@superblocksteam/mcp-server 2.0.156-next.3 → 2.0.156
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -2
- package/dist/tools/create-integration.d.ts +0 -7
- package/dist/tools/create-integration.d.ts.map +1 -1
- package/dist/tools/create-integration.js +3 -47
- package/dist/tools/create-integration.js.map +1 -1
- package/dist/tools/index.d.ts.map +1 -1
- package/dist/tools/index.js +0 -24
- package/dist/tools/index.js.map +1 -1
- package/dist/tools/schemas.d.ts +0 -12
- package/dist/tools/schemas.d.ts.map +1 -1
- package/dist/tools/schemas.js +2 -307
- package/dist/tools/schemas.js.map +1 -1
- package/dist/tools/server-api.d.ts +1 -1
- package/dist/tools/server-api.d.ts.map +1 -1
- package/dist/tools/server-api.js +1 -8
- package/dist/tools/server-api.js.map +1 -1
- package/package.json +5 -6
- package/dist/tools/datasource-configuration-by-type.schema.json +0 -2619
- package/dist/tools/get-application-policy-run-findings.d.ts +0 -3
- package/dist/tools/get-application-policy-run-findings.d.ts.map +0 -1
- package/dist/tools/get-application-policy-run-findings.js +0 -62
- package/dist/tools/get-application-policy-run-findings.js.map +0 -1
- package/dist/tools/get-application-publish-pipeline.d.ts +0 -3
- package/dist/tools/get-application-publish-pipeline.d.ts.map +0 -1
- package/dist/tools/get-application-publish-pipeline.js +0 -47
- package/dist/tools/get-application-publish-pipeline.js.map +0 -1
- package/dist/tools/get-application-publish-readiness.d.ts +0 -3
- package/dist/tools/get-application-publish-readiness.d.ts.map +0 -1
- package/dist/tools/get-application-publish-readiness.js +0 -47
- package/dist/tools/get-application-publish-readiness.js.map +0 -1
- package/dist/tools/get-dependency-scan-summary.d.ts +0 -3
- package/dist/tools/get-dependency-scan-summary.d.ts.map +0 -1
- package/dist/tools/get-dependency-scan-summary.js +0 -42
- package/dist/tools/get-dependency-scan-summary.js.map +0 -1
- package/dist/tools/get-integration-config-schema.d.ts +0 -3
- package/dist/tools/get-integration-config-schema.d.ts.map +0 -1
- package/dist/tools/get-integration-config-schema.js +0 -34
- package/dist/tools/get-integration-config-schema.js.map +0 -1
- package/dist/tools/get-review-policy-run-report.d.ts +0 -3
- package/dist/tools/get-review-policy-run-report.d.ts.map +0 -1
- package/dist/tools/get-review-policy-run-report.js +0 -60
- package/dist/tools/get-review-policy-run-report.js.map +0 -1
- package/dist/tools/get-review-policy-summary.d.ts +0 -3
- package/dist/tools/get-review-policy-summary.d.ts.map +0 -1
- package/dist/tools/get-review-policy-summary.js +0 -47
- package/dist/tools/get-review-policy-summary.js.map +0 -1
- package/dist/tools/get-review-policy.d.ts +0 -3
- package/dist/tools/get-review-policy.d.ts.map +0 -1
- package/dist/tools/get-review-policy.js +0 -43
- package/dist/tools/get-review-policy.js.map +0 -1
- package/dist/tools/list-dependency-scan-findings.d.ts +0 -3
- package/dist/tools/list-dependency-scan-findings.d.ts.map +0 -1
- package/dist/tools/list-dependency-scan-findings.js +0 -69
- package/dist/tools/list-dependency-scan-findings.js.map +0 -1
- package/dist/tools/list-review-policies.d.ts +0 -3
- package/dist/tools/list-review-policies.d.ts.map +0 -1
- package/dist/tools/list-review-policies.js +0 -42
- package/dist/tools/list-review-policies.js.map +0 -1
- package/dist/tools/list-review-policy-runs.d.ts +0 -3
- package/dist/tools/list-review-policy-runs.d.ts.map +0 -1
- package/dist/tools/list-review-policy-runs.js +0 -80
- package/dist/tools/list-review-policy-runs.js.map +0 -1
- package/dist/tools/lookup-package-vulnerabilities.d.ts +0 -3
- package/dist/tools/lookup-package-vulnerabilities.d.ts.map +0 -1
- package/dist/tools/lookup-package-vulnerabilities.js +0 -57
- package/dist/tools/lookup-package-vulnerabilities.js.map +0 -1
- package/dist/tools/plugin-configuration-schema.d.ts +0 -3
- package/dist/tools/plugin-configuration-schema.d.ts.map +0 -1
- package/dist/tools/plugin-configuration-schema.js +0 -95
- package/dist/tools/plugin-configuration-schema.js.map +0 -1
