autoremediator 0.21.2 → 0.22.0

package/dist/remediation/impact/api-diff.js

@@ -0,0 +1,374 @@
+function arityOf(signature) {
+    const hasRest = signature.params.some((param) => param.rest);
+    const min = signature.params.filter((param) => !param.optional && !param.rest).length;
+    return { min, max: hasRest ? Number.POSITIVE_INFINITY : signature.params.length };
+}
+function describeArity(arity) {
+    return arity.max === Number.POSITIVE_INFINITY
+        ? `${arity.min}+`
+        : arity.min === arity.max
+            ? `${arity.min}`
+            : `${arity.min}-${arity.max}`;
+}
+function comparePair(before, after, typed) {
+    const findings = [];
+    const oldArity = arityOf(before);
+    const newArity = arityOf(after);
+    // Without types a parameter count is only a hint: a JavaScript function may ignore extra
+    // arguments or default a missing one.
+    const countSeverity = typed ? "breaking" : "possibly-breaking";
+    if (newArity.min > oldArity.min) {
+        findings.push({
+            category: "signature-changed",
+            severity: countSeverity,
+            reason: `now requires at least ${newArity.min} argument${newArity.min === 1 ? "" : "s"} (was ${oldArity.min})`,
+            before: before.text,
+            after: after.text,
+            arity: newArity,
+        });
+    }
+    else if (newArity.max < oldArity.max) {
+        findings.push({
+            category: "signature-changed",
+            severity: countSeverity,
+            reason: `now accepts at most ${describeArity({ min: newArity.max, max: newArity.max })} argument${newArity.max === 1 ? "" : "s"} (was ${oldArity.max === Number.POSITIVE_INFINITY ? "any number" : oldArity.max})`,
+            before: before.text,
+            after: after.text,
+            arity: newArity,
+        });
+    }
+    if (!typed)
+        return findings;
+    const shared = Math.min(before.params.length, after.params.length);
+    const typeChanges = [];
+    for (let index = 0; index < shared; index++) {
+        const oldParam = before.params[index];
+        const newParam = after.params[index];
+        if (!oldParam || !newParam)
+            continue;
+        if (oldParam.type !== undefined &&
+            newParam.type !== undefined &&
+            oldParam.type !== newParam.type) {
+            typeChanges.push(`\`${newParam.name}\`: ${oldParam.type} -> ${newParam.type}`);
+        }
+        if (oldParam.optional && !newParam.optional && !findings.some((finding) => finding.arity)) {
+            findings.push({
+                category: "signature-changed",
+                severity: "breaking",
+                reason: `parameter \`${newParam.name}\` is no longer optional`,
+                before: before.text,
+                after: after.text,
+                arity: newArity,
+            });
+        }
+    }
+    if (typeChanges.length > 0) {
+        findings.push({
+            category: "type-changed",
+            severity: "possibly-breaking",
+            reason: `parameter type changed (${typeChanges.slice(0, 3).join("; ")}); it may be a widening`,
+            before: before.text,
+            after: after.text,
+        });
+    }
+    if (before.returns !== after.returns &&
+        before.returns !== undefined &&
+        after.returns !== undefined) {
+        findings.push({
+            category: "type-changed",
+            severity: "possibly-breaking",
+            reason: `return type changed (${before.returns} -> ${after.returns})`,
+            before: before.text,
+            after: after.text,
+        });
+    }
+    if ((before.typeParams ?? "") !== (after.typeParams ?? "")) {
+        findings.push({
+            category: "type-changed",
+            severity: "possibly-breaking",
+            reason: `type parameters changed (${before.typeParams ?? "none"} -> ${after.typeParams ?? "none"})`,
+            before: before.text,
+            after: after.text,
+        });
+    }
+    return findings;
+}
+/** Findings for one callable whose set of overload signatures changed. */
+export function compareSignatures(before, after, typed) {
+    if (before.length === 0 || after.length === 0)
+        return [];
+    const afterTexts = new Set(after.map((signature) => signature.text));
+    const beforeTexts = new Set(before.map((signature) => signature.text));
+    const removed = before.filter((signature) => !afterTexts.has(signature.text));
+    const added = after.filter((signature) => !beforeTexts.has(signature.text));
+    if (removed.length === 0)
+        return [];
+    const [onlyRemoved] = removed;
+    const [onlyAdded] = added;
+    if (removed.length === 1 && added.length === 1 && onlyRemoved && onlyAdded) {
+        return comparePair(onlyRemoved, onlyAdded, typed);
+    }
+    if (added.length === 0) {
+        return [
+            {
+                category: "signature-changed",
+                severity: "breaking",
+                reason: `${removed.length === 1 ? "an overload was" : `${removed.length} overloads were`} removed`,
+                before: removed.map((signature) => signature.text).join(" | "),
+                after: after.map((signature) => signature.text).join(" | "),
+            },
+        ];
+    }
+    return [
+        {
+            category: "signature-changed",
+            severity: "possibly-breaking",
+            reason: "overloads changed",
+            before: removed.map((signature) => signature.text).join(" | "),
+            after: added.map((signature) => signature.text).join(" | "),
+        },
+    ];
+}
+function shapeOf(symbol) {
+    if (symbol.kind === "function")
+        return `function:${symbol.signatures
+            .map((s) => s.text)
+            .toSorted()
+            .join("|")}`;
+    if (symbol.kind === "class" ||
+        symbol.kind === "interface" ||
+        symbol.kind === "namespace" ||
+        symbol.kind === "enum") {
+        return `${symbol.kind}:${[...symbol.members.values()]
+            .map((m) => `${m.key}/${m.kind}/${m.signatures.map((s) => s.text).join(",")}/${m.type ?? ""}`)
+            .toSorted()
+            .join(";")}`;
+    }
+    return `${symbol.kind}:${symbol.type ?? ""}`;
+}
+function memberShape(member) {
+    return `${member.kind}/${member.optional}/${member.signatures.map((signature) => signature.text).join(",")}/${member.type ?? ""}`;
+}
+function memberChanges(specifier, name, before, after, typed) {
+    const changes = [];
+    const memberOf = before.kind === "variable"
+        ? "object"
+        : before.kind === "class" ||
+            before.kind === "interface" ||
+            before.kind === "namespace" ||
+            before.kind === "enum"
+            ? before.kind
+            : undefined;
+    const removed = [...before.members.values()].filter((member) => !after.members.has(member.key));
+    const added = [...after.members.values()].filter((member) => !before.members.has(member.key));
+    const claimed = new Set();
+    for (const member of removed) {
+        const twin = added.find((candidate) => !claimed.has(candidate.key) &&
+            memberShape(candidate) === memberShape(member) &&
+            candidate.static === member.static);
+        if (twin) {
+            claimed.add(twin.key);
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "renamed-member",
+                severity: "breaking",
+                reason: `\`${member.name}\` is gone; \`${twin.name}\` has the same shape (probable rename)`,
+                renamedTo: twin.name,
+            });
+        }
+        else {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "removed-member",
+                severity: "breaking",
+                reason: `member \`${member.name}\` was removed`,
+                before: member.signatures[0]?.text ?? member.type,
+            });
+        }
+    }
+    for (const member of before.members.values()) {
+        const next = after.members.get(member.key);
+        if (!next)
+            continue;
+        if (member.kind !== next.kind) {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "member-changed",
+                severity: "breaking",
+                reason: `member \`${member.name}\` changed from ${member.kind} to ${next.kind}`,
+            });
+            continue;
+        }
+        for (const finding of compareSignatures(member.signatures, next.signatures, typed)) {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                ...finding,
+                category: "member-changed",
+            });
+        }
+        if (member.type !== undefined && next.type !== undefined && member.type !== next.type) {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "member-changed",
+                severity: "possibly-breaking",
+                reason: `type of \`${member.name}\` changed (${member.type} -> ${next.type})`,
+                before: member.type,
+                after: next.type,
+            });
+        }
+        if (member.optional !== next.optional) {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "member-changed",
+                severity: "possibly-breaking",
+                reason: next.optional
+                    ? `\`${member.name}\` became optional (may now be undefined)`
+                    : `\`${member.name}\` became required`,
+            });
+        }
+        if (!member.readonly && next.readonly) {
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "member-changed",
+                severity: "possibly-breaking",
+                reason: `\`${member.name}\` became readonly`,
+            });
+        }
+    }
+    if (before.kind === "interface") {
+        for (const member of added) {
+            if (claimed.has(member.key) || member.optional || member.kind === "index")
+                continue;
+            changes.push({
+                specifier,
