@socketsecurity/lib 4.0.0 → 4.1.0

package/CHANGELOG.md

@@ -5,6 +5,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.1.0](https://github.com/SocketDev/socket-lib/releases/tag/v4.1.0) - 2025-11-17
+
+### Added
+
+- **constants/node**: New version helper functions for cleaner version detection
+  - `getNodeMinorVersion()`: Extract minor version number
+  - `getNodePatchVersion()`: Extract patch version number
+
+### Fixed
+
+- **constants/node**: Improve Node.js flag management in `getNodeHardenFlags()`
+  - Properly guard `--experimental-permission` for Node 20-23 only
+  - Properly guard `--permission` for Node 24+ only
+  - Properly guard `--force-node-api-uncaught-exceptions-policy` for Node 22+ (was incorrectly applied to all versions)
+  - Automatically include permission grants from `getNodePermissionFlags()` for Node 24+
+  - Remove `--experimental-policy` flag (no policy file provided)
+
+## [4.0.1](https://github.com/SocketDev/socket-lib/releases/tag/v4.0.1) - 2025-11-17
+
+### Changed
+
+- Removed # path imports and replaced with relative paths
+
 ## [4.0.0](https://github.com/SocketDev/socket-lib/releases/tag/v4.0.0) - 2025-11-15
 
 ### Changed

package/dist/agent.js

@@ -34,10 +34,10 @@ __export(agent_exports, {
   isPnpmLoglevelFlag: () => isPnpmLoglevelFlag
 });
 module.exports = __toCommonJS(agent_exports);
-var import_agents = require("#constants/agents");
-var import_node = require("#constants/node");
-var import_platform = require("#constants/platform");
-var import_ci = require("#env/ci");
+var import_agents = require("./constants/agents");
+var import_node = require("./constants/node");
+var import_platform = require("./constants/platform");
+var import_ci = require("./env/ci");
 var import_bin = require("./bin");
 var import_debug = require("./debug");
 var import_fs = require("./fs");

package/dist/bin.js

@@ -44,10 +44,10 @@ __export(bin_exports, {
 module.exports = __toCommonJS(bin_exports);
 var import_node_fs = __toESM(require("node:fs"));
 var import_node_path = __toESM(require("node:path"));
-var import_home = require("#env/home");
-var import_windows = require("#env/windows");
-var import_xdg = require("#env/xdg");
-var import_platform = require("#constants/platform");
+var import_home = require("./env/home");
+var import_windows = require("./env/windows");
+var import_xdg = require("./env/xdg");
+var import_platform = require("./constants/platform");
 var import_which = __toESM(require("./external/which"));
 var import_fs = require("./fs");
 var import_normalize = require("./paths/normalize");

package/dist/constants/node.d.ts

@@ -1,6 +1,8 @@
 // Version detection.
 export declare function getNodeVersion(): string;
 export declare function getNodeMajorVersion(): number;
+export declare function getNodeMinorVersion(): number;
+export declare function getNodePatchVersion(): number;
 // Maintained Node.js versions.
 export declare function getMaintainedNodeVersions(): readonly string[] & {
     current: string;
@@ -18,8 +20,8 @@ export declare function supportsNodeRun(): boolean;
 export declare function supportsNodeDisableSigusr1Flag(): boolean;
 export declare function getNodeDisableSigusr1Flags(): string[];
 export declare function supportsProcessSend(): boolean;
-export declare function getNodeHardenFlags(): string[];
 export declare function getNodePermissionFlags(): string[];
+export declare function getNodeHardenFlags(): string[];
 export declare function getNodeNoWarningsFlags(): string[];
 // Execution path.
 export declare function getExecPath(): string;

