@zivis/mcp 0.1.0-alpha.21 → 0.1.0-alpha.22

package/dist/tools/enterprise/get-threat-model.d.ts

@@ -6,7 +6,7 @@
 import { z } from "zod";
 import type { ApiClient } from "../../api-client.js";
 export declare const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
-export declare const GET_THREAT_MODEL_DESCRIPTION = "Get a threat model with ALL its entities \u2014 actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.\n\nReturns the complete threat model including:\n- **Actors**: Who interacts with the system (external users, attackers, internal services)\n- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level\n- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)\n- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors\n- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness\n- **Data Assets**: What sensitive data exists and how it's classified\n- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)\n- **Findings**: Discovered vulnerabilities with severity and remediation recommendations\n- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model\n\nIMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.\n\nUse this to understand the full security posture before making changes, adding entities, or running pen tests.\nAfter viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.\nUse zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).";
+export declare const GET_THREAT_MODEL_DESCRIPTION = "Get a threat model with ALL its entities \u2014 actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams/artifacts.\n\nReturns the complete threat model. Sub-entities live on the latest ThreatModelVersion. For convenience this tool surfaces them at BOTH levels:\n- Top-level: `actors`, `components`, `dataFlows`, `attackScenarios`, `securityControls`, `dataAssets`, `testCases`, `findings` \u2014 copied from the latest version\n- Nested: `versions[0].<entity>` \u2014 authoritative source. Older versions in `versions[N]` (N\u22651) only carry summary metrics, not entities.\n\nEntity contents:\n- **Actors**: Who interacts with the system (external users, attackers, internal services)\n- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level\n- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)\n- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, narrative\n- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness\n- **Data Assets**: What sensitive data exists and how it's classified\n- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)\n- **Findings**: Discovered vulnerabilities with severity and remediation recommendations\n- **Linked Diagrams** (`linked_diagrams`): First-class `Diagram` entities \u2014 used for app-level / cross-TM views.\n- **Artifacts** (`artifacts_summary`): The diagrams the TM detail page itself displays (Mermaid, canvas state, attack chains, asset inventories). Use `zivis_list_threat_model_artifacts` and `zivis_get_threat_model_artifact` for full content. NOTE: the platform is mid-migration from artifacts \u2192 first-class diagrams; today most TM-internal diagrams live as artifacts.\n\nIMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.\n\nUse this to understand the full security posture before making changes, adding entities, or running pen tests.\nAfter viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.";
 export declare const GET_THREAT_MODEL_SCHEMA: {
     threat_model_id: z.ZodString;
     include_test_cases: z.ZodDefault<z.ZodBoolean>;

package/dist/tools/enterprise/get-threat-model.js

@@ -6,24 +6,28 @@
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
-export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.
+export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams/artifacts.
 
-Returns the complete threat model including:
+Returns the complete threat model. Sub-entities live on the latest ThreatModelVersion. For convenience this tool surfaces them at BOTH levels:
+- Top-level: \`actors\`, \`components\`, \`dataFlows\`, \`attackScenarios\`, \`securityControls\`, \`dataAssets\`, \`testCases\`, \`findings\` — copied from the latest version
+- Nested: \`versions[0].<entity>\` — authoritative source. Older versions in \`versions[N]\` (N≥1) only carry summary metrics, not entities.
+
+Entity contents:
 - **Actors**: Who interacts with the system (external users, attackers, internal services)
 - **Components**: System parts (APIs, databases, frontends, services) with technology and trust level
 - **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)
-- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors
+- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, narrative
 - **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness
 - **Data Assets**: What sensitive data exists and how it's classified
 - **Test Cases**: Security tests with results (pass/fail/partial/not_tested)
 - **Findings**: Discovered vulnerabilities with severity and remediation recommendations
-- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model
+- **Linked Diagrams** (\`linked_diagrams\`): First-class \`Diagram\` entities — used for app-level / cross-TM views.
+- **Artifacts** (\`artifacts_summary\`): The diagrams the TM detail page itself displays (Mermaid, canvas state, attack chains, asset inventories). Use \`zivis_list_threat_model_artifacts\` and \`zivis_get_threat_model_artifact\` for full content. NOTE: the platform is mid-migration from artifacts → first-class diagrams; today most TM-internal diagrams live as artifacts.
 
 IMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.
 
 Use this to understand the full security posture before making changes, adding entities, or running pen tests.
-After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.
-Use zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).`;
+After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.`;
 export const GET_THREAT_MODEL_SCHEMA = {
     threat_model_id: z
         .string()
@@ -36,16 +40,39 @@ export const GET_THREAT_MODEL_SCHEMA = {
 export function createGetThreatModelHandler(apiClient) {
     return async (params) => {
         try {
-            // Fetch threat model and linked diagrams in parallel
-            const [threatModelData, diagramsData] = await Promise.all([
+            // Fetch threat model, linked diagrams, and the latest version's artifacts in parallel.
+            // Artifacts are the diagram surface the TM detail page itself uses; first-class
+            // diagrams are an org-scoped overlay (mid-migration today).
+            const [threatModelData, diagramsData, artifactsData] = await Promise.all([
                 apiClient.get(`/api/threat-models/${params.threat_model_id}?include=all`),
                 apiClient
                     .get(`/api/diagrams?linkedThreatModelId=${params.threat_model_id}&take=50`)
                     .catch(() => ({ diagrams: [], total: 0 })),
+                apiClient
+                    .get(`/api/threat-models/${params.threat_model_id}/artifacts`)
+                    .catch(() => []),
             ]);
             const sanitized = sanitizeResponse(threatModelData);
-            // Attach linked diagrams summary to the response
-            const diagrams = Array.isArray(diagramsData.diagrams)
+            // Lift sub-entities from versions[0] to the top level for LLM convenience.
+            // Authoritative location remains versions[0]; this is a non-destructive shim.
+            const versions = Array.isArray(sanitized.versions) ? sanitized.versions : [];
+            const latestVersion = (versions[0] || {});
+            const lifted = {};
+            for (const key of [
+                "actors",
+                "components",
+                "dataFlows",
+                "attackScenarios",
+                "securityControls",
+                "dataAssets",
+                "testCases",
+                "findings",
+            ]) {
+                if (Array.isArray(latestVersion[key])) {
+                    lifted[key] = latestVersion[key];
+                }
+            }
+            const linkedDiagrams = Array.isArray(diagramsData.diagrams)
                 ? diagramsData.diagrams.map((d) => ({
                     diagram_id: d.id,
                     name: d.name,
@@ -57,10 +84,31 @@ export function createGetThreatModelHandler(apiClient) {
                     updated_at: d.updatedAt,
                 }))
                 : [];
+            // Artifact summary — content omitted to keep the payload light. Use
+            // zivis_get_threat_model_artifact for the Mermaid / canvas content.
+            const artifactsRaw = Array.isArray(artifactsData) ? artifactsData : [];
+            const artifactsSummary = artifactsRaw.map((a) => ({
+                artifact_id: a.id,
+                title: a.title,
+                artifact_type: a.artifactType,
+                content_type: a.contentType,
+                tags: a.tags || [],
+                description: a.description || null,
+                is_stale: a.isStale ?? false,
+                stale_reason: a.staleReason || null,
+                is_edited: a.isEdited ?? false,
+                group_id: a.groupId || null,
+                scope_id: a.scopeId || null,
+                promoted_diagram_id: a.diagramId || null,
+                sort_order: a.sortOrder ?? 0,
+            }));
             const result = {
                 ...sanitized,
-                linked_diagrams: diagrams,
+                ...lifted,
+                linked_diagrams: linkedDiagrams,
                 linked_diagrams_count: diagramsData.total,
+                artifacts_summary: artifactsSummary,
+                artifacts_count: artifactsSummary.length,
             };
             return {
                 content: [

package/dist/tools/enterprise/get-threat-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-threat-model.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-threat-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;gIAiBoF,CAAC;AAEjI,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAAiE,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,SAAS,CAAC,GAAG,CACX,sBAAsB,MAAM,CAAC,eAAe,cAAc,CAC3D;gBACD,SAAS;qBACN,GAAG,CACF,qCAAqC,MAAM,CAAC,eAAe,UAAU,CACtE;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAA4B,CAAC;YAE/E,iDAAiD;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACnD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBACzD,UAAU,EAAE,CAAC,CAAC,EAAE;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,UAAU,EAAG,CAAC,CAAC,MAAiC,EAAE,KAAK,IAAI,IAAI;oBAC/D,gBAAgB,EAAG,CAAC,CAAC,MAAiC,EAAE,WAAW,IAAI,IAAI;oBAC3E,UAAU,EAAE,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACL,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG;gBACb,GAAG,SAAS;gBACZ,eAAe,EAAE,QAAQ;gBACzB,qBAAqB,EAAE,YAAY,CAAC,KAAK;aAC1C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"get-threat-model.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-threat-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;uHAqB2E,CAAC;AAExH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAqBF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAAiE,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,uFAAuF;YACvF,gFAAgF;YAChF,4DAA4D;YAC5D,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACvE,SAAS,CAAC,GAAG,CACX,sBAAsB,MAAM,CAAC,eAAe,cAAc,CAC3D;gBACD,SAAS;qBACN,GAAG,CACF,qCAAqC,MAAM,CAAC,eAAe,UAAU,CACtE;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5C,SAAS;qBACN,GAAG,CACF,sBAAsB,MAAM,CAAC,eAAe,YAAY,CACzD;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,EAAmB,CAAC;aACpC,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAAS,CAAC;YAE5D,2EAA2E;YAC3E,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAE,SAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,SAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAS,CAAC;YAClD,MAAM,MAAM,GAAS,EAAE,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI;gBAChB,QAAQ;gBACR,YAAY;gBACZ,WAAW;gBACX,iBAAiB;gBACjB,kBAAkB;gBAClB,YAAY;gBACZ,WAAW;gBACX,UAAU;aACX,EAAE,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACzD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC;oBACtC,UAAU,EAAE,CAAC,CAAC,EAAE;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,UAAU,EAAG,CAAC,CAAC,MAAiC,EAAE,KAAK,IAAI,IAAI;oBAC/D,gBAAgB,EAAG,CAAC,CAAC,MAAiC,EAAE,WAAW,IAAI,IAAI;oBAC3E,UAAU,EAAE,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACL,CAAC,CAAC,EAAE,CAAC;YAEP,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC;gBAC7D,WAAW,EAAE,CAAC,CAAC,EAAE;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,aAAa,EAAE,CAAC,CAAC,YAAY;gBAC7B,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;gBAClB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;gBAC5B,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBACnC,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;gBAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC3B,mBAAmB,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBACxC,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC;aAC7B,CAAC,CAAC,CAAC;YAEJ,MAAM,MAAM,GAAS;gBACnB,GAAG,SAAS;gBACZ,GAAG,MAAM;gBACT,eAAe,EAAE,cAAc;gBAC/B,qBAAqB,EAAE,YAAY,CAAC,KAAK;gBACzC,iBAAiB,EAAE,gBAAgB;gBACnC,eAAe,EAAE,gBAAgB,CAAC,MAAM;aACzC,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-threat-model-artifacts.d.ts

