karst 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. checksums.yaml +7 -0
  2. data/ARCHITECTURE.md +59 -0
  3. data/CHANGELOG.md +67 -0
  4. data/CODE_OF_CONDUCT.md +29 -0
  5. data/CONTRIBUTING.md +45 -0
  6. data/LICENSE +21 -0
  7. data/README.md +140 -0
  8. data/SECURITY.md +11 -0
  9. data/docs/advanced-configuration.md +188 -0
  10. data/lib/generators/karst/install/install_generator.rb +88 -0
  11. data/lib/generators/karst/install/templates/karst_identity_controller.rb +19 -0
  12. data/lib/generators/karst/install/templates/karst_initializer.rb +18 -0
  13. data/lib/karst/access/approved_populations.rb +128 -0
  14. data/lib/karst/access/candidate_population.rb +86 -0
  15. data/lib/karst/access/database_isolation.rb +62 -0
  16. data/lib/karst/access/population_approvals.rb +195 -0
  17. data/lib/karst/access/population_config_snippet.rb +67 -0
  18. data/lib/karst/access/population_discovery.rb +271 -0
  19. data/lib/karst/access/population_preview.rb +83 -0
  20. data/lib/karst/access/principal_sampler.rb +241 -0
  21. data/lib/karst/access/principal_selection.rb +90 -0
  22. data/lib/karst/access/principal_source.rb +143 -0
  23. data/lib/karst/access/principal_source_selection.rb +161 -0
  24. data/lib/karst/access/probe_application.rb +164 -0
  25. data/lib/karst/access/resource_evidence.rb +233 -0
  26. data/lib/karst/access/search.rb +265 -0
  27. data/lib/karst/access/selected_principal_sources.rb +65 -0
  28. data/lib/karst/access/sensitive_attribute_names.rb +26 -0
  29. data/lib/karst/access/sweep.rb +198 -0
  30. data/lib/karst/cli/verification.rb +182 -0
  31. data/lib/karst/configuration.rb +223 -0
  32. data/lib/karst/execution_context.rb +83 -0
  33. data/lib/karst/identity/devise_support.rb +90 -0
  34. data/lib/karst/identity/warden_adapter.rb +130 -0
  35. data/lib/karst/identity.rb +479 -0
  36. data/lib/karst/mcp/server.rb +63 -0
  37. data/lib/karst/mcp/verify_access_tool.rb +68 -0
  38. data/lib/karst/railtie.rb +30 -0
  39. data/lib/karst/spec/catalog.rb +199 -0
  40. data/lib/karst/spec/example_observation.rb +31 -0
  41. data/lib/karst/spec/observer.rb +300 -0
  42. data/lib/karst/spec/principal.rb +12 -0
  43. data/lib/karst/spec/reporter.rb +83 -0
  44. data/lib/karst/spec/request_observation.rb +38 -0
  45. data/lib/karst/spec/scenario.rb +65 -0
  46. data/lib/karst/value.rb +35 -0
  47. data/lib/karst/version.rb +5 -0
  48. data/lib/karst/web/badge.rb +183 -0
  49. data/lib/karst/web/browser_identity.rb +103 -0
  50. data/lib/karst/web/locality.rb +64 -0
  51. data/lib/karst/web/middleware.rb +377 -0
  52. data/lib/karst/web/panel.rb +699 -0
  53. data/lib/karst/web/populations_panel.rb +391 -0
  54. data/lib/karst/web/route_lookup.rb +65 -0
  55. data/lib/karst.rb +56 -0
  56. data/lib/rails/commands/karst/boot.rb +24 -0
  57. data/lib/rails/commands/karst/mcp/mcp_command.rb +26 -0
  58. data/lib/rails/commands/karst/verify/verify_command.rb +39 -0
  59. data/lib/tasks/karst.rake +34 -0
  60. metadata +138 -0
metadata ADDED
@@ -0,0 +1,138 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: karst
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0
5
+ platform: ruby
6
+ authors:
7
+ - Karst contributors
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2026-08-12 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: activesupport
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - ">="
18
+ - !ruby/object:Gem::Version
19
+ version: '6.1'
20
+ - - "<"
21
+ - !ruby/object:Gem::Version
22
+ version: '9'
23
+ type: :runtime
24
+ prerelease: false
25
+ version_requirements: !ruby/object:Gem::Requirement
26
+ requirements:
27
+ - - ">="
28
+ - !ruby/object:Gem::Version
29
+ version: '6.1'
30
+ - - "<"
31
+ - !ruby/object:Gem::Version
32
+ version: '9'
33
+ - !ruby/object:Gem::Dependency
34
+ name: mcp
35
+ requirement: !ruby/object:Gem::Requirement
36
+ requirements:
37
+ - - "~>"
38
+ - !ruby/object:Gem::Version
39
+ version: 0.9.0
40
+ type: :runtime
41
+ prerelease: false
42
+ version_requirements: !ruby/object:Gem::Requirement
43
+ requirements:
44
+ - - "~>"
45
+ - !ruby/object:Gem::Version
46
+ version: 0.9.0
47
+ description: Karst tests Rails routes as a bounded set of existing users and reports
48
+ runtime access evidence.
