autoremediator 0.21.0 → 0.21.2

package/dist/api/reachability/index.js

@@ -0,0 +1,9 @@
+/**
+ * Public SDK API: checkReachability
+ */
+import { assessPackageReachability } from "../../remediation/tools/check-reachability.js";
+export async function checkReachability(options) {
+    const cwd = options.cwd ?? process.cwd();
+    return assessPackageReachability(cwd, options.packageName, options.symbol);
+}
+//# sourceMappingURL=index.js.map

package/dist/api/reachability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC"}

package/dist/api/remediate/index.js

@@ -0,0 +1,97 @@
+import { getModelSpec } from "../../platform/config.js";
+import { readIdempotentReport, storeIdempotentReport } from "../../platform/idempotency.js";
+import { runLocalRemediationPipeline } from "../../remediation/local/index.js";
+import { assertChangeRequestAllowed, createChangeRequestsForReports, } from "../change-request/index.js";
+import { resolveConstraints, resolveCorrelationContext, resolveProvenanceContext, } from "../context.js";
+import { addRemediateDispositionStep, addRemediateErrorStep, addRemediateResultSteps, addRemediateResumeStep, addRemediateStartStep, createRemediateEvidence, writeRemediateEvidence, } from "../remediate.evidence.js";
+import { applySimulationMetadata, assertValidSimulationMode } from "../reporting.js";
+import { assertValidCveId } from "./validators.js";
+export async function remediate(cveId, options = {}) {
+    assertChangeRequestAllowed(options);
+    assertValidCveId(cveId);
+    assertValidSimulationMode(options);
+    const normalizedCveId = cveId.toUpperCase();
+    const cwd = options.cwd ?? process.cwd();
+    const constraints = resolveConstraints(options, cwd);
+    const provenance = resolveProvenanceContext(options);
+    const correlation = resolveCorrelationContext(options);
+    const model = getModelSpec(options.model);
+    const evidence = createRemediateEvidence({
+        cwd,
+        cveId: normalizedCveId,
+        options,
+        model,
+        correlation,
+        provenance,
+    });
+    if (options.resume && options.idempotencyKey) {
+        const cached = readIdempotentReport(cwd, options.idempotencyKey, normalizedCveId);
+        if (cached) {
+            addRemediateResumeStep(evidence, normalizedCveId);
+            const evidenceFile = writeRemediateEvidence(cwd, evidence);
+            return {
+                ...cached,
+                summary: `${cached.summary} (resumed from idempotency cache)`,
+                evidenceFile,
+                correlation,
+                provenance,
+                constraints,
+                resumedFromCache: true,
+            };
+        }
+    }
+    addRemediateStartStep({
+        evidence,
+        cveId: normalizedCveId,
+        options,
+        model,
+        constraints,
+    });
+    let report;
+    try {
+        report = await runLocalRemediationPipeline(normalizedCveId, {
+            ...options,
+            ...correlation,
+            constraints,
+        });
+    }
+    catch (error) {
+        addRemediateErrorStep(evidence, normalizedCveId, error);
+        writeRemediateEvidence(cwd, evidence);
+        throw error;
+    }
+    report = applySimulationMetadata(report, options);
+    addRemediateResultSteps(evidence, normalizedCveId, report);
+    addRemediateDispositionStep(evidence, normalizedCveId, report);
+    const evidenceFile = writeRemediateEvidence(cwd, evidence);
+    const finalReport = {
+        ...report,
+        evidenceFile,
+        correlation,
+        provenance,
+        constraints,
+        resumedFromCache: false,
+    };
+    if (options.changeRequest?.enabled) {
+        finalReport.changeRequests = await createChangeRequestsForReports({
+            cwd,
+            options: options.changeRequest,
+            reports: [finalReport],
+        });
+    }
+    if (options.idempotencyKey && !options.dryRun && !options.preview) {
+        storeIdempotentReport(cwd, options.idempotencyKey, normalizedCveId, finalReport);
+    }
+    return finalReport;
+}
+export async function planRemediation(cveId, options = {}) {
+    if (Object.hasOwn(options, "dryRun") || Object.hasOwn(options, "preview")) {
+        throw new Error("planRemediation always runs with dryRun=true and preview=true. Remove dryRun/preview from options.");
+    }
+    return remediate(cveId, {
+        ...options,
+        preview: true,
+        dryRun: true,
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/api/remediate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,GAAG;QACH,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;QACX,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,mCAAmC;gBAC7D,YAAY;gBACZ,WAAW;gBACX,UAAU;gBACV,WAAW;gBACX,gBAAgB,EAAE,IAAI;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC;QACpB,QAAQ;QACR,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,2BAA2B,CAAC,eAAe,EAAE;YAC1D,GAAG,OAAO;YACV,GAAG,WAAW;YACd,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACxD,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElD,uBAAuB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,2BAA2B,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAsB;QACrC,GAAG,MAAM;QACT,YAAY;QACZ,WAAW;QACX,UAAU;QACV,WAAW;QACX,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QACnC,WAAW,CAAC,cAAc,GAAG,MAAM,8BAA8B,CAAC;YAChE,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,WAAW,CAAC;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,EAAE;QACtB,GAAG,OAAO;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/api/remediate/validators.js

