@socketsecurity/cli 1.1.152 → 1.1.153

package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts

@@ -0,0 +1,9 @@
+import type { CliCommandContext } from '../../utils/meow-with-subcommands.mts';
+export declare const cmdManifestDynamicSbomInference: {
+    description: string;
+    hidden: boolean;
+    run: typeof run;
+};
+declare function run(argv: string[] | readonly string[], importMeta: ImportMeta, { parentName }: CliCommandContext): Promise<void>;
+export {};
+//# sourceMappingURL=cmd-manifest-dynamic-sbom-inference.d.mts.map

package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}

package/dist/types/commands/manifest/cmd-manifest-gradle.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-gradle.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-gradle.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuF9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAoMf"}
+{"version":3,"file":"cmd-manifest-gradle.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-gradle.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuF9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAwMf"}

package/dist/types/commands/manifest/cmd-manifest-kotlin.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-kotlin.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-kotlin.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA4F9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAkMf"}
+{"version":3,"file":"cmd-manifest-kotlin.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-kotlin.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA4F9C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAsMf"}

package/dist/types/commands/manifest/cmd-manifest-maven.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-maven.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-maven.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqE9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8If"}
+{"version":3,"file":"cmd-manifest-maven.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-maven.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqE9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAkJf"}

package/dist/types/commands/manifest/cmd-manifest-scala.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-scala.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-scala.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA2G9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Of"}
+{"version":3,"file":"cmd-manifest-scala.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-scala.mts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA2G9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8Of"}

package/dist/types/commands/manifest/cmd-manifest-setup.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-setup.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA8C9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuBf"}
+{"version":3,"file":"cmd-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-setup.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA4D9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/types/commands/manifest/cmd-manifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqC9C,eAAO,MAAM,WAAW;;;;CAIvB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8Bf"}
+{"version":3,"file":"cmd-manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAqC9C,eAAO,MAAM,WAAW;;;;CAIvB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts

@@ -1,6 +1,6 @@
 import type { SidecarAccumulator } from './scripts/sidecar.mts';
 // Generates `.socket.facts.json` for a Gradle project via the bundled init script.
-export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, excludePaths, gradleOpts, ignoreUnresolved, includeConfigs, sidecarAcc, verbose, withFiles }: {
+export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, excludePaths, gradleOpts, ignoreUnresolved, includeConfigs, javaHome, sidecarAcc, verbose, withFiles }: {
     bin: string;
     cwd: string;
     excludeConfigs: string;
@@ -8,6 +8,7 @@ export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, exclude
     gradleOpts: string[];
     ignoreUnresolved: boolean;
     includeConfigs: string;
+    javaHome?: string | undefined;
     sidecarAcc?: SidecarAccumulator | undefined;
     verbose: boolean;
     withFiles?: boolean | undefined;

package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,mFAAmF;AACnF,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}
+{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,mFAAmF;AACnF,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}

package/dist/types/commands/manifest/convert-maven-to-facts.d.mts

@@ -1,12 +1,13 @@
 import type { SidecarAccumulator } from './scripts/sidecar.mts';
 // Generates `.socket.facts.json` for a Maven project via the bundled extension.
-export declare function convertMavenToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, mavenOpts, sidecarAcc, verbose, withFiles }: {
+export declare function convertMavenToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, mavenOpts, sidecarAcc, verbose, withFiles }: {
     bin: string;
     cwd: string;
     excludeConfigs: string;
     excludePaths?: string[] | undefined;
     ignoreUnresolved: boolean;
     includeConfigs: string;
+    javaHome?: string | undefined;
     mavenOpts: string[];
     sidecarAcc?: SidecarAccumulator | undefined;
     verbose: boolean;

package/dist/types/commands/manifest/convert-maven-to-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}
+{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}

package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts

@@ -2,13 +2,14 @@ import type { SidecarAccumulator } from './scripts/sidecar.mts';
 // Generates `.socket.facts.json` for an sbt project via the bundled sbt plugin.
 // sbt 0.13/early 1.x can't run on modern JDKs — pass a compatible JDK via
 // `--sbt-opts "--java-home <path>"` or `JAVA_HOME`.
-export declare function convertSbtToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, sbtOpts, sidecarAcc, tmpDir, verbose, withFiles }: {
+export declare function convertSbtToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, sbtOpts, sidecarAcc, tmpDir, verbose, withFiles }: {
     bin: string;
     cwd: string;
     excludeConfigs: string;
     excludePaths?: string[] | undefined;
     ignoreUnresolved: boolean;
     includeConfigs: string;
+    javaHome?: string | undefined;
     sbtOpts: string[];
     sidecarAcc?: SidecarAccumulator | undefined;
     // Caller-owned; see ManifestScriptOptions.tmpDir.

