@trycompai/mcp-server 0.1.0 → 0.2.1

package/src/mcp-server/tools/ismsISMSRegistersControllerUpdateRowV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { ismsISMSRegistersControllerUpdateRowV1 } from "../../funcs/ismsISMSRegistersControllerUpdateRowV1.js";
+import { IsmsRegistersControllerUpdateRowV1Request$zodSchema } from "../../models/ismsregisterscontrollerupdaterowv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: IsmsRegistersControllerUpdateRowV1Request$zodSchema,
+};
+
+export const tool$ismsISMSRegistersControllerUpdateRowV1: ToolDefinition<
+  typeof args
+> = {
+  name: "update-row",
+  description: `Update a row in an ISMS register
+
+Update a row in an ISMS register in Comp AI.`,
+  annotations: {
+    "title": "",
+    "destructiveHint": false,
+    "idempotentHint": false,
+    "openWorldHint": false,
+    "readOnlyHint": false,
+  },
+  args,
+  tool: async (client, args, ctx) => {
+    const [result] = await ismsISMSRegistersControllerUpdateRowV1(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    return formatResult(result.value);
+  },
+};

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerListV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerListV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerListV1.js";
+import { PentestFindingContextsControllerListV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerlistv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerListV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerListV1:
+  ToolDefinition<typeof args> = {
+    name: "list-pentest-finding-contexts",
+    description: `List pentest finding context notes
+
+Returns the customer-written context notes attached to pentest findings for a target URL. These notes are shared with the testing agent on future scans of the same target so retests are informed, not blind.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerListV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerRemoveV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerRemoveV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerRemoveV1.js";
+import { PentestFindingContextsControllerRemoveV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerremovev1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerRemoveV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerRemoveV1:
+  ToolDefinition<typeof args> = {
+    name: "delete-pentest-finding-context",
+    description: `Remove context from a pentest finding
+
+Deletes the customer context note attached to a pentest finding so future scans of the target no longer receive it from the testing agent briefing.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerRemoveV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsPentestFindingContextsControllerUpsertV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsPentestFindingContextsControllerUpsertV1 } from "../../funcs/securityPenetrationTestsPentestFindingContextsControllerUpsertV1.js";
+import { PentestFindingContextsControllerUpsertV1Request$zodSchema } from "../../models/pentestfindingcontextscontrollerupsertv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: PentestFindingContextsControllerUpsertV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsPentestFindingContextsControllerUpsertV1:
+  ToolDefinition<typeof args> = {
+    name: "set-pentest-finding-context",
+    description: `Add context to a pentest finding
+
+Saves a customer context note on a pentest finding, e.g. an accepted-by-design rationale or remediation details. Future scans of the same target pass the note to the testing agent so the issue is retested with that context.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsPentestFindingContextsControllerUpsertV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustAccessTrustAccessControllerGetPublicCustomFrameworksV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustAccessTrustAccessControllerGetPublicCustomFrameworksV1 } from "../../funcs/trustAccessTrustAccessControllerGetPublicCustomFrameworksV1.js";
+import { TrustAccessControllerGetPublicCustomFrameworksV1Request$zodSchema } from "../../models/trustaccesscontrollergetpubliccustomframeworksv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: TrustAccessControllerGetPublicCustomFrameworksV1Request$zodSchema,
+};
+
+export const tool$trustAccessTrustAccessControllerGetPublicCustomFrameworksV1:
+  ToolDefinition<typeof args> = {
+    name: "get-public-custom-frameworks",
+    description: `Get org-authored custom frameworks shown on a trust portal
+
+Get org-authored custom frameworks shown on a trust portal in Comp AI. Manage external Trust Center access requests, NDA signing, grants, tokenized document downloads, public FAQs, and reviewer access.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustAccessTrustAccessControllerGetPublicCustomFrameworksV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerListCustomFrameworksV1.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerListCustomFrameworksV1 } from "../../funcs/trustPortalTrustPortalControllerListCustomFrameworksV1.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+export const tool$trustPortalTrustPortalControllerListCustomFrameworksV1:
+  ToolDefinition = {
+    name: "list-custom-frameworks",
+    description:
+      `List org-authored custom frameworks with their trust portal selection
+
+List org-authored custom frameworks with their trust portal selection in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    tool: async (client, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerListCustomFrameworksV1(
+          client,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1 } from "../../funcs/trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1.js";
+import { TrustPortalControllerRemoveCustomFrameworkBadgeV1Request$zodSchema } from "../../models/trustportalcontrollerremovecustomframeworkbadgev1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: TrustPortalControllerRemoveCustomFrameworkBadgeV1Request$zodSchema,
+};
+
+export const tool$trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1:
+  ToolDefinition<typeof args> = {
+    name: "remove-custom-framework-badge",
+    description: `Remove a custom framework's Trust Portal badge image
+
+Remove a custom framework's Trust Portal badge image in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateAllowedEmailsV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerUpdateAllowedEmailsV1 } from "../../funcs/trustPortalTrustPortalControllerUpdateAllowedEmailsV1.js";
+import { UpdateAllowedEmailsDto$zodSchema } from "../../models/updateallowedemailsdto.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: UpdateAllowedEmailsDto$zodSchema,
+};
+
+export const tool$trustPortalTrustPortalControllerUpdateAllowedEmailsV1:
+  ToolDefinition<typeof args> = {
+    name: "update-allowed-emails",
+    description: `Update allowed emails for the trust portal
+
+Update allowed emails for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerUpdateAllowedEmailsV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateCustomFrameworkV1.ts

