@socketsecurity/cli 0.14.130 → 0.14.132

package/dist/require/constants.js

@@ -1,3 +0,0 @@
-'use strict'
-
-module.exports = require('../module-sync/constants.js')

package/dist/require/shadow-bin.d.ts

@@ -1,5 +0,0 @@
-declare function shadowBin(
-  binName: 'npm' | 'npx',
-  args?: string[]
-): Promise<void>
-export { shadowBin as default }

package/dist/require/shadow-bin.js

@@ -1,106 +0,0 @@
-'use strict'
-
-const process = require('node:process')
-const debug = require('@socketsecurity/registry/lib/debug')
-const npm = require('@socketsecurity/registry/lib/npm')
-const spawn = require('@socketsecurity/registry/lib/spawn')
-const path = require('node:path')
-const vendor = require('./vendor.js')
-const shadowNpmPaths = require('./shadow-npm-paths.js')
-const constants = require('./constants.js')
-
-const { CLI, NPX } = constants
-async function installLinks(realBinPath, binName) {
-  const isNpx = binName === NPX
-  // Find package manager being shadowed by this process.
-  const binPath = isNpx
-    ? shadowNpmPaths.getNpxBinPath()
-    : shadowNpmPaths.getNpmBinPath()
-  // Lazily access constants.WIN32.
-  const { WIN32 } = constants
-  // TODO: Is this early exit needed?
-  if (WIN32 && binPath) {
-    return binPath
-  }
-  const shadowed = isNpx
-    ? shadowNpmPaths.isNpxBinPathShadowed()
-    : shadowNpmPaths.isNpmBinPathShadowed()
-  // Move our bin directory to front of PATH so its found first.
-  if (!shadowed) {
-    if (WIN32) {
-      await vendor.libExports(
-        // Lazily access constants.rootDistPath.
-        path.join(constants.rootDistPath, `${binName}-${CLI}.js`),
-        path.join(realBinPath, binName)
-      )
-    }
-    const { env } = process
-    env['PATH'] = `${realBinPath}${path.delimiter}${env['PATH']}`
-  }
-  return binPath
-}
-
-const { SOCKET_CLI_SAFE_BIN, SOCKET_CLI_SAFE_PROGRESS, SOCKET_IPC_HANDSHAKE } =
-  constants
-async function shadowBin(binName, args = process.argv.slice(2)) {
-  process.exitCode = 1
-  const useDebug = debug.isDebug()
-  const terminatorPos = args.indexOf('--')
-  const rawBinArgs = terminatorPos === -1 ? args : args.slice(0, terminatorPos)
-  const progressArg =
-    rawBinArgs.findLast(npm.isProgressFlag) !== '--no-progress'
-  const binArgs = rawBinArgs.filter(a => !npm.isProgressFlag(a))
-  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
-  const isSilent = !useDebug && !binArgs.some(npm.isLoglevelFlag)
-  // The default value of loglevel is "notice". We default to "error" which is
-  // two levels quieter.
-  const logLevelArgs = isSilent ? ['--loglevel', 'error'] : []
-  const spawnPromise = spawn.spawn(
-    // Lazily access constants.execPath.
-    constants.execPath,
-    [
-      // Lazily access constants.nodeHardenFlags.
-      ...constants.nodeHardenFlags,
-      // Lazily access constants.nodeNoWarningsFlags.
-      ...constants.nodeNoWarningsFlags,
-      // Lazily access false.
-      ...[],
-      '--require',
-      // Lazily access constants.distShadowNpmInjectPath.
-      constants.distShadowNpmInjectPath,
-      // Lazily access constants.shadowBinPath.
-      await installLinks(constants.shadowBinPath, binName),
-      // Add '--no-progress' to fix input being swallowed by the npm spinner.
-      '--no-progress',
-      // Add '--loglevel=error' if a loglevel flag is not provided and the
-      // SOCKET_CLI_DEBUG environment variable is not truthy.
-      ...logLevelArgs,
-      ...binArgs,
-      ...otherArgs
-    ],
-    {
-      // 'inherit' + 'ipc'
-      stdio: [0, 1, 2, 'ipc']
-    }
-  )
-  // See https://nodejs.org/api/all.html#all_child_process_event-exit.
-  spawnPromise.process.on('exit', (code, signalName) => {
-    if (signalName) {
-      process.kill(process.pid, signalName)
-    } else if (code !== null) {
-      // eslint-disable-next-line n/no-process-exit
-      process.exit(code)
-    }
-  })
-  spawnPromise.process.send({
-    [SOCKET_IPC_HANDSHAKE]: {
-      [SOCKET_CLI_SAFE_BIN]: binName,
-      [SOCKET_CLI_SAFE_PROGRESS]: progressArg
-    }
-  })
-  await spawnPromise
-}
-
-module.exports = shadowBin
-//# debugId=c07c77d4-8583-4c6b-9a6a-0361d5c81ac7
-//# sourceMappingURL=shadow-bin.js.map

