@mneme-ai/core 2.59.0 → 2.60.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent_manifest.d.ts.map +1 -1
- package/dist/agent_manifest.js +6 -0
- package/dist/agent_manifest.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/skeleton_key/bypass_graph.d.ts +56 -0
- package/dist/skeleton_key/bypass_graph.d.ts.map +1 -0
- package/dist/skeleton_key/bypass_graph.js +89 -0
- package/dist/skeleton_key/bypass_graph.js.map +1 -0
- package/dist/skeleton_key/capability_probe.d.ts +58 -0
- package/dist/skeleton_key/capability_probe.d.ts.map +1 -0
- package/dist/skeleton_key/capability_probe.js +149 -0
- package/dist/skeleton_key/capability_probe.js.map +1 -0
- package/dist/skeleton_key/index.d.ts +142 -0
- package/dist/skeleton_key/index.d.ts.map +1 -0
- package/dist/skeleton_key/index.js +321 -0
- package/dist/skeleton_key/index.js.map +1 -0
- package/dist/skeleton_key/risk_heuristics.d.ts +46 -0
- package/dist/skeleton_key/risk_heuristics.d.ts.map +1 -0
- package/dist/skeleton_key/risk_heuristics.js +206 -0
- package/dist/skeleton_key/risk_heuristics.js.map +1 -0
- package/dist/truth_gate/claims.d.ts.map +1 -1
- package/dist/truth_gate/claims.js +19 -0
- package/dist/truth_gate/claims.js.map +1 -1
- package/dist/truth_gate/probes.d.ts.map +1 -1
- package/dist/truth_gate/probes.js +48 -0
- package/dist/truth_gate/probes.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,206 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* v2.60.0 — SKELETON KEY risk heuristics.
|
|
3
|
+
*
|
|
4
|
+
* Pattern-based risk scoring for MCP servers, name-only path. Used as
|
|
5
|
+
* the fast first pass; CAPABILITY PROBE upgrades the scoring with
|
|
6
|
+
* empirical evidence (real tools/list result from spawning the server).
|
|
7
|
+
*
|
|
8
|
+
* Severity scale 0..1:
|
|
9
|
+
* 0.0-0.3 → low (read-only / sandboxed)
|
|
10
|
+
* 0.3-0.6 → medium (scoped mutations)
|
|
11
|
+
* 0.6-0.85 → high (broad mutations)
|
|
12
|
+
* 0.85-1.0 → critical (arbitrary execution / unrestricted FS / DB DDL)
|
|
13
|
+
*
|
|
14
|
+
* Every entry maps to a CWE (Common Weakness Enumeration) for
|
|
15
|
+
* compliance audit-grade output.
|
|
16
|
+
*/
|
|
17
|
+
/**
|
|
18
|
+
* Ordered most-specific → least-specific. First match wins per server.
|
|
19
|
+
* Each entry curated from MCP ecosystem observation (2026-05).
