@socketsecurity/lib 6.0.5 → 6.0.7

package/dist/external-tools/skillspector/from-path.js

@@ -0,0 +1,30 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_paths_normalize = require('../../paths/normalize.js');
+const require_bin_which = require('../../bin/which.js');
+
+//#region src/external-tools/skillspector/from-path.ts
+/**
+* @file `skillspectorFromPath()` — `which skillspector` lookup. Reports
+*   `source: 'pipx'` when the resolved path lives under a `pipx/venvs/`
+*   directory (the dev's `pipx install skillspector` path); reports `source:
+*   'path'` otherwise (a one-off binary on PATH).
+*/
+const PIPX_PATH_SEGMENT_RE = /pipx\/venvs\//;
+async function skillspectorFromPath() {
+	const resolved = await require_bin_which.which("skillspector", { nothrow: true });
+	if (typeof resolved !== "string") return;
+	const normalized = require_paths_normalize.normalizePath(resolved);
+	if (PIPX_PATH_SEGMENT_RE.test(normalized)) return {
+		path: normalized,
+		source: "pipx"
+	};
+	return {
+		path: normalized,
+		source: "path"
+	};
+}
+
+//#endregion
+exports.skillspectorFromPath = skillspectorFromPath;

package/dist/external-tools/skillspector/from-vfs.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @file `skillspectorFromVfs()` — extracts SkillSpector from the smol Node VFS
+ *   if it's bundled. Returns `undefined` when the binary doesn't carry
+ *   skillspector.
+ */
+import type { ResolvedSkillSpector } from './types';
+export declare const SKILLSPECTOR_VFS_KEY = "skillspector";
+export declare function skillspectorFromVfs(): Promise<ResolvedSkillSpector | undefined>;

package/dist/external-tools/skillspector/from-vfs.js

@@ -0,0 +1,27 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_smol_vfs = require('../../smol/vfs.js');
+
+//#region src/external-tools/skillspector/from-vfs.ts
+/**
+* @file `skillspectorFromVfs()` — extracts SkillSpector from the smol Node VFS
+*   if it's bundled. Returns `undefined` when the binary doesn't carry
+*   skillspector.
+*/
+const SKILLSPECTOR_VFS_KEY = "skillspector";
+async function skillspectorFromVfs() {
+	const vfs = require_smol_vfs.getSmolVfs();
+	if (!vfs) return;
+	/* c8 ignore start - smol Node binary only. */
+	if (!vfs.has("skillspector")) return;
+	return {
+		path: await vfs.extract(SKILLSPECTOR_VFS_KEY),
+		source: "vfs"
+	};
+	/* c8 ignore stop */
+}
+
+//#endregion
+exports.SKILLSPECTOR_VFS_KEY = SKILLSPECTOR_VFS_KEY;
+exports.skillspectorFromVfs = skillspectorFromVfs;

package/dist/external-tools/skillspector/resolve.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @file `resolveSkillSpector()` — SkillSpector resolution entry point. Tries
+ *   each source in order:
+ *
+ *   1. VFS — smol binary's embedded skillspector (if packed)
+ *   2. PATH — `which skillspector` (pipx-installed binaries land here too; the
+ *      source field distinguishes `'pipx'` vs `'path'`)
+ *   3. DLX-venv — `~/.socket/_dlx/skillspector/<sha>/` with the pinned SHA Returns
+ *      `undefined` when all enabled sources miss. Memoized per
+ *      sha+cacheDir+localOnly tuple.
+ */
+import type { ResolvedSkillSpector } from './types';
+export interface ResolveSkillSpectorOptions {
+    /**
+     * Tier-3 install spec — the pinned upstream SHA. Required when `localOnly` is
+     * unset (without a SHA, the DLX tier can't run).
+     */
+    readonly sha?: string | undefined;
+    /**
+     * Tier-3 cache override. Defaults to `~/.socket/_dlx/skillspector/<sha>`.
+     */
+    readonly cacheDir?: string | undefined;
+    /**
+     * When true, only the VFS + PATH tiers run. Use for check-mode invocations
+     * that want to fail-fast if the tool isn't already installed.
+     */
+    readonly localOnly?: boolean | undefined;
+}
+export declare function cacheKey(opts: ResolveSkillSpectorOptions): string;
+export declare function doResolveSkillSpector(opts: ResolveSkillSpectorOptions): Promise<ResolvedSkillSpector | undefined>;
+/**
+ * Memoizing wrapper around {@link doResolveSkillSpector}.
+ */
+export declare function resolveSkillSpector(opts?: ResolveSkillSpectorOptions): Promise<ResolvedSkillSpector | undefined>;

