{ "canonical_name": "madaburns/bv-mcp", "compilation_id": "pack_48e615f4d06242b98b6838657fa06c34", "created_at": "2026-05-24T01:22:48.384138+00:00", "created_by": "project-pack-compiler", "feedback": { "carrier_selection_notes": [ "viable_asset_types=mcp_config, recipe, host_instruction, eval, preflight", "recommended_asset_types=mcp_config, recipe, host_instruction, eval, preflight" ], "evidence_delta": { "confirmed_claims": [ "identity_anchor_present", "capability_and_host_targets_present", "install_path_declared_or_better" ], "missing_required_fields": [], "must_verify_forwarded": [ "Run or inspect `npx blackveil-dns` in an isolated environment.", "Confirm the project exposes the claimed capability to at least one target host." ], "quickstart_execution_scope": "allowlisted_sandbox_smoke", "sandbox_command": "npx blackveil-dns", "sandbox_container_image": "node:22-slim", "sandbox_execution_backend": "docker", "sandbox_planner_decision": "deterministic_isolated_install", "sandbox_validation_id": "sbx_d91988e50af1412e9cdd7bfacc970d10" }, "feedback_event_type": "project_pack_compilation_feedback", "learning_candidate_reasons": [], "template_gaps": [] }, "identity": { "canonical_id": "project_3a4913deeb4f1075fc4c7c869f9f2350", "canonical_name": "madaburns/bv-mcp", "homepage_url": null, "license": "unknown", "repo_url": "https://github.com/MadaBurns/bv-mcp", "slug": "bv-mcp", "source_packet_id": "phit_62c9fcaf1dd843b38f458eb60035ccf2", "source_validation_id": "dval_a3eaa0b00656457ba2429c9792f2db1b" }, "merchandising": { "best_for": "需要安全审查与权限治理能力，并使用 mcp_host的用户", "github_forks": null, "github_stars": null, "one_liner_en": "DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.", "one_liner_zh": "DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.", "primary_category": { "category_id": "security-permissions", "name_zh": "安全审查与权限治理", "name_en": "Security and Permissions", "confidence": "high", "reason": "semantic truth gate fallback rework" }, "target_user": "使用 mcp_host 等宿主 AI 的用户", "title_en": "bv-mcp", "title_zh": "bv-mcp 能力包", "visible_tags": [ { "type": "product_domain", "label_zh": "安全审查", "label_en": "Security Audit", "tag_id": "product_domain-security-audit", "source": "semantic_truth_gate_rework" }, { "type": "user_job", "label_zh": "权限复核", "label_en": "Permission Review", "tag_id": "user_job-permission-review", "source": "semantic_truth_gate_rework" }, { "type": "core_capability", "label_zh": "风险识别", "label_en": "Risk Detection", "tag_id": "core_capability-risk-detection", "source": "semantic_truth_gate_rework" }, { "type": "workflow_pattern", "label_zh": "治理检查", "label_en": "Governance Check", "tag_id": "workflow_pattern-governance-check", "source": "semantic_truth_gate_rework" }, { "type": "selection_signal", "label_zh": "输入验证", "label_en": "Input Validation", "tag_id": "selection_signal-input-validation", "source": "semantic_truth_gate_rework" } ] }, "packet_id": "phit_62c9fcaf1dd843b38f458eb60035ccf2", "page_model": { "artifacts": { "artifact_slug": "bv-mcp", "files": [ "PROJECT_PACK.json", "QUICK_START.md", "PROMPT_PREVIEW.md", "HUMAN_MANUAL.md", "AI_CONTEXT_PACK.md", "BOUNDARY_RISK_CARD.md", "PITFALL_LOG.md", "REPO_INSPECTION.json", "REPO_INSPECTION.md", "CAPABILITY_CONTRACT.json", "EVIDENCE_INDEX.json", "CLAIM_GRAPH.json" ], "required_files": [ "PROJECT_PACK.json", "QUICK_START.md", "PROMPT_PREVIEW.md", "HUMAN_MANUAL.md", "AI_CONTEXT_PACK.md", "BOUNDARY_RISK_CARD.md", "PITFALL_LOG.md", "REPO_INSPECTION.json" ] }, "detail": { "capability_source": "Project Hit Packet + DownstreamValidationResult", "commands": [ { "command": "npx blackveil-dns", "label": "Node.js / npx · 官方安装入口", "source": "https://github.com/MadaBurns/bv-mcp#readme", "verified": true } ], "display_tags": [ "安全审查", "权限复核", "风险识别", "治理检查", "输入验证" ], "eyebrow": "安全审查与权限治理", "glance": [ { "body": "判断自己是不是目标用户。", "label": "最适合谁", "value": "需要安全审查与权限治理能力，并使用 mcp_host的用户" }, { "body": "先理解能力边界，再决定是否继续。", "label": "核心价值", "value": "DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more." }, { "body": "未完成验证前保持审慎。", "label": "继续前", "value": "publish to Doramagic.ai project surfaces" } ], "guardrail_source": "Boundary & Risk Card", "guardrails": [ { "body": "Prompt Preview 只展示流程，不证明项目已安装或运行。", "label": "Check 1", "value": "不要把试用当真实运行" }, { "body": "mcp_host", "label": "Check 2", "value": "确认宿主兼容" }, { "body": "publish to Doramagic.ai project surfaces", "label": "Check 3", "value": "先隔离验证" } ], "mode": "mcp_config, recipe, host_instruction, eval, preflight", "pitfall_log": { "items": [ { "body": "仓库名 `bv-mcp` 与安装入口 `blackveil-dns` 不完全一致。", "category": "身份坑", "evidence": [ "identity.distribution | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | repo=bv-mcp; install=blackveil-dns" ], "severity": "medium", "suggested_check": "在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。", "title": "仓库名和安装名不一致", "user_impact": "用户照着仓库名搜索包或照着包名找仓库时容易走错入口。" }, { "body": "Developers should check this installation risk before relying on the project: v2.15.0", "category": "安装坑", "evidence": [ "failure_mode_cluster:github_release | fmev_9140ac651a595cd7080066734be793f0 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0 | v2.15.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node", "title": "失败模式：installation: v2.15.0", "user_impact": "Upgrade or migration may change expected behavior: v2.15.0" }, { "body": "Developers should check this installation risk before relying on the project: v2.21.2", "category": "安装坑", "evidence": [ "failure_mode_cluster:github_release | fmev_79fa7dd8e004846c272458cea5989a50 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2 | v2.21.2" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node", "title": "失败模式：installation: v2.21.2", "user_impact": "Upgrade or migration may change expected behavior: v2.21.2" }, { "body": "Developers should check this installation risk before relying on the project: v2.21.4", "category": "安装坑", "evidence": [ "failure_mode_cluster:github_release | fmev_79dcde979ed5a1ab616ec36d4ca908ac | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4 | v2.21.4" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node", "title": "失败模式：installation: v2.21.4", "user_impact": "Upgrade or migration may change expected behavior: v2.21.4" }, { "body": "Developers should check this configuration risk before relying on the project: v2.21.3", "category": "配置坑", "evidence": [ "failure_mode_cluster:github_release | fmev_880e5d019d1d59ec27e1d6e633bf8ab3 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3 | v2.21.3" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python", "title": "失败模式：configuration: v2.21.3", "user_impact": "Upgrade or migration may change expected behavior: v2.21.3" }, { "body": "Developers should check this configuration risk before relying on the project: v2.21.5", "category": "配置坑", "evidence": [ "failure_mode_cluster:github_release | fmev_f575125577e3d0677d78cf724ae17b86 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5 | v2.21.5" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.21.5. Context: Observed when using python", "title": "失败模式：configuration: v2.21.5", "user_impact": "Upgrade or migration may change expected behavior: v2.21.5" }, { "body": "Developers should check this configuration risk before relying on the project: v2.22.0", "category": "配置坑", "evidence": [ "failure_mode_cluster:github_release | fmev_08bbcb6cd0b26f3592d0d91616a8f5aa | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0 | v2.22.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.22.0. Context: Observed when using python", "title": "失败模式：configuration: v2.22.0", "user_impact": "Upgrade or migration may change expected behavior: v2.22.0" }, { "body": "Developers should check this configuration risk before relying on the project: v2.24.0", "category": "配置坑", "evidence": [ "failure_mode_cluster:github_release | fmev_c8ff700daeb43ed10610457d9ae0a216 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0 | v2.24.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.24.0. Context: Source discussion did not expose a precise runtime context.", "title": "失败模式：configuration: v2.24.0", "user_impact": "Upgrade or migration may change expected behavior: v2.24.0" }, { "body": "README/documentation is current enough for a first validation pass.", "category": "能力坑", "evidence": [ "capability.assumptions | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | README/documentation is current enough for a first validation pass." ], "severity": "medium", "suggested_check": "将假设转成下游验证清单。", "title": "能力判断依赖假设", "user_impact": "假设不成立时，用户拿不到承诺的能力。" }, { "body": "Developers should check this runtime risk before relying on the project: v2.16.0", "category": "运行坑", "evidence": [ "failure_mode_cluster:github_release | fmev_64947b1b7d48f7a970f4c6f296b9d9db | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0 | v2.16.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.16.0. Context: Source discussion did not expose a precise runtime context.", "title": "失败模式：runtime: v2.16.0", "user_impact": "Upgrade or migration may change expected behavior: v2.16.0" }, { "body": "Developers should check this migration risk before relying on the project: v2.17.0", "category": "维护坑", "evidence": [ "failure_mode_cluster:github_release | fmev_269569b761dd20b37b035e972a40a5d5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0 | v2.17.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.17.0. Context: Observed during version upgrade or migration.", "title": "失败模式：migration: v2.17.0", "user_impact": "Upgrade or migration may change expected behavior: v2.17.0" }, { "body": "Developers should check this migration risk before relying on the project: v2.23.0", "category": "维护坑", "evidence": [ "failure_mode_cluster:github_release | fmev_3e5ffaaa6e983a9527de0ecc56d0bcb5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0 | v2.23.0" ], "severity": "medium", "suggested_check": "Before packaging this project, run the relevant install/config/quickstart check for: v2.23.0. Context: Observed during version upgrade or migration.", "title": "失败模式：migration: v2.23.0", "user_impact": "Upgrade or migration may change expected behavior: v2.23.0" }, { "body": "未记录 last_activity_observed。", "category": "维护坑", "evidence": [ "evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | last_activity_observed missing" ], "severity": "medium", "suggested_check": "补 GitHub 最近 commit、release、issue/PR 响应信号。", "title": "维护活跃度未知", "user_impact": "新项目、停更项目和活跃项目会被混在一起，推荐信任度下降。" }, { "body": "no_demo", "category": "安全/权限坑", "evidence": [ "downstream_validation.risk_items | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium" ], "severity": "medium", "suggested_check": "进入安全/权限治理复核队列。", "title": "下游验证发现风险项", "user_impact": "下游已经要求复核，不能在页面中弱化。" }, { "body": "no_demo", "category": "安全/权限坑", "evidence": [ "risks.scoring_risks | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium" ], "severity": "medium", "suggested_check": "把风险写入边界卡，并确认是否需要人工复核。", "title": "存在评分风险", "user_impact": "风险会影响是否适合普通用户安装。" }, { "body": "issue_or_pr_quality=unknown。", "category": "维护坑", "evidence": [ "evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | issue_or_pr_quality=unknown" ], "severity": "low", "suggested_check": "抽样最近 issue/PR，判断是否长期无人处理。", "title": "issue/PR 响应质量未知", "user_impact": "用户无法判断遇到问题后是否有人维护。" } ], "source": "ProjectPitfallLog + ProjectHitPacket + validation + community signals", "summary": "发现 17 个潜在踩坑项，其中 0 个为 high/blocking；最高优先级：身份坑 - 仓库名和安装名不一致。", "title": "踩坑日志" }, "snapshot": { "contributors": null, "forks": null, "license": "unknown", "note": "站点快照，非实时质量证明；用于开工前背景判断。", "stars": null }, "source_url": "https://github.com/MadaBurns/bv-mcp", "steps": [ { "body": "不安装项目，先体验能力节奏。", "code": "preview", "title": "先试 Prompt" }, { "body": "理解输入、输出、失败模式和边界。", "code": "manual", "title": "读说明书" }, { "body": "把上下文交给宿主 AI 继续工作。", "code": "context", "title": "带给 AI" }, { "body": "进入主力环境前先完成安装入口与风险边界验证。", "code": "verify", "title": "沙箱验证" } ], "subtitle": "面向安全审查与权限治理的能力包，重点是权限复核、风险工具识别、输入验证和治理检查。", "title": "bv-mcp 能力包", "trial_prompt": "# bv-mcp - Prompt Preview\n\n> 复制下面这段 Prompt 到你常用的 AI，先试一次，不需要安装。\n> 它的目标是让你直接体验这个项目的服务方式，而不是阅读项目介绍。\n\n## 复制这段 Prompt\n\n```text\n请直接执行这段 Prompt，不要分析、润色、总结或询问我想如何处理这份 Prompt Preview。\n\n你现在扮演 bv-mcp 的“安装前体验版”。\n这不是项目介绍、不是评价报告、不是 README 总结。你的任务是让我用最小成本体验它的核心服务。\n\n我的试用任务：我想检查一个 AI 工具或 Agent 工作流在权限、提示注入和数据泄露上的风险。\n我常用的宿主 AI：MCP Client\n\n【体验目标】\n围绕我的真实任务，现场演示这个项目如何把输入转成 示例引导, 判断线索。重点是让我感受到工作方式，而不是给我项目背景。\n\n【业务流约束】\n- 你必须像一个正在提供服务的项目能力包，而不是像一个讲解员。\n- 每一轮只推进一个步骤；提出问题后必须停下来等我回答。\n- 每一步都必须让我感受到一个具体服务动作：澄清、整理、规划、检查、判断或收尾。\n- 每一步都要说明：当前目标、你需要我提供什么、我回答后你会产出什么。\n- 不要安装、不要运行命令、不要写代码、不要声称测试通过、不要声称已经修改文件。\n- 需要真实安装或宿主加载后才能验证的内容，必须明确说“这一步需要安装后验证”。\n- 如果我说“用示例继续”，你可以用虚构示例推进，但仍然不能声称真实执行。\n\n【可体验服务能力】\n- 安装前能力预览: DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more. 输入：用户任务, 当前 AI 对话上下文；输出：示例引导, 判断线索。\n\n【必须安装后才可验证的能力】\n- 命令行启动或安装流程: 项目文档中存在可执行命令，真实使用需要在本地或宿主环境中运行这些命令。 输入：终端环境, 包管理器, 项目依赖；输出：安装结果, 列表/更新/运行结果。\n\n【核心服务流】\n请严格按这个顺序带我体验。不要一次性输出完整流程：\n1. overview：仓库概览。围绕“仓库概览”模拟一次用户任务，不展示安装或运行结果。\n2. entrypoints：入口与运行边界。围绕“入口与运行边界”模拟一次用户任务，不展示安装或运行结果。\n3. architecture：架构证据地图。围绕“架构证据地图”模拟一次用户任务，不展示安装或运行结果。\n4. operations：运维与验证边界。围绕“运维与验证边界”模拟一次用户任务，不展示安装或运行结果。\n\n【核心能力体验剧本】\n每一步都必须按“输入 -> 服务动作 -> 中间产物”执行。不要只说流程名：\n1. overview\n输入：用户提供的“仓库概览”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n2. entrypoints\n输入：用户提供的“入口与运行边界”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n3. architecture\n输入：用户提供的“架构证据地图”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n4. operations\n输入：用户提供的“运维与验证边界”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n【项目服务规则】\n这些规则决定你如何服务用户。