@zivis/mcp 0.1.8 → 0.1.10

package/dist/tools/enterprise/list-agents.d.ts

@@ -1,42 +0,0 @@
-/**
- * zivis_list_agents — List agent instances for the org
- *
- * Maps to: GET /api/agent-instances
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const LIST_AGENTS_NAME = "zivis_list_agents";
-export declare const LIST_AGENTS_DESCRIPTION = "List all configured agent instances for your organization.\n\nIMPORTANT \u2014 Understand the ZIVIS entity hierarchy:\n- **Agent instance** = a configured agent (e.g., \"Production Recon Agent\", \"API Pen Test Agent\"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.\n- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.\n- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.\n\nAgent types:\n- **recon**: Reconnaissance \u2014 discovers attack surface, endpoints, technologies\n- **pen-test**: Penetration testing \u2014 actively tests for vulnerabilities\n- **ai-red-team**: AI/LLM red teaming \u2014 tests AI systems for prompt injection, jailbreaks, etc.\n- **threat-analysis**: Threat modeling \u2014 builds structured threat models (automated LLM threat ID is pipeline-specific)\n- **code-monitor**: Code monitoring \u2014 continuous scanning of repositories\n- **evidence**: Evidence collection \u2014 gathers compliance evidence\n\nWhen users ask about \"the threat model agent\" or \"the recon agent\", use this tool to find the agent instance, NOT zivis_list_scans.";
-export declare const LIST_AGENTS_SCHEMA: {
-    agent_type: z.ZodOptional<z.ZodEnum<{
-        "pen-test": "pen-test";
-        recon: "recon";
-        "ai-red-team": "ai-red-team";
-        "threat-analysis": "threat-analysis";
-        "code-monitor": "code-monitor";
-        evidence: "evidence";
-    }>>;
-    status: z.ZodOptional<z.ZodEnum<{
-        archived: "archived";
-        paused: "paused";
-        active: "active";
-    }>>;
-    limit: z.ZodDefault<z.ZodNumber>;
-};
-export declare function createListAgentsHandler(apiClient: ApiClient): (params: {
-    agent_type?: string;
-    status?: string;
-    limit?: number;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/list-agents.js

@@ -1,95 +0,0 @@
-/**
- * zivis_list_agents — List agent instances for the org
- *
- * Maps to: GET /api/agent-instances
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const LIST_AGENTS_NAME = "zivis_list_agents";
-export const LIST_AGENTS_DESCRIPTION = `List all configured agent instances for your organization.
-
-IMPORTANT — Understand the ZIVIS entity hierarchy:
-- **Agent instance** = a configured agent (e.g., "Production Recon Agent", "API Pen Test Agent"). Each has a UUID, an agent type, a target URL, and configuration. This tool lists these.
-- **Scan** = a single execution run of an agent instance. One agent can have many scans. Use zivis_list_scans to see scan runs.
-- **Threat model** = a structured security model (components, data flows, actors, findings). Created/updated by threat-analysis agent scans. Use zivis_list_threat_models to see these.
-
-Agent types:
-- **recon**: Reconnaissance — discovers attack surface, endpoints, technologies
-- **pen-test**: Penetration testing — actively tests for vulnerabilities
-- **ai-red-team**: AI/LLM red teaming — tests AI systems for prompt injection, jailbreaks, etc.
-- **threat-analysis**: Threat modeling — builds structured threat models (automated LLM threat ID is pipeline-specific)
-- **code-monitor**: Code monitoring — continuous scanning of repositories
-- **evidence**: Evidence collection — gathers compliance evidence
-
-When users ask about "the threat model agent" or "the recon agent", use this tool to find the agent instance, NOT zivis_list_scans.`;
-export const LIST_AGENTS_SCHEMA = {
-    agent_type: z
-        .enum(["pen-test", "ai-red-team", "recon", "threat-analysis", "code-monitor", "evidence"])
-        .optional()
-        .describe("Filter by agent type"),
-    status: z
-        .enum(["active", "paused", "archived"])
-        .optional()
-        .describe("Filter by agent status"),
-    limit: z
-        .number()
-        .min(1)
-        .max(50)
-        .default(20)
-        .describe("Maximum number of results (1-50, default 20)"),
-};
-export function createListAgentsHandler(apiClient) {
-    return async (params) => {
-        try {
-            const query = new URLSearchParams();
-            if (params.agent_type)
-                query.set("agentType", params.agent_type);
-            if (params.status)
-                query.set("status", params.status);
-            if (params.limit)
-                query.set("limit", String(params.limit));
-            query.set("includeOpenStats", "true");
-            const queryStr = query.toString();
-            const path = `/api/agent-instances${queryStr ? `?${queryStr}` : ""}`;
-            const data = await apiClient.get(path);
-            const sanitized = sanitizeResponse(data);
-            const instances = Array.isArray(sanitized.instances) ? sanitized.instances : [];
-            const summary = instances.map((agent) => ({
-                agent_instance_id: agent.id,
-                name: agent.name,
-                agent_type: agent.agentType,
-                status: agent.status,
-                target_url: agent.targetUrl,
-                description: agent.description || null,
-                is_enabled: agent.isEnabled,
-                last_scan_at: agent.lastScanAt || null,
-                created_at: agent.createdAt,
-                updated_at: agent.updatedAt,
-                open_critical_count: agent.openCriticalCount ?? null,
-                open_findings_total: agent.openFindingsTotal ?? null,
-                campaigns: Array.isArray(agent.campaignLinks)
-                    ? agent.campaignLinks.map((link) => {
-                        const campaign = link.campaign;
-                        return campaign ? { id: campaign.id, name: campaign.name } : null;
-                    }).filter(Boolean)
-                    : [],
-            }));
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify({ total: data.total, agents: summary }, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to list agents";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=list-agents.js.map

