@mcpassure/mcp-anvisa-bulario 0.1.0 → 2.1.0

package/README.en.md

@@ -8,9 +8,10 @@
 
 Enables AI agents (Claude, GPT, Copilot) to query drug leaflets (bulas), active ingredients, therapeutic classes, and other metadata for medications registered in Brazil, with structured responses and efficient caching.
 
-[![CI](https://github.com/mcpassure/mcp-anvisa-bulario/actions/workflows/ci.yml/badge.svg)](https://github.com/mcpassure/mcp-anvisa-bulario/actions)
 [![npm](https://img.shields.io/npm/v/@mcpassure/mcp-anvisa-bulario)](https://www.npmjs.com/package/@mcpassure/mcp-anvisa-bulario)
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![OSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/mcpassure/monorepo/badge)](https://securityscorecards.dev/viewer/?uri=github.com/mcpassure/monorepo)
+[![SAFE-MCP](https://img.shields.io/badge/SAFE--MCP-mapped-green)](#safe-mcp-mapping)
 
 ---
 
@@ -89,13 +90,7 @@ Add to `claude_desktop_config.json`:
 
 ## Demo
 
-![Demo](./.github/assets/demo.gif)
-
-To run locally:
-
-```bash
-npm run demo
-```
+🚧 Demo GIF coming soon.
 
 ---
 
@@ -194,3 +189,34 @@ Maintained by [MCPAssure Brasil](https://github.com/mcpassure). See [CONTRIBUTIN
 ---
 
 Part of the [MCPAssure](https://github.com/mcpassure) catalog — curated MCP examples for Brazilian healthcare.
+
+---
+
+## SAFE-MCP Mapping
+
+Assessment against the SAFE-MCP framework (OpenSSF + LF + OpenID Foundation).
+
+### Mitigated attacks
+
+| ID | Attack | Status | How we mitigate it |
+|----|--------|--------|-------------------|
+| SAFE-T001 | Tool Poisoning | ✓ Mitigated | Strict Zod schema; drug names validated before querying the database |
+| SAFE-T002 | Indirect Prompt Injection | ✓ Mitigated | Structured output (`structuredContent`); ANVISA content is tabular, no executable markup |
+| SAFE-T003 | Credential exposure | ✓ Mitigated | Public ANVISA data with no authentication; R2 only in server-side Worker |
+| SAFE-T004 | Data exfiltration | ✓ Mitigated | Read-only on public drug data; no access to user data |
+| SAFE-T005 | Resource exhaustion | ✓ Mitigated | Local SQLite cache (18MB); canary uses HEAD request or single header download |
+
+### NOT mitigated (honest declaration)
+
+| ID | Attack | Why not mitigated |
+|----|--------|------------------|
+| SAFE-T010 | Supply-chain attack via npm | `pnpm audit` + Renovate; no SBOM generated yet |
+| SAFE-T015 | Side-channel timing analysis | Not relevant for public tabular drug data |
+
+### Lethal Trifecta Declaration (Willison, 2025)
+
+1. **Private data access** — ✗ **Absent.** ANVISA Bulário is entirely public; no patient data is accessed.
+2. **Untrusted content exposure** — ⚠ **Partial.** Inputs validated by Zod; ANVISA data is governmental.
+3. **External communication capability** — ✗ **Absent.** MCP operates on local SQLite cache; no runtime external calls.
+
+**Conclusion:** this MCP **does not combine all 3 factors simultaneously**. Local-first architecture eliminates the external communication factor.

package/README.md

@@ -8,9 +8,10 @@
 
 Permite que agentes de IA (Claude, GPT, Copilot) consultem bulas, princípios ativos, classes terapêuticas e demais metadados de medicamentos registrados no Brasil com resposta estruturada e cache eficiente.
 
-[![CI](https://github.com/mcpassure/mcp-anvisa-bulario/actions/workflows/ci.yml/badge.svg)](https://github.com/mcpassure/mcp-anvisa-bulario/actions)
 [![npm](https://img.shields.io/npm/v/@mcpassure/mcp-anvisa-bulario)](https://www.npmjs.com/package/@mcpassure/mcp-anvisa-bulario)
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![OSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/mcpassure/monorepo/badge)](https://securityscorecards.dev/viewer/?uri=github.com/mcpassure/monorepo)
+[![SAFE-MCP](https://img.shields.io/badge/SAFE--MCP-mapped-green)](#safe-mcp-mapping)
 
 ---
 
@@ -90,13 +91,7 @@ Adicione ao `claude_desktop_config.json`:
 
 ## Demo
 
-![Demo](./.github/assets/demo.gif)
-
-Para rodar localmente:
-
-```bash
-npm run demo
-```
+🚧 Demo GIF em breve.
 
