@zivis/mcp 0.1.8 → 0.1.10

package/dist/tools/enterprise/capture-evidence.js

@@ -1,72 +0,0 @@
-/**
- * zivis_capture_evidence — Capture evidence (screenshots, code, terminal output)
- *
- * Maps to: POST /api/evidence/mcp-capture
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const CAPTURE_EVIDENCE_NAME = "zivis_capture_evidence";
-export const CAPTURE_EVIDENCE_DESCRIPTION = `Capture and upload evidence from your pen testing session.
-
-Supports screenshots (base64-encoded images), code snippets, terminal output, HTTP requests/responses, and notes. Evidence is stored in ZIVIS and can be linked to threat model findings, test cases, and pen test sessions.
-
-Returns an evidence ID that you can reference in zivis_record_test_result.
-
-For screenshots: provide base64-encoded image data in the content field.
-For code/text: provide plain text in the content field.`;
-export const CAPTURE_EVIDENCE_SCHEMA = {
-    name: z.string().describe("Evidence name (e.g., 'SQLi payload response', 'Auth bypass screenshot')"),
-    type: z
-        .enum(["screenshot", "code_snippet", "terminal_output", "http_request", "http_response", "note"])
-        .describe("Type of evidence being captured"),
-    content: z
-        .string()
-        .describe("Content: base64-encoded data for screenshots, plain text for code/terminal/notes"),
-    mime_type: z
-        .string()
-        .optional()
-        .describe("MIME type (e.g., 'image/png'). Auto-detected from type if not provided."),
-    description: z.string().optional().describe("Description of what this evidence shows"),
-    threat_model_id: z.string().optional().describe("Threat model UUID to link evidence to"),
-    finding_id: z.string().optional().describe("Finding UUID to link evidence to"),
-    test_case_id: z.string().optional().describe("Test case UUID to link evidence to"),
-    pentest_session_id: z.string().optional().describe("Pen test session UUID to associate with"),
-    source_file: z.string().optional().describe("Source file path (for code snippets)"),
-    source_line: z.number().optional().describe("Source line number (for code snippets)"),
-};
-export function createCaptureEvidenceHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post("/api/evidence/mcp-capture", {
-                name: params.name,
-                type: params.type,
-                content: params.content,
-                mimeType: params.mime_type,
-                description: params.description,
-                threatModelId: params.threat_model_id,
-                findingId: params.finding_id,
-                testCaseId: params.test_case_id,
-                pentestSessionId: params.pentest_session_id,
-                sourceFile: params.source_file,
-                sourceLine: params.source_line,
-            });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to capture evidence";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=capture-evidence.js.map

package/dist/tools/enterprise/capture-evidence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capture-evidence.js","sourceRoot":"","sources":["../../../src/tools/enterprise/capture-evidence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;wDAOY,CAAC;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IACpG,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;SAChG,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAClF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACtF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAYb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,2BAA2B,EAC3B;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,eAAe;gBACrC,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,UAAU,EAAE,MAAM,CAAC,YAAY;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;gBAC3C,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CACF,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/create-report-ticket.d.ts

@@ -1,34 +0,0 @@
-/**
- * zivis_create_report_ticket — Create a Jira or Linear ticket from a report issue
- *
- * Maps to: POST /api/reports/:reportId/issues/:issueId/create-ticket
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const CREATE_REPORT_TICKET_NAME = "zivis_create_report_ticket";
-export declare const CREATE_REPORT_TICKET_DESCRIPTION = "Create a Jira or Linear ticket from a report issue.\n\nLinks the report issue to an external ticket tracker so remediation can be tracked in the customer's project management tool. The ticket includes the issue title, description, recommendation, severity, and metadata (CWE, OWASP, CVSS).\n\nPrerequisites:\n- Jira: Active Jira integration with a default project configured\n- Linear: Active Linear integration with a default team configured\n\nThe ticket reference is stored on the issue and displayed in the remediation checklist.";
-export declare const CREATE_REPORT_TICKET_SCHEMA: {
-    report_id: z.ZodString;
-    issue_id: z.ZodString;
-    provider: z.ZodEnum<{
-        jira: "jira";
-        linear: "linear";
-    }>;
-};
-export declare function createCreateReportTicketHandler(apiClient: ApiClient): (params: {
-    report_id: string;
-    issue_id: string;
-    provider: "jira" | "linear";
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/create-report-ticket.js

