@socketsecurity/cli 1.1.102 → 1.1.152

package/dist/types/commands/manifest/bazel/extract_bazel_to_maven.d.mts

@@ -1,4 +1,4 @@
-import type { ExtractedArtifact } from './bazel-build-parser.mts';
+import type { ExtractedArtifact } from './bazel-cquery.mts';
 export type ExtractBazelOptions = {
     bazelFlags: string | undefined;
     bazelOutputBase: string | undefined;
@@ -7,27 +7,130 @@ export type ExtractBazelOptions = {
     cwd: string;
     // Optional env override used for python-shim PATH augmentation.
     env?: NodeJS.ProcessEnv;
+    // Directory basenames the workspace walker must not descend into.
+    // Caller-supplied so the orchestrator stays generic; the CLI command
+    // composes the codebase-wide `IGNORED_DIRS` with Bazel-specific dirs
+    // like `.socket-auto-manifest`.
+    ignoreDirNames?: ReadonlySet<string> | undefined;
+    // Directory basename prefixes the workspace walker must not descend
+    // into. Caller-supplied so the orchestrator stays generic; the CLI
+    // command supplies `bazel-` for Bazel's output_base symlinks.
+    ignoreDirPrefixes?: readonly string[] | undefined;
     out: string;
     // Use the auto-manifest sibling directory instead of writing directly to `out`.
     outLayout?: 'flat';
+    // Per-repo cquery timeout in milliseconds. When the caller leaves this
+    // unset the orchestrator falls back to DEFAULT_PER_REPO_TIMEOUT_MS (the
+    // auto-manifest default, kept short so the wider scan is not stalled). The
+    // explicit `socket manifest bazel` command wires this to a CLI flag with a
+    // longer default.
+    perRepoTimeoutMs?: number | undefined;
     verbose: boolean;
 };
+// Best-effort-per-hub produces four distinct run outcomes a single `ok`
+// boolean would conflate:
+//  - `complete`    — every discovered hub extracted cleanly; >=1 manifest.
+//  - `partial`     — >=1 manifest written, but at least one hub failed,
+//                    timed out, or dropped edges. Worth uploading, but the
+//                    graph is known-incomplete.
+//  - `noEcosystem` — no Bazel/Maven found. Whether that's an error is
+//                    caller-dependent (tolerated in auto mode, error in
+//                    explicit mode), so it must NOT be flattened into the
+//                    failure states.
+//  - `hardFailure` — zero manifests written and it wasn't `noEcosystem`
+//                    (discovery threw, or every discovered hub failed).
+//                    Always an error for every caller.
+export type ExtractBazelStatus = 'complete' | 'hardFailure' | 'noEcosystem' | 'partial';
+// Per-hub extraction state inside one workspace. Recorded so the CLI can emit
+// a machine-readable completeness signal instead of presenting a partial
+// extraction as complete.
+//  - `populated`     — the hub yielded >=1 artifact and a manifest was written.
+//  - `empty`         — the hub is defined but has no Maven targets.
+//  - `not-defined`   — the probed conventional name does not exist here.
+//  - `skipped-lockfile` — a committed maven_install.json already covers this
+//                    hub, so the CLI deliberately did not re-emit it.
+//  - `failed`        — the hub's cquery errored, timed out, or its graph was
+//                    known-incomplete (dropped/pruned edges, --keep_going).
+//  - `indeterminate` — discovery could not classify the hub (probe threw or
+//                    returned an unrecognized error); NOT evidence of absence.
+export type HubState = 'populated' | 'empty' | 'not-defined' | 'skipped-lockfile' | 'failed' | 'indeterminate';
+export type HubOutcome = {
+    hub: string;
+    state: HubState;
+    // Short, machine-stable reason when the hub is `failed`/`indeterminate`.
+    reason?: string | undefined;
+};
+// Per-workspace outcome. `load` distinguishes a workspace we could not even
+// read (`failed` — e.g. an unbound-var MODULE.bazel fragment) from one we
+// analyzed (`loaded`). A workspace that failed to load contributes to a
+// hard failure when nothing else was analyzable, and to a partial otherwise.
