@socketsecurity/lib 5.28.0 → 6.0.1

package/dist/compression/gzip.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @file Gzip compression / decompression — same calling shapes as brotli:
+ *   in-memory, file-to-file, and raw-stream variants. Default level is 6 (zlib
+ *   default). The decompress-file helper recognises `.gz` / `.gzip` / `.tgz`,
+ *   and special-cases `.tgz` back to `.tar` on inPlace decompress so a
+ *   round-trip stays lossless. await compressGzip(JSON.stringify(payload))
+ *   await compressGzipFile('input.json', 'input.json.gz')
+ *   readable.pipe(createGzipCompressor()).pipe(writable)
+ */
+import { Buffer } from 'node:buffer';
+import { type ZlibOptions } from 'node:zlib';
+import type { CompressFileOptions, CompressOptions } from './types';
+/**
+ * Translate `CompressOptions` into the `ZlibOptions` zlib expects. Returns an
+ * empty options object when no `level` is given (zlib uses its default, level
+ * 6). Exposed for parity with `resolveBrotliOptions` and for unit-test
+ * coverage.
+ */
+export declare function resolveGzipOptions(options: CompressOptions | undefined): ZlibOptions;
+/**
+ * Compress a string or Buffer with gzip. Strings are encoded as UTF-8 before
+ * compression. Default level is 6 (zlib default).
+ */
+export declare function compressGzip(input: string | Buffer, options?: CompressOptions | undefined): Promise<Buffer>;
+/**
+ * Decompress a gzip-compressed Buffer.
+ */
+export declare function decompressGzip(input: Buffer): Promise<Buffer>;
+/**
+ * Stream-compress a file with gzip. Two call shapes:
+ *
+ * CompressGzipFile(src, dest, options?) Writes compressed output to `dest`.
+ * Source is left intact.
+ *
+ * CompressGzipFile(src, { inPlace: true, ...options }) Writes to `<src>.gz` and
+ * deletes `src` after the write succeeds. Returns the new path.
+ */
+export declare function compressGzipFile(srcPath: string, destPath: string, options?: CompressOptions | undefined): Promise<string>;
+export declare function compressGzipFile(srcPath: string, options: CompressFileOptions): Promise<string>;
+/**
+ * Stream-decompress a gzip file. Two call shapes:
+ *
+ * DecompressGzipFile(src, dest) Writes decompressed output to `dest`. Source is
+ * left intact.
+ *
+ * DecompressGzipFile(src, { inPlace: true }) Strips the `.gz`/`.gzip`/`.tgz`
+ * suffix to derive the destination, then deletes the compressed source after
+ * the write succeeds. Throws if `src` has no recognizable extension.
+ */
+export declare function decompressGzipFile(srcPath: string, destPath: string): Promise<string>;
+export declare function decompressGzipFile(srcPath: string, options: CompressFileOptions): Promise<string>;
+/**
+ * Create a gzip compress transform stream.
+ */
+export declare function createGzipCompressor(options?: CompressOptions | undefined): import("zlib").Gzip;
+/**
+ * Create a gzip decompress transform stream.
+ */
+export declare function createGzipDecompressor(): import("zlib").Gunzip;
+/**
+ * Magic-byte check for gzip. Reads the first two bytes and matches the gzip
+ * spec's 0x1f 0x8b signature. Authoritative.
+ */
+export declare function isGzipCompressed(input: Buffer): boolean;
+export declare const GZIP_EXTS: ReadonlySet<string>;
+/**
+ * Extension check for gzip paths — matches `.gz` / `.gzip` / `.tgz`
+ * (case-insensitive). Naming follows node:path's `extname`.
+ */
+export declare function hasGzipExt(filePath: string): boolean;

