slaunt 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/LICENSE +201 -0
  2. package/README.md +152 -0
  3. package/dist/audit/risk-engine.d.ts +4 -0
  4. package/dist/audit/risk-engine.d.ts.map +1 -0
  5. package/dist/audit/risk-engine.js +173 -0
  6. package/dist/audit/risk-engine.js.map +1 -0
  7. package/dist/audit/run.d.ts +13 -0
  8. package/dist/audit/run.d.ts.map +1 -0
  9. package/dist/audit/run.js +55 -0
  10. package/dist/audit/run.js.map +1 -0
  11. package/dist/classification/builtin-catalog.d.ts +3 -0
  12. package/dist/classification/builtin-catalog.d.ts.map +1 -0
  13. package/dist/classification/builtin-catalog.js +283 -0
  14. package/dist/classification/builtin-catalog.js.map +1 -0
  15. package/dist/classification/catalog.d.ts +10 -0
  16. package/dist/classification/catalog.d.ts.map +1 -0
  17. package/dist/classification/catalog.js +139 -0
  18. package/dist/classification/catalog.js.map +1 -0
  19. package/dist/classification/classifier.d.ts +3 -0
  20. package/dist/classification/classifier.d.ts.map +1 -0
  21. package/dist/classification/classifier.js +64 -0
  22. package/dist/classification/classifier.js.map +1 -0
  23. package/dist/cli.d.ts +3 -0
  24. package/dist/cli.d.ts.map +1 -0
  25. package/dist/cli.js +187 -0
  26. package/dist/cli.js.map +1 -0
  27. package/dist/config/discover.d.ts +8 -0
  28. package/dist/config/discover.d.ts.map +1 -0
  29. package/dist/config/discover.js +123 -0
  30. package/dist/config/discover.js.map +1 -0
  31. package/dist/config/install.d.ts +10 -0
  32. package/dist/config/install.d.ts.map +1 -0
  33. package/dist/config/install.js +143 -0
  34. package/dist/config/install.js.map +1 -0
  35. package/dist/config/paths.d.ts +17 -0
  36. package/dist/config/paths.d.ts.map +1 -0
  37. package/dist/config/paths.js +84 -0
  38. package/dist/config/paths.js.map +1 -0
  39. package/dist/demo.d.ts +4 -0
  40. package/dist/demo.d.ts.map +1 -0
  41. package/dist/demo.js +99 -0
  42. package/dist/demo.js.map +1 -0
  43. package/dist/mcp/introspect.d.ts +9 -0
  44. package/dist/mcp/introspect.d.ts.map +1 -0
  45. package/dist/mcp/introspect.js +153 -0
  46. package/dist/mcp/introspect.js.map +1 -0
  47. package/dist/report/html.d.ts +4 -0
  48. package/dist/report/html.d.ts.map +1 -0
  49. package/dist/report/html.js +96 -0
  50. package/dist/report/html.js.map +1 -0
  51. package/dist/tui/render.d.ts +4 -0
  52. package/dist/tui/render.d.ts.map +1 -0
  53. package/dist/tui/render.js +132 -0
  54. package/dist/tui/render.js.map +1 -0
  55. package/dist/types.d.ts +119 -0
  56. package/dist/types.d.ts.map +1 -0
  57. package/dist/types.js +2 -0
  58. package/dist/types.js.map +1 -0
  59. package/package.json +56 -0
@@ -0,0 +1,283 @@
1
+ export const BUILTIN_CATALOG = [
2
+ {
3
+ id: 'deploy-production',
4
+ toolPattern: '*deploy*',
5
+ descriptionTerms: ['deploy', 'production'],
6
+ category: 'Deployment',
7
+ capabilities: ['deploy-production', 'write-data', 'network-access'],
8
+ riskScore: 96,
9
+ riskLevel: 'critical',
10
+ sensitive: true,
11
+ verified: true,
12
+ rationale: 'Can change a deployed production environment.',
13
+ priority: 100,
14
+ },
15
+ {
16
+ id: 'shell-execution',
17
+ toolPattern: '*exec*command*',
18
+ category: 'Shell',
19
+ capabilities: ['execute-shell', 'execute-code', 'read-files', 'write-files'],
20
+ riskScore: 90,
21
+ riskLevel: 'high',
22
+ sensitive: true,
23
+ verified: true,
24
+ rationale: 'Can execute arbitrary operating-system commands.',
25
+ priority: 95,
26
+ },
27
+ {
28
+ id: 'shell-run',
29
+ namespace: '*shell*',
30