+export type WorkspaceOutcome = {
+    relPath: string;
+    load: 'loaded' | 'failed';
+    hubs: HubOutcome[];
+    // Set when the workspace itself could not be analyzed.
+    reason?: string | undefined;
+};
 export type ExtractBazelResult = {
     artifactCount: number;
-    manifestPath?: string | undefined;
-    ok: boolean;
+    manifestPaths: string[];
+    status: ExtractBazelStatus;
+    // True only when `status === 'complete'`. Surfaced so downstream consumers
+    // (and the CLI's emitted summary) get a single machine-readable
+    // completeness flag without re-deriving it from `status`.
+    complete: boolean;
+    // Per-workspace / per-hub analyzability breakdown backing the completeness
+    // signal. Empty for `noEcosystem` and early `hardFailure` (toolchain setup
+    // failed before any workspace was inspected).
+    workspaceOutcomes: WorkspaceOutcome[];
 };
+// Default directory-prune policy for the Bazel workspace walk. The
+// orchestrator applies this unconditionally so neither caller (the explicit
+// `socket manifest bazel` command nor `--auto-manifest`) can omit it and let
+// the walk descend `node_modules`/VCS/vendored trees. Callers may
+// pass extra names/prefixes to EXTEND, not replace, this set.
+export declare const DEFAULT_BAZEL_WALKER_IGNORE_DIR_NAMES: ReadonlySet<string>;
+// Bazel's `bazel-*` output_base symlinks.
+export declare const DEFAULT_BAZEL_WALKER_IGNORE_DIR_PREFIXES: readonly string[];
 type MavenInstallJsonCurrent = {
     artifacts: Record<string, {
-        shasums: {
-            jar?: string;
-        };
         version: string;
     }>;
     dependencies: Record<string, string[]>;
     repositories?: Record<string, string[]>;
 };
-export declare function normalizeToMavenInstallJson(artifacts: ExtractedArtifact[]): MavenInstallJsonCurrent;
+export type NormalizeResult = {
+    json: MavenInstallJsonCurrent;
+    // Versionless keys skipped because the coordinate was malformed (key shape
+    // outside 2-4 non-empty segments, or an empty version). Known data loss.
+    droppedArtifacts: string[];
+    // `source -> target` edges pruned because one endpoint wasn't an emitted
+    // artifact. Known data loss.
+    prunedEdges: string[];
+};
+// Builds a modern `maven_install.json` from artifacts whose `deps` already
+// hold resolved versionless coordinates (the cquery parser resolves edge
+// labels against each repo's own targets while `repoName` is in scope, so no
+// label-to-coordinate resolution happens here). Keys are versionless `g:a`
+// (preserving any packaging/classifier segments); dependency values are the
+// resolved coordinate sets.
+//
+// Two-phase so the emitted graph is internally closed and survives the server
+// parser, which rejects malformed coordinates and edges referencing unlisted
+// artifacts (and can abort after enough errors). Phase 1 builds (and
+// validates) the artifact keys; phase 2 emits only edges whose source AND
+// target are valid emitted keys. Anything dropped is reported so the caller
+// can flip the hub partial — never silently lost post-upload.
+export declare function normalizeToMavenInstallJson(artifacts: ExtractedArtifact[]): NormalizeResult;
+// Cross-workspace dedup keyed on the full Maven coordinate string
+// (`g:a:v[:classifier]`). The metadata cquery emits one entry per rule,
+// so the same `androidx.annotation:annotation:1.8.2` can show up in
+// `examples/dagger/@maven` and `examples/ksp/@maven` in rules_kotlin —
+// downstream only needs it once. Each occurrence resolves its edges against
+// its own repo's targets, so the resolved `deps` can legitimately differ
+// between occurrences; union them rather than keeping only the first, or
+// real graph edges would be silently dropped.
+export declare function dedupArtifactsByCoord(artifacts: ExtractedArtifact[]): ExtractedArtifact[];
 export declare function extractBazelToMaven(opts: ExtractBazelOptions): Promise<ExtractBazelResult>;
 export {};
 //# sourceMappingURL=extract_bazel_to_maven.d.mts.map

