@skeletiq/mcp 0.6.1 → 0.7.0

package/dist/index.js

@@ -5,7 +5,7 @@ import { serveStdio } from "@modelcontextprotocol/server/stdio";
 
 // src/config.ts
 var SERVER_NAME = "skeletiq";
-var SERVER_VERSION = "0.6.1";
+var SERVER_VERSION = "0.7.0";
 var AGENT_SCHEMA_VERSION = 2;
 function schemaNote(serverVersion) {
   if (serverVersion === void 0 || serverVersion <= AGENT_SCHEMA_VERSION) return null;
@@ -625,6 +625,11 @@ var CritiqueFindingSchema = z.looseObject({
   remediation: z.string().optional(),
   /** Reported in full and never charged against the score — advice, not a problem to fix. */
   advisory_only: z.boolean().optional(),
+  /**
+   * Whether this finding can hold a design back from Ready. Absent or null means not stated, and
+   * the standing Ready rule applies to it.
+   */
+  holds_ready: z.boolean().nullable().optional(),
   /**
    * The problem this finding is about. Stable across rewording, and shared with the advisor
    * suggestion and decision record raised by the same problem — the key a dismissal is recorded
@@ -1455,6 +1460,7 @@ var input3 = z5.object({
 });
 var SCORE_BASIS_FINDINGS_ONLY = "findings_only";
 var SCORE_BASIS_NOTE = "This score is findings only. It is not held to a traceability ceiling, because this tool is given a design and no requirement set to trace it against. The app can show a lower number for the same stored design for exactly that reason.";
+var COMPLIANCE_INDICATIVE_NOTE = "Indicative automated check based on architecture structure \u2014 not a certified compliance audit or legal advice.";
 var output3 = z5.object({
   architecture_score: z5.number(),
   score_basis: z5.literal(SCORE_BASIS_FINDINGS_ONLY).describe(SCORE_BASIS_NOTE),
@@ -1537,7 +1543,7 @@ function registerCritique(server, client) {
         // An agent that reads only the text has to see this too. Without it, "the app
         // said 59 and the tool said 74" is an unexplained contradiction it will either
         // resolve wrongly or report as a bug.
-        complianceAssessed ? `Compliance checked against ${(critique.frameworks_checked ?? []).join(", ")} \u2014 the frameworks systems in this domain are usually held to, inferred from the domain you sent rather than from a regime anyone named. Confirm them.` : critique.compliance_note ?? "Compliance was not assessed.",
+        complianceAssessed ? `Compliance checked against ${(critique.frameworks_checked ?? []).join(", ")} \u2014 the frameworks systems in this domain are usually held to, inferred from the domain you sent rather than from a regime anyone named. Confirm them. ` + COMPLIANCE_INDICATIVE_NOTE : `${critique.compliance_note ?? "Compliance was not assessed."} ${COMPLIANCE_INDICATIVE_NOTE}`,
         // Only when the exposure used is not the one the agent chose. When a
         // non-public exposure *was* applied the server returns an
         // `exposure_scoped_checks` finding naming exactly which checks it took off
@@ -1660,13 +1666,13 @@ function frameDetail(frame) {
 var constraintsInput = z6.strictObject({
   budget: z6.enum(["low", "medium", "high", "unlimited"]).optional(),
   max_latency_ms: z6.number().int().positive().optional(),
-  // Free strings, not an enum, and the description has to say why. SkeletIQ assesses five
+  // Free strings, not an enum, and the description has to say why. SkeletIQ assesses six
   // frameworks; naming anything else is still worth doing, because an unassessed regime is
   // recorded and reaches the design brief as a requirement the agent still has to satisfy.
   // The old text read 'e.g. HIPAA, SOC2, PCI-DSS, GDPR' — it omitted SOX, which is the one
   // an agent is least likely to guess, and said nothing about what happens to the rest.
   compliance: z6.array(z6.string()).optional().describe(
-    "Regimes the design must satisfy. SOC2, HIPAA, PCI-DSS, GDPR and SOX are checked against requirement catalogues; any other regime is recorded and carried into the design brief as a requirement to satisfy, rather than checked."
+    "Regimes the design must satisfy. SOC2, HIPAA, PCI-DSS, GDPR, SOX and DPDP (India) are checked against requirement catalogues; any other regime is recorded and carried into the design brief as a requirement to satisfy, rather than checked."
   ),
   preferred_cloud: z6.enum(["aws", "gcp", "azure", "any"]).optional(),
   preferred_technologies: z6.array(z6.string()).optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skeletiq/mcp",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Design in SkeletIQ, build with your coding agent. MCP server for the SkeletIQ architecture platform.",
   "license": "MIT",
   "author": "Sabhahith Works Private Limited",