socket 1.0.93 → 1.0.95

package/README.md

@@ -92,9 +92,10 @@ npm exec socket
 
 - `SOCKET_CLI_API_BASE_URL` - Change the base URL for Socket API calls<br>
   *Defaults:* The "apiBaseUrl" value of socket/settings local app data if present, else `https://api.socket.dev/v0/`<br>
-- `SOCKET_CLI_API_PROXY` - Set the proxy all requests are routed through, e.g. if set to<br>
+- `SOCKET_CLI_API_PROXY` - Set the proxy Socket API requests are routed through, e.g. if set to<br>
   [`http://127.0.0.1:9090`](https://docs.proxyman.io/troubleshooting/couldnt-see-any-requests-from-3rd-party-network-libraries), then all request are passed through that proxy<br>
   *Aliases:* `HTTPS_PROXY`, `https_proxy`, `HTTP_PROXY`, and `http_proxy`<br>
+- `SOCKET_CLI_API_TIMEOUT` - Set the timeout in milliseconds for Socket API requests
 - `SOCKET_CLI_DEBUG` - Enable debug logging in Socket CLI
 - `DEBUG` - Enable debug logging based on the [`debug`](https://socket.dev/npm/package/debug) package
 

package/dist/cli.js

@@ -10,10 +10,10 @@ var fs = require('node:fs/promises');
 var require$$5 = require('node:module');
 var constants = require('./constants.js');
 var flags = require('./flags.js');
+var path = require('node:path');
 var words = require('../external/@socketsecurity/registry/lib/words');
 var prompts = require('../external/@socketsecurity/registry/lib/prompts');
 var fs$1 = require('node:fs');
-var path = require('node:path');
 var spawn = require('../external/@socketsecurity/registry/lib/spawn');
 var fs$2 = require('../external/@socketsecurity/registry/lib/fs');
 var strings = require('../external/@socketsecurity/registry/lib/strings');
@@ -35,12 +35,12 @@ var promises = require('node:stream/promises');
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 async function fetchOrgAnalyticsData(time, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -52,12 +52,12 @@ async function fetchOrgAnalyticsData(time, options) {
 
 async function fetchRepoAnalyticsData(repo, time, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -464,12 +464,12 @@ async function run$P(argv, importMeta, {
 
 async function fetchAuditLog(config, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -901,13 +901,13 @@ async function fetchCreateOrgFullScan(packagePaths, orgSlug, config, options) {
     cwd = process.cwd(),
     defaultBranch,
     pendingHead,
-    sdkOptions,
+    sdkOpts,
     tmp
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -939,12 +939,12 @@ async function fetchCreateOrgFullScan(packagePaths, orgSlug, config, options) {
 
 async function fetchSupportedScanFileNames(options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -978,12 +978,12 @@ async function finalizeTier1Scan(tier1ReachabilityScanId, scanId) {
 async function fetchScanData(orgSlug, scanId, options) {
   const {
     includeLicensePolicy,
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -1561,6 +1561,26 @@ async function performReachabilityAnalysis(options) {
     __proto__: null,
     ...options
   };
+
+  // Check if user has enterprise plan for reachability analysis
+  const orgsCResult = await utils.fetchOrganization();
+  if (!orgsCResult.ok) {
+    return {
+      ok: false,
+      message: 'Unable to verify plan permissions',
+      cause: 'Failed to fetch organization information to verify enterprise plan access'
+    };
+  }
+  const {
+    organizations
+  } = orgsCResult.data;
+  if (!utils.hasEnterpriseOrgPlan(organizations)) {
+    return {
+      ok: false,
+      message: 'Tier 1 Reachability analysis requires an enterprise plan',
+      cause: `This feature is only available for organizations with an enterprise plan. Please ${vendor.terminalLinkExports('upgrade your plan', 'https://socket.dev/pricing')}.`
+    };
+  }
   let tarHash;
   if (uploadManifests && orgSlug && packagePaths) {
     // Setup SDK for uploading manifests
@@ -1571,8 +1591,9 @@ async function performReachabilityAnalysis(options) {
     const sockSdk = sockSdkCResult.data;
     const wasSpinning = !!spinner?.isSpinning;
 