package/dist/types/commands/manifest/bazel/extract_bazel_to_maven.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"extract_bazel_to_maven.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/bazel/extract_bazel_to_maven.mts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAGjE,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,EAAE,EAAE,OAAO,CAAA;CACZ,CAAA;AAiBD,KAAK,uBAAuB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACxC,CAAA;AA2DD,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,iBAAiB,EAAE,GAC7B,uBAAuB,CAqEzB;AA6HD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA6J7B"}
+{"version":3,"file":"extract_bazel_to_maven.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/bazel/extract_bazel_to_maven.mts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAoB,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAK7E,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,kEAAkE;IAClE,qEAAqE;IACrE,qEAAqE;IACrE,gCAAgC;IAChC,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;IAChD,oEAAoE;IACpE,mEAAmE;IACnE,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;IACjD,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,kBAAkB;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,wEAAwE;AACxE,0BAA0B;AAC1B,6EAA2E;AAC3E,0EAAwE;AACxE,2EAA2E;AAC3E,gDAAgD;AAChD,wEAAsE;AACtE,wEAAwE;AACxE,0EAA0E;AAC1E,qCAAqC;AACrC,0EAAwE;AACxE,wEAAwE;AACxE,uDAAuD;AACvD,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,aAAa,GACb,aAAa,GACb,SAAS,CAAA;AAEb,8EAA8E;AAC9E,yEAAyE;AACzE,0BAA0B;AAC1B,kFAAgF;AAChF,sEAAoE;AACpE,2EAAyE;AACzE,+EAA6E;AAC7E,sEAAsE;AACtE,+EAA6E;AAC7E,4EAA4E;AAC5E,8EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,MAAM,QAAQ,GAChB,WAAW,GACX,OAAO,GACP,aAAa,GACb,kBAAkB,GAClB,QAAQ,GACR,eAAe,CAAA;AAEnB,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,QAAQ,CAAA;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,4EAA4E;AAC5E,4EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;IACzB,IAAI,EAAE,UAAU,EAAE,CAAA;IAClB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,2EAA2E;IAC3E,gEAAgE;IAChE,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,2EAA2E;IAC3E,8CAA8C;IAC9C,iBAAiB,EAAE,gBAAgB,EAAE,CAAA;CACtC,CAAA;AAYD,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,kEAAkE;AAClE,8DAA8D;AAC9D,eAAO,MAAM,qCAAqC,EAAE,WAAW,CAAC,MAAM,CASlE,CAAA;AACJ,0CAA0C;AAC1C,eAAO,MAAM,wCAAwC,EAAE,SAAS,MAAM,EAErE,CAAA;AAiBD,KAAK,uBAAuB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,uBAAuB,CAAA;IAC7B,2EAA2E;IAC3E,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,yEAAyE;IACzE,6BAA6B;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB,CAAA;AAcD,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,4BAA4B;AAC5B,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,qEAAqE;AACrE,0EAA0E;AAC1E,4EAA4E;AAC5E,gEAA8D;AAC9D,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,iBAAiB,EAAE,GAC7B,eAAe,CAmEjB;AAED,kEAAkE;AAClE,wEAAwE;AACxE,oEAAoE;AACpE,yEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,8CAA8C;AAC9C,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,iBAAiB,EAAE,GAC7B,iBAAiB,EAAE,CAerB;AAyWD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA4gB7B"}

