@zivis/mcp 0.1.0-alpha.18 → 0.1.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api-client.d.ts +0 -8
- package/dist/api-client.js +3 -35
- package/dist/api-client.js.map +1 -1
- package/dist/auth/index.d.ts +5 -8
- package/dist/auth/index.js +17 -32
- package/dist/auth/index.js.map +1 -1
- package/dist/auth/keychain.d.ts +5 -6
- package/dist/auth/keychain.js +45 -50
- package/dist/auth/keychain.js.map +1 -1
- package/dist/auth/oauth.d.ts +0 -18
- package/dist/auth/oauth.js +6 -55
- package/dist/auth/oauth.js.map +1 -1
- package/dist/auth/sessions.d.ts +4 -5
- package/dist/auth/sessions.js +14 -20
- package/dist/auth/sessions.js.map +1 -1
- package/dist/auth/token-refresh.d.ts +2 -2
- package/dist/auth/token-refresh.js +9 -42
- package/dist/auth/token-refresh.js.map +1 -1
- package/dist/cli.js +20 -32
- package/dist/cli.js.map +1 -1
- package/dist/project-binding.d.ts +0 -6
- package/dist/project-binding.js +0 -21
- package/dist/project-binding.js.map +1 -1
- package/dist/server.js +6 -62
- package/dist/server.js.map +1 -1
- package/dist/tools/check-project.d.ts +4 -4
- package/dist/tools/check-project.js +63 -109
- package/dist/tools/check-project.js.map +1 -1
- package/dist/tools/check-repo-trust.d.ts +10 -4
- package/dist/tools/check-repo-trust.js +27 -56
- package/dist/tools/check-repo-trust.js.map +1 -1
- package/dist/tools/enterprise/list-agents.d.ts +1 -1
- package/dist/tools/enterprise/manage-finding.d.ts +1 -1
- package/dist/tools/get-finding-details.d.ts +10 -4
- package/dist/tools/get-finding-details.js +10 -28
- package/dist/tools/get-finding-details.js.map +1 -1
- package/dist/tools/get-findings.d.ts +10 -4
- package/dist/tools/get-findings.js +23 -44
- package/dist/tools/get-findings.js.map +1 -1
- package/dist/tools/list-applications.d.ts +1 -1
- package/dist/tools/list-scans.d.ts +10 -4
- package/dist/tools/list-scans.js +21 -55
- package/dist/tools/list-scans.js.map +1 -1
- package/dist/tools/list-test-scenarios.d.ts +10 -4
- package/dist/tools/list-test-scenarios.js +13 -41
- package/dist/tools/list-test-scenarios.js.map +1 -1
- package/dist/tools/local-scan.d.ts +1 -1
- package/dist/tools/open-in-ide.d.ts +1 -1
- package/dist/tools/setup-red-team-target.d.ts +12 -6
- package/dist/tools/setup-red-team-target.js +20 -51
- package/dist/tools/setup-red-team-target.js.map +1 -1
- package/dist/tools/triage-finding.d.ts +10 -4
- package/dist/tools/triage-finding.js +21 -30
- package/dist/tools/triage-finding.js.map +1 -1
- package/dist/types.d.ts +2 -42
- package/dist/types.js +23 -29
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
- package/dist/lib/next-steps.d.ts +0 -57
- package/dist/lib/next-steps.js +0 -45
- package/dist/lib/next-steps.js.map +0 -1
- package/dist/prompts/audit-dependencies.d.ts +0 -10
- package/dist/prompts/audit-dependencies.js +0 -56
- package/dist/prompts/audit-dependencies.js.map +0 -1
- package/dist/prompts/getting-started.d.ts +0 -12
- package/dist/prompts/getting-started.js +0 -48
- package/dist/prompts/getting-started.js.map +0 -1
- package/dist/prompts/index.d.ts +0 -14
- package/dist/prompts/index.js +0 -25
- package/dist/prompts/index.js.map +0 -1
- package/dist/prompts/prep-for-launch.d.ts +0 -9
- package/dist/prompts/prep-for-launch.js +0 -62
- package/dist/prompts/prep-for-launch.js.map +0 -1
- package/dist/prompts/secure-my-app.d.ts +0 -9
- package/dist/prompts/secure-my-app.js +0 -70
- package/dist/prompts/secure-my-app.js.map +0 -1
- package/dist/prompts/weekly-check.d.ts +0 -9
- package/dist/prompts/weekly-check.js +0 -48
