@socketsecurity/lib 5.3.0 → 5.4.1

package/dist/releases/github.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var github_exports = {};
 __export(github_exports, {
@@ -27,26 +37,13 @@ __export(github_exports, {
   getReleaseAssetUrl: () => getReleaseAssetUrl
 });
 module.exports = __toCommonJS(github_exports);
-var import_fs = require("fs");
-var import_promises = require("fs/promises");
-var import_fs2 = require("../fs.js");
+var import_picomatch = __toESM(require("../external/picomatch.js"));
+var import_fs = require("../fs.js");
 var import_http_request = require("../http-request.js");
 var import_logger = require("../logger.js");
-var import_promises2 = require("../promises.js");
+var import_promises = require("../promises.js");
 var import_spawn = require("../spawn.js");
 const logger = (0, import_logger.getDefaultLogger)();
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("path");
-  }
-  return _path;
-}
-const SOCKET_BTM_REPO = {
-  owner: "SocketDev",
-  repo: "socket-btm"
-};
 const RETRY_CONFIG = Object.freeze({
   __proto__: null,
   // Exponential backoff: delay doubles with each retry (5s, 10s, 20s).
@@ -56,93 +53,52 @@ const RETRY_CONFIG = Object.freeze({
   // Maximum number of retry attempts (excluding initial request).
   retries: 2
 });
-async function downloadGitHubRelease(config) {
-  const {
-    assetName,
-    binaryName,
-    cwd = process.cwd(),
-    downloadDir = "build/downloaded",
-    owner,
-    platformArch,
-    quiet = false,
-    removeMacOSQuarantine = true,
-    repo,
-    tag: explicitTag,
-    toolName,
-    toolPrefix
-  } = config;
-  let tag;
-  if (explicitTag) {
-    tag = explicitTag;
-  } else if (toolPrefix) {
-    const latestTag = await getLatestRelease(
-      toolPrefix,
-      { owner, repo },
-      { quiet }
-    );
-    if (!latestTag) {
-      throw new Error(`No ${toolPrefix} release found in ${owner}/${repo}`);
-    }
-    tag = latestTag;
-  } else {
-    throw new Error("Either toolPrefix or tag must be provided");
-  }
-  const path = /* @__PURE__ */ getPath();
-  const resolvedDownloadDir = path.isAbsolute(downloadDir) ? downloadDir : path.join(cwd, downloadDir);
-  const binaryDir = path.join(resolvedDownloadDir, toolName, platformArch);
-  const binaryPath = path.join(binaryDir, binaryName);
-  const versionPath = path.join(binaryDir, ".version");
-  if ((0, import_fs.existsSync)(versionPath) && (0, import_fs.existsSync)(binaryPath)) {
-    const cachedVersion = (await (0, import_promises.readFile)(versionPath, "utf8")).trim();
-    if (cachedVersion === tag) {
-      if (!quiet) {
-        logger.info(`Using cached ${toolName} (${platformArch}): ${binaryPath}`);
-      }
-      return binaryPath;
-    }
+let _fs;
+let _path;
+function createMatcher(pattern) {
+  if (typeof pattern === "string") {
+    const isMatch = (0, import_picomatch.default)(pattern);
+    return (input) => isMatch(input);
   }
-  if (!quiet) {
-    logger.info(`Downloading ${toolName} for ${platformArch}...`);
+  if (pattern instanceof RegExp) {
+    return (input) => pattern.test(input);
   }
-  await downloadReleaseAsset(
-    tag,
-    assetName,
-    binaryPath,
-    { owner, repo },
-    { quiet }
-  );
-  const isWindows = binaryName.endsWith(".exe");
-  if (!isWindows) {
-    (0, import_fs.chmodSync)(binaryPath, 493);
-    if (removeMacOSQuarantine && process.platform === "darwin" && platformArch.startsWith("darwin")) {
-      try {
-        await (0, import_spawn.spawn)("xattr", ["-d", "com.apple.quarantine", binaryPath], {
-          stdio: "ignore"
