@coana-tech/cli 14.12.42 → 14.12.44

package/cli.mjs

@@ -47599,8 +47599,340 @@ var require_es_set_tostringtag = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/form-data@4.0.2/node_modules/form-data/lib/populate.js
+// ../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/populate.js
 var require_populate = __commonJS({
+  "../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/populate.js"(exports2, module2) {
+    "use strict";
+    module2.exports = function(dst, src) {
+      Object.keys(src).forEach(function(prop2) {
+        dst[prop2] = dst[prop2] || src[prop2];
+      });
+      return dst;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/form_data.js
+var require_form_data = __commonJS({
+  "../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/form_data.js"(exports2, module2) {
+    "use strict";
+    var CombinedStream = require_combined_stream();
+    var util5 = __require("util");
+    var path2 = __require("path");
+    var http2 = __require("http");
+    var https2 = __require("https");
+    var parseUrl = __require("url").parse;
+    var fs = __require("fs");
+    var Stream2 = __require("stream").Stream;
+    var crypto7 = __require("crypto");
+    var mime = require_mime_types();
+    var asynckit = require_asynckit();
+    var setToStringTag = require_es_set_tostringtag();
+    var hasOwn2 = require_hasown();
+    var populate = require_populate();
+    function FormData4(options) {
+      if (!(this instanceof FormData4)) {
+        return new FormData4(options);
+      }
+      this._overheadLength = 0;
+      this._valueLength = 0;
+      this._valuesToMeasure = [];
+      CombinedStream.call(this);
+      options = options || {};
+      for (var option in options) {
+        this[option] = options[option];
+      }
+    }
+    util5.inherits(FormData4, CombinedStream);
+    FormData4.LINE_BREAK = "\r\n";
+    FormData4.DEFAULT_CONTENT_TYPE = "application/octet-stream";
+    FormData4.prototype.append = function(field, value, options) {
+      options = options || {};
+      if (typeof options === "string") {
+        options = { filename: options };
+      }
+      var append4 = CombinedStream.prototype.append.bind(this);
+      if (typeof value === "number" || value == null) {
+        value = String(value);
+      }
+      if (Array.isArray(value)) {
+        this._error(new Error("Arrays are not supported."));
+        return;
+      }
+      var header = this._multiPartHeader(field, value, options);
+      var footer = this._multiPartFooter();
+      append4(header);
+      append4(value);
+      append4(footer);
+      this._trackLength(header, value, options);
+    };
+    FormData4.prototype._trackLength = function(header, value, options) {
+      var valueLength = 0;
+      if (options.knownLength != null) {
+        valueLength += Number(options.knownLength);
+      } else if (Buffer.isBuffer(value)) {
+        valueLength = value.length;
+      } else if (typeof value === "string") {
+        valueLength = Buffer.byteLength(value);
+      }
+      this._valueLength += valueLength;
+      this._overheadLength += Buffer.byteLength(header) + FormData4.LINE_BREAK.length;
+      if (!value || !value.path && !(value.readable && hasOwn2(value, "httpVersion")) && !(value instanceof Stream2)) {
+        return;
+      }
+      if (!options.knownLength) {
+        this._valuesToMeasure.push(value);
+      }
+    };
+    FormData4.prototype._lengthRetriever = function(value, callback) {
+      if (hasOwn2(value, "fd")) {
+        if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
+          callback(null, value.end + 1 - (value.start ? value.start : 0));
+        } else {
+          fs.stat(value.path, function(err, stat4) {
+            if (err) {
+              callback(err);
+              return;
+            }
+            var fileSize = stat4.size - (value.start ? value.start : 0);
+            callback(null, fileSize);
+          });
+        }
+      } else if (hasOwn2(value, "httpVersion")) {
+        callback(null, Number(value.headers["content-length"]));
+      } else if (hasOwn2(value, "httpModule")) {
+        value.on("response", function(response) {
+          value.pause();
+          callback(null, Number(response.headers["content-length"]));
+        });
+        value.resume();
+      } else {
+        callback("Unknown stream");
+      }
+    };
+    FormData4.prototype._multiPartHeader = function(field, value, options) {
+      if (typeof options.header === "string") {
+        return options.header;
+      }
+      var contentDisposition = this._getContentDisposition(value, options);
+      var contentType = this._getContentType(value, options);
+      var contents2 = "";
+      var headers = {
+        // add custom disposition as third element or keep it two elements if not
+        "Content-Disposition": ["form-data", 'name="' + field + '"'].concat(contentDisposition || []),
+        // if no content type. allow it to be empty array
+        "Content-Type": [].concat(contentType || [])
+      };
+      if (typeof options.header === "object") {
+        populate(headers, options.header);
+      }
+      var header;
+      for (var prop2 in headers) {
+        if (hasOwn2(headers, prop2)) {
+          header = headers[prop2];
+          if (header == null) {
+            continue;
+          }
+          if (!Array.isArray(header)) {
+            header = [header];
+          }
+          if (header.length) {
+            contents2 += prop2 + ": " + header.join("; ") + FormData4.LINE_BREAK;
+          }
+        }
+      }
+      return "--" + this.getBoundary() + FormData4.LINE_BREAK + contents2 + FormData4.LINE_BREAK;
+    };
+    FormData4.prototype._getContentDisposition = function(value, options) {
+      var filename;
+      if (typeof options.filepath === "string") {
+        filename = path2.normalize(options.filepath).replace(/\\/g, "/");
+      } else if (options.filename || value && (value.name || value.path)) {
+        filename = path2.basename(options.filename || value && (value.name || value.path));
+      } else if (value && value.readable && hasOwn2(value, "httpVersion")) {
+        filename = path2.basename(value.client._httpMessage.path || "");
+      }
+      if (filename) {
+        return 'filename="' + filename + '"';
+      }
+    };
+    FormData4.prototype._getContentType = function(value, options) {
+      var contentType = options.contentType;
+      if (!contentType && value && value.name) {
+        contentType = mime.lookup(value.name);
+      }
+      if (!contentType && value && value.path) {
+        contentType = mime.lookup(value.path);
+      }
+      if (!contentType && value && value.readable && hasOwn2(value, "httpVersion")) {
+        contentType = value.headers["content-type"];
+      }
+      if (!contentType && (options.filepath || options.filename)) {
+        contentType = mime.lookup(options.filepath || options.filename);
+      }
+      if (!contentType && value && typeof value === "object") {
+        contentType = FormData4.DEFAULT_CONTENT_TYPE;
+      }
+      return contentType;
+    };
+    FormData4.prototype._multiPartFooter = function() {
+      return function(next2) {
+        var footer = FormData4.LINE_BREAK;
+        var lastPart = this._streams.length === 0;
+        if (lastPart) {
+          footer += this._lastBoundary();
+        }
+        next2(footer);
+      }.bind(this);
+    };
+    FormData4.prototype._lastBoundary = function() {
+      return "--" + this.getBoundary() + "--" + FormData4.LINE_BREAK;
+    };
+    FormData4.prototype.getHeaders = function(userHeaders) {
+      var header;
+      var formHeaders = {
+        "content-type": "multipart/form-data; boundary=" + this.getBoundary()
+      };
+      for (header in userHeaders) {
+        if (hasOwn2(userHeaders, header)) {
+          formHeaders[header.toLowerCase()] = userHeaders[header];
+        }
+      }
+      return formHeaders;
+    };
+    FormData4.prototype.setBoundary = function(boundary) {
+      if (typeof boundary !== "string") {
+        throw new TypeError("FormData boundary must be a string");
+      }
+      this._boundary = boundary;
+    };
+    FormData4.prototype.getBoundary = function() {
+      if (!this._boundary) {
+        this._generateBoundary();
+      }
+      return this._boundary;
+    };
+    FormData4.prototype.getBuffer = function() {
+      var dataBuffer = new Buffer.alloc(0);
+      var boundary = this.getBoundary();
+      for (var i7 = 0, len = this._streams.length; i7 < len; i7++) {
+        if (typeof this._streams[i7] !== "function") {
+          if (Buffer.isBuffer(this._streams[i7])) {
+            dataBuffer = Buffer.concat([dataBuffer, this._streams[i7]]);
+          } else {
+            dataBuffer = Buffer.concat([dataBuffer, Buffer.from(this._streams[i7])]);
+          }
+          if (typeof this._streams[i7] !== "string" || this._streams[i7].substring(2, boundary.length + 2) !== boundary) {
+            dataBuffer = Buffer.concat([dataBuffer, Buffer.from(FormData4.LINE_BREAK)]);
+          }
+        }
+      }
+      return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]);
+    };
+    FormData4.prototype._generateBoundary = function() {
+      this._boundary = "--------------------------" + crypto7.randomBytes(12).toString("hex");
+    };
+    FormData4.prototype.getLengthSync = function() {
+      var knownLength = this._overheadLength + this._valueLength;
+      if (this._streams.length) {
+        knownLength += this._lastBoundary().length;
+      }
+      if (!this.hasKnownLength()) {
+        this._error(new Error("Cannot calculate proper length in synchronous way."));
+      }
+      return knownLength;
+    };
+    FormData4.prototype.hasKnownLength = function() {
+      var hasKnownLength = true;
+      if (this._valuesToMeasure.length) {
+        hasKnownLength = false;
+      }
+      return hasKnownLength;
+    };
+    FormData4.prototype.getLength = function(cb) {
+      var knownLength = this._overheadLength + this._valueLength;
+      if (this._streams.length) {
+        knownLength += this._lastBoundary().length;
+      }
+      if (!this._valuesToMeasure.length) {
+        process.nextTick(cb.bind(this, null, knownLength));
+        return;
+      }
+      asynckit.parallel(this._valuesToMeasure, this._lengthRetriever, function(err, values) {
+        if (err) {
+          cb(err);
+          return;
+        }
+        values.forEach(function(length) {
+          knownLength += length;
+        });
+        cb(null, knownLength);
+      });
+    };
+    FormData4.prototype.submit = function(params, cb) {
+      var request;
+      var options;
+      var defaults3 = { method: "post" };
+      if (typeof params === "string") {
+        params = parseUrl(params);
+        options = populate({
+          port: params.port,
+          path: params.pathname,
+          host: params.hostname,
+          protocol: params.protocol
+        }, defaults3);
+      } else {
+        options = populate(params, defaults3);
+        if (!options.port) {
+          options.port = options.protocol === "https:" ? 443 : 80;
+        }
+      }
+      options.headers = this.getHeaders(params.headers);
+      if (options.protocol === "https:") {
+        request = https2.request(options);
+      } else {
+        request = http2.request(options);
+      }
+      this.getLength(function(err, length) {
+        if (err && err !== "Unknown stream") {
+          this._error(err);
+          return;
+        }
+        if (length) {
+          request.setHeader("Content-Length", length);
+        }
+        this.pipe(request);
+        if (cb) {
+          var onResponse;
+          var callback = function(error, responce) {
+            request.removeListener("error", callback);
+            request.removeListener("response", onResponse);
+            return cb.call(this, error, responce);
+          };
+          onResponse = callback.bind(this, null);
+          request.on("error", callback);
+          request.on("response", onResponse);
+        }
+      }.bind(this));
+      return request;
+    };
+    FormData4.prototype._error = function(err) {
+      if (!this.error) {
+        this.error = err;
+        this.pause();
+        this.emit("error", err);
+      }
+    };
+    FormData4.prototype.toString = function() {
+      return "[object FormData]";
+    };
+    setToStringTag(FormData4, "FormData");
+    module2.exports = FormData4;
+  }
+});
+
+// ../../node_modules/.pnpm/form-data@4.0.2/node_modules/form-data/lib/populate.js
+var require_populate2 = __commonJS({
   "../../node_modules/.pnpm/form-data@4.0.2/node_modules/form-data/lib/populate.js"(exports2, module2) {
     module2.exports = function(dst, src) {
       Object.keys(src).forEach(function(prop2) {
@@ -47612,7 +47944,7 @@ var require_populate = __commonJS({
 });
 
 // ../../node_modules/.pnpm/form-data@4.0.2/node_modules/form-data/lib/form_data.js
-var require_form_data = __commonJS({
+var require_form_data2 = __commonJS({
   "../../node_modules/.pnpm/form-data@4.0.2/node_modules/form-data/lib/form_data.js"(exports2, module2) {
     var CombinedStream = require_combined_stream();
     var util5 = __require("util");
@@ -47625,7 +47957,7 @@ var require_form_data = __commonJS({
     var mime = require_mime_types();
     var asynckit = require_asynckit();
     var setToStringTag = require_es_set_tostringtag();
-    var populate = require_populate();
+    var populate = require_populate2();
     module2.exports = FormData4;
     util5.inherits(FormData4, CombinedStream);
     function FormData4(options) {
@@ -49261,338 +49593,6 @@ var require_follow_redirects = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/populate.js
-var require_populate2 = __commonJS({
-  "../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/populate.js"(exports2, module2) {
-    "use strict";
-    module2.exports = function(dst, src) {
-      Object.keys(src).forEach(function(prop2) {
-        dst[prop2] = dst[prop2] || src[prop2];
-      });
-      return dst;
-    };
-  }
-});
-
-// ../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/form_data.js
-var require_form_data2 = __commonJS({
-  "../../node_modules/.pnpm/form-data@4.0.4/node_modules/form-data/lib/form_data.js"(exports2, module2) {
-    "use strict";
-    var CombinedStream = require_combined_stream();
-    var util5 = __require("util");
-    var path2 = __require("path");
-    var http2 = __require("http");
-    var https2 = __require("https");
-    var parseUrl = __require("url").parse;
-    var fs = __require("fs");
-    var Stream2 = __require("stream").Stream;
-    var crypto7 = __require("crypto");
-    var mime = require_mime_types();
-    var asynckit = require_asynckit();
-    var setToStringTag = require_es_set_tostringtag();
-    var hasOwn2 = require_hasown();
-    var populate = require_populate2();
-    function FormData4(options) {
-      if (!(this instanceof FormData4)) {
-        return new FormData4(options);
-      }
-      this._overheadLength = 0;
-      this._valueLength = 0;
-      this._valuesToMeasure = [];
-      CombinedStream.call(this);
-      options = options || {};
-      for (var option in options) {
-        this[option] = options[option];
-      }
-    }
-    util5.inherits(FormData4, CombinedStream);
-    FormData4.LINE_BREAK = "\r\n";
-    FormData4.DEFAULT_CONTENT_TYPE = "application/octet-stream";
-    FormData4.prototype.append = function(field, value, options) {
-      options = options || {};
-      if (typeof options === "string") {
-        options = { filename: options };
-      }
-      var append4 = CombinedStream.prototype.append.bind(this);
-      if (typeof value === "number" || value == null) {
-        value = String(value);
-      }
-      if (Array.isArray(value)) {
-        this._error(new Error("Arrays are not supported."));
-        return;
-      }
-      var header = this._multiPartHeader(field, value, options);
-      var footer = this._multiPartFooter();
-      append4(header);
-      append4(value);
-      append4(footer);
-      this._trackLength(header, value, options);
-    };
-    FormData4.prototype._trackLength = function(header, value, options) {
-      var valueLength = 0;
-      if (options.knownLength != null) {
-        valueLength += Number(options.knownLength);
-      } else if (Buffer.isBuffer(value)) {