package/dist/types/commands/manifest/bazel/extract_bazel_to_pypi.d.mts

@@ -0,0 +1,20 @@
+export type ExtractBazelToPypiOptions = {
+    bazelFlags: string | undefined;
+    bazelOutputBase: string | undefined;
+    bazelRc: string | undefined;
+    bin: string | undefined;
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    out: string;
+    outLayout?: 'flat' | 'standalone';
+    verbose: boolean;
+    explicitEcosystem?: boolean;
+};
+export type ExtractBazelToPypiResult = {
+    artifactCount: number;
+    manifestPath?: string | undefined;
+    ok: boolean;
+    noEcosystemFound?: boolean;
+};
+export declare function extractBazelToPypi(opts: ExtractBazelToPypiOptions): Promise<ExtractBazelToPypiResult>;
+//# sourceMappingURL=extract_bazel_to_pypi.d.mts.map

package/dist/types/commands/manifest/bazel/extract_bazel_to_pypi.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract_bazel_to_pypi.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/bazel/extract_bazel_to_pypi.mts"],"names":[],"mappings":"AAyCA,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAA;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,EAAE,EAAE,OAAO,CAAA;IACX,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,CAAA;AAmBD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CA8NnC"}

package/dist/types/commands/manifest/cmd-manifest-auto.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-auto.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-auto.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAoC9C,eAAO,MAAM,eAAe;;;;CAI3B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAkEf"}
+{"version":3,"file":"cmd-manifest-auto.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-auto.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqC9C,eAAO,MAAM,eAAe;;;;CAI3B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAyEf"}

package/dist/types/commands/manifest/cmd-manifest-gradle.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-gradle.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-gradle.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA8D9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Hf"}
+{"version":3,"file":"cmd-manifest-gradle.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-gradle.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuF9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAoMf"}

package/dist/types/commands/manifest/cmd-manifest-kotlin.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-kotlin.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-kotlin.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAmE9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Hf"}
+{"version":3,"file":"cmd-manifest-kotlin.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-kotlin.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA4F9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAkMf"}

package/dist/types/commands/manifest/cmd-manifest-maven.d.mts

@@ -0,0 +1,9 @@
+import type { CliCommandContext } from '../../utils/meow-with-subcommands.mts';
+export declare const cmdManifestMaven: {
+    description: string;
+    hidden: boolean;
+    run: typeof run;
+};
+declare function run(argv: string[] | readonly string[], importMeta: ImportMeta, { parentName }: CliCommandContext): Promise<void>;
+export {};
+//# sourceMappingURL=cmd-manifest-maven.d.mts.map

package/dist/types/commands/manifest/cmd-manifest-maven.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmd-manifest-maven.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-maven.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqE9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8If"}

package/dist/types/commands/manifest/cmd-manifest-scala.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-scala.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-scala.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAwE9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuHf"}
+{"version":3,"file":"cmd-manifest-scala.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-scala.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA2G9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Of"}

package/dist/types/commands/manifest/cmd-manifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest.mts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqC9C,eAAO,MAAM,WAAW;;;;CAIvB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA6Bf"}
+{"version":3,"file":"cmd-manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqC9C,eAAO,MAAM,WAAW;;;;CAIvB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts

@@ -1,7 +1,15 @@
-export declare function convertGradleToFacts({ bin, cwd, gradleOpts, verbose }: {
+import type { SidecarAccumulator } from './scripts/sidecar.mts';
+// Generates `.socket.facts.json` for a Gradle project via the bundled init script.
+export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, excludePaths, gradleOpts, ignoreUnresolved, includeConfigs, sidecarAcc, verbose, withFiles }: {
     bin: string;
     cwd: string;
+    excludeConfigs: string;
+    excludePaths?: string[] | undefined;
     gradleOpts: string[];
+    ignoreUnresolved: boolean;
+    includeConfigs: string;
+    sidecarAcc?: SidecarAccumulator | undefined;
     verbose: boolean;
+    withFiles?: boolean | undefined;
 }): Promise<void>;
 //# sourceMappingURL=convert-gradle-to-facts.d.mts.map

package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAQA,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+FhB"}
+{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,mFAAmF;AACnF,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}

package/dist/types/commands/manifest/convert-maven-to-facts.d.mts

@@ -0,0 +1,15 @@
+import type { SidecarAccumulator } from './scripts/sidecar.mts';
+// Generates `.socket.facts.json` for a Maven project via the bundled extension.
+export declare function convertMavenToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, mavenOpts, sidecarAcc, verbose, withFiles }: {
+    bin: string;
+    cwd: string;
+    excludeConfigs: string;
+    excludePaths?: string[] | undefined;
+    ignoreUnresolved: boolean;
+    includeConfigs: string;
+    mavenOpts: string[];
+    sidecarAcc?: SidecarAccumulator | undefined;
+    verbose: boolean;
+    withFiles?: boolean | undefined;
+}): Promise<void>;
+//# sourceMappingURL=convert-maven-to-facts.d.mts.map

package/dist/types/commands/manifest/convert-maven-to-facts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}

