prae-cli 0.10.0 → 0.10.2

package/lib/prae-baseline.prae.json

@@ -1,7 +1,7 @@
 {
   "prae": "0.1",
   "pack": "prae-baseline",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "rules": [
     {
       "id": "BASE-001",
@@ -159,6 +159,149 @@
         "owasp-llm-top-10-2026": ["LLM03"],
         "owasp-agentic-top-10-2026": ["ASI02"]
       }
+    },
+    {
+      "id": "BASE-009",
+      "title": "macOS Keychain secrets stay unread through the security tool",
+      "when": {
+        "command": {
+          "name": "security",
+          "anyToken": [
+            "find-generic-password",
+            "find-internet-password",
+            "find-certificate",
+            "find-identity",
+            "dump-keychain",
+            "export",
+            "unlock-keychain"
+          ]
+        }
+      },
+      "effect": {
+        "kind": "deny",
+        "because": "Keychain items are credentials and are out of scope for agents"
+      },
+      "frameworks": {
+        "owasp-llm-top-10-2026": ["LLM02"],
+        "owasp-agentic-top-10-2026": ["ASI03"]
+      }
+    },
+    {
+      "id": "BASE-010",
+      "title": "Keychain files stay unread",
+      "when": {
+        "capability": "fs:read",
+        "path": {
+          "inside": ["**/Library/Keychains/**"]
+        }
+      },
+      "effect": {
+        "kind": "deny",
+        "because": "Keychain databases are credential stores and are out of scope for agents"
+      },
+      "frameworks": {
+        "owasp-llm-top-10-2026": ["LLM02"],
+        "owasp-agentic-top-10-2026": ["ASI03"]
+      }
+    },
+    {
+      "id": "BASE-011",
+      "title": "No shell command names a Keychain file",
+      "when": {
+        "command": {
+          "anyToken": [
+            "~/Library/Keychains*",
+            "$HOME/Library/Keychains*",
+            "${HOME}/Library/Keychains*",
+            "Library/Keychains*"
+          ]
+        }
+      },
+      "effect": {
+        "kind": "deny",
+        "because": "Keychain databases are credential stores and are out of scope for agents"
+      },
+      "frameworks": {
+        "owasp-llm-top-10-2026": ["LLM02"],
+        "owasp-agentic-top-10-2026": ["ASI03"]
+      }
+    },
+    {
+      "id": "BASE-012",
+      "title": "Other credential stores stay unread",
+      "when": {
+        "capability": "fs:read",
+        "path": {
+          "inside": [
+            "**/.netrc",
+            "**/.git-credentials",
+            "**/.docker/config.json",
+            "**/.npmrc",
+            "**/.config/gh/hosts.yml",
+            "**/.config/gcloud/**",
+            "**/.kube/config",
+            "**/.gnupg/**"
+          ]
+        }
+      },
+      "effect": {
+        "kind": "deny",
+        "because": "secrets and credential stores are out of scope for agents"
+      },
+      "frameworks": {
+        "owasp-llm-top-10-2026": ["LLM02"],
+        "owasp-agentic-top-10-2026": ["ASI03"]
+      }
+    },
+    {
+      "id": "BASE-013",
+      "title": "No shell command names a credential file",
+      "when": {
+        "command": {
+          "anyToken": [
+            ".env",
+            ".env.*",
+            "~/.ssh*",
+            "$HOME/.ssh*",
+            "${HOME}/.ssh*",
+            "~/.aws*",
+            "$HOME/.aws*",
+            "${HOME}/.aws*",
+            "~/.netrc",
+            "$HOME/.netrc",
+            "${HOME}/.netrc",
+            "~/.git-credentials",
+            "$HOME/.git-credentials",
+            "${HOME}/.git-credentials",
+            "~/.docker/config.json",
+            "$HOME/.docker/config.json",
+            "${HOME}/.docker/config.json",
+            "~/.kube*",
+            "$HOME/.kube*",
+            "${HOME}/.kube*",
+            "~/.gnupg*",
+            "$HOME/.gnupg*",
+            "${HOME}/.gnupg*",
+            "~/.config/gh/hosts.yml",
+            "$HOME/.config/gh/hosts.yml",
+            "${HOME}/.config/gh/hosts.yml",
+            "~/.config/gcloud*",
+            "$HOME/.config/gcloud*",
+            "${HOME}/.config/gcloud*",
+            "~/.npmrc",
+            "$HOME/.npmrc",
+            "${HOME}/.npmrc"
+          ]
+        }
+      },
+      "effect": {
+        "kind": "deny",
+        "because": "the shell reaches the same credential stores the file rules protect"
+      },
+      "frameworks": {
+        "owasp-llm-top-10-2026": ["LLM02"],
+        "owasp-agentic-top-10-2026": ["ASI03"]
+      }
     }
   ]
 }

package/lib/{receipt-check-CUuEjGHL.js → receipt-check-BtAJqyrX.js}

@@ -1,4 +1,4 @@
-import { m as verifyReceipt, u as fingerprint } from "./src-Cy-Acrgj.js";
+import { m as verifyReceipt, u as fingerprint } from "./src-CuiWC80o.js";
 
 //#region src/receipt-check.ts
 /** Shape we require before we will call it a receipt at all. */

package/lib/{src-wG36kT6K.js → src-2iJy5MZc.js}

@@ -1,3 +1,3 @@
-import { _ as canonical, a as verifyEntries, b as seal, c as unsealPrivateKey, d as generateKeypair, f as makeReceipt, g as GENESIS, h as verifySignature, i as tailOf, l as verifyBytes, m as verifyReceipt, n as Ledger, o as sealedKeypair, p as signEntry, r as readEntries, s as signBytes, t as verifyGrowing, u as fingerprint, v as chain, y as hashEntry } from "./src-Cy-Acrgj.js";
+import { _ as canonical, a as verifyEntries, b as seal, c as unsealPrivateKey, d as generateKeypair, f as makeReceipt, g as GENESIS, h as verifySignature, i as tailOf, l as verifyBytes, m as verifyReceipt, n as Ledger, o as sealedKeypair, p as signEntry, r as readEntries, s as signBytes, t as verifyGrowing, u as fingerprint, v as chain, y as hashEntry } from "./src-CuiWC80o.js";
 
 export { GENESIS, Ledger, canonical, chain, fingerprint, generateKeypair, hashEntry, makeReceipt, readEntries, seal, sealedKeypair, signBytes, signEntry, tailOf, unsealPrivateKey, verifyBytes, verifyEntries, verifyGrowing, verifyReceipt, verifySignature };