@socketsecurity/lib 3.2.8 → 3.3.1

package/dist/packages/isolation.js

@@ -23,10 +23,10 @@ __export(isolation_exports, {
 });
 module.exports = __toCommonJS(isolation_exports);
 var import_fs = require("fs");
-var import_platform = require("../constants/platform");
+var import_platform = require("#constants/platform");
 var import_path = require("../path");
 var import_operations = require("./operations");
-var import_paths = require("../paths");
+var import_paths = require("#lib/paths");
 let _path;
 // @__NO_SIDE_EFFECTS__
 function getPath() {

package/dist/packages/licenses.js

@@ -29,8 +29,8 @@ __export(licenses_exports, {
   visitLicenses: () => visitLicenses
 });
 module.exports = __toCommonJS(licenses_exports);
-var import_core = require("../constants/core");
-var import_licenses = require("../constants/licenses");
+var import_core = require("#constants/core");
+var import_licenses = require("#constants/licenses");
 var import_objects = require("../objects");
 var import_path = require("../path");
 const copyLeftLicenses = (0, import_licenses.getCopyLeftLicenses)();

package/dist/packages/manifest.js

@@ -24,9 +24,9 @@ __export(manifest_exports, {
   fetchPackagePackument: () => fetchPackagePackument
 });
 module.exports = __toCommonJS(manifest_exports);
-var import_packages = require("../constants/packages");
-var import_process = require("../constants/process");
-var import_socket = require("../constants/socket");
+var import_packages = require("#constants/packages");
+var import_process = require("#constants/process");
+var import_socket = require("#constants/socket");
 var import_arrays = require("../arrays");
 var import_objects = require("../objects");
 var import_exports = require("./exports");

package/dist/packages/normalize.js

@@ -71,7 +71,7 @@ let _findPackageExtensions;
 // @__NO_SIDE_EFFECTS__
 function _getFindPackageExtensions() {
   if (_findPackageExtensions === void 0) {
-    const operations = require("./operations");
+    const operations = require("#packages/operations");
     _findPackageExtensions = operations.findPackageExtensions;
   }
   return _findPackageExtensions;

package/dist/packages/operations.js

@@ -30,9 +30,9 @@ __export(operations_exports, {
   resolveRegistryPackageName: () => resolveRegistryPackageName
 });
 module.exports = __toCommonJS(operations_exports);
-var import_packages = require("../constants/packages");
-var import_process = require("../constants/process");
-var import_socket = require("../constants/socket");
+var import_packages = require("#constants/packages");
+var import_process = require("#constants/process");
+var import_socket = require("#constants/socket");
 var import_fs = require("../fs");
 var import_objects = require("../objects");
 var import_normalize = require("./normalize");
@@ -110,7 +110,7 @@ let _toEditablePackageJson;
 // @__NO_SIDE_EFFECTS__
 function _getToEditablePackageJson() {
   if (_toEditablePackageJson === void 0) {
-    _toEditablePackageJson = require("./editable").toEditablePackageJson;
+    _toEditablePackageJson = require("#packages/editable").toEditablePackageJson;
   }
   return _toEditablePackageJson;
 }
@@ -118,7 +118,7 @@ let _toEditablePackageJsonSync;
 // @__NO_SIDE_EFFECTS__
 function _getToEditablePackageJsonSync() {
   if (_toEditablePackageJsonSync === void 0) {
-    _toEditablePackageJsonSync = require("./editable").toEditablePackageJsonSync;
+    _toEditablePackageJsonSync = require("#packages/editable").toEditablePackageJsonSync;
   }
   return _toEditablePackageJsonSync;
 }

package/dist/packages/provenance.js

@@ -23,7 +23,7 @@ __export(provenance_exports, {
   getProvenanceDetails: () => getProvenanceDetails
 });
 module.exports = __toCommonJS(provenance_exports);
-var import_agents = require("../constants/agents");
+var import_agents = require("#constants/agents");
 var import_abort = require("../abort");
 var import_url = require("../url");
 const ArrayIsArray = Array.isArray;