-        });
-      } catch {
-      }
-    }
+  const { prefix, suffix } = pattern;
+  return (input) => input.startsWith(prefix) && input.endsWith(suffix);
+}
+// @__NO_SIDE_EFFECTS__
+function getFs() {
+  if (_fs === void 0) {
+    _fs = require("fs");
   }
-  await (0, import_promises.writeFile)(versionPath, tag, "utf8");
-  if (!quiet) {
-    logger.info(`Downloaded ${toolName} to ${binaryPath}`);
+  return _fs;
+}
+// @__NO_SIDE_EFFECTS__
+function getPath() {
+  if (_path === void 0) {
+    _path = require("path");
   }
-  return binaryPath;
+  return _path;
 }
-async function downloadReleaseAsset(tag, assetName, outputPath, repoConfig, options = {}) {
+const SOCKET_BTM_REPO = {
+  owner: "SocketDev",
+  repo: "socket-btm"
+};
+async function downloadReleaseAsset(tag, assetPattern, outputPath, repoConfig, options = {}) {
   const { owner, repo } = repoConfig;
   const { quiet = false } = options;
   const downloadUrl = await getReleaseAssetUrl(
     tag,
-    assetName,
+    assetPattern,
     { owner, repo },
     { quiet }
   );
   if (!downloadUrl) {
-    throw new Error(`Asset ${assetName} not found in release ${tag}`);
+    const patternDesc = typeof assetPattern === "string" ? assetPattern : "matching pattern";
+    throw new Error(`Asset ${patternDesc} not found in release ${tag}`);
   }
   const path = /* @__PURE__ */ getPath();
-  await (0, import_fs2.safeMkdir)(path.dirname(outputPath));
+  await (0, import_fs.safeMkdir)(path.dirname(outputPath));
   await (0, import_http_request.httpDownload)(downloadUrl, outputPath, {
     logger: quiet ? void 0 : logger,
     progressInterval: 10,
@@ -162,9 +118,10 @@ function getAuthHeaders() {
   return headers;
 }
 async function getLatestRelease(toolPrefix, repoConfig, options = {}) {
+  const { assetPattern, quiet = false } = options;
   const { owner, repo } = repoConfig;
-  const { quiet = false } = options;
-  return await (0, import_promises2.pRetry)(
+  const isMatch = assetPattern ? createMatcher(assetPattern) : void 0;
+  return await (0, import_promises.pRetry)(
     async () => {
       const response = await (0, import_http_request.httpRequest)(
         `https://api.github.com/repos/${owner}/${repo}/releases?per_page=100`,
@@ -177,13 +134,22 @@ async function getLatestRelease(toolPrefix, repoConfig, options = {}) {
       }
       const releases = JSON.parse(response.body.toString("utf8"));
       for (const release of releases) {
-        const { tag_name: tag } = release;
-        if (tag.startsWith(toolPrefix)) {
-          if (!quiet) {
-            logger.info(`Found release: ${tag}`);
+        const { assets, tag_name: tag } = release;
+        if (!tag.startsWith(toolPrefix)) {
+          continue;
+        }
+        if (isMatch) {
+          const hasMatchingAsset = assets.some(
+            (a) => isMatch(a.name)
+          );
+          if (!hasMatchingAsset) {
+            continue;
           }
-          return tag;
         }
+        if (!quiet) {
+          logger.info(`Found release: ${tag}`);
+        }
+        return tag;
       }
       if (!quiet) {
         logger.info(`No ${toolPrefix} release found in latest 100 releases`);
@@ -206,10 +172,11 @@ async function getLatestRelease(toolPrefix, repoConfig, options = {}) {
     }
   );
 }
-async function getReleaseAssetUrl(tag, assetName, repoConfig, options = {}) {
+async function getReleaseAssetUrl(tag, assetPattern, repoConfig, options = {}) {
   const { owner, repo } = repoConfig;
   const { quiet = false } = options;
-  return await (0, import_promises2.pRetry)(
