correctover-scan 1.3.0 → 1.4.0

package/README.md

@@ -82,10 +82,31 @@ Try the online version: [correctover.com/scan](https://correctover.com/scan/)
 - **OWASP AISVS 1.0** — AI System Vulnerability Severity
 - **GB/T《智能体应用安全基本要求》** — Chinese National Mandatory Standard
 
+## Free Tier
+
+50 scans/day — no credit card required.
+
+Unlock unlimited: [correctover.com/checkout](https://correctover.com/checkout)
+
+```bash
+export CORRECTOVER_LICENSE_KEY=your-key-here
+```
+
+## Related Correctover Tools
+
+| Tool | Install | Description |
+|------|---------|-------------|
+| **Security Scanner** | `npx correctover-scan` | MCP config security audit (14 checks) |
+| **Self-Healing Test** | `pip install correctover-test` | Agent self-healing test suite |
+| **Vulnerability Scan** | `pip install correctover-security-audit` | 215 fault type scanner |
+| **Compliance Check** | `pip install correctover-compliance-check` | OAuth 2.1 + CCS v1.0 |
+| **Runtime Guard** | `pip install correctover-runtime-guard` | 22µs RCE/SSRF interception |
+| **MCP Server** | `npm install correctover-mcp-server` | 6-dimension validation |
+
 ## Links
 
 - [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
-- [CCS Standard](https://correctover.com/ccs) — Conformance Specification
+- [CCS Standard](https://correctover.com/ccs) — Conformance Specification (DOI: 10.5281/zenodo.21234580)
 - [Web Scanner](https://correctover.com/scan/) — Online version
 - [GitHub](https://github.com/Correctover) — Source code
 

package/core/license.js

@@ -1,6 +1,6 @@
 /**
  * License validator for correctover-scan NPM.
- * Mirrors the Python LicenseValidator: 50 free scans/day, CORRECTOVER_LICENSE_KEY unlocks.
+ * Mirrors the Python LicenseValidator: 30 free checks/month (no daily reset), CORRECTOVER_LICENSE_KEY unlocks.
  * Supports CV-TRL/CV-PRO (FC) and COV- (Cloud) key formats.
  */
 
@@ -9,7 +9,7 @@ const path = require('path');
 const crypto = require('crypto');
 const os = require('os');
 
-const FREE_LIMIT_PER_DAY = 50;
+const FREE_LIMIT_PER_MONTH = 30;
 const STATE_FILE = path.join(os.homedir(), '.correctover', 'license.json');
 
 function loadState() {
@@ -28,14 +28,18 @@ function saveState(state) {
   } catch (e) {}
 }
 
+function currentMonth() {
+  return new Date().toISOString().slice(0, 7); // YYYY-MM
+}
+
 function getProductState(state, product) {
-  const today = new Date().toISOString().slice(0, 10);
+  const month = currentMonth();
   if (!state.products[product]) {
-    state.products[product] = { calls_today: 0, date: today, total_calls: 0 };
+    state.products[product] = { checks_used: 0, month: month, total_checks: 0 };
   }
-  if (state.products[product].date !== today) {
-    state.products[product].calls_today = 0;
-    state.products[product].date = today;
+  if (state.products[product].month !== month) {
+    state.products[product].checks_used = 0;
+    state.products[product].month = month;
   }
   return state.products[product];
 }
@@ -80,49 +84,59 @@ function checkLicense(product) {
     return {
       authorized: true,
       tier: 'pro',
-      calls_remaining: Infinity,
-      calls_today: ps.calls_today,
+      checks_remaining: Infinity,
+      checks_used: ps.checks_used,
       limit: Infinity,
     };
   }
 
