@coana-tech/cli 14.12.165 → 14.12.167

package/cli.mjs

@@ -251307,7 +251307,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.165";
+var version3 = "14.12.167";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.165",
+  "version": "14.12.167",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -81317,6 +81317,10 @@ async function execNeverFail(cmd, dir, options) {
     await analyzerTelemetryServer?.close();
   }
 }
+async function execAndResolveSucceeded(cmd, dir, options) {
+  const { error } = await execNeverFail(cmd, dir, options);
+  return !error;
+}
 async function exec(cmd, dir, options) {
   const { error, stdout, stderr } = await execNeverFail(cmd, dir, options);
   if (!error) return { stdout, stderr };
@@ -81396,6 +81400,12 @@ async function execNeverFail2(cmd, dir, options) {
   logger.debug(`Command ${formatCmd(cmd, dir)} finished ${result.error ? "with error" : "successfully"}`);
   return result;
 }
+async function execAndResolveSucceeded2(cmd, dir, options) {
+  logger.debug(`Running command: ${formatCmd(cmd, dir)}`);
+  const result = await execAndResolveSucceeded(cmd, dir, options);
+  logger.debug(`Command ${formatCmd(cmd, dir)} finished ${result ? "successfully" : "with error"}`);
+  return result;
+}
 async function exec2(cmd, dir, options) {
   logger.debug(`Running command: ${formatCmd(cmd, dir)}`);
   try {
@@ -110970,6 +110980,7 @@ import { readFile as readFile9, realpath as realpath2, rm as rm2, writeFile as w
 import { relative as relative6, resolve as resolve13 } from "path";
 var { map: map2, uniq: uniq4 } = import_lodash10.default;
 var PRINT_JELLY_COMMAND = false;
+var STRACE_MAX_LINES = 1e4;
 async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reachabilityAnalysisOptions, timeoutInSeconds, vulnerabilities, experiment, telemetryHandler, analyzerTelemetryHandler) {
   const tmpFolder = await createTmpDirectory("jelly-analysis");
   try {
@@ -110994,6 +111005,8 @@ async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reac
     const additionalFlags = process.env.JELLY_ADDITIONAL_FLAGS?.split(/\s+/).filter(Boolean) ?? [];
     const jellyCmd = cmdt`
       ${await getNodeExecutable(ToolPathResolver.nodeExecutablePath)} --max-old-space-size=${reachabilityAnalysisOptions.memoryLimitInMB ?? 8192}
+        ${logFile && // Enable verbose GC tracing if log file is requested
+    ["--trace-gc", "--trace-gc-verbose", "--trace-gc-ignore-scavenger", "--trace-mutator-utilization"]}
         ${jellyExecutable}
         --basedir ${mainProjectRoot}
         --timeout ${timeoutInSeconds}
@@ -111011,8 +111024,15 @@ async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reac
       `;
     if (PRINT_JELLY_COMMAND)
       logger.info("Jelly command:", jellyCmd.join(" "));
+    const straceEnabled = process.env.COANA_ANALYSIS_ENABLE_STRACE === "true";
+    const straceOutputFile = resolve13(mainProjectRoot, "strace-output.txt");
+    const useStrace = straceEnabled && await isStraceAvailable();
+    if (straceEnabled && !useStrace) {
+      logger.info("COANA_ANALYSIS_ENABLE_STRACE is enabled but strace is not available on this system");
+    }
+    const cmdToRun = useStrace ? ["strace", "-f", "-o", `|tail -n ${STRACE_MAX_LINES} > ${straceOutputFile}`, ...jellyCmd] : jellyCmd;
     await runCommandResolveStdOut2(
-      jellyCmd,
+      cmdToRun,
       void 0,
       // Use SIGKILL to ensure termination even if the process is unresponsive 50% above the timeout (e.g., due to GC pressure).
       {
@@ -111120,6 +111140,9 @@ function transformJellyCallStacks(projectRoot, paths) {
     affectedPackages: uniq4(paths.stacks.flatMap((stack) => map2(stack, "package")))
   };
 }
+async function isStraceAvailable() {
+  return execAndResolveSucceeded2(["which", "strace"]);
+}
 
 // dist/whole-program-code-aware-vulnerability-scanner/js/js-code-aware-vulnerability-scanner.js
 var JSCodeAwareVulnerabilityScanner = class _JSCodeAwareVulnerabilityScanner {