@coana-tech/cli 15.0.8 → 15.0.9

package/cli.mjs

@@ -16020,9 +16020,9 @@ var require_picomatch = __commonJS({
     var utils = require_utils();
     var constants4 = require_constants();
     var isObject2 = (val2) => val2 && typeof val2 === "object" && !Array.isArray(val2);
-    var picomatch12 = (glob2, options, returnState = false) => {
+    var picomatch13 = (glob2, options, returnState = false) => {
       if (Array.isArray(glob2)) {
-        const fns = glob2.map((input) => picomatch12(input, options, returnState));
+        const fns = glob2.map((input) => picomatch13(input, options, returnState));
         const arrayMatcher = (str) => {
           for (const isMatch4 of fns) {
             const state2 = isMatch4(str);
@@ -16038,16 +16038,16 @@ var require_picomatch = __commonJS({
       }
       const opts = options || {};
       const posix3 = opts.windows;
-      const regex = isState ? picomatch12.compileRe(glob2, options) : picomatch12.makeRe(glob2, options, false, true);
+      const regex = isState ? picomatch13.compileRe(glob2, options) : picomatch13.makeRe(glob2, options, false, true);
       const state = regex.state;
       delete regex.state;
       let isIgnored = () => false;
       if (opts.ignore) {
         const ignoreOpts = { ...options, ignore: null, onMatch: null, onResult: null };
-        isIgnored = picomatch12(opts.ignore, ignoreOpts, returnState);
+        isIgnored = picomatch13(opts.ignore, ignoreOpts, returnState);
       }
       const matcher = (input, returnObject = false) => {
-        const { isMatch: isMatch4, match: match2, output } = picomatch12.test(input, regex, options, { glob: glob2, posix: posix3 });
+        const { isMatch: isMatch4, match: match2, output } = picomatch13.test(input, regex, options, { glob: glob2, posix: posix3 });
         const result = { glob: glob2, state, regex, posix: posix3, input, output, match: match2, isMatch: isMatch4 };
         if (typeof opts.onResult === "function") {
           opts.onResult(result);
@@ -16073,7 +16073,7 @@ var require_picomatch = __commonJS({
       }
       return matcher;
     };
-    picomatch12.test = (input, regex, options, { glob: glob2, posix: posix3 } = {}) => {
+    picomatch13.test = (input, regex, options, { glob: glob2, posix: posix3 } = {}) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected input to be a string");
       }
@@ -16090,24 +16090,24 @@ var require_picomatch = __commonJS({
       }
       if (match2 === false || opts.capture === true) {
         if (opts.matchBase === true || opts.basename === true) {
-          match2 = picomatch12.matchBase(input, regex, options, posix3);
+          match2 = picomatch13.matchBase(input, regex, options, posix3);
         } else {
           match2 = regex.exec(output);
         }
       }
       return { isMatch: Boolean(match2), match: match2, output };
     };
-    picomatch12.matchBase = (input, glob2, options) => {
-      const regex = glob2 instanceof RegExp ? glob2 : picomatch12.makeRe(glob2, options);
+    picomatch13.matchBase = (input, glob2, options) => {
+      const regex = glob2 instanceof RegExp ? glob2 : picomatch13.makeRe(glob2, options);
       return regex.test(utils.basename(input));
     };
-    picomatch12.isMatch = (str, patterns, options) => picomatch12(patterns, options)(str);
-    picomatch12.parse = (pattern, options) => {
-      if (Array.isArray(pattern)) return pattern.map((p3) => picomatch12.parse(p3, options));
+    picomatch13.isMatch = (str, patterns, options) => picomatch13(patterns, options)(str);
+    picomatch13.parse = (pattern, options) => {
+      if (Array.isArray(pattern)) return pattern.map((p3) => picomatch13.parse(p3, options));
       return parse16(pattern, { ...options, fastpaths: false });
     };
-    picomatch12.scan = (input, options) => scan(input, options);
-    picomatch12.compileRe = (state, options, returnOutput = false, returnState = false) => {
+    picomatch13.scan = (input, options) => scan(input, options);
+    picomatch13.compileRe = (state, options, returnOutput = false, returnState = false) => {
       if (returnOutput === true) {
         return state.output;
       }
@@ -16118,13 +16118,13 @@ var require_picomatch = __commonJS({
       if (state && state.negated === true) {
         source = `^(?!${source}).*$`;
       }
-      const regex = picomatch12.toRegex(source, options);
+      const regex = picomatch13.toRegex(source, options);
       if (returnState === true) {
         regex.state = state;
       }
       return regex;
     };
-    picomatch12.makeRe = (input, options = {}, returnOutput = false, returnState = false) => {
+    picomatch13.makeRe = (input, options = {}, returnOutput = false, returnState = false) => {
       if (!input || typeof input !== "string") {
         throw new TypeError("Expected a non-empty string");
       }
@@ -16135,9 +16135,9 @@ var require_picomatch = __commonJS({
       if (!parsed.output) {
         parsed = parse16(input, options);
       }
-      return picomatch12.compileRe(parsed, options, returnOutput, returnState);
+      return picomatch13.compileRe(parsed, options, returnOutput, returnState);
     };
-    picomatch12.toRegex = (source, options) => {
+    picomatch13.toRegex = (source, options) => {
       try {
         const opts = options || {};
         return new RegExp(source, opts.flags || (opts.nocase ? "i" : ""));
@@ -16146,8 +16146,8 @@ var require_picomatch = __commonJS({
         return /$^/;
       }
     };
-    picomatch12.constants = constants4;
-    module2.exports = picomatch12;
+    picomatch13.constants = constants4;
+    module2.exports = picomatch13;
   }
 });
 
@@ -16157,14 +16157,14 @@ var require_picomatch2 = __commonJS({
     "use strict";
     var pico = require_picomatch();
     var utils = require_utils();
-    function picomatch12(glob2, options, returnState = false) {
+    function picomatch13(glob2, options, returnState = false) {
       if (options && (options.windows === null || options.windows === void 0)) {
         options = { ...options, windows: utils.isWindows() };
       }
       return pico(glob2, options, returnState);
     }
-    Object.assign(picomatch12, pico);
-    module2.exports = picomatch12;
+    Object.assign(picomatch13, pico);
+    module2.exports = picomatch13;
   }
 });
 
@@ -25038,15 +25038,15 @@ var require_file = __commonJS({
       _incFile(callback) {
         debug("_incFile", this.filename);
         const ext2 = path9.extname(this._basename);
-        const basename13 = path9.basename(this._basename, ext2);
+        const basename14 = path9.basename(this._basename, ext2);
         const tasks = [];
         if (this.zippedArchive) {
           tasks.push(
             function(cb) {
               const num = this._created > 0 && !this.tailable ? this._created : "";
               this._compressFile(
-                path9.join(this.dirname, `${basename13}${num}${ext2}`),
-                path9.join(this.dirname, `${basename13}${num}${ext2}.gz`),
+                path9.join(this.dirname, `${basename14}${num}${ext2}`),
+                path9.join(this.dirname, `${basename14}${num}${ext2}.gz`),
                 cb
               );
             }.bind(this)
@@ -25056,9 +25056,9 @@ var require_file = __commonJS({
           function(cb) {
             if (!this.tailable) {
               this._created += 1;
-              this._checkMaxFilesIncrementing(ext2, basename13, cb);
+              this._checkMaxFilesIncrementing(ext2, basename14, cb);
             } else {
-              this._checkMaxFilesTailable(ext2, basename13, cb);
+              this._checkMaxFilesTailable(ext2, basename14, cb);
             }
           }.bind(this)
         );
@@ -25072,9 +25072,9 @@ var require_file = __commonJS({
        */
       _getFile() {
         const ext2 = path9.extname(this._basename);
-        const basename13 = path9.basename(this._basename, ext2);
+        const basename14 = path9.basename(this._basename, ext2);
         const isRotation = this.rotationFormat ? this.rotationFormat() : this._created;
-        return !this.tailable && this._created ? `${basename13}${isRotation}${ext2}` : `${basename13}${ext2}`;
+        return !this.tailable && this._created ? `${basename14}${isRotation}${ext2}` : `${basename14}${ext2}`;
       }
       /**
        * Increment the number of files created or checked by this instance.
