autoremediator 0.21.2 → 0.22.0

package/dist/cli/prove-commands.js

@@ -0,0 +1,65 @@
+import { generateProofOfFix, OPTION_DESCRIPTIONS } from "../api/index.js";
+import { logJson } from "./output.js";
+import { validateOutputFormat } from "./validators.js";
+export function describeProve(result) {
+    const head = `${result.advisoryId}: ${result.package} ${result.vulnerableVersion} (vulnerable) vs ${result.fixedVersion} (fixed)`;
+    const lines = [head];
+    for (const trial of result.trials) {
+        lines.push(`  try ${trial.attempt}: ${trial.accepted ? "accepted" : "rejected"} (${trial.stage}) ${trial.reason}`);
+    }
+    if (result.trials.length === 0) {
+        lines.push(`  no script was proposed (${result.agent.status}: ${result.agent.rationale})`);
+    }
+    if (result.status === "kept" && result.files) {
+        lines.push(`Kept. Script: ${result.files.script}`, `Evidence: ${result.files.evidence}`, ...(result.files.signature ? [`Signature: ${result.files.signature}`] : []), "The harness shows the script fails on the vulnerable version and passes on the fixed one. Read it before you rely on it: it cannot show that the difference is the advisory's vulnerability.");
+    }
+    else {
+        lines.push(`Not proven. ${result.reason}`);
+    }
+    return `${lines.join("\n")}\n`;
+}
+export async function runProve(advisory, opts) {
+    const result = await generateProofOfFix(advisory, {
+        cwd: opts.cwd,
+        ...(opts.package ? { package: opts.package } : {}),
+        ...(opts.vulnerableVersion ? { vulnerableVersion: opts.vulnerableVersion } : {}),
+        ...(opts.fixedVersion ? { fixedVersion: opts.fixedVersion } : {}),
+        ...(opts.advisoryText ? { advisoryText: opts.advisoryText } : {}),
+        ...(opts.model ? { model: opts.model } : {}),
+        ...(opts.patchesDir ? { patchesDir: opts.patchesDir } : {}),
+        ...(opts.signingKey ? { signingKeyPath: opts.signingKey } : {}),
+        ...(opts.maxTrials ? { maxTrials: opts.maxTrials } : {}),
+        ...(opts.timeoutMs ? { timeoutMs: opts.timeoutMs } : {}),
+        ...(opts.overwrite ? { overwrite: true } : {}),
+    });
+    if (opts.outputFormat === "json")
+        logJson(result);
+    else
+        process.stdout.write(describeProve(result));
+    // 0 a script was kept; 1 none was proven.
+    process.exitCode = result.status === "kept" ? 0 : 1;
+}
+const parseInteger = (value) => Number.parseInt(value, 10);
+/** Register `prove`. */
+export function registerProveCommands(program) {
+    program
+        .command("prove <advisory>")
+        .description("Write exploit-proof evidence: an agent writes a reproduction of the advisory's vulnerability, kept only if, in a sandbox, it fails on the vulnerable version and passes on the fixed one. Needs a model. Writes the script and an evidence record to the patches directory. Exits 0 if kept, 1 if not proven")
+        .option("--package <name>", "The npm package (optional when the advisory affects exactly one)")
+        .option("--vulnerable-version <version>", "Exact version the script must fail on (default: newest vulnerable version below the fix)")
+        .option("--fixed-version <version>", "Exact version the script must pass on (default: the advisory's first patched version)")
+        .option("--advisory-text <text>", "Describe the vulnerability yourself, instead of or in addition to OSV (the advisory argument may then be any label)")
+        .option("--model <spec>", OPTION_DESCRIPTIONS.model)
+        .option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd())
+        .option("--patches-dir <dir>", "Where the script and evidence record are written (default: ./patches)")
+        .option("--signing-key <path>", "Ed25519 private key (PEM) to sign the evidence record with, as a detached DSSE signature (create one with: openssl genpkey -algorithm ed25519 -out key.pem)")
+        .option("--max-trials <n>", "Candidate scripts the agent may try, 1-10 (default 4)", parseInteger)
+        .option("--timeout-ms <ms>", "Wall-clock limit of one sandboxed run, 1000-60000 (default 10000)", parseInteger)
+        .option("--overwrite", "Replace a script already at the target path that this command did not write")
+        .option("--output-format <format>", "Output format: text|json", "text")
+        .action(async (advisory, opts) => {
+        validateOutputFormat(opts.outputFormat, ["text", "json"], "prove");
+        await runProve(advisory, opts);
+    });
+}
+//# sourceMappingURL=prove-commands.js.map

