@trycompai/mcp-server 0.0.3 → 0.2.0

package/src/mcp-server/tools/integrationsSyncControllerGetAvailableSyncProvidersV1.ts

@@ -3,14 +3,19 @@
  */
 
 import { integrationsSyncControllerGetAvailableSyncProvidersV1 } from "../../funcs/integrationsSyncControllerGetAvailableSyncProvidersV1.js";
+import { SyncControllerGetAvailableSyncProvidersV1Request$zodSchema } from "../../models/synccontrollergetavailablesyncprovidersv1op.js";
 import { formatResult, ToolDefinition } from "../tools.js";
 
+const args = {
+  request: SyncControllerGetAvailableSyncProvidersV1Request$zodSchema,
+};
+
 export const tool$integrationsSyncControllerGetAvailableSyncProvidersV1:
-  ToolDefinition = {
+  ToolDefinition<typeof args> = {
     name: "get-available-sync-providers",
-    description: `List employee sync providers available to the org
+    description: `List sync providers available to the org
 
-List employee sync providers available to the org in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
+List sync providers available to the org in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
     annotations: {
       "title": "",
       "destructiveHint": false,
@@ -18,10 +23,12 @@ List employee sync providers available to the org in Comp AI. Connect vendor sys
       "openWorldHint": false,
       "readOnlyHint": false,
     },
-    tool: async (client, ctx) => {
+    args,
+    tool: async (client, args, ctx) => {
       const [result] =
         await integrationsSyncControllerGetAvailableSyncProvidersV1(
           client,
+          args.request,
           { fetchOptions: { signal: ctx.signal } },
         ).$inspect();
 

package/src/mcp-server/tools/integrationsSyncControllerGetDeviceSyncProviderV1.ts

@@ -0,0 +1,36 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { integrationsSyncControllerGetDeviceSyncProviderV1 } from "../../funcs/integrationsSyncControllerGetDeviceSyncProviderV1.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+export const tool$integrationsSyncControllerGetDeviceSyncProviderV1:
+  ToolDefinition = {
+    name: "get-device-sync-provider",
+    description: `Get the currently configured device sync provider
+
+Get the currently configured device sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    tool: async (client, ctx) => {
+      const [result] = await integrationsSyncControllerGetDeviceSyncProviderV1(
+        client,
+        { fetchOptions: { signal: ctx.signal } },
+      ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/integrationsSyncControllerSetDeviceSyncProviderV1.ts

@@ -0,0 +1,36 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { integrationsSyncControllerSetDeviceSyncProviderV1 } from "../../funcs/integrationsSyncControllerSetDeviceSyncProviderV1.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+export const tool$integrationsSyncControllerSetDeviceSyncProviderV1:
+  ToolDefinition = {
+    name: "set-device-sync-provider",
+    description: `Set the device sync provider
+
+Set the device sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    tool: async (client, ctx) => {
+      const [result] = await integrationsSyncControllerSetDeviceSyncProviderV1(
+        client,
+        { fetchOptions: { signal: ctx.signal } },
+      ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/integrationsSyncControllerSyncDynamicProviderDevicesV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { integrationsSyncControllerSyncDynamicProviderDevicesV1 } from "../../funcs/integrationsSyncControllerSyncDynamicProviderDevicesV1.js";
+import { SyncControllerSyncDynamicProviderDevicesV1Request$zodSchema } from "../../models/synccontrollersyncdynamicproviderdevicesv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: SyncControllerSyncDynamicProviderDevicesV1Request$zodSchema,
+};
+
+export const tool$integrationsSyncControllerSyncDynamicProviderDevicesV1:
+  ToolDefinition<typeof args> = {
+    name: "sync-dynamic-provider-devices",
+    description: `Sync devices for a dynamic provider
+
+Sync devices for a dynamic provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await integrationsSyncControllerSyncDynamicProviderDevicesV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerListV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerListV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerListV1.js";
+import { PentestFindingContextsControllerListV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerlistv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerListV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerListV1:
+  ToolDefinition<typeof args> = {
+    name: "list-pentest-finding-contexts",
+    description: `List pentest finding context notes
+
+Returns the customer-written context notes attached to pentest findings for a target URL. These notes are shared with the testing agent on future scans of the same target so retests are informed, not blind.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerListV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerRemoveV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerRemoveV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerRemoveV1.js";
+import { PentestFindingContextsControllerRemoveV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerremovev1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerRemoveV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerRemoveV1:
+  ToolDefinition<typeof args> = {
+    name: "delete-pentest-finding-context",
+    description: `Remove context from a pentest finding
+
+Deletes the customer context note attached to a pentest finding so future scans of the target no longer receive it from the testing agent briefing.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerRemoveV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerUpsertV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerUpsertV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerUpsertV1.js";
+import { PentestFindingContextsControllerUpsertV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerupsertv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerUpsertV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerUpsertV1:
+  ToolDefinition<typeof args> = {
+    name: "set-pentest-finding-context",
+    description: `Add context to a pentest finding
+
+Saves a customer context note on a pentest finding, e.g. an accepted-by-design rationale or remediation details. Future scans of the same target pass the note to the testing agent so the issue is retested with that context.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerUpsertV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/soaSOAControllerGetSetupV1.ts