@@ -25084,14 +25084,14 @@ var require_file = __commonJS({
        * @returns {undefined}
        * @private
        */
-      _checkMaxFilesIncrementing(ext2, basename13, callback) {
+      _checkMaxFilesIncrementing(ext2, basename14, callback) {
         if (!this.maxFiles || this._created < this.maxFiles) {
           return setImmediate(callback);
         }
         const oldest = this._created - this.maxFiles;
         const isOldest = oldest !== 0 ? oldest : "";
         const isZipped = this.zippedArchive ? ".gz" : "";
-        const filePath = `${basename13}${isOldest}${ext2}${isZipped}`;
+        const filePath = `${basename14}${isOldest}${ext2}${isZipped}`;
         const target = path9.join(this.dirname, filePath);
         fs11.unlink(target, callback);
       }
@@ -25106,7 +25106,7 @@ var require_file = __commonJS({
        * @returns {undefined}
        * @private
        */
-      _checkMaxFilesTailable(ext2, basename13, callback) {
+      _checkMaxFilesTailable(ext2, basename14, callback) {
         const tasks = [];
         if (!this.maxFiles) {
           return;
@@ -25114,21 +25114,21 @@ var require_file = __commonJS({
         const isZipped = this.zippedArchive ? ".gz" : "";
         for (let x2 = this.maxFiles - 1; x2 > 1; x2--) {
           tasks.push(function(i7, cb) {
-            let fileName3 = `${basename13}${i7 - 1}${ext2}${isZipped}`;
+            let fileName3 = `${basename14}${i7 - 1}${ext2}${isZipped}`;
             const tmppath = path9.join(this.dirname, fileName3);
             fs11.exists(tmppath, (exists2) => {
               if (!exists2) {
                 return cb(null);
               }
-              fileName3 = `${basename13}${i7}${ext2}${isZipped}`;
+              fileName3 = `${basename14}${i7}${ext2}${isZipped}`;
               fs11.rename(tmppath, path9.join(this.dirname, fileName3), cb);
             });
           }.bind(this, x2));
         }
         asyncSeries(tasks, () => {
           fs11.rename(
-            path9.join(this.dirname, `${basename13}${ext2}${isZipped}`),
-            path9.join(this.dirname, `${basename13}1${ext2}${isZipped}`),
+            path9.join(this.dirname, `${basename14}${ext2}${isZipped}`),
+            path9.join(this.dirname, `${basename14}1${ext2}${isZipped}`),
             callback
           );
         });
@@ -39550,9 +39550,9 @@ var require_picomatch3 = __commonJS({
     var utils = require_utils3();
     var constants4 = require_constants3();
     var isObject2 = (val2) => val2 && typeof val2 === "object" && !Array.isArray(val2);
-    var picomatch12 = (glob2, options, returnState = false) => {
+    var picomatch13 = (glob2, options, returnState = false) => {
       if (Array.isArray(glob2)) {
-        const fns = glob2.map((input) => picomatch12(input, options, returnState));
+        const fns = glob2.map((input) => picomatch13(input, options, returnState));
         const arrayMatcher = (str) => {
           for (const isMatch4 of fns) {
             const state2 = isMatch4(str);
@@ -39568,16 +39568,16 @@ var require_picomatch3 = __commonJS({
       }
       const opts = options || {};
       const posix3 = utils.isWindows(options);
-      const regex = isState ? picomatch12.compileRe(glob2, options) : picomatch12.makeRe(glob2, options, false, true);
+      const regex = isState ? picomatch13.compileRe(glob2, options) : picomatch13.makeRe(glob2, options, false, true);
       const state = regex.state;
       delete regex.state;
       let isIgnored = () => false;
       if (opts.ignore) {
         const ignoreOpts = { ...options, ignore: null, onMatch: null, onResult: null };
-        isIgnored = picomatch12(opts.ignore, ignoreOpts, returnState);
+        isIgnored = picomatch13(opts.ignore, ignoreOpts, returnState);
       }
       const matcher = (input, returnObject = false) => {
-        const { isMatch: isMatch4, match: match2, output } = picomatch12.test(input, regex, options, { glob: glob2, posix: posix3 });
+        const { isMatch: isMatch4, match: match2, output } = picomatch13.test(input, regex, options, { glob: glob2, posix: posix3 });
         const result = { glob: glob2, state, regex, posix: posix3, input, output, match: match2, isMatch: isMatch4 };
         if (typeof opts.onResult === "function") {
           opts.onResult(result);
@@ -39603,7 +39603,7 @@ var require_picomatch3 = __commonJS({
       }
       return matcher;
     };
-    picomatch12.test = (input, regex, options, { glob: glob2, posix: posix3 } = {}) => {
+    picomatch13.test = (input, regex, options, { glob: glob2, posix: posix3 } = {}) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected input to be a string");
       }
@@ -39620,24 +39620,24 @@ var require_picomatch3 = __commonJS({
       }
       if (match2 === false || opts.capture === true) {
         if (opts.matchBase === true || opts.basename === true) {
-          match2 = picomatch12.matchBase(input, regex, options, posix3);
+          match2 = picomatch13.matchBase(input, regex, options, posix3);
         } else {
           match2 = regex.exec(output);
         }
       }
       return { isMatch: Boolean(match2), match: match2, output };
     };
-    picomatch12.matchBase = (input, glob2, options, posix3 = utils.isWindows(options)) => {
-      const regex = glob2 instanceof RegExp ? glob2 : picomatch12.makeRe(glob2, options);
+    picomatch13.matchBase = (input, glob2, options, posix3 = utils.isWindows(options)) => {
+      const regex = glob2 instanceof RegExp ? glob2 : picomatch13.makeRe(glob2, options);
       return regex.test(path9.basename(input));
     };
-    picomatch12.isMatch = (str, patterns, options) => picomatch12(patterns, options)(str);
-    picomatch12.parse = (pattern, options) => {
-      if (Array.isArray(pattern)) return pattern.map((p3) => picomatch12.parse(p3, options));
+    picomatch13.isMatch = (str, patterns, options) => picomatch13(patterns, options)(str);
+    picomatch13.parse = (pattern, options) => {
