@socketsecurity/cli-with-sentry 1.0.87 → 1.0.88

package/dist/utils.js

@@ -14,15 +14,15 @@ var path = require('node:path');
 var regexps = require('../external/@socketsecurity/registry/lib/regexps');
 var prompts = require('../external/@socketsecurity/registry/lib/prompts');
 var spawn = require('../external/@socketsecurity/registry/lib/spawn');
-var fs$1 = require('node:fs');
-var promises = require('node:timers/promises');
 var fs = require('../external/@socketsecurity/registry/lib/fs');
+var fs$1 = require('node:fs');
 var registry = require('../external/@socketsecurity/registry');
 var packages = require('../external/@socketsecurity/registry/lib/packages');
 var require$$5 = require('node:module');
 var npm = require('../external/@socketsecurity/registry/lib/npm');
 var streams = require('../external/@socketsecurity/registry/lib/streams');
 var globs = require('../external/@socketsecurity/registry/lib/globs');
+var promises = require('node:timers/promises');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 const sensitiveConfigKeyLookup = new Set(['apiToken']);
@@ -249,40 +249,6 @@ function updateConfigValue(configKey, value) {
   };
 }
 
-const {
-  kInternalsSymbol,
-  [kInternalsSymbol]: {
-    getSentry
-  }
-} = constants;
-class AuthError extends Error {}
-class InputError extends Error {
-  constructor(message, body) {
-    super(message);
-    this.body = body;
-  }
-}
-async function captureException(exception, hint) {
-  const result = captureExceptionSync(exception, hint);
-  // "Sleep" for a second, just in case, hopefully enough time to initiate fetch.
-  await promises.setTimeout(1000);
-  return result;
-}
-function captureExceptionSync(exception, hint) {
-  const Sentry = getSentry();
-  if (!Sentry) {
-    return '';
-  }
-  require$$6.debugFn('notice', 'send: exception to Sentry');
-  return Sentry.captureException(exception, hint);
-}
-
-function failMsgWithBadge(badge, message) {
-  const prefix = vendor.yoctocolorsCjsExports.bgRed(vendor.yoctocolorsCjsExports.bold(vendor.yoctocolorsCjsExports.white(` ${badge}${message ? ': ' : ''}`)));
-  const postfix = message ? ` ${vendor.yoctocolorsCjsExports.bold(message)}` : '';
-  return `${prefix}${postfix}`;
-}
-
 const TOKEN_PREFIX = 'sktsec_';
 const {
   length: TOKEN_PREFIX_LENGTH
@@ -420,6 +386,11 @@ async function handleApiCall(value, options) {
     }
   } catch (e) {
     spinner?.stop();
+    const socketSdkErrorResult = {
+      ok: false,
+      message: 'Socket API returned an error',
+      cause: vendor.messageWithCauses(e)
+    };
     if (desc) {
       logger.logger.fail(`An error was thrown while requesting ${desc}`);
       require$$6.debugFn('error', `caught: ${desc} error`);
@@ -427,13 +398,10 @@ async function handleApiCall(value, options) {
       require$$6.debugFn('error', `caught: Socket API request error`);
     }
     require$$6.debugDir('inspect', {
-      error: e
+      error: e,
+      socketSdkErrorResult
     });
-    return {
-      ok: false,
-      message: 'Socket API returned an error',
-      cause: vendor.messageWithCauses(e)
-    };
+    return socketSdkErrorResult;
   }
 
   // Note: TS can't narrow down the type of result due to generics.
