@socketsecurity/lib 6.0.3 → 6.0.5

package/dist/external-tools/cdxgen/resolve.js

@@ -1,73 +1,58 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var resolve_exports = {};
-__export(resolve_exports, {
-  cacheKey: () => cacheKey,
-  doResolveCdxgen: () => doResolveCdxgen,
-  resetCdxgenResolution: () => resetCdxgenResolution,
-  resolveCdxgen: () => resolveCdxgen
-});
-module.exports = __toCommonJS(resolve_exports);
-var import_from_download = require("./from-download");
-var import_from_path = require("./from-path");
-var import_from_vfs = require("./from-vfs");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_external_tools_cdxgen_from_download = require('./from-download.js');
+const require_external_tools_cdxgen_from_path = require('./from-path.js');
+const require_external_tools_cdxgen_from_vfs = require('./from-vfs.js');
+
+//#region src/external-tools/cdxgen/resolve.ts
+/**
+* @file `resolveCdxgen()` — cdxgen resolution entry point. Tries each source in
+*   order:
+*
+*   1. VFS — smol binary's embedded cdxgen (if packed)
+*   2. PATH — `cdxgen` on the system PATH
+*   3. download — upstream SEA binary from the GitHub release (slim by default;
+*      pass `variant: 'full'` for the bun+deno-bundled flavor) Single source of
+*      truth: SEA binary only. No npm-package fallback — every fleet
+*      platform-arch is covered by the SEA matrix, and routing through npm
+*      would split the install surface in two for no benefit. Returns
+*      `undefined` if all of the enabled sources miss. Memoized per
+*      option-shape.
+*/
 const resolutionCache = /* @__PURE__ */ new Map();
 function cacheKey(opts) {
-  if (!opts?.downloadIfMissing) {
-    return "local-only";
-  }
-  const { cacheDir, integrity, platformArch, variant, version } = opts.downloadIfMissing;
-  const integrityKey = typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : "";
-  return `dl:${version}:${platformArch}:${variant ?? "slim"}:${integrityKey}:${cacheDir ?? ""}`;
+	if (!opts?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, variant, version } = opts.downloadIfMissing;
+	const integrityKey = typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : "";
+	return `dl:${version}:${platformArch}:${variant ?? "slim"}:${integrityKey}:${cacheDir ?? ""}`;
 }
 async function doResolveCdxgen(opts) {
-  const fromVfs = await (0, import_from_vfs.cdxgenFromVfs)();
-  if (fromVfs) {
-    return fromVfs;
-  }
-  const fromPath = await (0, import_from_path.cdxgenFromPath)();
-  if (fromPath) {
-    return fromPath;
-  }
-  if (opts?.downloadIfMissing) {
-    return (0, import_from_download.cdxgenFromDownload)(opts.downloadIfMissing);
-  }
-  return void 0;
+	const fromVfs = await require_external_tools_cdxgen_from_vfs.cdxgenFromVfs();
+	/* c8 ignore start - smol Node binary only. */
+	if (fromVfs) return fromVfs;
+	/* c8 ignore stop */
+	const fromPath = await require_external_tools_cdxgen_from_path.cdxgenFromPath();
+	if (fromPath) return fromPath;
+	if (opts?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(opts.downloadIfMissing);
 }
+/* c8 ignore start - test-only escape hatch. */
 function resetCdxgenResolution() {
-  resolutionCache.clear();
+	resolutionCache.clear();
 }
+/* c8 ignore stop */
 function resolveCdxgen(opts) {
-  const key = cacheKey(opts);
-  let cached = resolutionCache.get(key);
-  if (!cached) {
-    cached = doResolveCdxgen(opts);
-    resolutionCache.set(key, cached);
-  }
-  return cached;
+	const key = cacheKey(opts);
+	let cached = resolutionCache.get(key);
+	if (!cached) {
+		cached = doResolveCdxgen(opts);
+		resolutionCache.set(key, cached);
+	}
+	return cached;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  cacheKey,
-  doResolveCdxgen,
-  resetCdxgenResolution,
-  resolveCdxgen
-});
+
+//#endregion
+exports.cacheKey = cacheKey;
+exports.doResolveCdxgen = doResolveCdxgen;
+exports.resetCdxgenResolution = resetCdxgenResolution;
+exports.resolveCdxgen = resolveCdxgen;

