@zivis/mcp 0.1.0-alpha.26 → 0.1.0-alpha.3

package/dist/tools/enterprise/get-threat-model.js

@@ -1,28 +1,29 @@
+/**
+ * zivis_get_threat_model — Get a threat model with all entities
+ *
+ * Maps to: GET /api/threat-models/:id
+ */
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
-export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams/artifacts.
+export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.
 
-Returns the complete threat model. Sub-entities live on the latest ThreatModelVersion. For convenience this tool surfaces them at BOTH levels:
-- Top-level: \`actors\`, \`components\`, \`dataFlows\`, \`attackScenarios\`, \`securityControls\`, \`dataAssets\`, \`testCases\`, \`findings\` — copied from the latest version
-- Nested: \`versions[0].<entity>\` — authoritative source. Older versions in \`versions[N]\` (N≥1) only carry summary metrics, not entities.
-
-Entity contents:
+Returns the complete threat model including:
 - **Actors**: Who interacts with the system (external users, attackers, internal services)
 - **Components**: System parts (APIs, databases, frontends, services) with technology and trust level
 - **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)
-- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, narrative
+- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors
 - **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness
 - **Data Assets**: What sensitive data exists and how it's classified
 - **Test Cases**: Security tests with results (pass/fail/partial/not_tested)
 - **Findings**: Discovered vulnerabilities with severity and remediation recommendations
-- **Linked Diagrams** (\`linked_diagrams\`): First-class \`Diagram\` entities — used for app-level / cross-TM views.
-- **Artifacts** (\`artifacts_summary\`): The diagrams the TM detail page itself displays (Mermaid, canvas state, attack chains, asset inventories). Use \`zivis_list_threat_model_artifacts\` and \`zivis_get_threat_model_artifact\` for full content. NOTE: the platform is mid-migration from artifacts → first-class diagrams; today most TM-internal diagrams live as artifacts.
+- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model
 
 IMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.
 
 Use this to understand the full security posture before making changes, adding entities, or running pen tests.
-After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.`;
+After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.
+Use zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).`;
 export const GET_THREAT_MODEL_SCHEMA = {
     threat_model_id: z
         .string()
@@ -35,34 +36,16 @@ export const GET_THREAT_MODEL_SCHEMA = {
 export function createGetThreatModelHandler(apiClient) {
     return async (params) => {
         try {
-            const [threatModelData, diagramsData, artifactsData] = await Promise.all([
+            // Fetch threat model and linked diagrams in parallel
+            const [threatModelData, diagramsData] = await Promise.all([
                 apiClient.get(`/api/threat-models/${params.threat_model_id}?include=all`),
                 apiClient
                     .get(`/api/diagrams?linkedThreatModelId=${params.threat_model_id}&take=50`)
                     .catch(() => ({ diagrams: [], total: 0 })),
-                apiClient
-                    .get(`/api/threat-models/${params.threat_model_id}/artifacts`)
-                    .catch(() => []),
             ]);
             const sanitized = sanitizeResponse(threatModelData);
-            const versions = Array.isArray(sanitized.versions) ? sanitized.versions : [];
-            const latestVersion = (versions[0] || {});
-            const lifted = {};
-            for (const key of [
-                "actors",
-                "components",
-                "dataFlows",
-                "attackScenarios",
-                "securityControls",
-                "dataAssets",
-                "testCases",
-                "findings",
-            ]) {
-                if (Array.isArray(latestVersion[key])) {
-                    lifted[key] = latestVersion[key];
-                }
-            }
-            const linkedDiagrams = Array.isArray(diagramsData.diagrams)
+            // Attach linked diagrams summary to the response
+            const diagrams = Array.isArray(diagramsData.diagrams)
                 ? diagramsData.diagrams.map((d) => ({
                     diagram_id: d.id,
                     name: d.name,
@@ -74,29 +57,10 @@ export function createGetThreatModelHandler(apiClient) {
                     updated_at: d.updatedAt,
                 }))
                 : [];
-            const artifactsRaw = Array.isArray(artifactsData) ? artifactsData : [];
-            const artifactsSummary = artifactsRaw.map((a) => ({
-                artifact_id: a.id,
-                title: a.title,
-                artifact_type: a.artifactType,
-                content_type: a.contentType,
-                tags: a.tags || [],
-                description: a.description || null,
-                is_stale: a.isStale ?? false,
-                stale_reason: a.staleReason || null,
-                is_edited: a.isEdited ?? false,
-                group_id: a.groupId || null,
-                scope_id: a.scopeId || null,
-                promoted_diagram_id: a.diagramId || null,
-                sort_order: a.sortOrder ?? 0,
-            }));
             const result = {
                 ...sanitized,
-                ...lifted,
-                linked_diagrams: linkedDiagrams,
+                linked_diagrams: diagrams,
                 linked_diagrams_count: diagramsData.total,
-                artifacts_summary: artifactsSummary,
-                artifacts_count: artifactsSummary.length,
             };
             return {
                 content: [
@@ -116,3 +80,4 @@ export function createGetThreatModelHandler(apiClient) {
         }
     };
 }
+//# sourceMappingURL=get-threat-model.js.map