 ---
 
@@ -190,3 +185,34 @@ Mantido pela [MCPAssure Brasil](https://github.com/mcpassure). Consulte [CONTRIB
 ---
 
 Parte do catálogo [MCPAssure](https://github.com/mcpassure) — exemplos de curadoria de MCPs para saúde brasileira.
+
+---
+
+## SAFE-MCP Mapping
+
+Avaliação contra o framework SAFE-MCP (OpenSSF + LF + OpenID Foundation).
+
+### Ataques mitigados
+
+| ID | Ataque | Status | Como mitigamos |
+|----|--------|--------|----------------|
+| SAFE-T001 | Tool Poisoning | ✓ Mitigado | Schema Zod estrito; nomes de medicamentos validados antes de consultar banco |
+| SAFE-T002 | Indirect Prompt Injection | ✓ Mitigado | Output estruturado (`structuredContent`); conteúdo ANVISA é tabular, sem markup executável |
+| SAFE-T003 | Credential exposure | ✓ Mitigado | Dados públicos ANVISA sem autenticação; R2 apenas em Worker server-side |
+| SAFE-T004 | Data exfiltration | ✓ Mitigado | Read-only sobre dados públicos de medicamentos; sem acesso a dados de usuário |
+| SAFE-T005 | Resource exhaustion | ✓ Mitigado | Cache SQLite local (18MB); canary usa HEAD request ou download único de header |
+
+### Ataques NÃO mitigados (declaração honesta)
+
+| ID | Ataque | Por que não mitigado |
+|----|--------|---------------------|
+| SAFE-T010 | Supply-chain attack via npm | `pnpm audit` + Renovate; sem SBOM gerado ainda |
+| SAFE-T015 | Side-channel timing analysis | Não relevante para dados públicos tabelados de medicamentos |
+
+### Lethal Trifecta Declaration (Willison, 2025)
+
+1. **Acesso a dados privados** — ✗ **Ausente.** Bulário ANVISA é integralmente público; nenhum dado de paciente é acessado.
+2. **Exposição a conteúdo não-confiável** — ⚠ **Parcial.** Inputs validados por Zod; dados ANVISA são governamentais.
+3. **Capacidade de comunicação externa** — ✗ **Ausente.** MCP opera sobre banco SQLite local; sem chamadas em runtime.
+
+**Conclusão:** este MCP **não combina os 3 fatores simultaneamente**. Arquitetura local-first elimina o fator de comunicação externa.

package/dist/bootstrap.d.ts

@@ -0,0 +1,11 @@
+export declare function getDbPath(): string;
+export type BootstrapResult = {
+    ok: true;
+    action: "downloaded" | "up_to_date" | "skipped_offline";
+    version: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function ensureDataset(): Promise<BootstrapResult>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAoCA,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAuDD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,YAAY,GAAG,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,wBAAsB,aAAa,IAAI,OAAO,CAAC,eAAe,CAAC,CAwE9D"}

package/dist/bootstrap.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { AwsClient } from "aws4fetch";
+const DATASET = "anvisa-bulario";
+const BUCKET = "mcpassure-datasets";
+const MANIFEST_KEY = `bulario/latest/manifest.json`;
+function getDataDir() {
+    return process.platform === "win32"
+        ? join(process.env.APPDATA ?? homedir(), "mcpassure", DATASET)
+        : join(process.env.XDG_DATA_HOME ?? join(homedir(), ".local", "share"), "mcpassure", DATASET);
+}
+export function getDbPath() {
+    return process.env.MCPASSURE_DB_PATH ?? join(getDataDir(), "bulario.db");
+}
+function getLocalManifestPath() {
+    return join(getDataDir(), "manifest.json");
+}
+function log(msg) {
+    process.stderr.write(`[bootstrap] ${msg}\n`);
+}
+async function fetchManifest(client, endpoint) {
+    const url = `${endpoint}/${BUCKET}/${MANIFEST_KEY}`;
+    const resp = await client.fetch(url);
+    if (!resp.ok) {
+        throw new Error(`HTTP ${resp.status} ao buscar manifest em ${url}`);
+    }
+    return (await resp.json());
+}
+async function downloadAndVerify(client, endpoint, manifest, targetPath) {
+    const url = `${endpoint}/${manifest.artifact.bucket}/${manifest.artifact.key}`;
+    const tmp = `${targetPath}.download`;
+    await mkdir(dirname(targetPath), { recursive: true });
+    log(`Baixando ${url} (${(manifest.artifact.size_bytes / 1024 / 1024).toFixed(1)} MB)...`);
+    const resp = await client.fetch(url);
+    if (!resp.ok) {
+        throw new Error(`HTTP ${resp.status} ao baixar artifact ${url}`);
+    }
+    const buf = Buffer.from(await resp.arrayBuffer());
+    if (buf.length !== manifest.artifact.size_bytes) {
+        throw new Error(`Tamanho inesperado. Esperado ${manifest.artifact.size_bytes}, recebido ${buf.length}.`);
+    }
+    const hash = createHash("sha256").update(buf).digest("hex");
+    if (hash.toLowerCase() !== manifest.artifact.sha256.toLowerCase()) {
+        throw new Error(`Checksum SHA-256 não bate. Esperado ${manifest.artifact.sha256}, recebido ${hash}.`);
+    }
+    await writeFile(tmp, buf);
+    await rename(tmp, targetPath);
+    log(`Download concluído. SHA-256 validado.`);
+}
+export async function ensureDataset() {
+    const dbPath = getDbPath();
+    const manifestPath = getLocalManifestPath();
+    const dbExists = existsSync(dbPath);
+    const accessKey = process.env.MCPASSURE_R2_ACCESS_KEY_ID;
+    const secretKey = process.env.MCPASSURE_R2_SECRET_ACCESS_KEY;
+    const endpoint = process.env.MCPASSURE_R2_ENDPOINT;
+    if (!accessKey || !secretKey || !endpoint) {
+        if (dbExists) {
+            log("Credenciais R2 ausentes — usando cache local existente.");
+            return { ok: true, action: "skipped_offline", version: "local" };
+        }
+        return {
+            ok: false,
+            reason: "Cache local inexistente e credenciais R2 ausentes. " +
+                "Configure MCPASSURE_R2_ACCESS_KEY_ID, MCPASSURE_R2_SECRET_ACCESS_KEY e MCPASSURE_R2_ENDPOINT, " +
+                "ou execute `npm run sync` para popular o dataset local.",
+        };
+    }
+    const client = new AwsClient({
+        accessKeyId: accessKey,
+        secretAccessKey: secretKey,
+        service: "s3",
+        region: "auto",
+    });
+    let remoteManifest;
+    try {
+        remoteManifest = await fetchManifest(client, endpoint);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        if (dbExists) {
+            log(`Falha ao buscar manifest remoto (${reason}). Usando cache local.`);
+            return { ok: true, action: "skipped_offline", version: "stale" };
+        }
+        return { ok: false, reason: `Sem cache e sem rede: ${reason}` };
+    }
+    if (dbExists && existsSync(manifestPath)) {
+        try {
+            const localManifest = JSON.parse(await readFile(manifestPath, "utf8"));
+            if (localManifest.version === remoteManifest.version) {
+                return { ok: true, action: "up_to_date", version: localManifest.version };
+            }
+            log(`Versão local (${localManifest.version}) difere de remota (${remoteManifest.version}). Atualizando.`);
+        }
+        catch {
+            log("Manifest local corrompido. Re-baixando.");
+        }
+    }
+    try {
+        await downloadAndVerify(client, endpoint, remoteManifest, dbPath);
+        await writeFile(manifestPath, JSON.stringify(remoteManifest, null, 2));
+        return { ok: true, action: "downloaded", version: remoteManifest.version };
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        const tmp = `${dbPath}.download`;
+        if (existsSync(tmp)) {
+            await unlink(tmp).catch(() => { });
+        }
+        if (dbExists) {
+            log(`Falha no download (${reason}). Mantendo cache anterior.`);
+            return { ok: true, action: "skipped_offline", version: "stale" };
+        }
+        return { ok: false, reason };
+    }
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC;AACpC,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAqBpD,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAiB,EAAE,QAAgB;IAC9D,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,MAAM,IAAI,YAAY,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAa,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAiB,EACjB,QAAgB,EAChB,QAAkB,EAClB,UAAkB;IAElB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC/E,MAAM,GAAG,GAAG,GAAG,UAAU,WAAW,CAAC;IAErC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtD,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAElD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,CAAC,QAAQ,CAAC,UAAU,cAAc,GAAG,CAAC,MAAM,GAAG,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,QAAQ,CAAC,MAAM,cAAc,IAAI,GAAG,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9B,GAAG,CAAC,uCAAuC,CAAC,CAAC;AAC/C,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEnD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,yDAAyD,CAAC,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,qDAAqD;gBACrD,gGAAgG;gBAChG,yDAAyD;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,WAAW,EAAE,SAAS;QACtB,eAAe,EAAE,SAAS;QAC1B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,IAAI,cAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,oCAAoC,MAAM,wBAAwB,CAAC,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,IAAI,QAAQ,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAa,CAAC;YACnF,IAAI,aAAa,CAAC,OAAO,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5E,CAAC;YACD,GAAG,CACD,iBAAiB,aAAa,CAAC,OAAO,uBAAuB,cAAc,CAAC,OAAO,iBAAiB,CACrG,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,GAAG,MAAM,WAAW,CAAC;QACjC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,sBAAsB,MAAM,6BAA6B,CAAC,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -1,12 +1,15 @@
+/**
+ * config.ts — v2.0
+ *
+ * Configuração simplificada. O dataset agora é gerenciado pelo bootstrap.ts (R2)
+ * ou pelo script sync.ts (CSV direto da ANVISA).
+ *
+ * Paths migrados:
+ *   ~/.local/share/mcpassure-anvisa/ → ~/.local/share/mcpassure/anvisa-bulario/
+ *   %APPDATA%/mcpassure-anvisa/      → %APPDATA%/mcpassure/anvisa-bulario/
+ */
 export type Config = {
-    cachePath: string;
-    maxRetries: number;
-    baseDelayMs: number;
-    requestTimeoutMs: number;
-    anvisaBaseUrl: string;
     degradedThresholdDays: number;
-    statusPageEnabled: boolean;
-    statusPageUrl: string;
 };
 export declare function loadConfig(): Config;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,MAAM,GAAG;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,UAAU,IAAI,MAAM,CAkBnC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,MAAM,GAAG;IACnB,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAgB,UAAU,IAAI,MAAM,CAOnC"}

