@zivis/mcp 0.1.0-alpha.9 → 0.1.6

package/dist/tools/enterprise/manage-component.js

@@ -1,90 +0,0 @@
-/**
- * zivis_manage_component — Create, update, or delete components in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/components
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_COMPONENT_NAME = "zivis_manage_component";
-export const MANAGE_COMPONENT_DESCRIPTION = `Create, update, or delete an architectural component in a threat model.
-
-Components represent the building blocks of the system being modeled (e.g., API Gateway, Database, Frontend App, Authentication Service).
-
-Actions:
-- create: Add a new component (requires name, component_type)
-- update: Modify an existing component (requires component_id)
-- delete: Remove a component (requires component_id)`;
-export const MANAGE_COMPONENT_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
-    component_id: z.string().optional().describe("Component UUID (required for update/delete)"),
-    name: z.string().optional().describe("Component name (e.g., 'API Gateway', 'User Database')"),
-    component_type: z
-        .enum(["entry_point", "orchestrator", "compute_sandbox", "worker", "data_store", "proxy", "external_service", "trust_boundary", "identity_provider", "secrets_manager"])
-        .optional()
-        .describe("Type of component"),
-    description: z.string().optional().describe("Description of the component's purpose"),
-    technology: z.string().optional().describe("Technology stack (e.g., 'Express.js', 'PostgreSQL')"),
-    is_external: z.boolean().optional().describe("Whether this component is external to the system boundary"),
-    trust_boundary: z.string().optional().describe("Trust boundary this component belongs to"),
-};
-export function createManageComponentHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, component_id } = params;
-            if ((action === "update" || action === "delete") && !component_id) {
-                return {
-                    content: [{ type: "text", text: "Error: component_id is required for update/delete" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.name || !params.component_type) {
-                    return {
-                        content: [{ type: "text", text: "Error: name and component_type are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/components`, {
-                    name: params.name,
-                    componentType: params.component_type,
-                    description: params.description,
-                    technology: params.technology,
-                    isExternal: params.is_external,
-                    trustBoundary: params.trust_boundary,
-                });
-            }
-            else if (action === "update") {
-                const body = {};
-                if (params.name)
-                    body.name = params.name;
-                if (params.component_type)
-                    body.componentType = params.component_type;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.technology !== undefined)
-                    body.technology = params.technology;
-                if (params.is_external !== undefined)
-                    body.isExternal = params.is_external;
-                if (params.trust_boundary !== undefined)
-                    body.trustBoundary = params.trust_boundary;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/components/${component_id}`, body);
-            }
-            else {
-                data = await apiClient.del(`/api/threat-models/${threat_model_id}/components/${component_id}`);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage component";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-component.js.map

package/dist/tools/enterprise/manage-component.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-component.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-component.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;qDAOS,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;SACvK,QAAQ,EAAE;SACV,QAAQ,CAAC,mBAAmB,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACzG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC3F,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEzD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;wBACpG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,aAAa,EAAE,MAAM,CAAC,cAAc;iBACrC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBACtE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC3E,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;gBAEpF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,eAAe,YAAY,EAAE,EAClE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,eAAe,YAAY,EAAE,CACnE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-data-asset.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-data-asset.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-data-asset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,6BAA6B,GAAG;;;;;;;kDAOK,CAAC;AAEnD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACjF,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;SACtE,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACnG,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC7E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CAC1E,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAErD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;wBACpG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,cAAc,EACnD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,eAAe,EAAE,MAAM,CAAC,gBAAgB;oBACxC,eAAe,EAAE,MAAM,CAAC,gBAAgB;iBACzC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc;oBAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;gBACvE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;gBACvD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAC1F,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAE1F,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,gBAAgB,QAAQ,EAAE,EAC/D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,gBAAgB,QAAQ,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-data-flow.d.ts

@@ -1,57 +0,0 @@
-/**
- * zivis_manage_data_flow — Create, update, or delete data flows in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/data-flows
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_DATA_FLOW_NAME = "zivis_manage_data_flow";
-export declare const MANAGE_DATA_FLOW_DESCRIPTION = "Create, update, or delete a data flow between components in a threat model.\n\nData flows represent the movement of data between components. They are critical for identifying where data crosses trust boundaries and where threats may exist.\n\nActions:\n- create: Add a new data flow (requires name, source_component_id, target_component_id)\n- update: Modify an existing data flow (requires flow_id)\n- delete: Remove a data flow (requires flow_id)";
-export declare const MANAGE_DATA_FLOW_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    flow_id: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    source_component_id: z.ZodOptional<z.ZodString>;
-    target_component_id: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    protocol: z.ZodOptional<z.ZodString>;
-    data_classification: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        internal: "internal";
-        public: "public";
-        confidential: "confidential";
-        restricted: "restricted";
-    }>>;
-    is_encrypted: z.ZodOptional<z.ZodBoolean>;
-    crosses_trust_boundary: z.ZodOptional<z.ZodBoolean>;
-};
-export declare function createManageDataFlowHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    flow_id?: string;
-    name?: string;
-    source_component_id?: string;
-    target_component_id?: string;
-    description?: string;
-    protocol?: string;
-    data_classification?: string;
-    is_encrypted?: boolean;
-    crosses_trust_boundary?: boolean;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/manage-data-flow.js

