@coana-tech/cli 14.12.149 → 14.12.151

package/cli.mjs

@@ -250895,7 +250895,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.149";
+var version3 = "14.12.151";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.149",
+  "version": "14.12.151",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -113576,13 +113576,15 @@ var RubyCodeAwareVulnerabilityScanner = class {
       const cmd = cmdt`
         ${await getNodeExecutable(ToolPathResolver.nodeExecutablePath)} --max-old-space-size=${this.options.memoryLimitInMB}
         ${analyzerPath}
+        analyze
         --timeout ${timeoutInSeconds}
-        --load-path ${loadPaths}
-        --vulnerabilities ${vulnAccPaths}
         --output-diagnostics ${diagnosticsOutputFile}
         --output-reached-packages ${reachedPackagesOutputFile}
         --output-vulnerabilities ${vulnsOutputFile}
-        .`;
+        ruby
+        --load-path ${loadPaths}
+        --vulnerabilities ${vulnAccPaths}
+        -- .`;
       if (PRINT_ANALYSIS_COMMAND)
         logger.info("Ruby analysis command:", cmd.join(" "));
       try {

package/repos/coana-tech/callgraph-reachability-analyzers/packages/cli/dist/bundle/cli.mjs

@@ -14373,10 +14373,10 @@ var init_esm2 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/assert-valid-pattern.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/assert-valid-pattern.js
 var MAX_PATTERN_LENGTH, assertValidPattern;
 var init_assert_valid_pattern = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/assert-valid-pattern.js"() {
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/assert-valid-pattern.js"() {
     MAX_PATTERN_LENGTH = 1024 * 64;
     assertValidPattern = (pattern) => {
       if (typeof pattern !== "string") {
@@ -14389,10 +14389,10 @@ var init_assert_valid_pattern = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/brace-expressions.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/brace-expressions.js
 var posixClasses, braceEscape, regexpEscape, rangesToString, parseClass;
 var init_brace_expressions = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/brace-expressions.js"() {
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/brace-expressions.js"() {
     posixClasses = {
       "[:alnum:]": ["\\p{L}\\p{Nl}\\p{Nd}", true],
       "[:alpha:]": ["\\p{L}\\p{Nl}", true],
@@ -14503,20 +14503,23 @@ var init_brace_expressions = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/unescape.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/unescape.js
 var unescape;
 var init_unescape = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/unescape.js"() {
-    unescape = (s, { windowsPathsNoEscape = false } = {}) => {
-      return windowsPathsNoEscape ? s.replace(/\[([^\/\\])\]/g, "$1") : s.replace(/((?!\\).|^)\[([^\/\\])\]/g, "$1$2").replace(/\\([^\/])/g, "$1");
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/unescape.js"() {
+    unescape = (s, { windowsPathsNoEscape = false, magicalBraces = true } = {}) => {
+      if (magicalBraces) {
+        return windowsPathsNoEscape ? s.replace(/\[([^\/\\])\]/g, "$1") : s.replace(/((?!\\).|^)\[([^\/\\])\]/g, "$1$2").replace(/\\([^\/])/g, "$1");
+      }
+      return windowsPathsNoEscape ? s.replace(/\[([^\/\\{}])\]/g, "$1") : s.replace(/((?!\\).|^)\[([^\/\\{}])\]/g, "$1$2").replace(/\\([^\/{}])/g, "$1");
     };
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/ast.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/ast.js
 var types, isExtglobType, startNoTraversal, startNoDot, addPatternStart, justDots, reSpecials, regExpEscape, qmark, star, starNoEmpty, AST;
 var init_ast = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/ast.js"() {
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/ast.js"() {
     init_brace_expressions();
     init_unescape();
     types = /* @__PURE__ */ new Set(["!", "?", "+", "*", "@"]);
@@ -14869,7 +14872,7 @@ var init_ast = __esm({
         if (this.#root === this)
           this.#fillNegs();
         if (!this.type) {
-          const noEmpty = this.isStart() && this.isEnd();
+          const noEmpty = this.isStart() && this.isEnd() && !this.#parts.some((s) => typeof s !== "string");
           const src = this.#parts.map((p) => {
             const [re, _, hasMagic2, uflag] = typeof p === "string" ? _AST.#parseGlob(p, this.#hasMagic, noEmpty) : p.toRegExpSource(allowDot);
             this.#hasMagic = this.#hasMagic || hasMagic2;
@@ -14979,10 +14982,7 @@ var init_ast = __esm({
             }
           }
           if (c === "*") {
-            if (noEmpty && glob2 === "*")
-              re += starNoEmpty;
-            else
-              re += star;
+            re += noEmpty && glob2 === "*" ? starNoEmpty : star;
             hasMagic2 = true;
             continue;
           }
@@ -14999,20 +14999,23 @@ var init_ast = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/escape.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/escape.js
 var escape;
 var init_escape = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/escape.js"() {
-    escape = (s, { windowsPathsNoEscape = false } = {}) => {
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/escape.js"() {
+    escape = (s, { windowsPathsNoEscape = false, magicalBraces = false } = {}) => {