+ toolPattern: '*run*command*',
31
+ category: 'Shell',
32
+ capabilities: ['execute-shell', 'execute-code', 'read-files', 'write-files'],
33
+ riskScore: 90,
34
+ riskLevel: 'high',
35
+ sensitive: true,
36
+ verified: true,
37
+ rationale: 'Can execute commands through a shell-capable server.',
38
+ priority: 94,
39
+ },
40
+ {
41
+ id: 'secrets-read',
42
+ namespace: '*secret*',
43
+ toolPattern: '*',
44
+ category: 'Secrets',
45
+ capabilities: ['read-secrets'],
46
+ riskScore: 88,
47
+ riskLevel: 'high',
48
+ sensitive: true,
49
+ verified: true,
50
+ rationale: 'Can read or enumerate credential material.',
51
+ priority: 92,
52
+ },
53
+ {
54
+ id: 'github-merge',
55
+ namespace: '*github*',
56
+ toolPattern: '*merge*pull*request*',
57
+ category: 'Source control',
58
+ capabilities: ['merge-pull-request', 'edit-code', 'write-data'],
59
+ riskScore: 86,
60
+ riskLevel: 'high',
61
+ sensitive: true,
62
+ verified: true,
63
+ rationale: 'Can merge changes into a repository branch.',
64
+ priority: 90,
65
+ },
66
+ {
67
+ id: 'github-delete',
68
+ namespace: '*github*',
69
+ toolPattern: '*delete*',
70
+ category: 'Source control',
71
+ capabilities: ['delete-data', 'edit-code', 'write-data'],
72
+ riskScore: 86,
73
+ riskLevel: 'high',
74
+ sensitive: true,
75
+ verified: true,
76
+ rationale: 'Can delete repository content or references.',
77
+ priority: 89,
78
+ },
79
+ {
80
+ id: 'github-write-code',
81
+ namespace: '*github*',
82
+ toolPattern: '*update*file*',
83
+ category: 'Source control',
84
+ capabilities: ['edit-code', 'write-data'],
85
+ riskScore: 75,
86
+ riskLevel: 'high',
87
+ sensitive: true,
88
+ verified: true,
89
+ rationale: 'Can edit source-controlled files.',
90
+ priority: 85,
91
+ },
92
+ {
93
+ id: 'github-create-code',
94
+ namespace: '*github*',
95
+ toolPattern: '*create*file*',
96
+ category: 'Source control',
97
+ capabilities: ['edit-code', 'write-data'],
98
+ riskScore: 75,
99
+ riskLevel: 'high',
100
+ sensitive: true,
101
+ verified: true,
102
+ rationale: 'Can create source-controlled files.',
103
+ priority: 85,
104
+ },
105
+ {
106
+ id: 'github-pr-create',
107
+ namespace: '*github*',
108
+ toolPattern: '*create*pull*request*',
109
+ category: 'Source control',
110
+ capabilities: ['create-pull-request', 'write-data'],
111
+ riskScore: 65,
112
+ riskLevel: 'medium',
113
+ sensitive: true,
114
+ verified: true,
115
+ rationale: 'Can create pull requests visible to collaborators.',
116
+ priority: 82,
117
+ },
118
+ {
119
+ id: 'filesystem-delete',
120
+ namespace: '*file*',
121
+ toolPattern: '*delete*',
122
+ category: 'Filesystem',
123
+ capabilities: ['delete-data', 'write-files'],
124
+ riskScore: 84,
125
+ riskLevel: 'high',
126
+ sensitive: true,
127
+ verified: true,
128
+ rationale: 'Can remove local files.',
129
+ priority: 88,
130
+ },
131
+ {
132
+ id: 'filesystem-write',
133
+ namespace: '*file*',
134
+ toolPattern: '*write*',
135
+ category: 'Filesystem',
136
+ capabilities: ['write-files'],
137
+ riskScore: 70,
138
+ riskLevel: 'high',
139
+ sensitive: true,
140
+ verified: true,
141
+ rationale: 'Can write local files.',
142
+ priority: 80,
143
+ },
144
+ {
145
+ id: 'filesystem-edit',
146
+ namespace: '*file*',
147
+ toolPattern: '*edit*',
148
+ category: 'Filesystem',
149
+ capabilities: ['write-files'],
150
+ riskScore: 70,
151
+ riskLevel: 'high',
152
+ sensitive: true,
153
+ verified: true,
154
+ rationale: 'Can modify local files.',
155
+ priority: 80,
156
+ },
157
+ {
158
+ id: 'filesystem-read',
159
+ namespace: '*file*',
160
+ toolPattern: '*read*',
161
+ category: 'Filesystem',