@@ -1,98 +0,0 @@
-/**
- * zivis_manage_data_flow — Create, update, or delete data flows in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/data-flows
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_DATA_FLOW_NAME = "zivis_manage_data_flow";
-export const MANAGE_DATA_FLOW_DESCRIPTION = `Create, update, or delete a data flow between components in a threat model.
-
-Data flows represent the movement of data between components. They are critical for identifying where data crosses trust boundaries and where threats may exist.
-
-Actions:
-- create: Add a new data flow (requires name, source_component_id, target_component_id)
-- update: Modify an existing data flow (requires flow_id)
-- delete: Remove a data flow (requires flow_id)`;
-export const MANAGE_DATA_FLOW_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
-    flow_id: z.string().optional().describe("Data flow UUID (required for update/delete)"),
-    name: z.string().optional().describe("Flow name (e.g., 'User Auth Request', 'API Response')"),
-    source_component_id: z.string().optional().describe("Source component UUID"),
-    target_component_id: z.string().optional().describe("Target component UUID"),
-    description: z.string().optional().describe("Description of what data flows and why"),
-    protocol: z.string().optional().describe("Protocol used (e.g., 'HTTPS', 'gRPC', 'WebSocket')"),
-    data_classification: z
-        .enum(["public", "internal", "confidential", "restricted", "critical"])
-        .optional()
-        .describe("Classification of data in this flow"),
-    is_encrypted: z.boolean().optional().describe("Whether the data flow is encrypted in transit"),
-    crosses_trust_boundary: z.boolean().optional().describe("Whether this flow crosses a trust boundary"),
-};
-export function createManageDataFlowHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, flow_id } = params;
-            if ((action === "update" || action === "delete") && !flow_id) {
-                return {
-                    content: [{ type: "text", text: "Error: flow_id is required for update/delete" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.name || !params.source_component_id || !params.target_component_id) {
-                    return {
-                        content: [{ type: "text", text: "Error: name, source_component_id, and target_component_id are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/data-flows`, {
-                    name: params.name,
-                    sourceComponentId: params.source_component_id,
-                    targetComponentId: params.target_component_id,
-                    description: params.description,
-                    protocol: params.protocol,
-                    dataClassification: params.data_classification,
-                    isEncrypted: params.is_encrypted,
-                    crossesTrustBoundary: params.crosses_trust_boundary,
-                });
-            }
-            else if (action === "update") {
-                const body = {};
-                if (params.name)
-                    body.name = params.name;
-                if (params.source_component_id)
-                    body.sourceComponentId = params.source_component_id;
-                if (params.target_component_id)
-                    body.targetComponentId = params.target_component_id;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.protocol !== undefined)
-                    body.protocol = params.protocol;
-                if (params.data_classification)
-                    body.dataClassification = params.data_classification;
-                if (params.is_encrypted !== undefined)
-                    body.isEncrypted = params.is_encrypted;
-                if (params.crosses_trust_boundary !== undefined)
-                    body.crossesTrustBoundary = params.crosses_trust_boundary;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/data-flows/${flow_id}`, body);
-            }
-            else {
-                data = await apiClient.del(`/api/threat-models/${threat_model_id}/data-flows/${flow_id}`);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage data flow";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-data-flow.js.map

package/dist/tools/enterprise/manage-data-flow.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-data-flow.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-data-flow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;gDAOI,CAAC;AAEjD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC5E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACrF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC9F,mBAAmB,EAAE,CAAC;SACnB,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;SACtE,QAAQ,EAAE;SACV,QAAQ,CAAC,qCAAqC,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC9F,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CACtG,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAYb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;YAEpD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;oBAC1F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC/E,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mFAAmF,EAAE,CAAC;wBAC/H,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;oBAC7C,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;oBAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,kBAAkB,EAAE,MAAM,CAAC,mBAAmB;oBAC9C,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,oBAAoB,EAAE,MAAM,CAAC,sBAAsB;iBACpD,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,mBAAmB;oBAAE,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC;gBACpF,IAAI,MAAM,CAAC,mBAAmB;oBAAE,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC;gBACpF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACnE,IAAI,MAAM,CAAC,mBAAmB;oBAAE,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,mBAAmB,CAAC;gBACrF,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAC9E,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS;oBAAE,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC;gBAE3G,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,eAAe,OAAO,EAAE,EAC7D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,eAAe,OAAO,EAAE,CAC9D,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-finding.d.ts

