autoremediator 0.21.2 → 0.22.0

package/dist/api/update-outdated/index.js

@@ -2,11 +2,13 @@ import { readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { queryOutdatedPackages } from "../../intelligence/sources/registry.js";
 import { addEvidenceStep, createEvidenceLog, finalizeEvidence, writeEvidenceLog, } from "../../platform/evidence.js";
+import { loadMemoryConstraints } from "../../platform/memory/consume.js";
 import { detectPackageManager, getYarnMajorVersion, resolveInstallCommand, resolveTestCommand, } from "../../platform/package-manager/index.js";
 import { loadPolicy } from "../../platform/policy.js";
 import { withRepoLock } from "../../platform/repo-lock.js";
 import { safeExecaCommand } from "../../platform/safe-exec-command.js";
 import { LONG_RUNNING_TIMEOUT_MS } from "../../platform/timeouts.js";
+import { assertAutonomyAllows } from "../autonomy/index.js";
 import { assertChangeRequestAllowed, createChangeRequestsForReports, } from "../change-request/index.js";
 import { resolveConstraints, resolveCorrelationContext, resolveProvenanceContext, } from "../context.js";
 // ---------------------------------------------------------------------------
@@ -96,6 +98,8 @@ export async function updateOutdated(options = {}) {
     const cwd = options.cwd ?? process.cwd();
     // Load policy exactly once
     const policy = loadPolicy(cwd, options.policy);
+    if (!options.dryRun)
+        assertAutonomyAllows(cwd, options.policy, "apply", "updateOutdated");
     const correlation = resolveCorrelationContext(options);
     const provenance = resolveProvenanceContext(options);
     const constraints = resolveConstraints(options, cwd);
@@ -152,7 +156,8 @@ export async function updateOutdated(options = {}) {
     const pm = options.packageManager ?? detectPackageManager(cwd);
     const yarnMajor = pm === "yarn" ? await getYarnMajorVersion(cwd) : undefined;
     const installCommand = resolveInstallCommand(pm, constraints, yarnMajor);
-    const testCommand = resolveTestCommand(pm, constraints);
+    const testCommand = resolveTestCommand(pm, constraints, cwd);
+    const memory = options.ignoreMemory ? undefined : loadMemoryConstraints(cwd);
     let successCount = 0;
     let failedCount = 0;
     let skippedCount = 0;
@@ -164,6 +169,13 @@ export async function updateOutdated(options = {}) {
             addEvidenceStep(evidence, "update-outdated.skip", { packageName, reason: "major-bump-not-allowed" }, {});
             continue;
         }
+        // A package a person pinned in the repository's memory is left alone.
+        const pinned = memory?.pinned.get(packageName);
+        if (pinned) {
+            skippedCount++;
+            addEvidenceStep(evidence, "update-outdated.skip", { packageName, reason: "pinned-by-memory", entry: pinned.id, why: pinned.reason }, {});
+            continue;
+        }
         // In dry-run mode, count as success but do not write
         if (options.dryRun) {
             successCount++;

package/dist/api/update-outdated/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/update-outdated/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GAEnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAMrE,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAoBvB,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,KAAK,UAAU,SAAS,CAAC,MASxB;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEjD,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAmB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,mCAAmC,OAAO,IAAI;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,CAAgB,CAAC,IAAI,CAC3F,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CACtD,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI,MAAM,CAAC,WAAW,+CAA+C;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAEhD,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzC,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC;QAClD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC5C,SAAS,EAAE,uBAAuB;gBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;YACtD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,SAAS,sBAAsB,OAAO,EAAE;aAChJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE;oBACzC,SAAS,EAAE,uBAAuB;oBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;gBACtD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxE,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE;wBAC5C,SAAS,EAAE,uBAAuB;wBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,KAAK,EAAE,MAAM;qBACd,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,iCAAiC,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,SAAS,yBAAyB,OAAO,EAAE;iBACvH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,WAAW,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,WAAW,OAAO,MAAM,CAAC,SAAS,GAAG;SAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAO,GAA0B,EAAE;IAEnC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,2BAA2B;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE;QAC1C,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE;QACjD,GAAG;QACH,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;QACrD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;KAChC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,IAAI,WAA8D,CAAC;IACnE,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE;YAC7C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;YACrD,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAe,CACb,QAAQ,EACR,uCAAuC,EACvC,EAAE,EACF,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