@socketsecurity/lib 1.0.4 → 1.1.0

package/dist/signal-exit.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/signal-exit.ts"],
-  "sourcesContent": ["/**\n * @fileoverview Process signal handling utilities.\n * Provides cross-platform signal exit detection and cleanup handlers.\n */\n\n// Inlined signal-exit:\n// https://socket.dev/npm/package/signal-exit/overview/4.1.0\n// ISC License\n// Copyright (c) 2015-2023 Benjamin Coe, Isaac Z. Schlueter, and Contributors\n\n// This is not the set of all possible signals.\n//\n// It IS, however, the set of all signals that trigger\n// an exit on either Linux or BSD systems. Linux is a\n// superset of the signal names supported on BSD, and\n// the unknown signals just fail to register, so we can\n// catch that easily enough.\n//\n// Don't bother with SIGKILL. It's uncatchable, which\n// means that we can't fire any callbacks anyway.\n//\n// If a user does happen to register a handler on a non-\n// fatal signal like SIGWINCH or something, and then\n// exit, it'll end up firing `process.emit('exit')`, so\n// the handler will be fired anyway.\n//\n// SIGBUS, SIGFPE, SIGSEGV and SIGILL, when not raised\n// artificially, inherently leave the process in a\n// state from which it is not safe to try and enter JS\n// listeners.\n\n// IMPORTANT: Do not use destructuring here - use direct assignment instead.\n// tsgo has a bug that incorrectly transpiles destructured exports, resulting in\n// `exports.SomeName = void 0;` which causes runtime errors.\n// See: https://github.com/SocketDev/socket-packageurl-js/issues/3\nconst ReflectApply = Reflect.apply\nconst globalProcess = globalThis.process as\n  | (NodeJS.Process & {\n      // biome-ignore lint/suspicious/noExplicitAny: Signal exit emitter can be any event emitter.\n      __signal_exit_emitter__?: any\n      reallyExit?: (code?: number | undefined) => never\n    })\n  | undefined\nconst originalProcessEmit = globalProcess?.emit\nconst platform = globalProcess?.platform ?? ''\nconst originalProcessReallyExit = globalProcess?.reallyExit as\n  | ((code?: number | undefined) => never)\n  | undefined\nconst WIN32 = platform === 'win32'\n\nlet _events: typeof import('node:events') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getEvents() {\n  if (_events === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _events = /*@__PURE__*/ require('node:events')\n  }\n  return _events as typeof import('node:events')\n}\n\n// Type for tracking emitted signals.\ntype EmittedSignals = {\n  // Using string as signals can include custom events like 'exit' and 'afterexit'.\n  [signal: string]: boolean\n}\n\ntype SignalExitEmitter = import('node:events').EventEmitter & {\n  count?: number\n  emitted?: EmittedSignals\n  infinite?: boolean\n}\nlet _emitter: SignalExitEmitter | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getEmitter() {\n  if (_emitter === undefined) {\n    if (globalProcess?.__signal_exit_emitter__) {\n      _emitter = globalProcess.__signal_exit_emitter__\n    } else if (globalProcess) {\n      const EventEmitter = getEvents().EventEmitter\n      _emitter = globalProcess.__signal_exit_emitter__ =\n        new EventEmitter() as SignalExitEmitter\n      _emitter.count = 0\n      _emitter.emitted = { __proto__: null } as unknown as EmittedSignals\n    }\n    // Because this emitter is a global, we have to check to see if a\n    // previous version of this library failed to enable infinite listeners.\n    // I know what you're about to say.  But literally everything about\n    // signal-exit is a compromise with evil.  Get used to it.\n    if (_emitter && !_emitter.infinite) {\n      _emitter.setMaxListeners(Number.POSITIVE_INFINITY)\n      _emitter.infinite = true\n    }\n  }\n  return _emitter as SignalExitEmitter\n}\n\ntype SignalListener = () => void\n// Type for signal listeners indexed by signal name.\ntype SignalListenerMap = {\n  [signal: string]: SignalListener\n}\nlet _sigListeners: SignalListenerMap | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getSignalListeners() {\n  if (_sigListeners === undefined) {\n    _sigListeners = { __proto__: null } as unknown as SignalListenerMap\n    const emitter = getEmitter()\n    const sigs = getSignals()\n    for (const sig of sigs) {\n      _sigListeners[sig] = function listener() {\n        // If there are no other listeners, an exit is coming!\n        // Simplest way: remove us and then re-send the signal.\n        // We know that this will kill the process, so we can\n        // safely emit now.\n        const listeners = globalProcess?.listeners(sig as NodeJS.Signals) || []\n        if (listeners.length === emitter.count) {\n          unload()\n          emit('exit', null, sig)\n          emit('afterexit', null, sig)\n          // \"SIGHUP\" throws an `ENOSYS` error on Windows,\n          // so use a supported signal instead.\n          const killSig = WIN32 && sig === 'SIGHUP' ? 'SIGINT' : sig\n          globalProcess?.kill(globalProcess?.pid, killSig)\n        }\n      }\n    }\n  }\n  return _sigListeners as SignalListenerMap\n}\n\nlet _signals: string[] | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getSignals() {\n  if (_signals === undefined) {\n    _signals = ['SIGABRT', 'SIGALRM', 'SIGHUP', 'SIGINT', 'SIGTERM']\n    if (!WIN32) {\n      _signals.push(\n        'SIGVTALRM',\n        'SIGXCPU',\n        'SIGXFSZ',\n        'SIGUSR2',\n        'SIGTRAP',\n        'SIGSYS',\n        'SIGQUIT',\n        'SIGIOT',\n        // should detect profiler and enable/disable accordingly.\n        // see #21\n        // 'SIGPROF'\n      )\n    }\n    if (platform === 'linux') {\n      _signals.push('SIGIO', 'SIGPOLL', 'SIGPWR', 'SIGSTKFLT', 'SIGUNUSED')\n    }\n  }\n  return _signals as string[]\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction emit(event: string, code: number | null, signal: string | null): void {\n  const emitter = getEmitter()\n  if (emitter.emitted?.[event]) {\n    return\n  }\n  if (emitter.emitted) {\n    emitter.emitted[event] = true\n  }\n  emitter.emit(event, code, signal)\n}\n\nlet loaded = false\n\n/**\n * Load signal handlers and hook into process exit events.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function load(): void {\n  if (loaded || !globalProcess) {\n    return\n  }\n  loaded = true\n\n  // This is the number of onSignalExit's that are in play.\n  // It's important so that we can count the correct number of\n  // listeners on signals, and don't wait for the other one to\n  // handle it instead of us.\n  const emitter = getEmitter()\n  if (emitter.count !== undefined) {\n    emitter.count += 1\n  }\n\n  const sigs = getSignals()\n  const sigListeners = getSignalListeners()\n  _signals = sigs.filter(sig => {\n    try {\n      globalProcess.on(\n        sig as NodeJS.Signals,\n        sigListeners[sig] as SignalListener,\n      )\n      return true\n    } catch {}\n    return false\n  })\n\n  globalProcess.emit = processEmit as typeof globalProcess.emit\n  globalProcess.reallyExit = processReallyExit\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction processEmit(\n  this: NodeJS.Process,\n  eventName: string,\n  exitCode?: number | undefined,\n  // biome-ignore lint/suspicious/noExplicitAny: Process emit args can be any type.\n  ...args: any[]\n): boolean {\n  if (eventName === 'exit') {\n    let actualExitCode = exitCode\n    if (actualExitCode === undefined) {\n      const processExitCode = globalProcess?.exitCode\n      actualExitCode =\n        typeof processExitCode === 'number' ? processExitCode : undefined\n    } else if (globalProcess) {\n      globalProcess.exitCode = actualExitCode\n    }\n    const result = ReflectApply(\n      originalProcessEmit as (...args: unknown[]) => boolean,\n      this,\n      [eventName, actualExitCode, ...args],\n    ) as boolean\n    const numExitCode =\n      typeof actualExitCode === 'number' ? actualExitCode : null\n    emit('exit', numExitCode, null)\n    emit('afterexit', numExitCode, null)\n    return result\n  }\n  return ReflectApply(\n    originalProcessEmit as (...args: unknown[]) => boolean,\n    this,\n    [eventName, exitCode, ...args],\n  ) as boolean\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction processReallyExit(code?: number | undefined): never {\n  const exitCode = code || 0\n  if (globalProcess) {\n    globalProcess.exitCode = exitCode\n  }\n  emit('exit', exitCode, null)\n  emit('afterexit', exitCode, null)\n  ReflectApply(\n    originalProcessReallyExit as (code?: number) => never,\n    globalProcess,\n    [exitCode],\n  )\n  throw new Error('processReallyExit should never return')\n}\n\nexport interface OnExitOptions {\n  alwaysLast?: boolean\n}\n\n/**\n * Register a callback to run on process exit or signal.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function onExit(\n  cb: (code: number | null, signal: string | null) => void,\n  options?: OnExitOptions | undefined,\n): () => void {\n  if (!globalProcess) {\n    return function remove() {}\n  }\n  if (typeof cb !== 'function') {\n    throw new TypeError('a callback must be provided for exit handler')\n  }\n  if (loaded === false) {\n    load()\n  }\n  const { alwaysLast } = { __proto__: null, ...options } as OnExitOptions\n\n  let eventName = 'exit'\n  if (alwaysLast) {\n    eventName = 'afterexit'\n  }\n\n  const emitter = getEmitter()\n  emitter.on(eventName, cb)\n\n  return function remove() {\n    emitter.removeListener(eventName, cb)\n    if (\n      !emitter.listeners('exit').length &&\n      !emitter.listeners('afterexit').length\n    ) {\n      unload()\n    }\n  }\n}\n\n/**\n * Get the list of signals that are currently being monitored.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function signals(): string[] | undefined {\n  return _signals\n}\n\n/**\n * Unload signal handlers and restore original process behavior.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function unload(): void {\n  if (!loaded || !globalProcess) {\n    return\n  }\n  loaded = false\n\n  const sigs = getSignals()\n  const sigListeners = getSignalListeners()\n  for (const sig of sigs) {\n    try {\n      globalProcess.removeListener(\n        sig as NodeJS.Signals,\n        sigListeners[sig] as SignalListener,\n      )\n    } catch {}\n  }\n  globalProcess.emit = originalProcessEmit as typeof globalProcess.emit\n  if (originalProcessReallyExit !== undefined) {\n    globalProcess.reallyExit = originalProcessReallyExit\n  }\n  const emitter = getEmitter()\n  if (emitter.count !== undefined) {\n    emitter.count -= 1\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmCA,MAAM,eAAe,QAAQ;AAC7B,MAAM,gBAAgB,WAAW;AAOjC,MAAM,sBAAsB,eAAe;AAC3C,MAAM,WAAW,eAAe,YAAY;AAC5C,MAAM,4BAA4B,eAAe;AAGjD,MAAM,QAAQ,aAAa;AAE3B,IAAI;AAAA;AAEJ,SAAS,YAAY;AACnB,MAAI,YAAY,QAAW;AAGzB,cAAwB,QAAQ,aAAa;AAAA,EAC/C;AACA,SAAO;AACT;AAaA,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,QAAI,eAAe,yBAAyB;AAC1C,iBAAW,cAAc;AAAA,IAC3B,WAAW,eAAe;AACxB,YAAM,gBAAe,0BAAU,GAAE;AACjC,iBAAW,cAAc,0BACvB,IAAI,aAAa;AACnB,eAAS,QAAQ;AACjB,eAAS,UAAU,EAAE,WAAW,KAAK;AAAA,IACvC;AAKA,QAAI,YAAY,CAAC,SAAS,UAAU;AAClC,eAAS,gBAAgB,OAAO,iBAAiB;AACjD,eAAS,WAAW;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAI;AAAA;AAEJ,SAAS,qBAAqB;AAC5B,MAAI,kBAAkB,QAAW;AAC/B,oBAAgB,EAAE,WAAW,KAAK;AAClC,UAAM,UAAU,2BAAW;AAC3B,UAAM,OAAO,2BAAW;AACxB,eAAW,OAAO,MAAM;AACtB,oBAAc,GAAG,IAAI,SAAS,WAAW;AAKvC,cAAM,YAAY,eAAe,UAAU,GAAqB,KAAK,CAAC;AACtE,YAAI,UAAU,WAAW,QAAQ,OAAO;AACtC,iCAAO;AACP,+BAAK,QAAQ,MAAM,GAAG;AACtB,+BAAK,aAAa,MAAM,GAAG;AAG3B,gBAAM,UAAU,SAAS,QAAQ,WAAW,WAAW;AACvD,yBAAe,KAAK,eAAe,KAAK,OAAO;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,eAAW,CAAC,WAAW,WAAW,UAAU,UAAU,SAAS;AAC/D,QAAI,CAAC,OAAO;AACV,eAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA,MAIF;AAAA,IACF;AACA,QAAI,aAAa,SAAS;AACxB,eAAS,KAAK,SAAS,WAAW,UAAU,aAAa,WAAW;AAAA,IACtE;AAAA,EACF;AACA,SAAO;AACT;AAAA;AAGA,SAAS,KAAK,OAAe,MAAqB,QAA6B;AAC7E,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,KAAK,GAAG;AAC5B;AAAA,EACF;AACA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,KAAK,IAAI;AAAA,EAC3B;AACA,UAAQ,KAAK,OAAO,MAAM,MAAM;AAClC;AAEA,IAAI,SAAS;AAAA;AAMN,SAAS,OAAa;AAC3B,MAAI,UAAU,CAAC,eAAe;AAC5B;AAAA,EACF;AACA,WAAS;AAMT,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,QAAW;AAC/B,YAAQ,SAAS;AAAA,EACnB;AAEA,QAAM,OAAO,2BAAW;AACxB,QAAM,eAAe,mCAAmB;AACxC,aAAW,KAAK,OAAO,SAAO;AAC5B,QAAI;AACF,oBAAc;AAAA,QACZ;AAAA,QACA,aAAa,GAAG;AAAA,MAClB;AACA,aAAO;AAAA,IACT,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT,CAAC;AAED,gBAAc,OAAO;AACrB,gBAAc,aAAa;AAC7B;AAAA;AAGA,SAAS,YAEP,WACA,aAEG,MACM;AACT,MAAI,cAAc,QAAQ;AACxB,QAAI,iBAAiB;AACrB,QAAI,mBAAmB,QAAW;AAChC,YAAM,kBAAkB,eAAe;AACvC,uBACE,OAAO,oBAAoB,WAAW,kBAAkB;AAAA,IAC5D,WAAW,eAAe;AACxB,oBAAc,WAAW;AAAA,IAC3B;AACA,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,CAAC,WAAW,gBAAgB,GAAG,IAAI;AAAA,IACrC;AACA,UAAM,cACJ,OAAO,mBAAmB,WAAW,iBAAiB;AACxD,yBAAK,QAAQ,aAAa,IAAI;AAC9B,yBAAK,aAAa,aAAa,IAAI;AACnC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,CAAC,WAAW,UAAU,GAAG,IAAI;AAAA,EAC/B;AACF;AAAA;AAGA,SAAS,kBAAkB,MAAkC;AAC3D,QAAM,WAAW,QAAQ;AACzB,MAAI,eAAe;AACjB,kBAAc,WAAW;AAAA,EAC3B;AACA,uBAAK,QAAQ,UAAU,IAAI;AAC3B,uBAAK,aAAa,UAAU,IAAI;AAChC;AAAA,IACE;AAAA,IACA;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,QAAM,IAAI,MAAM,uCAAuC;AACzD;AAAA;AAUO,SAAS,OACd,IACA,SACY;AACZ,MAAI,CAAC,eAAe;AAClB,WAAO,SAAS,SAAS;AAAA,IAAC;AAAA,EAC5B;AACA,MAAI,OAAO,OAAO,YAAY;AAC5B,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,MAAI,WAAW,OAAO;AACpB,yBAAK;AAAA,EACP;AACA,QAAM,EAAE,WAAW,IAAI,EAAE,WAAW,MAAM,GAAG,QAAQ;AAErD,MAAI,YAAY;AAChB,MAAI,YAAY;AACd,gBAAY;AAAA,EACd;AAEA,QAAM,UAAU,2BAAW;AAC3B,UAAQ,GAAG,WAAW,EAAE;AAExB,SAAO,SAAS,SAAS;AACvB,YAAQ,eAAe,WAAW,EAAE;AACpC,QACE,CAAC,QAAQ,UAAU,MAAM,EAAE,UAC3B,CAAC,QAAQ,UAAU,WAAW,EAAE,QAChC;AACA,6BAAO;AAAA,IACT;AAAA,EACF;AACF;AAAA;AAMO,SAAS,UAAgC;AAC9C,SAAO;AACT;AAAA;AAMO,SAAS,SAAe;AAC7B,MAAI,CAAC,UAAU,CAAC,eAAe;AAC7B;AAAA,EACF;AACA,WAAS;AAET,QAAM,OAAO,2BAAW;AACxB,QAAM,eAAe,mCAAmB;AACxC,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,oBAAc;AAAA,QACZ;AAAA,QACA,aAAa,GAAG;AAAA,MAClB;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,gBAAc,OAAO;AACrB,MAAI,8BAA8B,QAAW;AAC3C,kBAAc,aAAa;AAAA,EAC7B;AACA,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,QAAW;AAC/B,YAAQ,SAAS;AAAA,EACnB;AACF;",
+  "sourcesContent": ["/**\n * @fileoverview Process signal handling utilities.\n * Provides cross-platform signal exit detection and cleanup handlers.\n */\n\n// Inlined signal-exit:\n// https://socket.dev/npm/package/signal-exit/overview/4.1.0\n// ISC License\n// Copyright (c) 2015-2023 Benjamin Coe, Isaac Z. Schlueter, and Contributors\n\n// This is not the set of all possible signals.\n//\n// It IS, however, the set of all signals that trigger\n// an exit on either Linux or BSD systems. Linux is a\n// superset of the signal names supported on BSD, and\n// the unknown signals just fail to register, so we can\n// catch that easily enough.\n//\n// Don't bother with SIGKILL. It's uncatchable, which\n// means that we can't fire any callbacks anyway.\n//\n// If a user does happen to register a handler on a non-\n// fatal signal like SIGWINCH or something, and then\n// exit, it'll end up firing `process.emit('exit')`, so\n// the handler will be fired anyway.\n//\n// SIGBUS, SIGFPE, SIGSEGV and SIGILL, when not raised\n// artificially, inherently leave the process in a\n// state from which it is not safe to try and enter JS\n// listeners.\n\n// IMPORTANT: Do not use destructuring here - use direct assignment instead.\n// tsgo has a bug that incorrectly transpiles destructured exports, resulting in\n// `exports.SomeName = void 0;` which causes runtime errors.\n// See: https://github.com/SocketDev/socket-packageurl-js/issues/3\nconst ReflectApply = Reflect.apply\nconst globalProcess = globalThis.process as\n  | (NodeJS.Process & {\n      __signal_exit_emitter__?: any\n      reallyExit?: (code?: number | undefined) => never\n    })\n  | undefined\nconst originalProcessEmit = globalProcess?.emit\nconst platform = globalProcess?.platform ?? ''\nconst originalProcessReallyExit = globalProcess?.reallyExit as\n  | ((code?: number | undefined) => never)\n  | undefined\nconst WIN32 = platform === 'win32'\n\nlet _events: typeof import('node:events') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getEvents() {\n  if (_events === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _events = /*@__PURE__*/ require('node:events')\n  }\n  return _events as typeof import('node:events')\n}\n\n// Type for tracking emitted signals.\ntype EmittedSignals = {\n  // Using string as signals can include custom events like 'exit' and 'afterexit'.\n  [signal: string]: boolean\n}\n\ntype SignalExitEmitter = import('node:events').EventEmitter & {\n  count?: number\n  emitted?: EmittedSignals\n  infinite?: boolean\n}\nlet _emitter: SignalExitEmitter | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getEmitter() {\n  if (_emitter === undefined) {\n    if (globalProcess?.__signal_exit_emitter__) {\n      _emitter = globalProcess.__signal_exit_emitter__\n    } else if (globalProcess) {\n      const EventEmitter = getEvents().EventEmitter\n      _emitter = globalProcess.__signal_exit_emitter__ =\n        new EventEmitter() as SignalExitEmitter\n      _emitter.count = 0\n      _emitter.emitted = { __proto__: null } as unknown as EmittedSignals\n    }\n    // Because this emitter is a global, we have to check to see if a\n    // previous version of this library failed to enable infinite listeners.\n    // I know what you're about to say.  But literally everything about\n    // signal-exit is a compromise with evil.  Get used to it.\n    if (_emitter && !_emitter.infinite) {\n      _emitter.setMaxListeners(Number.POSITIVE_INFINITY)\n      _emitter.infinite = true\n    }\n  }\n  return _emitter as SignalExitEmitter\n}\n\ntype SignalListener = () => void\n// Type for signal listeners indexed by signal name.\ntype SignalListenerMap = {\n  [signal: string]: SignalListener\n}\nlet _sigListeners: SignalListenerMap | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getSignalListeners() {\n  if (_sigListeners === undefined) {\n    _sigListeners = { __proto__: null } as unknown as SignalListenerMap\n    const emitter = getEmitter()\n    const sigs = getSignals()\n    for (const sig of sigs) {\n      _sigListeners[sig] = function listener() {\n        // If there are no other listeners, an exit is coming!\n        // Simplest way: remove us and then re-send the signal.\n        // We know that this will kill the process, so we can\n        // safely emit now.\n        const listeners = globalProcess?.listeners(sig as NodeJS.Signals) || []\n        if (listeners.length === emitter.count) {\n          unload()\n          emit('exit', null, sig)\n          emit('afterexit', null, sig)\n          // \"SIGHUP\" throws an `ENOSYS` error on Windows,\n          // so use a supported signal instead.\n          const killSig = WIN32 && sig === 'SIGHUP' ? 'SIGINT' : sig\n          globalProcess?.kill(globalProcess?.pid, killSig)\n        }\n      }\n    }\n  }\n  return _sigListeners as SignalListenerMap\n}\n\nlet _signals: string[] | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getSignals() {\n  if (_signals === undefined) {\n    _signals = ['SIGABRT', 'SIGALRM', 'SIGHUP', 'SIGINT', 'SIGTERM']\n    if (!WIN32) {\n      _signals.push(\n        'SIGVTALRM',\n        'SIGXCPU',\n        'SIGXFSZ',\n        'SIGUSR2',\n        'SIGTRAP',\n        'SIGSYS',\n        'SIGQUIT',\n        'SIGIOT',\n        // should detect profiler and enable/disable accordingly.\n        // see #21\n        // 'SIGPROF'\n      )\n    }\n    if (platform === 'linux') {\n      _signals.push('SIGIO', 'SIGPOLL', 'SIGPWR', 'SIGSTKFLT', 'SIGUNUSED')\n    }\n  }\n  return _signals as string[]\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction emit(event: string, code: number | null, signal: string | null): void {\n  const emitter = getEmitter()\n  if (emitter.emitted?.[event]) {\n    return\n  }\n  if (emitter.emitted) {\n    emitter.emitted[event] = true\n  }\n  emitter.emit(event, code, signal)\n}\n\nlet loaded = false\n\n/**\n * Load signal handlers and hook into process exit events.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function load(): void {\n  if (loaded || !globalProcess) {\n    return\n  }\n  loaded = true\n\n  // This is the number of onSignalExit's that are in play.\n  // It's important so that we can count the correct number of\n  // listeners on signals, and don't wait for the other one to\n  // handle it instead of us.\n  const emitter = getEmitter()\n  if (emitter.count !== undefined) {\n    emitter.count += 1\n  }\n\n  const sigs = getSignals()\n  const sigListeners = getSignalListeners()\n  _signals = sigs.filter(sig => {\n    try {\n      globalProcess.on(\n        sig as NodeJS.Signals,\n        sigListeners[sig] as SignalListener,\n      )\n      return true\n    } catch {}\n    return false\n  })\n\n  globalProcess.emit = processEmit as typeof globalProcess.emit\n  globalProcess.reallyExit = processReallyExit\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction processEmit(\n  this: NodeJS.Process,\n  eventName: string,\n  exitCode?: number | undefined,\n  ...args: any[]\n): boolean {\n  if (eventName === 'exit') {\n    let actualExitCode = exitCode\n    if (actualExitCode === undefined) {\n      const processExitCode = globalProcess?.exitCode\n      actualExitCode =\n        typeof processExitCode === 'number' ? processExitCode : undefined\n    } else if (globalProcess) {\n      globalProcess.exitCode = actualExitCode\n    }\n    const result = ReflectApply(\n      originalProcessEmit as (...args: unknown[]) => boolean,\n      this,\n      [eventName, actualExitCode, ...args],\n    ) as boolean\n    const numExitCode =\n      typeof actualExitCode === 'number' ? actualExitCode : null\n    emit('exit', numExitCode, null)\n    emit('afterexit', numExitCode, null)\n    return result\n  }\n  return ReflectApply(\n    originalProcessEmit as (...args: unknown[]) => boolean,\n    this,\n    [eventName, exitCode, ...args],\n  ) as boolean\n}\n\n/*@__NO_SIDE_EFFECTS__*/\nfunction processReallyExit(code?: number | undefined): never {\n  const exitCode = code || 0\n  if (globalProcess) {\n    globalProcess.exitCode = exitCode\n  }\n  emit('exit', exitCode, null)\n  emit('afterexit', exitCode, null)\n  ReflectApply(\n    originalProcessReallyExit as (code?: number) => never,\n    globalProcess,\n    [exitCode],\n  )\n  throw new Error('processReallyExit should never return')\n}\n\nexport interface OnExitOptions {\n  alwaysLast?: boolean\n}\n\n/**\n * Register a callback to run on process exit or signal.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function onExit(\n  cb: (code: number | null, signal: string | null) => void,\n  options?: OnExitOptions | undefined,\n): () => void {\n  if (!globalProcess) {\n    return function remove() {}\n  }\n  if (typeof cb !== 'function') {\n    throw new TypeError('a callback must be provided for exit handler')\n  }\n  if (loaded === false) {\n    load()\n  }\n  const { alwaysLast } = { __proto__: null, ...options } as OnExitOptions\n\n  let eventName = 'exit'\n  if (alwaysLast) {\n    eventName = 'afterexit'\n  }\n\n  const emitter = getEmitter()\n  emitter.on(eventName, cb)\n\n  return function remove() {\n    emitter.removeListener(eventName, cb)\n    if (\n      !emitter.listeners('exit').length &&\n      !emitter.listeners('afterexit').length\n    ) {\n      unload()\n    }\n  }\n}\n\n/**\n * Get the list of signals that are currently being monitored.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function signals(): string[] | undefined {\n  return _signals\n}\n\n/**\n * Unload signal handlers and restore original process behavior.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function unload(): void {\n  if (!loaded || !globalProcess) {\n    return\n  }\n  loaded = false\n\n  const sigs = getSignals()\n  const sigListeners = getSignalListeners()\n  for (const sig of sigs) {\n    try {\n      globalProcess.removeListener(\n        sig as NodeJS.Signals,\n        sigListeners[sig] as SignalListener,\n      )\n    } catch {}\n  }\n  globalProcess.emit = originalProcessEmit as typeof globalProcess.emit\n  if (originalProcessReallyExit !== undefined) {\n    globalProcess.reallyExit = originalProcessReallyExit\n  }\n  const emitter = getEmitter()\n  if (emitter.count !