@coana-tech/cli 14.12.145 → 14.12.147

package/cli.mjs

@@ -17420,7 +17420,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join34 = ",";
+            let join36 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value2)) {
               if (value2.length === 0) {
@@ -17434,7 +17434,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join34 = `,
+                join36 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
@@ -17442,13 +17442,13 @@ ${indentation}`;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyFnReplacer(String(i7), value2, stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join34;
+                res += join36;
               }
               const tmp = stringifyFnReplacer(String(i7), value2, stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res += `${join34}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join36}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17469,7 +17469,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join34 = `,
+              join36 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17483,13 +17483,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value2, stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join34;
+                separator = join36;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace2}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join34;
+              separator = join36;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -17530,7 +17530,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join34 = ",";
+            let join36 = ",";
             if (Array.isArray(value2)) {
               if (value2.length === 0) {
                 return "[]";
@@ -17543,7 +17543,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join34 = `,
+                join36 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
@@ -17551,13 +17551,13 @@ ${indentation}`;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyArrayReplacer(String(i7), value2[i7], stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join34;
+                res += join36;
               }
               const tmp = stringifyArrayReplacer(String(i7), value2[i7], stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res += `${join34}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join36}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17570,7 +17570,7 @@ ${originalIndentation}`;
             let whitespace2 = "";
             if (spacer !== "") {
               indentation += spacer;
-              join34 = `,
+              join36 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17579,7 +17579,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value2[key2], stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join34;
+                separator = join36;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -17637,20 +17637,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join35 = `,
+              const join37 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
               let i7 = 0;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyIndent(String(i7), value2[i7], stack2, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join35;
+                res2 += join37;
               }
               const tmp = stringifyIndent(String(i7), value2[i7], stack2, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res2 += `${join35}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join37}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -17666,16 +17666,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join34 = `,
+            const join36 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value2)) {
-              res += stringifyTypedArray(value2, join34, maximumBreadth);
+              res += stringifyTypedArray(value2, join36, maximumBreadth);
               keys = keys.slice(value2.length);
               maximumPropertiesToStringify -= value2.length;
-              separator = join34;
+              separator = join36;
             }
             if (deterministic) {
               keys = insertSort(keys);
@@ -17686,13 +17686,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value2[key2], stack2, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join34;
+                separator = join36;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join34;
+              separator = join36;
             }
             if (separator !== "") {
               res = `
@@ -19259,7 +19259,7 @@ var require_buffer_list = __commonJS({
         }
       }, {
         key: "join",
-        value: function join34(s6) {
+        value: function join36(s6) {
           if (this.length === 0) return "";
           var p3 = this.head;
           var ret = "" + p3.data;
@@ -30493,7 +30493,7 @@ var require_lodash = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join34(array, separator) {
+        function join36(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last2(array) {
@@ -32412,7 +32412,7 @@ var require_lodash = __commonJS({
         lodash16.isUndefined = isUndefined2;
         lodash16.isWeakMap = isWeakMap;
         lodash16.isWeakSet = isWeakSet;
-        lodash16.join = join34;
+        lodash16.join = join36;
         lodash16.kebabCase = kebabCase;
         lodash16.last = last2;
         lodash16.lastIndexOf = lastIndexOf;
@@ -43837,7 +43837,7 @@ var require_lib7 = __commonJS({
       }
       return buf;
     };
-    var randomBytes2 = checks.hasCrypto() ? (buf, start = 0, end2 = buf.length) => (window.crypto.getRandomValues(buf.subarray(start, end2)), buf) : (buf, start, end2) => randomBytesFrom(SYSTEM, buf, start, end2);
+    var randomBytes4 = checks.hasCrypto() ? (buf, start = 0, end2 = buf.length) => (window.crypto.getRandomValues(buf.subarray(start, end2)), buf) : (buf, start, end2) => randomBytesFrom(SYSTEM, buf, start, end2);
     var Crypto = class _Crypto extends ARandom {
       constructor(size = 64) {
         super();
@@ -43853,7 +43853,7 @@ var require_lib7 = __commonJS({
       }
       int() {
         if (this.i >= this.u32.length) {
-          randomBytes2(this.buffer);
+          randomBytes4(this.buffer);
           this.i = 0;
         }
         return this.u32[this.i++];
@@ -44054,7 +44054,7 @@ var require_lib7 = __commonJS({
     };
     var uuidv4Bytes = (buf, rnd) => {
       buf = buf || new Uint8Array(16);
-      buf = rnd ? randomBytesFrom(rnd, buf) : randomBytes2(buf);
+      buf = rnd ? randomBytesFrom(rnd, buf) : randomBytes4(buf);
       buf[6] = 64 | buf[6] & 15;
       buf[8] = 128 | buf[8] & 63;
       return buf;
@@ -44122,7 +44122,7 @@ var require_lib7 = __commonJS({
     exports2.gaussian = gaussian;
     exports2.geometric = geometric;
     exports2.normal = normal;
-    exports2.randomBytes = randomBytes2;
+    exports2.randomBytes = randomBytes4;
     exports2.randomBytesFrom = randomBytesFrom;
     exports2.randomID = randomID;
     exports2.uniform = uniform;
@@ -46046,7 +46046,7 @@ var require_builder = __commonJS({
       }
     };
     exports2.SeqBuilder = SeqBuilder;
-    function join34(first2, second, ...others) {
+    function join36(first2, second, ...others) {
       const seq = new SeqBuilder(first2, second);
       if (!others.length) {
         return seq;
@@ -46055,7 +46055,7 @@ var require_builder = __commonJS({
         return res.join(query);
       }, seq);
     }
-    exports2.join = join34;
+    exports2.join = join36;
     var SymBuilder = class extends AbstractBuilder {
       constructor(opts) {
         super();
@@ -54889,7 +54889,7 @@ var require_cjs2 = __commonJS({
 var require_lib12 = __commonJS({
   "../../node_modules/.pnpm/write-file-atomic@5.0.1/node_modules/write-file-atomic/lib/index.js"(exports2, module2) {
     "use strict";
-    module2.exports = writeFile16;
+    module2.exports = writeFile18;
     module2.exports.sync = writeFileSync4;
     module2.exports._getTmpname = getTmpname;
     module2.exports._cleanupOnExit = cleanupOnExit;
@@ -55014,7 +55014,7 @@ var require_lib12 = __commonJS({
         }
       }
     }
-    async function writeFile16(filename, data2, options, callback) {
+    async function writeFile18(filename, data2, options, callback) {
       if (options instanceof Function) {
         callback = options;
         options = {};
@@ -70071,7 +70071,7 @@ var require_lockfile = __commonJS({
             if (eol !== "\n") {
               data2 = data2.replace(/\n/g, eol);
             }
-            yield writeFile16(path9, data2);
+            yield writeFile18(path9, data2);
           });
           return function writeFilePreservingEol2(_x30, _x31) {
             return _ref31.apply(this, arguments);
@@ -70083,7 +70083,7 @@ var require_lockfile = __commonJS({
             const file = (_path2 || _load_path()).default.join(dir, filename);
             const fileLink = (_path2 || _load_path()).default.join(dir, filename + "-link");
             try {
-              yield writeFile16(file, "test");
+              yield writeFile18(file, "test");
               yield link(file, fileLink);
             } catch (err) {
               return false;
@@ -70233,7 +70233,7 @@ var require_lockfile = __commonJS({
         const lockQueue = exports3.lockQueue = new (_blockingQueue || _load_blockingQueue()).default("fs lock");
         const readFileBuffer = exports3.readFileBuffer = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readFile);
         const open = exports3.open = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.open);
-        const writeFile16 = exports3.writeFile = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.writeFile);
+        const writeFile18 = exports3.writeFile = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.writeFile);
         const readlink2 = exports3.readlink = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readlink);
         const realpath2 = exports3.realpath = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.realpath);
         const readdir7 = exports3.readdir = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readdir);
@@ -74304,11 +74304,11 @@ ${indent3}`);
         const open = (0, (_promise || _load_promise()).promisify)((_fs || _load_fs()).default.open);
         const futimes = (0, (_promise || _load_promise()).promisify)((_fs || _load_fs()).default.futimes);
         const write = (0, (_promise || _load_promise()).promisify)((_fs || _load_fs()).default.write);
-        const unlink2 = exports3.unlink = (0, (_promise || _load_promise()).promisify)(__webpack_require__(233));
+        const unlink4 = exports3.unlink = (0, (_promise || _load_promise()).promisify)(__webpack_require__(233));
         const copyFile2 = exports3.copyFile = (() => {
           var _ref = (0, (_asyncToGenerator2 || _load_asyncToGenerator()).default)(function* (data2, cleanup) {
             try {
-              yield unlink2(data2.dest);
+              yield unlink4(data2.dest);
               yield copyFilePoly(data2.src, data2.dest, 0, data2);
             } finally {
               if (cleanup) {
@@ -122839,7 +122839,7 @@ var require_summary = __commonJS({
     exports2.summary = exports2.markdownSummary = exports2.SUMMARY_DOCS_URL = exports2.SUMMARY_ENV_VAR = void 0;
     var os_1 = __require("os");
     var fs_1 = __require("fs");
-    var { access: access5, appendFile, writeFile: writeFile16 } = fs_1.promises;
+    var { access: access5, appendFile, writeFile: writeFile18 } = fs_1.promises;
     exports2.SUMMARY_ENV_VAR = "GITHUB_STEP_SUMMARY";
     exports2.SUMMARY_DOCS_URL = "https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-job-summary";
     var Summary = class {
@@ -122897,7 +122897,7 @@ var require_summary = __commonJS({
         return __awaiter(this, void 0, void 0, function* () {
           const overwrite = !!(options === null || options === void 0 ? void 0 : options.overwrite);
           const filePath = yield this.filePath();
-          const writeFunc = overwrite ? writeFile16 : appendFile;
+          const writeFunc = overwrite ? writeFile18 : appendFile;
           yield writeFunc(filePath, this._buffer, { encoding: "utf8" });
           return this.emptyBuffer();
         });
@@ -204522,9 +204522,9 @@ var {
 } = import_index.default;
 
 // dist/index.js
-import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile35, rm as rm3, writeFile as writeFile15 } from "fs/promises";
-import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname26, join as join33, resolve as resolve44 } from "path";
+import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile35, rm as rm3, writeFile as writeFile17 } from "fs/promises";
+import { tmpdir as tmpdir5 } from "os";
+import { dirname as dirname26, join as join35, resolve as resolve44 } from "path";
 
 // ../../node_modules/.pnpm/remeda@2.14.0/node_modules/remeda/dist/chunk-ANXBDSUI.js
 var s = { done: false, hasNext: false };
@@ -209446,6 +209446,18 @@ async function sendTelemetrySocket(analysisMetadataId, telemetry) {
     console.warn("Failed to send telemetry to Socket:", error.message);
   }
 }
+async function sendAnalyzerTelemetrySocket(analysisMetadataId, telemetry) {
+  try {
+    const url2 = getSocketApiUrl("tier1-reachability-scan/add-analyzer-telemetry");
+    const data2 = {
+      analysis_metadata_id: analysisMetadataId,
+      telemetry
+    };
+    await axios2.post(url2, data2, { headers: getAuthHeaders() });
+  } catch (error) {
+    console.warn("Failed to send analyzer telemetry to Socket:", error.message);
+  }
+}
 async function registerDiagnosticsToAnalysisMetadataSocket(analysisMetadataId, diagnosticsData) {
   const abnormalExit = diagnosticsData.analysisDiagnostics.aborted ? "ABORTED" : diagnosticsData.analysisDiagnostics.timeout ? "TIMEOUT" : "NONE";
   try {
@@ -209477,16 +209489,17 @@ function getSocketAPI() {
     sendLogChunkSocket,
     createAnalysisMetadataSocket,
     sendTelemetrySocket,
+    sendAnalyzerTelemetrySocket,
     registerDiagnosticsToAnalysisMetadataSocket
   };
 }
 
 // ../utils/src/tool-extractor.ts
 import { createHash } from "node:crypto";
-import { createReadStream, createWriteStream as createWriteStream2, readFileSync, statSync as statSync2 } from "node:fs";
-import { copyFile, cp as cp2, mkdir as mkdir4, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename as basename3, dirname as dirname5, join as join4 } from "node:path";
+import { createReadStream, createWriteStream as createWriteStream2, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import { copyFile, cp as cp2, mkdir as mkdir4, writeFile as writeFile2 } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import { basename as basename3, dirname as dirname5, join as join5 } from "node:path";
 import { pipeline } from "node:stream/promises";
 import { createGunzip } from "node:zlib";
 
@@ -209891,6 +209904,71 @@ var TelemetryCollector = class {
   }
 };
 
+// ../utils/src/telemetry/analyzer-telemetry-server.ts
+import { existsSync, readFileSync, watchFile, unwatchFile } from "fs";
+import { unlink, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+import { join as join2 } from "path";
+import { randomBytes } from "crypto";
+var AnalyzerTelemetryServer = class {
+  constructor(handler) {
+    this.handler = handler;
+    const fileId = randomBytes(8).toString("hex");
+    this.filePath = join2(tmpdir(), `analyzer-telemetry-${fileId}.jsonl`);
+  }
+  filePath;
+  lastReadPosition = 0;
+  watching = false;
+  /**
+   * Starts the server and returns the file path that analyzers should write to.
+   */
+  async start() {
+    await writeFile(this.filePath, "");
+    this.watching = true;
+    watchFile(this.filePath, { interval: 1e3 }, () => {
+      this.processNewEvents();
+    });
+    return this.filePath;
+  }
+  processNewEvents() {
+    if (!existsSync(this.filePath)) return;
+    try {
+      const content = readFileSync(this.filePath, "utf-8");
+      const newContent = content.substring(this.lastReadPosition);
+      this.lastReadPosition = content.length;
+      if (!newContent) return;
+      const lines = newContent.split("\n");
+      for (const line of lines) {
+        if (line.trim()) {
+          try {
+            const event = JSON.parse(line);
+            this.handler.onAnalyzerEvent(event);
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+  }
+  /**
+   * Closes the server and cleans up the file.
+   */
+  async close() {
+    this.processNewEvents();
+    this.handler.close?.();
+    if (this.watching) {
+      unwatchFile(this.filePath);
+      this.watching = false;
+    }
+    if (existsSync(this.filePath)) {
+      try {
+        await unlink(this.filePath);
+      } catch {
+      }
+    }
+  }
+};
+
 // ../utils/src/command-utils.ts
 var DEFAULT_TIMEOUT_MS = 30 * 60 * 1e3;
 async function execAndLogOnFailure(cmd, dir, options, logLevel = "info") {
@@ -209946,15 +210024,22 @@ function startTelemetry(pid, handler) {
 async function execNeverFail(cmd, dir, options) {
   const stopHeartbeat = options?.heartbeat ? startHeartbeat(options.heartbeat) : void 0;
   let stopTelemetry;
+  let analyzerTelemetryServer;
+  let analyzerTelemetryFilePath;
+  if (options?.analyzerTelemetryHandler) {
+    analyzerTelemetryServer = new AnalyzerTelemetryServer(options.analyzerTelemetryHandler);
+    analyzerTelemetryFilePath = await analyzerTelemetryServer.start();
+  }
   try {
     return await new Promise((resolve45) => {
       let args2;
       if (typeof cmd !== "string") [cmd, ...args2] = cmd;
       const timeout = options?.timeout ?? DEFAULT_TIMEOUT_MS;
+      const env = analyzerTelemetryFilePath ? { ...options?.env ?? process.env, ANALYZER_TELEMETRY_FILE_PATH: analyzerTelemetryFilePath } : options?.env;
       const childProcess = execFile2(
         cmd,
         args2,
-        { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout },
+        { ...options, env, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout },
         (error, stdout, stderr) => {
           resolve45({ error, stdout, stderr });
         }
@@ -209980,6 +210065,7 @@ async function execNeverFail(cmd, dir, options) {
   } finally {
     stopHeartbeat?.();
     stopTelemetry?.();
+    await analyzerTelemetryServer?.close();
   }
 }
 async function runCommandResolveStdOut(cmd, dir, options) {
@@ -210037,9 +210123,9 @@ async function parseShellArgs(args2) {
 // ../utils/src/file-utils.ts
 var import_lodash3 = __toESM(require_lodash(), 1);
 var import_micromatch = __toESM(require_micromatch(), 1);
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 import { access, cp, readdir, stat } from "fs/promises";
-import { basename, join as join2, relative as relative2, resolve } from "path";
+import { basename, join as join3, relative as relative2, resolve } from "path";
 