+                symbol: name,
+                member: member.key,
+                memberOf,
+                category: "added-required-member",
+                severity: "possibly-breaking",
+                reason: `new required member \`${member.name}\` (breaks code that implements or constructs this interface)`,
+            });
+        }
+    }
+    return changes;
+}
+function typeLike(kind) {
+    return kind === "interface" || kind === "type";
+}
+/** Compare one exported symbol. */
+function compareSymbol(specifier, name, before, after, typed) {
+    const changes = [];
+    if (before.kind !== after.kind) {
+        changes.push({
+            specifier,
+            symbol: name,
+            category: "kind-changed",
+            severity: typeLike(before.kind) && typeLike(after.kind) ? "possibly-breaking" : "breaking",
+            reason: `export changed from ${before.kind} to ${after.kind}`,
+            before: before.kind,
+            after: after.kind,
+        });
+        return changes;
+    }
+    if (before.kind === "function") {
+        for (const finding of compareSignatures(before.signatures, after.signatures, typed)) {
+            changes.push({ specifier, symbol: name, ...finding });
+        }
+    }
+    const hasMembers = before.members.size > 0 || after.members.size > 0;
+    if (before.kind === "class" ||
+        before.kind === "interface" ||
+        before.kind === "namespace" ||
+        before.kind === "enum" ||
+        (before.kind === "variable" && hasMembers)) {
+        changes.push(...memberChanges(specifier, name, before, after, typed));
+        if ((before.extends ?? "") !== (after.extends ?? "")) {
+            changes.push({
+                specifier,
+                symbol: name,
+                category: "extends-changed",
+                severity: "possibly-breaking",
+                reason: `base type changed (${before.extends ?? "none"} -> ${after.extends ?? "none"})`,
+                before: before.extends,
+                after: after.extends,
+            });
+        }
+    }
+    if ((before.kind === "type" || before.kind === "variable") &&
+        before.type !== undefined &&
+        after.type !== undefined &&
+        before.type !== after.type) {
+        changes.push({
+            specifier,
+            symbol: name,
+            category: "type-changed",
+            severity: "possibly-breaking",
+            reason: `${before.kind === "type" ? "type definition" : "variable type"} changed`,
+            before: before.type,
+            after: after.type,
+        });
+    }
+    return changes;
+}
+/** Changes between two surfaces of the same entry point. */
+export function compareSurfaces(specifier, before, after) {
+    const typed = before.source === "types" && after.source === "types";
+    const changes = [];
+    const removed = [...before.symbols.values()].filter((symbol) => !after.symbols.has(symbol.name));
+    const added = [...after.symbols.values()].filter((symbol) => !before.symbols.has(symbol.name));
+    const claimed = new Set();
+    for (const symbol of removed) {
+        const twin = added.find((candidate) => !claimed.has(candidate.name) &&
+            candidate.kind === symbol.kind &&
+            shapeOf(candidate) === shapeOf(symbol));
+        if (twin && symbol.name !== "default") {
+            claimed.add(twin.name);
+            changes.push({
+                specifier,
+                symbol: symbol.name,
+                category: "renamed-export",
+                severity: "breaking",
+                reason: `\`${symbol.name}\` is gone; \`${twin.name}\` has the same shape (probable rename)`,
+                renamedTo: twin.name,
+            });
+        }
+        else {
+            changes.push({
+                specifier,
+                symbol: symbol.name,
+                category: "removed-export",
+                severity: "breaking",
+                reason: `\`${symbol.name}\` is no longer exported`,
+                before: symbol.signatures[0]?.text ?? symbol.type ?? symbol.kind,
+            });
+        }
+    }
+    for (const symbol of before.symbols.values()) {
+        const next = after.symbols.get(symbol.name);
+        if (next)
+            changes.push(...compareSymbol(specifier, symbol.name, symbol, next, typed));
+    }
+    return changes;
+}
+//# sourceMappingURL=api-diff.js.map

package/dist/remediation/impact/api-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-diff.js","sourceRoot":"","sources":["../../../src/remediation/impact/api-diff.ts"],"names":[],"mappings":"AA6CA,SAAS,OAAO,CAAC,SAAoB;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACtF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,aAAa,CAAC,KAAmC;IACxD,OAAO,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,iBAAiB;QAC3C,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG;QACjB,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACvB,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE;YAChB,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;AACpC,CAAC;AAWD,SAAS,WAAW,CAAC,MAAiB,EAAE,KAAgB,EAAE,KAAc;IACtE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,yFAAyF;IACzF,sCAAsC;IACtC,MAAM,aAAa,GAAmB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAE/E,IAAI,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,mBAAmB;YAC7B,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,yBAAyB,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC,GAAG,GAAG;YAC9G,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,mBAAmB;YAC7B,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,uBAAuB,aAAa,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG;YAClN,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,SAAS;QACrC,IACE,QAAQ,CAAC,IAAI,KAAK,SAAS;YAC3B,QAAQ,CAAC,IAAI,KAAK,SAAS;YAC3B,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAC/B,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1F,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,mBAAmB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,eAAe,QAAQ,CAAC,IAAI,0BAA0B;gBAC9D,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,2BAA2B,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;YAC9F,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IACE,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC5B,KAAK,CAAC,OAAO,KAAK,SAAS,EAC3B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,wBAAwB,MAAM,CAAC,OAAO,OAAO,KAAK,CAAC,OAAO,GAAG;YACrE,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,4BAA4B,MAAM,CAAC,UAAU,IAAI,MAAM,OAAO,KAAK,CAAC,UAAU,IAAI,MAAM,GAAG;YACnG,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAC/B,MAAmB,EACnB,KAAkB,EAClB,KAAc;IAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;QAC3E,OAAO,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,QAAQ,EAAE,mBAAmB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,iBAAiB,UAAU;gBAClG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC9D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;aAC5D;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL;YACE,QAAQ,EAAE,mBAAmB;YAC7B,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,MAAiB;IAChC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAC5B,OAAO,YAAY,MAAM,CAAC,UAAU;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,QAAQ,EAAE;aACV,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjB,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;QACvB,MAAM,CAAC,IAAI,KAAK,WAAW;QAC3B,MAAM,CAAC,IAAI,KAAK,WAAW;QAC3B,MAAM,CAAC,IAAI,KAAK,MAAM,EACtB,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;aAC7F,QAAQ,EAAE;aACV,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,MAAiB;IACpC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AACpI,CAAC;AAED,SAAS,aAAa,CACpB,SAAiB,EACjB,IAAY,EACZ,MAAiB,EACjB,KAAgB,EAChB,KAAc;IAEd,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YACrB,MAAM,CAAC,IAAI,KAAK,WAAW;YAC3B,MAAM,CAAC,IAAI,KAAK,WAAW;YAC3B,MAAM,CAAC,IAAI,KAAK,MAAM;YACxB,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;YAC3B,WAAW,CAAC,SAAS,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC;YAC9C,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CACrC,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,KAAK,MAAM,CAAC,IAAI,iBAAiB,IAAI,CAAC,IAAI,yCAAyC;gBAC3F,SAAS,EAAE,IAAI,CAAC,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,YAAY,MAAM,CAAC,IAAI,gBAAgB;gBAC/C,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,YAAY,MAAM,CAAC,IAAI,mBAAmB,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE;aAChF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,GAAG,OAAO;gBACV,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,aAAa,MAAM,CAAC,IAAI,eAAe,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,GAAG;gBAC7E,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,KAAK,EAAE,IAAI,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,IAAI,CAAC,QAAQ;oBACnB,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,2CAA2C;oBAC7D,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,oBAAoB;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,KAAK,MAAM,CAAC,IAAI,oBAAoB;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACpF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ;gBACR,QAAQ,EAAE,uBAAuB;gBACjC,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,yBAAyB,MAAM,CAAC,IAAI,+DAA+D;aAC5G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,CAAC;AACjD,CAAC;AAED,mCAAmC;AACnC,SAAS,aAAa,CACpB,SAAiB,EACjB,IAAY,EACZ,MAAiB,EACjB,KAAgB,EAChB,KAAc;IAEd,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,SAAS;YACT,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU;YAC1F,MAAM,EAAE,uBAAuB,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,EAAE;YAC7D,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACrE,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;QACvB,MAAM,CAAC,IAAI,KAAK,WAAW;QAC3B,MAAM,CAAC,IAAI,KAAK,WAAW;QAC3B,MAAM,CAAC,IAAI,KAAK,MAAM;QACtB