@socketsecurity/lib 5.28.0 → 6.0.1

package/dist/packages/provenance.js

@@ -31,19 +31,56 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var provenance_exports = {};
 __export(provenance_exports, {
   fetchPackageProvenance: () => fetchPackageProvenance,
-  getProvenanceDetails: () => getProvenanceDetails
+  findProvenance: () => findProvenance,
+  getAttestations: () => getAttestations,
+  getFetcher: () => getFetcher,
+  getProvenanceDetails: () => getProvenanceDetails,
+  isTrustedPublisher: () => isTrustedPublisher
 });
 module.exports = __toCommonJS(provenance_exports);
 var import_agents = require("../constants/agents");
 var import_packages = require("../constants/packages");
 var import_make_fetch_happen = __toESM(require("../external/make-fetch-happen"));
-var import_abort = require("../abort");
-var import_url = require("../url");
-var import_primordials = require("../primordials");
-const ArrayIsArray = Array.isArray;
+var import_signal = require("../abort/signal");
+var import_parse = require("../url/parse");
+var import_array = require("../primordials/array");
+var import_buffer = require("../primordials/buffer");
+var import_json = require("../primordials/json");
+var import_string = require("../primordials/string");
 const SLSA_PROVENANCE_V0_2 = "https://slsa.dev/provenance/v0.2";
 const SLSA_PROVENANCE_V1_0 = "https://slsa.dev/provenance/v1";
 let _fetcher;
+// @__NO_SIDE_EFFECTS__
+async function fetchPackageProvenance(pkgName, pkgVersion, options) {
+  const { signal, timeout = 1e4 } = {
+    __proto__: null,
+    ...options
+  };
+  if (signal?.aborted) {
+    return void 0;
+  }
+  const timeoutSignal = (0, import_signal.createTimeoutSignal)(timeout);
+  const compositeSignal = (0, import_signal.createCompositeAbortSignal)(signal, timeoutSignal);
+  const fetcher = /* @__PURE__ */ getFetcher();
+  try {
+    const response = await fetcher(
+      // The npm registry attestations API endpoint.
+      `${import_agents.NPM_REGISTRY_URL}/-/npm/v1/attestations/${encodeURIComponent(pkgName)}@${encodeURIComponent(pkgVersion)}`,
+      {
+        method: "GET",
+        signal: compositeSignal,
+        headers: {
+          "User-Agent": "socket-registry"
+        }
+      }
+    );
+    if (response.ok) {
+      return getProvenanceDetails(await response.json());
+    }
+  } catch {
+  }
+  return void 0;
+}
 function findProvenance(attestations) {
   for (const attestation of attestations) {
     const att = attestation;
@@ -51,11 +88,11 @@ function findProvenance(attestations) {
       let predicate = att.predicate;
       if (!predicate && att.bundle?.dsseEnvelope?.payload) {
         try {
-          const decodedPayload = (0, import_primordials.BufferFrom)(
+          const decodedPayload = (0, import_buffer.BufferFrom)(
             att.bundle.dsseEnvelope.payload,
             "base64"
           ).toString("utf8");
-          const statement = (0, import_primordials.JSONParse)(decodedPayload);
+          const statement = (0, import_json.JSONParse)(decodedPayload);
           predicate = statement.predicate;
         } catch {
           continue;
@@ -75,7 +112,7 @@ function findProvenance(attestations) {
 }
 function getAttestations(attestationData) {
   const data = attestationData;
-  if (!data.attestations || !ArrayIsArray(data.attestations)) {
+  if (!data.attestations || !(0, import_array.ArrayIsArray)(data.attestations)) {
     return [];
   }
   return data.attestations.filter((attestation) => {
