@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/ai/profiles.js

@@ -1,61 +1,97 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var profiles_exports = {};
-__export(profiles_exports, {
-  EDIT_ONLY_PROFILE: () => EDIT_ONLY_PROFILE,
-  FULL_FIX_PROFILE: () => FULL_FIX_PROFILE,
-  READ_ONLY_PROFILE: () => READ_ONLY_PROFILE
-});
-module.exports = __toCommonJS(profiles_exports);
-const READ_ONLY_PROFILE = {
-  allow: [],
-  disallow: ["Bash", "Edit", "MultiEdit", "Write"],
-  permissionMode: "dontAsk",
-  tools: ["Glob", "Grep", "Read", "WebFetch", "WebSearch"]
-};
-const EDIT_ONLY_PROFILE = {
-  allow: [],
-  disallow: ["Bash", "WebFetch", "WebSearch"],
-  permissionMode: "acceptEdits",
-  tools: ["Edit", "Glob", "Grep", "MultiEdit", "Read", "Write"]
-};
-const FULL_FIX_PROFILE = {
-  allow: [
-    "Bash(git status:*)",
-    "Bash(git diff:*)",
-    "Bash(git log:*)",
-    "Bash(git add:*)",
-    "Bash(git commit:*)",
-    "Bash(node:*)",
-    "Bash(pnpm exec:*)",
-    "Bash(pnpm run:*)",
-    "Bash(pnpm test:*)"
-  ],
-  disallow: ["WebFetch", "WebSearch"],
-  permissionMode: "acceptEdits",
-  tools: ["Bash", "Edit", "Glob", "Grep", "MultiEdit", "Read", "Write"]
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/ai/profiles.mts
+/**
+* Capability ladder of lockdown profiles, ordered least → most capable. Key
+* order documents the ladder; each tier is a strict superset of the previous
+* tier's tool surface.
+*/
+const AI_PROFILE = {
+	read: {
+		allow: [],
+		disallow: [
+			"Agent",
+			"Bash",
+			"Edit",
+			"MultiEdit",
+			"Write"
+		],
+		permissionMode: "dontAsk",
+		tools: [
+			"Glob",
+			"Grep",
+			"Read",
+			"WebFetch",
+			"WebSearch"
+		]
+	},
+	edit: {
+		allow: [],
+		disallow: [
+			"Agent",
+			"Bash",
+			"MultiEdit",
+			"WebFetch",
+			"WebSearch",
+			"Write"
+		],
+		permissionMode: "acceptEdits",
+		tools: [
+			"Edit",
+			"Glob",
+			"Grep",
+			"Read"
+		]
+	},
+	create: {
+		allow: [],
+		disallow: [
+			"Agent",
+			"Bash",
+			"WebFetch",
+			"WebSearch"
+		],
+		permissionMode: "acceptEdits",
+		tools: [
+			"Edit",
+			"Glob",
+			"Grep",
+			"MultiEdit",
+			"Read",
+			"Write"
+		]
+	},
+	full: {
+		allow: [
+			"Bash(git status:*)",
+			"Bash(git diff:*)",
+			"Bash(git log:*)",
+			"Bash(git add:*)",
+			"Bash(git commit:*)",
+			"Bash(node:*)",
+			"Bash(pnpm exec:*)",
+			"Bash(pnpm run:*)",
+			"Bash(pnpm test:*)"
+		],
+		disallow: [
+			"Agent",
+			"WebFetch",
+			"WebSearch"
+		],
+		permissionMode: "acceptEdits",
+		tools: [
+			"Bash",
+			"Edit",
+			"Glob",
+			"Grep",
+			"MultiEdit",
+			"Read",
+			"Write"
+		]
+	}
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  EDIT_ONLY_PROFILE,
-  FULL_FIX_PROFILE,
-  READ_ONLY_PROFILE
-});
+
+//#endregion
+exports.AI_PROFILE = AI_PROFILE;

package/dist/ai/spawn.d.mts

@@ -30,11 +30,11 @@ export declare function pickAgent(requested: AiAgentName | undefined, cwd: strin
  *