package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts

@@ -0,0 +1,19 @@
+import type { SidecarAccumulator } from './scripts/sidecar.mts';
+// Generates `.socket.facts.json` for an sbt project via the bundled sbt plugin.
+// sbt 0.13/early 1.x can't run on modern JDKs — pass a compatible JDK via
+// `--sbt-opts "--java-home <path>"` or `JAVA_HOME`.
+export declare function convertSbtToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, sbtOpts, sidecarAcc, tmpDir, verbose, withFiles }: {
+    bin: string;
+    cwd: string;
+    excludeConfigs: string;
+    excludePaths?: string[] | undefined;
+    ignoreUnresolved: boolean;
+    includeConfigs: string;
+    sbtOpts: string[];
+    sidecarAcc?: SidecarAccumulator | undefined;
+    // Caller-owned; see ManifestScriptOptions.tmpDir.
+    tmpDir: string;
+    verbose: boolean;
+    withFiles?: boolean | undefined;
+}): Promise<void>;
+//# sourceMappingURL=convert-sbt-to-facts.d.mts.map

package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,4EAA0E;AAC1E,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,EACtC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}

package/dist/types/commands/manifest/convert_gradle_to_maven.d.mts

@@ -1,6 +1,7 @@
-export declare function convertGradleToMaven({ bin, cwd, gradleOpts, verbose }: {
+export declare function convertGradleToMaven({ bin, cwd, excludePaths, gradleOpts, verbose }: {
     bin: string;
     cwd: string;
+    excludePaths?: string[] | undefined;
     verbose: boolean;
     gradleOpts: string[];
 }): Promise<void>;

package/dist/types/commands/manifest/convert_gradle_to_maven.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"convert_gradle_to_maven.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert_gradle_to_maven.mts"],"names":[],"mappings":"AAQA,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB,iBAkFA"}
+{"version":3,"file":"convert_gradle_to_maven.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert_gradle_to_maven.mts"],"names":[],"mappings":"AAQA,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,YAAY,EACZ,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB,iBA8FA"}

package/dist/types/commands/manifest/detect-manifest-actions.d.mts

@@ -5,6 +5,7 @@ export interface GeneratableManifests {
     count: number;
     conda: boolean;
     gradle: boolean;
+    maven: boolean;
     sbt: boolean;
 }
 export declare function detectManifestActions(

package/dist/types/commands/manifest/detect-manifest-actions.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"detect-manifest-actions.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/detect-manifest-actions.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;CACb;AAED,wBAAsB,qBAAqB;AACzC,0EAA0E;AAC1E,kEAAkE;AAClE,QAAQ,EAAE,UAAU,GAAG,IAAI,EAC3B,GAAG,SAAgB,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAkE/B"}
+{"version":3,"file":"detect-manifest-actions.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/detect-manifest-actions.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,OAAO,CAAA;IACd,GAAG,EAAE,OAAO,CAAA;CACb;AAED,wBAAsB,qBAAqB;AACzC,0EAA0E;AAC1E,kEAAkE;AAClE,QAAQ,EAAE,UAAU,GAAG,IAAI,EAC3B,GAAG,SAAgB,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAqF/B"}

package/dist/types/commands/manifest/generate_auto_manifest.d.mts

@@ -1,12 +1,23 @@
 import type { GeneratableManifests } from './detect-manifest-actions.mts';
+import type { ResolvedPathsSidecar } from './scripts/sidecar.mts';
 import type { OutputKind } from '../../types.mts';
 export type GenerateAutoManifestResult = {
     generatedFiles: string[];
+    // Reachability path only: resolved on-disk paths from the build-tool run.
+    resolvedPathsSidecar?: ResolvedPathsSidecar | undefined;
 };
-export declare function generateAutoManifest({ cwd, detected, outputKind, verbose }: {
+export declare function generateAutoManifest({ computeArtifactsSidecar, cwd, detected, excludePaths, outputKind, tmpDir, verbose }: {
+    // Reachability path: run build tools with files to emit the sidecar.
+    computeArtifactsSidecar?: boolean | undefined;
     detected: GeneratableManifests;
     cwd: string;
+    // Scan-root-relative `--exclude-paths`: skip excluded subprojects and drop
+    // excluded source roots from the resolved-paths sidecar.
+    excludePaths?: string[] | undefined;
     outputKind: OutputKind;
+    // Caller-owned; see ManifestScriptOptions.tmpDir. Only sbt reads it, but
+    // required here so every caller allocates one via withTmpDir uniformly.
+    tmpDir: string;
     verbose: boolean;
 }): Promise<GenerateAutoManifestResult>;
 //# sourceMappingURL=generate_auto_manifest.d.mts.map

