autoremediator 0.21.0 → 0.21.2

package/README.md

@@ -1,54 +1,88 @@
-# Autoremediator
+<h1 align="center">Autoremediator</h1>
+
+<p align="center"><strong>Your scanner finds vulnerabilities. Autoremediator fixes them.</strong></p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/autoremediator"><img alt="npm version" src="https://img.shields.io/npm/v/autoremediator?color=cb3837&logo=npm"></a>
+  <a href="https://www.npmjs.com/package/autoremediator"><img alt="npm downloads" src="https://img.shields.io/npm/dm/autoremediator?logo=npm"></a>
+  <a href="https://github.com/Rawlings/autoremediator/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/Rawlings/autoremediator/ci.yml?branch=master&logo=github&label=CI"></a>
+  <a href="https://www.npmjs.com/package/autoremediator"><img alt="node" src="https://img.shields.io/node/v/autoremediator?logo=nodedotjs&logoColor=white"></a>
+  <a href="https://www.npmjs.com/package/autoremediator"><img alt="types" src="https://img.shields.io/npm/types/autoremediator?logo=typescript&logoColor=white"></a>
+  <a href="LICENSE"><img alt="license" src="https://img.shields.io/npm/l/autoremediator"></a>
+  <a href="https://github.com/Rawlings/autoremediator/stargazers"><img alt="GitHub stars" src="https://img.shields.io/github/stars/Rawlings/autoremediator?style=flat&logo=github"></a>
+</p>
+
+<p align="center">
+  <a href="docs/getting-started.md">Getting started</a> ·
+  <a href="docs/how-it-works.md">How it works</a> ·
+  <a href="docs/integrations/github-action.md">GitHub Action</a> ·
+  <a href="docs/README.md">Docs</a>
+</p>
+
+Hand it a CVE or GHSA id, or your scanner's report (package manager audit or SARIF). It works out
+the safest fix, applies it, runs your tests, and rolls back if anything breaks. What it cannot fix,
+it tells you, with the reason.
 
-[![npm version](https://img.shields.io/npm/v/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
-[![license](https://img.shields.io/npm/l/autoremediator.svg)](LICENSE)
-[![node](https://img.shields.io/node/v/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
+```bash
+npx autoremediator --audit --run-tests
+```
 
-Fixes vulnerable npm dependencies. Give it a CVE or GHSA id, or the output of a scanner, and it
-upgrades, overrides or patches the affected packages, verifies the result, and reports exactly what
-it did and what it could not fix.
+## The problem
 
-> [!WARNING]
-> Automated dependency changes carry operational and supply-chain risk. Run with `--dry-run` first,
-> keep CI gates and branch protection in place, and set a [policy](docs/policy.md).
+Scanners and update bots tell you what is wrong, or open a pull request for one bump at a time.
+Turning findings into a safe change is still manual work: which version is actually fixed, is the
+vulnerable package buried three levels deep, will the upgrade break the build, and what do you do
+when no fixed version exists? Findings pile up, and the one being exploited in the wild waits in the
+same queue as the rest.
 
-```bash
-npx autoremediator CVE-2021-23337 --dry-run     # preview
-npx autoremediator CVE-2021-23337 --run-tests   # apply and verify
-npx autoremediator --audit                      # remediate whatever `npm audit` reports
-```
+## What it does for each vulnerable package
 
-Requires Node.js 26+.
+| Situation | What Autoremediator does |
+| --------- | ------------------------ |
+| A fixed version exists | Bumps to the **lowest** safe version, keeping the change small |
+| The package is transitive | Pins the fix with your package manager's own `overrides` or `resolutions` |
+| No fixed version exists | Generates a reviewable `.patch` file, if you configure a model |
+| It cannot be fixed safely | Leaves your code alone and reports exactly why |
 
-## What it does
+Every change is installed, tested if you ask, and **rolled back on failure**. Nothing is reported as
+fixed that was not verified.
 
