@socketsecurity/lib 6.0.5 → 6.0.6

package/dist/external-tools/skillspector/from-vfs.js

@@ -0,0 +1,27 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_smol_vfs = require('../../smol/vfs.js');
+
+//#region src/external-tools/skillspector/from-vfs.ts
+/**
+* @file `skillspectorFromVfs()` — extracts SkillSpector from the smol Node VFS
+*   if it's bundled. Returns `undefined` when the binary doesn't carry
+*   skillspector.
+*/
+const SKILLSPECTOR_VFS_KEY = "skillspector";
+async function skillspectorFromVfs() {
+	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	if (!vfs) return;
+	/* c8 ignore start - smol Node binary only. */
+	if (!vfs.has("skillspector")) return;
+	return {
+		path: await vfs.extract(SKILLSPECTOR_VFS_KEY),
+		source: "vfs"
+	};
+	/* c8 ignore stop */
+}
+
+//#endregion
+exports.SKILLSPECTOR_VFS_KEY = SKILLSPECTOR_VFS_KEY;
+exports.skillspectorFromVfs = skillspectorFromVfs;

package/dist/external-tools/skillspector/resolve.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @file `resolveSkillSpector()` — SkillSpector resolution entry point. Tries
+ *   each source in order:
+ *
+ *   1. VFS — smol binary's embedded skillspector (if packed)
+ *   2. PATH — `which skillspector` (pipx-installed binaries land here too; the
+ *      source field distinguishes `'pipx'` vs `'path'`)
+ *   3. DLX-venv — `~/.socket/_dlx/skillspector/<sha>/` with the pinned SHA Returns
+ *      `undefined` when all enabled sources miss. Memoized per
+ *      sha+cacheDir+localOnly tuple.
+ */
+import type { ResolvedSkillSpector } from './types';
+export interface ResolveSkillSpectorOptions {
+    /**
+     * Tier-3 install spec — the pinned upstream SHA. Required when `localOnly` is
+     * unset (without a SHA, the DLX tier can't run).
+     */
+    readonly sha?: string | undefined;
+    /**
+     * Tier-3 cache override. Defaults to `~/.socket/_dlx/skillspector/<sha>`.
+     */
+    readonly cacheDir?: string | undefined;
+    /**
+     * When true, only the VFS + PATH tiers run. Use for check-mode invocations
+     * that want to fail-fast if the tool isn't already installed.
+     */
+    readonly localOnly?: boolean | undefined;
+}
+export declare function cacheKey(opts: ResolveSkillSpectorOptions): string;
+export declare function doResolveSkillSpector(opts: ResolveSkillSpectorOptions): Promise<ResolvedSkillSpector | undefined>;
+/**
+ * Memoizing wrapper around {@link doResolveSkillSpector}.
+ */
+export declare function resolveSkillSpector(opts?: ResolveSkillSpectorOptions): Promise<ResolvedSkillSpector | undefined>;