5D,CAAC;QACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE9F,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzF,YAAY;YACZ,UAAU,EAAE,CAAC;YACb,WAAW;YACX,WAAW;YACX,UAAU;SACX,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAsB,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC,CAAC;IAEJ,eAAe,CACb,QAAQ,EACR,gCAAgC,EAChC,EAAE,EACF,EAAE,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAC1C,CAAC;IAEF,uDAAuD;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,cAAc,GAAG,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAExD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAoD,EAAE,CAAC;IAEnE,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QAC9C,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChD,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,sBAAsB,EACtB,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE,EACjD,EAAE,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,qDAAqD;QACrD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,yBAAyB,EACzB,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAChF,EAAE,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE;YACjD,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,cAAc;YAChC,SAAS,EAAE,IAAI,CAAC,aAAa;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,GAAG;YACH,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,cAAc;YAChC,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,EAAE;YACF,cAAc;YACd,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;SACpC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,+BAA+B,EAC/B,EAAE,WAAW,EAAE,EACf,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,CAClC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,eAAe,CACb,QAAQ,EACR,8BAA8B,EAC9B,EAAE,WAAW,EAAE,EACf,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GACV,WAAW,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,YAAY,KAAK,CAAC;YACrC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC;IAEb,QAAQ,CAAC,OAAO,GAAG;QACjB,MAAM;QACN,QAAQ,EAAE,CAAC;QACX,gBAAgB,EAAE,YAAY,GAAG,WAAW,GAAG,YAAY;QAC3D,YAAY;QACZ,WAAW;QACX,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE9F,MAAM,cAAc,GAClB,OAAO,CAAC,aAAa,EAAE,OAAO,IAAI,YAAY,GAAG,CAAC;QAChD,CAAC,CAAC,MAAM,8BAA8B,CAAC;YACnC,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,iBAAiB;oBACxB,UAAU,EAAE,IAAI;oBAChB,kBAAkB,EAAE,EAAE;oBACtB,OAAO,EAAE,gBAAgB;yBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;yBACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACb,WAAW,EAAE,GAAG,CAAC,IAAI;wBACrB,QAAQ,EAAE,cAAuB;wBACjC,WAAW,EAAE,GAAG,CAAC,cAAc;wBAC/B,SAAS,EAAE,GAAG,CAAC,aAAa;wBAC5B,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC/B,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,aAAa,EAAE;qBACvD,CAAC,CAAC;oBACL,OAAO,EAAE,iBAAiB;iBAC3B;aACF;SACF,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,MAAM;QACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,gBAAgB;QAChB,YAAY;QACZ,WAAW;QACX,YAAY;QACZ,MAAM;QACN,YAAY;QACZ,UAAU,EAAE,CAAC;QACb,WAAW;QACX,WAAW;QACX,UAAU;QACV,cAAc;KACf,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/update-outdated/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GAEnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAMrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAoBvB,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,KAAK,UAAU,SAAS,CAAC,MASxB;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEjD,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAmB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,mCAAmC,OAAO,IAAI;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,CAAgB,CAAC,IAAI,CAC3F,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CACtD,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI,MAAM,CAAC,WAAW,+CAA+C;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAEhD,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzC,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC;QAClD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC5C,SAAS,EAAE,uBAAuB;gBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;YACtD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,SAAS,sBAAsB,OAAO,EAAE;aAChJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE;oBACzC,SAAS,EAAE,uBAAuB;oBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,QAAQ,CAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;gBACtD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxE,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE;wBAC5C,SAAS,EAAE,uBAAuB;wBAClC,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,KAAK,EAAE,MAAM;qBACd,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,iCAAiC,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,SAAS,yBAAyB,OAAO,EAAE;iBACvH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,WAAW,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,WAAW,OAAO,MAAM,CAAC,SAAS,GAAG;SAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAO,GAA0B,EAAE;IAEnC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,2BAA2B;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE;QAC1C,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE;QACjD,GAAG;QACH,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;QACrD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;KAChC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,IAAI,WAA8D,CAAC;IACnE,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE;YAC7C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;YACrD,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAe,CACb,QAAQ,EACR,uCAAuC,EACvC,EAAE,EACF,