@zivis/mcp 0.1.17 → 0.1.19

package/dist/auth/index.d.ts

@@ -5,4 +5,11 @@ export { keychainStore, keychainRead, keychainDelete } from "./keychain.js";
 export { loadTokens } from "./token-refresh.js";
 export { loadSessionIndex, saveSessionEntry, removeSessionEntry, listSessions } from "./sessions.js";
 export declare function resolveAuth(config?: ZivisConfig, forceMethod?: AuthMethod): Promise<AuthCredentials>;
+export interface ApiKeyOrgProbe {
+    ok: boolean;
+    workosOrgId: string | null;
+    orgName?: string;
+    error?: string;
+}
+export declare function probeApiKeyOrg(config: ZivisConfig, apiKey: string): Promise<ApiKeyOrgProbe>;
 export declare function getAuthDescription(config?: ZivisConfig): Promise<string>;

package/dist/auth/index.js

@@ -39,6 +39,38 @@ export async function resolveAuth(config = DEFAULT_CONFIG, forceMethod) {
     }
     return { method: "none" };
 }
+export async function probeApiKeyOrg(config, apiKey) {
+    let response;
+    try {
+        response = await fetch(`${config.apiBaseUrl}/api/mcp/session`, {
+            headers: {
+                "X-API-Key": apiKey,
+                "User-Agent": "@zivis/mcp",
+            },
+        });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            workosOrgId: null,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        return {
+            ok: false,
+            workosOrgId: null,
+            error: `HTTP ${response.status}: ${body.slice(0, 200)}`,
+        };
+    }
+    const payload = (await response.json());
+    return {
+        ok: true,
+        workosOrgId: payload.org?.workosOrgId ?? null,
+        orgName: payload.org?.name,
+    };
+}
 export async function getAuthDescription(config = DEFAULT_CONFIG) {
     const creds = await resolveAuth(config);
     switch (creds.method) {

package/dist/pattern-packs/zivis-public-0.2.0/manifest.json

@@ -3,7 +3,7 @@
   "pack_id": "zivis-public",
   "pack_name": "ZIVIS Public Pattern Pack",
   "version": "0.2.0",
-  "built_at": "2026-09-08T13:37:26.490Z",
+  "built_at": "2026-09-10T20:35:21.881Z",
   "tier": "customer_safe",
   "description": "ZIVIS-curated public pattern pack — capsules + inference prompts evaluated locally on the user's machine.",
   "capsules": [

package/dist/project-binding.d.ts

@@ -3,7 +3,9 @@ export declare function detectProjectBinding(cwd: string): {
     binding: ProjectBinding;
     filePath: string;
 } | null;
-export declare function sanitizeBindingOverrides(binding: ProjectBinding, filePath: string): Partial<Pick<ZivisConfig, "apiBaseUrl" | "oauthApiUrl" | "oauthClientId">>;
+type BindingOverrides = Partial<Pick<ZivisConfig, "apiBaseUrl" | "oauthApiUrl" | "oauthClientId" | "keychainPrefix" | "configDir">>;
+export declare function sanitizeBindingOverrides(binding: ProjectBinding, filePath: string): BindingOverrides;
 export declare function resolveConfigFromBinding(cwd?: string): ZivisConfig;
 export declare function resolveMcpSessionForWorkspace(incoming: ZivisConfig, workspacePath: string, detected: ReturnType<typeof detectProjectBinding>, fromBinding: ZivisConfig): string;
 export declare function validateProjectBinding(binding: ProjectBinding, filePath: string, config: ZivisConfig): void;
+export {};