162
+ capabilities: ['read-files'],
163
+ riskScore: 45,
164
+ riskLevel: 'medium',
165
+ sensitive: true,
166
+ verified: true,
167
+ rationale: 'Can read local files that may contain sensitive data.',
168
+ priority: 70,
169
+ },
170
+ {
171
+ id: 'auth-management',
172
+ toolPattern: '*auth*',
173
+ descriptionTerms: ['user'],
174
+ category: 'Identity',
175
+ capabilities: ['manage-auth', 'write-data'],
176
+ riskScore: 80,
177
+ riskLevel: 'high',
178
+ sensitive: true,
179
+ verified: false,
180
+ rationale: 'May change authentication or identity state.',
181
+ priority: 75,
182
+ },
183
+ {
184
+ id: 'database-write',
185
+ toolPattern: '*execute*sql*',
186
+ category: 'Database',
187
+ capabilities: ['read-data', 'write-data', 'delete-data'],
188
+ riskScore: 85,
189
+ riskLevel: 'high',
190
+ sensitive: true,
191
+ verified: true,
192
+ rationale: 'Can execute SQL that may read or modify database state.',
193
+ priority: 86,
194
+ },
195
+ {
196
+ id: 'database-query',
197
+ toolPattern: '*query*',
198
+ descriptionTerms: ['database'],
199
+ category: 'Database',
200
+ capabilities: ['read-data'],
201
+ riskScore: 48,
202
+ riskLevel: 'medium',
203
+ sensitive: true,
204
+ verified: false,
205
+ rationale: 'Can query a data store.',
206
+ priority: 55,
207
+ },
208
+ {
209
+ id: 'browser-control',
210
+ namespace: '*browser*',
211
+ toolPattern: '*',
212
+ category: 'Browser automation',
213
+ capabilities: ['control-browser', 'network-access'],
214
+ riskScore: 62,
215
+ riskLevel: 'medium',
216
+ sensitive: true,
217
+ verified: true,
218
+ rationale: 'Can interact with websites using the user browser context.',
219
+ priority: 68,
220
+ },
221
+ {
222
+ id: 'computer-control',
223
+ namespace: '*computer*',
224
+ toolPattern: '*',
225
+ category: 'Computer control',
226
+ capabilities: ['execute-code', 'control-browser'],
227
+ riskScore: 82,
228
+ riskLevel: 'high',
229
+ sensitive: true,
230
+ verified: true,
231
+ rationale: 'Can control local applications or the desktop.',
232
+ priority: 72,
233
+ },
234
+ {
235
+ id: 'message-send',
236
+ toolPattern: '*send*message*',
237
+ category: 'Communications',
238
+ capabilities: ['send-message', 'write-data', 'network-access'],
239
+ riskScore: 66,
240
+ riskLevel: 'medium',
241
+ sensitive: true,
242
+ verified: true,
243
+ rationale: 'Can communicate externally as the configured user.',
244
+ priority: 67,
245
+ },
246
+ {
247
+ id: 'read-list-get',
248
+ toolPattern: '*list*',
249
+ category: 'Read-only data',
250
+ capabilities: ['read-data'],
251
+ riskScore: 22,
252
+ riskLevel: 'low',
253
+ sensitive: false,
254
+ verified: false,
255
+ rationale: 'Appears to list data without changing state.',
256
+ priority: 20,
257
+ },
258
+ {
259
+ id: 'read-get',
260
+ toolPattern: '*get*',
261
+ category: 'Read-only data',
262
+ capabilities: ['read-data'],
263
+ riskScore: 22,
264
+ riskLevel: 'low',
265
+ sensitive: false,
266
+ verified: false,
267
+ rationale: 'Appears to retrieve data without changing state.',
268
+ priority: 20,
269
+ },
270
+ {
271
+ id: 'read-search',
272
+ toolPattern: '*search*',
273
+ category: 'Read-only data',
274
+ capabilities: ['read-data'],
275
+ riskScore: 25,
276
+ riskLevel: 'low',
277
+ sensitive: false,
278
+ verified: false,
279
+ rationale: 'Appears to search data without changing state.',
280
+ priority: 20,
281
+ },
282
+ ];
283