package/dist/tools/enterprise/get-threat-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-threat-model.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-threat-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;gIAiBoF,CAAC;AAEjI,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAAiE,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,SAAS,CAAC,GAAG,CACX,sBAAsB,MAAM,CAAC,eAAe,cAAc,CAC3D;gBACD,SAAS;qBACN,GAAG,CACF,qCAAqC,MAAM,CAAC,eAAe,UAAU,CACtE;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAA4B,CAAC;YAE/E,iDAAiD;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACnD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBACzD,UAAU,EAAE,CAAC,CAAC,EAAE;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,UAAU,EAAG,CAAC,CAAC,MAAiC,EAAE,KAAK,IAAI,IAAI;oBAC/D,gBAAgB,EAAG,CAAC,CAAC,MAAiC,EAAE,WAAW,IAAI,IAAI;oBAC3E,UAAU,EAAE,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACL,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG;gBACb,GAAG,SAAS;gBACZ,eAAe,EAAE,QAAQ;gBACzB,qBAAqB,EAAE,YAAY,CAAC,KAAK;aAC1C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-agents.d.ts

@@ -0,0 +1,42 @@
+/**
+ * zivis_list_agents — List agent instances for the org
+ *
+ * Maps to: GET /api/agent-instances
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_AGENTS_NAME = "zivis_list_agents";
+export declare const LIST_AGENTS_DESCRIPTION = "List all configured agent instances for your organization.\n\nIMPORTANT \u2014 Understand the ZIVIS entity hierarchy:\n- **Agent instance** = a configured agent (e.g., \"Production Recon Agent\", \"API Pen Test Agent\"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.\n- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.\n- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.\n\nAgent types:\n- **recon**: Reconnaissance \u2014 discovers attack surface, endpoints, technologies\n- **pen-test**: Penetration testing \u2014 actively tests for vulnerabilities\n- **ai-red-team**: AI/LLM red teaming \u2014 tests AI systems for prompt injection, jailbreaks, etc.\n- **threat-analysis**: Threat modeling \u2014 builds structured threat models (automated LLM threat ID is pipeline-specific)\n- **code-monitor**: Code monitoring \u2014 continuous scanning of repositories\n- **evidence**: Evidence collection \u2014 gathers compliance evidence\n\nWhen users ask about \"the threat model agent\" or \"the recon agent\", use this tool to find the agent instance, NOT zivis_list_scans.";
+export declare const LIST_AGENTS_SCHEMA: {
+    agent_type: z.ZodOptional<z.ZodEnum<{
+        "pen-test": "pen-test";
+        recon: "recon";
+        "ai-red-team": "ai-red-team";
+        "threat-analysis": "threat-analysis";
+        "code-monitor": "code-monitor";
+        evidence: "evidence";
+    }>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        archived: "archived";
+        paused: "paused";
+        active: "active";
+    }>>;
+    limit: z.ZodDefault<z.ZodNumber>;
+};
+export declare function createListAgentsHandler(apiClient: ApiClient): (params: {
+    agent_type?: string;
+    status?: string;
+    limit?: number;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/tools/enterprise/list-agents.js

