autoremediator 0.7.0 → 0.9.0

package/dist/openapi/server.js

@@ -6,139 +6,53 @@ import {
   createRemediateOptionSchemaProperties,
   createScanOptionSchemaProperties,
   createScanReportSchemaProperties,
+  inspectPatchArtifact,
+  listPatchArtifacts,
   planRemediation,
   remediate,
-  remediateFromScan
-} from "../chunk-MUFP2DQX.js";
+  remediateFromScan,
+  validatePatchArtifact
+} from "../chunk-EDPCMRUW.js";
 
 // src/openapi/server.ts
 import http from "http";
 import { fileURLToPath } from "url";
-var DEFAULT_PORT = 3e3;
-function parsePort() {
-  const idx = process.argv.indexOf("--port");
-  if (idx !== -1 && process.argv[idx + 1]) {
-    const p = parseInt(process.argv[idx + 1], 10);
-    if (!isNaN(p)) return p;
+
+// src/openapi/spec/schemas.ts
+var PATCH_ARTIFACT_OPTION_PROPERTIES = {
+  cwd: { type: "string", description: OPTION_DESCRIPTIONS.cwd },
+  patchesDir: { type: "string", description: OPTION_DESCRIPTIONS.patchesDir },
+  packageManager: {
+    type: "string",
+    enum: ["npm", "pnpm", "yarn"],
+    description: OPTION_DESCRIPTIONS.packageManager
   }
-  if (process.env.PORT) {
-    const p = parseInt(process.env.PORT, 10);
-    if (!isNaN(p)) return p;
+};
+var REMEDIATION_REPORT_SCHEMA = {
+  type: "object",
+  properties: {
+    cveId: { type: "string" },
+    cveDetails: { type: ["object", "null"] },
+    vulnerablePackages: { type: "array", items: { type: "object" } },
+    results: { type: "array", items: { type: "object" } },
+    agentSteps: { type: "number" },
+    summary: { type: "string" },
+    evidenceFile: { type: "string" },
+    llmUsage: { type: "array", items: { type: "object" } },
+    correlation: { type: "object" },
+    provenance: { type: "object" },
+    constraints: { type: "object" },
+    resumedFromCache: { type: "boolean" }
   }
-  return DEFAULT_PORT;
-}
-function readBody(req) {
-  return new Promise((resolve, reject) => {
-    let raw = "";
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {
-      raw += chunk;
-    });
-    req.on("end", () => {
-      try {
-        resolve(raw ? JSON.parse(raw) : {});
-      } catch {
-        reject(new Error("Invalid JSON body"));
-      }
-    });
-    req.on("error", reject);
-  });
-}
-function send(res, status, body) {
-  const payload = JSON.stringify(body);
-  res.writeHead(status, {
-    "Content-Type": "application/json",
-    "Content-Length": Buffer.byteLength(payload)
-  });
-  res.end(payload);
-}
-function withOpenApiSource(options) {
-  const normalized = typeof options === "object" && options !== null ? options : {};
-  return {
-    ...normalized,
-    source: typeof normalized.source === "string" ? normalized.source : "openapi"
-  };
-}
-var defaultDeps = {
-  remediateFn: remediate,
-  remediateFromScanFn: remediateFromScan,
-  planRemediationFn: planRemediation
 };
-function createOpenApiServer(deps = defaultDeps) {
-  return http.createServer(async (req, res) => {
-    const url = new URL(req.url ?? "/", `http://localhost`);
-    const method = req.method?.toUpperCase();
-    if (method === "GET" && url.pathname === "/health") {
-      return send(res, 200, { status: "ok" });
-    }
-    if (method === "GET" && url.pathname === "/openapi.json") {
-      return send(res, 200, OPENAPI_SPEC);
-    }
-    if (method === "POST" && url.pathname === "/remediate") {
-      let body;
-      try {
-        body = await readBody(req);
-      } catch {
-        return send(res, 400, { error: "Invalid JSON body" });
-      }
-      if (typeof body.cveId !== "string" || !body.cveId) {
-        return send(res, 400, { error: "cveId is required (string)" });
-      }
-      try {
-        const report = await deps.remediateFn(body.cveId, withOpenApiSource(body.options));
-        return send(res, 200, report);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return send(res, 400, { error: message });
-      }
-    }
-    if (method === "POST" && url.pathname === "/plan-remediation") {
-      let body;
-      try {
-        body = await readBody(req);
-      } catch {
-        return send(res, 400, { error: "Invalid JSON body" });
-      }
-      if (typeof body.cveId !== "string" || !body.cveId) {
-        return send(res, 400, { error: "cveId is required (string)" });
-      }
-      try {
-        const report = await deps.planRemediationFn(body.cveId, withOpenApiSource(body.options));
-        return send(res, 200, report);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return send(res, 400, { error: message });
-      }
-    }
-    if (method === "POST" && url.pathname === "/remediate-from-scan") {
-      let body;
-      try {
-        body = await readBody(req);
-      } catch {
-        return send(res, 400, { error: "Invalid JSON body" });
-      }
-      if (typeof body.inputPath !== "string" || !body.inputPath) {
-        return send(res, 400, { error: "inputPath is required (string)" });
-      }
-      try {
-        const report = await deps.remediateFromScanFn(body.inputPath, withOpenApiSource(body.options));
-        return send(res, 200, report);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return send(res, 400, { error: message });
-      }
-    }
-    return send(res, 404, { error: "Not found" });
-  });
-}
-var OPENAPI_SPEC = {
-  openapi: "3.1.0",
-  info: {
-    title: "autoremediator",
-    version: PACKAGE_VERSION,
-    description: "Agentic CVE remediation for Node.js dependency projects"
-  },
-  paths: {
+var ERROR_RESPONSE_SCHEMA = {
+  type: "object",
+  properties: { error: { type: "string" } }
+};
+
+// src/openapi/spec/paths.ts
+function createOpenApiPaths() {
+  return {
     "/remediate": {
       post: {
         operationId: "remediate",
@@ -169,18 +83,11 @@ var OPENAPI_SPEC = {
         responses: {
           "200": {
             description: "RemediationReport",
-            content: { "application/json": { schema: { type: "object" } } }
+            content: { "application/json": { schema: REMEDIATION_REPORT_SCHEMA } }
           },
           "400": {
             description: "Invalid input or remediation error",
-            content: {
-              "application/json": {
-                schema: {
-                  type: "object",
-                  properties: { error: { type: "string" } }
-                }
-              }
-            }
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
           }
         }
       }
@@ -205,7 +112,11 @@ var OPENAPI_SPEC = {
                   options: {
                     type: "object",
                     description: "RemediateOptions",
