@socketsecurity/cli-with-sentry 1.1.25 → 2.0.0

package/external/@socketsecurity/registry/lib/agent.js

@@ -1,390 +0,0 @@
-'use strict'
-
-const {
-  execBin,
-  resolveBinPathSync,
-  whichBin,
-  whichBinSync
-} = /*@__PURE__*/ require('./bin')
-const { isDebug } = /*@__PURE__*/ require('./debug')
-const { findUpSync } = /*@__PURE__*/ require('./fs')
-const { getOwn } = /*@__PURE__*/ require('./objects')
-const { spawn } = /*@__PURE__*/ require('./spawn')
-
-const npmAuditFlags = new Set(['--audit', '--no-audit'])
-
-const npmFundFlags = new Set(['--fund', '--no-fund'])
-
-const npmLogFlags = new Set([
-  // --loglevel has several aliases:
-  // https://docs.npmjs.com/cli/v11/using-npm/logging#aliases
-  '--loglevel',
-  '-d',
-  '--dd',
-  '--ddd',
-  '-q',
-  '--quiet',
-  '-s',
-  '--silent'
-])
-
-const npmProgressFlags = new Set(['--progress', '--no-progress'])
-
-const pnpmIgnoreScriptsFlags = new Set([
-  '--ignore-scripts',
-  '--no-ignore-scripts'
-])
-
-const pnpmFrozenLockfileFlags = new Set([
-  '--frozen-lockfile',
-  '--no-frozen-lockfile'
-])
-
-const pnpmInstallCommands = new Set(['install', 'i'])
-
-// Commands that support --ignore-scripts flag in pnpm:
-// Installation-related: install, add, update, remove, link, unlink, import, rebuild.
-const pnpmInstallLikeCommands = new Set([
-  'install',
-  'i',
-  'add',
-  'update',
-  'up',
-  'remove',
-  'rm',
-  'link',
-  'ln',
-  'unlink',
-  'import',
-  'rebuild',
-  'rb'
-])
-
-// Commands that support --ignore-scripts flag in yarn:
-// Similar to npm/pnpm: installation-related commands.
-const yarnInstallLikeCommands = new Set([
-  'install',
-  'add',
-  'upgrade',
-  'remove',
-  'link',
-  'unlink',
-  'import'
-])
-
-/**
- * Execute npm commands with optimized flags and settings.
- * @param {string[] | readonly string[]} args - Command arguments to pass to npm.
- * @param {import('./spawn').SpawnOptions} [options] - Spawn options.
- * @returns {Promise<{ stdout: string; stderr: string }>} Command output.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function execNpm(args, options) {
-  const useDebug = isDebug()
-  const terminatorPos = args.indexOf('--')
-  const npmArgs = (
-    terminatorPos === -1 ? args : args.slice(0, terminatorPos)
-  ).filter(
-    a => !isNpmAuditFlag(a) && !isNpmFundFlag(a) && !isNpmProgressFlag(a)
-  )
-  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
-  const logLevelArgs =
-    // The default value of loglevel is "notice". We default to "warn" which is
-    // one level quieter.
-    useDebug || npmArgs.some(isNpmLoglevelFlag) ? [] : ['--loglevel', 'warn']
-  return spawn(
-    /*@__PURE__*/ require('./constants/exec-path'),
-    [
-      .../*@__PURE__*/ require('./constants/node-harden-flags'),
-      .../*@__PURE__*/ require('./constants/node-no-warnings-flags'),
-      /*@__PURE__*/ require('./constants/npm-real-exec-path'),
-      // Even though '--loglevel=error' is passed npm will still run through
-      // code paths for 'audit' and 'fund' unless '--no-audit' and '--no-fund'
-      // flags are passed.
-      '--no-audit',
-      '--no-fund',
-      // Add `--no-progress` and `--silent` flags to fix input being swallowed
-      // by the spinner when running the command with recent versions of npm.
-      '--no-progress',
-      // Add '--loglevel=error' if a loglevel flag is not provided and the
-      // SOCKET_CLI_DEBUG environment variable is not truthy.
