vaspera 2.5.0

package/dist/scanners/agent/prompt-injection-fuzzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection-fuzzer.js","sourceRoot":"","sources":["../../../src/scanners/agent/prompt-injection-fuzzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAcpC,OAAO,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AAEjE,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,mBAAmB,GAAa;IACpC,sCAAsC;IACtC,oBAAoB;IACpB,qCAAqC;IACrC,mCAAmC;IACnC,uBAAuB;IACvB,cAAc;IACd,mCAAmC;IACnC,kCAAkC;IAClC,mBAAmB;IACnB,YAAY;IACZ,aAAa;IACb,eAAe;IACf,cAAc;IACd,yCAAyC;CAC1C,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAa;IACjC,6CAA6C;IAC7C,QAAQ;IACR,uBAAuB;IACvB,UAAU;IACV,YAAY;IACZ,SAAS;IACT,aAAa;IACb,iBAAiB;IACjB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAAa;IACzC,kBAAkB;IAClB,yBAAyB;IACzB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,gCAAgC;IAChC,8BAA8B;IAC9B,+BAA+B;IAC/B,gCAAgC;IAChC,uDAAuD;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,sBAAsB,GAAa;IACvC,yBAAyB;IACzB,4BAA4B;IAC5B,2BAA2B;IAC3B,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,wBAAwB;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAa;IACrC,+EAA+E;IAC/E,wCAAwC;IACxC,+BAA+B;IAC/B,kDAAkD;IAClD,0BAA0B;IAC1B,cAAc;IACd,QAAQ;IACR,SAAS;IACT,aAAa;CACd,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAa;IACxC,gBAAgB;IAChB,mBAAmB;IACnB,WAAW;IACX,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB,EAAE,oBAAoB;IAC5C,sBAAsB,EAAE,aAAa;IACrC,mBAAmB;CACpB,CAAC;AAEF,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,OAAyB;IAEzB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,kEAAkE;IAClE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,gCAAgC;IAChC,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACvC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,UAAoB,EACpB,eAAyB;IAEzB,oCAAoC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kCAAkC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kCAAkC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B;IAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAmC;IACnC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,mBAAmB,CAC1B,MAAsC;IAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,8CAA8C;IAClE,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;IACxC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBACjE,2CAA2C;gBAC3C,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/E,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,IAAuB,EACvB,OAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,WAA6C,CAAC;IAClE,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAA6D,EAAE,CAAC;IAE5E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,uCAAuC;YACvC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,QAAQ,GAAG,QAAQ,CAAC;IAExB,kBAAkB;IAClB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,sBAAsB,EACtB,uBAAuB,CACxB,CAAC;IACF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,sBAAsB,EACtB,uBAAuB,CACxB,CAAC;IACF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,mBAAmB,EACnB,uBAAuB,CACxB,CAAC;IAEF,uBAAuB;IACvB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,4BAA4B,EAC5B,mBAAmB,CACpB,CAAC;IAEF,6BAA6B;IAC7B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,wCAAwC,EACxC,qBAAqB,CACtB,CAAC;IAEF,yBAAyB;IACzB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,iDAAiD,EACjD,kBAAkB,CACnB,CAAC;IAEF,uBAAuB;IACvB,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;IACvD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAAuB,EACvB,KAA8B,EAC9B,OAAyB;IAEzB,yEAAyE;IACzE,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,uCAAuC;IACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IAED,iCAAiC;IACjC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,eAAe,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjD,CAAC;IAED,+BAA+B;IAC/B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAED,gDAAgD;IAChD,IAAI,iBAAyB,CAAC;IAE9B,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,uBAAuB;YAC1B,sDAAsD;YACtD,IAAI,eAAe,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAChD,iBAAiB,GAAG,eAAe,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iCAAiC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,kDAAkD,CAAC;YACzE,CAAC;YACD,MAAM;QAER,KAAK,cAAc;YACjB,kDAAkD;YAClD,IAAI,eAAe,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAChD,iBAAiB,GAAG,iDAAiD,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,yBAAyB,CAAC;YAChD,CAAC;YACD,MAAM;QAER,KAAK,WAAW;YACd,yDAAyD;YACzD,IAAI,eAAe,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACvD,iBAAiB,GAAG,4CAA4C,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,uCAAuC,CAAC;YAC9D,CAAC;YACD,MAAM;QAER,KAAK,0BAA0B;YAC7B,qBAAqB;YACrB,IAAI,eAAe,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAChD,iBAAiB,GAAG,+CAA+C,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,mCAAmC,CAAC;YAC1D,CAAC;YACD,MAAM;QAER,KAAK,aAAa;YAChB,uBAAuB;YACvB,IAAI,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5C,iBAAiB,GAAG,0CAA0C,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,8BAA8B,CAAC;YACrD,CAAC;YACD,MAAM;QAER;YACE,iBAAiB,GAAG,4CAA4C,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAuB,EACvB,OAAyB,EACzB,OAAsB;IAEtB,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IAExC,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC7C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;gBACtC,IAAI,OAAO,CAAsC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC7D,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CACxD;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAExC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,eAAe,EAAE,OAAO,CAAC,QAAQ;oBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,EAAE,uCAAuC;oBACrD,QAAQ,EAAE,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;oBAC5E,cAAc,EAAE,KAAK;oBACrB,QAAQ,EAAE,MAAM;oBAChB,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,yBAAyB;YACzB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,OAAO;gBACtB,CAAC,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,MAAM,CAAC;YAEX,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,eAAe,EAAE,OAAO,CAAC,QAAQ;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,CAAC,OAAO;gBAChB,QAAQ,EAAE,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAClF,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,UAAU;gBAC9B,QAAQ;gBACR,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,eAAe,EAAE,OAAO,CAAC,QAAQ;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,EAAE,2CAA2C;gBACzD,cAAc,EAAE,KAAK;gBACrB,QAAQ,EAAE,MAAM;gBAChB,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAqB;IACjD,MAAM,UAAU,GAAgE;QAC9E,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACjD,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACxC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACrC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACzC,oBAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAC9C,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACrC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACpD,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;KACxC,CAAC;IAEF,MAAM,MAAM,GAAuD,EAAE,CAAC;IAEtE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,WAAW,EAAE,CAAC;YACd,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,CAAC;YACd,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,iCAAiC;IACjC,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SACnD,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAA2B,CAAC,CAAC;IAEpD,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,WAAW;QACX,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;YAClD,CAAC,CAAC,GAAG;QACP,UAAU;QACV,MAAM;QACN,eAAe;QACf,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC5B,OAAqB,EACrB,OAAsB;IAEtB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,4DAA4D;IAC5D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;SAChE,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAA6B;gBACtC,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;gBACT,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,CAAC;aACR,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3D,CAAC,EACD,MAAM,CACP,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,SAAkB;YAC3B,MAAM,EAAE,oBAAoB,UAAU,CAAC,CAAC,CAAC,EAAE;YAC3C,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,SAAS,IAAI,qCAAqC,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,mCAAmC;YAC7K,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE;gBACR,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACtC,eAAe,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,mBAAmB,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;aAC1D,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,YAAY,EAAE,yBAAyB;gBACvC,IAAI;gBACJ,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,UAAU;gBACV,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACnC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAC/D;SACF,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,SAAkB;YAC3B,MAAM,EAAE,0BAA0B;YAClC,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,iCAAiC,OAAO,CAAC,WAAW,2BAA2B,OAAO,CAAC,eAAe,CAAC,MAAM,WAAW,OAAO,CAAC,QAAQ,cAAc;YAC/J,QAAQ,EAAE,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACtD,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE;gBACR,mBAAmB,OAAO,CAAC,aAAa,EAAE;gBAC1C,WAAW,OAAO,CAAC,WAAW,EAAE;gBAChC,WAAW,OAAO,CAAC,WAAW,EAAE;gBAChC,qBAAqB,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzD,yBAAyB,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClE,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,YAAY,EAAE,yBAAyB;gBACvC,OAAO,EAAE;oBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;iBACjD;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAqB,EACrB,OAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAiB,EAAE,CAAC;IAEpC,qCAAqC;IACrC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU;QACrC,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