@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/bin/exec.js

@@ -1,79 +1,75 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var exec_exports = {};
-__export(exec_exports, {
-  execBin: () => execBin
-});
-module.exports = __toCommonJS(exec_exports);
-var import_platform = require("../constants/platform");
-var import_normalize = require("../paths/normalize");
-var import_array = require("../primordials/array");
-var import_error = require("../primordials/error");
-var import_child = require("../process/spawn/child");
-var import_internal = require("./_internal");
-var import_resolve = require("./resolve");
-var import_which = require("./which");
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_error = require('../primordials/error.js');
+const require_constants_platform = require('../constants/platform.js');
+const require_paths_predicates = require('../paths/predicates.js');
+const require_primordials_array = require('../primordials/array.js');
+const require_node_fs = require('../node/fs.js');
+const require_bin__internal = require('./_internal.js');
+const require_bin_resolve = require('./resolve.js');
+const require_bin_which = require('./which.js');
+const require_process_spawn_child = require('../process/spawn/child.js');
+
+//#region src/bin/exec.ts
+/**
+* @file `execBin` — spawn a binary with PATH resolution, wrapper-script
+*   unwrapping, and Windows shell handling. Order of operations:
+*
+*   1. If the input looks like a path (absolute or relative), `resolveRealBinSync`
+*      it directly so we can spawn the underlying script rather than a
+*      wrapper.
+*   2. Otherwise treat it as a binary name and:
+*
+*   - Hit `binPathCache`. If valid (`existsSync`), use the cached path; if stale,
+*     evict.
+*   - Fall through to `whichReal` for a fresh PATH search; cache the result on
+*     success.
+*
+*   3. Spawn with `shell: WIN32` so `.cmd` wrappers work on Windows; POSIX bypass
+*      since direct `execve` is faster.
+*   4. On not-found, throw a typed `ENOENT` error with operator guidance — far
+*      more useful than a bare "command not found".
+*/
+/**
+* Execute a binary with the given arguments.
+*
+* @example
+*   ;```typescript
+*   await execBin('pnpm', ['install'])
+*   await execBin('/usr/local/bin/node', ['script.js'], { cwd: '/tmp' })
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 async function execBin(binPath, args, options) {
-  let resolvedPath;
-  if ((0, import_normalize.isPath)(binPath)) {
-    resolvedPath = (0, import_resolve.resolveRealBinSync)(binPath);
-  } else {
-    const cached = import_internal.binPathCache.get(binPath);
-    if (cached) {
-      if ((0, import_internal.getFs)().existsSync(cached)) {
-        resolvedPath = cached;
-      } else {
-        import_internal.binPathCache.delete(binPath);
-      }
-    }
-    if (!resolvedPath) {
-      resolvedPath = await (0, import_which.whichReal)(binPath);
-      if (typeof resolvedPath === "string") {
-        import_internal.binPathCache.set(binPath, resolvedPath);
-      }
-    }
-  }
-  if (!resolvedPath) {
-    const error = new import_error.ErrorCtor(
-      `Binary not found: ${binPath}
-Possible causes:
-  - Binary "${binPath}" is not installed or not in PATH
-  - Binary name is incorrect or misspelled
+	let resolvedPath;
+	if (/* @__PURE__ */ require_paths_predicates.isPath(binPath)) resolvedPath = /* @__PURE__ */ require_bin_resolve.resolveRealBinSync(binPath);
+	else {
+		const cached = require_bin__internal.binPathCache.get(binPath);
+		/* c8 ignore start */
+		if (cached) if ((/* @__PURE__ */ require_node_fs.getNodeFs()).existsSync(cached)) resolvedPath = cached;
+		else require_bin__internal.binPathCache.delete(binPath);
+		/* c8 ignore stop */
+		if (!resolvedPath) {
+			resolvedPath = await require_bin_which.whichReal(binPath);
+			if (typeof resolvedPath === "string") require_bin__internal.binPathCache.set(binPath, resolvedPath);
+		}
+	}
+	if (!resolvedPath) {
+		const error = new require_primordials_error.ErrorCtor(`Binary not found: ${binPath}\nPossible causes:
+  - Binary "${binPath}" is not installed or not in PATH\n  - Binary name is incorrect or misspelled
   - Installation directory is not in system PATH
 To resolve:
-  1. Verify "${binPath}" is installed: which ${binPath} (Unix) or where ${binPath} (Windows)
-  2. Install the binary if missing, ex: npm install -g ${binPath}
-  3. Check PATH environment variable includes the binary location`
-    );
-    error.code = "ENOENT";
-    throw error;
-  }
-  const binCommand = (0, import_array.ArrayIsArray)(resolvedPath) ? resolvedPath[0] : resolvedPath;
-  return await (0, import_child.spawn)(binCommand, args ?? [], {
-    shell: import_platform.WIN32,
-    ...options
-  });
