autoremediator 0.21.2 → 0.22.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +5 -0
- package/dist/a2a/agent-card.d.ts +89 -0
- package/dist/a2a/agent-card.d.ts.map +1 -0
- package/dist/a2a/agent-card.js +127 -0
- package/dist/a2a/agent-card.js.map +1 -0
- package/dist/a2a/index.d.ts +7 -0
- package/dist/a2a/index.d.ts.map +1 -0
- package/dist/a2a/index.js +4 -0
- package/dist/a2a/index.js.map +1 -0
- package/dist/a2a/server.d.ts +46 -0
- package/dist/a2a/server.d.ts.map +1 -0
- package/dist/a2a/server.js +312 -0
- package/dist/a2a/server.js.map +1 -0
- package/dist/a2a/sign.d.ts +28 -0
- package/dist/a2a/sign.d.ts.map +1 -0
- package/dist/a2a/sign.js +123 -0
- package/dist/a2a/sign.js.map +1 -0
- package/dist/a2a/task-store.d.ts +55 -0
- package/dist/a2a/task-store.d.ts.map +1 -0
- package/dist/a2a/task-store.js +90 -0
- package/dist/a2a/task-store.js.map +1 -0
- package/dist/api/assess/index.d.ts +45 -0
- package/dist/api/assess/index.d.ts.map +1 -0
- package/dist/api/assess/index.js +21 -0
- package/dist/api/assess/index.js.map +1 -0
- package/dist/api/autonomy/index.d.ts +65 -0
- package/dist/api/autonomy/index.d.ts.map +1 -0
- package/dist/api/autonomy/index.js +166 -0
- package/dist/api/autonomy/index.js.map +1 -0
- package/dist/api/bisect/changes.d.ts +20 -0
- package/dist/api/bisect/changes.d.ts.map +1 -0
- package/dist/api/bisect/changes.js +47 -0
- package/dist/api/bisect/changes.js.map +1 -0
- package/dist/api/bisect/ddmin.d.ts +33 -0
- package/dist/api/bisect/ddmin.d.ts.map +1 -0
- package/dist/api/bisect/ddmin.js +91 -0
- package/dist/api/bisect/ddmin.js.map +1 -0
- package/dist/api/bisect/index.d.ts +20 -0
- package/dist/api/bisect/index.d.ts.map +1 -0
- package/dist/api/bisect/index.js +463 -0
- package/dist/api/bisect/index.js.map +1 -0
- package/dist/api/bisect/pins.d.ts +40 -0
- package/dist/api/bisect/pins.d.ts.map +1 -0
- package/dist/api/bisect/pins.js +83 -0
- package/dist/api/bisect/pins.js.map +1 -0
- package/dist/api/bisect/remedy.d.ts +25 -0
- package/dist/api/bisect/remedy.d.ts.map +1 -0
- package/dist/api/bisect/remedy.js +116 -0
- package/dist/api/bisect/remedy.js.map +1 -0
- package/dist/api/bisect/shell.d.ts +41 -0
- package/dist/api/bisect/shell.d.ts.map +1 -0
- package/dist/api/bisect/shell.js +155 -0
- package/dist/api/bisect/shell.js.map +1 -0
- package/dist/api/bisect/types.d.ts +130 -0
- package/dist/api/bisect/types.d.ts.map +1 -0
- package/dist/api/bisect/types.js +2 -0
- package/dist/api/bisect/types.js.map +1 -0
- package/dist/api/change-request/branch.d.ts +13 -0
- package/dist/api/change-request/branch.d.ts.map +1 -0
- package/dist/api/change-request/branch.js +78 -0
- package/dist/api/change-request/branch.js.map +1 -0
- package/dist/api/change-request/hosts.d.ts +83 -0
- package/dist/api/change-request/hosts.d.ts.map +1 -0
- package/dist/api/change-request/hosts.js +292 -0
- package/dist/api/change-request/hosts.js.map +1 -0
- package/dist/api/change-request/index.d.ts +3 -1
- package/dist/api/change-request/index.d.ts.map +1 -1
- package/dist/api/change-request/index.js +302 -56
- package/dist/api/change-request/index.js.map +1 -1
- package/dist/api/diet/analyze.d.ts +8 -0
- package/dist/api/diet/analyze.d.ts.map +1 -0
- package/dist/api/diet/analyze.js +214 -0
- package/dist/api/diet/analyze.js.map +1 -0
- package/dist/api/diet/apply.d.ts +31 -0
- package/dist/api/diet/apply.d.ts.map +1 -0
- package/dist/api/diet/apply.js +175 -0
- package/dist/api/diet/apply.js.map +1 -0
- package/dist/api/diet/duplicates.d.ts +9 -0
- package/dist/api/diet/duplicates.d.ts.map +1 -0
- package/dist/api/diet/duplicates.js +125 -0
- package/dist/api/diet/duplicates.js.map +1 -0
- package/dist/api/diet/files.d.ts +30 -0
- package/dist/api/diet/files.d.ts.map +1 -0
- package/dist/api/diet/files.js +182 -0
- package/dist/api/diet/files.js.map +1 -0
- package/dist/api/diet/index.d.ts +4 -0
- package/dist/api/diet/index.d.ts.map +1 -0
- package/dist/api/diet/index.js +3 -0
- package/dist/api/diet/index.js.map +1 -0
- package/dist/api/diet/lockfile.d.ts +65 -0
- package/dist/api/diet/lockfile.d.ts.map +1 -0
- package/dist/api/diet/lockfile.js +329 -0
- package/dist/api/diet/lockfile.js.map +1 -0
- package/dist/api/diet/replaceable.d.ts +46 -0
- package/dist/api/diet/replaceable.d.ts.map +1 -0
- package/dist/api/diet/replaceable.js +115 -0
- package/dist/api/diet/replaceable.js.map +1 -0
- package/dist/api/diet/replaceable.json +168 -0
- package/dist/api/diet/scan.d.ts +43 -0
- package/dist/api/diet/scan.d.ts.map +1 -0
- package/dist/api/diet/scan.js +357 -0
- package/dist/api/diet/scan.js.map +1 -0
- package/dist/api/diet/surface.d.ts +32 -0
- package/dist/api/diet/surface.d.ts.map +1 -0
- package/dist/api/diet/surface.js +130 -0
- package/dist/api/diet/surface.js.map +1 -0
- package/dist/api/diet/types.d.ts +205 -0
- package/dist/api/diet/types.d.ts.map +1 -0
- package/dist/api/diet/types.js +2 -0
- package/dist/api/diet/types.js.map +1 -0
- package/dist/api/diet/unused.d.ts +73 -0
- package/dist/api/diet/unused.d.ts.map +1 -0
- package/dist/api/diet/unused.js +342 -0
- package/dist/api/diet/unused.js.map +1 -0
- package/dist/api/evidence-pack/attest.d.ts +43 -0
- package/dist/api/evidence-pack/attest.d.ts.map +1 -0
- package/dist/api/evidence-pack/attest.js +140 -0
- package/dist/api/evidence-pack/attest.js.map +1 -0
- package/dist/api/evidence-pack/components.d.ts +49 -0
- package/dist/api/evidence-pack/components.d.ts.map +1 -0
- package/dist/api/evidence-pack/components.js +278 -0
- package/dist/api/evidence-pack/components.js.map +1 -0
- package/dist/api/evidence-pack/cra.d.ts +54 -0
- package/dist/api/evidence-pack/cra.d.ts.map +1 -0
- package/dist/api/evidence-pack/cra.js +234 -0
- package/dist/api/evidence-pack/cra.js.map +1 -0
- package/dist/api/evidence-pack/dsse.d.ts +53 -0
- package/dist/api/evidence-pack/dsse.d.ts.map +1 -0
- package/dist/api/evidence-pack/dsse.js +132 -0
- package/dist/api/evidence-pack/dsse.js.map +1 -0
- package/dist/api/evidence-pack/findings.d.ts +57 -0
- package/dist/api/evidence-pack/findings.d.ts.map +1 -0
- package/dist/api/evidence-pack/findings.js +232 -0
- package/dist/api/evidence-pack/findings.js.map +1 -0
- package/dist/api/evidence-pack/index.d.ts +70 -0
- package/dist/api/evidence-pack/index.d.ts.map +1 -0
- package/dist/api/evidence-pack/index.js +482 -0
- package/dist/api/evidence-pack/index.js.map +1 -0
- package/dist/api/evidence-pack/readme.d.ts +5 -0
- package/dist/api/evidence-pack/readme.d.ts.map +1 -0
- package/dist/api/evidence-pack/readme.js +55 -0
- package/dist/api/evidence-pack/readme.js.map +1 -0
- package/dist/api/evidence-pack/sbom.d.ts +87 -0
- package/dist/api/evidence-pack/sbom.d.ts.map +1 -0
- package/dist/api/evidence-pack/sbom.js +221 -0
- package/dist/api/evidence-pack/sbom.js.map +1 -0
- package/dist/api/evidence-pack/types.d.ts +62 -0
- package/dist/api/evidence-pack/types.d.ts.map +1 -0
- package/dist/api/evidence-pack/types.js +2 -0
- package/dist/api/evidence-pack/types.js.map +1 -0
- package/dist/api/evidence-pack/vex.d.ts +114 -0
- package/dist/api/evidence-pack/vex.d.ts.map +1 -0
- package/dist/api/evidence-pack/vex.js +197 -0
- package/dist/api/evidence-pack/vex.js.map +1 -0
- package/dist/api/freshness/deps.d.ts +27 -0
- package/dist/api/freshness/deps.d.ts.map +1 -0
- package/dist/api/freshness/deps.js +60 -0
- package/dist/api/freshness/deps.js.map +1 -0
- package/dist/api/freshness/distance.d.ts +42 -0
- package/dist/api/freshness/distance.d.ts.map +1 -0
- package/dist/api/freshness/distance.js +86 -0
- package/dist/api/freshness/distance.js.map +1 -0
- package/dist/api/freshness/index.d.ts +12 -0
- package/dist/api/freshness/index.d.ts.map +1 -0
- package/dist/api/freshness/index.js +11 -0
- package/dist/api/freshness/index.js.map +1 -0
- package/dist/api/freshness/path.d.ts +29 -0
- package/dist/api/freshness/path.d.ts.map +1 -0
- package/dist/api/freshness/path.js +103 -0
- package/dist/api/freshness/path.js.map +1 -0
- package/dist/api/freshness/report.d.ts +55 -0
- package/dist/api/freshness/report.d.ts.map +1 -0
- package/dist/api/freshness/report.js +334 -0
- package/dist/api/freshness/report.js.map +1 -0
- package/dist/api/freshness/step.d.ts +47 -0
- package/dist/api/freshness/step.d.ts.map +1 -0
- package/dist/api/freshness/step.js +286 -0
- package/dist/api/freshness/step.js.map +1 -0
- package/dist/api/freshness/types.d.ts +192 -0
- package/dist/api/freshness/types.d.ts.map +1 -0
- package/dist/api/freshness/types.js +2 -0
- package/dist/api/freshness/types.js.map +1 -0
- package/dist/api/guard/checks.d.ts +31 -0
- package/dist/api/guard/checks.d.ts.map +1 -0
- package/dist/api/guard/checks.js +101 -0
- package/dist/api/guard/checks.js.map +1 -0
- package/dist/api/guard/diff.d.ts +46 -0
- package/dist/api/guard/diff.d.ts.map +1 -0
- package/dist/api/guard/diff.js +89 -0
- package/dist/api/guard/diff.js.map +1 -0
- package/dist/api/guard/hook.d.ts +59 -0
- package/dist/api/guard/hook.d.ts.map +1 -0
- package/dist/api/guard/hook.js +179 -0
- package/dist/api/guard/hook.js.map +1 -0
- package/dist/api/guard/index.d.ts +32 -0
- package/dist/api/guard/index.d.ts.map +1 -0
- package/dist/api/guard/index.js +199 -0
- package/dist/api/guard/index.js.map +1 -0
- package/dist/api/guard/popular.d.ts +7 -0
- package/dist/api/guard/popular.d.ts.map +1 -0
- package/dist/api/guard/popular.js +206 -0
- package/dist/api/guard/popular.js.map +1 -0
- package/dist/api/guard/spec.d.ts +22 -0
- package/dist/api/guard/spec.d.ts.map +1 -0
- package/dist/api/guard/spec.js +124 -0
- package/dist/api/guard/spec.js.map +1 -0
- package/dist/api/guard/types.d.ts +34 -0
- package/dist/api/guard/types.d.ts.map +1 -0
- package/dist/api/guard/types.js +2 -0
- package/dist/api/guard/types.js.map +1 -0
- package/dist/api/hooks/detect.d.ts +28 -0
- package/dist/api/hooks/detect.d.ts.map +1 -0
- package/dist/api/hooks/detect.js +112 -0
- package/dist/api/hooks/detect.js.map +1 -0
- package/dist/api/hooks/index.d.ts +14 -0
- package/dist/api/hooks/index.d.ts.map +1 -0
- package/dist/api/hooks/index.js +77 -0
- package/dist/api/hooks/index.js.map +1 -0
- package/dist/api/hooks/merge.d.ts +35 -0
- package/dist/api/hooks/merge.d.ts.map +1 -0
- package/dist/api/hooks/merge.js +345 -0
- package/dist/api/hooks/merge.js.map +1 -0
- package/dist/api/hooks/plan.d.ts +18 -0
- package/dist/api/hooks/plan.d.ts.map +1 -0
- package/dist/api/hooks/plan.js +270 -0
- package/dist/api/hooks/plan.js.map +1 -0
- package/dist/api/hooks/scripts.d.ts +18 -0
- package/dist/api/hooks/scripts.d.ts.map +1 -0
- package/dist/api/hooks/scripts.js +193 -0
- package/dist/api/hooks/scripts.js.map +1 -0
- package/dist/api/hooks/types.d.ts +85 -0
- package/dist/api/hooks/types.d.ts.map +1 -0
- package/dist/api/hooks/types.js +5 -0
- package/dist/api/hooks/types.js.map +1 -0