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-policy-run-findings.d.ts","sourceRoot":"","sources":["../../src/tools/get-application-policy-run-findings.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAuBpD,eAAO,MAAM,+BAA+B,EAAE,cAyC7C,CAAC"}
|
|
@@ -1,62 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT, REVIEW_FINDING_SEVERITIES, } from "@superblocksteam/shared";
|
|
3
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
4
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
5
|
-
import * as schemas from "./schemas.js";
|
|
6
|
-
import { callServerApi } from "./server-api.js";
|
|
7
|
-
import { parseToolInput } from "./validation.js";
|
|
8
|
-
const getApplicationPolicyRunFindingsInputSchema = z
|
|
9
|
-
.object({
|
|
10
|
-
base_url: z.url(),
|
|
11
|
-
application_id: z.uuid(),
|
|
12
|
-
run_id: z.uuid(),
|
|
13
|
-
policy_id: z.uuid(),
|
|
14
|
-
severity: z.array(z.enum(REVIEW_FINDING_SEVERITIES)).min(1).optional(),
|
|
15
|
-
order: z.enum(["asc", "desc"]).optional(),
|
|
16
|
-
limit: z
|
|
17
|
-
.number()
|
|
18
|
-
.int()
|
|
19
|
-
.min(1)
|
|
20
|
-
.max(MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT)
|
|
21
|
-
.optional(),
|
|
22
|
-
offset: z.number().int().min(0).optional(),
|
|
23
|
-
})
|
|
24
|
-
.strict();
|
|
25
|
-
export const getApplicationPolicyRunFindings = {
|
|
26
|
-
name: "get_application_policy_run_findings",
|
|
27
|
-
title: "Get Application Policy Run Findings",
|
|
28
|
-
description: "Get the app-scoped, paginated findings for one policy agent run on a specific application (the publish tab's findings table).",
|
|
29
|
-
inputSchema: schemas.getApplicationPolicyRunFindingsToolInputSchema,
|
|
30
|
-
annotations: {
|
|
31
|
-
readOnlyHint: true,
|
|
32
|
-
destructiveHint: false,
|
|
33
|
-
idempotentHint: true,
|
|
34
|
-
openWorldHint: true,
|
|
35
|
-
},
|
|
36
|
-
audience: "customer",
|
|
37
|
-
async handler(args) {
|
|
38
|
-
const input = parseToolInput(getApplicationPolicyRunFindingsInputSchema, args);
|
|
39
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
40
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
41
|
-
const data = await callServerApi({
|
|
42
|
-
baseUrl,
|
|
43
|
-
token: auth.token,
|
|
44
|
-
method: "GET",
|
|
45
|
-
path: `/api/v2/applications/${input.application_id}/policy-runs/${input.run_id}/findings`,
|
|
46
|
-
query: {
|
|
47
|
-
policyId: input.policy_id,
|
|
48
|
-
severity: input.severity,
|
|
49
|
-
order: input.order,
|
|
50
|
-
limit: input.limit,
|
|
51
|
-
offset: input.offset,
|
|
52
|
-
},
|
|
53
|
-
});
|
|
54
|
-
return {
|
|
55
|
-
result: data,
|
|
56
|
-
auth_source: auth.source,
|
|
57
|
-
base_url: baseUrl,
|
|
58
|
-
environment: detectEnvironment(baseUrl),
|
|
59
|
-
};
|
|
60
|
-
},
|
|
61
|
-
};
|
|
62
|
-
//# sourceMappingURL=get-application-policy-run-findings.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-policy-run-findings.js","sourceRoot":"","sources":["../../src/tools/get-application-policy-run-findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,0CAA0C,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,oCAAoC,CAAC;SACzC,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAmB;IAC7D,IAAI,EAAE,qCAAqC;IAC3C,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EACT,+HAA+H;IACjI,WAAW,EAAE,OAAO,CAAC,8CAA8C;IACnE,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAC1B,0CAA0C,EAC1C,IAAI,CACL,CAAC;QACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,wBAAwB,KAAK,CAAC,cAAc,gBAAgB,KAAK,CAAC,MAAM,WAAW;YACzF,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,SAAS;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-publish-pipeline.d.ts","sourceRoot":"","sources":["../../src/tools/get-application-publish-pipeline.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,eAAO,MAAM,6BAA6B,EAAE,cAqC3C,CAAC"}
|
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
3
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
4
|
-
import * as schemas from "./schemas.js";
|
|
5
|
-
import { callServerApi } from "./server-api.js";
|
|
6
|
-
import { parseToolInput } from "./validation.js";
|
|
7
|
