@socketsecurity/lib 6.0.1 → 6.0.3

package/dist/smol/path.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Lazy-loader for socket-btm's `node:smol-path` — native fast paths for
+ *   the hot path-string primitives (`dirname`, `normalize`, …) and, per the
+ *   socket-btm `node-smol-path` Phase 4 plan, batched filesystem ops (`access`,
+ *   an in-C++ `findUp`). Returns `undefined` on stock Node, non-Node runtimes,
+ *   and on socket-btm binaries that haven't shipped the binding yet; callers
+ *   fall back to the JS implementation. Result is cached. The binding does not
+ *   exist yet (the plan is unbuilt) — this accessor is the seam so that when it
+ *   lands, only this file changes and `paths/walk`, `fs/access`, `fs/find-up`
+ *   light up natively. Today `getSmolPath()` is always `undefined` and the JS
+ *   paths run.
+ */
+import type { PathLike } from 'node:fs';
+/**
+ * Native path / filesystem fast-path surface. Only the operations socket-lib's
+ * helpers shim are typed; the binding may expose more. Every method is optional
+ * so a partial rollout (e.g. `dirname` ships before `access`) still type-checks
+ * at the shim sites.
+ */
+export interface SmolPathBinding {
+    /**
+     * `path.dirname` over the one-byte Fast API. ASCII fast path; two-byte inputs
+     * route to the equivalent of `path.dirname`.
+     */
+    dirname?: ((p: string) => string) | undefined;
+    /**
+     * `path.normalize` over the one-byte Fast API.
+     */
+    normalize?: ((p: string) => string) | undefined;
+    /**
+     * `fs.accessSync`-equivalent returning a boolean instead of throwing — skips
+     * the V8 error-object materialization the JS wrapper pays on every negative
+     * check. `mode` is an `fs.constants` bit.
+     */
+    access?: ((path: PathLike, mode?: number | undefined) => boolean) | undefined;
+    /**
+     * In-C++ find-up: walk `startDir`'s ancestors, return the first dir
+     * containing any of `names` (as a file unless `onlyDirectories`), or
+     * `undefined`. Collapses the N JS↔native crossings of the JS walk into one.
+     */
+    findUp?: ((startDir: string, names: readonly string[], options?: {
+        onlyDirectories?: boolean | undefined;
+    } | undefined) => string | undefined) | undefined;
+}
+/**
+ * Returns the `node:smol-path` binding when running on a smol Node binary that
+ * ships it; otherwise `undefined`. Cached across calls.
+ *
+ * @returns The native binding, or `undefined` to signal "use the JS fallback".
+ */
+export declare function getSmolPath(): SmolPathBinding | undefined;

package/dist/smol/path.js

@@ -0,0 +1,42 @@
+"use strict";
+/* Socket Lib - Built with esbuild */
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var path_exports = {};
+__export(path_exports, {
+  getSmolPath: () => getSmolPath
+});
+module.exports = __toCommonJS(path_exports);
+var import_module = require("../node/module");
+let _smolPath;
+let _smolPathProbed = false;
+// @__NO_SIDE_EFFECTS__
+function getSmolPath() {
+  if (!_smolPathProbed) {
+    _smolPathProbed = true;
+    if ((0, import_module.isNodeBuiltin)("node:smol-path")) {
+      _smolPath = require("node:smol-path");
+    }
+  }
+  return _smolPath;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getSmolPath
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "6.0.1",
+  "version": "6.0.3",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
     "Socket.dev",
@@ -1319,6 +1319,11 @@
       "types": "./dist/external-tools/uv/types.d.ts",
       "default": "./dist/external-tools/uv/types.js"
     },
+    "./fs/access": {
+      "source": "./src/fs/access.ts",
+      "types": "./dist/fs/access.d.ts",
+      "default": "./dist/fs/access.js"
+    },
     "./fs/encoding": {
       "source": "./src/fs/encoding.ts",
       "types": "./dist/fs/encoding.d.ts",
@@ -1359,6 +1364,11 @@
       "types": "./dist/fs/read-json-cache.d.ts",
       "default": "./dist/fs/read-json-cache.js"
     },
+    "./fs/resolve-module": {
+      "source": "./src/fs/resolve-module.ts",
+      "types": "./dist/fs/resolve-module.d.ts",
+      "default": "./dist/fs/resolve-module.js"
+    },
     "./fs/safe": {
       "source": "./src/fs/safe.ts",
       "types": "./dist/fs/safe.d.ts",
@@ -1484,12 +1494,31 @@
       "types": "./dist/globs/types.d.ts",
       "default": "./dist/globs/types.js"
     },
+    "./http-request": {
+      "source": "./src/http-request/node.ts",
+      "browser": {
+        "types": "./dist/http-request/browser.d.ts",
+        "default": "./dist/http-request/browser.js"
