autoremediator 0.20.0 → 0.21.0

package/README.md

@@ -1,123 +1,53 @@
 # Autoremediator
 
 [![npm version](https://img.shields.io/npm/v/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
-[![npm downloads](https://img.shields.io/npm/dm/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
 [![license](https://img.shields.io/npm/l/autoremediator.svg)](LICENSE)
 [![node](https://img.shields.io/node/v/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
-[![Docker](https://img.shields.io/badge/docker-ghcr.io-blue)](https://github.com/Rawlings/autoremediator/pkgs/container/autoremediator)
-[![GitHub Actions](https://img.shields.io/badge/github--actions-marketplace-blue)](https://github.com/marketplace/actions/autoremediator)
 
-> [!WARNING]
-> Automated dependency remediation carries operational and supply-chain risk if deployed without policy controls.
-> Autoremediator is designed for risk-aware security and platform teams, and should be paired with explicit remediation policy, CI validation gates, and repository protection rules.
-
-Autoremediator is an agentic CVE remediation platform for Node.js.
-
-It closes the gap between vulnerability detection and remediation by correlating threat intelligence, measuring exploitability, and executing policy-governed fixes — across single repositories, large service portfolios, and agent-driven workflows.
-
-The outcome is reduced mean time to remediation (MTTR), narrower exposure windows, and auditable remediation posture across your dependency estate.
-
-See the [documentation](https://rawlings.github.io/autoremediator/docs/getting-started) to get started.
-
-## Built to fix, not just find
-
-Most SCA tools stop at detection. Autoremediator starts there.
-
-It ingests vulnerability findings from scanners or accepts a CVE ID directly, then drives each finding through a multi-strategy remediation pipeline: safe version upgrade, transitive dependency override, and controlled patch generation with confidence scoring as a last resort. Every path is gated by policy, validated before it is applied, and backed by structured evidence for downstream traceability.
-
-The result is a closed-loop remediation workflow rather than an ever-growing triage backlog.
-
-## Exploitability-informed prioritization
-
-Severity scores alone are poor remediation signals. Autoremediator enriches each CVE with corroborating signals before attempting a fix:
-
-- **CISA KEV** — confirms whether a vulnerability is actively exploited in the wild
-- **EPSS** — quantifies exploit probability as a continuous percentile score
-- **Advisory consensus** — cross-references OSV, GitHub Advisory Database, and NVD to validate affected ranges and fixed versions
-- **AST reachability** — analyzes import and call graphs to verify whether vulnerable functions are actually invoked in source code
+Fixes vulnerable npm dependencies. Give it a CVE or GHSA id, or the output of a scanner, and it
+upgrades, overrides or patches the affected packages, verifies the result, and reports exactly what
+it did and what it could not fix.
 
-This enrichment drives prioritization and disposition decisions, so high-risk, actively exploited vulnerabilities are handled with higher urgency than theoretical severities suggest.
-
-## Multi-strategy remediation
-
-Autoremediator selects the safest applicable fix strategy for each vulnerability:
-
-- **Direct version upgrade** — the preferred path for direct dependencies; automatically refactors consumer call sites if the upgrade introduces breaking changes
-- **Transitive override** — applied via package manager overrides or resolutions when exposure is in a transitive dependency
-- **Controlled patch generation** — confidence-scored fallback when no safe fixed version exists, validated against dual-stage exploit reproduction gates
-- **Upstream patch reconciliation** — detects when upstream package releases supersede local patch files and safely retires them
-
-Unresolved findings are never silently dropped. Each is classified with an explicit reason and treated as an escalation input for downstream security workflows.
-
-## Policy-governed automation
-
-Remediation behavior is governed by a policy layer (`.github/autoremediator.yml`) that determines disposition for each finding:
-
-- **Auto-apply** — applies high-confidence remediations within acceptable risk thresholds
-- **Simulate** — previews planned mutations and validation results without modifying files
-- **Hold for approval** — pauses execution for manual review when confidence or policy warrants
-- **Escalate** — flags findings that exceed risk tolerance to block unsafe mutations and trigger follow-on workflows
-
-Portfolio-scale campaigns apply risk ranking to prioritize remediation order across large target sets.
-
-## Vulnerability intelligence sources
-
-Primary advisory sources:
+> [!WARNING]
+> Automated dependency changes carry operational and supply-chain risk. Run with `--dry-run` first,
+> keep CI gates and branch protection in place, and set a [policy](docs/policy.md).
 
