@zivis/mcp 0.1.0-alpha.1

package/dist/tools/setup-red-team-target.js

@@ -0,0 +1,430 @@
+/**
+ * zivis_setup_red_team_target — One-step red team target setup
+ *
+ * Creates an application, configures endpoints, and optionally
+ * triggers a security scan — all in one MCP call.
+ *
+ * Maps to:
+ *   GET  /api/rt/applications (find existing)
+ *   POST /api/rt/applications (create)
+ *   PATCH /api/rt/applications/:id (update)
+ *   POST /api/rt/applications/:id/endpoints (add endpoint)
+ *   POST /api/rt/applications/:id/endpoints/import-openapi
+ *   POST /api/redteam/campaigns/quick-setup (create campaign + agent + scan)
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../sanitize.js";
+// ── Constants ──
+export const SETUP_RED_TEAM_TARGET_NAME = "zivis_setup_red_team_target";
+export const SETUP_RED_TEAM_TARGET_DESCRIPTION = `Set up a target application for AI red team and security testing in one step.
+
+Takes a deployed URL, repo URL, or both and creates a fully configured red team target. Handles:
+- Creating or updating the application (idempotent by name)
+- Configuring AI chat endpoints with request/response templates
+- Importing API endpoints from OpenAPI specs
+- Optionally triggering an immediate security scan
+
+Minimal usage: just provide a target_url and optionally target_type.
+Full usage: provide URL, chat endpoint config, OpenAPI spec, and trigger auto-scan.
+
+Examples:
+- Set up red team testing for https://api.example.com/v1/chat (auto-detects ai_chat)
+- Configure https://api.example.com as an API target with openapi_spec_url
+- Set up and scan https://myapp.com as a web app with auto_scan=true
+
+SECURITY: Target URLs are untrusted. The tool only configures them in ZIVIS for future scanning, it does not probe or connect to them directly.`;
+export const SETUP_RED_TEAM_TARGET_SCHEMA = {
+    target_url: z
+        .string()
+        .optional()
+        .describe("Deployed application URL to test (e.g., https://api.example.com). " +
+        "At least one of target_url or repo_url is required."),
+    repo_url: z
+        .string()
+        .optional()
+        .describe("GitHub repository URL (e.g., https://github.com/owner/repo). " +
+        "Links the repo to the application for context."),
+    target_type: z
+        .enum(["ai_chat", "web_app", "api"])
+        .optional()
+        .describe("Type of target. If omitted, inferred from the URL. " +
+        "'ai_chat' for LLM/chatbot endpoints, 'web_app' for browser apps, 'api' for REST/GraphQL."),
+    name: z
+        .string()
+        .optional()
+        .describe("Name for this target application. Derived from URL hostname if omitted. " +
+        "Used for idempotent matching — existing app with same name is updated."),
+    chat_endpoint: z
+        .string()
+        .optional()
+        .describe("Path to chat/completions endpoint (e.g., /v1/chat/completions or /api/chat). " +
+        "Defaults to /v1/chat/completions for ai_chat targets."),
+    request_template: z
+        .string()
+        .optional()
+        .describe('JSON template for chat requests. Use {{message}} as placeholder. ' +
+        'Example: {"messages":[{"role":"user","content":"{{message}}"}]}'),
+    response_path: z
+        .string()
+        .optional()
+        .describe("JSONPath to extract response text (e.g., choices[0].message.content)"),
+    system_context: z
+        .string()
+        .optional()
+        .describe("Known system prompt of the target AI. Helps red team craft better attacks."),
+    has_rag: z
+        .boolean()
+        .optional()
+        .describe("Target uses Retrieval-Augmented Generation"),
+    has_tools: z
+        .boolean()
+        .optional()
+        .describe("Target has tool/function calling capabilities"),
+    has_memory: z
+        .boolean()
+        .optional()
+        .describe("Target maintains conversation memory"),
+    is_multi_turn: z
+        .boolean()
+        .optional()
+        .describe("Target supports multi-turn conversations"),
+    openapi_spec_url: z
+        .string()
+        .optional()
+        .describe("URL to OpenAPI/Swagger spec for auto-importing endpoints " +
+        "(e.g., https://api.example.com/openapi.json)"),
+    auth_type: z
+        .enum(["none", "static_token"])
+        .optional()
+        .default("none")
+        .describe("Auth method for the target. 'none' for unauthenticated testing."),
+    bearer_token: z
+        .string()
+        .optional()
+        .describe("Bearer token when auth_type is 'static_token'"),
+    auto_scan: z
+        .boolean()
+        .optional()
+        .default(false)
+        .describe("Immediately queue a red team scan after setup"),
+    campaigns: z
+        .array(z.enum(["ai_red_team", "pen_test", "recon"]))