@@ -96,63 +133,6 @@ function getFetcher() {
   }
   return _fetcher;
 }
-function isTrustedPublisher(value) {
-  if (typeof value !== "string" || !value) {
-    return false;
-  }
-  let url = (0, import_url.parseUrl)(value);
-  let hostname = url?.hostname;
-  if (!url && (0, import_primordials.StringPrototypeIncludes)(value, "@")) {
-    const firstPart = (0, import_primordials.StringPrototypeSplit)(value, "@")[0];
-    if (firstPart) {
-      url = (0, import_url.parseUrl)(firstPart);
-    }
-    if (url) {
-      hostname = url.hostname;
-    }
-  }
-  if (!url) {
-    const httpsUrl = (0, import_url.parseUrl)(`https://${value}`);
-    if (httpsUrl) {
-      hostname = httpsUrl.hostname;
-    }
-  }
-  if (hostname) {
-    return hostname === "github.com" || (0, import_primordials.StringPrototypeEndsWith)(hostname, ".github.com") || hostname === "gitlab.com" || (0, import_primordials.StringPrototypeEndsWith)(hostname, ".gitlab.com");
-  }
-  return (0, import_primordials.StringPrototypeIncludes)(value, "github") || (0, import_primordials.StringPrototypeIncludes)(value, "gitlab");
-}
-// @__NO_SIDE_EFFECTS__
-async function fetchPackageProvenance(pkgName, pkgVersion, options) {
-  const { signal, timeout = 1e4 } = {
-    __proto__: null,
-    ...options
-  };
-  if (signal?.aborted) {
-    return void 0;
-  }
-  const timeoutSignal = (0, import_abort.createTimeoutSignal)(timeout);
-  const compositeSignal = (0, import_abort.createCompositeAbortSignal)(signal, timeoutSignal);
-  const fetcher = /* @__PURE__ */ getFetcher();
-  try {
-    const response = await fetcher(
-      // The npm registry attestations API endpoint.
-      `${import_agents.NPM_REGISTRY_URL}/-/npm/v1/attestations/${encodeURIComponent(pkgName)}@${encodeURIComponent(pkgVersion)}`,
-      {
-        method: "GET",
-        signal: compositeSignal,
-        headers: {
-          "User-Agent": "socket-registry"
-        }
-      }
-    );
-    if (response.ok) {
-      return getProvenanceDetails(await response.json());
-    }
-  } catch {
-  }
-  return void 0;
-}
 function getProvenanceDetails(attestationData) {
   const attestations = getAttestations(attestationData);
   if (!attestations.length) {
@@ -185,8 +165,38 @@ function getProvenanceDetails(attestationData) {
     workflowRunId
   };
 }
+function isTrustedPublisher(value) {
+  if (typeof value !== "string" || !value) {
+    return false;
+  }
+  let url = (0, import_parse.parseUrl)(value);
+  let hostname = url?.hostname;
+  if (!url && (0, import_string.StringPrototypeIncludes)(value, "@")) {
+    const firstPart = (0, import_string.StringPrototypeSplit)(value, "@")[0];
+    if (firstPart) {
+      url = (0, import_parse.parseUrl)(firstPart);
+    }
+    if (url) {
+      hostname = url.hostname;
+    }
+  }
+  if (!url) {
+    const httpsUrl = (0, import_parse.parseUrl)(`https://${value}`);
+    if (httpsUrl) {
+      hostname = httpsUrl.hostname;
+    }
+  }
+  if (hostname) {
+    return hostname === "github.com" || (0, import_string.StringPrototypeEndsWith)(hostname, ".github.com") || hostname === "gitlab.com" || (0, import_string.StringPrototypeEndsWith)(hostname, ".gitlab.com");
+  }
+  return (0, import_string.StringPrototypeIncludes)(value, "github") || (0, import_string.StringPrototypeIncludes)(value, "gitlab");
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   fetchPackageProvenance,
-  getProvenanceDetails
+  findProvenance,
+  getAttestations,
+  getFetcher,
+  getProvenanceDetails,
+  isTrustedPublisher
 });