package/dist/cli/prove-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prove-commands.js","sourceRoot":"","sources":["../../src/cli/prove-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAoB,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiBvD,MAAM,UAAU,aAAa,CAAC,MAAmB;IAC/C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,oBAAoB,MAAM,CAAC,YAAY,UAAU,CAAC;IAClI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,SAAS,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,iBAAiB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EACtC,aAAa,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EACpC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3E,8LAA8L,CAC/L,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB,EAAE,IAAqB;IACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE;QAChD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE3E,wBAAwB;AACxB,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CACV,8SAA8S,CAC/S;SACA,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CACL,gCAAgC,EAChC,0FAA0F,CAC3F;SACA,MAAM,CACL,2BAA2B,EAC3B,uFAAuF,CACxF;SACA,MAAM,CACL,wBAAwB,EACxB,qHAAqH,CACtH;SACA,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,KAAK,CAAC;SACnD,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC9D,MAAM,CACL,qBAAqB,EACrB,uEAAuE,CACxE;SACA,MAAM,CACL,sBAAsB,EACtB,6JAA6J,CAC9J;SACA,MAAM,CACL,kBAAkB,EAClB,uDAAuD,EACvD,YAAY,CACb;SACA,MAAM,CACL,mBAAmB,EACnB,mEAAmE,EACnE,YAAY,CACb;SACA,MAAM,CACL,aAAa,EACb,6EAA6E,CAC9E;SACA,MAAM,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,IAAqB,EAAE,EAAE;QACxD,oBAAoB,CAAC,IAAI,CAAC,YAA+B,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/radar-commands.d.ts

@@ -0,0 +1,20 @@
+import type { Command } from "commander";
+interface RadarCliOptions {
+    cwd: string;
+    includeTransitive?: boolean;
+    limit?: number;
+    maxPackages?: number;
+    target?: string;
+    github?: boolean;
+    /** `true` for a bare `--model`, which means AUTOREMEDIATOR_MODEL. */
+    model?: string | boolean;
+    offline?: boolean;
+    /** `--no-assess` arrives as false. */
+    assess?: boolean;
+    outputFormat: string;
+}
+export declare function runRadar(opts: RadarCliOptions): Promise<void>;
+/** Register `radar`. */
+export declare function registerRadarCommands(program: Command): void;
+export {};
+//# sourceMappingURL=radar-commands.d.ts.map

package/dist/cli/radar-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"radar-commands.d.ts","sourceRoot":"","sources":["../../src/cli/radar-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,UAAU,eAAe;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBnE;AAED,wBAAwB;AACxB,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmC5D"}

