vaspera 2.5.0

package/dist/scanners/agent/payloads/index.js

@@ -0,0 +1,184 @@
+/**
+ * Prompt Injection Payload Corpus Loader
+ *
+ * Loads and manages injection payloads for fuzzing MCP tool inputs.
+ * Payloads are organized by category and can be extended with custom payloads.
+ *
+ * @module scanners/agent/payloads
+ */
+import { readFile, readdir } from "fs/promises";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+/**
+ * Corpus size presets
+ */
+export const CORPUS_SIZES = {
+    quick: 50, // Fast CI runs
+    standard: 200, // Default comprehensive
+    thorough: 500, // Deep analysis
+};
+/**
+ * Load all payloads from a category file
+ */
+async function loadCategoryFile(filePath) {
+    try {
+        const content = await readFile(filePath, "utf-8");
+        const data = JSON.parse(content);
+        return data.payloads.map((p) => ({
+            id: p.id,
+            text: p.text,
+            category: data.category,
+            severity: p.severity,
+            description: p.description,
+            tags: p.tags,
+            source: data.source,
+        }));
+    }
+    catch (error) {
+        console.warn(`Failed to load payload file ${filePath}:`, error);
+        return [];
+    }
+}
+/**
+ * Load custom payloads from a directory
+ */
+async function loadCustomPayloads(customDir) {
+    try {
+        const files = await readdir(customDir);
+        const jsonFiles = files.filter((f) => f.endsWith(".json"));
+        const payloads = [];
+        for (const file of jsonFiles) {
+            const filePath = join(customDir, file);
+            const loaded = await loadCategoryFile(filePath);
+            payloads.push(...loaded);
+        }
+        return payloads;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Load all payloads with optional filtering
+ */
+export async function loadPayloads(options) {
+    const payloads = [];
+    // Load built-in payloads
+    const builtInFiles = [
+        "override-instructions.json",
+        "exfil-prompts.json",
+        "homoglyphs.json",
+        "tag-smuggling.json",
+        "indirect-injection.json",
+        "jailbreak.json",
+        "system-prompt-extraction.json",
+        "tool-misuse.json",
+    ];
+    for (const file of builtInFiles) {
+        const filePath = join(__dirname, file);
+        const loaded = await loadCategoryFile(filePath);
+        payloads.push(...loaded);
+    }
+    // Load custom payloads if specified
+    if (options?.customCorpus) {
+        const customPayloads = await loadCustomPayloads(options.customCorpus);
+        payloads.push(...customPayloads);
+    }
+    // Load from default custom directory
+    const defaultCustomDir = join(__dirname, "custom");
+    const defaultCustom = await loadCustomPayloads(defaultCustomDir);
+    payloads.push(...defaultCustom);
+    // Filter by categories if specified
+    let filtered = payloads;
+    if (options?.categories && options.categories.length > 0) {
+        filtered = filtered.filter((p) => options.categories.includes(p.category));
+    }
+    // Filter by minimum severity
+    if (options?.minSeverity) {
+        const severityOrder = {
+            critical: 4,
+            high: 3,
+            medium: 2,
+            low: 1,
+            info: 0,
+        };
+        const minOrder = severityOrder[options.minSeverity];
+        filtered = filtered.filter((p) => severityOrder[p.severity] >= minOrder);
+    }
+    // Limit by corpus size
+    const corpusSize = CORPUS_SIZES[options?.corpus || "standard"];
+    if (filtered.length > corpusSize) {
+        // Prioritize higher severity payloads
+        filtered.sort((a, b) => {
+            const severityOrder = {
+                critical: 4,
+                high: 3,
+                medium: 2,
+                low: 1,
+                info: 0,
+            };
+            return severityOrder[b.severity] - severityOrder[a.severity];
+        });
+        filtered = filtered.slice(0, corpusSize);
+    }
+    return filtered;
+}
+/**
+ * Get payload statistics
+ */
+export async function getPayloadStats() {
+    const payloads = await loadPayloads({ corpus: "thorough" });
+    const byCategory = {
+        "override-instructions": 0,
+        "exfil-prompt": 0,
+        "homoglyph": 0,
+        "tag-smuggling": 0,
+        "indirect-injection": 0,
+        "jailbreak": 0,
+        "system-prompt-extraction": 0,
+        "tool-misuse": 0,
+    };
+    const bySeverity = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    for (const payload of payloads) {
+        byCategory[payload.category]++;
+        bySeverity[payload.severity]++;
+    }
+    return {
+        total: payloads.length,
+        byCategory,
+        bySeverity,
+    };
+}
+/**
+ * Generate a randomized subset of payloads for testing
+ */
+export async function getRandomPayloads(count) {
+    const allPayloads = await loadPayloads({ corpus: "thorough" });
+    // Fisher-Yates shuffle
+    const shuffled = [...allPayloads];
