@zivis/mcp 0.1.0-alpha.1

package/dist/tools/enterprise/manage-actor.js

@@ -0,0 +1,99 @@
+/**
+ * zivis_manage_actor — Create, update, or delete threat actors in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_ACTOR_NAME = "zivis_manage_actor";
+export const MANAGE_ACTOR_DESCRIPTION = `Create, update, or delete a threat actor in a threat model.
+
+Threat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.
+
+Actions:
+- create: Add a new threat actor (requires name, actor_type, trust_level)
+- update: Modify an existing actor (requires actor_id)
+- delete: Remove an actor (requires actor_id)`;
+export const MANAGE_ACTOR_SCHEMA = {
+    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
+    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
+    actor_id: z.string().optional().describe("Actor UUID (required for update/delete)"),
+    name: z.string().optional().describe("Actor name (e.g., 'External Attacker', 'API Consumer')"),
+    actor_type: z
+        .enum(["external", "internal", "system", "third_party"])
+        .optional()
+        .describe("Type of threat actor"),
+    trust_level: z
+        .enum(["untrusted", "low", "medium", "high", "privileged"])
+        .optional()
+        .describe("Trust level assigned to this actor"),
+    description: z.string().optional().describe("Description of the actor's role and intent"),
+    motivation: z.string().optional().describe("Actor's motivation (e.g., financial gain, espionage)"),
+    capabilities: z.array(z.string()).optional().describe("Actor capabilities (e.g., ['network_access', 'social_engineering'])"),
+};
+export function createManageActorHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, action, actor_id } = params;
+            if ((action === "update" || action === "delete") && !actor_id) {
+                return {
+                    content: [{ type: "text", text: "Error: actor_id is required for update/delete" }],
+                    isError: true,
+                };
+            }
+            let data;
+            if (action === "create") {
+                if (!params.name || !params.actor_type || !params.trust_level) {
+                    return {
+                        content: [{ type: "text", text: "Error: name, actor_type, and trust_level are required for create" }],
+                        isError: true,
+                    };
+                }
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/actors`, {
+                    name: params.name,
+                    actorType: params.actor_type,
+                    trustLevel: params.trust_level,
+                    description: params.description,
+                    motivation: params.motivation,
+                    capabilities: params.capabilities,
+                });
+            }
+            else if (action === "update") {
+                const body = {};
+                if (params.name)
+                    body.name = params.name;
+                if (params.actor_type)
+                    body.actorType = params.actor_type;
+                if (params.trust_level)
+                    body.trustLevel = params.trust_level;
+                if (params.description !== undefined)
+                    body.description = params.description;
+                if (params.motivation !== undefined)
+                    body.motivation = params.motivation;
+                if (params.capabilities)
+                    body.capabilities = params.capabilities;
+                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/actors/${actor_id}`, body);
+            }
+            else {
+                data = await apiClient.del(`/api/threat-models/${threat_model_id}/actors/${actor_id}`);
+            }
+            const sanitized = sanitizeResponse(data);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(sanitized, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage actor";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-actor.js.map

package/dist/tools/enterprise/manage-actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-actor.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-actor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;8CAOM,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC9F,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;SACvD,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;SAC1D,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAClG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;CAC7H,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAErD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC9D,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;wBAC9G,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,SAAS,EAC9C;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,UAAU;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC1D,IAAI,MAAM,CAAC,WAAW;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC7D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBAEjE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,WAAW,QAAQ,EAAE,EAC1D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,WAAW,QAAQ,EAAE,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-attack-scenario.d.ts

@@ -0,0 +1,70 @@
+/**
+ * zivis_manage_attack_scenario — Create, update, or delete attack scenarios
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/attack-scenarios
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_ATTACK_SCENARIO_NAME = "zivis_manage_attack_scenario";
+export declare const MANAGE_ATTACK_SCENARIO_DESCRIPTION = "Create, update, or delete an attack scenario in a threat model.\n\nAttack scenarios describe specific attack paths \u2014 how a threat actor could exploit vulnerabilities to achieve their objective. They link actors, components, and attack vectors into a cohesive narrative.\n\nActions:\n- create: Add a new scenario (requires title, narrative, entry_point_id, target_id)\n- update: Update scenario status/notes (requires scenario_id)\n- delete: Remove a scenario (requires scenario_id)";
+export declare const MANAGE_ATTACK_SCENARIO_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    scenario_id: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    narrative: z.ZodOptional<z.ZodString>;
+    entry_point_id: z.ZodOptional<z.ZodString>;
+    target_id: z.ZodOptional<z.ZodString>;
+    severity: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        medium: "medium";
+        low: "low";
+        info: "info";
+    }>>;
+    likelihood: z.ZodOptional<z.ZodEnum<{
+        almost_certain: "almost_certain";
+        likely: "likely";
+        possible: "possible";
+        unlikely: "unlikely";
+    }>>;
+    actor_id: z.ZodOptional<z.ZodString>;
+    goal_category: z.ZodOptional<z.ZodString>;
+    goal_description: z.ZodOptional<z.ZodString>;
+    business_impact: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    user_notes: z.ZodOptional<z.ZodString>;
+};
+export declare function createManageAttackScenarioHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "create" | "update" | "delete";
+    scenario_id?: string;
+    title?: string;
+    narrative?: string;
+    entry_point_id?: string;
+    target_id?: string;
+    severity?: string;
+    likelihood?: string;
+    actor_id?: string;
+    goal_category?: string;
+    goal_description?: string;
+    business_impact?: string;
+    status?: string;
+    user_notes?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/manage-attack-scenario.js

@@ -0,0 +1,89 @@
+/**
+ * zivis_manage_attack_scenario — Create, update, or delete attack scenarios
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/attack-scenarios
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_ATTACK_SCENARIO_NAME = "zivis_manage_attack_scenario";
+export const MANAGE_ATTACK_SCENARIO_DESCRIPTION = `Create, update, or delete an attack scenario in a threat model.
+
+Attack scenarios describe specific attack paths — how a threat actor could exploit vulnerabilities to achieve their objective. They link actors, components, and attack vectors into a cohesive narrative.
+
+Actions:
+- create: Add a new scenario (requires title, narrative, entry_point_id, target_id)
+- update: Update scenario status/notes (requires scenario_id)
+- delete: Remove a scenario (requires scenario_id)`;
+export const MANAGE_ATTACK_SCENARIO_SCHEMA = {
+    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
+    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
+    scenario_id: z.string().optional().describe("Scenario UUID (required for update/delete)"),
+    title: z.string().optional().describe("Scenario title (e.g., 'Privilege Escalation via API') — required for create"),
+    narrative: z.string().optional().describe("Detailed narrative of the attack path (markdown supported) — required for create"),
+    entry_point_id: z.string().optional().describe("Entry point component UUID — required for create"),
+    target_id: z.string().optional().describe("Target component UUID — required for create"),
+    severity: z.enum(["critical", "high", "medium", "low", "info"]).optional().describe("Severity of this scenario (for create)"),
+    likelihood: z.enum(["almost_certain", "likely", "possible", "unlikely"]).optional().describe("Likelihood of this scenario being exploited (for create)"),
+    actor_id: z.string().optional().describe("Threat actor UUID who would execute this scenario (for create)"),
+    goal_category: z.string().optional().describe("Terminal goal category (for create)"),
+    goal_description: z.string().optional().describe("Description of the attacker's goal (for create)"),
+    business_impact: z.string().optional().describe("Business impact if the attack succeeds (for create)"),
+    status: z.string().optional().describe("Scenario status (for update)"),
+    user_notes: z.string().optional().describe("Review notes (for update)"),
+};
+export function createManageAttackScenarioHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, action, scenario_id } = params;
+            if ((action === "update" || action === "delete") && !scenario_id) {
+                return {
+                    content: [{ type: "text", text: "Error: scenario_id is required for update/delete" }],
+                    isError: true,
+                };
+            }
+            let data;
+            if (action === "create") {
+                if (!params.title || !params.narrative || !params.entry_point_id || !params.target_id) {
+                    return {
+                        content: [{ type: "text", text: "Error: title, narrative, entry_point_id, and target_id are required for create" }],
+                        isError: true,
+                    };
+                }
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/attack-scenarios`, {
+                    title: params.title,
+                    narrative: params.narrative,
+                    entryPointId: params.entry_point_id,
+                    targetId: params.target_id,
+                    severity: params.severity,
+                    likelihood: params.likelihood,
+                    actorId: params.actor_id,
+                    goalCategory: params.goal_category,
+                    goalDescription: params.goal_description,
+                    businessImpact: params.business_impact,
+                });
+            }
+            else if (action === "update") {
+                const body = {};
+                if (params.status !== undefined)
+                    body.status = params.status;
+                if (params.user_notes !== undefined)
+                    body.userNotes = params.user_notes;
+                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/attack-scenarios/${scenario_id}`, body);
+            }
+            else {
+                data = await apiClient.del(`/api/threat-models/${threat_model_id}/attack-scenarios/${scenario_id}`);
+            }
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage attack scenario";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-attack-scenario.js.map

package/dist/tools/enterprise/manage-attack-scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-attack-scenario.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-attack-scenario.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAE1E,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;;;mDAOC,CAAC;AAEpD,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACpH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;IAC7H,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAClG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC7H,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACxJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IAC1G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACnG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACtG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAAC,SAAoB;IACpE,OAAO,KAAK,EAAE,MAgBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;YAExD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC;oBAC9F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gFAAgF,EAAE,CAAC;wBAC5H,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,mBAAmB,EACxD;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,YAAY,EAAE,MAAM,CAAC,cAAc;oBACnC,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,YAAY,EAAE,MAAM,CAAC,aAAa;oBAClC,eAAe,EAAE,MAAM,CAAC,gBAAgB;oBACxC,cAAc,EAAE,MAAM,CAAC,eAAe;iBACvC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAExE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,qBAAqB,WAAW,EAAE,EACvE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,qBAAqB,WAAW,EAAE,CACxE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;YACxF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-component.d.ts

@@ -0,0 +1,58 @@
+/**
+ * zivis_manage_component — Create, update, or delete components in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/components
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_COMPONENT_NAME = "zivis_manage_component";
+export declare const MANAGE_COMPONENT_DESCRIPTION = "Create, update, or delete an architectural component in a threat model.\n\nComponents represent the building blocks of the system being modeled (e.g., API Gateway, Database, Frontend App, Authentication Service).\n\nActions:\n- create: Add a new component (requires name, component_type)\n- update: Modify an existing component (requires component_id)\n- delete: Remove a component (requires component_id)";
+export declare const MANAGE_COMPONENT_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    component_id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    component_type: z.ZodOptional<z.ZodEnum<{
+        trust_boundary: "trust_boundary";
+        entry_point: "entry_point";
+        orchestrator: "orchestrator";
+        compute_sandbox: "compute_sandbox";
+        worker: "worker";
+        data_store: "data_store";
+        proxy: "proxy";
+        external_service: "external_service";
+        identity_provider: "identity_provider";
+        secrets_manager: "secrets_manager";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+    technology: z.ZodOptional<z.ZodString>;
+    is_external: z.ZodOptional<z.ZodBoolean>;
+    trust_boundary: z.ZodOptional<z.ZodString>;
+};
+export declare function createManageComponentHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "create" | "update" | "delete";
+    component_id?: string;
+    name?: string;
+    component_type?: string;
+    description?: string;
+    technology?: string;
+    is_external?: boolean;
+    trust_boundary?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/manage-component.js

@@ -0,0 +1,90 @@
+/**
+ * zivis_manage_component — Create, update, or delete components in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/components
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_COMPONENT_NAME = "zivis_manage_component";
+export const MANAGE_COMPONENT_DESCRIPTION = `Create, update, or delete an architectural component in a threat model.
+
+Components represent the building blocks of the system being modeled (e.g., API Gateway, Database, Frontend App, Authentication Service).
+
+Actions:
+- create: Add a new component (requires name, component_type)
+- update: Modify an existing component (requires component_id)
+- delete: Remove a component (requires component_id)`;
+export const MANAGE_COMPONENT_SCHEMA = {
+    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
+    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
+    component_id: z.string().optional().describe("Component UUID (required for update/delete)"),
+    name: z.string().optional().describe("Component name (e.g., 'API Gateway', 'User Database')"),
+    component_type: z
+        .enum(["entry_point", "orchestrator", "compute_sandbox", "worker", "data_store", "proxy", "external_service", "trust_boundary", "identity_provider", "secrets_manager"])
+        .optional()
+        .describe("Type of component"),
+    description: z.string().optional().describe("Description of the component's purpose"),
+    technology: z.string().optional().describe("Technology stack (e.g., 'Express.js', 'PostgreSQL')"),
+    is_external: z.boolean().optional().describe("Whether this component is external to the system boundary"),
+    trust_boundary: z.string().optional().describe("Trust boundary this component belongs to"),
+};
+export function createManageComponentHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, action, component_id } = params;
+            if ((action === "update" || action === "delete") && !component_id) {
+                return {
+                    content: [{ type: "text", text: "Error: component_id is required for update/delete" }],
+                    isError: true,
+                };
+            }
+            let data;
+            if (action === "create") {
+                if (!params.name || !params.component_type) {
+                    return {
+                        content: [{ type: "text", text: "Error: name and component_type are required for create" }],
+                        isError: true,
+                    };
+                }
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/components`, {
+                    name: params.name,
+                    componentType: params.component_type,
+                    description: params.description,
+                    technology: params.technology,
+                    isExternal: params.is_external,
+                    trustBoundary: params.trust_boundary,
+                });
+            }
+            else if (action === "update") {
+                const body = {};
+                if (params.name)
+                    body.name = params.name;
+                if (params.component_type)
+                    body.componentType = params.component_type;
+                if (params.description !== undefined)
+                    body.description = params.description;
+                if (params.technology !== undefined)
+                    body.technology = params.technology;
+                if (params.is_external !== undefined)
+                    body.isExternal = params.is_external;
+                if (params.trust_boundary !== undefined)
+                    body.trustBoundary = params.trust_boundary;
+                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/components/${component_id}`, body);
+            }
+            else {
+                data = await apiClient.del(`/api/threat-models/${threat_model_id}/components/${component_id}`);
+            }
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage component";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-component.js.map

package/dist/tools/enterprise/manage-component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-component.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-component.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;qDAOS,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;SACvK,QAAQ,EAAE;SACV,QAAQ,CAAC,mBAAmB,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACzG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC3F,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEzD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;wBACpG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,aAAa,EAAE,MAAM,CAAC,cAAc;iBACrC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBACtE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC3E,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBAEpF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,eAAe,YAAY,EAAE,EAClE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,eAAe,YAAY,EAAE,CACnE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-data-asset.d.ts

@@ -0,0 +1,53 @@
+/**
+ * zivis_manage_data_asset — Create, update, or delete data assets
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/data-assets
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_DATA_ASSET_NAME = "zivis_manage_data_asset";
+export declare const MANAGE_DATA_ASSET_DESCRIPTION = "Create, update, or delete a data asset in a threat model.\n\nData assets represent sensitive data that needs protection (e.g., user PII, API keys, session tokens, financial records).\n\nActions:\n- create: Add a new data asset (requires name, classification)\n- update: Modify an existing data asset (requires asset_id)\n- delete: Remove a data asset (requires asset_id)";
+export declare const MANAGE_DATA_ASSET_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    asset_id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    classification: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        internal: "internal";
+        public: "public";
+        confidential: "confidential";
+        restricted: "restricted";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+    data_type: z.ZodOptional<z.ZodString>;
+    storage_location: z.ZodOptional<z.ZodString>;
+    retention_policy: z.ZodOptional<z.ZodString>;
+};
+export declare function createManageDataAssetHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "create" | "update" | "delete";
+    asset_id?: string;
+    name?: string;
+    classification?: string;
+    description?: string;
+    data_type?: string;
+    storage_location?: string;
+    retention_policy?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/manage-data-asset.js

