ccs-mcp-server 1.2.0 → 1.2.2

package/LICENSE

@@ -0,0 +1,82 @@
+Elastic License v2
+
+Copyright (c) 2026 Correctover. All rights reserved.
+
+## Elastic License
+
+### Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+### Copyright License
+
+The licensor grants you a free of charge, non-exclusive, worldwide,
+non-sublicensable, non-transferable, royalty-free license under its
+copyright and database rights to: use, copy, distribute, make
+available, and prepare derivative works of, the software; and
+permit persons to whom the software is furnished to do the same;
+in each case to provide services to your own internal users and to
+third parties; all provided, however, that you and any such persons
+do not (and have no right to):
+1. provide the software as a managed service to third parties;
+   or
+2. circumvent the capacity or functionality limits of any
+   commercial/enterprise features in the software, or unlock any
+   functionality locked by a license key; or
+3. remove or hide any software source code, functionality,
+   license terms, or other technical or legal restrictions
+   (including any copyright, trademark, or other proprietary
+   rights notices).
+
+If use of the software is under a trial license or for evaluation
+purposes, you may use the software only for evaluation and
+non-production uses during the trial period.
+
+### Patent License
+
+The licensor grants you a free of charge, non-exclusive,
+non-sublicensable, non-transferable, royalty-free license under
+its patent claims that are embodied in the software, to make,
+have made, use, import, and otherwise transfer the software,
+provided that you do not (and have no right to) provide the
+software as a managed service to third parties. This license
+terminates automatically when you commence patent action
+concerning the software.
+
+### Trademark License
+
+No permission is granted to use the trade names, trademarks,
+service marks, or product names of the licensor or its contributors
+except as required for reasonable and customary use in describing
+and as necessary to comply with the notice and attribution
+requirements above.
+
+### No Other Rights
+
+The terms and conditions of this license do not grant any other
+permission to the software or any other intellectual property.
+
+### No Warranty
+
+The software is provided "as is" without warranty, to the maximum
+extent permitted by law. The licensor disclaims and has no liability
+of any kind for any and all warranties, conditions, and other terms
+that would otherwise exist, including: merchantability, satisfactory
+quality, fitness for a particular purpose, title, non-infringement,
+or any warranties that the software is error-free or that any defects
+will be corrected. The licensor disclaims and has no liability for
+loss or damage to any data or information stored or processed
+through the software. Nothing in this license applies to any
+software that is not the software.
+
+### Limitation of Liability
+
+To the maximum extent permitted by law, in no event shall the
+licensor be liable for any direct, indirect, incidental, special,
+punitive, or consequential damages, including damages for loss of
+profits, goodwill, use, data, or other intangible losses, whether
+based on warranty, contract, tort, or any other legal theory,
+regardless of whether the licensor has been advised of the
+possibility of such damages. If any court refuses to grant the
+foregoing limitations, then liability shall be limited to the
+greatest extent permitted by law.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccs-mcp-server",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "CCS Runtime Evidence MCP Server — verify AI agent tool calls, issue Ed25519-signed evidence receipts, audit MCP configs, and bind execution to declared intent (cross-model amount drift protection). For Claude Desktop, Cursor, Windsurf, and any MCP client.",
   "type": "commonjs",
   "bin": {

package/src/index.js

@@ -32,7 +32,7 @@ const receipts = require("./receipts");
 // CCS Verifier Core (pure stdlib Node.js)
 // ---------------------------------------------------------------------------
 
-const CCS_VERSION = "1.2.0";
+const CCS_VERSION = "1.2.2";
 
 const DEFAULT_POLICY = {
   mode: "block",
@@ -111,9 +111,12 @@ function deepMerge(base, override) {
   return result;
 }
 
-function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
-}
+// Use the receipt module's recursive canonical serializer. The previous
+// JSON.stringify(obj, Object.keys(obj).sort()) implementation dropped all
+// nested object fields because the top-level key array acts as a recursive
+// whitelist; that made content/evidence hashes omit dimensions and other
+// nested data. Fixed in 1.2.2.
+const canonical = receipts.canonical;
 
 function sha256(s) {
   return "sha256:" + crypto.createHash("sha256").update(s).digest("hex");

package/src/receipts.js

@@ -29,7 +29,24 @@ const ALG_INTERNAL = "ed25519";
 const SIGNATURE_FIELDS = ["signer_public_key", "signature_alg", "signature", "verified"];
 
 function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
+  // Recursive JCS-style deterministic JSON: sort object keys at EVERY nesting
+  // level, preserve array order. NOTE: a previous implementation used
+  // JSON.stringify(obj, Object.keys(obj).sort()) which applies the top-level
+  // key list as a recursive whitelist and silently drops all nested fields
+  // from the serialized output — meaning signatures/hashes did not cover
+  // dimensions, semantic_analysis, etc. That was a security bug fixed in
+  // 1.2.2. Receipts issued by <=1.2.1 do not cover nested fields and must be
+  // re-issued.
+  if (Array.isArray(obj)) {
+    return "[" + obj.map(canonical).join(",") + "]";
+  }
+  if (obj !== null && typeof obj === "object") {
+    const keys = Object.keys(obj).sort();
+    return "{" + keys
+      .map((k) => JSON.stringify(k) + ":" + canonical(obj[k]))
+      .join(",") + "}";
+  }
+  return JSON.stringify(obj);
 }
 
 function defaultKeyDir() {