+      if (Array.isArray(pattern)) return pattern.map((p3) => picomatch13.parse(p3, options));
       return parse16(pattern, { ...options, fastpaths: false });
     };
-    picomatch12.scan = (input, options) => scan(input, options);
-    picomatch12.compileRe = (state, options, returnOutput = false, returnState = false) => {
+    picomatch13.scan = (input, options) => scan(input, options);
+    picomatch13.compileRe = (state, options, returnOutput = false, returnState = false) => {
       if (returnOutput === true) {
         return state.output;
       }
@@ -39648,13 +39648,13 @@ var require_picomatch3 = __commonJS({
       if (state && state.negated === true) {
         source = `^(?!${source}).*$`;
       }
-      const regex = picomatch12.toRegex(source, options);
+      const regex = picomatch13.toRegex(source, options);
       if (returnState === true) {
         regex.state = state;
       }
       return regex;
     };
-    picomatch12.makeRe = (input, options = {}, returnOutput = false, returnState = false) => {
+    picomatch13.makeRe = (input, options = {}, returnOutput = false, returnState = false) => {
       if (!input || typeof input !== "string") {
         throw new TypeError("Expected a non-empty string");
       }
@@ -39665,9 +39665,9 @@ var require_picomatch3 = __commonJS({
       if (!parsed.output) {
         parsed = parse16(input, options);
       }
-      return picomatch12.compileRe(parsed, options, returnOutput, returnState);
+      return picomatch13.compileRe(parsed, options, returnOutput, returnState);
     };
-    picomatch12.toRegex = (source, options) => {
+    picomatch13.toRegex = (source, options) => {
       try {
         const opts = options || {};
         return new RegExp(source, opts.flags || (opts.nocase ? "i" : ""));
@@ -39676,8 +39676,8 @@ var require_picomatch3 = __commonJS({
         return /$^/;
       }
     };
-    picomatch12.constants = constants4;
-    module2.exports = picomatch12;
+    picomatch13.constants = constants4;
+    module2.exports = picomatch13;
   }
 });
 
@@ -39695,7 +39695,7 @@ var require_micromatch = __commonJS({
     "use strict";
     var util5 = __require("util");
     var braces = require_braces();
-    var picomatch12 = require_picomatch4();
+    var picomatch13 = require_picomatch4();
     var utils = require_utils3();
     var isEmptyString = (val2) => val2 === "" || val2 === "./";
     var micromatch4 = (list2, patterns, options) => {
@@ -39712,7 +39712,7 @@ var require_micromatch = __commonJS({
         }
       };
       for (let i7 = 0; i7 < patterns.length; i7++) {
-        let isMatch4 = picomatch12(String(patterns[i7]), { ...options, onResult }, true);
+        let isMatch4 = picomatch13(String(patterns[i7]), { ...options, onResult }, true);
         let negated = isMatch4.state.negated || isMatch4.state.negatedExtglob;
         if (negated) negatives++;
         for (let item of list2) {
@@ -39740,8 +39740,8 @@ var require_micromatch = __commonJS({
       return matches;
     };
     micromatch4.match = micromatch4;
-    micromatch4.matcher = (pattern, options) => picomatch12(pattern, options);
-    micromatch4.isMatch = (str, patterns, options) => picomatch12(patterns, options)(str);
+    micromatch4.matcher = (pattern, options) => picomatch13(pattern, options);
+    micromatch4.isMatch = (str, patterns, options) => picomatch13(patterns, options)(str);
     micromatch4.any = micromatch4.isMatch;
     micromatch4.not = (list2, patterns, options = {}) => {
       patterns = [].concat(patterns).map(String);
@@ -39788,7 +39788,7 @@ var require_micromatch = __commonJS({
     micromatch4.some = (list2, patterns, options) => {
       let items = [].concat(list2);
       for (let pattern of [].concat(patterns)) {
-        let isMatch4 = picomatch12(String(pattern), options);
+        let isMatch4 = picomatch13(String(pattern), options);
         if (items.some((item) => isMatch4(item))) {
           return true;
         }
@@ -39798,7 +39798,7 @@ var require_micromatch = __commonJS({
     micromatch4.every = (list2, patterns, options) => {
       let items = [].concat(list2);
       for (let pattern of [].concat(patterns)) {
-        let isMatch4 = picomatch12(String(pattern), options);
+        let isMatch4 = picomatch13(String(pattern), options);
         if (!items.every((item) => isMatch4(item))) {
           return false;
         }
@@ -39809,23 +39809,23 @@ var require_micromatch = __commonJS({
       if (typeof str !== "string") {
         throw new TypeError(`Expected a string: "${util5.inspect(str)}"`);
       }
-      return [].concat(patterns).every((p3) => picomatch12(p3, options)(str));
+      return [].concat(patterns).every((p3) => picomatch13(p3, options)(str));
     };
     micromatch4.capture = (glob2, input, options) => {
       let posix3 = utils.isWindows(options);
-      let regex = picomatch12.makeRe(String(glob2), { ...options, capture: true });
+      let regex = picomatch13.makeRe(String(glob2), { ...options, capture: true });
       let match2 = regex.exec(posix3 ? utils.toPosixSlashes(input) : input);
       if (match2) {
         return match2.slice(1).map((v) => v === void 0 ? "" : v);
       }
     };
-    micromatch4.makeRe = (...args2) => picomatch12.makeRe(...args2);
-    micromatch4.scan = (...args2) => picomatch12.scan(...args2);
+    micromatch4.makeRe = (...args2) => picomatch13.makeRe(...args2);
+    micromatch4.scan = (...args2) => picomatch13.scan(...args2);
     micromatch4.parse = (patterns, options) => {
       let res = [];
       for (let pattern of [].concat(patterns || [])) {
         for (let str of braces(String(pattern), options)) {
-          res.push(picomatch12.parse(str, options));
+          res.push(picomatch13.parse(str, options));
         }
       }
       return res;
@@ -102682,7 +102682,7 @@ var require_parseParams = __commonJS({
 var require_basename = __commonJS({
   "../../node_modules/.pnpm/@fastify+busboy@2.1.1/node_modules/@fastify/busboy/lib/utils/basename.js"(exports2, module2) {
     "use strict";
