0sec-cli 0.21.4 → 0.22.0

package/chunks/{chunk-SBMB4OL3.js → chunk-TZFIAMWZ.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-PC6RCKQV.js";
+} from "./chunk-76KSBWOQ.js";
 
 // packages/core/dist/scope/waf-detect.js
 function readHeader(headers, name) {
@@ -839,6 +839,13 @@ async function cachedJson(cache, source, key, fetcher, opts = {}) {
   cache.set(source, key, value, opts.ttlMs);
   return value;
 }
+var HttpStatusError = class extends Error {
+  status;
+  constructor(status, url) {
+    super(`HTTP ${status} for ${url}`);
+    this.status = status;
+  }
+};
 async function fetchJson(url, init = {}, opts = {}) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 2e4);
@@ -848,7 +855,7 @@ async function fetchJson(url, init = {}, opts = {}) {
       signal: controller.signal
     });
     if (!res.ok) {
-      throw new Error(`HTTP ${res.status} for ${url}`);
+      throw new HttpStatusError(res.status, url);
     }
     return await res.json();
   } finally {
@@ -2020,11 +2027,46 @@ function snippet(body) {
 }
 
 // packages/core/dist/intel/nvd.js
+var NVD_COOLDOWN_MS = 3e4;
+var nvdRequests = /* @__PURE__ */ new WeakMap();
+var NvdRateLimitedError = class extends Error {
+};
+async function nvdJson(url, opts) {
+  const transport = opts.fetchImpl ?? globalThis.fetch;
+  let state = nvdRequests.get(transport);
+  if (!state) {
+    state = { tail: Promise.resolve(), blockedUntil: 0 };
+    nvdRequests.set(transport, state);
+  }
+  const queue = state;
+  const request = queue.tail.then(async () => {
+    if (Date.now() < queue.blockedUntil)
+      throw new NvdRateLimitedError();
+    try {
+      return await fetchJson(url, { headers: nvdHeaders(opts.headers) }, opts);
+    } catch (error) {
+      if (error instanceof HttpStatusError && error.status === 429) {
+        queue.blockedUntil = Date.now() + NVD_COOLDOWN_MS;
+        console.warn("[intel] NVD rate limited; pausing requests for 30s");
+        throw new NvdRateLimitedError();
+      }
+      throw error;
+    }
+  });
+  queue.tail = request.then(() => void 0, () => void 0);
+  return request;
+}
 async function lookupNvdCve(input, opts = {}) {
   const cveId = normalizeCveId(input.cveId);
   const cache = new IntelCache(input.cacheDir);
-  const raw = await cachedJson(cache, "nvd-cve", cveId, async () => await fetchJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=${encodeURIComponent(cveId)}`, { headers: nvdHeaders(opts.headers) }, opts), { offline: input.offline, ttlMs: input.ttlMs });
-  return parseNvdResponse(raw)[0] ?? null;
+  try {
+    const raw = await cachedJson(cache, "nvd-cve", cveId, () => nvdJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=${encodeURIComponent(cveId)}`, opts), { offline: input.offline, ttlMs: input.ttlMs });
+    return parseNvdResponse(raw)[0] ?? null;
+  } catch (error) {
+    if (error instanceof NvdRateLimitedError)
+      return null;
+    throw error;
+  }
 }
 async function searchNvdSimilar(input, opts = {}) {
   const terms = uniqueStrings([input.cwe, ...input.keywords ?? []]);
@@ -2037,8 +2079,14 @@ async function searchNvdSimilar(input, opts = {}) {
     keywordSearch: terms.join(" "),
     resultsPerPage: String(limit)
   });
-  const raw = await cachedJson(cache, "nvd-search", key, async () => await fetchJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?${query}`, { headers: nvdHeaders(opts.headers) }, opts), { offline: input.offline, ttlMs: input.ttlMs });
-  return parseNvdResponse(raw);
+  try {
+    const raw = await cachedJson(cache, "nvd-search", key, () => nvdJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?${query}`, opts), { offline: input.offline, ttlMs: input.ttlMs });
+    return parseNvdResponse(raw);
+  } catch (error) {
+    if (error instanceof NvdRateLimitedError)
+      return [];
+    throw error;
+  }
 }
 async function searchNvdTargetHistory(input, opts = {}) {
   const terms = targetHistorySearchTerms(input);
@@ -2052,8 +2100,14 @@ async function searchNvdTargetHistory(input, opts = {}) {
       keywordSearch: term,
       resultsPerPage: String(limit)
     });
-    const raw = await cachedJson(cache, "nvd-target-history", key, async () => await fetchJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?${query}`, { headers: nvdHeaders(opts.headers) }, opts), { offline: input.offline, ttlMs: input.ttlMs });
-    return parseNvdResponse(raw);
+    try {
+      const raw = await cachedJson(cache, "nvd-target-history", key, () => nvdJson(`https://services.nvd.nist.gov/rest/json/cves/2.0?${query}`, opts), { offline: input.offline, ttlMs: input.ttlMs });
+      return parseNvdResponse(raw);
+    } catch (error) {
+      if (error instanceof NvdRateLimitedError)
+        return [];
+      throw error;
+    }
   }));
   return results.flat();
 }