@zivis/mcp 0.1.0-alpha.1

package/dist/tools/enterprise/get-report-status.d.ts

@@ -0,0 +1,27 @@
+/**
+ * zivis_get_report_status — Check report generation and PDF export status
+ *
+ * Maps to: GET /api/reports/:id
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const GET_REPORT_STATUS_NAME = "zivis_get_report_status";
+export declare const GET_REPORT_STATUS_DESCRIPTION = "Check the status of a report, including content generation progress and PDF export status.\n\nUse this after calling zivis_generate_report to monitor progress.";
+export declare const GET_REPORT_STATUS_SCHEMA: {
+    report_id: z.ZodString;
+};
+export declare function createGetReportStatusHandler(apiClient: ApiClient): (params: {
+    report_id: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/get-report-status.js

@@ -0,0 +1,38 @@
+/**
+ * zivis_get_report_status — Check report generation and PDF export status
+ *
+ * Maps to: GET /api/reports/:id
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const GET_REPORT_STATUS_NAME = "zivis_get_report_status";
+export const GET_REPORT_STATUS_DESCRIPTION = `Check the status of a report, including content generation progress and PDF export status.
+
+Use this after calling zivis_generate_report to monitor progress.`;
+export const GET_REPORT_STATUS_SCHEMA = {
+    report_id: z.string().describe("Report UUID to check status for"),
+};
+export function createGetReportStatusHandler(apiClient) {
+    return async (params) => {
+        try {
+            const data = await apiClient.get(`/api/reports/${params.report_id}`);
+            const sanitized = sanitizeResponse(data);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(sanitized, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to get report status";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=get-report-status.js.map

package/dist/tools/enterprise/get-report-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-report-status.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-report-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,6BAA6B,GAAG;;kEAEqB,CAAC;AAEnE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAClE,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAA6B,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gBAAgB,MAAM,CAAC,SAAS,EAAE,CACnC,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/get-threat-model.d.ts

@@ -0,0 +1,29 @@
+/**
+ * zivis_get_threat_model — Get a threat model with all entities
+ *
+ * Maps to: GET /api/threat-models/:id
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
+export declare const GET_THREAT_MODEL_DESCRIPTION = "Get a threat model with ALL its entities \u2014 actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.\n\nReturns the complete threat model including:\n- **Actors**: Who interacts with the system (external users, attackers, internal services)\n- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level\n- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)\n- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors\n- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness\n- **Data Assets**: What sensitive data exists and how it's classified\n- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)\n- **Findings**: Discovered vulnerabilities with severity and remediation recommendations\n- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model\n\nIMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.\n\nUse this to understand the full security posture before making changes, adding entities, or running pen tests.\nAfter viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.\nUse zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).";
+export declare const GET_THREAT_MODEL_SCHEMA: {
+    threat_model_id: z.ZodString;
+    include_test_cases: z.ZodDefault<z.ZodBoolean>;
+};
+export declare function createGetThreatModelHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    include_test_cases?: boolean;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/get-threat-model.js

@@ -0,0 +1,83 @@
+/**
+ * zivis_get_threat_model — Get a threat model with all entities
+ *
+ * Maps to: GET /api/threat-models/:id
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
+export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.
+
+Returns the complete threat model including:
+- **Actors**: Who interacts with the system (external users, attackers, internal services)
+- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level
+- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)
+- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors
+- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness
+- **Data Assets**: What sensitive data exists and how it's classified
+- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)
+- **Findings**: Discovered vulnerabilities with severity and remediation recommendations
+- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model
+
+IMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.
+
+Use this to understand the full security posture before making changes, adding entities, or running pen tests.
+After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.
+Use zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).`;
+export const GET_THREAT_MODEL_SCHEMA = {
+    threat_model_id: z
+        .string()
+        .describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
+    include_test_cases: z
+        .boolean()
+        .default(true)
+        .describe("Whether to include test cases in the response"),
+};
+export function createGetThreatModelHandler(apiClient) {
+    return async (params) => {
+        try {
+            // Fetch threat model and linked diagrams in parallel
+            const [threatModelData, diagramsData] = await Promise.all([
+                apiClient.get(`/api/threat-models/${params.threat_model_id}?include=all`),
+                apiClient
+                    .get(`/api/diagrams?linkedThreatModelId=${params.threat_model_id}&take=50`)
+                    .catch(() => ({ diagrams: [], total: 0 })),
+            ]);
+            const sanitized = sanitizeResponse(threatModelData);
+            // Attach linked diagrams summary to the response
+            const diagrams = Array.isArray(diagramsData.diagrams)
+                ? diagramsData.diagrams.map((d) => ({
+                    diagram_id: d.id,
+                    name: d.name,
+                    diagram_type: d.diagramType,
+                    content_type: d.contentType,
+                    description: d.description || null,
+                    node_count: d._count?.nodes ?? null,
+                    connection_count: d._count?.connections ?? null,
+                    updated_at: d.updatedAt,
+                }))
+                : [];
+            const result = {
+                ...sanitized,
+                linked_diagrams: diagrams,
+                linked_diagrams_count: diagramsData.total,
+            };
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to get threat model";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=get-threat-model.js.map

