@shiftleftpt/sbd-toe-mcp 0.20.0-beta.3 → 0.20.0-beta.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/consumed-bundle.json +12 -12
- package/data/entities/proportionality.json +3 -3
- package/data/entities/sdlc_integration.json +3 -3
- package/data/publish/indexes/bundle_catalog.jsonl +1 -1
- package/data/publish/indexes/canonical_chunks.jsonl +4903 -4902
- package/data/publish/indexes/chunk_entity_mentions.jsonl +9 -25
- package/data/publish/indexes/mcp_chunks.jsonl +125 -124
- package/data/publish/indexes/publication_manifest.json +9 -9
- package/data/publish/ontology/sbdtoe-ontology.yaml +1699 -21
- package/data/publish/overlay/framework_overlay_index.json +136 -8
- package/data/publish/overlay/overlay_mappings.jsonl +1033 -669
- package/data/publish/runtime/artifact_requirements.json +218 -311
- package/data/publish/runtime/artifacts.json +82 -55
- package/data/publish/runtime/controls.json +883 -322
- package/data/publish/runtime/deterministic_manifest.json +2 -2
- package/data/publish/runtime/evidence_patterns.json +182 -182
- package/data/publish/runtime/requirement_control_links.json +2534 -1799
- package/data/publish/runtime/v1/manual_maturity_progression.jsonl +336 -336
- package/data/publish/runtime/v1/manual_rastreabilidade.jsonl +1105 -1105
- package/data/publish/runtime/v1/manual_threat_mitigation.jsonl +523 -523
- package/data/publish/runtime/v1/v1_manifest.json +9 -7
- package/data/reports/run_manifest.json +8 -8
- package/dist/index.js +8 -6
- package/dist/index.js.map +1 -1
- package/dist/tools/get-threat-landscape.js +36 -13
- package/dist/tools/get-threat-landscape.js.map +1 -1
- package/dist/tools/ontology-loader.d.ts +8 -0
- package/dist/tools/ontology-loader.js +9 -0
- package/dist/tools/ontology-loader.js.map +1 -1
- package/dist/tools/plan-repo-governance.d.ts +1 -2
- package/dist/tools/plan-repo-governance.js +19 -49
- package/dist/tools/plan-repo-governance.js.map +1 -1
- package/dist/tools/structured-tools.d.ts +4 -5
- package/dist/tools/structured-tools.js +87 -122
- package/dist/tools/structured-tools.js.map +1 -1
- package/package.json +3 -2
package/consumed-bundle.json
CHANGED
|
@@ -1,26 +1,26 @@
|
|
|
1
1
|
{
|
|
2
2
|
"_doc": "Pontifex bundle pin (PROGRAMME-PRESERVATION-PROTOCOL §0.6 / AGENTS.md Rule 4). Declares the Codex build artefact this MCP serves. Materialized + maintained by scripts/sync-bundle.mjs (digest-verified against the artefact .sha256), validated by scripts/verify-consumed-bundle.mjs (run in `npm run check`). source: dev-build = cycle snapshot; release = formal vX.Y.Z. release_sha256 is the verified artefact digest — never invented.",
|
|
3
3
|
"pin_version": 1,
|
|
4
|
-
"pinned_at": "2026-08-
|
|
5
|
-
"consumer_contract_version": "v1.
|
|
4
|
+
"pinned_at": "2026-08-30",
|
|
5
|
+
"consumer_contract_version": "v1.14",
|
|
6
6
|
"substrate_version": "v2-draft",
|
|
7
7
|
"kg_bundle": {
|
|
8
|
-
"release_tag": "v1.
|
|
9
|
-
"release_sha256": "
|
|
8
|
+
"release_tag": "v1.7.0",
|
|
9
|
+
"release_sha256": "29156b86ef7785966f099f02bb67dd84fcb471d64092944038a3da906c72fb9a",
|
|
10
10
|
"source": "release",
|
|
11
|
-
"release_ref": "SbD-ToE/sbd-toe-knowledge-graph@v1.