package/dist/config.js

@@ -1,17 +1,16 @@
-import os from "node:os";
-import path from "node:path";
+/**
+ * config.ts — v2.0
+ *
+ * Configuração simplificada. O dataset agora é gerenciado pelo bootstrap.ts (R2)
+ * ou pelo script sync.ts (CSV direto da ANVISA).
+ *
+ * Paths migrados:
+ *   ~/.local/share/mcpassure-anvisa/ → ~/.local/share/mcpassure/anvisa-bulario/
+ *   %APPDATA%/mcpassure-anvisa/      → %APPDATA%/mcpassure/anvisa-bulario/
+ */
 export function loadConfig() {
     return {
-        cachePath: process.env.MCPASSURE_CACHE_PATH ??
-            path.join(os.homedir(), ".cache", "mcpassure-anvisa", "cache.db"),
-        maxRetries: Number.parseInt(process.env.MCPASSURE_MAX_RETRIES ?? "3", 10),
-        baseDelayMs: Number.parseInt(process.env.MCPASSURE_BASE_DELAY_MS ?? "1000", 10),
-        requestTimeoutMs: Number.parseInt(process.env.MCPASSURE_REQUEST_TIMEOUT_MS ?? "10000", 10),
-        anvisaBaseUrl: process.env.MCPASSURE_ANVISA_BASE_URL ?? "https://consultas.anvisa.gov.br",
-        degradedThresholdDays: Number.parseInt(process.env.MCPASSURE_DEGRADED_THRESHOLD_DAYS ?? "30", 10),
-        statusPageEnabled: process.env.MCPASSURE_STATUS_HEARTBEAT === "true",
-        statusPageUrl: process.env.MCPASSURE_STATUS_PAGE_URL ??
-            "https://status.mcpassure.com.br/api/v1/heartbeat/anvisa-bulario",
+        degradedThresholdDays: Number.parseInt(process.env.MCPASSURE_DEGRADED_THRESHOLD_DAYS ?? "7", 10),
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAChC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,CAAC;QACnE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,EAAE,EAAE,CAAC;QACzE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;QAC/E,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,OAAO,EAAE,EAAE,CAAC;QAC1F,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,iCAAiC;QACzF,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CACpC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,IAAI,EACrD,EAAE,CACH;QACD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,MAAM;QACpE,aAAa,EACX,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,iEAAiE;KACpE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CACpC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,GAAG,EACpD,EAAE,CACH;KACF,CAAC;AACJ,CAAC"}

package/dist/db/dataset.d.ts

@@ -0,0 +1,15 @@
+import type { Apresentacao, BulaLink, BularioSource, MedicamentoDetalhes, MedicamentoResumo, SearchByClasseTerapeuticaParams, SearchByNameParams, SearchByPrincipalAtivoParams, SearchByTarjaParams } from "../sources/types.js";
+export declare class BularioDatasetSource implements BularioSource {
+    readonly name = "anvisa_dados_abertos_sqlite";
+    private readonly db;
+    constructor(dbPath: string);
+    searchByName(params: SearchByNameParams): Promise<MedicamentoResumo[]>;
+    searchByPrincipalAtivo(params: SearchByPrincipalAtivoParams): Promise<MedicamentoResumo[]>;
+    searchByClasseTerapeutica(params: SearchByClasseTerapeuticaParams): Promise<MedicamentoResumo[]>;
+    searchByTarja(params: SearchByTarjaParams): Promise<MedicamentoResumo[]>;
+    getDetalhes(numProcesso: string): Promise<MedicamentoDetalhes>;
+    getApresentacoes(numProcesso: string): Promise<Apresentacao[]>;
+    getBulaLink(_idBulaProtegido: string): Promise<BulaLink>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=dataset.d.ts.map

