autoremediator 0.21.1 → 0.21.2

package/dist/api/change-request/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvC,GAAG,IAAI,CAMP;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAehE;AA2ED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA0JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvC,GAAG,IAAI,CAMP;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAehE;AAuED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,QAAQ,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,EAAE,CAgDvB;AA4JD,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgKjC"}

package/dist/api/change-request/index.js

@@ -0,0 +1,404 @@
+import { randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { safeExeca } from "../../platform/safe-exec.js";
+import { trimChar } from "../../platform/trim.js";
+/**
+ * Change requests commit and push, so they must never run for dry-run/preview/plan flows.
+ * Enforced here (not only in the CLI) so SDK, MCP and HTTP callers get the same guarantee.
+ */
+export function assertChangeRequestAllowed(options) {
+    if (options.changeRequest?.enabled && (options.dryRun || options.preview)) {
+        throw new Error("changeRequest cannot be combined with dryRun/preview (or planRemediation): change requests commit and push.");
+    }
+}
+/**
+ * Remove option fields that redirect credentials or API traffic. These are host configuration,
+ * never something an untrusted MCP/HTTP caller may set. Walks nested objects (e.g. portfolio targets).
+ */
+export function stripUntrustedChangeRequestFields(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => stripUntrustedChangeRequestFields(entry));
+    }
+    if (typeof value !== "object" || value === null)
+        return value;
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (key === "changeRequest" && typeof entry === "object" && entry !== null) {
+            const { tokenEnvVar: _t, githubApiUrl: _u, ...rest } = entry;
+            out[key] = rest;
+        }
+        else {
+            out[key] = stripUntrustedChangeRequestFields(entry);
+        }
+    }
+    return out;
+}
+async function stageRunChanges(cwd, reports) {
+    // Stage modifications to tracked files only; never sweep up unrelated untracked files.
+    await safeExeca("git", ["add", "-u"], { cwd, stdio: "pipe" });
+    // New artifacts the run itself produced (generated patch files) are staged explicitly.
+    const produced = new Set();
+    for (const report of reports) {
+        for (const result of report.results) {
+            if (!result.patchFilePath)
+                continue;
+            const abs = isAbsolute(result.patchFilePath)
+                ? result.patchFilePath
+                : resolve(cwd, result.patchFilePath);
+            const rel = relative(cwd, abs);
+            if (rel.startsWith("..") || isAbsolute(rel) || !existsSync(abs))
+                continue;
+            produced.add(rel);
+        }
+    }
+    if (produced.size > 0) {
+        await safeExeca("git", ["add", "--", ...produced], { cwd, stdio: "pipe" });
+    }
+}
+function sanitizeBranchToken(value) {
+    return trimChar(value.toLowerCase().replaceAll(/[^a-z0-9._/-]+/g, "-"), "-").slice(0, 80);
+}
+function buildPlan(reports) {
+    const cveIds = [...new Set(reports.map((report) => report.cveId))];
+    const packageNames = [
+        ...new Set(reports.flatMap((report) => report.results.map((result) => result.packageName))),
+    ];
+    const titleSuffix = cveIds.length === 1 ? cveIds[0] : `${cveIds.length} CVEs`;
+    const title = `security remediation: ${titleSuffix}`;
+    const body = [
+        "Automated remediation generated by autoremediator.",
+        "",
+        `CVEs: ${cveIds.join(", ")}`,
+        `Packages: ${packageNames.join(", ")}`,
+    ].join("\n");
+    return {
+        cveIds,
+        packageNames,
+        title,
+        body,
+    };
+}
+function resolveProvider(options) {
+    return options.provider ?? "github";
+}
+function resolveGrouping(options) {
+    const allowed = ["all", "per-cve", "per-package", "by-severity"];
+    if (options.grouping && !allowed.includes(options.grouping)) {
+        throw new Error(`Unsupported changeRequest.grouping: "${options.grouping}". Supported values: ${allowed.join(", ")}`);
+    }
+    return options.grouping ?? "all";
+}
+export function groupReports(reports, grouping) {
+    if (reports.length === 0)
+        return [];
+    if (grouping === "all") {
+        return [reports];
+    }
+    if (grouping === "per-cve") {
+        const map = new Map();
+        for (const report of reports) {
+            const key = report.cveId.toUpperCase();
+            const list = map.get(key) ?? [];
+            list.push(report);
+            map.set(key, list);
+        }
+        return [...map.values()];
+    }
+    if (grouping === "per-package") {
+        const map = new Map();
+        for (const report of reports) {