@@ -1,44 +0,0 @@
-/**
- * zivis_create_report_ticket — Create a Jira or Linear ticket from a report issue
- *
- * Maps to: POST /api/reports/:reportId/issues/:issueId/create-ticket
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const CREATE_REPORT_TICKET_NAME = "zivis_create_report_ticket";
-export const CREATE_REPORT_TICKET_DESCRIPTION = `Create a Jira or Linear ticket from a report issue.
-
-Links the report issue to an external ticket tracker so remediation can be tracked in the customer's project management tool. The ticket includes the issue title, description, recommendation, severity, and metadata (CWE, OWASP, CVSS).
-
-Prerequisites:
-- Jira: Active Jira integration with a default project configured
-- Linear: Active Linear integration with a default team configured
-
-The ticket reference is stored on the issue and displayed in the remediation checklist.`;
-export const CREATE_REPORT_TICKET_SCHEMA = {
-    report_id: z.string().describe("Report UUID"),
-    issue_id: z.string().describe("Report issue UUID"),
-    provider: z.enum(["jira", "linear"]).describe("Ticket provider to use"),
-};
-export function createCreateReportTicketHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post(`/api/reports/${params.report_id}/issues/${params.issue_id}/create-ticket`, { provider: params.provider });
-            const result = sanitizeResponse({
-                ...data,
-                message: `${params.provider === "jira" ? "Jira" : "Linear"} ticket created and linked to issue.`,
-            });
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to create ticket";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=create-report-ticket.js.map

package/dist/tools/enterprise/create-report-ticket.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-report-ticket.js","sourceRoot":"","sources":["../../../src/tools/enterprise/create-report-ticket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAEtE,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;;;;wFAQwC,CAAC;AAEzF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACxE,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,gBAAgB,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,QAAQ,gBAAgB,EAC1E,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAC9B,CAAC;YAEF,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,GAAG,IAAI;gBACP,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,sCAAsC;aACjG,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/end-pentest-session.d.ts

@@ -1,33 +0,0 @@
-/**
- * zivis_end_pentest_session — End a pen test session
- *
- * Maps to: PATCH /api/pentest-sessions/:id
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const END_PENTEST_SESSION_NAME = "zivis_end_pentest_session";
-export declare const END_PENTEST_SESSION_DESCRIPTION = "End a pen test session by marking it as completed or abandoned.\n\nCall this when you're done with your pen testing work. The session results will be preserved for report generation.";
-export declare const END_PENTEST_SESSION_SCHEMA: {
-    session_id: z.ZodString;
-    status: z.ZodDefault<z.ZodEnum<{
-        completed: "completed";
-        paused: "paused";
-        abandoned: "abandoned";
-    }>>;
-};
-export declare function createEndPentestSessionHandler(apiClient: ApiClient): (params: {
-    session_id: string;
-    status?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/end-pentest-session.js

@@ -1,42 +0,0 @@
-/**
- * zivis_end_pentest_session — End a pen test session
- *
- * Maps to: PATCH /api/pentest-sessions/:id
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const END_PENTEST_SESSION_NAME = "zivis_end_pentest_session";
-export const END_PENTEST_SESSION_DESCRIPTION = `End a pen test session by marking it as completed or abandoned.
-
-Call this when you're done with your pen testing work. The session results will be preserved for report generation.`;
-export const END_PENTEST_SESSION_SCHEMA = {
-    session_id: z.string().describe("Pen test session UUID"),
-    status: z
-        .enum(["completed", "paused", "abandoned"])
-        .default("completed")
-        .describe("Final status (completed = normal end, abandoned = incomplete)"),
-};
-export function createEndPentestSessionHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.patch(`/api/pentest-sessions/${params.session_id}`, { status: params.status || "completed" });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to end pentest session";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=end-pentest-session.js.map