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5D,CAAC;QACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE9F,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzF,YAAY;YACZ,UAAU,EAAE,CAAC;YACb,WAAW;YACX,WAAW;YACX,UAAU;SACX,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAsB,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC,CAAC;IAEJ,eAAe,CACb,QAAQ,EACR,gCAAgC,EAChC,EAAE,EACF,EAAE,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAC1C,CAAC;IAEF,uDAAuD;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,cAAc,GAAG,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAoD,EAAE,CAAC;IAEnE,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QAC9C,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChD,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,sBAAsB,EACtB,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE,EACjD,EAAE,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,sBAAsB,EACtB,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EACjF,EAAE,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,qDAAqD;QACrD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,yBAAyB,EACzB,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAChF,EAAE,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE;YACjD,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,cAAc;YAChC,SAAS,EAAE,IAAI,CAAC,aAAa;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,GAAG;YACH,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,cAAc;YAChC,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,EAAE;YACF,cAAc;YACd,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;SACpC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,eAAe,CACb,QAAQ,EACR,+BAA+B,EAC/B,EAAE,WAAW,EAAE,EACf,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,CAClC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,eAAe,CACb,QAAQ,EACR,8BAA8B,EAC9B,EAAE,WAAW,EAAE,EACf,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GACV,WAAW,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,YAAY,KAAK,CAAC;YACrC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC;IAEb,QAAQ,CAAC,OAAO,GAAG;QACjB,MAAM;QACN,QAAQ,EAAE,CAAC;QACX,gBAAgB,EAAE,YAAY,GAAG,WAAW,GAAG,YAAY;QAC3D,YAAY;QACZ,WAAW;QACX,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE9F,MAAM,cAAc,GAClB,OAAO,CAAC,aAAa,EAAE,OAAO,IAAI,YAAY,GAAG,CAAC;QAChD,CAAC,CAAC,MAAM,8BAA8B,CAAC;YACnC,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,iBAAiB;oBACxB,UAAU,EAAE,IAAI;oBAChB,kBAAkB,EAAE,EAAE;oBACtB,OAAO,EAAE,gBAAgB;yBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;yBACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACb,WAAW,EAAE,GAAG,CAAC,IAAI;wBACrB,QAAQ,EAAE,cAAuB;wBACjC,WAAW,EAAE,GAAG,CAAC,cAAc;wBAC/B,SAAS,EAAE,GAAG,CAAC,aAAa;wBAC5B,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC/B,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,aAAa,EAAE;qBACvD,CAAC,CAAC;oBACL,OAAO,EAAE,iBAAiB;iBAC3B;aACF;SACF,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,MAAM;QACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,gBAAgB;QAChB,YAAY;QACZ,WAAW;QACX,YAAY;QACZ,MAAM;QACN,YAAY;QACZ,UAAU,EAAE,CAAC;QACb,WAAW;QACX,WAAW;QACX,UAAU;QACV,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/api/vex/index.d.ts

@@ -9,10 +9,23 @@ export interface CycloneDxVexVulnerabilityAnalysis {
 export interface CycloneDxVexVulnerability {
     id: string;
     analysis: CycloneDxVexVulnerabilityAnalysis;
+    /** CycloneDX properties: `autoremediator:maintainer-vex` when an installed package ships a verdict, and `autoremediator:proof-of-fix:*` when exploit-proof evidence exists. */
+    properties?: Array<{
+        name: string;
+        value: string;
+    }>;
+    /** 1.6 output only: the components the advisory matched, by purl. */
+    affects?: Array<{
+        ref: string;
+        versions: Array<{
+            version: string;
+            status: "affected";
+        }>;
+    }>;
 }
 export interface CycloneDxVexDocument {
     bomFormat: "CycloneDX";
-    specVersion: "1.5";
+    specVersion: "1.5" | "1.6";
     version: number;
     serialNumber: string;
     metadata: {
@@ -22,10 +35,40 @@ export interface CycloneDxVexDocument {
             version: string;
         }>;
     };
+    /** 1.6 output only: the components `affects` refers to. */
+    components?: Array<{
+        type: "library";
+        "bom-ref": string;
+        group?: string;
+        name: string;
+        version: string;
+        purl: string;
+    }>;
     vulnerabilities: CycloneDxVexVulnerability[];
 }
+/** A reproduction script kept by `generateProofOfFix`, as the VEX output refers to it. */
+export interface ProofEvidenceRef {
+    /** Advisory ids the evidence answers to (the id it was made for and its aliases). */
+    advisoryIds: string[];
+    packageName: string;
+    vulnerableVersion: string;
+    fixedVersion: string;
+    /** Path of the evidence record, relative to the project. */
+    evidencePath: string;
+    scriptSha256: string;
+    signed: boolean;
+}
 export interface ToCycloneDxVexOptions {
     toolVersion?: string;
+    /** Evidence to cite. Without it the output is unchanged. */
+    proofEvidence?: readonly ProofEvidenceRef[];
+    /**
+     * CycloneDX version to emit (default `1.5`, unchanged). `1.6` additionally gives each
+     * vulnerability an `affects` list of purls, and maps policy justifications to values the
+     * CycloneDX schema accepts (`mitigated` becomes `protected_by_mitigating_control`; `fixed`
+     * becomes state `resolved`; `under_investigation` becomes `in_triage`).