+      if (magicalBraces) {
+        return windowsPathsNoEscape ? s.replace(/[?*()[\]{}]/g, "[$&]") : s.replace(/[?*()[\]\\{}]/g, "\\$&");
+      }
       return windowsPathsNoEscape ? s.replace(/[?*()[\]]/g, "[$&]") : s.replace(/[?*()[\]\\]/g, "\\$&");
     };
   }
 });
 
-// ../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/index.js
+// ../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/index.js
 var minimatch, starDotExtRE, starDotExtTest, starDotExtTestDot, starDotExtTestNocase, starDotExtTestNocaseDot, starDotStarRE, starDotStarTest, starDotStarTestDot, dotStarRE, dotStarTest, starRE, starTest, starTestDot, qmarksRE, qmarksTestNocase, qmarksTestNocaseDot, qmarksTestDot, qmarksTest, qmarksTestNoExt, qmarksTestNoExtDot, defaultPlatform, path, sep2, GLOBSTAR, qmark2, star2, twoStarDot, twoStarNoDot, filter, ext, defaults, braceExpand, makeRe, match, globMagic, regExpEscape2, Minimatch;
 var init_esm3 = __esm({
-  "../../node_modules/.pnpm/minimatch@10.0.3/node_modules/minimatch/dist/esm/index.js"() {
+  "../../node_modules/.pnpm/minimatch@10.1.1/node_modules/minimatch/dist/esm/index.js"() {
     init_esm2();
     init_assert_valid_pattern();
     init_ast();
@@ -15657,16 +15660,27 @@ var init_esm3 = __esm({
                 pp[i] = twoStar;
               }
             } else if (next === void 0) {
-              pp[i - 1] = prev + "(?:\\/|" + twoStar + ")?";
+              pp[i - 1] = prev + "(?:\\/|\\/" + twoStar + ")?";
             } else if (next !== GLOBSTAR) {
               pp[i - 1] = prev + "(?:\\/|\\/" + twoStar + "\\/)" + next;
               pp[i + 1] = GLOBSTAR;
             }
           });
-          return pp.filter((p) => p !== GLOBSTAR).join("/");
+          const filtered = pp.filter((p) => p !== GLOBSTAR);
+          if (this.partial && filtered.length >= 1) {
+            const prefixes = [];
+            for (let i = 1; i <= filtered.length; i++) {
+              prefixes.push(filtered.slice(0, i).join("/"));
+            }
+            return "(?:" + prefixes.join("|") + ")";
+          }
+          return filtered.join("/");
         }).join("|");
         const [open, close] = set.length > 1 ? ["(?:", ")"] : ["", ""];
         re = "^" + open + re + close + "$";
+        if (this.partial) {
+          re = "^(?:\\/|" + open + re.slice(1, -1) + close + ")$";
+        }
         if (this.negate)
           re = "^(?!" + re + ").+$";
         try {
@@ -18029,7 +18043,7 @@ var init_esm5 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/path-scurry@2.0.0/node_modules/path-scurry/dist/esm/index.js
+// ../../node_modules/.pnpm/path-scurry@2.0.1/node_modules/path-scurry/dist/esm/index.js
 import { posix, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { lstatSync, readdir as readdirCB, readdirSync, readlinkSync, realpathSync as rps } from "fs";
@@ -18037,7 +18051,7 @@ import * as actualFS from "node:fs";
 import { lstat, readdir as readdir2, readlink, realpath } from "node:fs/promises";
 var realpathSync, defaultFS, fsFromOption, uncDriveRegexp, uncToDrive, eitherSep, UNKNOWN, IFIFO, IFCHR, IFDIR, IFBLK, IFREG, IFLNK, IFSOCK, IFMT, IFMT_UNKNOWN, READDIR_CALLED, LSTAT_CALLED, ENOTDIR, ENOENT, ENOREADLINK, ENOREALPATH, ENOCHILD, TYPEMASK, entToType, normalizeCache, normalize, normalizeNocaseCache, normalizeNocase, ResolveCache, ChildrenCache, setAsCwd, PathBase, PathWin32, PathPosix, PathScurryBase, PathScurryWin32, PathScurryPosix, PathScurryDarwin, Path, PathScurry;
 var init_esm6 = __esm({
-  "../../node_modules/.pnpm/path-scurry@2.0.0/node_modules/path-scurry/dist/esm/index.js"() {
+  "../../node_modules/.pnpm/path-scurry@2.0.1/node_modules/path-scurry/dist/esm/index.js"() {
     init_esm4();
     init_esm5();
     realpathSync = rps.native;
@@ -18084,7 +18098,7 @@ var init_esm6 = __esm({
     ENOCHILD = ENOTDIR | ENOENT | ENOREALPATH;
     TYPEMASK = 1023;
     entToType = (s) => s.isFile() ? IFREG : s.isDirectory() ? IFDIR : s.isSymbolicLink() ? IFLNK : s.isCharacterDevice() ? IFCHR : s.isBlockDevice() ? IFBLK : s.isSocket() ? IFSOCK : s.isFIFO() ? IFIFO : UNKNOWN;
-    normalizeCache = /* @__PURE__ */ new Map();
+    normalizeCache = new LRUCache({ max: 2 ** 12 });
     normalize = (s) => {
       const c = normalizeCache.get(s);
       if (c)
@@ -18093,7 +18107,7 @@ var init_esm6 = __esm({
       normalizeCache.set(s, n12);
       return n12;
     };
-    normalizeNocaseCache = /* @__PURE__ */ new Map();
+    normalizeNocaseCache = new LRUCache({ max: 2 ** 12 });
     normalizeNocase = (s) => {
       const c = normalizeNocaseCache.get(s);
       if (c)
@@ -18250,6 +18264,7 @@ var init_esm6 = __esm({
       get parentPath() {
         return (this.parent || this).fullpath();
       }
+      /* c8 ignore start */
       /**
        * Deprecated alias for Dirent['parentPath'] Somewhat counterintuitively,
        * this property refers to the *parent* path, not the path object itself.
@@ -18259,6 +18274,7 @@ var init_esm6 = __esm({
       get path() {
         return this.parentPath;
       }
+      /* c8 ignore stop */
       /**
        * Do not create new Path objects directly.  They should always be accessed
        * via the PathScurry class or other methods on the Path class.
