@zivis/mcp 0.1.8 → 0.1.10

package/dist/tools/enterprise/publish-report-version.js

@@ -1,75 +0,0 @@
-/**
- * zivis_publish_report_version — Publish a report version and optionally export PDF
- *
- * Maps to: POST /api/reports/:reportId/publish
- *        + POST /api/reports/:reportId/export (optional)
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const PUBLISH_REPORT_VERSION_NAME = "zivis_publish_report_version";
-export const PUBLISH_REPORT_VERSION_DESCRIPTION = `Publish a new version of the campaign report and optionally export as PDF.
-
-Publishing creates an immutable snapshot of the current report state (all sections, issues, remediation status). Each version gets a version number and optional changelog.
-
-Use this when the report is ready for delivery or when you want to checkpoint progress.
-
-Workflow: Write sections → promote findings → publish version → export PDF.`;
-export const PUBLISH_REPORT_VERSION_SCHEMA = {
-    campaign_id: z.string().optional().describe("Campaign UUID — auto-resolves to report"),
-    report_id: z.string().optional().describe("Report UUID (alternative to campaign_id)"),
-    changelog: z.string().optional().describe("What changed in this version (e.g., 'Added SQL injection findings')"),
-    export_pdf: z.boolean().default(false).describe("Also trigger PDF export after publishing"),
-};
-export function createPublishReportVersionHandler(apiClient) {
-    return async (params) => {
-        try {
-            let reportId = params.report_id;
-            // Resolve campaign → report if needed
-            if (!reportId && params.campaign_id) {
-                const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
-                reportId = reportData.reportId;
-            }
-            if (!reportId) {
-                return {
-                    content: [{ type: "text", text: "Error: Provide either campaign_id or report_id" }],
-                    isError: true,
-                };
-            }
-            // Publish version
-            const version = await apiClient.post(`/api/reports/${reportId}/publish`, { changelog: params.changelog });
-            // Optionally export PDF
-            let pdfExport = null;
-            if (params.export_pdf) {
-                try {
-                    pdfExport = await apiClient.post(`/api/reports/${reportId}/export`, {});
-                }
-                catch (pdfErr) {
-                    console.error("PDF export failed:", pdfErr);
-                }
-            }
-            const result = sanitizeResponse({
-                version,
-                pdfExport,
-                reportId,
-                nextSteps: [
-                    "Version published successfully.",
-                    pdfExport
-                        ? "PDF export triggered. Check status with zivis_get_report_status."
-                        : "Use export_pdf: true to generate a PDF.",
-                    "View the report at the campaign's Report tab in the platform.",
-                ],
-            });
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to publish report version";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=publish-report-version.js.map

package/dist/tools/enterprise/publish-report-version.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"publish-report-version.js","sourceRoot":"","sources":["../../../src/tools/enterprise/publish-report-version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAE1E,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;;4EAM0B,CAAC;AAE7E,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAChH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC5F,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAAC,SAAoB;IACpE,OAAO,KAAK,EAAE,MAKb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAEhC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;oBAC5F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,kBAAkB;YAClB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAClC,gBAAgB,QAAQ,UAAU,EAClC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAChC,CAAC;YAEF,wBAAwB;YACxB,IAAI,SAAS,GAAmC,IAAI,CAAC;YACrD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAC9B,gBAAgB,QAAQ,SAAS,EACjC,EAAE,CACH,CAAC;gBACJ,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,OAAO;gBACP,SAAS;gBACT,QAAQ;gBACR,SAAS,EAAE;oBACT,iCAAiC;oBACjC,SAAS;wBACP,CAAC,CAAC,kEAAkE;wBACpE,CAAC,CAAC,yCAAyC;oBAC7C,+DAA+D;iBAChE;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;YACxF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/publish-test-to-library.d.ts

@@ -1,31 +0,0 @@
-/**
- * zivis_publish_test_to_library — Publish a manual test to the agent test case library
- *
- * Maps to: POST /api/pentest-sessions/:id/results/:resultId/publish
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const PUBLISH_TEST_TO_LIBRARY_NAME = "zivis_publish_test_to_library";
-export declare const PUBLISH_TEST_TO_LIBRARY_DESCRIPTION = "Publish a manual test result to the ZIVIS agent test case library.\n\nWhen you discover a good test case during manual pen testing, use this to make it available to automated ZIVIS agents (pen test agent, red team agent). The test case will be added to the specified agent instance's test library with source=\"user\".";
-export declare const PUBLISH_TEST_TO_LIBRARY_SCHEMA: {
-    session_id: z.ZodString;
-    result_id: z.ZodString;
-    agent_instance_id: z.ZodString;
-};
-export declare function createPublishTestToLibraryHandler(apiClient: ApiClient): (params: {
-    session_id: string;
-    result_id: string;
-    agent_instance_id: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/publish-test-to-library.js

@@ -1,40 +0,0 @@
-/**
- * zivis_publish_test_to_library — Publish a manual test to the agent test case library
- *
- * Maps to: POST /api/pentest-sessions/:id/results/:resultId/publish
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const PUBLISH_TEST_TO_LIBRARY_NAME = "zivis_publish_test_to_library";
-export const PUBLISH_TEST_TO_LIBRARY_DESCRIPTION = `Publish a manual test result to the ZIVIS agent test case library.
-
-When you discover a good test case during manual pen testing, use this to make it available to automated ZIVIS agents (pen test agent, red team agent). The test case will be added to the specified agent instance's test library with source="user".`;
-export const PUBLISH_TEST_TO_LIBRARY_SCHEMA = {
-    session_id: z.string().describe("Pen test session UUID"),
-    result_id: z.string().describe("Test result UUID to publish"),
-    agent_instance_id: z.string().describe("Agent instance UUID to add the test case to"),
-};
-export function createPublishTestToLibraryHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post(`/api/pentest-sessions/${params.session_id}/results/${params.result_id}/publish`, { agentInstanceId: params.agent_instance_id });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to publish test to library";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=publish-test-to-library.js.map

package/dist/tools/enterprise/publish-test-to-library.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"publish-test-to-library.js","sourceRoot":"","sources":["../../../src/tools/enterprise/publish-test-to-library.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;AAE5E,MAAM,CAAC,MAAM,mCAAmC,GAAG;;uPAEoM,CAAC;AAExP,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC7D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CACtF,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAAC,SAAoB;IACpE,OAAO,KAAK,EAAE,MAIb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,yBAAyB,MAAM,CAAC,UAAU,YAAY,MAAM,CAAC,SAAS,UAAU,EAChF,EAAE,eAAe,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAC9C,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC;YACzF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/record-test-result.d.ts

@@ -1,67 +0,0 @@
-/**
- * zivis_record_test_result — Record a test result in a pen test session
- *
- * Maps to: POST /api/pentest-sessions/:id/results
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const RECORD_TEST_RESULT_NAME = "zivis_record_test_result";
-export declare const RECORD_TEST_RESULT_DESCRIPTION = "Record the result of a specific test within a pen test session.\n\nAfter running a manual test (e.g., SQL injection attempt, auth bypass), use this tool to log the outcome. If the test is linked to a threat model test case, the test case result will be updated automatically.\n\nInclude evidence IDs from zivis_capture_evidence to link screenshots or terminal output to the result.";
-export declare const RECORD_TEST_RESULT_SCHEMA: {
-    session_id: z.ZodString;
-    test_name: z.ZodString;
-    result: z.ZodEnum<{
-        partial: "partial";
-        not_tested: "not_tested";
-        pass: "pass";
-        fail: "fail";
-        blocked: "blocked";
-    }>;
-    test_description: z.ZodOptional<z.ZodString>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-    findings: z.ZodOptional<z.ZodString>;
-    steps_performed: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        step: z.ZodNumber;
-        action: z.ZodString;
-        expected: z.ZodString;
-        actual: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    evidence_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    test_case_id: z.ZodOptional<z.ZodString>;
-    threat_finding_id: z.ZodOptional<z.ZodString>;
-};
-export declare function createRecordTestResultHandler(apiClient: ApiClient): (params: {
-    session_id: string;
-    test_name: string;
-    result: string;
-    test_description?: string;
-    severity?: string;
-    findings?: string;
-    steps_performed?: Array<{
-        step: number;
-        action: string;
-        expected: string;
-        actual?: string;
-    }>;
-    evidence_ids?: string[];
-    test_case_id?: string;
-    threat_finding_id?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/record-test-result.js

