@socketsecurity/lib 6.0.5 → 6.0.7

package/dist/eco/npm/pnpm/flags.js

@@ -23,7 +23,6 @@ const pnpmInstallCommands = new require_primordials_map_set.SetCtor(["install",
 *   isPnpmFrozenLockfileFlag('--save') // false
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isPnpmFrozenLockfileFlag(cmdArg) {
 	return pnpmFrozenLockfileFlags.has(cmdArg);
 }
@@ -37,7 +36,6 @@ function isPnpmFrozenLockfileFlag(cmdArg) {
 *   isPnpmIgnoreScriptsFlag('--save') // false
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isPnpmIgnoreScriptsFlag(cmdArg) {
 	return pnpmIgnoreScriptsFlags.has(cmdArg);
 }
@@ -51,7 +49,6 @@ function isPnpmIgnoreScriptsFlag(cmdArg) {
 *   isPnpmInstallCommand('run') // false
 *   ```
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isPnpmInstallCommand(cmdArg) {
 	return pnpmInstallCommands.has(cmdArg);
 }

package/dist/eco/npm/pnpm/parse-lockfile.d.ts

@@ -24,7 +24,7 @@
  *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
  *      (parsePnpmLock)
  *   4. **pnpm lockfile spec** + reference implementation:
- *      https://github.com/pnpm/spec/blob/master/lockfile/9.0.md
+ *      https://github.com/pnpm/spec/blob/834f2815cc61917fa133e10869a2d4e9391c36bf/lockfile/9.0.md
  *      https://github.com/pnpm/pnpm/blob/main/packages/lockfile-file/ Bug fixes
  *      implemented here (and in the native parser):
  *

package/dist/eco/npm/pnpm/parse-lockfile.js

@@ -37,7 +37,7 @@ const require_eco_npm_pnpm_parse_pnpm_package_id_v6_v9 = require('./parse-pnpm-p
 *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
 *      (parsePnpmLock)
 *   4. **pnpm lockfile spec** + reference implementation:
-*      https://github.com/pnpm/spec/blob/master/lockfile/9.0.md
+*      https://github.com/pnpm/spec/blob/834f2815cc61917fa133e10869a2d4e9391c36bf/lockfile/9.0.md
 *      https://github.com/pnpm/pnpm/blob/main/packages/lockfile-file/ Bug fixes
 *      implemented here (and in the native parser):
 *
@@ -71,7 +71,7 @@ function freezeEntry(entry) {
 }
 function indentOf(line) {
 	let indent = 0;
-	while (indent < line.length && (line[indent] === " " || line[indent] === "	")) indent++;
+	while (indent < line.length && (line[indent] === "	" || line[indent] === " ")) indent++;
 	return indent;
 }
 function jsParsePnpmLock(content) {
@@ -237,8 +237,8 @@ function stripPeerSuffix(version) {
 	const parenIdx = require_primordials_string.StringPrototypeIndexOf(noUnderscore, "(");
 	return parenIdx !== -1 ? require_primordials_string.StringPrototypeSlice(noUnderscore, 0, parenIdx) : noUnderscore;
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const parsePnpmLock = _smol ? (content) => _smol.parseLockfile(content, "npm", "pnpm") : jsParsePnpmLock;
+const smol = require_smol_manifest.getSmolManifest();
+const parsePnpmLock = smol ? (content) => smol.parseLockfile(content, "npm", "pnpm") : jsParsePnpmLock;
 
 //#endregion
 exports.addToPnpmIndex = addToPnpmIndex;

package/dist/eco/npm/script.js

@@ -2,12 +2,13 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../../_virtual/_rolldown/runtime.js');
+const require_primordials_error = require('../../primordials/error.js');
 const require_primordials_array = require('../../primordials/array.js');
 const require_objects_inspect = require('../../objects/inspect.js');
 const require_process_spawn_child = require('../../process/spawn/child.js');
 const require_constants_agents = require('../../constants/agents.js');
 const require_constants_node = require('../../constants/node.js');
-const require_fs_find_up = require('../../fs/find-up.js');
+const require_fs_find = require('../../fs/find.js');
 const require_eco_npm_npm_exec = require('./npm/exec.js');