@@ -0,0 +1,95 @@
+/**
+ * zivis_list_agents — List agent instances for the org
+ *
+ * Maps to: GET /api/agent-instances
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_AGENTS_NAME = "zivis_list_agents";
+export const LIST_AGENTS_DESCRIPTION = `List all configured agent instances for your organization.
+
+IMPORTANT — Understand the ZIVIS entity hierarchy:
+- **Agent instance** = a configured agent (e.g., "Production Recon Agent", "API Pen Test Agent"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.
+- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.
+- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.
+
+Agent types:
+- **recon**: Reconnaissance — discovers attack surface, endpoints, technologies
+- **pen-test**: Penetration testing — actively tests for vulnerabilities
+- **ai-red-team**: AI/LLM red teaming — tests AI systems for prompt injection, jailbreaks, etc.
+- **threat-analysis**: Threat modeling — builds structured threat models (automated LLM threat ID is pipeline-specific)
+- **code-monitor**: Code monitoring — continuous scanning of repositories
+- **evidence**: Evidence collection — gathers compliance evidence
+
+When users ask about "the threat model agent" or "the recon agent", use this tool to find the agent instance, NOT zivis_list_scans.`;
+export const LIST_AGENTS_SCHEMA = {
+    agent_type: z
+        .enum(["pen-test", "ai-red-team", "recon", "threat-analysis", "code-monitor", "evidence"])
+        .optional()
+        .describe("Filter by agent type"),
+    status: z
+        .enum(["active", "paused", "archived"])
+        .optional()
+        .describe("Filter by agent status"),
+    limit: z
+        .number()
+        .min(1)
+        .max(50)
+        .default(20)
+        .describe("Maximum number of results (1-50, default 20)"),
+};
+export function createListAgentsHandler(apiClient) {
+    return async (params) => {
+        try {
+            const query = new URLSearchParams();
+            if (params.agent_type)
+                query.set("agentType", params.agent_type);
+            if (params.status)
+                query.set("status", params.status);
+            if (params.limit)
+                query.set("limit", String(params.limit));
+            query.set("includeOpenStats", "true");
+            const queryStr = query.toString();
+            const path = `/api/agent-instances${queryStr ? `?${queryStr}` : ""}`;
+            const data = await apiClient.get(path);
+            const sanitized = sanitizeResponse(data);
+            const instances = Array.isArray(sanitized.instances) ? sanitized.instances : [];
+            const summary = instances.map((agent) => ({
+                agent_instance_id: agent.id,
+                name: agent.name,
+                agent_type: agent.agentType,
+                status: agent.status,
+                target_url: agent.targetUrl,
+                description: agent.description || null,
+                is_enabled: agent.isEnabled,
+                last_scan_at: agent.lastScanAt || null,
+                created_at: agent.createdAt,
+                updated_at: agent.updatedAt,
+                open_critical_count: agent.openCriticalCount ?? null,
+                open_findings_total: agent.openFindingsTotal ?? null,
+                campaigns: Array.isArray(agent.campaignLinks)
+                    ? agent.campaignLinks.map((link) => {
+                        const campaign = link.campaign;
+                        return campaign ? { id: campaign.id, name: campaign.name } : null;
+                    }).filter(Boolean)
+                    : [],
+            }));
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({ total: data.total, agents: summary }, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list agents";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-agents.js.map

package/dist/tools/enterprise/list-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-agents.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-agents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;oIAe6F,CAAC;AAErI,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;SACzF,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;SACtC,QAAQ,EAAE;SACV,QAAQ,CAAC,wBAAwB,CAAC;IACrC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,8CAA8C,CAAC;CAC5D,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,SAAoB;IAC1D,OAAO,KAAK,EAAE,MAAgE,EAAE,EAAE;QAChF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,UAAU;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,uBAAuB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA0D,IAAI,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA4B,CAAC;YACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAEhF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC;gBACjE,iBAAiB,EAAE,KAAK,CAAC,EAAE;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;oBAC3C,CAAC,CAAE,KAAK,CAAC,aAAgD,CAAC,GAAG,CAAC,CAAC,IAA6B,EAAE,EAAE;wBAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA+C,CAAC;wBACtE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACpB,CAAC,CAAC,EAAE;aACP,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-report-issues.d.ts

