@zivis/mcp 0.1.0-alpha.1

package/dist/tools/create-diagram.js

@@ -0,0 +1,176 @@
+/**
+ * zivis_create_diagram — Create a new diagram with nodes, connections, and boundaries
+ *
+ * Maps to: POST /api/diagrams + optional POST /api/diagrams/:id/link
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../sanitize.js";
+export const CREATE_DIAGRAM_NAME = "zivis_create_diagram";
+export const CREATE_DIAGRAM_DESCRIPTION = `Create a new canvas diagram with nodes, connections, and boundaries in a single call.
+
+Use this to build system architecture diagrams, data flow diagrams, attack chains, etc. from code analysis.
+
+**Temp IDs:** When creating nodes and connections together, assign each node a temp_id (e.g., "node_0", "node_1") and reference them in connections via source_temp_id / target_temp_id. Similarly, assign boundaries a temp_id and reference them in nodes via boundary_temp_id.
+
+**Positioning:** Nodes default to (0,0). For readable layouts, space nodes apart (e.g., 250px horizontal, 150px vertical gaps). Default node size is 200x100px. Boundaries should be sized to contain their child nodes with padding.
+
+**Tags:** Use tags to annotate nodes with metadata (e.g., ["database", "postgres", "port:5432", "pii"]). These are searchable and displayed in the UI.
+
+**Colors:** Use hex colors (e.g., "#336791" for databases, "#DC382D" for caches, "#009639" for proxies).`;
+export const CREATE_DIAGRAM_SCHEMA = {
+    name: z
+        .string()
+        .describe("Diagram name"),
+    description: z
+        .string()
+        .optional()
+        .describe("Diagram description"),
+    diagram_type: z
+        .enum(["architecture", "data_flow", "attack_chain", "sequence", "trust_boundary", "network", "deployment", "custom"])
+        .describe("Type of diagram"),
+    nodes: z
+        .array(z.object({
+        temp_id: z.string().optional().describe("Temporary ID for referencing in connections (e.g., 'node_0')"),
+        name: z.string().describe("Node name (e.g., 'PostgreSQL', 'API Gateway')"),
+        description: z.string().optional().describe("Node description"),
+        tags: z.array(z.string()).optional().describe("Tags (e.g., ['database', 'port:5432'])"),
+        icon: z.string().optional().describe("Icon name (e.g., 'database', 'server', 'shield', 'globe')"),
+        color: z.string().optional().describe("Hex color (e.g., '#336791')"),
+        position_x: z.number().optional().describe("X position on canvas (default 0)"),
+        position_y: z.number().optional().describe("Y position on canvas (default 0)"),
+        width: z.number().optional().describe("Node width (default 200)"),
+        height: z.number().optional().describe("Node height (default 100)"),
+        step_order: z.number().optional().describe("Step order for attack chain diagrams"),
+        boundary_temp_id: z.string().optional().describe("Temp ID of boundary this node belongs to"),
+        metadata: z.record(z.string(), z.unknown()).optional().describe("Custom metadata"),
+    }))
+        .optional()
+        .describe("Nodes to create"),
+    connections: z
+        .array(z.object({
+        source_temp_id: z.string().optional().describe("Source node temp ID"),
+        target_temp_id: z.string().optional().describe("Target node temp ID"),
+        source_node_id: z.string().optional().describe("Source node UUID (if referencing existing node)"),
+        target_node_id: z.string().optional().describe("Target node UUID (if referencing existing node)"),
+        label: z.string().optional().describe("Connection label (e.g., 'HTTPS', 'depends on')"),
+        description: z.string().optional().describe("Connection description"),
+        tags: z.array(z.string()).optional().describe("Connection tags"),
+        bidirectional: z.boolean().optional().describe("Whether connection goes both ways (default false)"),
+        metadata: z.record(z.string(), z.unknown()).optional().describe("Custom metadata"),
+    }))
+        .optional()
+        .describe("Connections between nodes"),
+    boundaries: z
+        .array(z.object({
+        temp_id: z.string().optional().describe("Temporary ID for referencing in nodes (e.g., 'boundary_0')"),
+        label: z.string().describe("Boundary label (e.g., 'DMZ', 'Internal Network')"),
+        description: z.string().optional().describe("Boundary description"),