package/dist/db/dataset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset.d.ts","sourceRoot":"","sources":["../../src/db/dataset.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,+BAA+B,EAC/B,kBAAkB,EAClB,4BAA4B,EAC5B,mBAAmB,EAEpB,MAAM,qBAAqB,CAAC;AA+D7B,qBAAa,oBAAqB,YAAW,aAAa;IACxD,QAAQ,CAAC,IAAI,iCAAiC;IAC9C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;gBAE3B,MAAM,EAAE,MAAM;IAK1B,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAgBtE,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAgB1F,yBAAyB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAgBhG,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAwCxE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkB9D,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAiC9D,WAAW,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAIvB"}

package/dist/db/dataset.js

@@ -0,0 +1,168 @@
+import Database from "better-sqlite3";
+// ── Tarja normalisation ───────────────────────────────────────────────────────
+// v2.0: CATEGORIA_REGULATORIA no CSV não mapeia diretamente para LIVRE/VERMELHA/PRETA.
+// As categorias reais do CSV são: "Similar", "Novo", "Genérico", "BAIXO RISCO", etc.
+// O campo tarja (da Portaria 344/98) NÃO está disponível no CSV de dados abertos.
+// Mapeamos heuristicamente pelo tipo de produto e categoria para fins de filtragem.
+const TARJA_KEYWORDS = [
+    { pattern: /psicotr[oó]pic|entorpecente|controle especial/i, tarja: "PRETA" },
+    { pattern: /antimicrobiano|antibiótico|antibi[oó]tic/i, tarja: "VERMELHA" },
+    { pattern: /baixo risco|isento/i, tarja: "LIVRE" },
+];
+function inferTarja(row) {
+    const text = [row.categoria_regulatoria, row.classe_terapeutica].filter(Boolean).join(" ");
+    for (const { pattern, tarja } of TARJA_KEYWORDS) {
+        if (pattern.test(text))
+            return tarja;
+    }
+    return undefined;
+}
+function rowToResumo(row) {
+    return {
+        numProcesso: row.numero_processo ?? row.numero_registro ?? String(row.rowid),
+        nomeProduto: row.nome_produto,
+        empresa: row.empresa ?? "",
+        dataAtualizacao: row.data_finalizacao ?? undefined,
+    };
+}
+function rowToDetalhes(row) {
+    return {
+        numProcesso: row.numero_processo ?? row.numero_registro ?? String(row.rowid),
+        nomeProduto: row.nome_produto,
+        empresa: row.empresa ?? "",
+        dataAtualizacao: row.data_finalizacao ?? undefined,
+        tarja: inferTarja(row),
+        classesTerapeuticas: row.classe_terapeutica ? [row.classe_terapeutica] : undefined,
+        principioAtivo: row.principio_ativo ?? undefined,
+        numeroRegistro: row.numero_registro ?? undefined,
+    };
+}
+// ── BularioDatasetSource ──────────────────────────────────────────────────────
+export class BularioDatasetSource {
+    name = "anvisa_dados_abertos_sqlite";
+    db;
+    constructor(dbPath) {
+        this.db = new Database(dbPath, { readonly: true });
+        this.db.pragma("journal_mode = WAL");
+    }
+    searchByName(params) {
+        const { nome, pagina = 1, count = 10 } = params;
+        const offset = (pagina - 1) * count;
+        const term = `%${nome}%`;
+        const rows = this.db
+            .prepare(`SELECT rowid, * FROM medicamentos
+         WHERE nome_produto LIKE ? COLLATE NOCASE
+         LIMIT ? OFFSET ?`)
+            .all(term, count, offset);
+        return Promise.resolve(rows.map(rowToResumo));
+    }
+    searchByPrincipalAtivo(params) {
+        const { principioAtivo, pagina = 1, count = 10 } = params;
+        const offset = (pagina - 1) * count;
+        const term = `%${principioAtivo}%`;
+        const rows = this.db
+            .prepare(`SELECT rowid, * FROM medicamentos
+         WHERE principio_ativo LIKE ? COLLATE NOCASE
+         LIMIT ? OFFSET ?`)
+            .all(term, count, offset);
+        return Promise.resolve(rows.map(rowToResumo));
+    }
+    searchByClasseTerapeutica(params) {