+  const isMatch = typeof assetPattern === "string" && !assetPattern.includes("*") && !assetPattern.includes("{") ? (input) => input === assetPattern : createMatcher(assetPattern);
+  return await (0, import_promises.pRetry)(
     async () => {
       const response = await (0, import_http_request.httpRequest)(
         `https://api.github.com/repos/${owner}/${repo}/releases/tags/${tag}`,
@@ -222,13 +189,14 @@ async function getReleaseAssetUrl(tag, assetName, repoConfig, options = {}) {
       }
       const release = JSON.parse(response.body.toString("utf8"));
       const asset = release.assets.find(
-        (a) => a.name === assetName
+        (a) => isMatch(a.name)
       );
       if (!asset) {
-        throw new Error(`Asset ${assetName} not found in release ${tag}`);
+        const patternDesc = typeof assetPattern === "string" ? assetPattern : "matching pattern";
+        throw new Error(`Asset ${patternDesc} not found in release ${tag}`);
       }
       if (!quiet) {
-        logger.info(`Found asset: ${assetName}`);
+        logger.info(`Found asset: ${asset.name}`);
       }
       return asset.browser_download_url;
     },
@@ -248,6 +216,80 @@ async function getReleaseAssetUrl(tag, assetName, repoConfig, options = {}) {
     }
   );
 }
+async function downloadGitHubRelease(config) {
+  const {
+    assetName,
+    binaryName,
+    cwd = process.cwd(),
+    downloadDir = "build/downloaded",
+    owner,
+    platformArch,
+    quiet = false,
+    removeMacOSQuarantine = true,
+    repo,
+    tag: explicitTag,
+    toolName,
+    toolPrefix
+  } = config;
+  let tag;
+  if (explicitTag) {
+    tag = explicitTag;
+  } else if (toolPrefix) {
+    const latestTag = await getLatestRelease(
+      toolPrefix,
+      { owner, repo },
+      { quiet }
+    );
+    if (!latestTag) {
+      throw new Error(`No ${toolPrefix} release found in ${owner}/${repo}`);
+    }
+    tag = latestTag;
+  } else {
+    throw new Error("Either toolPrefix or tag must be provided");
+  }
+  const path = /* @__PURE__ */ getPath();
+  const resolvedDownloadDir = path.isAbsolute(downloadDir) ? downloadDir : path.join(cwd, downloadDir);
+  const binaryDir = path.join(resolvedDownloadDir, toolName, platformArch);
+  const binaryPath = path.join(binaryDir, binaryName);
+  const versionPath = path.join(binaryDir, ".version");
+  const fs = /* @__PURE__ */ getFs();
+  if (fs.existsSync(versionPath) && fs.existsSync(binaryPath)) {
+    const cachedVersion = (await fs.promises.readFile(versionPath, "utf8")).trim();
+    if (cachedVersion === tag) {
+      if (!quiet) {
+        logger.info(`Using cached ${toolName} (${platformArch}): ${binaryPath}`);
+      }
+      return binaryPath;
+    }
+  }
+  if (!quiet) {
+    logger.info(`Downloading ${toolName} for ${platformArch}...`);
+  }
+  await downloadReleaseAsset(
+    tag,
+    assetName,
+    binaryPath,
+    { owner, repo },
+    { quiet }
+  );
+  const isWindows = binaryName.endsWith(".exe");
+  if (!isWindows) {
+    fs.chmodSync(binaryPath, 493);
+    if (removeMacOSQuarantine && process.platform === "darwin" && platformArch.startsWith("darwin")) {
+      try {
+        await (0, import_spawn.spawn)("xattr", ["-d", "com.apple.quarantine", binaryPath], {
+          stdio: "ignore"
+        });
+      } catch {
+      }
+    }
+  }
+  await fs.promises.writeFile(versionPath, tag, "utf8");
+  if (!quiet) {
+    logger.info(`Downloaded ${toolName} to ${binaryPath}`);
+  }
+  return binaryPath;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   SOCKET_BTM_REPO,

