@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/external-tools/trivy/from-download.js

@@ -1,67 +1,45 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_download_exports = {};
-__export(from_download_exports, {
-  trivyFromDownload: () => trivyFromDownload
-});
-module.exports = __toCommonJS(from_download_exports);
-var import_node_path = __toESM(require("node:path"));
-var import_node_process = __toESM(require("node:process"));
-var import_socket = require("../../paths/socket");
-var import_from_download = require("../from-download");
-var import_asset_names = require("./asset-names");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../../_virtual/_rolldown/runtime.js');
+const require_paths_socket = require('../../paths/socket.js');
+const require_external_tools_from_download = require('../from-download.js');
+const require_external_tools_trivy_asset_names = require('./asset-names.js');
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/external-tools/trivy/from-download.ts
+/**
+* @file `trivyFromDownload()` — fetches upstream Trivy and returns a
+*   `ResolvedTrivy` pointing at the extracted binary. macOS/Linux ship tar.gz,
+*   Windows ships zip; `downloadAndExtractTool` auto-detects the format from
+*   the archive name.
+*/
 async function trivyFromDownload(opts) {
-  const { cacheDir, downloader, integrity, platformArch, version } = opts;
-  const url = (0, import_asset_names.getTrivyDownloadUrl)({ version, platformArch });
-  if (!url) {
-    return void 0;
-  }
-  const entry = (0, import_asset_names.getTrivyAssetEntry)(platformArch);
-  const archiveExt = entry?.suffix.endsWith(".zip") ? ".zip" : ".tar.gz";
-  const extractedDir = cacheDir ?? import_node_path.default.join((0, import_socket.getSocketDlxDir)(), "trivy", version, platformArch);
-  const archive = await (0, import_from_download.downloadAndExtractTool)({
-    url,
-    name: `trivy-${version}-${platformArch}${archiveExt}`,
-    integrity,
-    extractedDir,
-    downloader
-  });
-  const binary = import_node_process.default.platform === "win32" ? "trivy.exe" : "trivy";
-  return {
-    path: import_node_path.default.join(extractedDir, binary),
-    source: "download",
-    integrity: archive.integrity
-  };
+	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+	const url = require_external_tools_trivy_asset_names.getTrivyDownloadUrl({
+		version,
+		platformArch
+	});
+	if (!url) return;
+	const archiveExt = require_external_tools_trivy_asset_names.getTrivyAssetEntry(platformArch)?.suffix.endsWith(".zip") ? ".zip" : ".tar.gz";
+	const extractedDir = cacheDir ?? node_path.default.join(require_paths_socket.getSocketDlxDir(), "trivy", version, platformArch);
+	const archive = await require_external_tools_from_download.downloadAndExtractTool({
+		url,
+		name: `trivy-${version}-${platformArch}${archiveExt}`,
+		integrity,
+		extractedDir,
+		downloader
+	});
+	const binary = node_process.default.platform === "win32" ? "trivy.exe" : "trivy";
+	return {
+		path: node_path.default.join(extractedDir, binary),
+		source: "download",
+		integrity: archive.integrity
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  trivyFromDownload
-});
+
+//#endregion
+exports.trivyFromDownload = trivyFromDownload;

package/dist/external-tools/trivy/from-path.js

@@ -1,40 +1,22 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_path_exports = {};
-__export(from_path_exports, {
-  trivyFromPath: () => trivyFromPath
-});
-module.exports = __toCommonJS(from_path_exports);
-var import_which = require("../../bin/which");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_bin_which = require('../../bin/which.js');
+
+//#region src/external-tools/trivy/from-path.ts
+/**
+* @file `trivyFromPath()` — looks for `trivy` on the system PATH.
+*/
 async function trivyFromPath() {
-  const onPath = await (0, import_which.which)("trivy", { nothrow: true });
-  if (typeof onPath !== "string") {
-    return void 0;
-  }
-  return {
-    path: onPath,
-    source: "path"
-  };
+	const onPath = await require_bin_which.which("trivy", { nothrow: true });
+	/* c8 ignore start - reached only when trivy is NOT on PATH. */
+	if (typeof onPath !== "string") return;
+	/* c8 ignore stop */
+	return {
+		path: onPath,
+		source: "path"
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  trivyFromPath
-});
+
+//#endregion
+exports.trivyFromPath = trivyFromPath;