@@ -443,15 +411,7 @@ async function handleApiCall(value, options) {
     const {
       cause: reason
     } = errorResult;
-    if (desc) {
-      require$$6.debugFn('error', `fail: ${desc} bad response`);
-    } else {
-      require$$6.debugFn('error', 'fail: bad response');
-    }
-    require$$6.debugDir('inspect', {
-      sdkResult
-    });
-    return {
+    const socketSdkErrorResult = {
       ok: false,
       message: 'Socket API returned an error',
       cause: `${message}${reason ? ` ( Reason: ${reason} )` : ''}`,
@@ -459,15 +419,17 @@ async function handleApiCall(value, options) {
         code: sdkResult.status
       }
     };
-  } else {
-    const {
-      data
-    } = sdkResult;
-    return {
-      ok: true,
-      data
-    };
+    require$$6.debugFn('error', `fail:${desc ? ` ${desc}` : ''} bad response`);
+    require$$6.debugDir('inspect', {
+      sdkResult
+    });
+    return socketSdkErrorResult;
   }
+  const socketSdkSuccessResult = {
+    ok: true,
+    data: sdkResult.data
+  };
+  return socketSdkSuccessResult;
 }
 async function handleApiCallNoSpinner(value, description) {
   let result;
@@ -635,6 +597,95 @@ async function queryApiSafeJson(path, fetchSpinnerDesc = '') {
     };
   }
 }
+async function sendApiRequest(path, options) {
+  const apiToken = getDefaultToken();
+  if (!apiToken) {
+    return {
+      ok: false,
+      message: 'Authentication Error',
+      cause: 'User must be authenticated to run this command. To log in, run the command `socket login` and enter your Socket API token.'
+    };
+  }
+  const baseUrl = getDefaultApiBaseUrl() || '';
+  if (!baseUrl) {
+    logger.logger.warn('API endpoint is not set and default was empty. Request is likely to fail.');
+  }
+
+  // Lazily access constants.spinner.
+  const {
+    spinner
+  } = constants;
+  if (options.fetchSpinnerDesc) {
+    spinner.start(`Requesting ${options.fetchSpinnerDesc} from API...`);
+  }
+  let result;
+  try {
+    const fetchOptions = {
+      method: options.method,
+      headers: {
+        Authorization: `Basic ${btoa(`${apiToken}:`)}`,
+        'Content-Type': 'application/json'
+      },
+      ...(options.body ? {
+        body: JSON.stringify(options.body)
+      } : {})
+    };
+    result = await fetch(`${baseUrl}${baseUrl.endsWith('/') ? '' : '/'}${path}`, fetchOptions);
+    if (options.fetchSpinnerDesc) {
+      spinner.successAndStop(`Received Socket API response (after requesting ${options.fetchSpinnerDesc}).`);
+    }
+  } catch (e) {
+    if (options.fetchSpinnerDesc) {
+      spinner.failAndStop(`An error was thrown while requesting ${options.fetchSpinnerDesc}.`);
+    }
+    const cause = e?.message;
+    require$$6.debugFn('error', `caught: await fetch() ${options.method} error`);
+    require$$6.debugDir('inspect', {
+      error: e
+    });
+    return {
+      ok: false,
+      message: 'API Request failed to complete',
+      ...(cause ? {
+        cause
+      } : {})
+    };
+  }
+  if (!result.ok) {
+    const cause = await getErrorMessageForHttpStatusCode(result.status);
+    return {
+      ok: false,
+      message: 'Socket API returned an error',
+      cause: `${result.statusText}${cause ? ` (cause: ${cause})` : ''}`,
+      data: {
+        code: result.status
+      }
+    };
+  }
+  try {
+    const data = await result.json();
+    return {
+      ok: true,
+      data: data
+    };
+  } catch (e) {
+    require$$6.debugFn('error', 'caught: await result.json() error');
+    require$$6.debugDir('inspect', {
+      error: e
+    });
+    return {
+      ok: false,
+      message: 'API Request failed to complete',
+      cause: 'There was an unexpected error trying to parse the response JSON'
+    };
+  }
+}
+
+function failMsgWithBadge(badge, message) {
+  const prefix = vendor.yoctocolorsCjsExports.bgRed(vendor.yoctocolorsCjsExports.bold(vendor.yoctocolorsCjsExports.white(` ${badge}${message ? ': ' : ''}`)));
+  const postfix = message ? ` ${vendor.yoctocolorsCjsExports.bold(message)}` : '';
+  return `${prefix}${postfix}`;
+}
 
 function mdTableStringNumber(title1, title2, obj) {
   // | Date        | Counts |
@@ -782,11 +833,17 @@ function checkCommandInput(outputKind, ...checks) {
     }
     // If the message has newlines then format the first line with the input
     // expectation and the rest indented below it.