-For each installed package in a vulnerable range, it tries, in order:
+## Why you can rely on it
 
-1. a **version bump** to the lowest safe version;
-2. a **package-manager override** when the package is transitive;
-3. a **generated patch**, only when no safe version exists and you have configured a model.
+- **Verified, not hopeful.** Install, tests, type check and an optional proof-of-fix run before a
+  change is kept.
+- **Honest reports.** Unfixed findings carry a machine-readable reason, never a silent skip.
+- **Exploit-aware.** CISA KEV and EPSS signals and your SLA windows decide what is urgent.
+- **You set the autonomy.** A [policy file](docs/reference/policy-file.md) controls what may change.
+  Each result is applied, held for approval or escalated.
+- **The model is optional and boxed in.** It is used only to draft patches when no fix exists. Its
+  output is syntax-checked and confidence-gated, and its tests are never run.
+- **Deterministic everywhere else.** The same input gives the same plan, and `--offline` runs from a
+  local advisory snapshot.
 
-Every change is installed, optionally tested and type-checked, and rolled back if anything fails.
-Unfixed findings are reported with an explicit reason, never dropped.
+## Run it where you work
 
-Advisories come from OSV, the GitHub Advisory Database and NVD; CISA KEV and EPSS add exploit
-signals. A [policy file](docs/policy.md) controls which packages may change, how confident a patch
-must be, and whether a result is applied automatically, held for approval, or escalated.
+| | |
+| --- | --- |
+| **CLI and [SDK](docs/reference/sdk.md)** | Local runs, scripts, pipelines |
+| **[GitHub Action](docs/integrations/github-action.md)** | A nightly pull request that fixes what audit finds |
+| **[GitHub App](docs/integrations/github-app.md)** | Remediation across every repository you install it on |
+| **[MCP server](docs/integrations/mcp-server.md)** | Give your editor or agent a safe way to fix dependencies |
+| **[HTTP server](docs/integrations/http-server.md)** | Call it from internal services |
+| **[VS Code](packages/vscode-extension/README.md)** | Findings and one-click fixes in `package.json` |
 
-## Ways to run it
+Works with npm, pnpm, Yarn, Bun and Deno projects. Requires Node.js 26 or later.
 
-CLI · SDK · [GitHub Action](docs/integrations.md#github-action) ·
-[GitHub App](docs/integrations.md#github-app) · [MCP server](docs/integrations.md#mcp-server) ·
-[HTTP server](docs/integrations.md#http-server)
+> [!WARNING]
+> Automated dependency changes carry operational and supply-chain risk. Start with `--dry-run`, keep
+> CI and branch protection in place, and set a policy. See [Safety](docs/safety.md).
 
-## Documentation
+## Learn more
 
-- [Usage](docs/usage.md): commands, how fixes are chosen, scanner inputs, SDK
-- [Policy and safety](docs/policy.md): the policy file and the guarantees
-- [Integrations](docs/integrations.md): Action, MCP, HTTP, GitHub App
-- [Architecture](docs/architecture.md) and [Contributing](CONTRIBUTING.md)
-- [AGENTS.md](AGENTS.md), [llms.txt](llms.txt): machine-readable summaries
+[Getting started](docs/getting-started.md) · [How it works](docs/how-it-works.md) ·
+[CLI](docs/reference/cli.md) · [All documentation](docs/README.md) ·
+[Contributing](CONTRIBUTING.md)
 
 ## License
 
-MIT
+[MIT](LICENSE)

package/dist/api/change-request/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvC,GAAG,IAAI,CAMP;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAehE;AA2ED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA0JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvC,GAAG,IAAI,CAMP;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAehE;AAuED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA4JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}

package/dist/api/change-request/index.js

@@ -0,0 +1,404 @@
+import { randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { safeExeca } from "../../platform/safe-exec.js";
+import { trimChar } from "../../platform/trim.js";
+/**
+ * Change requests commit and push, so they must never run for dry-run/preview/plan flows.
+ * Enforced here (not only in the CLI) so SDK, MCP and HTTP callers get the same guarantee.
+ */
+export function assertChangeRequestAllowed(options) {
+    if (options.changeRequest?.enabled && (options.dryRun || options.preview)) {
+        throw new Error("changeRequest cannot be combined with dryRun/preview (or planRemediation): change requests commit and push.");
+    }
+}
+/**
+ * Remove option fields that redirect credentials or API traffic. These are host configuration,
+ * never something an untrusted MCP/HTTP caller may set. Walks nested objects (e.g. portfolio targets).
+ */
+export function stripUntrustedChangeRequestFields(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => stripUntrustedChangeRequestFields(entry));
+    }
+    if (typeof value !== "object" || value === null)
+        return value;
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (key === "changeRequest" && typeof entry === "object" && entry !== null) {
+            const { tokenEnvVar: _t, githubApiUrl: _u, ...rest } = entry;
+            out[key] = rest;
+        }
+        else {
+            out[key] = stripUntrustedChangeRequestFields(entry);
+        }
+    }
+    return out;
+}
+async function stageRunChanges(cwd, reports) {
+    // Stage modifications to tracked files only; never sweep up unrelated untracked files.
+    await safeExeca("git", ["add", "-u"], { cwd, stdio: "pipe" });
+    // New artifacts the run itself produced (generated patch files) are staged explicitly.
+    const produced = new Set();
+    for (const report of reports) {
+        for (const result of report.results) {
+            if (!result.patchFilePath)
+                continue;
+            const abs = isAbsolute(result.patchFilePath)
+                ? result.patchFilePath
+                : resolve(cwd, result.patchFilePath);
+            const rel = relative(cwd, abs);
+            if (rel.startsWith("..") || isAbsolute(rel) || !existsSync(abs))
+                continue;
+            produced.add(rel);
+        }
+    }
+    if (produced.size > 0) {
+        await safeExeca("git", ["add", "--", ...produced], { cwd, stdio: "pipe" });
+    }
+}
+function sanitizeBranchToken(value) {
+    return trimChar(value.toLowerCase().replaceAll(/[^a-z0-9._/-]+/g, "-"), "-").slice(0, 80);
+}
+function buildPlan(reports) {
+    const cveIds = [...new Set(reports.map((report) => report.cveId))];
+    const packageNames = [
+        ...new Set(reports.flatMap((report) => report.results.map((result) => result.packageName))),
+    ];
+    const titleSuffix = cveIds.length === 1 ? cveIds[0] : `${cveIds.length} CVEs`;
+    const title = `security remediation: ${titleSuffix}`;
+    const body = [
+        "Automated remediation generated by autoremediator.",
+        "",
+        `CVEs: ${cveIds.join(", ")}`,
+        `Packages: ${packageNames.join(", ")}`,
+    ].join("\n");
+    return {
+        cveIds,
+        packageNames,
+        title,
+        body,
+    };
+}
+function resolveProvider(options) {
+    return options.provider ?? "github";
+}
+function resolveGrouping(options) {
+    const allowed = ["all", "per-cve", "per-package", "by-severity"];
+    if (options.grouping && !allowed.includes(options.grouping)) {
+        throw new Error(`Unsupported changeRequest.grouping: "${options.grouping}". Supported values: ${allowed.join(", ")}`);
+    }
+    return options.grouping ?? "all";
+}
+export function groupReports(reports, grouping) {
+    if (reports.length === 0)
+        return [];
+    if (grouping === "all") {
+        return [reports];
+    }
+    if (grouping === "per-cve") {
+        const map = new Map();
+        for (const report of reports) {
+            const key = report.cveId.toUpperCase();
+            const list = map.get(key) ?? [];
+            list.push(report);
+            map.set(key, list);
+        }
+        return [...map.values()];
+    }
+    if (grouping === "per-package") {
+        const map = new Map();
+        for (const report of reports) {
+            const pkgs = new Set(report.results.map((r) => r.packageName));
+            if (pkgs.size === 0) {
+                const list = map.get("misc") ?? [];
+                list.push(report);
+                map.set("misc", list);
+            }
+            else {
+                for (const pkg of pkgs) {
+                    const list = map.get(pkg) ?? [];
+                    list.push(report);
+                    map.set(pkg, list);
+                }
+            }
+        }