+      },
+      "types": "./dist/http-request/node.d.ts",
+      "default": "./dist/http-request/node.js"
+    },
     "./http-request/browser": {
+      "browser": {
+        "source": "./src/http-request/browser.ts",
+        "types": "./dist/http-request/browser.d.ts",
+        "default": "./dist/http-request/browser.js"
+      },
       "source": "./src/http-request/browser.ts",
       "types": "./dist/http-request/browser.d.ts",
       "default": "./dist/http-request/browser.js"
     },
     "./http-request/browser-fetch": {
+      "browser": {
+        "source": "./src/http-request/browser-fetch.ts",
+        "types": "./dist/http-request/browser-fetch.d.ts",
+        "default": "./dist/http-request/browser-fetch.js"
+      },
       "source": "./src/http-request/browser-fetch.ts",
       "types": "./dist/http-request/browser-fetch.d.ts",
       "default": "./dist/http-request/browser-fetch.js"
@@ -1499,11 +1528,6 @@
       "types": "./dist/http-request/checksums.d.ts",
       "default": "./dist/http-request/checksums.js"
     },
-    "./http-request/convenience": {
-      "source": "./src/http-request/convenience.ts",
-      "types": "./dist/http-request/convenience.d.ts",
-      "default": "./dist/http-request/convenience.js"
-    },
     "./http-request/download": {
       "source": "./src/http-request/download.ts",
       "types": "./dist/http-request/download.d.ts",
@@ -1524,6 +1548,20 @@
       "types": "./dist/http-request/headers.d.ts",
       "default": "./dist/http-request/headers.js"
     },
+    "./http-request/http-request": {
+      "source": "./src/http-request/node.ts",
+      "browser": {
+        "types": "./dist/http-request/browser.d.ts",
+        "default": "./dist/http-request/browser.js"
+      },
+      "types": "./dist/http-request/node.d.ts",
+      "default": "./dist/http-request/node.js"
+    },
+    "./http-request/node": {
+      "source": "./src/http-request/node.ts",
+      "types": "./dist/http-request/node.d.ts",
+      "default": "./dist/http-request/node.js"
+    },
     "./http-request/request": {
       "source": "./src/http-request/request.ts",
       "types": "./dist/http-request/request.d.ts",
@@ -1620,11 +1658,20 @@
       "default": "./dist/links/types.js"
     },
     "./logger": {
-      "source": "./src/logger/default.ts",
-      "types": "./dist/logger/default.d.ts",
-      "default": "./dist/logger/default.js"
+      "source": "./src/logger/node.ts",
+      "browser": {
+        "types": "./dist/logger/browser.d.ts",
+        "default": "./dist/logger/browser.js"
+      },
+      "types": "./dist/logger/node.d.ts",
+      "default": "./dist/logger/node.js"
     },
     "./logger/browser": {
+      "browser": {
+        "source": "./src/logger/browser.ts",
+        "types": "./dist/logger/browser.d.ts",
+        "default": "./dist/logger/browser.js"
+      },
       "source": "./src/logger/browser.ts",
       "types": "./dist/logger/browser.d.ts",
       "default": "./dist/logger/browser.js"
@@ -1644,6 +1691,20 @@
       "types": "./dist/logger/default.d.ts",
       "default": "./dist/logger/default.js"
     },
+    "./logger/logger": {
+      "source": "./src/logger/node.ts",
+      "browser": {
+        "types": "./dist/logger/browser.d.ts",
+        "default": "./dist/logger/browser.js"
+      },
+      "types": "./dist/logger/node.d.ts",
+      "default": "./dist/logger/node.js"
+    },
+    "./logger/node": {
+      "source": "./src/logger/node.ts",
+      "types": "./dist/logger/node.d.ts",
+      "default": "./dist/logger/node.js"
+    },
     "./logger/symbols": {
       "source": "./src/logger/symbols.ts",
       "types": "./dist/logger/symbols.d.ts",
@@ -1939,6 +2000,11 @@
       "types": "./dist/paths/socket.d.ts",
       "default": "./dist/paths/socket.js"
     },
+    "./paths/walk": {
+      "source": "./src/paths/walk.ts",
+      "types": "./dist/paths/walk.d.ts",
+      "default": "./dist/paths/walk.js"
+    },
     "./perf/enabled": {
       "source": "./src/perf/enabled.ts",
       "types": "./dist/perf/enabled.d.ts",
@@ -2199,6 +2265,11 @@
       "types": "./dist/releases/github-listing.d.ts",
       "default": "./dist/releases/github-listing.js"
     },
+    "./releases/github-retry-config": {
+      "source": "./src/releases/github-retry-config.ts",
+      "types": "./dist/releases/github-retry-config.d.ts",
+      "default": "./dist/releases/github-retry-config.js"
+    },
     "./releases/github-types": {
       "source": "./src/releases/github-types.ts",
