@zivis/mcp 0.1.8 → 0.1.10

package/dist/tools/enterprise/manage-finding.js

@@ -1,106 +0,0 @@
-/**
- * zivis_manage_finding — Create or update findings in a threat model
- *
- * Maps to: POST/PATCH /api/threat-models/:id/findings
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_FINDING_NAME = "zivis_manage_finding";
-export const MANAGE_FINDING_DESCRIPTION = `Create or update a finding (vulnerability) in a threat model.
-
-Findings represent confirmed or suspected vulnerabilities discovered during analysis or pen testing. They link to components, attack scenarios, and can be tracked through remediation.
-
-Actions:
-- create: Add a new finding (requires title, severity)
-- update: Modify an existing finding (requires finding_id) — use to update status, add notes, etc.`;
-export const MANAGE_FINDING_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update"]).describe("Action to perform"),
-    finding_id: z.string().optional().describe("Finding UUID (required for update)"),
-    title: z.string().optional().describe("Finding title (e.g., 'SQL Injection in user search endpoint')"),
-    description: z.string().optional().describe("Detailed description of the vulnerability"),
-    severity: z.enum(["critical", "high", "medium", "low", "info"]).optional().describe("Severity level"),
-    status: z
-        .enum(["open", "in_progress", "mitigated", "verified", "accepted_risk", "false_positive"])
-        .optional()
-        .describe("Finding status"),
-    category: z.string().optional().describe("Category (e.g., 'injection', 'authentication', 'authorization')"),
-    component_id: z.string().optional().describe("Affected component UUID"),
-    attack_scenario_id: z.string().optional().describe("Related attack scenario UUID"),
-    cwe_id: z.string().optional().describe("CWE identifier (e.g., 'CWE-89')"),
-    cvss_score: z.number().min(0).max(10).optional().describe("CVSS score (0-10)"),
-    remediation: z.string().optional().describe("Recommended remediation steps"),
-    proof_of_concept: z.string().optional().describe("Proof of concept or reproduction steps"),
-};
-export function createManageFindingHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, finding_id } = params;
-            if (action === "update" && !finding_id) {
-                return {
-                    content: [{ type: "text", text: "Error: finding_id is required for update" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.title || !params.severity) {
-                    return {
-                        content: [{ type: "text", text: "Error: title and severity are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/findings`, {
-                    title: params.title,
-                    description: params.description,
-                    severity: params.severity,
-                    status: params.status || "open",
-                    category: params.category,
-                    componentId: params.component_id,
-                    attackScenarioId: params.attack_scenario_id,
-                    cweId: params.cwe_id,
-                    cvssScore: params.cvss_score,
-                    remediation: params.remediation,
-                    proofOfConcept: params.proof_of_concept,
-                });
-            }
-            else {
-                const body = {};
-                if (params.title)
-                    body.title = params.title;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.severity)
-                    body.severity = params.severity;
-                if (params.status)
-                    body.status = params.status;
-                if (params.category)
-                    body.category = params.category;
-                if (params.component_id)
-                    body.componentId = params.component_id;
-                if (params.attack_scenario_id)
-                    body.attackScenarioId = params.attack_scenario_id;
-                if (params.cwe_id)
-                    body.cweId = params.cwe_id;
-                if (params.cvss_score !== undefined)
-                    body.cvssScore = params.cvss_score;
-                if (params.remediation !== undefined)
-                    body.remediation = params.remediation;
-                if (params.proof_of_concept !== undefined)
-                    body.proofOfConcept = params.proof_of_concept;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/findings/${finding_id}`, body);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage finding";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-finding.js.map

package/dist/tools/enterprise/manage-finding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-finding.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-finding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;mGAMyD,CAAC;AAEpG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IACtG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACrG,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;SACzF,QAAQ,EAAE;SACV,QAAQ,CAAC,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC3G,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACvE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC5E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CAC3F,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAoB;IAC7D,OAAO,KAAK,EAAE,MAeb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;YAEvD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;oBACtF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;wBAC/F,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,WAAW,EAChD;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,cAAc,EAAE,MAAM,CAAC,gBAAgB;iBACxC,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5C,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/C,IAAI,MAAM,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAChE,IAAI,MAAM,CAAC,kBAAkB;oBAAE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBACjF,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBACxE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAEzF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,aAAa,UAAU,EAAE,EAC9D,IAAI,CACL,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAChF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-security-control.d.ts