,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,EAC1C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,sBAAsB,MAAM,CAAC,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC,OAAO,IAAI,MAAM,GAAG;gBACvF,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IACE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;QACtD,MAAM,CAAC,IAAI,KAAK,SAAS;QACzB,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAC1B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,SAAS;YACT,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,UAAU;YACjF,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,MAAkB,EAClB,KAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;IACpE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YAC5B,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC9B,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CACzC,CAAC;QACF,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,KAAK,MAAM,CAAC,IAAI,iBAAiB,IAAI,CAAC,IAAI,yCAAyC;gBAC3F,SAAS,EAAE,IAAI,CAAC,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,KAAK,MAAM,CAAC,IAAI,0BAA0B;gBAClD,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/remediation/impact/assess.d.ts

@@ -0,0 +1,51 @@
+import type { ReachabilityAssessment } from "../../platform/types.js";
+import { type FixDiff, type VulnerableSymbolCandidate } from "./fix-diff.js";
+import { type UpgradeImpact } from "./impact.js";
+import type { PackageSource } from "./types.js";
+export interface ImpactDeps {
+    /** Fetch and read one published version; throws if it does not exist or fails verification. */
+    loadPackage(packageName: string, version: string, cwd: string): Promise<PackageSource>;
+}
+export declare const defaultImpactDeps: ImpactDeps;
+export interface AssessUpgradeOptions {
+    /** Project root whose source is scanned and whose `.npmrc` selects the registry. */
+    cwd?: string;
+}
+export interface AssessUpgradeResult extends UpgradeImpact {
+    upgradeLevel?: "patch" | "minor" | "major";
+}
+/** How risky is moving `packageName` from `from` to `to` for the project at `cwd`? */
+export declare function assessUpgrade(packageName: string, from: string, to: string, options?: AssessUpgradeOptions, deps?: ImpactDeps): Promise<AssessUpgradeResult>;
+export interface FindVulnerableSymbolsOptions {
+    cwd?: string;
+    /** Advisory summary or details, used only to rank candidates. */
+    advisoryText?: string;
+    /** CWE identifiers, used only to rank candidates. */
+    cwes?: string[];
+    /** Largest number of candidates returned (default 25). */
+    limit?: number;
+    /** Check each candidate against the project's source (default true). */
+    checkReachability?: boolean;
+}
+export interface SymbolReachability {
+    status: ReachabilityAssessment["status"];
+    reason: string;
+    basis?: ReachabilityAssessment["reachabilityBasis"];
+    /** Files in the project that invoke the symbol. */
+    invokedIn: string[];
+}
+export interface RankedVulnerableSymbol extends VulnerableSymbolCandidate {
+    /** Present when the project was checked. */
+    reachability?: SymbolReachability;
+}
+export interface VulnerableSymbolsResult extends Omit<FixDiff, "candidates"> {
+    candidates: RankedVulnerableSymbol[];
+    /** How many of the returned candidates the project's code reaches. */
+    reachableCount?: number;
+}
+/**
+ * Candidate vulnerable symbols from the diff between a vulnerable version and its fix, each checked
+ * for reachability from the project. HEURISTIC: see `findVulnerableSymbols` in `fix-diff.ts`.
+ */
+export declare function findVulnerableSymbolsInUpgrade(packageName: string, vulnerableVersion: string, fixedVersion: string, options?: FindVulnerableSymbolsOptions, deps?: ImpactDeps): Promise<VulnerableSymbolsResult>;
+//# sourceMappingURL=assess.d.ts.map

package/dist/remediation/impact/assess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assess.d.ts","sourceRoot":"","sources":["../../../src/remediation/impact/assess.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAGL,KAAK,OAAO,EACZ,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,MAAM,WAAW,UAAU;IACzB,+FAA+F;IAC/F,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACxF;AAED,eAAO,MAAM,iBAAiB,EAAE,UAmB/B,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;CAC5C;AAsBD,sFAAsF;AACtF,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,oBAAyB,EAClC,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAkB9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IACpD,mDAAmD;IACnD,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,yBAAyB;IACvE,4CAA4C;IAC5C,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;IAC1E,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,4BAAiC,EAC1C,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAsClC"}

package/dist/remediation/impact/assess.js

@@ -0,0 +1,118 @@
+/**
+ * Orchestration: fetch the two versions of a package from the registry and run the pure analyses.