-                    properties: createRemediateOptionSchemaProperties({ includeDryRun: false, includePreview: false, includeEvidence: true })
+                    properties: createRemediateOptionSchemaProperties({
+                      includeDryRun: false,
+                      includePreview: false,
+                      includeEvidence: true
+                    })
                   }
                 }
               }
@@ -215,18 +126,11 @@ var OPENAPI_SPEC = {
         responses: {
           "200": {
             description: "RemediationReport",
-            content: { "application/json": { schema: { type: "object" } } }
+            content: { "application/json": { schema: REMEDIATION_REPORT_SCHEMA } }
           },
           "400": {
             description: "Invalid input or remediation error",
-            content: {
-              "application/json": {
-                schema: {
-                  type: "object",
-                  properties: { error: { type: "string" } }
-                }
-              }
-            }
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
           }
         }
       }
@@ -271,15 +175,115 @@ var OPENAPI_SPEC = {
           },
           "400": {
             description: "Invalid input or remediation error",
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
+          }
+        }
+      }
+    },
+    "/patches/list": {
+      post: {
+        operationId: "listPatchArtifacts",
+        summary: "List stored patch artifacts",
+        requestBody: {
+          required: false,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                properties: {
+                  options: {
+                    type: "object",
+                    description: "PatchArtifactQueryOptions",
+                    properties: PATCH_ARTIFACT_OPTION_PROPERTIES
+                  }
+                }
+              }
+            }
+          }
+        },
+        responses: {
+          "200": {
+            description: "Patch artifact summaries",
             content: {
-              "application/json": {
-                schema: {
-                  type: "object",
-                  properties: { error: { type: "string" } }
+              "application/json": { schema: { type: "array", items: { type: "object" } } }
+            }
+          },
+          "400": {
+            description: "Invalid input",
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
+          }
+        }
+      }
+    },
+    "/patches/inspect": {
+      post: {
+        operationId: "inspectPatchArtifact",
+        summary: "Inspect a stored patch artifact",
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["patchFilePath"],
+                properties: {
+                  patchFilePath: { type: "string" },
+                  options: {
+                    type: "object",
+                    description: "PatchArtifactQueryOptions",
+                    properties: {
+                      cwd: PATCH_ARTIFACT_OPTION_PROPERTIES.cwd
+                    }
+                  }
                 }
               }
             }
           }
+        },
+        responses: {
+          "200": {
+            description: "Patch artifact inspection",
+            content: { "application/json": { schema: { type: "object" } } }
+          },
+          "400": {
+            description: "Invalid input",
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
+          }
+        }
+      }
+    },
+    "/patches/validate": {
+      post: {
+        operationId: "validatePatchArtifact",
+        summary: "Validate a stored patch artifact",
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["patchFilePath"],
+                properties: {
+                  patchFilePath: { type: "string" },
+                  options: {
+                    type: "object",
+                    description: "PatchArtifactQueryOptions",
+                    properties: PATCH_ARTIFACT_OPTION_PROPERTIES
+                  }
+                }
+              }
+            }
+          }
+        },
+        responses: {
+          "200": {
+            description: "Patch artifact validation report",
+            content: { "application/json": { schema: { type: "object" } } }
+          },
+          "400": {
+            description: "Invalid input",
+            content: { "application/json": { schema: ERROR_RESPONSE_SCHEMA } }
+          }
         }
       }
     },
@@ -302,8 +306,215 @@ var OPENAPI_SPEC = {
         }
       }
     }
+  };
+}
+
+// src/openapi/spec/index.ts
+var OPENAPI_SPEC = {
+  openapi: "3.1.0",
+  info: {
+    title: "autoremediator",
+    version: PACKAGE_VERSION,
+    description: "Agentic CVE remediation for Node.js dependency projects"
+  },
+  servers: [
+    {
+      url: "http://localhost:3000",
+      description: "Local development server"
+    }
+  ],
+  "x-agent-compatible": true,
+  "x-agent-use-cases": [
+    "plan-first remediation",
+    "scanner-driven batch remediation",
+    "patch lifecycle validation"
+  ],
+  paths: createOpenApiPaths()
+};
+
+// src/openapi/http-utils.ts
+var DEFAULT_PORT = 3e3;
+function parsePort() {
+  const idx = process.argv.indexOf("--port");
+  if (idx !== -1 && process.argv[idx + 1]) {
+    const p = parseInt(process.argv[idx + 1], 10);
+    if (!isNaN(p)) return p;
+  }
+  if (process.env.PORT) {
+    const p = parseInt(process.env.PORT, 10);
+    if (!isNaN(p)) return p;
   }
+  return DEFAULT_PORT;
+}
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let raw = "";
+    req.setEncoding("utf8");
+    req.on("data", (chunk) => {
+      raw += chunk;
+    });
+    req.on("end", () => {
+      try {
+        resolve(raw ? JSON.parse(raw) : {});
+      } catch {
+        reject(new Error("Invalid JSON body"));
+      }
+    });
+    req.on("error", reject);
+  });
+}
+function sendJson(res, status, body) {
+  const payload = JSON.stringify(body);
+  res.writeHead(status, {
+    "Content-Type": "application/json",
+    "Content-Length": Buffer.byteLength(payload)
+  });
+  res.end(payload);
+}
+function withOpenApiSource(options) {
+  const normalized = typeof options === "object" && options !== null ? options : {};
+  return {
+    ...normalized,
+    source: typeof normalized.source === "string" ? normalized.source : "openapi"
+  };
+}
+
+// src/openapi/handlers/validators.ts
+function toMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+async function readJsonBody(req, res) {
+  try {
+    return await readBody(req);
+  } catch {
+    sendJson(res, 400, { error: "Invalid JSON body" });
+    return void 0;
+  }
+}
+async function runRequest(res, action) {
+  try {
+    const report = await action();
+    sendJson(res, 200, report);
+  } catch (error) {
+    sendJson(res, 400, { error: toMessage(error) });
+  }
+}
+function requireStringField(body, field, res, errorMessage) {
+  if (!body || typeof body[field] !== "string" || !body[field]) {
+    sendJson(res, 400, { error: errorMessage });
+    return void 0;
+  }
+  return body[field];
+}
+
+// src/openapi/handlers/routes.ts
+function createOpenApiRouteHandlers(deps) {
+  const routes = /* @__PURE__ */ new Map();
+  routes.set("GET /health", async (_req, res) => {
+    sendJson(res, 200, { status: "ok" });
+  });
+  routes.set("GET /openapi.json", async (_req, res) => {
+    sendJson(res, 200, OPENAPI_SPEC);
+  });
+  routes.set("POST /remediate", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    const cveId = requireStringField(body, "cveId", res, "cveId is required (string)");
+    if (!cveId) return;
+    await runRequest(
+      res,
+      () => deps.remediateFn(cveId, withOpenApiSource(body?.options))
+    );
+  });
+  routes.set("POST /plan-remediation", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    const cveId = requireStringField(body, "cveId", res, "cveId is required (string)");
+    if (!cveId) return;
+    await runRequest(
+      res,
+      () => deps.planRemediationFn(cveId, withOpenApiSource(body?.options))
+    );
+  });
+  routes.set("POST /remediate-from-scan", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    const inputPath = requireStringField(
+      body,
+      "inputPath",
+      res,
+      "inputPath is required (string)"
+    );
+    if (!inputPath) return;
+    await runRequest(
+      res,
+      () => deps.remediateFromScanFn(inputPath, withOpenApiSource(body?.options))
+    );
+  });
+  routes.set("POST /patches/list", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    if (!body) return;
+    await runRequest(res, () => deps.listPatchArtifactsFn(body.options));
+  });
+  routes.set("POST /patches/inspect", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    const patchFilePath = requireStringField(
+      body,
+      "patchFilePath",
+      res,
+      "patchFilePath is required (string)"
+    );
+    if (!patchFilePath) return;
+    await runRequest(
+      res,
+      () => deps.inspectPatchArtifactFn(patchFilePath, body?.options)
+    );
+  });
+  routes.set("POST /patches/validate", async (req, res) => {
+    const body = await readJsonBody(req, res);
+    const patchFilePath = requireStringField(
+      body,
+      "patchFilePath",
+      res,
+      "patchFilePath is required (string)"
+    );
+    if (!patchFilePath) return;
+    await runRequest(
+      res,
+      () => deps.validatePatchArtifactFn(patchFilePath, body?.options)
+    );
+  });
+  return routes;
+}
+
+// src/openapi/handlers/index.ts
+async function handleOpenApiRequest(req, res, deps) {
+  const url = new URL(req.url ?? "/", "http://localhost");
+  const method = req.method?.toUpperCase() ?? "GET";
+  const key = `${method} ${url.pathname}`;
+  const routes = createOpenApiRouteHandlers(deps);
+  const handler = routes.get(key);
+  if (!handler) {
+    return false;
+  }
+  await handler(req, res);
+  return true;
+}
+
+// src/openapi/server.ts
+var defaultDeps = {
+  remediateFn: remediate,
+  remediateFromScanFn: remediateFromScan,
+  planRemediationFn: planRemediation,
+  listPatchArtifactsFn: listPatchArtifacts,
+  inspectPatchArtifactFn: inspectPatchArtifact,
+  validatePatchArtifactFn: validatePatchArtifact
 };
+function createOpenApiServer(deps = defaultDeps) {
+  return http.createServer(async (req, res) => {
+    if (await handleOpenApiRequest(req, res, deps)) {
+      return;
+    }
+    return sendJson(res, 404, { error: "Not found" });
+  });
+}
 function isMainModule() {
   if (!process.argv[1]) return false;
   return fileURLToPath(import.meta.url) === process.argv[1];

package/dist/openapi/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/openapi/server.ts"],"sourcesContent":["/**\n * autoremediator OpenAPI HTTP server\n *\n * Exposes POST /remediate and POST /remediate-from-scan as a lightweight\n * HTTP server using Node.js built-in http module (no framework dependency).\n *\n * Start: node dist/openapi/server.js [--port 3000]\n */\nimport http from \"node:http\";\nimport { fileURLToPath } from \"node:url\";\nimport {\n  createRemediateOptionSchemaProperties,\n  createScanOptionSchemaProperties,\n  createScanReportSchemaProperties,\n  OPTION_DESCRIPTIONS,\n  planRemediation,\n  remediate,\n  remediateFromScan,\n} from \"../api/index.js\";\nimport type { RemediateOptions, ScanOptions } from \"../api/index.js\";\nimport { PACKAGE_VERSION } from \"../version\";\n\nconst DEFAULT_PORT = 3000;\n\nfunction parsePort(): number {\n  const idx = process.argv.indexOf(\"--port\");\n  if (idx !== -1 && process.argv[idx + 1]) {\n    const p = parseInt(process.argv[idx + 1], 10);\n    if (!isNaN(p)) return p;\n  }\n  if (process.env.PORT) {\n    const p = parseInt(process.env.PORT, 10);\n    if (!isNaN(p)) return p;\n  }\n  return DEFAULT_PORT;\n}\n\nfunction readBody(req: http.IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.setEncoding(\"utf8\");\n    req.on(\"data\", (chunk: string) => { raw += chunk; });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? JSON.parse(raw) : {});\n      } catch {\n        reject(new Error(\"Invalid JSON body\"));\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nfunction send(res: http.ServerResponse, status: number, body: unknown): void {\n  const payload = JSON.stringify(body);\n  res.writeHead(status, {\n    \"Content-Type\": \"application/json\",\n    \"Content-Length\": Buffer.byteLength(payload),\n  });\n  res.end(payload);\n}\n\nfunction withOpenApiSource(options: unknown): Record<string, unknown> {\n  const normalized = typeof options === \"object\" && options !== null\n    ? (options as Record<string, unknown>)\n    : {};\n  return {\n    ...normalized,\n    source: typeof normalized.source === \"string\" ? normalized.source : \"openapi\",\n  };\n}\n\ninterface OpenApiServerDeps {\n  remediateFn: typeof remediate;\n  remediateFromScanFn: typeof remediateFromScan;\n  planRemediationFn: typeof planRemediation;\n}\n\nconst defaultDeps: OpenApiServerDeps = {\n  remediateFn: remediate,\n  remediateFromScanFn: remediateFromScan,\n  planRemediationFn: planRemediation,\n};\n\nexport function createOpenApiServer(deps: OpenApiServerDeps = defaultDeps): http.Server {\n  return http.createServer(async (req, res) => {\n    const url = new URL(req.url ?? \"/\", `http://localhost`);\n    const method = req.method?.toUpperCase();\n\n  // Health check\n  if (method === \"GET\" && url.pathname === \"/health\") {\n    return send(res, 200, { status: \"ok\" });\n  }\n\n  // OpenAPI spec\n  if (method === \"GET\" && url.pathname === \"/openapi.json\") {\n    return send(res, 200, OPENAPI_SPEC);\n  }\n\n    if (method === \"POST\" && url.pathname === \"/remediate\") {\n    let body: { cveId?