@trycompai/mcp-server 0.3.3 → 0.3.5

package/src/models/ismsregisterscontrollerupdaterowv1op.ts

@@ -6,11 +6,66 @@
 import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
+/**
+ * Which ISMS register the row belongs to.
+ */
+export const IsmsRegistersControllerUpdateRowV1Register = {
+  ContextIssues: "context-issues",
+  InterestedParties: "interested-parties",
+  Requirements: "requirements",
+  Objectives: "objectives",
+  Roles: "roles",
+  RoleAssignments: "role-assignments",
+  Metrics: "metrics",
+  Measurements: "measurements",
+  Audits: "audits",
+  AuditControls: "audit-controls",
+  AuditFindings: "audit-findings",
+  Reviews: "reviews",
+  ReviewInputs: "review-inputs",
+  ReviewActions: "review-actions",
+  Communications: "communications",
+  Obligations: "obligations",
+  KeyRecords: "key-records",
+  ApprovedSoftware: "approved-software",
+} as const;
+/**
+ * Which ISMS register the row belongs to.
+ */
+export type IsmsRegistersControllerUpdateRowV1Register = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Register
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Register$zodSchema = z.enum([
+  "context-issues",
+  "interested-parties",
+  "requirements",
+  "objectives",
+  "roles",
+  "role-assignments",
+  "metrics",
+  "measurements",
+  "audits",
+  "audit-controls",
+  "audit-findings",
+  "reviews",
+  "review-inputs",
+  "review-actions",
+  "communications",
+  "obligations",
+  "key-records",
+  "approved-software",
+]).describe("Which ISMS register the row belongs to.");
+
 export const IsmsRegistersControllerUpdateRowV1Kind = {
   Internal: "internal",
   External: "external",
   Recurring: "recurring",
   Milestone: "milestone",
+  Legal: "legal",
+  Regulatory: "regulatory",
+  Contractual: "contractual",
+  Standard: "standard",
 } as const;
 export type IsmsRegistersControllerUpdateRowV1Kind = ClosedEnum<
   typeof IsmsRegistersControllerUpdateRowV1Kind
@@ -21,6 +76,10 @@ export const IsmsRegistersControllerUpdateRowV1Kind$zodSchema = z.enum([
   "external",
   "recurring",
   "milestone",
+  "legal",
+  "regulatory",
+  "contractual",
+  "standard",
 ]);
 
 export const IsmsRegistersControllerUpdateRowV1Status = {
@@ -195,6 +254,132 @@ export const IsmsRegistersControllerUpdateRowV1Type$zodSchema = z.enum([
   "observation",
 ]);
 