package/dist/external-tools/skillspector/resolve.js

@@ -0,0 +1,53 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
+const require_external_tools_skillspector_from_dlx = require('./from-dlx.js');
+const require_external_tools_skillspector_from_path = require('./from-path.js');
+const require_external_tools_skillspector_from_vfs = require('./from-vfs.js');
+
+//#region src/external-tools/skillspector/resolve.ts
+/**
+* @file `resolveSkillSpector()` — SkillSpector resolution entry point. Tries
+*   each source in order:
+*
+*   1. VFS — smol binary's embedded skillspector (if packed)
+*   2. PATH — `which skillspector` (pipx-installed binaries land here too; the
+*      source field distinguishes `'pipx'` vs `'path'`)
+*   3. DLX-venv — `~/.socket/_dlx/skillspector/<sha>/` with the pinned SHA Returns
+*      `undefined` when all enabled sources miss. Memoized per
+*      sha+cacheDir+localOnly tuple.
+*/
+const resolutionCache = new require_primordials_map_set.MapCtor();
+function cacheKey(opts) {
+	return `${opts.sha ?? ""}|${opts.cacheDir ?? ""}|${opts.localOnly ? "local" : "full"}`;
+}
+async function doResolveSkillSpector(opts) {
+	const fromVfs = await require_external_tools_skillspector_from_vfs.skillspectorFromVfs();
+	/* c8 ignore start - smol Node binary only. */
+	if (fromVfs) return fromVfs;
+	/* c8 ignore stop */
+	const fromPath = await require_external_tools_skillspector_from_path.skillspectorFromPath();
+	if (fromPath) return fromPath;
+	if (opts.localOnly || !opts.sha) return;
+	return require_external_tools_skillspector_from_dlx.skillspectorFromDlx({
+		sha: opts.sha,
+		cacheDir: opts.cacheDir
+	});
+}
+/**
+* Memoizing wrapper around {@link doResolveSkillSpector}.
+*/
+async function resolveSkillSpector(opts = {}) {
+	const key = cacheKey(opts);
+	const existing = resolutionCache.get(key);
+	if (existing) return existing;
+	const promise = doResolveSkillSpector(opts);
+	resolutionCache.set(key, promise);
+	return promise;
+}
+
+//#endregion
+exports.cacheKey = cacheKey;
+exports.doResolveSkillSpector = doResolveSkillSpector;
+exports.resolveSkillSpector = resolveSkillSpector;

package/dist/external-tools/skillspector/types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file Shared types for SkillSpector resolution. SkillSpector is NVIDIA's
+ *   third-party-skill scanner (sibling to AgentShield); pinned to a git SHA
+ *   because upstream has no PyPI release or GH tags as of 2026-06-01.
+ */
+export type SkillSpectorSource = 'vfs' | 'pipx' | 'path' | 'dlx';
+/**
+ * A resolved SkillSpector installation.
+ */
+export interface ResolvedSkillSpector {
+    /**
+     * Absolute path to the `skillspector` entry-point executable.
+     */
+    readonly path: string;
+    /**
+     * Which resolver tier found this.
+     *
+     * - 'vfs' — extracted from the SEA binary's VFS
+     * - 'pipx' — `which skillspector` returned a pipx-installed venv binary
+     * - 'path' — `which skillspector` returned a non-pipx binary on PATH
+     * - 'dlx' — created a venv under ~/.socket/_dlx/skillspector/<sha>/
+     */
+    readonly source: SkillSpectorSource;
+}