  * @example
  *   ```ts
- *   import { EDIT_ONLY_PROFILE } from '@socketsecurity/lib/ai/profiles'
+ *   import { AI_PROFILE } from '@socketsecurity/lib/ai/profiles'
  *   import { spawnAiAgent } from '@socketsecurity/lib/ai/spawn'
  *
  *   const result = await spawnAiAgent({
- *   ...EDIT_ONLY_PROFILE,
+ *   ...AI_PROFILE.edit,
  *   prompt: 'Fix the lint findings in src/foo.ts',
  *   cwd: process.cwd(),
  *   model: 'claude-sonnet-4-6',

package/dist/ai/spawn.js

@@ -1,207 +1,185 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var spawn_exports = {};
-__export(spawn_exports, {
-  backoffFor: () => backoffFor,
-  buildArgs: () => buildArgs,
-  isOverloaded: () => isOverloaded,
-  pickAgent: () => pickAgent,
-  spawnAiAgent: () => spawnAiAgent
-});
-module.exports = __toCommonJS(spawn_exports);
-var import_message = require("../errors/message");
-var import_object = require("../primordials/object");
-var import_child = require("../process/spawn/child");
-var import_errors = require("../process/spawn/errors");
-var import_discover = require("./discover");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../primordials/object.js');
+const require_errors_message = require('../errors/message.js');
+const require_ai_discover = require('./discover.js');
+const require_process_spawn_errors = require('../process/spawn/errors.js');
+const require_process_spawn_child = require('../process/spawn/child.js');
+
+//#region src/ai/spawn.mts
+/**
+* @file Locked-down spawn for AI agent CLIs (Claude / Codex / Gemini /
+*   OpenCode). Per the CLAUDE.md "Programmatic Claude calls" rule: every
+*   headless invocation MUST set the four lockdown flags (tools / disallow /
+*   permissionMode / no-session-persistence). The helper enforces this at the
+*   type level (`SpawnAiAgentOptions` requires the relevant fields) AND at the
+*   spawn site (per-agent flag translator). Why CLI subprocess instead of an
+*   SDK call: the fleet's contract matches what the local user sees when
+*   invoking the CLI — same auth config, same model availability, same tool
+*   permissions. SDK calls would diverge on auth handling and force per-agent
+*   SDK installs. Retry: 3 attempts on overload (HTTP 529 / "Overloaded"), exp.
+*   backoff (5s / 15s / 45s). Each retry is a fresh subprocess.
+*/
 const MAX_ATTEMPTS = 3;
 const BACKOFF_BASE_MS = 5e3;
 function backoffFor(attempt) {
-  return BACKOFF_BASE_MS * 3 ** (attempt - 1);
+	return BACKOFF_BASE_MS * 3 ** (attempt - 1);
 }
+/**
+* Build CLI arg list for a given agent. The flag names differ across agents but
+* the conceptual surface is the same: "here are the allowed tools, here are the
+* denied tools, here is the permission mode, do not persist a session." This
+* translator is the single source of truth for how each agent's flags map.
+*
+* Update sites (when an agent changes its flag surface): 1. The relevant case
+* below. 2. The agent's docs link (cited inline).
