@socketsecurity/lib 5.28.0 → 6.0.0

package/dist/external/@npmcli/package-json.js

@@ -1,4 +1,28 @@
-const { ArrayBufferIsView: _p_ArrayBufferIsView, ArrayCtor: _p_ArrayCtor, ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift, BufferConcat: _p_BufferConcat, BufferFrom: _p_BufferFrom, BufferIsBuffer: _p_BufferIsBuffer, DateCtor: _p_DateCtor, DateNow: _p_DateNow, DateParse: _p_DateParse, ErrorCtor: _p_ErrorCtor, JSONParse: _p_JSONParse, JSONStringify: _p_JSONStringify, MapCtor: _p_MapCtor, MathAbs: _p_MathAbs, MathFloor: _p_MathFloor, MathMax: _p_MathMax, MathMin: _p_MathMin, MathPow: _p_MathPow, MathRandom: _p_MathRandom, MathRound: _p_MathRound, ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectEntries: _p_ObjectEntries, ObjectFreeze: _p_ObjectFreeze, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectGetPrototypeOf: _p_ObjectGetPrototypeOf, ObjectKeys: _p_ObjectKeys, PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject, PromiseResolve: _p_PromiseResolve, ReflectDefineProperty: _p_ReflectDefineProperty, RegExpCtor: _p_RegExpCtor, SetCtor: _p_SetCtor, StringFromCharCode: _p_StringFromCharCode, StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeCharCodeAt: _p_StringPrototypeCharCodeAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeLocaleCompare: _p_StringPrototypeLocaleCompare, StringPrototypeStartsWith: _p_StringPrototypeStartsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring, TypeErrorCtor: _p_TypeErrorCtor, URLCtor: _p_URLCtor } = require('../../primordials.js')
+const { ArrayBufferIsView: _p_ArrayBufferIsView, ArrayCtor: _p_ArrayCtor, ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift } = require('../../primordials/array.js')
+const { BufferConcat: _p_BufferConcat, BufferFrom: _p_BufferFrom, BufferIsBuffer: _p_BufferIsBuffer } = require('../../primordials/buffer.js')
+
+const { DateCtor: _p_DateCtor, DateNow: _p_DateNow, DateParse: _p_DateParse } = require('../../primordials/date.js')
+
+const { ErrorCtor: _p_ErrorCtor, TypeErrorCtor: _p_TypeErrorCtor } = require('../../primordials/error.js')
+
+const { JSONParse: _p_JSONParse, JSONStringify: _p_JSONStringify } = require('../../primordials/json.js')
+
+const { MapCtor: _p_MapCtor, SetCtor: _p_SetCtor } = require('../../primordials/map-set.js')
+
+const { MathAbs: _p_MathAbs, MathFloor: _p_MathFloor, MathMax: _p_MathMax, MathMin: _p_MathMin, MathPow: _p_MathPow, MathRandom: _p_MathRandom, MathRound: _p_MathRound } = require('../../primordials/math.js')
+
+const { ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectEntries: _p_ObjectEntries, ObjectFreeze: _p_ObjectFreeze, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectGetPrototypeOf: _p_ObjectGetPrototypeOf, ObjectKeys: _p_ObjectKeys } = require('../../primordials/object.js')
+
+const { PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject, PromiseResolve: _p_PromiseResolve } = require('../../primordials/promise.js')
+
+const { ReflectDefineProperty: _p_ReflectDefineProperty } = require('../../primordials/reflect.js')
+
+const { RegExpCtor: _p_RegExpCtor } = require('../../primordials/regexp.js')
+
+const { StringFromCharCode: _p_StringFromCharCode, StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeCharCodeAt: _p_StringPrototypeCharCodeAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeLocaleCompare: _p_StringPrototypeLocaleCompare, StringPrototypeStartsWith: _p_StringPrototypeStartsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../../primordials/string.js')
+
+const { URLCtor: _p_URLCtor } = require('../../primordials/url.js')
+
 "use strict";
 /**
  * Bundled from @npmcli/package-json
@@ -1655,7 +1679,7 @@ var require_commonjs = __commonJS({
           if (this.#sizes) {
             entry.size = this.#sizes[i];
           }
-          arr.unshift([key, entry]);
+          _p_ArrayPrototypeUnshift(arr, [key, entry]);
         }
         return arr;
       }
@@ -3039,9 +3063,9 @@ var require_commonjs3 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js
 var require_assert_valid_pattern = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.assertValidPattern = void 0;
@@ -3058,9 +3082,9 @@ var require_assert_valid_pattern = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/brace-expressions.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/brace-expressions.js
