@zivis/mcp 0.1.0-alpha.21 → 0.1.0-alpha.22

package/dist/tools/triage-finding.js

@@ -1,125 +0,0 @@
-/**
- * zivis_triage_finding — Send triage decision and reasoning back to ZIVIS
- *
- * Maps to: PATCH /api/findings/unified/:id
- *
- * This is the "write-back" that makes the platform smarter. The AI's
- * triage decisions and reasoning are recorded as audit notes (via the
- * `note` field), tagged as AI-generated so humans can distinguish them
- * in the dashboard.
- */
-import { z } from "zod";
-import { withNextSteps } from "../lib/next-steps.js";
-export const TRIAGE_FINDING_NAME = "zivis_triage_finding";
-export const TRIAGE_FINDING_DESCRIPTION = `Mark a security issue as fixed, dismissed, or accepted. Use this after the user reviews a finding and decides what to do with it.
-
-Three outcomes:
-- "resolve" — the bug is fixed. ZIVIS logs the fix and generates remediation documentation.
-- "dismiss" — the finding is wrong (false positive) or doesn't apply to this project.
-- "accept_risk" — the team knows about the issue and has decided to live with it.
-
-A reasoning field is REQUIRED — this creates an audit trail. Explain briefly why the action is appropriate (e.g. "Fixed by adding input validation in auth.ts" or "Not applicable — we don't accept user HTML input").
-
-After resolving a finding, ZIVIS will provide markdown to append to .zivis/remediations.md as an audit trail.
-
-Triage one finding at a time. Use finding_id from zivis_get_findings or zivis_get_finding_details.`;
-export const TRIAGE_FINDING_SCHEMA = {
-    finding_id: z.string().describe("The finding ID to triage"),
-    action: z
-        .enum(["resolve", "dismiss", "accept_risk"])
-        .describe("Triage action: resolve (fixed), dismiss (FP/NA), or accept_risk"),
-    reasoning: z
-        .string()
-        .min(10)
-        .describe("Explanation of why this action is appropriate. Must be at least 10 characters. This is logged as an audit note."),
-    dismiss_reason: z
-        .enum(["false_positive", "not_applicable", "wont_fix", "duplicate"])
-        .optional()
-        .describe("Required when action is 'dismiss'. Reason for dismissal."),
-};
-export function createTriageFindingHandler(apiClient) {
-    return async (params) => {
-        // Validate dismiss_reason is provided when dismissing
-        if (params.action === "dismiss" && !params.dismiss_reason) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: dismiss_reason is required when action is 'dismiss'",
-                    },
-                ],
-                isError: true,
-            };
-        }
-        try {
-            // Map action to finding status
-            const statusMap = {
-                resolve: "resolved",
-                dismiss: "dismissed",
-                accept_risk: "accepted",
-            };
-            // Update finding status with note for audit trail
-            // The unified findings API logs history entries automatically when note is provided
-            const patchBody = {
-                status: statusMap[params.action],
-                note: `[MCP AI Triage] ${params.reasoning}`,
-            };
-            if (params.dismiss_reason) {
-                patchBody.dismissReason = params.dismiss_reason;
-            }
-            await apiClient.patch(`/api/findings/unified/${params.finding_id}`, patchBody);
-            const response = {
-                success: true,
-                findingId: params.finding_id,
-                newStatus: statusMap[params.action],
-                message: `Finding ${params.finding_id} marked as ${statusMap[params.action]}. Reasoning logged as audit note.`,
-            };
-            // Generate documentation markdown for resolved findings
-            const today = new Date().toISOString().split("T")[0];
-            const documentation = params.action === "resolve"
-                ? {
-                    shouldDocument: true,
-                    filePath: ".zivis/remediations.md",
-                    markdownToAppend: `
-## ${today} — ${params.finding_id}
-
-**Status:** Resolved
-**Reasoning:** ${params.reasoning}
-
----
-`,
-                    instructions: "Append the markdownToAppend to .zivis/remediations.md (create directory and file if needed). Add finding title, severity, vulnerable code description, and files changed above the reasoning.",
-                }
-                : { shouldDocument: false };
-            return withNextSteps({ ...response, documentation }, [
-                {
-                    id: "view_remaining_findings",
-                    label: "Review the remaining open findings",
-                    tool: "zivis_get_findings",
-                    args_hint: { status: "open" },
-                    why: "See what's left to triage — keep working through the queue to clear the backlog.",
-                    requires_tier: "free",
-                },
-                ...(params.action === "resolve"
-                    ? [
-                        {
-                            id: "run_new_scan",
-                            label: "Run a new scan to verify the fix held",
-                            tool: "zivis_list_test_scenarios",
-                            why: "Confirm the vulnerability is gone by re-testing after your code change.",
-                            requires_tier: "free",
-                        },
-                    ]
-                    : []),
-            ], `Finding ${params.finding_id} marked as ${statusMap[params.action]}.`);
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to triage finding";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=triage-finding.js.map

package/dist/tools/triage-finding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"triage-finding.js","sourceRoot":"","sources":["../../src/tools/triage-finding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;mGAWyD,CAAC;AAEpG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SAC3C,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CACP,iHAAiH,CAClH;IACH,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;SACnE,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,sDAAsD;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,SAAS,GAA2B;gBACxC,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC;YAEF,kDAAkD;YAClD,oFAAoF;YACpF,MAAM,SAAS,GAA4B;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,mBAAmB,MAAM,CAAC,SAAS,EAAE;aAC5C,CAAC;YACF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;YAClD,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,CACnB,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,SAAS,CACV,CAAC;YAEF,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC;aAC/G,CAAC;YAEF,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,wBAAwB;oBAClC,gBAAgB,EAAE;KAC3B,KAAK,MAAM,MAAM,CAAC,UAAU;;;iBAGhB,MAAM,CAAC,SAAS;;;CAGhC;oBACa,YAAY,EACV,+LAA+L;iBAClM;gBACH,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAEhC,OAAO,aAAa,CAClB,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,EAC9B;gBACE;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,oCAAoC;oBAC3C,IAAI,EAAE,oBAAoB;oBAC1B,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC7B,GAAG,EAAE,kFAAkF;oBACvF,aAAa,EAAE,MAAe;iBAC/B;gBACD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;oBAC7B,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,cAAc;4BAClB,KAAK,EAAE,uCAAuC;4BAC9C,IAAI,EAAE,2BAA2B;4BACjC,GAAG,EAAE,yEAAyE;4BAC9E,aAAa,EAAE,MAAe;yBAC/B;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,EACD,WAAW,MAAM,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACtE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}