,YAAY,EAAE,OAAO,EAAE,YAAY;KACpC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK;QAChC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAEnB,kCAAkC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEnD,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YACxE,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAE5B,SAAS,EAAE,CAAC;YAEZ,yBAAyB;YACzB,IAAI,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM;YACR,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,EAAE,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM;QACR,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE5D,0BAA0B;IAC1B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO;QACL,OAAO,EAAE,yBAAyB;QAClC,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAChC,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,QAAQ,CAAC,IAAI;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;QAClC,YAAY;QACZ,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,CAAC,UAAU,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC;IAMvD,mCAAmC;IACnC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAE5D,OAAO;QACL,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,QAAQ,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA0B;IACzD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0BAA0B,CAC/C,CAAC;IAEF,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,QAO3B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,MAAM,OAAO,GAAkB;QAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;QACzC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;QACnF,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3F,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC/B,UAAU,EAAE;YACV,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACjD,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACxC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACrC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACzC,oBAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC9C,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACrC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YACpD,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SACxC;QACD,MAAM,EAAE,EAAE;QACV,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;QAC7C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;KACtD,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,MAAM,KAAK,GAAa;QACtB,UAAU;QACV,uCAAuC,OAAO,CAAC,QAAQ,gBAAgB;QACvE,cAAc,OAAO,CAAC,aAAa,aAAa;QAChD,eAAe,OAAO,CAAC,WAAW,WAAW;QAC7C,eAAe,OAAO,CAAC,WAAW,WAAW;QAC7C,sBAAsB;QACtB,sBAAsB;QACtB,OAAO;KACR,CAAC;IAEF,uBAAuB;IACvB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/scanners/agent/sandbox-audit.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Sandbox Audit Scanner
+ *
+ * Verifies that MCP tools don't escape their declared surface area.
+ * Performs static analysis to detect potential sandbox escapes:
+ * - child_process usage in "read-only" tools
+ * - eval/Function usage for code execution
+ * - Raw network access in local-scoped tools
+ * - Filesystem access outside declared paths
+ *
+ * @module scanners/agent/sandbox-audit
+ */
+import type { Severity } from "../../certification/types.js";
+import type { AgentScannerResult, MCPManifest } from "./types.js";
+/**
+ * Run sandbox audit scanner
+ */
+export declare function runSandboxAudit(manifest: MCPManifest, options?: {
+    /** Path to scan for source files */
+    sourcePath?: string;
+    /** Maximum directory depth */
+    maxDepth?: number;
+    /** Patterns to exclude */
+    exclude?: RegExp[];
+    /** Only check specific tools */
+    tools?: string[];
+}): Promise<AgentScannerResult>;
+/**
+ * Check if sandbox audit is available
+ */
+export declare function checkSandboxAuditAvailable(): Promise<{
+    scanner: "sandbox-audit";
+    available: boolean;
+    version: string;
+}>;
+/**
+ * Get sandbox audit summary
+ */
+export declare function getSandboxAuditSummary(result: AgentScannerResult): {
+    totalFindings: number;
+    byType: Record<string, number>;
+    bySeverity: Record<Severity, number>;
+} | null;
+//# sourceMappingURL=sandbox-audit.d.ts.map

package/dist/scanners/agent/sandbox-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-audit.d.ts","sourceRoot":"","sources":["../../../src/scanners/agent/sandbox-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EAIZ,MAAM,YAAY,CAAC;AAsapB;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IACR,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,GACA,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED;;GAEG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC;IAC1D,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAMD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACtC,GAAG,IAAI,CA0BP"}

package/dist/scanners/agent/sandbox-audit.js

@@ -0,0 +1,425 @@
+/**
+ * Sandbox Audit Scanner
+ *
+ * Verifies that MCP tools don't escape their declared surface area.
