@socketsecurity/lib 6.0.5 → 6.0.7

package/dist/fs/read-file.js

@@ -34,10 +34,9 @@ const abortSignal = require_process_abort.getAbortSignal();
 *
 * @returns Promise resolving to Buffer containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function readFileBinary(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
-	return await (/* @__PURE__ */ require_node_fs.getNodeFs()).promises.readFile(filepath, {
+	return await require_node_fs.getNodeFs().promises.readFile(filepath, {
 		signal: abortSignal,
 		...opts,
 		encoding: void 0
@@ -61,10 +60,9 @@ async function readFileBinary(filepath, options) {
 *
 * @returns Buffer containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
 function readFileBinarySync(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
-	return (/* @__PURE__ */ require_node_fs.getNodeFs()).readFileSync(filepath, {
+	return require_node_fs.getNodeFs().readFileSync(filepath, {
 		...opts,
 		encoding: void 0
 	});
@@ -87,10 +85,9 @@ function readFileBinarySync(filepath, options) {
 *
 * @returns Promise resolving to string containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function readFileUtf8(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
-	return await (/* @__PURE__ */ require_node_fs.getNodeFs()).promises.readFile(filepath, {
+	return await require_node_fs.getNodeFs().promises.readFile(filepath, {
 		signal: abortSignal,
 		...opts,
 		encoding: "utf8"
@@ -115,15 +112,13 @@ async function readFileUtf8(filepath, options) {
 *
 * @returns String containing file contents
 */
-/* @__NO_SIDE_EFFECTS__ */
 function readFileUtf8Sync(filepath, options) {
 	const opts = typeof options === "string" ? { encoding: options } : options;
-	return (/* @__PURE__ */ require_node_fs.getNodeFs()).readFileSync(filepath, {
+	return require_node_fs.getNodeFs().readFileSync(filepath, {
 		...opts,
 		encoding: "utf8"
 	});
 }
-/* @__NO_SIDE_EFFECTS__ */
 async function safeReadFile(filepath, options) {
 	const { defaultValue, ...rawReadOpts } = typeof options === "string" ? {
 		__proto__: null,
@@ -138,8 +133,8 @@ async function safeReadFile(filepath, options) {
 	};
 	const shouldReturnBuffer = readOpts.encoding === null;
 	/* c8 ignore next 3 */
-	const encoding = shouldReturnBuffer ? void 0 : /* @__PURE__ */ require_fs_encoding.normalizeEncoding(readOpts.encoding);
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const encoding = shouldReturnBuffer ? void 0 : require_fs_encoding.normalizeEncoding(readOpts.encoding);
+	const fs = require_node_fs.getNodeFs();
 	try {
 		return await fs.promises.readFile(filepath, {
 			__proto__: null,
@@ -152,7 +147,6 @@ async function safeReadFile(filepath, options) {
 	if (shouldReturnBuffer) return require_primordials_buffer.BufferIsBuffer(defaultValue) ? defaultValue : void 0;
 	return typeof defaultValue === "string" ? defaultValue : String(defaultValue);
 }
-/* @__NO_SIDE_EFFECTS__ */
 function safeReadFileSync(filepath, options) {
 	const { defaultValue, ...rawReadOpts } = typeof options === "string" ? {
 		__proto__: null,
@@ -167,8 +161,8 @@ function safeReadFileSync(filepath, options) {
 	};
 	const shouldReturnBuffer = readOpts.encoding === null;
 	/* c8 ignore next 3 */
-	const encoding = shouldReturnBuffer ? void 0 : /* @__PURE__ */ require_fs_encoding.normalizeEncoding(readOpts.encoding);
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const encoding = shouldReturnBuffer ? void 0 : require_fs_encoding.normalizeEncoding(readOpts.encoding);
+	const fs = require_node_fs.getNodeFs();
 	try {
 		return fs.readFileSync(filepath, {
 			__proto__: null,

