@socketsecurity/lib 5.27.0 → 6.0.0

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.js

@@ -0,0 +1,261 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var parse_lockfile_exports = {};
+__export(parse_lockfile_exports, {
+  addToYarnIndex: () => addToYarnIndex,
+  consumeDependenciesMeta: () => consumeDependenciesMeta,
+  consumeDependencyList: () => consumeDependencyList,
+  consumeEntryProperties: () => consumeEntryProperties,
+  jsParseYarnLock: () => jsParseYarnLock,
+  newEntry: () => newEntry,
+  parseYarnLock: () => parseYarnLock,
+  skipIndentedBlock: () => skipIndentedBlock,
+  stripQuotes: () => stripQuotes,
+  valueAfterKey: () => valueAfterKey
+});
+module.exports = __toCommonJS(parse_lockfile_exports);
+var import_array = require("../../../../primordials/array");
+var import_math = require("../../../../primordials/math");
+var import_object = require("../../../../primordials/object");
+var import_string = require("../../../../primordials/string");
+var import_manifest = require("../../../../smol/manifest");
+var import_parse_yarn_descriptor = require("./parse-yarn-descriptor");
+function addToYarnIndex(packageIndex, name, idx) {
+  const existing = packageIndex[name];
+  if (existing === void 0) {
+    packageIndex[name] = idx;
+  } else if (typeof existing === "number") {
+    packageIndex[name] = [existing, idx];
+  } else {
+    (0, import_array.ArrayPrototypePush)(existing, idx);
+  }
+}
+function consumeDependenciesMeta(content, startPos, _entry) {
+  let pos = startPos;
+  while (pos < content.length) {
+    const eol = (0, import_string.StringPrototypeIndexOf)(content, "\n", pos);
+    const end = eol === -1 ? content.length : eol;
+    const line = (0, import_string.StringPrototypeSlice)(content, pos, end);
+    if (line.length < 4 || line[0] !== " " || line[1] !== " " || line[2] !== " " || line[3] !== " ") {
+      break;
+    }
+    pos = end + 1;
+  }
+  return pos;
+}
+function consumeDependencyList(content, startPos, deps) {
+  let pos = startPos;
+  while (pos < content.length) {
+    const eol = (0, import_string.StringPrototypeIndexOf)(content, "\n", pos);
+    const end = eol === -1 ? content.length : eol;
+    const line = (0, import_string.StringPrototypeSlice)(content, pos, end);
+    if (line.length < 4 || line[0] !== " " || line[1] !== " " || line[2] !== " " || line[3] !== " ") {
+      break;
+    }
+    const depLine = (0, import_string.StringPrototypeTrim)(line);
+    const colonIdx = (0, import_string.StringPrototypeIndexOf)(depLine, ":");
+    const spaceIdx = (0, import_string.StringPrototypeIndexOf)(depLine, " ");
+    const sepIdx = colonIdx === -1 ? spaceIdx : spaceIdx === -1 ? colonIdx : (0, import_math.MathMin)(colonIdx, spaceIdx);
+    if (sepIdx > 0) {
+      (0, import_array.ArrayPrototypePush)(
+        deps,
+        stripQuotes((0, import_string.StringPrototypeSlice)(depLine, 0, sepIdx))
+      );
+    }
+    pos = end + 1;
+  }
+  return pos;
+}
+function consumeEntryProperties(content, startPos, entry) {
+  let pos = startPos;
+  while (pos < content.length) {
+    const eol = (0, import_string.StringPrototypeIndexOf)(content, "\n", pos);
+    const end = eol === -1 ? content.length : eol;
+    const line = (0, import_string.StringPrototypeSlice)(content, pos, end);
+    if (line.length === 0 || line[0] !== " " && line[0] !== "	") {
