iso27001-mcp 0.8.6 → 0.8.7

package/README.md

@@ -2,7 +2,7 @@
 
 **Turn Claude into an ISO 27001 compliance assistant** — controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
 
-[![Socket Badge](https://badge.socket.dev/npm/package/iso27001-mcp/0.8.6)](https://socket.dev/npm/package/iso27001-mcp/overview/0.8.6)
+[![Socket Badge](https://badge.socket.dev/npm/package/iso27001-mcp/0.8.7)](https://socket.dev/npm/package/iso27001-mcp/overview/0.8.7)
 [![npm version](https://img.shields.io/npm/v/iso27001-mcp.svg)](https://npmjs.com/package/iso27001-mcp)
 [![npm downloads](https://img.shields.io/npm/dt/iso27001-mcp.svg)](https://npmjs.com/package/iso27001-mcp)
 [![CI](https://github.com/Sushegaad/MCP-Server-for-ISO27001/actions/workflows/ci.yml/badge.svg)](https://github.com/Sushegaad/MCP-Server-for-ISO27001/actions/workflows/ci.yml)

package/dist/index.js

@@ -24797,7 +24797,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "iso27001-mcp",
-      version: "0.8.6",
+      version: "0.8.7",
       mcpName: "io.github.Sushegaad/iso27001-mcp",
       description: "ISO 27001 compliance workspace for Claude \u2014 controls, risks, policies, evidence, audits, and SoA in one local encrypted MCP server",
       license: "MIT",
@@ -33682,12 +33682,26 @@ var date = import_zod.z.string().regex(DATE_RE, "must be YYYY-MM-DD");
 var uuid = import_zod.z.string().uuid("must be a valid UUID");
 var freeText = (max = 2e3) => import_zod.z.string().min(1).max(max);
 var shortText = (max = 200) => import_zod.z.string().min(1).max(max);
-var paginationLimit = import_zod.z.number().int().min(1).max(100).optional().default(50);
-var paginationOffset = import_zod.z.number().int().min(0).optional().default(0);
+var paginationLimit = import_zod.z.coerce.number().int().min(1).max(100).optional().default(50);
+var paginationOffset = import_zod.z.coerce.number().int().min(0).optional().default(0);
+var coerceBool = import_zod.z.preprocess(
+  (v) => v == null ? void 0 : v === "true" ? true : v === "false" ? false : v,
+  import_zod.z.boolean()
+);
+function normEnum(vals) {
+  return import_zod.z.preprocess(
+    (v) => {
+      if (typeof v !== "string") return v;
+      const lo = v.toLowerCase();
+      return vals.find((o) => o.toLowerCase() === lo) ?? v;
+    },
+    import_zod.z.enum(vals)
+  );
+}
 var versionEnum = import_zod.z.enum(["2022", "2013"]);
 var formatMarkdownCsvJson = import_zod.z.enum(["markdown", "csv", "json"]);
 var riskLevelEnum = import_zod.z.enum(["Low", "Medium", "High", "Critical"]);
-var likelihood1to5 = import_zod.z.number().int().min(1).max(5);
+var likelihood1to5 = import_zod.z.coerce.number().int().min(1).max(5);
 var roleEnum = import_zod.z.enum(["viewer", "analyst", "admin"]);
 var outcomeEnum = import_zod.z.enum(["success", "denied", "error"]);
 var controlStatusEnum = import_zod.z.enum([
@@ -33757,19 +33771,9 @@ var carStatusEnum = import_zod.z.enum([
   "verified",
   "closed"
 ]);
-var themeEnum = import_zod.z.enum([
-  "Organizational",
-  "People",
-  "Physical",
-  "Technological"
-]);
-var cybersecurityConceptEnum = import_zod.z.enum([
-  "Identify",
-  "Protect",
-  "Detect",
-  "Respond",
-  "Recover"
-]);
+var normTheme = normEnum(["Organizational", "People", "Physical", "Technological"]);
+var normCybersecConcept = normEnum(["Identify", "Protect", "Detect", "Respond", "Recover"]);
+var normControlType = normEnum(["Preventive", "Detective", "Corrective"]);
 var GetControlSchema = import_zod.z.object({
   control_id: import_zod.z.string().min(1).max(20),
   version: versionEnum.optional()
@@ -33777,17 +33781,17 @@ var GetControlSchema = import_zod.z.object({
 var ListControlsSchema = import_zod.z.object({
   version: versionEnum.optional(),
   theme: import_zod.z.string().max(100).optional(),
-  control_type: import_zod.z.enum(["Preventive", "Detective", "Corrective"]).optional(),
-  new_in_2022: import_zod.z.boolean().optional(),
-  cybersecurity_concept: cybersecurityConceptEnum.optional(),
-  include_guidance: import_zod.z.boolean().optional().default(false),
+  control_type: normControlType.optional(),
+  new_in_2022: coerceBool.optional(),
+  cybersecurity_concept: normCybersecConcept.optional(),
+  include_guidance: coerceBool.optional().default(false),
   limit: paginationLimit,
   offset: paginationOffset
 });
 var SearchControlsSchema = import_zod.z.object({
   query: freeText(200),
   version: versionEnum.optional(),
-  limit: import_zod.z.number().int().min(1).max(50).optional().default(10),
+  limit: import_zod.z.coerce.number().int().min(1).max(50).optional().default(10),
   offset: paginationOffset
 });
 var GetControlAttributesSchema = import_zod.z.object({
@@ -33802,7 +33806,7 @@ var CompareVersionsSchema = import_zod.z.object({
 );
 var GetClauseRequirementSchema = import_zod.z.object({
   clause_id: import_zod.z.string().min(1).max(10),
-  include_sub_clauses: import_zod.z.boolean().optional().default(false)
+  include_sub_clauses: coerceBool.optional().default(false)
 });
 var ListClauseRequirementsSchema = import_zod.z.object({
   parent_id: import_zod.z.string().max(10).optional()
@@ -33811,7 +33815,7 @@ var CreateGapAssessmentSchema = import_zod.z.object({
   name: shortText(200),
   scope: freeText(2e3).optional(),
   isms_version: versionEnum.optional().default("2022"),
-  themes_in_scope: import_zod.z.array(themeEnum).optional(),
+  themes_in_scope: import_zod.z.array(normTheme).optional(),
   exclude_controls: import_zod.z.array(import_zod.z.string().max(20)).optional(),
   exclude_justification: freeText(1e3).optional()
 });
@@ -33837,7 +33841,7 @@ var ExportGapReportSchema = import_zod.z.object({
 });
 var GenerateRemediationRoadmapSchema = import_zod.z.object({
   assessment_id: uuid,
-  timeline_weeks: import_zod.z.number().int().min(1).max(52).optional().default(12)
+  timeline_weeks: import_zod.z.coerce.number().int().min(1).max(52).optional().default(12)
 });
 var ArchiveGapAssessmentSchema = import_zod.z.object({
   assessment_id: uuid,
@@ -33855,7 +33859,7 @@ var CreateRiskSchema = import_zod.z.object({
 });
 var GetRiskSchema = import_zod.z.object({
   risk_id: uuid,
-  include_treatments: import_zod.z.boolean().optional().default(false)
+  include_treatments: coerceBool.optional().default(false)
 });
 var UpdateRiskSchema = import_zod.z.object({
   risk_id: uuid,
@@ -33907,12 +33911,12 @@ var CreatePolicySchema = import_zod.z.object({
   // falls back to org profile if omitted
   owner: shortText(200),
   approver: shortText(200).optional(),
-  review_cycle_months: import_zod.z.number().int().min(1).max(36).optional().default(12),
+  review_cycle_months: import_zod.z.coerce.number().int().min(1).max(36).optional().default(12),
   effective_date: date
 });
 var GetPolicySchema = import_zod.z.object({
   policy_id: uuid,
-  include_versions: import_zod.z.boolean().optional().default(false)
+  include_versions: coerceBool.optional().default(false)
 });
 var UpdatePolicySchema = import_zod.z.object({
   policy_id: uuid,
@@ -33926,7 +33930,7 @@ var ListPoliciesSchema = import_zod.z.object({
   status: policyStatusEnum.optional(),
   type: policyTypeEnum.optional(),
   owner: shortText(200).optional(),
-  overdue_only: import_zod.z.boolean().optional().default(false),
+  overdue_only: coerceBool.optional().default(false),
   limit: paginationLimit,
   offset: paginationOffset
 });
@@ -33937,7 +33941,7 @@ var GenerateSoaSchema = import_zod.z.object({
 var UpdateSoaEntrySchema = import_zod.z.object({
   soa_id: uuid,
   control_id: import_zod.z.string().min(1).max(20),
-  included: import_zod.z.boolean(),
+  included: coerceBool,
   justification: freeText(1e3),
   status: controlStatusEnum.optional(),
   responsible_party: shortText(200).optional()
@@ -33976,7 +33980,7 @@ var UpdateCorrectiveActionSchema = import_zod.z.object({
   due_date: date.optional(),
   status: carStatusEnum.optional(),
   root_cause: freeText(2e3).optional(),
-  effectiveness_verified: import_zod.z.boolean().optional(),
+  effectiveness_verified: coerceBool.optional(),
   evidence_ref: shortText(200).optional()
 });
 var GenerateAuditReportSchema = import_zod.z.object({
@@ -34010,7 +34014,7 @@ var LinkJiraTicketSchema = import_zod.z.object({
 );
 var LinkGithubIssueSchema = import_zod.z.object({
   evidence_id: uuid,
-  issue_number: import_zod.z.number().int().positive().optional(),
+  issue_number: import_zod.z.coerce.number().int().positive().optional(),
   title: shortText(200).optional(),
   body: freeText(2e3).optional()
 }).refine(
@@ -34046,7 +34050,7 @@ var SetOrganizationProfileSchema = import_zod.z.object({
     isms_manager: shortText(200).optional(),
     internal_auditor: shortText(200).optional()
   }).optional(),
-  review_cadence_months: import_zod.z.number().int().min(1).max(36).optional().default(12),
+  review_cadence_months: import_zod.z.coerce.number().int().min(1).max(36).optional().default(12),
   logo_url: import_zod.z.string().url().max(2e3).optional(),
   primary_color: import_zod.z.string().regex(/^#[0-9a-fA-F]{6}$/, "must be 6-digit hex e.g. #1e3a5f").optional(),
   document_footer: import_zod.z.string().max(500).optional(),
@@ -34078,12 +34082,12 @@ var CreateProcedureSchema = import_zod.z.object({
   approver: shortText(200).optional(),
   policy_id: uuid.optional(),
   related_controls: import_zod.z.array(import_zod.z.string().max(20)).optional(),
-  review_cycle_months: import_zod.z.number().int().min(1).max(36).optional().default(12),
+  review_cycle_months: import_zod.z.coerce.number().int().min(1).max(36).optional().default(12),
   effective_date: date
 });
 var GetProcedureSchema = import_zod.z.object({
   procedure_id: uuid,
-  include_versions: import_zod.z.boolean().optional().default(false)
+  include_versions: coerceBool.optional().default(false)
 });
 var UpdateProcedureSchema = import_zod.z.object({
   procedure_id: uuid,
@@ -34098,7 +34102,7 @@ var ListProceduresSchema = import_zod.z.object({
   procedure_type: procedureTypeEnum.optional(),
   status: procedureStatusEnum.optional(),
   policy_id: uuid.optional(),
-  overdue_only: import_zod.z.boolean().optional().default(false),
+  overdue_only: coerceBool.optional().default(false),
   limit: paginationLimit,
   offset: paginationOffset
 });
@@ -37517,12 +37521,31 @@ function handleListEvidenceDocuments(args2) {
 }
 