|
|
12
|
-
"surface_built_at": "2026-08-
|
|
11
|
+
"release_ref": "SbD-ToE/sbd-toe-knowledge-graph@v1.7.0",
|
|
12
|
+
"surface_built_at": "2026-08-30T22:18:08.383958+00:00",
|
|
13
13
|
"tag_scheme": "semver",
|
|
14
|
-
"synced_at": "2026-08-
|
|
15
|
-
"artefact": "sbd-toe-knowledge-graph-bundle-v1.
|
|
14
|
+
"synced_at": "2026-08-31",
|
|
15
|
+
"artefact": "sbd-toe-knowledge-graph-bundle-v1.7.0.zip"
|
|
16
16
|
},
|
|
17
17
|
"inputs": {
|
|
18
18
|
"manual": {
|
|
19
19
|
"repo": "SbD-ToE/sbd-toe-manual",
|
|
20
|
-
"commit": "
|
|
21
|
-
"tag": "v1.7.
|
|
22
|
-
"version": "1.7.
|
|
23
|
-
"generated_at": "2026-08-
|
|
20
|
+
"commit": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
|
|
21
|
+
"tag": "v1.7.1",
|
|
22
|
+
"version": "1.7.1",
|
|
23
|
+
"generated_at": "2026-08-30T22:17:31Z"
|
|
24
24
|
},
|
|
25
25
|
"ontology": {
|
|
26
26
|
"repo": "SbD-ToE/sbd-toe-ontology",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"agent": "lifecycle_extractor",
|
|
3
|
-
"generated_at": "2026-08-
|
|
3
|
+
"generated_at": "2026-08-30T22:17:31Z",
|
|
4
4
|
"items": [
|
|
5
5
|
{
|
|
6
6
|
"L1": "Obrigatório - Classificação simplificada, apenas eixos principais",
|
|
@@ -3083,10 +3083,10 @@
|
|
|
3083
3083
|
"warnings": []
|
|
3084
3084
|
}
|
|
3085
3085
|
],
|
|
3086
|
-
"run_id": "
|
|
3086
|
+
"run_id": "20260830T221731Z",
|
|
3087
3087
|
"source": {
|
|
3088
3088
|
"branch": "HEAD",
|
|
3089
|
-
"commit_sha": "
|
|
3089
|
+
"commit_sha": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
|
|
3090
3090
|
"corpus_root": "manuals_src/docs/sbd-toe",
|
|
3091
3091
|
"repo_url": "git@github.com:SbD-ToE/sbd-toe-manual.git"
|
|
3092
3092
|
},
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"agent": "lifecycle_extractor",
|
|
3
|
-
"generated_at": "2026-08-
|
|
3
|
+
"generated_at": "2026-08-30T22:17:31Z",
|
|
4
4
|
"items": [
|
|
5
5
|
{
|
|
6
6
|
"confidence": 0.91,
|
|
@@ -5217,10 +5217,10 @@
|
|
|
5217
5217
|
"warnings": []
|
|
5218
5218
|
}
|
|
5219
5219
|
],
|
|
5220
|
-
"run_id": "
|
|
5220
|
+
"run_id": "20260830T221731Z",
|
|
5221
5221
|
"source": {
|
|
5222
5222
|
"branch": "HEAD",
|
|
5223
|
-
"commit_sha": "
|
|
5223
|
+
"commit_sha": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
|
|
5224
5224
|
"corpus_root": "manuals_src/docs/sbd-toe",
|
|
5225
5225
|
"repo_url": "git@github.com:SbD-ToE/sbd-toe-manual.git"
|
|
5226
5226
|
},
|
|
@@ -23,6 +23,6 @@
|
|
|
23
23
|
{"bundle_authority_score": 1.0, "bundle_id": "13-formacao-onboarding", "bundle_number": 13, "bundle_type": "chapter", "collection_id": "010-sbd-manual", "confidence": 0.92, "detected_document_roles": ["addon", "advanced", "aplicacao_lifecycle", "intro", "kpi_catalog", "legacy_canon", "maturity", "policy_reference", "provenance_source", "requirements_catalog"], "document_ids": ["010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "010-sbd-manual-13-formacao-onboarding-intro", "010-sbd-manual-13-formacao-onboarding-addon-00-catalogo-requisitos", "010-sbd-manual-13-formacao-onboarding-addon-01-catalogo-formativo", "010-sbd-manual-13-formacao-onboarding-addon-02-trilho-formativo", "010-sbd-manual-13-formacao-onboarding-addon-03-programa-champions", "010-sbd-manual-13-formacao-onboarding-addon-04-tecnicas-formativas", "010-sbd-manual-13-formacao-onboarding-addon-05-integracao-transversal", "010-sbd-manual-13-formacao-onboarding-addon-06-manual-formacao-por-