package/dist/tools/enterprise/list-agents.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-agents.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-agents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;oIAe6F,CAAC;AAErI,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;SACzF,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;SACtC,QAAQ,EAAE;SACV,QAAQ,CAAC,wBAAwB,CAAC;IACrC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,8CAA8C,CAAC;CAC5D,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,SAAoB;IAC1D,OAAO,KAAK,EAAE,MAAgE,EAAE,EAAE;QAChF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,UAAU;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,uBAAuB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA0D,IAAI,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA4B,CAAC;YACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAEhF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC;gBACjE,iBAAiB,EAAE,KAAK,CAAC,EAAE;gBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;gBACtC,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;gBACpD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;oBAC3C,CAAC,CAAE,KAAK,CAAC,aAAgD,CAAC,GAAG,CAAC,CAAC,IAA6B,EAAE,EAAE;wBAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA+C,CAAC;wBACtE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACpB,CAAC,CAAC,EAAE;aACP,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-report-issues.d.ts

@@ -1,36 +0,0 @@
-/**
- * zivis_list_report_issues — List remediation checklist issues for a campaign report
- *
- * Maps to: GET /api/reports/:reportId/issues
- * Also uses: POST /api/reports/for-campaign/:campaignId
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
-export declare const LIST_REPORT_ISSUES_DESCRIPTION = "List all issues in a campaign's remediation checklist with status summary.\n\nReturns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.\n\nFilter by status to see only open, in-progress, or completed items.";
-export declare const LIST_REPORT_ISSUES_SCHEMA: {
-    campaign_id: z.ZodOptional<z.ZodString>;
-    report_id: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        open: "open";
-        in_progress: "in_progress";
-        done: "done";
-    }>>;
-};
-export declare function createListReportIssuesHandler(apiClient: ApiClient): (params: {
-    campaign_id?: string;
-    report_id?: string;
-    status?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/list-report-issues.js

@@ -1,50 +0,0 @@
-/**
- * zivis_list_report_issues — List remediation checklist issues for a campaign report
- *
- * Maps to: GET /api/reports/:reportId/issues
- * Also uses: POST /api/reports/for-campaign/:campaignId
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const LIST_REPORT_ISSUES_NAME = "zivis_list_report_issues";
-export const LIST_REPORT_ISSUES_DESCRIPTION = `List all issues in a campaign's remediation checklist with status summary.
-
-Returns issues grouped by severity with stats (open/in_progress/done counts). Use campaign_id to auto-resolve the report, or provide report_id directly.
-
-Filter by status to see only open, in-progress, or completed items.`;
-export const LIST_REPORT_ISSUES_SCHEMA = {
-    campaign_id: z.string().optional().describe("Campaign UUID — auto-resolves to report"),
-    report_id: z.string().optional().describe("Report UUID (alternative to campaign_id)"),
-    status: z.enum(["open", "in_progress", "done"]).optional().describe("Filter by status"),
-};
-export function createListReportIssuesHandler(apiClient) {
-    return async (params) => {
-        try {
-            let reportId = params.report_id;
-            // Resolve campaign → report if needed
-            if (!reportId && params.campaign_id) {
-                const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
-                reportId = reportData.reportId;
-            }
-            if (!reportId) {
-                return {
-                    content: [{ type: "text", text: "Error: Provide either campaign_id or report_id" }],
-                    isError: true,
-                };
-            }
-            const queryParams = params.status ? `?status=${params.status}` : "";
-            const data = await apiClient.get(`/api/reports/${reportId}/issues${queryParams}`);
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to list report issues";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=list-report-issues.js.map