package/dist/cli/radar-commands.js

@@ -0,0 +1,60 @@
+import { OPTION_DESCRIPTIONS, radar, radarExitCode, renderRadar, } from "../api/index.js";
+import { logJson } from "./output.js";
+import { validateOutputFormat } from "./validators.js";
+const TARGETS = ["latest", "minor", "patch"];
+function resolveModel(model) {
+    if (model === undefined || model === false)
+        return undefined;
+    if (typeof model === "string")
+        return model;
+    const fromEnvironment = process.env.AUTOREMEDIATOR_MODEL;
+    if (!fromEnvironment) {
+        throw new Error("--model needs a value (provider:model-id) or AUTOREMEDIATOR_MODEL in the environment.");
+    }
+    return fromEnvironment;
+}
+export async function runRadar(opts) {
+    if (opts.target !== undefined && !TARGETS.includes(opts.target)) {
+        throw new Error(`--target must be one of ${TARGETS.join(", ")}, not "${opts.target}".`);
+    }
+    const model = resolveModel(opts.model);
+    const report = await radar({
+        cwd: opts.cwd,
+        source: "cli",
+        ...(opts.includeTransitive ? { includeTransitive: true } : {}),
+        ...(opts.limit ? { limit: opts.limit } : {}),
+        ...(opts.maxPackages ? { maxPackages: opts.maxPackages } : {}),
+        ...(opts.target ? { target: opts.target } : {}),
+        ...(opts.github ? { github: true } : {}),
+        ...(model ? { model } : {}),
+        ...(opts.offline ? { offline: true } : {}),
+        ...(opts.assess === false ? { assess: false } : {}),
+    });
+    if (opts.outputFormat === "json")
+        logJson(report);
+    else
+        process.stdout.write(renderRadar(report));
+    // 0 nothing likely, 3 a likely change without an advisory.
+    process.exitCode = radarExitCode(report);
+}
+/** Register `radar`. */
+export function registerRadarCommands(program) {
+    program
+        .command("radar")
+        .description("Silent-fix radar: flag releases between your installed versions and a newer one that look security-relevant, before an advisory exists (changelog text, code differences between tarballs, registry metadata). Never says a vulnerability exists. Exits 0, or 3 when a likely one is found")
+        .option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd())
+        .option("--include-transitive", "Also look at transitive dependencies (default: direct only)")
+        .option("--limit <n>", "Most entries shown, best first (default 20)", (value) => Number.parseInt(value, 10))
+        .option("--max-packages <n>", "Most packages analysed, direct first (default 100); bounds network use", (value) => Number.parseInt(value, 10))
+        .option("--target <which>", "Compare with: latest (default), minor (newest in the same major) or patch (newest in the same minor)")
+        .option("--github", "Also read GitHub release notes for releases with no changelog in the package (unauthenticated API, stops at the rate limit)")
+        .option("--model [spec]", "Let a language model add a bounded classification (provider:model-id, or AUTOREMEDIATOR_MODEL when no value). Sends package text to that provider; off by default")
+        .option("--offline", "Refused: radar needs the npm registry")
+        .option("--no-assess", "Do not rate the upgrade impact on this project")
+        .option("--output-format <format>", "Output format: text|json", "text")
+        .action(async (opts) => {
+        validateOutputFormat(opts.outputFormat, ["text", "json"], "radar");
+        await runRadar(opts);
+    });
+}
+//# sourceMappingURL=radar-commands.js.map

package/dist/cli/radar-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"radar-commands.js","sourceRoot":"","sources":["../../src/cli/radar-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,KAAK,EACL,aAAa,EACb,WAAW,GAEZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiBvD,MAAM,OAAO,GAA2B,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAErE,SAAS,YAAY,CAAC,KAAmC;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACzD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAqB,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACV,4RAA4R,CAC7R;SACA,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC9D,MAAM,CAAC,sBAAsB,EAAE,6DAA6D,CAAC;SAC7F,MAAM,CAAC,aAAa,EAAE,6CAA6C,EAAE,CAAC,KAAa,EAAE,EAAE,CACtF,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3B;SACA,MAAM,CACL,oBAAoB,EACpB,wEAAwE,EACxE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAC9C;SACA,MAAM,CACL,kBAAkB,EAClB,sGAAsG,CACvG;SACA,MAAM,CACL,UAAU,EACV,6HAA6H,CAC9H;SACA,MAAM,CACL,gBAAgB,EAChB,mKAAmK,CACpK;SACA,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,gDAAgD,CAAC;SACvE,MAAM,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,IAAqB,EAAE,EAAE;QACtC,oBAAoB,CAAC,IAAI,CAAC,YAA+B,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/recipes.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function addRecipesCommand(program: Command): void;
+//# sourceMappingURL=recipes.d.ts.map

package/dist/cli/recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../../src/cli/recipes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6CzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmJxD"}