package/dist/external-tools/skillspector/resolve.js

@@ -0,0 +1,53 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
+const require_external_tools_skillspector_from_dlx = require('./from-dlx.js');
+const require_external_tools_skillspector_from_path = require('./from-path.js');
+const require_external_tools_skillspector_from_vfs = require('./from-vfs.js');
+
+//#region src/external-tools/skillspector/resolve.ts
+/**
+* @file `resolveSkillSpector()` — SkillSpector resolution entry point. Tries
+*   each source in order:
+*
+*   1. VFS — smol binary's embedded skillspector (if packed)
+*   2. PATH — `which skillspector` (pipx-installed binaries land here too; the
+*      source field distinguishes `'pipx'` vs `'path'`)
+*   3. DLX-venv — `~/.socket/_dlx/skillspector/<sha>/` with the pinned SHA Returns
+*      `undefined` when all enabled sources miss. Memoized per
+*      sha+cacheDir+localOnly tuple.
+*/
+const resolutionCache = new require_primordials_map_set.MapCtor();
+function cacheKey(opts) {
+	return `${opts.sha ?? ""}|${opts.cacheDir ?? ""}|${opts.localOnly ? "local" : "full"}`;
+}
+async function doResolveSkillSpector(opts) {
+	const fromVfs = await require_external_tools_skillspector_from_vfs.skillspectorFromVfs();
+	/* c8 ignore start - smol Node binary only. */
+	if (fromVfs) return fromVfs;
+	/* c8 ignore stop */
+	const fromPath = await require_external_tools_skillspector_from_path.skillspectorFromPath();
+	if (fromPath) return fromPath;
+	if (opts.localOnly || !opts.sha) return;
+	return require_external_tools_skillspector_from_dlx.skillspectorFromDlx({
+		sha: opts.sha,
+		cacheDir: opts.cacheDir
+	});
+}
+/**
+* Memoizing wrapper around {@link doResolveSkillSpector}.
+*/
+async function resolveSkillSpector(opts = {}) {
+	const key = cacheKey(opts);
+	const existing = resolutionCache.get(key);
+	if (existing) return existing;
+	const promise = doResolveSkillSpector(opts);
+	resolutionCache.set(key, promise);
+	return promise;
+}
+
+//#endregion
+exports.cacheKey = cacheKey;
+exports.doResolveSkillSpector = doResolveSkillSpector;
+exports.resolveSkillSpector = resolveSkillSpector;

package/dist/external-tools/skillspector/types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file Shared types for SkillSpector resolution. SkillSpector is NVIDIA's
+ *   third-party-skill scanner (sibling to AgentShield); pinned to a git SHA
+ *   because upstream has no PyPI release or GH tags as of 2026-06-01.
+ */
+export type SkillSpectorSource = 'vfs' | 'pipx' | 'path' | 'dlx';
+/**
+ * A resolved SkillSpector installation.
+ */
+export interface ResolvedSkillSpector {
+    /**
+     * Absolute path to the `skillspector` entry-point executable.
+     */
+    readonly path: string;
+    /**
+     * Which resolver tier found this.
+     *
+     * - 'vfs' — extracted from the SEA binary's VFS
+     * - 'pipx' — `which skillspector` returned a pipx-installed venv binary
+     * - 'path' — `which skillspector` returned a non-pipx binary on PATH
+     * - 'dlx' — created a venv under ~/.socket/_dlx/skillspector/<sha>/
+     */
+    readonly source: SkillSpectorSource;
+}

package/dist/external-tools/skillspector/types.js

@@ -0,0 +1,2 @@
+"use strict";
+/* Socket Lib - Built with rolldown */

package/dist/external-tools/synp/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_synp_from_download = require('./from-download.js');
 const require_external_tools_synp_from_path = require('./from-path.js');
 const require_external_tools_synp_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_synp_from_vfs = require('./from-vfs.js');
 *      passed) Returns `undefined` if all of the enabled sources miss. Memoized
 *      per option-shape.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { integrity, version } = opts.downloadIfMissing;

package/dist/external-tools/trivy/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_trivy_from_download = require('./from-download.js');
 const require_external_tools_trivy_from_path = require('./from-path.js');
 const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
 *      is passed) Returns `undefined` if all of the enabled sources miss.
 *      Memoized per option-shape.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;

package/dist/external-tools/trufflehog/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_trufflehog_from_download = require('./from-download.js');
 const require_external_tools_trufflehog_from_path = require('./from-path.js');
 const require_external_tools_trufflehog_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_trufflehog_from_vfs = require('./from-vfs.js');
 *      passed) Returns `undefined` if all of the enabled sources miss. Memoized
 *      per option-shape; same caching semantics as `resolveJre()`.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;

package/dist/external-tools/uv/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_uv_from_download = require('./from-download.js');
 const require_external_tools_uv_from_path = require('./from-path.js');
 const require_external_tools_uv_from_vfs = require('./from-vfs.js');
@@ -15,7 +16,7 @@ const require_external_tools_uv_from_vfs = require('./from-vfs.js');
 *      is passed) Returns `undefined` if all of the enabled sources miss.
 *      Memoized per option-shape.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;

