@zivis/mcp 0.1.0-alpha.19 → 0.1.0-alpha.2

package/dist/tools/setup-red-team-target.js

@@ -14,23 +14,23 @@
  */
 import { z } from "zod";
 import { sanitizeResponse } from "../sanitize.js";
-import { withNextSteps } from "../lib/next-steps.js";
 // ── Constants ──
 export const SETUP_RED_TEAM_TARGET_NAME = "zivis_setup_red_team_target";
-export const SETUP_RED_TEAM_TARGET_DESCRIPTION = `Tell ZIVIS what to test — a chatbot, website, or API. Run this when you want ZIVIS to start finding security issues in your app.
+export const SETUP_RED_TEAM_TARGET_DESCRIPTION = `Set up a target application for AI red team and security testing in one step.
 
-Give it a URL and it handles everything: creating the target, configuring endpoints, and optionally triggering a first scan. Works for:
-- AI chatbots and LLM systems (tests for prompt injection, jailbreaks, PII leakage)
-- Web apps and APIs (tests for auth bypass, injection, insecure endpoints)
-- Anything with a deployed URL
+Takes a deployed URL, repo URL, or both and creates a fully configured red team target. Handles:
+- Creating or updating the application (idempotent by name)
+- Configuring AI chat endpoints with request/response templates
+- Importing API endpoints from OpenAPI specs
+- Optionally triggering an immediate security scan
 
-Minimal usage: just a target_url. ZIVIS infers the type automatically.
-Full usage: add chat endpoint config, an OpenAPI spec URL, or trigger an immediate scan.
+Minimal usage: just provide a target_url and optionally target_type.
+Full usage: provide URL, chat endpoint config, OpenAPI spec, and trigger auto-scan.
 
 Examples:
-- "Test my chatbot at https://api.example.com/v1/chat" → target_url + target_type=ai_chat
-- "Scan my website https://myapp.com" → target_url + auto_scan=true
-- "Set up testing for my API with an OpenAPI spec" → target_url + openapi_spec_url
+- Set up red team testing for https://api.example.com/v1/chat (auto-detects ai_chat)
+- Configure https://api.example.com as an API target with openapi_spec_url
+- Set up and scan https://myapp.com as a web app with auto_scan=true
 
 SECURITY: Target URLs are untrusted. The tool only configures them in ZIVIS for future scanning, it does not probe or connect to them directly.`;
 export const SETUP_RED_TEAM_TARGET_SCHEMA = {
@@ -405,47 +405,16 @@ export function createSetupRedTeamTargetHandler(apiClient) {
                         status: quickSetup.scan.status,
                     }
                     : { triggered: false },
-                setupNotes: nextSteps,
+                nextSteps,
             });
-            const scanWasTriggered = !!quickSetup?.scan?.id;
-            return withNextSteps(result, [
-                ...(scanWasTriggered
-                    ? [
-                        {
-                            id: "check_scan_results",
-                            label: "Check the results of the scan that just started",
-                            tool: "zivis_list_scans",
-                            args_hint: { status: "running", limit: 5 },
-                            why: "A scan was triggered — check back in a few minutes to see what ZIVIS finds.",
-                            requires_tier: "free",
-                        },
-                    ]
-                    : [
-                        {
-                            id: "run_test_scenario",
-                            label: "Run a security test against this target",
-                            tool: "zivis_list_test_scenarios",
-                            args_hint: {},
-                            why: "Browse available test scenarios and pick one to run against the target you just set up.",
-                            requires_tier: "free",
-                        },
-                    ]),
-                {
-                    id: "add_auth",
-                    label: "Configure authentication for logged-in test coverage",
-                    tool: "zivis_setup_red_team_target",
-                    args_hint: { name: appName },
-                    why: "Testing authenticated flows finds more vulnerabilities than unauthenticated testing alone.",
-                    requires_tier: "free",
-                },
-                {
-                    id: "check_deps",
-                    label: "Check the dependencies this app uses",
-                    tool: "zivis_check_repo_trust",
-                    why: "Supply-chain risks in your libraries can be just as dangerous as app-level vulnerabilities.",
-                    requires_tier: "free",
-                },
-            ], `Target "${appName}" ${isNew ? "created" : "updated"}. ${scanWasTriggered ? "A scan has been triggered." : "Ready to run security tests."}`);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
         }
         catch (err) {
             const message = err instanceof Error