@@ -0,0 +1,90 @@
+/**
+ * zivis_manage_data_asset — Create, update, or delete data assets
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/data-assets
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_DATA_ASSET_NAME = "zivis_manage_data_asset";
+export const MANAGE_DATA_ASSET_DESCRIPTION = `Create, update, or delete a data asset in a threat model.
+
+Data assets represent sensitive data that needs protection (e.g., user PII, API keys, session tokens, financial records).
+
+Actions:
+- create: Add a new data asset (requires name, classification)
+- update: Modify an existing data asset (requires asset_id)
+- delete: Remove a data asset (requires asset_id)`;
+export const MANAGE_DATA_ASSET_SCHEMA = {
+    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
+    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
+    asset_id: z.string().optional().describe("Asset UUID (required for update/delete)"),
+    name: z.string().optional().describe("Asset name (e.g., 'User PII', 'API Keys')"),
+    classification: z
+        .enum(["public", "internal", "confidential", "restricted", "critical"])
+        .optional()
+        .describe("Data classification level"),
+    description: z.string().optional().describe("Description of the data asset"),
+    data_type: z.string().optional().describe("Type of data (e.g., 'credentials', 'pii', 'financial')"),
+    storage_location: z.string().optional().describe("Where this data is stored"),
+    retention_policy: z.string().optional().describe("Data retention policy"),
+};
+export function createManageDataAssetHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, action, asset_id } = params;
+            if ((action === "update" || action === "delete") && !asset_id) {
+                return {
+                    content: [{ type: "text", text: "Error: asset_id is required for update/delete" }],
+                    isError: true,
+                };
+            }
+            let data;
+            if (action === "create") {
+                if (!params.name || !params.classification) {
+                    return {
+                        content: [{ type: "text", text: "Error: name and classification are required for create" }],
+                        isError: true,
+                    };
+                }
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/data-assets`, {
+                    name: params.name,
+                    classification: params.classification,
+                    description: params.description,
+                    dataType: params.data_type,
+                    storageLocation: params.storage_location,
+                    retentionPolicy: params.retention_policy,
+                });
+            }
+            else if (action === "update") {
+                const body = {};
+                if (params.name)
+                    body.name = params.name;
+                if (params.classification)
+                    body.classification = params.classification;
+                if (params.description !== undefined)
+                    body.description = params.description;
+                if (params.data_type)
+                    body.dataType = params.data_type;
+                if (params.storage_location !== undefined)
+                    body.storageLocation = params.storage_location;
+                if (params.retention_policy !== undefined)
+                    body.retentionPolicy = params.retention_policy;
+                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/data-assets/${asset_id}`, body);
+            }
+            else {
+                data = await apiClient.del(`/api/threat-models/${threat_model_id}/data-assets/${asset_id}`);
+            }
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage data asset";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-data-asset.js.map

package/dist/tools/enterprise/manage-data-asset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-data-asset.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-data-asset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,6BAA6B,GAAG;;;;;;;kDAOK,CAAC;AAEnD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACjF,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;SACtE,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACnG,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC7E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CAC1E,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAErD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;wBACpG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,cAAc,EACnD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,eAAe,EAAE,MAAM,CAAC,gBAAgB;oBACxC,eAAe,EAAE,MAAM,CAAC,gBAAgB;iBACzC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc;oBAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;gBACvE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;gBACvD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAC1F,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAE1F,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,gBAAgB,QAAQ,EAAE,EAC/D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,gBAAgB,QAAQ,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-data-flow.d.ts

@@ -0,0 +1,57 @@
+/**
+ * zivis_manage_data_flow — Create, update, or delete data flows in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/data-flows
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_DATA_FLOW_NAME = "zivis_manage_data_flow";
+export declare const MANAGE_DATA_FLOW_DESCRIPTION = "Create, update, or delete a data flow between components in a threat model.\n\nData flows represent the movement of data between components. They are critical for identifying where data crosses trust boundaries and where threats may exist.\n\nActions:\n- create: Add a new data flow (requires name, source_component_id, target_component_id)\n- update: Modify an existing data flow (requires flow_id)\n- delete: Remove a data flow (requires flow_id)";
+export declare const MANAGE_DATA_FLOW_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    flow_id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    source_component_id: z.ZodOptional<z.ZodString>;
+    target_component_id: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    protocol: z.ZodOptional<z.ZodString>;
+    data_classification: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        internal: "internal";
+        public: "public";
+        confidential: "confidential";
+        restricted: "restricted";
+    }>>;
+    is_encrypted: z.ZodOptional<z.ZodBoolean>;
+    crosses_trust_boundary: z.ZodOptional<z.ZodBoolean>;
+};
+export declare function createManageDataFlowHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "create" | "update" | "delete";
+    flow_id?: string;
+    name?: string;
+    source_component_id?: string;
+    target_component_id?: string;
+    description?: string;
+    protocol?: string;
+    data_classification?: string;
+    is_encrypted?: boolean;
+    crosses_trust_boundary?: boolean;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;