@@ -19767,10 +19783,10 @@ var init_esm6 = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/pattern.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/pattern.js
 var isPatternList, isGlobList, Pattern;
 var init_pattern = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/pattern.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/pattern.js"() {
     init_esm3();
     isPatternList = (pl) => pl.length >= 1;
     isGlobList = (gl) => gl.length >= 1;
@@ -19938,10 +19954,10 @@ var init_pattern = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/ignore.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/ignore.js
 var defaultPlatform2, Ignore;
 var init_ignore = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/ignore.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/ignore.js"() {
     init_esm3();
     init_pattern();
     defaultPlatform2 = typeof process === "object" && process && typeof process.platform === "string" ? process.platform : "linux";
@@ -20032,10 +20048,10 @@ var init_ignore = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/processor.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/processor.js
 var HasWalkedCache, MatchRecord, SubWalks, Processor;
 var init_processor = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/processor.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/processor.js"() {
     init_esm3();
     HasWalkedCache = class _HasWalkedCache {
       store;
@@ -20259,10 +20275,10 @@ var init_processor = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/walker.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/walker.js
 var makeIgnore, GlobUtil, GlobWalker, GlobStream;
 var init_walker = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/walker.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/walker.js"() {
     init_esm5();
     init_ignore();
     init_processor();
@@ -20594,11 +20610,11 @@ var init_walker = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/glob.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/glob.js
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var defaultPlatform3, Glob;
 var init_glob = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/glob.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/glob.js"() {
     init_esm3();
     init_esm6();
     init_pattern();
@@ -20804,10 +20820,10 @@ var init_glob = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/has-magic.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/has-magic.js
 var hasMagic;
 var init_has_magic = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/has-magic.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/has-magic.js"() {
     init_esm3();
     hasMagic = (pattern, options = {}) => {
       if (!Array.isArray(pattern)) {
@@ -20822,7 +20838,7 @@ var init_has_magic = __esm({
   }
 });
 
-// ../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/index.js
+// ../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/index.js
 var esm_exports = {};
 __export(esm_exports, {
   Glob: () => Glob,
@@ -20862,7 +20878,7 @@ function globIterate(pattern, options = {}) {
 }
 var streamSync, stream, iterateSync, iterate, sync, glob;
 var init_esm7 = __esm({
-  "../../node_modules/.pnpm/glob@11.0.3/node_modules/glob/dist/esm/index.js"() {
+  "../../node_modules/.pnpm/glob@13.0.0/node_modules/glob/dist/esm/index.js"() {
     init_esm3();
     init_glob();
     init_has_magic();
@@ -21608,15 +21624,19 @@ var CallGraph = class {
   functionToFunction = /* @__PURE__ */ new Map();
   callToFunctionOrModule = new FullNodeMap();
   callToContainingFunction = new NodeMap();
+  _edges = 0;
+  get numberOfEdges() {
+    return this._edges;
+  }
   addEdge(call, from, to) {
     const fs4 = mapGetSet(this.functionToFunction, from);
     fs4.add(to);
     const cs = mapGetSet(this.callToFunctionOrModule, call);
-    if (!cs.has(to)) {
+    if (setAdd(cs, to)) {
+      this._edges++;
       if (logger.isVerboseEnabled())
         logger.verbose(`Adding call edge from call ${nodeLocationToString(call)}, function ${from} -> ${to}`);
     }
-    cs.add(to);
     this.callToContainingFunction.set(call, from);
   }
   getEdges() {
@@ -21777,6 +21797,9 @@ var TimeoutException = class extends Error {
 function nanoToMs(n12) {
   return `${n12 / 1000000n}ms`;
 }
+function nanoToMsNumber(n12) {
+  return Number(n12 / 1000000n);
+}
 
 // ../analysis-engine/dist/abstract-constraintvar.js
 var ConstraintVar = class {
@@ -23731,7 +23754,7 @@ var RubyAstVisitor = class {
       if (name2)
         scopes.push(name2);
     }
-    let fqName = name;
+    let fqName;
     if (isClassNode(node))
       fqName = "<constructor>";
     else if (isSingletonMethodNode(node))
@@ -23815,7 +23838,7 @@ var RubyAnalyzer = class {
       if (moduleInfo.isEntry)
         calledFunctions.add(moduleInfo);
     const patched = /* @__PURE__ */ new Set();
-    for (const t15 of this.op.a.allTokens())
+    for (const t15 of this.solver.allTokens())
       if (t15 instanceof FunctionToken && t15.kind !== "method" && (isBlockNode(t15.fun) || isDoBlockNode(t15.fun))) {
         const functionInfo = assertDefined(functionInfos.get(t15.fun));
         if (!patched.has(functionInfo) && !calledFunctions.has(functionInfo) && calledFunctions.has(functionInfo.parent)) {
@@ -23929,19 +23952,42 @@ function scopeAnalysis(tree) {
 
 // ../analysis-engine/dist/solver.js
 import assert10 from "node:assert";
-var Solver = class {
+var Solver = class _Solver {
   globalState;
+  vars = /* @__PURE__ */ new Set();
+  tokens = /* @__PURE__ */ new Map();
+  numberOfTokens = 0;
+  tokenListeners = /* @__PURE__ */ new Map();
+  subsetEdges = /* @__PURE__ */ new Map();
+  reverseSubsetEdges = /* @__PURE__ */ new Map();
+  numberOfSubsetEdges = 0;
+  static EMPTY_TOKENS_SIZE = [0, []];
   listeners = /* @__PURE__ */ new Map();
   callGraph = new CallGraph();
   listenersProcessed = /* @__PURE__ */ new Map();
