@systemores/systemores-plugin 1.1.2 → 1.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/.claude-plugin/marketplace.json +2 -2
  2. package/.claude-plugin/plugin.json +8 -2
  3. package/PRIVACY.md +5 -4
  4. package/README.md +11 -8
  5. package/gemini-extension.json +1 -1
  6. package/package.json +1 -2
  7. package/plugin.json +16 -7
  8. package/server.json +2 -2
  9. package/skills/systemores-audit/SKILL.md +2 -1
  10. package/src/server.mjs +30 -5
  11. package/.mcp.json +0 -8
package/.claude-plugin/marketplace.json CHANGED
@@ -6,13 +6,13 @@
6
6
  },
7
7
  "metadata": {
8
8
  "description": "Official Systemores AI Agent Psychometrics, Inline Circuit-Breaker, and MCP 2026 Security Governance plugin catalog.",
9
- "version": "1.1.2"
9
+ "version": "1.1.4"
10
10
  },
11
11
  "plugins": [
12
12
  {
13
13
  "name": "systemores",
14
14
  "description": "Catch tool privilege escalation, sycophancy, and multi-turn persona drift before production. Combines free static MCP 2026 schema & delegation graph audits with <250ms Systemores System One inline circuit breaking, 21-dimension psychometric stress tests, and EU AI Act / NIST / SOC 2 compliance dossiers.",
15
- "version": "1.1.2",
15
+ "version": "1.1.4",
16
16
  "author": {
17
17
  "name": "Systemores LLC",
18
18
  "url": "https://audit.systemores.com"
package/.claude-plugin/plugin.json CHANGED
@@ -1,11 +1,17 @@
1
1
  {
2
2
  "name": "systemores",
3
- "version": "1.1.2",
3
+ "version": "1.1.4",
4
4
  "description": "Audit AI agents, system prompts, and MCP tools across the Systemores 21-dimension & IPIP-NEO-120 psychometric framework, with sub-300ms inline circuit breaking and EU AI Act / NIST / SOC 2 compliance dossiers.",
5
5
  "author": {
6
6
  "name": "Systemores",
7
7
  "url": "https://audit.systemores.com"
8
8
  },
9
9
  "homepage": "https://audit.systemores.com",
10
- "repository": "https://github.com/bobcar0/systemores-plugin"
10
+ "repository": "https://github.com/bobcar0/systemores-plugin",
11
+ "mcpServers": {
12
+ "cloud": {
13
+ "type": "http",
14
+ "url": "https://audit.systemores.com/api/mcp"
15
+ }
16
+ }
11
17
  }
package/PRIVACY.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # Privacy Policy — Systemores AI Agent & MCP Security Auditor
2
2
 
3
- **Effective Date:** October 30, 2026
4
- **Publisher:** Systemores LLC (`https://systemores.com` / `https://audit.systemores.com`)
3
+ **Effective Date:** November 14, 2026
4
+ **Publisher:** Systemores LLC, a Texas limited liability company (`https://systemores.com` / `https://audit.systemores.com`)
5
5
  **Canonical Privacy Policy URL:** https://audit.systemores.com/privacy
6
6
 
7
7
  ## 1. Overview & Data Minimization
@@ -16,12 +16,13 @@ Systemores LLC ("Systemores", "we", "our") provides the **Systemores AI Agent &
16
16
 
17
17
  ### Free Community Tier (Static & Structural Tools)
18
18
  - Tools: `systemores_audit_tool_integrity`, `systemores_audit_agent_graph`, `systemores_measure_drag`
19
- - Payloads (`toolDefinitionsJson`, `graphTopologyJson`, latency integers) are evaluated deterministically and discarded immediately upon returning the JSON response.
19
+ - Payloads (`toolDefinitionsJson`, `graphTopologyJson`, latency integers) are validated locally on stdio and evaluated deterministically over TLS with zero third-party LLM calls, zero API key required, and immediate in-memory discard.
20
20
  - Client IP addresses are processed solely for sliding-window burst rate limiting.
21
21
 