package/dist/external-tools/cdxgen/types.js

@@ -1,18 +1,2 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var types_exports = {};
-module.exports = __toCommonJS(types_exports);
+/* Socket Lib - Built with rolldown */

package/dist/external-tools/from-download.js

@@ -1,72 +1,112 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_download_exports = {};
-__export(from_download_exports, {
-  downloadAndExtractTool: () => downloadAndExtractTool,
-  downloadToolArchive: () => downloadToolArchive
-});
-module.exports = __toCommonJS(from_download_exports);
-var import_node_fs = require("node:fs");
-var import_node_fs2 = require("node:fs");
-var import_extract = require("../archives/extract");
-var import_safe = require("../fs/safe");
-var import_binary_download = require("../dlx/binary-download");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_fs_safe = require('../fs/safe.js');
+const require_archives_extract = require('../archives/extract.js');
+const require_dlx_binary_download = require('../dlx/binary-download.js');
+let node_fs = require("node:fs");
+
+//#region src/external-tools/from-download.ts
+/**
+* @file Generic "download tier" for external-tools resolvers. The per-tool
+*   resolvers (jre, bazel, sbt) each have local-discovery tiers — VFS, env-var
+*   pointer, system PATH. This module adds two helpers covering the fourth
+*   tier:
+*
+*   - `downloadToolArchive` — fetch the archive into the dlx cache, return the
+*     path + computed integrity. Stops at "bytes on disk."
+*   - `downloadAndExtractTool` — chains `downloadToolArchive` into
+*     `archives.extractArchive`. Returns the extracted directory path plus the
+*     integrity. Idempotent: skips extraction when the output directory already
+*     has content. What this does NOT do:
+*   - Pick the URL. Adoptium / Bazel-mirror / Maven URL construction is
+*     consumer-specific; these helpers take a URL and run with it.
+*   - Build a `Resolved*` record. The caller knows the per-tool layout (which
+*     subdirectory holds the executable) and constructs the final `ResolvedJre`
+*     / `ResolvedBazel` / `ResolvedSbt`. Trust-on-first-use:
+*   - First call with no `integrity`: downloads, returns the computed
+*     sha512-<base64> in the result. Caller writes it back to
+*     `external-tools.json` (or wherever the pin lives).
+*   - Subsequent calls with `integrity` set: downloads, verifies against the pin,
+*     returns the same value. Customization:
+*   - `downloader?` lets tests inject a fake fetch, and gives fleet consumers an
+*     escape hatch for alternate cache backends, retry logic, or progress
+*     reporters.
+*/
+/**
+* Download an archive (with integrity verification) and extract it into
+* `extractedDir`. Idempotent: if `extractedDir` already exists and is
+* non-empty, extraction is skipped — the helper still downloads (or cache-hits)
+* the archive so the integrity is surfaced consistently.
+*
+* @example
+*   ;```typescript
+*   const { extractedDir, integrity } = await downloadAndExtractTool({
+*     url: 'https://example.com/jre-21-darwin-arm64.tar.gz',
+*     name: 'jre-21-darwin-arm64',