+            const pkgs = new Set(report.results.map((r) => r.packageName));
+            if (pkgs.size === 0) {
+                const list = map.get("misc") ?? [];
+                list.push(report);
+                map.set("misc", list);
+            }
+            else {
+                for (const pkg of pkgs) {
+                    const list = map.get(pkg) ?? [];
+                    list.push(report);
+                    map.set(pkg, list);
+                }
+            }
+        }
+        return [...map.values()];
+    }
+    if (grouping === "by-severity") {
+        const map = new Map();
+        for (const report of reports) {
+            const sev = report.cveDetails?.severity ?? "UNKNOWN";
+            const list = map.get(sev) ?? [];
+            list.push(report);
+            map.set(sev, list);
+        }
+        return [...map.values()];
+    }
+    return [reports];
+}
+async function detectCurrentBranch(cwd) {
+    const result = await safeExeca("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+        cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim();
+}
+async function ensureRepoHasChanges(cwd) {
+    const diff = await safeExeca("git", ["status", "--porcelain"], {
+        cwd,
+        stdio: "pipe",
+    });
+    return diff.stdout.trim().length > 0;
+}
+function toBranchName(prefix, cveIds) {
+    const token = sanitizeBranchToken(cveIds.join("-") || "remediation");
+    return `${sanitizeBranchToken(prefix)}/${token}-${randomBytes(6).toString("hex")}`;
+}
+async function detectRepoFromRemote(cwd) {
+    const result = await safeExeca("git", ["config", "--get", "remote.origin.url"], {
+        cwd,
+        stdio: "pipe",
+    }).catch(() => ({ stdout: "" }));
+    const url = result.stdout.trim();
+    const match = /[:/]([^/]+)\/([^/]+?)(?:\.git)?$/.exec(url);
+    if (match) {
+        return `${match[1]}/${match[2]}`;
+    }
+    return undefined;
+}
+async function ensureRepoHasStagedChanges(cwd) {
+    const result = await safeExeca("git", ["diff", "--cached", "--name-only"], {
+        cwd,
+        stdio: "pipe",
+    }).catch(() => ({ stdout: "" }));
+    return result.stdout.trim().length > 0;
+}
+async function createGitHubRequest(params) {
+    const token = params.token ?? process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
+    let repository = params.repository;
+    if (!repository) {
+        repository = await detectRepoFromRemote(params.cwd);
+    }
+    if (token && repository) {
+        const [owner, repo] = repository.split("/");
+        const baseUrl = (params.githubApiUrl ? trimChar(params.githubApiUrl, "/", "end") : undefined) ||
+            "https://api.github.com";
+        const endpoint = `${baseUrl}/repos/${owner}/${repo}/pulls`;
+        const response = await fetch(endpoint, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept: "application/vnd.github+json",
+                "content-type": "application/json",
+                "user-agent": "autoremediator",
+                "x-github-api-version": "2022-11-28",
+            },
+            body: JSON.stringify({
+                title: params.title,
+                head: params.head,
+                base: params.base,
+                body: params.body,
+                draft: Boolean(params.draft),
+            }),
+        });
+        if (!response.ok) {
+            const errText = await response.text().catch(() => "");
+            throw new Error(`GitHub API create pull request failed (${response.status}): ${errText}`);
+        }
+        const data = (await response.json());
+        return data.html_url || undefined;
+    }
+    const args = [
+        "pr",
+        "create",
+        "--head",
+        params.head,
+        "--base",
+        params.base,
+        "--title",
+        params.title,
+        "--body",
+        params.body,
+    ];
+    if (params.repository) {
+        args.push("--repo", params.repository);
+    }
+    if (params.draft) {
+        args.push("--draft");
+    }
+    const result = await safeExeca("gh", args, {
+        cwd: params.cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim() || undefined;
+}
+async function createGitLabRequest(params) {
+    const args = [
+        "mr",
+        "create",
+        "--source-branch",
+        params.source,
+        "--target-branch",
+        params.target,
+        "--title",
+        params.title,
+        "--description",
+        params.body,
+    ];
+    if (params.repository) {
+        args.push("-R", params.repository);
+    }
+    if (params.draft) {
+        args.push("--draft");
+    }
+    const result = await safeExeca("glab", args, {
+        cwd: params.cwd,
+        stdio: "pipe",
+    });
+    return result.stdout.trim() || undefined;
+}
+export async function createChangeRequestsForReports(params) {
+    const { cwd, options, reports } = params;
+    const provider = resolveProvider(options);
