autoremediator 0.7.0 → 0.9.0

package/dist/cli.js

@@ -5,11 +5,14 @@ import {
 import {
   OPTION_DESCRIPTIONS,
   ciExitCode,
+  inspectPatchArtifact,
+  listPatchArtifacts,
   remediate,
   remediateFromScan,
   toCiSummary,
-  toSarifOutput
-} from "./chunk-MUFP2DQX.js";
+  toSarifOutput,
+  validatePatchArtifact
+} from "./chunk-EDPCMRUW.js";
 
 // src/cli/index.ts
 import { fileURLToPath } from "url";
@@ -62,6 +65,19 @@ async function runSingleCve(cveId, opts) {
     policy: opts.policy,
     evidence: opts.evidence,
     llmProvider: opts.llmProvider,
+    model: opts.model,
+    modelPersonality: opts.modelPersonality,
+    providerSafetyProfile: opts.providerSafetyProfile,
+    requireConsensusForHighRisk: opts.requireConsensusForHighRisk,
+    consensusProvider: opts.consensusProvider,
+    consensusModel: opts.consensusModel,
+    patchConfidenceThresholds: {
+      low: typeof opts.patchConfidenceLow === "number" ? opts.patchConfidenceLow : void 0,
+      medium: typeof opts.patchConfidenceMedium === "number" ? opts.patchConfidenceMedium : void 0,
+      high: typeof opts.patchConfidenceHigh === "number" ? opts.patchConfidenceHigh : void 0
+    },
+    dynamicModelRouting: opts.dynamicModelRouting,
+    dynamicRoutingThresholdChars: typeof opts.dynamicRoutingThresholdChars === "number" ? opts.dynamicRoutingThresholdChars : void 0,
     requestId: opts.requestId,
     sessionId: opts.sessionId,
     parentRunId: opts.parentRunId,
@@ -71,7 +87,11 @@ async function runSingleCve(cveId, opts) {
     source: opts.source ?? "cli",
     constraints: {
       directDependenciesOnly: opts.directDependenciesOnly,
-      preferVersionBump: opts.preferVersionBump
+      preferVersionBump: opts.preferVersionBump,
+      installMode: opts.installMode,
+      installPreferOffline: opts.installPreferOffline,
+      enforceFrozenLockfile: opts.enforceFrozenLockfile,
+      workspace: opts.workspace
     }
   });
   const reportAsScan = asSingleCveScanReport(report);
@@ -106,12 +126,26 @@ async function runScanInput(inputPath, opts) {
     cwd: opts.cwd,
     packageManager: opts.packageManager,
     format: opts.format,
+    audit: opts.audit,
     policy: opts.policy,
     patchesDir: opts.patchesDir,
     dryRun: opts.dryRun,
     preview: opts.preview,
     runTests: opts.runTests,
     llmProvider: opts.llmProvider,
+    model: opts.model,
+    modelPersonality: opts.modelPersonality,
+    providerSafetyProfile: opts.providerSafetyProfile,
+    requireConsensusForHighRisk: opts.requireConsensusForHighRisk,
+    consensusProvider: opts.consensusProvider,
+    consensusModel: opts.consensusModel,
+    patchConfidenceThresholds: {
+      low: typeof opts.patchConfidenceLow === "number" ? opts.patchConfidenceLow : void 0,
+      medium: typeof opts.patchConfidenceMedium === "number" ? opts.patchConfidenceMedium : void 0,
+      high: typeof opts.patchConfidenceHigh === "number" ? opts.patchConfidenceHigh : void 0
+    },
+    dynamicModelRouting: opts.dynamicModelRouting,
+    dynamicRoutingThresholdChars: typeof opts.dynamicRoutingThresholdChars === "number" ? opts.dynamicRoutingThresholdChars : void 0,
     evidence: opts.evidence,
     requestId: opts.requestId,
     sessionId: opts.sessionId,
@@ -122,7 +156,11 @@ async function runScanInput(inputPath, opts) {
     source: opts.source ?? "cli",
     constraints: {
       directDependenciesOnly: opts.directDependenciesOnly,
-      preferVersionBump: opts.preferVersionBump
+      preferVersionBump: opts.preferVersionBump,
+      installMode: opts.installMode,
+      installPreferOffline: opts.installPreferOffline,
+      enforceFrozenLockfile: opts.enforceFrozenLockfile,
+      workspace: opts.workspace
     }
   });
   if (opts.summaryFile) {
@@ -180,6 +218,97 @@ async function runScanInput(inputPath, opts) {
     process.exitCode = ciExitCode(toCiSummary(report));
   }
 }
+async function runListPatches(opts) {
+  const patches = await listPatchArtifacts({
+    cwd: opts.cwd,
+    patchesDir: opts.patchesDir
+  });
+  if (opts.json) {
+    logJson(patches);
+    return;
+  }
+  process.stdout.write(`Patch artifacts: ${patches.length}
+`);
+  for (const patch of patches) {
+    process.stdout.write(`- ${patch.patchFileName}`);
+    if (patch.packageName && patch.vulnerableVersion) {
+      process.stdout.write(` (${patch.packageName}@${patch.vulnerableVersion})`);
+    }
+    if (patch.confidence !== void 0) {
+      process.stdout.write(` confidence=${patch.confidence.toFixed(2)}`);
+    }
+    if (patch.riskLevel) {
+      process.stdout.write(` risk=${patch.riskLevel}`);
+    }
+    process.stdout.write(`
+`);
+  }
+}
+async function runInspectPatch(patchPath, opts) {
+  const inspection = await inspectPatchArtifact(patchPath, { cwd: opts.cwd });
+  if (opts.json) {
+    logJson(inspection);
+    return;
+  }
+  process.stdout.write(`Patch: ${inspection.patchFilePath}
+`);
+  process.stdout.write(`Exists: ${inspection.exists}
+`);
+  process.stdout.write(`Diff valid: ${inspection.diffValid}
+`);
+  if (inspection.packageName && inspection.vulnerableVersion) {
+    process.stdout.write(`Target: ${inspection.packageName}@${inspection.vulnerableVersion}
+`);
+  }
+  if (inspection.manifestFilePath) {
+    process.stdout.write(`Manifest: ${inspection.manifestFilePath}
+`);
+  }
+  if (inspection.files?.length) {
+    process.stdout.write(`Files: ${inspection.files.join(", ")}
+`);
+  }
+  if (inspection.formatError) {
+    process.stdout.write(`Format error: ${inspection.formatError}
+`);
+  }
+}
+async function runValidatePatch(patchPath, opts) {
+  const report = await validatePatchArtifact(patchPath, {
+    cwd: opts.cwd,
+    packageManager: opts.packageManager
+  });
+  if (opts.json) {
+    logJson(report);
+    return;
+  }
+  process.stdout.write(`Patch: ${report.patchFilePath}
+`);
+  process.stdout.write(`Exists: ${report.exists}
+`);
+  process.stdout.write(`Manifest found: ${report.manifestFound}
+`);
+  process.stdout.write(`Diff valid: ${report.diffValid}
+`);
+  process.stdout.write(`Drift detected: ${report.driftDetected}
+`);
+  if (report.packageName && report.vulnerableVersion) {
+    process.stdout.write(`Target: ${report.packageName}@${report.vulnerableVersion}
+`);
+  }
+  if (report.installedVersion) {
+    process.stdout.write(`Installed version: ${report.installedVersion}
+`);
+  }
+  for (const phase of report.validationPhases) {
+    process.stdout.write(`Phase ${phase.phase}: ${phase.passed ? "ok" : "failed"}`);
+    if (phase.error) {
+      process.stdout.write(` (${phase.error})`);
+    }
+    process.stdout.write(`
+`);
+  }
+}
 
 // src/cli/types.ts
 function isCveId(value) {
@@ -188,7 +317,32 @@ function isCveId(value) {
 
 // src/cli/program.ts
 function addSharedOptions(program, includeInput = false) {
-  program.option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd()).option("--package-manager <name>", OPTION_DESCRIPTIONS.packageManager).option("--patches-dir <path>", OPTION_DESCRIPTIONS.patchesDir).option("--dry-run", OPTION_DESCRIPTIONS.dryRun, false).option("--preview", OPTION_DESCRIPTIONS.preview, false).option("--run-tests", OPTION_DESCRIPTIONS.runTests, false).option("--llm-provider <provider>", OPTION_DESCRIPTIONS.llmProvider).option("--request-id <id>", OPTION_DESCRIPTIONS.requestId).option("--session-id <id>", OPTION_DESCRIPTIONS.sessionId).option("--parent-run-id <id>", OPTION_DESCRIPTIONS.parentRunId).option("--idempotency-key <key>", OPTION_DESCRIPTIONS.idempotencyKey).option("--resume", OPTION_DESCRIPTIONS.resume, false).option("--actor <name>", OPTION_DESCRIPTIONS.actor).option("--source <src>", `${OPTION_DESCRIPTIONS.source}: cli|sdk|mcp|openapi|unknown`).option("--direct-dependencies-only", OPTION_DESCRIPTIONS.directDependenciesOnly, false).option("--prefer-version-bump", OPTION_DESCRIPTIONS.preferVersionBump, false).option("--policy <path>", OPTION_DESCRIPTIONS.policy).option("--evidence", OPTION_DESCRIPTIONS.evidence, true).option("--no-evidence", "Disable evidence file output").option("--ci", "Enable CI behavior (non-zero exit on failed remediations)", false).option("--output-format <format>", "Output format: json|sarif", "json").option("--json", "Print JSON output", false);