不要解释规则本身，而要在每一步执行时遵守：\n- 先确认用户任务、输入材料和成功标准，再模拟项目能力。\n- 每一步都必须形成可检查的小产物，并等待用户确认后再继续。\n- 凡是需要安装、调用工具或访问外部服务的能力，都必须标记为安装后验证。\n\n【每一步的服务约束】\n- Step 1 / overview：Step 1 必须围绕“仓库概览”形成一个小中间产物，并等待用户确认。\n- Step 2 / entrypoints：Step 2 必须围绕“入口与运行边界”形成一个小中间产物，并等待用户确认。\n- Step 3 / architecture：Step 3 必须围绕“架构证据地图”形成一个小中间产物，并等待用户确认。\n- Step 4 / operations：Step 4 必须围绕“运维与验证边界”形成一个小中间产物，并等待用户确认。\n\n【边界与风险】\n- 不要声称已经安装、运行、调用 API、读写本地文件或完成真实任务。\n- 安装前预览只能展示工作方式，不能证明兼容性、性能或输出质量。\n- 涉及安装、插件加载、工具调用或外部服务的能力必须安装后验证。\n\n【可追溯依据】\n这些路径只用于你内部校验或在我追问“依据是什么”时简要引用。不要在首次回复主动展开：\n- https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0\n- https://github.com/MadaBurns/bv-mcp#readme\n- README.md\n- package.json\n- .devcontainer/Dockerfile\n- crates/bv-wasm-core/Cargo.toml\n- examples/slack-discord-webhook/README.md\n- extensions/vscode/README.md\n- extensions/vscode/package.json\n- packages/bv-whois/package.json\n- packages/dns-checks/README.md\n- packages/dns-checks/package.json\n\n【首次问题规则】\n- 首次三问必须先确认用户目标、成功标准和边界，不要提前进入工具、安装或实现细节。\n- 如果后续需要技术条件、文件路径或运行环境，必须等用户确认目标后再追问。\n\n首次回复必须只输出下面 4 个部分：\n1. 体验开始：用 1 句话说明你将带我体验 bv-mcp 的核心服务。\n2. 当前步骤：明确进入 Step 1，并说明这一步要解决什么。\n3. 你会如何服务我：说明你会先改变我完成任务的哪个动作。\n4. 只问我 3 个问题，然后停下等待回答。\n\n首次回复禁止输出：后续完整流程、证据清单、安装命令、项目评价、营销文案、已经安装或运行的说法。\n\nStep 1 / brainstorming 的二轮协议：\n- 我回答首次三问后，你仍然停留在 Step 1 / brainstorming，不要进入 Step 2。\n- 第二次回复必须产出 6 个部分：澄清后的任务定义、成功标准、边界条件、\n 2-3 个可选方案、每个方案的权衡、推荐方案。\n- 第二次回复最后必须问我是否确认推荐方案；只有我明确确认后，才能进入下一步。\n- 第二次回复禁止输出 git worktree、代码计划、测试文件、命令或真实执行结果。\n\n后续对话规则：\n- 我回答后，你先完成当前步骤的中间产物并等待确认；只有我确认后，才能进入下一步。\n- 每一步都要生成一个小的中间产物，例如澄清后的目标、计划草案、测试意图、验证清单或继续/停止判断。\n- 所有演示都写成“我会建议/我会引导/这一步会形成”，不要写成已经真实执行。\n- 不要声称已经测试通过、文件已修改、命令已运行或结果已产生。\n- 如果某个能力必须安装后验证，请直接说“这一步需要安装后验证”。\n- 如果证据不足，请明确说“证据不足”，不要补事实。\n```\n", "voices": [ { "body": "来源平台：github。github/github_release: v2.24.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0）；github/github_release: v2.23.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0）；github/github_release: v2.22.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0）；github/github_release: v2.21.5（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5）；github/github_release: v2.21.4（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4）；github/github_release: v2.21.3（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3）；github/github_release: v2.21.2（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2）；github/github_release: v2.17.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0）；github/github_release: v2.16.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0）；github/github_release: v2.15.0（https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0）。这些是项目级外部声音，不作为单独质量证明。", "items": [ { "kind": "github_release", "source": "github", "title": "v2.24.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0" }, { "kind": "github_release", "source": "github", "title": "v2.23.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0" }, { "kind": "github_release", "source": "github", "title": "v2.22.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0" }, { "kind": "github_release", "source": "github", "title": "v2.21.5", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5" }, { "kind": "github_release", "source": "github", "title": "v2.21.4", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4" }, { "kind": "github_release", "source": "github", "title": "v2.21.3", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3" }, { "kind": "github_release", "source": "github", "title": "v2.21.2", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2" }, { "kind": "github_release", "source": "github", "title": "v2.17.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0" }, { "kind": "github_release", "source": "github", "title": "v2.16.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0" }, { "kind": "github_release", "source": "github", "title": "v2.15.0", "url": "https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0" } ], "status": "已收录 10 条来源", "title": "社区讨论" } ] }, "homepage_card": { "category": "安全审查与权限治理", "desc": "面向安全审查与权限治理的能力包，重点是权限复核、风险工具识别、输入验证和治理检查。", "effort": "安装已验证", "forks": null, "icon": "shield", "name": "bv-mcp 能力包", "risk": "可发布", "slug": "bv-mcp", "stars": null, "tags": [ "安全审查", "权限复核", "风险识别", "治理检查", "输入验证" ], "thumb": "purple", "type": "MCP 配置" }, "manual": { "markdown": "# https://github.com/MadaBurns/bv-mcp 项目说明书\n\n生成时间: 2026-05-22 17:00:49 UTC\n\n## 目录\n\n- [仓库概览](#overview)\n- [入口与运行边界](#entrypoints)\n- [架构证据地图](#architecture)\n- [运维与验证边界](#operations)\n\n\n\n## 仓库概览\n\n### 相关页面\n\n相关主题：[入口与运行边界](#entrypoints), [架构证据地图](#architecture), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 仓库概览\n\n本页在 Human Wiki provider 不可用时基于仓库证据生成，只使用 README、文件树和已选源码文件，不把模板描述冒充项目事实。\n\n## README 证据\n\n
\n\n# BLACK**V**EIL DNS\n\n**Know where you stand.**\n\nSource-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE.\n\n[![GitHub stars](https://img.shields.io/github/stars/MadaBurns/bv-mcp?style=flat&logo=github)](https://github.com/MadaBurns/bv-mcp/stargazers)\n[![npm version](https://img.shields.io/npm/v/blackveil-dns)](https://www.npmjs.com/package/blackveil-dns)\n[![npm downloads](https://img.shields.io/npm/dm/blackveil-dns)](https://www.npmjs.com/package/blackveil-dns)\n[![MCP tools](https://img.shields.io/badge/MCP%20tools-59-brightgreen)](https://github.com/MadaBurns/bv-mcp/actions)\n[![BUSL-1.1 License](https://img.shields.io/badge/License-BUSL--1.1-blue.svg)](LICENSE)\n[![MCP](https://img.shields.io/badge/MCP-2025--03--26-blue)](https://modelcontextprotocol.io/)\n[![Cloudflare Workers](https://img.shields.io/badge/Cloudflare%20Workers-F38020?logo=cloudflare&logoColor=white)](https://workers.cloudflare.com/)\n[![TypeScript](https://img.shields.io/badge/TypeScript-5.9-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)\n\n![DNS Security](https://dns-mcp.blackveilsecurity.com/badge/blackveilsecurity.com)\n\n
\n\n---\n\n## Try it in 30 seconds\n\n**Claude Desktop** (one-click install):\n\nDownload the [Blackveil DNS extension](https://github.com/MadaBurns/bv-claude-dns/releases/latest/download/bv-claude-dns.mcpb) and open it — the current 59-tool surface is available instantly. [Verify your download](https://blackveilsecurity.com/extensions/claude-dns#install).\n\n**Claude Code** (one command):\n\n```bash\nclaude mcp add --transport http blackveil-dns https://dns-mcp.blackveilsecurity.com/mcp\n```\n\nThen ask: `scan anthropic.com`\n\n**Smithery** (one command):\n\n```bash\nsmithery mcp add MadaBurns/bv-mcp\n```\n\n**Verify the endpoint is live:**\n\n```bash\ncurl https://dns-mcp.blackveilsecurity.com/health\n```\n\nNo install. No API key. One URL for hosted HTTP:\n\n```\nEndpoint https://dns-mcp.blackveilsecurity.com/mcp\nTransport Streamable HTTP · JSON-RPC 2.0\nAuth None required\n```\n\nTransport support:\n\n- `Streamable HTTP`: `POST /mcp`, `GET /mcp`, `DELETE /mcp`\n- `Native stdio`: `blackveil-dns-mcp` CLI from the `blackveil-dns` npm package\n- `Legacy HTTP+SSE`: `GET /mcp/sse` bootstrap stream plus `POST /mcp/messages?sessionId=...`\n\n---\n\n## What you get\n\n- **59 MCP to\n\n[excerpt truncated]\n\n## 已选源码清单\n\n- `README.md`\n- `package.json`\n- `.devcontainer/Dockerfile`\n- `crates/bv-wasm-core/Cargo.toml`\n- `examples/slack-discord-webhook/README.md`\n- `extensions/vscode/README.md`\n- `extensions/vscode/package.json`\n- `packages/bv-whois/package.json`\n- `packages/dns-checks/README.md`\n- `packages/dns-checks/package.json`\n- `scripts/oauth/README.md`\n- `src/index.ts`\n\n| 文件 | 证据角色 | 大小 |\n|---|---|---|\n| `README.md` | README/产品与使用证据 | 14247 bytes |\n| `package.json` | 包与运行时元数据 | 2841 bytes |\n| `.devcontainer/Dockerfile` | 仓库证据 | 450 bytes |\n| `crates/bv-wasm-core/Cargo.toml` | 包与运行时元数据 | 205 bytes |\n| `examples/slack-discord-webhook/README.md` | 文档证据 | 913 bytes |\n| `extensions/vscode/README.md` | 文档证据 | 4129 bytes |\n| `extensions/vscode/package.json` | 包与运行时元数据 | 1027 bytes |\n| `packages/bv-whois/package.json` | 包与运行时元数据 | 625 bytes |\n| `packages/dns-checks/README.md` | 文档证据 | 2143 bytes |\n| `packages/dns-checks/package.json` | 包与运行时元数据 | 988 bytes |\n| `scripts/oauth/README.md` | 文档证据 | 5187 bytes |\n| `src/index.ts` | 实现边界 | 38710 bytes |\n\n资料来源：`[README.md:1-120]()`\n\n---\n\n\n\n## 入口与运行边界\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [架构证据地图](#architecture), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 入口与运行边界\n\n下面文件是安装、启动、配置或宿主集成的高信号候选。这里给出证据地图，不推断未经执行验证的 API 契约。\n\n| 文件 | 证据角色 | 大小 |\n|---|---|---|\n| `README.md` | README/产品与使用证据 | 14247 bytes |\n| `package.json` | 包与运行时元数据 | 2841 bytes |\n| `.devcontainer/Dockerfile` | 仓库证据 | 450 bytes |\n| `crates/bv-wasm-core/Cargo.toml` | 包与运行时元数据 | 205 bytes |\n| `examples/slack-discord-webhook/README.md` | 文档证据 | 913 bytes |\n| `extensions/vscode/README.md` | 文档证据 | 4129 bytes |\n| `extensions/vscode/package.json` | 包与运行时元数据 | 1027 bytes |\n| `packages/bv-whois/package.json` | 包与运行时元数据 | 625 bytes |\n| `packages/dns-checks/README.md` | 文档证据 | 2143 bytes |\n| `packages/dns-checks/package.json` | 包与运行时元数据 | 988 bytes |\n| `scripts/oauth/README.md` | 文档证据 | 5187 bytes |\n| `src/index.ts` | 实现边界 | 38710 bytes |\n\n资料来源：`[README.md:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)`\n\n---\n\n\n\n## 架构证据地图\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [入口与运行边界](#entrypoints), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 架构证据地图\n\n本节只根据仓库路径组织可能的架构区域；需要运行验证的行为不会在这里断言。\n\n- `.`: `README.md`, `package.json`\n- `.devcontainer`: `.devcontainer/Dockerfile`\n- `crates`: `crates/bv-wasm-core/Cargo.toml`\n- `examples`: `examples/slack-discord-webhook/README.md`\n- `extensions`: `extensions/vscode/README.md`, `extensions/vscode/package.json`\n- `packages`: `packages/bv-whois/package.json`, `packages/dns-checks/README.md`, `packages/dns-checks/package.json`\n- `scripts`: `scripts/oauth/README.md`\n- `src`: `src/index.ts`\n\n资料来源：`[package.json:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)`\n\n---\n\n\n\n## 运维与验证边界\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [入口与运行边界](#entrypoints), [架构证据地图](#architecture)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 运维与验证边界\n\n运维建议仅来自仓库中真实存在的文件。把该项目用于 agent 工作流前，仍需在 sandbox 中验证安装、quickstart 和运行行为。\n\n- Documentation signal: `README.md`\n- Runtime/package signal: `package.json`\n- Containerization signal: `.devcontainer/Dockerfile`\n- Runtime/package signal: `crates/bv-wasm-core/Cargo.toml`\n- Documentation signal: `examples/slack-discord-webhook/README.md`\n- Documentation signal: `extensions/vscode/README.md`\n- Runtime/package signal: `extensions/vscode/package.json`\n- Runtime/package signal: `packages/bv-whois/package.json`\n- Documentation signal: `packages/dns-checks/README.md`\n- Runtime/package signal: `packages/dns-checks/package.json`\n\n资料来源：`[.devcontainer/Dockerfile:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)`\n\n---\n\n---\n\n## Doramagic 踩坑日志\n\n项目：madaburns/bv-mcp\n\n摘要：发现 17 个潜在踩坑项，其中 0 个为 high/blocking；最高优先级：身份坑 - 仓库名和安装名不一致。\n\n## 1. 身份坑 · 仓库名和安装名不一致\n\n- 严重度：medium\n- 证据强度：runtime_trace\n- 发现：仓库名 `bv-mcp` 与安装入口 `blackveil-dns` 不完全一致。\n- 对用户的影响：用户照着仓库名搜索包或照着包名找仓库时容易走错入口。\n- 建议检查：在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。\n- 复现命令: `npx blackveil-dns`\n- 防护动作: 页面必须同时展示 repo 名和真实安装入口，避免用户搜索错包。\n- 证据：identity.distribution | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | repo=bv-mcp; install=blackveil-dns\n\n## 2. 安装坑 · 失败模式：installation: v2.15.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.15.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.15.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_9140ac651a595cd7080066734be793f0 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0 | v2.15.0\n\n## 3. 安装坑 · 失败模式：installation: v2.21.2\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.2\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.2\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79fa7dd8e004846c272458cea5989a50 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2 | v2.21.2\n\n## 4. 安装坑 · 失败模式：installation: v2.21.4\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.4\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.4\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79dcde979ed5a1ab616ec36d4ca908ac | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4 | v2.21.4\n\n## 5. 配置坑 · 失败模式：configuration: v2.21.3\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.3\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.3\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_880e5d019d1d59ec27e1d6e633bf8ab3 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3 | v2.21.3\n\n## 6. 配置坑 · 失败模式：configuration: v2.21.5\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.5\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.5\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.5. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_f575125577e3d0677d78cf724ae17b86 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5 | v2.21.5\n\n## 7. 配置坑 · 失败模式：configuration: v2.22.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.22.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.22.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.22.0. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_08bbcb6cd0b26f3592d0d91616a8f5aa | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0 | v2.22.0\n\n## 8. 配置坑 · 失败模式：configuration: v2.24.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.24.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.24.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.24.