 const require_eco_npm_pnpm_exec = require('./pnpm/exec.js');
 const require_eco_npm_yarnpkg_yarn_exec = require('./yarnpkg/yarn/exec.js');
@@ -54,27 +55,29 @@ function execScript(scriptName, args, options) {
 	};
 	if (spawnOptions.shell === true) return require_process_spawn_child.spawn(scriptName, resolvedArgs, spawnOptions);
 	const useNodeRun = !prepost && require_constants_node.supportsNodeRun();
-	const cwd = /* @__PURE__ */ require_objects_inspect.getOwn(spawnOptions, "cwd") ?? node_process.default.cwd();
-	if (/* @__PURE__ */ require_fs_find_up.findUpSync("pnpm-lock.yaml", { cwd })) return require_eco_npm_pnpm_exec.execPnpm([
+	const cwd = require_objects_inspect.getOwn(spawnOptions, "cwd") ?? node_process.default.cwd();
+	if (require_fs_find.findUpSync("pnpm-lock.yaml", { cwd })) return require_eco_npm_pnpm_exec.execPnpm([
 		"run",
 		scriptName,
 		...resolvedArgs
 	], spawnOptions);
-	if (/* @__PURE__ */ require_fs_find_up.findUpSync("package-lock.json", { cwd })) return require_eco_npm_npm_exec.execNpm([
+	if (require_fs_find.findUpSync("package-lock.json", { cwd })) return require_eco_npm_npm_exec.execNpm([
 		"run",
 		scriptName,
 		...resolvedArgs
 	], spawnOptions);
-	if (/* @__PURE__ */ require_fs_find_up.findUpSync("yarn.lock", { cwd })) return require_eco_npm_yarnpkg_yarn_exec.execYarn([
+	if (require_fs_find.findUpSync("yarn.lock", { cwd })) return require_eco_npm_yarnpkg_yarn_exec.execYarn([
 		"run",
 		scriptName,
 		...resolvedArgs
 	], spawnOptions);
 	/* c8 ignore stop */
 	/* c8 ignore start */
+	if (!useNodeRun && !require_constants_agents.NPM_REAL_EXEC_PATH) throw new require_primordials_error.ErrorCtor(`Cannot run script "${scriptName}": no npm executable found and this Node.js lacks \`node --run\`. Install npm or upgrade to Node 22.5+ for \`--run\` support.`);
+	const runnerArgs = useNodeRun ? ["--run"] : [require_constants_agents.NPM_REAL_EXEC_PATH, "run"];
 	return require_process_spawn_child.spawn(require_constants_node.getExecPath(), [
 		...require_constants_node.getNodeNoWarningsFlags(),
-		...useNodeRun ? ["--run"] : [require_constants_agents.NPM_REAL_EXEC_PATH, "run"],
+		...runnerArgs,
 		scriptName,
 		...resolvedArgs
 	], { ...spawnOptions });

package/dist/eco/npm/yarnpkg/yarn/exec.js

@@ -38,9 +38,9 @@ const yarnInstallLikeCommands = new require_primordials_map_set.SetCtor([
 *   ```
 */
 function execYarn(args, options) {
-	const useDebug = /* @__PURE__ */ require_debug_namespace.isDebug();
+	const useDebug = require_debug_namespace.isDebug();
 	const terminatorPos = require_primordials_array.ArrayPrototypeIndexOf(args, "--");
-	const yarnArgs = (terminatorPos === -1 ? args : require_primordials_array.ArrayPrototypeSlice(args, 0, terminatorPos)).filter((a) => !/* @__PURE__ */ require_eco_npm_npm_flags.isNpmProgressFlag(a));
+	const yarnArgs = (terminatorPos === -1 ? args : require_primordials_array.ArrayPrototypeSlice(args, 0, terminatorPos)).filter((a) => !require_eco_npm_npm_flags.isNpmProgressFlag(a));
 	const otherArgs = terminatorPos === -1 ? [] : require_primordials_array.ArrayPrototypeSlice(args, terminatorPos);
 	const firstArg = yarnArgs[0];
 	/* c8 ignore start */
@@ -49,7 +49,7 @@ function execYarn(args, options) {
 	const hasIgnoreScriptsFlag = yarnArgs.some(require_eco_npm_pnpm_flags.isPnpmIgnoreScriptsFlag);
 	const ignoreScriptsArgs = !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ["--ignore-scripts"];
 	/* c8 ignore stop */
-	return /* @__PURE__ */ require_bin_exec.execBin("yarn", [
+	return require_bin_exec.execBin("yarn", [
 		...logLevelArgs,
 		...ignoreScriptsArgs,
 		...yarnArgs,