-    module2.exports = function basename13(path9) {
+    module2.exports = function basename14(path9) {
       if (typeof path9 !== "string") {
         return "";
       }
@@ -102709,7 +102709,7 @@ var require_multipart = __commonJS({
     var Dicer = require_Dicer();
     var parseParams = require_parseParams();
     var decodeText = require_decodeText();
-    var basename13 = require_basename();
+    var basename14 = require_basename();
     var getLimit2 = require_getLimit();
     var RE_BOUNDARY = /^boundary$/i;
     var RE_FIELD = /^form-data$/i;
@@ -102826,7 +102826,7 @@ var require_multipart = __commonJS({
               } else if (RE_FILENAME.test(parsed[i7][0])) {
                 filename = parsed[i7][1];
                 if (!preservePath) {
-                  filename = basename13(filename);
+                  filename = basename14(filename);
                 }
               }
             }
@@ -121662,8 +121662,8 @@ var require_tmp = __commonJS({
       if (option === "name") {
         if (path9.isAbsolute(name2))
           throw new Error(`${option} option must not contain an absolute path, found "${name2}".`);
-        let basename13 = path9.basename(name2);
-        if (basename13 === ".." || basename13 === "." || basename13 !== name2)
+        let basename14 = path9.basename(name2);
+        if (basename14 === ".." || basename14 === "." || basename14 !== name2)
           throw new Error(`${option} option must not contain a path, found "${name2}".`);
       } else {
         if (path9.isAbsolute(name2) && !name2.startsWith(tmpDir)) {
@@ -147531,7 +147531,7 @@ var require_micromatch2 = __commonJS({
     "use strict";
     var util5 = __require("util");
     var braces = require_braces2();
-    var picomatch12 = require_picomatch4();
+    var picomatch13 = require_picomatch4();
     var utils = require_utils3();
     var isEmptyString = (v) => v === "" || v === "./";
     var hasBraces = (v) => {
@@ -147552,7 +147552,7 @@ var require_micromatch2 = __commonJS({
         }
       };
       for (let i7 = 0; i7 < patterns.length; i7++) {
-        let isMatch4 = picomatch12(String(patterns[i7]), { ...options, onResult }, true);
+        let isMatch4 = picomatch13(String(patterns[i7]), { ...options, onResult }, true);
         let negated = isMatch4.state.negated || isMatch4.state.negatedExtglob;
         if (negated) negatives++;
         for (let item of list2) {
@@ -147580,8 +147580,8 @@ var require_micromatch2 = __commonJS({
       return matches;
     };
     micromatch4.match = micromatch4;
-    micromatch4.matcher = (pattern, options) => picomatch12(pattern, options);
-    micromatch4.isMatch = (str, patterns, options) => picomatch12(patterns, options)(str);
+    micromatch4.matcher = (pattern, options) => picomatch13(pattern, options);
+    micromatch4.isMatch = (str, patterns, options) => picomatch13(patterns, options)(str);
     micromatch4.any = micromatch4.isMatch;
     micromatch4.not = (list2, patterns, options = {}) => {
       patterns = [].concat(patterns).map(String);
@@ -147628,7 +147628,7 @@ var require_micromatch2 = __commonJS({
     micromatch4.some = (list2, patterns, options) => {
       let items = [].concat(list2);
       for (let pattern of [].concat(patterns)) {
-        let isMatch4 = picomatch12(String(pattern), options);
+        let isMatch4 = picomatch13(String(pattern), options);
         if (items.some((item) => isMatch4(item))) {
           return true;
         }
@@ -147638,7 +147638,7 @@ var require_micromatch2 = __commonJS({
     micromatch4.every = (list2, patterns, options) => {
       let items = [].concat(list2);
       for (let pattern of [].concat(patterns)) {
-        let isMatch4 = picomatch12(String(pattern), options);
+        let isMatch4 = picomatch13(String(pattern), options);
         if (!items.every((item) => isMatch4(item))) {
           return false;
         }
@@ -147649,23 +147649,23 @@ var require_micromatch2 = __commonJS({
       if (typeof str !== "string") {
         throw new TypeError(`Expected a string: "${util5.inspect(str)}"`);
       }
-      return [].concat(patterns).every((p3) => picomatch12(p3, options)(str));
+      return [].concat(patterns).every((p3) => picomatch13(p3, options)(str));
     };
     micromatch4.capture = (glob2, input, options) => {
       let posix3 = utils.isWindows(options);
-      let regex = picomatch12.makeRe(String(glob2), { ...options, capture: true });
+      let regex = picomatch13.makeRe(String(glob2), { ...options, capture: true });
       let match2 = regex.exec(posix3 ? utils.toPosixSlashes(input) : input);
       if (match2) {
         return match2.slice(1).map((v) => v === void 0 ? "" : v);
       }
     };
-    micromatch4.makeRe = (...args2) => picomatch12.makeRe(...args2);
-    micromatch4.scan = (...args2) => picomatch12.scan(...args2);
+    micromatch4.makeRe = (...args2) => picomatch13.makeRe(...args2);
+    micromatch4.scan = (...args2) => picomatch13.scan(...args2);
     micromatch4.parse = (patterns, options) => {
       let res = [];
       for (let pattern of [].concat(patterns || [])) {
         for (let str of braces(String(pattern), options)) {
-          res.push(picomatch12.parse(str, options));
+          res.push(picomatch13.parse(str, options));
         }
       }
       return res;
@@ -155160,8 +155160,8 @@ var require_pattern = __commonJS({
     }
     exports2.endsWithSlashGlobStar = endsWithSlashGlobStar;
     function isAffectDepthOfReadingPattern(pattern) {
-      const basename13 = path9.basename(pattern);
-      return endsWithSlashGlobStar(pattern) || isStaticPattern(basename13);
+      const basename14 = path9.basename(pattern);
+      return endsWithSlashGlobStar(pattern) || isStaticPattern(basename14);
     }
     exports2.isAffectDepthOfReadingPattern = isAffectDepthOfReadingPattern;
     function expandPatternsWithBraceExpansion(patterns) {
@@ -199710,7 +199710,7 @@ var {
 // dist/index.js
