@zivis/mcp 0.1.0-alpha.21 → 0.1.0-alpha.22

package/dist/tools/threat-list-relevant-capsules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-list-relevant-capsules.js","sourceRoot":"","sources":["../../src/tools/threat-list-relevant-capsules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,cAAc,EACd,oBAAoB,GAGrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AAExF,MAAM,CAAC,MAAM,yCAAyC,GAAG;;;;;;;;;;;6KAWoH,CAAC;AAE9K,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,wLAAwL,CACzL;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;AAWF,MAAM,UAAU,uCAAuC;IACrD,OAAO,KAAK,EAAE,MAAgD,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAExC,IAAI,QAA2B,CAAC;QAChC,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACtE,YAAY,GAAG,QAAQ,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,kBAAkB,CACvB,iCAAkC,GAAa,CAAC,OAAO,EAAE,EACzD;gBACE;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,mDAAmD;oBAC1D,IAAI,EAAE,eAAe;oBACrB,GAAG,EAAE,+EAA+E;iBACrF;aACF,EACD,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;SACxC,CAAC,CAAC,CAAC;QAEJ,OAAO,aAAa,CAClB;YACE,aAAa,EAAE,YAAY;YAC3B,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YACvE,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE;YAClD,cAAc,EAAE,SAAS,CAAC,MAAM;YAChC,iBAAiB,EAAE,SAAS;SAC7B,EACD,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,qBAAqB;oBACzB,KAAK,EAAE,kEAAkE;oBACzE,IAAI,EAAE,0BAA0B;oBAChC,GAAG,EAAE,4FAA4F;iBAClG;gBACD;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,iEAAiE;oBACxE,IAAI,EAAE,mCAAmC;oBACzC,GAAG,EAAE,6FAA6F;iBACnG;aACF;YACH,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,2CAA2C;oBAClD,IAAI,EAAE,qCAAqC;oBAC3C,GAAG,EAAE,8IAA8I;iBACpJ;aACF,EACL,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC,SAAS,SAAS,CAAC,MAAM,6CAA6C;YACxE,CAAC,CAAC,wGAAwG,CAC7G,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,gBAAgB;AAEhB,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAA4B,EAAE,GAAW;IAC1E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,6BAA6B,SAAS,uDAAuD,CAC9F,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,4EAA4E;IAC5E,4BAA4B;IAC5B,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,uDAAuD,CAChG,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,QAA2B;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAE/D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;AAChE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zivis/mcp",
-  "version": "0.1.0-alpha.21",
+  "version": "0.1.0-alpha.22",
   "description": "ZIVIS MCP server — threat modeling, security scans, and AI red team tools for IDE integration",
   "type": "module",
   "bin": {
@@ -15,7 +15,8 @@
     "./project-binding": "./dist/project-binding.js",
     "./server": "./dist/server.js",
     "./types": "./dist/types.js",
-    "./cli": "./dist/cli.js"
+    "./cli": "./dist/cli.js",
+    "./pattern-pack": "./dist/pattern-pack/index.js"
   },
   "files": [
     "dist",
@@ -29,17 +30,23 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
+    "js-yaml": "^4.1.0",
     "open": "^10.1.0",
     "zod": "^4.0.0"
   },
   "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
     "husky": "^9.1.7",
+    "tsx": "^4.19.2",
     "typescript": "^5.7.0",
     "vitest": "^3.0.0"
   },
   "scripts": {
-    "build": "tsc && node scripts/ensure-symlink.cjs",
+    "build:pattern-pack": "tsx ../scripts/build-pattern-pack.ts",
+    "build": "tsc && pnpm run build:pattern-pack && node scripts/ensure-symlink.cjs",
     "dev": "tsc --watch",
     "start": "node dist/index.js",
     "test": "vitest run",

package/dist/prompts/prep-for-launch.d.ts

@@ -1,9 +0,0 @@
-/**
- * prep-for-launch prompt
- *
- * Pre-deploy checklist: dependency audit + open findings review + scan status.
- * Returns a go / no-go summary based on severity counts.
- * In Cursor: /zivis-prep-for-launch
- */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function registerPrepForLaunchPrompt(server: McpServer): void;