package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,4EAA0E;AAC1E,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,EACtC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
+{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,gFAAgF;AAChF,4EAA0E;AAC1E,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,EACtC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB"}

package/dist/types/commands/manifest/discover-manifest-roots.d.mts

@@ -0,0 +1,18 @@
+import type { BuildTool } from './scripts/build-tool.mts';
+import type { SocketJson } from '../../utils/socket-json.mts';
+// A disabled ecosystem is skipped entirely by the glob scan below, so a
+// nested socket.json re-enabling it would never even be searched for. Callers
+// that need the cascade (not just the root file) to decide skip vs. include
+// must strip `disabled` here first, and let their own per-directory cascade
+// check apply it instead.
+export declare function withoutDisabledFlags(sockJson: SocketJson): SocketJson;
+export declare function realpathOrResolved(dir: string): Promise<string>;
+// Depth-sorted (root-most first) so the caller, using each build root's
+// `subprojectDir` facts, visits a reactor root before its own members and can
+// skip subprojects a parent root already covers.
+export declare function findBuildToolCandidates({ cwd, excludePaths, sockJson }: {
+    cwd: string;
+    excludePaths?: string[] | undefined;
+    sockJson: SocketJson;
+}): Promise<Map<BuildTool, string[]>>;
+//# sourceMappingURL=discover-manifest-roots.d.mts.map

package/dist/types/commands/manifest/discover-manifest-roots.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover-manifest-roots.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/discover-manifest-roots.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AA2B7D,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAgBrE;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;AAeD,wEAAwE;AACxE,8EAA8E;AAC9E,iDAAiD;AACjD,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CA4CpC"}

package/dist/types/commands/manifest/enumerate-workspaces.d.mts

@@ -0,0 +1,19 @@
+import type { BuildTool } from './scripts/build-tool.mts';
+import type { SocketFactsSbomProject } from './scripts/facts.mts';
+export type EnumerateWorkspacesResult = {
+    projects: SocketFactsSbomProject[];
+};
+// Cheap subproject discovery (no dependency resolution) for
+// `socket manifest setup --dynamic-sbom-inference`; dynamic-sbom-inference
+// itself instead gets this list for free as a side effect of its own full
+// facts run.
+export declare function enumerateWorkspaces({ bin, buildOpts, cwd, ecosystem, excludePaths, javaHome, verbose }: {
+    bin: string;
+    buildOpts: string[];
+    cwd: string;
+    ecosystem: BuildTool;
+    excludePaths?: string[] | undefined;
+    javaHome?: string | undefined;
+    verbose: boolean;
+}): Promise<EnumerateWorkspacesResult | undefined>;
+//# sourceMappingURL=enumerate-workspaces.d.mts.map

package/dist/types/commands/manifest/enumerate-workspaces.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enumerate-workspaces.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/enumerate-workspaces.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAED,4DAA4D;AAC5D,2EAA2E;AAC3E,0EAA0E;AAC1E,aAAa;AACb,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAiDjD"}

package/dist/types/commands/manifest/expand-env-var-refs.d.mts

@@ -0,0 +1,10 @@
+// Expands `$VAR`/`${VAR}` references (e.g. a team-shared `javaHome:
+// "$JAVA11_HOME"`) against the CLI process's own environment, so a socket.json
+// value works across machines instead of hardcoding one developer's path.
+// `$$` is a literal `$`, for a value that must contain a literal `$WORD`.
+export declare function expandEnvVarRefs(value: string): {
+    missing?: string[];
+    value: string;
+};
+export declare function formatMissingEnvVarRefs(missing: readonly string[]): string;
+//# sourceMappingURL=expand-env-var-refs.d.mts.map

package/dist/types/commands/manifest/expand-env-var-refs.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expand-env-var-refs.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/expand-env-var-refs.mts"],"names":[],"mappings":"AAEA,oEAAoE;AACpE,+EAA+E;AAC/E,0EAA0E;AAC1E,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG;IAC/C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd,CAiBA;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAI1E"}