package/dist/tools/enterprise/get-threat-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-threat-model.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-threat-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;gIAiBoF,CAAC;AAEjI,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAAiE,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,SAAS,CAAC,GAAG,CACX,sBAAsB,MAAM,CAAC,eAAe,cAAc,CAC3D;gBACD,SAAS;qBACN,GAAG,CACF,qCAAqC,MAAM,CAAC,eAAe,UAAU,CACtE;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAA4B,CAAC;YAE/E,iDAAiD;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACnD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBACzD,UAAU,EAAE,CAAC,CAAC,EAAE;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,UAAU,EAAG,CAAC,CAAC,MAAiC,EAAE,KAAK,IAAI,IAAI;oBAC/D,gBAAgB,EAAG,CAAC,CAAC,MAAiC,EAAE,WAAW,IAAI,IAAI;oBAC3E,UAAU,EAAE,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACL,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG;gBACb,GAAG,SAAS;gBACZ,eAAe,EAAE,QAAQ;gBACzB,qBAAqB,EAAE,YAAY,CAAC,KAAK;aAC1C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-agents.d.ts

@@ -0,0 +1,42 @@
+/**
+ * zivis_list_agents — List agent instances for the org
+ *
+ * Maps to: GET /api/agent-instances
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_AGENTS_NAME = "zivis_list_agents";
+export declare const LIST_AGENTS_DESCRIPTION = "List all configured agent instances for your organization.\n\nIMPORTANT \u2014 Understand the ZIVIS entity hierarchy:\n- **Agent instance** = a configured agent (e.g., \"Production Recon Agent\", \"API Pen Test Agent\"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.\n- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.\n- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.\n\nAgent types:\n- **recon**: Reconnaissance \u2014 discovers attack surface, endpoints, technologies\n- **pen-test**: Penetration testing \u2014 actively tests for vulnerabilities\n- **ai-red-team**: AI/LLM red teaming \u2014 tests AI systems for prompt injection, jailbreaks, etc.\n- **threat-analysis**: Threat modeling \u2014 builds structured threat models (automated LLM threat ID is pipeline-specific)\n- **code-monitor**: Code monitoring \u2014 continuous scanning of repositories\n- **evidence**: Evidence collection \u2014 gathers compliance evidence\n\nWhen users ask about \"the threat model agent\" or \"the recon agent\", use this tool to find the agent instance, NOT zivis_list_scans.";
+export declare const LIST_AGENTS_SCHEMA: {
+    agent_type: z.ZodOptional<z.ZodEnum<{
+        "pen-test": "pen-test";
+        recon: "recon";
+        "ai-red-team": "ai-red-team";
+        "threat-analysis": "threat-analysis";
+        "code-monitor": "code-monitor";
+        evidence: "evidence";
+    }>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        archived: "archived";
+        paused: "paused";
+        active: "active";
+    }>>;
+    limit: z.ZodDefault<z.ZodNumber>;
+};
+export declare function createListAgentsHandler(apiClient: ApiClient): (params: {
+    agent_type?: string;
+    status?: string;
+    limit?: number;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/list-agents.js

