autoremediator 0.15.0 → 0.17.0

package/dist/api/change-request/index.d.ts

@@ -0,0 +1,7 @@
+import type { ChangeRequestOptions, ChangeRequestResult, RemediationReport } from "../../platform/types.js";
+export declare function createChangeRequestsForReports(params: {
+    cwd: string;
+    options: ChangeRequestOptions;
+    reports: RemediationReport[];
+}): Promise<ChangeRequestResult[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/change-request/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAgJjC,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmGjC"}

package/dist/api/change-request/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/api/change-request/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.test.ts"],"names":[],"mappings":""}

package/dist/api/context.d.ts

@@ -0,0 +1,5 @@
+import type { CorrelationContext, ProvenanceContext, RemediateOptions, RemediationConstraints } from "../platform/types.js";
+export declare function resolveCorrelationContext(options: RemediateOptions): Required<Pick<CorrelationContext, "requestId">> & CorrelationContext;
+export declare function resolveProvenanceContext(options: RemediateOptions): ProvenanceContext;
+export declare function resolveConstraints(options: RemediateOptions, cwd: string): RemediationConstraints;
+//# sourceMappingURL=context.d.ts.map

package/dist/api/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAO9B,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,GACxB,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,GAAG,kBAAkB,CAMtE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAKrF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,sBAAsB,CAiBjG"}

package/dist/api/contracts.d.ts

@@ -0,0 +1,82 @@
+import type { ChangeRequestResult, CorrelationContext, DependencyScopeCounts, DispositionCounts, EscalationCounts, PatchStrategyCounts, ProvenanceContext, RemediationConstraints, RemediateOptions, RemediationReport, SimulationSummary, SlaBreach, SlaBreachSummary, UnresolvedReasonCounts } from "../platform/types.js";
+import type { ScanInputFormat } from "../scanner/index.js";
+export interface ScanOptions extends RemediateOptions {
+    format?: ScanInputFormat;
+    policy?: string;
+    audit?: boolean;
+}
+export interface ScanReport {
+    schemaVersion: "1.0";
+    status: "ok" | "partial" | "failed";
+    generatedAt: string;
+    cveIds: string[];
+    reports: RemediationReport[];
+    successCount: number;
+    failedCount: number;
+    errors: Array<{
+        cveId: string;
+        message: string;
+    }>;
+    evidenceFile?: string;
+    patchCount: number;
+    patchValidationFailures?: Array<{
+        packageName: string;
+        cveId: string;
+        error: string;
+    }>;
+    strategyCounts?: PatchStrategyCounts;
+    dependencyScopeCounts?: DependencyScopeCounts;
+    unresolvedByReason?: UnresolvedReasonCounts;
+    escalationCounts?: EscalationCounts;
+    patchesDir?: string;
+    correlation?: CorrelationContext;
+    provenance?: ProvenanceContext;
+    constraints?: RemediationConstraints;
+    idempotencyKey?: string;
+    llmUsageCount?: number;
+    estimatedCostUsd?: number;
+    totalLlmLatencyMs?: number;
+    slaBreaches?: SlaBreach[];
+    slaBreachSummary?: SlaBreachSummary;
+    changeRequests?: ChangeRequestResult[];
+    dispositionCounts?: DispositionCounts;
+    simulationSummary?: SimulationSummary;
+}
+export interface CiSummary {
+    schemaVersion: "1.0";
+    status: "ok" | "partial" | "failed";
+    generatedAt: string;
+    cveCount: number;
+    remediationCount: number;
+    successCount: number;
+    failedCount: number;
+    errors: Array<{
+        cveId: string;
+        message: string;
+    }>;
+    evidenceFile?: string;
+    patchCount?: number;
+    patchValidationFailures?: Array<{
+        packageName: string;
+        cveId: string;
+        error: string;
+    }>;
+    strategyCounts?: PatchStrategyCounts;
+    dependencyScopeCounts?: DependencyScopeCounts;
+    unresolvedByReason?: UnresolvedReasonCounts;
+    escalationCounts?: EscalationCounts;
+    patchesDir?: string;
+    correlation?: CorrelationContext;
+    provenance?: ProvenanceContext;
+    constraints?: RemediationConstraints;
+    idempotencyKey?: string;
+    llmUsageCount?: number;
+    estimatedCostUsd?: number;
+    totalLlmLatencyMs?: number;
+    slaBreaches?: SlaBreach[];
+    slaBreachSummary?: SlaBreachSummary;
+    changeRequests?: ChangeRequestResult[];
+    dispositionCounts?: DispositionCounts;
+    simulationSummary?: SimulationSummary;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/api/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/api/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,WAAY,SAAQ,gBAAgB;IACnD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC"}