 // ../web-compat-utils/src/async.ts
 async function asyncMap(array, mapper, concurrency = 1) {
@@ -210098,8 +210184,8 @@ function findParent(dir, predicate, wholePath) {
 }
 async function getFilesRelative(dir, excludeDirs) {
   async function helper(subDir, arrayOfFiles) {
-    for (const item of await readdir(join2(dir, subDir), { withFileTypes: true })) {
-      const itemPath = join2(subDir, item.name);
+    for (const item of await readdir(join3(dir, subDir), { withFileTypes: true })) {
+      const itemPath = join3(subDir, item.name);
       if (item.isDirectory()) {
         if (!excludeDirs?.includes(item.name)) await helper(itemPath, arrayOfFiles);
       } else if (item.isFile()) {
@@ -214494,7 +214580,7 @@ import fs9 from "node:fs";
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/unpack.js
 import assert3 from "node:assert";
-import { randomBytes } from "node:crypto";
+import { randomBytes as randomBytes2 } from "node:crypto";
 import fs8 from "node:fs";
 import path6 from "node:path";
 
@@ -214867,7 +214953,7 @@ var mkdir3 = (dir, opt, cb) => {
   const gid = opt.gid;
   const doChown = typeof uid === "number" && typeof gid === "number" && (uid !== opt.processUid || gid !== opt.processGid);
   const preserve = opt.preserve;
-  const unlink2 = opt.unlink;
+  const unlink4 = opt.unlink;
   const cache = opt.cache;
   const cwd = normalizeWindowsPath(opt.cwd);
   const done = (er, created) => {
@@ -214899,33 +214985,33 @@ var mkdir3 = (dir, opt, cb) => {
   }
   const sub = normalizeWindowsPath(path5.relative(cwd, dir));
   const parts = sub.split("/");
-  mkdir_(cwd, parts, mode, cache, unlink2, cwd, void 0, done);
+  mkdir_(cwd, parts, mode, cache, unlink4, cwd, void 0, done);
 };
-var mkdir_ = (base, parts, mode, cache, unlink2, cwd, created, cb) => {
+var mkdir_ = (base, parts, mode, cache, unlink4, cwd, created, cb) => {
   if (!parts.length) {
     return cb(null, created);
   }
   const p3 = parts.shift();
   const part = normalizeWindowsPath(path5.resolve(base + "/" + p3));
   if (cGet(cache, part)) {
-    return mkdir_(part, parts, mode, cache, unlink2, cwd, created, cb);
+    return mkdir_(part, parts, mode, cache, unlink4, cwd, created, cb);
   }
-  fs7.mkdir(part, mode, onmkdir(part, parts, mode, cache, unlink2, cwd, created, cb));
+  fs7.mkdir(part, mode, onmkdir(part, parts, mode, cache, unlink4, cwd, created, cb));
 };
-var onmkdir = (part, parts, mode, cache, unlink2, cwd, created, cb) => (er) => {
+var onmkdir = (part, parts, mode, cache, unlink4, cwd, created, cb) => (er) => {
   if (er) {
     fs7.lstat(part, (statEr, st) => {
       if (statEr) {
         statEr.path = statEr.path && normalizeWindowsPath(statEr.path);
         cb(statEr);
       } else if (st.isDirectory()) {
-        mkdir_(part, parts, mode, cache, unlink2, cwd, created, cb);
-      } else if (unlink2) {
+        mkdir_(part, parts, mode, cache, unlink4, cwd, created, cb);
+      } else if (unlink4) {
         fs7.unlink(part, (er2) => {
           if (er2) {
             return cb(er2);
           }
-          fs7.mkdir(part, mode, onmkdir(part, parts, mode, cache, unlink2, cwd, created, cb));
+          fs7.mkdir(part, mode, onmkdir(part, parts, mode, cache, unlink4, cwd, created, cb));
         });
       } else if (st.isSymbolicLink()) {
         return cb(new SymlinkError(part, part + "/" + parts.join("/")));
@@ -214935,7 +215021,7 @@ var onmkdir = (part, parts, mode, cache, unlink2, cwd, created, cb) => (er) => {
     });
   } else {
     created = created || part;
-    mkdir_(part, parts, mode, cache, unlink2, cwd, created, cb);
+    mkdir_(part, parts, mode, cache, unlink4, cwd, created, cb);
   }
 };
 var checkCwdSync = (dir) => {
@@ -214960,7 +215046,7 @@ var mkdirSync3 = (dir, opt) => {
   const gid = opt.gid;
   const doChown = typeof uid === "number" && typeof gid === "number" && (uid !== opt.processUid || gid !== opt.processGid);
   const preserve = opt.preserve;
-  const unlink2 = opt.unlink;
+  const unlink4 = opt.unlink;
   const cache = opt.cache;
   const cwd = normalizeWindowsPath(opt.cwd);
   const done = (created2) => {
@@ -214999,7 +215085,7 @@ var mkdirSync3 = (dir, opt) => {
       if (st.isDirectory()) {
         cSet(cache, part, true);
         continue;
-      } else if (unlink2) {
+      } else if (unlink4) {
         fs7.unlinkSync(part);
         fs7.mkdirSync(part, mode);
         created = created || part;
@@ -215024,14 +215110,14 @@ var normalizeUnicode = (s6) => {
 };
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/path-reservations.js
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 var platform5 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
 var isWindows2 = platform5 === "win32";
 var getDirs = (path9) => {
   const dirs = path9.split("/").slice(0, -1).reduce((set, path10) => {
     const s6 = set[set.length - 1];
     if (s6 !== void 0) {
-      path10 = join3(s6, path10);
+      path10 = join4(s6, path10);
     }
     set.push(path10 || "/");
     return set;
@@ -215049,7 +215135,7 @@ var PathReservations = class {
   #running = /* @__PURE__ */ new Set();
   reserve(paths, fn2) {
     paths = isWindows2 ? ["win32 parallelization disabled"] : paths.map((p3) => {
-      return stripTrailingSlashes(join3(normalizeUnicode(p3))).toLowerCase();
+      return stripTrailingSlashes(join4(normalizeUnicode(p3))).toLowerCase();
     });
     const dirs = new Set(paths.map((path9) => getDirs(path9)).reduce((a4, b) => a4.concat(b)));
     this.#reservations.set(fn2, { dirs, paths });
@@ -215189,7 +215275,7 @@ var unlinkFile = (path9, cb) => {
   if (!isWindows3) {
     return fs8.unlink(path9, cb);
   }
-  const name2 = path9 + ".DELETE." + randomBytes(16).toString("hex");
+  const name2 = path9 + ".DELETE." + randomBytes2(16).toString("hex");
   fs8.rename(path9, name2, (er) => {
     if (er) {
       return cb(er);
@@ -215201,7 +215287,7 @@ var unlinkFileSync = (path9) => {
   if (!isWindows3) {
     return fs8.unlinkSync(path9);
   }
-  const name2 = path9 + ".DELETE." + randomBytes(16).toString("hex");
+  const name2 = path9 + ".DELETE." + randomBytes2(16).toString("hex");
   fs8.renameSync(path9, name2);
   fs8.unlinkSync(name2);
 };
@@ -216133,13 +216219,13 @@ async function getNodeExecutable(overridePath) {
     const nodeArch = arch === "arm" ? "arm64" : arch;
     const isWindows4 = platform9 === "win32";
     const binaryName = isWindows4 ? `node-${platform9}-${nodeArch}.exe.gz` : `node-${platform9}-${nodeArch}.gz`;
-    const compressedBinaryPath = join4(extractedPath, binaryName);
+    const compressedBinaryPath = join5(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
       throw new Error(`Node.js binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
     }
-    const tmpDir = join4(getExtractionBaseDir(), "node-runtime");
+    const tmpDir = join5(getExtractionBaseDir(), "node-runtime");
     await mkdir4(tmpDir, { recursive: true });
-    const nodeBinaryPath = join4(tmpDir, isWindows4 ? "node.exe" : "node");
+    const nodeBinaryPath = join5(tmpDir, isWindows4 ? "node.exe" : "node");
     logger.debug(`Decompressing Node.js binary to ${nodeBinaryPath}...`);
     await pipeline(
       createReadStream(compressedBinaryPath),
@@ -216155,8 +216241,8 @@ var cliVersion;
 function getCliVersion() {
   if (cliVersion) return cliVersion;
   try {
-    const packageJsonPath = isNexeMode() ? join4(NEXE_VIRTUAL_FS_ROOT, "package.json") : join4(dirname5(dirname5(dirname5(dirname5(__filename)))), "npm-package-cli", "package.json");
-    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    const packageJsonPath = isNexeMode() ? join5(NEXE_VIRTUAL_FS_ROOT, "package.json") : join5(dirname5(dirname5(dirname5(dirname5(__filename)))), "npm-package-cli", "package.json");
+    const packageJson = JSON.parse(readFileSync2(packageJsonPath, "utf-8"));
     if (process.env.ALWAYS_REEXTRACT_TOOLS === "true") {
       logger.info("ALWAYS_REEXTRACT_TOOLS is set to true, re-extracting tools");
       const randomVersion = Math.random().toString().slice(2, 8);
@@ -216172,7 +216258,7 @@ function getCliVersion() {
 }
 function getExtractionBaseDir() {
   const version4 = getCliVersion();
-  return join4(tmpdir(), `coana-cli-v${version4}`);
+  return join5(tmpdir2(), `coana-cli-v${version4}`);
 }
 async function calculateChecksum(filePath) {
   const hash = createHash("sha256");
@@ -216184,8 +216270,8 @@ function loadChecksums() {
     if (!isNexeMode()) {
       throw new Error("Tool extraction is only supported in nexe mode");
     }
-    const checksumsPath = join4(NEXE_VIRTUAL_FS_ROOT, "checksums.json");
-    return JSON.parse(readFileSync(checksumsPath, "utf-8"));
+    const checksumsPath = join5(NEXE_VIRTUAL_FS_ROOT, "checksums.json");
+    return JSON.parse(readFileSync2(checksumsPath, "utf-8"));
   } catch (error) {
     logger.warn("Failed to load checksums.json:", error);
     throw new Error(
@@ -216196,7 +216282,7 @@ function loadChecksums() {
 async function verifyToolIntegrity(toolName, extractedPath, checksums) {
   try {
     for (const [relPath, expectedChecksum] of Object.entries(checksums)) {
-      const filePath = join4(extractedPath, relPath);
+      const filePath = join5(extractedPath, relPath);
       if (!await exists(filePath)) {
         logger.debug(`File ${filePath} does not exist`);
         return false;
@@ -216229,8 +216315,8 @@ async function extractTool(toolName, resourcePath) {
       return cached.extractedPath;
     }
     const baseDir = getExtractionBaseDir();
-    const extractedPath = join4(baseDir, resourcePath);
-    const markerFile = join4(extractedPath, ".extracted");
+    const extractedPath = join5(baseDir, resourcePath);
+    const markerFile = join5(extractedPath, ".extracted");
     if (await exists(markerFile)) {
       const checksums = loadChecksums();
       const toolChecksums = checksums[toolName];
@@ -216245,7 +216331,7 @@ async function extractTool(toolName, resourcePath) {
     logger.debug(`Extracting ${toolName} to ${extractedPath}...`);
     try {
       await mkdir4(extractedPath, { recursive: true });
-      const sourcePath = isNexeMode() ? join4(NEXE_VIRTUAL_FS_ROOT, resourcePath) : resourcePath;
+      const sourcePath = isNexeMode() ? join5(NEXE_VIRTUAL_FS_ROOT, resourcePath) : resourcePath;
       if (!await exists(sourcePath)) {
         throw new Error(
           `Tool source not found: ${sourcePath}. isNexeMode=${isNexeMode()}, NEXE_VIRTUAL_FS_ROOT=${NEXE_VIRTUAL_FS_ROOT}`
@@ -216256,12 +216342,12 @@ async function extractTool(toolName, resourcePath) {
         await cp2(sourcePath, extractedPath, { recursive: true });
       } else if (stats.isFile()) {
         const fileName3 = basename3(sourcePath);
-        const destFile = join4(extractedPath, fileName3);
+        const destFile = join5(extractedPath, fileName3);
         await copyFile(sourcePath, destFile);
       } else {
         throw new Error(`Tool source is neither a file nor a directory: ${sourcePath}`);
       }
-      await writeFile(markerFile, (/* @__PURE__ */ new Date()).toISOString());
+      await writeFile2(markerFile, (/* @__PURE__ */ new Date()).toISOString());
       logger.debug(`Successfully extracted ${toolName}`);
       extractedTools.set(toolName, { extractedPath });
       return extractedPath;
@@ -216308,11 +216394,11 @@ async function getNpmExecutable() {
   logger.debug("npm not found on system, extracting embedded npm...");
   extractedNpmPath = (async () => {
     const extractedPath = await extractTool("npm-binaries", "npm-binaries");
-    const npmArchivePath = join4(extractedPath, "npm-package.tar.gz");
+    const npmArchivePath = join5(extractedPath, "npm-package.tar.gz");
     if (!await exists(npmArchivePath)) {
       throw new Error(`npm archive not found: ${npmArchivePath}`);
     }
-    const tmpDir = join4(getExtractionBaseDir(), "npm-runtime");
+    const tmpDir = join5(getExtractionBaseDir(), "npm-runtime");
     await mkdir4(tmpDir, { recursive: true });
     logger.debug(`Extracting npm package to ${tmpDir}...`);
     await extract({
@@ -216321,8 +216407,8 @@ async function getNpmExecutable() {
     });
     const nodeExecutable = await getNodeExecutable();
     const isWindows4 = process.platform === "win32";
-    const npmCliPath = join4(tmpDir, "bin", "npm-cli.js");
-    const npmWrapperPath = join4(tmpDir, isWindows4 ? "npm.cmd" : "npm");
+    const npmCliPath = join5(tmpDir, "bin", "npm-cli.js");
+    const npmWrapperPath = join5(tmpDir, isWindows4 ? "npm.cmd" : "npm");
     if (!await exists(npmCliPath)) {
       throw new Error(`npm CLI not found at ${npmCliPath}`);
     }
@@ -216330,12 +216416,12 @@ async function getNpmExecutable() {
       const wrapperContent = `@echo off
 "${nodeExecutable}" "${npmCliPath}" %*
 `;
-      await writeFile(npmWrapperPath, wrapperContent);
+      await writeFile2(npmWrapperPath, wrapperContent);
     } else {
       const wrapperContent = `#!/bin/sh
 exec "${nodeExecutable}" "${npmCliPath}" "$@"
 `;
-      await writeFile(npmWrapperPath, wrapperContent, { mode: 493 });
+      await writeFile2(npmWrapperPath, wrapperContent, { mode: 493 });
     }
     logger.debug("npm extracted and wrapper created");
     return npmWrapperPath;
@@ -216362,13 +216448,13 @@ async function getUvExecutable() {
     const nodeArch = arch === "arm" ? "arm64" : arch;
     const isWindows4 = platform9 === "win32";
     const binaryName = isWindows4 ? `uv-${platform9}-${nodeArch}.exe.gz` : `uv-${platform9}-${nodeArch}.gz`;
-    const compressedBinaryPath = join4(extractedPath, binaryName);
+    const compressedBinaryPath = join5(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
       throw new Error(`uv binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
     }
-    const tmpDir = join4(getExtractionBaseDir(), "uv-runtime");
+    const tmpDir = join5(getExtractionBaseDir(), "uv-runtime");
     await mkdir4(tmpDir, { recursive: true });
-    const uvBinaryPath = join4(tmpDir, isWindows4 ? "uv.exe" : "uv");
+    const uvBinaryPath = join5(tmpDir, isWindows4 ? "uv.exe" : "uv");
     logger.debug(`Decompressing uv binary to ${uvBinaryPath}...`);
     await pipeline(
       createReadStream(compressedBinaryPath),
@@ -216384,9 +216470,9 @@ function handleNexeBinaryMode() {
   if (process.__nexe) {
     logger.info(`Nexe root: ${NEXE_VIRTUAL_FS_ROOT}`);
     process.env.COANA_ROOT = NEXE_VIRTUAL_FS_ROOT;
-    process.env.REPOS_PATH = join4(NEXE_VIRTUAL_FS_ROOT, "repos");
-    process.env.COANA_REPOS_PATH = join4(NEXE_VIRTUAL_FS_ROOT, "repos", "coana-tech");
-    process.env.REACHABILITY_ANALYZERS_SCRIPT_PATH = join4(NEXE_VIRTUAL_FS_ROOT, "reachability-analyzers-cli.mjs");
+    process.env.REPOS_PATH = join5(NEXE_VIRTUAL_FS_ROOT, "repos");
+    process.env.COANA_REPOS_PATH = join5(NEXE_VIRTUAL_FS_ROOT, "repos", "coana-tech");
+    process.env.REACHABILITY_ANALYZERS_SCRIPT_PATH = join5(NEXE_VIRTUAL_FS_ROOT, "reachability-analyzers-cli.mjs");
   }
 }
 