- package/dist/prompts/weekly-check.js.map +0 -1
- package/dist/tools/enterprise/get-campaign.d.ts +0 -27
- package/dist/tools/enterprise/get-campaign.js +0 -31
- package/dist/tools/enterprise/get-campaign.js.map +0 -1
- package/dist/tools/enterprise/list-attack-scenarios.d.ts +0 -29
- package/dist/tools/enterprise/list-attack-scenarios.js +0 -69
- package/dist/tools/enterprise/list-attack-scenarios.js.map +0 -1
- package/dist/tools/enterprise/list-attack-step-library-tests.d.ts +0 -29
- package/dist/tools/enterprise/list-attack-step-library-tests.js +0 -61
- package/dist/tools/enterprise/list-attack-step-library-tests.js.map +0 -1
- package/dist/tools/enterprise/list-campaigns.d.ts +0 -37
- package/dist/tools/enterprise/list-campaigns.js +0 -60
- package/dist/tools/enterprise/list-campaigns.js.map +0 -1
- package/dist/tools/enterprise/list-threat-model-review-items.d.ts +0 -35
- package/dist/tools/enterprise/list-threat-model-review-items.js +0 -60
- package/dist/tools/enterprise/list-threat-model-review-items.js.map +0 -1
- package/dist/tools/enterprise/list-threat-model-versions.d.ts +0 -29
- package/dist/tools/enterprise/list-threat-model-versions.js +0 -60
- package/dist/tools/enterprise/list-threat-model-versions.js.map +0 -1
- package/dist/tools/enterprise/manage-campaign-agent-instance.d.ts +0 -42
- package/dist/tools/enterprise/manage-campaign-agent-instance.js +0 -68
- package/dist/tools/enterprise/manage-campaign-agent-instance.js.map +0 -1
- package/dist/tools/enterprise/manage-campaign-target.d.ts +0 -44
- package/dist/tools/enterprise/manage-campaign-target.js +0 -70
- package/dist/tools/enterprise/manage-campaign-target.js.map +0 -1
- package/dist/tools/enterprise/manage-campaign.d.ts +0 -62
- package/dist/tools/enterprise/manage-campaign.js +0 -114
- package/dist/tools/enterprise/manage-campaign.js.map +0 -1
- package/dist/tools/enterprise/manage-threat-model-analysis.d.ts +0 -52
- package/dist/tools/enterprise/manage-threat-model-analysis.js +0 -92
- package/dist/tools/enterprise/manage-threat-model-analysis.js.map +0 -1
- package/dist/tools/enterprise/manage-threat-model-review.d.ts +0 -47
- package/dist/tools/enterprise/manage-threat-model-review.js +0 -82
- package/dist/tools/enterprise/manage-threat-model-review.js.map +0 -1
- package/dist/tools/get-application-auth-config.d.ts +0 -27
- package/dist/tools/get-application-auth-config.js +0 -44
- package/dist/tools/get-application-auth-config.js.map +0 -1
- package/dist/tools/get-started.d.ts +0 -28
- package/dist/tools/get-started.js +0 -364
- package/dist/tools/get-started.js.map +0 -1
- package/dist/tools/manage-application.d.ts +0 -72
- package/dist/tools/manage-application.js +0 -138
- package/dist/tools/manage-application.js.map +0 -1
- package/dist/tools/manage-endpoint-lifecycle.d.ts +0 -90
- package/dist/tools/manage-endpoint-lifecycle.js +0 -191
- package/dist/tools/manage-endpoint-lifecycle.js.map +0 -1
|
@@ -1,92 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_manage_threat_model_analysis — Start/status/regenerate analysis
|
|
3
|
-
*
|
|
4
|
-
* Maps to:
|
|
5
|
-
* - POST /api/threat-models/:id/analyze
|
|
6
|
-
* - GET /api/threat-models/:id/analyze/status
|
|
7
|
-
* - POST /api/threat-models/:id/regenerate
|
|
8
|
-
*/
|
|
9
|
-
import { z } from "zod";
|
|
10
|
-
import { sanitizeResponse } from "../../sanitize.js";
|
|
11
|
-
export const MANAGE_THREAT_MODEL_ANALYSIS_NAME = "zivis_manage_threat_model_analysis";
|
|
12
|
-
export const MANAGE_THREAT_MODEL_ANALYSIS_DESCRIPTION = `Manage threat model analysis lifecycle.