@@ -1,59 +0,0 @@
-/**
- * zivis_manage_security_control — Create, update, or delete security controls
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/security-controls
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_SECURITY_CONTROL_NAME = "zivis_manage_security_control";
-export declare const MANAGE_SECURITY_CONTROL_DESCRIPTION = "Create, update, or delete a security control in a threat model.\n\nSecurity controls are mitigations that reduce or eliminate threats (e.g., input validation, rate limiting, encryption at rest).\n\nActions:\n- create: Add a new control (requires name, control_type)\n- update: Modify an existing control (requires control_id)\n- delete: Remove a control (requires control_id)";
-export declare const MANAGE_SECURITY_CONTROL_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    control_id: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    control_type: z.ZodOptional<z.ZodEnum<{
-        preventive: "preventive";
-        detective: "detective";
-        responsive: "responsive";
-    }>>;
-    description: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        not_implemented: "not_implemented";
-        partial: "partial";
-        implemented: "implemented";
-    }>>;
-    effectiveness_rating: z.ZodOptional<z.ZodEnum<{
-        high: "high";
-        medium: "medium";
-        low: "low";
-    }>>;
-    component_id: z.ZodOptional<z.ZodString>;
-};
-export declare function createManageSecurityControlHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    control_id?: string;
-    name?: string;
-    control_type?: string;
-    description?: string;
-    status?: string;
-    effectiveness_rating?: string;
-    component_id?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/manage-security-control.js

@@ -1,96 +0,0 @@
-/**
- * zivis_manage_security_control — Create, update, or delete security controls
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/security-controls
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_SECURITY_CONTROL_NAME = "zivis_manage_security_control";
-export const MANAGE_SECURITY_CONTROL_DESCRIPTION = `Create, update, or delete a security control in a threat model.
-
-Security controls are mitigations that reduce or eliminate threats (e.g., input validation, rate limiting, encryption at rest).
-
-Actions:
-- create: Add a new control (requires name, control_type)
-- update: Modify an existing control (requires control_id)
-- delete: Remove a control (requires control_id)`;
-export const MANAGE_SECURITY_CONTROL_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
-    control_id: z.string().optional().describe("Control UUID (required for update/delete)"),
-    name: z.string().optional().describe("Control name (e.g., 'Input Validation', 'Rate Limiting')"),
-    control_type: z
-        .enum(["preventive", "detective", "responsive"])
-        .optional()
-        .describe("Type of security control"),
-    description: z.string().optional().describe("Description of how the control works"),
-    status: z
-        .enum(["not_implemented", "partial", "implemented"])
-        .optional()
-        .describe("Current implementation status"),
-    effectiveness_rating: z
-        .enum(["high", "medium", "low"])
-        .optional()
-        .describe("Estimated effectiveness of the control"),
-    component_id: z.string().optional().describe("Component UUID this control applies to"),
-};
-export function createManageSecurityControlHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, control_id } = params;
-            if ((action === "update" || action === "delete") && !control_id) {
-                return {
-                    content: [{ type: "text", text: "Error: control_id is required for update/delete" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.name || !params.control_type) {
-                    return {
-                        content: [{ type: "text", text: "Error: name and control_type are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/security-controls`, {
-                    name: params.name,
-                    controlType: params.control_type,
-                    description: params.description,
-                    status: params.status,
-                    effectivenessRating: params.effectiveness_rating,
-                    componentId: params.component_id,
-                });
-            }
-            else if (action === "update") {
-                const body = {};
-                if (params.name)
-                    body.name = params.name;
-                if (params.control_type)
-                    body.controlType = params.control_type;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.status)
-                    body.status = params.status;
-                if (params.effectiveness_rating)
-                    body.effectivenessRating = params.effectiveness_rating;
-                if (params.component_id)
-                    body.componentId = params.component_id;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/security-controls/${control_id}`, body);
-            }
-            else {
-                data = await apiClient.del(`/api/threat-models/${threat_model_id}/security-controls/${control_id}`);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage security control";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-security-control.js.map