package/dist/types/commands/manifest/generate-recursive-manifests.d.mts

@@ -0,0 +1,37 @@
+import type { BuildTool } from './scripts/build-tool.mts';
+import type { SocketJson } from '../../utils/socket-json.mts';
+export type RecursiveManifestOutcomeStatus = 'aborted' | 'empty' | 'failed' | 'generated' | 'skippedCovered' | 'skippedDisabled';
+export type RecursiveManifestOutcome = {
+    dir: string;
+    ecosystem: BuildTool;
+    factsPath?: string | undefined;
+    status: RecursiveManifestOutcomeStatus;
+};
+export type EcosystemBuildConfig = {
+    bin: string;
+    buildOpts: string[];
+    excludeConfigs: string;
+    ignoreUnresolved: boolean;
+    includeConfigs: string;
+    javaHome: string | undefined;
+    // Set when this build root should be skipped entirely (never invoked).
+    skipReason: string | undefined;
+};
+// A wrapper-preferred `bin` default is resolved per-root (`dir`, not `cwd`)
+// since a wrapper script only exists at the actual build root. Exported for
+// reuse by the recursive setup wizard's reactor-coverage pruning.
+export declare function resolveEcosystemConfig(ecosystem: BuildTool, dir: string, sockJson: SocketJson): EcosystemBuildConfig;
+// Generates one .socket.facts.json per independent gradle/sbt/maven build
+// root under `cwd`. Coverage is tracked per ecosystem via the facts SBOM's
+// own projects[].subprojectDir, not by pruning the whole discovered subtree,
+// so an unrelated nested project a reactor doesn't declare still gets its
+// own invocation. Fail-closed per ecosystem, not globally: a root whose
+// workspace layout can't be determined aborts only that ecosystem's own
+// remaining walk (marking its untried candidates 'aborted'), since coverage
+// is tracked per ecosystem and an unrelated one has nothing to lose from it.
+export declare function generateRecursiveManifests({ cwd, excludePaths, verbose }: {
+    cwd: string;
+    excludePaths?: string[] | undefined;
+    verbose: boolean;
+}): Promise<RecursiveManifestOutcome[]>;
+//# sourceMappingURL=generate-recursive-manifests.d.mts.map

package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAwCD,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAgHtC"}

package/dist/types/commands/manifest/generate_auto_manifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACxD,CAAA;AAmBD,wBAAsB,oBAAoB,CAAC,EACzC,uBAAuB,EACvB,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,OAAO,EACR,EAAE;IACD,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAiMtC"}
+{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACxD,CAAA;AAmBD,wBAAsB,oBAAoB,CAAC,EACzC,uBAAuB,EACvB,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,OAAO,EACR,EAAE;IACD,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAsMtC"}

package/dist/types/commands/manifest/handle-manifest-dynamic-sbom-inference.d.mts

@@ -0,0 +1,8 @@
+import type { OutputKind } from '../../types.mts';
+export declare function handleManifestDynamicSbomInference({ cwd, excludePaths, outputKind, verbose }: {
+    cwd: string;
+    excludePaths: string[];
+    outputKind: OutputKind;
+    verbose: boolean;
+}): Promise<void>;
+//# sourceMappingURL=handle-manifest-dynamic-sbom-inference.d.mts.map

package/dist/types/commands/manifest/handle-manifest-dynamic-sbom-inference.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/handle-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAW,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,kCAAkC,CAAC,EACvD,GAAG,EACH,YAAY,EACZ,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhB"}

package/dist/types/commands/manifest/handle-manifest-setup.d.mts

@@ -1,2 +1,2 @@
-export declare function handleManifestSetup(cwd: string, defaultOnReadError: boolean): Promise<void>;
+export declare function handleManifestSetup(cwd: string, defaultOnReadError: boolean, dynamicSbomInference?: boolean, excludePaths?: string[] | undefined): Promise<void>;
 //# sourceMappingURL=handle-manifest-setup.d.mts.map

package/dist/types/commands/manifest/handle-manifest-setup.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/handle-manifest-setup.mts"],"names":[],"mappings":"AAGA,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"handle-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/handle-manifest-setup.mts"],"names":[],"mappings":"AAIA,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,oBAAoB,UAAQ,EAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAClC,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/types/commands/manifest/manifest-flags.d.mts

