@shiftleftpt/sbd-toe-mcp 0.15.0 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/consumed-bundle.json +10 -11
  2. package/data/entities/proportionality.json +2 -2
  3. package/data/entities/sdlc_integration.json +2 -2
  4. package/data/publish/indexes/canonical_chunks.jsonl +4907 -4907
  5. package/data/publish/indexes/publication_manifest.json +1 -1
  6. package/data/publish/runtime/artifact_requirements.json +3 -0
  7. package/data/publish/runtime/artifacts.json +3 -0
  8. package/data/publish/runtime/assignments.json +7578 -1296
  9. package/data/publish/runtime/deterministic_manifest.json +5 -1
  10. package/data/publish/runtime/user_stories.json +2171 -780
  11. package/data/publish/runtime/v1/manual_threat_mitigation.jsonl +233 -233
  12. package/data/publish/runtime/v1/v1_manifest.json +5 -4
  13. package/data/reports/run_manifest.json +5 -5
  14. package/dist/index.js +12 -7
  15. package/dist/index.js.map +1 -1
  16. package/dist/serving/affordances.js +5 -5
  17. package/dist/serving/affordances.js.map +1 -1
  18. package/dist/tools/assess-implementation.d.ts +8 -1
  19. package/dist/tools/assess-implementation.js +24 -5
  20. package/dist/tools/assess-implementation.js.map +1 -1
  21. package/dist/tools/generate-sbd-toe-skill.js +15 -3
  22. package/dist/tools/generate-sbd-toe-skill.js.map +1 -1
  23. package/dist/tools/get-operating-model.js +6 -5
  24. package/dist/tools/get-operating-model.js.map +1 -1
  25. package/dist/tools/get-threat-landscape.d.ts +2 -0
  26. package/dist/tools/get-threat-landscape.js +3 -0
  27. package/dist/tools/get-threat-landscape.js.map +1 -1
  28. package/dist/tools/ontology-loader.d.ts +2 -0
  29. package/dist/tools/ontology-loader.js +1 -0
  30. package/dist/tools/ontology-loader.js.map +1 -1
  31. package/dist/tools/plan-repo-governance.d.ts +6 -0
  32. package/dist/tools/plan-repo-governance.js +17 -1
  33. package/dist/tools/plan-repo-governance.js.map +1 -1
  34. package/dist/tools/structured-tools.js +3 -1
  35. package/dist/tools/structured-tools.js.map +1 -1
  36. package/dist/version-info.d.ts +4 -1
  37. package/dist/version-info.js +13 -2
  38. package/dist/version-info.js.map +1 -1
  39. package/package.json +1 -1
@@ -11,9 +11,20 @@ import { readFileSync } from "node:fs";
11
11
  import { resolveAppPath } from "./config.js";
12
12
  let cached;
13
13
  let cachedKgTag;
14
- /** Compact per-response version stamp (0.13.0): the kg release_tag of the served pin. */
14
+ /** Compact per-response version stamp (0.13.0; forma 0.16.0): releases estampam a tag
15
+ * (ex. "v1.9.0"); dev-builds estampam "dev:<sha12>" — identidade honesta com
16
+ * comprimento ESTÁVEL (as tags longas de dev-build tocavam tectos de payload por ~7
17
+ * tokens). Verificável contra sbd://toe/version (tag + sha completos do pin). */
15
18
  export function servedKgReleaseTag() {
16
- cachedKgTag ??= loadBundleProvenance()?.kg?.release_tag ?? "unknown";
19
+ if (!cachedKgTag) {
20
+ const kg = loadBundleProvenance()?.kg;
21
+ cachedKgTag =
22
+ kg?.source === "release"
23
+ ? kg.release_tag ?? "unknown"
24
+ : kg?.sha256
25
+ ? `dev:${kg.sha256.slice(0, 12)}`
26
+ : kg?.release_tag ?? "unknown";
27
+ }
17
28
  return cachedKgTag;
18
29
  }
19
30
  export function loadBundleProvenance() {
@@ -1 +1 @@
1
- {"version":3,"file":"version-info.js","sourceRoot":"","sources":["../src/version-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAwB7C,IAAI,MAA2D,CAAC;AAEhE,IAAI,WAA+B,CAAC;AACpC,yFAAyF;AACzF,MAAM,UAAU,kBAAkB;IAChC,WAAW,KAAK,oBAAoB,EAAE,EAAE,EAAE,EAAE,WAAW,IAAI,SAAS,CAAC;IACrE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAsB,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAqB;QAC9B,MAAM,EAAE;YACN,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;YAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;YAClC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY;SAC/C;QACD,EAAE,EAAE;YACF,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW;YACvC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,cAAc;YACrC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM;YAC7B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;SACzD;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG;YAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;SACrC;KACF,CAAC;IACF,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B;IACzC,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC"}
1
+ {"version":3,"file":"version-info.js","sourceRoot":"","sources":["../src/version-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAwB7C,IAAI,MAA2D,CAAC;AAEhE,IAAI,WAA+B,CAAC;AACpC;;;iFAGiF;AACjF,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,oBAAoB,EAAE,EAAE,EAAE,CAAC;QACtC,WAAW;YACT,EAAE,EAAE,MAAM,KAAK,SAAS;gBACtB,CAAC,CAAC,EAAE,CAAC,WAAW,IAAI,SAAS;gBAC7B,CAAC,CAAC,EAAE,EAAE,MAAM;oBACV,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;oBACjC,CAAC,CAAC,EAAE,EAAE,WAAW,IAAI,SAAS,CAAC;IACvC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAsB,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAqB;QAC9B,MAAM,EAAE;YACN,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;YAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;YAClC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY;SAC/C;QACD,EAAE,EAAE;YACF,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW;YACvC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,cAAc;YACrC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM;YAC7B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;SACzD;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG;YAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;SACrC;KACF,CAAC;IACF,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B;IACzC,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@shiftleftpt/sbd-toe-mcp",
3
- "version": "0.15.0",
3
+ "version": "0.16.0",
4
4
  "license": "Apache-2.0",
5
5
  "description": "MCP server for the SbD-ToE (Security by Design — Theory of Everything) security manual — structured tools for Claude, GitHub Copilot and other MCP clients",
6
6
  "keywords": [