package/dist/api/delta-scan/delta-scan.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delta-scan.test.d.ts.map

package/dist/api/delta-scan/delta-scan.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta-scan.test.d.ts","sourceRoot":"","sources":["../../../src/api/delta-scan/delta-scan.test.ts"],"names":[],"mappings":""}

package/dist/api/delta-scan/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: scanDelta
+ */
+export { scanDelta } from "../../scanner/delta-scan.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/delta-scan/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/delta-scan/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/api/evaluate/evaluate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evaluate.test.d.ts.map

package/dist/api/evaluate/evaluate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.test.d.ts","sourceRoot":"","sources":["../../../src/api/evaluate/evaluate.test.ts"],"names":[],"mappings":""}

package/dist/api/evaluate/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: evaluatePackage
+ */
+export { evaluatePackage } from "../../remediation/evaluate-package.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/evaluate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/evaluate/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * autoremediator public SDK
+ *
+ * Usage:
+ *   import { remediate } from 'autoremediator';
+ *   const report = await remediate('CVE-2021-23337', { cwd: '/my/project' });
+ */
+export type { CorrelationContext, CveSeverity, LlmUsageMetrics, ModelPersonality, RemediationConstraints, ProvenanceContext, ProgressEvent, ProviderSafetyProfile, RemediateOptions, RemediationReport, ResultSimulation, CveDetails, AffectedPackage, InventoryPackage, VulnerablePackage, PatchResult, PatchStrategy, PatchStrategyCounts, DependencyScope, DependencyScopeCounts, PatchArtifact, PatchArtifactInspection, PatchArtifactQueryOptions, PatchArtifactSummary, PatchArtifactValidationReport, PatchMode, PatchRiskLevel, PatchConfidenceThresholds, UnresolvedReason, UnresolvedReasonCounts, EscalationAction, EscalationGraph, EscalationCounts, Disposition, DispositionPolicy, DispositionSignals, DispositionCounts, PatchValidationPhase, PatchValidationPhaseName, PortfolioReport, PortfolioTarget, PortfolioTargetResult, OutdatedPackage, UpdateOutdatedOptions, UpdateOutdatedReport, ExploitSignalOverridePolicy, VexJustification, VexSuppression, SlaPolicy, SlaBreach, SlaBreachEntry, SlaBreachSummary, ReachabilityAssessment, ReachabilityEvidence, SbomEntry, SbomStatus, SimulationMutation, SimulationMutationTarget, SimulationRebuttalCode, SimulationRebuttalFinding, SimulationSummary, CheckReachabilityOptions, EvaluatePackageOptions, PackageEvaluationReport, VulnerabilityEvaluationEntry, DeltaDependencyChange, DeltaFinding, DeltaScanOptions, DeltaScanReport, } from "../platform/types.js";
+export type { ScanInputFormat } from "../scanner/index.js";
+export type { ScanOptions, ScanReport, CiSummary } from "./contracts.js";
+export { PACKAGE_MANAGER_VALUES, LLM_PROVIDER_VALUES, PROVENANCE_SOURCE_VALUES, OPTION_DESCRIPTIONS, createConstraintSchemaProperties, createRemediateOptionSchemaProperties, createScanOptionSchemaProperties, createScanReportSchemaProperties, createUpdateOutdatedOptionSchemaProperties, } from "./options-schema.js";
+export { toCiSummary, ciExitCode, buildSlaBreachSummary, buildStrategyCounts, buildDependencyScopeCounts, } from "./reporting.js";
+export { toSarifOutput, type SarifOutput } from "./sarif.js";
+export { toCycloneDxVex, type CycloneDxVexDocument, type CycloneDxVexVulnerability, type CycloneDxVexVulnerabilityAnalysis, type ToCycloneDxVexOptions, } from "./vex/index.js";
+export { inspectPatchArtifact, listPatchArtifacts, validatePatchArtifact, } from "./patches/index.js";
+export { remediatePortfolio } from "./portfolio/index.js";
+export { remediate, planRemediation } from "./remediate/index.js";
+export { remediateFromScan } from "./remediate-from-scan/index.js";
+export { updateOutdated } from "./update-outdated/index.js";
+export { checkReachability } from "./reachability/index.js";
+export { evaluatePackage } from "./evaluate/index.js";
+export { scanDelta } from "./delta-scan/index.js";
+export { submitRemediateJob, submitScanJob, submitPortfolioJob, pollJob, type JobHandle, type AsyncRemediationJob, type TypedAsyncRemediationJob, } from "./jobs/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,6BAA6B,EAC7B,SAAS,EACT,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,qCAAqC,EACrC,gCAAgC,EAChC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EACtC,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC"}

