@cliwant/mcp-sam-gov 1.4.0 → 1.6.0

package/dist/nist-controls.js

@@ -0,0 +1,174 @@
+/**
+ * nist-controls.ts — NIST SP 800-53 Rev 5 security & privacy CONTROLS catalog
+ * (OSCAL, keyless). The cyber-compliance controls backbone for FedRAMP / CMMC / RMF
+ * work: look up a control (AC-2, SC-7, …) or a family (Access Control, System &
+ * Communications Protection, …) and get its title, requirement STATEMENT, discussion
+ * guidance, and control enhancements. No other tool here exposes the controls catalog
+ * (we have NVD CVEs + CISA KEV, but not the requirement side).
+ *
+ * SOURCE: NIST's OFFICIAL OSCAL content, published at github.com/usnistgov/oscal-content
+ * (the canonical machine-readable release; the .gov PDF is the human copy). NOT a
+ * .gov API host, so provenance is disclosed on every response (the ProPublica /
+ * CourtListener / get.gov republisher idiom — here NIST is the first-party author).
+ *
+ * PATTERN: the CISA-KEV static-file idiom (nvd.ts) — a fixed-host const URL fetched
+ * via getJson (redirect:"error" + 30s timeout), memoized 6h, with a plausibility
+ * FLOOR (a truncated catalog must NEVER read as "control not found"), then
+ * client-side filter/lookup. An outage/4xx/timeout THROWS (never a fake empty).
+ *
+ * SSRF: fixed host `raw.githubusercontent.com` + a fixed, pinned path (no free
+ * host/path). Filtering is CLIENT-SIDE over the parsed catalog.
+ */
+import { getJson, driftError } from "./datasource.js";
+import { memoize } from "./cache.js";
+import { withMeta } from "./meta.js";
+export const OSCAL_HOST = "raw.githubusercontent.com";
+const OSCAL_URL = "https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json";
+const OSCAL_LABEL = "nist-oscal:sp800-53r5";
+const OSCAL_TIMEOUT_MS = 30_000;
+const OSCAL_CACHE_TTL_MS = 6 * 60 * 60 * 1000;
+// Plausibility floor: 800-53 Rev5 has 20 control families and ~1000 controls. A
+// truncated catalog with far fewer must THROW, never read as "control not found".
+const FAMILY_FLOOR = 15;
+const PROVENANCE_NOTE = "Source: NIST SP 800-53 Rev 5 OSCAL catalog, published at github.com/usnistgov/oscal-content (NIST's canonical machine-readable release; authoritative first-party data served from GitHub, not a .gov API host).";
+const CLIENT_FILTER_NOTE = "The catalog has no query API — the full published OSCAL JSON is fetched (cached 6h) and filtered CLIENT-SIDE (controlId exact, family exact, keyword = case-insensitive substring over title+statement). totalAvailable is the EXACT match count.";
+const REFERENCE_NOTE = "This is the REQUIREMENT catalog (control text), NOT an assessment or an authorization. A control's applicability depends on the system's FIPS-199 impact baseline (Low/Moderate/High) and overlay — which this catalog does not encode.";
+/** OSCAL control id ("ac-2", "ac-2.1") → display id ("AC-2", "AC-2(1)"). */
+function displayId(rawId) {
+    const m = /^([a-z]+)-(\d+)(?:\.(\d+))?$/i.exec(rawId.trim());
+    if (!m)
+        return rawId.toUpperCase();
+    const fam = (m[1] ?? "").toUpperCase();
+    // Strip leading zeros so a zero-padded input ('AC-02') normalizes to the catalog's
+    // canonical unpadded form ('AC-2') — else an exact controlId lookup would miss.
