@socketsecurity/lib 5.28.0 → 6.0.1

package/dist/archives.js

@@ -1,408 +0,0 @@
-"use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var archives_exports = {};
-__export(archives_exports, {
-  detectArchiveFormat: () => detectArchiveFormat,
-  extractArchive: () => extractArchive,
-  extractTar: () => extractTar,
-  extractTarGz: () => extractTarGz,
-  extractZip: () => extractZip
-});
-module.exports = __toCommonJS(archives_exports);
-var import_node_fs = require("node:fs");
-var import_node_process = __toESM(require("node:process"));
-var import_promises = require("node:stream/promises");
-var import_node_zlib = require("node:zlib");
-var import_fs = require("./fs");
-var import_normalize = require("./paths/normalize");
-var import_primordials = require("./primordials");
-const DEFAULT_MAX_FILE_SIZE = 100 * 1024 * 1024;
-const DEFAULT_MAX_TOTAL_SIZE = 1024 * 1024 * 1024;
-const DEFAULT_MAX_ENTRIES = 1e5;
-let _AdmZip;
-let _tarFs;
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getAdmZip() {
-  if (_AdmZip === void 0) {
-    _AdmZip = require("./external/adm-zip.js");
-  }
-  return _AdmZip;
-}
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
-// @__NO_SIDE_EFFECTS__
-function getTarFs() {
-  if (_tarFs === void 0) {
-    _tarFs = require("./external/tar-fs.js");
-  }
-  return _tarFs;
-}
-function validatePathWithinBase(targetPath, baseDir, entryName) {
-  const path = /* @__PURE__ */ getPath();
-  const resolvedTarget = path.resolve(targetPath);
-  const resolvedBase = path.resolve(baseDir);
-  if (!(0, import_primordials.StringPrototypeStartsWith)(resolvedTarget, resolvedBase + path.sep) && resolvedTarget !== resolvedBase) {
-    throw new import_primordials.ErrorCtor(
-      `Path traversal attempt detected: entry "${entryName}" would extract to "${resolvedTarget}" outside target directory "${resolvedBase}"`
-    );
-  }
-}
-function assertArchiveExists(archivePath) {
-  if (!(0, import_node_fs.existsSync)(archivePath)) {
-    const err = new import_primordials.ErrorCtor(
-      `ENOENT: no such file or directory, open '${archivePath}'`
-    );
-    err.code = "ENOENT";
-    err.path = archivePath;
-    throw err;
-  }
-}
-function detectArchiveFormat(filePath) {
-  const lower = filePath.toLowerCase();
-  if ((0, import_primordials.StringPrototypeEndsWith)(lower, ".tar.gz")) {
-    return "tar.gz";
-  }
-  if ((0, import_primordials.StringPrototypeEndsWith)(lower, ".tgz")) {
-    return "tgz";
-  }
-  if ((0, import_primordials.StringPrototypeEndsWith)(lower, ".tar")) {
-    return "tar";
-  }
-  if ((0, import_primordials.StringPrototypeEndsWith)(lower, ".zip")) {
-    return "zip";
-  }
-  return null;
-}
-async function extractArchive(archivePath, outputDir, options = {}) {
-  const format = detectArchiveFormat(archivePath);
-  if (!format) {
-    const path = /* @__PURE__ */ getPath();
-    const ext = path.extname(archivePath).toLowerCase();
-    throw new import_primordials.ErrorCtor(
-      `Unsupported archive format${ext ? ` (extension: ${ext})` : ""}: ${archivePath}. Supported formats: .zip, .tar, .tar.gz, .tgz`
-    );
-  }
-  switch (format) {
-    case "zip":
-      return await extractZip(archivePath, outputDir, options);
-    case "tar":
-      return await extractTar(archivePath, outputDir, options);
-    case "tar.gz":
-    case "tgz":
-      return await extractTarGz(archivePath, outputDir, options);
-  }
-}
-async function extractTar(archivePath, outputDir, options = {}) {
-  assertArchiveExists(archivePath);
-  const {
-    maxEntries = DEFAULT_MAX_ENTRIES,
-    maxFileSize = DEFAULT_MAX_FILE_SIZE,
-    maxTotalSize = DEFAULT_MAX_TOTAL_SIZE,
-    strip = 0
-  } = options;
-  const normalizedOutputDir = (0, import_normalize.normalizePath)(outputDir);
-  await (0, import_fs.safeMkdir)(normalizedOutputDir);
-  let totalExtractedSize = 0;
-  let entryCount = 0;
-  let destroyScheduled = false;
-  const tarFs = /* @__PURE__ */ getTarFs();
-  const extractStream = tarFs.extract(normalizedOutputDir, {
-    map: (header) => {
-      if (destroyScheduled) {
-        return header;
-      }
-      entryCount += 1;
-      if (entryCount > maxEntries) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Archive has too many entries: exceeded limit of ${maxEntries}`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.name.includes("\0")) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Invalid null byte in archive entry name: ${header.name}`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.type === "symlink" || header.type === "link") {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Symlink detected in archive: ${header.name}. Symlinks are not supported for security reasons.`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.size && header.size > maxFileSize) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `File size exceeds limit: ${header.name} (${header.size} bytes > ${maxFileSize} bytes)`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.size) {
-        totalExtractedSize += header.size;
-        if (totalExtractedSize > maxTotalSize) {
-          destroyScheduled = true;
-          import_node_process.default.nextTick(() => {
-            extractStream.destroy(
-              new Error(
-                `Total extracted size exceeds limit: ${totalExtractedSize} bytes > ${maxTotalSize} bytes`
-              )
-            );
-          });
-          return header;
-        }
-      }
-      return header;
-    },
-    strip
-  });
-  extractStream.on("error", () => {
-  });
-  const readStream = (0, import_node_fs.createReadStream)(archivePath);
-  try {
-    await (0, import_promises.pipeline)(readStream, extractStream);
-  } catch (e) {
-    readStream.destroy();
-    throw e;
-  }
-}
-async function extractTarGz(archivePath, outputDir, options = {}) {
-  assertArchiveExists(archivePath);
-  const {
-    maxEntries = DEFAULT_MAX_ENTRIES,
-    maxFileSize = DEFAULT_MAX_FILE_SIZE,
-    maxTotalSize = DEFAULT_MAX_TOTAL_SIZE,
-    strip = 0
-  } = options;
-  const normalizedOutputDir = (0, import_normalize.normalizePath)(outputDir);
-  await (0, import_fs.safeMkdir)(normalizedOutputDir);
-  let totalExtractedSize = 0;
-  let entryCount = 0;
-  let destroyScheduled = false;
-  const tarFs = /* @__PURE__ */ getTarFs();
-  const extractStream = tarFs.extract(normalizedOutputDir, {
-    map: (header) => {
-      if (destroyScheduled) {
-        return header;
-      }
-      entryCount += 1;
-      if (entryCount > maxEntries) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Archive has too many entries: exceeded limit of ${maxEntries}`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.name.includes("\0")) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Invalid null byte in archive entry name: ${header.name}`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.type === "symlink" || header.type === "link") {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `Symlink detected in archive: ${header.name}. Symlinks are not supported for security reasons.`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.size && header.size > maxFileSize) {
-        destroyScheduled = true;
-        import_node_process.default.nextTick(() => {
-          extractStream.destroy(
-            new Error(
-              `File size exceeds limit: ${header.name} (${header.size} bytes > ${maxFileSize} bytes)`
-            )
-          );
-        });
-        return header;
-      }
-      if (header.size) {
-        totalExtractedSize += header.size;
-        if (totalExtractedSize > maxTotalSize) {
-          destroyScheduled = true;
-          import_node_process.default.nextTick(() => {
-            extractStream.destroy(
-              new Error(
-                `Total extracted size exceeds limit: ${totalExtractedSize} bytes > ${maxTotalSize} bytes`
-              )
-            );
-          });
-          return header;
-        }
-      }
-      return header;
-    },
-    strip
-  });
-  extractStream.on("error", () => {
-  });
-  const readStream = (0, import_node_fs.createReadStream)(archivePath);
-  try {
-    await (0, import_promises.pipeline)(readStream, (0, import_node_zlib.createGunzip)(), extractStream);
-  } catch (e) {
-    readStream.destroy();
-    throw e;
-  }
-}
-async function extractZip(archivePath, outputDir, options = {}) {
-  assertArchiveExists(archivePath);
-  const {
-    maxEntries = DEFAULT_MAX_ENTRIES,
-    maxFileSize = DEFAULT_MAX_FILE_SIZE,
-    maxTotalSize = DEFAULT_MAX_TOTAL_SIZE,
