@trycompai/mcp-server 0.2.5 → 0.2.6

package/src/models/riskacceptancescontrollerlistriskacceptancesv1op.ts

@@ -0,0 +1,281 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Residual likelihood frozen at acceptance
+ */
+export const RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood =
+  {
+    VeryUnlikely: "very_unlikely",
+    Unlikely: "unlikely",
+    Possible: "possible",
+    Likely: "likely",
+    VeryLikely: "very_likely",
+  } as const;
+/**
+ * Residual likelihood frozen at acceptance
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood =
+  ClosedEnum<
+    typeof RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood
+  >;
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood$zodSchema =
+  z.enum([
+    "very_unlikely",
+    "unlikely",
+    "possible",
+    "likely",
+    "very_likely",
+  ]).describe("Residual likelihood frozen at acceptance");
+
+/**
+ * Residual impact frozen at acceptance
+ */
+export const RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact = {
+  Insignificant: "insignificant",
+  Minor: "minor",
+  Moderate: "moderate",
+  Major: "major",
+  Severe: "severe",
+} as const;
+/**
+ * Residual impact frozen at acceptance
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact =
+  ClosedEnum<
+    typeof RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact
+  >;
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact$zodSchema =
+  z.enum([
+    "insignificant",
+    "minor",
+    "moderate",
+    "major",
+    "severe",
+  ]).describe("Residual impact frozen at acceptance");
+
+/**
+ * Risk level of the accepted residual rating
+ */
+export const RiskAcceptancesControllerListRiskAcceptancesV1Level = {
+  VeryLow: "very-low",
+  Low: "low",
+  Medium: "medium",
+  High: "high",
+  VeryHigh: "very-high",
+} as const;
+/**
+ * Risk level of the accepted residual rating
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1Level = ClosedEnum<
+  typeof RiskAcceptancesControllerListRiskAcceptancesV1Level
+>;
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1Level$zodSchema = z
+  .enum([
+    "very-low",
+    "low",
+    "medium",
+    "high",
+    "very-high",
+  ]).describe("Risk level of the accepted residual rating");
+
+/**
+ * How the request was authenticated
+ */
+export const RiskAcceptancesControllerListRiskAcceptancesV1AuthType = {
+  ApiKey: "api-key",
+  Session: "session",
+  Service: "service",
+} as const;
+/**
+ * How the request was authenticated
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1AuthType = ClosedEnum<
+  typeof RiskAcceptancesControllerListRiskAcceptancesV1AuthType
+>;
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1AuthType$zodSchema =
+  z.enum([
+    "api-key",
+    "session",
+    "service",
+  ]).describe("How the request was authenticated");
+
+export type RiskAcceptancesControllerListRiskAcceptancesV1Request = {
+  id: string;
+};
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1Request$zodSchema:
+  z.ZodType<RiskAcceptancesControllerListRiskAcceptancesV1Request> = z.object({
+    id: z.string().describe("Risk ID"),
+  });
+
+/**
+ * Internal server error
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1InternalServerErrorResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1InternalServerErrorResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerListRiskAcceptancesV1InternalServerErrorResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Internal server error");
+
+/**
+ * Risk not found
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1NotFoundResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1NotFoundResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerListRiskAcceptancesV1NotFoundResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Risk not found");
+
+/**
+ * Forbidden - User does not have permission to access this risk
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1ForbiddenResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1ForbiddenResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerListRiskAcceptancesV1ForbiddenResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Forbidden - User does not have permission to access this risk");
+
+/**
+ * Unauthorized - Invalid authentication
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1UnauthorizedResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1UnauthorizedResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerListRiskAcceptancesV1UnauthorizedResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Unauthorized - Invalid authentication");
+
+export type RiskAcceptancesControllerListRiskAcceptancesV1Data = {
+  id?: string | undefined;