@@ -0,0 +1,11 @@
+export const CVE_ID_REGEX = /^CVE-\d{4}-\d{1,7}$/i;
+export const GHSA_ID_REGEX = /^GHSA-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}$/i;
+export function isVulnerabilityId(id) {
+    return CVE_ID_REGEX.test(id) || GHSA_ID_REGEX.test(id);
+}
+export function assertValidCveId(cveId) {
+    if (!isVulnerabilityId(cveId)) {
+        throw new Error(`Invalid vulnerability ID: "${cveId}". Expected format: CVE-YYYY-NNNNN (e.g. CVE-2021-23337) or GHSA-xxxx-xxxx-xxxx.`);
+    }
+}
+//# sourceMappingURL=validators.js.map

package/dist/api/remediate/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../../src/api/remediate/validators.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,6CAA6C,CAAC;AAE3E,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,kFAAkF,CACtH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/api/remediate-from-scan/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAkC/D,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAsIrB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAyB/D,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAsIrB"}

package/dist/api/remediate-from-scan/index.js

@@ -0,0 +1,132 @@
+import { getModelSpec } from "../../platform/config.js";
+import { addEvidenceStep, createEvidenceLog, finalizeEvidence, writeEvidenceLog, } from "../../platform/evidence.js";
+import { loadPolicy } from "../../platform/policy.js";
+import { parseScanInput, parseScanInputFromAudit, uniqueCveIds } from "../../scanner/index.js";
+import { assertChangeRequestAllowed, createChangeRequestsForReports, } from "../change-request/index.js";
+import { resolveConstraints, resolveCorrelationContext, resolveProvenanceContext, } from "../context.js";
+import { assertValidSimulationMode, buildEscalationCounts, buildSlaBreachSummary, } from "../reporting.js";
+import { executeScanRemediations } from "../scan-execution.js";
+import { buildScanOutcome } from "../scan-outcome.js";
+import { aggregateScanLlmUsage } from "./report-metrics.js";
+function countContainedResults(reports) {
+    let containmentCount = 0;
+    for (const report of reports) {
+        for (const result of report.results) {
+            if (result.unresolvedReason === "policy-blocked" &&
+                result.disposition === "hold-for-approval") {
+                containmentCount += 1;
+            }
+        }
+    }
+    return containmentCount;
+}
+export async function remediateFromScan(inputPath, options = {}) {
+    assertChangeRequestAllowed(options);
+    assertValidSimulationMode(options);
+    const cwd = options.cwd ?? process.cwd();
+    const policy = loadPolicy(cwd, options.policy);
+    const format = options.format ?? "auto";
+    const patchesDir = options.patchesDir ?? "./patches";
+    const audit = options.audit ?? false;
+    const workspace = options.constraints?.workspace ?? policy.constraints?.workspace;
+    const findings = audit
+        ? await parseScanInputFromAudit({
+            cwd,
+            packageManager: options.packageManager,
+            format,
+            workspace,
+        })
+        : parseScanInput(inputPath, format);
+    const cveIds = uniqueCveIds(findings);
+    const model = getModelSpec(options.model);
+    const correlation = resolveCorrelationContext(options);
+    const provenance = resolveProvenanceContext(options);
+    const constraints = resolveConstraints(options, cwd);
+    const evidence = createEvidenceLog(cwd, cveIds, {
+        ...correlation,
+        actor: provenance.actor,
+        source: provenance.source,
+        model,
+        idempotencyKey: options.idempotencyKey,
+    });
+    addEvidenceStep(evidence, "scan.parse", { inputPath, format, audit }, { findingCount: findings.length, cveCount: cveIds.length });
+    const execution = await executeScanRemediations({
+        cveIds,
+        options,
+        patchesDir,
+        policy,
+        correlation,
+        provenance,
+        constraints,
+        evidence,
+    });
+    const reports = execution.reports;
+    const { errors, patchCount, patchValidationFailures } = execution;
+    const containmentCount = countContainedResults(reports);
+    const escalationCounts = buildEscalationCounts(reports.flatMap((report) => report.results));
+    const llmUsageTotals = aggregateScanLlmUsage(reports);
+    const outcome = buildScanOutcome({ reports, errors });
+    const { status, successCount, failedCount, strategyCounts, dependencyScopeCounts, unresolvedByReason, dispositionCounts, simulationSummary, remediationCount, } = outcome;
+    evidence.summary = {
+        status,
+        cveCount: cveIds.length,
+        remediationCount,
+        successCount,
+        failedCount,
+        patchCount,
+        patchValidationFailures: patchValidationFailures.length > 0 ? patchValidationFailures : undefined,
+        strategyCounts,
+        dependencyScopeCounts,
+        unresolvedByReason,