@@ -0,0 +1,46 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerUpdateCustomFrameworkV1 } from "../../funcs/trustPortalTrustPortalControllerUpdateCustomFrameworkV1.js";
+import { TrustPortalControllerUpdateCustomFrameworkV1Request$zodSchema } from "../../models/trustportalcontrollerupdatecustomframeworkv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: TrustPortalControllerUpdateCustomFrameworkV1Request$zodSchema
+    .describe(`At least one of \`enabled\` or \`status\` must be provided.`),
+};
+
+export const tool$trustPortalTrustPortalControllerUpdateCustomFrameworkV1:
+  ToolDefinition<typeof args> = {
+    name: "update-custom-framework",
+    description:
+      `Enable/disable a custom framework on the trust portal and set its status
+
+Enable/disable a custom framework on the trust portal and set its status in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerUpdateCustomFrameworkV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1.ts

@@ -0,0 +1,45 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1 } from "../../funcs/trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1.js";
+import { UploadCustomFrameworkBadgeDto$zodSchema } from "../../models/uploadcustomframeworkbadgedto.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: UploadCustomFrameworkBadgeDto$zodSchema,
+};
+
+export const tool$trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1:
+  ToolDefinition<typeof args> = {
+    name: "upload-custom-framework-badge",
+    description:
+      `Upload or replace a custom framework's Trust Portal badge image
+
+Stores a PNG/JPEG/WebP badge (max 256KB) in the organization assets bucket. Does not change the framework's portal visibility.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools.ts

@@ -343,6 +343,8 @@ export function registerDynamicTools(
       if (def.args) {
         const jsonSchema = z.toJSONSchema(z.object(def.args), {
           target: "draft-2020-12",
+          io: "input",
+          unrepresentable: "any",
         });
         schemaText += JSON.stringify(jsonSchema, null, 2);
       } else {

package/src/models/automationscontrollercreateversionv1op.ts

@@ -3,15 +3,21 @@
  */
 
 import * as z from "zod";
+import {
+  CreateVersionDto,
+  CreateVersionDto$zodSchema,
+} from "./createversiondto.js";
 
 export type AutomationsControllerCreateVersionV1Request = {
   taskId: string;
   automationId: string;
+  body: CreateVersionDto;
 };
 