package/dist/tools/enterprise/list-report-issues.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-report-issues.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-report-issues.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;oEAIsB,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CACxF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAEhC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;oBAC5F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,gBAAgB,QAAQ,UAAU,WAAW,EAAE,CAChD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/list-threat-models.d.ts

@@ -1,36 +0,0 @@
-/**
- * zivis_list_threat_models — List threat models for the org
- *
- * Maps to: GET /api/threat-models
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";
-export declare const LIST_THREAT_MODELS_DESCRIPTION = "List all threat models for your organization. Returns name, status, summary info, and linked diagram counts for each threat model.\n\nAlso fetches any diagrams linked to each threat model, so you can see which threat models have associated architecture, data flow, or trust boundary diagrams. Use zivis_get_threat_model to see full diagram details.\n\nIMPORTANT: Threat models are NOT scans and NOT agents. They are separate entities:\n- A **threat model** (returned here) has its own UUID and contains components, data flows, actors, findings, etc.\n- A **scan** is an agent execution run (from zivis_list_scans) \u2014 scans may CREATE or UPDATE threat models, but scan IDs \u2260 threat model IDs.\n- An **agent instance** is a configured agent (from the UI) \u2014 agents RUN scans which produce threat models.\n\nUse the threat model ID (from this tool's response) when calling zivis_get_threat_model, zivis_manage_component, zivis_manage_finding, etc. Do NOT pass scan IDs or agent instance IDs to those tools.";
-export declare const LIST_THREAT_MODELS_SCHEMA: {
-    status: z.ZodOptional<z.ZodEnum<{
-        draft: "draft";
-        analyzing: "analyzing";
-        analyzed: "analyzed";
-        reviewed: "reviewed";
-        approved: "approved";
-        archived: "archived";
-    }>>;
-    limit: z.ZodDefault<z.ZodNumber>;
-};
-export declare function createListThreatModelsHandler(apiClient: ApiClient): (params: {
-    status?: string;
-    limit?: number;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/list-threat-models.js

@@ -1,82 +0,0 @@
-/**
- * zivis_list_threat_models — List threat models for the org
- *
- * Maps to: GET /api/threat-models
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const LIST_THREAT_MODELS_NAME = "zivis_list_threat_models";
-export const LIST_THREAT_MODELS_DESCRIPTION = `List all threat models for your organization. Returns name, status, summary info, and linked diagram counts for each threat model.
-
-Also fetches any diagrams linked to each threat model, so you can see which threat models have associated architecture, data flow, or trust boundary diagrams. Use zivis_get_threat_model to see full diagram details.
-
-IMPORTANT: Threat models are NOT scans and NOT agents. They are separate entities:
-- A **threat model** (returned here) has its own UUID and contains components, data flows, actors, findings, etc.
-- A **scan** is an agent execution run (from zivis_list_scans) — scans may CREATE or UPDATE threat models, but scan IDs ≠ threat model IDs.
-- An **agent instance** is a configured agent (from the UI) — agents RUN scans which produce threat models.
-
-Use the threat model ID (from this tool's response) when calling zivis_get_threat_model, zivis_manage_component, zivis_manage_finding, etc. Do NOT pass scan IDs or agent instance IDs to those tools.`;
-export const LIST_THREAT_MODELS_SCHEMA = {
-    status: z
-        .enum(["draft", "analyzing", "analyzed", "reviewed", "approved", "archived"])
-        .optional()
-        .describe("Filter by threat model status"),
-    limit: z
-        .number()
-        .min(1)
-        .max(100)
-        .default(20)
-        .describe("Maximum number of results (1-100, default 20)"),
-};
-export function createListThreatModelsHandler(apiClient) {
-    return async (params) => {
-        try {
-            const query = new URLSearchParams();
-            if (params.status)
-                query.set("status", params.status);
-            if (params.limit)
-                query.set("limit", String(params.limit));
-            const queryStr = query.toString();
-            const path = `/api/threat-models${queryStr ? `?${queryStr}` : ""}`;
-            const data = await apiClient.get(path);
-            const sanitized = sanitizeResponse(data);
-            // Fetch diagram counts for each threat model in parallel
-            const threatModels = Array.isArray(sanitized) ? sanitized : [];
-            const diagramCounts = await Promise.all(threatModels.map((tm) => apiClient
-                .get(`/api/diagrams?linkedThreatModelId=${tm.id}&take=1`)
-                .then((res) => res.total ?? 0)
-                .catch(() => 0)));
-            // Format with clear ID labeling to prevent confusion with scan/agent IDs
-            const summary = Array.isArray(sanitized)
-                ? sanitized.map((tm, i) => ({
-                    threat_model_id: tm.id,
-                    name: tm.name,
-                    status: tm.status,
-                    description: tm.description,
-                    application: tm.applicationName || null,
-                    campaign: tm.campaignName || null,
-                    latest_version: tm.latestVersion || null,
-                    linked_diagrams_count: diagramCounts[i],
-                    created_at: tm.createdAt,
-                    updated_at: tm.updatedAt,
-                }))
-                : sanitized;
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(summary, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to list threat models";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=list-threat-models.js.map

