@zivis/mcp 0.1.0-alpha.21 → 0.1.0-alpha.23

package/dist/tools/threat-get-inference-prompt.js

@@ -0,0 +1,91 @@
+/**
+ * zivis_threat_get_inference_prompt — return the prompt bundle for a capsule's
+ * INFER strategy so the host LLM can run local inference.
+ *
+ * MCP servers cannot invoke the customer's LLM. The host (Cursor, Claude Code)
+ * runs the model. This tool returns:
+ *   - the prompt template (markdown)
+ *   - the capsule's expected_output_schema
+ *   - the capsule's safe_summary as ambient context
+ *   - guidance on which evidence spans the host should attach
+ *
+ * The host LLM consumes the bundle, gathers code spans per minimum_context_required,
+ * runs the inference, and returns structured JSON. That JSON enters the
+ * `inferred` lane until promoted to `trusted` per the platform's promotion policy.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 2A)
+ */
+import { z } from "zod";
+import { loadActivePack, getCapsule, getInferencePrompt } from "../pattern-pack/index.js";
+import { withNextSteps, withNextStepsError } from "../lib/next-steps.js";
+export const THREAT_GET_INFERENCE_PROMPT_NAME = "zivis_threat_get_inference_prompt";
+export const THREAT_GET_INFERENCE_PROMPT_DESCRIPTION = `Return the prompt bundle for the host LLM to run local inference for a capsule.
+
+ZIVIS doesn't run an LLM itself — the host (Cursor, Claude Code, etc.) does. This tool returns the prompt template + structured output schema + ambient capsule context so the host model can run the inference and produce JSON the inferred lane accepts.
+
+Use this when:
+- After zivis_threat_get_capsule, the user wants the host LLM to actually evaluate whether the pattern is present in the code
+- The user says "go check if my code does this" / "is this pattern actually in my repo"
+- The matcher emits an INFER candidate that needs host-LLM evaluation
+
+The bundle includes:
+- prompt: the markdown inference prompt
+- expected_output_schema: JSON Schema for the structured response
+- safe_summary: ambient capsule context
+- minimum_context_required: hint to the host for how much code to attach
+- evidence_focus: spans the deterministic strategies already flagged
+
+The host LLM is expected to gather the indicated code spans, fill in the prompt, return JSON matching the schema. That output then flows back into the inferred lane.`;
+export const THREAT_GET_INFERENCE_PROMPT_SCHEMA = {
+    capsule_id: z
+        .string()
+        .describe("Capsule id whose INFER prompt should be returned (e.g. 'agents.privilege-separation')."),
+};
+export function createThreatGetInferencePromptHandler() {
+    return async (params) => {
+        const handle = await loadActivePack();
+        let capsule;
+        try {
+            capsule = await getCapsule(handle, params.capsule_id);
+        }
+        catch (err) {
+            return withNextStepsError(`Capsule '${params.capsule_id}' not found. ${err.message}`, [
+                {
+                    id: "list_relevant_capsules_first",
+                    label: "List relevant capsules for the current repo first",
+                    tool: "zivis_threat_list_relevant_capsules",
+                    why: "Returns ids you can pass back here.",
+                },
+            ], "Capsule not found — list first to discover ids.");
+        }
+        if (!capsule.model_task_prompt_ref) {
+            return withNextStepsError(`Capsule '${capsule.id}' has no inference prompt defined (model_task_prompt_ref missing). This capsule is deterministic-only.`, [
+                {
+                    id: "get_capsule",
+                    label: "Read the full capsule to see its deterministic strategies",
+                    tool: "zivis_threat_get_capsule",
+                    args_hint: { capsule_id: capsule.id },