package/dist/prompts/prep-for-launch.js

@@ -1,62 +0,0 @@
-/**
- * prep-for-launch prompt
- *
- * Pre-deploy checklist: dependency audit + open findings review + scan status.
- * Returns a go / no-go summary based on severity counts.
- * In Cursor: /zivis-prep-for-launch
- */
-export function registerPrepForLaunchPrompt(server) {
-    server.registerPrompt("prep-for-launch", {
-        description: "Run a pre-launch security checklist. Checks open findings, recent scans, and dependency risks. Returns a go / no-go recommendation.",
-        argsSchema: {},
-    }, async () => ({
-        messages: [
-            {
-                role: "user",
-                content: {
-                    type: "text",
-                    text: `I'm about to launch / deploy to production and I want to make sure there are no known security issues.
-
-Please run through this checklist and give me a go / no-go recommendation at the end.
-
-**Step 1 — Check open findings**
-Call \`zivis_get_findings\` with status="open". 
-- If there are any critical or high findings, list them by title and severity.
-- Note how many medium and low findings exist (don't list them all — just the count).
-
-**Step 2 — Check recent scans**
-Call \`zivis_list_scans\` with limit=5.
-- Tell me when the most recent scan ran and whether it completed successfully.
-- If no scan has run in the last 7 days, flag this as a gap.
-
-**Step 3 — Check dependency risks (if time permits)**
-If the project has a package.json, requirements.txt, or go.mod, identify the 3-5 most important AI or security-sensitive dependencies and call \`zivis_check_repo_trust\` for each.
-- Flag any with grade C or below.
-
-**Step 4 — Go / No-go recommendation**
-Based on the above, give me a clear recommendation:
-
-🔴 NO-GO if:
-- Any critical open findings exist
-- No scan has run (ever)
-- Any dependency has grade D or F
-
-🟡 PROCEED WITH CAUTION if:
-- Any high-severity open findings exist
-- Last scan ran more than 7 days ago
-- Any dependency has grade C
-
-🟢 GO if:
-- No critical or high open findings
-- A scan ran within the last 7 days
-- No high-risk dependencies
-
-After the recommendation, list the top 3 things I should fix before or immediately after launch, in priority order.
-
-Speak in plain English. I'm a developer, not a security engineer.`,
-                },
-            },
-        ],
-    }));
-}
-//# sourceMappingURL=prep-for-launch.js.map

package/dist/prompts/prep-for-launch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prep-for-launch.js","sourceRoot":"","sources":["../../src/prompts/prep-for-launch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,CAAC,cAAc,CACnB,iBAAiB,EACjB;QACE,WAAW,EACT,qIAAqI;QACvI,UAAU,EAAE,EAAE;KACf,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kEAsCgD;iBACvD;aACF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/prompts/secure-my-app.d.ts

@@ -1,9 +0,0 @@
-/**
- * secure-my-app prompt
- *
- * For developers who know they have an app and want to test it.
- * Skips the intro tour and goes straight to red team setup.
- * In Cursor: /zivis-secure-my-app
- */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function registerSecureMyAppPrompt(server: McpServer): void;

package/dist/prompts/secure-my-app.js

@@ -1,70 +0,0 @@
-/**
- * secure-my-app prompt
- *
- * For developers who know they have an app and want to test it.
- * Skips the intro tour and goes straight to red team setup.
- * In Cursor: /zivis-secure-my-app
- */
-import { z } from "zod";
-export function registerSecureMyAppPrompt(server) {
-    server.registerPrompt("secure-my-app", {
-        description: "Set up security testing for an app I'm building. Walks through registering the target and picking a test to run.",
-        argsSchema: {
-            app_kind: z
-                .enum(["chatbot", "web_app", "api", "unknown"])
-                .optional()
-                .describe("What kind of app are you testing? chatbot = LLM/AI assistant, web_app = browser app, api = REST/GraphQL API, unknown = I'll describe it."),
-            target_url: z
-                .string()
-                .optional()
-                .describe("URL of the running app (e.g. https://chat.example.com/api/chat). Provide this if you have it."),
-        },
-    }, async (args) => {
-        const kindHint = args.app_kind && args.app_kind !== "unknown"
-            ? `The user says their app is a ${args.app_kind}.`
-            : "The user hasn't specified what kind of app they have yet — ask them.";
-        const urlHint = args.target_url
-            ? `The user provided this URL: ${args.target_url}`
-            : "No URL was provided yet — you'll need to ask.";
-        return {
-            messages: [
-                {
-                    role: "user",
-                    content: {
-                        type: "text",
-                        text: `I want to set up security testing for an app I'm building.
-
-Context:
-- ${kindHint}
-- ${urlHint}
-
-Please follow these steps:
-
-1. If you don't already know what kind of app it is, ask: "Is this a chatbot/AI assistant, a website, or a REST/GraphQL API?"
-
-2. If you don't have a URL yet, ask: "What's the URL of your running app? (e.g. https://myapp.com)"
-
-3. Once you have the app kind and URL, call \`zivis_setup_red_team_target\` with:
-   - target_url = the URL they gave you
-   - target_type = "ai_chat" for chatbots, "web_app" for websites, "api" for APIs
-   - auto_scan = false (ask before running a scan)
-
-4. After the target is set up, call \`zivis_list_test_scenarios\` and show the user the top 3 relevant scenarios as a numbered list. Use plain names — not IDs.
-
-5. Ask: "Which of these do you want to run? I'll start with a quick scan (5-10 minutes) unless you want a thorough one."
-
-6. When the user picks one, call \`zivis_run_test_scenario\` with:
-   - scenario_id = the ID of their chosen scenario
-   - intensity = 1 (quick) unless they explicitly ask for thorough (3)
-
-Ground rules:
-- Speak in plain English. No security jargon unless the user uses it first.
-- Never run a paid scan without confirming with the user first.
-- Never assume you know the URL — always confirm.`,
-                    },
-                },
-            ],
-        };
-    });
-}
-//# sourceMappingURL=secure-my-app.js.map

package/dist/prompts/secure-my-app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secure-my-app.js","sourceRoot":"","sources":["../../src/prompts/secure-my-app.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,CAAC,cAAc,CACnB,eAAe,EACf;QACE,WAAW,EACT,kHAAkH;QACpH,UAAU,EAAE;YACV,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;iBAC9C,QAAQ,EAAE;iBACV,QAAQ,CACP,0IAA0I,CAC3I;YACH,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,+FAA+F,CAChG;SACJ;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC3D,CAAC,CAAC,gCAAgC,IAAI,CAAC,QAAQ,GAAG;YAClD,CAAC,CAAC,sEAAsE,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;YAC7B,CAAC,CAAC,+BAA+B,IAAI,CAAC,UAAU,EAAE;YAClD,CAAC,CAAC,+CAA+C,CAAC;QAEpD,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;;;IAGhB,QAAQ;IACR,OAAO;;;;;;;;;;;;;;;;;;;;;;;;kDAwBuC;qBACrC;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/prompts/weekly-check.d.ts

@@ -1,9 +0,0 @@
-/**
- * weekly-check prompt
- *
- * Re-runs the security pulse for this project. Designed to be triggered
- * every Monday (or whenever the user wants a status update).
- * In Cursor: /zivis-weekly-check
- */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function registerWeeklyCheckPrompt(server: McpServer): void;

package/dist/prompts/weekly-check.js

@@ -1,48 +0,0 @@
-/**
- * weekly-check prompt
- *
- * Re-runs the security pulse for this project. Designed to be triggered
- * every Monday (or whenever the user wants a status update).
- * In Cursor: /zivis-weekly-check
- */
-export function registerWeeklyCheckPrompt(server) {
-    server.registerPrompt("weekly-check", {
-        description: "Get a quick security status update for this week. Shows new findings, scan activity, and what to focus on.",
-        argsSchema: {},
-    }, async () => ({
-        messages: [
-            {
-                role: "user",
-                content: {
-                    type: "text",
-                    text: `Give me a quick security status update for this project — what's changed or needs attention this week.
-
-Please do the following:
-
-**1. Open findings pulse**
-Call \`zivis_get_findings\` with status="open".
-- How many open issues are there total?
-- List any critical or high findings by title (one line each).
-- How does this compare to last week? (If you don't know, just show the current state.)
-
-**2. Recent scan activity**
-Call \`zivis_list_scans\` with limit=5.
-- What scans ran this week?
-- Did any complete with new findings?
-- Are any still running?
-
-**3. Top priority action**
-Based on the above, what is the single most important security action to take this week?
-- If there are critical findings: "Fix [finding title] — it's a critical issue."
-- If a scan is overdue: "Run a scan — the last one was X days ago."
-- If everything looks good: "Keep the streak going — schedule a scan for next week."
-
-Format the response as a brief weekly digest, not a full security report. Bullet points are better than paragraphs. Keep it under 300 words.
-
-If I want to dig into a specific issue, I'll ask — don't pre-load all the details.`,
-                },
-            },
-        ],
-    }));
-}
-//# sourceMappingURL=weekly-check.js.map

package/dist/prompts/weekly-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"weekly-check.js","sourceRoot":"","sources":["../../src/prompts/weekly-check.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,CAAC,cAAc,CACnB,cAAc,EACd;QACE,WAAW,EACT,4GAA4G;QAC9G,UAAU,EAAE,EAAE;KACf,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;mFAwBiE;iBACxE;aACF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/capture-evidence.d.ts