49
+ email:
50
+ executables: []
51
+ extensions: []
52
+ extra_rdoc_files: []
53
+ files:
54
+ - ARCHITECTURE.md
55
+ - CHANGELOG.md
56
+ - CODE_OF_CONDUCT.md
57
+ - CONTRIBUTING.md
58
+ - LICENSE
59
+ - README.md
60
+ - SECURITY.md
61
+ - docs/advanced-configuration.md
62
+ - lib/generators/karst/install/install_generator.rb
63
+ - lib/generators/karst/install/templates/karst_identity_controller.rb
64
+ - lib/generators/karst/install/templates/karst_initializer.rb
65
+ - lib/karst.rb
66
+ - lib/karst/access/approved_populations.rb
67
+ - lib/karst/access/candidate_population.rb
68
+ - lib/karst/access/database_isolation.rb
69
+ - lib/karst/access/population_approvals.rb
70
+ - lib/karst/access/population_config_snippet.rb
71
+ - lib/karst/access/population_discovery.rb
72
+ - lib/karst/access/population_preview.rb
73
+ - lib/karst/access/principal_sampler.rb
74
+ - lib/karst/access/principal_selection.rb
75
+ - lib/karst/access/principal_source.rb
76
+ - lib/karst/access/principal_source_selection.rb
77
+ - lib/karst/access/probe_application.rb
78
+ - lib/karst/access/resource_evidence.rb
79
+ - lib/karst/access/search.rb
80
+ - lib/karst/access/selected_principal_sources.rb
81
+ - lib/karst/access/sensitive_attribute_names.rb
82
+ - lib/karst/access/sweep.rb
83
+ - lib/karst/cli/verification.rb
84
+ - lib/karst/configuration.rb
85
+ - lib/karst/execution_context.rb
86
+ - lib/karst/identity.rb
87
+ - lib/karst/identity/devise_support.rb
88
+ - lib/karst/identity/warden_adapter.rb
89
+ - lib/karst/mcp/server.rb
90
+ - lib/karst/mcp/verify_access_tool.rb
91
+ - lib/karst/railtie.rb
92
+ - lib/karst/spec/catalog.rb
93
+ - lib/karst/spec/example_observation.rb
94
+ - lib/karst/spec/observer.rb
95
+ - lib/karst/spec/principal.rb
96
+ - lib/karst/spec/reporter.rb
97
+ - lib/karst/spec/request_observation.rb
98
+ - lib/karst/spec/scenario.rb
99
+ - lib/karst/value.rb
100
+ - lib/karst/version.rb
101
+ - lib/karst/web/badge.rb
102
+ - lib/karst/web/browser_identity.rb
103
+ - lib/karst/web/locality.rb
104
+ - lib/karst/web/middleware.rb
105
+ - lib/karst/web/panel.rb
106
+ - lib/karst/web/populations_panel.rb
107
+ - lib/karst/web/route_lookup.rb
108
+ - lib/rails/commands/karst/boot.rb
109
+ - lib/rails/commands/karst/mcp/mcp_command.rb
110
+ - lib/rails/commands/karst/verify/verify_command.rb
111
+ - lib/tasks/karst.rake
112
+ homepage: https://github.com/SilenceDogood1984/karst
113
+ licenses:
114
+ - MIT
115
+ metadata:
116
+ source_code_uri: https://github.com/SilenceDogood1984/karst
117
+ changelog_uri: https://github.com/SilenceDogood1984/karst/blob/main/CHANGELOG.md
118
+ rubygems_mfa_required: 'true'
119
+ post_install_message:
120
+ rdoc_options: []
121
+ require_paths:
122
+ - lib
123
+ required_ruby_version: !ruby/object:Gem::Requirement
124
+ requirements:
125
+ - - ">="
126
+ - !ruby/object:Gem::Version
127
+ version: '2.7'
128
+ required_rubygems_version: !ruby/object:Gem::Requirement
129
+ requirements:
130
+ - - ">="
131
+ - !ruby/object:Gem::Version
132
+ version: '0'
133
+ requirements: []
134
+ rubygems_version: 3.5.22
135
+ signing_key:
136
+ specification_version: 4
137
+ summary: Find real users who can access Rails routes
138
+ test_files: []