package/dist/api/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/api/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/api/index.test.ts"],"names":[],"mappings":""}

package/dist/api/jobs/index.d.ts

@@ -0,0 +1,12 @@
+import type { AsyncRemediationJob, JobHandle } from "../../platform/jobs.js";
+import type { RemediateOptions, PortfolioTarget, RemediationReport, PortfolioReport } from "../../platform/types.js";
+import type { ScanReport, ScanOptions } from "../contracts.js";
+export type { JobHandle, AsyncRemediationJob } from "../../platform/jobs.js";
+export type TypedAsyncRemediationJob = Omit<AsyncRemediationJob, "result"> & {
+    result?: RemediationReport | ScanReport | PortfolioReport;
+};
+export declare function submitRemediateJob(cveId: string, options?: RemediateOptions): JobHandle;
+export declare function submitScanJob(inputPath: string, options?: ScanOptions): JobHandle;
+export declare function submitPortfolioJob(targets: PortfolioTarget[], options?: RemediateOptions): JobHandle;
+export declare function pollJob(jobId: string): TypedAsyncRemediationJob;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/jobs/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK/D,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG;IAC3E,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,eAAe,CAAC;CAC3D,CAAC;AA4BF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAIvF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAIjF;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EAAE,EAC1B,OAAO,CAAC,EAAE,gBAAgB,GACzB,SAAS,CAIX;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAM/D"}

package/dist/api/jobs/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/api/jobs/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/api/jobs/index.test.ts"],"names":[],"mappings":""}

