autoremediator 0.2.2 → 0.4.0

package/dist/openapi/server.js

@@ -1,10 +1,12 @@
 import {
+  planRemediation,
   remediate,
   remediateFromScan
-} from "../chunk-DQKT2CUG.js";
+} from "../chunk-GBOD3DV6.js";
 
 // src/openapi/server.ts
 import http from "http";
+import { fileURLToPath } from "url";
 var DEFAULT_PORT = 3e3;
 function parsePort() {
   const idx = process.argv.indexOf("--port");
@@ -43,53 +45,85 @@ function send(res, status, body) {
   });
   res.end(payload);
 }
-var server = http.createServer(async (req, res) => {
-  const url = new URL(req.url ?? "/", `http://localhost`);
-  const method = req.method?.toUpperCase();
-  if (method === "GET" && url.pathname === "/health") {
-    return send(res, 200, { status: "ok" });
-  }
-  if (method === "GET" && url.pathname === "/openapi.json") {
-    return send(res, 200, OPENAPI_SPEC);
-  }
-  if (method === "POST" && url.pathname === "/remediate") {
-    let body;
-    try {
-      body = await readBody(req);
-    } catch {
-      return send(res, 400, { error: "Invalid JSON body" });
-    }
-    if (typeof body.cveId !== "string" || !body.cveId) {
-      return send(res, 400, { error: "cveId is required (string)" });
+function withOpenApiSource(options) {
+  const normalized = typeof options === "object" && options !== null ? options : {};
+  return {
+    ...normalized,
+    source: typeof normalized.source === "string" ? normalized.source : "openapi"
+  };
+}
+var defaultDeps = {
+  remediateFn: remediate,
+  remediateFromScanFn: remediateFromScan,
+  planRemediationFn: planRemediation
+};
+function createOpenApiServer(deps = defaultDeps) {
+  return http.createServer(async (req, res) => {
+    const url = new URL(req.url ?? "/", `http://localhost`);
+    const method = req.method?.toUpperCase();
+    if (method === "GET" && url.pathname === "/health") {
+      return send(res, 200, { status: "ok" });
     }
-    try {
-      const report = await remediate(body.cveId, body.options ?? {});
-      return send(res, 200, report);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      return send(res, 400, { error: message });
+    if (method === "GET" && url.pathname === "/openapi.json") {
+      return send(res, 200, OPENAPI_SPEC);
     }
-  }
-  if (method === "POST" && url.pathname === "/remediate-from-scan") {
-    let body;
-    try {
-      body = await readBody(req);
-    } catch {
-      return send(res, 400, { error: "Invalid JSON body" });
+    if (method === "POST" && url.pathname === "/remediate") {
+      let body;
+      try {
+        body = await readBody(req);
+      } catch {
+        return send(res, 400, { error: "Invalid JSON body" });
+      }
+      if (typeof body.cveId !== "string" || !body.cveId) {
+        return send(res, 400, { error: "cveId is required (string)" });
+      }
+      try {
+        const report = await deps.remediateFn(body.cveId, withOpenApiSource(body.options));
+        return send(res, 200, report);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return send(res, 400, { error: message });
+      }
     }
-    if (typeof body.inputPath !== "string" || !body.inputPath) {
-      return send(res, 400, { error: "inputPath is required (string)" });
+    if (method === "POST" && url.pathname === "/plan-remediation") {
+      let body;
+      try {
+        body = await readBody(req);
+      } catch {
+        return send(res, 400, { error: "Invalid JSON body" });
+      }
+      if (typeof body.cveId !== "string" || !body.cveId) {
+        return send(res, 400, { error: "cveId is required (string)" });
+      }
+      try {
+        const report = await deps.planRemediationFn(body.cveId, withOpenApiSource(body.options));
+        return send(res, 200, report);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return send(res, 400, { error: message });
+      }
     }
-    try {
-      const report = await remediateFromScan(body.inputPath, body.options ?? {});
-      return send(res, 200, report);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      return send(res, 400, { error: message });
+    if (method === "POST" && url.pathname === "/remediate-from-scan") {
+      let body;
+      try {
+        body = await readBody(req);
+      } catch {
+        return send(res, 400, { error: "Invalid JSON body" });
+      }
+      if (typeof body.inputPath !== "string" || !body.inputPath) {
+        return send(res, 400, { error: "inputPath is required (string)" });
+      }
+      try {
+        const report = await deps.remediateFromScanFn(body.inputPath, withOpenApiSource(body.options));
+        return send(res, 200, report);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return send(res, 400, { error: message });
+      }
     }
-  }
-  return send(res, 404, { error: "Not found" });
-});
+    return send(res, 404, { error: "Not found" });
+  });
+}
 var OPENAPI_SPEC = {
   openapi: "3.1.0",
   info: {
@@ -122,10 +156,92 @@ var OPENAPI_SPEC = {
