@chkp/policy-insights-mcp 0.3.8 → 0.4.1

package/dist/index.js

@@ -375,7 +375,7 @@ var toolDefinitionMap = [
       "properties": {}
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-card-info",
+    "pathTemplate": "/insights/v3.1/show-card-info",
     "parameters": [],
     "executionParameters": [],
     "securityRequirements": [],
@@ -384,22 +384,306 @@ var toolDefinitionMap = [
   },
   {
     "name": "ShowConfig",
-    "description": "Get user configuration and settings for Policy Insights product",
+    "description": "Get user configuration and settings for Policy Insights product\n\nResponse includes all configuration fields with their current value,\nwhether the value is overridden from default, and the default value.",
     "inputSchema": {
       "type": "object",
       "properties": {}
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-config",
+    "pathTemplate": "/insights/v3.1/show-config",
     "parameters": [],
     "executionParameters": [],
     "securityRequirements": [],
     "operationId": "ShowConfig",
     "baseUrl": ""
   },
+  {
+    "name": "ShowReportLayers",
+    "description": "Retrieve detailed layer information with suggestion counts and security metrics.\nSupports pagination, filtering, and sorting.\n\nResponse includes layer details such as:\n- Security score and total rules\n- Suggestion counts (all and top priority)\n- Associated policy packages\n- Custom icons and colors\n\nSupports text search and ordering by various fields.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "requestBody": {
+          "properties": {
+            "filters": {
+              "properties": {
+                "policy-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Policy identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "layer-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Layer identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "text": {
+                  "type": "string",
+                  "description": "Text string for searching or matching"
+                }
+              },
+              "type": "object"
+            },
+            "limit": {
+              "type": "number",
+              "format": "int32",
+              "description": "Maximum number of items to return"
+            },
+            "offset": {
+              "type": "number",
+              "format": "int32",
+              "description": "Number of items to skip for pagination"
+            },
+            "order": {
+              "items": {
+                "properties": {
+                  "ASC": {
+                    "type": "string",
+                    "description": "Sort order field name for ascending order"
+                  },
+                  "DESC": {
+                    "type": "string",
+                    "description": "Sort order field name for descending order"
+                  }
+                },
+                "type": "object"
+              },
+              "type": "array",
+              "description": "Array of order configurations for sorting results"
+            }
+          },
+          "type": "object",
+          "description": "The JSON request body."
+        }
+      },
+      "required": [
+        "requestBody"
+      ]
+    },
+    "method": "post",
+    "pathTemplate": "/insights/v3.1/show-report-layers",
+    "parameters": [],
+    "executionParameters": [],
+    "requestBodyContentType": "application/json",
+    "securityRequirements": [],
+    "operationId": "ShowReportLayers",
+    "baseUrl": ""
+  },
+  {
+    "name": "ShowReportStats",
+    "description": "Retrieve global statistics for the entire tenant.\nNo filters required - provides tenant-wide metrics.\n\nResponse includes:\n- Total rules and objects with recent changes\n- Log telemetry coverage (days and count)\n- Reporting server statistics\n- Total traffic logs analyzed\n\nUseful for executive dashboard and health monitoring.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "requestBody": {
+          "properties": {},
+          "type": "object",
+          "description": "The JSON request body."
+        }
+      },
+      "required": [
+        "requestBody"
+      ]
+    },
+    "method": "post",
+    "pathTemplate": "/insights/v3.1/show-report-stats",
+    "parameters": [],
+    "executionParameters": [],
+    "requestBodyContentType": "application/json",
+    "securityRequirements": [],
+    "operationId": "ShowReportStats",
+    "baseUrl": ""
+  },
+  {
+    "name": "ShowReportSuggestionCategories",
+    "description": "Retrieve suggestion categories report showing distribution of suggestions by type over time.\nProvides insights into which types of suggestions are being generated.\n\nResponse includes both 'all' suggestions and 'top' priority suggestions,\nbroken down by category (unused-objects, tighten-rule, etc.) per day.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "requestBody": {
+          "properties": {
+            "filters": {
+              "properties": {
+                "policy-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Policy identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "layer-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Layer identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "suggestion-type": {
+                  "description": "Type of insight",
+                  "enum": [
+                    "unused-objects",
+                    "tighten-rule",
+                    "delete-disabled-rule",
+                    "zero-hits-rule"
+                  ],
+                  "type": "string",
+                  "x-enum-varnames": [
+                    "UnusedObjects",
+                    "TightenRule",
+                    "DeleteDisabledRule",
+                    "ZeroHitsRule"
+                  ]
+                },
+                "start-date": {
+                  "type": "string",
+                  "description": "Timestamp when the operation started"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "type": "object",
+          "description": "The JSON request body."