@@ -0,0 +1,67 @@
+/**
+ * zivis_list_threat_model_artifacts — List the diagrams/artifacts attached to a
+ * threat model version (Mermaid diagrams, attack chains, asset inventories,
+ * canvas state, etc.).
+ *
+ * IMPORTANT: This is the surface the TM detail page itself reads. It is
+ * distinct from `zivis_list_diagrams`, which queries the org-wide first-class
+ * `Diagram` table. The platform is mid-migration — for any TM today, look here
+ * first; only fall back to `zivis_list_diagrams` for app-level / cross-TM views.
+ *
+ * Maps to: GET /api/threat-models/:id/artifacts[?versionId=...&artifactType=...]
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_THREAT_MODEL_ARTIFACTS_NAME = "zivis_list_threat_model_artifacts";
+export declare const LIST_THREAT_MODEL_ARTIFACTS_DESCRIPTION = "List the diagrams/artifacts attached to a threat model \u2014 these are the diagrams the TM detail page actually displays (Mermaid code, canvas state, attack-chain diagrams, asset inventories, trust boundaries, sequence diagrams, etc.).\n\nIf you are looking for \"the diagrams for a threat model\" \u2014 start here, NOT `zivis_list_diagrams`. The platform is mid-migration from this artifact model to a first-class `Diagram` entity; today most TM-internal diagrams still live as artifacts.\n\nReturns a summary list (no content blob). Use `zivis_get_threat_model_artifact` to fetch the full Mermaid source or canvas JSON for a specific artifact.\n\nBy default scopes to the threat model's CURRENT version. Pass `version_id` to inspect a historical version.";
+export declare const LIST_THREAT_MODEL_ARTIFACTS_SCHEMA: {
+    threat_model_id: z.ZodString;
+    version_id: z.ZodOptional<z.ZodString>;
+    artifact_type: z.ZodOptional<z.ZodEnum<{
+        trust_boundary: "trust_boundary";
+        data_flow_diagram: "data_flow_diagram";
+        dfd_level_1: "dfd_level_1";
+        dfd_level_2: "dfd_level_2";
+        system_context: "system_context";
+        asset_inventory: "asset_inventory";
+        sequence_diagram: "sequence_diagram";
+        network_topology: "network_topology";
+        cloud_architecture: "cloud_architecture";
+        component_diagram: "component_diagram";
+        api_integration: "api_integration";
+        identity_access_flow: "identity_access_flow";
+        deployment_diagram: "deployment_diagram";
+        ci_cd_pipeline: "ci_cd_pipeline";
+        secrets_flow: "secrets_flow";
+        attack_tree: "attack_tree";
+        kill_chain: "kill_chain";
+        swimlane_process: "swimlane_process";
+        entity_relationship: "entity_relationship";
+        state_machine: "state_machine";
+        misuse_case: "misuse_case";
+        stride_annotated: "stride_annotated";
+        encryption_boundary: "encryption_boundary";
+        backup_recovery: "backup_recovery";
+        logging_monitoring: "logging_monitoring";
+        entry_point: "entry_point";
+        assumption: "assumption";
+        canvas_state: "canvas_state";
+    }>>;
+};
+export declare function createListThreatModelArtifactsHandler(apiClient: ApiClient): (params: {
+    threat_model_id: string;
+    version_id?: string;
+    artifact_type?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/list-threat-model-artifacts.js

@@ -0,0 +1,121 @@
+/**
+ * zivis_list_threat_model_artifacts — List the diagrams/artifacts attached to a
+ * threat model version (Mermaid diagrams, attack chains, asset inventories,
+ * canvas state, etc.).
+ *
+ * IMPORTANT: This is the surface the TM detail page itself reads. It is
+ * distinct from `zivis_list_diagrams`, which queries the org-wide first-class
+ * `Diagram` table. The platform is mid-migration — for any TM today, look here
+ * first; only fall back to `zivis_list_diagrams` for app-level / cross-TM views.
+ *
+ * Maps to: GET /api/threat-models/:id/artifacts[?versionId=...&artifactType=...]
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_THREAT_MODEL_ARTIFACTS_NAME = "zivis_list_threat_model_artifacts";
+export const LIST_THREAT_MODEL_ARTIFACTS_DESCRIPTION = `List the diagrams/artifacts attached to a threat model — these are the diagrams the TM detail page actually displays (Mermaid code, canvas state, attack-chain diagrams, asset inventories, trust boundaries, sequence diagrams, etc.).
+
+If you are looking for "the diagrams for a threat model" — start here, NOT \`zivis_list_diagrams\`. The platform is mid-migration from this artifact model to a first-class \`Diagram\` entity; today most TM-internal diagrams still live as artifacts.
+
+Returns a summary list (no content blob). Use \`zivis_get_threat_model_artifact\` to fetch the full Mermaid source or canvas JSON for a specific artifact.
+
+By default scopes to the threat model's CURRENT version. Pass \`version_id\` to inspect a historical version.`;
+export const LIST_THREAT_MODEL_ARTIFACTS_SCHEMA = {
+    threat_model_id: z
+        .string()
+        .describe("Threat model UUID (from zivis_list_threat_models)"),
+    version_id: z
+        .string()
+        .optional()
+        .describe("Optional ThreatModelVersion UUID. If omitted, the threat model's current/latest version is used."),
+    artifact_type: z
+        .enum([
+        "data_flow_diagram",
+        "dfd_level_1",
+        "dfd_level_2",
+        "trust_boundary",
+        "system_context",
+        "asset_inventory",
+        "sequence_diagram",
+        "network_topology",
+        "cloud_architecture",
+        "component_diagram",
+        "api_integration",
+        "identity_access_flow",
+        "deployment_diagram",
+        "ci_cd_pipeline",
+        "secrets_flow",
+        "attack_tree",
+        "kill_chain",
+        "swimlane_process",
+        "entity_relationship",
+        "state_machine",
+        "misuse_case",
+        "stride_annotated",
+        "encryption_boundary",
+        "backup_recovery",
+        "logging_monitoring",
+        "entry_point",
+        "assumption",
+        "canvas_state",
+    ])
+        .optional()
+        .describe("Filter by artifact type (e.g., data_flow_diagram, attack_tree, canvas_state). Note: artifactType is being deprecated in favor of free-form tags; filter by tag client-side if needed."),
+};
+export function createListThreatModelArtifactsHandler(apiClient) {
+    return async (params) => {
+        try {
+            const query = new URLSearchParams();
+            if (params.version_id)
+                query.set("versionId", params.version_id);
+            if (params.artifact_type)
+                query.set("artifactType", params.artifact_type);
+            const queryStr = query.toString();
+            const path = `/api/threat-models/${params.threat_model_id}/artifacts${queryStr ? `?${queryStr}` : ""}`;
+            const artifacts = await apiClient.get(path);
+            const rows = Array.isArray(artifacts) ? artifacts : [];
+            const summary = rows.map((a) => ({
+                artifact_id: a.id,
+                version_id: a.versionId,
+                title: a.title,
+                artifact_type: a.artifactType,
+                content_type: a.contentType,
+                tags: a.tags || [],
+                description: a.description || null,
+                sort_order: a.sortOrder ?? 0,
+                is_stale: a.isStale ?? false,
+                stale_reason: a.staleReason || null,
+                is_edited: a.isEdited ?? false,
+                edited_at: a.editedAt || null,
+                last_generated_at: a.lastGeneratedAt || null,
+                changed_files_since: a.changedFilesSince ?? null,
+                source_type: a.sourceType,
+                source_agent_instance_id: a.sourceAgentInstanceId || null,
+                source_run_id: a.sourceRunId || null,
+                scope_id: a.scopeId || null,
+                group_id: a.groupId || null,
+                promoted_diagram_id: a.diagramId || null,
+                canvas_version: a.canvasVersion ?? null,
+                approval_status: a.approvalStatus || null,
+                created_at: a.createdAt,
+            }));
+            const sanitized = sanitizeResponse({
+                threat_model_id: params.threat_model_id,
+                version_id: params.version_id || null,
+                total: summary.length,
+                artifacts: summary,
+            });
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitized, null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list threat model artifacts";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-threat-model-artifacts.js.map

package/dist/tools/enterprise/list-threat-model-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-threat-model-artifacts.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-threat-model-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,gCAAgC,GAAG,mCAAmC,CAAC;AAEpF,MAAM,CAAC,MAAM,uCAAuC,GAAG;;;;;;8GAMuD,CAAC;AAE/G,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,mDAAmD,CAAC;IAChE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,kGAAkG,CACnG;IACH,aAAa,EAAE,CAAC;SACb,IAAI,CAAC;QACJ,mBAAmB;QACnB,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,kBAAkB;QAClB,oBAAoB;QACpB,mBAAmB;QACnB,iBAAiB;QACjB,sBAAsB;QACtB,oBAAoB;QACpB,gBAAgB;QAChB,cAAc;QACd,aAAa;QACb,YAAY;QACZ,kBAAkB;QAClB,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,kBAAkB;QAClB,qBAAqB;QACrB,iBAAiB;QACjB,oBAAoB;QACpB,aAAa;QACb,YAAY;QACZ,cAAc;KACf,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CACP,uLAAuL,CACxL;CACJ,CAAC;AA8BF,MAAM,UAAU,qCAAqC,CAAC,SAAoB;IACxE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,UAAU;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,aAAa;gBAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAE1E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,sBAAsB,MAAM,CAAC,eAAe,aACvD,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAC9B,EAAE,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CAAgB,IAAI,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC;gBAC5C,WAAW,EAAE,CAAC,CAAC,EAAE;gBACjB,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,aAAa,EAAE,CAAC,CAAC,YAAY;gBAC7B,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;gBAClB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBAClC,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC;gBAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;gBAC5B,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBACnC,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;gBAC9B,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;gBAC7B,iBAAiB,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;gBAC5C,mBAAmB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;gBAChD,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,wBAAwB,EAAE,CAAC,CAAC,qBAAqB,IAAI,IAAI;gBACzD,aAAa,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC3B,mBAAmB,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBACxC,cAAc,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;gBACvC,eAAe,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;gBACzC,UAAU,EAAE,CAAC,CAAC,SAAS;aACxB,CAAC,CAAC,CAAC;YAEJ,MAAM,SAAS,GAAG,gBAAgB,CAAC;gBACjC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;gBACrC,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,SAAS,EAAE,OAAO;aACnB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-data-asset.d.ts

@@ -18,8 +18,8 @@ export declare const MANAGE_DATA_ASSET_SCHEMA: {
     name: z.ZodOptional<z.ZodString>;
     classification: z.ZodOptional<z.ZodEnum<{
         critical: "critical";
-        internal: "internal";
         public: "public";
+        internal: "internal";
         confidential: "confidential";
         restricted: "restricted";
     }>>;

package/dist/tools/enterprise/manage-data-flow.d.ts

@@ -22,8 +22,8 @@ export declare const MANAGE_DATA_FLOW_SCHEMA: {
     protocol: z.ZodOptional<z.ZodString>;
     data_classification: z.ZodOptional<z.ZodEnum<{
         critical: "critical";
-        internal: "internal";
         public: "public";
+        internal: "internal";
         confidential: "confidential";
         restricted: "restricted";
     }>>;

package/dist/tools/enterprise/manage-test-case.d.ts

@@ -28,10 +28,10 @@ export declare const MANAGE_TEST_CASE_SCHEMA: {
     success_criteria: z.ZodOptional<z.ZodString>;
     evidence_type: z.ZodOptional<z.ZodEnum<{
         code_snippet: "code_snippet";
-        video: "video";
         screenshot: "screenshot";
         http_request: "http_request";
         log_entry: "log_entry";
+        video: "video";
         manual_notes: "manual_notes";
     }>>;
     result: z.ZodOptional<z.ZodEnum<{