+        dispositionCounts,
+        escalationCounts,
+        containmentCount,
+        simulationSummary,
+        slaBreachSummary: buildSlaBreachSummary(reports),
+        patchesDir: patchCount > 0 ? patchesDir : undefined,
+        llmUsageCount: llmUsageTotals.llmUsageCount > 0 ? llmUsageTotals.llmUsageCount : undefined,
+        totalInputTokens: llmUsageTotals.totalInputTokens,
+        totalOutputTokens: llmUsageTotals.totalOutputTokens,
+        totalLlmLatencyMs: llmUsageTotals.totalLlmLatencyMs,
+    };
+    finalizeEvidence(evidence);
+    const evidenceFile = options.evidence === false ? undefined : writeEvidenceLog(cwd, evidence);
+    const changeRequests = options.changeRequest?.enabled
+        ? await createChangeRequestsForReports({
+            cwd,
+            options: options.changeRequest,
+            reports,
+        })
+        : undefined;
+    return {
+        schemaVersion: "1.0",
+        status,
+        generatedAt: new Date().toISOString(),
+        cveIds,
+        reports,
+        successCount,
+        failedCount,
+        errors,
+        evidenceFile,
+        patchCount,
+        patchValidationFailures: patchValidationFailures.length > 0 ? patchValidationFailures : undefined,
+        strategyCounts,
+        dependencyScopeCounts,
+        unresolvedByReason,
+        dispositionCounts,
+        escalationCounts,
+        patchesDir: patchCount > 0 ? patchesDir : undefined,
+        correlation,
+        provenance,
+        constraints,
+        idempotencyKey: options.idempotencyKey,
+        llmUsageCount: llmUsageTotals.llmUsageCount > 0 ? llmUsageTotals.llmUsageCount : undefined,
+        totalInputTokens: llmUsageTotals.totalInputTokens,
+        totalOutputTokens: llmUsageTotals.totalOutputTokens,
+        totalLlmLatencyMs: llmUsageTotals.totalLlmLatencyMs,
+        changeRequests,
+        simulationSummary,
+        slaBreachSummary: buildSlaBreachSummary(reports),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/api/remediate-from-scan/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,SAAS,qBAAqB,CAAC,OAA4B;IACzD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IACE,MAAM,CAAC,gBAAgB,KAAK,gBAAgB;gBAC5C,MAAM,CAAC,WAAW,KAAK,mBAAmB,EAC1C,CAAC;gBACD,gBAAgB,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,OAAO,GAAgB,EAAE;IAEzB,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;IAElF,MAAM,QAAQ,GAAG,KAAK;QACpB,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,GAAG;YACH,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM;YACN,SAAS;SACV,CAAC;QACJ,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE;QAC9C,GAAG,WAAW;QACd,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK;QACL,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,eAAe,CACb,QAAQ,EACR,YAAY,EACZ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAC5B,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAC3D,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,MAAM;QACN,OAAO;QACP,UAAU;QACV,MAAM;QACN,WAAW;QACX,UAAU;QACV,WAAW;QACX,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAwB,SAAS,CAAC,OAAO,CAAC;IACvD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAClE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5F,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,EACJ,MAAM,EACN,YAAY,EACZ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,GAAG,OAAO,CAAC;IAEZ,QAAQ,CAAC,OAAO,GAAG;QACjB,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,gBAAgB;QAChB,YAAY;QACZ,WAAW;QACX,UAAU;QACV,uBAAuB,EACrB,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS;QAC1E,cAAc;QACd,qBAAqB;QACrB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;QAChD,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACnD,aAAa,EAAE,cAAc,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC1F,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;QACnD,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;KACpD,CAAC;IAEF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE9F,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,OAAO;QACnD,CAAC,CAAC,MAAM,8BAA8B,CAAC;YACnC,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO;SACR,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,MAAM;QACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM;QACN,OAAO;QACP,YAAY;QACZ,WAAW;QACX,MAAM;QACN,YAAY;QACZ,UAAU;QACV,uBAAuB,EACrB,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS;QAC1E,cAAc;QACd,qBAAqB;QACrB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;QAChB,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACnD,WAAW;QACX,UAAU;QACV,WAAW;QACX,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,cAAc,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC1F,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;QACnD,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;QACnD,cAAc;QACd,iBAAiB;QACjB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/api/remediate-from-scan/report-metrics.js