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.cveId !== \"string\" || !body.cveId) {\n      return send(res, 400, { error: \"cveId is required (string)\" });\n    }\n    try {\n      const report = await deps.remediateFn(body.cveId, withOpenApiSource(body.options) as RemediateOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    if (method === \"POST\" && url.pathname === \"/plan-remediation\") {\n    let body: { cveId?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.cveId !== \"string\" || !body.cveId) {\n      return send(res, 400, { error: \"cveId is required (string)\" });\n    }\n    try {\n      const report = await deps.planRemediationFn(body.cveId, withOpenApiSource(body.options) as RemediateOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    if (method === \"POST\" && url.pathname === \"/remediate-from-scan\") {\n    let body: { inputPath?: unknown; options?: unknown };\n    try {\n      body = (await readBody(req)) as typeof body;\n    } catch {\n      return send(res, 400, { error: \"Invalid JSON body\" });\n    }\n    if (typeof body.inputPath !== \"string\" || !body.inputPath) {\n      return send(res, 400, { error: \"inputPath is required (string)\" });\n    }\n    try {\n      const report = await deps.remediateFromScanFn(body.inputPath, withOpenApiSource(body.options) as ScanOptions);\n      return send(res, 200, report);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return send(res, 400, { error: message });\n    }\n  }\n\n    return send(res, 404, { error: \"Not found\" });\n  });\n}\n\nexport const OPENAPI_SPEC = {\n  openapi: \"3.1.0\",\n  info: {\n    title: \"autoremediator\",\n    version: PACKAGE_VERSION,\n    description: \"Agentic CVE remediation for Node.js dependency projects\",\n  },\n  paths: {\n    \"/remediate\": {\n      post: {\n        operationId: \"remediate\",\n        summary: \"Remediate a single CVE\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.cveId,\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: createRemediateOptionSchemaProperties(),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/plan-remediation\": {\n      post: {\n        operationId: \"planRemediation\",\n        summary: \"Generate a non-mutating remediation preview\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.cveId,\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: createRemediateOptionSchemaProperties({ includeDryRun: false, includePreview: false, includeEvidence: true }),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/remediate-from-scan\": {\n      post: {\n        operationId: \"remediateFromScan\",\n        summary: \"Parse a scanner file and remediate all found CVEs\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"inputPath\"],\n                properties: {\n                  inputPath: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.inputPath,\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"ScanOptions\",\n                    properties: createScanOptionSchemaProperties(),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"ScanReport\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: createScanReportSchemaProperties(),\n                },\n              },\n            },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { error: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n    \"/health\": {\n      get: {\n        operationId: \"health\",\n        summary: \"Health check\",\n        responses: {\n          \"200\": {\n            description: \"Server is healthy\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { status: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n  },\n};\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  return fileURLToPath(import.meta.url) === process.argv[1];\n}\n\nif (isMainModule()) {\n  const port = parsePort();\n  const server = createOpenApiServer();\n  server.listen(port, () => {\n    console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);\n    console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAQA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAa9B,IAAM,eAAe;AAErB,SAAS,YAAoB;AAC3B,QAAM,MAAM,QAAQ,KAAK,QAAQ,QAAQ;AACzC,MAAI,QAAQ,MAAM,QAAQ,KAAK,MAAM,CAAC,GAAG;AACvC,UAAM,IAAI,SAAS,QAAQ,KAAK,MAAM,CAAC,GAAG,EAAE;AAC5C,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,MAAI,QAAQ,IAAI,MAAM;AACpB,UAAM,IAAI,SAAS,QAAQ,IAAI,MAAM,EAAE;AACvC,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAA6C;AAC7D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,MAAM;AACV,QAAI,YAAY,MAAM;AACtB,QAAI,GAAG,QAAQ,CAAC,UAAkB;AAAE,aAAO;AAAA,IAAO,CAAC;AACnD,QAAI,GAAG,OAAO,MAAM;AAClB,UAAI;AACF,gBAAQ,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;AAAA,MACpC,QAAQ;AACN,eAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAEA,SAAS,KAAK,KAA0B,QAAgB,MAAqB;AAC3E,QAAM,UAAU,KAAK,UAAU,IAAI;AACnC,MAAI,UAAU,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,kBAAkB,OAAO,WAAW,OAAO;AAAA,EAC7C,CAAC;AACD,MAAI,IAAI,OAAO;AACjB;AAEA,SAAS,kBAAkB,SAA2C;AACpE,QAAM,aAAa,OAAO,YAAY,YAAY,YAAY,OACzD,UACD,CAAC;AACL,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,OAAO,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACtE;AACF;AAQA,IAAM,cAAiC;AAAA,EACrC,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB,mBAAmB;AACrB;AAEO,SAAS,oBAAoB,OAA0B,aAA0B;AACtF,SAAO,KAAK,aAAa,OAAO,KAAK,QAAQ;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,UAAM,SAAS,IAAI,QAAQ,YAAY;AAGzC,QAAI,WAAW,SAAS,IAAI,aAAa,WAAW;AAClD,aAAO,KAAK,KAAK,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,IACxC;AAGA,QAAI,WAAW,SAAS,IAAI,aAAa,iBAAiB;AACxD,aAAO,KAAK,KAAK,KAAK,YAAY;AAAA,IACpC;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,cAAc;AACxD,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,OAAO;AACjD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,MAC/D;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,YAAY,KAAK,OAAO,kBAAkB,KAAK,OAAO,CAAqB;AACrG,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,qBAAqB;AAC/D,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,OAAO;AACjD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAAA,MAC/D;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,kBAAkB,KAAK,OAAO,kBAAkB,KAAK,OAAO,CAAqB;AAC3G,