+     */
+    specVersion?: "1.5" | "1.6";
 }
 export declare function toCycloneDxVex(report: ScanReport | RemediationReport, options?: ToCycloneDxVexOptions): CycloneDxVexDocument;
 /**

package/dist/api/vex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAe,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,WAAW,CAAC;IACjD,aAAa,CAAC,EAAE,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,QAAQ,GAAG,sBAAsB,CAAC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,iCAAiC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;IACF,eAAe,EAAE,yBAAyB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,iBAAiB,EACtC,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CA6BtB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,cAAc,EAC3B,WAAW,SAAY,GACtB,IAAI,CA4CN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAe,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,WAAW,CAAC;IACjD,aAAa,CAAC,EAAE,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,QAAQ,GAAG,sBAAsB,CAAC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,iCAAiC,CAAC;IAC5C,+KAA+K;IAC/K,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,qEAAqE;IACrE,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,UAAU,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,KAAK,GAAG,KAAK,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;IACF,2DAA2D;IAC3D,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,SAAS,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,eAAe,EAAE,yBAAyB,EAAE,CAAC;CAC9C;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,qFAAqF;IACrF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;CAC7B;AA4LD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,iBAAiB,EACtC,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAuDtB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,cAAc,EAC3B,WAAW,SAAY,GACtB,IAAI,CA4CN"}

package/dist/api/vex/index.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
+import { npmPurl, splitName } from "../evidence-pack/components.js";
 const isResolved = (result) => result.applied && !result.unresolvedReason;
 const isSuppressed = (result) => result.suppressedBy != null;
 /**
@@ -12,10 +13,45 @@ const isSuppressed = (result) => result.suppressedBy != null;
  * triage evidence and never promoted to `not_affected`.
  */
 function mapReportToVulnerability(report) {
+    const vulnerability = mapOutcome(report);
+    // Maintainer verdicts are always reported, whether or not policy trusts them. They are what an
+    // installed package says about itself, so they are listed as a property and never decide state.
+    const claims = report.results.flatMap((result) => (result.maintainerVex ?? []).map((claim) => `${claim.maintainer.name}@${claim.maintainer.version}: not_affected (${claim.justification}) for ${result.packageName}@${result.fromVersion}`));
+    return claims.length > 0
+        ? {
+            ...vulnerability,
+            properties: [...new Set(claims)].map((value) => ({
+                name: "autoremediator:maintainer-vex",
+                value,
+            })),
+        }
+        : vulnerability;
+}
+/** CycloneDX analysis justifications that match an OpenVEX one without stretching its meaning. */
+const CYCLONEDX_JUSTIFICATION = {
+    component_not_present: "code_not_present",
+    vulnerable_code_not_present: "code_not_present",
+    vulnerable_code_not_in_execute_path: "code_not_reachable",
+    inline_mitigations_already_exist: "protected_by_mitigating_control",
+};
+function mapOutcome(report) {
     const { results } = report;
     const resolved = results.filter((result) => isResolved(result));
     if (results.length > 0 && results.every((r) => isSuppressed(r))) {
-        const suppression = results[0].suppressedBy;
+        const first = results[0];
+        const suppression = first.suppressedBy;
+        if (suppression.source === "maintainer-vex") {
+            const openVex = first.maintainerVex?.[0]?.justification;
+            const mapped = openVex ? CYCLONEDX_JUSTIFICATION[openVex] : undefined;
+            return {
+                id: report.cveId,
+                analysis: {
+                    state: "not_affected",
+                    ...(mapped ? { justification: mapped } : {}),
+                    detail: `Maintainer VEX, trusted by policy: ${suppression.notes ?? suppression.justification}`,
+                },
+            };
+        }
         return {
             id: report.cveId,
             analysis: {
@@ -55,7 +91,76 @@ function mapReportToVulnerability(report) {
         analysis: { state: "in_triage", detail: details.length > 0 ? details.join("; ") : undefined },
     };
 }
+/**
+ * Cite exploit-proof evidence for a vulnerability: a reproduction that failed on the vulnerable
+ * version and passed on the fixed one. Adds properties and a sentence of detail, and changes
+ * nothing else; with no evidence the entry is returned as it was.
