@zivis/mcp 0.2.6 → 0.2.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
"pack_id": "zivis-public",
|
|
4
4
|
"pack_name": "ZIVIS Public Pattern Pack",
|
|
5
5
|
"version": "0.2.0",
|
|
6
|
-
"built_at": "2026-09-
|
|
6
|
+
"built_at": "2026-09-13T20:31:19.033Z",
|
|
7
7
|
"tier": "customer_safe",
|
|
8
8
|
"description": "ZIVIS-curated public pattern pack — capsules + inference prompts evaluated locally on the user's machine.",
|
|
9
9
|
"capsules": [
|
package/dist/tools/devx-run.js
CHANGED
|
@@ -97,9 +97,12 @@ const ItemArraySchema = z
|
|
|
97
97
|
export const RUN_SCHEMA = {
|
|
98
98
|
action: z.enum(["report", "complete", "cancel"]).describe("Which run-lifecycle operation to perform"),
|
|
99
99
|
run_id: z.string().min(1).describe("The runId returned by zivis_run_start. Must still be pending for report/complete."),
|
|
100
|
-
findings: ItemArraySchema.describe("Finding items — same shape as result.findings[] (title, severity, description, category, cweId, owaspId, disposition: 'open'|'fixed', ...). report only."),
|
|
100
|
+
findings: ItemArraySchema.describe("Finding items — same shape as result.findings[] (title, severity, description, category, cweId, owaspId, scopeId, local_key, disposition: 'open'|'fixed', ...). report only. ZIV-695: give a finding a `local_key` so an observation in the same batch can cite it via finding_refs."),
|
|
101
101
|
evidence: ItemArraySchema.describe("Evidence items — same shape as result.evidence[] (name, kind, content, description). report only."),
|
|
102
|
-
observations: ItemArraySchema.describe("Observation items — same shape as result.observations[] (test_id, scope_id, title, pack, target, executed, result, method,
|
|
102
|
+
observations: ItemArraySchema.describe("Observation items — same shape as result.observations[] (test_id, scope_id, title, pack, target, executed, result, method, finding_refs, evidence_refs, coverage_note). report only. " +
|
|
103
|
+
"ZIV-695: result='failed' MUST cite its proof via finding_refs: [{kind:'local',key:'<a findings[].local_key in this same batch>'}] or [{kind:'unified',id:'<a findingId a previous report returned>'}] — " +
|
|
104
|
+
"an uncited failure is recorded as 'inconclusive', which asserts nothing and moves no coverage. A co-submitted finding with a matching scopeId is linked for you. " +
|
|
105
|
+
"Check adjusted_observations in the response: anything reported 'downgraded' did NOT land as submitted."),
|
|
103
106
|
result: z
|
|
104
107
|
.record(z.string(), z.unknown())
|
|
105
108
|
.optional()
|
package/package.json
CHANGED