vskill 1.2.4 → 1.2.7

package/dist/webmcp/enumerate.js

@@ -0,0 +1,436 @@
+// ---------------------------------------------------------------------------
+// vskill audit-webmcp -- headless Chromium enumeration of WebMCP tools.
+//
+// Playwright is an optional peer: we import 'playwright-core' or 'playwright'
+// at runtime and never add it as a dependency. Each URL loads once in its own
+// browser context. We read tool descriptors only: no tool is invoked or
+// executed, no form is submitted, nothing is clicked, downloads are refused,
+// dialogs dismissed, popups closed and service workers blocked.
+// ---------------------------------------------------------------------------
+import { existsSync, readdirSync } from "node:fs";
+import { createRequire } from "node:module";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { mergeTools, scriptUrlFromStack } from "./merge.js";
+/** Playwright always passes CDPScreenshotNewSurface; a second --enable-features would override it. */
+export const CHROMIUM_ARGS = ["--enable-features=CDPScreenshotNewSurface,WebMCP"];
+export const UA_SUFFIX = "vskill-audit-webmcp (+https://verified-skill.com)";
+export const PROBE_NAME = "vskill-webmcp-probe";
+/**
+ * Import playwright-core, then playwright: first from vskill's own install,
+ * then from the current project (so `npm i -D playwright-core` works with npx).
+ * Returns null when neither resolves.
+ */
+export async function loadChromium(cwd = process.cwd()) {
+    const projectRequire = createRequire(join(cwd, "noop.js"));
+    for (const specifier of ["playwright-core", "playwright"]) {
+        const attempts = [
+            () => import(specifier),
+            () => import(pathToFileURL(projectRequire.resolve(specifier)).href),
+        ];
+        for (const attempt of attempts) {
+            try {
+                const mod = await attempt();
+                const chromium = mod.chromium ?? mod.default?.chromium;
+                if (chromium)
+                    return chromium;
+            }
+            catch {
+                // try the next one
+            }
+        }
+    }
+    return null;
+}
+export const PLAYWRIGHT_INSTALL_HINT = [
+    "audit-webmcp needs Playwright and a Chromium build. Install them with:",
+    "  npm i -D playwright-core        (in the project you run vskill from; or npm i -g alongside a global vskill)",
+    "  npx playwright install chromium-headless-shell",
+    "Or point at an existing build with --executable-path <path> or VSKILL_CHROMIUM=<path>.",
+].join("\n");
+// ---- Finding a Chromium build ----------------------------------------------
+function browserCacheDirs() {
+    const dirs = [];
+    if (process.env.PLAYWRIGHT_BROWSERS_PATH && process.env.PLAYWRIGHT_BROWSERS_PATH !== "0") {
+        dirs.push(process.env.PLAYWRIGHT_BROWSERS_PATH);
+    }
+    const home = homedir();
+    dirs.push(join(home, "Library", "Caches", "ms-playwright"));
+    dirs.push(join(home, ".cache", "ms-playwright"));
+    if (process.env.LOCALAPPDATA)
+        dirs.push(join(process.env.LOCALAPPDATA, "ms-playwright"));
+    dirs.push("/opt/pw-browsers");
+    return dirs;
+}
+const BINARY_CANDIDATES = [
+    {
+        prefix: "chromium_headless_shell-",
+        paths: [
+            ["chrome-headless-shell-mac-arm64", "chrome-headless-shell"],
+            ["chrome-headless-shell-mac-x64", "chrome-headless-shell"],
+            ["chrome-headless-shell-linux64", "chrome-headless-shell"],
+            ["chrome-headless-shell-linux-arm64", "chrome-headless-shell"],
+            ["chrome-linux", "headless_shell"],
+            ["chrome-headless-shell-win64", "chrome-headless-shell.exe"],
+        ],
+    },
+    {
+        prefix: "chromium-",
+        paths: [
+            ["chrome-mac-arm64", "Google Chrome for Testing.app", "Contents", "MacOS", "Google Chrome for Testing"],
+            ["chrome-mac", "Chromium.app", "Contents", "MacOS", "Chromium"],
+            ["chrome-linux64", "chrome"],
+            ["chrome-linux", "chrome"],
+            ["chrome-win64", "chrome.exe"],
+            ["chrome-win", "chrome.exe"],
+        ],
+    },
+];
+/** Newest Chromium (headless shell preferred) in the usual Playwright cache dirs. */
+export function findCachedChromium(dirs = browserCacheDirs()) {
+    for (const { prefix, paths } of BINARY_CANDIDATES) {
+        const found = [];
+        for (const dir of dirs) {
+            let entries;
+            try {
+                entries = readdirSync(dir);
+            }
+            catch {
+                continue;
+            }
+            for (const e of entries) {
+                if (!e.startsWith(prefix))
+                    continue;
+                const rev = parseInt(e.slice(prefix.length), 10);
+                if (Number.isNaN(rev))
+                    continue;
+                for (const segs of paths) {
+                    const p = join(dir, e, ...segs);
+                    if (existsSync(p))
+                        found.push({ rev, path: p });
+                }
+            }
+        }
+        found.sort((a, b) => b.rev - a.rev);
+        if (found.length)
+            return found[0].path;
+    }
+    return null;
+}
+/**
+ * Resolve the executable: explicit flag, then VSKILL_CHROMIUM, then
+ * Playwright's own pinned build, then the newest cached build.