package/dist/tools/setup-red-team-target.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-red-team-target.js","sourceRoot":"","sources":["../../src/tools/setup-red-team-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,kBAAkB;AAElB,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;;;;;;;;gJAe+F,CAAC;AAEjJ,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;QAClE,qDAAqD,CACxD;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+DAA+D;QAC7D,gDAAgD,CACnD;IACH,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CACP,qDAAqD;QACnD,0FAA0F,CAC7F;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,wEAAwE,CAC3E;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,uDAAuD,CAC1D;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,iEAAiE,CACpE;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sEAAsE,CACvE;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4EAA4E,CAC7E;IACH,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,sCAAsC,CAAC;IACnD,aAAa,EAAE,CAAC;SACb,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2DAA2D;QACzD,8CAA8C,CACjD;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE,CACxE;CACJ,CAAC;AAsDF,gBAAgB;AAEhB,SAAS,aAAa,CAAC,SAAkB,EAAE,OAAgB;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC/C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACnD,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CACtB,SAAkB,EAClB,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACpC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EACzB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB;IAElB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,CAAC,aAAa,CAAC,CAAC;QACzB,KAAK,KAAK;YACR,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B;YACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,gBAAgB;AAEhB,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,OAAO,KAAK,EAAE,MAkBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,yBAAyB;YAEzB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,4DAA4D;yBACnE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,mEAAmE;yBAC1E;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,gBAAgB;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,oDAAoD;iCAC3D;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,8BAA8B,OAAO,yDAAyD;6BACrG;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,gCAAgC;YAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,UAAU,GACd,MAAM,CAAC,WAAW;gBAClB,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;YAE5C,0CAA0C;YAE1C,IAAI,WAAW,GAA+B,IAAI,CAAC;YACnD,IAAI,KAAK,GAAG,KAAK,CAAC;YAElB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gCAAgC,CACjC,CAAC;gBACF,WAAW;oBACT,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CACtD,IAAI,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;YAED,iCAAiC;YAEjC,MAAM,UAAU,GAA4B;gBAC1C,IAAI,EAAE,OAAO;gBACb,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnC,QAAQ;gBACR,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBACtE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI;oBACxC,WAAW,EAAE,MAAM,CAAC,aAAa;iBAClC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI;oBAC7B,cAAc,EAAE,MAAM,CAAC,gBAAgB;iBACxC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;aACjE,CAAC;YAEF,6DAA6D;YAC7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,UAAU,CAAC,YAAY,GAAG,QAAQ,CAAC;YACrC,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,kBAAkB;gBAClB,WAAW,GAAG,MAAM,SAAS,CAAC,KAAK,CACjC,wBAAwB,WAAW,CAAC,EAAE,EAAE,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,uGAAuG;6BAC9G;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAEtC,sBAAsB,EAAE,UAAU,CAAC,CAAC;gBACvC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,qFAAqF;yBAC5F;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,wCAAwC;YAExC,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,MAAM,eAAe,GACnB,MAAM,CAAC,gBAAgB;oBACvB,wDAAwD,CAAC;gBAC3D,MAAM,YAAY,GAChB,MAAM,CAAC,aAAa,IAAI,4BAA4B,CAAC;gBAEvD,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,CAClB,wBAAwB,WAAW,CAAC,EAAE,YAAY,EAClD;wBACE,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,MAAM;wBACd,YAAY,EAAE,MAAM;wBACpB,eAAe,EAAE,eAAe;wBAChC,YAAY,EAAE,YAAY;wBAC1B,gBAAgB,EAAE,KAAK;wBACvB,OAAO,EAAE,oCAAoC;wBAC7C,kBAAkB,EAAE,kBAAkB;qBACvC,CACF,CAAC;oBACF,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,6CAA6C;oBAC7C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxD,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;oBACD,uDAAuD;gBACzD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,IAAI,eAAe,GAAkB,IAAI,CAAC;YAE1C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAIvC,wBAAwB,WAAW,CAAC,EAAE,2BAA2B,EACjE,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CACrC,CAAC;oBACF,eAAe,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACP,+CAA+C;oBAC/C,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,wEAAwE;YAExE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,UAAU,GAA8B,IAAI,CAAC;YAEjD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,oCAAoC,EACpC;wBACE,SAAS,EAAE,OAAO;wBAClB,UAAU;wBACV,UAAU,EAAE,OAAO;wBACnB,aAAa,EAAE,WAAW,CAAC,EAAE;wBAC7B,YAAY,EAAE,MAAM,CAAC,cAAc;wBACnC,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;wBACnC,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,aAAa;wBACxB,UAAU,EAAE,MAAM,CAAC,YAAY;4BAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;4BAChD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACrB,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,SAAS,CAAC,IAAI,CACZ,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CACZ,0DAA0D,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAC/E,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC7B,SAAS,CAAC,IAAI,CACZ,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBACrD,SAAS,CAAC,IAAI,CACZ,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACrC,WAAW,EAAE;oBACX,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,UAAU;oBACV,QAAQ;oBACR,KAAK;iBACN;gBACD,SAAS,EAAE;oBACT,cAAc;oBACd,eAAe;iBAChB;gBACD,QAAQ,EAAE,UAAU;oBAClB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE;wBAC1B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;wBAC9B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;wBAClC,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS;qBACvC;oBACH,CAAC,CAAC,IAAI;gBACR,KAAK,EAAE,UAAU,EAAE,KAAK;oBACtB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;wBACvB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ;qBACpC;oBACH,CAAC,CAAC,IAAI;gBACR,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;oBACxB,CAAC,CAAC;wBACE,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;wBAC1B,SAAS,EAAE,aAAa;wBACxB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;qBAC/B;oBACH,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBACxB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YAEhD,OAAO,aAAa,CAClB,MAAM,EACN;gBACE,GAAG,CAAC,gBAAgB;oBAClB,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,oBAAoB;4BACxB,KAAK,EAAE,iDAAiD;4BACxD,IAAI,EAAE,kBAAkB;4BACxB,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;4BAC1C,GAAG,EAAE,6EAA6E;4BAClF,aAAa,EAAE,MAAe;yBAC/B;qBACF;oBACH,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,mBAAmB;4BACvB,KAAK,EAAE,yCAAyC;4BAChD,IAAI,EAAE,2BAA2B;4BACjC,SAAS,EAAE,EAAE;4BACb,GAAG,EAAE,yFAAyF;4BAC9F,aAAa,EAAE,MAAe;yBAC/B;qBACF,CAAC;gBACN;oBACE,EAAE,EAAE,UAAU;oBACd,KAAK,EAAE,sDAAsD;oBAC7D,IAAI,EAAE,6BAA6B;oBACnC