package/dist/tools/inspect.d.ts

@@ -0,0 +1,31 @@
+/**
+ * zivis_inspect — STUB
+ *
+ * Threat-model-first entry point. Will build a local repo graph and ship it
+ * to the platform for pattern evaluation, then seed/enrich a draft threat
+ * model on the bound Application.
+ *
+ * Today this is a stub: it validates the project binding and returns a
+ * structured preview of what `/inspect` will do once the local-graph
+ * implementation lands. The real handler will replace this in a follow-up
+ * session — see docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md.
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+import type { ZivisConfig } from "../types.js";
+export declare const INSPECT_NAME = "zivis_inspect";
+export declare const INSPECT_DESCRIPTION = "Build a local repo graph and use it to seed or enrich a threat model for this application. The conversion event for the threat-model-first sidekick.\n\nUse this when the user says any of:\n- \"model this app\" / \"threat model this repo\"\n- \"what should we be worried about in this code\"\n- \"set up security for this project\" (after auth/binding is done)\n- \"/inspect\"\n\nToday this tool is a STUB and returns a structured preview only. It does NOT yet build the graph or call the platform \u2014 the real implementation is being built in a follow-up session and replaces this handler in place.\n\nWhen implemented, /inspect will:\n  1. Walk the bound repo locally (no source code leaves the machine by default).\n  2. Build a typed graph (components, endpoints, datastores, external deps, auth boundaries, dataflow hints).\n  3. Run local deterministic + inference matchers against published pattern packs.\n  4. Send graph IR + match candidates to the ZIVIS API for proprietary pattern evaluation.\n  5. Auto-create a draft threat model (or enrich the existing one) on the bound Application using only the trusted lane.\n  6. Surface inferred-lane hypotheses for analyst review via /review.\n\nThe local/cloud boundary is locked: graph extraction is local-first, proprietary pattern logic stays server-side, and only the trusted lane influences automated scoring. See docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md for the full spec.";
+export declare const INSPECT_SCHEMA: {
+    cwd: z.ZodOptional<z.ZodString>;
+    application_id: z.ZodOptional<z.ZodString>;
+};
+export declare function createInspectHandler(_apiClient: ApiClient, _config: ZivisConfig): (params: {
+    cwd?: string;
+    application_id?: string;
+}) => Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;

package/dist/tools/inspect.js

@@ -0,0 +1,100 @@
+/**
+ * zivis_inspect — STUB
+ *
+ * Threat-model-first entry point. Will build a local repo graph and ship it
+ * to the platform for pattern evaluation, then seed/enrich a draft threat
+ * model on the bound Application.
+ *
+ * Today this is a stub: it validates the project binding and returns a
+ * structured preview of what `/inspect` will do once the local-graph
+ * implementation lands. The real handler will replace this in a follow-up
+ * session — see docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md.
+ */
+import { z } from "zod";
+import { detectProjectBinding } from "../project-binding.js";
+import { withNextSteps, withNextStepsError } from "../lib/next-steps.js";
+export const INSPECT_NAME = "zivis_inspect";
+export const INSPECT_DESCRIPTION = `Build a local repo graph and use it to seed or enrich a threat model for this application. The conversion event for the threat-model-first sidekick.
+
+Use this when the user says any of:
+- "model this app" / "threat model this repo"
+- "what should we be worried about in this code"
+- "set up security for this project" (after auth/binding is done)
+- "/inspect"
+
+Today this tool is a STUB and returns a structured preview only. It does NOT yet build the graph or call the platform — the real implementation is being built in a follow-up session and replaces this handler in place.
+
+When implemented, /inspect will:
+  1. Walk the bound repo locally (no source code leaves the machine by default).
+  2. Build a typed graph (components, endpoints, datastores, external deps, auth boundaries, dataflow hints).
+  3. Run local deterministic + inference matchers against published pattern packs.
+  4. Send graph IR + match candidates to the ZIVIS API for proprietary pattern evaluation.
+  5. Auto-create a draft threat model (or enrich the existing one) on the bound Application using only the trusted lane.
+  6. Surface inferred-lane hypotheses for analyst review via /review.
+
+The local/cloud boundary is locked: graph extraction is local-first, proprietary pattern logic stays server-side, and only the trusted lane influences automated scoring. See docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md for the full spec.`;
+export const INSPECT_SCHEMA = {
+    cwd: z
+        .string()
+        .optional()
+        .describe("Working directory to inspect (defaults to server working directory)."),
+    application_id: z
+        .string()
+        .optional()
+        .describe("Target application id. If omitted, /inspect resolves it from the project binding. " +
+        "Required if the binding is ambiguous or maps to multiple applications."),
+};
+export function createInspectHandler(_apiClient, _config) {
+    return async (params) => {
+        const cwd = params.cwd || process.cwd();
+        const detected = detectProjectBinding(cwd);
+        if (!detected) {
+            return withNextStepsError("No .zivis/project.json found for this directory. /inspect needs a project binding so the resulting threat model attaches to the correct application and org.", [
+                {
+                    id: "run_auth_init",
+                    label: "Connect this project to your ZIVIS org",
+                    tool: "zivis_check_project",
+                    why: "Run 'zivis auth init' or 'zivis auth login' to create the binding, then re-run /inspect.",
+                },
+            ], "Project not bound — run zivis auth login then re-run /inspect.");
+        }
+        return withNextSteps({
+            status: "stub",
+            message: "/inspect is the threat-model-first entry point but is not yet implemented. This response is a preview of what it will do.",
+            binding: {
+                orgName: detected.binding.orgName,
+                workosOrgId: detected.binding.workosOrgId,
+                applicationId: params.application_id ?? detected.binding.applicationId ?? null,
+                bindingPath: detected.filePath,
+            },
+            planned_phases: [
+                "walk_repo_local",
+                "build_graph_ir",
+                "run_local_pattern_matchers",
+                "send_graph_to_platform_for_proprietary_eval",
+                "create_or_enrich_draft_threat_model",
+                "queue_inferred_hypotheses_for_review",
+            ],
+            boundary: {
+                local_only: "Repo walk, graph IR construction, and public-pack matching all run on this machine.",
+                sent_to_platform: "Graph IR features and local match candidates (not raw source by default).",
+                stays_on_platform: "Proprietary pattern definitions and final scoring logic.",
+            },
+            spec: "docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md",
+        }, [
+            {
+                id: "wait_for_inspect_impl",
+                label: "Wait for /inspect to be implemented",
+                tool: "zivis_inspect",
+                why: "The full handler lands in a follow-up session and replaces this stub.",
+            },
+            {
+                id: "discover_local_infra_now",
+                label: "In the meantime, sniff AI/LLM SDKs in the project",
+                tool: "zivis_discover_local_infra",
+                why: "Existing local-only tool that gives a partial preview of what /inspect will detect.",
+            },
+        ], "STUB: /inspect preview only — real handler coming in a follow-up session.");
+    };
+}
+//# sourceMappingURL=inspect.js.map

