autoremediator 0.17.0 → 0.19.0

package/dist/remediation/tools/apply-version-bump.d.ts

@@ -15,6 +15,7 @@ export declare const applyVersionBumpTool: import("./tool-compat.js").Executable
     dryRun: z.ZodDefault<z.ZodBoolean>;
     policy: z.ZodOptional<z.ZodString>;
     runTests: z.ZodDefault<z.ZodBoolean>;
+    typecheck: z.ZodDefault<z.ZodBoolean>;
     installMode: z.ZodOptional<z.ZodEnum<{
         deterministic: "deterministic";
         "prefer-offline": "prefer-offline";
@@ -23,5 +24,6 @@ export declare const applyVersionBumpTool: import("./tool-compat.js").Executable
     installPreferOffline: z.ZodOptional<z.ZodBoolean>;
     enforceFrozenLockfile: z.ZodOptional<z.ZodBoolean>;
     workspace: z.ZodOptional<z.ZodString>;
+    breakingChangeRefactor: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, PatchResult>;
 //# sourceMappingURL=apply-version-bump.d.ts.map

package/dist/remediation/tools/apply-version-bump.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply-version-bump.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/apply-version-bump.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAqB3D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;+BAkO/B,CAAC"}
+{"version":3,"file":"apply-version-bump.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/apply-version-bump.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA2B3D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;+BAiV/B,CAAC"}

package/dist/remediation/tools/check-inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-inventory.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/check-inventory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgBhE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;cAoBL,gBAAgB,EAAE;YAAU,MAAM;EAoE1D,CAAC"}
+{"version":3,"file":"check-inventory.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/check-inventory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAiBhE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;cAoBL,gBAAgB,EAAE;YAAU,MAAM;EAsE1D,CAAC"}

package/dist/remediation/tools/check-reachability.d.ts

@@ -18,10 +18,15 @@ export interface ExtractedReference {
     importedIdentifiers: Map<string, string>;
     isReExported: boolean;
 }
+export declare function toRootPackageName(importSource: string): string;
+export declare function findTransitiveDependencyPath(cwd: string, targetPackage: string, importedDirectPackages: Set<string>): {
+    directDependency: string;
+    version?: string;
+} | null;
 /**
  * Extracts package references and imported symbols using the Oxc AST parser.
  */
-export declare function extractPackageReferences(filename: string, content: string, packageName: string, tsconfig?: TsconfigPathsConfig): ExtractedReference[];
+export declare function extractPackageReferences(filename: string, content: string, packageName: string, tsconfig?: TsconfigPathsConfig, outImportedDirectPackages?: Set<string>): ExtractedReference[];
 /**
  * Traces AST call expressions to see if the vulnerable symbol is actually invoked.
  */

package/dist/remediation/tools/check-reachability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-reachability.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/check-reachability.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAc5F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAqB9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,MAAM,GAAG,SAAS,CAmBpB;AAiED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,kBAAkB,EAAE,CAiHtB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,MAAM,GACpB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA6DzC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,sBAAsB,CAiHxB;AAED,eAAO,MAAM,qBAAqB;;;;0CAchC,CAAC"}
+{"version":3,"file":"check-reachability.d.ts","sourceRoot":"","sources":["../../../src/remediation/tools/check-reachability.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAc5F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAqB9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,MAAM,GAAG,SAAS,CAmBpB;AAiED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,GAClC;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBvD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,mBAAmB,EAC9B,yBAAyB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACtC,kBAAkB,EAAE,CAkItB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,MAAM,GACpB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA6DzC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,sBAAsB,CAoIxB;AAED,eAAO,MAAM,qBAAqB;;;;0CAchC,CAAC"}

package/dist/remediation/tools/generate-patch/helpers.d.ts

@@ -13,6 +13,7 @@ export interface LlmAnalysis {
     fixedCode: Record<string, string>;
     confidence: number;
     riskLevel: "low" | "medium" | "high";
+    reproductionTest?: string;
 }
 export declare function parseLlmAnalysisResponse(text: string): {
     ok: true;