-- [OSV](https://osv.dev): ecosystem-first vulnerability records and affected or fixed ranges
-- [GitHub Advisory Database](https://github.com/advisories): package advisories and ecosystem metadata
-- [NVD](https://nvd.nist.gov): CVE reference data and severity context
+```bash
+npx autoremediator CVE-2021-23337 --dry-run     # preview
+npx autoremediator CVE-2021-23337 --run-tests   # apply and verify
+npx autoremediator --audit                      # remediate whatever `npm audit` reports
+```
 
-Exploitability and trust enrichment:
+Requires Node.js 26+.
 
-- [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog): active exploitation signals
-- [FIRST EPSS](https://www.first.org/epss/): exploit probability scoring
-- [CVE Services](https://www.cve.org/): authoritative CVE references
-- [GitLab Advisory Database](https://advisories.gitlab.com): supplemental advisory coverage
-- [CERT/CC Vulnerability Notes](https://www.kb.cert.org/vuls/): analyst context for selected CVEs
-- [deps.dev](https://deps.dev): package metadata and dependency graph coverage
-- [OpenSSF Scorecard](https://securityscorecards.dev): repository and package trust posture
-- Optional vendor and commercial feeds via environment-configured connectors
+## What it does
 
-## Integration surfaces
+For each installed package in a vulnerable range, it tries, in order:
 
-Autoremediator is designed to meet security operations where they already run:
+1. a **version bump** to the lowest safe version;
+2. a **package-manager override** when the package is transitive;
+3. a **generated patch**, only when no safe version exists and you have configured a model.
 
-- **CLI** — direct invocation in local developer workflows and CI/CD pipelines
-- **SDK** — programmatic integration for security automation and internal platforms
-- **GitHub Actions** — reusable workflows and Marketplace actions for scan-to-remediation pipelines
-- **GitHub App** — webhook-driven remediation with PR lifecycle management and automated healing
-- **MCP server** — native tool integration for AI agents and LLM orchestrators
-- **OpenAPI server** — HTTP endpoints for centralized or service-based remediation deployments
-- **VS Code extension** — editor diagnostics, reachability checks, and one-click fixes
+Every change is installed, optionally tested and type-checked, and rolled back if anything fails.
+Unfixed findings are reported with an explicit reason, never dropped.
 
-For configuration reference, workflow variants, and MCP host setup, see the [Integrations](https://rawlings.github.io/autoremediator/docs/integrations) and [Agent Ecosystems](https://rawlings.github.io/autoremediator/docs/agent-ecosystems) guides.
+Advisories come from OSV, the GitHub Advisory Database and NVD; CISA KEV and EPSS add exploit
+signals. A [policy file](docs/policy.md) controls which packages may change, how confident a patch
+must be, and whether a result is applied automatically, held for approval, or escalated.
 
-## Use cases
+## Ways to run it
 
-- Autonomous vulnerability remediation in CI/CD pipelines with deterministic security gating
-- Continuous exposure reduction across large Node.js service portfolios
-- Scanner-to-remediation conversion for high-volume SCA findings
-- Embedded remediation for internal security platforms, AI assistants, and SecOps tooling
-- Policy-governed supply chain risk management at scale
+CLI · SDK · [GitHub Action](docs/integrations.md#github-action) ·
+[GitHub App](docs/integrations.md#github-app) · [MCP server](docs/integrations.md#mcp-server) ·
+[HTTP server](docs/integrations.md#http-server)
 
 ## Documentation
 
-- [Docs Home](https://rawlings.github.io/autoremediator/)
-- [Getting Started](https://rawlings.github.io/autoremediator/docs/getting-started): setup, first run, and result interpretation
-- [CLI Reference](https://rawlings.github.io/autoremediator/docs/cli): commands, options, and CI semantics
-- [Scanner Inputs](https://rawlings.github.io/autoremediator/docs/scanner-inputs): supported formats and parsing constraints
-- [Policy and Safety](https://rawlings.github.io/autoremediator/docs/policy-and-safety): policy precedence, safeguards, and fallback controls
-- [API and SDK](https://rawlings.github.io/autoremediator/docs/api-sdk): programmatic integration and CI summary utilities
-- [Integrations](https://rawlings.github.io/autoremediator/docs/integrations): GitHub Actions, MCP, OpenAPI, and multi-stage pipelines
-- [Agent Ecosystems](https://rawlings.github.io/autoremediator/docs/agent-ecosystems): MCP host setup and orchestration examples
-- [Contributor Guide](https://rawlings.github.io/autoremediator/docs/contributor-guide): architecture and contribution standards
-
-## Project References
-
-- [Contributing](CONTRIBUTING.md)
-- [Agent Modes](AGENTS.md)
-- [LLM Context Summary](llms.txt)
+- [Usage](docs/usage.md): commands, how fixes are chosen, scanner inputs, SDK
+- [Policy and safety](docs/policy.md): the policy file and the guarantees
+- [Integrations](docs/integrations.md): Action, MCP, HTTP, GitHub App
+- [Architecture](docs/architecture.md) and [Contributing](CONTRIBUTING.md)
+- [AGENTS.md](AGENTS.md), [llms.txt](llms.txt): machine-readable summaries
 