                       cwd: { type: "string" },
                       packageManager: { type: "string", enum: ["npm", "pnpm", "yarn"] },
                       dryRun: { type: "boolean" },
-                      skipTests: { type: "boolean" },
+                      preview: { type: "boolean" },
+                      runTests: { type: "boolean" },
+                      llmProvider: { type: "string", enum: ["openai", "anthropic", "local"] },
+                      patchesDir: { type: "string" },
+                      policy: { type: "string" },
+                      requestId: { type: "string" },
+                      sessionId: { type: "string" },
+                      parentRunId: { type: "string" },
+                      idempotencyKey: { type: "string" },
+                      resume: { type: "boolean" },
+                      actor: { type: "string" },
+                      source: { type: "string", enum: ["cli", "sdk", "mcp", "openapi", "unknown"] },
+                      constraints: {
+                        type: "object",
+                        properties: {
+                          directDependenciesOnly: { type: "boolean" },
+                          preferVersionBump: { type: "boolean" }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        responses: {
+          "200": {
+            description: "RemediationReport",
+            content: { "application/json": { schema: { type: "object" } } }
+          },
+          "400": {
+            description: "Invalid input or remediation error",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: { error: { type: "string" } }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/plan-remediation": {
+      post: {
+        operationId: "planRemediation",
+        summary: "Generate a non-mutating remediation preview",
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["cveId"],
+                properties: {
+                  cveId: {
+                    type: "string",
+                    description: "CVE identifier, e.g. CVE-2021-23337",
+                    pattern: "^CVE-\\d{4}-\\d+$"
+                  },
+                  options: {
+                    type: "object",
+                    description: "RemediateOptions",
+                    properties: {
+                      cwd: { type: "string" },
+                      packageManager: { type: "string", enum: ["npm", "pnpm", "yarn"] },
+                      runTests: { type: "boolean" },
                       llmProvider: { type: "string", enum: ["openai", "anthropic", "local"] },
                       patchesDir: { type: "string" },
-                      policyPath: { type: "string" }
+                      policy: { type: "string" },
+                      requestId: { type: "string" },
+                      sessionId: { type: "string" },
+                      parentRunId: { type: "string" },
+                      idempotencyKey: { type: "string" },
+                      resume: { type: "boolean" },
+                      actor: { type: "string" },
+                      source: { type: "string", enum: ["cli", "sdk", "mcp", "openapi", "unknown"] },
+                      constraints: {
+                        type: "object",
+                        properties: {
+                          directDependenciesOnly: { type: "boolean" },
+                          preferVersionBump: { type: "boolean" }
+                        }
+                      }
                     }
                   }
                 }
@@ -175,12 +291,27 @@ var OPENAPI_SPEC = {
                       cwd: { type: "string" },
                       packageManager: { type: "string", enum: ["npm", "pnpm", "yarn"] },
                       dryRun: { type: "boolean" },
-                      skipTests: { type: "boolean" },
+                      preview: { type: "boolean" },
+                      runTests: { type: "boolean" },
                       llmProvider: { type: "string", enum: ["openai", "anthropic", "local"] },
                       format: { type: "string", enum: ["npm-audit", "yarn-audit", "sarif", "auto"] },
                       patchesDir: { type: "string" },
-                      policyPath: { type: "string" },
-                      writeEvidence: { type: "boolean" }
+                      policy: { type: "string" },
+                      evidence: { type: "boolean" },
+                      requestId: { type: "string" },
+                      sessionId: { type: "string" },
+                      parentRunId: { type: "string" },
+                      idempotencyKey: { type: "string" },
+                      resume: { type: "boolean" },
+                      actor: { type: "string" },
+                      source: { type: "string", enum: ["cli", "sdk", "mcp", "openapi", "unknown"] },
+                      constraints: {
+                        type: "object",
+                        properties: {
