@securityreviewai/securityreview-kit 0.1.15 → 0.1.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securityreviewai/securityreview-kit",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Bootstrap security-review-mcp for AI IDEs and CLI tools",
   "author": "Debarshi Das <debarshi.das@we45.com>",
   "license": "UNLICENSED",
@@ -34,7 +34,6 @@
     "vscode"
   ],
   "dependencies": {
-    "@securityreviewai/securityreview-kit": "^0.1.11",
     "chalk": "^5.4.0",
     "commander": "^13.0.0",
     "inquirer": "^12.0.0"

package/src/generators/rules/ctm_sync.md

@@ -20,8 +20,8 @@ When invoked:
    - **If a matching workflow exists:** use its `workflow_id` for the event.
    - **If none exists:** call `create_ai_ide_workflow` with:
      - `project_id`
-     - `name`: a short sequential label `session1`, `session2`, `session3`, … — choose the next unused index (e.g. count existing AI IDE workflows for the project and use `session` + (count + 1), or first gap if your listing allows).
-     - `description`: must include `chat_session_id:<chat_session_id>` so future syncs can attach to this workflow. Add a brief human-readable note if helpful.
+     - `name`: a short, meaningful heading derived from the **high-level feature or topic** being worked on in this session (e.g. `"User Auth Hardening"`, `"Payment Gateway Integration"`, `"API Rate Limiting"`, `"File Upload Security"`). Use 2–5 words, title-case. Do **not** use sequential labels like `session1/session2`. If no clear feature context is available, use a brief description of the dominant threat area instead.
+     - `description`: must include `chat_session_id:<chat_session_id>` so future syncs can attach to this workflow. Add a brief human-readable note if helpful.do not add the word ctm anywhere
    - Store the returned `workflow_id` for the upload step.
 4. Build a JSON payload for `create_ai_ide_event` with these exact keys:
    - `workflow_id`
@@ -50,4 +50,4 @@ When invoked:
 - Never invent missing values; use empty strings/arrays if data is unavailable.
 - Never omit `chat_session_id` from the payload.
 - Never skip the `update_vibe_project_profile` call when profile-relevant data (architecture, tech, users, compliance, languages, or description) can be derived from context.
-- Return a compact confirmation after upload (including whether an existing workflow was reused or a new `sessionN` workflow was created, and confirmation that the project profile was updated).
+- Return a compact confirmation after upload (including whether an existing workflow was reused or a new named workflow was created, and confirmation that the project profile was updated).

package/src/utils/constants.js

@@ -1,6 +1,6 @@
 // Shared constants for securityreview-kit
 
-export const MCP_SERVER_PACKAGE = 'security-review-mcp';
+export const MCP_SERVER_PACKAGE = '@securityreviewai/security-review-mcp';
 export const MCP_SERVER_NAME = 'security-review-mcp';
 
 export const ENV_VARS = {