+    const num = String(Number(m[2] ?? "0"));
+    const enh = m[3] !== undefined ? String(Number(m[3])) : undefined;
+    return enh !== undefined ? `${fam}-${num}(${enh})` : `${fam}-${num}`;
+}
+/** Recursively collect a statement part's prose as labelled, indented lines. */
+function collectProse(part, depth, out) {
+    const label = part.props?.find((p) => p.name === "label")?.value;
+    const indent = "  ".repeat(depth);
+    const prefix = label ? `${label} ` : "";
+    if (part.prose && part.prose.trim().length > 0) {
+        out.push(`${indent}${prefix}${part.prose.trim()}`);
+    }
+    else if (label) {
+        out.push(`${indent}${prefix}`.trimEnd());
+    }
+    for (const sub of part.parts ?? [])
+        collectProse(sub, depth + 1, out);
+}
+function partProse(control, name) {
+    const part = (control.parts ?? []).find((p) => p.name === name);
+    if (!part)
+        return null;
+    const out = [];
+    collectProse(part, 0, out);
+    const text = out.join("\n").trim();
+    return text.length > 0 ? text : null;
+}
+function mapControl(control, family) {
+    return {
+        id: displayId(control.id ?? ""),
+        family,
+        title: (control.title ?? "").trim(),
+        statement: partProse(control, "statement") ?? "",
+        guidance: partProse(control, "guidance"),
+        enhancements: (control.controls ?? []).map((e) => ({
+            id: displayId(e.id ?? ""),
+            title: (e.title ?? "").trim(),
+        })),
+    };
+}
+/**
+ * Fetch + parse the OSCAL catalog into a flat list of TOP-LEVEL controls, memoized
+ * 6h. Header/shape guarded: `catalog.groups` MUST be an array with ≥ FAMILY_FLOOR
+ * families (else driftError — a truncated catalog is NEVER a fake empty). Enhancements
+ * are carried on each control (not indexed as top-level entries).
+ */
+async function loadControls() {
+    return memoize("nist:sp800-53r5", async () => {
+        const built = new URL(OSCAL_URL);
+        if (built.hostname !== OSCAL_HOST || built.protocol !== "https:") {
+            throw driftError(OSCAL_LABEL, `Constructed OSCAL URL host ${JSON.stringify(built.hostname)} is not ${OSCAL_HOST} over https — refusing to fetch (SSRF safety).`);
+        }
+        const body = (await getJson(OSCAL_URL, {
+            label: OSCAL_LABEL,
+            redirect: "error",
+            timeoutMs: OSCAL_TIMEOUT_MS,
+        }));
+        const groups = body.catalog?.groups;
+        if (!Array.isArray(groups) || groups.length < FAMILY_FLOOR) {
+            throw driftError(OSCAL_LABEL, `OSCAL catalog.groups missing or implausibly small (${Array.isArray(groups) ? groups.length : "not-an-array"} < ${FAMILY_FLOOR} families) — treating as schema drift / truncation, never a fake-empty catalog.`);
+        }
+        const controls = [];
+        for (const g of groups) {
+            const family = `${(g.id ?? "").toUpperCase()} — ${(g.title ?? "").trim()}`;
+            for (const c of g.controls ?? [])
+                controls.push(mapControl(c, family));
+        }
+        return controls;
+    }, OSCAL_CACHE_TTL_MS);
+}
+// ─── Tool: nist_800_53_controls ───────────────────────────────────
+/**
+ * Look up NIST SP 800-53 Rev 5 controls by controlId (exact, e.g. "AC-2"), family
+ * (exact family letter or name, e.g. "AC" / "Access Control"), and/or keyword
+ * (case-insensitive substring over title + statement). Client-side filters over the
+ * cached OSCAL catalog; honest `_meta` (exact match total; provenance disclosed).
+ */
+export async function searchControls(args) {
+    const limit = args.limit ?? 25;
+    const offset = args.offset ?? 0;
+    const all = await loadControls();
+    const filtersApplied = [];
+    const idQ = args.controlId !== undefined ? displayId(args.controlId) : undefined;
+    const famQ = args.family?.trim().toLowerCase();
+    const kwQ = args.keyword?.trim().toLowerCase();
+    if (args.controlId !== undefined)
+        filtersApplied.push("controlId");
+    if (args.family !== undefined)
+        filtersApplied.push("family");
+    if (args.keyword !== undefined)
+        filtersApplied.push("keyword");
+    const matched = all.filter((c) => {
+        if (idQ && c.id.toUpperCase() !== idQ.toUpperCase())
+            return false;
+        if (famQ) {
+            // family field is "AC — Access Control"; match either the letter code or a
+            // substring of the title (both case-insensitive).
