autoremediator 0.21.2 → 0.22.0

package/dist/api/prove/types.d.ts

@@ -0,0 +1,105 @@
+import type { LanguageModel } from "ai";
+import type { PackageSource } from "../../remediation/impact/types.js";
+/** What an advisory says, for the agent to read. All of it is data, never instructions. */
+export interface AdvisoryContext {
+    id: string;
+    summary: string;
+    /** Longer description, from the advisory source or supplied by the caller. */
+    details?: string;
+    /** CWE identifiers (`CWE-1321`). */
+    cwes: string[];
+    references: string[];
+    source: "osv" | "user";
+}
+/** An npm package the advisory says is affected, with the range and the first fixed version. */
+export interface AdvisoryAffected {
+    name: string;
+    vulnerableRange: string;
+    firstPatchedVersion?: string;
+}
+export interface AdvisoryLookup {
+    context: AdvisoryContext;
+    affected: AdvisoryAffected[];
+}
+/** One published version, downloaded and checked against the registry's integrity digest. */
+export interface FetchedPackage {
+    name: string;
+    version: string;
+    /** The tarball as downloaded (already verified). */
+    bytes: Uint8Array;
+    source: PackageSource;
+    /** The digest the registry advertised, e.g. `sha512-…`. */
+    integrity: string;
+    tarballUrl: string;
+}
+/** What one script run in the sandbox did. */
+export interface RunRecord {
+    exitCode: number | null;
+    signal: string | null;
+    timedOut: boolean;
+    /** The run produced more output than allowed and was killed. */
+    outputLimitExceeded: boolean;
+    durationMs: number;
+    /** The last part of stdout and stderr, for people to read. */
+    outputTail: string;
+}
+export type RunVerdict = "reproduced" | "no-reproduction" | "crashed" | "clean" | "still-failing" | "timeout" | "output-limit" | "sandbox-violation";
+export interface JudgedRun extends RunRecord {
+    verdict: RunVerdict;
+}
+/** What the harness concluded about one candidate script. */
+export interface TrialResult {
+    accepted: boolean;
+    /** A sentence for the agent and the person: why it was kept or rejected. */
+    reason: string;
+    /** Which check decided it. */
+    stage: "screen" | "vulnerable" | "fixed" | "confirmed";
+    scriptSha256: string;
+    vulnerableRun?: JudgedRun;
+    fixedRun?: JudgedRun;
+}
+export interface ReproductionTask {
+    advisory: AdvisoryContext;
+    packageName: string;
+    vulnerableVersion: string;
+    fixedVersion: string;
+    /** Exports the fix changed, most likely first (a heuristic), one line each. */
+    candidates: string[];
+    /** Trials the agent may use. */
+    maxTrials: number;
+}
+export interface ReproductionEnv {
+    /** Both versions' source, read-only. */
+    sources: {
+        vulnerable: PackageSource;
+        fixed: PackageSource;
+    };
+    /** Run a candidate script through the harness. This is the only way a script is ever accepted. */
+    trial(script: string): Promise<TrialResult>;
+    signal: AbortSignal;
+    /** Wall-clock limit for the whole agent session. */
+    maxWallMs: number;
+}
+export interface ReproductionUsage {
+    model: string;
+    latencyMs: number;
+    inputTokens: number;
+    outputTokens: number;
+}
+export interface ReproductionOutcome {
+    /** How the agent stopped. It never says whether a script is good; the harness does. */
+    status: "stopped" | "gave-up" | "budget-exhausted" | "failed";
+    rationale: string;
+    usage: ReproductionUsage[];
+    transcript: Array<{
+        step: number;
+        text: string;
+    }>;
+}
+/** An agent that proposes reproduction scripts. Injectable; the built-in one drives an AI SDK model. */
+export interface ReproductionAgent {
+    id: string;
+    propose(task: ReproductionTask, env: ReproductionEnv): Promise<ReproductionOutcome>;
+}
+export type ModelResolver = (spec: string) => Promise<LanguageModel>;
+//# sourceMappingURL=types.d.ts.map

