securewithtrace 0.21.7 → 0.22.0

package/dist/index.js

@@ -24600,6 +24600,15 @@ var ScanMode2 = external_exports.enum(ScanModeValues2);
 var VulnerabilityIdParamsSchema = OrgIdParamsSchema.extend({
   vulnerabilityId: external_exports.uuid()
 });
+var VulnerabilityLookupIdSchema = external_exports.union([
+  external_exports.uuid(),
+  external_exports.string().regex(/^(?:TRACE-)?0*[1-9]\d*$/i, {
+    message: "vulnerabilityId must be a UUID, a positive integer, or TRACE-<number>"
+  })
+]);
+var VulnerabilityLookupIdParamsSchema = OrgIdParamsSchema.extend({
+  vulnerabilityId: VulnerabilityLookupIdSchema
+});
 var VulnerabilitySourceSchema = external_exports.object({
   branch: external_exports.string().nullable(),
   commitSha: external_exports.string().nullable(),
@@ -24802,9 +24811,10 @@ var vulnerabilityContract = c17.router({
   getVulnerability: {
     method: "GET",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId",
-    pathParams: VulnerabilityIdParamsSchema,
+    pathParams: VulnerabilityLookupIdParamsSchema,
     responses: {
       200: VulnerabilityResponseSchema,
+      400: ErrorResponseSchema,
       401: ErrorResponseSchema,
       403: ErrorResponseSchema,
       404: ErrorResponseSchema,
@@ -24814,7 +24824,7 @@ var vulnerabilityContract = c17.router({
   updateVulnerability: {
     method: "PATCH",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId",
-    pathParams: VulnerabilityIdParamsSchema,
+    pathParams: VulnerabilityLookupIdParamsSchema,
     body: UpdateVulnerabilityRequestSchema,
     responses: {
       200: VulnerabilityResponseSchema,
@@ -24842,7 +24852,7 @@ var vulnerabilityContract = c17.router({
   deleteVulnerability: {
     method: "DELETE",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId",
-    pathParams: VulnerabilityIdParamsSchema,
+    pathParams: VulnerabilityLookupIdParamsSchema,
     responses: {
       204: DeleteResponseSchema,
       401: ErrorResponseSchema,
@@ -24854,7 +24864,7 @@ var vulnerabilityContract = c17.router({
   retestVulnerability: {
     method: "POST",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/retest",
-    pathParams: VulnerabilityIdParamsSchema,
+    pathParams: VulnerabilityLookupIdParamsSchema,
     body: null,
     responses: {
       201: ScanResponseSchema,
@@ -24881,7 +24891,7 @@ var vulnerabilityContract = c17.router({
   getVulnerabilityRetests: {
     method: "GET",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/retests",
-    pathParams: VulnerabilityIdParamsSchema,
+    pathParams: VulnerabilityLookupIdParamsSchema,
     responses: {
       200: ScanArrayResponseSchema,
       401: ErrorResponseSchema,
@@ -24893,10 +24903,10 @@ var vulnerabilityContract = c17.router({
 });
 
