@crawlcheck/sdk 1.13.0 → 1.13.1

package/dist/mcp.js

@@ -106,11 +106,8 @@ export function mcpPreflight(cc, opts = {}) {
     // vantage and the signed receipt names the endpoint and tool state it covered (a changed list comes back as block).
     const mcpScope = function () { if (!state.url || !/^https:/i.test(state.url))
         return undefined; const h = opts.lock && typeof opts.lock.tools_sha256 === "string" ? opts.lock.tools_sha256 : null; return h ? { url: state.url, tools_sha256: h } : { url: state.url }; };
-    const decide = async function (host) {
+    const checkConnect = async function (host) {
         const g = await cc.guard(host, "connect", { template, policy: opts.policy, agent: opts.agent, confirm: opts.confirm, allowWarn: !!opts.allowWarn, onlineKeys: opts.onlineKeys, mcp: mcpScope() });
-        state.receipt = g.receipt;
-        state.verification = g.verification;
-        state.decidedAt = Date.now();
         if (!g.proceed && CO) {
             const rec = await keep(await continuityFailure(continuityClassOf(g), coOpts({ detail: (g.why || []).join("; ").slice(0, 300) })));
             if (rec.outcome === "proceed")
@@ -136,6 +133,18 @@ export function mcpPreflight(cc, opts = {}) {
         }
         return g;
     };
+    const decide = async function (host) {
+      const url = state.url;
+      state.receipt = null;
+      state.verification = null;
+      const result = await checkConnect(host);
+      if (state.url !== url) throw new McpPreflightRefused("connect", "the server URL changed during preflight");
+      // A refusal may include a valid-looking receipt. Only a completed gate can cache it.
+      state.receipt = result.receipt;
+      state.verification = result.verification;
+      state.decidedAt = Date.now();
+      return result;
+    };
     return {
         state,
         /** Before initialize. url: the server URL (a stdio/local server has none and is not decided; pass opts.local = "allow" | "refuse", default allow). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crawlcheck/sdk",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Typed client for the CrawlCheck API (generated from its OpenAPI document) and the zero-dependency offline verifier for evidence bundles and remediation receipts.",
   "type": "module",
   "main": "./dist/index.js",

package/test/mcp.test.js

@@ -106,3 +106,16 @@ test("1.4.0: a refused tool receipt stops tools/call; toolReceipts none skips it
   await c2.connect(T("https://good.example/mcp")); await c2.callTool({ name: "delete_repo" });
   assert.equal(k2.calls.filter((x) => x.tool).length, 0);
 });
+
+test("a denied refresh cannot authorize a subsequent tool call", async () => {
+  const policies = { "good.example": "allow" };
+  const k = cc(policies);
+  const client = withPreflight(mcpClient(TOOLS), k, { toolReceipts: "none" });
+  await client.connect(T("https://good.example/mcp"));
+  client.preflight.state.receipt.expires_at = new Date(0).toISOString();
+  policies["good.example"] = "block";
+  await assert.rejects(() => client.callTool({ name: "search" }), McpPreflightRefused);
+  await assert.rejects(() => client.callTool({ name: "search" }), McpPreflightRefused);
+  assert.deepEqual(client.sent, ["initialize https://good.example/mcp"]);
+  assert.equal(k.calls.length, 3);
+});