22
22
  ### Pro & Team Cloud Tiers (Psychometric, Live Circuit-Breaker & Compliance Tools)
23
23
  - Tools: `systemores_stress_test_agent`, `systemores_evaluate_drift`, `systemores_assess_bias`, `systemores_tool_integrity`, `systemores_generate_cohort`, `systemores_inject_environment_fault`, `systemores_analyze_trace_telemetry`, `systemores_export_dossier`, `systemores_audit_turn_live`
24
- - **Authentication & Licensing Metadata:** We store a SHA-256 digest of your API key, subscription tier (`pro`, `team`, `enterprise`), billing status via Stripe, aggregate monthly call counts, and a rolling 24-hour set of distinct client IPs to enforce seat licensing.
24
+ - **Authentication & Licensing Metadata:** We store a SHA-256 digest of your API key, subscription tier (`pro`, `team`, `enterprise`), billing status via Stripe, aggregate monthly call counts, Trial Token TTL/quotas, and a rolling 24-hour set of distinct client IPs to enforce seat licensing.
25
+ - **Zero-Retention Compliance Certificate Metadata (`/verify/dos-...`):** Solely when a Team subscriber explicitly invokes `systemores_export_dossier`, Systemores stores sanitized certificate metadata (`dossierId`, sanitized `companyName`, `auditSessionId`, `frameworksEvaluated`, numeric `frameworkScores`, `overallScore`, `certificationStatus`, `engineVersion`, `timestamp`, `sha256IntegrityHash`, and HMAC signature) in Upstash Redis for a 365-day TTL. Raw system prompts, user messages, agent outputs, and tool schemas are **never** persisted in dossier records.
25
26
 
26
27
  ## 3. Third-Party Subprocessors
27
28
 
package/README.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  **Stop shipping unverified prompts and over-privileged MCP tools. Audit schemas, delegation graphs, 21-dimension behavioral stability, and `<250ms` inline circuit breakers directly inside your IDE.**
4
4
 
5
- [![Version](https://img.shields.io/badge/version-1.1.2-0ea5e9.svg)](https://audit.systemores.com)
5
+ [![Version](https://img.shields.io/badge/version-1.1.4-0ea5e9.svg)](https://audit.systemores.com)
6
6
  [![npm](https://img.shields.io/npm/v/@systemores/systemores-plugin?color=cb3837&label=npm)](https://www.npmjs.com/package/@systemores/systemores-plugin)
7
7
  [![MCP Registry](https://img.shields.io/badge/MCP_Registry-io.github.bobcar0%2Fsystemores--plugin-0ea5e9)](https://registry.modelcontextprotocol.io)
8
8
  [![MCP 2026](https://img.shields.io/badge/MCP-2026%20Streamable%20HTTP-10b981.svg)](https://audit.systemores.com/api/mcp)
@@ -24,10 +24,10 @@
24
24
 