@@ -217084,8 +217170,8 @@ function splitLines(text3) {
 }
 
 // ../fixing-management/src/fixing-management/utils/socket-patch-utils.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
+import { existsSync as existsSync3 } from "node:fs";
+import { readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
 import { resolve as resolve4 } from "node:path";
 
 // ../utils/src/version-comparison/version-satisfies.ts
@@ -218483,7 +218569,7 @@ var ecosystemMap = {
   RUST: {
     sortVersions: import_semver2.sort,
     isPrerelease: semverIsPrerelease,
-    versionSatisfiesSpecifier: (version4, specifier) => semverSatisfiesSpecifier(version4, /^\d/.test(specifier) ? `^${specifier}` : specifier),
+    versionSatisfiesSpecifier: (version4, specifier) => specifier.split(",").map((part) => part.trim()).every((trimmed) => semverSatisfiesSpecifier(version4, /^\d/.test(trimmed) ? `^${trimmed}` : trimmed)),
     versionSatisfiesRelation: import_semver2.cmp,
     versionSatisfiesRange: semverSatisfiesRange
   },
@@ -218605,8 +218691,8 @@ async function applyPatches(ecosystem, rootDir, patches, ctxt, patchAppliedMessa
   }
   const appliedPatches = [];
   for (const [fullPath, patches2] of fullPathToPatches) {
-    if (!existsSync2(fullPath)) {
-      await writeFile2(fullPath, "", "utf-8");
+    if (!existsSync3(fullPath)) {
+      await writeFile3(fullPath, "", "utf-8");
     }
     let fileContent = await readFile3(fullPath, "utf-8");
     const groupedPatches = groupPatches(rootDir, patches2);
@@ -218626,7 +218712,7 @@ async function applyPatches(ecosystem, rootDir, patches, ctxt, patchAppliedMessa
       });
       appliedPatches.push(patch);
     }
-    await writeFile2(fullPath, fileContent, "utf-8");
+    await writeFile3(fullPath, fileContent, "utf-8");
   }
   return appliedPatches;
 }
@@ -219764,13 +219850,13 @@ replace ${modulePath} ${currentVersion} => ${modulePath} ${newVersion}
 };
 
 // ../fixing-management/src/fixing-management/maven/gradle-fixing-manager.ts
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { readFile as readFile8 } from "node:fs/promises";
-import { join as join6, resolve as resolve9 } from "node:path";
+import { join as join7, resolve as resolve9 } from "node:path";
 
 // ../fixing-management/src/fixing-management/utils/coana-patch-application.ts
-import { existsSync as existsSync3 } from "node:fs";
-import { readFile as readFile5, writeFile as writeFile3 } from "node:fs/promises";
+import { existsSync as existsSync4 } from "node:fs";
+import { readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
 import { resolve as resolve7 } from "node:path";
 function detectPatchConflicts(rootDir, patchResults) {
   const patchesByFile = /* @__PURE__ */ new Map();
@@ -219900,8 +219986,8 @@ async function applyPatchResults(ecosystem, rootDir, patchResults) {
   }
   for (const [filePath, filePatches] of patchesByFile) {
     const sortedPatches = filePatches.sort((a4, b) => b.offset - a4.offset);
-    if (!existsSync3(filePath)) {
-      await writeFile3(filePath, "", "utf-8");
+    if (!existsSync4(filePath)) {
+      await writeFile4(filePath, "", "utf-8");
     }
     let fileContent = await readFile5(filePath, "utf-8");
     for (const patch of sortedPatches) {
@@ -219909,7 +219995,7 @@ async function applyPatchResults(ecosystem, rootDir, patchResults) {
       const end2 = patch.offset + (patch.oldText?.length ?? 0);
       fileContent = fileContent.substring(0, start) + patch.newText + fileContent.substring(end2);
     }
-    await writeFile3(filePath, fileContent, "utf-8");
+    await writeFile4(filePath, fileContent, "utf-8");
   }
 }
 
@@ -219918,14 +220004,14 @@ var import_good_enough_parser = __toESM(require_cjs(), 1);
 import { readFile as readFile6 } from "node:fs/promises";
 
 // ../fixing-management/src/fixing-management/maven/utils.ts
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync5 } from "node:fs";
 import { readdir as readdir2, stat as stat3 } from "node:fs/promises";
-import { join as join5, resolve as resolve8 } from "node:path";
+import { join as join6, resolve as resolve8 } from "node:path";
 async function getFilesMatchingRegex(dir, regex) {
-  if (!existsSync4(dir)) return [];
+  if (!existsSync5(dir)) return [];
   return await asyncFilterMap(
     await readdir2(dir),
-    async (file) => (await stat3(resolve8(dir, file))).isFile() && regex.test(file) ? join5(dir, file) : void 0
+    async (file) => (await stat3(resolve8(dir, file))).isFile() && regex.test(file) ? join6(dir, file) : void 0
   );
 }
 function getIndentationSize(fileContent) {
@@ -220507,7 +220593,7 @@ var GradleFixingManager = class {
     await applyPatchResults("MAVEN", this.rootDir, directPatchResults);
     const postFixDependencyTrees = directPatchResults.length ? await this.otherModulesCommunicator.getDependencyTrees(
       "GRADLE",
-      join6(this.rootDir, this.subprojectPath),
+      join7(this.rootDir, this.subprojectPath),
       workspacePaths
     ) : dependencyTrees;
     const transitivePatchResults = [];
@@ -220544,14 +220630,14 @@ var GradleFixingManager = class {
    */
   async createFixPatch(workspacePath, groupId, artifactId, dependencyDetails, fixedVersion, vulnerabilityFix) {
     const manifestFiles = await getFilesMatchingRegex(
-      join6(this.rootDir, this.subprojectPath, workspacePath),
+      join7(this.rootDir, this.subprojectPath, workspacePath),
       /\.gradle(\.kts)?$/
     );
     const absoluteCatalogueFiles = [];
     for (const manifestFile of manifestFiles) {
       const { depDecls, dependenciesBlocks, constraintsBlocks, catalogFiles } = await findDependencyDeclsAndCatalogFiles(manifestFile);
       absoluteCatalogueFiles.push(
-        ...catalogFiles.map((file) => join6(this.rootDir, this.subprojectPath, workspacePath, file))
+        ...catalogFiles.map((file) => join7(this.rootDir, this.subprojectPath, workspacePath, file))
       );
       for (const depDecl of depDecls) {
         if (depDecl.groupId.value === groupId && depDecl.artifactId.value === artifactId && (depDecl.version.value === dependencyDetails.version || depDecl.version === void 0 || depDecl.version.isVar)) {
@@ -220573,13 +220659,13 @@ var GradleFixingManager = class {
       }
     }
     if (absoluteCatalogueFiles.length === 0) {
-      const rootProjectSettingsFile = join6(this.rootDir, this.subprojectPath, "settings.gradle");
-      if (existsSync5(rootProjectSettingsFile)) {
+      const rootProjectSettingsFile = join7(this.rootDir, this.subprojectPath, "settings.gradle");
+      if (existsSync6(rootProjectSettingsFile)) {
         const { catalogFiles } = await findDependencyDeclsAndCatalogFiles(rootProjectSettingsFile);
-        absoluteCatalogueFiles.push(...catalogFiles.map((file) => join6(this.rootDir, this.subprojectPath, file)));
+        absoluteCatalogueFiles.push(...catalogFiles.map((file) => join7(this.rootDir, this.subprojectPath, file)));
       }
       const defaultVersionsCatalogFile = resolve9(this.rootDir, this.subprojectPath, "gradle", "libs.versions.toml");
-      if (existsSync5(defaultVersionsCatalogFile)) {
+      if (existsSync6(defaultVersionsCatalogFile)) {
         absoluteCatalogueFiles.push(defaultVersionsCatalogFile);
       }
     }
@@ -220610,19 +220696,19 @@ var GradleFixingManager = class {
         }
       }
     }
-    const workspaceBuildGradlePath = join6(this.rootDir, this.subprojectPath, workspacePath, "build.gradle");
-    const workspaceBuildGradleKtsPath = join6(this.rootDir, this.subprojectPath, workspacePath, "build.gradle.kts");
+    const workspaceBuildGradlePath = join7(this.rootDir, this.subprojectPath, workspacePath, "build.gradle");
+    const workspaceBuildGradleKtsPath = join7(this.rootDir, this.subprojectPath, workspacePath, "build.gradle.kts");
     let targetBuildFile;
     let fileType;
-    if (existsSync5(workspaceBuildGradleKtsPath)) {
+    if (existsSync6(workspaceBuildGradleKtsPath)) {
       targetBuildFile = workspaceBuildGradleKtsPath;
       fileType = "kotlin";
-    } else if (existsSync5(workspaceBuildGradlePath)) {
+    } else if (existsSync6(workspaceBuildGradlePath)) {
       targetBuildFile = workspaceBuildGradlePath;
       fileType = "groovy";
     } else {
-      const rootBuildGradleKtsPath = join6(this.rootDir, this.subprojectPath, "build.gradle.kts");
-      if (existsSync5(rootBuildGradleKtsPath)) {
+      const rootBuildGradleKtsPath = join7(this.rootDir, this.subprojectPath, "build.gradle.kts");
+      if (existsSync6(rootBuildGradleKtsPath)) {
         targetBuildFile = workspaceBuildGradleKtsPath;
         fileType = "kotlin";
       } else {
@@ -220638,7 +220724,7 @@ var GradleFixingManager = class {
       4,
       fileType
     );
-    if (!existsSync5(targetBuildFile)) {
+    if (!existsSync6(targetBuildFile)) {
       return {
         file: targetBuildFile,
         offset: 0,
@@ -220782,7 +220868,7 @@ var GradleFixingManager = class {
    */
   async hasExistingDependency(workspacePath, groupId, artifactId) {
     const manifestFiles = await getFilesMatchingRegex(
-      join6(this.rootDir, this.subprojectPath, workspacePath),
+      join7(this.rootDir, this.subprojectPath, workspacePath),
       /\.gradle(\.kts)?$/
     );
     for (const manifestFile of manifestFiles) {
@@ -220806,22 +220892,22 @@ var GradleFixingManager = class {
   async getCatalogFiles(workspacePath) {
     const catalogFiles = [];
     const manifestFiles = await getFilesMatchingRegex(
-      join6(this.rootDir, this.subprojectPath, workspacePath),
+      join7(this.rootDir, this.subprojectPath, workspacePath),
       /\.gradle(\.kts)?$/
     );
     for (const manifestFile of manifestFiles) {
       const { catalogFiles: fileCatalogFiles } = await findDependencyDeclsAndCatalogFiles(manifestFile);
       catalogFiles.push(
-        ...fileCatalogFiles.map((file) => join6(this.rootDir, this.subprojectPath, workspacePath, file))
+        ...fileCatalogFiles.map((file) => join7(this.rootDir, this.subprojectPath, workspacePath, file))
       );
     }
-    const settingsFile = join6(this.rootDir, this.subprojectPath, "settings.gradle");
-    if (existsSync5(settingsFile)) {
+    const settingsFile = join7(this.rootDir, this.subprojectPath, "settings.gradle");
+    if (existsSync6(settingsFile)) {
       const { catalogFiles: settingsCatalogFiles } = await findDependencyDeclsAndCatalogFiles(settingsFile);
-      catalogFiles.push(...settingsCatalogFiles.map((file) => join6(this.rootDir, this.subprojectPath, file)));
+      catalogFiles.push(...settingsCatalogFiles.map((file) => join7(this.rootDir, this.subprojectPath, file)));
     }
-    const defaultCatalog = join6(this.rootDir, this.subprojectPath, "gradle", "libs.versions.toml");
-    if (existsSync5(defaultCatalog)) {
+    const defaultCatalog = join7(this.rootDir, this.subprojectPath, "gradle", "libs.versions.toml");
+    if (existsSync6(defaultCatalog)) {
       catalogFiles.push(defaultCatalog);
     }
     return i3(catalogFiles);
@@ -220832,7 +220918,7 @@ var GradleFixingManager = class {
   async createConstraintsForFile(buildFile, fixes) {
     const { dependenciesBlocks, constraintsBlocks } = await findDependencyDeclsAndCatalogFiles(buildFile);
     const fileType = buildFile.endsWith(".kts") ? "kotlin" : "groovy";
-    const fileContent = existsSync5(buildFile) ? await readFile8(buildFile, "utf-8") : "";
+    const fileContent = existsSync6(buildFile) ? await readFile8(buildFile, "utf-8") : "";
     const indentationSize = getIndentationSize(fileContent);
     const constraintDeclarations = fixes.map(({ dependencyDetails, fixedVersion }) => {
       const [groupId, artifactId] = dependencyDetails.packageName.split(":");
@@ -220881,16 +220967,16 @@ ${indent(1, indentationSize)}}
    * Creates bundled constraints patch for multiple dependencies
    */
   async createBundledConstraintsForWorkspace(workspacePath, fixes) {
-    const workspaceBuildGradlePath = join6(this.rootDir, this.subprojectPath, workspacePath, "build.gradle");
-    const workspaceBuildGradleKtsPath = join6(this.rootDir, this.subprojectPath, workspacePath, "build.gradle.kts");
+    const workspaceBuildGradlePath = join7(this.rootDir, this.subprojectPath, workspacePath, "build.gradle");
+    const workspaceBuildGradleKtsPath = join7(this.rootDir, this.subprojectPath, workspacePath, "build.gradle.kts");
     let buildFile;
-    if (existsSync5(workspaceBuildGradleKtsPath)) {
+    if (existsSync6(workspaceBuildGradleKtsPath)) {
       buildFile = workspaceBuildGradleKtsPath;
-    } else if (existsSync5(workspaceBuildGradlePath)) {
+    } else if (existsSync6(workspaceBuildGradlePath)) {
       buildFile = workspaceBuildGradlePath;
     } else {
-      const rootBuildGradleKtsPath = join6(this.rootDir, this.subprojectPath, "build.gradle.kts");
-      buildFile = existsSync5(rootBuildGradleKtsPath) ? workspaceBuildGradleKtsPath : workspaceBuildGradlePath;
+      const rootBuildGradleKtsPath = join7(this.rootDir, this.subprojectPath, "build.gradle.kts");
+      buildFile = existsSync6(rootBuildGradleKtsPath) ? workspaceBuildGradleKtsPath : workspaceBuildGradlePath;
     }
     return this.createConstraintsForFile(buildFile, fixes);
   }
@@ -220940,8 +221026,8 @@ import { resolve as resolve11 } from "node:path";
 // ../utils/src/pom-utils.ts
 var import_parse_xml2 = __toESM(require_dist(), 1);
 import { readFile as readFile9 } from "node:fs/promises";
-import { existsSync as existsSync6 } from "node:fs";
-import { resolve as resolve10, join as join7, relative as relative3, dirname as dirname8 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { resolve as resolve10, join as join8, relative as relative3, dirname as dirname8 } from "node:path";
 