package/dist/tools/enterprise/end-pentest-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"end-pentest-session.js","sourceRoot":"","sources":["../../../src/tools/enterprise/end-pentest-session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,+BAA+B,GAAG;;oHAEqE,CAAC;AAErH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;SAC1C,OAAO,CAAC,WAAW,CAAC;SACpB,QAAQ,CAAC,+DAA+D,CAAC;CAC7E,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAoB;IACjE,OAAO,KAAK,EAAE,MAA+C,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAChC,yBAAyB,MAAM,CAAC,UAAU,EAAE,EAC5C,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CACzC,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACrF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/generate-report.d.ts

@@ -1,55 +0,0 @@
-/**
- * zivis_generate_report — Generate a pen test report with PDF export
- *
- * Maps to: POST /api/reports + POST /api/reports/:id/regenerate + POST /api/reports/:id/export
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const GENERATE_REPORT_NAME = "zivis_generate_report";
-export declare const GENERATE_REPORT_DESCRIPTION = "Generate a professional pen test report with optional PDF export.\n\nCreates a report from campaign findings, pen test session results, and threat model data. The report is generated section by section using AI, then can be exported as a branded PDF.\n\nAssessment types: web_pentest, api_pentest, ai_red_team, full_assessment, recon_only";
-export declare const GENERATE_REPORT_SCHEMA: {
-    name: z.ZodString;
-    assessment_type: z.ZodEnum<{
-        ai_red_team: "ai_red_team";
-        web_pentest: "web_pentest";
-        api_pentest: "api_pentest";
-        full_assessment: "full_assessment";
-        recon_only: "recon_only";
-    }>;
-    customer_name: z.ZodString;
-    analyst_name: z.ZodString;
-    engagement_start: z.ZodString;
-    engagement_end: z.ZodString;
-    campaign_id: z.ZodOptional<z.ZodString>;
-    application_id: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    customer_industry: z.ZodOptional<z.ZodString>;
-    reviewer_name: z.ZodOptional<z.ZodString>;
-    export_pdf: z.ZodDefault<z.ZodBoolean>;
-};
-export declare function createGenerateReportHandler(apiClient: ApiClient): (params: {
-    name: string;
-    assessment_type: string;
-    customer_name: string;
-    analyst_name: string;
-    engagement_start: string;
-    engagement_end: string;
-    campaign_id?: string;
-    application_id?: string;
-    description?: string;
-    customer_industry?: string;
-    reviewer_name?: string;
-    export_pdf?: boolean;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/generate-report.js

