crosscheck-mcp 0.1.14 → 0.2.0

package/dist/node-stdio.js

@@ -1096,6 +1096,59 @@ function roundTo(x, n) {
   return Number(x.toFixed(n));
 }
 
+// src/core/license.ts
+init_esm_shims();
+import crypto from "crypto";
+var EMBEDDED_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEA4zpZT92Hj6POb3orlxJVzsPJVp9+zIajq2Mcvex3fbk=
+-----END PUBLIC KEY-----`;
+function fromB64url(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  return Buffer.from(s.replace(/-/g, "+").replace(/_/g, "/") + pad, "base64");
+}
+function licenseEnforced() {
+  return String(true) === "true";
+}
+function verifyLicense(jwt) {
+  if (!jwt) return { ok: false, reason: "missing" };
+  const [body, sig] = jwt.split(".");
+  if (!body || !sig) return { ok: false, reason: "malformed" };
+  try {
+    const pub = crypto.createPublicKey(EMBEDDED_PUBLIC_KEY_PEM);
+    if (!crypto.verify(null, Buffer.from(body), pub, fromB64url(sig))) {
+      return { ok: false, reason: "bad_signature" };
+    }
+  } catch {
+    return { ok: false, reason: "verify_error" };
+  }
+  try {
+    const parsed = JSON.parse(fromB64url(body).toString("utf8"));
+    if (typeof parsed.exp !== "number" || Date.now() > parsed.exp) {
+      return { ok: false, reason: "expired" };
+    }
+  } catch {
+    return { ok: false, reason: "bad_json" };
+  }
+  return { ok: true };
+}
+function enforceLicenseOrExit() {
+  if (!licenseEnforced()) return;
+  const result = verifyLicense(process.env["CROSSCHECK_LICENSE_JWT"]);
+  if (!result.ok) {
+    process.stderr.write(
+      `crosscheck: no valid activation (license ${result.reason}).
+This engine is licensed and must be run through the crosscheck CLI on an
+active subscription. Install it with:
+
+    npx -y crosscheck-cli@latest install
+
+Details + pricing: https://www.crosscheckagent.com
+`
+    );
+    process.exit(1);
+  }
+}
+
 // src/providers/registry.ts
 init_esm_shims();
 
@@ -2071,7 +2124,7 @@ Reasoning upgrade (Fable 5):
 Spend visibility:
 - Every reasoning-tool result carries a "run_summary" whose pre-rendered "text" block already includes a "spend by model (this call)" breakdown. Show that block \u2014 do not bury the cost.
 - "run_summary" also carries "session_by_model" + "session_cost_usd" (per-model spend for the whole session). At the END of a multi-turn task, present the session spend per model plus the aggregate total, so the user knows what the task cost without scrolling back.
-- Fable 5's price is a provisional placeholder; rows from it are flagged "(est)"/estimated \u2014 say so when reporting those dollar figures.`;
+- Fable 5 is priced at $10 per million input tokens and $50 per million output tokens; the per-call and session spend already reflect this.`;
 }
 
 // src/tools/index.ts
@@ -12167,7 +12220,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.1.14" : "0.0.0-dev";
+  return true ? "0.2.0" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || path10.join(os.homedir() || os.tmpdir(), ".crosscheck");
@@ -13529,7 +13582,7 @@ function attachUpdateNotice(result, toolName, opts) {
 
 // src/core/telemetry.ts
 init_esm_shims();
-import crypto from "crypto";
+import crypto2 from "crypto";
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var BATCH_MAX = 100;
 var FLUSH_BATCH_AT = 25;
@@ -13577,7 +13630,7 @@ function canonicalEventBody(e) {
   ].join("|");
 }
 function signEvent(seatSigningKey, e) {
-  return crypto.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
+  return crypto2.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
 }
 var configResolved = false;
 var config = null;
@@ -13642,7 +13695,7 @@ function scheduleFlush() {
 }
 function enqueue(cfg, input) {
   const base = {
-    eventId: crypto.randomUUID(),
+    eventId: crypto2.randomUUID(),
     seatId: cfg.seatId,
     orgId: cfg.orgId,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -13714,7 +13767,7 @@ async function flush() {
 
 // src/server.ts
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.1.14" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.0" : "0.0.0-dev";
 function extractRunSummaryText(out) {
   if (out === null || typeof out !== "object" || Array.isArray(out)) return void 0;
   const rs = out["run_summary"];
@@ -14055,6 +14108,7 @@ function loadConfigFile(opts) {
 // src/entrypoints/node-stdio.ts
 var SHUTDOWN_TIMEOUT_MS = 2e3;
 async function main() {
+  enforceLicenseOrExit();
   const cfgDataDir = process.env["CROSSCHECK_DATA_DIR"] || path14.join(process.env["HOME"] ?? process.env["USERPROFILE"] ?? "", ".crosscheck");
   const configFile = loadConfigFile({
     startDir: process.cwd(),