package/dist/constants/node.js

@@ -26,7 +26,9 @@ __export(node_exports, {
   getNodeDisableSigusr1Flags: () => getNodeDisableSigusr1Flags,
   getNodeHardenFlags: () => getNodeHardenFlags,
   getNodeMajorVersion: () => getNodeMajorVersion,
+  getNodeMinorVersion: () => getNodeMinorVersion,
   getNodeNoWarningsFlags: () => getNodeNoWarningsFlags,
+  getNodePatchVersion: () => getNodePatchVersion,
   getNodePermissionFlags: () => getNodePermissionFlags,
   getNodeVersion: () => getNodeVersion,
   supportsNodeCompileCacheApi: () => supportsNodeCompileCacheApi,
@@ -45,7 +47,13 @@ function getNodeVersion() {
   return NODE_VERSION;
 }
 function getNodeMajorVersion() {
-  return Number.parseInt(NODE_VERSION.slice(1).split(".")[0] || "0", 10);
+  return Number.parseInt(NODE_VERSION.slice(1).split(".")[0] ?? "0", 10);
+}
+function getNodeMinorVersion() {
+  return Number.parseInt(NODE_VERSION.split(".")[1] ?? "0", 10);
+}
+function getNodePatchVersion() {
+  return Number.parseInt(NODE_VERSION.split(".")[2] ?? "0", 10);
 }
 function getMaintainedNodeVersions() {
   return import_maintained_node_versions.maintainedNodeVersions;
@@ -68,24 +76,22 @@ function supportsNodePermissionFlag() {
 }
 function supportsNodeRequireModule() {
   const major = getNodeMajorVersion();
-  return major >= 23 || major === 22 && Number.parseInt(NODE_VERSION.split(".")[1] || "0", 10) >= 12;
+  return major >= 23 || major === 22 && getNodeMinorVersion() >= 12;
 }
 function supportsNodeRun() {
   const major = getNodeMajorVersion();
-  return major >= 23 || major === 22 && Number.parseInt(NODE_VERSION.split(".")[1] || "0", 10) >= 11;
+  return major >= 23 || major === 22 && getNodeMinorVersion() >= 11;
 }
 function supportsNodeDisableSigusr1Flag() {
   const major = getNodeMajorVersion();
+  const minor = getNodeMinorVersion();
   if (major >= 24) {
-    const minor = Number.parseInt(NODE_VERSION.split(".")[1] || "0", 10);
     return minor >= 8;
   }
   if (major === 23) {
-    const minor = Number.parseInt(NODE_VERSION.split(".")[1] || "0", 10);
     return minor >= 7;
   }
   if (major === 22) {
-    const minor = Number.parseInt(NODE_VERSION.split(".")[1] || "0", 10);
     return minor >= 14;
   }
   return false;
@@ -101,24 +107,6 @@ function supportsProcessSend() {
   return typeof process.send === "function";
 }
 let _nodeHardenFlags;
-function getNodeHardenFlags() {
-  if (_nodeHardenFlags === void 0) {
-    const major = getNodeMajorVersion();
-    const flags = [
-      "--disable-proto=delete",
-      // Node.js 24+ uses --permission instead of --experimental-permission.
-      // The permission model graduated from experimental to production-ready.
-      major >= 24 ? "--permission" : "--experimental-permission",
-      // Force uncaught exceptions policy for N-API addons (Node.js 22+).
-      "--force-node-api-uncaught-exceptions-policy"
-    ];
-    if (major < 24) {
-      flags.push("--experimental-policy");
-    }
-    _nodeHardenFlags = flags;
-  }
-  return _nodeHardenFlags;
-}
 let _nodePermissionFlags;
 function getNodePermissionFlags() {
   if (_nodePermissionFlags === void 0) {
@@ -138,6 +126,23 @@ function getNodePermissionFlags() {
   }
   return _nodePermissionFlags;
 }
+function getNodeHardenFlags() {
+  if (_nodeHardenFlags === void 0) {
+    const major = getNodeMajorVersion();
+    const flags = ["--disable-proto=delete"];
+    if (major >= 24) {
+      flags.push("--permission");
+      flags.push(...getNodePermissionFlags());
+    } else if (major >= 20) {
+      flags.push("--experimental-permission");
+    }
+    if (major >= 22) {
+      flags.push("--force-node-api-uncaught-exceptions-policy");
+    }
+    _nodeHardenFlags = flags;
+  }
+  return _nodeHardenFlags;
+}
 let _nodeNoWarningsFlags;
 function getNodeNoWarningsFlags() {
   if (_nodeNoWarningsFlags === void 0) {
@@ -159,7 +164,9 @@ const ESNEXT = "esnext";
   getNodeDisableSigusr1Flags,
   getNodeHardenFlags,
   getNodeMajorVersion,
+  getNodeMinorVersion,
   getNodeNoWarningsFlags,
+  getNodePatchVersion,
   getNodePermissionFlags,
   getNodeVersion,
   supportsNodeCompileCacheApi,