 // ../utils/src/xml-utils.ts
 var import_parse_xml = __toESM(require_dist(), 1);
@@ -221072,7 +221158,7 @@ function calculateColumnPosition(byteOffset, contents2) {
 }
 async function loadPom(rootDir, pomFile, validateFile, visited = /* @__PURE__ */ new Set()) {
   const validatedPomFile = validateFile(resolve10(rootDir, pomFile));
-  if (!validatedPomFile || !existsSync6(validatedPomFile)) return void 0;
+  if (!validatedPomFile || !existsSync7(validatedPomFile)) return void 0;
   if (visited.has(validatedPomFile)) return void 0;
   visited.add(validatedPomFile);
   const sourceText = await readFile9(validatedPomFile, "utf-8");
@@ -221422,7 +221508,7 @@ function getParentPomPath(pom) {
   const parentElement = projectElement.children.filter((child) => child instanceof import_parse_xml2.XmlElement).find((child) => child.name === "parent");
   if (!parentElement) return void 0;
   const relativePathElement = parentElement.children.filter((child) => child instanceof import_parse_xml2.XmlElement).find((child) => child.name === "relativePath");
-  const relativePath = relativePathElement?.text ?? join7("..", "pom.xml");
+  const relativePath = relativePathElement?.text ?? join8("..", "pom.xml");
   return relativePath ? resolve10(dirname8(pom.validatedPomFile), relativePath) : void 0;
 }
 function getInsertPos(element) {
@@ -222437,7 +222523,7 @@ var GradleLockfileUpgradeHandler = class {
 };
 
 // ../fixing-management/src/fixing-management/maven/handlers/sbt-upgrade-handler.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname11, resolve as resolve15 } from "node:path";
 import assert8 from "node:assert";
@@ -222749,7 +222835,7 @@ var SbtUpgradeHandler = class {
         scalaBinaryVersion
       );
     });
-    if (!existsSync7(dependencyOverridesFile)) {
+    if (!existsSync8(dependencyOverridesFile)) {
       const indentationSize = 2;
       return {
         file: dependencyOverridesFile,
@@ -222800,12 +222886,12 @@ function findSbtWorkspace(manifestFile) {
 }
 async function getSbtRootProject(rootDir, workspacePath) {
   const findSbtRootDir = (workspacePath2) => {
-    if (existsSync7(resolve15(rootDir, workspacePath2, "project"))) {
+    if (existsSync8(resolve15(rootDir, workspacePath2, "project"))) {
       return resolve15(rootDir, workspacePath2);
     }
     let curr = workspacePath2;
     while (curr !== dirname11(curr)) {
-      if (existsSync7(resolve15(rootDir, curr, "project"))) {
+      if (existsSync8(resolve15(rootDir, curr, "project"))) {
         return resolve15(rootDir, curr);
       }
       curr = dirname11(curr);
@@ -222816,7 +222902,7 @@ async function getSbtRootProject(rootDir, workspacePath) {
   const sbtRootDir = findSbtRootDir(workspacePath);
   if (sbtRootDir !== void 0) {
     const sbtRootProjectDir = resolve15(rootDir, sbtRootDir, "project");
-    if (existsSync7(sbtRootProjectDir)) {
+    if (existsSync8(sbtRootProjectDir)) {
       const projectScalaFiles = await getFilesMatchingRegex(sbtRootProjectDir, /[^/]*\.scala$/);
       for (const file of projectScalaFiles) {
         rootProject = await loadSbtProject(file, rootProject);
@@ -222892,9 +222978,9 @@ var MavenSocketUpgradeManager = class {
 };
 
 // ../fixing-management/src/fixing-management/maven/sbt-fixing-manager.ts
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var SbtFixingManager = class {
   constructor(rootDir, subprojectPath, otherModulesCommunicator) {
     this.rootDir = rootDir;
@@ -222937,7 +223023,7 @@ var SbtFixingManager = class {
     await applyPatchResults("MAVEN", this.rootDir, directPatchResults);
     const postFixDependencyTrees = directPatchResults.length ? await this.otherModulesCommunicator.getDependencyTrees(
       "SBT",
-      join8(this.rootDir, this.subprojectPath),
+      join9(this.rootDir, this.subprojectPath),
       workspacePaths
     ) : dependencyTrees;
     const transitivePatchResults = [];
@@ -223058,9 +223144,9 @@ var SbtFixingManager = class {
    */
   async createFixPatch(workspacePath, groupId, artifactId, dependencyDetails, fixedVersion, scalaBinaryVersion) {
     const manifestFiles = [
-      ...await getFilesMatchingRegex(join8(this.rootDir, this.subprojectPath, workspacePath), /\.sbt$/),
+      ...await getFilesMatchingRegex(join9(this.rootDir, this.subprojectPath, workspacePath), /\.sbt$/),
       ...await getFilesMatchingRegex(
-        join8(this.rootDir, this.subprojectPath, workspacePath, "project"),
+        join9(this.rootDir, this.subprojectPath, workspacePath, "project"),
         /[^/]*\.scala$/
       )
     ];
@@ -223078,7 +223164,7 @@ var SbtFixingManager = class {
         }
       }
     }
-    const workspaceBuildSbtPath = join8(this.rootDir, this.subprojectPath, workspacePath, "build.sbt");
+    const workspaceBuildSbtPath = join9(this.rootDir, this.subprojectPath, workspacePath, "build.sbt");
     const moduleIdStr = getModuleIdString(
       groupId,
       artifactId,
@@ -223087,7 +223173,7 @@ var SbtFixingManager = class {
       void 0,
       scalaBinaryVersion
     );
-    if (!existsSync8(workspaceBuildSbtPath)) {
+    if (!existsSync9(workspaceBuildSbtPath)) {
       return {
         file: workspaceBuildSbtPath,
         offset: 0,
@@ -223150,7 +223236,7 @@ var SbtFixingManager = class {
    * Creates bundled dependency overrides patch for multiple dependencies
    */
   async createBundledDependencyOverridesForWorkspace(workspacePath, fixes, scalaBinaryVersion) {
-    const workspaceBuildSbtPath = join8(this.rootDir, this.subprojectPath, workspacePath, "build.sbt");
+    const workspaceBuildSbtPath = join9(this.rootDir, this.subprojectPath, workspacePath, "build.sbt");
     const moduleIdStrings = fixes.map(({ fix, dependencyDetails }) => {
       const [groupId, artifactId] = fix.dependencyName.split(":");
       return getModuleIdString(
@@ -223162,7 +223248,7 @@ var SbtFixingManager = class {
         scalaBinaryVersion
       );
     });
-    if (!existsSync8(workspaceBuildSbtPath)) {
+    if (!existsSync9(workspaceBuildSbtPath)) {
       const indentationSize = 2;
       const overrideText = `dependencyOverrides ++= Seq(
 ${indent(1, indentationSize)}${moduleIdStrings.join(`,
@@ -223192,10 +223278,10 @@ ${indent(1, indentationSize)}`)}
 };
 
 // ../fixing-management/src/fixing-management/npm/npm-socket-upgrade-manager.ts
-import { existsSync as existsSync13 } from "fs";
+import { existsSync as existsSync15 } from "fs";
 import { readFile as readFile18 } from "fs/promises";
 import assert10 from "node:assert";
-import { dirname as dirname14, join as join12, relative as relative9, resolve as resolve24 } from "path";
+import { dirname as dirname14, join as join14, relative as relative9, resolve as resolve24 } from "path";
 
 // ../utils/src/npm-utils.ts
 import { access as access2, constants as constants2 } from "fs/promises";
@@ -228695,7 +228781,7 @@ glob.glob = glob;
 
 // ../utils/src/npm-utils.ts
 var import_lodash5 = __toESM(require_lodash(), 1);
-import { join as join10, resolve as resolve18 } from "path";
+import { join as join12, resolve as resolve18 } from "path";
 
 // ../utils/dist/command-utils.js
 import assert9 from "assert";
@@ -228892,6 +228978,74 @@ var TelemetryCollector2 = class {
   }
 };
 
+// ../utils/dist/telemetry/analyzer-telemetry-server.js
+import { existsSync as existsSync10, readFileSync as readFileSync3, watchFile as watchFile2, unwatchFile as unwatchFile2 } from "fs";
+import { unlink as unlink2, writeFile as writeFile5 } from "fs/promises";
+import { tmpdir as tmpdir3 } from "os";
+import { join as join10 } from "path";
+import { randomBytes as randomBytes3 } from "crypto";
+var AnalyzerTelemetryServer2 = class {
+  handler;
+  filePath;
+  lastReadPosition = 0;
+  watching = false;
+  constructor(handler) {
+    this.handler = handler;
+    const fileId = randomBytes3(8).toString("hex");
+    this.filePath = join10(tmpdir3(), `analyzer-telemetry-${fileId}.jsonl`);
+  }
+  /**
+   * Starts the server and returns the file path that analyzers should write to.
+   */
+  async start() {
+    await writeFile5(this.filePath, "");
+    this.watching = true;
+    watchFile2(this.filePath, { interval: 1e3 }, () => {
+      this.processNewEvents();
+    });
+    return this.filePath;
+  }
+  processNewEvents() {
+    if (!existsSync10(this.filePath))
+      return;
+    try {
+      const content = readFileSync3(this.filePath, "utf-8");
+      const newContent = content.substring(this.lastReadPosition);
+      this.lastReadPosition = content.length;
+      if (!newContent)
+        return;
+      const lines = newContent.split("\n");
+      for (const line of lines) {
+        if (line.trim()) {
+          try {
+            const event = JSON.parse(line);
+            this.handler.onAnalyzerEvent(event);
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+  }
+  /**
+   * Closes the server and cleans up the file.
+   */
+  async close() {
+    this.processNewEvents();
+    this.handler.close?.();
+    if (this.watching) {
+      unwatchFile2(this.filePath);
+      this.watching = false;
+    }
+    if (existsSync10(this.filePath)) {
+      try {
+        await unlink2(this.filePath);
+      } catch {
+      }
+    }
+  }
+};
+
 // ../utils/dist/command-utils.js
 var DEFAULT_TIMEOUT_MS2 = 30 * 60 * 1e3;
 async function execAndLogOnFailure3(cmd, dir, options, logLevel = "info") {
@@ -228945,13 +229099,20 @@ function startTelemetry2(pid, handler) {
 async function execNeverFail3(cmd, dir, options) {
   const stopHeartbeat = options?.heartbeat ? startHeartbeat2(options.heartbeat) : void 0;
   let stopTelemetry;
+  let analyzerTelemetryServer;
+  let analyzerTelemetryFilePath;
+  if (options?.analyzerTelemetryHandler) {
+    analyzerTelemetryServer = new AnalyzerTelemetryServer2(options.analyzerTelemetryHandler);
+    analyzerTelemetryFilePath = await analyzerTelemetryServer.start();
+  }
   try {
     return await new Promise((resolve45) => {
       let args2;
       if (typeof cmd !== "string")
         [cmd, ...args2] = cmd;
       const timeout = options?.timeout ?? DEFAULT_TIMEOUT_MS2;
-      const childProcess = execFile4(cmd, args2, { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout }, (error, stdout, stderr) => {
+      const env = analyzerTelemetryFilePath ? { ...options?.env ?? process.env, ANALYZER_TELEMETRY_FILE_PATH: analyzerTelemetryFilePath } : options?.env;
+      const childProcess = execFile4(cmd, args2, { ...options, env, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout }, (error, stdout, stderr) => {
         resolve45({ error, stdout, stderr });
       });
       if (options?.telemetryHandler && childProcess.pid) {
@@ -228976,6 +229137,7 @@ async function execNeverFail3(cmd, dir, options) {
   } finally {
     stopHeartbeat?.();
     stopTelemetry?.();
+    await analyzerTelemetryServer?.close();
   }
 }
 async function runCommandResolveStdOut3(cmd, dir, options) {
@@ -229061,8 +229223,8 @@ async function runCommandResolveStdOut4(cmd, dir, options) {
 }
 
 // ../utils/dist/package-utils.js
-import { parse as parse5, join as join9, resolve as resolve17, normalize as normalize2, dirname as dirname12, basename as basename5, relative as relative4 } from "path";
-import { existsSync as existsSync9, readFileSync as readFileSync2, readdirSync as readdirSync2, statSync as statSync3, writeFileSync } from "fs";
+import { parse as parse5, join as join11, resolve as resolve17, normalize as normalize2, dirname as dirname12, basename as basename5, relative as relative4 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync4, readdirSync as readdirSync2, statSync as statSync3, writeFileSync } from "fs";
 function getPackageJsonObject(workspaceRoot) {
   const packageJSONContent = getPackageJsonContent(workspaceRoot);
   if (!packageJSONContent)
@@ -229071,17 +229233,17 @@ function getPackageJsonObject(workspaceRoot) {
 }
 function getPackageJsonContent(workspaceRoot) {
   const packageJsonPath = getPackageJSONPath(workspaceRoot);
-  if (existsSync9(packageJsonPath))
-    return readFileSync2(packageJsonPath, "utf8");
+  if (existsSync11(packageJsonPath))
+    return readFileSync4(packageJsonPath, "utf8");
   return void 0;
 }
 function getPackageJSONPath(workspaceRoot) {
-  return join9(workspaceRoot, "package.json");
+  return join11(workspaceRoot, "package.json");
 }
 
 // ../utils/src/npm-utils.ts
 var import_lockfile_file = __toESM(require_lib25(), 1);
-import { existsSync as existsSync10 } from "fs";
+import { existsSync as existsSync12 } from "fs";
 var { once } = import_lodash5.default;
 async function getPackageVersionDetailsFromNpm(packageName, version4) {
   const npmViewCmd = cmdt2`npm view ${packageName}@${version4} -json`;
@@ -229134,7 +229296,7 @@ async function getWorkspacePathsFromPackageJSON(projectFolder, useDotWhenNoWorks
   const workspacePaths = (await glob("packages" in workspaces ? workspaces.packages : workspaces, {
     ignore: ["node_modules/**", "**/node_modules/**"],
     cwd: projectFolder
-  })).filter((fileOrDir) => existsSync10(resolve18(projectFolder, fileOrDir, "package.json")));
+  })).filter((fileOrDir) => existsSync12(resolve18(projectFolder, fileOrDir, "package.json")));
   return { validProject: true, workspacePaths };
 }
 async function getWorktreePathsFromPackageJSON(projectFolder, useDotWhenNoWorkspaces = false) {
@@ -229154,8 +229316,8 @@ async function getWorktreePathsFromPackageJSON(projectFolder, useDotWhenNoWorksp
       continue;
     }
     for (const relWsPath of result.workspacePaths) {
-      workspacePaths.add(join10(currentFolder, relWsPath));
-      worklist.push(join10(currentFolder, relWsPath));
+      workspacePaths.add(join12(currentFolder, relWsPath));
+      worklist.push(join12(currentFolder, relWsPath));
     }
   }
   return Array.from(workspacePaths);
@@ -229197,7 +229359,7 @@ async function getYarnType(projectDir) {
 }
 