+*     extractedDir: '/Users/me/.cache/socket/jre/21/darwin-arm64',
+*     extractOptions: { strip: 1 },
+*   })
+*   // Caller constructs ResolvedJre from extractedDir.
+*   ```
+*/
 async function downloadAndExtractTool(opts) {
-  const archive = await downloadToolArchive(opts);
-  const { extractOptions, extractedDir } = opts;
-  let extracted = false;
-  if ((0, import_node_fs.existsSync)(extractedDir)) {
-    const entries = await import_node_fs2.promises.readdir(extractedDir);
-    if (entries.length === 0) {
-      await (0, import_extract.extractArchive)(archive.archivePath, extractedDir, extractOptions);
-      extracted = true;
-    }
-  } else {
-    await (0, import_safe.safeMkdir)(extractedDir);
-    await (0, import_extract.extractArchive)(archive.archivePath, extractedDir, extractOptions);
-    extracted = true;
-  }
-  return {
-    ...archive,
-    extractedDir,
-    extracted
-  };
+	const archive = await downloadToolArchive(opts);
+	const { extractOptions, extractedDir } = opts;
+	let extracted = false;
+	if ((0, node_fs.existsSync)(extractedDir)) {
+		if ((await node_fs.promises.readdir(extractedDir)).length === 0) {
+			await require_archives_extract.extractArchive(archive.archivePath, extractedDir, extractOptions);
+			extracted = true;
+		}
+	} else {
+		await require_fs_safe.safeMkdir(extractedDir);
+		await require_archives_extract.extractArchive(archive.archivePath, extractedDir, extractOptions);
+		extracted = true;
+	}
+	return {
+		...archive,
+		extractedDir,
+		extracted
+	};
 }
+/**
+* Fetch a tool archive into the dlx cache with optional integrity verification.
+* Returns the cached path plus the SRI integrity for trust-on-first-use
+* pinning.
+*
+* @example
+*   ;```typescript
+*   // First call — no pin yet.
+*   const r = await downloadToolArchive({
+*     url: 'https://api.adoptium.net/v3/binary/...',
+*     name: 'adoptium-jre-21-darwin-arm64',
+*   })
+*   // Caller writes r.integrity into external-tools.json.
+*
+*   // Subsequent calls — verified against the pin.
+*   const r = await downloadToolArchive({
+*     url,
+*     name,
+*     integrity: pinnedFromManifest,
+*   })
+*   ```
+*/
 async function downloadToolArchive(opts) {
-  const { downloader, integrity, name, url } = opts;
-  const download = downloader ?? import_binary_download.downloadBinary;
-  const result = await download({
-    url,
-    name,
-    hash: integrity
-  });
-  return {
-    archivePath: result.binaryPath,
-    downloaded: result.downloaded,
-    integrity: result.integrity,
-    source: "download"
-  };
+	const { downloader, integrity, name, url } = opts;
+	const result = await (downloader ?? require_dlx_binary_download.downloadBinary)({
+		url,
+		name,
+		hash: integrity
+	});
+	return {
+		archivePath: result.binaryPath,
+		downloaded: result.downloaded,
+		integrity: result.integrity,
+		source: "download"
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  downloadAndExtractTool,
-  downloadToolArchive
-});
+
+//#endregion
+exports.downloadAndExtractTool = downloadAndExtractTool;
+exports.downloadToolArchive = downloadToolArchive;

