@socketsecurity/lib 5.18.2 → 5.19.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "5.18.2",
-  "packageManager": "pnpm@11.0.0-rc.0",
+  "version": "5.19.1",
+  "packageManager": "pnpm@11.0.0-rc.2",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
@@ -223,6 +223,10 @@
       "types": "./dist/debug.d.ts",
       "default": "./dist/debug.js"
     },
+    "./dlx/arborist": {
+      "types": "./dist/dlx/arborist.d.ts",
+      "default": "./dist/dlx/arborist.js"
+    },
     "./dlx/binary": {
       "types": "./dist/dlx/binary.d.ts",
       "default": "./dist/dlx/binary.js"
@@ -239,6 +243,14 @@
       "types": "./dist/dlx/dir.d.ts",
       "default": "./dist/dlx/dir.js"
     },
+    "./dlx/integrity": {
+      "types": "./dist/dlx/integrity.d.ts",
+      "default": "./dist/dlx/integrity.js"
+    },
+    "./dlx/lockfile": {
+      "types": "./dist/dlx/lockfile.d.ts",
+      "default": "./dist/dlx/lockfile.js"
+    },
     "./dlx/manifest": {
       "types": "./dist/dlx/manifest.d.ts",
       "default": "./dist/dlx/manifest.js"
@@ -371,10 +383,6 @@
       "types": "./dist/fs.d.ts",
       "default": "./dist/fs.js"
     },
-    "./functions": {
-      "types": "./dist/functions.d.ts",
-      "default": "./dist/functions.js"
-    },
     "./git": {
       "types": "./dist/git.d.ts",
       "default": "./dist/git.js"
@@ -395,6 +403,10 @@
       "types": "./dist/ipc.d.ts",
       "default": "./dist/ipc.js"
     },
+    "./ipc-cli": {
+      "types": "./dist/ipc-cli.d.ts",
+      "default": "./dist/ipc-cli.js"
+    },
     "./json/edit": {
       "types": "./dist/json/edit.d.ts",
       "default": "./dist/json/edit.js"
@@ -412,12 +424,8 @@
       "default": "./dist/json/types.js"
     },
     "./links": {
-      "types": "./dist/links/index.d.ts",
-      "default": "./dist/links/index.js"
-    },
-    "./links/index": {
-      "types": "./dist/links/index.d.ts",
-      "default": "./dist/links/index.js"
+      "types": "./dist/links.d.ts",
+      "default": "./dist/links.js"
     },
     "./logger": {
       "types": "./dist/logger.d.ts",
@@ -583,10 +591,6 @@
       "types": "./dist/stdio/header.d.ts",
       "default": "./dist/stdio/header.js"
     },
-    "./stdio/mask": {
-      "types": "./dist/stdio/mask.d.ts",
-      "default": "./dist/stdio/mask.js"
-    },
     "./stdio/progress": {
       "types": "./dist/stdio/progress.d.ts",
       "default": "./dist/stdio/progress.js"
@@ -631,10 +635,6 @@
       "types": "./dist/themes/context.d.ts",
       "default": "./dist/themes/context.js"
     },
-    "./themes/index": {
-      "types": "./dist/themes/index.d.ts",
-      "default": "./dist/themes/index.js"
-    },
     "./themes/themes": {
       "types": "./dist/themes/themes.d.ts",
       "default": "./dist/themes/themes.js"
@@ -655,10 +655,6 @@
       "types": "./dist/url.d.ts",
       "default": "./dist/url.js"
     },
-    "./utils/get-ipc": {
-      "types": "./dist/utils/get-ipc.d.ts",
-      "default": "./dist/utils/get-ipc.js"
-    },
     "./validation/json-parser": {
       "types": "./dist/validation/json-parser.d.ts",
       "default": "./dist/validation/json-parser.js"
@@ -696,22 +692,18 @@
   },
   "sideEffects": false,
   "scripts": {
-    "build": "node scripts/build/main.mjs",
-    "check": "node scripts/check.mjs",
-    "clean": "node scripts/build/clean.mjs",