package/dist/path.d.ts

@@ -162,6 +162,13 @@ export declare function isRelative(pathLike: string | Buffer | URL): boolean;
  * @param {string | Buffer | URL} pathLike - The path to normalize
  * @returns {string} The normalized path with forward slashes and collapsed segments
  *
+ * @security
+ * **WARNING**: This function resolves `..` patterns as part of normalization, which means
+ * paths like `/../etc/passwd` become `/etc/passwd`. When processing untrusted user input
+ * (HTTP requests, file uploads, URL parameters), you MUST validate for path traversal
+ * attacks BEFORE calling this function. Check for patterns like `..`, `%2e%2e`, `\..`,
+ * and other traversal encodings first.
+ *
  * @example
  * ```typescript
  * // Basic normalization
@@ -182,6 +189,10 @@ export declare function isRelative(pathLike: string | Buffer | URL): boolean;
  * normalizePath('..')                        // '..'
  * normalizePath('///foo///bar///')           // '/foo/bar'
  * normalizePath('foo/../..')                 // '..'
+ *
+ * // Security: Path traversal is resolved (intended behavior for trusted paths)
+ * normalizePath('/../etc/passwd')            // '/etc/passwd' ⚠️
+ * normalizePath('/safe/../../unsafe')        // '/unsafe' ⚠️
  * ```
  */
 /*@__NO_SIDE_EFFECTS__*/

package/dist/path.js

@@ -30,7 +30,7 @@ __export(path_exports, {
   trimLeadingDotSlash: () => trimLeadingDotSlash
 });
 module.exports = __toCommonJS(path_exports);
-var import_platform = require("./constants/platform");
+var import_platform = require("#constants/platform");
 var import_strings = require("./strings");
 const CHAR_BACKWARD_SLASH = 92;
 const CHAR_COLON = 58;

package/dist/paths.js

@@ -47,9 +47,9 @@ __export(paths_exports, {
 module.exports = __toCommonJS(paths_exports);
 var os = __toESM(require("os"));
 var path = __toESM(require("path"));
-var import_home = require("./env/home");
-var import_socket = require("./env/socket");
-var import_windows = require("./env/windows");
+var import_home = require("#env/home");
+var import_socket = require("#env/socket");
+var import_windows = require("#env/windows");
 var import_path = require("./path");
 var import_rewire = require("./paths/rewire");
 function getOsHomeDir() {
@@ -68,7 +68,7 @@ function getSocketUserDir() {
       path.join(
         getUserHomeDir(),
         /*@__INLINE__*/
-        require("./constants/paths").DOT_SOCKET_DIR
+        require("#constants/paths").DOT_SOCKET_DIR
       )
     );
   }
@@ -79,7 +79,7 @@ function getSocketAppDir(appName) {
     path.join(
       getSocketUserDir(),
       `${/*@__INLINE__*/
-      require("./constants/socket").SOCKET_APP_PREFIX}${appName}`
+      require("#constants/socket").SOCKET_APP_PREFIX}${appName}`
     )
   );
 }
@@ -95,7 +95,7 @@ function getSocketCacacheDir() {
         path.join(
           getSocketUserDir(),
           `${/*@__INLINE__*/
-          require("./constants/socket").SOCKET_APP_PREFIX}cacache`
+          require("#constants/socket").SOCKET_APP_PREFIX}cacache`
         )
       );
     }
@@ -110,8 +110,8 @@ function getSocketDlxDir() {
     path.join(
       getSocketUserDir(),
       `${/*@__INLINE__*/
-      require("./constants/socket").SOCKET_APP_PREFIX}${/*@__INLINE__*/
-      require("./constants/socket").SOCKET_DLX_APP_NAME}`
+      require("#constants/socket").SOCKET_APP_PREFIX}${/*@__INLINE__*/
+      require("#constants/socket").SOCKET_DLX_APP_NAME}`
     )
   );
 }
@@ -120,7 +120,7 @@ function getSocketAppCacheDir(appName) {
     path.join(
       getSocketAppDir(appName),
       /*@__INLINE__*/
-      require("./constants/paths").CACHE_DIR
+      require("#constants/paths").CACHE_DIR
     )
   );
 }
@@ -129,20 +129,20 @@ function getSocketAppCacheTtlDir(appName) {
     path.join(
       getSocketAppCacheDir(appName),
       /*@__INLINE__*/
-      require("./constants/paths").CACHE_TTL_DIR
+      require("#constants/paths").CACHE_TTL_DIR
     )
   );
 }
 function getSocketCliDir() {
   return getSocketAppDir(
     /*@__INLINE__*/
-    require("./constants/socket").SOCKET_CLI_APP_NAME
+    require("#constants/socket").SOCKET_CLI_APP_NAME
   );
 }
 function getSocketRegistryDir() {
   return getSocketAppDir(
     /*@__INLINE__*/
-    require("./constants/socket").SOCKET_REGISTRY_APP_NAME
+    require("#constants/socket").SOCKET_REGISTRY_APP_NAME
   );
 }
 function getSocketRegistryGithubCacheDir() {
@@ -150,10 +150,10 @@ function getSocketRegistryGithubCacheDir() {
     path.join(
       getSocketAppCacheTtlDir(
         /*@__INLINE__*/
-        require("./constants/socket").SOCKET_REGISTRY_APP_NAME
+        require("#constants/socket").SOCKET_REGISTRY_APP_NAME
       ),
       /*@__INLINE__*/
-      require("./constants/github").CACHE_GITHUB_DIR
+      require("#constants/github").CACHE_GITHUB_DIR
     )
   );
 }