package/dist/packages/specs.d.ts

@@ -1,14 +1,14 @@
 /**
- * @fileoverview Package spec parsing and GitHub URL utilities.
+ * @file Package spec parsing and GitHub URL utilities.
  */
 /**
  * Extract user and project from GitHub repository URL.
  *
  * @example
- * ```typescript
- * getRepoUrlDetails('https://github.com/lodash/lodash.git')
- * // { user: 'lodash', project: 'lodash' }
- * ```
+ *   ;```typescript
+ *   getRepoUrlDetails('https://github.com/lodash/lodash.git')
+ *   // { user: 'lodash', project: 'lodash' }
+ *   ```
  */
 export declare function getRepoUrlDetails(repoUrl?: string): {
     user: string;
@@ -18,39 +18,39 @@ export declare function getRepoUrlDetails(repoUrl?: string): {
  * Generate GitHub API URL for a tag reference.
  *
  * @example
- * ```typescript
- * gitHubTagRefUrl('lodash', 'lodash', 'v4.17.21')
- * // 'https://api.github.com/repos/lodash/lodash/git/ref/tags/v4.17.21'
- * ```
+ *   ;```typescript
+ *   gitHubTagRefUrl('lodash', 'lodash', 'v4.17.21')
+ *   // 'https://api.github.com/repos/lodash/lodash/git/ref/tags/v4.17.21'
+ *   ```
  */
 export declare function gitHubTagRefUrl(user: string, project: string, tag: string): string;
 /**
  * Generate GitHub tarball download URL for a commit SHA.
  *
  * @example
- * ```typescript
- * gitHubTgzUrl('lodash', 'lodash', 'abc123')
- * // 'https://github.com/lodash/lodash/archive/abc123.tar.gz'
- * ```
+ *   ;```typescript
+ *   gitHubTgzUrl('lodash', 'lodash', 'abc123')
+ *   // 'https://github.com/lodash/lodash/archive/abc123.tar.gz'
+ *   ```
  */
 export declare function gitHubTgzUrl(user: string, project: string, sha: string): string;
 /**
  * Check if a package specifier is a GitHub tarball URL.
  *
  * @example
- * ```typescript
- * isGitHubTgzSpec('https://github.com/user/repo/archive/abc123.tar.gz') // true
- * isGitHubTgzSpec('lodash@4.17.21')                                     // false
- * ```
+ *   ;```typescript
+ *   isGitHubTgzSpec('https://github.com/user/repo/archive/abc123.tar.gz') // true
+ *   isGitHubTgzSpec('lodash@4.17.21') // false
+ *   ```
  */
 export declare function isGitHubTgzSpec(spec: unknown, where?: string): boolean;
 /**
  * Check if a package specifier is a GitHub URL with committish.
  *
  * @example
- * ```typescript
- * isGitHubUrlSpec('github:user/repo#v1.0.0') // true
- * isGitHubUrlSpec('lodash@4.17.21')           // false
- * ```
+ *   ;```typescript
+ *   isGitHubUrlSpec('github:user/repo#v1.0.0') // true
+ *   isGitHubUrlSpec('lodash@4.17.21') // false
+ *   ```
  */
 export declare function isGitHubUrlSpec(spec: unknown, where?: string): boolean;

package/dist/packages/specs.js

@@ -38,9 +38,9 @@ __export(specs_exports, {
 });
 module.exports = __toCommonJS(specs_exports);
 var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
-var import_objects = require("../objects");
-var import_strings = require("../strings");
-var import_primordials = require("../primordials");
+var import_predicates = require("../objects/predicates");
+var import_predicates2 = require("../strings/predicates");
+var import_string = require("../primordials/string");
 // @__NO_SIDE_EFFECTS__
 function getRepoUrlDetails(repoUrl = "") {
   const match = /^(?:[a-z][a-z+]*:\/\/)(?:[^/@]+@)?github\.com\/([^?#]+)(?:[?#]|$)/i.exec(
@@ -52,7 +52,7 @@ function getRepoUrlDetails(repoUrl = "") {
   const userAndRepo = match[1].split("/");
   const user = userAndRepo[0] || "";
   const rawProject = userAndRepo[1] ?? "";
-  const project = (0, import_primordials.StringPrototypeEndsWith)(rawProject, ".git") ? rawProject.slice(0, -4) : rawProject;
+  const project = (0, import_string.StringPrototypeEndsWith)(rawProject, ".git") ? rawProject.slice(0, -4) : rawProject;
   return { user, project };
 }
 // @__NO_SIDE_EFFECTS__
@@ -66,7 +66,7 @@ function gitHubTgzUrl(user, project, sha) {
 // @__NO_SIDE_EFFECTS__
 function isGitHubTgzSpec(spec, where) {
   let parsedSpec;
-  if ((0, import_objects.isObjectObject)(spec)) {
+  if ((0, import_predicates.isPlainObject)(spec)) {
     parsedSpec = spec;
   } else {
     parsedSpec = (0, import_npm_package_arg.default)(spec, where);
@@ -77,13 +77,13 @@ function isGitHubTgzSpec(spec, where) {
 // @__NO_SIDE_EFFECTS__
 function isGitHubUrlSpec(spec, where) {
   let parsedSpec;
-  if ((0, import_objects.isObjectObject)(spec)) {
+  if ((0, import_predicates.isPlainObject)(spec)) {
     parsedSpec = spec;
   } else {
     parsedSpec = (0, import_npm_package_arg.default)(spec, where);
   }
   const typedSpec = parsedSpec;
-  return typedSpec.type === "git" && typedSpec.hosted?.domain === "github.com" && (0, import_strings.isNonEmptyString)(typedSpec.gitCommittish);
+  return typedSpec.type === "git" && typedSpec.hosted?.domain === "github.com" && (0, import_predicates2.isNonEmptyString)(typedSpec.gitCommittish);
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/{packages.d.ts → packages/types.d.ts}