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_c8ff700daeb43ed10610457d9ae0a216 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0 | v2.24.0\n\n## 9. 能力坑 · 能力判断依赖假设\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：README/documentation is current enough for a first validation pass.\n- 对用户的影响：假设不成立时，用户拿不到承诺的能力。\n- 建议检查：将假设转成下游验证清单。\n- 防护动作: 假设必须转成验证项；没有验证结果前不能写成事实。\n- 证据：capability.assumptions | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | README/documentation is current enough for a first validation pass.\n\n## 10. 运行坑 · 失败模式：runtime: v2.16.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this runtime risk before relying on the project: v2.16.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.16.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.16.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_64947b1b7d48f7a970f4c6f296b9d9db | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0 | v2.16.0\n\n## 11. 维护坑 · 失败模式：migration: v2.17.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.17.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.17.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.17.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_269569b761dd20b37b035e972a40a5d5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0 | v2.17.0\n\n## 12. 维护坑 · 失败模式：migration: v2.23.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.23.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.23.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.23.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_3e5ffaaa6e983a9527de0ecc56d0bcb5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0 | v2.23.0\n\n## 13. 维护坑 · 维护活跃度未知\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：未记录 last_activity_observed。\n- 对用户的影响：新项目、停更项目和活跃项目会被混在一起，推荐信任度下降。\n- 建议检查：补 GitHub 最近 commit、release、issue/PR 响应信号。\n- 防护动作: 维护活跃度未知时，推荐强度不能标为高信任。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | last_activity_observed missing\n\n## 14. 安全/权限坑 · 下游验证发现风险项\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：下游已经要求复核，不能在页面中弱化。\n- 建议检查：进入安全/权限治理复核队列。\n- 防护动作: 下游风险存在时必须保持 review/recommendation 降级。\n- 证据：downstream_validation.risk_items | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 15. 安全/权限坑 · 存在评分风险\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：风险会影响是否适合普通用户安装。\n- 建议检查：把风险写入边界卡，并确认是否需要人工复核。\n- 防护动作: 评分风险必须进入边界卡，不能只作为内部分数。\n- 证据：risks.scoring_risks | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 16. 维护坑 · issue/PR 响应质量未知\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：issue_or_pr_quality=unknown。\n- 对用户的影响：用户无法判断遇到问题后是否有人维护。\n- 建议检查：抽样最近 issue/PR，判断是否长期无人处理。\n- 防护动作: issue/PR 响应未知时，必须提示维护风险。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | issue_or_pr_quality=unknown\n\n## 17. 维护坑 · 发布节奏不明确\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：release_recency=unknown。\n- 对用户的影响：安装命令和文档可能落后于代码，用户踩坑概率升高。\n- 建议检查：确认最近 release/tag 和 README 安装命令是否一致。\n- 防护动作: 发布节奏未知或过期时，安装说明必须标注可能漂移。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | release_recency=unknown\n\n\n", "markdown_key": "bv-mcp", "pages": "draft", "source_refs": [ { "evidence_id": "mcp_registry:com.blackveilsecurity/dns:2.13.0", "kind": "mcp_registry", "supports_claim_ids": [ "claim_identity", "claim_distribution", "claim_capability" ], "url": "https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0" }, { "evidence_id": "art_17f53a7394dd43daaa1ac5346a813fed", "kind": "docs", "supports_claim_ids": [ "claim_identity", "claim_distribution", "claim_capability" ], "url": "https://github.com/MadaBurns/bv-mcp#readme" } ], "summary": "DeepWiki/Human Wiki 完整输出，末尾追加 Discovery Agent 踩坑日志。", "title": "bv-mcp 说明书", "toc": [ "https://github.com/MadaBurns/bv-mcp 项目说明书", "目录", "仓库概览", "README 证据", "BLACK**V**EIL DNS", "Try it in 30 seconds", "What you get", "已选源码清单", "Doramagic 踩坑日志" ] } }, "quality_gate": { "blocking_gaps": [], "category_confidence": "medium", "compile_status": "ready_for_review", "five_assets_present": true, "install_sandbox_verified": true, "missing_evidence": [], "next_action": "publish to Doramagic.ai project surfaces", "prompt_preview_boundary_ok": true, "publish_status": "publishable", "quick_start_verified": true, "repo_clone_verified": true, "repo_commit": "6ec59b31c6f7a560892a2bceabdbadc344482b84", "repo_inspection_error": null, "repo_inspection_files": [ "package.json", "README.md", "docs/scoring.md", "docs/troubleshooting.md", "docs/tenant-ops-runbook.md", "docs/github-settings.md", "docs/client-setup.md", "docs/style-guide.md", "docs/provisioning/brand-audit-bindings.md", "docs/demos/2026-05-22-ai-vendor-csc-complement-decisions.md", "docs/demos/2026-05-22-ai-vendor-csc-complement-intro.md", "docs/demos/2026-05-22-ai-vendor-csc-complement-findings.md", "docs/demos/csc-package-2026-05-23/03-provenance.md", "docs/demos/csc-package-2026-05-23/00-cover-email.md", "docs/demos/csc-package-2026-05-23/02-walkthrough.md", "docs/demos/csc-package-2026-05-23/01-exec-summary.md", "examples/slack-discord-webhook/wrangler.toml", "examples/slack-discord-webhook/README.md", "examples/slack-discord-webhook/worker.ts", "packages/bv-whois/vitest.config.ts", "packages/bv-whois/package.json", "packages/bv-whois/tsconfig.json", "packages/dns-checks/vitest.config.ts", "packages/dns-checks/package.json", "packages/dns-checks/tsup.config.ts", "packages/dns-checks/README.md", "packages/dns-checks/tsconfig.json", "packages/bv-whois/src/resolver.ts", "packages/bv-whois/src/app.ts", "packages/bv-whois/src/index.ts", "packages/bv-whois/src/lookup.ts", "packages/bv-whois/src/transport.ts", "packages/bv-whois/src/__tests__/lookup.test.ts", "packages/bv-whois/src/__tests__/transport.test.ts", "packages/bv-whois/src/__tests__/route.test.ts", "packages/bv-whois/src/__tests__/iana-negative-cache.test.ts", "packages/bv-whois/src/__tests__/resolver.test.ts", "packages/dns-checks/src/check-utils.ts", "packages/dns-checks/src/index.ts", "packages/dns-checks/src/types.ts" ], "repo_inspection_verified": true, "review_reasons": [], "tag_count_ok": true, "unsupported_claims": [], "semantic_rework": { "status": "fallback_patched", "identity": "security_permission_audit", "source": "semantic_truth_gate" } }, "schema_version": "0.1", "user_assets": { "ai_context_pack": { "asset_id": "ai_context_pack", "filename": "AI_CONTEXT_PACK.md", "markdown": "# blackveil-dns - Doramagic AI Context Pack\n\n> 定位：安装前体验与判断资产。它帮助宿主 AI 有一个好的开始，但不代表已经安装、执行或验证目标项目。\n\n## 充分原则\n\n- **充分原则，不是压缩原则**：AI Context Pack 应该充分到让宿主 AI 在开工前理解项目价值、能力边界、使用入口、风险和证据来源；它可以分层组织，但不以最短摘要为目标。\n- **压缩策略**：只压缩噪声和重复内容，不压缩会影响判断和开工质量的上下文。\n\n## 给宿主 AI 的使用方式\n\n你正在读取 Doramagic 为 blackveil-dns 编译的 AI Context Pack。请把它当作开工前上下文：帮助用户理解适合谁、能做什么、如何开始、哪些必须安装后验证、风险在哪里。不要声称你已经安装、运行或执行了目标项目。\n\n## Claim 消费规则\n\n- **事实来源**：Repo Evidence + Claim/Evidence Graph；Human Wiki 只提供显著性、术语和叙事结构。\n- **事实最低状态**：`supported`\n- `supported`：可以作为项目事实使用，但回答中必须引用 claim_id 和证据路径。\n- `weak`：只能作为低置信度线索，必须要求用户继续核实。\n- `inferred`：只能用于风险提示或待确认问题，不能包装成项目事实。\n- `unverified`：不得作为事实使用，应明确说证据不足。\n- `contradicted`：必须展示冲突来源，不得替用户强行选择一个版本。\n\n## 它最适合谁\n\n- **正在使用 Claude/Codex/Cursor/Gemini 等宿主 AI 的开发者**：README 或插件配置提到多个宿主 AI。 证据：`README.md` Claim：`clm_0002` supported 0.86\n\n## 它能做什么\n\n- **命令行启动或安装流程**（需要安装后验证）：项目文档中存在可执行命令，真实使用需要在本地或宿主环境中运行这些命令。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md` Claim：`clm_0001` supported 0.86\n\n## 怎么开始\n\n- `claude mcp add --transport http blackveil-dns https://dns-mcp.blackveilsecurity.com/mcp` 证据：`README.md` Claim：`clm_0003` supported 0.86\n- `curl https://dns-mcp.blackveilsecurity.com/health` 证据：`README.md` Claim：`clm_0004` supported 0.86\n- `npm install @blackveil/dns-checks` 证据：`packages/dns-checks/README.md` Claim：`clm_0005` supported 0.86\n- `npx vitest run test/check-spf.spec.ts # Single spec` 证据：`CLAUDE.md` Claim：`clm_0006` supported 0.86\n- `npx wrangler dev # localhost:8787` 证据：`CLAUDE.md` Claim：`clm_0007` supported 0.86\n\n## 继续前判断卡\n\n- **当前建议**：需要管理员/安全审批\n- **为什么**：继续前可能涉及密钥、账号、外部服务或敏感上下文，建议先经过管理员或安全审批。\n\n### 30 秒判断\n\n- **现在怎么做**：需要管理员/安全审批\n- **最小安全下一步**：先跑 Prompt Preview；若涉及凭证或企业环境，先审批再试装\n- **先别相信**：角色质量和任务匹配不能直接相信。\n- **继续会触碰**：角色选择偏差、命令执行、宿主 AI 配置\n\n### 现在可以相信\n\n- **适合人群线索：正在使用 Claude/Codex/Cursor/Gemini 等宿主 AI 的开发者**（supported）：有 supported claim 或项目证据支撑，但仍不等于真实安装效果。 证据：`README.md` Claim：`clm_0002` supported 0.86\n- **能力存在：命令行启动或安装流程**（supported）：可以相信项目包含这类能力线索；是否适合你的具体任务仍要试用或安装后验证。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md` Claim：`clm_0001` supported 0.86\n- **存在 Quick Start / 安装命令线索**（supported）：可以相信项目文档出现过启动或安装入口；不要因此直接在主力环境运行。 证据：`README.md` Claim：`clm_0003` supported 0.86\n\n### 现在还不能相信\n\n- **角色质量和任务匹配不能直接相信。**（unverified）：角色库证明有很多角色，不证明每个角色都适合你的具体任务，也不证明角色能产生高质量结果。\n- **不能把角色文案当成真实执行能力。**（unverified）：安装前只能判断角色描述和任务画像是否匹配，不能证明它能在宿主 AI 里完成任务。\n- **真实输出质量不能在安装前相信。**（unverified）：Prompt Preview 只能展示引导方式，不能证明真实项目中的结果质量。\n- **宿主 AI 版本兼容性不能在安装前相信。**（unverified）：Claude、Cursor、Codex、Gemini 等宿主加载规则和版本差异必须在真实环境验证。\n- **不会污染现有宿主 AI 行为，不能直接相信。**（inferred）：Skill、plugin、AGENTS/CLAUDE/GEMINI 指令可能改变宿主 AI 的默认行为。 证据：`AGENTS.md`, `CLAUDE.md`\n- **可安全回滚不能默认相信。**（unverified）：除非项目明确提供卸载和恢复说明，否则必须先在隔离环境验证。\n- **真实安装后是否与用户当前宿主 AI 版本兼容？**（unverified）：兼容性只能通过实际宿主环境验证。\n- **项目输出质量是否满足用户具体任务？**（unverified）：安装前预览只能展示流程和边界，不能替代真实评测。\n\n### 继续会触碰什么\n\n- **角色选择偏差**：用户对任务应该由哪个专家角色处理的判断。 原因：选错角色会让 AI 从错误专业视角回答，浪费时间或误导决策。\n- **命令执行**：包管理器、网络下载、本地插件目录、项目配置或用户主目录。 原因：运行第一条命令就可能产生环境改动；必须先判断是否值得跑。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md`\n- **宿主 AI 配置**：Claude/Codex/Cursor/Gemini/OpenCode 等宿主的 plugin、Skill 或规则加载配置。 原因：宿主配置会改变 AI 后续工作方式，可能和用户已有规则冲突。 证据：`AGENTS.md`, `CLAUDE.md`\n- **本地环境或项目文件**：安装结果、插件缓存、项目配置或本地依赖目录。 原因：安装前无法证明写入范围和回滚方式，需要隔离验证。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md`\n- **环境变量 / API Key**：项目入口文档明确出现 API key、token、secret 或账号凭证配置。 原因：如果真实安装需要凭证，应先使用测试凭证并经过权限/合规判断。 证据：`.github/copilot-instructions.md`, `.github/instructions/security.instructions.md`, `CHANGELOG.md`, `CLAUDE.md` 等\n- **宿主 AI 上下文**：AI Context Pack、Prompt Preview、Skill 路由、风险规则和项目事实。 原因：导入上下文会影响宿主 AI 后续判断，必须避免把未验证项包装成事实。\n\n### 最小安全下一步\n\n- **先跑 Prompt Preview**：先用交互式试用验证任务画像和角色匹配，不要先导入整套角色库。（适用：任何项目都适用，尤其是输出质量未知时。）\n- **只在隔离目录或测试账号试装**：避免安装命令污染主力宿主 AI、真实项目或用户主目录。（适用：存在命令执行、插件配置或本地写入线索时。）\n- **先备份宿主 AI 配置**：Skill、plugin、规则文件可能改变 Claude/Cursor/Codex 的默认行为。（适用：存在插件 manifest、Skill 或宿主规则入口时。）\n- **不要使用真实生产凭证**：环境变量/API key 一旦进入宿主或工具链，可能产生账号和合规风险。（适用：出现 API、TOKEN、KEY、SECRET 等环境线索时。）\n- **安装后只验证一个最小任务**：先验证加载、兼容、输出质量和回滚，再决定是否深用。（适用：准备从试用进入真实工作流时。）\n\n### 退出方式\n\n- **保留安装前状态**：记录原始宿主配置和项目状态，后续才能判断是否可恢复。\n- **准备移除宿主 plugin / Skill / 规则入口**：如果试装后行为异常，可以把宿主 AI 恢复到试装前状态。\n- **保留原始角色选择记录**：如果输出偏题，可以回到任务画像阶段重新选择角色，而不是继续沿着错误角色推进。\n- **记录安装命令和写入路径**：没有明确卸载说明时，至少要知道哪些目录或配置需要手动清理。\n- **准备撤销测试 API key 或 token**：测试凭证泄露或误用时，可以快速止损。\n- **如果没有回滚路径，不进入主力环境**：不可回滚是继续前阻断项，不应靠信任或运气继续。\n\n## 哪些只能预览\n\n- 解释项目适合谁和能做什么\n- 基于项目文档演示典型对话流程\n- 帮助用户判断是否值得安装或继续研究\n\n## 哪些必须安装后验证\n\n- 真实安装 Skill、插件或 CLI\n- 执行脚本、修改本地文件或访问外部服务\n- 验证真实输出质量、性能和兼容性\n\n## 边界与风险判断卡\n\n- **把安装前预览误认为真实运行**：用户可能高估项目已经完成的配置、权限和兼容性验证。 处理方式：明确区分 prompt_preview_can_do 与 runtime_required。 Claim：`clm_0008` inferred 0.45\n- **命令执行会修改本地环境**：安装命令可能写入用户主目录、宿主插件目录或项目配置。 处理方式：先在隔离环境或测试账号中运行。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md` Claim：`clm_0009` supported 0.86\n- **待确认**：真实安装后是否与用户当前宿主 AI 版本兼容？。原因：兼容性只能通过实际宿主环境验证。\n- **待确认**：项目输出质量是否满足用户具体任务？。原因：安装前预览只能展示流程和边界，不能替代真实评测。\n- **待确认**：安装命令是否需要网络、权限或全局写入？。原因：这影响企业环境和个人环境的安装风险。\n\n## 开工前工作上下文\n\n### 加载顺序\n\n- 先读取 how_to_use.host_ai_instruction，建立安装前判断资产的边界。\n- 读取 claim_graph_summary，确认事实来自 Claim/Evidence Graph，而不是 Human Wiki 叙事。\n- 再读取 intended_users、capabilities 和 quick_start_candidates，判断用户是否匹配。\n- 需要执行具体任务时，优先查 role_skill_index，再查 evidence_index。\n- 遇到真实安装、文件修改、网络访问、性能或兼容性问题时，转入 risk_card 和 boundaries.runtime_required。\n\n### 任务路由\n\n- **命令行启动或安装流程**：先说明这是安装后验证能力，再给出安装前检查清单。 边界：必须真实安装或运行后验证。 证据：`CLAUDE.md`, `README.md`, `packages/dns-checks/README.md` Claim：`clm_0001` supported 0.86\n\n### 上下文规模\n\n- 文件总数：906\n- 重要文件覆盖：40/906\n- 证据索引条目：80\n- 角色 / Skill 条目：29\n\n### 证据不足时的处理\n\n- **missing_evidence**：说明证据不足，要求用户提供目标文件、README 段落或安装后验证记录；不要补全事实。\n- **out_of_scope_request**：说明该任务超出当前 AI Context Pack 证据范围，并建议用户先查看 Human Manual 或真实安装后验证。\n- **runtime_request**：给出安装前检查清单和命令来源，但不要替用户执行命令或声称已执行。\n- **source_conflict**：同时展示冲突来源，标记为待核实，不要强行选择一个版本。\n\n## Prompt Recipes\n\n### 适配判断\n\n- 目标：判断这个项目是否适合用户当前任务。\n- 预期输出：适配结论、关键理由、证据引用、安装前可预览内容、必须安装后验证内容、下一步建议。\n\n```text\n请基于 blackveil-dns 的 AI Context Pack，先问我 3 个必要问题，然后判断它是否适合我的任务。回答必须包含：适合谁、能做什么、不能做什么、是否值得安装、证据来自哪里。所有项目事实必须引用 evidence_refs、source_paths 或 claim_id。\n```\n\n### 安装前体验\n\n- 目标：让用户在安装前感受核心工作流，同时避免把预览包装成真实能力或营销承诺。\n- 预期输出：一段带边界标签的体验剧本、安装后验证清单和谨慎建议；不含真实运行承诺或强营销表述。\n\n```text\n请把 blackveil-dns 当作安装前体验资产，而不是已安装工具或真实运行环境。\n\n请严格输出四段：\n1. 先问我 3 个必要问题。\n2. 给出一段“体验剧本”：用 [安装前可预览]、[必须安装后验证]、[证据不足] 三种标签展示它可能如何引导工作流。\n3. 给出安装后验证清单：列出哪些能力只有真实安装、真实宿主加载、真实项目运行后才能确认。\n4. 给出谨慎建议：只能说“值得继续研究/试装”“先补充信息后再判断”或“不建议继续”，不得替项目背书。\n\n硬性边界：\n- 不要声称已经安装、运行、执行测试、修改文件或产生真实结果。\n- 不要写“自动适配”“确保通过”“完美适配”“强烈建议安装”等承诺性表达。\n- 如果描述安装后的工作方式，必须使用“如果安装成功且宿主正确加载 Skill，它可能会……”这种条件句。\n- 体验剧本只能写成“示例台词/假设流程”：使用“可能会询问/可能会建议/可能会展示”，不要写“已写入、已生成、已通过、正在运行、正在生成”。\n- Prompt Preview 不负责给安装命令；如用户准备试装，只能提示先阅读 Quick Start 和 Risk Card，并在隔离环境验证。\n- 所有项目事实必须来自 supported claim、evidence_refs 或 source_paths；inferred/unverified 只能作风险或待确认项。\n\n```\n\n### 角色 / Skill 选择\n\n- 目标：从项目里的角色或 Skill 中挑选最匹配的资产。\n- 预期输出：候选角色或 Skill 列表，每项包含适用场景、证据路径、风险边界和是否需要安装后验证。\n\n```text\n请读取 role_skill_index，根据我的目标任务推荐 3-5 个最相关的角色或 Skill。每个推荐都要说明适用场景、可能输出、风险边界和 evidence_refs。\n```\n\n### 风险预检\n\n- 目标：安装或引入前识别环境、权限、规则冲突和质量风险。\n- 预期输出：环境、权限、依赖、许可、宿主冲突、质量风险和未知项的检查清单。\n\n```text\n请基于 risk_card、boundaries 和 quick_start_candidates，给我一份安装前风险预检清单。不要替我执行命令，只说明我应该检查什么、为什么检查、失败会有什么影响。