+      break;
+    }
+    const propLine = (0, import_string.StringPrototypeTrim)(line);
+    pos = end + 1;
+    if ((0, import_string.StringPrototypeIndexOf)(propLine, "version ") === 0 || (0, import_string.StringPrototypeIndexOf)(propLine, "version:") === 0) {
+      entry.version = stripQuotes(valueAfterKey(propLine, "version ".length));
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "resolved ") === 0 || (0, import_string.StringPrototypeIndexOf)(propLine, "resolved:") === 0) {
+      entry.resolved = stripQuotes(valueAfterKey(propLine, "resolved ".length));
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "integrity ") === 0 || (0, import_string.StringPrototypeIndexOf)(propLine, "integrity:") === 0) {
+      entry.integrity = valueAfterKey(propLine, "integrity ".length);
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "checksum ") === 0 || (0, import_string.StringPrototypeIndexOf)(propLine, "checksum:") === 0) {
+      entry.checksum = valueAfterKey(propLine, "checksum ".length);
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "linkType") === 0) {
+      const colonIdx = (0, import_string.StringPrototypeIndexOf)(propLine, ":");
+      if (colonIdx > 0) {
+        entry.linkType = (0, import_string.StringPrototypeTrim)(
+          (0, import_string.StringPrototypeSlice)(propLine, colonIdx + 1)
+        );
+      }
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "resolution") === 0) {
+      const colonIdx = (0, import_string.StringPrototypeIndexOf)(propLine, ":");
+      if (colonIdx > 0) {
+        const resValue = stripQuotes(
+          (0, import_string.StringPrototypeTrim)((0, import_string.StringPrototypeSlice)(propLine, colonIdx + 1))
+        );
+        if ((0, import_string.StringPrototypeIndexOf)(resValue, "http://") === 0 || (0, import_string.StringPrototypeIndexOf)(resValue, "https://") === 0) {
+          entry.resolved = resValue;
+        }
+      }
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "dependencies:") === 0) {
+      pos = consumeDependencyList(content, pos, entry.dependencies);
+    } else if ((0, import_string.StringPrototypeIndexOf)(propLine, "dependenciesMeta:") === 0) {
+      pos = consumeDependenciesMeta(content, pos, entry);
+    }
+  }
+  return pos;
+}
+function jsParseYarnLock(content) {
+  const packages = [];
+  const packageIndex = {
+    __proto__: null
+  };
+  const isBerry = (0, import_string.StringPrototypeIndexOf)(content, "__metadata:") !== -1;
+  let pos = 0;
+  while (pos < content.length) {
+    const eol = (0, import_string.StringPrototypeIndexOf)(content, "\n", pos);
+    const end = eol === -1 ? content.length : eol;
+    const line = (0, import_string.StringPrototypeSlice)(content, pos, end);
+    pos = end + 1;
+    if (!line || (0, import_string.StringPrototypeTrim)(line) === "" || line[0] === "#") {
+      continue;
+    }
+    if ((0, import_string.StringPrototypeTrim)(line) === "__metadata:") {
+      pos = skipIndentedBlock(content, pos);
+      continue;
+    }
+    if (line[0] === " " || line[0] === "	") {
+      continue;
+    }
+    const trimmed = (0, import_string.StringPrototypeTrim)(line);
+    if (!(0, import_string.StringPrototypeEndsWith)(trimmed, ":")) {
+      continue;
+    }
+    const spec = (0, import_string.StringPrototypeTrim)((0, import_string.StringPrototypeSlice)(trimmed, 0, -1));
+    let header = stripQuotes(spec);
+    const commaIdx = (0, import_string.StringPrototypeIndexOf)(header, ",");
+    if (commaIdx !== -1) {
+      header = (0, import_string.StringPrototypeTrim)((0, import_string.StringPrototypeSlice)(header, 0, commaIdx));
+    }
+    if ((0, import_string.StringPrototypeIndexOf)(header, "@workspace:") !== -1) {
+      pos = skipIndentedBlock(content, pos);
+      continue;
+    }
+    const parsed = (0, import_parse_yarn_descriptor.parseYarnDescriptor)(header);
+    const entry = newEntry(parsed.name);
+    pos = consumeEntryProperties(content, pos, entry);
+    if (isBerry && entry.linkType === "soft") {
+      continue;
+    }
+    if (entry.name && entry.version) {
+      const ref = (0, import_object.ObjectFreeze)({
+        __proto__: null,
+        name: entry.name,
+        version: entry.version,
+        resolved: entry.resolved,
+        integrity: entry.integrity || entry.checksum || void 0,
+        ecosystem: "npm",
+        depType: "prod",
+        isDev: false,
+        isOptional: entry.isOptional,
+        isPeer: false,
+        isBundled: false,
+        vcsUrl: void 0,
+        vcsCommit: void 0,
+        dependencies: entry.dependencies
+      });
+      (0, import_array.ArrayPrototypePush)(packages, ref);
+      addToYarnIndex(packageIndex, entry.name, packages.length - 1);
+    }
+  }
+  return (0, import_object.ObjectFreeze)({
+    __proto__: null,
+    type: "lockfile",
+    lockVersion: isBerry ? "berry" : "1",
+    ecosystem: "npm",
+    packages: (0, import_object.ObjectFreeze)(packages),
+    _index: packageIndex
+  });
+}
+function newEntry(name) {
+  return {
+    name,
+    version: void 0,
+    resolved: void 0,
+    integrity: void 0,
+    checksum: void 0,
+    dependencies: [],
+    isOptional: false,
+    linkType: void 0
+  };
+}
+function skipIndentedBlock(content, startPos) {
+  let pos = startPos;
+  while (pos < content.length) {
+    const eol = (0, import_string.StringPrototypeIndexOf)(content, "\n", pos);
+    const end = eol === -1 ? content.length : eol;
+    const line = (0, import_string.StringPrototypeSlice)(content, pos, end);
+    if (line.length === 0 || line[0] !== " " && line[0] !== "	") {
+      return pos;
+    }
+    pos = end + 1;
+  }
+  return pos;
+}
+function stripQuotes(s) {
+  if (s.length === 0) {
+    return s;
+  }
+  let out = s;
+  if ((0, import_string.StringPrototypeCharCodeAt)(out, 0) === 34) {
+    out = (0, import_string.StringPrototypeSlice)(out, 1);
+  }
+  if (out.length > 0 && (0, import_string.StringPrototypeCharCodeAt)(out, out.length - 1) === 34) {
+    out = (0, import_string.StringPrototypeSlice)(out, 0, -1);
+  }
+  return out;
+}
+function valueAfterKey(line, keyLen) {
+  return (0, import_string.StringPrototypeTrim)((0, import_string.StringPrototypeSlice)(line, keyLen));
+}
+const _smol = (0, import_manifest.getSmolManifest)();
+const parseYarnLock = _smol ? (
+  /* c8 ignore next 2 - smol Node binary only. */
+  (content) => _smol.parseLockfile(content, "npm", "yarn")
+) : jsParseYarnLock;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  addToYarnIndex,
+  consumeDependenciesMeta,
+  consumeDependencyList,
+  consumeEntryProperties,
+  jsParseYarnLock,
+  newEntry,
+  parseYarnLock,
+  skipIndentedBlock,
+  stripQuotes,
+  valueAfterKey
+});