package/dist/remediation/tools/generate-patch/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/remediation/tools/generate-patch/helpers.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACtC;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAWpE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAOjE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA4CpC;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,cAAc,EAAE,CAqBlB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAgCf"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/remediation/tools/generate-patch/helpers.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAWpE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAOjE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA4CpC;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,cAAc,EAAE,CAqBlB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAgCf"}

package/dist/remediation/tools/generate-patch/index.d.ts

@@ -7,6 +7,7 @@ interface GeneratePatchResult {
     success: boolean;
     patches?: GeneratedPatch[];
     patchContent?: string;
+    reproductionTest?: string;
     llmProvider: "remote" | "local";
     llmModel: string;
     latencyMs?: number;

package/dist/remediation/tools/generate-patch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/remediation/tools/generate-patch/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,UAAU,mBAAmB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAgP5B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/remediation/tools/generate-patch/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,UAAU,mBAAmB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAiP5B,CAAC"}

package/dist/scanner/adapters/npm-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../../src/scanner/adapters/npm-audit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAgCD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA0BhF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAG3E"}
+{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../../src/scanner/adapters/npm-audit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAiCD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA2BhF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAG3E"}

package/dist/scanner/adapters/yarn-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"yarn-audit.d.ts","sourceRoot":"","sources":["../../../src/scanner/adapters/yarn-audit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYxD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAsDjF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAG5E"}
+{"version":3,"file":"yarn-audit.d.ts","sourceRoot":"","sources":["../../../src/scanner/adapters/yarn-audit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAaxD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAuDjF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAG5E"}

package/dist/scanner/delta-scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delta-scan.d.ts","sourceRoot":"","sources":["../../src/scanner/delta-scan.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,gBAAgB,EAChB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AA6I9B,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAqHxF"}
+{"version":3,"file":"delta-scan.d.ts","sourceRoot":"","sources":["../../src/scanner/delta-scan.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,gBAAgB,EAChB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAmN9B,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyIxF"}

package/dist/scanner/lockfile-diff.d.ts

@@ -0,0 +1,10 @@
+import type { DeltaDependencyChange } from "../platform/types.js";
+/**
+ * Extracts a map of package names to their resolved versions from a lockfile content.
+ */
+export declare function parseLockfileDependencies(filename: string, content: string): Map<string, Set<string>>;
+/**
+ * Computes difference between old and new lockfile content.
+ */
+export declare function computeLockfileDiff(filename: string, oldContent: string | null, newContent: string | null): DeltaDependencyChange[];
+//# sourceMappingURL=lockfile-diff.d.ts.map

package/dist/scanner/lockfile-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile-diff.d.ts","sourceRoot":"","sources":["../../src/scanner/lockfile-diff.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CA+G1B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,qBAAqB,EAAE,CA8DzB"}

package/dist/scanner/lockfile-diff.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=lockfile-diff.test.d.ts.map

package/dist/scanner/lockfile-diff.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile-diff.test.d.ts","sourceRoot":"","sources":["../../src/scanner/lockfile-diff.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autoremediator",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "private": false,
   "description": "Agentic CVE remediation platform for Node.js. Correlates threat intelligence, applies policy-governed fixes, and delivers auditable remediation outcomes across CI/CD pipelines, agent workflows, and service portfolios.",
   "keywords": [
@@ -91,18 +91,18 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "ai": "^7.0.74",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "ai": "^7.0.137",
     "commander": "^15.0.0",
-    "execa": "^10.0.1",
-    "oxc-parser": "^0.146.0",
+    "execa": "^10.1.0",
+    "oxc-parser": "^0.153.0",
     "semver": "^7.8.5",
     "yaml": "catalog:",
-    "zod": "^4.4.3"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@ai-sdk/anthropic": "^4.0.40",
-    "@ai-sdk/openai": "^4.0.45",
+    "@ai-sdk/anthropic": "^4.0.78",
+    "@ai-sdk/openai": "^4.0.91",
     "@types/node": "catalog:",
     "@types/semver": "catalog:",
     "tsup": "catalog:",