+    const grouping = resolveGrouping(options);
+    const groups = groupReports(reports, grouping);
+    if (groups.length === 0) {
+        return [];
+    }
+    const results = [];
+    const token = options.token ??
+        (options.tokenEnvVar ? process.env[options.tokenEnvVar] : undefined) ??
+        process.env.GITHUB_TOKEN ??
+        process.env.GH_TOKEN;
+    const baseBranch = options.baseBranch ?? (await detectCurrentBranch(cwd).catch(() => "main"));
+    const branchPrefix = options.branchPrefix ?? "autoremediator";
+    const pushRemote = options.pushRemote ?? "origin";
+    if (options.pushRemote && !/^[a-zA-Z0-9._-]+$/.test(options.pushRemote)) {
+        throw new Error(`Invalid pushRemote value: ${options.pushRemote}`);
+    }
+    if (options.repository && !/^[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+$/.test(options.repository)) {
+        throw new Error(`Invalid repository format: ${options.repository}`);
+    }
+    for (const group of groups) {
+        const plan = buildPlan(group);
+        const titlePrefix = options.titlePrefix?.trim().slice(0, 200);
+        const bodyFooter = options.bodyFooter ? options.bodyFooter.slice(0, 2000) : undefined;
+        const title = titlePrefix ? `${titlePrefix} ${plan.title}` : plan.title;
+        const body = bodyFooter ? `${plan.body}\n\n${bodyFooter}` : plan.body;
+        const hasChanges = await ensureRepoHasChanges(cwd).catch(() => false);
+        if (!hasChanges) {
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName: "",
+                title,
+                body,
+                created: false,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+                error: "No repository changes to include in change request.",
+            });
+            continue;
+        }
+        const branchName = toBranchName(branchPrefix, plan.cveIds);
+        let branchCreated = false;
+        try {
+            await safeExeca("git", ["checkout", "-b", branchName], { cwd, stdio: "pipe" });
+            branchCreated = true;
+            await stageRunChanges(cwd, group);
+            const hasStaged = await ensureRepoHasStagedChanges(cwd);
+            if (!hasStaged) {
+                results.push({
+                    provider,
+                    grouping,
+                    repository: options.repository,
+                    branchName: "",
+                    title,
+                    body,
+                    created: false,
+                    cveIds: plan.cveIds,
+                    packageNames: plan.packageNames,
+                    error: "No repository changes to include in change request.",
+                });
+                continue;
+            }
+            await safeExeca("git", [
+                "-c",
+                "user.name=autoremediator[bot]",
+                "-c",
+                "user.email=41898282+github-actions[bot]@users.noreply.github.com",
+                "commit",
+                "-m",
+                title,
+            ], { cwd, stdio: "pipe" });
+            const pushArgs = token
+                ? [
+                    "-c",
+                    `http.extraheader=AUTHORIZATION: basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`,
+                    "push",
+                    "-u",
+                    pushRemote,
+                    branchName,
+                ]
+                : ["push", "-u", pushRemote, branchName];
+            await safeExeca("git", pushArgs, { cwd, stdio: "pipe" });
+            const url = provider === "github"
+                ? await createGitHubRequest({
+                    cwd,
+                    repository: options.repository,
+                    head: branchName,
+                    base: baseBranch,
+                    title,
+                    body,
+                    draft: options.draft,
+                    token,
+                    githubApiUrl: options.githubApiUrl,
+                })
+                : await createGitLabRequest({
+                    cwd,
+                    repository: options.repository,
+                    source: branchName,
+                    target: baseBranch,
+                    title,
+                    body,
+                    draft: options.draft,
+                });
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName,
+                title,
+                body,
+                created: true,
+                draft: options.draft,
+                url,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+            });
+        }
+        catch (error) {
+            results.push({
+                provider,
+                grouping,
+                repository: options.repository,
+                branchName: "",
+                title,
+                body,
+                created: false,
+                draft: options.draft,