package/dist/eco/npm/yarnpkg/yarn/parse-yarn-descriptor.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file `parseYarnDescriptor(descriptor)` — extracts the package name from a
+ *   yarn lockfile spec key. Spec formats handled:
+ *
+ *   - Yarn Classic: `name@^1.0.0` → `name`
+ *   - Berry npm: `name@npm:^1.0.0` → `name`
+ *   - Berry workspace: `name@workspace:^1.0.0` → `name`
+ *   - Berry patch: `patch:name@npm:1.0.0#…` → `name`
+ *   - Berry patch (encoded): `patch:name@npm%3A1.0.0#…` → `name`
+ *   - Scoped: `@scope/name@^1.0.0` → `@scope/name` Matches socket-btm's
+ *     smol-manifest internal `parseYarnDescriptor`.
+ */
+export interface YarnDescriptor {
+    readonly name: string;
+}
+export declare function parseYarnDescriptor(descriptor: string): YarnDescriptor;

package/dist/eco/npm/yarnpkg/yarn/parse-yarn-descriptor.js

@@ -0,0 +1,68 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var parse_yarn_descriptor_exports = {};
+__export(parse_yarn_descriptor_exports, {
+  parseYarnDescriptor: () => parseYarnDescriptor
+});
+module.exports = __toCommonJS(parse_yarn_descriptor_exports);
+var import_string = require("../../../../primordials/string");
+const PATCH_PREFIX = "patch:";
+const PATCH_PREFIX_LEN = PATCH_PREFIX.length;
+const NPM_PROTO = "@npm:";
+const NPM_PROTO_ENCODED = "@npm%3A";
+const WORKSPACE_PROTO = "@workspace:";
+function parseYarnDescriptor(descriptor) {
+  if ((0, import_string.StringPrototypeIndexOf)(descriptor, PATCH_PREFIX) === 0) {
+    const afterPatch = (0, import_string.StringPrototypeSlice)(descriptor, PATCH_PREFIX_LEN);
+    let npmIndex = (0, import_string.StringPrototypeIndexOf)(afterPatch, NPM_PROTO);
+    const npmEncodedIndex = (0, import_string.StringPrototypeIndexOf)(
+      afterPatch,
+      NPM_PROTO_ENCODED
+    );
+    const workspaceIndex = (0, import_string.StringPrototypeIndexOf)(afterPatch, WORKSPACE_PROTO);
+    if (npmEncodedIndex > 0 && (npmIndex === -1 || npmEncodedIndex < npmIndex)) {
+      npmIndex = npmEncodedIndex;
+    }
+    if (npmIndex > 0) {
+      return { name: (0, import_string.StringPrototypeSlice)(afterPatch, 0, npmIndex) };
+    }
+    if (workspaceIndex > 0) {
+      return { name: (0, import_string.StringPrototypeSlice)(afterPatch, 0, workspaceIndex) };
+    }
+  }
+  let protocolIndex = (0, import_string.StringPrototypeIndexOf)(descriptor, NPM_PROTO);
+  if (protocolIndex > 0) {
+    return { name: (0, import_string.StringPrototypeSlice)(descriptor, 0, protocolIndex) };
+  }
+  protocolIndex = (0, import_string.StringPrototypeIndexOf)(descriptor, WORKSPACE_PROTO);
+  if (protocolIndex > 0) {
+    return { name: (0, import_string.StringPrototypeSlice)(descriptor, 0, protocolIndex) };
+  }
+  const atIdx = (0, import_string.StringPrototypeLastIndexOf)(descriptor, "@");
+  if (atIdx > 0) {
+    return { name: (0, import_string.StringPrototypeSlice)(descriptor, 0, atIdx) };
+  }
+  return { name: descriptor };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseYarnDescriptor
+});

package/dist/{types.d.ts → eco/purl.d.ts}

@@ -1,19 +1,14 @@
 /**
- * @fileoverview Type definitions for Socket Registry.
+ * @file PURL (Package URL) ecosystem identifiers shared across every package
+ *   manager Socket understands.
+ *
+ *   - `PURL_Type` — runtime const mapping uppercase keys to lowercase ecosystem
+ *     slugs (e.g. `PURL_Type.NPM === 'npm'`)
+ *   - `PURLString` — string-union of every PURL ecosystem slug
+ *   - `EcosystemString` — semantic alias of `PURLString` for places where
+ *     "ecosystem" reads more naturally than "PURL string" Based on
+ *     SocketPURL_Type from socket-sdk-js.
  */
-declare const Categories: {
-    readonly CLEANUP: 'cleanup';
-    readonly LEVELUP: 'levelup';
-    readonly SPEEDUP: 'speedup';
-    readonly TUNEUP: 'tuneup';
-};
-export type CategoryString = (typeof Categories)[keyof typeof Categories];
-declare const Interop: {
-    readonly BROWSERIFY: 'browserify';
-    readonly CJS: 'cjs';
-    readonly ESM: 'esm';
-};
-export type InteropString = (typeof Interop)[keyof typeof Interop];
 export declare const PURL_Type: {
     readonly ALPM: 'alpm';
     readonly APK: 'apk';
@@ -48,16 +43,9 @@ export declare const PURL_Type: {
     readonly VCS: 'vcs';
     readonly VSCODE: 'vscode';
 };
-export type PURLString = (typeof PURL_Type)[keyof typeof PURL_Type];
+export type PURLString = 'alpm' | 'apk' | 'bitbucket' | 'cocoapods' | 'cargo' | 'chrome' | 'composer' | 'conan' | 'conda' | 'cran' | 'deb' | 'docker' | 'gem' | 'generic' | 'github' | 'golang' | 'hackage' | 'hex' | 'huggingface' | 'maven' | 'mlflow' | 'npm' | 'nuget' | 'oci' | 'pub' | 'pypi' | 'qpkg' | 'rpm' | 'swid' | 'swift' | 'vcs' | 'vscode';
+/**
+ * Semantic alias of `PURLString` — same string union, used where "ecosystem"
+ * reads more naturally than "PURL".
+ */
 export type EcosystemString = PURLString;
-export type ManifestEntryData = {
-    categories?: CategoryString[] | undefined;
-    interop?: InteropString | undefined;
-    license?: string | undefined;
-    name: string;
-    version: string;
-    [key: string]: unknown;
-};
-export type ManifestEntry = [packageName: string, data: ManifestEntryData];
-export type Manifest = Record<EcosystemString, ManifestEntry[]>;
-export {};