 ## License
 

package/dist/api/change-request/index.d.ts

@@ -1,4 +1,20 @@
 import type { ChangeRequestGrouping, ChangeRequestOptions, ChangeRequestResult, RemediationReport } from "../../platform/types.js";
+/**
+ * Change requests commit and push, so they must never run for dry-run/preview/plan flows.
+ * Enforced here (not only in the CLI) so SDK, MCP and HTTP callers get the same guarantee.
+ */
+export declare function assertChangeRequestAllowed(options: {
+    dryRun?: boolean;
+    preview?: boolean;
+    changeRequest?: {
+        enabled?: boolean;
+    };
+}): void;
+/**
+ * Remove option fields that redirect credentials or API traffic. These are host configuration,
+ * never something an untrusted MCP/HTTP caller may set. Walks nested objects (e.g. portfolio targets).
+ */
+export declare function stripUntrustedChangeRequestFields<T>(value: T): T;
 export declare function groupReports(reports: RemediationReport[], grouping: ChangeRequestGrouping): RemediationReport[][];
 export declare function createChangeRequestsForReports(params: {
     cwd: string;

package/dist/api/change-request/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAsDjC,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA0JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvC,GAAG,IAAI,CAMP;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAehE;AA2ED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA0JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}

package/dist/api/contracts.d.ts

@@ -34,7 +34,8 @@ export interface ScanReport {
     constraints?: RemediationConstraints;
     idempotencyKey?: string;
     llmUsageCount?: number;
-    estimatedCostUsd?: number;
+    totalInputTokens?: number;
+    totalOutputTokens?: number;
     totalLlmLatencyMs?: number;
     slaBreaches?: SlaBreach[];
     slaBreachSummary?: SlaBreachSummary;
@@ -71,7 +72,8 @@ export interface CiSummary {
     constraints?: RemediationConstraints;
     idempotencyKey?: string;
     llmUsageCount?: number;
-    estimatedCostUsd?: number;
+    totalInputTokens?: number;
+    totalOutputTokens?: number;
     totalLlmLatencyMs?: number;
     slaBreaches?: SlaBreach[];
     slaBreachSummary?: SlaBreachSummary;

package/dist/api/contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/api/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,WAAY,SAAQ,gBAAgB;IACnD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC"}
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/api/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,WAAY,SAAQ,gBAAgB;IACnD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,KAAK,CAAC;IACrB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC"}