+ * Performs static analysis to detect potential sandbox escapes:
+ * - child_process usage in "read-only" tools
+ * - eval/Function usage for code execution
+ * - Raw network access in local-scoped tools
+ * - Filesystem access outside declared paths
+ *
+ * @module scanners/agent/sandbox-audit
+ */
+import { createHash } from "crypto";
+import { readFile, readdir } from "fs/promises";
+import { join, extname } from "path";
+const ESCAPE_PATTERNS = [
+    // Child process execution
+    {
+        type: "child_process",
+        pattern: /require\s*\(\s*['"`]child_process['"`]\s*\)|from\s+['"`]child_process['"`]|import\s+.*['"`]child_process['"`]/g,
+        severity: "critical",
+        description: "Direct child_process import - can execute arbitrary commands",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    {
+        type: "child_process",
+        pattern: /exec\s*\(|execSync\s*\(|spawn\s*\(|spawnSync\s*\(|execFile\s*\(|fork\s*\(/g,
+        severity: "critical",
+        description: "Process execution function - can execute arbitrary commands",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // Eval and dynamic code execution
+    {
+        type: "eval",
+        pattern: /\beval\s*\(/g,
+        severity: "critical",
+        description: "eval() usage - can execute arbitrary code",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    {
+        type: "Function",
+        pattern: /new\s+Function\s*\(/g,
+        severity: "critical",
+        description: "new Function() - dynamic code execution",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // VM module
+    {
+        type: "vm",
+        pattern: /require\s*\(\s*['"`]vm['"`]\s*\)|from\s+['"`]vm['"`]/g,
+        severity: "high",
+        description: "VM module import - sandboxed but escapable",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // Dynamic require/import
+    {
+        type: "require",
+        pattern: /require\s*\(\s*[^'"`]/g,
+        severity: "high",
+        description: "Dynamic require() - can load arbitrary modules",
+        contexts: [".js", ".ts", ".cjs"],
+    },
+    {
+        type: "import-dynamic",
+        pattern: /import\s*\(\s*[^'"`]/g,
+        severity: "high",
+        description: "Dynamic import() - can load arbitrary modules",
+        contexts: [".js", ".ts", ".mjs"],
+    },
+    // Filesystem outside declared scope
+    {
+        type: "fs-outside-scope",
+        pattern: /require\s*\(\s*['"`]fs['"`]\s*\)|from\s+['"`]fs['"`]|from\s+['"`]fs\/promises['"`]|from\s+['"`]node:fs['"`]/g,
+        severity: "high",
+        description: "Direct fs module access - may access outside declared paths",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // Network access patterns
+    {
+        type: "net-undeclared",
+        pattern: /require\s*\(\s*['"`](?:net|http|https|http2|dgram)['"`]\s*\)|from\s+['"`](?:net|http|https|http2|dgram)['"`]/g,
+        severity: "critical",
+        description: "Network module import - can make network requests",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    {
+        type: "net-undeclared",
+        pattern: /\bfetch\s*\(|axios\.|got\(|request\(|superagent\./g,
+        severity: "high",
+        description: "Network request library usage",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // Environment access
+    {
+        type: "env-access",
+        pattern: /process\.env\[|process\.env\./g,
+        severity: "medium",
+        description: "Environment variable access - may leak secrets",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+    // Process access
+    {
+        type: "process-access",
+        pattern: /process\.exit|process\.kill|process\.abort/g,
+        severity: "medium",
+        description: "Process control - can terminate or affect process",
+        contexts: [".js", ".ts", ".mjs", ".cjs"],
+    },
+];
+// ============================================================================
+// File Scanning
+// ============================================================================
+/**
+ * Scan a file for escape patterns
+ */
+async function scanFileForEscapes(filePath, content) {
+    const findings = [];
+    const ext = extname(filePath).toLowerCase();
+    const lines = content.split("\n");
+    for (const escapePattern of ESCAPE_PATTERNS) {
+        // Skip if not relevant for this file type
+        if (escapePattern.contexts && !escapePattern.contexts.includes(ext)) {
+            continue;
+        }
+        // Reset regex state
+        escapePattern.pattern.lastIndex = 0;
+        // Find all matches
+        let match;
+        while ((match = escapePattern.pattern.exec(content)) !== null) {
+            // Calculate line number
+            const beforeMatch = content.substring(0, match.index);
+            const lineNumber = beforeMatch.split("\n").length;
+            // Get line content
+            const lineContent = lines[lineNumber - 1] || "";