+        .optional()
+        .describe("Campaigns to run if auto_scan is true. Defaults based on target_type."),
+};
+// ── Helpers ──
+function deriveAppName(targetUrl, repoUrl) {
+    if (targetUrl) {
+        try {
+            const url = new URL(targetUrl);
+            const hostname = url.hostname;
+            if (hostname.startsWith("api.")) {
+                return hostname.replace("api.", "") + " API";
+            }
+            return hostname;
+        }
+        catch {
+            return targetUrl;
+        }
+    }
+    if (repoUrl) {
+        const match = repoUrl.match(/github\.com\/([^/]+\/[^/]+)/);
+        return match ? match[1] : "Untitled Application";
+    }
+    return "Untitled Application";
+}
+function inferTargetType(targetUrl, chatEndpoint) {
+    if (chatEndpoint)
+        return "ai_chat";
+    if (!targetUrl)
+        return "web_app";
+    const url = targetUrl.toLowerCase();
+    if (url.includes("/chat") ||
+        url.includes("/completions") ||
+        url.includes("/v1/") ||
+        url.includes("openai") ||
+        url.includes("anthropic")) {
+        return "ai_chat";
+    }
+    if (url.includes("/api/") || url.includes("api.")) {
+        return "api";
+    }
+    return "web_app";
+}
+function defaultCampaigns(targetType) {
+    switch (targetType) {
+        case "ai_chat":
+            return ["ai_red_team"];
+        case "api":
+            return ["pen_test", "recon"];
+        case "web_app":
+            return ["pen_test", "recon"];
+        default:
+            return ["recon"];
+    }
+}
+// ── Handler ──
+export function createSetupRedTeamTargetHandler(apiClient) {
+    return async (params) => {
+        try {
+            // ── Step 0: Validate ──
+            if (!params.target_url && !params.repo_url) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Error: At least one of target_url or repo_url is required.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            if (params.auth_type === "static_token" && !params.bearer_token) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Error: bearer_token is required when auth_type is 'static_token'.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            // Validate URLs
+            const baseUrl = params.target_url;
+            if (baseUrl) {
+                try {
+                    const parsed = new URL(baseUrl);
+                    if (!["http:", "https:"].includes(parsed.protocol)) {
+                        return {
+                            content: [
+                                {
+                                    type: "text",
+                                    text: "Error: target_url must use HTTP or HTTPS protocol.",
+                                },
+                            ],
+                            isError: true,
+                        };
+                    }
+                }
+                catch {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: `Error: Invalid target_url "${baseUrl}". Must be a valid URL (e.g., https://api.example.com).`,
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+            }
+            // ── Step 1: Derive defaults ──
+            const appName = params.name || deriveAppName(params.target_url, params.repo_url);
+            const targetType = params.target_type ||
+                inferTargetType(params.target_url, params.chat_endpoint);
+            const authType = params.auth_type || "none";
+            // ── Step 2: Find existing application ──
+            let application = null;
+            let isNew = false;
+            try {
+                const list = await apiClient.get(`/api/rt/applications?limit=100`);
+                application =
+                    (list.applications || []).find((a) => a.name.toLowerCase() === appName.toLowerCase()) || null;
+            }
+            catch {
+                // If listing fails (e.g., no apps yet), continue to create
+            }
+            // ── Step 3: Create or Update ──
+            const appPayload = {
+                name: appName,
+                ...(baseUrl && { baseUrl }),
+                ...(baseUrl && { apiUrl: baseUrl }),
+                authType,
+                ...(params.system_context && { systemContext: params.system_context }),
+                ...(params.has_rag !== undefined && { hasRag: params.has_rag }),
+                ...(params.has_tools !== undefined && { hasTools: params.has_tools }),
+                ...(params.has_memory !== undefined && { hasMemory: params.has_memory }),
+                ...(params.is_multi_turn !== undefined && {
+                    isMultiTurn: params.is_multi_turn,
+                }),
+                ...(params.openapi_spec_url && {