package/dist/cli/recipes.js

@@ -0,0 +1,124 @@
+/** `autoremediator recipes list | show | capture | export`. See docs/guides/recipes.md. */
+import { relative } from "node:path";
+import { captureRecipe, exportRecipes, listRecipes, OPTION_DESCRIPTIONS } from "../api/index.js";
+import { logJson } from "./output.js";
+import { validateOutputFormat } from "./validators.js";
+const out = (text) => process.stdout.write(`${text}\n`);
+const common = (command) => command
+    .option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd())
+    .option("--output-format <format>", "Output format: text|json", "text");
+const action = (name, run) => async (...received) => {
+    const command = received.at(-1);
+    const opts = command.opts();
+    validateOutputFormat(opts.outputFormat, ["text", "json"], `recipes ${name}`);
+    await run(received.slice(0, -2).filter((arg) => typeof arg === "string"), opts);
+};
+const sourceLabel = (source) => source.kind === "project"
+    ? "this project"
+    : `${source.kind === "installed" ? "shipped by" : "recipes package"} ${source.package}`;
+export function addRecipesCommand(program) {
+    const recipes = program
+        .command("recipes")
+        .description("Recipes: what earlier repairs learned about adopting a new version of a dependency, kept as data");
+    common(recipes
+        .command("list")
+        .description("List the recipes available to this project")
+        .option("--package <name>", "Only recipes for this package")
+        .option("--from <version>", "With --to: mark which recipes apply to upgrading from this version")
+        .option("--to <version>", "With --from: the version upgraded to")).action(action("list", (_args, opts) => {
+        const listing = listRecipes({
+            cwd: opts.cwd,
+            ...(typeof opts.package === "string" ? { packageName: opts.package } : {}),
+            ...(opts.from && opts.to ? { fromVersion: opts.from, toVersion: opts.to } : {}),
+        });
+        if (opts.outputFormat === "json")
+            return logJson(listing);
+        if (listing.recipes.length === 0)
+            out("No recipes.");
+        for (const entry of listing.recipes) {
+            const applies = entry.applies === undefined ? "" : entry.applies ? "  [applies]" : "  [does not apply]";
+            out(`${entry.id}  ${entry.package} ${entry.fromRange} -> ${entry.toRange}  ${entry.hunks} hunk(s)  ${sourceLabel(entry.source)}${applies}`);
+            if (entry.summary)
+                out(`    ${entry.summary}`);
+        }
+        for (const problem of listing.problems)
+            out(`unusable: ${problem.file}: ${problem.error}`);
+    }));
+    common(recipes
+        .command("show")
+        .description("Show one recipe: what broke, the change it makes, and the evidence it was captured with")
+        .argument("<id>", "Recipe id from `recipes list`")).action(action("show", ([id], opts) => {
+        const entry = listRecipes({ cwd: opts.cwd, recipeId: id }).recipes.find((candidate) => candidate.id === id);
+        if (!entry?.recipe)
+            throw new Error(`Recipe not found: ${id}`);
+        const { recipe } = entry;
+        if (opts.outputFormat === "json")
+            return logJson({ id: entry.id, source: entry.source, file: entry.file, recipe });
+        out(`${entry.id}  ${sourceLabel(entry.source)}  (${entry.file})`);
+        out(`${recipe.package}: from ${recipe.fromRange} to ${recipe.toRange}`);
+        if (recipe.summary)
+            out(recipe.summary);
+        for (const broke of recipe.breaking)
+            out(`  broke: ${broke.kind}${broke.symbol ? ` ${broke.symbol}` : ""}: ${broke.message}`);
+        for (const [index, hunk] of recipe.hunks.entries()) {
+            out(`\nhunk ${index + 1}${hunk.optional ? " (optional)" : ""}${hunk.note ? `: ${hunk.note}` : ""}`);
+            for (const line of hunk.before)
+                out(`   ${line}`);
+            for (const line of hunk.remove)
+                out(`-  ${line}`);
+            for (const line of hunk.add)
+                out(`+  ${line}`);
+            for (const line of hunk.after)
+                out(`   ${line}`);
+        }
+        if (recipe.evidence) {
+            out(`\nevidence: run ${recipe.evidence.runId ?? "?"}, attempt ${recipe.evidence.attemptId ?? "?"}, by ${recipe.evidence.agent ?? "?"}`);
+            out(`  checks: ${recipe.evidence.checks.map((check) => `${check.name} ${check.status}`).join(", ") || "none recorded"}`);
+        }
+    }));
+    common(recipes
+        .command("capture")
+        .description("Save what a run's agent repair learned into .autoremediator/recipes/ (commit it to share it)")
+        .requiredOption("--run <runId>", "The run whose repair to capture")
+        .option("--attempt <attemptId>", "The attempt (default: the run's latest repaired one)")
+        .option("--from-range <range>", "Versions the recipe applies from (default: this major, from the observed version)")
+        .option("--to-range <range>", "Versions the recipe applies to (default: this major, from the observed version)")).action(action("capture", (_args, opts) => {
+        const saved = captureRecipe({
+            cwd: opts.cwd,
+            runId: opts.run,
+            ...(opts.attempt ? { attemptId: opts.attempt } : {}),
+            ...(opts.fromRange ? { fromRange: opts.fromRange } : {}),
+            ...(opts.toRange ? { toRange: opts.toRange } : {}),
+        });
+        if (opts.outputFormat === "json")
+            return logJson(saved);
+        out(`${saved.created ? "Saved" : "Already saved"} ${saved.id} in ${relative(opts.cwd, saved.path) || saved.path}`);
+        out("Review it, then commit it (add `!.autoremediator/recipes/` to .gitignore if .autoremediator is ignored).");
+    }));
+    common(recipes
+        .command("export")
+        .description("Write the project's recipes as a publishable npm package skeleton (publishes nothing)")
+        .requiredOption("--name <name>", "npm name of the recipes package, e.g. @acme/autoremediator-recipes")
+        .requiredOption("--out <dir>", "Directory to create (must not exist, or be empty)")
+        .option("--package <name...>", "Only recipes for these packages")
+        .option("--package-version <version>", "Version for package.json (default 0.1.0)")).action(action("export", (_args, opts) => {
+        const result = exportRecipes({
+            cwd: opts.cwd,
+            outDir: opts.out,
+            name: opts.name,
+            ...(opts.packageVersion ? { version: opts.packageVersion } : {}),
+            ...(Array.isArray(opts.package) ? { packages: opts.package } : {}),
+        });
+        if (opts.outputFormat === "json")
+            return logJson({
+                outDir: result.outDir,
+                files: result.files,
+                recipes: result.recipes.map((entry) => entry.id),
+            });
+        out(`Wrote ${result.recipes.length} recipe(s) to ${result.outDir}:`);
+        for (const file of result.files)
+            out(`  ${file}`);
+        out("Review them, then publish with `npm publish` from that directory.");
+    }));
+}
+//# sourceMappingURL=recipes.js.map