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.d.ts

@@ -22,8 +22,8 @@
  *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
  *      (parseYarnLock)
  *   4. **yarn format docs**: classic (v1):
- *      https://github.com/yarnpkg/yarn/blob/master/src/lockfile/parse.js berry
- *      (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
+ *      https://github.com/yarnpkg/yarn/blob/v1.22.22/src/lockfile/parse.js
+ *      berry (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
  *      protocols: https://yarnpkg.com/protocol/ Bug fixes implemented here (and
  *      in the native parser):
  *

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../../../../primordials/string.js');
 const require_primordials_math = require('../../../../primordials/math.js');
+const require_primordials_string = require('../../../../primordials/string.js');
 const require_primordials_array = require('../../../../primordials/array.js');
 const require_primordials_object = require('../../../../primordials/object.js');
 const require_smol_manifest = require('../../../../smol/manifest.js');
@@ -33,8 +33,8 @@ const require_eco_npm_yarnpkg_yarn_parse_yarn_descriptor = require('./parse-yarn
 *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
 *      (parseYarnLock)
 *   4. **yarn format docs**: classic (v1):
-*      https://github.com/yarnpkg/yarn/blob/master/src/lockfile/parse.js berry
-*      (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
+*      https://github.com/yarnpkg/yarn/blob/v1.22.22/src/lockfile/parse.js
+*      berry (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
 *      protocols: https://yarnpkg.com/protocol/ Bug fixes implemented here (and
 *      in the native parser):
 *
@@ -86,7 +86,7 @@ function consumeEntryProperties(content, startPos, entry) {
 		const eol = require_primordials_string.StringPrototypeIndexOf(content, "\n", pos);
 		const end = eol === -1 ? content.length : eol;
 		const line = require_primordials_string.StringPrototypeSlice(content, pos, end);
-		if (line.length === 0 || line[0] !== " " && line[0] !== "	") break;
+		if (line.length === 0 || line[0] !== "	" && line[0] !== " ") break;
 		const propLine = require_primordials_string.StringPrototypeTrim(line);
 		pos = end + 1;
 		if (require_primordials_string.StringPrototypeIndexOf(propLine, "version ") === 0 || require_primordials_string.StringPrototypeIndexOf(propLine, "version:") === 0) entry.version = stripQuotes(valueAfterKey(propLine, 8));
@@ -122,7 +122,7 @@ function jsParseYarnLock(content) {
 			pos = skipIndentedBlock(content, pos);
 			continue;
 		}
-		if (line[0] === " " || line[0] === "	") continue;
+		if (line[0] === "	" || line[0] === " ") continue;
 		const trimmed = require_primordials_string.StringPrototypeTrim(line);
 		if (!require_primordials_string.StringPrototypeEndsWith(trimmed, ":")) continue;
 		let header = stripQuotes(require_primordials_string.StringPrototypeTrim(require_primordials_string.StringPrototypeSlice(trimmed, 0, -1)));
@@ -182,7 +182,7 @@ function skipIndentedBlock(content, startPos) {
 		const eol = require_primordials_string.StringPrototypeIndexOf(content, "\n", pos);
 		const end = eol === -1 ? content.length : eol;
 		const line = require_primordials_string.StringPrototypeSlice(content, pos, end);
-		if (line.length === 0 || line[0] !== " " && line[0] !== "	") return pos;
+		if (line.length === 0 || line[0] !== "	" && line[0] !== " ") return pos;
 		pos = end + 1;
 	}
 	return pos;
@@ -197,8 +197,8 @@ function stripQuotes(s) {
 function valueAfterKey(line, keyLen) {
 	return require_primordials_string.StringPrototypeTrim(require_primordials_string.StringPrototypeSlice(line, keyLen));
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const parseYarnLock = _smol ? (content) => _smol.parseLockfile(content, "npm", "yarn") : jsParseYarnLock;
+const smol = require_smol_manifest.getSmolManifest();
+const parseYarnLock = smol ? (content) => smol.parseLockfile(content, "npm", "yarn") : jsParseYarnLock;
 