 // ../fixing-management/src/fixing-management/npm/npm-fixing-manager.ts
-import { readFile as readFile15, writeFile as writeFile4 } from "fs/promises";
+import { readFile as readFile15, writeFile as writeFile6 } from "fs/promises";
 import { relative as relative5, resolve as resolve20 } from "path";
 
 // ../fixing-management/src/fixing-management/npm/npm-ecosystem-fixing-manager.ts
@@ -229276,7 +229438,7 @@ var NpmFixingManager = class extends NpmEcosystemFixingManager {
         const packageDetails = await getPackageVersionDetailsFromNpm(packageName, fix.fixedVersion);
         Object.assign(pkgObj, { version: fix.fixedVersion }, packageDetails);
       });
-      await writeFile4(pkgLockLocation, JSON.stringify(packageLock, null, 2));
+      await writeFile6(pkgLockLocation, JSON.stringify(packageLock, null, 2));
     } catch (e) {
       throw new Error(`Failed to update package-lock.json ${e.stack}`);
     }
@@ -229297,11 +229459,11 @@ var NpmFixingManager = class extends NpmEcosystemFixingManager {
 };
 
 // ../fixing-management/src/fixing-management/npm/pnpm-fixing-manager.ts
-import { readFile as readFile16, writeFile as writeFile5 } from "fs/promises";
+import { readFile as readFile16, writeFile as writeFile7 } from "fs/promises";
 import { relative as relative6, resolve as resolve21 } from "path";
 var import_yaml = __toESM(require_dist10(), 1);
 var import_lockfile_file2 = __toESM(require_lib25(), 1);
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync13 } from "fs";
 var PnpmFixingManager = class extends NpmEcosystemFixingManager {
   pnpmMajorVersion;
   async getPnpmMajorVersion() {
@@ -229414,7 +229576,7 @@ var PnpmFixingManager = class extends NpmEcosystemFixingManager {
           ])
         );
         const pnpmWorkspaceYamlFile = resolve21(this.rootDir, this.subprojectPath, "pnpm-workspace.yaml");
-        if (!existsSync11(pnpmWorkspaceYamlFile)) {
+        if (!existsSync13(pnpmWorkspaceYamlFile)) {
           throw new Error(
             `pnpm-workspace.yaml could not be found in ${pnpmWorkspaceYamlFile}. The lockfile indicates that pnpm catalogs are used and they must be updated, which is not possible without a pnpm-workspace.yaml file`
           );
@@ -229456,7 +229618,7 @@ async function readYamlFile(workspaceYamlFile) {
 }
 async function writeYamlFile(yamlAST, workspaceYamlFile) {
   const workspaceYamlString = import_yaml.CST.stringify(yamlAST);
-  await writeFile5(workspaceYamlFile, workspaceYamlString);
+  await writeFile7(workspaceYamlFile, workspaceYamlString);
 }
 function fixCatalogVersions(yamlAST, fixes) {
   import_yaml.CST.visit(yamlAST, (item, _path2) => {
@@ -229486,12 +229648,12 @@ function updateCatalog(update3, map2) {
 }
 
 // ../fixing-management/src/fixing-management/npm/yarn-fixing-manager.ts
-import { readFile as readFile17, writeFile as writeFile6 } from "fs/promises";
+import { readFile as readFile17, writeFile as writeFile8 } from "fs/promises";
 import { relative as relative8, resolve as resolve23 } from "path";
 
 // ../utils/src/package-utils.ts
-import { parse as parse7, join as join11, resolve as resolve22, normalize as normalize3, dirname as dirname13, basename as basename6, relative as relative7 } from "path";
-import { existsSync as existsSync12, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync4, writeFileSync as writeFileSync2 } from "fs";
+import { parse as parse7, join as join13, resolve as resolve22, normalize as normalize3, dirname as dirname13, basename as basename6, relative as relative7 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync5, readdirSync as readdirSync3, statSync as statSync4, writeFileSync as writeFileSync2 } from "fs";
 function setFieldInPackageJson(workspaceRoot, field, value2) {
   const packageJSONContentObj = getPackageJsonObject2(workspaceRoot);
   if (!packageJSONContentObj) return void 0;
@@ -229508,11 +229670,11 @@ function writePackageJsonContent(workspaceRoot, packageJsonContent) {
 }
 function getPackageJsonContent2(workspaceRoot) {
   const packageJsonPath = getPackageJSONPath2(workspaceRoot);
-  if (existsSync12(packageJsonPath)) return readFileSync3(packageJsonPath, "utf8");
+  if (existsSync14(packageJsonPath)) return readFileSync5(packageJsonPath, "utf8");
   return void 0;
 }
 function getPackageJSONPath2(workspaceRoot) {
-  return join11(workspaceRoot, "package.json");
+  return join13(workspaceRoot, "package.json");
 }
 
 // ../fixing-management/src/fixing-management/npm/yarn-fixing-manager.ts
@@ -229601,7 +229763,7 @@ var YarnFixingManager = class extends NpmEcosystemFixingManager {
   async writeYarnObj(yarnObj, filepath) {
     const yarnType = await this.getYarnType();
     const fileString = yarnType === "classic" ? (0, import_yarnlock_parse_raw.stringifyYarnLockRawV1)(yarnObj) : (0, import_yarnlock_parse_raw.stringifyYarnLockRawV2)(yarnObj);
-    await writeFile6(filepath, fileString);
+    await writeFile8(filepath, fileString);
   }
   async updateDependencyLists(yarnLockLocation, fixes) {
     const yarnLock = await this.getYarnLockObj(yarnLockLocation);
@@ -229772,7 +229934,7 @@ var NpmSocketUpgradeManager = class {
         workspaces = result.workspacePaths;
       }
       for (const workspace of workspaces) {
-        workspaceToSubproject.set(join12(subprojectDir, workspace), subprojectDir);
+        workspaceToSubproject.set(join14(subprojectDir, workspace), subprojectDir);
       }
     }
     for (const upgrade of upgrades) {
@@ -229809,7 +229971,7 @@ var NpmSocketUpgradeManager = class {
     for (const [workspacePath, upgrades] of workspaceToFixes.entries()) {
       const upgradesToDirectDependencies = upgrades.filter((upgrade) => artifacts[upgrade.idx].direct);
       if (upgradesToDirectDependencies.length === 0) continue;
-      const packageJsonPath = join12(subprojectDir, workspacePath, "package.json");
+      const packageJsonPath = join14(subprojectDir, workspacePath, "package.json");
       const directPatches = [];
       for (const upgrade of upgradesToDirectDependencies) {
         const artifact = artifacts[upgrade.idx];
@@ -229829,7 +229991,7 @@ var NpmSocketUpgradeManager = class {
       }
     }
     const lockfileName = this.getLockfileName(subprojectDir);
-    const lockfilePath = join12(subprojectDir, lockfileName);
+    const lockfilePath = join14(subprojectDir, lockfileName);
     const allUpgrades = Array.from(workspaceToFixes.values()).flat();
     const upgradesTransformed = allUpgrades.map((upgrade) => ({
       dependencyName: getNameFromNamespaceAndName(
@@ -229886,11 +230048,11 @@ var NpmSocketUpgradeManager = class {
   }
   getPackageManagerForDirectory(directory) {
     const fullPath = resolve24(this.rootDir, directory);
-    if (existsSync13(join12(fullPath, "pnpm-lock.yaml")) || existsSync13(join12(fullPath, "pnpm-lock.yml"))) {
+    if (existsSync15(join14(fullPath, "pnpm-lock.yaml")) || existsSync15(join14(fullPath, "pnpm-lock.yml"))) {
       return "PNPM";
-    } else if (existsSync13(join12(fullPath, "yarn.lock"))) {
+    } else if (existsSync15(join14(fullPath, "yarn.lock"))) {
       return "YARN";
-    } else if (existsSync13(join12(fullPath, "package-lock.json"))) {
+    } else if (existsSync15(join14(fullPath, "package-lock.json"))) {
       return "NPM";
     }
     throw new Error(
@@ -229899,10 +230061,10 @@ var NpmSocketUpgradeManager = class {
   }
   getLockfileName(directory) {
     const fullPath = resolve24(this.rootDir, directory);
-    if (existsSync13(join12(fullPath, "pnpm-lock.yaml"))) return "pnpm-lock.yaml";
-    if (existsSync13(join12(fullPath, "pnpm-lock.yml"))) return "pnpm-lock.yml";
-    if (existsSync13(join12(fullPath, "yarn.lock"))) return "yarn.lock";
-    if (existsSync13(join12(fullPath, "package-lock.json"))) return "package-lock.json";
+    if (existsSync15(join14(fullPath, "pnpm-lock.yaml"))) return "pnpm-lock.yaml";
+    if (existsSync15(join14(fullPath, "pnpm-lock.yml"))) return "pnpm-lock.yml";
+    if (existsSync15(join14(fullPath, "yarn.lock"))) return "yarn.lock";
+    if (existsSync15(join14(fullPath, "package-lock.json"))) return "package-lock.json";
     throw new Error(`No lockfile found in ${fullPath}`);
   }
   async createDirectDependencyPatches(mf, idx, upgradeVersion, ctxt) {
@@ -229975,8 +230137,8 @@ var RushFixingManager = class {
 };
 
 // ../fixing-management/src/fixing-management/nuget/nuget-fixing-manager.ts
-import { readFile as readFile19, writeFile as writeFile7 } from "fs/promises";
-import { join as join13 } from "path";
+import { readFile as readFile19, writeFile as writeFile9 } from "fs/promises";
+import { join as join15 } from "path";
 
 // ../utils/src/nuget-utils.ts
 var Cache = class _Cache {
@@ -230077,7 +230239,7 @@ var NugetFixingManager = class {
         const projectFiles = fixingInfo.projectFiles[wsPath];
         if (projectFiles.length !== 1)
           throw new Error("Applying fixes to workspaces with more than 1 project file currently not supported");
-        const projectFilePath = join13(this.getAbsWsPath(wsPath), projectFiles[0]);
+        const projectFilePath = join15(this.getAbsWsPath(wsPath), projectFiles[0]);
         const initialProjectFile = await readFile19(projectFilePath, "utf-8");
         const initialLockFile = await this.restoreWorkspaceAndParseLockFile(wsPath);
         await applySeries(fixesWithId, async ({ fixId, vulnerabilityFixes }) => {
@@ -230086,8 +230248,8 @@ var NugetFixingManager = class {
         });
         const finalProjectFile = await readFile19(projectFilePath, "utf-8");
         const finalLockFile = JSON.parse(await readFile19(this.getLockFilePath(wsPath), "utf-8"));
-        await writeFile7(projectFilePath, initialProjectFile);
-        await writeFile7(this.getLockFilePath(wsPath), JSON.stringify(initialLockFile, null, 2));
+        await writeFile9(projectFilePath, initialProjectFile);
+        await writeFile9(this.getLockFilePath(wsPath), JSON.stringify(initialLockFile, null, 2));
         return { projectFile: finalProjectFile, lockFile: finalLockFile };
       }
     );
@@ -230097,21 +230259,21 @@ var NugetFixingManager = class {
       const projectFiles = fixingInfo.projectFiles[wsPath];
       if (projectFiles.length !== 1)
         throw new Error("Applying fixes to workspaces with more than 1 project file currently not supported");
-      await writeFile7(join13(this.getAbsWsPath(wsPath), projectFiles[0]), finalProjectFile);
-      await writeFile7(this.getLockFilePath(wsPath), JSON.stringify(finalLockFile, null, 2));
+      await writeFile9(join15(this.getAbsWsPath(wsPath), projectFiles[0]), finalProjectFile);
+      await writeFile9(this.getLockFilePath(wsPath), JSON.stringify(finalLockFile, null, 2));
     });
     if (solutionFiles) {
       for (const solutionFile of solutionFiles) {
         const succeeded = await execAndLogOnFailure2(
           cmdt`dotnet restore ${solutionFile} --use-lock-file`,
-          join13(this.rootDir, this.subprojectPath)
+          join15(this.rootDir, this.subprojectPath)
         );
         if (!succeeded) throw new Error(`Error applying fix - could not restore project ${this.subprojectPath}`);
       }
     } else {
       const succeeded = await execAndLogOnFailure2(
         "dotnet restore --use-lock-file",
-        join13(this.rootDir, this.subprojectPath)
+        join15(this.rootDir, this.subprojectPath)
       );
       if (!succeeded) throw new Error(`Error applying fix - could not restore project ${this.subprojectPath}`);
     }
@@ -230164,7 +230326,7 @@ var NugetFixingManager = class {
         details.requested = requestedRange;
       });
     });
-    await writeFile7(projectFilePath, initialProjectFile);
+    await writeFile9(projectFilePath, initialProjectFile);
     await applySeries(vulnFixes, async ({ dependencyIdentifier, dependencyName }) => {
       await applySeries(
         dependencyTree.transitiveDependencies[dependencyIdentifier].frameworks?.filter(
@@ -230190,10 +230352,10 @@ var NugetFixingManager = class {
         }
       );
     });
-    await writeFile7(this.getLockFilePath(wsPath), JSON.stringify(lockFileWithFixes, null, 2));
+    await writeFile9(this.getLockFilePath(wsPath), JSON.stringify(lockFileWithFixes, null, 2));
   }
   async addPackage(packageName, version4, framework, wsPath) {
-    const dir = join13(this.rootDir, this.subprojectPath, wsPath);
+    const dir = join15(this.rootDir, this.subprojectPath, wsPath);
     const succeeded = await execAndLogOnFailure2(
       cmdt`dotnet add package ${packageName} --version ${version4} --no-restore --framework ${framework}`,
       dir
@@ -230210,10 +230372,10 @@ var NugetFixingManager = class {
     return JSON.parse(await readFile19(this.getLockFilePath(wsPath), "utf-8"));
   }
   getLockFilePath(wsPath, lockFileName = "packages.lock.json") {
-    return join13(this.getAbsWsPath(wsPath), lockFileName);
+    return join15(this.getAbsWsPath(wsPath), lockFileName);
   }
   getAbsWsPath(wsPath) {
-    return join13(this.rootDir, this.subprojectPath, wsPath);
+    return join15(this.rootDir, this.subprojectPath, wsPath);
   }
 };
 
@@ -230246,7 +230408,7 @@ var RubyGemsFixingManager = class {
 };
 
 // ../fixing-management/src/fixing-management/rust/cargo-fixing-manager.ts
-import { join as join14 } from "node:path";
+import { join as join16 } from "node:path";
 var CargoFixingManager = class {
   constructor(rootDir, subprojectPath) {
     this.rootDir = rootDir;
@@ -230262,7 +230424,7 @@ var CargoFixingManager = class {
     });
   }
   async applySecurityFixesForWorkspace(workspacePath, fixes, dependencyTree) {
-    const subprojectPath = join14(this.rootDir, this.subprojectPath, workspacePath);
+    const subprojectPath = join16(this.rootDir, this.subprojectPath, workspacePath);
     for (const fix of fixes) {
       const depTreeNode = dependencyTree.transitiveDependencies[fix.dependencyIdentifier];
       if (!depTreeNode || depTreeNode.version !== fix.currentVersion) throw Error("Error applying fix!");
@@ -230286,8 +230448,8 @@ import { dirname as dirname16, resolve as resolve26 } from "node:path";
 // ../utils/src/nuget-project-utils.ts
 var import_parse_xml3 = __toESM(require_dist(), 1);
 import { readFile as readFile20 } from "node:fs/promises";
-import { dirname as dirname15, join as join15, relative as relative10, resolve as resolve25, basename as basename8, extname } from "node:path";
-import { existsSync as existsSync14 } from "node:fs";
+import { dirname as dirname15, join as join17, relative as relative10, resolve as resolve25, basename as basename8, extname } from "node:path";
+import { existsSync as existsSync16 } from "node:fs";
 