       "types": "./dist/releases/github-types.d.ts",
@@ -2299,6 +2370,11 @@
       "types": "./dist/smol/manifest.d.ts",
       "default": "./dist/smol/manifest.js"
     },
+    "./smol/path": {
+      "source": "./src/smol/path.ts",
+      "types": "./dist/smol/path.d.ts",
+      "default": "./dist/smol/path.js"
+    },
     "./smol/primordial": {
       "source": "./src/smol/primordial.ts",
       "types": "./dist/smol/primordial.d.ts",
@@ -2698,27 +2774,6 @@
     "access": "public",
     "provenance": true
   },
-  "scripts": {
-    "build": "node scripts/build/cli.mts",
-    "check": "node scripts/check.mts",
-    "check:paths": "node scripts/check-paths.mts",
-    "clean": "node scripts/build/clean.mts",
-    "cover": "node scripts/test/cover.mts",
-    "dev": "node scripts/build/cli.mts --watch",
-    "fix": "node scripts/fix.mts",
-    "format": "oxfmt -c .config/oxfmtrc.json --write .",
-    "format:check": "oxfmt -c .config/oxfmtrc.json --check .",
-    "lint": "node scripts/lint.mts",
-    "prim": "node tools/prim/bin/prim.mts",
-    "security": "node scripts/security.mts",
-    "prepare": "node scripts/install-git-hooks.mts && node scripts/build/cli.mts --quiet",
-    "prepublishOnly": "pnpm run build",
-    "test": "node scripts/test/cli.mts",
-    "update": "node scripts/update.mts",
-    "lockstep": "node scripts/lockstep.mts",
-    "lockstep:emit-schema": "node scripts/lockstep-emit-schema.mts",
-    "setup-security-tools": "node .claude/hooks/setup-security-tools/install.mts"
-  },
   "devDependencies": {
     "@anthropic-ai/claude-code": "2.1.92",
     "@babel/core": "7.28.4",
@@ -2736,13 +2791,13 @@
     "@npmcli/promise-spawn": "8.0.3",
     "@sinclair/typebox": "0.34.49",
     "@socketregistry/is-unicode-supported": "1.0.5",
-    "@socketregistry/packageurl-js": "catalog:",
-    "@socketregistry/packageurl-js-stable": "catalog:",
+    "@socketregistry/packageurl-js": "npm:@socketregistry/packageurl-js@1.4.2",
+    "@socketregistry/packageurl-js-stable": "npm:@socketregistry/packageurl-js@1.4.2",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib": "catalog:",
-    "@socketsecurity/lib-stable": "catalog:",
-    "@socketsecurity/sdk": "catalog:",
-    "@socketsecurity/sdk-stable": "catalog:",
+    "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.1",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.1",
+    "@socketsecurity/sdk": "npm:@socketsecurity/sdk@4.0.1",
+    "@socketsecurity/sdk-stable": "npm:@socketsecurity/sdk@4.0.1",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20260511.1",
     "@vitest/coverage-v8": "4.0.3",
@@ -2773,7 +2828,6 @@
     "pacote": "21.5.0",
     "picomatch": "4.0.4",
     "pony-cause": "2.1.11",
-    "prim": "workspace:*",
     "semver": "7.7.2",
     "signal-exit": "4.1.0",
     "spdx-correct": "3.2.0",
@@ -2790,7 +2844,8 @@
     "which": "5.0.0",
     "yargs-parser": "22.0.0",
     "yoctocolors-cjs": "2.1.3",
-    "zod": "4.1.12"
+    "zod": "4.1.12",
+    "prim": "0.1.0"
   },
   "peerDependencies": {
     "typescript": ">=5.0.0"
@@ -2804,5 +2859,23 @@
     "node": ">=22",
     "pnpm": ">=11.3.0"
   },
-  "packageManager": "pnpm@11.3.0"
-}
+  "scripts": {
+    "build": "node scripts/build/cli.mts",
+    "check": "node scripts/check.mts",
+    "check:paths": "node scripts/check-paths.mts",
+    "clean": "node scripts/build/clean.mts",
+    "cover": "node scripts/test/cover.mts",
+    "dev": "node scripts/build/cli.mts --watch",
+    "fix": "node scripts/fix.mts",
+    "format": "oxfmt -c .config/oxfmtrc.json --write .",
+    "format:check": "oxfmt -c .config/oxfmtrc.json --check .",
+    "lint": "node scripts/lint.mts",
+    "prim": "node tools/prim/bin/prim.mts",
+    "security": "node scripts/security.mts",
+    "test": "node scripts/test/cli.mts",
+    "update": "node scripts/update.mts",
+    "lockstep": "node scripts/lockstep.mts",
+    "lockstep:emit-schema": "node scripts/lockstep-emit-schema.mts",
+    "setup-security-tools": "node .claude/hooks/setup-security-tools/install.mts"
+  }
+}

package/dist/http-request/convenience.d.ts

@@ -1,104 +0,0 @@
-/**
- * @file Thin convenience wrappers over `httpRequest` — `httpJson` and
- *   `httpText`. Both set sensible default `Accept` (and `Content-Type` when a
- *   body is present) headers, then delegate to `httpRequest`. User-supplied
- *   headers always win in the merge. Each wrapper throws `HttpResponseError` on
- *   non-2xx responses (parallel to the `throwOnError` mode of `httpRequest`) so
- *   callers never have to inspect `.ok` themselves.