+                          directDependenciesOnly: { type: "boolean" },
+                          preferVersionBump: { type: "boolean" }
+                        }
+                      }
                     }
                   }
                 }
@@ -191,7 +322,26 @@ var OPENAPI_SPEC = {
         responses: {
           "200": {
             description: "ScanReport",
-            content: { "application/json": { schema: { type: "object" } } }
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    schemaVersion: { type: "string" },
+                    status: { type: "string", enum: ["ok", "partial", "failed"] },
+                    generatedAt: { type: "string" },
+                    cveIds: { type: "array", items: { type: "string" } },
+                    reports: { type: "array", items: { type: "object" } },
+                    successCount: { type: "number" },
+                    failedCount: { type: "number" },
+                    errors: { type: "array", items: { type: "object" } },
+                    evidenceFile: { type: "string" },
+                    patchCount: { type: "number" },
+                    patchesDir: { type: "string" }
+                  }
+                }
+              }
+            }
           },
           "400": {
             description: "Invalid input or remediation error",
@@ -228,9 +378,20 @@ var OPENAPI_SPEC = {
     }
   }
 };
-var port = parsePort();
-server.listen(port, () => {
-  console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);
-  console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);
-});
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  return fileURLToPath(import.meta.url) === process.argv[1];
+}
+if (isMainModule()) {
+  const port = parsePort();
+  const server = createOpenApiServer();
+  server.listen(port, () => {
+    console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);
+    console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);
+  });
+}
+export {
+  OPENAPI_SPEC,
+  createOpenApiServer
+};
 //# sourceMappingURL=server.js.map

package/dist/openapi/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/openapi/server.ts"],"sourcesContent":["/**\n * autoremediator OpenAPI HTTP server\n *\n * Exposes POST /remediate and POST /remediate-from-scan as a lightweight\n * HTTP server using Node.js built-in http module (no framework dependency).\n *\n * Start: node dist/openapi/server.js [--port 3000]\n */\nimport http from \"node:http\";\nimport { remediate, remediateFromScan } from \"../api.js\";\nimport type { RemediateOptions, ScanOptions } from \"../api.js\";\n\nconst DEFAULT_PORT = 3000;\n\nfunction parsePort(): number {\n  const idx = process.argv.indexOf(\"--port\");\n  if (idx !== -1 && process.argv[idx + 1]) {\n    const p = parseInt(process.argv[idx + 1], 10);\n    if (!isNaN(p)) return p;\n  }\n  if (process.env.PORT) {\n    const p = parseInt(process.env.PORT, 10);\n    if (!isNaN(p)) return p;\n  }\n  return DEFAULT_PORT;\n}\n\nfunction readBody(req: http.IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.setEncoding(\"utf8\");\n    req.on(\"data\", (chunk: string) => { raw += chunk; });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? JSON.parse(raw) : {});\n      } catch {\n        reject(new Error(\"Invalid JSON body\"));\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nfunction send(res: http.ServerResponse, status: number, body: unknown): void {\n  const payload = JSON.stringify(body);\n  res.writeHead(status, {\n    \"Content-Type\": \"application/json\",\n    \"Content-Length\": Buffer.byteLength(payload),\n  });\n  res.end(payload);\n}\n\nconst server = http.createServer(async (req, res) => {\n  const url = new URL(req.url ?? \"/\", `http://localhost`);\n  const method = req.method?.toUpperCase();\n\n  // Health check\n  if (method === \"GET\" && url.pathname === \"/health\") {\n    return send(res, 200, { status: \"ok\" });\n  }\n\n  // OpenAPI spec\n  if (method === \"GET\" && url.pathname === \"/openapi.json\") {\n    return send(res, 200, OPENAPI_SPEC);\n  }\n\n  if (method === \"POST\" && url.pathname === \"/remediate\") {\n    let body: { cveId?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.cveId !== \"string\" || !body.cveId) {\n      return send(res, 400, { error: \"cveId is required (string)\" });\n    }\n    try {\n      const report = await remediate(body.cveId, (body.options ?? {}) as RemediateOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n  if (method === \"POST\" && url.pathname === \"/remediate-from-scan\") {\n    let body: { inputPath?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.inputPath !