@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/ipc/write.js

@@ -1,77 +1,84 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var write_exports = {};
-__export(write_exports, {
-  writeIpcStub: () => writeIpcStub
-});
-module.exports = __toCommonJS(write_exports);
-var import_node_process = __toESM(require("node:process"));
-var import_safe = require("../fs/safe");
-var import_parse = require("../schema/parse");
-var import_date = require("../primordials/date");
-var import_json = require("../primordials/json");
-var import_internal = require("./_internal");
-var import_directory = require("./directory");
-var import_paths = require("./paths");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_node_fs = require('../node/fs.js');
+const require_primordials_date = require('../primordials/date.js');
+const require_primordials_json = require('../primordials/json.js');
+const require_fs_safe = require('../fs/safe.js');
+const require_ipc__internal = require('./_internal.js');
+const require_ipc_directory = require('./directory.js');
+const require_ipc_paths = require('./paths.js');
+const require_schema_parse = require('../schema/parse.js');
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/ipc/write.ts
+/**
+* @file Atomic stub write — `O_CREAT|O_WRONLY|O_EXCL| O_NOFOLLOW` so we refuse
+*   to overwrite a pre-existing stub (collision with attacker-planted file or
+*   PID reuse) and refuse to follow symlinks at the final path component. One
+*   retry on EEXIST after `safeDelete` to handle the legitimate stale-stub case
+*   where the previous owner exited ungracefully.
+*/
+/**
+* Write IPC data to a stub file for inter-process data transfer.
+*
+* Creates a stub file containing data that needs to be passed between
+* processes. The file is written with 0o600 permissions so only the invoking
+* user can read it.
+*
+* ## File Structure:
+*
+* ```json
+* {
+*   "pid": 12345,
+*   "timestamp": 1699564234567,
+*   "data": { ... }
+* }
+* ```
+*
+* @example
+*   ;```typescript
+*   const stubPath = await writeIpcStub('socket-cli', {
+*   apiToken: 'secret-token',
+*   config: { ... }
+*   })
+*   // Pass stubPath to child process for reading
+*   ```
+*
+* @param appName - The application identifier.
+* @param data - The data to write to the stub file.
+*
+* @returns Promise resolving to the stub file path
+*/
 async function writeIpcStub(appName, data) {
-  const stubPath = (0, import_paths.getIpcStubPath)(appName);
-  await (0, import_directory.ensureIpcDirectory)(stubPath);
-  const ipcData = {
-    data,
-    pid: import_node_process.default.pid,
-    timestamp: (0, import_date.DateNow)()
-  };
-  const validated = (0, import_parse.parseSchema)(import_internal.IpcStubSchema, ipcData);
-  const fs = (0, import_internal.getFs)();
-  const flags = fs.constants.O_CREAT | fs.constants.O_WRONLY | fs.constants.O_EXCL | fs.constants.O_NOFOLLOW;
-  let handle;
-  try {
-    handle = await fs.promises.open(stubPath, flags, 384);
-  } catch (e) {
-    const err = e;
-    if (err.code === "EEXIST") {
-      await (0, import_safe.safeDelete)(stubPath);
-      handle = await fs.promises.open(stubPath, flags, 384);
-    } else {
-      throw err;
-    }
-  }
-  try {
-    await handle.writeFile((0, import_json.JSONStringify)(validated, void 0, 2), "utf8");
-  } finally {
-    await handle.close();
-  }
-  return stubPath;
+	const stubPath = require_ipc_paths.getIpcStubPath(appName);
+	await require_ipc_directory.ensureIpcDirectory(stubPath);
+	const validated = require_schema_parse.parseSchema(require_ipc__internal.IpcStubSchema, {
+		data,
+		pid: node_process.default.pid,
+		timestamp: require_primordials_date.DateNow()
+	});
+	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const flags = fs.constants.O_CREAT | fs.constants.O_WRONLY | fs.constants.O_EXCL | fs.constants.O_NOFOLLOW;
+	let handle;
+	try {
+		handle = await fs.promises.open(stubPath, flags, 384);
+	} catch (e) {
+		const err = e;
+		if (err.code === "EEXIST") {
+			await require_fs_safe.safeDelete(stubPath);
+			handle = await fs.promises.open(stubPath, flags, 384);
+		} else throw err;
+	}
+	try {
+		await handle.writeFile(require_primordials_json.JSONStringify(validated, void 0, 2), "utf8");
+	} finally {
+		await handle.close();
+	}
+	return stubPath;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  writeIpcStub
-});
+
+//#endregion
+exports.writeIpcStub = writeIpcStub;