 // ../../packages/api-contracts/src/schemas/api/v1/vulnerability-note.api.ts
-var VulnerabilityNoteParamsSchema = OrgIdParamsSchema.extend({
-  vulnerabilityId: external_exports.uuid()
+var VulnerabilityLookupNoteParamsSchema = OrgIdParamsSchema.extend({
+  vulnerabilityId: VulnerabilityLookupIdSchema
 });
-var VulnerabilityNoteIdParamsSchema = VulnerabilityNoteParamsSchema.extend({
+var VulnerabilityLookupNoteIdParamsSchema = VulnerabilityLookupNoteParamsSchema.extend({
   noteId: external_exports.uuid()
 });
 var VulnerabilityNoteResponseSchema = external_exports.object({
@@ -24924,9 +24934,10 @@ var vulnerabilityNoteContract = c18.router({
   listNotes: {
     method: "GET",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/notes",
-    pathParams: VulnerabilityNoteParamsSchema,
+    pathParams: VulnerabilityLookupNoteParamsSchema,
     responses: {
       200: ListVulnerabilityNotesResponseSchema,
+      400: ErrorResponseSchema,
       401: ErrorResponseSchema,
       403: ErrorResponseSchema,
       404: ErrorResponseSchema,
@@ -24936,7 +24947,7 @@ var vulnerabilityNoteContract = c18.router({
   createNote: {
     method: "POST",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/notes",
-    pathParams: VulnerabilityNoteParamsSchema,
+    pathParams: VulnerabilityLookupNoteParamsSchema,
     body: CreateVulnerabilityNoteRequestSchema,
     responses: {
       201: VulnerabilityNoteResponseSchema,
@@ -24950,7 +24961,7 @@ var vulnerabilityNoteContract = c18.router({
   updateNote: {
     method: "PATCH",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/notes/:noteId",
-    pathParams: VulnerabilityNoteIdParamsSchema,
+    pathParams: VulnerabilityLookupNoteIdParamsSchema,
     body: UpdateVulnerabilityNoteRequestSchema,
     responses: {
       200: VulnerabilityNoteResponseSchema,
@@ -24964,9 +24975,10 @@ var vulnerabilityNoteContract = c18.router({
   deleteNote: {
     method: "DELETE",
     path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/notes/:noteId",
-    pathParams: VulnerabilityNoteIdParamsSchema,
+    pathParams: VulnerabilityLookupNoteIdParamsSchema,
     responses: {
       204: DeleteResponseSchema,
+      400: ErrorResponseSchema,
       401: ErrorResponseSchema,
       403: ErrorResponseSchema,
       404: ErrorResponseSchema,
@@ -29119,6 +29131,100 @@ function printVulnerabilitiesTsv(vulnerabilities) {
     console.log(cols.join("	"));
   }
 }
+function printVulnerabilityDetail(vulnerability) {
+  const severity = colorSeverity(vulnerability.severity, formatSeverity(vulnerability.severity));
+  const status = formatStatus(vulnerability.status);
+  const metadata = [
+    `Type: ${vulnerability.vulnerabilityType}`,
+    vulnerability.scanMode ? `Scan mode: ${vulnerability.scanMode}` : null,
+    vulnerability.cweId ? vulnerability.cweId : null
+  ].filter((value) => value !== null);
+  const sourceDetails = [
+    vulnerability.source.branch ? `Branch: ${vulnerability.source.branch}` : null,
+    vulnerability.source.pullRequestNumber !== null ? `PR #${vulnerability.source.pullRequestNumber}${vulnerability.source.pullRequestTitle ? ` (${vulnerability.source.pullRequestTitle})` : ""}` : null
+  ].filter((value) => value !== null);
+  console.log(`  [${severity}] ${vulnerability.traceId} ${vulnerability.title}`);
+  console.log(
+    `         ${vulnerability.repositoryName} \xB7 ${vulnerability.codeSnippet.filePath}:${vulnerability.codeSnippet.startLine} \xB7 ${status}`
+  );
+  if (metadata.length > 0) {
+    console.log(`         ${metadata.join(" | ")}`);
+  }
+  if (sourceDetails.length > 0) {
+    console.log(`         ${sourceDetails.join(" | ")}`);
+  }
+  console.log(`         Vulnerability ID: ${vulnerability.vulnerabilityId}`);
+  console.log("");
+  console.log(vulnerability.description);
+}
+function printVulnerabilityDetailTsv(vulnerability) {
+  console.log(
+    "traceId	vulnerabilityId	severity	status	repository	file	line	cweId	scanMode	title	description"
+  );
+  const cols = [
+    vulnerability.traceId,
+    vulnerability.vulnerabilityId,
+    vulnerability.severity,
+    vulnerability.status,
+    vulnerability.repositoryName,
+    vulnerability.codeSnippet.filePath,
+    String(vulnerability.codeSnippet.startLine),
+    vulnerability.cweId ?? "",
+    vulnerability.scanMode ?? "",
+    vulnerability.title,
+    vulnerability.description
+  ].map(sanitizeTsvField);
+  console.log(cols.join("	"));
+}
+function createGetCommand() {
+  return new Command("get").description("Get a vulnerability by display ID or UUID").argument("<id>", "Vulnerability display ID (e.g. TRACE-123 or 123) or UUID").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
+    "after",
+    `
+Examples:
+  tracecli vulnerabilities get TRACE-123
+  tracecli vulnerabilities get 123
+  tracecli vulnerabilities get 00000000-0000-4000-8000-000000000123
+  tracecli vulnerabilities get TRACE-123 --output json
+  tracecli vulnerabilities get TRACE-123 --output tsv`
+  ).action(async (identifier, options) => {
+    const organizationId = await resolveOrganizationId();
+    const result = await authenticatedRequest(
+      (client) => client.vulnerability.getVulnerability({
+        params: { organizationId, vulnerabilityId: identifier }
+      })
+    );
+    if (result.status === 401) {
+      console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
+      process.exit(1);
+    }
+    if (result.status === 400) {
+      console.error(
+        `Invalid vulnerability identifier '${identifier}'. Use TRACE-<number>, a positive integer, or a UUID.`
+      );
+      process.exit(1);
+    }
+    if (result.status === 404) {
+      console.error(
+        `Vulnerability '${identifier}' not found.
+Run \`tracecli vulnerabilities list\` to see available vulnerabilities.`
+      );
+      process.exit(1);
+    }
+    if (result.status !== 200) {
+      console.error(`Failed to fetch vulnerability (status ${result.status}).`);
+      process.exit(1);
+    }
+    if (options.output === "json") {
+      console.log(JSON.stringify(result.body, null, 2));
+      return;
+    }
+    if (options.output === "tsv") {
+      printVulnerabilityDetailTsv(result.body);
+      return;
+    }
+    printVulnerabilityDetail(result.body);
+  });
+}
 function createListCommand3() {
   return new Command("list").description("List vulnerabilities for your organization").option("--repo <repo>", "Filter by repository name or owner/repo").option(
     "--severity <severity>",
@@ -29246,6 +29352,7 @@ Examples:
 }
 function createVulnerabilitiesCommand() {
   const vulnerabilities = new Command("vulnerabilities").description("Manage vulnerabilities");
+  vulnerabilities.addCommand(createGetCommand());
   vulnerabilities.addCommand(createListCommand3());
   return vulnerabilities;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.21.7",
+  "version": "0.22.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {