@socketsecurity/cli 1.1.171 → 1.1.173

package/dist/types/commands/ci/handle-ci.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAKlD;AAED,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsEnE"}
+{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAKlD;AAED,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEnE"}

package/dist/types/commands/scan/cmd-scan-create.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA+HhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA4ef"}
+{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA+HhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA+ef"}

package/dist/types/commands/scan/cmd-scan-reach.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AAyC/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAmOf"}
+{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AAiD/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAmOf"}

package/dist/types/commands/scan/handle-create-new-scan.d.mts

@@ -16,6 +16,7 @@ export type HandleCreateNewScanConfig = {
     pullRequest: number;
     outputKind: OutputKind;
     reach: Remap<ReachabilityOptions & {
+        reachFallbackToRegularScan: boolean;
         runReachabilityAnalysis: boolean;
     }>;
     readOnly: boolean;

package/dist/types/commands/scan/handle-create-new-scan.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,mBAAmB,CAAC,EACxC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,GAAG,EACH,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,WAAW,EACX,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2V3C"}
+{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,0BAA0B,EAAE,OAAO,CAAA;QACnC,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,mBAAmB,CAAC,EACxC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,GAAG,EACH,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,WAAW,EACX,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsX3C"}

package/dist/types/commands/scan/output-create-new-scan.d.mts

@@ -1,9 +1,16 @@
 import type { CResult, OutputKind } from '../../types.mts';
 import type { Spinner } from '@socketsecurity/registry/lib/spinner';
 import type { FullScanResult } from '@socketsecurity/sdk';
+export type ReachabilityFallback = {
+    cause?: string | undefined;
+    message: string;
+};
 export type CreateNewScanOptions = {
     interactive?: boolean | undefined;
     outputKind?: OutputKind | undefined;
+    // Set when --reach-fallback-to-regular-scan downgraded the run, so machine
+    // consumers can tell a degraded scan from a full one.
+    reachabilityFallback?: ReachabilityFallback | undefined;
     spinner?: Spinner | undefined;
 };
 export declare function outputCreateNewScan(result: CResult<FullScanResult['data']>, options?: CreateNewScanOptions | undefined): Promise<void>;

package/dist/types/commands/scan/output-create-new-scan.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"output-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/output-create-new-scan.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACjC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,iBAmF3C"}
+{"version":3,"file":"output-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/output-create-new-scan.mts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACjC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,2EAA2E;IAC3E,sDAAsD;IACtD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACvD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,iBA6F3C"}

package/dist/types/commands/scan/reachability-flags.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,8EAA8E;AAC9E,uEAAuE;AACvE,gBAAgB;AAChB,eAAO,MAAM,kCAAkC,oKACoH,CAAA;AAEnK,eAAO,MAAM,iBAAiB,EAAE,SAwH/B,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}
+{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,8EAA8E;AAC9E,uEAAuE;AACvE,gBAAgB;AAChB,eAAO,MAAM,kCAAkC,oKACoH,CAAA;AAEnK,eAAO,MAAM,iBAAiB,EAAE,SA8H/B,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}

package/dist/types/utils/coana.d.mts

@@ -47,4 +47,15 @@ export declare function extractTier1ReachabilityScanId(socketFactsFile: string):
 // and `workspacePath` the workspace within it, so a single-root repo reports
 // `.` as its subproject and must be labelled by its workspace alone.
 export declare function getFullWorkspacePath(subprojectPath: string, workspacePath: string): string;
+export type SnapshotSocketFactsOptions = {
+    cwd: string;
+    outputPath: string;
+    tmpDir: string;
+};
+export type SocketFactsSnapshot = {
+    restore: () => Promise<void>;
+};
+// Coana overwrites `.socket.facts.json` in place, so an analysis that fails
+// part way leaves partial output where the scan's inputs used to be.
+export declare function snapshotSocketFacts(scanPaths: string[], options: SnapshotSocketFactsOptions): Promise<SocketFactsSnapshot>;
 //# sourceMappingURL=coana.d.mts.map