   varsToUnprocessedTokens = /* @__PURE__ */ new Map();
   diagnostics;
   nodesWithNewEdges = /* @__PURE__ */ new Set();
+  postponedListenerCalls = [];
   postponedListenersProcessed = 0;
+  lastTelemetryTime = 0;
+  telemetryTimer = new Timer();
   constructor(globalState) {
     this.globalState = globalState;
     this.diagnostics = globalState.diagnostics;
   }
+  emitTelemetry() {
+    const { globalState: a, diagnostics: d } = this;
+    a.telemetry?.diagnostics({
+      propagations: d.propagations,
+      tokens: this.numberOfTokens,
+      subsetEdges: this.numberOfSubsetEdges,
+      unprocessedTokensSize: d.unprocessedTokensSize,
+      modules: a.moduleInfos.size,
+      functions: a.functionInfos.size,
+      callEdges: this.callGraph.numberOfEdges
+    });
+  }
   addTokenConstraint(t15, to) {
     if (to === void 0)
       return;
@@ -23949,25 +23995,45 @@ var Solver = class {
       logger.debug(`Adding constraint ${t15} \u2208 ${to}`);
     this.addToken(t15, to);
   }
-  addToken(t15, toRep) {
-    const state = this.globalState;
-    if (state.addToken(t15, toRep)) {
-      state.vars.add(toRep);
-      this.tokenAdded(toRep, t15);
-      return true;
-    }
-    return false;
+  addToken(t15, v) {
+    const ts = this.tokens.get(v);
+    if (!ts)
+      this.tokens.set(v, t15);
+    else if (ts instanceof TokenInterface) {
+      if (ts === t15)
+        return false;
+      this.tokens.set(v, /* @__PURE__ */ new Set([ts, t15]));
+    } else if (!setAdd(ts, t15))
+      return false;
+    this.vars.add(v);
+    this.numberOfTokens++;
+    this.tokenAdded(v, t15);
+    return true;
   }
   addTokens(ts, to) {
-    const state = this.globalState;
-    state.vars.add(to);
-    if (ts instanceof TokenInterface) {
-      if (state.addToken(ts, to))
-        this.tokenAdded(to, ts);
-    } else {
+    if (ts instanceof TokenInterface)
+      this.addToken(ts, to);
+    else {
+      this.vars.add(to);
       let ws;
-      for (const t15 of state.addTokens(ts, to))
-        ws = this.tokenAdded(to, t15, ws);
+      let vs = this.tokens.get(to);
+      for (const t15 of ts) {
+        let add = false;
+        if (!vs) {
+          this.tokens.set(to, vs = t15);
+          add = true;
+        } else if (vs instanceof TokenInterface) {
+          if (vs !== t15) {
+            this.tokens.set(to, vs = /* @__PURE__ */ new Set([vs, t15]));
+            add = true;
+          }
+        } else
+          add = setAdd(vs, t15);
+        if (add) {
+          this.numberOfTokens++;
+          ws = this.tokenAdded(to, t15, ws);
+        }
+      }
     }
   }
   tokenAdded(toRep, t15, ws) {
@@ -23987,12 +24053,12 @@ var Solver = class {
     this.addForAllTokensConstraintPrivate(v, this.getListenerID(lkey), listener);
   }
   addForAllTokensConstraintPrivate(v, id, listener) {
-    const m = mapGetMap(this.globalState.tokenListeners, v);
+    const m = mapGetMap(this.tokenListeners, v);
     if (!m.has(id)) {
-      for (const t15 of this.globalState.getTokens(v))
+      for (const t15 of this.getTokens(v))
         this.callTokenListener(id, listener, t15);
       m.set(id, listener);
-      this.globalState.vars.add(v);
+      this.vars.add(v);
       return true;
     }
     return false;
@@ -24003,14 +24069,11 @@ var Solver = class {
       if (now)
         listener(t15);
       else {
-        this.enqueueListenerCall([listener, t15]);
+        this.postponedListenerCalls.push([listener, t15]);
         this.diagnostics.tokenListenerNotifications++;
       }
     }
   }
-  enqueueListenerCall(la) {
-    this.globalState.postponedListenerCalls.push(la);
-  }
   getListenerID(key) {
     let id = 0n;
     if (key.t) {
@@ -24043,14 +24106,13 @@ var Solver = class {
   }
   addSubsetEdge(from, to) {
     if (from !== to) {
-      const state = this.globalState;
-      const s = mapGetSet(state.subsetEdges, from);
+      const s = mapGetSet(this.subsetEdges, from);
       if (setAdd(s, to)) {
-        state.numberOfSubsetEdges++;
-        mapGetSet(state.reverseSubsetEdges, to).add(from);
-        state.vars.add(from);
-        state.vars.add(to);
-        const [size, ts] = state.getTokensSize(from);
+        this.numberOfSubsetEdges++;
+        mapGetSet(this.reverseSubsetEdges, to).add(from);
+        this.vars.add(from);
+        this.vars.add(to);
+        const [size, ts] = this.getTokensSize(from);
         if (size > 0) {
           if (logger.isDebugEnabled())
             logger.debug(`Worklist size: ${this.diagnostics.unprocessedTokensSize}, propagating ${size} token${size === 1 ? "" : "s"} from ${from}`);
@@ -24069,6 +24131,11 @@ var Solver = class {
     }
   }
   printDiagnostics() {
+    const elapsed = nanoToMsNumber(this.telemetryTimer.elapsed());
+    if (elapsed > this.lastTelemetryTime + 3e3) {
+      this.lastTelemetryTime = elapsed;
+      this.emitTelemetry();
+    }
   }
   async propagate() {
     const timer = new Timer();
@@ -24077,19 +24144,19 @@ var Solver = class {
       this.nodesWithNewEdges.clear();
       for (const v of this.varsToUnprocessedTokens.keys())
         this.processTokens(v);
-      if (state.postponedListenerCalls.length > 0) {
+      if (this.postponedListenerCalls.length > 0) {
         if (logger.isVerboseEnabled())
-          logger.verbose(`Processing listener calls: ${state.postponedListenerCalls.length}`);
+          logger.verbose(`Processing listener calls: ${this.postponedListenerCalls.length}`);
         const timer2 = new Timer();
         d.listenerNotificationRounds++;
-        for (const [fun, arg] of state.postponedListenerCalls) {
+        for (const [fun, arg] of this.postponedListenerCalls) {
           fun(arg);
           if (++this.postponedListenersProcessed % 100 === 0) {
             state.timeoutTimer.checkTimeout();
             this.printDiagnostics();
           }
         }