+        }
+      },
+      "required": [
+        "requestBody"
+      ]
+    },
+    "method": "post",
+    "pathTemplate": "/insights/v3.1/show-report-suggestion-categories",
+    "parameters": [],
+    "executionParameters": [],
+    "requestBodyContentType": "application/json",
+    "securityRequirements": [],
+    "operationId": "ShowReportSuggestionCategories",
+    "baseUrl": ""
+  },
+  {
+    "name": "ShowReportSummary",
+    "description": "Retrieve summary statistics for policy insights reporting.\nProvides high-level metrics including top insights, total insights, and security scores.\n\nCan be filtered by policy or layer to show specific scope.\nIncludes count of suggestions marked as 'decide later'.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "requestBody": {
+          "properties": {
+            "filters": {
+              "properties": {
+                "policy-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Policy identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "layer-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Layer identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "suggestion-type": {
+                  "description": "Type of insight",
+                  "enum": [
+                    "unused-objects",
+                    "tighten-rule",
+                    "delete-disabled-rule",
+                    "zero-hits-rule"
+                  ],
+                  "type": "string",
+                  "x-enum-varnames": [
+                    "UnusedObjects",
+                    "TightenRule",
+                    "DeleteDisabledRule",
+                    "ZeroHitsRule"
+                  ]
+                }
+              },
+              "type": "object"
+            }
+          },
+          "type": "object",
+          "description": "The JSON request body."
+        }
+      },
+      "required": [
+        "requestBody"
+      ]
+    },
+    "method": "post",
+    "pathTemplate": "/insights/v3.1/show-report-summary",
+    "parameters": [],
+    "executionParameters": [],
+    "requestBodyContentType": "application/json",
+    "securityRequirements": [],
+    "operationId": "ShowReportSummary",
+    "baseUrl": ""
+  },
+  {
+    "name": "ShowReportUserActions",
+    "description": "Retrieve user actions report showing accepted and rejected suggestions over time.\nProvides historical data for tracking user engagement with suggestions.\n\nResponse includes daily breakdown of accepted vs rejected suggestions,\nfiltered by policy, layer, suggestion type, and date range.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "requestBody": {
+          "properties": {
+            "filters": {
+              "properties": {
+                "policy-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Policy identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "layer-id": {
+                  "type": "string",
+                  "format": "uuid",
+                  "description": "Layer identifier associated with the event",
+                  "pattern": "^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
+                },
+                "suggestion-type": {
+                  "description": "Type of insight",
+                  "enum": [
+                    "unused-objects",
+                    "tighten-rule",
+                    "delete-disabled-rule",
+                    "zero-hits-rule"
+                  ],
+                  "type": "string",
+                  "x-enum-varnames": [
+                    "UnusedObjects",
+                    "TightenRule",
+                    "DeleteDisabledRule",
+                    "ZeroHitsRule"
+                  ]
+                },
+                "start-date": {
+                  "type": "string",
+                  "description": "Timestamp when the operation started"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "type": "object",
+          "description": "The JSON request body."