-
const getApplicationPublishPipelineInputSchema = z
|
|
8
|
-
.object({
|
|
9
|
-
base_url: z.url(),
|
|
10
|
-
application_id: z.uuid(),
|
|
11
|
-
commit_id: z.string().trim().min(1),
|
|
12
|
-
})
|
|
13
|
-
.strict();
|
|
14
|
-
export const getApplicationPublishPipeline = {
|
|
15
|
-
name: "get_application_publish_pipeline",
|
|
16
|
-
title: "Get Application Publish Pipeline",
|
|
17
|
-
description: "Get the status-only publish plan for one application commit: the ordered steps (build, policy checks, lifecycle, deploy) that publishing would run, without starting anything.",
|
|
18
|
-
inputSchema: schemas.getApplicationPublishPipelineToolInputSchema,
|
|
19
|
-
annotations: {
|
|
20
|
-
readOnlyHint: true,
|
|
21
|
-
destructiveHint: false,
|
|
22
|
-
idempotentHint: true,
|
|
23
|
-
openWorldHint: true,
|
|
24
|
-
},
|
|
25
|
-
audience: "customer",
|
|
26
|
-
async handler(args) {
|
|
27
|
-
const input = parseToolInput(getApplicationPublishPipelineInputSchema, args);
|
|
28
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
29
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
30
|
-
const data = await callServerApi({
|
|
31
|
-
baseUrl,
|
|
32
|
-
token: auth.token,
|
|
33
|
-
method: "GET",
|
|
34
|
-
path: `/api/v2/applications/${input.application_id}/publish-pipeline`,
|
|
35
|
-
query: {
|
|
36
|
-
commitId: input.commit_id,
|
|
37
|
-
},
|
|
38
|
-
});
|
|
39
|
-
return {
|
|
40
|
-
result: data,
|
|
41
|
-
auth_source: auth.source,
|
|
42
|
-
base_url: baseUrl,
|
|
43
|
-
environment: detectEnvironment(baseUrl),
|
|
44
|
-
};
|
|
45
|
-
},
|
|
46
|
-
};
|
|
47
|
-
//# sourceMappingURL=get-application-publish-pipeline.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-publish-pipeline.js","sourceRoot":"","sources":["../../src/tools/get-application-publish-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,wCAAwC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAmB;IAC3D,IAAI,EAAE,kCAAkC;IACxC,KAAK,EAAE,kCAAkC;IACzC,WAAW,EACT,gLAAgL;IAClL,WAAW,EAAE,OAAO,CAAC,4CAA4C;IACjE,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAC1B,wCAAwC,EACxC,IAAI,CACL,CAAC;QACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,wBAAwB,KAAK,CAAC,cAAc,mBAAmB;YACrE,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,SAAS;aAC1B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-publish-readiness.d.ts","sourceRoot":"","sources":["../../src/tools/get-application-publish-readiness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,eAAO,MAAM,8BAA8B,EAAE,cAqC5C,CAAC"}
|
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
3
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
4
|
-
import * as schemas from "./schemas.js";
|
|
5
|
-
import { callServerApi } from "./server-api.js";
|
|
6
|
-
import { parseToolInput } from "./validation.js";
|
|
7
|
-
const getApplicationPublishReadinessInputSchema = z
|
|
8
|
-
.object({
|
|
9
|
-
base_url: z.url(),
|
|
10
|
-
application_id: z.uuid(),
|
|
11
|
-
commit_id: z.string().trim().min(1),
|
|
12
|
-
})
|
|
13
|
-
.strict();
|
|
14
|
-
export const getApplicationPublishReadiness = {
|
|
15
|
-
name: "get_application_publish_readiness",
|
|
16
|
-
title: "Get Application Publish Readiness",
|
|
17
|
-
description: "Get the policy-gate publish readiness for one application commit: which policy checks are required, their live status, and whether the commit is ready to publish.",
|
|
18
|
-
inputSchema: schemas.getApplicationPublishReadinessToolInputSchema,
|
|
19
|
-
annotations: {
|
|
20
|
-
readOnlyHint: true,
|
|
21
|
-
destructiveHint: false,
|
|
22
|
-
idempotentHint: true,
|
|
23
|
-
openWorldHint: true,
|
|
24
|
-
},
|
|
25
|
-
audience: "customer",
|
|
26
|
-
async handler(args) {
|
|
27
|
-
const input = parseToolInput(getApplicationPublishReadinessInputSchema, args);
|
|
28
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
29
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
30
|
-
const data = await callServerApi({
|
|
31
|
-
baseUrl,
|
|
32
|
-
token: auth.token,
|
|
33
|
-
method: "GET",
|
|
34
|
-
path: `/api/v2/applications/${input.application_id}/publish-readiness`,