-        state.postponedListenerCalls.length = this.postponedListenersProcessed = 0;
+        this.postponedListenerCalls.length = this.postponedListenersProcessed = 0;
         d.timings.listenerCall += timer2.elapsed();
       }
     }
@@ -24103,15 +24170,14 @@ var Solver = class {
       if (logger.isDebugEnabled())
         logger.debug(`Worklist size: ${this.diagnostics.unprocessedTokensSize}, propagating ${size} token${size === 1 ? "" : "s"} from ${v}`);
       this.diagnostics.unprocessedTokensSize -= size;
-      const state = this.globalState;
-      assert10(state.vars.has(v));
-      const s = state.subsetEdges.get(v);
+      assert10(this.vars.has(v));
+      const s = this.subsetEdges.get(v);
       if (s) {
         for (const to of s)
           this.addTokens(Array.isArray(ts) ? ts : [ts], to);
         this.incrementPropagations();
       }
-      const tr = state.tokenListeners.get(v);
+      const tr = this.tokenListeners.get(v);
       if (tr)
         if (Array.isArray(ts))
           for (const t15 of ts)
@@ -24122,6 +24188,31 @@ var Solver = class {
             this.callTokenListener(id, listener, ts);
     }
   }
+  getTokens(v) {
+    const ts = this.tokens.get(v);
+    if (ts instanceof TokenInterface)
+      return [ts];
+    return ts ?? [];
+  }
+  getTokensSize(v) {
+    if (v) {
+      const ts = this.tokens.get(v);
+      if (ts) {
+        if (ts instanceof TokenInterface)
+          return [1, [ts]];
+        return [ts.size, ts];
+      }
+    }
+    return _Solver.EMPTY_TOKENS_SIZE;
+  }
+  *allTokens() {
+    for (const ts of this.tokens.values()) {
+      if (ts instanceof TokenInterface)
+        yield ts;
+      else
+        yield* ts;
+    }
+  }
   listenersProcessedByTokenListener() {
     const m = /* @__PURE__ */ new Map();
     for (const [id, s] of this.listenersProcessed) {
@@ -24147,6 +24238,33 @@ import { resolve as resolve3 } from "node:path";
 import assert11 from "node:assert";
 import { join as join3, relative as relative2 } from "node:path";
 
+// ../utils/dist/telemetry.js
+import { appendFileSync } from "node:fs";
+var TelemetryEmitter = class {
+  filePath;
+  constructor(filePath) {
+    this.filePath = filePath;
+  }
+  emit(event) {
+    try {
+      appendFileSync(this.filePath, JSON.stringify({ data: event }) + "\n");
+    } catch {
+    }
+  }
+  phaseStarted(phase, metadata = {}) {
+    this.emit({ type: "phase.started", phase, ...metadata });
+  }
+  phaseCompleted(phase, durationMs, metadata = {}) {
+    this.emit({ type: "phase.completed", phase, durationMs, ...metadata });
+  }
+  diagnostics(metrics) {
+    this.emit({ type: "diagnostics", memory: getMemoryUsageBytes(), ...metrics });
+  }
+};
+function getMemoryUsageBytes() {
+  return process.memoryUsage().heapUsed;
+}
+
 // ../analysis-engine/dist/diagnostics.js
 import { inspect } from "node:util";
 var AnalysisDiagnostics = class {
@@ -24174,7 +24292,7 @@ var AnalysisDiagnostics = class {
 };
 
 // ../analysis-engine/dist/global-state.js
-var GlobalState = class _GlobalState {
+var GlobalState = class {
   rootDir;
   options;
   moduleInfos = /* @__PURE__ */ new Map();
@@ -24184,20 +24302,15 @@ var GlobalState = class _GlobalState {
   functionInfos = new NodeMap();
   diagnostics = new AnalysisDiagnostics();
   warningsUnsupported = new NodeMap();
-  vars = /* @__PURE__ */ new Set();
-  tokens = /* @__PURE__ */ new Map();
-  tokenListeners = /* @__PURE__ */ new Map();
-  numberOfTokens = 0;
-  subsetEdges = /* @__PURE__ */ new Map();
-  reverseSubsetEdges = /* @__PURE__ */ new Map();
-  numberOfSubsetEdges = 0;
-  static EMPTY_TOKENS_SIZE = [0, []];
   timeoutTimer;
-  postponedListenerCalls = [];
+  telemetry;
   constructor(rootDir, options) {
     this.rootDir = rootDir;
     this.options = options;
     this.timeoutTimer = new Timer(options.timeout);
+    if (options.telemetryFilePath) {
+      this.telemetry = new TelemetryEmitter(options.telemetryFilePath);
+    }
   }
   discoverFile(packageInfo, filePath, isEntry = false) {
     let moduleInfo = this.moduleInfos.get(filePath);
@@ -24220,89 +24333,18 @@ var GlobalState = class _GlobalState {
     if (setAdd(warnings, message) && logger.isWarnEnabled())
       logger.warn(`Unsupported: ${message} at ${nodeToString(node)}`);
   }
-  getTokens(v) {
-    if (v) {
-      const ts = this.tokens.get(v);
-      if (ts) {
-        if (ts instanceof TokenInterface)
-          return [ts];
-        return ts;
-      }
-    }
-    return [];
-  }
-  *allTokens() {
-    for (const ts of this.tokens.values()) {
-      if (ts instanceof TokenInterface)
-        yield ts;
-      else
-        yield* ts;
-    }
-  }
-  getTokensSize(v) {
-    if (v) {
-      const ts = this.tokens.get(v);
-      if (ts) {
-        if (ts instanceof TokenInterface)
-          return [1, [ts]];
-        return [ts.size, ts];
-      }
-    }
-    return _GlobalState.EMPTY_TOKENS_SIZE;
-  }
-  hasToken(v, t15) {
-    const ts = this.tokens.get(v);
-    if (!ts)
-      return false;
-    else if (ts instanceof TokenInterface)
-      return ts === t15;
-    else
-      return ts.has(t15);
-  }
-  addToken(t15, v) {
-    const ts = this.tokens.get(v);
-    if (!ts)
-      this.tokens.set(v, t15);
-    else if (ts instanceof TokenInterface) {
-      if (ts === t15)
-        return false;
-      this.tokens.set(v, /* @__PURE__ */ new Set([ts, t15]));
-    } else if (!setAdd(ts, t15))
-      return false;
-    this.numberOfTokens++;
-    return true;
-  }
-  addTokens(ts, v) {
-    const added = [];
-    let vs = this.tokens.get(v);
-    for (const t15 of ts) {
-      let add = false;
-      if (!vs) {
-        vs = t15;
-        this.tokens.set(v, vs);
-        add = true;
-      } else if (vs instanceof TokenInterface) {
-        if (vs !== t15) {
-          vs = /* @__PURE__ */ new Set([vs, t15]);
-          this.tokens.set(v, vs);
-          add = true;
-        }
-      } else
