@socketsecurity/cli 1.1.153 → 1.1.155

package/dist/types/commands/ci/handle-ci.d.mts

@@ -1,2 +1,9 @@
+/**
+ * Derive the pull request number from the CI environment. GitHub Actions
+ * pull_request events check out `refs/pull/<n>/merge`, so the number is
+ * recoverable from GITHUB_REF; returns 0 outside a PR run (the API omits
+ * `pull_request` for falsy values).
+ */
+export declare function detectCiPullRequestNumber(): number;
 export declare function handleCi(autoManifest: boolean): Promise<void>;
 //# sourceMappingURL=handle-ci.d.mts.map

package/dist/types/commands/ci/handle-ci.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAaA,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEnE"}
+{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAKlD;AAED,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEnE"}

package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}
+{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAoC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}

package/dist/types/commands/manifest/cmd-manifest-setup.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-setup.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA4D9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}
+{"version":3,"file":"cmd-manifest-setup.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-setup.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AA0D9C,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/types/commands/manifest/discover-manifest-roots.d.mts

@@ -1,3 +1,4 @@
+import { realpathOrResolved } from '../../utils/fs.mts';
 import type { BuildTool } from './scripts/build-tool.mts';
 import type { SocketJson } from '../../utils/socket-json.mts';
 // A disabled ecosystem is skipped entirely by the glob scan below, so a
@@ -6,7 +7,7 @@ import type { SocketJson } from '../../utils/socket-json.mts';
 // must strip `disabled` here first, and let their own per-directory cascade
 // check apply it instead.
 export declare function withoutDisabledFlags(sockJson: SocketJson): SocketJson;
-export declare function realpathOrResolved(dir: string): Promise<string>;
+export { realpathOrResolved };
 // Depth-sorted (root-most first) so the caller, using each build root's
 // `subprojectDir` facts, visits a reactor root before its own members and can
 // skip subprojects a parent root already covers.

package/dist/types/commands/manifest/discover-manifest-roots.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"discover-manifest-roots.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/discover-manifest-roots.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AA2B7D,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAgBrE;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;AAeD,wEAAwE;AACxE,8EAA8E;AAC9E,iDAAiD;AACjD,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CA4CpC"}
+{"version":3,"file":"discover-manifest-roots.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/discover-manifest-roots.mts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAIvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AA2B7D,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAgBrE;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAe7B,wEAAwE;AACxE,8EAA8E;AAC9E,iDAAiD;AACjD,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CA4CpC"}