|
|
13
|
-
|
|
14
|
-
Actions:
|
|
15
|
-
- status: get current analysis status
|
|
16
|
-
- start: trigger a new analysis run
|
|
17
|
-
- regenerate: queue regeneration for stale scopes
|
|
18
|
-
|
|
19
|
-
Use threat_model_id from zivis_list_threat_models.`;
|
|
20
|
-
export const MANAGE_THREAT_MODEL_ANALYSIS_SCHEMA = {
|
|
21
|
-
threat_model_id: z
|
|
22
|
-
.string()
|
|
23
|
-
.describe("Threat model UUID (from zivis_list_threat_models)"),
|
|
24
|
-
action: z
|
|
25
|
-
.enum(["status", "start", "regenerate"])
|
|
26
|
-
.describe("Analysis action to perform"),
|
|
27
|
-
analysis_config: z
|
|
28
|
-
.object({
|
|
29
|
-
generate_dfd: z.boolean().optional(),
|
|
30
|
-
map_to_mitre: z.boolean().optional(),
|
|
31
|
-
include_dread: z.boolean().optional(),
|
|
32
|
-
include_compliance: z.boolean().optional(),
|
|
33
|
-
})
|
|
34
|
-
.optional()
|
|
35
|
-
.describe("Optional analysis config (used for start action)"),
|
|
36
|
-
scope_ids: z
|
|
37
|
-
.array(z.string())
|
|
38
|
-
.optional()
|
|
39
|
-
.describe("Scope IDs to regenerate (used for regenerate action)"),
|
|
40
|
-
regenerate_all: z
|
|
41
|
-
.boolean()
|
|
42
|
-
.optional()
|
|
43
|
-
.describe("Regenerate all stale scopes (used for regenerate action)"),
|
|
44
|
-
};
|
|
45
|
-
export function createManageThreatModelAnalysisHandler(apiClient) {
|
|
46
|
-
return async (params) => {
|
|
47
|
-
try {
|
|
48
|
-
let data;
|
|
49
|
-
const { threat_model_id, action } = params;
|
|
50
|
-
if (action === "status") {
|
|
51
|
-
data = await apiClient.get(`/api/threat-models/${threat_model_id}/analyze/status`);
|
|
52
|
-
}
|
|
53
|
-
else if (action === "start") {
|
|
54
|
-
const config = params.analysis_config;
|
|
55
|
-
data = await apiClient.post(`/api/threat-models/${threat_model_id}/analyze`, {
|
|
56
|
-
analysisConfig: config
|
|
57
|
-
? {
|
|
58
|
-
generateDfd: config.generate_dfd,
|
|
59
|
-
mapToMitre: config.map_to_mitre,
|
|
60
|
-
includeDread: config.include_dread,
|
|
61
|
-
includeCompliance: config.include_compliance,
|
|
62
|
-
}
|
|
63
|
-
: undefined,
|
|
64
|
-
});
|
|
65
|
-
}
|
|
66
|
-
else {
|
|
67
|
-
data = await apiClient.post(`/api/threat-models/${threat_model_id}/regenerate`, {
|
|
68
|
-
scopeIds: params.scope_ids || [],
|
|
69
|
-
regenerateAll: params.regenerate_all ?? false,
|
|
70
|
-
});
|
|
71
|
-
}
|
|
72
|
-
const sanitized = sanitizeResponse({
|
|
73
|
-
action,
|
|
74
|
-
threat_model_id,
|
|
75
|
-
result: data,
|
|
76
|
-
});
|
|
77
|
-
return {
|
|
78
|
-
content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
|
|
79
|
-
};
|
|
80
|
-
}
|
|
81
|
-
catch (err) {
|
|
82
|
-
const message = err instanceof Error
|
|
83
|
-
? err.message
|
|
84
|
-
: "Failed to manage threat model analysis";
|
|
85
|
-
return {
|
|
86
|
-
content: [{ type: "text", text: `Error: ${message}` }],
|
|
87
|
-
isError: true,
|
|
88
|
-
};
|
|
89
|
-
}
|
|
90
|
-
};
|
|
91
|
-
}
|
|
92
|
-
//# sourceMappingURL=manage-threat-model-analysis.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"manage-threat-model-analysis.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-threat-model-analysis.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAAG,oCAAoC,CAAC;AAEtF,MAAM,CAAC,MAAM,wCAAwC,GAAG;;;;;;;mDAOL,CAAC;AAEpD,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,mDAAmD,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;SACvC,QAAQ,CAAC,4BAA4B,CAAC;IACzC,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACpC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACpC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACrC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,cAAc,EAAE,CAAC;SACd,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,sCAAsC,CAAC,SAAoB;IACzE,OAAO,KAAK,EAAE,MAWb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,IAA6B,CAAC;YAClC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAE3C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,iBAAiB,CACvD,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;gBACtC,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,UAAU,EAC/C;oBACE,cAAc,EAAE,MAAM;wBACpB,CAAC,CAAC;4BACE,WAAW,EAAE,MAAM,CAAC,YAAY;4BAChC,UAAU,EAAE,MAAM,CAAC,YAAY;4BAC/B,YAAY,EAAE,MAAM,CAAC,aAAa;4BAClC,iBAAiB,EAAE,MAAM,CAAC,kBAAkB;yBAC7C;wBACH,CAAC,CAAC,SAAS;iBACd,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;oBAChC,aAAa,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;iBAC9C,CACF,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,MAAM;gBACN,eAAe;gBACf,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,wCAAwC,CAAC;YAC/C,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_manage_threat_model_review — Accept/reject AI review items
|
|
3
|
-
*
|
|
4
|
-
* Maps to:
|
|
5
|
-
* - POST /api/threat-models/:id/review-items/:type/:itemId/accept
|
|
6
|
-
* - POST /api/threat-models/:id/review-items/:type/:itemId/reject
|
|
7
|
-
* - POST /api/threat-models/:id/review-items/accept-all
|
|
8
|
-
* - POST /api/threat-models/:id/review-items/reject-all
|
|
9
|
-
*/
|
|
10
|
-
import { z } from "zod";
|
|
11
|
-
import type { ApiClient } from "../../api-client.js";
|
|
12
|
-
export declare const MANAGE_THREAT_MODEL_REVIEW_NAME = "zivis_manage_threat_model_review";
|
|
13
|
-
export declare const MANAGE_THREAT_MODEL_REVIEW_DESCRIPTION = "Accept or reject pending AI-generated threat model review items.\n\nActions:\n- accept_item: accept one pending item\n- reject_item: reject one pending item\n- accept_all: accept all pending items\n- reject_all: reject all pending items";
|
|
14
|
-
export declare const MANAGE_THREAT_MODEL_REVIEW_SCHEMA: {
|
|
15
|
-
threat_model_id: z.ZodString;
|
|
16
|
-
action: z.ZodEnum<{
|
|
17
|
-
accept_item: "accept_item";
|
|
18
|
-
reject_item: "reject_item";
|
|
19
|
-
accept_all: "accept_all";
|
|
20
|
-
reject_all: "reject_all";
|
|
21
|
-
}>;
|
|
22
|
-
item_type: z.ZodOptional<z.ZodEnum<{
|
|
23
|
-
finding: "finding";
|
|
24
|
-
asset: "asset";
|
|
25
|
-
scenario: "scenario";
|
|
26
|
-
component: "component";
|
|
27
|
-
}>>;
|
|
28
|
-
item_id: z.ZodOptional<z.ZodString>;
|
|
29
|
-
};
|
|
30
|
-
export declare function createManageThreatModelReviewHandler(apiClient: ApiClient): (params: {
|
|
31
|
-
threat_model_id: string;
|
|
32
|
-
action: "accept_item" | "reject_item" | "accept_all" | "reject_all";
|
|
33
|
-
item_type?: "finding" | "asset" | "scenario" | "component";
|
|
34
|
-
item_id?: string;
|
|
35
|
-
}) => Promise<{
|
|
36
|
-
content: {
|
|
37
|
-
type: "text";
|
|
38
|
-
text: string;
|
|
39
|
-
}[];
|
|
40
|
-
isError: boolean;
|
|
41
|
-
} | {
|
|
42
|
-
content: {
|
|
43
|
-
type: "text";
|
|
44
|
-
text: string;
|
|
45
|
-
}[];
|
|
46
|
-
isError?: undefined;
|
|
47
|
-
}>;
|
|
@@ -1,82 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_manage_threat_model_review — Accept/reject AI review items
|
|
3
|
-
*
|
|
4
|
-
* Maps to:
|
|
5
|
-
* - POST /api/threat-models/:id/review-items/:type/:itemId/accept
|
|
6
|
-
* - POST /api/threat-models/:id/review-items/:type/:itemId/reject
|
|
7
|
-
* - POST /api/threat-models/:id/review-items/accept-all
|
|
8
|
-
* - POST /api/threat-models/:id/review-items/reject-all
|
|
9
|
-
*/
|
|
10
|
-
import { z } from "zod";
|
|
11
|
-
import { sanitizeResponse } from "../../sanitize.js";
|
|
12
|
-
export const MANAGE_THREAT_MODEL_REVIEW_NAME = "zivis_manage_threat_model_review";
|
|
13
|
-
export const MANAGE_THREAT_MODEL_REVIEW_DESCRIPTION = `Accept or reject pending AI-generated threat model review items.