+            const fam = c.family.toLowerCase();
+            const code = (fam.split("—")[0] ?? "").trim();
+            if (code !== famQ && !fam.includes(famQ))
+                return false;
+        }
+        if (kwQ) {
+            // Search the title + requirement statement AND each enhancement's title, so a
+            // term that lives only in an enhancement (e.g. "multi-factor" → IA-2(1)) still
+            // surfaces the parent control. filtersApplied still lists 'keyword'.
+            const hay = `${c.title}\n${c.statement}\n${c.enhancements.map((e) => e.title).join("\n")}`.toLowerCase();
+            if (!hay.includes(kwQ))
+                return false;
+        }
+        return true;
+    });
+    const totalAvailable = matched.length;
+    const page = matched.slice(offset, offset + limit);
+    const returned = page.length;
+    const hasMore = offset + returned < totalAvailable;
+    const nextOffset = hasMore ? offset + returned : null;
+    return withMeta({ controls: page }, {
+        source: "NIST SP 800-53 Rev 5 (OSCAL catalog, keyless)",
+        keylessMode: true,
+        returned,
+        totalAvailable,
+        truncated: hasMore,
+        filtersApplied,
+        filtersDropped: [],
+        fieldsUnavailable: [],
+        pagination: { offset, limit, hasMore, nextOffset },
+        notes: [PROVENANCE_NOTE, CLIENT_FILTER_NOTE, REFERENCE_NOTE],
+    });
+}
+//# sourceMappingURL=nist-controls.js.map

package/dist/nist-controls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-controls.js","sourceRoot":"","sources":["../src/nist-controls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAsC,MAAM,WAAW,CAAC;AAEzE,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AACtD,MAAM,SAAS,GACb,6HAA6H,CAAC;AAChI,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,MAAM,eAAe,GACnB,kNAAkN,CAAC;AACrN,MAAM,kBAAkB,GACtB,mPAAmP,CAAC;AACtP,MAAM,cAAc,GAClB,yOAAyO,CAAC;AA0B5O,4EAA4E;AAC5E,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;AACvE,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,IAAe,EAAE,KAAa,EAAE,GAAa;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;QAAE,YAAY,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,OAAqB,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,OAAqB,EAAE,MAAc;IACvD,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM;QACN,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;QAChD,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;QACxC,YAAY,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY;IACzB,OAAO,OAAO,CACZ,iBAAiB,EACjB,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,UAAU,CAAC,WAAW,EAAE,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,UAAU,gDAAgD,CAAC,CAAC;QACnK,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE;YACrC,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAuC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC3D,MAAM,UAAU,CACd,WAAW,EACX,sDAAsD,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,YAAY,iFAAiF,CAChN,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAsB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IAEjC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QAClE,IAAI,IAAI,EAAE,CAAC;YACT,2EAA2E;YAC3E,kDAAkD;YAClD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;QACzD,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,8EAA8E;YAC9E,+EAA+E;YAC/E,qEAAqE;YACrE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACzG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,cAAc,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtD,OAAO,QAAQ,CACb,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB;QACE,MAAM,EAAE,+CAA+C;QACvD,WAAW,EAAE,IAAI;QACjB,QAAQ;QACR,cAAc;QACd,SAAS,EAAE,OAAO;QAClB,cAAc;QACd,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE;QACrB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QAClD,KAAK,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,cAAc,CAAC;KAC7B,CAClC,CAAC;AACJ,CAAC"}

package/dist/nws-weather.d.ts

@@ -0,0 +1,57 @@
+/**
+ * nws-weather.ts — National Weather Service active alerts (api.weather.gov, KEYLESS)
+ * — the DISASTER / CLIMATE-READINESS lane. Current watches, warnings, and advisories
+ * (event, severity, urgency, area, effective/expires window, instructions). Pairs
+ * directly with the FEMA tools (disaster declarations → public assistance → hazard
+ * mitigation → LIVE active weather) to complete a disaster-response-readiness view:
+ * where severe-weather events are active NOW, ahead of the declarations/contracts
+ * that follow.