@@ -1,75 +0,0 @@
-/**
- * zivis_record_test_result — Record a test result in a pen test session
- *
- * Maps to: POST /api/pentest-sessions/:id/results
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const RECORD_TEST_RESULT_NAME = "zivis_record_test_result";
-export const RECORD_TEST_RESULT_DESCRIPTION = `Record the result of a specific test within a pen test session.
-
-After running a manual test (e.g., SQL injection attempt, auth bypass), use this tool to log the outcome. If the test is linked to a threat model test case, the test case result will be updated automatically.
-
-Include evidence IDs from zivis_capture_evidence to link screenshots or terminal output to the result.`;
-export const RECORD_TEST_RESULT_SCHEMA = {
-    session_id: z.string().describe("Pen test session UUID"),
-    test_name: z.string().describe("Name of the test performed"),
-    result: z
-        .enum(["pass", "fail", "partial", "blocked", "not_tested"])
-        .describe("Test result (pass = no vulnerability found, fail = vulnerability confirmed)"),
-    test_description: z.string().optional().describe("Description of what was tested"),
-    severity: z
-        .enum(["critical", "high", "medium", "low", "info"])
-        .optional()
-        .describe("Severity if vulnerability found (typically set when result is 'fail')"),
-    findings: z.string().optional().describe("Description of what was discovered"),
-    steps_performed: z
-        .array(z.object({
-        step: z.number(),
-        action: z.string(),
-        expected: z.string(),
-        actual: z.string().optional(),
-    }))
-        .optional()
-        .describe("Steps performed during the test"),
-    evidence_ids: z
-        .array(z.string())
-        .optional()
-        .describe("Evidence UUIDs to link to this result (from zivis_capture_evidence)"),
-    test_case_id: z.string().optional().describe("Threat model test case UUID (auto-updates the test case result)"),
-    threat_finding_id: z.string().optional().describe("Existing threat finding UUID to link this result to"),
-};
-export function createRecordTestResultHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post(`/api/pentest-sessions/${params.session_id}/results`, {
-                testName: params.test_name,
-                result: params.result,
-                testDescription: params.test_description,
-                severity: params.severity,
-                findings: params.findings,
-                stepsPerformed: params.steps_performed,
-                evidenceIds: params.evidence_ids,
-                testCaseId: params.test_case_id,
-                threatFindingId: params.threat_finding_id,
-            });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to record test result";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=record-test-result.js.map

package/dist/tools/enterprise/record-test-result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"record-test-result.js","sourceRoot":"","sources":["../../../src/tools/enterprise/record-test-result.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;uGAIyD,CAAC;AAExG,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC5D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;SAC1D,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAClF,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,uEAAuE,CAAC;IACpF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC9E,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC;SACF,QAAQ,EAAE;SACV,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;IAClF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC/G,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CACzG,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,SAAoB;IAChE,OAAO,KAAK,EAAE,MAWb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,yBAAyB,MAAM,CAAC,UAAU,UAAU,EACpD;gBACE,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE,MAAM,CAAC,gBAAgB;gBACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,UAAU,EAAE,MAAM,CAAC,YAAY;gBAC/B,eAAe,EAAE,MAAM,CAAC,iBAAiB;aAC1C,CACF,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACpF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/start-pentest-session.d.ts

@@ -1,35 +0,0 @@
-/**
- * zivis_start_pentest_session — Start a manual pen test session
- *
- * Maps to: POST /api/pentest-sessions
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const START_PENTEST_SESSION_NAME = "zivis_start_pentest_session";
-export declare const START_PENTEST_SESSION_DESCRIPTION = "Start a new manual pen test session. This creates a tracking record for your pen testing work in Claude Code.\n\nOptionally link the session to a threat model and/or campaign for organizational context. Test results recorded during this session will be tracked and can be published to the agent test case library.\n\nReturns the session ID which you'll need for recording test results and ending the session.";
-export declare const START_PENTEST_SESSION_SCHEMA: {
-    name: z.ZodString;
-    tester_name: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    threat_model_id: z.ZodOptional<z.ZodString>;
-    campaign_id: z.ZodOptional<z.ZodString>;
-};
-export declare function createStartPentestSessionHandler(apiClient: ApiClient): (params: {
-    name: string;
-    tester_name: string;
-    description?: string;
-    threat_model_id?: string;
-    campaign_id?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/start-pentest-session.js