package/dist/compression/gzip.js

@@ -0,0 +1,142 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var gzip_exports = {};
+__export(gzip_exports, {
+  GZIP_EXTS: () => GZIP_EXTS,
+  compressGzip: () => compressGzip,
+  compressGzipFile: () => compressGzipFile,
+  createGzipCompressor: () => createGzipCompressor,
+  createGzipDecompressor: () => createGzipDecompressor,
+  decompressGzip: () => decompressGzip,
+  decompressGzipFile: () => decompressGzipFile,
+  hasGzipExt: () => hasGzipExt,
+  isGzipCompressed: () => isGzipCompressed,
+  resolveGzipOptions: () => resolveGzipOptions
+});
+module.exports = __toCommonJS(gzip_exports);
+var import_node_buffer = require("node:buffer");
+var import_node_fs = require("node:fs");
+var import_node_path = __toESM(require("node:path"));
+var import_promises = require("node:stream/promises");
+var import_node_util = require("node:util");
+var import_node_zlib = require("node:zlib");
+var import_safe = require("../fs/safe");
+var import_error = require("../primordials/error");
+var import_string = require("../primordials/string");
+var import_internal = require("./_internal");
+const gzipAsync = (0, import_node_util.promisify)(import_node_zlib.gzip);
+const gunzipAsync = (0, import_node_util.promisify)(import_node_zlib.gunzip);
+function resolveGzipOptions(options) {
+  const level = options?.level;
+  if (level === void 0) {
+    return { __proto__: null };
+  }
+  return { __proto__: null, level };
+}
+async function compressGzip(input, options) {
+  const buf = typeof input === "string" ? import_node_buffer.Buffer.from(input, "utf8") : input;
+  return await gzipAsync(buf, resolveGzipOptions(options));
+}
+async function decompressGzip(input) {
+  return await gunzipAsync(input);
+}
+async function compressGzipFile(srcPath, destOrOptions, maybeOptions) {
+  const { destPath, options, inPlace } = (0, import_internal.resolveFileArgs)(
+    "compressGzipFile",
+    srcPath,
+    destOrOptions,
+    maybeOptions,
+    (p) => `${p}.gz`
+  );
+  await (0, import_promises.pipeline)(
+    (0, import_node_fs.createReadStream)(srcPath),
+    (0, import_node_zlib.createGzip)(resolveGzipOptions(options)),
+    (0, import_node_fs.createWriteStream)(destPath)
+  );
+  if (inPlace) {
+    await (0, import_safe.safeDelete)(srcPath);
+  }
+  return destPath;
+}
+async function decompressGzipFile(srcPath, destOrOptions) {
+  const { destPath, inPlace } = (0, import_internal.resolveFileArgs)(
+    "decompressGzipFile",
+    srcPath,
+    destOrOptions,
+    void 0,
+    (p) => {
+      if (!hasGzipExt(p)) {
+        throw new import_error.ErrorCtor(
+          `decompressGzipFile: ${p} has no .gz/.gzip/.tgz extension; can't infer destination`
+        );
+      }
+      const stripped = (0, import_internal.stripExt)(p, GZIP_EXTS);
+      return (0, import_string.StringPrototypeToLowerCase)(import_node_path.default.extname(p)) === ".tgz" ? `${stripped}.tar` : stripped;
+    }
+  );
+  await (0, import_promises.pipeline)(
+    (0, import_node_fs.createReadStream)(srcPath),
+    (0, import_node_zlib.createGunzip)(),
+    (0, import_node_fs.createWriteStream)(destPath)
+  );
+  if (inPlace) {
+    await (0, import_safe.safeDelete)(srcPath);
+  }
+  return destPath;
+}
+function createGzipCompressor(options) {
+  return (0, import_node_zlib.createGzip)(resolveGzipOptions(options));
+}
+function createGzipDecompressor() {
+  return (0, import_node_zlib.createGunzip)();
+}
+const GZIP_MAGIC_0 = 31;
+const GZIP_MAGIC_1 = 139;
+function isGzipCompressed(input) {
+  return import_node_buffer.Buffer.isBuffer(input) && input.byteLength >= 2 && input[0] === GZIP_MAGIC_0 && input[1] === GZIP_MAGIC_1;
+}
+const GZIP_EXTS = /* @__PURE__ */ new Set([".gz", ".gzip", ".tgz"]);
+function hasGzipExt(filePath) {
+  return GZIP_EXTS.has((0, import_string.StringPrototypeToLowerCase)(import_node_path.default.extname(filePath)));
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GZIP_EXTS,
+  compressGzip,
+  compressGzipFile,
+  createGzipCompressor,
+  createGzipDecompressor,
+  decompressGzip,
+  decompressGzipFile,
+  hasGzipExt,
+  isGzipCompressed,
+  resolveGzipOptions
+});