package/dist/types/commands/manifest/generate-recursive-manifests.d.mts

@@ -1,4 +1,5 @@
 import type { BuildTool } from './scripts/build-tool.mts';
+import type { SidecarAccumulator } from './scripts/sidecar.mts';
 import type { SocketJson } from '../../utils/socket-json.mts';
 export type RecursiveManifestOutcomeStatus = 'aborted' | 'empty' | 'failed' | 'generated' | 'skippedCovered' | 'skippedDisabled';
 export type RecursiveManifestOutcome = {
@@ -17,21 +18,38 @@ export type EcosystemBuildConfig = {
     // Set when this build root should be skipped entirely (never invoked).
     skipReason: string | undefined;
 };
-// A wrapper-preferred `bin` default is resolved per-root (`dir`, not `cwd`)
-// since a wrapper script only exists at the actual build root. Exported for
-// reuse by the recursive setup wizard's reactor-coverage pruning.
-export declare function resolveEcosystemConfig(ecosystem: BuildTool, dir: string, sockJson: SocketJson): EcosystemBuildConfig;
 // Generates one .socket.facts.json per independent gradle/sbt/maven build
 // root under `cwd`. Coverage is tracked per ecosystem via the facts SBOM's
 // own projects[].subprojectDir, not by pruning the whole discovered subtree,
 // so an unrelated nested project a reactor doesn't declare still gets its
-// own invocation. Fail-closed per ecosystem, not globally: a root whose
+// own invocation - and only a properly nested subprojectDir counts as
+// coverage at all; one that escapes its declaring reactor's own directory
+// still gets its own independent invocation too (see the covered.add call
+// below). Fail-closed per ecosystem, not globally: a root whose
 // workspace layout can't be determined aborts only that ecosystem's own
 // remaining walk (marking its untried candidates 'aborted'), since coverage
 // is tracked per ecosystem and an unrelated one has nothing to lose from it.
-export declare function generateRecursiveManifests({ cwd, excludePaths, verbose }: {
+export declare function generateRecursiveManifests({ cwd, excludePaths, sbtTmpDir, sidecarAcc, verbose, withFiles }: {
     cwd: string;
     excludePaths?: string[] | undefined;
+    // Reachability path only: caller-supplied directory to use as sbt's shared
+    // global base across every sbt root in this run. sbt provisions the Scala
+    // toolchain under `<base>/boot`, which withFiles' artifactPaths point into,
+    // so when the caller intends to consume those paths after this call
+    // returns (e.g. reachability analysis), it must supply a directory that
+    // outlives this call and delete it once it's done - mirrors
+    // ManifestScriptOptions.tmpDir one level up. Unset ⇒ an ephemeral shared
+    // dir is allocated and cleaned up before this call returns, matching
+    // runManifestFacts' own withFiles-less default.
+    sbtTmpDir?: string | undefined;
+    // Reachability path only: run build tools with files and fold resolved
+    // artifact paths into sidecarAcc, keyed by each root's own factsPath.
+    sidecarAcc?: SidecarAccumulator | undefined;
     verbose: boolean;
+    withFiles?: boolean | undefined;
 }): Promise<RecursiveManifestOutcome[]>;
+// A wrapper-preferred `bin` default is resolved per-root (`dir`, not `cwd`)
+// since a wrapper script only exists at the actual build root. Exported for
+// reuse by the recursive setup wizard's reactor-coverage pruning.
+export declare function resolveEcosystemConfig(ecosystem: BuildTool, dir: string, sockJson: SocketJson): EcosystemBuildConfig;
 //# sourceMappingURL=generate-recursive-manifests.d.mts.map

package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAwCD,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAgHtC"}
+{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AA6KD,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,gEAAgE;AAChE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,wEAAwE;IACxE,4DAA4D;IAC5D,2EAAyE;IACzE,qEAAqE;IACrE,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,uEAAuE;IACvE,sEAAsE;IACtE,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CA6CtC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB"}

package/dist/types/commands/manifest/generate_auto_manifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACxD,CAAA;AAmBD,wBAAsB,oBAAoB,CAAC,EACzC,uBAAuB,EACvB,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,OAAO,EACR,EAAE;IACD,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAsMtC"}
+{"version":3,"file":"generate_auto_manifest.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate_auto_manifest.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACxD,CAAA;AAmBD,wBAAsB,oBAAoB,CAAC,EACzC,uBAAuB,EACvB,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,OAAO,EACR,EAAE;IACD,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAwMtC"}

package/dist/types/commands/manifest/handle-manifest-dynamic-sbom-inference.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/handle-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAW,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,kCAAkC,CAAC,EACvD,GAAG,EACH,YAAY,EACZ,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhB"}
+{"version":3,"file":"handle-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/handle-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAW,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,kCAAkC,CAAC,EACvD,GAAG,EACH,YAAY,EACZ,UAAU,EACV,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB"}

package/dist/types/commands/manifest/run-manifest-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAwJnC"}
+{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiKnC"}