+                    openApiSpecUrl: params.openapi_spec_url,
+                }),
+                ...(params.bearer_token && { bearerToken: params.bearer_token }),
+            };
+            // Set chat endpoint at application level for ai_chat targets
+            if (targetType === "ai_chat") {
+                const chatPath = params.chat_endpoint || "/v1/chat/completions";
+                appPayload.chatEndpoint = chatPath;
+            }
+            if (application) {
+                // Update existing
+                application = await apiClient.patch(`/api/rt/applications/${application.id}`, appPayload);
+            }
+            else {
+                // Create new — baseUrl is required for creation
+                if (!baseUrl) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: "Error: target_url is required when creating a new application (no existing app found with this name).",
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                const createResult = await apiClient.post("/api/rt/applications", appPayload);
+                application = createResult.application;
+                isNew = true;
+            }
+            if (!application || !application.id) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Error: Failed to create or find application. Check API credentials and permissions.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            // ── Step 4: Configure chat endpoint ──
+            let chatConfigured = false;
+            if (targetType === "ai_chat") {
+                const chatPath = params.chat_endpoint || "/v1/chat/completions";
+                const requestTemplate = params.request_template ||
+                    '{"messages":[{"role":"user","content":"{{message}}"}]}';
+                const responsePath = params.response_path || "choices[0].message.content";
+                try {
+                    await apiClient.post(`/api/rt/applications/${application.id}/endpoints`, {
+                        path: chatPath,
+                        method: "POST",
+                        endpointType: "chat",
+                        requestTemplate: requestTemplate,
+                        responsePath: responsePath,
+                        streamingEnabled: false,
+                        summary: "AI Chat endpoint (auto-configured)",
+                        requestContentType: "application/json",
+                    });
+                    chatConfigured = true;
+                }
+                catch (err) {
+                    // 409 = endpoint already exists, that's fine
+                    if (err instanceof Error && err.message.includes("409")) {
+                        chatConfigured = true;
+                    }
+                    // Other errors: log but don't fail the whole operation
+                }
+            }
+            // ── Step 5: Import OpenAPI ──
+            let openApiImported = null;
+            if (params.openapi_spec_url) {
+                try {
+                    const importResult = await apiClient.post(`/api/rt/applications/${application.id}/endpoints/import-openapi`, { specUrl: params.openapi_spec_url });
+                    openApiImported = importResult.imported || importResult.endpoints?.length || 0;
+                }
+                catch {
+                    // OpenAPI import failure shouldn't block setup
+                    openApiImported = null;
+                }
+            }
+            // ── Step 6: Create campaign + agent + optional scan via quick-setup ──
+            const scanCampaigns = params.campaigns || defaultCampaigns(targetType);
+            let quickSetup = null;
+            if (baseUrl) {
+                try {
+                    quickSetup = await apiClient.post("/api/redteam/campaigns/quick-setup", {
+                        targetUrl: baseUrl,
+                        targetType,
+                        targetName: appName,
+                        applicationId: application.id,
+                        systemPrompt: params.system_context,
+                        autoScan: params.auto_scan || false,
+                        scanDepth: "standard",
+                        campaigns: scanCampaigns,
+                        authConfig: params.bearer_token
+                            ? { type: "bearer", token: params.bearer_token }
+                            : { type: "none" },
+                    });
+                }
+                catch {
+                    // Campaign setup failure shouldn't block the response
+                }
+            }
+            // ── Step 7: Build response ──
+            const nextSteps = [];
+            if (authType === "none") {