@@ -0,0 +1,36 @@
+/**
+ * zivis_list_report_issues — List remediation checklist issues for a campaign report
+ *
+ * Maps to: GET /api/reports/:reportId/issues
+ * Also uses: POST /api/reports/for-campaign/:campaignId
+ */
+import { z } from "zod";
+import type { ApiClient } from "../../api-client.js";
+export declare const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
+export declare const LIST_REPORT_ISSUES_DESCRIPTION = "List all issues in a campaign's remediation checklist with status summary.\n\nReturns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.\n\nFilter by status to see only open, in-progress, or completed items.";
+export declare const LIST_REPORT_ISSUES_SCHEMA: {
+    campaign_id: z.ZodOptional<z.ZodString>;
+    report_id: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        open: "open";
+        in_progress: "in_progress";
+        done: "done";
+    }>>;
+};
+export declare function createListReportIssuesHandler(apiClient: ApiClient): (params: {
+    campaign_id?: string;
+    report_id?: string;
+    status?: string;
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/enterprise/list-report-issues.js

@@ -0,0 +1,50 @@
+/**
+ * zivis_list_report_issues — List remediation checklist issues for a campaign report
+ *
+ * Maps to: GET /api/reports/:reportId/issues
+ * Also uses: POST /api/reports/for-campaign/:campaignId
+ */
+import { z } from "zod";
+import { sanitizeResponse } from "../../sanitize.js";
+export const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
+export const LIST_REPORT_ISSUES_DESCRIPTION = `List all issues in a campaign's remediation checklist with status summary.
+
+Returns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.
+
+Filter by status to see only open, in-progress, or completed items.`;
+export const LIST_REPORT_ISSUES_SCHEMA = {
+    campaign_id: z.string().optional().describe("Campaign UUID — auto-resolves to report"),
+    report_id: z.string().optional().describe("Report UUID (alternative to campaign_id)"),
+    status: z.enum(["open", "in_progress", "done"]).optional().describe("Filter by status"),
+};
+export function createListReportIssuesHandler(apiClient) {
+    return async (params) => {
+        try {
+            let reportId = params.report_id;
+            // Resolve campaign → report if needed
+            if (!reportId && params.campaign_id) {
+                const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
+                reportId = reportData.reportId;
+            }
+            if (!reportId) {
+                return {
+                    content: [{ type: "text", text: "Error: Provide either campaign_id or report_id" }],
+                    isError: true,
+                };
+            }
+            const queryParams = params.status ? `?status=${params.status}` : "";
+            const data = await apiClient.get(`/api/reports/${reportId}/issues${queryParams}`);
+            return {
+                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to list report issues";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    };
+}
+//# sourceMappingURL=list-report-issues.js.map

package/dist/tools/enterprise/list-report-issues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-report-issues.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-report-issues.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;oEAIsB,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CACxF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAEhC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;oBAC5F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gBAAgB,QAAQ,UAAU,WAAW,EAAE,CAChD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-threat-models.d.ts