25
25
  | Audit Vector | Tool Used | Result / Metric | Status |
26
26
  | :--- | :--- | :--- | :---: |
27
- | **MCP 2026 Tool Schema Integrity** | `systemores_audit_tool_integrity` (`strictMode: true`) | **100 / 100** (11/11 tools, 0 annotation or injection flags) | 🟢 `PASS` |
27
+ | **MCP 2026 Tool Schema Integrity** | `systemores_audit_tool_integrity` (`strictMode: true`) | **100 / 100** (12/12 tools, 0 annotation or injection flags) | 🟢 `PASS` |
28
28
  | **Multi-Agent Graph Topology** | `systemores_audit_agent_graph` | **0 Cycles / 0 Privilege Escalations** (6 nodes, 5 edges) | 🟢 `PASSED` |
29
- | **System One Adversarial Refusal** | `systemores_audit_turn_live` (`systemores-s1-1.13.0`) | **98.4 / 100 Health Index** (`1.99/2.0` compliance, `4.0%` sycophancy, `135ms`) | 🟢 `DISPATCH` |
30
- | **System One Sycophancy Trap** | `systemores_audit_turn_live` (`systemores-s1-1.13.0`) | **Blocked Fake 100/100 Coercion** (`98%` sycophancy detected in `129ms`) | 🛡️ `INTERCEPT` |
29
+ | **System One Adversarial Refusal** | `systemores_audit_turn_live` (`systemores-s1-inline`) | **98.4 / 100 Health Index** (`1.99/2.0` compliance, `4.0%` sycophancy, `135ms`) | 🟢 `DISPATCH` |
30
+ | **System One Sycophancy Trap** | `systemores_audit_turn_live` (`systemores-s1-inline`) | **Blocked Fake 100/100 Coercion** (`98%` sycophancy detected in `129ms`) | 🛡️ `INTERCEPT` |
31
31
  | **20- & 50-Turn Behavioral Drift** | `systemores_evaluate_drift` (`turns: 20 & 50`, `temp: 0.7`) | **0.050 Drift Index / 5° Deviation Angle** (`ISFJ-A` / `98%` Conscientiousness) | 🟢 `CONTROLLED` |
32
32
  | **High-Press Needs-Press Stability** | `systemores_stress_test_agent` (`pressIntensity: high`) | **1.00 Behavioral Integrity** (`0.934` PSI, `93` Compliance, `6` Confrontation) | 🟢 `PASSED` |
33
33
  | **4-Domain Algorithmic Bias Audit** | `systemores_assess_bias` (`eeoc`, `ecoa`, `housing`, `coppa`) | **0 Non-Compliance Flags** across all 4 statutory domains (`LOW` risk) | 🟢 `PASSED` |
@@ -47,7 +47,7 @@
47
47
  | **Gemini CLI Manifest** | `gemini-extension.json` | Cross-platform manifest for Gemini CLI extension installation. |
48
48
  | **Cloud MCP Config** | `mcp_config.json` | Connects to `https://audit.systemores.com/api/mcp` via stateless Streamable HTTP. |
49
49
  | **Specialist Subagent** | `agents/systemores-auditor.md` | Autonomous behavioral & security auditor powered by the 21-dimension & IPIP-NEO-120 framework. |
50
- | **Audit Workflow Skill** | `skills/systemores-audit/SKILL.md` | On-demand procedural runbook for 11 MCP tools, scorecards, and compliance certification. |
50
+ | **Audit Workflow Skill** | `skills/systemores-audit/SKILL.md` | On-demand procedural runbook for 12 MCP tools, scorecards, and compliance certification. |
51
51
  | **Governance Rules** | `rules/AGENTS.md` | Enforces MCP 2026 `annotations` (`readOnlyHint`, `destructiveHint`) and anti-sycophancy guardrails. |
52
52
 
53
53
  ---
@@ -55,11 +55,13 @@
55
55
  ## 🚀 Quick Install
56
56
 
57
57
  ### 1. Google Antigravity IDE / CLI
58
- Clone or install into your global Antigravity plugins directory:
58
+ Install via the Antigravity CLI (or clone into your global Antigravity plugins directory):
59
59
  ```bash
60
+ agy plugin install https://github.com/bobcar0/systemores-plugin
61
+ # or clone directly:
60
62
  git clone https://github.com/bobcar0/systemores-plugin.git ~/.gemini/config/plugins/systemores
61
63
  ```
62
- Then restart Antigravity (or toggle **Systemores: AI Agent & MCP Security Auditor** in **Settings -> Customizations -> Plugins**).
64
+ Then toggle **Systemores** under **Customizations -> Installed** in Antigravity.
63
65
 