package/dist/compression/types.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @file Public type surface for `compression/*` modules — the `CompressOptions`
+ *   accepted by every compression entrypoint and `CompressFileOptions` which
+ *   extends it with `inPlace`. Pure types, no runtime side effects.
+ */
+export interface CompressOptions {
+    /**
+     * Compression level. Brotli accepts 0–11 (11 = max, slowest). Gzip accepts
+     * 0–9 (9 = max). Defaults: brotli 11, gzip 6.
+     */
+    level?: number | undefined;
+    /**
+     * Hint for the input size in bytes. Lets brotli pick a better window/blocking
+     * strategy. Pass when known; ignored for gzip.
+     */
+    size?: number | undefined;
+}
+/**
+ * Options for the file-to-file helpers. Pass `{ inPlace: true }` to skip the
+ * explicit destPath argument: the helper picks the canonical destination (`.br`
+ * / `.gz` suffix on compress; suffix stripped on decompress) and removes the
+ * source file on success.
+ *
+ * Await compressBrotliFile('input.json', { inPlace: true }) // => writes
+ * input.json.br, deletes input.json.
+ *
+ * Await decompressBrotliFile('input.json.br', { inPlace: true }) // => writes
+ * input.json, deletes input.json.br.
+ */
+export interface CompressFileOptions extends CompressOptions {
+    /**
+     * Replace the source file: derive destPath from srcPath, then
+     * `safeDelete(srcPath)` after the write succeeds. When set, the `destPath`
+     * positional argument must be omitted.
+     */
+    inPlace?: boolean | undefined;
+}

package/dist/compression/types.js

@@ -0,0 +1,18 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/constants/agents.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Package manager agent constants.
- * Exports agent names (npm/pnpm/yarn/bun/vlt/npx), lockfile names, registry
- * URLs, and resolved npm binary paths used across Socket tooling.
+ * @file Package manager agent constants. Exports agent names
+ *   (npm/pnpm/yarn/bun/vlt/npx), lockfile names, registry URLs, and resolved
+ *   npm binary paths used across Socket tooling.
  */
 export declare const NPM = "npm";
 export declare const PNPM = "pnpm";
@@ -14,6 +14,7 @@ export declare const NPM_REAL_EXEC_PATH: any;
 export declare const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 export declare const YARN_BERRY = "yarn/berry";
 export declare const YARN_CLASSIC = "yarn/classic";
+export declare const ZPM = "zpm";
 export declare const PACKAGE_LOCK = "package-lock";
 export declare const PACKAGE_LOCK_JSON = "package-lock.json";
 export declare const NPM_SHRINKWRAP_JSON = "npm-shrinkwrap.json";

package/dist/constants/agents.js

@@ -52,7 +52,8 @@ __export(agents_exports, {
   YARN: () => YARN,
   YARN_BERRY: () => YARN_BERRY,
   YARN_CLASSIC: () => YARN_CLASSIC,
-  YARN_LOCK: () => YARN_LOCK
+  YARN_LOCK: () => YARN_LOCK,
+  ZPM: () => ZPM
 });
 module.exports = __toCommonJS(agents_exports);
 var import_which = __toESM(require("../external/which"));
@@ -64,9 +65,9 @@ const VLT = "vlt";
 const NPX = "npx";
 const _npmBinPath = /* @__PURE__ */ (() => {
   try {
-    return import_which.default.sync("npm", { nothrow: true }) || null;
+    return import_which.default.sync("npm", { nothrow: true }) || void 0;
   } catch {
-    return null;
+    return void 0;
   }
 })();
 const NPM_BIN_PATH = _npmBinPath || "npm";
@@ -98,6 +99,7 @@ const NPM_REAL_EXEC_PATH = /* @__PURE__ */ (() => {
 const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 const YARN_BERRY = "yarn/berry";
 const YARN_CLASSIC = "yarn/classic";
+const ZPM = "zpm";
 const PACKAGE_LOCK = "package-lock";
 const PACKAGE_LOCK_JSON = "package-lock.json";
 const NPM_SHRINKWRAP_JSON = "npm-shrinkwrap.json";
@@ -134,5 +136,6 @@ const RESOLUTIONS = "resolutions";
   YARN,
   YARN_BERRY,
   YARN_CLASSIC,
-  YARN_LOCK
+  YARN_LOCK,
+  ZPM
 });

