@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/argv/flag-types.js

@@ -1,116 +1,99 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var flag_types_exports = {};
-__export(flag_types_exports, {
-  COMMON_FLAGS: () => COMMON_FLAGS
-});
-module.exports = __toCommonJS(flag_types_exports);
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/argv/flag-types.ts
+/**
+* Common flag definitions for parseArgs configuration. Can be spread into
+* parseArgs options for consistency.
+*/
 const COMMON_FLAGS = {
-  all: {
-    type: "boolean",
-    default: false,
-    description: "Target all files"
-  },
-  changed: {
-    type: "boolean",
-    default: false,
-    description: "Target changed files"
-  },
-  coverage: {
-    type: "boolean",
-    default: false,
-    description: "Run with coverage"
-  },
-  cover: {
-    type: "boolean",
-    default: false,
-    description: "Run with coverage (alias)"
-  },
-  debug: {
-    type: "boolean",
-    default: false,
-    description: "Enable debug output"
-  },
-  "dry-run": {
-    type: "boolean",
-    default: false,
-    description: "Perform a dry run"
-  },
-  fix: {
-    type: "boolean",
-    default: false,
-    description: "Automatically fix issues"
-  },
-  force: {
-    type: "boolean",
-    default: false,
-    description: "Force the operation"
-  },
-  help: {
-    type: "boolean",
-    default: false,
-    short: "h",
-    description: "Show help"
-  },
-  json: {
-    type: "boolean",
-    default: false,
-    description: "Output as JSON"
-  },
-  quiet: {
-    type: "boolean",
-    default: false,
-    short: "q",
-    description: "Suppress output"
-  },
-  silent: {
-    type: "boolean",
-    default: false,
-    description: "Suppress all output"
-  },
-  staged: {
-    type: "boolean",
-    default: false,
-    description: "Target staged files"
-  },
-  update: {
-    type: "boolean",
-    default: false,
-    short: "u",
-    description: "Update snapshots/deps"
-  },
-  verbose: {
-    type: "boolean",
-    default: false,
-    short: "v",
-    description: "Verbose output"
-  },
-  watch: {
-    type: "boolean",
-    default: false,
-    short: "w",
-    description: "Watch mode"
-  }
+	all: {
+		type: "boolean",
+		default: false,
+		description: "Target all files"
+	},
+	changed: {
+		type: "boolean",
+		default: false,
+		description: "Target changed files"
+	},
+	coverage: {
+		type: "boolean",
+		default: false,
+		description: "Run with coverage"
+	},
+	cover: {
+		type: "boolean",
+		default: false,
+		description: "Run with coverage (alias)"
+	},
+	debug: {
+		type: "boolean",
+		default: false,
+		description: "Enable debug output"
+	},
+	"dry-run": {
+		type: "boolean",
+		default: false,
+		description: "Perform a dry run"
+	},
+	fix: {
+		type: "boolean",
+		default: false,
+		description: "Automatically fix issues"
+	},
+	force: {
+		type: "boolean",
+		default: false,
+		description: "Force the operation"
+	},
+	help: {
+		type: "boolean",
+		default: false,
+		short: "h",
+		description: "Show help"
+	},
+	json: {
+		type: "boolean",
+		default: false,
+		description: "Output as JSON"
+	},
+	quiet: {
+		type: "boolean",
+		default: false,
+		short: "q",
+		description: "Suppress output"
+	},
+	silent: {
+		type: "boolean",
+		default: false,
+		description: "Suppress all output"
+	},
+	staged: {
+		type: "boolean",
+		default: false,
+		description: "Target staged files"
+	},
+	update: {
+		type: "boolean",
+		default: false,
+		short: "u",
+		description: "Update snapshots/deps"
+	},
+	verbose: {
+		type: "boolean",
+		default: false,
+		short: "v",
+		description: "Verbose output"
+	},
+	watch: {
+		type: "boolean",
+		default: false,
+		short: "w",
+		description: "Watch mode"
+	}
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  COMMON_FLAGS
-});
+
+//#endregion
+exports.COMMON_FLAGS = COMMON_FLAGS;