package/dist/api/options-schema.d.ts

@@ -0,0 +1,80 @@
+export type JsonSchemaProperty = Record<string, unknown>;
+export declare const PACKAGE_MANAGER_VALUES: readonly ["npm", "pnpm", "yarn", "bun", "deno"];
+export declare const LLM_PROVIDER_VALUES: readonly ["remote", "local"];
+export declare const PROVENANCE_SOURCE_VALUES: readonly ["cli", "sdk", "mcp", "openapi", "unknown"];
+export declare const OPTION_DESCRIPTIONS: {
+    readonly cveId: "CVE ID, e.g. CVE-2021-23337";
+    readonly inputPath: "Absolute path to the scanner output file";
+    readonly cwd: "Absolute path to the project root (default: process.cwd())";
+    readonly packageManager: "Package manager override (auto-detected by default)";
+    readonly dryRun: "If true, plan changes but write nothing";
+    readonly preview: "If true, enforce non-mutating preview mode";
+    readonly simulationMode: "If true, attach deterministic simulation and rebuttal metadata for dry-run or preview execution";
+    readonly runTests: "Run package-manager test command after applying fix";
+    readonly llmProvider: "LLM provider override (remote|local)";
+    readonly model: "LLM model override";
+    readonly modelPersonality: "Prompt behavior profile: analytical|pragmatic|balanced";
+    readonly providerSafetyProfile: "Safety posture profile for confidence gates: strict|relaxed";
+    readonly requireConsensusForHighRisk: "Require second-provider agreement for high-risk generated patches";
+    readonly consensusProvider: "Provider override for high-risk consensus verification (remote|local)";
+    readonly consensusModel: "Model override for high-risk consensus verification";
+    readonly patchConfidenceThresholdLow: "Patch acceptance confidence threshold for low-risk patches (0..1)";
+    readonly patchConfidenceThresholdMedium: "Patch acceptance confidence threshold for medium-risk patches (0..1)";
+    readonly patchConfidenceThresholdHigh: "Patch acceptance confidence threshold for high-risk patches (0..1)";
+    readonly dynamicModelRouting: "Enable dynamic model selection by input size";
+    readonly dynamicRoutingThresholdChars: "Input size threshold used by dynamic model routing";
+    readonly patchesDir: "Directory to write .patch files (default: ./patches)";
+    readonly policy: "Optional path to .github/autoremediator.yml policy file";
+    readonly requestId: "Request correlation ID";
+    readonly sessionId: "Session correlation ID";
+    readonly parentRunId: "Parent run correlation ID";
+    readonly idempotencyKey: "Idempotency key for replay-safe execution";
+    readonly resume: "Return cached result for matching idempotency key when available";
+    readonly actor: "Actor identity for evidence provenance";
+    readonly source: "Source system for provenance";
+    readonly format: "Scanner format (default: auto)";
+    readonly audit: "Run package-manager-native audit command instead of reading a scan file";
+    readonly evidence: "Write evidence JSON to .autoremediator/evidence/ (default: true)";
+    readonly directDependenciesOnly: "Restrict remediation to direct dependencies only";
+    readonly preferVersionBump: "Reject override and patch remediation when version-bump-only policy is required";
+    readonly installMode: "Install behavior profile: deterministic|prefer-offline|standard";
+    readonly installPreferOffline: "Override prefer-offline flag behavior for install commands";
+    readonly enforceFrozenLockfile: "Override frozen lockfile behavior for install commands";
+    readonly workspace: "Workspace/package selector for scoped remediation in monorepos";
+    readonly createChangeRequest: "Enable creation of native pull request / merge request after remediation";
+    readonly changeRequestProvider: "Change request provider (github|gitlab)";
+    readonly changeRequestGrouping: "Grouping strategy for change requests (all|per-cve|per-package)";
+    readonly changeRequestRepository: "Repository slug override for change request creation";
+    readonly changeRequestBaseBranch: "Base branch used for change request targeting";
+    readonly changeRequestBranchPrefix: "Branch prefix for generated change request branches";
+    readonly changeRequestTitlePrefix: "Title prefix for generated change requests";
+    readonly includeTransitive: "Include transitive dependencies in the outdated check. Default: false.";
+    readonly updateOutdated: "Run in update-outdated mode: bump all outdated npm packages without requiring a CVE.";
+    readonly kevMandatory: "If true, CVEs with active CISA KEV status bypass severity filtering and are treated as mandatory";
+    readonly epssThreshold: "EPSS probability threshold (0..1) above which a CVE is treated as mandatory regardless of severity";
+    readonly suppressionsFile: "Path to a YAML file containing additional VEX suppression entries to merge with policy-inline suppressions";
+    readonly slaCheck: "Compare CVE publication dates against configured SLA windows and include breach records in the report output";
+    readonly skipUnreachable: "Skip remediation for CVEs where the vulnerable package cannot be reached from any project entry point (requires static import analysis)";
+    readonly regressionCheck: "After applying a fix, verify the patched version falls outside the CVE's vulnerable range and flag any regression in the report";
+    readonly dispositionPolicy: "Autonomous disposition policy controlling when fixes are auto-applied, held, or escalated";
+    readonly dispositionPolicyMinConfidenceForAutoApply: "Minimum patch confidence (0–1) required for auto-apply disposition";
+    readonly dispositionPolicyHoldForTransitive: "Hold transitive dependency fixes for human review instead of auto-applying";
+    readonly dispositionPolicyEscalateOnSlaBreachSeverities: "CVE severities that trigger escalate disposition on SLA breach";
+    readonly dispositionPolicyEscalateOnKev: "Escalate disposition for CVEs with active CISA KEV status";
+    readonly containmentMode: "Block escalation-disposition results from being applied and record containment in evidence";
+    readonly campaignMode: "Enable portfolio campaign mode to risk-rank targets before execution";
+    readonly escalationGraph: "Optional mapping from unresolved reasons to intended escalation actions";
+    readonly offlineIntelligence: "Skip all network calls to intelligence sources. Only local inventory and npm-registry version resolution proceed.";
+    readonly intelligenceSnapshotPath: "Path to a local JSON snapshot of pre-fetched CVE intelligence (keyed by CVE ID) used when offline mode is active.";
+};
+export declare function createConstraintSchemaProperties(): Record<string, JsonSchemaProperty>;
+export declare function createRemediateOptionSchemaProperties(options?: {
+    includeDryRun?: boolean;
+    includePreview?: boolean;
+    includeSimulationMode?: boolean;
+    includeEvidence?: boolean;
+}): Record<string, JsonSchemaProperty>;
+export declare function createScanOptionSchemaProperties(): Record<string, JsonSchemaProperty>;
+export declare function createScanReportSchemaProperties(): Record<string, JsonSchemaProperty>;
+export declare function createUpdateOutdatedOptionSchemaProperties(): Record<string, JsonSchemaProperty>;
+//# sourceMappingURL=options-schema.d.ts.map