@@ -1,111 +0,0 @@
-/**
- * zivis_generate_report — Generate a pen test report with PDF export
- *
- * Maps to: POST /api/reports + POST /api/reports/:id/regenerate + POST /api/reports/:id/export
- */
-import { z } from "zod";
-import { resolveApplicationId } from "../../resolve-application-id.js";
-import { sanitizeResponse } from "../../sanitize.js";
-export const GENERATE_REPORT_NAME = "zivis_generate_report";
-export const GENERATE_REPORT_DESCRIPTION = `Generate a professional pen test report with optional PDF export.
-
-Creates a report from campaign findings, pen test session results, and threat model data. The report is generated section by section using AI, then can be exported as a branded PDF.
-
-Assessment types: web_pentest, api_pentest, ai_red_team, full_assessment, recon_only`;
-export const GENERATE_REPORT_SCHEMA = {
-    name: z.string().describe("Report name (e.g., 'Q1 2026 Web Application Penetration Test')"),
-    assessment_type: z
-        .enum(["web_pentest", "api_pentest", "ai_red_team", "full_assessment", "recon_only"])
-        .describe("Type of assessment report to generate"),
-    customer_name: z.string().describe("Customer/client name"),
-    analyst_name: z.string().describe("Name of the security analyst"),
-    engagement_start: z.string().describe("Engagement start date (ISO 8601, e.g., '2026-03-01')"),
-    engagement_end: z.string().describe("Engagement end date (ISO 8601, e.g., '2026-03-15')"),
-    campaign_id: z.string().optional().describe("Campaign UUID to pull findings from"),
-    application_id: z
-        .string()
-        .optional()
-        .describe("Application UUID for context. If omitted, uses applicationId from .zivis/project.json when set."),
-    description: z.string().optional().describe("Report description or executive summary notes"),
-    customer_industry: z.string().optional().describe("Customer's industry (for context in report)"),
-    reviewer_name: z.string().optional().describe("Name of the report reviewer"),
-    export_pdf: z.boolean().default(false).describe("Whether to also generate a PDF export"),
-};
-export function createGenerateReportHandler(apiClient) {
-    return async (params) => {
-        try {
-            const applicationId = resolveApplicationId(params.application_id);
-            // Step 1: Create the report
-            const report = await apiClient.post("/api/reports", {
-                name: params.name,
-                assessmentType: params.assessment_type,
-                customerName: params.customer_name,
-                analystName: params.analyst_name,
-                engagementStart: params.engagement_start,
-                engagementEnd: params.engagement_end,
-                campaignId: params.campaign_id,
-                applicationId,
-                description: params.description,
-                customerIndustry: params.customer_industry,
-                reviewerName: params.reviewer_name,
-            });
-            const reportId = report.report?.id;
-            if (!reportId) {
-                return {
-                    content: [{ type: "text", text: "Error: Report created but no ID returned" }],
-                    isError: true,
-                };
-            }
-            // Step 2: Trigger content generation
-            let generationJob = null;
-            try {
-                generationJob = await apiClient.post(`/api/reports/${reportId}/regenerate`, {});
-            }
-            catch (genErr) {
-                // Generation may fail if no credits — still return the report
-                console.error("Report generation failed:", genErr);
-            }
-            // Step 3: If PDF export requested, trigger it (async)
-            let pdfJob = null;
-            if (params.export_pdf) {
-                try {
-                    pdfJob = await apiClient.post(`/api/reports/${reportId}/export`, {});
-                }
-                catch (pdfErr) {
-                    console.error("PDF export failed:", pdfErr);
-                }
-            }
-            const result = sanitizeResponse({
-                report,
-                generationJob,
-                pdfExport: pdfJob,
-                nextSteps: [
-                    generationJob
-                        ? "Report generation started. Content will be generated section by section."
-                        : "Report created but generation could not start. Check credits.",
-                    params.export_pdf
-                        ? pdfJob
-                            ? "PDF export triggered. Check status with zivis_get_report_status."
-                            : "PDF export could not start."
-                        : "Use export_pdf: true to generate a PDF when ready.",
-                ],
-            });
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(result, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to generate report";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=generate-report.js.map

package/dist/tools/enterprise/generate-report.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-report.js","sourceRoot":"","sources":["../../../src/tools/enterprise/generate-report.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;qFAI0C,CAAC;AAEtF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IAC3F,eAAe,EAAE,CAAC;SACf,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;SACpF,QAAQ,CAAC,uCAAuC,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC7F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAClF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,iGAAiG,CAClG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC5F,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAChG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC5E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACzF,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAab,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAClE,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CACjC,cAAc,EACd;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,eAAe,EAAE,MAAM,CAAC,gBAAgB;gBACxC,aAAa,EAAE,MAAM,CAAC,cAAc;gBACpC,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,aAAa;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,iBAAiB;gBAC1C,YAAY,EAAE,MAAM,CAAC,aAAa;aACnC,CACF,CAAC;YAEF,MAAM,QAAQ,GAAI,MAAiD,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;oBACtF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,IAAI,aAAa,GAAmC,IAAI,CAAC;YACzD,IAAI,CAAC;gBACH,aAAa,GAAG,MAAM,SAAS,CAAC,IAAI,CAClC,gBAAgB,QAAQ,aAAa,EACrC,EAAE,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,8DAA8D;gBAC9D,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,sDAAsD;YACtD,IAAI,MAAM,GAAmC,IAAI,CAAC;YAClD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAC3B,gBAAgB,QAAQ,SAAS,EACjC,EAAE,CACH,CAAC;gBACJ,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,MAAM;gBACN,aAAa;gBACb,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE;oBACT,aAAa;wBACX,CAAC,CAAC,0EAA0E;wBAC5E,CAAC,CAAC,+DAA+D;oBACnE,MAAM,CAAC,UAAU;wBACf,CAAC,CAAC,MAAM;4BACN,CAAC,CAAC,kEAAkE;4BACpE,CAAC,CAAC,6BAA6B;wBACjC,CAAC,CAAC,oDAAoD;iBACzD;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;YACjF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/get-org-zat.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-org-zat.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-org-zat.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;qDAwBc,CAAC;AAEtD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,SAAoB;IACzD,OAAO,KAAK,EAAE,MAA8B,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,WAAW,KAAK,EAAE,CACnB,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;qBACpC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/get-report-status.d.ts