-    strip = 0
-  } = options;
-  const normalizedOutputDir = (0, import_normalize.normalizePath)(outputDir);
-  await (0, import_fs.safeMkdir)(normalizedOutputDir);
-  const AdmZip = /* @__PURE__ */ getAdmZip();
-  const zip = new AdmZip(archivePath);
-  const path = /* @__PURE__ */ getPath();
-  const entries = zip.getEntries();
-  if (entries.length > maxEntries) {
-    throw new import_primordials.ErrorCtor(
-      `Archive has too many entries: ${entries.length} (limit: ${maxEntries})`
-    );
-  }
-  let totalExtractedSize = 0;
-  for (const entry of entries) {
-    if (entry.isDirectory) {
-      continue;
-    }
-    if (entry.entryName.includes("\0")) {
-      throw new import_primordials.ErrorCtor(
-        `Invalid null byte in archive entry name: ${entry.entryName}`
-      );
-    }
-    const uncompressedSize = entry.header.size;
-    if (uncompressedSize > maxFileSize) {
-      throw new import_primordials.ErrorCtor(
-        `File size exceeds limit: ${entry.entryName} (${uncompressedSize} bytes > ${maxFileSize} bytes)`
-      );
-    }
-    totalExtractedSize += uncompressedSize;
-    if (totalExtractedSize > maxTotalSize) {
-      throw new import_primordials.ErrorCtor(
-        `Total extracted size exceeds limit: ${totalExtractedSize} bytes > ${maxTotalSize} bytes`
-      );
-    }
-    const parts = entry.entryName.split("/");
-    if (parts.length <= strip) {
-      continue;
-    }
-    const strippedPath = (0, import_primordials.ArrayPrototypeSlice)(parts, strip).join("/");
-    const targetPath = path.join(normalizedOutputDir, strippedPath);
-    validatePathWithinBase(targetPath, normalizedOutputDir, entry.entryName);
-  }
-  if (strip === 0) {
-    for (const entry of entries) {
-      if (!entry.isDirectory) {
-        const targetPath = path.join(normalizedOutputDir, entry.entryName);
-        validatePathWithinBase(targetPath, normalizedOutputDir, entry.entryName);
-      }
-    }
-    zip.extractAllTo(normalizedOutputDir, true);
-  } else {
-    const path2 = /* @__PURE__ */ getPath();
-    const entries2 = zip.getEntries();
-    const dirsToCreate = new import_primordials.SetCtor();
-    for (const entry of entries2) {
-      if (entry.isDirectory) {
-        continue;
-      }
-      const parts = entry.entryName.split("/");
-      if (parts.length <= strip) {
-        continue;
-      }
-      const strippedPath = (0, import_primordials.ArrayPrototypeSlice)(parts, strip).join("/");
-      const targetPath = path2.join(normalizedOutputDir, strippedPath);
-      dirsToCreate.add(path2.dirname(targetPath));
-    }
-    await (0, import_primordials.PromiseAll)((0, import_primordials.ArrayFrom)(dirsToCreate).map((dir) => (0, import_fs.safeMkdir)(dir)));
-    for (const entry of entries2) {
-      if (entry.isDirectory) {
-        continue;
-      }
-      const parts = entry.entryName.split("/");
-      if (parts.length <= strip) {
-        continue;
-      }
-      const strippedPath = (0, import_primordials.ArrayPrototypeSlice)(parts, strip).join("/");
-      const targetPath = path2.join(normalizedOutputDir, strippedPath);
-      zip.extractEntryTo(entry, path2.dirname(targetPath), false, true);
-    }
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  detectArchiveFormat,
-  extractArchive,
-  extractTar,
-  extractTarGz,
-  extractZip
-});

package/dist/argv/flags.d.ts

@@ -1,292 +0,0 @@
-/**
- * @fileoverview Common flag utilities for Socket CLI applications.
- * Provides consistent flag checking (quiet, silent, verbose, debug, dry-run,
- * etc.) across Socket projects, accepting either parsed flag objects or raw
- * argv arrays.
- */
-/**
- * Flag values object from parsed arguments.
- */
-export interface FlagValues {
-    [key: string]: unknown;
-    quiet?: boolean;
-    silent?: boolean;
-    verbose?: boolean;
-    help?: boolean;
-    all?: boolean;
-    fix?: boolean;
-    force?: boolean;
-    'dry-run'?: boolean;
-    json?: boolean;
-    debug?: boolean;
-    watch?: boolean;
-    coverage?: boolean;
-    cover?: boolean;
-    update?: boolean;
-    staged?: boolean;
-    changed?: boolean;
-}
-/**
- * Accepted input types for flag checking functions.
- * Can be parsed flag values, process.argv array, or undefined (uses process.argv).