+ //# sourceMappingURL=builtin-catalog.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"builtin-catalog.js","sourceRoot":"","sources":["../../src/classification/builtin-catalog.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD;QACE,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC1C,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,gBAAgB,CAAC;QACnE,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,+CAA+C;QAC1D,QAAQ,EAAE,GAAG;KACd;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC;QAC5E,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,kDAAkD;QAC7D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,WAAW;QACf,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC;QAC5E,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,sDAAsD;QACjE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,4CAA4C;QACvD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,oBAAoB,EAAE,WAAW,EAAE,YAAY,CAAC;QAC/D,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,6CAA6C;QACxD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACzC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,mCAAmC;QAC9C,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACzC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,qCAAqC;QAChD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,qBAAqB,EAAE,YAAY,CAAC;QACnD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,oDAAoD;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;QAC5C,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,wBAAwB;QACnC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,YAAY,CAAC;QAC5B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,uDAAuD;QAClE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,QAAQ;QACrB,gBAAgB,EAAE,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;QAC3C,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,yDAAyD;QACpE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,SAAS;QACtB,gBAAgB,EAAE,CAAC,UAAU,CAAC;QAC9B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,oBAAoB;QAC9B,YAAY,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;QACnD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,4DAA4D;QACvE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;QACjD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,gDAAgD;QAC3D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,gBAAgB,CAAC;QAC9D,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,oDAAoD;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,8CAA8C;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,kDAAkD;QAC7D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,gDAAgD;QAC3D,QAAQ,EAAE,EAAE;KACb;CACF,CAAC"}
@@ -0,0 +1,10 @@
1
+ import type { ClassificationRule } from '../types.js';
2
+ export interface CatalogResult {
3
+ rules: ClassificationRule[];
4
+ source: 'database' | 'cache' | 'built-in';
5
+ warning?: string;
6
+ }
7
+ export declare function loadCatalog(options?: {
8
+ offline?: boolean;
9
+ }): Promise<CatalogResult>;
10
+ //# sourceMappingURL=catalog.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/classification/catalog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA+GlE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,WAAW,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CA0B7F"}
@@ -0,0 +1,139 @@
1
+ import { randomBytes } from 'node:crypto';
2
+ import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
3
+ import { dirname, join, resolve } from 'node:path';
4
+ import { z } from 'zod';
5
+ import { BUILTIN_CATALOG } from './builtin-catalog.js';
6
+ const capabilities = [
7
+ 'read-data', 'write-data', 'read-files', 'write-files', 'delete-data', 'execute-code',
8
+ 'execute-shell', 'read-secrets', 'manage-auth', 'network-access', 'deploy-production',
9
+ 'edit-code', 'create-pull-request', 'merge-pull-request', 'administer-system',
10
+ 'control-browser', 'send-message',
11
+ ];
12
+ const databaseRowSchema = z.object({
13
+ id: z.union([z.string(), z.number()]).transform(String),
14
+ namespace: z.string().max(200).nullable().optional(),
15
+ tool_pattern: z.string().min(1).max(200),
16
+ description_terms: z.array(z.string().min(1).max(100)).max(20).default([]),
17
+ category: z.string().min(1).max(100),
18
+ capabilities: z.array(z.enum(capabilities)).max(20),
19
+ risk_score: z.number().int().min(0).max(100),
20
+ risk_level: z.enum(['critical', 'high', 'medium', 'low', 'info']),
21
+ sensitive: z.boolean(),
22
+ verified: z.boolean(),
23
+ rationale: z.string().min(1).max(500),
24
+ priority: z.number().int().min(0).max(1000),
25
+ });
26
+ const cacheSchema = z.object({
27
+ fetchedAt: z.string(),
28
+ rules: z.array(databaseRowSchema).max(10_000),
29
+ });
30
+ function cachePath() {
31
+ const home = process.env.SLAUNT_AUDIT_HOME || process.env.HOME || process.cwd();
32
+ return resolve(process.env.SLAUNT_AUDIT_CACHE || join(home, '.cache', 'slaunt', 'catalog-v1.json'));
33
+ }
34
+ function mapRule(row) {
35
+ return {
36
+ id: `db:${row.id}`,
37
+ ...(row.namespace ? { namespace: row.namespace } : {}),
38
+ toolPattern: row.tool_pattern,
39
+ ...(row.description_terms.length > 0 ? { descriptionTerms: row.description_terms } : {}),
40
+ category: row.category,
41
+ capabilities: row.capabilities,
42
+ riskScore: row.risk_score,
43
+ riskLevel: row.risk_level,
44
+ sensitive: row.sensitive,
45
+ verified: row.verified,
46
+ rationale: row.rationale,
47
+ priority: row.priority + 1_000,
48
+ };
49
+ }
50
+ async function readCache() {
51
+ try {
52
+ const raw = await readFile(cachePath(), 'utf8');
53
+ const parsed = cacheSchema.parse(JSON.parse(raw));
54
+ const age = Date.now() - Date.parse(parsed.fetchedAt);
55
+ if (!Number.isFinite(age) || age > 7 * 24 * 60 * 60 * 1000)
56
+ return undefined;
57
+ return parsed.rules.map(mapRule);
58
+ }
59
+ catch {
60
+ return undefined;
61
+ }
62
+ }
63
+ async function writeCache(rows) {
64
+ const path = cachePath();
65
+ const temporary = join(dirname(path), `.${randomBytes(12).toString('hex')}.tmp`);
66
+ await mkdir(dirname(path), { recursive: true, mode: 0o700 });
67
+ await writeFile(temporary, `${JSON.stringify({ fetchedAt: new Date().toISOString(), rules: rows })}\n`, {
68
+ encoding: 'utf8',
69
+ mode: 0o600,
70
+ flag: 'wx',
71
+ });
72
+ await rename(temporary, path);
73
+ }
74
+ function validatedSupabaseUrl(raw) {
75
+ const url = new URL(raw);
76
+ const local = ['localhost', '127.0.0.1', '::1'].includes(url.hostname);
77
+ if (url.username || url.password || url.hash || (url.protocol !== 'https:' && !(local && url.protocol === 'http:'))) {
78
+ throw new Error('Supabase URL must be credential-free HTTPS (or localhost HTTP)');
79
+ }
80
+ return url;
81
+ }
82
+ async function fetchDatabaseRules() {
83
+ const rawUrl = process.env.SLAUNT_SUPABASE_URL;
84
+ const key = process.env.SLAUNT_SUPABASE_PUBLISHABLE_KEY || process.env.SLAUNT_SUPABASE_ANON_KEY;
85
+ if (!rawUrl || !key)
86
+ throw new Error('Supabase catalog is not configured');
87
+ const base = validatedSupabaseUrl(rawUrl);
88
+ const endpoint = new URL('/rest/v1/tool_classification_catalog', base);
89
+ endpoint.searchParams.set('select', 'id,namespace,tool_pattern,description_terms,category,capabilities,risk_score,risk_level,sensitive,verified,rationale,priority');
90
+ endpoint.searchParams.set('active', 'eq.true');
91
+ endpoint.searchParams.set('order', 'priority.desc');
92
+ endpoint.searchParams.set('limit', '10000');