package/dist/external-tools/skillspector/types.js

@@ -0,0 +1,2 @@
+"use strict";
+/* Socket Lib - Built with rolldown */

package/dist/external-tools/synp/from-download.js

@@ -12,8 +12,8 @@ const require_external_tools_synp_asset_names = require('./asset-names.js');
 */
 async function synpFromDownload(opts) {
 	const { integrity, version } = opts;
-	const { binaryPath } = await require_dlx_package.downloadPackage({
-		package: require_external_tools_synp_asset_names.getSynpPackageSpec({ version }),
+	const { binaryPath } = await require_dlx_package.downloadNpmPackage({
+		spec: require_external_tools_synp_asset_names.getSynpPackageSpec({ version }),
 		binaryName: "synp",
 		...integrity ? { hash: integrity } : {}
 	});

package/dist/external-tools/synp/from-vfs.js

@@ -10,7 +10,7 @@ const require_smol_vfs = require('../../smol/vfs.js');
 */
 const SYNP_VFS_KEY = "synp";
 async function synpFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("synp")) return;

package/dist/external-tools/synp/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_synp_from_download = require('./from-download.js');
 const require_external_tools_synp_from_path = require('./from-path.js');
 const require_external_tools_synp_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_synp_from_vfs = require('./from-vfs.js');
 *      passed) Returns `undefined` if all of the enabled sources miss. Memoized
 *      per option-shape.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { integrity, version } = opts.downloadIfMissing;

package/dist/external-tools/trivy/from-vfs.js

@@ -10,7 +10,7 @@ const require_smol_vfs = require('../../smol/vfs.js');
 */
 const TRIVY_VFS_KEY = "trivy";
 async function trivyFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("trivy")) return;

package/dist/external-tools/trivy/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_trivy_from_download = require('./from-download.js');
 const require_external_tools_trivy_from_path = require('./from-path.js');
 const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
 *      is passed) Returns `undefined` if all of the enabled sources miss.
 *      Memoized per option-shape.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;

package/dist/external-tools/trivy/types.d.ts

@@ -20,5 +20,5 @@ export interface ResolvedTrivy {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }

package/dist/external-tools/trufflehog/from-vfs.js

@@ -14,7 +14,7 @@ const require_smol_vfs = require('../../smol/vfs.js');
 */
 const TRUFFLEHOG_VFS_KEY = "trufflehog";
 async function trufflehogFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("trufflehog")) return;

package/dist/external-tools/trufflehog/resolve.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
 const require_external_tools_trufflehog_from_download = require('./from-download.js');
 const require_external_tools_trufflehog_from_path = require('./from-path.js');
 const require_external_tools_trufflehog_from_vfs = require('./from-vfs.js');
@@ -16,7 +17,7 @@ const require_external_tools_trufflehog_from_vfs = require('./from-vfs.js');
 *      passed) Returns `undefined` if all of the enabled sources miss. Memoized
 *      per option-shape; same caching semantics as `resolveJre()`.
 */
-const resolutionCache = /* @__PURE__ */ new Map();
+const resolutionCache = new require_primordials_map_set.MapCtor();
 function cacheKey(opts) {
 	if (!opts?.downloadIfMissing) return "local-only";
 	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;

package/dist/external-tools/trufflehog/types.d.ts

@@ -21,5 +21,5 @@ export interface ResolvedTrufflehog {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }

package/dist/fs/_internal.d.ts

@@ -2,7 +2,7 @@
  * @file Private state shared between `fs/safe` and `fs/path-cache`. The `_`
  *   prefix keeps this module out of the generated package.json `exports` map
  *   (the `dist/**\/_*` ignore pattern in
- *   `scripts/fix/generate-package-exports.mts` filters it out), so it is not
+ *   `scripts/post-build/make-package-exports.mts` filters it out), so it is not
  *   part of the public surface — it exists only to give the two leaves above a
  *   common owner for the allowed-directory cache. The cache is invalidated by
  *   `invalidatePathCache()` in `fs/path-cache.ts` whenever paths are rewired in

package/dist/fs/_internal.js

@@ -9,36 +9,36 @@ const require_paths_socket = require('../paths/socket.js');
 * @file Private state shared between `fs/safe` and `fs/path-cache`. The `_`
 *   prefix keeps this module out of the generated package.json `exports` map
 *   (the `dist/**\/_*` ignore pattern in
-*   `scripts/fix/generate-package-exports.mts` filters it out), so it is not
+*   `scripts/post-build/make-package-exports.mts` filters it out), so it is not
 *   part of the public surface — it exists only to give the two leaves above a
 *   common owner for the allowed-directory cache. The cache is invalidated by
 *   `invalidatePathCache()` in `fs/path-cache.ts` whenever paths are rewired in
 *   tests (`paths/rewire.ts` registers `invalidatePathCache` as one of its
 *   cache callbacks); `getAllowedDirectories()` rehydrates on next call.
 */
-let _cachedAllowedDirs;
+let cachedAllowedDirs;
 /**
 * Clear the cached allowed-directories list. Used by `invalidatePathCache()`
 * when test path rewiring changes any of the underlying paths so the next read
 * picks up the new resolved values.
 */
 function clearAllowedDirectories() {
-	_cachedAllowedDirs = void 0;
+	cachedAllowedDirs = void 0;
 }
 /**
 * Get resolved allowed directories for safe deletion with lazy caching. These
 * directories are resolved once and cached for the process lifetime.
 */
 function getAllowedDirectories() {
-	if (_cachedAllowedDirs === void 0) {
-		const path = /* @__PURE__ */ require_node_path.getNodePath();
-		_cachedAllowedDirs = [
+	if (cachedAllowedDirs === void 0) {
+		const path = require_node_path.getNodePath();
+		cachedAllowedDirs = [
 			path.resolve(require_paths_socket.getOsTmpDir()),
 			path.resolve(require_paths_socket.getSocketCacacheDir()),
 			path.resolve(require_paths_socket.getSocketUserDir())
 		];
 	}
-	return _cachedAllowedDirs;
+	return cachedAllowedDirs;
 }
 
 //#endregion

package/dist/fs/access.js

@@ -23,13 +23,12 @@ const require_smol_path = require('../smol/path.js');
 *
 * @returns True if the access check succeeds.
 */
-/* @__NO_SIDE_EFFECTS__ */
 function canAccess(path, mode) {
 	/* c8 ignore start - native access arm only on socket-btm smol binaries; getSmolPath() is undefined on stock Node. */
-	const smolAccess = (/* @__PURE__ */ require_smol_path.getSmolPath())?.access;
+	const smolAccess = require_smol_path.getSmolPath()?.access;
 	if (smolAccess) return smolAccess(path, mode);
 	/* c8 ignore stop */
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
 		fs.accessSync(path, mode);
 		return true;
@@ -40,23 +39,20 @@ function canAccess(path, mode) {
 /**
 * Can the process execute `path`? (`X_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
 function canExecute(path) {
-	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.X_OK);
+	return canAccess(path, require_node_fs.getNodeFs().constants.X_OK);
 }
 /**
 * Can the process read `path`? (`R_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
 function canRead(path) {
-	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.R_OK);
+	return canAccess(path, require_node_fs.getNodeFs().constants.R_OK);
 }
 /**
 * Can the process write `path`? (`W_OK`)
 */
-/* @__NO_SIDE_EFFECTS__ */
 function canWrite(path) {
-	return /* @__PURE__ */ canAccess(path, (/* @__PURE__ */ require_node_fs.getNodeFs()).constants.W_OK);
+	return canAccess(path, require_node_fs.getNodeFs().constants.W_OK);
 }
 
