mneme-ai 3.145.0 → 3.146.0

package/dist/commands/escalon.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `mneme escalon` (v3.146.0) — the agent TOOL-GRAPH vulnerability analyzer.
+ *
+ *   analyze — given a tool manifest (JSON: [{id, capabilities, consumes, produces, description}]),
+ *             find tool-chain privilege-escalation paths + poisoned tool descriptions.
+ *
+ *   mneme escalon analyze --file tools.json
+ */
+import type { Command } from "commander";
+export declare function registerEscalonCommands(program: Command): void;
+//# sourceMappingURL=escalon.d.ts.map

package/dist/commands/escalon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalon.d.ts","sourceRoot":"","sources":["../../src/commands/escalon.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqB9D"}

package/dist/commands/escalon.js

@@ -0,0 +1,52 @@
+/**
+ * `mneme escalon` (v3.146.0) — the agent TOOL-GRAPH vulnerability analyzer.
+ *
+ *   analyze — given a tool manifest (JSON: [{id, capabilities, consumes, produces, description}]),
+ *             find tool-chain privilege-escalation paths + poisoned tool descriptions.
+ *
+ *   mneme escalon analyze --file tools.json
+ */
+import { readFileSync } from "node:fs";
+import { escalon } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+export function registerEscalonCommands(program) {
+    const c = program.command("escalon")
+        .description("🔗 ESCALON — analyze an AI agent's TOOL GRAPH for (1) tool-chain privilege escalation (safe tools that compose into a dangerous capability — the confused deputy) and (2) MCP tool-poisoning (injection hidden in a tool's description). Deterministic, no LLM. ★HONEST: reasons over the DECLARED capabilities — surfaces reachable paths to inspect, not a proven runtime exploit.");
+    c.command("analyze").description("find privilege-escalation chains + poisoned descriptions in a tool manifest")
+        .option("--file <file>", "tool manifest JSON: [{id, capabilities:[], consumes:[], produces:[], description}]")
+        .option("--json", "JSON")
+        .action((o) => {
+        let raw = "";
+        try {
+            raw = o.file ? readFileSync(o.file, "utf8") : readFileSync(0, "utf8");
+        }
+        catch {
+            out("⛔ provide --file <tools.json> (or pipe the manifest on stdin)");
+            process.exitCode = 2;
+            return;
+        }
+        let tools;
+        try {
+            tools = JSON.parse(raw);
+        }
+        catch {
+            out("⛔ not valid JSON");
+            process.exitCode = 2;
+            return;
+        }
+        const r = escalon.analyze(tools);
+        if (o.json) {
+            out(JSON.stringify(r, null, 2));
+            return;
+        }
+        const mark = r.verdict === "DANGER" ? "🔴" : r.verdict === "REVIEW" ? "🟠" : "🟢";
+        out(`${mark} ESCALON — ${r.verdict} · ${r.tools} tools · ${r.escalations.length} escalation path(s) · ${r.poisoned.length} poisoned · ${r.critical} critical`);
+        for (const e of r.escalations.slice(0, 8))
+            out(`   ${e.severity >= 80 && !e.gated ? "🔴" : "🟠"} [sev ${e.severity}] ${e.tools.join(" → ")} ⇒ ${e.sink}${e.gated ? " (gated)" : ""}`);
+        for (const p of r.poisoned)
+            out(`   ☣ poisoned: ${p.tool} — "${p.excerpt}"`);
+        if (r.verdict === "CLEAN")
+            out(`   ✅ no escalation path or poisoned description found.`);
+    });
+}
+//# sourceMappingURL=escalon.js.map

package/dist/commands/escalon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalon.js","sourceRoot":"","sources":["../../src/commands/escalon.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;SACjC,WAAW,CAAC,sXAAsX,CAAC,CAAC;IAEvY,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,6EAA6E,CAAC;SAC5G,MAAM,CAAC,eAAe,EAAE,oFAAoF,CAAC;SAC7G,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;SACxB,MAAM,CAAC,CAAC,CAAoC,EAAE,EAAE;QAC/C,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC9E,MAAM,CAAC;YAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7G,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjG,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAA8C,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,GAAG,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,WAAW,CAAC,MAAM,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC;QAC/J,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtL,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmNA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsnNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoNA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAunNvD"}

package/dist/index.js

@@ -142,6 +142,7 @@ import { registerArkCommands } from "./commands/ark.js";
 import { registerCosmosCommands } from "./commands/cosmos.js";
 import { registerLedgerCommands } from "./commands/honesty_ledger.js";
 import { registerMutagenCommands } from "./commands/mutagen.js";
+import { registerEscalonCommands } from "./commands/escalon.js";
 import { registerMoatCommands } from "./commands/moat.js";
 import { attachRegretOracle } from "./commands/regret.js";
 import { registerTrustCommands } from "./commands/trust.js";
@@ -4841,6 +4842,7 @@ export async function run(argv) {
     registerCosmosCommands(program);
     registerLedgerCommands(program);
     registerMutagenCommands(program);
+    registerEscalonCommands(program);
     registerMoatCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);