== \"string\" || !body.inputPath) {\n      return send(res, 400, { error: \"inputPath is required (string)\" });\n    }\n    try {\n      const report = await remediateFromScan(body.inputPath, (body.options ?? {}) as ScanOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n  return send(res, 404, { error: \"Not found\" });\n});\n\nconst OPENAPI_SPEC = {\n  openapi: \"3.1.0\",\n  info: {\n    title: \"autoremediator\",\n    version: \"0.1.2\",\n    description: \"Agentic CVE remediation for Node.js dependency projects\",\n  },\n  paths: {\n    \"/remediate\": {\n      post: {\n        operationId: \"remediate\",\n        summary: \"Remediate a single CVE\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: \"CVE identifier, e.g. CVE-2021-23337\",\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: {\n                      cwd: { type: \"string\" },\n                      packageManager: { type: \"string\", enum: [\"npm\", \"pnpm\", \"yarn\"] },\n                      dryRun: { type: \"boolean\" },\n                      skipTests: { type: \"boolean\" },\n                      llmProvider: { type: \"string\", enum: [\"openai\", \"anthropic\", \"local\"] },\n                      patchesDir: { type: \"string\" },\n                      policyPath: { type: \"string\" },\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/remediate-from-scan\": {\n      post: {\n        operationId: \"remediateFromScan\",\n        summary: \"Parse a scanner file and remediate all found CVEs\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"inputPath\"],\n                properties: {\n                  inputPath: {\n                    type: \"string\",\n                    description: \"Absolute or relative path to npm/pnpm/yarn audit JSON or SARIF file\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"ScanOptions\",\n                    properties: {\n                      cwd: { type: \"string\" },\n                      packageManager: { type: \"string\", enum: [\"npm\", \"pnpm\", \"yarn\"] },\n                      dryRun: { type: \"boolean\" },\n                      skipTests: { type: \"boolean\" },\n                      llmProvider: { type: \"string\", enum: [\"openai\", \"anthropic\", \"local\"] },\n                      format: { type: \"string\", enum: [\"npm-audit\", \"yarn-audit\", \"sarif\", \"auto\"] },\n                      patchesDir: { type: \"string\" },\n                      policyPath: { type: \"string\" },\n                      writeEvidence: { type: \"boolean\" },\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"ScanReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/health\": {\n      get: {\n        operationId: \"health\",\n        summary: \"Health check\",\n        responses: {\n          \"200\": {\n            description: \"Server is healthy\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { status: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n  },\n};\n\nconst port = parsePort();\nserver.listen(port, () => {\n  console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);\n  console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);\n});\n"],"mappings":";;;;;;AAQA,OAAO,UAAU;AAIjB,IAAM,eAAe;AAErB,SAAS,YAAoB;AAC3B,QAAM,MAAM,QAAQ,KAAK,QAAQ,QAAQ;AACzC,MAAI,QAAQ,MAAM,QAAQ,KAAK,MAAM,CAAC,GAAG;AACvC,UAAM,IAAI,SAAS,QAAQ,KAAK,MAAM,CAAC,GAAG,EAAE;AAC5C,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,MAAI,QAAQ,IAAI,MAAM;AACpB,UAAM,IAAI,SAAS,QAAQ,IAAI,MAAM,EAAE;AACvC,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAA6C;AAC7D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,MAAM;AACV,QAAI,YAAY,MAAM;AACtB,QAAI,GAAG,QAAQ,CAAC,UAAkB;AAAE,aAAO;AAAA,IAAO,CAAC;AACnD,QAAI,GAAG,OAAO,MAAM;AAClB,UAAI;AACF,gBAAQ,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;AAAA,MACpC,QAAQ;AACN,eAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAEA,SAAS,KAAK,KAA0B,QAAgB,MAAqB;AAC3E,QAAM,UAAU,KAAK,UAAU,IAAI;AACnC,MAAI,UAAU,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,kBAAkB,OAAO,WAAW,OAAO;AAAA,EAC7C,CAAC;AACD,MAAI,IAAI,OAAO;AACjB;AAEA,IAAM,SAAS,KAAK,aAAa,OAAO,KAAK,QAAQ;AACnD,QAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,QAAM,SAAS,IAAI,QAAQ,YAAY;AAGvC,MAAI,WAAW,SAAS,IAAI,aAAa,WAAW;AAClD,WAAO,KAAK,KAAK,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,EACxC;AAGA,MAAI,WAAW,SAAS,IAAI,aAAa,iBAAiB;AACxD,WAAO,KAAK,KAAK,KAAK,YAAY;AAAA,EACpC;AAEA,MAAI,WAAW,UAAU,IAAI,aAAa,cAAc;AACtD,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,SAAS,GAAG;AAAA,IAC5B,QAAQ;AACN,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,IACtD;AACA,QAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,OAAO;AACjD,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,IAC/D;AACA,QAAI;AACF,YAAM,SAAS,MAAM,UAAU,KAAK,OAAQ,KAAK,WAAW,CAAC,CAAsB;AACnF,aAAO,KAAK,KAAK,KAAK,MAAM;AAAA,IAC9B,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC1C;AAAA,EACF;AAEA,MAAI,WAAW,UAAU,IAAI,aAAa,wBAAwB;AAChE,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,SAAS,GAAG;AAAA,IAC5B,QAAQ;AACN,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,IACtD;AACA,QAAI,OAAO,KAAK,cAAc,YAAY,CAAC,KAAK,WAAW;AACzD,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,IACnE;AACA,QAAI;AACF,YAAM,SAAS,MAAM,kBAAkB,KAAK,WAAY,KAAK,WAAW,CAAC,CAAiB;AAC1F,aAAO,KAAK,KAAK,KAAK,MAAM;AAAA,IAC9B,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,aAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC1C;AAAA,EACF;AAEA,SAAO,KAAK,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAC9C,CAAC;AAED,IAAM,eAAe;AAAA,EACnB,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,EACf;AAAA,EACA,OAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,EAAE,MAAM,SAAS;AAAA,sBACtB,gBAAgB,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,QAAQ,MAAM,EAAE;AAAA,sBAChE,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,WAAW,EAAE,MAAM,UAAU;AAAA,sBAC7B,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,aAAa,OAAO,EAAE;AAAA,sBACtE,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,YAAY,EAAE,MAAM,SAAS;AAAA,oBAC/B;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,MACtB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,WAAW;AAAA,gBACtB,YAAY;AAAA,kBACV,WAAW;AAAA,oBACT,MAAM;AAAA,oBACN,aAAa;AAAA,kBACf;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,EAAE,MAAM,SAAS;AAAA,sBACtB,gBAAgB,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,QAAQ,MAAM,EAAE;AAAA,sBAChE,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,WAAW,EAAE,MAAM,UAAU;AAAA,sBAC7B,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,aAAa,OAAO,EAAE;AAAA,sBACtE,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,aAAa,cAAc,SAAS,MAAM,EAAE;AAAA,sBAC7E,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,eAAe,EAAE,MAAM,UAAU;AAAA,oBACnC;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,QACT,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC3C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAM,OAAO,UAAU;AACvB,OAAO,OAAO,MAAM,MAAM;AACxB,UAAQ,IAAI,+DAA+D,IAAI,EAAE;AACjF,UAAQ,IAAI,oCAAoC,IAAI,eAAe;AACrE,CAAC;","names":[]}
+{"version":3,"sources":["../../src/openapi/server.ts"],"sourcesContent":["/**\n * autoremediator OpenAPI HTTP server\n *\n * Exposes POST /remediate and POST /remediate-from-scan as a lightweight\n * HTTP server using Node.js built-in http module (no framework dependency).\n *\n * Start: node dist/openapi/server.js [--port 3000]\n */\nimport http from \"node:http\";\nimport { fileURLToPath } from \"node:url\";\nimport { planRemediation, remediate, remediateFromScan } from \"../api.js\";\nimport type { RemediateOptions, ScanOptions } from \"../api.js\";\n\nconst DEFAULT_PORT = 3000;\n\nfunction parsePort(): number {\n  const idx = process.argv.indexOf(\"--port\");\n  if (idx !== -1 && process.argv[idx + 1]) {\n    const p = parseInt(process.argv[idx + 1], 10);\n    if (!isNaN(p)) return p;\n  }\n  if (process.env.PORT) {\n    const p = parseInt(process.env.PORT, 10);\n    if (!isNaN(p)) return p;\n  }\n  return DEFAULT_PORT;\n}\n\nfunction readBody(req: http.IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.setEncoding(\"utf8\");\n    req.on(\"data\", (chunk: string) => { raw += chunk; });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? JSON.parse(raw) : {});\n      } catch {\n        reject(new Error(\"Invalid JSON body\"));\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nfunction send(res: http.ServerResponse, status: number, body: unknown): void {\n  const payload = JSON.stringify(body);\n  res.writeHead(status, {\n    \"Content-Type\": \"application/json\",\n    \"Content-Length\": Buffer.byteLength(payload),\n  });\n  res.end(payload);\n}\n\nfunction withOpenApiSource(options: unknown): Record<string, unknown> {\n  const normalized = typeof options === \"object\" && options !== null\n    ? (options as Record<string, unknown>)\n    : {};\n  return {\n    ...normalized,\n    source: typeof normalized.source === \"string\" ? normalized.source : \"openapi\",\n  };\n}\n\ninterface OpenApiServerDeps {\n  remediateFn: typeof remediate;\n  remediateFromScanFn: typeof remediateFromScan;\n  planRemediationFn: typeof planRemediation;\n}\n\nconst defaultDeps: OpenApiServerDeps = {\n  remediateFn: remediate,\n  remediateFromScanFn: remediateFromScan,\n  planRemediationFn: planRemediation,\n};\n\nexport function createOpenApiServer(deps: OpenApiServerDeps = defaultDeps): http.Server {\n  return http.createServer(async (req, res) => {\n    const url = new URL(req.url ?? \"/\", `http://localhost`);\n    const method = req.method?.toUpperCase();\n\n  // Health check\n  if (method === \"GET\" && url.pathname === \"/health\") {\n    return send(res, 200, { status: \"ok\" });\n  }\n\n  // OpenAPI spec\n  if (method === \"GET\" && url.pathname === \"/openapi.json\") {\n    return send(res, 200, OPENAPI_SPEC);\n  }\n\n    if (method === \"POST\" && url.pathname === \"/remediate\") {\n    let body: { cveId?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.cveId !== \"string\" || !body.cveId) {\n      return send(res, 400, { error: \"cveId is required (string)\" });\n    }\n    try {\n      const report = await deps.remediateFn(body.cveId, withOpenApiSource(body.options) as RemediateOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    if (method === \"POST\" && url.pathname === \"/plan-remediation\") {\n    let body: { cveId?