+  acceptedById?: string | null | undefined;
+  acceptedByName?: string | undefined;
+  notes?: string | null | undefined;
+  residualLikelihood?:
+    | RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood
+    | undefined;
+  residualImpact?:
+    | RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact
+    | undefined;
+  level?: RiskAcceptancesControllerListRiskAcceptancesV1Level | undefined;
+  levelLabel?: string | undefined;
+  stale?: boolean | undefined;
+  createdAt?: string | undefined;
+};
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1Data$zodSchema:
+  z.ZodType<RiskAcceptancesControllerListRiskAcceptancesV1Data> = z.object({
+    acceptedById: z.string().nullable().optional().describe(
+      "Member ID of the acceptor (null if since removed)",
+    ),
+    acceptedByName: z.string().optional().describe(
+      "Acceptor display name, frozen at acceptance",
+    ),
+    createdAt: z.iso.datetime({ offset: true }).optional().describe(
+      "When the acceptance was recorded (server-set, immutable)",
+    ),
+    id: z.string().optional().describe("Acceptance event ID"),
+    level: RiskAcceptancesControllerListRiskAcceptancesV1Level$zodSchema
+      .optional().describe("Risk level of the accepted residual rating"),
+    levelLabel: z.string().optional().describe("Human-readable level label"),
+    notes: z.string().nullable().optional(),
+    residualImpact:
+      RiskAcceptancesControllerListRiskAcceptancesV1ResidualImpact$zodSchema
+        .optional().describe("Residual impact frozen at acceptance"),
+    residualLikelihood:
+      RiskAcceptancesControllerListRiskAcceptancesV1ResidualLikelihood$zodSchema
+        .optional().describe("Residual likelihood frozen at acceptance"),
+    stale: z.boolean().optional().describe(
+      "True when the residual rating changed after this acceptance was recorded — re-acceptance is required",
+    ),
+  });
+
+/**
+ * User information (only for session auth)
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1AuthenticatedUser = {
+  id?: string | undefined;
+  email?: string | undefined;
+};
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1AuthenticatedUser$zodSchema:
+  z.ZodType<RiskAcceptancesControllerListRiskAcceptancesV1AuthenticatedUser> = z
+    .object({
+      email: z.string().optional(),
+      id: z.string().optional(),
+    }).describe("User information (only for session auth)");
+
+/**
+ * Acceptance history retrieved successfully (newest first)
+ */
+export type RiskAcceptancesControllerListRiskAcceptancesV1ResponseBody = {
+  data?: Array<RiskAcceptancesControllerListRiskAcceptancesV1Data> | undefined;
+  authType?: RiskAcceptancesControllerListRiskAcceptancesV1AuthType | undefined;
+  authenticatedUser?:
+    | RiskAcceptancesControllerListRiskAcceptancesV1AuthenticatedUser
+    | undefined;
+};
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1ResponseBody$zodSchema:
+  z.ZodType<RiskAcceptancesControllerListRiskAcceptancesV1ResponseBody> = z
+    .object({
+      authType: RiskAcceptancesControllerListRiskAcceptancesV1AuthType$zodSchema
+        .optional().describe("How the request was authenticated"),
+      authenticatedUser: z.lazy(() =>
+        RiskAcceptancesControllerListRiskAcceptancesV1AuthenticatedUser$zodSchema
+      ).optional().describe("User information (only for session auth)"),
+      data: z.array(
+        z.lazy(() =>
+          RiskAcceptancesControllerListRiskAcceptancesV1Data$zodSchema
+        ),
+      ).optional(),
+    }).describe("Acceptance history retrieved successfully (newest first)");
+
+export type RiskAcceptancesControllerListRiskAcceptancesV1Response =
+  | RiskAcceptancesControllerListRiskAcceptancesV1ResponseBody
+  | RiskAcceptancesControllerListRiskAcceptancesV1UnauthorizedResponseBody
+  | RiskAcceptancesControllerListRiskAcceptancesV1ForbiddenResponseBody
+  | RiskAcceptancesControllerListRiskAcceptancesV1NotFoundResponseBody
+  | RiskAcceptancesControllerListRiskAcceptancesV1InternalServerErrorResponseBody;
+
+export const RiskAcceptancesControllerListRiskAcceptancesV1Response$zodSchema:
+  z.ZodType<RiskAcceptancesControllerListRiskAcceptancesV1Response> = z.union([
+    z.lazy(() =>
+      RiskAcceptancesControllerListRiskAcceptancesV1ResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerListRiskAcceptancesV1UnauthorizedResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerListRiskAcceptancesV1ForbiddenResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerListRiskAcceptancesV1NotFoundResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerListRiskAcceptancesV1InternalServerErrorResponseBody$zodSchema
+    ),
+  ]);