+        }
+      },
+      "required": [
+        "requestBody"
+      ]
+    },
+    "method": "post",
+    "pathTemplate": "/insights/v3.1/show-report-user-actions",
+    "parameters": [],
+    "executionParameters": [],
+    "requestBodyContentType": "application/json",
+    "securityRequirements": [],
+    "operationId": "ShowReportUserActions",
+    "baseUrl": ""
+  },
   {
     "name": "ShowRulesUidsWithSuggestions",
-    "description": "Retrieve rule UIDs that have suggestions for a specific suggestion type using the required layer UID\nEnhanced to show both direct suggestions and inline layer suggestions",
+    "description": "Retrieve rule UIDs that have suggestions for a specific suggestion type using the required layer UID.\nEnhanced to show both direct suggestions and inline layer suggestions.\nSupports filtering by suggestion creation time using start-date (ISO 8601 format).",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -516,6 +800,11 @@ var toolDefinitionMap = [
                     "DeleteDisabledRule",
                     "ZeroHitsRule"
                   ]
+                },
+                "start-date": {
+                  "type": "string",
+                  "description": "Timestamp when the suggestion was created",
+                  "format": "date-time"
                 }
               },
               "required": [
@@ -537,7 +826,7 @@ var toolDefinitionMap = [
       ]
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-rules-uids-with-suggestions",
+    "pathTemplate": "/insights/v3.1/show-rules-uids-with-suggestions",
     "parameters": [],
     "executionParameters": [],
     "requestBodyContentType": "application/json",
@@ -553,7 +842,7 @@ var toolDefinitionMap = [
       "properties": {}
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-state",
+    "pathTemplate": "/insights/v3.1/show-state",
     "parameters": [],
     "executionParameters": [],
     "securityRequirements": [],
@@ -599,7 +888,7 @@ var toolDefinitionMap = [
       ]
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-suggestion-engine-metadata",
+    "pathTemplate": "/insights/v3.1/show-suggestion-engine-metadata",
     "parameters": [],
     "executionParameters": [],
     "requestBodyContentType": "application/json",
@@ -609,7 +898,7 @@ var toolDefinitionMap = [
   },
   {
     "name": "ShowSuggestions",
-    "description": 'Retrieve all suggestions with advanced filtering capabilities.\nIncludes suggestions from all inline layers.\nExcludes rejected/accepted suggestions by default.\n\nRequired Parameters:\n- Must provide either "layer" OR "filters.rules-uids" OR "filters.uids"\n- Cannot retrieve suggestions without specifying at least one of these targeting parameters',
+    "description": 'Retrieve all suggestions with advanced filtering capabilities.\nIncludes suggestions from all inline layers.\nExcludes rejected/accepted suggestions by default.\nSupports filtering by suggestion creation time using start-date (ISO 8601 format).\n\nRequired Parameters:\n- Must provide either "layer" OR "filters.rules-uids" OR "filters.uids"\n- Cannot retrieve suggestions without specifying at least one of these targeting parameters',
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -769,13 +1058,18 @@ var toolDefinitionMap = [
                   },
                   "type": "array",
                   "description": "Type of insight"
+                },
+                "start-date": {
+                  "type": "string",
+                  "description": "Timestamp when the suggestion was created",
+                  "format": "date-time"
                 }
               },
               "type": "object"
             }
           },
           "type": "object",
-          "description": "Parameters for showing suggestions with enhanced v3.0 capabilities"
+          "description": "Parameters for showing suggestions with v3.1 capabilities"
         }
       },
       "required": [
@@ -783,7 +1077,7 @@ var toolDefinitionMap = [
       ]
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-suggestions",
+    "pathTemplate": "/insights/v3.1/show-suggestions",
     "parameters": [],
     "executionParameters": [],
     "requestBodyContentType": "application/json",
@@ -818,7 +1112,7 @@ var toolDefinitionMap = [
       ]
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-suggestions-info",
+    "pathTemplate": "/insights/v3.1/show-suggestions-info",
     "parameters": [],
     "executionParameters": [],
     "requestBodyContentType": "application/json",
@@ -828,7 +1122,7 @@ var toolDefinitionMap = [
   },
   {
     "name": "ShowSuggestionsSummary",
-    "description": "Retrieve number of rule suggestions grouped by their type.\nProvides generation batch metadata about the current suggestions we see: how many days of traffic logs were analyzed, on which publish timestamp the suggestions are based on.",
+    "description": "Retrieve number of rule suggestions grouped by their type.\nProvides generation batch metadata about the current suggestions we see: how many days of traffic logs\nwere analyzed, on which publish timestamp the suggestions are based on.\nSupports filtering by suggestion creation time using start-date (ISO 8601 format).",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -929,6 +1223,11 @@ var toolDefinitionMap = [