package/dist/types/commands/manifest/scripts/sidecar.d.mts

@@ -1,27 +1,53 @@
-import type { ResolvedArtifactPaths, SocketFactsSbom } from './facts.mts';
-// Frozen contract with `coana run --compute-artifacts-sidecar`; change only in
-// sync with the coana consumer. Per coordinate: targets/sources present →
-// resolved (coana uses the paths); both empty → resolved with no artifact
-// (pom/BOM), not a failure; absent → coana degrades that vuln to precomputed.
-export type ResolvedComponent = {
-    group: string;
-    name: string;
-    version: string;
-    ext: string;
-    classifier: string | null;
-    // Classpath entries (jars / first-party output dirs).
-    targets: string[];
-    // First-party source roots; [] for external deps.
-    sources: string[];
+import type { ResolvedArtifactPaths, SocketFactsSbom, SocketFactsSbomComponent, SocketFactsSbomProject } from './facts.mts';
+export type SidecarComponentEntry = SocketFactsSbomComponent & {
+    // Classpath entries (jars, or a sibling first-party project's own build
+    // output dirs when this dependency edge resolves to one). `[]`
+    // means resolution was attempted and found nothing (e.g. a pom/BOM);
+    // undefined means resolution couldn't be attempted at all (see attachPaths).
+    targets?: string[] | undefined;
+    // First-party source roots; `[]` for a genuinely external dependency (still
+    // attempted, nothing to find), not undefined.
+    sources?: string[] | undefined;
 };
-// Bare array, no schema version: socket-cli pins the coana version, so producer
-// and consumer never drift.
-export type ResolvedPathsSidecar = ResolvedComponent[];
-// Keyed by full coordinate; unions paths so multiple build roots merge into one.
-export type SidecarAccumulator = Map<string, ResolvedComponent>;
+export type SidecarProjectEntry = SocketFactsSbomProject & {
+    targets?: string[] | undefined;
+    sources?: string[] | undefined;
+};
+// Frozen contract with `coana run --compute-artifacts-sidecar`; change only
+// in sync with the coana consumer. Keyed by the absolute path of the
+// `.socket.facts.json` file whose own projects[]/components[] these entries
+// describe - the key IS the scope, so two independent reactors that happen to
+// emit the same purl identity (e.g. a shared internal module name) can never
+// collide: each is only ever looked up within its own key. No cross-reactor
+// deduplication - the same external dependency resolved by several
+// independent reactors is intentionally duplicated across all of their
+// components[].
+export type ResolvedPathsSidecar = Record<string, {
+    // This facts file's own first-party modules.
+    projects: SidecarProjectEntry[];
+    // This reactor's dependency-position entries: genuinely external
+    // artifacts, and dependency edges that resolve to a sibling first-party
+    // project (reported via that project's own source/target roots instead
+    // of a jar path).
+    components: SidecarComponentEntry[];
+}>;
+export type SidecarAccumulator = Map<string, {
+    projects: SidecarProjectEntry[];
+    components: SidecarComponentEntry[];
+}>;
 // Emit an entry for every SBOM component AND every first-party project: a
 // top-level module is a project, not a dependency component, yet its source
 // roots are where reachability starts, so the sidecar must carry them.
-export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths): void;
+// A second call for the same factsFile (a dual-marker directory where two
+// build tools both target it) overwrites rather than merges, matching the
+// existing last-writer-wins convention for that case.
+export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths, factsFile: string): void;
+export declare function hasResolvedPathsSidecarEntries(sidecar: ResolvedPathsSidecar): boolean;
+export declare function hasSidecarEntries(acc: SidecarAccumulator): boolean;
+// Combines two already-serialized sidecars (e.g. the recursive-discovery path
+// and the plain conda/bazel auto-manifest path). Keys are already scoped to
+// one facts file each and can't collide between the two inputs in practice,
+// so this is a plain merge; the later input wins on a genuine key collision.
+export declare function mergeResolvedPathsSidecars(a: ResolvedPathsSidecar, b: ResolvedPathsSidecar): ResolvedPathsSidecar;
 export declare function serializeSidecar(acc: SidecarAccumulator): ResolvedPathsSidecar;
 //# sourceMappingURL=sidecar.d.mts.map

package/dist/types/commands/manifest/scripts/sidecar.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEzE,+EAA+E;AAC/E,4EAA0E;AAC1E,4EAA0E;AAC1E,gFAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,sDAAsD;IACtD,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,EAAE,CAAA;AAEtD,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;AAsC/D,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,GACnC,IAAI,CAwBN;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAYtB"}
+{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA0CD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}