 import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile38, rm as rm4, writeFile as writeFile17 } from "fs/promises";
 import { tmpdir as tmpdir5 } from "os";
-import { dirname as dirname26, join as join35, resolve as resolve44 } from "path";
+import { dirname as dirname27, join as join35, resolve as resolve44 } from "path";
 
 // ../../node_modules/.pnpm/remeda@2.14.0/node_modules/remeda/dist/chunk-ANXBDSUI.js
 var s = { done: false, hasNext: false };
@@ -204464,6 +204464,9 @@ function extractPregeneratedSbomPatterns(supportedFiles) {
   }
   return patterns;
 }
+async function getPregeneratedSbomMatcher() {
+  return initializePregeneratedSbomMatcher();
+}
 async function initializePregeneratedSbomMatcher() {
   if (pregeneratedSbomMatcher) {
     return pregeneratedSbomMatcher;
@@ -235059,7 +235062,7 @@ import { existsSync as existsSync30, writeFileSync as writeFileSync3 } from "fs"
 import { mkdir as mkdir6, rm as rm3, writeFile as writeFile15 } from "fs/promises";
 var import_lodash15 = __toESM(require_lodash(), 1);
 import os2 from "os";
-var import_picomatch11 = __toESM(require_picomatch2(), 1);
+var import_picomatch12 = __toESM(require_picomatch2(), 1);
 import { join as join34, relative as relative22, resolve as resolve42 } from "path";
 
 // ../utils/src/dashboard-api/shared-api.ts
@@ -235807,13 +235810,116 @@ Alternatively, you can reduce the --memory-limit option to require fewer mapping
   }
 }
 
+// dist/internal/validate-lock-files.js
+var import_picomatch11 = __toESM(require_picomatch2(), 1);
+import { basename as basename11, dirname as dirname25 } from "path";
+var IGNORED_DIRS = [".git", "node_modules", "target", "build", ".gradle", "buildSrc"];
+var GRADLE_PROJECT_FILES = /* @__PURE__ */ new Set(["build.gradle", "build.gradle.kts"]);
+var SBT_PROJECT_FILE = "build.sbt";
+var SBT_LOCK_FILE = "build.sbt.lock";
+var GRADLE_LOCK_FILE = "gradle.lockfile";
+var GRADLE_CATALOG_FILE = "libs.versions.toml";
+var GRADLE_LEGACY_LOCKS_PATTERN = /(?:^|\/)gradle\/dependency-locks\/[^/]+\.lockfile$/;
+async function findGradleAndSbtProjectsMissingLockFiles(rootWorkingDirectory, options = {}) {
+  const rawFiles = await getFilesRelative(rootWorkingDirectory, IGNORED_DIRS);
+  const allFiles = options.excludeDirs?.length ? rawFiles.filter((file) => !import_picomatch11.default.isMatch(file, options.excludeDirs)) : rawFiles;
+  let sbomMatcher;
+  try {
+    sbomMatcher = await getPregeneratedSbomMatcher();
+  } catch (e) {
+    const message2 = e instanceof Error ? e.message : String(e);
+    logger.warn(`Could not fetch CDX/SPDX SBOM patterns from Socket API; proceeding without SBOM-based bypass for the lock-file check (${message2})`);
+    sbomMatcher = () => false;
+  }
+  if (allFiles.some((file) => sbomMatcher(basename11(file)))) {
+    return [];
+  }
+  const sbtProjectDirs = /* @__PURE__ */ new Set();
+  const gradleProjectDirs = /* @__PURE__ */ new Set();
+  const sbtLockDirs = /* @__PURE__ */ new Set();
+  const gradleLockDirs = /* @__PURE__ */ new Set();
+  const gradleCatalogDirs = /* @__PURE__ */ new Set();
+  for (const file of allFiles) {
+    const base = basename11(file);
+    const dir = dirname25(file);
+    if (base === SBT_PROJECT_FILE) {
+      sbtProjectDirs.add(dir);
+    } else if (GRADLE_PROJECT_FILES.has(base)) {
+      gradleProjectDirs.add(dir);
+    }
+    if (base === SBT_LOCK_FILE) {
+      sbtLockDirs.add(dir);
+    } else if (base === GRADLE_LOCK_FILE) {
+      gradleLockDirs.add(dir);
+    } else if (GRADLE_LEGACY_LOCKS_PATTERN.test(file)) {
+      const projectDir = dirname25(dirname25(dir)) || ".";
+      gradleLockDirs.add(projectDir);
+    } else if (base === GRADLE_CATALOG_FILE) {
+      gradleCatalogDirs.add(dir);
+      if (basename11(dir) === "gradle") {
+        gradleCatalogDirs.add(dirname25(dir) || ".");
+      }
+    }
+  }
+  const missing = [];
+  for (const projectDir of sbtProjectDirs) {
+    if (!sbtLockDirs.has(projectDir)) {
+      missing.push({
+        packageManager: "SBT",
+        projectDir,
+        expectedFiles: [`${SBT_LOCK_FILE} in this directory`]
+      });
+    }
+  }
+  for (const projectDir of gradleProjectDirs) {
+    if (gradleLockDirs.has(projectDir))
+      continue;
+    if (hasAncestorIn(projectDir, gradleCatalogDirs))
+      continue;
+    if (hasAncestorIn(projectDir, gradleLockDirs))
+      continue;
+    missing.push({
+      packageManager: "GRADLE",
+      projectDir,
+      expectedFiles: [
+        `${GRADLE_LOCK_FILE} in this directory`,
+        `a ${GRADLE_CATALOG_FILE} catalog in this directory or any ancestor`
+      ]
+    });
+  }
+  missing.sort((a4, b) => {
+    if (a4.packageManager !== b.packageManager) {
+      return a4.packageManager.localeCompare(b.packageManager);
+    }
+    return a4.projectDir.localeCompare(b.projectDir);
+  });
+  return missing;
+}
+function hasAncestorIn(dir, ancestorSet) {
+  let current = dir;
+  while (current !== void 0) {
+    if (ancestorSet.has(current))
+      return true;
+    current = nextParent(current);
+  }
+  return false;
+}
+function nextParent(dir) {
+  if (dir === "." || dir === "")
+    return void 0;
+  const parent2 = dirname25(dir);
+  if (parent2 === dir)
+    return void 0;
+  return parent2 === "." ? "." : parent2;
+}
+
 // dist/internal/constants.js
 var DEFAULT_REPORT_FILENAME_BASE = "coana-report";
 
 // dist/internal/exclude-dirs-from-configuration-files.js
 import { existsSync as existsSync27 } from "fs";
 import { readFile as readFile35 } from "fs/promises";
-import { basename as basename11, resolve as resolve41 } from "path";
+import { basename as basename12, resolve as resolve41 } from "path";
 var import_yaml2 = __toESM(require_dist11(), 1);
 async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
   const socketYmlConfigFile = resolve41(rootWorkingDir, "socket.yml");
@@ -235835,7 +235941,7 @@ async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
     const ignorePaths = ignorePathsNode.items.map((item) => String(item));
     if (ignorePaths.some((ignorePath) => ignorePath.includes("!")))