                     "NONE"
                   ],
                   "description": "Ignore default filtering of the system"
+                },
+                "start-date": {
+                  "type": "string",
+                  "description": "Timestamp when the suggestion was created",
+                  "format": "date-time"
                 }
               },
               "type": "object"
@@ -943,7 +1242,7 @@ var toolDefinitionMap = [
       ]
     },
     "method": "post",
-    "pathTemplate": "/insights/v3.0/show-suggestions-summary",
+    "pathTemplate": "/insights/v3.1/show-suggestions-summary",
     "parameters": [],
     "executionParameters": [],
     "requestBodyContentType": "application/json",
@@ -953,7 +1252,7 @@ var toolDefinitionMap = [
   },
   {
     "name": "ShowPolicyInsightsStatus",
-    "description": "Shows Policy Insights status, reflecting the overall status of the product including supported API versions.\nReturns both Insights API versions and Threat Prevention Insights API versions when Threat Prevention is enabled.\nMay also include license status information if available.\nA license is required to activate the product, and the status provides details about the validity and expiration of the product license.",
+    "description": "Shows Policy Insights status, reflecting the overall status of the product including supported API versions.\nReturns both Insights API versions and Threat Prevention Insights API versions when Threat Prevention is enabled.\nMay also include license status information if available.\nA license is required to activate the product, and the status provides details about the validity and expiration of the product license.\nMay return status messages providing additional context about the product status, such as activation progress.",
     "inputSchema": {
       "type": "object",
       "properties": {}
@@ -1472,6 +1771,70 @@ var SettingsManager = class _SettingsManager {
 };
 SettingsManager.globalDebugState = void 0;
 
+// ../mcp-utils/dist/telemetry.js
+import machineIdPkg from "node-machine-id";
+import { createHash } from "crypto";
+var { machineIdSync } = machineIdPkg;
+var machineId = null;
+var hashedMachineId = null;
+var transportType = "stdio";
+function setTransportType(type) {
+  transportType = type;
+}
+function isTelemetryDisabled() {
+  return process.env.TELEMETRY_DISABLED === "true" || process.env.TELEMETRY_DISABLED === "1";
+}
+function getTelemetryUrl() {
+  return process.env.TELEMETRY_URL || "https://metrics.security.ai.checkpoint.com/api/v1/metrics/collect";
+}
+function hashString(input) {
+  return createHash("sha256").update(input).digest("hex");
+}
+function getMachineId() {
+  if (!machineId) {
+    try {
+      machineId = machineIdSync();
+    } catch (error) {
+      console.warn("Failed to get machine ID for telemetry:", error);
+      machineId = "unknown";
+    }
+  }
+  return machineId;
+}
+function getHashedMachineId() {
+  if (!hashedMachineId) {
+    hashedMachineId = hashString(getMachineId());
+  }
+  return hashedMachineId;
+}
+function calculateChecksum(mcpName, toolName, machineId2, clientVersion) {
+  const data = mcpName + machineId2.slice(0, 16) + toolName + clientVersion;
+  return hashString(data);
+}
+async function trackToolCall(mcpName, toolName, clientVersion, extra) {
+  if (isTelemetryDisabled()) {
+    return;
+  }
+  try {
+    const machineId2 = getHashedMachineId();
+    const checksum = calculateChecksum(mcpName, toolName, machineId2, clientVersion);
+    fetch(getTelemetryUrl(), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        mcp_name: mcpName,
+        tool_name: toolName,
+        machine_id: machineId2,
+        client_version: clientVersion,
+        transport_type: transportType,
+        checksum
+      })
+    }).catch(() => {
+    });
+  } catch (error) {
+  }
+}
+
 // ../mcp-utils/dist/launcher.js
 async function launchMCPServer(configPath, serverModule2) {
   const config = JSON.parse(fs.readFileSync(configPath, "utf8"));
@@ -1515,11 +1878,13 @@ async function launchMCPServer(configPath, serverModule2) {
     console.error("[launchMCPServer] Applying tool policy before connecting");
     serverModule2.server.applyToolPolicy();
   }
-  const transportType = (options.transport || process.env.MCP_TRANSPORT_TYPE || "stdio").toLowerCase() === "http" ? "http" : "stdio";
+  const transportType2 = (options.transport || process.env.MCP_TRANSPORT_TYPE || "stdio").toLowerCase() === "http" ? "http" : "stdio";
   const transportPort = options.transportPort ? parseInt(options.transportPort, 10) : process.env.MCP_TRANSPORT_PORT ? parseInt(process.env.MCP_TRANSPORT_PORT, 10) : 3e3;
-  if (transportType === "http") {
+  if (transportType2 === "http") {
+    setTransportType("http");
     await launchHTTPServer(config, serverModule2, transportPort);
   } else {
+    setTransportType("stdio");
     const transport = new StdioServerTransport();
     const defaultSessionId = "default";
     const sessionMetadata = {