+ * Returns undefined when Playwright's default should be used.
+ */
+export function resolveExecutablePath(chromium, explicit) {
+    if (explicit)
+        return explicit;
+    if (process.env.VSKILL_CHROMIUM)
+        return process.env.VSKILL_CHROMIUM;
+    try {
+        const def = chromium.executablePath();
+        if (def && existsSync(def))
+            return undefined;
+    }
+    catch {
+        // fall through
+    }
+    return findCachedChromium() ?? undefined;
+}
+export async function launchBrowser(opts = {}) {
+    const chromium = await loadChromium();
+    if (!chromium) {
+        const err = new Error(PLAYWRIGHT_INSTALL_HINT);
+        err.code = "VSKILL_NO_PLAYWRIGHT";
+        throw err;
+    }
+    const executablePath = resolveExecutablePath(chromium, opts.executablePath);
+    return chromium.launch({
+        headless: true,
+        args: CHROMIUM_ARGS,
+        ...(executablePath ? { executablePath } : {}),
+    });
+}
+// ---- In-page probe ---------------------------------------------------------
+/**
+ * Runs before any page script in every frame. Wraps registerTool to record
+ * the descriptor (minus execute) and the caller's stack. The page's own
+ * registerTool still runs unchanged.
+ */
+export const INIT_SCRIPT = `(() => {
+  const KEY = Symbol.for("vskill.webmcp");
+  if (window[KEY]) return;
+  const log = [];
+  try { Object.defineProperty(window, KEY, { value: log, enumerable: false }); } catch (e) { return; }
+  // Crawl safety: the audit loads one page; popups (popunders, auto-opened tabs) never load.
+  try { window.open = function open() { return null; }; } catch (e) {}
+  let proto = null;
+  try {
+    proto = (typeof ModelContext !== "undefined" && ModelContext.prototype) ||
+      (document.modelContext && Object.getPrototypeOf(document.modelContext));
+  } catch (e) {}
+  if (!proto || typeof proto.registerTool !== "function") return;
+  const safe = (v) => { try { return v === undefined ? undefined : JSON.parse(JSON.stringify(v)); } catch (e) { return undefined; } };
+  const str = (v) => (typeof v === "string" ? v : undefined);
+  const orig = proto.registerTool;
+  const wrapped = function registerTool(tool, options) {
+    try {
+      const t = tool || {};
+      const rec = {
+        name: String(t.name == null ? "" : t.name),
+        title: str(t.title),
+        description: str(t.description),
+        inputSchema: typeof t.inputSchema === "string" ? t.inputSchema : safe(t.inputSchema),
+        annotations: safe(t.annotations),
+        exposedTo: safe((options && options.exposedTo) !== undefined ? options.exposedTo : t.exposedTo),
+        stack: String(new Error().stack || ""),
+      };
+      log.push(rec);
+      const signal = options && options.signal;
+      if (signal && typeof signal.addEventListener === "function") {
+        signal.addEventListener("abort", () => log.push({ name: rec.name, unregistered: true }), { once: true });
+      }
+    } catch (e) {}
+    return orig.apply(this, arguments);
+  };
+  try { Object.defineProperty(proto, "registerTool", { value: wrapped, writable: true, configurable: true }); } catch (e) {}
+  if (typeof proto.unregisterTool === "function") {
+    const origUn = proto.unregisterTool;
+    try {
+      Object.defineProperty(proto, "unregisterTool", {
+        value: function unregisterTool(name) {
+          try { log.push({ name: String(name), unregistered: true }); } catch (e) {}
+          return origUn.apply(this, arguments);
+        },
+        writable: true,
+        configurable: true,
+      });
+    } catch (e) {}
+  }
+})();
+//# sourceURL=${PROBE_NAME}.js`;
+/** Evaluated in the page after it settles. Reads, never executes. */
+function snapshotInPage() {
+    const w = window;
+    const d = document;
+    const mc = d.modelContext;
+    const out = {
+        documentModelContext: !!mc,
+        navigatorModelContext: "modelContext" in navigator,
+        captured: [],
+        listed: null,
+        platforms: [],
+    };
+    // Hosting-platform markers (attribution.ts PLATFORM_HOSTS). Shopify storefronts
+    // set window.Shopify.shop to the store's myshopify.com name and emit these metas.