+  1. Verify "${binPath}" is installed: which ${binPath} (Unix) or where ${binPath} (Windows)\n  2. Install the binary if missing, ex: npm install -g ${binPath}\n  3. Check PATH environment variable includes the binary location`);
+		error.code = "ENOENT";
+		throw error;
+	}
+	/* c8 ignore stop */
+	return await require_process_spawn_child.spawn(require_primordials_array.ArrayIsArray(resolvedPath) ? resolvedPath[0] : resolvedPath, args ?? [], {
+		shell: require_constants_platform.WIN32,
+		...options
+	});
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  execBin
-});
+
+//#endregion
+exports.execBin = execBin;

package/dist/bin/find.js

@@ -1,143 +1,160 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var find_exports = {};
-__export(find_exports, {
-  findRealBin: () => findRealBin,
-  findRealNpm: () => findRealNpm,
-  findRealPnpm: () => findRealPnpm,
-  findRealYarn: () => findRealYarn
-});
-module.exports = __toCommonJS(find_exports);
-var import_node_process = __toESM(require("node:process"));
-var import_platform = require("../constants/platform");
-var import_home = require("../env/home");
-var import_windows = require("../env/windows");
-var import_xdg = require("../env/xdg");
-var import_which = __toESM(require("../external/which"));
-var import_array = require("../primordials/array");
-var import_internal = require("./_internal");
-var import_shadow = require("./shadow");
-var import_which2 = require("./which");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_constants_platform = require('../constants/platform.js');
+const require_primordials_array = require('../primordials/array.js');
+const require_node_fs = require('../node/fs.js');
+const require_node_path = require('../node/path.js');
+const require_bin_which = require('./which.js');
+const require_env_home = require('../env/home.js');
+const require_env_windows = require('../env/windows.js');
+const require_env_xdg = require('../env/xdg.js');
+const require_bin_shadow = require('./shadow.js');
+let src_external_which = require("../external/which");
+src_external_which = require_runtime.__toESM(src_external_which);
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/bin/find.ts
+/**
+* @file Find specific package-manager binaries with platform- aware fallbacks.
+*   `findRealBin` tries common platform paths in order, then falls back to a
+*   `which` PATH search filtered to skip shadow-bin directories (any path
+*   containing `node_modules/.bin`). The shadow-bin filter matters because
+*   tools like ts-node and tsx install fake `npm` / `pnpm` / `yarn` shims into
+*   the project's `.bin` to intercept the call — those aren't the user's real
+*   package manager. Per-tool helpers (`findRealNpm`, `findRealPnpm`,
+*   `findRealYarn`) encode the canonical install layouts:
+*
+*   - npm: alongside `process.execPath` first (Node bundles it), then
+*     `%APPDATA%\npm` on Windows or `/usr/local/bin` / `/usr/bin` on POSIX.
+*   - pnpm: `~/.local/share/pnpm` (XDG) or `~/.pnpm` on POSIX,
+*     `%APPDATA%\npm\pnpm` or `%LOCALAPPDATA%\pnpm\pnpm` on Windows.
+*   - yarn: similar to npm but also `~/.yarn/bin/yarn` on POSIX. Each helper
+*     returns an empty string when no candidate exists so the caller can fall
+*     through to `which` on PATH.
+*/
+/**
+* Find the real executable for a binary, bypassing shadow bins.
+*
+* @example
+*   ;```typescript
+*   const npmPath = findRealBin('npm', ['/usr/local/bin/npm'])
+*   const gitPath = findRealBin('git')
+*   ```
+*/
 function findRealBin(binName, commonPaths = []) {
-  const fs = (0, import_internal.getFs)();
-  const path = (0, import_internal.getPath)();
-  for (const binPath of commonPaths) {
-    if (fs.existsSync(binPath)) {
-      return binPath;
-    }
-  }
-  const allPaths = import_which.default.sync(binName, { all: true, nothrow: true }) || [];
-  const pathsArray = (0, import_array.ArrayIsArray)(allPaths) ? allPaths : typeof allPaths === "string" ? [allPaths] : [];
-  if (pathsArray.length === 0) {
-    return void 0;
-  }
-  for (const binPath of pathsArray) {
-    const binDir = path.dirname(binPath);
-    if (!(0, import_shadow.isShadowBinPath)(binDir)) {
-      return binPath;
-    }
-  }
-  return pathsArray[0];
+	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	for (const binPath of commonPaths) if (fs.existsSync(binPath)) return binPath;
+	/* c8 ignore start */
+	const allPaths = src_external_which.default.sync(binName, {
+		all: true,
+		nothrow: true
+	}) || [];
+	const pathsArray = require_primordials_array.ArrayIsArray(allPaths) ? allPaths : typeof allPaths === "string" ? [allPaths] : [];
+	if (pathsArray.length === 0) return;
+	/* c8 ignore stop */
+	for (const binPath of pathsArray) if (!require_bin_shadow.isShadowBinPath(path.dirname(binPath))) return binPath;
+	return pathsArray[0];
 }
+/**
+* Find the real npm executable, bypassing any aliases and shadow bins.