package/dist/external-tools/janus/asset-names.js

@@ -1,57 +1,50 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var asset_names_exports = {};
-__export(asset_names_exports, {
-  JANUS_ASSET_MAP: () => JANUS_ASSET_MAP,
-  JANUS_SUPPORTED_PLATFORM_ARCHES: () => JANUS_SUPPORTED_PLATFORM_ARCHES,
-  getJanusAssetEntry: () => getJanusAssetEntry,
-  getJanusDownloadUrl: () => getJanusDownloadUrl
-});
-module.exports = __toCommonJS(asset_names_exports);
-var import_object = require("../../primordials/object");
-const JANUS_ASSET_MAP = (0, import_object.ObjectFreeze)({
-  __proto__: null,
-  "darwin-arm64": (0, import_object.ObjectFreeze)({
-    __proto__: null,
-    asset: "janus-aarch64-apple-darwin.tar.gz"
-  })
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../primordials/object.js');
+
+//#region src/external-tools/janus/asset-names.ts
+/**
+* @file Upstream janus release asset-name mapping per `platform-arch`. janus
+*   publishes per-platform tarballs under
+*   https://github.com/divmain/janus/releases/download/v<X.Y.Z>/. At v1.22.0
+*   only darwin-arm64 is shipped; this map will expand as upstream adds builds.
+*   Callers receive `undefined` for unsupported platforms — surface that as an
+*   actionable "janus is mac-arm64 only" error rather than blindly fetching a
+*   404.
+*/
+const JANUS_ASSET_MAP = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	"darwin-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "janus-aarch64-apple-darwin.tar.gz"
+	})
 });
-const JANUS_SUPPORTED_PLATFORM_ARCHES = (0, import_object.ObjectFreeze)(
-  Object.keys(JANUS_ASSET_MAP)
-);
+/**
+* Single source of truth for the platform-arch tokens janus ships. Derived from
+* JANUS_ASSET_MAP keys so adding a new asset entry automatically updates the
+* supported set. Use this from `from-download.ts` to throw a helpful error
+* rather than letting the URL builder silently return undefined.
+*/
+const JANUS_SUPPORTED_PLATFORM_ARCHES = require_primordials_object.ObjectFreeze(Object.keys(JANUS_ASSET_MAP));
 function getJanusAssetEntry(platformArch) {
-  return JANUS_ASSET_MAP[platformArch];
+	return JANUS_ASSET_MAP[platformArch];
 }
+/**
+* Build the GitHub release-asset download URL for an upstream janus binary.
+* Returns `undefined` when no entry exists for the requested platform-arch.
+*
+* Reference: https://github.com/divmain/janus/releases.
+*/
 function getJanusDownloadUrl(opts) {
-  const { platformArch, version } = opts;
-  const entry = JANUS_ASSET_MAP[platformArch];
-  if (!entry) {
-    return void 0;
-  }
-  return `https://github.com/divmain/janus/releases/download/v${version}/` + entry.asset;
+	const { platformArch, version } = opts;
+	const entry = JANUS_ASSET_MAP[platformArch];
+	if (!entry) return;
+	return `https://github.com/divmain/janus/releases/download/v${version}/` + entry.asset;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  JANUS_ASSET_MAP,
-  JANUS_SUPPORTED_PLATFORM_ARCHES,
-  getJanusAssetEntry,
-  getJanusDownloadUrl
-});
+
+//#endregion
+exports.JANUS_ASSET_MAP = JANUS_ASSET_MAP;
+exports.JANUS_SUPPORTED_PLATFORM_ARCHES = JANUS_SUPPORTED_PLATFORM_ARCHES;
+exports.getJanusAssetEntry = getJanusAssetEntry;
+exports.getJanusDownloadUrl = getJanusDownloadUrl;