64
66
  ### 2. Claude Code
65
67
  ```bash
@@ -92,6 +94,7 @@ The Systemores Cloud MCP Server (`https://audit.systemores.com/api/mcp`) provide
92
94
  | `systemores_measure_drag` *(Cognitive Drag & Token Velocity Math)* | ✅ Unlimited* | ✅ | ✅ |
93
95
  | `systemores_audit_turn_live` *(Systemores System One <250ms Inline Circuit Breaker)* | 🔒 Pro / Trial Key | ✅ Live System One Engine | ✅ Priority Burst SLA |
94
96
  | `systemores_stress_test_agent` *(21-Dimension Murray Needs-Press + Big Five/MBTI/DISC)* | 🔒 Pro / Trial Key | ✅ Live 21-Trait Engine | ✅ Unredacted Raw Vectors |
97
+ | `systemores_tool_integrity` *(Action Boundary & Privilege Escalation Audit)* | 🔒 Pro / Trial Key | ✅ Live Compliance Score | ✅ Full Risk Breakdown |
95
98
  | `systemores_evaluate_drift` *(Multi-Turn Persona Erosion & Entropy Curve)* | 🔒 Pro / Trial Key | ✅ Up to 100 Turns | ✅ Up to 100 Turns |
96
99
  | `systemores_assess_bias` *(EEOC, ECOA, Fair Housing & COPPA Bias Audit)* | 🔒 Pro / Trial Key | ✅ All 4 Domains | ✅ All 4 Domains |
97
100
  | `systemores_generate_cohort` *(30-Facet IPIP-NEO-120 Synthetic Adversarial Cohorts)* | 🔒 Pro / Trial Key | ✅ Up to 50 Personas | ✅ Custom Domain Cohorts |
@@ -103,7 +106,7 @@ The Systemores Cloud MCP Server (`https://audit.systemores.com/api/mcp`) provide
103
106
 
104
107
  ---
105
108
 
106
- ## 🔓 Unlock All 11 Auditors in 30 Seconds (Trial & Pro Keys)
109
+ ## 🔓 Unlock All 12 Auditors in 30 Seconds (Trial & Pro Keys)
107
110
 
108
111
  1. **Claim a key in one click:** Subscribe for an instant Pro/Team API key (`sys_pro_...`) or request a 7-day Trial Token at **[audit.systemores.com/pricing](https://audit.systemores.com/pricing)**.
109
112
  2. **Add your key to `mcp_config.json`:**
package/gemini-extension.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "systemores",
3
- "version": "1.1.2",
3
+ "version": "1.1.4",
4
4
  "description": "Systemores AI Agent Auditor — 21-dimension behavioral stress testing, IPIP-NEO-120 psychometrics, MCP 2026 tool integrity auditing, and regulatory compliance dossiers.",
5
5
  "mcpServers": {
6
6
  "cloud": {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@systemores/systemores-plugin",
3
- "version": "1.1.2",
3
+ "version": "1.1.4",
4
4
  "mcpName": "io.github.bobcar0/systemores-plugin",
5
5
  "description": "Systemores AI Agent Psychometrics, Inline Circuit-Breaker (<250ms), and MCP 2026 Security Governance plugin for Google Antigravity, Claude Code, and Gemini CLI.",
6
6
  "homepage": "https://audit.systemores.com",
@@ -29,7 +29,6 @@
29
29
  "assets/",
30
30
  "plugin.json",
31
31
  "mcp_config.json",
32
- ".mcp.json",
33
32
  ".claude-plugin/",
34
33
  "gemini-extension.json",
35
34
  "PRIVACY.md",
package/plugin.json CHANGED
@@ -1,8 +1,9 @@
1
1
  {
2
+ "$schema": "https://antigravity.google/schemas/v1/plugin.json",
2
3
  "name": "systemores",
3
- "displayName": "Systemores: AI Agent & MCP Security Auditor",
4
- "version": "1.1.2",
5
- "description": "Catch tool privilege escalation, sycophancy, and multi-turn persona drift before production. Combines free static MCP 2026 schema & delegation graph audits with <250ms Systemores System One inline circuit breaking, 21-dimension psychometric stress tests, and EU AI Act / NIST / SOC 2 compliance dossiers.",
4
+ "displayName": "Systemores",
5
+ "version": "1.1.4",
6