-  const remaining = Math.max(0, FREE_LIMIT_PER_DAY - ps.calls_today);
+  const remaining = Math.max(0, FREE_LIMIT_PER_MONTH - ps.checks_used);
   return {
     authorized: remaining > 0,
     tier: 'free',
-    calls_remaining: remaining,
-    calls_today: ps.calls_today,
-    limit: FREE_LIMIT_PER_DAY,
+    checks_remaining: remaining,
+    checks_used: ps.checks_used,
+    limit: FREE_LIMIT_PER_MONTH,
   };
 }
 
-function recordCall(product) {
+function recordCall(product, count = 1) {
   const state = loadState();
   const status = checkLicense(product);
   if (!status.authorized) return status;
 
   const ps = getProductState(state, product);
-  ps.calls_today += 1;
-  ps.total_calls = (ps.total_calls || 0) + 1;
+  ps.checks_used += count;
+  ps.total_checks = (ps.total_checks || 0) + count;
   saveState(state);
 
-  status.calls_remaining = Math.max(0, status.limit - ps.calls_today);
-  status.calls_today = ps.calls_today;
+  status.checks_remaining = Math.max(0, FREE_LIMIT_PER_MONTH - ps.checks_used);
+  status.checks_used = ps.checks_used;
   return status;
 }
 
-function getUpgradeMessage(status) {
+function canRun(product, count) {
+  const status = checkLicense(product);
+  if (status.tier === 'pro') return true;
+  return status.checks_remaining >= count;
+}
+
+function getUpgradeMessage(status, context) {
   if (status.tier !== 'free') return '';
-  if (status.calls_remaining <= 0) {
-    return `\n🚫 Free tier limit reached (${FREE_LIMIT_PER_DAY} scans/day).\n   Upgrade: https://correctover.com/checkout\n   Or: export CORRECTOVER_LICENSE_KEY=<your-key>\n`;
+  if (status.checks_remaining <= 0) {
+    return `\n🚫 Free tier limit reached (${FREE_LIMIT_PER_MONTH} checks/month).\n   Upgrade to Pro: https://correctover.com/checkout\n   Or: export CORRECTOVER_LICENSE_KEY=<your-key>\n`;
+  }
+  if (context === 'results') {
+    return `\n${'━'.repeat(50)}\n🔒 ${status.checks_remaining} checks remaining this month.\n   Upgrade to Pro for:\n   • Full risk report (all findings)\n   • Fix recommendations + auto-heal\n   • HTML audit reports\n${'━'.repeat(50)}\n   → https://correctover.com/checkout\n${'━'.repeat(50)}\n`;
   }
-  return `\n📊 Free tier: ${status.calls_remaining} scans remaining today.\n   Upgrade: https://correctover.com/checkout\n`;
+  return `\n📊 Free tier: ${status.checks_remaining} checks remaining this month.\n   Upgrade: https://correctover.com/checkout\n`;
 }
 
 module.exports = {
-  FREE_LIMIT_PER_DAY,
+  FREE_LIMIT_PER_MONTH,
   checkLicense,
   recordCall,
+  canRun,
   getUpgradeMessage,
   verifyLicenseKey,
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "correctover-scan",
-  "version": "1.3.0",
-  "description": "CCS Security Scanner for MCP \u2014 scan Agent configs for RCE, SSRF, credential hijacking. 16 security patterns mapped to OWASP AISVS 1.0. Free 50 scans/day.",
+  "version": "1.4.0",
+  "description": "MCP security scanner — 1 command, 14 OWASP AISVS 1.0 checks. Detect RCE, SSRF, credential exposure. Free: 30 checks/month.",
   "main": "index.js",
   "bin": {
     "correctover-scan": "./index.js"
@@ -24,12 +24,7 @@
     "cursor",
     "model-context-protocol",
     "vulnerability",
-    "audit",
-    "runtime-security",
-    "rce-detection",
-    "ssrf-detection",
-    "credential-hijacking",
-    "guardrail"
+    "audit"
   ],
   "author": "Correctover",
   "license": "MIT",
@@ -50,4 +45,4 @@
   "engines": {
     "node": ">=16.0.0"
   }
-}
+}