@zivis/mcp 0.1.18 → 0.1.19

package/dist/auth/index.d.ts

@@ -5,4 +5,11 @@ export { keychainStore, keychainRead, keychainDelete } from "./keychain.js";
 export { loadTokens } from "./token-refresh.js";
 export { loadSessionIndex, saveSessionEntry, removeSessionEntry, listSessions } from "./sessions.js";
 export declare function resolveAuth(config?: ZivisConfig, forceMethod?: AuthMethod): Promise<AuthCredentials>;
+export interface ApiKeyOrgProbe {
+    ok: boolean;
+    workosOrgId: string | null;
+    orgName?: string;
+    error?: string;
+}
+export declare function probeApiKeyOrg(config: ZivisConfig, apiKey: string): Promise<ApiKeyOrgProbe>;
 export declare function getAuthDescription(config?: ZivisConfig): Promise<string>;

package/dist/auth/index.js

@@ -39,6 +39,38 @@ export async function resolveAuth(config = DEFAULT_CONFIG, forceMethod) {
     }
     return { method: "none" };
 }
+export async function probeApiKeyOrg(config, apiKey) {
+    let response;
+    try {
+        response = await fetch(`${config.apiBaseUrl}/api/mcp/session`, {
+            headers: {
+                "X-API-Key": apiKey,
+                "User-Agent": "@zivis/mcp",
+            },
+        });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            workosOrgId: null,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        return {
+            ok: false,
+            workosOrgId: null,
+            error: `HTTP ${response.status}: ${body.slice(0, 200)}`,
+        };
+    }
+    const payload = (await response.json());
+    return {
+        ok: true,
+        workosOrgId: payload.org?.workosOrgId ?? null,
+        orgName: payload.org?.name,
+    };
+}
 export async function getAuthDescription(config = DEFAULT_CONFIG) {
     const creds = await resolveAuth(config);
     switch (creds.method) {

package/dist/pattern-packs/zivis-public-0.2.0/manifest.json

@@ -3,7 +3,7 @@
   "pack_id": "zivis-public",
   "pack_name": "ZIVIS Public Pattern Pack",
   "version": "0.2.0",
-  "built_at": "2026-09-08T21:17:47.708Z",
+  "built_at": "2026-09-10T20:35:21.881Z",
   "tier": "customer_safe",
   "description": "ZIVIS-curated public pattern pack — capsules + inference prompts evaluated locally on the user's machine.",
   "capsules": [

package/dist/server.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { ApiClient } from "./api-client.js";
-import { resolveAuth } from "./auth/index.js";
+import { probeApiKeyOrg, resolveAuth } from "./auth/index.js";
 import { detectProjectBinding, resolveConfigFromBinding, resolveMcpSessionForWorkspace, validateProjectBinding, } from "./project-binding.js";
 import { DEFAULT_CONFIG } from "./types.js";
 async function validateApiKeyMatchesBinding(binding, config) {
@@ -15,26 +15,12 @@ async function validateApiKeyMatchesBinding(binding, config) {
         console.error("[zivis] INTERNAL: org verification skipped — no API key (session gate should have prevented this)");
         return;
     }
-    let response;
-    try {
-        response = await fetch(`${config.apiBaseUrl}/api/mcp/session`, {
-            headers: {
-                "X-API-Key": creds.apiKey,
-                "User-Agent": "@zivis/mcp",
-            },
-        });
-    }
-    catch (err) {
-        console.error(`[zivis] WARNING: Could not reach API to verify org (${err instanceof Error ? err.message : err})`);
-        return;
-    }
-    if (!response.ok) {
-        const body = await response.text().catch(() => "");
-        console.error(`[zivis] WARNING: API key org probe failed (${response.status}): ${body.slice(0, 200)}`);
+    const probe = await probeApiKeyOrg(config, creds.apiKey);
+    if (!probe.ok) {
+        console.error(`[zivis] WARNING: API key org probe failed: ${probe.error}`);
         return;
     }
-    const payload = (await response.json());
-    const resolved = payload.org?.workosOrgId;
+    const resolved = probe.workosOrgId;
     if (resolved !== binding.workosOrgId) {
         const orgLabel = binding.orgName ? ` (${binding.orgName})` : "";
         console.error("[zivis] SECURITY ERROR: API key org does not match project binding!");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zivis/mcp",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "ZIVIS MCP server — threat modeling, security scans, and AI red team tools for IDE integration",
   "license": "Apache-2.0",
   "homepage": "https://zivis.ai",