@cyanheads/nist-nvd-mcp-server 0.1.3

package/dist/mcp-server/tools/definitions/nvd-get-cve.tool.js

@@ -0,0 +1,183 @@
+/**
+ * @fileoverview Tool for fetching one or more CVEs by ID from the NIST NVD API.
+ * @module src/mcp-server/tools/definitions/nvd-get-cve
+ */
+import { tool, z } from '@cyanheads/mcp-ts-core';
+import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
+import { getNvdCveService } from '../../../services/nvd-cve/nvd-cve-service.js';
+export const nvdGetCve = tool('nvd_get_cve', {
+    title: 'Get CVE Details',
+    description: 'Fetch one or more CVEs by ID from the NIST National Vulnerability Database. ' +
+        'Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, ' +
+        'affected CPE configurations, CISA KEV fields, and references. ' +
+        'Up to 100 CVE IDs per call. For bulk lookups of more than 10 IDs, use brief: true — ' +
+        'full records for 100 CVEs can exceed 1MB and exhaust context budgets.',
+    annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    input: z.object({
+        cveIds: z
+            .union([
+            z.string().describe('A single CVE ID (e.g., "CVE-2021-44228").'),
+            z
+                .array(z.string())
+                .min(1)
+                .max(100)
+                .describe('An array of CVE IDs — at least 1, up to 100 per call.'),
+        ])
+            .describe('One CVE ID or an array of up to 100 CVE IDs to fetch.'),
+        brief: z
+            .boolean()
+            .default(false)
+            .describe('When true, returns trimmed records (ID, status, top CVSS score, KEV name, published date) ' +
+            'instead of full detail. Recommended for batches of more than 10 IDs.'),
+        includeReferences: z
+            .boolean()
+            .default(true)
+            .describe('When false, omits the references array to reduce response size.'),
+    }),
+    // Use passthrough to avoid aspirational over-typing of the upstream CVE schema.
+    // structuredContent will carry the full typed data; format() renders what matters.
+    output: z.object({
+        brief: z.boolean().describe('Whether brief or full records were returned.'),
+        cves: z
+            .array(z
+            .object({})
+            .passthrough()
+            .describe('One CVE record. Full mode includes CVSS scores, configurations, weaknesses, and references. ' +
+            'Brief mode includes ID, status, top severity, and CISA KEV name.'))
+            .describe('CVE records. In full mode: complete records with CVSS scores, configurations, weaknesses, and references. ' +
+            'In brief mode: trimmed records with ID, status, top severity, and CISA KEV name.'),
+        queryMeta: z
+            .object({
+            requested: z.number().describe('Number of CVE IDs requested.'),
+            returned: z.number().describe('Number of CVE records returned.'),
+            missingIds: z
+                .array(z.string().describe('A CVE ID not found in NVD.'))
+                .optional()
+                .describe('CVE IDs that were requested but returned no NVD data. Absent when all IDs matched.'),
+        })
+            .describe('Count metadata for verifying ID-to-record parity.'),
+    }),
+    errors: [
+        {
+            reason: 'invalid_cve_id_format',
+            code: JsonRpcErrorCode.InvalidParams,
+            when: 'One or more CVE IDs fail format validation (NVD returns HTTP 404 for malformed IDs).',
+            recovery: 'Use the format CVE-YYYY-NNNNN (e.g., CVE-2021-44228) and verify each ID.',
+        },
+        {
+            reason: 'cve_not_found',
+            code: JsonRpcErrorCode.NotFound,
+            when: 'A valid-format CVE ID returns no results — the ID is well-formed but does not exist in NVD.',
+            recovery: 'Verify the CVE ID is correct; use nvd_search_cves to search by keyword or date.',
+        },
+        {
+            reason: 'rate_limited',
+            code: JsonRpcErrorCode.ServiceUnavailable,
+            when: 'NVD returned HTTP 403 indicating the rate limit was exceeded.',
+            retryable: true,
+            recovery: 'Wait for the NVD rate window to reset or set the NVD_API_KEY environment variable for higher limits.',
+        },
+    ],
+    async handler(input, ctx) {
+        const ids = Array.isArray(input.cveIds) ? input.cveIds : [input.cveIds];
+        ctx.log.info('Fetching CVEs', { count: ids.length, brief: input.brief });
+        const service = getNvdCveService();
+        const result = await service.fetchById(ids, input.includeReferences, ctx);
