autoremediator 0.7.0 → 0.9.0

package/dist/index-Di8lB6CG.d.ts

@@ -0,0 +1,401 @@
+/** A resolved CVE entry with affected npm package info */
+interface CveDetails {
+    id: string;
+    summary: string;
+    severity: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | "UNKNOWN";
+    cvssScore?: number;
+    epss?: {
+        score: number;
+        percentile: number;
+        date?: string;
+    };
+    kev?: {
+        knownExploited: boolean;
+        dateAdded?: string;
+        dueDate?: string;
+        requiredAction?: string;
+        knownRansomwareCampaignUse?: string;
+    };
+    intelligence?: {
+        cveServicesEnriched?: boolean;
+        gitlabAdvisoryMatched?: boolean;
+        certCcMatched?: boolean;
+        depsDevEnrichedPackages?: number;
+        scorecardProjects?: number;
+        vendorAdvisories?: string[];
+        commercialFeeds?: string[];
+        sourceHealth?: Record<string, {
+            attempted: boolean;
+            changed: boolean;
+            error?: string;
+        }>;
+    };
+    references: string[];
+    affectedPackages: AffectedPackage[];
+}
+/** A single npm package affected by a CVE */
+interface AffectedPackage {
+    name: string;
+    ecosystem: "npm";
+    /** Semver range string for the vulnerable version window, e.g. ">=0.0.0 <4.17.21" */
+    vulnerableRange: string;
+    /** The first version that is NOT vulnerable (the safe upgrade target) */
+    firstPatchedVersion?: string;
+    /** Source that provided this entry */
+    source: "osv" | "github-advisory";
+}
+/** A package found in the consumer's project */
+interface InventoryPackage {
+    name: string;
+    version: string;
+    /** "direct" = listed in package.json; "indirect" = transitive dep */
+    type: "direct" | "indirect";
+}
+/** A package that is both installed and matches a vulnerable range */
+interface VulnerablePackage {
+    installed: InventoryPackage;
+    affected: AffectedPackage;
+    /** The resolved safe upgrade version, if one exists on npm */
+    safeUpgradeVersion?: string;
+}
+/** The outcome of a single patch operation */
+type PatchStrategy = "version-bump" | "override" | "patch-file" | "none";
+type DependencyScope = "direct" | "transitive";
+type PatchRiskLevel = "low" | "medium" | "high";
+type PatchConfidenceThresholds = Partial<Record<PatchRiskLevel, number>>;
+type PatchMode = "patch-package" | "native-pnpm" | "native-yarn";
+type PatchValidationPhaseName = "diff-format" | "patch-write" | "manifest-write" | "apply" | "install" | "test" | "drift";
+interface PatchValidationPhase {
+    phase: PatchValidationPhaseName;
+    passed: boolean;
+    message?: string;
+    error?: string;
+}
+interface PatchArtifact {
+    schemaVersion: "1.0";
+    cveId?: string;
+    packageName: string;
+    vulnerableVersion: string;
+    patchFilePath: string;
+    manifestFilePath?: string;
+    patchFileName: string;
+    patchesDir?: string;
+    patchMode?: PatchMode;
+    confidence?: number;
+    riskLevel?: PatchRiskLevel;
+    generatedAt: string;
+    files?: string[];
+    hunkCount?: number;
+    applied: boolean;
+    dryRun: boolean;
+    validationPhases?: PatchValidationPhase[];
+}
+interface PatchArtifactSummary {
+    patchFilePath: string;
+    manifestFilePath?: string;
+    patchFileName: string;
+    cveId?: string;
+    packageName?: string;
+    vulnerableVersion?: string;
+    patchMode?: PatchMode;
+    confidence?: number;
+    riskLevel?: PatchRiskLevel;
+    generatedAt?: string;
+    files?: string[];
+    hunkCount?: number;
+    diffValid?: boolean;
+}
+interface PatchArtifactInspection extends PatchArtifactSummary {
+    exists: boolean;
+    diffValid: boolean;
+    formatError?: string;
+    patchSizeBytes?: number;
+    lineCount?: number;
+    manifest?: PatchArtifact;
+}
+interface PatchArtifactValidationReport {
+    patchFilePath: string;
+    manifestFilePath?: string;
+    exists: boolean;
+    manifestFound: boolean;
+    diffValid: boolean;
+    formatError?: string;
+    driftDetected: boolean;
+    cveId?: string;
+    packageName?: string;
+    vulnerableVersion?: string;
+    installedVersion?: string;
+    inventoryMatch?: boolean;
+    validationPhases: PatchValidationPhase[];
+}
+interface PatchArtifactQueryOptions {
+    cwd?: string;
+    patchesDir?: string;
+    packageManager?: "npm" | "pnpm" | "yarn";
+}
+type UnresolvedReason = "consensus-failed" | "constraint-blocked" | "indirect-dependency" | "install-failed" | "major-bump-required" | "no-safe-version" | "override-apply-failed" | "package-json-not-found" | "patch-apply-failed" | "patch-confidence-too-low" | "patch-generation-failed" | "patch-validation-failed" | "policy-blocked" | "requires-llm-fallback" | "source-fetch-failed" | "validation-failed";
+type PatchStrategyCounts = Partial<Record<PatchStrategy, number>>;
+type DependencyScopeCounts = Partial<Record<DependencyScope, number>>;
+type UnresolvedReasonCounts = Partial<Record<UnresolvedReason, number>>;
+interface ReachabilityEvidence {
+    filePath: string;
+    matchType: "import" | "require" | "dynamic-import" | "manifest";
+}
+interface ReachabilityAssessment {
+    packageName: string;
+    status: "reachable" | "not-reachable" | "unknown";
+    reason: string;
+    evidence?: ReachabilityEvidence[];
+}
+interface AlternativePackageSuggestion {
+    packageName: string;
+    reason: string;
+    confidence: number;
+    source: "npm-search";
+    npmUrl?: string;
+    description?: string;
+}
+interface FixExplanation {
+    title: string;
+    summary: string;
+    riskSummary?: string;
+    reachabilitySummary?: string;
+    recommendedAction?: string;
+}
+type ChangeRequestProvider = "github" | "gitlab";
+type ChangeRequestGrouping = "all" | "per-cve" | "per-package";
+interface ChangeRequestOptions {
+    enabled?: boolean;
+    provider: ChangeRequestProvider;
+    grouping?: ChangeRequestGrouping;
+    repository?: string;
+    baseBranch?: string;
+    branchPrefix?: string;
+    titlePrefix?: string;
+    bodyFooter?: string;
+    draft?: boolean;
+    pushRemote?: string;
+    tokenEnvVar?: string;
+}
+interface ChangeRequestResult {
+    provider: ChangeRequestProvider;
+    grouping: ChangeRequestGrouping;
+    repository?: string;
+    branchName: string;
+    title: string;
+    body: string;
+    created: boolean;
+    draft?: boolean;
+    url?: string;
+    cveIds: string[];
+    packageNames: string[];
+    error?: string;
+}
+interface PatchResult {
+    packageName: string;
+    strategy: PatchStrategy;
+    fromVersion: string;
+    toVersion?: string;
+    patchFilePath?: string;
+    patchArtifact?: PatchArtifact;
+    applied: boolean;
+    dryRun: boolean;
+    message: string;
+    dependencyScope?: DependencyScope;
+    confidence?: number;
+    riskLevel?: PatchRiskLevel;
+    unresolvedReason?: UnresolvedReason;
+    reachability?: ReachabilityAssessment;
+    alternativeSuggestions?: AlternativePackageSuggestion[];
+    fixExplanation?: FixExplanation;
+    validation?: {
+        passed: boolean;
+        error?: string;
+    };
+    validationPhases?: PatchValidationPhase[];
+}
+interface CorrelationContext {
+    requestId?: string;
+    sessionId?: string;
+    parentRunId?: string;
+}
+interface RemediationConstraints {
+    directDependenciesOnly?: boolean;
+    preferVersionBump?: boolean;
+    installMode?: "standard" | "prefer-offline" | "deterministic";
+    installPreferOffline?: boolean;
+    enforceFrozenLockfile?: boolean;
+    workspace?: string;
+}
+type ModelPersonality = "analytical" | "pragmatic" | "balanced";
+type ProviderSafetyProfile = "strict" | "relaxed";
+interface ProgressEvent {
+    stage: "pipeline-start" | "model-selected" | "agent-step" | "pipeline-finish" | "patch-fallback" | "patch-consensus";
+    detail: string;
+    at: string;
+    provider?: "remote" | "local";
+    model?: string;
+}
+interface LlmUsageMetrics {
+    purpose: "orchestration" | "patch-generation" | "patch-consensus";
+    provider: "remote" | "local";
+    model: string;
+    latencyMs?: number;
+    promptChars?: number;
+    completionChars?: number;
+    estimatedCostUsd?: number;
+}
+interface ProvenanceContext {
+    actor?: string;
+    source?: "cli" | "sdk" | "mcp" | "openapi" | "unknown";
+}
+/** Top-level options for the remediate() API and CLI */
+interface RemediateOptions extends CorrelationContext {
+    /** Working directory of the consumer's project (defaults to process.cwd()) */
+    cwd?: string;
+    /** Package manager to use (defaults to auto-detect from lockfile) */
+    packageManager?: "npm" | "pnpm" | "yarn";
+    /** If true, plan and report changes but do not write anything */
+    dryRun?: boolean;
+    /** If true, run package-manager tests after patching */
+    runTests?: boolean;
+    /** Override the LLM provider (vendor-neutral surface): remote or local. */
+    llmProvider?: "remote" | "local";
+    /** Override the model name */
+    model?: string;
+    /** Prompt behavior profile for model-guided orchestration and patch generation. */
+    modelPersonality?: ModelPersonality;
+    /** Safety posture for confidence and high-risk patch behavior. */
+    providerSafetyProfile?: ProviderSafetyProfile;
+    /** Require a second-provider agreement for high-risk generated patches. */
+    requireConsensusForHighRisk?: boolean;
+    /** Override provider used for high-risk consensus verification. */
+    consensusProvider?: "remote" | "local";
+    /** Override model used for high-risk consensus verification. */
+    consensusModel?: string;
+    /** Optional per-risk confidence thresholds used for patch acceptance. */
+    patchConfidenceThresholds?: PatchConfidenceThresholds;
+    /** Enable provider-specific dynamic model routing by prompt/input size. */
+    dynamicModelRouting?: boolean;
+    /** Input-size threshold used by dynamic model routing when enabled. */
+    dynamicRoutingThresholdChars?: number;
+    /** Optional SDK callback for progress events during remediation execution. */
+    onProgress?: (event: ProgressEvent) => void;
+    /** Optional path to a policy file (.autoremediator.json) */
+    policy?: string;
+    /** If false, do not write evidence JSON for this run (default: true). */
+    evidence?: boolean;
+    /** Directory to write .patch files (default: ./patches) */
+    patchesDir?: string;
+    /** If true, run a non-mutating remediation preview (forces dryRun behavior for mutation tools). */
+    preview?: boolean;
+    /** Optional deterministic idempotency key for request replay handling. */
+    idempotencyKey?: string;
+    /** If true, return cached report for matching idempotency key + CVE when available. */
+    resume?: boolean;
+    /** Optional caller provenance fields for evidence and reporting. */
+    actor?: string;
+    source?: "cli" | "sdk" | "mcp" | "openapi" | "unknown";
+    /** Optional orchestration constraints for result enforcement. */
+    constraints?: RemediationConstraints;
+    /** Optional native pull request / merge request creation controls. */
+    changeRequest?: ChangeRequestOptions;
+}
+/** Final report returned by the remediation pipeline */
+interface RemediationReport {
+    cveId: string;
+    cveDetails: CveDetails | null;
+    vulnerablePackages: VulnerablePackage[];
+    results: PatchResult[];
+    agentSteps: number;
+    summary: string;
+    evidenceFile?: string;
+    correlation?: CorrelationContext;
+    provenance?: ProvenanceContext;
+    constraints?: RemediationConstraints;
+    resumedFromCache?: boolean;
+    llmUsage?: LlmUsageMetrics[];