-        add = setAdd(vs, t15);
-      if (add)
-        added.push(t15);
-    }
-    this.numberOfTokens += added.length;
-    return added;
-  }
 };
 
 // ../analysis-engine/dist/vulnerabilities.js
-function analyzeVulnerabilities(d, callGraph, targets) {
+function analyzeVulnerabilities(globalState, callGraph, targets) {
+  const { diagnostics: d, telemetry } = globalState;
   const timer = new Timer();
+  telemetry?.phaseStarted("vuln_analysis", { vulnerabilities: targets.size });
   const parents = callGraph.reachableFunctions(callGraph.functionToFunction.keys().filter((f) => f.isEntry).toArray());
   d.timings.vulnAnalysis = timer.elapsed();
+  telemetry?.phaseCompleted("vuln_analysis", nanoToMsNumber(timer.elapsed()));
   timer.reset();
+  telemetry?.phaseStarted("vuln_paths", { reachableFunctions: parents.size });
   const results = Object.fromEntries(targets.entries().map(([vuln, funcs]) => {
     if (!funcs.length)
       return [vuln, { reachable: false, reason: "Function not found" }];
@@ -24328,6 +24370,7 @@ function analyzeVulnerabilities(d, callGraph, targets) {
     ];
   }));
   d.timings.vulnPaths += timer.elapsed();
+  telemetry?.phaseCompleted("vuln_paths", nanoToMsNumber(timer.elapsed()));
   return results;
 }
 
@@ -24342,127 +24385,145 @@ async function runAnalysis(Solver2, getAnalyzer, path2, options = {}) {
     const [, isNew] = globalState.discoverFile(p, file, true);
     assert12(isNew, `File ${file} should be new in the global state`);
   }
+  const { moduleWorklist, diagnostics, telemetry } = globalState;
+  const analysisTimer = new Timer();
+  telemetry?.phaseStarted("analysis", { fileCount: files.length });
+  solver.emitTelemetry();
   try {
     while (true) {
-      while (!globalState.moduleWorklist.isEmpty()) {
-        const moduleInfo = globalState.moduleWorklist.pop();
+      while (!moduleWorklist.isEmpty()) {
+        const moduleInfo = moduleWorklist.pop();
         assert12(moduleInfo.isIncluded);
         const relPath = moduleInfo.getPath();
-        logger.verbose("Analyzing module: %s, %d remaining", relPath, globalState.moduleWorklist.size);
+        logger.verbose("Analyzing module: %s, %d remaining", relPath, moduleWorklist.size);
         const timer = new Timer();
         const tree = await analyzer.parse(resolve3(path2, relPath));
-        globalState.diagnostics.timings.parsing += timer.elapsed();
+        diagnostics.timings.parsing += timer.elapsed();
         if (tree) {
           tree.filename = relPath;
           moduleInfo.loc = getSourceLocation(tree.rootNode);
           analyzer.visit(moduleInfo, tree);
         } else
-          globalState.diagnostics.errors.parse++;
+          diagnostics.errors.parse++;
       }
       await solver.propagate();
-      if (!analyzer.patch?.() && globalState.moduleWorklist.isEmpty())
+      if (!analyzer.patch?.() && moduleWorklist.isEmpty())
         break;
     }
   } catch (e5) {
     if (e5 instanceof TimeoutException) {
       logger.error("Analysis timed out");
-      globalState.diagnostics.timedOut = true;
+      diagnostics.timedOut = true;
     } else
       throw e5;
   }
   analyzer.finalize?.();
+  solver.emitTelemetry();
+  telemetry?.phaseCompleted("analysis", nanoToMsNumber(analysisTimer.elapsed()), {
+    modules: globalState.moduleInfos.size,
+    timedOut: diagnostics.timedOut
+  });
   return [
     solver,
-    options.vulnerabilities?.length ? analyzeVulnerabilities(globalState.diagnostics, solver.callGraph, analyzer.getVulnTargets()) : void 0
+    options.vulnerabilities?.length ? analyzeVulnerabilities(globalState, solver.callGraph, analyzer.getVulnTargets()) : void 0
   ];
 }
 
 // dist/commands/analyze.js
-var analyze_default = new Command("analyze").addOption(new Option("-d, --debug", "Enable debug logging").conflicts("logLevel").implies({ logLevel: "debug" }).hideHelp()).addOption(new Option("--log-level <level>", "Set the logging level").choices(["error", "warn", "info", "verbose", "debug"]).default("info")).option("--timeout <number>", "Timeout for the analysis in seconds", Number.parseFloat).option("-l, --load-path <path...>", "Value for the $LOAD_PATH global variable - used to resolve `require` calls").option("--vulnerabilities <vuln...>", "Perform reachability analysis for the given vulnerabilities", (v, prev) => {
-  assert13(validateVulnerabilityID(v), `Invalid vulnerability ID: ${v}`);
-  prev.push(v);
-  return prev;
-}, []).option("-s, --soundness <path>", "Path to dynamic call graph for soundness checking").option("--soundness-debug", "Print dynamic edges that will improve reachability recall").option("--output-callgraph <path>", "Output the call graph to a JSON file").option("--output-vulnerabilities <path>", "Output the vulnerability analysis results to a JSON file").option("--output-diagnostics <path>", "Output the diagnostics to a JSON file").option("--output-reached-packages <path>", "Output a list of reached non-entry packages to a JSON file").argument("<path>", "File system path to folder containing the project").configureHelp({ sortOptions: true }).action(async (path2, options) => {
-  if (options.outputVulnerabilities && !options.vulnerabilities.length)
-    throw new Error("The --output-vulnerabilities option requires at least one vulnerability to be specified.");
-  setLogLevel(options.logLevel);
-  path2 = resolve4(path2);
-  const loadPath = options.loadPath?.map((p) => resolve4(p)) ?? [];
-  const timer = new Timer();
-  const [solver, vulnRes] = await runAnalysis(RubySolver, (solver2) => new RubyAnalyzer(solver2, loadPath), path2, t10(options, ["timeout", "vulnerabilities"]));
-  console.log(`Analysis finished in ${nanoToMs(timer.elapsed())}.`);
-  const { callGraph, globalState } = solver;
-  const edges = callGraph.getEdges();
-  console.log(`Analyzed ${globalState.moduleInfos.size} modules and ${globalState.functionInfos.size} functions.