package/dist/constants/packages.js

@@ -42,7 +42,7 @@ __export(packages_exports, {
   getPacoteCachePath: () => getPacoteCachePath
 });
 module.exports = __toCommonJS(packages_exports);
-var import_npm = require("#env/npm");
+var import_npm = require("../env/npm");
 var import_lifecycle_script_names = require("../lifecycle-script-names");
 var import_package_default_node_range = require("../package-default-node-range");
 var import_package_default_socket_categories = require("../package-default-socket-categories");

package/dist/constants/process.d.ts

@@ -1,7 +1,7 @@
 /**
  * Process control: abort signals and UI utilities.
  */
-import type { Spinner } from '#lib/spinner';
+import type { Spinner } from '../spinner';
 export declare function getAbortController(): AbortController;
 export declare function getAbortSignal(): AbortSignal;
 export declare function getSpinner(): Spinner | null;

package/dist/constants/process.js

@@ -24,6 +24,7 @@ __export(process_exports, {
   getSpinner: () => getSpinner
 });
 module.exports = __toCommonJS(process_exports);
+var import_spinner = require("../spinner");
 let _abortController;
 function getAbortController() {
   if (_abortController === void 0) {
@@ -37,8 +38,7 @@ function getAbortSignal() {
 let _spinner;
 function getSpinner() {
   if (_spinner === void 0) {
-    const { Spinner: SpinnerFn } = require("#lib/spinner");
-    _spinner = SpinnerFn() ?? null;
+    _spinner = (0, import_spinner.Spinner)() ?? null;
   }
   return _spinner ?? null;
 }

package/dist/debug.js

@@ -43,9 +43,9 @@ __export(debug_exports, {
   isDebugNs: () => isDebugNs
 });
 module.exports = __toCommonJS(debug_exports);
-var import_process = require("#constants/process");
-var import_debug = require("#env/debug");
-var import_socket = require("#env/socket");
+var import_process = require("./constants/process");
+var import_debug = require("./env/debug");
+var import_socket = require("./env/socket");
 var import_is_unicode_supported = __toESM(require("./external/@socketregistry/is-unicode-supported"));
 var import_debug2 = __toESM(require("./external/debug"));
 var import_logger = require("./logger");

package/dist/dlx-binary.js

@@ -40,8 +40,8 @@ module.exports = __toCommonJS(dlx_binary_exports);
 var import_crypto = require("crypto");
 var import_os = __toESM(require("os"));
 var import_path = __toESM(require("path"));
-var import_platform = require("#constants/platform");
-var import_time = require("#constants/time");
+var import_platform = require("./constants/platform");
+var import_time = require("./constants/time");
 var import_dlx = require("./dlx");
 var import_dlx_manifest = require("./dlx-manifest");
 var import_http_request = require("./http-request");

package/dist/effects/text-shimmer.js

@@ -30,7 +30,7 @@ __export(text_shimmer_exports, {
 module.exports = __toCommonJS(text_shimmer_exports);
 var import_ansi = require("../ansi");
 var import_arrays = require("../arrays");
-var import_ci = require("#env/ci");
+var import_ci = require("../env/ci");
 var import_utils = require("../themes/utils");
 var import_themes = require("../themes/themes");
 function detectStyles(text) {

package/dist/env/ci.js

@@ -22,8 +22,8 @@ __export(ci_exports, {
   getCI: () => getCI
 });
 module.exports = __toCommonJS(ci_exports);
-var import_helpers = require("#env/helpers");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getCI() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("CI"));

package/dist/env/debug.js

@@ -22,7 +22,7 @@ __export(debug_exports, {
   getDebug: () => getDebug
 });
 module.exports = __toCommonJS(debug_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getDebug() {
   return (0, import_rewire.getEnvValue)("DEBUG");

package/dist/env/github.js

@@ -29,7 +29,7 @@ __export(github_exports, {
   getGithubToken: () => getGithubToken
 });
 module.exports = __toCommonJS(github_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getGithubApiUrl() {
   return (0, import_rewire.getEnvValue)("GITHUB_API_URL");

package/dist/env/home.js

@@ -22,7 +22,7 @@ __export(home_exports, {
   getHome: () => getHome
 });
 module.exports = __toCommonJS(home_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getHome() {
   return (0, import_rewire.getEnvValue)("HOME");

package/dist/env/locale.js

@@ -24,7 +24,7 @@ __export(locale_exports, {
   getLcMessages: () => getLcMessages
 });
 module.exports = __toCommonJS(locale_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getLang() {
   return (0, import_rewire.getEnvValue)("LANG");