package/dist/cli/recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.js","sourceRoot":"","sources":["../../src/cli/recipes.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAIrC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiBvD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAEhE,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAW,EAAE,CAC3C,OAAO;KACJ,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAC9D,MAAM,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,GACV,CAAC,IAAY,EAAE,GAAsE,EAAE,EAAE,CACzF,KAAK,EAAE,GAAG,QAAmB,EAAE,EAAE;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAY,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAqB,CAAC;IAC/C,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,CACP,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAC7E,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC,MAA0C,EAAU,EAAE,CACzE,MAAM,CAAC,IAAI,KAAK,SAAS;IACvB,CAAC,CAAC,cAAc;IAChB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AAE5F,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,kGAAkG,CACnG,CAAC;IAEJ,MAAM,CACJ,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC;SAC3D,MAAM,CACL,kBAAkB,EAClB,oEAAoE,CACrE;SACA,MAAM,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CACpE,CAAC,MAAM,CACN,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC1F,GAAG,CACD,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,aAAa,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,CACvI,CAAC;YACF,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CACJ,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,yFAAyF,CAC1F;SACA,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC,CACrD,CAAC,MAAM,CACN,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CACtE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;YAC9B,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAClE,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,SAAS,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ;YACjC,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,GAAG,CACD,UAAU,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/F,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM;gBAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM;gBAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG;gBAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CACD,mBAAmB,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,aAAa,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,QAAQ,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,EAAE,CACnI,CAAC;YACF,GAAG,CACD,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CACpH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CACJ,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,8FAA8F,CAC/F;SACA,cAAc,CAAC,eAAe,EAAE,iCAAiC,CAAC;SAClE,MAAM,CAAC,uBAAuB,EAAE,sDAAsD,CAAC;SACvF,MAAM,CACL,sBAAsB,EACtB,mFAAmF,CACpF;SACA,MAAM,CACL,oBAAoB,EACpB,iFAAiF,CAClF,CACJ,CAAC,MAAM,CACN,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,IAAI,CAAC,GAAI;YAChB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,GAAG,CACD,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC,EAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAC9G,CAAC;QACF,GAAG,CACD,0GAA0G,CAC3G,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CACJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,uFAAuF,CACxF;SACA,cAAc,CACb,eAAe,EACf,oEAAoE,CACrE;SACA,cAAc,CAAC,aAAa,EAAE,mDAAmD,CAAC;SAClF,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;SAChE,MAAM,CAAC,6BAA6B,EAAE,0CAA0C,CAAC,CACrF,CAAC,MAAM,CACN,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,GAAI;YACjB,IAAI,EAAE,IAAI,CAAC,IAAK;YAChB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;YAC9B,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;aACjD,CAAC,CAAC;QACL,GAAG,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAC3E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/cli/runners.d.ts

