autoremediator 0.21.0 → 0.21.2

package/dist/api/index.js

@@ -0,0 +1,16 @@
+export { PACKAGE_MANAGER_VALUES, PROVENANCE_SOURCE_VALUES, OPTION_DESCRIPTIONS, createConstraintSchemaProperties, createRemediateOptionSchemaProperties, createScanOptionSchemaProperties, createScanReportSchemaProperties, createUpdateOutdatedOptionSchemaProperties, } from "./options-schema.js";
+export { toCiSummary, ciExitCode, buildSlaBreachSummary, buildStrategyCounts, buildDependencyScopeCounts, } from "./reporting.js";
+export { toSarifOutput } from "./sarif.js";
+export { toCycloneDxVex, } from "./vex/index.js";
+export { inspectPatchArtifact, listPatchArtifacts, validatePatchArtifact, reconcilePatchArtifacts, } from "./patches/index.js";
+export { createLlmPatchGenerator } from "../remediation/patch/llm-generator.js";
+export { resolveLanguageModel } from "../remediation/patch/model.js";
+export { remediatePortfolio } from "./portfolio/index.js";
+export { remediate, planRemediation } from "./remediate/index.js";
+export { remediateFromScan } from "./remediate-from-scan/index.js";
+export { updateOutdated } from "./update-outdated/index.js";
+export { checkReachability } from "./reachability/index.js";
+export { evaluatePackage } from "./evaluate/index.js";
+export { scanDelta } from "./delta-scan/index.js";
+export { submitRemediateJob, submitScanJob, submitPortfolioJob, pollJob, } from "./jobs/index.js";
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAiFA,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,qCAAqC,EACrC,gCAAgC,EAChC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAoB,MAAM,YAAY,CAAC;AAC7D,OAAO,EACL,cAAc,GAKf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,OAAO,GAIR,MAAM,iBAAiB,CAAC"}

package/dist/api/jobs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/jobs/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK/D,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG;IAC3E,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,eAAe,CAAC;CAC3D,CAAC;AA4BF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAIvF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAIjF;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EAAE,EAC1B,OAAO,CAAC,EAAE,gBAAgB,GACzB,SAAS,CAIX;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAM/D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/jobs/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK/D,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG;IAC3E,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,eAAe,CAAC;CAC3D,CAAC;AA8BF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAIvF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAIjF;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EAAE,EAC1B,OAAO,CAAC,EAAE,gBAAgB,GACzB,SAAS,CAIX;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAM/D"}

package/dist/api/jobs/index.js

@@ -0,0 +1,54 @@
+import { randomUUID } from "node:crypto";
+import { jobRegistry } from "../../platform/jobs.js";
+import { remediatePortfolio } from "../portfolio/index.js";
+import { remediateFromScan } from "../remediate-from-scan/index.js";
+import { remediate } from "../remediate/index.js";
+function createJob() {
+    const jobId = randomUUID();
+    const submittedAt = new Date().toISOString();
+    const job = { jobId, status: "pending", submittedAt };
+    jobRegistry.set(jobId, job);
+    return job;
+}
+async function executeJob(job, work) {
+    // Yield first so callers observe the "pending" status before the work starts.
+    await Promise.resolve();
+    try {
+        job.status = "running";
+        const result = await work();
+        job.status = "done";
+        job.result = result;
+        job.completedAt = new Date().toISOString();
+    }
+    catch (error) {
+        job.status = "failed";
+        job.error = error instanceof Error ? error.message : String(error);
+        job.completedAt = new Date().toISOString();
+    }
+}
+function runJobAsync(job, work) {
+    void executeJob(job, work);
+}
+export function submitRemediateJob(cveId, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediate(cveId, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function submitScanJob(inputPath, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediateFromScan(inputPath, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function submitPortfolioJob(targets, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediatePortfolio(targets, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function pollJob(jobId) {
+    const job = jobRegistry.get(jobId);
+    if (!job) {
+        throw new Error(`Job not found: ${jobId}`);
+    }
+    return job;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AASrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAQlD,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC3E,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAwB,EAAE,IAA4B;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,GAAG,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAwB,EAAE,IAA4B;IACzE,KAAK,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAA0B;IAC1E,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAqB;IACpE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAA+B,CAAC;AACzC,CAAC"}

