@4da/mcp-server 6.2.4 → 6.2.5

package/dist/tools/vulnerability-scan.d.ts

@@ -19,6 +19,7 @@ export interface VulnerabilityScanParams {
     force_refresh?: boolean;
     response_format?: "concise" | "detailed";
     package?: string;
+    include_test_fixtures?: boolean;
 }
 export declare const vulnerabilityScanTool: {
     name: string;
@@ -47,6 +48,10 @@ export declare const vulnerabilityScanTool: {
                 type: string;
                 description: string;
             };
+            include_test_fixtures: {
+                type: string;
+                description: string;
+            };
             response_format: {
                 type: string;
                 enum: string[];
@@ -56,32 +61,25 @@ export declare const vulnerabilityScanTool: {
     };
 };
 export declare function executeVulnerabilityScan(db: FourDADatabase | null, params: VulnerabilityScanParams, liveIntelligence: LiveIntelligence | null): Promise<{
+    summary?: string | undefined;
     scan_time: string;
     project: string;
-    coverage?: {
-        complete: boolean;
-        note: string;
-        lockfiles_not_scanned: number;
-        skipped_lockfiles?: {
-            path: string;
-            reason: "depth" | "project_limit";
-        }[] | undefined;
-        walk_truncated?: boolean | undefined;
-        unresolved_manifests?: {
-            manifest: string;
-            declared_ranges: number;
-            fix: string;
-        }[] | undefined;
-    } | undefined;
+    coverage?: import("./vulnerability-scan-format.js").MergedCoverage | undefined;
     project_root: string;
     workspaces_with_findings: string[];
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     platform_inactive_packages: number;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
-    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerabilities: {
         package: string;
         current_version: string;
@@ -96,10 +94,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -117,10 +119,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -138,10 +144,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -151,14 +161,23 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         target: string | null;
         checked: "all_advisories" | "installed_advisories_only";
         note?: string;
+        withheld?: string[];
+        withheld_note?: string;
     }>;
-    clean_dependencies: number;
+    clean_dependencies: number | null;
     scan_duration_ms: number;
     _meta: {
         source: string;
         cached: boolean;
         osv_cached: boolean;
         offline: boolean;
+        stale_osv_answers?: number | undefined;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
         privacy: string;
         relevance: string;
         severity_rule: string;
@@ -174,23 +193,55 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         };
     };
 } | {
+    summary?: string | undefined;
     scan_time: string;
     project_root: string;
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     coverage?: {
         complete: false;
         note: string;
+        unchecked_dependencies?: number | undefined;
+        checked_dependencies?: number | undefined;
+        osv_status?: string | undefined;
         lockfiles_not_scanned: number;
+        unreadable_lockfiles?: {
+            path: string;
+            error: string;
+        }[] | undefined;
+        partial_lockfiles?: {
+            path: string;
+            skipped_entries: number;
+            reason: string;
+        }[] | undefined;
+        refused_includes?: {
+            path: string;
+            reason: string;
+        }[] | undefined;
+        not_covered?: {
+            path: string;
+            ecosystem: string;
+        }[] | undefined;
+        not_covered_count?: number | undefined;
+        not_scanned?: {
+            test_fixture_lockfiles: number;
+            dirs: string[];
+        } | undefined;
         unresolved_manifests?: {
             manifest: string;
             declared_ranges: number;
             fix: string;
         }[] | undefined;
     } | undefined;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerable_packages: import("./vulnerability-scan-concise.js").PackageRow[];
     vulnerable_packages_note?: string | undefined;
     recommendations: string[];
@@ -219,6 +270,12 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         lockfiles_read: number;
         resolved_at: string | null;
         privacy: string;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
     };
 } | {
     error: null;
@@ -236,32 +293,25 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
     offline: boolean;
     message: string;
 } | {
+    summary?: string | undefined;
     scan_time: string;
     project: string;
-    coverage?: {
-        complete: boolean;
-        note: string;
-        lockfiles_not_scanned: number;
-        skipped_lockfiles?: {
-            path: string;
-            reason: "depth" | "project_limit";
-        }[] | undefined;
-        walk_truncated?: boolean | undefined;
-        unresolved_manifests?: {
-            manifest: string;
-            declared_ranges: number;
-            fix: string;
-        }[] | undefined;
-    } | undefined;
+    coverage?: import("./vulnerability-scan-format.js").MergedCoverage | undefined;
     project_root: string;
     workspaces_with_findings: string[];
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     platform_inactive_packages: number;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
-    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerabilities: {
         package: string;
         current_version: string;
@@ -276,10 +326,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -297,10 +351,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -318,10 +376,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -331,14 +393,23 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         target: string | null;
         checked: "all_advisories" | "installed_advisories_only";
         note?: string;
+        withheld?: string[];
+        withheld_note?: string;
     }>;
-    clean_dependencies: number;
+    clean_dependencies: number | null;
     scan_duration_ms: number;
     _meta: {
         source: string;
         cached: boolean;
         osv_cached: boolean;
         offline: boolean;
+        stale_osv_answers?: number | undefined;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
         privacy: string;
         relevance: string;
         severity_rule: string;
@@ -359,23 +430,55 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
     message?: undefined;
     note: string;
 } | {
+    summary?: string | undefined;
     scan_time: string;
