autoremediator 0.7.0 → 0.9.0

package/dist/remediate-from-scan-C-E7gqxF.d.ts

@@ -1,211 +0,0 @@
-/** A resolved CVE entry with affected npm package info */
-interface CveDetails {
-    id: string;
-    summary: string;
-    severity: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | "UNKNOWN";
-    cvssScore?: number;
-    epss?: {
-        score: number;
-        percentile: number;
-        date?: string;
-    };
-    kev?: {
-        knownExploited: boolean;
-        dateAdded?: string;
-        dueDate?: string;
-        requiredAction?: string;
-        knownRansomwareCampaignUse?: string;
-    };
-    intelligence?: {
-        cveServicesEnriched?: boolean;
-        gitlabAdvisoryMatched?: boolean;
-        certCcMatched?: boolean;
-        depsDevEnrichedPackages?: number;
-        scorecardProjects?: number;
-        vendorAdvisories?: string[];
-        commercialFeeds?: string[];
-        sourceHealth?: Record<string, {
-            attempted: boolean;
-            changed: boolean;
-            error?: string;
-        }>;
-    };
-    references: string[];
-    affectedPackages: AffectedPackage[];
-}
-/** A single npm package affected by a CVE */
-interface AffectedPackage {
-    name: string;
-    ecosystem: "npm";
-    /** Semver range string for the vulnerable version window, e.g. ">=0.0.0 <4.17.21" */
-    vulnerableRange: string;
-    /** The first version that is NOT vulnerable (the safe upgrade target) */
-    firstPatchedVersion?: string;
-    /** Source that provided this entry */
-    source: "osv" | "github-advisory";
-}
-/** A package found in the consumer's project */
-interface InventoryPackage {
-    name: string;
-    version: string;
-    /** "direct" = listed in package.json; "indirect" = transitive dep */
-    type: "direct" | "indirect";
-}
-/** A package that is both installed and matches a vulnerable range */
-interface VulnerablePackage {
-    installed: InventoryPackage;
-    affected: AffectedPackage;
-    /** The resolved safe upgrade version, if one exists on npm */
-    safeUpgradeVersion?: string;
-}
-/** The outcome of a single patch operation */
-type PatchStrategy = "version-bump" | "override" | "patch-file" | "none";
-type DependencyScope = "direct" | "transitive";
-type UnresolvedReason = "constraint-blocked" | "indirect-dependency" | "install-failed" | "major-bump-required" | "no-safe-version" | "override-apply-failed" | "package-json-not-found" | "patch-apply-failed" | "patch-confidence-too-low" | "patch-generation-failed" | "patch-validation-failed" | "policy-blocked" | "requires-llm-fallback" | "source-fetch-failed" | "validation-failed";
-type PatchStrategyCounts = Partial<Record<PatchStrategy, number>>;
-type DependencyScopeCounts = Partial<Record<DependencyScope, number>>;
-type UnresolvedReasonCounts = Partial<Record<UnresolvedReason, number>>;
-interface PatchResult {
-    packageName: string;
-    strategy: PatchStrategy;
-    fromVersion: string;
-    toVersion?: string;
-    patchFilePath?: string;
-    applied: boolean;
-    dryRun: boolean;
-    message: string;
-    unresolvedReason?: UnresolvedReason;
-    validation?: {
-        passed: boolean;
-        error?: string;
-    };
-}
-interface CorrelationContext {
-    requestId?: string;
-    sessionId?: string;
-    parentRunId?: string;
-}
-interface RemediationConstraints {
-    directDependenciesOnly?: boolean;
-    preferVersionBump?: boolean;
-}
-interface ProvenanceContext {
-    actor?: string;
-    source?: "cli" | "sdk" | "mcp" | "openapi" | "unknown";
-}
-/** Top-level options for the remediate() API and CLI */
-interface RemediateOptions extends CorrelationContext {
-    /** Working directory of the consumer's project (defaults to process.cwd()) */
-    cwd?: string;
-    /** Package manager to use (defaults to auto-detect from lockfile) */
-    packageManager?: "npm" | "pnpm" | "yarn";
-    /** If true, plan and report changes but do not write anything */
-    dryRun?: boolean;
-    /** If true, run package-manager tests after patching */
-    runTests?: boolean;
-    /** Override the LLM provider (falls back to env AUTOREMEDIATOR_LLM_PROVIDER) */