-    msg.push(`  - ${lines[0]} (${d.test ? vendor.yoctocolorsCjsExports.green(d.pass) : vendor.yoctocolorsCjsExports.red(d.fail)})`);
+    const logSymbol = d.test ? logger.LOG_SYMBOLS.success : logger.LOG_SYMBOLS.fail;
+    const reason = d.test ? d.pass : d.fail;
+    let listItem = `  ${logSymbol} ${lines[0]}`;
+    if (reason) {
+      const styledReason = d.test ? vendor.yoctocolorsCjsExports.green(reason) : vendor.yoctocolorsCjsExports.red(reason);
+      listItem += ` (${styledReason})`;
+    }
+    msg.push(listItem);
     if (lineCount > 1) {
       msg.push(...lines.slice(1).map(str => `    ${str}`));
     }
-    msg.push('');
   }
 
   // Use exit status of 2 to indicate incorrect usage, generally invalid
@@ -878,9 +935,6 @@ function description(command) {
   const str = typeof description === 'string' ? description : String(description);
   return strings.indentString(str, HELP_PAD_NAME).trimStart();
 }
-function trimNewlines(str) {
-  return str.replace(/^\n+|\n+$/g, '');
-}
 async function meowWithSubcommands(subcommands, options) {
   const {
     aliases = {},
@@ -963,7 +1017,7 @@ async function meowWithSubcommands(subcommands, options) {
   }
 
   // This is basically a dry-run parse of cli args and flags. We use this to
-  // determine config overrides and expected o mode.
+  // determine config overrides and expected output mode.
   const cli1 = vendor.meow({
     argv,
     importMeta,
@@ -1015,7 +1069,7 @@ async function meowWithSubcommands(subcommands, options) {
     return;
   }
 
-  // If we got at least some args, then lets find o if we can find a command.
+  // If we have got some args, then lets find out if we can find a command.
   if (commandOrAliasName) {
     const alias = aliases[commandOrAliasName];
     // First: Resolve argv data from alias if its an alias that's been given.
@@ -1087,7 +1141,7 @@ async function meowWithSubcommands(subcommands, options) {
     padName: HELP_PAD_NAME
   })}`);
   if (isRootCommand) {
-    lines.push('', 'Environment variables', '  SOCKET_CLI_API_TOKEN        Set the Socket API token', '  SOCKET_CLI_CONFIG           A JSON stringified Socket configuration object', '  SOCKET_CLI_GIT_USER_EMAIL   The git config `user.email` used by Socket CLI', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]@users.noreply.github.com`, '  SOCKET_CLI_GIT_USER_NAME    The git config `user.name` used by Socket CLI', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]`, `  SOCKET_CLI_GITHUB_TOKEN     A classic or fine-grained ${vendor.terminalLinkExports('GitHub personal access token', 'https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens')}`, `                              ${vendor.yoctocolorsCjsExports.italic('Aliases:')} GITHUB_TOKEN`, '  SOCKET_CLI_NO_API_TOKEN     Make the default API token `undefined`', '  SOCKET_CLI_NPM_PATH         The absolute location of the npm directory', '  SOCKET_CLI_ORG_SLUG         Specify the Socket organization slug', '', '  SOCKET_CLI_ACCEPT_RISKS     Accept risks of a Socket wrapped npm/npx run', '  SOCKET_CLI_VIEW_ALL_RISKS   View all risks of a Socket wrapped npm/npx run', '', 'Environment variables for development', '  SOCKET_CLI_API_BASE_URL     Change the base URL for all