|
|
35
|
-
query: {
|
|
36
|
-
commitId: input.commit_id,
|
|
37
|
-
},
|
|
38
|
-
});
|
|
39
|
-
return {
|
|
40
|
-
result: data,
|
|
41
|
-
auth_source: auth.source,
|
|
42
|
-
base_url: baseUrl,
|
|
43
|
-
environment: detectEnvironment(baseUrl),
|
|
44
|
-
};
|
|
45
|
-
},
|
|
46
|
-
};
|
|
47
|
-
//# sourceMappingURL=get-application-publish-readiness.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-publish-readiness.js","sourceRoot":"","sources":["../../src/tools/get-application-publish-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,yCAAyC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAmB;IAC5D,IAAI,EAAE,mCAAmC;IACzC,KAAK,EAAE,mCAAmC;IAC1C,WAAW,EACT,oKAAoK;IACtK,WAAW,EAAE,OAAO,CAAC,6CAA6C;IAClE,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAC1B,yCAAyC,EACzC,IAAI,CACL,CAAC;QACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,wBAAwB,KAAK,CAAC,cAAc,oBAAoB;YACtE,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,SAAS;aAC1B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-dependency-scan-summary.d.ts","sourceRoot":"","sources":["../../src/tools/get-dependency-scan-summary.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD,eAAO,MAAM,wBAAwB,EAAE,cA+BtC,CAAC"}
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
3
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
4
|
-
import * as schemas from "./schemas.js";
|
|
5
|
-
import { callServerApi } from "./server-api.js";
|
|
6
|
-
import { parseToolInput } from "./validation.js";
|
|
7
|
-
const getDependencyScanSummaryInputSchema = z
|
|
8
|
-
.object({
|
|
9
|
-
base_url: z.url(),
|
|
10
|
-
})
|
|
11
|
-
.strict();
|
|
12
|
-
export const getDependencyScanSummary = {
|
|
13
|
-
name: "get_dependency_scan_summary",
|
|
14
|
-
title: "Get Dependency Scan Summary",
|
|
15
|
-
description: "Get the org-wide dependency scan summary cards (Security Center CVE fleet view): overall severity counts and how many published apps have active vulnerabilities.",
|
|
16
|
-
inputSchema: schemas.getDependencyScanSummaryToolInputSchema,
|
|
17
|
-
annotations: {
|
|
18
|
-
readOnlyHint: true,
|
|
19
|
-
destructiveHint: false,
|
|
20
|
-
idempotentHint: true,
|
|
21
|
-
openWorldHint: true,
|
|
22
|
-
},
|
|
23
|
-
audience: "customer",
|
|
24
|
-
async handler(args) {
|
|
25
|
-
const input = parseToolInput(getDependencyScanSummaryInputSchema, args);
|
|
26
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
27
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
28
|
-
const data = await callServerApi({
|
|
29
|
-
baseUrl,
|
|
30
|
-
token: auth.token,
|
|
31
|
-
method: "GET",
|
|
32
|
-
path: "/api/v2/code-security/dependency-scan/summary",
|
|
33
|
-
});
|
|
34
|
-
return {
|
|
35
|
-
result: data,
|
|
36
|
-
auth_source: auth.source,
|
|
37
|
-
base_url: baseUrl,
|
|
38
|
-
environment: detectEnvironment(baseUrl),
|
|
39
|
-
};
|
|
40
|
-
},
|
|
41
|
-
};
|
|
42
|
-
//# sourceMappingURL=get-dependency-scan-summary.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-dependency-scan-summary.js","sourceRoot":"","sources":["../../src/tools/get-dependency-scan-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,mCAAmC,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACtD,IAAI,EAAE,6BAA6B;IACnC,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,mKAAmK;IACrK,WAAW,EAAE,OAAO,CAAC,uCAAuC;IAC5D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,+CAA+C;SACtD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-integration-config-schema.d.ts","sourceRoot":"","sources":["../../src/tools/get-integration-config-schema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,eAAO,MAAM,0BAA0B,EAAE,cAsBxC,CAAC"}
|
|
@@ -1,34 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { getPluginConfigurationSchema } from "./plugin-configuration-schema.js";
|
|
3
|
-
import * as schemas from "./schemas.js";
|
|
4
|
-
import { parseToolInput } from "./validation.js";
|
|
5
|
-
// The schema is bundled, so this tool never calls the API. base_url is accepted
|
|
6
|
-
// and ignored because the gateway injects it into every Admin tool call.
