@peac/mcp-server 0.10.13 → 0.11.3

package/dist/index.mjs

@@ -1,4 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { ERRORS } from '@peac/kernel';
 import { verifyLocal, issue, IssueError } from '@peac/protocol';
 import { base64urlDecode, decode, sha256Hex, sign, validateKeypair, derivePublicKey, base64urlEncode } from '@peac/crypto';
 import { readFile, mkdir, rename, rm, mkdtemp, writeFile, stat, lstat } from 'fs/promises';
@@ -12,7 +13,7 @@ import { z } from 'zod';
 
 // src/infra/constants.ts
 var SERVER_NAME = "peac-mcp-server";
-var SERVER_VERSION = "0.10.12";
+var SERVER_VERSION = "0.11.2";
 var MCP_PROTOCOL_VERSION = "2025-11-25";
 var DEFAULT_MAX_JWS_BYTES = 16384;
 var DEFAULT_MAX_RESPONSE_BYTES = 65536;
@@ -726,10 +727,40 @@ async function handleIssue(params) {
     };
   }
 }
+var WINDOWS_RESERVED_NAMES = /* @__PURE__ */ new Set([
+  "con",
+  "prn",
+  "aux",
+  "nul",
+  "com1",
+  "com2",
+  "com3",
+  "com4",
+  "com5",
+  "com6",
+  "com7",
+  "com8",
+  "com9",
+  "lpt1",
+  "lpt2",
+  "lpt3",
+  "lpt4",
+  "lpt5",
+  "lpt6",
+  "lpt7",
+  "lpt8",
+  "lpt9"
+]);
 function assertRelativePath(p) {
   if (!p || p.trim().length === 0) {
     throw new PathTraversalError("Path must not be empty");
   }
+  if (p.includes("\0")) {
+    throw new PathTraversalError("Null bytes are not allowed in paths");
+  }
+  if (p.includes(":")) {
+    throw new PathTraversalError("Colons are not allowed in paths (drive letters, NTFS ADS)");
+  }
   if (nodePath.isAbsolute(p)) {
     throw new PathTraversalError("Absolute paths are not allowed");
   }
@@ -746,6 +777,14 @@ function assertRelativePath(p) {
   if (p.startsWith(".")) {
     throw new PathTraversalError("Hidden paths (starting with .) are not allowed");
   }
+  if (p.endsWith(".") || p.endsWith(" ")) {
+    throw new PathTraversalError("Trailing dots and spaces are not allowed");
+  }
+  const dotIndex = p.indexOf(".");
+  const baseName = (dotIndex >= 0 ? p.slice(0, dotIndex) : p).toLowerCase();
+  if (WINDOWS_RESERVED_NAMES.has(baseName)) {
+    throw new PathTraversalError(`Windows reserved device name: ${baseName.toUpperCase()}`);
+  }
 }
 function resolveOutputPath(basePath, relativePath) {
   assertRelativePath(relativePath);
@@ -1115,7 +1154,7 @@ var IssueOutputSchema = z.object({
 });
 var BundleInputSchema = z.object({
   receipts: z.array(z.string().max(16384)).min(1).max(256).describe("Receipt JWS strings to bundle (1-256)"),
-  metadata: z.record(z.unknown()).optional().describe("Optional metadata to include in the manifest"),
+  metadata: z.record(z.string(), z.unknown()).optional().describe("Optional metadata to include in the manifest"),
   output_path: z.string().max(255).optional().describe("Output directory name (single segment within --bundle-dir)")
 });
 var MetaSchema5 = z.object({
@@ -1171,9 +1210,17 @@ var BUNDLE_TOOL_ANNOTATIONS = {
 };
 var MAX_INPUT_DEPTH = 10;
 function errorCallToolResult(meta, code, message) {
+  const errorDef = ERRORS[code];
   return {
     content: [{ type: "text", text: message }],
-    structuredContent: { _meta: meta, ok: false, code, message },
+    structuredContent: {
+      _meta: meta,
+      ok: false,
+      code,
+      message,
+      retryable: errorDef?.retryable ?? false,
+      next_action: errorDef?.next_action ?? "none"
+    },
     isError: true
   };
 }
@@ -1277,7 +1324,7 @@ function createPeacMcpServer(options) {
     "peac_verify",
     {
       title: "Verify PEAC Receipt",
-      description: "Verify a PEAC receipt JWS signature and validate claims. Returns structured check results.",
+      description: "Verify a PEAC receipt: check Ed25519 signature, validate claims, and return structured check results. Read-only, no side effects.",
       inputSchema: VerifyInputSchema,
       outputSchema: VerifyOutputSchema,
       annotations: PURE_TOOL_ANNOTATIONS
@@ -1293,7 +1340,7 @@ function createPeacMcpServer(options) {
     "peac_inspect",
     {
       title: "Inspect PEAC Receipt",
-      description: "Decode and inspect a PEAC receipt without verifying the signature. Shows header, payload metadata, and optionally full claims.",
+      description: "Inspect a PEAC receipt without verifying the signature. Returns decoded header, payload metadata, and timestamps. Read-only.",
       inputSchema: InspectInputSchema,
       outputSchema: InspectOutputSchema,
       annotations: PURE_TOOL_ANNOTATIONS
@@ -1309,7 +1356,7 @@ function createPeacMcpServer(options) {
     "peac_decode",
     {
       title: "Decode PEAC Receipt",
-      description: "Raw decode of a PEAC receipt JWS. Returns header and payload without signature verification.",
+      description: "Raw-decode a PEAC receipt JWS into header and payload objects. No signature check. Use peac_verify for trusted results.",
       inputSchema: DecodeInputSchema,
       outputSchema: DecodeOutputSchema,
       annotations: PURE_TOOL_ANNOTATIONS
@@ -1326,7 +1373,7 @@ function createPeacMcpServer(options) {
       "peac_issue",
       {
         title: "Issue PEAC Receipt",
-        description: "Sign and return a PEAC receipt JWS. Requires server to be configured with --issuer-key and --issuer-id.",
+        description: "Sign and return a new PEAC receipt JWS. Requires server configured with an Ed25519 issuer key (--issuer-key and --issuer-id).",
         inputSchema: IssueInputSchema,
         outputSchema: IssueOutputSchema,
         annotations: ISSUE_TOOL_ANNOTATIONS
@@ -1343,7 +1390,7 @@ function createPeacMcpServer(options) {
         "peac_create_bundle",
         {
           title: "Create Evidence Bundle",
-          description: "Create a signed evidence bundle directory from receipt JWS strings. Requires --issuer-key, --issuer-id, and --bundle-dir.",
+          description: "Create a signed evidence bundle directory from one or more receipt JWS strings. Writes files to disk. Requires --issuer-key, --issuer-id, and --bundle-dir.",
           inputSchema: BundleInputSchema,
           outputSchema: BundleOutputSchema,
           annotations: BUNDLE_TOOL_ANNOTATIONS
@@ -1384,9 +1431,9 @@ var JwksConfigSchema = z.object({
 var PolicySchema = z.object({
   version: z.literal("1"),
   allow_network: z.boolean().default(false),
-  redaction: RedactionSchema.default({}),
-  tools: z.record(z.string(), ToolPolicySchema).default({}),
-  limits: LimitsSchema.default({}),
+  redaction: RedactionSchema.prefault({}),
+  tools: z.record(z.string(), ToolPolicySchema).prefault({}),
+  limits: LimitsSchema.prefault({}),
   jwks: JwksConfigSchema.optional()
 });
 var DEFAULT_POLICY = {