package/dist/fs/read-json-cache.d.ts

@@ -5,10 +5,12 @@
  *
  *   - Stat-validated keys: a `stat()` call before serving a cache hit ensures the
  *     file hasn't changed (mtime + size mismatch ⇒ cache miss, re-read).
- *   - Defensive clone on hit: every hit returns `structuredClone(parsed)` so
- *     callers can mutate the returned object without poisoning the cache for
- *     the next reader. The clone cost is far less than re-read + re-parse for
- *     anything bigger than a trivial JSON document.
+ *   - Defensive clone on hit: every hit returns a JSON round-trip clone
+ *     (`JSON.parse(JSON.stringify(parsed))`) so callers can mutate the returned
+ *     object without poisoning the cache for the next reader. The clone cost is
+ *     far less than re-read + re-parse for anything bigger than a trivial JSON
+ *     document, and the round-trip is faster than `structuredClone` over the
+ *     JSON subset these values always belong to.
  *   - Reviver opt-out: when the caller passes a `reviver` function, we skip the
  *     cache. Function identity isn't safely hashable across boundaries, and the
  *     reviver can produce a different shape from the same bytes.

package/dist/fs/read-json-cache.js

@@ -6,6 +6,7 @@ const require_primordials_error = require('../primordials/error.js');
 const require_primordials_number = require('../primordials/number.js');
 const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_date = require('../primordials/date.js');
+const require_primordials_json = require('../primordials/json.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
 
@@ -17,10 +18,12 @@ node_process = require_runtime.__toESM(node_process);
 *
 *   - Stat-validated keys: a `stat()` call before serving a cache hit ensures the
 *     file hasn't changed (mtime + size mismatch ⇒ cache miss, re-read).
-*   - Defensive clone on hit: every hit returns `structuredClone(parsed)` so
-*     callers can mutate the returned object without poisoning the cache for
-*     the next reader. The clone cost is far less than re-read + re-parse for
-*     anything bigger than a trivial JSON document.
+*   - Defensive clone on hit: every hit returns a JSON round-trip clone
+*     (`JSON.parse(JSON.stringify(parsed))`) so callers can mutate the returned
+*     object without poisoning the cache for the next reader. The clone cost is
+*     far less than re-read + re-parse for anything bigger than a trivial JSON
+*     document, and the round-trip is faster than `structuredClone` over the
+*     JSON subset these values always belong to.
 *   - Reviver opt-out: when the caller passes a `reviver` function, we skip the
 *     cache. Function identity isn't safely hashable across boundaries, and the
 *     reviver can produce a different shape from the same bytes.
@@ -85,7 +88,7 @@ function getCachedJson(key, ino, size, mtimeMs) {
 		return;
 	}
 	hits += 1;
-	return structuredClone(entry.parsed);
+	return require_primordials_json.JSONParse(require_primordials_json.JSONStringify(entry.parsed));
 }
 /**
 * Snapshot diagnostics. Useful for tests and for tooling that wants to log
@@ -131,7 +134,7 @@ function setCachedJson(key, ino, size, mtimeMs, parsed) {
 		ino,
 		size,
 		mtimeMs,
-		parsed: structuredClone(parsed),
+		parsed: require_primordials_json.JSONParse(require_primordials_json.JSONStringify(parsed)),
 		insertedAt: require_primordials_date.DateNow()
 	});
 }

package/dist/fs/read-json.js

@@ -49,7 +49,6 @@ const require_json_parse = require('../json/parse.js');
 * @returns Promise resolving to parsed JSON value, or undefined if throws is
 *   false and an error occurs.
 */
-/* @__NO_SIDE_EFFECTS__ */
 async function readJson(filepath, options) {
 	const { cache, reviver, throws, ...fsOptions } = {
 		__proto__: null,
@@ -57,7 +56,7 @@ async function readJson(filepath, options) {
 	};
 	const shouldThrow = throws === void 0 || !!throws;
 	const cacheEnabled = cache !== false && reviver === void 0;
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	const pathStr = String(filepath);
 	if (cacheEnabled) try {
 		const stat = await fs.promises.stat(filepath);
@@ -82,7 +81,7 @@ async function readJson(filepath, options) {
 		}
 		return;
 	}
-	const parsed = /* @__PURE__ */ require_json_parse.parseJson(content, {
+	const parsed = require_json_parse.parseJson(content, {
 		filepath: pathStr,
 		reviver,
 		throws: shouldThrow
@@ -123,7 +122,6 @@ async function readJson(filepath, options) {
 * @returns Parsed JSON value, or undefined if throws is false and an error
 *   occurs.
 */
-/* @__NO_SIDE_EFFECTS__ */
 function readJsonSync(filepath, options) {
 	const { cache, reviver, throws, ...fsOptions } = {
 		__proto__: null,
@@ -131,7 +129,7 @@ function readJsonSync(filepath, options) {
 	};
 	const shouldThrow = throws === void 0 || !!throws;
 	const cacheEnabled = cache !== false && reviver === void 0;
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	const pathStr = String(filepath);
 	if (cacheEnabled) try {
 		const stat = fs.statSync(filepath);
@@ -156,7 +154,7 @@ function readJsonSync(filepath, options) {
 		}
 		return;
 	}
-	const parsed = /* @__PURE__ */ require_json_parse.parseJson(content, {
+	const parsed = require_json_parse.parseJson(content, {
 		filepath: pathStr,
 		reviver,
 		throws: shouldThrow

package/dist/fs/resolve-module.js

@@ -22,7 +22,7 @@ function requireResolveFrom(fromDir, specifier, options) {
 		__proto__: null,
 		...options
 	};
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const anchor = path.join(path.resolve(fromDir), "noop.js");
 	try {
 		return (0, node_module.createRequire)(anchor).resolve(specifier);

package/dist/fs/safe.d.ts

@@ -5,7 +5,7 @@
  *   true`. The mkdir helpers default to `recursive: true` and swallow `EEXIST`
  *   so concurrent callers don't race-condition each other.
  */
-import './path-cache';
+import './allowed-dirs-cache';
 import type { MakeDirectoryOptions, PathLike } from 'node:fs';
 import type { deleteAsync as deleteAsyncType, deleteSync as deleteSyncType } from '../external/del';
 import type { RemoveOptions } from './types';

package/dist/fs/safe.js

@@ -28,11 +28,10 @@ const defaultRemoveOptions = require_objects_mutate.objectFreeze({
 	recursive: true,
 	retryDelay: 200
 });
-let _del;
-/* @__NO_SIDE_EFFECTS__ */
+let delModule;
 function getDel() {
-	if (_del === void 0) _del = /* @__PURE__ */ require("../external/del");
-	return _del;
+	if (delModule === void 0) delModule = /*@__PURE__*/ require("../external/del");
+	return delModule;
 }
 /**
 * Safely delete a file or directory asynchronously with built-in protections.
@@ -75,11 +74,11 @@ async function safeDelete(filepath, options) {
 		__proto__: null,
 		...options
 	};
-	const patterns = require_arrays_predicates.isArray(filepath) ? filepath.map(require_paths__internal.pathLikeToString) : [/* @__PURE__ */ require_paths__internal.pathLikeToString(filepath)];
+	const patterns = require_arrays_predicates.isArray(filepath) ? filepath.map(require_paths__internal.pathLikeToString) : [require_paths__internal.pathLikeToString(filepath)];
 	/* c8 ignore start */
 	let shouldForce = opts.force !== false;
 	if (!shouldForce && patterns.length > 0) {
-		const path = /* @__PURE__ */ require_node_path.getNodePath();
+		const path = require_node_path.getNodePath();
 		const allowedDirs = require_fs__internal.getAllowedDirectories();
 		if (patterns.every((pattern) => {
 			const resolvedPath = path.resolve(pattern);
@@ -95,8 +94,8 @@ async function safeDelete(filepath, options) {
 	const maxRetries = opts.maxRetries ?? defaultRemoveOptions.maxRetries;
 	const retryDelay = opts.retryDelay ?? defaultRemoveOptions.retryDelay;
 	/* c8 ignore start - External del call */
-	const del = /* @__PURE__ */ getDel();
-	await /* @__PURE__ */ require_promises_retry.pRetry(async () => {
+	const del = getDel();
+	await require_promises_retry.pRetry(async () => {
 		await del.deleteAsync(patterns, {
 			dryRun: false,
 			force: shouldForce,
@@ -151,11 +150,11 @@ function safeDeleteSync(filepath, options) {
 		__proto__: null,
 		...options
 	};
-	const patterns = require_arrays_predicates.isArray(filepath) ? filepath.map(require_paths__internal.pathLikeToString) : [/* @__PURE__ */ require_paths__internal.pathLikeToString(filepath)];
+	const patterns = require_arrays_predicates.isArray(filepath) ? filepath.map(require_paths__internal.pathLikeToString) : [require_paths__internal.pathLikeToString(filepath)];
 	/* c8 ignore start */
 	let shouldForce = opts.force !== false;
 	if (!shouldForce && patterns.length > 0) {
-		const path = /* @__PURE__ */ require_node_path.getNodePath();
+		const path = require_node_path.getNodePath();
 		const allowedDirs = require_fs__internal.getAllowedDirectories();
 		if (patterns.every((pattern) => {
 			const resolvedPath = path.resolve(pattern);
@@ -171,7 +170,7 @@ function safeDeleteSync(filepath, options) {
 	const maxRetries = opts.maxRetries ?? defaultRemoveOptions.maxRetries;
 	const retryDelay = opts.retryDelay ?? defaultRemoveOptions.retryDelay;
 	/* c8 ignore start - External del call */
-	const del = /* @__PURE__ */ getDel();
+	const del = getDel();
 	let lastError;
 	let delay = retryDelay;
 	for (let attempt = 0; attempt <= maxRetries; attempt++) try {
@@ -225,7 +224,7 @@ function safeDeleteSync(filepath, options) {
 * @returns Promise that resolves when directory is created or already exists
 */
 async function safeMkdir(path, options) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	const opts = {
 		__proto__: null,
 		recursive: true,
@@ -269,7 +268,7 @@ async function safeMkdir(path, options) {
 *   settings.
 */
 function safeMkdirSync(path, options) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	const opts = {
 		__proto__: null,
 		recursive: true,

