@shiftleftpt/sbd-toe-mcp 0.20.0-beta.14 → 0.20.0-beta.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. package/assets/agent-guide.md +1 -0
  2. package/consumed-bundle.json +10 -11
  3. package/data/entities/proportionality.json +2 -2
  4. package/data/entities/sdlc_integration.json +2 -2
  5. package/data/publish/indexes/canonical_chunks.jsonl +4907 -4907
  6. package/data/publish/indexes/publication_manifest.json +1 -1
  7. package/data/publish/ontology/sbdtoe-ontology.yaml +555 -2
  8. package/data/publish/runtime/deterministic_manifest.json +1 -1
  9. package/data/publish/runtime/requirements.json +798 -0
  10. package/data/publish/runtime/v1/manual_rastreabilidade.jsonl +202 -202
  11. package/data/publish/runtime/v1/v1_manifest.json +19 -3
  12. package/data/publish/semantic/ctrl_acore_alignment.jsonl +267 -0
  13. package/data/publish/semantic/requirement_source_coverage.jsonl +274 -0
  14. package/data/reports/run_manifest.json +5 -5
  15. package/dist/index.js +32 -0
  16. package/dist/index.js.map +1 -1
  17. package/dist/tools/trace-requirement-sources.d.ts +32 -0
  18. package/dist/tools/trace-requirement-sources.js +105 -0
  19. package/dist/tools/trace-requirement-sources.js.map +1 -0
  20. package/package.json +3 -1
package/assets/agent-guide.md CHANGED
@@ -282,6 +282,7 @@ Always distinguish between:
282
282
  | "What requirements apply at L1/L2/L3?" | `consult_security_requirements(risk_level)` |
283
283
  | "Which requirements apply to THIS task / this change?" | `select_sbd_toe_requirements(risk_level, task, changed_files?)` — `selected[]` is the recommendation; `narrowed_out[]` explains what left and why (re-call with the missing signal to recover it) |
284
284
  | "How do I PROVE these requirements?" | `get_sbd_toe_verification_matrix(risk_level, requirement_ids=[…os selected…])` — o fecho requisito → prova; ids sem EvidencePattern vêm declarados |
285
+ | "Where is the SOURCE of this requirement?" | `trace_sbd_toe_requirement_sources(requirement_ids)` — directas (autoria) vs cadeia compensada (cobertura, NÃO autoria; rótulo coverage_compensated); sem-fonte declarados |
285
286
  | "Give me a compact id map of the catalogue by category" | `consult_security_requirements(risk_level, mode="index")` |
286
287
  | "Which controls are active for auth / logging / …?" | `consult_security_requirements(risk_level, concerns=[…])` |
287
288
  | "What threats apply to this project?" | `get_threat_landscape(risk_level)` |
package/consumed-bundle.json CHANGED
@@ -2,17 +2,16 @@
2
2
  "_doc": "Pontifex bundle pin (PROGRAMME-PRESERVATION-PROTOCOL §0.6 / AGENTS.md Rule 4). Declares the Codex build artefact this MCP serves. Materialized + maintained by scripts/sync-bundle.mjs (digest-verified against the artefact .sha256), validated by scripts/verify-consumed-bundle.mjs (run in `npm run check`). source: dev-build = cycle snapshot; release = formal vX.Y.Z. release_sha256 is the verified artefact digest — never invented.",
3
3
  "pin_version": 1,
4
4
  "pinned_at": "2026-08-31",
5
- "consumer_contract_version": "v1.16",
6
- "substrate_version": "manual-v1.8.0+sbdtoe-ontology-v2.3",
5
+ "consumer_contract_version": "v1.17",
6
+ "substrate_version": "manual-v1.8.0+sbdtoe-ontology-v2.4",
7
7
  "kg_bundle": {
8
- "release_tag": "v1.10.0",
9
- "release_sha256": "d8df472bebaa1ed0b86d5b9b3b397a6a7d165183ba5e7bd48ee9e39bc896204e",
10
- "source": "release",
11
- "release_ref": "SbD-ToE/sbd-toe-knowledge-graph@v1.10.0",
12
- "surface_built_at": "2026-09-02T10:45:42.426697+00:00",
13
- "tag_scheme": "semver",
14
- "synced_at": "2026-09-02",
15
- "artefact": "sbd-toe-knowledge-graph-bundle-v1.10.0.zip"
8
+ "release_tag": "kg-v1-manual-v1.8.0-aligned-2026-09-03",
9
+ "release_sha256": "e5c3581b46aac57c90f56a1eac33bce6346ac15838b9809d4d96062eb5d19734",
10
+ "source": "dev-build",
11
+ "surface_built_at": "2026-09-03T17:05:41.982190+00:00",
12
+ "tag_scheme": "cycle-aligned",
13
+ "synced_at": "2026-09-03",
14
+ "artefact": "sbd-toe-knowledge-graph-bundle-kg-v1-manual-v1.8.0-aligned-2026-09-03-snapshot.zip"
16
15
  },
17
16
  "inputs": {
18
17
  "manual": {
@@ -20,7 +19,7 @@
20
19
  "commit": "f78dfe734a83b01fa9283c2df5a3eb0ba9528001",
21
20
  "tag": "v1.8.0",
22
21
  "version": "1.8.0",
23
- "generated_at": "2026-09-02T10:45:05Z"
22
+ "generated_at": "2026-09-03T17:05:02Z"
24
23
  },
25
24
  "ontology": {
26
25
  "repo": "SbD-ToE/sbd-toe-ontology",
package/data/entities/proportionality.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "agent": "lifecycle_extractor",
3
- "generated_at": "2026-09-02T10:45:05Z",
3
+ "generated_at": "2026-09-03T17:05:02Z",
4
4
  "items": [
5
5
  {
6
6
  "L1": "Obrigatório - Classificação simplificada, apenas eixos principais",
@@ -3083,7 +3083,7 @@
3083
3083
  "warnings": []
3084
3084
  }
3085
3085
  ],
3086
- "run_id": "20260902T104505Z",
3086
+ "run_id": "20260903T170502Z",
3087
3087
  "source": {
3088
3088
  "branch": "HEAD",
3089
3089
  "commit_sha": "f78dfe734a83b01fa9283c2df5a3eb0ba9528001",
package/data/entities/sdlc_integration.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "agent": "lifecycle_extractor",
3
- "generated_at": "2026-09-02T10:45:05Z",
3
+ "generated_at": "2026-09-03T17:05:02Z",
4
4
  "items": [
5
5
  {
6
6
  "confidence": 0.91,
@@ -5217,7 +5217,7 @@
5217
5217
  "warnings": []
5218
5218
  }
5219
5219
  ],
5220
- "run_id": "20260902T104505Z",
5220
+ "run_id": "20260903T170502Z",
5221
5221
  "source": {
5222
5222
  "branch": "HEAD",
5223
5223
  "commit_sha": "f78dfe734a83b01fa9283c2df5a3eb0ba9528001",