package/dist/api/options-schema.js

@@ -0,0 +1,367 @@
+export const PACKAGE_MANAGER_VALUES = ["npm", "pnpm", "yarn", "bun", "deno"];
+export const PROVENANCE_SOURCE_VALUES = ["cli", "sdk", "mcp", "openapi", "unknown"];
+export const OPTION_DESCRIPTIONS = {
+    cveId: "CVE ID, e.g. CVE-2021-23337",
+    inputPath: "Absolute path to the scanner output file",
+    cwd: "Absolute path to the project root (default: process.cwd())",
+    packageManager: "Package manager override (auto-detected by default)",
+    dryRun: "If true, plan changes but write nothing",
+    preview: "If true, enforce non-mutating preview mode",
+    simulationMode: "If true, attach deterministic simulation and rebuttal metadata for dry-run or preview execution",
+    runTests: "Run package-manager test command after applying fix",
+    model: 'Language model for the patch fallback as "<provider>:<model-id>", e.g. "anthropic:claude-sonnet-5-5" (default: AUTOREMEDIATOR_MODEL)',
+    patchConfidenceThresholdLow: "Patch acceptance confidence threshold for low-risk patches (0..1)",
+    patchConfidenceThresholdMedium: "Patch acceptance confidence threshold for medium-risk patches (0..1)",
+    patchConfidenceThresholdHigh: "Patch acceptance confidence threshold for high-risk patches (0..1)",
+    patchesDir: "Directory to write .patch files (default: ./patches)",
+    policy: "Optional path to .github/autoremediator.yml policy file",
+    requestId: "Request correlation ID",
+    sessionId: "Session correlation ID",
+    parentRunId: "Parent run correlation ID",
+    idempotencyKey: "Idempotency key for replay-safe execution",
+    resume: "Return cached result for matching idempotency key when available",
+    actor: "Actor identity for evidence provenance",
+    source: "Source system for provenance",
+    format: "Scanner format (default: auto)",
+    audit: "Run package-manager-native audit command instead of reading a scan file",
+    evidence: "Write evidence JSON to .autoremediator/evidence/ (default: true)",
+    directDependenciesOnly: "Restrict remediation to direct dependencies only",
+    preferVersionBump: "Reject override and patch remediation when version-bump-only policy is required",
+    installMode: "Install behavior profile: deterministic|prefer-offline|standard",
+    installPreferOffline: "Override prefer-offline flag behavior for install commands",
+    enforceFrozenLockfile: "Override frozen lockfile behavior for install commands",
+    workspace: "Workspace/package selector for scoped remediation in monorepos",
+    createChangeRequest: "Enable creation of native pull request / merge request after remediation",
+    changeRequestProvider: "Change request provider (github|gitlab)",
+    changeRequestGrouping: "Grouping strategy for change requests (all|per-cve|per-package)",
+    changeRequestRepository: "Repository slug override for change request creation",
+    changeRequestBaseBranch: "Base branch used for change request targeting",
+    changeRequestBranchPrefix: "Branch prefix for generated change request branches",
+    changeRequestTitlePrefix: "Title prefix for generated change requests",
+    includeTransitive: "Include transitive dependencies in the outdated check. Default: false.",
+    updateOutdated: "Run in update-outdated mode: bump all outdated npm packages without requiring a CVE.",
+    kevMandatory: "If true, CVEs with active CISA KEV status bypass severity filtering and are treated as mandatory",
+    epssThreshold: "EPSS probability threshold (0..1) above which a CVE is treated as mandatory regardless of severity",
+    suppressionsFile: "Path to a YAML file containing additional VEX suppression entries to merge with policy-inline suppressions",
+    slaCheck: "Compare CVE publication dates against configured SLA windows and include breach records in the report output",
+    skipUnreachable: "Skip remediation for CVEs where the vulnerable package cannot be reached from any project entry point (requires static import analysis)",
+    dispositionPolicy: "Autonomous disposition policy controlling when fixes are auto-applied, held, or escalated",
+    dispositionPolicyMinConfidenceForAutoApply: "Minimum patch confidence (0–1) required for auto-apply disposition",
+    dispositionPolicyHoldForTransitive: "Hold transitive dependency fixes for human review instead of auto-applying",
+    dispositionPolicyEscalateOnSlaBreachSeverities: "CVE severities that trigger escalate disposition on SLA breach",
+    dispositionPolicyEscalateOnKev: "Escalate disposition for CVEs with active CISA KEV status",
+    containmentMode: "Roll back applied results whose disposition is hold-for-approval (low confidence, held transitive) so they await approval; urgent escalate fixes (KEV, SLA) are kept",
+    campaignMode: "Enable portfolio campaign mode to risk-rank targets before execution",
+    escalationGraph: "Optional mapping from unresolved reasons to intended escalation actions",
+    offlineIntelligence: "Skip all network calls to intelligence sources. Only local inventory and npm-registry version resolution proceed.",
+    intelligenceSnapshotPath: "Path to a local JSON snapshot of pre-fetched CVE intelligence (keyed by CVE ID) used when offline mode is active.",
+    proofOfFix: "If true, enforce dual-stage exploit reproduction proof-of-fix verification (assert failure pre-patch, assert pass post-patch)",
+    requireProofOfFix: "If true, reject patches and roll back if proof-of-fix verification fails",