package/dist/api/options-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options-schema.d.ts","sourceRoot":"","sources":["../../src/api/options-schema.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,eAAO,MAAM,sBAAsB,YAAI,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACtF,eAAO,MAAM,mBAAmB,YAAI,QAAQ,EAAE,OAAO,CAAU,CAAC;AAChE,eAAO,MAAM,wBAAwB,YAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE7F,eAAO,MAAM,mBAAmB;aAC9B,KAAK,EAAE,6BAA6B;aACpC,SAAS,EAAE,0CAA0C;aACrD,GAAG,EAAE,4DAA4D;aACjE,cAAc,EAAE,qDAAqD;aACrE,MAAM,EAAE,yCAAyC;aACjD,OAAO,EAAE,4CAA4C;aACrD,cAAc,EACZ,iGAAiG;aACnG,QAAQ,EAAE,qDAAqD;aAC/D,WAAW,EAAE,sCAAsC;aACnD,KAAK,EAAE,oBAAoB;aAC3B,gBAAgB,EAAE,wDAAwD;aAC1E,qBAAqB,EAAE,6DAA6D;aACpF,2BAA2B,EAAE,mEAAmE;aAChG,iBAAiB,EAAE,uEAAuE;aAC1F,cAAc,EAAE,qDAAqD;aACrE,2BAA2B,EAAE,mEAAmE;aAChG,8BAA8B,EAC5B,sEAAsE;aACxE,4BAA4B,EAC1B,oEAAoE;aACtE,mBAAmB,EAAE,8CAA8C;aACnE,4BAA4B,EAAE,oDAAoD;aAClF,UAAU,EAAE,sDAAsD;aAClE,MAAM,EAAE,yDAAyD;aACjE,SAAS,EAAE,wBAAwB;aACnC,SAAS,EAAE,wBAAwB;aACnC,WAAW,EAAE,2BAA2B;aACxC,cAAc,EAAE,2CAA2C;aAC3D,MAAM,EAAE,kEAAkE;aAC1E,KAAK,EAAE,wCAAwC;aAC/C,MAAM,EAAE,8BAA8B;aACtC,MAAM,EAAE,gCAAgC;aACxC,KAAK,EAAE,yEAAyE;aAChF,QAAQ,EAAE,kEAAkE;aAC5E,sBAAsB,EAAE,kDAAkD;aAC1E,iBAAiB,EACf,iFAAiF;aACnF,WAAW,EAAE,iEAAiE;aAC9E,oBAAoB,EAAE,4DAA4D;aAClF,qBAAqB,EAAE,wDAAwD;aAC/E,SAAS,EAAE,gEAAgE;aAC3E,mBAAmB,EAAE,0EAA0E;aAC/F,qBAAqB,EAAE,yCAAyC;aAChE,qBAAqB,EAAE,iEAAiE;aACxF,uBAAuB,EAAE,sDAAsD;aAC/E,uBAAuB,EAAE,+CAA+C;aACxE,yBAAyB,EAAE,qDAAqD;aAChF,wBAAwB,EAAE,4CAA4C;aACtE,iBAAiB,EAAE,wEAAwE;aAC3F,cAAc,EACZ,sFAAsF;aACxF,YAAY,EACV,kGAAkG;aACpG,aAAa,EACX,oGAAoG;aACtG,gBAAgB,EACd,4GAA4G;aAC9G,QAAQ,EACN,8GAA8G;aAChH,eAAe,EACb,yIAAyI;aAC3I,eAAe,EACb,iIAAiI;aACnI,iBAAiB,EACf,2FAA2F;aAC7F,0CAA0C,EACxC,oEAAoE;aACtE,kCAAkC,EAChC,4EAA4E;aAC9E,8CAA8C,EAC5C,gEAAgE;aAClE,8BAA8B,EAAE,2DAA2D;aAC3F,eAAe,EACb,4FAA4F;aAC9F,YAAY,EAAE,sEAAsE;aACpF,eAAe,EAAE,yEAAyE;aAC1F,mBAAmB,EACjB,mHAAmH;aACrH,wBAAwB,EACtB,mHAAmH;CAC7G,CAAC;AAEX,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAsBrF;AAED,wBAAgB,qCAAqC,CAAC,OAAO,CAAC,EAAE;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA2OrC;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAWrF;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAwCrF;AAED,wBAAgB,0CAA0C,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAQ/F"}