@@ -0,0 +1,42 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { soaSOAControllerGetSetupV1 } from "../../funcs/soaSOAControllerGetSetupV1.js";
+import { EnsureSOASetupDto$zodSchema } from "../../models/ensuresoasetupdto.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: EnsureSOASetupDto$zodSchema,
+};
+
+export const tool$soaSOAControllerGetSetupV1: ToolDefinition<typeof args> = {
+  name: "get-setup",
+  description: `Read SOA configuration and document without creating either
+
+Read SOA configuration and document without creating either in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.`,
+  annotations: {
+    "title": "",
+    "destructiveHint": false,
+    "idempotentHint": false,
+    "openWorldHint": false,
+    "readOnlyHint": false,
+  },
+  args,
+  tool: async (client, args, ctx) => {
+    const [result] = await soaSOAControllerGetSetupV1(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    return formatResult(result.value);
+  },
+};

package/src/mcp-server/tools/trustAccessTrustAccessControllerGetPublicCustomFrameworksV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustAccessTrustAccessControllerGetPublicCustomFrameworksV1 } from "../../funcs/trustAccessTrustAccessControllerGetPublicCustomFrameworksV1.js";
+import { TrustAccessControllerGetPublicCustomFrameworksV1Request$zodSchema } from "../../models/trustaccesscontrollergetpubliccustomframeworksv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: TrustAccessControllerGetPublicCustomFrameworksV1Request$zodSchema,
+};
+
+export const tool$trustAccessTrustAccessControllerGetPublicCustomFrameworksV1:
+  ToolDefinition<typeof args> = {
+    name: "get-public-custom-frameworks",
+    description: `Get org-authored custom frameworks shown on a trust portal
+
+Get org-authored custom frameworks shown on a trust portal in Comp AI. Manage external Trust Center access requests, NDA signing, grants, tokenized document downloads, public FAQs, and reviewer access.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustAccessTrustAccessControllerGetPublicCustomFrameworksV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerListCustomFrameworksV1.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerListCustomFrameworksV1 } from "../../funcs/trustPortalTrustPortalControllerListCustomFrameworksV1.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+export const tool$trustPortalTrustPortalControllerListCustomFrameworksV1:
+  ToolDefinition = {
+    name: "list-custom-frameworks",
+    description:
+      `List org-authored custom frameworks with their trust portal selection
+
+List org-authored custom frameworks with their trust portal selection in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    tool: async (client, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerListCustomFrameworksV1(
+          client,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/{taskAutomationsAutomationsControllerCreateAutomationV1.ts → trustPortalTrustPortalControllerUpdateAllowedEmailsV1.ts}

@@ -2,20 +2,20 @@
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
  */
 
-import { taskAutomationsAutomationsControllerCreateAutomationV1 } from "../../funcs/taskAutomationsAutomationsControllerCreateAutomationV1.js";
-import { AutomationsControllerCreateAutomationV1Request$zodSchema } from "../../models/automationscontrollercreateautomationv1op.js";
+import { trustPortalTrustPortalControllerUpdateAllowedEmailsV1 } from "../../funcs/trustPortalTrustPortalControllerUpdateAllowedEmailsV1.js";
+import { UpdateAllowedEmailsDto$zodSchema } from "../../models/updateallowedemailsdto.js";
 import { formatResult, ToolDefinition } from "../tools.js";
 
 const args = {
-  request: AutomationsControllerCreateAutomationV1Request$zodSchema,
+  request: UpdateAllowedEmailsDto$zodSchema,
 };
 