+    breakingChangeRefactor: "Experimental: when a major upgrade breaks type checking, rewrite consumer call sites using built-in codemods (currently rimraf and uuid only); reverted if checks still fail",
+};
+export function createConstraintSchemaProperties() {
+    return {
+        directDependenciesOnly: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.directDependenciesOnly,
+        },
+        preferVersionBump: { type: "boolean", description: OPTION_DESCRIPTIONS.preferVersionBump },
+        installMode: {
+            type: "string",
+            enum: ["deterministic", "prefer-offline", "standard"],
+            description: OPTION_DESCRIPTIONS.installMode,
+        },
+        installPreferOffline: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.installPreferOffline,
+        },
+        enforceFrozenLockfile: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.enforceFrozenLockfile,
+        },
+        workspace: { type: "string", description: OPTION_DESCRIPTIONS.workspace },
+        requireProofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.requireProofOfFix },
+        enableBreakingChangeRefactor: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.breakingChangeRefactor,
+        },
+    };
+}
+export function createRemediateOptionSchemaProperties(options) {
+    const includeDryRun = options?.includeDryRun ?? true;
+    const includePreview = options?.includePreview ?? true;
+    const includeSimulationMode = options?.includeSimulationMode ?? true;
+    const includeEvidence = options?.includeEvidence ?? true;
+    return {
+        cwd: { type: "string", description: OPTION_DESCRIPTIONS.cwd },
+        packageManager: {
+            type: "string",
+            enum: [...PACKAGE_MANAGER_VALUES],
+            description: OPTION_DESCRIPTIONS.packageManager,
+        },
+        ...(includeDryRun
+            ? { dryRun: { type: "boolean", description: OPTION_DESCRIPTIONS.dryRun } }
+            : {}),
+        ...(includePreview
+            ? { preview: { type: "boolean", description: OPTION_DESCRIPTIONS.preview } }
+            : {}),
+        ...(includeSimulationMode
+            ? { simulationMode: { type: "boolean", description: OPTION_DESCRIPTIONS.simulationMode } }
+            : {}),
+        runTests: { type: "boolean", description: OPTION_DESCRIPTIONS.runTests },
+        model: { type: "string", description: OPTION_DESCRIPTIONS.model },
+        patchConfidenceThresholds: {
+            type: "object",
+            properties: {
+                low: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdLow,
+                },
+                medium: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdMedium,
+                },
+                high: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdHigh,
+                },
+            },
+        },
+        patchesDir: { type: "string", description: OPTION_DESCRIPTIONS.patchesDir },
+        policy: { type: "string", description: OPTION_DESCRIPTIONS.policy },
+        ...(includeEvidence
+            ? { evidence: { type: "boolean", description: OPTION_DESCRIPTIONS.evidence } }
+            : {}),
+        requestId: { type: "string", description: OPTION_DESCRIPTIONS.requestId },
+        sessionId: { type: "string", description: OPTION_DESCRIPTIONS.sessionId },
+        parentRunId: { type: "string", description: OPTION_DESCRIPTIONS.parentRunId },
+        idempotencyKey: { type: "string", description: OPTION_DESCRIPTIONS.idempotencyKey },
+        resume: { type: "boolean", description: OPTION_DESCRIPTIONS.resume },
+        actor: { type: "string", description: OPTION_DESCRIPTIONS.actor },
+        source: {
+            type: "string",
+            enum: [...PROVENANCE_SOURCE_VALUES],
+            description: OPTION_DESCRIPTIONS.source,
+        },
+        constraints: {
+            type: "object",
+            properties: createConstraintSchemaProperties(),
+        },
+        changeRequest: {
+            type: "object",
+            properties: {
+                enabled: { type: "boolean", description: OPTION_DESCRIPTIONS.createChangeRequest },
+                provider: {
+                    type: "string",
+                    enum: ["github", "gitlab"],
+                    description: OPTION_DESCRIPTIONS.changeRequestProvider,
+                },
+                grouping: {
+                    type: "string",
+                    enum: ["all", "per-cve", "per-package"],
+                    description: OPTION_DESCRIPTIONS.changeRequestGrouping,
+                },
+                repository: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestRepository },
+                baseBranch: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestBaseBranch },
+                branchPrefix: {
+                    type: "string",
+                    description: OPTION_DESCRIPTIONS.changeRequestBranchPrefix,
+                },
+                titlePrefix: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestTitlePrefix },
+            },
+        },
+        kevMandatory: { type: "boolean", description: OPTION_DESCRIPTIONS.kevMandatory },
+        epssThreshold: {
+            type: "number",
+            minimum: 0,
+            maximum: 1,
+            description: OPTION_DESCRIPTIONS.epssThreshold,
+        },
+        suppressionsFile: { type: "string", description: OPTION_DESCRIPTIONS.suppressionsFile },
+        slaCheck: { type: "boolean", description: OPTION_DESCRIPTIONS.slaCheck },