+        color: z.string().optional().describe("Hex color"),
+        position_x: z.number().optional().describe("X position (default 0)"),
+        position_y: z.number().optional().describe("Y position (default 0)"),
+        width: z.number().optional().describe("Boundary width (default 400)"),
+        height: z.number().optional().describe("Boundary height (default 300)"),
+    }))
+        .optional()
+        .describe("Boundary groups (trust boundaries, network segments)"),
+    linked_threat_model_id: z
+        .string()
+        .optional()
+        .describe("Threat model UUID to link this diagram to after creation"),
+};
+export function createCreateDiagramHandler(apiClient) {
+    return async (params) => {
+        try {
+            // Transform snake_case to camelCase for API
+            const apiNodes = params.nodes?.map((n) => ({
+                tempId: n.temp_id,
+                name: n.name,
+                description: n.description,
+                tags: n.tags,
+                icon: n.icon,
+                color: n.color,
+                positionX: n.position_x,
+                positionY: n.position_y,
+                width: n.width,
+                height: n.height,
+                stepOrder: n.step_order,
+                boundaryTempId: n.boundary_temp_id,
+                metadata: n.metadata,
+            }));
+            const apiConnections = params.connections?.map((c) => ({
+                sourceTempId: c.source_temp_id,
+                targetTempId: c.target_temp_id,
+                sourceNodeId: c.source_node_id,
+                targetNodeId: c.target_node_id,
+                label: c.label,
+                description: c.description,
+                tags: c.tags,
+                bidirectional: c.bidirectional,
+                metadata: c.metadata,
+            }));
+            const apiBoundaries = params.boundaries?.map((b) => ({
+                tempId: b.temp_id,
+                label: b.label,
+                description: b.description,
+                color: b.color,
+                positionX: b.position_x,
+                positionY: b.position_y,
+                width: b.width,
+                height: b.height,
+            }));
+            const data = await apiClient.post("/api/diagrams", {
+                name: params.name,
+                description: params.description,
+                diagramType: params.diagram_type,
+                contentType: "canvas",
+                sourceType: "manual",
+                nodes: apiNodes,
+                connections: apiConnections,
+                boundaries: apiBoundaries,
+            });
+            const sanitized = sanitizeResponse(data);
+            const diagramId = sanitized.id;
+            // Link to threat model if requested
+            let linkedThreatModelId = null;
+            if (params.linked_threat_model_id && diagramId) {
+                try {
+                    await apiClient.post(`/api/diagrams/${diagramId}/link`, {
+                        threatModelId: params.linked_threat_model_id,
+                    });
+                    linkedThreatModelId = params.linked_threat_model_id;
+                }
+                catch {
+                    // Non-fatal — diagram was created, link just failed
+                }
+            }
+            // Count created entities
+            const nodeCount = Array.isArray(sanitized.nodes) ? sanitized.nodes.length : 0;
+            const connCount = Array.isArray(sanitized.connections) ? sanitized.connections.length : 0;
+            const boundaryCount = Array.isArray(sanitized.boundaries) ? sanitized.boundaries.length : 0;
+            const result = {
+                diagram_id: diagramId,
+                name: sanitized.name,
+                diagram_type: sanitized.diagramType,
+                stats: { nodes: nodeCount, connections: connCount, boundaries: boundaryCount },
+                linked_threat_model_id: linkedThreatModelId,
+                _instruction: "Diagram created. Use zivis_get_diagram to see full content, or zivis_manage_diagram to modify.",
+            };
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to create diagram";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=create-diagram.js.map