package/dist/fs/unique.js

@@ -33,12 +33,11 @@ const require_node_path = require('../node/path.js');
 * @returns Normalized unique filepath (original if it doesn't exist, or with
 *   number suffix)
 */
-/* @__NO_SIDE_EFFECTS__ */
 function uniqueSync(filepath) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const fs = require_node_fs.getNodeFs();
+	const path = require_node_path.getNodePath();
 	const filepathStr = String(filepath);
-	if (!fs.existsSync(filepathStr)) return /* @__PURE__ */ require_paths_normalize.normalizePath(filepathStr);
+	if (!fs.existsSync(filepathStr)) return require_paths_normalize.normalizePath(filepathStr);
 	const dirname = path.dirname(filepathStr);
 	const ext = path.extname(filepathStr);
 	const basename = path.basename(filepathStr, ext);
@@ -48,7 +47,7 @@ function uniqueSync(filepath) {
 		uniquePath = path.join(dirname, `${basename}-${counter}${ext}`);
 		counter++;
 	} while (fs.existsSync(uniquePath));
-	return /* @__PURE__ */ require_paths_normalize.normalizePath(uniquePath);
+	return require_paths_normalize.normalizePath(uniquePath);
 }
 
 //#endregion

package/dist/fs/validate.js

@@ -42,11 +42,10 @@ const require_fs_access = require('./access.js');
 *
 * @returns Object with `validPaths` (readable) and `invalidPaths` (unreadable)
 */
-/* @__NO_SIDE_EFFECTS__ */
 function validateFiles(filepaths) {
 	const validPaths = [];
 	const invalidPaths = [];
-	for (const filepath of filepaths) if (/* @__PURE__ */ require_fs_access.canRead(filepath)) validPaths.push(filepath);
+	for (const filepath of filepaths) if (require_fs_access.canRead(filepath)) validPaths.push(filepath);
 	else invalidPaths.push(filepath);
 	return {
 		__proto__: null,