package/dist/api/index.d.ts

@@ -5,14 +5,17 @@
  *   import { remediate } from 'autoremediator';
  *   const report = await remediate('CVE-2021-23337', { cwd: '/my/project' });
  */
-export type { CorrelationContext, CveSeverity, LlmUsageMetrics, ModelPersonality, RemediationConstraints, ProvenanceContext, ProgressEvent, ProviderSafetyProfile, RemediateOptions, RemediationReport, ResultSimulation, CveDetails, AffectedPackage, InventoryPackage, VulnerablePackage, PatchResult, PatchStrategy, PatchStrategyCounts, DependencyScope, DependencyScopeCounts, PatchArtifact, PatchArtifactInspection, PatchArtifactQueryOptions, PatchArtifactSummary, PatchArtifactValidationReport, PatchReconcileOptions, PatchReconcileResult, PatchReconcileReport, PatchMode, PatchRiskLevel, PatchConfidenceThresholds, UnresolvedReason, UnresolvedReasonCounts, EscalationAction, EscalationGraph, EscalationCounts, Disposition, DispositionPolicy, DispositionSignals, DispositionCounts, PatchValidationPhase, PatchValidationPhaseName, PortfolioReport, PortfolioTarget, PortfolioTargetResult, OutdatedPackage, UpdateOutdatedOptions, UpdateOutdatedReport, ExploitSignalOverridePolicy, VexJustification, VexSuppression, SlaPolicy, SlaBreach, SlaBreachEntry, SlaBreachSummary, ReachabilityAssessment, ReachabilityEvidence, SbomEntry, SbomStatus, SimulationMutation, SimulationMutationTarget, SimulationRebuttalCode, SimulationRebuttalFinding, SimulationSummary, CheckReachabilityOptions, EvaluatePackageOptions, PackageEvaluationReport, VulnerabilityEvaluationEntry, DeltaDependencyChange, DeltaFinding, DeltaScanOptions, DeltaScanReport, } from "../platform/types.js";
+export type { CorrelationContext, CveSeverity, LlmUsageMetrics, RemediationConstraints, ProvenanceContext, RemediateOptions, RemediationReport, ResultSimulation, CveDetails, AffectedPackage, InventoryPackage, VulnerablePackage, PatchResult, PatchStrategy, PatchStrategyCounts, DependencyScope, DependencyScopeCounts, PatchArtifact, PatchArtifactInspection, PatchArtifactQueryOptions, PatchArtifactSummary, PatchArtifactValidationReport, PatchReconcileOptions, PatchReconcileResult, PatchReconcileReport, PatchMode, PatchRiskLevel, PatchConfidenceThresholds, UnresolvedReason, UnresolvedReasonCounts, EscalationAction, EscalationGraph, EscalationCounts, Disposition, DispositionPolicy, DispositionSignals, DispositionCounts, PatchValidationPhase, PatchValidationPhaseName, PortfolioReport, PortfolioTarget, PortfolioTargetResult, OutdatedPackage, UpdateOutdatedOptions, UpdateOutdatedReport, ExploitSignalOverridePolicy, VexJustification, VexSuppression, SlaPolicy, SlaBreach, SlaBreachEntry, SlaBreachSummary, ReachabilityAssessment, ReachabilityEvidence, SbomEntry, SbomStatus, SimulationMutation, SimulationMutationTarget, SimulationRebuttalCode, SimulationRebuttalFinding, SimulationSummary, CheckReachabilityOptions, EvaluatePackageOptions, PackageEvaluationReport, VulnerabilityEvaluationEntry, DeltaDependencyChange, DeltaFinding, DeltaScanOptions, DeltaScanReport, } from "../platform/types.js";
 export type { ScanInputFormat } from "../scanner/index.js";
 export type { ScanOptions, ScanReport, CiSummary } from "./contracts.js";
-export { PACKAGE_MANAGER_VALUES, LLM_PROVIDER_VALUES, PROVENANCE_SOURCE_VALUES, OPTION_DESCRIPTIONS, createConstraintSchemaProperties, createRemediateOptionSchemaProperties, createScanOptionSchemaProperties, createScanReportSchemaProperties, createUpdateOutdatedOptionSchemaProperties, } from "./options-schema.js";
+export { PACKAGE_MANAGER_VALUES, PROVENANCE_SOURCE_VALUES, OPTION_DESCRIPTIONS, createConstraintSchemaProperties, createRemediateOptionSchemaProperties, createScanOptionSchemaProperties, createScanReportSchemaProperties, createUpdateOutdatedOptionSchemaProperties, } from "./options-schema.js";
 export { toCiSummary, ciExitCode, buildSlaBreachSummary, buildStrategyCounts, buildDependencyScopeCounts, } from "./reporting.js";
 export { toSarifOutput, type SarifOutput } from "./sarif.js";
 export { toCycloneDxVex, type CycloneDxVexDocument, type CycloneDxVexVulnerability, type CycloneDxVexVulnerabilityAnalysis, type ToCycloneDxVexOptions, } from "./vex/index.js";
 export { inspectPatchArtifact, listPatchArtifacts, validatePatchArtifact, reconcilePatchArtifacts, } from "./patches/index.js";
+export type { PatchGenerator, PatchGeneratorUsage, PatchProposal, PatchRequest, } from "../platform/patch-generator.js";
+export { createLlmPatchGenerator } from "../remediation/patch/llm-generator.js";
+export { resolveLanguageModel } from "../remediation/patch/model.js";
 export { remediatePortfolio } from "./portfolio/index.js";
 export { remediate, planRemediation } from "./remediate/index.js";
 export { remediateFromScan } from "./remediate-from-scan/index.js";