+ "description": "Audit AI agent system prompts, MCP 2026 tool schemas, delegation graphs, <250ms guardrails, 21D psychometrics, and EU AI Act / NIST / SOC 2 dossiers.",
6
7
  "logo": "assets/logo.svg",
7
8
  "suggestedPrompts": [
8
9
  "Run a free MCP 2026 security audit on my workspace's tool schemas and multi-agent delegation graph",
@@ -14,8 +15,16 @@
14
15
  "url": "https://audit.systemores.com"
15
16
  },
16
17
  "homepage": "https://audit.systemores.com",
17
- "repository": {
18
- "type": "git",
19
- "url": "https://github.com/bobcar0/systemores-plugin.git"
20
- }
18
+ "repository": "https://github.com/bobcar0/systemores-plugin",
19
+ "license": "Apache-2.0",
20
+ "keywords": [
21
+ "security",
22
+ "mcp",
23
+ "audit",
24
+ "agents",
25
+ "compliance",
26
+ "eu-ai-act",
27
+ "soc2",
28
+ "guardrails"
29
+ ]
21
30
  }
package/server.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "title": "Systemores AI Agent & MCP Security Auditor",
5
5
  "description": "AI agent security, MCP 2026 schema & graph audits, <250ms guardrails, and compliance dossiers",
6
6
  "websiteUrl": "https://audit.systemores.com",
7
- "version": "1.1.2",
7
+ "version": "1.1.4",
8
8
  "icons": [
9
9
  {
10
10
  "src": "https://raw.githubusercontent.com/bobcar0/systemores-plugin/main/assets/logo.svg",
@@ -23,7 +23,7 @@
23
23
  "registryType": "npm",
24
24
  "registryBaseUrl": "https://registry.npmjs.org",
25
25
  "identifier": "@systemores/systemores-plugin",
26
- "version": "1.1.2",
26
+ "version": "1.1.4",
27
27
  "transport": {
28
28
  "type": "stdio"
29
29
  },
package/skills/systemores-audit/SKILL.md CHANGED
@@ -9,7 +9,7 @@ Use this skill whenever the user wants to evaluate, stress-test, secure, or cert
9
9
 
10
10
  ## 1. Tool Matrix & Tier Availability
11
11
 
12
- The Systemores MCP server (`systemores_cloud` or `systemores-agent-auditor`) exposes **11 specialized auditing tools** across three tiers:
12
+ The Systemores MCP server (`systemores_cloud` or `systemores-agent-auditor`) exposes **12 specialized auditing tools** across three tiers:
13
13
 
14
14
  ### Free Community Tier ($0 / Zero-Config / Instant Execution)
15
15
  These deterministic structural and efficiency tools run immediately upon plugin installation without requiring an API key:
@@ -27,6 +27,7 @@ These tools run live 30-adjective semantic extraction, Systemores 21-dimension s
27
27
  | :--- | :--- | :--- |
28
28
  | `systemores_audit_turn_live` | **Systemores System One** real-time (~250ms) circuit breaker. Returns `healthIndex` (0–100), calibrated sycophancy probability, information leakage verdict, and gate action (`DISPATCH`, `INTERCEPT`, `STRIP_TOOL`, `QUARANTINE`). | `systemPrompt`, `userMessage`, `agentResponse`, `proposedToolCall` |
29
29
  | `systemores_stress_test_agent` | **Murray Needs-Press** adversarial stress test across 21 traits + derived Big Five (OCEAN), MBTI, and DISC profiles. | `systemPrompt`, `role` (`customer_support`, `financial_underwriter`, `medical_assistant`, `general_developer`), `pressIntensity` |
30
+ | `systemores_tool_integrity` | Audits agent tool permissions, action boundaries, and privilege escalation risks in context. | `systemPrompt`, `toolContext` (`["api_calls", "database", "filesystem", "code_execution"]`) |
30
31
  | `systemores_evaluate_drift` | Simulates multi-turn persona erosion and computes average drift index and deviation angle in degrees. | `systemPrompt`, `turns` (1–100), `temperature` |
