@pactosigna/mcp-server 0.1.24 → 0.1.26

package/dist/index.js

@@ -23406,6 +23406,7 @@ var AuditActionSchema = external_exports.enum([
   "release.gate_override_removed",
   "release.gate_override_invalidated",
   "release.viewed",
+  "release.artifact_uploaded",
   // Signatures
   "signature.created",
   "signature.attempt_failed",
@@ -23522,6 +23523,8 @@ var AuditActionSchema = external_exports.enum([
   // Review Types
   "review_type.created",
   "review_type.updated",
+  // Components (SOUP/SBOM enrichment)
+  "component.enriched",
   // Audit
   "audit_log.exported"
 ]);
@@ -23554,7 +23557,8 @@ var ResourceTypeSchema = external_exports.enum([
   "qualityReview",
   "reviewType",
   "audit_log",
-  "risk_matrix"
+  "risk_matrix",
+  "component"
 ]);
 var DocumentSourceTypeSchema = external_exports.enum([
   "markdown",
@@ -23603,6 +23607,19 @@ var GetDeviceGapsQuerySchema = external_exports.object({
 var DocumentIdParamSchema = external_exports.object({
   documentId: external_exports.string().min(1)
 });
+var ComponentIdParamSchema = external_exports.object({
+  documentId: external_exports.string().min(1),
+  componentId: external_exports.string().min(1)
+});
+var UpdateComponentRequestSchema = external_exports.object({
+  organizationId: external_exports.string().min(1),
+  soupCategory: external_exports.enum(["package", "vendor", "runtime"]).optional(),
+  soupSafetyClass: external_exports.enum(["A", "B", "C"]).optional(),
+  functionalRequirements: external_exports.string().optional(),
+  hardwareRequirements: external_exports.string().optional(),
+  anomalyAssessment: external_exports.enum(["not_assessed", "assessed_acceptable", "assessed_mitigated", "monitoring"]).optional(),
+  anomalyNotes: external_exports.string().optional()
+});
 var ChangelogEntryResponseSchema = external_exports.object({
   id: external_exports.string(),
   changeType: ChangeTypeSchema,
@@ -23707,7 +23724,16 @@ var ComponentResponseSchema = external_exports.object({
   category: external_exports.string().optional(),
   supplierId: external_exports.string().optional(),
   sourceFormat: external_exports.enum(["markdown_table", "cyclonedx", "spdx"]),
-  purl: external_exports.string().optional()
+  purl: external_exports.string().optional(),
+  // SOUP enrichment fields (IEC 62304 §8.1.2)
+  soupCategory: external_exports.enum(["package", "vendor", "runtime"]).optional(),
+  dataSource: external_exports.enum(["sync", "sbom_api", "manual"]).optional(),
+  soupSafetyClass: external_exports.enum(["A", "B", "C"]).optional(),
+  functionalRequirements: external_exports.string().optional(),
+  hardwareRequirements: external_exports.string().optional(),
+  anomalyAssessment: external_exports.enum(["not_assessed", "assessed_acceptable", "assessed_mitigated", "monitoring"]).optional(),
+  anomalyNotes: external_exports.string().optional(),
+  lastReviewedAt: external_exports.string().optional()
 });
 var GetComponentsResponseSchema = external_exports.array(ComponentResponseSchema);
 var DocumentSignoffObligationSchema = external_exports.object({
@@ -24397,6 +24423,25 @@ var AddGateOverrideRequestSchema = external_exports.object({
 var RemoveGateOverrideQuerySchema = external_exports.object({
   organizationId: external_exports.string().min(1)
 });
+var ReleaseArtifactTypeSchema = external_exports.enum([
+  "sbom",
+  "test_report",
+  "record_pdf",
+  "release_summary"
+]);
+var UploadArtifactFieldsSchema = external_exports.object({
+  organizationId: external_exports.string().min(1),
+  artifactType: ReleaseArtifactTypeSchema,
+  generatorVersion: external_exports.string().max(100).optional(),
+  repositoryId: external_exports.string().optional()
+});
+var ArtifactIdParamSchema = external_exports.object({
+  releaseId: external_exports.string().min(1),
+  artifactIndex: external_exports.coerce.number().int().nonnegative()
+});
+var ListArtifactsQuerySchema = external_exports.object({
+  organizationId: external_exports.string().min(1)
+});
 var ReleaseChangeResponseSchema = external_exports.object({
   repositoryId: external_exports.string(),
   documentId: external_exports.string(),
@@ -24483,7 +24528,11 @@ var ComponentSnapshotEntryResponseSchema = external_exports.object({
   version: external_exports.string(),
   license: external_exports.string().optional(),
   safetyRiskClass: external_exports.string().optional(),
-  sourceFormat: external_exports.enum(["markdown_table", "cyclonedx", "spdx"])
+  sourceFormat: external_exports.enum(["markdown_table", "cyclonedx", "spdx"]),
+  // SOUP enrichment fields captured in release snapshots
+  soupCategory: external_exports.enum(["package", "vendor", "runtime"]).optional(),
+  soupSafetyClass: external_exports.enum(["A", "B", "C"]).optional(),
+  anomalyAssessment: external_exports.enum(["not_assessed", "assessed_acceptable", "assessed_mitigated", "monitoring"]).optional()
 });
 var ReleaseSnapshotResponseSchema = external_exports.object({
   traceabilityLinks: external_exports.array(SnapshotLinkSchema),
@@ -24551,6 +24600,21 @@ var ReleaseDocumentManifestEntrySchema = external_exports.object({
   path: external_exports.string(),
   commitSha: external_exports.string()
 });
+var ReleaseArtifactEntryResponseSchema = external_exports.object({
+  filename: external_exports.string(),
+  sha256Hash: external_exports.string(),
+  generatedAt: external_exports.string(),
+  generatorVersion: external_exports.string(),
+  artifactType: ReleaseArtifactTypeSchema,
+  repositoryId: external_exports.string().optional()
+});
+var UploadArtifactResponseSchema = external_exports.object({
+  sha256Hash: external_exports.string(),
+  filename: external_exports.string()
+});
+var ListArtifactsResponseSchema = external_exports.object({
+  artifacts: external_exports.array(ReleaseArtifactEntryResponseSchema)
+});
 var ReleaseSummaryResponseSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -24591,7 +24655,8 @@ var ReleaseDetailResponseSchema = ReleaseSummaryResponseSchema.extend({
   reviewFindings: external_exports.array(ReviewFindingEntrySchema).optional(),
   suspectedLinkDispositions: external_exports.array(SuspectedLinkDispositionEntrySchema).optional(),
   customerChangeSummary: external_exports.string().optional(),
-  customerKnownIssues: external_exports.string().optional()
+  customerKnownIssues: external_exports.string().optional(),
+  artifactManifest: external_exports.array(ReleaseArtifactEntryResponseSchema).optional()
 });
 var ListReleasesResponseSchema = external_exports.object({
   releases: external_exports.array(ReleaseSummaryResponseSchema),
@@ -25897,7 +25962,7 @@ var client = new PactoSignaApiClient({
   apiKey: PACTOSIGNA_API_KEY
 });
 var server = new Server(
-  { name: "pactosigna", version: "0.1.24" },
+  { name: "pactosigna", version: "0.1.26" },
   { capabilities: { tools: {} } }
 );
 server.setRequestHandler(ListToolsRequestSchema, async () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pactosigna/mcp-server",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "type": "module",
   "description": "MCP server for PactoSigna QMS — connects Claude Desktop, Cursor, and other AI tools to your quality management system",
   "bin": {