-      ...logLevelArgs,
-      ...npmArgs,
-      ...otherArgs
-    ],
-    {
-      __proto__: null,
-      ...options
-    }
-  )
-}
-
-/**
- * Execute pnpm commands with optimized flags and settings.
- * @param {string[] | readonly string[]} args - Command arguments to pass to pnpm.
- * @param {import('./spawn').SpawnOptions} [options] - Spawn options.
- * @returns {Promise<{ stdout: string; stderr: string }>} Command output.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function execPnpm(args, options) {
-  const { allowLockfileUpdate, ...extBinOpts } = { __proto__: null, ...options }
-  const useDebug = isDebug()
-  const terminatorPos = args.indexOf('--')
-  const pnpmArgs = (
-    terminatorPos === -1 ? args : args.slice(0, terminatorPos)
-  ).filter(a => !isNpmProgressFlag(a))
-  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
-
-  const firstArg = pnpmArgs[0]
-  const supportsIgnoreScripts = pnpmInstallLikeCommands.has(firstArg)
-
-  // pnpm uses --loglevel for all commands.
-  const logLevelArgs =
-    useDebug || pnpmArgs.some(isPnpmLoglevelFlag) ? [] : ['--loglevel', 'warn']
-
-  // Only add --ignore-scripts for commands that support it.
-  const hasIgnoreScriptsFlag = pnpmArgs.some(isPnpmIgnoreScriptsFlag)
-  const ignoreScriptsArgs =
-    !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ['--ignore-scripts']
-
-  // In CI environments, pnpm uses --frozen-lockfile by default which prevents lockfile updates.
-  // For commands that need to update the lockfile (like install with new packages/overrides),
-  // we need to explicitly add --no-frozen-lockfile in CI mode if not already present.
-  const ENV = /*@__PURE__*/ require('./constants/env')
-  const frozenLockfileArgs = []
-  if (
-    ENV.CI &&
-    allowLockfileUpdate &&
-    isPnpmInstallCommand(firstArg) &&
-    !pnpmArgs.some(isPnpmFrozenLockfileFlag)
-  ) {
-    frozenLockfileArgs.push('--no-frozen-lockfile')
-  }
-
-  // Note: pnpm doesn't have a --no-progress flag. It uses --reporter instead.
-  // We removed --no-progress as it causes "Unknown option" errors with pnpm.
-
-  return execBin(
-    'pnpm',
-    [
-      // Add '--loglevel=warn' if a loglevel flag is not provided and debug is off.
-      ...logLevelArgs,
-      // Add '--ignore-scripts' by default for security (only for installation commands).
-      ...ignoreScriptsArgs,
-      // Add '--no-frozen-lockfile' in CI when lockfile updates are needed.
-      ...frozenLockfileArgs,
-      ...pnpmArgs,
-      ...otherArgs
-    ],
-    extBinOpts
-  )
-}
-
-/*@__NO_SIDE_EFFECTS__*/
-function execYarn(args, options) {
-  const useDebug = isDebug()
-  const terminatorPos = args.indexOf('--')
-  const yarnArgs = (
-    terminatorPos === -1 ? args : args.slice(0, terminatorPos)
-  ).filter(a => !isNpmProgressFlag(a))
-  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
-
-  const firstArg = yarnArgs[0]
-  const supportsIgnoreScripts = yarnInstallLikeCommands.has(firstArg)
-
-  // Yarn uses --silent flag for quieter output.
-  const logLevelArgs =
-    useDebug || yarnArgs.some(isNpmLoglevelFlag) ? [] : ['--silent']
-
-  // Only add --ignore-scripts for commands that support it.
-  const hasIgnoreScriptsFlag = yarnArgs.some(isPnpmIgnoreScriptsFlag)
-  const ignoreScriptsArgs =
-    !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ['--ignore-scripts']
-
-  return execBin(
-    'yarn',
-    [
-      // Add '--silent' if a loglevel flag is not provided and debug is off.
-      ...logLevelArgs,
-      // Add '--ignore-scripts' by default for security (only for installation commands).