|
|
20
|
+
*/
|
|
21
|
+
export const RISK_HEURISTICS = [
|
|
22
|
+
// Shell / exec — the highest risk class
|
|
23
|
+
{
|
|
24
|
+
match: "shell-mcp",
|
|
25
|
+
riskName: "arbitrary command execution",
|
|
26
|
+
severity: 0.95,
|
|
27
|
+
mitigation: "allowlist commands; require PASSPORT token for destructive ops; sandbox via container",
|
|
28
|
+
cwe: "CWE-78", // OS command injection
|
|
29
|
+
capabilities: ["exec", "write_fs", "network", "process_kill"],
|
|
30
|
+
},
|
|
31
|
+
{
|
|
32
|
+
match: "exec-mcp",
|
|
33
|
+
riskName: "arbitrary command execution",
|
|
34
|
+
severity: 0.95,
|
|
35
|
+
mitigation: "allowlist commands; require PASSPORT token for destructive ops",
|
|
36
|
+
cwe: "CWE-78",
|
|
37
|
+
capabilities: ["exec", "write_fs", "network"],
|
|
38
|
+
},
|
|
39
|
+
{
|
|
40
|
+
match: "shell",
|
|
41
|
+
riskName: "shell access (broad)",
|
|
42
|
+
severity: 0.90,
|
|
43
|
+
mitigation: "allowlist commands; refuse rm/format/dd by policy",
|
|
44
|
+
cwe: "CWE-78",
|
|
45
|
+
capabilities: ["exec", "write_fs"],
|
|
46
|
+
},
|
|
47
|
+
// Filesystem
|
|
48
|
+
{
|
|
49
|
+
match: "filesystem",
|
|
50
|
+
riskName: "unrestricted FS read/write",
|
|
51
|
+
severity: 0.85,
|
|
52
|
+
mitigation: "scope to specific dirs via allowlist; gate writes via PASSPORT token",
|
|
53
|
+
cwe: "CWE-22", // path traversal
|
|
54
|
+
capabilities: ["read_fs", "write_fs"],
|
|
55
|
+
},
|
|
56
|
+
// Cloud / infra
|
|
57
|
+
{
|
|
58
|
+
match: "kubernetes",
|
|
59
|
+
riskName: "cluster mutation (apply / delete)",
|
|
60
|
+
severity: 0.85,
|
|
61
|
+
mitigation: "RBAC scope; require explicit ServiceAccount with no cluster-admin",
|
|
62
|
+
cwe: "CWE-269", // improper privilege management
|
|
63
|
+
capabilities: ["cluster_mutate", "exec"],
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
match: "aws",
|
|
67
|
+
riskName: "AWS resource creation/destruction",
|
|
68
|
+
severity: 0.80,
|
|
69
|
+
mitigation: "IAM scope down; require --dry-run first; deny iam:* / *:Delete",
|
|
70
|
+
cwe: "CWE-269",
|
|
71
|
+
capabilities: ["cloud_mutate", "billing"],
|
|
72
|
+
},
|
|
73
|
+
{
|
|
74
|
+
match: "gcp",
|
|
75
|
+
riskName: "GCP resource creation/destruction",
|
|
76
|
+
severity: 0.80,
|
|
77
|
+
mitigation: "scope service account; deny billing.* / iam.*",
|
|
78
|
+
cwe: "CWE-269",
|
|
79
|
+
capabilities: ["cloud_mutate", "billing"],
|
|
80
|
+
},
|
|
81
|
+
{
|
|
82
|
+
match: "azure",
|
|
83
|
+
riskName: "Azure resource creation/destruction",
|
|
84
|
+
severity: 0.80,
|
|
85
|
+
mitigation: "scope service principal; deny role assignments",
|
|
86
|
+
cwe: "CWE-269",
|
|
87
|
+
capabilities: ["cloud_mutate", "billing"],
|
|
88
|
+
},
|
|
89
|
+
// DB
|
|
90
|
+
{
|
|
91
|
+
match: "postgres",
|
|
92
|
+
riskName: "DB DDL/DML allowed",
|
|
93
|
+
severity: 0.78,
|
|
94
|
+
mitigation: "use read-only user; deny DROP/TRUNCATE/DELETE via grants",
|
|
95
|
+
cwe: "CWE-89", // SQL injection class
|
|
96
|
+
capabilities: ["db_read", "db_write", "db_ddl"],
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
match: "mysql",
|
|
100
|
+
riskName: "DB DDL/DML allowed",
|
|
101
|
+
severity: 0.78,
|
|
102
|
+
mitigation: "use read-only user; revoke ALTER/DROP",