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC5B,GAAG,EAAE,4FAA4F;oBACjG,aAAa,EAAE,MAAe;iBAC/B;gBACD;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,sCAAsC;oBAC7C,IAAI,EAAE,wBAAwB;oBAC9B,GAAG,EAAE,6FAA6F;oBAClG,aAAa,EAAE,MAAe;iBAC/B;aACF,EACD,WAAW,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAC5I,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,kCAAkC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"setup-red-team-target.js","sourceRoot":"","sources":["../../src/tools/setup-red-team-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,kBAAkB;AAElB,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;;;;;;;;;gJAgB+F,CAAC;AAEjJ,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;QAClE,qDAAqD,CACxD;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+DAA+D;QAC7D,gDAAgD,CACnD;IACH,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CACP,qDAAqD;QACnD,0FAA0F,CAC7F;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,wEAAwE,CAC3E;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,uDAAuD,CAC1D;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,iEAAiE,CACpE;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sEAAsE,CACvE;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4EAA4E,CAC7E;IACH,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,sCAAsC,CAAC;IACnD,aAAa,EAAE,CAAC;SACb,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2DAA2D;QACzD,8CAA8C,CACjD;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE,CACxE;CACJ,CAAC;AAsDF,gBAAgB;AAEhB,SAAS,aAAa,CAAC,SAAkB,EAAE,OAAgB;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC/C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACnD,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CACtB,SAAkB,EAClB,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACpC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EACzB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB;IAElB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,CAAC,aAAa,CAAC,CAAC;QACzB,KAAK,KAAK;YACR,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/B;YACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,gBAAgB;AAEhB,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,OAAO,KAAK,EAAE,MAkBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,yBAAyB;YAEzB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,4DAA4D;yBACnE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,mEAAmE;yBAC1E;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,gBAAgB;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,oDAAoD;iCAC3D;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,8BAA8B,OAAO,yDAAyD;6BACrG;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,gCAAgC;YAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,UAAU,GACd,MAAM,CAAC,WAAW;gBAClB,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;YAE5C,0CAA0C;YAE1C,IAAI,WAAW,GAA+B,IAAI,CAAC;YACnD,IAAI,KAAK,GAAG,KAAK,CAAC;YAElB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gCAAgC,CACjC,CAAC;gBACF,WAAW;oBACT,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CACtD,IAAI,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;YAED,iCAAiC;YAEjC,MAAM,UAAU,GAA4B;gBAC1C,IAAI,EAAE,OAAO;gBACb,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnC,QAAQ;gBACR,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBACtE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI;oBACxC,WAAW,EAAE,MAAM,CAAC,aAAa;iBAClC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI;oBAC7B,cAAc,EAAE,MAAM,CAAC,gBAAgB;iBACxC,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;aACjE,CAAC;YAEF,6DAA6D;YAC7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,UAAU,CAAC,YAAY,GAAG,QAAQ,CAAC;YACrC,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,kBAAkB;gBAClB,WAAW,GAAG,MAAM,SAAS,CAAC,KAAK,CACjC,wBAAwB,WAAW,CAAC,EAAE,EAAE,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,uGAAuG;6BAC9G;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAEtC,sBAAsB,EAAE,UAAU,CAAC,CAAC;gBACvC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,qFAAqF;yBAC5F;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,wCAAwC;YAExC,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;gBAChE,MAAM,eAAe,GACnB,MAAM,CAAC,gBAAgB;oBACvB,wDAAwD,CAAC;gBAC3D,MAAM,YAAY,GAChB,MAAM,CAAC,aAAa,IAAI,4BAA4B,CAAC;gBAEvD,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,CAClB,wBAAwB,WAAW,CAAC,EAAE,YAAY,EAClD;wBACE,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,MAAM;wBACd,YAAY,EAAE,MAAM;wBACpB,eAAe,EAAE,eAAe;wBAChC,YAAY,EAAE,YAAY;wBAC1B,gBAAgB,EAAE,KAAK;wBACvB,OAAO,EAAE,oCAAoC;wBAC7C,kBAAkB,EAAE,kBAAkB;qBACvC,CACF,CAAC;oBACF,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,6CAA6C;oBAC7C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxD,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;oBACD,uDAAuD;gBACzD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,IAAI,eAAe,GAAkB,IAAI,CAAC;YAE1C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAIvC,wBAAwB,WAAW,CAAC,EAAE,2BAA2B,EACjE,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CACrC,CAAC;oBACF,eAAe,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACP,+CAA+C;oBAC/C,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,wEAAwE;YAExE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,UAAU,GAA8B,IAAI,CAAC;YAEjD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,oCAAoC,EACpC;wBACE,SAAS,EAAE,OAAO;wBAClB,UAAU;wBACV,UAAU,EAAE,OAAO;wBACnB,aAAa,EAAE,WAAW,CAAC,EAAE;wBAC7B,YAAY,EAAE,MAAM,CAAC,cAAc;wBACnC,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;wBACnC,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,aAAa;wBACxB,UAAU,EAAE,MAAM,CAAC,YAAY;4BAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;4BAChD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACrB,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC;YAED,+BAA+B;YAE/B,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,SAAS,CAAC,IAAI,CACZ,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CACZ,0DAA0D,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAC/E,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC7B,SAAS,CAAC,IAAI,CACZ,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBACrD,SAAS,CAAC,IAAI,CACZ,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACrC,WAAW,EAAE;oBACX,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,UAAU;oBACV,QAAQ;oBACR,KAAK;iBACN;gBACD,SAAS,EAAE;oBACT,cAAc;oBACd,eAAe;iBAChB;gBACD,QAAQ,EAAE,UAAU;oBAClB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE;wBAC1B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;wBAC9B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;wBAClC,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS;qBACvC;oBACH,CAAC,CAAC,IAAI;gBACR,KAAK,EAAE,UAAU,EAAE,KAAK;oBACtB,CAAC,CAAC;wBACE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;wBACvB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;wBAC3B,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ;qBACpC;oBACH,CAAC,CAAC,IAAI;gBACR,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;oBACxB,CAAC,CAAC;wBACE,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;wBAC1B,SAAS,EAAE,aAAa;wBACxB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;qBAC/B;oBACH,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBACxB,SAAS;aACV,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,kCAAkC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/triage-finding.d.ts