@@ -1,3 +1,8 @@
+/**
+ * zivis_list_threat_models — List threat models for the org
+ *
+ * Maps to: GET /api/threat-models
+ */
 import { z } from "zod";
 import type { ApiClient } from "../../api-client.js";
 export declare const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";

package/dist/tools/enterprise/list-threat-models.js

@@ -1,3 +1,8 @@
+/**
+ * zivis_list_threat_models — List threat models for the org
+ *
+ * Maps to: GET /api/threat-models
+ */
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";
@@ -35,11 +40,13 @@ export function createListThreatModelsHandler(apiClient) {
             const path = `/api/threat-models${queryStr ? `?${queryStr}` : ""}`;
             const data = await apiClient.get(path);
             const sanitized = sanitizeResponse(data);
+            // Fetch diagram counts for each threat model in parallel
             const threatModels = Array.isArray(sanitized) ? sanitized : [];
             const diagramCounts = await Promise.all(threatModels.map((tm) => apiClient
                 .get(`/api/diagrams?linkedThreatModelId=${tm.id}&take=1`)
                 .then((res) => res.total ?? 0)
                 .catch(() => 0)));
+            // Format with clear ID labeling to prevent confusion with scan/agent IDs
             const summary = Array.isArray(sanitized)
                 ? sanitized.map((tm, i) => ({
                     threat_model_id: tm.id,
@@ -72,3 +79,4 @@ export function createListThreatModelsHandler(apiClient) {
         }
     };
 }
+//# sourceMappingURL=list-threat-models.js.map

package/dist/tools/enterprise/list-threat-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-threat-models.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-threat-models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;uMASyJ,CAAC;AAExM,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;SAC5E,QAAQ,EAAE;SACV,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAA2C,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,qBAAqB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA4B,IAAI,CAAC,CAAC;YAElE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA8B,CAAC;YAEtE,yDAAyD;YACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACtB,SAAS;iBACN,GAAG,CACF,qCAAqC,EAAE,CAAC,EAAE,SAAS,CACpD;iBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;iBAC7B,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAClB,CACF,CAAC;YAEF,yEAAyE;YACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAA2B,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;oBACzD,eAAe,EAAE,EAAE,CAAC,EAAE;oBACtB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,WAAW,EAAE,EAAE,CAAC,WAAW;oBAC3B,WAAW,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI;oBACvC,QAAQ,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;oBACjC,cAAc,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;oBACxC,qBAAqB,EAAE,aAAa,CAAC,CAAC,CAAC;oBACvC,UAAU,EAAE,EAAE,CAAC,SAAS;oBACxB,UAAU,EAAE,EAAE,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACL,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBACvC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-actor.d.ts

@@ -1,7 +1,12 @@
+/**
+ * zivis_manage_actor — Create, update, or delete threat actors in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
+ */
 import { z } from "zod";
 import type { ApiClient } from "../../api-client.js";
 export declare const MANAGE_ACTOR_NAME = "zivis_manage_actor";
-export declare const MANAGE_ACTOR_DESCRIPTION = "Create, update, or delete a threat actor in a threat model.\n\nWhen to use (plain English): call this when the user describes who interacts with or threatens the app. Common phrasings:\n- \"users / end users / customers / our users can ...\"\n- \"admins / support team / internal employees ...\"\n- \"attacker / adversary / bad actor / malicious user ...\"\n- \"insider / rogue employee ...\"\n- \"vendor / partner / integration partner ...\"\n- \"bot / scraper / automated agent ...\"\n- \"<external service> calls our API\" (the external service is an actor too)\n\nIf you got here from zivis_threat_guide, the args_preview already maps actor_type and trust_level \u2014 start from those and confirm only what's unclear.\n\nThreat actors represent entities that interact with or threaten the system. Each actor has a trust level, type, and capabilities.\n\nAfter create: ask which components this actor interacts with so a data flow can be modeled.\n\nActions:\n- create: Add a new threat actor (requires name, actor_type, trust_level)\n- update: Modify an existing actor (requires actor_id)\n- delete: Remove an actor (requires actor_id)";
+export declare const MANAGE_ACTOR_DESCRIPTION = "Create, update, or delete a threat actor in a threat model.\n\nThreat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.\n\nActions:\n- create: Add a new threat actor (requires name, actor_type, trust_level)\n- update: Modify an existing actor (requires actor_id)\n- delete: Remove an actor (requires actor_id)";
 export declare const MANAGE_ACTOR_SCHEMA: {
     threat_model_id: z.ZodString;
     action: z.ZodEnum<{

package/dist/tools/enterprise/manage-actor.js

@@ -1,22 +1,14 @@
+/**
+ * zivis_manage_actor — Create, update, or delete threat actors in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
+ */
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const MANAGE_ACTOR_NAME = "zivis_manage_actor";
 export const MANAGE_ACTOR_DESCRIPTION = `Create, update, or delete a threat actor in a threat model.
 