@@ -1,6 +1,13 @@
+import { type DependencyDietReport, type HookHost, type RemediateOptions } from "../api/index.js";
 import { runInteractiveTriage } from "./triage.js";
-import type { CommandOptions } from "./types.js";
+import type { CommandOptions, OutputFormat } from "./types.js";
 export { runInteractiveTriage };
+/**
+ * Every SDK option the shared CLI flags can set, built in one place. Each command used to spell this
+ * out itself, and the copies drifted: `portfolio` and `update-outdated` accepted flags such as
+ * `--proof-of-fix` and `--offline` and silently dropped them.
+ */
+export declare function toRemediateOptions(opts: CommandOptions): RemediateOptions;
 export declare function runSingleCve(cveId: string, opts: CommandOptions): Promise<void>;
 export declare function runScanInput(inputPath: string, opts: CommandOptions): Promise<void>;
 export declare function runListPatches(opts: Pick<CommandOptions, "cwd" | "patchesDir" | "outputFormat">): Promise<void>;
@@ -12,6 +19,7 @@ export declare function runReachability(opts: {
     cwd?: string;
     package: string;
     symbol?: string;
+    traceFile?: string;
     outputFormat?: string;
 }): Promise<void>;
 export declare function runEvaluate(packageName: string, opts: {
@@ -28,4 +36,90 @@ export declare function runDiffAudit(opts: {
 export declare function runReconcilePatches(opts: Pick<CommandOptions, "cwd" | "patchesDir" | "packageManager" | "runTests" | "outputFormat"> & {
     autoApply?: boolean;
 }): Promise<void>;
+export declare function runPlan(cveId: string, opts: CommandOptions): Promise<void>;
+export interface RunsOptions {
+    cwd: string;
+    outputFormat: OutputFormat;
+    status?: string;
+    limit?: number;
+    planId?: string;
+    force?: boolean;
+    item?: string[];
+    check?: string[];
+    offline?: boolean;
+    verify?: boolean;
+    repair?: boolean;
+    model?: string;
+    maxRepairRounds?: number;
+}
+export declare function runRunsList(opts: RunsOptions): Promise<void>;
+export declare function runRunsShow(runId: string, opts: RunsOptions): Promise<void>;
+export declare function runRunsApply(runId: string | undefined, opts: RunsOptions): Promise<void>;
+export declare function runRunsResume(runId: string, opts: RunsOptions): Promise<void>;
+export declare function runRunsRollback(runId: string, opts: RunsOptions): Promise<void>;
+export declare function runRunsVerify(runId: string, opts: RunsOptions): Promise<void>;
+export interface InitCliOptions {
+    cwd: string;
+    outputFormat: OutputFormat;
+    hosts?: string;
+    ci?: boolean;
+    guard?: boolean;
+    policy?: boolean;
+    agentsMd?: boolean;
+    yes?: boolean;
+    check?: boolean;
+}
+export declare function runInit(opts: InitCliOptions): Promise<void>;
+export interface HookCliOptions {
+    cwd: string;
+    outputFormat: OutputFormat;
+    hooks?: string;
+    manager?: string;
+    yes?: boolean;
+    allowSharedHooksPath?: boolean;
+}
+/** `hook install`, `hook uninstall` and `hook status`; same approval rules as `init`. */
+export declare function runHook(mode: "install" | "uninstall" | "status", opts: HookCliOptions): Promise<void>;
+export interface GuardCliOptions {
+    cwd: string;
+    outputFormat: OutputFormat;
+    minAgeHours?: number;
+    offline?: boolean;
+    /** Guard the dependencies added or changed since `base` instead of the packages named. */
+    gitDiff?: boolean;
+    base?: string;
+    includeTransitive?: boolean;
+}
+export declare function runGuard(specs: string[], opts: GuardCliOptions): Promise<void>;
+/** Agent pre-command hook: JSON on stdin, the host's permission decision on stdout, always exit 0. */
+export declare function runGuardHook(host?: HookHost): Promise<void>;
+export interface DietCliOptions {
+    cwd?: string;
+    apply?: boolean;
+    runTests?: boolean;
+    typecheck?: boolean;
+    policy?: string;
+    packageManager?: string;
+    outputFormat?: string;
+    /** Print every package and duplicate, not the first few. */
+    verbose?: boolean;
+}
+export declare function describeDiet(report: DependencyDietReport, verbose?: boolean): string;
+export declare function runDiet(opts: DietCliOptions): Promise<void>;
+export declare function runAssess(packageName: string, opts: {
+    cwd?: string;
+    from: string;
+    to: string;
+    outputFormat?: string;
+}): Promise<void>;
+export declare function runSymbols(packageName: string, opts: {
+    cwd?: string;
+    from: string;
+    to: string;
+    advisoryText?: string;
+    cwe?: string;
+    limit?: number;
+    reachability?: boolean;
+    outputFormat?: string;
+}): Promise<void>;
 //# sourceMappingURL=runners.d.ts.map