-        valueLength = value.length;
-      } else if (typeof value === "string") {
-        valueLength = Buffer.byteLength(value);
-      }
-      this._valueLength += valueLength;
-      this._overheadLength += Buffer.byteLength(header) + FormData4.LINE_BREAK.length;
-      if (!value || !value.path && !(value.readable && hasOwn2(value, "httpVersion")) && !(value instanceof Stream2)) {
-        return;
-      }
-      if (!options.knownLength) {
-        this._valuesToMeasure.push(value);
-      }
-    };
-    FormData4.prototype._lengthRetriever = function(value, callback) {
-      if (hasOwn2(value, "fd")) {
-        if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
-          callback(null, value.end + 1 - (value.start ? value.start : 0));
-        } else {
-          fs.stat(value.path, function(err, stat4) {
-            if (err) {
-              callback(err);
-              return;
-            }
-            var fileSize = stat4.size - (value.start ? value.start : 0);
-            callback(null, fileSize);
-          });
-        }
-      } else if (hasOwn2(value, "httpVersion")) {
-        callback(null, Number(value.headers["content-length"]));
-      } else if (hasOwn2(value, "httpModule")) {
-        value.on("response", function(response) {
-          value.pause();
-          callback(null, Number(response.headers["content-length"]));
-        });
-        value.resume();
-      } else {
-        callback("Unknown stream");
-      }
-    };
-    FormData4.prototype._multiPartHeader = function(field, value, options) {
-      if (typeof options.header === "string") {
-        return options.header;
-      }
-      var contentDisposition = this._getContentDisposition(value, options);
-      var contentType = this._getContentType(value, options);
-      var contents2 = "";
-      var headers = {
-        // add custom disposition as third element or keep it two elements if not
-        "Content-Disposition": ["form-data", 'name="' + field + '"'].concat(contentDisposition || []),
-        // if no content type. allow it to be empty array
-        "Content-Type": [].concat(contentType || [])
-      };
-      if (typeof options.header === "object") {
-        populate(headers, options.header);
-      }
-      var header;
-      for (var prop2 in headers) {
-        if (hasOwn2(headers, prop2)) {
-          header = headers[prop2];
-          if (header == null) {
-            continue;
-          }
-          if (!Array.isArray(header)) {
-            header = [header];
-          }
-          if (header.length) {
-            contents2 += prop2 + ": " + header.join("; ") + FormData4.LINE_BREAK;
-          }
-        }
-      }
-      return "--" + this.getBoundary() + FormData4.LINE_BREAK + contents2 + FormData4.LINE_BREAK;
-    };
-    FormData4.prototype._getContentDisposition = function(value, options) {
-      var filename;
-      if (typeof options.filepath === "string") {
-        filename = path2.normalize(options.filepath).replace(/\\/g, "/");
-      } else if (options.filename || value && (value.name || value.path)) {
-        filename = path2.basename(options.filename || value && (value.name || value.path));
-      } else if (value && value.readable && hasOwn2(value, "httpVersion")) {
-        filename = path2.basename(value.client._httpMessage.path || "");
-      }
-      if (filename) {
-        return 'filename="' + filename + '"';
-      }
-    };
-    FormData4.prototype._getContentType = function(value, options) {
-      var contentType = options.contentType;
-      if (!contentType && value && value.name) {
-        contentType = mime.lookup(value.name);
-      }
-      if (!contentType && value && value.path) {
-        contentType = mime.lookup(value.path);
-      }
-      if (!contentType && value && value.readable && hasOwn2(value, "httpVersion")) {
-        contentType = value.headers["content-type"];
-      }
-      if (!contentType && (options.filepath || options.filename)) {
-        contentType = mime.lookup(options.filepath || options.filename);
-      }
-      if (!contentType && value && typeof value === "object") {
-        contentType = FormData4.DEFAULT_CONTENT_TYPE;
-      }
-      return contentType;
-    };
-    FormData4.prototype._multiPartFooter = function() {
-      return function(next2) {
-        var footer = FormData4.LINE_BREAK;
-        var lastPart = this._streams.length === 0;
-        if (lastPart) {
-          footer += this._lastBoundary();
-        }
-        next2(footer);
-      }.bind(this);
-    };
-    FormData4.prototype._lastBoundary = function() {
-      return "--" + this.getBoundary() + "--" + FormData4.LINE_BREAK;
-    };
-    FormData4.prototype.getHeaders = function(userHeaders) {
-      var header;
-      var formHeaders = {
-        "content-type": "multipart/form-data; boundary=" + this.getBoundary()
-      };
-      for (header in userHeaders) {
-        if (hasOwn2(userHeaders, header)) {
-          formHeaders[header.toLowerCase()] = userHeaders[header];
-        }
-      }
-      return formHeaders;
-    };
-    FormData4.prototype.setBoundary = function(boundary) {
-      if (typeof boundary !== "string") {
-        throw new TypeError("FormData boundary must be a string");
-      }
-      this._boundary = boundary;
-    };
-    FormData4.prototype.getBoundary = function() {
-      if (!this._boundary) {
-        this._generateBoundary();
-      }
-      return this._boundary;
-    };
-    FormData4.prototype.getBuffer = function() {
-      var dataBuffer = new Buffer.alloc(0);
-      var boundary = this.getBoundary();
-      for (var i7 = 0, len = this._streams.length; i7 < len; i7++) {
-        if (typeof this._streams[i7] !== "function") {
-          if (Buffer.isBuffer(this._streams[i7])) {
-            dataBuffer = Buffer.concat([dataBuffer, this._streams[i7]]);
-          } else {
-            dataBuffer = Buffer.concat([dataBuffer, Buffer.from(this._streams[i7])]);
-          }
-          if (typeof this._streams[i7] !== "string" || this._streams[i7].substring(2, boundary.length + 2) !== boundary) {
-            dataBuffer = Buffer.concat([dataBuffer, Buffer.from(FormData4.LINE_BREAK)]);
-          }
-        }
-      }
-      return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]);
-    };
-    FormData4.prototype._generateBoundary = function() {
-      this._boundary = "--------------------------" + crypto7.randomBytes(12).toString("hex");
-    };
-    FormData4.prototype.getLengthSync = function() {
-      var knownLength = this._overheadLength + this._valueLength;
-      if (this._streams.length) {
-        knownLength += this._lastBoundary().length;
-      }
-      if (!this.hasKnownLength()) {
-        this._error(new Error("Cannot calculate proper length in synchronous way."));
-      }
-      return knownLength;
-    };
-    FormData4.prototype.hasKnownLength = function() {
-      var hasKnownLength = true;
-      if (this._valuesToMeasure.length) {
-        hasKnownLength = false;
-      }
-      return hasKnownLength;
-    };
-    FormData4.prototype.getLength = function(cb) {
-      var knownLength = this._overheadLength + this._valueLength;
-      if (this._streams.length) {
-        knownLength += this._lastBoundary().length;
-      }
-      if (!this._valuesToMeasure.length) {
-        process.nextTick(cb.bind(this, null, knownLength));
-        return;
-      }
-      asynckit.parallel(this._valuesToMeasure, this._lengthRetriever, function(err, values) {
-        if (err) {
-          cb(err);
-          return;
-        }
-        values.forEach(function(length) {
-          knownLength += length;
-        });
-        cb(null, knownLength);
-      });
-    };
-    FormData4.prototype.submit = function(params, cb) {
-      var request;
-      var options;
-      var defaults3 = { method: "post" };
-      if (typeof params === "string") {
-        params = parseUrl(params);
-        options = populate({
-          port: params.port,
-          path: params.pathname,
-          host: params.hostname,
-          protocol: params.protocol
-        }, defaults3);
-      } else {
-        options = populate(params, defaults3);
-        if (!options.port) {
-          options.port = options.protocol === "https:" ? 443 : 80;
-        }
-      }
-      options.headers = this.getHeaders(params.headers);
-      if (options.protocol === "https:") {
-        request = https2.request(options);
-      } else {
-        request = http2.request(options);
-      }
-      this.getLength(function(err, length) {
-        if (err && err !== "Unknown stream") {
-          this._error(err);
-          return;
-        }
-        if (length) {
-          request.setHeader("Content-Length", length);
-        }
-        this.pipe(request);
-        if (cb) {
-          var onResponse;
-          var callback = function(error, responce) {
-            request.removeListener("error", callback);
-            request.removeListener("response", onResponse);
-            return cb.call(this, error, responce);
-          };
-          onResponse = callback.bind(this, null);
-          request.on("error", callback);
-          request.on("response", onResponse);
-        }
-      }.bind(this));
-      return request;
-    };
-    FormData4.prototype._error = function(err) {
-      if (!this.error) {
-        this.error = err;
-        this.pause();
-        this.emit("error", err);
-      }
-    };
-    FormData4.prototype.toString = function() {
-      return "[object FormData]";
-    };
-    setToStringTag(FormData4, "FormData");
-    module2.exports = FormData4;
-  }
-});
-
 // ../../node_modules/.pnpm/is-retry-allowed@2.2.0/node_modules/is-retry-allowed/index.js
 var require_is_retry_allowed = __commonJS({
   "../../node_modules/.pnpm/is-retry-allowed@2.2.0/node_modules/is-retry-allowed/index.js"(exports2, module2) {
@@ -184569,7 +184569,7 @@ var require_p_retry = __commonJS({
 var require_axios = __commonJS({
   "../../node_modules/.pnpm/axios@1.9.0/node_modules/axios/dist/node/axios.cjs"(exports2, module2) {
     "use strict";
-    var FormData$1 = require_form_data2();
+    var FormData$1 = require_form_data();
     var crypto7 = __require("crypto");
     var url2 = __require("url");
     var proxyFromEnv2 = require_proxy_from_env();
@@ -195318,6 +195318,20 @@ function resolveConflicts2(ecosystem, patches, ctxt) {
   return resolvedPatches;
 }
 
+// ../utils/src/dashboard-api/socket-api.ts
+var import_form_data2 = __toESM(require_form_data(), 1);
+import { readFile as readFile8 } from "node:fs/promises";
+import { join as join5, relative as relative3, resolve as resolve8 } from "node:path";
+
+// ../web-compat-utils/src/ghsa.ts
+function extractGHSAIdFromUrl(url2) {
+  const match2 = url2.match(/(GHSA-[a-z0-9-]+)/);
+  if (match2) {
+    return match2[1];
+  }
+  return void 0;
+}
+
 // ../../node_modules/.pnpm/axios@1.8.2/node_modules/axios/lib/helpers/bind.js
 function bind(fn2, thisArg) {
   return function wrap2() {
@@ -195763,7 +195777,7 @@ AxiosError.from = (error, code, config3, request, response, customProps) => {
 var AxiosError_default = AxiosError;
 
 // ../../node_modules/.pnpm/axios@1.8.2/node_modules/axios/lib/platform/node/classes/FormData.js
-var import_form_data = __toESM(require_form_data(), 1);
+var import_form_data = __toESM(require_form_data2(), 1);
 var FormData_default = import_form_data.default;
 
 // ../../node_modules/.pnpm/axios@1.8.2/node_modules/axios/lib/helpers/toFormData.js
@@ -198616,20 +198630,6 @@ var {
   mergeConfig: mergeConfig2
 } = axios_default;
 
-// ../utils/src/dashboard-api/socket-api.ts
-var import_form_data2 = __toESM(require_form_data2(), 1);
-import { readFile as readFile8 } from "node:fs/promises";
-import { join as join5, relative as relative3, resolve as resolve8 } from "node:path";
-
-// ../web-compat-utils/src/ghsa.ts
-function extractGHSAIdFromUrl(url2) {
-  const match2 = url2.match(/(GHSA-[a-z0-9-]+)/);
-  if (match2) {
-    return match2[1];
-  }
-  return void 0;
-}
-
 // ../../node_modules/.pnpm/axios-retry@4.1.0_axios@1.8.2/node_modules/axios-retry/dist/esm/index.js
 var import_is_retry_allowed = __toESM(require_is_retry_allowed(), 1);
 var namespace = "axios-retry";
@@ -198822,7 +198822,7 @@ function prettyPrintAxiosError(error) {
     printableHeaders = Object.fromEntries(
       Object.entries(headers).map(([key, value]) => {
         try {
-          if (key === "api-key" || key === "apiKey") {
+          if (key === "api-key" || key === "apiKey" || key === "Authorization") {
             return [key, "REDACTED"];
           }
           if (Array.isArray(value)) {
@@ -198907,7 +198907,7 @@ async function createSocketTier1Scan(cliOptions, coanaCliVersion) {
     };
     return (await axios2.put(url2, data2, { headers: getAuthHeaders() })).data;
   } catch (error) {
-    handleError(error, "Error creating tier 1 scan", false);
+    handleError(error, "Error creating tier 1 scan", true);
     throw new Error("we should never reach this point");
   }
 }
@@ -199048,7 +199048,7 @@ async function getLatestBucketsSocket(subprojectPath, workspacePath) {
     }
     logger.debug(
       "Unable to retrieve cached analysis configuration. Will continue with default configuration.",
-      error?.message
+      error.message
     );
     return void 0;
   }
@@ -199064,7 +199064,7 @@ async function useSocketComputeFixEndpoint(autofixRunId, artifacts, vulnerableAr
     };
     return (await axios2.post(url2, data2, { headers: getAuthHeaders() })).data;
   } catch (error) {
-    logger.error("Request to compute fixes failed:", error);
+    handleError(error, "Request to compute fixes failed", false);
     return {
       type: "error",
       message: "Error during computation"
@@ -199078,8 +199078,8 @@ async function augmentArtifactsWithVulnerabilities(components) {
     const augmentedArtifacts = (await axios2.post(url2, data2, { headers: getAuthHeaders() })).data;
     return parseSocketResponse(augmentedArtifacts);
   } catch (e) {
-    logger.error("Failed to scan for vulnerabilities in socket mode", e);
-    throw e;
+    handleError(e, "Failed to scan for vulnerabilities in socket mode", true);
+    throw new Error("we should never reach this point");
   }
 }
 async function fetchManifestFilesFromManifestsTarHash(manifestsTarHash) {
@@ -199087,10 +199087,8 @@ async function fetchManifestFilesFromManifestsTarHash(manifestsTarHash) {
     const url2 = getSocketApiUrl(`orgs/${process.env.SOCKET_ORG_SLUG}/manifest-files?tarHash=${manifestsTarHash}`);
     return (await axios2.get(url2, { headers: getAuthHeaders() })).data;
   } catch (e) {
-    if (e instanceof AxiosError2) {
-      prettyPrintAxiosError(e);
-    }
-    throw new Error("Failed to fetch artifacts from Socket API using manifests tar hash");
+    handleError(e, "Failed to fetch artifacts from Socket API using manifests tar hash", true);
+    throw new Error("we should never reach this point");
   }
 }
 async function fetchArtifactsFromManifestsTarHash(manifestsTarHash) {
@@ -199099,10 +199097,8 @@ async function fetchArtifactsFromManifestsTarHash(manifestsTarHash) {
     const responseData = (await axios2.post(url2, {}, { headers: getAuthHeaders() })).data;
     return parseComputeArtifactsResponse(responseData);
   } catch (e) {
-    if (e instanceof AxiosError2) {
-      prettyPrintAxiosError(e);
-    }
-    throw new Error("Failed to fetch artifacts from Socket API using manifests tar hash");
+    handleError(e, "Failed to fetch artifacts from Socket API using manifests tar hash", true);
+    throw new Error("we should never reach this point");
   }
 }
 async function computeSocketFactArtifacts(rootDir, manifestFiles) {
@@ -206926,8 +206922,10 @@ var getNpmBin = once(async () => {
 });
 async function actuallyRunInstall(specificPackagesArgs = [], dir) {
   const installationCommand = cmdt2`${await getNpmBin()} install -f --ignore-scripts --no-fund --no-audit --no-progress ${specificPackagesArgs}`;
-  logger.info(`running installation command: ${installationCommand}`);
-  return execAndLogOnFailure2(installationCommand, dir);
+  logger.info(`Running installation command: "${installationCommand}" in ${dir}`);
+  const result = execAndLogOnFailure2(installationCommand, dir);
+  logger.info(`Installation completed.`);
+  return result;
 }
 async function getWorkspacePathsFromPackageJSON(projectFolder, useDotWhenNoWorkspaces = false) {
