@zivis/mcp 0.1.0-alpha.13 → 0.1.0-alpha.14

package/dist/tools/enterprise/manage-threat-model-analysis.js

@@ -0,0 +1,92 @@
+/**
+ * zivis_manage_threat_model_analysis — Start/status/regenerate analysis
+ *
+ * Maps to:
+ * - POST /api/threat-models/:id/analyze
+ * - GET /api/threat-models/:id/analyze/status
+ * - POST /api/threat-models/:id/regenerate
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_THREAT_MODEL_ANALYSIS_NAME = "zivis_manage_threat_model_analysis";
+export const MANAGE_THREAT_MODEL_ANALYSIS_DESCRIPTION = `Manage threat model analysis lifecycle.
+
+Actions:
+- status: get current analysis status
+- start: trigger a new analysis run
+- regenerate: queue regeneration for stale scopes
+
+Use threat_model_id from zivis_list_threat_models.`;
+export const MANAGE_THREAT_MODEL_ANALYSIS_SCHEMA = {
+    threat_model_id: z
+        .string()
+        .describe("Threat model UUID (from zivis_list_threat_models)"),
+    action: z
+        .enum(["status", "start", "regenerate"])
+        .describe("Analysis action to perform"),
+    analysis_config: z
+        .object({
+        generate_dfd: z.boolean().optional(),
+        map_to_mitre: z.boolean().optional(),
+        include_dread: z.boolean().optional(),
+        include_compliance: z.boolean().optional(),
+    })
+        .optional()
+        .describe("Optional analysis config (used for start action)"),
+    scope_ids: z
+        .array(z.string())
+        .optional()
+        .describe("Scope IDs to regenerate (used for regenerate action)"),
+    regenerate_all: z
+        .boolean()
+        .optional()
+        .describe("Regenerate all stale scopes (used for regenerate action)"),
+};
+export function createManageThreatModelAnalysisHandler(apiClient) {
+    return async (params) => {
+        try {
+            let data;
+            const { threat_model_id, action } = params;
+            if (action === "status") {
+                data = await apiClient.get(`/api/threat-models/${threat_model_id}/analyze/status`);
+            }
+            else if (action === "start") {
+                const config = params.analysis_config;
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/analyze`, {
+                    analysisConfig: config
+                        ? {
+                            generateDfd: config.generate_dfd,
+                            mapToMitre: config.map_to_mitre,
+                            includeDread: config.include_dread,
+                            includeCompliance: config.include_compliance,
+                        }
+                        : undefined,
+                });
+            }
+            else {
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/regenerate`, {
+                    scopeIds: params.scope_ids || [],
+                    regenerateAll: params.regenerate_all ?? false,
+                });
+            }
+            const sanitized = sanitizeResponse({
+                action,
+                threat_model_id,
+                result: data,
+            });
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error
+                ? err.message
+                : "Failed to manage threat model analysis";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-threat-model-analysis.js.map

package/dist/tools/enterprise/manage-threat-model-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-threat-model-analysis.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-threat-model-analysis.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAAG,oCAAoC,CAAC;AAEtF,MAAM,CAAC,MAAM,wCAAwC,GAAG;;;;;;;mDAOL,CAAC;AAEpD,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,mDAAmD,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;SACvC,QAAQ,CAAC,4BAA4B,CAAC;IACzC,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACpC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACpC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACrC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,cAAc,EAAE,CAAC;SACd,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,sCAAsC,CAAC,SAAoB;IACzE,OAAO,KAAK,EAAE,MAWb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,IAA6B,CAAC;YAClC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAE3C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,iBAAiB,CACvD,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;gBACtC,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,UAAU,EAC/C;oBACE,cAAc,EAAE,MAAM;wBACpB,CAAC,CAAC;4BACE,WAAW,EAAE,MAAM,CAAC,YAAY;4BAChC,UAAU,EAAE,MAAM,CAAC,YAAY;4BAC/B,YAAY,EAAE,MAAM,CAAC,aAAa;4BAClC,iBAAiB,EAAE,MAAM,CAAC,kBAAkB;yBAC7C;wBACH,CAAC,CAAC,SAAS;iBACd,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;oBAChC,aAAa,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;iBAC9C,CACF,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,MAAM;gBACN,eAAe;gBACf,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,wCAAwC,CAAC;YAC/C,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-threat-model-review.d.ts