-    "cover": "node scripts/test/cover.mjs",
-    "dev": "node scripts/build/main.mjs --watch",
-    "fix": "node scripts/fix.mjs",
-    "format": "oxfmt",
-    "format:check": "oxfmt --check",
-    "lint": "node scripts/lint.mjs",
-    "lint:oxlint": "oxlint .",
-    "lint:oxfmt": "oxfmt --check .",
+    "build": "node scripts/build/main.mts",
+    "check": "node scripts/check.mts",
+    "clean": "node scripts/build/clean.mts",
+    "cover": "node scripts/test/cover.mts",
+    "dev": "node scripts/build/main.mts --watch",
+    "fix": "node scripts/fix.mts",
+    "lint": "node scripts/lint.mts",
     "security": "agentshield scan && { command -v zizmor >/dev/null && zizmor .github/ || echo 'zizmor not installed — run pnpm run setup to install'; }",
     "prepare": "husky",
     "prepublishOnly": "pnpm run build",
-    "test": "node scripts/test/main.mjs",
-    "update": "node scripts/update.mjs"
+    "test": "node scripts/test/main.mts",
+    "update": "node scripts/update.mts"
   },
   "devDependencies": {
     "@anthropic-ai/claude-code": "2.1.92",
@@ -719,34 +711,30 @@
     "@babel/parser": "7.28.4",
     "@babel/traverse": "7.28.4",
     "@babel/types": "7.28.4",
-    "ecc-agentshield": "1.4.0",
-    "@dotenvx/dotenvx": "1.49.0",
-    "@inquirer/checkbox": "4.3.1",
-    "@inquirer/confirm": "5.1.16",
-    "@inquirer/input": "4.2.2",
-    "@inquirer/password": "4.0.18",
-    "@inquirer/search": "3.1.1",
-    "@inquirer/select": "4.3.2",
+    "@inquirer/checkbox": "5.1.3",
+    "@inquirer/confirm": "6.0.11",
+    "@inquirer/input": "5.0.11",
+    "@inquirer/password": "5.0.11",
+    "@inquirer/search": "4.1.7",
+    "@inquirer/select": "5.1.3",
     "@npmcli/arborist": "9.1.4",
     "@npmcli/package-json": "7.0.0",
     "@npmcli/promise-spawn": "8.0.3",
     "@socketregistry/is-unicode-supported": "1.0.5",
-    "@socketregistry/packageurl-js": "1.4.1",
+    "@socketregistry/packageurl-js": "1.4.2",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.18.1",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.19.0",
     "@types/node": "24.9.2",
-    "@typescript/native-preview": "7.0.0-dev.20250920.1",
+    "@typescript/native-preview": "7.0.0-dev.20260415.1",
     "@vitest/coverage-v8": "4.0.3",
     "@vitest/ui": "4.0.3",
-    "@yarnpkg/core": "4.5.0",
     "@yarnpkg/extensions": "2.0.6",
     "adm-zip": "0.5.16",
     "cacache": "20.0.1",
     "debug": "4.4.3",
     "del": "8.0.1",
-    "del-cli": "6.0.0",
+    "ecc-agentshield": "1.4.0",
     "esbuild": "0.25.11",
-    "eslint-plugin-sort-destructure-keys": "2.0.0",
     "fast-glob": "3.3.3",
     "fast-sort": "3.4.1",
     "get-east-asian-width": "1.3.0",
@@ -761,7 +749,7 @@
     "nock": "14.0.10",
     "normalize-package-data": "8.0.0",
     "npm-package-arg": "13.0.0",
-    "oxfmt": "^0.37.0",
+    "oxfmt": "0.37.0",
     "oxlint": "1.53.0",
     "p-map": "7.0.4",
     "pacote": "21.5.0",
@@ -776,11 +764,9 @@
     "tar-fs": "3.1.2",
     "tar-stream": "3.1.8",
     "taze": "19.9.2",
-    "trash": "10.0.0",
     "type-coverage": "2.29.7",
     "typescript": "5.9.2",
     "validate-npm-package-name": "6.0.2",
-    "vite-tsconfig-paths": "5.1.4",
     "vitest": "4.0.3",
     "which": "5.0.0",
     "yargs-parser": "22.0.0",

package/dist/functions.d.ts

@@ -1,57 +0,0 @@
-/**
- * @fileoverview Common function utilities for control flow and caching.