+function analyzeAction(f) {
+  return async (path2, _, command) => {
+    const options = command.optsWithGlobals();
+    if (options.outputVulnerabilities && !options.vulnerabilities.length)
+      throw new Error("The --output-vulnerabilities option requires at least one vulnerability to be specified.");
+    setLogLevel(options.logLevel);
+    path2 = resolve4(path2);
+    const timer = new Timer();
+    const [solver, vulnRes] = await runAnalysis(...f(options), path2, {
+      ...t10(options, ["timeout", "vulnerabilities"]),
+      telemetryFilePath: options.outputTelemetry
+    });
+    console.log(`Analysis finished in ${nanoToMs(timer.elapsed())}.`);
+    const { callGraph, globalState } = solver;
+    const edges = callGraph.getEdges();
+    console.log(`Analyzed ${globalState.moduleInfos.size} modules and ${globalState.functionInfos.size} functions.
 Call graph has ${edges.length} edges.`);
-  console.log(`Diagnostics:
+    console.log(`Diagnostics:
 ${inspect2(globalState.diagnostics, { depth: Infinity })}`);
-  console.log("Listeners processed:");
-  const lp = solver.listenersProcessedByTokenListener().entries().map(([l, cnt]) => [solver.listenerName(l) + ":", cnt]).toArray().sort(([, c1], [, c2]) => c2 - c1);
-  const width = Math.max(...lp.map(([l]) => l.length));
-  console.log(lp.map(([l, cnt]) => `  ${l.padEnd(width)} ${cnt}`).join("\n"));
-  console.log("Unsupported warnings:");
-  console.log(t5(t3(globalState.warningsUnsupported.values().flatMap(e3()).toArray(), e3())).sort((a, b) => b[1] - a[1]).map(([w, c]) => `  ${w}: ${c}`).join("\n"));
-  if (options.soundness) {
-    const dynCG = JSON.parse(await readFile2(options.soundness, "utf8"));
-    const comparison = compareStaticWithDynamicCG(callGraph, globalState.moduleInfos.values(), dynCG);
-    console.log(comparisonReport(comparison));
-    if (options.soundnessDebug) {
-      const sse = new Set(comparison.staticEdges);
-      const ssr = new Set(comparison.staticReachable.map((x) => {
-        const i = x.lastIndexOf(":");
-        assert13(i !== -1);
-        return x.slice(0, i);
-      }));
-      const imp = comparison.dynamicEdges.filter((e5) => {
-        if (sse.has(e5))
-          return false;
-        const [a, b] = e5.split(" -> ", 2);
-        const match2 = assertDefined(a?.match(/^(.*) \d+$/));
-        return ssr.has(assertDefined(match2[1])) && !ssr.has(b);
-      });
-      console.log(`Dynamic edges that would improve reachability recall (${imp.length}):
+    console.log("Listeners processed:");
+    const lp = solver.listenersProcessedByTokenListener().entries().map(([l, cnt]) => [solver.listenerName(l) + ":", cnt]).toArray().sort(([, c1], [, c2]) => c2 - c1);
+    const width = Math.max(...lp.map(([l]) => l.length));
+    console.log(lp.map(([l, cnt]) => `  ${l.padEnd(width)} ${cnt}`).join("\n"));
+    console.log("Unsupported warnings:");
+    console.log(t5(t3(globalState.warningsUnsupported.values().flatMap(e3()).toArray(), e3())).sort((a, b) => b[1] - a[1]).map(([w, c]) => `  ${w}: ${c}`).join("\n"));
+    if (options.soundness) {
+      const dynCG = JSON.parse(await readFile2(options.soundness, "utf8"));
+      const comparison = compareStaticWithDynamicCG(callGraph, globalState.moduleInfos.values(), dynCG);
+      console.log(comparisonReport(comparison));
+      if (options.soundnessDebug) {
+        const sse = new Set(comparison.staticEdges);
+        const ssr = new Set(comparison.staticReachable.map((x) => {
+          const i = x.lastIndexOf(":");
+          assert13(i !== -1);
+          return x.slice(0, i);
+        }));
+        const imp = comparison.dynamicEdges.filter((e5) => {
+          if (sse.has(e5))
+            return false;
+          const [a, b] = e5.split(" -> ", 2);
+          const match2 = assertDefined(a?.match(/^(.*) \d+$/));
+          return ssr.has(assertDefined(match2[1])) && !ssr.has(b);
+        });
+        console.log(`Dynamic edges that would improve reachability recall (${imp.length}):
   ${imp.join("\n  ")}`);
+      }
     }
-  }
-  if (options.outputCallgraph) {
-    await writeFile(options.outputCallgraph, JSON.stringify(callGraph.serialize()), "utf8");
-    console.log(`Call graph written to ${options.outputCallgraph}`);
-  }
-  if (options.outputDiagnostics)
-    await writeFile(options.outputDiagnostics, JSON.stringify(globalState.diagnostics, (_, v) => typeof v === "bigint" ? Number(v / 1000000n) : v, 2));
-  if (vulnRes) {
-    if (process.stdout.isTTY) {
-      console.log("\nVulnerability analysis results:");
-      for (const [v, r3] of Object.entries(vulnRes)) {
-        if (r3.reachable) {
-          console.log(`  ${v}: reachable`);
-          for (const [i, stack] of r3.stacks.entries()) {
-            console.log(`    Path ${i + 1}/${r3.stacks.length}:`);
-            const pkglen = Math.max(...stack.map((node) => node.package.length)) + 1;
-            let prevPkg = "";
-            for (const node of stack) {
-              const sloc = locationToString(node.sourceLocation);