package/dist/external-tools/trivy/from-vfs.js

@@ -1,47 +1,26 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_vfs_exports = {};
-__export(from_vfs_exports, {
-  TRIVY_VFS_KEY: () => TRIVY_VFS_KEY,
-  trivyFromVfs: () => trivyFromVfs
-});
-module.exports = __toCommonJS(from_vfs_exports);
-var import_vfs = require("../../smol/vfs");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_smol_vfs = require('../../smol/vfs.js');
+
+//#region src/external-tools/trivy/from-vfs.ts
+/**
+* @file `trivyFromVfs()` — extracts the Trivy binary from the smol binary's
+*   VFS. Returns `undefined` when the binary doesn't have Trivy bundled.
+*/
 const TRIVY_VFS_KEY = "trivy";
 async function trivyFromVfs() {
-  const vfs = (0, import_vfs.getSmolVfs)();
-  if (!vfs) {
-    return void 0;
-  }
-  if (!vfs.has(TRIVY_VFS_KEY)) {
-    return void 0;
-  }
-  const realPath = await vfs.extract(TRIVY_VFS_KEY);
-  return {
-    path: realPath,
-    source: "vfs"
-  };
+	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	if (!vfs) return;
+	/* c8 ignore start - smol Node binary only. */
+	if (!vfs.has("trivy")) return;
+	return {
+		path: await vfs.extract(TRIVY_VFS_KEY),
+		source: "vfs"
+	};
+	/* c8 ignore stop */
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TRIVY_VFS_KEY,
-  trivyFromVfs
-});
+
+//#endregion
+exports.TRIVY_VFS_KEY = TRIVY_VFS_KEY;
+exports.trivyFromVfs = trivyFromVfs;

package/dist/external-tools/trivy/resolve.js

@@ -1,73 +1,53 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var resolve_exports = {};
-__export(resolve_exports, {
-  cacheKey: () => cacheKey,
-  doResolveTrivy: () => doResolveTrivy,
-  resetTrivyResolution: () => resetTrivyResolution,
-  resolveTrivy: () => resolveTrivy
-});
-module.exports = __toCommonJS(resolve_exports);
-var import_from_download = require("./from-download");
-var import_from_path = require("./from-path");
-var import_from_vfs = require("./from-vfs");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_external_tools_trivy_from_download = require('./from-download.js');
+const require_external_tools_trivy_from_path = require('./from-path.js');
+const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
+
+//#region src/external-tools/trivy/resolve.ts
+/**
+* @file `resolveTrivy()` — Trivy resolution entry point. Tries each source in
+*   order:
+*
+*   1. VFS — smol binary's embedded Trivy (if packed)
+*   2. PATH — `trivy` on the system PATH
+*   3. download — upstream GitHub release archive (only when `downloadIfMissing`
+*      is passed) Returns `undefined` if all of the enabled sources miss.
+*      Memoized per option-shape.
+*/
 const resolutionCache = /* @__PURE__ */ new Map();
 function cacheKey(opts) {
-  if (!opts?.downloadIfMissing) {
-    return "local-only";
-  }
-  const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
-  const integrityKey = typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : "";
-  return `dl:${version}:${platformArch}:${integrityKey}:${cacheDir ?? ""}`;
+	if (!opts?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
 }
 async function doResolveTrivy(opts) {
-  const fromVfs = await (0, import_from_vfs.trivyFromVfs)();
-  if (fromVfs) {
-    return fromVfs;
-  }
-  const fromPath = await (0, import_from_path.trivyFromPath)();
-  if (fromPath) {
-    return fromPath;
-  }
-  if (opts?.downloadIfMissing) {
-    return (0, import_from_download.trivyFromDownload)(opts.downloadIfMissing);
-  }
-  return void 0;
+	const fromVfs = await require_external_tools_trivy_from_vfs.trivyFromVfs();
+	/* c8 ignore start - smol Node binary only. */
+	if (fromVfs) return fromVfs;
+	/* c8 ignore stop */
+	const fromPath = await require_external_tools_trivy_from_path.trivyFromPath();
+	if (fromPath) return fromPath;
+	if (opts?.downloadIfMissing) return require_external_tools_trivy_from_download.trivyFromDownload(opts.downloadIfMissing);
 }
+/* c8 ignore start - test-only escape hatch. */
 function resetTrivyResolution() {
-  resolutionCache.clear();
+	resolutionCache.clear();
 }
+/* c8 ignore stop */
 function resolveTrivy(opts) {
-  const key = cacheKey(opts);
-  let cached = resolutionCache.get(key);
-  if (!cached) {
-    cached = doResolveTrivy(opts);
-    resolutionCache.set(key, cached);
-  }
-  return cached;
+	const key = cacheKey(opts);
+	let cached = resolutionCache.get(key);
+	if (!cached) {
+		cached = doResolveTrivy(opts);
+		resolutionCache.set(key, cached);
+	}
+	return cached;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  cacheKey,
-  doResolveTrivy,
-  resetTrivyResolution,
-  resolveTrivy
-});
+
+//#endregion
+exports.cacheKey = cacheKey;
+exports.doResolveTrivy = doResolveTrivy;
+exports.resetTrivyResolution = resetTrivyResolution;
+exports.resolveTrivy = resolveTrivy;