- * Provides noop, once, and other foundational function helpers.
- */
-// Type definitions
-export type AsyncFunction<TArgs extends unknown[], TResult> = (...args: TArgs) => Promise<TResult>;
-export type AnyFunction = (...args: unknown[]) => unknown;
-/**
- * A no-op function that does nothing.
- *
- * @example
- * ```typescript
- * const callback = noop
- * callback()  // does nothing
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function noop(): void;
-/**
- * Create a function that only executes once.
- *
- * @example
- * ```typescript
- * const init = once(() => Math.random())
- * init()  // 0.456 (random value)
- * init()  // 0.456 (same value, not recalculated)
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function once<T extends AnyFunction>(fn: T): T;
-/**
- * Wrap an async function to silently catch and ignore errors.
- *
- * @example
- * ```typescript
- * const safeFetch = silentWrapAsync(async (url: string) => {
- *   const res = await fetch(url)
- *   return res.json()
- * })
- * await safeFetch('https://example.com')  // result or undefined on error
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function silentWrapAsync<TArgs extends unknown[], TResult>(fn: AsyncFunction<TArgs, TResult>): (...args: TArgs) => Promise<TResult | undefined>;
-/**
- * Execute a function with tail call optimization via trampoline.
- *
- * @example
- * ```typescript
- * const factorial = trampoline((n: number, acc = 1): any =>
- *   n <= 1 ? acc : () => factorial(n - 1, n * acc)
- * )
- * factorial(5)  // 120
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function trampoline<T extends AnyFunction>(fn: T): T;

package/dist/functions.js

@@ -1,70 +0,0 @@
-"use strict";
-/* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var functions_exports = {};
-__export(functions_exports, {
-  noop: () => noop,
-  once: () => once,
-  silentWrapAsync: () => silentWrapAsync,
-  trampoline: () => trampoline
-});
-module.exports = __toCommonJS(functions_exports);
-// @__NO_SIDE_EFFECTS__
-function noop() {
-}
-// @__NO_SIDE_EFFECTS__
-function once(fn) {
-  let called = false;
-  let result;
-  return function(...args) {
-    if (!called) {
-      called = true;
-      result = fn.apply(this, args);
-    }
-    return result;
-  };
-}
-// @__NO_SIDE_EFFECTS__
-function silentWrapAsync(fn) {
-  return async (...args) => {
-    try {
-      const result = await fn(...args);
-      return result === null ? void 0 : result;
-    } catch {
-    }
-    return void 0;
-  };
-}
-// @__NO_SIDE_EFFECTS__
-function trampoline(fn) {
-  return function(...args) {
-    let result = fn.apply(this, args);
-    while (typeof result === "function") {
-      result = result();
-    }
-    return result;
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  noop,
-  once,
-  silentWrapAsync,
-  trampoline
-});

package/dist/stdio/mask.d.ts

@@ -1,151 +0,0 @@
-import type { ChildProcess, SpawnOptions } from 'child_process';
-export interface OutputMaskOptions {
-    /**
-     * Current working directory for spawned process.
-     * @default process.cwd()
-     */
-    cwd?: string | undefined;
-    /**
-     * Environment variables for spawned process.
-     * @default process.env
-     */
-    env?: NodeJS.ProcessEnv | undefined;
-    /**
-     * Filter output before displaying or buffering.
-     * Return `false` to skip the line, `true` to include it.
-     *
-     * Useful for filtering non-fatal warnings or noise from test runners.
-     * The filter runs on every chunk of output before display/buffering.
-     *
-     * @param text - The output text chunk (may include ANSI codes)
-     * @param stream - Whether this came from 'stdout' or 'stderr'
-     * @returns `true` to include this output, `false` to skip it
-     *
-     * @example
-     * ```ts
-     * filterOutput: (text, stream) => {
-     *   // Skip vitest worker termination errors
-     *   if (text.includes('Terminating worker thread')) return false
-     *   return true
-     * }
-     * ```
-     */
-    filterOutput?: ((text: string, stream: 'stdout' | 'stderr') => boolean) | undefined;
-    /**
-     * Progress message to display in spinner.
-     * @default 'Running…'
-     */
-    message?: string | undefined;
-    /**
-     * Override the exit code based on captured output.