+ *
+ * SOURCE: NWS api.weather.gov (a .gov host), keyless. Requires a descriptive
+ * User-Agent (NWS policy) — sent from a fixed constant; no token. Returns a GeoJSON
+ * FeatureCollection. This is REAL-TIME data (currently-active alerts) — freshness is
+ * disclosed and never implied to be a historical series.
+ *
+ * HONESTY: fixed host + redirect:"error" (SSRF); `state` is a 2-letter charclass (the
+ * server-side ?area= filter); event/severity are applied CLIENT-SIDE over the returned
+ * set; a non-FeatureCollection / non-array body ⇒ driftError; an outage/4xx/timeout
+ * THROWS. A genuine no-active-alerts result ⇒ an HONEST EMPTY (returned:0), never an
+ * error. totalAvailable = the EXACT count of matched active alerts. Every scalar via
+ * `str` (null-never-empty-string); dates preserved as ISO strings.
+ */
+import { type MetaBundle } from "./meta.js";
+export declare const NWS_HOST = "api.weather.gov";
+export type NwsAlert = {
+    id: string | null;
+    event: string | null;
+    headline: string | null;
+    severity: string | null;
+    urgency: string | null;
+    certainty: string | null;
+    category: string | null;
+    status: string | null;
+    messageType: string | null;
+    areaDesc: string | null;
+    effective: string | null;
+    onset: string | null;
+    expires: string | null;
+    ends: string | null;
+    senderName: string | null;
+    description: string | null;
+    instruction: string | null;
+    response: string | null;
+};
+/**
+ * List CURRENTLY-ACTIVE NWS weather alerts, optionally scoped by `state` (server-side
+ * ?area=) and filtered client-side by `event` (substring) and/or `severity` (exact).
+ * Honest `_meta` (exact match total + real-time freshness; a no-alerts result is an
+ * honest empty).
+ */
+export declare function activeAlerts(args: {
+    state?: string;
+    event?: string;
+    severity?: string;
+    limit?: number;
+    offset?: number;
+}): Promise<MetaBundle>;
+//# sourceMappingURL=nws-weather.d.ts.map

package/dist/nws-weather.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nws-weather.d.ts","sourceRoot":"","sources":["../src/nws-weather.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAEzE,eAAO,MAAM,QAAQ,oBAAoB,CAAC;AAa1C,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AA+CF;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,UAAU,CAAC,CAgDtB"}

package/dist/nws-weather.js

@@ -0,0 +1,131 @@
+/**
+ * nws-weather.ts — National Weather Service active alerts (api.weather.gov, KEYLESS)
+ * — the DISASTER / CLIMATE-READINESS lane. Current watches, warnings, and advisories
+ * (event, severity, urgency, area, effective/expires window, instructions). Pairs
+ * directly with the FEMA tools (disaster declarations → public assistance → hazard
+ * mitigation → LIVE active weather) to complete a disaster-response-readiness view:
+ * where severe-weather events are active NOW, ahead of the declarations/contracts
+ * that follow.
+ *
+ * SOURCE: NWS api.weather.gov (a .gov host), keyless. Requires a descriptive
+ * User-Agent (NWS policy) — sent from a fixed constant; no token. Returns a GeoJSON
+ * FeatureCollection. This is REAL-TIME data (currently-active alerts) — freshness is
+ * disclosed and never implied to be a historical series.