-export const tool$taskAutomationsAutomationsControllerCreateAutomationV1:
+export const tool$trustPortalTrustPortalControllerUpdateAllowedEmailsV1:
   ToolDefinition<typeof args> = {
-    name: "create-automation",
-    description: `Create evidence automation
+    name: "update-allowed-emails",
+    description: `Update allowed emails for the trust portal
 
-Create an automated evidence workflow attached to a task so Comp AI can collect recurring proof from connected systems.`,
+Update allowed emails for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
     annotations: {
       "title": "",
       "destructiveHint": false,
@@ -26,7 +26,7 @@ Create an automated evidence workflow attached to a task so Comp AI can collect
     args,
     tool: async (client, args, ctx) => {
       const [result] =
-        await taskAutomationsAutomationsControllerCreateAutomationV1(
+        await trustPortalTrustPortalControllerUpdateAllowedEmailsV1(
           client,
           args.request,
           { fetchOptions: { signal: ctx.signal } },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateCustomFrameworkV1.ts

@@ -0,0 +1,46 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerUpdateCustomFrameworkV1 } from "../../funcs/trustPortalTrustPortalControllerUpdateCustomFrameworkV1.js";
+import { TrustPortalControllerUpdateCustomFrameworkV1Request$zodSchema } from "../../models/trustportalcontrollerupdatecustomframeworkv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: TrustPortalControllerUpdateCustomFrameworkV1Request$zodSchema
+    .describe(`At least one of \`enabled\` or \`status\` must be provided.`),
+};
+
+export const tool$trustPortalTrustPortalControllerUpdateCustomFrameworkV1:
+  ToolDefinition<typeof args> = {
+    name: "update-custom-framework",
+    description:
+      `Enable/disable a custom framework on the trust portal and set its status
+
+Enable/disable a custom framework on the trust portal and set its status in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerUpdateCustomFrameworkV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/models/automationscontrollercreateversionv1op.ts

@@ -3,15 +3,21 @@
  */
 
 import * as z from "zod";
+import {
+  CreateVersionDto,
+  CreateVersionDto$zodSchema,
+} from "./createversiondto.js";
 
 export type AutomationsControllerCreateVersionV1Request = {
   taskId: string;
   automationId: string;
+  body: CreateVersionDto;
 };
 
 export const AutomationsControllerCreateVersionV1Request$zodSchema: z.ZodType<
   AutomationsControllerCreateVersionV1Request
 > = z.object({
   automationId: z.string().describe("Automation ID"),
+  body: CreateVersionDto$zodSchema,
   taskId: z.string().describe("Task ID"),
 });

package/src/models/cloudsecuritycontrollerresolvesessionv1op.ts

@@ -0,0 +1,14 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+
+export type CloudSecurityControllerResolveSessionV1Request = {
+  connectionId: string;
+};
+
+export const CloudSecurityControllerResolveSessionV1Request$zodSchema:
+  z.ZodType<CloudSecurityControllerResolveSessionV1Request> = z.object({
+    connectionId: z.string(),
+  });

package/src/models/completechecklistitemdto.ts

@@ -8,14 +8,16 @@ export type CompleteChecklistItemDto = {
   notes?: string | undefined;
   fileName?: string | undefined;
   fileType?: string | undefined;
-  fileData?: string | undefined;
+  s3Key?: string | undefined;
 };
 
 export const CompleteChecklistItemDto$zodSchema: z.ZodType<
   CompleteChecklistItemDto
 > = z.object({
-  fileData: z.string().optional().describe("Base64 encoded evidence file"),
   fileName: z.string().optional().describe("Evidence file name"),
   fileType: z.string().optional().describe("Evidence file MIME type"),
   notes: z.string().optional().describe("Optional notes"),
+  s3Key: z.string().optional().describe(
+    "Key of an evidence file already uploaded via /v1/uploads/presign (purpose=evidence). The server fetches the bytes from storage — no base64 needed. Provide fileData or s3Key (not both).",
+  ),
 });