     project_root: string;
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     coverage?: {
         complete: false;
         note: string;
+        unchecked_dependencies?: number | undefined;
+        checked_dependencies?: number | undefined;
+        osv_status?: string | undefined;
         lockfiles_not_scanned: number;
+        unreadable_lockfiles?: {
+            path: string;
+            error: string;
+        }[] | undefined;
+        partial_lockfiles?: {
+            path: string;
+            skipped_entries: number;
+            reason: string;
+        }[] | undefined;
+        refused_includes?: {
+            path: string;
+            reason: string;
+        }[] | undefined;
+        not_covered?: {
+            path: string;
+            ecosystem: string;
+        }[] | undefined;
+        not_covered_count?: number | undefined;
+        not_scanned?: {
+            test_fixture_lockfiles: number;
+            dirs: string[];
+        } | undefined;
         unresolved_manifests?: {
             manifest: string;
             declared_ranges: number;
             fix: string;
         }[] | undefined;
     } | undefined;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerable_packages: import("./vulnerability-scan-concise.js").PackageRow[];
     vulnerable_packages_note?: string | undefined;
     recommendations: string[];
@@ -404,6 +507,12 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         lockfiles_read: number;
         resolved_at: string | null;
         privacy: string;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
     };
     hint?: undefined;
     error?: undefined;
@@ -411,32 +520,25 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
     message?: undefined;
     note: string;
 } | {
+    summary?: string | undefined;
     scan_time: string;
     project: string;
-    coverage?: {
-        complete: boolean;
-        note: string;
-        lockfiles_not_scanned: number;
-        skipped_lockfiles?: {
-            path: string;
-            reason: "depth" | "project_limit";
-        }[] | undefined;
-        walk_truncated?: boolean | undefined;
-        unresolved_manifests?: {
-            manifest: string;
-            declared_ranges: number;
-            fix: string;
-        }[] | undefined;
-    } | undefined;
+    coverage?: import("./vulnerability-scan-format.js").MergedCoverage | undefined;
     project_root: string;
     workspaces_with_findings: string[];
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     platform_inactive_packages: number;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
-    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    advisory_by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerabilities: {
         package: string;
         current_version: string;
@@ -451,10 +553,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -472,10 +578,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -493,10 +603,14 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         aliases: string[];
         severity: "critical" | "high" | "low" | "medium" | "unknown";
         advisory_severity: "critical" | "high" | "low" | "medium" | "unknown";
+        malware?: boolean | undefined;
+        severity_from?: string | undefined;
         severity_note?: string | undefined;
         cvss_score: number | null;
         summary: string;
         fixed_version: string | null;
+        withheld?: string[] | undefined;
+        withheld_note?: string | null | undefined;
         published: string;
         references: string[];
     }[];
@@ -506,14 +620,23 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         target: string | null;
         checked: "all_advisories" | "installed_advisories_only";
         note?: string;
+        withheld?: string[];
+        withheld_note?: string;
     }>;
-    clean_dependencies: number;
+    clean_dependencies: number | null;
     scan_duration_ms: number;
     _meta: {
         source: string;
         cached: boolean;
         osv_cached: boolean;
         offline: boolean;
+        stale_osv_answers?: number | undefined;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
         privacy: string;
         relevance: string;
         severity_rule: string;
@@ -535,23 +658,55 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
     package_note: string;
     note: string;
 } | {
+    summary?: string | undefined;
     scan_time: string;
     project_root: string;
     host_platform: string;
     ecosystems_scanned: string[];
     total_dependencies_scanned: number;
-    total_vulnerable_packages: number;
+    dev_scope?: string | undefined;
+    total_vulnerable_packages: number | null;
     coverage?: {
         complete: false;
         note: string;
+        unchecked_dependencies?: number | undefined;
+        checked_dependencies?: number | undefined;
+        osv_status?: string | undefined;
         lockfiles_not_scanned: number;
+        unreadable_lockfiles?: {
+            path: string;
+            error: string;
+        }[] | undefined;
+        partial_lockfiles?: {
+            path: string;
+            skipped_entries: number;
+            reason: string;
+        }[] | undefined;
+        refused_includes?: {
+            path: string;
+            reason: string;
+        }[] | undefined;
+        not_covered?: {
+            path: string;
+            ecosystem: string;
+        }[] | undefined;
+        not_covered_count?: number | undefined;
+        not_scanned?: {
+            test_fixture_lockfiles: number;
+            dirs: string[];
+        } | undefined;
         unresolved_manifests?: {
             manifest: string;
             declared_ranges: number;
             fix: string;
         }[] | undefined;
     } | undefined;
-    by_severity: import("../live/severity-scope.js").SeverityCounts;
+    by_severity: import("../live/severity-scope.js").SeverityCounts | null;
+    found_in_checked_dependencies?: {
+        note: string;
+        vulnerable_packages: number;
+        by_severity: import("../live/severity-scope.js").SeverityCounts;
+    } | undefined;
     vulnerable_packages: import("./vulnerability-scan-concise.js").PackageRow[];
     vulnerable_packages_note?: string | undefined;
     recommendations: string[];
@@ -580,6 +735,12 @@ export declare function executeVulnerabilityScan(db: FourDADatabase | null, para
         lockfiles_read: number;
         resolved_at: string | null;
         privacy: string;
+        alias_severity?: {
+            rated_from_alias: number;
+            unresolved: string[];
+            ungraded: string[];
+            note?: string | undefined;
+        } | undefined;
     };
     hint?: undefined;
     error?: undefined;