+            // Skip if in a comment
+            if (isInComment(lineContent, match[0])) {
+                continue;
+            }
+            findings.push({
+                escape: escapePattern.type,
+                tool: "", // Will be filled in later
+                file: filePath,
+                line: lineNumber,
+                evidence: lineContent.trim().slice(0, 200),
+                severity: escapePattern.severity,
+                description: escapePattern.description,
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Check if match is inside a comment
+ */
+function isInComment(line, match) {
+    const matchIndex = line.indexOf(match);
+    // Check for line comment
+    const lineCommentIndex = line.indexOf("//");
+    if (lineCommentIndex !== -1 && lineCommentIndex < matchIndex) {
+        return true;
+    }
+    // Check for block comment start (simplified)
+    const blockCommentIndex = line.indexOf("/*");
+    if (blockCommentIndex !== -1 && blockCommentIndex < matchIndex) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Recursively scan directory for source files
+ */
+async function scanDirectory(dirPath, options) {
+    const findings = [];
+    const maxDepth = options.maxDepth ?? 10;
+    const exclude = options.exclude ?? [/node_modules/, /\.git/, /dist/, /build/];
+    async function scan(currentPath, depth) {
+        if (depth > maxDepth)
+            return;
+        try {
+            const entries = await readdir(currentPath, { withFileTypes: true });
+            for (const entry of entries) {
+                const fullPath = join(currentPath, entry.name);
+                // Check exclusions
+                if (exclude.some((re) => re.test(fullPath))) {
+                    continue;
+                }
+                if (entry.isDirectory()) {
+                    await scan(fullPath, depth + 1);
+                }
+                else if (entry.isFile()) {
+                    const ext = extname(entry.name).toLowerCase();
+                    if ([".js", ".ts", ".mjs", ".cjs", ".jsx", ".tsx"].includes(ext)) {
+                        try {
+                            const content = await readFile(fullPath, "utf-8");
+                            const fileFindings = await scanFileForEscapes(fullPath, content);
+                            findings.push(...fileFindings);
+                        }
+                        catch {
+                            // Skip unreadable files
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+            // Skip unreadable directories
+        }
+    }
+    await scan(dirPath, 0);
+    return findings;
+}
+// ============================================================================
+// Tool Mapping
+// ============================================================================
+/**
+ * Try to map findings to tools based on file paths
+ *
+ * This is a heuristic - assumes tool implementations are in files
+ * named after the tool or in directories with tool names.
+ */
+function mapFindingsToTools(findings, manifest) {
+    const toolNames = manifest.tools.map((t) => t.name.toLowerCase());
+    for (const finding of findings) {
+        const filePath = finding.file.toLowerCase();
+        // Try to match tool name in file path
+        for (const toolName of toolNames) {
+            // Normalize tool name for file matching
+            const normalized = toolName
+                .replace(/_/g, "[-_]?")
+                .replace(/-/g, "[-_]?");
+            const regex = new RegExp(`[/\\\\]${normalized}[./\\\\]|${normalized}\\.(ts|js)$`, "i");
+            if (regex.test(filePath)) {
+                finding.tool = toolName;
+                break;
+            }
+        }
+        // If still no tool, use filename
+        if (!finding.tool) {
+            const filename = filePath.split(/[/\\]/).pop() || "";
+            finding.tool = filename.replace(/\.(ts|js|mjs|cjs)$/i, "");
+        }
+    }
+    return findings;
+}
+/**
+ * Filter findings based on tool declarations
+ */
+function filterByDeclarations(findings, manifest) {
+    const filteredFindings = [];
+    const toolMap = new Map(manifest.tools.map((t) => [t.name.toLowerCase(), t]));
+    for (const finding of findings) {
+        const tool = toolMap.get(finding.tool.toLowerCase());
+        if (!tool) {
+            // Can't validate - keep the finding
+            filteredFindings.push(finding);
+            continue;
+        }
+        // Check if finding contradicts tool's declarations
+        switch (finding.escape) {
+            case "child_process":
+            case "eval":
+            case "Function":
+                // Always report these - they're dangerous
+                filteredFindings.push(finding);
+                break;
+            case "net-undeclared":
+                // Only report if tool doesn't declare network access
+                if (!tool.networkAccess) {