+export const IsmsRegistersControllerUpdateRowV1Audience = {
+  Internal: "internal",
+  External: "external",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Audience = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Audience
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Audience$zodSchema = z.enum([
+  "internal",
+  "external",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Frequency = {
+  OnJoining: "on_joining",
+  OnPublication: "on_publication",
+  AsItHappens: "as_it_happens",
+  Monthly: "monthly",
+  Quarterly: "quarterly",
+  Annually: "annually",
+  OnRequest: "on_request",
+  WithinStatutoryDeadline: "within_statutory_deadline",
+  IfNeeded: "if_needed",
+  OnJoiningAndAnnually: "on_joining_and_annually",
+  AfterEachAudit: "after_each_audit",
+  OnOnboardingAndAsNeeded: "on_onboarding_and_as_needed",
+  PerAuditCycle: "per_audit_cycle",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Frequency = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Frequency
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Frequency$zodSchema = z.enum([
+  "on_joining",
+  "on_publication",
+  "as_it_happens",
+  "monthly",
+  "quarterly",
+  "annually",
+  "on_request",
+  "within_statutory_deadline",
+  "if_needed",
+  "on_joining_and_annually",
+  "after_each_audit",
+  "on_onboarding_and_as_needed",
+  "per_audit_cycle",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Channel = {
+  Email: "email",
+  SlackOrTeams: "slack_or_teams",
+  CompanyMeeting: "company_meeting",
+  TrustCentre: "trust_centre",
+  CompAiPortal: "comp_ai_portal",
+  TrainingPlatform: "training_platform",
+  WrittenNotice: "written_notice",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Channel = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Channel
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Channel$zodSchema = z.enum([
+  "email",
+  "slack_or_teams",
+  "company_meeting",
+  "trust_centre",
+  "comp_ai_portal",
+  "training_platform",
+  "written_notice",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Rotation = {
+  Automatic: "automatic",
+  Annually: "annually",
+  OnChange: "on_change",
+  OnChangeOrAnnually: "on_change_or_annually",
+  OnOffboarding: "on_offboarding",
+  NotRotated: "not_rotated",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Rotation = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Rotation
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Rotation$zodSchema = z.enum([
+  "automatic",
+  "annually",
+  "on_change",
+  "on_change_or_annually",
+  "on_offboarding",
+  "not_rotated",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1UsedWhere = {
+  EndUserDevices: "end_user_devices",
+  ProductionSystems: "production_systems",
+  Both: "both",
+  CloudService: "cloud_service",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1UsedWhere = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1UsedWhere
+>;
+
+export const IsmsRegistersControllerUpdateRowV1UsedWhere$zodSchema = z.enum([
+  "end_user_devices",
+  "production_systems",
+  "both",
+  "cloud_service",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Licence = {
+  Commercial: "commercial",
+  OpenSource: "open_source",
+  FreeTier: "free_tier",
+  Internal: "internal",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Licence = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Licence
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Licence$zodSchema = z.enum([
+  "commercial",
+  "open_source",
+  "free_tier",
+  "internal",
+]);
+
 export type IsmsRegistersControllerUpdateRowV1Attendee = {
   memberId: string;
   name: string;
@@ -305,18 +490,49 @@ export type IsmsRegistersControllerUpdateRowV1RequestBody = {
   whatItCovers?: string | undefined;
   discussionNotes?: string | null | undefined;
   discussed?: boolean | undefined;
+  what?: string | undefined;
+  audience?: IsmsRegistersControllerUpdateRowV1Audience | undefined;
+  recipients?: string | undefined;
+  ownerRoleKey?: string | null | undefined;
+  frequency?: IsmsRegistersControllerUpdateRowV1Frequency | undefined;
+  channel?: IsmsRegistersControllerUpdateRowV1Channel | undefined;
+  contactRef?: string | null | undefined;
+  evidenceRef?: string | undefined;
+  obligation?: string | undefined;
+  jurisdiction?: string | null | undefined;
+  howWeMeetIt?: string | null | undefined;
+  consequence?: string | null | undefined;
+  protects?: string | undefined;
+  managedIn?: string | undefined;
+  rotation?: IsmsRegistersControllerUpdateRowV1Rotation | undefined;
+  rotationNote?: string | null | undefined;
+  accessMemberId?: string | null | undefined;
+  accessRoleKey?: string | null | undefined;
+  accessText?: string | null | undefined;
+  purpose?: string | null | undefined;
+  vendorId?: string | null | undefined;
+  usedWhere?: IsmsRegistersControllerUpdateRowV1UsedWhere | null | undefined;
+  licence?: IsmsRegistersControllerUpdateRowV1Licence | null | undefined;
   position?: number | undefined;
 };
 
