overallScore: score,
+        scanDurationMs: 0,
+        criticalCount,
+        highCount,
+        mediumCount,
+        lowCount,
+        infoCount: 0,
+        verdict,
+        findings,
+        mcpTools: mcpTools.length > 0 ? mcpTools : undefined,
+    };
+}
 function printContributePrompt() {
     process.stderr.write('\n');
     process.stderr.write((0, colors_js_1.cyan)('  Your scans help the community detect unsafe tools.\n'));

package/dist/util/report-submission.js.map

@@ -1 +1 @@
-{"version":3,"file":"report-submission.js","sourceRoot":"","sources":["../../src/util/report-submission.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAwDH,8DAgEC;AAID,4CAyCC;AASD,kDAOC;AAED,wCAQC;AAOD,4DAaC;AAjND,2CAAgD;AAgDhD,wCAAwC;AAExC;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,GAA4B;IACpE,0EAA0E;IAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAI,GAAG,CAAC,KAAgB,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAI,GAAG,CAAC,KAAgB,IAAI,iBAAiB,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAKlB,CAAC;IAEH,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,kEAAkE;IAClE,MAAM,WAAW,GAA2B;QAC1C,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU;QACpD,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;QACnE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;QACnE,aAAa,EAAE,MAAM;KACtB,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC;gBACrD,IAAI,QAAQ,KAAK,UAAU;oBAAE,aAAa,EAAE,CAAC;qBACxC,IAAI,QAAQ,KAAK,MAAM;oBAAE,SAAS,EAAE,CAAC;qBACrC,IAAI,QAAQ,KAAK,QAAQ;oBAAE,WAAW,EAAE,CAAC;;oBACzC,QAAQ,EAAE,CAAC;gBAEhB,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ;oBACR,QAAQ,EAAE,YAAY;oBACtB,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,gBAAgB;oBACtC,WAAW,EAAE,WAAW,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,sDAAsD,MAAM,CAAC,MAAM,GAAG;iBAC1H,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,WAAW,EAAG,GAAG,CAAC,IAAe,IAAI,SAAS;QAC9C,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,aAAa;QAC1B,cAAc,EAAE,OAAO;QACvB,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,CAAC;QACjB,aAAa;QACb,SAAS;QACT,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,CAAC;QACZ,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,qBAAqB;AAEd,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,MAAkB,EAClB,OAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,WAAW,2BAA2B,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,MAAM;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,aAAa,EAAE,OAAO;aACvB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,8CAA8C,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uDAAuD;QACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,oDAAoD,CAAC,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iEAAiE;AAEjE,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;IACtF,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAEM,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,6BAA6B;IAC1C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,wBAAwB;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAEzB,IAAI,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACjC,qBAAqB,EAAE,CAAC;YACxB,gDAAgD;YAChD,GAAG,CAAC,uBAAuB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,wDAAwD,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,8DAA8D,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,aAAa,CAAC,GAAG,IAAA,kBAAM,EAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,4CAA4C,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"report-submission.js","sourceRoot":"","sources":["../../src/util/report-submission.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAwDH,8DAgEC;AAID,4CAyCC;AASD,kDAOC;AAED,wCAQC;AAOD,4DAaC;AAWD,sDAmDC;AA/QD,2CAAgD;AAgDhD,wCAAwC;AAExC;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,GAA4B;IACpE,0EAA0E;IAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAI,GAAG,CAAC,KAAgB,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAI,GAAG,CAAC,KAAgB,IAAI,iBAAiB,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAKlB,CAAC;IAEH,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,kEAAkE;IAClE,MAAM,WAAW,GAA2B;QAC1C,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU;QACpD,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;QACnE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;QACnE,aAAa,EAAE,MAAM;KACtB,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC;gBACrD,IAAI,QAAQ,KAAK,UAAU;oBAAE,aAAa,EAAE,CAAC;qBACxC,IAAI,QAAQ,KAAK,MAAM;oBAAE,SAAS,EAAE,CAAC;qBACrC,IAAI,QAAQ,KAAK,QAAQ;oBAAE,WAAW,EAAE,CAAC;;oBACzC,QAAQ,EAAE,CAAC;gBAEhB,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ;oBACR,QAAQ,EAAE,YAAY;oBACtB,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,gBAAgB;oBACtC,WAAW,EAAE,WAAW,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,sDAAsD,MAAM,CAAC,MAAM,GAAG;iBAC1H,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,WAAW,EAAG,GAAG,CAAC,IAAe,IAAI,SAAS;QAC9C,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,aAAa;QAC1B,cAAc,EAAE,OAAO;QACvB,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,CAAC;QACjB,aAAa;QACb,SAAS;QACT,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,CAAC;QACZ,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,qBAAqB;AAEd,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,MAAkB,EAClB,OAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,WAAW,2BAA2B,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,MAAM;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,aAAa,EAAE,OAAO;aACvB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,8CAA8C,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uDAAuD;QACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,oDAAoD,CAAC,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iEAAiE;AAEjE,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;IACtF,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAEM,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,6BAA6B;IAC1C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,wBAAwB;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAEzB,IAAI,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACjC,qBAAqB,EAAE,CAAC;YACxB,gDAAgD;YAChD,GAAG,CAAC,uBAAuB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED,oCAAoC;AAEpC;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,MAMrC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;IAC7C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,MAAM,QAAQ,GAAkB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3D,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,aAAa,EAAE,CAAC;aAC1C,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,SAAS,EAAE,CAAC;aACvC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,WAAW,EAAE,CAAC;;YAC3C,QAAQ,EAAE,CAAC;QAEhB,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACjF,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,YAAY;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO;QACL,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,gBAAgB;QAC7B,cAAc,EAAE,OAAO;QACvB,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,CAAC;QACjB,aAAa;QACb,SAAS;QACT,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,CAAC;QACZ,OAAO;QACP,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,wDAAwD,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,8DAA8D,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,aAAa,CAAC,GAAG,IAAA,kBAAM,EAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,4CAA4C,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opena2a-cli",
-  "version": "0.6.3",
+  "version": "0.7.0",
   "description": "Unified CLI for the OpenA2A security platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",