       return void 0;
-    logger.info(`Inferring paths to exclude based on Socket config file: ${basename11(socketConfigFile)}`);
+    logger.info(`Inferring paths to exclude based on Socket config file: ${basename12(socketConfigFile)}`);
     return ignorePaths;
   } catch (e) {
     return void 0;
@@ -236045,7 +236151,7 @@ function transformToVulnChainNode(dependencyTree) {
 }
 
 // dist/internal/socket-mode-helpers-socket-dependency-trees.js
-import { basename as basename12, dirname as dirname25, join as join32, sep as sep5 } from "path";
+import { basename as basename13, dirname as dirname26, join as join32, sep as sep5 } from "path";
 var REQUIREMENTS_FILES_SEARCH_DEPTH2 = 3;
 var venvExcludes = [
   "venv",
@@ -236073,8 +236179,8 @@ var venvExcludes = [
 function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonProjects) {
   switch (ecosystem) {
     case "NPM": {
-      const base = basename12(manifestPath);
-      const dir = dirname25(manifestPath);
+      const base = basename13(manifestPath);
+      const dir = dirname26(manifestPath);
       return base === "package.json" ? dir || "." : void 0;
     }
     case "MAVEN": {
@@ -236084,8 +236190,8 @@ function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonPro
       if (venvExcludes.some((exclude) => manifestPath.startsWith(`${exclude}/`) || manifestPath.includes(`/${exclude}/`))) {
         return void 0;
       }
-      const base = basename12(manifestPath);
-      const dir = dirname25(manifestPath);
+      const base = basename13(manifestPath);
+      const dir = dirname26(manifestPath);
       const workspaceDir = dir === "" ? "." : dir;
       if (properPythonProjects.includes(workspaceDir)) {
         return workspaceDir;
@@ -236108,15 +236214,15 @@ function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonPro
       return ".";
     }
     case "RUST": {
-      return dirname25(manifestPath) || ".";
+      return dirname26(manifestPath) || ".";
     }
     case "GO": {
-      const base = basename12(manifestPath);
-      const dir = dirname25(manifestPath);
+      const base = basename13(manifestPath);
+      const dir = dirname26(manifestPath);
       return base === "go.mod" ? dir || "." : void 0;
     }
     case "RUBYGEMS": {
-      return dirname25(manifestPath) || ".";
+      return dirname26(manifestPath) || ".";
     }
     default: {
       return ".";
@@ -236126,9 +236232,9 @@ function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonPro
 function inferProjectFromManifestPath(ecosystem, manifestPath) {
   switch (ecosystem) {
     case "NPM": {
-      const filename = basename12(manifestPath);
+      const filename = basename13(manifestPath);
       if (["package-lock.json", "pnpm-lock.yaml", "pnpm-lock.yml", "yarn.lock"].includes(filename)) {
-        return dirname25(manifestPath) || ".";
+        return dirname26(manifestPath) || ".";
       }
       return void 0;
     }
@@ -236168,8 +236274,8 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash,
     }
     const allFiles = await getFilesRelative(rootWorkingDirectory, venvExcludes);
     for (const file of allFiles) {
-      const base = basename12(file);
-      const workspaceDir = dirname25(file) || ".";
+      const base = basename13(file);
+      const workspaceDir = dirname26(file) || ".";
       if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join32(rootWorkingDirectory, file))) {
         if (!properPythonProjects.includes(workspaceDir)) {
           properPythonProjects.push(workspaceDir);
@@ -251917,7 +252023,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "15.0.8";
+var version3 = "15.0.9";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -252158,6 +252264,17 @@ var CliCore = class {
       const ecosystems = this.filterEcosystemsByPurlTypes(getEcosystemsFromManifestFileNames(manifestFiles));
       await validateExternalDependencies(ecosystems, "run", manifestFiles);
     }
+    if (!this.options.reachContinueOnMissingLockFiles && !this.options.useOnlyPregeneratedSboms) {
+      const missingLockFiles = await findGradleAndSbtProjectsMissingLockFiles(this.rootWorkingDirectory, {
+        excludeDirs: this.options.excludeDirs
+      });
+      if (missingLockFiles.length > 0) {
+        this.logMissingLockFilesError(missingLockFiles);
+        throw new AnalysisHaltError([
+          `${missingLockFiles.length} Gradle/SBT ${missingLockFiles.length === 1 ? "project is" : "projects are"} missing a lock file, version catalog, or pre-generated SBOM. See the log above for the list and remediation commands.`
+        ]);
+      }
+    }
     this.sendProgress("SCAN_FOR_VULNERABILITIES", true, ".", ".");
     const { artifacts, ecosystemToWorkspaceToAnalysisData, ecosystemToWorkspaceToVulnerabilities } = await fetchArtifactsFromSocket(this.rootWorkingDirectory, this.options.manifestsTarHash, "reachability", this.options.useUnreachableFromPrecomputation, this.options.useOnlyPregeneratedSboms);
     this.sendProgress("SCAN_FOR_VULNERABILITIES", false, ".", ".");
@@ -252203,7 +252320,7 @@ var CliCore = class {
           continue;
         if (includeDirs.length > 0) {
           const relPath = relative22(this.rootWorkingDirectory, resolvedWorkspace);
-          if (!import_picomatch11.default.isMatch(relPath, includeDirs))
+          if (!import_picomatch12.default.isMatch(relPath, includeDirs))
             continue;
         }
         filteredWorkspaces[workspace] = analysisData;
@@ -252894,6 +253011,27 @@ Subproject: ${subproject}`);
     ];
     logger.error(displayLines.join("\n"));
   }
+  logMissingLockFilesError(missing) {
+    const entries = missing.slice(0, 20).map((m4) => `  - ${m4.projectDir} (${m4.packageManager}): expected ${m4.expectedFiles.join(" or ")}`);
+    if (missing.length > 20) {
+      entries.push(`  ... and ${missing.length - 20} more`);
+    }
+    const displayLines = [
+      "",
+      kleur_default.red().bold("Missing Lock Files"),
+      "Gradle and SBT reachability analysis requires a lock file, a Gradle version catalog, or a pre-generated CDX/SPDX SBOM. The following projects are missing all of these:",
+      ...entries,
+      "",
+      "To fix this, commit one of:",
+      "  Gradle:    `./gradlew dependencies --write-locks`, or a `libs.versions.toml` catalog.",
+      "  SBT:       `sbt dependencyLockWrite` (requires the sbt-dependency-lock plugin).",
+      "  Or (any):  a CycloneDX / SPDX SBOM produced by your preferred generator (e.g. `cyclonedx-gradle-plugin`, `sbt-sbom`, `syft`, or `cdxgen`) \u2014 any Socket-recognized CDX/SPDX file anywhere under the project root covers every Gradle/SBT subproject at once.",
+      "",
+      "Alternatively, use --reach-continue-on-missing-lock-files to bypass this check.",
+      ""
+    ];
+    logger.error(displayLines.join("\n"));
+  }
   logAnalysisErrors(totalErrorCount, uniqueErrors) {
     const errorLines = uniqueErrors.slice(0, 20).map((msg) => `  - ${msg}`);
     if (uniqueErrors.length > 20) {
@@ -253242,7 +253380,7 @@ async function writeAnalysisDebugInfo(outputFilePath, ecosystemToWorkspaceToVuln
 handleNexeBinaryMode();
 var program2 = new Command();
 var run2 = new Command();