package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts

@@ -52,12 +52,14 @@ export declare function discoverBuildRoots({ cwd, excludePaths, fullByTool, incl
 // Enumerates one build root's declared workspace members (see
 // enumerate-workspaces.mts) and folds them into `coveredByEcosystem`, so a
 // later candidate matching one is recognized as a reactor member rather than
-// independent. Called per-candidate right after its own prompt, not as a
-// bulk pass, so the build invocation never blocks candidates that don't need
-// it. A disabled candidate is skipped (no point invoking an off build tool);
-// otherwise this fails closed, same reasoning as generateRecursiveManifests -
-// if enumeration fails there's no way to tell covered from independent, so
-// the caller aborts rather than guess.
+// independent - only a properly nested subprojectDir counts as coverage at
+// all; one that escapes this candidate's own directory still gets its own
+// entry (see the set.add call below). Called per-candidate right after its
+// own prompt, not as a bulk pass, so the build invocation never blocks
+// candidates that don't need it. A disabled candidate is skipped (no point
+// invoking an off build tool); otherwise this fails closed, same reasoning
+// as generateRecursiveManifests - if enumeration fails there's no way to
+// tell covered from independent, so the caller aborts rather than guess.
 export declare function markWorkspaceCoverage({ candidate, coveredByEcosystem, cwd, excludePaths, rootSockJson }: {
     candidate: Candidate;
     coveredByEcosystem: Map<BuildTool, Set<string>>;

package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-recursive-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-recursive-manifest-config.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,6EAA6E;AAC7E,eAAe;AACf,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAA;AAWtD,yEAAyE;AACzE,uEAAuE;AACvE,KAAK,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAA;AAwB7D,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,wCAAwC;AACxC,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAChE,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,GAAG,EAAE,MAAM,GACV,CAAC,EAAE,CAWL;AAuBD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,CAAA;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,+BAA+B;AAC/B,wBAAsB,cAAc,CAAC,EACnC,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAM7B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,kEAAkE;IAClE,iEAAiE;IACjE,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,oEAAoE;AACpE,6EAA6E;AAC7E,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,YAAY,EACZ,UAAU,EACV,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+BhC;AAED,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,uCAAuC;AACvC,wBAAsB,qBAAqB,CAAC,EAC1C,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,YAAY,EACZ,YAAY,EACb,EAAE;IACD,SAAS,EAAE,SAAS,CAAA;IACpB,kBAAkB,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CA6C9B;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,4DAA4D;AAC5D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;IAChC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA+B1C;AAkCD,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,+BAA+B;AAC/B,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAmD1C;AA8BD,KAAK,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;AA0C9D,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,0DAA0D;AAC1D,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CACT,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAC9E,CAsEA;AA0ID,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA0LzC"}
+{"version":3,"file":"setup-recursive-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-recursive-manifest-config.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,6EAA6E;AAC7E,eAAe;AACf,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAA;AAWtD,yEAAyE;AACzE,uEAAuE;AACvE,KAAK,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAA;AAwB7D,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,wCAAwC;AACxC,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAChE,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,GAAG,EAAE,MAAM,GACV,CAAC,EAAE,CAWL;AAuBD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,CAAA;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,+BAA+B;AAC/B,wBAAsB,cAAc,CAAC,EACnC,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAM7B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,kEAAkE;IAClE,iEAAiE;IACjE,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,oEAAoE;AACpE,6EAA6E;AAC7E,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,YAAY,EACZ,UAAU,EACV,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+BhC;AAED,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AACzE,wBAAsB,qBAAqB,CAAC,EAC1C,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,YAAY,EACZ,YAAY,EACb,EAAE;IACD,SAAS,EAAE,SAAS,CAAA;IACpB,kBAAkB,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAqD9B;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,4DAA4D;AAC5D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;IAChC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA+B1C;AAkCD,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,+BAA+B;AAC/B,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAmD1C;AA8BD,KAAK,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;AA0C9D,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,0DAA0D;AAC1D,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CACT,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAC9E,CAsEA;AA0ID,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAwMzC"}

package/dist/types/commands/scan/cmd-scan-reach.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA6B/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAmOf"}
+{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA4C/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAmOf"}

package/dist/types/commands/scan/handle-create-new-scan.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,mBAAmB,CAAC,EACxC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,GAAG,EACH,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,WAAW,EACX,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkT3C"}
+{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAKjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,mBAAmB,CAAC,EACxC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,GAAG,EACH,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,WAAW,EACX,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgX3C"}