== undefined) {\n    emitter.count -= 1\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmCA,MAAM,eAAe,QAAQ;AAC7B,MAAM,gBAAgB,WAAW;AAMjC,MAAM,sBAAsB,eAAe;AAC3C,MAAM,WAAW,eAAe,YAAY;AAC5C,MAAM,4BAA4B,eAAe;AAGjD,MAAM,QAAQ,aAAa;AAE3B,IAAI;AAAA;AAEJ,SAAS,YAAY;AACnB,MAAI,YAAY,QAAW;AAGzB,cAAwB,QAAQ,aAAa;AAAA,EAC/C;AACA,SAAO;AACT;AAaA,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,QAAI,eAAe,yBAAyB;AAC1C,iBAAW,cAAc;AAAA,IAC3B,WAAW,eAAe;AACxB,YAAM,gBAAe,0BAAU,GAAE;AACjC,iBAAW,cAAc,0BACvB,IAAI,aAAa;AACnB,eAAS,QAAQ;AACjB,eAAS,UAAU,EAAE,WAAW,KAAK;AAAA,IACvC;AAKA,QAAI,YAAY,CAAC,SAAS,UAAU;AAClC,eAAS,gBAAgB,OAAO,iBAAiB;AACjD,eAAS,WAAW;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAI;AAAA;AAEJ,SAAS,qBAAqB;AAC5B,MAAI,kBAAkB,QAAW;AAC/B,oBAAgB,EAAE,WAAW,KAAK;AAClC,UAAM,UAAU,2BAAW;AAC3B,UAAM,OAAO,2BAAW;AACxB,eAAW,OAAO,MAAM;AACtB,oBAAc,GAAG,IAAI,SAAS,WAAW;AAKvC,cAAM,YAAY,eAAe,UAAU,GAAqB,KAAK,CAAC;AACtE,YAAI,UAAU,WAAW,QAAQ,OAAO;AACtC,iCAAO;AACP,+BAAK,QAAQ,MAAM,GAAG;AACtB,+BAAK,aAAa,MAAM,GAAG;AAG3B,gBAAM,UAAU,SAAS,QAAQ,WAAW,WAAW;AACvD,yBAAe,KAAK,eAAe,KAAK,OAAO;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,eAAW,CAAC,WAAW,WAAW,UAAU,UAAU,SAAS;AAC/D,QAAI,CAAC,OAAO;AACV,eAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA,MAIF;AAAA,IACF;AACA,QAAI,aAAa,SAAS;AACxB,eAAS,KAAK,SAAS,WAAW,UAAU,aAAa,WAAW;AAAA,IACtE;AAAA,EACF;AACA,SAAO;AACT;AAAA;AAGA,SAAS,KAAK,OAAe,MAAqB,QAA6B;AAC7E,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,KAAK,GAAG;AAC5B;AAAA,EACF;AACA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,KAAK,IAAI;AAAA,EAC3B;AACA,UAAQ,KAAK,OAAO,MAAM,MAAM;AAClC;AAEA,IAAI,SAAS;AAAA;AAMN,SAAS,OAAa;AAC3B,MAAI,UAAU,CAAC,eAAe;AAC5B;AAAA,EACF;AACA,WAAS;AAMT,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,QAAW;AAC/B,YAAQ,SAAS;AAAA,EACnB;AAEA,QAAM,OAAO,2BAAW;AACxB,QAAM,eAAe,mCAAmB;AACxC,aAAW,KAAK,OAAO,SAAO;AAC5B,QAAI;AACF,oBAAc;AAAA,QACZ;AAAA,QACA,aAAa,GAAG;AAAA,MAClB;AACA,aAAO;AAAA,IACT,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT,CAAC;AAED,gBAAc,OAAO;AACrB,gBAAc,aAAa;AAC7B;AAAA;AAGA,SAAS,YAEP,WACA,aACG,MACM;AACT,MAAI,cAAc,QAAQ;AACxB,QAAI,iBAAiB;AACrB,QAAI,mBAAmB,QAAW;AAChC,YAAM,kBAAkB,eAAe;AACvC,uBACE,OAAO,oBAAoB,WAAW,kBAAkB;AAAA,IAC5D,WAAW,eAAe;AACxB,oBAAc,WAAW;AAAA,IAC3B;AACA,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,CAAC,WAAW,gBAAgB,GAAG,IAAI;AAAA,IACrC;AACA,UAAM,cACJ,OAAO,mBAAmB,WAAW,iBAAiB;AACxD,yBAAK,QAAQ,aAAa,IAAI;AAC9B,yBAAK,aAAa,aAAa,IAAI;AACnC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,CAAC,WAAW,UAAU,GAAG,IAAI;AAAA,EAC/B;AACF;AAAA;AAGA,SAAS,kBAAkB,MAAkC;AAC3D,QAAM,WAAW,QAAQ;AACzB,MAAI,eAAe;AACjB,kBAAc,WAAW;AAAA,EAC3B;AACA,uBAAK,QAAQ,UAAU,IAAI;AAC3B,uBAAK,aAAa,UAAU,IAAI;AAChC;AAAA,IACE;AAAA,IACA;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,QAAM,IAAI,MAAM,uCAAuC;AACzD;AAAA;AAUO,SAAS,OACd,IACA,SACY;AACZ,MAAI,CAAC,eAAe;AAClB,WAAO,SAAS,SAAS;AAAA,IAAC;AAAA,EAC5B;AACA,MAAI,OAAO,OAAO,YAAY;AAC5B,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,MAAI,WAAW,OAAO;AACpB,yBAAK;AAAA,EACP;AACA,QAAM,EAAE,WAAW,IAAI,EAAE,WAAW,MAAM,GAAG,QAAQ;AAErD,MAAI,YAAY;AAChB,MAAI,YAAY;AACd,gBAAY;AAAA,EACd;AAEA,QAAM,UAAU,2BAAW;AAC3B,UAAQ,GAAG,WAAW,EAAE;AAExB,SAAO,SAAS,SAAS;AACvB,YAAQ,eAAe,WAAW,EAAE;AACpC,QACE,CAAC,QAAQ,UAAU,MAAM,EAAE,UAC3B,CAAC,QAAQ,UAAU,WAAW,EAAE,QAChC;AACA,6BAAO;AAAA,IACT;AAAA,EACF;AACF;AAAA;AAMO,SAAS,UAAgC;AAC9C,SAAO;AACT;AAAA;AAMO,SAAS,SAAe;AAC7B,MAAI,CAAC,UAAU,CAAC,eAAe;AAC7B;AAAA,EACF;AACA,WAAS;AAET,QAAM,OAAO,2BAAW;AACxB,QAAM,eAAe,mCAAmB;AACxC,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,oBAAc;AAAA,QACZ;AAAA,QACA,aAAa,GAAG;AAAA,MAClB;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,gBAAc,OAAO;AACrB,MAAI,8BAA8B,QAAW;AAC3C,kBAAc,aAAa;AAAA,EAC7B;AACA,QAAM,UAAU,2BAAW;AAC3B,MAAI,QAAQ,UAAU,QAAW;AAC/B,YAAQ,SAAS;AAAA,EACnB;AACF;",
   "names": []
 }

package/dist/sorts.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/sorts.ts"],
-  "sourcesContent": ["/**\n * @fileoverview Sorting comparison functions including locale-aware and natural sorting.\n * Provides various comparison utilities for arrays and collections.\n */\n\nlet _localeCompare: ((x: string, y: string) => number) | undefined\n/**\n * Compare two strings using locale-aware comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function localeCompare(x: string, y: string): number {\n  if (_localeCompare === undefined) {\n    // Lazily call new Intl.Collator() because in Node it can take 10-14ms.\n    _localeCompare = new Intl.Collator().compare\n  }\n  return _localeCompare(x, y)\n}\n\nlet _naturalCompare: ((x: string, y: string) => number) | undefined\n/**\n * Compare two strings using natural sorting (numeric-aware, case-insensitive).\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function naturalCompare(x: string, y: string): number {\n  if (_naturalCompare === undefined) {\n    // Lazily call new Intl.Collator() because in Node it can take 10-14ms.\n    _naturalCompare = new Intl.Collator(\n      // The `undefined` locale means it uses the default locale of the user's\n      // environment.\n      undefined,\n      {\n        // Enables numeric sorting: numbers in strings are compared by value,\n        // e.g. 'file2' comes before 'file10' as numbers and not 'file10' before\n        // 'file2' as plain text.\n        numeric: true,\n        // Makes the comparison case-insensitive and ignores diacritics, e.g.\n        // 'a', 'A', and '\u00E1' are treated as equivalent.\n        sensitivity: 'base',\n      },\n    ).compare\n  }\n  return _naturalCompare(x, y)\n}\n\n// Type for fast-sort sorter function.\ntype FastSortFunction = ReturnType<\n  typeof import('fast-sort').createNewSortInstance\n>\n\nlet _naturalSorter: FastSortFunction | undefined\n/**\n * Sort an array using natural comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function naturalSorter<T>(\n  arrayToSort: T[],\n): ReturnType<FastSortFunction> {\n  if (_naturalSorter === undefined) {\n    const fastSort = /*@__PURE__*/ require('./external/fast-sort')\n    // biome-ignore lint/suspicious/noExplicitAny: Fast-sort API requires dynamic method access.\n    _naturalSorter = (fastSort as any).createNewSortInstance({\n      comparer: naturalCompare,\n    })\n  }\n  return _naturalSorter?.(arrayToSort)\n}\n\n/**\n * Simple string comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function compareStr(a: string, b: string): number {\n  return a < b ? -1 : a > b ? 1 : 0\n}\n\n/**\n * Compare semantic versions.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function compareSemver(a: string, b: string): number {\n  const semver = /*@__PURE__*/ require('./external/semver')\n  const validA = semver.valid(a)\n  const validB = semver.valid(b)\n\n  if (!validA && !validB) {\n    return 0\n  }\n  if (!validA) {\n    return -1\n  }\n  if (!validB) {\n    return 1\n  }\n  // biome-ignore lint/suspicious/noExplicitAny: Semver API requires dynamic method access.\n  return (semver as any).compare(a, b)\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,IAAI;AAAA;AAKG,SAAS,cAAc,GAAW,GAAmB;AAC1D,MAAI,mBAAmB,QAAW;AAEhC,qBAAiB,IAAI,KAAK,SAAS,EAAE;AAAA,EACvC;AACA,SAAO,eAAe,GAAG,CAAC;AAC5B;AAEA,IAAI;AAAA;AAKG,SAAS,eAAe,GAAW,GAAmB;AAC3D,MAAI,oBAAoB,QAAW;AAEjC,sBAAkB,IAAI,KAAK;AAAA;AAAA;AAAA,MAGzB;AAAA,MACA;AAAA;AAAA;AAAA;AAAA,QAIE,SAAS;AAAA;AAAA;AAAA,QAGT,aAAa;AAAA,MACf;AAAA,IACF,EAAE;AAAA,EACJ;AACA,SAAO,gBAAgB,GAAG,CAAC;AAC7B;AAOA,IAAI;AAAA;AAKG,SAAS,cACd,aAC8B;AAC9B,MAAI,mBAAmB,QAAW;AAChC,UAAM,WAAyB,QAAQ,sBAAsB;AAE7D,qBAAkB,SAAiB,sBAAsB;AAAA,MACvD,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW;AACrC;AAAA;AAMO,SAAS,WAAW,GAAW,GAAmB;AACvD,SAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI;AAClC;AAAA;AAMO,SAAS,cAAc,GAAW,GAAmB;AAC1D,QAAM,SAAuB,QAAQ,mBAAmB;AACxD,QAAM,SAAS,OAAO,MAAM,CAAC;AAC7B,QAAM,SAAS,OAAO,MAAM,CAAC;AAE7B,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,SAAQ,OAAe,QAAQ,GAAG,CAAC;AACrC;",
+  "sourcesContent": ["/**\n * @fileoverview Sorting comparison functions including locale-aware and natural sorting.\n * Provides various comparison utilities for arrays and collections.\n */\n\nlet _localeCompare: ((x: string, y: string) => number) | undefined\n/**\n * Compare two strings using locale-aware comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function localeCompare(x: string, y: string): number {\n  if (_localeCompare === undefined) {\n    // Lazily call new Intl.Collator() because in Node it can take 10-14ms.\n    _localeCompare = new Intl.Collator().compare\n  }\n  return _localeCompare(x, y)\n}\n\nlet _naturalCompare: ((x: string, y: string) => number) | undefined\n/**\n * Compare two strings using natural sorting (numeric-aware, case-insensitive).\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function naturalCompare(x: string, y: string): number {\n  if (_naturalCompare === undefined) {\n    // Lazily call new Intl.Collator() because in Node it can take 10-14ms.\n    _naturalCompare = new Intl.Collator(\n      // The `undefined` locale means it uses the default locale of the user's\n      // environment.\n      undefined,\n      {\n        // Enables numeric sorting: numbers in strings are compared by value,\n        // e.g. 'file2' comes before 'file10' as numbers and not 'file10' before\n        // 'file2' as plain text.\n        numeric: true,\n        // Makes the comparison case-insensitive and ignores diacritics, e.g.\n        // 'a', 'A', and '\u00E1' are treated as equivalent.\n        sensitivity: 'base',\n      },\n    ).compare\n  }\n  return _naturalCompare(x, y)\n}\n\n// Type for fast-sort sorter function.\ntype FastSortFunction = ReturnType<\n  typeof import('fast-sort').createNewSortInstance\n>\n\nlet _naturalSorter: FastSortFunction | undefined\n/**\n * Sort an array using natural comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function naturalSorter<T>(\n  arrayToSort: T[],\n): ReturnType<FastSortFunction> {\n  if (_naturalSorter === undefined) {\n    const fastSort = /*@__PURE__*/ require('./external/fast-sort')\n    _naturalSorter = (fastSort as any).createNewSortInstance({\n      comparer: naturalCompare,\n    })\n  }\n  return _naturalSorter?.(arrayToSort)\n}\n\n/**\n * Simple string comparison.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function compareStr(a: string, b: string): number {\n  return a < b ? -1 : a > b ? 1 : 0\n}\n\n/**\n * Compare semantic versions.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function compareSemver(a: string, b: string): number {\n  const semver = /*@__PURE__*/ require('./external/semver')\n  const validA = semver.valid(a)\n  const validB = semver.valid(b)\n\n  if (!validA && !validB) {\n    return 0\n  }\n  if (!validA) {\n    return -1\n  }\n  if (!validB) {\n    return 1\n  }\n  return (semver as any).compare(a, b)\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,IAAI;AAAA;AAKG,SAAS,cAAc,GAAW,GAAmB;AAC1D,MAAI,mBAAmB,QAAW;AAEhC,qBAAiB,IAAI,KAAK,SAAS,EAAE;AAAA,EACvC;AACA,SAAO,eAAe,GAAG,CAAC;AAC5B;AAEA,IAAI;AAAA;AAKG,SAAS,eAAe,GAAW,GAAmB;AAC3D,MAAI,oBAAoB,QAAW;AAEjC,sBAAkB,IAAI,KAAK;AAAA;AAAA;AAAA,MAGzB;AAAA,MACA;AAAA;AAAA;AAAA;AAAA,QAIE,SAAS;AAAA;AAAA;AAAA,QAGT,aAAa;AAAA,MACf;AAAA,IACF,EAAE;AAAA,EACJ;AACA,SAAO,gBAAgB,GAAG,CAAC;AAC7B;AAOA,IAAI;AAAA;AAKG,SAAS,cACd,aAC8B;AAC9B,MAAI,mBAAmB,QAAW;AAChC,UAAM,WAAyB,QAAQ,sBAAsB;AAC7D,qBAAkB,SAAiB,sBAAsB;AAAA,MACvD,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW;AACrC;AAAA;AAMO,SAAS,WAAW,GAAW,GAAmB;AACvD,SAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI;AAClC;AAAA;AAMO,SAAS,cAAc,GAAW,GAAmB;AAC1D,QAAM,SAAuB,QAAQ,mBAAmB;AACxD,QAAM,SAAS,OAAO,MAAM,CAAC;AAC7B,QAAM,SAAS,OAAO,MAAM,CAAC;AAE7B,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,SAAQ,OAAe,QAAQ,GAAG,CAAC;AACrC;",
   "names": []
 }

package/dist/spawn.d.ts

@@ -1,6 +1,18 @@
 // Define BufferEncoding type for TypeScript compatibility.
 type BufferEncoding = globalThis.BufferEncoding;
-// Type for promise-spawn options.
+/**
+ * Options for spawning a child process with promise-based completion.
+ *
+ * @property {string | undefined} cwd - Current working directory for the process
+ * @property {boolean | undefined} stdioString - Convert stdio output to strings (default: `true`)
+ * @property {StdioType | undefined} stdio - Stdio configuration (`'pipe'`, `'ignore'`, `'inherit'`, or array)
+ * @property {NodeJS.ProcessEnv | undefined} env - Environment variables for the process
+ * @property {boolean | string | undefined} shell - Whether to run command in shell, or path to shell
+ * @property {AbortSignal | undefined} signal - Signal to abort the process
+ * @property {number | undefined} timeout - Maximum time in milliseconds before killing the process
+ * @property {number | undefined} uid - User identity of the process (POSIX only)
+ * @property {number | undefined} gid - Group identity of the process (POSIX only)
+ */
 export type PromiseSpawnOptions = {
     cwd?: string | undefined;
     stdioString?: boolean | undefined;
@@ -12,7 +24,20 @@ export type PromiseSpawnOptions = {
     uid?: number | undefined;
     gid?: number | undefined;
 };
-// Type for promise-spawn result.
+/**
+ * Result returned by {@link spawn} when the child process completes.
+ * This is a Promise that resolves with process exit information and output,
+ * with additional properties for accessing the running process and stdin stream.
+ *
+ * @property {ChildProcessType} process - The running child process instance
+ * @property {WritableStreamType | null} stdin - Writable stream for process stdin, or `null` if not piped
+ *
+ * @example
+ * const result = spawn('echo', ['hello'])
+ * result.stdin?.write('additional input\n')
+ * const { code, stdout } = await result
+ * console.log(stdout) // 'hello'
+ */
 export type PromiseSpawnResult = Promise<{
     cmd: string;
     args: string[] | readonly string[];
@@ -25,7 +50,29 @@ export type PromiseSpawnResult = Promise<{
     stdin: WritableStreamType | null;
 };
 /**
- * Check if a value is a spawn error.
+ * Error object thrown when a spawned process fails.
+ * Extends the standard Error with process-specific information including exit code,
+ * signal, command details, and captured output.