package/src/models/riskacceptancescontrollerrecordriskacceptancev1op.ts

@@ -0,0 +1,295 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+import {
+  CreateRiskAcceptanceDto,
+  CreateRiskAcceptanceDto$zodSchema,
+} from "./createriskacceptancedto.js";
+
+/**
+ * Residual likelihood frozen at acceptance
+ */
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood =
+  {
+    VeryUnlikely: "very_unlikely",
+    Unlikely: "unlikely",
+    Possible: "possible",
+    Likely: "likely",
+    VeryLikely: "very_likely",
+  } as const;
+/**
+ * Residual likelihood frozen at acceptance
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood =
+  ClosedEnum<
+    typeof RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood
+  >;
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood$zodSchema =
+  z.enum([
+    "very_unlikely",
+    "unlikely",
+    "possible",
+    "likely",
+    "very_likely",
+  ]).describe("Residual likelihood frozen at acceptance");
+
+/**
+ * Residual impact frozen at acceptance
+ */
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact = {
+  Insignificant: "insignificant",
+  Minor: "minor",
+  Moderate: "moderate",
+  Major: "major",
+  Severe: "severe",
+} as const;
+/**
+ * Residual impact frozen at acceptance
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact =
+  ClosedEnum<
+    typeof RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact
+  >;
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact$zodSchema =
+  z.enum([
+    "insignificant",
+    "minor",
+    "moderate",
+    "major",
+    "severe",
+  ]).describe("Residual impact frozen at acceptance");
+
+/**
+ * Risk level of the accepted residual rating
+ */
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1Level = {
+  VeryLow: "very-low",
+  Low: "low",
+  Medium: "medium",
+  High: "high",
+  VeryHigh: "very-high",
+} as const;
+/**
+ * Risk level of the accepted residual rating
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1Level = ClosedEnum<
+  typeof RiskAcceptancesControllerRecordRiskAcceptanceV1Level
+>;
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1Level$zodSchema = z
+  .enum([
+    "very-low",
+    "low",
+    "medium",
+    "high",
+    "very-high",
+  ]).describe("Risk level of the accepted residual rating");
+
+/**
+ * How the request was authenticated
+ */
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType = {
+  ApiKey: "api-key",
+  Session: "session",
+  Service: "service",
+} as const;
+/**
+ * How the request was authenticated
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType =
+  ClosedEnum<typeof RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType>;
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType$zodSchema =
+  z.enum([
+    "api-key",
+    "session",
+    "service",
+  ]).describe("How the request was authenticated");
+
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1Request = {
+  id: string;
+  body: CreateRiskAcceptanceDto;
+};
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1Request$zodSchema:
+  z.ZodType<RiskAcceptancesControllerRecordRiskAcceptanceV1Request> = z.object({
+    body: CreateRiskAcceptanceDto$zodSchema.describe(
+      "Acceptance data (acceptor defaults to the risk owner)",
+    ),
+    id: z.string().describe("Risk ID"),
+  });
+
+/**
+ * Internal server error
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1InternalServerErrorResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1InternalServerErrorResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerRecordRiskAcceptanceV1InternalServerErrorResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Internal server error");
+
+/**
+ * Risk not found
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1NotFoundResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1NotFoundResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerRecordRiskAcceptanceV1NotFoundResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Risk not found");
+
+/**
+ * Forbidden - User does not have permission to access this risk
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1ForbiddenResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ForbiddenResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerRecordRiskAcceptanceV1ForbiddenResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Forbidden - User does not have permission to access this risk");
+
+/**
+ * Unauthorized - Invalid authentication
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1UnauthorizedResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1UnauthorizedResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerRecordRiskAcceptanceV1UnauthorizedResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("Unauthorized - Invalid authentication");
+
+/**
+ * No owner assigned, or the acceptor is not a valid member