package/dist/api/prove/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/api/prove/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAExC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB;AAED,gGAAgG;AAChG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,gEAAgE;IAChE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,iBAAiB,GACjB,SAAS,GACT,OAAO,GACP,eAAe,GACf,SAAS,GACT,cAAc,GACd,mBAAmB,CAAC;AAExB,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,CAAC;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,OAAO,EAAE;QAAE,UAAU,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC;IAC7D,kGAAkG;IAClG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,EAAE,WAAW,CAAC;IACpB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,uFAAuF;IACvF,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,kBAAkB,GAAG,QAAQ,CAAC;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnD;AAED,wGAAwG;AACxG,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrF;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC"}

package/dist/api/prove/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/api/prove/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/api/prove/types.ts"],"names":[],"mappings":""}

package/dist/api/radar/deps.d.ts

@@ -0,0 +1,7 @@
+import type { ByteBudget, RadarDeps } from "./types.js";
+export declare class ByteBudgetExceeded extends Error {
+    constructor(limit: number, what: string);
+}
+export declare function createByteBudget(limit: number): ByteBudget;
+export declare function createDefaultRadarDeps(): RadarDeps;
+//# sourceMappingURL=deps.d.ts.map

package/dist/api/radar/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../../../src/api/radar/deps.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EACV,UAAU,EAGV,SAAS,EAGV,MAAM,YAAY,CAAC;AAOpB,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAGtC;CACF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAW1D;AAmOD,wBAAgB,sBAAsB,IAAI,SAAS,CAUlD"}