+ *
+ * @property {string[]} args - Arguments passed to the command
+ * @property {string} cmd - Command that was executed
+ * @property {number} code - Process exit code
+ * @property {string} name - Error name (typically `'Error'`)
+ * @property {string} message - Error message describing the failure
+ * @property {NodeJS.Signals | null} signal - Signal that terminated the process, if any
+ * @property {string} stack - Stack trace of the error
+ * @property {string | Buffer} stderr - Standard error output from the process
+ * @property {string | Buffer} stdout - Standard output from the process
+ *
+ * @example
+ * try {
+ *   await spawn('exit', ['1'])
+ * } catch (error) {
+ *   if (isSpawnError(error)) {
+ *     console.error(`Command failed with code ${error.code}`)
+ *     console.error(`stderr: ${error.stderr}`)
+ *   }
+ * }
  */
 export type SpawnError = {
     args: string[];
@@ -38,17 +85,67 @@ export type SpawnError = {
     stderr: string | Buffer;
     stdout: string | Buffer;
 };
+/**
+ * Spawn error variant where stdout and stderr are guaranteed to be strings.
+ * This type is used when `stdioString: true` is set in spawn options.
+ *
+ * @property {string} stdout - Standard output as a string
+ * @property {string} stderr - Standard error as a string
+ */
 export type SpawnErrorWithOutputString = SpawnError & {
     stdout: string;
     stderr: string;
 };
+/**
+ * Spawn error variant where stdout and stderr are guaranteed to be Buffers.
+ * This type is used when `stdioString: false` is set in spawn options.
+ *
+ * @property {Buffer} stdout - Standard output as a Buffer
+ * @property {Buffer} stderr - Standard error as a Buffer
+ */
 export type SpawnErrorWithOutputBuffer = SpawnError & {
     stdout: Buffer;
     stderr: Buffer;
 };
+/**
+ * Extra options passed to the underlying promise-spawn implementation.
+ * This is an open-ended object for passing additional metadata or configuration.
+ */
 export type SpawnExtra = Record<string, unknown>;
+/**
+ * Valid values for individual stdio streams.
+ * - `'pipe'` - Creates a pipe between child and parent (default)
+ * - `'ignore'` - Ignores the stream
+ * - `'inherit'` - Uses parent's stream
+ * - `'overlapped'` - Windows-specific overlapped I/O
+ */
 export type IOType = 'pipe' | 'ignore' | 'inherit' | 'overlapped';
+/**
+ * Configuration for process stdio (stdin, stdout, stderr) streams.
+ * Can be a single value applied to all streams, or an array specifying each stream individually.
+ * - `'ipc'` - Creates an IPC channel for communication with the parent
+ *
+ * @example
+ * // All streams piped
+ * stdio: 'pipe'
+ *
+ * @example
+ * // Custom configuration per stream: [stdin, stdout, stderr]
+ * stdio: ['ignore', 'pipe', 'pipe']
+ */
 export type StdioType = IOType | 'ipc' | Array<IOType | 'ipc'>;
+/**
+ * Result object returned by {@link spawnSync} when the child process completes synchronously.
+ *
+ * @template T - Type of stdout/stderr (string or Buffer)
+ * @property {number} pid - Process ID of the spawned child
+ * @property {Array<T | null>} output - Array containing stdout/stderr values
+ * @property {T} stdout - Standard output from the process
+ * @property {T} stderr - Standard error from the process
+ * @property {number | null} status - Exit code, or `null` if killed by signal
+ * @property {NodeJS.Signals | null} signal - Signal that terminated the process, or `null`
+ * @property {Error | undefined} error - Error object if the spawn failed
+ */
 export interface SpawnSyncReturns<T> {
     pid: number;
     output: Array<T | null>;
@@ -59,12 +156,42 @@ export interface SpawnSyncReturns<T> {
     error?: Error | undefined;
 }
 /**
- * Check if a value is a spawn error with expected properties.
+ * Check if a value is a spawn error with expected error properties.
+ * Tests for common error properties from child process failures.
+ *
+ * @param {unknown} value - Value to check
+ * @returns {boolean} `true` if the value has spawn error properties
+ *
+ * @example
+ * try {
+ *   await spawn('nonexistent-command')
+ * } catch (error) {
+ *   if (isSpawnError(error)) {
+ *     console.error(`Spawn failed: ${error.code}`)
+ *   }
+ * }
  */
 /*@__NO_SIDE_EFFECTS__*/
 export declare function isSpawnError(value: unknown): value is SpawnError;
 /**
  * Check if stdio configuration matches a specific type.
+ * When called with one argument, validates if it's a valid stdio type.
+ * When called with two arguments, checks if the stdio config matches the specified type.
+ *
+ * @param {string | string[]} stdio - Stdio configuration to check
+ * @param {StdioType | undefined} type - Expected stdio type (optional)
+ * @returns {boolean} `true` if stdio matches the type or is valid
+ *
+ * @example
+ * // Check if valid stdio type
+ * isStdioType('pipe') // true
+ * isStdioType('invalid') // false
+ *
+ * @example
+ * // Check if stdio matches specific type
+ * isStdioType('pipe', 'pipe') // true
+ * isStdioType(['pipe', 'pipe', 'pipe'], 'pipe') // true
+ * isStdioType('ignore', 'pipe') // false
  */
 /*@__NO_SIDE_EFFECTS__*/
 export declare function isStdioType(stdio: string | string[], type?: StdioType | undefined): boolean;
@@ -75,7 +202,6 @@ interface NodeSpawnOptions {
     cwd?: string | URL | undefined;
     env?: NodeJS.ProcessEnv | undefined;
     argv0?: string | undefined;
-    // biome-ignore lint/suspicious/noExplicitAny: Stdio can be complex union of types from Node.js.
     stdio?: any;
     detached?: boolean | undefined;
     uid?: number | undefined;
@@ -94,7 +220,6 @@ interface ChildProcessType {
     stdin: NodeJS.WritableStream | null;
     stdout: NodeJS.ReadableStream | null;
     stderr: NodeJS.ReadableStream | null;
-    // biome-ignore lint/suspicious/noExplicitAny: IPC channel type from Node.js.
     readonly channel?: any;
     readonly stdio: [
         NodeJS.WritableStream | null,
@@ -111,20 +236,9 @@ interface ChildProcessType {
     readonly spawnargs: string[];
     readonly spawnfile: string;
     kill(signal?: NodeJS.Signals | number): boolean;
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message type from Node.js.
     send(message: any, callback?: (error: Error | null) => void): boolean;
-    send(
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message and handle types from Node.js.
-    message: any, 
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message and handle types from Node.js.
-    sendHandle?: any | undefined, callback?: (error: Error | null) => void): boolean;
-    send(
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.
-    message: any, 
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.
-    sendHandle?: any | undefined, 
-    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.
-    options?: any | undefined, callback?: (error: Error | null) => void): boolean;
+    send(message: any, sendHandle?: any | undefined, callback?: (error: Error | null) => void): boolean;
+    send(message: any, sendHandle?: any | undefined, options?: any | undefined, callback?: (error: Error | null) => void): boolean;
     disconnect(): void;
     unref(): void;
     ref(): void;
@@ -139,22 +253,30 @@ interface WritableStreamType {
     writableObjectMode: boolean;
     writableCorked: number;
     destroyed: boolean;
-    write(
-    // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.
-    chunk: any, encoding?: BufferEncoding | undefined, callback?: (error?: Error | null) => void): boolean;
-    // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.
+    write(chunk: any, encoding?: BufferEncoding | undefined, callback?: (error?: Error | null) => void): boolean;
     write(chunk: any, callback?: (error?: Error | null) => void): boolean;
     end(cb?: () => void): this;
-    // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.
     end(chunk: any, cb?: () => void): this;
-    // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.
     end(chunk: any, encoding?: BufferEncoding | undefined, cb?: () => void): this;
     cork(): void;
     uncork(): void;
     destroy(error?: Error | undefined): this;
 }
 /**
- * Spawn a child process with enhanced error handling and output capture.
+ * Options for spawning a child process with {@link spawn}.
+ * Extends Node.js spawn options with additional Socket-specific functionality.
+ *
+ * @property {import('./spinner').Spinner | undefined} spinner - Spinner instance to pause during execution
+ * @property {boolean | undefined} stdioString - Convert output to strings (default: `true`)
+ * @property {boolean | undefined} stripAnsi - Remove ANSI codes from output (default: `true`)
+ * @property {string | URL | undefined} cwd - Current working directory
+ * @property {NodeJS.ProcessEnv | undefined} env - Environment variables
+ * @property {StdioType | undefined} stdio - Stdio configuration
+ * @property {boolean | string | undefined} shell - Run command in shell
+ * @property {number | undefined} timeout - Timeout in milliseconds
+ * @property {AbortSignal | undefined} signal - Abort signal
+ * @property {number | undefined} uid - User identity (POSIX)
+ * @property {number | undefined} gid - Group identity (POSIX)
  */
 export type SpawnOptions = import('./objects').Remap<NodeSpawnOptions & {
     spinner?: import('./spinner').Spinner | undefined;
@@ -162,6 +284,16 @@ export type SpawnOptions = import('./objects').Remap<NodeSpawnOptions & {
     stripAnsi?: boolean;
 }>;
 export type SpawnResult = PromiseSpawnResult;
+/**
+ * Result object returned when a spawned process completes.
+ *
+ * @property {string} cmd - Command that was executed
+ * @property {string[] | readonly string[]} args - Arguments passed to the command
+ * @property {number} code - Process exit code
+ * @property {NodeJS.Signals | null} signal - Signal that terminated the process, if any
+ * @property {string | Buffer} stdout - Standard output (string if `stdioString: true`, Buffer otherwise)
+ * @property {string | Buffer} stderr - Standard error (string if `stdioString: true`, Buffer otherwise)
+ */
 export type SpawnStdioResult = {
     cmd: string;
     args: string[] | readonly string[];
@@ -172,6 +304,7 @@ export type SpawnStdioResult = {
 };
 /**
  * Spawn a child process and return a promise that resolves when it completes.
+ * Provides enhanced error handling, output capture, and cross-platform support.
  *
  * SECURITY: This function uses array-based arguments which prevent command injection.
  * Arguments in the `args` array are passed directly to the OS without shell
@@ -182,26 +315,102 @@ export type SpawnStdioResult = {
  * approach remains secure because Node.js properly escapes each argument before passing
  * to the shell.
  *
- * @param cmd - Command to execute (not user-controlled)
- * @param args - Array of arguments (safe even with user input due to array-based passing)
- * @param options - Spawn options
- * @param extra - Extra options for promise-spawn
+ * @param {string} cmd - Command to execute (not user-controlled)
+ * @param {string[] | readonly string[] | undefined} args - Array of arguments (safe even with user input)
+ * @param {SpawnOptions | undefined} options - Spawn options for process configuration
+ * @param {SpawnExtra | undefined} extra - Extra options for promise-spawn
+ * @returns {SpawnResult} Promise that resolves with process exit information
+ *
+ * @throws {SpawnError} When the process exits with non-zero code or is terminated by signal
+ *
+ * @example
+ * // Basic usage - spawn and wait for completion
+ * const result = await spawn('git', ['status'])
+ * console.log(result.stdout)
+ *
+ * @example
+ * // With options - set working directory and environment
+ * const result = await spawn('npm', ['install'], {
+ *   cwd: '/path/to/project',
+ *   env: { NODE_ENV: 'production' }
+ * })
  *
  * @example
- * // ✔ DO THIS - Array-based arguments
+ * // ✔ DO THIS - Array-based arguments (safe)
  * spawn('git', ['commit', '-m', userMessage])
  * // Each argument is properly escaped, even if userMessage = "foo; rm -rf /"
  *
  * @example
- * // ✖ NEVER DO THIS - String concatenation
+ * // ✖ NEVER DO THIS - String concatenation (vulnerable)
  * spawn(`git commit -m "${userMessage}"`, { shell: true })
  * // Vulnerable to injection if userMessage = '"; rm -rf / #'
+ *
+ * @example
+ * // Access stdin for interactive processes
+ * const result = spawn('cat', [])
+ * result.stdin?.write('Hello\n')
+ * result.stdin?.end()
+ * const { stdout } = await result
+ * console.log(stdout) // 'Hello'
+ *
+ * @example
+ * // Handle errors with exit codes
+ * try {
+ *   await spawn('exit', ['1'])
+ * } catch (error) {
+ *   if (isSpawnError(error)) {
+ *     console.error(`Failed with code ${error.code}`)
+ *     console.error(error.stderr)
+ *   }
+ * }
  */
 export declare function spawn(cmd: string, args?: string[] | readonly string[], options?: SpawnOptions | undefined, extra?: SpawnExtra | undefined): SpawnResult;
 /*@__NO_SIDE_EFFECTS__*/
 /**
- * Synchronously spawn a child process.
+ * Options for synchronously spawning a child process with {@link spawnSync}.
+ * Same as {@link SpawnOptions} but excludes the `spinner` property (not applicable for synchronous execution).
  */
 export type SpawnSyncOptions = Omit<SpawnOptions, 'spinner'>;
+/**
+ * Synchronously spawn a child process and wait for it to complete.
+ * Blocks execution until the process exits, returning all output and exit information.
+ *
+ * WARNING: This function blocks the event loop. Use {@link spawn} for async operations.