+        return [...map.values()];
+    }
+    if (grouping === "by-severity") {
+        const map = new Map();
+        for (const report of reports) {
+            const sev = report.cveDetails?.severity ?? "UNKNOWN";
+            const list = map.get(sev) ?? [];
+            list.push(report);
+            map.set(sev, list);
+        }
+        return [...map.values()];
+    }
+    return [reports];
+}
+async function detectCurrentBranch(cwd) {
+    const result = await safeExeca("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+        cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim();
+}
+async function ensureRepoHasChanges(cwd) {
+    const diff = await safeExeca("git", ["status", "--porcelain"], {
+        cwd,
+        stdio: "pipe",
+    });
+    return diff.stdout.trim().length > 0;
+}
+function toBranchName(prefix, cveIds) {
+    const token = sanitizeBranchToken(cveIds.join("-") || "remediation");
+    return `${sanitizeBranchToken(prefix)}/${token}-${randomBytes(6).toString("hex")}`;
+}
+async function detectRepoFromRemote(cwd) {
+    const result = await safeExeca("git", ["config", "--get", "remote.origin.url"], {
+        cwd,
+        stdio: "pipe",
+    }).catch(() => ({ stdout: "" }));
+    const url = result.stdout.trim();
+    const match = /[:/]([^/]+)\/([^/]+?)(?:\.git)?$/.exec(url);
+    if (match) {
+        return `${match[1]}/${match[2]}`;
+    }
+    return undefined;
+}
+async function ensureRepoHasStagedChanges(cwd) {
+    const result = await safeExeca("git", ["diff", "--cached", "--name-only"], {
+        cwd,
+        stdio: "pipe",
+    }).catch(() => ({ stdout: "" }));
+    return result.stdout.trim().length > 0;
+}
+async function createGitHubRequest(params) {
+    const token = params.token ?? process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
+    let repository = params.repository;
+    if (!repository) {
+        repository = await detectRepoFromRemote(params.cwd);
+    }
+    if (token && repository) {
+        const [owner, repo] = repository.split("/");
+        const baseUrl = (params.githubApiUrl ? trimChar(params.githubApiUrl, "/", "end") : undefined) ||
+            "https://api.github.com";
+        const endpoint = `${baseUrl}/repos/${owner}/${repo}/pulls`;
+        const response = await fetch(endpoint, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept: "application/vnd.github+json",
+                "content-type": "application/json",
+                "user-agent": "autoremediator",
+                "x-github-api-version": "2022-11-28",
+            },
+            body: JSON.stringify({
+                title: params.title,
+                head: params.head,
+                base: params.base,
+                body: params.body,
+                draft: Boolean(params.draft),
+            }),
+        });
+        if (!response.ok) {
+            const errText = await response.text().catch(() => "");
+            throw new Error(`GitHub API create pull request failed (${response.status}): ${errText}`);
+        }
+        const data = (await response.json());
+        return data.html_url || undefined;
+    }
+    const args = [
+        "pr",
+        "create",
+        "--head",
+        params.head,
+        "--base",
+        params.base,
+        "--title",
+        params.title,
+        "--body",
+        params.body,
+    ];
+    if (params.repository) {
+        args.push("--repo", params.repository);
+    }
+    if (params.draft) {
+        args.push("--draft");
+    }
+    const result = await safeExeca("gh", args, {
+        cwd: params.cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim() || undefined;
+}
+async function createGitLabRequest(params) {
+    const args = [
+        "mr",
+        "create",
+        "--source-branch",
+        params.source,
+        "--target-branch",
+        params.target,
+        "--title",
+        params.title,
+        "--description",
+        params.body,
+    ];
+    if (params.repository) {
+        args.push("-R", params.repository);
+    }
+    if (params.draft) {
+        args.push("--draft");
+    }
+    const result = await safeExeca("glab", args, {
+        cwd: params.cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim() || undefined;
+}
+export async function createChangeRequestsForReports(params) {
+    const { cwd, options, reports } = params;
+    const provider = resolveProvider(options);
+    const grouping = resolveGrouping(options);
+    const groups = groupReports(reports, grouping);
+    if (groups.length === 0) {
+        return [];
+    }
+    const results = [];
+    const token = options.token ??
+        (options.tokenEnvVar ? process.env[options.tokenEnvVar] : undefined) ??
+        process.env.GITHUB_TOKEN ??
+        process.env.GH_TOKEN;