+ *
+ * HONESTY: fixed host + redirect:"error" (SSRF); `state` is a 2-letter charclass (the
+ * server-side ?area= filter); event/severity are applied CLIENT-SIDE over the returned
+ * set; a non-FeatureCollection / non-array body ⇒ driftError; an outage/4xx/timeout
+ * THROWS. A genuine no-active-alerts result ⇒ an HONEST EMPTY (returned:0), never an
+ * error. totalAvailable = the EXACT count of matched active alerts. Every scalar via
+ * `str` (null-never-empty-string); dates preserved as ISO strings.
+ */
+import { ToolErrorCarrier } from "./errors.js";
+import { getJson, driftError } from "./datasource.js";
+import { str } from "./coerce.js";
+import { withMeta } from "./meta.js";
+export const NWS_HOST = "api.weather.gov";
+const NWS_ACTIVE_URL = "https://api.weather.gov/alerts/active";
+const NWS_LABEL = "nws:/alerts/active";
+const NWS_TIMEOUT_MS = 15_000;
+// NWS asks every client to send a descriptive User-Agent (with contact). No token.
+const NWS_USER_AGENT = "cliwant-mcp-sam-gov (https://github.com/cliwant/mcp-sam-gov)";
+const STATE_RE = /^[A-Za-z]{2}$/;
+const PROVENANCE_NOTE = "Source: NWS api.weather.gov active-alerts feed (keyless; a descriptive User-Agent is sent per NWS policy).";
+const FRESHNESS_NOTE = "REAL-TIME: these are the alerts ACTIVE at request time (a live snapshot, not a historical archive). Read effective/onset/expires/ends for each alert's window; an expired alert is not returned. A no-active-alerts result is an HONEST empty (returned:0), never an error.";
+function mapAlert(feature) {
+    const p = (feature ?? {}).properties ?? {};
+    return {
+        id: str(p.id),
+        event: str(p.event),
+        headline: str(p.headline),
+        severity: str(p.severity),
+        urgency: str(p.urgency),
+        certainty: str(p.certainty),
+        category: str(p.category),
+        status: str(p.status),
+        messageType: str(p.messageType),
+        areaDesc: str(p.areaDesc),
+        effective: str(p.effective),
+        onset: str(p.onset),
+        expires: str(p.expires),
+        ends: str(p.ends),
+        senderName: str(p.senderName),
+        description: str(p.description),
+        instruction: str(p.instruction),
+        response: str(p.response),
+    };
+}
+async function loadActiveAlerts(state) {
+    const params = new URLSearchParams();
+    if (state !== undefined)
+        params.set("area", state.toUpperCase());
+    const url = params.toString() ? `${NWS_ACTIVE_URL}?${params.toString()}` : NWS_ACTIVE_URL;
+    const built = new URL(url);
+    if (built.hostname !== NWS_HOST || built.protocol !== "https:") {
+        throw driftError(NWS_LABEL, `Constructed NWS URL host ${JSON.stringify(built.hostname)} is not ${NWS_HOST} over https — refusing to fetch (SSRF safety).`);
+    }
+    const body = (await getJson(url, {
+        label: NWS_LABEL,
+        redirect: "error",
+        timeoutMs: NWS_TIMEOUT_MS,
+        headers: { "User-Agent": NWS_USER_AGENT, Accept: "application/geo+json" },
+    }));
+    if (body.type !== "FeatureCollection" || !Array.isArray(body.features)) {
+        throw driftError(NWS_LABEL, "NWS active-alerts body is not a GeoJSON FeatureCollection with a features[] array — schema drift, never a fake-empty result.");
+    }
+    return body.features.map(mapAlert);
+}
+// ─── Tool: nws_active_alerts ──────────────────────────────────────
+/**
+ * List CURRENTLY-ACTIVE NWS weather alerts, optionally scoped by `state` (server-side
+ * ?area=) and filtered client-side by `event` (substring) and/or `severity` (exact).
+ * Honest `_meta` (exact match total + real-time freshness; a no-alerts result is an
+ * honest empty).
