ccs-mcp-server 1.2.1 → 1.2.3

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ccs-mcp-server",
-  "version": "1.2.1",
-  "description": "CCS Runtime Evidence MCP Server — verify AI agent tool calls, issue Ed25519-signed evidence receipts, audit MCP configs, and bind execution to declared intent (cross-model amount drift protection). For Claude Desktop, Cursor, Windsurf, and any MCP client.",
+  "version": "1.2.3",
+  "description": "CCS Runtime Evidence MCP Server \u2014 7-dimension runtime verification for AI agent tool calls. Ed25519 receipts, sub-ms OOP, zero deps. For Claude Desktop, Cursor, Windsurf.",
   "type": "commonjs",
   "bin": {
     "ccs-mcp-server": "src/index.js"
@@ -29,12 +29,12 @@
     "security",
     "developer-tools"
   ],
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "Elastic-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Correctover/ccs-mcp-server.git"
+    "url": "git+https://github.com/DSHCorrectover/ccs-mcp-server.git"
   },
-  "homepage": "https://correctover.com",
+  "homepage": "https://github.com/DSHCorrectover/ccs-mcp-server#readme",
   "engines": {
     "node": ">=18"
   },
@@ -46,5 +46,8 @@
     "name": "ccs-runtime-evidence",
     "displayName": "CCS Runtime Evidence",
     "description": "Verify AI agent tool calls and issue Ed25519-signed CCS evidence receipts. Blocks command injection, path traversal, SSRF, SQL injection; validates caller identity, schema, cost/latency budgets; produces cryptographically signed and independently verifiable evidence."
+  },
+  "bugs": {
+    "url": "https://github.com/DSHCorrectover/ccs-mcp-server/issues"
   }
 }

package/src/index.js

@@ -32,7 +32,7 @@ const receipts = require("./receipts");
 // CCS Verifier Core (pure stdlib Node.js)
 // ---------------------------------------------------------------------------
 
-const CCS_VERSION = "1.2.1";
+const CCS_VERSION = "1.2.2";
 
 const DEFAULT_POLICY = {
   mode: "block",
@@ -111,9 +111,12 @@ function deepMerge(base, override) {
   return result;
 }
 
-function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
-}
+// Use the receipt module's recursive canonical serializer. The previous
+// JSON.stringify(obj, Object.keys(obj).sort()) implementation dropped all
+// nested object fields because the top-level key array acts as a recursive
+// whitelist; that made content/evidence hashes omit dimensions and other
+// nested data. Fixed in 1.2.2.
+const canonical = receipts.canonical;
 
 function sha256(s) {
   return "sha256:" + crypto.createHash("sha256").update(s).digest("hex");

package/src/receipts.js

@@ -29,7 +29,24 @@ const ALG_INTERNAL = "ed25519";
 const SIGNATURE_FIELDS = ["signer_public_key", "signature_alg", "signature", "verified"];
 
 function canonical(obj) {
-  return JSON.stringify(obj, Object.keys(obj).sort());
+  // Recursive JCS-style deterministic JSON: sort object keys at EVERY nesting
+  // level, preserve array order. NOTE: a previous implementation used
+  // JSON.stringify(obj, Object.keys(obj).sort()) which applies the top-level
+  // key list as a recursive whitelist and silently drops all nested fields
+  // from the serialized output — meaning signatures/hashes did not cover
+  // dimensions, semantic_analysis, etc. That was a security bug fixed in
+  // 1.2.2. Receipts issued by <=1.2.1 do not cover nested fields and must be
+  // re-issued.
+  if (Array.isArray(obj)) {
+    return "[" + obj.map(canonical).join(",") + "]";
+  }
+  if (obj !== null && typeof obj === "object") {
+    const keys = Object.keys(obj).sort();
+    return "{" + keys
+      .map((k) => JSON.stringify(k) + ":" + canonical(obj[k]))
+      .join(",") + "}";
+  }
+  return JSON.stringify(obj);
 }
 
 function defaultKeyDir() {