+        skipUnreachable: { type: "boolean", description: OPTION_DESCRIPTIONS.skipUnreachable },
+        dispositionPolicy: {
+            type: "object",
+            description: OPTION_DESCRIPTIONS.dispositionPolicy,
+            properties: {
+                minConfidenceForAutoApply: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyMinConfidenceForAutoApply,
+                },
+                holdForTransitive: {
+                    type: "boolean",
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyHoldForTransitive,
+                },
+                escalateOnSlaBreachSeverities: {
+                    type: "array",
+                    items: { type: "string", enum: ["critical", "high", "medium", "low"] },
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyEscalateOnSlaBreachSeverities,
+                },
+                escalateOnKev: {
+                    type: "boolean",
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyEscalateOnKev,
+                },
+            },
+        },
+        containmentMode: { type: "boolean", description: OPTION_DESCRIPTIONS.containmentMode },
+        campaignMode: { type: "boolean", description: OPTION_DESCRIPTIONS.campaignMode },
+        escalationGraph: {
+            type: "object",
+            description: OPTION_DESCRIPTIONS.escalationGraph,
+            properties: {
+                "constraint-blocked": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "transitive-dependency": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "install-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "major-bump-required": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "no-safe-version": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "override-apply-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "package-json-not-found": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-apply-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-confidence-too-low": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-generation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-validation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "policy-blocked": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "requires-llm-fallback": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "source-fetch-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "validation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "proof-of-fix-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "breaking-change-unresolved": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+            },
+            additionalProperties: false,
+        },
+        offlineIntelligence: { type: "boolean", description: OPTION_DESCRIPTIONS.offlineIntelligence },
+        intelligenceSnapshotPath: {
+            type: "string",
+            description: OPTION_DESCRIPTIONS.intelligenceSnapshotPath,
+        },
+        proofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.proofOfFix },
+        requireProofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.requireProofOfFix },
+        breakingChangeRefactor: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.breakingChangeRefactor,
+        },
+    };
+}
+export function createScanOptionSchemaProperties() {
+    return {
+        ...createRemediateOptionSchemaProperties({ includeEvidence: true }),
+        format: {
+            type: "string",
+            enum: ["npm-audit", "yarn-audit", "sarif", "auto"],
+            description: OPTION_DESCRIPTIONS.format,
+        },
+        audit: { type: "boolean", description: OPTION_DESCRIPTIONS.audit },
+        slaCheck: { type: "boolean", description: OPTION_DESCRIPTIONS.slaCheck },
+    };
+}
+export function createScanReportSchemaProperties() {
+    return {
+        schemaVersion: { type: "string" },
+        status: { type: "string", enum: ["ok", "partial", "failed"] },
+        generatedAt: { type: "string" },
+        cveIds: { type: "array", items: { type: "string" } },
+        reports: { type: "array", items: { type: "object" } },
+        successCount: { type: "number" },
+        failedCount: { type: "number" },
+        errors: { type: "array", items: { type: "object" } },
+        evidenceFile: { type: "string" },
+        patchCount: { type: "number" },
+        patchValidationFailures: { type: "array", items: { type: "object" } },
+        strategyCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        dependencyScopeCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        unresolvedByReason: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        escalationCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        patchesDir: { type: "string" },
+        correlation: { type: "object" },
+        provenance: { type: "object" },
+        constraints: { type: "object" },
+        idempotencyKey: { type: "string" },
+        llmUsageCount: { type: "number" },
+        totalInputTokens: { type: "number" },
+        totalOutputTokens: { type: "number" },
+        totalLlmLatencyMs: { type: "number" },
+        changeRequests: { type: "array", items: { type: "object" } },
+        simulationSummary: { type: "object" },
+    };
+}
+export function createUpdateOutdatedOptionSchemaProperties() {
+    return {
+        ...createRemediateOptionSchemaProperties({
+            includeEvidence: true,
+            includeSimulationMode: false,
+        }),
+        includeTransitive: { type: "boolean", description: OPTION_DESCRIPTIONS.includeTransitive },
+    };
+}
+//# sourceMappingURL=options-schema.js.map