-When to use (plain English): call this when the user describes who interacts with or threatens the app. Common phrasings:
-- "users / end users / customers / our users can ..."
-- "admins / support team / internal employees ..."
-- "attacker / adversary / bad actor / malicious user ..."
-- "insider / rogue employee ..."
-- "vendor / partner / integration partner ..."
-- "bot / scraper / automated agent ..."
-- "<external service> calls our API" (the external service is an actor too)
-
-If you got here from zivis_threat_guide, the args_preview already maps actor_type and trust_level — start from those and confirm only what's unclear.
-
-Threat actors represent entities that interact with or threaten the system. Each actor has a trust level, type, and capabilities.
-
-After create: ask which components this actor interacts with so a data flow can be modeled.
+Threat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.
 
 Actions:
 - create: Add a new threat actor (requires name, actor_type, trust_level)
@@ -104,3 +96,4 @@ export function createManageActorHandler(apiClient) {
         }
     };
 }
+//# sourceMappingURL=manage-actor.js.map

package/dist/tools/enterprise/manage-actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-actor.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-actor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;8CAOM,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC9F,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;SACvD,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;SAC1D,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAClG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;CAC7H,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAErD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC9D,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;wBAC9G,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,SAAS,EAC9C;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,UAAU;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC1D,IAAI,MAAM,CAAC,WAAW;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC7D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBAEjE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,WAAW,QAAQ,EAAE,EAC1D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,WAAW,QAAQ,EAAE,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-attack-scenario.d.ts

@@ -1,7 +1,12 @@
+/**
+ * zivis_manage_attack_scenario — Create, update, or delete attack scenarios
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/attack-scenarios
+ */
 import { z } from "zod";
 import type { ApiClient } from "../../api-client.js";
 export declare const MANAGE_ATTACK_SCENARIO_NAME = "zivis_manage_attack_scenario";
-export declare const MANAGE_ATTACK_SCENARIO_DESCRIPTION = "Create, update, or delete an attack scenario in a threat model.\n\nWhen to use (plain English): call this when the user describes a security worry, \"what if\" question, or specific failure mode. Common phrasings:\n- \"what if <bad thing happens>\"\n- \"could someone <attack action>\"\n- \"I'm worried about <X> being abused / leaked / hacked\"\n- \"how would an attacker <do X>\"\n- \"is <Y> safe from <Z>\"\n- mentions of: prompt injection, jailbreak, data exfiltration, privilege escalation, account takeover, supply chain, abuse\n\nBefore creating a scenario, the threat model needs at least one entry_point component (where the attack starts) and a target component (where the attacker wants to go). If either is missing, model components first.\n\nThe narrative should be a 2\u20135 sentence story: who attacks, where they enter, what they exploit, what they achieve. Don't write a textbook chapter.\n\nAfter create: ask which test cases should validate this scenario. zivis_manage_test_case curates tests against the scenario; the platform later uses those to drive automated red-team runs.\n\nActions:\n- create: Add a new scenario (requires title, narrative, entry_point_id, target_id)\n- update: Update scenario status/notes (requires scenario_id)\n- delete: Remove a scenario (requires scenario_id)";
+export declare const MANAGE_ATTACK_SCENARIO_DESCRIPTION = "Create, update, or delete an attack scenario in a threat model.\n\nAttack scenarios describe specific attack paths \u2014 how a threat actor could exploit vulnerabilities to achieve their objective. They link actors, components, and attack vectors into a cohesive narrative.\n\nActions:\n- create: Add a new scenario (requires title, narrative, entry_point_id, target_id)\n- update: Update scenario status/notes (requires scenario_id)\n- delete: Remove a scenario (requires scenario_id)";
 export declare const MANAGE_ATTACK_SCENARIO_SCHEMA: {
     threat_model_id: z.ZodString;
     action: z.ZodEnum<{

