@massu/core 1.16.1 → 1.16.2

package/CHANGELOG.md

@@ -10,6 +10,33 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 > redistributed under the **Apache License 2.0**. Full license + NOTICE:
 > `packages/core/assets/embedder/MODEL-LICENSE`.
 
+## [1.16.2] - 2026-07-15
+
+### Security
+
+- **License-response signature verification is now STRICT by default (SEC-3 cutover).** The client
+  previously ACCEPTED unsigned or wrong-key `/validate-key` responses with a one-shot warning
+  (transition mode) unless the operator set `MASSU_REQUIRE_SIGNED_LICENSE=true`. As of `1.16.2`,
+  strict mode is the DEFAULT: an unsigned or invalid-signature response is rejected and the client
+  falls through to the grace-period cache or the free tier, closing the MITM / malicious-endpoint
+  tier-forgery window for good. This is safe because `1.16.1` shipped the rotated key as the bundled
+  PRIMARY pubkey and production signs every successful response with it (verified by a live
+  `valid:true` signature smoke). The only way back to warn-and-accept is an explicit
+  `MASSU_REQUIRE_SIGNED_LICENSE=false` — an emergency valve for a production signing outage.
+
+### Fixed
+
+- **Public-sync boundary correction (repo tooling; no npm-package change).** Completing the `1.16.1`
+  public sync surfaced that its sync tooling wrongly copied `.claude/agents/` and
+  `.claude/commands/_verification-laws.md` into the public git repo to satisfy an
+  internal-governance test's DOGFOOD assertion. That crosses the documented public/internal boundary:
+  the review/workflow agents reach users through the npm package (`@massu/core` `files:
+  ["agents/**/*"]`), not the public git repo, and the public-repo leak-guard allowlist intentionally
+  omits `.claude/agents/`. `1.16.2` reverts those copies and instead excludes
+  `verification-laws-shipped-and-wired.test.ts` from the mirror (the same pattern already used for
+  the other internal-only governance drift-guards), and genericizes two dev-script comments that
+  referenced internal incident paths so the public mirror carries no dangling internal references.
+
 ## [1.16.1] - 2026-07-14
 
 ### Security

package/dist/cli.js

@@ -16577,7 +16577,7 @@ function verifyLicenseResponse(payload) {
   );
 }
 function isLicenseSignatureRequired() {
-  return process.env.MASSU_REQUIRE_SIGNED_LICENSE === "true";
+  return process.env.MASSU_REQUIRE_SIGNED_LICENSE !== "false";
 }
 var init_license_response_verifier = __esm({
   "src/security/license-response-verifier.ts"() {

package/dist/hooks/session-end.js

@@ -4176,7 +4176,7 @@ function verifyLicenseResponse(payload) {
   );
 }
 function isLicenseSignatureRequired() {
-  return process.env.MASSU_REQUIRE_SIGNED_LICENSE === "true";
+  return process.env.MASSU_REQUIRE_SIGNED_LICENSE !== "false";
 }
 
 // src/license.ts

package/dist/hooks/session-start.js

@@ -12819,7 +12819,7 @@ function verifyLicenseResponse(payload) {
   );
 }
 function isLicenseSignatureRequired() {
-  return process.env.MASSU_REQUIRE_SIGNED_LICENSE === "true";
+  return process.env.MASSU_REQUIRE_SIGNED_LICENSE !== "false";
 }
 
 // src/license.ts

package/dist/hooks/user-prompt.js

@@ -3635,7 +3635,7 @@ function verifyLicenseResponse(payload) {
   );
 }
 function isLicenseSignatureRequired() {
-  return process.env.MASSU_REQUIRE_SIGNED_LICENSE === "true";
+  return process.env.MASSU_REQUIRE_SIGNED_LICENSE !== "false";
 }
 
 // src/license.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.16.1",
+  "version": "1.16.2",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",