- package/dist/api/incident/ci-secrets.d.ts +76 -0
- package/dist/api/incident/ci-secrets.d.ts.map +1 -0
- package/dist/api/incident/ci-secrets.js +420 -0
- package/dist/api/incident/ci-secrets.js.map +1 -0
- package/dist/api/incident/history.d.ts +81 -0
- package/dist/api/incident/history.d.ts.map +1 -0
- package/dist/api/incident/history.js +379 -0
- package/dist/api/incident/history.js.map +1 -0
- package/dist/api/incident/index.d.ts +36 -0
- package/dist/api/incident/index.d.ts.map +1 -0
- package/dist/api/incident/index.js +165 -0
- package/dist/api/incident/index.js.map +1 -0
- package/dist/api/incident/markdown.d.ts +8 -0
- package/dist/api/incident/markdown.d.ts.map +1 -0
- package/dist/api/incident/markdown.js +208 -0
- package/dist/api/incident/markdown.js.map +1 -0
- package/dist/api/incident/project.d.ts +28 -0
- package/dist/api/incident/project.d.ts.map +1 -0
- package/dist/api/incident/project.js +111 -0
- package/dist/api/incident/project.js.map +1 -0
- package/dist/api/incident/rollback.d.ts +50 -0
- package/dist/api/incident/rollback.d.ts.map +1 -0
- package/dist/api/incident/rollback.js +132 -0
- package/dist/api/incident/rollback.js.map +1 -0
- package/dist/api/incident/target.d.ts +18 -0
- package/dist/api/incident/target.d.ts.map +1 -0
- package/dist/api/incident/target.js +110 -0
- package/dist/api/incident/target.js.map +1 -0
- package/dist/api/incident/text.d.ts +3 -0
- package/dist/api/incident/text.d.ts.map +1 -0
- package/dist/api/incident/text.js +13 -0
- package/dist/api/incident/text.js.map +1 -0
- package/dist/api/incident/types.d.ts +118 -0
- package/dist/api/incident/types.d.ts.map +1 -0
- package/dist/api/incident/types.js +2 -0
- package/dist/api/incident/types.js.map +1 -0
- package/dist/api/index.d.ts +30 -2
- package/dist/api/index.d.ts.map +1 -1
- package/dist/api/index.js +24 -1
- package/dist/api/index.js.map +1 -1
- package/dist/api/init/assets.d.ts +47 -0
- package/dist/api/init/assets.d.ts.map +1 -0
- package/dist/api/init/assets.js +195 -0
- package/dist/api/init/assets.js.map +1 -0
- package/dist/api/init/detect.d.ts +8 -0
- package/dist/api/init/detect.d.ts.map +1 -0
- package/dist/api/init/detect.js +136 -0
- package/dist/api/init/detect.js.map +1 -0
- package/dist/api/init/diff.d.ts +3 -0
- package/dist/api/init/diff.d.ts.map +1 -0
- package/dist/api/init/diff.js +40 -0
- package/dist/api/init/diff.js.map +1 -0
- package/dist/api/init/guard-assets.d.ts +37 -0
- package/dist/api/init/guard-assets.d.ts.map +1 -0
- package/dist/api/init/guard-assets.js +173 -0
- package/dist/api/init/guard-assets.js.map +1 -0
- package/dist/api/init/index.d.ts +13 -0
- package/dist/api/init/index.d.ts.map +1 -0
- package/dist/api/init/index.js +50 -0
- package/dist/api/init/index.js.map +1 -0
- package/dist/api/init/merge.d.ts +43 -0
- package/dist/api/init/merge.d.ts.map +1 -0
- package/dist/api/init/merge.js +303 -0
- package/dist/api/init/merge.js.map +1 -0
- package/dist/api/init/plan.d.ts +4 -0
- package/dist/api/init/plan.d.ts.map +1 -0
- package/dist/api/init/plan.js +168 -0
- package/dist/api/init/plan.js.map +1 -0
- package/dist/api/init/plugin-files.d.ts +3 -0
- package/dist/api/init/plugin-files.d.ts.map +1 -0
- package/dist/api/init/plugin-files.js +80 -0
- package/dist/api/init/plugin-files.js.map +1 -0
- package/dist/api/init/types.d.ts +72 -0
- package/dist/api/init/types.d.ts.map +1 -0
- package/dist/api/init/types.js +10 -0
- package/dist/api/init/types.js.map +1 -0
- package/dist/api/maintain/index.d.ts +21 -0
- package/dist/api/maintain/index.d.ts.map +1 -0
- package/dist/api/maintain/index.js +367 -0
- package/dist/api/maintain/index.js.map +1 -0
- package/dist/api/maintain/package-files.d.ts +37 -0
- package/dist/api/maintain/package-files.d.ts.map +1 -0
- package/dist/api/maintain/package-files.js +156 -0
- package/dist/api/maintain/package-files.js.map +1 -0
- package/dist/api/maintain/types.d.ts +87 -0
- package/dist/api/maintain/types.d.ts.map +1 -0
- package/dist/api/maintain/types.js +2 -0
- package/dist/api/maintain/types.js.map +1 -0
- package/dist/api/maintain/vex-file.d.ts +33 -0
- package/dist/api/maintain/vex-file.d.ts.map +1 -0
- package/dist/api/maintain/vex-file.js +95 -0
- package/dist/api/maintain/vex-file.js.map +1 -0
- package/dist/api/maintainer-vex/index.d.ts +57 -0
- package/dist/api/maintainer-vex/index.d.ts.map +1 -0
- package/dist/api/maintainer-vex/index.js +107 -0
- package/dist/api/maintainer-vex/index.js.map +1 -0
- package/dist/api/memory/index.d.ts +88 -0
- package/dist/api/memory/index.d.ts.map +1 -0
- package/dist/api/memory/index.js +89 -0
- package/dist/api/memory/index.js.map +1 -0
- package/dist/api/options-schema.d.ts +9 -61
- package/dist/api/options-schema.d.ts.map +1 -1
- package/dist/api/options-schema.js +21 -315
- package/dist/api/options-schema.js.map +1 -1
- package/dist/api/patches/reconcile.d.ts.map +1 -1
- package/dist/api/patches/reconcile.js +4 -1
- package/dist/api/patches/reconcile.js.map +1 -1
- package/dist/api/policy-nl/apply-patch.d.ts +23 -0
- package/dist/api/policy-nl/apply-patch.d.ts.map +1 -0
- package/dist/api/policy-nl/apply-patch.js +153 -0
- package/dist/api/policy-nl/apply-patch.js.map +1 -0
- package/dist/api/policy-nl/compile.d.ts +98 -0
- package/dist/api/policy-nl/compile.d.ts.map +1 -0
- package/dist/api/policy-nl/compile.js +308 -0
- package/dist/api/policy-nl/compile.js.map +1 -0
- package/dist/api/policy-nl/explain.d.ts +33 -0
- package/dist/api/policy-nl/explain.d.ts.map +1 -0
- package/dist/api/policy-nl/explain.js +137 -0
- package/dist/api/policy-nl/explain.js.map +1 -0
- package/dist/api/policy-nl/index.d.ts +6 -0
- package/dist/api/policy-nl/index.d.ts.map +1 -0
- package/dist/api/policy-nl/index.js +6 -0
- package/dist/api/policy-nl/index.js.map +1 -0
- package/dist/api/policy-nl/prompt.d.ts +16 -0
- package/dist/api/policy-nl/prompt.d.ts.map +1 -0
- package/dist/api/policy-nl/prompt.js +45 -0
- package/dist/api/policy-nl/prompt.js.map +1 -0
- package/dist/api/policy-nl/proposal.d.ts +438 -0
- package/dist/api/policy-nl/proposal.d.ts.map +1 -0
- package/dist/api/policy-nl/proposal.js +105 -0
- package/dist/api/policy-nl/proposal.js.map +1 -0
- package/dist/api/policy-nl/request-match.d.ts +20 -0
- package/dist/api/policy-nl/request-match.d.ts.map +1 -0
- package/dist/api/policy-nl/request-match.js +94 -0
- package/dist/api/policy-nl/request-match.js.map +1 -0
- package/dist/api/policy-nl/sanitize.d.ts +21 -0
- package/dist/api/policy-nl/sanitize.d.ts.map +1 -0
- package/dist/api/policy-nl/sanitize.js +65 -0
- package/dist/api/policy-nl/sanitize.js.map +1 -0
- package/dist/api/policy-nl/vocabulary.d.ts +9 -0
- package/dist/api/policy-nl/vocabulary.d.ts.map +1 -0
- package/dist/api/policy-nl/vocabulary.js +118 -0
- package/dist/api/policy-nl/vocabulary.js.map +1 -0
- package/dist/api/premortem/index.d.ts +16 -0
- package/dist/api/premortem/index.d.ts.map +1 -0
- package/dist/api/premortem/index.js +274 -0
- package/dist/api/premortem/index.js.map +1 -0
- package/dist/api/premortem/playbook.d.ts +8 -0
- package/dist/api/premortem/playbook.d.ts.map +1 -0
- package/dist/api/premortem/playbook.js +131 -0
- package/dist/api/premortem/playbook.js.map +1 -0
- package/dist/api/premortem/types.d.ts +75 -0
- package/dist/api/premortem/types.d.ts.map +1 -0
- package/dist/api/premortem/types.js +2 -0
- package/dist/api/premortem/types.js.map +1 -0
- package/dist/api/prove/advisory.d.ts +26 -0
- package/dist/api/prove/advisory.d.ts.map +1 -0
- package/dist/api/prove/advisory.js +81 -0
- package/dist/api/prove/advisory.js.map +1 -0
- package/dist/api/prove/agent.d.ts +9 -0
- package/dist/api/prove/agent.d.ts.map +1 -0
- package/dist/api/prove/agent.js +203 -0
- package/dist/api/prove/agent.js.map +1 -0
- package/dist/api/prove/evidence.d.ts +108 -0
- package/dist/api/prove/evidence.d.ts.map +1 -0
- package/dist/api/prove/evidence.js +176 -0
- package/dist/api/prove/evidence.js.map +1 -0
- package/dist/api/prove/harness.d.ts +27 -0
- package/dist/api/prove/harness.d.ts.map +1 -0
- package/dist/api/prove/harness.js +148 -0
- package/dist/api/prove/harness.js.map +1 -0
- package/dist/api/prove/index.d.ts +84 -0
- package/dist/api/prove/index.d.ts.map +1 -0
- package/dist/api/prove/index.js +289 -0
- package/dist/api/prove/index.js.map +1 -0
- package/dist/api/prove/install.d.ts +24 -0
- package/dist/api/prove/install.d.ts.map +1 -0
- package/dist/api/prove/install.js +150 -0
- package/dist/api/prove/install.js.map +1 -0
- package/dist/api/prove/sandbox.d.ts +48 -0
- package/dist/api/prove/sandbox.d.ts.map +1 -0
- package/dist/api/prove/sandbox.js +269 -0
- package/dist/api/prove/sandbox.js.map +1 -0
- package/dist/api/prove/screen.d.ts +17 -0
- package/dist/api/prove/screen.d.ts.map +1 -0
- package/dist/api/prove/screen.js +256 -0
- package/dist/api/prove/screen.js.map +1 -0
- package/dist/api/prove/types.d.ts +105 -0
- package/dist/api/prove/types.d.ts.map +1 -0
- package/dist/api/prove/types.js +2 -0
- package/dist/api/prove/types.js.map +1 -0
- package/dist/api/radar/deps.d.ts +7 -0
- package/dist/api/radar/deps.d.ts.map +1 -0
- package/dist/api/radar/deps.js +263 -0
- package/dist/api/radar/deps.js.map +1 -0
- package/dist/api/radar/index.d.ts +16 -0
- package/dist/api/radar/index.d.ts.map +1 -0
- package/dist/api/radar/index.js +429 -0
- package/dist/api/radar/index.js.map +1 -0
- package/dist/api/radar/render.d.ts +6 -0
- package/dist/api/radar/render.d.ts.map +1 -0
- package/dist/api/radar/render.js +51 -0
- package/dist/api/radar/render.js.map +1 -0
- package/dist/api/radar/types.d.ts +162 -0
- package/dist/api/radar/types.d.ts.map +1 -0
- package/dist/api/radar/types.js +2 -0
- package/dist/api/radar/types.js.map +1 -0
- package/dist/api/reachability/index.d.ts.map +1 -1
- package/dist/api/reachability/index.js +35 -1
- package/dist/api/reachability/index.js.map +1 -1
- package/dist/api/recipes/index.d.ts +93 -0
- package/dist/api/recipes/index.d.ts.map +1 -0
- package/dist/api/recipes/index.js +159 -0
- package/dist/api/recipes/index.js.map +1 -0
- package/dist/api/remediate/index.d.ts.map +1 -1
- package/dist/api/remediate/index.js +25 -1
- package/dist/api/remediate/index.js.map +1 -1
- package/dist/api/remediate.evidence.d.ts.map +1 -1
- package/dist/api/remediate.evidence.js +1 -0
- package/dist/api/remediate.evidence.js.map +1 -1
- package/dist/api/reporting.d.ts +21 -0
- package/dist/api/reporting.d.ts.map +1 -1
- package/dist/api/reporting.js +39 -1
- package/dist/api/reporting.js.map +1 -1
- package/dist/api/runs/attempts.d.ts +86 -0
- package/dist/api/runs/attempts.d.ts.map +1 -0
- package/dist/api/runs/attempts.js +378 -0
- package/dist/api/runs/attempts.js.map +1 -0
- package/dist/api/runs/autonomy-events.d.ts +41 -0
- package/dist/api/runs/autonomy-events.d.ts.map +1 -0
- package/dist/api/runs/autonomy-events.js +130 -0
- package/dist/api/runs/autonomy-events.js.map +1 -0
- package/dist/api/runs/deps.d.ts +23 -0
- package/dist/api/runs/deps.d.ts.map +1 -0
- package/dist/api/runs/deps.js +51 -0
- package/dist/api/runs/deps.js.map +1 -0
- package/dist/api/runs/index.d.ts +167 -0
- package/dist/api/runs/index.d.ts.map +1 -0
- package/dist/api/runs/index.js +601 -0
- package/dist/api/runs/index.js.map +1 -0
- package/dist/api/runs/memory-events.d.ts +19 -0
- package/dist/api/runs/memory-events.d.ts.map +1 -0
- package/dist/api/runs/memory-events.js +78 -0
- package/dist/api/runs/memory-events.js.map +1 -0
- package/dist/api/runs/recipes.d.ts +40 -0
- package/dist/api/runs/recipes.d.ts.map +1 -0
- package/dist/api/runs/recipes.js +110 -0
- package/dist/api/runs/recipes.js.map +1 -0
- package/dist/api/runs/repair.d.ts +73 -0
- package/dist/api/runs/repair.d.ts.map +1 -0
- package/dist/api/runs/repair.js +226 -0
- package/dist/api/runs/repair.js.map +1 -0
- package/dist/api/trace/index.d.ts +6 -0
- package/dist/api/trace/index.d.ts.map +1 -0
- package/dist/api/trace/index.js +5 -0
- package/dist/api/trace/index.js.map +1 -0
- package/dist/api/update-outdated/index.d.ts.map +1 -1
- package/dist/api/update-outdated/index.js +13 -1
- package/dist/api/update-outdated/index.js.map +1 -1
- package/dist/api/vex/index.d.ts +44 -1
- package/dist/api/vex/index.d.ts.map +1 -1
- package/dist/api/vex/index.js +131 -3
- package/dist/api/vex/index.js.map +1 -1
- package/dist/autonomy/compute.d.ts +117 -0
- package/dist/autonomy/compute.d.ts.map +1 -0
- package/dist/autonomy/compute.js +346 -0
- package/dist/autonomy/compute.js.map +1 -0
- package/dist/autonomy/record.d.ts +21 -0
- package/dist/autonomy/record.d.ts.map +1 -0
- package/dist/autonomy/record.js +228 -0
- package/dist/autonomy/record.js.map +1 -0
- package/dist/autonomy/types.d.ts +78 -0
- package/dist/autonomy/types.d.ts.map +1 -0
- package/dist/autonomy/types.js +59 -0
- package/dist/autonomy/types.js.map +1 -0
- package/dist/catalog/adapters/http.d.ts +27 -0
- package/dist/catalog/adapters/http.d.ts.map +1 -0
- package/dist/catalog/adapters/http.js +190 -0
- package/dist/catalog/adapters/http.js.map +1 -0
- package/dist/catalog/adapters/mcp.d.ts +53 -0
- package/dist/catalog/adapters/mcp.d.ts.map +1 -0
- package/dist/catalog/adapters/mcp.js +105 -0
- package/dist/catalog/adapters/mcp.js.map +1 -0
- package/dist/catalog/api-deps.d.ts +64 -0
- package/dist/catalog/api-deps.d.ts.map +1 -0
- package/dist/catalog/api-deps.js +60 -0
- package/dist/catalog/api-deps.js.map +1 -0
- package/dist/catalog/define-operation.d.ts +59 -0
- package/dist/catalog/define-operation.d.ts.map +1 -0
- package/dist/catalog/define-operation.js +9 -0
- package/dist/catalog/define-operation.js.map +1 -0
- package/dist/catalog/evidence-pack-operations.d.ts +3 -0
- package/dist/catalog/evidence-pack-operations.d.ts.map +1 -0
- package/dist/catalog/evidence-pack-operations.js +93 -0
- package/dist/catalog/evidence-pack-operations.js.map +1 -0
- package/dist/catalog/freshness-operations.d.ts +3 -0
- package/dist/catalog/freshness-operations.d.ts.map +1 -0
- package/dist/catalog/freshness-operations.js +91 -0
- package/dist/catalog/freshness-operations.js.map +1 -0
- package/dist/catalog/incident-operations.d.ts +3 -0
- package/dist/catalog/incident-operations.d.ts.map +1 -0
- package/dist/catalog/incident-operations.js +125 -0
- package/dist/catalog/incident-operations.js.map +1 -0
- package/dist/catalog/index.d.ts +12 -0
- package/dist/catalog/index.d.ts.map +1 -0
- package/dist/catalog/index.js +7 -0
- package/dist/catalog/index.js.map +1 -0
- package/dist/catalog/maintainer-vex-operations.d.ts +3 -0
- package/dist/catalog/maintainer-vex-operations.d.ts.map +1 -0
- package/dist/catalog/maintainer-vex-operations.js +107 -0
- package/dist/catalog/maintainer-vex-operations.js.map +1 -0
- package/dist/catalog/memory-operations.d.ts +3 -0
- package/dist/catalog/memory-operations.d.ts.map +1 -0
- package/dist/catalog/memory-operations.js +128 -0
- package/dist/catalog/memory-operations.js.map +1 -0
- package/dist/catalog/operations.d.ts +4 -0
- package/dist/catalog/operations.d.ts.map +1 -0
- package/dist/catalog/operations.js +797 -0
- package/dist/catalog/operations.js.map +1 -0
- package/dist/catalog/policy-operations.d.ts +3 -0
- package/dist/catalog/policy-operations.d.ts.map +1 -0
- package/dist/catalog/policy-operations.js +87 -0
- package/dist/catalog/policy-operations.js.map +1 -0
- package/dist/catalog/prove-operations.d.ts +3 -0
- package/dist/catalog/prove-operations.d.ts.map +1 -0
- package/dist/catalog/prove-operations.js +87 -0
- package/dist/catalog/prove-operations.js.map +1 -0
- package/dist/catalog/radar-operations.d.ts +3 -0
- package/dist/catalog/radar-operations.d.ts.map +1 -0
- package/dist/catalog/radar-operations.js +82 -0
- package/dist/catalog/radar-operations.js.map +1 -0
- package/dist/catalog/responses.d.ts +229 -0
- package/dist/catalog/responses.d.ts.map +1 -0
- package/dist/catalog/responses.js +313 -0
- package/dist/catalog/responses.js.map +1 -0
- package/dist/catalog/schema.d.ts +11 -0
- package/dist/catalog/schema.d.ts.map +1 -0
- package/dist/catalog/schema.js +13 -0
- package/dist/catalog/schema.js.map +1 -0
- package/dist/cli/autonomy.d.ts +11 -0
- package/dist/cli/autonomy.d.ts.map +1 -0
- package/dist/cli/autonomy.js +80 -0
- package/dist/cli/autonomy.js.map +1 -0
- package/dist/cli/bisect.d.ts +19 -0
- package/dist/cli/bisect.d.ts.map +1 -0
- package/dist/cli/bisect.js +109 -0
- package/dist/cli/bisect.js.map +1 -0
- package/dist/cli/errors.d.ts +8 -0
- package/dist/cli/errors.d.ts.map +1 -0
- package/dist/cli/errors.js +23 -0
- package/dist/cli/errors.js.map +1 -0
- package/dist/cli/evidence-pack-commands.d.ts +21 -0
- package/dist/cli/evidence-pack-commands.d.ts.map +1 -0
- package/dist/cli/evidence-pack-commands.js +109 -0
- package/dist/cli/evidence-pack-commands.js.map +1 -0
- package/dist/cli/freshness-commands.d.ts +31 -0
- package/dist/cli/freshness-commands.d.ts.map +1 -0
- package/dist/cli/freshness-commands.js +241 -0
- package/dist/cli/freshness-commands.js.map +1 -0
- package/dist/cli/incident-commands.d.ts +29 -0
- package/dist/cli/incident-commands.d.ts.map +1 -0
- package/dist/cli/incident-commands.js +131 -0
- package/dist/cli/incident-commands.js.map +1 -0
- package/dist/cli/index.d.ts.map +1 -1
- package/dist/cli/index.js +4 -3
- package/dist/cli/index.js.map +1 -1
- package/dist/cli/maintain-commands.d.ts +22 -0
- package/dist/cli/maintain-commands.d.ts.map +1 -0
- package/dist/cli/maintain-commands.js +161 -0
- package/dist/cli/maintain-commands.js.map +1 -0
- package/dist/cli/memory-commands.d.ts +23 -0
- package/dist/cli/memory-commands.d.ts.map +1 -0
- package/dist/cli/memory-commands.js +172 -0
- package/dist/cli/memory-commands.js.map +1 -0
- package/dist/cli/policy-commands.d.ts +29 -0
- package/dist/cli/policy-commands.d.ts.map +1 -0
- package/dist/cli/policy-commands.js +138 -0
- package/dist/cli/policy-commands.js.map +1 -0
- package/dist/cli/program.d.ts.map +1 -1
- package/dist/cli/program.js +254 -2
- package/dist/cli/program.js.map +1 -1
- package/dist/cli/prove-commands.d.ts +22 -0
- package/dist/cli/prove-commands.d.ts.map +1 -0
- package/dist/cli/prove-commands.js +65 -0
- package/dist/cli/prove-commands.js.map +1 -0
- package/dist/cli/radar-commands.d.ts +20 -0
- package/dist/cli/radar-commands.d.ts.map +1 -0
- package/dist/cli/radar-commands.js +60 -0
- package/dist/cli/radar-commands.js.map +1 -0
- package/dist/cli/recipes.d.ts +3 -0
- package/dist/cli/recipes.d.ts.map +1 -0
- package/dist/cli/recipes.js +124 -0
- package/dist/cli/recipes.js.map +1 -0
- package/dist/cli/runners.d.ts +95 -1
- package/dist/cli/runners.d.ts.map +1 -1
- package/dist/cli/runners.js +586 -157
- package/dist/cli/runners.js.map +1 -1
- package/dist/cli/trace.d.ts +12 -0
- package/dist/cli/trace.d.ts.map +1 -0
- package/dist/cli/trace.js +79 -0
- package/dist/cli/trace.js.map +1 -0
- package/dist/cli/types.d.ts +4 -2
- package/dist/cli/types.d.ts.map +1 -1
- package/dist/cli/types.js.map +1 -1
- package/dist/cli/validators.d.ts.map +1 -1
- package/dist/cli/validators.js +5 -0
- package/dist/cli/validators.js.map +1 -1
- package/dist/intelligence/sources/cisa-kev.d.ts +6 -0
- package/dist/intelligence/sources/cisa-kev.d.ts.map +1 -1
- package/dist/intelligence/sources/cisa-kev.js +27 -3
- package/dist/intelligence/sources/cisa-kev.js.map +1 -1
- package/dist/intelligence/sources/registry.d.ts +55 -6
- package/dist/intelligence/sources/registry.d.ts.map +1 -1
- package/dist/intelligence/sources/registry.js +182 -61
- package/dist/intelligence/sources/registry.js.map +1 -1
- package/dist/mcp/http.d.ts +23 -0
- package/dist/mcp/http.d.ts.map +1 -0
- package/dist/mcp/http.js +102 -0
- package/dist/mcp/http.js.map +1 -0
- package/dist/mcp/prompts.d.ts +25 -0
- package/dist/mcp/prompts.d.ts.map +1 -0
- package/dist/mcp/prompts.js +89 -0
- package/dist/mcp/prompts.js.map +1 -0
- package/dist/mcp/resources.d.ts +58 -0
- package/dist/mcp/resources.d.ts.map +1 -0
- package/dist/mcp/resources.js +131 -0
- package/dist/mcp/resources.js.map +1 -0
- package/dist/mcp/server.d.ts +19 -350
- package/dist/mcp/server.d.ts.map +1 -1
- package/dist/mcp/server.js +72 -423
- package/dist/mcp/server.js.map +1 -1
- package/dist/openapi/handlers/index.d.ts.map +1 -1
- package/dist/openapi/handlers/index.js +42 -35
- package/dist/openapi/handlers/index.js.map +1 -1
- package/dist/openapi/handlers/run-operation.d.ts +9 -0
- package/dist/openapi/handlers/run-operation.d.ts.map +1 -0
- package/dist/openapi/handlers/run-operation.js +46 -0
- package/dist/openapi/handlers/run-operation.js.map +1 -0
- package/dist/openapi/handlers/validators.d.ts +2 -3
- package/dist/openapi/handlers/validators.d.ts.map +1 -1
- package/dist/openapi/handlers/validators.js +1 -21
- package/dist/openapi/handlers/validators.js.map +1 -1
- package/dist/openapi/http-utils.d.ts +1 -14
- package/dist/openapi/http-utils.d.ts.map +1 -1
- package/dist/openapi/http-utils.js +1 -82
- package/dist/openapi/http-utils.js.map +1 -1
- package/dist/openapi/rbac.d.ts +1 -21
- package/dist/openapi/rbac.d.ts.map +1 -1
- package/dist/openapi/rbac.js +9 -135
- package/dist/openapi/rbac.js.map +1 -1
- package/dist/openapi/server.d.ts +7 -16
- package/dist/openapi/server.d.ts.map +1 -1
- package/dist/openapi/server.js +2 -16
- package/dist/openapi/server.js.map +1 -1
- package/dist/openapi/spec/index.d.ts +10 -1012
- package/dist/openapi/spec/index.d.ts.map +1 -1
- package/dist/openapi/spec/index.js +36 -2
- package/dist/openapi/spec/index.js.map +1 -1
- package/dist/platform/cooldown.d.ts +15 -0
- package/dist/platform/cooldown.d.ts.map +1 -0
- package/dist/platform/cooldown.js +136 -0
- package/dist/platform/cooldown.js.map +1 -0
- package/dist/platform/freshness-policy.d.ts +25 -0
- package/dist/platform/freshness-policy.d.ts.map +1 -0
- package/dist/platform/freshness-policy.js +25 -0
- package/dist/platform/freshness-policy.js.map +1 -0
- package/dist/platform/git-ref.d.ts +8 -0
- package/dist/platform/git-ref.d.ts.map +1 -0
- package/dist/platform/git-ref.js +35 -0
- package/dist/platform/git-ref.js.map +1 -0
- package/dist/platform/http-auth.d.ts +42 -0
- package/dist/platform/http-auth.d.ts.map +1 -0
- package/dist/platform/http-auth.js +151 -0
- package/dist/platform/http-auth.js.map +1 -0
- package/dist/platform/http-security.d.ts +25 -0
- package/dist/platform/http-security.d.ts.map +1 -0
- package/dist/platform/http-security.js +102 -0
- package/dist/platform/http-security.js.map +1 -0
- package/dist/platform/maintainer-vex/find.d.ts +25 -0
- package/dist/platform/maintainer-vex/find.d.ts.map +1 -0
- package/dist/platform/maintainer-vex/find.js +109 -0
- package/dist/platform/maintainer-vex/find.js.map +1 -0
- package/dist/platform/maintainer-vex/index.d.ts +5 -0
- package/dist/platform/maintainer-vex/index.d.ts.map +1 -0
- package/dist/platform/maintainer-vex/index.js +5 -0
- package/dist/platform/maintainer-vex/index.js.map +1 -0
- package/dist/platform/maintainer-vex/openvex.d.ts +91 -0
- package/dist/platform/maintainer-vex/openvex.d.ts.map +1 -0
- package/dist/platform/maintainer-vex/openvex.js +154 -0
- package/dist/platform/maintainer-vex/openvex.js.map +1 -0
- package/dist/platform/maintainer-vex/purl.d.ts +16 -0
- package/dist/platform/maintainer-vex/purl.d.ts.map +1 -0
- package/dist/platform/maintainer-vex/purl.js +46 -0
- package/dist/platform/maintainer-vex/purl.js.map +1 -0
- package/dist/platform/maintainer-vex/read.d.ts +78 -0
- package/dist/platform/maintainer-vex/read.d.ts.map +1 -0
- package/dist/platform/maintainer-vex/read.js +276 -0
- package/dist/platform/maintainer-vex/read.js.map +1 -0
- package/dist/platform/memory/consume.d.ts +35 -0
- package/dist/platform/memory/consume.d.ts.map +1 -0
- package/dist/platform/memory/consume.js +130 -0
- package/dist/platform/memory/consume.js.map +1 -0
- package/dist/platform/memory/entries.d.ts +119 -0
- package/dist/platform/memory/entries.d.ts.map +1 -0
- package/dist/platform/memory/entries.js +306 -0
- package/dist/platform/memory/entries.js.map +1 -0
- package/dist/platform/memory/format.d.ts +83 -0
- package/dist/platform/memory/format.d.ts.map +1 -0
- package/dist/platform/memory/format.js +285 -0
- package/dist/platform/memory/format.js.map +1 -0
- package/dist/platform/memory/index.d.ts +7 -0
- package/dist/platform/memory/index.d.ts.map +1 -0
- package/dist/platform/memory/index.js +7 -0
- package/dist/platform/memory/index.js.map +1 -0
- package/dist/platform/memory/path.d.ts +7 -0
- package/dist/platform/memory/path.d.ts.map +1 -0
- package/dist/platform/memory/path.js +7 -0
- package/dist/platform/memory/path.js.map +1 -0
- package/dist/platform/memory/propose.d.ts +30 -0
- package/dist/platform/memory/propose.d.ts.map +1 -0
- package/dist/platform/memory/propose.js +71 -0
- package/dist/platform/memory/propose.js.map +1 -0
- package/dist/platform/memory/store.d.ts +64 -0
- package/dist/platform/memory/store.d.ts.map +1 -0
- package/dist/platform/memory/store.js +206 -0
- package/dist/platform/memory/store.js.map +1 -0
- package/dist/platform/option-schemas.d.ts +1225 -0
- package/dist/platform/option-schemas.d.ts.map +1 -0
- package/dist/platform/option-schemas.js +484 -0
- package/dist/platform/option-schemas.js.map +1 -0
- package/dist/platform/package-manager/index.d.ts +11 -2
- package/dist/platform/package-manager/index.d.ts.map +1 -1
- package/dist/platform/package-manager/index.js +24 -1
- package/dist/platform/package-manager/index.js.map +1 -1
- package/dist/platform/package-manager/list-parser.d.ts +4 -2
- package/dist/platform/package-manager/list-parser.d.ts.map +1 -1
- package/dist/platform/package-manager/list-parser.js +13 -4
- package/dist/platform/package-manager/list-parser.js.map +1 -1
- package/dist/platform/package-name.d.ts +11 -0
- package/dist/platform/package-name.d.ts.map +1 -0
- package/dist/platform/package-name.js +18 -0
- package/dist/platform/package-name.js.map +1 -0
- package/dist/platform/path-guard.d.ts +29 -0
- package/dist/platform/path-guard.d.ts.map +1 -0
- package/dist/platform/path-guard.js +113 -0
- package/dist/platform/path-guard.js.map +1 -0
- package/dist/platform/policy-loosening.d.ts +31 -0
- package/dist/platform/policy-loosening.d.ts.map +1 -0
- package/dist/platform/policy-loosening.js +371 -0
- package/dist/platform/policy-loosening.js.map +1 -0
- package/dist/platform/policy.d.ts +248 -1
- package/dist/platform/policy.d.ts.map +1 -1
- package/dist/platform/policy.js +23 -51
- package/dist/platform/policy.js.map +1 -1
- package/dist/platform/redact.d.ts +7 -0
- package/dist/platform/redact.d.ts.map +1 -0
- package/dist/platform/redact.js +11 -0
- package/dist/platform/redact.js.map +1 -0
- package/dist/platform/registry-config.d.ts +27 -0
- package/dist/platform/registry-config.d.ts.map +1 -0
- package/dist/platform/registry-config.js +175 -0
- package/dist/platform/registry-config.js.map +1 -0
- package/dist/platform/repair-agent.d.ts +84 -0
- package/dist/platform/repair-agent.d.ts.map +1 -0
- package/dist/platform/repair-agent.js +7 -0
- package/dist/platform/repair-agent.js.map +1 -0
- package/dist/platform/rollback.d.ts.map +1 -1
- package/dist/platform/rollback.js +12 -0
- package/dist/platform/rollback.js.map +1 -1
- package/dist/platform/supply-chain.d.ts +2 -1
- package/dist/platform/supply-chain.d.ts.map +1 -1
- package/dist/platform/supply-chain.js +10 -4
- package/dist/platform/supply-chain.js.map +1 -1
- package/dist/platform/track-record-path.d.ts +8 -0
- package/dist/platform/track-record-path.d.ts.map +1 -0
- package/dist/platform/track-record-path.js +8 -0
- package/dist/platform/track-record-path.js.map +1 -0
- package/dist/platform/types.d.ts +97 -4
- package/dist/platform/types.d.ts.map +1 -1
- package/dist/platform/types.js +6 -1
- package/dist/platform/types.js.map +1 -1
- package/dist/recipes/capture.d.ts +36 -0
- package/dist/recipes/capture.d.ts.map +1 -0
- package/dist/recipes/capture.js +153 -0
- package/dist/recipes/capture.js.map +1 -0
- package/dist/recipes/discover.d.ts +42 -0
- package/dist/recipes/discover.d.ts.map +1 -0
- package/dist/recipes/discover.js +152 -0
- package/dist/recipes/discover.js.map +1 -0
- package/dist/recipes/engine.d.ts +38 -0
- package/dist/recipes/engine.d.ts.map +1 -0
- package/dist/recipes/engine.js +174 -0
- package/dist/recipes/engine.js.map +1 -0
- package/dist/recipes/schema.d.ts +53 -0
- package/dist/recipes/schema.d.ts.map +1 -0
- package/dist/recipes/schema.js +126 -0
- package/dist/recipes/schema.js.map +1 -0
- package/dist/recipes/store.d.ts +33 -0
- package/dist/recipes/store.d.ts.map +1 -0
- package/dist/recipes/store.js +114 -0
- package/dist/recipes/store.js.map +1 -0
- package/dist/remediation/evaluate-package.d.ts.map +1 -1
- package/dist/remediation/evaluate-package.js +4 -2
- package/dist/remediation/evaluate-package.js.map +1 -1
- package/dist/remediation/impact/api-diff.d.ts +51 -0
- package/dist/remediation/impact/api-diff.d.ts.map +1 -0
- package/dist/remediation/impact/api-diff.js +374 -0
- package/dist/remediation/impact/api-diff.js.map +1 -0
- package/dist/remediation/impact/assess.d.ts +51 -0
- package/dist/remediation/impact/assess.d.ts.map +1 -0
- package/dist/remediation/impact/assess.js +118 -0
- package/dist/remediation/impact/assess.js.map +1 -0
- package/dist/remediation/impact/ast.d.ts +37 -0
- package/dist/remediation/impact/ast.d.ts.map +1 -0
- package/dist/remediation/impact/ast.js +201 -0
- package/dist/remediation/impact/ast.js.map +1 -0
- package/dist/remediation/impact/dts-surface.d.ts +48 -0
- package/dist/remediation/impact/dts-surface.d.ts.map +1 -0
- package/dist/remediation/impact/dts-surface.js +658 -0
- package/dist/remediation/impact/dts-surface.js.map +1 -0
- package/dist/remediation/impact/fix-diff.d.ts +84 -0
- package/dist/remediation/impact/fix-diff.d.ts.map +1 -0
- package/dist/remediation/impact/fix-diff.js +493 -0
- package/dist/remediation/impact/fix-diff.js.map +1 -0
- package/dist/remediation/impact/impact.d.ts +96 -0
- package/dist/remediation/impact/impact.d.ts.map +1 -0
- package/dist/remediation/impact/impact.js +404 -0
- package/dist/remediation/impact/impact.js.map +1 -0
- package/dist/remediation/impact/js-exports.d.ts +63 -0
- package/dist/remediation/impact/js-exports.d.ts.map +1 -0
- package/dist/remediation/impact/js-exports.js +546 -0
- package/dist/remediation/impact/js-exports.js.map +1 -0
- package/dist/remediation/impact/manifest-diff.d.ts +23 -0
- package/dist/remediation/impact/manifest-diff.d.ts.map +1 -0
- package/dist/remediation/impact/manifest-diff.js +223 -0
- package/dist/remediation/impact/manifest-diff.js.map +1 -0
- package/dist/remediation/impact/package-index.d.ts +37 -0
- package/dist/remediation/impact/package-index.d.ts.map +1 -0
- package/dist/remediation/impact/package-index.js +313 -0
- package/dist/remediation/impact/package-index.js.map +1 -0
- package/dist/remediation/impact/tarball.d.ts +43 -0
- package/dist/remediation/impact/tarball.d.ts.map +1 -0
- package/dist/remediation/impact/tarball.js +216 -0
- package/dist/remediation/impact/tarball.js.map +1 -0
- package/dist/remediation/impact/types.d.ts +42 -0
- package/dist/remediation/impact/types.d.ts.map +1 -0
- package/dist/remediation/impact/types.js +3 -0
- package/dist/remediation/impact/types.js.map +1 -0
- package/dist/remediation/impact/usage-index.d.ts +28 -0
- package/dist/remediation/impact/usage-index.d.ts.map +1 -0
- package/dist/remediation/impact/usage-index.js +406 -0
- package/dist/remediation/impact/usage-index.js.map +1 -0
- package/dist/remediation/local/fallback.d.ts.map +1 -1
- package/dist/remediation/local/fallback.js +1 -0
- package/dist/remediation/local/fallback.js.map +1 -1
- package/dist/remediation/local/options.d.ts +3 -0
- package/dist/remediation/local/options.d.ts.map +1 -1
- package/dist/remediation/local/options.js +2 -0
- package/dist/remediation/local/options.js.map +1 -1
- package/dist/remediation/local/primary-strategy.d.ts +4 -0
- package/dist/remediation/local/primary-strategy.d.ts.map +1 -1
- package/dist/remediation/local/primary-strategy.js +61 -17
- package/dist/remediation/local/primary-strategy.js.map +1 -1
- package/dist/remediation/local/run.d.ts.map +1 -1
- package/dist/remediation/local/run.js +85 -6
- package/dist/remediation/local/run.js.map +1 -1
- package/dist/remediation/local/sbom.d.ts +3 -1
- package/dist/remediation/local/sbom.d.ts.map +1 -1
- package/dist/remediation/local/sbom.js +15 -9
- package/dist/remediation/local/sbom.js.map +1 -1
- package/dist/remediation/local/secops-preflight.d.ts +2 -1
- package/dist/remediation/local/secops-preflight.d.ts.map +1 -1
- package/dist/remediation/local/secops-preflight.js +1 -0
- package/dist/remediation/local/secops-preflight.js.map +1 -1
- package/dist/remediation/local/select-target.d.ts +53 -0
- package/dist/remediation/local/select-target.d.ts.map +1 -0
- package/dist/remediation/local/select-target.js +74 -0
- package/dist/remediation/local/select-target.js.map +1 -0
- package/dist/remediation/patch/llm-generator.d.ts.map +1 -1
- package/dist/remediation/patch/llm-generator.js +4 -4
- package/dist/remediation/patch/llm-generator.js.map +1 -1
- package/dist/remediation/radar/changelog.d.ts +38 -0
- package/dist/remediation/radar/changelog.d.ts.map +1 -0
- package/dist/remediation/radar/changelog.js +311 -0
- package/dist/remediation/radar/changelog.js.map +1 -0
- package/dist/remediation/radar/code-diff.d.ts +30 -0
- package/dist/remediation/radar/code-diff.d.ts.map +1 -0
- package/dist/remediation/radar/code-diff.js +512 -0
- package/dist/remediation/radar/code-diff.js.map +1 -0
- package/dist/remediation/radar/metadata.d.ts +14 -0
- package/dist/remediation/radar/metadata.d.ts.map +1 -0
- package/dist/remediation/radar/metadata.js +105 -0
- package/dist/remediation/radar/metadata.js.map +1 -0
- package/dist/remediation/radar/model.d.ts +40 -0
- package/dist/remediation/radar/model.d.ts.map +1 -0
- package/dist/remediation/radar/model.js +74 -0
- package/dist/remediation/radar/model.js.map +1 -0
- package/dist/remediation/radar/sanitize.d.ts +15 -0
- package/dist/remediation/radar/sanitize.d.ts.map +1 -0
- package/dist/remediation/radar/sanitize.js +47 -0
- package/dist/remediation/radar/sanitize.js.map +1 -0
- package/dist/remediation/radar/score.d.ts +12 -0
- package/dist/remediation/radar/score.d.ts.map +1 -0
- package/dist/remediation/radar/score.js +27 -0
- package/dist/remediation/radar/score.js.map +1 -0
- package/dist/remediation/radar/types.d.ts +74 -0
- package/dist/remediation/radar/types.d.ts.map +1 -0
- package/dist/remediation/radar/types.js +65 -0
- package/dist/remediation/radar/types.js.map +1 -0
- package/dist/remediation/repair/attempt.d.ts +74 -0
- package/dist/remediation/repair/attempt.d.ts.map +1 -0
- package/dist/remediation/repair/attempt.js +262 -0
- package/dist/remediation/repair/attempt.js.map +1 -0
- package/dist/remediation/repair/builtin-agent.d.ts +9 -0
- package/dist/remediation/repair/builtin-agent.d.ts.map +1 -0
- package/dist/remediation/repair/builtin-agent.js +139 -0
- package/dist/remediation/repair/builtin-agent.js.map +1 -0
- package/dist/remediation/repair/patch-apply.d.ts +12 -0
- package/dist/remediation/repair/patch-apply.d.ts.map +1 -0
- package/dist/remediation/repair/patch-apply.js +75 -0
- package/dist/remediation/repair/patch-apply.js.map +1 -0
- package/dist/remediation/repair/recipe-attempt.d.ts +56 -0
- package/dist/remediation/repair/recipe-attempt.d.ts.map +1 -0
- package/dist/remediation/repair/recipe-attempt.js +99 -0
- package/dist/remediation/repair/recipe-attempt.js.map +1 -0
- package/dist/remediation/repair/scope-guard.d.ts +18 -0
- package/dist/remediation/repair/scope-guard.d.ts.map +1 -0
- package/dist/remediation/repair/scope-guard.js +62 -0
- package/dist/remediation/repair/scope-guard.js.map +1 -0
- package/dist/remediation/repair/tools.d.ts +30 -0
- package/dist/remediation/repair/tools.d.ts.map +1 -0
- package/dist/remediation/repair/tools.js +370 -0
- package/dist/remediation/repair/tools.js.map +1 -0
- package/dist/remediation/tools/apply-package-override/helpers.d.ts +0 -1
- package/dist/remediation/tools/apply-package-override/helpers.d.ts.map +1 -1
- package/dist/remediation/tools/apply-package-override/helpers.js +0 -30
- package/dist/remediation/tools/apply-package-override/helpers.js.map +1 -1
- package/dist/remediation/tools/apply-package-override/index.d.ts.map +1 -1
- package/dist/remediation/tools/apply-package-override/index.js +51 -13
- package/dist/remediation/tools/apply-package-override/index.js.map +1 -1
- package/dist/remediation/tools/apply-package-override/pnpm-workspace.d.ts +19 -0
- package/dist/remediation/tools/apply-package-override/pnpm-workspace.d.ts.map +1 -0
- package/dist/remediation/tools/apply-package-override/pnpm-workspace.js +47 -0
- package/dist/remediation/tools/apply-package-override/pnpm-workspace.js.map +1 -0
- package/dist/remediation/tools/apply-patch-file/index.js +1 -1
- package/dist/remediation/tools/apply-patch-file/index.js.map +1 -1
- package/dist/remediation/tools/apply-version-bump.d.ts.map +1 -1
- package/dist/remediation/tools/apply-version-bump.js +20 -45
- package/dist/remediation/tools/apply-version-bump.js.map +1 -1
- package/dist/remediation/tools/check-inventory.d.ts +6 -0
- package/dist/remediation/tools/check-inventory.d.ts.map +1 -1
- package/dist/remediation/tools/check-inventory.js +39 -8
- package/dist/remediation/tools/check-inventory.js.map +1 -1
- package/dist/remediation/tools/check-reachability.d.ts +6 -0
- package/dist/remediation/tools/check-reachability.d.ts.map +1 -1
- package/dist/remediation/tools/check-reachability.js +32 -12
- package/dist/remediation/tools/check-reachability.js.map +1 -1
- package/dist/remediation/tools/fetch-package-source.d.ts +1 -0
- package/dist/remediation/tools/fetch-package-source.d.ts.map +1 -1
- package/dist/remediation/tools/fetch-package-source.js +29 -22
- package/dist/remediation/tools/fetch-package-source.js.map +1 -1
- package/dist/remediation/tools/manifest-format.d.ts +7 -0
- package/dist/remediation/tools/manifest-format.d.ts.map +1 -0
- package/dist/remediation/tools/manifest-format.js +14 -0
- package/dist/remediation/tools/manifest-format.js.map +1 -0
- package/dist/remediation/verify/changes.d.ts +33 -0
- package/dist/remediation/verify/changes.d.ts.map +1 -0
- package/dist/remediation/verify/changes.js +204 -0
- package/dist/remediation/verify/changes.js.map +1 -0
- package/dist/remediation/verify/checks.d.ts +30 -0
- package/dist/remediation/verify/checks.d.ts.map +1 -0
- package/dist/remediation/verify/checks.js +239 -0
- package/dist/remediation/verify/checks.js.map +1 -0
- package/dist/remediation/verify/command-check.d.ts +11 -0
- package/dist/remediation/verify/command-check.d.ts.map +1 -0
- package/dist/remediation/verify/command-check.js +26 -0
- package/dist/remediation/verify/command-check.js.map +1 -0
- package/dist/remediation/verify/types.d.ts +66 -0
- package/dist/remediation/verify/types.d.ts.map +1 -0
- package/dist/remediation/verify/types.js +4 -0
- package/dist/remediation/verify/types.js.map +1 -0
- package/dist/remediation/verify/verifier.d.ts +12 -0
- package/dist/remediation/verify/verifier.d.ts.map +1 -0
- package/dist/remediation/verify/verifier.js +56 -0
- package/dist/remediation/verify/verifier.js.map +1 -0
- package/dist/runs/fingerprint.d.ts +14 -0
- package/dist/runs/fingerprint.d.ts.map +1 -0
- package/dist/runs/fingerprint.js +55 -0
- package/dist/runs/fingerprint.js.map +1 -0
- package/dist/runs/hash.d.ts +4 -0
- package/dist/runs/hash.d.ts.map +1 -0
- package/dist/runs/hash.js +18 -0
- package/dist/runs/hash.js.map +1 -0
- package/dist/runs/ids.d.ts +6 -0
- package/dist/runs/ids.d.ts.map +1 -0
- package/dist/runs/ids.js +15 -0
- package/dist/runs/ids.js.map +1 -0
- package/dist/runs/ledger.d.ts +26 -0
- package/dist/runs/ledger.d.ts.map +1 -0
- package/dist/runs/ledger.js +61 -0
- package/dist/runs/ledger.js.map +1 -0
- package/dist/runs/plan.d.ts +67 -0
- package/dist/runs/plan.d.ts.map +1 -0
- package/dist/runs/plan.js +68 -0
- package/dist/runs/plan.js.map +1 -0
- package/dist/runs/run-store.d.ts +83 -0
- package/dist/runs/run-store.d.ts.map +1 -0
- package/dist/runs/run-store.js +161 -0
- package/dist/runs/run-store.js.map +1 -0
- package/dist/runs/snapshot-store.d.ts +13 -0
- package/dist/runs/snapshot-store.d.ts.map +1 -0
- package/dist/runs/snapshot-store.js +78 -0
- package/dist/runs/snapshot-store.js.map +1 -0
- package/dist/runs/worktree.d.ts +40 -0
- package/dist/runs/worktree.d.ts.map +1 -0
- package/dist/runs/worktree.js +144 -0
- package/dist/runs/worktree.js.map +1 -0
- package/dist/scanner/delta-scan.d.ts +10 -1
- package/dist/scanner/delta-scan.d.ts.map +1 -1
- package/dist/scanner/delta-scan.js +15 -3
- package/dist/scanner/delta-scan.js.map +1 -1
- package/dist/scanner/lock-graph/bun.d.ts +6 -0
- package/dist/scanner/lock-graph/bun.d.ts.map +1 -0
- package/dist/scanner/lock-graph/bun.js +116 -0
- package/dist/scanner/lock-graph/bun.js.map +1 -0
- package/dist/scanner/lock-graph/index.d.ts +32 -0
- package/dist/scanner/lock-graph/index.d.ts.map +1 -0
- package/dist/scanner/lock-graph/index.js +125 -0
- package/dist/scanner/lock-graph/index.js.map +1 -0
- package/dist/scanner/lock-graph/npm.d.ts +4 -0
- package/dist/scanner/lock-graph/npm.d.ts.map +1 -0
- package/dist/scanner/lock-graph/npm.js +119 -0
- package/dist/scanner/lock-graph/npm.js.map +1 -0
- package/dist/scanner/lock-graph/pnpm.d.ts +4 -0
- package/dist/scanner/lock-graph/pnpm.d.ts.map +1 -0
- package/dist/scanner/lock-graph/pnpm.js +101 -0
- package/dist/scanner/lock-graph/pnpm.js.map +1 -0
- package/dist/scanner/lock-graph/types.d.ts +44 -0
- package/dist/scanner/lock-graph/types.d.ts.map +1 -0
- package/dist/scanner/lock-graph/types.js +32 -0
- package/dist/scanner/lock-graph/types.js.map +1 -0
- package/dist/scanner/lock-graph/yarn.d.ts +4 -0
- package/dist/scanner/lock-graph/yarn.d.ts.map +1 -0
- package/dist/scanner/lock-graph/yarn.js +132 -0
- package/dist/scanner/lock-graph/yarn.js.map +1 -0
- package/dist/scanner/lockfile-diff.d.ts.map +1 -1
- package/dist/scanner/lockfile-diff.js +2 -2
- package/dist/scanner/lockfile-diff.js.map +1 -1
- package/dist/scanner/pnpm-lock-document.d.ts +8 -0
- package/dist/scanner/pnpm-lock-document.d.ts.map +1 -0
- package/dist/scanner/pnpm-lock-document.js +15 -0
- package/dist/scanner/pnpm-lock-document.js.map +1 -0
- package/dist/trace/esm-instrument.d.ts +26 -0
- package/dist/trace/esm-instrument.d.ts.map +1 -0
- package/dist/trace/esm-instrument.js +153 -0
- package/dist/trace/esm-instrument.js.map +1 -0
- package/dist/trace/fold.d.ts +24 -0
- package/dist/trace/fold.d.ts.map +1 -0
- package/dist/trace/fold.js +169 -0
- package/dist/trace/fold.js.map +1 -0
- package/dist/trace/locate.d.ts +18 -0
- package/dist/trace/locate.d.ts.map +1 -0
- package/dist/trace/locate.js +55 -0
- package/dist/trace/locate.js.map +1 -0
- package/dist/trace/register.d.ts +2 -0
- package/dist/trace/register.d.ts.map +1 -0
- package/dist/trace/register.js +15 -0
- package/dist/trace/register.js.map +1 -0
- package/dist/trace/run.d.ts +42 -0
- package/dist/trace/run.d.ts.map +1 -0
- package/dist/trace/run.js +97 -0
- package/dist/trace/run.js.map +1 -0
- package/dist/trace/runtime.d.ts +9 -0
- package/dist/trace/runtime.d.ts.map +1 -0
- package/dist/trace/runtime.js +341 -0
- package/dist/trace/runtime.js.map +1 -0
- package/dist/trace/types.d.ts +98 -0
- package/dist/trace/types.d.ts.map +1 -0
- package/dist/trace/types.js +16 -0
- package/dist/trace/types.js.map +1 -0
- package/dist/trace/verdict.d.ts +8 -0
- package/dist/trace/verdict.d.ts.map +1 -0
- package/dist/trace/verdict.js +111 -0
- package/dist/trace/verdict.js.map +1 -0
- package/dist/trace/wrap.d.ts +32 -0
- package/dist/trace/wrap.d.ts.map +1 -0
- package/dist/trace/wrap.js +151 -0
- package/dist/trace/wrap.js.map +1 -0
- package/llms.txt +21 -3
- package/package.json +23 -17
- package/dist/openapi/handlers/routes.d.ts +0 -6
- package/dist/openapi/handlers/routes.d.ts.map +0 -1
- package/dist/openapi/handlers/routes.js +0 -122
- package/dist/openapi/handlers/routes.js.map +0 -1
- package/dist/openapi/path-guard.d.ts +0 -12
- package/dist/openapi/path-guard.d.ts.map +0 -1
- package/dist/openapi/path-guard.js +0 -79
- package/dist/openapi/path-guard.js.map +0 -1
- package/dist/openapi/spec/paths.d.ts +0 -1053
- package/dist/openapi/spec/paths.d.ts.map +0 -1
- package/dist/openapi/spec/paths.js +0 -623
- package/dist/openapi/spec/paths.js.map +0 -1
- package/dist/openapi/spec/schemas.d.ts +0 -74
- package/dist/openapi/spec/schemas.d.ts.map +0 -1
- package/dist/openapi/spec/schemas.js +0 -32
- package/dist/openapi/spec/schemas.js.map +0 -1
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
import { z } from "zod";
|
|
2
|
+
export declare const RECIPE_SCHEMA_VERSION = 1;
|
|
3
|
+
/** A recipe file larger than this is refused unread. */
|
|
4
|
+
export declare const MAX_RECIPE_BYTES = 500000;
|
|
5
|
+
/** npm package names: lower-case, no leading dot or underscore, optionally scoped. */
|
|
6
|
+
export declare const NPM_PACKAGE_NAME: RegExp;
|
|
7
|
+
export declare const recipeSchema: z.ZodObject<{
|
|
8
|
+
schemaVersion: z.ZodLiteral<1>;
|
|
9
|
+
package: z.ZodString;
|
|
10
|
+
fromRange: z.ZodString;
|
|
11
|
+
toRange: z.ZodString;
|
|
12
|
+
observed: z.ZodOptional<z.ZodObject<{
|
|
13
|
+
fromVersion: z.ZodString;
|
|
14
|
+
toVersion: z.ZodString;
|
|
15
|
+
}, z.core.$strict>>;
|
|
16
|
+
summary: z.ZodOptional<z.ZodString>;
|
|
17
|
+
breaking: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
18
|
+
kind: z.ZodString;
|
|
19
|
+
symbol: z.ZodOptional<z.ZodString>;
|
|
20
|
+
message: z.ZodString;
|
|
21
|
+
}, z.core.$strict>>>;
|
|
22
|
+
hunks: z.ZodArray<z.ZodObject<{
|
|
23
|
+
before: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
24
|
+
remove: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
25
|
+
add: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
26
|
+
after: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
27
|
+
optional: z.ZodOptional<z.ZodBoolean>;
|
|
28
|
+
note: z.ZodOptional<z.ZodString>;
|
|
29
|
+
}, z.core.$strict>>;
|
|
30
|
+
evidence: z.ZodOptional<z.ZodObject<{
|
|
31
|
+
runId: z.ZodOptional<z.ZodString>;
|
|
32
|
+
attemptId: z.ZodOptional<z.ZodString>;
|
|
33
|
+
agent: z.ZodOptional<z.ZodString>;
|
|
34
|
+
capturedAt: z.ZodOptional<z.ZodString>;
|
|
35
|
+
autoremediator: z.ZodOptional<z.ZodString>;
|
|
36
|
+
checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
37
|
+
name: z.ZodString;
|
|
38
|
+
status: z.ZodString;
|
|
39
|
+
}, z.core.$strict>>>;
|
|
40
|
+
}, z.core.$strict>>;
|
|
41
|
+
}, z.core.$strict>;
|
|
42
|
+
export type Recipe = z.output<typeof recipeSchema>;
|
|
43
|
+
export type RecipeHunk = Recipe["hunks"][number];
|
|
44
|
+
export type RecipeBreaking = Recipe["breaking"][number];
|
|
45
|
+
/** Parse and validate recipe JSON. Throws one error naming every problem. */
|
|
46
|
+
export declare function parseRecipe(text: string): Recipe;
|
|
47
|
+
/**
|
|
48
|
+
* A stable id from what the recipe does (its package, ranges and hunks), not from who captured it:
|
|
49
|
+
* the same change captured twice is the same recipe.
|
|
50
|
+
*/
|
|
51
|
+
export declare function recipeId(recipe: Recipe): string;
|
|
52
|
+
export declare function serializeRecipe(recipe: Recipe): string;
|
|
53
|
+
//# sourceMappingURL=schema.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/recipes/schema.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,SAAU,CAAC;AAExC,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,QAAuD,CAAC;AAmErF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkBd,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AACnD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBhD;AAcD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAS/C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD"}
|
|
@@ -0,0 +1,126 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The recipe format: what an agent learned when it made an upgrade work, as data.
|
|
3
|
+
*
|
|
4
|
+
* A recipe is never code and never trusted. It names a package and the version ranges the change
|
|
5
|
+
* was observed across, says what broke, and carries the consumer-code change as context-anchored
|
|
6
|
+
* hunks: exact lines before, the lines to remove, the lines to add, exact lines after. Applying one
|
|
7
|
+
* means matching those lines exactly in the project's own source and turning the matches into an
|
|
8
|
+
* ordinary unified diff, which then goes through the same validation as a diff an agent proposes.
|
|
9
|
+
*/
|
|
10
|
+
import { createHash } from "node:crypto";
|
|
11
|
+
import { validRange } from "semver";
|
|
12
|
+
import { z } from "zod";
|
|
13
|
+
export const RECIPE_SCHEMA_VERSION = 1;
|
|
14
|
+
/** A recipe file larger than this is refused unread. */
|
|
15
|
+
export const MAX_RECIPE_BYTES = 500_000;
|
|
16
|
+
/** npm package names: lower-case, no leading dot or underscore, optionally scoped. */
|
|
17
|
+
export const NPM_PACKAGE_NAME = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
|
|
18
|
+
/** One line of source: no line breaks of any kind, no NUL, bounded length. */
|
|
19
|
+
const sourceLine = z
|
|
20
|
+
.string()
|
|
21
|
+
.max(2000)
|
|
22
|
+
.refine((line) => !/[\n\r\0\u2028\u2029]/.test(line), "a line must not contain a line break or NUL");
|
|
23
|
+
const range = z
|
|
24
|
+
.string()
|
|
25
|
+
.max(100)
|
|
26
|
+
.refine((value) => validRange(value) !== null, "must be a valid semver range");
|
|
27
|
+
const hunkSchema = z
|
|
28
|
+
.object({
|
|
29
|
+
/** Lines that must come immediately before the lines to remove (context, unchanged). */
|
|
30
|
+
before: z.array(sourceLine).max(10).default([]),
|
|
31
|
+
/** Lines replaced (may be empty for a pure insertion, which then needs context). */
|
|
32
|
+
remove: z.array(sourceLine).max(200).default([]),
|
|
33
|
+
/** Lines put in their place (may be empty for a pure deletion). */
|
|
34
|
+
add: z.array(sourceLine).max(200).default([]),
|
|
35
|
+
/** Lines that must come immediately after (context, unchanged). */
|
|
36
|
+
after: z.array(sourceLine).max(10).default([]),
|
|
37
|
+
/** A hunk that matches nowhere is fatal unless it is optional. */
|
|
38
|
+
optional: z.boolean().optional(),
|
|
39
|
+
note: z.string().max(300).optional(),
|
|
40
|
+
})
|
|
41
|
+
.strict()
|
|
42
|
+
.refine((hunk) => hunk.remove.length + hunk.add.length > 0 && hunk.remove.join("\n") !== hunk.add.join("\n"), "a hunk must change something")
|
|
43
|
+
.refine((hunk) => [...hunk.before, ...hunk.remove, ...hunk.after].some((line) => line.trim().length > 0), "a hunk must be anchored by at least one non-blank line");
|
|
44
|
+
const breakingSchema = z
|
|
45
|
+
.object({
|
|
46
|
+
/** e.g. `symbol-removed`, `import-changed`, `diagnostic-TS2554`, `test-failure`. */
|
|
47
|
+
kind: z.string().max(60),
|
|
48
|
+
symbol: z.string().max(200).optional(),
|
|
49
|
+
message: z.string().max(500),
|
|
50
|
+
})
|
|
51
|
+
.strict();
|
|
52
|
+
const evidenceSchema = z
|
|
53
|
+
.object({
|
|
54
|
+
runId: z.string().max(100).optional(),
|
|
55
|
+
attemptId: z.string().max(100).optional(),
|
|
56
|
+
/** Who made the change: an agent id, or `recipe:<id>`. */
|
|
57
|
+
agent: z.string().max(200).optional(),
|
|
58
|
+
capturedAt: z.string().max(40).optional(),
|
|
59
|
+
autoremediator: z.string().max(40).optional(),
|
|
60
|
+
/** The verifier's checks on the repaired project, as they stood when it was accepted. */
|
|
61
|
+
checks: z
|
|
62
|
+
.array(z.object({ name: z.string().max(60), status: z.string().max(40) }).strict())
|
|
63
|
+
.max(30)
|
|
64
|
+
.default([]),
|
|
65
|
+
})
|
|
66
|
+
.strict();
|
|
67
|
+
export const recipeSchema = z
|
|
68
|
+
.object({
|
|
69
|
+
schemaVersion: z.literal(RECIPE_SCHEMA_VERSION),
|
|
70
|
+
package: z.string().max(214).regex(NPM_PACKAGE_NAME, "must be an npm package name"),
|
|
71
|
+
/** Versions the project is upgraded from. */
|
|
72
|
+
fromRange: range,
|
|
73
|
+
/** Versions the project is upgraded to. */
|
|
74
|
+
toRange: range,
|
|
75
|
+
/** The exact versions of the upgrade it was captured from, for naming and provenance. */
|
|
76
|
+
observed: z
|
|
77
|
+
.object({ fromVersion: z.string().max(100), toVersion: z.string().max(100) })
|
|
78
|
+
.strict()
|
|
79
|
+
.optional(),
|
|
80
|
+
summary: z.string().max(500).optional(),
|
|
81
|
+
breaking: z.array(breakingSchema).max(50).default([]),
|
|
82
|
+
hunks: z.array(hunkSchema).min(1).max(100),
|
|
83
|
+
evidence: evidenceSchema.optional(),
|
|
84
|
+
})
|
|
85
|
+
.strict();
|
|
86
|
+
/** Parse and validate recipe JSON. Throws one error naming every problem. */
|
|
87
|
+
export function parseRecipe(text) {
|
|
88
|
+
if (Buffer.byteLength(text) > MAX_RECIPE_BYTES)
|
|
89
|
+
throw new Error(`the recipe is larger than ${MAX_RECIPE_BYTES} bytes`);
|
|
90
|
+
let raw;
|
|
91
|
+
try {
|
|
92
|
+
raw = JSON.parse(text);
|
|
93
|
+
}
|
|
94
|
+
catch (cause) {
|
|
95
|
+
throw new Error("the recipe is not valid JSON", { cause });
|
|
96
|
+
}
|
|
97
|
+
const parsed = recipeSchema.safeParse(raw);
|
|
98
|
+
if (!parsed.success) {
|
|
99
|
+
throw new Error(`invalid recipe: ${parsed.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`).join("; ")}`);
|
|
100
|
+
}
|
|
101
|
+
return parsed.data;
|
|
102
|
+
}
|
|
103
|
+
function canonical(value) {
|
|
104
|
+
if (Array.isArray(value))
|
|
105
|
+
return `[${value.map((item) => canonical(item)).join(",")}]`;
|
|
106
|
+
if (value && typeof value === "object") {
|
|
107
|
+
return `{${Object.entries(value)
|
|
108
|
+
.filter(([, item]) => item !== undefined)
|
|
109
|
+
.toSorted(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
|
|
110
|
+
.map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`)
|
|
111
|
+
.join(",")}}`;
|
|
112
|
+
}
|
|
113
|
+
return JSON.stringify(value);
|
|
114
|
+
}
|
|
115
|
+
/**
|
|
116
|
+
* A stable id from what the recipe does (its package, ranges and hunks), not from who captured it:
|
|
117
|
+
* the same change captured twice is the same recipe.
|
|
118
|
+
*/
|
|
119
|
+
export function recipeId(recipe) {
|
|
120
|
+
const { evidence: _evidence, observed: _observed, summary: _summary, breaking: _breaking, ...essence } = recipe;
|
|
121
|
+
return `${recipe.package}#${createHash("sha256").update(canonical(essence)).digest("hex").slice(0, 10)}`;
|
|
122
|
+
}
|
|
123
|
+
export function serializeRecipe(recipe) {
|
|
124
|
+
return `${JSON.stringify(recipe, null, 2)}\n`;
|
|
125
|
+
}
|
|
126
|
+
//# sourceMappingURL=schema.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/recipes/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,oDAAoD,CAAC;AAErF,8EAA8E;AAC9E,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5C,6CAA6C,CAC9C,CAAC;AAEJ,MAAM,KAAK,GAAG,CAAC;KACZ,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,8BAA8B,CAAC,CAAC;AAEjF,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,wFAAwF;IACxF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,mEAAmE;IACnE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,mEAAmE;IACnE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,kEAAkE;IAClE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5F,8BAA8B,CAC/B;KACA,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EACxF,wDAAwD,CACzD,CAAC;AAEJ,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,oFAAoF;IACpF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzC,0DAA0D;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,yFAAyF;IACzF,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClF,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACnF,6CAA6C;IAC7C,SAAS,EAAE,KAAK;IAChB,2CAA2C;IAC3C,OAAO,EAAE,KAAK;IACd,yFAAyF;IACzF,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;SAC5E,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB;QAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,gBAAgB,QAAQ,CAAC,CAAC;IACzE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5H,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACxC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,EACJ,QAAQ,EAAE,SAAS,EACnB,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,SAAS,EACnB,GAAG,OAAO,EACX,GAAG,MAAM,CAAC;IACX,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { type RecipeEntry } from "./discover.js";
|
|
2
|
+
import { type Recipe } from "./schema.js";
|
|
3
|
+
/** File name for a recipe inside its package's directory. */
|
|
4
|
+
export declare function recipeFileName(recipe: Recipe): string;
|
|
5
|
+
export interface SavedRecipe {
|
|
6
|
+
id: string;
|
|
7
|
+
/** Absolute path written (or already holding the same recipe). */
|
|
8
|
+
path: string;
|
|
9
|
+
created: boolean;
|
|
10
|
+
}
|
|
11
|
+
/** Save a recipe in the project's `.autoremediator/recipes/<package>/`. The same recipe is not written twice. */
|
|
12
|
+
export declare function saveProjectRecipe(projectDir: string, recipe: Recipe): SavedRecipe;
|
|
13
|
+
export interface ExportOptions {
|
|
14
|
+
projectDir: string;
|
|
15
|
+
/** Directory to create the package in; it must not exist or must be empty. */
|
|
16
|
+
outDir: string;
|
|
17
|
+
/** npm name of the recipes package. */
|
|
18
|
+
name: string;
|
|
19
|
+
version?: string;
|
|
20
|
+
/** Only export recipes for these packages (default: all the project's recipes). */
|
|
21
|
+
packages?: readonly string[];
|
|
22
|
+
}
|
|
23
|
+
export interface ExportResult {
|
|
24
|
+
outDir: string;
|
|
25
|
+
files: string[];
|
|
26
|
+
recipes: RecipeEntry[];
|
|
27
|
+
}
|
|
28
|
+
/**
|
|
29
|
+
* Write a publishable npm package of the project's own recipes: `package.json`, a README that says
|
|
30
|
+
* how to use it, and `recipes/<package>/<file>.json`. Nothing is published.
|
|
31
|
+
*/
|
|
32
|
+
export declare function exportRecipePackage(options: ExportOptions): ExportResult;
|
|
33
|
+
//# sourceMappingURL=store.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/recipes/store.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAA+C,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAKvF,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKrD;AAaD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,iHAAiH;AACjH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAkBjF;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CA0FxE"}
|
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
/** Writing recipes: into the project's committed directory, or out as a publishable npm package. */
|
|
2
|
+
import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
|
|
3
|
+
import { dirname, join, relative, resolve } from "node:path";
|
|
4
|
+
import { discoverRecipes, PACKAGE_RECIPES_DIR, PROJECT_RECIPES_DIR, } from "./discover.js";
|
|
5
|
+
import { NPM_PACKAGE_NAME, recipeId, serializeRecipe } from "./schema.js";
|
|
6
|
+
const safeSegment = (value) => value.replaceAll(/[^A-Za-z0-9._-]+/g, "_").replace(/^\.+/, "_");
|
|
7
|
+
/** File name for a recipe inside its package's directory. */
|
|
8
|
+
export function recipeFileName(recipe) {
|
|
9
|
+
const hash = recipeId(recipe).split("#")[1] ?? "recipe";
|
|
10
|
+
return recipe.observed
|
|
11
|
+
? `${safeSegment(recipe.observed.fromVersion)}-to-${safeSegment(recipe.observed.toVersion)}.json`
|
|
12
|
+
: `${hash}.json`;
|
|
13
|
+
}
|
|
14
|
+
/** `<root>/<package>/<file>`, refusing anything that resolves outside `root`. */
|
|
15
|
+
function insideRoot(root, packageName, fileName) {
|
|
16
|
+
if (!NPM_PACKAGE_NAME.test(packageName))
|
|
17
|
+
throw new Error(`not a package name: ${JSON.stringify(packageName)}`);
|
|
18
|
+
const target = resolve(root, ...packageName.split("/"), fileName);
|
|
19
|
+
const rel = relative(resolve(root), target);
|
|
20
|
+
if (rel.startsWith("..") || resolve(root, rel) !== target)
|
|
21
|
+
throw new Error("the recipe path escapes its directory");
|
|
22
|
+
return target;
|
|
23
|
+
}
|
|
24
|
+
/** Save a recipe in the project's `.autoremediator/recipes/<package>/`. The same recipe is not written twice. */
|
|
25
|
+
export function saveProjectRecipe(projectDir, recipe) {
|
|
26
|
+
const id = recipeId(recipe);
|
|
27
|
+
const root = join(projectDir, PROJECT_RECIPES_DIR);
|
|
28
|
+
const existing = discoverRecipes({ projectDir }).recipes.find((entry) => entry.id === id && entry.source.kind === "project");
|
|
29
|
+
if (existing)
|
|
30
|
+
return { id, path: join(projectDir, existing.file), created: false };
|
|
31
|
+
let path = insideRoot(root, recipe.package, recipeFileName(recipe));
|
|
32
|
+
if (existsSync(path))
|
|
33
|
+
path = insideRoot(root, recipe.package, `${recipeFileName(recipe).replace(/\.json$/, "")}-${id.split("#")[1]}.json`);
|
|
34
|
+
mkdirSync(dirname(path), { recursive: true });
|
|
35
|
+
writeFileSync(path, serializeRecipe(recipe), { encoding: "utf8", flag: "wx" });
|
|
36
|
+
return { id, path, created: true };
|
|
37
|
+
}
|
|
38
|
+
/**
|
|
39
|
+
* Write a publishable npm package of the project's own recipes: `package.json`, a README that says
|
|
40
|
+
* how to use it, and `recipes/<package>/<file>.json`. Nothing is published.