+        const queryMeta = {
+            requested: result.requested,
+            returned: result.returned,
+            ...(result.missingIds.length > 0 && { missingIds: result.missingIds }),
+        };
+        if (input.brief) {
+            return {
+                brief: true,
+                cves: result.cves.map((cve) => ({
+                    cveId: cve.cveId,
+                    vulnStatus: cve.vulnStatus,
+                    published: cve.published,
+                    ...(cve.severity && { severity: cve.severity }),
+                    ...(cve.cisaKev && { cisaVulnerabilityName: cve.cisaKev.vulnerabilityName }),
+                })),
+                queryMeta,
+            };
+        }
+        return {
+            brief: false,
+            cves: result.cves,
+            queryMeta,
+        };
+    },
+    format: (result) => {
+        const lines = [];
+        lines.push(`**Returned:** ${result.queryMeta.returned} / ${result.queryMeta.requested} requested`);
+        if (result.queryMeta.missingIds?.length) {
+            lines.push(`**Not found in NVD:** ${result.queryMeta.missingIds.join(', ')}`);
+        }
+        lines.push(`**Mode:** ${result.brief ? 'Brief' : 'Full'}\n`);
+        for (const rawCve of result.cves) {
+            if (result.brief) {
+                const cve = rawCve;
+                lines.push(`## ${cve.cveId}`);
+                lines.push(`**Status:** ${cve.vulnStatus} | **Published:** ${cve.published}`);
+                if (cve.severity) {
+                    lines.push(`**Severity:** ${cve.severity.label} (${cve.severity.score}) from CVSS ${cve.severity.fromVersion}`);
+                }
+                else {
+                    lines.push('**Severity:** Not available (no CVSS scores)');
+                }
+                if (cve.cisaVulnerabilityName) {
+                    lines.push(`**CISA KEV:** ${cve.cisaVulnerabilityName}`);
+                }
+            }
+            else {
+                const cve = rawCve;
+                lines.push(`## ${cve.cveId}`);
+                lines.push(`**Status:** ${cve.vulnStatus} | **Published:** ${cve.published} | **Last Modified:** ${cve.lastModified}`);
+                if (cve.severity) {
+                    lines.push(`**Severity:** ${cve.severity.label} (${cve.severity.score}) from CVSS ${cve.severity.fromVersion}`);
+                }
+                else {
+                    lines.push('**Severity:** Not available (no CVSS scores)');
+                }
+                if (cve.cvssScores && cve.cvssScores.length > 0) {
+                    lines.push('\n**CVSS Scores:**');
+                    for (const s of cve.cvssScores) {
+                        lines.push(`- v${s.version} (${s.sourceType}): ${s.baseScore} ${s.severity}${s.vectorString ? ` — ${s.vectorString}` : ''}`);
+                    }
+                }
+                if (cve.descriptions && cve.descriptions.length > 0) {
+                    const en = cve.descriptions.find((d) => d.lang === 'en');
+                    if (en)
+                        lines.push(`\n${en.value}`);
+                }
+                if (cve.weaknesses && cve.weaknesses.length > 0) {
+                    const allCwes = cve.weaknesses.flatMap((w) => w.cweIds).filter(Boolean);
+                    if (allCwes.length > 0)
+                        lines.push(`**Weaknesses:** ${allCwes.join(', ')}`);
+                }
+                if (cve.configurations && cve.configurations.length > 0) {
+                    lines.push(`**Configurations:** ${cve.configurations.length} node group(s)`);
+                }
+                if (cve.cisaKev) {
+                    lines.push(`\n**CISA KEV Details:**`);
+                    lines.push(`- Name: ${cve.cisaKev.vulnerabilityName}`);
+                    lines.push(`- Added: ${cve.cisaKev.exploitAddDate}`);
+                    lines.push(`- Action Due: ${cve.cisaKev.actionDueDate}`);
+                    lines.push(`- Required Action: ${cve.cisaKev.requiredAction}`);
+                }
+                if (cve.references && cve.references.length > 0) {
+                    lines.push(`\n**References (${cve.references.length}):**`);
+                    for (const ref of cve.references.slice(0, 5)) {
+                        lines.push(`- ${ref.url}${ref.tags?.length ? ` [${ref.tags.join(', ')}]` : ''}`);
+                    }
+                    if (cve.references.length > 5) {
+                        lines.push(`- … ${cve.references.length - 5} more references`);
+                    }