package/dist/constants/encoding.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Character encoding and character code constants.
- * Exports the default UTF-8 encoding name and numeric char codes for common
- * ASCII characters used by path and parsing utilities.
+ * @file Character encoding and character code constants. Exports the default
+ *   UTF-8 encoding name and numeric char codes for common ASCII characters used
+ *   by path and parsing utilities.
  */
 export declare const UTF8 = "utf8";
 export declare const CHAR_BACKWARD_SLASH = 92;

package/dist/constants/github.d.ts

@@ -1,7 +1,6 @@
 /**
- * @fileoverview GitHub API and cache constants.
- * Provides the GitHub REST API base URL and the cache subdirectory name used
- * for persisting GitHub responses.
+ * @file GitHub API and cache constants. Provides the GitHub REST API base URL
+ *   and the cache subdirectory name used for persisting GitHub responses.
  */
 export declare const GITHUB_API_BASE_URL = "https://api.github.com";
 export declare const CACHE_GITHUB_DIR = "github";

package/dist/constants/licenses.d.ts

@@ -1,14 +1,14 @@
 /**
- * @fileoverview License identifier constants.
- * Exports common SPDX license strings (MIT, UNLICENSED) and a lazily-built
- * set of copy-left SPDX identifiers used when classifying package licenses.
+ * @file License identifier constants. Exports common SPDX license strings (MIT,
+ *   UNLICENSED) and a lazily-built set of copy-left SPDX identifiers used when
+ *   classifying package licenses.
  */
 export declare const MIT = "MIT";
 export declare const UNLICENCED = "UNLICENCED";
 export declare const UNLICENSED = "UNLICENSED";
 /**
- * Get the set of SPDX identifiers considered copy-left (AGPL, GPL, EPL,
- * EUPL, CC-BY-SA variants). The set is lazily built and cached on first call.
+ * Get the set of SPDX identifiers considered copy-left (AGPL, GPL, EPL, EUPL,
+ * CC-BY-SA variants). The set is lazily built and cached on first call.
  *
  * @returns A `Set` of SPDX license identifier strings.
  */

package/dist/constants/licenses.js

@@ -26,14 +26,14 @@ __export(licenses_exports, {
   getCopyLeftLicenses: () => getCopyLeftLicenses
 });
 module.exports = __toCommonJS(licenses_exports);
-var import_primordials = require("../primordials");
+var import_map_set = require("../primordials/map-set");
 const MIT = "MIT";
 const UNLICENCED = "UNLICENCED";
 const UNLICENSED = "UNLICENSED";
 let _copyLeftLicenses;
 function getCopyLeftLicenses() {
   if (_copyLeftLicenses === void 0) {
-    _copyLeftLicenses = new import_primordials.SetCtor([
+    _copyLeftLicenses = new import_map_set.SetCtor([
       "AGPL-1.0",
       "AGPL-1.0-only",
       "AGPL-1.0-or-later",

package/dist/constants/lifecycle-script-names.d.ts

@@ -1,8 +1,7 @@
 /**
- * @fileoverview NPM lifecycle script names.
- *
- * Standard npm lifecycle hooks that can be defined in package.json scripts.
- * https://docs.npmjs.com/cli/v10/using-npm/scripts#life-cycle-scripts
+ * @file NPM lifecycle script names. Standard npm lifecycle hooks that can be
+ *   defined in package.json scripts.
+ *   https://docs.npmjs.com/cli/v10/using-npm/scripts#life-cycle-scripts.
  */
 declare const lifecycleScriptNames: Set<string>;
 export { lifecycleScriptNames };