package/dist/fs/access.js

@@ -23,7 +23,7 @@ const require_smol_path = require('../smol/path.js');
 *
 * @returns True if the access check succeeds.
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function canAccess(path, mode) {
 	/* c8 ignore start - native access arm only on socket-btm smol binaries; getSmolPath() is undefined on stock Node. */
 	const smolAccess = (/* @__PURE__ */ require_smol_path.getSmolPath())?.access;
@@ -40,21 +40,21 @@ function canAccess(path, mode) {
 /**
 * Can the process execute `path`? (`X_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function canExecute(path) {
 	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.X_OK);
 }
 /**
 * Can the process read `path`? (`R_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function canRead(path) {
 	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.R_OK);
 }
 /**
 * Can the process write `path`? (`W_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function canWrite(path) {
 	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.W_OK);
 }

package/dist/fs/encoding.js

@@ -23,7 +23,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 *
 * @see https://github.com/nodejs/node/blob/ae62b36d442b7bf987e85ae6e0df0f02cc1bb17f/lib/internal/util.js#L247-L310
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function normalizeEncoding(enc) {
 	return enc == null || enc === "utf8" || enc === "utf-8" ? "utf8" : /* @__PURE__ */ normalizeEncodingSlow(enc);
 }
@@ -46,7 +46,7 @@ function normalizeEncoding(enc) {
 *
 * @see https://github.com/nodejs/node/blob/ae62b36d442b7bf987e85ae6e0df0f02cc1bb17f/lib/internal/util.js#L247-L310
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function normalizeEncodingSlow(enc) {
 	const { length } = enc;
 	if (length === 4) {

package/dist/fs/find-up.js

@@ -43,7 +43,7 @@ const abortSignal = require_process_abort.getAbortSignal();
 *
 * @returns Normalized absolute path if found, undefined otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function findUp(name, options) {
 	const { cwd = node_process.default.cwd(), signal = abortSignal } = {
 		__proto__: null,
@@ -94,7 +94,7 @@ async function findUp(name, options) {
 *
 * @returns Normalized absolute path if found, undefined otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function findUpSync(name, options) {
 	const { cwd = node_process.default.cwd(), stopAt } = {
 		__proto__: null,

package/dist/fs/inspect.js

@@ -29,7 +29,7 @@ const require_globs_matcher = require('../globs/matcher.js');
 *
 * @returns `true` if path is a directory, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function isDir(filepath) {
 	return !!(await /* @__PURE__ */ safeStat(filepath))?.isDirectory();
 }
@@ -52,7 +52,7 @@ async function isDir(filepath) {
 *
 * @returns `true` if directory is empty (or doesn't exist), `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function isDirEmptySync(dirname, options) {
 	const { ignore = require_globs_defaults.defaultIgnore } = {
 		__proto__: null,
@@ -89,7 +89,7 @@ function isDirEmptySync(dirname, options) {
 *
 * @returns `true` if path is a directory, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function isDirSync(filepath) {
 	return !!(/* @__PURE__ */ safeStatSync(filepath))?.isDirectory();
 }
@@ -108,7 +108,7 @@ function isDirSync(filepath) {
 *
 * @returns `true` if path is a symbolic link, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function isSymlinkSync(filepath) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	try {
@@ -135,7 +135,7 @@ function isSymlinkSync(filepath) {
 *
 * @returns Promise resolving to Stats object, or undefined on error
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function safeStat(filepath) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	try {
@@ -161,7 +161,7 @@ async function safeStat(filepath) {
 *
 * @returns Stats object, or undefined on error
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function safeStatSync(filepath) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	try {

package/dist/fs/read-dir.js

@@ -24,7 +24,7 @@ const require_fs_inspect = require('./inspect.js');
 *
 * @returns Array of directory names, optionally sorted
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function innerReadDirNames(dirents, dirname, options) {
 	const { ignore, includeEmpty = true, sort = true } = {
 		__proto__: null,
@@ -56,7 +56,7 @@ function innerReadDirNames(dirents, dirname, options) {
 *
 * @returns Array of directory names, empty array on error
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function readDirNames(dirname, options) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	try {
@@ -90,7 +90,7 @@ async function readDirNames(dirname, options) {
 *
 * @returns Array of directory names, empty array on error
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function readDirNamesSync(dirname, options) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	try {

