@socketsecurity/lib 3.5.0 → 4.0.0

package/dist/spinner.js

@@ -38,6 +38,7 @@ __export(spinner_exports, {
   withSpinnerSync: () => withSpinnerSync
 });
 module.exports = __toCommonJS(spinner_exports);
+var import_yoctocolors_cjs = __toESM(require("./external/yoctocolors-cjs"));
 var import_colors = require("./colors");
 var import_ci = require("#env/ci");
 var import_debug = require("./debug");
@@ -76,8 +77,7 @@ function renderProgressBar(percentage, width = 20) {
   const filled = Math.round(percentage / 100 * width);
   const empty = width - filled;
   const bar = "\u2588".repeat(filled) + "\u2591".repeat(empty);
-  const colors = require("./external/yoctocolors-cjs.js");
-  return colors.cyan(bar);
+  return import_yoctocolors_cjs.default.cyan(bar);
 }
 let _cliSpinners;
 // @__NO_SIDE_EFFECTS__
@@ -571,40 +571,6 @@ function Spinner(options) {
         }
         return this;
       }
-      /**
-       * Show a reasoning/working message (∴) without stopping the spinner.
-       * Outputs to stderr and continues spinning.
-       *
-       * @param text - Reasoning message to display
-       * @param extras - Additional values to log
-       * @returns This spinner for chaining
-       */
-      reason(text, ...extras) {
-        return this.#showStatusAndKeepSpinning("reason", [text, ...extras]);
-      }
-      /**
-       * Show a reasoning/working message (∴) and stop the spinner.
-       * Auto-clears the spinner line before displaying the message.
-       *
-       * Implementation note: Unlike other *AndStop methods (successAndStop, failAndStop, etc.),
-       * this method cannot use #apply() with a 'reason' method name because yocto-spinner
-       * doesn't have a built-in 'reason' method. Instead, we manually stop the spinner then
-       * log the message with the reason symbol. This matches the pattern used by methods
-       * like debugAndStop() and maintains consistency with normalizeText() usage and empty
-       * string handling (see #apply's stop method handling for the pattern).
-       *
-       * @param text - Reasoning message to display
-       * @param extras - Additional values to log
-       * @returns This spinner for chaining
-       */
-      reasonAndStop(text, ...extras) {
-        this.#apply("stop", []);
-        const normalized = normalizeText(text);
-        if (normalized) {
-          logger.error(`${import_logger.LOG_SYMBOLS.reason} ${normalized}`, ...extras);
-        }
-        return this;
-      }
       /**
        * Show a skip message (↻) without stopping the spinner.
        * Outputs to stderr and continues spinning.
@@ -620,9 +586,10 @@ function Spinner(options) {
        * Show a skip message (↻) and stop the spinner.
        * Auto-clears the spinner line before displaying the message.
        *
-       * Implementation note: Similar to reasonAndStop(), this method cannot use #apply()
-       * with a 'skip' method name because yocto-spinner doesn't have a built-in 'skip'
-       * method. Instead, we manually stop the spinner then log the message with the skip symbol.
+       * Implementation note: Unlike other *AndStop methods (successAndStop, failAndStop, etc.),
+       * this method cannot use #apply() with a 'skip' method name because yocto-spinner doesn't
+       * have a built-in 'skip' method. Instead, we manually stop the spinner then log the message
+       * with the skip symbol.
        *
        * @param text - Skip message to display
        * @param extras - Additional values to log