+    try {
+        const shop = w.Shopify;
+        const shopifyMeta = d.querySelector('meta[name="shopify-checkout-api-token"], meta[name="shopify-digital-wallet"]');
+        if ((shop && typeof shop === "object" && typeof shop.shop === "string") || shopifyMeta || /\.myshopify\.com$/i.test(location.hostname)) {
+            out.platforms.push("shopify");
+        }
+    }
+    catch {
+        // markers are best effort
+    }
+    const log = w[Symbol.for("vskill.webmcp")];
+    if (Array.isArray(log))
+        out.captured = log.slice();
+    if (!mc || typeof mc.getTools !== "function")
+        return Promise.resolve(out);
+    const clone = (v) => {
+        try {
+            return v === undefined ? undefined : JSON.parse(JSON.stringify(v));
+        }
+        catch {
+            return undefined;
+        }
+    };
+    return Promise.race([
+        Promise.resolve(mc.getTools()),
+        new Promise((_, reject) => setTimeout(() => reject(new Error("getTools() timed out")), 3000)),
+    ])
+        .then((tools) => {
+        out.listed = Array.from(tools || []).map((t) => ({
+            name: String(t.name),
+            title: typeof t.title === "string" ? t.title : undefined,
+            description: typeof t.description === "string" ? t.description : undefined,
+            inputSchema: typeof t.inputSchema === "string" ? t.inputSchema : clone(t.inputSchema),
+            annotations: clone(t.annotations),
+            origin: typeof t.origin === "string" ? t.origin : undefined,
+            exposedTo: clone(t.exposedTo),
+        }));
+        return out;
+    })
+        .catch((e) => {
+        out.getToolsError = String(e);
+        return out;
+    });
+}
+/** Reject when `p` takes longer than `ms` (a page stuck in a busy loop never answers evaluate). */
+function withTimeout(p, ms, what) {
+    let timer;
+    return Promise.race([
+        p,
+        new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new Error(`${what} timed out after ${ms}ms`)), ms);
+        }),
+    ]).finally(() => clearTimeout(timer));
+}
+function firstLine(e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    return msg.split("\n")[0].replace(/^page\.goto:\s*/, "").trim();
+}
+function cdpToolList(params) {
+    if (Array.isArray(params?.tools))
+        return params.tools;
+    if (params?.tool)
+        return [params.tool];
+    if (params?.name)
+        return [params];
+    return [];
+}
+/** Browser UA with our suffix, read once per browser. */
+export async function userAgentFor(browser) {
+    const ctx = await browser.newContext();
+    try {
+        const page = await ctx.newPage();
+        const ua = await page.evaluate(() => navigator.userAgent);
+        return `${ua} ${UA_SUFFIX}`;
+    }
+    finally {
+        await ctx.close();
+    }
+}
+export async function enumerateSite(browser, url, opts) {
+    const settleMs = opts.settleMs ?? 5000;
+    const quietMs = opts.quietMs ?? 1500;
+    const result = {
+        url,
+        finalUrl: null,
+        documentModelContext: false,
+        navigatorModelContext: false,
+        permissionsPolicy: null,
+        platforms: [],
+        tools: [],
+    };
+    if (opts.signal?.aborted) {
+        result.error = "aborted";
+        return result;
+    }
+    const ctx = await browser.newContext({
+        acceptDownloads: false,
+        javaScriptEnabled: true,
+        serviceWorkers: "block",
+        ...(opts.userAgent ? { userAgent: opts.userAgent } : {}),
+    });
+    const onAbort = () => {
+        ctx.close().catch(() => { });
+    };
+    opts.signal?.addEventListener("abort", onAbort, { once: true });
+    try {
+        await ctx.addInitScript({ content: INIT_SCRIPT });
+        const page = await ctx.newPage();
+        page.on("dialog", (d) => {
+            d.dismiss().catch(() => { });
+        });
+        // window.open popups would load more pages we never asked for: close them.