package/dist/env/node-auth-token.js

@@ -22,7 +22,7 @@ __export(node_auth_token_exports, {
   getNodeAuthToken: () => getNodeAuthToken
 });
 module.exports = __toCommonJS(node_auth_token_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getNodeAuthToken() {
   return (0, import_rewire.getEnvValue)("NODE_AUTH_TOKEN");

package/dist/env/node-env.js

@@ -22,7 +22,7 @@ __export(node_env_exports, {
   getNodeEnv: () => getNodeEnv
 });
 module.exports = __toCommonJS(node_env_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getNodeEnv() {
   return (0, import_rewire.getEnvValue)("NODE_ENV");

package/dist/env/npm.js

@@ -26,7 +26,7 @@ __export(npm_exports, {
   getNpmToken: () => getNpmToken
 });
 module.exports = __toCommonJS(npm_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getNpmConfigRegistry() {
   return (0, import_rewire.getEnvValue)("npm_config_registry");

package/dist/env/package-manager.js

@@ -24,7 +24,7 @@ __export(package_manager_exports, {
   getPackageManagerUserAgent: () => getPackageManagerUserAgent
 });
 module.exports = __toCommonJS(package_manager_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function detectPackageManager() {
   const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();

package/dist/env/path.js

@@ -22,7 +22,7 @@ __export(path_exports, {
   getPath: () => getPath
 });
 module.exports = __toCommonJS(path_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getPath() {
   return (0, import_rewire.getEnvValue)("PATH");

package/dist/env/pre-commit.js

@@ -22,8 +22,8 @@ __export(pre_commit_exports, {
   getPreCommit: () => getPreCommit
 });
 module.exports = __toCommonJS(pre_commit_exports);
-var import_helpers = require("#env/helpers");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getPreCommit() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("PRE_COMMIT"));

package/dist/env/rewire.d.ts

@@ -18,8 +18,8 @@ export declare function getEnvValue(key: string): string | undefined;
  *
  * @example
  * ```typescript
- * import { setEnv, resetEnv } from '#env/rewire'
- * import { getCI } from '#env/ci'
+ * import { setEnv, resetEnv } from './rewire'
+ * import { getCI } from './ci'
  *
  * beforeEach(() => {
  *   setEnv('CI', '1')
@@ -45,7 +45,7 @@ export declare function clearEnv(key: string): void;
  *
  * @example
  * ```typescript
- * import { resetEnv } from '#env/rewire'
+ * import { resetEnv } from './rewire'
  *
  * afterEach(() => {
  *   resetEnv()
@@ -66,8 +66,8 @@ export declare function hasOverride(key: string): boolean;
  *
  * @example
  * ```typescript
- * import { withEnv } from '#env/rewire'
- * import { getCI } from '#env/ci'
+ * import { withEnv } from './rewire'
+ * import { getCI } from './ci'
  *
  * // Temporary override in isolated context
  * await withEnv({ CI: '1' }, async () => {
@@ -94,8 +94,8 @@ export declare function withEnv<T>(overrides: Record<string, string | undefined>
  *
  * @example
  * ```typescript
- * import { withEnvSync } from '#env/rewire'
- * import { getCI } from '#env/ci'
+ * import { withEnvSync } from './rewire'
+ * import { getCI } from './ci'
  *
  * const result = withEnvSync({ CI: '1' }, () => {
  *   return getCI()

package/dist/env/rewire.js

@@ -29,7 +29,7 @@ __export(rewire_exports, {
 });
 module.exports = __toCommonJS(rewire_exports);
 var import_async_hooks = require("async_hooks");
-var import_helpers = require("#env/helpers");
+var import_helpers = require("./helpers");
 const isolatedOverridesStorage = new import_async_hooks.AsyncLocalStorage();
 const sharedOverridesSymbol = Symbol.for(
   "@socketsecurity/lib/env/rewire/test-overrides"

package/dist/env/shell.js

@@ -22,7 +22,7 @@ __export(shell_exports, {
   getShell: () => getShell
 });
 module.exports = __toCommonJS(shell_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getShell() {
   return (0, import_rewire.getEnvValue)("SHELL");

package/dist/env/socket-cli-shadow.js

@@ -26,8 +26,8 @@ __export(socket_cli_shadow_exports, {
   getSocketCliShadowSilent: () => getSocketCliShadowSilent
 });
 module.exports = __toCommonJS(socket_cli_shadow_exports);
-var import_helpers = require("#env/helpers");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getSocketCliShadowAcceptRisks() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("SOCKET_CLI_SHADOW_ACCEPT_RISKS"));