@@ -0,0 +1,95 @@
+/**
+ * zivis_list_agents — List agent instances for the org
+ *
+ * Maps to: GET /api/agent-instances
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_AGENTS_NAME = "zivis_list_agents";
+export const LIST_AGENTS_DESCRIPTION = `List all configured agent instances for your organization.
+
+IMPORTANT — Understand the ZIVIS entity hierarchy:
+- **Agent instance** = a configured agent (e.g., "Production Recon Agent", "API Pen Test Agent"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.
+- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.
+- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.
+
+Agent types:
+- **recon**: Reconnaissance — discovers attack surface, endpoints, technologies
+- **pen-test**: Penetration testing — actively tests for vulnerabilities
+- **ai-red-team**: AI/LLM red teaming — tests AI systems for prompt injection, jailbreaks, etc.
+- **threat-analysis**: Threat modeling — builds structured threat models (automated LLM threat ID is pipeline-specific)
+- **code-monitor**: Code monitoring — continuous scanning of repositories
+- **evidence**: Evidence collection — gathers compliance evidence
+
+When users ask about "the threat model agent" or "the recon agent", use this tool to find the agent instance, NOT zivis_list_scans.`;
+export const LIST_AGENTS_SCHEMA = {
+    agent_type: z
+        .enum(["pen-test", "ai-red-team", "recon", "threat-analysis", "code-monitor", "evidence"])
+        .optional()
+        .describe("Filter by agent type"),
+    status: z
+        .enum(["active", "paused", "archived"])
+        .optional()
+        .describe("Filter by agent status"),
+    limit: z
+        .number()
+        .min(1)
+        .max(50)
+        .default(20)
+        .describe("Maximum number of results (1-50, default 20)"),
+};
+export function createListAgentsHandler(apiClient) {
+    return async (params) => {
+        try {
+            const query = new URLSearchParams();
+            if (params.agent_type)
+                query.set("agentType", params.agent_type);
+            if (params.status)
+                query.set("status", params.status);
+            if (params.limit)
+                query.set("limit", String(params.limit));
+            query.set("includeOpenStats", "true");
+            const queryStr = query.toString();
+            const path = `/api/agent-instances${queryStr ? `?${queryStr}` : ""}`;
+            const data = await apiClient.get(path);
+            const sanitized = sanitizeResponse(data);
+            const instances = Array.isArray(sanitized.instances) ? sanitized.instances : [];
+            const summary = instances.map((agent) => ({
+                agent_instance_id: agent.id,
+                name: agent.name,
+                agent_type: agent.agentType,
+                status: agent.status,
+                target_url: agent.targetUrl,
+                description: agent.description || null,
+                is_enabled: agent.isEnabled,
+                last_scan_at: agent.lastScanAt || null,
+                created_at: agent.createdAt,
+                updated_at: agent.updatedAt,
+                open_critical_count: agent.openCriticalCount ?? null,
+                open_findings_total: agent.openFindingsTotal ?? null,
+                campaigns: Array.isArray(agent.campaignLinks)
+                    ? agent.campaignLinks.map((link) => {
+                        const campaign = link.campaign;
+                        return campaign ? { id: campaign.id, name: campaign.name } : null;
+                    }).filter(Boolean)
+                    : [],
+            }));
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({ total: data.total, agents: summary }, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list agents";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-agents.js.map

package/dist/tools/enterprise/list-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-agents.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-agents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;oIAe6F,CAAC;AAErI,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;SACzF,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;SACtC,QAAQ,EAAE;SACV,QAAQ,CAAC,wBAAwB,CAAC;IACrC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,8CAA8C,CAAC;CAC5D,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,SAAoB;IAC1D,OAAO,KAAK,EAAE,MAAgE,EAAE,EAAE;QAChF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,UAAU;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,uBAAuB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA0D,IAAI,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA4B,CAAC;YACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAEhF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC;gBACjE,iBAAiB,EAAE,KAAK,CAAC,EAAE;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;oBAC3C,CAAC,CAAE,KAAK,CAAC,aAAgD,CAAC,GAAG,CAAC,CAAC,IAA6B,EAAE,EAAE;wBAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA+C,CAAC;wBACtE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACpB,CAAC,CAAC,EAAE;aACP,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-report-issues.d.ts

@@ -0,0 +1,36 @@
+/**
+ * zivis_list_report_issues — List remediation checklist issues for a campaign report
+ *
+ * Maps to: GET /api/reports/:reportId/issues
+ * Also uses: POST /api/reports/for-campaign/:campaignId
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
+export declare const LIST_REPORT_ISSUES_DESCRIPTION = "List all issues in a campaign's remediation checklist with status summary.\n\nReturns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.\n\nFilter by status to see only open, in-progress, or completed items.";
+export declare const LIST_REPORT_ISSUES_SCHEMA: {
+    campaign_id: z.ZodOptional<z.ZodString>;
+    report_id: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        open: "open";
+        in_progress: "in_progress";
+        done: "done";
+    }>>;
+};
+export declare function createListReportIssuesHandler(apiClient: ApiClient): (params: {
+    campaign_id?: string;
+    report_id?: string;
+    status?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/list-report-issues.js