+                    why: "Some capsules have no INFER strategy — only AST/GRAPH/META/etc. that the matcher runs locally.",
+                },
+            ], "No inference prompt for this capsule (deterministic only).");
+        }
+        const promptText = await getInferencePrompt(handle, capsule.model_task_prompt_ref);
+        return withNextSteps({
+            pack: { id: handle.manifest.pack_id, version: handle.manifest.version },
+            capsule_id: capsule.id,
+            prompt: promptText,
+            expected_output_schema: capsule.expected_output_schema ?? null,
+            safe_summary: capsule.safe_summary ?? null,
+            minimum_context_required: capsule.minimum_context_required ?? null,
+            host_instructions: "Gather the code spans indicated by minimum_context_required.symbols (or any deterministic match spans the matcher already flagged), attach them to the prompt above, run inference with your model, and return JSON matching expected_output_schema. The structured output flows back into the inferred lane.",
+        }, [
+            {
+                id: "host_runs_inference",
+                label: "Host LLM runs inference now (no further tool call)",
+                tool: "zivis_threat_get_inference_prompt",
+                why: "MCP cannot invoke your model. The host orchestrates the inference using this bundle.",
+            },
+        ], `Prompt bundle ready for host-side inference of ${capsule.id}.`);
+    };
+}
+//# sourceMappingURL=threat-get-inference-prompt.js.map

package/dist/tools/threat-get-inference-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-get-inference-prompt.js","sourceRoot":"","sources":["../../src/tools/threat-get-inference-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,CAAC,MAAM,gCAAgC,GAAG,mCAAmC,CAAC;AAEpF,MAAM,CAAC,MAAM,uCAAuC,GAAG;;;;;;;;;;;;;;;;sKAgB+G,CAAC;AAEvK,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,CAAC,wFAAwF,CAAC;CACtG,CAAC;AAEF,MAAM,UAAU,qCAAqC;IACnD,OAAO,KAAK,EAAE,MAA8B,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QAEtC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,kBAAkB,CACvB,YAAY,MAAM,CAAC,UAAU,gBAAiB,GAAa,CAAC,OAAO,EAAE,EACrE;gBACE;oBACE,EAAE,EAAE,8BAA8B;oBAClC,KAAK,EAAE,mDAAmD;oBAC1D,IAAI,EAAE,qCAAqC;oBAC3C,GAAG,EAAE,qCAAqC;iBAC3C;aACF,EACD,iDAAiD,CAClD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACnC,OAAO,kBAAkB,CACvB,YAAY,OAAO,CAAC,EAAE,wGAAwG,EAC9H;gBACE;oBACE,EAAE,EAAE,aAAa;oBACjB,KAAK,EAAE,2DAA2D;oBAClE,IAAI,EAAE,0BAA0B;oBAChC,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;oBACrC,GAAG,EAAE,gGAAgG;iBACtG;aACF,EACD,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAEnF,OAAO,aAAa,CAClB;YACE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YACvE,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,MAAM,EAAE,UAAU;YAClB,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,IAAI;YAC9D,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;YAC1C,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,IAAI,IAAI;YAClE,iBAAiB,EACf,+SAA+S;SAClT,EACD;YACE;gBACE,EAAE,EAAE,qBAAqB;gBACzB,KAAK,EAAE,oDAAoD;gBAC3D,IAAI,EAAE,mCAAmC;gBACzC,GAAG,EAAE,sFAAsF;aAC5F;SACF,EACD,kDAAkD,OAAO,CAAC,EAAE,GAAG,CAChE,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/threat-guide.d.ts

@@ -0,0 +1,39 @@
+/**
+ * zivis_threat_guide — per-turn orchestrator for the IDE sidekick.
+ *
+ * The IDE model should call this on every conversation turn that touches
+ * code, architecture, integrations, dependencies, security, or a launch.
+ * The endpoint returns a structured next_action the model executes verbatim:
+ * call a specific CRUD tool with pre-filled args, ask one specific question,
+ * run /inspect first, or stay quiet.
+ *
+ * No graph mutations happen here — this tool only returns guidance. The
+ * downstream CRUD tools (zivis_manage_actor, zivis_manage_component, etc.)
+ * are what the model calls based on next_action.tool.
