Skip to content

chore(protect-mcp): pin protect-mcp@0.5.5 and @veritasacta/verify@0.3.0 #497

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wshobson merged 1 commit into from
Apr 18, 2026
Merged

chore(protect-mcp): pin protect-mcp@0.5.5 and @veritasacta/verify@0.3.0 #497

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions plugins/protect-mcp/hooks/hooks.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
"matcher": ".*",
"hook": {
"type": "command",
"command": "npx protect-mcp@latest evaluate --policy \"${PROTECT_MCP_POLICY:-./protect.cedar}\" --tool \"$TOOL_NAME\" --input \"$TOOL_INPUT\" --fail-on-missing-policy false"
"command": "npx protect-mcp@0.5.5 evaluate --policy \"${PROTECT_MCP_POLICY:-./protect.cedar}\" --tool \"$TOOL_NAME\" --input \"$TOOL_INPUT\" --fail-on-missing-policy false"
}
}
],
Expand All @@ -14,7 +14,7 @@
"matcher": ".*",
"hook": {
"type": "command",
"command": "npx protect-mcp@latest sign --tool \"$TOOL_NAME\" --input \"$TOOL_INPUT\" --output \"$TOOL_OUTPUT\" --receipts \"${PROTECT_MCP_RECEIPTS:-./receipts/}\" --key \"${PROTECT_MCP_KEY:-./protect-mcp.key}\""
"command": "npx protect-mcp@0.5.5 sign --tool \"$TOOL_NAME\" --input \"$TOOL_INPUT\" --output \"$TOOL_OUTPUT\" --receipts \"${PROTECT_MCP_RECEIPTS:-./receipts/}\" --key \"${PROTECT_MCP_KEY:-./protect-mcp.key}\""
}
}
]
Expand Down
18 changes: 9 additions & 9 deletions plugins/protect-mcp/test/run-tests.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/env bash
# run-tests.sh — exercise protect-mcp hooks against the fixtures in this directory.
#
# Requires: bash, node (>= 18), npx. Fetches protect-mcp and @veritasacta/verify
# Requires: bash, node (>= 18), npx. Fetches protect-mcp and @veritasacta/verify@0.3.0
# from the npm registry on first run, then caches them.
#
# Exit codes:
Expand Down Expand Up @@ -55,7 +55,7 @@ extract() { python3 -c "import json,sys; d=json.load(open(sys.argv[1])); print(d
echo ""
echo "=== Test 1: PreToolUse permit on Read ==="
INPUT=fixtures/pretool-allow-read.json
npx --yes protect-mcp@latest evaluate \
npx --yes protect-mcp@0.5.5 evaluate \
--policy fixtures/test-policy.cedar \
--tool "$(extract "$INPUT" tool_name)" \
--input "$(python3 -c 'import json,sys; print(json.dumps(json.load(open(sys.argv[1]))["tool_input"]))' "$INPUT")" \
Expand All @@ -66,7 +66,7 @@ check_exit $? 0 "Read is permitted by test-policy.cedar"
echo ""
echo "=== Test 2: PreToolUse permit on Bash git ==="
INPUT=fixtures/pretool-allow-bash-safe.json
npx --yes protect-mcp@latest evaluate \
npx --yes protect-mcp@0.5.5 evaluate \
--policy fixtures/test-policy.cedar \
--tool "$(extract "$INPUT" tool_name)" \
--input "$(python3 -c 'import json,sys; print(json.dumps(json.load(open(sys.argv[1]))["tool_input"]))' "$INPUT")" \
Expand All @@ -77,7 +77,7 @@ check_exit $? 0 "Bash 'git status' is permitted"
echo ""
echo "=== Test 3: PreToolUse forbid on Bash rm -rf ==="
INPUT=fixtures/pretool-deny-bash-destructive.json
npx --yes protect-mcp@latest evaluate \
npx --yes protect-mcp@0.5.5 evaluate \
--policy fixtures/test-policy.cedar \
--tool "$(extract "$INPUT" tool_name)" \
--input "$(python3 -c 'import json,sys; print(json.dumps(json.load(open(sys.argv[1]))["tool_input"]))' "$INPUT")" \
Expand All @@ -88,7 +88,7 @@ check_exit $? 2 "Bash 'rm -rf /' is denied with exit 2"
echo ""
echo "=== Test 4: PreToolUse forbid on Write ==="
INPUT=fixtures/pretool-deny-write.json
npx --yes protect-mcp@latest evaluate \
npx --yes protect-mcp@0.5.5 evaluate \
--policy fixtures/test-policy.cedar \
--tool "$(extract "$INPUT" tool_name)" \
--input "$(python3 -c 'import json,sys; print(json.dumps(json.load(open(sys.argv[1]))["tool_input"]))' "$INPUT")" \
Expand All @@ -99,7 +99,7 @@ check_exit $? 2 "Write is denied with exit 2"
echo ""
echo "=== Test 5: PostToolUse sign produces a receipt ==="
KEY="$WORKDIR/test.key"
npx --yes protect-mcp@latest keygen --out "$KEY" >/dev/null 2>&1 || \
npx --yes protect-mcp@0.5.5 keygen --out "$KEY" >/dev/null 2>&1 || \
echo "note: keygen subcommand not available; falling back to default key generation inside sign"

INPUT=fixtures/posttool-signing-input.json
Expand All @@ -110,7 +110,7 @@ TOOL_OUTPUT_JSON="$(python3 -c 'import json,sys; print(json.dumps(json.load(open
SIGN_ARGS=(--tool "$TOOL_NAME" --input "$TOOL_INPUT_JSON" --output "$TOOL_OUTPUT_JSON" --receipts "$RECEIPTS_DIR/")
[ -f "$KEY" ] && SIGN_ARGS+=(--key "$KEY")

npx --yes protect-mcp@latest sign "${SIGN_ARGS[@]}" >/dev/null 2>&1
npx --yes protect-mcp@0.5.5 sign "${SIGN_ARGS[@]}" >/dev/null 2>&1
SIGN_RC=$?
RECEIPT_FILE="$(ls "$RECEIPTS_DIR"/*.json 2>/dev/null | head -n1 || true)"

Expand Down Expand Up @@ -146,7 +146,7 @@ fi
echo ""
echo "=== Test 7: Offline verification with @veritasacta/verify ==="
if [ -n "$RECEIPT_FILE" ]; then
npx --yes @veritasacta/verify "$RECEIPT_FILE" >/dev/null 2>&1
npx --yes @veritasacta/verify@0.3.0 "$RECEIPT_FILE" >/dev/null 2>&1
check_exit $? 0 "Valid receipt verifies with exit 0"
else
fail "No receipt available to verify"
Expand All @@ -164,7 +164,7 @@ r = json.load(open(sys.argv[1]))
r["decision"] = "deny" if r.get("decision") == "allow" else "allow"
json.dump(r, open(sys.argv[2], "w"))
' "$RECEIPT_FILE" "$TAMPERED"
npx --yes @veritasacta/verify "$TAMPERED" >/dev/null 2>&1
npx --yes @veritasacta/verify@0.3.0 "$TAMPERED" >/dev/null 2>&1
check_exit $? 1 "Tampered receipt rejected with exit 1"
else
fail "No receipt available to tamper with"
Expand Down
Loading