+*/
 function buildArgs(agent, opts) {
-  const allAllowed = [...opts.tools, ...opts.allow ?? []];
-  switch (agent) {
-    case "claude": {
-      const args = [
-        "--print",
-        "--no-session-persistence",
-        "--permission-mode",
-        opts.permissionMode,
-        "--add-dir",
-        opts.cwd
-      ];
-      for (const dir of opts.addDirs ?? []) {
-        args.push("--add-dir", dir);
-      }
-      if (opts.model) {
-        args.push("--model", opts.model);
-      }
-      if (allAllowed.length > 0) {
-        args.push("--allowedTools", ...allAllowed);
-      }
-      if (opts.disallow.length > 0) {
-        args.push("--disallowedTools", ...opts.disallow);
-      }
-      if (opts.extraArgs) {
-        args.push(...opts.extraArgs);
-      }
-      return args;
-    }
-    case "codex": {
-      const args = ["--print"];
-      if (opts.permissionMode === "plan") {
-        args.push("--read-only");
-      }
-      if (opts.model) {
-        args.push("--model", opts.model);
-      }
-      if (allAllowed.length > 0) {
-        args.push("--tools", allAllowed.join(","));
-      }
-      if (opts.disallow.length > 0) {
-        args.push("--disallow-tools", opts.disallow.join(","));
-      }
-      args.push("--cwd", opts.cwd);
-      if (opts.extraArgs) {
-        args.push(...opts.extraArgs);
-      }
-      return args;
-    }
-    case "gemini": {
-      const args = ["--no-interactive", "--workspace", opts.cwd];
-      if (opts.model) {
-        args.push("--model", opts.model);
-      }
-      if (allAllowed.length > 0) {
-        args.push("--allowed-tools", allAllowed.join(","));
-      }
-      if (opts.disallow.length > 0) {
-        args.push("--denied-tools", opts.disallow.join(","));
-      }
-      if (opts.permissionMode === "plan") {
-        args.push("--read-only");
-      }
-      if (opts.extraArgs) {
-        args.push(...opts.extraArgs);
-      }
-      return args;
-    }
-    case "opencode": {
-      const args = ["--print", "--cwd", opts.cwd];
-      if (opts.model) {
-        args.push("--model", opts.model);
-      }
-      if (allAllowed.length > 0) {
-        args.push("--tools", allAllowed.join(","));
-      }
-      if (opts.disallow.length > 0) {
-        args.push("--no-tools", opts.disallow.join(","));
-      }
-      if (opts.extraArgs) {
-        args.push(...opts.extraArgs);
-      }
-      return args;
-    }
-  }
+	const allAllowed = [...opts.tools, ...opts.allow ?? []];
+	switch (agent) {
+		case "claude": {
+			const args = [
+				"--print",
+				"--no-session-persistence",
+				"--permission-mode",
+				opts.permissionMode,
+				"--add-dir",
+				opts.cwd
+			];
+			for (const dir of opts.addDirs ?? []) args.push("--add-dir", dir);
+			if (opts.model) args.push("--model", opts.model);
+			if (allAllowed.length > 0) args.push("--allowedTools", ...allAllowed);
+			if (opts.disallow.length > 0) args.push("--disallowedTools", ...opts.disallow);
+			if (opts.extraArgs) args.push(...opts.extraArgs);
+			return args;
+		}
+		case "codex": {
+			const args = ["--print"];
+			if (opts.permissionMode === "plan") args.push("--read-only");
+			if (opts.model) args.push("--model", opts.model);
+			if (allAllowed.length > 0) args.push("--tools", allAllowed.join(","));
+			if (opts.disallow.length > 0) args.push("--disallow-tools", opts.disallow.join(","));
+			args.push("--cwd", opts.cwd);
+			if (opts.extraArgs) args.push(...opts.extraArgs);
+			return args;
+		}
+		case "gemini": {
+			const args = [
+				"--no-interactive",
+				"--workspace",
+				opts.cwd
+			];
+			if (opts.model) args.push("--model", opts.model);
+			if (allAllowed.length > 0) args.push("--allowed-tools", allAllowed.join(","));
+			if (opts.disallow.length > 0) args.push("--denied-tools", opts.disallow.join(","));
+			if (opts.permissionMode === "plan") args.push("--read-only");
+			if (opts.extraArgs) args.push(...opts.extraArgs);
+			return args;
+		}
+		case "opencode": {
+			const args = [
+				"--print",
+				"--cwd",
+				opts.cwd
+			];
+			if (opts.model) args.push("--model", opts.model);
+			if (allAllowed.length > 0) args.push("--tools", allAllowed.join(","));
+			if (opts.disallow.length > 0) args.push("--no-tools", opts.disallow.join(","));
+			if (opts.extraArgs) args.push(...opts.extraArgs);
+			return args;
+		}
+	}
 }
 function isOverloaded(stdout, stderr) {
-  const re = /API Error: 529|Overloaded/i;
-  return re.test(stdout) || re.test(stderr);
+	const re = /API Error: 529|Overloaded/i;
+	return re.test(stdout) || re.test(stderr);
 }
 async function pickAgent(requested, cwd) {
-  const discovered = await (0, import_discover.discoverAiAgents)({ repoRoot: cwd });
-  if (requested) {
-    if (!(requested in discovered)) {
-      throw new Error(
-        `spawnAiAgent: requested agent "${requested}" is not on PATH. Install the CLI or pass a different agent. Discovered: ${(0, import_object.ObjectKeys)(discovered).join(", ") || "(none)"}`
-      );
-    }
-    return requested;
-  }
-  if ("claude" in discovered) {
-    return "claude";
-  }
-  for (const candidate of ["codex", "opencode", "gemini"]) {
-    if (candidate in discovered) {
-      return candidate;
-    }
-  }
-  throw new Error(
-    "spawnAiAgent: no AI agent CLI on PATH. Install one of: claude, codex, opencode, gemini."