package/dist/tools/enterprise/manage-security-control.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-security-control.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-security-control.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;AAE5E,MAAM,CAAC,MAAM,mCAAmC,GAAG;;;;;;;iDAOF,CAAC;AAElD,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAChG,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC/C,QAAQ,EAAE;SACV,QAAQ,CAAC,0BAA0B,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,oBAAoB,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACvF,CAAC;AAEF,MAAM,UAAU,kCAAkC,CAAC,SAAoB;IACrE,OAAO,KAAK,EAAE,MAUb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;YAEvD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iDAAiD,EAAE,CAAC;oBAC7F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;wBAClG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,oBAAoB,EACzD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,YAAY;oBAChC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,mBAAmB,EAAE,MAAM,CAAC,oBAAoB;oBAChD,WAAW,EAAE,MAAM,CAAC,YAAY;iBACjC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAChE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/C,IAAI,MAAM,CAAC,oBAAoB;oBAAE,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBACxF,IAAI,MAAM,CAAC,YAAY;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;gBAEhE,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,sBAAsB,UAAU,EAAE,EACvE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,sBAAsB,UAAU,EAAE,CACxE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC;YACzF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/manage-test-case.d.ts

@@ -1,88 +0,0 @@
-/**
- * zivis_manage_test_case — Create, update, or delete test cases in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/test-cases
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const MANAGE_TEST_CASE_NAME = "zivis_manage_test_case";
-export declare const MANAGE_TEST_CASE_DESCRIPTION = "Create, update, or delete a test case in a threat model.\n\nTest cases define specific security tests to validate whether vulnerabilities exist. They link to attack scenarios and can be automated or manual. Test case IDs follow the TC-X.Y format.\n\nActions:\n- create: Add a new test case (requires name, description, success_criteria)\n- update: Modify an existing test case (requires test_case_id) \u2014 use this to record test results\n- delete: Remove a test case (requires test_case_id)";
-export declare const MANAGE_TEST_CASE_SCHEMA: {
-    threat_model_id: z.ZodString;
-    action: z.ZodEnum<{
-        create: "create";
-        update: "update";
-        delete: "delete";
-    }>;
-    test_case_id: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    attack_scenario_id: z.ZodOptional<z.ZodString>;
-    preconditions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    test_steps: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        step: z.ZodNumber;
-        action: z.ZodString;
-        expected: z.ZodString;
-        actual: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    success_criteria: z.ZodOptional<z.ZodString>;
-    evidence_type: z.ZodOptional<z.ZodEnum<{
-        code_snippet: "code_snippet";
-        video: "video";
-        screenshot: "screenshot";
-        http_request: "http_request";
-        log_entry: "log_entry";
-        manual_notes: "manual_notes";
-    }>>;
-    result: z.ZodOptional<z.ZodEnum<{
-        partial: "partial";
-        not_tested: "not_tested";
-        pass: "pass";
-        fail: "fail";
-        blocked: "blocked";
-    }>>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-    findings: z.ZodOptional<z.ZodString>;
-    automatable: z.ZodOptional<z.ZodBoolean>;
-    automation_tool: z.ZodOptional<z.ZodString>;
-};
-export declare function createManageTestCaseHandler(apiClient: ApiClient): (params: {
-    threat_model_id: string;
-    action: "create" | "update" | "delete";
-    test_case_id?: string;
-    name?: string;
-    description?: string;
-    attack_scenario_id?: string;
-    preconditions?: string[];
-    test_steps?: Array<{
-        step: number;
-        action: string;
-        expected: string;
-        actual?: string;
-    }>;
-    success_criteria?: string;
-    evidence_type?: string;
-    result?: string;
-    severity?: string;
-    findings?: string;
-    automatable?: boolean;
-    automation_tool?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/manage-test-case.js