 // ../utils/dist/version-comparison/version-satisfies.js
 var import_semver3 = __toESM(require_semver2(), 1);
@@ -231721,7 +231883,7 @@ var ecosystemMap2 = {
   RUST: {
     sortVersions: import_semver3.sort,
     isPrerelease: semverIsPrerelease2,
-    versionSatisfiesSpecifier: (version4, specifier) => semverSatisfiesSpecifier2(version4, /^\d/.test(specifier) ? `^${specifier}` : specifier),
+    versionSatisfiesSpecifier: (version4, specifier) => specifier.split(",").map((part) => part.trim()).every((trimmed) => semverSatisfiesSpecifier2(version4, /^\d/.test(trimmed) ? `^${trimmed}` : trimmed)),
     versionSatisfiesRelation: import_semver3.cmp,
     versionSatisfiesRange: semverSatisfiesRange2
   },
@@ -231840,7 +232002,7 @@ async function loadNuGetProject(rootDir, projectFile, validateFile) {
 }
 async function loadNuGetProjectOrTarget(rootDir, projectFile, mainProject, visited, validateFile) {
   const validatedProjectPath = validateFile ? validateFile(resolve25(rootDir, projectFile)) : resolve25(rootDir, projectFile);
-  if (!validatedProjectPath || !existsSync14(validatedProjectPath)) return void 0;
+  if (!validatedProjectPath || !existsSync16(validatedProjectPath)) return void 0;
   if (visited.has(validatedProjectPath)) return void 0;
   visited.set(validatedProjectPath);
   const sourceText = await readFile20(validatedProjectPath, "utf-8");
@@ -231915,7 +232077,7 @@ async function loadNuGetProjectOrTarget(rootDir, projectFile, mainProject, visit
 }
 async function loadPackagesConfig(rootDir, file, validateFile) {
   const validatedConfigPath = validateFile(resolve25(rootDir, file));
-  if (!validatedConfigPath || !existsSync14(validatedConfigPath)) return void 0;
+  if (!validatedConfigPath || !existsSync16(validatedConfigPath)) return void 0;
   const sourceText = await readFile20(validatedConfigPath, "utf-8");
   const configXml = (0, import_parse_xml3.parseXml)(sourceText, { includeOffsets: true });
   const packages = extractPackagesFromXml(configXml, sourceText);
@@ -231957,7 +232119,7 @@ async function findDirectoryBuildPropsProjects(currentProject, mainProject, visi
   const projectsReverse = [];
   let currentDir = dirname15(currentProject.validatedProjectPath);
   while (currentDir.startsWith(currentProject.rootDir) && currentDir !== dirname15(currentDir)) {
-    const unvalidatedPath = join15(currentDir, "Directory.Build.props");
+    const unvalidatedPath = join17(currentDir, "Directory.Build.props");
     const validatedPath = validateFile ? validateFile(unvalidatedPath) : unvalidatedPath;
     if (validatedPath && validatedPath !== currentProject.validatedProjectPath) {
       const directoryBuildPropsProject = await loadNuGetProjectOrTarget(
@@ -231978,7 +232140,7 @@ async function findDirectoryBuildPropsProjects(currentProject, mainProject, visi
 async function findDirectoryPackagesPropsProject(currentProject, mainProject, visited, validateFile) {
   let currentDir = dirname15(currentProject.validatedProjectPath);
   while (currentDir.startsWith(currentProject.rootDir) && currentDir !== dirname15(currentDir)) {
-    const unvalidatedPath = join15(currentDir, "Directory.Packages.props");
+    const unvalidatedPath = join17(currentDir, "Directory.Packages.props");
     const validatedPath = validateFile ? validateFile(unvalidatedPath) : unvalidatedPath;
     if (validatedPath) {
       return validatedPath !== currentProject.validatedProjectPath ? await loadNuGetProjectOrTarget(currentProject.rootDir, unvalidatedPath, mainProject, visited, validateFile) : void 0;
@@ -232045,7 +232207,7 @@ async function handleImportElement(currentProject, importElement, mainProject, v
   if (!importPath) return;
   const resolvedPath = resolve25(dirname15(currentProject.validatedProjectPath), normalizeMSBuildPath(importPath));
   const validatedPath = validateFile ? validateFile(resolvedPath) : resolvedPath;
-  if (!validatedPath || !existsSync14(validatedPath)) return;
+  if (!validatedPath || !existsSync16(validatedPath)) return;
   const importedProject = await loadNuGetProjectOrTarget(
     currentProject.rootDir,
     resolvedPath,
@@ -232737,7 +232899,7 @@ import { dirname as dirname18, relative as relative11, resolve as resolve28 } fr
 var import_picomatch6 = __toESM(require_picomatch2(), 1);
 var import_semver4 = __toESM(require_semver2(), 1);
 import assert12 from "node:assert";
-import { readFile as readFile22, writeFile as writeFile8 } from "node:fs/promises";
+import { readFile as readFile22, writeFile as writeFile10 } from "node:fs/promises";
 
 // ../utils/src/cargo-utils.ts
 import { readFile as readFile21 } from "node:fs/promises";
@@ -232882,7 +233044,7 @@ var CargoSocketUpgradeManager = class {
     await this.refreshLockfiles(lockfileToArtifacts, ctxt, "LOCKFILE_ONLY");
     await asyncForEach(Array.from(restoreMap), async ([path9, { content, artifacts }]) => {
       try {
-        await writeFile8(path9, content);
+        await writeFile10(path9, content);
         ctxt.statusUpdater?.({
           status: "success",
           file: relative11(this.rootDir, path9),
@@ -233092,7 +233254,7 @@ ${newDependencyLine}`
 
 // ../fixing-management/src/fixing-management/pip/pip-socket-upgrade-manager.ts
 var import_picomatch8 = __toESM(require_picomatch2(), 1);
-import { dirname as dirname20, join as join17, resolve as resolve31 } from "node:path";
+import { dirname as dirname20, join as join19, resolve as resolve31 } from "node:path";
 import assert13 from "node:assert";
 import { readFile as readFile25 } from "node:fs/promises";
 var import_pip_requirements_js = __toESM(require_dist11(), 1);
@@ -233348,7 +233510,7 @@ function createPep508VersionPatches(file, idx, requirement, oldVersion, upgradeV
 }
 
 // ../utils/src/pip-utils.ts
-import { existsSync as existsSync15 } from "node:fs";
+import { existsSync as existsSync17 } from "node:fs";
 import { readFile as readFile24 } from "node:fs/promises";
 import { dirname as dirname19, resolve as resolve30 } from "node:path";
 import util4 from "node:util";
@@ -233359,7 +233521,7 @@ var import_semver5 = __toESM(require_semver2(), 1);
 import { execFileSync } from "child_process";
 import { constants as constants3 } from "fs";
 import { access as access3, readFile as readFile23 } from "fs/promises";
-import { join as join16, resolve as resolve29 } from "path";
+import { join as join18, resolve as resolve29 } from "path";
 import util3 from "util";
 var { once: once2 } = import_lodash6.default;
 var systemPython = once2(() => {
@@ -234124,9 +234286,9 @@ async function buildDependencyTreesFromUvLock(rootDir, uvLockFile) {
       const virtualPath = source.virtual;
       const editablePath = source.editable;
       if (virtualPath instanceof TOMLScalar && typeof virtualPath[value] === "string") {
-        localProjectNodeKeys.set(join17(dirname20(uvLockFile), virtualPath[value]), nodeKey);
+        localProjectNodeKeys.set(join19(dirname20(uvLockFile), virtualPath[value]), nodeKey);
       } else if (editablePath instanceof TOMLScalar && typeof editablePath[value] === "string") {
-        localProjectNodeKeys.set(join17(dirname20(uvLockFile), editablePath[value]), nodeKey);
+        localProjectNodeKeys.set(join19(dirname20(uvLockFile), editablePath[value]), nodeKey);
       }
     }
   }
@@ -234199,7 +234361,7 @@ import assert14 from "node:assert";
 var import_good_enough_parser4 = __toESM(require_cjs(), 1);
 init_ruby_lang();
 import { resolve as resolve32, dirname as dirname21, relative as relative12 } from "node:path";
-import { existsSync as existsSync16, readFileSync as readFileSync4, readdirSync as readdirSync4 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync6, readdirSync as readdirSync4 } from "node:fs";
 init_gemspec_utils();
 var booleanQuery2 = import_good_enough_parser4.query.alt(
   import_good_enough_parser4.query.sym(/^true|false$/, (ctx, { value: value2, offset }) => {
@@ -234314,8 +234476,8 @@ var evalGemfileQuery = import_good_enough_parser4.query.sym("eval_gemfile").join
   if (pathEvaluated === void 0) return ctx;
   const rootDir = ctx.gemfile.rootDir;
   const file = relative12(rootDir, resolve32(rootDir, dirname21(ctx.gemfile.file), pathEvaluated));
-  if (!existsSync16(resolve32(rootDir, file))) return ctx;
-  const sourceText = readFileSync4(resolve32(rootDir, file), "utf-8");
+  if (!existsSync18(resolve32(rootDir, file))) return ctx;
+  const sourceText = readFileSync6(resolve32(rootDir, file), "utf-8");
   const parser2 = import_good_enough_parser4.lang.createLang(lang3);
   const cursor = parser2.parse(sourceText);
   const otherCtx = parser2.query(cursor, treeQuery4, {
@@ -234389,7 +234551,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
     ctx.currentGem = void 0;
   }
   const searchDir = gemspecPath ? resolve32(rootDir, gemfileDir, gemspecPath) : resolve32(rootDir, gemfileDir);
-  if (!existsSync16(searchDir)) return ctx;
+  if (!existsSync18(searchDir)) return ctx;
   let gemspecFiles = [];
   try {
     const entries = readdirSync4(searchDir);
@@ -234407,7 +234569,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
   const gemspecFullPath = resolve32(searchDir, gemspecFile);
   const gemspecRelativePath = relative12(rootDir, gemspecFullPath);
   try {
-    const sourceText = readFileSync4(gemspecFullPath, "utf-8");
+    const sourceText = readFileSync6(gemspecFullPath, "utf-8");
     const gemspec = parseGemspec(rootDir, gemspecRelativePath, sourceText);
     ctx.gemspecs.push(gemspec);
     ctx.gems.push(...gemspec.dependencies);
@@ -234550,7 +234712,7 @@ function parseGemfileLock(content) {
 }
 
 // ../fixing-management/src/fixing-management/rubygems/rubygems-socket-upgrade-manager.ts
-import { readFile as readFile26, writeFile as writeFile9 } from "node:fs/promises";
+import { readFile as readFile26, writeFile as writeFile11 } from "node:fs/promises";
 
 // ../fixing-management/src/fixing-management/rubygems/rubygems-patch-utils.ts
 function createRubygemVersionPatches(gem, idx, upgradeVersion, rangeStyle, statusUpdater) {
@@ -234857,7 +235019,7 @@ var RubygemsSocketUpgradeManager = class {
     });
     await asyncForEach(Array.from(restoreMap), async ([path9, { content, artifacts }]) => {
       try {
-        await writeFile9(path9, content);
+        await writeFile11(path9, content);
         ctxt.statusUpdater?.({
           status: "success",
           file: relative13(this.rootDir, path9),
@@ -235113,7 +235275,7 @@ async function applySocketUpgrades(ecosystem, rootDir, ctxt) {
 
 // dist/cli-apply-fix.js
 var import_lodash13 = __toESM(require_lodash(), 1);
-import { existsSync as existsSync20 } from "fs";
+import { existsSync as existsSync22 } from "fs";
 
 // ../other-modules-communicator/src/other-modules-communicator.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -235124,15 +235286,15 @@ import { resolve as resolve35 } from "path";
 
 // ../utils/dist/constants.js
 var import_lodash8 = __toESM(require_lodash(), 1);
-import { dirname as dirname23, join as join19 } from "node:path";
+import { dirname as dirname23, join as join21 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // ../utils/dist/file-utils.js
 var import_lodash7 = __toESM(require_lodash(), 1);
 var import_micromatch2 = __toESM(require_micromatch(), 1);
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync19 } from "fs";
 import { access as access4, cp as cp3, readdir as readdir4, stat as stat4 } from "fs/promises";
-import { basename as basename9, join as join18, relative as relative14, resolve as resolve34 } from "path";
+import { basename as basename9, join as join20, relative as relative14, resolve as resolve34 } from "path";
 var { uniq: uniq2 } = import_lodash7.default;
 var { isMatch: isMatch2 } = import_micromatch2.default;
 function* parents2(dir) {
@@ -235161,10 +235323,10 @@ var COANA_ROOT = once3(() => {
   return coanaRoot;
 });
 var REPOS_PATH = once3(() => {
-  return process.env.REPOS_PATH ?? join19(COANA_ROOT(), "repos");
+  return process.env.REPOS_PATH ?? join21(COANA_ROOT(), "repos");
 });
 var COANA_REPOS_PATH = once3(() => {
-  return process.env.COANA_REPOS_PATH ?? join19(REPOS_PATH(), "coana-tech");
+  return process.env.COANA_REPOS_PATH ?? join21(REPOS_PATH(), "coana-tech");
 });
 
 // ../docker-management/src/constants.ts
@@ -235178,32 +235340,32 @@ var getImageTag = () => {
 };
 
 // ../docker-management/src/docker-spec.ts
-import { join as join20 } from "path";
+import { join as join22 } from "path";
 var builderSpecs = [
   {
     name: "maven-builder",
-    file: join20("builders", "maven", "Dockerfile"),
+    file: join22("builders", "maven", "Dockerfile"),
     isBuilder: true
   },
   {
     name: "python-builder",
-    file: join20("builders", "python", "Dockerfile"),
+    file: join22("builders", "python", "Dockerfile"),
     isBuilder: true
   },
   {
     name: "go-builder",
-    file: join20("builders", "go", "Dockerfile"),
+    file: join22("builders", "go", "Dockerfile"),
     isBuilder: true
   }
 ];
 var packageManagerDockerSpecs = [
   {
     name: "npm-package-managers",
-    file: join20("package-management", "npm", "Dockerfile")
+    file: join22("package-management", "npm", "Dockerfile")
   },
   {
     name: "maven-package-managers",
-    file: join20("package-management", "maven", "Dockerfile"),
+    file: join22("package-management", "maven", "Dockerfile"),
     variants: {
       jdk8: {
         JDK_URL_AMD64: "https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u442-b06/OpenJDK8U-jdk_x64_linux_hotspot_8u442b06.tar.gz",
@@ -235228,57 +235390,57 @@ var packageManagerDockerSpecs = [
   },
   {
     name: "pip-package-managers",
-    file: join20("package-management", "pip", "Dockerfile"),
+    file: join22("package-management", "pip", "Dockerfile"),
     from: {
       name: "python-builder"
     }
   },
   {
     name: "go-package-manager",
-    file: join20("package-management", "go", "Dockerfile"),
+    file: join22("package-management", "go", "Dockerfile"),
     from: {
       name: "go-builder"
     }
   },
   {
     name: "nuget-package-manager",
-    file: join20("package-management", "nuget", "Dockerfile")
+    file: join22("package-management", "nuget", "Dockerfile")
   },
   {
     name: "cargo-package-manager",
-    file: join20("package-management", "cargo", "Dockerfile")
+    file: join22("package-management", "cargo", "Dockerfile")
   }
 ];
 var reachabilityAnalyzerDockerSpecs = [
   {
     name: "jelly-analyzer",
-    file: join20("reachability-analyzers", "jelly", "Dockerfile")
+    file: join22("reachability-analyzers", "jelly", "Dockerfile")
   },
   {
     name: "alucard-analyzer",
-    file: join20("reachability-analyzers", "alucard", "Dockerfile")
+    file: join22("reachability-analyzers", "alucard", "Dockerfile")
   },
   {
     name: "mambalade-analyzer",
-    file: join20("reachability-analyzers", "mambalade", "Dockerfile"),
+    file: join22("reachability-analyzers", "mambalade", "Dockerfile"),
     from: {
       name: "python-builder"
     }
   },
   {
     name: "goana-analyzer",
-    file: join20("reachability-analyzers", "goana", "Dockerfile"),
+    file: join22("reachability-analyzers", "goana", "Dockerfile"),
     from: {
       name: "go-builder"
     }
   },
   {
     name: "cocoa-analyzer",
-    file: join20("reachability-analyzers", "cocoa", "Dockerfile")
+    file: join22("reachability-analyzers", "cocoa", "Dockerfile")
   },
   {
     name: "rustica-analyzer",
-    file: join20("reachability-analyzers", "rustica", "Dockerfile")
+    file: join22("reachability-analyzers", "rustica", "Dockerfile")
   }
 ];
 function getAllPackageManagerSpecs() {
@@ -235558,15 +235720,15 @@ async function detectVariantMaven(projectDir) {
 }
 