+*
+* @example
+*   ;```typescript
+*   const npmPath = findRealNpm()
+*   // e.g. '/usr/local/bin/npm'
+*   ```
+*/
 function findRealNpm() {
-  const fs = (0, import_internal.getFs)();
-  const path = (0, import_internal.getPath)();
-  const nodeDir = path.dirname(import_node_process.default.execPath);
-  const nodeDirCandidates = import_platform.WIN32 ? [path.join(nodeDir, "npm.cmd"), path.join(nodeDir, "npm")] : [path.join(nodeDir, "npm")];
-  for (const candidate of nodeDirCandidates) {
-    if (fs.existsSync(candidate)) {
-      return candidate;
-    }
-  }
-  const appdata = (0, import_windows.getAppdata)();
-  const commonPaths = import_platform.WIN32 ? [
-    appdata ? path.join(appdata, "npm", "npm.cmd") : "",
-    appdata ? path.join(appdata, "npm", "npm") : "",
-    "C:\\Program Files\\nodejs\\npm.cmd",
-    "C:\\Program Files\\nodejs\\npm"
-  ].filter(Boolean) : ["/usr/local/bin/npm", "/usr/bin/npm"];
-  const result = findRealBin("npm", commonPaths);
-  if (result && fs.existsSync(result)) {
-    return result;
-  }
-  const npmPath = (0, import_which2.whichRealSync)("npm", { nothrow: true });
-  if (npmPath && typeof npmPath === "string" && fs.existsSync(npmPath)) {
-    return npmPath;
-  }
-  return "npm";
+	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const nodeDir = path.dirname(node_process.default.execPath);
+	/* c8 ignore start */
+	const nodeDirCandidates = require_constants_platform.WIN32 ? [path.join(nodeDir, "npm.cmd"), path.join(nodeDir, "npm")] : [path.join(nodeDir, "npm")];
+	/* c8 ignore stop */
+	/* c8 ignore start */
+	for (const candidate of nodeDirCandidates) if (fs.existsSync(candidate)) return candidate;
+	const appdata = /* @__PURE__ */ require_env_windows.getAppdata();
+	const result = findRealBin("npm", require_constants_platform.WIN32 ? [
+		appdata ? path.join(appdata, "npm", "npm.cmd") : "",
+		appdata ? path.join(appdata, "npm", "npm") : "",
+		"C:\\Program Files\\nodejs\\npm.cmd",
+		"C:\\Program Files\\nodejs\\npm"
+	].filter(Boolean) : ["/usr/local/bin/npm", "/usr/bin/npm"]);
+	if (result && fs.existsSync(result)) return result;
+	/* c8 ignore stop */
+	/* c8 ignore start - Fallback paths only fire when npm isn't found
+	at any of the common platform locations above. Test runners
+	always have npm somewhere standard. */
+	const npmPath = require_bin_which.whichRealSync("npm", { nothrow: true });
+	if (npmPath && typeof npmPath === "string" && fs.existsSync(npmPath)) return npmPath;
+	return "npm";
+	/* c8 ignore stop */
 }
+/**
+* Find the real pnpm executable, bypassing any aliases and shadow bins.