 //#endregion

package/dist/fs/{path-cache.js → allowed-dirs-cache.js}

@@ -4,7 +4,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_paths_rewire = require('../paths/rewire.js');
 const require_fs__internal = require('./_internal.js');
 
-//#region src/fs/path-cache.ts
+//#region src/fs/allowed-dirs-cache.ts
 /**
 * @file Cache-invalidation entry point for the allowed-directories list used by
 *   `safeDelete` / `safeDeleteSync`. Loading this module registers

package/dist/fs/encoding.js

@@ -23,9 +23,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 *
 * @see https://github.com/nodejs/node/blob/ae62b36d442b7bf987e85ae6e0df0f02cc1bb17f/lib/internal/util.js#L247-L310
 */
-/* @__NO_SIDE_EFFECTS__ */
 function normalizeEncoding(enc) {
-	return enc == null || enc === "utf8" || enc === "utf-8" ? "utf8" : /* @__PURE__ */ normalizeEncodingSlow(enc);
+	return enc == null || enc === "utf8" || enc === "utf-8" ? "utf8" : normalizeEncodingSlow(enc);
 }
 /**
 * Move the "slow cases" to a separate function to make sure this function gets
@@ -46,11 +45,10 @@ function normalizeEncoding(enc) {
 *
 * @see https://github.com/nodejs/node/blob/ae62b36d442b7bf987e85ae6e0df0f02cc1bb17f/lib/internal/util.js#L247-L310
 */
-/* @__NO_SIDE_EFFECTS__ */
 function normalizeEncodingSlow(enc) {
 	const { length } = enc;
 	if (length === 4) {
-		if (enc === "ucs2" || enc === "UCS2") return "utf16le";
+		if (enc === "UCS2" || enc === "ucs2") return "utf16le";
 		if (enc.toLowerCase() === "ucs2") return "utf16le";
 	} else if (length === 3 && enc === "hex" || enc === "HEX" || enc.toLowerCase() === "hex") return "hex";
 	else if (length === 5) {
@@ -63,12 +61,12 @@ function normalizeEncodingSlow(enc) {
 		if (enc === "ucs-2") return "utf16le";
 	} else if (length === 6) {
 		if (enc === "base64") return "base64";
-		if (enc === "latin1" || enc === "binary") return "latin1";
+		if (enc === "binary" || enc === "latin1") return "latin1";
 		if (enc === "BASE64") return "base64";
-		if (enc === "LATIN1" || enc === "BINARY") return "latin1";
+		if (enc === "BINARY" || enc === "LATIN1") return "latin1";
 		enc = enc.toLowerCase();
 		if (enc === "base64") return "base64";
-		if (enc === "latin1" || enc === "binary") return "latin1";
+		if (enc === "binary" || enc === "latin1") return "latin1";
 	} else if (length === 7) {
 		if (enc === "utf16le" || enc === "UTF16LE" || enc.toLowerCase() === "utf16le") return "utf16le";
 	} else if (length === 8) {

package/dist/fs/{find-up.js → find.js}

@@ -12,7 +12,7 @@ const require_paths_walk = require('../paths/walk.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
 