+                }
+            }
+            lines.push('');
+        }
+        return [{ type: 'text', text: lines.join('\n') }];
+    },
+});
+//# sourceMappingURL=nvd-get-cve.tool.js.map

package/dist/mcp-server/tools/definitions/nvd-get-cve.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd-get-cve.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/nvd-get-cve.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAGzE,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE;IAC3C,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,8EAA8E;QAC9E,4GAA4G;QAC5G,gEAAgE;QAChE,sFAAsF;QACtF,uEAAuE;IACzE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC;aACN,KAAK,CAAC;YACL,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YAChE,CAAC;iBACE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,uDAAuD,CAAC;SACrE,CAAC;aACD,QAAQ,CAAC,uDAAuD,CAAC;QACpE,KAAK,EAAE,CAAC;aACL,OAAO,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,4FAA4F;YAC1F,sEAAsE,CACzE;QACH,iBAAiB,EAAE,CAAC;aACjB,OAAO,EAAE;aACT,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,iEAAiE,CAAC;KAC/E,CAAC;IAEF,gFAAgF;IAChF,mFAAmF;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QAC3E,IAAI,EAAE,CAAC;aACJ,KAAK,CACJ,CAAC;aACE,MAAM,CAAC,EAAE,CAAC;aACV,WAAW,EAAE;aACb,QAAQ,CACP,8FAA8F;YAC5F,kEAAkE,CACrE,CACJ;aACA,QAAQ,CACP,4GAA4G;YAC1G,kFAAkF,CACrF;QACH,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YAChE,UAAU,EAAE,CAAC;iBACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;iBACxD,QAAQ,EAAE;iBACV,QAAQ,CACP,oFAAoF,CACrF;SACJ,CAAC;aACD,QAAQ,CAAC,mDAAmD,CAAC;KACjE,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,gBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,sFAAsF;YAC5F,QAAQ,EAAE,0EAA0E;SACrF;QACD;YACE,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,IAAI,EAAE,6FAA6F;YACnG,QAAQ,EAAE,iFAAiF;SAC5F;QACD;YACE,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,gBAAgB,CAAC,kBAAkB;YACzC,IAAI,EAAE,+DAA+D;YACrE,SAAS,EAAE,IAAI;YACf,QAAQ,EACN,sGAAsG;SACzG;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAE1E,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;SACvE,CAAC;QAEF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC/C,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,qBAAqB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;iBAC7E,CAAC,CAA8B;gBAChC,SAAS;aACV,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM,CAAC,IAA4C;YACzD,SAAS;SACV,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,iBAAiB,MAAM,CAAC,SAAS,CAAC,QAAQ,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,YAAY,CACvF,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAE7D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,MAAwE,CAAC;gBACrF,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,UAAU,qBAAqB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC9E,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACjB,KAAK,CAAC,IAAI,CACR,iBAAiB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,eAAe,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CACpG,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAA8B,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CACR,eAAe,GAAG,CAAC,UAAU,qBAAqB,GAAG,CAAC,SAAS,yBAAyB,GAAG,CAAC,YAAY,EAAE,CAC3G,CAAC;gBAEF,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACjB,KAAK,CAAC,IAAI,CACR,iBAAiB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,eAAe,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CACpG,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBAC7D,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBACjC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjH,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;oBACzD,IAAI,EAAE;wBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;gBACtC,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBAED,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxD,KAAK,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,cAAc,CAAC,MAAM,gBAAgB,CAAC,CAAC;gBAC/E,CAAC;gBAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;oBACtC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;oBACvD,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;oBACrD,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;oBACzD,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;gBACjE,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC;oBAC3D,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnF,CAAC;oBACD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC"}

package/dist/mcp-server/tools/definitions/nvd-search-cpes.tool.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview Tool for searching the NVD CPE dictionary by keyword or match string.
+ * @module src/mcp-server/tools/definitions/nvd-search-cpes
+ */
+import { z } from '@cyanheads/mcp-ts-core';
+import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
+export declare const nvdSearchCpes: import("@cyanheads/mcp-ts-core").ToolDefinition<z.ZodObject<{
+    keyword: z.ZodOptional<z.ZodString>;
+    cpeMatchString: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    cpes: z.ZodArray<z.ZodObject<{
+        cpeName: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        deprecated: z.ZodBoolean;
+        deprecatedBy: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        lastModified: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    queryMeta: z.ZodObject<{
+        totalResults: z.ZodNumber;
+        returned: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>, readonly [{
+    readonly reason: "missing_search_input";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "Neither keyword nor cpeMatchString was provided.";
+    readonly recovery: "Provide at least one of keyword (e.g., \"apache http server\") or cpeMatchString (partial CPEv2.3 pattern).";
+}, {
+    readonly reason: "invalid_cpe_format";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "The cpeMatchString does not start with \"cpe:2.3:\" — it is clearly not a valid CPEv2.3 string.";
+    readonly recovery: "Provide a valid CPEv2.3 string starting with \"cpe:2.3:\", or use keyword search to find the correct CPE name.";
+}, {
+    readonly reason: "rate_limited";
+    readonly code: JsonRpcErrorCode.ServiceUnavailable;
+    readonly when: "NVD returned HTTP 403 indicating the rate limit was exceeded.";
+    readonly retryable: true;
+    readonly recovery: "Wait for the NVD rate window to reset or set the NVD_API_KEY environment variable for higher limits.";
+}]>;
+//# sourceMappingURL=nvd-search-cpes.tool.d.ts.map

package/dist/mcp-server/tools/definitions/nvd-search-cpes.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd-search-cpes.tool.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/nvd-search-cpes.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAKjE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8KxB,CAAC"}

package/dist/mcp-server/tools/definitions/nvd-search-cpes.tool.js

@@ -0,0 +1,140 @@
+/**
+ * @fileoverview Tool for searching the NVD CPE dictionary by keyword or match string.
+ * @module src/mcp-server/tools/definitions/nvd-search-cpes
+ */
+import { tool, z } from '@cyanheads/mcp-ts-core';
+import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
+import { getNvdCpeService } from '../../../services/nvd-cpe/nvd-cpe-service.js';
+const CPE_PREFIX_REGEX = /^cpe:2\.3:/i;
+export const nvdSearchCpes = tool('nvd_search_cpes', {
+    title: 'Search CPE Dictionary',
+    description: 'Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. ' +
+        'Returns CPE names, human-readable titles, and deprecation status. ' +
+        'Use before nvd_audit_cpe to resolve the correct CPE name for a product — CPE strings are precise identifiers ' +
+        '(e.g., cpe:2.3:a:apache:http_server:2.4.51:*:*:*:*:*:*:*) and must match exactly to audit the right product.',
+    annotations: { readOnlyHint: true, openWorldHint: false },
+    input: z.object({
+        keyword: z
+            .string()
+            .optional()
+            .describe('Product name or vendor keyword (e.g., "apache http server", "openssl", "nginx"). ' +
+            'At least one of keyword or cpeMatchString is required.'),
+        cpeMatchString: z
+            .string()
+            .optional()
+            .describe('Partial CPEv2.3 pattern (e.g., "cpe:2.3:a:apache:http_server"). ' +
+            'At least one of keyword or cpeMatchString is required.'),
+        limit: z
+            .number()
+            .int()
+            .min(1)
+            .max(10_000)
+            .default(20)
+            .describe('Maximum number of CPE entries to return (default 20, max 10000). ' +
+            'If totalResults > returned, narrow the keyword for a more specific result.'),
+    }),
+    output: z.object({
+        cpes: z
+            .array(z
+            .object({
+            cpeName: z
+                .string()
+                .describe('Full CPEv2.3 name (use this as the cpeName in nvd_audit_cpe).'),
+            title: z
+                .string()
+                .optional()
+                .describe('Human-readable product title. Absent when NVD has no English title.'),
+            deprecated: z
+                .boolean()
+                .describe('Whether this CPE has been deprecated in the NVD dictionary.'),
+            deprecatedBy: z
+                .array(z.string().describe('Superseding CPE name.'))