@@ -1,69 +0,0 @@
-/**
- * zivis_manage_finding — Create or update findings in a threat model
- *
- * Maps to: POST/PATCH /api/threat-models/:id/findings
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_FINDING_NAME = "zivis_manage_finding";
-export declare const MANAGE_FINDING_DESCRIPTION = "Create or update a finding (vulnerability) in a threat model.\n\nFindings represent confirmed or suspected vulnerabilities discovered during analysis or pen testing. They link to components, attack scenarios, and can be tracked through remediation.\n\nActions:\n- create: Add a new finding (requires title, severity)\n- update: Modify an existing finding (requires finding_id) \u2014 use to update status, add notes, etc.";
-export declare const MANAGE_FINDING_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-    }>;
-    finding_id: z.ZodOptional<z.ZodString>;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-    status: z.ZodOptional<z.ZodEnum<{
-        false_positive: "false_positive";
-        open: "open";
-        in_progress: "in_progress";
-        mitigated: "mitigated";
-        verified: "verified";
-        accepted_risk: "accepted_risk";
-    }>>;
-    category: z.ZodOptional<z.ZodString>;
-    component_id: z.ZodOptional<z.ZodString>;
-    attack_scenario_id: z.ZodOptional<z.ZodString>;
-    cwe_id: z.ZodOptional<z.ZodString>;
-    cvss_score: z.ZodOptional<z.ZodNumber>;
-    remediation: z.ZodOptional<z.ZodString>;
-    proof_of_concept: z.ZodOptional<z.ZodString>;
-};
-export declare function createManageFindingHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update";
-    finding_id?: string;
-    title?: string;
-    description?: string;
-    severity?: string;
-    status?: string;
-    category?: string;
-    component_id?: string;
-    attack_scenario_id?: string;
-    cwe_id?: string;
-    cvss_score?: number;
-    remediation?: string;
-    proof_of_concept?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/manage-finding.js

@@ -1,106 +0,0 @@
-/**
- * zivis_manage_finding — Create or update findings in a threat model
- *
- * Maps to: POST/PATCH /api/threat-models/:id/findings
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_FINDING_NAME = "zivis_manage_finding";
-export const MANAGE_FINDING_DESCRIPTION = `Create or update a finding (vulnerability) in a threat model.
-
-Findings represent confirmed or suspected vulnerabilities discovered during analysis or pen testing. They link to components, attack scenarios, and can be tracked through remediation.
-
-Actions:
-- create: Add a new finding (requires title, severity)
-- update: Modify an existing finding (requires finding_id) — use to update status, add notes, etc.`;
-export const MANAGE_FINDING_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update"]).describe("Action to perform"),
-    finding_id: z.string().optional().describe("Finding UUID (required for update)"),
-    title: z.string().optional().describe("Finding title (e.g., 'SQL Injection in user search endpoint')"),
-    description: z.string().optional().describe("Detailed description of the vulnerability"),
-    severity: z.enum(["critical", "high", "medium", "low", "info"]).optional().describe("Severity level"),
-    status: z
-        .enum(["open", "in_progress", "mitigated", "verified", "accepted_risk", "false_positive"])
-        .optional()
-        .describe("Finding status"),
-    category: z.string().optional().describe("Category (e.g., 'injection', 'authentication', 'authorization')"),
-    component_id: z.string().optional().describe("Affected component UUID"),
-    attack_scenario_id: z.string().optional().describe("Related attack scenario UUID"),
-    cwe_id: z.string().optional().describe("CWE identifier (e.g., 'CWE-89')"),
-    cvss_score: z.number().min(0).max(10).optional().describe("CVSS score (0-10)"),
-    remediation: z.string().optional().describe("Recommended remediation steps"),
-    proof_of_concept: z.string().optional().describe("Proof of concept or reproduction steps"),
-};
-export function createManageFindingHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, finding_id } = params;
-            if (action === "update" && !finding_id) {
-                return {
-                    content: [{ type: "text", text: "Error: finding_id is required for update" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.title || !params.severity) {
-                    return {
-                        content: [{ type: "text", text: "Error: title and severity are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/findings`, {
-                    title: params.title,
-                    description: params.description,
-                    severity: params.severity,
-                    status: params.status || "open",
-                    category: params.category,
-                    componentId: params.component_id,
-                    attackScenarioId: params.attack_scenario_id,
-                    cweId: params.cwe_id,
-                    cvssScore: params.cvss_score,
-                    remediation: params.remediation,
-                    proofOfConcept: params.proof_of_concept,
-                });
-            }
-            else {
-                const body = {};
-                if (params.title)
-                    body.title = params.title;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.severity)
-                    body.severity = params.severity;
-                if (params.status)
-                    body.status = params.status;
-                if (params.category)
-                    body.category = params.category;
-                if (params.component_id)
-                    body.componentId = params.component_id;
-                if (params.attack_scenario_id)
-                    body.attackScenarioId = params.attack_scenario_id;
-                if (params.cwe_id)
-                    body.cweId = params.cwe_id;
-                if (params.cvss_score !== undefined)
-                    body.cvssScore = params.cvss_score;
-                if (params.remediation !== undefined)
-                    body.remediation = params.remediation;
-                if (params.proof_of_concept !== undefined)
-                    body.proofOfConcept = params.proof_of_concept;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/findings/${finding_id}`, body);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage finding";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-finding.js.map