package/dist/types/commands/scan/perform-reachability-analysis.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAGnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,6BAA6B,EAAE,OAAO,CAAA;IACtC,4BAA4B,EAAE,OAAO,CAAA;IACrC,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;IACnB,4BAA4B,EAAE,OAAO,CAAA;IACrC,8BAA8B,EAAE,OAAO,CAAA;IACvC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,4BAA4B,EAAE,OAAO,CAAA;IACrC,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,aAAa,EAAE,OAAO,CAAA;IACtB,oBAAoB,EAAE,OAAO,CAAA;IAC7B,cAAc,EAAE,OAAO,CAAA;IACvB,6BAA6B,EAAE,OAAO,CAAA;IACtC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,2EAA2E;IAC3E,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,GAChD,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CA4Q9C"}
+{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAGnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,6BAA6B,EAAE,OAAO,CAAA;IACtC,4BAA4B,EAAE,OAAO,CAAA;IACrC,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;IACnB,4BAA4B,EAAE,OAAO,CAAA;IACrC,8BAA8B,EAAE,OAAO,CAAA;IACvC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,4BAA4B,EAAE,OAAO,CAAA;IACrC,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,aAAa,EAAE,OAAO,CAAA;IACtB,oBAAoB,EAAE,OAAO,CAAA;IAC7B,cAAc,EAAE,OAAO,CAAA;IACvB,6BAA6B,EAAE,OAAO,CAAA;IACtC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,2EAA2E;IAC3E,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,GAChD,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAmR9C"}

package/dist/types/commands/scan/reachability-flags.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,SA8H/B,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}
+{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,SA6H/B,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}

package/dist/types/shadow/npm-base.d.mts

@@ -7,5 +7,23 @@ export type ShadowBinOptions = SpawnOptions & {
 export type ShadowBinResult = {
     spawnPromise: SpawnResult<string, SpawnExtra | undefined>;
 };
+/**
+ * Build the '--node-options=<value>' argument passed to npm so its lifecycle
+ * scripts run with our Node permission flags.
+ *
+ * npm assigns this value to NODE_OPTIONS for the scripts it runs, REPLACING any
+ * inherited NODE_OPTIONS. To avoid clobbering the user's configuration we merge,
+ * in order, the caller's existing process.env.NODE_OPTIONS and any
+ * '--node-options=<value>' npm argument ahead of our permission flags (issue
+ * #1036).
+ *
+ * The value is intentionally NOT wrapped in quotes. shadowNpmBase spawns npm
+ * without a shell, so any quotes would be passed literally to npm and become
+ * part of the NODE_OPTIONS value. Consumers that re-tokenize NODE_OPTIONS on
+ * whitespace (e.g. Next.js) then strip the leading quote off '--permission',
+ * dropping it while keeping the '--allow-*' flags, which crashes Node >= 24
+ * with ERR_MISSING_OPTION (issue #1160).
+ */
+export declare function buildNpmNodeOptionsArg(envNodeOptions: string | undefined, nodeOptionsArg: string | undefined, permArgs: string[] | readonly string[]): string;
 export default function shadowNpmBase(binName: typeof NPM | typeof NPX, args?: string[] | readonly string[], options?: ShadowBinOptions | undefined, extra?: SpawnExtra | undefined): Promise<ShadowBinResult>;
 //# sourceMappingURL=npm-base.d.mts.map

package/dist/types/shadow/npm-base.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-base.d.mts","sourceRoot":"","sources":["../../../src/shadow/npm-base.mts"],"names":[],"mappings":"AAaA,OAAkB,EAGhB,GAAG,EACH,GAAG,EACJ,MAAM,kBAAkB,CAAA;AAMzB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACZ,MAAM,oCAAoC,CAAA;AAE3C,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG;IAC5C,GAAG,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,CAAA;CAC1D,CAAA;AAED,wBAA8B,aAAa,CACzC,OAAO,EAAE,OAAO,GAAG,GAAG,OAAO,GAAG,EAChC,IAAI,GAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAA0B,EAC1D,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,EACtC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAC7B,OAAO,CAAC,eAAe,CAAC,CAyG1B"}
+{"version":3,"file":"npm-base.d.mts","sourceRoot":"","sources":["../../../src/shadow/npm-base.mts"],"names":[],"mappings":"AAaA,OAAkB,EAGhB,GAAG,EACH,GAAG,EACJ,MAAM,kBAAkB,CAAA;AAMzB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACZ,MAAM,oCAAoC,CAAA;AAE3C,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG;IAC5C,GAAG,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,CAAA;CAC1D,CAAA;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GACrC,MAAM,CASR;AAED,wBAA8B,aAAa,CACzC,OAAO,EAAE,OAAO,GAAG,GAAG,OAAO,GAAG,EAChC,IAAI,GAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAA0B,EAC1D,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,EACtC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAC7B,OAAO,CAAC,eAAe,CAAC,CA6G1B"}