package/dist/api/options-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options-schema.js","sourceRoot":"","sources":["../../src/api/options-schema.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE7F,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,6BAA6B;IACpC,SAAS,EAAE,0CAA0C;IACrD,GAAG,EAAE,4DAA4D;IACjE,cAAc,EAAE,qDAAqD;IACrE,MAAM,EAAE,yCAAyC;IACjD,OAAO,EAAE,4CAA4C;IACrD,cAAc,EACZ,iGAAiG;IACnG,QAAQ,EAAE,qDAAqD;IAC/D,KAAK,EACH,sIAAsI;IACxI,2BAA2B,EAAE,mEAAmE;IAChG,8BAA8B,EAC5B,sEAAsE;IACxE,4BAA4B,EAC1B,oEAAoE;IACtE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,yDAAyD;IACjE,SAAS,EAAE,wBAAwB;IACnC,SAAS,EAAE,wBAAwB;IACnC,WAAW,EAAE,2BAA2B;IACxC,cAAc,EAAE,2CAA2C;IAC3D,MAAM,EAAE,kEAAkE;IAC1E,KAAK,EAAE,wCAAwC;IAC/C,MAAM,EAAE,8BAA8B;IACtC,MAAM,EAAE,gCAAgC;IACxC,KAAK,EAAE,yEAAyE;IAChF,QAAQ,EAAE,kEAAkE;IAC5E,sBAAsB,EAAE,kDAAkD;IAC1E,iBAAiB,EACf,iFAAiF;IACnF,WAAW,EAAE,iEAAiE;IAC9E,oBAAoB,EAAE,4DAA4D;IAClF,qBAAqB,EAAE,wDAAwD;IAC/E,SAAS,EAAE,gEAAgE;IAC3E,mBAAmB,EAAE,0EAA0E;IAC/F,qBAAqB,EAAE,yCAAyC;IAChE,qBAAqB,EAAE,iEAAiE;IACxF,uBAAuB,EAAE,sDAAsD;IAC/E,uBAAuB,EAAE,+CAA+C;IACxE,yBAAyB,EAAE,qDAAqD;IAChF,wBAAwB,EAAE,4CAA4C;IACtE,iBAAiB,EAAE,wEAAwE;IAC3F,cAAc,EACZ,sFAAsF;IACxF,YAAY,EACV,kGAAkG;IACpG,aAAa,EACX,oGAAoG;IACtG,gBAAgB,EACd,4GAA4G;IAC9G,QAAQ,EACN,8GAA8G;IAChH,eAAe,EACb,yIAAyI;IAC3I,iBAAiB,EACf,2FAA2F;IAC7F,0CAA0C,EACxC,oEAAoE;IACtE,kCAAkC,EAChC,4EAA4E;IAC9E,8CAA8C,EAC5C,gEAAgE;IAClE,8BAA8B,EAAE,2DAA2D;IAC3F,eAAe,EACb,sKAAsK;IACxK,YAAY,EAAE,sEAAsE;IACpF,eAAe,EAAE,yEAAyE;IAC1F,mBAAmB,EACjB,mHAAmH;IACrH,wBAAwB,EACtB,mHAAmH;IACrH,UAAU,EACR,+HAA+H;IACjI,iBAAiB,EAAE,0EAA0E;IAC7F,sBAAsB,EACpB,8KAA8K;CACxK,CAAC;AAEX,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,sBAAsB,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;QACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,UAAU,CAAC;YACrD,WAAW,EAAE,mBAAmB,CAAC,WAAW;SAC7C;QACD,oBAAoB,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,oBAAoB;SACtD;QACD,qBAAqB,EAAE;YACrB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;SACvD;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,4BAA4B,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,OAKrD;IACC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IACvD,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,IAAI,CAAC;IAEzD,OAAO;QACL,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,GAAG,EAAE;QAC7D,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,sBAAsB,CAAC;YACjC,WAAW,EAAE,mBAAmB,CAAC,cAAc;SAChD;QACD,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE;YAC5E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,qBAAqB;YACvB,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,cAAc,EAAE,EAAE;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACxE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QACjE,yBAAyB,EAAE;YACzB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,2BAA2B;iBAC7D;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,8BAA8B;iBAChE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,4BAA4B;iBAC9D;aACF;SACF;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,UAAU,EAAE;QAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE;QACnE,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE,EAAE;YAC9E,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,WAAW,EAAE;QAC7E,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