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const THREAT_GUIDE_NAME = "zivis_threat_guide";
+export declare const THREAT_GUIDE_DESCRIPTION = "Call this on every conversation turn that touches code, architecture, integrations, dependencies, security, or a launch. Returns the next concrete action to take \u2014 either a specific CRUD tool to call with pre-filled args, one specific question to ask the user, a recommendation to run /inspect first, or \"no_action\" (continue conversationally).\n\nUse this when the user says any of:\n- \"we just added <X>\" / \"we're going to integrate <X>\" / \"we're using <library>\"\n- \"<service A> calls / sends to / fetches from <service B>\"\n- describes any user role, attacker, partner, or external system\n- \"what if <bad thing>?\" / \"could someone <attack>?\" / \"is this safe?\"\n- \"we store <data type>\" / \"we process <PII / payments / credentials>\"\n- \"we added <encryption / rate limiting / WAF / audit logging>\"\n- mentions of launch, audit, compliance, customer ask, regulated buyer\n- any architecture or security clarification request\n\nHow to use the response:\n- next_action.type === \"call_tool\" \u2192 call next_action.tool with next_action.args_preview as a starting point. Confirm any unclear fields with the user briefly, then call the CRUD tool.\n- next_action.type === \"ask_user\" \u2192 ask next_action.question (use it verbatim or paraphrase). Pass the answer back through this tool on the next turn.\n- next_action.type === \"run_inspect_first\" \u2192 call zivis_inspect to bootstrap the threat model from the repo before doing anything else.\n- next_action.type === \"no_action\" \u2192 continue the conversation normally; no graph operation is needed for this turn.\n\nIf this tool returns gaps[] with priority \"high\", surface them to the user even if the immediate utterance was about something else \u2014 gaps are foundational issues blocking other work.\n\nThe tm_snapshot field is a current count of graph entities for this app; reference it when explaining state (\"you have 5 components but 0 actors\").\n\nInputs are all optional. If user_utterance is empty, the response is driven purely by the highest-priority gap \u2014 useful for \"what should I work on next?\" prompts.";
+export declare const THREAT_GUIDE_SCHEMA: {
+    user_utterance: z.ZodOptional<z.ZodString>;
+    application_id: z.ZodOptional<z.ZodString>;
+    context_hint: z.ZodOptional<z.ZodEnum<{
+        code_change: "code_change";
+        architecture_question: "architecture_question";
+        security_worry: "security_worry";
+        feature: "feature";
+        unknown: "unknown";
+    }>>;
+};
+export declare function createThreatGuideHandler(apiClient: ApiClient): (params: {
+    user_utterance?: string;
+    application_id?: string;
+    context_hint?: "code_change" | "architecture_question" | "security_worry" | "feature" | "unknown";
+}) => Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;

package/dist/tools/threat-guide.js

@@ -0,0 +1,111 @@
+/**
+ * zivis_threat_guide — per-turn orchestrator for the IDE sidekick.
+ *
+ * The IDE model should call this on every conversation turn that touches
+ * code, architecture, integrations, dependencies, security, or a launch.
+ * The endpoint returns a structured next_action the model executes verbatim:
+ * call a specific CRUD tool with pre-filled args, ask one specific question,
+ * run /inspect first, or stay quiet.
+ *
+ * No graph mutations happen here — this tool only returns guidance. The
+ * downstream CRUD tools (zivis_manage_actor, zivis_manage_component, etc.)
+ * are what the model calls based on next_action.tool.
+ */
+import { z } from "zod";
+import { withNextSteps, withNextStepsError } from "../lib/next-steps.js";
+export const THREAT_GUIDE_NAME = "zivis_threat_guide";
+export const THREAT_GUIDE_DESCRIPTION = `Call this on every conversation turn that touches code, architecture, integrations, dependencies, security, or a launch. Returns the next concrete action to take — either a specific CRUD tool to call with pre-filled args, one specific question to ask the user, a recommendation to run /inspect first, or "no_action" (continue conversationally).
+
+Use this when the user says any of:
+- "we just added <X>" / "we're going to integrate <X>" / "we're using <library>"
+- "<service A> calls / sends to / fetches from <service B>"
+- describes any user role, attacker, partner, or external system
+- "what if <bad thing>?" / "could someone <attack>?" / "is this safe?"
+- "we store <data type>" / "we process <PII / payments / credentials>"
+- "we added <encryption / rate limiting / WAF / audit logging>"
+- mentions of launch, audit, compliance, customer ask, regulated buyer
+- any architecture or security clarification request
+
+How to use the response:
+- next_action.type === "call_tool" → call next_action.tool with next_action.args_preview as a starting point. Confirm any unclear fields with the user briefly, then call the CRUD tool.