 //#endregion
 exports.addToYarnIndex = addToYarnIndex;

package/dist/effects/pulse-frames.d.ts

@@ -3,6 +3,8 @@
  *   animation frames using sparkles (✧ ✦) and lightning (⚡). Follows the
  *   cli-spinners format: https://github.com/sindresorhus/cli-spinners.
  */
+import type { ThemeName } from '../themes/themes';
+import type { Theme } from '../themes/types';
 export type SocketFramesOptions = {
     readonly baseColor?: readonly [number, number, number] | undefined;
     readonly interval?: number | undefined;
@@ -11,7 +13,7 @@ export type SocketFramesOptions = {
      * etc.) or a Theme object. Note: Currently frames only contain brightness
      * modifiers. Colors are applied by yocto-spinner based on spinner.color.
      */
-    readonly theme?: import('../themes/types').Theme | import('../themes/themes').ThemeName | undefined;
+    readonly theme?: Theme | ThemeName | undefined;
 };
 /**
  * Generate Socket pulse animation frames. Creates a pulsing throbber using

package/dist/effects/shimmer-keyframes.d.ts

@@ -20,7 +20,7 @@
  *   //            dur="3s" repeatCount="indefinite" />
  *   ```
  */
-import { type ShimmerSpec } from './shimmer';
+import type { ShimmerSpec } from './shimmer';
 /**
  * Keyframe track for a single character. `times[i]` is in [0, 1] and pairs with
  * `values[i]` (an `rgb(R,G,B)` string). Use directly as SMIL `<animate>`

package/dist/effects/shimmer-terminal.d.ts

@@ -23,7 +23,7 @@
  *   ```
  */
 import { ANSI_RESET } from '../ansi/constants';
-import { type RGB, type ShimmerSpec } from './shimmer';
+import type { RGB, ShimmerSpec } from './shimmer';
 /**
  * ANSI "reset all attributes" sequence. Re-exported from `../ansi` for
  * convenience so callers don't need a separate import for the canonical value.

package/dist/env/boolean.js

@@ -28,7 +28,6 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 * @returns `true` if value is '1', 'true', or 'yes' (case-insensitive), `false`
 *   otherwise.
 */
-/* @__NO_SIDE_EFFECTS__ */
 function envAsBoolean(value, defaultValueOrOptions = false) {
 	const { defaultValue = false, trim = true } = typeof defaultValueOrOptions === "boolean" ? { defaultValue: defaultValueOrOptions } : defaultValueOrOptions ?? {};
 	if (typeof value === "string") {

package/dist/env/ci.js

@@ -23,7 +23,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns `true` if running in a CI environment, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getCI() {
 	return require_env_rewire.isInEnv("CI");
 }

package/dist/env/debug.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The debug filter string, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getDebug() {
 	return require_env_rewire.getEnvValue("DEBUG");
 }

package/dist/env/github-status.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Probe githubstatus.com to detect platform degradation before making
+ *   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+ *   checks where a cryptic "operation was canceled" error would otherwise mask
+ *   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+ *   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+ *   most 8 seconds to startup (configurable timeout) and fails open on network
+ *   error so a down status page never blocks a healthy workflow.
+ */
+export type GitHubComponentStatus = 'degraded_performance' | 'major_outage' | 'operational' | 'partial_outage' | 'under_maintenance';
+export type GitHubStatusResult = {
+    /**
+     * Worst-case status across all monitored components.
+     */
+    status: GitHubComponentStatus | 'unknown';
+    /**
+     * Whether any monitored component is not fully operational.
+     */
+    degraded: boolean;
+    /**
+     * Human-readable summary, e.g. "Actions: degraded_performance".
+     */
+    summary: string;
+    /**
+     * Per-component breakdown for the monitored set.
+     */
+    components: Array<{
+        id: string;
+        name: string;
+        status: GitHubComponentStatus;
+    }>;
+};
+/**
+ * Probe githubstatus.com and return the health of GitHub Actions, Git
+ * Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+ * when the probe itself fails — so a down status page never blocks a healthy
+ * workflow.
+ *
+ * @example
+ *   ;```typescript
+ *   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+ *
+ *   const health = await probeGitHubStatus()
+ *   if (health.degraded) {
+ *   console.warn(`GitHub degraded: ${health.summary}`)
+ *   }
+ *   ```
+ *
+ * @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+ */
+export declare function probeGitHubStatus(timeoutMs?: number): Promise<GitHubStatusResult>;