+        const { classeTerapeutica, pagina = 1, count = 10 } = params;
+        const offset = (pagina - 1) * count;
+        const term = `%${classeTerapeutica}%`;
+        const rows = this.db
+            .prepare(`SELECT rowid, * FROM medicamentos
+         WHERE classe_terapeutica LIKE ? COLLATE NOCASE
+         LIMIT ? OFFSET ?`)
+            .all(term, count, offset);
+        return Promise.resolve(rows.map(rowToResumo));
+    }
+    searchByTarja(params) {
+        const { tarja, pagina = 1, count = 10 } = params;
+        const offset = (pagina - 1) * count;
+        // Heuristic tarja mapping — see inferTarja above
+        let whereClause;
+        let _bindValue;
+        if (tarja === "PRETA") {
+            whereClause =
+                "(classe_terapeutica LIKE ? OR categoria_regulatoria LIKE ?) " +
+                    "AND (classe_terapeutica LIKE '%PSICOTR%' OR classe_terapeutica LIKE '%ENTORP%' OR " +
+                    "classe_terapeutica LIKE '%CONTROLE ESPECIAL%')";
+            _bindValue = "%";
+        }
+        else if (tarja === "VERMELHA") {
+            whereClause =
+                "(classe_terapeutica LIKE '%ANTIMICROBIANO%' OR classe_terapeutica LIKE '%ANTIBI%' " +
+                    "OR categoria_regulatoria IN ('Similar', 'Novo', 'Genérico', 'Biológico')) " +
+                    "AND (classe_terapeutica NOT LIKE '%PSICOTR%')";
+            _bindValue = "%";
+        }
+        else {
+            // LIVRE — baixo risco
+            whereClause =
+                "categoria_regulatoria LIKE '%BAIXO RISCO%' OR categoria_regulatoria LIKE '%ISENTO%'";
+            _bindValue = "%";
+        }
+        let rows;
+        if (tarja === "VERMELHA" || tarja === "PRETA") {
+            rows = this.db
+                .prepare(`SELECT rowid, * FROM medicamentos WHERE ${whereClause} LIMIT ? OFFSET ?`)
+                .all(count, offset);
+        }
+        else {
+            rows = this.db
+                .prepare(`SELECT rowid, * FROM medicamentos WHERE ${whereClause} LIMIT ? OFFSET ?`)
+                .all(count, offset);
+        }
+        return Promise.resolve(rows.map(rowToResumo));
+    }
+    getDetalhes(numProcesso) {
+        const row = (this.db
+            .prepare(`SELECT rowid, * FROM medicamentos
+         WHERE numero_processo = ? OR numero_registro = ?
+         LIMIT 1`)
+            .get(numProcesso, numProcesso) ?? null);
+        if (!row) {
+            return Promise.reject(new Error(`Medicamento não encontrado para numProcesso: ${numProcesso}`));
+        }
+        return Promise.resolve(rowToDetalhes(row));
+    }
+    getApresentacoes(numProcesso) {
+        // O CSV de dados abertos não contém apresentações detalhadas.
+        // Retornamos a categoria regulatória como informação disponível.
+        const row = (this.db
+            .prepare(`SELECT rowid, * FROM medicamentos
+         WHERE numero_processo = ? OR numero_registro = ?
+         LIMIT 1`)
+            .get(numProcesso, numProcesso) ?? null);
+        if (!row)
+            return Promise.resolve([]);
+        const apresentacoes = [];
+        if (row.categoria_regulatoria) {
+            apresentacoes.push({
+                descricao: `Categoria: ${row.categoria_regulatoria}`,
+            });
+        }
+        if (row.situacao_registro) {
+            apresentacoes.push({
+                descricao: `Situação: ${row.situacao_registro}`,
+            });
+        }
+        if (row.principio_ativo) {
+            apresentacoes.push({
+                descricao: `Princípio Ativo: ${row.principio_ativo}`,
+            });
+        }
+        return Promise.resolve(apresentacoes);
+    }
+    getBulaLink(_idBulaProtegido) {
+        // Não disponível no CSV de dados abertos (v2.0 — texto completo em v2.1 via Worker)
+        return Promise.resolve({ id: _idBulaProtegido });
+    }
+    close() {
+        this.db.close();
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=dataset.js.map