@@ -0,0 +1,47 @@
+/**
+ * zivis_manage_threat_model_review — Accept/reject AI review items
+ *
+ * Maps to:
+ * - POST /api/threat-models/:id/review-items/:type/:itemId/accept
+ * - POST /api/threat-models/:id/review-items/:type/:itemId/reject
+ * - POST /api/threat-models/:id/review-items/accept-all
+ * - POST /api/threat-models/:id/review-items/reject-all
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const MANAGE_THREAT_MODEL_REVIEW_NAME = "zivis_manage_threat_model_review";
+export declare const MANAGE_THREAT_MODEL_REVIEW_DESCRIPTION = "Accept or reject pending AI-generated threat model review items.\n\nActions:\n- accept_item: accept one pending item\n- reject_item: reject one pending item\n- accept_all: accept all pending items\n- reject_all: reject all pending items";
+export declare const MANAGE_THREAT_MODEL_REVIEW_SCHEMA: {
+    threat_model_id: z.ZodString;
+    action: z.ZodEnum<{
+        accept_item: "accept_item";
+        reject_item: "reject_item";
+        accept_all: "accept_all";
+        reject_all: "reject_all";
+    }>;
+    item_type: z.ZodOptional<z.ZodEnum<{
+        finding: "finding";
+        asset: "asset";
+        scenario: "scenario";
+        component: "component";
+    }>>;
+    item_id: z.ZodOptional<z.ZodString>;
+};
+export declare function createManageThreatModelReviewHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    action: "accept_item" | "reject_item" | "accept_all" | "reject_all";
+    item_type?: "finding" | "asset" | "scenario" | "component";
+    item_id?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/manage-threat-model-review.js

@@ -0,0 +1,82 @@
+/**
+ * zivis_manage_threat_model_review — Accept/reject AI review items
+ *
+ * Maps to:
+ * - POST /api/threat-models/:id/review-items/:type/:itemId/accept
+ * - POST /api/threat-models/:id/review-items/:type/:itemId/reject
+ * - POST /api/threat-models/:id/review-items/accept-all
+ * - POST /api/threat-models/:id/review-items/reject-all
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const MANAGE_THREAT_MODEL_REVIEW_NAME = "zivis_manage_threat_model_review";
+export const MANAGE_THREAT_MODEL_REVIEW_DESCRIPTION = `Accept or reject pending AI-generated threat model review items.
+
+Actions:
+- accept_item: accept one pending item
+- reject_item: reject one pending item
+- accept_all: accept all pending items
+- reject_all: reject all pending items`;
+export const MANAGE_THREAT_MODEL_REVIEW_SCHEMA = {
+    threat_model_id: z
+        .string()
+        .describe("Threat model UUID (from zivis_list_threat_models)"),
+    action: z
+        .enum(["accept_item", "reject_item", "accept_all", "reject_all"])
+        .describe("Review action"),
+    item_type: z
+        .enum(["finding", "asset", "scenario", "component"])
+        .optional()
+        .describe("Required for *_item actions"),
+    item_id: z
+        .string()
+        .optional()
+        .describe("Required for *_item actions"),
+};
+export function createManageThreatModelReviewHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { threat_model_id, action } = params;
+            let data;
+            if (action === "accept_all") {
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/accept-all`, {});
+            }
+            else if (action === "reject_all") {
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/reject-all`, {});
+            }
+            else {
+                if (!params.item_type || !params.item_id) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: "Error: item_type and item_id are required for accept_item/reject_item actions",
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                const verb = action === "accept_item" ? "accept" : "reject";
+                data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/${params.item_type}/${params.item_id}/${verb}`, {});
+            }
+            const sanitized = sanitizeResponse({
+                action,
+                threat_model_id,
+                item_type: params.item_type,
+                item_id: params.item_id,
+                result: data,
+            });
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage threat model review";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-threat-model-review.js.map