+ */
+function withProofEvidence(vulnerability, report, evidence) {
+    const id = report.cveId.toUpperCase();
+    const packages = new Set(report.results.map((result) => result.packageName));
+    const cited = evidence.filter((ref) => ref.advisoryIds.some((advisoryId) => advisoryId.toUpperCase() === id) &&
+        packages.has(ref.packageName));
+    if (cited.length === 0)
+        return vulnerability;
+    const sentence = cited
+        .map((ref) => `exploit-proof evidence ${ref.evidencePath}: a reproduction script fails on ${ref.packageName}@${ref.vulnerableVersion} and passes on ${ref.packageName}@${ref.fixedVersion}${ref.signed ? " (signed)" : ""}`)
+        .join("; ");
+    const detail = vulnerability.analysis.detail;
+    return {
+        ...vulnerability,
+        analysis: { ...vulnerability.analysis, detail: detail ? `${detail}; ${sentence}` : sentence },
+        properties: cited.flatMap((ref) => [
+            { name: "autoremediator:proof-of-fix:evidence", value: ref.evidencePath },
+            { name: "autoremediator:proof-of-fix:script-sha256", value: ref.scriptSha256 },
+        ]),
+    };
+}
+/** The 1.6 form of one vulnerability: schema-valid analysis values, and `affects` by purl. */
+function upgradeToSpec16(vulnerability, report) {
+    const { analysis } = vulnerability;
+    const suppressed = report.results.length > 0 && report.results.every((result) => isSuppressed(result))
+        ? report.results[0].suppressedBy
+        : undefined;
+    let next = analysis;
+    if (suppressed) {
+        const detail = analysis.detail ?? suppressed.justification;
+        switch (suppressed.justification) {
+            case "not_affected": {
+                next = { state: "not_affected", detail };
+                break;
+            }
+            case "mitigated": {
+                next = { state: "not_affected", justification: "protected_by_mitigating_control", detail };
+                break;
+            }
+            case "fixed": {
+                next = { state: "resolved", detail };
+                break;
+            }
+            case "under_investigation": {
+                next = { state: "in_triage", detail };
+                break;
+            }
+        }
+    }
+    else if (analysis.justification === "code_not_in_execute_path") {
+        // Not a CycloneDX value; reachability is never asserted as not_affected here anyway.
+        next = { ...analysis, justification: undefined };
+    }
+    const seen = new Set();
+    const affects = [];
+    for (const result of report.results) {
+        const ref = npmPurl(result.packageName, result.fromVersion);
+        if (seen.has(ref))
+            continue;
+        seen.add(ref);
+        affects.push({ ref, versions: [{ version: result.fromVersion, status: "affected" }] });
+    }
+    return { ...vulnerability, analysis: next, ...(affects.length > 0 ? { affects } : {}) };
+}
 export function toCycloneDxVex(report, options = {}) {
+    const specVersion = options.specVersion ?? "1.5";
     const toolVersion = options.toolVersion ?? "unknown";
     const timestamp = new Date().toISOString();
     const serialNumber = `urn:uuid:${randomUUID()}`;
@@ -67,16 +172,39 @@ export function toCycloneDxVex(report, options = {}) {
     else {
         remediationReports = [report];
     }
-    const vulnerabilities = remediationReports.map((remediationReport) => mapReportToVulnerability(remediationReport));
+    const vulnerabilities = remediationReports.map((remediationReport) => {
+        const mapped = withProofEvidence(mapReportToVulnerability(remediationReport), remediationReport, options.proofEvidence ?? []);
+        return specVersion === "1.6" ? upgradeToSpec16(mapped, remediationReport) : mapped;
+    });
+    const components = [];
+    if (specVersion === "1.6") {
+        const seen = new Set();
+        for (const remediationReport of remediationReports) {
+            for (const result of remediationReport.results) {
+                const purl = npmPurl(result.packageName, result.fromVersion);
+                if (seen.has(purl))
+                    continue;
+                seen.add(purl);
+                components.push({
+                    type: "library",
+                    "bom-ref": purl,
+                    ...splitName(result.packageName),
+                    version: result.fromVersion,
+                    purl,
+                });
+            }
+        }
+    }
     return {
         bomFormat: "CycloneDX",
-        specVersion: "1.5",
+        specVersion,
         version: 1,
         serialNumber,
         metadata: {
             timestamp,
             tools: [{ name: "autoremediator", version: toolVersion }],
         },
+        ...(specVersion === "1.6" ? { components } : {}),
         vulnerabilities,
     };
 }

