@socketsecurity/lib 6.0.3 → 6.0.5

package/dist/versions/parse.js

@@ -1,77 +1,101 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var parse_exports = {};
-__export(parse_exports, {
-  coerceVersion: () => coerceVersion,
-  getMajorVersion: () => getMajorVersion,
-  getMinorVersion: () => getMinorVersion,
-  getPatchVersion: () => getPatchVersion,
-  isValidVersion: () => isValidVersion,
-  parseVersion: () => parseVersion
-});
-module.exports = __toCommonJS(parse_exports);
-var import_internal = require("./_internal");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_versions__internal = require('./_internal.js');
+
+//#region src/versions/parse.ts
+/**
+* @file Parsing helpers — `coerceVersion` rounds a sloppy input ("1.2") up to a
+*   valid semver triple, `parseVersion` returns `{major, minor, patch,
+*   prerelease, build}`, and the `getMajor*` / `getMinor*` / `getPatchVersion`
+*   accessors return a single component. `isValidVersion` is also here because
+*   validation is effectively "did parse succeed". All go through the vendored
+*   `semver` directly — smol-versions doesn't expose the parsed shape.
+*/
+/**
+* Coerce a version string to valid semver format.
+*
+* @example
+*   ;```typescript
+*   coerceVersion('1.2') // '1.2.0'
+*   coerceVersion('v3') // '3.0.0'
+*   coerceVersion('abc') // undefined
+*   ```
+*/
 function coerceVersion(version) {
-  const semver = (0, import_internal.getSemver)();
-  const coerced = semver.coerce(version);
-  return coerced?.version;
+	return require_versions__internal.getSemver().coerce(version)?.version;
 }
+/**
+* Get the major version number from a version string.
+*
+* @example
+*   ;```typescript
+*   getMajorVersion('3.2.1') // 3
+*   ```
+*/
 function getMajorVersion(version) {
-  const semver = (0, import_internal.getSemver)();
-  const parsed = semver.parse(version);
-  return parsed?.major;
+	return require_versions__internal.getSemver().parse(version)?.major;
 }
+/**
+* Get the minor version number from a version string.
+*
+* @example
+*   ;```typescript
+*   getMinorVersion('3.2.1') // 2
+*   ```
+*/
 function getMinorVersion(version) {
-  const semver = (0, import_internal.getSemver)();
-  const parsed = semver.parse(version);
-  return parsed?.minor;
+	return require_versions__internal.getSemver().parse(version)?.minor;
 }
+/**
+* Get the patch version number from a version string.
+*
+* @example
+*   ;```typescript
+*   getPatchVersion('3.2.1') // 1
+*   ```
+*/
 function getPatchVersion(version) {
-  const semver = (0, import_internal.getSemver)();
-  const parsed = semver.parse(version);
-  return parsed?.patch;
+	return require_versions__internal.getSemver().parse(version)?.patch;
 }
+/**
+* Validate if a string is a valid semantic version.
+*
+* @example
+*   ;```typescript
+*   isValidVersion('1.2.3') // true
+*   isValidVersion('abc') // false
+*   ```
+*/
 function isValidVersion(version) {
-  return import_internal.impl.valid(version) != null;
+	/* c8 ignore next - External semver call */
+	return require_versions__internal.impl.valid(version) != null;
 }
+/**
+* Parse a version string and return major, minor, patch components.
+*
+* @example
+*   ;```typescript
+*   parseVersion('1.2.3')
+*   // { major: 1, minor: 2, patch: 3, prerelease: [], build: [] }
+*   ```
+*/
 function parseVersion(version) {
-  const semver = (0, import_internal.getSemver)();
-  const parsed = semver.parse(version);
-  if (!parsed) {
-    return void 0;
-  }
-  return {
-    major: parsed.major,
-    minor: parsed.minor,
-    patch: parsed.patch,
-    prerelease: parsed.prerelease,
-    build: parsed.build
-  };
+	const parsed = require_versions__internal.getSemver().parse(version);
+	if (!parsed) return;
+	return {
+		major: parsed.major,
+		minor: parsed.minor,
+		patch: parsed.patch,
+		prerelease: parsed.prerelease,
+		build: parsed.build
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  coerceVersion,
-  getMajorVersion,
-  getMinorVersion,
-  getPatchVersion,
-  isValidVersion,
-  parseVersion
-});
+
+//#endregion
+exports.coerceVersion = coerceVersion;
+exports.getMajorVersion = getMajorVersion;
+exports.getMinorVersion = getMinorVersion;
+exports.getPatchVersion = getPatchVersion;
+exports.isValidVersion = isValidVersion;
+exports.parseVersion = parseVersion;

package/dist/versions/range.js

@@ -1,50 +1,67 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var range_exports = {};
-__export(range_exports, {
-  filterVersions: () => filterVersions,
-  maxVersion: () => maxVersion,
-  minVersion: () => minVersion,
-  satisfiesVersion: () => satisfiesVersion
-});
-module.exports = __toCommonJS(range_exports);
-var import_internal = require("./_internal");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_versions__internal = require('./_internal.js');
+
+//#region src/versions/range.ts
+/**
+* @file Range / set helpers — `satisfiesVersion` / `filterVersions` check
+*   membership against a semver range, `maxVersion` / `minVersion` pick the
+*   bounds of an arbitrary version array. The bound pickers use the vendored
+*   `semver` directly because the prerelease-inclusion options aren't part of
+*   the smol-versions surface.
+*/
+/**
+* Get all versions from an array that satisfy a semver range.
+*
+* @example
+*   ;```typescript
+*   filterVersions(['1.0.0', '1.5.0', '2.0.0'], '>=1.0.0 <2.0.0')
+*   // ['1.0.0', '1.5.0']
+*   ```
+*/
 function filterVersions(versions, range) {
-  return versions.filter((v) => import_internal.impl.satisfies(v, range));
+	/* c8 ignore next - External semver call */
+	return versions.filter((v) => require_versions__internal.impl.satisfies(v, range));
 }
+/**
+* Get the highest version from an array of versions.
+*
+* @example
+*   ;```typescript
+*   maxVersion(['1.0.0', '2.0.0', '1.5.0']) // '2.0.0'
+*   ```
+*/
 function maxVersion(versions) {
-  const semver = (0, import_internal.getSemver)();
-  return semver.maxSatisfying(versions, "*", { includePrerelease: true }) || void 0;
+	return require_versions__internal.getSemver().maxSatisfying(versions, "*", { includePrerelease: true }) || void 0;
 }
+/**
+* Get the lowest version from an array of versions.
+*
+* @example
+*   ;```typescript
+*   minVersion(['1.0.0', '2.0.0', '1.5.0']) // '1.0.0'
+*   ```
+*/
 function minVersion(versions) {
-  const semver = (0, import_internal.getSemver)();
-  return semver.minSatisfying(versions, "*", { includePrerelease: true }) || void 0;
+	return require_versions__internal.getSemver().minSatisfying(versions, "*", { includePrerelease: true }) || void 0;
 }
+/**
+* Check if a version satisfies a semver range.
+*
+* @example
+*   ;```typescript
+*   satisfiesVersion('1.5.0', '>=1.0.0 <2.0.0') // true
+*   satisfiesVersion('3.0.0', '>=1.0.0 <2.0.0') // false
+*   ```
+*/
 function satisfiesVersion(version, range) {
-  return import_internal.impl.satisfies(version, range);
+	/* c8 ignore next - External semver call */
+	return require_versions__internal.impl.satisfies(version, range);
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  filterVersions,
-  maxVersion,
-  minVersion,
-  satisfiesVersion
-});
+
+//#endregion
+exports.filterVersions = filterVersions;
+exports.maxVersion = maxVersion;
+exports.minVersion = minVersion;
+exports.satisfiesVersion = satisfiesVersion;

package/dist/versions/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */

package/dist/words/article.js

@@ -1,33 +1,25 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var article_exports = {};
-__export(article_exports, {
-  determineArticle: () => determineArticle
-});
-module.exports = __toCommonJS(article_exports);
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/words/article.ts
+/**
+* @file Indefinite-article picker — `determineArticle()` returns `'a'` or
+*   `'an'` based on the leading vowel of a word.
+*/
+/**
+* Determine the appropriate article (a/an) for a word.
+*
+* @example
+*   ;```typescript
+*   determineArticle('apple') // 'an'
+*   determineArticle('banana') // 'a'
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function determineArticle(word) {
-  return /^[aeiou]/i.test(word) ? "an" : "a";
+	return /^[aeiou]/i.test(word) ? "an" : "a";
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  determineArticle
-});
+
+//#endregion
+exports.determineArticle = determineArticle;