+                    filteredFindings.push(finding);
+                }
+                break;
+            case "fs-outside-scope":
+                // Only report for read-only tools
+                if (tool.readOnlyHint) {
+                    finding.description = "Filesystem access in read-only tool";
+                    filteredFindings.push(finding);
+                }
+                break;
+            case "env-access":
+                // Report for non-destructive tools
+                if (!tool.destructiveHint) {
+                    filteredFindings.push(finding);
+                }
+                break;
+            default:
+                filteredFindings.push(finding);
+        }
+    }
+    return filteredFindings;
+}
+// ============================================================================
+// Finding Conversion
+// ============================================================================
+/**
+ * Convert sandbox findings to deterministic findings
+ */
+function sandboxToDeterministicFindings(findings) {
+    const deterministicFindings = [];
+    for (const finding of findings) {
+        deterministicFindings.push({
+            scanner: "semgrep",
+            ruleId: `sandbox-audit:${finding.escape}`,
+            file: finding.file,
+            line: finding.line,
+            message: `${finding.escape}: ${finding.description}${finding.tool ? ` in tool "${finding.tool}"` : ""}`,
+            severity: finding.severity,
+            confidence: 100,
+            evidence: finding.evidence,
+            metadata: {
+                agentScanner: "sandbox-audit",
+                escapeType: finding.escape,
+                tool: finding.tool,
+            },
+        });
+    }
+    // Add summary
+    if (findings.length > 0) {
+        const byType = {};
+        const bySeverity = {
+            critical: 0,
+            high: 0,
+            medium: 0,
+            low: 0,
+            info: 0,
+        };
+        for (const f of findings) {
+            byType[f.escape] = (byType[f.escape] || 0) + 1;
+            bySeverity[f.severity]++;
+        }
+        deterministicFindings.push({
+            scanner: "semgrep",
+            ruleId: "sandbox-audit:summary",
+            file: "mcp-manifest",
+            line: 0,
+            message: `Sandbox audit found ${findings.length} potential escape(s): ${bySeverity.critical} critical, ${bySeverity.high} high`,
+            severity: bySeverity.critical > 0 ? "critical" : bySeverity.high > 0 ? "high" : "medium",
+            confidence: 100,
+            evidence: [
+                `Total findings: ${findings.length}`,
+                `By type:`,
+                ...Object.entries(byType).map(([type, count]) => `  - ${type}: ${count}`),
+            ].join("\n"),
+            metadata: {
+                agentScanner: "sandbox-audit",
+                totalFindings: findings.length,
+                byType,
+                bySeverity,
+            },
+        });
+    }
+    return deterministicFindings;
+}
+// ============================================================================
+// Main Scanner Function
+// ============================================================================
+/**
+ * Run sandbox audit scanner
+ */
+export async function runSandboxAudit(manifest, options) {
+    const startTime = Date.now();
+    const sourcePath = options?.sourcePath || process.cwd();
+    // Scan source directory
+    let findings = await scanDirectory(sourcePath, {
+        maxDepth: options?.maxDepth,
+        exclude: options?.exclude,
+    });
+    // Map findings to tools
+    findings = mapFindingsToTools(findings, manifest);
+    // Filter by tool declarations
+    findings = filterByDeclarations(findings, manifest);
+    // Filter by specific tools if requested
+    if (options?.tools && options.tools.length > 0) {
+        const toolSet = new Set(options.tools.map((t) => t.toLowerCase()));
+        findings = findings.filter((f) => toolSet.has(f.tool.toLowerCase()));
+    }
+    // Convert to deterministic findings
+    const deterministicFindings = sandboxToDeterministicFindings(findings);
+    // Calculate manifest hash
+    const manifestHash = createHash("sha256")
+        .update(JSON.stringify(manifest))
+        .digest("hex");
+    return {
+        scanner: "sandbox-audit",
+        findings: deterministicFindings,
+        duration: Date.now() - startTime,
+        success: true,
+        mcpServerName: manifest.name,
+        mcpServerVersion: manifest.version,
+        manifestHash,
+        version: "1.0.0",
+        rulesUsed: ["static-analysis"],
+    };
+}
+/**
+ * Check if sandbox audit is available
+ */
+export async function checkSandboxAuditAvailable() {
+    return {
+        scanner: "sandbox-audit",
+        available: true,
+        version: "1.0.0",
+    };
+}
+/**
+ * Get sandbox audit summary
+ */