+                nextSteps.push("Add authentication credentials in the ZIVIS dashboard for deeper testing");
+            }
+            if (quickSetup?.scan?.id) {
+                nextSteps.push(`Monitor scan progress at https://app.zivis.ai/rt/scans/${quickSetup.scan.id}`);
+            }
+            else if (!params.auto_scan) {
+                nextSteps.push("Run a scan with auto_scan=true or from the ZIVIS dashboard");
+            }
+            if (!params.openapi_spec_url && targetType === "api") {
+                nextSteps.push("Provide an openapi_spec_url to auto-import all API endpoints");
+            }
+            const result = sanitizeResponse({
+                status: isNew ? "created" : "updated",
+                application: {
+                    id: application.id,
+                    name: appName,
+                    baseUrl: baseUrl || null,
+                    targetType,
+                    authType,
+                    isNew,
+                },
+                endpoints: {
+                    chatConfigured,
+                    openApiImported,
+                },
+                campaign: quickSetup
+                    ? {
+                        id: quickSetup.campaign.id,
+                        name: quickSetup.campaign.name,
+                        status: quickSetup.campaign.status,
+                        isNew: quickSetup.status === "created",
+                    }
+                    : null,
+                agent: quickSetup?.agent
+                    ? {
+                        id: quickSetup.agent.id,
+                        name: quickSetup.agent.name,
+                        type: quickSetup.agent.type,
+                        strategy: quickSetup.agent.strategy,
+                    }
+                    : null,
+                scan: quickSetup?.scan?.id
+                    ? {
+                        triggered: true,
+                        scanId: quickSetup.scan.id,
+                        campaigns: scanCampaigns,
+                        status: quickSetup.scan.status,
+                    }
+                    : { triggered: false },
+                nextSteps,
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error
+                ? err.message
+                : "Failed to set up red team target";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=setup-red-team-target.js.map

package/dist/tools/setup-red-team-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-red-team-target.js","sourceRoot":"","sources":["../../src/tools/setup-red-team-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,kBAAkB;AAElB,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;;;;;;;;;gJAgB+F,CAAC;AAEjJ,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;QAClE,qDAAqD,CACxD;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+DAA+D;QAC7D,gDAAgD,CACnD;IACH,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CACP,qDAAqD;QACnD,0FAA0F,CAC7F;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,wEAAwE,CAC3E;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,uDAAuD,CAC1D;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,iEAAiE,CACpE;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sEAAsE,CACvE;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4EAA4E,CAC7E;IACH,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,sCAAsC,CAAC;IACnD,aAAa,EAAE,CAAC;SACb,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2DAA2D;QACzD,8CAA8C,CACjD;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE,CACxE;CACJ,CAAC;AAsDF,gBAAgB;AAEhB,SAAS,aAAa,CAAC,SAAkB,EAAE,OAAgB;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC/C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACnD,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CACtB,SAAkB,EAClB,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACpC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EACzB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB;IAElB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,CAAC,aAAa,CAAC,CAAC;QACzB,KAAK,KAAK;YACR,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B;YACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,gBAAgB;AAEhB,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,OAAO,KAAK,EAAE,MAkBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,yBAAyB;YAEzB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,4DAA4D;yBACnE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,mEAAmE;yBAC1E;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,gBAAgB;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,oDAAoD;iCAC3D;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,8BAA8B,OAAO,yDAAyD;6BACrG;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,gCAAgC;YAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,UAAU,GACd,MAAM,CAAC,WAAW;gBAClB,