 export const AutomationsControllerCreateVersionV1Request$zodSchema: z.ZodType<
   AutomationsControllerCreateVersionV1Request
 > = z.object({
   automationId: z.string().describe("Automation ID"),
+  body: CreateVersionDto$zodSchema,
   taskId: z.string().describe("Task ID"),
 });

package/src/models/cloudsecuritycontrollerresolvesessionv1op.ts

@@ -0,0 +1,14 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+
+export type CloudSecurityControllerResolveSessionV1Request = {
+  connectionId: string;
+};
+
+export const CloudSecurityControllerResolveSessionV1Request$zodSchema:
+  z.ZodType<CloudSecurityControllerResolveSessionV1Request> = z.object({
+    connectionId: z.string(),
+  });

package/src/models/complianceresourceresponsedto.ts

@@ -5,6 +5,9 @@
 import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
+/**
+ * Set for native-framework certificates; null for custom ones
+ */
 export const ComplianceResourceResponseDtoFramework = {
   Iso27001: "iso_27001",
   Iso42001: "iso_42001",
@@ -19,6 +22,9 @@ export const ComplianceResourceResponseDtoFramework = {
   Pipeda: "pipeda",
   Ccpa: "ccpa",
 } as const;
+/**
+ * Set for native-framework certificates; null for custom ones
+ */
 export type ComplianceResourceResponseDtoFramework = ClosedEnum<
   typeof ComplianceResourceResponseDtoFramework
 >;
@@ -36,10 +42,21 @@ export const ComplianceResourceResponseDtoFramework$zodSchema = z.enum([
   "iso_9001",
   "pipeda",
   "ccpa",
-]);
+]).describe("Set for native-framework certificates; null for custom ones");
+
+/**
+ * Set for custom-framework certificates; null for native ones
+ */
+export type CustomFrameworkId = {};
+
+export const CustomFrameworkId$zodSchema: z.ZodType<CustomFrameworkId> = z
+  .object({}).describe(
+    "Set for custom-framework certificates; null for native ones",
+  );
 
 export type ComplianceResourceResponseDto = {
-  framework: ComplianceResourceResponseDtoFramework;
+  framework: ComplianceResourceResponseDtoFramework | null;
+  customFrameworkId: CustomFrameworkId | null;
   fileName: string;
   fileSize: number;
   updatedAt: string;
@@ -48,9 +65,12 @@ export type ComplianceResourceResponseDto = {
 export const ComplianceResourceResponseDto$zodSchema: z.ZodType<
   ComplianceResourceResponseDto
 > = z.object({
+  customFrameworkId: z.lazy(() => CustomFrameworkId$zodSchema).nullable()
+    .describe("Set for custom-framework certificates; null for native ones"),
   fileName: z.string(),
   fileSize: z.number().describe("File size in bytes"),
-  framework: ComplianceResourceResponseDtoFramework$zodSchema,
+  framework: ComplianceResourceResponseDtoFramework$zodSchema.nullable()
+    .describe("Set for native-framework certificates; null for custom ones"),
   updatedAt: z.string().describe(
     "ISO timestamp when the certificate was last updated",
   ),

package/src/models/complianceresourcesignedurldto.ts

@@ -6,7 +6,7 @@ import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
 /**
- * Compliance framework identifier
+ * Native compliance framework identifier
  */
 export const ComplianceResourceSignedUrlDtoFramework = {
   Iso27001: "iso_27001",
@@ -23,7 +23,7 @@ export const ComplianceResourceSignedUrlDtoFramework = {
   Ccpa: "ccpa",
 } as const;
 /**
- * Compliance framework identifier
+ * Native compliance framework identifier
  */
 export type ComplianceResourceSignedUrlDtoFramework = ClosedEnum<
   typeof ComplianceResourceSignedUrlDtoFramework
@@ -42,19 +42,22 @@ export const ComplianceResourceSignedUrlDtoFramework$zodSchema = z.enum([
   "iso_9001",
   "pipeda",
   "ccpa",
-]).describe("Compliance framework identifier");
+]).describe("Native compliance framework identifier");
 
