@socketsecurity/cli 1.1.180 → 1.2.0

package/dist/types/commands/fix/cmd-fix.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;AA4MD,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAqRf"}
+{"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;AAiND,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAwRf"}

package/dist/types/commands/fix/coana-fix.d.mts

@@ -1,7 +1,9 @@
 import type { FixConfig } from './types.mts';
 import type { CResult } from '../../types.mts';
-export declare function coanaFix(fixConfig: FixConfig): Promise<CResult<{
+type CoanaFixResult = CResult<{
     fixedAll: boolean;
     ghsaDetails: unknown[];
-}>>;
+}>;
+export declare function coanaFix(fixConfig: FixConfig): Promise<CoanaFixResult>;
+export {};
 //# sourceMappingURL=coana-fix.d.mts.map

package/dist/types/commands/fix/coana-fix.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAoDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAwI9C,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAAC,CAsqBjE"}
+{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AA0J9C,KAAK,cAAc,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAAA;AAO5E,wBAAsB,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAY5E"}

package/dist/types/commands/fix/generated-socket-facts.d.mts

@@ -0,0 +1,14 @@
+export type GeneratedSocketFacts = {
+    paths: string[];
+    // The facts files' per-project classpaths, outside the repository.
+    sidecarFile: string | undefined;
+    remove: () => Promise<void>;
+    restore: () => Promise<void>;
+};
+// Backed up so each fix attempt sees the pre-fix build after `git clean`.
+export declare function generateSocketFactsForFix({ cwd, excludePaths, tmpDir }: {
+    cwd: string;
+    excludePaths: string[];
+    tmpDir: string;
+}): Promise<GeneratedSocketFacts>;
+//# sourceMappingURL=generated-socket-facts.d.mts.map

package/dist/types/commands/fix/generated-socket-facts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-socket-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/generated-socket-facts.mts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACH,YAAY,EACZ,MAAM,EACP,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkChC"}

package/dist/types/commands/fix/handle-fix.d.mts

@@ -17,6 +17,6 @@ type ConvertIdsOptions = {
  * Filters out invalid IDs and logs conversion results.
  */
 export declare function convertIdsToGhsas(ids: string[], options?: ConvertIdsOptions | undefined): Promise<string[]>;
-export declare function handleFix({ all, applyFixes, autopilot, coanaVersion, cwd, debug, disableExternalToolChecks, disableMajorUpdates, ecosystems, exclude, excludePaths, ghsas, include, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, packageManagers, prCheck, prLimit, rangeStyle, showAffectedDirectDependencies, silence, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
+export declare function handleFix({ all, applyFixes, autopilot, coanaVersion, cwd, debug, disableExternalToolChecks, disableMajorUpdates, dynamicSbomInference, ecosystems, exclude, excludePaths, ghsas, include, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, packageManagers, prCheck, prLimit, rangeStyle, showAffectedDirectDependencies, silence, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
 export {};
 //# sourceMappingURL=handle-fix.d.mts.map

package/dist/types/commands/fix/handle-fix.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CA2EnB;AAED,wBAAsB,SAAS,CAAC,EAC9B,GAAG,EACH,UAAU,EACV,SAAS,EACT,YAAY,EACZ,GAAG,EACH,KAAK,EACL,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,KAAK,EACL,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,eAAe,EACf,OAAO,EACP,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,OAAO,EACP,YAAY,EACb,EAAE,eAAe,iBA4DjB"}
+{"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,EAAE,CAAC,CA2EnB;AAED,wBAAsB,SAAS,CAAC,EAC9B,GAAG,EACH,UAAU,EACV,SAAS,EACT,YAAY,EACZ,GAAG,EACH,KAAK,EACL,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,KAAK,EACL,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,eAAe,EACf,OAAO,EACP,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,OAAO,EACP,YAAY,EACb,EAAE,eAAe,iBA8DjB"}

package/dist/types/commands/fix/types.d.mts

@@ -10,6 +10,7 @@ export type FixConfig = {
     debug: boolean;
     disableExternalToolChecks: boolean;
     disableMajorUpdates: boolean;
+    dynamicSbomInference: boolean;
     ecosystems: PURL_Type[];
     exclude: string[];
     excludePaths: string[];

package/dist/types/commands/fix/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,OAAO,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,yBAAyB,EAAE,OAAO,CAAA;IAClC,mBAAmB,EAAE,OAAO,CAAA;IAC5B,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}
+{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,OAAO,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,yBAAyB,EAAE,OAAO,CAAA;IAClC,mBAAmB,EAAE,OAAO,CAAA;IAC5B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}

package/dist/types/commands/manifest/run-manifest-facts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6KnC"}
+{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA8KnC"}

package/dist/types/commands/manifest/scripts/sidecar.d.mts

@@ -44,7 +44,9 @@ export type SidecarAccumulator = Map<string, {
 // A second call for the same factsFile (a dual-marker directory where two
 // build tools both target it) overwrites rather than merges, matching the
 // existing last-writer-wins convention for that case.
-export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths, factsFile: string): void;
+export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths, factsFile: string, 
+// Off when artifact paths were not resolved; entries then omit `targets` and `sources`.
+withPaths?: boolean): void;
 export declare function hasResolvedPathsSidecarEntries(sidecar: ResolvedPathsSidecar): boolean;
 export declare function hasSidecarEntries(acc: SidecarAccumulator): boolean;
 // Combines two already-serialized sidecars (e.g. the recursive-discovery path

