@shiftleftpt/sbd-toe-mcp 0.20.0-beta.3 → 0.20.0-beta.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/consumed-bundle.json +12 -12
  2. package/data/entities/proportionality.json +3 -3
  3. package/data/entities/sdlc_integration.json +3 -3
  4. package/data/publish/indexes/bundle_catalog.jsonl +1 -1
  5. package/data/publish/indexes/canonical_chunks.jsonl +4903 -4902
  6. package/data/publish/indexes/chunk_entity_mentions.jsonl +9 -25
  7. package/data/publish/indexes/mcp_chunks.jsonl +125 -124
  8. package/data/publish/indexes/publication_manifest.json +9 -9
  9. package/data/publish/ontology/sbdtoe-ontology.yaml +1699 -21
  10. package/data/publish/overlay/framework_overlay_index.json +136 -8
  11. package/data/publish/overlay/overlay_mappings.jsonl +1033 -669
  12. package/data/publish/runtime/artifact_requirements.json +218 -311
  13. package/data/publish/runtime/artifacts.json +82 -55
  14. package/data/publish/runtime/controls.json +883 -322
  15. package/data/publish/runtime/deterministic_manifest.json +2 -2
  16. package/data/publish/runtime/evidence_patterns.json +182 -182
  17. package/data/publish/runtime/requirement_control_links.json +2534 -1799
  18. package/data/publish/runtime/v1/manual_maturity_progression.jsonl +336 -336
  19. package/data/publish/runtime/v1/manual_rastreabilidade.jsonl +1105 -1105
  20. package/data/publish/runtime/v1/manual_threat_mitigation.jsonl +523 -523
  21. package/data/publish/runtime/v1/v1_manifest.json +9 -7
  22. package/data/reports/run_manifest.json +8 -8
  23. package/dist/index.js +8 -6
  24. package/dist/index.js.map +1 -1
  25. package/dist/tools/get-threat-landscape.js +36 -13
  26. package/dist/tools/get-threat-landscape.js.map +1 -1
  27. package/dist/tools/ontology-loader.d.ts +8 -0
  28. package/dist/tools/ontology-loader.js +9 -0
  29. package/dist/tools/ontology-loader.js.map +1 -1
  30. package/dist/tools/plan-repo-governance.d.ts +1 -2
  31. package/dist/tools/plan-repo-governance.js +19 -49
  32. package/dist/tools/plan-repo-governance.js.map +1 -1
  33. package/dist/tools/structured-tools.d.ts +4 -5
  34. package/dist/tools/structured-tools.js +87 -122
  35. package/dist/tools/structured-tools.js.map +1 -1
  36. package/package.json +3 -2
@@ -1,26 +1,26 @@
1
1
  {
2
2
  "_doc": "Pontifex bundle pin (PROGRAMME-PRESERVATION-PROTOCOL §0.6 / AGENTS.md Rule 4). Declares the Codex build artefact this MCP serves. Materialized + maintained by scripts/sync-bundle.mjs (digest-verified against the artefact .sha256), validated by scripts/verify-consumed-bundle.mjs (run in `npm run check`). source: dev-build = cycle snapshot; release = formal vX.Y.Z. release_sha256 is the verified artefact digest — never invented.",
3
3
  "pin_version": 1,
4
- "pinned_at": "2026-08-29",
5
- "consumer_contract_version": "v1.11",
4
+ "pinned_at": "2026-08-30",
5
+ "consumer_contract_version": "v1.14",
6
6
  "substrate_version": "v2-draft",
7
7
  "kg_bundle": {
8
- "release_tag": "v1.6.0",
9
- "release_sha256": "baf5913b596fdeb17c77d9c3a1d9394738c4c9319a8bcf0ec03972ba5db1d93b",
8
+ "release_tag": "v1.7.0",
9
+ "release_sha256": "29156b86ef7785966f099f02bb67dd84fcb471d64092944038a3da906c72fb9a",
10
10
  "source": "release",
11
- "release_ref": "SbD-ToE/sbd-toe-knowledge-graph@v1.6.0",
12
- "surface_built_at": "2026-08-29T16:32:13.452857+00:00",
11
+ "release_ref": "SbD-ToE/sbd-toe-knowledge-graph@v1.7.0",
12
+ "surface_built_at": "2026-08-30T22:18:08.383958+00:00",
13
13
  "tag_scheme": "semver",
14
- "synced_at": "2026-08-29",
15