|
|
7
|
-
const getIntegrationConfigSchemaInputSchema = z
|
|
8
|
-
.object({
|
|
9
|
-
base_url: z.string().url().optional(),
|
|
10
|
-
plugin_id: z.string().trim().min(1),
|
|
11
|
-
})
|
|
12
|
-
.strict();
|
|
13
|
-
export const getIntegrationConfigSchema = {
|
|
14
|
-
name: "get_integration_config_schema",
|
|
15
|
-
title: "Get Integration Config Schema",
|
|
16
|
-
description: "Return the JSON schema for a plugin's configuration object. Call this before create_integration. Pass the returned configuration fields as configuration; do not send API envelope fields such as id, created, integrationId, or bindingFields.",
|
|
17
|
-
inputSchema: schemas.getIntegrationConfigSchemaToolInputSchema,
|
|
18
|
-
annotations: {
|
|
19
|
-
readOnlyHint: true,
|
|
20
|
-
destructiveHint: false,
|
|
21
|
-
idempotentHint: true,
|
|
22
|
-
openWorldHint: false,
|
|
23
|
-
},
|
|
24
|
-
audience: "customer",
|
|
25
|
-
async handler(args) {
|
|
26
|
-
const input = parseToolInput(getIntegrationConfigSchemaInputSchema, args);
|
|
27
|
-
return {
|
|
28
|
-
plugin_id: input.plugin_id,
|
|
29
|
-
configuration_schema: getPluginConfigurationSchema(input.plugin_id),
|
|
30
|
-
notes: "Call get_integration_config_schema, then create_integration with name, plugin_id, and configuration matching this schema. create_integration generates ids, created, kind, and the default configuration wrapper. Do not send those envelope fields yourself.",
|
|
31
|
-
};
|
|
32
|
-
},
|
|
33
|
-
};
|
|
34
|
-
//# sourceMappingURL=get-integration-config-schema.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-integration-config-schema.js","sourceRoot":"","sources":["../../src/tools/get-integration-config-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,qCAAqC,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAmB;IACxD,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,+BAA+B;IACtC,WAAW,EACT,iPAAiP;IACnP,WAAW,EAAE,OAAO,CAAC,yCAAyC;IAC9D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACrB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,oBAAoB,EAAE,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC;YACnE,KAAK,EACH,+PAA+P;SAClQ,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy-run-report.d.ts","sourceRoot":"","sources":["../../src/tools/get-review-policy-run-report.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAsBpD,eAAO,MAAM,wBAAwB,EAAE,cAqCtC,CAAC"}
|
|
@@ -1,60 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT, REVIEW_FINDING_SEVERITIES, } from "@superblocksteam/shared";
|
|
3
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
4
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
5
|
-
import * as schemas from "./schemas.js";
|
|
6
|
-
import { callServerApi } from "./server-api.js";
|
|
7
|
-
import { parseToolInput } from "./validation.js";
|
|
8
|
-
const getReviewPolicyRunReportInputSchema = z
|
|
9
|
-
.object({
|
|
10
|
-
base_url: z.url(),
|
|
11
|
-
policy_id: z.uuid(),
|
|
12
|
-
run_id: z.uuid(),
|
|
13
|
-
severity: z.array(z.enum(REVIEW_FINDING_SEVERITIES)).min(1).optional(),
|
|
14
|
-
order: z.enum(["asc", "desc"]).optional(),
|
|
15
|
-
limit: z
|
|
16
|
-
.number()
|
|
17
|
-
.int()
|
|
18
|
-
.min(1)
|
|
19
|
-
.max(MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT)
|
|
20
|
-
.optional(),
|
|
21
|
-
offset: z.number().int().min(0).optional(),
|
|
22
|
-
})
|
|
23
|
-
.strict();
|
|
24
|
-
export const getReviewPolicyRunReport = {
|
|
25
|
-
name: "get_review_policy_run_report",
|
|
26
|
-
title: "Get Review Policy Run Report",
|
|
27
|
-
description: "Get the full report for a single policy agent run: aggregate blocking/non-blocking counts and severity breakdown, plus the paginated list of individual findings for that run.",