@@ -1,50 +0,0 @@
-/**
- * zivis_start_pentest_session — Start a manual pen test session
- *
- * Maps to: POST /api/pentest-sessions
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const START_PENTEST_SESSION_NAME = "zivis_start_pentest_session";
-export const START_PENTEST_SESSION_DESCRIPTION = `Start a new manual pen test session. This creates a tracking record for your pen testing work in Claude Code.
-
-Optionally link the session to a threat model and/or campaign for organizational context. Test results recorded during this session will be tracked and can be published to the agent test case library.
-
-Returns the session ID which you'll need for recording test results and ending the session.`;
-export const START_PENTEST_SESSION_SCHEMA = {
-    name: z.string().describe("Session name (e.g., 'API Auth Testing - Sprint 12')"),
-    tester_name: z.string().describe("Name of the pen tester"),
-    description: z.string().optional().describe("Description of the testing scope and objectives"),
-    threat_model_id: z.string().optional().describe("Threat model UUID to link this session to"),
-    campaign_id: z.string().optional().describe("Campaign UUID to link this session to"),
-};
-export function createStartPentestSessionHandler(apiClient) {
-    return async (params) => {
-        try {
-            const data = await apiClient.post("/api/pentest-sessions", {
-                name: params.name,
-                testerName: params.tester_name,
-                description: params.description,
-                threatModelId: params.threat_model_id,
-                campaignId: params.campaign_id,
-            });
-            const sanitized = sanitizeResponse(data);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitized, null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to start pentest session";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=start-pentest-session.js.map

package/dist/tools/enterprise/start-pentest-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"start-pentest-session.js","sourceRoot":"","sources":["../../../src/tools/enterprise/start-pentest-session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;4FAI2C,CAAC;AAE7F,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAChF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC9F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACrF,CAAC;AAEF,MAAM,UAAU,gCAAgC,CAAC,SAAoB;IACnE,OAAO,KAAK,EAAE,MAMb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,uBAAuB,EACvB;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,eAAe;gBACrC,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CACF,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAEzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YACvF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/sync-report-section.d.ts

@@ -1,41 +0,0 @@
-/**
- * zivis_sync_report_section — Push a markdown report section to the platform
- *
- * Maps to: PATCH /api/reports/:reportId/sections/:sectionKey
- *
- * This is the core tool for the repo-based reporting workflow.
- * The pen tester writes markdown locally, and this tool pushes
- * sections to the platform for rendering in the Report tab.
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const SYNC_REPORT_SECTION_NAME = "zivis_sync_report_section";
-export declare const SYNC_REPORT_SECTION_DESCRIPTION = "Push a markdown report section to the ZIVIS platform.\n\nUse this to sync report content written locally (in your editor/repo) to the platform. Each section is identified by a key and can be updated independently.\n\nStandard section keys:\n- executive_summary\n- scope_and_methodology\n- attack_surface\n- findings_detail\n- remediation_checklist\n- appendix\n\nYou can also create custom sections with any key.\n\nWorkflow: Write markdown locally \u2192 call this tool to push to platform \u2192 view in Report tab.";
-export declare const SYNC_REPORT_SECTION_SCHEMA: {
-    campaign_id: z.ZodOptional<z.ZodString>;
-    report_id: z.ZodOptional<z.ZodString>;
-    section_key: z.ZodString;
-    title: z.ZodString;
-    content: z.ZodString;
-    order_index: z.ZodOptional<z.ZodNumber>;
-};
-export declare function createSyncReportSectionHandler(apiClient: ApiClient): (params: {
-    campaign_id?: string;
-    report_id?: string;
-    section_key: string;
-    title: string;
-    content: string;
-    order_index?: number;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-}>;