package/dist/api/vex/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAW,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAChG,MAAM,YAAY,GAAG,CAAC,MAAmB,EAAW,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;AAEnF;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,MAAyB;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,YAAa,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,QAAQ,EAAE;gBACR,KAAK,EAAE,cAAc;gBACrB,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,MAAM,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,aAAa;aACvD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAA0C,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAE7F,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,+BAA+B,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,eAAe,CAAC,CAAC;IACtF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,qCAAqC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAClI,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,KAAK;QAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAsC,EACtC,OAAO,GAA0B,EAAE;IAEnC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,YAAY,UAAU,EAAE,EAAE,CAAC;IAEhD,IAAI,kBAAuC,CAAC;IAE5C,8EAA8E;IAC9E,IAAI,SAAS,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,CAAC,MAA2B,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CACnE,wBAAwB,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC;QACV,YAAY;QACZ,QAAQ,EAAE;YACR,SAAS;YACT,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SAC1D;QACD,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,WAA2B,EAC3B,WAAW,GAAG,SAAS;IAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,GAAyB,CAAC;IAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC,SAAS,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC9D,CAAC;IAEF,MAAM,SAAS,GAA8B;QAC3C,EAAE,EAAE,WAAW,CAAC,KAAK;QACrB,QAAQ,EAAE;YACR,KAAK,EAAE,cAAc;YACrB,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,MAAM,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,aAAa;SACvD;KACF,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAErC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB;IACjD,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,YAAY,UAAU,EAAE,EAAE;QACxC,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SAC1D;QACD,eAAe,EAAE,EAAE;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/vex/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAiEpE,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAW,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAChG,MAAM,YAAY,GAAG,CAAC,MAAmB,EAAW,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;AAEnF;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,MAAyB;IACzD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACzC,+FAA+F;IAC/F,gGAAgG;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAC9B,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,mBAAmB,KAAK,CAAC,aAAa,SAAS,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,CAChJ,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC;YACE,GAAG,aAAa;YAChB,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,+BAA+B;gBACrC,KAAK;aACN,CAAC,CAAC;SACJ;QACH,CAAC,CAAC,aAAa,CAAC;AACpB,CAAC;AAED,kGAAkG;AAClG,MAAM,uBAAuB,GAA2B;IACtD,qBAAqB,EAAE,kBAAkB;IACzC,2BAA2B,EAAE,kBAAkB;IAC/C,mCAAmC,EAAE,oBAAoB;IACzD,gCAAgC,EAAE,iCAAiC;CACpE,CAAC;AAEF,SAAS,UAAU,CAAC,MAAyB;IAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,YAAa,CAAC;QACxC,IAAI,WAAW,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;YACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,KAAK;gBAChB,QAAQ,EAAE;oBACR,KAAK,EAAE,cAAc;oBACrB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,MAAM,EAAE,sCAAsC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,aAAa,EAAE;iBAC/F;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,QAAQ,EAAE;gBACR,KAAK,EAAE,cAAc;gBACrB,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,MAAM,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,aAAa;aACvD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAA0C,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAE7F,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,+BAA+B,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,eAAe,CAAC,CAAC;IACtF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,qCAAqC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAClI,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,KAAK;QAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE;KAC9F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,aAAwC,EACxC,MAAyB,EACzB,QAAqC;IAErC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QACrE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAChC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAE7C,MAAM,QAAQ,GAAG,KAAK;SACnB,GAAG,CACF,CAAC,GAAG,EAAE,EAAE,CACN,0BAA0B,GAAG,CAAC,YAAY,oCAAoC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,kBAAkB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAChN;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC7C,OAAO;QACL,GAAG,aAAa;QAChB,QAAQ,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7F,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,EAAE,IAAI,EAAE,sCAAsC,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE;YACzE,EAAE,IAAI,EAAE,2CAA2C,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE;SAC/E,CAAC;KACH,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,eAAe,CACtB,aAAwC,EACxC,MAAyB;IAEzB,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;IACnC,MAAM,UAAU,GACd,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,YAAY;QACjC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,IAAI,GAAsC,QAAQ,CAAC;IACvD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC;QAC3D,QAAQ,UAAU,CAAC,aAAa,EAAE,CAAC;YACjC,KAAK,cAAc,EAAE,CAAC;gBACpB,IAAI,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;gBACzC,MAAM;YACR,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,IAAI,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,iCAAiC,EAAE,MAAM,EAAE,CAAC;gBAC3F,MAAM;YACR,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;gBACrC,MAAM;YACR,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,IAAI,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;gBACtC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,CAAC,aAAa,KAAK,0BAA0B,EAAE,CAAC;QACjE,qFAAqF;QACrF,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAsD,EAAE,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAsC,EACtC,OAAO,GAA0B,EAAE;IAEnC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,YAAY,UAAU,EAAE,EAAE,CAAC;IAEhD,IAAI,kBAAuC,CAAC;IAE5C,8EAA8E;IAC9E,IAAI,SAAS,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,CAAC,MAA2B,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAC9B,wBAAwB,CAAC,iBAAiB,CAAC,EAC3C,iBAAiB,EACjB,OAAO,CAAC,aAAa,IAAI,EAAE,CAC5B,CAAC;QACF,OAAO,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAoD,EAAE,CAAC;IACvE,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;YACnD,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,IAAI;oBACf,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChC,OAAO,EAAE,MAAM,CAAC,WAAW;oBAC3B,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW;QACX,OAAO,EAAE,CAAC;QACV,YAAY;QACZ,QAAQ,EAAE;YACR,SAAS;YACT,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SAC1D;QACD,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,WAA2B,EAC3B,WAAW,GAAG,SAAS;IAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,GAAyB,CAAC;IAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC,SAAS,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC9D,CAAC;IAEF,MAAM,SAAS,GAA8B;QAC3C,EAAE,EAAE,WAAW,CAAC,KAAK;QACrB,QAAQ,EAAE;YACR,KAAK,EAAE,cAAc;YACrB,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,MAAM,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,aAAa;SACvD;KACF,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAErC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB;IACjD,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,YAAY,UAAU,EAAE,EAAE;QACxC,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SAC1D;QACD,eAAe,EAAE,EAAE;KACpB,CAAC;AACJ,CAAC"}

package/dist/autonomy/compute.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Earned autonomy, as a pure function of a track record, the policy's settings and the time.
+ *
+ * Nothing here reads a file, a clock or the network: the same events, settings and `now` always
+ * give the same level, with the evidence that produced it. See docs/guides/earned-autonomy.md for
+ * the rules in prose.
+ */
+import { type AutonomyConfig, type AutonomyLevel, type TrackEvent } from "./types.js";
+/** Where a repository starts: changes arrive as pull requests that a human reviews. */
+export declare const BASE_EARNED_LEVEL: AutonomyLevel;
+export interface Requirement {
+    name: string;
+    required: string;
+    actual: string;
+    met: boolean;
+}
+export interface WindowStats {
+    /** Outcome events of the runs inside the recent window. */
+    outcomes: number;
+    /** Distinct runs in the window: the last `window` runs by their latest outcome. */
+    runs: number;
+    verifiedRuns: number;
+    /** Verified runs in which the project's tests passed as part of the verification. */
+    testsCoveredRuns: number;
+    /** Verified runs in which the project's type check passed as part of the verification. */
+    typecheckCoveredRuns: number;
+    /** Runs where some change could not be applied, without a rollback or verifier failure. */
+    failedRuns: number;
+    /** Runs with a rollback or a verifier failure. */
+    incidentRuns: number;
+    /** Runs applied with verification turned off. */
+    unverifiedRuns: number;
+    /** Verified runs over verified, failed and incident runs; null when there are none. */
+    successRate: number | null;
+}
+export interface CapInfo {
+    level: AutonomyLevel;
+    reason: string;
+    /** When the cap next loosens, if nothing else happens. */
+    until: string;
+    eventSeqs: number[];
+    runIds: string[];
+}