@@ -2291,65 +2656,6 @@ function createServerModule(server2, Settings2, pkg2, apiManagerClass, toolPolic
 // ../mcp-utils/dist/index.js
 init_ui_dialog();
 
-// ../mcp-utils/dist/telemetry.js
-import machineIdPkg from "node-machine-id";
-import { createHash } from "crypto";
-var { machineIdSync } = machineIdPkg;
-var machineId = null;
-var hashedMachineId = null;
-function isTelemetryDisabled() {
-  return process.env.TELEMETRY_DISABLED === "true" || process.env.TELEMETRY_DISABLED === "1";
-}
-function getTelemetryUrl() {
-  return process.env.TELEMETRY_URL || "https://metrics.security.ai.checkpoint.com/api/v1/metrics/collect";
-}
-function hashString(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-function getMachineId() {
-  if (!machineId) {
-    try {
-      machineId = machineIdSync();
-    } catch (error) {
-      console.warn("Failed to get machine ID for telemetry:", error);
-      machineId = "unknown";
-    }
-  }
-  return machineId;
-}
-function getHashedMachineId() {
-  if (!hashedMachineId) {
-    hashedMachineId = hashString(getMachineId());
-  }
-  return hashedMachineId;
-}
-function calculateChecksum(mcpName, toolName, machineId2, clientVersion) {
-  const data = mcpName + machineId2.slice(0, 16) + toolName + clientVersion;
-  return hashString(data);
-}
-async function trackToolCall(mcpName, toolName, clientVersion, extra) {
-  if (isTelemetryDisabled()) {
-    return;
-  }
-  try {
-    const machineId2 = getHashedMachineId();
-    const checksum = calculateChecksum(mcpName, toolName, machineId2, clientVersion);
-    fetch(getTelemetryUrl(), {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        mcp_name: mcpName,
-        tool_name: toolName,
-        machine_id: machineId2,
-        client_version: clientVersion,
-        checksum
-      })
-    }).catch(() => {
-    });
-  } catch (error) {
-  }
-}
-
 // ../mcp-utils/dist/mcp-server.js
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 var CPMcpServer = class extends McpServer {
@@ -3228,12 +3534,17 @@ import { z } from "zod";
 var zodSchemas = {
   ShowCardInfo: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional() },
   ShowConfig: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional() },
-  ShowRulesUidsWithSuggestions: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format"), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional(), "suggestions-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight") }) }).describe("Parameters for showing rules UIDs with their suggestions") },
+  ShowReportLayers: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "filters": z.object({ "policy-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Policy identifier associated with the event").optional(), "layer-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Layer identifier associated with the event").optional(), "text": z.string().describe("Text string for searching or matching").optional() }).optional(), "limit": z.number().describe("Maximum number of items to return").optional(), "offset": z.number().describe("Number of items to skip for pagination").optional(), "order": z.array(z.object({ "ASC": z.string().describe("Sort order field name for ascending order").optional(), "DESC": z.string().describe("Sort order field name for descending order").optional() })).describe("Array of order configurations for sorting results").optional() }).describe("The JSON request body.") },
+  ShowReportStats: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({}).describe("The JSON request body.") },
+  ShowReportSuggestionCategories: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "filters": z.object({ "policy-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Policy identifier associated with the event").optional(), "layer-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Layer identifier associated with the event").optional(), "suggestion-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight").optional(), "start-date": z.string().describe("Timestamp when the operation started").optional() }).optional() }).describe("The JSON request body.") },
+  ShowReportSummary: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "filters": z.object({ "policy-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Policy identifier associated with the event").optional(), "layer-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Layer identifier associated with the event").optional(), "suggestion-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight").optional() }).optional() }).describe("The JSON request body.") },
+  ShowReportUserActions: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "filters": z.object({ "policy-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Policy identifier associated with the event").optional(), "layer-id": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Layer identifier associated with the event").optional(), "suggestion-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight").optional(), "start-date": z.string().describe("Timestamp when the operation started").optional() }).optional() }).describe("The JSON request body.") },