-    // Exclude .socket.facts.json from upload.
-    const filepathsToUpload = packagePaths.filter(p => !p.endsWith(constants.DOT_SOCKET_DOT_FACTS_JSON));
+    // Exclude any .socket.facts.json files that happen to be in the scan
+    // folder before the analysis was run.
+    const filepathsToUpload = packagePaths.filter(p => path.basename(p).toLowerCase() !== constants.DOT_SOCKET_DOT_FACTS_JSON);
     spinner?.start('Uploading manifests for reachability analysis...');
     const uploadCResult = await utils.handleApiCall(sockSdk.uploadManifestFiles(orgSlug, filepathsToUpload), {
       desc: 'upload manifests',
@@ -1604,7 +1625,7 @@ async function performReachabilityAnalysis(options) {
 
   // Build Coana arguments.
   const coanaArgs = ['run', cwd, '--output-dir', cwd, '--socket-mode', constants.DOT_SOCKET_DOT_FACTS_JSON, '--disable-report-submission', ...(reachabilityOptions.reachAnalysisTimeout ? ['--analysis-timeout', `${reachabilityOptions.reachAnalysisTimeout}`] : []), ...(reachabilityOptions.reachAnalysisMemoryLimit ? ['--memory-limit', `${reachabilityOptions.reachAnalysisMemoryLimit}`] : []), ...(reachabilityOptions.reachDisableAnalytics ? ['--disable-analytics-sharing'] : []), ...(tarHash ? ['--run-without-docker', '--manifests-tar-hash', tarHash] : []),
-  // Empty reachEcosystems implies scan all ecosystems.
+  // Empty reachEcosystems implies scanning all ecosystems.
   ...(reachabilityOptions.reachEcosystems.length ? ['--purl-types', ...reachabilityOptions.reachEcosystems] : []), ...(reachabilityOptions.reachExcludePaths.length ? ['--exclude-dirs', ...reachabilityOptions.reachExcludePaths] : [])];
 
   // Build environment variables.
@@ -2215,7 +2236,11 @@ async function handleCreateNewScan({
       return;
     }
     logger.logger.success('Reachability analysis completed successfully');
-    scanPaths = reachResult.data?.reachabilityReport ? [reachResult.data.reachabilityReport] : [];
+    const reachabilityReport = reachResult.data?.reachabilityReport;
+    scanPaths = [...packagePaths.filter(
+    // Ensure the .socket.facts.json isn't duplicated in case it happened
+    // to be in the scan folder before the analysis was run.
+    p => path.basename(p).toLowerCase() !== constants.DOT_SOCKET_DOT_FACTS_JSON), ...(reachabilityReport ? [reachabilityReport] : [])];
     tier1ReachabilityScanId = reachResult.data?.tier1ReachabilityScanId;
   }
   const fullScanCResult = await fetchCreateOrgFullScan(scanPaths, orgSlug, {
@@ -2294,12 +2319,12 @@ async function handleCi(autoManifest) {
     pendingHead: true,
     pullRequest: 0,
     reach: {
-      runReachabilityAnalysis: false,
-      reachDisableAnalytics: false,
       reachAnalysisTimeout: 0,
       reachAnalysisMemoryLimit: 0,
+      reachDisableAnalytics: false,
       reachEcosystems: [],
-      reachExcludePaths: []
+      reachExcludePaths: [],
+      runReachabilityAnalysis: false
     },
     repoName,
     readOnly: false,
@@ -2481,10 +2506,10 @@ async function getDefaultOrgFromToken() {
   const {
     organizations
   } = orgsCResult.data;
-  const slugs = Array.from(Object.values(organizations)).map(o => o.slug);
-  if (slugs.length === 0) {
+  if (organizations.length === 0) {
     return undefined;
   }
+  const slugs = utils.getOrgSlugs(organizations);
   if (slugs.length === 1) {
     return slugs[0];
   }
@@ -2498,11 +2523,7 @@ async function getEnforceableOrgsFromToken() {
   const {
     organizations
   } = orgsCResult.data;
-  const slugs = Array.from(Object.values(organizations)).map(o => o.slug);
-  if (!slugs.length) {
-    return undefined;
-  }
-  return slugs;
+  return organizations.length ? utils.getOrgSlugs(organizations) : undefined;
 }
 
