@crawlcheck/sdk 1.2.0 → 1.4.0

package/test/mcp.test.js

@@ -5,7 +5,7 @@ import { withPreflight, mcpPreflight, McpPreflightRefused, transportUrl, lockFro
 function cc(table) {
   const calls = [];
   return { calls, async guard(host, action, opts) {
-    calls.push({ host, action, template: opts.template });
+    calls.push({ host, action, template: opts.template, tool: opts.operation && opts.operation.tool, op: opts.operation });
     const d = table[host] || "unsupported";
     const receipt = { kind: "crawlcheck-decision", domain: host, action, decision: d, expires_at: new Date(Date.now() + 3600e3).toISOString(), steps: [{ why: "table" }], sha256: "x", signature: { kid: "k" } };
     let proceed = d === "allow" || (d === "warn" && !!opts.allowWarn);
@@ -79,3 +79,23 @@ test("bare hooks work without a client object", async () => {
   const r = await h.beforeConnect("https://good.example/mcp"); assert.equal(r.host, "good.example");
   assert.equal((await h.beforeToolCall("search")).receipt.decision, "allow");
 });
+
+test("1.4.0: a write tool call gets its own receipt, scoped to the tool's definition; a read-only one reuses connect", async () => {
+  const { lockToolHash } = await import("../dist/index.js");
+  const k = cc({ "good.example": "allow" }); const c = withPreflight(mcpClient(TOOLS), k);
+  await c.connect(T("https://good.example/mcp")); await c.callTool({ name: "search" }); await c.callTool({ name: "delete_repo" });
+  const per = k.calls.filter((x) => x.tool);
+  assert.deepEqual(per.map((x) => x.tool), ["delete_repo"]);
+  assert.equal(per[0].op.tool_schema_sha256, await lockToolHash(TOOLS[1]));
+});
+test("1.4.0: a refused tool receipt stops tools/call; toolReceipts none skips it", async () => {
+  const k = cc({ "good.example": "allow" }); const orig = k.guard;
+  k.guard = async (h, a, o) => o.operation ? { proceed: false, receipt: null, verification: null, why: ["the receipt is for another operation"] } : orig(h, a, o);
+  const cl = mcpClient(TOOLS); const c = withPreflight(cl, k);
+  await c.connect(T("https://good.example/mcp"));
+  await assert.rejects(() => c.callTool({ name: "delete_repo" }), (e) => e.stage === "tools/call" && /another operation/.test(e.why));
+  assert.ok(!cl.sent.includes("tools/call delete_repo"));
+  const k2 = cc({ "good.example": "allow" }); const c2 = withPreflight(mcpClient(TOOLS), k2, { toolReceipts: "none" });
+  await c2.connect(T("https://good.example/mcp")); await c2.callTool({ name: "delete_repo" });
+  assert.equal(k2.calls.filter((x) => x.tool).length, 0);
+});