@@ -1,27 +1,21 @@
 /**
- * @fileoverview Package registry management with Socket.dev specific utilities.
- * Provides npm package analysis, dependency resolution, and registry operations.
+ * @file Public type surface for `packages/*` modules — the `PackageJson` shape
+ *   (npm-extended with a `socket` field) plus option bags consumed across
+ *   `edit` / `manifest` / `normalize` / `operations` / `provenance` /
+ *   `licenses`. Pure types, no runtime side effects.
  */
-import type { CategoryString } from './types';
-import { getEditablePackageJsonClass, pkgJsonToEditable, toEditablePackageJson, toEditablePackageJsonSync } from './packages/edit';
-import { findTypesForSubpath, getExportFilePaths, getSubpaths, isConditionalExports, isSubpathExports, resolvePackageJsonEntryExports } from './packages/exports';
-import { isolatePackage } from './packages/isolation';
-import { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, createBinaryOperationNode, createLicenseNode, parseSpdxExp, resolvePackageLicenses, visitLicenses } from './packages/licenses';
-import { createPackageJson, fetchPackageManifest, fetchPackagePackument } from './packages/manifest';
-import { normalizePackageJson, resolveEscapedScope, resolveOriginalPackageName, unescapeScope } from './packages/normalize';
-import { extractPackage, findPackageExtensions, getReleaseTag, packPackage, readPackageJson, readPackageJsonSync, resolveGitHubTgzUrl, resolvePackageName, resolveRegistryPackageName } from './packages/operations';
-import { fetchPackageProvenance, getProvenanceDetails } from './packages/provenance';
-import { getRepoUrlDetails, gitHubTagRefUrl, gitHubTgzUrl, isGitHubTgzSpec, isGitHubUrlSpec } from './packages/specs';
-import { isBlessedPackageName, isRegistryFetcherType, isValidPackageName } from './packages/validation';
-import { resolvePackageJsonDirname, resolvePackageJsonPath } from './paths/packages';
+import type { CategoryString } from '../eco/types';
 type PackageExports = {
     [path: string]: unknown;
 };
-export type EditablePackageJson = import('./packages/edit').EditablePackageJsonInstance;
+export type EditablePackageJson = import('./edit').EditablePackageJsonInstance;
 /**
- * Extended PackageJson type based on NPMCliPackageJson.Content with Socket-specific additions.
+ * Extended PackageJson type based on NPMCliPackageJson.Content with
+ * Socket-specific additions.
+ *
  * @extends NPMCliPackageJson.Content (from @npmcli/package-json)
- * @property socket - Optional Socket.dev specific configuration
+ *
+ * @property socket - Optional Socket.dev specific configuration.
  */
 export type PackageJson = {
     [key: string]: unknown;
@@ -79,6 +73,8 @@ export type PackageJson = {
     private?: boolean | undefined;
     publishConfig?: Record<string, unknown> | undefined;
     files?: string[] | undefined;
+    keywords?: string[] | undefined;
+    sideEffects?: boolean | string[] | undefined;
     engines?: Record<string, string> | undefined;
     os?: string[] | undefined;
     cpu?: string[] | undefined;
@@ -134,6 +130,4 @@ export type PacoteOptions = {
     preferOffline?: boolean | undefined;
     fullMetadata?: boolean | undefined;
 };
-export type { IsolatePackageOptions, IsolatePackageResult, } from './packages/isolation';
-export type { InternalAstNode, InternalBinaryOperationNode, InternalLicenseNode, LicenseVisitor, SpdxAstNode, SpdxBinaryOperationNode, SpdxLicenseNode, } from './packages/licenses';
-export { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, createBinaryOperationNode, createLicenseNode, createPackageJson, extractPackage, fetchPackageManifest, fetchPackagePackument, fetchPackageProvenance, findPackageExtensions, findTypesForSubpath, getEditablePackageJsonClass, getExportFilePaths, getProvenanceDetails, getReleaseTag, getRepoUrlDetails, getSubpaths, gitHubTagRefUrl, gitHubTgzUrl, isBlessedPackageName, isConditionalExports, isGitHubTgzSpec, isGitHubUrlSpec, isolatePackage, isRegistryFetcherType, isSubpathExports, isValidPackageName, normalizePackageJson, packPackage, parseSpdxExp, pkgJsonToEditable, readPackageJson, readPackageJsonSync, resolveEscapedScope, resolveGitHubTgzUrl, resolveOriginalPackageName, resolvePackageJsonDirname, resolvePackageJsonEntryExports, resolvePackageJsonPath, resolvePackageLicenses, resolvePackageName, resolveRegistryPackageName, toEditablePackageJson, toEditablePackageJsonSync, unescapeScope, visitLicenses, };
+export {};

package/dist/packages/types.js

@@ -0,0 +1,18 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/packages/validation.d.ts