+export function getSandboxAuditSummary(result) {
+    const summaryFinding = result.findings.find((f) => f.ruleId === "sandbox-audit:summary");
+    if (!summaryFinding?.metadata) {
+        return null;
+    }
+    const meta = summaryFinding.metadata;
+    return {
+        totalFindings: meta.totalFindings || 0,
+        byType: meta.byType || {},
+        bySeverity: meta.bySeverity || {
+            critical: 0,
+            high: 0,
+            medium: 0,
+            low: 0,
+            info: 0,
+        },
+    };
+}
+//# sourceMappingURL=sandbox-audit.js.map

package/dist/scanners/agent/sandbox-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-audit.js","sourceRoot":"","sources":["../../../src/scanners/agent/sandbox-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAQ,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAW,OAAO,EAAE,MAAM,MAAM,CAAC;AA0B9C,MAAM,eAAe,GAAoB;IACvC,0BAA0B;IAC1B;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,gHAAgH;QACzH,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,8DAA8D;QAC3E,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4EAA4E;QACrF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,kCAAkC;IAClC;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,YAAY;IACZ;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;KACjC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+CAA+C;QAC5D,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;KACjC;IAED,oCAAoC;IACpC;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8GAA8G;QACvH,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,+GAA+G;QACxH,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,mDAAmD;QAChE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,oDAAoD;QAC7D,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,qBAAqB;IACrB;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;IAED,iBAAiB;IACjB;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,mDAAmD;QAChE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACzC;CACF,CAAC;AAEF,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,OAAe;IAEf,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;QAC5C,0CAA0C;QAC1C,IAAI,aAAa,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,oBAAoB;QACpB,aAAa,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEpC,mBAAmB;QACnB,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,wBAAwB;YACxB,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAElD,mBAAmB;YACnB,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhD,uBAAuB;YACvB,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,aAAa,CAAC,IAAI;gBAC1B,IAAI,EAAE,EAAE,EAAE,0BAA0B;gBACpC,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC1C,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,WAAW,EAAE,aAAa,CAAC,WAAW;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEvC,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,gBAAgB,KAAK,CAAC,CAAC,IAAI,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,iBAAiB,KAAK,CAAC,CAAC,IAAI,iBAAiB,GAAG,UAAU,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,OAAkD;IAElD,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAE9E,KAAK,UAAU,IAAI,CAAC,WAAmB,EAAE,KAAa;QACpD,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO;QAE7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAEpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE/C,mBAAmB;gBACnB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClC,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;oBAE9C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACjE,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;4BAClD,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;4BACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;wBACjC,CAAC;wBAAC,MAAM,CAAC;4BACP,wBAAwB;wBAC1B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,QAA0B,EAC1B,QAAqB;IAErB,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAElE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAE5C,sCAAsC;QACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,wCAAwC;YACxC,MAAM,UAAU,GAAG,QAAQ;iBACxB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;iBACtB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,UAAU,YAAY,UAAU,aAAa,EAAE,GAAG,CAAC,CAAC;YAEvF,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACxB,MAAM;YACR,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,QAA0B,EAC1B,QAAqB;IAErB,MAAM,gBAAgB,GAAqB,EAAE,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oCAAoC;YACpC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,mDAAmD;QACnD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,eAAe,CAAC;YACrB,KAAK,MAAM,CAAC;YACZ,KAAK,UAAU;gBACb,0CAA0C;gBAC1C,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC/B,MAAM;YAER,KAAK,gBAAgB;gBACnB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxB,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;gBACD,MAAM;YAER,KAAK,kBAAkB;gBACrB,kCAAkC;gBAClC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,OAAO,CAAC,WAAW,GAAG,qCAAqC,CAAC;oBAC5D,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