@@ -0,0 +1,21 @@
+export function aggregateScanLlmUsage(reports) {
+    let llmUsageCount = 0;
+    let totalInputTokens = 0;
+    let totalOutputTokens = 0;
+    let totalLlmLatencyMs = 0;
+    for (const report of reports) {
+        for (const usage of report.llmUsage ?? []) {
+            llmUsageCount += 1;
+            totalInputTokens += usage.inputTokens ?? 0;
+            totalOutputTokens += usage.outputTokens ?? 0;
+            totalLlmLatencyMs += usage.latencyMs ?? 0;
+        }
+    }
+    return {
+        llmUsageCount,
+        totalInputTokens: llmUsageCount > 0 ? totalInputTokens : undefined,
+        totalOutputTokens: llmUsageCount > 0 ? totalOutputTokens : undefined,
+        totalLlmLatencyMs: llmUsageCount > 0 ? totalLlmLatencyMs : undefined,
+    };
+}
+//# sourceMappingURL=report-metrics.js.map

package/dist/api/remediate-from-scan/report-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-metrics.js","sourceRoot":"","sources":["../../../src/api/remediate-from-scan/report-metrics.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1C,aAAa,IAAI,CAAC,CAAC;YACnB,gBAAgB,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;YAC3C,iBAAiB,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YAC7C,iBAAiB,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,gBAAgB,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QAClE,iBAAiB,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QACpE,iBAAiB,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC;AACJ,CAAC"}

package/dist/api/remediate.evidence.d.ts

@@ -1,5 +1,5 @@
-import type { RemediateOptions, RemediationReport } from "../platform/types.js";
 import { type EvidenceLog } from "../platform/evidence.js";
+import type { RemediateOptions, RemediationReport } from "../platform/types.js";
 export declare function createRemediateEvidence(params: {
     cwd: string;
     cveId: string;

package/dist/api/remediate.evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA8DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA0BN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}
+{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA8DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAqBN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}