+    const baseBranch = options.baseBranch ?? (await detectCurrentBranch(cwd).catch(() => "main"));
+    const branchPrefix = options.branchPrefix ?? "autoremediator";
+    const pushRemote = options.pushRemote ?? "origin";
+    if (options.pushRemote && !/^[a-zA-Z0-9._-]+$/.test(options.pushRemote)) {
+        throw new Error(`Invalid pushRemote value: ${options.pushRemote}`);
+    }
+    if (options.repository && !/^[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+$/.test(options.repository)) {
+        throw new Error(`Invalid repository format: ${options.repository}`);
+    }
+    for (const group of groups) {
+        const plan = buildPlan(group);
+        const titlePrefix = options.titlePrefix?.trim().slice(0, 200);
+        const bodyFooter = options.bodyFooter ? options.bodyFooter.slice(0, 2000) : undefined;
+        const title = titlePrefix ? `${titlePrefix} ${plan.title}` : plan.title;
+        const body = bodyFooter ? `${plan.body}\n\n${bodyFooter}` : plan.body;
+        const hasChanges = await ensureRepoHasChanges(cwd).catch(() => false);
+        if (!hasChanges) {
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName: "",
+                title,
+                body,
+                created: false,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+                error: "No repository changes to include in change request.",
+            });
+            continue;
+        }
+        const branchName = toBranchName(branchPrefix, plan.cveIds);
+        let branchCreated = false;
+        try {
+            await safeExeca("git", ["checkout", "-b", branchName], { cwd, stdio: "pipe" });
+            branchCreated = true;
+            await stageRunChanges(cwd, group);
+            const hasStaged = await ensureRepoHasStagedChanges(cwd);
+            if (!hasStaged) {
+                results.push({
+                    provider,
+                    grouping,
+                    repository: options.repository,
+                    branchName: "",
+                    title,
+                    body,
+                    created: false,
+                    cveIds: plan.cveIds,
+                    packageNames: plan.packageNames,
+                    error: "No repository changes to include in change request.",
+                });
+                continue;
+            }
+            await safeExeca("git", [
+                "-c",
+                "user.name=autoremediator[bot]",
+                "-c",
+                "user.email=41898282+github-actions[bot]@users.noreply.github.com",
+                "commit",
+                "-m",
+                title,
+            ], { cwd, stdio: "pipe" });
+            const pushArgs = token
+                ? [
+                    "-c",
+                    `http.extraheader=AUTHORIZATION: basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`,
+                    "push",
+                    "-u",
+                    pushRemote,
+                    branchName,
+                ]
+                : ["push", "-u", pushRemote, branchName];
+            await safeExeca("git", pushArgs, { cwd, stdio: "pipe" });
+            const url = provider === "github"
+                ? await createGitHubRequest({
+                    cwd,
+                    repository: options.repository,
+                    head: branchName,
+                    base: baseBranch,
+                    title,
+                    body,
+                    draft: options.draft,
+                    token,
+                    githubApiUrl: options.githubApiUrl,
+                })
+                : await createGitLabRequest({
+                    cwd,
+                    repository: options.repository,
+                    source: branchName,
+                    target: baseBranch,
+                    title,
+                    body,
+                    draft: options.draft,
+                });
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName,
+                title,
+                body,
+                created: true,
+                draft: options.draft,
+                url,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+            });
+        }
+        catch (error) {
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName: "",
+                title,
+                body,
+                created: false,
+                draft: options.draft,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        finally {
+            if (branchCreated) {
+                await safeExeca("git", ["checkout", baseBranch], { cwd, stdio: "pipe" }).catch(() => { });
+            }