- */
-export type FlagInput = FlagValues | string[] | readonly string[] | undefined;
-/**
- * Common flag definitions for parseArgs configuration.
- * Can be spread into parseArgs options for consistency.
- */
-export declare const COMMON_FLAGS: {
-    all: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    changed: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    coverage: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    cover: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    debug: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    'dry-run': {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    fix: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    force: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    help: {
-        type: 'boolean';
-        default: boolean;
-        short: string;
-        description: string;
-    };
-    json: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    quiet: {
-        type: 'boolean';
-        default: boolean;
-        short: string;
-        description: string;
-    };
-    silent: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    staged: {
-        type: 'boolean';
-        default: boolean;
-        description: string;
-    };
-    update: {
-        type: 'boolean';
-        default: boolean;
-        short: string;
-        description: string;
-    };
-    verbose: {
-        type: 'boolean';
-        default: boolean;
-        short: string;
-        description: string;
-    };
-    watch: {
-        type: 'boolean';
-        default: boolean;
-        short: string;
-        description: string;
-    };
-};
-/**
- * Get the appropriate log level based on flags.
- * Returns 'silent', 'error', 'warn', 'info', 'verbose', or 'debug'.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * getLogLevel()  // 'info' (default)
- * getLogLevel({ quiet: true })  // 'silent'
- * getLogLevel(['--debug'])  // 'debug'
- * ```
- */
-export declare function getLogLevel(input?: FlagInput): string;
-/**
- * Check if all flag is set.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isAll({ all: true })  // true
- * isAll(['--all'])  // true
- * ```
- */
-export declare function isAll(input?: FlagInput): boolean;
-/**
- * Check if changed files mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isChanged({ changed: true })  // true
- * isChanged(['--changed'])  // true
- * ```
- */
-export declare function isChanged(input?: FlagInput): boolean;
-/**
- * Check if coverage mode is enabled.
- * Checks both 'coverage' and 'cover' flags.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isCoverage({ coverage: true })  // true
- * isCoverage(['--cover'])  // true
- * ```
- */
-export declare function isCoverage(input?: FlagInput): boolean;
-/**
- * Check if debug mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isDebug({ debug: true })  // true
- * isDebug(['--debug'])  // true
- * ```
- */
-export declare function isDebug(input?: FlagInput): boolean;
-/**
- * Check if dry-run mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isDryRun({ 'dry-run': true })  // true
- * isDryRun(['--dry-run'])  // true
- * ```
- */
-export declare function isDryRun(input?: FlagInput): boolean;
-/**
- * Check if fix/autofix mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isFix({ fix: true })  // true
- * isFix(['--fix'])  // true
- * ```
- */
-export declare function isFix(input?: FlagInput): boolean;
-/**
- * Check if force mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isForce({ force: true })  // true
- * isForce(['--force'])  // true
- * ```
- */
-export declare function isForce(input?: FlagInput): boolean;
-/**
- * Check if help flag is set.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isHelp({ help: true })  // true
- * isHelp(['-h'])  // true
- * ```
- */
-export declare function isHelp(input?: FlagInput): boolean;
-/**
- * Check if JSON output is requested.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isJson({ json: true })  // true
- * isJson(['--json'])  // true
- * ```
- */
-export declare function isJson(input?: FlagInput): boolean;
-/**
- * Check if quiet/silent mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isQuiet({ quiet: true })  // true
- * isQuiet(['--silent'])  // true
- * ```
- */
-export declare function isQuiet(input?: FlagInput): boolean;
-/**
- * Check if staged files mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isStaged({ staged: true })  // true
- * isStaged(['--staged'])  // true
- * ```
- */
-export declare function isStaged(input?: FlagInput): boolean;
-/**
- * Check if update mode is enabled (for snapshots, dependencies, etc).
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isUpdate({ update: true })  // true
- * isUpdate(['-u'])  // true
- * ```
- */
-export declare function isUpdate(input?: FlagInput): boolean;
-/**
- * Check if verbose mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isVerbose({ verbose: true })  // true
- * isVerbose(['--verbose'])  // true
- * ```
- */
-export declare function isVerbose(input?: FlagInput): boolean;
-/**
- * Check if watch mode is enabled.
- * Accepts FlagValues object, process.argv array, or undefined (uses process.argv).
- *
- * @example
- * ```typescript
- * isWatch({ watch: true })  // true
- * isWatch(['-w'])  // true
- * ```
- */
-export declare function isWatch(input?: FlagInput): boolean;