package/dist/words/capitalize.js

@@ -1,37 +1,28 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var capitalize_exports = {};
-__export(capitalize_exports, {
-  capitalize: () => capitalize
-});
-module.exports = __toCommonJS(capitalize_exports);
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/words/capitalize.ts
+/**
+* @file Word-case helpers — `capitalize()` produces an upper-first / lower-rest
+*   variant that iterates by code point so surrogate pairs aren't split.
+*/
+/**
+* Capitalize the first letter of a word.
+*
+* @example
+*   ;```typescript
+*   capitalize('hello') // 'Hello'
+*   capitalize('WORLD') // 'World'
+*   capitalize('') // ''
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function capitalize(word) {
-  if (word.length === 0) {
-    return word;
-  }
-  const [first, ...rest] = [...word];
-  return (first ?? "").toUpperCase() + rest.join("").toLowerCase();
+	if (word.length === 0) return word;
+	const [first, ...rest] = [...word];
+	return (first ?? "").toUpperCase() + rest.join("").toLowerCase();
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  capitalize
-});
+
+//#endregion
+exports.capitalize = capitalize;

package/dist/words/pluralize.js

@@ -1,34 +1,26 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var pluralize_exports = {};
-__export(pluralize_exports, {
-  pluralize: () => pluralize
-});
-module.exports = __toCommonJS(pluralize_exports);
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/words/pluralize.ts
+/**
+* Pluralize a word based on count.
+*
+* @example
+*   ;```typescript
+*   pluralize('file') // 'file'
+*   pluralize('file', { count: 3 }) // 'files'
+*   pluralize('file', { count: 0 }) // 'files'
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function pluralize(word, options) {
-  const { count = 1 } = { __proto__: null, ...options };
-  return count === 1 ? word : `${word}s`;
+	const { count = 1 } = {
+		__proto__: null,
+		...options
+	};
+	return count === 1 ? word : `${word}s`;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  pluralize
-});
+
+//#endregion
+exports.pluralize = pluralize;

package/dist/words/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "6.0.3",
+  "version": "6.0.5",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
     "Socket.dev",
@@ -2350,6 +2350,16 @@
       "types": "./dist/shadow/types.d.ts",
       "default": "./dist/shadow/types.js"
     },
+    "./shell/parse": {
+      "source": "./src/shell/parse.ts",
+      "types": "./dist/shell/parse.d.ts",
+      "default": "./dist/shell/parse.js"
+    },
+    "./shell/quote": {
+      "source": "./src/shell/quote.ts",
+      "types": "./dist/shell/quote.d.ts",
+      "default": "./dist/shell/quote.js"
+    },
     "./smol/detect": {
       "source": "./src/smol/detect.ts",
       "types": "./dist/smol/detect.d.ts",
@@ -2794,8 +2804,8 @@
     "@socketregistry/packageurl-js": "npm:@socketregistry/packageurl-js@1.4.2",
     "@socketregistry/packageurl-js-stable": "npm:@socketregistry/packageurl-js@1.4.2",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.1",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.1",
+    "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.4",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.4",
     "@socketsecurity/sdk": "npm:@socketsecurity/sdk@4.0.1",
     "@socketsecurity/sdk-stable": "npm:@socketsecurity/sdk@4.0.1",
     "@types/node": "24.9.2",
@@ -2808,7 +2818,6 @@
     "debug": "4.4.3",
     "del": "8.0.1",
     "ecc-agentshield": "1.4.0",
-    "esbuild": "0.25.11",
     "fast-glob": "3.3.3",
     "fast-sort": "3.4.1",
     "get-east-asian-width": "1.3.0",
@@ -2828,7 +2837,9 @@
     "pacote": "21.5.0",
     "picomatch": "4.0.4",
     "pony-cause": "2.1.11",
+    "rolldown": "1.0.2",
     "semver": "7.7.2",
+    "shell-quote": "1.8.4",
     "signal-exit": "4.1.0",
     "spdx-correct": "3.2.0",
     "spdx-expression-parse": "4.0.0",
@@ -2857,7 +2868,8 @@
   },
   "engines": {
     "node": ">=22",
-    "pnpm": ">=11.3.0"
+    "npm": ">=11.16.0",
+    "pnpm": ">=11.4.0"
   },
   "scripts": {
     "build": "node scripts/build/cli.mts",