package/dist/promises.js

@@ -29,8 +29,8 @@ __export(promises_exports, {
   resolveRetryOptions: () => resolveRetryOptions
 });
 module.exports = __toCommonJS(promises_exports);
-var import_core = require("./constants/core");
-var import_process = require("./constants/process");
+var import_core = require("#constants/core");
+var import_process = require("#constants/process");
 var import_arrays = require("./arrays");
 const abortSignal = (0, import_process.getAbortSignal)();
 let _timers;

package/dist/spawn.js

@@ -25,7 +25,7 @@ __export(spawn_exports, {
   spawnSync: () => spawnSync
 });
 module.exports = __toCommonJS(spawn_exports);
-var import_process = require("./constants/process");
+var import_process = require("#constants/process");
 var import_arrays = require("./arrays");
 var import_objects = require("./objects");
 var import_strings = require("./strings");

package/dist/spinner.d.ts

@@ -3,39 +3,13 @@
  * Provides animated progress indicators with CI environment detection.
  */
 import type { Writable } from 'stream';
+import type { ColorInherit, ColorRgb, ColorValue } from './colors';
 import type { ShimmerColorGradient, ShimmerConfig, ShimmerDirection, ShimmerState } from './effects/text-shimmer';
-/**
- * Named color values supported by the spinner.
- * Maps to standard terminal colors with bright variants.
- */
-export type ColorName = 'black' | 'blue' | 'blueBright' | 'cyan' | 'cyanBright' | 'gray' | 'green' | 'greenBright' | 'magenta' | 'magentaBright' | 'red' | 'redBright' | 'white' | 'whiteBright' | 'yellow' | 'yellowBright';
-/**
- * Special 'inherit' color value that uses the spinner's current color.
- * Used with shimmer effects to dynamically inherit the spinner color.
- */
-export type ColorInherit = 'inherit';
-/**
- * RGB color tuple with values 0-255 for red, green, and blue channels.
- * @example [140, 82, 255] // Socket purple
- * @example [255, 0, 0]    // Red
- */
-export type ColorRgb = readonly [number, number, number];
-/**
- * Union of all supported color types: named colors or RGB tuples.
- */
-export type ColorValue = ColorName | ColorRgb;
 /**
  * Symbol types for status messages.
- * Maps to log symbols: success (✓), fail (✗), info (ℹ), warn (⚠).
- */
-export type SymbolType = 'fail' | 'info' | 'success' | 'warn';
-/**
- * Convert a color value to RGB tuple format.
- * Named colors are looked up in the `colorToRgb` map, RGB tuples are returned as-is.
- * @param color - Color name or RGB tuple
- * @returns RGB tuple with values 0-255
+ * Maps to log symbols: fail (✗), info (ℹ), reason (∴), success (✓), warn (⚠).
  */
-export declare function toRgb(color: ColorValue): ColorRgb;
+export type SymbolType = 'fail' | 'info' | 'reason' | 'success' | 'warn';
 /**
  * Progress tracking information for display in spinner.
  * Used by `progress()` and `progressStep()` methods to show animated progress bars.
@@ -63,7 +37,7 @@ export type ShimmerInfo = ShimmerState & {
  * KEY BEHAVIORS:
  * - Methods WITHOUT "AndStop" keep the spinner running (e.g., `success()`, `fail()`)
  * - Methods WITH "AndStop" auto-clear the spinner line (e.g., `successAndStop()`, `failAndStop()`)
- * - Status messages (done, success, fail, info, warn, step, substep) go to stderr
+ * - Status messages (done, success, fail, info, warn, reason, step, substep) go to stderr
  * - Data messages (`log()`) go to stdout
  *
  * @example
@@ -95,6 +69,16 @@ export type Spinner = {
     debug(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show debug message and stop the spinner (only if debug mode enabled) */
     debugAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Decrease indentation by specified spaces (default: 2) */
+    dedent(spaces?: number | undefined): Spinner;
+    /** Disable shimmer effect (preserves config for later re-enable) */
+    disableShimmer(): Spinner;
+    /** Alias for `success()` - show success without stopping */
+    done(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Alias for `successAndStop()` - show success and stop */