+        ctx.on("page", (p) => {
+            if (p !== page)
+                p.close().catch(() => { });
+        });
+        const cdpEvents = [];
+        try {
+            const cdp = await ctx.newCDPSession(page);
+            cdp.on("WebMCP.toolsAdded", (p) => {
+                for (const t of cdpToolList(p))
+                    if (t?.name)
+                        cdpEvents.push({ ...t, name: String(t.name) });
+            });
+            cdp.on("WebMCP.toolsRemoved", (p) => {
+                const names = Array.isArray(p?.names) ? p.names : cdpToolList(p).map((t) => t?.name ?? t);
+                for (const n of names)
+                    if (typeof n === "string")
+                        cdpEvents.push({ name: n, removed: true });
+            });
+            await cdp.send("WebMCP.enable");
+        }
+        catch {
+            // Older Chromium without the WebMCP domain: rely on the other sources.
+        }
+        try {
+            const response = await page.goto(url, { waitUntil: "load", timeout: opts.timeoutMs });
+            const headers = response?.headers() ?? {};
+            result.permissionsPolicy = headers["permissions-policy"] ?? null;
+        }
+        catch (e) {
+            const msg = firstLine(e);
+            if (!/timeout/i.test(msg) || page.url() === "about:blank") {
+                result.error = msg;
+                result.finalUrl = page.url() === "about:blank" ? null : page.url();
+                return result;
+            }
+            result.error = `${msg} (partial: tools registered before the timeout are included)`;
+        }
+        // Wait for registrations to stop: at most settleMs, done early after quietMs without change.
+        const countNow = async () => {
+            const captured = await withTimeout(page.evaluate(() => {
+                const log = window[Symbol.for("vskill.webmcp")];
+                return Array.isArray(log) ? log.length : 0;
+            }), 2000, "page.evaluate").catch(() => 0);
+            return captured + cdpEvents.length;
+        };
+        const start = Date.now();
+        let last = await countNow();
+        let lastChange = Date.now();
+        while (Date.now() - start < settleMs) {
+            await page.waitForTimeout(250);
+            const n = await countNow();
+            if (n !== last) {
+                last = n;
+                lastChange = Date.now();
+            }
+            else if (Date.now() - lastChange >= quietMs) {
+                break;
+            }
+        }
+        result.finalUrl = page.url();
+        const readSnapshot = () => withTimeout(page.evaluate(snapshotInPage), 10_000, "reading tools from the page");
+        let snap;
+        try {
+            snap = await readSnapshot();
+        }
+        catch (e) {
+            // The page navigated itself (client-side redirect) mid-read: read the new document once more.