@@ -11,7 +11,7 @@
 import { z } from "zod";
 import type { ApiClient } from "../api-client.js";
 export declare const TRIAGE_FINDING_NAME = "zivis_triage_finding";
-export declare const TRIAGE_FINDING_DESCRIPTION = "Mark a security issue as fixed, dismissed, or accepted. Use this after the user reviews a finding and decides what to do with it.\n\nThree outcomes:\n- \"resolve\" \u2014 the bug is fixed. ZIVIS logs the fix and generates remediation documentation.\n- \"dismiss\" \u2014 the finding is wrong (false positive) or doesn't apply to this project.\n- \"accept_risk\" \u2014 the team knows about the issue and has decided to live with it.\n\nA reasoning field is REQUIRED \u2014 this creates an audit trail. Explain briefly why the action is appropriate (e.g. \"Fixed by adding input validation in auth.ts\" or \"Not applicable \u2014 we don't accept user HTML input\").\n\nAfter resolving a finding, ZIVIS will provide markdown to append to .zivis/remediations.md as an audit trail.\n\nTriage one finding at a time. Use finding_id from zivis_get_findings or zivis_get_finding_details.";
+export declare const TRIAGE_FINDING_DESCRIPTION = "Submit a triage decision for a security finding back to ZIVIS.\n\nUse this after investigating a finding to record the outcome:\n- \"resolve\" \u2014 the vulnerability has been fixed\n- \"dismiss\" \u2014 the finding is a false positive or not applicable\n- \"accept_risk\" \u2014 the risk is known and accepted\n\nA reasoning field is REQUIRED. Explain why this action is appropriate \u2014 this creates an audit trail and helps ZIVIS learn from your decisions.\n\nThis action is logged with your identity and timestamp. Bulk operations are not supported \u2014 triage one finding at a time.\n\nIMPORTANT: After resolving a finding (action=\"resolve\"), you MUST document the fix:\n1. Create .zivis/ directory if it doesn't exist\n2. Append to .zivis/remediations.md using the markdown template in the response\n3. This creates a security audit trail that stays with the project\n\nThe response includes a \"documentation\" field with pre-formatted markdown to append.";
 export declare const TRIAGE_FINDING_SCHEMA: {
     finding_id: z.ZodString;
     action: z.ZodEnum<{
@@ -33,9 +33,15 @@ export declare function createTriageFindingHandler(apiClient: ApiClient): (param
     reasoning: string;
     dismiss_reason?: string;
 }) => Promise<{
-    content: Array<{
+    content: {
         type: "text";
         text: string;
-    }>;
-    isError?: boolean;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
 }>;