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;YAE5C,0CAA0C;YAE1C,IAAI,WAAW,GAA+B,IAAI,CAAC;YACnD,IAAI,KAAK,GAAG,KAAK,CAAC;YAElB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gCAAgC,CACjC,CAAC;gBACF,WAAW;oBACT,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CACtD,IAAI,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;YAED,iCAAiC;YAEjC,MAAM,UAAU,GAA4B;gBAC1C,IAAI,EAAE,OAAO;gBACb,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnC,QAAQ;gBACR,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBACtE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI;oBACxC,WAAW,EAAE,MAAM,CAAC,aAAa;iBAClC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI;oBAC7B,cAAc,EAAE,MAAM,CAAC,gBAAgB;iBACxC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;aACjE,CAAC;YAEF,6DAA6D;YAC7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,UAAU,CAAC,YAAY,GAAG,QAAQ,CAAC;YACrC,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,kBAAkB;gBAClB,WAAW,GAAG,MAAM,SAAS,CAAC,KAAK,CACjC,wBAAwB,WAAW,CAAC,EAAE,EAAE,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,uGAAuG;6BAC9G;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAEtC,sBAAsB,EAAE,UAAU,CAAC,CAAC;gBACvC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,qFAAqF;yBAC5F;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,wCAAwC;YAExC,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,MAAM,eAAe,GACnB,MAAM,CAAC,gBAAgB;oBACvB,wDAAwD,CAAC;gBAC3D,MAAM,YAAY,GAChB,MAAM,CAAC,aAAa,IAAI,4BAA4B,CAAC;gBAEvD,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,CAClB,wBAAwB,WAAW,CAAC,EAAE,YAAY,EAClD;wBACE,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,MAAM;wBACd,YAAY,EAAE,MAAM;wBACpB,eAAe,EAAE,eAAe;wBAChC,YAAY,EAAE,YAAY;wBAC1B,gBAAgB,EAAE,KAAK;wBACvB,OAAO,EAAE,oCAAoC;wBAC7C,kBAAkB,EAAE,kBAAkB;qBACvC,CACF,CAAC;oBACF,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,6CAA6C;oBAC7C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxD,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;oBACD,uDAAuD;gBACzD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,IAAI,eAAe,GAAkB,IAAI,CAAC;YAE1C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAIvC,wBAAwB,WAAW,CAAC,EAAE,2BAA2B,EACjE,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CACrC,CAAC;oBACF,eAAe,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACP,+CAA+C;oBAC/C,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,wEAAwE;YAExE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,UAAU,GAA8B,IAAI,CAAC;YAEjD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,oCAAoC,EACpC;wBACE,SAAS,EAAE,OAAO;wBAClB,UAAU;wBACV,UAAU,EAAE,OAAO;wBACnB,aAAa,EAAE,WAAW,CAAC,EAAE;wBAC7B,YAAY,EAAE,MAAM,CAAC,cAAc;wBACnC,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;wBACnC,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,aAAa;wBACxB,UAAU,EAAE,MAAM,CAAC,YAAY;4BAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;4BAChD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACrB,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,SAAS,CAAC,IAAI,CACZ,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CACZ,0DAA0D,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAC/E,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC7B,SAAS,CAAC,IAAI,CACZ,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBACrD,SAAS,CAAC,IAAI,CACZ,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACrC,WAAW,EAAE;oBACX,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,UAAU;oBACV,QAAQ;oBACR,KAAK;iBACN;gBACD,SAAS,EAAE;oBACT,cAAc;oBACd,eAAe;iBAChB;gBACD,QAAQ,EAAE,UAAU;oBAClB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE;wBAC1B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;wBAC9B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;wBAClC,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS;qBACvC;oBACH,CAAC,CAAC,IAAI;gBACR,KAAK,EAAE,UAAU,EAAE,KAAK;oBACtB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;wBACvB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ;qBACpC;oBACH,CAAC,CAAC,IAAI;gBACR,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;oBACxB,CAAC,CAAC;wBACE,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;wBAC1B,SAAS,EAAE,aAAa;wBACxB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;qBAC/B;oBACH,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBACxB,SAAS;aACV,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,kCAAkC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/triage-finding.d.ts

@@ -0,0 +1,47 @@
+/**
+ * zivis_triage_finding — Send triage decision and reasoning back to ZIVIS
+ *
+ * Maps to: PATCH /api/findings/unified/:id
+ *
+ * This is the "write-back" that makes the platform smarter. The AI's
+ * triage decisions and reasoning are recorded as audit notes (via the
+ * `note` field), tagged as AI-generated so humans can distinguish them
+ * in the dashboard.