package/dist/cli/runners.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/cli/runners.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAiFhC,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAqIrF;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkKzF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,CAAC,GACnF,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C3E;AAED,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkF/F;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CACR,cAAc,EACd,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,cAAc,CACtE,GAAG;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACA,OAAO,CAAC,IAAI,CAAC,CA2Bf"}
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/cli/runners.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,oBAAoB,EAqBzB,KAAK,QAAQ,EAkBb,KAAK,gBAAgB,EAYtB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAwDhC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,CA2DzE;AA2BD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFrF;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+GzF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,CAAC,GACnF,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3E;AAOD,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B/F;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BhB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CACR,cAAc,EACd,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,cAAc,CACtE,GAAG;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACA,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhF;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBlE;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BjF;AAeD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9F;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnF;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnF;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAuCD,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CjE;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAkCD,yFAAyF;AACzF,wBAAsB,OAAO,CAC3B,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,EACxC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CAiEf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAgBD,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCpF;AAQD,sGAAsG;AACtG,wBAAsB,YAAY,CAAC,IAAI,GAAE,QAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhF;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,UAAQ,GAAG,MAAM,CA+ElF;AAaD,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBjE;AAWD,wBAAsB,SAAS,CAC7B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACtE,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED,wBAAsB,UAAU,CAC9B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CAgDf"}