slaunt 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -0
- package/README.md +152 -0
- package/dist/audit/risk-engine.d.ts +4 -0
- package/dist/audit/risk-engine.d.ts.map +1 -0
- package/dist/audit/risk-engine.js +173 -0
- package/dist/audit/risk-engine.js.map +1 -0
- package/dist/audit/run.d.ts +13 -0
- package/dist/audit/run.d.ts.map +1 -0
- package/dist/audit/run.js +55 -0
- package/dist/audit/run.js.map +1 -0
- package/dist/classification/builtin-catalog.d.ts +3 -0
- package/dist/classification/builtin-catalog.d.ts.map +1 -0
- package/dist/classification/builtin-catalog.js +283 -0
- package/dist/classification/builtin-catalog.js.map +1 -0
- package/dist/classification/catalog.d.ts +10 -0
- package/dist/classification/catalog.d.ts.map +1 -0
- package/dist/classification/catalog.js +139 -0
- package/dist/classification/catalog.js.map +1 -0
- package/dist/classification/classifier.d.ts +3 -0
- package/dist/classification/classifier.d.ts.map +1 -0
- package/dist/classification/classifier.js +64 -0
- package/dist/classification/classifier.js.map +1 -0
- package/dist/cli.d.ts +3 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +187 -0
- package/dist/cli.js.map +1 -0
- package/dist/config/discover.d.ts +8 -0
- package/dist/config/discover.d.ts.map +1 -0
- package/dist/config/discover.js +123 -0
- package/dist/config/discover.js.map +1 -0
- package/dist/config/install.d.ts +10 -0
- package/dist/config/install.d.ts.map +1 -0
- package/dist/config/install.js +143 -0
- package/dist/config/install.js.map +1 -0
- package/dist/config/paths.d.ts +17 -0
- package/dist/config/paths.d.ts.map +1 -0
- package/dist/config/paths.js +84 -0
- package/dist/config/paths.js.map +1 -0
- package/dist/demo.d.ts +4 -0
- package/dist/demo.d.ts.map +1 -0
- package/dist/demo.js +99 -0
- package/dist/demo.js.map +1 -0
- package/dist/mcp/introspect.d.ts +9 -0
- package/dist/mcp/introspect.d.ts.map +1 -0
- package/dist/mcp/introspect.js +153 -0
- package/dist/mcp/introspect.js.map +1 -0
- package/dist/report/html.d.ts +4 -0
- package/dist/report/html.d.ts.map +1 -0
- package/dist/report/html.js +96 -0
- package/dist/report/html.js.map +1 -0
- package/dist/tui/render.d.ts +4 -0
- package/dist/tui/render.d.ts.map +1 -0
- package/dist/tui/render.js +132 -0
- package/dist/tui/render.js.map +1 -0
- package/dist/types.d.ts +119 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +2 -0
- package/dist/types.js.map +1 -0
- package/package.json +56 -0
|
@@ -0,0 +1,283 @@
|
|
|
1
|
+
export const BUILTIN_CATALOG = [
|
|
2
|
+
{
|
|
3
|
+
id: 'deploy-production',
|
|
4
|
+
toolPattern: '*deploy*',
|
|
5
|
+
descriptionTerms: ['deploy', 'production'],
|
|
6
|
+
category: 'Deployment',
|
|
7
|
+
capabilities: ['deploy-production', 'write-data', 'network-access'],
|
|
8
|
+
riskScore: 96,
|
|
9
|
+
riskLevel: 'critical',
|
|
10
|
+
sensitive: true,
|
|
11
|
+
verified: true,
|
|
12
|
+
rationale: 'Can change a deployed production environment.',
|
|
13
|
+
priority: 100,
|
|
14
|
+
},
|
|
15
|
+
{
|
|
16
|
+
id: 'shell-execution',
|
|
17
|
+
toolPattern: '*exec*command*',
|
|
18
|
+
category: 'Shell',
|
|
19
|
+
capabilities: ['execute-shell', 'execute-code', 'read-files', 'write-files'],
|
|
20
|
+
riskScore: 90,
|
|
21
|
+
riskLevel: 'high',
|
|
22
|
+
sensitive: true,
|
|
23
|
+
verified: true,
|
|
24
|
+
rationale: 'Can execute arbitrary operating-system commands.',
|
|
25
|
+
priority: 95,
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