+                cveIds: plan.cveIds,
+                packageNames: plan.packageNames,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        finally {
+            if (branchCreated) {
+                await safeExeca("git", ["checkout", baseBranch], { cwd, stdio: "pipe" }).catch(() => { });
+            }
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/change-request/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/change-request/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAQlD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAI,KAAQ;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAiB,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,KAAK,eAAe,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3E,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAgC,CAAC;YACxF,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAA4B;IACtE,uFAAuF;IACvF,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,uFAAuF;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,SAAS;YACpC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC1C,CAAC,CAAC,MAAM,CAAC,aAAa;gBACtB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AASD,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,OAA4B;IAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;KAC5F,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC;IAC/E,MAAM,KAAK,GAAG,yBAAyB,WAAW,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG;QACX,oDAAoD;QACpD,EAAE;QACF,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,aAAa,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,MAAM;QACN,YAAY;QACZ,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,OAAO,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,MAAM,OAAO,GAA4B,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,QAAQ,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA4B,EAC5B,QAA+B;IAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,QAAQ,IAAI,SAAS,CAAC;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;QAC3E,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC7D,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,MAAgB;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC;IACrE,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;QAC9E,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAAW;IACnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE;QACzE,GAAG;QACH,KAAK,EAAE,MAAM;KACd,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAUlC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAE/E,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,wBAAwB,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,OAAO,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,6BAA6B;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,gBAAgB;gBAC9B,sBAAsB,EAAE,YAAY;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,MAAM,CAAC,IAAI;QACX,QAAQ;QACR,MAAM,CAAC,IAAI;QACX,SAAS;QACT,MAAM,CAAC,KAAK;QACZ,QAAQ;QACR,MAAM,CAAC,IAAI;KACZ,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAQlC;IACC,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,QAAQ;QACR,iBAAiB;QACjB,MAAM,CAAC,MAAM;QACb,iBAAiB;QACjB,MAAM,CAAC,MAAM;QACb,SAAS;QACT,MAAM,CAAC,KAAK;QACZ,eAAe;QACf,MAAM,CAAC,IAAI;KACZ,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;QAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,MAIpD;IACC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;IAClD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAEtE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,EAAE;gBACd,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,qDAAqD;aAC7D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAElC,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ;oBACR,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,EAAE;oBACd,KAAK;oBACL,IAAI;oBACJ,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,KAAK,EAAE,qDAAqD;iBAC7D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,SAAS,CACb,KAAK,EACL;gBACE,IAAI;gBACJ,+BAA+B;gBAC/B,IAAI;gBACJ,kEAAkE;gBAClE,QAAQ;gBACR,IAAI;gBACJ,KAAK;aACN,EACD,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CACvB,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK;gBACpB,CAAC,CAAC;oBACE,IAAI;oBACJ,yCAAyC,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBACpG,MAAM;oBACN,IAAI;oBACJ,UAAU;oBACV,UAAU;iBACX;gBACH,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAEzD,MAAM,GAAG,GACP,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,MAAM,mBAAmB,CAAC;oBACxB,GAAG;oBACH,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,UAAU;oBAChB,KAAK;oBACL,IAAI;oBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,KAAK;oBACL,YAAY,EAAE,OAAO,CAAC,YAAY;iBACnC,CAAC;gBACJ,CAAC,CAAC,MAAM,mBAAmB,CAAC;oBACxB,GAAG;oBACH,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,UAAU;oBAClB,KAAK;oBACL,IAAI;oBACJ,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC,CAAC;YAET,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,EAAE;gBACd,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/api/context.js