package/dist/api/radar/deps.js

@@ -0,0 +1,263 @@
+/**
+ * The real dependencies of radar: lockfile and `node_modules` for what is installed, the npm
+ * registry for versions and tarballs (integrity-verified, read in memory, never extracted), OSV for
+ * advisories, and optionally GitHub release notes. Nothing else touches the network or the disk.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import semver from "semver";
+import { parseOsvVuln, queryOsvPackage } from "../../intelligence/sources/osv.js";
+import { downloadTarball, getTarballInfo, verifyTarballIntegrity, } from "../../intelligence/sources/registry.js";
+import { httpClient, HttpError } from "../../platform/http-client.js";
+import { loadRegistryConfig, packumentUrl } from "../../platform/registry-config.js";
+import { assessUpgrade } from "../../remediation/impact/assess.js";
+import { readPackageTarball } from "../../remediation/impact/tarball.js";
+import { findOccurrences } from "../../scanner/lock-graph/index.js";
+import { loadProjectLocks } from "../incident/project.js";
+const PACKAGE_NAME = /^(?:@[a-z0-9~-][a-z0-9._~-]*\/)?[a-z0-9~-][a-z0-9._~-]*$/;
+const PACKUMENT_TIMEOUT_MS = 30_000;
+const GITHUB_TIMEOUT_MS = 15_000;
+const GITHUB_MAX_BYTES = 5 * 1024 * 1024;
+export class ByteBudgetExceeded extends Error {
+    constructor(limit, what) {
+        super(`Download budget of ${limit} bytes is spent; not fetching ${what}`);
+        this.name = "ByteBudgetExceeded";
+    }
+}
+export function createByteBudget(limit) {
+    return {
+        limit,
+        used: 0,
+        charge(bytes) {
+            this.used += bytes;
+        },
+        assertRoom(what) {
+            if (this.used >= this.limit)
+                throw new ByteBudgetExceeded(this.limit, what);
+        },
+    };
+}
+function readJson(path) {
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** What is installed: from the lockfiles, else from `node_modules` for the direct dependencies. */
+function listInstalled(cwd) {
+    const { locks, manifest } = loadProjectLocks(cwd);
+    const found = new Map();
+    for (const lock of locks) {
+        for (const occurrence of findOccurrences(lock.graph, () => true)) {
+            if (occurrence.scope === "unreferenced" || !semver.valid(occurrence.version))
+                continue;
+            const key = `${occurrence.name}@${occurrence.version}`;
+            const existing = found.get(key);
+            found.set(key, {
+                name: occurrence.name,
+                version: occurrence.version,
+                direct: (existing?.direct ?? false) || occurrence.direct,
+                scope: existing?.scope === "production" ? "production" : occurrence.scope,
+            });
+        }
+    }
+    if (found.size > 0 || locks.length > 0)
+        return [...found.values()];
+    // No lockfile: the direct dependencies as installed in node_modules.
+    const names = new Set([
+        ...Object.keys(manifest?.dependencies ?? {}),
+        ...Object.keys(manifest?.devDependencies ?? {}),
+        ...Object.keys(manifest?.optionalDependencies ?? {}),
+    ]);
+    for (const name of names) {
+        if (!PACKAGE_NAME.test(name))
+            continue;
+        const installed = readJson(join(cwd, "node_modules", name, "package.json"));
+        const version = installed?.["version"];
+        if (typeof version !== "string" || !semver.valid(version))
+            continue;
+        found.set(`${name}@${version}`, {
+            name,
+            version,
+            direct: true,
+            scope: Object.hasOwn(manifest?.dependencies ?? {}, name) ? "production" : "development",
+        });
+    }
+    return [...found.values()];
+}
+async function fetchVersions(name, cwd, budget) {
+    if (!PACKAGE_NAME.test(name))
+        throw new Error(`Invalid package name: ${name}`);
+    budget.assertRoom(`${name} metadata`);
+    const registry = loadRegistryConfig(cwd);
+    const url = packumentUrl(registry, name);
+    const request = async (abbreviated) => httpClient({
+        url,
+        headers: {
+            ...registry.headersFor(url),
+            Accept: abbreviated ? "application/vnd.npm.install-v1+json" : "application/json",
+        },
+        timeout: PACKUMENT_TIMEOUT_MS,
+    });
+    let note;
+    let response;
+    try {
+        response = await request(false);
+    }
+    catch (error) {
+        // The full document (which has publish times) can exceed the HTTP client's size cap.
+        if (!(error instanceof HttpError) || !/too large|exceeds/i.test(error.message))
+            throw error;
+        response = await request(true);
+        note =
+            "publish times were unavailable (registry document too large); timing signals were skipped";
+    }
+    if (response.status === 404)
+        return undefined;
+    if (!response.ok)
+        throw new Error(`npm registry error ${response.status} for "${name}"`);
+    const bytes = response.text.length;
+    budget.charge(bytes);
+    const data = response.data;
+    const times = data.time ?? {};
+    const versions = Object.entries(data.versions ?? {})
+        .filter(([version]) => semver.valid(version) && !semver.prerelease(version))
+        .map(([version, entry]) => {
+        const result = { version };
+        const published = times[version];
+        if (typeof entry?.deprecated === "string" && entry.deprecated !== "") {
+            result.deprecated = entry.deprecated;
+        }
+        if (typeof published === "string")
+            result.publishedAt = published;
+        return result;
+    });
+    const latest = data["dist-tags"]?.["latest"];
+    return {
+        versions,
+        ...(typeof latest === "string" ? { latest } : {}),
+        bytes,
+        ...(note ? { note } : {}),
+    };
+}
+async function loadPackage(name, version, cwd, budget) {
+    if (!PACKAGE_NAME.test(name))
+        throw new Error(`Invalid package name: ${name}`);
+    if (!semver.valid(version))
+        throw new Error(`Not an exact version: ${version}`);
+    budget.assertRoom(`${name}@${version}`);
+    const registry = loadRegistryConfig(cwd);
+    const info = await getTarballInfo(name, version, registry);
+    if (!info)
+        throw new Error(`${name}@${version} was not found on the registry`);
+    const bytes = await downloadTarball(info, registry);
+    budget.charge(bytes.byteLength);
+    const integrity = verifyTarballIntegrity(bytes, info);
+    if (!integrity.ok) {
+        throw new Error(`Refusing ${name}@${version}: tarball failed verification (${integrity.reason})`);
+    }
+    const { files, manifest, docs } = readPackageTarball(bytes, undefined, { includeDocs: true });
+    return {
+        name,
+        version,
+        files,
+        manifest,
+        integrityVerified: integrity.verified,
+        docs: docs ?? new Map(),
+    };
+}
+async function queryAdvisories(name, version) {
+    const vulns = await queryOsvPackage(name, version);
+    const found = new Map();
+    for (const vuln of vulns) {
+        const details = parseOsvVuln(vuln);
+        const affected = details.affectedPackages.find((entry) => entry.name === name);
+        if (!affected || found.has(details.id))
+            continue;
+        found.set(details.id, {
+            id: details.id,
+            ...(affected.firstPatchedVersion ? { fixedIn: affected.firstPatchedVersion } : {}),
+            ...(affected.vulnerableRange ? { range: affected.vulnerableRange } : {}),
+        });
+    }
+    return [...found.values()];
+}
+/**
+ * Unauthenticated GitHub releases. Never sends a token. Stops and says so when the rate limit is
+ * reached, and does not try again for the rest of the run.
+ */