|
|
41
|
+
*/
|
|
42
|
+
export function exportRecipePackage(options) {
|
|
43
|
+
if (!NPM_PACKAGE_NAME.test(options.name))
|
|
44
|
+
throw new Error(`"${options.name}" is not a valid npm package name`);
|
|
45
|
+
const version = options.version ?? "0.1.0";
|
|
46
|
+
if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
|
|
47
|
+
throw new Error(`"${version}" is not a valid version`);
|
|
48
|
+
const outDir = resolve(options.outDir);
|
|
49
|
+
if (existsSync(outDir) && readdirSync(outDir).length > 0) {
|
|
50
|
+
throw new Error(`${outDir} already exists and is not empty; choose a new directory`);
|
|
51
|
+
}
|
|
52
|
+
const wanted = options.packages ? new Set(options.packages) : undefined;
|
|
53
|
+
const recipes = discoverRecipes({ projectDir: options.projectDir }).recipes.filter((entry) => entry.source.kind === "project" && (!wanted || wanted.has(entry.recipe.package)));
|
|
54
|
+
if (recipes.length === 0) {
|
|
55
|
+
throw new Error(wanted
|
|
56
|
+
? `no recipes for ${[...wanted].join(", ")} in ${PROJECT_RECIPES_DIR}`
|
|
57
|
+
: `there are no recipes in ${PROJECT_RECIPES_DIR} to export (capture some with \`autoremediator recipes capture\`)`);
|
|
58
|
+
}
|
|
59
|
+
const files = [];
|
|
60
|
+
const write = (relativePath, content) => {
|
|
61
|
+
const target = resolve(outDir, relativePath);
|
|
62
|
+
mkdirSync(dirname(target), { recursive: true });
|
|
63
|
+
writeFileSync(target, content, { encoding: "utf8", flag: "wx" });
|
|
64
|
+
files.push(relativePath);
|
|
65
|
+
};
|
|
66
|
+
const used = new Set();
|
|
67
|
+
for (const entry of recipes.toSorted((a, b) => (a.id < b.id ? -1 : 1))) {
|
|
68
|
+
let name = recipeFileName(entry.recipe);
|
|
69
|
+
if (used.has(`${entry.recipe.package}/${name}`))
|
|
70
|
+
name = `${name.replace(/\.json$/, "")}-${entry.id.split("#")[1]}.json`;
|
|
71
|
+
used.add(`${entry.recipe.package}/${name}`);
|
|
72
|
+
write(`${PACKAGE_RECIPES_DIR}/${entry.recipe.package}/${name}`, serializeRecipe(entry.recipe));
|
|
73
|
+
}
|
|
74
|
+
const covered = [...new Set(recipes.map((entry) => entry.recipe.package))].toSorted();
|
|
75
|
+
write("package.json", `${JSON.stringify({
|
|
76
|
+
name: options.name,
|
|
77
|
+
version,
|
|
78
|
+
description: `Autoremediator recipes: how to adopt new versions of ${covered.join(", ")}`,
|
|
79
|
+
keywords: ["autoremediator", "autoremediator-recipes"],
|
|
80
|
+
files: [PACKAGE_RECIPES_DIR, "README.md"],
|
|
81
|
+
}, null, 2)}\n`);
|
|
82
|
+
write("README.md", [
|
|
83
|
+
`# ${options.name}`,
|
|
84
|
+
"",
|
|
85
|
+
"Autoremediator recipes: data that describes, for a dependency upgrade, the change to the code that uses",
|
|
86
|
+
"it. Recipes are never executable and never trusted: autoremediator matches them against your source",
|
|
87
|
+
"exactly, validates the result like any other proposed patch, and keeps it only if the verifier passes.",
|
|
88
|
+
"",
|
|
89
|
+
`Covers: ${covered.map((name) => `\`${name}\``).join(", ")}.`,
|
|
90
|
+
"",
|
|
91
|
+
"## Use",
|
|
92
|
+
"",
|
|
93
|
+
"```sh",
|
|
94
|
+
`npm install --save-dev ${options.name}`,
|
|
95
|
+
"```",
|
|
96
|
+
"",
|
|
97
|
+
"Then name it in `.github/autoremediator.yml`:",
|
|
98
|
+
"",
|
|
99
|
+
"```yaml",
|
|
100
|
+
"recipes:",
|
|
101
|
+
" packages:",
|
|
102
|
+
` - "${options.name}"`,
|
|
103
|
+
"```",
|
|
104
|
+
"",
|
|
105
|
+
"## Publish",
|
|
106
|
+
"",
|
|
107
|
+
"```sh",
|
|
108
|
+
"npm publish --access public # review recipes/ first: they change your users' source code",
|
|
109
|
+
"```",
|
|
110
|
+
"",
|
|
111
|
+
].join("\n"));
|
|
112
|
+
return { outDir, files, recipes };
|
|
113
|
+
}
|
|
114
|
+
//# sourceMappingURL=store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/recipes/store.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAe,MAAM,aAAa,CAAC;AAEvF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAC5C,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAElE,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ;QACpB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO;QACjG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;AACrB,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,IAAY,EAAE,WAAmB,EAAE,QAAgB;IACrE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,MAAM;QACvD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AASD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,MAAc;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAC3D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAC9D,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEnF,IAAI,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC;QAClB,IAAI,GAAG,UAAU,CACf,IAAI,EACJ,MAAM,CAAC,OAAO,EACd,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAC5E,CAAC;IACJ,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,mCAAmC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC3C,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,0BAA0B,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,0DAA0D,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAChF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC5F,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,MAAM;YACJ,CAAC,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,mBAAmB,EAAE;YACtE,CAAC,CAAC,2BAA2B,mBAAmB,mEAAmE,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAE,OAAe,EAAQ,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC7C,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,mBAAmB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtF,KAAK,CACH,cAAc,EACd,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,WAAW,EAAE,wDAAwD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzF,QAAQ,EAAE,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;QACtD,KAAK,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC;KAC1C,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,KAAK,CACH,WAAW,EACX;QACE,KAAK,OAAO,CAAC,IAAI,EAAE;QACnB,EAAE;QACF,yGAAyG;QACzG,qGAAqG;QACrG,wGAAwG;QACxG,EAAE;QACF,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC7D,EAAE;QACF,QAAQ;QACR,EAAE;QACF,OAAO;QACP,0BAA0B,OAAO,CAAC,IAAI,EAAE;QACxC,KAAK;QACL,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,SAAS;QACT,UAAU;QACV,aAAa;QACb,UAAU,OAAO,CAAC,IAAI,GAAG;QACzB,KAAK;QACL,EAAE;QACF,YAAY;QACZ,EAAE;QACF,OAAO;QACP,4FAA4F;QAC5F,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"evaluate-package.d.ts","sourceRoot":"","sources":["../../src/remediation/evaluate-package.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"evaluate-package.d.ts","sourceRoot":"","sources":["../../src/remediation/evaluate-package.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAqJlC"}
|
|
@@ -10,13 +10,15 @@ import { fetchCisaKevFeed, findKevEntry } from "../intelligence/sources/cisa-kev
|
|
|
10
10
|
import { fetchEpss } from "../intelligence/sources/epss.js";
|
|
11
11
|
import { queryOsvPackage, parseOsvVuln } from "../intelligence/sources/osv.js";
|
|
12
12
|
import { fetchPackageVersions, findSafeUpgradeVersion } from "../intelligence/sources/registry.js";
|
|
13
|
+
import { loadRegistryConfig } from "../platform/registry-config.js";
|
|
13
14
|
export async function evaluatePackage(packageName, options = {}) {
|
|
14
15
|
const version = options.version?.trim();
|
|
15
16
|
const enrich = options.enrichIntelligence !== false;
|
|
17
|
+
const registry = loadRegistryConfig(options.cwd);
|
|
16
18
|
let versions = [];
|
|
17
19
|
let latestVersion;
|
|
18
20
|
try {
|
|
19
|
-
versions = await fetchPackageVersions(packageName);
|
|
21
|
+
versions = await fetchPackageVersions(packageName, registry);
|
|
20
22
|
if (versions.length > 0) {
|
|
21
23
|
const valid = versions
|
|
22
24
|
.filter((v) => semver.valid(v))
|
|
@@ -76,7 +78,7 @@ export async function evaluatePackage(packageName, options = {}) {
|
|
|
76
78
|
let safeUpgradeVersion;
|
|
77
79
|
if (affected?.firstPatchedVersion) {
|
|
78
80
|
try {
|
|
79
|
-
const safe = await findSafeUpgradeVersion(packageName, version || "0.0.0", affected.firstPatchedVersion);
|
|
81
|
+
const safe = await findSafeUpgradeVersion(packageName, version || "0.0.0", affected.firstPatchedVersion, undefined, registry);
|
|
80
82
|
safeUpgradeVersion = safe ?? affected.firstPatchedVersion;
|
|
81
83
|
}
|
|
82
84
|
catch {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"evaluate-package.js","sourceRoot":"","sources":["../../src/remediation/evaluate-package.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;
|
|
1
|
+
{"version":3,"file":"evaluate-package.js","sourceRoot":"","sources":["../../src/remediation/evaluate-package.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAOpE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,OAAO,GAA2B,EAAE;IAEpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAEpD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,aAAiC,CAAC;IAEtC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,QAAQ;iBACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;iBAC9B,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,aAAa,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IAED,IAAI,QAAQ,GAAgD,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,GAAwD,IAAI,CAAC;IACxE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAmC,EAAE,CAAC;IAEnD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAC1D,CAAC;QAEF,8DAA8D;QAC9D,IAAI,OAAO,IAAI,QAAQ,EAAE,eAAe,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpF,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAA6B,CAAC;QAClC,IAAI,cAAkC,CAAC;QAEvC,IAAI,MAAM,IAAI,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzC,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;QAED,IAAI,kBAAsC,CAAC;QAC3C,IAAI,QAAQ,EAAE,mBAAmB,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,sBAAsB,CACvC,WAAW,EACX,OAAO,IAAI,OAAO,EAClB,QAAQ,CAAC,mBAAmB,EAC5B,SAAS,EACT,QAAQ,CACT,CAAC;gBACF,kBAAkB,GAAG,IAAI,IAAI,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB,GAAG,QAAQ,CAAC,mBAAmB,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,UAAU,CAAC,EAAE;YACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,eAAe,EAAE,QAAQ,EAAE,eAAe;YAC1C,mBAAmB,EAAE,QAAQ,EAAE,mBAAmB;YAClD,kBAAkB;YAClB,SAAS;YACT,cAAc;YACd,SAAS;YACT,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,GAAuC,MAAM,CAAC;IAEzD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;QAChG,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;QAEF,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,GAAG,oBAAoB,CAAC;QACjC,CAAC;aAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7B,OAAO,GAAG,YAAY,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,kBAAsC,CAAC;IAC3C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,iBAAiB,GAAG,OAAO;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACzD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE5C,kBAAkB,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,OAAO,IAAI,aAAa,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,YAAY;QAC1B,CAAC,CAAC,YAAY,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,OAAO,CAAC,MAAM,uCAAuC,OAAO,gCAAgC,kBAAkB,IAAI,MAAM,GAAG;QAC5L,CAAC,CAAC,YAAY,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,kDAAkD,CAAC;IAE7G,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,WAAW;QACX,gBAAgB,EAAE,OAAO;QACzB,YAAY;QACZ,OAAO;QACP,OAAO;QACP,eAAe,EAAE,OAAO;QACxB,kBAAkB;QAClB,aAAa;QACb,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Compare the public API surface of two versions of a package and list what a consumer could
|
|
3
|
+
* trip over: removed or renamed exports and members, changed signatures, changed types.
|
|
4
|
+
*
|
|
5
|
+
* Severity is deliberately coarse. `breaking` is a change that makes an existing, correct use fail
|
|
6
|
+
* (a removed export, a new required argument). `possibly-breaking` is a change that may or may not
|
|
7
|
+
* matter to a given caller (a type text that changed, which could be a widening). The text of both
|
|
8
|
+
* sides is always kept so the reader can judge.
|
|
9
|
+
*/
|
|
10
|
+
import type { ApiSurface, Signature } from "./dts-surface.js";
|
|
11
|
+
export type ChangeSeverity = "breaking" | "possibly-breaking";
|
|
12
|
+
export type ApiChangeCategory = "removed-export" | "renamed-export" | "kind-changed" | "signature-changed" | "type-changed" | "removed-member" | "renamed-member" | "member-changed" | "added-required-member" | "extends-changed";
|
|
13
|
+
export interface ApiChange {
|
|
14
|
+
specifier: string;
|
|
15
|
+
/** Export name (`default` for a default export). */
|
|
16
|
+
symbol: string;
|
|
17
|
+
/** Member key within the symbol, when the change is to a member. */
|
|
18
|
+
member?: string;
|
|
19
|
+
/** Class, interface or namespace members versus the export itself. */
|
|
20
|
+
memberOf?: "class" | "interface" | "namespace" | "enum" | "object";
|
|
21
|
+
category: ApiChangeCategory;
|
|
22
|
+
severity: ChangeSeverity;
|
|
23
|
+
/** What changed, in one sentence. */
|
|
24
|
+
reason: string;
|
|
25
|
+
before?: string;
|
|
26
|
+
after?: string;
|
|
27
|
+
/** New call shape for a function, for checking call sites. */
|
|
28
|
+
arity?: {
|
|
29
|
+
min: number;
|
|
30
|
+
max: number;
|
|
31
|
+
};
|
|
32
|
+
/** New name, for a rename. */
|
|
33
|
+
renamedTo?: string;
|
|
34
|
+
}
|
|
35
|
+
interface SignatureFinding {
|
|
36
|
+
category: ApiChangeCategory;
|
|
37
|
+
severity: ChangeSeverity;
|
|
38
|
+
reason: string;
|
|
39
|
+
before?: string;
|
|
40
|
+
after?: string;
|
|
41
|
+
arity?: {
|
|
42
|
+
min: number;
|
|
43
|
+
max: number;
|
|
44
|
+
};
|
|
45
|
+
}
|
|
46
|
+
/** Findings for one callable whose set of overload signatures changed. */
|
|
47
|
+
export declare function compareSignatures(before: Signature[], after: Signature[], typed: boolean): SignatureFinding[];
|
|
48
|
+
/** Changes between two surfaces of the same entry point. */
|
|
49
|
+
export declare function compareSurfaces(specifier: string, before: ApiSurface, after: ApiSurface): ApiChange[];
|
|
50
|
+
export {};
|
|
51
|
+
//# sourceMappingURL=api-diff.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"api-diff.d.ts","sourceRoot":"","sources":["../../../src/remediation/impact/api-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAa,UAAU,EAAa,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,uBAAuB,GACvB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnE,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,cAAc,CAAC;IACzB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgBD,UAAU,gBAAgB;IACxB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC;AAyFD,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,EAAE,EACnB,KAAK,EAAE,SAAS,EAAE,EAClB,KAAK,EAAE,OAAO,GACb,gBAAgB,EAAE,CAgCpB;AAuOD,4DAA4D;AAC5D,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,UAAU,GAChB,SAAS,EAAE,CAwCb"}
|