@@ -0,0 +1,6 @@
+import type { MeowFlags } from '../../flags.mts';
+// Manifest-scoped variant of `../scan/reachability-flags.mts`'s
+// `excludePathsFlag`: description avoids "scan"/reachability wording since
+// these commands only ever generate a manifest/facts file.
+export declare const excludePathsFlag: MeowFlags;
+//# sourceMappingURL=manifest-flags.d.mts.map

package/dist/types/commands/manifest/manifest-flags.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/manifest-flags.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,gEAAgE;AAChE,2EAA2E;AAC3E,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}

package/dist/types/commands/manifest/output-manifest-dynamic-sbom-inference.d.mts

@@ -0,0 +1,4 @@
+import type { RecursiveManifestOutcome } from './generate-recursive-manifests.mts';
+import type { CResult, OutputKind } from '../../types.mts';
+export declare function outputManifestDynamicSbomInference(result: CResult<RecursiveManifestOutcome[]>, outputKind: OutputKind): Promise<void>;
+//# sourceMappingURL=output-manifest-dynamic-sbom-inference.d.mts.map

package/dist/types/commands/manifest/output-manifest-dynamic-sbom-inference.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/output-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAA;AAClF,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAkB1D,wBAAsB,kCAAkC,CACtD,MAAM,EAAE,OAAO,CAAC,wBAAwB,EAAE,CAAC,EAC3C,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAyCf"}

package/dist/types/commands/manifest/run-manifest-facts.d.mts

@@ -1,12 +1,22 @@
 import type { BuildTool } from './scripts/build-tool.mts';
+import type { SocketFactsSbomProject } from './scripts/facts.mts';
 import type { SidecarAccumulator } from './scripts/sidecar.mts';
+export type RunManifestFactsResult = {
+    factsPath: string;
+    projects: SocketFactsSbomProject[];
+};
+// `null` = a real failure (crash, missing config, blocking unresolved
+// dependency); `undefined` = genuinely nothing to resolve, not a failure.
+// Distinguishing the two here means callers never have to infer it from
+// `process.exitCode`, which can already be non-zero for an unrelated reason.
+export type RunManifestFactsOutcome = RunManifestFactsResult | null | undefined;
 // Runs the bundled build-tool resolution script for a JVM project and writes
 // `.socket.facts.json`. `withFiles` (reachability only) additionally folds
 // resolved artifact paths into `sidecarAcc`. A blocking resolution failure sets
 // a non-zero exit code and returns (matching the `--pom` generator) unless
 // `ignoreUnresolved`; a crashed build — a process failure, not an unresolved
 // dependency — always fails.
-export declare function runManifestFacts({ bin, buildOpts, cwd, ecosystem, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, sidecarAcc, tmpDir, verbose, withFiles }: {
+export declare function runManifestFacts({ bin, buildOpts, cwd, ecosystem, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, sidecarAcc, tmpDir, verbose, withFiles }: {
     bin: string;
     buildOpts: string[];
     cwd: string;
@@ -15,10 +25,11 @@ export declare function runManifestFacts({ bin, buildOpts, cwd, ecosystem, exclu
     excludePaths?: string[] | undefined;
     ignoreUnresolved: boolean;
     includeConfigs: string;
+    javaHome?: string | undefined;
     sidecarAcc?: SidecarAccumulator | undefined;
     // sbt only; see ManifestScriptOptions.tmpDir.
     tmpDir?: string | undefined;
     verbose: boolean;
     withFiles?: boolean | undefined;
-}): Promise<void>;
+}): Promise<RunManifestFactsOutcome>;
 //# sourceMappingURL=run-manifest-facts.d.mts.map

package/dist/types/commands/manifest/run-manifest-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAc/D,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAoIhB"}
+{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAwJnC"}

package/dist/types/commands/manifest/scripts/exclude-paths-glob.d.mts

@@ -0,0 +1,8 @@
+export declare function excludePathGlobToRegexSource(glob: string): string;
+export declare function compileExcludePathPatterns(paths: readonly string[] | undefined): string[];
+// Transport form handed to the build-tool scripts: comma-joined pattern
+// sources. Empty string when there are no patterns.
+export declare function serializeExcludePathPatterns(paths: readonly string[] | undefined): string;
+export type ExcludePathFilter = (relPath: string) => boolean;
+export declare function createExcludePathFilter(paths: readonly string[] | undefined): ExcludePathFilter;
+//# sourceMappingURL=exclude-paths-glob.d.mts.map