package/dist/stdio/prompts.d.ts

@@ -1,5 +1,13 @@
+import checkboxRaw from '../external/@inquirer/checkbox';
+import confirmRaw from '../external/@inquirer/confirm';
+import inputRaw from '../external/@inquirer/input';
+import passwordRaw from '../external/@inquirer/password';
 import { type ThemeName } from '../themes/themes';
 import type { Theme } from '../themes/types';
+// Modules imported at the top - extract default and Separator
+declare const searchRaw: any;
+declare const selectRaw: any;
+declare const ActualSeparator: any;
 // Type definitions
 /**
  * Choice option for select and search prompts.
@@ -98,16 +106,6 @@ export declare function createInquirerTheme(theme: Theme | ThemeName | unknown):
  */
 /*@__NO_SIDE_EFFECTS__*/
 export declare function wrapPrompt<T = unknown>(inquirerPrompt: (...args: unknown[]) => Promise<T>): (...args: unknown[]) => Promise<T | undefined>;
-// c8 ignore start - Third-party inquirer library requires and exports not testable in isolation.
-declare const checkboxRaw: any;
-declare const confirmRaw: any;
-declare const inputRaw: any;
-declare const passwordRaw: any;
-// Search and select export additional named exports, so we access .default.
-declare const searchRaw: any;
-declare const selectRaw: any;
-declare const ActualSeparator: any;
-// c8 ignore stop
 /**
  * Prompt to select multiple items from a list of choices.
  * Wrapped with spinner handling and abort signal support.

package/dist/stdio/prompts.js

@@ -42,12 +42,22 @@ __export(prompts_exports, {
 });
 module.exports = __toCommonJS(prompts_exports);
 var import_process = require("#constants/process");
+var import_checkbox = __toESM(require("../external/@inquirer/checkbox"));
+var import_confirm = __toESM(require("../external/@inquirer/confirm"));
+var import_input = __toESM(require("../external/@inquirer/input"));
+var import_password = __toESM(require("../external/@inquirer/password"));
+var searchModule = __toESM(require("../external/@inquirer/search"));
+var selectModuleImport = __toESM(require("../external/@inquirer/select"));
 var import_context = require("../themes/context");
 var import_themes = require("../themes/themes");
 var import_utils = require("../themes/utils");
 var import_yoctocolors_cjs = __toESM(require("../external/yoctocolors-cjs"));
 const abortSignal = (0, import_process.getAbortSignal)();
 const spinner = (0, import_process.getSpinner)();
+const searchRaw = searchModule.default;
+const selectModule = selectModuleImport;
+const selectRaw = selectModule.default;
+const ActualSeparator = selectModule.Separator;
 function applyColor(text, color) {
   if (typeof color === "string") {
     return import_yoctocolors_cjs.default[color](text);
@@ -141,18 +151,10 @@ function wrapPrompt(inquirerPrompt) {
     return typeof result === "string" ? result.trim() : result;
   };
 }
-const checkboxRaw = require("../external/@inquirer/checkbox");
-const confirmRaw = require("../external/@inquirer/confirm");
-const inputRaw = require("../external/@inquirer/input");
-const passwordRaw = require("../external/@inquirer/password");
-const searchRaw = require("../external/@inquirer/search").default;
-const selectModule = require("../external/@inquirer/select");
-const selectRaw = selectModule.default;
-const ActualSeparator = selectModule.Separator;
-const checkbox = /* @__PURE__ */ wrapPrompt(checkboxRaw);
-const confirm = /* @__PURE__ */ wrapPrompt(confirmRaw);
-const input = /* @__PURE__ */ wrapPrompt(inputRaw);
-const password = /* @__PURE__ */ wrapPrompt(passwordRaw);
+const checkbox = /* @__PURE__ */ wrapPrompt(import_checkbox.default);
+const confirm = /* @__PURE__ */ wrapPrompt(import_confirm.default);
+const input = /* @__PURE__ */ wrapPrompt(import_input.default);
+const password = /* @__PURE__ */ wrapPrompt(import_password.default);
 const search = /* @__PURE__ */ wrapPrompt(searchRaw);
 const select = /* @__PURE__ */ wrapPrompt(selectRaw);
 function createSeparator(text) {

package/dist/streams.d.ts

@@ -1,7 +1,3 @@
-/**
- * @fileoverview Stream processing utilities with streaming-iterables integration.
- * Provides async stream handling and transformation functions.
- */
 import type { IterationOptions } from './promises';
 /**
  * Execute a function for each item in an iterable in parallel.