package/dist/env/socket-cli.js

@@ -35,8 +35,8 @@ __export(socket_cli_exports, {
   getSocketCliViewAllRisks: () => getSocketCliViewAllRisks
 });
 module.exports = __toCommonJS(socket_cli_exports);
-var import_helpers = require("#env/helpers");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getSocketCliAcceptRisks() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("SOCKET_CLI_ACCEPT_RISKS"));

package/dist/env/socket.js

@@ -36,8 +36,8 @@ __export(socket_exports, {
   getSocketViewAllRisks: () => getSocketViewAllRisks
 });
 module.exports = __toCommonJS(socket_exports);
-var import_helpers = require("#env/helpers");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getSocketAcceptRisks() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("SOCKET_ACCEPT_RISKS"));

package/dist/env/temp-dir.js

@@ -24,7 +24,7 @@ __export(temp_dir_exports, {
   getTmpdir: () => getTmpdir
 });
 module.exports = __toCommonJS(temp_dir_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getTmpdir() {
   return (0, import_rewire.getEnvValue)("TMPDIR");

package/dist/env/term.js

@@ -22,7 +22,7 @@ __export(term_exports, {
   getTerm: () => getTerm
 });
 module.exports = __toCommonJS(term_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getTerm() {
   return (0, import_rewire.getEnvValue)("TERM");

package/dist/env/test.js

@@ -24,9 +24,9 @@ __export(test_exports, {
   isTest: () => isTest
 });
 module.exports = __toCommonJS(test_exports);
-var import_helpers = require("#env/helpers");
-var import_node_env = require("#env/node-env");
-var import_rewire = require("#env/rewire");
+var import_helpers = require("./helpers");
+var import_node_env = require("./node-env");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getJestWorkerId() {
   return (0, import_helpers.envAsString)((0, import_rewire.getEnvValue)("JEST_WORKER_ID"));

package/dist/env/windows.js

@@ -25,7 +25,7 @@ __export(windows_exports, {
   getUserprofile: () => getUserprofile
 });
 module.exports = __toCommonJS(windows_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getAppdata() {
   return (0, import_rewire.getEnvValue)("APPDATA");

package/dist/env/xdg.js

@@ -24,7 +24,7 @@ __export(xdg_exports, {
   getXdgDataHome: () => getXdgDataHome
 });
 module.exports = __toCommonJS(xdg_exports);
-var import_rewire = require("#env/rewire");
+var import_rewire = require("./rewire");
 // @__NO_SIDE_EFFECTS__
 function getXdgCacheHome() {
   return (0, import_rewire.getEnvValue)("XDG_CACHE_HOME");

package/dist/fs.js

@@ -48,7 +48,7 @@ __export(fs_exports, {
   writeJsonSync: () => writeJsonSync
 });
 module.exports = __toCommonJS(fs_exports);
-var import_process = require("#constants/process");
+var import_process = require("./constants/process");
 var import_arrays = require("./arrays");
 var import_del = require("./external/del");
 var import_globs = require("./globs");

package/dist/github.js

@@ -31,8 +31,8 @@ __export(github_exports, {
 });
 module.exports = __toCommonJS(github_exports);
 var import_cache_with_ttl = require("./cache-with-ttl");
-var import_github = require("#env/github");
-var import_socket_cli = require("#env/socket-cli");
+var import_github = require("./env/github");
+var import_socket_cli = require("./env/socket-cli");
 var import_http_request = require("./http-request");
 var import_spawn = require("./spawn");
 const GITHUB_API_BASE_URL = "https://api.github.com";

package/dist/objects.js

@@ -40,7 +40,7 @@ __export(objects_exports, {
   toSortedObjectFromEntries: () => toSortedObjectFromEntries
 });
 module.exports = __toCommonJS(objects_exports);
-var import_core = require("#constants/core");
+var import_core = require("./constants/core");
 var import_arrays = require("./arrays");
 var import_sorts = require("./sorts");
 const ObjectDefineProperties = Object.defineProperties;

package/dist/packages/exports.js

@@ -27,7 +27,7 @@ __export(exports_exports, {
   resolvePackageJsonEntryExports: () => resolvePackageJsonEntryExports
 });
 module.exports = __toCommonJS(exports_exports);
-var import_core = require("#constants/core");
+var import_core = require("../constants/core");
 var import_arrays = require("../arrays");
 var import_objects = require("../objects");
 // @__NO_SIDE_EFFECTS__