\n```\n\n### 宿主 AI 开工指令\n\n- 目标：把项目上下文转成一次对话开始前的宿主 AI 指令。\n- 预期输出：一段边界明确、证据引用明确、适合复制给宿主 AI 的开工前指令。\n\n```text\n请基于 blackveil-dns 的 AI Context Pack，生成一段我可以粘贴给宿主 AI 的开工前指令。这段指令必须遵守 not_runtime=true，不能声称项目已经安装、运行或产生真实结果。\n```\n\n\n## 角色 / Skill 索引\n\n- 共索引 29 个角色 / Skill / 项目文档条目。\n\n- **Repository Guidelines**（project_doc）：Project Structure & Module Organization 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`AGENTS.md`\n- **CLAUDE.md**（project_doc）：Guidance for Claude Code working in this repo. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`CLAUDE.md`\n- **BLACK V EIL DNS**（project_doc）：Source-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`README.md`\n- **Blackveil DNS - Slack/Discord Weekly Reporter**（project_doc）：Blackveil DNS - Slack/Discord Weekly Reporter 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`examples/slack-discord-webhook/README.md`\n- **Blackveil DNS — MCP Security Scanner**（project_doc）：Blackveil DNS — MCP Security Scanner 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`extensions/vscode/README.md`\n- **@blackveil/dns-checks**（project_doc）：DNS and email security check implementations for BlackVeil Security https://blackveilsecurity.com . 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`packages/dns-checks/README.md`\n- **OAuth Production Smoke Probe Runbook**（project_doc）：OAuth Production Smoke Probe Runbook 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`scripts/oauth/README.md`\n- **Contributing to Blackveil DNS**（project_doc）：Thanks for your interest in contributing! Blackveil DNS is a source-available DNS & email security scanner exposed as an MCP server. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`CONTRIBUTING.md`\n- **Client Setup**（project_doc）：This document defines MCP client integration for bv-mcp . 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/client-setup.md`\n- **GitHub repository settings**（project_doc）：These settings must be configured manually in the GitHub web UI. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/github-settings.md`\n- **Scoring Methodology**（project_doc）：Canonical scoring reference for scan domain results. Aligned with scoring v2 three-tier model. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/scoring.md`\n- **Documentation Style Guide**（project_doc）：This guide defines the writing conventions for README.md and files under docs/ . 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/style-guide.md`\n- **Tenant Operations Runbook**（project_doc）：Public-safe reference for the tenant pipeline. Keep real tenant IDs, customer names, Cloudflare resource IDs, private queue/database names, and emergency procedures in ignored operator notes, not in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/tenant-ops-runbook.md`\n- **Troubleshooting**（project_doc）：Operational runbook for common MCP integration and request failures. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/troubleshooting.md`\n- **Brand-Audit Binding Provisioning**（project_doc）：Public-safe checklist for the brand audit batch start async path. Keep real Cloudflare database IDs, queue names, bucket names, service names, and account details in ignored deployment notes. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`docs/provisioning/brand-audit-bindings.md`\n- **Summary**（project_doc）：- Bug fix - New feature - Security fix - Refactor / cleanup - Documentation - CI / tooling 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/PULL_REQUEST_TEMPLATE.md`\n- **Project Guidelines**（project_doc）：Build and Test - Install dependencies: npm ci - Build package and CLI bundle: npm run build - Build subpackage: npm -w packages/dns-checks run build - Run local Worker dev server: npx wrangler dev - Run tests Workers runtime : npm test - Run subpackage tests: npm -w packages/dns-checks run test - Run single test file: npx vitest run test/check-spf.spec.ts - Run chaos test all 9 MCP client types : python3 scripts/cha… 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/copilot-instructions.md`\n- **Changelog**（project_doc）：All notable changes to this project will be documented in this file. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`CHANGELOG.md`\n- **Contributor Covenant Code of Conduct**（project_doc）：Contributor Covenant Code of Conduct 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`CODE_OF_CONDUCT.md`\n- **Security Policy**（project_doc）：Version Supported --------- ----------- 2.x Yes < 2.0 No 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`SECURITY.md`\n- **Support**（project_doc）：- Troubleshooting : See docs/troubleshooting.md docs/troubleshooting.md for common issues, error codes, and manual request examples. - Client setup : See docs/client-setup.md docs/client-setup.md for VS Code, Claude Desktop, Claude Code, and Cursor configuration. - Scoring and coverage : See docs/scoring.md docs/scoring.md for how checks are scored and what they cover. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`SUPPORT.md`\n- **Asset Discovery Integration & Documentation Update**（project_doc）：Asset Discovery Integration & Documentation Update 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`conductor/asset-discovery.md`\n- **TDD Plan: Enterprise PDF Engine Playwright Integration**（project_doc）：TDD Plan: Enterprise PDF Engine Playwright Integration 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`conductor/pdf-engine-tdd.md`\n- **Scan Orchestration**（project_doc）：Use when modifying scan domain orchestration, maturity staging, post-processing adjustments, partial timeout handling, or scan report formatting in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/instructions/scan-orchestration.instructions.md`\n- **Zod Schema Conventions**（project_doc）：Use when editing or creating Zod schemas, adding tool argument validation, modifying enum normalization, or deriving MCP inputSchema in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/instructions/schemas.instructions.md`\n- **Security Context**（project_doc）：Use when performing security audits, reviewing code for vulnerabilities, triaging findings, or assessing OWASP compliance in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/instructions/security.instructions.md`\n- **MCP Tool Implementation**（project_doc）：Use when adding or modifying MCP tools, DNS checks, schemas, handlers, scan orchestration, or scoring-related findings in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/instructions/tools.instructions.md`\n- **Changelog**（project_doc）：Added - Initial release with 44 MCP tools for DNS & email security scanning - Automatic MCP server registration via contributes.mcpServers - Works with GitHub Copilot Chat — no configuration required for free tier 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`extensions/vscode/CHANGELOG.md`\n- **Test Patterns**（project_doc）：Use when editing or creating test files, fixing flaky tests, writing DNS mocks, or validating cache and session behavior in this repository. 激活提示：当用户需要理解项目结构、安装方式或边界时参考。 证据：`.github/instructions/tests.instructions.md`\n\n## 证据索引\n\n- 共索引 80 条证据。\n\n- **Repository Guidelines**（documentation）：Project Structure & Module Organization 证据：`AGENTS.md`\n- **CLAUDE.md**（documentation）：Guidance for Claude Code working in this repo. 证据：`CLAUDE.md`\n- **BLACK V EIL DNS**（documentation）：Source-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE. 证据：`README.md`\n- **Blackveil DNS - Slack/Discord Weekly Reporter**（documentation）：Blackveil DNS - Slack/Discord Weekly Reporter 证据：`examples/slack-discord-webhook/README.md`\n- **Blackveil DNS — MCP Security Scanner**（documentation）：Blackveil DNS — MCP Security Scanner 证据：`extensions/vscode/README.md`\n- **@blackveil/dns-checks**（documentation）：DNS and email security check implementations for BlackVeil Security https://blackveilsecurity.com . 证据：`packages/dns-checks/README.md`\n- **OAuth Production Smoke Probe Runbook**（documentation）：OAuth Production Smoke Probe Runbook 证据：`scripts/oauth/README.md`\n- **Package**（package_manifest）：{ \"name\": \"blackveil-dns\", \"version\": \"2.25.0\", \"license\": \"BUSL-1.1\", \"type\": \"module\", \"bin\": { \"blackveil-dns-mcp\": \"dist/stdio.js\" }, \"files\": \"dist\", \"LICENSE\", \"README.md\" , \"engines\": { \"node\": \" =22.0.0\" }, \"repository\": { \"type\": \"git\", \"url\": \"git+https://github.com/MadaBurns/bv-mcp.git\" }, \"mcpName\": \"com.blackveilsecurity/dns\", \"bugs\": { \"url\": \"https://github.com/MadaBurns/bv-mcp/issues\" }, \"homepage\": \"https://github.com/MadaBurns/bv-mcp readme\", \"workspaces\": \"packages/ \" , \"scripts\": { \"build\": \"tsup\", \"build:wasm\": \"cd crates/bv-wasm-core && wasm-pack build --target web\", \"deploy:prod\": \"node scripts/inject-private-config.cjs && npx wrangler deploy --minify --config wrangle… 证据：`package.json`\n- **Contributing to Blackveil DNS**（documentation）：Thanks for your interest in contributing! Blackveil DNS is a source-available DNS & email security scanner exposed as an MCP server. 证据：`CONTRIBUTING.md`\n- **Package**（package_manifest）：{ \"name\": \"blackveil-dns\", \"displayName\": \"Blackveil DNS — MCP Security Scanner\", \"description\": \"44 DNS & email security tools for GitHub Copilot Chat via MCP. Scan SPF, DMARC, DKIM, DNSSEC, SSL, MTA-STS, and more — no install, no API key required.\", \"version\": \"1.0.0\", \"publisher\": \"BlackveilSecurity\", \"license\": \"BUSL-1.1\", \"icon\": \"icon.png\", \"repository\": { \"type\": \"git\", \"url\": \"https://github.com/MadaBurns/bv-mcp.git\", \"directory\": \"extensions/vscode\" }, \"homepage\": \"https://blackveilsecurity.com\", \"bugs\": { \"url\": \"https://github.com/MadaBurns/bv-mcp/issues\" }, \"categories\": \"AI\", \"Linters\", \"Other\" , \"keywords\": \"mcp\", \"dns\", \"security\", \"email\", \"copilot\", \"dmarc\", \"spf\", \"dkim\",… 证据：`extensions/vscode/package.json`\n- **Package**（package_manifest）：{ \"name\": \"@blackveil/bv-whois\", \"version\": \"0.1.0\", \"description\": \"WHOIS-over-TCP/43 to HTTPS shim Worker for the bv-mcp RDAP fallback path\", \"license\": \"BUSL-1.1\", \"private\": true, \"type\": \"module\", \"scripts\": { \"test\": \"vitest run\", \"typecheck\": \"tsc --noEmit\", \"dev\": \"wrangler dev\", \"deploy\": \"wrangler deploy\" }, \"dependencies\": { \"@blackveil/dns-checks\": \" \", \"hono\": \"^4.12.21\", \"zod\": \"^4.3.6\" }, \"devDependencies\": { \"@cloudflare/vitest-pool-workers\": \"^0.16.7\", \"@cloudflare/workers-types\": \"^4.20260521.1\", \"typescript\": \"^5.0.0\", \"vitest\": \"4.1.6\", \"wrangler\": \"^4.93.0\" } } 证据：`packages/bv-whois/package.json`\n- **Package**（package_manifest）：{ \"name\": \"@blackveil/dns-checks\", \"version\": \"1.1.3\", \"description\": \"Runtime-agnostic DNS and email security checks 16 checks + scoring engine for BlackVeil Security\", \"license\": \"BUSL-1.1\", \"type\": \"module\", \"main\": \"dist/index.js\", \"types\": \"dist/index.d.ts\", \"exports\": { \".\": { \"import\": \"./dist/index.js\", \"types\": \"./dist/index.d.ts\" }, \"./scoring\": { \"import\": \"./dist/scoring/index.js\", \"types\": \"./dist/scoring/index.d.ts\" }, \"./whois\": { \"import\": \"./dist/whois/index.js\", \"types\": \"./dist/whois/index.d.ts\" } }, \"files\": \"dist\", \"LICENSE\", \"README.md\" , \"scripts\": { \"build\": \"tsup\", \"test\": \"vitest run\", \"typecheck\": \"tsc --noEmit\" }, \"repository\": { \"type\": \"git\", \"url\": \"git+https:… 证据：`packages/dns-checks/package.json`\n- **License**（source_file）：Licensor: BLACKVEIL Security Licensed Work: Blackveil DNS The Licensed Work is c 2025-2026 BLACKVEIL Security Additional Use Grant: You may make non-commercial use of the Licensed Work. \"Non-commercial use\" means use that is not intended for or directed toward commercial advantage or monetary compensation. For the avoidance of doubt, providing the Licensed Work as a hosted service to third parties for a fee, or embedding the Licensed Work in a commercial product, constitutes commercial use. 证据：`LICENSE`\n- **License**（source_file）：Licensor: BLACKVEIL Security Licensed Work: Blackveil DNS The Licensed Work is c 2025-2026 BLACKVEIL Security Additional Use Grant: You may make non-commercial use of the Licensed Work. \"Non-commercial use\" means use that is not intended for or directed toward commercial advantage or monetary compensation. For the avoidance of doubt, providing the Licensed Work as a hosted service to third parties for a fee, or embedding the Licensed Work in a commercial product, constitutes commercial use. 证据：`extensions/vscode/LICENSE`\n- **License**（source_file）：Licensor: BLACKVEIL Security Licensed Work: Blackveil DNS v1.3.0 The Licensed Work is c 2026 BLACKVEIL Security Additional Use Grant: You may make non-commercial use of the Licensed Work. \"Non-commercial use\" means use that is not intended for or directed toward commercial advantage or monetary compensation. For the avoidance of doubt, providing the Licensed Work as a hosted service to third parties for a fee, or embedding the Licensed Work in a commercial product, constitutes commercial use. 证据：`packages/dns-checks/LICENSE`\n- **Client Setup**（documentation）：This document defines MCP client integration for bv-mcp . 证据：`docs/client-setup.md`\n- **GitHub repository settings**（documentation）：These settings must be configured manually in the GitHub web UI. 证据：`docs/github-settings.md`\n- **Scoring Methodology**（documentation）：Canonical scoring reference for scan domain results. Aligned with scoring v2 three-tier model. 证据：`docs/scoring.md`\n- **Documentation Style Guide**（documentation）：This guide defines the writing conventions for README.md and files under docs/ . 