+    changeRequests?: ChangeRequestResult[];
+}
+
+type ScanInputFormat = "npm-audit" | "yarn-audit" | "sarif" | "auto";
+
+interface ScanOptions extends RemediateOptions {
+    format?: ScanInputFormat;
+    policy?: string;
+    audit?: boolean;
+}
+interface ScanReport {
+    schemaVersion: "1.0";
+    status: "ok" | "partial" | "failed";
+    generatedAt: string;
+    cveIds: string[];
+    reports: RemediationReport[];
+    successCount: number;
+    failedCount: number;
+    errors: Array<{
+        cveId: string;
+        message: string;
+    }>;
+    evidenceFile?: string;
+    patchCount: number;
+    patchValidationFailures?: Array<{
+        packageName: string;
+        cveId: string;
+        error: string;
+    }>;
+    strategyCounts?: PatchStrategyCounts;
+    dependencyScopeCounts?: DependencyScopeCounts;
+    unresolvedByReason?: UnresolvedReasonCounts;
+    patchesDir?: string;
+    correlation?: CorrelationContext;
+    provenance?: ProvenanceContext;
+    constraints?: RemediationConstraints;
+    idempotencyKey?: string;
+    llmUsageCount?: number;
+    estimatedCostUsd?: number;
+    totalLlmLatencyMs?: number;
+}
+interface CiSummary {
+    schemaVersion: "1.0";
+    status: "ok" | "partial" | "failed";
+    generatedAt: string;
+    cveCount: number;
+    remediationCount: number;
+    successCount: number;
+    failedCount: number;
+    errors: Array<{
+        cveId: string;
+        message: string;
+    }>;
+    evidenceFile?: string;
+    patchCount?: number;
+    patchValidationFailures?: Array<{
+        packageName: string;
+        cveId: string;
+        error: string;
+    }>;
+    strategyCounts?: PatchStrategyCounts;
+    dependencyScopeCounts?: DependencyScopeCounts;
+    unresolvedByReason?: UnresolvedReasonCounts;
+    patchesDir?: string;
+    correlation?: CorrelationContext;
+    provenance?: ProvenanceContext;
+    constraints?: RemediationConstraints;
+    idempotencyKey?: string;
+    llmUsageCount?: number;
+    estimatedCostUsd?: number;
+    totalLlmLatencyMs?: number;
+}
+
+declare function listPatchArtifacts(options?: PatchArtifactQueryOptions): Promise<PatchArtifactSummary[]>;
+declare function inspectPatchArtifact(patchFilePath: string, options?: PatchArtifactQueryOptions): Promise<PatchArtifactInspection>;
+
+declare function validatePatchArtifact(patchFilePath: string, options?: PatchArtifactQueryOptions): Promise<PatchArtifactValidationReport>;
+
+declare function remediate(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
+declare function planRemediation(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
+
+declare function remediateFromScan(inputPath: string, options?: ScanOptions): Promise<ScanReport>;
+
+export { type AffectedPackage as A, remediate as B, type CiSummary as C, type DependencyScope as D, remediateFromScan as E, validatePatchArtifact as F, type InventoryPackage as I, type LlmUsageMetrics as L, type ModelPersonality as M, type PatchArtifact as P, type RemediateOptions as R, type ScanReport as S, type UnresolvedReason as U, type VulnerablePackage as V, type CorrelationContext as a, type CveDetails as b, type DependencyScopeCounts as c, type PatchArtifactInspection as d, type PatchArtifactQueryOptions as e, type PatchArtifactSummary as f, type PatchArtifactValidationReport as g, type PatchConfidenceThresholds as h, type PatchMode as i, type PatchResult as j, type PatchRiskLevel as k, type PatchStrategy as l, type PatchStrategyCounts as m, type PatchValidationPhase as n, type PatchValidationPhaseName as o, type ProgressEvent as p, type ProvenanceContext as q, type ProviderSafetyProfile as r, type RemediationConstraints as s, type RemediationReport as t, type ScanInputFormat as u, type ScanOptions as v, type UnresolvedReasonCounts as w, inspectPatchArtifact as x, listPatchArtifacts as y, planRemediation as z };