package/dist/types/commands/manifest/generate_auto_manifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB,CAAA;AAED,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,QAAQ,EACR,UAAU,EACV,OAAO,EACR,EAAE;IACD,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA6FtC"}
+{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACxD,CAAA;AAmBD,wBAAsB,oBAAoB,CAAC,EACzC,uBAAuB,EACvB,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,OAAO,EACR,EAAE;IACD,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAiMtC"}

package/dist/types/commands/manifest/parse-build-tool-opts.d.mts

@@ -0,0 +1,9 @@
+// Tokenizes a build-tool options string (e.g. the value of `--gradle-opts`,
+// `--sbt-opts`, `--maven-opts`) into individual argv tokens. Splits on
+// whitespace but honors single and double quotes so a value containing spaces,
+// such as a settings path (`-s "my settings.xml"`), survives as one token
+// instead of being shredded into three. Quotes are consumed (not emitted), and
+// quoting is intra-token aware (`-Dkey="a b"` -> `-Dkey=a b`). For unquoted
+// input this is equivalent to the previous whitespace split.
+export declare function parseBuildToolOpts(opts: string | undefined): string[];
+//# sourceMappingURL=parse-build-tool-opts.d.mts.map

package/dist/types/commands/manifest/parse-build-tool-opts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-build-tool-opts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/parse-build-tool-opts.mts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CA4CrE"}

package/dist/types/commands/manifest/run-manifest-facts.d.mts

@@ -0,0 +1,24 @@
+import type { BuildTool } from './scripts/build-tool.mts';
+import type { SidecarAccumulator } from './scripts/sidecar.mts';
+// Runs the bundled build-tool resolution script for a JVM project and writes
+// `.socket.facts.json`. `withFiles` (reachability only) additionally folds
+// resolved artifact paths into `sidecarAcc`. A blocking resolution failure sets
+// a non-zero exit code and returns (matching the `--pom` generator) unless
+// `ignoreUnresolved`; a crashed build — a process failure, not an unresolved
+// dependency — always fails.
+export declare function runManifestFacts({ bin, buildOpts, cwd, ecosystem, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, sidecarAcc, tmpDir, verbose, withFiles }: {
+    bin: string;
+    buildOpts: string[];
+    cwd: string;
+    ecosystem: BuildTool;
+    excludeConfigs: string;
+    excludePaths?: string[] | undefined;
+    ignoreUnresolved: boolean;
+    includeConfigs: string;
+    sidecarAcc?: SidecarAccumulator | undefined;
+    // sbt only; see ManifestScriptOptions.tmpDir.
+    tmpDir?: string | undefined;
+    verbose: boolean;
+    withFiles?: boolean | undefined;
+}): Promise<void>;
+//# sourceMappingURL=run-manifest-facts.d.mts.map

package/dist/types/commands/manifest/run-manifest-facts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAc/D,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAoIhB"}

package/dist/types/commands/manifest/scripts/assemble.d.mts

@@ -0,0 +1,16 @@
+import { type ResolvedArtifactPaths, type SocketFactsSbom } from './facts.mts';
+import type { ParsedRecords } from './records.mts';
+import type { ResolutionReport } from './resolution-report.mts';
+export type AssembleResult = {
+    facts: SocketFactsSbom;
+    report: ResolutionReport;
+    artifactPaths: ResolvedArtifactPaths;
+};
+export type AssembleOptions = {
+    emitProjects?: boolean | undefined;
+    // Injectable for tests; an uncompiled module's output dir is dropped (module
+    // stays resolvable via its sources).
+    fileExists?: ((path: string) => boolean) | undefined;
+};
+export declare function assembleFacts(parsed: ParsedRecords, opts?: AssembleOptions): AssembleResult;
+//# sourceMappingURL=assemble.d.mts.map

package/dist/types/commands/manifest/scripts/assemble.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAKrB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AAmBD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAgChB"}

package/dist/types/commands/manifest/scripts/build-tool.d.mts

@@ -0,0 +1,3 @@
+export type BuildTool = 'gradle' | 'maven' | 'sbt';
+export declare function resolveBuildToolBin(tool: BuildTool, projectDir: string, bin?: string | undefined): string;
+//# sourceMappingURL=build-tool.d.mts.map