package/dist/external-tools/trivy/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */

package/dist/external-tools/trufflehog/asset-names.js

@@ -1,72 +1,60 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var asset_names_exports = {};
-__export(asset_names_exports, {
-  TRUFFLEHOG_ASSET_MAP: () => TRUFFLEHOG_ASSET_MAP,
-  getTrufflehogAssetEntry: () => getTrufflehogAssetEntry,
-  getTrufflehogDownloadUrl: () => getTrufflehogDownloadUrl
-});
-module.exports = __toCommonJS(asset_names_exports);
-var import_object = require("../../primordials/object");
-const TRUFFLEHOG_ASSET_MAP = (0, import_object.ObjectFreeze)({
-  __proto__: null,
-  "darwin-arm64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "darwin_arm64.tar.gz"
-  }),
-  "darwin-x64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "darwin_amd64.tar.gz"
-  }),
-  "linux-arm64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "linux_arm64.tar.gz"
-  }),
-  "linux-x64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "linux_amd64.tar.gz"
-  }),
-  "win-arm64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "windows_arm64.tar.gz"
-  }),
-  "win-x64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    suffix: "windows_amd64.tar.gz"
-  })
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../primordials/object.js');
+
+//#region src/external-tools/trufflehog/asset-names.ts
+/**
+* @file Upstream TruffleHog release asset-name mapping per `platform-arch`.
+*   TruffleHog publishes a single tar.gz per platform-arch under
+*   https://github.com/trufflesecurity/trufflehog/releases/download/v<X.Y.Z>/.
+*   Asset names follow `trufflehog_<X.Y.Z>_<os>_<arch>.tar.gz`.
+*/
+const TRUFFLEHOG_ASSET_MAP = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	"darwin-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "darwin_arm64.tar.gz"
+	}),
+	"darwin-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "darwin_amd64.tar.gz"
+	}),
+	"linux-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "linux_arm64.tar.gz"
+	}),
+	"linux-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "linux_amd64.tar.gz"
+	}),
+	"win-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "windows_arm64.tar.gz"
+	}),
+	"win-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		suffix: "windows_amd64.tar.gz"
+	})
 });
 function getTrufflehogAssetEntry(platformArch) {
-  return TRUFFLEHOG_ASSET_MAP[platformArch];
+	return TRUFFLEHOG_ASSET_MAP[platformArch];
 }
+/**
+* Build the GitHub release-asset download URL for an upstream TruffleHog
+* binary. Returns `undefined` when no entry exists for the requested
+* platform-arch.
+*
+* Reference: https://github.com/trufflesecurity/trufflehog/releases.
+*/
 function getTrufflehogDownloadUrl(opts) {
-  const { platformArch, version } = opts;
-  const entry = TRUFFLEHOG_ASSET_MAP[platformArch];
-  if (!entry) {
-    return void 0;
-  }
-  return `https://github.com/trufflesecurity/trufflehog/releases/download/v${version}/trufflehog_${version}_${entry.suffix}`;
+	const { platformArch, version } = opts;
+	const entry = TRUFFLEHOG_ASSET_MAP[platformArch];
+	if (!entry) return;
+	return `https://github.com/trufflesecurity/trufflehog/releases/download/v${version}/trufflehog_${version}_${entry.suffix}`;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TRUFFLEHOG_ASSET_MAP,
-  getTrufflehogAssetEntry,
-  getTrufflehogDownloadUrl
-});
+
+//#endregion
+exports.TRUFFLEHOG_ASSET_MAP = TRUFFLEHOG_ASSET_MAP;
+exports.getTrufflehogAssetEntry = getTrufflehogAssetEntry;
+exports.getTrufflehogDownloadUrl = getTrufflehogDownloadUrl;