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.cveId !== \"string\" || !body.cveId) {\n      return send(res, 400, { error: \"cveId is required (string)\" });\n    }\n    try {\n      const report = await deps.planRemediationFn(body.cveId, withOpenApiSource(body.options) as RemediateOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    if (method === \"POST\" && url.pathname === \"/remediate-from-scan\") {\n    let body: { inputPath?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.inputPath !== \"string\" || !body.inputPath) {\n      return send(res, 400, { error: \"inputPath is required (string)\" });\n    }\n    try {\n      const report = await deps.remediateFromScanFn(body.inputPath, withOpenApiSource(body.options) as ScanOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    return send(res, 404, { error: \"Not found\" });\n  });\n}\n\nexport const OPENAPI_SPEC = {\n  openapi: \"3.1.0\",\n  info: {\n    title: \"autoremediator\",\n    version: \"0.1.2\",\n    description: \"Agentic CVE remediation for Node.js dependency projects\",\n  },\n  paths: {\n    \"/remediate\": {\n      post: {\n        operationId: \"remediate\",\n        summary: \"Remediate a single CVE\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: \"CVE identifier, e.g. CVE-2021-23337\",\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: {\n                      cwd: { type: \"string\" },\n                      packageManager: { type: \"string\", enum: [\"npm\", \"pnpm\", \"yarn\"] },\n                      dryRun: { type: \"boolean\" },\n                      preview: { type: \"boolean\" },\n                      runTests: { type: \"boolean\" },\n                      llmProvider: { type: \"string\", enum: [\"openai\", \"anthropic\", \"local\"] },\n                      patchesDir: { type: \"string\" },\n                      policy: { type: \"string\" },\n                      requestId: { type: \"string\" },\n                      sessionId: { type: \"string\" },\n                      parentRunId: { type: \"string\" },\n                      idempotencyKey: { type: \"string\" },\n                      resume: { type: \"boolean\" },\n                      actor: { type: \"string\" },\n                      source: { type: \"string\", enum: [\"cli\", \"sdk\", \"mcp\", \"openapi\", \"unknown\"] },\n                      constraints: {\n                        type: \"object\",\n                        properties: {\n                          directDependenciesOnly: { type: \"boolean\" },\n                          preferVersionBump: { type: \"boolean\" },\n                        },\n                      },\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/plan-remediation\": {\n      post: {\n        operationId: \"planRemediation\",\n        summary: \"Generate a non-mutating remediation preview\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: \"CVE identifier, e.g. CVE-2021-23337\",\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: {\n                      cwd: { type: \"string\" },\n                      packageManager: { type: \"string\", enum: [\"npm\", \"pnpm\", \"yarn\"] },\n                      runTests: { type: \"boolean\" },\n                      llmProvider: { type: \"string\", enum: [\"openai\", \"anthropic\", \"local\"] },\n                      patchesDir: { type: \"string\" },\n                      policy: { type: \"string\" },\n                      requestId: { type: \"string\" },\n                      sessionId: { type: \"string\" },\n                      parentRunId: { type: \"string\" },\n                      idempotencyKey: { type: \"string\" },\n                      resume: { type: \"boolean\" },\n                      actor: { type: \"string\" },\n                      source: { type: \"string\", enum: [\"cli\", \"sdk\", \"mcp\", \"openapi\", \"unknown\"] },\n                      constraints: {\n                        type: \"object\",\n                        properties: {\n                          directDependenciesOnly: { type: \"boolean\" },\n                          preferVersionBump: { type: \"boolean\" },\n                        },\n                      },\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/remediate-from-scan\": {\n      post: {\n        operationId: \"remediateFromScan\",\n        summary: \"Parse a scanner file and remediate all found CVEs\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"inputPath\"],\n                properties: {\n                  inputPath: {\n                    type: \"string\",\n                    description: \"Absolute or relative path to npm/pnpm/yarn audit JSON or SARIF file\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"ScanOptions\",\n                    properties: {\n                      cwd: { type: \"string\" },\n                      packageManager: { type: \"string\", enum: [\"npm\", \"pnpm\", \"yarn\"] },\n                      dryRun: { type: \"boolean\" },\n                      preview: { type: \"boolean\" },\n                      runTests: { type: \"boolean\" },\n                      llmProvider: { type: \"string\", enum: [\"openai\", \"anthropic\", \"local\"] },\n                      format: { type: \"string\", enum: [\"npm-audit\", \"yarn-audit\", \"sarif\", \"auto\"] },\n                      patchesDir: { type: \"string\" },\n                      policy: { type: \"string\" },\n                      evidence: { type: \"boolean\" },\n                      requestId: { type: \"string\" },\n                      sessionId: { type: \"string\" },\n                      parentRunId: { type: \"string\" },\n                      idempotencyKey: { type: \"string\" },\n                      resume: { type: \"boolean\" },\n                      actor: { type: \"string\" },\n                      source: { type: \"string\", enum: [\"cli\", \"sdk\", \"mcp\", \"openapi\", \"unknown\"] },\n                      constraints: {\n                        type: \"object\",\n                        properties: {\n                          directDependenciesOnly: { type: \"boolean\" },\n                          preferVersionBump: { type: \"boolean\" },\n                        },\n                      },\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"ScanReport\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: {\n                    schemaVersion: { type: \"string\" },\n                    status: { type: \"string\", enum: [\"ok\", \"partial\", \"failed\"] },\n                    generatedAt: { type: \"string\" },\n                    cveIds: { type: \"array\", items: { type: \"string\" } },\n                    reports: { type: \"array\", items: { type: \"object\" } },\n                    successCount: { type: \"number\" },\n                    failedCount: { type: \"number\" },\n                    errors: { type: \"array\", items: { type: \"object\" } },\n                    evidenceFile: { type: \"string\" },\n                    patchCount: { type: \"number\" },\n                    patchesDir: { type: \"string\" },\n                  },\n                },\n              },\n            },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/health\": {\n      get: {\n        operationId: \"health\",\n        summary: \"Health check\",\n        responses: {\n          \"200\": {\n            description: \"Server is healthy\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { status: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n  },\n};\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  return fileURLToPath(import.meta.url) === process.argv[1];\n}\n\nif (isMainModule()) {\n  const port = parsePort();\n  const server = createOpenApiServer();\n  server.listen(port, () => {\n    console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);\n    console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);\n  });\n}\n"],"mappings":";;;;;;;AAQA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAI9B,IAAM,eAAe;AAErB,SAAS,YAAoB;AAC3B,QAAM,MAAM,QAAQ,KAAK,QAAQ,QAAQ;AACzC,MAAI,QAAQ,MAAM,QAAQ,KAAK,MAAM,CAAC,GAAG;AACvC,UAAM,IAAI,SAAS,QAAQ,KAAK,MAAM,CAAC,GAAG,EAAE;AAC5C,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,MAAI,QAAQ,IAAI,MAAM;AACpB,UAAM,IAAI,SAAS,QAAQ,IAAI,MAAM,EAAE;AACvC,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAA6C;AAC7D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,MAAM;AACV,QAAI,YAAY,MAAM;AACtB,QAAI,GAAG,QAAQ,CAAC,UAAkB;AAAE,aAAO;AAAA,IAAO,CAAC;AACnD,QAAI,GAAG,OAAO,MAAM;AAClB,UAAI;AACF,gBAAQ,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;AAAA,MACpC,QAAQ;AACN,eAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAEA,SAAS,KAAK,KAA0B,QAAgB,MAAqB;AAC3E,QAAM,UAAU,KAAK,UAAU,IAAI;AACnC,MAAI,UAAU,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,kBAAkB,OAAO,WAAW,OAAO;AAAA,EAC7C,CAAC;AACD,MAAI,IAAI,OAAO;AACjB;AAEA,SAAS,kBAAkB,SAA2C;AACpE,QAAM,aAAa,OAAO,YAAY,YAAY,YAAY,OACzD,UACD,CAAC;AACL,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,OAAO,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACtE;AACF;AAQA,IAAM,cAAiC;AAAA,EACrC,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB,mBAAmB;AACrB;AAEO,SAAS,oBAAoB,OAA0B,aAA0B;AACtF,SAAO,KAAK,aAAa,OAAO,KAAK,QAAQ;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,UAAM,SAAS,IAAI,QAAQ,YAAY;AAGzC,QAAI,WAAW,SAAS,IAAI,aAAa,WAAW;AAClD,aAAO,KAAK,KAAK,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,IACxC;AAGA,QAAI,WAAW,SAAS,IAAI,aAAa,iBAAiB;AACxD,aAAO,KAAK,KAAK,KAAK,YAAY;AAAA,IACpC;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,cAAc;AACxD,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,OAAO;AACjD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,MAC/D;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,YAAY,KAAK,OAAO,kBAAkB,KAAK,OAAO,CAAqB;AACrG,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