93
+ const controller = new AbortController();
94
+ const timeout = setTimeout(() => controller.abort(), 5_000);
95
+ try {
96
+ const headers = { apikey: key, accept: 'application/json' };
97
+ if (key.split('.').length === 3)
98
+ headers.authorization = `Bearer ${key}`;
99
+ const response = await fetch(endpoint, { headers, signal: controller.signal, redirect: 'error' });
100
+ if (!response.ok)
101
+ throw new Error(`catalog request returned HTTP ${response.status}`);
102
+ const body = await response.text();
103
+ if (body.length > 2 * 1024 * 1024)
104
+ throw new Error('catalog response exceeded 2 MiB');
105
+ return z.array(databaseRowSchema).max(10_000).parse(JSON.parse(body));
106
+ }
107
+ finally {
108
+ clearTimeout(timeout);
109
+ }
110
+ }
111
+ export async function loadCatalog(options = {}) {
112
+ if (!options.offline && process.env.SLAUNT_SUPABASE_URL) {
113
+ try {
114
+ const rows = await fetchDatabaseRules();
115
+ await writeCache(rows).catch(() => undefined);
116
+ return { rules: [...rows.map(mapRule), ...BUILTIN_CATALOG], source: 'database' };
117
+ }
118
+ catch (error) {
119
+ const cached = await readCache();
120
+ if (cached) {
121
+ return {
122
+ rules: [...cached, ...BUILTIN_CATALOG],
123
+ source: 'cache',
124
+ warning: error instanceof Error ? error.message : 'database catalog unavailable',
125
+ };
126
+ }
127
+ return {
128
+ rules: BUILTIN_CATALOG,
129
+ source: 'built-in',
130
+ warning: error instanceof Error ? error.message : 'database catalog unavailable',
131
+ };
132
+ }
133
+ }
134
+ const cached = options.offline ? undefined : await readCache();
135
+ return cached
136
+ ? { rules: [...cached, ...BUILTIN_CATALOG], source: 'cache' }
137
+ : { rules: BUILTIN_CATALOG, source: 'built-in' };
138
+ }
139
+ //# sourceMappingURL=catalog.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/classification/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,YAAY,GAAG;IACnB,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc;IACrF,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB;IACrF,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,mBAAmB;IAC7E,iBAAiB,EAAE,cAAc;CACO,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CAC9C,CAAC,CAAC;AAEH,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChF,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,OAAO,CAAC,GAAsC;IACrD,OAAO;QACL,EAAE,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE;QAClB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAAE,OAAO,SAAS,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAyC;IACjE,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;QACtG,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAChG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,+HAA+H,CAAC,CAAC;IACrK,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpF,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,GAAG,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAO,GAA0B,EAAE;IACnE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACxC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC;oBACtC,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;iBACjF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC;IAC/D,OAAO,MAAM;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;QAC7D,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { ClassificationRule, ClassifiedTool, DeclaredTool } from '../types.js';
2
+ export declare function classifyTools(tools: DeclaredTool[], rules: ClassificationRule[]): ClassifiedTool[];
3