|
|
103
|
+
cwe: "CWE-89",
|
|
104
|
+
capabilities: ["db_read", "db_write", "db_ddl"],
|
|
105
|
+
},
|
|
106
|
+
{
|
|
107
|
+
match: "mongodb",
|
|
108
|
+
riskName: "DB write/dropCollection allowed",
|
|
109
|
+
severity: 0.75,
|
|
110
|
+
mitigation: "role-scope to read-only or specific db; deny dropDatabase",
|
|
111
|
+
cwe: "CWE-89",
|
|
112
|
+
capabilities: ["db_read", "db_write"],
|
|
113
|
+
},
|
|
114
|
+
{
|
|
115
|
+
match: "redis",
|
|
116
|
+
riskName: "DB write + FLUSHDB risk",
|
|
117
|
+
severity: 0.70,
|
|
118
|
+
mitigation: "ACL with read-only; deny FLUSHDB/FLUSHALL/CONFIG SET",
|
|
119
|
+
cwe: "CWE-89",
|
|
120
|
+
capabilities: ["db_read", "db_write"],
|
|
121
|
+
},
|
|
122
|
+
// Source control
|
|
123
|
+
{
|
|
124
|
+
match: "github",
|
|
125
|
+
riskName: "write to any repo",
|
|
126
|
+
severity: 0.75,
|
|
127
|
+
mitigation: "scope token to specific repos; deny repo-creation / repo-deletion",
|
|
128
|
+
cwe: "CWE-285", // improper authorization
|
|
129
|
+
capabilities: ["git_write", "network"],
|
|
130
|
+
},
|
|
131
|
+
{
|
|
132
|
+
match: "gitlab",
|
|
133
|
+
riskName: "write to any project",
|
|
134
|
+
severity: 0.75,
|
|
135
|
+
mitigation: "scope token to specific projects; deny project deletion",
|
|
136
|
+
cwe: "CWE-285",
|
|
137
|
+
capabilities: ["git_write", "network"],
|
|
138
|
+
},
|
|
139
|
+
// Browser automation
|
|
140
|
+
{
|
|
141
|
+
match: "playwright",
|
|
142
|
+
riskName: "headless browser to any URL",
|
|
143
|
+
severity: 0.65,
|
|
144
|
+
mitigation: "allowlist domains; deny localhost/127.* (SSRF surface)",
|
|
145
|
+
cwe: "CWE-918", // SSRF
|
|
146
|
+
capabilities: ["network", "browser_automation"],
|
|
147
|
+
},
|
|
148
|
+
{
|
|
149
|
+
match: "puppeteer",
|
|
150
|
+
riskName: "headless browser to any URL",
|
|
151
|
+
severity: 0.65,
|
|
152
|
+
mitigation: "allowlist domains; deny localhost/127.*",
|
|
153
|
+
cwe: "CWE-918",
|
|
154
|
+
capabilities: ["network", "browser_automation"],
|
|
155
|
+
},
|
|
156
|
+
{
|
|
157
|
+
match: "browser",
|
|
158
|
+
riskName: "browser automation",
|
|
159
|
+
severity: 0.60,
|
|
160
|
+
mitigation: "allowlist domains; deny credential prompts",
|
|
161
|
+
cwe: "CWE-918",
|
|
162
|
+
capabilities: ["network", "browser_automation"],
|
|
163
|
+
},
|
|
164
|
+
// Generic write-capable
|
|
165
|
+
{
|
|
166
|
+
match: "write",
|
|
167
|
+
riskName: "generic write tool (name suggests mutations)",
|
|
168
|
+
severity: 0.55,
|
|
169
|
+
mitigation: "inspect actual tool schema; scope via PASSPORT",
|
|
170
|
+
cwe: "CWE-285",
|
|
171
|
+
capabilities: ["write_fs"],
|
|
172
|
+
},
|
|
173
|
+
// Memory / RAG read-only
|
|
174
|
+
{
|
|
175
|
+
match: "memory",
|
|
176
|
+
riskName: "read-only memory (low risk)",
|
|
177
|
+
severity: 0.20,
|
|
178
|
+
mitigation: "verify it doesn't shell out; pin source paths",
|
|
179
|
+
cwe: "CWE-200", // info exposure (if memory contains secrets)
|
|
180
|
+
capabilities: ["read_memory"],
|
|
181
|
+
},
|
|
182
|
+
];
|
|
183
|
+
/**
|
|
184
|
+
* Match a server name against heuristics. Returns the highest-severity
|
|
185
|
+
* matching heuristic, or null if no match (= unknown → conservative HIGH).