id: 'shell-run',
|
|
29
|
+
namespace: '*shell*',
|
|
30
|
+
toolPattern: '*run*command*',
|
|
31
|
+
category: 'Shell',
|
|
32
|
+
capabilities: ['execute-shell', 'execute-code', 'read-files', 'write-files'],
|
|
33
|
+
riskScore: 90,
|
|
34
|
+
riskLevel: 'high',
|
|
35
|
+
sensitive: true,
|
|
36
|
+
verified: true,
|
|
37
|
+
rationale: 'Can execute commands through a shell-capable server.',
|
|
38
|
+
priority: 94,
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
id: 'secrets-read',
|
|
42
|
+
namespace: '*secret*',
|
|
43
|
+
toolPattern: '*',
|
|
44
|
+
category: 'Secrets',
|
|
45
|
+
capabilities: ['read-secrets'],
|
|
46
|
+
riskScore: 88,
|
|
47
|
+
riskLevel: 'high',
|
|
48
|
+
sensitive: true,
|
|
49
|
+
verified: true,
|
|
50
|
+
rationale: 'Can read or enumerate credential material.',
|
|
51
|
+
priority: 92,
|
|
52
|
+
},
|
|
53
|
+
{
|
|
54
|
+
id: 'github-merge',
|
|
55
|
+
namespace: '*github*',
|
|
56
|
+
toolPattern: '*merge*pull*request*',
|
|
57
|
+
category: 'Source control',
|
|
58
|
+
capabilities: ['merge-pull-request', 'edit-code', 'write-data'],
|
|
59
|
+
riskScore: 86,
|
|
60
|
+
riskLevel: 'high',
|
|
61
|
+
sensitive: true,
|
|
62
|
+
verified: true,
|
|
63
|
+
rationale: 'Can merge changes into a repository branch.',
|
|
64
|
+
priority: 90,
|
|
65
|
+
},
|
|
66
|
+
{
|
|
67
|
+
id: 'github-delete',
|
|
68
|
+
namespace: '*github*',
|
|
69
|
+
toolPattern: '*delete*',
|
|
70
|
+
category: 'Source control',
|
|
71
|
+
capabilities: ['delete-data', 'edit-code', 'write-data'],
|
|
72
|
+
riskScore: 86,
|
|
73
|
+
riskLevel: 'high',
|
|
74
|
+
sensitive: true,
|
|
75
|
+
verified: true,
|
|
76
|
+
rationale: 'Can delete repository content or references.',
|
|
77
|
+
priority: 89,
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
id: 'github-write-code',
|
|
81
|
+
namespace: '*github*',
|
|
82
|
+
toolPattern: '*update*file*',
|
|
83
|
+
category: 'Source control',
|
|
84
|
+
capabilities: ['edit-code', 'write-data'],
|
|
85
|
+
riskScore: 75,
|
|
86
|
+
riskLevel: 'high',
|
|
87
|
+
sensitive: true,
|
|
88
|
+
verified: true,
|
|
89
|
+
rationale: 'Can edit source-controlled files.',
|
|
90
|
+
priority: 85,
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
id: 'github-create-code',
|
|
94
|
+
namespace: '*github*',
|
|
95
|
+
toolPattern: '*create*file*',
|
|
96
|
+
category: 'Source control',
|
|
97
|
+
capabilities: ['edit-code', 'write-data'],
|
|
98
|
+
riskScore: 75,
|
|
99
|
+
riskLevel: 'high',
|
|
100
|
+
sensitive: true,
|
|
101
|
+
verified: true,
|
|
102
|
+
rationale: 'Can create source-controlled files.',
|
|
103
|
+
priority: 85,
|
|
104
|
+
},
|
|
105
|
+
{
|
|
106
|
+
id: 'github-pr-create',
|
|
107
|
+
namespace: '*github*',
|
|
108
|
+
toolPattern: '*create*pull*request*',
|
|
109
|
+
category: 'Source control',
|
|
110
|
+
capabilities: ['create-pull-request', 'write-data'],
|
|
111
|
+
riskScore: 65,
|
|
112
|
+
riskLevel: 'medium',
|
|
113
|
+
sensitive: true,
|
|
114
|
+
verified: true,
|
|
115
|
+
rationale: 'Can create pull requests visible to collaborators.',
|
|
116
|
+
priority: 82,
|
|
117
|
+
},
|
|
118
|
+
{
|
|
119
|
+
id: 'filesystem-delete',
|
|
120
|
+
namespace: '*file*',
|
|
121
|
+
toolPattern: '*delete*',
|
|
122
|
+
category: 'Filesystem',
|
|
123
|
+
capabilities: ['delete-data', 'write-files'],
|
|
124
|
+
riskScore: 84,
|
|
125
|
+
riskLevel: 'high',
|
|
126
|
+
sensitive: true,
|
|
127
|
+