 async function outputConfigAuto(key, result, outputKind) {
@@ -4923,6 +4944,7 @@ async function run$H(argv, importMeta, {
     hidden: hidden$p,
     flags: {
       ...flags.commonFlags,
+      ...flags.outputFlags,
       autoMerge: {
         type: 'boolean',
         default: false,
@@ -5046,6 +5068,11 @@ Available styles:
     test: utils.RangeStyles.includes(rangeStyle),
     message: `Expecting range style of ${arrays.joinOr(utils.RangeStyles)}`,
     fail: 'invalid'
+  }, {
+    nook: true,
+    test: !cli.flags['json'] || !cli.flags['markdown'],
+    message: 'The json and markdown flags cannot be both set, pick one',
+    fail: 'omit one'
   });
   if (!wasValidInput) {
     return;
@@ -5399,8 +5426,9 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
     return;
   }
   const sockSdk = sockSdkCResult.data;
-  const orgsCResult = await utils.handleApiCall(sockSdk.getOrganizations(), {
-    desc: 'token verification'
+  const orgsCResult = await utils.fetchOrganization({
+    desc: 'token verification',
+    sdk: sockSdk
   });
   if (!orgsCResult.ok) {
     process.exitCode = 1;
@@ -5410,9 +5438,10 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
   const {
     organizations
   } = orgsCResult.data;
-  const orgSlugs = Object.values(organizations).map(obj => obj.slug);
-  logger.logger.success(`API token verified: ${orgSlugs}`);
-  const enforcedChoices = Object.values(organizations).filter(org => org?.plan === 'enterprise').map(org => ({
+  const orgSlugs = utils.getOrgSlugs(organizations);
+  logger.logger.success(`API token verified: ${arrays.joinAnd(orgSlugs)}`);
+  const enterpriseOrgs = utils.getEnterpriseOrgs(organizations);
+  const enforcedChoices = enterpriseOrgs.map(org => ({
     name: org.name ?? 'undefined',
     value: org.id
   }));
@@ -5420,11 +5449,11 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
   if (enforcedChoices.length > 1) {
     const id = await prompts.select({
       message: "Which organization's policies should Socket enforce system-wide?",
-      choices: enforcedChoices.concat({
+      choices: [...enforcedChoices, {
         name: 'None',
         value: '',
         description: 'Pick "None" if this is a personal device'
-      })
+      }]
     });
     if (id === undefined) {
       logger.logger.fail('Canceled by user');
@@ -8313,12 +8342,12 @@ async function run$r(argv, importMeta, {
 
 async function fetchDependencies(config, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -8503,12 +8532,12 @@ async function run$q(argv, importMeta, {
 
 async function fetchLicensePolicy(orgSlug, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -8639,12 +8668,12 @@ async function run$p(argv, importMeta, {
 
 async function fetchSecurityPolicy(orgSlug, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -8774,54 +8803,51 @@ async function run$o(argv, importMeta, {
   await handleSecurityPolicy(orgSlug, outputKind);
 }
 
-async function outputOrganizationList(result, outputKind = 'text') {
-  if (!result.ok) {
-    process.exitCode = result.code ?? 1;
+async function outputOrganizationList(orgsCResult, outputKind = 'text') {
+  if (!orgsCResult.ok) {
+    process.exitCode = orgsCResult.code ?? 1;
   }
   if (outputKind === 'json') {
-    logger.logger.log(utils.serializeResultJson(result));
+    logger.logger.log(utils.serializeResultJson(orgsCResult));
     return;
   }
-  if (!result.ok) {
-    logger.logger.fail(utils.failMsgWithBadge(result.message, result.cause));
+  if (!orgsCResult.ok) {
+    logger.logger.fail(utils.failMsgWithBadge(orgsCResult.message, orgsCResult.cause));
     return;
   }
-  const organizations = Object.values(result.data.organizations);
+  const {
+    organizations
+  } = orgsCResult.data;
   const visibleTokenPrefix = utils.getVisibleTokenPrefix();
-  switch (outputKind) {
-    case 'markdown':
-      {
-        // | Syntax      | Description |
-        // | ----------- | ----------- |
-        // | Header      | Title       |
-        // | Paragraph   | Text        |
-        let mw1 = 4;
-        let mw2 = 2;
-        let mw3 = 4;
-        for (const o of organizations) {
-          mw1 = Math.max(mw1, o.name?.length ?? 0);
-          mw2 = Math.max(mw2, o.id.length);
-          mw3 = Math.max(mw3, o.plan.length);
-        }
-        logger.logger.log('# Organizations\n');
-        logger.logger.log(`List of organizations associated with your API token, starting with: ${vendor.yoctocolorsCjsExports.italic(visibleTokenPrefix)}\n`);
-        logger.logger.log(`| Name${' '.repeat(mw1 - 4)} | ID${' '.repeat(mw2 - 2)} | Plan${' '.repeat(mw3 - 4)} |`);
-        logger.logger.log(`| ${'-'.repeat(mw1)} | ${'-'.repeat(mw2)} | ${'-'.repeat(mw3)} |`);
-        for (const o of organizations) {
-          logger.logger.log(`| ${(o.name || '').padEnd(mw1, ' ')} | ${(o.id || '').padEnd(mw2, ' ')} | ${(o.plan || '').padEnd(mw3, ' ')} |`);
-        }
-        logger.logger.log(`| ${'-'.repeat(mw1)} | ${'-'.repeat(mw2)} | ${'-'.repeat(mw3)} |`);
-        return;
-      }
-    default:
-      {
-        logger.logger.log(`List of organizations associated with your API token, starting with: ${vendor.yoctocolorsCjsExports.italic(visibleTokenPrefix)}\n`);
-        // Just dump
-        for (const o of organizations) {
-          logger.logger.log(`- Name: ${vendor.yoctocolorsCjsExports.bold(o.name ?? 'undefined')}, ID: ${vendor.yoctocolorsCjsExports.bold(o.id)}, Plan: ${vendor.yoctocolorsCjsExports.bold(o.plan)}`);
-        }
-      }
+  if (outputKind !== 'markdown') {
+    logger.logger.log(`List of organizations associated with your API token, starting with: ${vendor.yoctocolorsCjsExports.italic(visibleTokenPrefix)}\n`);
+    // Just dump.
+    for (const o of organizations) {
+      logger.logger.log(`- Name: ${vendor.yoctocolorsCjsExports.bold(o.name ?? 'undefined')}, ID: ${vendor.yoctocolorsCjsExports.bold(o.id)}, Plan: ${vendor.yoctocolorsCjsExports.bold(o.plan)}`);
+    }
+    return;
+  }
+
+  // | Syntax      | Description |
+  // | ----------- | ----------- |
+  // | Header      | Title       |
+  // | Paragraph   | Text        |
+  let mw1 = 4;
+  let mw2 = 2;
+  let mw3 = 4;
+  for (const o of organizations) {
+    mw1 = Math.max(mw1, o.name?.length ?? 0);
+    mw2 = Math.max(mw2, o.id.length);
+    mw3 = Math.max(mw3, o.plan.length);
+  }
+  logger.logger.log('# Organizations\n');
+  logger.logger.log(`List of organizations associated with your API token, starting with: ${vendor.yoctocolorsCjsExports.italic(visibleTokenPrefix)}\n`);
+  logger.logger.log(`| Name${' '.repeat(mw1 - 4)} | ID${' '.repeat(mw2 - 2)} | Plan${' '.repeat(mw3 - 4)} |`);
+  logger.logger.log(`| ${'-'.repeat(mw1)} | ${'-'.repeat(mw2)} | ${'-'.repeat(mw3)} |`);
+  for (const o of organizations) {
+    logger.logger.log(`| ${(o.name || '').padEnd(mw1, ' ')} | ${(o.id || '').padEnd(mw2, ' ')} | ${(o.plan || '').padEnd(mw3, ' ')} |`);
   }
+  logger.logger.log(`| ${'-'.repeat(mw1)} | ${'-'.repeat(mw2)} | ${'-'.repeat(mw3)} |`);
 }
 