package/dist/packages/isolation.js

@@ -33,7 +33,7 @@ __export(isolation_exports, {
 });
 module.exports = __toCommonJS(isolation_exports);
 var import_fs = require("fs");
-var import_platform = require("#constants/platform");
+var import_platform = require("../constants/platform");
 var import_node_path = __toESM(require("node:path"));
 var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
 var import_spawn = require("../spawn");

package/dist/packages/licenses.js

@@ -39,8 +39,8 @@ __export(licenses_exports, {
   visitLicenses: () => visitLicenses
 });
 module.exports = __toCommonJS(licenses_exports);
-var import_core = require("#constants/core");
-var import_licenses = require("#constants/licenses");
+var import_core = require("../constants/core");
+var import_licenses = require("../constants/licenses");
 var import_node_path = __toESM(require("node:path"));
 var import_spdx_correct = __toESM(require("../external/spdx-correct"));
 var import_spdx_expression_parse = __toESM(require("../external/spdx-expression-parse"));

package/dist/packages/manifest.js

@@ -34,9 +34,9 @@ __export(manifest_exports, {
   fetchPackagePackument: () => fetchPackagePackument
 });
 module.exports = __toCommonJS(manifest_exports);
-var import_packages = require("#constants/packages");
-var import_process = require("#constants/process");
-var import_socket = require("#constants/socket");
+var import_packages = require("../constants/packages");
+var import_process = require("../constants/process");
+var import_socket = require("../constants/socket");
 var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
 var import_pacote = __toESM(require("../external/pacote"));
 var import_semver = __toESM(require("../external/semver"));

package/dist/packages/normalize.js

@@ -39,6 +39,7 @@ var import_socket = require("../constants/socket");
 var import_regexps = require("../regexps");
 var import_normalize_package_data = __toESM(require("../external/normalize-package-data"));
 var import_objects = require("../objects");
+var import_operations = require("./operations");
 const ArrayIsArray = Array.isArray;
 const ObjectHasOwn = Object.hasOwn;
 function getEscapedScopeRegExp() {
@@ -47,14 +48,6 @@ function getEscapedScopeRegExp() {
     `^[^${(0, import_regexps.escapeRegExp)(firstChar)}]+${(0, import_regexps.escapeRegExp)(import_socket.REGISTRY_SCOPE_DELIMITER)}(?!${(0, import_regexps.escapeRegExp)(firstChar)})`
   );
 }
-let _findPackageExtensions;
-function _getFindPackageExtensions() {
-  if (_findPackageExtensions === void 0) {
-    const operations = require("#packages/operations");
-    _findPackageExtensions = operations.findPackageExtensions;
-  }
-  return _findPackageExtensions;
-}
 // @__NO_SIDE_EFFECTS__
 function normalizePackageJson(pkgJson, options) {
   const { preserve } = { __proto__: null, ...options };
@@ -74,8 +67,7 @@ function normalizePackageJson(pkgJson, options) {
   ];
   (0, import_normalize_package_data.default)(pkgJson);
   if (pkgJson.name && pkgJson.version) {
-    const findPackageExtensions = _getFindPackageExtensions();
-    const extensions = findPackageExtensions(pkgJson.name, pkgJson.version);
+    const extensions = (0, import_operations.findPackageExtensions)(pkgJson.name, pkgJson.version);
     if (extensions && typeof extensions === "object") {
       (0, import_objects.merge)(pkgJson, extensions);
     }