package/dist/tools/triage-finding.js

@@ -9,20 +9,24 @@
  * in the dashboard.
  */
 import { z } from "zod";
-import { withNextSteps } from "../lib/next-steps.js";
 export const TRIAGE_FINDING_NAME = "zivis_triage_finding";
-export const TRIAGE_FINDING_DESCRIPTION = `Mark a security issue as fixed, dismissed, or accepted. Use this after the user reviews a finding and decides what to do with it.
+export const TRIAGE_FINDING_DESCRIPTION = `Submit a triage decision for a security finding back to ZIVIS.
 
-Three outcomes:
-- "resolve" — the bug is fixed. ZIVIS logs the fix and generates remediation documentation.
-- "dismiss" — the finding is wrong (false positive) or doesn't apply to this project.
-- "accept_risk" — the team knows about the issue and has decided to live with it.
+Use this after investigating a finding to record the outcome:
+- "resolve" — the vulnerability has been fixed
+- "dismiss" — the finding is a false positive or not applicable
+- "accept_risk" — the risk is known and accepted
 
-A reasoning field is REQUIRED — this creates an audit trail. Explain briefly why the action is appropriate (e.g. "Fixed by adding input validation in auth.ts" or "Not applicable — we don't accept user HTML input").
+A reasoning field is REQUIRED. Explain why this action is appropriate — this creates an audit trail and helps ZIVIS learn from your decisions.
 