-run2.name("run").argument("<path>", "File system path to folder containing the project").option("-o, --output-dir <path>", "Write json report to <path>/coana-report.json").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--silent-spinner", "Silence spinner", "CI" in process.env || !process.stdin.isTTY).option("-p, --print-report", "Print the report to the console", false).option("--offline-database <path>", "Path to a coana-offline-db.json file for running the CLI without internet connectivity", void 0).option("-t, --timeout <timeout>", "Set API <timeout> in milliseconds to Coana backend.", "300000").option("-a, --analysis-timeout <timeout>", "Set <timeout> in seconds for each reachability analysis run").option("--memory-limit <memoryInMB>", "Set memory limit for analysis to <memoryInMB> megabytes of memory.", "8192").option("-c, --concurrency <concurrency>", "Set the maximum number of concurrent reachability analysis runs. It's recommended to choose a concurrency level that ensures that each analysis run has at least the --memory-limit amount of memory available. NPM reachability analysis does not support concurrent execution, so the concurrency level is ignored for NPM.", "1").option("--api-key <key>", "Set the Coana dashboard API key. By setting you also enable the dashboard integration.").addOption(new Option("--write-report-to-file", "Write the report dashboard-compatible report to dashboard-report.json. This report may help the Coana team debug issues with the report insertion mechanism.").default(false).hideHelp()).option("--project-name <repoName>", "Set the name of the repository. Used for dashboard integration.").option("--repo-url <repoUrl>", "Set the URL of the repository. Used for dashboard integration.").option("--include-dirs <relativeDirs...>", "globs for directories to include from the detection of subprojects (space-separated)(use relative paths from the project root). Notice, projects that are not included may still be scanned if they are referenced from included projects.").option("--exclude-dirs <relativeDirs...>", "globs for directories to exclude from the detection of subprojects (space-separated)(use relative paths from the project root). Notice, excluded projects may still be scanned if they are referenced from non-excluded projects.").option("--disable-analysis-splitting", "Limits Coana to at most 1 reachability analysis run per workspace").option("--print-analysis-log-file", "Store log output from the JavaScript/TypeScript reachability analysis in the file js-analysis.log file in the root of each workspace", false).option("--entry-points <entryPoints...>", "List of files to analyze for root workspace. The reachability analysis automatically analyzes all files used by the entry points. If not provided, all JavaScript and TypeScript files are considered entry points. For non-root workspaces, all JavaScript and TypeScript files are analyzed as well.").option("--include-projects-with-no-reachability-support", "Also runs Coana on projects where we support traditional SCA, but does not yet support reachability analysis.", false).option("--ecosystems <ecosystems...>", "List of ecosystems to analyze (space-separated). Currently NPM, PIP, MAVEN, NUGET and GO are supported. Default is all supported ecosystems.").addOption(new Option("--purl-types <purlTypes...>", "List of PURL types to analyze (space-separated). Currently npm, pypi, maven, nuget, golang and cargo are supported. Default is all supported purl types.").hideHelp()).option("--changed-files <files...>", "List of files that have changed. If provided, Coana only analyzes workspaces and modules that contain changed files.").option("--disable-report-submission", "Disable the submission of the report to the Coana dashboard. Used by the pipeline blocking feature.", false).option("--disable-analytics-sharing", "Disable analytics sharing.", false).option("--provider-project <path>", "File system path to folder containing the provider project (Only supported for Maven, Gradle, and SBT)").option("--provider-workspaces <dirs...>", "List of workspaces that build the provided runtime environment (Only supported for Maven, Gradle, and SBT)", (paths) => paths.split(" ")).option("--lightweight-reachability", "Runs Coana in lightweight mode. This increases analysis speed but also raises the risk of Coana misclassifying the reachability of certain complex vulnerabilities. Recommended only for use with Coana Guardrail mode.", false).addOption(new Option("--run-without-docker", "Run package managers and reachability analyzers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--run-env <env>", "Specifies the environment in which the CLI is run. So far only MANAGED_SCAN and UNKNOWN are supported.").default("UNKNOWN").choices(["UNKNOWN", "MANAGED_SCAN"]).hideHelp()).addOption(new Option("--guardrail-mode", "Run Coana in guardrail mode. This mode is used to prevent new reachable vulnerabilities from being introduced into the codebase. Usually run as a CI check when pushing new commits to a pull request.")).option("--ignore-failing-workspaces", "Continue processing when a workspace fails instead of exiting. Failed workspaces will be logged at termination.", false).option("--reach-continue-on-install-errors", "Continue analysis when package installation fails, falling back to precomputed (Tier 2) reachability results. By default, the CLI halts on installation errors in socket mode.", process.env.COANA_CONTINUE_ON_INSTALL_ERRORS === "true").option("--reach-continue-on-analysis-errors", "Continue analysis when errors occur (timeouts, OOM, parse errors, etc.), falling back to precomputed (Tier 2) reachability results. By default, the CLI halts on analysis errors in socket mode.", false).option("--reach-continue-on-no-source-files", "Continue analysis when a workspace contains no source files for its ecosystem. By default, the CLI halts in socket mode.", false).addOption(new Option("--socket-mode <output-file>", "Run Coana in socket mode and write report to <output-file>").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).option("--skip-cache-usage", "Do not attempt to use cached analysis configuration from previous runs", false).addOption(new Option("--lazy-mode", "Enable lazy analysis mode for JavaScript/TypeScript. This can significantly speed up analysis by only analyzing code that is actually relevant for the vulnerabilities being analyzed.").default(false).hideHelp()).addOption(new Option("--min-severity <severity>", "Set the minimum severity of vulnerabilities to analyze. Supported severities are info, low, moderate, high and critical.").choices(["info", "INFO", "low", "LOW", "moderate", "MODERATE", "high", "HIGH", "critical", "CRITICAL"])).option("--use-unreachable-from-precomputation", "Skip the reachability analysis for vulnerabilities that are already known to be unreachable from the precomputed reachability analysis (Tier 2).", false).addOption(new Option("--use-only-pregenerated-sboms", "Only include artifacts that have CDX or SPDX files in their manifest files.").default(false).hideHelp()).option("--disable-external-tool-checks", "Disable validation of external tools (npm, python, go, etc.) before running analysis.", false).version(version3).configureHelp({ sortOptions: true }).action(async (path9, options) => {