+- next_action.type === "ask_user" → ask next_action.question (use it verbatim or paraphrase). Pass the answer back through this tool on the next turn.
+- next_action.type === "run_inspect_first" → call zivis_inspect to bootstrap the threat model from the repo before doing anything else.
+- next_action.type === "no_action" → continue the conversation normally; no graph operation is needed for this turn.
+
+If this tool returns gaps[] with priority "high", surface them to the user even if the immediate utterance was about something else — gaps are foundational issues blocking other work.
+
+The tm_snapshot field is a current count of graph entities for this app; reference it when explaining state ("you have 5 components but 0 actors").
+
+Inputs are all optional. If user_utterance is empty, the response is driven purely by the highest-priority gap — useful for "what should I work on next?" prompts.`;
+export const THREAT_GUIDE_SCHEMA = {
+    user_utterance: z
+        .string()
+        .max(2000)
+        .optional()
+        .describe("Verbatim or near-verbatim of what the user just said. Pass the user's actual words — the classifier reads phrasing cues (verbs, vendor names, role nouns). Omit only when the user is asking 'what should I do next?' with no specific topic."),
+    application_id: z
+        .string()
+        .optional()
+        .describe("Application UUID. If omitted, uses applicationId from .zivis/project.json when set. Required when the binding doesn't resolve a unique app."),
+    context_hint: z
+        .enum(["code_change", "architecture_question", "security_worry", "feature", "unknown"])
+        .optional()
+        .describe("Optional hint about the kind of turn this is. Helps the classifier disambiguate. If unsure, omit or pass 'unknown'."),
+};
+export function createThreatGuideHandler(apiClient) {
+    return async (params) => {
+        try {
+            const result = await apiClient.request("POST", "/api/mcp/guide", {
+                user_utterance: params.user_utterance,
+                application_id: params.application_id,
+                context_hint: params.context_hint,
+            });
+            // Translate next_action into a guidance next-step the LLM can act on.
+            const next = result.next_action;
+            const nextSteps = [];
+            if (next.type === "call_tool") {
+                nextSteps.push({
+                    id: "execute_suggested_tool",
+                    label: `Call ${next.tool} with the suggested args`,
+                    tool: String(next.tool),
+                    args_hint: next.args_preview ?? {},
+                    why: next.follow_up ??
+                        "The threat-guide endpoint mapped this utterance to a concrete graph operation.",
+                });
+            }
+            else if (next.type === "ask_user") {
+                nextSteps.push({
+                    id: "ask_clarifying_question",
+                    label: "Ask the user this clarifying question",
+                    tool: "zivis_threat_guide",
+                    args_hint: {},
+                    why: String(next.question ?? "Need more info before acting on the graph."),
+                });
+            }
+            else if (next.type === "run_inspect_first") {
+                nextSteps.push({
+                    id: "run_inspect",
+                    label: "Run /inspect to bootstrap the threat model from the repo",
+                    tool: "zivis_inspect",
+                    args_hint: {},
+                    why: "The threat model is empty — bootstrap from the repo before modeling further.",
+                });
+            }
+            return withNextSteps(result, nextSteps, next.type === "no_action"
+                ? "No graph operation needed for this turn — continue conversationally."