package/dist/tools/enterprise/manage-attack-scenario.js

@@ -1,21 +1,14 @@
+/**
+ * zivis_manage_attack_scenario — Create, update, or delete attack scenarios
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/attack-scenarios
+ */
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const MANAGE_ATTACK_SCENARIO_NAME = "zivis_manage_attack_scenario";
 export const MANAGE_ATTACK_SCENARIO_DESCRIPTION = `Create, update, or delete an attack scenario in a threat model.
 
-When to use (plain English): call this when the user describes a security worry, "what if" question, or specific failure mode. Common phrasings:
-- "what if <bad thing happens>"
-- "could someone <attack action>"
-- "I'm worried about <X> being abused / leaked / hacked"
-- "how would an attacker <do X>"
-- "is <Y> safe from <Z>"
-- mentions of: prompt injection, jailbreak, data exfiltration, privilege escalation, account takeover, supply chain, abuse
-
-Before creating a scenario, the threat model needs at least one entry_point component (where the attack starts) and a target component (where the attacker wants to go). If either is missing, model components first.
-
-The narrative should be a 2–5 sentence story: who attacks, where they enter, what they exploit, what they achieve. Don't write a textbook chapter.
-
-After create: ask which test cases should validate this scenario. zivis_manage_test_case curates tests against the scenario; the platform later uses those to drive automated red-team runs.
+Attack scenarios describe specific attack paths — how a threat actor could exploit vulnerabilities to achieve their objective. They link actors, components, and attack vectors into a cohesive narrative.
 
 Actions:
 - create: Add a new scenario (requires title, narrative, entry_point_id, target_id)
@@ -93,3 +86,4 @@ export function createManageAttackScenarioHandler(apiClient) {
         }
     };
 }
+//# sourceMappingURL=manage-attack-scenario.js.map

package/dist/tools/enterprise/manage-attack-scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-attack-scenario.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-attack-scenario.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAE1E,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;;;mDAOC,CAAC;AAEpD,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACpH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;IAC7H,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAClG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC7H,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACxJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IAC1G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACnG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACtG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAAC,SAAoB;IACpE,OAAO,KAAK,EAAE,MAgBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;YAExD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC;oBAC9F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gFAAgF,EAAE,CAAC;wBAC5H,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,mBAAmB,EACxD;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,YAAY,EAAE,MAAM,CAAC,cAAc;oBACnC,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,YAAY,EAAE,MAAM,CAAC,aAAa;oBAClC,eAAe,EAAE,MAAM,CAAC,gBAAgB;oBACxC,cAAc,EAAE,MAAM,CAAC,eAAe;iBACvC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAExE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,qBAAqB,WAAW,EAAE,EACvE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,qBAAqB,WAAW,EAAE,CACxE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;YACxF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-component.d.ts