+  ShowRulesUidsWithSuggestions: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format"), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional(), "suggestions-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight"), "start-date": z.string().datetime({ offset: true }).describe("Timestamp when the suggestion was created").optional() }) }).describe("Parameters for showing rules UIDs with their suggestions") },
   ShowState: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional() },
   ShowSuggestionEngineMetadata: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "filters": z.object({ "suggestion-type": z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight").optional() }).optional() }).describe("The JSON request body.") },
-  ShowSuggestions: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format").optional(), "options": z.object({ "include-inline-layers": z.boolean().describe("Whether to include insights on inline layers").optional() }).optional(), "limit": z.number().describe("Maximum number of items to return").optional(), "offset": z.number().describe("Number of items to skip for pagination").optional(), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional(), "uids": z.array(z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Stringified UUID.")).describe("Array of insight unique identifiers").optional(), "rules-uids": z.array(z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Stringified UUID.")).describe("Array of rule unique identifiers").optional(), "types": z.array(z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight")).describe("Type of insight").optional() }).optional() }).describe("Parameters for showing suggestions with enhanced v3.0 capabilities") },
+  ShowSuggestions: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format").optional(), "options": z.object({ "include-inline-layers": z.boolean().describe("Whether to include insights on inline layers").optional() }).optional(), "limit": z.number().describe("Maximum number of items to return").optional(), "offset": z.number().describe("Number of items to skip for pagination").optional(), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional(), "uids": z.array(z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Stringified UUID.")).describe("Array of insight unique identifiers").optional(), "rules-uids": z.array(z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Stringified UUID.")).describe("Array of rule unique identifiers").optional(), "types": z.array(z.enum(["unused-objects", "tighten-rule", "delete-disabled-rule", "zero-hits-rule"]).describe("Type of insight")).describe("Type of insight").optional(), "start-date": z.string().datetime({ offset: true }).describe("Timestamp when the suggestion was created").optional() }).optional() }).describe("Parameters for showing suggestions with v3.1 capabilities") },
   ShowSuggestionsInfo: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format") }).describe("The JSON request body.") },
-  ShowSuggestionsSummary: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format").optional(), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional() }).optional() }).describe("Parameters for showing suggestions summary") },
+  ShowSuggestionsSummary: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional(), "requestBody": z.object({ "layer": z.string().uuid().regex(new RegExp("^[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$")).describe("Access layer identifier in UUID format").optional(), "filters": z.object({ "states": z.array(z.enum(["ACCEPTED", "REJECTED"]).describe("State of a suggestion - either ACCEPTED or REJECTED")).describe("Array of insight state values").optional(), "user-interaction": z.object({ "operator": z.enum(["NOT-IN", "IN"]).describe("Operator for filtering by user-interaction-types").optional(), "types": z.array(z.literal("DECIDE_LATER").describe("Type of user interaction with an insight")).describe("Array of user interaction type values") }).optional(), "security-impact": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum security impact threshold to include").optional(), "confidence-level": z.enum(["HIGH", "MEDIUM_AND_ABOVE", "LOW_AND_ABOVE"]).describe("Minimum confidence threshold to include").optional(), "default-filter": z.literal("NONE").describe("Ignore default filtering of the system").optional(), "start-date": z.string().datetime({ offset: true }).describe("Timestamp when the suggestion was created").optional() }).optional() }).describe("Parameters for showing suggestions summary") },
   ShowPolicyInsightsStatus: { domain: z.string().optional(), domains_to_process: z.enum(["ALL_DOMAINS_ON_THIS_SERVER", "CURRENT_DOMAIN"]).optional() }
 };
 

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chkp/policy-insights-mcp",
-  "version": "0.3.8",
+  "version": "0.4.1",
   "bin": {
     "policy-insights-mcp": "dist/index.js"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chkp/policy-insights-mcp",
-  "version": "0.3.8",
+  "version": "0.4.1",
   "bin": {
     "policy-insights-mcp": "dist/index.js"
   },

package/package.json.bak

@@ -1,6 +1,6 @@
 {
   "name": "@chkp/policy-insights-mcp",
-  "version": "0.3.8",
+  "version": "0.4.1",
   "bin": {
     "policy-insights-mcp": "dist/index.js"
   },