+                .optional()
+                .describe('CPE names that supersede this deprecated entry.'),
+            lastModified: z
+                .string()
+                .optional()
+                .describe('ISO 8601 datetime when this CPE was last modified.'),
+        })
+            .describe('One CPE dictionary entry.'))
+            .describe('Matching CPE dictionary entries.'),
+        queryMeta: z
+            .object({
+            totalResults: z
+                .number()
+                .describe('Total matching CPE entries before the limit was applied.'),
+            returned: z.number().describe('Number of entries returned in this response.'),
+        })
+            .describe('Query metadata. When totalResults > returned, narrow the keyword for more specific results.'),
+    }),
+    errors: [
+        {
+            reason: 'missing_search_input',
+            code: JsonRpcErrorCode.InvalidParams,
+            when: 'Neither keyword nor cpeMatchString was provided.',
+            recovery: 'Provide at least one of keyword (e.g., "apache http server") or cpeMatchString (partial CPEv2.3 pattern).',
+        },
+        {
+            reason: 'invalid_cpe_format',
+            code: JsonRpcErrorCode.InvalidParams,
+            when: 'The cpeMatchString does not start with "cpe:2.3:" — it is clearly not a valid CPEv2.3 string.',
+            recovery: 'Provide a valid CPEv2.3 string starting with "cpe:2.3:", or use keyword search to find the correct CPE name.',
+        },
+        {
+            reason: 'rate_limited',
+            code: JsonRpcErrorCode.ServiceUnavailable,
+            when: 'NVD returned HTTP 403 indicating the rate limit was exceeded.',
+            retryable: true,
+            recovery: 'Wait for the NVD rate window to reset or set the NVD_API_KEY environment variable for higher limits.',
+        },
+    ],
+    async handler(input, ctx) {
+        if (!input.keyword && !input.cpeMatchString) {
+            throw ctx.fail('missing_search_input', 'At least one of keyword or cpeMatchString is required.', ctx.recoveryFor('missing_search_input'));
+        }
+        if (input.cpeMatchString && !CPE_PREFIX_REGEX.test(input.cpeMatchString)) {
+            throw ctx.fail('invalid_cpe_format', `Invalid CPE string: "${input.cpeMatchString}". CPEv2.3 strings must start with "cpe:2.3:".`, ctx.recoveryFor('invalid_cpe_format'));
+        }
+        ctx.log.info('Searching CPE dictionary', {
+            keyword: input.keyword,
+            cpeMatchString: input.cpeMatchString,
+            limit: input.limit,
+        });
+        const service = getNvdCpeService();
+        const result = await service.searchCpes({
+            limit: input.limit,
+            ...(input.keyword && { keyword: input.keyword }),
+            ...(input.cpeMatchString && { cpeMatchString: input.cpeMatchString }),
+        }, ctx);
+        return {
+            cpes: result.cpes,
+            queryMeta: { totalResults: result.totalResults, returned: result.returned },
+        };
+    },
+    format: (result) => {
+        const lines = [];
+        lines.push(`**Total:** ${result.queryMeta.totalResults} matching CPEs | **Returned:** ${result.queryMeta.returned}`);
+        if (result.queryMeta.totalResults > result.queryMeta.returned) {
+            lines.push(`> Results truncated — narrow the keyword for more specific results.`);
+        }
+        if (result.cpes.length === 0) {
+            lines.push('\nNo CPEs matched. Try a broader keyword or different spelling.');