@@ -1,7 +1,12 @@
+/**
+ * zivis_manage_component — Create, update, or delete components in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/components
+ */
 import { z } from "zod";
 import type { ApiClient } from "../../api-client.js";
 export declare const MANAGE_COMPONENT_NAME = "zivis_manage_component";
-export declare const MANAGE_COMPONENT_DESCRIPTION = "Create, update, or delete an architectural component in a threat model.\n\nWhen to use (plain English): call this when the user describes a piece of their system or an external service that's part of the architecture. Common phrasings:\n- \"we have a <X> service / our backend / the API gateway / our frontend\"\n- \"we just added <Stripe / OpenAI / Auth0 / Twilio / Datadog / S3>\"\n- \"we use <library / framework> for X\"\n- \"<service> talks to / calls / sends data to <other service>\" \u2014 both endpoints are components\n- \"we deploy on <Vercel / Lambda / k8s>\" (compute platform is a component)\n- mentions of any external SaaS, identity provider, message queue, CDN, secrets manager\n\nPick component_type:\n- entry_point \u2014 anything users hit first (login, public API, webhook receiver)\n- orchestrator \u2014 controllers, routers, API gateways, workflow engines\n- data_store \u2014 DBs, caches, blob storage\n- external_service \u2014 any third-party SaaS the app integrates with (Stripe, OpenAI, etc.)\n- identity_provider \u2014 auth systems (Auth0, Okta, WorkOS)\n- worker \u2014 background processors, queue consumers\n- secrets_manager, message_queue, cdn, proxy \u2014 when those specific terms apply\n\nIf you got here from zivis_threat_guide, args_preview already maps trust + category for known vendors. Use those.\n\nAfter create: ask what data flows in/out of this component so data flows can be modeled.\n\nActions:\n- create: Add a new component (requires name, component_type)\n- update: Modify an existing component (requires component_id)\n- delete: Remove a component (requires component_id)";
+export declare const MANAGE_COMPONENT_DESCRIPTION = "Create, update, or delete an architectural component in a threat model.\n\nComponents represent the building blocks of the system being modeled (e.g., API Gateway, Database, Frontend App, Authentication Service).\n\nActions:\n- create: Add a new component (requires name, component_type)\n- update: Modify an existing component (requires component_id)\n- delete: Remove a component (requires component_id)";
 export declare const MANAGE_COMPONENT_SCHEMA: {
     threat_model_id: z.ZodString;
     action: z.ZodEnum<{

package/dist/tools/enterprise/manage-component.js

@@ -1,28 +1,14 @@
+/**
+ * zivis_manage_component — Create, update, or delete components in a threat model
+ *
+ * Maps to: POST/PATCH/DELETE /api/threat-models/:id/components
+ */
 import { z } from "zod";
 import { sanitizeResponse } from "../../sanitize.js";
 export const MANAGE_COMPONENT_NAME = "zivis_manage_component";
 export const MANAGE_COMPONENT_DESCRIPTION = `Create, update, or delete an architectural component in a threat model.
 
-When to use (plain English): call this when the user describes a piece of their system or an external service that's part of the architecture. Common phrasings:
-- "we have a <X> service / our backend / the API gateway / our frontend"
-- "we just added <Stripe / OpenAI / Auth0 / Twilio / Datadog / S3>"
-- "we use <library / framework> for X"
-- "<service> talks to / calls / sends data to <other service>" — both endpoints are components
-- "we deploy on <Vercel / Lambda / k8s>" (compute platform is a component)
-- mentions of any external SaaS, identity provider, message queue, CDN, secrets manager
-
-Pick component_type:
-- entry_point — anything users hit first (login, public API, webhook receiver)
-- orchestrator — controllers, routers, API gateways, workflow engines
-- data_store — DBs, caches, blob storage
-- external_service — any third-party SaaS the app integrates with (Stripe, OpenAI, etc.)
-- identity_provider — auth systems (Auth0, Okta, WorkOS)
-- worker — background processors, queue consumers
-- secrets_manager, message_queue, cdn, proxy — when those specific terms apply
-
-If you got here from zivis_threat_guide, args_preview already maps trust + category for known vendors. Use those.
-
-After create: ask what data flows in/out of this component so data flows can be modeled.
+Components represent the building blocks of the system being modeled (e.g., API Gateway, Database, Frontend App, Authentication Service).
 
 Actions:
 - create: Add a new component (requires name, component_type)
@@ -101,3 +87,4 @@ export function createManageComponentHandler(apiClient) {
         }
     };
 }
+//# sourceMappingURL=manage-component.js.map

package/dist/tools/enterprise/manage-component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-component.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-component.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;qDAOS,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;SACvK,QAAQ,EAAE;SACV,QAAQ,CAAC,mBAAmB,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACzG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC3F,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEzD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;wBACpG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,aAAa,EAAE,MAAM,CAAC,cAAc;iBACrC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBACtE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC3E,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBAEpF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,eAAe,YAAY,EAAE,EAClE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,eAAe,YAAY,EAAE,CACnE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}