+*
+* @example
+*   ;```typescript
+*   const pnpmPath = findRealPnpm()
+*   // e.g. '/usr/local/bin/pnpm'
+*   ```
+*/
 function findRealPnpm() {
-  const path = (0, import_internal.getPath)();
-  const home = (0, import_home.getHome)();
-  const appdata = (0, import_windows.getAppdata)();
-  const localappdata = (0, import_windows.getLocalappdata)();
-  const xdgDataHome = (0, import_xdg.getXdgDataHome)();
-  const commonPaths = import_platform.WIN32 ? [
-    appdata ? path.join(appdata, "npm", "pnpm.cmd") : "",
-    appdata ? path.join(appdata, "npm", "pnpm") : "",
-    localappdata ? path.join(localappdata, "pnpm", "pnpm.cmd") : "",
-    localappdata ? path.join(localappdata, "pnpm", "pnpm") : "",
-    "C:\\Program Files\\nodejs\\pnpm.cmd",
-    "C:\\Program Files\\nodejs\\pnpm"
-  ].filter(Boolean) : [
-    "/usr/local/bin/pnpm",
-    "/usr/bin/pnpm",
-    xdgDataHome ? path.join(xdgDataHome, "pnpm/pnpm") : home ? path.join(home, ".local/share/pnpm/pnpm") : "",
-    home ? path.join(home, ".pnpm/pnpm") : ""
-  ].filter(Boolean);
-  return findRealBin("pnpm", commonPaths) ?? "";
+	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const home = /* @__PURE__ */ require_env_home.getHome();
+	const appdata = /* @__PURE__ */ require_env_windows.getAppdata();
+	const localappdata = /* @__PURE__ */ require_env_windows.getLocalappdata();
+	const xdgDataHome = /* @__PURE__ */ require_env_xdg.getXdgDataHome();
+	/* c8 ignore stop */
+	return findRealBin("pnpm", require_constants_platform.WIN32 ? [
+		appdata ? path.join(appdata, "npm", "pnpm.cmd") : "",
+		appdata ? path.join(appdata, "npm", "pnpm") : "",
+		localappdata ? path.join(localappdata, "pnpm", "pnpm.cmd") : "",
+		localappdata ? path.join(localappdata, "pnpm", "pnpm") : "",
+		"C:\\Program Files\\nodejs\\pnpm.cmd",
+		"C:\\Program Files\\nodejs\\pnpm"
+	].filter(Boolean) : [
+		"/usr/local/bin/pnpm",
+		"/usr/bin/pnpm",
+		xdgDataHome ? path.join(xdgDataHome, "pnpm/pnpm") : home ? path.join(home, ".local/share/pnpm/pnpm") : "",
+		home ? path.join(home, ".pnpm/pnpm") : ""
+	].filter(Boolean)) ?? "";
 }
+/**
+* Find the real yarn executable, bypassing any aliases and shadow bins.
+*
+* @example
+*   ;```typescript
+*   const yarnPath = findRealYarn()
+*   // e.g. '/usr/local/bin/yarn'
+*   ```
+*/
 function findRealYarn() {
-  const path = (0, import_internal.getPath)();
-  const home = (0, import_home.getHome)();
-  const appdata = (0, import_windows.getAppdata)();
-  const commonPaths = import_platform.WIN32 ? [
-    appdata ? path.join(appdata, "npm", "yarn.cmd") : "",
-    appdata ? path.join(appdata, "npm", "yarn") : "",
-    home ? path.join(home, ".yarn/bin/yarn.cmd") : "",
-    home ? path.join(home, ".yarn/bin/yarn") : "",
-    "C:\\Program Files\\nodejs\\yarn.cmd",
-    "C:\\Program Files\\nodejs\\yarn"
-  ].filter(Boolean) : [
-    "/usr/local/bin/yarn",
-    "/usr/bin/yarn",
-    home ? path.join(home, ".yarn/bin/yarn") : "",
-    home ? path.join(home, ".config/yarn/global/node_modules/.bin/yarn") : ""
-  ].filter(Boolean);
-  return findRealBin("yarn", commonPaths) ?? "";
+	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const home = /* @__PURE__ */ require_env_home.getHome();
+	const appdata = /* @__PURE__ */ require_env_windows.getAppdata();
+	/* c8 ignore stop */
+	return findRealBin("yarn", require_constants_platform.WIN32 ? [
+		appdata ? path.join(appdata, "npm", "yarn.cmd") : "",
+		appdata ? path.join(appdata, "npm", "yarn") : "",
+		home ? path.join(home, ".yarn/bin/yarn.cmd") : "",
+		home ? path.join(home, ".yarn/bin/yarn") : "",
+		"C:\\Program Files\\nodejs\\yarn.cmd",
+		"C:\\Program Files\\nodejs\\yarn"
+	].filter(Boolean) : [
+		"/usr/local/bin/yarn",
+		"/usr/bin/yarn",
+		home ? path.join(home, ".yarn/bin/yarn") : "",
+		home ? path.join(home, ".config/yarn/global/node_modules/.bin/yarn") : ""
+	].filter(Boolean)) ?? "";
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  findRealBin,
-  findRealNpm,
-  findRealPnpm,
-  findRealYarn
-});
+
+//#endregion
+exports.findRealBin = findRealBin;
+exports.findRealNpm = findRealNpm;
+exports.findRealPnpm = findRealPnpm;
+exports.findRealYarn = findRealYarn;