package/dist/fs/read-file.js

@@ -34,7 +34,7 @@ const abortSignal = require_process_abort.getAbortSignal();
 *
 * @returns Promise resolving to Buffer containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function readFileBinary(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
 	return await (/* @__PURE__ */ require_node_fs.getNodeFs()).promises.readFile(filepath, {
@@ -61,7 +61,7 @@ async function readFileBinary(filepath, options) {
 *
 * @returns Buffer containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function readFileBinarySync(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
 	return (/* @__PURE__ */ require_node_fs.getNodeFs()).readFileSync(filepath, {
@@ -87,7 +87,7 @@ function readFileBinarySync(filepath, options) {
 *
 * @returns Promise resolving to string containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function readFileUtf8(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
 	return await (/* @__PURE__ */ require_node_fs.getNodeFs()).promises.readFile(filepath, {
@@ -115,7 +115,7 @@ async function readFileUtf8(filepath, options) {
 *
 * @returns String containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function readFileUtf8Sync(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
 	return (/* @__PURE__ */ require_node_fs.getNodeFs()).readFileSync(filepath, {
@@ -123,7 +123,7 @@ function readFileUtf8Sync(filepath, options) {
 		encoding: "utf8"
 	});
 }
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function safeReadFile(filepath, options) {
 	const { defaultValue, ...rawReadOpts } = typeof options === "string" ? {
 		__proto__: null,
@@ -152,7 +152,7 @@ async function safeReadFile(filepath, options) {
 	if (shouldReturnBuffer) return require_primordials_buffer.BufferIsBuffer(defaultValue) ? defaultValue : void 0;
 	return typeof defaultValue === "string" ? defaultValue : String(defaultValue);
 }
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function safeReadFileSync(filepath, options) {
 	const { defaultValue, ...rawReadOpts } = typeof options === "string" ? {
 		__proto__: null,

package/dist/fs/read-json.js

@@ -49,7 +49,7 @@ const require_json_parse = require('../json/parse.js');
 * @returns Promise resolving to parsed JSON value, or undefined if throws is
 *   false and an error occurs.
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function readJson(filepath, options) {
 	const { cache, reviver, throws, ...fsOptions } = {
 		__proto__: null,
@@ -123,7 +123,7 @@ async function readJson(filepath, options) {
 * @returns Parsed JSON value, or undefined if throws is false and an error
 *   occurs.
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function readJsonSync(filepath, options) {
 	const { cache, reviver, throws, ...fsOptions } = {
 		__proto__: null,

package/dist/fs/safe.js

@@ -29,9 +29,9 @@ const defaultRemoveOptions = require_objects_mutate.objectFreeze({
 	retryDelay: 200
 });
 let _del;
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function getDel() {
-	if (_del === void 0) _del = /* @__PURE__ */ require("../external/del");
+	if (_del === void 0) _del = /*@__PURE__*/ require("../external/del");
 	return _del;
 }
 /**

package/dist/fs/unique.js

@@ -33,7 +33,7 @@ const require_node_path = require('../node/path.js');
 * @returns Normalized unique filepath (original if it doesn't exist, or with
 *   number suffix)
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function uniqueSync(filepath) {
 	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
 	const path = /* @__PURE__ */ require_node_path.getNodePath();

package/dist/fs/validate.js

@@ -42,7 +42,7 @@ const require_fs_access = require('./access.js');
 *
 * @returns Object with `validPaths` (readable) and `invalidPaths` (unreadable)
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function validateFiles(filepaths) {
 	const validPaths = [];
 	const invalidPaths = [];

package/dist/fs/write-json.js

@@ -26,7 +26,7 @@ const NEWLINE_REGEX = /\n/g;
 *
 * @returns Formatted JSON string
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function stringify(json, EOL, finalEOL, replacer, spaces = 2) {
 	const EOF = finalEOL ? EOL : "";
 	return `${require_primordials_string.StringPrototypeReplace(require_primordials_json.JSONStringify(json, replacer, spaces), NEWLINE_REGEX, EOL)}${EOF}`;