-  );
+	const discovered = await require_ai_discover.discoverAiAgents({ repoRoot: cwd });
+	if (requested) {
+		if (!(requested in discovered)) throw new Error(`spawnAiAgent: requested agent "${requested}" is not on PATH. Install the CLI or pass a different agent. Discovered: ${require_primordials_object.ObjectKeys(discovered).join(", ") || "(none)"}`);
+		return requested;
+	}
+	if ("claude" in discovered) return "claude";
+	for (const candidate of [
+		"codex",
+		"opencode",
+		"gemini"
+	]) if (candidate in discovered) return candidate;
+	throw new Error("spawnAiAgent: no AI agent CLI on PATH. Install one of: claude, codex, opencode, gemini.");
 }
+/**
+* Spawn an AI agent CLI subprocess with the locked-down flag set.
+*
+* @example
+*   ```ts
+*   import { AI_PROFILE } from '@socketsecurity/lib/ai/profiles'
+*   import { spawnAiAgent } from '@socketsecurity/lib/ai/spawn'
+*
+*   const result = await spawnAiAgent({
+*   ...AI_PROFILE.edit,
+*   prompt: 'Fix the lint findings in src/foo.ts',
+*   cwd: process.cwd(),
+*   model: 'claude-sonnet-4-6',
+*   timeoutMs: 5 * 60 * 1000,
+*   })
+*   if (result.exitCode !== 0) { ... }
+*   ```
+*
+*   Throws when the requested agent isn't on PATH (or, when no agent
+*   is requested, when none of the known agents are on PATH).
+*/
 async function spawnAiAgent(opts) {
-  const agent = await pickAgent(opts.agent, opts.cwd);
-  const args = buildArgs(agent, opts);
-  let stdout = "";
-  let stderr = "";
-  let exitCode = 0;
-  let attempts = 0;
-  const start = Date.now();
-  while (attempts < MAX_ATTEMPTS) {
-    attempts += 1;
-    stdout = "";
-    stderr = "";
-    exitCode = 0;
-    try {
-      const child = (0, import_child.spawn)(agent, args, {
-        cwd: opts.cwd,
-        stdio: "pipe",
-        stdioString: true,
-        timeout: opts.timeoutMs
-      });
-      child.stdin?.end(opts.prompt);
-      const result = await child;
-      stdout = String(result.stdout ?? "");
-      stderr = String(result.stderr ?? "");
-      exitCode = result.code ?? 0;
-    } catch (e) {
-      if ((0, import_errors.isSpawnError)(e)) {
-        stdout = String(e.stdout ?? "");
-        stderr = String(e.stderr ?? "");
-        exitCode = e.code ?? 1;
-      } else {
-        stderr = (0, import_message.errorMessage)(e);
-        exitCode = 1;
-      }
-    }
-    if (!isOverloaded(stdout, stderr) || attempts >= MAX_ATTEMPTS) {
-      break;
-    }
-    await new Promise((resolve) => setTimeout(resolve, backoffFor(attempts)));
-  }
-  return {
-    attempts,
-    durationMs: Date.now() - start,
-    exitCode,
-    stderr,
-    stdout
-  };
+	const agent = await pickAgent(opts.agent, opts.cwd);
+	const args = buildArgs(agent, opts);
+	let stdout = "";
+	let stderr = "";
+	let exitCode = 0;
+	let attempts = 0;
+	const start = Date.now();
+	while (attempts < MAX_ATTEMPTS) {
+		attempts += 1;
+		stdout = "";
+		stderr = "";
+		exitCode = 0;
+		try {
+			const child = require_process_spawn_child.spawn(agent, args, {
+				cwd: opts.cwd,
+				stdio: "pipe",
+				stdioString: true,
+				timeout: opts.timeoutMs
+			});
+			child.stdin?.end(opts.prompt);
+			const result = await child;
+			stdout = String(result.stdout ?? "");
+			stderr = String(result.stderr ?? "");
+			exitCode = result.code ?? 0;
+		} catch (e) {
+			if (/* @__PURE__ */ require_process_spawn_errors.isSpawnError(e)) {
+				stdout = String(e.stdout ?? "");
+				stderr = String(e.stderr ?? "");
+				exitCode = e.code ?? 1;
+			} else {
+				stderr = require_errors_message.errorMessage(e);
+				exitCode = 1;
+			}
+		}
+		if (!isOverloaded(stdout, stderr) || attempts >= MAX_ATTEMPTS) break;
+		await new Promise((resolve) => setTimeout(resolve, backoffFor(attempts)));
+	}
+	return {
+		attempts,
+		durationMs: Date.now() - start,
+		exitCode,
+		stderr,
+		stdout
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  backoffFor,
-  buildArgs,
-  isOverloaded,
-  pickAgent,
-  spawnAiAgent
-});
+
+//#endregion
+exports.backoffFor = backoffFor;
+exports.buildArgs = buildArgs;
+exports.isOverloaded = isOverloaded;
+exports.pickAgent = pickAgent;
+exports.spawnAiAgent = spawnAiAgent;

package/dist/ai/types.d.mts

@@ -42,9 +42,9 @@ export interface AgentSpawnResult {
  *
  * Required: `prompt`, `cwd`, `tools`, `disallow`, `permissionMode`.
  *
- * Pre-built profiles in `profiles.ts` cover the common shapes
- * (READ_ONLY_PROFILE, EDIT_ONLY_PROFILE) — callers spread the profile and
- * override per-call (model, timeout, addDirs).
+ * Pre-built profiles in `profiles.ts` cover the common shapes (the `AI_PROFILE`
+ * capability ladder) — callers spread a tier and override per-call (model,
+ * timeout, addDirs).
  *
  * Why the lockdown fields are required (not defaulted to a permissive shape):
  * the CLAUDE.md rule says "all four lockdown flags MUST be set on every spawn."

package/dist/ai/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */

package/dist/ai/worktree.d.mts

@@ -77,14 +77,14 @@ export declare function runOne<I, T>(item: I, index: number, worktreeBranch: str
  *   ;```ts
  *   import { spawnAiAgentsInWorktrees } from '@socketsecurity/lib/ai/worktree'
  *   import { spawnAiAgent } from '@socketsecurity/lib/ai/spawn'
- *   import { EDIT_ONLY_PROFILE } from '@socketsecurity/lib/ai/profiles'
+ *   import { AI_PROFILE } from '@socketsecurity/lib/ai/profiles'
  *
  *   const repos = ['socket-addon', 'socket-btm', 'socket-lib']
  *   const settled = await spawnAiAgentsInWorktrees(
  *     repos,
  *     async ({ cwd }) => {
  *       return await spawnAiAgent({
- *         ...EDIT_ONLY_PROFILE,
+ *         ...AI_PROFILE.create,
  *         prompt: 'Run the cleanup task',
  *         cwd,
  *       })