package/dist/{types.js → eco/purl.js}

@@ -18,11 +18,11 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-__export(types_exports, {
+var purl_exports = {};
+__export(purl_exports, {
   PURL_Type: () => PURL_Type
 });
-module.exports = __toCommonJS(types_exports);
+module.exports = __toCommonJS(purl_exports);
 const PURL_Type = {
   ALPM: "alpm",
   APK: "apk",

package/dist/eco/types.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Socket Registry ecosystem schema types — tags for packages and the
+ *   manifest entries the registry build pipeline emits.
+ *
+ *   - `CategoryString` — registry intent tag (cleanup/levelup/...)
+ *   - `InteropString` — module-format tag (cjs/esm/browserify)
+ *   - `ManifestEntryData` — per-package metadata (name/version + tags)
+ *   - `ManifestEntry` — `[packageName, data]` tuple shape
+ *   - `Manifest` — top-level map keyed by ecosystem Constants and PURL ecosystem
+ *     identifiers live in `./purl`.
+ */
+import type { EcosystemString } from './purl';
+/**
+ * Socket Registry category tag for packages.
+ *
+ * - `cleanup` — removes unused / unsafe code
+ * - `levelup` — adds capabilities (modern API surface, new features)
+ * - `speedup` — performance optimization
+ * - `tuneup` — quality/reliability tweaks
+ */
+export type CategoryString = 'cleanup' | 'levelup' | 'speedup' | 'tuneup';
+/**
+ * Module-format interop tag for packages.
+ *
+ * - `browserify` — bundled for browser consumption (CJS + shims)
+ * - `cjs` — CommonJS
+ * - `esm` — ES modules
+ */
+export type InteropString = 'browserify' | 'cjs' | 'esm';
+/**
+ * Per-package metadata emitted into the manifest. The `[key: string]` tail
+ * keeps the type open for ecosystem-specific extensions added by downstream
+ * tooling.
+ */
+export type ManifestEntryData = {
+    categories?: CategoryString[] | undefined;
+    interop?: InteropString | undefined;
+    license?: string | undefined;
+    name: string;
+    version: string;
+    [key: string]: unknown;
+};
+/**
+ * Single manifest entry as a `[name, data]` tuple — the on-disk shape used by
+ * the registry build pipeline.
+ */
+export type ManifestEntry = [packageName: string, data: ManifestEntryData];
+/**
+ * Top-level manifest keyed by ecosystem (PURL slug).
+ */
+export type Manifest = Record<EcosystemString, ManifestEntry[]>;

package/dist/eco/types.js

@@ -0,0 +1,18 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/effects/pulse-frames.d.ts