+            if (!/context was destroyed|navigat/i.test(String(e)))
+                throw e;
+            await page.waitForTimeout(1000);
+            snap = await readSnapshot();
+        }
+        result.finalUrl = page.url();
+        result.documentModelContext = snap.documentModelContext;
+        result.navigatorModelContext = snap.navigatorModelContext;
+        result.platforms = snap.platforms;
+        const captured = snap.captured.map(({ stack, ...rest }) => ({
+            ...rest,
+            scriptUrl: rest.unregistered ? undefined : scriptUrlFromStack(stack, PROBE_NAME),
+        }));
+        result.tools = mergeTools({
+            pageUrl: result.finalUrl,
+            captured,
+            cdp: cdpEvents,
+            listed: snap.listed,
+            platforms: snap.platforms,
+        });
+    }
+    catch (e) {
+        result.error = result.error ?? firstLine(e);
+    }
+    finally {
+        opts.signal?.removeEventListener("abort", onAbort);
+        await ctx.close().catch(() => { });
+    }
+    return result;
+}
+//# sourceMappingURL=enumerate.js.map

package/dist/webmcp/enumerate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enumerate.js","sourceRoot":"","sources":["../../src/webmcp/enumerate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,6EAA6E;AAC7E,gEAAgE;AAChE,8EAA8E;AAE9E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAoD,MAAM,YAAY,CAAC;AAG9G,sGAAsG;AACtG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,kDAAkD,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,mDAAmD,CAAC;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAsChD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC5D,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAA8B;YAC1C,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;YACvB,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;SACpE,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAQ,MAAM,OAAO,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;gBACvD,IAAI,QAAQ;oBAAE,OAAO,QAAsB,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,wEAAwE;IACxE,+GAA+G;IAC/G,kDAAkD;IAClD,wFAAwF;CACzF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,+EAA+E;AAE/E,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,iBAAiB,GAAiD;IACtE;QACE,MAAM,EAAE,0BAA0B;QAClC,KAAK,EAAE;YACL,CAAC,iCAAiC,EAAE,uBAAuB,CAAC;YAC5D,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;YAC1D,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;YAC1D,CAAC,mCAAmC,EAAE,uBAAuB,CAAC;YAC9D,CAAC,cAAc,EAAE,gBAAgB,CAAC;YAClC,CAAC,6BAA6B,EAAE,2BAA2B,CAAC;SAC7D;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE;YACL,CAAC,kBAAkB,EAAE,+BAA+B,EAAE,UAAU,EAAE,OAAO,EAAE,2BAA2B,CAAC;YACvG,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC;YAC/D,CAAC,gBAAgB,EAAE,QAAQ,CAAC;YAC5B,CAAC,cAAc,EAAE,QAAQ,CAAC;YAC1B,CAAC,cAAc,EAAE,YAAY,CAAC;YAC9B,CAAC,YAAY,EAAE,YAAY,CAAC;SAC7B;KACF;CACF,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,OAAiB,gBAAgB,EAAE;IACpE,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,GAAyC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,OAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;oBAChC,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAoB,EAAE,QAAiB;IAC3E,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,kBAAkB,EAAE,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAoC,EAAE;IACxE,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC9C,GAAiC,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACjE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,aAAa;QACnB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAmDX,UAAU,KAAK,CAAC;AAWhC,qEAAqE;AACrE,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,MAAa,CAAC;IACxB,MAAM,CAAC,GAAG,QAAe,CAAC;IAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,MAAM,GAAG,GAAiB;QACxB,oBAAoB,EAAE,CAAC,CAAC,EAAE;QAC1B,qBAAqB,EAAE,cAAc,IAAI,SAAS;QAClD,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;IACF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,CAAC,aAAa,CAAC,8EAA8E,CAAC,CAAC;QACpH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,WAAW,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IACnD,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;KAC9F,CAAC;SACC,IAAI,CAAC,CAAC,KAAU,EAAE,EAAE;QACnB,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACxD,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC1E,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACrF,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC3D,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC9B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QACpB,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACP,CAAC;AAeD,mGAAmG;AACnG,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,IAAY;IAC7D,IAAI,KAAiC,CAAC;IACtC,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC;KACH,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,MAAW;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACtD,IAAI,MAAM,EAAE,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,EAAE,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAkB;IACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAkB,EAAE,GAAW,EAAE,IAAsB;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,MAAM,MAAM,GAAsB;QAChC,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,oBAAoB,EAAE,KAAK;QAC3B,qBAAqB,EAAE,KAAK;QAC5B,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACnC,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,OAAO;QACvB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAA+B,EAAE,EAAE;YACpD,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAc,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1C,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,EAAE,IAAI;wBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE;gBAClC,MAAM,KAAK,GAAc,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;gBACrG,KAAK,MAAM,CAAC,IAAI,KAAK;oBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACtF,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1C,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC;QACnE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,aAAa,EAAE,CAAC;gBAC1D,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC;gBACnB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACnE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,CAAC,KAAK,GAAG,GAAG,GAAG,8DAA8D,CAAC;QACtF,CAAC;QAED,6FAA6F;QAC7F,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACjB,MAAM,GAAG,GAAI,MAAc,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;gBACzD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,EACF,IAAI,EACJ,eAAe,CAChB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,CAAC;gBACT,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;gBAC9C,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC7G,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,8FAA8F;YAC9F,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACxD,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAC1D,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAmB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1E,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC;SACjF,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;YACxB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,QAAQ;YACR,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/webmcp/format.d.ts

@@ -0,0 +1,9 @@
+import type { SiteReport } from "./types.js";
+/**
+ * Page-supplied text (tool names, matched description excerpts, script URLs)
+ * goes to the auditor's terminal: show control and bidi-override characters
+ * as U+XXXX so a site cannot send escape sequences or reorder the output.