-    llmProvider?: "openai" | "anthropic" | "local";
-    /** Override the model name */
-    model?: string;
-    /** Optional path to a policy file (.autoremediator.json) */
-    policy?: string;
-    /** If false, do not write evidence JSON for this run (default: true). */
-    evidence?: boolean;
-    /** Directory to write .patch files (default: ./patches) */
-    patchesDir?: string;
-    /** If true, run a non-mutating remediation preview (forces dryRun behavior for mutation tools). */
-    preview?: boolean;
-    /** Optional deterministic idempotency key for request replay handling. */
-    idempotencyKey?: string;
-    /** If true, return cached report for matching idempotency key + CVE when available. */
-    resume?: boolean;
-    /** Optional caller provenance fields for evidence and reporting. */
-    actor?: string;
-    source?: "cli" | "sdk" | "mcp" | "openapi" | "unknown";
-    /** Optional orchestration constraints for result enforcement. */
-    constraints?: RemediationConstraints;
-}
-/** Final report returned by the remediation pipeline */
-interface RemediationReport {
-    cveId: string;
-    cveDetails: CveDetails | null;
-    vulnerablePackages: VulnerablePackage[];
-    results: PatchResult[];
-    agentSteps: number;
-    summary: string;
-    evidenceFile?: string;
-    correlation?: CorrelationContext;
-    provenance?: ProvenanceContext;
-    constraints?: RemediationConstraints;
-    resumedFromCache?: boolean;
-}
-
-type ScanInputFormat = "npm-audit" | "yarn-audit" | "sarif" | "auto";
-
-interface ScanOptions extends RemediateOptions {
-    format?: ScanInputFormat;
-    policy?: string;
-}
-interface ScanReport {
-    schemaVersion: "1.0";
-    status: "ok" | "partial" | "failed";
-    generatedAt: string;
-    cveIds: string[];
-    reports: RemediationReport[];
-    successCount: number;
-    failedCount: number;
-    errors: Array<{
-        cveId: string;
-        message: string;
-    }>;
-    evidenceFile?: string;
-    patchCount: number;
-    patchValidationFailures?: Array<{
-        packageName: string;
-        cveId: string;
-        error: string;
-    }>;
-    strategyCounts?: PatchStrategyCounts;
-    dependencyScopeCounts?: DependencyScopeCounts;
-    unresolvedByReason?: UnresolvedReasonCounts;
-    patchesDir?: string;
-    correlation?: CorrelationContext;
-    provenance?: ProvenanceContext;
-    constraints?: RemediationConstraints;
-    idempotencyKey?: string;
-}
-interface CiSummary {
-    schemaVersion: "1.0";
-    status: "ok" | "partial" | "failed";
-    generatedAt: string;
-    cveCount: number;
-    remediationCount: number;
-    successCount: number;
-    failedCount: number;
-    errors: Array<{
-        cveId: string;
-        message: string;
-    }>;
-    evidenceFile?: string;
-    patchCount?: number;
-    patchValidationFailures?: Array<{
-        packageName: string;
-        cveId: string;
-        error: string;
-    }>;
-    strategyCounts?: PatchStrategyCounts;
-    dependencyScopeCounts?: DependencyScopeCounts;
-    unresolvedByReason?: UnresolvedReasonCounts;
-    patchesDir?: string;
-    correlation?: CorrelationContext;
-    provenance?: ProvenanceContext;
-    constraints?: RemediationConstraints;
-    idempotencyKey?: string;
-}
-
-declare function remediate(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
-declare function planRemediation(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
-
-declare function remediateFromScan(inputPath: string, options?: ScanOptions): Promise<ScanReport>;
-
-export { type AffectedPackage as A, type CiSummary as C, type DependencyScope as D, type InventoryPackage as I, type PatchResult as P, type RemediateOptions as R, type ScanReport as S, type UnresolvedReason as U, type VulnerablePackage as V, type RemediationReport as a, type CorrelationContext as b, type CveDetails as c, type DependencyScopeCounts as d, type PatchStrategy as e, type PatchStrategyCounts as f, type ProvenanceContext as g, type RemediationConstraints as h, type ScanInputFormat as i, type ScanOptions as j, type UnresolvedReasonCounts as k, remediateFromScan as l, planRemediation as p, remediate as r };