package/dist/project-binding.js

@@ -27,10 +27,13 @@ export function detectProjectBinding(cwd) {
     }
     return null;
 }
-const TRUSTED_BINDING_HOST = "zivis.ai";
-const TRUSTED_BINDING_HOST_SUFFIX = ".zivis.ai";
+const TRUSTED_API_HOST_SUFFIXES = [".zivis.ai"];
+const TRUSTED_OAUTH_HOST_SUFFIXES = [".zivis.ai", ".authkit.app"];
+const TRUSTED_APEX_HOSTS = new Set(["zivis.ai"]);
 const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
-function isTrustedBindingUrl(raw, envAnchor) {
+const KEYCHAIN_PREFIX_RE = /^ai\.zivis(\.[a-z0-9-]{1,32})?$/;
+const CONFIG_DIR_RE = /^zivis(-[a-z0-9]{1,32})?$/;
+function isTrustedBindingUrl(raw, envAnchor, suffixes) {
     if (envAnchor && raw === envAnchor)
         return true;
     let parsed;
@@ -45,7 +48,9 @@ function isTrustedBindingUrl(raw, envAnchor) {
         return true;
     if (parsed.protocol !== "https:")
         return false;
-    return host === TRUSTED_BINDING_HOST || host.endsWith(TRUSTED_BINDING_HOST_SUFFIX);
+    if (TRUSTED_APEX_HOSTS.has(host))
+        return true;
+    return suffixes.some((s) => host.endsWith(s));
 }
 function describeHost(raw) {
     try {
@@ -57,22 +62,34 @@ function describeHost(raw) {
 }
 export function sanitizeBindingOverrides(binding, filePath) {
     const out = {};
-    const gate = (field, value, envName) => {
+    const warn = (field, shown, rule) => {
+        console.error(`[zivis] WARNING: ignoring untrusted "${field}" in ${filePath} (${shown}). ` +
+            `A repo binding may only set ${field} to ${rule}. Falling back to the configured/default value.`);
+    };
+    const gateUrl = (field, value, envName, suffixes) => {
+        if (!value)
+            return;
+        if (isTrustedBindingUrl(value, process.env[envName], suffixes)) {
+            out[field] = value;
+            return;
+        }
+        warn(field, `host: ${describeHost(value)}`, `https://zivis.ai, https://*${suffixes.join(" / https://*")}, localhost, or the exact value of ${envName}`);
+    };
+    const gateToken = (field, value, envName, re, ruleText) => {
         if (!value)
             return;
-        if (isTrustedBindingUrl(value, process.env[envName])) {
+        if (value === process.env[envName] || re.test(value)) {
             out[field] = value;
             return;
         }
-        console.error(`[zivis] WARNING: ignoring untrusted "${field}" in ${filePath} ` +
-            `(host: ${describeHost(value)}). A repo binding may only point at ` +
-            `https://*.zivis.ai, localhost, or the exact value of ${envName}. ` +
-            `Falling back to the configured/default host.`);
+        warn(field, `value: ${JSON.stringify(value)}`, `${ruleText} or the exact value of ${envName}`);
     };
-    gate("apiBaseUrl", binding.apiBaseUrl, "ZIVIS_API_URL");
-    gate("oauthApiUrl", binding.oauthApiUrl, "ZIVIS_OAUTH_API_URL");
+    gateUrl("apiBaseUrl", binding.apiBaseUrl, "ZIVIS_API_URL", TRUSTED_API_HOST_SUFFIXES);
+    gateUrl("oauthApiUrl", binding.oauthApiUrl, "ZIVIS_OAUTH_API_URL", TRUSTED_OAUTH_HOST_SUFFIXES);
     if (binding.oauthClientId)
         out.oauthClientId = binding.oauthClientId;
+    gateToken("keychainPrefix", binding.keychainPrefix, "ZIVIS_KEYCHAIN_PREFIX", KEYCHAIN_PREFIX_RE, "a name inside the ai.zivis.* namespace (e.g. ai.zivis.staging)");
+    gateToken("configDir", binding.configDir, "ZIVIS_CONFIG_DIR", CONFIG_DIR_RE, "a single directory name of the form zivis or zivis-<env> (e.g. zivis-staging)");
     return out;
 }
 export function resolveConfigFromBinding(cwd) {

package/dist/server.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { ApiClient } from "./api-client.js";
-import { resolveAuth } from "./auth/index.js";
+import { probeApiKeyOrg, resolveAuth } from "./auth/index.js";
 import { detectProjectBinding, resolveConfigFromBinding, resolveMcpSessionForWorkspace, validateProjectBinding, } from "./project-binding.js";
 import { DEFAULT_CONFIG } from "./types.js";
 async function validateApiKeyMatchesBinding(binding, config) {
@@ -15,26 +15,12 @@ async function validateApiKeyMatchesBinding(binding, config) {
         console.error("[zivis] INTERNAL: org verification skipped — no API key (session gate should have prevented this)");
         return;
     }
-    let response;
-    try {
-        response = await fetch(`${config.apiBaseUrl}/api/mcp/session`, {
-            headers: {
-                "X-API-Key": creds.apiKey,
-                "User-Agent": "@zivis/mcp",
-            },
-        });
-    }
-    catch (err) {
-        console.error(`[zivis] WARNING: Could not reach API to verify org (${err instanceof Error ? err.message : err})`);
-        return;
-    }
-    if (!response.ok) {
-        const body = await response.text().catch(() => "");
-        console.error(`[zivis] WARNING: API key org probe failed (${response.status}): ${body.slice(0, 200)}`);
+    const probe = await probeApiKeyOrg(config, creds.apiKey);
+    if (!probe.ok) {
+        console.error(`[zivis] WARNING: API key org probe failed: ${probe.error}`);
         return;
     }
-    const payload = (await response.json());
-    const resolved = payload.org?.workosOrgId;
+    const resolved = probe.workosOrgId;
     if (resolved !== binding.workosOrgId) {
         const orgLabel = binding.orgName ? ` (${binding.orgName})` : "";
         console.error("[zivis] SECURITY ERROR: API key org does not match project binding!");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zivis/mcp",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "ZIVIS MCP server — threat modeling, security scans, and AI red team tools for IDE integration",
   "license": "Apache-2.0",
   "homepage": "https://zivis.ai",
@@ -43,7 +43,6 @@
     "build:pattern-pack": "tsx ../scripts/build-pattern-pack.ts",
     "build": "tsc -p tsconfig.build.json && pnpm run build:pattern-pack && node scripts/ensure-symlink.cjs",
     "prepublishOnly": "rm -rf dist && pnpm run build",
-    "postpublish": "node -e \"const p=require('./package.json'); require('child_process').execSync('npm dist-tag add '+p.name+'@'+p.version+' latest',{stdio:'inherit'});\"",
     "dev": "tsc --watch",
     "start": "node dist/index.js",
     "test": "vitest run",