@@ -1,54 +0,0 @@
-/**
- * zivis_capture_evidence — Capture evidence (screenshots, code, terminal output)
- *
- * Maps to: POST /api/evidence/mcp-capture
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const CAPTURE_EVIDENCE_NAME = "zivis_capture_evidence";
-export declare const CAPTURE_EVIDENCE_DESCRIPTION = "Capture and upload evidence from your pen testing session.\n\nSupports screenshots (base64-encoded images), code snippets, terminal output, HTTP requests/responses, and notes. Evidence is stored in ZIVIS and can be linked to threat model findings, test cases, and pen test sessions.\n\nReturns an evidence ID that you can reference in zivis_record_test_result.\n\nFor screenshots: provide base64-encoded image data in the content field.\nFor code/text: provide plain text in the content field.";
-export declare const CAPTURE_EVIDENCE_SCHEMA: {
-    name: z.ZodString;
-    type: z.ZodEnum<{
-        code_snippet: "code_snippet";
-        note: "note";
-        screenshot: "screenshot";
-        http_request: "http_request";
-        terminal_output: "terminal_output";
-        http_response: "http_response";
-    }>;
-    content: z.ZodString;
-    mime_type: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    threat_model_id: z.ZodOptional<z.ZodString>;
-    finding_id: z.ZodOptional<z.ZodString>;
-    test_case_id: z.ZodOptional<z.ZodString>;
-    pentest_session_id: z.ZodOptional<z.ZodString>;
-    source_file: z.ZodOptional<z.ZodString>;
-    source_line: z.ZodOptional<z.ZodNumber>;
-};
-export declare function createCaptureEvidenceHandler(apiClient: ApiClient): (params: {
-    name: string;
-    type: string;
-    content: string;
-    mime_type?: string;
-    description?: string;
-    threat_model_id?: string;
-    finding_id?: string;
-    test_case_id?: string;
-    pentest_session_id?: string;
-    source_file?: string;
-    source_line?: number;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/capture-evidence.js

@@ -1,72 +0,0 @@
-/**
- * zivis_capture_evidence — Capture evidence (screenshots, code, terminal output)
- *
- * Maps to: POST /api/evidence/mcp-capture
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const CAPTURE_EVIDENCE_NAME = "zivis_capture_evidence";
-export const CAPTURE_EVIDENCE_DESCRIPTION = `Capture and upload evidence from your pen testing session.
-
-Supports screenshots (base64-encoded images), code snippets, terminal output, HTTP requests/responses, and notes. Evidence is stored in ZIVIS and can be linked to threat model findings, test cases, and pen test sessions.
-
-Returns an evidence ID that you can reference in zivis_record_test_result.
-
-For screenshots: provide base64-encoded image data in the content field.
-For code/text: provide plain text in the content field.`;
-export const CAPTURE_EVIDENCE_SCHEMA = {
-    name: z.string().describe("Evidence name (e.g., 'SQLi payload response', 'Auth bypass screenshot')"),
-    type: z
-        .enum(["screenshot", "code_snippet", "terminal_output", "http_request", "http_response", "note"])
-        .describe("Type of evidence being captured"),
-    content: z
-        .string()
-        .describe("Content: base64-encoded data for screenshots, plain text for code/terminal/notes"),
-    mime_type: z
-        .string()
-        .optional()
-        .describe("MIME type (e.g., 'image/png'). Auto-detected from type if not provided."),
-    description: z.string().optional().describe("Description of what this evidence shows"),
-    threat_model_id: z.string().optional().describe("Threat model UUID to link evidence to"),
-    finding_id: z.string().optional().describe("Finding UUID to link evidence to"),
-    test_case_id: z.string().optional().describe("Test case UUID to link evidence to"),
-    pentest_session_id: z.string().optional().describe("Pen test session UUID to associate with"),
-    source_file: z.string().optional().describe("Source file path (for code snippets)"),
-    source_line: z.number().optional().describe("Source line number (for code snippets)"),
-};
-export function createCaptureEvidenceHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post("/api/evidence/mcp-capture", {
-                name: params.name,
-                type: params.type,
-                content: params.content,
-                mimeType: params.mime_type,
-                description: params.description,
-                threatModelId: params.threat_model_id,
-                findingId: params.finding_id,
-                testCaseId: params.test_case_id,
-                pentestSessionId: params.pentest_session_id,
-                sourceFile: params.source_file,
-                sourceLine: params.source_line,
-            });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to capture evidence";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=capture-evidence.js.map