verified: true,
|
|
128
|
+
rationale: 'Can remove local files.',
|
|
129
|
+
priority: 88,
|
|
130
|
+
},
|
|
131
|
+
{
|
|
132
|
+
id: 'filesystem-write',
|
|
133
|
+
namespace: '*file*',
|
|
134
|
+
toolPattern: '*write*',
|
|
135
|
+
category: 'Filesystem',
|
|
136
|
+
capabilities: ['write-files'],
|
|
137
|
+
riskScore: 70,
|
|
138
|
+
riskLevel: 'high',
|
|
139
|
+
sensitive: true,
|
|
140
|
+
verified: true,
|
|
141
|
+
rationale: 'Can write local files.',
|
|
142
|
+
priority: 80,
|
|
143
|
+
},
|
|
144
|
+
{
|
|
145
|
+
id: 'filesystem-edit',
|
|
146
|
+
namespace: '*file*',
|
|
147
|
+
toolPattern: '*edit*',
|
|
148
|
+
category: 'Filesystem',
|
|
149
|
+
capabilities: ['write-files'],
|
|
150
|
+
riskScore: 70,
|
|
151
|
+
riskLevel: 'high',
|
|
152
|
+
sensitive: true,
|
|
153
|
+
verified: true,
|
|
154
|
+
rationale: 'Can modify local files.',
|
|
155
|
+
priority: 80,
|
|
156
|
+
},
|
|
157
|
+
{
|
|
158
|
+
id: 'filesystem-read',
|
|
159
|
+
namespace: '*file*',
|
|
160
|
+
toolPattern: '*read*',
|
|
161
|
+
category: 'Filesystem',
|
|
162
|
+
capabilities: ['read-files'],
|
|
163
|
+
riskScore: 45,
|
|
164
|
+
riskLevel: 'medium',
|
|
165
|
+
sensitive: true,
|
|
166
|
+
verified: true,
|
|
167
|
+
rationale: 'Can read local files that may contain sensitive data.',
|
|
168
|
+
priority: 70,
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
id: 'auth-management',
|
|
172
|
+
toolPattern: '*auth*',
|
|
173
|
+
descriptionTerms: ['user'],
|
|
174
|
+
category: 'Identity',
|
|
175
|
+
capabilities: ['manage-auth', 'write-data'],
|
|
176
|
+
riskScore: 80,
|
|
177
|
+
riskLevel: 'high',
|
|
178
|
+
sensitive: true,
|
|
179
|
+
verified: false,
|
|
180
|
+
rationale: 'May change authentication or identity state.',
|
|
181
|
+
priority: 75,
|
|
182
|
+
},
|
|
183
|
+
{
|
|
184
|
+
id: 'database-write',
|
|
185
|
+
toolPattern: '*execute*sql*',
|
|
186
|
+
category: 'Database',
|
|
187
|
+
capabilities: ['read-data', 'write-data', 'delete-data'],
|
|
188
|
+
riskScore: 85,
|
|
189
|
+
riskLevel: 'high',
|
|
190
|
+
sensitive: true,
|
|
191
|
+
verified: true,
|
|
192
|
+
rationale: 'Can execute SQL that may read or modify database state.',
|
|
193
|
+
priority: 86,
|
|
194
|
+
},
|
|
195
|
+
{
|
|
196
|
+
id: 'database-query',
|
|
197
|
+
toolPattern: '*query*',
|
|
198
|
+
descriptionTerms: ['database'],
|
|
199
|
+
category: 'Database',
|
|
200
|
+
capabilities: ['read-data'],
|
|
201
|
+
riskScore: 48,
|
|
202
|
+
riskLevel: 'medium',
|
|
203
|
+
sensitive: true,
|
|
204
|
+
verified: false,
|
|
205
|
+
rationale: 'Can query a data store.',
|
|
206
|
+
priority: 55,
|
|
207
|
+
},
|
|
208
|
+
{
|
|
209
|
+
id: 'browser-control',
|
|
210
|
+
namespace: '*browser*',
|
|
211
|
+
toolPattern: '*',
|
|
212
|
+
category: 'Browser automation',
|
|
213
|
+
capabilities: ['control-browser', 'network-access'],
|
|
214
|
+
riskScore: 62,
|
|
215
|
+
riskLevel: 'medium',
|
|
216
|
+
sensitive: true,
|
|
217
|
+
verified: true,
|
|
218
|
+
rationale: 'Can interact with websites using the user browser context.',
|
|
219
|
+
priority: 68,
|
|
220
|
+
},
|
|
221
|
+
{
|
|
222
|
+
id: 'computer-control',
|
|
223
|
+
namespace: '*computer*',
|
|
224
|
+
toolPattern: '*',
|
|
225
|
+
category: 'Computer control',
|
|
226
|
+
capabilities: ['execute-code', 'control-browser'],
|
|
227
|
+
riskScore: 82,
|
|
228
|
+
riskLevel: 'high',
|
|
229
|
+
sensitive: true,
|
|
230
|
+
verified: true,
|
|
231