+function createGithubFetcher() {
+    let exhausted;
+    return async ({ owner, repo }) => {
+        if (exhausted)
+            return { releases: [], note: exhausted };
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), GITHUB_TIMEOUT_MS);
+        try {
+            const response = await fetch(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/releases?per_page=100`, {
+                headers: {
+                    Accept: "application/vnd.github+json",
+                    "X-GitHub-Api-Version": "2022-11-28",
+                    "User-Agent": "autoremediator-radar",
+                },
+                signal: controller.signal,
+            });
+            const remaining = Number.parseInt(response.headers.get("x-ratelimit-remaining") ?? "", 10);
+            const reset = Number.parseInt(response.headers.get("x-ratelimit-reset") ?? "", 10);
+            if (response.status === 403 || response.status === 429 || remaining === 0) {
+                exhausted = `GitHub rate limit reached${Number.isFinite(reset) ? ` (resets ${new Date(reset * 1000).toISOString()})` : ""}; release notes were not read for the remaining packages`;
+                if (response.status === 403 || response.status === 429)
+                    return { releases: [], note: exhausted };
+            }
+            else if (Number.isFinite(remaining) && remaining <= 2) {
+                exhausted =
+                    "GitHub rate limit nearly spent; release notes were not read for the remaining packages";
+            }
+            if (response.status === 404)
+                return { releases: [], note: `${owner}/${repo} has no releases on GitHub` };
+            if (!response.ok)
+                return { releases: [], note: `GitHub answered ${response.status} for ${owner}/${repo}` };
+            const declared = Number.parseInt(response.headers.get("content-length") ?? "", 10);
+            if (declared > GITHUB_MAX_BYTES)
+                return { releases: [], note: `GitHub releases for ${owner}/${repo} are too large` };
+            const text = await response.text();
+            if (text.length > GITHUB_MAX_BYTES)
+                return { releases: [], note: `GitHub releases for ${owner}/${repo} are too large` };
+            const parsed = JSON.parse(text);
+            if (!Array.isArray(parsed))
+                return { releases: [] };
+            const releases = parsed.flatMap((entry) => {
+                const record = typeof entry === "object" && entry !== null ? entry : {};
+                const tag = record["tag_name"];
+                const body = record["body"];
+                return typeof tag === "string" && typeof body === "string" ? [{ tag, body }] : [];
+            });
+            return { releases, ...(exhausted ? { note: exhausted } : {}) };
+        }
+        catch (error) {
+            return {
+                releases: [],
+                note: `GitHub releases for ${owner}/${repo} could not be read (${error instanceof Error ? error.name : "error"})`,
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+export function createDefaultRadarDeps() {
+    return {
+        listInstalled,
+        fetchVersions,
+        loadPackage,
+        queryAdvisories,
+        fetchGithubReleases: createGithubFetcher(),
+        assess: (name, from, to, cwd, load) => assessUpgrade(name, from, to, { cwd }, { loadPackage: (n, v) => load(n, v) }),
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/api/radar/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../../src/api/radar/deps.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EACL,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAU1D,MAAM,YAAY,GAAG,0DAA0D,CAAC;AAChF,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,KAAa,EAAE,IAAY;QACrC,KAAK,CAAC,sBAAsB,KAAK,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO;QACL,KAAK;QACL,IAAI,EAAE,CAAC;QACP,MAAM,CAAC,KAAK;YACV,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACrB,CAAC;QACD,UAAU,CAAC,IAAI;YACb,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,IAAI,UAAU,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvF,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACb,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM;gBACxD,KAAK,EAAE,QAAQ,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnE,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC;QAC5C,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;QAC/C,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,IAAI,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QACpE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE;YAC9B,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;SACxF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAQD,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,GAAW,EACX,MAAkB;IAElB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,EAAE,WAAoB,EAAE,EAAE,CAC7C,UAAU,CAAC;QACT,GAAG;QACH,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,kBAAkB;SACjF;QACD,OAAO,EAAE,oBAAoB;KAC9B,CAAC,CAAC;IAEL,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qFAAqF;QACrF,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5F,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI;YACF,2FAA2F,CAAC;IAChG,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAoB,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAoB,EAAE;QAC1C,MAAM,MAAM,GAAqB,EAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,EAAE,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YACrE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO;QACL,QAAQ;QACR,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,OAAe,EACf,GAAW,EACX,MAAkB;IAElB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,OAAO,gCAAgC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,IAAI,OAAO,kCAAkC,SAAS,CAAC,MAAM,GAAG,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,OAAO;QACL,IAAI;QACJ,OAAO;QACP,KAAK;QACL,QAAQ;QACR,iBAAiB,EAAE,SAAS,CAAC,QAAQ;QACrC,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,OAAe;IAC1D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4D,CAAC;IAClF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,SAAS;QACjD,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,IAAI,SAA6B,CAAC;IAClC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAA2B,EAAE;QACxD,IAAI,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,wBAAwB,EAC7G;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,6BAA6B;oBACrC,sBAAsB,EAAE,YAAY;oBACpC,YAAY,EAAE,sBAAsB;iBACrC;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CACF,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBAC1E,SAAS,GAAG,4BACV,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EACjF,0DAA0D,CAAC;gBAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBACpD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7C,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACxD,SAAS;oBACP,wFAAwF,CAAC;YAC7F,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACzB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,4BAA4B,EAAE,CAAC;YAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACd,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACnF,IAAI,QAAQ,GAAG,gBAAgB;gBAC7B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,uBAAuB,KAAK,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;gBAChC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,uBAAuB,KAAK,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACtF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,uBAAuB,KAAK,IAAI,IAAI,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG;aAClH,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,aAAa;QACb,aAAa;QACb,WAAW;QACX,eAAe;QACf,mBAAmB,EAAE,mBAAmB,EAAE;QAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CACpC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC"}