package/dist/tools/enterprise/manage-threat-model-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-threat-model-review.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-threat-model-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAElF,MAAM,CAAC,MAAM,sCAAsC,GAAG;;;;;;uCAMf,CAAC;AAExC,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,mDAAmD,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;SAChE,QAAQ,CAAC,eAAe,CAAC;IAC5B,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,6BAA6B,CAAC;CAC3C,CAAC;AAEF,MAAM,UAAU,oCAAoC,CAAC,SAAoB;IACvE,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAC3C,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,0BAA0B,EAC/D,EAAE,CACH,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,0BAA0B,EAC/D,EAAE,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,+EAA+E;6BACtF;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC5D,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,iBAAiB,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,EAClG,EAAE,CACH,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,MAAM;gBACN,eAAe;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/get-application-auth-config.d.ts

@@ -0,0 +1,27 @@
+/**
+ * zivis_get_application_auth_config — Get app auth config for CLI PKCE/token workflows
+ *
+ * Maps to: GET /api/applications/:appId/auth-config
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const GET_APPLICATION_AUTH_CONFIG_NAME = "zivis_get_application_auth_config";
+export declare const GET_APPLICATION_AUTH_CONFIG_DESCRIPTION = "Get authentication config for an application, including PKCE metadata when applicable.\n\nIf application_id is omitted, this uses applicationId from .zivis/project.json when present.";
+export declare const GET_APPLICATION_AUTH_CONFIG_SCHEMA: {
+    application_id: z.ZodOptional<z.ZodString>;
+};
+export declare function createGetApplicationAuthConfigHandler(apiClient: ApiClient): (params: {
+    application_id?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/get-application-auth-config.js

@@ -0,0 +1,44 @@
+/**
+ * zivis_get_application_auth_config — Get app auth config for CLI PKCE/token workflows
+ *
+ * Maps to: GET /api/applications/:appId/auth-config
+ */
+import { z } from "zod";
+import { requireApplicationId } from "../resolve-application-id.js";
+import { sanitizeResponse } from "../sanitize.js";
+export const GET_APPLICATION_AUTH_CONFIG_NAME = "zivis_get_application_auth_config";
+export const GET_APPLICATION_AUTH_CONFIG_DESCRIPTION = `Get authentication config for an application, including PKCE metadata when applicable.
+
+If application_id is omitted, this uses applicationId from .zivis/project.json when present.`;
+export const GET_APPLICATION_AUTH_CONFIG_SCHEMA = {
+    application_id: z
+        .string()
+        .optional()
+        .describe("Application UUID. If omitted, uses applicationId from .zivis/project.json when set."),
+};
+export function createGetApplicationAuthConfigHandler(apiClient) {
+    return async (params) => {
+        const req = requireApplicationId(params.application_id);
+        if (!req.ok) {
+            return {
+                content: [{ type: "text", text: `Error: ${req.message}` }],
+                isError: true,
+            };
+        }
+        try {
+            const data = await apiClient.get(`/api/applications/${req.id}/auth-config`);
+            const sanitized = sanitizeResponse(data);
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to get application auth config";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=get-application-auth-config.js.map

package/dist/tools/get-application-auth-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-application-auth-config.js","sourceRoot":"","sources":["../../src/tools/get-application-auth-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,gCAAgC,GAAG,mCAAmC,CAAC;AAEpF,MAAM,CAAC,MAAM,uCAAuC,GAAG;;6FAEsC,CAAC;AAE9F,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qFAAqF,CACtF;CACJ,CAAC;AAEF,MAAM,UAAU,qCAAqC,CAAC,SAAoB;IACxE,OAAO,KAAK,EAAE,MAAmC,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,qBAAqB,GAAG,CAAC,EAAE,cAAc,CAC1C,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/manage-application.d.ts

@@ -0,0 +1,72 @@
+/**
+ * zivis_manage_application — Create/update/delete application
+ *
+ * Maps to:
+ * - POST /api/rt/applications
+ * - PATCH /api/rt/applications/:id
+ * - DELETE /api/rt/applications/:id
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const MANAGE_APPLICATION_NAME = "zivis_manage_application";
+export declare const MANAGE_APPLICATION_DESCRIPTION = "Create, update, or delete a target application.\n\nActions:\n- create: requires at least name, base_url, auth_type\n- update: patch an existing application (requires application_id)\n- delete: remove an application (requires application_id)";
+export declare const MANAGE_APPLICATION_SCHEMA: {
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+    }>;
+    application_id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    base_url: z.ZodOptional<z.ZodString>;
+    api_url: z.ZodOptional<z.ZodString>;
+    auth_type: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        static_token: "static_token";
+        oauth_pkce: "oauth_pkce";
+        client_credentials: "client_credentials";
+        bearer_refresh: "bearer_refresh";
+    }>>;
+    has_rag: z.ZodOptional<z.ZodBoolean>;
+    has_tools: z.ZodOptional<z.ZodBoolean>;
+    has_memory: z.ZodOptional<z.ZodBoolean>;
+    is_multi_turn: z.ZodOptional<z.ZodBoolean>;
+    system_context: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodEnum<{
+        api: "api";
+        chat: "chat";
+        sse: "sse";
+        validation: "validation";
+        web: "web";
+    }>>;
+    use_ephemeral_creds: z.ZodOptional<z.ZodBoolean>;
+};
+export declare function createManageApplicationHandler(apiClient: ApiClient): (params: {
+    action: "create" | "update" | "delete";
+    application_id?: string;
+    name?: string;
+    description?: string;
+    base_url?: string;
+    api_url?: string;
+    auth_type?: "none" | "oauth_pkce" | "static_token" | "client_credentials" | "bearer_refresh";
+    has_rag?: boolean;
+    has_tools?: boolean;
+    has_memory?: boolean;
+    is_multi_turn?: boolean;
+    system_context?: string;
+    type?: "api" | "chat" | "sse" | "validation" | "web";
+    use_ephemeral_creds?: boolean;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/manage-application.js