package/dist/tools/enterprise/list-threat-models.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-threat-models.js","sourceRoot":"","sources":["../../../src/tools/enterprise/list-threat-models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;uMASyJ,CAAC;AAExM,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;SAC5E,QAAQ,EAAE;SACV,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAA2C,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,qBAAqB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA4B,IAAI,CAAC,CAAC;YAElE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAA8B,CAAC;YAEtE,yDAAyD;YACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACtB,SAAS;iBACN,GAAG,CACF,qCAAqC,EAAE,CAAC,EAAE,SAAS,CACpD;iBACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;iBAC7B,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAClB,CACF,CAAC;YAEF,yEAAyE;YACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAA2B,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;oBACzD,eAAe,EAAE,EAAE,CAAC,EAAE;oBACtB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,WAAW,EAAE,EAAE,CAAC,WAAW;oBAC3B,WAAW,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI;oBACvC,QAAQ,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;oBACjC,cAAc,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;oBACxC,qBAAqB,EAAE,aAAa,CAAC,CAAC,CAAC;oBACvC,UAAU,EAAE,EAAE,CAAC,SAAS;oBACxB,UAAU,EAAE,EAAE,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACL,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBACvC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-actor.d.ts

@@ -1,58 +0,0 @@
-/**
- * zivis_manage_actor — Create, update, or delete threat actors in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_ACTOR_NAME = "zivis_manage_actor";
-export declare const MANAGE_ACTOR_DESCRIPTION = "Create, update, or delete a threat actor in a threat model.\n\nThreat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.\n\nActions:\n- create: Add a new threat actor (requires name, actor_type, trust_level)\n- update: Modify an existing actor (requires actor_id)\n- delete: Remove an actor (requires actor_id)";
-export declare const MANAGE_ACTOR_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    actor_id: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    actor_type: z.ZodOptional<z.ZodEnum<{
-        external: "external";
-        internal: "internal";
-        system: "system";
-        third_party: "third_party";
-    }>>;
-    trust_level: z.ZodOptional<z.ZodEnum<{
-        high: "high";
-        medium: "medium";
-        low: "low";
-        untrusted: "untrusted";
-        privileged: "privileged";
-    }>>;
-    description: z.ZodOptional<z.ZodString>;
-    motivation: z.ZodOptional<z.ZodString>;
-    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-};
-export declare function createManageActorHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    actor_id?: string;
-    name?: string;
-    actor_type?: string;
-    trust_level?: string;
-    description?: string;
-    motivation?: string;
-    capabilities?: string[];
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/manage-actor.js