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,qCAAqC,EACrC,gCAAgC,EAChC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EACtC,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,qCAAqC,EACrC,gCAAgC,EAChC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EACtC,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,YAAY,GACb,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,iBAAiB,CAAC"}

package/dist/api/options-schema.d.ts

@@ -1,6 +1,5 @@
 export type JsonSchemaProperty = Record<string, unknown>;
 export declare const PACKAGE_MANAGER_VALUES: readonly ["npm", "pnpm", "yarn", "bun", "deno"];
-export declare const LLM_PROVIDER_VALUES: readonly ["remote", "local"];
 export declare const PROVENANCE_SOURCE_VALUES: readonly ["cli", "sdk", "mcp", "openapi", "unknown"];
 export declare const OPTION_DESCRIPTIONS: {
     readonly cveId: "CVE ID, e.g. CVE-2021-23337";
@@ -11,18 +10,10 @@ export declare const OPTION_DESCRIPTIONS: {
     readonly preview: "If true, enforce non-mutating preview mode";
     readonly simulationMode: "If true, attach deterministic simulation and rebuttal metadata for dry-run or preview execution";
     readonly runTests: "Run package-manager test command after applying fix";
-    readonly llmProvider: "LLM provider override (remote|local)";
-    readonly model: "LLM model override";
-    readonly modelPersonality: "Prompt behavior profile: analytical|pragmatic|balanced";
-    readonly providerSafetyProfile: "Safety posture profile for confidence gates: strict|relaxed";
-    readonly requireConsensusForHighRisk: "Require second-provider agreement for high-risk generated patches";
-    readonly consensusProvider: "Provider override for high-risk consensus verification (remote|local)";
-    readonly consensusModel: "Model override for high-risk consensus verification";
+    readonly model: 'Language model for the patch fallback as "<provider>:<model-id>", e.g. "anthropic:claude-sonnet-5-5" (default: AUTOREMEDIATOR_MODEL)';
     readonly patchConfidenceThresholdLow: "Patch acceptance confidence threshold for low-risk patches (0..1)";
     readonly patchConfidenceThresholdMedium: "Patch acceptance confidence threshold for medium-risk patches (0..1)";
     readonly patchConfidenceThresholdHigh: "Patch acceptance confidence threshold for high-risk patches (0..1)";
-    readonly dynamicModelRouting: "Enable dynamic model selection by input size";
-    readonly dynamicRoutingThresholdChars: "Input size threshold used by dynamic model routing";
     readonly patchesDir: "Directory to write .patch files (default: ./patches)";
     readonly policy: "Optional path to .github/autoremediator.yml policy file";
     readonly requestId: "Request correlation ID";
@@ -55,20 +46,19 @@ export declare const OPTION_DESCRIPTIONS: {
     readonly suppressionsFile: "Path to a YAML file containing additional VEX suppression entries to merge with policy-inline suppressions";
     readonly slaCheck: "Compare CVE publication dates against configured SLA windows and include breach records in the report output";
     readonly skipUnreachable: "Skip remediation for CVEs where the vulnerable package cannot be reached from any project entry point (requires static import analysis)";
-    readonly regressionCheck: "After applying a fix, verify the patched version falls outside the CVE's vulnerable range and flag any regression in the report";
     readonly dispositionPolicy: "Autonomous disposition policy controlling when fixes are auto-applied, held, or escalated";
     readonly dispositionPolicyMinConfidenceForAutoApply: "Minimum patch confidence (0–1) required for auto-apply disposition";
     readonly dispositionPolicyHoldForTransitive: "Hold transitive dependency fixes for human review instead of auto-applying";
     readonly dispositionPolicyEscalateOnSlaBreachSeverities: "CVE severities that trigger escalate disposition on SLA breach";
     readonly dispositionPolicyEscalateOnKev: "Escalate disposition for CVEs with active CISA KEV status";
-    readonly containmentMode: "Block escalation-disposition results from being applied and record containment in evidence";
+    readonly containmentMode: "Roll back applied results whose disposition is hold-for-approval (low confidence, held transitive) so they await approval; urgent escalate fixes (KEV, SLA) are kept";
     readonly campaignMode: "Enable portfolio campaign mode to risk-rank targets before execution";
     readonly escalationGraph: "Optional mapping from unresolved reasons to intended escalation actions";
     readonly offlineIntelligence: "Skip all network calls to intelligence sources. Only local inventory and npm-registry version resolution proceed.";
     readonly intelligenceSnapshotPath: "Path to a local JSON snapshot of pre-fetched CVE intelligence (keyed by CVE ID) used when offline mode is active.";
     readonly proofOfFix: "If true, enforce dual-stage exploit reproduction proof-of-fix verification (assert failure pre-patch, assert pass post-patch)";
     readonly requireProofOfFix: "If true, reject patches and roll back if proof-of-fix verification fails";
-    readonly breakingChangeRefactor: "If true, attempt agentic call-site refactoring when major version upgrades introduce breaking API changes";
+    readonly breakingChangeRefactor: "Experimental: when a major upgrade breaks type checking, rewrite consumer call sites using built-in codemods (currently rimraf and uuid only); reverted if checks still fail";
 };
 export declare function createConstraintSchemaProperties(): Record<string, JsonSchemaProperty>;
 export declare function createRemediateOptionSchemaProperties(options?: {