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const TRIAGE_FINDING_NAME = "zivis_triage_finding";
+export declare const TRIAGE_FINDING_DESCRIPTION = "Submit a triage decision for a security finding back to ZIVIS.\n\nUse this after investigating a finding to record the outcome:\n- \"resolve\" \u2014 the vulnerability has been fixed\n- \"dismiss\" \u2014 the finding is a false positive or not applicable\n- \"accept_risk\" \u2014 the risk is known and accepted\n\nA reasoning field is REQUIRED. Explain why this action is appropriate \u2014 this creates an audit trail and helps ZIVIS learn from your decisions.\n\nThis action is logged with your identity and timestamp. Bulk operations are not supported \u2014 triage one finding at a time.\n\nIMPORTANT: After resolving a finding (action=\"resolve\"), you MUST document the fix:\n1. Create .zivis/ directory if it doesn't exist\n2. Append to .zivis/remediations.md using the markdown template in the response\n3. This creates a security audit trail that stays with the project\n\nThe response includes a \"documentation\" field with pre-formatted markdown to append.";
+export declare const TRIAGE_FINDING_SCHEMA: {
+    finding_id: z.ZodString;
+    action: z.ZodEnum<{
+        resolve: "resolve";
+        dismiss: "dismiss";
+        accept_risk: "accept_risk";
+    }>;
+    reasoning: z.ZodString;
+    dismiss_reason: z.ZodOptional<z.ZodEnum<{
+        false_positive: "false_positive";
+        not_applicable: "not_applicable";
+        wont_fix: "wont_fix";
+        duplicate: "duplicate";
+    }>>;
+};
+export declare function createTriageFindingHandler(apiClient: ApiClient): (params: {
+    finding_id: string;
+    action: "resolve" | "dismiss" | "accept_risk";
+    reasoning: string;
+    dismiss_reason?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/triage-finding.js

@@ -0,0 +1,116 @@
+/**
+ * zivis_triage_finding — Send triage decision and reasoning back to ZIVIS
+ *
+ * Maps to: PATCH /api/findings/unified/:id
+ *
+ * This is the "write-back" that makes the platform smarter. The AI's
+ * triage decisions and reasoning are recorded as audit notes (via the
+ * `note` field), tagged as AI-generated so humans can distinguish them
+ * in the dashboard.
+ */
+import { z } from "zod";
+export const TRIAGE_FINDING_NAME = "zivis_triage_finding";
+export const TRIAGE_FINDING_DESCRIPTION = `Submit a triage decision for a security finding back to ZIVIS.
+
+Use this after investigating a finding to record the outcome:
+- "resolve" — the vulnerability has been fixed
+- "dismiss" — the finding is a false positive or not applicable
+- "accept_risk" — the risk is known and accepted
+
+A reasoning field is REQUIRED. Explain why this action is appropriate — this creates an audit trail and helps ZIVIS learn from your decisions.
+
+This action is logged with your identity and timestamp. Bulk operations are not supported — triage one finding at a time.