@@ -1,33 +1,33 @@
 /**
- * @fileoverview Package name validation utilities.
+ * @file Package name validation utilities.
  */
 /**
  * Check if package name is a blessed Socket.dev package.
  *
  * @example
- * ```typescript
- * isBlessedPackageName('@socketregistry/is-number') // true
- * isBlessedPackageName('lodash')                    // false
- * ```
+ *   ;```typescript
+ *   isBlessedPackageName('@socketregistry/is-number') // true
+ *   isBlessedPackageName('lodash') // false
+ *   ```
  */
 export declare function isBlessedPackageName(name: unknown): boolean;
 /**
  * Check if a type string represents a registry fetcher type.
  *
  * @example
- * ```typescript
- * isRegistryFetcherType('range')   // true
- * isRegistryFetcherType('git')     // false
- * ```
+ *   ;```typescript
+ *   isRegistryFetcherType('range') // true
+ *   isRegistryFetcherType('git') // false
+ *   ```
  */
 export declare function isRegistryFetcherType(type: string): boolean;
 /**
  * Check if a package name is valid according to npm naming rules.
  *
  * @example
- * ```typescript
- * isValidPackageName('my-package')   // true
- * isValidPackageName('.invalid')     // false
- * ```
+ *   ;```typescript
+ *   isValidPackageName('my-package') // true
+ *   isValidPackageName('.invalid') // false
+ *   ```
  */
 export declare function isValidPackageName(name: string): boolean;

package/dist/packages/validation.js

@@ -36,10 +36,10 @@ __export(validation_exports, {
 });
 module.exports = __toCommonJS(validation_exports);
 var import_validate_npm_package_name = __toESM(require("../external/validate-npm-package-name"));
-var import_primordials = require("../primordials");
+var import_string = require("../primordials/string");
 // @__NO_SIDE_EFFECTS__
 function isBlessedPackageName(name) {
-  return typeof name === "string" && (name === "sfw" || name === "socket" || (0, import_primordials.StringPrototypeStartsWith)(name, "@socketoverride/") || (0, import_primordials.StringPrototypeStartsWith)(name, "@socketregistry/") || (0, import_primordials.StringPrototypeStartsWith)(name, "@socketsecurity/"));
+  return typeof name === "string" && (name === "sfw" || name === "socket" || (0, import_string.StringPrototypeStartsWith)(name, "@socketoverride/") || (0, import_string.StringPrototypeStartsWith)(name, "@socketregistry/") || (0, import_string.StringPrototypeStartsWith)(name, "@socketsecurity/"));
 }
 // @__NO_SIDE_EFFECTS__
 function isRegistryFetcherType(type) {

package/dist/paths/_internal.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Shared internals for the `paths/` module — the leaf-level primitives
+ *   every other path leaf depends on. Kept as a single file so `normalize`,
+ *   `predicates`, `conversion`, and `resolve` can layer above it without
+ *   circular imports.
+ *
+ *   - char-code constants + shared regexps
+ *   - `getUrl` — lazy `node:url` loader
+ *   - `pathLikeToString` — `string | Buffer | URL` → `string`
+ */
+export declare const CHAR_BACKWARD_SLASH = 92;
+export declare const CHAR_COLON = 58;
+export declare const CHAR_FORWARD_SLASH = 47;
+export declare const CHAR_LOWERCASE_A = 97;
+export declare const CHAR_LOWERCASE_Z = 122;
+export declare const CHAR_UPPERCASE_A = 65;
+export declare const CHAR_UPPERCASE_Z = 90;
+export declare const msysDriveRegExp: RegExp;
+export declare const nodeModulesPathRegExp: RegExp;
+export declare const slashRegExp: RegExp;
+/**
+ * Lazily load the url module.
+ *
+ * Performs on-demand loading of Node.js url module to avoid initialization
+ * overhead and potential Webpack bundling errors.
+ *
+ * @private
+ */
+export declare function getUrl(): typeof import('node:url');
+/**
+ * Convert a path-like value to a string.
+ *
+ * Converts various path-like types (string, Buffer, URL) into a normalized
+ * string representation. Handles different input formats and provides
+ * consistent string output for path operations.
+ *
+ * @example
+ *   ;```typescript
+ *   pathLikeToString('/home/user') // '/home/user'
+ *   pathLikeToString(Buffer.from('/tmp/file')) // '/tmp/file'
+ *   pathLikeToString(new URL('file:///home/user')) // '/home/user'
+ *   pathLikeToString(null) // ''
+ *   ```
+ *
+ * @param {string | Buffer | URL | null | undefined} pathLike - The value to
+ *   convert.
+ *
+ * @returns {string} The string representation, or empty string for
+ *   null/undefined.
+ */
+export declare function pathLikeToString(pathLike: string | Buffer | URL | null | undefined): string;