package/dist/types/utils/fs.d.mts

@@ -6,4 +6,8 @@ export type FindUpOptions = {
 };
 export declare function findUp(name: string | string[], options?: FindUpOptions | undefined): Promise<string | undefined>;
 export declare function withTmpDir<T>(prefix: string, fn: (tmpDir: string) => Promise<T>): Promise<T>;
+// Symlink-resolved absolute path when the target exists (e.g. macOS symlinks
+// /tmp -> /private/tmp); falls back to a plain resolve so a not-yet-existing
+// path still gets a usable absolute value instead of throwing.
+export declare function realpathOrResolved(target: string): Promise<string>;
 //# sourceMappingURL=fs.d.mts.map

package/dist/types/utils/fs.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.mts","sourceRoot":"","sources":["../../../src/utils/fs.mts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiC7B;AAED,wBAAsB,UAAU,CAAC,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACjC,OAAO,CAAC,CAAC,CAAC,CAOZ"}
+{"version":3,"file":"fs.d.mts","sourceRoot":"","sources":["../../../src/utils/fs.mts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiC7B;AAED,wBAAsB,UAAU,CAAC,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACjC,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,+DAA+D;AAC/D,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMxE"}

package/dist/types/utils/git.d.mts

@@ -1,5 +1,11 @@
 import type { CResult } from '../types.mts';
 export declare function getBaseBranch(cwd?: string): Promise<string>;
+/**
+ * The branch a GitHub Actions workflow run is on, or undefined when the
+ * environment does not identify one. Read straight from process.env because
+ * GITHUB_HEAD_REF is not part of the constants.ENV snapshot.
+ */
+export declare function getCiBranch(): string | undefined;
 export type RepoInfo = {
     owner: string;
     repo: string;

package/dist/types/utils/git.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.mts","sourceRoot":"","sources":["../../../src/utils/git.mts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAiB3C,wBAAsB,aAAa,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBxE;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,SAAgB,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgB/B;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtE;AAED,wBAAsB,YAAY,CAChC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAED,wBAAsB,SAAS,CAC7B,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA6B7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,CAAC,EAAE,6BAA6B,GAAG,SAAS,GAClD,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,YAAY,CAChC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAuB5B;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CA2BzE"}
+{"version":3,"file":"git.d.mts","sourceRoot":"","sources":["../../../src/utils/git.mts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAiB3C,wBAAsB,aAAa,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBxE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAmBhD;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,SAAgB,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgB/B;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtE;AAED,wBAAsB,YAAY,CAChC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAED,wBAAsB,SAAS,CAC7B,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,CAAC,EAAE,6BAA6B,GAAG,SAAS,GAClD,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,YAAY,CAChC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAuB5B;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CA2BzE"}

package/dist/types/utils/github-errors.d.mts

@@ -38,7 +38,8 @@ export declare function classifyGitHubResponse(status: number, headers: Headers,
  *   short (<= CHEAP_RATE_LIMIT_WAIT_MAX_SECONDS); otherwise surface the error
  *   immediately. Long primary-limit resets are not worth blocking on.
  * - Auth: never retried.
- * - 5xx / network: capped exponential backoff, MAX_TRANSIENT_ATTEMPTS total.
+ * - 5xx / network: handed to the fleet's shared `pRetry` for exponential
+ *   backoff, on the policy in `githubRetryOptions`.
  */
 export declare function githubApiRequest(url: string, init: ApiFetchInit, context: string, 
 // Injectable request implementation. Defaults to the real `apiFetch`;

package/dist/types/utils/github-errors.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"github-errors.d.mts","sourceRoot":"","sources":["../../../src/utils/github-errors.mts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAkB3C,2EAA2E;AAC3E,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,qCAAqC,CAAA;AAC5E,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,+BAA+B,CAAA;AAWjE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgB5E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CA6D5B;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM;AACf,sEAAsE;AACtE,wEAAwE;AACxE,wBAAwB;AACxB,SAAS,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAY,GAC3E,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAoF5D"}
+{"version":3,"file":"github-errors.d.mts","sourceRoot":"","sources":["../../../src/utils/github-errors.mts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAkB3C,2EAA2E;AAC3E,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,qCAAqC,CAAA;AAC5E,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,+BAA+B,CAAA;AAWjE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgB5E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CA6D5B;AAyCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM;AACf,sEAAsE;AACtE,wEAAwE;AACxE,wBAAwB;AACxB,SAAS,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAY,GAC3E,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAuH5D"}