@@ -1,27 +0,0 @@
-/**
- * zivis_get_report_status — Check report generation and PDF export status
- *
- * Maps to: GET /api/reports/:id
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const GET_REPORT_STATUS_NAME = "zivis_get_report_status";
-export declare const GET_REPORT_STATUS_DESCRIPTION = "Check the status of a report, including content generation progress and PDF export status.\n\nUse this after calling zivis_generate_report to monitor progress.";
-export declare const GET_REPORT_STATUS_SCHEMA: {
-    report_id: z.ZodString;
-};
-export declare function createGetReportStatusHandler(apiClient: ApiClient): (params: {
-    report_id: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/get-report-status.js

@@ -1,38 +0,0 @@
-/**
- * zivis_get_report_status — Check report generation and PDF export status
- *
- * Maps to: GET /api/reports/:id
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const GET_REPORT_STATUS_NAME = "zivis_get_report_status";
-export const GET_REPORT_STATUS_DESCRIPTION = `Check the status of a report, including content generation progress and PDF export status.
-
-Use this after calling zivis_generate_report to monitor progress.`;
-export const GET_REPORT_STATUS_SCHEMA = {
-    report_id: z.string().describe("Report UUID to check status for"),
-};
-export function createGetReportStatusHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.get(`/api/reports/${params.report_id}`);
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to get report status";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=get-report-status.js.map

package/dist/tools/enterprise/get-report-status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-report-status.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-report-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,6BAA6B,GAAG;;kEAEqB,CAAC;AAEnE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAClE,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,OAAO,KAAK,EAAE,MAA6B,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gBAAgB,MAAM,CAAC,SAAS,EAAE,CACnC,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/get-threat-model.d.ts

@@ -1,29 +0,0 @@
-/**
- * zivis_get_threat_model — Get a threat model with all entities
- *
- * Maps to: GET /api/threat-models/:id
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
-export declare const GET_THREAT_MODEL_DESCRIPTION = "Get a threat model with ALL its entities \u2014 actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.\n\nReturns the complete threat model including:\n- **Actors**: Who interacts with the system (external users, attackers, internal services)\n- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level\n- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)\n- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors\n- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness\n- **Data Assets**: What sensitive data exists and how it's classified\n- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)\n- **Findings**: Discovered vulnerabilities with severity and remediation recommendations\n- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model\n\nIMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.\n\nUse this to understand the full security posture before making changes, adding entities, or running pen tests.\nAfter viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.\nUse zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).";
-export declare const GET_THREAT_MODEL_SCHEMA: {
-    threat_model_id: z.ZodString;
-    include_test_cases: z.ZodDefault<z.ZodBoolean>;
-};
-export declare function createGetThreatModelHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    include_test_cases?: boolean;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/get-threat-model.js