 export type ComplianceResourceSignedUrlDto = {
   organizationId: string;
-  framework: ComplianceResourceSignedUrlDtoFramework;
+  framework?: ComplianceResourceSignedUrlDtoFramework | undefined;
+  customFrameworkId?: string | undefined;
 };
 
 export const ComplianceResourceSignedUrlDto$zodSchema: z.ZodType<
   ComplianceResourceSignedUrlDto
 > = z.object({
-  framework: ComplianceResourceSignedUrlDtoFramework$zodSchema.describe(
-    "Compliance framework identifier",
+  customFrameworkId: z.string().optional().describe(
+    "Org-authored custom framework ID (alternative to `framework`)",
   ),
+  framework: ComplianceResourceSignedUrlDtoFramework$zodSchema.optional()
+    .describe("Native compliance framework identifier"),
   organizationId: z.string().describe(
     "Organization ID that owns the compliance resource",
   ),

package/src/models/controlscontrollerunlinkdocumenttypev1op.ts

@@ -28,6 +28,7 @@ export const ControlsControllerUnlinkDocumentTypeV1FormType = {
   EmployeePerformanceEvaluation: "employee_performance_evaluation",
   NetworkDiagram: "network_diagram",
   TabletopExercise: "tabletop_exercise",
+  AccountTypes: "account_types",
 } as const;
 /**
  * Evidence form type to unlink from the control
@@ -49,6 +50,7 @@ export const ControlsControllerUnlinkDocumentTypeV1FormType$zodSchema = z.enum([
   "employee_performance_evaluation",
   "network_diagram",
   "tabletop_exercise",
+  "account_types",
 ]).describe("Evidence form type to unlink from the control");
 
 export type ControlsControllerUnlinkDocumentTypeV1Request = {

package/src/models/createcontroldto.ts

@@ -22,6 +22,7 @@ export const DocumentType = {
   EmployeePerformanceEvaluation: "employee_performance_evaluation",
   NetworkDiagram: "network_diagram",
   TabletopExercise: "tabletop_exercise",
+  AccountTypes: "account_types",
 } as const;
 export type DocumentType = ClosedEnum<typeof DocumentType>;
 
@@ -38,6 +39,7 @@ export const DocumentType$zodSchema = z.enum([
   "employee_performance_evaluation",
   "network_diagram",
   "tabletop_exercise",
+  "account_types",
 ]);
 
 export type CreateControlDto = {

package/src/models/createfindingdto.ts

@@ -21,6 +21,7 @@ export const EvidenceFormType = {
   EmployeePerformanceEvaluation: "employee-performance-evaluation",
   NetworkDiagram: "network-diagram",
   TabletopExercise: "tabletop-exercise",
+  AccountTypes: "account-types",
 } as const;
 /**
  * Evidence form type
@@ -40,6 +41,7 @@ export const EvidenceFormType$zodSchema = z.enum([
   "employee-performance-evaluation",
   "network-diagram",
   "tabletop-exercise",
+  "account-types",
 ]).describe("Evidence form type");
 
 /**

package/src/models/createpenetrationtestdto.ts

@@ -7,11 +7,15 @@ import * as z from "zod";
 export type CreatePenetrationTestDto = {
   targetUrl: string;
   repoUrl?: string | undefined;
+  additionalContext?: string | undefined;
 };
 
 export const CreatePenetrationTestDto$zodSchema: z.ZodType<
   CreatePenetrationTestDto
 > = z.object({
+  additionalContext: z.string().optional().describe(
+    "Free-text context shared with the testing agent, e.g. remediation notes or accepted-by-design explanations from a previous run. Saved per-finding context notes for the same target are appended automatically. Max 4000 characters.",
+  ),
   repoUrl: z.string().optional().describe(
     "Repository URL containing the target application code",
   ),