-After resolving a finding, ZIVIS will provide markdown to append to .zivis/remediations.md as an audit trail.
+This action is logged with your identity and timestamp. Bulk operations are not supported — triage one finding at a time.
 
-Triage one finding at a time. Use finding_id from zivis_get_findings or zivis_get_finding_details.`;
+IMPORTANT: After resolving a finding (action="resolve"), you MUST document the fix:
+1. Create .zivis/ directory if it doesn't exist
+2. Append to .zivis/remediations.md using the markdown template in the response
+3. This creates a security audit trail that stays with the project
+
+The response includes a "documentation" field with pre-formatted markdown to append.`;
 export const TRIAGE_FINDING_SCHEMA = {
     finding_id: z.string().describe("The finding ID to triage"),
     action: z
@@ -91,27 +95,14 @@ export function createTriageFindingHandler(apiClient) {
                     instructions: "Append the markdownToAppend to .zivis/remediations.md (create directory and file if needed). Add finding title, severity, vulnerable code description, and files changed above the reasoning.",
                 }
                 : { shouldDocument: false };
-            return withNextSteps({ ...response, documentation }, [
-                {
-                    id: "view_remaining_findings",
-                    label: "Review the remaining open findings",
-                    tool: "zivis_get_findings",
-                    args_hint: { status: "open" },
-                    why: "See what's left to triage — keep working through the queue to clear the backlog.",
-                    requires_tier: "free",
-                },
-                ...(params.action === "resolve"
-                    ? [
-                        {
-                            id: "run_new_scan",
-                            label: "Run a new scan to verify the fix held",
-                            tool: "zivis_list_test_scenarios",
-                            why: "Confirm the vulnerability is gone by re-testing after your code change.",
-                            requires_tier: "free",
-                        },
-                    ]
-                    : []),
-            ], `Finding ${params.finding_id} marked as ${statusMap[params.action]}.`);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({ ...response, documentation }, null, 2),
+                    },
+                ],
+            };
         }
         catch (err) {
             const message = err instanceof Error ? err.message : "Failed to triage finding";

package/dist/tools/triage-finding.js.map

@@ -1 +1 @@
-{"version":3,"file":"triage-finding.js","sourceRoot":"","sources":["../../src/tools/triage-finding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;mGAWyD,CAAC;AAEpG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SAC3C,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CACP,iHAAiH,CAClH;IACH,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnE,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,sDAAsD;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,SAAS,GAA2B;gBACxC,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC;YAEF,kDAAkD;YAClD,oFAAoF;YACpF,MAAM,SAAS,GAA4B;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,mBAAmB,MAAM,CAAC,SAAS,EAAE;aAC5C,CAAC;YACF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;YAClD,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,CACnB,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,SAAS,CACV,CAAC;YAEF,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC;aAC/G,CAAC;YAEF,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,wBAAwB;oBAClC,gBAAgB,EAAE;KAC3B,KAAK,MAAM,MAAM,CAAC,UAAU;;;iBAGhB,MAAM,CAAC,SAAS;;;CAGhC;oBACa,YAAY,EACV,+LAA+L;iBAClM;gBACH,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAEhC,OAAO,aAAa,CAClB,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,EAC9B;gBACE;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,oCAAoC;oBAC3C,IAAI,EAAE,oBAAoB;oBAC1B,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC7B,GAAG,EAAE,kFAAkF;oBACvF,aAAa,EAAE,MAAe;iBAC/B;gBACD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;oBAC7B,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,cAAc;4BAClB,KAAK,EAAE,uCAAuC;4BAC9C,IAAI,EAAE,2BAA2B;4BACjC,GAAG,EAAE,yEAAyE;4BAC9E,aAAa,EAAE,MAAe;yBAC/B;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,EACD,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACtE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"triage-finding.js","sourceRoot":"","sources":["../../src/tools/triage-finding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;qFAgB2C,CAAC;AAEtF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SAC3C,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CACP,iHAAiH,CAClH;IACH,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnE,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,sDAAsD;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,SAAS,GAA2B;gBACxC,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC;YAEF,kDAAkD;YAClD,oFAAoF;YACpF,MAAM,SAAS,GAA4B;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,mBAAmB,MAAM,CAAC,SAAS,EAAE;aAC5C,CAAC;YACF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;YAClD,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,CACnB,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,SAAS,CACV,CAAC;YAEF,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC;aAC/G,CAAC;YAEF,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,wBAAwB;oBAClC,gBAAgB,EAAE;KAC3B,KAAK,MAAM,MAAM,CAAC,UAAU;;;iBAGhB,MAAM,CAAC,SAAS;;;CAGhC;oBACa,YAAY,EACV,+LAA+L;iBAClM;gBACH,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAEhC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC9D;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -3,7 +3,7 @@
  */
 export interface OAuthTokens {
     access_token: string;
-    refresh_token?: string;
+    refresh_token: string;
     expires_at: number;
     id_token?: string;
 }
@@ -198,25 +198,6 @@ export interface ProjectBinding {
     applicationId?: string;
     /** Display name for that application (optional) */
     applicationName?: string;
-    /**
-     * Environment overrides — stored here so `zivis` CLI commands run from
-     * this directory automatically hit the right environment without requiring
-     * env vars to be set in the shell. Takes precedence over env vars.
-     */
-    /** ZIVIS API base URL (e.g. "https://staging.zivis.ai") */
-    apiBaseUrl?: string;
-    /** OAuth / AuthKit API URL */
-    oauthApiUrl?: string;
-    /** OAuth client ID */
-    oauthClientId?: string;
-    /** Keychain/credential storage prefix */
-    keychainPrefix?: string;
-    /** Config directory name under ~/.config/ */
-    configDir?: string;
-}
-export interface CredentialStorage {
-    keychainPrefix: string;
-    configDir: string;
 }
 export interface ZivisConfig {
     apiBaseUrl: string;
@@ -225,23 +206,6 @@ export interface ZivisConfig {
     callbackPort: number;
     /** Named session for multi-tenant isolation (from ZIVIS_SESSION env var) */
     session?: string;
-    /**
-     * Override OS keychain / encrypted-file credential namespace (default: ENV_CONFIG).
-     * MUST match MCP's ZIVIS_KEYCHAIN_PREFIX or CLI auth and MCP will read different buckets.
-     */
-    keychainPrefix?: string;
-    /**
-     * Override ~/.config subdirectory for sessions.json etc. (default: ENV_CONFIG).
-     * MUST match MCP's ZIVIS_CONFIG_DIR.
-     */
-    configDir?: string;
-    /**
-     * Absolute path to the workspace root passed via `zivis mcp serve --workspace`.
-     * When set, project binding is detected from this path instead of process.cwd().
-     * This is the primary tenant-isolation mechanism: each IDE workspace gets its own
-     * MCP process with a fixed, immutable workspace path → no runtime session switching.
-     */
-    workspacePath?: string;
 }
 interface EnvConfig {
     apiBaseUrl: string;
@@ -250,11 +214,7 @@ interface EnvConfig {
     keychainPrefix: string;
     configDir: string;
 }
+export declare const BUILD_ENV: "staging" | "production";
 export declare const ENV_CONFIG: EnvConfig;
 export declare const DEFAULT_CONFIG: ZivisConfig;
-/**
- * Resolved credential storage bucket for keychain + ~/.config/<dir>.
- * Prefer explicit ZivisConfig fields, then ENV (set by MCP IDE config).
- */
-export declare function credentialStorageFromConfig(config?: ZivisConfig): CredentialStorage;
 export {};

