@zivis/mcp 0.1.17 → 0.1.18

package/dist/pattern-packs/zivis-public-0.2.0/manifest.json

@@ -3,7 +3,7 @@
   "pack_id": "zivis-public",
   "pack_name": "ZIVIS Public Pattern Pack",
   "version": "0.2.0",
-  "built_at": "2026-09-08T13:37:26.490Z",
+  "built_at": "2026-09-08T21:17:47.708Z",
   "tier": "customer_safe",
   "description": "ZIVIS-curated public pattern pack — capsules + inference prompts evaluated locally on the user's machine.",
   "capsules": [

package/dist/project-binding.d.ts

@@ -3,7 +3,9 @@ export declare function detectProjectBinding(cwd: string): {
     binding: ProjectBinding;
     filePath: string;
 } | null;
-export declare function sanitizeBindingOverrides(binding: ProjectBinding, filePath: string): Partial<Pick<ZivisConfig, "apiBaseUrl" | "oauthApiUrl" | "oauthClientId">>;
+type BindingOverrides = Partial<Pick<ZivisConfig, "apiBaseUrl" | "oauthApiUrl" | "oauthClientId" | "keychainPrefix" | "configDir">>;
+export declare function sanitizeBindingOverrides(binding: ProjectBinding, filePath: string): BindingOverrides;
 export declare function resolveConfigFromBinding(cwd?: string): ZivisConfig;
 export declare function resolveMcpSessionForWorkspace(incoming: ZivisConfig, workspacePath: string, detected: ReturnType<typeof detectProjectBinding>, fromBinding: ZivisConfig): string;
 export declare function validateProjectBinding(binding: ProjectBinding, filePath: string, config: ZivisConfig): void;
+export {};

package/dist/project-binding.js

@@ -27,10 +27,13 @@ export function detectProjectBinding(cwd) {
     }
     return null;
 }
-const TRUSTED_BINDING_HOST = "zivis.ai";
-const TRUSTED_BINDING_HOST_SUFFIX = ".zivis.ai";
+const TRUSTED_API_HOST_SUFFIXES = [".zivis.ai"];
+const TRUSTED_OAUTH_HOST_SUFFIXES = [".zivis.ai", ".authkit.app"];
+const TRUSTED_APEX_HOSTS = new Set(["zivis.ai"]);
 const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
-function isTrustedBindingUrl(raw, envAnchor) {
+const KEYCHAIN_PREFIX_RE = /^ai\.zivis(\.[a-z0-9-]{1,32})?$/;
+const CONFIG_DIR_RE = /^zivis(-[a-z0-9]{1,32})?$/;
+function isTrustedBindingUrl(raw, envAnchor, suffixes) {
     if (envAnchor && raw === envAnchor)
         return true;
     let parsed;
@@ -45,7 +48,9 @@ function isTrustedBindingUrl(raw, envAnchor) {
         return true;
     if (parsed.protocol !== "https:")
         return false;
-    return host === TRUSTED_BINDING_HOST || host.endsWith(TRUSTED_BINDING_HOST_SUFFIX);
+    if (TRUSTED_APEX_HOSTS.has(host))
+        return true;
+    return suffixes.some((s) => host.endsWith(s));
 }
 function describeHost(raw) {
     try {
@@ -57,22 +62,34 @@ function describeHost(raw) {
 }
 export function sanitizeBindingOverrides(binding, filePath) {
     const out = {};
-    const gate = (field, value, envName) => {
+    const warn = (field, shown, rule) => {
+        console.error(`[zivis] WARNING: ignoring untrusted "${field}" in ${filePath} (${shown}). ` +
+            `A repo binding may only set ${field} to ${rule}. Falling back to the configured/default value.`);
+    };
+    const gateUrl = (field, value, envName, suffixes) => {
+        if (!value)
+            return;
+        if (isTrustedBindingUrl(value, process.env[envName], suffixes)) {
+            out[field] = value;
+            return;
+        }
+        warn(field, `host: ${describeHost(value)}`, `https://zivis.ai, https://*${suffixes.join(" / https://*")}, localhost, or the exact value of ${envName}`);
+    };
+    const gateToken = (field, value, envName, re, ruleText) => {
         if (!value)
             return;
-        if (isTrustedBindingUrl(value, process.env[envName])) {
+        if (value === process.env[envName] || re.test(value)) {
             out[field] = value;
             return;
         }
-        console.error(`[zivis] WARNING: ignoring untrusted "${field}" in ${filePath} ` +
-            `(host: ${describeHost(value)}). A repo binding may only point at ` +
-            `https://*.zivis.ai, localhost, or the exact value of ${envName}. ` +
-            `Falling back to the configured/default host.`);
+        warn(field, `value: ${JSON.stringify(value)}`, `${ruleText} or the exact value of ${envName}`);
     };
-    gate("apiBaseUrl", binding.apiBaseUrl, "ZIVIS_API_URL");
-    gate("oauthApiUrl", binding.oauthApiUrl, "ZIVIS_OAUTH_API_URL");
+    gateUrl("apiBaseUrl", binding.apiBaseUrl, "ZIVIS_API_URL", TRUSTED_API_HOST_SUFFIXES);
+    gateUrl("oauthApiUrl", binding.oauthApiUrl, "ZIVIS_OAUTH_API_URL", TRUSTED_OAUTH_HOST_SUFFIXES);
     if (binding.oauthClientId)
         out.oauthClientId = binding.oauthClientId;
+    gateToken("keychainPrefix", binding.keychainPrefix, "ZIVIS_KEYCHAIN_PREFIX", KEYCHAIN_PREFIX_RE, "a name inside the ai.zivis.* namespace (e.g. ai.zivis.staging)");
+    gateToken("configDir", binding.configDir, "ZIVIS_CONFIG_DIR", CONFIG_DIR_RE, "a single directory name of the form zivis or zivis-<env> (e.g. zivis-staging)");
     return out;
 }
 export function resolveConfigFromBinding(cwd) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zivis/mcp",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "ZIVIS MCP server — threat modeling, security scans, and AI red team tools for IDE integration",
   "license": "Apache-2.0",
   "homepage": "https://zivis.ai",
@@ -43,7 +43,6 @@
     "build:pattern-pack": "tsx ../scripts/build-pattern-pack.ts",
     "build": "tsc -p tsconfig.build.json && pnpm run build:pattern-pack && node scripts/ensure-symlink.cjs",
     "prepublishOnly": "rm -rf dist && pnpm run build",
-    "postpublish": "node -e \"const p=require('./package.json'); require('child_process').execSync('npm dist-tag add '+p.name+'@'+p.version+' latest',{stdio:'inherit'});\"",
     "dev": "tsc --watch",
     "start": "node dist/index.js",
     "test": "vitest run",