 // ../docker-management/src/maven/gradle-version-detector.ts
-import { existsSync as existsSync18 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync20 } from "fs";
+import { join as join23 } from "path";
 import { readFile as readFile28 } from "fs/promises";
 async function detectVariantGradle(projectDir) {
   return sanitizeJvmVariant("GRADLE", projectDir, await detect(projectDir));
 }
 async function detect(projectDir) {
-  const gradleWrapperPropertiesPath = join21(projectDir, "gradle", "wrapper", "gradle-wrapper.properties");
-  const gradleWrapperProperties = existsSync18(gradleWrapperPropertiesPath) ? (await readFile28(gradleWrapperPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
+  const gradleWrapperPropertiesPath = join23(projectDir, "gradle", "wrapper", "gradle-wrapper.properties");
+  const gradleWrapperProperties = existsSync20(gradleWrapperPropertiesPath) ? (await readFile28(gradleWrapperPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!gradleWrapperProperties) return void 0;
   const distributionUrlRegex = /.*gradle-(\d+(\.\d+(\.\d+)?)?)/;
   for (const prop2 of gradleWrapperProperties) {
@@ -235580,15 +235742,15 @@ async function detect(projectDir) {
 }
 
 // ../docker-management/src/maven/sbt-version-detector.ts
-import { existsSync as existsSync19 } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync21 } from "fs";
+import { join as join24 } from "path";
 import { readFile as readFile29 } from "fs/promises";
 async function detectVariantSbt(projectDir) {
   return sanitizeJvmVariant("SBT", projectDir, await detect2(projectDir));
 }
 async function detect2(projectDir) {
-  const sbtBuildPropertiesPath = join22(projectDir, "project", "build.properties");
-  const sbtBuildProperties = existsSync19(sbtBuildPropertiesPath) ? (await readFile29(sbtBuildPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
+  const sbtBuildPropertiesPath = join24(projectDir, "project", "build.properties");
+  const sbtBuildProperties = existsSync21(sbtBuildPropertiesPath) ? (await readFile29(sbtBuildPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!sbtBuildProperties) return void 0;
   for (const prop2 of sbtBuildProperties) {
     const [key, value2] = prop2.split("=");
@@ -235702,18 +235864,18 @@ async function findReachabilityAnalyzersDockerImage(ecosystem) {
 // ../other-modules-communicator/src/other-modules-communicator.ts
 var import_lodash12 = __toESM(require_lodash(), 1);
 import { rmSync } from "fs";
-import { mkdir as mkdir5, readFile as readFile30, writeFile as writeFile10 } from "fs/promises";
+import { mkdir as mkdir5, readFile as readFile30, writeFile as writeFile12 } from "fs/promises";
 import assert15 from "node:assert";
 import { platform as platform8 } from "os";
-import { join as join25, posix as posix2, relative as relative16, sep as sep3 } from "path";
+import { join as join27, posix as posix2, relative as relative16, sep as sep3 } from "path";
 
 // ../utils/src/tmp-file.ts
 import { rm, mkdtemp, cp as cp4, lstat as lstat2 } from "fs/promises";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join23, relative as relative15, sep as sep2, extname as extname2 } from "path";
+import { tmpdir as tmpdir4 } from "os";
+import { join as join25, relative as relative15, sep as sep2, extname as extname2 } from "path";
 async function createTmpDirectory(prefix) {
   try {
-    const tmpDir = await mkdtemp(join23(tmpdir2(), prefix));
+    const tmpDir = await mkdtemp(join25(tmpdir4(), prefix));
     return tmpDir;
   } catch (err) {
     console.log("Error creating tmp directory", err);
@@ -235988,7 +236150,7 @@ import { resolve as resolve36 } from "path";
 
 // ../utils/src/constants.ts
 var import_lodash10 = __toESM(require_lodash(), 1);
-import { dirname as dirname24, join as join24 } from "node:path";
+import { dirname as dirname24, join as join26 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var { once: once5 } = import_lodash10.default;
 var fileName2 = fileURLToPath4(import.meta.url);
@@ -236001,10 +236163,10 @@ var COANA_ROOT2 = once5(() => {
   return coanaRoot;
 });
 var REPOS_PATH2 = once5(() => {
-  return process.env.REPOS_PATH ?? join24(COANA_ROOT2(), "repos");
+  return process.env.REPOS_PATH ?? join26(COANA_ROOT2(), "repos");
 });
 var COANA_REPOS_PATH2 = once5(() => {
-  return process.env.COANA_REPOS_PATH ?? join24(REPOS_PATH2(), "coana-tech");
+  return process.env.COANA_REPOS_PATH ?? join26(REPOS_PATH2(), "coana-tech");
 });
 var REQUIREMENTS_FILES_SEARCH_DEPTH = 2;
 
@@ -236043,7 +236205,7 @@ var { memoize, once: once7, take } = import_lodash12.default;
 async function getReachabilityAnalyzersScriptPath() {
   if (isNexeMode()) {
     const extractedPath = await extractTool("reachability-analyzers", "reachability-analyzers-cli.mjs");
-    return join25(extractedPath, "reachability-analyzers-cli.mjs");
+    return join27(extractedPath, "reachability-analyzers-cli.mjs");
   }
   return REACHABILITY_ANALYZERS_SCRIPT_PATH();
 }
@@ -236141,7 +236303,7 @@ var OtherModulesCommunicator = class {
           return "Running reachability analysis on package registry package";
       }
     }
-    return `${_cmdStr()}: (${ecosystem}) ${relative16(this.rootWorkingDir, join25(subprojectPath, workspacePath)) || "."}`;
+    return `${_cmdStr()}: (${ecosystem}) ${relative16(this.rootWorkingDir, join27(subprojectPath, workspacePath)) || "."}`;
   }
   getProjectPath(subprojectPath) {
     return this.options.runWithoutDocker ? subprojectPath : posix2.resolve("/project", relative16(this.rootWorkingDir, subprojectPath).replaceAll(sep3, posix2.sep));
@@ -236190,7 +236352,7 @@ var OtherModulesCommunicator = class {
   async runPackageManagerCommandWithOutput(commandName, packageManagerName, subprojectPath, args2 = [], extraDockerArgs, env) {
     const tmpDir = await this.getTmpDirForSubproject(subprojectPath);
     const outputFileName = `${v4_default()}-${commandName}-output.json`;
-    const outputFilePathThisProcess = join25(tmpDir, outputFileName);
+    const outputFilePathThisProcess = join27(tmpDir, outputFileName);
     const outputFilePathOtherProcess = this.options.runWithoutDocker ? outputFilePathThisProcess : posix2.join(TMP_DIR_IN_DOCKER, outputFileName);
     await this.runPackageManagerCommand(
       commandName,
@@ -236228,8 +236390,8 @@ var OtherModulesCommunicator = class {
     if (isNexeMode()) {
       const baseDir = getExtractionBaseDir();
       env.COANA_ROOT = baseDir;
-      env.REPOS_PATH = join25(baseDir, "repos");
-      env.COANA_REPOS_PATH = join25(baseDir, "repos", "coana-tech");
+      env.REPOS_PATH = join27(baseDir, "repos");
+      env.COANA_REPOS_PATH = join27(baseDir, "repos", "coana-tech");
       env.REACHABILITY_ANALYZERS_SCRIPT_PATH = scriptPath;
     }
     return Spinner.instance().wrap(
@@ -236266,7 +236428,7 @@ var OtherModulesCommunicator = class {
   async runReachabilityAnalyzerCommandWithOutput(commandName, ecosystem, subprojectPath, workspacePath, args2, env, rootWorkingDirOverride, displaySubprojectPath) {
     const tmpDir = await this.getTmpDirForSubproject(displaySubprojectPath ?? subprojectPath);
     const outputFileName = `${v4_default()}-${commandName}-output.json`;
-    const outputFilePathThisProcess = join25(tmpDir, outputFileName);
+    const outputFilePathThisProcess = join27(tmpDir, outputFileName);
     const outputFilePathOtherProcess = this.options.runWithoutDocker ? outputFilePathThisProcess : posix2.join(TMP_DIR_IN_DOCKER, outputFileName);
     await this.runReachabilityAnalyzerCommand(
       commandName,
@@ -236305,9 +236467,9 @@ var OtherModulesCommunicator = class {
       if (providedOptions.type === "providee") {
         const tmpDir = await this.getTmpDirForSubproject(subprojectPath);
         const providerFileName = "provider.json";
-        const providerFileThisProcess = join25(tmpDir, providerFileName);
+        const providerFileThisProcess = join27(tmpDir, providerFileName);
         const providerFileOtherProcess = this.options.runWithoutDocker ? providerFileThisProcess : posix2.join(TMP_DIR_IN_DOCKER, providerFileName);
-        await writeFile10(providerFileThisProcess, JSON.stringify(providedOptions.provider));
+        await writeFile12(providerFileThisProcess, JSON.stringify(providedOptions.provider));
         return ["--provider", providerFileOtherProcess];
       } else {
         return ["--as-provider"];
@@ -236352,9 +236514,9 @@ var OtherModulesCommunicator = class {
       await extractAllToolsForNexeMode();
     }
     const inputFileName = `${v4_default()}-runReachabilityAnalysis-input.json`;
-    const inputFileThisProcess = join25(tmpDir, inputFileName);
+    const inputFileThisProcess = join27(tmpDir, inputFileName);
     const inputFileOtherProcess = this.options.runWithoutDocker ? inputFileThisProcess : posix2.join(TMP_DIR_IN_DOCKER, inputFileName);
-    await writeFile10(
+    await writeFile12(
       inputFileThisProcess,
       JSON.stringify({
         workspaceData,
@@ -236396,7 +236558,7 @@ var setUpGoModuleCache = once7(async () => {
     execFileSync2("chmod", ["--recursive", "+rw", tmpDir]);
     rmSync(tmpDir, { recursive: true, force: true });
   });
-  const [upper, work] = [join25(tmpDir, "upper"), join25(tmpDir, "work")];
+  const [upper, work] = [join27(tmpDir, "upper"), join27(tmpDir, "work")];
   for (const dir of [upper, work]) await mkdir5(dir);
   const o7 = await execNeverFail2(
     cmdt`docker volume create --driver local --opt type=overlay
@@ -236432,7 +236594,7 @@ function abbreviateList(items, maxItems) {
 import { resolve as resolve37 } from "path";
 
 // ../utils/src/dashboard-api/coana-api.ts
-import { writeFile as writeFile11 } from "fs/promises";
+import { writeFile as writeFile13 } from "fs/promises";
 var import_artifact = __toESM(require_artifact_client2(), 1);
 var coanaAPI = process.env.PUBLIC_API_URL ?? "https://app.coana.tech/api/v1";
 var axiosClient2 = getAxiosClient();
@@ -236562,7 +236724,7 @@ async function sendToDashboard(report, writeReportToFile, reportId, apiKey) {
   try {
     if (writeReportToFile) {
       logger.info("Writing report to dashboard-report.json");
-      await writeFile11("dashboard-report.json", JSON.stringify(report, null, 2));
+      await writeFile13("dashboard-report.json", JSON.stringify(report, null, 2));
       if (process.env.GITHUB_ACTIONS === "true") {
         logger.info("uploading dashboard-report.json as an artifact");
         (0, import_artifact.create)().uploadArtifact("dashboard-report", ["dashboard-report.json"], process.cwd());
@@ -236833,7 +236995,7 @@ async function verifyFixes(fixes, otherModulesCommunicator, rootPath) {
   if (pathsForEachFixIdData.length !== new Set(pathsForEachFixIdData).size) {
     throw new Error("Multiple fix IDs found for the same subproject, workspace and ecosystem");
   }
-  const subprojectsNotFound = uniq3(fixes.filter(({ vulnerabilityInstance: v }) => !existsSync20(resolve37(rootPath, v.subprojectPath))).map(({ vulnerabilityInstance: v }) => `${v.subprojectPath}:${v.ecosystem}`));
+  const subprojectsNotFound = uniq3(fixes.filter(({ vulnerabilityInstance: v }) => !existsSync22(resolve37(rootPath, v.subprojectPath))).map(({ vulnerabilityInstance: v }) => `${v.subprojectPath}:${v.ecosystem}`));
   if (subprojectsNotFound.length > 0) {
     throw new Error(`Cannot find the following subprojects: ${subprojectsNotFound.join(", ")}`);
   }
@@ -237647,7 +237809,7 @@ function getVulnerabilitiesFromReport(report) {
 var import_packageurl_js = __toESM(require_packageurl_js(), 1);
 
 // dist/cli-upgrade-purl.js
-import { join as join28, relative as relative19, resolve as resolve40 } from "node:path";
+import { join as join30, relative as relative19, resolve as resolve40 } from "node:path";
 var import_picomatch10 = __toESM(require_picomatch2(), 1);
 
 // ../project-management/src/project-management/project-manager.ts
@@ -237656,12 +237818,12 @@ import { relative as relative18, resolve as resolve39 } from "path";
 // ../project-management/src/project-management/ecosystem-management/ecosystem-manager.ts
 var import_micromatch3 = __toESM(require_micromatch2(), 1);
 import { readdir as readdir6 } from "fs/promises";
-import { join as join27, relative as relative17, resolve as resolve38 } from "path";
+import { join as join29, relative as relative17, resolve as resolve38 } from "path";
 