package/dist/types/commands/manifest/scripts/exclude-paths-glob.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclude-paths-glob.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/exclude-paths-glob.mts"],"names":[],"mappings":"AAkGA,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+BjE;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,MAAM,EAAE,CAEV;AAED,wEAAwE;AACxE,oDAAoD;AACpD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,MAAM,CAER;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;AAE5D,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACnC,iBAAiB,CAGnB"}

package/dist/types/commands/manifest/scripts/run.d.mts

@@ -1,5 +1,5 @@
 import type { BuildTool } from './build-tool.mts';
-import type { ResolvedArtifactPaths, SocketFactsSbom } from './facts.mts';
+import type { ResolvedArtifactPaths, SocketFactsSbom, SocketFactsSbomProject } from './facts.mts';
 import type { ResolutionReport } from './resolution-report.mts';
 export type ManifestScriptOptions = {
     projectDir: string;
@@ -37,7 +37,16 @@ export type ManifestRunResult = {
     stderr: string;
     stdout: string;
 };
+export type WorkspaceEnumerationResult = {
+    code: number;
+    projects: SocketFactsSbomProject[];
+    stderr: string;
+    stdout: string;
+};
 // Runs the build-tool script (which emits a records file) and assembles it.
 // Writes no files; the caller persists facts or consumes artifactPaths.
 export declare function runManifestScript(tool: BuildTool, opts: ManifestScriptOptions): Promise<ManifestRunResult>;
+// Emits only `project` records, never resolving dependencies, for discovery
+// before committing to a full `runManifestScript` resolution cost.
+export declare function enumerateWorkspaces(tool: BuildTool, opts: ManifestScriptOptions): Promise<WorkspaceEnumerationResult>;
 //# sourceMappingURL=run.d.mts.map

package/dist/types/commands/manifest/scripts/run.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AA+FD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B"}
+{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AA2FD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAYrC"}

package/dist/types/commands/manifest/setup-manifest-config.d.mts

@@ -1,3 +1,22 @@
 import type { CResult } from '../../types.mts';
+import type { SocketJson } from '../../utils/socket-json.mts';
 export declare function setupManifestConfig(cwd: string, defaultOnReadError?: boolean): Promise<CResult<unknown>>;
+export declare function setupGradle(config: NonNullable<NonNullable<NonNullable<SocketJson['defaults']>['manifest']>['gradle']>, 
+// Set by the recursive dynamic-sbom-inference wizard, which has no
+// pom-mode equivalent - skips the facts/pom question entirely.
+{ factsOnly }?: {
+    factsOnly?: boolean;
+}): Promise<CResult<{
+    canceled: boolean;
+}>>;
+export declare function setupMaven(config: NonNullable<NonNullable<NonNullable<SocketJson['defaults']>['manifest']>['maven']>): Promise<CResult<{
+    canceled: boolean;
+}>>;
+export declare function setupSbt(config: NonNullable<NonNullable<NonNullable<SocketJson['defaults']>['manifest']>['sbt']>, 
+// See setupGradle's matching parameter for why.
+{ factsOnly }?: {
+    factsOnly?: boolean;
+}): Promise<CResult<{
+    canceled: boolean;
+}>>;
 //# sourceMappingURL=setup-manifest-config.d.mts.map

package/dist/types/commands/manifest/setup-manifest-config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-manifest-config.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAG9C,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,kBAAkB,UAAQ,GACzB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAsL3B"}
+{"version":3,"file":"setup-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-manifest-config.mts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,kBAAkB,UAAQ,GACzB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAsL3B;AAqED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,CACjB,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CACvE;AACD,mEAAmE;AACnE,+DAA+D;AAC/D,EAAE,SAAiB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAwEzC;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,WAAW,CACjB,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CACtE,GACA,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA0DzC;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,WAAW,CACjB,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CACpE;AACD,gDAAgD;AAChD,EAAE,SAAiB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAoGzC"}