 var require_brace_expressions = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/brace-expressions.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/brace-expressions.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.parseClass = void 0;
@@ -3175,9 +3199,9 @@ var require_brace_expressions = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/unescape.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/unescape.js
 var require_unescape = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/unescape.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/unescape.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.unescape = void 0;
@@ -3188,16 +3212,43 @@ var require_unescape = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/ast.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/ast.js
 var require_ast = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/ast.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/ast.js"(exports2) {
     "use strict";
+    var _a;
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.AST = void 0;
     var brace_expressions_js_1 = require_brace_expressions();
     var unescape_js_1 = require_unescape();
     var types = /* @__PURE__ */ new _p_SetCtor(["!", "?", "+", "*", "@"]);
     var isExtglobType = /* @__PURE__ */ __name((c) => types.has(c), "isExtglobType");
+    var isExtglobAST = /* @__PURE__ */ __name((c) => isExtglobType(c.type), "isExtglobAST");
+    var adoptionMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["@"]],
+      ["?", ["?", "@"]],
+      ["@", ["@"]],
+      ["*", ["*", "+", "?", "@"]],
+      ["+", ["+", "@"]]
+    ]);
+    var adoptionWithSpaceMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["?"]],
+      ["@", ["?"]],
+      ["+", ["?", "*"]]
+    ]);
+    var adoptionAnyMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["?", "@"]],
+      ["?", ["?", "@"]],
+      ["@", ["?", "@"]],
+      ["*", ["*", "+", "?", "@"]],
+      ["+", ["+", "@", "?", "*"]]
+    ]);
+    var usurpMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", /* @__PURE__ */ new _p_MapCtor([["!", "@"]])],
+      ["?", /* @__PURE__ */ new _p_MapCtor([["*", "*"], ["+", "*"]])],
+      ["@", /* @__PURE__ */ new _p_MapCtor([["!", "!"], ["?", "?"], ["@", "@"], ["*", "*"], ["+", "+"]])],
+      ["+", /* @__PURE__ */ new _p_MapCtor([["?", "*"], ["*", "*"]])]
+    ]);
     var startNoTraversal = "(?!(?:^|/)\\.\\.?(?:$|/))";
     var startNoDot = "(?!\\.)";
     var addPatternStart = /* @__PURE__ */ new _p_SetCtor(["[", "."]);
@@ -3207,7 +3258,7 @@ var require_ast = __commonJS({
     var qmark = "[^/]";
     var star = qmark + "*?";
     var starNoEmpty = qmark + "+?";
-    var AST = class _AST {
+    var AST = class {
       static {
         __name(this, "AST");
       }
@@ -3290,7 +3341,7 @@ var require_ast = __commonJS({
         for (const p of parts) {
           if (p === "")
             continue;
-          if (typeof p !== "string" && !(p instanceof _AST && p.#parent === this)) {
+          if (typeof p !== "string" && !(p instanceof _a && p.#parent === this)) {
             throw new _p_ErrorCtor("invalid part: " + p);
           }
           this.#parts.push(p);
@@ -3315,7 +3366,7 @@ var require_ast = __commonJS({
         const p = this.#parent;
         for (let i = 0; i < this.#parentIndex; i++) {
           const pp = p.#parts[i];
-          if (!(pp instanceof _AST && pp.type === "!")) {
+          if (!(pp instanceof _a && pp.type === "!")) {
             return false;
           }
         }
@@ -3340,13 +3391,14 @@ var require_ast = __commonJS({
           this.push(part.clone(this));
       }
       clone(parent) {
-        const c = new _AST(this.type, parent);
+        const c = new _a(this.type, parent);
         for (const p of this.#parts) {
           c.copyIn(p);
         }
         return c;
       }
-      static #parseAST(str, ast, pos, opt) {
+      static #parseAST(str, ast, pos, opt, extDepth) {
+        const maxDepth = opt.maxExtglobRecursion ?? 2;
         let escaping = false;
         let inBrace = false;
         let braceStart = -1;
@@ -3378,11 +3430,12 @@ var require_ast = __commonJS({
               acc2 += c;
               continue;
             }
-            if (!opt.noext && isExtglobType(c) && _p_StringPrototypeCharAt(str, i2) === "(") {