package/dist/api/patches/helpers.d.ts

@@ -0,0 +1,11 @@
+import type { PatchArtifact, PatchArtifactInspection, PatchArtifactSummary } from "../../platform/types.js";
+export declare const DEFAULT_PATCHES_DIR = "./patches";
+export declare function resolvePatchesDir(cwd: string, patchesDir?: string): string;
+export declare function resolveArtifactPath(cwd: string, patchFilePath: string): string;
+export declare function readManifest(manifestFilePath: string): Promise<PatchArtifact | undefined>;
+export declare function derivePatchMetadata(patchContent: string): {
+    files: string[];
+    hunkCount: number;
+};
+export declare function toSummary(inspection: PatchArtifactInspection): PatchArtifactSummary;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/api/patches/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/api/patches/helpers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,SAAsB,GAAG,MAAM,CAEvF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA0B/F;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAYhG;AAED,wBAAgB,SAAS,CAAC,UAAU,EAAE,uBAAuB,GAAG,oBAAoB,CAgBnF"}

package/dist/api/patches/index.d.ts

@@ -0,0 +1,3 @@
+export { listPatchArtifacts, inspectPatchArtifact } from "./inspection.js";
+export { validatePatchArtifact } from "./validation.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/patches/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/patches/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/api/patches/inspection.d.ts

@@ -0,0 +1,4 @@
+import type { PatchArtifactInspection, PatchArtifactQueryOptions, PatchArtifactSummary } from "../../platform/types.js";
+export declare function listPatchArtifacts(options?: PatchArtifactQueryOptions): Promise<PatchArtifactSummary[]>;
+export declare function inspectPatchArtifact(patchFilePath: string, options?: PatchArtifactQueryOptions): Promise<PatchArtifactInspection>;
+//# sourceMappingURL=inspection.d.ts.map

package/dist/api/patches/inspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspection.d.ts","sourceRoot":"","sources":["../../../src/api/patches/inspection.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAUjC,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAsBjC;AAED,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,CAAC,CA8ClC"}

package/dist/api/patches/validation.d.ts

@@ -0,0 +1,3 @@
+import type { PatchArtifactQueryOptions, PatchArtifactValidationReport } from "../../platform/types.js";
+export declare function validatePatchArtifact(patchFilePath: string, options?: PatchArtifactQueryOptions): Promise<PatchArtifactValidationReport>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/api/patches/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/api/patches/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,6BAA6B,EAE9B,MAAM,yBAAyB,CAAC;AAKjC,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,6BAA6B,CAAC,CAwHxC"}

package/dist/api/patches.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=patches.test.d.ts.map

package/dist/api/patches.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patches.test.d.ts","sourceRoot":"","sources":["../../src/api/patches.test.ts"],"names":[],"mappings":""}

package/dist/api/portfolio/index.d.ts

@@ -0,0 +1,3 @@
+import type { PortfolioReport, PortfolioTarget, RemediateOptions } from "../../platform/types.js";
+export declare function remediatePortfolio(targets: PortfolioTarget[], options?: RemediateOptions): Promise<PortfolioReport>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/portfolio/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/portfolio/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEf,gBAAgB,EAEjB,MAAM,yBAAyB,CAAC;AAyCjC,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,eAAe,EAAE,EAC1B,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CA4G1B"}

package/dist/api/portfolio/portfolio.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=portfolio.test.d.ts.map

package/dist/api/portfolio/portfolio.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolio.test.d.ts","sourceRoot":"","sources":["../../../src/api/portfolio/portfolio.test.ts"],"names":[],"mappings":""}

package/dist/api/portfolio/risk-score.d.ts

@@ -0,0 +1,7 @@
+import type { PortfolioTarget } from "../../platform/types.js";
+export declare function scorePortfolioTarget(target: PortfolioTarget): number;
+export declare function rankPortfolioTargets(targets: PortfolioTarget[]): Array<{
+    target: PortfolioTarget;
+    rank: number;
+}>;
+//# sourceMappingURL=risk-score.d.ts.map