   const rootPackageJson = getPackageJsonObject(projectFolder);
@@ -207072,8 +207070,10 @@ var PnpmFixingManager = class extends NpmEcosystemFixingManager {
   }
   async actuallyRunInstall(specificPackagesCmd = [], workspacePath = ".") {
     const installationCommand = cmdt`pnpm install --ignore-scripts${await this.getPnpmMajorVersion() >= 9 && specificPackagesCmd.length === 0 ? "--no-frozen-lockfile" : ""} --config.confirmModulesPurge=false ${specificPackagesCmd}`;
-    logger.info(`running installation command: ${installationCommand}`);
-    await exec(installationCommand, resolve17(this.rootDir, this.subprojectPath, workspacePath));
+    const installDir = resolve17(this.rootDir, this.subprojectPath, workspacePath);
+    logger.info(`Running installation command: "${installationCommand}" in ${installDir}`);
+    await exec(installationCommand, installDir);
+    logger.info(`Installation completed.`);
   }
   async getLockFileYaml() {
     const lockFile = await (0, import_lockfile_file2.readWantedLockfile)(resolve17(this.rootDir, this.subprojectPath), { ignoreIncompatible: true });
@@ -207367,8 +207367,8 @@ var YarnFixingManager = class extends NpmEcosystemFixingManager {
       env.YARN_NODE_LINKER = "node-modules";
     }
     const installationCommand = cmdt`${cmdWithoutSpecificPackages} ${specificPackagesArgs}`;
-    logger.info(`Running installation command: ${installationCommand}`);
     const installDir = resolve19(this.rootDir, this.subprojectPath, workspacePath ?? ".");
+    logger.info(`Running installation command: "${installationCommand}" in ${installDir}`);
     const installResult = await this.runYarnCommand(installationCommand, installDir, { env });
     if (installResult.error) {
       logger.info(`Failed to install packages: ${installResult.error.message}`);
@@ -207481,7 +207481,7 @@ var YarnFixingManager = class extends NpmEcosystemFixingManager {
 import { dirname as dirname8, join as join9, relative as relative7 } from "path";
 import { existsSync as existsSync11 } from "fs";
 import { readFile as readFile16, writeFile as writeFile6 } from "fs/promises";
-function applyUpgradesToPackageJson(packageJsonContent, upgrades, rangeStyle) {
+function applyUpgradesToPackageJson(filePath, packageJsonContent, upgrades, rangeStyle) {
   let modifiedContent = packageJsonContent;
   for (const upgrade of sortUpgradesByOffset(upgrades)) {
     if (upgrade.manifestRef?.start !== void 0 && upgrade.manifestRef?.end !== void 0) {
@@ -207503,6 +207503,9 @@ function applyUpgradesToPackageJson(packageJsonContent, upgrades, rangeStyle) {
         const specifier = specifierMatch ? specifierMatch[1] : "";
         newVersionString = `"${specifier}${upgrade.upgradeVersion}"`;
       }
+      logger.info(
+        `Upgrading ${upgrade.packageName} from ${originalVersionString} to ${newVersionString} in ${filePath}`
+      );
       modifiedContent = modifiedContent.substring(0, start) + newVersionString + modifiedContent.substring(end2);
       continue;
     }
@@ -207533,6 +207536,7 @@ function applyUpgradesToPackageJson(packageJsonContent, upgrades, rangeStyle) {
         const specifier = specifierMatch ? specifierMatch[1] : "";
         versionString = specifier + upgrade.upgradeVersion;
       }
+      logger.info(`Upgrading ${upgrade.packageName} from ${currentVersion} to ${versionString} in ${filePath}`);
       return `${prefix}${versionString}"`;
     });
   }
@@ -207634,7 +207638,12 @@ var NpmSocketUpgradeManager = class {
           };
         }
       );
-      const modifiedContent = applyUpgradesToPackageJson(packageJsonContent, upgradesWithPackageNames, rangeStyle);
+      const modifiedContent = applyUpgradesToPackageJson(
+        packageJsonPath,
+        packageJsonContent,
+        upgradesWithPackageNames,
+        rangeStyle
+      );
       await writeFile6(packageJsonPath, modifiedContent, "utf-8");
     }
     await fixingManager.finalizeFixes();
@@ -207657,7 +207666,9 @@ function getPackageMangerForDirectory(directory) {
   } else if (existsSync11(join9(directory, "package-lock.json"))) {
     return "NPM";
   }
-  throw new Error("Upgrading packages is currently only supported for NPM projects using a lock file.");
+  throw new Error(
+    `Upgrading packages is currently only supported for NPM projects using a lock file. Failed to find a lock file in ${directory}`
+  );
 }
 function sortUpgradesByOffset(upgrades) {
   return [...upgrades].sort((a4, b) => {
@@ -212387,6 +212398,711 @@ ${detailsString}` : ""}`;
   }
 };
 
+// ../utils/src/promise-queue.ts
+var PromiseQueue = class {
+  /*
+   * @param maxConcurrency The maximum number of tasks that can run in parallel.
+   * @param maxQueueLength The maximum number of tasks that can be queued. If the queue is full, the oldest task is removed.
+   */
+  constructor(maxConcurrency, maxQueueLength) {
+    this.maxConcurrency = maxConcurrency;
+    this.maxQueueLength = maxQueueLength;
+    if (maxQueueLength && maxQueueLength < 1) {
+      throw new Error("maxQueueLength must be at least 1");
+    }
+    this.maxConcurrency = maxConcurrency;
+  }
+  queue = [];
+  activeTasks = 0;
+  idleResolver = null;
+  idleRejector = null;
+  error = null;
+  async runNextTask() {
+    if (this.activeTasks >= this.maxConcurrency) {
+      return;
+    }
+    const task = this.queue.shift();
+    if (task) {
+      this.activeTasks++;
+      try {
+        await task();
+      } catch (e) {
+        this.error = e;
+      } finally {
+        this.activeTasks--;
+        this.runNextTask();
+        this.checkIdle();
+      }
+    } else {
+      this.checkIdle();
+    }
+  }
+  checkIdle() {
+    if (!this.idleResolver || !this.idleRejector) return;
+    const shouldResolve = this.queue.length === 0 && this.activeTasks === 0;
+    if (this.error) this.idleRejector(this.error);
+    else if (shouldResolve) this.idleResolver();
+    const resolvedOrRejected = !!this.error || shouldResolve;
+    if (resolvedOrRejected) {
+      this.error = null;
+      this.idleResolver = null;
+      this.idleRejector = null;
+    }
+  }
+  enqueueTask(task) {
+    if (this.maxQueueLength && this.queue.length >= this.maxQueueLength) {
+      this.queue.shift();
+    }
+    this.queue.push(task);
+    this.runNextTask();
+  }
+  async onIdle() {
+    return new Promise((resolve36, reject) => {
+      if (this.error) {
+        reject(this.error);
+        this.error = null;
+      } else if (this.queue.length === 0 && this.activeTasks === 0) {
+        resolve36();
+      } else {
+        this.idleResolver = resolve36;
+        this.idleRejector = reject;
+      }
+    });
+  }
+};
+
+// dist/cli-upgrade-purl.js
+import { join as join25, relative as relative14, resolve as resolve32 } from "node:path";
+
+// ../web-compat-utils/src/assertions.ts
+function assertDefined(value) {
+  if (value === void 0 || value === null) throw new Error("Expected value to be defined");
+  return value;
+}
+
+// dist/cli-upgrade-purl.js
+var import_packageurl_js3 = __toESM(require_packageurl_js(), 1);
+
+// dist/internal/socket-mode-helpers-socket-dependency-trees.js
+var import_packageurl_js2 = __toESM(require_packageurl_js(), 1);
+var import_picomatch4 = __toESM(require_picomatch2(), 1);
+import { basename as basename10, dirname as dirname13, join as join24, sep as sep5 } from "path";
+var REQUIREMENTS_FILES_SEARCH_DEPTH2 = 3;
+function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonProjects) {
+  switch (ecosystem) {
+    case "NPM": {
+      const base = basename10(manifestPath);
+      const dir = dirname13(manifestPath);
+      return base === "package.json" ? dir || "." : void 0;
+    }
+    case "MAVEN": {
+      return ".";
+    }
+    case "PIP": {
+      const base = basename10(manifestPath);
+      const dir = dirname13(manifestPath);
+      const workspaceDir = dir === "" ? "." : dir;
+      if (properPythonProjects.includes(workspaceDir)) {
+        return workspaceDir;
+      }
+      if (base === "poetry.lock" || base === "Pipfile.lock" || base === "uv.lock") {
+        return workspaceDir;
+      }
+      if (base.endsWith(".txt")) {
+        const properProjectDirs = properPythonProjects.filter((properProjectDir) => (properProjectDir === "." || workspaceDir === "." || workspaceDir.startsWith(properProjectDir)) && workspaceDir.replace(properProjectDir, "").split(sep5).length <= REQUIREMENTS_FILES_SEARCH_DEPTH2);
+        const longestProperProjectDir = l5(properProjectDirs, [(d4) => d4.length, "desc"]);
+        if (longestProperProjectDir) {
+          return longestProperProjectDir;
+        }
+        return workspaceDir;
+      }
+      logger.warn(`No workspace found for manifest file ${manifestPath}`);
+      return void 0;
+    }
+    case "NUGET": {
+      return ".";
+    }
+    case "RUST": {
+      return dirname13(manifestPath) || ".";
+    }
+    case "GO": {
+      const base = basename10(manifestPath);
+      const dir = dirname13(manifestPath);
+      return base === "go.mod" ? dir || "." : void 0;
+    }
+    default: {
+      return ".";
+    }
+  }
+}
+function inferProjectFromManifestPath(ecosystem, manifestPath) {
+  switch (ecosystem) {
+    case "NPM": {
+      const filename = basename10(manifestPath);
+      if (["package-lock.json", "pnpm-lock.yaml", "pnpm-lock.yml", "yarn.lock"].includes(filename)) {
+        return dirname13(manifestPath) || ".";
+      }
+      return void 0;
+    }
+  }
+}
+function getAllToplevelAncestors(artifactMap, artifactId) {
+  const visited = /* @__PURE__ */ new Set();
+  const toplevelAncestors = /* @__PURE__ */ new Set();
+  function findAncestors(currentId) {
+    if (visited.has(currentId)) {
+      return;
+    }
+    visited.add(currentId);
+    const artifact = artifactMap.get(currentId);
+    if (!artifact) {
+      return;
+    }
+    if (artifact.toplevelAncestors && artifact.toplevelAncestors.length > 0) {
+      for (const ancestorId of artifact.toplevelAncestors) {
+        toplevelAncestors.add(ancestorId);
+        findAncestors(ancestorId);
+      }
+    }
+  }
+  findAncestors(artifactId);
+  return Array.from(toplevelAncestors);
+}
+async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash, mode) {
+  logger.info("Fetching artifacts from Socket backend using manifests tar hash", manifestsTarHash);
+  try {
+    const { artifacts } = await fetchArtifactsFromManifestsTarHash(manifestsTarHash);
+    const properPythonProjects = [];
+    const pipArtifactToRepresentativeManifest = {};
+    for (const artifact of artifacts) {
+      if (artifact.type === "pypi" && artifact.manifestFiles) {
+        pipArtifactToRepresentativeManifest[simplePurl(artifact.type, artifact.namespace ?? "", artifact.name, artifact.version ?? "")] = artifact;
+      }
+    }
+    const venvExcludes = [
+      "venv",
+      ".venv",
+      "env",
+      ".env",
+      "virtualenv",
+      ".virtualenv",
+      "venvs",
+      ".venvs",
+      "envs",
+      ".envs",
+      "__pycache__",
+      ".tox",
+      ".nox",
+      ".pytest_cache",
+      "site-packages",
+      "dist-packages",
+      "conda-meta",
+      "conda-bld",
+      ".mypy_cache",
+      ".ruff_cache",
+      ".hypothesis"
+    ];
+    const allFiles = await getFilesRelative(rootWorkingDirectory, venvExcludes);
+    for (const file of allFiles) {
+      const base = basename10(file);
+      const workspaceDir = dirname13(file) || ".";
+      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join24(rootWorkingDirectory, file))) {
+        if (!properPythonProjects.includes(workspaceDir)) {
+          properPythonProjects.push(workspaceDir);
+        }
+      }
+    }
+    const artifactMap = new Map(artifacts.map((a4) => [a4.id, a4]));
+    const ecosystemToWorkspaceToAnalysisData = {};
+    const ecosystemWorkspaceVulnIds = /* @__PURE__ */ new Set();
+    const ecosystemToWorkspaceToVulnerabilities = {};
+    const purlsFailedToFindWorkspace = /* @__PURE__ */ new Set();
+    for (const artifact of artifacts) {
+      let processToplevelAncestors2 = function(artifact2) {
+        const allAncestorIds = getAllToplevelAncestors(artifactMap, artifact2.id);
+        allAncestorIds.forEach((ancestorId) => artifactMap.get(ancestorId)?.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file)));
+      };
+      var processToplevelAncestors = processToplevelAncestors2;
+      const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
+      if (!ecosystem)
+        continue;
+      const manifestFiles = [];
+      switch (ecosystem) {
+        case "MAVEN": {
+          manifestFiles.push(...(await getFilesRelative(rootWorkingDirectory)).filter((file) => (0, import_picomatch4.default)("{{*-*.,}pom{.xml,},gradle.lockfile}")(basename10(file))));
+          break;
+        }
+        case "NUGET": {
+          manifestFiles.push(...(await getFilesRelative(rootWorkingDirectory)).filter((file) => (0, import_picomatch4.default)("{*.csproj,packages.lock.json}")(basename10(file))));
+          break;
+        }
+        case "PIP": {
+          const sPurl = simplePurl(artifact.type, artifact.namespace ?? "", artifact.name, artifact.version ?? "");
+          if (pipArtifactToRepresentativeManifest[sPurl]) {
+            manifestFiles.push(...(pipArtifactToRepresentativeManifest[sPurl].manifestFiles ?? []).map((ref) => ref.file));
+          }
+          processToplevelAncestors2(artifact);
+          break;
+        }
+        default: {
+          artifact.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file));
+          processToplevelAncestors2(artifact);
+          break;
+        }
+      }
+      const workspaceToManifestFiles = {};
+      manifestFiles.forEach((manifestFile) => {
+        const workspace = inferWorkspaceFromManifestPath(ecosystem, manifestFile, properPythonProjects);
+        if (!workspace)
+          return;
+        (workspaceToManifestFiles[workspace] ??= []).push(manifestFile);
+      });
+      if (Object.keys(workspaceToManifestFiles).length === 0) {
+        manifestFiles.forEach((manifestFile) => {
+          const workspace = inferProjectFromManifestPath(ecosystem, manifestFile);
+          if (!workspace)
+            return;
+          (workspaceToManifestFiles[workspace] ??= []).push(manifestFile);
+        });
+      }
+      if (Object.keys(workspaceToManifestFiles).length === 0 && artifact.vulnerabilities && artifact.vulnerabilities.length > 0) {
+        const purl = new import_packageurl_js2.PackageURL(artifact.type, artifact.namespace, artifact.name, artifact.version, artifact.qualifiers).toString();
+        purlsFailedToFindWorkspace.add(purl);
+      }
+      for (const [workspace, manifestFiles2] of Object.entries(workspaceToManifestFiles)) {
+        const workspaceData = (ecosystemToWorkspaceToAnalysisData[ecosystem] ??= {})[workspace] ??= {
+          type: "socket",
+          data: {
+            type: ecosystem,
+            manifestFiles: manifestFiles2,
+            artifacts: []
+          }
+        };
+        workspaceData.type;
+        workspaceData.data.artifacts.push(artifact);
+      }
+      if (artifact.vulnerabilities && artifact.vulnerabilities.length > 0) {
+        for (const workspace of Object.keys(workspaceToManifestFiles)) {
+          for (const vuln of artifact.vulnerabilities) {
+            const vulnerability = {
+              url: vuln.ghsaId,
+              purlType: artifact.type,
+              range: vuln.range,
+              name: artifact.name ?? "",
+              dependency: artifact.name ?? "",
+              vulnChainDetails: computeVulnChainDetails(artifacts, artifact.id),
+              vulnerabilityAccessPaths: vuln.reachabilityData?.undeterminableReachability ? vuln.reachabilityData.publicComment ?? "" : vuln.reachabilityData?.pattern ?? null,
+              ecosystem,
+              artifactId: artifact.id
+            };
+            const vulnId = `${ecosystem}-${workspace}-${vulnerability.url}`;
+            if (!ecosystemWorkspaceVulnIds.has(vulnId)) {
+              ecosystemWorkspaceVulnIds.add(vulnId);
+              ((ecosystemToWorkspaceToVulnerabilities[ecosystem] ??= {})[workspace] ??= []).push(vulnerability);
+            }
+          }
+        }
+      }
+    }
+    if (purlsFailedToFindWorkspace.size > 0) {
+      logger.warn(`Failed to find workspace for the following purls with vulnerabilities: ${Array.from(purlsFailedToFindWorkspace).join(", ")}.