package/dist/api/radar/index.d.ts

@@ -0,0 +1,16 @@
+import type { RadarDeps, RadarOptions, RadarReport } from "./types.js";
+export type { RadarAdvisory, RadarDeps, RadarEntry, RadarImpact, RadarOptions, RadarReport, RadarSkipped, RadarTarget, } from "./types.js";
+export type { RadarFlag, RadarCategory, RadarConfidence } from "../../remediation/radar/types.js";
+export type { RadarModelPort, RadarModelRequest, RadarModelVerdict, } from "../../remediation/radar/model.js";
+export { createLlmRadarClassifier } from "../../remediation/radar/model.js";
+export { renderRadar, radarExitCode } from "./render.js";
+export declare const RADAR_DISCLAIMER: string;
+/** The release to compare with, or undefined when the installed version is not behind it. */
+export declare function pickTarget(installed: string, stable: readonly string[], latest: string | undefined, target: "latest" | "minor" | "patch"): string | undefined;
+/**
+ * Look for security-relevant changes, without a published advisory, in the releases between what the
+ * project has installed and a newer version. Read-only: downloads metadata and tarballs, changes
+ * nothing. See `docs/guides/silent-fix-radar.md`.
+ */
+export declare function radar(options?: RadarOptions, overrides?: Partial<RadarDeps>): Promise<RadarReport>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/radar/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/radar/index.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAIV,SAAS,EAET,YAAY,EAEZ,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAClG,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,gBAAgB,QAG+B,CAAC;AAoE7D,6FAA6F;AAC7F,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,GACnC,MAAM,GAAG,SAAS,CAUpB;AA6TD;;;;GAIG;AACH,wBAAsB,KAAK,CACzB,OAAO,GAAE,YAAiB,EAC1B,SAAS,GAAE,OAAO,CAAC,SAAS,CAAM,GACjC,OAAO,CAAC,WAAW,CAAC,CAsItB"}