@@ -0,0 +1,50 @@
+/**
+ * zivis_list_report_issues — List remediation checklist issues for a campaign report
+ *
+ * Maps to: GET /api/reports/:reportId/issues
+ * Also uses: POST /api/reports/for-campaign/:campaignId
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
+export const LIST_REPORT_ISSUES_DESCRIPTION = `List all issues in a campaign's remediation checklist with status summary.
+
+Returns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.
+
+Filter by status to see only open, in-progress, or completed items.`;
+export const LIST_REPORT_ISSUES_SCHEMA = {
+    campaign_id: z.string().optional().describe("Campaign UUID — auto-resolves to report"),
+    report_id: z.string().optional().describe("Report UUID (alternative to campaign_id)"),
+    status: z.enum(["open", "in_progress", "done"]).optional().describe("Filter by status"),
+};
+export function createListReportIssuesHandler(apiClient) {
+    return async (params) => {
+        try {
+            let reportId = params.report_id;
+            // Resolve campaign → report if needed
+            if (!reportId && params.campaign_id) {
+                const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
+                reportId = reportData.reportId;
+            }
+            if (!reportId) {
+                return {
+                    content: [{ type: "text", text: "Error: Provide either campaign_id or report_id" }],
+                    isError: true,
+                };
+            }
+            const queryParams = params.status ? `?status=${params.status}` : "";
+            const data = await apiClient.get(`/api/reports/${reportId}/issues${queryParams}`);
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list report issues";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-report-issues.js.map

package/dist/tools/enterprise/list-report-issues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-report-issues.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-report-issues.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;oEAIsB,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CACxF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAEhC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;oBAC5F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gBAAgB,QAAQ,UAAU,WAAW,EAAE,CAChD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-threat-models.d.ts

@@ -0,0 +1,36 @@
+/**
+ * zivis_list_threat_models — List threat models for the org
+ *
+ * Maps to: GET /api/threat-models
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";
+export declare const LIST_THREAT_MODELS_DESCRIPTION = "List all threat models for your organization. Returns name, status, summary info, and linked diagram counts for each threat model.\n\nAlso fetches any diagrams linked to each threat model, so you can see which threat models have associated architecture, data flow, or trust boundary diagrams. Use zivis_get_threat_model to see full diagram details.\n\nIMPORTANT: Threat models are NOT scans and NOT agents. They are separate entities:\n- A **threat model** (returned here) has its own UUID and contains components, data flows, actors, findings, etc.\n- A **scan** is an agent execution run (from zivis_list_scans) \u2014 scans may CREATE or UPDATE threat models, but scan IDs \u2260 threat model IDs.\n- An **agent instance** is a configured agent (from the UI) \u2014 agents RUN scans which produce threat models.\n\nUse the threat model ID (from this tool's response) when calling zivis_get_threat_model, zivis_manage_component, zivis_manage_finding, etc. Do NOT pass scan IDs or agent instance IDs to those tools.";
+export declare const LIST_THREAT_MODELS_SCHEMA: {
+    status: z.ZodOptional<z.ZodEnum<{
+        draft: "draft";
+        analyzing: "analyzing";
+        analyzed: "analyzed";
+        reviewed: "reviewed";
+        approved: "approved";
+        archived: "archived";
+    }>>;
+    limit: z.ZodDefault<z.ZodNumber>;
+};
+export declare function createListThreatModelsHandler(apiClient: ApiClient): (params: {
+    status?: string;
+    limit?: number;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/list-threat-models.js