package/dist/types/commands/manifest/scripts/sidecar.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA0CD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM,GAChB,IAAI,CAWN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
+{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA0CD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM;AACjB,wFAAwF;AACxF,SAAS,UAAO,GACf,IAAI,CAaN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}

package/dist/types/commands/scan/run-dynamic-sbom-inference.d.mts

@@ -6,9 +6,12 @@ export type DynamicSbomInferenceResult = {
 // Recursively discovers and generates Socket facts for every independent
 // gradle/sbt/maven build root under `cwd`, returning the generated facts
 // paths plus the resolved-paths sidecar that reachability forwards to Coana.
-export declare function runDynamicSbomInference({ cwd, excludePaths, sbtTmpDir, withFiles }: {
+export declare function runDynamicSbomInference({ cwd, excludePaths, sbtTmpDir, sidecar, withFiles }: {
     cwd: string;
     excludePaths: string[];
+    // Collects the sidecar's per-project classpaths even without resolving
+    // artifact paths.
+    sidecar?: boolean | undefined;
     // sbt provisions its Scala toolchain under this directory and withFiles'
     // artifactPaths point into it, so it must outlive whoever consumes them.
     // Only meaningful alongside `withFiles`.

package/dist/types/commands/scan/run-dynamic-sbom-inference.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"run-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/run-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,iCAAiC,CAAA;AAExC,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,oBAAoB,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACvD,CAAA;AAED,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,yEAAyE;IACzE,yEAAyE;IACzE,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;CACnB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAyCtC"}
+{"version":3,"file":"run-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/run-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,iCAAiC,CAAA;AAExC,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,oBAAoB,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACvD,CAAA;AAED,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,uEAAuE;IACvE,kBAAkB;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,yEAAyE;IACzE,yEAAyE;IACzE,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;CACnB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAwCtC"}

package/dist/types/utils/git.d.mts

@@ -37,5 +37,6 @@ export declare function gitRemoteBranchExists(branch: string, cwd?: string): Pro
 export declare function gitResetAndClean(branch?: string, cwd?: string): Promise<void>;
 export declare function gitResetHard(branch?: string, cwd?: string): Promise<boolean>;
 export declare function gitUnstagedModifiedFiles(cwd?: string): Promise<CResult<string[]>>;
+export declare function gitUntrackedFiles(cwd?: string): Promise<CResult<string[]>>;
 export declare function parseGitRemoteUrl(remoteUrl: string): RepoInfo | undefined;
 //# sourceMappingURL=git.d.mts.map

package/dist/types/utils/git.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.mts","sourceRoot":"","sources":["../../../src/utils/git.mts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAiB3C,wBAAsB,aAAa,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBxE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAmBhD;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,SAAgB,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgB/B;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtE;AAED,wBAAsB,YAAY,CAChC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAED,wBAAsB,SAAS,CAC7B,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,CAAC,EAAE,6BAA6B,GAAG,SAAS,GAClD,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,YAAY,CAChC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAuB5B;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CA2BzE"}
+{"version":3,"file":"git.d.mts","sourceRoot":"","sources":["../../../src/utils/git.mts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAiB3C,wBAAsB,aAAa,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBxE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAmBhD;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,SAAgB,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgB/B;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtE;AAED,wBAAsB,YAAY,CAChC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG7B;AAED,wBAAsB,SAAS,CAC7B,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,SAAgB,GAClB,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,wBAAsB,WAAW,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAavE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,CAAC,EAAE,6BAA6B,GAAG,SAAS,GAClD,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,YAAY,CAChC,MAAM,SAAS,EACf,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAuB5B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,SAAgB,GAClB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAuB5B;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CA2BzE"}

package/dist/utils.js

@@ -4445,6 +4445,25 @@ async function gitUnstagedModifiedFiles(cwd = process.cwd()) {
     };
   }
 }
+async function gitUntrackedFiles(cwd = process.cwd()) {
+  try {
+    const result = await spawn.spawn('git', ['ls-files', '--others', '--exclude-standard'], {
+      cwd
+    });
+    return {
+      ok: true,
+      data: result.stdout.split('\n').filter(Boolean).map(p => path$1.normalizePath(p))
+    };
+  } catch (e) {
+    debug$2.debugFn('error', 'Failed to list untracked files');
+    debug$2.debugDir('error', e);
+    return {
+      ok: false,
+      message: 'Git Error',
+      cause: 'Unexpected error while trying to list untracked files'
+    };
+  }
+}
 const parsedGitRemoteUrlCache = new Map();
 function parseGitRemoteUrl(remoteUrl) {
   let result = parsedGitRemoteUrlCache.get(remoteUrl);
@@ -9103,6 +9122,7 @@ exports.gitPushBranch = gitPushBranch;
 exports.gitRemoteBranchExists = gitRemoteBranchExists;
 exports.gitResetAndClean = gitResetAndClean;
 exports.gitUnstagedModifiedFiles = gitUnstagedModifiedFiles;
+exports.gitUntrackedFiles = gitUntrackedFiles;
 exports.githubApiRequest = githubApiRequest;
 exports.globWithGitIgnore = globWithGitIgnore;
 exports.globWorkspace = globWorkspace;
@@ -9175,5 +9195,5 @@ exports.walkNestedMap = walkNestedMap;
 exports.webLink = webLink;
 exports.withTmpDir = withTmpDir;
 exports.writeSocketJson = writeSocketJson;
-//# debugId=cf612c54-0957-4d6b-a5dd-fcf1ae189859
+//# debugId=fc0f15f9-695d-4277-9f45-4aa679cec3b7
 //# sourceMappingURL=utils.js.map