package/dist/tools/enterprise/manage-finding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-finding.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-finding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;mGAMyD,CAAC;AAEpG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IACtG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACrG,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;SACzF,QAAQ,EAAE;SACV,QAAQ,CAAC,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC3G,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACvE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC5E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CAC3F,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAeb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;YAEvD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;oBACtF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;wBAC/F,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,WAAW,EAChD;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,cAAc,EAAE,MAAM,CAAC,gBAAgB;iBACxC,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5C,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/C,IAAI,MAAM,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAChE,IAAI,MAAM,CAAC,kBAAkB;oBAAE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBACjF,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBACxE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAEzF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,aAAa,UAAU,EAAE,EAC9D,IAAI,CACL,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAChF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-security-control.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-security-control.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-security-control.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;AAE5E,MAAM,CAAC,MAAM,mCAAmC,GAAG;;;;;;;iDAOF,CAAC;AAElD,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAChG,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC/C,QAAQ,EAAE;SACV,QAAQ,CAAC,0BAA0B,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,oBAAoB,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACvF,CAAC;AAEF,MAAM,UAAU,kCAAkC,CAAC,SAAoB;IACrE,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;YAEvD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iDAAiD,EAAE,CAAC;oBAC7F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;wBAClG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,oBAAoB,EACzD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,mBAAmB,EAAE,MAAM,CAAC,oBAAoB;oBAChD,WAAW,EAAE,MAAM,CAAC,YAAY;iBACjC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAChE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/C,IAAI,MAAM,CAAC,oBAAoB;oBAAE,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBACxF,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAEhE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,sBAAsB,UAAU,EAAE,EACvE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,sBAAsB,UAAU,EAAE,CACxE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC;YACzF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-test-case.d.ts

@@ -1,88 +0,0 @@
-/**
- * zivis_manage_test_case — Create, update, or delete test cases in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/test-cases
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_TEST_CASE_NAME = "zivis_manage_test_case";
-export declare const MANAGE_TEST_CASE_DESCRIPTION = "Create, update, or delete a test case in a threat model.\n\nTest cases define specific security tests to validate whether vulnerabilities exist. They link to attack scenarios and can be automated or manual. Test case IDs follow the TC-X.Y format.\n\nActions:\n- create: Add a new test case (requires name, description, success_criteria)\n- update: Modify an existing test case (requires test_case_id) \u2014 use this to record test results\n- delete: Remove a test case (requires test_case_id)";
-export declare const MANAGE_TEST_CASE_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    test_case_id: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    attack_scenario_id: z.ZodOptional<z.ZodString>;
-    preconditions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    test_steps: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        step: z.ZodNumber;
-        action: z.ZodString;
-        expected: z.ZodString;
-        actual: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    success_criteria: z.ZodOptional<z.ZodString>;
-    evidence_type: z.ZodOptional<z.ZodEnum<{
-        code_snippet: "code_snippet";
-        video: "video";
-        screenshot: "screenshot";
-        http_request: "http_request";
-        log_entry: "log_entry";
-        manual_notes: "manual_notes";
-    }>>;
-    result: z.ZodOptional<z.ZodEnum<{
-        partial: "partial";
-        not_tested: "not_tested";
-        pass: "pass";
-        fail: "fail";
-        blocked: "blocked";
-    }>>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-    findings: z.ZodOptional<z.ZodString>;
-    automatable: z.ZodOptional<z.ZodBoolean>;
-    automation_tool: z.ZodOptional<z.ZodString>;
-};
-export declare function createManageTestCaseHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    test_case_id?: string;
-    name?: string;
-    description?: string;
-    attack_scenario_id?: string;
-    preconditions?: string[];
-    test_steps?: Array<{
-        step: number;
-        action: string;
-        expected: string;
-        actual?: string;
-    }>;
-    success_criteria?: string;
-    evidence_type?: string;
-    result?: string;
-    severity?: string;
-    findings?: string;
-    automatable?: boolean;
-    automation_tool?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;