+    for (let i = shuffled.length - 1; i > 0; i--) {
+        const j = Math.floor(Math.random() * (i + 1));
+        [shuffled[i], shuffled[j]] = [shuffled[j], shuffled[i]];
+    }
+    return shuffled.slice(0, Math.min(count, shuffled.length));
+}
+/**
+ * Get payloads by specific tags
+ */
+export async function getPayloadsByTags(tags) {
+    const allPayloads = await loadPayloads({ corpus: "thorough" });
+    return allPayloads.filter((p) => {
+        if (!p.tags)
+            return false;
+        return tags.some((tag) => p.tags.includes(tag));
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/scanners/agent/payloads/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/scanners/agent/payloads/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAIpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAkBtC;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,EAAE,EAAO,eAAe;IAC/B,QAAQ,EAAE,GAAG,EAAG,wBAAwB;IACxC,QAAQ,EAAE,GAAG,EAAG,gBAAgB;CACjC,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE9C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,+BAA+B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAKlC;IACC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,yBAAyB;IACzB,MAAM,YAAY,GAAG;QACnB,4BAA4B;QAC5B,oBAAoB;QACpB,iBAAiB;QACjB,oBAAoB;QACpB,yBAAyB;QACzB,gBAAgB;QAChB,+BAA+B;QAC/B,kBAAkB;KACnB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAEhC,oCAAoC;IACpC,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,MAAM,aAAa,GAA6B;YAC9C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QACF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAED,uBAAuB;IACvB,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,IAAI,UAAU,CAAC,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACjC,sCAAsC;QACtC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,MAAM,aAAa,GAA6B;gBAC9C,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;gBACT,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,CAAC;aACR,CAAC;YACF,OAAO,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IAKnC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAoC;QAClD,uBAAuB,EAAE,CAAC;QAC1B,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,CAAC;QAClB,oBAAoB,EAAE,CAAC;QACvB,WAAW,EAAE,CAAC;QACd,0BAA0B,EAAE,CAAC;QAC7B,aAAa,EAAE,CAAC;KACjB,CAAC;IAEF,MAAM,UAAU,GAA6B;QAC3C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAE/D,uBAAuB;IACvB,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAc;IACpD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAE/D,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/scanners/agent/permission-minimiser.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Permission Minimiser Scanner
+ *
+ * Analyzes tool usage traces to generate permission tightening proposals.
+ * This scanner helps implement the principle of least privilege by:
+ * - Identifying unused tools that can be disabled
+ * - Detecting broad permissions that can be scoped down
+ * - Recommending OAuth scope reductions
+ * - Suggesting file/path access restrictions
+ *
+ * @module scanners/agent/permission-minimiser
+ */
+import type { AgentScannerResult, MCPManifest, PermissionProposal } from "./types.js";
+/**
+ * Run permission minimiser scanner
+ */
+export declare function runPermissionMinimiser(manifest: MCPManifest, options?: {
+    /** Directory containing trace files */
+    tracesDir?: string;
+    /** Output file for proposals */
+    outputFile?: string;
+    /** Minimum confidence threshold (0-100) */
+    minConfidence?: number;
+    /** Minimum risk reduction threshold (0-100) */
+    minRiskReduction?: number;
+}): Promise<AgentScannerResult>;
+/**
+ * Check if permission minimiser is available
+ */
+export declare function checkPermissionMinimiserAvailable(): Promise<{
+    scanner: "permission-minimiser";
+    available: boolean;
+    version: string;
+}>;
+/**
+ * Get permission proposals from scanner result
+ */
+export declare function getPermissionProposals(result: AgentScannerResult): PermissionProposal[];
+/**
+ * Get minimiser summary from result
+ */
+export declare function getMinimiserSummary(result: AgentScannerResult): {
+    totalProposals: number;
+    totalRiskReduction: number;
+    avgConfidence: number;
+    byType: Record<string, number>;
+} | null;
+//# sourceMappingURL=permission-minimiser.d.ts.map

package/dist/scanners/agent/permission-minimiser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-minimiser.d.ts","sourceRoot":"","sources":["../../../src/scanners/agent/permission-minimiser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EAGX,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA+fpB;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IACR,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,OAAO,CAAC,kBAAkB,CAAC,CAyF7B;AAED;;GAEG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC;IACjE,OAAO,EAAE,sBAAsB,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAMD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,kBAAkB,GACzB,kBAAkB,EAAE,CAoCtB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,GAAG,IAAI,CAsBP"}