+ *
+ * @param {string} cmd - Command to execute
+ * @param {string[] | readonly string[] | undefined} args - Array of arguments
+ * @param {SpawnSyncOptions | undefined} options - Spawn options for process configuration
+ * @returns {SpawnSyncReturns<string | Buffer>} Process result with exit code and captured output
+ *
+ * @example
+ * // Basic synchronous spawn
+ * const result = spawnSync('git', ['status'])
+ * console.log(result.stdout)
+ * console.log(result.status) // exit code
+ *
+ * @example
+ * // With options
+ * const result = spawnSync('npm', ['install'], {
+ *   cwd: '/path/to/project',
+ *   stdioString: true
+ * })
+ * if (result.status !== 0) {
+ *   console.error(result.stderr)
+ * }
+ *
+ * @example
+ * // Get raw buffer output
+ * const result = spawnSync('cat', ['binary-file'], {
+ *   stdioString: false
+ * })
+ * console.log(result.stdout) // Buffer
+ *
+ * @example
+ * // Handle process errors
+ * const result = spawnSync('nonexistent-command')
+ * if (result.error) {
+ *   console.error('Failed to spawn:', result.error)
+ * }
+ */
 export declare function spawnSync(cmd: string, args?: string[] | readonly string[], options?: SpawnSyncOptions | undefined): SpawnSyncReturns<string | Buffer>;
 export {};

package/dist/spawn.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/spawn.ts"],
-  "sourcesContent": ["/**\n * @fileoverview Child process spawning utilities with cross-platform support.\n * Provides enhanced spawn functionality with stdio handling and error management.\n *\n * SECURITY: Array-Based Arguments Prevent Command Injection\n *\n * This module uses array-based arguments for all command execution, which is the\n * PRIMARY DEFENSE against command injection attacks. When you pass arguments as\n * an array to spawn():\n *\n *   spawn('npx', ['sfw', tool, ...args], { shell: true })\n *\n * Node.js handles escaping automatically. Each argument is passed directly to the\n * OS without shell interpretation. Shell metacharacters like ; | & $ ( ) ` are\n * treated as LITERAL STRINGS, not as commands. This approach is secure even when\n * shell: true is used on Windows for .cmd/.bat file resolution.\n *\n * UNSAFE ALTERNATIVE (not used in this codebase):\n *   spawn(`npx sfw ${tool} ${args.join(' ')}`, { shell: true })  // \u2716 VULNERABLE\n *\n * String concatenation allows injection. For example, if tool = \"foo; rm -rf /\",\n * the shell would execute both commands. Array-based arguments prevent this.\n *\n * References:\n * - https://nodejs.org/api/child_process.html#child_processspawncommand-args-options\n * - https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html\n */\n\nimport { getAbortSignal, getSpinner } from '#constants/process'\n\nimport { isArray } from './arrays'\n\nconst abortSignal = getAbortSignal()\nconst spinner = getSpinner()\n\nimport { getOwn, hasOwn } from './objects'\nimport { stripAnsi } from './strings'\n\n// Define BufferEncoding type for TypeScript compatibility.\ntype BufferEncoding = globalThis.BufferEncoding\n\nconst windowsScriptExtRegExp = /\\.(?:cmd|bat|ps1)$/i\n\nlet _child_process: typeof import('node:child_process') | undefined\n/**\n * Lazily load the child_process module.\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getChildProcess() {\n  if (_child_process === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _child_process = /*@__PURE__*/ require('node:child_process')\n  }\n  return _child_process as typeof import('node:child_process')\n}\n\n// Type for promise-spawn options.\nexport type PromiseSpawnOptions = {\n  cwd?: string | undefined\n  stdioString?: boolean | undefined\n  stdio?: StdioType | undefined\n  env?: NodeJS.ProcessEnv | undefined\n  shell?: boolean | string | undefined\n  signal?: AbortSignal | undefined\n  timeout?: number | undefined\n  uid?: number | undefined\n  gid?: number | undefined\n}\n\n// Type for promise-spawn result.\nexport type PromiseSpawnResult = Promise<{\n  cmd: string\n  args: string[] | readonly string[]\n  code: number\n  signal: NodeJS.Signals | null\n  stdout: string | Buffer\n  stderr: string | Buffer\n}> & {\n  process: ChildProcessType\n  stdin: WritableStreamType | null\n}\n\nlet _npmCliPromiseSpawn:\n  | ((\n      cmd: string,\n      args: string[],\n      options?: PromiseSpawnOptions | undefined,\n      extra?: SpawnExtra | undefined,\n    ) => PromiseSpawnResult)\n  | undefined\n/**\n * Lazily load the promise-spawn module for async process spawning.\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getNpmcliPromiseSpawn() {\n  if (_npmCliPromiseSpawn === undefined) {\n    _npmCliPromiseSpawn = /*@__PURE__*/ require('./external/@npmcli/promise-spawn')\n  }\n  return _npmCliPromiseSpawn as unknown as typeof import('@npmcli/promise-spawn')\n}\n\nlet _path: typeof import('node:path') | undefined\n/**\n * Lazily load the path module to avoid Webpack errors.\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPath() {\n  if (_path === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _path = /*@__PURE__*/ require('node:path')\n  }\n  return _path as typeof import('node:path')\n}\n\n/**\n * Check if a value is a spawn error.\n */\nexport type SpawnError = {\n  args: string[]\n  cmd: string\n  code: number\n  name: string\n  message: string\n  signal: NodeJS.Signals | null\n  stack: string\n  stderr: string | Buffer\n  stdout: string | Buffer\n}\n\nexport type SpawnErrorWithOutputString = SpawnError & {\n  stdout: string\n  stderr: string\n}\n\nexport type SpawnErrorWithOutputBuffer = SpawnError & {\n  stdout: Buffer\n  stderr: Buffer\n}\n\nexport type SpawnExtra = Record<string, unknown>\n\nexport type IOType = 'pipe' | 'ignore' | 'inherit' | 'overlapped'\nexport type StdioType = IOType | 'ipc' | Array<IOType | 'ipc'>\n\nexport interface SpawnSyncReturns<T> {\n  pid: number\n  output: Array<T | null>\n  stdout: T\n  stderr: T\n  status: number | null\n  signal: NodeJS.Signals | null\n  error?: Error | undefined\n}\n\n/**\n * Check if a value is a spawn error with expected properties.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function isSpawnError(value: unknown): value is SpawnError {\n  if (value === null || typeof value !== 'object') {\n    return false\n  }\n  // Check for spawn-specific error properties.\n  const err = value as Record<string, unknown>\n  return (\n    (hasOwn(err, 'code') && typeof err['code'] !== 'undefined') ||\n    (hasOwn(err, 'errno') && typeof err['errno'] !== 'undefined') ||\n    (hasOwn(err, 'syscall') && typeof err['syscall'] === 'string')\n  )\n}\n\n/**\n * Check if stdio configuration matches a specific type.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function isStdioType(\n  stdio: string | string[],\n  type?: StdioType | undefined,\n): boolean {\n  // If called with one argument, check if it's a valid stdio type.\n  // biome-ignore lint/complexity/noArguments: Function overload detection for single vs two-arg calls.\n  if (arguments.length === 1) {\n    const validTypes = ['pipe', 'ignore', 'inherit', 'overlapped']\n    return typeof stdio === 'string' && validTypes.includes(stdio)\n  }\n  // Original two-argument behavior.\n  return (\n    stdio === type ||\n    ((stdio === null || stdio === undefined) && type === 'pipe') ||\n    (isArray(stdio) &&\n      stdio.length > 2 &&\n      stdio[0] === type &&\n      stdio[1] === type &&\n      stdio[2] === type)\n  )\n}\n\n/**\n * Strip ANSI escape codes from spawn result stdout and stderr.\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction stripAnsiFromSpawnResult(result: unknown): unknown {\n  const res = result as {\n    stdout?: string | Buffer\n    stderr?: string | Buffer\n  }\n  const { stderr, stdout } = res\n  if (typeof stdout === 'string') {\n    res.stdout = stripAnsi(stdout)\n  }\n  if (typeof stderr === 'string') {\n    res.stderr = stripAnsi(stderr)\n  }\n  return res\n}\n\n/*@__NO_SIDE_EFFECTS__*/\n// Duplicated from Node.js child_process.SpawnOptions\n// These are the options passed to child_process.spawn()\ninterface NodeSpawnOptions {\n  cwd?: string | URL | undefined\n  env?: NodeJS.ProcessEnv | undefined\n  argv0?: string | undefined\n  // biome-ignore lint/suspicious/noExplicitAny: Stdio can be complex union of types from Node.js.\n  stdio?: any\n  detached?: boolean | undefined\n  uid?: number | undefined\n  gid?: number | undefined\n  serialization?: 'json' | 'advanced' | undefined\n  shell?: boolean | string | undefined\n  windowsVerbatimArguments?: boolean | undefined\n  windowsHide?: boolean | undefined\n  signal?: AbortSignal | undefined\n  timeout?: number | undefined\n  killSignal?: NodeJS.Signals | number | undefined\n}\n\n// Duplicated from Node.js child_process.ChildProcess\n// This represents a spawned child process\ninterface ChildProcessType {\n  stdin: NodeJS.WritableStream | null\n  stdout: NodeJS.ReadableStream | null\n  stderr: NodeJS.ReadableStream | null\n  // biome-ignore lint/suspicious/noExplicitAny: IPC channel type from Node.js.\n  readonly channel?: any\n  readonly stdio: [\n    NodeJS.WritableStream | null,\n    NodeJS.ReadableStream | null,\n    NodeJS.ReadableStream | null,\n    NodeJS.ReadableStream | NodeJS.WritableStream | null | undefined,\n    NodeJS.ReadableStream | NodeJS.WritableStream | null | undefined,\n  ]\n  readonly killed: boolean\n  readonly pid?: number | undefined\n  readonly connected: boolean\n  readonly exitCode: number | null\n  readonly signalCode: NodeJS.Signals | null\n  readonly spawnargs: string[]\n  readonly spawnfile: string\n  kill(signal?: NodeJS.Signals | number): boolean\n  // biome-ignore lint/suspicious/noExplicitAny: IPC message type from Node.js.\n  send(message: any, callback?: (error: Error | null) => void): boolean\n  send(\n    // biome-ignore lint/suspicious/noExplicitAny: IPC message and handle types from Node.js.\n    message: any,\n    // biome-ignore lint/suspicious/noExplicitAny: IPC message and handle types from Node.js.\n    sendHandle?: any | undefined,\n    callback?: (error: Error | null) => void,\n  ): boolean\n  send(\n    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.\n    message: any,\n    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.\n    sendHandle?: any | undefined,\n    // biome-ignore lint/suspicious/noExplicitAny: IPC message, handle, and options types from Node.js.\n    options?: any | undefined,\n    callback?: (error: Error | null) => void,\n  ): boolean\n  disconnect(): void\n  unref(): void\n  ref(): void\n}\n\n// Duplicated from Node.js stream.Writable\ninterface WritableStreamType {\n  writable: boolean\n  writableEnded: boolean\n  writableFinished: boolean\n  writableHighWaterMark: number\n  writableLength: number\n  writableObjectMode: boolean\n  writableCorked: number\n  destroyed: boolean\n  write(\n    // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.\n    chunk: any,\n    encoding?: BufferEncoding | undefined,\n    callback?: (error?: Error | null) => void,\n  ): boolean\n  // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.\n  write(chunk: any, callback?: (error?: Error | null) => void): boolean\n  end(cb?: () => void): this\n  // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.\n  end(chunk: any, cb?: () => void): this\n  // biome-ignore lint/suspicious/noExplicitAny: Stream chunk can be any type.\n  end(chunk: any, encoding?: BufferEncoding | undefined, cb?: () => void): this\n  cork(): void\n  uncork(): void\n  destroy(error?: Error | undefined): this\n}\n\n/**\n * Spawn a child process with enhanced error handling and output capture.\n */\nexport type SpawnOptions = import('./objects').Remap<\n  NodeSpawnOptions & {\n    spinner?: import('./spinner').Spinner | undefined\n    stdioString?: boolean\n    stripAnsi?: boolean\n  }\n>\nexport type SpawnResult = PromiseSpawnResult\nexport type SpawnStdioResult = {\n  cmd: string\n  args: string[] | readonly string[]\n  code: number\n  signal: NodeJS.Signals | null\n  stdout: string | Buffer\n  stderr: string | Buffer\n}\n\n/**\n * Spawn a child process and return a promise that resolves when it completes.\n *\n * SECURITY: This function uses array-based arguments which prevent command injection.\n * Arguments in the `args` array are passed directly to the OS without shell\n * interpretation. Shell metacharacters (;|&$()`) are treated as literal strings,\n * not as commands or operators. This is the PRIMARY SECURITY DEFENSE.\n *\n * Even when shell: true is used (on Windows for .cmd/.bat execution), the array-based\n * approach remains secure because Node.js properly escapes each argument before passing\n * to the shell.\n *\n * @param cmd - Command to execute (not user-controlled)\n * @param args - Array of arguments (safe even with user input due to array-based passing)\n * @param options - Spawn options\n * @param extra - Extra options for promise-spawn\n *\n * @example\n * // \u2714 DO THIS - Array-based arguments\n * spawn('git', ['commit', '-m', userMessage])\n * // Each argument is properly escaped, even if userMessage = \"foo; rm -rf /\"\n *\n * @example\n * // \u2716 NEVER DO THIS - String concatenation\n * spawn(`git commit -m \"${userMessage}\"`, { shell: true })\n * // Vulnerable to injection if userMessage = '\"; rm -rf / #'\n */\nexport function spawn(\n  cmd: string,\n  args?: string[] | readonly string[],\n  options?: SpawnOptions | undefined,\n  extra?: SpawnExtra | undefined,\n): SpawnResult {\n  // Windows cmd.exe command resolution for .cmd/.bat/.ps1 files:\n  //\n  // When shell: true is used on Windows with script files (.cmd, .bat, .ps1),\n  // cmd.exe can have issues executing full paths. The solution is to use just\n  // the command basename without extension and let cmd.exe find it via PATH.\n  //\n  // How cmd.exe resolves commands:\n  // 1. Searches current directory first\n  // 2. Then searches each directory in PATH environment variable\n  // 3. For each directory, tries extensions from PATHEXT (.COM, .EXE, .BAT, .CMD, etc.)