+run2.name("run").argument("<path>", "File system path to folder containing the project").option("-o, --output-dir <path>", "Write json report to <path>/coana-report.json").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--silent-spinner", "Silence spinner", "CI" in process.env || !process.stdin.isTTY).option("-p, --print-report", "Print the report to the console", false).option("--offline-database <path>", "Path to a coana-offline-db.json file for running the CLI without internet connectivity", void 0).option("-t, --timeout <timeout>", "Set API <timeout> in milliseconds to Coana backend.", "300000").option("-a, --analysis-timeout <timeout>", "Set <timeout> in seconds for each reachability analysis run").option("--memory-limit <memoryInMB>", "Set memory limit for analysis to <memoryInMB> megabytes of memory.", "8192").option("-c, --concurrency <concurrency>", "Set the maximum number of concurrent reachability analysis runs. It's recommended to choose a concurrency level that ensures that each analysis run has at least the --memory-limit amount of memory available. NPM reachability analysis does not support concurrent execution, so the concurrency level is ignored for NPM.", "1").option("--api-key <key>", "Set the Coana dashboard API key. By setting you also enable the dashboard integration.").addOption(new Option("--write-report-to-file", "Write the report dashboard-compatible report to dashboard-report.json. This report may help the Coana team debug issues with the report insertion mechanism.").default(false).hideHelp()).option("--project-name <repoName>", "Set the name of the repository. Used for dashboard integration.").option("--repo-url <repoUrl>", "Set the URL of the repository. Used for dashboard integration.").option("--include-dirs <relativeDirs...>", "globs for directories to include from the detection of subprojects (space-separated)(use relative paths from the project root). Notice, projects that are not included may still be scanned if they are referenced from included projects.").option("--exclude-dirs <relativeDirs...>", "globs for directories to exclude from the detection of subprojects (space-separated)(use relative paths from the project root). Notice, excluded projects may still be scanned if they are referenced from non-excluded projects.").option("--disable-analysis-splitting", "Limits Coana to at most 1 reachability analysis run per workspace").option("--print-analysis-log-file", "Store log output from the JavaScript/TypeScript reachability analysis in the file js-analysis.log file in the root of each workspace", false).option("--entry-points <entryPoints...>", "List of files to analyze for root workspace. The reachability analysis automatically analyzes all files used by the entry points. If not provided, all JavaScript and TypeScript files are considered entry points. For non-root workspaces, all JavaScript and TypeScript files are analyzed as well.").option("--include-projects-with-no-reachability-support", "Also runs Coana on projects where we support traditional SCA, but does not yet support reachability analysis.", false).option("--ecosystems <ecosystems...>", "List of ecosystems to analyze (space-separated). Currently NPM, PIP, MAVEN, NUGET and GO are supported. Default is all supported ecosystems.").addOption(new Option("--purl-types <purlTypes...>", "List of PURL types to analyze (space-separated). Currently npm, pypi, maven, nuget, golang and cargo are supported. Default is all supported purl types.").hideHelp()).option("--changed-files <files...>", "List of files that have changed. If provided, Coana only analyzes workspaces and modules that contain changed files.").option("--disable-report-submission", "Disable the submission of the report to the Coana dashboard. Used by the pipeline blocking feature.", false).option("--disable-analytics-sharing", "Disable analytics sharing.", false).option("--provider-project <path>", "File system path to folder containing the provider project (Only supported for Maven, Gradle, and SBT)").option("--provider-workspaces <dirs...>", "List of workspaces that build the provided runtime environment (Only supported for Maven, Gradle, and SBT)", (paths) => paths.split(" ")).option("--lightweight-reachability", "Runs Coana in lightweight mode. This increases analysis speed but also raises the risk of Coana misclassifying the reachability of certain complex vulnerabilities. Recommended only for use with Coana Guardrail mode.", false).addOption(new Option("--run-without-docker", "Run package managers and reachability analyzers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--run-env <env>", "Specifies the environment in which the CLI is run. So far only MANAGED_SCAN and UNKNOWN are supported.").default("UNKNOWN").choices(["UNKNOWN", "MANAGED_SCAN"]).hideHelp()).addOption(new Option("--guardrail-mode", "Run Coana in guardrail mode. This mode is used to prevent new reachable vulnerabilities from being introduced into the codebase. Usually run as a CI check when pushing new commits to a pull request.")).option("--ignore-failing-workspaces", "Continue processing when a workspace fails instead of exiting. Failed workspaces will be logged at termination.", false).option("--reach-continue-on-install-errors", "Continue analysis when package installation fails, falling back to precomputed (Tier 2) reachability results. By default, the CLI halts on installation errors in socket mode.", process.env.COANA_CONTINUE_ON_INSTALL_ERRORS === "true").option("--reach-continue-on-analysis-errors", "Continue analysis when errors occur (timeouts, OOM, parse errors, etc.), falling back to precomputed (Tier 2) reachability results. By default, the CLI halts on analysis errors in socket mode.", false).option("--reach-continue-on-no-source-files", "Continue analysis when a workspace contains no source files for its ecosystem. By default, the CLI halts in socket mode.", false).option("--reach-continue-on-missing-lock-files", "Continue analysis when a Gradle or SBT project is missing its lock file (or Gradle version catalog / pre-generated SBOM). By default, the CLI halts in socket mode.", process.env.COANA_REACH_CONTINUE_ON_MISSING_LOCK_FILES === "true").addOption(new Option("--socket-mode <output-file>", "Run Coana in socket mode and write report to <output-file>").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).option("--skip-cache-usage", "Do not attempt to use cached analysis configuration from previous runs", false).addOption(new Option("--lazy-mode", "Enable lazy analysis mode for JavaScript/TypeScript. This can significantly speed up analysis by only analyzing code that is actually relevant for the vulnerabilities being analyzed.").default(false).hideHelp()).addOption(new Option("--min-severity <severity>", "Set the minimum severity of vulnerabilities to analyze. Supported severities are info, low, moderate, high and critical.").choices(["info", "INFO", "low", "LOW", "moderate", "MODERATE", "high", "HIGH", "critical", "CRITICAL"])).option("--use-unreachable-from-precomputation", "Skip the reachability analysis for vulnerabilities that are already known to be unreachable from the precomputed reachability analysis (Tier 2).", false).addOption(new Option("--use-only-pregenerated-sboms", "Only include artifacts that have CDX or SPDX files in their manifest files.").default(false).hideHelp()).option("--disable-external-tool-checks", "Disable validation of external tools (npm, python, go, etc.) before running analysis.", false).version(version3).configureHelp({ sortOptions: true }).action(async (path9, options) => {
   process.env.DOCKER_IMAGE_TAG ??= version3;
   options.ecosystems = options.ecosystems?.map((e) => e.toUpperCase());
   options.minSeverity = options.minSeverity?.toUpperCase();
@@ -253293,7 +253431,7 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     const output = await computeFixesAndUpgradePurls(path9, optionsToUse, logFile);
     if (options.outputFile) {
       const outputFile = resolve44(options.outputFile);
-      await mkdir7(dirname26(outputFile), { recursive: true });
+      await mkdir7(dirname27(outputFile), { recursive: true });
       await writeFile17(outputFile, JSON.stringify(output, null, 2));
       logger.info(`Result written to: ${outputFile}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "15.0.8",
+  "version": "15.0.9",
   "description": "Coana CLI",
   "type": "module",
   "bin": {