package/dist/paths/_internal.js

@@ -0,0 +1,102 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var internal_exports = {};
+__export(internal_exports, {
+  CHAR_BACKWARD_SLASH: () => CHAR_BACKWARD_SLASH,
+  CHAR_COLON: () => CHAR_COLON,
+  CHAR_FORWARD_SLASH: () => CHAR_FORWARD_SLASH,
+  CHAR_LOWERCASE_A: () => CHAR_LOWERCASE_A,
+  CHAR_LOWERCASE_Z: () => CHAR_LOWERCASE_Z,
+  CHAR_UPPERCASE_A: () => CHAR_UPPERCASE_A,
+  CHAR_UPPERCASE_Z: () => CHAR_UPPERCASE_Z,
+  getUrl: () => getUrl,
+  msysDriveRegExp: () => msysDriveRegExp,
+  nodeModulesPathRegExp: () => nodeModulesPathRegExp,
+  pathLikeToString: () => pathLikeToString,
+  slashRegExp: () => slashRegExp
+});
+module.exports = __toCommonJS(internal_exports);
+var import_platform = require("../constants/platform");
+var import_buffer = require("../primordials/buffer");
+var import_string = require("../primordials/string");
+const CHAR_BACKWARD_SLASH = 92;
+const CHAR_COLON = 58;
+const CHAR_FORWARD_SLASH = 47;
+const CHAR_LOWERCASE_A = 97;
+const CHAR_LOWERCASE_Z = 122;
+const CHAR_UPPERCASE_A = 65;
+const CHAR_UPPERCASE_Z = 90;
+const msysDriveRegExp = /^\/([a-zA-Z])(\/|$)/;
+const nodeModulesPathRegExp = /(?:^|[/\\])node_modules(?:[/\\]|$)/;
+const slashRegExp = /[/\\]/;
+let _url;
+// @__NO_SIDE_EFFECTS__
+function getUrl() {
+  if (_url === void 0) {
+    _url = require("node:url");
+  }
+  return _url;
+}
+// @__NO_SIDE_EFFECTS__
+function pathLikeToString(pathLike) {
+  if (pathLike === null || pathLike === void 0) {
+    return "";
+  }
+  if (typeof pathLike === "string") {
+    return pathLike;
+  }
+  if ((0, import_buffer.BufferIsBuffer)(pathLike)) {
+    return pathLike.toString("utf8");
+  }
+  const url = /* @__PURE__ */ getUrl();
+  if (pathLike instanceof URL) {
+    try {
+      return url.fileURLToPath(pathLike);
+    } catch {
+      const pathname = pathLike.pathname;
+      const decodedPathname = decodeURIComponent(pathname);
+      if (import_platform.WIN32 && (0, import_string.StringPrototypeStartsWith)(decodedPathname, "/")) {
+        const letter = (0, import_string.StringPrototypeCharCodeAt)(decodedPathname, 1) | 32;
+        const hasValidDriveLetter = decodedPathname.length >= 3 && letter >= 97 && letter <= 122 && (0, import_string.StringPrototypeCharAt)(decodedPathname, 2) === ":";
+        if (!hasValidDriveLetter) {
+          return decodedPathname;
+        }
+      }
+      return decodedPathname;
+    }
+  }
+  return String(pathLike);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CHAR_BACKWARD_SLASH,
+  CHAR_COLON,
+  CHAR_FORWARD_SLASH,
+  CHAR_LOWERCASE_A,
+  CHAR_LOWERCASE_Z,
+  CHAR_UPPERCASE_A,
+  CHAR_UPPERCASE_Z,
+  getUrl,
+  msysDriveRegExp,
+  nodeModulesPathRegExp,
+  pathLikeToString,
+  slashRegExp
+});