+ * The registry access is a dependency so tests and embedders need no network.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import semver from "semver";
+import { classifyUpgradeLevel, downloadTarball, getTarballInfo, verifyTarballIntegrity, } from "../../intelligence/sources/registry.js";
+import { loadRegistryConfig } from "../../platform/registry-config.js";
+import { assessSymbolsReachability } from "../tools/check-reachability.js";
+import { findVulnerableSymbols, } from "./fix-diff.js";
+import { analyzeUpgrade } from "./impact.js";
+import { readPackageTarball } from "./tarball.js";
+import { buildUsageIndex } from "./usage-index.js";
+export const defaultImpactDeps = {
+    async loadPackage(packageName, version, cwd) {
+        if (!/^(@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/i.test(packageName)) {
+            throw new Error(`Invalid package name: ${packageName}`);
+        }
+        if (!semver.valid(version))
+            throw new Error(`Not an exact version: ${version}`);
+        const registry = loadRegistryConfig(cwd);
+        const info = await getTarballInfo(packageName, version, registry);
+        if (!info)
+            throw new Error(`${packageName}@${version} was not found on the registry`);
+        const bytes = await downloadTarball(info, registry);
+        const integrity = verifyTarballIntegrity(bytes, info);
+        if (!integrity.ok) {
+            throw new Error(`Refusing ${packageName}@${version}: tarball failed verification (${integrity.reason})`);
+        }
+        const { files, manifest } = readPackageTarball(bytes);
+        return { name: packageName, version, files, manifest, integrityVerified: integrity.verified };
+    },
+};
+function readProjectManifest(cwd) {
+    const path = join(cwd, "package.json");
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function assertDistinctVersions(from, to) {
+    if (!semver.valid(from) || !semver.valid(to)) {
+        throw new Error(`Versions must be exact semver versions (got "${from}" and "${to}")`);
+    }
+    if (semver.eq(from, to))
+        throw new Error("The two versions are the same");
+}
+/** How risky is moving `packageName` from `from` to `to` for the project at `cwd`? */
+export async function assessUpgrade(packageName, from, to, options = {}, deps = defaultImpactDeps) {
+    assertDistinctVersions(from, to);
+    const cwd = options.cwd ?? process.cwd();
+    const [before, after] = await Promise.all([
+        deps.loadPackage(packageName, from, cwd),
+        deps.loadPackage(packageName, to, cwd),
+    ]);
+    const usage = buildUsageIndex(cwd, packageName);
+    const impact = analyzeUpgrade({
+        before,
+        after,
+        usage,
+        projectManifest: readProjectManifest(cwd),
+    });
+    return {
+        ...impact,
+        upgradeLevel: semver.gt(to, from) ? classifyUpgradeLevel(from, to) : undefined,
+    };
+}
+/**
+ * Candidate vulnerable symbols from the diff between a vulnerable version and its fix, each checked
+ * for reachability from the project. HEURISTIC: see `findVulnerableSymbols` in `fix-diff.ts`.
+ */
+export async function findVulnerableSymbolsInUpgrade(packageName, vulnerableVersion, fixedVersion, options = {}, deps = defaultImpactDeps) {
+    assertDistinctVersions(vulnerableVersion, fixedVersion);
+    const cwd = options.cwd ?? process.cwd();
+    const [vulnerable, fixed] = await Promise.all([
+        deps.loadPackage(packageName, vulnerableVersion, cwd),
+        deps.loadPackage(packageName, fixedVersion, cwd),
+    ]);
+    const hints = { text: options.advisoryText, cwes: options.cwes };
+    const diff = findVulnerableSymbols(vulnerable, fixed, { hints, limit: options.limit });
+    if (options.checkReachability === false)
+        return diff;
+    // The existing reachability check takes a package and a symbol. Deep-file specifiers are checked
+    // under the package name too: it matches `pkg/sub` imports of the package.