|
|
186
|
+
*/
|
|
187
|
+
export function matchHeuristic(serverName) {
|
|
188
|
+
const lower = serverName.toLowerCase();
|
|
189
|
+
const matches = RISK_HEURISTICS.filter((h) => lower.includes(h.match));
|
|
190
|
+
if (matches.length === 0)
|
|
191
|
+
return null;
|
|
192
|
+
return matches.sort((a, b) => b.severity - a.severity)[0];
|
|
193
|
+
}
|
|
194
|
+
/**
|
|
195
|
+
* Unknown / unmatched server. Conservative default: treat as medium risk
|
|
196
|
+
* with hint to run capability probe for exact assessment.
|
|
197
|
+
*/
|
|
198
|
+
export const UNKNOWN_HEURISTIC = {
|
|
199
|
+
match: "*",
|
|
200
|
+
riskName: "unknown server (no heuristic match)",
|
|
201
|
+
severity: 0.50,
|
|
202
|
+
mitigation: "run `mneme skeleton_key probe --server <name>` for empirical capability assessment",
|
|
203
|
+
cwe: "CWE-1059", // insufficient documentation
|
|
204
|
+
capabilities: ["unknown"],
|
|
205
|
+
};
|
|
206
|
+
//# sourceMappingURL=risk_heuristics.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"risk_heuristics.js","sourceRoot":"","sources":["../../src/skeleton_key/risk_heuristics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,wCAAwC;IACxC;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,uFAAuF;QACnG,GAAG,EAAE,QAAQ,EAAE,uBAAuB;QACtC,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC;KAC9D;IACD;QACE,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,gEAAgE;QAC5E,GAAG,EAAE,QAAQ;QACb,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;KAC9C;IACD;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,mDAAmD;QAC/D,GAAG,EAAE,QAAQ;QACb,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;KACnC;IACD,aAAa;IACb;QACE,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,4BAA4B;QACtC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,sEAAsE;QAClF,GAAG,EAAE,QAAQ,EAAE,iBAAiB;QAChC,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KACtC;IACD,gBAAgB;IAChB;QACE,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,mCAAmC;QAC7C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,mEAAmE;QAC/E,GAAG,EAAE,SAAS,EAAE,gCAAgC;QAChD,YAAY,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;KACzC;IACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,mCAAmC;QAC7C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,gEAAgE;QAC5E,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;KAC1C;IACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,mCAAmC;QAC7C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,+CAA+C;QAC3D,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;KAC1C;IACD;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,qCAAqC;QAC/C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,gDAAgD;QAC5D,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;KAC1C;IACD,KAAK;IACL;QACE,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,0DAA0D;QACtE,GAAG,EAAE,QAAQ,EAAE,sBAAsB;QACrC,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;KAChD;IACD;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,uCAAuC;QACnD,GAAG,EAAE,QAAQ;QACb,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;KAChD;IACD;QACE,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,iCAAiC;QAC3C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,2DAA2D;QACvE,GAAG,EAAE,QAAQ;QACb,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KACtC;IACD;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,yBAAyB;QACnC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,sDAAsD;QAClE,GAAG,EAAE,QAAQ;QACb,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KACtC;IACD,iBAAiB;IACjB;QACE,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,mEAAmE;QAC/E,GAAG,EAAE,SAAS,EAAE,yBAAyB;QACzC,YAAY,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;KACvC;IACD;QACE,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,yDAAyD;QACrE,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;KACvC;IACD,qBAAqB;IACrB;QACE,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,wDAAwD;QACpE,GAAG,EAAE,SAAS,EAAE,OAAO;QACvB,YAAY,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,yCAAyC;QACrD,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,4CAA4C;QACxD,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAChD;IACD,wBAAwB;IACxB;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,8CAA8C;QACxD,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,gDAAgD;QAC5D,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,CAAC,UAAU,CAAC;KAC3B;IACD,yBAAyB;IACzB;QACE,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,+CAA+C;QAC3D,GAAG,EAAE,SAAS,EAAE,6CAA6C;QAC7D,YAAY,EAAE,CAAC,aAAa,CAAC;KAC9B;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,KAAK,EAAE,GAAG;IACV,QAAQ,EAAE,qCAAqC;IAC/C,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,oFAAoF;IAChG,GAAG,EAAE,UAAU,EAAE,6BAA6B;IAC9C,YAAY,EAAE,CAAC,SAAS,CAAC;CAC1B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,
|
|
1
|
+
{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,CAod9C,CAAC"}
|
|
@@ -250,6 +250,25 @@ export const CLAIM_CATALOG = [
|
|
|
250
250
|
probeId: "probe.coverage.smart_auto_exemption",
|
|
251
251
|
severity: "block",
|
|
252
252
|
},
|
|
253
|
+
// ── v2.60.0 — SKELETON KEY (MCP security auditor) ───────────────────
|
|
254
|
+
{
|
|
255
|
+
id: "claim.skeleton_key.audit_runs",
|
|
256
|
+
source: "v2.60.0 release notes",