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/change-request/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAQlD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAI,KAAQ;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAiB,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,KAAK,eAAe,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3E,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAgC,CAAC;YACxF,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAA4B;IACtE,uFAAuF;IACvF,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,uFAAuF;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,SAAS;YACpC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC1C,CAAC,CAAC,MAAM,CAAC,aAAa;gBACtB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AASD,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,OAA4B;IAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;KAC5F,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC;IAC/E,MAAM,KAAK,GAAG,yBAAyB,WAAW,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG;QACX,oDAAoD;QACpD,EAAE;QACF,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,aAAa,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,MAAM;QACN,YAAY;QACZ,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,OAAO,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,MAAM,OAAO,GAA4B,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,QAAQ,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA4B,EAC5B,QAA+B;IAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,QAAQ,IAAI,SAAS,CAAC;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;QAC3E,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC7D,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAgB;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC;IACrE,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;QAC9E,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAAW;IACnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE;QACzE,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAUlC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAE/E,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,wBAAwB,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,OAAO,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,6BAA6B;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,gBAAgB;gBAC9B,sBAAsB,EAAE,YAAY;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,MAAM,CAAC,IAAI;QACX,QAAQ;QACR,MAAM,CAAC,IAAI;QACX,SAAS;QACT,MAAM,CAAC,KAAK;QACZ,QAAQ;QACR,MAAM,CAAC,IAAI;KACZ,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAQlC;IACC,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,QAAQ;QACR,iBAAiB;QACjB,MAAM,CAAC,MAAM;QACb,iBAAiB;QACjB,MAAM,CAAC,MAAM;QACb,SAAS;QACT,MAAM,CAAC,KAAK;QACZ,eAAe;QACf,MAAM,CAAC,IAAI;KACZ,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;QAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,MAIpD;IACC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;IAClD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAEtE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,EAAE;gBACd,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,qDAAqD;aAC7D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAElC,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,EAAE;oBACd,KAAK;oBACL,IAAI;oBACJ,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,KAAK,EAAE,qDAAqD;iBAC7D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,SAAS,CACb,KAAK,EACL;gBACE,IAAI;gBACJ,+BAA+B;gBAC/B,IAAI;gBACJ,kEAAkE;gBAClE,QAAQ;gBACR,IAAI;gBACJ,KAAK;aACN,EACD,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CACvB,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK;gBACpB,CAAC,CAAC;oBACE,IAAI;oBACJ,yCAAyC,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBACpG,MAAM;oBACN,IAAI;oBACJ,UAAU;oBACV,UAAU;iBACX;gBACH,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAEzD,MAAM,GAAG,GACP,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,MAAM,mBAAmB,CAAC;oBACxB,GAAG;oBACH,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,UAAU;oBAChB,KAAK;oBACL,IAAI;oBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,KAAK;oBACL,YAAY,EAAE,OAAO,CAAC,YAAY;iBACnC,CAAC;gBACJ,CAAC,CAAC,MAAM,mBAAmB,CAAC;oBACxB,GAAG;oBACH,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,UAAU;oBAClB,KAAK;oBACL,IAAI;oBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC,CAAC;YAET,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,EAAE;gBACd,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/api/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAO9B,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,GACxB,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,GAAG,kBAAkB,CAMtE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAKrF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,sBAAsB,CA8BjG"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAM9B,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,GACxB,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,GAAG,kBAAkB,CAMtE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAKrF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,sBAAsB,CA8BjG"}