+    const symbols = [...new Set(diff.candidates.map((candidate) => candidate.symbol))];
+    const reachability = assessSymbolsReachability(cwd, packageName, symbols);
+    const candidates = diff.candidates.map((candidate) => {
+        const assessment = reachability.get(candidate.symbol);
+        if (!assessment)
+            return candidate;
+        return {
+            ...candidate,
+            reachability: {
+                status: assessment.status,
+                reason: assessment.reason,
+                basis: assessment.reachabilityBasis,
+                invokedIn: [
+                    ...new Set((assessment.evidence ?? []).filter((item) => item.invoked).map((item) => item.filePath)),
+                ].toSorted(),
+            },
+        };
+    });
+    return {
+        ...diff,
+        candidates,
+        reachableCount: candidates.filter((candidate) => candidate.reachability?.status === "reachable")
+            .length,
+    };
+}
+//# sourceMappingURL=assess.js.map

package/dist/remediation/impact/assess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assess.js","sourceRoot":"","sources":["../../../src/remediation/impact/assess.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACL,qBAAqB,GAItB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAsB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOnD,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG;QACzC,IAAI,CAAC,mDAAmD,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,IAAI,OAAO,gCAAgC,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,YAAY,WAAW,IAAI,OAAO,kCAAkC,SAAS,CAAC,MAAM,GAAG,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;IAChG,CAAC;CACF,CAAC;AAWF,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,EAAU;IACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC5E,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,IAAY,EACZ,EAAU,EACV,OAAO,GAAyB,EAAE,EAClC,IAAI,GAAe,iBAAiB;IAEpC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,MAAM;QACN,KAAK;QACL,KAAK;QACL,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO;QACL,GAAG,MAAM;QACT,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,CAAC;AACJ,CAAC;AAiCD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAmB,EACnB,iBAAyB,EACzB,YAAoB,EACpB,OAAO,GAAiC,EAAE,EAC1C,IAAI,GAAe,iBAAiB;IAEpC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,EAAE,GAAG,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,KAAK,GAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAErD,iGAAiG;IACjG,2EAA2E;IAC3E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,UAAU,GAA6B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC7E,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClC,OAAO;YACL,GAAG,SAAS;YACZ,YAAY,EAAE;gBACZ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,UAAU,CAAC,iBAAiB;gBACnC,SAAS,EAAE;oBACT,GAAG,IAAI,GAAG,CACR,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CACxF;iBACF,CAAC,QAAQ,EAAE;aACb;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,UAAU;QACV,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,KAAK,WAAW,CAAC;aAC7F,MAAM;KACV,CAAC;AACJ,CAAC"}

package/dist/remediation/impact/ast.d.ts

@@ -0,0 +1,37 @@
+export interface AstNode {
+    type: string;
+    start: number;
+    end: number;
+    [key: string]: unknown;
+}
+export declare function isNode(value: unknown): value is AstNode;
+/** Parse a file; undefined when it cannot be parsed at all (an empty program from a broken file). */
+export declare function parseSource(file: string, code: string): AstNode | undefined;
+/** Child nodes of a node, in source order of the parser's keys. */
+export declare function childNodes(node: AstNode): AstNode[];
+/**
+ * Depth-first walk with the parent chain. Return `false` from `visit` to skip a node's subtree.
+ * Iterative, so a deeply nested file cannot overflow the stack.
+ */
+export declare function walk(root: AstNode, visit: (node: AstNode, parent: AstNode | undefined, ancestors: readonly AstNode[]) => boolean | void): void;
+export interface CanonicalForm {
+    /** Hash of the subtree with positions, comments, quote style and parentheses removed. */
+    fingerprint: string;
+    nodeCount: number;
+    /** Identifier names, string and regular-expression literals appearing in the subtree. */
+    tokens: Set<string>;
+}
+/**
+ * Canonical form of a subtree. `placeholder` may return a replacement label for a descendant
+ * (used to leave nested named functions out of their parent's fingerprint).
+ */
+export declare function canonicalForm(root: AstNode, placeholder?: (node: AstNode) => string | undefined): CanonicalForm;
+/** Offsets of the start of every line, for converting a character offset to a line number. */
+export declare function lineStarts(code: string): number[];
+/** 1-based line of a character offset. */
+export declare function lineOf(starts: readonly number[], offset: number): number;
+/** Name of an identifier or string-literal node (`{ name }` or `{ value }`). */
+export declare function nameOfNode(node: unknown): string | undefined;
+/** Name of a property key that is a plain identifier or string literal; undefined when computed. */
+export declare function propertyName(key: unknown, computed: boolean | undefined): string | undefined;
+//# sourceMappingURL=ast.d.ts.map

package/dist/remediation/impact/ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../../src/remediation/impact/ast.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAEvD;AAED,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAa3E;AAID,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,EAAE,CAYnD;AAED;;;GAGG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,CACL,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,SAAS,EAAE,SAAS,OAAO,EAAE,KAC1B,OAAO,GAAG,IAAI,GAClB,IAAI,CAiBN;AAED,MAAM,WAAW,aAAa;IAC5B,yFAAyF;IACzF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACrB;AAcD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,GAClD,aAAa,CAkEf;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMjD;AAED,0CAA0C;AAC1C,wBAAgB,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASxE;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI5D;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAM5F"}