-      ...ignoreScriptsArgs,
-      ...yarnArgs,
-      ...otherArgs
-    ],
-    {
-      __proto__: null,
-      /**
-       * Check if a command argument is an npm audit flag.
-       * @param {string} cmdArg - The command argument to check.
-       * @returns {boolean} True if the argument is an audit flag.
-       */
-      ...options
-    }
-  )
-}
-
-/**
- * Check if a command argument is an npm fund flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a fund flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isNpmAuditFlag(cmdArg) {
-  return npmAuditFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is an npm loglevel flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a loglevel flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isNpmFundFlag(cmdArg) {
-  return npmFundFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is an npm loglevel flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a loglevel flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isNpmLoglevelFlag(cmdArg) {
-  // https://docs.npmjs.com/cli/v11/using-npm/logging#setting-log-levels
-  return cmdArg.startsWith('--loglevel=') || npmLogFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is an npm node-options flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a node-options flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isNpmNodeOptionsFlag(cmdArg) {
-  // https://docs.npmjs.com/cli/v9/using-npm/config#node-options
-  return cmdArg.startsWith('--node-options=')
-}
-
-/**
- * Check if a command argument is an npm progress flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a progress flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isNpmProgressFlag(cmdArg) {
-  return npmProgressFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is a pnpm ignore-scripts flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is an ignore-scripts flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isPnpmIgnoreScriptsFlag(cmdArg) {
-  return pnpmIgnoreScriptsFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is a pnpm frozen-lockfile flag.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a frozen-lockfile flag.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isPnpmFrozenLockfileFlag(cmdArg) {
-  return pnpmFrozenLockfileFlags.has(cmdArg)
-}
-
-/**
- * Check if a command argument is a pnpm install command.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is an install command.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function isPnpmInstallCommand(cmdArg) {
-  return pnpmInstallCommands.has(cmdArg)
-}
-
-/**
- * Alias for isNpmLoglevelFlag for pnpm usage.
- * @param {string} cmdArg - The command argument to check.
- * @returns {boolean} True if the argument is a loglevel flag.
- */
-const isPnpmLoglevelFlag = isNpmLoglevelFlag
-
-/**
- * Execute a package.json script using the appropriate package manager.
- * Automatically detects pnpm, yarn, or npm based on lockfiles.
- * @param {string} scriptName - The name of the script to run.
- * @param {string[] | readonly string[]} args - Additional arguments to pass to the script.
- * @param {ExecScriptOptions} [options] - Spawn options with optional prepost flag.
- * @returns {Promise<{ stdout: string; stderr: string }>} Command output.
- * @typedef {import('./objects').Remap<import('./spawn').SpawnOptions & {prepost?: boolean}>} ExecScriptOptions
- */
-/*@__NO_SIDE_EFFECTS__*/
-function execScript(scriptName, args, options) {
-  const { prepost, ...spawnOptions } = { __proto__: null, ...options }
-  const useNodeRun =
-    !prepost && /*@__PURE__*/ require('./constants/supports-node-run')
-
-  // Detect package manager based on lockfile by traversing up from current directory.
-  const cwd = getOwn(spawnOptions, 'cwd') ?? process.cwd()
-
-  // Check for pnpm-lock.yaml.
-  const PNPM_LOCK_YAML = /*@__PURE__*/ require('./constants/pnpm-lock-yaml')
-  const pnpmLockPath = findUpSync(PNPM_LOCK_YAML, { cwd })
-  if (pnpmLockPath) {
-    return execPnpm(['run', scriptName, ...args], spawnOptions)
-  }
-
-  // Check for package-lock.json.
-  // When in an npm workspace, use npm run to ensure workspace binaries are available.
-  const PACKAGE_LOCK = /*@__PURE__*/ require('./constants/package-lock-json')
-  const packageLockPath = findUpSync(PACKAGE_LOCK, { cwd })
-  if (packageLockPath) {
-    return execNpm(['run', scriptName, ...args], spawnOptions)
-  }
-
-  // Check for yarn.lock.