capitulo", "010-sbd-manual-13-formacao-onboarding-addon-07-exemplo1-manual-formacao-dev-pr-seguro", "010-sbd-manual-13-formacao-onboarding-addon-08-exemplo2-formacao-iac", "010-sbd-manual-13-formacao-onboarding-addon-10-checklist-onboarding", "010-sbd-manual-13-formacao-onboarding-addon-11-kpis-metricas", "010-sbd-manual-13-formacao-onboarding-addon-11-template-quiz-onboarding", "010-sbd-manual-13-formacao-onboarding-addon-12-formacao-uso-seguro-ia-tooling", "010-sbd-manual-13-formacao-onboarding-addon-13-guia-preparacao-sandbox", "010-sbd-manual-13-formacao-onboarding-addon-20-modelo-inclusao-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-21-plano-formacao-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-22-template-quiz-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-90-indicadores-metricas", "010-sbd-manual-13-formacao-onboarding-policies-relevantes", "010-sbd-manual-13-formacao-onboarding-achievable-maturity", "010-sbd-manual-13-formacao-onboarding-recomendacoes-avancadas", "010-sbd-manual-13-formacao-onboarding-canon-20-checklist-revisao", "010-sbd-manual-13-formacao-onboarding-canon-25-rastreabilidade", "010-sbd-manual-13-formacao-onboarding-canon-50-ameacas-mitigadas"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": true, "has_operational_spine": true, "maintenance_status": "mixed", "operational_document_id": "010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "primary_document_ids": ["010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "010-sbd-manual-13-formacao-onboarding-intro", "010-sbd-manual-13-formacao-onboarding-addon-00-catalogo-requisitos", "010-sbd-manual-13-formacao-onboarding-policies-relevantes", "010-sbd-manual-13-formacao-onboarding-achievable-maturity", "010-sbd-manual-13-formacao-onboarding-recomendacoes-avancadas", "010-sbd-manual-13-formacao-onboarding-canon-20-checklist-revisao"], "summary_document_id": "010-sbd-manual-13-formacao-onboarding-intro", "title": "Formação e Capacitação", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
|
|
24
24
|
{"bundle_authority_score": 1.0, "bundle_id": "14-governanca-contratacao", "bundle_number": 14, "bundle_type": "chapter", "collection_id": "010-sbd-manual", "confidence": 0.92, "detected_document_roles": ["addon", "advanced", "aplicacao_lifecycle", "intro", "kpi_catalog", "legacy_canon", "maturity", "policy_reference", "provenance_source", "requirements_catalog", "supporting_reference"], "document_ids": ["010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "010-sbd-manual-14-governanca-contratacao-intro", "010-sbd-manual-14-governanca-contratacao-addon-00-catalogo-requisitos", "010-sbd-manual-14-governanca-contratacao-addon-01-modelo-governancao", "010-sbd-manual-14-governanca-contratacao-addon-02-clausulas-contratuais", "010-sbd-manual-14-governanca-contratacao-addon-03-modelo-validacao-fornecedores", "010-sbd-manual-14-governanca-contratacao-addon-04-rastreabilidade-organizacional", "010-sbd-manual-14-governanca-contratacao-addon-05-exemplos-praticos", "010-sbd-manual-14-governanca-contratacao-addon-06-validacao-continuada", "010-sbd-manual-14-governanca-contratacao-addon-07-governancao-e-maturidade", "010-sbd-manual-14-governanca-contratacao-addon-08-diagramas-governanca", "010-sbd-manual-14-governanca-contratacao-addon-10-governanca-legada", "010-sbd-manual-14-governanca-contratacao-addon-11-controlos-praticas-sbd", "010-sbd-manual-14