package/dist/db/dataset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset.js","sourceRoot":"","sources":["../../src/db/dataset.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AA+BtC,iFAAiF;AAEjF,uFAAuF;AACvF,qFAAqF;AACrF,kFAAkF;AAClF,oFAAoF;AACpF,MAAM,cAAc,GAA6C;IAC/D,EAAE,OAAO,EAAE,gDAAgD,EAAE,KAAK,EAAE,OAAO,EAAE;IAC7E,EAAE,OAAO,EAAE,2CAA2C,EAAE,KAAK,EAAE,UAAU,EAAE;IAC3E,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE;CACnD,CAAC;AAEF,SAAS,UAAU,CAAC,GAAmB;IACrC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,cAAc,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5E,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB;IACxC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5E,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;QAClD,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;QACtB,mBAAmB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QAClF,cAAc,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;QAChD,cAAc,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;KACjD,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,6BAA6B,CAAC;IAC7B,EAAE,CAAoB;IAEvC,YAAY,MAAc;QACxB,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IAED,YAAY,CAAC,MAA0B;QACrC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC;QAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;0BAEkB,CACnB;aACA,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAqB,CAAC;QAEhD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,sBAAsB,CAAC,MAAoC;QACzD,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,cAAc,GAAG,CAAC;QAEnC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;0BAEkB,CACnB;aACA,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAqB,CAAC;QAEhD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,yBAAyB,CAAC,MAAuC;QAC/D,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QAC7D,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,iBAAiB,GAAG,CAAC;QAEtC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;0BAEkB,CACnB;aACA,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAqB,CAAC;QAEhD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,aAAa,CAAC,MAA2B;QACvC,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QAEpC,iDAAiD;QACjD,IAAI,WAAmB,CAAC;QACxB,IAAI,UAAkB,CAAC;QACvB,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,WAAW;gBACT,8DAA8D;oBAC9D,oFAAoF;oBACpF,gDAAgD,CAAC;YACnD,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,WAAW;gBACT,oFAAoF;oBACpF,4EAA4E;oBAC5E,+CAA+C,CAAC;YAClD,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,sBAAsB;YACtB,WAAW;gBACT,qFAAqF,CAAC;YACxF,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;QAED,IAAI,IAAsB,CAAC;QAC3B,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9C,IAAI,GAAG,IAAI,CAAC,EAAE;iBACX,OAAO,CAAC,2CAA2C,WAAW,mBAAmB,CAAC;iBAClF,GAAG,CAAC,KAAK,EAAE,MAAM,CAAqB,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,EAAE;iBACX,OAAO,CAAC,2CAA2C,WAAW,mBAAmB,CAAC;iBAClF,GAAG,CAAC,KAAK,EAAE,MAAM,CAAqB,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;iBAES,CACV;aACA,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,CAA0B,CAAC;QAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,gDAAgD,WAAW,EAAE,CAAC,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,8DAA8D;QAC9D,iEAAiE;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;iBAES,CACV;aACA,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,CAA0B,CAAC;QAEnE,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAErC,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC9B,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,cAAc,GAAG,CAAC,qBAAqB,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,aAAa,GAAG,CAAC,iBAAiB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,oBAAoB,GAAG,CAAC,eAAe,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,WAAW,CAAC,gBAAwB;QAClC,oFAAoF;QACpF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/db/schema.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Schema SQLite para o dataset ANVISA Dados Abertos — Medicamentos
+ * Fonte: https://dados.anvisa.gov.br/dados/DADOS_ABERTOS_MEDICAMENTOS.csv
+ * Colunas CSV (separador `;`, encoding Latin1/ISO-8859-1):
+ *   TIPO_PRODUTO; NOME_PRODUTO; DATA_FINALIZACAO_PROCESSO; CATEGORIA_REGULATORIA;
+ *   NUMERO_REGISTRO_PRODUTO; DATA_VENCIMENTO_REGISTRO; NUMERO_PROCESSO;
+ *   CLASSE_TERAPEUTICA; EMPRESA_DETENTORA_REGISTRO; SITUACAO_REGISTRO; PRINCIPIO_ATIVO
+ */
+export declare const SCHEMA_SQL = "\nPRAGMA journal_mode=WAL;\n\nCREATE TABLE IF NOT EXISTS medicamentos (\n  rowid              INTEGER PRIMARY KEY AUTOINCREMENT,\n  tipo_produto       TEXT,\n  nome_produto       TEXT NOT NULL,\n  data_finalizacao   TEXT,\n  categoria_regulatoria TEXT,\n  numero_registro    TEXT,\n  data_vencimento    TEXT,\n  numero_processo    TEXT,\n  classe_terapeutica TEXT,\n  empresa            TEXT,\n  situacao_registro  TEXT,\n  principio_ativo    TEXT\n);\n\nCREATE INDEX IF NOT EXISTS idx_nome          ON medicamentos(nome_produto COLLATE NOCASE);\nCREATE INDEX IF NOT EXISTS idx_principio     ON medicamentos(principio_ativo COLLATE NOCASE);\nCREATE INDEX IF NOT EXISTS idx_classe        ON medicamentos(classe_terapeutica COLLATE NOCASE);\nCREATE INDEX IF NOT EXISTS idx_empresa       ON medicamentos(empresa COLLATE NOCASE);\nCREATE INDEX IF NOT EXISTS idx_num_processo  ON medicamentos(numero_processo);\nCREATE INDEX IF NOT EXISTS idx_situacao      ON medicamentos(situacao_registro);\n\nCREATE VIRTUAL TABLE IF NOT EXISTS medicamentos_fts USING fts5(\n  nome_produto,\n  principio_ativo,\n  classe_terapeutica,\n  content='medicamentos',\n  content_rowid='rowid'\n);\n\nCREATE TABLE IF NOT EXISTS dataset_meta (\n  key   TEXT PRIMARY KEY,\n  value TEXT NOT NULL\n);\n";
+export declare const SCHEMA_VERSION = "2";
+//# sourceMappingURL=schema.d.ts.map