package/dist/api/portfolio/risk-score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-score.d.ts","sourceRoot":"","sources":["../../../src/api/portfolio/risk-score.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAU/D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAOpE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EAAE,GACzB,KAAK,CAAC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBlD"}

package/dist/api/portfolio/risk-score.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=risk-score.test.d.ts.map

package/dist/api/portfolio/risk-score.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-score.test.d.ts","sourceRoot":"","sources":["../../../src/api/portfolio/risk-score.test.ts"],"names":[],"mappings":""}

package/dist/api/reachability/index.d.ts

@@ -0,0 +1,3 @@
+import type { CheckReachabilityOptions, ReachabilityAssessment } from "../../platform/types.js";
+export declare function checkReachability(options: CheckReachabilityOptions): Promise<ReachabilityAssessment>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/reachability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEhG,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAGjC"}

package/dist/api/reachability/reachability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=reachability.test.d.ts.map

package/dist/api/reachability/reachability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachability.test.d.ts","sourceRoot":"","sources":["../../../src/api/reachability/reachability.test.ts"],"names":[],"mappings":""}

package/dist/api/remediate/index.d.ts

@@ -0,0 +1,4 @@
+import type { RemediateOptions, RemediationReport } from "../../platform/types.js";
+export declare function remediate(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
+export declare function planRemediation(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/remediate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAoBnF,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAsF5B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}

package/dist/api/remediate/validators.d.ts

@@ -0,0 +1,2 @@
+export declare function assertValidCveId(cveId: string): void;
+//# sourceMappingURL=validators.d.ts.map

package/dist/api/remediate/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/validators.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAMpD"}

package/dist/api/remediate-from-scan/index.d.ts

@@ -0,0 +1,3 @@
+import type { ScanOptions, ScanReport } from "../contracts.js";
+export declare function remediateFromScan(inputPath: string, options?: ScanOptions): Promise<ScanReport>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/remediate-from-scan/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA4B/D,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAmIrB"}

package/dist/api/remediate-from-scan/report-metrics.d.ts

@@ -0,0 +1,8 @@
+import type { RemediationReport } from "../../platform/types.js";
+export interface ScanLlmUsageTotals {
+    llmUsageCount: number;
+    estimatedCostUsd?: number;
+    totalLlmLatencyMs?: number;
+}
+export declare function aggregateScanLlmUsage(reports: RemediationReport[]): ScanLlmUsageTotals;
+//# sourceMappingURL=report-metrics.d.ts.map

package/dist/api/remediate-from-scan/report-metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-metrics.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/report-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAkBtF"}

package/dist/api/remediate.evidence.d.ts

@@ -0,0 +1,33 @@
+import type { RemediateOptions, RemediationReport } from "../platform/types.js";
+import { type EvidenceLog } from "../platform/evidence.js";
+export declare function createRemediateEvidence(params: {
+    cwd: string;
+    cveId: string;
+    options: RemediateOptions;
+    llmProvider: "remote" | "local";
+    correlation: {
+        requestId?: string;
+        sessionId?: string;
+        parentRunId?: string;
+    };
+    provenance: {
+        actor?: string;
+        source?: "cli" | "sdk" | "mcp" | "openapi" | "unknown";
+    };
+}): EvidenceLog | undefined;
+export declare function addRemediateStartStep(params: {
+    evidence: EvidenceLog | undefined;
+    cveId: string;
+    options: RemediateOptions;
+    llmProvider: "remote" | "local";
+    constraints: {
+        directDependenciesOnly?: boolean;
+        preferVersionBump?: boolean;
+    };
+}): void;
+export declare function addRemediateResultSteps(evidence: EvidenceLog | undefined, cveId: string, report: RemediationReport): void;
+export declare function addRemediateDispositionStep(evidence: EvidenceLog | undefined, cveId: string, report: RemediationReport): void;
+export declare function addRemediateErrorStep(evidence: EvidenceLog | undefined, cveId: string, error: unknown): void;
+export declare function addRemediateResumeStep(evidence: EvidenceLog | undefined, cveId: string): void;
+export declare function writeRemediateEvidence(cwd: string, evidence: EvidenceLog | undefined): string | undefined;
+//# sourceMappingURL=remediate.evidence.d.ts.map

package/dist/api/remediate.evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA+DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA0BN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}