+  const parseBooleanFlag = (value) => value === "true";
+  program.option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd()).option("--package-manager <name>", OPTION_DESCRIPTIONS.packageManager).option("--patches-dir <path>", OPTION_DESCRIPTIONS.patchesDir).option("--dry-run", OPTION_DESCRIPTIONS.dryRun, false).option("--preview", OPTION_DESCRIPTIONS.preview, false).option("--run-tests", OPTION_DESCRIPTIONS.runTests, false).option("--llm-provider <provider>", OPTION_DESCRIPTIONS.llmProvider).option("--model <name>", OPTION_DESCRIPTIONS.model).option("--model-personality <profile>", OPTION_DESCRIPTIONS.modelPersonality).option("--provider-safety-profile <profile>", OPTION_DESCRIPTIONS.providerSafetyProfile).option("--require-consensus-for-high-risk", OPTION_DESCRIPTIONS.requireConsensusForHighRisk, false).option("--consensus-provider <provider>", OPTION_DESCRIPTIONS.consensusProvider).option("--consensus-model <name>", OPTION_DESCRIPTIONS.consensusModel).option(
+    "--patch-confidence-low <value>",
+    OPTION_DESCRIPTIONS.patchConfidenceThresholdLow,
+    (value) => parseFloat(value)
+  ).option(
+    "--patch-confidence-medium <value>",
+    OPTION_DESCRIPTIONS.patchConfidenceThresholdMedium,
+    (value) => parseFloat(value)
+  ).option(
+    "--patch-confidence-high <value>",
+    OPTION_DESCRIPTIONS.patchConfidenceThresholdHigh,
+    (value) => parseFloat(value)
+  ).option("--dynamic-model-routing", OPTION_DESCRIPTIONS.dynamicModelRouting, false).option(
+    "--dynamic-routing-threshold-chars <count>",
+    OPTION_DESCRIPTIONS.dynamicRoutingThresholdChars,
+    (value) => parseInt(value, 10)
+  ).option("--request-id <id>", OPTION_DESCRIPTIONS.requestId).option("--session-id <id>", OPTION_DESCRIPTIONS.sessionId).option("--parent-run-id <id>", OPTION_DESCRIPTIONS.parentRunId).option("--idempotency-key <key>", OPTION_DESCRIPTIONS.idempotencyKey).option("--resume", OPTION_DESCRIPTIONS.resume, false).option("--actor <name>", OPTION_DESCRIPTIONS.actor).option("--source <src>", `${OPTION_DESCRIPTIONS.source}: cli|sdk|mcp|openapi|unknown`).option("--direct-dependencies-only", OPTION_DESCRIPTIONS.directDependenciesOnly, false).option("--prefer-version-bump", OPTION_DESCRIPTIONS.preferVersionBump, false).option("--install-mode <mode>", OPTION_DESCRIPTIONS.installMode).option(
+    "--install-prefer-offline <value>",
+    `${OPTION_DESCRIPTIONS.installPreferOffline} (true|false)`,
+    parseBooleanFlag
+  ).option(
+    "--enforce-frozen-lockfile <value>",
+    `${OPTION_DESCRIPTIONS.enforceFrozenLockfile} (true|false)`,
+    parseBooleanFlag
+  ).option("--workspace <name>", OPTION_DESCRIPTIONS.workspace).option("--audit", OPTION_DESCRIPTIONS.audit, false).option("--policy <path>", OPTION_DESCRIPTIONS.policy).option("--evidence", OPTION_DESCRIPTIONS.evidence, true).option("--no-evidence", "Disable evidence file output").option("--ci", "Enable CI behavior (non-zero exit on failed remediations)", false).option("--output-format <format>", "Output format: json|sarif", "json").option("--json", "Print JSON output", false);
   if (includeInput) {
     program.option("--input <path>", `${OPTION_DESCRIPTIONS.inputPath} (scanner-first mode)`);
   }
@@ -208,15 +362,48 @@ function createProgram() {
     await runSingleCve(cveId, merged);
   });
   addSharedOptions(
-    program.command("scan").description("Remediate vulnerabilities from scanner output (npm/pnpm/yarn audit JSON or SARIF)").requiredOption("--input <path>", OPTION_DESCRIPTIONS.inputPath).option("--format <type>", OPTION_DESCRIPTIONS.format, "auto").option("--summary-file <path>", "Write machine-readable scan summary JSON to path"),
+    program.command("scan").description("Remediate vulnerabilities from scanner output (npm/pnpm/yarn audit JSON or SARIF)").option("--input <path>", OPTION_DESCRIPTIONS.inputPath).option("--format <type>", OPTION_DESCRIPTIONS.format, "auto").option("--summary-file <path>", "Write machine-readable scan summary JSON to path"),
     false
-  ).action(async (opts) => {
-    await runScanInput(opts.input, opts);
+  ).action(async (opts, command) => {
+    const merged = {
+      ...opts,
+      ...command.optsWithGlobals()
+    };
+    if (!merged.audit && !merged.input) {
+      throw new Error("scan mode requires --input unless --audit is enabled.");
+    }
+    await runScanInput(merged.input ?? "", merged);
+  });
+  const patches = program.command("patches").description("Inspect and validate stored patch artifacts");
+  patches.command("list").description("List patch artifacts in the configured patches directory").option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd()).option("--patches-dir <path>", OPTION_DESCRIPTIONS.patchesDir).option("--json", "Print JSON output", false).action(async (opts, command) => {
+    const merged = {
+      ...command.optsWithGlobals(),
+      ...opts
+    };
+    await runListPatches(merged);
+  });
+  patches.command("inspect").description("Inspect a patch artifact and its manifest metadata").argument("<patchPath>", "Path to the .patch file to inspect").option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd()).option("--json", "Print JSON output", false).action(async (patchPath, opts, command) => {
+    const merged = {
+      ...command.optsWithGlobals(),
+      ...opts
+    };
+    await runInspectPatch(patchPath, merged);
+  });
+  patches.command("validate").description("Validate a patch artifact against its manifest and the current dependency inventory").argument("<patchPath>", "Path to the .patch file to validate").option("--cwd <path>", OPTION_DESCRIPTIONS.cwd, process.cwd()).option("--package-manager <name>", OPTION_DESCRIPTIONS.packageManager).option("--json", "Print JSON output", false).action(async (patchPath, opts, command) => {
+    const merged = {
+      ...command.optsWithGlobals(),
+      ...opts
+    };
+    await runValidatePatch(patchPath, merged);
   });
   addSharedOptions(
     program.argument("[target]", "Scanner output file path (or CVE ID fallback)").option("--format <type>", OPTION_DESCRIPTIONS.format, "auto").option("--summary-file <path>", "Write machine-readable scan summary JSON to path"),
     true
   ).action(async (target, opts) => {
+    if (opts.audit) {
+      await runScanInput(opts.input ?? target ?? "", opts);
+      return;
+    }
     if (opts.input) {
       await runScanInput(opts.input, opts);
       return;

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/index.ts","../src/cli/program.ts","../src/cli/runners.ts","../src/cli/output.ts","../src/cli/types.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from \"commander\";\nimport { fileURLToPath } from \"node:url\";\nimport { createProgram as createCliProgram } from \"./program.js\";\n\nexport function createProgram(): Command {\n  return createCliProgram();\n}\n\nasync function main(argv = process.argv): Promise<void> {\n  const program = createProgram();\n  await program.parseAsync(argv);\n}\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  return fileURLToPath(import.meta.url) === process.argv[1];\n}\n\nif (isMainModule()) {\n  main().catch((error) => {\n    const message = error instanceof Error ? error.message : String(error);\n    process.stderr.write(`[autoremediator] ${message}\\n`);\n    process.exit(1);\n  });\n}\n","import { Command } from \"commander\";\nimport { OPTION_DESCRIPTIONS } from \"../api/index.js\";\nimport { existsSync } from \"node:fs\";\nimport { PACKAGE_VERSION } from \"../version\";\nimport { runScanInput, runSingleCve } from \"./runners.js\";\nimport type { CommandOptions } from \"./types.js\";\nimport { isCveId } from \"./types.js\";\n\nfunction addSharedOptions(program: Command, includeInput = false): Command {\n  program\n    .option(\"--cwd <path>\", OPTION_DESCRIPTIONS.cwd, process.cwd())\n    .option(\"--package-manager <name>\", OPTION_DESCRIPTIONS.packageManager)\n    .option(\"--patches-dir <path>\", OPTION_DESCRIPTIONS.patchesDir)\n    .option(\"--dry-run\", OPTION_DESCRIPTIONS.dryRun, false)\n    .option(\"--preview\", OPTION_DESCRIPTIONS.preview, false)\n    .option(\"--run-tests\", OPTION_DESCRIPTIONS.runTests, false)\n    .option(\"--llm-provider <provider>\", OPTION_DESCRIPTIONS.llmProvider)\n    .option(\"--request-id <id>\", OPTION_DESCRIPTIONS.requestId)\n    .option(\"--session-id <id>\", OPTION_DESCRIPTIONS.sessionId)\n    .option(\"--parent-run-id <id>\", OPTION_DESCRIPTIONS.parentRunId)\n    .option(\"--idempotency-key <key>\", OPTION_DESCRIPTIONS.idempotencyKey)\n    .option(\"--resume\", OPTION_DESCRIPTIONS.resume, false)\n    .option(\"--actor <name>\", OPTION_DESCRIPTIONS.actor)\n    .option(\"--source <src>\", `${OPTION_DESCRIPTIONS.source}: cli|sdk|mcp|openapi|unknown`)\n    .option(\"--direct-dependencies-only\", OPTION_DESCRIPTIONS.directDependenciesOnly, false)\n    .option(\"--prefer-version-bump\", OPTION_DESCRIPTIONS.preferVersionBump, false)\n    .option(\"--policy <path>\", OPTION_DESCRIPTIONS.policy)\n    .option(\"--evidence\", OPTION_DESCRIPTIONS.evidence, true)\n    .option(\"--no-evidence\", \"Disable evidence file output\")\n    .option(\"--ci\", \"Enable CI behavior (non-zero exit on failed remediations)\", false)\n    .option(\"--output-format <format>\", \"Output format: json|sarif\", \"json\")\n    .option(\"--json\", \"Print JSON output\", false);\n\n  if (includeInput) {\n    program.option(\"--input <path>\", `${OPTION_DESCRIPTIONS.inputPath} (scanner-first mode)`);\n  }\n\n  return program;\n}\n\nexport function createProgram(): Command {\n  const program = new Command();\n\n  program\n    .name(\"autoremediator\")\n    .description(\"Scanner-first Node.js vulnerability auto-remediation tool\")\n    .version(PACKAGE_VERSION)\n    .showHelpAfterError();\n\n  addSharedOptions(\n    program\n      .command(\"cve\")\n      .description(\"Remediate a single CVE ID\")\n      .argument(\"<cveId>\", OPTION_DESCRIPTIONS.cveId),\n    false\n  ).action(async (cveId: string, opts: CommandOptions, command: Command) => {\n    const merged = {\n      ...opts,\n      ...(command.optsWithGlobals() as Partial<CommandOptions>),\n    } as CommandOptions;\n    await runSingleCve(cveId, merged);\n  });\n\n  addSharedOptions(\n    program\n      .command(\"scan\")\n      .description(\"Remediate vulnerabilities from scanner output (npm/pnpm/yarn audit JSON or SARIF)\")\n      .requiredOption(\"--input <path>\", OPTION_DESCRIPTIONS.inputPath)\n      .option(\"--format <type>\", OPTION_DESCRIPTIONS.format, \"auto\")\n      .option(\"--summary-file <path>\", \"Write machine-readable scan summary JSON to path\"),\n    false\n  ).action(async (opts: CommandOptions) => {\n    await runScanInput(opts.input!, opts);\n  });\n\n  addSharedOptions(\n    program\n      .argument(\"[target]\", \"Scanner output file path (or CVE ID fallback)\")\n      .option(\"--format <type>\", OPTION_DESCRIPTIONS.format, \"auto\")\n      .option(\"--summary-file <path>\", \"Write machine-readable scan summary JSON to path\"),\n    true\n  ).action(async (target: string | undefined, opts: CommandOptions) => {\n    if (opts.input) {\n      await runScanInput(opts.input, opts);\n      return;\n    }\n\n    if (!target) {\n      program.outputHelp();\n      return;\n    }\n\n    if (isCveId(target)) {\n      await runSingleCve(target, opts);\n      return;\n    }\n\n    if (existsSync(target)) {\n      await runScanInput(target, opts);\n      return;\n    }\n\n    throw new Error(\n      `Target \"${target}\" is neither a valid CVE ID nor an existing scan file path.`\n    );\n  });\n\n  return program;\n}\n","import {\n  ciExitCode,\n  remediate,\n  remediateFromScan,\n  type ScanReport,\n  toCiSummary,\n  toSarifOutput,\n} from \"../api/index.js\";\nimport { writeFileSync } from \"node:fs\";\nimport { formatCountMap, logJson } from \"./output.js\";\nimport type { CommandOptions } from \"./types.js\";\n\nfunction asSingleCveScanReport(report: Awaited<ReturnType<typeof remediate>>): ScanReport {\n  return {\n    schemaVersion: \"1.0\",\n    status: report.results.some((result) => !result.applied && !result.dryRun)\n      ? report.results.some((result) => result.applied || result.dryRun)\n        ? \"partial\"\n        : \"failed\"\n      : \"ok\",\n    generatedAt: new Date().toISOString(),\n    cveIds: [report.cveId],\n    reports: [report],\n    successCount: report.results.filter((result) => result.applied || result.dryRun).length,\n    failedCount: report.results.filter((result) => !result.applied && !result.dryRun).length,\n    errors: [],\n    evidenceFile: report.evidenceFile,\n    patchCount: report.results.filter((result) => result.strategy === \"patch-file\").length,\n    correlation: report.correlation,\n    provenance: report.provenance,\n    constraints: report.constraints,\n  };\n}\n\nexport async function runSingleCve(cveId: string, opts: CommandOptions): Promise<void> {\n  const report = await remediate(cveId, {\n    cwd: opts.cwd,\n    packageManager: opts.packageManager,\n    dryRun: opts.dryRun,\n    preview: opts.preview,\n    runTests: opts.runTests,\n    patchesDir: opts.patchesDir,\n    policy: opts.policy,\n    evidence: opts.evidence,\n    llmProvider: opts.llmProvider,\n    requestId: opts.requestId,\n    sessionId: opts.sessionId,\n    parentRunId: opts.parentRunId,\n    idempotencyKey: opts.idempotencyKey,\n    resume: opts.resume,\n    actor: opts.actor,\n    source: opts.source ?? \"cli\",\n    constraints: {\n      directDependenciesOnly: opts.directDependenciesOnly,\n      preferVersionBump: opts.preferVersionBump,\n    },\n  });\n\n  const reportAsScan = asSingleCveScanReport(report);\n\n  if (opts.outputFormat === \"sarif\") {\n    logJson(toSarifOutput(reportAsScan));\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n    }\n    return;\n  }\n\n  if (opts.json) {\n    logJson(report);\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n    }\n    return;\n  }\n\n  process.stdout.write(`${report.summary}\\n`);\n  process.stdout.write(`Results: ${report.results.length}\\n`);\n  if (report.evidenceFile) {\n    process.stdout.write(`Evidence: ${report.evidenceFile}\\n`);\n  }\n  if (opts.ci) {\n    process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n  }\n}\n\nexport async function runScanInput(inputPath: string, opts: CommandOptions): Promise<void> {\n  const report = await remediateFromScan(inputPath, {\n    cwd: opts.cwd,\n    packageManager: opts.packageManager,\n    format: opts.format,\n    policy: opts.policy,\n    patchesDir: opts.patchesDir,\n    dryRun: opts.dryRun,\n    preview: opts.preview,\n    runTests: opts.runTests,\n    llmProvider: opts.llmProvider,\n    evidence: opts.evidence,\n    requestId: opts.requestId,\n    sessionId: opts.sessionId,\n    parentRunId: opts.parentRunId,\n    idempotencyKey: opts.idempotencyKey,\n    resume: opts.resume,\n    actor: opts.actor,\n    source: opts.source ?? \"cli\",\n    constraints: {\n      directDependenciesOnly: opts.directDependenciesOnly,\n      preferVersionBump: opts.preferVersionBump,\n    },\n  });\n\n  if (opts.summaryFile) {\n    const summary = toCiSummary(report);\n    writeFileSync(opts.summaryFile, JSON.stringify(summary, null, 2) + \"\\n\", \"utf8\");\n  }\n\n  if (opts.outputFormat === \"sarif\") {\n    logJson(toSarifOutput(report));\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(report));\n    }\n    return;\n  }\n\n  if (opts.json) {\n    logJson(report);\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(report));\n    }\n    return;\n  }\n\n  process.stdout.write(`CVEs found: ${report.cveIds.length}\\n`);\n  process.stdout.write(`Remediation reports: ${report.reports.length}\\n`);\n  process.stdout.write(`Successful remediations: ${report.successCount}\\n`);\n  process.stdout.write(`Failed remediations: ${report.failedCount}\\n`);\n  const strategyCounts = formatCountMap(report.strategyCounts);\n  if (strategyCounts) {\n    process.stdout.write(`Strategy counts: ${strategyCounts}\\n`);\n  }\n  const dependencyScopeCounts = formatCountMap(report.dependencyScopeCounts);\n  if (dependencyScopeCounts) {\n    process.stdout.write(`Dependency scope counts: ${dependencyScopeCounts}\\n`);\n  }\n  const unresolvedByReason = formatCountMap(report.unresolvedByReason);\n  if (unresolvedByReason) {\n    process.stdout.write(`Unresolved reasons: ${unresolvedByReason}\\n`);\n  }\n  if (report.evidenceFile) {\n    process.stdout.write(`Evidence: ${report.evidenceFile}\\n`);\n  }\n\n  if (report.errors.length > 0) {\n    for (const error of report.errors) {\n      process.stdout.write(`Error ${error.cveId}: ${error.message}\\n`);\n    }\n  }\n\n  if (opts.ci) {\n    process.exitCode = ciExitCode(toCiSummary(report));\n  }\n}\n","export function logJson(value: unknown): void {\n  process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n}\n\nexport function formatCountMap(counts: Record<string, number> | undefined): string | undefined {\n  if (!counts) return undefined;\n\n  const entries = Object.entries(counts).filter(([, value]) => value > 0);\n  if (entries.length === 0) return undefined;\n\n  return entries.map(([key, value]) => `${key}=${value}`).join(\", \");\n}\n","export type ScanFormat = \"auto\" | \"npm-audit\" | \"yarn-audit\" | \"sarif\";\n\nexport interface CommandOptions {\n  cwd: string;\n  packageManager?: \"npm\" | \"pnpm\" | \"yarn\";\n  patchesDir?: string;\n  dryRun: boolean;\n  preview: boolean;\n  runTests: boolean;\n  json: boolean;\n  outputFormat: \"json\" | \"sarif\";\n  llmProvider?: \"openai\" | \"anthropic\" | \"local\";\n  requestId?: string;\n  sessionId?: string;\n  parentRunId?: string;\n  idempotencyKey?: string;\n  resume: boolean;\n  actor?: string;\n  source?: \"cli\" | \"sdk\" | \"mcp\" | \"openapi\" | \"unknown\";\n  directDependenciesOnly: boolean;\n  preferVersionBump: boolean;\n  input?: string;\n  format: ScanFormat;\n  policy?: string;\n  evidence: boolean;\n  ci: boolean;\n  summaryFile?: string;\n}\n\nexport function isCveId(value: string): boolean {\n  return /^CVE-\\d{4}-\\d+$/i.test(value);\n}\n"],"mappings":";;;;;;;;;;;;;;AAGA,SAAS,qBAAqB;;;ACH9B,SAAS,eAAe;AAExB,SAAS,kBAAkB;;;ACM3B,SAAS,qBAAqB;;;ACRvB,SAAS,QAAQ,OAAsB;AAC5C,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAC5D;AAEO,SAAS,eAAe,QAAgE;AAC7F,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,QAAQ,CAAC;AACtE,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,SAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,IAAI;AACnE;;;ADCA,SAAS,sBAAsB,QAA2D;AACxF,SAAO;AAAA,IACL,eAAe;AAAA,IACf,QAAQ,OAAO,QAAQ,KAAK,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,IACrE,OAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,OAAO,MAAM,IAC7D,YACA,WACF;AAAA,IACJ,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,QAAQ,CAAC,OAAO,KAAK;AAAA,IACrB,SAAS,CAAC,MAAM;AAAA,IAChB,cAAc,OAAO,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,OAAO,MAAM,EAAE;AAAA,IACjF,aAAa,OAAO,QAAQ,OAAO,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,EAAE;AAAA,IAClF,QAAQ,CAAC;AAAA,IACT,cAAc,OAAO;AAAA,IACrB,YAAY,OAAO,QAAQ,OAAO,CAAC,WAAW,OAAO,aAAa,YAAY,EAAE;AAAA,IAChF,aAAa,OAAO;AAAA,IACpB,YAAY,OAAO;AAAA,IACnB,aAAa,OAAO;AAAA,EACtB;AACF;AAEA,eAAsB,aAAa,OAAe,MAAqC;AACrF,QAAM,SAAS,MAAM,UAAU,OAAO;AAAA,IACpC,KAAK,KAAK;AAAA,IACV,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,YAAY,KAAK;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,aAAa,KAAK;AAAA,IAClB,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,IAChB,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,aAAa;AAAA,MACX,wBAAwB,KAAK;AAAA,MAC7B,mBAAmB,KAAK;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,QAAM,eAAe,sBAAsB,MAAM;AAEjD,MAAI,KAAK,iBAAiB,SAAS;AACjC,YAAQ,cAAc,YAAY,CAAC;AACnC,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,IACzD;AACA;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,YAAQ,MAAM;AACd,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,IACzD;AACA;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,GAAG,OAAO,OAAO;AAAA,CAAI;AAC1C,UAAQ,OAAO,MAAM,YAAY,OAAO,QAAQ,MAAM;AAAA,CAAI;AAC1D,MAAI,OAAO,cAAc;AACvB,YAAQ,OAAO,MAAM,aAAa,OAAO,YAAY;AAAA,CAAI;AAAA,EAC3D;AACA,MAAI,KAAK,IAAI;AACX,YAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,EACzD;AACF;AAEA,eAAsB,aAAa,WAAmB,MAAqC;AACzF,QAAM,SAAS,MAAM,kBAAkB,WAAW;AAAA,IAChD,KAAK,KAAK;AAAA,IACV,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,IAChB,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,aAAa;AAAA,MACX,wBAAwB,KAAK;AAAA,MAC7B,mBAAmB,KAAK;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,MAAI,KAAK,aAAa;AACpB,UAAM,UAAU,YAAY,MAAM;AAClC,kBAAc,KAAK,aAAa,KAAK,UAAU,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM;AAAA,EACjF;AAEA,MAAI,KAAK,iBAAiB,SAAS;AACjC,YAAQ,cAAc,MAAM,CAAC;AAC7B,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,IACnD;AACA;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,YAAQ,MAAM;AACd,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,IACnD;AACA;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,eAAe,OAAO,OAAO,MAAM;AAAA,CAAI;AAC5D,UAAQ,OAAO,MAAM,wBAAwB,OAAO,QAAQ,MAAM;AAAA,CAAI;AACtE,UAAQ,OAAO,MAAM,4BAA4B,OAAO,YAAY;AAAA,CAAI;AACxE,UAAQ,OAAO,MAAM,wBAAwB,OAAO,WAAW;AAAA,CAAI;AACnE,QAAM,iBAAiB,eAAe,OAAO,cAAc;AAC3D,MAAI,gBAAgB;AAClB,YAAQ,OAAO,MAAM,oBAAoB,cAAc;AAAA,CAAI;AAAA,EAC7D;AACA,QAAM,wBAAwB,eAAe,OAAO,qBAAqB;AACzE,MAAI,uBAAuB;AACzB,YAAQ,OAAO,MAAM,4BAA4B,qBAAqB;AAAA,CAAI;AAAA,EAC5E;AACA,QAAM,qBAAqB,eAAe,OAAO,kBAAkB;AACnE,MAAI,oBAAoB;AACtB,YAAQ,OAAO,MAAM,uBAAuB,kBAAkB;AAAA,CAAI;AAAA,EACpE;AACA,MAAI,OAAO,cAAc;AACvB,YAAQ,OAAO,MAAM,aAAa,OAAO,YAAY;AAAA,CAAI;AAAA,EAC3D;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,cAAQ,OAAO,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO;AAAA,CAAI;AAAA,IACjE;AAAA,EACF;AAEA,MAAI,KAAK,IAAI;AACX,YAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,EACnD;AACF;;;AEpIO,SAAS,QAAQ,OAAwB;AAC9C,SAAO,mBAAmB,KAAK,KAAK;AACtC;;;AHvBA,SAAS,iBAAiB,SAAkB,eAAe,OAAgB;AACzE,UACG,OAAO,gBAAgB,oBAAoB,KAAK,QAAQ,IAAI,CAAC,EAC7D,OAAO,4BAA4B,oBAAoB,cAAc,EACrE,OAAO,wBAAwB,oBAAoB,UAAU,EAC7D,OAAO,aAAa,oBAAoB,QAAQ,KAAK,EACrD,OAAO,aAAa,oBAAoB,SAAS,KAAK,EACtD,OAAO,eAAe,oBAAoB,UAAU,KAAK,EACzD,OAAO,6BAA6B,oBAAoB,WAAW,EACnE,OAAO,qBAAqB,oBAAoB,SAAS,EACzD,OAAO,qBAAqB,oBAAoB,SAAS,EACzD,OAAO,wBAAwB,oBAAoB,WAAW,EAC9D,OAAO,2BAA2B,oBAAoB,cAAc,EACpE,OAAO,YAAY,oBAAoB,QAAQ,KAAK,EACpD,OAAO,kBAAkB,oBAAoB,KAAK,EAClD,OAAO,kBAAkB,GAAG,oBAAoB,MAAM,+BAA+B,EACrF,OAAO,8BAA8B,oBAAoB,wBAAwB,KAAK,EACtF,OAAO,yBAAyB,oBAAoB,mBAAmB,KAAK,EAC5E,OAAO,mBAAmB,oBAAoB,MAAM,EACpD,OAAO,cAAc,oBAAoB,UAAU,IAAI,EACvD,OAAO,iBAAiB,8BAA8B,EACtD,OAAO,QAAQ,6DAA6D,KAAK,EACjF,OAAO,4BAA4B,6BAA6B,MAAM,EACtE,OAAO,UAAU,qBAAqB,KAAK;AAE9C,MAAI,cAAc;AAChB,YAAQ,OAAO,kBAAkB,GAAG,oBAAoB,SAAS,uBAAuB;AAAA,EAC1F;AAEA,SAAO;AACT;AAEO,SAAS,gBAAyB;AACvC,QAAM,UAAU,IAAI,QAAQ;AAE5B,UACG,KAAK,gBAAgB,EACrB,YAAY,2DAA2D,EACvE,QAAQ,eAAe,EACvB,mBAAmB;AAEtB;AAAA,IACE,QACG,QAAQ,KAAK,EACb,YAAY,2BAA2B,EACvC,SAAS,WAAW,oBAAoB,KAAK;AAAA,IAChD;AAAA,EACF,EAAE,OAAO,OAAO,OAAe,MAAsB,YAAqB;AACxE,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAI,QAAQ,gBAAgB;AAAA,IAC9B;AACA,UAAM,aAAa,OAAO,MAAM;AAAA,EAClC,CAAC;AAED;AAAA,IACE,QACG,QAAQ,MAAM,EACd,YAAY,mFAAmF,EAC/F,eAAe,kBAAkB,oBAAoB,SAAS,EAC9D,OAAO,mBAAmB,oBAAoB,QAAQ,MAAM,EAC5D,OAAO,yBAAyB,kDAAkD;AAAA,IACrF;AAAA,EACF,EAAE,OAAO,OAAO,SAAyB;AACvC,UAAM,aAAa,KAAK,OAAQ,IAAI;AAAA,EACtC,CAAC;AAED;AAAA,IACE,QACG,SAAS,YAAY,+CAA+C,EACpE,OAAO,mBAAmB,oBAAoB,QAAQ,MAAM,EAC5D,OAAO,yBAAyB,kDAAkD;AAAA,IACrF;AAAA,EACF,EAAE,OAAO,OAAO,QAA4B,SAAyB;AACnE,QAAI,KAAK,OAAO;AACd,YAAM,aAAa,KAAK,OAAO,IAAI;AACnC;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ;AACX,cAAQ,WAAW;AACnB;AAAA,IACF;AAEA,QAAI,QAAQ,MAAM,GAAG;AACnB,YAAM,aAAa,QAAQ,IAAI;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,MAAM,GAAG;AACtB,YAAM,aAAa,QAAQ,IAAI;AAC/B;AAAA,IACF;AAEA,UAAM,IAAI;AAAA,MACR,WAAW,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;ADtGO,SAASA,iBAAyB;AACvC,SAAO,cAAiB;AAC1B;AAEA,eAAe,KAAK,OAAO,QAAQ,MAAqB;AACtD,QAAM,UAAUA,eAAc;AAC9B,QAAM,QAAQ,WAAW,IAAI;AAC/B;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,SAAO,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC;AAC1D;AAEA,IAAI,aAAa,GAAG;AAClB,OAAK,EAAE,MAAM,CAAC,UAAU;AACtB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,OAAO,MAAM,oBAAoB,OAAO;AAAA,CAAI;AACpD,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":["createProgram"]}