package/dist/fs/write-json.js

@@ -26,7 +26,6 @@ const NEWLINE_REGEX = /\n/g;
 *
 * @returns Formatted JSON string
 */
-/* @__NO_SIDE_EFFECTS__ */
 function stringify(json, EOL, finalEOL, replacer, spaces = 2) {
 	const EOF = finalEOL ? EOL : "";
 	return `${require_primordials_string.StringPrototypeReplace(require_primordials_json.JSONStringify(json, replacer, spaces), NEWLINE_REGEX, EOL)}${EOF}`;
@@ -65,8 +64,8 @@ async function writeJson(filepath, jsonContent, options) {
 		__proto__: null,
 		...typeof options === "string" ? { encoding: options } : options
 	};
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const jsonString = /* @__PURE__ */ stringify(jsonContent, EOL || "\n", finalEOL !== void 0 ? finalEOL : true, replacer, spaces);
+	const fs = require_node_fs.getNodeFs();
+	const jsonString = stringify(jsonContent, EOL || "\n", finalEOL !== void 0 ? finalEOL : true, replacer, spaces);
 	await fs.promises.writeFile(filepath, jsonString, {
 		encoding: "utf8",
 		...fsOptions,
@@ -102,8 +101,8 @@ function writeJsonSync(filepath, jsonContent, options) {
 		__proto__: null,
 		...typeof options === "string" ? { encoding: options } : options
 	};
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const jsonString = /* @__PURE__ */ stringify(jsonContent, EOL || "\n", finalEOL !== void 0 ? finalEOL : true, replacer, spaces);
+	const fs = require_node_fs.getNodeFs();
+	const jsonString = stringify(jsonContent, EOL || "\n", finalEOL !== void 0 ? finalEOL : true, replacer, spaces);
 	fs.writeFileSync(filepath, jsonString, {
 		encoding: "utf8",
 		...fsOptions,

package/dist/git/_internal.js

@@ -7,8 +7,9 @@ const require_paths_normalize = require('../paths/normalize.js');
 const require_primordials_array = require('../primordials/array.js');
 const require_primordials_map_set = require('../primordials/map-set.js');
 const require_node_path = require('../node/path.js');
-const require_primordials_object = require('../primordials/object.js');
+const require_primordials_date = require('../primordials/date.js');
 const require_primordials_json = require('../primordials/json.js');
+const require_primordials_object = require('../primordials/object.js');
 const require_bin_which = require('../bin/which.js');
 const require_ansi_strip = require('../ansi/strip.js');
 const require_process_spawn_child = require('../process/spawn/child.js');
@@ -26,11 +27,11 @@ const require_git_repo = require('./repo.js');
 const gitDiffCache = new require_primordials_map_set.MapCtor();
 const GIT_CACHE_MAX_SIZE = 100;
 const GIT_CACHE_TTL_MS = 2e3;
-let _gitPath;
+let cachedGitPath;
 function getCachedGitDiff(key) {
 	const entry = gitDiffCache.get(key);
 	if (!entry) return;
-	if (Date.now() >= entry.expiresAt) {
+	if (require_primordials_date.DateNow() >= entry.expiresAt) {
 		gitDiffCache.delete(key);
 		return;
 	}
@@ -95,12 +96,12 @@ function getGitDiffSpawnArgs(cwd) {
 */
 function getGitPath() {
 	/* c8 ignore start */
-	if (_gitPath === void 0) {
+	if (cachedGitPath === void 0) {
 		const resolved = require_bin_which.whichSync("git", { nothrow: true });
-		_gitPath = typeof resolved === "string" ? resolved : "git";
+		cachedGitPath = typeof resolved === "string" ? resolved : "git";
 	}
 	/* c8 ignore stop */
-	return _gitPath;
+	return cachedGitPath;
 }
 /**
 * Execute git diff command asynchronously and parse results.
@@ -210,17 +211,17 @@ function parseGitDiffStdout(stdout, options, spawnCwd) {
 		__proto__: null,
 		...options
 	};
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const cwd = cwdOption === defaultRoot ? defaultRoot : require_git_repo.getCachedRealpath(cwdOption);
 	const rootPath = defaultRoot;
-	let rawFiles = stdout ? (/* @__PURE__ */ require_ansi_strip.stripAnsi(stdout)).split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line) : [];
+	let rawFiles = stdout ? require_ansi_strip.stripAnsi(stdout).split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line) : [];
 	if (porcelain) rawFiles = rawFiles.map((line) => {
 		/* c8 ignore next */
 		return line.length > 3 ? require_primordials_string.StringPrototypeSubstring(line, 3) : line;
 	});
-	const files = absolute ? rawFiles.map((relPath) => /* @__PURE__ */ require_paths_normalize.normalizePath(path.join(rootPath, relPath))) : rawFiles.map((relPath) => /* @__PURE__ */ require_paths_normalize.normalizePath(relPath));
+	const files = absolute ? rawFiles.map((relPath) => require_paths_normalize.normalizePath(path.join(rootPath, relPath))) : rawFiles.map((relPath) => require_paths_normalize.normalizePath(relPath));
 	if (cwd === rootPath) return files;
-	const matcher = /* @__PURE__ */ require_globs_matcher.getGlobMatcher([`${/* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(rootPath, cwd))}/**`], {
+	const matcher = require_globs_matcher.getGlobMatcher([`${require_paths_normalize.normalizePath(path.relative(rootPath, cwd))}/**`], {
 		...matcherOptions,
 		absolute,
 		cwd: rootPath
@@ -250,7 +251,7 @@ function stableKey(value) {
 	return require_primordials_json.JSONStringify(value, (_key, val) => {
 		if (val && typeof val === "object" && !require_primordials_array.ArrayIsArray(val)) {
 			const sorted = {};
-			for (const k of require_primordials_object.ObjectKeys(val).sort()) sorted[k] = val[k];
+			for (const k of require_primordials_object.ObjectKeys(val).toSorted()) sorted[k] = val[k];
 			return sorted;
 		}
 		return val;