package/dist/tools/enterprise/sync-report-section.js

@@ -1,79 +0,0 @@
-/**
- * zivis_sync_report_section — Push a markdown report section to the platform
- *
- * Maps to: PATCH /api/reports/:reportId/sections/:sectionKey
- *
- * This is the core tool for the repo-based reporting workflow.
- * The pen tester writes markdown locally, and this tool pushes
- * sections to the platform for rendering in the Report tab.
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const SYNC_REPORT_SECTION_NAME = "zivis_sync_report_section";
-export const SYNC_REPORT_SECTION_DESCRIPTION = `Push a markdown report section to the ZIVIS platform.
-
-Use this to sync report content written locally (in your editor/repo) to the platform. Each section is identified by a key and can be updated independently.
-
-Standard section keys:
-- executive_summary
-- scope_and_methodology
-- attack_surface
-- findings_detail
-- remediation_checklist
-- appendix
-
-You can also create custom sections with any key.
-
-Workflow: Write markdown locally → call this tool to push to platform → view in Report tab.`;
-export const SYNC_REPORT_SECTION_SCHEMA = {
-    campaign_id: z.string().optional().describe("Campaign UUID — auto-resolves to report"),
-    report_id: z.string().optional().describe("Report UUID (alternative to campaign_id)"),
-    section_key: z.string().describe("Section identifier (e.g., 'executive_summary', 'findings_detail')"),
-    title: z.string().describe("Section display title (e.g., 'Executive Summary')"),
-    content: z.string().describe("Markdown content for this section"),
-    order_index: z.number().optional().describe("Display order (0-based, lower = earlier)"),
-};
-export function createSyncReportSectionHandler(apiClient) {
-    return async (params) => {
-        try {
-            let reportId = params.report_id;
-            // Resolve campaign → report if needed
-            if (!reportId && params.campaign_id) {
-                const reportData = await apiClient.post(`/api/reports/for-campaign/${params.campaign_id}`, {});
-                reportId = reportData.reportId;
-            }
-            if (!reportId) {
-                return {
-                    content: [{ type: "text", text: "Error: Provide either campaign_id or report_id" }],
-                    isError: true,
-                };
-            }
-            const data = await apiClient.post(`/api/reports/${reportId}/sections`, {
-                sectionKey: params.section_key,
-                title: params.title,
-                content: params.content,
-                orderIndex: params.order_index,
-            });
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify(sanitizeResponse({
-                            ...data,
-                            reportId,
-                            message: `Section "${params.title}" synced to report.`,
-                        }), null, 2),
-                    },
-                ],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to sync report section";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=sync-report-section.js.map

package/dist/tools/enterprise/sync-report-section.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-report-section.js","sourceRoot":"","sources":["../../../src/tools/enterprise/sync-report-section.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;4FAc6C,CAAC;AAE7F,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACrG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACxF,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAoB;IACjE,OAAO,KAAK,EAAE,MAOb,EAAE,EAAE;QACH,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAEhC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CACrC,6BAA6B,MAAM,CAAC,WAAW,EAAE,EACjD,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;oBAC5F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,gBAAgB,QAAQ,WAAW,EACnC;gBACE,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CACF,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,gBAAgB,CAAC;4BACf,GAAG,IAAI;4BACP,QAAQ;4BACR,OAAO,EAAE,YAAY,MAAM,CAAC,KAAK,qBAAqB;yBACvD,CAAC,EACF,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACrF,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/enterprise/update-report-issue.d.ts