,cAAc,EAAE;QACnF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE;QACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QACjE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,wBAAwB,CAAC;YACnC,WAAW,EAAE,mBAAmB,CAAC,MAAM;SACxC;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,gCAAgC,EAAE;SAC/C;QACD,aAAa,EAAE;YACb,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,mBAAmB,EAAE;gBAClF,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;oBAC1B,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;iBACvD;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC;oBACvC,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;iBACvD;gBACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,uBAAuB,EAAE;gBACxF,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,uBAAuB,EAAE;gBACxF,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mBAAmB,CAAC,yBAAyB;iBAC3D;gBACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,wBAAwB,EAAE;aAC3F;SACF;QACD,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,EAAE;QAChF,aAAa,EAAE;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,mBAAmB,CAAC,aAAa;SAC/C;QACD,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,gBAAgB,EAAE;QACvF,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACxE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,eAAe,EAAE;QACtF,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,iBAAiB;YAClD,UAAU,EAAE;gBACV,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,0CAA0C;iBAC5E;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mBAAmB,CAAC,kCAAkC;iBACpE;gBACD,6BAA6B,EAAE;oBAC7B,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;oBACtE,WAAW,EAAE,mBAAmB,CAAC,8CAA8C;iBAChF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mBAAmB,CAAC,8BAA8B;iBAChE;aACF;SACF;QACD,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,eAAe,EAAE;QACtF,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,EAAE;QAChF,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,eAAe;YAChD,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,wBAAwB,EAAE;oBACxB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,0BAA0B,EAAE;oBAC1B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,4BAA4B,EAAE;oBAC5B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;aACF;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,mBAAmB,EAAE;QAC9F,wBAAwB,EAAE;YACxB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,wBAAwB;SAC1D;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,UAAU,EAAE;QAC5E,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,sBAAsB,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,GAAG,qCAAqC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACnE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;YAClD,WAAW,EAAE,mBAAmB,CAAC,MAAM;SACxC;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;QAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrE,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,qBAAqB,EAAE;YACrB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,kBAAkB,EAAE;YAClB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC5D,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C;IACxD,OAAO;QACL,GAAG,qCAAqC,CAAC;YACvC,eAAe,EAAE,IAAI;YACrB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;QACF,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;KAC3F,CAAC;AACJ,CAAC"}