API-calls', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} The "apiBaseUrl" value of socket/settings local app data`, '                              if present, else https://api.socket.dev/v0/', '  SOCKET_CLI_API_PROXY        Set the proxy all requests are routed through, e.g. if set to', `                              ${vendor.terminalLinkExports('http://127.0.0.1:9090', 'https://docs.proxyman.io/troubleshooting/couldnt-see-any-requests-from-3rd-party-network-libraries')} then all request are passed through that proxy`, `                              ${vendor.yoctocolorsCjsExports.italic('Aliases:')} HTTPS_PROXY, https_proxy, HTTP_PROXY, and http_proxy`, '  SOCKET_CLI_DEBUG            Enable debug logging in Socket CLI', `  DEBUG                       Enable debug logging based on the ${vendor.terminalLinkExports('debug', 'https://socket.dev/npm/package/debug')} package`);
+    lines.push('', 'Environment variables', '  SOCKET_CLI_API_TOKEN        Set the Socket API token', '  SOCKET_CLI_CONFIG           A JSON stringified Socket configuration object', '  SOCKET_CLI_GITHUB_API_URL   Change the base URL for GitHub REST API calls', '  SOCKET_CLI_GIT_USER_EMAIL   The git config `user.email` used by Socket CLI', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]@users.noreply.github.com`, '  SOCKET_CLI_GIT_USER_NAME    The git config `user.name` used by Socket CLI', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]`, `  SOCKET_CLI_GITHUB_TOKEN     A classic or fine-grained ${vendor.terminalLinkExports('GitHub personal access token', 'https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens')}`, `                              ${vendor.yoctocolorsCjsExports.italic('Aliases:')} GITHUB_TOKEN`, '  SOCKET_CLI_NO_API_TOKEN     Make the default API token `undefined`', '  SOCKET_CLI_NPM_PATH         The absolute location of the npm directory', '  SOCKET_CLI_ORG_SLUG         Specify the Socket organization slug', '', '  SOCKET_CLI_ACCEPT_RISKS     Accept risks of a Socket wrapped npm/npx run', '  SOCKET_CLI_VIEW_ALL_RISKS   View all risks of a Socket wrapped npm/npx run', '', 'Environment variables for development', '  SOCKET_CLI_API_BASE_URL     Change the base URL for Socket API calls', `                              ${vendor.yoctocolorsCjsExports.italic('Defaults:')} The "apiBaseUrl" value of socket/settings local app data`, '                              if present, else https://api.socket.dev/v0/', '  SOCKET_CLI_API_PROXY        Set the proxy all requests are routed through, e.g. if set to', `                              ${vendor.terminalLinkExports('http://127.0.0.1:9090', 'https://docs.proxyman.io/troubleshooting/couldnt-see-any-requests-from-3rd-party-network-libraries')} then all request are passed through that proxy`, `                              ${vendor.yoctocolorsCjsExports.italic('Aliases:')} HTTPS_PROXY, https_proxy, HTTP_PROXY, and http_proxy`, '  SOCKET_CLI_DEBUG            Enable debug logging in Socket CLI', `  DEBUG                       Enable debug logging based on the ${vendor.terminalLinkExports('debug', 'https://socket.dev/npm/package/debug')} package`);
   }
 
   // Parse it again. Config overrides should now be applied (may affect help).