package/dist/tools/enterprise/capture-evidence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capture-evidence.js","sourceRoot":"","sources":["../../../src/tools/enterprise/capture-evidence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;wDAOY,CAAC;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IACpG,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;SAChG,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAClF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACtF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAYb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,2BAA2B,EAC3B;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,eAAe;gBACrC,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,UAAU,EAAE,MAAM,CAAC,YAAY;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;gBAC3C,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CACF,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/create-report-ticket.d.ts

@@ -1,34 +0,0 @@
-/**
- * zivis_create_report_ticket — Create a Jira or Linear ticket from a report issue
- *
- * Maps to: POST /api/reports/:reportId/issues/:issueId/create-ticket
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const CREATE_REPORT_TICKET_NAME = "zivis_create_report_ticket";
-export declare const CREATE_REPORT_TICKET_DESCRIPTION = "Create a Jira or Linear ticket from a report issue.\n\nLinks the report issue to an external ticket tracker so remediation can be tracked in the customer's project management tool. The ticket includes the issue title, description, recommendation, severity, and metadata (CWE, OWASP, CVSS).\n\nPrerequisites:\n- Jira: Active Jira integration with a default project configured\n- Linear: Active Linear integration with a default team configured\n\nThe ticket reference is stored on the issue and displayed in the remediation checklist.";
-export declare const CREATE_REPORT_TICKET_SCHEMA: {
-    report_id: z.ZodString;
-    issue_id: z.ZodString;
-    provider: z.ZodEnum<{
-        jira: "jira";
-        linear: "linear";
-    }>;
-};
-export declare function createCreateReportTicketHandler(apiClient: ApiClient): (params: {
-    report_id: string;
-    issue_id: string;
-    provider: "jira" | "linear";
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/create-report-ticket.js

@@ -1,44 +0,0 @@
-/**
- * zivis_create_report_ticket — Create a Jira or Linear ticket from a report issue
- *
- * Maps to: POST /api/reports/:reportId/issues/:issueId/create-ticket
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const CREATE_REPORT_TICKET_NAME = "zivis_create_report_ticket";
-export const CREATE_REPORT_TICKET_DESCRIPTION = `Create a Jira or Linear ticket from a report issue.
-
-Links the report issue to an external ticket tracker so remediation can be tracked in the customer's project management tool. The ticket includes the issue title, description, recommendation, severity, and metadata (CWE, OWASP, CVSS).
-
-Prerequisites:
-- Jira: Active Jira integration with a default project configured
-- Linear: Active Linear integration with a default team configured
-
-The ticket reference is stored on the issue and displayed in the remediation checklist.`;
-export const CREATE_REPORT_TICKET_SCHEMA = {
-    report_id: z.string().describe("Report UUID"),
-    issue_id: z.string().describe("Report issue UUID"),
-    provider: z.enum(["jira", "linear"]).describe("Ticket provider to use"),
-};
-export function createCreateReportTicketHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post(`/api/reports/${params.report_id}/issues/${params.issue_id}/create-ticket`, { provider: params.provider });
-            const result = sanitizeResponse({
-                ...data,
-                message: `${params.provider === "jira" ? "Jira" : "Linear"} ticket created and linked to issue.`,
-            });
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to create ticket";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=create-report-ticket.js.map

package/dist/tools/enterprise/create-report-ticket.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-report-ticket.js","sourceRoot":"","sources":["../../../src/tools/enterprise/create-report-ticket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAEtE,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;;;;wFAQwC,CAAC;AAEzF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,gBAAgB,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,QAAQ,gBAAgB,EAC1E,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAC9B,CAAC;YAEF,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,GAAG,IAAI;gBACP,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,sCAAsC;aACjG,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/end-pentest-session.d.ts

@@ -1,33 +0,0 @@
-/**
- * zivis_end_pentest_session — End a pen test session
- *
- * Maps to: PATCH /api/pentest-sessions/:id
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const END_PENTEST_SESSION_NAME = "zivis_end_pentest_session";
-export declare const END_PENTEST_SESSION_DESCRIPTION = "End a pen test session by marking it as completed or abandoned.\n\nCall this when you're done with your pen testing work. The session results will be preserved for report generation.";
-export declare const END_PENTEST_SESSION_SCHEMA: {
-    session_id: z.ZodString;
-    status: z.ZodDefault<z.ZodEnum<{
-        completed: "completed";
-        paused: "paused";
-        abandoned: "abandoned";
-    }>>;
-};
-export declare function createEndPentestSessionHandler(apiClient: ApiClient): (params: {
-    session_id: string;
-    status?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/end-pentest-session.js

@@ -1,42 +0,0 @@
-/**
- * zivis_end_pentest_session — End a pen test session
- *
- * Maps to: PATCH /api/pentest-sessions/:id
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const END_PENTEST_SESSION_NAME = "zivis_end_pentest_session";
-export const END_PENTEST_SESSION_DESCRIPTION = `End a pen test session by marking it as completed or abandoned.
-
-Call this when you're done with your pen testing work. The session results will be preserved for report generation.`;
-export const END_PENTEST_SESSION_SCHEMA = {
-    session_id: z.string().describe("Pen test session UUID"),
-    status: z
-        .enum(["completed", "paused", "abandoned"])
-        .default("completed")
-        .describe("Final status (completed = normal end, abandoned = incomplete)"),
-};
-export function createEndPentestSessionHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.patch(`/api/pentest-sessions/${params.session_id}`, { status: params.status || "completed" });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to end pentest session";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=end-pentest-session.js.map

package/dist/tools/enterprise/end-pentest-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"end-pentest-session.js","sourceRoot":"","sources":["../../../src/tools/enterprise/end-pentest-session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,+BAA+B,GAAG;;oHAEqE,CAAC;AAErH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;SAC1C,OAAO,CAAC,WAAW,CAAC;SACpB,QAAQ,CAAC,+DAA+D,CAAC;CAC7E,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAoB;IACjE,OAAO,KAAK,EAAE,MAA+C,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAChC,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CACzC,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACrF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/generate-report.d.ts

@@ -1,55 +0,0 @@
-/**
- * zivis_generate_report — Generate a pen test report with PDF export
- *
- * Maps to: POST /api/reports + POST /api/reports/:id/regenerate + POST /api/reports/:id/export
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const GENERATE_REPORT_NAME = "zivis_generate_report";
-export declare const GENERATE_REPORT_DESCRIPTION = "Generate a professional pen test report with optional PDF export.\n\nCreates a report from campaign findings, pen test session results, and threat model data. The report is generated section by section using AI, then can be exported as a branded PDF.\n\nAssessment types: web_pentest, api_pentest, ai_red_team, full_assessment, recon_only";
-export declare const GENERATE_REPORT_SCHEMA: {
-    name: z.ZodString;
-    assessment_type: z.ZodEnum<{
-        ai_red_team: "ai_red_team";
-        web_pentest: "web_pentest";
-        api_pentest: "api_pentest";
-        full_assessment: "full_assessment";
-        recon_only: "recon_only";
-    }>;
-    customer_name: z.ZodString;
-    analyst_name: z.ZodString;
-    engagement_start: z.ZodString;
-    engagement_end: z.ZodString;
-    campaign_id: z.ZodOptional<z.ZodString>;
-    application_id: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    customer_industry: z.ZodOptional<z.ZodString>;
-    reviewer_name: z.ZodOptional<z.ZodString>;
-    export_pdf: z.ZodDefault<z.ZodBoolean>;
-};
-export declare function createGenerateReportHandler(apiClient: ApiClient): (params: {
-    name: string;
-    assessment_type: string;
-    customer_name: string;
-    analyst_name: string;
-    engagement_start: string;
-    engagement_end: string;
-    campaign_id?: string;
-    application_id?: string;
-    description?: string;
-    customer_industry?: string;
-    reviewer_name?: string;
-    export_pdf?: boolean;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;