|
|
257
|
+
text: "SKELETON KEY (the first MCP server security auditor) runs end-to-end: discovers MCP servers across Claude Desktop / Cursor / Continue / Cline configs, scores per-server risk with CWE mapping, computes transitive bypass graph + risk budget, returns HMAC-sealed envelope that re-verifies. Pure / defensive — never throws even on missing configs",
|
|
258
|
+
kind: "numeric",
|
|
259
|
+
asserted: { value: 1, op: "=", unit: "boolean" },
|
|
260
|
+
probeId: "probe.skeleton_key.audit_runs",
|
|
261
|
+
severity: "block",
|
|
262
|
+
},
|
|
263
|
+
{
|
|
264
|
+
id: "claim.skeleton_key.bypass_graph_works",
|
|
265
|
+
source: "v2.60.0 release notes",
|
|
266
|
+
text: "SKELETON KEY's transitive bypass graph derives multi-server attack paths from capability overlap. Fixture: 3 servers (shell-mcp / filesystem-mcp / github-mcp) → ≥3 distinct attacker-goal bypass paths (delete_repo, modify_ci_pipeline, exfiltrate_secret). Most MCP audit tools stop at single-server analysis — SKELETON KEY computes the GRAPH",
|
|
267
|
+
kind: "numeric",
|
|
268
|
+
asserted: { value: 1, op: "=", unit: "boolean" },
|
|
269
|
+
probeId: "probe.skeleton_key.bypass_graph_works",
|
|
270
|
+
severity: "block",
|
|
271
|
+
},
|
|
253
272
|
// ── v2.59.0 — GATE SELF-VERIFICATION (SDK_AUDITOR) ──────────────────
|
|
254
273
|
{
|
|
255
274
|
id: "claim.sdk.external_surface_complete",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAyB;IACjD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACnD,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClD,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gCAAgC;QACxC,IAAI,EAAE,uDAAuD;QAC7D,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,yDAAyD;QACjE,IAAI,EAAE,8GAA8G;QACpH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,8DAA8D;QACtE,IAAI,EAAE,yHAAyH;QAC/H,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,4BAA4B;QACpC,IAAI,EAAE,kFAAkF;QACxF,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,IAAI,EAAE,4CAA4C;QAClD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,qDAAqD;QAC7D,IAAI,EAAE,kHAAkH;QACxH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,wCAAwC;QAC9C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;QACrD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QAC9D,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,8DAA8D;QACpE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oBAAoB;QAC5B,IAAI,EAAE,sCAAsC;QAC5C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oFAAoF;QAC1F,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mFAAmF;QACzF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mGAAmG;QACzG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gEAAgE;QACtE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iHAAiH;QACvH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD,qEAAqE;IACrE;QACE,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,6FAA6F;QACnG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+MAA+M;QACrN,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,mEAAmE;IACnE,mEAAmE;IACnE,0EAA0E;IAC1E,wEAAwE;IACxE;QACE,EAAE,EAAE,4CAA4C;QAChD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,uJAAuJ;QAC7J,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,0CAA0C;QAC9C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,wXAAwX;QAC9X,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,2VAA2V;QACjW,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,waAAwa;QAC9a,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,4bAA4b;QAClc,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+SAA+S;QACrT,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,OAAO;KAClB;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sSAAsS;QAC5S,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,2NAA2N;QACjO,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oPAAoP;QAC1P,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,OAAO;KAClB;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mRAAmR;QACzR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gRAAgR;QACtR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sNAAsN;QAC5N,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,gCAAgC;QACpC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sUAAsU;QAC5U,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,8eAA8e;QACpf,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iUAAiU;QACvU,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sNAAsN;QAC5N,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,kRAAkR;QACxR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,8EAA8E;IAC9E;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,ykBAAykB;QAC/kB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,sBAAsB;IACtB;QACE,EAAE,EAAE,uCAAuC;QAC3C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sRAAsR;QAC5R,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,4EAA4E;IAC5E,uEAAuE;IACvE,uEAAuE;IACvE;QACE,EAAE,EAAE,uCAAuC;QAC3C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oWAAoW;QAC1W,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE;QACE,EAAE,EAAE,gCAAgC;QACpC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sKAAsK;QAC5K,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gIAAgI;QACtI,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+IAA+I;QACrJ,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,0CAA0C;IAC1C;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iMAAiM;QACvM,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAyB;IACjD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACnD,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClD,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gCAAgC;QACxC,IAAI,EAAE,uDAAuD;QAC7D,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,yDAAyD;QACjE,IAAI,EAAE,8GAA8G;QACpH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,8DAA8D;QACtE,IAAI,EAAE,yHAAyH;QAC/H,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,4BAA4B;QACpC,IAAI,EAAE,kFAAkF;QACxF,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,IAAI,EAAE,4CAA4C;QAClD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,qDAAqD;QAC7D,IAAI,EAAE,kHAAkH;QACxH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,wCAAwC;QAC9C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;QACrD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QAC9D,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,8DAA8D;QACpE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oBAAoB;QAC5B,IAAI,EAAE,sCAAsC;QAC5C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oFAAoF;QAC1F,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mFAAmF;QACzF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mGAAmG;QACzG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gEAAgE;QACtE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iHAAiH;QACvH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD,qEAAqE;IACrE;QACE,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,6FAA6F;QACnG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+MAA+M;QACrN,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,mEAAmE;IACnE,mEAAmE;IACnE,0EAA0E;IAC1E,wEAAwE;IACxE;QACE,EAAE,EAAE,4CAA4C;QAChD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,uJAAuJ;QAC7J,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,0CAA0C;QAC9C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,wXAAwX;QAC9X,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,2VAA2V;QACjW,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,waAAwa;QAC9a,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,wVAAwV;QAC9V,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,uCAAuC;QAC3C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qVAAqV;QAC3V,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,OAAO;KAClB;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,4bAA4b;QAClc,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+SAA+S;QACrT,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,OAAO;KAClB;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sSAAsS;QAC5S,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,2NAA2N;QACjO,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oPAAoP;QAC1P,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,OAAO;KAClB;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,4BAA4B;QAChC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mRAAmR;QACzR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gRAAgR;QACtR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sNAAsN;QAC5N,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,gCAAgC;QACpC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sUAAsU;QAC5U,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,8eAA8e;QACpf,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iUAAiU;QACvU,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sNAAsN;QAC5N,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,kRAAkR;QACxR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,8EAA8E;IAC9E;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,ykBAAykB;QAC/kB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,sBAAsB;IACtB;QACE,EAAE,EAAE,uCAAuC;QAC3C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sRAAsR;QAC5R,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,4EAA4E;IAC5E,uEAAuE;IACvE,uEAAuE;IACvE;QACE,EAAE,EAAE,uCAAuC;QAC3C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oWAAoW;QAC1W,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE;QACE,EAAE,EAAE,gCAAgC;QACpC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,sKAAsK;QAC5K,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gIAAgI;QACtI,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+IAA+I;QACrJ,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,0CAA0C;IAC1C;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iMAAiM;QACvM,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/truth_gate/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/truth_gate/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqnDnE,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,KAAK,CAAU,CAAC;AAEvD,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAEvD;AAED,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAQlF"}
|
|
@@ -1149,6 +1149,54 @@ const probes = [
|
|
|
1149
1149
|
}
|
|
1150
1150
|
},
|
|
1151
1151
|
},
|
|
1152
|
+
// ── v2.60.0 — SKELETON KEY (MCP security auditor) ───────────────────
|
|
1153
|
+
//
|
|
1154
|
+
// First MCP security auditor in the ecosystem. Discovers MCP servers
|
|
1155
|
+
// across user IDE configs + scores risk + computes transitive bypass
|
|
1156
|
+
// graph + maps to CWE compliance.
|
|
1157
|
+
{
|
|
1158
|
+
id: "probe.skeleton_key.audit_runs",
|
|
1159
|
+
kind: "numeric",
|
|
1160
|
+
description: "1 when SKELETON KEY auditMcpConfigs executes end-to-end without crash AND produces a valid HMAC-sealed envelope. Verifies the primitive itself is intact.",
|
|
1161
|
+
run: async () => {
|
|
1162
|
+
try {
|
|
1163
|
+
const m = await import("../skeleton_key/index.js");
|
|
1164
|
+
// Use a synthetic config path that may not exist — primitive must still return valid envelope.
|
|
1165
|
+
const r = await m.auditMcpConfigs({ configPaths: ["/__nonexistent__.json"], budgetCap: 5 });
|
|
1166
|
+
const verified = m.verifyAudit(r);
|
|
1167
|
+
return {
|
|
1168
|
+
value: verified ? 1 : 0,
|
|
1169
|
+
evidence: verified ? `audit returns HMAC-verified envelope (totalServers=${r.totalServers})` : "audit envelope failed HMAC verification",
|
|
1170
|
+
detail: { totalServers: r.totalServers, ok: r.ok },
|
|
1171
|
+
};
|
|
1172
|
+
}
|
|
1173
|
+
catch (e) {
|
|
1174
|
+
return { value: 0, evidence: `audit threw: ${e.message}` };
|
|
1175
|
+
}
|
|
1176
|
+
},
|
|
1177
|
+
},
|
|
1178
|
+
{
|
|
1179
|
+
id: "probe.skeleton_key.bypass_graph_works",
|
|
1180
|
+
kind: "numeric",
|
|
1181
|
+
description: "1 when SKELETON KEY transitive bypass graph correctly identifies multi-server attack paths on a fixture (shell + filesystem + github = at least 3 bypass goals).",
|
|
1182
|
+
run: async () => {
|
|
1183
|
+
try {
|
|
1184
|
+
const m = await import("../skeleton_key/index.js");
|
|
1185
|
+
const shell = { name: "shell", risk: m.RISK_HEURISTICS.find((h) => h.match === "shell-mcp"), source: "fixture" };
|
|
1186
|
+
const fs = { name: "filesystem", risk: m.RISK_HEURISTICS.find((h) => h.match === "filesystem"), source: "fixture" };
|
|
1187
|
+
const gh = { name: "github", risk: m.RISK_HEURISTICS.find((h) => h.match === "github"), source: "fixture" };
|
|
1188
|
+
const graph = m.buildBypassGraph([shell, fs, gh]);
|
|
1189
|
+
const ok = graph.bypassPaths.length >= 3;
|
|
1190
|
+
return {
|
|
1191
|
+
value: ok ? 1 : 0,
|
|
1192
|
+
evidence: ok ? `${graph.bypassPaths.length} bypass paths derived from 3-server fixture` : `only ${graph.bypassPaths.length} bypass paths`,
|
|
1193
|
+
};
|
|
1194
|
+
}
|
|
1195
|
+
catch (e) {
|
|
1196
|
+
return { value: 0, evidence: `probe threw: ${e.message}` };
|
|
1197
|
+
}
|
|
1198
|
+
},
|
|
1199
|
+
},
|
|
1152
1200
|
// ── v2.59.0 — GATE SELF-VERIFICATION (SDK_AUDITOR) ──────────────────
|
|
1153
1201
|
//
|
|
1154
1202
|
// Closes the v2.58 blind-spot where WIRING DOCTOR said "13/13 wired"
|