package/dist/env/github-status.js

@@ -0,0 +1,90 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_http_request_node = require('../http-request/node.js');
+
+//#region src/env/github-status.ts
+/**
+* @file Probe githubstatus.com to detect platform degradation before making
+*   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+*   checks where a cryptic "operation was canceled" error would otherwise mask
+*   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+*   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+*   most 8 seconds to startup (configurable timeout) and fails open on network
+*   error so a down status page never blocks a healthy workflow.
+*/
+const MONITORED_COMPONENT_IDS = new Map([
+	["br0l2tvcx85d", "Actions"],
+	["8l4ygp009s5s", "Git Operations"],
+	["brv1bkgrwx7q", "API Requests"]
+]);
+const SEVERITY = new Map([
+	["major_outage", 4],
+	["partial_outage", 3],
+	["degraded_performance", 2],
+	["under_maintenance", 1],
+	["operational", 0]
+]);
+const STATUS_API_URL = "https://www.githubstatus.com/api/v2/components.json";
+/**
+* Probe githubstatus.com and return the health of GitHub Actions, Git
+* Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+* when the probe itself fails — so a down status page never blocks a healthy
+* workflow.
+*
+* @example
+*   ;```typescript
+*   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+*
+*   const health = await probeGitHubStatus()
+*   if (health.degraded) {
+*   console.warn(`GitHub degraded: ${health.summary}`)
+*   }
+*   ```
+*
+* @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+*/
+async function probeGitHubStatus(timeoutMs = 8e3) {
+	let body;
+	try {
+		body = await require_http_request_node.httpJson(STATUS_API_URL, { timeout: timeoutMs });
+	} catch {
+		return {
+			status: "unknown",
+			degraded: false,
+			summary: "githubstatus.com unreachable — cannot confirm GitHub health",
+			components: []
+		};
+	}
+	const allComponents = body.components ?? [];
+	const monitored = [];
+	let worstSeverity = 0;
+	let worstStatus = "operational";
+	for (const c of allComponents) {
+		const name = MONITORED_COMPONENT_IDS.get(c.id);
+		if (!name) continue;
+		const status = c.status;
+		const sev = SEVERITY.get(status) ?? 0;
+		if (sev > worstSeverity) {
+			worstSeverity = sev;
+			worstStatus = status;
+		}
+		monitored.push({
+			id: c.id,
+			name,
+			status
+		});
+	}
+	const degradedComponents = monitored.filter((c) => c.status !== "operational");
+	const degraded = degradedComponents.length > 0;
+	const summary = degraded ? degradedComponents.map((c) => `${c.name}: ${c.status}`).join(", ") : "All monitored GitHub components operational";
+	return {
+		status: worstStatus,
+		degraded,
+		summary,
+		components: monitored
+	};
+}
+
+//#endregion
+exports.probeGitHubStatus = probeGitHubStatus;

package/dist/env/github.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The GH CLI token, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGhToken() {
 	return require_env_rewire.getEnvValue("GH_TOKEN");
 }
@@ -40,7 +39,6 @@ function getGhToken() {
 *
 * @returns The GitHub API URL, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubApiUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_API_URL");
 }
@@ -57,7 +55,6 @@ function getGithubApiUrl() {
 *
 * @returns The pull request base branch name, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubBaseRef() {
 	return require_env_rewire.getEnvValue("GITHUB_BASE_REF");
 }
@@ -74,7 +71,6 @@ function getGithubBaseRef() {
 *
 * @returns The branch or tag name, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubRefName() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_NAME");
 }
@@ -91,7 +87,6 @@ function getGithubRefName() {
 *
 * @returns The ref type ('branch' or 'tag'), or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubRefType() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_TYPE");
 }
@@ -109,7 +104,6 @@ function getGithubRefType() {
 *
 * @returns The repository name, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubRepository() {
 	return require_env_rewire.getEnvValue("GITHUB_REPOSITORY");
 }
@@ -127,7 +121,6 @@ function getGithubRepository() {
 *
 * @returns The GitHub server URL, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubServerUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_SERVER_URL");
 }
@@ -145,7 +138,6 @@ function getGithubServerUrl() {
 *
 * @returns The GitHub token, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getGithubToken() {
 	return require_env_rewire.getEnvValue("GITHUB_TOKEN");
 }