package/dist/packages/operations.js

@@ -40,9 +40,9 @@ __export(operations_exports, {
   resolveRegistryPackageName: () => resolveRegistryPackageName
 });
 module.exports = __toCommonJS(operations_exports);
-var import_packages = require("#constants/packages");
-var import_process = require("#constants/process");
-var import_socket = require("#constants/socket");
+var import_packages = require("../constants/packages");
+var import_process = require("../constants/process");
+var import_socket = require("../constants/socket");
 var import_cacache = __toESM(require("../external/cacache"));
 var import_libnpmpack = __toESM(require("../external/libnpmpack"));
 var import_make_fetch_happen = __toESM(require("../external/make-fetch-happen"));
@@ -55,6 +55,7 @@ var import_objects = require("../objects");
 var import_normalize = require("./normalize");
 var import_packages2 = require("../paths/packages");
 var import_specs = require("./specs");
+var import_editable = require("./editable");
 const abortSignal = (0, import_process.getAbortSignal)();
 const packageExtensions = (0, import_packages.getPackageExtensions)();
 const packumentCache = (0, import_packages.getPackumentCache)();
@@ -66,22 +67,6 @@ const fetcher = import_make_fetch_happen.default.defaults({
   // https://github.com/npm/make-fetch-happen?tab=readme-ov-file#--optscache
   cache: "force-cache"
 });
-let _toEditablePackageJson;
-// @__NO_SIDE_EFFECTS__
-function _getToEditablePackageJson() {
-  if (_toEditablePackageJson === void 0) {
-    _toEditablePackageJson = require("#packages/editable").toEditablePackageJson;
-  }
-  return _toEditablePackageJson;
-}
-let _toEditablePackageJsonSync;
-// @__NO_SIDE_EFFECTS__
-function _getToEditablePackageJsonSync() {
-  if (_toEditablePackageJsonSync === void 0) {
-    _toEditablePackageJsonSync = require("#packages/editable").toEditablePackageJsonSync;
-  }
-  return _toEditablePackageJsonSync;
-}
 // @__NO_SIDE_EFFECTS__
 async function extractPackage(pkgNameOrId, options, callback) {
   let actualCallback = callback;
@@ -176,8 +161,7 @@ async function readPackageJson(filepath, options) {
   });
   if (pkgJson) {
     if (editable) {
-      const toEditablePackageJson = /* @__PURE__ */ _getToEditablePackageJson();
-      return await toEditablePackageJson(pkgJson, {
+      return await (0, import_editable.toEditablePackageJson)(pkgJson, {
         path: filepath,
         normalize,
         ...normalizeOptions
@@ -196,8 +180,7 @@ function readPackageJsonSync(filepath, options) {
   const pkgJson = (0, import_fs.readJsonSync)((0, import_packages2.resolvePackageJsonPath)(filepath), { throws });
   if (pkgJson) {
     if (editable) {
-      const toEditablePackageJsonSync = /* @__PURE__ */ _getToEditablePackageJsonSync();
-      return toEditablePackageJsonSync(pkgJson, {
+      return (0, import_editable.toEditablePackageJsonSync)(pkgJson, {
         path: filepath,
         normalize,
         ...normalizeOptions

package/dist/packages/provenance.js

@@ -33,8 +33,8 @@ __export(provenance_exports, {
   getProvenanceDetails: () => getProvenanceDetails
 });
 module.exports = __toCommonJS(provenance_exports);
-var import_agents = require("#constants/agents");
-var import_packages = require("#constants/packages");
+var import_agents = require("../constants/agents");
+var import_packages = require("../constants/packages");
 var import_make_fetch_happen = __toESM(require("../external/make-fetch-happen"));
 var import_abort = require("../abort");
 var import_url = require("../url");

package/dist/packages.d.ts

@@ -2,7 +2,7 @@
  * @fileoverview Package registry management with Socket.dev specific utilities.
  * Provides npm package analysis, dependency resolution, and registry operations.
  */
-import type { CategoryString } from '#types';
+import type { CategoryString } from './types';
 import { getEditablePackageJsonClass, pkgJsonToEditable, toEditablePackageJson, toEditablePackageJsonSync } from './packages/editable';
 import { findTypesForSubpath, getExportFilePaths, getSubpaths, isConditionalExports, isSubpathExports, resolvePackageJsonEntryExports } from './packages/exports';
 import { isolatePackage } from './packages/isolation';

package/dist/paths/normalize.js

@@ -31,7 +31,7 @@ __export(normalize_exports, {
   trimLeadingDotSlash: () => trimLeadingDotSlash
 });
 module.exports = __toCommonJS(normalize_exports);
-var import_platform = require("#constants/platform");
+var import_platform = require("../constants/platform");
 var import_strings = require("../strings");
 const CHAR_BACKWARD_SLASH = 92;
 const CHAR_COLON = 58;