package/dist/types/utils/coana.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAgD9B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR"}
+{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAgD9B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}

package/dist/utils.js

@@ -5035,6 +5035,8 @@ function* walkNestedMap(map, keys = []) {
  * - extractReachabilityErrors: Extract per-component reachability errors
  * - extractTier1ReachabilityScanId: Extract scan ID from socket facts file
  * - getFullWorkspacePath: Label a build-root/workspace pair the way Coana does
+ * - snapshotSocketFacts: Copy aside the socket facts files Coana overwrites
+ *   in place, so a failed analysis can be rolled back
  *
  * Integration:
  * - Works with @coana-tech/cli for reachability analysis
@@ -5173,6 +5175,62 @@ function getFullWorkspacePath(subprojectPath, workspacePath) {
   }
   return subproject || workspace || '.';
 }
+// Coana overwrites `.socket.facts.json` in place, so an analysis that fails
+// part way leaves partial output where the scan's inputs used to be.
+async function snapshotSocketFacts(scanPaths, options) {
+  const {
+    cwd,
+    outputPath,
+    tmpDir
+  } = {
+    __proto__: null,
+    ...options
+  };
+  const sources = new Set(scanPaths.filter(p => path.basename(p) === DOT_SOCKET_DOT_FACTS_JSON).map(p => path.resolve(cwd, p)));
+  sources.add(path.resolve(cwd, outputPath));
+  const snapshotDir = path.join(tmpDir, 'socket-facts-snapshot');
+  await fs$2.mkdir(snapshotDir, {
+    recursive: true
+  });
+  const captured = [];
+  const created = [];
+  await Promise.all(Array.from(sources, async (source, index) => {
+    if (!fs.existsSync(source)) {
+      created.push(source);
+      return;
+    }
+    const backup = path.join(snapshotDir, `${index}.json`);
+    try {
+      await fs$2.copyFile(source, backup);
+      captured.push({
+        backup,
+        source
+      });
+    } catch (e) {
+      // A path we cannot copy is left out of both lists so restore() leaves
+      // it untouched rather than deleting a file it never captured.
+      debug$2.debugFn('warn', `[socket-facts] snapshot failed: ${source}`);
+      debug$2.debugDir('error', e);
+    }
+  }));
+  return {
+    async restore() {
+      await Promise.all([...captured.map(async ({
+        backup,
+        source
+      }) => {
+        try {
+          await fs$2.copyFile(backup, source);
+        } catch (e) {
+          debug$2.debugFn('warn', `[socket-facts] restore failed: ${source}`);
+          debug$2.debugDir('error', e);
+        }
+      }), ...created.map(source => fs$2.rm(source, {
+        force: true
+      }).catch(() => {}))]);
+    }
+  };
+}
 
 /**
  * File system utilities for Socket CLI.
@@ -9084,6 +9142,7 @@ exports.serializeResultJson = serializeResultJson;
 exports.setGitRemoteGithubRepoUrl = setGitRemoteGithubRepoUrl;
 exports.setupSdk = setupSdk;
 exports.setupTelemetryExitHandlers = setupTelemetryExitHandlers;
+exports.snapshotSocketFacts = snapshotSocketFacts;
 exports.socketDashboardLink = socketDashboardLink;
 exports.socketDevLink = socketDevLink;
 exports.socketDocsLink = socketDocsLink;
@@ -9104,5 +9163,5 @@ exports.walkNestedMap = walkNestedMap;
 exports.webLink = webLink;
 exports.withTmpDir = withTmpDir;
 exports.writeSocketJson = writeSocketJson;
-//# debugId=374c6786-8711-43fe-b863-d5928c055431
+//# debugId=b463bffe-59eb-47e2-a92a-0ed72f8d1362
 //# sourceMappingURL=utils.js.map