|
|
14
|
-
|
|
15
|
-
Actions:
|
|
16
|
-
- accept_item: accept one pending item
|
|
17
|
-
- reject_item: reject one pending item
|
|
18
|
-
- accept_all: accept all pending items
|
|
19
|
-
- reject_all: reject all pending items`;
|
|
20
|
-
export const MANAGE_THREAT_MODEL_REVIEW_SCHEMA = {
|
|
21
|
-
threat_model_id: z
|
|
22
|
-
.string()
|
|
23
|
-
.describe("Threat model UUID (from zivis_list_threat_models)"),
|
|
24
|
-
action: z
|
|
25
|
-
.enum(["accept_item", "reject_item", "accept_all", "reject_all"])
|
|
26
|
-
.describe("Review action"),
|
|
27
|
-
item_type: z
|
|
28
|
-
.enum(["finding", "asset", "scenario", "component"])
|
|
29
|
-
.optional()
|
|
30
|
-
.describe("Required for *_item actions"),
|
|
31
|
-
item_id: z
|
|
32
|
-
.string()
|
|
33
|
-
.optional()
|
|
34
|
-
.describe("Required for *_item actions"),
|
|
35
|
-
};
|
|
36
|
-
export function createManageThreatModelReviewHandler(apiClient) {
|
|
37
|
-
return async (params) => {
|
|
38
|
-
try {
|
|
39
|
-
const { threat_model_id, action } = params;
|
|
40
|
-
let data;
|
|
41
|
-
if (action === "accept_all") {
|
|
42
|
-
data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/accept-all`, {});
|
|
43
|
-
}
|
|
44
|
-
else if (action === "reject_all") {
|
|
45
|
-
data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/reject-all`, {});
|
|
46
|
-
}
|
|
47
|
-
else {
|
|
48
|
-
if (!params.item_type || !params.item_id) {
|
|
49
|
-
return {
|
|
50
|
-
content: [
|
|
51
|
-
{
|
|
52
|
-
type: "text",
|
|
53
|
-
text: "Error: item_type and item_id are required for accept_item/reject_item actions",
|
|
54
|
-
},
|
|
55
|
-
],
|
|
56
|
-
isError: true,
|
|
57
|
-
};
|
|
58
|
-
}
|
|
59
|
-
const verb = action === "accept_item" ? "accept" : "reject";
|
|
60
|
-
data = await apiClient.post(`/api/threat-models/${threat_model_id}/review-items/${params.item_type}/${params.item_id}/${verb}`, {});
|
|
61
|
-
}
|
|
62
|
-
const sanitized = sanitizeResponse({
|
|
63
|
-
action,
|
|
64
|
-
threat_model_id,
|
|
65
|
-
item_type: params.item_type,
|
|
66
|
-
item_id: params.item_id,
|
|
67
|
-
result: data,
|
|
68
|
-
});
|
|
69
|
-
return {
|
|
70
|
-
content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
|
|
71
|
-
};
|
|
72
|
-
}
|
|
73
|
-
catch (err) {
|
|
74
|
-
const message = err instanceof Error ? err.message : "Failed to manage threat model review";
|
|
75
|
-
return {
|
|
76
|
-
content: [{ type: "text", text: `Error: ${message}` }],
|
|
77
|
-
isError: true,
|
|
78
|
-
};
|
|
79
|
-
}
|
|
80
|
-
};
|
|
81
|
-
}
|
|
82
|
-