package/dist/require/shadow-bin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shadow-bin.js","sources":["../../src/shadow/npm/link.ts","../../src/shadow/npm/bin.ts"],"sourcesContent":["import path from 'node:path'\nimport process from 'node:process'\n\nimport cmdShim from 'cmd-shim'\n\nimport {\n  getNpmBinPath,\n  getNpxBinPath,\n  isNpmBinPathShadowed,\n  isNpxBinPathShadowed\n} from './paths'\nimport constants from '../../constants'\n\nconst { CLI, NPX } = constants\n\nexport async function installLinks(\n  realBinPath: string,\n  binName: 'npm' | 'npx'\n): Promise<string> {\n  const isNpx = binName === NPX\n  // Find package manager being shadowed by this process.\n  const binPath = isNpx ? getNpxBinPath() : getNpmBinPath()\n  // Lazily access constants.WIN32.\n  const { WIN32 } = constants\n  // TODO: Is this early exit needed?\n  if (WIN32 && binPath) {\n    return binPath\n  }\n  const shadowed = isNpx ? isNpxBinPathShadowed() : isNpmBinPathShadowed()\n  // Move our bin directory to front of PATH so its found first.\n  if (!shadowed) {\n    if (WIN32) {\n      await cmdShim(\n        // Lazily access constants.rootDistPath.\n        path.join(constants.rootDistPath, `${binName}-${CLI}.js`),\n        path.join(realBinPath, binName)\n      )\n    }\n    const { env } = process\n    env['PATH'] = `${realBinPath}${path.delimiter}${env['PATH']}`\n  }\n  return binPath\n}\n","import process from 'node:process'\n\nimport { isDebug } from '@socketsecurity/registry/lib/debug'\nimport {\n  isLoglevelFlag,\n  isProgressFlag\n} from '@socketsecurity/registry/lib/npm'\nimport { spawn } from '@socketsecurity/registry/lib/spawn'\n\nimport { installLinks } from './link'\nimport constants from '../../constants'\n\nconst { SOCKET_CLI_SAFE_BIN, SOCKET_CLI_SAFE_PROGRESS, SOCKET_IPC_HANDSHAKE } =\n  constants\n\nexport default async function shadowBin(\n  binName: 'npm' | 'npx',\n  args = process.argv.slice(2)\n) {\n  process.exitCode = 1\n  const useDebug = isDebug()\n  const terminatorPos = args.indexOf('--')\n  const rawBinArgs = terminatorPos === -1 ? args : args.slice(0, terminatorPos)\n  const progressArg = rawBinArgs.findLast(isProgressFlag) !== '--no-progress'\n  const binArgs = rawBinArgs.filter(a => !isProgressFlag(a))\n  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)\n  const isSilent = !useDebug && !binArgs.some(isLoglevelFlag)\n  // The default value of loglevel is \"notice\". We default to \"error\" which is\n  // two levels quieter.\n  const logLevelArgs = isSilent ? ['--loglevel', 'error'] : []\n  const spawnPromise = spawn(\n    // Lazily access constants.execPath.\n    constants.execPath,\n    [\n      // Lazily access constants.nodeHardenFlags.\n      ...constants.nodeHardenFlags,\n      // Lazily access constants.nodeNoWarningsFlags.\n      ...constants.nodeNoWarningsFlags,\n      // Lazily access process.env['INLINED_SOCKET_CLI_SENTRY_BUILD'].\n      ...(process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']\n        ? [\n            '--require',\n            // Lazily access constants.distInstrumentWithSentryPath.\n            constants.distInstrumentWithSentryPath\n          ]\n        : []),\n      '--require',\n      // Lazily access constants.distShadowNpmInjectPath.\n      constants.distShadowNpmInjectPath,\n      // Lazily access constants.shadowBinPath.\n      await installLinks(constants.shadowBinPath, binName),\n      // Add '--no-progress' to fix input being swallowed by the npm spinner.\n      '--no-progress',\n      // Add '--loglevel=error' if a loglevel flag is not provided and the\n      // SOCKET_CLI_DEBUG environment variable is not truthy.\n      ...logLevelArgs,\n      ...binArgs,\n      ...otherArgs\n    ],\n    {\n      // 'inherit' + 'ipc'\n      stdio: [0, 1, 2, 'ipc']\n    }\n  )\n  // See https://nodejs.org/api/all.html#all_child_process_event-exit.\n  spawnPromise.process.on('exit', (code, signalName) => {\n    if (signalName) {\n      process.kill(process.pid, signalName)\n    } else if (code !== null) {\n      // eslint-disable-next-line n/no-process-exit\n      process.exit(code)\n    }\n  })\n  spawnPromise.process.send({\n    [SOCKET_IPC_HANDSHAKE]: {\n      [SOCKET_CLI_SAFE_BIN]: binName,\n      [SOCKET_CLI_SAFE_PROGRESS]: progressArg\n    }\n  })\n  await spawnPromise\n}\n"],"names":["NPX","WIN32","env","SOCKET_IPC_HANDSHAKE","constants","process","spawnPromise"],"mappings":";;;;;;;;;;;AAaA;;AAAaA;AAAI;AAEV;AAIL;AACA;;AAEA;;AACQC;AAAM;AACd;;AAEE;AACF;;AAEA;;AAEE;AACE;AACE;;AAIJ;;AACQC;AAAI;AACZA;AACF;AACA;AACF;;AC9BA;;;AAAuDC;AAAqB;AAG7D;;AAKb;AACA;AACA;;AAEA;AACA;;AAEA;AACA;;;AAGE;;AAGE;;AAEA;;AAEA;;AASA;AACAC;AACA;AACA;AACA;;AAEA;AACA;;AAMA;;AAEF;AAEF;;AAEE;;AAEA;AACE;AACAC;AACF;AACF;AACAC;AACE;;AAEE;AACF;AACF;AACA;AACF;;","debugId":"c07c77d4-8583-4c6b-9a6a-0361d5c81ac7"}

package/dist/require/shadow-npm-inject.d.ts

@@ -1 +0,0 @@
-export {}