|
|
28
|
-
inputSchema: schemas.getReviewPolicyRunReportToolInputSchema,
|
|
29
|
-
annotations: {
|
|
30
|
-
readOnlyHint: true,
|
|
31
|
-
destructiveHint: false,
|
|
32
|
-
idempotentHint: true,
|
|
33
|
-
openWorldHint: true,
|
|
34
|
-
},
|
|
35
|
-
audience: "customer",
|
|
36
|
-
async handler(args) {
|
|
37
|
-
const input = parseToolInput(getReviewPolicyRunReportInputSchema, args);
|
|
38
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
39
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
40
|
-
const data = await callServerApi({
|
|
41
|
-
baseUrl,
|
|
42
|
-
token: auth.token,
|
|
43
|
-
method: "GET",
|
|
44
|
-
path: `/api/v1/review-policies/${input.policy_id}/runs/${input.run_id}`,
|
|
45
|
-
query: {
|
|
46
|
-
severity: input.severity,
|
|
47
|
-
order: input.order,
|
|
48
|
-
limit: input.limit,
|
|
49
|
-
offset: input.offset,
|
|
50
|
-
},
|
|
51
|
-
});
|
|
52
|
-
return {
|
|
53
|
-
report: data,
|
|
54
|
-
auth_source: auth.source,
|
|
55
|
-
base_url: baseUrl,
|
|
56
|
-
environment: detectEnvironment(baseUrl),
|
|
57
|
-
};
|
|
58
|
-
},
|
|
59
|
-
};
|
|
60
|
-
//# sourceMappingURL=get-review-policy-run-report.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy-run-report.js","sourceRoot":"","sources":["../../src/tools/get-review-policy-run-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,mCAAmC,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,oCAAoC,CAAC;SACzC,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACtD,IAAI,EAAE,8BAA8B;IACpC,KAAK,EAAE,8BAA8B;IACrC,WAAW,EACT,gLAAgL;IAClL,WAAW,EAAE,OAAO,CAAC,uCAAuC;IAC5D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,2BAA2B,KAAK,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,EAAE;YACvE,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy-summary.d.ts","sourceRoot":"","sources":["../../src/tools/get-review-policy-summary.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAYpD,eAAO,MAAM,sBAAsB,EAAE,cAiCpC,CAAC"}
|
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { DEFAULT_REVIEW_POLICY_SUMMARY_WINDOW, REVIEW_POLICY_SUMMARY_WINDOWS, } from "@superblocksteam/shared";
|
|
3
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
4
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
5
|
-
import * as schemas from "./schemas.js";
|
|
6
|
-
import { callServerApi } from "./server-api.js";
|
|
7
|
-
import { parseToolInput } from "./validation.js";
|
|
8
|
-
const getReviewPolicySummaryInputSchema = z
|
|
9
|
-
.object({
|
|
10
|
-
base_url: z.url(),
|
|
11
|
-
window: z.enum(REVIEW_POLICY_SUMMARY_WINDOWS).optional(),
|
|
12
|
-
})
|
|
13
|
-
.strict();
|
|
14
|
-
export const getReviewPolicySummary = {
|
|
15
|
-
name: "get_review_policy_summary",
|
|
16
|
-
title: "Get Review Policy Summary",
|
|
17
|
-
description: `Get org-wide policy agent summary stats over a time window (default ${DEFAULT_REVIEW_POLICY_SUMMARY_WINDOW}): active policy count, total runs, findings count, and pass rate.`,
|
|
18
|
-
inputSchema: schemas.getReviewPolicySummaryToolInputSchema,
|
|
19
|
-
annotations: {
|
|
20
|
-
readOnlyHint: true,
|
|
21
|
-
destructiveHint: false,
|
|
22
|
-
idempotentHint: true,
|
|
23
|
-
openWorldHint: true,
|
|
24
|
-
},
|
|
25
|
-
audience: "customer",
|
|
26
|
-
async handler(args) {
|
|
27
|
-
const input = parseToolInput(getReviewPolicySummaryInputSchema, args);
|
|
28
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
29
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
30
|
-
const data = await callServerApi({
|
|
31
|
-
baseUrl,
|
|
32
|
-
token: auth.token,
|
|
33
|
-
method: "GET",
|
|
34
|
-
path: "/api/v1/review-policies/summary",
|
|
35
|
-
query: {
|
|
36
|
-
window: input.window,
|
|
37
|
-
},
|
|
38
|