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,QAAI,WAAW,UAAU,IAAI,aAAa,wBAAwB;AAClE,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,SAAS,GAAG;AAAA,MAC5B,QAAQ;AACN,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MACtD;AACA,UAAI,OAAO,KAAK,cAAc,YAAY,CAAC,KAAK,WAAW;AACzD,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,MACnE;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,oBAAoB,KAAK,WAAW,kBAAkB,KAAK,OAAO,CAAgB;AAC5G,eAAO,KAAK,KAAK,KAAK,MAAM;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC1C;AAAA,IACF;AAEE,WAAO,KAAK,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EAC9C,CAAC;AACH;AAEO,IAAM,eAAe;AAAA,EAC1B,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,EACf;AAAA,EACA,OAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,oBACjC,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,sCAAsC;AAAA,kBACpD;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,oBACjC,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,sCAAsC,EAAE,eAAe,OAAO,gBAAgB,OAAO,iBAAiB,KAAK,CAAC;AAAA,kBAC1H;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,MACtB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,WAAW;AAAA,gBACtB,YAAY;AAAA,kBACV,WAAW;AAAA,oBACT,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,kBACnC;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,iCAAiC;AAAA,kBAC/C;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,iCAAiC;AAAA,gBAC/C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC1C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,QACT,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC3C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,SAAO,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC;AAC1D;AAEA,IAAI,aAAa,GAAG;AAClB,QAAM,OAAO,UAAU;AACvB,QAAM,SAAS,oBAAoB;AACnC,SAAO,OAAO,MAAM,MAAM;AACxB,YAAQ,IAAI,+DAA+D,IAAI,EAAE;AACjF,YAAQ,IAAI,oCAAoC,IAAI,eAAe;AAAA,EACrE,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/openapi/server.ts","../../src/openapi/spec/schemas.ts","../../src/openapi/spec/paths.ts","../../src/openapi/spec/index.ts","../../src/openapi/http-utils.ts","../../src/openapi/handlers/validators.ts","../../src/openapi/handlers/routes.ts","../../src/openapi/handlers/index.ts"],"sourcesContent":["/**\n * autoremediator OpenAPI HTTP server\n *\n * Exposes POST /remediate and POST /remediate-from-scan as a lightweight\n * HTTP server using Node.js built-in http module (no framework dependency).\n *\n * Start: node dist/openapi/server.js [--port 3000]\n */\nimport http from \"node:http\";\nimport { fileURLToPath } from \"node:url\";\nimport {\n  inspectPatchArtifact,\n  listPatchArtifacts,\n  planRemediation,\n  remediate,\n  remediateFromScan,\n  validatePatchArtifact,\n} from \"../api/index.js\";\nimport { OPENAPI_SPEC } from \"./spec/index.js\";\nimport { handleOpenApiRequest } from \"./handlers/index.js\";\nimport { parsePort, sendJson } from \"./http-utils.js\";\n\nexport { OPENAPI_SPEC } from \"./spec/index.js\";\n\nexport interface OpenApiServerDeps {\n  remediateFn: typeof remediate;\n  remediateFromScanFn: typeof remediateFromScan;\n  planRemediationFn: typeof planRemediation;\n  listPatchArtifactsFn: typeof listPatchArtifacts;\n  inspectPatchArtifactFn: typeof inspectPatchArtifact;\n  validatePatchArtifactFn: typeof validatePatchArtifact;\n}\n\nconst defaultDeps: OpenApiServerDeps = {\n  remediateFn: remediate,\n  remediateFromScanFn: remediateFromScan,\n  planRemediationFn: planRemediation,\n  listPatchArtifactsFn: listPatchArtifacts,\n  inspectPatchArtifactFn: inspectPatchArtifact,\n  validatePatchArtifactFn: validatePatchArtifact,\n};\n\nexport function createOpenApiServer(deps: OpenApiServerDeps = defaultDeps): http.Server {\n  return http.createServer(async (req, res) => {\n    if (await handleOpenApiRequest(req, res, deps)) {\n      return;\n    }\n    return sendJson(res, 404, { error: \"Not found\" });\n  });\n}\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  return fileURLToPath(import.meta.url) === process.argv[1];\n}\n\nif (isMainModule()) {\n  const port = parsePort();\n  const server = createOpenApiServer();\n  server.listen(port, () => {\n    console.log(`autoremediator OpenAPI server listening on http://localhost:${port}`);\n    console.log(`  OpenAPI spec: http://localhost:${port}/openapi.json`);\n  });\n}\n","import { OPTION_DESCRIPTIONS } from \"../../api/index.js\";\n\nexport const PATCH_ARTIFACT_OPTION_PROPERTIES = {\n  cwd: { type: \"string\", description: OPTION_DESCRIPTIONS.cwd },\n  patchesDir: { type: \"string\", description: OPTION_DESCRIPTIONS.patchesDir },\n  packageManager: {\n    type: \"string\",\n    enum: [\"npm\", \"pnpm\", \"yarn\"],\n    description: OPTION_DESCRIPTIONS.packageManager,\n  },\n} as const;\n\nexport const REMEDIATION_REPORT_SCHEMA = {\n  type: \"object\",\n  properties: {\n    cveId: { type: \"string\" },\n    cveDetails: { type: [\"object\", \"null\"] },\n    vulnerablePackages: { type: \"array\", items: { type: \"object\" } },\n    results: { type: \"array\", items: { type: \"object\" } },\n    agentSteps: { type: \"number\" },\n    summary: { type: \"string\" },\n    evidenceFile: { type: \"string\" },\n    llmUsage: { type: \"array\", items: { type: \"object\" } },\n    correlation: { type: \"object\" },\n    provenance: { type: \"object\" },\n    constraints: { type: \"object\" },\n    resumedFromCache: { type: \"boolean\" },\n  },\n} as const;\n\nexport const ERROR_RESPONSE_SCHEMA = {\n  type: \"object\",\n  properties: { error: { type: \"string\" } },\n} as const;","import {\n  createRemediateOptionSchemaProperties,\n  createScanOptionSchemaProperties,\n  createScanReportSchemaProperties,\n  OPTION_DESCRIPTIONS,\n} from \"../../api/index.js\";\nimport {\n  ERROR_RESPONSE_SCHEMA,\n  PATCH_ARTIFACT_OPTION_PROPERTIES,\n  REMEDIATION_REPORT_SCHEMA,\n} from \"./schemas.js\";\n\nexport function createOpenApiPaths() {\n  return {\n    \"/remediate\": {\n      post: {\n        operationId: \"remediate\",\n        summary: \"Remediate a single CVE\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.cveId,\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: createRemediateOptionSchemaProperties(),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: REMEDIATION_REPORT_SCHEMA } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/plan-remediation\": {\n      post: {\n        operationId: \"planRemediation\",\n        summary: \"Generate a non-mutating remediation preview\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"cveId\"],\n                properties: {\n                  cveId: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.cveId,\n                    