@@ -1148,7 +1202,7 @@ function meowOrExit({
     collectUnknownFlags: true,
     description: config.description,
     flags: config.flags,
-    help: trimNewlines(config.help(command, config)),
+    help: strings.trimNewlines(config.help(command, config)),
     importMeta
   });
   if (!cli.flags['nobanner']) {
@@ -1202,7 +1256,7 @@ function meowOrExit({
     autoHelp: false,
     autoVersion: false,
     description: config.description,
-    help: trimNewlines(config.help(command, config)),
+    help: strings.trimNewlines(config.help(command, config)),
     importMeta,
     flags: config.flags
   });
@@ -1367,7 +1421,7 @@ async function determineOrgSlug(orgFlag, interactive, dryRun) {
   let orgSlug = String(orgFlag || defaultOrgSlug || '');
   if (!orgSlug) {
     if (!interactive) {
-      logger.logger.warn('Note: This command requires an org slug because the remote Socket API endpoint does.');
+      logger.logger.warn('Note: This command requires an org slug because the Socket API endpoint does.');
       logger.logger.warn('');
       logger.logger.warn('It seems no default org was setup and the `--org` flag was not used.');
       logger.logger.warn("Additionally, `--no-interactive` was set so we can't ask for it.");
@@ -1381,11 +1435,9 @@ async function determineOrgSlug(orgFlag, interactive, dryRun) {
       logger.logger.warn('This command will exit now because the org slug is required to proceed.');
       return ['', undefined];
     }
-
-    // ask from server
     logger.logger.warn('Unable to determine the target org. Trying to auto-discover it now...');
-    logger.logger.info('Note: you can run `socket login` to set a default org. You can also override it with the --org flag.');
-    // Add newline in stderr.
+    logger.logger.info('Note: Run `socket login` to set a default org.');
+    logger.logger.error('      Use the --org flag to override the default org.');
     logger.logger.error('');
     if (dryRun) {
       logger.logger.fail('Skipping auto-discovery of org in dry-run mode');
@@ -1874,6 +1926,98 @@ function* walkNestedMap(map, keys = []) {
   }
 }
 
+function extractTier1ReachabilityScanId(socketFactsFile) {
+  const json = fs.readJsonSync(socketFactsFile, {
+    throws: false
+  });
+  const tier1ReachabilityScanId = String(json?.['tier1ReachabilityScanId'] ?? '').trim();
+  return tier1ReachabilityScanId.length > 0 ? tier1ReachabilityScanId : undefined;
+}
+async function spawnCoana(args, options, extra) {
+  const {
+    env: spawnEnv
+  } = {
+    __proto__: null,
+    ...options
+  };
+  const mixinsEnv = {
+    // Lazily access constants.ENV.INLINED_SOCKET_CLI_VERSION.
+    SOCKET_CLI_VERSION: constants.ENV.INLINED_SOCKET_CLI_VERSION
+  };
+  const defaultApiToken = getDefaultToken();
+  if (defaultApiToken) {
+    mixinsEnv['SOCKET_CLI_API_TOKEN'] = defaultApiToken;
+  }
+  const orgSlugCResult = await getDefaultOrgSlug();
+  if (orgSlugCResult.ok) {
+    mixinsEnv['SOCKET_ORG_SLUG'] = orgSlugCResult.data;
+  }
+  try {
+    const output = await spawn.spawn(constants.execPath, [
+    // Lazily access constants.nodeNoWarningsFlags.
+    ...constants.nodeNoWarningsFlags,
+    // Lazily access constants.nodeMemoryFlags.
+    ...constants.nodeMemoryFlags,
+    // Lazily access constants.coanaBinPath.
+    constants.coanaBinPath, ...args], {
+      ...options,
+      env: {
+        ...process.env,
+        // Lazily access constants.processEnv.