package/dist/constants/lifecycle-script-names.js

@@ -23,8 +23,8 @@ __export(lifecycle_script_names_exports, {
   lifecycleScriptNames: () => lifecycleScriptNames
 });
 module.exports = __toCommonJS(lifecycle_script_names_exports);
-var import_primordials = require("../primordials");
-const lifecycleScriptNames = new import_primordials.SetCtor(
+var import_map_set = require("../primordials/map-set");
+const lifecycleScriptNames = new import_map_set.SetCtor(
   [
     "dependencies",
     "prepublishOnly",

package/dist/constants/maintained-node-versions.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Maintained Node.js versions without external dependencies.
+ * @file Maintained Node.js versions without external dependencies.
  */
 declare const maintainedNodeVersions: readonly string[] & {
     current: string;

package/dist/constants/maintained-node-versions.js

@@ -23,14 +23,13 @@ __export(maintained_node_versions_exports, {
   maintainedNodeVersions: () => maintainedNodeVersions
 });
 module.exports = __toCommonJS(maintained_node_versions_exports);
-var import_primordials = require("../primordials");
-const ObjectFreeze = Object.freeze;
+var import_object = require("../primordials/object");
 const next = "25.0.0";
 const current = "22.20.0";
 const previous = "20.19.5";
 const last = "18.20.8";
-const maintainedNodeVersions = ObjectFreeze(
-  (0, import_primordials.ObjectAssign)([last, previous, current, next], {
+const maintainedNodeVersions = (0, import_object.ObjectFreeze)(
+  (0, import_object.ObjectAssign)([last, previous, current, next], {
     current,
     last,
     next,

package/dist/constants/node.d.ts

@@ -1,8 +1,7 @@
 /**
- * @fileoverview Node.js runtime version and capability helpers.
- * Provides getters for the current Node version (major/minor/patch), the
- * maintained-versions list, and feature-detection flags for APIs that vary
- * across Node releases.
+ * @file Node.js runtime version and capability helpers. Provides getters for
+ *   the current Node version (major/minor/patch), the maintained-versions list,
+ *   and feature-detection flags for APIs that vary across Node releases.
  */
 /**
  * Get the absolute path to the currently running Node.js binary.
@@ -22,9 +21,9 @@ export declare function getMaintainedNodeVersions(): readonly string[] & {
     previous: string;
 };
 /**
- * Get the flags used to block Node.js debugger attachment via SIGUSR1.
- * Returns `['--disable-sigusr1']` on runtimes that support it and falls back
- * to `['--no-inspect']` on older versions.
+ * Get the flags used to block Node.js debugger attachment via SIGUSR1. Returns
+ * `['--disable-sigusr1']` on runtimes that support it and falls back to
+ * `['--no-inspect']` on older versions.
  *
  * @returns A non-empty array of CLI flags suitable for passing to `node`.
  */
@@ -66,9 +65,9 @@ export declare function getNodeNoWarningsFlags(): string[];
 export declare function getNodePatchVersion(): number;
 /**
  * Get the permission-grant flags needed to run npm under Node.js 24+'s
- * `--permission` model. The array is non-empty only on Node.js 24+ and
- * includes `--allow-fs-read=*`, `--allow-fs-write=*`, and
- * `--allow-child-process`. Older versions return an empty array.
+ * `--permission` model. The array is non-empty only on Node.js 24+ and includes
+ * `--allow-fs-read=*`, `--allow-fs-write=*`, and `--allow-child-process`. Older
+ * versions return an empty array.
  *
  * @returns The permission flag list (possibly empty) for the current runtime.
  */
@@ -80,8 +79,8 @@ export declare function getNodePermissionFlags(): string[];
  */
 export declare function getNodeVersion(): string;
 /**
- * Check whether the current runtime exposes the `module.enableCompileCache()` API.
- * The API is available on Node.js 24+.
+ * Check whether the current runtime exposes the `module.enableCompileCache()`
+ * API. The API is available on Node.js 24+.
  *
  * @returns `true` when the current runtime is Node.js 24 or newer.
  */
@@ -95,7 +94,8 @@ export declare function supportsNodeCompileCacheApi(): boolean;
 export declare function supportsNodeCompileCacheEnvVar(): boolean;
 /**
  * Check whether the current runtime supports the `--disable-sigusr1` CLI flag.
- * Flag landed in v22.14.0 and v23.7.0 and was stabilized in v22.20.0 / v24.8.0.
+ * Flag landed in v22.14.0 and v23.7.0 and was stabilized in v22.20.0 /
+ * v24.8.0.
  *
  * @returns `true` when the runtime exposes `--disable-sigusr1`.
  */
@@ -115,22 +115,23 @@ export declare function supportsNodeDisableWarningFlag(): boolean;
  */
 export declare function supportsNodePermissionFlag(): boolean;
 /**
- * Check whether `require()` can synchronously load ESM modules.
- * Requires Node.js 22.12+ or Node.js 23+.
+ * Check whether `require()` can synchronously load ESM modules. Requires
+ * Node.js 22.12+ or Node.js 23+.
  *
  * @returns `true` when the runtime supports `require()`-ing ES modules.
  */
 export declare function supportsNodeRequireModule(): boolean;
 /**
- * Check whether the current runtime supports `node --run <script>`.
- * Requires Node.js 22.11+ or Node.js 23+.
+ * Check whether the current runtime supports `node --run <script>`. Requires
+ * Node.js 22.11+ or Node.js 23+.
  *
- * @returns `true` when the runtime can execute package.json scripts via `--run`.
+ * @returns `true` when the runtime can execute package.json scripts via
+ *   `--run`.
  */
 export declare function supportsNodeRun(): boolean;
 /**
- * Check whether this process was spawned with an IPC channel.
- * When `true`, `process.send()` is callable to message the parent process.
+ * Check whether this process was spawned with an IPC channel. When `true`,
+ * `process.send()` is callable to message the parent process.
  *
  * @returns `true` when the current process has an IPC channel to its parent.
  */

package/dist/constants/node.js

@@ -54,7 +54,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 var import_node_process = __toESM(require("node:process"));
 var import_maintained_node_versions = require("./maintained-node-versions");
-var import_primordials = require("../primordials");
+var import_number = require("../primordials/number");
 const NODE_VERSION = import_node_process.default.version;
 let _nodeDisableSigusr1Flags;
 let _nodeHardenFlags;
@@ -91,10 +91,10 @@ function getNodeHardenFlags() {
 }
 function getNodeMajorVersion() {
   const major = NODE_VERSION.slice(1).split(".")[0] ?? "0";
-  return (0, import_primordials.NumberParseInt)(major, 10) || 0;
+  return (0, import_number.NumberParseInt)(major, 10) || 0;
 }
 function getNodeMinorVersion() {
-  return (0, import_primordials.NumberParseInt)(NODE_VERSION.split(".")[1] ?? "0", 10);
+  return (0, import_number.NumberParseInt)(NODE_VERSION.split(".")[1] ?? "0", 10);
 }
 function getNodeNoWarningsFlags() {
   if (_nodeNoWarningsFlags === void 0) {
@@ -103,7 +103,7 @@ function getNodeNoWarningsFlags() {
   return _nodeNoWarningsFlags;
 }
 function getNodePatchVersion() {
-  return (0, import_primordials.NumberParseInt)(NODE_VERSION.split(".")[2] ?? "0", 10);
+  return (0, import_number.NumberParseInt)(NODE_VERSION.split(".")[2] ?? "0", 10);
 }
 function getNodePermissionFlags() {
   if (_nodePermissionFlags === void 0) {

package/dist/constants/package-default-node-range.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Default Node.js version range for packages.
+ * @file Default Node.js version range for packages.
  */
 declare const packageDefaultNodeRange: string;
 export { packageDefaultNodeRange };