证据：`docs/style-guide.md`\n- **Tenant Operations Runbook**（documentation）：Public-safe reference for the tenant pipeline. Keep real tenant IDs, customer names, Cloudflare resource IDs, private queue/database names, and emergency procedures in ignored operator notes, not in this repository. 证据：`docs/tenant-ops-runbook.md`\n- **Troubleshooting**（documentation）：Operational runbook for common MCP integration and request failures. 证据：`docs/troubleshooting.md`\n- **Brand-Audit Binding Provisioning**（documentation）：Public-safe checklist for the brand audit batch start async path. Keep real Cloudflare database IDs, queue names, bucket names, service names, and account details in ignored deployment notes. 证据：`docs/provisioning/brand-audit-bindings.md`\n- **Summary**（documentation）：- Bug fix - New feature - Security fix - Refactor / cleanup - Documentation - CI / tooling 证据：`.github/PULL_REQUEST_TEMPLATE.md`\n- **Project Guidelines**（documentation）：Build and Test - Install dependencies: npm ci - Build package and CLI bundle: npm run build - Build subpackage: npm -w packages/dns-checks run build - Run local Worker dev server: npx wrangler dev - Run tests Workers runtime : npm test - Run subpackage tests: npm -w packages/dns-checks run test - Run single test file: npx vitest run test/check-spf.spec.ts - Run chaos test all 9 MCP client types : python3 scripts/chaos/chaos-test-clients.py - Typecheck: npm run typecheck - Typecheck subpackage: npm -w packages/dns-checks run typecheck - Lint: npm run lint - Auto-fix lint issues: npm run lint:fix - Enable pre-commit hooks: git config core.hooksPath .githooks - Deploy production worker config:… 证据：`.github/copilot-instructions.md`\n- **Changelog**（documentation）：All notable changes to this project will be documented in this file. 证据：`CHANGELOG.md`\n- **Contributor Covenant Code of Conduct**（documentation）：Contributor Covenant Code of Conduct 证据：`CODE_OF_CONDUCT.md`\n- **Security Policy**（documentation）：Version Supported --------- ----------- 2.x Yes < 2.0 No 证据：`SECURITY.md`\n- **Support**（documentation）：- Troubleshooting : See docs/troubleshooting.md docs/troubleshooting.md for common issues, error codes, and manual request examples. - Client setup : See docs/client-setup.md docs/client-setup.md for VS Code, Claude Desktop, Claude Code, and Cursor configuration. - Scoring and coverage : See docs/scoring.md docs/scoring.md for how checks are scored and what they cover. 证据：`SUPPORT.md`\n- **Asset Discovery Integration & Documentation Update**（documentation）：Asset Discovery Integration & Documentation Update 证据：`conductor/asset-discovery.md`\n- **TDD Plan: Enterprise PDF Engine Playwright Integration**（documentation）：TDD Plan: Enterprise PDF Engine Playwright Integration 证据：`conductor/pdf-engine-tdd.md`\n- **Scan Orchestration**（documentation）：scan domain runs the standard mail/web scan categories in parallel via Promise.allSettled : checkSpf , checkDmarc , checkDkim , checkDnssec , checkSsl , checkMtaSts , checkNs , checkCaa , checkBimi , checkTlsrpt , checkSubdomainTakeover , checkMx , checkHttpSecurity , checkDane , checkDaneHttps , checkSvcbHttps , checkSubdomailing 证据：`.github/instructions/scan-orchestration.instructions.md`\n- **Zod Schema Conventions**（documentation）：- Tool argument schemas: src/schemas/tool-args.ts TOOL SCHEMA MAP - Tool definitions MCP tools/list : src/schemas/tool-definitions.ts TOOLS array, TOOL DEFS - Shared primitives: src/schemas/primitives.ts DomainSchema , SessionIdSchema , FormatSchema , ProfileSchema - src/handlers/tool-schemas.ts is a deprecated re-export shim — do not add new schemas there 证据：`.github/instructions/schemas.instructions.md`\n- **Security Context & Threat Model**（documentation）：Operator-controlled inputs NOT attacker-controlled : - All environment variables BV DOH ENDPOINT , PROVIDER SIGNATURES URL , BV API KEY , ALLOWED ORIGINS , SCORING CONFIG , etc. are set by the deployer via wrangler.jsonc — they are NOT user/attacker input. Do not flag these as injection vectors. - PROVIDER SIGNATURES URL is additionally validated at runtime via validateRuntimeSourceUrl with allowlist and SHA-256 pinning. 证据：`.github/instructions/security.instructions.md`\n- **MCP Tool Implementation**（documentation）：- Validate and normalize all domain input with validateDomain and sanitizeDomain from src/lib/sanitize.ts . - Build findings and results with createFinding and buildCheckResult from src/lib/scoring.ts . - Do not manually construct finding objects. - Keep public error messages client-safe and prefixed with approved safe prefixes such as Missing required or Invalid . - Preserve Cloudflare Workers compatibility. Avoid Node-only runtime APIs. - Return responses via buildToolContent text, structuredData, format from src/handlers/tool-formatters.ts . Full-format mode appends structured JSON automatically. - Never hardcode secrets in tool code, tests, fixtures, scripts, or docs. Use env vars/secre… 证据：`.github/instructions/tools.instructions.md`\n- **Changelog**（documentation）：Added - Initial release with 44 MCP tools for DNS & email security scanning - Automatic MCP server registration via contributes.mcpServers - Works with GitHub Copilot Chat — no configuration required for free tier 证据：`extensions/vscode/CHANGELOG.md`\n- **Settings**（structured_config）：{ \"hooks\": { \"PostToolUse\": { \"matcher\": \"Write Edit\", \"hooks\": { \"type\": \"command\", \"command\": \"jq -r '.tool input.file path // .tool response.filePath // empty' { read -r f; case \\\"$f\\\" in .ts npx eslint --no-error-on-unmatched-pattern \\\"$f\\\" 2 /dev/null true;; esac; }\", \"timeout\": 15, \"statusMessage\": \"Linting...\" } }, { \"matcher\": \"Bash\", \"hooks\": { \"type\": \"command\", \"if\": \"Bash git commit: \", \"command\": \"node -e \\\"const p=require './package.json' ;const s=require 'fs' .readFileSync 'src/lib/server-version.ts','utf8' ;const m=s.match /SERVER VERSION = ' ^' + '/ ;if !m {console.log JSON.stringify {systemMessage:'WARNING: Cannot parse SERVER VERSION from src/lib/server-version.ts'} ;}els… 证据：`.claude/settings.json`\n- **Devcontainer**（structured_config）：{ \"name\": \"bv-mcp Cloudflare Worker DevContainer\", \"build\": { \"dockerfile\": \"Dockerfile\" }, \"postCreateCommand\": \"npm install\", \"forwardPorts\": 8787 , \"features\": {}, \"settings\": { \"terminal.integrated.defaultProfile.linux\": \"zsh\" }, \"extensions\": \"esbenp.prettier-vscode\", \"dbaeumer.vscode-eslint\", \"cloudflare.cloudflare-vscode\", \"ms-vscode.vscode-typescript-next\" } 证据：`.devcontainer/devcontainer.json`\n- **Config**（structured_config）：{ \"scripts\": { \"name\": \"build\", \"command\": \"npm run build\", \"mode\": \"command\", \"category\": \"build\" }, { \"name\": \"dev\", \"command\": \"npm run dev\", \"mode\": \"service\", \"category\": \"dev\" }, { \"name\": \"deploy:private\", \"command\": \"npm run deploy:private\", \"mode\": \"command\", \"category\": \"other\" }, { \"name\": \"mcp:stdio\", \"command\": \"npm run mcp:stdio\", \"mode\": \"command\", \"category\": \"other\" }, { \"name\": \"start\", \"command\": \"npm run start\", \"mode\": \"service\", \"category\": \"dev\" }, { \"name\": \"prepack\", \"command\": \"npm run prepack\", \"mode\": \"command\", \"category\": \"other\" }, { \"name\": \"validate:internal-deps\", \"command\": \"npm run validate:internal-deps\", \"mode\": \"command\", \"category\": \"other\" }, { \"name… 证据：`.intent/config.json`\n- **.Mcp**（structured_config）：{ \"mcpServers\": { \"blackveil-dns\": { \"type\": \"http\", \"url\": \"https://dns-mcp.blackveilsecurity.com/mcp\" } } } 证据：`.mcp.json`\n- **Server**（structured_config）：{ \"$schema\": \"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json\", \"name\": \"com.blackveilsecurity/dns\", \"description\": \"DNS and email security scanner with 59 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.\", \"repository\": { \"url\": \"https://github.com/MadaBurns/bv-mcp\", \"source\": \"github\" }, \"version\": \"2.25.0\", \"packages\": { \"registryType\": \"npm\", \"identifier\": \"blackveil-dns\", \"version\": \"2.25.0\", \"transport\": { \"type\": \"stdio\" }, \"environmentVariables\": { \"description\": \"Blackveil API key optional \\u2014 free tier works without \", \"isRequired\": false, \"format\": \"string\", \"isSecret\": true, \"name\": \"BV API KEY\" } } , \"remotes\": { \"type\": \"streamable-http\"… 证据：`server.json`\n- **Tsconfig**（structured_config）：{ \"extends\": \"../tsconfig.json\", \"compilerOptions\": { \"types\": \"@cloudflare/vitest-pool-workers\" }, \"include\": \"./ / .ts\", \"../worker-configuration.d.ts\" , \"exclude\": } 证据：`test/tsconfig.json`\n- **Tsconfig**（structured_config）：{ \"compilerOptions\": { / Visit https://aka.ms/tsconfig.json to read more about this file / 证据：`tsconfig.json`\n- **Tsconfig**（structured_config）：{ \"compilerOptions\": { \"target\": \"ES2022\", \"module\": \"ESNext\", \"moduleResolution\": \"Bundler\", \"lib\": \"ES2022\" , \"types\": \"@cloudflare/workers-types\" , \"strict\": true, \"isolatedModules\": true, \"esModuleInterop\": true, \"skipLibCheck\": true, \"resolveJsonModule\": true, \"noEmit\": true, \"jsx\": \"preserve\", \"allowSyntheticDefaultImports\": true, \"forceConsistentCasingInFileNames\": true }, \"include\": \"src/ / .ts\" } 证据：`packages/bv-whois/tsconfig.json`\n- **Tsconfig**（structured_config）：{ \"compilerOptions\": { \"target\": \"ES2024\", \"module\": \"ES2022\", \"moduleResolution\": \"bundler\", \"strict\": true, \"skipLibCheck\": true, \"declaration\": true, \"outDir\": \"dist\", \"rootDir\": \"src\", \"lib\": \"es2022\", \"dom\" }, \"include\": \"src/ / .ts\" , \"exclude\": \"src/ / tests / \" } 证据：`packages/dns-checks/tsconfig.json`\n- **Policy**（structured_config）：{ \"forbiddenPaths\": \".dev/\", \".dev.vars\", \".dev.vars.\", \".mcp-registry-key.pem\", \".npmrc\", \"wrangler.production.jsonc\", \"reports/\", \".reports/\", \" .pdf\", \" .env\", \" .env. \", \" .sqlite\", \" .sqlite3\", \" .db\", \"scripts/tranco- .json\", \"reports/tenant-readiness-proof.html\", \"reports/tenant-calibration- .json\", \"reports/tenant- .json\", \"reports/repo-audit- .html\" , \"sourceExtensions\": \".cjs\", \".css\", \".html\", \".js\", \".json\", \".jsonc\", \".md\", \".mjs\", \".py\", \".sh\", \".sql\", \".toml\", \".ts\", \".tsx\", \".yaml\", \".yml\" , \"allowedEmailDomains\": \"example.com\", \"example.test\", \"example.invalid\", \"blackveilsecurity.com\", \"anthropic.com\" , \"allowedDomainSuffixes\": \"example.com\", \"example.net\", \"example.org\",… 证据：`scripts/repo-safety/policy.json`\n- **0000 Snapshot**（structured_config）：{ \"version\": \"6\", \"dialect\": \"sqlite\", \"id\": \"c85a8973-7fd5-4598-946c-881041b54298\", \"prevId\": \"00000000-0000-0000-0000-000000000000\", \"tables\": { \"billing events\": { \"name\": \"billing events\", \"columns\": { \"id\": { \"name\": \"id\", \"type\": \"text\", \"primaryKey\": true, \"notNull\": true, \"autoincrement\": false }, \"super tenant id\": { \"name\": \"super tenant id\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"sub tenant id\": { \"name\": \"sub tenant id\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": false, \"autoincrement\": false }, \"event type\": { \"name\": \"event type\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"count\": { \"name\": \"c… 证据：`src/tenants/db/migrations/registry/meta/0000_snapshot.json`\n- **0001 Snapshot**（structured_config）：{ \"version\": \"6\", \"dialect\": \"sqlite\", \"id\": \"260958ce-4341-47f2-8b34-eefa35c42df1\", \"prevId\": \"c85a8973-7fd5-4598-946c-881041b54298\", \"tables\": { \"audit events\": { \"name\": \"audit events\", \"columns\": { \"id\": { \"name\": \"id\", \"type\": \"text\", \"primaryKey\": true, \"notNull\": true, \"autoincrement\": false }, \"timestamp\": { \"name\": \"timestamp\", \"type\": \"integer\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"actor principal\": { \"name\": \"actor principal\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"actor tier\": { \"name\": \"actor tier\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"super tenant id\": { \"name\": \"s… 证据：`src/tenants/db/migrations/registry/meta/0001_snapshot.json`\n- **0002 Snapshot**（structured_config）：{ \"version\": \"6\", \"dialect\": \"sqlite\", \"id\": \"dc96d292-2998-4ce4-a306-356a0958f82a\", \"prevId\": \"260958ce-4341-47f2-8b34-eefa35c42df1\", \"tables\": { \"audit events\": { \"name\": \"audit events\", \"columns\": { \"id\": { \"name\": \"id\", \"type\": \"text\", \"primaryKey\": true, \"notNull\": true, \"autoincrement\": false }, \"timestamp\": { \"name\": \"timestamp\", \"type\": \"integer\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"actor principal\": { \"name\": \"actor principal\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"actor tier\": { \"name\": \"actor tier\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"super tenant id\": { \"name\": \"s… 证据：`src/tenants/db/migrations/registry/meta/0002_snapshot.json`\n- **Journal**（structured_config）：{ \"version\": \"7\", \"dialect\": \"sqlite\", \"entries\": { \"idx\": 0, \"version\": \"6\", \"when\": 1778296780215, \"tag\": \"0000 minor skaar\", \"breakpoints\": true }, { \"idx\": 1, \"version\": \"6\", \"when\": 1778322158640, \"tag\": \"0001 wet warhawk\", \"breakpoints\": true }, { \"idx\": 2, \"version\": \"6\", \"when\": 1778329285961, \"tag\": \"0002 big speedball\", \"breakpoints\": true } } 证据：`src/tenants/db/migrations/registry/meta/_journal.json`\n- **0000 Snapshot**（structured_config）：{ \"version\": \"6\", \"dialect\": \"sqlite\", \"id\": \"ab1dc5ff-e3a7-4c05-8806-68e6fe423bcc\", \"prevId\": \"00000000-0000-0000-0000-000000000000\", \"tables\": { \"alerts\": { \"name\": \"alerts\", \"columns\": { \"id\": { \"name\": \"id\", \"type\": \"text\", \"primaryKey\": true, \"notNull\": true, \"autoincrement\": false }, \"domain\": { \"name\": \"domain\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"alert type\": { \"name\": \"alert type\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"triggered at\": { \"name\": \"triggered at\", \"type\": \"integer\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"resolved at\": { \"name\": \"resolved at\", \"type\": \"intege… 证据：`src/tenants/db/migrations/tenant/meta/0000_snapshot.json`\n- **0001 Snapshot**（structured_config）：{ \"version\": \"6\", \"dialect\": \"sqlite\", \"id\": \"a7faeacc-a4a4-49e5-9986-3a15d757ead9\", \"prevId\": \"ab1dc5ff-e3a7-4c05-8806-68e6fe423bcc\", \"tables\": { \"alerts\": { \"name\": \"alerts\", \"columns\": { \"id\": { \"name\": \"id\", \"type\": \"text\", \"primaryKey\": true, \"notNull\": true, \"autoincrement\": false }, \"domain\": { \"name\": \"domain\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"alert type\": { \"name\": \"alert type\", \"type\": \"text\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"triggered at\": { \"name\": \"triggered at\", \"type\": \"integer\", \"primaryKey\": false, \"notNull\": true, \"autoincrement\": false }, \"resolved at\": { \"name\": \"resolved at\", \"type\": \"intege… 证据：`src/tenants/db/migrations/tenant/meta/0001_snapshot.json`\n- **Journal**（structured_config）：{ \"version\": \"7\", \"dialect\": \"sqlite\", \"entries\": { \"idx\": 0, \"version\": \"6\", \"when\": 1778296780784, \"tag\": \"0000 clear clea\", \"breakpoints\": true }, { \"idx\": 1, \"version\": \"6\", \"when\": 1778329286706, \"tag\": \"0001 clumsy master mold\", \"breakpoints\": true } } 证据：`src/tenants/db/migrations/tenant/meta/_journal.json`\n- **Batch Test**（structured_config）：{ \"mode\": \"queue\", \"domains\": \"tenant-seed-001.example.test\" , \"concurrency\": 1 } 证据：`test/data/batch_test.json`\n- **Domains**（structured_config）：{ \"results\": { \"domain\": \"tenant-seed-001.example.test\" }, { \"domain\": \"tenant-seed-002.example.test\" }, { \"domain\": \"tenant-seed-003.example.test\" }, { \"domain\": \"tenant-seed-004.example.test\" }, { \"domain\": \"tenant-seed-005.example.test\" }, { \"domain\": \"tenant-seed-006.example.test\" }, { \"domain\": \"tenant-seed-007.example.test\" }, { \"domain\": \"tenant-seed-008.example.test\" }, { \"domain\": \"tenant-seed-009.example.test\" }, { \"domain\": \"tenant-seed-010.example.test\" }, { \"domain\": \"tenant-seed-011.example.test\" }, { \"domain\": \"tenant-seed-012.example.test\" }, { \"domain\": \"tenant-seed-013.example.test\" }, { \"domain\": \"tenant-seed-014.example.test\" }, { \"domain\": \"tenant-seed-015.example.test\"… 证据：`test/data/domains.json`\n- **Rescan Batch**（structured_config）：{ \"mode\": \"queue\", \"domains\": \"tenant-seed-001.example.test\", \"tenant-seed-002.example.test\", \"tenant-seed-003.example.test\", \"tenant-seed-004.example.test\", \"tenant-seed-005.example.test\", \"tenant-seed-006.example.test\", \"tenant-seed-007.example.test\", \"tenant-seed-008.example.test\", \"tenant-seed-009.example.test\", \"tenant-seed-010.example.test\", \"tenant-seed-011.example.test\", \"tenant-seed-012.example.test\", \"tenant-seed-013.example.test\", \"tenant-seed-014.example.test\", \"tenant-seed-015.example.test\", \"tenant-seed-016.example.test\", \"tenant-seed-017.example.test\", \"tenant-seed-018.example.test\", \"tenant-seed-019.example.test\", \"tenant-seed-020.example.test\", \"tenant-seed-021.example.test… 证据：`test/data/rescan_batch.json`\n- **Sync Test**（structured_config）：{ \"mode\": \"sync\", \"domains\": \"tenant-seed-001.example.test\" , \"concurrency\": 1 } 证据：`test/data/sync_test.json`\n- **Temp Sync Batch**（structured_config）：{ \"mode\": \"sync\", \"domains\": \"tenant-seed-001.example.test\", \"tenant-seed-002.example.test\", \"tenant-seed-003.example.test\", \"tenant-seed-004.example.test\", \"tenant-seed-005.example.test\", \"tenant-seed-006.example.test\", \"tenant-seed-007.example.test\", \"tenant-seed-008.example.test\", \"tenant-seed-009.example.test\", \"tenant-seed-010.example.test\", \"tenant-seed-011.example.test\", \"tenant-seed-012.example.test\", \"tenant-seed-013.example.test\", \"tenant-seed-014.example.test\", \"tenant-seed-015.example.test\", \"tenant-seed-016.example.test\", \"tenant-seed-017.example.test\", \"tenant-seed-018.example.test\", \"tenant-seed-019.example.test\", \"tenant-seed-020.example.test\", \"tenant-seed-021.example.test\"… 证据：`test/data/temp_sync_batch.json`\n- **Asset Discovery Corpus**（structured_config）：{ \"seed\": \"blackveilsecurity.com\", \"groundTruth\": { \"subdomains\": \"www.blackveilsecurity.com\" , \"brandDomains\": { \"domain\": \"blackveil.nz\", \"signals\": \"ns\" }, { \"domain\": \"blackveil.io\", \"signals\": \"ns\" } , \"shadowVariants\": { \"domain\": \"blackveilsecurity.nz\", \"expectedSeverity\": \"info\" }, { \"domain\": \"blackveilsecurity.net\", \"expectedSeverity\": \"info\" } } } 证据：`test/fixtures/asset-discovery-corpus.json`\n- **Ford Com Fast.Golden**（structured_config）：{ \"viewVersion\": 1, \"anchor\": { \"apex\": \"ford.com\", \"primaryRegistrar\": { \"family\": \"csc corporate domains\", \"name\": \"CSC Corporate Domains, Inc.\", \"ianaId\": \"299\" }, \"managedByCsc\": true }, \"registrarPortfolio\": { \"totalApexes\": 4, \"byFamily\": { \"family\": \"csc corporate domains\", \"count\": 3, \"percent\": 75, \"exampleApexes\": \"ford.com\", \"ford.com.au\", \"ford.de\" }, { \"family\": \"godaddy\", \"count\": 1, \"percent\": 25, \"exampleApexes\": \"fordcorp.com\" } , \"offPortfolioCount\": 1, \"offPortfolioApexes\": \"fordcorp.com\" }, \"shadowItHighlights\": { \"apex\": \"fordcorp.com\", \"registrar\": \"GoDaddy.com, LLC\", \"combinedConfidence\": 0.8, \"reasons\": \"off-primary\" , \"evidence\": \"TXT verification reuse\" } , \"defens… 证据：`test/fixtures/csc-complement/ford-com-fast.golden.json`\n- **Ford Com Full.Golden**（structured_config）：{ \"viewVersion\": 1, \"anchor\": { \"apex\": \"ford.com\", \"primaryRegistrar\": { \"family\": \"csc corporate domains\", \"name\": \"CSC Corporate Domains, Inc.\", \"ianaId\": \"299\" }, \"managedByCsc\": true }, \"registrarPortfolio\": { \"totalApexes\": 4, \"byFamily\": { \"family\": \"csc corporate domains\", \"count\": 3, \"percent\": 75, \"exampleApexes\": \"ford.com\", \"ford.com.au\", \"ford.de\" }, { \"family\": \"godaddy\", \"count\": 1, \"percent\": 25, \"exampleApexes\": \"fordcorp.com\" } , \"offPortfolioCount\": 1, \"offPortfolioApexes\": \"fordcorp.com\" }, \"shadowItHighlights\": { \"apex\": \"fordcorp.com\", \"registrar\": \"GoDaddy.com, LLC\", \"combinedConfidence\": 0.8, \"reasons\": \"off-primary\" , \"evidence\": \"TXT verification reuse\" } , \"defens… 证据：`test/fixtures/csc-complement/ford-com-full.golden.json`\n- 其余 20 条证据见 `AI_CONTEXT_PACK.json` 或 `EVIDENCE_INDEX.json`。\n\n## 宿主 AI 必须遵守的规则\n\n- **把本资产当作开工前上下文，而不是运行环境。**：AI Context Pack 只包含证据化项目理解，不包含目标项目的可执行状态。 证据：`AGENTS.md`, `CLAUDE.md`, `README.md`\n- **回答用户时区分可预览内容与必须安装后才能验证的内容。**：安装前体验的消费者价值来自降低误装和误判，而不是伪装成真实运行。 证据：`AGENTS.md`, `CLAUDE.md`, `README.md`\n\n## 用户开工前应该回答的问题\n\n- 你准备在哪个宿主 AI 或本地环境中使用它？\n- 你只是想先体验工作流，还是准备真实安装？\n- 你最在意的是安装成本、输出质量、还是和现有规则的冲突？\n\n## 验收标准\n\n- 所有能力声明都能回指到 evidence_refs 中的文件路径。\n- AI_CONTEXT_PACK.md 没有把预览包装成真实运行。\n- 用户能在 3 分钟内看懂适合谁、能做什么、如何开始和风险边界。\n\n---\n\n## Doramagic Context Augmentation\n\n下面内容用于强化 Repomix/AI Context Pack 主体。Human Manual 只提供阅读骨架；踩坑日志会被转成宿主 AI 必须遵守的工作约束。\n\n## Human Manual 骨架\n\n使用规则：这里只是项目阅读路线和显著性信号，不是事实权威。具体事实仍必须回到 repo evidence / Claim Graph。\n\n宿主 AI 硬性规则：\n- 不得把页标题、章节顺序、摘要或 importance 当作项目事实证据。\n- 解释 Human Manual 骨架时，必须明确说它只是阅读路线/显著性信号。\n- 能力、安装、兼容性、运行状态和风险判断必须引用 repo evidence、source path 或 Claim Graph。\n\n- **仓库概览**：importance `high`\n - source_paths: README.md, package.json, .devcontainer/Dockerfile, crates/bv-wasm-core/Cargo.toml, examples/slack-discord-webhook/README.md\n- **入口与运行边界**：importance `high`\n - source_paths: README.md, package.json, .devcontainer/Dockerfile, crates/bv-wasm-core/Cargo.toml, examples/slack-discord-webhook/README.md\n- **架构证据地图**：importance `high`\n - source_paths: README.md, package.json, .devcontainer/Dockerfile, crates/bv-wasm-core/Cargo.toml, examples/slack-discord-webhook/README.md\n- **运维与验证边界**：importance `high`\n - source_paths: README.md, package.json, .devcontainer/Dockerfile, crates/bv-wasm-core/Cargo.toml, examples/slack-discord-webhook/README.md\n\n## Repo Inspection Evidence / 源码检查证据\n\n- repo_clone_verified: true\n- repo_inspection_verified: true\n- repo_commit: `6ec59b31c6f7a560892a2bceabdbadc344482b84`\n- inspected_files: `package.json`, `README.md`, `docs/scoring.md`, `docs/troubleshooting.md`, `docs/tenant-ops-runbook.md`, `docs/github-settings.md`, `docs/client-setup.md`, `docs/style-guide.md`, `docs/provisioning/brand-audit-bindings.md`, `docs/demos/2026-05-22-ai-vendor-csc-complement-decisions.md`, `docs/demos/2026-05-22-ai-vendor-csc-complement-intro.md`, `docs/demos/2026-05-22-ai-vendor-csc-complement-findings.md`, `docs/demos/csc-package-2026-05-23/03-provenance.md`, `docs/demos/csc-package-2026-05-23/00-cover-email.md`, `docs/demos/csc-package-2026-05-23/02-walkthrough.md`, `docs/demos/csc-package-2026-05-23/01-exec-summary.md`, `examples/slack-discord-webhook/wrangler.toml`, `examples/slack-discord-webhook/README.md`, `examples/slack-discord-webhook/worker.ts`, `packages/bv-whois/vitest.config.ts`\n\n宿主 AI 硬性规则：\n- 没有 repo_clone_verified=true 时，不得声称已经读过源码。\n- 没有 repo_inspection_verified=true 时，不得把 README/docs/package 文件判断写成事实。\n- 没有 quick_start_verified=true 时，不得声称 Quick Start 已跑通。\n\n## Doramagic Pitfall Constraints / 踩坑约束\n\n这些规则来自 Doramagic 发现、验证或编译过程中的项目专属坑点。宿主 AI 必须把它们当作工作约束，而不是普通说明文字。\n\n### Constraint 1: 仓库名和安装名不一致\n\n- Trigger: 仓库名 `bv-mcp` 与安装入口 `blackveil-dns` 不完全一致。\n- Host AI rule: 在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。\n- Why it matters: 用户照着仓库名搜索包或照着包名找仓库时容易走错入口。\n- Evidence: identity.distribution | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | repo=bv-mcp; install=blackveil-dns\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 2: 失败模式：installation: v2.15.0\n\n- Trigger: Developers should check this installation risk before relying on the project: v2.15.0\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node\n- Why it matters: Upgrade or migration may change expected behavior: v2.15.0\n- Evidence: failure_mode_cluster:github_release | fmev_9140ac651a595cd7080066734be793f0 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0 | v2.15.0\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 3: 失败模式：installation: v2.21.2\n\n- Trigger: Developers should check this installation risk before relying on the project: v2.21.2\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node\n- Why it matters: Upgrade or migration may change expected behavior: v2.21.2\n- Evidence: failure_mode_cluster:github_release | fmev_79fa7dd8e004846c272458cea5989a50 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2 | v2.21.2\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 4: 失败模式：installation: v2.21.4\n\n- Trigger: Developers should check this installation risk before relying on the project: v2.21.4\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node\n- Why it matters: Upgrade or migration may change expected behavior: v2.21.4\n- Evidence: failure_mode_cluster:github_release | fmev_79dcde979ed5a1ab616ec36d4ca908ac | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4 | v2.21.4\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 5: 失败模式：configuration: v2.21.3\n\n- Trigger: Developers should check this configuration risk before relying on the project: v2.21.3\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python\n- Why it matters: Upgrade or migration may change expected behavior: v2.21.3\n- Evidence: failure_mode_cluster:github_release | fmev_880e5d019d1d59ec27e1d6e633bf8ab3 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3 | v2.21.3\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 6: 失败模式：configuration: v2.21.5\n\n- Trigger: Developers should check this configuration risk before relying on the project: v2.21.5\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.21.5. Context: Observed when using python\n- Why it matters: Upgrade or migration may change expected behavior: v2.21.5\n- Evidence: failure_mode_cluster:github_release | fmev_f575125577e3d0677d78cf724ae17b86 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5 | v2.21.5\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 7: 失败模式：configuration: v2.22.0\n\n- Trigger: Developers should check this configuration risk before relying on the project: v2.22.0\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.22.0. Context: Observed when using python\n- Why it matters: Upgrade or migration may change expected behavior: v2.22.0\n- Evidence: failure_mode_cluster:github_release | fmev_08bbcb6cd0b26f3592d0d91616a8f5aa | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0 | v2.22.0\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 8: 失败模式：configuration: v2.24.0\n\n- Trigger: Developers should check this configuration risk before relying on the project: v2.24.0\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.24.0. Context: Source discussion did not expose a precise runtime context.\n- Why it matters: Upgrade or migration may change expected behavior: v2.24.0\n- Evidence: failure_mode_cluster:github_release | fmev_c8ff700daeb43ed10610457d9ae0a216 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0 | v2.24.0\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 9: 能力判断依赖假设\n\n- Trigger: README/documentation is current enough for a first validation pass.