+                : `Next: ${next.type === "call_tool" ? `call ${next.tool}` : next.type === "ask_user" ? "ask the clarifying question" : next.type}`);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "threat_guide call failed";
+            return withNextStepsError(message, [
+                {
+                    id: "check_project",
+                    label: "Verify project binding + auth",
+                    tool: "zivis_check_project",
+                    why: "If the call failed because of auth or binding, this surfaces the specific fix.",
+                },
+            ], "threat_guide call failed — check binding/auth.");
+        }
+    };
+}
+//# sourceMappingURL=threat-guide.js.map

package/dist/tools/threat-guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-guide.js","sourceRoot":"","sources":["../../src/tools/threat-guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;mKAsB2H,CAAC;AAEpK,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,+OAA+O,CAChP;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6IAA6I,CAC9I;IACH,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,aAAa,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;SACtF,QAAQ,EAAE;SACV,QAAQ,CACP,qHAAqH,CACtH;CACJ,CAAC;AAcF,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CACpC,MAAM,EACN,gBAAgB,EAChB;gBACE,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CACF,CAAC;YAEF,sEAAsE;YACtE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;YAChC,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,wBAAwB;oBAC5B,KAAK,EAAE,QAAQ,IAAI,CAAC,IAAI,0BAA0B;oBAClD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;oBACvB,SAAS,EAAG,IAAI,CAAC,YAAwC,IAAI,EAAE;oBAC/D,GAAG,EACA,IAAI,CAAC,SAAgC;wBACtC,gFAAgF;iBACnF,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,uCAAuC;oBAC9C,IAAI,EAAE,oBAAoB;oBAC1B,SAAS,EAAE,EAAE;oBACb,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,4CAA4C,CAAC;iBAC3E,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,aAAa;oBACjB,KAAK,EAAE,0DAA0D;oBACjE,IAAI,EAAE,eAAe;oBACrB,SAAS,EAAE,EAAE;oBACb,GAAG,EAAE,8EAA8E;iBACpF,CAAC,CAAC;YACL,CAAC;YAED,OAAO,aAAa,CAClB,MAAM,EACN,SAAS,EACT,IAAI,CAAC,IAAI,KAAK,WAAW;gBACvB,CAAC,CAAC,sEAAsE;gBACxE,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CACtI,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAChF,OAAO,kBAAkB,CACvB,OAAO,EACP;gBACE;oBACE,EAAE,EAAE,eAAe;oBACnB,KAAK,EAAE,+BAA+B;oBACtC,IAAI,EAAE,qBAAqB;oBAC3B,GAAG,EAAE,gFAAgF;iBACtF;aACF,EACD,gDAAgD,CACjD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/threat-list-relevant-capsules.d.ts

@@ -0,0 +1,30 @@
+/**
+ * zivis_threat_list_relevant_capsules — surface threat-model patterns
+ * relevant to the user's current repo, mid-IDE-conversation.
+ *
+ * Reads the latest RepoGraphArtifactV1 from the user cache, evaluates
+ * every capsule's relevance_filter against it, and returns the matching
+ * capsules with their safe_summary so the host LLM can frame the
+ * conversation in threat-model terms.
+ *
+ * Tier 1 / public pack only. Proprietary patterns are evaluated platform-side.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 2A)
+ */
+import { z } from "zod";
+export declare const THREAT_LIST_RELEVANT_CAPSULES_NAME = "zivis_threat_list_relevant_capsules";
+export declare const THREAT_LIST_RELEVANT_CAPSULES_DESCRIPTION = "List threat-model patterns relevant to the user's current repo.\n\nUse this when the user asks any of:\n- \"what should I be worried about in this code\"\n- \"what threats apply to my app\"\n- \"are there known patterns that match my architecture\"\n- \"what's in my threat model\"\n- mid-conversation when the user describes a feature that touches deps the threat library covers\n\nReads the latest local repo graph artifact (produced by 'zivis inspect') from the user cache, runs every capsule's relevance_filter against it, and returns the subset whose filter passes \u2014 together with each capsule's safe_summary so you can frame the conversation in threat-model terms (component, flow, trust boundary, scenario).\n\nIf no graph artifact exists yet for this repo, the tool returns a next-step pointing to 'zivis inspect'. Always speak in threat-model vocabulary even when the user doesn't.";
+export declare const THREAT_LIST_RELEVANT_CAPSULES_SCHEMA: {
+    artifact_path: z.ZodOptional<z.ZodString>;
+    cwd: z.ZodOptional<z.ZodString>;
+};
+export declare function createThreatListRelevantCapsulesHandler(): (params: {
+    artifact_path?: string;
+    cwd?: string;
+}) => Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;

package/dist/tools/threat-list-relevant-capsules.js

@@ -0,0 +1,176 @@
+/**
+ * zivis_threat_list_relevant_capsules — surface threat-model patterns
+ * relevant to the user's current repo, mid-IDE-conversation.