package/dist/paths/rewire.d.ts

@@ -53,7 +53,7 @@ export declare function resetPaths(): void;
  * @example
  * ```typescript
  * import { setPath, resetPaths } from '#paths/rewire'
- * import { getOsTmpDir } from '#lib/paths'
+ * import { getOsTmpDir } from './'
  *
  * beforeEach(() => {
  *   setPath('tmpdir', '/custom/tmp')

package/dist/paths/socket.js

@@ -47,11 +47,11 @@ __export(socket_exports, {
 module.exports = __toCommonJS(socket_exports);
 var os = __toESM(require("os"));
 var path = __toESM(require("path"));
-var import_github = require("#constants/github");
-var import_socket = require("#constants/socket");
-var import_home = require("#env/home");
-var import_socket2 = require("#env/socket");
-var import_windows = require("#env/windows");
+var import_github = require("../constants/github");
+var import_socket = require("../constants/socket");
+var import_home = require("../env/home");
+var import_socket2 = require("../env/socket");
+var import_windows = require("../env/windows");
 var import_dirnames = require("./dirnames");
 var import_normalize = require("./normalize");
 var import_rewire = require("./rewire");

package/dist/promises.js

@@ -29,8 +29,8 @@ __export(promises_exports, {
   resolveRetryOptions: () => resolveRetryOptions
 });
 module.exports = __toCommonJS(promises_exports);
-var import_core = require("#constants/core");
-var import_process = require("#constants/process");
+var import_core = require("./constants/core");
+var import_process = require("./constants/process");
 var import_arrays = require("./arrays");
 const abortSignal = (0, import_process.getAbortSignal)();
 let _timers;

package/dist/spawn.js

@@ -35,7 +35,7 @@ __export(spawn_exports, {
   spawnSync: () => spawnSync
 });
 module.exports = __toCommonJS(spawn_exports);
-var import_process = require("#constants/process");
+var import_process = require("./constants/process");
 var import_promise_spawn = __toESM(require("./external/@npmcli/promise-spawn"));
 var import_node_path = __toESM(require("node:path"));
 var import_arrays = require("./arrays");

package/dist/spinner.js

@@ -40,7 +40,8 @@ __export(spinner_exports, {
 module.exports = __toCommonJS(spinner_exports);
 var import_yoctocolors_cjs = __toESM(require("./external/yoctocolors-cjs"));
 var import_colors = require("./colors");
-var import_ci = require("#env/ci");
+var import_process = require("./constants/process");
+var import_ci = require("./env/ci");
 var import_debug = require("./debug");
 var import_pulse_frames = require("./effects/pulse-frames");
 var import_text_shimmer = require("./effects/text-shimmer");
@@ -169,7 +170,7 @@ function Spinner(options) {
           };
         }
         super({
-          signal: require("#constants/process").getAbortSignal(),
+          signal: (0, import_process.getAbortSignal)(),
           ...opts,
           // Pass RGB color directly to yocto-spinner (it now supports RGB).
           color: spinnerColorRgb,

package/dist/stdio/prompts.js

@@ -41,7 +41,7 @@ __export(prompts_exports, {
   wrapPrompt: () => wrapPrompt
 });
 module.exports = __toCommonJS(prompts_exports);
-var import_process = require("#constants/process");
+var import_process = require("../constants/process");
 var import_checkbox = __toESM(require("../external/@inquirer/checkbox"));
 var import_confirm = __toESM(require("../external/@inquirer/confirm"));
 var import_input = __toESM(require("../external/@inquirer/input"));

package/dist/temporary-executor.js

@@ -22,7 +22,7 @@ __export(temporary_executor_exports, {
   isRunningInTemporaryExecutor: () => isRunningInTemporaryExecutor
 });
 module.exports = __toCommonJS(temporary_executor_exports);
-var import_platform = require("#constants/platform");
+var import_platform = require("./constants/platform");
 var import_normalize = require("./paths/normalize");
 function isRunningInTemporaryExecutor(cwd = process.cwd()) {
   const userAgent = process.env["npm_config_user_agent"];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "packageManager": "pnpm@10.22.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
@@ -646,15 +646,6 @@
     "./tsconfig.json": "./tsconfig.json",
     "./tsconfig.test.json": "./tsconfig.test.json"
   },
-  "imports": {
-    "#constants/*": "./dist/constants/*.js",
-    "#env/*": "./dist/env/*.js",
-    "#lib/*": "./dist/*.js",
-    "#packages/*": "./dist/packages/*.js",
-    "#socketsecurity/lib/*": "@socketsecurity/lib-stable/*",
-    "#types": "./dist/types.js",
-    "#utils/*": "./dist/utils/*.js"
-  },
   "files": [
     "dist",
     "data/extensions.json",
@@ -699,7 +690,7 @@
     "@socketregistry/is-unicode-supported": "1.0.5",
     "@socketregistry/packageurl-js": "1.3.5",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@3.5.0",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@4.0.1",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250920.1",
     "@vitest/coverage-v8": "4.0.3",