@@ -1,34 +1,33 @@
 /**
- * @fileoverview Socket pulse animation frames generator.
- * Generates themeable pulsing animation frames using sparkles (✧ ✦) and lightning (⚡).
- * Follows the cli-spinners format: https://github.com/sindresorhus/cli-spinners
+ * @file Socket pulse animation frames generator. Generates themeable pulsing
+ *   animation frames using sparkles (✧ ✦) and lightning (⚡). Follows the
+ *   cli-spinners format: https://github.com/sindresorhus/cli-spinners.
  */
 export type SocketFramesOptions = {
     readonly baseColor?: readonly [number, number, number] | undefined;
     readonly interval?: number | undefined;
     /**
-     * Theme to use for pulse colors.
-     * Can be a theme name ('socket', 'sunset', etc.) or a Theme object.
-     * Note: Currently frames only contain brightness modifiers.
-     * Colors are applied by yocto-spinner based on spinner.color.
+     * Theme to use for pulse colors. Can be a theme name ('socket', 'sunset',
+     * etc.) or a Theme object. Note: Currently frames only contain brightness
+     * modifiers. Colors are applied by yocto-spinner based on spinner.color.
      */
     readonly theme?: import('../themes/types').Theme | import('../themes/themes').ThemeName | undefined;
 };
 /**
- * Generate Socket pulse animation frames.
- * Creates a pulsing throbber using Unicode sparkles and lightning symbols.
- * Frames use brightness modifiers (bold/dim) but no embedded colors.
- * Yocto-spinner applies the current spinner color to each frame.
+ * Generate Socket pulse animation frames. Creates a pulsing throbber using
+ * Unicode sparkles and lightning symbols. Frames use brightness modifiers
+ * (bold/dim) but no embedded colors. Yocto-spinner applies the current spinner
+ * color to each frame.
  *
  * Returns a spinner definition compatible with cli-spinners format.
  *
- * @see https://github.com/sindresorhus/cli-spinners/blob/main/spinners.json
- *
  * @example
- * ```typescript
- * const { frames, interval } = generateSocketSpinnerFrames()
- * console.log(frames.length, interval) // 18 50
- * ```
+ *   ;```typescript
+ *   const { frames, interval } = generateSocketSpinnerFrames()
+ *   console.log(frames.length, interval) // 18 50
+ *   ```
+ *
+ * @see https://github.com/sindresorhus/cli-spinners/blob/main/spinners.json
  */
 export declare function generateSocketSpinnerFrames(options?: SocketFramesOptions | undefined): {
     frames: string[];

package/dist/effects/pulse-frames.js

@@ -23,13 +23,13 @@ __export(pulse_frames_exports, {
   generateSocketSpinnerFrames: () => generateSocketSpinnerFrames
 });
 module.exports = __toCommonJS(pulse_frames_exports);
-var import_ansi = require("../ansi");
+var import_constants = require("../ansi/constants");
 function generateSocketSpinnerFrames(options) {
   const opts = { __proto__: null, ...options };
   const interval = opts.interval ?? 50;
-  const bold = import_ansi.ANSI_BOLD;
-  const dim = import_ansi.ANSI_DIM;
-  const reset = import_ansi.ANSI_RESET;
+  const bold = import_constants.ANSI_BOLD;
+  const dim = import_constants.ANSI_DIM;
+  const reset = import_constants.ANSI_RESET;
   const lightning = "\u26A1\uFE0E";
   const starFilled = "\u2726\uFE0E ";
   const starOutline = "\u2727\uFE0E ";