+ *
+ * Reads the latest RepoGraphArtifactV1 from the user cache, evaluates
+ * every capsule's relevance_filter against it, and returns the matching
+ * capsules with their safe_summary so the host LLM can frame the
+ * conversation in threat-model terms.
+ *
+ * Tier 1 / public pack only. Proprietary patterns are evaluated platform-side.
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 2A)
+ */
+import { z } from "zod";
+import * as fs from "node:fs/promises";
+import * as fssync from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { loadActivePack, findRelevantCapsules, } from "../pattern-pack/index.js";
+import { withNextSteps, withNextStepsError } from "../lib/next-steps.js";
+export const THREAT_LIST_RELEVANT_CAPSULES_NAME = "zivis_threat_list_relevant_capsules";
+export const THREAT_LIST_RELEVANT_CAPSULES_DESCRIPTION = `List threat-model patterns relevant to the user's current repo.
+
+Use this when the user asks any of:
+- "what should I be worried about in this code"
+- "what threats apply to my app"
+- "are there known patterns that match my architecture"
+- "what's in my threat model"
+- mid-conversation when the user describes a feature that touches deps the threat library covers
+
+Reads the latest local repo graph artifact (produced by 'zivis inspect') from the user cache, runs every capsule's relevance_filter against it, and returns the subset whose filter passes — together with each capsule's safe_summary so you can frame the conversation in threat-model terms (component, flow, trust boundary, scenario).
+
+If no graph artifact exists yet for this repo, the tool returns a next-step pointing to 'zivis inspect'. Always speak in threat-model vocabulary even when the user doesn't.`;
+export const THREAT_LIST_RELEVANT_CAPSULES_SCHEMA = {
+    artifact_path: z
+        .string()
+        .optional()
+        .describe("Optional path to a specific RepoGraphArtifactV1 JSON. If omitted, the tool finds the most recent artifact in ~/Library/Caches/zivis/repos/<repo-id>/inspect/runs/ for the repo at cwd."),
+    cwd: z
+        .string()
+        .optional()
+        .describe("Working directory whose repo cache to search (defaults to server cwd)."),
+};
+export function createThreatListRelevantCapsulesHandler() {
+    return async (params) => {
+        const cwd = params.cwd ?? process.cwd();
+        let artifact;
+        let artifactPath;
+        try {
+            const resolved = await resolveArtifactPath(params.artifact_path, cwd);
+            artifactPath = resolved;
+            const raw = await fs.readFile(resolved, "utf8");
+            artifact = JSON.parse(raw);
+        }
+        catch (err) {
+            return withNextStepsError(`No repo graph artifact found. ${err.message}`, [
+                {
+                    id: "run_zivis_inspect",
+                    label: "Run `zivis inspect` to build the local repo graph",
+                    tool: "zivis_inspect",
+                    why: "The relevance evaluation reads from the latest inspect run in the user cache.",
+                },
+            ], "Run `zivis inspect` first; this tool reads from its output.");
+        }
+        const handle = await loadActivePack();
+        const relevant = await findRelevantCapsules(handle, artifact);
+        const summaries = relevant.map((cap) => ({
+            id: cap.id,
+            title: cap.title,
+            category: cap.category,
+            safe_summary: cap.safe_summary,
+            applicable_languages: cap.applicable_languages,
+            matched_on: matchedTerms(cap, artifact),
+        }));
+        return withNextSteps({
+            artifact_path: artifactPath,
+            pack: { id: handle.manifest.pack_id, version: handle.manifest.version },
+            languages_in_scope: artifact.scope.languages ?? [],
+            relevant_count: summaries.length,
+            relevant_capsules: summaries,
+        }, summaries.length > 0
+            ? [
+                {
+                    id: "get_capsule_details",
+                    label: "Pull the full capsule for any item the user wants to investigate",
+                    tool: "zivis_threat_get_capsule",
+                    why: "The full capsule has threats (with STRIDE), risk_hints, repair_contract, related_patterns.",