+{"version":3,"sources":["../src/cli/index.ts","../src/cli/program.ts","../src/cli/runners.ts","../src/cli/output.ts","../src/cli/types.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from \"commander\";\nimport { fileURLToPath } from \"node:url\";\nimport { createProgram as createCliProgram } from \"./program.js\";\n\nexport function createProgram(): Command {\n  return createCliProgram();\n}\n\nasync function main(argv = process.argv): Promise<void> {\n  const program = createProgram();\n  await program.parseAsync(argv);\n}\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  return fileURLToPath(import.meta.url) === process.argv[1];\n}\n\nif (isMainModule()) {\n  main().catch((error) => {\n    const message = error instanceof Error ? error.message : String(error);\n    process.stderr.write(`[autoremediator] ${message}\\n`);\n    process.exit(1);\n  });\n}\n","import { Command } from \"commander\";\nimport { OPTION_DESCRIPTIONS } from \"../api/index.js\";\nimport { existsSync } from \"node:fs\";\nimport { PACKAGE_VERSION } from \"../version\";\nimport { runInspectPatch, runListPatches, runScanInput, runSingleCve, runValidatePatch } from \"./runners.js\";\nimport type { CommandOptions } from \"./types.js\";\nimport { isCveId } from \"./types.js\";\n\nfunction addSharedOptions(program: Command, includeInput = false): Command {\n  const parseBooleanFlag = (value: string): boolean => value === \"true\";\n\n  program\n    .option(\"--cwd <path>\", OPTION_DESCRIPTIONS.cwd, process.cwd())\n    .option(\"--package-manager <name>\", OPTION_DESCRIPTIONS.packageManager)\n    .option(\"--patches-dir <path>\", OPTION_DESCRIPTIONS.patchesDir)\n    .option(\"--dry-run\", OPTION_DESCRIPTIONS.dryRun, false)\n    .option(\"--preview\", OPTION_DESCRIPTIONS.preview, false)\n    .option(\"--run-tests\", OPTION_DESCRIPTIONS.runTests, false)\n    .option(\"--llm-provider <provider>\", OPTION_DESCRIPTIONS.llmProvider)\n    .option(\"--model <name>\", OPTION_DESCRIPTIONS.model)\n    .option(\"--model-personality <profile>\", OPTION_DESCRIPTIONS.modelPersonality)\n    .option(\"--provider-safety-profile <profile>\", OPTION_DESCRIPTIONS.providerSafetyProfile)\n    .option(\"--require-consensus-for-high-risk\", OPTION_DESCRIPTIONS.requireConsensusForHighRisk, false)\n    .option(\"--consensus-provider <provider>\", OPTION_DESCRIPTIONS.consensusProvider)\n    .option(\"--consensus-model <name>\", OPTION_DESCRIPTIONS.consensusModel)\n    .option(\n      \"--patch-confidence-low <value>\",\n      OPTION_DESCRIPTIONS.patchConfidenceThresholdLow,\n      (value: string) => parseFloat(value)\n    )\n    .option(\n      \"--patch-confidence-medium <value>\",\n      OPTION_DESCRIPTIONS.patchConfidenceThresholdMedium,\n      (value: string) => parseFloat(value)\n    )\n    .option(\n      \"--patch-confidence-high <value>\",\n      OPTION_DESCRIPTIONS.patchConfidenceThresholdHigh,\n      (value: string) => parseFloat(value)\n    )\n    .option(\"--dynamic-model-routing\", OPTION_DESCRIPTIONS.dynamicModelRouting, false)\n    .option(\n      \"--dynamic-routing-threshold-chars <count>\",\n      OPTION_DESCRIPTIONS.dynamicRoutingThresholdChars,\n      (value: string) => parseInt(value, 10)\n    )\n    .option(\"--request-id <id>\", OPTION_DESCRIPTIONS.requestId)\n    .option(\"--session-id <id>\", OPTION_DESCRIPTIONS.sessionId)\n    .option(\"--parent-run-id <id>\", OPTION_DESCRIPTIONS.parentRunId)\n    .option(\"--idempotency-key <key>\", OPTION_DESCRIPTIONS.idempotencyKey)\n    .option(\"--resume\", OPTION_DESCRIPTIONS.resume, false)\n    .option(\"--actor <name>\", OPTION_DESCRIPTIONS.actor)\n    .option(\"--source <src>\", `${OPTION_DESCRIPTIONS.source}: cli|sdk|mcp|openapi|unknown`)\n    .option(\"--direct-dependencies-only\", OPTION_DESCRIPTIONS.directDependenciesOnly, false)\n    .option(\"--prefer-version-bump\", OPTION_DESCRIPTIONS.preferVersionBump, false)\n    .option(\"--install-mode <mode>\", OPTION_DESCRIPTIONS.installMode)\n    .option(\n      \"--install-prefer-offline <value>\",\n      `${OPTION_DESCRIPTIONS.installPreferOffline} (true|false)`,\n      parseBooleanFlag\n    )\n    .option(\n      \"--enforce-frozen-lockfile <value>\",\n      `${OPTION_DESCRIPTIONS.enforceFrozenLockfile} (true|false)`,\n      parseBooleanFlag\n    )\n    .option(\"--workspace <name>\", OPTION_DESCRIPTIONS.workspace)\n    .option(\"--audit\", OPTION_DESCRIPTIONS.audit, false)\n    .option(\"--policy <path>\", OPTION_DESCRIPTIONS.policy)\n    .option(\"--evidence\", OPTION_DESCRIPTIONS.evidence, true)\n    .option(\"--no-evidence\", \"Disable evidence file output\")\n    .option(\"--ci\", \"Enable CI behavior (non-zero exit on failed remediations)\", false)\n    .option(\"--output-format <format>\", \"Output format: json|sarif\", \"json\")\n    .option(\"--json\", \"Print JSON output\", false);\n\n  if (includeInput) {\n    program.option(\"--input <path>\", `${OPTION_DESCRIPTIONS.inputPath} (scanner-first mode)`);\n  }\n\n  return program;\n}\n\nexport function createProgram(): Command {\n  const program = new Command();\n\n  program\n    .name(\"autoremediator\")\n    .description(\"Scanner-first Node.js vulnerability auto-remediation tool\")\n    .version(PACKAGE_VERSION)\n    .showHelpAfterError();\n\n  addSharedOptions(\n    program\n      .command(\"cve\")\n      .description(\"Remediate a single CVE ID\")\n      .argument(\"<cveId>\", OPTION_DESCRIPTIONS.cveId),\n    false\n  ).action(async (cveId: string, opts: CommandOptions, command: Command) => {\n    const merged = {\n      ...opts,\n      ...(command.optsWithGlobals() as Partial<CommandOptions>),\n    } as CommandOptions;\n    await runSingleCve(cveId, merged);\n  });\n\n  addSharedOptions(\n    program\n      .command(\"scan\")\n      .description(\"Remediate vulnerabilities from scanner output (npm/pnpm/yarn audit JSON or SARIF)\")\n      .option(\"--input <path>\", OPTION_DESCRIPTIONS.inputPath)\n      .option(\"--format <type>\", OPTION_DESCRIPTIONS.format, \"auto\")\n      .option(\"--summary-file <path>\", \"Write machine-readable scan summary JSON to path\"),\n    false\n  ).action(async (opts: CommandOptions, command: Command) => {\n    const merged = {\n      ...opts,\n      ...(command.optsWithGlobals() as Partial<CommandOptions>),\n    } as CommandOptions;\n\n    if (!merged.audit && !merged.input) {\n      throw new Error(\"scan mode requires --input unless --audit is enabled.\");\n    }\n    await runScanInput(merged.input ?? \"\", merged);\n  });\n\n  const patches = program.command(\"patches\").description(\"Inspect and validate stored patch artifacts\");\n\n  patches\n    .command(\"list\")\n    .description(\"List patch artifacts in the configured patches directory\")\n    .option(\"--cwd <path>\", OPTION_DESCRIPTIONS.cwd, process.cwd())\n    .option(\"--patches-dir <path>\", OPTION_DESCRIPTIONS.patchesDir)\n    .option(\"--json\", \"Print JSON output\", false)\n    .action(async (opts: Pick<CommandOptions, \"cwd\" | \"patchesDir\" | \"json\">, command: Command) => {\n      const merged = {\n        ...(command.optsWithGlobals() as Partial<CommandOptions>),\n        ...opts,\n      } as Pick<CommandOptions, \"cwd\" | \"patchesDir\" | \"json\">;\n      await runListPatches(merged);\n    });\n\n  patches\n    .command(\"inspect\")\n    .description(\"Inspect a patch artifact and its manifest metadata\")\n    .argument(\"<patchPath>\", \"Path to the .patch file to inspect\")\n    .option(\"--cwd <path>\", OPTION_DESCRIPTIONS.cwd, process.cwd())\n    .option(\"--json\", \"Print JSON output\", false)\n    .action(async (patchPath: string, opts: Pick<CommandOptions, \"cwd\" | \"json\">, command: Command) => {\n      const merged = {\n        ...(command.optsWithGlobals() as Partial<CommandOptions>),\n        ...opts,\n      } as Pick<CommandOptions, \"cwd\" | \"json\">;\n      await runInspectPatch(patchPath, merged);\n    });\n\n  patches\n    .command(\"validate\")\n    .description(\"Validate a patch artifact against its manifest and the current dependency inventory\")\n    .argument(\"<patchPath>\", \"Path to the .patch file to validate\")\n    .option(\"--cwd <path>\", OPTION_DESCRIPTIONS.cwd, process.cwd())\n    .option(\"--package-manager <name>\", OPTION_DESCRIPTIONS.packageManager)\n    .option(\"--json\", \"Print JSON output\", false)\n    .action(async (patchPath: string, opts: Pick<CommandOptions, \"cwd\" | \"packageManager\" | \"json\">, command: Command) => {\n      const merged = {\n        ...(command.optsWithGlobals() as Partial<CommandOptions>),\n        ...opts,\n      } as Pick<CommandOptions, \"cwd\" | \"packageManager\" | \"json\">;\n      await runValidatePatch(patchPath, merged);\n    });\n\n  addSharedOptions(\n    program\n      .argument(\"[target]\", \"Scanner output file path (or CVE ID fallback)\")\n      .option(\"--format <type>\", OPTION_DESCRIPTIONS.format, \"auto\")\n      .option(\"--summary-file <path>\", \"Write machine-readable scan summary JSON to path\"),\n    true\n  ).action(async (target: string | undefined, opts: CommandOptions) => {\n    if (opts.audit) {\n      await runScanInput(opts.input ?? target ?? \"\", opts);\n      return;\n    }\n\n    if (opts.input) {\n      await runScanInput(opts.input, opts);\n      return;\n    }\n\n    if (!target) {\n      program.outputHelp();\n      return;\n    }\n\n    if (isCveId(target)) {\n      await runSingleCve(target, opts);\n      return;\n    }\n\n    if (existsSync(target)) {\n      await runScanInput(target, opts);\n      return;\n    }\n\n    throw new Error(\n      `Target \"${target}\" is neither a valid CVE ID nor an existing scan file path.`\n    );\n  });\n\n  return program;\n}\n","import {\n  ciExitCode,\n  inspectPatchArtifact,\n  listPatchArtifacts,\n  remediate,\n  remediateFromScan,\n  type ScanReport,\n  toCiSummary,\n  toSarifOutput,\n  validatePatchArtifact,\n} from \"../api/index.js\";\nimport { writeFileSync } from \"node:fs\";\nimport { formatCountMap, logJson } from \"./output.js\";\nimport type { CommandOptions } from \"./types.js\";\n\nfunction asSingleCveScanReport(report: Awaited<ReturnType<typeof remediate>>): ScanReport {\n  return {\n    schemaVersion: \"1.0\",\n    status: report.results.some((result) => !result.applied && !result.dryRun)\n      ? report.results.some((result) => result.applied || result.dryRun)\n        ? \"partial\"\n        : \"failed\"\n      : \"ok\",\n    generatedAt: new Date().toISOString(),\n    cveIds: [report.cveId],\n    reports: [report],\n    successCount: report.results.filter((result) => result.applied || result.dryRun).length,\n    failedCount: report.results.filter((result) => !result.applied && !result.dryRun).length,\n    errors: [],\n    evidenceFile: report.evidenceFile,\n    patchCount: report.results.filter((result) => result.strategy === \"patch-file\").length,\n    correlation: report.correlation,\n    provenance: report.provenance,\n    constraints: report.constraints,\n  };\n}\n\nexport async function runSingleCve(cveId: string, opts: CommandOptions): Promise<void> {\n  const report = await remediate(cveId, {\n    cwd: opts.cwd,\n    packageManager: opts.packageManager,\n    dryRun: opts.dryRun,\n    preview: opts.preview,\n    runTests: opts.runTests,\n    patchesDir: opts.patchesDir,\n    policy: opts.policy,\n    evidence: opts.evidence,\n    llmProvider: opts.llmProvider,\n    model: opts.model,\n    modelPersonality: opts.modelPersonality,\n    providerSafetyProfile: opts.providerSafetyProfile,\n    requireConsensusForHighRisk: opts.requireConsensusForHighRisk,\n    consensusProvider: opts.consensusProvider,\n    consensusModel: opts.consensusModel,\n    patchConfidenceThresholds: {\n      low: typeof opts.patchConfidenceLow === \"number\" ? opts.patchConfidenceLow : undefined,\n      medium: typeof opts.patchConfidenceMedium === \"number\" ? opts.patchConfidenceMedium : undefined,\n      high: typeof opts.patchConfidenceHigh === \"number\" ? opts.patchConfidenceHigh : undefined,\n    },\n    dynamicModelRouting: opts.dynamicModelRouting,\n    dynamicRoutingThresholdChars:\n      typeof opts.dynamicRoutingThresholdChars === \"number\"\n        ? opts.dynamicRoutingThresholdChars\n        : undefined,\n    requestId: opts.requestId,\n    sessionId: opts.sessionId,\n    parentRunId: opts.parentRunId,\n    idempotencyKey: opts.idempotencyKey,\n    resume: opts.resume,\n    actor: opts.actor,\n    source: opts.source ?? \"cli\",\n    constraints: {\n      directDependenciesOnly: opts.directDependenciesOnly,\n      preferVersionBump: opts.preferVersionBump,\n      installMode: opts.installMode,\n      installPreferOffline: opts.installPreferOffline,\n      enforceFrozenLockfile: opts.enforceFrozenLockfile,\n      workspace: opts.workspace,\n    },\n  });\n\n  const reportAsScan = asSingleCveScanReport(report);\n\n  if (opts.outputFormat === \"sarif\") {\n    logJson(toSarifOutput(reportAsScan));\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n    }\n    return;\n  }\n\n  if (opts.json) {\n    logJson(report);\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n    }\n    return;\n  }\n\n  process.stdout.write(`${report.summary}\\n`);\n  process.stdout.write(`Results: ${report.results.length}\\n`);\n  if (report.evidenceFile) {\n    process.stdout.write(`Evidence: ${report.evidenceFile}\\n`);\n  }\n  if (opts.ci) {\n    process.exitCode = ciExitCode(toCiSummary(reportAsScan));\n  }\n}\n\nexport async function runScanInput(inputPath: string, opts: CommandOptions): Promise<void> {\n  const report = await remediateFromScan(inputPath, {\n    cwd: opts.cwd,\n    packageManager: opts.packageManager,\n    format: opts.format,\n    audit: opts.audit,\n    policy: opts.policy,\n    patchesDir: opts.patchesDir,\n    dryRun: opts.dryRun,\n    preview: opts.preview,\n    runTests: opts.runTests,\n    llmProvider: opts.llmProvider,\n    model: opts.model,\n    modelPersonality: opts.modelPersonality,\n    providerSafetyProfile: opts.providerSafetyProfile,\n    requireConsensusForHighRisk: opts.requireConsensusForHighRisk,\n    consensusProvider: opts.consensusProvider,\n    consensusModel: opts.consensusModel,\n    patchConfidenceThresholds: {\n      low: typeof opts.patchConfidenceLow === \"number\" ? opts.patchConfidenceLow : undefined,\n      medium: typeof opts.patchConfidenceMedium === \"number\" ? opts.patchConfidenceMedium : undefined,\n      high: typeof opts.patchConfidenceHigh === \"number\" ? opts.patchConfidenceHigh : undefined,\n    },\n    dynamicModelRouting: opts.dynamicModelRouting,\n    dynamicRoutingThresholdChars:\n      typeof opts.dynamicRoutingThresholdChars === \"number\"\n        ? opts.dynamicRoutingThresholdChars\n        : undefined,\n    evidence: opts.evidence,\n    requestId: opts.requestId,\n    sessionId: opts.sessionId,\n    parentRunId: opts.parentRunId,\n    idempotencyKey: opts.idempotencyKey,\n    resume: opts.resume,\n    actor: opts.actor,\n    source: opts.source ?? \"cli\",\n    constraints: {\n      directDependenciesOnly: opts.directDependenciesOnly,\n      preferVersionBump: opts.preferVersionBump,\n      installMode: opts.installMode,\n      installPreferOffline: opts.installPreferOffline,\n      enforceFrozenLockfile: opts.enforceFrozenLockfile,\n      workspace: opts.workspace,\n    },\n  });\n\n  if (opts.summaryFile) {\n    const summary = toCiSummary(report);\n    writeFileSync(opts.summaryFile, JSON.stringify(summary, null, 2) + \"\\n\", \"utf8\");\n  }\n\n  if (opts.outputFormat === \"sarif\") {\n    logJson(toSarifOutput(report));\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(report));\n    }\n    return;\n  }\n\n  if (opts.json) {\n    logJson(report);\n    if (opts.ci) {\n      process.exitCode = ciExitCode(toCiSummary(report));\n    }\n    return;\n  }\n\n  process.stdout.write(`CVEs found: ${report.cveIds.length}\\n`);\n  process.stdout.write(`Remediation reports: ${report.reports.length}\\n`);\n  process.stdout.write(`Successful remediations: ${report.successCount}\\n`);\n  process.stdout.write(`Failed remediations: ${report.failedCount}\\n`);\n  const strategyCounts = formatCountMap(report.strategyCounts);\n  if (strategyCounts) {\n    process.stdout.write(`Strategy counts: ${strategyCounts}\\n`);\n  }\n  const dependencyScopeCounts = formatCountMap(report.dependencyScopeCounts);\n  if (dependencyScopeCounts) {\n    process.stdout.write(`Dependency scope counts: ${dependencyScopeCounts}\\n`);\n  }\n  const unresolvedByReason = formatCountMap(report.unresolvedByReason);\n  if (unresolvedByReason) {\n    process.stdout.write(`Unresolved reasons: ${unresolvedByReason}\\n`);\n  }\n  if (report.evidenceFile) {\n    process.stdout.write(`Evidence: ${report.evidenceFile}\\n`);\n  }\n\n  if (report.errors.length > 0) {\n    for (const error of report.errors) {\n      process.stdout.write(`Error ${error.cveId}: ${error.message}\\n`);\n    }\n  }\n\n  if (opts.ci) {\n    process.exitCode = ciExitCode(toCiSummary(report));\n  }\n}\n\nexport async function runListPatches(opts: Pick<CommandOptions, \"cwd\" | \"patchesDir\" | \"json\">): Promise<void> {\n  const patches = await listPatchArtifacts({\n    cwd: opts.cwd,\n    patchesDir: opts.patchesDir,\n  });\n\n  if (opts.json) {\n    logJson(patches);\n    return;\n  }\n\n  process.stdout.write(`Patch artifacts: ${patches.length}\\n`);\n  for (const patch of patches) {\n    process.stdout.write(`- ${patch.patchFileName}`);\n    if (patch.packageName && patch.vulnerableVersion) {\n      process.stdout.write(` (${patch.packageName}@${patch.vulnerableVersion})`);\n    }\n    if (patch.confidence !== undefined) {\n      process.stdout.write(` confidence=${patch.confidence.toFixed(2)}`);\n    }\n    if (patch.riskLevel) {\n      process.stdout.write(` risk=${patch.riskLevel}`);\n    }\n    process.stdout.write(`\\n`);\n  }\n}\n\nexport async function runInspectPatch(\n  patchPath: string,\n  opts: Pick<CommandOptions, \"cwd\" | \"json\">\n): Promise<void> {\n  const inspection = await inspectPatchArtifact(patchPath, { cwd: opts.cwd });\n\n  if (opts.json) {\n    logJson(inspection);\n    return;\n  }\n\n  process.stdout.write(`Patch: ${inspection.patchFilePath}\\n`);\n  process.stdout.write(`Exists: ${inspection.exists}\\n`);\n  process.stdout.write(`Diff valid: ${inspection.diffValid}\\n`);\n  if (inspection.packageName && inspection.vulnerableVersion) {\n    process.stdout.write(`Target: ${inspection.packageName}@${inspection.vulnerableVersion}\\n`);\n  }\n  if (inspection.manifestFilePath) {\n    process.stdout.write(`Manifest: ${inspection.manifestFilePath}\\n`);\n  }\n  if (inspection.files?.length) {\n    process.stdout.write(`Files: ${inspection.files.join(\", \")}\\n`);\n  }\n  if (inspection.formatError) {\n    process.stdout.write(`Format error: ${inspection.formatError}\\n`);\n  }\n}\n\nexport async function runValidatePatch(\n  patchPath: string,\n  opts: Pick<CommandOptions, \"cwd\" | \"packageManager\" | \"json\">\n): Promise<void> {\n  const report = await validatePatchArtifact(patchPath, {\n    cwd: opts.cwd,\n    packageManager: opts.packageManager,\n  });\n\n  if (opts.json) {\n    logJson(report);\n    return;\n  }\n\n  process.stdout.write(`Patch: ${report.patchFilePath}\\n`);\n  process.stdout.write(`Exists: ${report.exists}\\n`);\n  process.stdout.write(`Manifest found: ${report.manifestFound}\\n`);\n  process.stdout.write(`Diff valid: ${report.diffValid}\\n`);\n  process.stdout.write(`Drift detected: ${report.driftDetected}\\n`);\n  if (report.packageName && report.vulnerableVersion) {\n    process.stdout.write(`Target: ${report.packageName}@${report.vulnerableVersion}\\n`);\n  }\n  if (report.installedVersion) {\n    process.stdout.write(`Installed version: ${report.installedVersion}\\n`);\n  }\n  for (const phase of report.validationPhases) {\n    process.stdout.write(`Phase ${phase.phase}: ${phase.passed ? \"ok\" : \"failed\"}`);\n    if (phase.error) {\n      process.stdout.write(` (${phase.error})`);\n    }\n    process.stdout.write(`\\n`);\n  }\n}\n","export function logJson(value: unknown): void {\n  process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n}\n\nexport function formatCountMap(counts: Record<string, number> | undefined): string | undefined {\n  if (!counts) return undefined;\n\n  const entries = Object.entries(counts).filter(([, value]) => value > 0);\n  if (entries.length === 0) return undefined;\n\n  return entries.map(([key, value]) => `${key}=${value}`).join(\", \");\n}\n","export type ScanFormat = \"auto\" | \"npm-audit\" | \"yarn-audit\" | \"sarif\";\n\nexport interface CommandOptions {\n  cwd: string;\n  packageManager?: \"npm\" | \"pnpm\" | \"yarn\";\n  patchesDir?: string;\n  dryRun: boolean;\n  preview: boolean;\n  runTests: boolean;\n  json: boolean;\n  outputFormat: \"json\" | \"sarif\";\n  llmProvider?: \"remote\" | \"local\";\n  model?: string;\n  modelPersonality?: \"analytical\" | \"pragmatic\" | \"balanced\";\n  providerSafetyProfile?: \"strict\" | \"relaxed\";\n  requireConsensusForHighRisk: boolean;\n  consensusProvider?: \"remote\" | \"local\";\n  consensusModel?: string;\n  patchConfidenceLow?: number;\n  patchConfidenceMedium?: number;\n  patchConfidenceHigh?: number;\n  dynamicModelRouting: boolean;\n  dynamicRoutingThresholdChars?: number;\n  requestId?: string;\n  sessionId?: string;\n  parentRunId?: string;\n  idempotencyKey?: string;\n  resume: boolean;\n  actor?: string;\n  source?: \"cli\" | \"sdk\" | \"mcp\" | \"openapi\" | \"unknown\";\n  directDependenciesOnly: boolean;\n  preferVersionBump: boolean;\n  installMode?: \"standard\" | \"prefer-offline\" | \"deterministic\";\n  installPreferOffline?: boolean;\n  enforceFrozenLockfile?: boolean;\n  workspace?: string;\n  input?: string;\n  audit: boolean;\n  format: ScanFormat;\n  policy?: string;\n  evidence: boolean;\n  ci: boolean;\n  summaryFile?: string;\n}\n\nexport function isCveId(value: string): boolean {\n  return /^CVE-\\d{4}-\\d+$/i.test(value);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAGA,SAAS,qBAAqB;;;ACH9B,SAAS,eAAe;AAExB,SAAS,kBAAkB;;;ACS3B,SAAS,qBAAqB;;;ACXvB,SAAS,QAAQ,OAAsB;AAC5C,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAC5D;AAEO,SAAS,eAAe,QAAgE;AAC7F,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,QAAQ,CAAC;AACtE,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,SAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,IAAI;AACnE;;;ADIA,SAAS,sBAAsB,QAA2D;AACxF,SAAO;AAAA,IACL,eAAe;AAAA,IACf,QAAQ,OAAO,QAAQ,KAAK,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,IACrE,OAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,OAAO,MAAM,IAC7D,YACA,WACF;AAAA,IACJ,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,QAAQ,CAAC,OAAO,KAAK;AAAA,IACrB,SAAS,CAAC,MAAM;AAAA,IAChB,cAAc,OAAO,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,OAAO,MAAM,EAAE;AAAA,IACjF,aAAa,OAAO,QAAQ,OAAO,CAAC,WAAW,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,EAAE;AAAA,IAClF,QAAQ,CAAC;AAAA,IACT,cAAc,OAAO;AAAA,IACrB,YAAY,OAAO,QAAQ,OAAO,CAAC,WAAW,OAAO,aAAa,YAAY,EAAE;AAAA,IAChF,aAAa,OAAO;AAAA,IACpB,YAAY,OAAO;AAAA,IACnB,aAAa,OAAO;AAAA,EACtB;AACF;AAEA,eAAsB,aAAa,OAAe,MAAqC;AACrF,QAAM,SAAS,MAAM,UAAU,OAAO;AAAA,IACpC,KAAK,KAAK;AAAA,IACV,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,YAAY,KAAK;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,aAAa,KAAK;AAAA,IAClB,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK;AAAA,IACvB,uBAAuB,KAAK;AAAA,IAC5B,6BAA6B,KAAK;AAAA,IAClC,mBAAmB,KAAK;AAAA,IACxB,gBAAgB,KAAK;AAAA,IACrB,2BAA2B;AAAA,MACzB,KAAK,OAAO,KAAK,uBAAuB,WAAW,KAAK,qBAAqB;AAAA,MAC7E,QAAQ,OAAO,KAAK,0BAA0B,WAAW,KAAK,wBAAwB;AAAA,MACtF,MAAM,OAAO,KAAK,wBAAwB,WAAW,KAAK,sBAAsB;AAAA,IAClF;AAAA,IACA,qBAAqB,KAAK;AAAA,IAC1B,8BACE,OAAO,KAAK,iCAAiC,WACzC,KAAK,+BACL;AAAA,IACN,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,IAChB,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,aAAa;AAAA,MACX,wBAAwB,KAAK;AAAA,MAC7B,mBAAmB,KAAK;AAAA,MACxB,aAAa,KAAK;AAAA,MAClB,sBAAsB,KAAK;AAAA,MAC3B,uBAAuB,KAAK;AAAA,MAC5B,WAAW,KAAK;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,eAAe,sBAAsB,MAAM;AAEjD,MAAI,KAAK,iBAAiB,SAAS;AACjC,YAAQ,cAAc,YAAY,CAAC;AACnC,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,IACzD;AACA;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,YAAQ,MAAM;AACd,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,IACzD;AACA;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,GAAG,OAAO,OAAO;AAAA,CAAI;AAC1C,UAAQ,OAAO,MAAM,YAAY,OAAO,QAAQ,MAAM;AAAA,CAAI;AAC1D,MAAI,OAAO,cAAc;AACvB,YAAQ,OAAO,MAAM,aAAa,OAAO,YAAY;AAAA,CAAI;AAAA,EAC3D;AACA,MAAI,KAAK,IAAI;AACX,YAAQ,WAAW,WAAW,YAAY,YAAY,CAAC;AAAA,EACzD;AACF;AAEA,eAAsB,aAAa,WAAmB,MAAqC;AACzF,QAAM,SAAS,MAAM,kBAAkB,WAAW;AAAA,IAChD,KAAK,KAAK;AAAA,IACV,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,IACd,UAAU,KAAK;AAAA,IACf,aAAa,KAAK;AAAA,IAClB,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK;AAAA,IACvB,uBAAuB,KAAK;AAAA,IAC5B,6BAA6B,KAAK;AAAA,IAClC,mBAAmB,KAAK;AAAA,IACxB,gBAAgB,KAAK;AAAA,IACrB,2BAA2B;AAAA,MACzB,KAAK,OAAO,KAAK,uBAAuB,WAAW,KAAK,qBAAqB;AAAA,MAC7E,QAAQ,OAAO,KAAK,0BAA0B,WAAW,KAAK,wBAAwB;AAAA,MACtF,MAAM,OAAO,KAAK,wBAAwB,WAAW,KAAK,sBAAsB;AAAA,IAClF;AAAA,IACA,qBAAqB,KAAK;AAAA,IAC1B,8BACE,OAAO,KAAK,iCAAiC,WACzC,KAAK,+BACL;AAAA,IACN,UAAU,KAAK;AAAA,IACf,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,IAChB,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,aAAa;AAAA,MACX,wBAAwB,KAAK;AAAA,MAC7B,mBAAmB,KAAK;AAAA,MACxB,aAAa,KAAK;AAAA,MAClB,sBAAsB,KAAK;AAAA,MAC3B,uBAAuB,KAAK;AAAA,MAC5B,WAAW,KAAK;AAAA,IAClB;AAAA,EACF,CAAC;AAED,MAAI,KAAK,aAAa;AACpB,UAAM,UAAU,YAAY,MAAM;AAClC,kBAAc,KAAK,aAAa,KAAK,UAAU,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM;AAAA,EACjF;AAEA,MAAI,KAAK,iBAAiB,SAAS;AACjC,YAAQ,cAAc,MAAM,CAAC;AAC7B,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,IACnD;AACA;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,YAAQ,MAAM;AACd,QAAI,KAAK,IAAI;AACX,cAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,IACnD;AACA;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,eAAe,OAAO,OAAO,MAAM;AAAA,CAAI;AAC5D,UAAQ,OAAO,MAAM,wBAAwB,OAAO,QAAQ,MAAM;AAAA,CAAI;AACtE,UAAQ,OAAO,MAAM,4BAA4B,OAAO,YAAY;AAAA,CAAI;AACxE,UAAQ,OAAO,MAAM,wBAAwB,OAAO,WAAW;AAAA,CAAI;AACnE,QAAM,iBAAiB,eAAe,OAAO,cAAc;AAC3D,MAAI,gBAAgB;AAClB,YAAQ,OAAO,MAAM,oBAAoB,cAAc;AAAA,CAAI;AAAA,EAC7D;AACA,QAAM,wBAAwB,eAAe,OAAO,qBAAqB;AACzE,MAAI,uBAAuB;AACzB,YAAQ,OAAO,MAAM,4BAA4B,qBAAqB;AAAA,CAAI;AAAA,EAC5E;AACA,QAAM,qBAAqB,eAAe,OAAO,kBAAkB;AACnE,MAAI,oBAAoB;AACtB,YAAQ,OAAO,MAAM,uBAAuB,kBAAkB;AAAA,CAAI;AAAA,EACpE;AACA,MAAI,OAAO,cAAc;AACvB,YAAQ,OAAO,MAAM,aAAa,OAAO,YAAY;AAAA,CAAI;AAAA,EAC3D;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,cAAQ,OAAO,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO;AAAA,CAAI;AAAA,IACjE;AAAA,EACF;AAEA,MAAI,KAAK,IAAI;AACX,YAAQ,WAAW,WAAW,YAAY,MAAM,CAAC;AAAA,EACnD;AACF;AAEA,eAAsB,eAAe,MAA0E;AAC7G,QAAM,UAAU,MAAM,mBAAmB;AAAA,IACvC,KAAK,KAAK;AAAA,IACV,YAAY,KAAK;AAAA,EACnB,CAAC;AAED,MAAI,KAAK,MAAM;AACb,YAAQ,OAAO;AACf;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,oBAAoB,QAAQ,MAAM;AAAA,CAAI;AAC3D,aAAW,SAAS,SAAS;AAC3B,YAAQ,OAAO,MAAM,KAAK,MAAM,aAAa,EAAE;AAC/C,QAAI,MAAM,eAAe,MAAM,mBAAmB;AAChD,cAAQ,OAAO,MAAM,KAAK,MAAM,WAAW,IAAI,MAAM,iBAAiB,GAAG;AAAA,IAC3E;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,cAAQ,OAAO,MAAM,eAAe,MAAM,WAAW,QAAQ,CAAC,CAAC,EAAE;AAAA,IACnE;AACA,QAAI,MAAM,WAAW;AACnB,cAAQ,OAAO,MAAM,SAAS,MAAM,SAAS,EAAE;AAAA,IACjD;AACA,YAAQ,OAAO,MAAM;AAAA,CAAI;AAAA,EAC3B;AACF;AAEA,eAAsB,gBACpB,WACA,MACe;AACf,QAAM,aAAa,MAAM,qBAAqB,WAAW,EAAE,KAAK,KAAK,IAAI,CAAC;AAE1E,MAAI,KAAK,MAAM;AACb,YAAQ,UAAU;AAClB;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,UAAU,WAAW,aAAa;AAAA,CAAI;AAC3D,UAAQ,OAAO,MAAM,WAAW,WAAW,MAAM;AAAA,CAAI;AACrD,UAAQ,OAAO,MAAM,eAAe,WAAW,SAAS;AAAA,CAAI;AAC5D,MAAI,WAAW,eAAe,WAAW,mBAAmB;AAC1D,YAAQ,OAAO,MAAM,WAAW,WAAW,WAAW,IAAI,WAAW,iBAAiB;AAAA,CAAI;AAAA,EAC5F;AACA,MAAI,WAAW,kBAAkB;AAC/B,YAAQ,OAAO,MAAM,aAAa,WAAW,gBAAgB;AAAA,CAAI;AAAA,EACnE;AACA,MAAI,WAAW,OAAO,QAAQ;AAC5B,YAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,EAChE;AACA,MAAI,WAAW,aAAa;AAC1B,YAAQ,OAAO,MAAM,iBAAiB,WAAW,WAAW;AAAA,CAAI;AAAA,EAClE;AACF;AAEA,eAAsB,iBACpB,WACA,MACe;AACf,QAAM,SAAS,MAAM,sBAAsB,WAAW;AAAA,IACpD,KAAK,KAAK;AAAA,IACV,gBAAgB,KAAK;AAAA,EACvB,CAAC;AAED,MAAI,KAAK,MAAM;AACb,YAAQ,MAAM;AACd;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,UAAU,OAAO,aAAa;AAAA,CAAI;AACvD,UAAQ,OAAO,MAAM,WAAW,OAAO,MAAM;AAAA,CAAI;AACjD,UAAQ,OAAO,MAAM,mBAAmB,OAAO,aAAa;AAAA,CAAI;AAChE,UAAQ,OAAO,MAAM,eAAe,OAAO,SAAS;AAAA,CAAI;AACxD,UAAQ,OAAO,MAAM,mBAAmB,OAAO,aAAa;AAAA,CAAI;AAChE,MAAI,OAAO,eAAe,OAAO,mBAAmB;AAClD,YAAQ,OAAO,MAAM,WAAW,OAAO,WAAW,IAAI,OAAO,iBAAiB;AAAA,CAAI;AAAA,EACpF;AACA,MAAI,OAAO,kBAAkB;AAC3B,YAAQ,OAAO,MAAM,sBAAsB,OAAO,gBAAgB;AAAA,CAAI;AAAA,EACxE;AACA,aAAW,SAAS,OAAO,kBAAkB;AAC3C,YAAQ,OAAO,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,SAAS,OAAO,QAAQ,EAAE;AAC9E,QAAI,MAAM,OAAO;AACf,cAAQ,OAAO,MAAM,KAAK,MAAM,KAAK,GAAG;AAAA,IAC1C;AACA,YAAQ,OAAO,MAAM;AAAA,CAAI;AAAA,EAC3B;AACF;;;AEzPO,SAAS,QAAQ,OAAwB;AAC9C,SAAO,mBAAmB,KAAK,KAAK;AACtC;;;AHvCA,SAAS,iBAAiB,SAAkB,eAAe,OAAgB;AACzE,QAAM,mBAAmB,CAAC,UAA2B,UAAU;AAE/D,UACG,OAAO,gBAAgB,oBAAoB,KAAK,QAAQ,IAAI,CAAC,EAC7D,OAAO,4BAA4B,oBAAoB,cAAc,EACrE,OAAO,wBAAwB,oBAAoB,UAAU,EAC7D,OAAO,aAAa,oBAAoB,QAAQ,KAAK,EACrD,OAAO,aAAa,oBAAoB,SAAS,KAAK,EACtD,OAAO,eAAe,oBAAoB,UAAU,KAAK,EACzD,OAAO,6BAA6B,oBAAoB,WAAW,EACnE,OAAO,kBAAkB,oBAAoB,KAAK,EAClD,OAAO,iCAAiC,oBAAoB,gBAAgB,EAC5E,OAAO,uCAAuC,oBAAoB,qBAAqB,EACvF,OAAO,qCAAqC,oBAAoB,6BAA6B,KAAK,EAClG,OAAO,mCAAmC,oBAAoB,iBAAiB,EAC/E,OAAO,4BAA4B,oBAAoB,cAAc,EACrE;AAAA,IACC;AAAA,IACA,oBAAoB;AAAA,IACpB,CAAC,UAAkB,WAAW,KAAK;AAAA,EACrC,EACC;AAAA,IACC;AAAA,IACA,oBAAoB;AAAA,IACpB,CAAC,UAAkB,WAAW,KAAK;AAAA,EACrC,EACC;AAAA,IACC;AAAA,IACA,oBAAoB;AAAA,IACpB,CAAC,UAAkB,WAAW,KAAK;AAAA,EACrC,EACC,OAAO,2BAA2B,oBAAoB,qBAAqB,KAAK,EAChF;AAAA,IACC;AAAA,IACA,oBAAoB;AAAA,IACpB,CAAC,UAAkB,SAAS,OAAO,EAAE;AAAA,EACvC,EACC,OAAO,qBAAqB,oBAAoB,SAAS,EACzD,OAAO,qBAAqB,oBAAoB,SAAS,EACzD,OAAO,wBAAwB,oBAAoB,WAAW,EAC9D,OAAO,2BAA2B,oBAAoB,cAAc,EACpE,OAAO,YAAY,oBAAoB,QAAQ,KAAK,EACpD,OAAO,kBAAkB,oBAAoB,KAAK,EAClD,OAAO,kBAAkB,GAAG,oBAAoB,MAAM,+BAA+B,EACrF,OAAO,8BAA8B,oBAAoB,wBAAwB,KAAK,EACtF,OAAO,yBAAyB,oBAAoB,mBAAmB,KAAK,EAC5E,OAAO,yBAAyB,oBAAoB,WAAW,EAC/D;AAAA,IACC;AAAA,IACA,GAAG,oBAAoB,oBAAoB;AAAA,IAC3C;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA,GAAG,oBAAoB,qBAAqB;AAAA,IAC5C;AAAA,EACF,EACC,OAAO,sBAAsB,oBAAoB,SAAS,EAC1D,OAAO,WAAW,oBAAoB,OAAO,KAAK,EAClD,OAAO,mBAAmB,oBAAoB,MAAM,EACpD,OAAO,cAAc,oBAAoB,UAAU,IAAI,EACvD,OAAO,iBAAiB,8BAA8B,EACtD,OAAO,QAAQ,6DAA6D,KAAK,EACjF,OAAO,4BAA4B,6BAA6B,MAAM,EACtE,OAAO,UAAU,qBAAqB,KAAK;AAE9C,MAAI,cAAc;AAChB,YAAQ,OAAO,kBAAkB,GAAG,oBAAoB,SAAS,uBAAuB;AAAA,EAC1F;AAEA,SAAO;AACT;AAEO,SAAS,gBAAyB;AACvC,QAAM,UAAU,IAAI,QAAQ;AAE5B,UACG,KAAK,gBAAgB,EACrB,YAAY,2DAA2D,EACvE,QAAQ,eAAe,EACvB,mBAAmB;AAEtB;AAAA,IACE,QACG,QAAQ,KAAK,EACb,YAAY,2BAA2B,EACvC,SAAS,WAAW,oBAAoB,KAAK;AAAA,IAChD;AAAA,EACF,EAAE,OAAO,OAAO,OAAe,MAAsB,YAAqB;AACxE,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAI,QAAQ,gBAAgB;AAAA,IAC9B;AACA,UAAM,aAAa,OAAO,MAAM;AAAA,EAClC,CAAC;AAED;AAAA,IACE,QACG,QAAQ,MAAM,EACd,YAAY,mFAAmF,EAC/F,OAAO,kBAAkB,oBAAoB,SAAS,EACtD,OAAO,mBAAmB,oBAAoB,QAAQ,MAAM,EAC5D,OAAO,yBAAyB,kDAAkD;AAAA,IACrF;AAAA,EACF,EAAE,OAAO,OAAO,MAAsB,YAAqB;AACzD,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAI,QAAQ,gBAAgB;AAAA,IAC9B;AAEA,QAAI,CAAC,OAAO,SAAS,CAAC,OAAO,OAAO;AAClC,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AACA,UAAM,aAAa,OAAO,SAAS,IAAI,MAAM;AAAA,EAC/C,CAAC;AAED,QAAM,UAAU,QAAQ,QAAQ,SAAS,EAAE,YAAY,6CAA6C;AAEpG,UACG,QAAQ,MAAM,EACd,YAAY,0DAA0D,EACtE,OAAO,gBAAgB,oBAAoB,KAAK,QAAQ,IAAI,CAAC,EAC7D,OAAO,wBAAwB,oBAAoB,UAAU,EAC7D,OAAO,UAAU,qBAAqB,KAAK,EAC3C,OAAO,OAAO,MAA2D,YAAqB;AAC7F,UAAM,SAAS;AAAA,MACb,GAAI,QAAQ,gBAAgB;AAAA,MAC5B,GAAG;AAAA,IACL;AACA,UAAM,eAAe,MAAM;AAAA,EAC7B,CAAC;AAEH,UACG,QAAQ,SAAS,EACjB,YAAY,oDAAoD,EAChE,SAAS,eAAe,oCAAoC,EAC5D,OAAO,gBAAgB,oBAAoB,KAAK,QAAQ,IAAI,CAAC,EAC7D,OAAO,UAAU,qBAAqB,KAAK,EAC3C,OAAO,OAAO,WAAmB,MAA4C,YAAqB;AACjG,UAAM,SAAS;AAAA,MACb,GAAI,QAAQ,gBAAgB;AAAA,MAC5B,GAAG;AAAA,IACL;AACA,UAAM,gBAAgB,WAAW,MAAM;AAAA,EACzC,CAAC;AAEH,UACG,QAAQ,UAAU,EAClB,YAAY,qFAAqF,EACjG,SAAS,eAAe,qCAAqC,EAC7D,OAAO,gBAAgB,oBAAoB,KAAK,QAAQ,IAAI,CAAC,EAC7D,OAAO,4BAA4B,oBAAoB,cAAc,EACrE,OAAO,UAAU,qBAAqB,KAAK,EAC3C,OAAO,OAAO,WAAmB,MAA+D,YAAqB;AACpH,UAAM,SAAS;AAAA,MACb,GAAI,QAAQ,gBAAgB;AAAA,MAC5B,GAAG;AAAA,IACL;AACA,UAAM,iBAAiB,WAAW,MAAM;AAAA,EAC1C,CAAC;AAEH;AAAA,IACE,QACG,SAAS,YAAY,+CAA+C,EACpE,OAAO,mBAAmB,oBAAoB,QAAQ,MAAM,EAC5D,OAAO,yBAAyB,kDAAkD;AAAA,IACrF;AAAA,EACF,EAAE,OAAO,OAAO,QAA4B,SAAyB;AACnE,QAAI,KAAK,OAAO;AACd,YAAM,aAAa,KAAK,SAAS,UAAU,IAAI,IAAI;AACnD;AAAA,IACF;AAEA,QAAI,KAAK,OAAO;AACd,YAAM,aAAa,KAAK,OAAO,IAAI;AACnC;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ;AACX,cAAQ,WAAW;AACnB;AAAA,IACF;AAEA,QAAI,QAAQ,MAAM,GAAG;AACnB,YAAM,aAAa,QAAQ,IAAI;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,MAAM,GAAG;AACtB,YAAM,aAAa,QAAQ,IAAI;AAC/B;AAAA,IACF;AAEA,UAAM,IAAI;AAAA,MACR,WAAW,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;AD1MO,SAASA,iBAAyB;AACvC,SAAO,cAAiB;AAC1B;AAEA,eAAe,KAAK,OAAO,QAAQ,MAAqB;AACtD,QAAM,UAAUA,eAAc;AAC9B,QAAM,QAAQ,WAAW,IAAI;AAC/B;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,SAAO,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC;AAC1D;AAEA,IAAI,aAAa,GAAG;AAClB,OAAK,EAAE,MAAM,CAAC,UAAU;AACtB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,OAAO,MAAM,oBAAoB,OAAO;AAAA,CAAI;AACpD,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":["createProgram"]}