-//#region src/fs/find-up.ts
+//#region src/fs/find.ts
 /**
 * @file Walk parent directories to locate a file or directory by name. The
 *   traversal includes the filesystem root (or the caller-supplied `stopAt`
@@ -43,7 +43,6 @@ const abortSignal = require_process_abort.getAbortSignal();
 *
 * @returns Normalized absolute path if found, undefined otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function findUp(name, options) {
 	const { cwd = node_process.default.cwd(), signal = abortSignal } = {
 		__proto__: null,
@@ -55,16 +54,16 @@ async function findUp(name, options) {
 	};
 	if (onlyDirectories) onlyFiles = false;
 	if (onlyFiles) onlyDirectories = false;
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const fs = require_node_fs.getNodeFs();
+	const path = require_node_path.getNodePath();
 	const names = require_arrays_predicates.isArray(name) ? name : [name];
 	for (const dir of require_paths_walk.walkUp(cwd)) for (const n of names) {
 		if (signal?.aborted) return;
 		const thePath = path.join(dir, n);
 		try {
 			const stats = await fs.promises.stat(thePath);
-			if (!onlyDirectories && stats.isFile()) return /* @__PURE__ */ require_paths_normalize.normalizePath(thePath);
-			if (!onlyFiles && stats.isDirectory()) return /* @__PURE__ */ require_paths_normalize.normalizePath(thePath);
+			if (!onlyDirectories && stats.isFile()) return require_paths_normalize.normalizePath(thePath);
+			if (!onlyFiles && stats.isDirectory()) return require_paths_normalize.normalizePath(thePath);
 		} catch {}
 	}
 }
@@ -94,7 +93,6 @@ async function findUp(name, options) {
 *
 * @returns Normalized absolute path if found, undefined otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 function findUpSync(name, options) {
 	const { cwd = node_process.default.cwd(), stopAt } = {
 		__proto__: null,
@@ -106,22 +104,22 @@ function findUpSync(name, options) {
 	};
 	if (onlyDirectories) onlyFiles = false;
 	if (onlyFiles) onlyDirectories = false;
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const fs = require_node_fs.getNodeFs();
+	const path = require_node_path.getNodePath();
 	const names = require_arrays_predicates.isArray(name) ? name : [name];
 	/* c8 ignore start - native findUp arm only on socket-btm smol binaries; getSmolPath() is undefined on stock Node. */
-	const smolFindUp = (/* @__PURE__ */ require_smol_path.getSmolPath())?.findUp;
+	const smolFindUp = require_smol_path.getSmolPath()?.findUp;
 	if (smolFindUp && stopAt === void 0) {
 		const found = smolFindUp(path.resolve(cwd), names, { onlyDirectories });
-		return found === void 0 ? void 0 : /* @__PURE__ */ require_paths_normalize.normalizePath(found);
+		return found === void 0 ? void 0 : require_paths_normalize.normalizePath(found);
 	}
 	/* c8 ignore stop */
 	for (const dir of require_paths_walk.walkUp(cwd, { stopAt })) for (const n of names) {
 		const thePath = path.join(dir, n);
 		try {
 			const stats = fs.statSync(thePath);
-			if (!onlyDirectories && stats.isFile()) return /* @__PURE__ */ require_paths_normalize.normalizePath(thePath);
-			if (!onlyFiles && stats.isDirectory()) return /* @__PURE__ */ require_paths_normalize.normalizePath(thePath);
+			if (!onlyDirectories && stats.isFile()) return require_paths_normalize.normalizePath(thePath);
+			if (!onlyFiles && stats.isDirectory()) return require_paths_normalize.normalizePath(thePath);
 		} catch {}
 	}
 }