package/dist/tools/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../src/tools/inspect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAE5C,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;+OAkB4M,CAAC;AAEhP,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oFAAoF;QAClF,wEAAwE,CAC3E;CACJ,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,UAAqB,EAAE,OAAoB;IAC9E,OAAO,KAAK,EAAE,MAAiD,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,kBAAkB,CACvB,8JAA8J,EAC9J;gBACE;oBACE,EAAE,EAAE,eAAe;oBACnB,KAAK,EAAE,wCAAwC;oBAC/C,IAAI,EAAE,qBAAqB;oBAC3B,GAAG,EAAE,0FAA0F;iBAChG;aACF,EACD,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,aAAa,CAClB;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EACL,2HAA2H;YAC7H,OAAO,EAAE;gBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;gBACjC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;gBACzC,aAAa,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;gBAC9E,WAAW,EAAE,QAAQ,CAAC,QAAQ;aAC/B;YACD,cAAc,EAAE;gBACd,iBAAiB;gBACjB,gBAAgB;gBAChB,4BAA4B;gBAC5B,6CAA6C;gBAC7C,qCAAqC;gBACrC,sCAAsC;aACvC;YACD,QAAQ,EAAE;gBACR,UAAU,EACR,qFAAqF;gBACvF,gBAAgB,EACd,2EAA2E;gBAC7E,iBAAiB,EACf,0DAA0D;aAC7D;YACD,IAAI,EAAE,+CAA+C;SACtD,EACD;YACE;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,KAAK,EAAE,qCAAqC;gBAC5C,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,uEAAuE;aAC7E;YACD;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,KAAK,EAAE,mDAAmD;gBAC1D,IAAI,EAAE,4BAA4B;gBAClC,GAAG,EAAE,qFAAqF;aAC3F;SACF,EACD,2EAA2E,CAC5E,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/manage-application.d.ts

@@ -23,8 +23,8 @@ export declare const MANAGE_APPLICATION_SCHEMA: {
     api_url: z.ZodOptional<z.ZodString>;
     auth_type: z.ZodOptional<z.ZodEnum<{
         none: "none";
-        static_token: "static_token";
         oauth_pkce: "oauth_pkce";
+        static_token: "static_token";
         client_credentials: "client_credentials";
         bearer_refresh: "bearer_refresh";
     }>>;