pattern: \"^CVE-\\\\d{4}-\\\\d+$\",\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"RemediateOptions\",\n                    properties: createRemediateOptionSchemaProperties({\n                      includeDryRun: false,\n                      includePreview: false,\n                      includeEvidence: true,\n                    }),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"RemediationReport\",\n            content: { \"application/json\": { schema: REMEDIATION_REPORT_SCHEMA } },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/remediate-from-scan\": {\n      post: {\n        operationId: \"remediateFromScan\",\n        summary: \"Parse a scanner file and remediate all found CVEs\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"inputPath\"],\n                properties: {\n                  inputPath: {\n                    type: \"string\",\n                    description: OPTION_DESCRIPTIONS.inputPath,\n                  },\n                  options: {\n                    type: \"object\",\n                    description: \"ScanOptions\",\n                    properties: createScanOptionSchemaProperties(),\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"ScanReport\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: createScanReportSchemaProperties(),\n                },\n              },\n            },\n          },\n          \"400\": {\n            description: \"Invalid input or remediation error\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/patches/list\": {\n      post: {\n        operationId: \"listPatchArtifacts\",\n        summary: \"List stored patch artifacts\",\n        requestBody: {\n          required: false,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                properties: {\n                  options: {\n                    type: \"object\",\n                    description: \"PatchArtifactQueryOptions\",\n                    properties: PATCH_ARTIFACT_OPTION_PROPERTIES,\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"Patch artifact summaries\",\n            content: {\n              \"application/json\": { schema: { type: \"array\", items: { type: \"object\" } } },\n            },\n          },\n          \"400\": {\n            description: \"Invalid input\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/patches/inspect\": {\n      post: {\n        operationId: \"inspectPatchArtifact\",\n        summary: \"Inspect a stored patch artifact\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"patchFilePath\"],\n                properties: {\n                  patchFilePath: { type: \"string\" },\n                  options: {\n                    type: \"object\",\n                    description: \"PatchArtifactQueryOptions\",\n                    properties: {\n                      cwd: PATCH_ARTIFACT_OPTION_PROPERTIES.cwd,\n                    },\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"Patch artifact inspection\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/patches/validate\": {\n      post: {\n        operationId: \"validatePatchArtifact\",\n        summary: \"Validate a stored patch artifact\",\n        requestBody: {\n          required: true,\n          content: {\n            \"application/json\": {\n              schema: {\n                type: \"object\",\n                required: [\"patchFilePath\"],\n                properties: {\n                  patchFilePath: { type: \"string\" },\n                  options: {\n                    type: \"object\",\n                    description: \"PatchArtifactQueryOptions\",\n                    properties: PATCH_ARTIFACT_OPTION_PROPERTIES,\n                  },\n                },\n              },\n            },\n          },\n        },\n        responses: {\n          \"200\": {\n            description: \"Patch artifact validation report\",\n            content: { \"application/json\": { schema: { type: \"object\" } } },\n          },\n          \"400\": {\n            description: \"Invalid input\",\n            content: { \"application/json\": { schema: ERROR_RESPONSE_SCHEMA } },\n          },\n        },\n      },\n    },\n    \"/health\": {\n      get: {\n        operationId: \"health\",\n        summary: \"Health check\",\n        responses: {\n          \"200\": {\n            description: \"Server is healthy\",\n            content: {\n              \"application/json\": {\n                schema: {\n                  type: \"object\",\n                  properties: { status: { type: \"string\" } },\n                },\n              },\n            },\n          },\n        },\n      },\n    },\n  } as const;\n}","import { PACKAGE_VERSION } from \"../../version.js\";\nimport { createOpenApiPaths } from \"./paths.js\";\n\nexport const OPENAPI_SPEC = {\n  openapi: \"3.1.0\",\n  info: {\n    title: \"autoremediator\",\n    version: PACKAGE_VERSION,\n    description: \"Agentic CVE remediation for Node.js dependency projects\",\n  },\n  servers: [\n    {\n      url: \"http://localhost:3000\",\n      description: \"Local development server\",\n    },\n  ],\n  \"x-agent-compatible\": true,\n  \"x-agent-use-cases\": [\n    \"plan-first remediation\",\n    \"scanner-driven batch remediation\",\n    \"patch lifecycle validation\",\n  ],\n  paths: createOpenApiPaths(),\n} as const;","import http from \"node:http\";\n\nconst DEFAULT_PORT = 3000;\n\nexport function parsePort(): number {\n  const idx = process.argv.indexOf(\"--port\");\n  if (idx !== -1 && process.argv[idx + 1]) {\n    const p = parseInt(process.argv[idx + 1], 10);\n    if (!isNaN(p)) return p;\n  }\n  if (process.env.PORT) {\n    const p = parseInt(process.env.PORT, 10);\n    if (!isNaN(p)) return p;\n  }\n  return DEFAULT_PORT;\n}\n\nexport function readBody(req: http.IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.setEncoding(\"utf8\");\n    req.on(\"data\", (chunk: string) => {\n      raw += chunk;\n    });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? JSON.parse(raw) : {});\n      } catch {\n        reject(new Error(\"Invalid JSON body\"));\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nexport function sendJson(res: http.ServerResponse, status: number, body: unknown): void {\n  const payload = JSON.stringify(body);\n  res.writeHead(status, {\n    \"Content-Type\": \"application/json\",\n    \"Content-Length\": Buffer.byteLength(payload),\n  });\n  res.end(payload);\n}\n\nexport function withOpenApiSource(options: unknown): Record<string, unknown> {\n  const normalized =\n    typeof options === \"object\" && options !