+        ...constants.processEnv,
+        ...mixinsEnv,
+        ...spawnEnv
+      }
+    }, extra);
+    return {
+      ok: true,
+      data: output.stdout
+    };
+  } catch (e) {
+    const stderr = e?.stderr;
+    const message = stderr ? stderr : e?.message;
+    return {
+      ok: false,
+      data: e,
+      message
+    };
+  }
+}
+
+const ALL_ECOSYSTEMS = ['apk', 'bitbucket', 'cargo', 'chrome', 'cocoapods', 'composer', 'conan', 'conda', 'cran', 'deb', 'docker', 'gem', 'generic', 'github', 'golang', 'hackage', 'hex', 'huggingface', 'maven', 'mlflow', 'npm', 'nuget', 'oci', 'pub', 'pypi', 'qpkg', 'rpm', 'swift', 'swid', 'unknown'];
+const COANA_SUPPORTED_LIST = ['composer', 'hex', 'github', 'golang', 'maven', 'npm', 'nuget', 'pypi', 'pub', 'gem', 'cargo', 'swift'];
+new Set(ALL_ECOSYSTEMS);
+const COANA_SUPPORTED_ECOSYSTEMS = new Set(COANA_SUPPORTED_LIST);
+
+/**
+ * Ecosystems/Purl types are slightly different in Coana.  This function converts
+ * the PURL_Type[] to a string of Coana compatible ecosystem names. Ecosystems that
+ * are not supported by Coana are ignored.
+ */
+function convertToCoanaEcosystems(ecosystems) {
+  return ecosystems.filter(ecosystem => COANA_SUPPORTED_ECOSYSTEMS.has(ecosystem)).map(ecosystem => {
+    switch (ecosystem) {
+      case 'cargo':
+        return 'RUST';
+      case 'gem':
+        return 'RUBYGEMS';
+      case 'github':
+        return 'ACTIONS';
+      case 'golang':
+        return 'GO';
+      case 'hex':
+        return 'ERLANG';
+      case 'pypi':
+        return 'PIP';
+      default:
+        return ecosystem.toUpperCase();
+    }
+  });
+}
+function getEcosystemChoicesForMeow() {
+  return [...ALL_ECOSYSTEMS];
+}
+
 const DEFAULT_IGNORE_FOR_GIT_IGNORE = globs.defaultIgnore.filter(p => !p.endsWith('.gitignore'));
 const IGNORED_DIRS = [
 // Taken from ignore-by-default:
@@ -2174,13 +2318,11 @@ async function getPackageFilesForScan(inputPaths, supportedFiles, options) {
   return filterBySupportedScanFiles(filepaths, supportedFiles);
 }
 
-async function readOrDefaultSocketJson(cwd) {
-  const result = await readSocketJson(cwd, true);
-  if (result.ok) {
-    return result.data;
-  }
-  // This should be unreachable but it makes TS happy
-  return getDefaultSocketJson();
+function readOrDefaultSocketJson(cwd) {
+  const jsonCResult = readSocketJsonSync(cwd, true);
+  return jsonCResult.ok ? jsonCResult.data :
+  // This should be unreachable but it makes TS happy.
+  getDefaultSocketJson();
 }
 function getDefaultSocketJson() {
   return {
@@ -2191,10 +2333,10 @@ function getDefaultSocketJson() {
     version: 1
   };
 }
-async function readSocketJson(cwd, defaultOnError = false) {
+function readSocketJsonSync(cwd, defaultOnError = false) {
   const sockJsonPath = path.join(cwd, 'socket.json');
   if (!fs$1.existsSync(sockJsonPath)) {
-    require$$6.debugFn('notice', `miss: file not found ${sockJsonPath}`);
+    require$$6.debugFn('notice', `miss: socket.json not found at ${cwd}`);
     return {
       ok: true,
       data: getDefaultSocketJson()
@@ -2202,35 +2344,39 @@ async function readSocketJson(cwd, defaultOnError = false) {
   }
   let json = null;
   try {
-    json = await fs$1.promises.readFile(sockJsonPath, 'utf8');
+    json = fs$1.readFileSync(sockJsonPath, 'utf8');
   } catch (e) {
-    require$$6.debugDir('inspect', {
-      error: e
-    });
     if (defaultOnError) {
-      logger.logger.warn('Warning: failed to read file, using default');
+      logger.logger.warn('Failed to read socket.json, using default');
+      require$$6.debugDir('inspect', {
+        error: e
+      });
       return {
         ok: true,
         data: getDefaultSocketJson()
       };
     }
-    const msg = e?.message || '(none)';
+    const msg = e?.message;
+    require$$6.debugDir('inspect', {
+      error: e
+    });
     return {
       ok: false,
-      message: 'Failed to read file',
-      cause: `An error was thrown while trying to read your socket.json: ${msg}`
+      message: 'Failed to read socket.json',
+      cause: `An error occurred while trying to read socket.json${msg ? `: ${msg}` : ''}`
     };
   }
   let obj;
   try {
     obj = JSON.parse(json);
-  } catch {
-    require$$6.debugFn('error', 'fail: parse JSON');
+  } catch (e) {
+    require$$6.debugFn('error', 'caught: JSON.parse error');
     require$$6.debugDir('inspect', {
+      error: e,
       json
     });
     if (defaultOnError) {
-      logger.logger.warn('Warning: failed to parse file, using default');
+      logger.logger.warn('Failed to parse socket.json, using default');
       return {
         ok: true,
         data: getDefaultSocketJson()
@@ -2252,7 +2398,6 @@ async function readSocketJson(cwd, defaultOnError = false) {
 
   // Do we really care to validate? All properties are optional so code will have
   // to check every step of the way regardless. Who cares about validation here...?