package/dist/releases/socket-btm.d.ts

@@ -1,57 +1,64 @@
+/**
+ * @fileoverview Socket-btm release download utilities.
+ */
 import { type Arch, type Libc, type Platform } from '../constants/platform.js';
+import { type AssetPattern } from './github.js';
 export type { Arch, Libc, Platform };
 /**
- * Configuration for downloading socket-btm binary releases.
+ * Configuration for downloading socket-btm generic assets.
  */
-export interface SocketBtmBinaryConfig {
+export interface SocketBtmAssetConfig {
+    /** Asset name or pattern on GitHub. */
+    asset: string | AssetPattern;
+    /** @internal Discriminator fields */
+    bin?: never;
     /** Working directory (defaults to process.cwd()). */
     cwd?: string;
     /** Download destination directory. @default 'build/downloaded' */
     downloadDir?: string;
-    /** Tool/package name for directory structure and release matching. */
-    tool: string;
-    /** Binary/executable name (without extension). @default tool */
-    bin?: string;
-    /** Target platform (defaults to current platform). */
-    targetPlatform?: Platform;
-    /** Target architecture (defaults to current arch). */
-    targetArch?: Arch;
-    /** Linux libc variant. Auto-detected if not specified. */
-    libc?: Libc;
-    /** Specific release tag to download. */
-    tag?: string;
+    /** @internal Discriminator fields */
+    libc?: never;
+    /** Output filename. @default resolved asset name */
+    output?: string;
     /** Suppress log messages. @default false */
     quiet?: boolean;
-    /** Remove macOS quarantine attribute after download. @default true */
+    /** Remove macOS quarantine attribute after download. @default false */
     removeMacOSQuarantine?: boolean;
-    /** @internal Discriminator field */
-    asset?: never;
+    /** Specific release tag to download. */
+    tag?: string;
+    /** @internal Discriminator fields */
+    targetArch?: never;
+    /** @internal Discriminator fields */
+    targetPlatform?: never;
+    /** Tool/package name for directory structure and release matching. */
+    tool: string;
 }
 /**
- * Configuration for downloading socket-btm generic assets.
+ * Configuration for downloading socket-btm binary releases.
  */
-export interface SocketBtmAssetConfig {
+export interface SocketBtmBinaryConfig {
+    /** @internal Discriminator field */
+    asset?: never;
+    /** Binary/executable name (without extension). @default tool */
+    bin?: string;
     /** Working directory (defaults to process.cwd()). */
     cwd?: string;
     /** Download destination directory. @default 'build/downloaded' */
     downloadDir?: string;
-    /** Tool/package name for directory structure and release matching. */
-    tool: string;
-    /** Asset name pattern on GitHub. */
-    asset: string;
-    /** Output filename. @default asset */
-    output?: string;
-    /** Specific release tag to download. */
-    tag?: string;
+    /** Linux libc variant. Auto-detected if not specified. */
+    libc?: Libc;
     /** Suppress log messages. @default false */
     quiet?: boolean;
-    /** Remove macOS quarantine attribute after download. @default false */
+    /** Remove macOS quarantine attribute after download. @default true */
     removeMacOSQuarantine?: boolean;
-    /** @internal Discriminator fields */
-    bin?: never;
-    targetPlatform?: never;
-    targetArch?: never;
-    libc?: never;
+    /** Specific release tag to download. */
+    tag?: string;
+    /** Target architecture (defaults to current arch). */
+    targetArch?: Arch;
+    /** Target platform (defaults to current platform). */
+    targetPlatform?: Platform;
+    /** Tool/package name for directory structure and release matching. */
+    tool: string;
 }
 /**
  * Configuration for downloading socket-btm releases (binary or asset).