package/dist/api/remediate.evidence.js

@@ -0,0 +1,109 @@
+import { addEvidenceStep, createEvidenceLog, finalizeEvidence, writeEvidenceLog, } from "../platform/evidence.js";
+export function createRemediateEvidence(params) {
+    if (params.options.evidence === false) {
+        return undefined;
+    }
+    return createEvidenceLog(params.cwd, [params.cveId], {
+        ...params.correlation,
+        actor: params.provenance.actor,
+        source: params.provenance.source,
+        model: params.model,
+        idempotencyKey: params.options.idempotencyKey,
+        offlineMode: params.options.offlineIntelligence === true ? true : undefined,
+    });
+}
+export function addRemediateStartStep(params) {
+    if (!params.evidence) {
+        return;
+    }
+    addEvidenceStep(params.evidence, "remediate.start", {
+        cveId: params.cveId,
+        dryRun: Boolean(params.options.dryRun),
+        preview: Boolean(params.options.preview),
+        simulationMode: Boolean(params.options.simulationMode),
+        model: params.model,
+    }, {
+        directDependenciesOnly: Boolean(params.constraints.directDependenciesOnly),
+        preferVersionBump: Boolean(params.constraints.preferVersionBump),
+    });
+}
+export function addRemediateResultSteps(evidence, cveId, report) {
+    if (!evidence) {
+        return;
+    }
+    for (const result of report.results) {
+        addEvidenceStep(evidence, "remediate.package-result", {
+            packageName: result.packageName,
+            strategy: result.strategy,
+            fromVersion: result.fromVersion,
+            toVersion: result.toVersion,
+        }, {
+            applied: result.applied,
+            dryRun: result.dryRun,
+            unresolvedReason: result.unresolvedReason,
+            reachability: result.reachability?.status,
+            hasAlternatives: Boolean(result.alternativeSuggestions?.length),
+            suppressedBy: result.suppressedBy?.justification,
+            simulationWouldMutate: result.simulation?.wouldMutate,
+            simulationRebuttalCount: result.simulation?.rebuttalFindings.length,
+        });
+    }
+    const containmentCount = report.results.filter((result) => result.unresolvedReason === "policy-blocked" && result.disposition === "hold-for-approval").length;
+    if (containmentCount > 0) {
+        addEvidenceStep(evidence, "containment-summary", { cveId }, {
+            containmentCount,
+            blockedUnresolvedReason: "policy-blocked",
+            blockedDisposition: "hold-for-approval",
+        });
+    }
+    addEvidenceStep(evidence, "remediate.finish", { cveId }, {
+        resultCount: report.results.length,
+        vulnerableCount: report.vulnerablePackages.length,
+        llmUsage: report.llmUsage,
+        exploitSignalTriggered: report.exploitSignalTriggered ?? false,
+        slaBreachCount: report.slaBreaches?.length ?? 0,
+        containmentCount,
+        sbomEntryCount: report.sbom?.length ?? 0,
+        simulationSummary: report.simulationSummary,
+    });
+    finalizeEvidence(evidence);
+}
+export function addRemediateDispositionStep(evidence, cveId, report) {
+    if (!evidence) {
+        return;
+    }
+    // Map + Object.fromEntries: keys such as "__proto__" become own properties, never prototype writes.
+    const dispositions = new Map();
+    for (const result of report.results) {
+        if (!result.disposition)
+            continue;
+        dispositions.set(result.packageName, {
+            disposition: result.disposition,
+            dispositionReason: result.dispositionReason,
+        });
+    }
+    if (dispositions.size === 0) {
+        return;
+    }
+    const byCveId = Object.fromEntries([[cveId, Object.fromEntries(dispositions)]]);
+    addEvidenceStep(evidence, "disposition-summary", { cveId }, { byCveId });
+}
+export function addRemediateErrorStep(evidence, cveId, error) {
+    if (!evidence) {
+        return;
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    addEvidenceStep(evidence, "remediate.error", { cveId }, undefined, message);
+    finalizeEvidence(evidence);
+}
+export function addRemediateResumeStep(evidence, cveId) {
+    if (!evidence) {
+        return;
+    }
+    addEvidenceStep(evidence, "remediate.resume-cache", { cveId });
+    finalizeEvidence(evidence);
+}
+export function writeRemediateEvidence(cwd, evidence) {
+    return evidence ? writeEvidenceLog(cwd, evidence) : undefined;
+}
+//# sourceMappingURL=remediate.evidence.js.map

package/dist/api/remediate.evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediate.evidence.js","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,UAAU,uBAAuB,CAAC,MAOvC;IACC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACnD,GAAG,MAAM,CAAC,WAAW;QACrB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK;QAC9B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAMrC;IACC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,eAAe,CACb,MAAM,CAAC,QAAQ,EACf,iBAAiB,EACjB;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACxC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QACtD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,EACD;QACE,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAC1E,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,eAAe,CACb,QAAQ,EACR,0BAA0B,EAC1B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM;YACzC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/D,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa;YAChD,qBAAqB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW;YACrD,uBAAuB,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM;SACpE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAC5C,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,CAC7F,CAAC,MAAM,CAAC;IAET,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,eAAe,CACb,QAAQ,EACR,qBAAqB,EACrB,EAAE,KAAK,EAAE,EACT;YACE,gBAAgB;YAChB,uBAAuB,EAAE,gBAAgB;YACzC,kBAAkB,EAAE,mBAAmB;SACxC,CACF,CAAC;IACJ,CAAC;IAED,eAAe,CACb,QAAQ,EACR,kBAAkB,EAClB,EAAE,KAAK,EAAE,EACT;QACE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAClC,eAAe,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;QAC9D,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAC/C,gBAAgB;QAChB,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CACF,CAAC;IACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,oGAAoG;IACpG,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+D,CAAC;IAC5F,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,SAAS;QAClC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,KAAa,EACb,KAAc;IAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiC,EAAE,KAAa;IACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,eAAe,CAAC,QAAQ,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAAiC;IAEjC,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}