@crawlcheck/sdk 1.7.0 → 1.8.0

package/test/guard-acceptance.test.js

@@ -16,6 +16,7 @@ function fakeFetch(c, log) {
       const p = new URL(url).pathname, cc = c.crawlcheck;
       if (cc.unreachable) throw new TypeError("fetch failed");
       if (p === "/.well-known/http-message-signatures-directory") return new Response(JSON.stringify(suite.directory), { headers: { "content-type": "application/json" } });
+      if (p === "/.well-known/security-key-rotation.json") { const rot = cc.rotation || suite.rotation; return rot ? new Response(JSON.stringify(rot), { headers: { "content-type": "application/json" } }) : new Response("{}", { status: 404 }); }   // conf2
       if (p === "/api/v1/preflight") {
         const b = JSON.parse(init.body || "{}"); log.asked.push(b.domain);
         if (cc.by_op) { const o = b.operation || {}; const r = cc.by_op[o.method + " " + o.url]; return r ? new Response(JSON.stringify(r), { headers: { "content-type": "application/json" } }) : new Response("{\"error\":\"none\"}", { status: 404 }); }

package/test/key-policy.test.js

@@ -0,0 +1,20 @@
+// The signing-policy suite (https://crawlcheck.io/keys#policy) against this SDK. Same cases as the Python package and
+// crawlcheck-verify.mjs (spec/key-policy/run.mjs runs all three). CC_SDK=<path or package name> runs another build.
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync, existsSync } from "node:fs";
+const here = new URL(".", import.meta.url);
+const suite = JSON.parse(readFileSync([new URL("../../spec/key-policy/cases.json", here), new URL("./fixtures/key-policy.json", here)].find((u) => existsSync(u)), "utf8"));
+const S = await import(process.env.CC_SDK || "../dist/index.js");
+
+test("KEY_POLICY is the published policy", () => {
+  for (const k of ["object_purpose", "chains", "starts", "bound", "purpose_aliases"]) assert.deepEqual(S.KEY_POLICY[k], suite.policy[k], k);
+});
+for (const c of suite.cases) {
+  test(c.id + ": " + c.title, async () => {
+    const kp = await S.keyPolicyFrom(suite.directory, c.keys === "directory" ? null : suite.rotation);
+    const r = S.applyKeyPolicy(await S.verifyDocument(c.doc), c.doc, kp);
+    const why = (r.checks.find((x) => x.id === "key_purpose") || {}).why;
+    for (const [k, v] of Object.entries(c.expect)) assert.equal(r[k], v, k + ": " + why);
+  });
+}

package/test/mcp.test.js

@@ -5,7 +5,7 @@ import { withPreflight, mcpPreflight, McpPreflightRefused, transportUrl, lockFro
 function cc(table) {
   const calls = [];
   return { calls, async guard(host, action, opts) {
-    calls.push({ host, action, template: opts.template, tool: opts.operation && opts.operation.tool, op: opts.operation });
+    calls.push({ host, action, template: opts.template, tool: opts.operation && opts.operation.tool, op: opts.operation, mcp: opts.mcp });
     const d = table[host] || "unsupported";
     const receipt = { kind: "crawlcheck-decision", domain: host, action, decision: d, expires_at: new Date(Date.now() + 3600e3).toISOString(), steps: [{ why: "table" }], sha256: "x", signature: { kid: "k" } };
     let proceed = d === "allow" || (d === "warn" && !!opts.allowWarn);
@@ -48,6 +48,13 @@ test("require_confirmation: refused without a confirm, connects when a person sa
   let seen = null; const c = withPreflight(mcpClient(TOOLS), k, { confirm: async (r) => { seen = r; return true; } });
   await c.connect(T("https://ask.example/mcp")); assert.equal(seen.decision, "require_confirmation"); assert.equal(c.sent.length, 1);
 });
+test("tscope1: the connect decision names the server and the approved tools_sha256", async () => {
+  const lock = await lockFromTools([TOOLS[0]]), k = cc({ "good.example": "allow" });
+  await withPreflight(mcpClient([TOOLS[0]]), k, { lock }).connect(T("https://good.example/mcp"));
+  assert.deepEqual(k.calls[0].mcp, { url: "https://good.example/mcp", tools_sha256: lock.tools_sha256 });
+  const k2 = cc({ "good.example": "allow" }); await withPreflight(mcpClient(TOOLS), k2).connect(T("https://good.example/mcp"));
+  assert.deepEqual(k2.calls[0].mcp, { url: "https://good.example/mcp" });
+});
 test("lockfile: changed tools close the client again; a tool outside the lock is refused", async () => {
   const lock = await lockFromTools([TOOLS[0]]);
   const c = withPreflight(mcpClient(TOOLS), cc({ "good.example": "allow" }), { lock });