+ */
+export async function activeAlerts(args) {
+    if (args.state !== undefined && !STATE_RE.test(args.state)) {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            retryable: false,
+            message: `Invalid state ${JSON.stringify(args.state)} — expected a 2-letter US state/territory code (^[A-Za-z]{2}$), e.g. "CA".`,
+            upstreamEndpoint: NWS_LABEL,
+        });
+    }
+    const limit = args.limit ?? 50;
+    const offset = args.offset ?? 0;
+    const all = await loadActiveAlerts(args.state);
+    const filtersApplied = [];
+    if (args.state !== undefined)
+        filtersApplied.push("state");
+    const eventQ = args.event?.trim().toLowerCase();
+    const sevQ = args.severity?.trim().toLowerCase();
+    if (args.event !== undefined)
+        filtersApplied.push("event");
+    if (args.severity !== undefined)
+        filtersApplied.push("severity");
+    const matched = all.filter((a) => {
+        if (eventQ && !(a.event ?? "").toLowerCase().includes(eventQ))
+            return false;
+        if (sevQ && (a.severity ?? "").toLowerCase() !== sevQ)
+            return false;
+        return true;
+    });
+    const totalAvailable = matched.length;
+    const page = matched.slice(offset, offset + limit);
+    const returned = page.length;
+    const hasMore = offset + returned < totalAvailable;
+    const nextOffset = hasMore ? offset + returned : null;
+    return withMeta({ alerts: page }, {
+        source: "api.weather.gov active alerts (NWS, keyless)",
+        keylessMode: true,
+        returned,
+        totalAvailable,
+        truncated: hasMore,
+        filtersApplied,
+        filtersDropped: [],
+        fieldsUnavailable: [],
+        pagination: { offset, limit, hasMore, nextOffset },
+        notes: [PROVENANCE_NOTE, FRESHNESS_NOTE],
+    });
+}
+//# sourceMappingURL=nws-weather.js.map

package/dist/nws-weather.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nws-weather.js","sourceRoot":"","sources":["../src/nws-weather.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAsC,MAAM,WAAW,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAC1C,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAC/D,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,mFAAmF;AACnF,MAAM,cAAc,GAAG,8DAA8D,CAAC;AACtF,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC,MAAM,eAAe,GACnB,4GAA4G,CAAC;AAC/G,MAAM,cAAc,GAClB,6QAA6Q,CAAC;AAuBhR,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,CAAC,GAAI,CAAC,OAAO,IAAI,EAAE,CAA8C,CAAC,UAAU,IAAI,EAAE,CAAC;IACzF,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACvB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3B,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QACrB,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/B,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3B,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/B,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/B,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAyB;IACvD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,cAAc,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,UAAU,CAAC,SAAS,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,QAAQ,gDAAgD,CAAC,CAAC;IAC7J,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE;QAC/B,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,EAAE;KAC1E,CAAC,CAA2C,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,CAAC,SAAS,EAAE,8HAA8H,CAAC,CAAC;IAC9J,CAAC;IACD,OAAQ,IAAI,CAAC,QAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,qEAAqE;AACrE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAMlC;IACC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,4EAA4E;YAChI,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE/C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,cAAc,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtD,OAAO,QAAQ,CACb,EAAE,MAAM,EAAE,IAAI,EAAE,EAChB;QACE,MAAM,EAAE,8CAA8C;QACtD,WAAW,EAAE,IAAI;QACjB,QAAQ;QACR,cAAc;QACd,SAAS,EAAE,OAAO;QAClB,cAAc;QACd,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE;QACrB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QAClD,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;KACT,CAClC,CAAC;AACJ,CAAC"}

package/dist/openfda-drugsfda.d.ts

@@ -0,0 +1,72 @@
+/**
+ * openfda-drugsfda.ts — openFDA DRUG APPROVALS (Drugs@FDA, api.fda.gov) — the
+ * PHARMA REGULATORY-APPROVAL lane. FDA-approved drug applications (NDA/ANDA/BLA):
+ * the sponsor, the application number, each approved product (brand/generic name,
+ * dosage form, route, marketing status), and the submission/approval history.