\n- Host AI rule: 将假设转成下游验证清单。\n- Why it matters: 假设不成立时，用户拿不到承诺的能力。\n- Evidence: capability.assumptions | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | README/documentation is current enough for a first validation pass.\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n\n### Constraint 10: 失败模式：runtime: v2.16.0\n\n- Trigger: Developers should check this runtime risk before relying on the project: v2.16.0\n- Host AI rule: Before packaging this project, run the relevant install/config/quickstart check for: v2.16.0. Context: Source discussion did not expose a precise runtime context.\n- Why it matters: Upgrade or migration may change expected behavior: v2.16.0\n- Evidence: failure_mode_cluster:github_release | fmev_64947b1b7d48f7a970f4c6f296b9d9db | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0 | v2.16.0\n- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。\n", "summary": "给宿主 AI 的上下文和工作边界。", "title": "AI Context Pack / 带给我的 AI" }, "boundary_risk_card": { "asset_id": "boundary_risk_card", "filename": "BOUNDARY_RISK_CARD.md", "markdown": "# Boundary & Risk Card / 安装前决策卡\n\n项目：madaburns/bv-mcp\n\n## Doramagic 试用结论\n\n当前结论：可以进入发布前推荐检查；首次使用仍应从最小权限、临时目录和可回滚配置开始。\n\n## 用户现在可以做\n\n- 可以先阅读 Human Manual，理解项目目的和主要工作流。\n- 可以复制 Prompt Preview 做安装前体验；这只验证交互感，不代表真实运行。\n- 可以把官方 Quick Start 命令放到隔离环境中验证，不要直接进主力环境。\n\n## 现在不要做\n\n- 不要把 Prompt Preview 当成项目实际运行结果。\n- 不要把 metadata-only validation 当成沙箱安装验证。\n- 不要把未验证能力写成“已支持、已跑通、可放心安装”。\n- 不要在首次试用时交出生产数据、私人文件、真实密钥或主力配置目录。\n\n## 安装前检查\n\n- 宿主 AI 是否匹配：mcp_host\n- 官方安装入口状态：已发现官方入口\n- 是否在临时目录、临时宿主或容器中验证：必须是\n- 是否能回滚配置改动：必须能\n- 是否需要 API Key、网络访问、读写文件或修改宿主配置：未确认前按高风险处理\n- 是否记录了安装命令、实际输出和失败日志：必须记录\n\n## 当前阻塞项\n\n- 无阻塞项。\n\n## 项目专属踩坑\n\n- 仓库名和安装名不一致（medium）：用户照着仓库名搜索包或照着包名找仓库时容易走错入口。 建议检查：在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。\n- 失败模式：installation: v2.15.0（medium）：Upgrade or migration may change expected behavior: v2.15.0 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node\n- 失败模式：installation: v2.21.2（medium）：Upgrade or migration may change expected behavior: v2.21.2 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node\n- 失败模式：installation: v2.21.4（medium）：Upgrade or migration may change expected behavior: v2.21.4 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node\n- 失败模式：configuration: v2.21.3（medium）：Upgrade or migration may change expected behavior: v2.21.3 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python\n\n## 风险与权限提示\n\n- no_demo: medium\n\n## 证据缺口\n\n- 暂未发现结构化证据缺口。\n", "summary": "安装、权限、验证和推荐前风险。", "title": "Boundary & Risk Card / 边界与风险卡" }, "human_manual": { "asset_id": "human_manual", "filename": "HUMAN_MANUAL.md", "markdown": "# https://github.com/MadaBurns/bv-mcp 项目说明书\n\n生成时间: 2026-05-22 17:00:49 UTC\n\n## 目录\n\n- [仓库概览](#overview)\n- [入口与运行边界](#entrypoints)\n- [架构证据地图](#architecture)\n- [运维与验证边界](#operations)\n\n\n\n## 仓库概览\n\n### 相关页面\n\n相关主题：[入口与运行边界](#entrypoints), [架构证据地图](#architecture), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 仓库概览\n\n本页在 Human Wiki provider 不可用时基于仓库证据生成，只使用 README、文件树和已选源码文件，不把模板描述冒充项目事实。\n\n## README 证据\n\n
\n\n# BLACK**V**EIL DNS\n\n**Know where you stand.**\n\nSource-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE.\n\n[![GitHub stars](https://img.shields.io/github/stars/MadaBurns/bv-mcp?style=flat&logo=github)](https://github.com/MadaBurns/bv-mcp/stargazers)\n[![npm version](https://img.shields.io/npm/v/blackveil-dns)](https://www.npmjs.com/package/blackveil-dns)\n[![npm downloads](https://img.shields.io/npm/dm/blackveil-dns)](https://www.npmjs.com/package/blackveil-dns)\n[![MCP tools](https://img.shields.io/badge/MCP%20tools-59-brightgreen)](https://github.com/MadaBurns/bv-mcp/actions)\n[![BUSL-1.1 License](https://img.shields.io/badge/License-BUSL--1.1-blue.svg)](LICENSE)\n[![MCP](https://img.shields.io/badge/MCP-2025--03--26-blue)](https://modelcontextprotocol.io/)\n[![Cloudflare Workers](https://img.shields.io/badge/Cloudflare%20Workers-F38020?logo=cloudflare&logoColor=white)](https://workers.cloudflare.com/)\n[![TypeScript](https://img.shields.io/badge/TypeScript-5.9-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)\n\n![DNS Security](https://dns-mcp.blackveilsecurity.com/badge/blackveilsecurity.com)\n\n
\n\n---\n\n## Try it in 30 seconds\n\n**Claude Desktop** (one-click install):\n\nDownload the [Blackveil DNS extension](https://github.com/MadaBurns/bv-claude-dns/releases/latest/download/bv-claude-dns.mcpb) and open it — the current 59-tool surface is available instantly. [Verify your download](https://blackveilsecurity.com/extensions/claude-dns#install).\n\n**Claude Code** (one command):\n\n```bash\nclaude mcp add --transport http blackveil-dns https://dns-mcp.blackveilsecurity.com/mcp\n```\n\nThen ask: `scan anthropic.com`\n\n**Smithery** (one command):\n\n```bash\nsmithery mcp add MadaBurns/bv-mcp\n```\n\n**Verify the endpoint is live:**\n\n```bash\ncurl https://dns-mcp.blackveilsecurity.com/health\n```\n\nNo install. No API key. One URL for hosted HTTP:\n\n```\nEndpoint https://dns-mcp.blackveilsecurity.com/mcp\nTransport Streamable HTTP · JSON-RPC 2.0\nAuth None required\n```\n\nTransport support:\n\n- `Streamable HTTP`: `POST /mcp`, `GET /mcp`, `DELETE /mcp`\n- `Native stdio`: `blackveil-dns-mcp` CLI from the `blackveil-dns` npm package\n- `Legacy HTTP+SSE`: `GET /mcp/sse` bootstrap stream plus `POST /mcp/messages?sessionId=...`\n\n---\n\n## What you get\n\n- **59 MCP to\n\n[excerpt truncated]\n\n## 已选源码清单\n\n- `README.md`\n- `package.json`\n- `.devcontainer/Dockerfile`\n- `crates/bv-wasm-core/Cargo.toml`\n- `examples/slack-discord-webhook/README.md`\n- `extensions/vscode/README.md`\n- `extensions/vscode/package.json`\n- `packages/bv-whois/package.json`\n- `packages/dns-checks/README.md`\n- `packages/dns-checks/package.json`\n- `scripts/oauth/README.md`\n- `src/index.ts`\n\n| 文件 | 证据角色 | 大小 |\n|---|---|---|\n| `README.md` | README/产品与使用证据 | 14247 bytes |\n| `package.json` | 包与运行时元数据 | 2841 bytes |\n| `.devcontainer/Dockerfile` | 仓库证据 | 450 bytes |\n| `crates/bv-wasm-core/Cargo.toml` | 包与运行时元数据 | 205 bytes |\n| `examples/slack-discord-webhook/README.md` | 文档证据 | 913 bytes |\n| `extensions/vscode/README.md` | 文档证据 | 4129 bytes |\n| `extensions/vscode/package.json` | 包与运行时元数据 | 1027 bytes |\n| `packages/bv-whois/package.json` | 包与运行时元数据 | 625 bytes |\n| `packages/dns-checks/README.md` | 文档证据 | 2143 bytes |\n| `packages/dns-checks/package.json` | 包与运行时元数据 | 988 bytes |\n| `scripts/oauth/README.md` | 文档证据 | 5187 bytes |\n| `src/index.ts` | 实现边界 | 38710 bytes |\n\n资料来源：`[README.md:1-120]()`\n\n---\n\n\n\n## 入口与运行边界\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [架构证据地图](#architecture), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 入口与运行边界\n\n下面文件是安装、启动、配置或宿主集成的高信号候选。这里给出证据地图，不推断未经执行验证的 API 契约。\n\n| 文件 | 证据角色 | 大小 |\n|---|---|---|\n| `README.md` | README/产品与使用证据 | 14247 bytes |\n| `package.json` | 包与运行时元数据 | 2841 bytes |\n| `.devcontainer/Dockerfile` | 仓库证据 | 450 bytes |\n| `crates/bv-wasm-core/Cargo.toml` | 包与运行时元数据 | 205 bytes |\n| `examples/slack-discord-webhook/README.md` | 文档证据 | 913 bytes |\n| `extensions/vscode/README.md` | 文档证据 | 4129 bytes |\n| `extensions/vscode/package.json` | 包与运行时元数据 | 1027 bytes |\n| `packages/bv-whois/package.json` | 包与运行时元数据 | 625 bytes |\n| `packages/dns-checks/README.md` | 文档证据 | 2143 bytes |\n| `packages/dns-checks/package.json` | 包与运行时元数据 | 988 bytes |\n| `scripts/oauth/README.md` | 文档证据 | 5187 bytes |\n| `src/index.ts` | 实现边界 | 38710 bytes |\n\n资料来源：`[README.md:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)`\n\n---\n\n\n\n## 架构证据地图\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [入口与运行边界](#entrypoints), [运维与验证边界](#operations)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 架构证据地图\n\n本节只根据仓库路径组织可能的架构区域；需要运行验证的行为不会在这里断言。\n\n- `.`: `README.md`, `package.json`\n- `.devcontainer`: `.devcontainer/Dockerfile`\n- `crates`: `crates/bv-wasm-core/Cargo.toml`\n- `examples`: `examples/slack-discord-webhook/README.md`\n- `extensions`: `extensions/vscode/README.md`, `extensions/vscode/package.json`\n- `packages`: `packages/bv-whois/package.json`, `packages/dns-checks/README.md`, `packages/dns-checks/package.json`\n- `scripts`: `scripts/oauth/README.md`\n- `src`: `src/index.ts`\n\n资料来源：`[package.json:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)`\n\n---\n\n\n\n## 运维与验证边界\n\n### 相关页面\n\n相关主题：[仓库概览](#overview), [入口与运行边界](#entrypoints), [架构证据地图](#architecture)\n\n
\n相关源码文件\n\n以下源码文件用于生成本页说明：\n\n- [README.md](https://github.com/MadaBurns/bv-mcp/blob/main/README.md)\n- [package.json](https://github.com/MadaBurns/bv-mcp/blob/main/package.json)\n- [.devcontainer/Dockerfile](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)\n- [crates/bv-wasm-core/Cargo.toml](https://github.com/MadaBurns/bv-mcp/blob/main/crates/bv-wasm-core/Cargo.toml)\n- [examples/slack-discord-webhook/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/examples/slack-discord-webhook/README.md)\n- [extensions/vscode/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/README.md)\n- [extensions/vscode/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/extensions/vscode/package.json)\n- [packages/bv-whois/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/bv-whois/package.json)\n- [packages/dns-checks/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/README.md)\n- [packages/dns-checks/package.json](https://github.com/MadaBurns/bv-mcp/blob/main/packages/dns-checks/package.json)\n- [scripts/oauth/README.md](https://github.com/MadaBurns/bv-mcp/blob/main/scripts/oauth/README.md)\n- [src/index.ts](https://github.com/MadaBurns/bv-mcp/blob/main/src/index.ts)\n
\n\n# 运维与验证边界\n\n运维建议仅来自仓库中真实存在的文件。把该项目用于 agent 工作流前，仍需在 sandbox 中验证安装、quickstart 和运行行为。\n\n- Documentation signal: `README.md`\n- Runtime/package signal: `package.json`\n- Containerization signal: `.devcontainer/Dockerfile`\n- Runtime/package signal: `crates/bv-wasm-core/Cargo.toml`\n- Documentation signal: `examples/slack-discord-webhook/README.md`\n- Documentation signal: `extensions/vscode/README.md`\n- Runtime/package signal: `extensions/vscode/package.json`\n- Runtime/package signal: `packages/bv-whois/package.json`\n- Documentation signal: `packages/dns-checks/README.md`\n- Runtime/package signal: `packages/dns-checks/package.json`\n\n资料来源：`[.devcontainer/Dockerfile:1-120](https://github.com/MadaBurns/bv-mcp/blob/main/.devcontainer/Dockerfile)`\n\n---\n\n---\n\n## Doramagic 踩坑日志\n\n项目：madaburns/bv-mcp\n\n摘要：发现 17 个潜在踩坑项，其中 0 个为 high/blocking；最高优先级：身份坑 - 仓库名和安装名不一致。\n\n## 1. 身份坑 · 仓库名和安装名不一致\n\n- 严重度：medium\n- 证据强度：runtime_trace\n- 发现：仓库名 `bv-mcp` 与安装入口 `blackveil-dns` 不完全一致。\n- 对用户的影响：用户照着仓库名搜索包或照着包名找仓库时容易走错入口。\n- 建议检查：在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。\n- 复现命令: `npx blackveil-dns`\n- 防护动作: 页面必须同时展示 repo 名和真实安装入口，避免用户搜索错包。\n- 证据：identity.distribution | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | repo=bv-mcp; install=blackveil-dns\n\n## 2. 安装坑 · 失败模式：installation: v2.15.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.15.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.15.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_9140ac651a595cd7080066734be793f0 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0 | v2.15.0\n\n## 3. 安装坑 · 失败模式：installation: v2.21.2\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.2\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.2\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79fa7dd8e004846c272458cea5989a50 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2 | v2.21.2\n\n## 4. 安装坑 · 失败模式：installation: v2.21.4\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.4\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.4\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79dcde979ed5a1ab616ec36d4ca908ac | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4 | v2.21.4\n\n## 5. 配置坑 · 失败模式：configuration: v2.21.3\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.3\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.3\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_880e5d019d1d59ec27e1d6e633bf8ab3 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3 | v2.21.3\n\n## 6. 配置坑 · 失败模式：configuration: v2.21.5\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.5\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.5\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.5. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_f575125577e3d0677d78cf724ae17b86 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5 | v2.21.5\n\n## 7. 配置坑 · 失败模式：configuration: v2.22.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.22.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.22.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.22.0. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_08bbcb6cd0b26f3592d0d91616a8f5aa | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0 | v2.22.0\n\n## 8. 配置坑 · 失败模式：configuration: v2.24.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.24.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.24.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.24.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_c8ff700daeb43ed10610457d9ae0a216 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0 | v2.24.0\n\n## 9. 能力坑 · 能力判断依赖假设\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：README/documentation is current enough for a first validation pass.\n- 对用户的影响：假设不成立时，用户拿不到承诺的能力。\n- 建议检查：将假设转成下游验证清单。\n- 防护动作: 假设必须转成验证项；没有验证结果前不能写成事实。