@zivis/mcp 0.1.8 → 0.1.10

package/dist/prompts/index.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerAllPrompts(server: McpServer): void;

package/dist/prompts/index.js

@@ -0,0 +1,6 @@
+import { registerGettingStartedPrompt } from "./getting-started.js";
+import { registerAuditDependenciesPrompt } from "./audit-dependencies.js";
+export function registerAllPrompts(server) {
+    registerGettingStartedPrompt(server);
+    registerAuditDependenciesPrompt(server);
+}

package/dist/resolve-application-id.d.ts

@@ -1,7 +1,3 @@
-/**
- * Default `application_id` tool arguments from `.zivis/project.json` when the
- * user omits the parameter (optional `applicationId` on ProjectBinding).
- */
 export declare function resolveApplicationId(explicit: string | undefined, cwd?: string): string | undefined;
 export declare function requireApplicationId(explicit: string | undefined, cwd?: string): {
     ok: true;

package/dist/resolve-application-id.js

@@ -1,7 +1,3 @@
-/**
- * Default `application_id` tool arguments from `.zivis/project.json` when the
- * user omits the parameter (optional `applicationId` on ProjectBinding).
- */
 import { detectProjectBinding } from "./project-binding.js";
 export function resolveApplicationId(explicit, cwd = process.cwd()) {
     const t = explicit?.trim();
@@ -18,4 +14,3 @@ export function requireApplicationId(explicit, cwd = process.cwd()) {
         message: "application_id is required, or set applicationId in .zivis/project.json for this workspace.",
     };
 }
-//# sourceMappingURL=resolve-application-id.js.map

package/dist/sanitize.d.ts

@@ -1,23 +1,3 @@
-/**
- * Response Sanitization — Prompt Injection Defense
- *
- * Sanitizes API response data before returning it to the AI assistant.
- * Finding content (titles, descriptions, code snippets, remediation text)
- * is untrusted data from automated scanners and external vulnerability
- * databases. This layer strips common injection patterns.
- *
- * Defense layers:
- * 1. Strip non-printable / control characters
- * 2. Truncate field lengths
- * 3. Strip common LLM prompt injection patterns
- * 4. Encode suspicious formatting
- */
-/**
- * Sanitize a single string field
- */
+export declare function sanitizeInboundText(value: string | undefined, maxLength: number): string | undefined;
 export declare function sanitizeField(value: string, fieldName?: string): string;
-/**
- * Recursively sanitize all string fields in an object.
- * Handles nested objects and arrays.
- */
 export declare function sanitizeResponse<T>(data: T): T;

package/dist/sanitize.js

@@ -1,37 +1,18 @@
-/**
- * Response Sanitization — Prompt Injection Defense
- *
- * Sanitizes API response data before returning it to the AI assistant.
- * Finding content (titles, descriptions, code snippets, remediation text)
- * is untrusted data from automated scanners and external vulnerability
- * databases. This layer strips common injection patterns.
- *
- * Defense layers:
- * 1. Strip non-printable / control characters
- * 2. Truncate field lengths
- * 3. Strip common LLM prompt injection patterns
- * 4. Encode suspicious formatting
- */
-// Maximum field lengths (characters)
 const MAX_LENGTHS = {
     title: 500,
     description: 2000,
     codeSnippet: 500,
     code_snippet: 500,
     remediation: 1000,
-    // Scan & test case result fields
     attackPayload: 500,
     targetResponse: 500,
     analysisNarrative: 1000,
     remediationGuidance: 1000,
     failureRationale: 1000,
-    // Scan output fields (allow longer for narrative content)
     reconMarkdown: 50000,
     attackSurfaceBrief: 5000,
 };
-// Patterns that look like LLM prompt injection attempts
 const INJECTION_PATTERNS = [
-    // Common LLM instruction delimiters
     /\[INST\]/gi,
     /\[\/INST\]/gi,
     /<\|system\|>/gi,
@@ -40,16 +21,13 @@ const INJECTION_PATTERNS = [
     /<\|im_start\|>/gi,
     /<\|im_end\|>/gi,
     /<\|endoftext\|>/gi,
-    // Role injection attempts
     /^Human:/gim,
     /^Assistant:/gim,
     /^System:/gim,
-    // XML-like tags that mimic prompt formatting
     /<system>/gi,
     /<\/system>/gi,
     /<instruction>/gi,
     /<\/instruction>/gi,
-    // Common injection prefixes
     /ignore (?:all )?previous instructions/gi,
     /disregard (?:all )?(?:previous |above )?instructions/gi,
     /you are now/gi,
@@ -57,17 +35,16 @@ const INJECTION_PATTERNS = [
     /override:/gi,
     /IMPORTANT: from now on/gi,
 ];
-/**
- * Strip non-printable and control characters, preserving newlines and tabs
- */
 function stripControlChars(text) {
-    // Allow printable ASCII, newlines, tabs, and common Unicode
-    // Strip C0 controls except \t \n \r, and C1 controls
     return text.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x9F]/g, "");
 }
-/**
- * Strip known LLM prompt injection patterns
- */
+const INVISIBLE_UNICODE = /[\u200B-\u200F\u202A-\u202E\u2066-\u2069\uFEFF]/g;
+export function sanitizeInboundText(value, maxLength) {
+    if (value === undefined || value === null)
+        return value;
+    const cleaned = stripControlChars(value).replace(INVISIBLE_UNICODE, "");
+    return truncate(cleaned, maxLength);
+}
 function stripInjectionPatterns(text) {
     let result = text;
     for (const pattern of INJECTION_PATTERNS) {
@@ -75,17 +52,11 @@ function stripInjectionPatterns(text) {
     }
     return result;
 }
-/**
- * Truncate a string to max length with ellipsis
- */
 function truncate(text, maxLength) {
     if (text.length <= maxLength)
         return text;
     return text.slice(0, maxLength - 3) + "...";
 }
-/**
- * Sanitize a single string field
- */
 export function sanitizeField(value, fieldName) {
     let result = stripControlChars(value);
     result = stripInjectionPatterns(result);
@@ -95,10 +66,6 @@ export function sanitizeField(value, fieldName) {
     }
     return result;
 }
-/**
- * Recursively sanitize all string fields in an object.
- * Handles nested objects and arrays.
- */
 export function sanitizeResponse(data) {
     if (data === null || data === undefined)
         return data;
@@ -122,4 +89,3 @@ export function sanitizeResponse(data) {
     }
     return data;
 }
-//# sourceMappingURL=sanitize.js.map

package/dist/server.d.ts

@@ -1,14 +1,2 @@
-/**
- * MCP Server
- *
- * Sets up the Model Context Protocol server using the official SDK
- * with stdio transport. Registers all ZIVIS security tools.
- *
- * IMPORTANT: This server communicates over stdout (JSON-RPC 2.0).
- * Never use console.log() — use console.error() for all logging.
- */
 import type { ZivisConfig } from "./types.js";
-/**
- * Create and start the MCP server with all tools registered
- */
-export declare function startServer(config?: ZivisConfig): Promise<void>;
+export declare function startServer(incoming?: ZivisConfig): Promise<void>;