31
32
  | `systemores_assess_bias` | Evaluates algorithmic bias and regulatory non-compliance flags across protected domains. | `systemPrompt`, `complianceDomain` (`employment_eeoc`, `housing_fair`, `lending_ecoa`, `children_coppa`) |
32
33
  | `systemores_generate_cohort` | Generates synthetic adversarial & baseline testing personas with full 30-facet IPIP-NEO-120 psychometric vectors. | `domain`, `cohortSize` (1–50), `includeAdversarial` |
package/src/server.mjs CHANGED
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
  /**
3
- * Systemores AI Agent & MCP Security Auditor — MCP Server & Cloud Bridge (v1.1.2)
3
+ * Systemores AI Agent & MCP Security Auditor — MCP Server & Cloud Bridge (v1.1.4)
4
4
  * Canonical URL: https://audit.systemores.com/api/mcp
5
5
  * Privacy Policy: https://audit.systemores.com/privacy (see PRIVACY.md)
6
6
  *
@@ -8,6 +8,7 @@
8
8
  * authenticated tool executions over TLS to https://audit.systemores.com/api/mcp.
9
9
  */
10
10
 
11
+ import { realpathSync } from "node:fs";
11
12
  import { createInterface } from "node:readline";
12
13
  import { timingSafeEqual } from "node:crypto";
13
14
  import { fileURLToPath } from "node:url";
@@ -623,7 +624,20 @@ export async function executeToolCall(toolName, args = {}, options = {}) {
623
624
  }),
624
625
  });
625
626
 
626
- const payload = await response.json();
627
+ const rawText = await response.text();
628
+ let payload = {};
629
+ if (rawText.trimStart().startsWith("{")) {
630
+ payload = JSON.parse(rawText);
631
+ } else {
632
+ const sseDataLines = rawText
633
+ .split("\n")
634
+ .filter((line) => line.startsWith("data: "))
635
+ .map((line) => line.slice(6).trim())
636
+ .filter((chunk) => chunk && chunk !== "[DONE]");
637
+ if (sseDataLines.length > 0) {
638
+ payload = JSON.parse(sseDataLines[sseDataLines.length - 1]);
639
+ }
640
+ }
627
641
  if (payload.result) {
628
642
  return payload.result;
629
643
  }
@@ -644,7 +658,7 @@ export const CallToolRequestSchema = { method: "tools/call" };
644
658
 
645
659
  export const server = {
646
660
  name: "systemores-plugin",
647
- version: "1.1.2",
661
+ version: "1.1.4",
648
662
  registeredTools: new Map(),
649
663
  handlers: new Map(),
650
664
  tool(name, description, schema, annotations, handler) {
@@ -695,7 +709,7 @@ export async function handleJsonRpcMessage(message) {
695
709
  },
696
710
  serverInfo: {
697
711
  name: "systemores-plugin",
698
- version: "1.1.2",
712
+ version: "1.1.4",
699
713
  },
700
714
  },
701
715
  };
@@ -764,6 +778,17 @@ export function startStdioServer() {
764
778
  });
765
779
  }
766
780
 
767
- if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
781
+ export function isExecutedDirectly(metaUrl, argv1 = process.argv[1]) {
782
+ if (!argv1) return false;
783
+ const modulePath = fileURLToPath(metaUrl);
784
+ if (modulePath === argv1) return true;
785
+ try {
786
+ return realpathSync(modulePath) === realpathSync(argv1);
787
+ } catch {
788
+ return false;
789
+ }
790
+ }
791
+
792
+ if (isExecutedDirectly(import.meta.url)) {
768
793
  startStdioServer();
769
794
  }
package/.mcp.json DELETED
@@ -1,8 +0,0 @@
1
- {
2
- "mcpServers": {
3
- "cloud": {
4
- "type": "http",
5
- "url": "https://audit.systemores.com/api/mcp"
6
- }
7
- }
8
- }