+            const doRecurse = !opt.noext && isExtglobType(c) && _p_StringPrototypeCharAt(str, i2) === "(" && extDepth <= maxDepth;
+            if (doRecurse) {
               ast.push(acc2);
               acc2 = "";
-              const ext = new _AST(c, ast);
-              i2 = _AST.#parseAST(str, ext, i2, opt);
+              const ext = new _a(c, ast);
+              i2 = _a.#parseAST(str, ext, i2, opt, extDepth + 1);
               ast.push(ext);
               continue;
             }
@@ -3392,7 +3445,7 @@ var require_ast = __commonJS({
           return i2;
         }
         let i = pos + 1;
-        let part = new _AST(null, ast);
+        let part = new _a(null, ast);
         const parts = [];
         let acc = "";
         while (i < str.length) {
@@ -3419,19 +3472,22 @@ var require_ast = __commonJS({
             acc += c;
             continue;
           }
-          if (isExtglobType(c) && _p_StringPrototypeCharAt(str, i) === "(") {
+          const doRecurse = isExtglobType(c) && _p_StringPrototypeCharAt(str, i) === "(" && /* c8 ignore start - the maxDepth is sufficient here */
+          (extDepth <= maxDepth || ast && ast.#canAdoptType(c));
+          if (doRecurse) {
+            const depthAdd = ast && ast.#canAdoptType(c) ? 0 : 1;
             part.push(acc);
             acc = "";
-            const ext = new _AST(c, part);
+            const ext = new _a(c, part);
             part.push(ext);
-            i = _AST.#parseAST(str, ext, i, opt);
+            i = _a.#parseAST(str, ext, i, opt, extDepth + depthAdd);
             continue;
           }
           if (c === "|") {
             part.push(acc);
             acc = "";
             parts.push(part);
-            part = new _AST(null, ast);
+            part = new _a(null, ast);
             continue;
           }
           if (c === ")") {
@@ -3450,9 +3506,101 @@ var require_ast = __commonJS({
         ast.#parts = [_p_StringPrototypeSubstring(str, pos - 1)];
         return i;
       }
+      #canAdoptWithSpace(child) {
+        return this.#canAdopt(child, adoptionWithSpaceMap);
+      }
+      #canAdopt(child, map = adoptionMap) {
+        if (!child || typeof child !== "object" || child.type !== null || child.#parts.length !== 1 || this.type === null) {
+          return false;
+        }
+        const gc = child.#parts[0];
+        if (!gc || typeof gc !== "object" || gc.type === null) {
+          return false;
+        }
+        return this.#canAdoptType(gc.type, map);
+      }
+      #canAdoptType(c, map = adoptionAnyMap) {
+        return !!map.get(this.type)?.includes(c);
+      }
+      #adoptWithSpace(child, index) {
+        const gc = child.#parts[0];
+        const blank = new _a(null, gc, this.options);
+        blank.#parts.push("");
+        gc.push(blank);
+        this.#adopt(child, index);
+      }
+      #adopt(child, index) {
+        const gc = child.#parts[0];
+        this.#parts.splice(index, 1, ...gc.#parts);
+        for (const p of gc.#parts) {
+          if (typeof p === "object")
+            p.#parent = this;
+        }
+        this.#toString = void 0;
+      }
+      #canUsurpType(c) {
+        const m = usurpMap.get(this.type);
+        return !!m?.has(c);
+      }
+      #canUsurp(child) {
+        if (!child || typeof child !== "object" || child.type !== null || child.#parts.length !== 1 || this.type === null || this.#parts.length !== 1) {
+          return false;
+        }
+        const gc = child.#parts[0];
+        if (!gc || typeof gc !== "object" || gc.type === null) {
+          return false;
+        }
+        return this.#canUsurpType(gc.type);
+      }
+      #usurp(child) {
+        const m = usurpMap.get(this.type);
+        const gc = child.#parts[0];
+        const nt = m?.get(gc.type);
+        if (!nt)
+          return false;
+        this.#parts = gc.#parts;
+        for (const p of this.#parts) {
+          if (typeof p === "object")
+            p.#parent = this;
+        }
+        this.type = nt;
+        this.#toString = void 0;
+        this.#emptyExt = false;
+      }
+      #flatten() {
+        if (!isExtglobAST(this)) {
+          for (const p of this.#parts) {
+            if (typeof p === "object")
+              p.#flatten();
+          }
+        } else {
+          let iterations = 0;
+          let done = false;
+          do {
+            done = true;