package/dist/types.js

@@ -1,39 +1,33 @@
 /**
  * Shared types for the ZIVIS MCP Security Server
  */
-const PRODUCTION_DEFAULTS = {
-    apiBaseUrl: "https://app.zivis.ai",
-    oauthClientId: "client_01KGCPA567YEEVXV307AERCB93",
-    oauthApiUrl: "https://api.workos.com",
-    keychainPrefix: "io.zivis.mcp",
-    configDir: "zivis",
-};
-// Runtime env vars override production defaults.
-// This enables internal staging/dev usage without shipping non-production URLs
-// in package defaults.
-export const ENV_CONFIG = {
-    apiBaseUrl: process.env.ZIVIS_API_URL || PRODUCTION_DEFAULTS.apiBaseUrl,
-    oauthClientId: process.env.ZIVIS_OAUTH_CLIENT_ID || PRODUCTION_DEFAULTS.oauthClientId,
-    oauthApiUrl: process.env.ZIVIS_OAUTH_API_URL || PRODUCTION_DEFAULTS.oauthApiUrl,
-    keychainPrefix: process.env.ZIVIS_KEYCHAIN_PREFIX || PRODUCTION_DEFAULTS.keychainPrefix,
-    configDir: process.env.ZIVIS_CONFIG_DIR || PRODUCTION_DEFAULTS.configDir,
+const ENVIRONMENT_CONFIGS = {
+    staging: {
+        apiBaseUrl: "https://staging.zivis.ai",
+        oauthClientId: "client_01KGCMZ482H9SJPKTVRCC213K0",
+        oauthApiUrl: "https://delightful-abundance-65-staging.authkit.app",
+        keychainPrefix: "io.zivis.mcp.staging",
+        configDir: "zivis-staging",
+    },
+    production: {
+        apiBaseUrl: "https://app.zivis.ai",
+        oauthClientId: "client_01KGCPA567YEEVXV307AERCB93",
+        oauthApiUrl: "https://api.workos.com",
+        keychainPrefix: "io.zivis.mcp",
+        configDir: "zivis",
+    },
 };
+// Build-time environment (defaults to staging for development)
+export const BUILD_ENV = (process.env.ZIVIS_BUILD_ENV || "staging");
+// Get the config for the current build environment
+export const ENV_CONFIG = ENVIRONMENT_CONFIGS[BUILD_ENV] || ENVIRONMENT_CONFIGS.staging;
 export const DEFAULT_CONFIG = {
-    apiBaseUrl: ENV_CONFIG.apiBaseUrl,
-    oauthClientId: ENV_CONFIG.oauthClientId,
-    oauthApiUrl: ENV_CONFIG.oauthApiUrl,
+    // Runtime env vars override build-time defaults (useful for testing)
+    apiBaseUrl: process.env.ZIVIS_API_URL || ENV_CONFIG.apiBaseUrl,
+    oauthClientId: process.env.ZIVIS_OAUTH_CLIENT_ID || ENV_CONFIG.oauthClientId,
+    oauthApiUrl: process.env.ZIVIS_OAUTH_API_URL || ENV_CONFIG.oauthApiUrl,
     callbackPort: 8741,
     // Session isolation for multi-tenant safety
     session: process.env.ZIVIS_SESSION || undefined,
 };
-/**
- * Resolved credential storage bucket for keychain + ~/.config/<dir>.
- * Prefer explicit ZivisConfig fields, then ENV (set by MCP IDE config).
- */
-export function credentialStorageFromConfig(config) {
-    return {
-        keychainPrefix: config?.keychainPrefix ?? ENV_CONFIG.keychainPrefix,
-        configDir: config?.configDir ?? ENV_CONFIG.configDir,
-    };
-}
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA2RH,MAAM,mBAAmB,GAAc;IACrC,UAAU,EAAE,sBAAsB;IAClC,aAAa,EAAE,mCAAmC;IAClD,WAAW,EAAE,wBAAwB;IACrC,cAAc,EAAE,cAAc;IAC9B,SAAS,EAAE,OAAO;CACnB,CAAC;AAEF,iDAAiD;AACjD,+EAA+E;AAC/E,uBAAuB;AACvB,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,mBAAmB,CAAC,UAAU;IACvE,aAAa,EACX,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,mBAAmB,CAAC,aAAa;IACxE,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,WAAW;IACpE,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,mBAAmB,CAAC,cAAc;IACzE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,mBAAmB,CAAC,SAAS;CACzE,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,UAAU,EAAE,UAAU,CAAC,UAAU;IACjC,aAAa,EAAE,UAAU,CAAC,aAAa;IACvC,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,YAAY,EAAE,IAAI;IAClB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;CAChD,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAoB;IAC9D,OAAO;QACL,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,UAAU,CAAC,cAAc;QACnE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,UAAU,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoPH,MAAM,mBAAmB,GAA8B;IACrD,OAAO,EAAE;QACP,UAAU,EAAE,0BAA0B;QACtC,aAAa,EAAE,mCAAmC;QAClD,WAAW,EAAE,qDAAqD;QAClE,cAAc,EAAE,sBAAsB;QACtC,SAAS,EAAE,eAAe;KAC3B;IACD,UAAU,EAAE;QACV,UAAU,EAAE,sBAAsB;QAClC,aAAa,EAAE,mCAAmC;QAClD,WAAW,EAAE,wBAAwB;QACrC,cAAc,EAAE,cAAc;QAC9B,SAAS,EAAE,OAAO;KACnB;CACF,CAAC;AAEF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAElD,CAAC;AAEjB,mDAAmD;AACnD,MAAM,CAAC,MAAM,UAAU,GACrB,mBAAmB,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC;AAEhE,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,UAAU,CAAC,UAAU;IAC9D,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,UAAU,CAAC,aAAa;IAC5E,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,WAAW;IACtE,YAAY,EAAE,IAAI;IAClB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;CAChD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zivis/mcp",
-  "version": "0.1.0-alpha.19",
+  "version": "0.1.0-alpha.2",
   "description": "ZIVIS MCP server — threat modeling, security scans, and AI red team tools for IDE integration",
   "type": "module",
   "bin": {

package/dist/lib/next-steps.d.ts

@@ -1,57 +0,0 @@
-/**
- * next-steps — Shared helper for the guided UX layer
- *
- * Every ZIVIS tool response can include a next_steps array so the LLM
- * organically guides the user through the funnel without them needing to
- * know which tool to call next.
- *
- * Usage:
- *   import { withNextSteps } from "../lib/next-steps.js";
- *   return withNextSteps(myResult, [
- *     { id: "...", label: "...", tool: "...", why: "..." },
- *   ], "One-line summary for the LLM to paraphrase");
- */
-export interface NextStep {
-    /** Stable, snake_case id used for referencing (e.g. "triage_finding") */
-    id: string;
-    /** Plain-English label with no security jargon */
-    label: string;
-    /** The MCP tool the LLM should call to execute this step */
-    tool: string;
-    /** Pre-filled argument suggestions the LLM should pass to the tool */
-    args_hint?: Record<string, unknown>;
-    /** One-line, plain-English reason this step is suggested */
-    why: string;
-    /** Optional tier gate — LLM should not surface if user is below this tier */
-    requires_tier?: "free" | "pro" | "enterprise";
-}
-export interface ZivisToolPayload<T> {
-    result: T;
-    next_steps?: NextStep[];
-    /** Free-form one-line summary for the LLM to paraphrase to the user */
-    summary?: string;
-}
-/**
- * Wrap any tool result with a next_steps array and optional summary.
- *
- * The LLM will read next_steps and use them to naturally suggest the
- * next action, converting discrete tool calls into a guided funnel.
- */
-export declare function withNextSteps<T>(result: T, nextSteps: NextStep[], summary?: string): {
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-    isError?: boolean;
-};
-/**
- * Wrap an error result with next_steps guidance so even failures give users
- * a clear path forward.
- */
-export declare function withNextStepsError(message: string, nextSteps: NextStep[], summary?: string): {
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-    isError: true;
-};