- */
-import type { HttpRequestOptions } from './request-types';
-/**
- * Perform an HTTP request and parse JSON response. Convenience wrapper around
- * `httpRequest` for JSON API calls. Automatically sets appropriate headers for
- * JSON requests: - `Accept: application/json` (always) - `Content-Type:
- * application/json` (when body is present) User-provided headers override these
- * defaults.
- *
- * @example
- *   ;```ts
- *   // Simple JSON GET (automatically sets Accept: application/json)
- *   const data = await httpJson('https://api.example.com/data')
- *   console.log(data)
- *
- *   // With type safety
- *   interface User {
- *     id: number
- *     name: string
- *     email: string
- *   }
- *   const user = await httpJson<User>('https://api.example.com/user/123')
- *   console.log(user.name, user.email)
- *
- *   // POST with JSON body (automatically sets Content-Type: application/json)
- *   const result = await httpJson('https://api.example.com/users', {
- *     method: 'POST',
- *     body: JSON.stringify({ name: 'Alice', email: 'alice@example.com' }),
- *   })
- *
- *   // With custom headers and retries
- *   const data = await httpJson('https://api.example.com/data', {
- *     headers: {
- *       Authorization: 'Bearer token123',
- *     },
- *     retries: 3,
- *     retryDelay: 1000,
- *   })
- *   ```
- *
- * @template T - Expected JSON response type (defaults to `unknown`)
- *
- * @param url - The URL to request (must start with http:// or https://)
- * @param options - Request configuration options.
- *
- * @returns Promise resolving to parsed JSON data
- *
- * @throws {Error} When request fails, response is not ok (status < 200 or >=
- *   300), or JSON parsing fails.
- */
-export declare function httpJson<T = unknown>(url: string, options?: HttpRequestOptions | undefined): Promise<T>;
-/**
- * Perform an HTTP request and return text response. Convenience wrapper around
- * `httpRequest` for fetching text content. Automatically sets appropriate
- * headers for text requests: - `Accept: text/plain` (always) - `Content-Type:
- * text/plain` (when body is present) User-provided headers override these
- * defaults.
- *
- * @example
- *   ;```ts
- *   // Fetch HTML (automatically sets Accept: text/plain)
- *   const html = await httpText('https://example.com')
- *   console.log(html.includes('<!DOCTYPE html>'))
- *
- *   // Fetch plain text
- *   const text = await httpText('https://example.com/file.txt')
- *   console.log(text)
- *
- *   // POST with text body (automatically sets Content-Type: text/plain)
- *   const result = await httpText('https://example.com/api', {
- *     method: 'POST',
- *     body: 'raw text data',
- *   })
- *
- *   // With custom headers (override defaults)
- *   const text = await httpText('https://example.com/data.txt', {
- *     headers: {
- *       Authorization: 'Bearer token123',
- *       Accept: 'text/html', // Override default Accept header
- *     },
- *   })
- *
- *   // With timeout
- *   const text = await httpText('https://example.com/large-file.txt', {
- *     timeout: 60000, // 1 minute
- *   })
- *   ```
- *
- * @param url - The URL to request (must start with http:// or https://)
- * @param options - Request configuration options.
- *
- * @returns Promise resolving to response body as UTF-8 string
- *
- * @throws {Error} When request fails or response is not ok (status < 200 or >=
- *   300)
- */
-export declare function httpText(url: string, options?: HttpRequestOptions | undefined): Promise<string>;