-
   return {
     ok: true,
     data: obj
@@ -2263,11 +2408,9 @@ async function writeSocketJson(cwd, sockJson) {
   try {
     json = JSON.stringify(sockJson, null, 2);
   } catch (e) {
-    require$$6.debugFn('error', 'fail: stringify JSON');
-    require$$6.debugDir('inspect', {
-      error: e
-    });
+    require$$6.debugFn('error', 'caught: JSON.stringify error');
     require$$6.debugDir('inspect', {
+      error: e,
       sockJson
     });
     return {
@@ -2284,49 +2427,6 @@ async function writeSocketJson(cwd, sockJson) {
   };
 }
 
-async function spawnCoana(args, options, extra) {
-  const {
-    env: spawnEnv
-  } = {
-    __proto__: null,
-    ...options
-  };
-  const orgSlugCResult = await getDefaultOrgSlug();
-  const SOCKET_CLI_API_TOKEN = getDefaultToken();
-  const SOCKET_ORG_SLUG = orgSlugCResult.ok ? orgSlugCResult.data : undefined;
-  try {
-    const output = await spawn.spawn(constants.execPath, [
-    // Lazily access constants.nodeNoWarningsFlags.
-    ...constants.nodeNoWarningsFlags,
-    // Lazily access constants.nodeMemoryFlags.
-    ...constants.nodeMemoryFlags,
-    // Lazily access constants.coanaBinPath.
-    constants.coanaBinPath, ...args], {
-      ...options,
-      env: {
-        ...process.env,
-        // Lazily access constants.processEnv.
-        ...constants.processEnv,
-        SOCKET_CLI_API_TOKEN,
-        SOCKET_ORG_SLUG,
-        ...spawnEnv
-      }
-    }, extra);
-    return {
-      ok: true,
-      data: output.stdout
-    };
-  } catch (e) {
-    const stderr = e?.stderr;
-    const message = stderr ? stderr : e?.message;
-    return {
-      ok: false,
-      data: e,
-      message
-    };
-  }
-}
-
 const {
   NODE_MODULES,
   NPM: NPM$3,
@@ -2806,13 +2906,9 @@ function getCveInfoFromAlertsMap(alertsMap, options) {
         }
         require$$6.debugFn('error', 'fail: invalid SocketPackageAlert');
         require$$6.debugDir('inspect', {
-          alert
+          alert,
+          error
         });
-        if (error) {
-          require$$6.debugDir('inspect', {
-            error: error.message ?? error
-          });
-        }
       }
     }
   }
@@ -2915,7 +3011,7 @@ function logAlertsMap(alertsMap, options) {
       const title = info?.title ?? type;
       const maybeDesc = info?.description ? ` - ${info.description}` : '';
       const content = `${title}${maybeAttributes}${maybeDesc}`;
-      // TODO: emoji seems to mis-align terminals sometimes
+      // TODO: An added emoji seems to mis-align terminals sometimes.