\n  // 4. Executes the first match found\n  //\n  // Example: Given 'C:\\pnpm\\pnpm.cmd' with shell: true\n  // 1. Extract basename without extension: 'pnpm'\n  // 2. cmd.exe searches PATH directories for 'pnpm'\n  // 3. PATHEXT causes it to try 'pnpm.com', 'pnpm.exe', 'pnpm.bat', 'pnpm.cmd', etc.\n  // 4. Finds and executes 'C:\\pnpm\\pnpm.cmd'\n  //\n  // This approach is consistent with how other tools handle Windows execution:\n  // - npm's promise-spawn: uses which.sync() to find commands in PATH\n  // - cross-spawn: spawns cmd.exe with escaped arguments\n  // - execa: uses cross-spawn under the hood for Windows support\n  //\n  // See: https://github.com/nodejs/node/issues/3675\n  const shell = getOwn(options, 'shell')\n  // Inline WIN32 constant for coverage mode compatibility\n  const WIN32 = process.platform === 'win32'\n  let actualCmd = cmd\n  if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {\n    const path = getPath()\n    // Extract just the command name without path and extension.\n    actualCmd = path.basename(actualCmd, path.extname(actualCmd))\n  }\n  const {\n    spinner: optionsSpinner = spinner,\n    stripAnsi: shouldStripAnsi = true,\n    ...spawnOptions\n  } = { __proto__: null, ...options } as SpawnOptions\n  const spinnerInstance = optionsSpinner\n  const { env, stdio, stdioString = true } = spawnOptions\n  // The stdio option can be a string or an array.\n  // https://nodejs.org/api/child_process.html#optionsstdio\n  const wasSpinning = !!spinnerInstance?.isSpinning\n  const shouldStopSpinner =\n    wasSpinning && !isStdioType(stdio, 'ignore') && !isStdioType(stdio, 'pipe')\n  const shouldRestartSpinner = shouldStopSpinner\n  if (shouldStopSpinner) {\n    spinnerInstance.stop()\n  }\n  const npmCliPromiseSpawn = getNpmcliPromiseSpawn()\n  // Use __proto__: null to prevent prototype pollution when passing to\n  // third-party code, Node.js built-ins, or JavaScript built-in methods.\n  // https://github.com/npm/promise-spawn\n  // https://github.com/nodejs/node/blob/v24.0.1/lib/child_process.js#L674-L678\n  const promiseSpawnOpts = {\n    __proto__: null,\n    cwd: typeof spawnOptions.cwd === 'string' ? spawnOptions.cwd : undefined,\n    env: {\n      __proto__: null,\n      ...process.env,\n      ...env,\n    } as unknown as NodeJS.ProcessEnv,\n    signal: abortSignal,\n    stdio: spawnOptions.stdio,\n    stdioString,\n    shell: spawnOptions.shell,\n    timeout: spawnOptions.timeout,\n    uid: spawnOptions.uid,\n    gid: spawnOptions.gid,\n  } as unknown as PromiseSpawnOptions\n  const spawnPromise = npmCliPromiseSpawn(\n    actualCmd,\n    args ? [...args] : [],\n    promiseSpawnOpts as Parameters<typeof npmCliPromiseSpawn>[2],\n    extra,\n  )\n  const oldSpawnPromise = spawnPromise\n  let newSpawnPromise: PromiseSpawnResult\n  if (shouldStripAnsi && stdioString) {\n    newSpawnPromise = spawnPromise\n      .then(result => {\n        const strippedResult = stripAnsiFromSpawnResult(result)\n        // Add exitCode as an alias for code.\n        if ('code' in (strippedResult as { code?: number })) {\n          ;(strippedResult as { code: number; exitCode: number }).exitCode = (\n            strippedResult as { code: number }\n          ).code\n        }\n        return strippedResult\n      })\n      .catch(error => {\n        throw stripAnsiFromSpawnResult(error)\n      }) as PromiseSpawnResult\n  } else {\n    newSpawnPromise = spawnPromise.then(result => {\n      // Add exitCode as an alias for code.\n      if ('code' in result) {\n        const res = result as typeof result & { exitCode: number }\n        res.exitCode = result.code\n        return res\n      }\n      return result\n    }) as PromiseSpawnResult\n  }\n  if (shouldRestartSpinner) {\n    newSpawnPromise = newSpawnPromise.finally(() => {\n      spinnerInstance.start()\n    }) as PromiseSpawnResult\n  }\n  // Copy process and stdin properties from original promise\n  ;(newSpawnPromise as unknown as PromiseSpawnResult).process =\n    oldSpawnPromise.process\n  ;(newSpawnPromise as unknown as PromiseSpawnResult).stdin = (\n    oldSpawnPromise as unknown as PromiseSpawnResult\n  ).stdin\n  return newSpawnPromise as SpawnResult\n}\n\n/*@__NO_SIDE_EFFECTS__*/\n/**\n * Synchronously spawn a child process.\n */\nexport type SpawnSyncOptions = Omit<SpawnOptions, 'spinner'>\nexport function spawnSync(\n  cmd: string,\n  args?: string[] | readonly string[],\n  options?: SpawnSyncOptions | undefined,\n): SpawnSyncReturns<string | Buffer> {\n  // Windows cmd.exe command resolution for .cmd/.bat/.ps1 files:\n  // See spawn() function above for detailed explanation of this approach.\n  const shell = getOwn(options, 'shell')\n  // Inline WIN32 constant for coverage mode compatibility\n  const WIN32 = process.platform === 'win32'\n  let actualCmd = cmd\n  if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {\n    const path = getPath()\n    // Extract just the command name without path and extension.\n    actualCmd = path.basename(actualCmd, path.extname(actualCmd))\n  }\n  const { stripAnsi: shouldStripAnsi = true, ...rawSpawnOptions } = {\n    __proto__: null,\n    ...options,\n  } as SpawnSyncOptions\n  const { stdioString: rawStdioString = true } = rawSpawnOptions\n  const rawEncoding = rawStdioString ? 'utf8' : 'buffer'\n  const spawnOptions = {\n    encoding: rawEncoding,\n    ...rawSpawnOptions,\n  } as NodeSpawnOptions & { encoding: BufferEncoding | 'buffer' }\n  const stdioString = spawnOptions.encoding !== 'buffer'\n  const result = getChildProcess().spawnSync(actualCmd, args, spawnOptions)\n  if (stdioString) {\n    const { stderr, stdout } = result\n    if (stdout) {\n      result.stdout = stdout.toString().trim()\n    }\n    if (stderr) {\n      result.stderr = stderr.toString().trim()\n    }\n  }\n  return (\n    shouldStripAnsi && stdioString ? stripAnsiFromSpawnResult(result) : result\n  ) as SpawnSyncReturns<string | Buffer>\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4BA,qBAA2C;AAE3C,oBAAwB;AAKxB,qBAA+B;AAC/B,qBAA0B;AAJ1B,MAAM,kBAAc,+BAAe;AACnC,MAAM,cAAU,2BAAW;AAQ3B,MAAM,yBAAyB;AAE/B,IAAI;AAAA;AAKJ,SAAS,kBAAkB;AACzB,MAAI,mBAAmB,QAAW;AAGhC,qBAA+B,QAAQ,oBAAoB;AAAA,EAC7D;AACA,SAAO;AACT;AA4BA,IAAI;AAAA;AAYJ,SAAS,wBAAwB;AAC/B,MAAI,wBAAwB,QAAW;AACrC,0BAAoC,QAAQ,kCAAkC;AAAA,EAChF;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAKJ,SAAS,UAAU;AACjB,MAAI,UAAU,QAAW;AAGvB,YAAsB,QAAQ,WAAW;AAAA,EAC3C;AACA,SAAO;AACT;AAAA;AA8CO,SAAS,aAAa,OAAqC;AAChE,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,MAAM;AACZ,aACG,uBAAO,KAAK,MAAM,KAAK,OAAO,IAAI,MAAM,MAAM,mBAC9C,uBAAO,KAAK,OAAO,KAAK,OAAO,IAAI,OAAO,MAAM,mBAChD,uBAAO,KAAK,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM;AAEzD;AAAA;AAMO,SAAS,YACd,OACA,MACS;AAGT,MAAI,UAAU,WAAW,GAAG;AAC1B,UAAM,aAAa,CAAC,QAAQ,UAAU,WAAW,YAAY;AAC7D,WAAO,OAAO,UAAU,YAAY,WAAW,SAAS,KAAK;AAAA,EAC/D;AAEA,SACE,UAAU,SACR,UAAU,QAAQ,UAAU,WAAc,SAAS,cACpD,uBAAQ,KAAK,KACZ,MAAM,SAAS,KACf,MAAM,CAAC,MAAM,QACb,MAAM,CAAC,MAAM,QACb,MAAM,CAAC,MAAM;AAEnB;AAAA;AAMA,SAAS,yBAAyB,QAA0B;AAC1D,QAAM,MAAM;AAIZ,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,MAAI,OAAO,WAAW,UAAU;AAC9B,QAAI,aAAS,0BAAU,MAAM;AAAA,EAC/B;AACA,MAAI,OAAO,WAAW,UAAU;AAC9B,QAAI,aAAS,0BAAU,MAAM;AAAA,EAC/B;AACA,SAAO;AACT;AAgJO,SAAS,MACd,KACA,MACA,SACA,OACa;AAyBb,QAAM,YAAQ,uBAAO,SAAS,OAAO;AAErC,QAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,YAAY;AAChB,MAAI,SAAS,SAAS,uBAAuB,KAAK,SAAS,GAAG;AAC5D,UAAM,OAAO,wBAAQ;AAErB,gBAAY,KAAK,SAAS,WAAW,KAAK,QAAQ,SAAS,CAAC;AAAA,EAC9D;AACA,QAAM;AAAA,IACJ,SAAS,iBAAiB;AAAA,IAC1B,WAAW,kBAAkB;AAAA,IAC7B,GAAG;AAAA,EACL,IAAI,EAAE,WAAW,MAAM,GAAG,QAAQ;AAClC,QAAM,kBAAkB;AACxB,QAAM,EAAE,KAAK,OAAO,cAAc,KAAK,IAAI;AAG3C,QAAM,cAAc,CAAC,CAAC,iBAAiB;AACvC,QAAM,oBACJ,eAAe,CAAC,4BAAY,OAAO,QAAQ,KAAK,CAAC,4BAAY,OAAO,MAAM;AAC5E,QAAM,uBAAuB;AAC7B,MAAI,mBAAmB;AACrB,oBAAgB,KAAK;AAAA,EACvB;AACA,QAAM,qBAAqB,sCAAsB;AAKjD,QAAM,mBAAmB;AAAA,IACvB,WAAW;AAAA,IACX,KAAK,OAAO,aAAa,QAAQ,WAAW,aAAa,MAAM;AAAA,IAC/D,KAAK;AAAA,MACH,WAAW;AAAA,MACX,GAAG,QAAQ;AAAA,MACX,GAAG;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,OAAO,aAAa;AAAA,IACpB;AAAA,IACA,OAAO,aAAa;AAAA,IACpB,SAAS,aAAa;AAAA,IACtB,KAAK,aAAa;AAAA,IAClB,KAAK,aAAa;AAAA,EACpB;AACA,QAAM,eAAe;AAAA,IACnB;AAAA,IACA,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB;AACxB,MAAI;AACJ,MAAI,mBAAmB,aAAa;AAClC,sBAAkB,aACf,KAAK,YAAU;AACd,YAAM,iBAAiB,yCAAyB,MAAM;AAEtD,UAAI,UAAW,gBAAsC;AACnD;AAAC,QAAC,eAAsD,WACtD,eACA;AAAA,MACJ;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,WAAS;AACd,YAAM,yCAAyB,KAAK;AAAA,IACtC,CAAC;AAAA,EACL,OAAO;AACL,sBAAkB,aAAa,KAAK,YAAU;AAE5C,UAAI,UAAU,QAAQ;AACpB,cAAM,MAAM;AACZ,YAAI,WAAW,OAAO;AACtB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI,sBAAsB;AACxB,sBAAkB,gBAAgB,QAAQ,MAAM;AAC9C,sBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA;AAAC,EAAC,gBAAkD,UAClD,gBAAgB;AACjB,EAAC,gBAAkD,QAClD,gBACA;AACF,SAAO;AACT;AAOO,SAAS,UACd,KACA,MACA,SACmC;AAGnC,QAAM,YAAQ,uBAAO,SAAS,OAAO;AAErC,QAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,YAAY;AAChB,MAAI,SAAS,SAAS,uBAAuB,KAAK,SAAS,GAAG;AAC5D,UAAM,OAAO,wBAAQ;AAErB,gBAAY,KAAK,SAAS,WAAW,KAAK,QAAQ,SAAS,CAAC;AAAA,EAC9D;AACA,QAAM,EAAE,WAAW,kBAAkB,MAAM,GAAG,gBAAgB,IAAI;AAAA,IAChE,WAAW;AAAA,IACX,GAAG;AAAA,EACL;AACA,QAAM,EAAE,aAAa,iBAAiB,KAAK,IAAI;AAC/C,QAAM,cAAc,iBAAiB,SAAS;AAC9C,QAAM,eAAe;AAAA,IACnB,UAAU;AAAA,IACV,GAAG;AAAA,EACL;AACA,QAAM,cAAc,aAAa,aAAa;AAC9C,QAAM,UAAS,gCAAgB,GAAE,UAAU,WAAW,MAAM,YAAY;AACxE,MAAI,aAAa;AACf,UAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,QAAI,QAAQ;AACV,aAAO,SAAS,OAAO,SAAS,EAAE,KAAK;AAAA,IACzC;AACA,QAAI,QAAQ;AACV,aAAO,SAAS,OAAO,SAAS,EAAE,KAAK;AAAA,IACzC;AAAA,EACF;AACA,SACE,mBAAmB,cAAc,yCAAyB,MAAM,IAAI;AAExE;",
+  "sourcesContent": ["/**\n * @fileoverview Child process spawning utilities with cross-platform support.\n * Provides enhanced spawn functionality with stdio handling and error management.\n *\n * SECURITY: Array-Based Arguments Prevent Command Injection\n *\n * This module uses array-based arguments for all command execution, which is the\n * PRIMARY DEFENSE against command injection attacks. When you pass arguments as\n * an array to spawn():\n *\n *   spawn('npx', ['sfw', tool, ...args], { shell: true })\n *\n * Node.js handles escaping automatically. Each argument is passed directly to the\n * OS without shell interpretation. Shell metacharacters like ; | & $ ( ) ` are\n * treated as LITERAL STRINGS, not as commands. This approach is secure even when\n * shell: true is used on Windows for .cmd/.bat file resolution.\n *\n * UNSAFE ALTERNATIVE (not used in this codebase):\n *   spawn(`npx sfw ${tool} ${args.join(' ')}`, { shell: true })  // \u2716 VULNERABLE\n *\n * String concatenation allows injection. For example, if tool = \"foo; rm -rf /\",\n * the shell would execute both commands. Array-based arguments prevent this.\n *\n * References:\n * - https://nodejs.org/api/child_process.html#child_processspawncommand-args-options\n * - https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html\n */\n\nimport { getAbortSignal, getSpinner } from '#constants/process'\n\nimport { isArray } from './arrays'\n\nconst abortSignal = getAbortSignal()\nconst spinner = getSpinner()\n\nimport { getOwn, hasOwn } from './objects'\nimport { stripAnsi } from './strings'\n\n// Define BufferEncoding type for TypeScript compatibility.\ntype BufferEncoding = globalThis.BufferEncoding\n\nconst windowsScriptExtRegExp = /\\.(?:cmd|bat|ps1)$/i\n\nlet _child_process: typeof import('node:child_process') | undefined\n/**\n * Lazily load the `child_process` module to avoid Webpack bundling issues.\n *\n * @returns The Node.js `child_process` module\n *\n * @example\n * const childProcess = getChildProcess()\n * childProcess.spawnSync('ls', ['-la'])\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getChildProcess() {\n  if (_child_process === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _child_process = /*@__PURE__*/ require('node:child_process')\n  }\n  return _child_process as typeof import('node:child_process')\n}\n\n/**\n * Options for spawning a child process with promise-based completion.\n *\n * @property {string | undefined} cwd - Current working directory for the process\n * @property {boolean | undefined} stdioString - Convert stdio output to strings (default: `true`)\n * @property {StdioType | undefined} stdio - Stdio configuration (`'pipe'`, `'ignore'`, `'inherit'`, or array)\n * @property {NodeJS.ProcessEnv | undefined} env - Environment variables for the process\n * @property {boolean | string | undefined} shell - Whether to run command in shell, or path to shell\n * @property {AbortSignal | undefined} signal - Signal to abort the process\n * @property {number | undefined} timeout - Maximum time in milliseconds before killing the process\n * @property {number | undefined} uid - User identity of the process (POSIX only)\n * @property {number | undefined} gid - Group identity of the process (POSIX only)\n */\nexport type PromiseSpawnOptions = {\n  cwd?: string | undefined\n  stdioString?: boolean | undefined\n  stdio?: StdioType | undefined\n  env?: NodeJS.ProcessEnv | undefined\n  shell?: boolean | string | undefined\n  signal?: AbortSignal | undefined\n  timeout?: number | undefined\n  uid?: number | undefined\n  gid?: number | undefined\n}\n\n/**\n * Result returned by {@link spawn} when the child process completes.\n * This is a Promise that resolves with process exit information and output,\n * with additional properties for accessing the running process and stdin stream.