@@ -0,0 +1,41 @@
+import { loadPolicy } from "../platform/policy.js";
+function buildRequestId() {
+    return `req-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+export function resolveCorrelationContext(options) {
+    return {
+        requestId: options.requestId ?? buildRequestId(),
+        sessionId: options.sessionId,
+        parentRunId: options.parentRunId,
+    };
+}
+export function resolveProvenanceContext(options) {
+    return {
+        actor: options.actor,
+        source: options.source ?? "sdk",
+    };
+}
+export function resolveConstraints(options, cwd) {
+    const policy = loadPolicy(cwd, options.policy);
+    return {
+        directDependenciesOnly: options.constraints?.directDependenciesOnly ??
+            policy.constraints?.directDependenciesOnly ??
+            false,
+        preferVersionBump: options.constraints?.preferVersionBump ?? policy.constraints?.preferVersionBump ?? false,
+        installMode: options.constraints?.installMode ?? policy.constraints?.installMode ?? "deterministic",
+        installPreferOffline: options.constraints?.installPreferOffline ?? policy.constraints?.installPreferOffline,
+        enforceFrozenLockfile: options.constraints?.enforceFrozenLockfile ?? policy.constraints?.enforceFrozenLockfile,
+        workspace: options.constraints?.workspace ?? policy.constraints?.workspace,
+        typecheck: options.typecheck ?? options.constraints?.typecheck ?? policy.constraints?.typecheck,
+        requireProofOfFix: options.requireProofOfFix ??
+            options.constraints?.requireProofOfFix ??
+            policy.constraints?.requireProofOfFix,
+        enableBreakingChangeRefactor: options.breakingChangeRefactor ??
+            options.constraints?.enableBreakingChangeRefactor ??
+            policy.constraints?.enableBreakingChangeRefactor,
+        supplyChainPolicy: options.supplyChainPolicy ??
+            options.constraints?.supplyChainPolicy ??
+            policy.constraints?.supplyChainPolicy,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/api/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAQnD,SAAS,cAAc;IACrB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAyB;IAEzB,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAyB;IAChE,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAW;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO;QACL,sBAAsB,EACpB,OAAO,CAAC,WAAW,EAAE,sBAAsB;YAC3C,MAAM,CAAC,WAAW,EAAE,sBAAsB;YAC1C,KAAK;QACP,iBAAiB,EACf,OAAO,CAAC,WAAW,EAAE,iBAAiB,IAAI,MAAM,CAAC,WAAW,EAAE,iBAAiB,IAAI,KAAK;QAC1F,WAAW,EACT,OAAO,CAAC,WAAW,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,eAAe;QACxF,oBAAoB,EAClB,OAAO,CAAC,WAAW,EAAE,oBAAoB,IAAI,MAAM,CAAC,WAAW,EAAE,oBAAoB;QACvF,qBAAqB,EACnB,OAAO,CAAC,WAAW,EAAE,qBAAqB,IAAI,MAAM,CAAC,WAAW,EAAE,qBAAqB;QACzF,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,SAAS;QAC1E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,SAAS;QAC/F,iBAAiB,EACf,OAAO,CAAC,iBAAiB;YACzB,OAAO,CAAC,WAAW,EAAE,iBAAiB;YACtC,MAAM,CAAC,WAAW,EAAE,iBAAiB;QACvC,4BAA4B,EAC1B,OAAO,CAAC,sBAAsB;YAC9B,OAAO,CAAC,WAAW,EAAE,4BAA4B;YACjD,MAAM,CAAC,WAAW,EAAE,4BAA4B;QAClD,iBAAiB,EACf,OAAO,CAAC,iBAAiB;YACzB,OAAO,CAAC,WAAW,EAAE,iBAAiB;YACtC,MAAM,CAAC,WAAW,EAAE,iBAAiB;KACxC,CAAC;AACJ,CAAC"}

package/dist/api/contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/api/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/api/contracts.ts"],"names":[],"mappings":""}

package/dist/api/delta-scan/index.js

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: scanDelta
+ */
+export { scanDelta } from "../../scanner/delta-scan.js";
+//# sourceMappingURL=index.js.map

package/dist/api/delta-scan/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/delta-scan/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/api/evaluate/index.js

@@ -0,0 +1,5 @@
+/**
+ * Public SDK API: evaluatePackage
+ */
+export { evaluatePackage } from "../../remediation/evaluate-package.js";
+//# sourceMappingURL=index.js.map

package/dist/api/evaluate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/evaluate/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,16 @@
+export { PACKAGE_MANAGER_VALUES, PROVENANCE_SOURCE_VALUES, OPTION_DESCRIPTIONS, createConstraintSchemaProperties, createRemediateOptionSchemaProperties, createScanOptionSchemaProperties, createScanReportSchemaProperties, createUpdateOutdatedOptionSchemaProperties, } from "./options-schema.js";
+export { toCiSummary, ciExitCode, buildSlaBreachSummary, buildStrategyCounts, buildDependencyScopeCounts, } from "./reporting.js";
+export { toSarifOutput } from "./sarif.js";
+export { toCycloneDxVex, } from "./vex/index.js";
+export { inspectPatchArtifact, listPatchArtifacts, validatePatchArtifact, reconcilePatchArtifacts, } from "./patches/index.js";
+export { createLlmPatchGenerator } from "../remediation/patch/llm-generator.js";
+export { resolveLanguageModel } from "../remediation/patch/model.js";
+export { remediatePortfolio } from "./portfolio/index.js";
+export { remediate, planRemediation } from "./remediate/index.js";
+export { remediateFromScan } from "./remediate-from-scan/index.js";
+export { updateOutdated } from "./update-outdated/index.js";
+export { checkReachability } from "./reachability/index.js";
+export { evaluatePackage } from "./evaluate/index.js";
+export { scanDelta } from "./delta-scan/index.js";
+export { submitRemediateJob, submitScanJob, submitPortfolioJob, pollJob, } from "./jobs/index.js";
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAiFA,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,qCAAqC,EACrC,gCAAgC,EAChC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAoB,MAAM,YAAY,CAAC;AAC7D,OAAO,EACL,cAAc,GAKf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,OAAO,GAIR,MAAM,iBAAiB,CAAC"}

package/dist/api/jobs/index.js

@@ -0,0 +1,54 @@
+import { randomUUID } from "node:crypto";
+import { jobRegistry } from "../../platform/jobs.js";
+import { remediatePortfolio } from "../portfolio/index.js";
+import { remediateFromScan } from "../remediate-from-scan/index.js";
+import { remediate } from "../remediate/index.js";
+function createJob() {
+    const jobId = randomUUID();
+    const submittedAt = new Date().toISOString();
+    const job = { jobId, status: "pending", submittedAt };
+    jobRegistry.set(jobId, job);
+    return job;
+}
+async function executeJob(job, work) {
+    // Yield first so callers observe the "pending" status before the work starts.
+    await Promise.resolve();
+    try {
+        job.status = "running";
+        const result = await work();
+        job.status = "done";
+        job.result = result;
+        job.completedAt = new Date().toISOString();
+    }
+    catch (error) {
+        job.status = "failed";
+        job.error = error instanceof Error ? error.message : String(error);
+        job.completedAt = new Date().toISOString();
+    }
+}
+function runJobAsync(job, work) {
+    void executeJob(job, work);
+}
+export function submitRemediateJob(cveId, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediate(cveId, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function submitScanJob(inputPath, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediateFromScan(inputPath, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function submitPortfolioJob(targets, options) {
+    const job = createJob();
+    runJobAsync(job, () => remediatePortfolio(targets, options));
+    return { jobId: job.jobId, status: job.status, submittedAt: job.submittedAt };
+}
+export function pollJob(jobId) {
+    const job = jobRegistry.get(jobId);
+    if (!job) {
+        throw new Error(`Job not found: ${jobId}`);
+    }
+    return job;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AASrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAQlD,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC3E,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAwB,EAAE,IAA4B;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,GAAG,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAwB,EAAE,IAA4B;IACzE,KAAK,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAA0B;IAC1E,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAqB;IACpE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAA+B,CAAC;AACzC,CAAC"}