|
+
rationale: 'Can control local applications or the desktop.',
|
|
232
|
+
priority: 72,
|
|
233
|
+
},
|
|
234
|
+
{
|
|
235
|
+
id: 'message-send',
|
|
236
|
+
toolPattern: '*send*message*',
|
|
237
|
+
category: 'Communications',
|
|
238
|
+
capabilities: ['send-message', 'write-data', 'network-access'],
|
|
239
|
+
riskScore: 66,
|
|
240
|
+
riskLevel: 'medium',
|
|
241
|
+
sensitive: true,
|
|
242
|
+
verified: true,
|
|
243
|
+
rationale: 'Can communicate externally as the configured user.',
|
|
244
|
+
priority: 67,
|
|
245
|
+
},
|
|
246
|
+
{
|
|
247
|
+
id: 'read-list-get',
|
|
248
|
+
toolPattern: '*list*',
|
|
249
|
+
category: 'Read-only data',
|
|
250
|
+
capabilities: ['read-data'],
|
|
251
|
+
riskScore: 22,
|
|
252
|
+
riskLevel: 'low',
|
|
253
|
+
sensitive: false,
|
|
254
|
+
verified: false,
|
|
255
|
+
rationale: 'Appears to list data without changing state.',
|
|
256
|
+
priority: 20,
|
|
257
|
+
},
|
|
258
|
+
{
|
|
259
|
+
id: 'read-get',
|
|
260
|
+
toolPattern: '*get*',
|
|
261
|
+
category: 'Read-only data',
|
|
262
|
+
capabilities: ['read-data'],
|
|
263
|
+
riskScore: 22,
|
|
264
|
+
riskLevel: 'low',
|
|
265
|
+
sensitive: false,
|
|
266
|
+
verified: false,
|
|
267
|
+
rationale: 'Appears to retrieve data without changing state.',
|
|
268
|
+
priority: 20,
|
|
269
|
+
},
|
|
270
|
+
{
|
|
271
|
+
id: 'read-search',
|
|
272
|
+
toolPattern: '*search*',
|
|
273
|
+
category: 'Read-only data',
|
|
274
|
+
capabilities: ['read-data'],
|
|
275
|
+
riskScore: 25,
|
|
276
|
+
riskLevel: 'low',
|
|
277
|
+
sensitive: false,
|
|
278
|
+
verified: false,
|
|
279
|
+
rationale: 'Appears to search data without changing state.',
|
|
280
|
+
priority: 20,
|
|
281
|
+
},
|
|
282
|
+
];
|
|
283
|
+
//# sourceMappingURL=builtin-catalog.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"builtin-catalog.js","sourceRoot":"","sources":["../../src/classification/builtin-catalog.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD;QACE,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC1C,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,gBAAgB,CAAC;QACnE,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,+CAA+C;QAC1D,QAAQ,EAAE,GAAG;KACd;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC;QAC5E,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,kDAAkD;QAC7D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,WAAW;QACf,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC;QAC5E,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,sDAAsD;QACjE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,4CAA4C;QACvD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,oBAAoB,EAAE,WAAW,EAAE,YAAY,CAAC;QAC/D,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,6CAA6C;QACxD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACzC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,mCAAmC;QAC9C,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACzC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,qCAAqC;QAChD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,qBAAqB,EAAE,YAAY,CAAC;QACnD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,oDAAoD;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;QAC5C,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,wBAAwB;QACnC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,YAAY,CAAC;QAC5B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,uDAAuD;QAClE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,QAAQ;QACrB,gBAAgB,EAAE,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;QAC3C,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yDAAyD;QACpE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,SAAS;QACtB,gBAAgB,EAAE,CAAC,UAAU,CAAC;QAC9B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,oBAAoB;QAC9B,YAAY,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;QACnD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,4DAA4D;QACvE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;QACjD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,gDAAgD;QAC3D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,gBAAgB,CAAC;QAC9D,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,oDAAoD;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,kDAAkD;QAC7D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,gDAAgD;QAC3D,QAAQ,EAAE,EAAE;KACb;CACF,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { ClassificationRule } from '../types.js';
|
|
2
|
+
export interface CatalogResult {
|
|
3
|
+
rules: ClassificationRule[];
|
|
4
|
+
source: 'database' | 'cache' | 'built-in';
|
|
5
|
+
warning?: string;
|
|
6
|
+
}
|
|
7
|
+
export declare function loadCatalog(options?: {
|
|
8
|
+
offline?: boolean;
|
|
9
|
+
}): Promise<CatalogResult>;
|
|
10
|
+
//# sourceMappingURL=catalog.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/classification/catalog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA+GlE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,WAAW,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CA0B7F"}
|
|
@@ -0,0 +1,139 @@
|
|
|
1
|
+
import { randomBytes } from 'node:crypto';
|
|
2
|
+
import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
|
|
3
|
+
import { dirname, join, resolve } from 'node:path';
|
|
4
|
+
import { z } from 'zod';
|
|
5
|
+
import { BUILTIN_CATALOG } from './builtin-catalog.js';
|
|
6
|
+
const capabilities = [
|
|
7
|
+
'read-data', 'write-data', 'read-files', 'write-files', 'delete-data', 'execute-code',
|
|
8
|
+
'execute-shell', 'read-secrets', 'manage-auth', 'network-access', 'deploy-production',
|
|
9
|
+
'edit-code', 'create-pull-request', 'merge-pull-request', 'administer-system',
|
|
10
|
+
'control-browser', 'send-message',
|
|
11
|
+
];
|
|
12
|
+
const databaseRowSchema = z.object({
|
|
13
|
+
id: z.union([z.string(), z.number()]).transform(String),
|
|
14
|
+
namespace: z.string().max(200).nullable().optional(),
|
|
15
|
+
tool_pattern: z.string().min(1).max(200),
|
|
16
|
+
description_terms: z.array(z.string().min(1).max(100)).max(20).default([]),
|
|
17
|
+
category: z.string().min(1).max(100),
|
|
18
|
+
capabilities: z.array(z.enum(capabilities)).max(20),
|
|
19
|
+
risk_score: z.number().int().min(0).max(100),
|
|
20
|
+
risk_level: z.enum(['critical', 'high', 'medium', 'low', 'info']),
|
|
21
|
+
sensitive: z.boolean(),
|
|
22
|
+
verified: z.boolean(),
|
|
23
|
+
rationale: z.string().min(1).max(500),
|
|
24
|
+
priority: z.number().int().min(0).max(1000),
|
|
25
|
+
});
|
|
26
|
+
const cacheSchema = z.object({
|
|
27
|
+
fetchedAt: z.string(),
|
|
28
|
+
rules: z.array(databaseRowSchema).max(10_000),
|
|
29
|
+
});
|
|
30
|
+
function cachePath() {
|
|
31
|
+
const home = process.env.SLAUNT_AUDIT_HOME || process.env.HOME || process.cwd();
|
|
32
|
+
return resolve(process.env.SLAUNT_AUDIT_CACHE || join(home, '.cache', 'slaunt', 'catalog-v1.json'));
|
|
33
|
+
}
|
|
34
|
+
function mapRule(row) {
|
|
35
|
+
return {
|
|
36
|
+