\n *\n * @property {ChildProcessType} process - The running child process instance\n * @property {WritableStreamType | null} stdin - Writable stream for process stdin, or `null` if not piped\n *\n * @example\n * const result = spawn('echo', ['hello'])\n * result.stdin?.write('additional input\\n')\n * const { code, stdout } = await result\n * console.log(stdout) // 'hello'\n */\nexport type PromiseSpawnResult = Promise<{\n  cmd: string\n  args: string[] | readonly string[]\n  code: number\n  signal: NodeJS.Signals | null\n  stdout: string | Buffer\n  stderr: string | Buffer\n}> & {\n  process: ChildProcessType\n  stdin: WritableStreamType | null\n}\n\nlet _npmCliPromiseSpawn:\n  | ((\n      cmd: string,\n      args: string[],\n      options?: PromiseSpawnOptions | undefined,\n      extra?: SpawnExtra | undefined,\n    ) => PromiseSpawnResult)\n  | undefined\n/**\n * Lazily load the `@npmcli/promise-spawn` module for async process spawning.\n *\n * @returns The promise-spawn module that provides Promise-based spawn functionality\n *\n * @example\n * const promiseSpawn = getNpmcliPromiseSpawn()\n * await promiseSpawn('git', ['status'])\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getNpmcliPromiseSpawn() {\n  if (_npmCliPromiseSpawn === undefined) {\n    _npmCliPromiseSpawn = /*@__PURE__*/ require('./external/@npmcli/promise-spawn')\n  }\n  return _npmCliPromiseSpawn as unknown as typeof import('@npmcli/promise-spawn')\n}\n\nlet _path: typeof import('node:path') | undefined\n/**\n * Lazily load the `path` module to avoid Webpack bundling issues.\n *\n * @returns The Node.js `path` module\n *\n * @example\n * const path = getPath()\n * const basename = path.basename('/foo/bar.txt')\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPath() {\n  if (_path === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _path = /*@__PURE__*/ require('node:path')\n  }\n  return _path as typeof import('node:path')\n}\n\n/**\n * Error object thrown when a spawned process fails.\n * Extends the standard Error with process-specific information including exit code,\n * signal, command details, and captured output.\n *\n * @property {string[]} args - Arguments passed to the command\n * @property {string} cmd - Command that was executed\n * @property {number} code - Process exit code\n * @property {string} name - Error name (typically `'Error'`)\n * @property {string} message - Error message describing the failure\n * @property {NodeJS.Signals | null} signal - Signal that terminated the process, if any\n * @property {string} stack - Stack trace of the error\n * @property {string | Buffer} stderr - Standard error output from the process\n * @property {string | Buffer} stdout - Standard output from the process\n *\n * @example\n * try {\n *   await spawn('exit', ['1'])\n * } catch (error) {\n *   if (isSpawnError(error)) {\n *     console.error(`Command failed with code ${error.code}`)\n *     console.error(`stderr: ${error.stderr}`)\n *   }\n * }\n */\nexport type SpawnError = {\n  args: string[]\n  cmd: string\n  code: number\n  name: string\n  message: string\n  signal: NodeJS.Signals | null\n  stack: string\n  stderr: string | Buffer\n  stdout: string | Buffer\n}\n\n/**\n * Spawn error variant where stdout and stderr are guaranteed to be strings.\n * This type is used when `stdioString: true` is set in spawn options.\n *\n * @property {string} stdout - Standard output as a string\n * @property {string} stderr - Standard error as a string\n */\nexport type SpawnErrorWithOutputString = SpawnError & {\n  stdout: string\n  stderr: string\n}\n\n/**\n * Spawn error variant where stdout and stderr are guaranteed to be Buffers.\n * This type is used when `stdioString: false` is set in spawn options.\n *\n * @property {Buffer} stdout - Standard output as a Buffer\n * @property {Buffer} stderr - Standard error as a Buffer\n */\nexport type SpawnErrorWithOutputBuffer = SpawnError & {\n  stdout: Buffer\n  stderr: Buffer\n}\n\n/**\n * Extra options passed to the underlying promise-spawn implementation.\n * This is an open-ended object for passing additional metadata or configuration.\n */\nexport type SpawnExtra = Record<string, unknown>\n\n/**\n * Valid values for individual stdio streams.\n * - `'pipe'` - Creates a pipe between child and parent (default)\n * - `'ignore'` - Ignores the stream\n * - `'inherit'` - Uses parent's stream\n * - `'overlapped'` - Windows-specific overlapped I/O\n */\nexport type IOType = 'pipe' | 'ignore' | 'inherit' | 'overlapped'\n\n/**\n * Configuration for process stdio (stdin, stdout, stderr) streams.\n * Can be a single value applied to all streams, or an array specifying each stream individually.\n * - `'ipc'` - Creates an IPC channel for communication with the parent\n *\n * @example\n * // All streams piped\n * stdio: 'pipe'\n *\n * @example\n * // Custom configuration per stream: [stdin, stdout, stderr]\n * stdio: ['ignore', 'pipe', 'pipe']\n */\nexport type StdioType = IOType | 'ipc' | Array<IOType | 'ipc'>\n\n/**\n * Result object returned by {@link spawnSync} when the child process completes synchronously.\n *\n * @template T - Type of stdout/stderr (string or Buffer)\n * @property {number} pid - Process ID of the spawned child\n * @property {Array<T | null>} output - Array containing stdout/stderr values\n * @property {T} stdout - Standard output from the process\n * @property {T} stderr - Standard error from the process\n * @property {number | null} status - Exit code, or `null` if killed by signal\n * @property {NodeJS.Signals | null} signal - Signal that terminated the process, or `null`\n * @property {Error | undefined} error - Error object if the spawn failed\n */\nexport interface SpawnSyncReturns<T> {\n  pid: number\n  output: Array<T | null>\n  stdout: T\n  stderr: T\n  status: number | null\n  signal: NodeJS.Signals | null\n  error?: Error | undefined\n}\n\n/**\n * Check if a value is a spawn error with expected error properties.\n * Tests for common error properties from child process failures.\n *\n * @param {unknown} value - Value to check\n * @returns {boolean} `true` if the value has spawn error properties\n *\n * @example\n * try {\n *   await spawn('nonexistent-command')\n * } catch (error) {\n *   if (isSpawnError(error)) {\n *     console.error(`Spawn failed: ${error.code}`)\n *   }\n * }\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function isSpawnError(value: unknown): value is SpawnError {\n  if (value === null || typeof value !== 'object') {\n    return false\n  }\n  // Check for spawn-specific error properties.\n  const err = value as Record<string, unknown>\n  return (\n    (hasOwn(err, 'code') && typeof err['code'] !== 'undefined') ||\n    (hasOwn(err, 'errno') && typeof err['errno'] !== 'undefined') ||\n    (hasOwn(err, 'syscall') && typeof err['syscall'] === 'string')\n  )\n}\n\n/**\n * Check if stdio configuration matches a specific type.\n * When called with one argument, validates if it's a valid stdio type.\n * When called with two arguments, checks if the stdio config matches the specified type.\n *\n * @param {string | string[]} stdio - Stdio configuration to check\n * @param {StdioType | undefined} type - Expected stdio type (optional)\n * @returns {boolean} `true` if stdio matches the type or is valid\n *\n * @example\n * // Check if valid stdio type\n * isStdioType('pipe') // true\n * isStdioType('invalid') // false\n *\n * @example\n * // Check if stdio matches specific type\n * isStdioType('pipe', 'pipe') // true\n * isStdioType(['pipe', 'pipe', 'pipe'], 'pipe') // true\n * isStdioType('ignore', 'pipe') // false\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function isStdioType(\n  stdio: string | string[],\n  type?: StdioType | undefined,\n): boolean {\n  // If called with one argument, check if it's a valid stdio type.\n  // biome-ignore lint/complexity/noArguments: Function overload detection for single vs two-arg calls.\n  if (arguments.length === 1) {\n    const validTypes = ['pipe', 'ignore', 'inherit', 'overlapped']\n    return typeof stdio === 'string' && validTypes.includes(stdio)\n  }\n  // Original two-argument behavior.\n  return (\n    stdio === type ||\n    ((stdio === null || stdio === undefined) && type === 'pipe') ||\n    (isArray(stdio) &&\n      stdio.length > 2 &&\n      stdio[0] === type &&\n      stdio[1] === type &&\n      stdio[2] === type)\n  )\n}\n\n/**\n * Strip ANSI escape codes from spawn result stdout and stderr.\n * Modifies the result object in place to remove color codes and formatting.\n *\n * @param {unknown} result - Spawn result object with stdout/stderr properties\n * @returns {unknown} The modified result object\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction stripAnsiFromSpawnResult(result: unknown): unknown {\n  const res = result as {\n    stdout?: string | Buffer\n    stderr?: string | Buffer\n  }\n  const { stderr, stdout } = res\n  if (typeof stdout === 'string') {\n    res.stdout = stripAnsi(stdout)\n  }\n  if (typeof stderr === 'string') {\n    res.stderr = stripAnsi(stderr)\n  }\n  return res\n}\n\n/*@__NO_SIDE_EFFECTS__*/\n// Duplicated from Node.js child_process.SpawnOptions\n// These are the options passed to child_process.spawn()\ninterface NodeSpawnOptions {\n  cwd?: string | URL | undefined\n  env?: NodeJS.ProcessEnv | undefined\n  argv0?: string | undefined\n  stdio?: any\n  detached?: boolean | undefined\n  uid?: number | undefined\n  gid?: number | undefined\n  serialization?: 'json' | 'advanced' | undefined\n  shell?: boolean | string | undefined\n  windowsVerbatimArguments?: boolean | undefined\n  windowsHide?: boolean | undefined\n  signal?: AbortSignal | undefined\n  timeout?: number | undefined\n  killSignal?: NodeJS.Signals | number | undefined\n}\n\n// Duplicated from Node.js child_process.ChildProcess\n// This represents a spawned child process\ninterface ChildProcessType {\n  stdin: NodeJS.WritableStream | null\n  stdout: NodeJS.ReadableStream | null\n  stderr: NodeJS.ReadableStream | null\n  readonly channel?: any\n  readonly stdio: [\n    NodeJS.WritableStream | null,\n    NodeJS.ReadableStream | null,\n    NodeJS.ReadableStream | null,\n    NodeJS.ReadableStream | NodeJS.WritableStream | null | undefined,\n    NodeJS.ReadableStream | NodeJS.WritableStream | null | undefined,\n  ]\n  readonly killed: boolean\n  readonly pid?: number | undefined\n  readonly connected: boolean\n  readonly exitCode: number | null\n  readonly signalCode: NodeJS.Signals | null\n  readonly spawnargs: string[]\n  readonly spawnfile: string\n  kill(signal?: NodeJS.Signals | number): boolean\n  send(message: any, callback?: (error: Error | null) => void): boolean\n  send(\n    message: any,\n    sendHandle?: any | undefined,\n    callback?: (error: Error | null) => void,\n  ): boolean\n  send(\n    message: any,\n    sendHandle?: any | undefined,\n    options?: any | undefined,\n    callback?: (error: Error | null) => void,\n  ): boolean\n  disconnect(): void\n  unref(): void\n  ref(): void\n}\n\n// Duplicated from Node.js stream.Writable\ninterface WritableStreamType {\n  writable: boolean\n  writableEnded: boolean\n  writableFinished: boolean\n  writableHighWaterMark: number\n  writableLength: number\n  writableObjectMode: boolean\n  writableCorked: number\n  destroyed: boolean\n  write(\n    chunk: any,\n    encoding?: BufferEncoding | undefined,\n    callback?: (error?: Error | null) => void,\n  ): boolean\n  write(chunk: any, callback?: (error?: Error | null) => void): boolean\n  end(cb?: () => void): this\n  end(chunk: any, cb?: () => void): this\n  end(chunk: any, encoding?: BufferEncoding | undefined, cb?: () => void): this\n  cork(): void\n  uncork(): void\n  destroy(error?: Error | undefined): this\n}\n\n/**\n * Options for spawning a child process with {@link spawn}.\n * Extends Node.js spawn options with additional Socket-specific functionality.\n *\n * @property {import('./spinner').Spinner | undefined} spinner - Spinner instance to pause during execution\n * @property {boolean | undefined} stdioString - Convert output to strings (default: `true`)\n * @property {boolean | undefined} stripAnsi - Remove ANSI codes from output (default: `true`)\n * @property {string | URL | undefined} cwd - Current working directory\n * @property {NodeJS.ProcessEnv | undefined} env - Environment variables\n * @property {StdioType | undefined} stdio - Stdio configuration\n * @property {boolean | string | undefined} shell - Run command in shell\n * @property {number | undefined} timeout - Timeout in milliseconds\n * @property {AbortSignal | undefined} signal - Abort signal\n * @property {number | undefined} uid - User identity (POSIX)\n * @property {number | undefined} gid - Group identity (POSIX)\n */\nexport type SpawnOptions = import('./objects').Remap<\n  NodeSpawnOptions & {\n    spinner?: import('./spinner').Spinner | undefined\n    stdioString?: boolean\n    stripAnsi?: boolean\n  }\n>\nexport type SpawnResult = PromiseSpawnResult\n/**\n * Result object returned when a spawned process completes.\n *\n * @property {string} cmd - Command that was executed\n * @property {string[] | readonly string[]} args - Arguments passed to the command\n * @property {number} code - Process exit code\n * @property {NodeJS.Signals | null} signal - Signal that terminated the process, if any\n * @property {string | Buffer} stdout - Standard output (string if `stdioString: true`, Buffer otherwise)\n * @property {string | Buffer} stderr - Standard error (string if `stdioString: true`, Buffer otherwise)\n */\nexport type SpawnStdioResult = {\n  cmd: string\n  args: string[] | readonly string[]\n  code: number\n  signal: NodeJS.Signals | null\n  stdout: string | Buffer\n  stderr: string | Buffer\n}\n\n/**\n * Spawn a child process and return a promise that resolves when it completes.\n * Provides enhanced error handling, output capture, and cross-platform support.\n *\n * SECURITY: This function uses array-based arguments which prevent command injection.\n * Arguments in the `args` array are passed directly to the OS without shell\n * interpretation. Shell metacharacters (;|&$()`) are treated as literal strings,\n * not as commands or operators. This is the PRIMARY SECURITY DEFENSE.\n *\n * Even when shell: true is used (on Windows for .cmd/.bat execution), the array-based\n * approach remains secure because Node.js properly escapes each argument before passing\n * to the shell.\n *\n * @param {string} cmd - Command to execute (not user-controlled)\n * @param {string[] | readonly string[] | undefined} args - Array of arguments (safe even with user input)\n * @param {SpawnOptions | undefined} options - Spawn options for process configuration\n * @param {SpawnExtra | undefined} extra - Extra options for promise-spawn\n * @returns {SpawnResult} Promise that resolves with process exit information\n *\n * @throws {SpawnError} When the process exits with non-zero code or is terminated by signal\n *\n * @example\n * // Basic usage - spawn and wait for completion\n * const result = await spawn('git', ['status'])\n * console.log(result.stdout)\n *\n * @example\n * // With options - set working directory and environment\n * const result = await spawn('npm', ['install'], {\n *   cwd: '/path/to/project',\n *   env: { NODE_ENV: 'production' }\n * })\n *\n * @example\n * // \u2714 DO THIS - Array-based arguments (safe)\n * spawn('git', ['commit', '-m', userMessage])\n * // Each argument is properly escaped, even if userMessage = \"foo; rm -rf /\"\n *\n * @example\n * // \u2716 NEVER DO THIS - String concatenation (vulnerable)\n * spawn(`git commit -m \"${userMessage}\"`, { shell: true })\n * // Vulnerable to injection if userMessage = '\"; rm -rf / #'\n *\n * @example\n * // Access stdin for interactive processes\n * const result = spawn('cat', [])\n * result.stdin?.write('Hello\\n')\n * result.stdin?.end()\n * const { stdout } = await result\n * console.log(stdout) // 'Hello'\n *\n * @example\n * // Handle errors with exit codes\n * try {\n *   await spawn('exit', ['1'])\n * } catch (error) {\n *   if (isSpawnError(error)) {\n *     console.error(`Failed with code ${error.code}`)\n *     console.error(error.stderr)\n *   }\n * }\n */\nexport function spawn(\n  cmd: string,\n  args?: string[] | readonly string[],\n  options?: SpawnOptions | undefined,\n  extra?: SpawnExtra | undefined,\n): SpawnResult {\n  // Windows cmd.exe command resolution for .cmd/.bat/.ps1 files:\n  //\n  // When shell: true is used on Windows with script files (.cmd, .bat, .ps1),\n  // cmd.exe can have issues executing full paths. The solution is to use just\n  // the command basename without extension and let cmd.exe find it via PATH.\n  //\n  // How cmd.exe resolves commands:\n  // 1. Searches current directory first\n  // 2. Then searches each directory in PATH environment variable\n  // 3. For each directory, tries extensions from PATHEXT (.COM, .EXE, .BAT, .CMD, etc.)\n  // 4. Executes the first match found\n  //\n  // Example: Given 'C:\\pnpm\\pnpm.cmd' with shell: true\n  // 1. Extract basename without extension: 'pnpm'\n  // 2. cmd.exe searches PATH directories for 'pnpm'\n  // 3. PATHEXT causes it to try 'pnpm.com', 'pnpm.exe', 'pnpm.bat', 'pnpm.cmd', etc.\n  // 4. Finds and executes 'C:\\pnpm\\pnpm.cmd'\n  //\n  // This approach is consistent with how other tools handle Windows execution:\n  // - npm's promise-spawn: uses which.sync() to find commands in PATH\n  // - cross-spawn: spawns cmd.exe with escaped arguments\n  // - execa: uses cross-spawn under the hood for Windows support\n  //\n  // See: https://github.com/nodejs/node/issues/3675\n  const shell = getOwn(options, 'shell')\n  // Inline WIN32 constant for coverage mode compatibility\n  const WIN32 = process.platform === 'win32'\n  let actualCmd = cmd\n  if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {\n    const path = getPath()\n    // Extract just the command name without path and extension.\n    actualCmd = path.basename(actualCmd, path.extname(actualCmd))\n  }\n  const {\n    spinner: optionsSpinner = spinner,\n    stripAnsi: shouldStripAnsi = true,\n    ...spawnOptions\n  } = { __proto__: null, ...options } as SpawnOptions\n  const spinnerInstance = optionsSpinner\n  const { env, stdio, stdioString = true } = spawnOptions\n  // The stdio option can be a string or an array.\n  // https://nodejs.org/api/child_process.html#optionsstdio\n  const wasSpinning = !!spinnerInstance?.isSpinning\n  const shouldStopSpinner =\n    wasSpinning && !isStdioType(stdio, 'ignore') && !isStdioType(stdio, 'pipe')\n  const shouldRestartSpinner = shouldStopSpinner\n  if (shouldStopSpinner) {\n    spinnerInstance.stop()\n  }\n  const npmCliPromiseSpawn = getNpmcliPromiseSpawn()\n  // Use __proto__: null to prevent prototype pollution when passing to\n  // third-party code, Node.js built-ins, or JavaScript built-in methods.\n  // https://github.com/npm/promise-spawn\n  // https://github.com/nodejs/node/blob/v24.0.1/lib/child_process.js#L674-L678\n  const promiseSpawnOpts = {\n    __proto__: null,\n    cwd: typeof spawnOptions.cwd === 'string' ? spawnOptions.cwd : undefined,\n    env: {\n      __proto__: null,\n      ...process.env,\n      ...env,\n    } as unknown as NodeJS.ProcessEnv,\n    signal: abortSignal,\n    stdio: spawnOptions.stdio,\n    stdioString,\n    shell: spawnOptions.shell,\n    timeout: spawnOptions.timeout,\n    uid: spawnOptions.uid,\n    gid: spawnOptions.gid,\n  } as unknown as PromiseSpawnOptions\n  const spawnPromise = npmCliPromiseSpawn(\n    actualCmd,\n    args ? [...args] : [],\n    promiseSpawnOpts as Parameters<typeof npmCliPromiseSpawn>[2],\n    extra,\n  )\n  const oldSpawnPromise = spawnPromise\n  let newSpawnPromise: PromiseSpawnResult\n  if (shouldStripAnsi && stdioString) {\n    newSpawnPromise = spawnPromise\n      .then(result => {\n        const strippedResult = stripAnsiFromSpawnResult(result)\n        // Add exitCode as an alias for code.\n        if ('code' in (strippedResult as { code?: number })) {\n          ;(strippedResult as { code: number; exitCode: number }).exitCode = (\n            strippedResult as { code: number }\n          ).code\n        }\n        return strippedResult\n      })\n      .catch(error => {\n        throw stripAnsiFromSpawnResult(error)\n      }) as PromiseSpawnResult\n  } else {\n    newSpawnPromise = spawnPromise.then(result => {\n      // Add exitCode as an alias for code.\n      if ('code' in result) {\n        const res = result as typeof result & { exitCode: number }\n        res.exitCode = result.code\n        return res\n      }\n      return result\n    }) as PromiseSpawnResult\n  }\n  if (shouldRestartSpinner) {\n    newSpawnPromise = newSpawnPromise.finally(() => {\n      spinnerInstance.start()\n    }) as PromiseSpawnResult\n  }\n  // Copy process and stdin properties from original promise\n  ;(newSpawnPromise as unknown as PromiseSpawnResult).process =\n    oldSpawnPromise.process\n  ;(newSpawnPromise as unknown as PromiseSpawnResult).stdin = (\n    oldSpawnPromise as unknown as PromiseSpawnResult\n  ).stdin\n  return newSpawnPromise as SpawnResult\n}\n\n/*@__NO_SIDE_EFFECTS__*/\n/**\n * Options for synchronously spawning a child process with {@link spawnSync}.\n * Same as {@link SpawnOptions} but excludes the `spinner` property (not applicable for synchronous execution).\n */\nexport type SpawnSyncOptions = Omit<SpawnOptions, 'spinner'>\n\n/**\n * Synchronously spawn a child process and wait for it to complete.\n * Blocks execution until the process exits, returning all output and exit information.\n *\n * WARNING: This function blocks the event loop. Use {@link spawn} for async operations.\n *\n * @param {string} cmd - Command to execute\n * @param {string[] | readonly string[] | undefined} args - Array of arguments\n * @param {SpawnSyncOptions | undefined} options - Spawn options for process configuration\n * @returns {SpawnSyncReturns<string | Buffer>} Process result with exit code and captured output\n *\n * @example\n * // Basic synchronous spawn\n * const result = spawnSync('git', ['status'])\n * console.log(result.stdout)\n * console.log(result.status) // exit code\n *\n * @example\n * // With options\n * const result = spawnSync('npm', ['install'], {\n *   cwd: '/path/to/project',\n *   stdioString: true\n * })\n * if (result.status !== 0) {\n *   console.error(result.stderr)\n * }\n *\n * @example\n * // Get raw buffer output\n * const result = spawnSync('cat', ['binary-file'], {\n *   stdioString: false\n * })\n * console.log(result.stdout) // Buffer\n *\n * @example\n * // Handle process errors\n * const result = spawnSync('nonexistent-command')\n * if (result.error) {\n *   console.error('Failed to spawn:', result.error)\n * }\n */\nexport function spawnSync(\n  cmd: string,\n  args?: string[] | readonly string[],\n  options?: SpawnSyncOptions | undefined,\n): SpawnSyncReturns<string | Buffer> {\n  // Windows cmd.exe command resolution for .cmd/.bat/.ps1 files:\n  // See spawn() function above for detailed explanation of this approach.\n  const shell = getOwn(options, 'shell')\n  // Inline WIN32 constant for coverage mode compatibility\n  const WIN32 = process.platform === 'win32'\n  let actualCmd = cmd\n  if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {\n    const path = getPath()\n    // Extract just the command name without path and extension.\n    actualCmd = path.basename(actualCmd, path.extname(actualCmd))\n  }\n  const { stripAnsi: shouldStripAnsi = true, ...rawSpawnOptions } = {\n    __proto__: null,\n    ...options,\n  } as SpawnSyncOptions\n  const { stdioString: rawStdioString = true } = rawSpawnOptions\n  const rawEncoding = rawStdioString ? 'utf8' : 'buffer'\n  const spawnOptions = {\n    encoding: rawEncoding,\n    ...rawSpawnOptions,\n  } as NodeSpawnOptions & { encoding: BufferEncoding | 'buffer' }\n  const stdioString = spawnOptions.encoding !== 'buffer'\n  const result = getChildProcess().spawnSync(actualCmd, args, spawnOptions)\n  if (stdioString) {\n    const { stderr, stdout } = result\n    if (stdout) {\n      result.stdout = stdout.toString().trim()\n    }\n    if (stderr) {\n      result.stderr = stderr.toString().trim()\n    }\n  }\n  return (\n    shouldStripAnsi && stdioString ? stripAnsiFromSpawnResult(result) : result\n  ) as SpawnSyncReturns<string | Buffer>\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4BA,qBAA2C;AAE3C,oBAAwB;AAKxB,qBAA+B;AAC/B,qBAA0B;AAJ1B,MAAM,kBAAc,+BAAe;AACnC,MAAM,cAAU,2BAAW;AAQ3B,MAAM,yBAAyB;AAE/B,IAAI;AAAA;AAWJ,SAAS,kBAAkB;AACzB,MAAI,mBAAmB,QAAW;AAGhC,qBAA+B,QAAQ,oBAAoB;AAAA,EAC7D;AACA,SAAO;AACT;AAqDA,IAAI;AAAA;AAkBJ,SAAS,wBAAwB;AAC/B,MAAI,wBAAwB,QAAW;AACrC,0BAAoC,QAAQ,kCAAkC;AAAA,EAChF;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAWJ,SAAS,UAAU;AACjB,MAAI,UAAU,QAAW;AAGvB,YAAsB,QAAQ,WAAW;AAAA,EAC3C;AACA,SAAO;AACT;AAAA;AAoIO,SAAS,aAAa,OAAqC;AAChE,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,MAAM;AACZ,aACG,uBAAO,KAAK,MAAM,KAAK,OAAO,IAAI,MAAM,MAAM,mBAC9C,uBAAO,KAAK,OAAO,KAAK,OAAO,IAAI,OAAO,MAAM,mBAChD,uBAAO,KAAK,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM;AAEzD;AAAA;AAuBO,SAAS,YACd,OACA,MACS;AAGT,MAAI,UAAU,WAAW,GAAG;AAC1B,UAAM,aAAa,CAAC,QAAQ,UAAU,WAAW,YAAY;AAC7D,WAAO,OAAO,UAAU,YAAY,WAAW,SAAS,KAAK;AAAA,EAC/D;AAEA,SACE,UAAU,SACR,UAAU,QAAQ,UAAU,WAAc,SAAS,cACpD,uBAAQ,KAAK,KACZ,MAAM,SAAS,KACf,MAAM,CAAC,MAAM,QACb,MAAM,CAAC,MAAM,QACb,MAAM,CAAC,MAAM;AAEnB;AAAA;AAUA,SAAS,yBAAyB,QAA0B;AAC1D,QAAM,MAAM;AAIZ,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,MAAI,OAAO,WAAW,UAAU;AAC9B,QAAI,aAAS,0BAAU,MAAM;AAAA,EAC/B;AACA,MAAI,OAAO,WAAW,UAAU;AAC9B,QAAI,aAAS,0BAAU,MAAM;AAAA,EAC/B;AACA,SAAO;AACT;AA8LO,SAAS,MACd,KACA,MACA,SACA,OACa;AAyBb,QAAM,YAAQ,uBAAO,SAAS,OAAO;AAErC,QAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,YAAY;AAChB,MAAI,SAAS,SAAS,uBAAuB,KAAK,SAAS,GAAG;AAC5D,UAAM,OAAO,wBAAQ;AAErB,gBAAY,KAAK,SAAS,WAAW,KAAK,QAAQ,SAAS,CAAC;AAAA,EAC9D;AACA,QAAM;AAAA,IACJ,SAAS,iBAAiB;AAAA,IAC1B,WAAW,kBAAkB;AAAA,IAC7B,GAAG;AAAA,EACL,IAAI,EAAE,WAAW,MAAM,GAAG,QAAQ;AAClC,QAAM,kBAAkB;AACxB,QAAM,EAAE,KAAK,OAAO,cAAc,KAAK,IAAI;AAG3C,QAAM,cAAc,CAAC,CAAC,iBAAiB;AACvC,QAAM,oBACJ,eAAe,CAAC,4BAAY,OAAO,QAAQ,KAAK,CAAC,4BAAY,OAAO,MAAM;AAC5E,QAAM,uBAAuB;AAC7B,MAAI,mBAAmB;AACrB,oBAAgB,KAAK;AAAA,EACvB;AACA,QAAM,qBAAqB,sCAAsB;AAKjD,QAAM,mBAAmB;AAAA,IACvB,WAAW;AAAA,IACX,KAAK,OAAO,aAAa,QAAQ,WAAW,aAAa,MAAM;AAAA,IAC/D,KAAK;AAAA,MACH,WAAW;AAAA,MACX,GAAG,QAAQ;AAAA,MACX,GAAG;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,OAAO,aAAa;AAAA,IACpB;AAAA,IACA,OAAO,aAAa;AAAA,IACpB,SAAS,aAAa;AAAA,IACtB,KAAK,aAAa;AAAA,IAClB,KAAK,aAAa;AAAA,EACpB;AACA,QAAM,eAAe;AAAA,IACnB;AAAA,IACA,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB;AACxB,MAAI;AACJ,MAAI,mBAAmB,aAAa;AAClC,sBAAkB,aACf,KAAK,YAAU;AACd,YAAM,iBAAiB,yCAAyB,MAAM;AAEtD,UAAI,UAAW,gBAAsC;AACnD;AAAC,QAAC,eAAsD,WACtD,eACA;AAAA,MACJ;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,WAAS;AACd,YAAM,yCAAyB,KAAK;AAAA,IACtC,CAAC;AAAA,EACL,OAAO;AACL,sBAAkB,aAAa,KAAK,YAAU;AAE5C,UAAI,UAAU,QAAQ;AACpB,cAAM,MAAM;AACZ,YAAI,WAAW,OAAO;AACtB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI,sBAAsB;AACxB,sBAAkB,gBAAgB,QAAQ,MAAM;AAC9C,sBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA;AAAC,EAAC,gBAAkD,UAClD,gBAAgB;AACjB,EAAC,gBAAkD,QAClD,gBACA;AACF,SAAO;AACT;AAkDO,SAAS,UACd,KACA,MACA,SACmC;AAGnC,QAAM,YAAQ,uBAAO,SAAS,OAAO;AAErC,QAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,YAAY;AAChB,MAAI,SAAS,SAAS,uBAAuB,KAAK,SAAS,GAAG;AAC5D,UAAM,OAAO,wBAAQ;AAErB,gBAAY,KAAK,SAAS,WAAW,KAAK,QAAQ,SAAS,CAAC;AAAA,EAC9D;AACA,QAAM,EAAE,WAAW,kBAAkB,MAAM,GAAG,gBAAgB,IAAI;AAAA,IAChE,WAAW;AAAA,IACX,GAAG;AAAA,EACL;AACA,QAAM,EAAE,aAAa,iBAAiB,KAAK,IAAI;AAC/C,QAAM,cAAc,iBAAiB,SAAS;AAC9C,QAAM,eAAe;AAAA,IACnB,UAAU;AAAA,IACV,GAAG;AAAA,EACL;AACA,QAAM,cAAc,aAAa,aAAa;AAC9C,QAAM,UAAS,gCAAgB,GAAE,UAAU,WAAW,MAAM,YAAY;AACxE,MAAI,aAAa;AACf,UAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,QAAI,QAAQ;AACV,aAAO,SAAS,OAAO,SAAS,EAAE,KAAK;AAAA,IACzC;AACA,QAAI,QAAQ;AACV,aAAO,SAAS,OAAO,SAAS,EAAE,KAAK;AAAA,IACzC;AAAA,EACF;AACA,SACE,mBAAmB,cAAc,yCAAyB,MAAM,IAAI;AAExE;",
   "names": []
 }