package/dist/api/context.js

@@ -0,0 +1,41 @@
+import { loadPolicy } from "../platform/policy.js";
+function buildRequestId() {
+    return `req-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+export function resolveCorrelationContext(options) {
+    return {
+        requestId: options.requestId ?? buildRequestId(),
+        sessionId: options.sessionId,
+        parentRunId: options.parentRunId,
+    };
+}
+export function resolveProvenanceContext(options) {
+    return {
+        actor: options.actor,
+        source: options.source ?? "sdk",
+    };
+}
+export function resolveConstraints(options, cwd) {
+    const policy = loadPolicy(cwd, options.policy);
+    return {
+        directDependenciesOnly: options.constraints?.directDependenciesOnly ??
+            policy.constraints?.directDependenciesOnly ??
+            false,
+        preferVersionBump: options.constraints?.preferVersionBump ?? policy.constraints?.preferVersionBump ?? false,
+        installMode: options.constraints?.installMode ?? policy.constraints?.installMode ?? "deterministic",
+        installPreferOffline: options.constraints?.installPreferOffline ?? policy.constraints?.installPreferOffline,
+        enforceFrozenLockfile: options.constraints?.enforceFrozenLockfile ?? policy.constraints?.enforceFrozenLockfile,
+        workspace: options.constraints?.workspace ?? policy.constraints?.workspace,
+        typecheck: options.typecheck ?? options.constraints?.typecheck ?? policy.constraints?.typecheck,
+        requireProofOfFix: options.requireProofOfFix ??
+            options.constraints?.requireProofOfFix ??
+            policy.constraints?.requireProofOfFix,
+        enableBreakingChangeRefactor: options.breakingChangeRefactor ??
+            options.constraints?.enableBreakingChangeRefactor ??
+            policy.constraints?.enableBreakingChangeRefactor,
+        supplyChainPolicy: options.supplyChainPolicy ??
+            options.constraints?.supplyChainPolicy ??
+            policy.constraints?.supplyChainPolicy,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/api/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAQnD,SAAS,cAAc;IACrB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAyB;IAEzB,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAyB;IAChE,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAW;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO;QACL,sBAAsB,EACpB,OAAO,CAAC,WAAW,EAAE,sBAAsB;YAC3C,MAAM,CAAC,WAAW,EAAE,sBAAsB;YAC1C,KAAK;QACP,iBAAiB,EACf,OAAO,CAAC,WAAW,EAAE,iBAAiB,IAAI,MAAM,CAAC,WAAW,EAAE,iBAAiB,IAAI,KAAK;QAC1F,WAAW,EACT,OAAO,CAAC,WAAW,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,eAAe;QACxF,oBAAoB,EAClB,OAAO,CAAC,WAAW,EAAE,oBAAoB,IAAI,MAAM,CAAC,WAAW,EAAE,oBAAoB;QACvF,qBAAqB,EACnB,OAAO,CAAC,WAAW,EAAE,qBAAqB,IAAI,MAAM,CAAC,WAAW,EAAE,qBAAqB;QACzF,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,SAAS;QAC1E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,SAAS;QAC/F,iBAAiB,EACf,OAAO,CAAC,iBAAiB;YACzB,OAAO,CAAC,WAAW,EAAE,iBAAiB;YACtC,MAAM,CAAC,WAAW,EAAE,iBAAiB;QACvC,4BAA4B,EAC1B,OAAO,CAAC,sBAAsB;YAC9B,OAAO,CAAC,WAAW,EAAE,4BAA4B;YACjD,MAAM,CAAC,WAAW,EAAE,4BAA4B;QAClD,iBAAiB,EACf,OAAO,CAAC,iBAAiB;YACzB,OAAO,CAAC,WAAW,EAAE,iBAAiB;YACtC,MAAM,CAAC,WAAW,EAAE,iBAAiB;KACxC,CAAC;AACJ,CAAC"}

package/dist/api/contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/api/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/api/contracts.ts"],"names":[],"mappings":""}

package/dist/api/delta-scan/index.js

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: scanDelta
+ */
+export { scanDelta } from "../../scanner/delta-scan.js";
+//# sourceMappingURL=index.js.map

package/dist/api/delta-scan/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/delta-scan/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/api/evaluate/index.js

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: evaluatePackage
+ */
+export { evaluatePackage } from "../../remediation/evaluate-package.js";
+//# sourceMappingURL=index.js.map

package/dist/api/evaluate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/evaluate/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC"}