@@ -1,119 +0,0 @@
-/**
- * zivis_manage_test_case — Create, update, or delete test cases in a threat model
- *
- * Maps to: POST/PATCH/DELETE /api/threat-models/:id/test-cases
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const MANAGE_TEST_CASE_NAME = "zivis_manage_test_case";
-export const MANAGE_TEST_CASE_DESCRIPTION = `Create, update, or delete a test case in a threat model.
-
-Test cases define specific security tests to validate whether vulnerabilities exist. They link to attack scenarios and can be automated or manual. Test case IDs follow the TC-X.Y format.
-
-Actions:
-- create: Add a new test case (requires name, description, success_criteria)
-- update: Modify an existing test case (requires test_case_id) — use this to record test results
-- delete: Remove a test case (requires test_case_id)`;
-export const MANAGE_TEST_CASE_SCHEMA = {
-    threat_model_id: z.string().describe("Threat model UUID (from zivis_list_threat_models, NOT a scan ID or agent ID)"),
-    action: z.enum(["create", "update", "delete"]).describe("CRUD action to perform"),
-    test_case_id: z.string().optional().describe("Test case UUID (required for update/delete)"),
-    name: z.string().optional().describe("Test case name (e.g., 'SQL Injection in Login')"),
-    description: z.string().optional().describe("Detailed description of what to test"),
-    attack_scenario_id: z.string().optional().describe("Attack scenario UUID this test validates"),
-    preconditions: z.array(z.string()).optional().describe("Prerequisites before running the test"),
-    test_steps: z.array(z.object({
-        step: z.number(),
-        action: z.string(),
-        expected: z.string(),
-        actual: z.string().optional(),
-    })).optional().describe("Ordered list of test steps with expected outcomes"),
-    success_criteria: z.string().optional().describe("What constitutes a successful test (finding a vulnerability)"),
-    evidence_type: z
-        .enum(["screenshot", "http_request", "code_snippet", "log_entry", "video", "manual_notes"])
-        .optional()
-        .describe("Type of evidence to collect"),
-    result: z
-        .enum(["not_tested", "pass", "fail", "partial", "blocked"])
-        .optional()
-        .describe("Test result (use update action to set this after testing)"),
-    severity: z.enum(["critical", "high", "medium", "low", "info"]).optional().describe("Severity if vulnerability confirmed"),
-    findings: z.string().optional().describe("Description of what was found during testing"),
-    automatable: z.boolean().optional().describe("Whether this test can be automated"),
-    automation_tool: z.string().optional().describe("Tool for automation (nuclei, burp, zap, custom)"),
-};
-export function createManageTestCaseHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { threat_model_id, action, test_case_id } = params;
-            if ((action === "update" || action === "delete") && !test_case_id) {
-                return {
-                    content: [{ type: "text", text: "Error: test_case_id is required for update/delete" }],
-                    isError: true,
-                };
-            }
-            let data;
-            if (action === "create") {
-                if (!params.name || !params.description || !params.success_criteria) {
-                    return {
-                        content: [{ type: "text", text: "Error: name, description, and success_criteria are required for create" }],
-                        isError: true,
-                    };
-                }
-                data = await apiClient.post(`/api/threat-models/${threat_model_id}/test-cases`, {
-                    name: params.name,
-                    description: params.description,
-                    attackScenarioId: params.attack_scenario_id,
-                    preconditions: params.preconditions,
-                    testSteps: params.test_steps,
-                    successCriteria: params.success_criteria,
-                    evidenceType: params.evidence_type || "other",
-                    automatable: params.automatable,
-                    automationTool: params.automation_tool,
-                });
-            }
-            else if (action === "update") {
-                const body = {};
-                if (params.name)
-                    body.name = params.name;
-                if (params.description !== undefined)
-                    body.description = params.description;
-                if (params.attack_scenario_id)
-                    body.attackScenarioId = params.attack_scenario_id;
-                if (params.preconditions)
-                    body.preconditions = params.preconditions;
-                if (params.test_steps)
-                    body.testSteps = params.test_steps;
-                if (params.success_criteria)
-                    body.successCriteria = params.success_criteria;
-                if (params.evidence_type)
-                    body.evidenceType = params.evidence_type;
-                if (params.result)
-                    body.result = params.result;
-                if (params.severity)
-                    body.severity = params.severity;
-                if (params.findings !== undefined)
-                    body.findings = params.findings;
-                if (params.automatable !== undefined)
-                    body.automatable = params.automatable;
-                if (params.automation_tool !== undefined)
-                    body.automationTool = params.automation_tool;
-                data = await apiClient.patch(`/api/threat-models/${threat_model_id}/test-cases/${test_case_id}`, body);
-            }
-            else {
-                data = await apiClient.del(`/api/threat-models/${threat_model_id}/test-cases/${test_case_id}`);
-            }
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to manage test case";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=manage-test-case.js.map