-
});
|
|
39
|
-
return {
|
|
40
|
-
summary: data,
|
|
41
|
-
auth_source: auth.source,
|
|
42
|
-
base_url: baseUrl,
|
|
43
|
-
environment: detectEnvironment(baseUrl),
|
|
44
|
-
};
|
|
45
|
-
},
|
|
46
|
-
};
|
|
47
|
-
//# sourceMappingURL=get-review-policy-summary.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy-summary.js","sourceRoot":"","sources":["../../src/tools/get-review-policy-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,iCAAiC,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,2BAA2B;IAClC,WAAW,EAAE,uEAAuE,oCAAoC,oEAAoE;IAC5L,WAAW,EAAE,OAAO,CAAC,qCAAqC;IAC1D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy.d.ts","sourceRoot":"","sources":["../../src/tools/get-review-policy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAYpD,eAAO,MAAM,eAAe,EAAE,cA+B7B,CAAC"}
|
|
@@ -1,43 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
3
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
4
|
-
import * as schemas from "./schemas.js";
|
|
5
|
-
import { callServerApi } from "./server-api.js";
|
|
6
|
-
import { parseToolInput } from "./validation.js";
|
|
7
|
-
const getReviewPolicyInputSchema = z
|
|
8
|
-
.object({
|
|
9
|
-
base_url: z.url(),
|
|
10
|
-
policy_id: z.uuid(),
|
|
11
|
-
})
|
|
12
|
-
.strict();
|
|
13
|
-
export const getReviewPolicy = {
|
|
14
|
-
name: "get_review_policy",
|
|
15
|
-
title: "Get Review Policy",
|
|
16
|
-
description: "Get the full configuration of a single policy agent / review policy, including its prompt, mode (advisory or blocking), scope, stage, and domain.",
|
|
17
|
-
inputSchema: schemas.getReviewPolicyToolInputSchema,
|
|
18
|
-
annotations: {
|
|
19
|
-
readOnlyHint: true,
|
|
20
|
-
destructiveHint: false,
|
|
21
|
-
idempotentHint: true,
|
|
22
|
-
openWorldHint: true,
|
|
23
|
-
},
|
|
24
|
-
audience: "customer",
|
|
25
|
-
async handler(args) {
|
|
26
|
-
const input = parseToolInput(getReviewPolicyInputSchema, args);
|
|
27
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
28
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
29
|
-
const data = await callServerApi({
|
|
30
|
-
baseUrl,
|
|
31
|
-
token: auth.token,
|
|
32
|
-
method: "GET",
|
|
33
|
-
path: `/api/v1/review-policies/${input.policy_id}`,
|
|
34
|
-
});
|
|
35
|
-
return {
|
|
36
|
-
policy: data,
|
|
37
|
-
auth_source: auth.source,
|
|
38
|
-
base_url: baseUrl,
|
|
39
|
-
environment: detectEnvironment(baseUrl),
|
|
40
|
-
};
|
|
41
|
-
},
|
|
42
|
-
};
|
|
43
|
-
//# sourceMappingURL=get-review-policy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-review-policy.js","sourceRoot":"","sources":["../../src/tools/get-review-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,0BAA0B,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,mJAAmJ;IACrJ,WAAW,EAAE,OAAO,CAAC,8BAA8B;IACnD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,2BAA2B,KAAK,CAAC,SAAS,EAAE;SACnD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"list-dependency-scan-findings.d.ts","sourceRoot":"","sources":["../../src/tools/list-dependency-scan-findings.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAwBpD,eAAO,MAAM,0BAA0B,EAAE,cA6CxC,CAAC"}
|
|
@@ -1,69 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { SEVERITY_LEVELS } from "@superblocksteam/shared";
|
|
3
|
-
import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
|
|
4
|
-
import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
|
|
5
|
-
import * as schemas from "./schemas.js";
|
|
6
|
-
import { callServerApi } from "./server-api.js";
|
|
7
|
-
import { parseToolInput } from "./validation.js";
|
|
8
|
-
const DATE_FILTERS = ["all", "none", "today", "-7d", "-30d", "ytd"];
|
|
9
|
-
const SORTS = ["severity", "last_updated", "last_published"];
|
|