 async function handleOrganizationList(outputKind = 'text') {
@@ -8927,12 +8953,12 @@ const cmdOrganizationPolicy = {
 
 async function fetchQuota(options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -9396,12 +9422,12 @@ async function run$l(argv, importMeta, {
 
 async function fetchPurlsShallowScore(purls, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -9948,12 +9974,12 @@ async function fetchCreateRepo(config, options) {
     visibility
   } = config;
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -10131,12 +10157,12 @@ async function run$h(argv, importMeta, {
 
 async function fetchDeleteRepo(orgSlug, repoName, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -10262,13 +10288,13 @@ async function run$g(argv, importMeta, {
 async function fetchListAllRepos(orgSlug, options) {
   const {
     direction,
-    sdkOptions,
+    sdkOpts,
     sort
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -10321,12 +10347,12 @@ async function fetchListRepos(config, options) {
     ...config
   };
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -10574,12 +10600,12 @@ async function fetchUpdateRepo(config, options) {
     ...config
   };
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -10757,12 +10783,12 @@ async function run$e(argv, importMeta, {
 
 async function fetchViewRepo(orgSlug, repoName, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -11360,12 +11386,12 @@ async function run$c(argv, importMeta, {
 
 async function fetchDeleteOrgFullScan(orgSlug, scanId, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -12661,12 +12687,12 @@ async function run$9(argv, importMeta, {
 
 async function fetchOrgFullScanList(config, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -12930,12 +12956,12 @@ async function run$8(argv, importMeta, {
 
 async function fetchScanMetadata(orgSlug, scanId, options) {
   const {
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -13263,6 +13289,11 @@ async function run$6(argv, importMeta, {
     test: hasApiToken,
     message: 'This command requires an API token for access',
     fail: 'try `socket login`'
+  }, {
+    nook: true,
+    test: !json || !markdown,
+    message: 'The json and markdown flags cannot be both set, pick one',
+    fail: 'omit one'
   });
   if (!wasValidInput) {
     return;
@@ -13919,12 +13950,12 @@ async function handleScanView(orgSlug, scanId, filePath, outputKind) {
 async function streamScan(orgSlug, scanId, options) {
   const {
     file,
-    sdkOptions
+    sdkOpts
   } = {
     __proto__: null,
     ...options
   };
-  const sockSdkCResult = await utils.setupSdk(sdkOptions);
+  const sockSdkCResult = await utils.setupSdk(sdkOpts);
   if (!sockSdkCResult.ok) {
     return sockSdkCResult;
   }
@@ -15072,5 +15103,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=3642bd5d-1674-4ae6-aeda-814eaf5c0ffa
+//# debugId=9a03c00b-a929-45e3-8075-54853c769f02
 //# sourceMappingURL=cli.js.map