package/dist/streams.js

@@ -24,15 +24,8 @@ __export(streams_exports, {
   transform: () => transform
 });
 module.exports = __toCommonJS(streams_exports);
+var import_streaming_iterables = require("./external/streaming-iterables");
 var import_promises = require("./promises");
-let _streamingIterables;
-// @__NO_SIDE_EFFECTS__
-function getStreamingIterables() {
-  if (_streamingIterables === void 0) {
-    _streamingIterables = require("./external/streaming-iterables.js");
-  }
-  return _streamingIterables;
-}
 // @__NO_SIDE_EFFECTS__
 async function parallelEach(iterable, func, options) {
   for await (const _ of /* @__PURE__ */ parallelMap(iterable, func, options)) {
@@ -40,9 +33,8 @@ async function parallelEach(iterable, func, options) {
 }
 // @__NO_SIDE_EFFECTS__
 function parallelMap(iterable, func, options) {
-  const streamingIterables = /* @__PURE__ */ getStreamingIterables();
   const opts = (0, import_promises.normalizeIterationOptions)(options);
-  const result = streamingIterables?.parallelMap(
+  const result = (0, import_streaming_iterables.parallelMap)(
     opts.concurrency,
     async (item) => {
       const result2 = await (0, import_promises.pRetry)((...args) => func(args[0]), {
@@ -57,9 +49,8 @@ function parallelMap(iterable, func, options) {
 }
 // @__NO_SIDE_EFFECTS__
 function transform(iterable, func, options) {
-  const streamingIterables = /* @__PURE__ */ getStreamingIterables();
   const opts = (0, import_promises.normalizeIterationOptions)(options);
-  const result = streamingIterables?.transform(
+  const result = (0, import_streaming_iterables.transform)(
     opts.concurrency,
     async (item) => {
       const result2 = await (0, import_promises.pRetry)((...args) => func(args[0]), {

package/dist/temporary-executor.js

@@ -23,15 +23,15 @@ __export(temporary_executor_exports, {
 });
 module.exports = __toCommonJS(temporary_executor_exports);
 var import_platform = require("#constants/platform");
-var import_path = require("./path");
+var import_normalize = require("./paths/normalize");
 function isRunningInTemporaryExecutor(cwd = process.cwd()) {
   const userAgent = process.env["npm_config_user_agent"];
   if (userAgent?.includes("exec") || userAgent?.includes("npx") || userAgent?.includes("dlx")) {
     return true;
   }
-  const normalizedCwd = (0, import_path.normalizePath)(cwd);
+  const normalizedCwd = (0, import_normalize.normalizePath)(cwd);
   const npmCache = process.env["npm_config_cache"];
-  if (npmCache && normalizedCwd.includes((0, import_path.normalizePath)(npmCache))) {
+  if (npmCache && normalizedCwd.includes((0, import_normalize.normalizePath)(npmCache))) {
     return true;
   }
   const tempPatterns = [