package/dist/tools/create-diagram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-diagram.js","sourceRoot":"","sources":["../../src/tools/create-diagram.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;yGAU+D,CAAC;AAE1G,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,CAAC,cAAc,CAAC;IAC3B,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qBAAqB,CAAC;IAClC,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;SACpH,QAAQ,CAAC,iBAAiB,CAAC;IAC9B,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;QACvG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC/D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;QACjG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC9E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC9E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAClF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QAC5F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACnF,CAAC,CACH;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,iBAAiB,CAAC;IAC9B,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QACjG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QACjG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACrE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACnF,CAAC,CACH;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;IACxC,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QACrG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACnE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACrE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KACxE,CAAC,CACH;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAyCb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzC,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,cAAc,EAAE,CAAC,CAAC,gBAAgB;gBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;YAEJ,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrD,YAAY,EAAE,CAAC,CAAC,cAAc;gBAC9B,YAAY,EAAE,CAAC,CAAC,cAAc;gBAC9B,YAAY,EAAE,CAAC,CAAC,cAAc;gBAC9B,YAAY,EAAE,CAAC,CAAC,cAAc;gBAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;YAEJ,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnD,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC,CAAC;YAEJ,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAA0B,eAAe,EAAE;gBAC1E,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,cAAc;gBAC3B,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA4B,CAAC;YACpE,MAAM,SAAS,GAAG,SAAS,CAAC,EAAY,CAAC;YAEzC,oCAAoC;YACpC,IAAI,mBAAmB,GAAkB,IAAI,CAAC;YAC9C,IAAI,MAAM,CAAC,sBAAsB,IAAI,SAAS,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,SAAS,OAAO,EAAE;wBACtD,aAAa,EAAE,MAAM,CAAC,sBAAsB;qBAC7C,CAAC,CAAC;oBACH,mBAAmB,GAAG,MAAM,CAAC,sBAAsB,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,oDAAoD;gBACtD,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,KAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,WAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzG,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,UAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3G,MAAM,MAAM,GAAG;gBACb,UAAU,EAAE,SAAS;gBACrB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,YAAY,EAAE,SAAS,CAAC,WAAW;gBACnC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;gBAC9E,sBAAsB,EAAE,mBAAmB;gBAC3C,YAAY,EAAE,gGAAgG;aAC/G,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAChF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/create-document.d.ts

@@ -0,0 +1,28 @@
+/**
+ * zivis_create_document — Create a new document under a threat model.
+ *
+ * Maps to: POST /api/documents
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const CREATE_DOCUMENT_NAME = "zivis_create_document";
+export declare const CREATE_DOCUMENT_DESCRIPTION = "Create a new narrative markdown document under a ThreatModel.\n\nUse this when the user wants a rich written artifact to accompany the threat model \u2014 executive summary, remediation plan, architecture narrative, etc. The document can embed standalone Diagrams by reference.";
+export declare const CREATE_DOCUMENT_SCHEMA: {
+    threat_model_id: z.ZodString;
+    title: z.ZodString;
+    content: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+type CreateDocumentParams = {
+    threat_model_id: string;
+    title: string;
+    content?: string;
+    tags?: string[];
+};
+export declare function createCreateDocumentHandler(apiClient: ApiClient): (params: CreateDocumentParams) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+}>;
+export {};