package/dist/releases/socket-btm.js

@@ -26,18 +26,27 @@ __export(socket_btm_exports, {
   getPlatformArch: () => getPlatformArch
 });
 module.exports = __toCommonJS(socket_btm_exports);
-var import_fs = require("fs");
 var import_platform = require("../constants/platform.js");
 var import_github = require("./github.js");
 const ARCH_MAP = {
+  __proto__: null,
   arm64: "arm64",
   x64: "x64"
 };
+let _fs;
+// @__NO_SIDE_EFFECTS__
+function getFs() {
+  if (_fs === void 0) {
+    _fs = require("fs");
+  }
+  return _fs;
+}
 function detectLibc() {
   if ((0, import_platform.getPlatform)() !== "linux") {
     return void 0;
   }
   try {
+    const fs = /* @__PURE__ */ getFs();
     const muslPaths = [
       "/lib/ld-musl-x86_64.so.1",
       "/lib/ld-musl-aarch64.so.1",
@@ -45,7 +54,7 @@ function detectLibc() {
       "/usr/lib/ld-musl-aarch64.so.1"
     ];
     for (const path of muslPaths) {
-      if ((0, import_fs.existsSync)(path)) {
+      if (fs.existsSync(path)) {
         return "musl";
       }
     }
@@ -64,7 +73,38 @@ async function downloadSocketBtmRelease(config) {
       output,
       removeMacOSQuarantine = false
     } = config;
-    const outputName = output || asset;
+    let resolvedAsset;
+    let resolvedTag = tag;
+    const isExactMatch = typeof asset === "string" && !asset.includes("*");
+    if (isExactMatch) {
+      resolvedAsset = asset;
+    } else {
+      if (tag) {
+        throw new Error(
+          "Cannot use asset pattern with explicit tag. Either provide exact asset name or omit tag."
+        );
+      }
+      resolvedTag = await (0, import_github.getLatestRelease)(toolPrefix, import_github.SOCKET_BTM_REPO, {
+        assetPattern: asset,
+        quiet
+      });
+      if (!resolvedTag) {
+        throw new Error(`No ${tool} release with matching asset pattern found`);
+      }
+      const assetUrl = await (0, import_github.getReleaseAssetUrl)(
+        resolvedTag,
+        asset,
+        import_github.SOCKET_BTM_REPO,
+        {
+          quiet
+        }
+      );
+      if (!assetUrl) {
+        throw new Error(`No matching asset found in release ${resolvedTag}`);
+      }
+      resolvedAsset = assetUrl.split("/").pop() || asset.toString();
+    }
+    const outputName = output || resolvedAsset;
     const platformArch = "assets";
     downloadConfig = {
       owner: import_github.SOCKET_BTM_REPO.owner,
@@ -74,9 +114,9 @@ async function downloadSocketBtmRelease(config) {
       toolName: tool,
       platformArch,
       binaryName: outputName,
-      assetName: asset,
+      assetName: resolvedAsset,
       toolPrefix,
-      tag,
+      tag: resolvedTag,
       quiet,
       removeMacOSQuarantine
     };

package/dist/spawn.js

@@ -37,13 +37,20 @@ __export(spawn_exports, {
 module.exports = __toCommonJS(spawn_exports);
 var import_process = require("./constants/process");
 var import_promise_spawn = __toESM(require("./external/@npmcli/promise-spawn"));
-var import_node_path = __toESM(require("node:path"));
 var import_arrays = require("./arrays");
 var import_bin = require("./bin");
 var import_normalize = require("./paths/normalize");
 var import_objects = require("./objects");
 var import_spinner = require("./spinner");
 var import_strings = require("./strings");
+let _path;
+// @__NO_SIDE_EFFECTS__
+function getPath() {
+  if (_path === void 0) {
+    _path = require("path");
+  }
+  return _path;
+}
 const abortSignal = (0, import_process.getAbortSignal)();
 const spinner = (0, import_spinner.getDefaultSpinner)();
 const windowsScriptExtRegExp = /\.(?:cmd|bat|ps1)$/i;
@@ -102,7 +109,7 @@ function spawn(cmd, args, options, extra) {
   }
   const WIN32 = process.platform === "win32";
   if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {
-    actualCmd = import_node_path.default.basename(actualCmd, import_node_path.default.extname(actualCmd));
+    actualCmd = (/* @__PURE__ */ getPath()).basename(actualCmd, (/* @__PURE__ */ getPath()).extname(actualCmd));
   }
   const wasSpinning = !!spinnerInstance?.isSpinning;
   const shouldStopSpinner = wasSpinning && !/* @__PURE__ */ isStdioType(stdio, "ignore") && !/* @__PURE__ */ isStdioType(stdio, "pipe");
@@ -181,7 +188,7 @@ function spawnSync(cmd, args, options) {
   const shell = (0, import_objects.getOwn)(options, "shell");
   const WIN32 = process.platform === "win32";
   if (WIN32 && shell && windowsScriptExtRegExp.test(actualCmd)) {
-    actualCmd = import_node_path.default.basename(actualCmd, import_node_path.default.extname(actualCmd));
+    actualCmd = (/* @__PURE__ */ getPath()).basename(actualCmd, (/* @__PURE__ */ getPath()).extname(actualCmd));
   }
   const { stripAnsi: shouldStripAnsi = true, ...rawSpawnOptions } = {
     __proto__: null,