package/dist/versions.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var versions_exports = {};
 __export(versions_exports, {
@@ -41,69 +51,62 @@ __export(versions_exports, {
   versionDiff: () => versionDiff
 });
 module.exports = __toCommonJS(versions_exports);
-let _semver;
-// @__NO_SIDE_EFFECTS__
-function getSemver() {
-  if (_semver === void 0) {
-    _semver = require("./external/semver.js");
-  }
-  return _semver;
-}
+var semver = __toESM(require("./external/semver.js"));
 function coerceVersion(version) {
-  const coerced = (/* @__PURE__ */ getSemver()).coerce(version);
+  const coerced = semver.coerce(version);
   return coerced?.version;
 }
 function compareVersions(v1, v2) {
   try {
-    return (/* @__PURE__ */ getSemver()).compare(v1, v2);
+    return semver.compare(v1, v2);
   } catch {
     return void 0;
   }
 }
 function filterVersions(versions, range) {
-  return versions.filter((v) => (/* @__PURE__ */ getSemver()).satisfies(v, range));
+  return versions.filter((v) => semver.satisfies(v, range));
 }
 function getMajorVersion(version) {
-  const parsed = (/* @__PURE__ */ getSemver()).parse(version);
+  const parsed = semver.parse(version);
   return parsed?.major;
 }
 function getMinorVersion(version) {
-  const parsed = (/* @__PURE__ */ getSemver()).parse(version);
+  const parsed = semver.parse(version);
   return parsed?.minor;
 }
 function getPatchVersion(version) {
-  const parsed = (/* @__PURE__ */ getSemver()).parse(version);
+  const parsed = semver.parse(version);
   return parsed?.patch;
 }
 function incrementVersion(version, release, identifier) {
-  return (/* @__PURE__ */ getSemver()).inc(version, release, identifier) || void 0;
+  return semver.inc(version, release, identifier) || void 0;
 }
 function isEqual(version1, version2) {
-  return (/* @__PURE__ */ getSemver()).eq(version1, version2);
+  return semver.eq(version1, version2);
 }
 function isGreaterThan(version1, version2) {
-  return (/* @__PURE__ */ getSemver()).gt(version1, version2);
+  return semver.gt(version1, version2);
 }
 function isGreaterThanOrEqual(version1, version2) {
-  return (/* @__PURE__ */ getSemver()).gte(version1, version2);
+  return semver.gte(version1, version2);
 }
 function isLessThan(version1, version2) {
-  return (/* @__PURE__ */ getSemver()).lt(version1, version2);
+  return semver.lt(version1, version2);
 }
 function isLessThanOrEqual(version1, version2) {
-  return (/* @__PURE__ */ getSemver()).lte(version1, version2);
+  return semver.lte(version1, version2);
 }
 function isValidVersion(version) {
-  return (/* @__PURE__ */ getSemver()).valid(version) !== null;
+  return semver.valid(version) !== null;
 }
 function maxVersion(versions) {
-  return (/* @__PURE__ */ getSemver()).maxSatisfying(versions, "*") || void 0;
+  return semver.maxSatisfying(versions, "*") || void 0;
 }
 function minVersion(versions) {
-  return (/* @__PURE__ */ getSemver()).minSatisfying(versions, "*") || void 0;
+  return semver.minSatisfying(versions, "*") || void 0;
 }
 function parseVersion(version) {
-  const parsed = (/* @__PURE__ */ getSemver()).parse(version);
+  const parsed = semver.parse(version);
   if (!parsed) {
     return void 0;
   }
@@ -116,17 +119,17 @@ function parseVersion(version) {
   };
 }
 function satisfiesVersion(version, range) {
-  return (/* @__PURE__ */ getSemver()).satisfies(version, range);
+  return semver.satisfies(version, range);
 }
 function sortVersions(versions) {