-     *
-     * Useful for handling non-fatal errors that shouldn't fail the build.
-     * Called after the process exits with the original code and all captured output.
-     * Return a number to override the exit code, or `undefined` to keep original.
-     *
-     * @param code - Original exit code from the process
-     * @param stdout - All captured stdout (even filtered lines are captured)
-     * @param stderr - All captured stderr (even filtered lines are captured)
-     * @returns New exit code, or `undefined` to keep original
-     *
-     * @example
-     * ```ts
-     * overrideExitCode: (code, stdout, stderr) => {
-     *   // If only worker termination errors, treat as success
-     *   const output = stdout + stderr
-     *   const hasWorkerError = output.includes('Terminating worker thread')
-     *   const hasRealFailure = output.includes('FAIL')
-     *   if (code !== 0 && hasWorkerError && !hasRealFailure) {
-     *     return 0 // Override to success
-     *   }
-     *   return undefined // Keep original
-     * }
-     * ```
-     */
-    overrideExitCode?: ((code: number, stdout: string, stderr: string) => number | undefined) | undefined;
-    /**
-     * Start with output visible instead of masked.
-     * When `true`, output shows immediately without needing ctrl+o.
-     * @default false
-     */
-    showOutput?: boolean | undefined;
-    /**
-     * Text to show after "ctrl+o" in spinner message.
-     * @default 'to see full output'
-     */
-    toggleText?: string | undefined;
-}
-export interface OutputMask {
-    /** Whether spinner is currently active */
-    isSpinning: boolean;
-    /** Buffered output lines */
-    outputBuffer: string[];
-    /** All stderr captured (for exit code override) */
-    stderrCapture: string;
-    /** All stdout captured (for exit code override) */
-    stdoutCapture: string;
-    /** Whether output is currently visible */
-    verbose: boolean;
-}
-/**
- * Create an output mask for controlling command output visibility.
- * The mask tracks whether output should be shown or hidden (buffered).
- * When hidden, output is buffered and a spinner is shown instead.
- *
- * @example
- * ```typescript
- * const mask = createOutputMask({ showOutput: false })
- * console.log(mask.verbose)  // false
- * ```
- */
-export declare function createOutputMask(options?: OutputMaskOptions): OutputMask;
-/**
- * Create a keyboard handler for toggling output visibility.
- * Handles two key combinations:
- * - ctrl+o: Toggle between showing and hiding output.
- * - ctrl+c: Cancel the running process.
- * The handler manipulates terminal state using ANSI escape sequences.
- *
- * @example
- * ```typescript
- * const handler = createKeyboardHandler(mask, childProcess, {
- *   message: 'Testing...',
- * })
- * ```
- */
-type ReadlineKey = {
-    ctrl?: boolean;
-    name?: string;
-};
-export declare function createKeyboardHandler(mask: OutputMask, child: ChildProcess, options?: OutputMaskOptions): (_str: string, key: ReadlineKey) => void;
-/**
- * Attach output masking to a child process.
- * Returns a promise that resolves with the exit code.
- * This function:
- * - Sets up keyboard input handling in raw mode for immediate key capture.
- * - Buffers stdout/stderr when not in verbose mode.
- * - Shows a spinner when output is masked.
- * - Allows toggling between masked and unmasked output with ctrl+o.
- *
- * @example
- * ```typescript
- * const child = spawn("pnpm", ["test"], { stdio: ["inherit", "pipe", "pipe"] })
- * const exitCode = await attachOutputMask(child, { message: 'Running tests' })
- * ```
- */
-export declare function attachOutputMask(child: ChildProcess, options?: OutputMaskOptions): Promise<number>;
-/**
- * Run a command with interactive output masking.
- * Convenience wrapper around spawn + attachOutputMask.
- * Spawns a child process and attaches the output masking system to it.
- * stdin is inherited, stdout and stderr are piped for masking control.
- *
- * @example
- * ```typescript
- * const exitCode = await runWithMask('pnpm', ['test'], {
- *   message: 'Running tests',
- * })
- * ```
- */
-export declare function runWithMask(command: string, args?: string[], options?: OutputMaskOptions & SpawnOptions): Promise<number>;
-export {};