package/src/models/complianceresourceresponsedto.ts

@@ -5,6 +5,9 @@
 import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
+/**
+ * Set for native-framework certificates; null for custom ones
+ */
 export const ComplianceResourceResponseDtoFramework = {
   Iso27001: "iso_27001",
   Iso42001: "iso_42001",
@@ -19,6 +22,9 @@ export const ComplianceResourceResponseDtoFramework = {
   Pipeda: "pipeda",
   Ccpa: "ccpa",
 } as const;
+/**
+ * Set for native-framework certificates; null for custom ones
+ */
 export type ComplianceResourceResponseDtoFramework = ClosedEnum<
   typeof ComplianceResourceResponseDtoFramework
 >;
@@ -36,10 +42,21 @@ export const ComplianceResourceResponseDtoFramework$zodSchema = z.enum([
   "iso_9001",
   "pipeda",
   "ccpa",
-]);
+]).describe("Set for native-framework certificates; null for custom ones");
+
+/**
+ * Set for custom-framework certificates; null for native ones
+ */
+export type CustomFrameworkId = {};
+
+export const CustomFrameworkId$zodSchema: z.ZodType<CustomFrameworkId> = z
+  .object({}).describe(
+    "Set for custom-framework certificates; null for native ones",
+  );
 
 export type ComplianceResourceResponseDto = {
-  framework: ComplianceResourceResponseDtoFramework;
+  framework: ComplianceResourceResponseDtoFramework | null;
+  customFrameworkId: CustomFrameworkId | null;
   fileName: string;
   fileSize: number;
   updatedAt: string;
@@ -48,9 +65,12 @@ export type ComplianceResourceResponseDto = {
 export const ComplianceResourceResponseDto$zodSchema: z.ZodType<
   ComplianceResourceResponseDto
 > = z.object({
+  customFrameworkId: z.lazy(() => CustomFrameworkId$zodSchema).nullable()
+    .describe("Set for custom-framework certificates; null for native ones"),
   fileName: z.string(),
   fileSize: z.number().describe("File size in bytes"),
-  framework: ComplianceResourceResponseDtoFramework$zodSchema,
+  framework: ComplianceResourceResponseDtoFramework$zodSchema.nullable()
+    .describe("Set for native-framework certificates; null for custom ones"),
   updatedAt: z.string().describe(
     "ISO timestamp when the certificate was last updated",
   ),

package/src/models/complianceresourcesignedurldto.ts

@@ -6,7 +6,7 @@ import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
 /**
- * Compliance framework identifier
+ * Native compliance framework identifier
  */
 export const ComplianceResourceSignedUrlDtoFramework = {
   Iso27001: "iso_27001",
@@ -23,7 +23,7 @@ export const ComplianceResourceSignedUrlDtoFramework = {
   Ccpa: "ccpa",
 } as const;
 /**
- * Compliance framework identifier
+ * Native compliance framework identifier
  */
 export type ComplianceResourceSignedUrlDtoFramework = ClosedEnum<
   typeof ComplianceResourceSignedUrlDtoFramework
@@ -42,19 +42,22 @@ export const ComplianceResourceSignedUrlDtoFramework$zodSchema = z.enum([
   "iso_9001",
   "pipeda",
   "ccpa",
-]).describe("Compliance framework identifier");
+]).describe("Native compliance framework identifier");
 
 export type ComplianceResourceSignedUrlDto = {
   organizationId: string;
-  framework: ComplianceResourceSignedUrlDtoFramework;
+  framework?: ComplianceResourceSignedUrlDtoFramework | undefined;
+  customFrameworkId?: string | undefined;
 };
 
 export const ComplianceResourceSignedUrlDto$zodSchema: z.ZodType<
   ComplianceResourceSignedUrlDto
 > = z.object({
-  framework: ComplianceResourceSignedUrlDtoFramework$zodSchema.describe(
-    "Compliance framework identifier",
+  customFrameworkId: z.string().optional().describe(
+    "Org-authored custom framework ID (alternative to `framework`)",
   ),
+  framework: ComplianceResourceSignedUrlDtoFramework$zodSchema.optional()
+    .describe("Native compliance framework identifier"),
   organizationId: z.string().describe(
     "Organization ID that owns the compliance resource",
   ),