@@ -0,0 +1,138 @@
+/**
+ * zivis_manage_application — Create/update/delete application
+ *
+ * Maps to:
+ * - POST /api/rt/applications
+ * - PATCH /api/rt/applications/:id
+ * - DELETE /api/rt/applications/:id
+ */
+import { z } from "zod";
+import { requireApplicationId } from "../resolve-application-id.js";
+import { sanitizeResponse } from "../sanitize.js";
+export const MANAGE_APPLICATION_NAME = "zivis_manage_application";
+export const MANAGE_APPLICATION_DESCRIPTION = `Create, update, or delete a target application.
+
+Actions:
+- create: requires at least name, base_url, auth_type
+- update: patch an existing application (requires application_id)
+- delete: remove an application (requires application_id)`;
+export const MANAGE_APPLICATION_SCHEMA = {
+    action: z.enum(["create", "update", "delete"]).describe("CRUD action"),
+    application_id: z
+        .string()
+        .optional()
+        .describe("Required for update/delete. Optional for create."),
+    name: z.string().optional().describe("Application name"),
+    description: z.string().optional().describe("Application description"),
+    base_url: z.string().optional().describe("Base URL, e.g. https://api.example.com"),
+    api_url: z.string().optional().describe("Explicit API URL"),
+    auth_type: z
+        .enum(["none", "oauth_pkce", "static_token", "client_credentials", "bearer_refresh"])
+        .optional()
+        .describe("Application auth type (required for create)"),
+    has_rag: z.boolean().optional().describe("LLM capability flag"),
+    has_tools: z.boolean().optional().describe("LLM capability flag"),
+    has_memory: z.boolean().optional().describe("LLM capability flag"),
+    is_multi_turn: z.boolean().optional().describe("LLM capability flag"),
+    system_context: z.string().optional().describe("System context/prompt context"),
+    type: z
+        .enum(["api", "chat", "sse", "validation", "web"])
+        .optional()
+        .describe("Application type"),
+    use_ephemeral_creds: z
+        .boolean()
+        .optional()
+        .describe("Whether ephemeral credentials are enabled"),
+};
+export function createManageApplicationHandler(apiClient) {
+    return async (params) => {
+        try {
+            const { action } = params;
+            let data;
+            if (action === "create") {
+                if (!params.name || !params.base_url || !params.auth_type) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: "Error: create requires name, base_url, and auth_type",
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                data = await apiClient.post("/api/rt/applications", {
+                    name: params.name,
+                    description: params.description,
+                    baseUrl: params.base_url,
+                    apiUrl: params.api_url,
+                    authType: params.auth_type,
+                    hasRag: params.has_rag,
+                    hasTools: params.has_tools,
+                    hasMemory: params.has_memory,
+                    isMultiTurn: params.is_multi_turn,
+                    systemContext: params.system_context,
+                    type: params.type,
+                    useEphemeralCreds: params.use_ephemeral_creds,
+                });
+            }
+            else {
+                const req = requireApplicationId(params.application_id);
+                if (!req.ok) {
+                    return {
+                        content: [{ type: "text", text: `Error: ${req.message}` }],
+                        isError: true,
+                    };
+                }
+                if (action === "delete") {
+                    data = await apiClient.del(`/api/rt/applications/${req.id}`);
+                }
+                else {
+                    const body = {};
+                    if (params.name !== undefined)
+                        body.name = params.name;
+                    if (params.description !== undefined)
+                        body.description = params.description;
+                    if (params.base_url !== undefined)
+                        body.baseUrl = params.base_url;
+                    if (params.api_url !== undefined)
+                        body.apiUrl = params.api_url;
+                    if (params.auth_type !== undefined)
+                        body.authType = params.auth_type;
+                    if (params.has_rag !== undefined)
+                        body.hasRag = params.has_rag;
+                    if (params.has_tools !== undefined)
+                        body.hasTools = params.has_tools;
+                    if (params.has_memory !== undefined)
+                        body.hasMemory = params.has_memory;
+                    if (params.is_multi_turn !== undefined)
+                        body.isMultiTurn = params.is_multi_turn;
+                    if (params.system_context !== undefined)
+                        body.systemContext = params.system_context;
+                    if (params.type !== undefined)
+                        body.type = params.type;
+                    if (params.use_ephemeral_creds !== undefined) {
+                        body.useEphemeralCreds = params.use_ephemeral_creds;
+                    }
+                    data = await apiClient.patch(`/api/rt/applications/${req.id}`, body);
+                }
+            }
+            const sanitized = sanitizeResponse({
+                action,
+                application_id: params.application_id,
+                result: data,
+            });
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to manage application";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=manage-application.js.map

package/dist/tools/manage-application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-application.js","sourceRoot":"","sources":["../../src/tools/manage-application.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;0DAKY,CAAC;AAE3D,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IACtE,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3D,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SACpF,QAAQ,EAAE;SACV,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACjE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACrE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC/E,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;SACjD,QAAQ,EAAE;SACV,QAAQ,CAAC,kBAAkB,CAAC;IAC/B,mBAAmB,EAAE,CAAC;SACnB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,2CAA2C,CAAC;CACzD,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAoB;IACjE,OAAO,KAAK,EAAE,MAoBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAC1B,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC1D,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,sDAAsD;6BAC7D;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAA0B,sBAAsB,EAAE;oBAC3E,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,MAAM,EAAE,MAAM,CAAC,OAAO;oBACtB,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,MAAM,EAAE,MAAM,CAAC,OAAO;oBACtB,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,WAAW,EAAE,MAAM,CAAC,aAAa;oBACjC,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;iBAC9C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;wBACnE,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,wBAAwB,GAAG,CAAC,EAAE,EAAE,CACjC,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAA4B,EAAE,CAAC;oBACzC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;wBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;oBAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;wBAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAClE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;wBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC/D,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;wBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;oBACrE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;wBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC/D,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;wBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;oBACrE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;wBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;oBACxE,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;wBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC;oBAChF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;wBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;oBACpF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;wBAC7C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC;oBACtD,CAAC;oBAED,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,wBAAwB,GAAG,CAAC,EAAE,EAAE,EAChC,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,MAAM;gBACN,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/manage-endpoint-lifecycle.d.ts