== null\n      ? (options as Record<string, unknown>)\n      : {};\n  return {\n    ...normalized,\n    source: typeof normalized.source === \"string\" ? normalized.source : \"openapi\",\n  };\n}","import http from \"node:http\";\nimport { readBody, sendJson } from \"../http-utils.js\";\n\nfunction toMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport async function readJsonBody<T>(\n  req: http.IncomingMessage,\n  res: http.ServerResponse\n): Promise<T | undefined> {\n  try {\n    return (await readBody(req)) as T;\n  } catch {\n    sendJson(res, 400, { error: \"Invalid JSON body\" });\n    return undefined;\n  }\n}\n\nexport async function runRequest<T>(\n  res: http.ServerResponse,\n  action: () => Promise<T>\n): Promise<void> {\n  try {\n    const report = await action();\n    sendJson(res, 200, report);\n  } catch (error) {\n    sendJson(res, 400, { error: toMessage(error) });\n  }\n}\n\nexport function requireStringField(\n  body: Record<string, unknown> | undefined,\n  field: string,\n  res: http.ServerResponse,\n  errorMessage: string\n): string | undefined {\n  if (!body || typeof body[field] !== \"string\" || !(body[field] as string)) {\n    sendJson(res, 400, { error: errorMessage });\n    return undefined;\n  }\n  return body[field] as string;\n}","import http from \"node:http\";\nimport type { PatchArtifactQueryOptions, RemediateOptions, ScanOptions } from \"../../api/index.js\";\nimport { OPENAPI_SPEC } from \"../spec/index.js\";\nimport { sendJson, withOpenApiSource } from \"../http-utils.js\";\nimport type { OpenApiServerDeps } from \"../server.js\";\nimport { readJsonBody, requireStringField, runRequest } from \"./validators.js\";\n\ntype RouteHandler = (req: http.IncomingMessage, res: http.ServerResponse) => Promise<void>;\n\nexport function createOpenApiRouteHandlers(deps: OpenApiServerDeps): Map<string, RouteHandler> {\n  const routes = new Map<string, RouteHandler>();\n\n  routes.set(\"GET /health\", async (_req, res) => {\n    sendJson(res, 200, { status: \"ok\" });\n  });\n\n  routes.set(\"GET /openapi.json\", async (_req, res) => {\n    sendJson(res, 200, OPENAPI_SPEC);\n  });\n\n  routes.set(\"POST /remediate\", async (req, res) => {\n    const body = await readJsonBody<{ cveId?: unknown; options?: unknown }>(req, res);\n    const cveId = requireStringField(body as Record<string, unknown> | undefined, \"cveId\", res, \"cveId is required (string)\");\n    if (!cveId) return;\n\n    await runRequest(res, () =>\n      deps.remediateFn(cveId, withOpenApiSource(body?.options) as RemediateOptions)\n    );\n  });\n\n  routes.set(\"POST /plan-remediation\", async (req, res) => {\n    const body = await readJsonBody<{ cveId?: unknown; options?: unknown }>(req, res);\n    const cveId = requireStringField(body as Record<string, unknown> | undefined, \"cveId\", res, \"cveId is required (string)\");\n    if (!cveId) return;\n\n    await runRequest(res, () =>\n      deps.planRemediationFn(cveId, withOpenApiSource(body?.options) as RemediateOptions)\n    );\n  });\n\n  routes.set(\"POST /remediate-from-scan\", async (req, res) => {\n    const body = await readJsonBody<{ inputPath?: unknown; options?: unknown }>(req, res);\n    const inputPath = requireStringField(\n      body as Record<string, unknown> | undefined,\n      \"inputPath\",\n      res,\n      \"inputPath is required (string)\"\n    );\n    if (!inputPath) return;\n\n    await runRequest(res, () =>\n      deps.remediateFromScanFn(inputPath, withOpenApiSource(body?.options) as ScanOptions)\n    );\n  });\n\n  routes.set(\"POST /patches/list\", async (req, res) => {\n    const body = await readJsonBody<{ options?: unknown }>(req, res);\n    if (!body) return;\n    await runRequest(res, () => deps.listPatchArtifactsFn(body.options as PatchArtifactQueryOptions));\n  });\n\n  routes.set(\"POST /patches/inspect\", async (req, res) => {\n    const body = await readJsonBody<{ patchFilePath?: unknown; options?: unknown }>(req, res);\n    const patchFilePath = requireStringField(\n      body as Record<string, unknown> | undefined,\n      \"patchFilePath\",\n      res,\n      \"patchFilePath is required (string)\"\n    );\n    if (!patchFilePath) return;\n    await runRequest(res, () =>\n      deps.inspectPatchArtifactFn(patchFilePath, body?.options as PatchArtifactQueryOptions)\n    );\n  });\n\n  routes.set(\"POST /patches/validate\", async (req, res) => {\n    const body = await readJsonBody<{ patchFilePath?: unknown; options?: unknown }>(req, res);\n    const patchFilePath = requireStringField(\n      body as Record<string, unknown> | undefined,\n      \"patchFilePath\",\n      res,\n      \"patchFilePath is required (string)\"\n    );\n    if (!patchFilePath) return;\n    await runRequest(res, () =>\n      deps.validatePatchArtifactFn(patchFilePath, body?.options as PatchArtifactQueryOptions)\n    );\n  });\n\n  return routes;\n}","import http from \"node:http\";\nimport type { OpenApiServerDeps } from \"../server.js\";\nimport { createOpenApiRouteHandlers } from \"./routes.js\";\n\nexport async function handleOpenApiRequest(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  deps: OpenApiServerDeps\n): Promise<boolean> {\n  const url = new URL(req.url ?? \"/\", \"http://localhost\");\n  const method = req.method?.toUpperCase() ?? \"GET\";\n  const key = `${method} ${url.pathname}`;\n\n  const routes = createOpenApiRouteHandlers(deps);\n  const handler = routes.get(key);\n  if (!handler) {\n    return false;\n  }\n\n  await handler(req, res);\n  return true;\n}"],"mappings":";;;;;;;;;;;;;;;;;AAQA,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACPvB,IAAM,mCAAmC;AAAA,EAC9C,KAAK,EAAE,MAAM,UAAU,aAAa,oBAAoB,IAAI;AAAA,EAC5D,YAAY,EAAE,MAAM,UAAU,aAAa,oBAAoB,WAAW;AAAA,EAC1E,gBAAgB;AAAA,IACd,MAAM;AAAA,IACN,MAAM,CAAC,OAAO,QAAQ,MAAM;AAAA,IAC5B,aAAa,oBAAoB;AAAA,EACnC;AACF;AAEO,IAAM,4BAA4B;AAAA,EACvC,MAAM;AAAA,EACN,YAAY;AAAA,IACV,OAAO,EAAE,MAAM,SAAS;AAAA,IACxB,YAAY,EAAE,MAAM,CAAC,UAAU,MAAM,EAAE;AAAA,IACvC,oBAAoB,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,IAC/D,SAAS,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,IACpD,YAAY,EAAE,MAAM,SAAS;AAAA,IAC7B,SAAS,EAAE,MAAM,SAAS;AAAA,IAC1B,cAAc,EAAE,MAAM,SAAS;AAAA,IAC/B,UAAU,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,IACrD,aAAa,EAAE,MAAM,SAAS;AAAA,IAC9B,YAAY,EAAE,MAAM,SAAS;AAAA,IAC7B,aAAa,EAAE,MAAM,SAAS;AAAA,IAC9B,kBAAkB,EAAE,MAAM,UAAU;AAAA,EACtC;AACF;AAEO,IAAM,wBAAwB;AAAA,EACnC,MAAM;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,EAAE;AAC1C;;;ACrBO,SAAS,qBAAqB;AACnC,SAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,oBACjC,