+            for (let i = 0; i < this.#parts.length; i++) {
+              const c = this.#parts[i];
+              if (typeof c === "object") {
+                c.#flatten();
+                if (this.#canAdopt(c)) {
+                  done = false;
+                  this.#adopt(c, i);
+                } else if (this.#canAdoptWithSpace(c)) {
+                  done = false;
+                  this.#adoptWithSpace(c, i);
+                } else if (this.#canUsurp(c)) {
+                  done = false;
+                  this.#usurp(c);
+                }
+              }
+            }
+          } while (!done && ++iterations < 10);
+        }
+        this.#toString = void 0;
+      }
       static fromGlob(pattern, options = {}) {
-        const ast = new _AST(null, void 0, options);
-        _AST.#parseAST(pattern, ast, 0, options);
+        const ast = new _a(null, void 0, options);
+        _a.#parseAST(pattern, ast, 0, options, 0);
         return ast;
       }
       // returns the regular expression if there's magic, or the unescaped
@@ -3546,12 +3694,14 @@ var require_ast = __commonJS({
       // or start or whatever) and prepend ^ or / at the Regexp construction.
       toRegExpSource(allowDot) {
         const dot = allowDot ?? !!this.#options.dot;
-        if (this.#root === this)
+        if (this.#root === this) {
+          this.#flatten();
           this.#fillNegs();
-        if (!this.type) {
+        }
+        if (!isExtglobAST(this)) {
           const noEmpty = this.isStart() && this.isEnd();
           const src = this.#parts.map((p) => {
-            const [re, _, hasMagic, uflag] = typeof p === "string" ? _AST.#parseGlob(p, this.#hasMagic, noEmpty) : p.toRegExpSource(allowDot);
+            const [re, _, hasMagic, uflag] = typeof p === "string" ? _a.#parseGlob(p, this.#hasMagic, noEmpty) : p.toRegExpSource(allowDot);
             this.#hasMagic = this.#hasMagic || hasMagic;
             this.#uflag = this.#uflag || uflag;
             return re;
@@ -3590,9 +3740,10 @@ var require_ast = __commonJS({
         let body = this.#partsToRegExp(dot);
         if (this.isStart() && this.isEnd() && !body && this.type !== "!") {
           const s = this.toString();
-          this.#parts = [s];
-          this.type = null;
-          this.#hasMagic = void 0;
+          const me = this;
+          me.#parts = [s];
+          me.type = null;
+          me.#hasMagic = void 0;
           return [s, (0, unescape_js_1.unescape)(this.toString()), false, false];
         }
         let bodyDotAllowed = !repeated || allowDot || dot || !startNoDot ? "" : this.#partsToRegExp(true);
@@ -3682,12 +3833,13 @@ var require_ast = __commonJS({
       }
     };
     exports2.AST = AST;
+    _a = AST;
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/escape.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/escape.js
 var require_escape = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/escape.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/escape.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.escape = void 0;
@@ -3698,9 +3850,9 @@ var require_escape = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/index.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/index.js
 var require_commonjs4 = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/index.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/index.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.unescape = exports2.escape = exports2.AST = exports2.Minimatch = exports2.match = exports2.makeRe = exports2.braceExpand = exports2.defaults = exports2.filter = exports2.GLOBSTAR = exports2.sep = exports2.minimatch = void 0;
@@ -3872,11 +4024,13 @@ var require_commonjs4 = __commonJS({
       isWindows;
       platform;
       windowsNoMagicRoot;
+      maxGlobstarRecursion;
       regexp;
       constructor(pattern, options = {}) {
         (0, assert_valid_pattern_js_1.assertValidPattern)(pattern);
         options = options || {};
         this.options = options;
+        this.maxGlobstarRecursion = options.maxGlobstarRecursion ?? 200;
         this.pattern = pattern;
         this.platform = options.platform || defaultPlatform;
         this.isWindows = this.platform === "win32";
@@ -4209,7 +4363,8 @@ var require_commonjs4 = __commonJS({
       // out of pattern, then that's fine, as long as all
       // the parts match.
       matchOne(file, pattern, partial = false) {
-        const options = this.options;
+        let fileStartIndex = 0;
+        let patternStartIndex = 0;
         if (this.isWindows) {
           const fileDrive = typeof file[0] === "string" && /^[a-z]:$/i.test(file[0]);
           const fileUNC = !fileDrive && file[0] === "" && file[1] === "" && file[2] === "?" && /^[a-z]:$/i.test(file[3]);
@@ -4218,14 +4373,14 @@ var require_commonjs4 = __commonJS({
           const fdi = fileUNC ? 3 : fileDrive ? 0 : void 0;
           const pdi = patternUNC ? 3 : patternDrive ? 0 : void 0;
           if (typeof fdi === "number" && typeof pdi === "number") {
-            const [fd, pd] = [file[fdi], pattern[pdi]];
+            const [fd, pd] = [
+              file[fdi],
+              pattern[pdi]
+            ];
             if (fd.toLowerCase() === pd.toLowerCase()) {
               pattern[pdi] = fd;
-              if (pdi > fdi) {
-                pattern = pattern.slice(pdi);
-              } else if (fdi > pdi) {
-                file = file.slice(fdi);
-              }
+              patternStartIndex = pdi;
+              fileStartIndex = fdi;
             }
           }
         }
@@ -4233,51 +4388,114 @@ var require_commonjs4 = __commonJS({
         if (optimizationLevel >= 2) {
           file = this.levelTwoFileOptimize(file);
         }
-        this.debug("matchOne", this, { file, pattern });
-        this.debug("matchOne", file.length, pattern.length);
-        for (var fi = 0, pi = 0, fl = file.length, pl = pattern.length; fi < fl && pi < pl; fi++, pi++) {
-          this.debug("matchOne loop");
-          var p = pattern[pi];
-          var f = file[fi];
-          this.debug(pattern, p, f);
-          if (p === false) {
+        if (pattern.includes(exports2.GLOBSTAR)) {
+          return this.#matchGlobstar(file, pattern, partial, fileStartIndex, patternStartIndex);
+        }
+        return this.#matchOne(file, pattern, partial, fileStartIndex, patternStartIndex);
+      }
+      #matchGlobstar(file, pattern, partial, fileIndex, patternIndex) {
+        const firstgs = pattern.indexOf(exports2.GLOBSTAR, patternIndex);
+        const lastgs = pattern.lastIndexOf(exports2.GLOBSTAR);
+        const [head, body, tail] = [
+          pattern.slice(patternIndex, firstgs),
+          pattern.slice(firstgs + 1, lastgs),
+          pattern.slice(lastgs + 1)
+        ];
+        if (head.length) {
+          const fileHead = file.slice(fileIndex, fileIndex + head.length);
+          if (!this.#matchOne(fileHead, head, partial, 0, 0))
             return false;
-          }
-          if (p === exports2.GLOBSTAR) {
-            this.debug("GLOBSTAR", [pattern, p, f]);
-            var fr = fi;
-            var pr = pi + 1;
-            if (pr === pl) {
-              this.debug("** at the end");
-              for (; fi < fl; fi++) {
-                if (file[fi] === "." || file[fi] === ".." || !options.dot && file[fi].charAt(0) === ".")
-                  return false;
-              }
-              return true;
+          fileIndex += head.length;
+        }
+        let fileTailMatch = 0;
+        if (tail.length) {
+          if (tail.length + fileIndex > file.length)
+            return false;
+          let tailStart = file.length - tail.length;
+          if (this.#matchOne(file, tail, partial, tailStart, 0)) {
+            fileTailMatch = tail.length;
+          } else {
+            if (file[file.length - 1] !== "" || fileIndex + tail.length === file.length) {
+              return false;
             }
-            while (fr < fl) {
-              var swallowee = file[fr];
-              this.debug("\nglobstar while", file, fr, pattern, pr, swallowee);
-              if (this.matchOne(file.slice(fr), pattern.slice(pr), partial)) {
-                this.debug("globstar found match!", fr, fl, swallowee);
-                return true;
-              } else {
-                if (swallowee === "." || swallowee === ".." || !options.dot && _p_StringPrototypeCharAt(swallowee, 0) === ".") {
-                  this.debug("dot detected!", file, fr, pattern, pr);
-                  break;
-                }
-                this.debug("globstar swallow a segment, and continue");
-                fr++;
-              }
+            tailStart--;
+            if (!this.#matchOne(file, tail, partial, tailStart, 0))
+              return false;
+            fileTailMatch = tail.length + 1;
+          }
+        }
+        if (!body.length) {
+          let sawSome = !!fileTailMatch;
+          for (let i2 = fileIndex; i2 < file.length - fileTailMatch; i2++) {
+            const f = String(file[i2]);
+            sawSome = true;
+            if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
+              return false;
             }
-            if (partial) {
-              this.debug("\n>>> no match, partial?", file, fr, pattern, pr);
-              if (fr === fl) {
-                return true;
-              }
+          }
+          return sawSome;
+        }
+        const bodySegments = [[[], 0]];
+        let currentBody = bodySegments[0];
+        let nonGsParts = 0;
+        const nonGsPartsSums = [0];
+        for (const b of body) {
+          if (b === exports2.GLOBSTAR) {
+            nonGsPartsSums.push(nonGsParts);
+            currentBody = [[], 0];
+            bodySegments.push(currentBody);
+          } else {
+            currentBody[0].push(b);
+            nonGsParts++;
+          }
+        }
+        let i = bodySegments.length - 1;
+        const fileLength = file.length - fileTailMatch;
+        for (const b of bodySegments) {
+          b[1] = fileLength - (nonGsPartsSums[i--] + b[0].length);
+        }
+        return !!this.#matchGlobStarBodySections(file, bodySegments, fileIndex, 0, partial, 0, !!fileTailMatch);
+      }
+      #matchGlobStarBodySections(file, bodySegments, fileIndex, bodyIndex, partial, globStarDepth, sawTail) {
+        const bs = bodySegments[bodyIndex];
+        if (!bs) {
+          for (let i = fileIndex; i < file.length; i++) {
+            sawTail = true;
+            const f = file[i];
+            if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
+              return false;
             }
+          }
+          return sawTail;
+        }
+        const [body, after] = bs;
+        while (fileIndex <= after) {
+          const m = this.#matchOne(file.slice(0, fileIndex + body.length), body, partial, fileIndex, 0);
+          if (m && globStarDepth < this.maxGlobstarRecursion) {
+            const sub = this.#matchGlobStarBodySections(file, bodySegments, fileIndex + body.length, bodyIndex + 1, partial, globStarDepth + 1, sawTail);
+            if (sub !== false)
+              return sub;
+          }
+          const f = file[fileIndex];
+          if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
             return false;
           }
+          fileIndex++;
+        }
+        return null;
+      }
+      #matchOne(file, pattern, partial, fileIndex, patternIndex) {
+        let fi;
+        let pi;
+        let pl;
+        let fl;
+        for (fi = fileIndex, pi = patternIndex, fl = file.length, pl = pattern.length; fi < fl && pi < pl; fi++, pi++) {
+          this.debug("matchOne loop");
+          let p = pattern[pi];
+          let f = file[fi];
+          this.debug(pattern, p, f);
+          if (p === false || p === exports2.GLOBSTAR)
+            return false;
           let hit;
           if (typeof p === "string") {
             hit = f === p;
@@ -13863,7 +14081,7 @@ ${polMsg}`;
 // node_modules/.pnpm/@npmcli+git@6.0.3/node_modules/@npmcli/git/lib/clone.js
 var require_clone = __commonJS({
   "node_modules/.pnpm/@npmcli+git@6.0.3/node_modules/@npmcli/git/lib/clone.js"(exports2, module2) {
-    var shallowHosts = /* @__PURE__ */ new _p_SetCtor([
+    var shallowHosts = /* @__PURE__ */ new Set([
       "github.com",
       "gist.github.com",
       "gitlab.com",

package/dist/external/@npmcli/promise-spawn.js

@@ -1,4 +1,18 @@
-const { ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift, BufferConcat: _p_BufferConcat, ErrorCtor: _p_ErrorCtor, ObjectAssign: _p_ObjectAssign, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectKeys: _p_ObjectKeys, PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject, RegExpCtor: _p_RegExpCtor, SetCtor: _p_SetCtor, StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../../primordials.js')
+const { ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift } = require('../../primordials/array.js')
+const { BufferConcat: _p_BufferConcat } = require('../../primordials/buffer.js')
+
+const { ErrorCtor: _p_ErrorCtor } = require('../../primordials/error.js')
+
+const { SetCtor: _p_SetCtor } = require('../../primordials/map-set.js')
+
+const { ObjectAssign: _p_ObjectAssign, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectKeys: _p_ObjectKeys } = require('../../primordials/object.js')
+
+const { PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject } = require('../../primordials/promise.js')
+
+const { RegExpCtor: _p_RegExpCtor } = require('../../primordials/regexp.js')
+
+const { StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../../primordials/string.js')
+
 "use strict";
 /**
  * Bundled from @npmcli/promise-spawn

package/dist/external/@socketregistry/packageurl-js.js

@@ -1,4 +1,10 @@
-const { BufferByteLength: _p_BufferByteLength, ErrorCtor: _p_ErrorCtor, MathMin: _p_MathMin, RegExpCtor: _p_RegExpCtor, SyntaxErrorCtor: _p_SyntaxErrorCtor } = require('../../primordials.js')
+const { BufferByteLength: _p_BufferByteLength } = require('../../primordials/buffer.js')
+const { ErrorCtor: _p_ErrorCtor, SyntaxErrorCtor: _p_SyntaxErrorCtor } = require('../../primordials/error.js')
+
+const { MathMin: _p_MathMin } = require('../../primordials/math.js')
+
+const { RegExpCtor: _p_RegExpCtor } = require('../../primordials/regexp.js')
+
 "use strict";
 /**
  * Bundled from @socketregistry/packageurl-js

package/dist/external/@socketregistry/yocto-spinner.js

@@ -1,4 +1,8 @@
-const { DateNow: _p_DateNow, MathMax: _p_MathMax, TypeErrorCtor: _p_TypeErrorCtor } = require('../../primordials.js')
+const { DateNow: _p_DateNow } = require('../../primordials/date.js')
+const { TypeErrorCtor: _p_TypeErrorCtor } = require('../../primordials/error.js')
+
+const { MathMax: _p_MathMax } = require('../../primordials/math.js')
+
 "use strict";
 /**
  * Bundled from @socketregistry/yocto-spinner

package/dist/external/@yarnpkg/extensions.js

@@ -1,4 +1,4 @@
-const { ObjectDefineProperty: _p_ObjectDefineProperty } = require('../../primordials.js')
+const { ObjectDefineProperty: _p_ObjectDefineProperty } = require('../../primordials/object.js')
 "use strict";
 /**
  * Bundled from @yarnpkg/extensions