package/dist/ipc-cli/get.js

@@ -1,60 +1,33 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var get_exports = {};
-__export(get_exports, {
-  getIpc: () => getIpc
-});
-module.exports = __toCommonJS(get_exports);
-var import_object = require("../primordials/object");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../primordials/object.js');
+
+//#region src/ipc-cli/get.ts
+/**
+* @file Socket CLI child-process IPC object getter. Lazily builds an
+*   `IpcObject` from `SOCKET_CLI_*` environment variables so child processes
+*   can read flags and tokens forwarded by the parent Socket CLI without
+*   re-parsing `process.env` each call. Complements the filesystem stub IPC in
+*   `@socketsecurity/lib/ipc` (`getIpcStubPath`, `writeIpcStub`) for cases
+*   where data exceeds env-var size limits.
+*/
 let _ipcObject;
 async function getIpc(key) {
-  if (_ipcObject === void 0) {
-    _ipcObject = {};
-    const { env } = process;
-    if (env["SOCKET_CLI_FIX"]) {
-      _ipcObject.SOCKET_CLI_FIX = env["SOCKET_CLI_FIX"];
-    }
-    if (env["SOCKET_CLI_OPTIMIZE"]) {
-      _ipcObject.SOCKET_CLI_OPTIMIZE = env["SOCKET_CLI_OPTIMIZE"] === "true" || env["SOCKET_CLI_OPTIMIZE"] === "1";
-    }
-    if (env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"]) {
-      _ipcObject.SOCKET_CLI_SHADOW_ACCEPT_RISKS = env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"] === "true" || env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"] === "1";
-    }
-    if (env["SOCKET_CLI_SHADOW_API_TOKEN"]) {
-      _ipcObject.SOCKET_CLI_SHADOW_API_TOKEN = env["SOCKET_CLI_SHADOW_API_TOKEN"];
-    }
-    if (env["SOCKET_CLI_SHADOW_BIN"]) {
-      _ipcObject.SOCKET_CLI_SHADOW_BIN = env["SOCKET_CLI_SHADOW_BIN"];
-    }
-    if (env["SOCKET_CLI_SHADOW_PROGRESS"]) {
-      _ipcObject.SOCKET_CLI_SHADOW_PROGRESS = env["SOCKET_CLI_SHADOW_PROGRESS"] === "true" || env["SOCKET_CLI_SHADOW_PROGRESS"] === "1";
-    }
-    if (env["SOCKET_CLI_SHADOW_SILENT"]) {
-      _ipcObject.SOCKET_CLI_SHADOW_SILENT = env["SOCKET_CLI_SHADOW_SILENT"] === "true" || env["SOCKET_CLI_SHADOW_SILENT"] === "1";
-    }
-    (0, import_object.ObjectFreeze)(_ipcObject);
-  }
-  return key ? _ipcObject[key] : _ipcObject;
+	if (_ipcObject === void 0) {
+		_ipcObject = {};
+		const { env } = process;
+		if (env["SOCKET_CLI_FIX"]) _ipcObject.SOCKET_CLI_FIX = env["SOCKET_CLI_FIX"];
+		if (env["SOCKET_CLI_OPTIMIZE"]) _ipcObject.SOCKET_CLI_OPTIMIZE = env["SOCKET_CLI_OPTIMIZE"] === "true" || env["SOCKET_CLI_OPTIMIZE"] === "1";
+		if (env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"]) _ipcObject.SOCKET_CLI_SHADOW_ACCEPT_RISKS = env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"] === "true" || env["SOCKET_CLI_SHADOW_ACCEPT_RISKS"] === "1";
+		if (env["SOCKET_CLI_SHADOW_API_TOKEN"]) _ipcObject.SOCKET_CLI_SHADOW_API_TOKEN = env["SOCKET_CLI_SHADOW_API_TOKEN"];
+		if (env["SOCKET_CLI_SHADOW_BIN"]) _ipcObject.SOCKET_CLI_SHADOW_BIN = env["SOCKET_CLI_SHADOW_BIN"];
+		if (env["SOCKET_CLI_SHADOW_PROGRESS"]) _ipcObject.SOCKET_CLI_SHADOW_PROGRESS = env["SOCKET_CLI_SHADOW_PROGRESS"] === "true" || env["SOCKET_CLI_SHADOW_PROGRESS"] === "1";
+		if (env["SOCKET_CLI_SHADOW_SILENT"]) _ipcObject.SOCKET_CLI_SHADOW_SILENT = env["SOCKET_CLI_SHADOW_SILENT"] === "true" || env["SOCKET_CLI_SHADOW_SILENT"] === "1";
+		require_primordials_object.ObjectFreeze(_ipcObject);
+	}
+	return key ? _ipcObject[key] : _ipcObject;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  getIpc
-});
+
+//#endregion
+exports.getIpc = getIpc;

package/dist/ipc-cli/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */