autoremediator 0.21.1 → 0.21.2

package/dist/api/options-schema.js

@@ -0,0 +1,367 @@
+export const PACKAGE_MANAGER_VALUES = ["npm", "pnpm", "yarn", "bun", "deno"];
+export const PROVENANCE_SOURCE_VALUES = ["cli", "sdk", "mcp", "openapi", "unknown"];
+export const OPTION_DESCRIPTIONS = {
+    cveId: "CVE ID, e.g. CVE-2021-23337",
+    inputPath: "Absolute path to the scanner output file",
+    cwd: "Absolute path to the project root (default: process.cwd())",
+    packageManager: "Package manager override (auto-detected by default)",
+    dryRun: "If true, plan changes but write nothing",
+    preview: "If true, enforce non-mutating preview mode",
+    simulationMode: "If true, attach deterministic simulation and rebuttal metadata for dry-run or preview execution",
+    runTests: "Run package-manager test command after applying fix",
+    model: 'Language model for the patch fallback as "<provider>:<model-id>", e.g. "anthropic:claude-sonnet-5-5" (default: AUTOREMEDIATOR_MODEL)',
+    patchConfidenceThresholdLow: "Patch acceptance confidence threshold for low-risk patches (0..1)",
+    patchConfidenceThresholdMedium: "Patch acceptance confidence threshold for medium-risk patches (0..1)",
+    patchConfidenceThresholdHigh: "Patch acceptance confidence threshold for high-risk patches (0..1)",
+    patchesDir: "Directory to write .patch files (default: ./patches)",
+    policy: "Optional path to .github/autoremediator.yml policy file",
+    requestId: "Request correlation ID",
+    sessionId: "Session correlation ID",
+    parentRunId: "Parent run correlation ID",
+    idempotencyKey: "Idempotency key for replay-safe execution",
+    resume: "Return cached result for matching idempotency key when available",
+    actor: "Actor identity for evidence provenance",
+    source: "Source system for provenance",
+    format: "Scanner format (default: auto)",
+    audit: "Run package-manager-native audit command instead of reading a scan file",
+    evidence: "Write evidence JSON to .autoremediator/evidence/ (default: true)",
+    directDependenciesOnly: "Restrict remediation to direct dependencies only",
+    preferVersionBump: "Reject override and patch remediation when version-bump-only policy is required",
+    installMode: "Install behavior profile: deterministic|prefer-offline|standard",
+    installPreferOffline: "Override prefer-offline flag behavior for install commands",
+    enforceFrozenLockfile: "Override frozen lockfile behavior for install commands",
+    workspace: "Workspace/package selector for scoped remediation in monorepos",
+    createChangeRequest: "Enable creation of native pull request / merge request after remediation",
+    changeRequestProvider: "Change request provider (github|gitlab)",
+    changeRequestGrouping: "Grouping strategy for change requests (all|per-cve|per-package)",
+    changeRequestRepository: "Repository slug override for change request creation",
+    changeRequestBaseBranch: "Base branch used for change request targeting",
+    changeRequestBranchPrefix: "Branch prefix for generated change request branches",
+    changeRequestTitlePrefix: "Title prefix for generated change requests",
+    includeTransitive: "Include transitive dependencies in the outdated check. Default: false.",
+    updateOutdated: "Run in update-outdated mode: bump all outdated npm packages without requiring a CVE.",
+    kevMandatory: "If true, CVEs with active CISA KEV status bypass severity filtering and are treated as mandatory",
+    epssThreshold: "EPSS probability threshold (0..1) above which a CVE is treated as mandatory regardless of severity",
+    suppressionsFile: "Path to a YAML file containing additional VEX suppression entries to merge with policy-inline suppressions",
+    slaCheck: "Compare CVE publication dates against configured SLA windows and include breach records in the report output",
+    skipUnreachable: "Skip remediation for CVEs where the vulnerable package cannot be reached from any project entry point (requires static import analysis)",
+    dispositionPolicy: "Autonomous disposition policy controlling when fixes are auto-applied, held, or escalated",
+    dispositionPolicyMinConfidenceForAutoApply: "Minimum patch confidence (0–1) required for auto-apply disposition",
+    dispositionPolicyHoldForTransitive: "Hold transitive dependency fixes for human review instead of auto-applying",
+    dispositionPolicyEscalateOnSlaBreachSeverities: "CVE severities that trigger escalate disposition on SLA breach",
+    dispositionPolicyEscalateOnKev: "Escalate disposition for CVEs with active CISA KEV status",
+    containmentMode: "Roll back applied results whose disposition is hold-for-approval (low confidence, held transitive) so they await approval; urgent escalate fixes (KEV, SLA) are kept",
+    campaignMode: "Enable portfolio campaign mode to risk-rank targets before execution",
+    escalationGraph: "Optional mapping from unresolved reasons to intended escalation actions",
+    offlineIntelligence: "Skip all network calls to intelligence sources. Only local inventory and npm-registry version resolution proceed.",
+    intelligenceSnapshotPath: "Path to a local JSON snapshot of pre-fetched CVE intelligence (keyed by CVE ID) used when offline mode is active.",
+    proofOfFix: "If true, enforce dual-stage exploit reproduction proof-of-fix verification (assert failure pre-patch, assert pass post-patch)",
+    requireProofOfFix: "If true, reject patches and roll back if proof-of-fix verification fails",
+    breakingChangeRefactor: "Experimental: when a major upgrade breaks type checking, rewrite consumer call sites using built-in codemods (currently rimraf and uuid only); reverted if checks still fail",
+};
+export function createConstraintSchemaProperties() {
+    return {
+        directDependenciesOnly: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.directDependenciesOnly,
+        },
+        preferVersionBump: { type: "boolean", description: OPTION_DESCRIPTIONS.preferVersionBump },
+        installMode: {
+            type: "string",
+            enum: ["deterministic", "prefer-offline", "standard"],
+            description: OPTION_DESCRIPTIONS.installMode,
+        },
+        installPreferOffline: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.installPreferOffline,
+        },
+        enforceFrozenLockfile: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.enforceFrozenLockfile,
+        },
+        workspace: { type: "string", description: OPTION_DESCRIPTIONS.workspace },
+        requireProofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.requireProofOfFix },
+        enableBreakingChangeRefactor: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.breakingChangeRefactor,
+        },
+    };
+}
+export function createRemediateOptionSchemaProperties(options) {
+    const includeDryRun = options?.includeDryRun ?? true;
+    const includePreview = options?.includePreview ?? true;
+    const includeSimulationMode = options?.includeSimulationMode ?? true;
+    const includeEvidence = options?.includeEvidence ?? true;
+    return {
+        cwd: { type: "string", description: OPTION_DESCRIPTIONS.cwd },
+        packageManager: {
+            type: "string",
+            enum: [...PACKAGE_MANAGER_VALUES],
+            description: OPTION_DESCRIPTIONS.packageManager,
+        },
+        ...(includeDryRun
+            ? { dryRun: { type: "boolean", description: OPTION_DESCRIPTIONS.dryRun } }
+            : {}),
+        ...(includePreview
+            ? { preview: { type: "boolean", description: OPTION_DESCRIPTIONS.preview } }
+            : {}),
+        ...(includeSimulationMode
+            ? { simulationMode: { type: "boolean", description: OPTION_DESCRIPTIONS.simulationMode } }
+            : {}),
+        runTests: { type: "boolean", description: OPTION_DESCRIPTIONS.runTests },
+        model: { type: "string", description: OPTION_DESCRIPTIONS.model },
+        patchConfidenceThresholds: {
+            type: "object",
+            properties: {
+                low: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdLow,
+                },
+                medium: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdMedium,
+                },
+                high: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.patchConfidenceThresholdHigh,
+                },
+            },
+        },
+        patchesDir: { type: "string", description: OPTION_DESCRIPTIONS.patchesDir },
+        policy: { type: "string", description: OPTION_DESCRIPTIONS.policy },
+        ...(includeEvidence
+            ? { evidence: { type: "boolean", description: OPTION_DESCRIPTIONS.evidence } }
+            : {}),
+        requestId: { type: "string", description: OPTION_DESCRIPTIONS.requestId },
+        sessionId: { type: "string", description: OPTION_DESCRIPTIONS.sessionId },
+        parentRunId: { type: "string", description: OPTION_DESCRIPTIONS.parentRunId },
+        idempotencyKey: { type: "string", description: OPTION_DESCRIPTIONS.idempotencyKey },
+        resume: { type: "boolean", description: OPTION_DESCRIPTIONS.resume },
+        actor: { type: "string", description: OPTION_DESCRIPTIONS.actor },
+        source: {
+            type: "string",
+            enum: [...PROVENANCE_SOURCE_VALUES],
+            description: OPTION_DESCRIPTIONS.source,
+        },
+        constraints: {
+            type: "object",
+            properties: createConstraintSchemaProperties(),
+        },
+        changeRequest: {
+            type: "object",
+            properties: {
+                enabled: { type: "boolean", description: OPTION_DESCRIPTIONS.createChangeRequest },
+                provider: {
+                    type: "string",
+                    enum: ["github", "gitlab"],
+                    description: OPTION_DESCRIPTIONS.changeRequestProvider,
+                },
+                grouping: {
+                    type: "string",
+                    enum: ["all", "per-cve", "per-package"],
+                    description: OPTION_DESCRIPTIONS.changeRequestGrouping,
+                },
+                repository: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestRepository },
+                baseBranch: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestBaseBranch },
+                branchPrefix: {
+                    type: "string",
+                    description: OPTION_DESCRIPTIONS.changeRequestBranchPrefix,
+                },
+                titlePrefix: { type: "string", description: OPTION_DESCRIPTIONS.changeRequestTitlePrefix },
+            },
+        },
+        kevMandatory: { type: "boolean", description: OPTION_DESCRIPTIONS.kevMandatory },
+        epssThreshold: {
+            type: "number",
+            minimum: 0,
+            maximum: 1,
+            description: OPTION_DESCRIPTIONS.epssThreshold,
+        },
+        suppressionsFile: { type: "string", description: OPTION_DESCRIPTIONS.suppressionsFile },
+        slaCheck: { type: "boolean", description: OPTION_DESCRIPTIONS.slaCheck },
+        skipUnreachable: { type: "boolean", description: OPTION_DESCRIPTIONS.skipUnreachable },
+        dispositionPolicy: {
+            type: "object",
+            description: OPTION_DESCRIPTIONS.dispositionPolicy,
+            properties: {
+                minConfidenceForAutoApply: {
+                    type: "number",
+                    minimum: 0,
+                    maximum: 1,
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyMinConfidenceForAutoApply,
+                },
+                holdForTransitive: {
+                    type: "boolean",
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyHoldForTransitive,
+                },
+                escalateOnSlaBreachSeverities: {
+                    type: "array",
+                    items: { type: "string", enum: ["critical", "high", "medium", "low"] },
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyEscalateOnSlaBreachSeverities,
+                },
+                escalateOnKev: {
+                    type: "boolean",
+                    description: OPTION_DESCRIPTIONS.dispositionPolicyEscalateOnKev,
+                },
+            },
+        },
+        containmentMode: { type: "boolean", description: OPTION_DESCRIPTIONS.containmentMode },
+        campaignMode: { type: "boolean", description: OPTION_DESCRIPTIONS.campaignMode },
+        escalationGraph: {
+            type: "object",
+            description: OPTION_DESCRIPTIONS.escalationGraph,
+            properties: {
+                "constraint-blocked": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "transitive-dependency": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "install-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "major-bump-required": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "no-safe-version": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "override-apply-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "package-json-not-found": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-apply-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-confidence-too-low": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-generation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "patch-validation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "policy-blocked": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "requires-llm-fallback": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "source-fetch-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "validation-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "proof-of-fix-failed": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+                "breaking-change-unresolved": {
+                    type: "string",
+                    enum: ["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"],
+                },
+            },
+            additionalProperties: false,
+        },
+        offlineIntelligence: { type: "boolean", description: OPTION_DESCRIPTIONS.offlineIntelligence },
+        intelligenceSnapshotPath: {
+            type: "string",
+            description: OPTION_DESCRIPTIONS.intelligenceSnapshotPath,
+        },
+        proofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.proofOfFix },
+        requireProofOfFix: { type: "boolean", description: OPTION_DESCRIPTIONS.requireProofOfFix },
+        breakingChangeRefactor: {
+            type: "boolean",
+            description: OPTION_DESCRIPTIONS.breakingChangeRefactor,
+        },
+    };
+}
+export function createScanOptionSchemaProperties() {
+    return {
+        ...createRemediateOptionSchemaProperties({ includeEvidence: true }),
+        format: {
+            type: "string",
+            enum: ["npm-audit", "yarn-audit", "sarif", "auto"],
+            description: OPTION_DESCRIPTIONS.format,
+        },
+        audit: { type: "boolean", description: OPTION_DESCRIPTIONS.audit },
+        slaCheck: { type: "boolean", description: OPTION_DESCRIPTIONS.slaCheck },
+    };
+}
+export function createScanReportSchemaProperties() {
+    return {
+        schemaVersion: { type: "string" },
+        status: { type: "string", enum: ["ok", "partial", "failed"] },
+        generatedAt: { type: "string" },
+        cveIds: { type: "array", items: { type: "string" } },
+        reports: { type: "array", items: { type: "object" } },
+        successCount: { type: "number" },
+        failedCount: { type: "number" },
+        errors: { type: "array", items: { type: "object" } },
+        evidenceFile: { type: "string" },
+        patchCount: { type: "number" },
+        patchValidationFailures: { type: "array", items: { type: "object" } },
+        strategyCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        dependencyScopeCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        unresolvedByReason: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        escalationCounts: {
+            type: "object",
+            additionalProperties: { type: "number" },
+        },
+        patchesDir: { type: "string" },
+        correlation: { type: "object" },
+        provenance: { type: "object" },
+        constraints: { type: "object" },
+        idempotencyKey: { type: "string" },
+        llmUsageCount: { type: "number" },
+        totalInputTokens: { type: "number" },
+        totalOutputTokens: { type: "number" },
+        totalLlmLatencyMs: { type: "number" },
+        changeRequests: { type: "array", items: { type: "object" } },
+        simulationSummary: { type: "object" },
+    };
+}
+export function createUpdateOutdatedOptionSchemaProperties() {
+    return {
+        ...createRemediateOptionSchemaProperties({
+            includeEvidence: true,
+            includeSimulationMode: false,
+        }),
+        includeTransitive: { type: "boolean", description: OPTION_DESCRIPTIONS.includeTransitive },
+    };
+}
+//# sourceMappingURL=options-schema.js.map

package/dist/api/options-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options-schema.js","sourceRoot":"","sources":["../../src/api/options-schema.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE7F,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,6BAA6B;IACpC,SAAS,EAAE,0CAA0C;IACrD,GAAG,EAAE,4DAA4D;IACjE,cAAc,EAAE,qDAAqD;IACrE,MAAM,EAAE,yCAAyC;IACjD,OAAO,EAAE,4CAA4C;IACrD,cAAc,EACZ,iGAAiG;IACnG,QAAQ,EAAE,qDAAqD;IAC/D,KAAK,EACH,sIAAsI;IACxI,2BAA2B,EAAE,mEAAmE;IAChG,8BAA8B,EAC5B,sEAAsE;IACxE,4BAA4B,EAC1B,oEAAoE;IACtE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,yDAAyD;IACjE,SAAS,EAAE,wBAAwB;IACnC,SAAS,EAAE,wBAAwB;IACnC,WAAW,EAAE,2BAA2B;IACxC,cAAc,EAAE,2CAA2C;IAC3D,MAAM,EAAE,kEAAkE;IAC1E,KAAK,EAAE,wCAAwC;IAC/C,MAAM,EAAE,8BAA8B;IACtC,MAAM,EAAE,gCAAgC;IACxC,KAAK,EAAE,yEAAyE;IAChF,QAAQ,EAAE,kEAAkE;IAC5E,sBAAsB,EAAE,kDAAkD;IAC1E,iBAAiB,EACf,iFAAiF;IACnF,WAAW,EAAE,iEAAiE;IAC9E,oBAAoB,EAAE,4DAA4D;IAClF,qBAAqB,EAAE,wDAAwD;IAC/E,SAAS,EAAE,gEAAgE;IAC3E,mBAAmB,EAAE,0EAA0E;IAC/F,qBAAqB,EAAE,yCAAyC;IAChE,qBAAqB,EAAE,iEAAiE;IACxF,uBAAuB,EAAE,sDAAsD;IAC/E,uBAAuB,EAAE,+CAA+C;IACxE,yBAAyB,EAAE,qDAAqD;IAChF,wBAAwB,EAAE,4CAA4C;IACtE,iBAAiB,EAAE,wEAAwE;IAC3F,cAAc,EACZ,sFAAsF;IACxF,YAAY,EACV,kGAAkG;IACpG,aAAa,EACX,oGAAoG;IACtG,gBAAgB,EACd,4GAA4G;IAC9G,QAAQ,EACN,8GAA8G;IAChH,eAAe,EACb,yIAAyI;IAC3I,iBAAiB,EACf,2FAA2F;IAC7F,0CAA0C,EACxC,oEAAoE;IACtE,kCAAkC,EAChC,4EAA4E;IAC9E,8CAA8C,EAC5C,gEAAgE;IAClE,8BAA8B,EAAE,2DAA2D;IAC3F,eAAe,EACb,sKAAsK;IACxK,YAAY,EAAE,sEAAsE;IACpF,eAAe,EAAE,yEAAyE;IAC1F,mBAAmB,EACjB,mHAAmH;IACrH,wBAAwB,EACtB,mHAAmH;IACrH,UAAU,EACR,+HAA+H;IACjI,iBAAiB,EAAE,0EAA0E;IAC7F,sBAAsB,EACpB,8KAA8K;CACxK,CAAC;AAEX,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,sBAAsB,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;QACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,UAAU,CAAC;YACrD,WAAW,EAAE,mBAAmB,CAAC,WAAW;SAC7C;QACD,oBAAoB,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,oBAAoB;SACtD;QACD,qBAAqB,EAAE;YACrB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;SACvD;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,4BAA4B,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,OAKrD;IACC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IACvD,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,IAAI,CAAC;IAEzD,OAAO;QACL,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,GAAG,EAAE;QAC7D,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,sBAAsB,CAAC;YACjC,WAAW,EAAE,mBAAmB,CAAC,cAAc;SAChD;QACD,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE;YAC5E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,qBAAqB;YACvB,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,cAAc,EAAE,EAAE;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACxE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QACjE,yBAAyB,EAAE;YACzB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,2BAA2B;iBAC7D;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,8BAA8B;iBAChE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,4BAA4B;iBAC9D;aACF;SACF;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,UAAU,EAAE;QAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE;QACnE,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE,EAAE;YAC9E,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,EAAE;QACzE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,WAAW,EAAE;QAC7E,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,cAAc,EAAE;QACnF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,MAAM,EAAE;QACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QACjE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,wBAAwB,CAAC;YACnC,WAAW,EAAE,mBAAmB,CAAC,MAAM;SACxC;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,gCAAgC,EAAE;SAC/C;QACD,aAAa,EAAE;YACb,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,mBAAmB,EAAE;gBAClF,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;oBAC1B,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;iBACvD;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC;oBACvC,WAAW,EAAE,mBAAmB,CAAC,qBAAqB;iBACvD;gBACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,uBAAuB,EAAE;gBACxF,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,uBAAuB,EAAE;gBACxF,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mBAAmB,CAAC,yBAAyB;iBAC3D;gBACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,wBAAwB,EAAE;aAC3F;SACF;QACD,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,EAAE;QAChF,aAAa,EAAE;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,mBAAmB,CAAC,aAAa;SAC/C;QACD,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,gBAAgB,EAAE;QACvF,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACxE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,eAAe,EAAE;QACtF,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,iBAAiB;YAClD,UAAU,EAAE;gBACV,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,mBAAmB,CAAC,0CAA0C;iBAC5E;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mBAAmB,CAAC,kCAAkC;iBACpE;gBACD,6BAA6B,EAAE;oBAC7B,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;oBACtE,WAAW,EAAE,mBAAmB,CAAC,8CAA8C;iBAChF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mBAAmB,CAAC,8BAA8B;iBAChE;aACF;SACF;QACD,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,eAAe,EAAE;QACtF,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,EAAE;QAChF,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,eAAe;YAChD,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,wBAAwB,EAAE;oBACxB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,0BAA0B,EAAE;oBAC1B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,qBAAqB,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;gBACD,4BAA4B,EAAE;oBAC5B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC;iBACjF;aACF;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,mBAAmB,EAAE;QAC9F,wBAAwB,EAAE;YACxB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mBAAmB,CAAC,wBAAwB;SAC1D;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,UAAU,EAAE;QAC5E,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;QAC1F,sBAAsB,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mBAAmB,CAAC,sBAAsB;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,GAAG,qCAAqC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACnE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;YAClD,WAAW,EAAE,mBAAmB,CAAC,MAAM;SACxC;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE;QAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,QAAQ,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;QAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrE,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,qBAAqB,EAAE;YACrB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,kBAAkB,EAAE;YAClB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC5D,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C;IACxD,OAAO;QACL,GAAG,qCAAqC,CAAC;YACvC,eAAe,EAAE,IAAI;YACrB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;QACF,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,iBAAiB,EAAE;KAC3F,CAAC;AACJ,CAAC"}

package/dist/api/patches/helpers.js

@@ -0,0 +1,71 @@
+import { existsSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { isAbsolute, resolve, sep } from "node:path";
+export const DEFAULT_PATCHES_DIR = "./patches";
+export function resolvePatchesDir(cwd, patchesDir = DEFAULT_PATCHES_DIR) {
+    return isAbsolute(patchesDir) ? patchesDir : resolve(cwd, patchesDir);
+}
+export function resolveArtifactPath(cwd, patchFilePath) {
+    const resolved = isAbsolute(patchFilePath) ? patchFilePath : resolve(cwd, patchFilePath);
+    if (!resolved.endsWith(".patch")) {
+        throw new Error(`patchFilePath must point to a .patch file: ${patchFilePath}`);
+    }
+    const patchesRoot = resolvePatchesDir(cwd);
+    if (!resolved.startsWith(patchesRoot + sep)) {
+        throw new Error(`patchFilePath must be inside the patches directory: ${patchFilePath}`);
+    }
+    return resolved;
+}
+export async function readManifest(manifestFilePath) {
+    if (!existsSync(manifestFilePath)) {
+        return undefined;
+    }
+    try {
+        const raw = await readFile(manifestFilePath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed === null ||
+            typeof parsed !== "object" ||
+            parsed.schemaVersion !== "1.0" ||
+            typeof parsed.packageName !== "string" ||
+            typeof parsed.vulnerableVersion !== "string" ||
+            typeof parsed.patchFilePath !== "string" ||
+            typeof parsed.patchFileName !== "string" ||
+            typeof parsed.applied !== "boolean" ||
+            typeof parsed.dryRun !== "boolean" ||
+            typeof parsed.generatedAt !== "string") {
+            return undefined;
+        }
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function derivePatchMetadata(patchContent) {
+    const files = [
+        ...new Set(patchContent
+            .split(/\r?\n/)
+            .filter((line) => line.startsWith("+++ b/"))
+            .map((line) => line.slice("+++ b/".length))),
+    ];
+    const hunkCount = patchContent.split(/\r?\n/).filter((line) => line.startsWith("@@ ")).length;
+    return { files, hunkCount };
+}
+export function toSummary(inspection) {
+    return {
+        patchFilePath: inspection.patchFilePath,
+        manifestFilePath: inspection.manifestFilePath,
+        patchFileName: inspection.patchFileName,
+        cveId: inspection.cveId,
+        packageName: inspection.packageName,
+        vulnerableVersion: inspection.vulnerableVersion,
+        patchMode: inspection.patchMode,
+        confidence: inspection.confidence,
+        riskLevel: inspection.riskLevel,
+        generatedAt: inspection.generatedAt,
+        files: inspection.files,
+        hunkCount: inspection.hunkCount,
+        diffValid: inspection.diffValid,
+    };
+}
+//# sourceMappingURL=helpers.js.map

package/dist/api/patches/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/api/patches/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAQrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAE/C,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,UAAU,GAAG,mBAAmB;IAC7E,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,aAAqB;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,aAAa,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uDAAuD,aAAa,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,gBAAwB;IACzD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,aAAa,KAAK,KAAK;YAC9B,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;YAC5C,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;YACnC,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS;YAClC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EACtC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CACR,YAAY;aACT,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;aAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC9C;KACF,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAE9F,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAmC;IAC3D,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC"}

package/dist/api/patches/index.js

@@ -0,0 +1,4 @@
+export { listPatchArtifacts, inspectPatchArtifact } from "./inspection.js";
+export { validatePatchArtifact } from "./validation.js";
+export { reconcilePatchArtifacts } from "./reconcile.js";
+//# sourceMappingURL=index.js.map

package/dist/api/patches/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/patches/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/api/patches/inspection.js

@@ -0,0 +1,66 @@
+import { existsSync } from "node:fs";
+import { readdir, readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { validatePatchDiff } from "../../remediation/strategies/patch-utils.js";
+import { readManifest, resolveArtifactPath, resolvePatchesDir, toSummary, derivePatchMetadata, } from "./helpers.js";
+export async function listPatchArtifacts(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const patchesDirPath = resolvePatchesDir(cwd, options.patchesDir);
+    if (!existsSync(patchesDirPath)) {
+        return [];
+    }
+    const entries = await readdir(patchesDirPath, { withFileTypes: true });
+    const patchFiles = entries
+        .filter((entry) => entry.isFile() && entry.name.endsWith(".patch"))
+        .map((entry) => join(patchesDirPath, entry.name))
+        .toSorted((left, right) => left.localeCompare(right));
+    const summaries = await Promise.all(patchFiles.map(async (patchFilePath) => {
+        const inspection = await inspectPatchArtifact(patchFilePath, options);
+        return toSummary(inspection);
+    }));
+    return summaries;
+}
+export async function inspectPatchArtifact(patchFilePath, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const resolvedPatchPath = resolveArtifactPath(cwd, patchFilePath);
+    const patchFileName = resolvedPatchPath.split("/").pop() ?? resolvedPatchPath;
+    const manifestFilePath = `${resolvedPatchPath}.json`;
+    if (!existsSync(resolvedPatchPath)) {
+        return {
+            patchFilePath: resolvedPatchPath,
+            manifestFilePath: existsSync(manifestFilePath) ? manifestFilePath : undefined,
+            patchFileName,
+            exists: false,
+            diffValid: false,
+            formatError: "Patch file does not exist.",
+        };
+    }
+    const [patchContent, fileStats, manifest] = await Promise.all([
+        readFile(resolvedPatchPath, "utf8"),
+        stat(resolvedPatchPath),
+        readManifest(manifestFilePath),
+    ]);
+    const format = validatePatchDiff(patchContent);
+    const derived = derivePatchMetadata(patchContent);
+    return {
+        patchFilePath: resolvedPatchPath,
+        manifestFilePath: manifest ? manifestFilePath : undefined,
+        patchFileName,
+        cveId: manifest?.cveId,
+        packageName: manifest?.packageName,
+        vulnerableVersion: manifest?.vulnerableVersion,
+        patchMode: manifest?.patchMode,
+        confidence: manifest?.confidence,
+        riskLevel: manifest?.riskLevel,
+        generatedAt: manifest?.generatedAt,
+        files: manifest?.files ?? derived.files,
+        hunkCount: manifest?.hunkCount ?? derived.hunkCount,
+        exists: true,
+        diffValid: format.valid,
+        formatError: format.error,
+        patchSizeBytes: fileStats.size,
+        lineCount: patchContent.split(/\r?\n/).length,
+        manifest,
+    };
+}
+//# sourceMappingURL=inspection.js.map

package/dist/api/patches/inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspection.js","sourceRoot":"","sources":["../../../src/api/patches/inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAO,GAA8B,EAAE;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SAClE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAChD,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAExD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtE,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAqB,EACrB,OAAO,GAA8B,EAAE;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB,CAAC;IAC9E,MAAM,gBAAgB,GAAG,GAAG,iBAAiB,OAAO,CAAC;IAErD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,aAAa,EAAE,iBAAiB;YAChC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YAC7E,aAAa;YACb,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,4BAA4B;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC;QACvB,YAAY,CAAC,gBAAgB,CAAC;KAC/B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAElD,OAAO;QACL,aAAa,EAAE,iBAAiB;QAChC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACzD,aAAa;QACb,KAAK,EAAE,QAAQ,EAAE,KAAK;QACtB,WAAW,EAAE,QAAQ,EAAE,WAAW;QAClC,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB;QAC9C,SAAS,EAAE,QAAQ,EAAE,SAAS;QAC9B,UAAU,EAAE,QAAQ,EAAE,UAAU;QAChC,SAAS,EAAE,QAAQ,EAAE,SAAS;QAC9B,WAAW,EAAE,QAAQ,EAAE,WAAW;QAClC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK;QACvC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,OAAO,CAAC,SAAS;QACnD,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,WAAW,EAAE,MAAM,CAAC,KAAK;QACzB,cAAc,EAAE,SAAS,CAAC,IAAI;QAC9B,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QAC7C,QAAQ;KACT,CAAC;AACJ,CAAC"}