       lines.add(`  ${content}`);
     }
     const purlObj = getPurlObject(purl);
@@ -3790,6 +3886,34 @@ fi
   };
 }
 
+const {
+  kInternalsSymbol,
+  [kInternalsSymbol]: {
+    getSentry
+  }
+} = constants;
+class AuthError extends Error {}
+class InputError extends Error {
+  constructor(message, body) {
+    super(message);
+    this.body = body;
+  }
+}
+async function captureException(exception, hint) {
+  const result = captureExceptionSync(exception, hint);
+  // "Sleep" for a second, just in case, hopefully enough time to initiate fetch.
+  await promises.setTimeout(1000);
+  return result;
+}
+function captureExceptionSync(exception, hint) {
+  const Sentry = getSentry();
+  if (!Sentry) {
+    return '';
+  }
+  require$$6.debugFn('notice', 'send: exception to Sentry');
+  return Sentry.captureException(exception, hint);
+}
+
 exports.AuthError = AuthError;
 exports.COMPLETION_CMD_PREFIX = COMPLETION_CMD_PREFIX;
 exports.InputError = InputError;
@@ -3800,10 +3924,12 @@ exports.checkCommandInput = checkCommandInput;
 exports.cmdFlagValueToArray = cmdFlagValueToArray;
 exports.cmdFlagsToString = cmdFlagsToString;
 exports.cmdPrefixMessage = cmdPrefixMessage;
+exports.convertToCoanaEcosystems = convertToCoanaEcosystems;
 exports.createEnum = createEnum;
 exports.detectAndValidatePackageEnvironment = detectAndValidatePackageEnvironment;
 exports.determineOrgSlug = determineOrgSlug;
 exports.extractOverridesFromPnpmLockSrc = extractOverridesFromPnpmLockSrc;
+exports.extractTier1ReachabilityScanId = extractTier1ReachabilityScanId;
 exports.failMsgWithBadge = failMsgWithBadge;
 exports.fetchOrganization = fetchOrganization;
 exports.getAlertsMapFromPnpmLockfile = getAlertsMapFromPnpmLockfile;
@@ -3814,6 +3940,7 @@ exports.getConfigValue = getConfigValue;
 exports.getConfigValueOrUndef = getConfigValueOrUndef;
 exports.getCveInfoFromAlertsMap = getCveInfoFromAlertsMap;
 exports.getDefaultOrgSlug = getDefaultOrgSlug;
+exports.getEcosystemChoicesForMeow = getEcosystemChoicesForMeow;
 exports.getFlagListOutput = getFlagListOutput;
 exports.getMajor = getMajor;
 exports.getMinVersion = getMinVersion;
@@ -3868,9 +3995,10 @@ exports.queryApiSafeJson = queryApiSafeJson;
 exports.queryApiSafeText = queryApiSafeText;
 exports.readLockfile = readLockfile;
 exports.readOrDefaultSocketJson = readOrDefaultSocketJson;
-exports.readSocketJson = readSocketJson;
+exports.readSocketJsonSync = readSocketJsonSync;
 exports.removeNodeModules = removeNodeModules;
 exports.runAgentInstall = runAgentInstall;
+exports.sendApiRequest = sendApiRequest;
 exports.serializeResultJson = serializeResultJson;
 exports.setupSdk = setupSdk;
 exports.spawnCoana = spawnCoana;
@@ -3879,5 +4007,5 @@ exports.tildify = tildify;
 exports.updateConfigValue = updateConfigValue;
 exports.walkNestedMap = walkNestedMap;
 exports.writeSocketJson = writeSocketJson;
-//# debugId=619636e9-83fa-428e-adf6-5923dee8d39b
+//# debugId=789dd9df-3aab-4228-bb69-15c9d9624fae
 //# sourceMappingURL=utils.js.map