package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts

@@ -0,0 +1,120 @@
+import type { BuildTool } from './scripts/build-tool.mts';
+import type { CResult } from '../../types.mts';
+import type { SocketJson } from '../../utils/socket-json.mts';
+// A single discovered build root - a directory with its own gradle/sbt/maven
+// marker file.
+type Candidate = {
+    dir: string;
+    ecosystem: BuildTool;
+};
+// The shallowest directory matching `--exclude-paths`, not necessarily a
+// project dir itself - one write here covers every project beneath it.
+type ExclusionRoot = {
+    dir: string;
+    ecosystems: BuildTool[];
+};
+// Depth-then-path sort: for exclusion roots it's just stable log ordering;
+// for candidates it's load-bearing, since a parent must be prompted before
+// its children so a child's shown default reflects a parent's just-written
+// cascade instead of its pre-run value.
+export declare function sortCandidatesForDisplay<T extends {
+    dir: string;
+}>(candidates: readonly T[], cwd: string): T[];
+export type ScannedBuildRoots = {
+    fullByTool: Map<BuildTool, string[]>;
+    includedByTool: Map<BuildTool, string[]>;
+};
+// Both the unfiltered and --exclude-paths-filtered scans, once, so ecosystem
+// detection and later include/exclude grouping (see discoverBuildRoots)
+// never re-walk the same tree.
+export declare function scanBuildRoots({ cwd, excludePaths, sockJson }: {
+    cwd: string;
+    excludePaths?: string[] | undefined;
+    sockJson: SocketJson;
+}): Promise<ScannedBuildRoots>;
+export type DiscoveredBuildRoots = {
+    excluded: ExclusionRoot[];
+    // Every candidate --exclude-paths didn't rule out - these get the
+    // interactive configure-or-inherit walk instead of a bulk write.
+    included: Candidate[];
+};
+// Splits an already-scanned candidate set into `included` (the interactive
+// walk) and `excluded`, grouped by the shallowest --exclude-paths match (see
+// findExclusionRoot). `cwd` is excluded from both (it got its own wizard
+// pass) and realpath-resolved to match findBuildToolCandidates' own
+// resolution - otherwise macOS's /tmp -> /private/tmp breaks the comparison.
+export declare function discoverBuildRoots({ cwd, excludePaths, fullByTool, includedByTool }: {
+    cwd: string;
+    excludePaths?: string[] | undefined;
+    fullByTool: Map<BuildTool, string[]>;
+    includedByTool: Map<BuildTool, string[]>;
+}): Promise<DiscoveredBuildRoots>;
+// Enumerates one build root's declared workspace members (see
+// enumerate-workspaces.mts) and folds them into `coveredByEcosystem`, so a
+// later candidate matching one is recognized as a reactor member rather than
+// independent. Called per-candidate right after its own prompt, not as a
+// bulk pass, so the build invocation never blocks candidates that don't need
+// it. A disabled candidate is skipped (no point invoking an off build tool);
+// otherwise this fails closed, same reasoning as generateRecursiveManifests -
+// if enumeration fails there's no way to tell covered from independent, so
+// the caller aborts rather than guess.
+export declare function markWorkspaceCoverage({ candidate, coveredByEcosystem, cwd, excludePaths, rootSockJson }: {
+    candidate: Candidate;
+    coveredByEcosystem: Map<BuildTool, Set<string>>;
+    cwd: string;
+    excludePaths?: string[] | undefined;
+    rootSockJson: SocketJson;
+}): Promise<CResult<undefined>>;
+// Marks one exclusion root's own socket.json `disabled: true` for whichever
+// of its ecosystems aren't already disabled via cascade (an already-disabled
+// ancestor from a prior run) - a no-op write is skipped entirely so re-running
+// the wizard doesn't keep rewriting already-disabled roots.
+export declare function disableExclusionRoot({ cwd, dir, ecosystems, rootSockJson }: {
+    cwd: string;
+    dir: string;
+    ecosystems: readonly BuildTool[];
+    rootSockJson: SocketJson;
+}): Promise<CResult<{
+    canceled: boolean;
+}>>;
+// Seeds the wizard with this candidate's effective (cascaded) value for any
+// field its own file doesn't already set, so accepting every prompt
+// unchanged preserves what it currently inherits, while an actual change
+// writes an explicit override.
+export declare function configureCandidate({ cwd, dir, ecosystem, rootSockJson }: {
+    cwd: string;
+    dir: string;
+    ecosystem: BuildTool;
+    rootSockJson: SocketJson;
+}): Promise<CResult<{
+    canceled: boolean;
+}>>;
+type CandidateOutcome = 'configured' | 'inherited' | 'skipped';
+// Prompts for configure/inherit, unless the cascade shows the candidate
+// disabled: offer to re-enable if that's its own file, then continue into
+// the normal prompt; stay silent if it's only inherited from an ancestor's
+// bulk write (that's noise for a large excluded subtree).
+export declare function processCandidate({ cwd, dir, ecosystem, rootSockJson }: {
+    cwd: string;
+    dir: string;
+    ecosystem: BuildTool;
+    rootSockJson: SocketJson;
+}): Promise<CResult<{
+    canceled: boolean;
+    outcome: CandidateOutcome;
+    reenabled: boolean;
+}>>;
+// `socket manifest setup --dynamic-sbom-inference`: the up-front scan (see
+// scanBuildRoots) only ever answers "which build tools exist", never "which
+// projects to configure". `--exclude-paths` matches are bulk-disabled
+// unconditionally, independent of the interactive walk below, so re-running
+// later with one more entry (or none) never re-answers settled decisions.
+// Everything else gets a configure-or-inherit prompt (see processCandidate),
+// except a workspace member a parent build already declares - learned via
+// markWorkspaceCoverage right after the parent's own prompt, not a separate
+// bulk pass, so a reactor member is silently skipped instead of prompted.
+export declare function setupRecursiveManifestConfig(cwd: string, defaultOnReadError: boolean, excludePaths?: string[] | undefined): Promise<CResult<{
+    canceled: boolean;
+}>>;
+export {};
+//# sourceMappingURL=setup-recursive-manifest-config.d.mts.map

package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-recursive-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-recursive-manifest-config.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,6EAA6E;AAC7E,eAAe;AACf,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAA;AAWtD,yEAAyE;AACzE,uEAAuE;AACvE,KAAK,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAA;AAwB7D,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,wCAAwC;AACxC,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAChE,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,GAAG,EAAE,MAAM,GACV,CAAC,EAAE,CAWL;AAuBD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,CAAA;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,+BAA+B;AAC/B,wBAAsB,cAAc,CAAC,EACnC,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAM7B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,kEAAkE;IAClE,iEAAiE;IACjE,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,oEAAoE;AACpE,6EAA6E;AAC7E,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,YAAY,EACZ,UAAU,EACV,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+BhC;AAED,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,uCAAuC;AACvC,wBAAsB,qBAAqB,CAAC,EAC1C,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,YAAY,EACZ,YAAY,EACb,EAAE;IACD,SAAS,EAAE,SAAS,CAAA;IACpB,kBAAkB,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CA6C9B;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,4DAA4D;AAC5D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;IAChC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA+B1C;AAkCD,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,+BAA+B;AAC/B,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAmD1C;AA8BD,KAAK,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;AA0C9D,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,0DAA0D;AAC1D,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CACT,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAC9E,CAsEA;AA0ID,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA0LzC"}

package/dist/types/commands/scan/create-scan-from-github.d.mts

@@ -9,4 +9,21 @@ export declare function createScanFromGithub({ all, githubApiUrl, githubToken, i
     outputKind: OutputKind;
     repos: string;
 }): Promise<CResult<undefined>>;
+/**
+ * Drive the per-repo scan loop and decide the overall run result.
+ *
+ * The loop stops early on a blocking GitHub error (rate limit / auth / abuse
+ * detection) because every remaining repo would fail the same way. Previously
+ * a rate-limited token made every repo fail its API calls, the loop swallowed
+ * each failure, and the final "N repos / 0 manifests" summary misled users and
+ * CI into thinking the scan succeeded when nothing was uploaded. A run where
+ * every attempted repo failed for a non-blocking reason is also surfaced as an
+ * error rather than a silent ok:true.
+ *
+ * `scanRepoFn` is injected so this decision logic can be tested without the
+ * GitHub network path.
+ */
+export declare function runGithubScanLoop(targetRepos: string[], scanRepoFn: (repoSlug: string) => Promise<CResult<{
+    scanCreated: boolean;
+}>>): Promise<CResult<undefined>>;
 //# sourceMappingURL=create-scan-from-github.d.mts.map

package/dist/types/commands/scan/create-scan-from-github.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"create-scan-from-github.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/create-scan-from-github.mts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,YAAY,EACZ,WAAW,EACX,WAAW,EACX,SAAS,EACT,OAAO,EACP,UAAU,EACV,KAAK,EACN,EAAE;IACD,GAAG,EAAE,OAAO,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CA8E9B"}
+{"version":3,"file":"create-scan-from-github.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/create-scan-from-github.mts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,YAAY,EACZ,WAAW,EACX,WAAW,EACX,SAAS,EACT,OAAO,EACP,UAAU,EACV,KAAK,EACN,EAAE;IACD,GAAG,EAAE,OAAO,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CA8D9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,GAC3E,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CA8D7B"}