package/dist/effects/shimmer-keyframes.d.ts

@@ -1,36 +1,33 @@
 /**
- * @fileoverview SVG keyframe batcher for the shimmer engine.
- *
- * Pre-renders N frames of the engine and emits per-character keyTimes /
- * values arrays suitable for SVG SMIL `<animate>` elements. The output is
- * deduplicated (consecutive identical colors collapse to a single
- * keyframe) and closed with a `t=1` anchor so the animation loops cleanly.
- *
- * Use with `calcMode="discrete"` to reproduce the engine's output exactly
- * — no SMIL interpolation between frames, each frame holds until the
- * next changes.
+ * @file SVG keyframe batcher for the shimmer engine. Pre-renders N frames of
+ *   the engine and emits per-character keyTimes / values arrays suitable for
+ *   SVG SMIL `<animate>` elements. The output is deduplicated (consecutive
+ *   identical colors collapse to a single keyframe) and closed with a `t=1`
+ *   anchor so the animation loops cleanly. Use with `calcMode="discrete"` to
+ *   reproduce the engine's output exactly — no SMIL interpolation between
+ *   frames, each frame holds until the next changes.
  *
  * @example
- * ```ts
- * import { configToSpec } from '@socketsecurity/lib/effects/shimmer'
- * import { toShimmerKeyframes } from '@socketsecurity/lib/effects/shimmer-keyframes'
- * const spec = configToSpec({ color: RAINBOW_GRADIENT, dir: 'ltr' }, 10)
- * const tracks = toShimmerKeyframes(spec, 10, 60)
- * // Emit one <animate> per char in your SVG:
- * //   <animate attributeName="fill" calcMode="discrete"
- * //            keyTimes={tracks[i].times.join(';')}
- * //            values={tracks[i].values.join(';')}
- * //            dur="3s" repeatCount="indefinite" />
- * ```
+ *   ;```ts
+ *   import { configToSpec } from '@socketsecurity/lib/effects/shimmer'
+ *   import { toShimmerKeyframes } from '@socketsecurity/lib/effects/shimmer-keyframes'
+ *   const spec = configToSpec({ color: RAINBOW_GRADIENT, dir: 'ltr' }, 10)
+ *   const tracks = toShimmerKeyframes(spec, 10, 60)
+ *   // Emit one <animate> per char in your SVG:
+ *   //   <animate attributeName="fill" calcMode="discrete"
+ *   //            keyTimes={tracks[i].times.join(';')}
+ *   //            values={tracks[i].values.join(';')}
+ *   //            dur="3s" repeatCount="indefinite" />
+ *   ```
  */
 import { type ShimmerSpec } from './shimmer';
 /**
- * Keyframe track for a single character. `times[i]` is in [0, 1] and
- * pairs with `values[i]` (an `rgb(R,G,B)` string). Use directly as SMIL
- * `<animate>` attributes:
+ * Keyframe track for a single character. `times[i]` is in [0, 1] and pairs with
+ * `values[i]` (an `rgb(R,G,B)` string). Use directly as SMIL `<animate>`
+ * attributes:
  *
  * ```jsx
- * <animate
+ * ;<animate
  *   keyTimes={track.times.join(';')}
  *   values={track.values.join(';')}
  *   calcMode="discrete"
@@ -38,25 +35,30 @@ import { type ShimmerSpec } from './shimmer';
  * ```
  */
 export type Keyframes = {
-    /** Normalized timestamps in [0, 1], monotonically non-decreasing. */
+    /**
+     * Normalized timestamps in [0, 1], monotonically non-decreasing.
+     */
     readonly times: readonly number[];
-    /** `rgb(R,G,B)` color strings, paired by index with `times`. */
+    /**
+     * `rgb(R,G,B)` color strings, paired by index with `times`.
+     */
     readonly values: readonly string[];
 };
 /**
  * Render N frames of a shimmer spec into per-character keyframe tracks.
  *
- * Output is one {@link Keyframes} object per char. Consecutive identical
- * colors collapse — only the first occurrence emits a keyframe, the rest
- * are implicit (SMIL holds the previous value). A final keyframe at `t=1`
- * closes the loop with the same value as `t=0` so playback wraps cleanly.
+ * Output is one {@link Keyframes} object per char. Consecutive identical colors
+ * collapse — only the first occurrence emits a keyframe, the rest are implicit
+ * (SMIL holds the previous value). A final keyframe at `t=1` closes the loop
+ * with the same value as `t=0` so playback wraps cleanly.
+ *
+ * Use with `calcMode="discrete"` to reproduce the engine's per-frame output
+ * exactly (no SMIL interpolation between frames).
  *
- * Use with `calcMode="discrete"` to reproduce the engine's per-frame
- * output exactly (no SMIL interpolation between frames).
+ * @param spec Functional shimmer specification.
+ * @param textLength Number of chars to colorize.
+ * @param frames Total frame count to bake into the loop.
  *
- * @param spec functional shimmer specification
- * @param textLength number of chars to colorize
- * @param frames total frame count to bake into the loop
- * @returns one Keyframes track per char index, in order
+ * @returns One Keyframes track per char index, in order
  */
 export declare function toShimmerKeyframes(spec: ShimmerSpec, textLength: number, frames: number): Keyframes[];