package/dist/types/commands/manifest/scripts/build-tool.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAkBlD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR"}

package/dist/types/commands/manifest/scripts/facts.d.mts

@@ -0,0 +1,46 @@
+export type AnyPURL = {
+    type: string;
+    namespace?: string | undefined;
+    name: string;
+    version?: string | undefined;
+    qualifiers?: Record<string, string> | undefined;
+};
+// No sources/targets here: those are local absolute paths, returned in-memory
+// as ResolvedArtifactPaths, never serialized into the SBOM.
+export type SocketFactsSbom = {
+    metadata?: SocketFactsSbomMetadata | undefined;
+    projects?: SocketFactsSbomProject[] | undefined;
+    components: SocketFactsSbomComponent[];
+};
+export type SocketFactsSbomMetadata = {
+    format: 'socket-facts-sbom';
+    tool: 'gradle' | 'maven' | 'sbt';
+    toolVersion: string;
+    javaVersion?: string | undefined;
+};
+export type SocketFactsSbomComponent = AnyPURL & {
+    id: string;
+    direct?: boolean | undefined;
+    dev?: boolean | undefined;
+    dependencies?: string[] | undefined;
+};
+export type SocketFactsSbomProject = AnyPURL & {
+    subprojectDir: string;
+    dependencies: string[];
+    resolvedAs: string[];
+};
+// Resolved on-disk paths for a --with-files run, keyed by coordinate. `targets`
+// = classpath entries (jars / module output dirs); `sources` = module source
+// roots.
+export type ResolvedArtifactPaths = {
+    targetsByCoord: Map<string, string[]>;
+    // ext/classifier-agnostic, to recover the variant when an ingested ext is
+    // untrustworthy (Gradle lockfile / version-catalog hardcode ext=jar).
+    targetsByGav: Map<string, string[]>;
+    sourcesByCoord: Map<string, string[]>;
+    coords: Set<string>;
+};
+// Coordinate-based (not `id`-based) so it also matches foreign SBOMs like
+// CycloneDX. Empty segments dropped.
+export declare function mavenCoordinateKey(groupId: string | undefined, artifactId: string | undefined, type: string | undefined, classifier: string | undefined, version: string | undefined): string;
+//# sourceMappingURL=facts.d.mts.map

package/dist/types/commands/manifest/scripts/facts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB,CAAA;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,SAAS;AACT,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,0EAA0E;IAC1E,sEAAsE;IACtE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CACpB,CAAA;AAED,0EAA0E;AAC1E,qCAAqC;AACrC,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,CAIR"}

package/dist/types/commands/manifest/scripts/records.d.mts

@@ -0,0 +1,66 @@
+import type { ResolutionFailure, UnscannableConfig } from './resolution-report.mts';
+// Line-protocol the build-tool scripts emit to a records file (NOT stdout — sbt
+// prints unsilenceable resolution noise there). One record per line, fields
+// backslash-escaped (\\, \t, \n, \r) so a value can't break framing:
+//
+//   <tag>\t<field>\t<field>...
+//
+//   meta        tool  toolVersion  javaVersion
+//   project     projectKey  group  name  version  dir
+//   projectSrc  projectKey  path                         (--with-files only)
+//   projectTgt  projectKey  path                         (--with-files only)
+//   root        rootId  projectKey  config  prod(0|1)
+//   node        rootId  coordId  group  name  version  ext  classifier  direct(0|1)
+//   edge        rootId  parentCoordId  childCoordId
+//   file        rootId  coordId  path                    (--with-files only)
+//   scanned     config
+//   failure     coord  detail  config
+//   unscannable config  detail
+//
+// A `root` is one (subproject, configuration) resolution root; `coordId` is the
+// coordinate key (`group:name:ext:classifier:version`, empty segments dropped),
+// used opaquely as the per-root node key. Unknown tags are ignored.
+export type RawCoord = {
+    group: string;
+    name: string;
+    version: string;
+    ext: string;
+    classifier: string;
+};
+export type RawNode = {
+    coordId: string;
+    coord: RawCoord;
+    direct: boolean;
+    // --with-files only.
+    targets: string[];
+};
+export type RawRoot = {
+    rootId: string;
+    projectKey: string;
+    config: string;
+    prod: boolean;
+    nodes: Map<string, RawNode>;
+    edges: Array<[string, string]>;
+};
+export type RawProject = {
+    projectKey: string;
+    group: string;
+    name: string;
+    version: string;
+    dir: string;
+    sources: string[];
+    targets: string[];
+};
+export type ParsedRecords = {
+    tool: string;
+    toolVersion: string;
+    javaVersion: string;
+    projects: Map<string, RawProject>;
+    roots: Map<string, RawRoot>;
+    scannedConfigs: string[];
+    failures: ResolutionFailure[];
+    unscannable: UnscannableConfig[];
+};
+export declare function unescapeField(s: string): string;
+export declare function parseRecords(text: string): ParsedRecords;
+//# sourceMappingURL=records.d.mts.map