+                },
+                {
+                    id: "get_inference_prompt",
+                    label: "Get the inference prompt for the host LLM to run a deeper check",
+                    tool: "zivis_threat_get_inference_prompt",
+                    why: "INFER strategies in each capsule reference a prompt template the user's IDE model executes.",
+                },
+            ]
+            : [
+                {
+                    id: "no_relevant_patterns",
+                    label: "No public-pack patterns matched this repo",
+                    tool: "zivis_threat_list_relevant_capsules",
+                    why: "This is normal for repos without agentic / RAG / self-consistency / multi-tenant patterns. Proprietary patterns may still apply server-side.",
+                },
+            ], summaries.length > 0
+            ? `Found ${summaries.length} relevant capsule(s) in the threat library.`
+            : "No public-pack capsules matched this repo. Proprietary patterns evaluated server-side may still apply.");
+    };
+}
+// ── Helpers ──
+function userCacheRoot() {
+    const home = os.homedir();
+    if (process.platform === "darwin") {
+        return path.join(home, "Library", "Caches", "zivis");
+    }
+    if (process.platform === "win32") {
+        const localAppData = process.env.LOCALAPPDATA ?? path.join(home, "AppData", "Local");
+        return path.join(localAppData, "zivis", "Cache");
+    }
+    const xdg = process.env.XDG_CACHE_HOME;
+    return path.join(xdg ?? path.join(home, ".cache"), "zivis");
+}
+async function resolveArtifactPath(explicit, cwd) {
+    if (explicit) {
+        if (!fssync.existsSync(explicit)) {
+            throw new Error(`Artifact path does not exist: ${explicit}`);
+        }
+        return explicit;
+    }
+    const reposRoot = path.join(userCacheRoot(), "repos");
+    if (!fssync.existsSync(reposRoot)) {
+        throw new Error(`No inspect cache found at ${reposRoot}. Run \`zivis inspect\` from the repo to populate it.`);
+    }
+    // Best-effort: find the newest .json under any repo's inspect/runs/ directory.
+    // The future improvement is to derive the repo-id from cwd's git remote and
+    // pick its newest run only.
+    const candidates = [];
+    for (const repo of await fs.readdir(reposRoot, { withFileTypes: true })) {
+        if (!repo.isDirectory())
+            continue;
+        const runs = path.join(reposRoot, repo.name, "inspect", "runs");
+        if (!fssync.existsSync(runs))
+            continue;
+        for (const entry of await fs.readdir(runs)) {
+            if (!entry.endsWith(".json"))
+                continue;
+            const full = path.join(runs, entry);
+            const stat = await fs.stat(full);
+            candidates.push({ file: full, mtime: stat.mtimeMs });
+        }
+    }
+    if (candidates.length === 0) {
+        throw new Error(`No inspect runs found under ${reposRoot}. Run \`zivis inspect\` from the repo to produce one.`);
+    }
+    candidates.sort((a, b) => b.mtime - a.mtime);
+    return candidates[0].file;
+}
+function matchedTerms(cap, artifact) {
+    const matched = [];
+    const pkgs = new Set();
+    for (const node of artifact.nodes) {
+        if (node.type === "external_dependency" && node.attributes?.package) {
+            pkgs.add(node.attributes.package);
+        }
+    }
+    const langs = new Set(artifact.scope.languages ?? []);
+    const f = cap.relevance_filter;
+    if (!f)
+        return ["always-applicable (no relevance_filter set)"];
+    for (const term of [...(f.any_of ?? []), ...(f.all_of ?? [])]) {
+        if (term.dependency && pkgs.has(term.dependency))
+            matched.push(`dep:${term.dependency}`);
+        if (term.language && langs.has(term.language))
+            matched.push(`language:${term.language}`);
+    }
+    return matched.length > 0 ? matched : ["language match only"];
+}
+//# sourceMappingURL=threat-list-relevant-capsules.js.map