package/dist/lib/next-steps.js

@@ -1,45 +0,0 @@
-/**
- * next-steps — Shared helper for the guided UX layer
- *
- * Every ZIVIS tool response can include a next_steps array so the LLM
- * organically guides the user through the funnel without them needing to
- * know which tool to call next.
- *
- * Usage:
- *   import { withNextSteps } from "../lib/next-steps.js";
- *   return withNextSteps(myResult, [
- *     { id: "...", label: "...", tool: "...", why: "..." },
- *   ], "One-line summary for the LLM to paraphrase");
- */
-/**
- * Wrap any tool result with a next_steps array and optional summary.
- *
- * The LLM will read next_steps and use them to naturally suggest the
- * next action, converting discrete tool calls into a guided funnel.
- */
-export function withNextSteps(result, nextSteps, summary) {
-    const payload = {
-        result,
-        next_steps: nextSteps,
-        ...(summary ? { summary } : {}),
-    };
-    return {
-        content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
-    };
-}
-/**
- * Wrap an error result with next_steps guidance so even failures give users
- * a clear path forward.
- */
-export function withNextStepsError(message, nextSteps, summary) {
-    const payload = {
-        result: { error: message },
-        next_steps: nextSteps,
-        ...(summary ? { summary } : {}),
-    };
-    return {
-        content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
-        isError: true,
-    };
-}
-//# sourceMappingURL=next-steps.js.map

package/dist/lib/next-steps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"next-steps.js","sourceRoot":"","sources":["../../src/lib/next-steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAwBH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAS,EACT,SAAqB,EACrB,OAAgB;IAEhB,MAAM,OAAO,GAAwB;QACnC,MAAM;QACN,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAqB,EACrB,OAAgB;IAEhB,MAAM,OAAO,GAAwC;QACnD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/prompts/audit-dependencies.d.ts

@@ -1,10 +0,0 @@
-/**
- * audit-dependencies prompt
- *
- * The zero-setup, zero-auth entry point. Walks through package.json /
- * requirements.txt / go.mod and runs zivis_check_repo_trust on each dep.
- * This is the perfect "first taste" — no binding needed.
- * In Cursor: /zivis-audit-dependencies
- */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function registerAuditDependenciesPrompt(server: McpServer): void;

package/dist/prompts/audit-dependencies.js

@@ -1,56 +0,0 @@
-/**
- * audit-dependencies prompt
- *
- * The zero-setup, zero-auth entry point. Walks through package.json /
- * requirements.txt / go.mod and runs zivis_check_repo_trust on each dep.
- * This is the perfect "first taste" — no binding needed.
- * In Cursor: /zivis-audit-dependencies
- */
-export function registerAuditDependenciesPrompt(server) {
-    server.registerPrompt("audit-dependencies", {
-        description: "Check the open source libraries this project depends on for security risks. No account setup needed.",
-        argsSchema: {},
-    }, async () => ({
-        messages: [
-            {
-                role: "user",
-                content: {
-                    type: "text",
-                    text: `I want to check whether the open source libraries I'm using are safe.
-
-Please do the following:
-
-1. Look at the dependency files in this project. In priority order, check:
-   - package.json (look for the "dependencies" and "devDependencies" keys)
-   - requirements.txt or pyproject.toml
-   - go.mod
-   - Any other manifest files you can see
-
-2. From those files, find all external dependencies that have a GitHub repository.
-   - Skip internal packages (those starting with "@my-company/" or similar private namespaces).
-   - Skip built-in packages (e.g. node built-ins like "fs", "path").
-
-3. For each external dependency that has a public GitHub repo, call \`zivis_check_repo_trust\`
-   with the owner/repo string (e.g. "openai/openai-node").
-
-4. After checking each one, give me a summary table with columns:
-   - Package name
-   - Trust grade (A+ through F)
-   - Risk level (Safe / Low risk / Moderate / High / Critical)
-   - Any critical or high findings (one line each)
-
-5. Flag any package with grade C or below and explain in plain English why it's risky.
-
-6. At the end, suggest the two highest-priority actions to take based on the results.
-
-Ground rules:
-- Process dependencies one at a time so I can follow along.
-- If a package doesn't have a GitHub repo, skip it and say "(no GitHub repo found)".
-- Don't make up trust data — only use what zivis_check_repo_trust returns.
-- Speak in plain English. "High risk" is better than "critical severity threat vector".`,
-                },
-            },
-        ],
-    }));
-}
-//# sourceMappingURL=audit-dependencies.js.map

package/dist/prompts/audit-dependencies.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-dependencies.js","sourceRoot":"","sources":["../../src/prompts/audit-dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,UAAU,+BAA+B,CAAC,MAAiB;IAC/D,MAAM,CAAC,cAAc,CACnB,oBAAoB,EACpB;QACE,WAAW,EACT,sGAAsG;QACxG,UAAU,EAAE,EAAE;KACf,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wFA+BsE;iBAC7E;aACF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/prompts/getting-started.d.ts

@@ -1,12 +0,0 @@
-/**
- * getting-started prompt
- *
- * The front-door slash command for new users who don't know what to do.
- * In Cursor: /zivis-getting-started
- * In Claude Code: /mcp__zivis-security__getting-started
- *
- * Instructs the LLM to call zivis_check_project and zivis_get_started
- * and present the results as a numbered list — no jargon, no assumptions.
- */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function registerGettingStartedPrompt(server: McpServer): void;