+ * Answers "what drugs did sponsor X get approved, and which are still marketed" —
+ * pharma vendor product/approval intelligence.
+ *
+ * ★ SAME SOURCE + ENVELOPE + CRUX as openfda.ts / openfda-device.ts (ADR-0054/0056).
+ *   Same host (api.fda.gov), same envelope `{ meta:{ results:{ skip,limit,total }},
+ *   results:[…] }`, same ★no-match→HTTP-404-NOT_FOUND-as-honest-empty crux, same
+ *   optional query-key K-test, same fixed-host SSRF idiom, same structured-only (no
+ *   raw Lucene passthrough) search. REUSES openfda.ts's `fetchOpenfda`,
+ *   `readOpenfdaError`, `luceneQuote`, `openfdaApiKey`, `OPENFDA_HOST` verbatim.
+ *
+ *   GET https://api.fda.gov/drug/drugsfda.json?search=<lucene>&limit=&skip=[&api_key=]
+ *   → { meta:{ results:{ skip,limit,total }}, results:[ { application_number,
+ *       sponsor_name, products:[…], submissions:[…] } ] }.
+ *
+ * ★ HONESTY (mirrors the siblings exactly): [P1] totalAvailable = meta.results.total
+ *   EXACT (never results.length); skip/limit offset pagination. [★P2] 404 NOT_FOUND
+ *   ⇒ honest empty (never thrown); other 4xx ⇒ invalid_input surfacing openFDA's
+ *   message; 5xx/429 ⇒ THROW. [P3] every scalar via `str` (null-never-""); nested
+ *   products/submissions arrays default to [] and each field is str (never fabricated).
+ *   [P4] meta.results / results absent-or-mis-shaped ⇒ driftError. [K-test] the
+ *   OPTIONAL OPENFDA_API_KEY rides ONLY &api_key=; label/source name mode only.
+ *   [SSRF] fixed host; all VALUES Lucene-escaped + phrase-quoted via URLSearchParams.
+ */
+import { type MetaBundle } from "./meta.js";
+export type DrugsfdaProduct = {
+    brandName: string | null;
+    genericIngredients: {
+        name: string | null;
+        strength: string | null;
+    }[];
+    dosageForm: string | null;
+    route: string | null;
+    marketingStatus: string | null;
+};
+export type DrugsfdaSubmission = {
+    submissionType: string | null;
+    submissionNumber: string | null;
+    submissionStatus: string | null;
+    submissionStatusDate: string | null;
+    submissionClass: string | null;
+};
+export type DrugsfdaApplication = {
+    applicationNumber: string | null;
+    sponsorName: string | null;
+    products: DrugsfdaProduct[];
+    submissions: DrugsfdaSubmission[];
+};
+export type DrugsfdaFilters = {
+    sponsorName?: string;
+    brandName?: string;
+    activeIngredient?: string;
+    applicationNumber?: string;
+};
+export declare function buildDrugsfdaSearch(f: DrugsfdaFilters): string;
+export type DrugApprovalsArgs = DrugsfdaFilters & {
+    limit?: number;
+    skip?: number;
+};
+/**
+ * Search openFDA Drugs@FDA drug-approval applications with structured filters →
+ * curated application rows (sponsor, application number, approved products, submission
+ * history) + honest `_meta`. KEYLESS (OPTIONAL OPENFDA_API_KEY only raises the rate
+ * limit). totalAvailable = meta.results.total (EXACT); skip/limit pagination. A
+ * no-match query (openFDA HTTP 404 NOT_FOUND) ⇒ an honest empty, never a throw.
+ */
+export declare function drugApprovals(args: DrugApprovalsArgs): Promise<MetaBundle>;
+//# sourceMappingURL=openfda-drugsfda.d.ts.map

package/dist/openfda-drugsfda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openfda-drugsfda.d.ts","sourceRoot":"","sources":["../src/openfda-drugsfda.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AA4BzE,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;IACvE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC,CAAC;AAsCF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAW9D;AAGD,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmHhF"}