slaunt 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,119 @@
+export type ClientId = 'claude-code' | 'claude-desktop' | 'codex';
+export type TransportKind = 'stdio' | 'http' | 'sse' | 'unknown';
+export type Severity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export type ClassificationSource = 'database' | 'built-in' | 'heuristic' | 'unknown';
+export type Capability = 'read-data' | 'write-data' | 'read-files' | 'write-files' | 'delete-data' | 'execute-code' | 'execute-shell' | 'read-secrets' | 'manage-auth' | 'network-access' | 'deploy-production' | 'edit-code' | 'create-pull-request' | 'merge-pull-request' | 'administer-system' | 'control-browser' | 'send-message';
+export interface ClientDetection {
+    id: ClientId;
+    label: string;
+    detected: boolean;
+    sources: string[];
+}
+export interface ServerConfig {
+    id: string;
+    client: ClientId;
+    clientLabel: string;
+    name: string;
+    transport: TransportKind;
+    sourcePath: string;
+    scope: 'user' | 'project' | 'desktop' | 'custom';
+    command?: string;
+    args: string[];
+    env: Record<string, string>;
+    envKeys: string[];
+    url?: string;
+    headers: Record<string, string>;
+    headerKeys: string[];
+    enabled: boolean;
+}
+export interface DiscoveredConfiguration {
+    clients: ClientDetection[];
+    servers: ServerConfig[];
+    warnings: string[];
+}
+export interface DeclaredTool {
+    serverId: string;
+    serverName: string;
+    client: ClientId;
+    clientLabel: string;
+    name: string;
+    description: string;
+    inputSchema?: Record<string, unknown>;
+}
+export interface ServerProbe {
+    serverId: string;
+    status: 'ok' | 'skipped' | 'failed';
+    tools: DeclaredTool[];
+    message?: string;
+}
+export interface ClassificationRule {
+    id: string;
+    namespace?: string;
+    toolPattern: string;
+    descriptionTerms?: string[];
+    category: string;
+    capabilities: Capability[];
+    riskScore: number;
+    riskLevel: Severity;
+    sensitive: boolean;
+    verified: boolean;
+    rationale: string;
+    priority: number;
+}
+export interface ClassifiedTool extends DeclaredTool {
+    classification: {
+        ruleId?: string;
+        category: string;
+        capabilities: Capability[];
+        riskScore: number;
+        riskLevel: Severity;
+        sensitive: boolean;
+        verified: boolean;
+        rationale: string;
+        source: ClassificationSource;
+    };
+}
+export interface Finding {
+    id: string;
+    severity: Severity;
+    title: string;
+    serverNames: string[];
+    toolNames: string[];
+    access: string[];
+    why: string;
+    recommendation: string;
+    clients: ClientId[];
+}
+export interface AuditSummary {
+    clientsDetected: number;
+    servers: number;
+    tools: number;
+    classified: number;
+    sensitiveCapabilities: number;
+    highRiskFindings: number;
+    unclassified: number;
+    postureScore: number;
+}
+export interface AuditResult {
+    schemaVersion: 1;
+    generatedAt: string;
+    privacy: {
+        uploadedAuditData: false;
+        catalogSource: 'database' | 'cache' | 'built-in';
+        startedConfiguredServers: boolean;
+    };
+    discovery: DiscoveredConfiguration;
+    probes: ServerProbe[];
+    tools: ClassifiedTool[];
+    findings: Finding[];
+    summary: AuditSummary;
+    reportPath?: string;
+}
+export interface InstallChange {
+    client: ClientId;
+    path: string;
+    status: 'installed' | 'already-present' | 'skipped' | 'failed';
+    backupPath?: string;
+    message?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AACjE,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;AAErF,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,aAAa,GACb,cAAc,GACd,eAAe,GACf,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,WAAW,GACX,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,QAAQ,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,QAAQ,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,cAAc,EAAE;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,UAAU,EAAE,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,QAAQ,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,oBAAoB,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,iBAAiB,EAAE,KAAK,CAAC;QACzB,aAAa,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;QACjD,wBAAwB,EAAE,OAAO,CAAC;KACnC,CAAC;IACF,SAAS,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "slaunt",
+  "version": "0.1.0",
+  "description": "Privacy-first MCP agent access auditor for Claude and Codex",
+  "type": "module",
+  "bin": {
+    "slaunt": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "tsc --noEmit",
+    "test": "npm run build && vitest run",
+    "test:watch": "vitest",
+    "audit:demo": "npm run build && node dist/cli.js audit --demo --no-open --no-install-slaunt",
+    "prepublishOnly": "npm run check && npm test"
+  },
+  "engines": {
+    "node": ">=20.17.0"
+  },
+  "keywords": [
+    "mcp",
+    "security",
+    "audit",
+    "claude",
+    "codex",
+    "agent"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kerodem/slaunt-audit.git"
+  },
+  "bugs": {
+    "url": "https://github.com/kerodem/slaunt-audit/issues"
+  },
+  "homepage": "https://github.com/kerodem/slaunt-audit#readme",
+  "license": "MIT",
+  "dependencies": {
+    "@inquirer/prompts": "8.5.2",
+    "@modelcontextprotocol/sdk": "1.30.0",
+    "chalk": "6.0.0",
+    "open": "11.0.0",
+    "ora": "9.4.1",
+    "smol-toml": "1.7.1",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "24.10.1",
+    "typescript": "7.0.2",
+    "vitest": "4.1.10"
+  }
+}