 // ../project-management/src/project-management/ecosystem-management/ecosystem-specs.ts
-import { existsSync as existsSync21 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 import { readdir as readdir5, readFile as readFile31 } from "fs/promises";
-import { join as join26, sep as sep4 } from "path";
+import { join as join28, sep as sep4 } from "path";
 var specs = {
   NPM: [
     /* @__PURE__ */ new Map([["package.json", packageManagerIfPackageJSONExistsAndValid("NPM")]]),
@@ -237692,7 +237854,7 @@ var specs = {
         [
           /^(pyproject.toml|setup.py|requirements.*\.txt)/,
           async (projectDir) => {
-            const isPythonProject = await exists(join26(projectDir, "pyproject.toml")) || await exists(join26(projectDir, "setup.py")) && await isSetupPySetuptools(join26(projectDir, "setup.py"));
+            const isPythonProject = await exists(join28(projectDir, "pyproject.toml")) || await exists(join28(projectDir, "setup.py")) && await isSetupPySetuptools(join28(projectDir, "setup.py"));
             if (isPythonProject) {
               properPythonProjects.push(projectDir + sep4);
               return "PIP_REQUIREMENTS";
@@ -237715,7 +237877,7 @@ var specs = {
         [
           "uv.lock",
           async (projectDir) => {
-            if (await exists(join26(projectDir, "pyproject.toml"))) {
+            if (await exists(join28(projectDir, "pyproject.toml"))) {
               logger.warn("uv is not supported yet, using plain pyproject.toml as a fallback");
               return "PIP_REQUIREMENTS";
             } else logger.error("uv.lock found without pyproject.toml");
@@ -237736,8 +237898,8 @@ function getEcosystemSpecs(ecosystems) {
 }
 function packageManagerIfPackageJSONExistsAndValid(packageManager) {
   return async (projectDir) => {
-    if (!existsSync21(join26(projectDir, "package.json"))) return void 0;
-    const packageJSONPath = join26(projectDir, "package.json");
+    if (!existsSync23(join28(projectDir, "package.json"))) return void 0;
+    const packageJSONPath = join28(projectDir, "package.json");
     try {
       JSON.parse(await readFile31(packageJSONPath, "utf-8"));
       return packageManager;
@@ -237794,7 +237956,7 @@ var EcosystemManager = class _EcosystemManager {
           const resolvedProjectDir = resolve38(mainProjectDir, relativeProjectDir);
           if (config3.includeDirs.length > 0)
             workspacePaths = workspacePaths.filter(
-              (workspacePath) => isMatch3(relative17(mainProjectDir, join27(resolvedProjectDir, workspacePath)), config3.includeDirs)
+              (workspacePath) => isMatch3(relative17(mainProjectDir, join29(resolvedProjectDir, workspacePath)), config3.includeDirs)
             );
           workspacePaths.filter((workspacePath) => workspacePath !== ".").forEach((workspacePath) => projectDirsAlreadyCovered.push(resolve38(resolvedProjectDir, workspacePath)));
           if (workspacePaths.length > 0)
@@ -237822,7 +237984,7 @@ var EcosystemManager = class _EcosystemManager {
         }
       }
       for (const dir of directoriesToTraverse) {
-        await recHelper(join27(projectDir, dir), true);
+        await recHelper(join29(projectDir, dir), true);
       }
     }
     async function getPackageManagerName(projectDir, foundProjectFiles, foundLockFiles) {
@@ -237851,7 +238013,7 @@ var EcosystemManager = class _EcosystemManager {
       const filesAndDirectories = await readdir6(projectDir, { withFileTypes: true });
       for (const dirent of filesAndDirectories) {
         const fileOrDirectory = dirent.name;
-        const fullPath = join27(projectDir, fileOrDirectory);
+        const fullPath = join29(projectDir, fileOrDirectory);
         if (dirent.isDirectory()) {
           if (shouldIgnoreDir(fileOrDirectory) || shouldIgnoreDueToExcludeDirsOrChangedFiles(config3, fullPath))
             continue;
@@ -237878,7 +238040,7 @@ var EcosystemManager = class _EcosystemManager {
       packageManagerName,
       subprojectPath,
       workspacePaths: workspacePaths.filter(
-        (workspacePath) => !shouldIgnoreDueToExcludeDirsOrChangedFiles(this.config, join27(subprojectPath, workspacePath))
+        (workspacePath) => !shouldIgnoreDueToExcludeDirsOrChangedFiles(this.config, join29(subprojectPath, workspacePath))
       )
     }));
   }
@@ -238223,7 +238385,7 @@ ${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
           });
           if (vulnerabilityFixes.length === 0)
             return;
-          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join28(subproject.subprojectPath, wsPath)}`);
+          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join30(subproject.subprojectPath, wsPath)}`);
           workspaceToFixes[wsPath] = [
             {
               fixId: "dummy",
@@ -238244,7 +238406,7 @@ ${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
   }
 }
 var signalFixApplied = (_fixId, subprojectPath, workspacePath, vulnerabilityFixes) => {
-  logger.info(`Successfully upgraded purls for: ${join28(subprojectPath, workspacePath)}`);
+  logger.info(`Successfully upgraded purls for: ${join30(subprojectPath, workspacePath)}`);
   logger.info(`Upgraded: 
 ${vulnerabilityFixes.map((fix) => `	${fix.dependencyName} from ${fix.currentVersion} to ${fix.fixedVersion}`).join("\n")}`);
 };
@@ -238457,8 +238619,8 @@ function prettyApplyFixesTo(applyFixesToOption) {
 
 // dist/cli-core.js
 import assert16 from "node:assert";
-import { existsSync as existsSync26, writeFileSync as writeFileSync3 } from "fs";
-import { mkdir as mkdir6, writeFile as writeFile13 } from "fs/promises";
+import { existsSync as existsSync28, writeFileSync as writeFileSync3 } from "fs";
+import { mkdir as mkdir6, writeFile as writeFile15 } from "fs/promises";
 
 // ../../node_modules/.pnpm/kleur@4.1.5/node_modules/kleur/index.mjs
 var FORCE_COLOR;
@@ -238563,7 +238725,7 @@ var kleur_default = $;
 // dist/cli-core.js
 var import_lodash15 = __toESM(require_lodash(), 1);
 import os from "os";
-import { join as join32, relative as relative20, resolve as resolve42 } from "path";
+import { join as join34, relative as relative20, resolve as resolve42 } from "path";
 
 // ../utils/src/dashboard-api/shared-api.ts
 var DashboardAPI = class {
@@ -238703,6 +238865,14 @@ var DashboardAPI = class {
       await this.socketAPI.sendTelemetrySocket(analysisMetadataId, telemetry);
     }
   }
+  async sendAnalyzerTelemetry(analysisMetadataId, telemetry) {
+    if (this.disableAnalyticsSharing) {
+      return;
+    }
+    if (this.socketMode) {
+      await this.socketAPI.sendAnalyzerTelemetrySocket(analysisMetadataId, telemetry);
+    }
+  }
   async registerDiagnosticsToAnalysisMetadata(analysisMetadataId, diagnosticsData) {
     if (this.disableAnalyticsSharing || !analysisMetadataId) {
       return;
@@ -238779,8 +238949,8 @@ var BatchedHttpLogStreamer = class {
 // ../utils/src/logging/socket-log-server.ts
 import { createServer } from "net";
 import { once as once8 } from "events";
-import { createWriteStream as createWriteStream4, existsSync as existsSync22 } from "fs";
-import { unlink } from "fs/promises";
+import { createWriteStream as createWriteStream4, existsSync as existsSync24 } from "fs";
+import { unlink as unlink3 } from "fs/promises";
 var SocketLogServer = class {
   server;
   socketPath;
@@ -238800,8 +238970,8 @@ var SocketLogServer = class {
     this.server = createServer((socket) => this.handleConnection(socket));
   }
   async start() {
-    if (existsSync22(this.socketPath)) {
-      await unlink(this.socketPath);
+    if (existsSync24(this.socketPath)) {
+      await unlink3(this.socketPath);
     }
     this.server.listen(this.socketPath);
     await once8(this.server, "listening");
@@ -238922,8 +239092,8 @@ var SocketLogServer = class {
     return new Promise((resolve45, reject) => {
       this.server.close((serverError) => {
         this.writeStream.end(() => {
-          if (existsSync22(this.socketPath)) {
-            unlink(this.socketPath).then(() => {
+          if (existsSync24(this.socketPath)) {
+            unlink3(this.socketPath).then(() => {
               if (serverError) reject(serverError);
               else resolve45();
             }).catch((unlinkError) => reject(serverError ?? unlinkError));
@@ -239208,16 +239378,16 @@ var bgWhiteBright = format5(107, 49);
 var DEFAULT_REPORT_FILENAME_BASE = "coana-report";
 
 // dist/internal/exclude-dirs-from-configuration-files.js
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { readFile as readFile32 } from "fs/promises";
 import { basename as basename10, resolve as resolve41 } from "path";
 var import_yaml2 = __toESM(require_dist12(), 1);
 async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
   const socketYmlConfigFile = resolve41(rootWorkingDir, "socket.yml");
-  if (existsSync23(socketYmlConfigFile))
+  if (existsSync25(socketYmlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYmlConfigFile);
   const socketYamlConfigFile = resolve41(rootWorkingDir, "socket.yaml");
-  if (existsSync23(socketYamlConfigFile))
+  if (existsSync25(socketYamlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYamlConfigFile);
   return void 0;
 }
@@ -239241,7 +239411,7 @@ async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
 var import_fast_glob = __toESM(require_out4(), 1);
 var import_ignore3 = __toESM(require_ignore(), 1);
 import { readFile as readFile33 } from "fs/promises";
-import { join as join29 } from "path";
+import { join as join31 } from "path";
 var DEFAULT_IGNORE_PATTERNS = [
   "**/node_modules/**",
   "**/.git/**",
@@ -239255,7 +239425,7 @@ var DEFAULT_IGNORE_PATTERNS = [
 ];
 async function loadGitignore(rootDir) {
   try {
-    const gitignorePath = join29(rootDir, ".gitignore");
+    const gitignorePath = join31(rootDir, ".gitignore");
     const content = await readFile33(gitignorePath, "utf-8");
     return (0, import_ignore3.default)().add(content);
   } catch {
@@ -239440,7 +239610,7 @@ function transformToVulnChainNode(dependencyTree) {
 }
 
 // dist/internal/socket-mode-helpers-socket-dependency-trees.js
-import { basename as basename11, dirname as dirname25, join as join30, sep as sep5 } from "path";
+import { basename as basename11, dirname as dirname25, join as join32, sep as sep5 } from "path";
 var REQUIREMENTS_FILES_SEARCH_DEPTH2 = 3;
 var venvExcludes = [
   "venv",
@@ -239565,7 +239735,7 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash,
     for (const file of allFiles) {
       const base = basename11(file);
       const workspaceDir = dirname25(file) || ".";
-      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join30(rootWorkingDirectory, file))) {
+      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join32(rootWorkingDirectory, file))) {
         if (!properPythonProjects.includes(workspaceDir)) {
           properPythonProjects.push(workspaceDir);
         }
@@ -253880,12 +254050,12 @@ var { root: root2 } = static_exports;
 
 // ../utils/src/maven-utils.ts
 var import_lodash14 = __toESM(require_lodash(), 1);
-import { existsSync as existsSync25, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
-import { join as join31 } from "path";
+import { existsSync as existsSync27, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
+import { join as join33 } from "path";
 
 // ../utils/src/download-utils.ts
-import { existsSync as existsSync24 } from "fs";
-import { writeFile as writeFile12 } from "fs/promises";
+import { existsSync as existsSync26 } from "fs";
+import { writeFile as writeFile14 } from "fs/promises";
 
 // ../utils/src/maven-utils.ts
 var { memoize: memoize3 } = import_lodash14.default;
@@ -255252,7 +255422,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.145";
+var version3 = "14.12.147";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -255373,8 +255543,8 @@ var CliCore = class {
   }
   async main() {
     const tmpDir = await createTmpDirectory("coana-cli-");
-    this.coanaLogPath = join32(tmpDir, "coana-log.txt");
-    this.coanaSocketPath = join32(tmpDir, "coana.sock");
+    this.coanaLogPath = join34(tmpDir, "coana-log.txt");
+    this.coanaSocketPath = join34(tmpDir, "coana.sock");
     if (this.options.socketMode) {
       logger.enableStreamBuffering();
     }
@@ -255425,7 +255595,7 @@ var CliCore = class {
       }, this.apiKey);
       if (this.options.manifestsTarHash) {
         if (this.options.excludeDirs && this.options.excludeDirs.length > 0) {
-          this.options.excludeDirs = this.options.excludeDirs.map((excludeDir) => excludeDir.endsWith("/*") ? excludeDir : `${excludeDir}/**/*`);
+          this.options.excludeDirs = this.options.excludeDirs.map((excludeDir) => excludeDir.endsWith("/*") ? excludeDir : `${excludeDir}/**`);
         }
         await this.computeAndOutputReportSocketMode(otherModulesCommunicator);
         this.spinner.stop();
@@ -255529,7 +255699,7 @@ var CliCore = class {
     await this.shareLogIfAnalysisError(vulnsWithResults);
     const socketReport = toSocketFactsSocketDependencyTree(artifacts, vulnsWithResults, this.reportId, allWorkspaceDiagnostics);
     const outputFile = resolve42(this.options.socketMode);
-    await writeFile13(outputFile, JSON.stringify(socketReport, null, 2));
+    await writeFile15(outputFile, JSON.stringify(socketReport, null, 2));
     logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
   }
   async shareLogIfAnalysisError(vulns) {
@@ -255556,7 +255726,7 @@ var CliCore = class {
       }
       const socketReport = toSocketFacts(report, this.reportDependencyTrees, subPjToWsPathToDirectDependencies);
       const outputFile = resolve42(this.options.socketMode);
-      await writeFile13(outputFile, JSON.stringify(socketReport, null, 2));
+      await writeFile15(outputFile, JSON.stringify(socketReport, null, 2));
       logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
       return;
     }
@@ -255782,7 +255952,7 @@ Subproject: ${subproject}`);
     const concurrency = Number(this.options.concurrency);
     const shouldIncludeWorkspaceInLogs = concurrency > 1;
     let npmProjectDirPool;
-    const nodeModulesExists = existsSync26(resolve42(subprojectPath, "node_modules"));
+    const nodeModulesExists = existsSync28(resolve42(subprojectPath, "node_modules"));
     if (ecosystem === "NPM" && concurrency > 1 && !nodeModulesExists) {
       const numCopies = Math.min(concurrency, workspaces.length) - 1;
       if (numCopies > 0) {
@@ -256130,7 +256300,7 @@ async function getGitDataToMetadataIfAvailable(rootWorkingDirectory) {
 }
 
 // dist/internal/analysis-debug-info-transformer.js
-import { writeFile as writeFile14 } from "fs/promises";
+import { writeFile as writeFile16 } from "fs/promises";
 import { resolve as resolve43 } from "path";
 function computeIncludePackagesForVulnerability(vulnerability) {
   if (!vulnerability.vulnerabilityAccessPaths || typeof vulnerability.vulnerabilityAccessPaths === "string") {
@@ -256242,7 +256412,7 @@ function buildPurlString(artifact) {
 async function writeAnalysisDebugInfo(outputFilePath, ecosystemToWorkspaceToVulnerabilities, artifacts) {
   const debugInfo = toAnalysisDebugInfoFromSocketArtifacts(ecosystemToWorkspaceToVulnerabilities, artifacts);
   const resolvedPath = resolve43(outputFilePath);
-  await writeFile14(resolvedPath, JSON.stringify(debugInfo, null, 2));
+  await writeFile16(resolvedPath, JSON.stringify(debugInfo, null, 2));
   logger.info(kleur_default.green(`Analysis debug info written to: ${resolvedPath}`));
 }
 
@@ -256275,8 +256445,8 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     throw new Error('Range style must be "pin"');
   }
   options.purlTypes = options.purlTypes?.map((t4) => t4.toLowerCase());
-  const tmpDir = await mkdtemp2(join33(tmpdir3(), "compute-fixes-and-upgrade-purls-"));
-  const logFile = join33(tmpDir, "compute-fixes-and-upgrade-purls.log");
+  const tmpDir = await mkdtemp2(join35(tmpdir5(), "compute-fixes-and-upgrade-purls-"));
+  const logFile = join35(tmpDir, "compute-fixes-and-upgrade-purls.log");
   logger.initWinstonLogger(options.debug, logFile);
   try {
     await initializeComputeFixesAndUpgradePurls(path9, options);
@@ -256288,7 +256458,7 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     if (options.outputFile) {
       const outputFile = resolve44(options.outputFile);
       await mkdir7(dirname26(outputFile), { recursive: true });
-      await writeFile15(outputFile, JSON.stringify(output, null, 2));
+      await writeFile17(outputFile, JSON.stringify(output, null, 2));
       logger.info(`Result written to: ${outputFile}`);
     }
     await rm3(tmpDir, { recursive: true, force: true });