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,sCAAsC;AAAA,kBACpD;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;AAAA,UACvE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,OAAO;AAAA,gBAClB,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,oBACjC,SAAS;AAAA,kBACX;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,sCAAsC;AAAA,sBAChD,eAAe;AAAA,sBACf,gBAAgB;AAAA,sBAChB,iBAAiB;AAAA,oBACnB,CAAC;AAAA,kBACH;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;AAAA,UACvE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,MACtB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,WAAW;AAAA,gBACtB,YAAY;AAAA,kBACV,WAAW;AAAA,oBACT,MAAM;AAAA,oBACN,aAAa,oBAAoB;AAAA,kBACnC;AAAA,kBACA,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY,iCAAiC;AAAA,kBAC/C;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,iCAAiC;AAAA,gBAC/C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,MACf,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,YAAY;AAAA,kBACV,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,kBACd;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,YAC7E;AAAA,UACF;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,eAAe;AAAA,gBAC1B,YAAY;AAAA,kBACV,eAAe,EAAE,MAAM,SAAS;AAAA,kBAChC,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,sBACV,KAAK,iCAAiC;AAAA,oBACxC;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,QACJ,aAAa;AAAA,QACb,SAAS;AAAA,QACT,aAAa;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ;AAAA,gBACN,MAAM;AAAA,gBACN,UAAU,CAAC,eAAe;AAAA,gBAC1B,YAAY;AAAA,kBACV,eAAe,EAAE,MAAM,SAAS;AAAA,kBAChC,SAAS;AAAA,oBACP,MAAM;AAAA,oBACN,aAAa;AAAA,oBACb,YAAY;AAAA,kBACd;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE,EAAE;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;AAAA,UACnE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS;AAAA,QACT,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,YACb,SAAS;AAAA,cACP,oBAAoB;AAAA,gBAClB,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,EAAE;AAAA,gBAC3C;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACzQO,IAAM,eAAe;AAAA,EAC1B,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAa;AAAA,EACf;AAAA,EACA,SAAS;AAAA,IACP;AAAA,MACE,KAAK;AAAA,MACL,aAAa;AAAA,IACf;AAAA,EACF;AAAA,EACA,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,OAAO,mBAAmB;AAC5B;;;ACrBA,IAAM,eAAe;AAEd,SAAS,YAAoB;AAClC,QAAM,MAAM,QAAQ,KAAK,QAAQ,QAAQ;AACzC,MAAI,QAAQ,MAAM,QAAQ,KAAK,MAAM,CAAC,GAAG;AACvC,UAAM,IAAI,SAAS,QAAQ,KAAK,MAAM,CAAC,GAAG,EAAE;AAC5C,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,MAAI,QAAQ,IAAI,MAAM;AACpB,UAAM,IAAI,SAAS,QAAQ,IAAI,MAAM,EAAE;AACvC,QAAI,CAAC,MAAM,CAAC,EAAG,QAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEO,SAAS,SAAS,KAA6C;AACpE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,MAAM;AACV,QAAI,YAAY,MAAM;AACtB,QAAI,GAAG,QAAQ,CAAC,UAAkB;AAChC,aAAO;AAAA,IACT,CAAC;AACD,QAAI,GAAG,OAAO,MAAM;AAClB,UAAI;AACF,gBAAQ,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;AAAA,MACpC,QAAQ;AACN,eAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAEO,SAAS,SAAS,KAA0B,QAAgB,MAAqB;AACtF,QAAM,UAAU,KAAK,UAAU,IAAI;AACnC,MAAI,UAAU,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,kBAAkB,OAAO,WAAW,OAAO;AAAA,EAC7C,CAAC;AACD,MAAI,IAAI,OAAO;AACjB;AAEO,SAAS,kBAAkB,SAA2C;AAC3E,QAAM,aACJ,OAAO,YAAY,YAAY,YAAY,OACtC,UACD,CAAC;AACP,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,OAAO,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACtE;AACF;;;AClDA,SAAS,UAAU,OAAwB;AACzC,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAEA,eAAsB,aACpB,KACA,KACwB;AACxB,MAAI;AACF,WAAQ,MAAM,SAAS,GAAG;AAAA,EAC5B,QAAQ;AACN,aAAS,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACjD,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,WACpB,KACA,QACe;AACf,MAAI;AACF,UAAM,SAAS,MAAM,OAAO;AAC5B,aAAS,KAAK,KAAK,MAAM;AAAA,EAC3B,SAAS,OAAO;AACd,aAAS,KAAK,KAAK,EAAE,OAAO,UAAU,KAAK,EAAE,CAAC;AAAA,EAChD;AACF;AAEO,SAAS,mBACd,MACA,OACA,KACA,cACoB;AACpB,MAAI,CAAC,QAAQ,OAAO,KAAK,KAAK,MAAM,YAAY,CAAE,KAAK,KAAK,GAAc;AACxE,aAAS,KAAK,KAAK,EAAE,OAAO,aAAa,CAAC;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,KAAK,KAAK;AACnB;;;ACjCO,SAAS,2BAA2B,MAAoD;AAC7F,QAAM,SAAS,oBAAI,IAA0B;AAE7C,SAAO,IAAI,eAAe,OAAO,MAAM,QAAQ;AAC7C,aAAS,KAAK,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,EACrC,CAAC;AAED,SAAO,IAAI,qBAAqB,OAAO,MAAM,QAAQ;AACnD,aAAS,KAAK,KAAK,YAAY;AAAA,EACjC,CAAC;AAED,SAAO,IAAI,mBAAmB,OAAO,KAAK,QAAQ;AAChD,UAAM,OAAO,MAAM,aAAqD,KAAK,GAAG;AAChF,UAAM,QAAQ,mBAAmB,MAA6C,SAAS,KAAK,4BAA4B;AACxH,QAAI,CAAC,MAAO;AAEZ,UAAM;AAAA,MAAW;AAAA,MAAK,MACpB,KAAK,YAAY,OAAO,kBAAkB,MAAM,OAAO,CAAqB;AAAA,IAC9E;AAAA,EACF,CAAC;AAED,SAAO,IAAI,0BAA0B,OAAO,KAAK,QAAQ;AACvD,UAAM,OAAO,MAAM,aAAqD,KAAK,GAAG;AAChF,UAAM,QAAQ,mBAAmB,MAA6C,SAAS,KAAK,4BAA4B;AACxH,QAAI,CAAC,MAAO;AAEZ,UAAM;AAAA,MAAW;AAAA,MAAK,MACpB,KAAK,kBAAkB,OAAO,kBAAkB,MAAM,OAAO,CAAqB;AAAA,IACpF;AAAA,EACF,CAAC;AAED,SAAO,IAAI,6BAA6B,OAAO,KAAK,QAAQ;AAC1D,UAAM,OAAO,MAAM,aAAyD,KAAK,GAAG;AACpF,UAAM,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAW;AAEhB,UAAM;AAAA,MAAW;AAAA,MAAK,MACpB,KAAK,oBAAoB,WAAW,kBAAkB,MAAM,OAAO,CAAgB;AAAA,IACrF;AAAA,EACF,CAAC;AAED,SAAO,IAAI,sBAAsB,OAAO,KAAK,QAAQ;AACnD,UAAM,OAAO,MAAM,aAAoC,KAAK,GAAG;AAC/D,QAAI,CAAC,KAAM;AACX,UAAM,WAAW,KAAK,MAAM,KAAK,qBAAqB,KAAK,OAAoC,CAAC;AAAA,EAClG,CAAC;AAED,SAAO,IAAI,yBAAyB,OAAO,KAAK,QAAQ;AACtD,UAAM,OAAO,MAAM,aAA6D,KAAK,GAAG;AACxF,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,cAAe;AACpB,UAAM;AAAA,MAAW;AAAA,MAAK,MACpB,KAAK,uBAAuB,eAAe,MAAM,OAAoC;AAAA,IACvF;AAAA,EACF,CAAC;AAED,SAAO,IAAI,0BAA0B,OAAO,KAAK,QAAQ;AACvD,UAAM,OAAO,MAAM,aAA6D,KAAK,GAAG;AACxF,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,cAAe;AACpB,UAAM;AAAA,MAAW;AAAA,MAAK,MACpB,KAAK,wBAAwB,eAAe,MAAM,OAAoC;AAAA,IACxF;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;ACtFA,eAAsB,qBACpB,KACA,KACA,MACkB;AAClB,QAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,QAAM,SAAS,IAAI,QAAQ,YAAY,KAAK;AAC5C,QAAM,MAAM,GAAG,MAAM,IAAI,IAAI,QAAQ;AAErC,QAAM,SAAS,2BAA2B,IAAI;AAC9C,QAAM,UAAU,OAAO,IAAI,GAAG;AAC9B,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,KAAK,GAAG;AACtB,SAAO;AACT;;;APYA,IAAM,cAAiC;AAAA,EACrC,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,yBAAyB;AAC3B;AAEO,SAAS,oBAAoB,OAA0B,aAA0B;AACtF,SAAO,KAAK,aAAa,OAAO,KAAK,QAAQ;AAC3C,QAAI,MAAM,qBAAqB,KAAK,KAAK,IAAI,GAAG;AAC9C;AAAA,IACF;AACA,WAAO,SAAS,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EAClD,CAAC;AACH;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,SAAO,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC;AAC1D;AAEA,IAAI,aAAa,GAAG;AAClB,QAAM,OAAO,UAAU;AACvB,QAAM,SAAS,oBAAoB;AACnC,SAAO,OAAO,MAAM,MAAM;AACxB,YAAQ,IAAI,+DAA+D,IAAI,EAAE;AACjF,YAAQ,IAAI,oCAAoC,IAAI,eAAe;AAAA,EACrE,CAAC;AACH;","names":[]}