+export interface Evaluation {
+    /** The level the record has earned, after any cooldown cap. */
+    earned: AutonomyLevel;
+    /** The level the window alone would give, before the cooldown cap. */
+    fromWindow: AutonomyLevel;
+    cap?: CapInfo;
+    stats: WindowStats;
+    /** What each level above the base needs, with where the record stands. */
+    requirements: {
+        L3: Requirement[];
+        L4: Requirement[];
+    };
+    /** Why the level is what it is, most important first. */
+    reasons: string[];
+}
+export interface Transition {
+    at: string;
+    /** The event that caused it; absent for a change caused by time passing alone. */
+    eventSeq?: number;
+    from: AutonomyLevel;
+    to: AutonomyLevel;
+    direction: "promotion" | "demotion";
+    cause: "event" | "cooldown";
+    reason: string;
+    runIds: string[];
+    eventSeqs: number[];
+}
+export declare function windowStats(events: readonly TrackEvent[], config: AutonomyConfig): WindowStats;
+/** The level a record has earned at `now`, with the evidence for it. */
+export declare function evaluate(events: readonly TrackEvent[], config: AutonomyConfig, now: Date): Evaluation;
+/** The level actually in force: the ceiling the policy sets, or less if the record has earned less. */
+export declare function effectiveLevel(evaluation: Evaluation, config: AutonomyConfig): AutonomyLevel;
+/**
+ * Every promotion and demotion, replayed from the first event: each cites the event that caused it,
+ * or says it came from a cooldown ending. `now` closes the replay, so a cooldown that ended since
+ * the last event is shown too.
+ */
+export declare function transitionsOf(events: readonly TrackEvent[], config: AutonomyConfig, now: Date): Transition[];
+/** What the next level up needs, or why it cannot be reached. */
+export interface NextPromotion {
+    to: AutonomyLevel;
+    /** The policy ceiling stops the level from rising to `to`. */
+    blockedByCeiling: boolean;
+    /** A cooldown cap, not missing evidence, is what holds the level down. */
+    cappedUntil?: string;
+    requirements: Requirement[];
+}
+export declare function nextPromotion(evaluation: Evaluation, config: AutonomyConfig): NextPromotion | undefined;
+export interface LevelSignals {
+    /** The result is safe for something else (a merge bot, a human with a rule) to merge unattended. */
+    autoMergeEligible: boolean;
+    /** A person should look at this result. */
+    escalate: boolean;
+    note: string;
+}
+export interface OutcomeFacts {
+    /** The run ended `applied`: every item in the plan is in the project. */
+    fullyApplied: boolean;
+    /** Every applied item was accepted by the verifier. */
+    allVerified: boolean;
+    /** Some applied item is a major version bump. */
+    anyMajorBump: boolean;
+    anyFailed: boolean;
+}
+/**
+ * What a level says about one run's result. Auto-merge is never performed here or anywhere else in
+ * Autoremediator: L3 and L4 only mark a result that a merge rule is allowed to trust.
+ */
+export declare function signalsFor(level: AutonomyLevel, facts: OutcomeFacts): LevelSignals;
+export declare const allows: (level: AutonomyLevel) => {
+    plan: boolean;
+    apply: boolean;
+};
+//# sourceMappingURL=compute.d.ts.map

package/dist/autonomy/compute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.d.ts","sourceRoot":"","sources":["../../src/autonomy/compute.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAMlB,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAIpB,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,EAAE,aAAoB,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,EAAE,MAAM,CAAC;IACzB,0FAA0F;IAC1F,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,MAAM,EAAE,aAAa,CAAC;IACtB,sEAAsE;IACtE,UAAU,EAAE,aAAa,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,WAAW,CAAC;IACnB,0EAA0E;IAC1E,YAAY,EAAE;QAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAAC,EAAE,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;IACvD,yDAAyD;IACzD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,aAAa,CAAC;IAClB,SAAS,EAAE,WAAW,GAAG,UAAU,CAAC;IACpC,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAaD,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,GAAG,WAAW,CAqE9F;AAqFD,wEAAwE;AACxE,wBAAgB,QAAQ,CACtB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,IAAI,GACR,UAAU,CAoCZ;AAED,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,GAAG,aAAa,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,IAAI,GACR,UAAU,EAAE,CA4Fd;AAED,iEAAiE;AACjE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,8DAA8D;IAC9D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,cAAc,GACrB,aAAa,GAAG,SAAS,CAoB3B;AAED,MAAM,WAAW,YAAY;IAC3B,oGAAoG;IACpG,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,WAAW,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAgClF;AAED,eAAO,MAAM,MAAM,UAAW,aAAa;;;CAAwB,CAAC"}