package/dist/api/options-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options-schema.d.ts","sourceRoot":"","sources":["../../src/api/options-schema.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,eAAO,MAAM,sBAAsB,YAAI,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACtF,eAAO,MAAM,mBAAmB,YAAI,QAAQ,EAAE,OAAO,CAAU,CAAC;AAChE,eAAO,MAAM,wBAAwB,YAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE7F,eAAO,MAAM,mBAAmB;aAC9B,KAAK,EAAE,6BAA6B;aACpC,SAAS,EAAE,0CAA0C;aACrD,GAAG,EAAE,4DAA4D;aACjE,cAAc,EAAE,qDAAqD;aACrE,MAAM,EAAE,yCAAyC;aACjD,OAAO,EAAE,4CAA4C;aACrD,cAAc,EACZ,iGAAiG;aACnG,QAAQ,EAAE,qDAAqD;aAC/D,WAAW,EAAE,sCAAsC;aACnD,KAAK,EAAE,oBAAoB;aAC3B,gBAAgB,EAAE,wDAAwD;aAC1E,qBAAqB,EAAE,6DAA6D;aACpF,2BAA2B,EAAE,mEAAmE;aAChG,iBAAiB,EAAE,uEAAuE;aAC1F,cAAc,EAAE,qDAAqD;aACrE,2BAA2B,EAAE,mEAAmE;aAChG,8BAA8B,EAC5B,sEAAsE;aACxE,4BAA4B,EAC1B,oEAAoE;aACtE,mBAAmB,EAAE,8CAA8C;aACnE,4BAA4B,EAAE,oDAAoD;aAClF,UAAU,EAAE,sDAAsD;aAClE,MAAM,EAAE,yDAAyD;aACjE,SAAS,EAAE,wBAAwB;aACnC,SAAS,EAAE,wBAAwB;aACnC,WAAW,EAAE,2BAA2B;aACxC,cAAc,EAAE,2CAA2C;aAC3D,MAAM,EAAE,kEAAkE;aAC1E,KAAK,EAAE,wCAAwC;aAC/C,MAAM,EAAE,8BAA8B;aACtC,MAAM,EAAE,gCAAgC;aACxC,KAAK,EAAE,yEAAyE;aAChF,QAAQ,EAAE,kEAAkE;aAC5E,sBAAsB,EAAE,kDAAkD;aAC1E,iBAAiB,EACf,iFAAiF;aACnF,WAAW,EAAE,iEAAiE;aAC9E,oBAAoB,EAAE,4DAA4D;aAClF,qBAAqB,EAAE,wDAAwD;aAC/E,SAAS,EAAE,gEAAgE;aAC3E,mBAAmB,EAAE,0EAA0E;aAC/F,qBAAqB,EAAE,yCAAyC;aAChE,qBAAqB,EAAE,iEAAiE;aACxF,uBAAuB,EAAE,sDAAsD;aAC/E,uBAAuB,EAAE,+CAA+C;aACxE,yBAAyB,EAAE,qDAAqD;aAChF,wBAAwB,EAAE,4CAA4C;aACtE,iBAAiB,EAAE,wEAAwE;aAC3F,cAAc,EACZ,sFAAsF;aACxF,YAAY,EACV,kGAAkG;aACpG,aAAa,EACX,oGAAoG;aACtG,gBAAgB,EACd,4GAA4G;aAC9G,QAAQ,EACN,8GAA8G;aAChH,eAAe,EACb,yIAAyI;aAC3I,eAAe,EACb,iIAAiI;aACnI,iBAAiB,EACf,2FAA2F;aAC7F,0CAA0C,EACxC,oEAAoE;aACtE,kCAAkC,EAChC,4EAA4E;aAC9E,8CAA8C,EAC5C,gEAAgE;aAClE,8BAA8B,EAAE,2DAA2D;aAC3F,eAAe,EACb,4FAA4F;aAC9F,YAAY,EAAE,sEAAsE;aACpF,eAAe,EAAE,yEAAyE;aAC1F,mBAAmB,EACjB,mHAAmH;aACrH,wBAAwB,EACtB,mHAAmH;aACrH,UAAU,EACR,+HAA+H;aACjI,iBAAiB,EAAE,0EAA0E;aAC7F,sBAAsB,EACpB,2GAA2G;CACrG,CAAC;AAEX,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA2BrF;AAED,wBAAgB,qCAAqC,CAAC,OAAO,CAAC,EAAE;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAyPrC;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAWrF;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAwCrF;AAED,wBAAgB,0CAA0C,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAQ/F"}