-  const YARN_LOCK = /*@__PURE__*/ require('./constants/yarn-lock')
-  const yarnLockPath = findUpSync(YARN_LOCK, { cwd })
-  if (yarnLockPath) {
-    return execYarn(['run', scriptName, ...args], spawnOptions)
-  }
-
-  return spawn(
-    /*@__PURE__*/ require('./constants/exec-path'),
-    [
-      .../*@__PURE__*/ require('./constants/node-no-warnings-flags'),
-      ...(useNodeRun
-        ? ['--run']
-        : [/*@__PURE__*/ require('./constants/npm-real-exec-path'), 'run']),
-      scriptName,
-      ...args
-    ],
-    {
-      __proto__: null,
-      ...spawnOptions
-    }
-  )
-}
-
-module.exports = {
-  execBin,
-  execNpm,
-  execPnpm,
-  execScript,
-  execYarn,
-  isNpmAuditFlag,
-  isNpmFundFlag,
-  isNpmLoglevelFlag,
-  isNpmNodeOptionsFlag,
-  isNpmProgressFlag,
-  isPnpmFrozenLockfileFlag,
-  isPnpmIgnoreScriptsFlag,
-  isPnpmInstallCommand,
-  isPnpmLoglevelFlag,
-  resolveBinPathSync,
-  whichBin,
-  whichBinSync
-}

package/external/@socketsecurity/registry/lib/arrays.js

@@ -1,89 +0,0 @@
-'use strict'
-
-let _conjunctionFormatter
-/**
- * Get a cached Intl.ListFormat instance for conjunction (and) formatting.
- * @returns {Intl.ListFormat} The conjunction formatter.
- * @private
- */
-/*@__NO_SIDE_EFFECTS__*/
-function getConjunctionFormatter() {
-  if (_conjunctionFormatter === undefined) {
-    _conjunctionFormatter = new Intl.ListFormat('en', {
-      style: 'long',
-      type: 'conjunction' // "and" lists.
-    })
-  }
-  return _conjunctionFormatter
-}
-
-let _disjunctionFormatter
-/**
- * Get a cached Intl.ListFormat instance for disjunction (or) formatting.
- * @returns {Intl.ListFormat} The disjunction formatter.
- * @private
- */
-/*@__NO_SIDE_EFFECTS__*/
-function getDisjunctionFormatter() {
-  if (_disjunctionFormatter === undefined) {
-    _disjunctionFormatter = new Intl.ListFormat('en', {
-      style: 'long',
-      type: 'disjunction' // "or" lists.
-    })
-  }
-  return _disjunctionFormatter
-}
-
-/**
- * Split an array into chunks of a specified size.
- * @param {any[]} arr - The array to chunk.
- * @param {number} [size=2] - The size of each chunk.
- * @returns {any[][]} Array of chunked arrays.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function arrayChunk(arr, size = 2) {
-  const { length } = arr
-  const chunkSize = Math.min(length, size)
-  const chunks = []
-  for (let i = 0; i < length; i += chunkSize) {
-    chunks.push(arr.slice(i, i + chunkSize))
-  }
-  return chunks
-}
-
-/**
- * Get unique values from an array.
- * @param {any[]} arr - The array to deduplicate.
- * @returns {any[]} Array with unique values.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function arrayUnique(arr) {
-  return [...new Set(arr)]
-}
-
-/**
- * Join array elements with proper "and" conjunction formatting.
- * @param {string[]} arr - The array to join.
- * @returns {string} The formatted string with "and" conjunction.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function joinAnd(arr) {
-  return getConjunctionFormatter().format(arr)
-}
-
-/**
- * Join array elements with proper "or" disjunction formatting.
- * @param {string[]} arr - The array to join.
- * @returns {string} The formatted string with "or" disjunction.
- */
-/*@__NO_SIDE_EFFECTS__*/
-function joinOr(arr) {
-  return getDisjunctionFormatter().format(arr)
-}
-
-module.exports = {
-  arrayChunk,
-  arrayUnique,
-  joinAnd,
-  joinOr
-}