package/dist/external-tools/trufflehog/from-download.js

@@ -1,65 +1,47 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_download_exports = {};
-__export(from_download_exports, {
-  trufflehogFromDownload: () => trufflehogFromDownload
-});
-module.exports = __toCommonJS(from_download_exports);
-var import_node_path = __toESM(require("node:path"));
-var import_node_process = __toESM(require("node:process"));
-var import_socket = require("../../paths/socket");
-var import_from_download = require("../from-download");
-var import_asset_names = require("./asset-names");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../../_virtual/_rolldown/runtime.js');
+const require_paths_socket = require('../../paths/socket.js');
+const require_external_tools_from_download = require('../from-download.js');
+const require_external_tools_trufflehog_asset_names = require('./asset-names.js');
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/external-tools/trufflehog/from-download.ts
+/**
+* @file `trufflehogFromDownload()` — fetches upstream TruffleHog and returns a
+*   `ResolvedTrufflehog` pointing at the extracted binary. TruffleHog ships as
+*   tar.gz archives per platform; the helper extracts and locates the
+*   `trufflehog` (or `trufflehog.exe`) executable. Idempotent: re-running with
+*   the same `{version, platformArch}` after a successful first run is a cache
+*   check, no network. Trust-on-first-use: pass `integrity` from
+*   `external-tools.json` when available.
+*/
 async function trufflehogFromDownload(opts) {
-  const { cacheDir, downloader, integrity, platformArch, version } = opts;
-  const url = (0, import_asset_names.getTrufflehogDownloadUrl)({ version, platformArch });
-  if (!url) {
-    return void 0;
-  }
-  const extractedDir = cacheDir ?? import_node_path.default.join((0, import_socket.getSocketDlxDir)(), "trufflehog", version, platformArch);
-  const archive = await (0, import_from_download.downloadAndExtractTool)({
-    url,
-    name: `trufflehog-${version}-${platformArch}.tar.gz`,
-    integrity,
-    extractedDir,
-    downloader
-  });
-  const binary = import_node_process.default.platform === "win32" ? "trufflehog.exe" : "trufflehog";
-  return {
-    path: import_node_path.default.join(extractedDir, binary),
-    source: "download",
-    integrity: archive.integrity
-  };
+	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+	const url = require_external_tools_trufflehog_asset_names.getTrufflehogDownloadUrl({
+		version,
+		platformArch
+	});
+	if (!url) return;
+	const extractedDir = cacheDir ?? node_path.default.join(require_paths_socket.getSocketDlxDir(), "trufflehog", version, platformArch);
+	const archive = await require_external_tools_from_download.downloadAndExtractTool({
+		url,
+		name: `trufflehog-${version}-${platformArch}.tar.gz`,
+		integrity,
+		extractedDir,
+		downloader
+	});
+	const binary = node_process.default.platform === "win32" ? "trufflehog.exe" : "trufflehog";
+	return {
+		path: node_path.default.join(extractedDir, binary),
+		source: "download",
+		integrity: archive.integrity
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  trufflehogFromDownload
-});
+
+//#endregion
+exports.trufflehogFromDownload = trufflehogFromDownload;