package/dist/tools/create-document.js

@@ -0,0 +1,53 @@
+/**
+ * zivis_create_document — Create a new document under a threat model.
+ *
+ * Maps to: POST /api/documents
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../sanitize.js";
+export const CREATE_DOCUMENT_NAME = "zivis_create_document";
+export const CREATE_DOCUMENT_DESCRIPTION = `Create a new narrative markdown document under a ThreatModel.
+
+Use this when the user wants a rich written artifact to accompany the threat model — executive summary, remediation plan, architecture narrative, etc. The document can embed standalone Diagrams by reference.`;
+export const CREATE_DOCUMENT_SCHEMA = {
+    threat_model_id: z.string().describe("UUID of the parent threat model"),
+    title: z.string().describe("Document title (e.g., 'System Architecture Narrative')"),
+    content: z
+        .string()
+        .optional()
+        .describe("Initial markdown content. Can include embedded diagrams via ```mermaid or ```zivis:diagram fenced blocks."),
+    tags: z.array(z.string()).optional().describe("Optional tags"),
+};
+function errorResult(message) {
+    return {
+        content: [{ type: "text", text: `Error: ${message}` }],
+        isError: true,
+    };
+}
+function successResult(data) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+    };
+}
+export function createCreateDocumentHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, title, content, tags } = params;
+            if (!threat_model_id)
+                return errorResult("threat_model_id is required");
+            if (!title || !title.trim())
+                return errorResult("title is required");
+            const data = await apiClient.post(`/api/documents`, {
+                threatModelId: threat_model_id,
+                title,
+                content: content ?? "",
+                tags: tags ?? [],
+            });
+            return successResult(data);
+        }
+        catch (err) {
+            return errorResult(err?.message ?? "Failed to create document");
+        }
+    };
+}
+//# sourceMappingURL=create-document.js.map

package/dist/tools/create-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-document.js","sourceRoot":"","sources":["../../src/tools/create-document.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;;gNAEqK,CAAC;AAEjN,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACpF,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2GAA2G,CAAC;IACxH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;CAC/D,CAAC;AASF,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAA4B,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;YACzD,IAAI,CAAC,eAAe;gBAAE,OAAO,WAAW,CAAC,6BAA6B,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAErE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAClD,aAAa,EAAE,eAAe;gBAC9B,KAAK;gBACL,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,IAAI,EAAE,IAAI,IAAI,EAAE;aACjB,CAAC,CAAC;YACH,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,WAAW,CAAC,GAAG,EAAE,OAAO,IAAI,2BAA2B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/discover-local-infra.d.ts

@@ -0,0 +1,24 @@
+/**
+ * zivis_discover_local_infra — Discover AI infrastructure in a local project
+ *
+ * Reads Docker, compose, and dependency files to understand the local AI
+ * infrastructure. Returns structured recommendations for red team testing
+ * via zivis_local_scan.
+ *
+ * This is a local-only tool — no API calls or authentication required.
+ * Env values are always redacted for safety.
+ */
+import { z } from "zod";
+export declare const DISCOVER_LOCAL_INFRA_NAME = "zivis_discover_local_infra";
+export declare const DISCOVER_LOCAL_INFRA_DESCRIPTION = "Discover AI infrastructure in a local project directory by reading Docker, compose, and dependency files.\n\nAnalyzes the project to understand what services are defined, which are running, and what AI/LLM frameworks are in use. Returns structured recommendations for red team testing via zivis_local_scan.\n\nWhat it reads:\n- docker-compose.yml / docker-compose.yaml / compose.yml / compose.yaml\n- Dockerfile(s) in the project root and subdirectories\n- .env files (structure only \u2014 values are redacted for safety)\n- package.json, requirements.txt, pyproject.toml, go.mod (to detect AI frameworks)\n\nWhat it checks:\n- Docker daemon status\n- Currently running containers (docker compose ps)\n- Port mappings and exposed services\n\nWhat it returns:\n- List of services with ports and images\n- Running vs stopped status per service\n- Detected AI/LLM patterns (OpenAI, Anthropic, LangChain, etc.)\n- Suggested target_url, chat_endpoint, target_type for zivis_local_scan\n- Whether the zivis-local-runner Docker image is available\n\nThis tool makes NO network requests and requires NO authentication. It only reads local files and queries the Docker daemon.";
+export declare const DISCOVER_LOCAL_INFRA_SCHEMA: {
+    project_dir: z.ZodOptional<z.ZodString>;
+};
+export declare function createDiscoverLocalInfraHandler(): (params: {
+    project_dir?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+}>;