+ //# sourceMappingURL=classifier.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../src/classification/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAuBpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,cAAc,EAAE,CA2ClG"}
@@ -0,0 +1,64 @@
1
+ function normalize(value) {
2
+ return value.toLowerCase().replace(/[^a-z0-9]+/g, '_').replace(/^_+|_+$/g, '');
3
+ }
4
+ function globMatches(pattern, value) {
5
+ const normalizedPattern = pattern.toLowerCase().replace(/[^a-z0-9*]+/g, '_').replace(/^_+|_+$/g, '');
6
+ const escaped = normalizedPattern.replace(/[.+?^${}()|[\]\\]/g, '\\$&').replaceAll('*', '.*');
7
+ return new RegExp(`^${escaped}$`, 'u').test(normalize(value));
8
+ }
9
+ function ruleScore(rule, tool) {
10
+ if (!globMatches(rule.toolPattern, tool.name))
11
+ return undefined;
12
+ if (rule.namespace && !globMatches(rule.namespace, tool.serverName))
13
+ return undefined;
14
+ const description = normalize(tool.description);
15
+ const terms = rule.descriptionTerms || [];
16
+ const matches = terms.filter((term) => description.includes(normalize(term))).length;
17
+ if (terms.length > 0 && matches === 0)
18
+ return undefined;
19
+ const specificity = rule.toolPattern.replaceAll('*', '').length + (rule.namespace?.replaceAll('*', '').length || 0);
20
+ return rule.priority * 10_000 + specificity * 10 + matches;
21
+ }
22
+ export function classifyTools(tools, rules) {
23
+ return tools.map((tool) => {
24
+ let selected;
25
+ let selectedScore = -1;
26
+ for (const rule of rules) {
27
+ const score = ruleScore(rule, tool);
28
+ if (score !== undefined && score > selectedScore) {
29
+ selected = rule;
30
+ selectedScore = score;
31
+ }
32
+ }
33
+ if (!selected) {
34
+ return {
35
+ ...tool,
36
+ classification: {
37
+ category: 'Unknown',
38
+ capabilities: [],
39
+ riskScore: 50,
40
+ riskLevel: 'medium',
41
+ sensitive: true,
42
+ verified: false,
43
+ rationale: 'No trusted classification rule matched this declared tool.',
44
+ source: 'unknown',
45
+ },
46
+ };
47
+ }
48
+ return {
49
+ ...tool,
50
+ classification: {
51
+ ruleId: selected.id,
52
+ category: selected.category,
53
+ capabilities: selected.capabilities,
54
+ riskScore: selected.riskScore,
55
+ riskLevel: selected.riskLevel,
56
+ sensitive: selected.sensitive,
57
+ verified: selected.verified,
58
+ rationale: selected.rationale,
59
+ source: selected.id.startsWith('db:') ? 'database' : selected.verified ? 'built-in' : 'heuristic',
60
+ },
61
+ };
62
+ });
63
+ }
64
+ //# sourceMappingURL=classifier.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/classification/classifier.ts"],"names":[],"mappings":"AAEA,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9F,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,IAAkB;IAC7D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACpH,OAAO,IAAI,CAAC,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,KAA2B;IAC9E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,QAAwC,CAAC;QAC7C,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;gBACjD,QAAQ,GAAG,IAAI,CAAC;gBAChB,aAAa,GAAG,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,GAAG,IAAI;gBACP,cAAc,EAAE;oBACd,QAAQ,EAAE,SAAS;oBACnB,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,QAAQ;oBACnB,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,4DAA4D;oBACvE,MAAM,EAAE,SAAS;iBAClB;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,cAAc,EAAE;gBACd,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;aAClG;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
package/dist/cli.d.ts ADDED
@@ -0,0 +1,3 @@
1
+ #!/usr/bin/env node
2
+ export {};
3
+ //# sourceMappingURL=cli.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}