10
|
-
const listDependencyScanFindingsInputSchema = z
|
|
11
|
-
.object({
|
|
12
|
-
base_url: z.url(),
|
|
13
|
-
application_id: z.uuid().optional(),
|
|
14
|
-
search: z.string().trim().min(1).optional(),
|
|
15
|
-
severity: z.array(z.enum(SEVERITY_LEVELS)).min(1).optional(),
|
|
16
|
-
hide_apps_without_vulns: z.boolean().optional(),
|
|
17
|
-
published: z.enum(DATE_FILTERS).optional(),
|
|
18
|
-
updated: z.enum(DATE_FILTERS).optional(),
|
|
19
|
-
sort: z.enum(SORTS).optional(),
|
|
20
|
-
order: z.enum(["asc", "desc"]).optional(),
|
|
21
|
-
limit: z.number().int().min(1).max(50).optional(),
|
|
22
|
-
offset: z.number().int().min(0).optional(),
|
|
23
|
-
})
|
|
24
|
-
.strict();
|
|
25
|
-
export const listDependencyScanFindings = {
|
|
26
|
-
name: "list_dependency_scan_findings",
|
|
27
|
-
title: "List Dependency Scan Findings",
|
|
28
|
-
description: "List per-application CVE / dependency vulnerability findings across the org's fleet (Security Center dependency scan view). Filter by application, one or more severities, a free-text search term, or publish/update date window. Defaults to hiding apps with no active vulnerabilities.",
|
|
29
|
-
inputSchema: schemas.listDependencyScanFindingsToolInputSchema,
|
|
30
|
-
annotations: {
|
|
31
|
-
readOnlyHint: true,
|
|
32
|
-
destructiveHint: false,
|
|
33
|
-
idempotentHint: true,
|
|
34
|
-
openWorldHint: true,
|
|
35
|
-
},
|
|
36
|
-
audience: "customer",
|
|
37
|
-
async handler(args) {
|
|
38
|
-
const input = parseToolInput(listDependencyScanFindingsInputSchema, args);
|
|
39
|
-
const baseUrl = normalizeBaseUrl(input.base_url);
|
|
40
|
-
const auth = await resolveAuthForOrigin(baseUrl);
|
|
41
|
-
const data = await callServerApi({
|
|
42
|
-
baseUrl,
|
|
43
|
-
token: auth.token,
|
|
44
|
-
method: "GET",
|
|
45
|
-
path: "/api/v2/code-security/dependency-scan",
|
|
46
|
-
query: {
|
|
47
|
-
application_id: input.application_id,
|
|
48
|
-
search: input.search,
|
|
49
|
-
// dependency-scan's parseSeverityLevels splits on commas (unlike review-policy's
|
|
50
|
-
// asStringArray), so a joined string is the correct wire format here.
|
|
51
|
-
severity: input.severity?.join(","),
|
|
52
|
-
hideAppsWithoutVulns: input.hide_apps_without_vulns,
|
|
53
|
-
published: input.published,
|
|
54
|
-
updated: input.updated,
|
|
55
|
-
sort: input.sort,
|
|
56
|
-
order: input.order,
|
|
57
|
-
limit: input.limit,
|
|
58
|
-
offset: input.offset,
|
|
59
|
-
},
|
|
60
|
-
});
|
|
61
|
-
return {
|
|
62
|
-
result: data,
|
|
63
|
-
auth_source: auth.source,
|
|
64
|
-
base_url: baseUrl,
|
|
65
|
-
environment: detectEnvironment(baseUrl),
|
|
66
|
-
};
|
|
67
|
-
},
|
|
68
|
-
};
|
|
69
|
-
//# sourceMappingURL=list-dependency-scan-findings.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"list-dependency-scan-findings.js","sourceRoot":"","sources":["../../src/tools/list-dependency-scan-findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAC7E,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAEtE,MAAM,qCAAqC,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAmB;IACxD,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,+BAA+B;IACtC,WAAW,EACT,4RAA4R;IAC9R,WAAW,EAAE,OAAO,CAAC,yCAAyC;IAC9D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uCAAuC;YAC7C,KAAK,EAAE;gBACL,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,iFAAiF;gBACjF,sEAAsE;gBACtE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;gBACnC,oBAAoB,EAAE,KAAK,CAAC,uBAAuB;gBACnD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"list-review-policies.d.ts","sourceRoot":"","sources":["../../src/tools/list-review-policies.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD,eAAO,MAAM,kBAAkB,EAAE,cA+BhC,CAAC"}
|