package/dist/index.d.ts

@@ -1,8 +1,6 @@
-import { R as RemediateOptions, a as RemediationReport, C as CiSummary, S as ScanReport } from './remediate-from-scan-C-E7gqxF.js';
-export { A as AffectedPackage, b as CorrelationContext, c as CveDetails, D as DependencyScope, d as DependencyScopeCounts, I as InventoryPackage, P as PatchResult, e as PatchStrategy, f as PatchStrategyCounts, g as ProvenanceContext, h as RemediationConstraints, i as ScanInputFormat, j as ScanOptions, U as UnresolvedReason, k as UnresolvedReasonCounts, V as VulnerablePackage, p as planRemediation, r as remediate, l as remediateFromScan } from './remediate-from-scan-C-E7gqxF.js';
-export { L as LLM_PROVIDER_VALUES, O as OPTION_DESCRIPTIONS, P as PACKAGE_MANAGER_VALUES, a as PROVENANCE_SOURCE_VALUES, c as createConstraintSchemaProperties, b as createRemediateOptionSchemaProperties, d as createScanOptionSchemaProperties, e as createScanReportSchemaProperties } from './options-schema-DfLBOsPI.js';
-
-declare function runRemediationPipeline(cveId: string, options?: RemediateOptions): Promise<RemediationReport>;
+import { C as CiSummary, S as ScanReport } from './index-Di8lB6CG.js';
+export { A as AffectedPackage, a as CorrelationContext, b as CveDetails, D as DependencyScope, c as DependencyScopeCounts, I as InventoryPackage, L as LlmUsageMetrics, M as ModelPersonality, P as PatchArtifact, d as PatchArtifactInspection, e as PatchArtifactQueryOptions, f as PatchArtifactSummary, g as PatchArtifactValidationReport, h as PatchConfidenceThresholds, i as PatchMode, j as PatchResult, k as PatchRiskLevel, l as PatchStrategy, m as PatchStrategyCounts, n as PatchValidationPhase, o as PatchValidationPhaseName, p as ProgressEvent, q as ProvenanceContext, r as ProviderSafetyProfile, R as RemediateOptions, s as RemediationConstraints, t as RemediationReport, u as ScanInputFormat, v as ScanOptions, U as UnresolvedReason, w as UnresolvedReasonCounts, V as VulnerablePackage, x as inspectPatchArtifact, y as listPatchArtifacts, z as planRemediation, B as remediate, E as remediateFromScan, F as validatePatchArtifact } from './index-Di8lB6CG.js';
+export { L as LLM_PROVIDER_VALUES, O as OPTION_DESCRIPTIONS, P as PACKAGE_MANAGER_VALUES, a as PROVENANCE_SOURCE_VALUES, c as createConstraintSchemaProperties, b as createRemediateOptionSchemaProperties, d as createScanOptionSchemaProperties, e as createScanReportSchemaProperties } from './options-schema-CH5GjZY1.js';
 
 declare function toCiSummary(report: ScanReport): CiSummary;
 declare function ciExitCode(summary: CiSummary): number;
@@ -56,4 +54,4 @@ interface SarifOutput {
 }
 declare function toSarifOutput(report: ScanReport): SarifOutput;
 
