ccs-mcp-server 1.2.1 → 1.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccs-mcp-server",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "CCS Runtime Evidence MCP Server — verify AI agent tool calls, issue Ed25519-signed evidence receipts, audit MCP configs, and bind execution to declared intent (cross-model amount drift protection). For Claude Desktop, Cursor, Windsurf, and any MCP client.",
   "type": "commonjs",
   "bin": {

package/src/index.js

@@ -32,7 +32,7 @@ const receipts = require("./receipts");
 // CCS Verifier Core (pure stdlib Node.js)
 // ---------------------------------------------------------------------------
 
-const CCS_VERSION = "1.2.1";
+const CCS_VERSION = "1.2.2";
 
 const DEFAULT_POLICY = {
   mode: "block",
@@ -111,9 +111,12 @@ function deepMerge(base, override) {
   return result;
 }
 
-function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
-}
+// Use the receipt module's recursive canonical serializer. The previous
+// JSON.stringify(obj, Object.keys(obj).sort()) implementation dropped all
+// nested object fields because the top-level key array acts as a recursive
+// whitelist; that made content/evidence hashes omit dimensions and other
+// nested data. Fixed in 1.2.2.
+const canonical = receipts.canonical;
 
 function sha256(s) {
   return "sha256:" + crypto.createHash("sha256").update(s).digest("hex");

package/src/receipts.js

@@ -29,7 +29,24 @@ const ALG_INTERNAL = "ed25519";
 const SIGNATURE_FIELDS = ["signer_public_key", "signature_alg", "signature", "verified"];
 
 function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
+  // Recursive JCS-style deterministic JSON: sort object keys at EVERY nesting
+  // level, preserve array order. NOTE: a previous implementation used
+  // JSON.stringify(obj, Object.keys(obj).sort()) which applies the top-level
+  // key list as a recursive whitelist and silently drops all nested fields
+  // from the serialized output — meaning signatures/hashes did not cover
+  // dimensions, semantic_analysis, etc. That was a security bug fixed in
+  // 1.2.2. Receipts issued by <=1.2.1 do not cover nested fields and must be
+  // re-issued.
+  if (Array.isArray(obj)) {
+    return "[" + obj.map(canonical).join(",") + "]";
+  }
+  if (obj !== null && typeof obj === "object") {
+    const keys = Object.keys(obj).sort();
+    return "{" + keys
+      .map((k) => JSON.stringify(k) + ":" + canonical(obj[k]))
+      .join(",") + "}";
+  }
+  return JSON.stringify(obj);
 }
 
 function defaultKeyDir() {