+${mode === "reachability" ? "This means that we will not do a full reachability analysis for these vulnerabilities, but fallback to the results from the pre-computed reachability analysis." : ""}`);
+    }
+    return {
+      artifacts,
+      ecosystemToWorkspaceToAnalysisData,
+      ecosystemToWorkspaceToVulnerabilities
+    };
+  } catch (error) {
+    logger.error("Failed to fetch artifacts from Socket backend", error);
+    throw error;
+  }
+}
+function computeVulnChainDetails(artifacts, vulnerableArtifactId) {
+  const artifactMap = new Map(artifacts.map((a4) => [a4.id, a4]));
+  const parentsMap = /* @__PURE__ */ new Map();
+  for (const artifact of artifacts) {
+    if (artifact.dependencies) {
+      for (const depId of artifact.dependencies) {
+        if (!parentsMap.has(depId)) {
+          parentsMap.set(depId, []);
+        }
+        parentsMap.get(depId).push(artifact.id);
+      }
+    }
+  }
+  const res = {
+    packageName: "root",
+    version: "0.0.0",
+    children: [],
+    transitiveDependencies: {}
+  };
+  function addNode(currentId, childId, visited) {
+    if (visited.has(currentId))
+      return;
+    const currentArtifact = artifactMap.get(currentId);
+    if (!currentArtifact)
+      return;
+    const parents4 = parentsMap.get(currentId);
+    const newCurrentNode = {
+      packageName: getNameFromNamespaceAndName(currentArtifact.type, currentArtifact.namespace, currentArtifact.name),
+      version: currentArtifact.version ?? void 0,
+      children: []
+    };
+    res.transitiveDependencies[currentId] = newCurrentNode;
+    if (childId && !newCurrentNode.children.includes(childId)) {
+      newCurrentNode.children.push(childId);
+    }
+    if (currentId === vulnerableArtifactId) {
+      newCurrentNode.vulnerable = true;
+    }
+    if (currentArtifact.direct && !res.children.includes(currentId)) {
+      res.children.push(currentId);
+    }
+    visited.add(currentId);
+    if (parents4) {
+      for (const parentId of parents4) {
+        addNode(parentId, currentId, visited);
+      }
+    }
+  }
+  addNode(vulnerableArtifactId, void 0, /* @__PURE__ */ new Set());
+  return res;
+}
+
+// dist/cli-upgrade-purl.js
+var ECOSYSTEMS_WITH_SOCKET_UPGRADES = ["NPM", "MAVEN", "NUGET", "GO", "RUST"];
+async function upgradePurl(rootDir, upgrades, options, logFile, cliFixRunId, prefetchedArtifacts) {
+  if (options.rangeStyle && options.rangeStyle !== "pin") {
+    throw new Error('Range style must be "pin"');
+  }
+  logger.initWinstonLogger(options.debug);
+  logger.silent = options.silent;
+  let cliRunId = cliFixRunId;
+  if (!cliRunId && options.manifestsTarHash) {
+    cliRunId = await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "upgrade-purls");
+  }
+  const upgradePurlRunId = cliRunId && await getSocketAPI().registerUpgradePurlRun(cliRunId, upgrades);
+  Spinner.instance({
+    text: "Running Coana Upgrade Purl CLI",
+    isSilent: options.silentSpinner ?? options.silent
+  }).start();
+  try {
+    logger.info(`Upgrading purls for ${rootDir}: 
+${upgrades.map(({ purl, upgradeVersion }) => `	${prettyPrintPurlUpgrade(purl, upgradeVersion)}`).join("\n")}`);
+    if (options.manifestsTarHash) {
+      const { supportedUpgrades, unsupportedUpgrades } = upgrades.reduce((acc, upgrade) => {
+        const ecosystem = getAdvisoryEcosystemFromPurl(upgrade.purl);
+        const target = ECOSYSTEMS_WITH_SOCKET_UPGRADES.includes(ecosystem) ? "supportedUpgrades" : "unsupportedUpgrades";
+        acc[target].push(upgrade);
+        return acc;
+      }, { supportedUpgrades: [], unsupportedUpgrades: [] });
+      if (unsupportedUpgrades.length > 0) {
+        logger.warn(`The following upgrades are not supported due to missing support for upgrading their ecosystem: ${unsupportedUpgrades.map(({ purl, upgradeVersion }) => `	${prettyPrintPurlUpgrade(purl, upgradeVersion)}`).join("\n")}`);
+      }
+      if (supportedUpgrades.length === 0) {
+        return "fixed-none";
+      }
+      try {
+        const purlToUpgradeVersion = new Map(supportedUpgrades.map((upgrade) => [upgrade.purl, upgrade.upgradeVersion]));
+        const [manifestFiles, artifacts] = await Promise.all([
+          fetchManifestFilesFromManifestsTarHash(options.manifestsTarHash),
+          prefetchedArtifacts ?? (await fetchArtifactsFromSocket(rootDir, options.manifestsTarHash, "upgrade-purls")).artifacts
+        ]);
+        const ecosystemToSocketArtifactUpgrades = /* @__PURE__ */ new Map();
+        artifacts.forEach((artifact, idx) => {
+          if (!artifact.name)
+            return;
+          if (!artifact.version)
+            return;
+          const purl = new import_packageurl_js3.PackageURL(artifact.type, artifact.namespace, artifact.name, artifact.version, artifact.qualifiers).toString();
+          const upgradeVersion = purlToUpgradeVersion.get(purl);
+          if (!upgradeVersion)
+            return;
+          const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
+          if (!ecosystemToSocketArtifactUpgrades.has(ecosystem)) {
+            ecosystemToSocketArtifactUpgrades.set(ecosystem, /* @__PURE__ */ new Map());
+          }
+          const currentUpgradeVersion = ecosystemToSocketArtifactUpgrades.get(ecosystem).get(idx);
+          if (currentUpgradeVersion === void 0) {
+            ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, upgradeVersion);
+          } else {
+            const versions = sortVersions(ecosystem, [artifact.version, currentUpgradeVersion, upgradeVersion]);
+            if (versionSatisfiesRelation(ecosystem, artifact.version, "=", versions[0])) {
+              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[versions.length - 1]);
+            } else if (versionSatisfiesRelation(ecosystem, artifact.version, "=", versions[versions.length - 1])) {
+              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[0]);
+            } else {
+              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[versions.length - 1]);
+            }
+          }
+        });
+        let anyErrors = false;
+        for (const [ecosystem, upgrades2] of ecosystemToSocketArtifactUpgrades) {
+          if (options.rangeStyle && !["NPM", "MAVEN", "NUGET", "RUST"].includes(ecosystem)) {
+            logger.warn(`Range style is not supported for ${ecosystem}, skipping upgrades`);
+            continue;
+          }
+          const statusUpdater = (update2) => {
+            const statusIcons = {
+              success: "\u2705",
+              skipped: "\u26AA",
+              warn: "\u26A0\uFE0F",
+              error: "\u274C"
+            };
+            logger.info(`${statusIcons[update2.status]} ${update2.message} \u2500 ${relative14(rootDir, resolve32(rootDir, update2.file))}`);
+            update2.artifacts.forEach((idx, i7) => {
+              logger.info(`${" ".repeat(3)}${i7 === update2.artifacts.length - 1 ? "\u2514\u2500" : "\u251C\u2500"} ${prettyPrintSocketFactArtifactUpgrade(artifacts[idx], upgrades2.get(idx))}`);
+            });
+            for (const detail of update2.details ?? []) {
+              logger.debug(detail);
+            }
+            if (update2.patch)
+              logger.debug(update2.patch);
+            if (update2.status === "error")
+              anyErrors = true;
+          };
+          const ctxt = {
+            manifestFiles,
+            upgrades: upgrades2,
+            artifacts,
+            rangeStyle: options.rangeStyle,
+            statusUpdater
+          };
+          await applySocketUpgrades(ecosystem, rootDir, ctxt);
+        }
+        if (upgradePurlRunId) {
+          await getSocketAPI().finalizeUpgradePurlRun(upgradePurlRunId, "succeeded");
+        }
+        return unsupportedUpgrades.length === 0 && !anyErrors ? "fixed-all" : "fixed-some";
+      } catch (error) {
+        if (upgradePurlRunId) {
+          await getSocketAPI().finalizeUpgradePurlRun(
+            upgradePurlRunId,
+            "error",
+            !cliFixRunId ? error.stack : void 0,
+            // do not send stack trace and logContent for computeFixes runs, as that will be handled by that command.