-  return (/* @__PURE__ */ getSemver()).sort([...versions]);
+  return semver.sort([...versions]);
 }
 function sortVersionsDesc(versions) {
-  return (/* @__PURE__ */ getSemver()).rsort([...versions]);
+  return semver.rsort([...versions]);
 }
 function versionDiff(version1, version2) {
   try {
-    return (/* @__PURE__ */ getSemver()).diff(version1, version2) || void 0;
+    return semver.diff(version1, version2) || void 0;
   } catch {
     return void 0;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "3.5.0",
+  "version": "4.0.0",
   "packageManager": "pnpm@10.22.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
@@ -111,10 +111,6 @@
       "types": "./dist/argv/parse.d.ts",
       "default": "./dist/argv/parse.js"
     },
-    "./argv/quote": {
-      "types": "./dist/argv/quote.d.ts",
-      "default": "./dist/argv/quote.js"
-    },
     "./arrays": {
       "types": "./dist/arrays.d.ts",
       "default": "./dist/arrays.js"
@@ -163,10 +159,6 @@
       "types": "./dist/constants/packages.d.ts",
       "default": "./dist/constants/packages.js"
     },
-    "./constants/paths": {
-      "types": "./dist/constants/paths.d.ts",
-      "default": "./dist/constants/paths.js"
-    },
     "./constants/platform": {
       "types": "./dist/constants/platform.d.ts",
       "default": "./dist/constants/platform.js"
@@ -439,10 +431,6 @@
       "types": "./dist/packages/operations.d.ts",
       "default": "./dist/packages/operations.js"
     },
-    "./packages/paths": {
-      "types": "./dist/packages/paths.d.ts",
-      "default": "./dist/packages/paths.js"
-    },
     "./packages/provenance": {
       "types": "./dist/packages/provenance.d.ts",
       "default": "./dist/packages/provenance.js"
@@ -455,18 +443,38 @@
       "types": "./dist/packages/validation.d.ts",
       "default": "./dist/packages/validation.js"
     },
-    "./path": {
-      "types": "./dist/path.d.ts",
-      "default": "./dist/path.js"
+    "./paths/dirnames": {
+      "types": "./dist/paths/dirnames.d.ts",
+      "default": "./dist/paths/dirnames.js"
+    },
+    "./paths/exts": {
+      "types": "./dist/paths/exts.d.ts",
+      "default": "./dist/paths/exts.js"
     },
-    "./paths": {
-      "types": "./dist/paths.d.ts",
-      "default": "./dist/paths.js"
+    "./paths/filenames": {
+      "types": "./dist/paths/filenames.d.ts",
+      "default": "./dist/paths/filenames.js"
+    },
+    "./paths/globs": {
+      "types": "./dist/paths/globs.d.ts",
+      "default": "./dist/paths/globs.js"
+    },
+    "./paths/normalize": {
+      "types": "./dist/paths/normalize.d.ts",
+      "default": "./dist/paths/normalize.js"
+    },
+    "./paths/packages": {
+      "types": "./dist/paths/packages.d.ts",
+      "default": "./dist/paths/packages.js"
     },
     "./paths/rewire": {
       "types": "./dist/paths/rewire.d.ts",
       "default": "./dist/paths/rewire.js"
     },
+    "./paths/socket": {
+      "types": "./dist/paths/socket.d.ts",
+      "default": "./dist/paths/socket.js"
+    },
     "./performance": {
       "types": "./dist/performance.d.ts",
       "default": "./dist/performance.js"
@@ -691,7 +699,7 @@
     "@socketregistry/is-unicode-supported": "1.0.5",
     "@socketregistry/packageurl-js": "1.3.5",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@3.4.0",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@3.5.0",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250920.1",
     "@vitest/coverage-v8": "4.0.3",