id: `db:${row.id}`,
|
|
37
|
+
...(row.namespace ? { namespace: row.namespace } : {}),
|
|
38
|
+
toolPattern: row.tool_pattern,
|
|
39
|
+
...(row.description_terms.length > 0 ? { descriptionTerms: row.description_terms } : {}),
|
|
40
|
+
category: row.category,
|
|
41
|
+
capabilities: row.capabilities,
|
|
42
|
+
riskScore: row.risk_score,
|
|
43
|
+
riskLevel: row.risk_level,
|
|
44
|
+
sensitive: row.sensitive,
|
|
45
|
+
verified: row.verified,
|
|
46
|
+
rationale: row.rationale,
|
|
47
|
+
priority: row.priority + 1_000,
|
|
48
|
+
};
|
|
49
|
+
}
|
|
50
|
+
async function readCache() {
|
|
51
|
+
try {
|
|
52
|
+
const raw = await readFile(cachePath(), 'utf8');
|
|
53
|
+
const parsed = cacheSchema.parse(JSON.parse(raw));
|
|
54
|
+
const age = Date.now() - Date.parse(parsed.fetchedAt);
|
|
55
|
+
if (!Number.isFinite(age) || age > 7 * 24 * 60 * 60 * 1000)
|
|
56
|
+
return undefined;
|
|
57
|
+
return parsed.rules.map(mapRule);
|
|
58
|
+
}
|
|
59
|
+
catch {
|
|
60
|
+
return undefined;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
async function writeCache(rows) {
|
|
64
|
+
const path = cachePath();
|
|
65
|
+
const temporary = join(dirname(path), `.${randomBytes(12).toString('hex')}.tmp`);
|
|
66
|
+
await mkdir(dirname(path), { recursive: true, mode: 0o700 });
|
|
67
|
+
await writeFile(temporary, `${JSON.stringify({ fetchedAt: new Date().toISOString(), rules: rows })}\n`, {
|
|
68
|
+
encoding: 'utf8',
|
|
69
|
+
mode: 0o600,
|
|
70
|
+
flag: 'wx',
|
|
71
|
+
});
|
|
72
|
+
await rename(temporary, path);
|
|
73
|
+
}
|
|
74
|
+
function validatedSupabaseUrl(raw) {
|
|
75
|
+
const url = new URL(raw);
|
|
76
|
+
const local = ['localhost', '127.0.0.1', '::1'].includes(url.hostname);
|
|
77
|
+
if (url.username || url.password || url.hash || (url.protocol !== 'https:' && !(local && url.protocol === 'http:'))) {
|
|
78
|
+
throw new Error('Supabase URL must be credential-free HTTPS (or localhost HTTP)');
|
|
79
|
+
}
|
|
80
|
+
return url;
|
|
81
|
+
}
|
|
82
|
+
async function fetchDatabaseRules() {
|
|
83
|
+
const rawUrl = process.env.SLAUNT_SUPABASE_URL;
|
|
84
|
+
const key = process.env.SLAUNT_SUPABASE_PUBLISHABLE_KEY || process.env.SLAUNT_SUPABASE_ANON_KEY;
|
|
85
|
+
if (!rawUrl || !key)
|
|
86
|
+
throw new Error('Supabase catalog is not configured');
|
|
87
|
+
const base = validatedSupabaseUrl(rawUrl);
|
|
88
|
+
const endpoint = new URL('/rest/v1/tool_classification_catalog', base);
|
|
89
|
+
endpoint.searchParams.set('select', 'id,namespace,tool_pattern,description_terms,category,capabilities,risk_score,risk_level,sensitive,verified,rationale,priority');
|
|
90
|
+
endpoint.searchParams.set('active', 'eq.true');
|
|
91
|
+
endpoint.searchParams.set('order', 'priority.desc');
|
|
92
|
+
endpoint.searchParams.set('limit', '10000');
|
|
93
|
+
const controller = new AbortController();
|
|
94
|
+
const timeout = setTimeout(() => controller.abort(), 5_000);
|
|
95
|
+
try {
|
|
96
|
+
const headers = { apikey: key, accept: 'application/json' };
|
|
97
|
+
if (key.split('.').length === 3)
|
|
98
|
+
headers.authorization = `Bearer ${key}`;
|
|
99
|
+
const response = await fetch(endpoint, { headers, signal: controller.signal, redirect: 'error' });
|
|
100
|
+
if (!response.ok)
|
|
101
|
+
throw new Error(`catalog request returned HTTP ${response.status}`);
|
|
102
|
+
const body = await response.text();
|
|
103
|
+
if (body.length > 2 * 1024 * 1024)
|
|
104
|
+