- "artefact": "sbd-toe-knowledge-graph-bundle-v1.6.0.zip"
14
+ "synced_at": "2026-08-31",
15
+ "artefact": "sbd-toe-knowledge-graph-bundle-v1.7.0.zip"
16
16
  },
17
17
  "inputs": {
18
18
  "manual": {
19
19
  "repo": "SbD-ToE/sbd-toe-manual",
20
- "commit": "d5c2586ae2cd12ab2e31b65febb2e85ed20e1bce",
21
- "tag": "v1.7.0",
22
- "version": "1.7.0",
23
- "generated_at": "2026-08-29T16:31:43Z"
20
+ "commit": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
21
+ "tag": "v1.7.1",
22
+ "version": "1.7.1",
23
+ "generated_at": "2026-08-30T22:17:31Z"
24
24
  },
25
25
  "ontology": {
26
26
  "repo": "SbD-ToE/sbd-toe-ontology",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "agent": "lifecycle_extractor",
3
- "generated_at": "2026-08-29T16:31:43Z",
3
+ "generated_at": "2026-08-30T22:17:31Z",
4
4
  "items": [
5
5
  {
6
6
  "L1": "Obrigatório - Classificação simplificada, apenas eixos principais",
@@ -3083,10 +3083,10 @@
3083
3083
  "warnings": []
3084
3084
  }
3085
3085
  ],
3086
- "run_id": "20260829T163143Z",
3086
+ "run_id": "20260830T221731Z",
3087
3087
  "source": {
3088
3088
  "branch": "HEAD",
3089
- "commit_sha": "d5c2586ae2cd12ab2e31b65febb2e85ed20e1bce",
3089
+ "commit_sha": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
3090
3090
  "corpus_root": "manuals_src/docs/sbd-toe",
3091
3091
  "repo_url": "git@github.com:SbD-ToE/sbd-toe-manual.git"
3092
3092
  },
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "agent": "lifecycle_extractor",
3
- "generated_at": "2026-08-29T16:31:43Z",
3
+ "generated_at": "2026-08-30T22:17:31Z",
4
4
  "items": [
5
5
  {
6
6
  "confidence": 0.91,
@@ -5217,10 +5217,10 @@
5217
5217
  "warnings": []
5218
5218
  }
5219
5219
  ],
5220
- "run_id": "20260829T163143Z",
5220
+ "run_id": "20260830T221731Z",
5221
5221
  "source": {
5222
5222
  "branch": "HEAD",
5223
- "commit_sha": "d5c2586ae2cd12ab2e31b65febb2e85ed20e1bce",
5223
+ "commit_sha": "8e03454c5137ded5a0a88ac2b91b1c4d6ee8fdac",
5224
5224
  "corpus_root": "manuals_src/docs/sbd-toe",
5225
5225
  "repo_url": "git@github.com:SbD-ToE/sbd-toe-manual.git"
5226
5226
  },
@@ -23,6 +23,6 @@
23
23
  {"bundle_authority_score": 1.0, "bundle_id": "13-formacao-onboarding", "bundle_number": 13, "bundle_type": "chapter", "collection_id": "010-sbd-manual", "confidence": 0.92, "detected_document_roles": ["addon", "advanced", "aplicacao_lifecycle", "intro", "kpi_catalog", "legacy_canon", "maturity", "policy_reference", "provenance_source", "requirements_catalog"], "document_ids": ["010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "010-sbd-manual-13-formacao-onboarding-intro", "010-sbd-manual-13-formacao-onboarding-addon-00-catalogo-requisitos", "010-sbd-manual-13-formacao-onboarding-addon-01-catalogo-formativo", "010-sbd-manual-13-formacao-onboarding-addon-02-trilho-formativo", "010-sbd-manual-13-formacao-onboarding-addon-03-programa-champions", "010-sbd-manual-13-formacao-onboarding-addon-04-tecnicas-formativas", "010-sbd-manual-13-formacao-onboarding-addon-05-integracao-transversal", "010-sbd-manual-13-formacao-onboarding-addon-06-manual-formacao-por-capitulo", "010-sbd-manual-13-formacao-onboarding-addon-07-exemplo1-manual-formacao-dev-pr-seguro", "010-sbd-manual-13-formacao-onboarding-addon-08-exemplo2-formacao-iac", "010-sbd-manual-13-formacao-onboarding-addon-10-checklist-onboarding", "010-sbd-manual-13-formacao-onboarding-addon-11-kpis-metricas", "010-sbd-manual-13-formacao-onboarding-addon-11-template-quiz-onboarding", "010-sbd-manual-13-formacao-onboarding-addon-12-formacao-uso-seguro-ia-tooling", "010-sbd-manual-13-formacao-onboarding-addon-13-guia-preparacao-sandbox", "010-sbd-manual-13-formacao-onboarding-addon-20-modelo-inclusao-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-21-plano-formacao-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-22-template-quiz-terceiros", "010-sbd-manual-13-formacao-onboarding-addon-90-indicadores-metricas", "010-sbd-manual-13-formacao-onboarding-policies-relevantes", "010-sbd-manual-13-formacao-onboarding-achievable-maturity", "010-sbd-manual-13-formacao-onboarding-recomendacoes-avancadas", "010-sbd-manual-13-formacao-onboarding-canon-20-checklist-revisao", "010-sbd-manual-13-formacao-onboarding-canon-25-rastreabilidade", "010-sbd-manual-13-formacao-onboarding-canon-50-ameacas-mitigadas"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": true, "has_operational_spine": true, "maintenance_status": "mixed", "operational_document_id": "010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "primary_document_ids": ["010-sbd-manual-13-formacao-onboarding-aplicacao-lifecycle", "010-sbd-manual-13-formacao-onboarding-intro", "010-sbd-manual-13-formacao-onboarding-addon-00-catalogo-requisitos", "010-sbd-manual-13-formacao-onboarding-policies-relevantes", "010-sbd-manual-13-formacao-onboarding-achievable-maturity", "010-sbd-manual-13-formacao-onboarding-recomendacoes-avancadas", "010-sbd-manual-13-formacao-onboarding-canon-20-checklist-revisao"], "summary_document_id": "010-sbd-manual-13-formacao-onboarding-intro", "title": "Formação e Capacitação", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
24
24
  {"bundle_authority_score": 1.0, "bundle_id": "14-governanca-contratacao", "bundle_number": 14, "bundle_type": "chapter", "collection_id": "010-sbd-manual", "confidence": 0.92, "detected_document_roles": ["addon", "advanced", "aplicacao_lifecycle", "intro", "kpi_catalog", "legacy_canon", "maturity", "policy_reference", "provenance_source", "requirements_catalog", "supporting_reference"], "document_ids": ["010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "010-sbd-manual-14-governanca-contratacao-intro", "010-sbd-manual-14-governanca-contratacao-addon-00-catalogo-requisitos", "010-sbd-manual-14-governanca-contratacao-addon-01-modelo-governancao", "010-sbd-manual-14-governanca-contratacao-addon-02-clausulas-contratuais", "010-sbd-manual-14-governanca-contratacao-addon-03-modelo-validacao-fornecedores", "010-sbd-manual-14-governanca-contratacao-addon-04-rastreabilidade-organizacional", "010-sbd-manual-14-governanca-contratacao-addon-05-exemplos-praticos", "010-sbd-manual-14-governanca-contratacao-addon-06-validacao-continuada", "010-sbd-manual-14-governanca-contratacao-addon-07-governancao-e-maturidade", "010-sbd-manual-14-governanca-contratacao-addon-08-diagramas-governanca", "010-sbd-manual-14-governanca-contratacao-addon-10-governanca-legada", "010-sbd-manual-14-governanca-contratacao-addon-11-controlos-praticas-sbd", "010-sbd-manual-14-governanca-contratacao-addon-12-processo-excecoes", "010-sbd-manual-14-governanca-contratacao-addon-13-checklist-offboarding", "010-sbd-manual-14-governanca-contratacao-addon-13-kpis-dominio-gov", "010-sbd-manual-14-governanca-contratacao-addon-14-exemplo-template-validacao-contractors", "010-sbd-manual-14-governanca-contratacao-policies-relevantes", "010-sbd-manual-14-governanca-contratacao-achievable-maturity", "010-sbd-manual-14-governanca-contratacao-recomendacoes-avancadas", "010-sbd-manual-14-governanca-contratacao-checklist-aderencia-sbd-toe", "010-sbd-manual-14-governanca-contratacao-kpis-arquitetura-visao-geral", "010-sbd-manual-14-governanca-contratacao-kpis-governanca", "010-sbd-manual-14-governanca-contratacao-kpis-kri-executivo", "010-sbd-manual-14-governanca-contratacao-canon-20-checklist-revisao", "010-sbd-manual-14-governanca-contratacao-canon-25-rastreabilidade", "010-sbd-manual-14-governanca-contratacao-canon-50-ameacas-mitigadas"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": true, "has_operational_spine": true, "maintenance_status": "mixed", "operational_document_id": "010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "primary_document_ids": ["010-sbd-manual-14-governanca-contratacao-aplicacao-lifecycle", "010-sbd-manual-14-governanca-contratacao-intro", "010-sbd-manual-14-governanca-contratacao-addon-00-catalogo-requisitos", "010-sbd-manual-14-governanca-contratacao-policies-relevantes", "010-sbd-manual-14-governanca-contratacao-achievable-maturity", "010-sbd-manual-14-governanca-contratacao-recomendacoes-avancadas", "010-sbd-manual-14-governanca-contratacao-checklist-aderencia-sbd-toe", "010-sbd-manual-14-governanca-contratacao-canon-20-checklist-revisao"], "summary_document_id": "010-sbd-manual-14-governanca-contratacao-intro", "title": "Governança & Contratação", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
25
25
  {"bundle_authority_score": 0.9, "bundle_id": "020-assets", "bundle_number": 20, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["intro"], "document_ids": ["020-assets-intro"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": true, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-intro"], "summary_document_id": "020-assets-intro", "title": "Assets Organizacionais", "warnings": []}
26
- {"bundle_authority_score": 0.55, "bundle_id": "mcp", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["meta"], "document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-07-casos-uso-07-agentic-sdlc", "020-assets-mcp-07-casos-uso-index", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-07-casos-uso-02-codegen-grounded", "020-assets-mcp-02-quickstart", "020-assets-mcp-03-instalacao", "020-assets-mcp-05-tools-reference", "020-assets-mcp-07-casos-uso-01-auditoria-pr", "020-assets-mcp-07-casos-uso-03-threat-modeling", "020-assets-mcp-07-casos-uso-05-onboarding-formacao", "020-assets-mcp-08-padroes-avancados", "020-assets-mcp-04-skills-agentes", "020-assets-mcp-07-casos-uso-06-cross-check-conformidade", "020-assets-mcp-10-troubleshooting-faq", "020-assets-mcp-11-versionamento-roadmap"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-02-quickstart", "020-assets-mcp-04-skills-agentes"], "summary_document_id": "020-assets-mcp-01-intro", "title": "MCP Server (SbD-ToE)", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
26
+ {"bundle_authority_score": 0.55, "bundle_id": "mcp", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["meta"], "document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-10-troubleshooting-faq", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-07-casos-uso-07-agentic-sdlc", "020-assets-mcp-07-casos-uso-index", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-07-casos-uso-02-codegen-grounded", "020-assets-mcp-02-quickstart", "020-assets-mcp-03-instalacao", "020-assets-mcp-05-tools-reference", "020-assets-mcp-07-casos-uso-01-auditoria-pr", "020-assets-mcp-07-casos-uso-03-threat-modeling", "020-assets-mcp-07-casos-uso-05-onboarding-formacao", "020-assets-mcp-08-padroes-avancados", "020-assets-mcp-04-skills-agentes", "020-assets-mcp-07-casos-uso-06-cross-check-conformidade", "020-assets-mcp-11-versionamento-roadmap"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-mcp-01-intro", "020-assets-mcp-09-epistemica-anti-patterns", "020-assets-mcp-07-casos-uso-04-governance-bootstrap", "020-assets-mcp-06-resources-prompts", "020-assets-mcp-02-quickstart", "020-assets-mcp-04-skills-agentes"], "summary_document_id": "020-assets-mcp-01-intro", "title": "MCP Server (SbD-ToE)", "warnings": ["legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle", "legacy layout detected in chapter bundle"]}