-export { CiSummary, RemediateOptions, RemediationReport, type SarifOutput, ScanReport, ciExitCode, runRemediationPipeline, toCiSummary, toSarifOutput };
+export { CiSummary, type SarifOutput, ScanReport, ciExitCode, toCiSummary, toSarifOutput };

package/dist/index.js

@@ -8,13 +8,15 @@ import {
   createRemediateOptionSchemaProperties,
   createScanOptionSchemaProperties,
   createScanReportSchemaProperties,
+  inspectPatchArtifact,
+  listPatchArtifacts,
   planRemediation,
   remediate,
   remediateFromScan,
-  runRemediationPipeline,
   toCiSummary,
-  toSarifOutput
-} from "./chunk-MUFP2DQX.js";
+  toSarifOutput,
+  validatePatchArtifact
+} from "./chunk-EDPCMRUW.js";
 export {
   LLM_PROVIDER_VALUES,
   OPTION_DESCRIPTIONS,
@@ -25,11 +27,13 @@ export {
   createRemediateOptionSchemaProperties,
   createScanOptionSchemaProperties,
   createScanReportSchemaProperties,
+  inspectPatchArtifact,
+  listPatchArtifacts,
   planRemediation,
   remediate,
   remediateFromScan,
-  runRemediationPipeline,
   toCiSummary,
-  toSarifOutput
+  toSarifOutput,
+  validatePatchArtifact
 };
 //# sourceMappingURL=index.js.map

package/dist/mcp/server.d.ts

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { r as remediate, p as planRemediation, l as remediateFromScan } from '../remediate-from-scan-C-E7gqxF.js';
+import { B as remediate, z as planRemediation, E as remediateFromScan, y as listPatchArtifacts, x as inspectPatchArtifact, F as validatePatchArtifact } from '../index-Di8lB6CG.js';
 
 /**
  * autoremediator MCP server
  *
  * Exposes all autoremediator tools via the Model Context Protocol so LLM hosts
- * (Claude Desktop, Cursor, Copilot, etc.) can invoke them directly.
+ * and compatible agent hosts can invoke them directly.
  *
  * Start: autoremediator-mcp   (stdio transport)
  */
@@ -15,6 +15,9 @@ interface McpApiDeps {
     remediateFn: typeof remediate;
     planRemediationFn: typeof planRemediation;
     remediateFromScanFn: typeof remediateFromScan;
+    listPatchArtifactsFn: typeof listPatchArtifacts;
+    inspectPatchArtifactFn: typeof inspectPatchArtifact;
+    validatePatchArtifactFn: typeof validatePatchArtifact;
 }
 declare const TOOLS: ({
     name: string;
@@ -27,6 +30,8 @@ declare const TOOLS: ({
                 type: string;
                 description: "CVE ID, e.g. CVE-2021-23337";
             };
+            patchFilePath?: undefined;
+            cwd?: undefined;
         };
     };
 } | {
@@ -40,6 +45,74 @@ declare const TOOLS: ({
                 type: string;
                 description: "Absolute path to the scanner output file";
             };
+            patchFilePath?: undefined;
+            cwd?: undefined;
+        };
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            cwd: {
+                readonly type: "string";
+                readonly description: "Absolute path to the project root (default: process.cwd())";
+            };
+            patchesDir: {
+                readonly type: "string";
+                readonly description: "Directory to write .patch files (default: ./patches)";
+            };
+            packageManager: {
+                readonly type: "string";
+                readonly enum: readonly ["npm", "pnpm", "yarn"];
+                readonly description: "Package manager override (auto-detected by default)";
+            };
+            patchFilePath?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        required: string[];
+        properties: {
+            patchFilePath: {
+                type: string;
+                description: string;
+            };
+            cwd: {
+                readonly type: "string";
+                readonly description: "Absolute path to the project root (default: process.cwd())";
+            };
+        };
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        required: string[];
+        properties: {
+            cwd: {
+                readonly type: "string";
+                readonly description: "Absolute path to the project root (default: process.cwd())";
+            };
+            patchesDir: {
+                readonly type: "string";
+                readonly description: "Directory to write .patch files (default: ./patches)";
+            };
+            packageManager: {
+                readonly type: "string";
+                readonly enum: readonly ["npm", "pnpm", "yarn"];
+                readonly description: "Package manager override (auto-detected by default)";
+            };
+            patchFilePath: {
+                type: string;
+                description: string;
+            };
         };
     };
 })[];

package/dist/mcp/server.js

@@ -6,10 +6,13 @@ import {
   OPTION_DESCRIPTIONS,
   createRemediateOptionSchemaProperties,
   createScanOptionSchemaProperties,
+  inspectPatchArtifact,
+  listPatchArtifacts,
   planRemediation,
   remediate,
-  remediateFromScan
-} from "../chunk-MUFP2DQX.js";
+  remediateFromScan,
+  validatePatchArtifact
+} from "../chunk-EDPCMRUW.js";
 