package/dist/fs/inspect.js

@@ -29,9 +29,8 @@ const require_globs_matcher = require('../globs/matcher.js');
 *
 * @returns `true` if path is a directory, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function isDir(filepath) {
-	return !!(await /* @__PURE__ */ safeStat(filepath))?.isDirectory();
+	return !!(await safeStat(filepath))?.isDirectory();
 }
 /**
 * Check if a directory is empty synchronously. A directory is considered empty
@@ -52,18 +51,17 @@ async function isDir(filepath) {
 *
 * @returns `true` if directory is empty (or doesn't exist), `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isDirEmptySync(dirname, options) {
 	const { ignore = require_globs_defaults.defaultIgnore } = {
 		__proto__: null,
 		...options
 	};
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
 		const files = fs.readdirSync(dirname);
 		const { length } = files;
 		if (length === 0) return true;
-		const matcher = /* @__PURE__ */ require_globs_matcher.getGlobMatcher(ignore, { cwd: /* @__PURE__ */ require_paths__internal.pathLikeToString(dirname) });
+		const matcher = require_globs_matcher.getGlobMatcher(ignore, { cwd: require_paths__internal.pathLikeToString(dirname) });
 		let ignoredCount = 0;
 		for (let i = 0; i < length; i += 1) {
 			const file = files[i];
@@ -89,9 +87,8 @@ function isDirEmptySync(dirname, options) {
 *
 * @returns `true` if path is a directory, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isDirSync(filepath) {
-	return !!(/* @__PURE__ */ safeStatSync(filepath))?.isDirectory();
+	return !!safeStatSync(filepath)?.isDirectory();
 }
 /**
 * Check if a path is a symbolic link synchronously. Uses `lstat` to check the
@@ -108,9 +105,8 @@ function isDirSync(filepath) {
 *
 * @returns `true` if path is a symbolic link, `false` otherwise
 */
-/* @__NO_SIDE_EFFECTS__ */
 function isSymlinkSync(filepath) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
 		return fs.lstatSync(filepath).isSymbolicLink();
 	} catch {}
@@ -135,9 +131,8 @@ function isSymlinkSync(filepath) {
 *
 * @returns Promise resolving to Stats object, or undefined on error
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function safeStat(filepath) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
 		return await fs.promises.stat(filepath);
 	} catch {}
@@ -161,9 +156,8 @@ async function safeStat(filepath) {
 *
 * @returns Stats object, or undefined on error
 */
-/* @__NO_SIDE_EFFECTS__ */
 function safeStatSync(filepath) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
 		return fs.statSync(filepath, {
 			__proto__: null,

package/dist/fs/read-dir.js

@@ -24,15 +24,14 @@ const require_fs_inspect = require('./inspect.js');
 *
 * @returns Array of directory names, optionally sorted
 */
-/* @__NO_SIDE_EFFECTS__ */
 function innerReadDirNames(dirents, dirname, options) {
 	const { ignore, includeEmpty = true, sort = true } = {
 		__proto__: null,
 		...options
 	};
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
-	const names = dirents.filter((d) => d.isDirectory() && (includeEmpty || !/* @__PURE__ */ require_fs_inspect.isDirEmptySync(path.join(dirname || d.parentPath, d.name), { ignore }))).map((d) => d.name);
-	return sort ? names.sort(require_sorts_natural.naturalCompare) : names;
+	const path = require_node_path.getNodePath();
+	const names = dirents.filter((d) => d.isDirectory() && (includeEmpty || !require_fs_inspect.isDirEmptySync(path.join(dirname || d.parentPath, d.name), { ignore }))).map((d) => d.name);
+	return sort ? names.toSorted(require_sorts_natural.naturalCompare) : names;
 }
 /**
 * Read directory names asynchronously with filtering and sorting. Returns only
@@ -56,11 +55,10 @@ function innerReadDirNames(dirents, dirname, options) {
 *
 * @returns Array of directory names, empty array on error
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function readDirNames(dirname, options) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
-		return /* @__PURE__ */ innerReadDirNames(await fs.promises.readdir(dirname, {
+		return innerReadDirNames(await fs.promises.readdir(dirname, {
 			__proto__: null,
 			encoding: "utf8",
 			withFileTypes: true
@@ -90,11 +88,10 @@ async function readDirNames(dirname, options) {
 *
 * @returns Array of directory names, empty array on error
 */
-/* @__NO_SIDE_EFFECTS__ */
 function readDirNamesSync(dirname, options) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
-		return /* @__PURE__ */ innerReadDirNames(fs.readdirSync(dirname, {
+		return innerReadDirNames(fs.readdirSync(dirname, {
 			__proto__: null,
 			encoding: "utf8",
 			withFileTypes: true