 // src/tools/index.ts
+function unwrapFieldSchema(field) {
+  if (field instanceof import_zod2.z.ZodEffects) {
+    return unwrapFieldSchema(field.innerType());
+  }
+  if (field instanceof import_zod2.z.ZodOptional) {
+    return unwrapFieldSchema(field.unwrap()).optional();
+  }
+  if (field instanceof import_zod2.z.ZodDefault) {
+    const inner = unwrapFieldSchema(field.removeDefault());
+    const defValue = field._def.defaultValue();
+    return inner.optional().default(defValue);
+  }
+  return field;
+}
 function extractShape(schema) {
   let s = schema;
   while (s instanceof import_zod2.z.ZodEffects) {
     s = s.innerType();
   }
-  return s.shape;
+  const rawShape = s.shape;
+  const cleanShape = {};
+  for (const [key, val] of Object.entries(rawShape)) {
+    cleanShape[key] = unwrapFieldSchema(val);
+  }
+  return cleanShape;
 }
 function ok13(data) {
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iso27001-mcp",
-  "version": "0.8.6",
+  "version": "0.8.7",
   "mcpName": "io.github.Sushegaad/iso27001-mcp",
   "description": "ISO 27001 compliance workspace for Claude — controls, risks, policies, evidence, audits, and SoA in one local encrypted MCP server",
   "license": "MIT",