-governanca-contratacao-addon-12-processo-excecoes", "010-sbd-manual-14-governanca-contratacao-addon-13-checklist-offboarding", "010-sbd-manual-14-governanca-contratacao-addon-13-kpis-dominio-gov", "010-sbd-manual-14-governanca-contratacao-addon-14-exemplo-template-validacao-contractors", "010-sbd-manual-14-governanca-contratacao-policies-relevantes", "010-sbd-manual-14-governanca-contratacao-achievable-maturity", "010-sbd-manual-14-governanca-contratacao-recomendacoes-avancadas", "010-sbd-manual-14-governanca-contratacao-checklist-aderencia-sbd-toe", "010-sbd-manual-14-governanca-contratacao-kpis-arquitetura-visao-geral", "010-sbd-manual-14-governanca-contratacao-kpis-governanca", "010-sbd-manual-14-governanca-contratacao-kpis-kri-executivo", "010-sbd-manual-14-governanca-contratacao-canon-20-checklist-revisao", "010-sbd-manual-14-governanca-contratacao-canon-25-rastreabilidade", "010-sbd-manual-14-governanca-contratacao-canon-50-ameacas-mitigadas"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": true, "has_operational_spine": true, "maintenance_status": "mixed", "operational_document_id": "010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "primary_document_ids": ["010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "010-sbd-manual-14-governanca-contratacao-intro", "010-sbd-manual-14-governanca-contratacao-addon-00-catalogo-requisitos", "010-sbd-manual-14-governanca-contratacao-policies-relevantes", "010-sbd-manual-14-governanca-contratacao-achievable-maturity", "010-sbd-manual-14-governanca-contratacao-recomendacoes-avancadas", "010-sbd-manual-14-governanca-contratacao-checklist-aderencia-sbd-toe", "010-sbd-manual-14-governanca-contratacao-canon-20-checklist-revisao"], "summary_document_id": "010-sbd-manual-14-governanca-contratacao-intro", "title": "Governança & Contratação", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
|
|
25
25
|
{"bundle_authority_score": 0.9, "bundle_id": "020-assets", "bundle_number": 20, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["intro"], "document_ids": ["020-assets-intro"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-intro"], "summary_document_id": "020-assets-intro", "title": "Assets Organizacionais", "warnings": []}
|
|
26
|
-
{"bundle_authority_score": 0.55, "bundle_id": "mcp", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["meta"], "document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-07-casos-uso-07-agentic-sdlc", "020-assets-mcp-07-casos-uso-index", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-07-casos-uso-02-codegen-grounded", "020-assets-mcp-02-quickstart", "020-assets-mcp-03-instalacao", "020-assets-mcp-05-tools-reference", "020-assets-mcp-07-casos-uso-01-auditoria-pr", "020-assets-mcp-07-casos-uso-03-threat-modeling", "020-assets-mcp-07-casos-uso-05-onboarding-formacao", "020-assets-mcp-08-padroes-avancados", "020-assets-mcp-04-skills-agentes", "020-assets-mcp-07-casos-uso-06-cross-check-conformidade", "020-assets-mcp-
|
|
26
|
+
