@pactosigna/mcp-server 0.1.16 → 0.1.18

package/dist/index.js

@@ -22595,7 +22595,11 @@ var RiskGapCodeSchema = external_exports.enum([
   "unacceptable_no_benefit",
   "preliminary_not_analyzed",
   "missing_body_rationale",
-  "orphaned_body_section"
+  "orphaned_body_section",
+  "architecture_no_risk_analysis",
+  "security_hazard_no_asset_ref",
+  "high_cia_no_security_hazard",
+  "hazard_no_software_item"
 ]);
 var RiskGapSeveritySchema = external_exports.enum(["error", "warning"]);
 var MitigationSchema = external_exports.object({
@@ -22665,7 +22669,9 @@ var HazardSoftwareFrontmatterSchema = external_exports.object({
   leads_to: external_exports.array(external_exports.string()).optional(),
   hazard_category: external_exports.string().optional(),
   detection_score: external_exports.number().int().min(1).max(5).optional(),
-  detection_method: external_exports.string().optional()
+  detection_method: external_exports.string().optional(),
+  /** Reference to the HLD/SDD software item this hazard applies to (IEC 62304 §7.1) */
+  software_item: external_exports.string().min(1).optional()
 });
 var HazardSecurityFrontmatterSchema = external_exports.object({
   type: external_exports.literal("haz_soe_security"),
@@ -22677,7 +22683,9 @@ var HazardSecurityFrontmatterSchema = external_exports.object({
   approvers: external_exports.array(external_exports.string()).optional(),
   preliminary: external_exports.boolean().default(false),
   leads_to: external_exports.array(external_exports.string()).optional(),
-  hazard_category: external_exports.string().optional()
+  hazard_category: external_exports.string().optional(),
+  /** Reference to the HLD/SDD software item this security hazard applies to (IEC 62304 §7.1, IEC 81001-5-1) */
+  software_item: external_exports.string().min(1).optional()
 });
 var HazardFrontmatterSchema = external_exports.discriminatedUnion("type", [
   HazardSoftwareFrontmatterSchema,
@@ -22819,6 +22827,22 @@ var SoftwareTestPlanFrontmatterSchema = external_exports.object({
   approvers: external_exports.array(external_exports.string()).optional()
 });
 var SoftwareItemTypeSchema = external_exports.enum(["system", "subsystem", "component", "unit"]);
+var AssetTypeSchema = external_exports.enum([
+  "data_store",
+  "api_endpoint",
+  "background_worker",
+  "auth_provider",
+  "external_service",
+  "user_interface",
+  "message_queue",
+  "network_boundary"
+]);
+var CiaImpactLevelSchema = external_exports.enum(["low", "medium", "high"]);
+var CiaImpactSchema = external_exports.object({
+  confidentiality: CiaImpactLevelSchema.optional(),
+  integrity: CiaImpactLevelSchema.optional(),
+  availability: CiaImpactLevelSchema.optional()
+});
 var SegregationSchema = external_exports.object({
   mechanism: external_exports.string().min(1),
   rationale: external_exports.string().min(1)
@@ -22841,7 +22865,11 @@ var ArchitectureFrontmatterSchema = external_exports.object({
   /** Approver list — required for all regulated document types */
   approvers: external_exports.array(external_exports.string()).min(1),
   /** SRS requirement IDs this architecture item implements (IEC 62304 §5.3.1) */
-  implements: external_exports.array(external_exports.string().min(1)).optional()
+  implements: external_exports.array(external_exports.string().min(1)).optional(),
+  /** IEC 81001-5-1 asset classification for this software item (optional, enables security gap detection) */
+  asset_types: external_exports.array(AssetTypeSchema).optional(),
+  /** CIA impact assessment — enables automated detection of high-value assets missing security analysis */
+  cia_impact: CiaImpactSchema.optional()
 });
 var DetailedDesignFrontmatterSchema = external_exports.object({
   id: external_exports.string().min(1),
@@ -22861,7 +22889,11 @@ var DetailedDesignFrontmatterSchema = external_exports.object({
   /** Approver list — required for all regulated document types */
   approvers: external_exports.array(external_exports.string()).min(1),
   /** SRS requirement IDs this design item implements (IEC 62304 §5.4.2) */
-  implements: external_exports.array(external_exports.string().min(1)).optional()
+  implements: external_exports.array(external_exports.string().min(1)).optional(),
+  /** IEC 81001-5-1 asset classification for this software item (optional, enables security gap detection) */
+  asset_types: external_exports.array(AssetTypeSchema).optional(),
+  /** CIA impact assessment — enables automated detection of high-value assets missing security analysis */
+  cia_impact: CiaImpactSchema.optional()
 });
 var AnomalyCategorySchema = external_exports.enum([
   "bug",
@@ -25902,7 +25934,7 @@ var client = new PactoSignaApiClient({
   apiKey: PACTOSIGNA_API_KEY
 });
 var server = new Server(
-  { name: "pactosigna", version: "0.1.16" },
+  { name: "pactosigna", version: "0.1.18" },
   { capabilities: { tools: {} } }
 );
 server.setRequestHandler(ListToolsRequestSchema, async () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pactosigna/mcp-server",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "type": "module",
   "description": "MCP server for PactoSigna QMS — connects Claude Desktop, Cursor, and other AI tools to your quality management system",
   "bin": {