package/dist/git/changed.js

@@ -136,11 +136,11 @@ async function isChanged(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 	/* c8 ignore start */
 	const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-	return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+	return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 }
 /**
 * Check if a file or directory has any git changes.
@@ -182,12 +182,12 @@ function isChangedSync(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	try {
 		const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 		/* c8 ignore start */
 		const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-		return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+		return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 	} catch {
 		return false;
 	}

package/dist/git/repo.js

@@ -41,8 +41,8 @@ const gitRootCache = new require_primordials_map_set.MapCtor();
 * @returns Git repository root path, or `startPath` if not found.
 */
 function findGitRoot(startPath) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const fs = require_node_fs.getNodeFs();
+	const path = require_node_path.getNodePath();
 	/* c8 ignore start */
 	const cached = gitRootCache.get(startPath);
 	if (cached) {
@@ -75,7 +75,7 @@ function findGitRoot(startPath) {
 * realpath resolution is restricted.
 */
 function getCachedRealpath(pathname) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	const cached = realpathCache.get(pathname);
 	/* c8 ignore start */
 	if (cached) {

package/dist/git/staged.js

@@ -121,11 +121,11 @@ async function isStaged(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 	/* c8 ignore start */
 	const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-	return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+	return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 }
 /**
 * Check if a file or directory is staged for commit.
@@ -167,11 +167,11 @@ function isStagedSync(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 	/* c8 ignore start */
 	const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-	return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+	return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 }
 
 //#endregion

package/dist/git/unstaged.js

@@ -123,11 +123,11 @@ async function isUnstaged(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 	/* c8 ignore start */
 	const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-	return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+	return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 }
 /**
 * Check if a file or directory has unstaged changes.
@@ -170,11 +170,11 @@ function isUnstagedSync(pathname, options) {
 		...options,
 		absolute: false
 	});
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
+	const path = require_node_path.getNodePath();
 	const resolvedPathname = require_git_repo.getCachedRealpath(pathname);
 	/* c8 ignore start */
 	const baseCwd = options?.cwd ? require_git_repo.getCachedRealpath(options["cwd"]) : require_git_repo.getCwd();
-	return require_primordials_array.ArrayPrototypeIncludes(files, /* @__PURE__ */ require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
+	return require_primordials_array.ArrayPrototypeIncludes(files, require_paths_normalize.normalizePath(path.relative(baseCwd, resolvedPathname)));
 }
 
 //#endregion

package/dist/github/ghsa.js

@@ -8,7 +8,7 @@ const require_http_request_request = require('../http-request/request.js');
 const require_github_constants = require('./constants.js');
 const require_github_errors = require('./errors.js');
 const require_github_token = require('./token.js');
-const require_github_fetch = require('./fetch.js');
+const require_github_request = require('./request.js');
 const require_github_refs_cache = require('./refs-cache.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
@@ -111,7 +111,7 @@ async function fetchGhsaDetails(ghsaId, options) {
 	/* c8 ignore start - External GitHub API call */
 	const url = `https://api.github.com/advisories/${ghsaId}`;
 	try {
-		const data = await require_github_fetch.fetchGitHub(url, options);
+		const data = await require_github_request.fetchGitHub(url, options);
 		return {
 			ghsaId: data.ghsa_id,
 			summary: data.summary,