//# sourceMappingURL=manage-threat-model-review.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"manage-threat-model-review.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-threat-model-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAElF,MAAM,CAAC,MAAM,sCAAsC,GAAG;;;;;;uCAMf,CAAC;AAExC,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,mDAAmD,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;SAChE,QAAQ,CAAC,eAAe,CAAC;IAC5B,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,6BAA6B,CAAC;CAC3C,CAAC;AAEF,MAAM,UAAU,oCAAoC,CAAC,SAAoB;IACvE,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAC3C,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,0BAA0B,EAC/D,EAAE,CACH,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,0BAA0B,EAC/D,EAAE,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,+EAA+E;6BACtF;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC5D,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,iBAAiB,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,EAClG,EAAE,CACH,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,MAAM;gBACN,eAAe;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_get_application_auth_config — Get app auth config for CLI PKCE/token workflows
|
|
3
|
-
*
|
|
4
|
-
* Maps to: GET /api/applications/:appId/auth-config
|
|
5
|
-
*/
|
|
6
|
-
import { z } from "zod";
|
|
7
|
-
import type { ApiClient } from "../api-client.js";
|
|
8
|
-
export declare const GET_APPLICATION_AUTH_CONFIG_NAME = "zivis_get_application_auth_config";
|
|
9
|
-
export declare const GET_APPLICATION_AUTH_CONFIG_DESCRIPTION = "Get authentication config for an application, including PKCE metadata when applicable.\n\nIf application_id is omitted, this uses applicationId from .zivis/project.json when present.";
|
|
10
|
-
export declare const GET_APPLICATION_AUTH_CONFIG_SCHEMA: {
|
|
11
|
-
application_id: z.ZodOptional<z.ZodString>;
|
|
12
|
-
};
|
|
13
|
-
export declare function createGetApplicationAuthConfigHandler(apiClient: ApiClient): (params: {
|
|
14
|
-
application_id?: string;
|
|
15
|
-
}) => Promise<{
|
|
16
|
-
content: {
|
|
17
|
-
type: "text";
|
|
18
|
-
text: string;
|
|
19
|
-
}[];
|
|
20
|
-
isError: boolean;
|
|
21
|
-
} | {
|
|
22
|
-
content: {
|
|
23
|
-
type: "text";
|
|
24
|
-
text: string;
|
|
25
|
-
}[];
|
|
26
|
-
isError?: undefined;
|
|
27
|
-
}>;
|
|
@@ -1,44 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_get_application_auth_config — Get app auth config for CLI PKCE/token workflows
|
|
3
|
-
*
|
|
4
|
-
* Maps to: GET /api/applications/:appId/auth-config
|
|
5
|
-
*/
|
|
6
|
-
import { z } from "zod";
|
|
7
|
-
import { requireApplicationId } from "../resolve-application-id.js";
|
|
8
|
-
import { sanitizeResponse } from "../sanitize.js";
|
|
9
|
-
export const GET_APPLICATION_AUTH_CONFIG_NAME = "zivis_get_application_auth_config";
|
|
10
|
-
export const GET_APPLICATION_AUTH_CONFIG_DESCRIPTION = `Get authentication config for an application, including PKCE metadata when applicable.
