@socketsecurity/cli 1.1.155 → 1.1.157

package/dist/types/commands/scan/output-scan-reach.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"output-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/output-scan-reach.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAA;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,eAAe,CACnC,MAAM,EAAE,OAAO,CAAC,0BAA0B,CAAC,EAC3C,EACE,GAAG,EACH,UAAU,EACV,UAAU,EACX,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAuCf"}
+{"version":3,"file":"output-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/output-scan-reach.mts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAA;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE1D,wBAAsB,eAAe,CACnC,MAAM,EAAE,OAAO,CAAC,0BAA0B,CAAC,EAC3C,EACE,GAAG,EACH,UAAU,EACV,UAAU,EACX,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAuCf"}

package/dist/types/utils/coana.d.mts

@@ -38,7 +38,13 @@ export type ReachabilityError = {
     componentVersion: string;
     ghsaId: string;
     subprojectPath: string;
+    workspacePath: string;
 };
 export declare function extractReachabilityErrors(socketFactsFile: string): ReachabilityError[];
 export declare function extractTier1ReachabilityScanId(socketFactsFile: string): string | undefined;
+// Label a reachability location the way Coana's own `getFullWorkspacePath`
+// does. Since @coana-tech/cli v15.10.8 `subprojectPath` names the build root
+// and `workspacePath` the workspace within it, so a single-root repo reports
+// `.` as its subproject and must be labelled by its workspace alone.
+export declare function getFullWorkspacePath(subprojectPath: string, workspacePath: string): string;
 //# sourceMappingURL=coana.d.mts.map

package/dist/types/utils/coana.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAgD9B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA0CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB"}
+{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAgD9B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR"}

package/dist/utils.js

@@ -5034,6 +5034,7 @@ function* walkNestedMap(map, keys = []) {
  *   to depscan is brotli (api-v0 decodes at the multipart boundary).
  * - extractReachabilityErrors: Extract per-component reachability errors
  * - extractTier1ReachabilityScanId: Extract scan ID from socket facts file
+ * - getFullWorkspacePath: Label a build-root/workspace pair the way Coana does
  *
  * Integration:
  * - Works with @coana-tech/cli for reachability analysis
@@ -5143,7 +5144,8 @@ function extractReachabilityErrors(socketFactsFile) {
             componentName: String(component.name ?? ''),
             componentVersion: String(component.version ?? ''),
             ghsaId: String(ghsaEntry.ghsa_id ?? ''),
-            subprojectPath: String(entry.subprojectPath ?? '')
+            subprojectPath: String(entry.subprojectPath ?? ''),
+            workspacePath: String(entry.workspacePath ?? '')
           });
         }
       }
@@ -5159,6 +5161,19 @@ function extractTier1ReachabilityScanId(socketFactsFile) {
   return tier1ReachabilityScanId.length > 0 ? tier1ReachabilityScanId : undefined;
 }
 
+// Label a reachability location the way Coana's own `getFullWorkspacePath`
+// does. Since @coana-tech/cli v15.10.8 `subprojectPath` names the build root
+// and `workspacePath` the workspace within it, so a single-root repo reports
+// `.` as its subproject and must be labelled by its workspace alone.
+function getFullWorkspacePath(subprojectPath, workspacePath) {
+  const subproject = subprojectPath && subprojectPath !== '.' ? subprojectPath : '';
+  const workspace = workspacePath && workspacePath !== '.' ? workspacePath : '';
+  if (subproject && workspace) {
+    return `${subproject}/${workspace}`;
+  }
+  return subproject || workspace || '.';
+}
+
 /**
  * File system utilities for Socket CLI.
  * Provides file and directory search functionality.
@@ -8989,6 +9004,7 @@ exports.getErrorCause = getErrorCause;
 exports.getErrorMessageOr = getErrorMessageOr;
 exports.getFlagApiRequirementsOutput = getFlagApiRequirementsOutput;
 exports.getFlagListOutput = getFlagListOutput;
+exports.getFullWorkspacePath = getFullWorkspacePath;
 exports.getMajor = getMajor;
 exports.getNpmBinPath = getNpmBinPath;
 exports.getNpmRequire = getNpmRequire;
@@ -9088,5 +9104,5 @@ exports.walkNestedMap = walkNestedMap;
 exports.webLink = webLink;
 exports.withTmpDir = withTmpDir;
 exports.writeSocketJson = writeSocketJson;
-//# debugId=e72c7655-2d5e-4e48-bfdb-c488b68167b6
+//# debugId=374c6786-8711-43fe-b863-d5928c055431
 //# sourceMappingURL=utils.js.map