package/dist/git/_internal.js

@@ -7,6 +7,7 @@ const require_paths_normalize = require('../paths/normalize.js');
 const require_primordials_array = require('../primordials/array.js');
 const require_primordials_map_set = require('../primordials/map-set.js');
 const require_node_path = require('../node/path.js');
+const require_primordials_date = require('../primordials/date.js');
 const require_primordials_object = require('../primordials/object.js');
 const require_primordials_json = require('../primordials/json.js');
 const require_bin_which = require('../bin/which.js');
@@ -30,7 +31,7 @@ let _gitPath;
 function getCachedGitDiff(key) {
 	const entry = gitDiffCache.get(key);
 	if (!entry) return;
-	if (Date.now() >= entry.expiresAt) {
+	if (require_primordials_date.DateNow() >= entry.expiresAt) {
 		gitDiffCache.delete(key);
 		return;
 	}

package/dist/globs/_internal.js

@@ -20,14 +20,14 @@ const MATCHER_CACHE_MAX_SIZE = 100;
 const matcherCache = new require_primordials_map_set.MapCtor();
 let _fastGlob;
 let _picomatch;
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function getFastGlob() {
-	if (_fastGlob === void 0) _fastGlob = /* @__PURE__ */ require("../external/fast-glob.js");
+	if (_fastGlob === void 0) _fastGlob = /*@__PURE__*/ require("../external/fast-glob.js");
 	return _fastGlob;
 }
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function getPicomatch() {
-	if (_picomatch === void 0) _picomatch = /* @__PURE__ */ require("../external/picomatch.js");
+	if (_picomatch === void 0) _picomatch = /*@__PURE__*/ require("../external/picomatch.js");
 	return _picomatch;
 }
 /**

package/dist/globs/match.js

@@ -2,6 +2,7 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_node_fs = require('../node/fs.js');
+const require_primordials_object = require('../primordials/object.js');
 const require_node_fs_promises = require('../node/fs-promises.js');
 const require_globs__internal = require('./_internal.js');
 const require_promises_resolvers = require('../promises/resolvers.js');
@@ -45,7 +46,7 @@ const require_promises_resolvers = require('../promises/resolvers.js');
 */
 function canUseNodeFsGlob(options) {
 	if (!options) return true;
-	for (const key of Object.keys(options)) if (key !== "cwd" && key !== "ignore") return false;
+	for (const key of require_primordials_object.ObjectKeys(options)) if (key !== "cwd" && key !== "ignore") return false;
 	return true;
 }
 /**
@@ -57,7 +58,7 @@ function canUseNodeFsGlob(options) {
 *   console.log(files) // ['src/index.ts', 'src/utils.ts']
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 async function glob(patterns, options) {
 	const normalizedIgnore = require_globs__internal.normalizeIgnorePatterns(options?.ignore);
 	/* c8 ignore start */
@@ -80,7 +81,7 @@ async function glob(patterns, options) {
 *   console.log(files) // ['package.json', 'tsconfig.json']
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function globSync(patterns, options) {
 	const normalizedIgnore = require_globs__internal.normalizeIgnorePatterns(options?.ignore);
 	/* c8 ignore start */

package/dist/globs/matcher.js

@@ -40,7 +40,7 @@ let _matchesGlobProbed = false;
 *   const isSource = getGlobMatcher(['src/**', '!**\/*.test.ts'])
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function getGlobMatcher(glob, options) {
 	const patterns = require_primordials_array.ArrayIsArray(glob) ? glob : [glob];
 	const sortedPatterns = [...patterns].sort();
@@ -94,7 +94,7 @@ function getGlobMatcher(glob, options) {
 *
 * @internal
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function getMatchesGlob() {
 	if (!_matchesGlobProbed) {
 		const fn = (/* @__PURE__ */ require("node:path")).matchesGlob;

package/dist/globs/stream.js

@@ -23,7 +23,7 @@ const require_paths_globs = require('../paths/globs.js');
 *   }
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
+/*@__NO_SIDE_EFFECTS__*/
 function globStreamLicenses(dirname, options) {
 	const { ignore: ignoreOpt, ignoreOriginals, recursive, ...globOptions } = {
 		__proto__: null,