package/dist/stdio/mask.d.ts

@@ -1,24 +1,4 @@
-/**
- * @fileoverview Interactive output masking utilities for CLI tools.
- * Provides output control with keyboard toggling (ctrl+o).
- *
- * ANSI Escape Sequences Used:
- * - '\r': Carriage return - moves cursor to beginning of current line.
- * - '\x1b[K' or '\x1b[0K': CSI K (erase line) - clear from cursor to end of line.
- * - '\x1b[2K': CSI 2K - erase entire line.
- * - '\x1b[1A': CSI A - move cursor up 1 line.
- *
- * Terminal Control:
- * - Raw mode (setRawMode(true)): Captures keypresses immediately without buffering.
- * - TTY detection: Ensures terminal manipulation only occurs in interactive terminals.
- *
- * Key Features:
- * - Output buffering: Stores up to 1000 lines when masked to prevent memory issues.
- * - Graceful cleanup: Always restores terminal to normal mode on exit/error.
- * - Visual feedback: Uses spinner to indicate process is running when output is masked.
- */
 import type { ChildProcess, SpawnOptions } from 'child_process';
-import readline from 'readline';
 export interface OutputMaskOptions {
     /**
      * Current working directory for spawned process.
@@ -120,7 +100,11 @@ export declare function createOutputMask(options?: OutputMaskOptions): OutputMas
  * - ctrl+c: Cancel the running process.
  * The handler manipulates terminal state using ANSI escape sequences.
  */
-export declare function createKeyboardHandler(mask: OutputMask, child: ChildProcess, options?: OutputMaskOptions): (_str: string, key: readline.Key) => void;
+type ReadlineKey = {
+    ctrl?: boolean;
+    name?: string;
+};
+export declare function createKeyboardHandler(mask: OutputMask, child: ChildProcess, options?: OutputMaskOptions): (_str: string, key: ReadlineKey) => void;
 /**
  * Attach output masking to a child process.
  * Returns a promise that resolves with the exit code.
@@ -138,3 +122,4 @@ export declare function attachOutputMask(child: ChildProcess, options?: OutputMa
  * stdin is inherited, stdout and stderr are piped for masking control.
  */
 export declare function runWithMask(command: string, args?: string[], options?: OutputMaskOptions & SpawnOptions): Promise<number>;
+export {};

package/dist/stdio/mask.js

@@ -1,10 +1,8 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
-var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -18,14 +16,6 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var mask_exports = {};
 __export(mask_exports, {
@@ -35,11 +25,25 @@ __export(mask_exports, {
   runWithMask: () => runWithMask
 });
 module.exports = __toCommonJS(mask_exports);
-var import_child_process = require("child_process");
-var import_readline = __toESM(require("readline"));
 var import_spinner = require("../spinner.js");
 var import_clear = require("./clear.js");
 var import_stdout = require("./stdout.js");
+let _child_process;
+// @__NO_SIDE_EFFECTS__
+function getChildProcess() {
+  if (_child_process === void 0) {
+    _child_process = require("child_process");
+  }
+  return _child_process;
+}
+let _readline;
+// @__NO_SIDE_EFFECTS__
+function getReadline() {
+  if (_readline === void 0) {
+    _readline = require("readline");
+  }
+  return _readline;
+}
 const spinner = (0, import_spinner.getDefaultSpinner)();
 function createOutputMask(options = {}) {
   const { showOutput = false } = options;
@@ -101,7 +105,7 @@ function attachOutputMask(child, options = {}) {
       );
     }
     if (process.stdin.isTTY) {
-      import_readline.default.emitKeypressEvents(process.stdin);
+      (/* @__PURE__ */ getReadline()).emitKeypressEvents(process.stdin);
       process.stdin.setRawMode(true);
       const keypressHandler = createKeyboardHandler(mask, child, options);
       process.stdin.on("keypress", keypressHandler);
@@ -194,7 +198,7 @@ async function runWithMask(command, args = [], options = {}) {
     toggleText = "to see output",
     ...spawnOptions
   } = options;
-  const child = (0, import_child_process.spawn)(command, args, {
+  const child = (/* @__PURE__ */ getChildProcess()).spawn(command, args, {
     stdio: ["inherit", "pipe", "pipe"],
     ...spawnOptions
   });