package/dist/types/commands/manifest/scripts/records.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,sDAAsD;AACtD,oFAAoF;AACpF,oDAAoD;AACpD,6EAA6E;AAC7E,uBAAuB;AACvB,sCAAsC;AACtC,+BAA+B;AAC/B,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AAEpE,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,qBAAqB;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAA;CACjC,CAAA;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAe/C;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA6IxD"}

package/dist/types/commands/manifest/scripts/resolution-report-gradle.d.mts

@@ -0,0 +1,10 @@
+import type { FailureCategory, ResolutionDialect } from './resolution-report-render.mts';
+// Gradle's variant-aware resolver: distinct exceptions give mutually-exclusive
+// phrasing, so most-specific-first substring checks classify reliably.
+export declare function classifyGradleFailure(detail: string): FailureCategory;
+// Every kind blocks except variant-ambiguity: the module demonstrably exists
+// and is almost always captured via another configuration, so it's benign for
+// the SBOM (non-blocking, count only). A module that resolves in NO config
+// surfaces as not-found / no-matching-variant, which stay blocking.
+export declare const GRADLE_DIALECT: ResolutionDialect;
+//# sourceMappingURL=resolution-report-gradle.d.mts.map

package/dist/types/commands/manifest/scripts/resolution-report-gradle.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-report-gradle.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/resolution-report-gradle.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAEvC,+EAA+E;AAC/E,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAoCrE;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,oEAAoE;AACpE,eAAO,MAAM,cAAc,EAAE,iBA+C5B,CAAA"}

package/dist/types/commands/manifest/scripts/resolution-report-ivy.d.mts

@@ -0,0 +1,7 @@
+import type { FailureCategory, ResolutionDialect } from './resolution-report-render.mts';
+// Ivy/sbt resolver: no attribute-based variants, so no variant categories
+// (Gradle-only). Ivy degrades transport failures to "not found".
+export declare function classifyIvyFailure(detail: string): FailureCategory;
+// Every kind blocks; no non-blocking kind because Ivy has no variant ambiguity.
+export declare const SBT_DIALECT: ResolutionDialect;
+//# sourceMappingURL=resolution-report-ivy.d.mts.map

package/dist/types/commands/manifest/scripts/resolution-report-ivy.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-report-ivy.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/resolution-report-ivy.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAEvC,0EAA0E;AAC1E,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAsBlE;AAED,gFAAgF;AAChF,eAAO,MAAM,WAAW,EAAE,iBA4BzB,CAAA"}

package/dist/types/commands/manifest/scripts/resolution-report-maven.d.mts

@@ -0,0 +1,8 @@
+import type { FailureCategory, ResolutionDialect } from './resolution-report-render.mts';
+// Maven's resolver (Aether/maven-resolver): no attribute-based variants. Two
+// failure shapes (artifact-resolution miss with config = scope, dependency-graph
+// build failure with config = "graph") both classify off the root-cause message.
+export declare function classifyMavenFailure(detail: string): FailureCategory;
+// Every kind blocks; no non-blocking kind because Maven has no variant ambiguity.
+export declare const MAVEN_DIALECT: ResolutionDialect;
+//# sourceMappingURL=resolution-report-maven.d.mts.map

package/dist/types/commands/manifest/scripts/resolution-report-maven.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-report-maven.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/resolution-report-maven.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAEvC,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAmCpE;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,EAAE,iBA4B3B,CAAA"}