throw new Error('catalog response exceeded 2 MiB');
|
|
105
|
+
return z.array(databaseRowSchema).max(10_000).parse(JSON.parse(body));
|
|
106
|
+
}
|
|
107
|
+
finally {
|
|
108
|
+
clearTimeout(timeout);
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
export async function loadCatalog(options = {}) {
|
|
112
|
+
if (!options.offline && process.env.SLAUNT_SUPABASE_URL) {
|
|
113
|
+
try {
|
|
114
|
+
const rows = await fetchDatabaseRules();
|
|
115
|
+
await writeCache(rows).catch(() => undefined);
|
|
116
|
+
return { rules: [...rows.map(mapRule), ...BUILTIN_CATALOG], source: 'database' };
|
|
117
|
+
}
|
|
118
|
+
catch (error) {
|
|
119
|
+
const cached = await readCache();
|
|
120
|
+
if (cached) {
|
|
121
|
+
return {
|
|
122
|
+
rules: [...cached, ...BUILTIN_CATALOG],
|
|
123
|
+
source: 'cache',
|
|
124
|
+
warning: error instanceof Error ? error.message : 'database catalog unavailable',
|
|
125
|
+
};
|
|
126
|
+
}
|
|
127
|
+
return {
|
|
128
|
+
rules: BUILTIN_CATALOG,
|
|
129
|
+
source: 'built-in',
|
|
130
|
+
warning: error instanceof Error ? error.message : 'database catalog unavailable',
|
|
131
|
+
};
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
const cached = options.offline ? undefined : await readCache();
|
|
135
|
+
return cached
|
|
136
|
+
? { rules: [...cached, ...BUILTIN_CATALOG], source: 'cache' }
|
|
137
|
+
: { rules: BUILTIN_CATALOG, source: 'built-in' };
|
|
138
|
+
}
|
|
139
|
+
//# sourceMappingURL=catalog.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/classification/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,YAAY,GAAG;IACnB,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc;IACrF,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB;IACrF,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,mBAAmB;IAC7E,iBAAiB,EAAE,cAAc;CACO,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CAC9C,CAAC,CAAC;AAEH,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChF,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,OAAO,CAAC,GAAsC;IACrD,OAAO;QACL,EAAE,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE;QAClB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAAE,OAAO,SAAS,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAyC;IACjE,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;QACtG,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAChG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,+HAA+H,CAAC,CAAC;IACrK,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpF,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,GAAG,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAO,GAA0B,EAAE;IACnE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACxC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC;oBACtC,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;iBACjF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC;IAC/D,OAAO,MAAM;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;QAC7D,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../src/classification/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAuBpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,cAAc,EAAE,CA2ClG"}
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
function normalize(value) {
|
|
2
|
+
return value.toLowerCase().replace(/[^a-z0-9]+/g, '_').replace(/^_+|_+$/g, '');
|
|
3
|
+
}
|
|
4
|
+
function globMatches(pattern, value) {
|
|
5
|
+
const normalizedPattern = pattern.toLowerCase().replace(/[^a-z0-9*]+/g, '_').replace(/^_+|_+$/g, '');