@@ -1,55 +0,0 @@
-/**
- * zivis_update_report_issue — Update a report issue's status, content, or severity
- *
- * Maps to: PATCH /api/reports/:reportId/issues/:issueId
- *        + DELETE /api/reports/:reportId/issues/:issueId
- */
-import { z } from "zod";
-import type { ApiClient } from "../../api-client.js";
-export declare const UPDATE_REPORT_ISSUE_NAME = "zivis_update_report_issue";
-export declare const UPDATE_REPORT_ISSUE_DESCRIPTION = "Update or remove a report issue in the remediation checklist.\n\nActions:\n- update: Change status (open \u2192 in_progress \u2192 done), edit title/description/recommendation/severity\n- remove: Remove the issue from the report (does not affect the underlying finding)\n\nCommon workflow: After remediation is confirmed, update status to \"done\".";
-export declare const UPDATE_REPORT_ISSUE_SCHEMA: {
-    report_id: z.ZodString;
-    issue_id: z.ZodString;
-    action: z.ZodDefault<z.ZodEnum<{
-        update: "update";
-        remove: "remove";
-    }>>;
-    status: z.ZodOptional<z.ZodEnum<{
-        open: "open";
-        in_progress: "in_progress";
-        done: "done";
-    }>>;
-    title: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    recommendation: z.ZodOptional<z.ZodString>;
-    severity: z.ZodOptional<z.ZodEnum<{
-        critical: "critical";
-        high: "high";
-        medium: "medium";
-        low: "low";
-        info: "info";
-    }>>;
-};
-export declare function createUpdateReportIssueHandler(apiClient: ApiClient): (params: {
-    report_id: string;
-    issue_id: string;
-    action?: "update" | "remove";
-    status?: string;
-    title?: string;
-    description?: string;
-    recommendation?: string;
-    severity?: string;
-}) => Promise<{
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError?: undefined;
-} | {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: boolean;
-}>;

package/dist/tools/enterprise/update-report-issue.js

@@ -1,69 +0,0 @@
-/**
- * zivis_update_report_issue — Update a report issue's status, content, or severity
- *
- * Maps to: PATCH /api/reports/:reportId/issues/:issueId
- *        + DELETE /api/reports/:reportId/issues/:issueId
- */
-import { z } from "zod";
-import { sanitizeResponse } from "../../sanitize.js";
-export const UPDATE_REPORT_ISSUE_NAME = "zivis_update_report_issue";
-export const UPDATE_REPORT_ISSUE_DESCRIPTION = `Update or remove a report issue in the remediation checklist.
-
-Actions:
-- update: Change status (open → in_progress → done), edit title/description/recommendation/severity
-- remove: Remove the issue from the report (does not affect the underlying finding)
-
-Common workflow: After remediation is confirmed, update status to "done".`;
-export const UPDATE_REPORT_ISSUE_SCHEMA = {
-    report_id: z.string().describe("Report UUID"),
-    issue_id: z.string().describe("Report issue UUID"),
-    action: z.enum(["update", "remove"]).default("update").describe("Action to perform"),
-    status: z.enum(["open", "in_progress", "done"]).optional().describe("New status"),
-    title: z.string().optional().describe("Updated title"),
-    description: z.string().optional().describe("Updated description"),
-    recommendation: z.string().optional().describe("Updated remediation recommendation"),
-    severity: z.enum(["critical", "high", "medium", "low", "info"]).optional().describe("Updated severity"),
-};
-export function createUpdateReportIssueHandler(apiClient) {
-    return async (params) => {
-        try {
-            const { report_id, issue_id, action = "update" } = params;
-            if (action === "remove") {
-                await apiClient.del(`/api/reports/${report_id}/issues/${issue_id}`);
-                return {
-                    content: [{ type: "text", text: "Issue removed from remediation checklist." }],
-                };
-            }
-            // Build update payload
-            const body = {};
-            if (params.status)
-                body.status = params.status;
-            if (params.title)
-                body.title = params.title;
-            if (params.description !== undefined)
-                body.description = params.description;
-            if (params.recommendation !== undefined)
-                body.recommendation = params.recommendation;
-            if (params.severity)
-                body.severity = params.severity;
-            if (Object.keys(body).length === 0) {
-                return {
-                    content: [{ type: "text", text: "Error: No fields to update. Provide status, title, description, recommendation, or severity." }],
-                    isError: true,
-                };
-            }
-            const data = await apiClient.patch(`/api/reports/${report_id}/issues/${issue_id}`, body);
-            return {
-                content: [{ type: "text", text: JSON.stringify(sanitizeResponse(data), null, 2) }],
-            };
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : "Failed to update report issue";
-            return {
-                content: [{ type: "text", text: `Error: ${message}` }],
-                isError: true,
-            };
-        }
-    };
-}
-//# sourceMappingURL=update-report-issue.js.map