package/dist/types/utils/glob.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"glob.d.mts","sourceRoot":"","sources":["../../../src/utils/glob.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAMvD,eAAO,MAAM,YAAY,yIAiBf,CAAA;AAwGV,mEAAmE;AACnE,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AACvE,uEAAqE;AACrE,4CAA4C;AAC5C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAuBD,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACvC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,MAAM,EAAE,CAKV;AAED,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAI/B;AAED,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,MAAM,EAAE,CAaV;AAED,KAAK,wBAAwB,GAAG,WAAW,GAAG;IAC5C,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;IACjD,sDAAsD;IACtD,iEAAiE;IACjE,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;IACpD,YAAY,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CACrC,CAAA;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACtC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC,CA+InB;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,KAAK,EACZ,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,EAAE,CAAC,CAUnB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,WAIpE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACnC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,EAAE,CAgBV"}
+{"version":3,"file":"glob.d.mts","sourceRoot":"","sources":["../../../src/utils/glob.mts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAMvD,eAAO,MAAM,YAAY,yIAiBf,CAAA;AAwGV,mEAAmE;AACnE,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AACvE,uEAAqE;AACrE,4CAA4C;AAC5C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAuBD,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACvC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,MAAM,EAAE,CAKV;AAED,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAI/B;AAED,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAClE,MAAM,EAAE,CAaV;AAED,KAAK,wBAAwB,GAAG,WAAW,GAAG;IAC5C,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;IACjD,sDAAsD;IACtD,iEAAiE;IACjE,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;IACpD,YAAY,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CACrC,CAAA;AAqED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACtC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC,CAiMnB;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,KAAK,EACZ,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,EAAE,CAAC,CAUnB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,WAIpE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EACnC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,EAAE,CAgBV"}

package/dist/types/utils/npm-paths.d.mts

@@ -1,3 +1,20 @@
+/**
+ * Resolve a package manager bin path to a JavaScript entry `node` can run.
+ *
+ * Some version managers ship `npm` as a shell script instead of the usual shim
+ * that points at npm's JavaScript entry. mise writes a bash wrapper so it can
+ * run `mise reshim` after a global install. resolveBinPathSync only recognizes
+ * npm's own shim, by the `NPM_CLI_JS=` assignment inside it, and passes anything
+ * else through untouched, so the wrapper reaches us unchanged. We then hand it
+ * to `node` as the main module and the shell syntax throws a SyntaxError before
+ * npm ever starts (issue #946).
+ *
+ * When the resolved path is not JavaScript, fall back to the CLI entry inside
+ * npm's install directory, which findNpmDirPathSync already knows how to locate
+ * for this layout. A path we cannot map keeps its current value, so an
+ * unrecognized layout behaves exactly as it does today.
+ */
+export declare function resolveBinPathToJsEntry(binPath: string, cliEntryName: string): string;
 export declare function getNpmBinPath(): string;
 export declare function getNpmDirPath(): string;
 export declare function getNpmRequire(): NodeJS.Require;

package/dist/types/utils/npm-paths.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-paths.d.mts","sourceRoot":"","sources":["../../../src/utils/npm-paths.mts"],"names":[],"mappings":"AAwCA,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAkBD,wBAAgB,aAAa,WAyB5B;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAAC,OAAO,CAY9C;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAmBD,wBAAgB,oBAAoB,YAEnC;AAED,wBAAgB,oBAAoB,YAEnC"}
+{"version":3,"file":"npm-paths.d.mts","sourceRoot":"","sources":["../../../src/utils/npm-paths.mts"],"names":[],"mappings":"AAyCA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,MAAM,CAUR;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAsBD,wBAAgB,aAAa,WAyB5B;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAAC,OAAO,CAY9C;AAGD,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAuBD,wBAAgB,oBAAoB,YAEnC;AAED,wBAAgB,oBAAoB,YAEnC"}