|
|
6
|
+
const escaped = normalizedPattern.replace(/[.+?^${}()|[\]\\]/g, '\\$&').replaceAll('*', '.*');
|
|
7
|
+
return new RegExp(`^${escaped}$`, 'u').test(normalize(value));
|
|
8
|
+
}
|
|
9
|
+
function ruleScore(rule, tool) {
|
|
10
|
+
if (!globMatches(rule.toolPattern, tool.name))
|
|
11
|
+
return undefined;
|
|
12
|
+
if (rule.namespace && !globMatches(rule.namespace, tool.serverName))
|
|
13
|
+
return undefined;
|
|
14
|
+
const description = normalize(tool.description);
|
|
15
|
+
const terms = rule.descriptionTerms || [];
|
|
16
|
+
const matches = terms.filter((term) => description.includes(normalize(term))).length;
|
|
17
|
+
if (terms.length > 0 && matches === 0)
|
|
18
|
+
return undefined;
|
|
19
|
+
const specificity = rule.toolPattern.replaceAll('*', '').length + (rule.namespace?.replaceAll('*', '').length || 0);
|
|
20
|
+
return rule.priority * 10_000 + specificity * 10 + matches;
|
|
21
|
+
}
|
|
22
|
+
export function classifyTools(tools, rules) {
|
|
23
|
+
return tools.map((tool) => {
|
|
24
|
+
let selected;
|
|
25
|
+
let selectedScore = -1;
|
|
26
|
+
for (const rule of rules) {
|
|
27
|
+
const score = ruleScore(rule, tool);
|
|
28
|
+
if (score !== undefined && score > selectedScore) {
|
|
29
|
+
selected = rule;
|
|
30
|
+
selectedScore = score;
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
if (!selected) {
|
|
34
|
+
return {
|
|
35
|
+
...tool,
|
|
36
|
+
classification: {
|
|
37
|
+
category: 'Unknown',
|
|
38
|
+
capabilities: [],
|
|
39
|
+
riskScore: 50,
|
|
40
|
+
riskLevel: 'medium',
|
|
41
|
+
sensitive: true,
|
|
42
|
+
verified: false,
|
|
43
|
+
rationale: 'No trusted classification rule matched this declared tool.',
|
|
44
|
+
source: 'unknown',
|
|
45
|
+
},
|
|
46
|
+
};
|
|
47
|
+
}
|
|
48
|
+
return {
|
|
49
|
+
...tool,
|
|
50
|
+
classification: {
|
|
51
|
+
ruleId: selected.id,
|
|
52
|
+
category: selected.category,
|
|
53
|
+
capabilities: selected.capabilities,
|
|
54
|
+
riskScore: selected.riskScore,
|
|
55
|
+
riskLevel: selected.riskLevel,
|
|
56
|
+
sensitive: selected.sensitive,
|
|
57
|
+
verified: selected.verified,
|
|
58
|
+
rationale: selected.rationale,
|
|
59
|
+
source: selected.id.startsWith('db:') ? 'database' : selected.verified ? 'built-in' : 'heuristic',
|
|
60
|
+
},
|
|
61
|
+
};
|
|
62
|
+
});
|
|
63
|
+
}
|
|
64
|
+
//# sourceMappingURL=classifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/classification/classifier.ts"],"names":[],"mappings":"AAEA,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9F,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,IAAkB;IAC7D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACpH,OAAO,IAAI,CAAC,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,KAA2B;IAC9E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,QAAwC,CAAC;QAC7C,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;gBACjD,QAAQ,GAAG,IAAI,CAAC;gBAChB,aAAa,GAAG,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,GAAG,IAAI;gBACP,cAAc,EAAE;oBACd,QAAQ,EAAE,SAAS;oBACnB,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,QAAQ;oBACnB,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,4DAA4D;oBACvE,MAAM,EAAE,SAAS;iBAClB;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,cAAc,EAAE;gBACd,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;aAClG;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
|
package/dist/cli.d.ts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}
|