package/dist/argv/quote.d.ts

@@ -1,49 +0,0 @@
-/**
- * Argument quoting utilities for shell execution with spawn()
- *
- * These functions handle quoting of command-line arguments when using
- * child_process.spawn() with shell: true.
- *
- * IMPORTANT: Only needed when shell: true. With shell: false, arguments
- * are passed directly to the OS kernel as an array (no quoting needed).
- */
-/**
- * Quote an argument for POSIX shell execution (bash, sh, zsh).
- *
- * Uses single quotes (POSIX standard) which prevent all expansions except
- * single quotes themselves. Internal single quotes are escaped using '\''
- *
- * @param arg - Argument to quote
- * @returns Quoted argument safe for POSIX shells when using shell: true
- *
- * @example
- * ```ts
- * import { posixQuote } from '@socketsecurity/lib/argv/quote'
- *
- * // With shell: true on Unix
- * const path = '/path/with spaces/file.txt'
- * spawn('sh', ['-c', 'cat', posixQuote(path)], { shell: true })
- * // sh receives: sh -c cat '/path/with spaces/file.txt'
- * ```
- */
-export declare function posixQuote(arg: string): string;
-/**
- * Quote an argument for Windows cmd.exe shell execution.
- *
- * Uses double quotes (cmd.exe standard) and escapes internal quotes by doubling.
- * Handles all cmd.exe special characters: space, &, |, <, >, ^, %, (, ), !, "
- *
- * @param arg - Argument to quote
- * @returns Quoted argument safe for cmd.exe when using shell: true
- *
- * @example
- * ```ts
- * import { win32Quote } from '@socketsecurity/lib/argv/quote'
- *
- * // With shell: true on Windows
- * const path = 'C:\\Program Files\\app.exe'
- * spawn('cmd', ['/c', 'app', win32Quote(path)], { shell: true })
- * // cmd.exe receives: cmd /c app "C:\Program Files\app.exe"
- * ```
- */
-export declare function win32Quote(arg: string): string;

package/dist/constants/paths.d.ts

@@ -1,51 +0,0 @@
-/**
- * File paths, directory names, extensions, and glob patterns.
- */
-// File names.
-export declare const PACKAGE_JSON = "package.json";
-export declare const TSCONFIG_JSON = "tsconfig.json";
-export declare const LICENSE = "LICENSE";
-export declare const LICENSE_MD = "LICENSE.md";
-export declare const LICENSE_ORIGINAL = "LICENSE.original";
-export declare const README_MD = "README.md";
-export declare const CHANGELOG_MD = "CHANGELOG.md";
-export declare const MANIFEST_JSON = "manifest.json";
-export declare const EXTENSIONS_JSON = "extensions.json";
-export declare const ESLINT_CONFIG_JS = "eslint.config.js";
-export declare const GITIGNORE = ".gitignore";
-export declare const DOT_PACKAGE_LOCK_JSON = ".package-lock.json";
-// Directory names.
-export declare const NODE_MODULES = "node_modules";
-export declare const DOT_GIT_DIR = ".git";
-export declare const DOT_GITHUB = ".github";
-export declare const DOT_SOCKET_DIR = ".socket";
-export declare const CACHE_DIR = "cache";
-export declare const CACHE_TTL_DIR = "ttl";
-// Path patterns.
-export declare const NODE_MODULES_GLOB_RECURSIVE = "**/node_modules";
-export declare const SLASH_NODE_MODULES_SLASH = "/node_modules/";
-// File extensions.
-export declare const EXT_CJS = ".cjs";
-export declare const EXT_CMD = ".cmd";
-export declare const EXT_CTS = ".cts";
-export declare const EXT_DTS = ".d.ts";
-export declare const EXT_JS = ".js";
-export declare const EXT_JSON = ".json";
-export declare const EXT_LOCK = ".lock";
-export declare const EXT_LOCKB = ".lockb";
-export declare const EXT_MD = ".md";
-export declare const EXT_MJS = ".mjs";
-export declare const EXT_MTS = ".mts";
-export declare const EXT_PS1 = ".ps1";
-export declare const EXT_YAML = ".yaml";
-export declare const EXT_YML = ".yml";
-// Glob patterns.
-export declare const LICENSE_GLOB = "LICEN[CS]E{[.-]*,}";
-export declare const LICENSE_GLOB_RECURSIVE = "**/LICEN[CS]E{[.-]*,}";
-export declare const LICENSE_ORIGINAL_GLOB = "*.original{.*,}";
-export declare const LICENSE_ORIGINAL_GLOB_RECURSIVE = "**/*.original{.*,}";
-export declare const README_GLOB = "README{.*,}";
-export declare const README_GLOB_RECURSIVE = "**/README{.*,}";
-// Miscellaneous path constants.
-export declare const EXTENSIONS = "extensions";
-export declare const ROLLUP_EXTERNAL_SUFFIX = "__rollup_external";