+            return [{ type: 'text', text: lines.join('\n') }];
+        }
+        lines.push('');
+        for (const cpe of result.cpes) {
+            const depFlag = cpe.deprecated ? ' *(deprecated)*' : '';
+            lines.push(`### ${cpe.title ?? cpe.cpeName}${depFlag}`);
+            lines.push(`**CPE Name:** \`${cpe.cpeName}\``);
+            if (cpe.deprecated && cpe.deprecatedBy && cpe.deprecatedBy.length > 0) {
+                lines.push(`**Deprecated By:** ${cpe.deprecatedBy.join(', ')}`);
+            }
+            if (cpe.lastModified) {
+                lines.push(`**Last Modified:** ${cpe.lastModified}`);
+            }
+            lines.push('');
+        }
+        return [{ type: 'text', text: lines.join('\n') }];
+    },
+});
+//# sourceMappingURL=nvd-search-cpes.tool.js.map

package/dist/mcp-server/tools/definitions/nvd-search-cpes.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd-search-cpes.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/nvd-search-cpes.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEzE,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,EAAE;IACnD,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,0GAA0G;QAC1G,oEAAoE;QACpE,+GAA+G;QAC/G,8GAA8G;IAChH,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IAEzD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,mFAAmF;YACjF,wDAAwD,CAC3D;QACH,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kEAAkE;YAChE,wDAAwD,CAC3D;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,MAAM,CAAC;aACX,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,mEAAmE;YACjE,4EAA4E,CAC/E;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;YAClF,UAAU,EAAE,CAAC;iBACV,OAAO,EAAE;iBACT,QAAQ,CAAC,6DAA6D,CAAC;YAC1E,YAAY,EAAE,CAAC;iBACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;iBACnD,QAAQ,EAAE;iBACV,QAAQ,CAAC,iDAAiD,CAAC;YAC9D,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oDAAoD,CAAC;SAClE,CAAC;aACD,QAAQ,CAAC,2BAA2B,CAAC,CACzC;aACA,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,QAAQ,CAAC,0DAA0D,CAAC;YACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;SAC9E,CAAC;aACD,QAAQ,CACP,6FAA6F,CAC9F;KACJ,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,sBAAsB;YAC9B,IAAI,EAAE,gBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,kDAAkD;YACxD,QAAQ,EACN,2GAA2G;SAC9G;QACD;YACE,MAAM,EAAE,oBAAoB;YAC5B,IAAI,EAAE,gBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,+FAA+F;YACrG,QAAQ,EACN,8GAA8G;SACjH;QACD;YACE,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,gBAAgB,CAAC,kBAAkB;YACzC,IAAI,EAAE,+DAA+D;YACrE,SAAS,EAAE,IAAI;YACf,QAAQ,EACN,sGAAsG;SACzG;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,GAAG,CAAC,IAAI,CACZ,sBAAsB,EACtB,wDAAwD,EACxD,GAAG,CAAC,WAAW,CAAC,sBAAsB,CAAC,CACxC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,CAAC,IAAI,CACZ,oBAAoB,EACpB,wBAAwB,KAAK,CAAC,cAAc,gDAAgD,EAC5F,GAAG,CAAC,WAAW,CAAC,oBAAoB,CAAC,CACtC,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CACrC;YACE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChD,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SACtE,EACD,GAAG,CACJ,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,cAAc,MAAM,CAAC,SAAS,CAAC,YAAY,kCAAkC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CACzG,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC9E,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAE/C,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC"}

package/dist/mcp-server/tools/definitions/nvd-search-cves.tool.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @fileoverview Tool for searching CVEs by keyword, severity, CWE, date range, or KEV status.