 // src/mcp/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -19,10 +22,22 @@ import {
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
 import { fileURLToPath } from "url";
+var PATCH_ARTIFACT_SCHEMA_PROPERTIES = {
+  cwd: { type: "string", description: OPTION_DESCRIPTIONS.cwd },
+  patchesDir: { type: "string", description: OPTION_DESCRIPTIONS.patchesDir },
+  packageManager: {
+    type: "string",
+    enum: ["npm", "pnpm", "yarn"],
+    description: OPTION_DESCRIPTIONS.packageManager
+  }
+};
 var defaultDeps = {
   remediateFn: remediate,
   planRemediationFn: planRemediation,
-  remediateFromScanFn: remediateFromScan
+  remediateFromScanFn: remediateFromScan,
+  listPatchArtifactsFn: listPatchArtifacts,
+  inspectPatchArtifactFn: inspectPatchArtifact,
+  validatePatchArtifactFn: validatePatchArtifact
 };
 function createBaseServer() {
   return new Server(
@@ -66,6 +81,40 @@ var TOOLS = [
         ...createScanOptionSchemaProperties()
       }
     }
+  },
+  {
+    name: "listPatchArtifacts",
+    description: "List stored patch artifacts in the configured patches directory. Returns patch summaries with manifest metadata when available.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...PATCH_ARTIFACT_SCHEMA_PROPERTIES
+      }
+    }
+  },
+  {
+    name: "inspectPatchArtifact",
+    description: "Inspect a stored .patch file and its optional manifest metadata.",
+    inputSchema: {
+      type: "object",
+      required: ["patchFilePath"],
+      properties: {
+        patchFilePath: { type: "string", description: "Path to the .patch file" },
+        cwd: PATCH_ARTIFACT_SCHEMA_PROPERTIES.cwd
+      }
+    }
+  },
+  {
+    name: "validatePatchArtifact",
+    description: "Validate a stored patch artifact against its manifest and the current dependency inventory.",
+    inputSchema: {
+      type: "object",
+      required: ["patchFilePath"],
+      properties: {
+        patchFilePath: { type: "string", description: "Path to the .patch file" },
+        ...PATCH_ARTIFACT_SCHEMA_PROPERTIES
+      }
+    }
   }
 ];
 async function handleToolCall(name, args = {}, deps = defaultDeps) {
@@ -89,6 +138,26 @@ async function handleToolCall(name, args = {}, deps = defaultDeps) {
       const report = await deps.remediateFromScanFn(inputPath, withMcpSource(options));
       return { content: [{ type: "text", text: JSON.stringify(report, null, 2) }] };
     }
+    if (name === "listPatchArtifacts") {
+      const report = await deps.listPatchArtifactsFn(args);
+      return { content: [{ type: "text", text: JSON.stringify(report, null, 2) }] };
+    }
+    if (name === "inspectPatchArtifact") {
+      const { patchFilePath, ...options } = args;
+      const report = await deps.inspectPatchArtifactFn(
+        patchFilePath,
+        options
+      );
+      return { content: [{ type: "text", text: JSON.stringify(report, null, 2) }] };
+    }
+    if (name === "validatePatchArtifact") {
+      const { patchFilePath, ...options } = args;
+      const report = await deps.validatePatchArtifactFn(
+        patchFilePath,
+        options
+      );
+      return { content: [{ type: "text", text: JSON.stringify(report, null, 2) }] };
+    }
     return {
       content: [{ type: "text", text: `Unknown tool: ${name}` }],
       isError: true