|
|
11
|
-
|
|
12
|
-
If application_id is omitted, this uses applicationId from .zivis/project.json when present.`;
|
|
13
|
-
export const GET_APPLICATION_AUTH_CONFIG_SCHEMA = {
|
|
14
|
-
application_id: z
|
|
15
|
-
.string()
|
|
16
|
-
.optional()
|
|
17
|
-
.describe("Application UUID. If omitted, uses applicationId from .zivis/project.json when set."),
|
|
18
|
-
};
|
|
19
|
-
export function createGetApplicationAuthConfigHandler(apiClient) {
|
|
20
|
-
return async (params) => {
|
|
21
|
-
const req = requireApplicationId(params.application_id);
|
|
22
|
-
if (!req.ok) {
|
|
23
|
-
return {
|
|
24
|
-
content: [{ type: "text", text: `Error: ${req.message}` }],
|
|
25
|
-
isError: true,
|
|
26
|
-
};
|
|
27
|
-
}
|
|
28
|
-
try {
|
|
29
|
-
const data = await apiClient.get(`/api/applications/${req.id}/auth-config`);
|
|
30
|
-
const sanitized = sanitizeResponse(data);
|
|
31
|
-
return {
|
|
32
|
-
content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
|
|
33
|
-
};
|
|
34
|
-
}
|
|
35
|
-
catch (err) {
|
|
36
|
-
const message = err instanceof Error ? err.message : "Failed to get application auth config";
|
|
37
|
-
return {
|
|
38
|
-
content: [{ type: "text", text: `Error: ${message}` }],
|
|
39
|
-
isError: true,
|
|
40
|
-
};
|
|
41
|
-
}
|
|
42
|
-
};
|
|
43
|
-
}
|
|
44
|
-
//# sourceMappingURL=get-application-auth-config.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"get-application-auth-config.js","sourceRoot":"","sources":["../../src/tools/get-application-auth-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,gCAAgC,GAAG,mCAAmC,CAAC;AAEpF,MAAM,CAAC,MAAM,uCAAuC,GAAG;;6FAEsC,CAAC;AAE9F,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qFAAqF,CACtF;CACJ,CAAC;AAEF,MAAM,UAAU,qCAAqC,CAAC,SAAoB;IACxE,OAAO,KAAK,EAAE,MAAmC,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,qBAAqB,GAAG,CAAC,EAAE,cAAc,CAC1C,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* zivis_get_started — The zero-input entry point for new users
|
|
3
|
-
*
|
|
4
|
-
* Designed for developers who don't know security vocabulary.
|
|
5
|
-
* Inspects current project state and returns a plain-English numbered
|
|
6
|
-
* menu of next actions. No security knowledge required to use this.
|
|
7
|
-
*
|
|
8
|
-
* Does NOT require a project binding or auth — gracefully adapts
|
|
9
|
-
* to whatever state exists so the very first interaction succeeds.
|
|
10
|
-
*/
|
|
11
|
-
import { z } from "zod";
|
|
12
|
-
import type { ApiClient } from "../api-client.js";
|
|
13
|
-
import type { ZivisConfig } from "../types.js";
|
|
14
|
-
export declare const GET_STARTED_NAME = "zivis_get_started";
|
|
15
|
-
export declare const GET_STARTED_DESCRIPTION = "Start here if you're new to ZIVIS or unsure what to do next for security.\n\nUse this when the user says any of:\n- \"what should I do for security on this app\"\n- \"uhh, where do I start\"\n- \"is my app safe\" / \"is my chatbot safe\"\n- \"I need to do security stuff before launch\"\n- \"I have an audit / pen test / customer asking about security\"\n- \"check my dependencies / libraries / repos\"\n- \"how do I use ZIVIS\"\n- \"what can ZIVIS do for me\"\n\nThis tool inspects the current project state (binding, application, scans, findings)\nand returns a plain-English numbered menu of the most relevant next actions.\nDoes NOT require auth or a project binding to run \u2014 it gracefully adapts to whatever\nstate exists so every first interaction succeeds.\n\nOutput is a structured JSON menu. Present the recommended_next_steps as a\nnumbered list to the user, in order, and ask them to pick one. Use the label\nand why fields \u2014 do not invent new steps. If the user is unsure which to pick,\nrecommend the item flagged in if_user_unsure.";
|
|
16
|
-
export declare const GET_STARTED_SCHEMA: {
|
|
17
|
-
concern: z.ZodOptional<z.ZodString>;
|
|
18
|
-
cwd: z.ZodOptional<z.ZodString>;
|
|
19
|
-
};
|
|
20
|
-
export declare function createGetStartedHandler(apiClient: ApiClient, _config: ZivisConfig): (params: {
|
|
21
|
-
concern?: string;
|
|
22
|
-
cwd?: string;
|
|
23
|
-
}) => Promise<{
|
|
24
|
-
content: {
|
|
25
|
-
type: "text";
|
|
26
|
-
text: string;
|
|
27
|
-
}[];
|
|
28
|
-
}>;
|