@@ -1,83 +0,0 @@
-/**
- * zivis_get_threat_model — Get a threat model with all entities
- *
- * Maps to: GET /api/threat-models/:id
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const GET_THREAT_MODEL_NAME = "zivis_get_threat_model";
-export const GET_THREAT_MODEL_DESCRIPTION = `Get a threat model with ALL its entities — actors, components, data flows, attack scenarios, security controls, data assets, test cases, findings, AND any linked diagrams.
-
-Returns the complete threat model including:
-- **Actors**: Who interacts with the system (external users, attackers, internal services)
-- **Components**: System parts (APIs, databases, frontends, services) with technology and trust level
-- **Data Flows**: How data moves between components (protocol, encryption, auth mechanism)
-- **Attack Scenarios**: STRIDE-categorized threats with severity, likelihood, attack vectors
-- **Security Controls**: Existing mitigations (preventive, detective, corrective) with effectiveness
-- **Data Assets**: What sensitive data exists and how it's classified
-- **Test Cases**: Security tests with results (pass/fail/partial/not_tested)
-- **Findings**: Discovered vulnerabilities with severity and remediation recommendations
-- **Linked Diagrams**: Architecture, data flow, trust boundary, and other diagrams associated with this threat model
-
-IMPORTANT: The threat_model_id must be a threat model UUID from zivis_list_threat_models, NOT a scan ID or agent instance ID.
-
-Use this to understand the full security posture before making changes, adding entities, or running pen tests.
-After viewing, use zivis_manage_actor, zivis_manage_component, zivis_manage_data_flow, etc. to add or update entities.
-Use zivis_get_diagram with a diagram_id from the linked_diagrams to view full diagram details (nodes, connections, boundaries).`;
-export const GET_THREAT_MODEL_SCHEMA = {
-    threat_model_id: z
-        .string()
-        .describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    include_test_cases: z
-        .boolean()
-        .default(true)
-        .describe("Whether to include test cases in the response"),
-};
-export function createGetThreatModelHandler(apiClient) {
-    return async (params) => {
-        try {
-            // Fetch threat model and linked diagrams in parallel
-            const [threatModelData, diagramsData] = await Promise.all([
-                apiClient.get(`/api/threat-models/${params.threat_model_id}?include=all`),
-                apiClient
-                    .get(`/api/diagrams?linkedThreatModelId=${params.threat_model_id}&take=50`)
-                    .catch(() => ({ diagrams: [], total: 0 })),
-            ]);
-            const sanitized = sanitizeResponse(threatModelData);
-            // Attach linked diagrams summary to the response
-            const diagrams = Array.isArray(diagramsData.diagrams)
-                ? diagramsData.diagrams.map((d) => ({
-                    diagram_id: d.id,
-                    name: d.name,
-                    diagram_type: d.diagramType,
-                    content_type: d.contentType,
-                    description: d.description || null,
-                    node_count: d._count?.nodes ?? null,
-                    connection_count: d._count?.connections ?? null,
-                    updated_at: d.updatedAt,
-                }))
-                : [];
-            const result = {
-                ...sanitized,
-                linked_diagrams: diagrams,
-                linked_diagrams_count: diagramsData.total,
-            };
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(result, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to get threat model";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=get-threat-model.js.map

package/dist/tools/enterprise/get-threat-model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-threat-model.js","sourceRoot":"","sources":["../../../src/tools/enterprise/get-threat-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;gIAiBoF,CAAC;AAEjI,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAAiE,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,SAAS,CAAC,GAAG,CACX,sBAAsB,MAAM,CAAC,eAAe,cAAc,CAC3D;gBACD,SAAS;qBACN,GAAG,CACF,qCAAqC,MAAM,CAAC,eAAe,UAAU,CACtE;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAA4B,CAAC;YAE/E,iDAAiD;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACnD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBACzD,UAAU,EAAE,CAAC,CAAC,EAAE;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,UAAU,EAAG,CAAC,CAAC,MAAiC,EAAE,KAAK,IAAI,IAAI;oBAC/D,gBAAgB,EAAG,CAAC,CAAC,MAAiC,EAAE,WAAW,IAAI,IAAI;oBAC3E,UAAU,EAAE,CAAC,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACL,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG;gBACb,GAAG,SAAS;gBACZ,eAAe,EAAE,QAAQ;gBACzB,qBAAqB,EAAE,YAAY,CAAC,KAAK;aAC1C,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}