+{"version":3,"file":"options-schema.d.ts","sourceRoot":"","sources":["../../src/api/options-schema.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,eAAO,MAAM,sBAAsB,YAAI,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACtF,eAAO,MAAM,wBAAwB,YAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE7F,eAAO,MAAM,mBAAmB;aAC9B,KAAK,EAAE,6BAA6B;aACpC,SAAS,EAAE,0CAA0C;aACrD,GAAG,EAAE,4DAA4D;aACjE,cAAc,EAAE,qDAAqD;aACrE,MAAM,EAAE,yCAAyC;aACjD,OAAO,EAAE,4CAA4C;aACrD,cAAc,EACZ,iGAAiG;aACnG,QAAQ,EAAE,qDAAqD;aAC/D,KAAK,EACH,sIAAsI;aACxI,2BAA2B,EAAE,mEAAmE;aAChG,8BAA8B,EAC5B,sEAAsE;aACxE,4BAA4B,EAC1B,oEAAoE;aACtE,UAAU,EAAE,sDAAsD;aAClE,MAAM,EAAE,yDAAyD;aACjE,SAAS,EAAE,wBAAwB;aACnC,SAAS,EAAE,wBAAwB;aACnC,WAAW,EAAE,2BAA2B;aACxC,cAAc,EAAE,2CAA2C;aAC3D,MAAM,EAAE,kEAAkE;aAC1E,KAAK,EAAE,wCAAwC;aAC/C,MAAM,EAAE,8BAA8B;aACtC,MAAM,EAAE,gCAAgC;aACxC,KAAK,EAAE,yEAAyE;aAChF,QAAQ,EAAE,kEAAkE;aAC5E,sBAAsB,EAAE,kDAAkD;aAC1E,iBAAiB,EACf,iFAAiF;aACnF,WAAW,EAAE,iEAAiE;aAC9E,oBAAoB,EAAE,4DAA4D;aAClF,qBAAqB,EAAE,wDAAwD;aAC/E,SAAS,EAAE,gEAAgE;aAC3E,mBAAmB,EAAE,0EAA0E;aAC/F,qBAAqB,EAAE,yCAAyC;aAChE,qBAAqB,EAAE,iEAAiE;aACxF,uBAAuB,EAAE,sDAAsD;aAC/E,uBAAuB,EAAE,+CAA+C;aACxE,yBAAyB,EAAE,qDAAqD;aAChF,wBAAwB,EAAE,4CAA4C;aACtE,iBAAiB,EAAE,wEAAwE;aAC3F,cAAc,EACZ,sFAAsF;aACxF,YAAY,EACV,kGAAkG;aACpG,aAAa,EACX,oGAAoG;aACtG,gBAAgB,EACd,4GAA4G;aAC9G,QAAQ,EACN,8GAA8G;aAChH,eAAe,EACb,yIAAyI;aAC3I,iBAAiB,EACf,2FAA2F;aAC7F,0CAA0C,EACxC,oEAAoE;aACtE,kCAAkC,EAChC,4EAA4E;aAC9E,8CAA8C,EAC5C,gEAAgE;aAClE,8BAA8B,EAAE,2DAA2D;aAC3F,eAAe,EACb,sKAAsK;aACxK,YAAY,EAAE,sEAAsE;aACpF,eAAe,EAAE,yEAAyE;aAC1F,mBAAmB,EACjB,mHAAmH;aACrH,wBAAwB,EACtB,mHAAmH;aACrH,UAAU,EACR,+HAA+H;aACjI,iBAAiB,EAAE,0EAA0E;aAC7F,sBAAsB,EACpB,8KAA8K;CACxK,CAAC;AAEX,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA2BrF;AAED,wBAAgB,qCAAqC,CAAC,OAAO,CAAC,EAAE;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAsNrC;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAWrF;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAyCrF;AAED,wBAAgB,0CAA0C,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAQ/F"}

package/dist/api/patches/reconcile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../../src/api/patches/reconcile.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAErB,MAAM,yBAAyB,CAAC;AAGjC;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAuP/B"}
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../../src/api/patches/reconcile.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAErB,MAAM,yBAAyB,CAAC;AAGjC;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA+P/B"}

package/dist/api/remediate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAoBnF,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAsF5B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAuBnF,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAuF5B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}

package/dist/api/remediate-from-scan/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA4B/D,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAmIrB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAkC/D,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAsIrB"}

package/dist/api/remediate-from-scan/report-metrics.d.ts

@@ -1,7 +1,8 @@
 import type { RemediationReport } from "../../platform/types.js";
 export interface ScanLlmUsageTotals {
     llmUsageCount: number;
-    estimatedCostUsd?: number;
+    totalInputTokens?: number;
+    totalOutputTokens?: number;
     totalLlmLatencyMs?: number;
 }
 export declare function aggregateScanLlmUsage(reports: RemediationReport[]): ScanLlmUsageTotals;

package/dist/api/remediate-from-scan/report-metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-metrics.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/report-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAkBtF"}
+{"version":3,"file":"report-metrics.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/report-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAqBtF"}

package/dist/api/remediate.evidence.d.ts

@@ -4,7 +4,7 @@ export declare function createRemediateEvidence(params: {
     cwd: string;
     cveId: string;
     options: RemediateOptions;
-    llmProvider: "remote" | "local";
+    model?: string;
     correlation: {
         requestId?: string;
         sessionId?: string;
@@ -19,7 +19,7 @@ export declare function addRemediateStartStep(params: {
     evidence: EvidenceLog | undefined;
     cveId: string;
     options: RemediateOptions;
-    llmProvider: "remote" | "local";
+    model?: string;
     constraints: {
         directDependenciesOnly?: boolean;
         preferVersionBump?: boolean;

package/dist/api/remediate.evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA+DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA0BN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}
+{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA8DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA0BN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}

package/dist/api/reporting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reporting.d.ts","sourceRoot":"","sources":["../../src/api/reporting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,iBAAiB,EAEjB,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAKhB,iBAAiB,EAEjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AA4C5D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC,GACvE,IAAI,CAQN;AAyJD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,gBAAgB,GAAG,SAAS,CAiC9B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CA+C/B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,iBAAiB,CAkBnB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,GAAG,SAAS,CAUjG;AAMD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,qBAAqB,GAAG,SAAS,CAsBnC;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,sBAAsB,GAAG,SAAS,CAWpC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CAW/B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAS1F;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAuBhG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAuCzD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAErD"}
+{"version":3,"file":"reporting.d.ts","sourceRoot":"","sources":["../../src/api/reporting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,iBAAiB,EAEjB,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAKhB,iBAAiB,EAEjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AA0C5D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC,GACvE,IAAI,CAQN;AA2ID,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,gBAAgB,GAAG,SAAS,CAiC9B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CA+C/B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC,GACpF,iBAAiB,CAkBnB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,GAAG,SAAS,CAUjG;AAMD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,qBAAqB,GAAG,SAAS,CAsBnC;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,sBAAsB,GAAG,SAAS,CAWpC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAAE,GAC3B,iBAAiB,GAAG,SAAS,CAW/B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAS1F;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAuBhG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAwCzD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAErD"}

package/dist/api/update-outdated/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/update-outdated/index.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAEV,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAsHjC,wBAAsB,cAAc,CAClC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAmN/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/update-outdated/index.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAqIjC,wBAAsB,cAAc,CAClC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAmN/B"}

package/dist/api/vex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,WAAW,CAAC;IACjD,aAAa,CAAC,EAAE,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,QAAQ,GAAG,sBAAsB,CAAC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,iCAAiC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;IACF,eAAe,EAAE,yBAAyB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA4DD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,iBAAiB,EACtC,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CA2BtB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,cAAc,EAC3B,WAAW,SAAY,GACtB,IAAI,CA4CN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAe,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,WAAW,CAAC;IACjD,aAAa,CAAC,EAAE,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,QAAQ,GAAG,sBAAsB,CAAC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,iCAAiC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;IACF,eAAe,EAAE,yBAAyB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,iBAAiB,EACtC,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CA2BtB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,cAAc,EAC3B,WAAW,SAAY,GACtB,IAAI,CA4CN"}