;gBACD,MAAM;YAER,KAAK,YAAY;gBACf,mCAAmC;gBACnC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;gBACD,MAAM;YAER;gBACE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,8BAA8B,CACrC,QAA0B;IAE1B,MAAM,qBAAqB,GAA2B,EAAE,CAAC;IAEzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,qBAAqB,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,SAAkB;YAC3B,MAAM,EAAE,iBAAiB,OAAO,CAAC,MAAM,EAAE;YACzC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACvG,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE;gBACR,YAAY,EAAE,eAAe;gBAC7B,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAED,cAAc;IACd,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,UAAU,GAA6B;YAC3C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/C,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,qBAAqB,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,SAAkB;YAC3B,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,uBAAuB,QAAQ,CAAC,MAAM,yBAAyB,UAAU,CAAC,QAAQ,cAAc,UAAU,CAAC,IAAI,OAAO;YAC/H,QAAQ,EAAE,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACxF,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE;gBACR,mBAAmB,QAAQ,CAAC,MAAM,EAAE;gBACpC,UAAU;gBACV,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,KAAK,EAAE,CAAC;aAC1E,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,YAAY,EAAE,eAAe;gBAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,MAAM;gBACN,UAAU;aACX;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAqB,EACrB,OASC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAExD,wBAAwB;IACxB,IAAI,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE;QAC7C,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC3B,OAAO,EAAE,OAAO,EAAE,OAAO;KAC1B,CAAC,CAAC;IAEH,wBAAwB;IACxB,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAElD,8BAA8B;IAC9B,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEpD,wCAAwC;IACxC,IAAI,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAEvE,0BAA0B;IAC1B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAChC,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,QAAQ,CAAC,IAAI;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;QAClC,YAAY;QACZ,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,CAAC,iBAAiB,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAK9C,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAK/D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,uBAAuB,CAC5C,CAAC;IAEF,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,QAI3B,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI;YAC7B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC"}

package/dist/scanners/agent/supply-chain-mcp.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Supply Chain MCP Scanner
+ *
+ * Scans MCP server dependencies for security vulnerabilities,
+ * license compliance, and supply chain integrity issues.
+ *
+ * Key features:
+ * - CVE/vulnerability scanning via npm audit
+ * - Sigstore signature verification
+ * - SLSA provenance checking
+ * - License compliance analysis
+ * - Typosquatting detection
+ *
+ * @module scanners/agent/supply-chain-mcp
+ */
+import type { AgentScannerResult, MCPManifest } from "./types.js";
+/**
+ * Run supply chain MCP scanner
+ */
+export declare function runSupplyChainMCP(manifest: MCPManifest, options?: {
+    /** Path to MCP server package */
+    packagePath?: string;
+    /** Skip npm audit */
+    skipVulnScan?: boolean;
+    /** Skip license check */
+    skipLicenseCheck?: boolean;
+    /** Skip typosquatting check */
+    skipTyposquatCheck?: boolean;
+    /** Skip Sigstore verification */
+    skipSigstoreCheck?: boolean;
+    /** Packages to check for Sigstore attestation */
+    checkSigstorePackages?: string[];
+}): Promise<AgentScannerResult>;
+/**
+ * Check if supply chain scanner is available
+ */
+export declare function checkSupplyChainMCPAvailable(): Promise<{
+    scanner: "supply-chain-mcp";
+    available: boolean;
+    version: string;
+    npmAvailable: boolean;
+}>;
+/**
+ * Get supply chain summary from result
+ */
+export declare function getSupplyChainSummary(result: AgentScannerResult): {
+    totalVulns: number;
+    criticalVulns: number;
+    highVulns: number;
+    licenseIssues: number;
+    typosquatWarnings: number;
+} | null;
+//# sourceMappingURL=supply-chain-mcp.d.ts.map

package/dist/scanners/agent/supply-chain-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supply-chain-mcp.d.ts","sourceRoot":"","sources":["../../../src/scanners/agent/supply-chain-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EAGZ,MAAM,YAAY,CAAC;AA6bpB;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IACR,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+BAA+B;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,GACA,OAAO,CAAC,kBAAkB,CAAC,CA+D7B;AAED;;GAEG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC;IAC5D,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC,CAgBD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GAAG,IAAI,CAwBP"}