package/dist/api/reporting.d.ts

@@ -0,0 +1,15 @@
+import type { DependencyScopeCounts, DispositionCounts, EscalationCounts, RemediateOptions, PatchResult, PatchStrategyCounts, RemediationReport, ResultSimulation, SimulationSummary, SlaBreachSummary, UnresolvedReasonCounts } from "../platform/types.js";
+import type { CiSummary, ScanReport } from "./contracts.js";
+export declare function assertValidSimulationMode(options: Pick<RemediateOptions, "dryRun" | "preview" | "simulationMode">): void;
+export declare function buildResultSimulation(report: RemediationReport, result: PatchResult, options: Pick<RemediateOptions, "dryRun" | "preview" | "runTests" | "simulationMode">): ResultSimulation | undefined;
+export declare function buildSimulationSummary(reports: RemediationReport[]): SimulationSummary | undefined;
+export declare function applySimulationMetadata(report: RemediationReport, options: Pick<RemediateOptions, "dryRun" | "preview" | "runTests" | "simulationMode">): RemediationReport;
+export declare function buildStrategyCounts(reports: RemediationReport[]): PatchStrategyCounts | undefined;
+export declare function buildDependencyScopeCounts(reports: RemediationReport[]): DependencyScopeCounts | undefined;
+export declare function buildUnresolvedReasonCounts(reports: RemediationReport[]): UnresolvedReasonCounts | undefined;
+export declare function buildDispositionCounts(reports: RemediationReport[]): DispositionCounts | undefined;
+export declare function buildEscalationCounts(results: PatchResult[]): EscalationCounts | undefined;
+export declare function buildSlaBreachSummary(reports: RemediationReport[]): SlaBreachSummary | undefined;
+export declare function toCiSummary(report: ScanReport): CiSummary;
+export declare function ciExitCode(summary: CiSummary): number;
+//# sourceMappingURL=reporting.d.ts.map

package/dist/api/reporting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporting.d.ts","sourceRoot":"","sources":["../../src/api/reporting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,iBAAiB,EAEjB,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAKhB,iBAAiB,EAEjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AA4C5D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC,GACvE,IAAI,CAQN;AAyJD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,gBAAgB,GAAG,SAAS,CAiC9B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CA+C/B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,iBAAiB,CAkBnB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,GAAG,SAAS,CAUjG;AAMD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,qBAAqB,GAAG,SAAS,CAsBnC;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,sBAAsB,GAAG,SAAS,CAWpC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CAW/B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAS1F;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAuBhG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAuCzD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAErD"}

package/dist/api/sarif.d.ts

@@ -0,0 +1,51 @@
+import type { ScanReport } from "./contracts.js";
+type SarifLevel = "error" | "warning" | "note" | "none";
+interface SarifRule {
+    id: string;
+    name: string;
+    shortDescription: {
+        text: string;
+    };
+    fullDescription: {
+        text: string;
+    };
+    defaultConfiguration: {
+        level: SarifLevel;
+    };
+    helpUri: string;
+    properties: {
+        severity: string;
+    };
+}
+interface SarifResult {
+    ruleId: string;
+    level: SarifLevel;
+    message: {
+        text: string;
+    };
+    locations: Array<{
+        physicalLocation: {
+            artifactLocation: {
+                uri: string;
+                uriBaseId: string;
+            };
+        };
+    }>;
+}
+export interface SarifOutput {
+    version: "2.1.0";
+    $schema: string;
+    runs: Array<{
+        tool: {
+            driver: {
+                name: string;
+                informationUri: string;
+                rules: SarifRule[];
+            };
+        };
+        results: SarifResult[];
+    }>;
+}
+export declare function toSarifOutput(report: ScanReport): SarifOutput;
+export {};
+//# sourceMappingURL=sarif.d.ts.map

package/dist/api/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/api/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,KAAK,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExD,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,oBAAoB,EAAE;QAAE,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAED,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,SAAS,EAAE,KAAK,CAAC;QACf,gBAAgB,EAAE;YAChB,gBAAgB,EAAE;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CAAC;SACtD,CAAC;KACH,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,KAAK,CAAC;QACV,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC;gBACb,cAAc,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,SAAS,EAAE,CAAC;aACpB,CAAC;SACH,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,CAAC;KACxB,CAAC,CAAC;CACJ;AASD,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CA6D7D"}