 export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   IsmsRegistersControllerUpdateRowV1RequestBody
 > = z.object({
+  accessMemberId: z.string().nullable().optional(),
+  accessRoleKey: z.string().nullable().optional().describe(
+    "ISMS role that holds the key when no member is named (e.g. spo)",
+  ),
+  accessText: z.string().nullable().optional().describe(
+    "Free-text access holder, for answers no picker can express (e.g. \"Each individual\")",
+  ),
   analyzeMemberId: z.string().nullable().optional(),
   attendees: z.array(
     z.lazy(() => IsmsRegistersControllerUpdateRowV1Attendee$zodSchema),
   ).optional().describe(
     "Attendees frozen at selection (members picked from People)",
   ),
+  audience: IsmsRegistersControllerUpdateRowV1Audience$zodSchema.optional(),
   auditCourse: z.string().nullable().optional(),
   auditDueDate: z.string().nullable().optional(),
   auditEvidenceRef: z.string().nullable().optional(),
@@ -335,12 +551,17 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   category: z.string().optional(),
   chairName: z.string().nullable().optional(),
   changesText: z.string().nullable().optional(),
+  channel: IsmsRegistersControllerUpdateRowV1Channel$zodSchema.optional(),
   clauseOrControl: z.string().nullable().optional(),
   closureEvidence: z.string().nullable().optional(),
   conclusionNotes: z.string().nullable().optional(),
   conclusionVerdict:
     IsmsRegistersControllerUpdateRowV1ConclusionVerdict$zodSchema.nullable()
       .optional(),
+  consequence: z.string().nullable().optional(),
+  contactRef: z.string().nullable().optional().describe(
+    "External rows only: the body name, reporting route and any reference number (A.5.5)",
+  ),
   controlId: z.string().nullable().optional(),
   controlRef: z.string().optional(),
   criteria: z.string().optional(),
@@ -350,12 +571,19 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   discussionNotes: z.string().nullable().optional(),
   dueDate: z.string().nullable().optional(),
   effect: z.string().optional(),
+  evidenceRef: z.string().optional(),
   evidenceRetained: z.string().nullable().optional(),
+  frequency: IsmsRegistersControllerUpdateRowV1Frequency$zodSchema.optional(),
   gap: z.string().nullable().optional(),
+  howWeMeetIt: z.string().nullable().optional(),
   inputRef: z.string().optional(),
   interestedPartyId: z.string().optional(),
   isActive: z.boolean().optional(),
+  jurisdiction: z.string().nullable().optional(),
   kind: IsmsRegistersControllerUpdateRowV1Kind$zodSchema.optional(),
+  licence: IsmsRegistersControllerUpdateRowV1Licence$zodSchema.nullable()
+    .optional(),
+  managedIn: z.string().optional(),
   measurementMethod: z.string().optional(),
   meetingDate: z.string().nullable().optional(),
   memberId: z.string().optional(),
@@ -372,7 +600,11 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   objectiveId: z.string().nullable().optional().describe(
     "Deprecated: objectives now take their numbers from a metric, not the reverse.",
   ),
+  obligation: z.string().optional(),
   ownerMemberId: z.string().optional(),
+  ownerRoleKey: z.string().nullable().optional().describe(
+    "ISMS role accountable when no member is assigned (e.g. spo, top_management, internal_auditor)",
+  ),
   partyName: z.string().optional(),
   periodStart: z.string().optional().describe(
     "First day of the covered period (YYYY-MM-DD), aligned to the metric cadence",
@@ -381,6 +613,9 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   plannedEndDate: z.string().nullable().optional(),
   plannedStartDate: z.string().nullable().optional(),
   position: z.int().optional(),
+  protects: z.string().optional(),
+  purpose: z.string().nullable().optional(),
+  recipients: z.string().optional(),
   remediationAction: z.string().nullable().optional(),
   remediationDueDate: z.string().nullable().optional(),
   requiredCompetence: z.string().optional(),
@@ -390,6 +625,10 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
     .optional(),
   reviewId: z.string().optional(),
   roleId: z.string().optional(),
+  rotation: IsmsRegistersControllerUpdateRowV1Rotation$zodSchema.optional(),
+  rotationNote: z.string().nullable().optional().describe(
+    "Only kept when rotation is not_rotated",
+  ),
   scope: z.string().optional(),
   signoffAuditorDate: z.string().nullable().optional(),
   signoffAuditorName: z.string().nullable().optional(),
@@ -414,7 +653,13 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   treatment: z.string().optional(),
   type: IsmsRegistersControllerUpdateRowV1Type$zodSchema.optional(),
   unit: IsmsRegistersControllerUpdateRowV1Unit$zodSchema.nullable().optional(),
+  usedWhere: IsmsRegistersControllerUpdateRowV1UsedWhere$zodSchema.nullable()
+    .optional(),
   value: z.string().optional(),
+  vendorId: z.string().nullable().optional().describe(
+    "Links the row to a vendor; the name then renders live",
+  ),
+  what: z.string().optional(),
   whatIsMeasured: z.string().optional(),
   whatItCovers: z.string().optional(),
   whatWasTested: z.string().optional(),
@@ -422,7 +667,7 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
 }).describe("Register row fields (per-register; validated at runtime by zod)");
 
 export type IsmsRegistersControllerUpdateRowV1Request = {
-  register: string;
+  register: IsmsRegistersControllerUpdateRowV1Register;
   rowId: string;
   body: IsmsRegistersControllerUpdateRowV1RequestBody;
 };
@@ -434,6 +679,8 @@ export const IsmsRegistersControllerUpdateRowV1Request$zodSchema: z.ZodType<
     .describe(
       "Register row fields (per-register; validated at runtime by zod)",
     ),
-  register: z.string(),
+  register: IsmsRegistersControllerUpdateRowV1Register$zodSchema.describe(
+    "Which ISMS register the row belongs to.",
+  ),
   rowId: z.string(),
 });

package/src/models/policiescontrollerextractpolicydocumentv1op.ts

@@ -0,0 +1,25 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 4ddeee64390b
+ */
+
+import * as z from "zod";
+import {
+  RequestPolicyDocumentExtractionDto,
+  RequestPolicyDocumentExtractionDto$zodSchema,
+} from "./requestpolicydocumentextractiondto.js";
+
+export type PoliciesControllerExtractPolicyDocumentV1Request = {
+  xOrganizationId?: string | undefined;
+  id: string;
+  body?: RequestPolicyDocumentExtractionDto | undefined;
+};
+
+export const PoliciesControllerExtractPolicyDocumentV1Request$zodSchema:
+  z.ZodType<PoliciesControllerExtractPolicyDocumentV1Request> = z.object({
+    body: RequestPolicyDocumentExtractionDto$zodSchema.optional(),
+    id: z.string().describe("Policy ID"),
+    xOrganizationId: z.string().describe(
+      "Organization ID (required for session auth, optional for API key auth)",
+    ).optional(),
+  });

package/src/models/policydocumentextractionresponsedto.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 2f5cc30d6f75
+ */
+
+import * as z from "zod";
+
+/**
+ * The version the read targets, or null when the policy has no version to read into.
+ */
+export type VersionId = {};
+
+export const VersionId$zodSchema: z.ZodType<VersionId> = z.object({}).describe(
+  "The version the read targets, or null when the policy has no version to read into.",
+);
+
+/**
+ * Null when the read was queued. Otherwise why it was not, so a caller never waits for text that is not coming: `no_version` / `no_document` (nothing to read), `already_has_content` (the version already has text), `pending_approval` or `published_version` (the target may not be written to), `document_replaced` (the attached file changed), `queue_unavailable` (the job could not be scheduled — retry).
+ */
+export type Reason = {};
+
+export const Reason$zodSchema: z.ZodType<Reason> = z.object({}).describe(
+  "Null when the read was queued. Otherwise why it was not, so a caller never waits for text that is not coming: `no_version` / `no_document` (nothing to read), `already_has_content` (the version already has text), `pending_approval` or `published_version` (the target may not be written to), `document_replaced` (the attached file changed), `queue_unavailable` (the job could not be scheduled — retry).",
+);
+
+export type PolicyDocumentExtractionResponseDto = {
+  queued: boolean;
+  versionId: VersionId | null;
+  reason?: Reason | null | undefined;
+};
+
+export const PolicyDocumentExtractionResponseDto$zodSchema: z.ZodType<
+  PolicyDocumentExtractionResponseDto
+> = z.object({
+  queued: z.boolean().describe(
+    "True when a read of the attached document was queued. False when no read will happen — see `reason`.",
+  ),
+  reason: z.lazy(() => Reason$zodSchema).nullable().optional().describe(
+    "Null when the read was queued. Otherwise why it was not, so a caller never waits for text that is not coming: `no_version` / `no_document` (nothing to read), `already_has_content` (the version already has text), `pending_approval` or `published_version` (the target may not be written to), `document_replaced` (the attached file changed), `queue_unavailable` (the job could not be scheduled — retry).",
+  ),
+  versionId: z.lazy(() => VersionId$zodSchema).nullable().describe(
+    "The version the read targets, or null when the policy has no version to read into.",
+  ),
+});

package/src/models/requestpolicydocumentextractiondto.ts

@@ -0,0 +1,18 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: ece7be891060
+ */
+
+import * as z from "zod";
+
+export type RequestPolicyDocumentExtractionDto = {
+  versionId?: string | undefined;
+};
+
+export const RequestPolicyDocumentExtractionDto$zodSchema: z.ZodType<
+  RequestPolicyDocumentExtractionDto
+> = z.object({
+  versionId: z.string().optional().describe(
+    "Optional version ID whose attached document should be read. Omit to use the policy's current version.",
+  ),
+});

package/src/tool-names.ts

@@ -576,6 +576,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "confirm-policy-pdf-uploaded",
     "description": "Confirm a policy PDF upload completed\n\nLinks an uploaded PDF to a compliance policy after the file has been PUT to a presigned S3 URL. Call this after request-policy-pdf-upload-url returned an s3Key and you successfully uploaded the file bytes to that URL. The endpoint verifies the file exists in S3 before linking it to the policy or version."
   },
+  {
+    "name": "extract-policy-document",
+    "description": "Re-read an attached policy document into the editor\n\nQueues a fresh read of the PDF already attached to a policy, storing its text as the version's editor content. Use when an uploaded policy still reads as empty because its first read never produced any text."
+  },
   {
     "name": "get-pdf-url",
     "description": "Get signed URL for policy PDF (alternate path)\n\nGet signed URL for policy PDF (alternate path) in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
@@ -1260,6 +1264,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "remove-control",
     "description": "Remove a control mapping from an ISMS document\n\nRemoves the mapping between an ISMS document and one organization control. Takes the control id, not the link row id. The control itself is not deleted, and unlinking a control that was never linked succeeds silently."
   },
+  {
+    "name": "set-coverage",
+    "description": "Set how much of an ISMS document Comp AI holds\n\nMarks a whole ISMS document as included, maintained outside Comp AI, or not applicable, which requires a written justification. External renders a pointer to where the content lives. Per-section coverage is not available yet."
+  },
   {
     "name": "generate",
     "description": "Derive Context-of-the-Organization issues\n\nRegenerates one ISMS document's derived content based on its type and refreshes the drift baseline. Manually added register rows and non-empty narratives are preserved; derived rows are replaced. Reverts an approved document to draft."
@@ -1306,7 +1314,7 @@ export const toolNames: Array<{ name: string; description: string }>= [
   },
   {
     "name": "create-row",
-    "description": "Create a row in an ISMS register\n\nAdds a row to an ISMS register. Valid values: context-issues, interested-parties, requirements, objectives, roles, role-assignments, metrics, measurements, audits, audit-controls, audit-findings, reviews, review-inputs, review-actions."
+    "description": "Create a row in an ISMS register\n\nCreate a row in an ISMS register in Comp AI. Build and maintain the ISO 27001 ISMS document set — scope, leadership commitment, context, interested parties, objectives, roles, monitoring, internal audit, and management review."
   },
   {
     "name": "update-row",
@@ -1320,6 +1328,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "bulk-create-measurements",
     "description": "Record measurements for several metrics/periods in one save (Metrics due / backfill)\n\nRecord measurements for several metrics/periods in one save (Metrics due / backfill) in Comp AI. Build and maintain the ISO 27001 ISMS document set — scope, leadership commitment, context, interested parties, objectives, roles."
   },
+  {
+    "name": "import-vendors-as-software",
+    "description": "Add vendors to the Approved Software Register in one action\n\nAdds the chosen vendors as approved software rows in one transaction. Vendors already listed are skipped, not duplicated. \"Where it is used\" is left unanswered: a supplier record does not say where its product runs."
+  },
   {
     "name": "save-narrative",
     "description": "Save a singleton document narrative\n\nReplaces the working draft narrative of a document type that stores one, such as ISMS scope, leadership commitment, internal audit or risk assessment methodology. The narrative object is fully replaced, not merged."