package/dist/constants/package-default-socket-categories.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Default Socket security categories for packages.
+ * @file Default Socket security categories for packages.
  */
 declare const packageDefaultSocketCategories: readonly string[];
 export { packageDefaultSocketCategories };

package/dist/constants/package-default-socket-categories.js

@@ -23,8 +23,8 @@ __export(package_default_socket_categories_exports, {
   packageDefaultSocketCategories: () => packageDefaultSocketCategories
 });
 module.exports = __toCommonJS(package_default_socket_categories_exports);
-var import_primordials = require("../primordials");
-const packageDefaultSocketCategories = (0, import_primordials.ObjectFreeze)(["cleanup"]);
+var import_object = require("../primordials/object");
+const packageDefaultSocketCategories = (0, import_object.ObjectFreeze)(["cleanup"]);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   packageDefaultSocketCategories

package/dist/constants/packages.d.ts

@@ -1,8 +1,8 @@
 /**
- * @fileoverview Package metadata, defaults, extensions, and lifecycle helpers.
- * Exposes lazily-memoized accessors for package defaults (Node range, Socket
- * categories), the pacote cache path, lifecycle script names, and known
- * package extensions used during manifest processing.
+ * @file Package metadata, defaults, extensions, and lifecycle helpers. Exposes
+ *   lazily-memoized accessors for package defaults (Node range, Socket
+ *   categories), the pacote cache path, lifecycle script names, and known
+ *   package extensions used during manifest processing.
  */
 export declare const PACKAGE = "package";
 export declare const AT_LATEST = "@latest";

package/dist/constants/packages.js

@@ -44,12 +44,14 @@ __export(packages_exports, {
 });
 module.exports = __toCommonJS(packages_exports);
 var import_pacote = __toESM(require("../external/pacote"));
-var import_package_extensions = require("../package-extensions");
+var import_data = require("../pkg-ext/data");
 var import_normalize = require("../paths/normalize");
 var import_lifecycle_script_names = require("./lifecycle-script-names");
 var import_package_default_node_range = require("./package-default-node-range");
 var import_package_default_socket_categories = require("./package-default-socket-categories");
-var import_primordials = require("../primordials");
+var import_array = require("../primordials/array");
+var import_object = require("../primordials/object");
+var import_reflect = require("../primordials/reflect");
 let _lifecycleScriptNames;
 let _packageDefaultNodeRange;
 let _packageDefaultSocketCategories;
@@ -68,7 +70,7 @@ function clearPackumentCache() {
 // @__NO_SIDE_EFFECTS__
 function getLifecycleScriptNames() {
   if (_lifecycleScriptNames === void 0) {
-    _lifecycleScriptNames = (0, import_primordials.ArrayFrom)(import_lifecycle_script_names.lifecycleScriptNames);
+    _lifecycleScriptNames = (0, import_array.ArrayFrom)(import_lifecycle_script_names.lifecycleScriptNames);
   }
   return _lifecycleScriptNames;
 }
@@ -89,7 +91,7 @@ function getPackageDefaultSocketCategories() {
 // @__NO_SIDE_EFFECTS__
 function getPackageExtensions() {
   if (_packageExtensions === void 0) {
-    _packageExtensions = (0, import_primordials.ObjectEntries)(import_package_extensions.packageExtensions);
+    _packageExtensions = (0, import_object.ObjectEntries)(import_data.packageExtensions);
   }
   return _packageExtensions;
 }
@@ -118,7 +120,7 @@ function getPackumentCache() {
 function getPacoteCachePath() {
   if (_pacoteCachePath === void 0) {
     try {
-      const proto = (0, import_primordials.ReflectGetPrototypeOf)(
+      const proto = (0, import_reflect.ReflectGetPrototypeOf)(
         import_pacote.default.RegistryFetcher.prototype
       );
       const PacoteFetcherBase = proto?.constructor;

package/dist/constants/platform.d.ts

@@ -1,4 +1,6 @@
-/** @fileoverview Platform detection and OS-specific constants. */
+/**
+ * @file Platform detection and OS-specific constants.
+ */
 /**
  * CPU architecture type.
  */