mcp-proof 0.3.19 → 0.3.20

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.3.20
+
+- **Fix: `--inspect-call` in the default (human-readable) mode crashed** with
+  `Cannot read properties of undefined (reading 'toFixed')` (exit 65) for every
+  input; only `--json` worked. It now prints a verdict and reasons and keeps the
+  exit codes (0 allow, 1 warn, 2 block).
+- `--inspect-call` now accepts a plain `{"name": ..., "arguments": ...}` payload as well as
+  `{"tool": ...}` and JSON-RPC `{"params": {"name": ...}}`; previously `name` at the top
+  level gave an empty tool name.
+- Two regression tests added (22 public checks). Decisions and scores for `tools/list`
+  scans are unchanged. `vetokernel-client.js` still does not ship (see 0.3.19).
+
 ## 0.3.19
 
 Readiness hardening — closes the audit findings, keeps all decisions and

package/bin/mcp-proof.js

@@ -776,7 +776,18 @@ function renderMulti(output) {
   process.stdout.write(`  ${c.bold}Overall${c.reset} ${output.decision.toUpperCase()}\n\n`);
 }
 
+function renderInspectCall(r) {
+  const c = COLORS;
+  const color = r.decision === 'allow' ? c.green : r.decision === 'warn' ? c.yellow : c.red;
+  const lines = ['', `  ${c.bold}mcp-proof${c.reset}  ${c.dim}— inspect-call${r.tool ? ` ${r.tool}` : ''}, ${r.durationMs || 0}ms${c.reset}`, '',
+    `  Verdict      ${color}${c.bold}${String(r.decision).toUpperCase()}${c.reset}`, '', `  ${c.bold}Why${c.reset}`];
+  for (const reason of r.reasons) lines.push(`  - ${reason}`);
+  if (!r.reasons.length) lines.push('  - no runtime-payload patterns detected');
+  process.stdout.write(lines.join('\n') + '\n\n');
+}
+
 function renderHumanReadable(r, toolCount, label = '') {
+  if (r.mode === 'inspect-call') return renderInspectCall(r);
   const c = COLORS;
   const verdict = r.decision.toUpperCase();
   const verdictColor = r.decision === 'allow' ? c.green : r.decision === 'warn' ? c.yellow : c.red;

package/engine.js

@@ -756,7 +756,7 @@ function scanCall(toolName, args) {
 
 function evaluateCall(req) {
   const start = Date.now();
-  const toolName = req.tool || (req.params && req.params.name) || '';
+  const toolName = req.tool || req.name || (req.params && req.params.name) || '';
   const args = req.arguments || (req.params && req.params.arguments) || {};
   const scan = scanCall(toolName, args);
   const score = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-proof",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "description": "Auditable, privacy-preserving MCP (Model Context Protocol) server verifier with local Trust Cards and SARIF output — test servers before connecting them to an AI system.",
   "main": "engine.js",
   "bin": {
@@ -22,7 +22,7 @@
     "access": "public"
   },
   "scripts": {
-    "test": "node test.js",
+    "test": "node test.js && node test-canonical.js",
     "test:private": "node test-private.js",
     "test:all": "node test.js && node test-private.js",
     "campaign:validate": "node campaign/campaign-tools.js validate",

package/test.js

@@ -295,5 +295,14 @@ check(
   `decision=${benignSkillResult.decision} ${JSON.stringify(benignSkillResult.toolPoisoning)}`,
 );
 
+// --inspect-call in human-readable mode must render (it used to crash on a missing TrustScore) and keep the block/allow exit codes.
+for (const [label, call, wantStatus, wantText] of [
+  ['blocked call', { name: 'read_file', arguments: { path: '~/.ssh/id_rsa' } }, 2, 'BLOCK'],
+  ['clean call', { name: 'get_weather', arguments: { city: 'Paris' } }, 0, 'ALLOW'],
+]) {
+  const r = require('child_process').spawnSync(process.execPath, [require('path').join(__dirname, 'bin', 'mcp-proof.js'), '--inspect-call'], { input: JSON.stringify(call), encoding: 'utf8' });
+  check(r.status === wantStatus && r.stdout.includes(wantText) && r.stdout.includes(call.name), `--inspect-call human output: ${label}`, `status=${r.status} stderr=${(r.stderr || '').slice(0, 80)}`);
+}
+
 console.log(`\n${pass}/${pass + fail} public tests passed`);
 process.exit(fail === 0 ? 0 : 1);