-              const pkgs = node.package === prevPkg ? "" : `${prevPkg = node.package}:`;
-              console.log(`      ${pkgs.padEnd(pkglen)} ${sloc} ${node.confidence.toFixed(2)}`);
+    if (options.outputCallgraph) {
+      await writeFile(options.outputCallgraph, JSON.stringify(callGraph.serialize()), "utf8");
+      console.log(`Call graph written to ${options.outputCallgraph}`);
+    }
+    if (options.outputDiagnostics)
+      await writeFile(options.outputDiagnostics, JSON.stringify(globalState.diagnostics, (_2, v) => typeof v === "bigint" ? Number(v / 1000000n) : v, 2));
+    if (vulnRes) {
+      if (process.stdout.isTTY) {
+        console.log("\nVulnerability analysis results:");
+        for (const [v, r3] of Object.entries(vulnRes)) {
+          if (r3.reachable) {
+            console.log(`  ${v}: reachable`);
+            for (const [i, stack] of r3.stacks.entries()) {
+              console.log(`    Path ${i + 1}/${r3.stacks.length}:`);
+              const pkglen = Math.max(...stack.map((node) => node.package.length)) + 1;
+              let prevPkg = "";
+              for (const node of stack) {
+                const sloc = locationToString(node.sourceLocation);
+                const pkgs = node.package === prevPkg ? "" : `${prevPkg = node.package}:`;
+                console.log(`      ${pkgs.padEnd(pkglen)} ${sloc} ${node.confidence.toFixed(2)}`);
+              }
             }
-          }
-        } else
-          console.log(`  ${v}: unreachable (${r3.reason})`);
+          } else
+            console.log(`  ${v}: unreachable (${r3.reason})`);
+        }
+      }
+      if (options.outputVulnerabilities) {
+        const callerToString = t6({ caller: (c) => c.toString() });
+        const matches = t9(t11(vulnRes, (r3) => r3.reachable), (r3) => r3.stacks.map((stack) => stack.map(callerToString)));
+        await writeFile(options.outputVulnerabilities, JSON.stringify(matches), "utf8");
+        console.log(`Vulnerability results written to ${options.outputVulnerabilities}`);
       }
     }
-    if (options.outputVulnerabilities) {
-      const callerToString = t6({ caller: (c) => c.toString() });
-      const matches = t9(t11(vulnRes, (r3) => r3.reachable), (r3) => r3.stacks.map((stack) => stack.map(callerToString)));
-      await writeFile(options.outputVulnerabilities, JSON.stringify(matches), "utf8");
-      console.log(`Vulnerability results written to ${options.outputVulnerabilities}`);
+    if (options.outputReachedPackages) {
+      await writeFile(options.outputReachedPackages, JSON.stringify(globalState.packageInfos.values().filter((p) => !p.isEntry).map(t10(["name", "version"])).toArray()), "utf8");
+      console.log(`Reached packages written to ${options.outputReachedPackages}`);
     }
-  }
-  if (options.outputReachedPackages) {
-    await writeFile(options.outputReachedPackages, JSON.stringify(globalState.packageInfos.values().filter((p) => !p.isEntry).map(t10(["name", "version"])).toArray()), "utf8");
-    console.log(`Reached packages written to ${options.outputReachedPackages}`);
-  }
-});
+  };
+}
+var analyze_default = new Command("analyze").addOption(new Option("-d, --debug", "Enable debug logging").conflicts("logLevel").implies({ logLevel: "debug" }).hideHelp()).addOption(new Option("--log-level <level>", "Set the logging level").choices(["error", "warn", "info", "verbose", "debug"]).default("info")).option("--timeout <number>", "Timeout for the analysis in seconds", Number.parseFloat).option("-s, --soundness <path>", "Path to dynamic call graph for soundness checking").option("--soundness-debug", "Print dynamic edges that will improve reachability recall").option("--output-callgraph <path>", "Output the call graph to a JSON file").option("--output-vulnerabilities <path>", "Output the vulnerability analysis results to a JSON file").option("--output-diagnostics <path>", "Output the diagnostics to a JSON file").option("--output-reached-packages <path>", "Output a list of reached non-entry packages to a JSON file").option("--output-telemetry <path>", "Output streaming telemetry to a JSONL file (default: $ANALYZER_TELEMETRY_FILE_PATH)", process.env["ANALYZER_TELEMETRY_FILE_PATH"]).configureHelp({ sortOptions: true }).addCommand(new Command("ruby").description("Analyze a Ruby project").argument("<path>", "File system path to folder containing the project").option("-l, --load-path <path...>", "Value for the $LOAD_PATH global variable - used to resolve `require` calls").option("--vulnerabilities <vuln...>", "Perform reachability analysis for the given vulnerabilities", (v, prev) => {
+  assert13(validateVulnerabilityID(v), `Invalid vulnerability ID: ${v}`);
+  prev.push(v);
+  return prev;
+}, []).action(analyzeAction((options) => {
+  const loadPath = options.loadPath?.map((p) => resolve4(p)) ?? [];
+  return [RubySolver, (s) => new RubyAnalyzer(s, loadPath)];
+})));
 
 // dist/commands/vis-cg.js
 import assert14 from "node:assert";