+            !cliFixRunId && logFile ? await logger.getLogContent(logFile) : void 0
+          );
+        }
+        throw error;
+      }
+    }
+    const otherModulesCommunicator = new OtherModulesCommunicator(rootDir, options, {
+      type: "missing"
+    });
+    const ecosystems = upgrades.map((upgrade) => getAdvisoryEcosystemFromPurl(upgrade.purl));
+    const manager = await ProjectManager.create(rootDir, otherModulesCommunicator, ecosystems);
+    const { reachabilitySupport, traditionalScaSupport } = manager.getSubprojectsWithWorkspacePaths();
+    const supportedSubprojects = reachabilitySupport.concat(traditionalScaSupport).filter((p3) => getPackageManagerSupport(p3.packageManagerName).supportsApplyingFixes);
+    if (supportedSubprojects.length === 0) {
+      throw new Error(`No supported projects found in ${rootDir}.`);
+    }
+    const subprojectPromiseQueue = new PromiseQueue(Number(options.concurrency));
+    supportedSubprojects.forEach((subproject) => {
+      subprojectPromiseQueue.enqueueTask(async () => {
+        const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => minimatch(join25(subproject.subprojectPath, wsPath), options.globPattern ?? "**"));
+        if (workspacePathsMatchingGlob.length === 0)
+          return;
+        logger.info(`Found workspaces for subproject ${subproject.subprojectPath}${options.globPattern ? `matching glob ${options.globPattern}` : ""}:
+${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
+        const fixingData = await otherModulesCommunicator.getFixingData(subproject.packageManagerName, subproject.subprojectPath, workspacePathsMatchingGlob);
+        const workspaceToFixes = {};
+        Object.entries(fixingData.dependencyTrees).forEach(([wsPath, depTree]) => {
+          const vulnerabilityFixes = [];
+          const simplePurlToDepId = getPurlStrings(depTree);
+          upgrades.forEach((upgrade) => {
+            const purl = import_packageurl_js3.PackageURL.fromString(upgrade.purl);
+            if (purl.version === void 0)
+              throw Error(`Undefined version for purl ${upgrade.purl}`);
+            const simplePurl2 = `pkg:${purl.type}/${purl.namespace ? `${purl.namespace}/` : ""}${purl.name}${purl.version ? `@${purl.version}` : ""}`;
+            for (const depIdMatchingPurl of simplePurlToDepId[simplePurl2] ?? []) {
+              const node = depTree.transitiveDependencies[depIdMatchingPurl];
+              if (!node)
+                throw Error("should not happen!");
+              vulnerabilityFixes.push({
+                dependencyName: node.packageName,
+                currentVersion: assertDefined(node.version),
+                dependencyIdentifier: depIdMatchingPurl,
+                fixedVersion: upgrade.upgradeVersion
+              });
+            }
+          });
+          if (vulnerabilityFixes.length === 0)
+            return;
+          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join25(subproject.subprojectPath, wsPath)}`);
+          workspaceToFixes[wsPath] = [
+            {
+              fixId: "dummy",
+              vulnerabilityFixes
+            }
+          ];
+        });
+        if (Object.entries(workspaceToFixes).length === 0) {
+          logger.info(`No dependencies matching upgrade specs found for subproject ${subproject.subprojectPath}`);
+          return;
+        }
+        await applySecurityFixes(subproject.packageManagerName, rootDir, relative14(rootDir, subproject.subprojectPath) || ".", otherModulesCommunicator, workspaceToFixes, fixingData, signalFixApplied);
+      });
+    });
+    await subprojectPromiseQueue.onIdle();
+  } finally {
+    Spinner.instance().stop();
+  }
+}
+var signalFixApplied = (_fixId, subprojectPath, workspacePath, vulnerabilityFixes) => {
+  logger.info(`Successfully upgraded purls for: ${join25(subprojectPath, workspacePath)}`);
+  logger.info(`Upgraded: 
+${vulnerabilityFixes.map((fix) => `	${fix.dependencyName} from ${fix.currentVersion} to ${fix.fixedVersion}`).join("\n")}`);
+};
+
+// dist/cli-compute-fixes-and-upgrade-purls.js
+async function computeFixesAndUpgradePurls(path2, options, logFile) {
+  const autofixRunId = options.manifestsTarHash && await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "autofix");
+  const { artifacts, ghsaToVulnerableArtifactIds, socketFactArtifacts } = await computeInputForComputingFixes(path2, options);
+  if (Object.keys(ghsaToVulnerableArtifactIds).length === 0) {
+    logger.info("No vulnerabilities to compute fixes for");
+    return { type: "no-vulnerabilities-found" };
+  }
+  if (options.applyFixesTo.length === 0) {
+    logger.info("Vulnerabilities found:", Object.keys(ghsaToVulnerableArtifactIds).join(", "));
+    logger.info("Run again with --apply-fixes-to GHSA_IDS to fix those vulnerabilities by computing packages to upgrade and apply them");
+    return { type: "no-ghsas-fix-requested", ghsas: Object.keys(ghsaToVulnerableArtifactIds) };
+  }
+  const ghsaToVulnerableArtifactIdsToApply = options.applyFixesTo.includes("all") ? ghsaToVulnerableArtifactIds : Object.fromEntries(Object.entries(ghsaToVulnerableArtifactIds).filter(([ghsa]) => options.applyFixesTo.includes(ghsa)));
+  const computedFix = await useSocketComputeFixEndpoint(autofixRunId, artifacts, ghsaToVulnerableArtifactIdsToApply, {
+    noMajorUpdates: options.disableMajorUpdates,
+    minimumReleaseAgeInMinutes: options.minimumReleaseAgeInMinutes
+  });
+  if (computedFix.type !== "success") {
+    throw new Error(`No fix found for the given vulnerabilities`);
+  }
+  const ghsasFailedToFix = Object.keys(ghsaToVulnerableArtifactIdsToApply).filter((ghsa) => {
+    const artifactIds = ghsaToVulnerableArtifactIdsToApply[ghsa];
+    if (!artifactIds)
+      return false;
+    return artifactIds.some((artifactId) => computedFix.ghsaToResult[ghsa].failedArtifacts?.includes(artifactId));
+  });
+  if (ghsasFailedToFix.length > 0) {
+    logger.info("Failed to compute fixes for the following vulnerabilities:");
+  }
+  for (const ghsa of ghsasFailedToFix) {
+    logger.info(`  - ${ghsa} (${ghsaToVulnerableArtifactIdsToApply[ghsa].map((id) => simplePurl(artifacts[id].type, artifacts[id].namespace ?? null, artifacts[id].name ?? "", artifacts[id].version ?? null)).join(", ")})`);
+  }
+  const fixesFound = Object.entries(computedFix.ghsaToResult).filter(([_, result]) => result.failedArtifacts === void 0 || result.failedArtifacts.length === 0);
+  if (options.onlyDirectDependencyUpgrades) {
+    return computeDirectDependencyUpgrades(artifacts, fixesFound);
+  }
+  const combinedFixes = fixesFound.flatMap(([_, result]) => result.fixes);
+  if (options.dryRun) {
+    logger.info("Fixes found:");
+    for (const [ghsa, result] of fixesFound) {
+      logger.info(`  - ${ghsa}:`);
+      for (const fix of result.fixes) {
+        logger.info(`    - ${fix.purl} -> ${fix.fixedVersion}`);
+      }
+    }
+    return {
+      type: "dry-run-result",
+      fixes: Object.fromEntries(fixesFound.map(([ghsa, result]) => [ghsa, result.fixes])),
+      ...ghsasFailedToFix.length > 0 && { failedToFix: ghsasFailedToFix }
+    };
+  }
+  if (combinedFixes.length === 0) {
+    if (autofixRunId) {
+      await getSocketAPI().finalizeAutofixRun(autofixRunId, "fixed-none");
+    }
+    throw new Error("Failed to find a fix for the given vulnerabilities");
+  }
+  try {
+    const applyFixesStatus = await upgradePurl(path2, T3(combinedFixes, (fix) => `${fix.purl}${fix.fixedVersion}`).map((fix) => ({
+      purl: fix.purl,
+      upgradeVersion: fix.fixedVersion
+    })), {
+      debug: options.debug,
+      silent: options.silent,
+      runWithoutDocker: options.runWithoutDocker,
+      manifestsTarHash: options.manifestsTarHash,
+      concurrency: "1",
+      globPattern: options.globPattern,
+      rangeStyle: options.rangeStyle
+    }, void 0, autofixRunId, socketFactArtifacts) ?? "fixed-all";
+    if (autofixRunId) {
+      await getSocketAPI().finalizeAutofixRun(autofixRunId, ghsasFailedToFix.length === 0 && applyFixesStatus === "fixed-all" ? "fixed-all" : ghsasFailedToFix.length === Object.keys(ghsaToVulnerableArtifactIdsToApply).length || applyFixesStatus === "fixed-none" ? "fixed-none" : "fixed-some");
+    }
+    return {
+      type: "applied-fixes",
+      fixes: Object.fromEntries(fixesFound.map(([ghsa, result]) => [ghsa, result.fixes]))
+    };
+  } catch (error) {
+    if (autofixRunId) {
+      await getSocketAPI().finalizeAutofixRun(autofixRunId, "error", error.stack, await logger.getLogContent(logFile));
+    }
+    logger.error("Error applying fixes:", error);
+    throw error;
+  }
+}
+async function computeInputForComputingFixes(path2, options) {
+  if (!options.manifestsTarHash)
+    throw new Error("Manifests tar hash is required for computing fixes");
+  const { artifacts } = await fetchArtifactsFromSocket(path2, options.manifestsTarHash, "autofix");
+  const ghsaToVulnerableArtifactIds = {};
+  for (const [index2, artifact] of artifacts.entries()) {
+    if (!artifact.vulnerabilities)
+      continue;
+    for (const vulnerability of artifact.vulnerabilities) {
+      if (!(ghsaToVulnerableArtifactIds[vulnerability.ghsaId] ??= []).includes(index2)) {
+        ghsaToVulnerableArtifactIds[vulnerability.ghsaId].push(index2);
+      }
+    }
+  }
+  const sbomTaskArtifacts = artifacts.map((artifact) => ({
+    type: artifact.type,
+    name: artifact.name ?? "",
+    version: artifact.version ?? "",
+    namespace: artifact.namespace ?? void 0,
+    adj: artifact.dependencies?.map((dep) => artifacts.findIndex((a4) => a4.id === dep)) ?? [],
+    direct: artifact.direct,
+    topLevelAncestors: artifact.toplevelAncestors?.map((ancestor) => artifacts.findIndex((a4) => a4.id === ancestor)) ?? []
+  }));
+  return { artifacts: sbomTaskArtifacts, ghsaToVulnerableArtifactIds, socketFactArtifacts: artifacts };
+}
+async function computeDirectDependencyUpgrades(artifacts, fixesFound) {
+  const purlToArtifact = Object.fromEntries(artifacts.map((a4) => [simplePurl(a4.type, a4.namespace ?? null, a4.name ?? "", a4.version ?? null), a4]));
+  const packageFixes = {};
+  for (const [ghsa, result2] of fixesFound) {
+    const directUpdates = {};
+    for (const directFix of result2.fixes.filter((fix) => purlToArtifact[fix.purl]?.direct)) {
+      directUpdates[directFix.purl] = { fixedVersion: directFix.fixedVersion };
+    }
+    const directUpdatePurls = Object.keys(directUpdates);
+    for (const indirectFix of result2.fixes.filter((fix) => !purlToArtifact[fix.purl]?.direct)) {
+      const directDependencies = purlToArtifact[indirectFix.purl]?.topLevelAncestors;
+      for (const directDependency of directDependencies) {
+        const artifact = artifacts[directDependency];
+        const purl = simplePurl(artifact.type, artifact.namespace ?? null, artifact.name ?? "", artifact.version ?? null);
+        if (directUpdatePurls.includes(purl))
+          continue;
+        if (directUpdates[purl]) {
+          (directUpdates[purl].transitiveFixes ??= []).push(indirectFix);
+        } else {
+          directUpdates[purl] = { transitiveFixes: [indirectFix] };
+        }
+        directUpdates[purl] = { transitiveFixes: [indirectFix] };
+      }
+    }
+    packageFixes[ghsa] = {
+      directDependencies: Object.entries(directUpdates).map(([purl, update2]) => ({ purl, ...update2 }))
+    };
+  }
+  const result = {
+    type: "only-direct-dependency-upgrades",
+    fixes: packageFixes
+  };
+  logger.info("Affected direct dependencies and upgrades to fix (--show-affected-direct-dependencies does not apply the upgrades):", JSON.stringify(result, null, 2));
+  return result;
+}
+
 // dist/cli-core.js
 import { writeFileSync as writeFileSync3 } from "fs";
 import { mkdir as mkdir2, writeFile as writeFile10 } from "fs/promises";
@@ -212564,7 +213280,7 @@ var bgWhiteBright = format5(107, 49);
 // dist/cli-core.js
 var import_lodash15 = __toESM(require_lodash(), 1);
 import os from "os";
-import { join as join26, relative as relative14, resolve as resolve33 } from "path";
+import { join as join27, relative as relative15, resolve as resolve34 } from "path";
 
 // ../utils/src/dashboard-api/shared-api.ts
 var DashboardAPI = class {
@@ -212673,79 +213389,6 @@ var DashboardAPI = class {
   }
 };
 
-// ../utils/src/promise-queue.ts
-var PromiseQueue = class {
-  /*
-   * @param maxConcurrency The maximum number of tasks that can run in parallel.
-   * @param maxQueueLength The maximum number of tasks that can be queued. If the queue is full, the oldest task is removed.
-   */
-  constructor(maxConcurrency, maxQueueLength) {
-    this.maxConcurrency = maxConcurrency;
-    this.maxQueueLength = maxQueueLength;
-    if (maxQueueLength && maxQueueLength < 1) {
-      throw new Error("maxQueueLength must be at least 1");
-    }
-    this.maxConcurrency = maxConcurrency;
-  }
-  queue = [];
-  activeTasks = 0;
-  idleResolver = null;
-  idleRejector = null;
-  error = null;
-  async runNextTask() {
-    if (this.activeTasks >= this.maxConcurrency) {
-      return;
-    }
-    const task = this.queue.shift();
-    if (task) {
-      this.activeTasks++;
-      try {
-        await task();
-      } catch (e) {
-        this.error = e;
-      } finally {
-        this.activeTasks--;
-        this.runNextTask();
-        this.checkIdle();
-      }
-    } else {
-      this.checkIdle();
-    }
-  }
-  checkIdle() {
-    if (!this.idleResolver || !this.idleRejector) return;
-    const shouldResolve = this.queue.length === 0 && this.activeTasks === 0;
-    if (this.error) this.idleRejector(this.error);
-    else if (shouldResolve) this.idleResolver();
-    const resolvedOrRejected = !!this.error || shouldResolve;
-    if (resolvedOrRejected) {
-      this.error = null;
-      this.idleResolver = null;
-      this.idleRejector = null;
-    }
-  }
-  enqueueTask(task) {
-    if (this.maxQueueLength && this.queue.length >= this.maxQueueLength) {
-      this.queue.shift();
-    }
-    this.queue.push(task);
-    this.runNextTask();
-  }
-  async onIdle() {
-    return new Promise((resolve36, reject) => {
-      if (this.error) {
-        reject(this.error);
-        this.error = null;
-      } else if (this.queue.length === 0 && this.activeTasks === 0) {
-        resolve36();
-      } else {
-        this.idleResolver = resolve36;
-        this.idleRejector = reject;
-      }
-    });
-  }
-};
-
 // ../utils/src/vulnerable-paths-utils.ts
 function mkTrie() {
   return { children: {}, leaf: false };
@@ -212885,13 +213528,13 @@ var DEFAULT_REPORT_FILENAME_BASE = "coana-report";
 // dist/internal/exclude-dirs-from-configuration-files.js
 import { existsSync as existsSync20 } from "fs";
 import { readFile as readFile27 } from "fs/promises";
-import { basename as basename10, resolve as resolve32 } from "path";
+import { basename as basename11, resolve as resolve33 } from "path";
 var import_yaml2 = __toESM(require_dist11(), 1);
 async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
-  const socketYmlConfigFile = resolve32(rootWorkingDir, "socket.yml");
+  const socketYmlConfigFile = resolve33(rootWorkingDir, "socket.yml");
   if (existsSync20(socketYmlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYmlConfigFile);
-  const socketYamlConfigFile = resolve32(rootWorkingDir, "socket.yaml");
+  const socketYamlConfigFile = resolve33(rootWorkingDir, "socket.yaml");
   if (existsSync20(socketYamlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYamlConfigFile);
   return void 0;
@@ -212905,7 +213548,7 @@ async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
       return void 0;
     if (ignorePaths.some((ignorePath) => ignorePath.includes("!")))
       return void 0;
-    logger.info(`Inferring paths to exclude based on Socket config file: ${basename10(socketConfigFile)}`);
+    logger.info(`Inferring paths to exclude based on Socket config file: ${basename11(socketConfigFile)}`);
     return config3.projectIgnorePaths;
   } catch (e) {
     return void 0;
@@ -212962,7 +213605,7 @@ async function scanForVulnerabilitiesSocketMode(dependencyTree) {
           range: vulnerability.range,
           name: dependencyTreeNode.packageName,
           dependency: dependencyTreeNode.packageName,
-          vulnChainDetails: computeVulnChainDetails(dependencyTree, dependencyIdentifier, parentsMap),
+          vulnChainDetails: computeVulnChainDetails2(dependencyTree, dependencyIdentifier, parentsMap),
           vulnerabilityAccessPaths: vulnerability.reachabilityData?.pattern ?? null,
           ecosystem: dependencyTree.ecosystem
         });
@@ -212974,7 +213617,7 @@ async function scanForVulnerabilitiesSocketMode(dependencyTree) {
   }
   return vulnerabilities;
 }
-function computeVulnChainDetails(dependencyTree, dependencyIdentifier, parentsMap) {
+function computeVulnChainDetails2(dependencyTree, dependencyIdentifier, parentsMap) {
   const res = {
     packageName: "root",
     version: "0.0.0",
@@ -213011,293 +213654,6 @@ function transformToVulnChainNode(dependencyTree) {
   };
 }
 
-// dist/internal/socket-mode-helpers-socket-dependency-trees.js
-var import_packageurl_js2 = __toESM(require_packageurl_js(), 1);
-var import_picomatch4 = __toESM(require_picomatch2(), 1);
-import { basename as basename11, dirname as dirname13, join as join24, sep as sep5 } from "path";
-var REQUIREMENTS_FILES_SEARCH_DEPTH2 = 3;
-function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonProjects) {
-  switch (ecosystem) {
-    case "NPM": {
-      const base = basename11(manifestPath);
-      const dir = dirname13(manifestPath);
-      return base === "package.json" ? dir || "." : void 0;
-    }
-    case "MAVEN": {
-      return ".";
-    }
-    case "PIP": {
-      const base = basename11(manifestPath);
-      const dir = dirname13(manifestPath);
-      const workspaceDir = dir === "" ? "." : dir;
-      if (properPythonProjects.includes(workspaceDir)) {
-        return workspaceDir;
-      }
-      if (base === "poetry.lock" || base === "Pipfile.lock" || base === "uv.lock") {
-        return workspaceDir;
-      }
-      if (base.endsWith(".txt")) {
-        const properProjectDirs = properPythonProjects.filter((properProjectDir) => (properProjectDir === "." || workspaceDir === "." || workspaceDir.startsWith(properProjectDir)) && workspaceDir.replace(properProjectDir, "").split(sep5).length <= REQUIREMENTS_FILES_SEARCH_DEPTH2);
-        const longestProperProjectDir = l5(properProjectDirs, [(d4) => d4.length, "desc"]);
-        if (longestProperProjectDir) {
-          return longestProperProjectDir;
-        }
-        return workspaceDir;
-      }
-      logger.warn(`No workspace found for manifest file ${manifestPath}`);
-      return void 0;
-    }
-    case "NUGET": {
-      return ".";
-    }
-    case "RUST": {
-      return dirname13(manifestPath) || ".";
-    }
-    case "GO": {
-      const base = basename11(manifestPath);
-      const dir = dirname13(manifestPath);
-      return base === "go.mod" ? dir || "." : void 0;
-    }
-    default: {
-      return ".";
-    }
-  }
-}
-function inferProjectFromManifestPath(ecosystem, manifestPath) {
-  switch (ecosystem) {
-    case "NPM": {
-      const filename = basename11(manifestPath);
-      if (["package-lock.json", "pnpm-lock.yaml", "pnpm-lock.yml", "yarn.lock"].includes(filename)) {
-        return dirname13(manifestPath) || ".";
-      }
-      return void 0;
-    }
-  }
-}
-function getAllToplevelAncestors(artifactMap, artifactId) {
-  const visited = /* @__PURE__ */ new Set();
-  const toplevelAncestors = /* @__PURE__ */ new Set();
-  function findAncestors(currentId) {
-    if (visited.has(currentId)) {
-      return;
-    }
-    visited.add(currentId);
-    const artifact = artifactMap.get(currentId);
-    if (!artifact) {
-      return;
-    }
-    if (artifact.toplevelAncestors && artifact.toplevelAncestors.length > 0) {
-      for (const ancestorId of artifact.toplevelAncestors) {
-        toplevelAncestors.add(ancestorId);
-        findAncestors(ancestorId);
-      }
-    }
-  }
-  findAncestors(artifactId);
-  return Array.from(toplevelAncestors);
-}
-async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash, mode) {
-  logger.info("Fetching artifacts from Socket backend using manifests tar hash", manifestsTarHash);
-  try {
-    const { artifacts } = await fetchArtifactsFromManifestsTarHash(manifestsTarHash);
-    const properPythonProjects = [];
-    const pipArtifactToRepresentativeManifest = {};
-    for (const artifact of artifacts) {
-      if (artifact.type === "pypi" && artifact.manifestFiles) {
-        pipArtifactToRepresentativeManifest[simplePurl(artifact.type, artifact.namespace ?? "", artifact.name, artifact.version ?? "")] = artifact;
-      }
-    }
-    const venvExcludes = [
-      "venv",
-      ".venv",
-      "env",
-      ".env",
-      "virtualenv",
-      ".virtualenv",
-      "venvs",
-      ".venvs",
-      "envs",
-      ".envs",
-      "__pycache__",
-      ".tox",
-      ".nox",
-      ".pytest_cache",
-      "site-packages",
-      "dist-packages",
-      "conda-meta",
-      "conda-bld",
-      ".mypy_cache",
-      ".ruff_cache",
-      ".hypothesis"
-    ];
-    const allFiles = await getFilesRelative(rootWorkingDirectory, venvExcludes);
-    for (const file of allFiles) {
-      const base = basename11(file);
-      const workspaceDir = dirname13(file) || ".";
-      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join24(rootWorkingDirectory, file))) {
-        if (!properPythonProjects.includes(workspaceDir)) {
-          properPythonProjects.push(workspaceDir);
-        }
-      }
-    }
-    const artifactMap = new Map(artifacts.map((a4) => [a4.id, a4]));
-    const ecosystemToWorkspaceToAnalysisData = {};
-    const ecosystemWorkspaceVulnIds = /* @__PURE__ */ new Set();
-    const ecosystemToWorkspaceToVulnerabilities = {};
-    const purlsFailedToFindWorkspace = /* @__PURE__ */ new Set();
-    for (const artifact of artifacts) {
-      let processToplevelAncestors2 = function(artifact2) {
-        const allAncestorIds = getAllToplevelAncestors(artifactMap, artifact2.id);
-        allAncestorIds.forEach((ancestorId) => artifactMap.get(ancestorId)?.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file)));
-      };
-      var processToplevelAncestors = processToplevelAncestors2;
-      const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
-      if (!ecosystem)
-        continue;
-      const manifestFiles = [];
-      switch (ecosystem) {
-        case "MAVEN": {
-          manifestFiles.push(...(await getFilesRelative(rootWorkingDirectory)).filter((file) => (0, import_picomatch4.default)("{{*-*.,}pom{.xml,},gradle.lockfile}")(basename11(file))));
-          break;
-        }
-        case "NUGET": {
-          manifestFiles.push(...(await getFilesRelative(rootWorkingDirectory)).filter((file) => (0, import_picomatch4.default)("{*.csproj,packages.lock.json}")(basename11(file))));
-          break;
-        }
-        case "PIP": {
-          const sPurl = simplePurl(artifact.type, artifact.namespace ?? "", artifact.name, artifact.version ?? "");
-          if (pipArtifactToRepresentativeManifest[sPurl]) {
-            manifestFiles.push(...(pipArtifactToRepresentativeManifest[sPurl].manifestFiles ?? []).map((ref) => ref.file));
-          }
-          processToplevelAncestors2(artifact);
-          break;
-        }
-        default: {
-          artifact.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file));
-          processToplevelAncestors2(artifact);
-          break;
-        }
-      }
-      const workspaceToManifestFiles = {};
-      manifestFiles.forEach((manifestFile) => {
-        const workspace = inferWorkspaceFromManifestPath(ecosystem, manifestFile, properPythonProjects);
-        if (!workspace)
-          return;
-        (workspaceToManifestFiles[workspace] ??= []).push(manifestFile);
-      });
-      if (Object.keys(workspaceToManifestFiles).length === 0) {
-        manifestFiles.forEach((manifestFile) => {
-          const workspace = inferProjectFromManifestPath(ecosystem, manifestFile);
-          if (!workspace)
-            return;
-          (workspaceToManifestFiles[workspace] ??= []).push(manifestFile);
-        });
-      }
-      if (Object.keys(workspaceToManifestFiles).length === 0 && artifact.vulnerabilities && artifact.vulnerabilities.length > 0) {
-        const purl = new import_packageurl_js2.PackageURL(artifact.type, artifact.namespace, artifact.name, artifact.version, artifact.qualifiers).toString();
-        purlsFailedToFindWorkspace.add(purl);
-      }
-      for (const [workspace, manifestFiles2] of Object.entries(workspaceToManifestFiles)) {
-        const workspaceData = (ecosystemToWorkspaceToAnalysisData[ecosystem] ??= {})[workspace] ??= {
-          type: "socket",
-          data: {
-            type: ecosystem,
-            manifestFiles: manifestFiles2,
-            artifacts: []
-          }
-        };
-        workspaceData.type;
-        workspaceData.data.artifacts.push(artifact);
-      }
-      if (artifact.vulnerabilities && artifact.vulnerabilities.length > 0) {
-        for (const workspace of Object.keys(workspaceToManifestFiles)) {
-          for (const vuln of artifact.vulnerabilities) {
-            const vulnerability = {
-              url: vuln.ghsaId,
-              purlType: artifact.type,
-              range: vuln.range,
-              name: artifact.name ?? "",
-              dependency: artifact.name ?? "",
-              vulnChainDetails: computeVulnChainDetails2(artifacts, artifact.id),
-              vulnerabilityAccessPaths: vuln.reachabilityData?.undeterminableReachability ? vuln.reachabilityData.publicComment ?? "" : vuln.reachabilityData?.pattern ?? null,
-              ecosystem,
-              artifactId: artifact.id
-            };
-            const vulnId = `${ecosystem}-${workspace}-${vulnerability.url}`;
-            if (!ecosystemWorkspaceVulnIds.has(vulnId)) {
-              ecosystemWorkspaceVulnIds.add(vulnId);
-              ((ecosystemToWorkspaceToVulnerabilities[ecosystem] ??= {})[workspace] ??= []).push(vulnerability);
-            }
-          }
-        }
-      }
-    }
-    if (purlsFailedToFindWorkspace.size > 0) {
-      logger.warn(`Failed to find workspace for the following purls with vulnerabilities: ${Array.from(purlsFailedToFindWorkspace).join(", ")}.
-${mode === "reachability" ? "This means that we will not do a full reachability analysis for these vulnerabilities, but fallback to the results from the pre-computed reachability analysis." : ""}`);
-    }
-    return {
-      artifacts,
-      ecosystemToWorkspaceToAnalysisData,
-      ecosystemToWorkspaceToVulnerabilities
-    };
-  } catch (error) {
-    logger.error("Failed to fetch artifacts from Socket backend", error);
-    throw error;
-  }
-}
-function computeVulnChainDetails2(artifacts, vulnerableArtifactId) {
-  const artifactMap = new Map(artifacts.map((a4) => [a4.id, a4]));
-  const parentsMap = /* @__PURE__ */ new Map();
-  for (const artifact of artifacts) {
-    if (artifact.dependencies) {
-      for (const depId of artifact.dependencies) {
-        if (!parentsMap.has(depId)) {
-          parentsMap.set(depId, []);
-        }
-        parentsMap.get(depId).push(artifact.id);
-      }
-    }
-  }
-  const res = {
-    packageName: "root",
-    version: "0.0.0",
-    children: [],
-    transitiveDependencies: {}
-  };
-  function addNode(currentId, childId, visited) {
-    if (visited.has(currentId))
-      return;
-    const currentArtifact = artifactMap.get(currentId);
-    if (!currentArtifact)
-      return;
-    const parents4 = parentsMap.get(currentId);
-    const newCurrentNode = {
-      packageName: getNameFromNamespaceAndName(currentArtifact.type, currentArtifact.namespace, currentArtifact.name),
-      version: currentArtifact.version ?? void 0,
-      children: []
-    };
-    res.transitiveDependencies[currentId] = newCurrentNode;
-    if (childId && !newCurrentNode.children.includes(childId)) {
-      newCurrentNode.children.push(childId);
-    }
-    if (currentId === vulnerableArtifactId) {
-      newCurrentNode.vulnerable = true;
-    }
-    if (currentArtifact.direct && !res.children.includes(currentId)) {
-      res.children.push(currentId);
-    }
-    visited.add(currentId);
-    if (parents4) {
-      for (const parentId of parents4) {
-        addNode(parentId, currentId, visited);
-      }
-    }
-  }
-  addNode(vulnerableArtifactId, void 0, /* @__PURE__ */ new Set());
-  return res;
-}
-
 // dist/internal/socket-report-coana-dependency-tree.js
 var MAX_STACKS_TO_SEND = 10;
 function toSocketFacts(report, dependencyTrees, subPjToWsPathToDirectDependencies) {
@@ -226988,7 +227344,7 @@ var { root: root2 } = static_exports;
 // ../utils/src/maven-utils.ts
 var import_lodash14 = __toESM(require_lodash(), 1);
 import { existsSync as existsSync21, readdirSync as readdirSync4, statSync as statSync3 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var { memoize: memoize3 } = import_lodash14.default;
 var memoizedParseShellArgs = memoize3(parseShellArgs);
 var MAVEN_PUBLIC_REPOSITORIES = [
@@ -227671,12 +228027,6 @@ var InMemoryVulnerabilityMetadataStore = class {
   }
 };
 
-// ../web-compat-utils/src/assertions.ts
-function assertDefined(value) {
-  if (value === void 0 || value === null) throw new Error("Expected value to be defined");
-  return value;
-}
-
 // ../security-auditor/security-auditor-api/src/fixes-task.ts
 var MESSAGE_PREFIX_FOR_FAILED_TO_PICK_VERSION = `Failed to pick a version`;
 var MESSAGE_PREFIX_FOR_NO_POTENTIAL_VERSIONS = `No potential versions`;
@@ -228359,7 +228709,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.12.42";
+var version2 = "14.12.44";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;
@@ -228389,7 +228739,7 @@ var CliCore = class {
         throw new Error("Invalid analysis timeout value");
       }
     }
-    this.rootWorkingDirectory = resolve33(rootWorkingDirectory);
+    this.rootWorkingDirectory = resolve34(rootWorkingDirectory);
     this.spinner = Spinner.instance({
       text: "Running Coana CLI",
       isSilent: this.options.silentSpinner ?? this.options.silent
@@ -228464,7 +228814,7 @@ var CliCore = class {
     }
   }
   async main() {
-    this.coanaLogPath = join26(await createTmpDirectory("coana-cli-"), "coana-log.txt");
+    this.coanaLogPath = join27(await createTmpDirectory("coana-cli-"), "coana-log.txt");
     logger.initWinstonLogger(this.options.debug, this.coanaLogPath);
     logger.silent = this.options.silent;
     try {
@@ -228562,7 +228912,7 @@ var CliCore = class {
       this.sendProgress("RUN_ON_SUBPROJECT", false, this.rootWorkingDirectory);
     }
     const socketReport = toSocketFactsSocketDependencyTree(artifacts, vulnsWithResults, this.reportId);
-    const outputFile = resolve33(this.options.socketMode);
+    const outputFile = resolve34(this.options.socketMode);
     await writeFile10(outputFile, JSON.stringify(socketReport, null, 2));
     logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
   }
@@ -228580,13 +228930,13 @@ var CliCore = class {
         throw new Error("Dependency trees should be available when using --socket-mode");
       }
       const socketReport = toSocketFacts(report, this.reportDependencyTrees, subPjToWsPathToDirectDependencies);
-      const outputFile = resolve33(this.options.socketMode);
+      const outputFile = resolve34(this.options.socketMode);
       await writeFile10(outputFile, JSON.stringify(socketReport, null, 2));
       logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
       return;
     }
     if (outputDir) {
-      const jsonReportPath = resolve33(outputDir, `${DEFAULT_REPORT_FILENAME_BASE}.json`);
+      const jsonReportPath = resolve34(outputDir, `${DEFAULT_REPORT_FILENAME_BASE}.json`);
       await mkdir2(outputDir, { recursive: true });
       writeFileSync3(jsonReportPath, JSON.stringify(report, null, 2));
       logger.info(kleur_default.green(`JSON report written to: ${jsonReportPath}`));
@@ -228624,7 +228974,7 @@ var CliCore = class {
     const { reachabilitySupport, traditionalScaSupport, noSupport } = manager.getSubprojectsWithWorkspacePaths();
     await this.dashboardAPI.registerSubprojects([...reachabilitySupport, ...traditionalScaSupport, ...noSupport].map((sp) => ({
       ...sp,
-      subprojectPath: relative14(this.rootWorkingDirectory, sp.subprojectPath) || "."
+      subprojectPath: relative15(this.rootWorkingDirectory, sp.subprojectPath) || "."
     })), this.reportId, this.apiKey);
     for (const unsupported of noSupport)
       logger.warn(unsupported.unsupportedMsg);
@@ -228653,7 +229003,7 @@ var CliCore = class {
           await this.spinner.succeed();
         } catch (error) {
           if (this.options.ignoreFailingWorkspaces) {
-            const relativeSubprojectPath = relative14(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
+            const relativeSubprojectPath = relative15(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
             this.failedSubprojects.push({
               subproject: relativeSubprojectPath,
               error: error.message || "Unknown error"
@@ -228712,7 +229062,7 @@ Subproject: ${subproject}`);
   }
   async updateSpinnerTextOnNewSubproject(subprojectAndWsPath, numberSubprojects, index2) {
     this.spinner.start();
-    const relativeSubprojectPath = relative14(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
+    const relativeSubprojectPath = relative15(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
     await this.spinner.setText(numberSubprojects > 1 ? `Processing subproject ${relativeSubprojectPath} (${index2 + 1}/${numberSubprojects})${+this.options.concurrency > 1 ? `. May process up to ${+this.options.concurrency - 1} other workspaces in parallel` : ""}` : `Processing ${relativeSubprojectPath}`);
   }
   async initialize() {
@@ -228790,7 +229140,7 @@ Subproject: ${subproject}`);
         return workspaceToAugmentedVulnerabilities[workspacePath] !== void 0;
       }).map((workspacePath) => {
         return {
-          subprojectPath: relative14(this.rootWorkingDirectory, subprojectPath) || ".",
+          subprojectPath: relative15(this.rootWorkingDirectory, subprojectPath) || ".",
           workspacePath,
           directDependencies: projectInfo[workspacePath].dataForAnalysis.directDependenciesMap ?? {},
           vulnerabilities: workspaceToAugmentedVulnerabilities[workspacePath],
@@ -228889,7 +229239,7 @@ Subproject: ${subproject}`);
       excludeDirs: this.options.excludeDirs ?? [],
       changedFiles: this.options.changedFiles,
       includeDirs: this.options.includeDirs ?? []
-    }, resolve33(subprojectPath, workspacePath));
+    }, resolve34(subprojectPath, workspacePath));
     if (shouldExcludeWorkspaceForAnalysis) {
       logger.info(`Skipping reachability analysis for workspace ${workspacePath} due to it being excluded.`);
     }
@@ -228920,7 +229270,7 @@ Subproject: ${subproject}`);
   async sendProgress(type, isStartEvent, subprojectPath, workspacePath) {
     await this.dashboardAPI.registerCLIProgress({
       type,
-      ...subprojectPath ? { subprojectPath: relative14(this.rootWorkingDirectory, subprojectPath) || "." } : {},
+      ...subprojectPath ? { subprojectPath: relative15(this.rootWorkingDirectory, subprojectPath) || "." } : {},
       ...workspacePath ? { workspacePath } : {}
     }, isStartEvent, this.reportId, this.apiKey);
   }
@@ -228976,7 +229326,7 @@ Subproject: ${subproject}`);
       dependencyTree: workspaceToPlainDependencyTree[workspacePath],
       ecosystem: workspaceToPlainDependencyTree[workspacePath].ecosystem ?? "NPM",
       workspacePath,
-      subprojectPath: relative14(rootWorkingDirectory, subprojectPath) || "."
+      subprojectPath: relative15(rootWorkingDirectory, subprojectPath) || "."
     }));
     if (this.options.socketMode) {
       this.reportDependencyTrees = workspacePaths.map((workspacePath) => ({
@@ -228984,7 +229334,7 @@ Subproject: ${subproject}`);
         dependencyTree: projectInfo[workspacePath].dataForAnalysis.data.dependencyTree,
         ecosystem: projectInfo[workspacePath].dataForAnalysis.data.dependencyTree.ecosystem ?? "NPM",
         workspacePath,
-        subprojectPath: relative14(rootWorkingDirectory, subprojectPath) || "."
+        subprojectPath: relative15(rootWorkingDirectory, subprojectPath) || "."
       }));
     }
     if (this.shareWithDashboard)
@@ -229000,7 +229350,7 @@ Subproject: ${subproject}`);
       } catch (e) {
         logger.error(`Scanning for vulnerabilities failed for subproject ${subprojectPath} in workspace ${workspacePath}`);
         if (this.options.ignoreFailingWorkspaces) {
-          const relativeSubprojectPath = relative14(this.rootWorkingDirectory, subprojectPath) || ".";
+          const relativeSubprojectPath = relative15(this.rootWorkingDirectory, subprojectPath) || ".";
           this.failedWorkspaces.push({
             subproject: relativeSubprojectPath,
             workspace: workspacePath,
@@ -229019,7 +229369,7 @@ Subproject: ${subproject}`);
   }
 };
 function getRelativeSubprojectPath(subprojectPath, projectDir) {
-  return relative14(projectDir, subprojectPath) || ".";
+  return relative15(projectDir, subprojectPath) || ".";
 }
 function getDependencyType(vulnChainDetails, codeAwareScanResults, directDependencies, reachability) {
   if (reachability === "UNREACHABLE" || reachability === "UNKNOWN") {
@@ -229063,369 +229413,6 @@ async function getGitDataToMetadataIfAvailable(rootWorkingDirectory) {
   }
 }
 
-// dist/cli-upgrade-purl.js
-import { join as join27, relative as relative15, resolve as resolve34 } from "node:path";
-var import_packageurl_js3 = __toESM(require_packageurl_js(), 1);
-var ECOSYSTEMS_WITH_SOCKET_UPGRADES = ["NPM", "MAVEN", "NUGET", "GO", "RUST"];
-async function upgradePurl(rootDir, upgrades, options, logFile, cliFixRunId) {
-  if (options.rangeStyle && options.rangeStyle !== "pin") {
-    throw new Error('Range style must be "pin"');
-  }
-  logger.initWinstonLogger(options.debug);
-  logger.silent = options.silent;
-  let cliRunId = cliFixRunId;
-  if (!cliRunId && options.manifestsTarHash) {
-    cliRunId = await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "upgrade-purls");
-  }
-  const upgradePurlRunId = cliRunId && await getSocketAPI().registerUpgradePurlRun(cliRunId, upgrades);
-  Spinner.instance({
-    text: "Running Coana Upgrade Purl CLI",
-    isSilent: options.silentSpinner ?? options.silent
-  }).start();
-  try {
-    logger.info(`Upgrading purls for ${rootDir}: 
-${upgrades.map(({ purl, upgradeVersion }) => `	${prettyPrintPurlUpgrade(purl, upgradeVersion)}`).join("\n")}`);
-    if (options.manifestsTarHash) {
-      const { supportedUpgrades, unsupportedUpgrades } = upgrades.reduce((acc, upgrade) => {
-        const ecosystem = getAdvisoryEcosystemFromPurl(upgrade.purl);
-        const target = ECOSYSTEMS_WITH_SOCKET_UPGRADES.includes(ecosystem) ? "supportedUpgrades" : "unsupportedUpgrades";
-        acc[target].push(upgrade);
-        return acc;
-      }, { supportedUpgrades: [], unsupportedUpgrades: [] });
-      if (unsupportedUpgrades.length > 0) {
-        logger.warn(`The following upgrades are not supported due to missing support for upgrading their ecosystem: ${unsupportedUpgrades.map(({ purl, upgradeVersion }) => `	${prettyPrintPurlUpgrade(purl, upgradeVersion)}`).join("\n")}`);
-      }
-      if (supportedUpgrades.length === 0) {
-        return "fixed-none";
-      }
-      try {
-        const purlToUpgradeVersion = new Map(supportedUpgrades.map((upgrade) => [upgrade.purl, upgrade.upgradeVersion]));
-        const [manifestFiles, artifacts] = await Promise.all([
-          fetchManifestFilesFromManifestsTarHash(options.manifestsTarHash),
-          (await fetchArtifactsFromSocket(rootDir, options.manifestsTarHash, "upgrade-purls")).artifacts
-        ]);
-        const ecosystemToSocketArtifactUpgrades = /* @__PURE__ */ new Map();
-        artifacts.forEach((artifact, idx) => {
-          if (!artifact.name)
-            return;
-          if (!artifact.version)
-            return;
-          const purl = new import_packageurl_js3.PackageURL(artifact.type, artifact.namespace, artifact.name, artifact.version, artifact.qualifiers).toString();
-          const upgradeVersion = purlToUpgradeVersion.get(purl);
-          if (!upgradeVersion)
-            return;
-          const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
-          if (!ecosystemToSocketArtifactUpgrades.has(ecosystem)) {
-            ecosystemToSocketArtifactUpgrades.set(ecosystem, /* @__PURE__ */ new Map());
-          }
-          const currentUpgradeVersion = ecosystemToSocketArtifactUpgrades.get(ecosystem).get(idx);
-          if (currentUpgradeVersion === void 0) {
-            ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, upgradeVersion);
-          } else {
-            const versions = sortVersions(ecosystem, [artifact.version, currentUpgradeVersion, upgradeVersion]);
-            if (versionSatisfiesRelation(ecosystem, artifact.version, "=", versions[0])) {
-              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[versions.length - 1]);
-            } else if (versionSatisfiesRelation(ecosystem, artifact.version, "=", versions[versions.length - 1])) {
-              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[0]);
-            } else {
-              ecosystemToSocketArtifactUpgrades.get(ecosystem).set(idx, versions[versions.length - 1]);
-            }
-          }
-        });
-        let anyErrors = false;
-        for (const [ecosystem, upgrades2] of ecosystemToSocketArtifactUpgrades) {
-          if (options.rangeStyle && !["NPM", "MAVEN", "NUGET", "RUST"].includes(ecosystem)) {
-            logger.warn(`Range style is not supported for ${ecosystem}, skipping upgrades`);
-            continue;
-          }
-          const statusUpdater = (update2) => {
-            const statusIcons = {
-              success: "\u2705",
-              skipped: "\u26AA",
-              warn: "\u26A0\uFE0F",
-              error: "\u274C"
-            };
-            logger.info(`${statusIcons[update2.status]} ${update2.message} \u2500 ${relative15(rootDir, resolve34(rootDir, update2.file))}`);
-            update2.artifacts.forEach((idx, i7) => {
-              logger.info(`${" ".repeat(3)}${i7 === update2.artifacts.length - 1 ? "\u2514\u2500" : "\u251C\u2500"} ${prettyPrintSocketFactArtifactUpgrade(artifacts[idx], upgrades2.get(idx))}`);
-            });
-            for (const detail of update2.details ?? []) {
-              logger.debug(detail);
-            }
-            if (update2.patch)
-              logger.debug(update2.patch);
-            if (update2.status === "error")
-              anyErrors = true;
-          };
-          const ctxt = {
-            manifestFiles,
-            upgrades: upgrades2,
-            artifacts,
-            rangeStyle: options.rangeStyle,
-            statusUpdater
-          };
-          await applySocketUpgrades(ecosystem, rootDir, ctxt);
-        }
-        if (upgradePurlRunId) {
-          await getSocketAPI().finalizeUpgradePurlRun(upgradePurlRunId, "succeeded");
-        }
-        return unsupportedUpgrades.length === 0 && !anyErrors ? "fixed-all" : "fixed-some";
-      } catch (error) {
-        if (upgradePurlRunId) {
-          await getSocketAPI().finalizeUpgradePurlRun(
-            upgradePurlRunId,
-            "error",
-            !cliFixRunId ? error.stack : void 0,
-            // do not send stack trace and logContent for computeFixes runs, as that will be handled by that command.
-            !cliFixRunId && logFile ? await logger.getLogContent(logFile) : void 0
-          );
-        }
-        throw error;
-      }
-    }
-    const otherModulesCommunicator = new OtherModulesCommunicator(rootDir, options, {
-      type: "missing"
-    });
-    const ecosystems = upgrades.map((upgrade) => getAdvisoryEcosystemFromPurl(upgrade.purl));
-    const manager = await ProjectManager.create(rootDir, otherModulesCommunicator, ecosystems);
-    const { reachabilitySupport, traditionalScaSupport } = manager.getSubprojectsWithWorkspacePaths();
-    const supportedSubprojects = reachabilitySupport.concat(traditionalScaSupport).filter((p3) => getPackageManagerSupport(p3.packageManagerName).supportsApplyingFixes);
-    if (supportedSubprojects.length === 0) {
-      throw new Error(`No supported projects found in ${rootDir}.`);
-    }
-    const subprojectPromiseQueue = new PromiseQueue(Number(options.concurrency));
-    supportedSubprojects.forEach((subproject) => {
-      subprojectPromiseQueue.enqueueTask(async () => {
-        const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => minimatch(join27(subproject.subprojectPath, wsPath), options.globPattern ?? "**"));
-        if (workspacePathsMatchingGlob.length === 0)
-          return;
-        logger.info(`Found workspaces for subproject ${subproject.subprojectPath}${options.globPattern ? `matching glob ${options.globPattern}` : ""}:
-${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
-        const fixingData = await otherModulesCommunicator.getFixingData(subproject.packageManagerName, subproject.subprojectPath, workspacePathsMatchingGlob);
-        const workspaceToFixes = {};
-        Object.entries(fixingData.dependencyTrees).forEach(([wsPath, depTree]) => {
-          const vulnerabilityFixes = [];
-          const simplePurlToDepId = getPurlStrings(depTree);
-          upgrades.forEach((upgrade) => {
-            const purl = import_packageurl_js3.PackageURL.fromString(upgrade.purl);
-            if (purl.version === void 0)
-              throw Error(`Undefined version for purl ${upgrade.purl}`);
-            const simplePurl2 = `pkg:${purl.type}/${purl.namespace ? `${purl.namespace}/` : ""}${purl.name}${purl.version ? `@${purl.version}` : ""}`;
-            for (const depIdMatchingPurl of simplePurlToDepId[simplePurl2] ?? []) {
-              const node = depTree.transitiveDependencies[depIdMatchingPurl];
-              if (!node)
-                throw Error("should not happen!");
-              vulnerabilityFixes.push({
-                dependencyName: node.packageName,
-                currentVersion: assertDefined(node.version),
-                dependencyIdentifier: depIdMatchingPurl,
-                fixedVersion: upgrade.upgradeVersion
-              });
-            }
-          });
-          if (vulnerabilityFixes.length === 0)
-            return;
-          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join27(subproject.subprojectPath, wsPath)}`);
-          workspaceToFixes[wsPath] = [
-            {
-              fixId: "dummy",
-              vulnerabilityFixes
-            }
-          ];
-        });
-        if (Object.entries(workspaceToFixes).length === 0) {
-          logger.info(`No dependencies matching upgrade specs found for subproject ${subproject.subprojectPath}`);
-          return;
-        }
-        await applySecurityFixes(subproject.packageManagerName, rootDir, relative15(rootDir, subproject.subprojectPath) || ".", otherModulesCommunicator, workspaceToFixes, fixingData, signalFixApplied);
-      });
-    });
-    await subprojectPromiseQueue.onIdle();
-  } finally {
-    Spinner.instance().stop();
-  }
-}
-var signalFixApplied = (_fixId, subprojectPath, workspacePath, vulnerabilityFixes) => {
-  logger.info(`Successfully upgraded purls for: ${join27(subprojectPath, workspacePath)}`);
-  logger.info(`Upgraded: 
-${vulnerabilityFixes.map((fix) => `	${fix.dependencyName} from ${fix.currentVersion} to ${fix.fixedVersion}`).join("\n")}`);
-};
-
-// dist/cli-compute-fixes-and-upgrade-purls.js
-async function computeFixesAndUpgradePurls(path2, options, logFile) {
-  const autofixRunId = options.manifestsTarHash && await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "autofix");
-  const { artifacts, ghsaToVulnerableArtifactIds } = await computeInputForComputingFixes(path2, options);
-  if (Object.keys(ghsaToVulnerableArtifactIds).length === 0) {
-    logger.info("No vulnerabilities to compute fixes for");
-    return { type: "no-vulnerabilities-found" };
-  }
-  if (options.applyFixesTo.length === 0) {
-    logger.info("Vulnerabilities found:", Object.keys(ghsaToVulnerableArtifactIds).join(", "));
-    logger.info("Run again with --apply-fixes-to GHSA_IDS to fix those vulnerabilities by computing packages to upgrade and apply them");
-    return { type: "no-ghsas-fix-requested", ghsas: Object.keys(ghsaToVulnerableArtifactIds) };
-  }
-  const ghsaToVulnerableArtifactIdsToApply = options.applyFixesTo.includes("all") ? ghsaToVulnerableArtifactIds : Object.fromEntries(Object.entries(ghsaToVulnerableArtifactIds).filter(([ghsa]) => options.applyFixesTo.includes(ghsa)));
-  const computedFix = await useSocketComputeFixEndpoint(autofixRunId, artifacts, ghsaToVulnerableArtifactIdsToApply, {
-    noMajorUpdates: options.disableMajorUpdates,
-    minimumReleaseAgeInMinutes: options.minimumReleaseAgeInMinutes
-  });
-  if (computedFix.type !== "success") {
-    throw new Error(`No fix found for the given vulnerabilities`);
-  }
-  const ghsasFailedToFix = Object.keys(ghsaToVulnerableArtifactIdsToApply).filter((ghsa) => {
-    const artifactIds = ghsaToVulnerableArtifactIdsToApply[ghsa];
-    if (!artifactIds)
-      return false;
-    return artifactIds.some((artifactId) => computedFix.ghsaToResult[ghsa].failedArtifacts?.includes(artifactId));
-  });
-  if (ghsasFailedToFix.length > 0) {
-    logger.info("Failed to compute fixes for the following vulnerabilities:");
-  }
-  for (const ghsa of ghsasFailedToFix) {
-    logger.info(`  - ${ghsa} (${ghsaToVulnerableArtifactIdsToApply[ghsa].map((id) => simplePurl(artifacts[id].type, artifacts[id].namespace ?? null, artifacts[id].name ?? "", artifacts[id].version ?? null)).join(", ")})`);
-  }
-  const fixesFound = Object.entries(computedFix.ghsaToResult).filter(([_, result]) => result.failedArtifacts === void 0 || result.failedArtifacts.length === 0);
-  const combinedFixes = fixesFound.flatMap(([_, result]) => result.fixes);
-  if (options.dryRun) {
-    logger.info("Fixes found:");
-    for (const [ghsa, result] of fixesFound) {
-      logger.info(`  - ${ghsa}:`);
-      for (const fix of result.fixes) {
-        logger.info(`    - ${fix.purl} -> ${fix.fixedVersion}`);
-      }
-    }
-    return {
-      type: "dry-run-result",
-      fixes: Object.fromEntries(fixesFound.map(([ghsa, result]) => [ghsa, result.fixes])),
-      ...ghsasFailedToFix.length > 0 && { failedToFix: ghsasFailedToFix }
-    };
-  }
-  if (combinedFixes.length === 0) {
-    if (autofixRunId) {
-      await getSocketAPI().finalizeAutofixRun(autofixRunId, "fixed-none");
-    }
-    throw new Error("Failed to find a fix for the given vulnerabilities");
-  }
-  try {
-    const applyFixesStatus = await upgradePurl(path2, T3(combinedFixes, (fix) => `${fix.purl}${fix.fixedVersion}`).map((fix) => ({
-      purl: fix.purl,
-      upgradeVersion: fix.fixedVersion
-    })), {
-      debug: options.debug,
-      silent: options.silent,
-      runWithoutDocker: options.runWithoutDocker,
-      manifestsTarHash: options.manifestsTarHash,
-      concurrency: "1",
-      globPattern: options.globPattern,
-      rangeStyle: options.rangeStyle
-    }, void 0, autofixRunId) ?? "fixed-all";
-    if (autofixRunId) {
-      await getSocketAPI().finalizeAutofixRun(autofixRunId, ghsasFailedToFix.length === 0 && applyFixesStatus === "fixed-all" ? "fixed-all" : ghsasFailedToFix.length === Object.keys(ghsaToVulnerableArtifactIdsToApply).length || applyFixesStatus === "fixed-none" ? "fixed-none" : "fixed-some");
-    }
-    return {
-      type: "applied-fixes",
-      fixes: Object.fromEntries(fixesFound.map(([ghsa, result]) => [ghsa, result.fixes]))
-    };
-  } catch (error) {
-    if (autofixRunId) {
-      await getSocketAPI().finalizeAutofixRun(autofixRunId, "error", error.stack, await logger.getLogContent(logFile));
-    }
-    logger.error("Error applying fixes:", error);
-    throw error;
-  }
-}
-async function computeInputForComputingFixes(path2, options) {
-  if (options.manifestsTarHash) {
-    const { artifacts: artifacts2 } = await fetchArtifactsFromSocket(path2, options.manifestsTarHash, "autofix");
-    const ghsaToVulnerableArtifactIds2 = {};
-    for (const [index2, artifact] of artifacts2.entries()) {
-      if (!artifact.vulnerabilities)
-        continue;
-      for (const vulnerability of artifact.vulnerabilities) {
-        if (!(ghsaToVulnerableArtifactIds2[vulnerability.ghsaId] ??= []).includes(index2)) {
-          ghsaToVulnerableArtifactIds2[vulnerability.ghsaId].push(index2);
-        }
-      }
-    }
-    const sbomTaskArtifacts = artifacts2.map((artifact) => ({
-      type: artifact.type,
-      name: artifact.name ?? "",
-      version: artifact.version ?? "",
-      namespace: artifact.namespace ?? void 0,
-      adj: artifact.dependencies?.map((dep) => artifacts2.findIndex((a4) => a4.id === dep)) ?? []
-    }));
-    return { artifacts: sbomTaskArtifacts, ghsaToVulnerableArtifactIds: ghsaToVulnerableArtifactIds2 };
-  }
-  const otherModulesCommunicator = new OtherModulesCommunicator(path2, options, {
-    type: "missing"
-  });
-  const manager = await ProjectManager.create(path2, otherModulesCommunicator);
-  const { reachabilitySupport, traditionalScaSupport } = manager.getSubprojectsWithWorkspacePaths();
-  const supportedSubprojects = reachabilitySupport.concat(traditionalScaSupport).filter((p3) => getPackageManagerSupport(p3.packageManagerName).supportsApplyingFixes);
-  if (supportedSubprojects.length === 0) {
-    throw new Error(`No supported projects found in ${path2}.`);
-  }
-  const cliCore = new CliCore(path2, { ...defaultCliOptions, socketMode: "true" });
-  const results = await asyncMap(supportedSubprojects, async (subproject) => cliCore.getDependencyTreeAndVulnerabilities(otherModulesCommunicator, subproject));
-  const { artifacts, purlToIndex } = computeSBOMTaskArtifacts(results.flatMap((r3) => Object.values(r3.projectInfo).map((info) => info.dataForAnalysis.data.dependencyTree)));
-  const ghsaToVulnerableArtifactIds = computeVulnerableArtifactIdsPerVulnerability(results.flatMap((r3) => Object.values(r3.workspaceToVulnerabilities).flat()), purlToIndex);
-  return { artifacts, ghsaToVulnerableArtifactIds };
-}
-function computeVulnerableArtifactIdsPerVulnerability(vulnerabilities, purlToIndex) {
-  const vulnerableArtifactIdsPerVulnerability = {};
-  for (const vulnerability of vulnerabilities) {
-    if (!vulnerableArtifactIdsPerVulnerability[vulnerability.url]) {
-      vulnerableArtifactIdsPerVulnerability[vulnerability.url] = [];
-    }
-    if (!vulnerability.purl)
-      throw new Error(`Vulnerability ${vulnerability.url} has no purl`);
-    if (!purlToIndex.has(vulnerability.purl)) {
-      throw new Error(`Vulnerability ${vulnerability.url} has no purl in sbomTaskArtifacts`);
-    }
-    const index2 = purlToIndex.get(vulnerability.purl);
-    if (!vulnerableArtifactIdsPerVulnerability[vulnerability.url].includes(index2)) {
-      vulnerableArtifactIdsPerVulnerability[vulnerability.url].push(index2);
-    }
-  }
-  return vulnerableArtifactIdsPerVulnerability;
-}
-function computeSBOMTaskArtifacts(dependencyTrees) {
-  const components = [];
-  const purlToIndex = /* @__PURE__ */ new Map();
-  for (const dependencyTree of dependencyTrees) {
-    const depIdentifierToPurl = Object.fromEntries(Object.entries(dependencyTree.transitiveDependencies).filter(([_depIdentifier, dep]) => dep.purlObj).map(([depIdentifier, dep]) => {
-      const purl = dep.purlObj.purlString;
-      if (purl && !purlToIndex.has(purl)) {
-        purlToIndex.set(purl, components.length);
-        const depTreeNode = dependencyTree.transitiveDependencies[depIdentifier];
-        components[purlToIndex.get(purl)] = {
-          type: depTreeNode.purlObj.type,
-          name: depTreeNode.purlObj.name,
-          version: depTreeNode.purlObj.version,
-          namespace: depTreeNode.purlObj.namespace,
-          adj: []
-        };
-      }
-      return [depIdentifier, purl];
-    }));
-    for (const [depIdentifier, purl] of Object.entries(depIdentifierToPurl)) {
-      const depTreeNode = dependencyTree.transitiveDependencies[depIdentifier];
-      if (!depTreeNode.purlObj) {
-        continue;
-      }
-      const component = components[purlToIndex.get(purl)];
-      depTreeNode.dependencies?.forEach((dep) => {
-        const depPurl = depIdentifierToPurl[dep];
-        const depIndex = purlToIndex.get(depPurl);
-        if (depIndex && !component.adj?.includes(depIndex)) {
-          component.adj.push(depIndex);
-        }
-      });
-    }
-  }
-  return { artifacts: components, purlToIndex };
-}
-
 // dist/index.js
 var program2 = new Command();
 var run2 = new Command();
@@ -229459,7 +229446,7 @@ upgradePurls.name("upgrade-purls").argument("<path>", "File system path to the f
   });
 }).configureHelp({ sortOptions: true });
 var computeFixesAndUpgradePurlsCmd = new Command();
-computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument("<path>", "File system path to the folder containing the project").option("-a, --apply-fixes-to <ghsas...>", 'GHSA IDs to compute fixes for. Use "all" to compute fixes for all vulnerabilities.', []).option("--dry-run", "Show what changes would be made without actually making them", false).option("-g, --glob <pattern>", "Glob pattern to filter workspaces by absolute file path").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--silent-spinner", "Silence spinner", "CI" in process.env || !process.stdin.isTTY).option("--range-style <style>", 'Range style to use for the output. Currently only "pin" is supported and it only works for npm.').option("--disable-major-updates", "Do not suggest major updates. If only major update are available, the fix will not be applied.", false).option("-o, --output-file <file>", "Writes output to a JSON file").option("--minimum-release-age <minimumReleaseAge>", "Do not allow upgrades to package versions that are newer than minimumReleaseAge. Format is 2m, 5h, 3d or 1w").addOption(new Option("--run-without-docker", "Run package managers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).version(version2).action(async (path2, options) => {
+computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument("<path>", "File system path to the folder containing the project").option("-a, --apply-fixes-to <ghsas...>", 'GHSA IDs to compute fixes for. Use "all" to compute fixes for all vulnerabilities.', []).option("--dry-run", "Show what changes would be made without actually making them", false).option("-g, --glob <pattern>", "Glob pattern to filter workspaces by absolute file path").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--silent-spinner", "Silence spinner", "CI" in process.env || !process.stdin.isTTY).option("--range-style <style>", 'Range style to use for the output. Currently only "pin" is supported and it only works for npm.').option("--disable-major-updates", "Do not suggest major updates. If only major update are available, the fix will not be applied.", false).option("-o, --output-file <file>", "Writes output to a JSON file").option("--minimum-release-age <minimumReleaseAge>", "Do not allow upgrades to package versions that are newer than minimumReleaseAge. Format is 2m, 5h, 3d or 1w").option("--show-affected-direct-dependencies", "Show the affected direct dependencies for each vulnerability and what upgrades could fix them - does not apply the upgrades.", false).addOption(new Option("--run-without-docker", "Run package managers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).version(version2).action(async (path2, options) => {
   process.env.DOCKER_IMAGE_TAG ??= version2;
   if (options.outputFile && !options.outputFile.endsWith(".json")) {
     throw new Error("Output file must have a .json extension");
@@ -229473,6 +229460,7 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
   await withTmpDirectory("compute-fixes-and-upgrade-purls", async (tmpDir) => {
     const logFile = join28(tmpDir, "compute-fixes-and-upgrade-purls.log");
     logger.initWinstonLogger(options.debug, logFile);
+    await initializeComputeFixesAndUpgradePurls(path2, options);
     const optionsToUse = {
       ...y8(options, ["minimumReleaseAge"]),
       minimumReleaseAgeInMinutes: options.minimumReleaseAge ? parseMinimumReleaseAgeToMinutes(options.minimumReleaseAge) : void 0
@@ -229486,6 +229474,22 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     }
   });
 }).configureHelp({ sortOptions: true });
+async function initializeComputeFixesAndUpgradePurls(path2, options) {
+  logger.info(`Coana CLI version ${version2} compute fixes and upgrade purls initiated on ${path2}`);
+  logger.debug("running in debug mode");
+  logger.debug("using options", JSON.stringify(a3(Object.fromEntries(Object.entries(options).filter(([_, value]) => value)), [
+    "debug",
+    "silent",
+    "applyFixesTo",
+    "dryRun",
+    "globPattern",
+    "manifestsTarHash",
+    "rangeStyle",
+    "disableMajorUpdates",
+    "outputFile",
+    "minimumReleaseAge"
+  ]), null, 2));
+}
 var compareReportsCommand = new Command();
 compareReportsCommand.name("compare-reports").argument("<baselineReportPath>", "Path to the baseline report").argument("<newReportPath>", "Path to the new report").option("--api-key <key>", "Set the Coana dashboard API key.").option("-d, --debug", "Enable debug logging", false).option("--no-pr-comment", "Disable pull request comments (only relevant when run from a PR)", true).option("--no-block", "Do not fail with a non-zero exit code when new reachable vulnerabilities are detected", true).option("--ignore-undeterminable-reachability", "Ignore vulnerabilities with undeterminable reachability", false).action(async (baselineReportPath, newReportPath, options) => {
   async function readReport(reportPath) {