package/dist/env/home.js

@@ -32,7 +32,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The user's home directory path, or `undefined` if not resolvable
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getHome() {
 	return require_env_rewire.getEnvValue("HOME") ?? require_env_rewire.getEnvValue("USERPROFILE");
 }

package/dist/env/locale.js

@@ -21,7 +21,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The system locale string, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getLang() {
 	return require_env_rewire.getEnvValue("LANG");
 }
@@ -38,7 +37,6 @@ function getLang() {
 *
 * @returns The locale override string, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getLcAll() {
 	return require_env_rewire.getEnvValue("LC_ALL");
 }
@@ -55,7 +53,6 @@ function getLcAll() {
 *
 * @returns The messages locale string, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getLcMessages() {
 	return require_env_rewire.getEnvValue("LC_MESSAGES");
 }

package/dist/env/node-auth-token.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js registry auth token, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getNodeAuthToken() {
 	return require_env_rewire.getEnvValue("NODE_AUTH_TOKEN");
 }

package/dist/env/node-env.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js environment mode, or `undefined` if not set
 */
-/* @__NO_SIDE_EFFECTS__ */
 function getNodeEnv() {
 	return require_env_rewire.getEnvValue("NODE_ENV");
 }

package/dist/env/node-version-managers.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file Detect which Node version manager is active on this machine and emit a
+ *   targeted upgrade hint. Used when a tool needs Node ≥ X and wants to tell
+ *   the user the exact command to run instead of a generic "install newer Node"
+ *   line. Detection is best-effort:
+ *
+ *   1. **process.execPath** — the running Node binary's path is the most reliable
+ *      signal. `~/.nvm/versions/node/...`, `~/.volta/tools/...`, `~/.fnm/...`,
+ *      `~/.asdf/installs/nodejs/...`, `~/n/...` each have well-known directory
+ *      shapes.
+ *   2. **Environment variables** — `NVM_DIR`, `FNM_DIR`, `FNM_MULTISHELL_PATH`,
+ *      `VOLTA_HOME`, `ASDF_DIR`, `N_PREFIX`. These are set by the shell
+ *      integration each manager ships.
+ *   3. **Corepack** — Node's bundled package-manager shim. Detected via
+ *      `COREPACK_*` env vars or by the Node binary being under
+ *      `corepack/shims/`. If none match, the manager is reported as `'system'`
+ *      (Homebrew, apt, the .pkg installer, etc.) — for those, the upgrade hint
+ *      is generic. This module does NOT shell out — every probe is in-process
+ *      (env reads + path string inspection). That keeps it cheap to call and
+ *      safe for the native-messaging host context, where stdout is reserved for
+ *      the Chrome protocol.
+ */
+export type NodeVersionManager = 'asdf' | 'corepack' | 'fnm' | 'n' | 'nvm' | 'system' | 'volta';
+/**
+ * Detect the Node version manager currently providing `process.execPath`.
+ * Returns `'system'` when no manager is detected — the user is running a Node
+ * installed by the OS package manager, the official .pkg/.msi installer, or a
+ * manually placed binary.
+ *
+ * @example
+ *   ;```typescript
+ *   detectActiveNodeManager() // 'nvm' | 'fnm' | 'volta' | 'asdf' | 'n' | 'corepack' | 'system'
+ *   ```
+ */
+export declare function detectActiveNodeManager(): NodeVersionManager;
+/**
+ * Produce the exact shell command a user should run to install + activate
+ * `targetVersion` under the named manager. The command is single-line and
+ * intended to be embedded in an error message verbatim.
+ *
+ * @example
+ *   ;```typescript
+ *   nodeManagerUpgradeHint('nvm', '22.6.0')
+ *   // 'nvm install 22.6.0 && nvm use 22.6.0'
+ *
+ *   nodeManagerUpgradeHint('system', '22.6.0')
+ *   // 'Install Node 22.6.0+ from https://nodejs.org/'
+ *   ```
+ *
+ * @param manager - The detected Node version manager.
+ * @param targetVersion - Semver-shaped version, e.g. `'22.6.0'` or `'22'`.
+ */
+export declare function nodeManagerUpgradeHint(manager: NodeVersionManager, targetVersion: string): string;