package/dist/api/patches/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/api/patches/helpers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,SAAsB,GAAG,MAAM,CAEvF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA0B/F;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAYhG;AAED,wBAAgB,SAAS,CAAC,UAAU,EAAE,uBAAuB,GAAG,oBAAoB,CAgBnF"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/api/patches/helpers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,SAAsB,GAAG,MAAM,CAEvF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA0B/F;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAYhG;AAED,wBAAgB,SAAS,CAAC,UAAU,EAAE,uBAAuB,GAAG,oBAAoB,CAgBnF"}

package/dist/api/patches/helpers.js

@@ -0,0 +1,71 @@
+import { existsSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { isAbsolute, resolve, sep } from "node:path";
+export const DEFAULT_PATCHES_DIR = "./patches";
+export function resolvePatchesDir(cwd, patchesDir = DEFAULT_PATCHES_DIR) {
+    return isAbsolute(patchesDir) ? patchesDir : resolve(cwd, patchesDir);
+}
+export function resolveArtifactPath(cwd, patchFilePath) {
+    const resolved = isAbsolute(patchFilePath) ? patchFilePath : resolve(cwd, patchFilePath);
+    if (!resolved.endsWith(".patch")) {
+        throw new Error(`patchFilePath must point to a .patch file: ${patchFilePath}`);
+    }
+    const patchesRoot = resolvePatchesDir(cwd);
+    if (!resolved.startsWith(patchesRoot + sep)) {
+        throw new Error(`patchFilePath must be inside the patches directory: ${patchFilePath}`);
+    }
+    return resolved;
+}
+export async function readManifest(manifestFilePath) {
+    if (!existsSync(manifestFilePath)) {
+        return undefined;
+    }
+    try {
+        const raw = await readFile(manifestFilePath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed === null ||
+            typeof parsed !== "object" ||
+            parsed.schemaVersion !== "1.0" ||
+            typeof parsed.packageName !== "string" ||
+            typeof parsed.vulnerableVersion !== "string" ||
+            typeof parsed.patchFilePath !== "string" ||
+            typeof parsed.patchFileName !== "string" ||
+            typeof parsed.applied !== "boolean" ||
+            typeof parsed.dryRun !== "boolean" ||
+            typeof parsed.generatedAt !== "string") {
+            return undefined;
+        }
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function derivePatchMetadata(patchContent) {
+    const files = [
+        ...new Set(patchContent
+            .split(/\r?\n/)
+            .filter((line) => line.startsWith("+++ b/"))
+            .map((line) => line.slice("+++ b/".length))),
+    ];
+    const hunkCount = patchContent.split(/\r?\n/).filter((line) => line.startsWith("@@ ")).length;
+    return { files, hunkCount };
+}
+export function toSummary(inspection) {
+    return {
+        patchFilePath: inspection.patchFilePath,
+        manifestFilePath: inspection.manifestFilePath,
+        patchFileName: inspection.patchFileName,
+        cveId: inspection.cveId,
+        packageName: inspection.packageName,
+        vulnerableVersion: inspection.vulnerableVersion,
+        patchMode: inspection.patchMode,
+        confidence: inspection.confidence,
+        riskLevel: inspection.riskLevel,
+        generatedAt: inspection.generatedAt,
+        files: inspection.files,
+        hunkCount: inspection.hunkCount,
+        diffValid: inspection.diffValid,
+    };
+}
+//# sourceMappingURL=helpers.js.map

package/dist/api/patches/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/api/patches/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAQrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAE/C,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,UAAU,GAAG,mBAAmB;IAC7E,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,aAAqB;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,aAAa,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uDAAuD,aAAa,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,gBAAwB;IACzD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,aAAa,KAAK,KAAK;YAC9B,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;YAC5C,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;YACnC,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS;YAClC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EACtC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CACR,YAAY;aACT,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;aAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC9C;KACF,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAE9F,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAmC;IAC3D,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC"}

package/dist/api/patches/index.js

@@ -0,0 +1,4 @@
+export { listPatchArtifacts, inspectPatchArtifact } from "./inspection.js";
+export { validatePatchArtifact } from "./validation.js";
+export { reconcilePatchArtifacts } from "./reconcile.js";
+//# sourceMappingURL=index.js.map

package/dist/api/patches/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/patches/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/api/patches/inspection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inspection.d.ts","sourceRoot":"","sources":["../../../src/api/patches/inspection.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAUjC,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAsBjC;AAED,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,CAAC,CA8ClC"}
+{"version":3,"file":"inspection.d.ts","sourceRoot":"","sources":["../../../src/api/patches/inspection.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAUjC,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAsBjC;AAED,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,CAAC,CA8ClC"}