+    doneAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Enable shimmer effect (restores saved config or uses defaults) */
+    enableShimmer(): Spinner;
     /** Alias for `fail()` - show error without stopping */
     error(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Alias for `failAndStop()` - show error and stop */
@@ -103,13 +87,8 @@ export type Spinner = {
     fail(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show failure (✗) and stop the spinner, auto-clearing the line */
     failAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
-    /** Get current spinner text (getter) or set new text (setter) */
-    text(value: string): Spinner;
-    text(): string;
     /** Increase indentation by specified spaces (default: 2) */
     indent(spaces?: number | undefined): Spinner;
-    /** Decrease indentation by specified spaces (default: 2) */
-    dedent(spaces?: number | undefined): Spinner;
     /** Show info (ℹ) message without stopping the spinner */
     info(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show info (ℹ) message and stop the spinner, auto-clearing the line */
@@ -118,34 +97,33 @@ export type Spinner = {
     log(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Log and stop the spinner, auto-clearing the line */
     logAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Update progress bar with current/total values and optional unit */
+    progress(current: number, total: number, unit?: string | undefined): Spinner;
+    /** Increment progress by specified amount (default: 1) */
+    progressStep(amount?: number): Spinner;
+    /** Show reasoning (∴) message without stopping the spinner */
+    reason(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Show reasoning (∴) message and stop the spinner, auto-clearing the line */
+    reasonAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
+    /** Set complete shimmer configuration */
+    setShimmer(config: ShimmerConfig): Spinner;
     /** Start spinning with optional text */
     start(text?: string | undefined): Spinner;
+    /** Show main step message to stderr without stopping */
+    step(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Stop spinning and clear internal state, auto-clearing the line */
     stop(text?: string | undefined): Spinner;
     /** Stop and show final text without clearing the line */
     stopAndPersist(text?: string | undefined): Spinner;
-    /** Show main step message to stderr without stopping */
-    step(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show indented substep message to stderr without stopping */
     substep(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show success (✓) without stopping the spinner */
     success(text?: string | undefined, ...extras: unknown[]): Spinner;
     /** Show success (✓) and stop the spinner, auto-clearing the line */
     successAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
-    /** Alias for `success()` - show success without stopping */
-    done(text?: string | undefined, ...extras: unknown[]): Spinner;
-    /** Alias for `successAndStop()` - show success and stop */
-    doneAndStop(text?: string | undefined, ...extras: unknown[]): Spinner;
-    /** Update progress bar with current/total values and optional unit */
-    progress(current: number, total: number, unit?: string | undefined): Spinner;
-    /** Increment progress by specified amount (default: 1) */
-    progressStep(amount?: number): Spinner;
-    /** Enable shimmer effect (restores saved config or uses defaults) */
-    enableShimmer(): Spinner;
-    /** Disable shimmer effect (preserves config for later re-enable) */
-    disableShimmer(): Spinner;
-    /** Set complete shimmer configuration */
-    setShimmer(config: ShimmerConfig): Spinner;
+    /** Get current spinner text (getter) or set new text (setter) */
+    text(value: string): Spinner;
+    text(): string;
     /** Update partial shimmer configuration */
     updateShimmer(config: Partial<ShimmerConfig>): Spinner;
     /** Show warning (⚠) without stopping the spinner */