+ */
+export declare function clean(s: string): string;
+export declare function formatSiteTerminal(r: SiteReport): string;
+export declare function formatBatchFooter(reports: SiteReport[]): string;

package/dist/webmcp/format.js

@@ -0,0 +1,105 @@
+// ---------------------------------------------------------------------------
+// vskill audit-webmcp -- terminal output.
+// ---------------------------------------------------------------------------
+import { bold, cyan, dim, green, red, yellow } from "../utils/output.js";
+function sevLabel(s) {
+    const label = s.toUpperCase().padEnd(8);
+    if (s === "critical" || s === "high")
+        return red(label);
+    if (s === "medium")
+        return yellow(label);
+    if (s === "low")
+        return cyan(label);
+    return dim(label);
+}
+function verdictLabel(r) {
+    const v = r.summary.verdict;
+    if (v === "ERROR")
+        return red(v);
+    return v === "PASS" ? green(v) : v === "CONCERNS" ? yellow(v) : red(v);
+}
+/**
+ * Page-supplied text (tool names, matched description excerpts, script URLs)
+ * goes to the auditor's terminal: show control and bidi-override characters
+ * as U+XXXX so a site cannot send escape sequences or reorder the output.
+ */
+export function clean(s) {
+    return s.replace(/[\u0000-\u001F\u007F-\u009F\u202A-\u202E\u2066-\u2069]/g, (c) => `U+${c.charCodeAt(0).toString(16).toUpperCase().padStart(4, "0")}`);
+}
+function pad(s, n) {
+    return s.length >= n ? s : s + " ".repeat(n - s.length);
+}
+function shortScript(url) {
+    if (!url)
+        return "-";
+    try {
+        const u = new URL(url);
+        const path = u.pathname.length > 32 ? `${u.pathname.slice(0, 31)}…` : u.pathname;
+        return clean(`${u.host}${path}`);
+    }
+    catch {
+        return clean(url);
+    }
+}
+const yn = (b) => (b === true ? "yes" : b === false ? "no" : "-");
+const SOURCE_LABELS = {
+    "first-party": "1st",
+    platform: "platform",
+    library: "library",
+    "third-party": "3rd",
+};
+function sourceLabel(t) {
+    if (t.registeredByKind)
+        return SOURCE_LABELS[t.registeredByKind];
+    return t.thirdParty ? "3rd" : "-";
+}
+export function formatSiteTerminal(r) {
+    const lines = [];
+    const s = r.summary;
+    const target = clean(r.finalUrl && r.finalUrl !== r.url ? `${r.url} -> ${r.finalUrl}` : r.url);
+    const failed = s.verdict === "ERROR";
+    lines.push(`${bold(target)}  ${verdictLabel(r)}${failed ? "" : `  ${dim(`score ${s.score}`)}`}`);
+    if (r.error)
+        lines.push(`  ${red("error:")} ${clean(r.error)}`);
+    if (failed)
+        return lines.join("\n");
+    if (!r.webmcp.documentModelContext && !r.error) {
+        lines.push(dim("  document.modelContext is not available in this browser; WebMCP was not enabled."));
+    }
+    if (r.webmcp.navigatorModelContext) {
+        lines.push(yellow("  navigator.modelContext exists (removed in Chrome 152; the page may polyfill it)."));
+    }
+    lines.push(`  ${s.toolCount} tools: ${s.readOnlyCount} read-only, ${s.consequentialCount} consequential, ` +
+        `${s.writeShapedCount} write-shaped, ${s.thirdPartyCount} third-party` +
+        (s.platformCount ? `, ${s.platformCount} platform` : "") +
+        (s.libraryCount ? `, ${s.libraryCount} library` : ""));
+    if (r.tools.length > 0) {
+        const names = r.tools.map((t) => clean(t.name));
+        const nameW = Math.min(32, Math.max(4, ...names.map((n) => n.length)));
+        lines.push(dim(`  ${pad("TOOL", nameW)}  READONLY  CONSEQ  SOURCE    REGISTERED BY`));
+        r.tools.forEach((t, i) => {
+            const full = names[i];
+            const name = full.length > nameW ? `${full.slice(0, nameW - 1)}…` : full;