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1BadRequestResponseBody =
+  { message?: string | undefined };
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1BadRequestResponseBody$zodSchema:
+  z.ZodType<
+    RiskAcceptancesControllerRecordRiskAcceptanceV1BadRequestResponseBody
+  > = z.object({
+    message: z.string().optional(),
+  }).describe("No owner assigned, or the acceptor is not a valid member");
+
+/**
+ * User information (only for session auth)
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1AuthenticatedUser = {
+  id?: string | undefined;
+  email?: string | undefined;
+};
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1AuthenticatedUser$zodSchema:
+  z.ZodType<RiskAcceptancesControllerRecordRiskAcceptanceV1AuthenticatedUser> =
+    z.object({
+      email: z.string().optional(),
+      id: z.string().optional(),
+    }).describe("User information (only for session auth)");
+
+/**
+ * Acceptance recorded successfully
+ */
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1ResponseBody = {
+  id?: string | undefined;
+  acceptedById?: string | null | undefined;
+  acceptedByName?: string | undefined;
+  notes?: string | null | undefined;
+  residualLikelihood?:
+    | RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood
+    | undefined;
+  residualImpact?:
+    | RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact
+    | undefined;
+  level?: RiskAcceptancesControllerRecordRiskAcceptanceV1Level | undefined;
+  levelLabel?: string | undefined;
+  stale?: boolean | undefined;
+  createdAt?: string | undefined;
+  authType?:
+    | RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType
+    | undefined;
+  authenticatedUser?:
+    | RiskAcceptancesControllerRecordRiskAcceptanceV1AuthenticatedUser
+    | undefined;
+};
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1ResponseBody$zodSchema:
+  z.ZodType<RiskAcceptancesControllerRecordRiskAcceptanceV1ResponseBody> = z
+    .object({
+      acceptedById: z.string().nullable().optional().describe(
+        "Member ID of the acceptor (null if since removed)",
+      ),
+      acceptedByName: z.string().optional().describe(
+        "Acceptor display name, frozen at acceptance",
+      ),
+      authType:
+        RiskAcceptancesControllerRecordRiskAcceptanceV1AuthType$zodSchema
+          .optional().describe("How the request was authenticated"),
+      authenticatedUser: z.lazy(() =>
+        RiskAcceptancesControllerRecordRiskAcceptanceV1AuthenticatedUser$zodSchema
+      ).optional().describe("User information (only for session auth)"),
+      createdAt: z.iso.datetime({ offset: true }).optional().describe(
+        "When the acceptance was recorded (server-set, immutable)",
+      ),
+      id: z.string().optional().describe("Acceptance event ID"),
+      level: RiskAcceptancesControllerRecordRiskAcceptanceV1Level$zodSchema
+        .optional().describe("Risk level of the accepted residual rating"),
+      levelLabel: z.string().optional().describe("Human-readable level label"),
+      notes: z.string().nullable().optional(),
+      residualImpact:
+        RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualImpact$zodSchema
+          .optional().describe("Residual impact frozen at acceptance"),
+      residualLikelihood:
+        RiskAcceptancesControllerRecordRiskAcceptanceV1ResidualLikelihood$zodSchema
+          .optional().describe("Residual likelihood frozen at acceptance"),
+      stale: z.boolean().optional().describe(
+        "True when the residual rating changed after this acceptance was recorded — re-acceptance is required",
+      ),
+    }).describe("Acceptance recorded successfully");
+
+export type RiskAcceptancesControllerRecordRiskAcceptanceV1Response =
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1ResponseBody
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1BadRequestResponseBody
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1UnauthorizedResponseBody
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1ForbiddenResponseBody
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1NotFoundResponseBody
+  | RiskAcceptancesControllerRecordRiskAcceptanceV1InternalServerErrorResponseBody;
+
+export const RiskAcceptancesControllerRecordRiskAcceptanceV1Response$zodSchema:
+  z.ZodType<RiskAcceptancesControllerRecordRiskAcceptanceV1Response> = z.union([
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1ResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1BadRequestResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1UnauthorizedResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1ForbiddenResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1NotFoundResponseBody$zodSchema
+    ),
+    z.lazy(() =>
+      RiskAcceptancesControllerRecordRiskAcceptanceV1InternalServerErrorResponseBody$zodSchema
+    ),
+  ]);