@@ -0,0 +1,90 @@
+/**
+ * zivis_manage_endpoint_lifecycle — Create/update/delete/import endpoints
+ *
+ * Maps to:
+ * - POST /api/rt/applications/:id/endpoints
+ * - PATCH /api/rt/applications/:id/endpoints/:endpointId
+ * - DELETE /api/rt/applications/:id/endpoints/:endpointId
+ * - DELETE /api/rt/applications/:id/endpoints?source=<source>
+ * - POST /api/rt/applications/:id/endpoints/import-openapi
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const MANAGE_ENDPOINT_LIFECYCLE_NAME = "zivis_manage_endpoint_lifecycle";
+export declare const MANAGE_ENDPOINT_LIFECYCLE_DESCRIPTION = "Manage endpoint lifecycle for an application.\n\nActions:\n- create: create a single endpoint\n- update: patch an endpoint\n- delete: delete a single endpoint\n- bulk_delete: delete endpoints by source (e.g., openapi)\n- import_openapi: import endpoints from an OpenAPI spec";
+export declare const MANAGE_ENDPOINT_LIFECYCLE_SCHEMA: {
+    application_id: z.ZodOptional<z.ZodString>;
+    action: z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+        bulk_delete: "bulk_delete";
+        import_openapi: "import_openapi";
+    }>;
+    endpoint_id: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    method: z.ZodOptional<z.ZodEnum<{
+        POST: "POST";
+        GET: "GET";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        PUT: "PUT";
+        HEAD: "HEAD";
+        OPTIONS: "OPTIONS";
+    }>>;
+    summary: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth_required: z.ZodOptional<z.ZodBoolean>;
+    deprecated: z.ZodOptional<z.ZodBoolean>;
+    endpoint_type: z.ZodOptional<z.ZodEnum<{
+        api: "api";
+        chat: "chat";
+        sse: "sse";
+        validation: "validation";
+        web: "web";
+    }>>;
+    request_template: z.ZodOptional<z.ZodString>;
+    response_path: z.ZodOptional<z.ZodString>;
+    streaming_enabled: z.ZodOptional<z.ZodBoolean>;
+    source: z.ZodOptional<z.ZodEnum<{
+        openapi: "openapi";
+        manual: "manual";
+        discovery: "discovery";
+    }>>;
+    spec_url: z.ZodOptional<z.ZodString>;
+    spec_content: z.ZodOptional<z.ZodString>;
+    replace_existing: z.ZodOptional<z.ZodBoolean>;
+};
+export declare function createManageEndpointLifecycleHandler(apiClient: ApiClient): (params: {
+    application_id?: string;
+    action: "create" | "update" | "delete" | "bulk_delete" | "import_openapi";
+    endpoint_id?: string;
+    path?: string;
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    summary?: string;
+    description?: string;
+    tags?: string[];
+    auth_required?: boolean;
+    deprecated?: boolean;
+    endpoint_type?: "api" | "chat" | "sse" | "validation" | "web";
+    request_template?: string;
+    response_path?: string;
+    streaming_enabled?: boolean;
+    source?: "openapi" | "manual" | "discovery";
+    spec_url?: string;
+    spec_content?: string;
+    replace_existing?: boolean;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;