+            lines.push(`  ${pad(name, nameW)}  ${pad(yn(t.annotations.readOnlyHint), 8)}  ${pad(yn(t.annotations.consequentialHint), 6)}  ` +
+                `${pad(sourceLabel(t), 8)}  ${shortScript(t.registeredBy)}`);
+        });
+    }
+    if (r.findings.length > 0) {
+        lines.push("");
+        for (const f of r.findings) {
+            lines.push(`  ${sevLabel(f.severity)} ${f.id}  ${f.tool ? `${bold(clean(f.tool))}: ` : ""}${clean(f.message)}`);
+        }
+    }
+    else if (r.tools.length > 0) {
+        lines.push(green("  No findings."));
+    }
+    return lines.join("\n");
+}
+export function formatBatchFooter(reports) {
+    const withTools = reports.filter((r) => r.summary.toolCount > 0).length;
+    const count = (v) => reports.filter((r) => r.summary.verdict === v).length;
+    const errors = count("ERROR");
+    return bold(`${reports.length} sites: ${withTools} expose WebMCP tools | ` +
+        `${count("PASS")} PASS, ${count("CONCERNS")} CONCERNS, ${count("FAIL")} FAIL, ${errors} errors`);
+}
+//# sourceMappingURL=format.js.map

package/dist/webmcp/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/webmcp/format.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGzE,SAAS,QAAQ,CAAC,CAAW;IAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,yDAAyD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACzJ,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAEvF,MAAM,aAAa,GAAgE;IACjF,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,SAAS,WAAW,CAAC,CAAa;IAChC,IAAI,CAAC,CAAC,gBAAgB;QAAE,OAAO,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAa;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,oFAAoF,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,aAAa,eAAe,CAAC,CAAC,kBAAkB,kBAAkB;QAC7F,GAAG,CAAC,CAAC,gBAAgB,kBAAkB,CAAC,CAAC,eAAe,cAAc;QACtE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;IAEF,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,IAAI;gBAClH,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,CAAmC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,IAAI,CACT,GAAG,OAAO,CAAC,MAAM,WAAW,SAAS,yBAAyB;QAC5D,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,UAAU,MAAM,SAAS,CAClG,CAAC;AACJ,CAAC"}

package/dist/webmcp/merge.d.ts

@@ -0,0 +1,49 @@
+import type { ToolAnnotations, WebmcpTool } from "./types.js";
+export interface CapturedTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: Record<string, unknown>;
+    exposedTo?: unknown;
+    scriptUrl?: string | null;
+    unregistered?: boolean;
+}
+export interface CdpTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: Record<string, unknown>;
+    stackTrace?: {
+        callFrames?: Array<{
+            url?: string;
+        }>;
+    };
+    removed?: boolean;
+}
+export interface ListedTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: Record<string, unknown>;
+    origin?: string;
+    exposedTo?: unknown;
+}
+export interface MergeInput {
+    pageUrl: string;
+    captured: CapturedTool[];
+    cdp: CdpTool[];
+    /** null when getTools() was unavailable or threw. */
+    listed: ListedTool[] | null;
+    /** Hosting platform markers found on the page (attribution.ts PlatformMarker). */
+    platforms?: string[];
+}
+/** Map readOnly/readOnlyHint, consequential/consequentialHint, untrustedContent/untrustedContentHint. */
+export declare function normalizeAnnotations(raw: unknown): ToolAnnotations;
+/** First http(s) frame in a CDP stack trace. */
+export declare function cdpRegistrar(t: CdpTool): string | undefined;
+/** First http(s) URL in a V8 Error().stack that is not our probe script. */
+export declare function scriptUrlFromStack(stack: string | undefined, probeName?: string): string | null;
+export declare function mergeTools(input: MergeInput): WebmcpTool[];