@@ -1,99 +0,0 @@
-/**
- * zivis_manage_actor — Create, update, or delete threat actors in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/actors
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_ACTOR_NAME = "zivis_manage_actor";
-export const MANAGE_ACTOR_DESCRIPTION = `Create, update, or delete a threat actor in a threat model.
-
-Threat actors represent entities that interact with or threaten the system (e.g., external users, attackers, services). Each actor has a trust level, type, and capabilities.
-
-Actions:
-- create: Add a new threat actor (requires name, actor_type, trust_level)
-- update: Modify an existing actor (requires actor_id)
-- delete: Remove an actor (requires actor_id)`;
-export const MANAGE_ACTOR_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
-    actor_id: z.string().optional().describe("Actor UUID (required for update/delete)"),
-    name: z.string().optional().describe("Actor name (e.g., 'External Attacker', 'API Consumer')"),
-    actor_type: z
-        .enum(["external", "internal", "system", "third_party"])
-        .optional()
-        .describe("Type of threat actor"),
-    trust_level: z
-        .enum(["untrusted", "low", "medium", "high", "privileged"])
-        .optional()
-        .describe("Trust level assigned to this actor"),
-    description: z.string().optional().describe("Description of the actor's role and intent"),
-    motivation: z.string().optional().describe("Actor's motivation (e.g., financial gain, espionage)"),
-    capabilities: z.array(z.string()).optional().describe("Actor capabilities (e.g., ['network_access', 'social_engineering'])"),
-};
-export function createManageActorHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, actor_id } = params;
-            if ((action === "update" || action === "delete") && !actor_id) {
-                return {
-                    content: [{ type: "text", text: "Error: actor_id is required for update/delete" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.name || !params.actor_type || !params.trust_level) {
-                    return {
-                        content: [{ type: "text", text: "Error: name, actor_type, and trust_level are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/actors`, {
-                    name: params.name,
-                    actorType: params.actor_type,
-                    trustLevel: params.trust_level,
-                    description: params.description,
-                    motivation: params.motivation,
-                    capabilities: params.capabilities,
-                });
-            }
-            else if (action === "update") {
-                const body = {};
-                if (params.name)
-                    body.name = params.name;
-                if (params.actor_type)
-                    body.actorType = params.actor_type;
-                if (params.trust_level)
-                    body.trustLevel = params.trust_level;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.motivation !== undefined)
-                    body.motivation = params.motivation;
-                if (params.capabilities)
-                    body.capabilities = params.capabilities;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/actors/${actor_id}`, body);
-            }
-            else {
-                data = await apiClient.del(`/api/threat-models/${threat_model_id}/actors/${actor_id}`);
-            }
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage actor";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-actor.js.map

package/dist/tools/enterprise/manage-actor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-actor.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-actor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;8CAOM,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC9F,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;SACvD,QAAQ,EAAE;SACV,QAAQ,CAAC,sBAAsB,CAAC;IACnC,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;SAC1D,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAClG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;CAC7H,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAErD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC9D,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;wBAC9G,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,SAAS,EAC9C;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;oBAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,UAAU;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC1D,IAAI,MAAM,CAAC,WAAW;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC7D,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzE,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBAEjE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,WAAW,QAAQ,EAAE,EAC1D,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,WAAW,QAAQ,EAAE,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-attack-scenario.d.ts

@@ -1,70 +0,0 @@
-/**
- * zivis_manage_attack_scenario — Create, update, or delete attack scenarios
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/attack-scenarios
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_ATTACK_SCENARIO_NAME = "zivis_manage_attack_scenario";
-export declare const MANAGE_ATTACK_SCENARIO_DESCRIPTION = "Create, update, or delete an attack scenario in a threat model.\n\nAttack scenarios describe specific attack paths \u2014 how a threat actor could exploit vulnerabilities to achieve their objective. They link actors, components, and attack vectors into a cohesive narrative.\n\nActions:\n- create: Add a new scenario (requires title, narrative, entry_point_id, target_id)\n- update: Update scenario status/notes (requires scenario_id)\n- delete: Remove a scenario (requires scenario_id)";
-export declare const MANAGE_ATTACK_SCENARIO_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    scenario_id: z.ZodOptional<z.ZodString>;
-    title: z.ZodOptional<z.ZodString>;
-    narrative: z.ZodOptional<z.ZodString>;
-    entry_point_id: z.ZodOptional<z.ZodString>;
-    target_id: z.ZodOptional<z.ZodString>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-    likelihood: z.ZodOptional<z.ZodEnum<{
-        almost_certain: "almost_certain";
-        likely: "likely";
-        possible: "possible";
-        unlikely: "unlikely";
-    }>>;
-    actor_id: z.ZodOptional<z.ZodString>;
-    goal_category: z.ZodOptional<z.ZodString>;
-    goal_description: z.ZodOptional<z.ZodString>;
-    business_impact: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodString>;
-    user_notes: z.ZodOptional<z.ZodString>;
-};
-export declare function createManageAttackScenarioHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    scenario_id?: string;
-    title?: string;
-    narrative?: string;
-    entry_point_id?: string;
-    target_id?: string;
-    severity?: string;
-    likelihood?: string;
-    actor_id?: string;
-    goal_category?: string;
-    goal_description?: string;
-    business_impact?: string;
-    status?: string;
-    user_notes?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;