package/src/models/securitypenetrationtestscontrollerupdatefindingstatusv1op.ts

@@ -0,0 +1,27 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+import {
+  UpdateFindingStatusDto,
+  UpdateFindingStatusDto$zodSchema,
+} from "./updatefindingstatusdto.js";
+
+export type SecurityPenetrationTestsControllerUpdateFindingStatusV1Request = {
+  xOrganizationId?: string | undefined;
+  id: string;
+  issueId: string;
+  body: UpdateFindingStatusDto;
+};
+
+export const SecurityPenetrationTestsControllerUpdateFindingStatusV1Request$zodSchema:
+  z.ZodType<SecurityPenetrationTestsControllerUpdateFindingStatusV1Request> = z
+    .object({
+      body: UpdateFindingStatusDto$zodSchema,
+      id: z.string(),
+      issueId: z.string(),
+      xOrganizationId: z.string().describe(
+        "Organization ID (required for session auth, optional for API key auth)",
+      ).optional(),
+    });

package/src/models/updatecommentdto.ts

@@ -12,7 +12,9 @@ export type UpdateCommentDto = {
 
 export const UpdateCommentDto$zodSchema: z.ZodType<UpdateCommentDto> = z.object(
   {
-    content: z.string().describe("Updated content of the comment"),
+    content: z.string().describe(
+      "Updated content of the comment (plain text or serialized Tiptap JSON). Limited to 2000 characters of visible text; maxLength bounds the serialized payload size, not the visible text.",
+    ),
     contextUrl: z.string().optional().describe(
       "Optional URL of the page where the comment was updated, used for deep-linking in notifications",
     ),

package/src/models/updatefindingstatusdto.ts

@@ -0,0 +1,49 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * New status for the finding. `false_positive` and `wont_fix` dispute the finding and require a justification note.
+ */
+export const UpdateFindingStatusDtoStatus = {
+  Open: "open",
+  Acknowledged: "acknowledged",
+  Resolved: "resolved",
+  FalsePositive: "false_positive",
+  WontFix: "wont_fix",
+} as const;
+/**
+ * New status for the finding. `false_positive` and `wont_fix` dispute the finding and require a justification note.
+ */
+export type UpdateFindingStatusDtoStatus = ClosedEnum<
+  typeof UpdateFindingStatusDtoStatus
+>;
+
+export const UpdateFindingStatusDtoStatus$zodSchema = z.enum([
+  "open",
+  "acknowledged",
+  "resolved",
+  "false_positive",
+  "wont_fix",
+]).describe(
+  "New status for the finding. `false_positive` and `wont_fix` dispute the finding and require a justification note.",
+);
+
+export type UpdateFindingStatusDto = {
+  status: UpdateFindingStatusDtoStatus;
+  note?: string | undefined;
+};
+
+export const UpdateFindingStatusDto$zodSchema: z.ZodType<
+  UpdateFindingStatusDto
+> = z.object({
+  note: z.string().optional().describe(
+    "Justification for the status change. REQUIRED, and at least 20 characters after trimming, when status is `false_positive` or `wont_fix`. Optional and unconstrained for the other statuses. Recorded in the finding's status history, written to the Comp audit log, and shared with the testing agent on future scans of the same target.",
+  ),
+  status: UpdateFindingStatusDtoStatus$zodSchema.describe(
+    "New status for the finding. `false_positive` and `wont_fix` dispute the finding and require a justification note.",
+  ),
+});

package/src/models/updateroledto.ts

@@ -18,11 +18,15 @@ export const UpdateRoleDtoPermissions$zodSchema: z.ZodType<
 /**
  * Updated obligations for the role.
  */
-export type UpdateRoleDtoObligations = {};
+export type UpdateRoleDtoObligations = { compliance?: boolean | undefined };
 
 export const UpdateRoleDtoObligations$zodSchema: z.ZodType<
   UpdateRoleDtoObligations
-> = z.object({}).describe("Updated obligations for the role.");
+> = z.object({
+  compliance: z.boolean().optional().describe(
+    "Whether the role must complete compliance tasks.",
+  ),
+}).describe("Updated obligations for the role.");
 
 export type UpdateRoleDto = {
   name?: string | undefined;