+
+IMPORTANT: After resolving a finding (action="resolve"), you MUST document the fix:
+1. Create .zivis/ directory if it doesn't exist
+2. Append to .zivis/remediations.md using the markdown template in the response
+3. This creates a security audit trail that stays with the project
+
+The response includes a "documentation" field with pre-formatted markdown to append.`;
+export const TRIAGE_FINDING_SCHEMA = {
+    finding_id: z.string().describe("The finding ID to triage"),
+    action: z
+        .enum(["resolve", "dismiss", "accept_risk"])
+        .describe("Triage action: resolve (fixed), dismiss (FP/NA), or accept_risk"),
+    reasoning: z
+        .string()
+        .min(10)
+        .describe("Explanation of why this action is appropriate. Must be at least 10 characters. This is logged as an audit note."),
+    dismiss_reason: z
+        .enum(["false_positive", "not_applicable", "wont_fix", "duplicate"])
+        .optional()
+        .describe("Required when action is 'dismiss'. Reason for dismissal."),
+};
+export function createTriageFindingHandler(apiClient) {
+    return async (params) => {
+        // Validate dismiss_reason is provided when dismissing
+        if (params.action === "dismiss" && !params.dismiss_reason) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "Error: dismiss_reason is required when action is 'dismiss'",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            // Map action to finding status
+            const statusMap = {
+                resolve: "resolved",
+                dismiss: "dismissed",
+                accept_risk: "accepted",
+            };
+            // Update finding status with note for audit trail
+            // The unified findings API logs history entries automatically when note is provided
+            const patchBody = {
+                status: statusMap[params.action],
+                note: `[MCP AI Triage] ${params.reasoning}`,
+            };
+            if (params.dismiss_reason) {
+                patchBody.dismissReason = params.dismiss_reason;
+            }
+            await apiClient.patch(`/api/findings/unified/${params.finding_id}`, patchBody);
+            const response = {
+                success: true,
+                findingId: params.finding_id,
+                newStatus: statusMap[params.action],
+                message: `Finding ${params.finding_id} marked as ${statusMap[params.action]}. Reasoning logged as audit note.`,
+            };
+            // Generate documentation markdown for resolved findings
+            const today = new Date().toISOString().split("T")[0];
+            const documentation = params.action === "resolve"
+                ? {
+                    shouldDocument: true,
+                    filePath: ".zivis/remediations.md",
+                    markdownToAppend: `
+## ${today} — ${params.finding_id}
+
+**Status:** Resolved
+**Reasoning:** ${params.reasoning}
+
+---
+`,
+                    instructions: "Append the markdownToAppend to .zivis/remediations.md (create directory and file if needed). Add finding title, severity, vulnerable code description, and files changed above the reasoning.",
+                }
+                : { shouldDocument: false };
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({ ...response, documentation }, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to triage finding";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=triage-finding.js.map

package/dist/tools/triage-finding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-finding.js","sourceRoot":"","sources":["../../src/tools/triage-finding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;qFAgB2C,CAAC;AAEtF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SAC3C,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CACP,iHAAiH,CAClH;IACH,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnE,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,sDAAsD;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,SAAS,GAA2B;gBACxC,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC;YAEF,kDAAkD;YAClD,oFAAoF;YACpF,MAAM,SAAS,GAA4B;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,mBAAmB,MAAM,CAAC,SAAS,EAAE;aAC5C,CAAC;YACF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;YAClD,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,CACnB,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,SAAS,CACV,CAAC;YAEF,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC;aAC/G,CAAC;YAEF,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,wBAAwB;oBAClC,gBAAgB,EAAE;KAC3B,KAAK,MAAM,MAAM,CAAC,UAAU;;;iBAGhB,MAAM,CAAC,SAAS;;;CAGhC;oBACa,YAAY,EACV,+LAA+L;iBAClM;gBACH,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAEhC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC9D;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/update-document.d.ts

@@ -0,0 +1,28 @@
+/**
+ * zivis_update_document — Update a document's title, markdown content, or tags.
+ *
+ * Maps to: PATCH /api/documents/:id
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const UPDATE_DOCUMENT_NAME = "zivis_update_document";
+export declare const UPDATE_DOCUMENT_DESCRIPTION = "Update a document's title, markdown content, or tags. At least one of these fields must be provided.\n\n**Workflow:**\n  1. Call zivis_get_document to read the current content.\n  2. Reason about the change the user requested.\n  3. Produce a complete, valid markdown string for `content` \u2014 this REPLACES the entire content.\n  4. Call this tool.\n\n**Embedding diagrams in content:**\n  - Inline mermaid: ```mermaid\\n<source>\\n```\n  - Reference an existing Diagram record: ```zivis:diagram\\n<uuid>\\n```  (edits to that Diagram reflect in every document that embeds it)\n\n**Keep structure intact.** Only change what the user asked for \u2014 preserve sections, headings, diagrams, links, formatting.";
+export declare const UPDATE_DOCUMENT_SCHEMA: {
+    document_id: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+type UpdateDocumentParams = {
+    document_id: string;
+    title?: string;
+    content?: string;
+    tags?: string[];
+};
+export declare function createUpdateDocumentHandler(apiClient: ApiClient): (params: UpdateDocumentParams) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+}>;
+export {};