27
27
  {"bundle_authority_score": 0.75, "bundle_id": "policies", "bundle_number": null, "bundle_type": "supporting", "collection_id": "020-assets", "confidence": 0.92, "detected_document_roles": ["instantiated_policy"], "document_ids": ["020-assets-policies-01-policy-dast-fuzzing", "020-assets-policies-02-policy-classificacao-risco", "020-assets-policies-03-policy-aceitacao-risco", "020-assets-policies-04-policy-revisao-periodica-risco", "020-assets-policies-05-policy-gestao-excecoes", "020-assets-policies-06-policy-rastreabilidade", "020-assets-policies-07-policy-requisitos-seguranca", "020-assets-policies-08-policy-threat-modeling", "020-assets-policies-09-policy-arquitetura-segura", "020-assets-policies-10-policy-dependencias", "020-assets-policies-11-policy-sbom", "020-assets-policies-12-policy-excecoes-cve", "020-assets-policies-13-policy-atualizacao-automatica", "020-assets-policies-14-policy-guidelines-desenvolvimento", "020-assets-policies-15-policy-revisao-codigo", "020-assets-policies-16-policy-uso-ferramentas-apoio", "020-assets-policies-17-policy-cicd-seguro", "020-assets-policies-18-policy-gestao-segredos", "020-assets-policies-19-policy-estrategia-testes", "020-assets-policies-20-policy-release-seguro", "020-assets-policies-21-policy-iac-seguro", "020-assets-policies-22-policy-aprovacao-plan-iac", "020-assets-policies-23-policy-containers-seguros", "020-assets-policies-24-policy-golden-base-images", "020-assets-policies-25-policy-deploy-seguro", "020-assets-policies-26-policy-aprovacao-release", "020-assets-policies-27-policy-rollback", "020-assets-policies-28-policy-monitorizacao-pos-deploy", "020-assets-policies-29-policy-logging-estruturado", "020-assets-policies-30-policy-monitorizacao-seguranca", "020-assets-policies-31-policy-gestao-alertas", "020-assets-policies-32-policy-irp", "020-assets-policies-33-policy-contratacao-segura", "020-assets-policies-34-policy-rastreabilidade-organizacional", "020-assets-policies-35-policy-kpis-governacao", "020-assets-policies-36-policy-pentesting", "020-assets-policies-37-policy-formacao-seguranca", "020-assets-policies-38-policy-mandates-agentes", "020-assets-policies-39-policy-ai-bom-supply-chain"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["020-assets-policies-01-policy-dast-fuzzing"], "summary_document_id": "020-assets-policies-01-policy-dast-fuzzing", "title": "Política de DAST e Fuzzing", "warnings": []}
28
28
  {"bundle_authority_score": 0.55, "bundle_id": "tldr", "bundle_number": null, "bundle_type": "supporting", "collection_id": "root", "confidence": 0.92, "detected_document_roles": ["supporting_reference"], "document_ids": ["tldr"], "evidence": ["chapter reconstructed from classified documents", "ask_ai_priority_order derived from semantic role priority"], "has_intro": false, "has_legacy_canon": false, "has_operational_spine": false, "maintenance_status": "current", "operational_document_id": null, "primary_document_ids": ["tldr"], "summary_document_id": "tldr", "title": "TL;DR - Resumo Executivo do SbD-ToE {#tldr-sbdtoe}", "warnings": []}