package/dist/external-tools/janus/from-download.js

@@ -1,73 +1,48 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_download_exports = {};
-__export(from_download_exports, {
-  janusFromDownload: () => janusFromDownload
-});
-module.exports = __toCommonJS(from_download_exports);
-var import_node_path = __toESM(require("node:path"));
-var import_socket = require("../../paths/socket");
-var import_from_download = require("../from-download");
-var import_asset_names = require("./asset-names");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../../_virtual/_rolldown/runtime.js');
+const require_paths_socket = require('../../paths/socket.js');
+const require_external_tools_from_download = require('../from-download.js');
+const require_external_tools_janus_asset_names = require('./asset-names.js');
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+
+//#region src/external-tools/janus/from-download.ts
+/**
+* @file `janusFromDownload()` — fetches upstream janus and returns a
+*   `ResolvedJanus` pointing at the extracted binary. janus ships tar.gz
+*   archives containing a bare `janus` binary at the archive root (no nested
+*   directory). Defaults install under the shared wheelhouse dir
+*   (`~/.socket/_wheelhouse/janus/<version>/<platform-arch>/`) rather than the
+*   per-process dlx cache, so multiple fleet consumers reuse the same extracted
+*   binary.
+*/
 async function janusFromDownload(opts) {
-  const { cacheDir, downloader, integrity, platformArch, version } = opts;
-  if (!import_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.includes(platformArch)) {
-    const supported = import_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.map((p) => `\`${p}\``).join(
-      ", "
-    );
-    throw new Error(
-      `janusFromDownload: platformArch must be one of [${supported}], got \`${platformArch}\`. Upstream janus only publishes the macOS arm64 build (see https://github.com/divmain/janus/releases); request \`darwin-arm64\` or use a different tool for other platforms.`
-    );
-  }
-  const url = (0, import_asset_names.getJanusDownloadUrl)({ version, platformArch });
-  if (!url) {
-    throw new Error(
-      `janusFromDownload: no upstream asset for janus@${version} on \`${platformArch}\`. The platform is in the supported set but the version may be missing; check https://github.com/divmain/janus/releases/tag/v${version}.`
-    );
-  }
-  const extractedDir = cacheDir ?? import_node_path.default.join((0, import_socket.getSocketWheelhouseDir)(), "janus", version, platformArch);
-  const archive = await (0, import_from_download.downloadAndExtractTool)({
-    url,
-    name: `janus-${version}-${platformArch}.tar.gz`,
-    integrity,
-    extractedDir,
-    downloader
-  });
-  return {
-    path: import_node_path.default.join(extractedDir, "janus"),
-    source: "download",
-    integrity: archive.integrity
-  };
+	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+	if (!require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.includes(platformArch)) {
+		const supported = require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.map((p) => `\`${p}\``).join(", ");
+		throw new Error(`janusFromDownload: platformArch must be one of [${supported}], got \`${platformArch}\`. Upstream janus only publishes the macOS arm64 build (see https://github.com/divmain/janus/releases); request \`darwin-arm64\` or use a different tool for other platforms.`);
+	}
+	const url = require_external_tools_janus_asset_names.getJanusDownloadUrl({
+		version,
+		platformArch
+	});
+	if (!url) throw new Error(`janusFromDownload: no upstream asset for janus@${version} on \`${platformArch}\`. The platform is in the supported set but the version may be missing; check https://github.com/divmain/janus/releases/tag/v${version}.`);
+	const extractedDir = cacheDir ?? node_path.default.join(require_paths_socket.getSocketWheelhouseDir(), "janus", version, platformArch);
+	const archive = await require_external_tools_from_download.downloadAndExtractTool({
+		url,
+		name: `janus-${version}-${platformArch}.tar.gz`,
+		integrity,
+		extractedDir,
+		downloader
+	});
+	return {
+		path: node_path.default.join(extractedDir, "janus"),
+		source: "download",
+		integrity: archive.integrity
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  janusFromDownload
-});
+
+//#endregion
+exports.janusFromDownload = janusFromDownload;

package/dist/external-tools/janus/from-path.js

@@ -1,40 +1,22 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var from_path_exports = {};
-__export(from_path_exports, {
-  janusFromPath: () => janusFromPath
-});
-module.exports = __toCommonJS(from_path_exports);
-var import_which = require("../../bin/which");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_bin_which = require('../../bin/which.js');
+
+//#region src/external-tools/janus/from-path.ts
+/**
+* @file `janusFromPath()` — looks for `janus` on the system PATH.
+*/
 async function janusFromPath() {
-  const onPath = await (0, import_which.which)("janus", { nothrow: true });
-  if (typeof onPath !== "string") {
-    return void 0;
-  }
-  return {
-    path: onPath,
-    source: "path"
-  };
+	const onPath = await require_bin_which.which("janus", { nothrow: true });
+	/* c8 ignore start - reached only when janus is NOT on PATH. */
+	if (typeof onPath !== "string") return;
+	/* c8 ignore stop */
+	return {
+		path: onPath,
+		source: "path"
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  janusFromPath
-});
+
+//#endregion
+exports.janusFromPath = janusFromPath;