{"bundle_authority_score": 0.55, "bundle_id": "mcp", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["meta"], "document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-10-troubleshooting-faq", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-07-casos-uso-07-agentic-sdlc", "020-assets-mcp-07-casos-uso-index", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-07-casos-uso-02-codegen-grounded", "020-assets-mcp-02-quickstart", "020-assets-mcp-03-instalacao", "020-assets-mcp-05-tools-reference", "020-assets-mcp-07-casos-uso-01-auditoria-pr", "020-assets-mcp-07-casos-uso-03-threat-modeling", "020-assets-mcp-07-casos-uso-05-onboarding-formacao", "020-assets-mcp-08-padroes-avancados", "020-assets-mcp-04-skills-agentes", "020-assets-mcp-07-casos-uso-06-cross-check-conformidade", "020-assets-mcp-11-versionamento-roadmap"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-02-quickstart", "020-assets-mcp-04-skills-agentes"], "summary_document_id": "020-assets-mcp-01-intro", "title": "MCP Server (SbD-ToE)", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
|
|
27
27
|
{"bundle_authority_score": 0.75, "bundle_id": "policies", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["instantiated_policy"], "document_ids": ["020-assets-policies-01-policy-dast-fuzzing", "020-assets-policies-02-policy-classificacao-risco", "020-assets-policies-03-policy-aceitacao-risco", "020-assets-policies-04-policy-revisao-periodica-risco", "020-assets-policies-05-policy-gestao-excecoes", "020-assets-policies-06-policy-rastreabilidade", "020-assets-policies-07-policy-requisitos-seguranca", "020-assets-policies-08-policy-threat-modeling", "020-assets-policies-09-policy-arquitetura-segura", "020-assets-policies-10-policy-dependencias", "020-assets-policies-11-policy-sbom", "020-assets-policies-12-policy-excecoes-cve", "020-assets-policies-13-policy-atualizacao-automatica", "020-assets-policies-14-policy-guidelines-desenvolvimento", "020-assets-policies-15-policy-revisao-codigo", "020-assets-policies-16-policy-uso-ferramentas-apoio", "020-assets-policies-17-policy-cicd-seguro", "020-assets-policies-18-policy-gestao-segredos", "020-assets-policies-19-policy-estrategia-testes", "020-assets-policies-20-policy-release-seguro", "020-assets-policies-21-policy-iac-seguro", "020-assets-policies-22-policy-aprovacao-plan-iac", "020-assets-policies-23-policy-containers-seguros", "020-assets-policies-24-policy-golden-base-images", "020-assets-policies-25-policy-deploy-seguro", "020-assets-policies-26-policy-aprovacao-release", "020-assets-policies-27-policy-rollback", "020-assets-policies-28-policy-monitorizacao-pos-deploy", "020-assets-policies-29-policy-logging-estruturado", "020-assets-policies-30-policy-monitorizacao-seguranca", "020-assets-policies-31-policy-gestao-alertas", "020-assets-policies-32-policy-irp", "020-assets-policies-33-policy-contratacao-segura", "020-assets-policies-34-policy-rastreabilidade-organizacional", "020-assets-policies-35-policy-kpis-governacao", "020-assets-policies-36-policy-pentesting", "020-assets-policies-37-policy-formacao-seguranca", "020-assets-policies-38-policy-mandates-agentes", "020-assets-policies-39-policy-ai-bom-supply-chain"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-policies-01-policy-dast-fuzzing"], "summary_document_id": "020-assets-policies-01-policy-dast-fuzzing", "title": "Política de DAST e Fuzzing", "warnings": []}
|
|
28
28
|
{"bundle_authority_score": 0.55, "bundle_id": "tldr", "bundle_number": null, "bundle_type": "supporting", "collection_id": "root", "confidence": 0.92, "detected_document_roles": ["supporting_reference"], "document_ids": ["tldr"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["tldr"], "summary_document_id": "tldr", "title": "TL;DR - Resumo Executivo do SbD-ToE {#tldr-sbdtoe}", "warnings": []}
|