+ * @module src/mcp-server/tools/definitions/nvd-search-cves
+ */
+import { z } from '@cyanheads/mcp-ts-core';
+import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
+export declare const nvdSearchCves: import("@cyanheads/mcp-ts-core").ToolDefinition<z.ZodObject<{
+    keyword: z.ZodOptional<z.ZodString>;
+    severity: z.ZodOptional<z.ZodEnum<{
+        LOW: "LOW";
+        MEDIUM: "MEDIUM";
+        HIGH: "HIGH";
+        CRITICAL: "CRITICAL";
+    }>>;
+    severityVersion: z.ZodDefault<z.ZodEnum<{
+        v2: "v2";
+        v3: "v3";
+        v4: "v4";
+    }>>;
+    cweId: z.ZodOptional<z.ZodString>;
+    pubDays: z.ZodOptional<z.ZodNumber>;
+    lastModDays: z.ZodOptional<z.ZodNumber>;
+    pubStartDate: z.ZodOptional<z.ZodString>;
+    pubEndDate: z.ZodOptional<z.ZodString>;
+    lastModStartDate: z.ZodOptional<z.ZodString>;
+    lastModEndDate: z.ZodOptional<z.ZodString>;
+    kevOnly: z.ZodDefault<z.ZodBoolean>;
+    noRejected: z.ZodDefault<z.ZodBoolean>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    offset: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    cves: z.ZodArray<z.ZodObject<{
+        cveId: z.ZodString;
+        vulnStatus: z.ZodString;
+        published: z.ZodString;
+        severity: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+            score: z.ZodNumber;
+            fromVersion: z.ZodString;
+        }, z.core.$strip>>;
+        cisaVulnerabilityName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    queryMeta: z.ZodObject<{
+        totalResults: z.ZodNumber;
+        returned: z.ZodNumber;
+        offset: z.ZodNumber;
+        datesClamped: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            param: z.ZodString;
+            original: z.ZodNumber;
+            clamped: z.ZodNumber;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+}, z.core.$strip>, readonly [{
+    readonly reason: "mutually_exclusive_params";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "Both pubDays and pubStartDate/pubEndDate provided, or both lastModDays and lastModStartDate/lastModEndDate.";
+    readonly recovery: "Use either the convenience shorthand (pubDays) or the explicit date range (pubStartDate + pubEndDate), not both.";
+}, {
+    readonly reason: "missing_date_pair";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "Only one of pubStartDate/pubEndDate (or lastModStartDate/lastModEndDate) was provided — NVD requires both.";
+    readonly recovery: "Provide both the start and end date, or use pubDays/lastModDays instead of an explicit date range.";
+}, {
+    readonly reason: "date_range_inverted";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "The end date is before the start date.";
+    readonly recovery: "Ensure the end date is after the start date.";
+}, {
+    readonly reason: "date_range_exceeds_max";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "Explicit pubStartDate/pubEndDate or lastModStartDate/lastModEndDate span more than 120 days.";
+    readonly recovery: "Narrow the date range to 120 days or fewer, or use multiple paginated queries.";
+}, {
+    readonly reason: "invalid_date_format";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "A date string provided for pubStartDate, pubEndDate, lastModStartDate, or lastModEndDate is not a valid ISO 8601 datetime.";
+    readonly recovery: "Use ISO 8601 format, e.g. 2024-01-01T00:00:00.000Z.";
+}, {
+    readonly reason: "invalid_severity_for_version";
+    readonly code: JsonRpcErrorCode.InvalidParams;
+    readonly when: "severity=\"CRITICAL\" was specified with severityVersion=\"v2\" — CVSS v2 has no CRITICAL tier.";
+    readonly recovery: "Use LOW, MEDIUM, or HIGH when severityVersion is \"v2\". Use v3 or v4 for CRITICAL.";
+}, {
+    readonly reason: "rate_limited";
+    readonly code: JsonRpcErrorCode.ServiceUnavailable;
+    readonly when: "NVD returned HTTP 403 indicating the rate limit was exceeded.";
+    readonly retryable: true;
+    readonly recovery: "Wait for the NVD rate window to reset or set the NVD_API_KEY environment variable for higher limits.";
+}]>;
+//# sourceMappingURL=nvd-search-cves.tool.d.ts.map

package/dist/mcp-server/tools/definitions/nvd-search-cves.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd-search-cves.tool.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/nvd-search-cves.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAmCjE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqaxB,CAAC"}