package/dist/github/refs-cache.d.ts

@@ -1,6 +1,6 @@
 /**
  * @file TtlCache singleton for github/refs. Split out of `github/refs.ts` for
- *   size hygiene. Owns the lazy `_githubCache` slot, the accessor
+ *   size hygiene. Owns the lazy `githubCache` slot, the accessor
  *   (`getGithubCache`), and the in-memory-only clear (`clearRefCache`). Caching
  *   strategy:
  *

package/dist/github/refs-cache.js

@@ -7,7 +7,7 @@ const require_cache_ttl_store = require('../cache/ttl/store.js');
 //#region src/github/refs-cache.ts
 /**
 * @file TtlCache singleton for github/refs. Split out of `github/refs.ts` for
-*   size hygiene. Owns the lazy `_githubCache` slot, the accessor
+*   size hygiene. Owns the lazy `githubCache` slot, the accessor
 *   (`getGithubCache`), and the in-memory-only clear (`clearRefCache`). Caching
 *   strategy:
 *
@@ -16,7 +16,7 @@ const require_cache_ttl_store = require('../cache/ttl/store.js');
 *   - Default TTL: 5 minutes
 *   - Disable everything with the `DISABLE_GITHUB_CACHE` env var
 */
-let _githubCache;
+let githubCache;
 /**
 * Clear the ref resolution cache (in-memory only). Clears the in-memory
 * memoization cache without affecting the persistent disk cache. Useful for
@@ -37,7 +37,7 @@ let _githubCache;
 * @returns Promise that resolves when cache is cleared
 */
 async function clearRefCache() {
-	if (_githubCache) await _githubCache.clear({ memoOnly: true });
+	if (githubCache) await githubCache.clear({ memoOnly: true });
 }
 /**
 * Get or create the GitHub cache instance. Lazy initializes the cache with
@@ -47,12 +47,12 @@ async function clearRefCache() {
 * @returns The singleton cache instance
 */
 function getGithubCache() {
-	if (_githubCache === void 0) _githubCache = require_cache_ttl_store.createTtlCache({
+	if (githubCache === void 0) githubCache = require_cache_ttl_store.createTtlCache({
 		memoize: true,
 		prefix: "github-refs",
 		ttl: require_github_constants.DEFAULT_CACHE_TTL_MS
 	});
-	return _githubCache;
+	return githubCache;
 }
 
 //#endregion

package/dist/github/refs-rest.js

@@ -5,7 +5,7 @@ const require_primordials_error = require('../primordials/error.js');
 const require_errors_message = require('../errors/message.js');
 const require_github_constants = require('./constants.js');
 const require_github_errors = require('./errors.js');
-const require_github_fetch = require('./fetch.js');
+const require_github_request = require('./request.js');
 const require_github_refs_graphql = require('./refs-graphql.js');
 
 //#region src/github/refs-rest.ts
@@ -38,17 +38,17 @@ async function fetchRefSha(owner, repo, ref, options) {
 		return e;
 	};
 	try {
-		const tagData = await require_github_fetch.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/git/refs/tags/${ref}`, fetchOptions);
-		if (tagData.object.type === "tag") return (await require_github_fetch.fetchGitHub(tagData.object.url, fetchOptions)).object.sha;
+		const tagData = await require_github_request.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/git/refs/tags/${ref}`, fetchOptions);
+		if (tagData.object.type === "tag") return (await require_github_request.fetchGitHub(tagData.object.url, fetchOptions)).object.sha;
 		return tagData.object.sha;
 	} catch (e) {
 		note404(e);
 		try {
-			return (await require_github_fetch.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/git/refs/heads/${ref}`, fetchOptions)).object.sha;
+			return (await require_github_request.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/git/refs/heads/${ref}`, fetchOptions)).object.sha;
 		} catch (e2) {
 			note404(e2);
 			try {
-				return (await require_github_fetch.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/commits/${ref}`, fetchOptions)).sha;
+				return (await require_github_request.fetchGitHub(`${require_github_constants.GITHUB_API_BASE_URL}/repos/${owner}/${repo}/commits/${ref}`, fetchOptions)).sha;
 			} catch (e3) {
 				note404(e3);
 				if (sawEmptyBody) {