package/dist/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,UAAU,4vCAqCtB,CAAC;AAEF,eAAO,MAAM,cAAc,MAAM,CAAC"}

package/dist/db/schema.js

@@ -0,0 +1,48 @@
+/**
+ * Schema SQLite para o dataset ANVISA Dados Abertos — Medicamentos
+ * Fonte: https://dados.anvisa.gov.br/dados/DADOS_ABERTOS_MEDICAMENTOS.csv
+ * Colunas CSV (separador `;`, encoding Latin1/ISO-8859-1):
+ *   TIPO_PRODUTO; NOME_PRODUTO; DATA_FINALIZACAO_PROCESSO; CATEGORIA_REGULATORIA;
+ *   NUMERO_REGISTRO_PRODUTO; DATA_VENCIMENTO_REGISTRO; NUMERO_PROCESSO;
+ *   CLASSE_TERAPEUTICA; EMPRESA_DETENTORA_REGISTRO; SITUACAO_REGISTRO; PRINCIPIO_ATIVO
+ */
+export const SCHEMA_SQL = `
+PRAGMA journal_mode=WAL;
+
+CREATE TABLE IF NOT EXISTS medicamentos (
+  rowid              INTEGER PRIMARY KEY AUTOINCREMENT,
+  tipo_produto       TEXT,
+  nome_produto       TEXT NOT NULL,
+  data_finalizacao   TEXT,
+  categoria_regulatoria TEXT,
+  numero_registro    TEXT,
+  data_vencimento    TEXT,
+  numero_processo    TEXT,
+  classe_terapeutica TEXT,
+  empresa            TEXT,
+  situacao_registro  TEXT,
+  principio_ativo    TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_nome          ON medicamentos(nome_produto COLLATE NOCASE);
+CREATE INDEX IF NOT EXISTS idx_principio     ON medicamentos(principio_ativo COLLATE NOCASE);
+CREATE INDEX IF NOT EXISTS idx_classe        ON medicamentos(classe_terapeutica COLLATE NOCASE);
+CREATE INDEX IF NOT EXISTS idx_empresa       ON medicamentos(empresa COLLATE NOCASE);
+CREATE INDEX IF NOT EXISTS idx_num_processo  ON medicamentos(numero_processo);
+CREATE INDEX IF NOT EXISTS idx_situacao      ON medicamentos(situacao_registro);
+
+CREATE VIRTUAL TABLE IF NOT EXISTS medicamentos_fts USING fts5(
+  nome_produto,
+  principio_ativo,
+  classe_terapeutica,
+  content='medicamentos',
+  content_rowid='rowid'
+);
+
+CREATE TABLE IF NOT EXISTS dataset_meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+);
+`;
+export const SCHEMA_VERSION = "2";
+//# sourceMappingURL=schema.js.map

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCzB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC"}

package/dist/domain/repository.d.ts

@@ -1,4 +1,3 @@
-import type { CacheStore } from "../cache/types.js";
 import type { Apresentacao, BulaLink, BularioSource, MedicamentoDetalhes, MedicamentoResumo, SearchByClasseTerapeuticaParams, SearchByNameParams, SearchByPrincipalAtivoParams, SearchByTarjaParams } from "../sources/types.js";
 export type Meta = {
     data_da_base: string;
@@ -30,11 +29,19 @@ export interface IBularioRepository {
     getApresentacoes(numProcesso: string): Promise<ResponseWithMeta<Apresentacao[]>>;
     getBulaLink(idBulaProtegido: string): Promise<ResponseWithMeta<BulaLink>>;
 }
+/**
+ * BularioRepository v2.0
+ *
+ * Accesses the ANVISA dataset directly via BularioDatasetSource (SQLite).
+ * The old multi-source + cache pattern is replaced by a single SQLite source.
+ * _meta.modo is always "cache_local" (data is pre-synced locally).
+ */
 export declare class BularioRepository implements IBularioRepository {
-    private readonly cache;
-    private readonly sources;
+    private readonly source;
     private readonly degradedThresholdDays;
-    constructor(cache: CacheStore, sources: BularioSource[], degradedThresholdDays?: number);
+    private readonly dataBase;
+    constructor(source: BularioSource, degradedThresholdDays?: number);
+    private buildResponse;
     searchByName(params: SearchByNameParams): Promise<ResponseWithMeta<MedicamentoResumo[]>>;
     searchByPrincipalAtivo(params: SearchByPrincipalAtivoParams): Promise<ResponseWithMeta<MedicamentoResumo[]>>;
     searchByClasseTerapeutica(params: SearchByClasseTerapeuticaParams): Promise<ResponseWithMeta<MedicamentoResumo[]>>;
@@ -42,6 +49,5 @@ export declare class BularioRepository implements IBularioRepository {
     getDetalhes(numProcesso: string): Promise<ResponseWithMeta<MedicamentoDetalhes>>;
     getApresentacoes(numProcesso: string): Promise<ResponseWithMeta<Apresentacao[]>>;
     getBulaLink(idBulaProtegido: string): Promise<ResponseWithMeta<BulaLink>>;
-    private _withCache;
 }
 //# sourceMappingURL=repository.d.ts.map