package/dist/tools/enterprise/manage-test-case.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manage-test-case.js","sourceRoot":"","sources":["../../../src/tools/enterprise/manage-test-case.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;qDAOS,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACpH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC9F,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC5E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IAChH,aAAa,EAAE,CAAC;SACb,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;SAC1F,QAAQ,EAAE;SACV,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;SAC1D,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1H,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACxF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAClF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACnG,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,OAAO,KAAK,EAAE,MAgBb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEzD,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,IAA6B,CAAC;YAElC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBACpE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wEAAwE,EAAE,CAAC;wBACpH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CACzB,sBAAsB,eAAe,aAAa,EAClD;oBACE,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,kBAAkB;oBAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,eAAe,EAAE,MAAM,CAAC,gBAAgB;oBACxC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,OAAO;oBAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,cAAc,EAAE,MAAM,CAAC,eAAe;iBACvC,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,kBAAkB;oBAAE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBACjF,IAAI,MAAM,CAAC,aAAa;oBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;gBACpE,IAAI,MAAM,CAAC,UAAU;oBAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC1D,IAAI,MAAM,CAAC,gBAAgB;oBAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAC5E,IAAI,MAAM,CAAC,aAAa;oBAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;gBACnE,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/C,IAAI,MAAM,CAAC,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACrD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACnE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAC5E,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;oBAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,eAAe,CAAC;gBAEvF,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAC1B,sBAAsB,eAAe,eAAe,YAAY,EAAE,EAClE,IAAI,CACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CACxB,sBAAsB,eAAe,eAAe,YAAY,EAAE,CACnE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/promote-finding-to-issue.d.ts

@@ -1,36 +0,0 @@
-/**
- * zivis_promote_finding_to_issue — Promote campaign findings to report issues
- *
- * Maps to: POST /api/reports/:reportId/issues/promote
- * Also uses: POST /api/reports/for-campaign/:campaignId to auto-create report
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const PROMOTE_FINDING_TO_ISSUE_NAME = "zivis_promote_finding_to_issue";
-export declare const PROMOTE_FINDING_TO_ISSUE_DESCRIPTION = "Promote one or more campaign findings to a report issue for the remediation checklist.\n\nCreates a curated report issue from raw scan findings. Multiple findings can be grouped into a single issue (e.g., same root cause across different URLs). The issue gets its own title, description, and recommendation that can differ from the raw finding.\n\nIf no report exists for the campaign yet, one is automatically created.\n\nUse this after reviewing findings to build the official pen test report.";
-export declare const PROMOTE_FINDING_TO_ISSUE_SCHEMA: {
-    campaign_id: z.ZodString;
-    finding_ids: z.ZodArray<z.ZodString>;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    recommendation: z.ZodOptional<z.ZodString>;
-};
-export declare function createPromoteFindingToIssueHandler(apiClient: ApiClient): (params: {
-    campaign_id: string;
-    finding_ids: string[];
-    title?: string;
-    description?: string;
-    recommendation?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/promote-finding-to-issue.js