@@ -0,0 +1,82 @@
+/**
+ * zivis_list_threat_models — List threat models for the org
+ *
+ * Maps to: GET /api/threat-models
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";
+export const LIST_THREAT_MODELS_DESCRIPTION = `List all threat models for your organization. Returns name, status, summary info, and linked diagram counts for each threat model.
+
+Also fetches any diagrams linked to each threat model, so you can see which threat models have associated architecture, data flow, or trust boundary diagrams. Use zivis_get_threat_model to see full diagram details.
+
+IMPORTANT: Threat models are NOT scans and NOT agents. They are separate entities:
+- A **threat model** (returned here) has its own UUID and contains components, data flows, actors, findings, etc.
+- A **scan** is an agent execution run (from zivis_list_scans) — scans may CREATE or UPDATE threat models, but scan IDs ≠ threat model IDs.
+- An **agent instance** is a configured agent (from the UI) — agents RUN scans which produce threat models.
+
+Use the threat model ID (from this tool's response) when calling zivis_get_threat_model, zivis_manage_component, zivis_manage_finding, etc. Do NOT pass scan IDs or agent instance IDs to those tools.`;
+export const LIST_THREAT_MODELS_SCHEMA = {
+    status: z
+        .enum(["draft", "analyzing", "analyzed", "reviewed", "approved", "archived"])
+        .optional()
+        .describe("Filter by threat model status"),
+    limit: z
+        .number()
+        .min(1)
+        .max(100)
+        .default(20)
+        .describe("Maximum number of results (1-100, default 20)"),
+};
+export function createListThreatModelsHandler(apiClient) {
+    return async (params) => {
+        try {
+            const query = new URLSearchParams();
+            if (params.status)
+                query.set("status", params.status);
+            if (params.limit)
+                query.set("limit", String(params.limit));
+            const queryStr = query.toString();
+            const path = `/api/threat-models${queryStr ? `?${queryStr}` : ""}`;
+            const data = await apiClient.get(path);
+            const sanitized = sanitizeResponse(data);
+            // Fetch diagram counts for each threat model in parallel
+            const threatModels = Array.isArray(sanitized) ? sanitized : [];
+            const diagramCounts = await Promise.all(threatModels.map((tm) => apiClient
+                .get(`/api/diagrams?linkedThreatModelId=${tm.id}&take=1`)
+                .then((res) => res.total ?? 0)
+                .catch(() => 0)));
+            // Format with clear ID labeling to prevent confusion with scan/agent IDs
+            const summary = Array.isArray(sanitized)
+                ? sanitized.map((tm, i) => ({
+                    threat_model_id: tm.id,
+                    name: tm.name,
+                    status: tm.status,
+                    description: tm.description,
+                    application: tm.applicationName || null,
+                    campaign: tm.campaignName || null,
+                    latest_version: tm.latestVersion || null,
+                    linked_diagrams_count: diagramCounts[i],
+                    created_at: tm.createdAt,
+                    updated_at: tm.updatedAt,
+                }))
+                : sanitized;
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(summary, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list threat models";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-threat-models.js.map

package/dist/tools/enterprise/list-threat-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-threat-models.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-threat-models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;uMASyJ,CAAC;AAExM,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;SAC5E,QAAQ,EAAE;SACV,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAA2C,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,qBAAqB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA4B,IAAI,CAAC,CAAC;YAElE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA8B,CAAC;YAEtE,yDAAyD;YACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACtB,SAAS;iBACN,GAAG,CACF,qCAAqC,EAAE,CAAC,EAAE,SAAS,CACpD;iBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;iBAC7B,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAClB,CACF,CAAC;YAEF,yEAAyE;YACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAA2B,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;oBACzD,eAAe,EAAE,EAAE,CAAC,EAAE;oBACtB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,WAAW,EAAE,EAAE,CAAC,WAAW;oBAC3B,WAAW,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI;oBACvC,QAAQ,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;oBACjC,cAAc,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;oBACxC,qBAAqB,EAAE,aAAa,CAAC,CAAC,CAAC;oBACvC,UAAU,EAAE,EAAE,CAAC,SAAS;oBACxB,UAAU,EAAE,EAAE,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACL,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBACvC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-actor.d.ts

@@ -0,0 +1,58 @@
+/**
+ * zivis_manage_actor — Create, update, or delete threat actors in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_ACTOR_NAME = "zivis_manage_actor";
+export declare const MANAGE_ACTOR_DESCRIPTION = "Create, update, or delete a threat actor in a threat model.\n\nThreat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.\n\nActions:\n- create: Add a new threat actor (requires name, actor_type, trust_level)\n- update: Modify an existing actor (requires actor_id)\n- delete: Remove an actor (requires actor_id)";
+export declare const MANAGE_ACTOR_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    actor_id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    actor_type: z.ZodOptional<z.ZodEnum<{
+        external: "external";
+        internal: "internal";
+        system: "system";
+        third_party: "third_party";
+    }>>;
+    trust_level: z.ZodOptional<z.ZodEnum<{
+        high: "high";
+        medium: "medium";
+        low: "low";
+        untrusted: "untrusted";
+        privileged: "privileged";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+    motivation: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+export declare function createManageActorHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "create" | "update" | "delete";
+    actor_id?: string;
+    name?: string;
+    actor_type?: string;
+    trust_level?: string;
+    description?: string;
+    motivation?: string;
+    capabilities?: string[];
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;