package/dist/tools/threat-list-relevant-capsules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-list-relevant-capsules.js","sourceRoot":"","sources":["../../src/tools/threat-list-relevant-capsules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,cAAc,EACd,oBAAoB,GAGrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AAExF,MAAM,CAAC,MAAM,yCAAyC,GAAG;;;;;;;;;;;6KAWoH,CAAC;AAE9K,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,wLAAwL,CACzL;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;AAWF,MAAM,UAAU,uCAAuC;IACrD,OAAO,KAAK,EAAE,MAAgD,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAExC,IAAI,QAA2B,CAAC;QAChC,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACtE,YAAY,GAAG,QAAQ,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,kBAAkB,CACvB,iCAAkC,GAAa,CAAC,OAAO,EAAE,EACzD;gBACE;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,mDAAmD;oBAC1D,IAAI,EAAE,eAAe;oBACrB,GAAG,EAAE,+EAA+E;iBACrF;aACF,EACD,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;SACxC,CAAC,CAAC,CAAC;QAEJ,OAAO,aAAa,CAClB;YACE,aAAa,EAAE,YAAY;YAC3B,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YACvE,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE;YAClD,cAAc,EAAE,SAAS,CAAC,MAAM;YAChC,iBAAiB,EAAE,SAAS;SAC7B,EACD,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,qBAAqB;oBACzB,KAAK,EAAE,kEAAkE;oBACzE,IAAI,EAAE,0BAA0B;oBAChC,GAAG,EAAE,4FAA4F;iBAClG;gBACD;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,iEAAiE;oBACxE,IAAI,EAAE,mCAAmC;oBACzC,GAAG,EAAE,6FAA6F;iBACnG;aACF;YACH,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,2CAA2C;oBAClD,IAAI,EAAE,qCAAqC;oBAC3C,GAAG,EAAE,8IAA8I;iBACpJ;aACF,EACL,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC,SAAS,SAAS,CAAC,MAAM,6CAA6C;YACxE,CAAC,CAAC,wGAAwG,CAC7G,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,gBAAgB;AAEhB,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAA4B,EAAE,GAAW;IAC1E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,6BAA6B,SAAS,uDAAuD,CAC9F,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,4EAA4E;IAC5E,4BAA4B;IAC5B,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,uDAAuD,CAChG,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,QAA2B;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAE/D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;AAChE,CAAC"}

package/dist/tools/threat-run-matcher.d.ts

@@ -0,0 +1,27 @@
+/**
+ * zivis_threat_run_matcher — evaluate the local pack against a repo graph
+ * artifact + the source files in cwd.
+ *
+ * Phase 3 v1: AST strategies eval for real (via @ast-grep/napi). INFER
+ * strategies emit candidates the host LLM picks up. GRAPH/META/etc. are
+ * surfaced as fired_strategies with match_count: 0 (visible-not-evaluated).
+ *
+ * Plan: docs/plans/LOCAL-REPO-GRAPH-IMPLEMENTATION.md (Phase 3)
+ */
+import { z } from "zod";
+export declare const THREAT_RUN_MATCHER_NAME = "zivis_threat_run_matcher";
+export declare const THREAT_RUN_MATCHER_DESCRIPTION = "Run the local pattern matcher against the latest repo graph artifact and emit normalized threat findings.\n\nUse this when:\n- The user asks ZIVIS to actually evaluate (not just list) which patterns fire on their code\n- After 'zivis inspect' has produced an artifact and the user wants concrete findings\n- \"find security issues in my code\", \"check this against the threat library\", \"what's actually wrong here\"\n\nPhase 3 v1 evaluates AST strategies for real (via @ast-grep/napi for TS/JS, plus Python and Go via dynamic language packs). INFER strategies emit a candidate the host LLM is expected to pick up via zivis_threat_get_inference_prompt and run with its own model. GRAPH / META / DEP / CONFIG strategies are surfaced as fired_strategies with match_count: 0 \u2014 visible-but-not-evaluated for now.\n\nLane assignment per finding:\n- trusted: count of fired deterministic strategies meets the capsule's required_evidence_count\n- inferred: at least one strategy fired but the bar wasn't met (host should run inference to confirm)\n\nThe output is a normalized findings array with pattern_id, lane, confidence, evidence spans, and (for inferred-lane findings) an inference_candidate the host LLM uses to run deeper analysis.";
+export declare const THREAT_RUN_MATCHER_SCHEMA: {
+    artifact_path: z.ZodOptional<z.ZodString>;
+    cwd: z.ZodOptional<z.ZodString>;
+};
+export declare function createThreatRunMatcherHandler(): (params: {
+    artifact_path?: string;
+    cwd?: string;
+}) => Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;