,qBAAqB;AAC/D,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,OAAO;AACjD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,MAC/D;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,kBAAkB,KAAK,OAAO,kBAAkB,KAAK,OAAO,CAAqB;AAC3G,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,wBAAwB;AAClE,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,cAAc,YAAY,CAAC,KAAK,WAAW;AACzD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,MACnE;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,oBAAoB,KAAK,WAAW,kBAAkB,KAAK,OAAO,CAAgB;AAC5G,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,WAAO,KAAK,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EAC9C,CAAC;AACH;AAEO,IAAM,eAAe;AAAA,EAC1B,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,EACf;AAAA,EACA,OAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,EAAE,MAAM,SAAS;AAAA,sBACtB,gBAAgB,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,QAAQ,MAAM,EAAE;AAAA,sBAChE,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,SAAS,EAAE,MAAM,UAAU;AAAA,sBAC3B,UAAU,EAAE,MAAM,UAAU;AAAA,sBAC5B,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,aAAa,OAAO,EAAE;AAAA,sBACtE,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,QAAQ,EAAE,MAAM,SAAS;AAAA,sBACzB,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,aAAa,EAAE,MAAM,SAAS;AAAA,sBAC9B,gBAAgB,EAAE,MAAM,SAAS;AAAA,sBACjC,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,OAAO,EAAE,MAAM,SAAS;AAAA,sBACxB,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,OAAO,OAAO,WAAW,SAAS,EAAE;AAAA,sBAC5E,aAAa;AAAA,wBACX,MAAM;AAAA,wBACN,YAAY;AAAA,0BACV,wBAAwB,EAAE,MAAM,UAAU;AAAA,0BAC1C,mBAAmB,EAAE,MAAM,UAAU;AAAA,wBACvC;AAAA,sBACF;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,EAAE,MAAM,SAAS;AAAA,sBACtB,gBAAgB,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,QAAQ,MAAM,EAAE;AAAA,sBAChE,UAAU,EAAE,MAAM,UAAU;AAAA,sBAC5B,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,aAAa,OAAO,EAAE;AAAA,sBACtE,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,QAAQ,EAAE,MAAM,SAAS;AAAA,sBACzB,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,aAAa,EAAE,MAAM,SAAS;AAAA,sBAC9B,gBAAgB,EAAE,MAAM,SAAS;AAAA,sBACjC,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,OAAO,EAAE,MAAM,SAAS;AAAA,sBACxB,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,OAAO,OAAO,WAAW,SAAS,EAAE;AAAA,sBAC5E,aAAa;AAAA,wBACX,MAAM;AAAA,wBACN,YAAY;AAAA,0BACV,wBAAwB,EAAE,MAAM,UAAU;AAAA,0BAC1C,mBAAmB,EAAE,MAAM,UAAU;AAAA,wBACvC;AAAA,sBACF;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,MACtB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,WAAW;AAAA,gBACtB,YAAY;AAAA,kBACV,WAAW;AAAA,oBACT,MAAM;AAAA,oBACN,aAAa;AAAA,kBACf;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,EAAE,MAAM,SAAS;AAAA,sBACtB,gBAAgB,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,QAAQ,MAAM,EAAE;AAAA,sBAChE,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,SAAS,EAAE,MAAM,UAAU;AAAA,sBAC3B,UAAU,EAAE,MAAM,UAAU;AAAA,sBAC5B,aAAa,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,aAAa,OAAO,EAAE;AAAA,sBACtE,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,aAAa,cAAc,SAAS,MAAM,EAAE;AAAA,sBAC7E,YAAY,EAAE,MAAM,SAAS;AAAA,sBAC7B,QAAQ,EAAE,MAAM,SAAS;AAAA,sBACzB,UAAU,EAAE,MAAM,UAAU;AAAA,sBAC5B,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,WAAW,EAAE,MAAM,SAAS;AAAA,sBAC5B,aAAa,EAAE,MAAM,SAAS;AAAA,sBAC9B,gBAAgB,EAAE,MAAM,SAAS;AAAA,sBACjC,QAAQ,EAAE,MAAM,UAAU;AAAA,sBAC1B,OAAO,EAAE,MAAM,SAAS;AAAA,sBACxB,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,OAAO,OAAO,OAAO,WAAW,SAAS,EAAE;AAAA,sBAC5E,aAAa;AAAA,wBACX,MAAM;AAAA,wBACN,YAAY;AAAA,0BACV,wBAAwB,EAAE,MAAM,UAAU;AAAA,0BAC1C,mBAAmB,EAAE,MAAM,UAAU;AAAA,wBACvC;AAAA,sBACF;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY;AAAA,oBACV,eAAe,EAAE,MAAM,SAAS;AAAA,oBAChC,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,MAAM,WAAW,QAAQ,EAAE;AAAA,oBAC5D,aAAa,EAAE,MAAM,SAAS;AAAA,oBAC9B,QAAQ,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,oBACnD,SAAS,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,oBACpD,cAAc,EAAE,MAAM,SAAS;AAAA,oBAC/B,aAAa,EAAE,MAAM,SAAS;AAAA,oBAC9B,QAAQ,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,oBACnD,cAAc,EAAE,MAAM,SAAS;AAAA,oBAC/B,YAAY,EAAE,MAAM,SAAS;AAAA,oBAC7B,YAAY,EAAE,MAAM,SAAS;AAAA,kBAC/B;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,QACT,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC3C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,SAAO,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC;AAC1D;AAEA,IAAI,aAAa,GAAG;AAClB,QAAM,OAAO,UAAU;AACvB,QAAM,SAAS,oBAAoB;AACnC,SAAO,OAAO,MAAM,MAAM;AACxB,YAAQ,IAAI,+DAA+D,IAAI,EAAE;AACjF,YAAQ,IAAI,oCAAoC,IAAI,eAAe;AAAA,EACrE,CAAC;AACH;","names":[]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "autoremediator",
   "private": false,
-  "version": "0.2.2",
+  "version": "0.4.0",
   "description": "Automated CVE remediation for Node.js dependencies with CLI, SDK, MCP, and scanner-to-fix workflows.",
   "keywords": [
     "security-remediation",