@@ -1,65 +0,0 @@
-/**
- * zivis_promote_finding_to_issue — Promote campaign findings to report issues
- *
- * Maps to: POST /api/reports/:reportId/issues/promote
- * Also uses: POST /api/reports/for-campaign/:campaignId to auto-create report
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const PROMOTE_FINDING_TO_ISSUE_NAME = "zivis_promote_finding_to_issue";
-export const PROMOTE_FINDING_TO_ISSUE_DESCRIPTION = `Promote one or more campaign findings to a report issue for the remediation checklist.
-
-Creates a curated report issue from raw scan findings. Multiple findings can be grouped into a single issue (e.g., same root cause across different URLs). The issue gets its own title, description, and recommendation that can differ from the raw finding.
-
-If no report exists for the campaign yet, one is automatically created.
-
-Use this after reviewing findings to build the official pen test report.`;
-export const PROMOTE_FINDING_TO_ISSUE_SCHEMA = {
-    campaign_id: z.string().describe("Campaign UUID — used to find or create the campaign report"),
-    finding_ids: z.array(z.string()).min(1).describe("Array of CampaignFinding UUIDs to promote"),
-    title: z.string().optional().describe("Custom issue title (defaults to finding title)"),
-    description: z.string().optional().describe("Custom issue description"),
-    recommendation: z.string().optional().describe("Custom remediation recommendation"),
-};
-export function createPromoteFindingToIssueHandler(apiClient) {
-    return async (params) => {
-        try {
-            // Step 1: Get or create the report for this campaign
-            const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
-            const reportId = reportData.reportId;
-            if (!reportId) {
-                return {
-                    content: [{ type: "text", text: "Error: Could not get or create report for campaign" }],
-                    isError: true,
-                };
-            }
-            // Step 2: Promote findings to an issue
-            const issue = await apiClient.post(`/api/reports/${reportId}/issues/promote`, {
-                campaignFindingIds: params.finding_ids,
-                title: params.title,
-                description: params.description,
-                recommendation: params.recommendation,
-            });
-            const result = sanitizeResponse({
-                issue,
-                reportId,
-                nextSteps: [
-                    "Issue added to remediation checklist.",
-                    "Use zivis_list_report_issues to see all issues.",
-                    "Use zivis_update_report_issue to change status (open → in_progress → done).",
-                ],
-            });
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to promote finding to issue";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=promote-finding-to-issue.js.map

package/dist/tools/enterprise/promote-finding-to-issue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"promote-finding-to-issue.js","sourceRoot":"","sources":["../../../src/tools/enterprise/promote-finding-to-issue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,6BAA6B,GAAG,gCAAgC,CAAC;AAE9E,MAAM,CAAC,MAAM,oCAAoC,GAAG;;;;;;yEAMqB,CAAC;AAE1E,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAC9F,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACvE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACpF,CAAC;AAEF,MAAM,UAAU,kCAAkC,CAAC,SAAoB;IACrE,OAAO,KAAK,EAAE,MAMb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC;oBAChG,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,uCAAuC;YACvC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAChC,gBAAgB,QAAQ,iBAAiB,EACzC;gBACE,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CACF,CAAC;YAEF,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,KAAK;gBACL,QAAQ;gBACR,SAAS,EAAE;oBACT,uCAAuC;oBACvC,iDAAiD;oBACjD,6EAA6E;iBAC9E;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,CAAC;YAC1F,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/publish-report-version.d.ts

@@ -1,34 +0,0 @@
-/**
- * zivis_publish_report_version — Publish a report version and optionally export PDF
- *
- * Maps to: POST /api/reports/:reportId/publish
- *        + POST /api/reports/:reportId/export (optional)
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const PUBLISH_REPORT_VERSION_NAME = "zivis_publish_report_version";
-export declare const PUBLISH_REPORT_VERSION_DESCRIPTION = "Publish a new version of the campaign report and optionally export as PDF.\n\nPublishing creates an immutable snapshot of the current report state (all sections, issues, remediation status). Each version gets a version number and optional changelog.\n\nUse this when the report is ready for delivery or when you want to checkpoint progress.\n\nWorkflow: Write sections \u2192 promote findings \u2192 publish version \u2192 export PDF.";
-export declare const PUBLISH_REPORT_VERSION_SCHEMA: {
-    campaign_id: z.ZodOptional<z.ZodString>;
-    report_id: z.ZodOptional<z.ZodString>;
-    changelog: z.ZodOptional<z.ZodString>;
-    export_pdf: z.ZodDefault<z.ZodBoolean>;
-};
-export declare function createPublishReportVersionHandler(apiClient: ApiClient): (params: {
-    campaign_id?: string;
-    report_id?: string;
-    changelog?: string;
-    export_pdf?: boolean;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;