package/dist/argv/parse-args-string.d.ts

@@ -1,21 +1,23 @@
 /**
- * @file Tokenize a shell-style command string into an argv array. Modernized
- *   port of the `string-argv` npm package (MIT) — same regex-driven recognizer,
- *   native ES module shape, typed signature, no env/file prepend baggage.
- *   Supports bare tokens, single + double quoted tokens, and mixed tokens like
- *   `key="value"`. No backslash-escape processing — `\"` inside a double-quoted
- *   segment is two literal characters, not an escaped quote. No env-var
- *   expansion, no command substitution, no pipes / redirects / `&&` chains;
- *   this is purely a tokenizer. Common use case: turning a `string`
- *   representation of a command (e.g. from a config file, a `bin` field, or a
- *   shellout test fixture) into an argv array that `execFileSync` /
- *   `child_process.spawn` accepts directly — bypassing the platform shell + its
- *   quoting differences (`cmd.exe` vs `bash`).
+ * @file Tokenize a shell-style command string into an argv array. Delegates to
+ *   the vendored `shell-quote` parser and flattens its output to bare-string
+ *   tokens — operators (`&&`, `|`, `;`, …), comments (`# …`), and glob tokens
+ *   are dropped, leaving only the words a `child_process.spawn` /
+ *   `execFileSync` call would receive. Unlike `shell/parse` (which preserves
+ *   that structure), this is purpose-built for "turn a command string into
+ *   argv". Single + double quotes, backslash escapes, and `key="value"` mixed
+ *   tokens are honored per POSIX `sh`; `$VAR` references collapse to an empty
+ *   string (shell-quote resolves them against an env, and none is supplied
+ *   here). Common use case: turning a `string` representation of a command
+ *   (e.g. from a config file, a `bin` field, or a shellout test fixture) into
+ *   an argv array that `execFileSync` / `child_process.spawn` accepts directly
+ *   — bypassing the platform shell + its quoting differences (`cmd.exe` vs
+ *   `bash`).
  */
 /**
  * Tokenize a shell-style command string into argv. Single + double quote pairs
- * are recognized; the quote characters are stripped from the resulting token.
- * Whitespace outside of quotes separates tokens.
+ * are recognized and stripped; whitespace outside quotes separates tokens.
+ * Operators and comments are dropped (use `shell/parse` to keep them).
  *
  * @example
  *   parseArgsString('git commit -m "hello world"')

package/dist/argv/parse-args-string.js

@@ -1,42 +1,45 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var parse_args_string_exports = {};
-__export(parse_args_string_exports, {
-  parseArgsString: () => parseArgsString
-});
-module.exports = __toCommonJS(parse_args_string_exports);
-const TOKEN_REGEXP = /([^\s'"]([^\s'"]*(['"])([^]*?)\3)+[^\s'"]*)|[^\s'"]+|(['"])([^]*?)\5/g;
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+let src_external_shell_quote = require("../external/shell-quote");
+
+//#region src/argv/parse-args-string.ts
+/**
+* @file Tokenize a shell-style command string into an argv array. Delegates to
+*   the vendored `shell-quote` parser and flattens its output to bare-string
+*   tokens — operators (`&&`, `|`, `;`, …), comments (`# …`), and glob tokens
+*   are dropped, leaving only the words a `child_process.spawn` /
+*   `execFileSync` call would receive. Unlike `shell/parse` (which preserves
+*   that structure), this is purpose-built for "turn a command string into
+*   argv". Single + double quotes, backslash escapes, and `key="value"` mixed
+*   tokens are honored per POSIX `sh`; `$VAR` references collapse to an empty
+*   string (shell-quote resolves them against an env, and none is supplied
+*   here). Common use case: turning a `string` representation of a command
+*   (e.g. from a config file, a `bin` field, or a shellout test fixture) into
+*   an argv array that `execFileSync` / `child_process.spawn` accepts directly
+*   — bypassing the platform shell + its quoting differences (`cmd.exe` vs
+*   `bash`).
+*/
+/**
+* Tokenize a shell-style command string into argv. Single + double quote pairs
+* are recognized and stripped; whitespace outside quotes separates tokens.
+* Operators and comments are dropped (use `shell/parse` to keep them).
+*
+* @example
+*   parseArgsString('git commit -m "hello world"')
+*   // → ['git', 'commit', '-m', 'hello world']
+*
+*   parseArgsString('foo --bar="x y" baz')
+*   // → ['foo', '--bar=x y', 'baz']
+*
+*   parseArgsString("echo 'one two' three")
+*   // → ['echo', 'one two', 'three']
+*/
 function parseArgsString(cmd) {
-  const argv = [];
-  let match;
-  TOKEN_REGEXP.lastIndex = 0;
-  while ((match = TOKEN_REGEXP.exec(cmd)) !== null) {
-    const token = match[1] ?? match[6] ?? match[0];
-    if (typeof token === "string") {
-      argv.push(token);
-    }
-  }
-  return argv;
+	const argv = [];
+	for (const entry of (0, src_external_shell_quote.parse)(cmd)) if (typeof entry === "string") argv.push(entry);
+	return argv;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  parseArgsString
-});
+
+//#endregion
+exports.parseArgsString = parseArgsString;