\n- 证据：capability.assumptions | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | README/documentation is current enough for a first validation pass.\n\n## 10. 运行坑 · 失败模式：runtime: v2.16.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this runtime risk before relying on the project: v2.16.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.16.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.16.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_64947b1b7d48f7a970f4c6f296b9d9db | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0 | v2.16.0\n\n## 11. 维护坑 · 失败模式：migration: v2.17.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.17.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.17.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.17.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_269569b761dd20b37b035e972a40a5d5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0 | v2.17.0\n\n## 12. 维护坑 · 失败模式：migration: v2.23.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.23.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.23.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.23.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_3e5ffaaa6e983a9527de0ecc56d0bcb5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0 | v2.23.0\n\n## 13. 维护坑 · 维护活跃度未知\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：未记录 last_activity_observed。\n- 对用户的影响：新项目、停更项目和活跃项目会被混在一起，推荐信任度下降。\n- 建议检查：补 GitHub 最近 commit、release、issue/PR 响应信号。\n- 防护动作: 维护活跃度未知时，推荐强度不能标为高信任。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | last_activity_observed missing\n\n## 14. 安全/权限坑 · 下游验证发现风险项\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：下游已经要求复核，不能在页面中弱化。\n- 建议检查：进入安全/权限治理复核队列。\n- 防护动作: 下游风险存在时必须保持 review/recommendation 降级。\n- 证据：downstream_validation.risk_items | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 15. 安全/权限坑 · 存在评分风险\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：风险会影响是否适合普通用户安装。\n- 建议检查：把风险写入边界卡，并确认是否需要人工复核。\n- 防护动作: 评分风险必须进入边界卡，不能只作为内部分数。\n- 证据：risks.scoring_risks | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 16. 维护坑 · issue/PR 响应质量未知\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：issue_or_pr_quality=unknown。\n- 对用户的影响：用户无法判断遇到问题后是否有人维护。\n- 建议检查：抽样最近 issue/PR，判断是否长期无人处理。\n- 防护动作: issue/PR 响应未知时，必须提示维护风险。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | issue_or_pr_quality=unknown\n\n## 17. 维护坑 · 发布节奏不明确\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：release_recency=unknown。\n- 对用户的影响：安装命令和文档可能落后于代码，用户踩坑概率升高。\n- 建议检查：确认最近 release/tag 和 README 安装命令是否一致。\n- 防护动作: 发布节奏未知或过期时，安装说明必须标注可能漂移。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | release_recency=unknown\n\n\n", "summary": "DeepWiki/Human Wiki 完整输出，末尾追加 Discovery Agent 踩坑日志。", "title": "Human Manual / 人类版说明书" }, "pitfall_log": { "asset_id": "pitfall_log", "filename": "PITFALL_LOG.md", "markdown": "# Pitfall Log / 踩坑日志\n\n项目：madaburns/bv-mcp\n\n摘要：发现 17 个潜在踩坑项，其中 0 个为 high/blocking；最高优先级：身份坑 - 仓库名和安装名不一致。\n\n## 1. 身份坑 · 仓库名和安装名不一致\n\n- 严重度：medium\n- 证据强度：runtime_trace\n- 发现：仓库名 `bv-mcp` 与安装入口 `blackveil-dns` 不完全一致。\n- 对用户的影响：用户照着仓库名搜索包或照着包名找仓库时容易走错入口。\n- 建议检查：在 npm/PyPI/GitHub 上确认包名映射和官方 README 说明。\n- 复现命令: `npx blackveil-dns`\n- 防护动作: 页面必须同时展示 repo 名和真实安装入口，避免用户搜索错包。\n- 证据：identity.distribution | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | repo=bv-mcp; install=blackveil-dns\n\n## 2. 安装坑 · 失败模式：installation: v2.15.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.15.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.15.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.15.0. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_9140ac651a595cd7080066734be793f0 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.15.0 | v2.15.0\n\n## 3. 安装坑 · 失败模式：installation: v2.21.2\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.2\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.2\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.2. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79fa7dd8e004846c272458cea5989a50 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.2 | v2.21.2\n\n## 4. 安装坑 · 失败模式：installation: v2.21.4\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this installation risk before relying on the project: v2.21.4\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.4\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.4. Context: Observed when using node\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_79dcde979ed5a1ab616ec36d4ca908ac | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.4 | v2.21.4\n\n## 5. 配置坑 · 失败模式：configuration: v2.21.3\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.3\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.3\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.3. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_880e5d019d1d59ec27e1d6e633bf8ab3 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.3 | v2.21.3\n\n## 6. 配置坑 · 失败模式：configuration: v2.21.5\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.21.5\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.21.5\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.21.5. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_f575125577e3d0677d78cf724ae17b86 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.21.5 | v2.21.5\n\n## 7. 配置坑 · 失败模式：configuration: v2.22.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.22.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.22.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.22.0. Context: Observed when using python\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_08bbcb6cd0b26f3592d0d91616a8f5aa | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.22.0 | v2.22.0\n\n## 8. 配置坑 · 失败模式：configuration: v2.24.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this configuration risk before relying on the project: v2.24.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.24.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.24.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_c8ff700daeb43ed10610457d9ae0a216 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.24.0 | v2.24.0\n\n## 9. 能力坑 · 能力判断依赖假设\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：README/documentation is current enough for a first validation pass.\n- 对用户的影响：假设不成立时，用户拿不到承诺的能力。\n- 建议检查：将假设转成下游验证清单。\n- 防护动作: 假设必须转成验证项；没有验证结果前不能写成事实。\n- 证据：capability.assumptions | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | README/documentation is current enough for a first validation pass.\n\n## 10. 运行坑 · 失败模式：runtime: v2.16.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this runtime risk before relying on the project: v2.16.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.16.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.16.0. Context: Source discussion did not expose a precise runtime context.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_64947b1b7d48f7a970f4c6f296b9d9db | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.16.0 | v2.16.0\n\n## 11. 维护坑 · 失败模式：migration: v2.17.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.17.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.17.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.17.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_269569b761dd20b37b035e972a40a5d5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.17.0 | v2.17.0\n\n## 12. 维护坑 · 失败模式：migration: v2.23.0\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：Developers should check this migration risk before relying on the project: v2.23.0\n- 对用户的影响：Upgrade or migration may change expected behavior: v2.23.0\n- 建议检查：Before packaging this project, run the relevant install/config/quickstart check for: v2.23.0. Context: Observed during version upgrade or migration.\n- 防护动作: State this as source-backed community evidence, not as Doramagic reproduction.\n- 证据：failure_mode_cluster:github_release | fmev_3e5ffaaa6e983a9527de0ecc56d0bcb5 | https://github.com/MadaBurns/bv-mcp/releases/tag/v2.23.0 | v2.23.0\n\n## 13. 维护坑 · 维护活跃度未知\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：未记录 last_activity_observed。\n- 对用户的影响：新项目、停更项目和活跃项目会被混在一起，推荐信任度下降。\n- 建议检查：补 GitHub 最近 commit、release、issue/PR 响应信号。\n- 防护动作: 维护活跃度未知时，推荐强度不能标为高信任。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | last_activity_observed missing\n\n## 14. 安全/权限坑 · 下游验证发现风险项\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：下游已经要求复核，不能在页面中弱化。\n- 建议检查：进入安全/权限治理复核队列。\n- 防护动作: 下游风险存在时必须保持 review/recommendation 降级。\n- 证据：downstream_validation.risk_items | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 15. 安全/权限坑 · 存在评分风险\n\n- 严重度：medium\n- 证据强度：source_linked\n- 发现：no_demo\n- 对用户的影响：风险会影响是否适合普通用户安装。\n- 建议检查：把风险写入边界卡，并确认是否需要人工复核。\n- 防护动作: 评分风险必须进入边界卡，不能只作为内部分数。\n- 证据：risks.scoring_risks | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | no_demo; severity=medium\n\n## 16. 维护坑 · issue/PR 响应质量未知\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：issue_or_pr_quality=unknown。\n- 对用户的影响：用户无法判断遇到问题后是否有人维护。\n- 建议检查：抽样最近 issue/PR，判断是否长期无人处理。\n- 防护动作: issue/PR 响应未知时，必须提示维护风险。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | issue_or_pr_quality=unknown\n\n## 17. 维护坑 · 发布节奏不明确\n\n- 严重度：low\n- 证据强度：source_linked\n- 发现：release_recency=unknown。\n- 对用户的影响：安装命令和文档可能落后于代码，用户踩坑概率升高。\n- 建议检查：确认最近 release/tag 和 README 安装命令是否一致。\n- 防护动作: 发布节奏未知或过期时，安装说明必须标注可能漂移。\n- 证据：evidence.maintainer_signals | mcp_registry:com.blackveilsecurity/dns:2.13.0 | https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0 | release_recency=unknown\n", "summary": "用户实践前最可能遇到的身份、安装、配置、运行和安全坑。", "title": "Pitfall Log / 踩坑日志" }, "prompt_preview": { "asset_id": "prompt_preview", "filename": "PROMPT_PREVIEW.md", "markdown": "# bv-mcp - Prompt Preview\n\n> 复制下面这段 Prompt 到你常用的 AI，先试一次，不需要安装。\n> 它的目标是让你直接体验这个项目的服务方式，而不是阅读项目介绍。\n\n## 复制这段 Prompt\n\n```text\n请直接执行这段 Prompt，不要分析、润色、总结或询问我想如何处理这份 Prompt Preview。\n\n你现在扮演 bv-mcp 的“安装前体验版”。\n这不是项目介绍、不是评价报告、不是 README 总结。你的任务是让我用最小成本体验它的核心服务。\n\n我的试用任务：我想检查一个 AI 工具或 Agent 工作流在权限、提示注入和数据泄露上的风险。\n我常用的宿主 AI：MCP Client\n\n【体验目标】\n围绕我的真实任务，现场演示这个项目如何把输入转成 示例引导, 判断线索。重点是让我感受到工作方式，而不是给我项目背景。\n\n【业务流约束】\n- 你必须像一个正在提供服务的项目能力包，而不是像一个讲解员。\n- 每一轮只推进一个步骤；提出问题后必须停下来等我回答。\n- 每一步都必须让我感受到一个具体服务动作：澄清、整理、规划、检查、判断或收尾。\n- 每一步都要说明：当前目标、你需要我提供什么、我回答后你会产出什么。\n- 不要安装、不要运行命令、不要写代码、不要声称测试通过、不要声称已经修改文件。\n- 需要真实安装或宿主加载后才能验证的内容，必须明确说“这一步需要安装后验证”。\n- 如果我说“用示例继续”，你可以用虚构示例推进，但仍然不能声称真实执行。\n\n【可体验服务能力】\n- 安装前能力预览: DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more. 输入：用户任务, 当前 AI 对话上下文；输出：示例引导, 判断线索。\n\n【必须安装后才可验证的能力】\n- 命令行启动或安装流程: 项目文档中存在可执行命令，真实使用需要在本地或宿主环境中运行这些命令。 输入：终端环境, 包管理器, 项目依赖；输出：安装结果, 列表/更新/运行结果。\n\n【核心服务流】\n请严格按这个顺序带我体验。不要一次性输出完整流程：\n1. overview：仓库概览。围绕“仓库概览”模拟一次用户任务，不展示安装或运行结果。\n2. entrypoints：入口与运行边界。围绕“入口与运行边界”模拟一次用户任务，不展示安装或运行结果。\n3. architecture：架构证据地图。围绕“架构证据地图”模拟一次用户任务，不展示安装或运行结果。\n4. operations：运维与验证边界。围绕“运维与验证边界”模拟一次用户任务，不展示安装或运行结果。\n\n【核心能力体验剧本】\n每一步都必须按“输入 -> 服务动作 -> 中间产物”执行。不要只说流程名：\n1. overview\n输入：用户提供的“仓库概览”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n2. entrypoints\n输入：用户提供的“入口与运行边界”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n3. architecture\n输入：用户提供的“架构证据地图”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n4. operations\n输入：用户提供的“运维与验证边界”相关信息。\n服务动作：模拟项目在这一步的核心判断和整理方式。\n中间产物：一个可检查的小结果。\n\n【项目服务规则】\n这些规则决定你如何服务用户。不要解释规则本身，而要在每一步执行时遵守：\n- 先确认用户任务、输入材料和成功标准，再模拟项目能力。\n- 每一步都必须形成可检查的小产物，并等待用户确认后再继续。\n- 凡是需要安装、调用工具或访问外部服务的能力，都必须标记为安装后验证。\n\n【每一步的服务约束】\n- Step 1 / overview：Step 1 必须围绕“仓库概览”形成一个小中间产物，并等待用户确认。\n- Step 2 / entrypoints：Step 2 必须围绕“入口与运行边界”形成一个小中间产物，并等待用户确认。\n- Step 3 / architecture：Step 3 必须围绕“架构证据地图”形成一个小中间产物，并等待用户确认。\n- Step 4 / operations：Step 4 必须围绕“运维与验证边界”形成一个小中间产物，并等待用户确认。\n\n【边界与风险】\n- 不要声称已经安装、运行、调用 API、读写本地文件或完成真实任务。\n- 安装前预览只能展示工作方式，不能证明兼容性、性能或输出质量。\n- 涉及安装、插件加载、工具调用或外部服务的能力必须安装后验证。\n\n【可追溯依据】\n这些路径只用于你内部校验或在我追问“依据是什么”时简要引用。不要在首次回复主动展开：\n- https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0\n- https://github.com/MadaBurns/bv-mcp#readme\n- README.md\n- package.json\n- .devcontainer/Dockerfile\n- crates/bv-wasm-core/Cargo.toml\n- examples/slack-discord-webhook/README.md\n- extensions/vscode/README.md\n- extensions/vscode/package.json\n- packages/bv-whois/package.json\n- packages/dns-checks/README.md\n- packages/dns-checks/package.json\n\n【首次问题规则】\n- 首次三问必须先确认用户目标、成功标准和边界，不要提前进入工具、安装或实现细节。\n- 如果后续需要技术条件、文件路径或运行环境，必须等用户确认目标后再追问。\n\n首次回复必须只输出下面 4 个部分：\n1. 体验开始：用 1 句话说明你将带我体验 bv-mcp 的核心服务。\n2. 当前步骤：明确进入 Step 1，并说明这一步要解决什么。\n3. 你会如何服务我：说明你会先改变我完成任务的哪个动作。\n4. 只问我 3 个问题，然后停下等待回答。\n\n首次回复禁止输出：后续完整流程、证据清单、安装命令、项目评价、营销文案、已经安装或运行的说法。\n\nStep 1 / brainstorming 的二轮协议：\n- 我回答首次三问后，你仍然停留在 Step 1 / brainstorming，不要进入 Step 2。\n- 第二次回复必须产出 6 个部分：澄清后的任务定义、成功标准、边界条件、\n 2-3 个可选方案、每个方案的权衡、推荐方案。\n- 第二次回复最后必须问我是否确认推荐方案；只有我明确确认后，才能进入下一步。\n- 第二次回复禁止输出 git worktree、代码计划、测试文件、命令或真实执行结果。\n\n后续对话规则：\n- 我回答后，你先完成当前步骤的中间产物并等待确认；只有我确认后，才能进入下一步。\n- 每一步都要生成一个小的中间产物，例如澄清后的目标、计划草案、测试意图、验证清单或继续/停止判断。\n- 所有演示都写成“我会建议/我会引导/这一步会形成”，不要写成已经真实执行。\n- 不要声称已经测试通过、文件已修改、命令已运行或结果已产生。\n- 如果某个能力必须安装后验证，请直接说“这一步需要安装后验证”。\n- 如果证据不足，请明确说“证据不足”，不要补事实。\n```\n", "summary": "不安装项目也能感受能力节奏的安全试用 Prompt。", "title": "Prompt Preview / 安装前试用 Prompt" }, "quick_start": { "asset_id": "quick_start", "filename": "QUICK_START.md", "markdown": "# Quick Start / 官方入口\n\n项目：madaburns/bv-mcp\n\n## 官方安装入口\n\n### Node.js / npx · 官方安装入口\n\n```bash\nnpx blackveil-dns\n```\n\n来源：https://github.com/MadaBurns/bv-mcp#readme\n\n## 来源\n\n- mcp_registry: https://registry.modelcontextprotocol.io/v0.1/servers/com.blackveilsecurity%2Fdns/versions/2.13.0\n- docs: https://github.com/MadaBurns/bv-mcp#readme\n", "summary": "从项目官方 README 或安装文档提取的开工入口。", "title": "Quick Start / 官方入口" } }, "validation_id": "dval_a3eaa0b00656457ba2429c9792f2db1b" }