@socketsecurity/lib 6.0.6 → 6.0.7

package/dist/eco/npm/yarnpkg/yarn/exec.js

@@ -38,9 +38,9 @@ const yarnInstallLikeCommands = new require_primordials_map_set.SetCtor([
 *   ```
 */
 function execYarn(args, options) {
-	const useDebug = /* @__PURE__ */ require_debug_namespace.isDebug();
+	const useDebug = require_debug_namespace.isDebug();
 	const terminatorPos = require_primordials_array.ArrayPrototypeIndexOf(args, "--");
-	const yarnArgs = (terminatorPos === -1 ? args : require_primordials_array.ArrayPrototypeSlice(args, 0, terminatorPos)).filter((a) => !/* @__PURE__ */ require_eco_npm_npm_flags.isNpmProgressFlag(a));
+	const yarnArgs = (terminatorPos === -1 ? args : require_primordials_array.ArrayPrototypeSlice(args, 0, terminatorPos)).filter((a) => !require_eco_npm_npm_flags.isNpmProgressFlag(a));
 	const otherArgs = terminatorPos === -1 ? [] : require_primordials_array.ArrayPrototypeSlice(args, terminatorPos);
 	const firstArg = yarnArgs[0];
 	/* c8 ignore start */
@@ -49,7 +49,7 @@ function execYarn(args, options) {
 	const hasIgnoreScriptsFlag = yarnArgs.some(require_eco_npm_pnpm_flags.isPnpmIgnoreScriptsFlag);
 	const ignoreScriptsArgs = !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ["--ignore-scripts"];
 	/* c8 ignore stop */
-	return /* @__PURE__ */ require_bin_exec.execBin("yarn", [
+	return require_bin_exec.execBin("yarn", [
 		...logLevelArgs,
 		...ignoreScriptsArgs,
 		...yarnArgs,

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.d.ts

@@ -22,8 +22,8 @@
  *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
  *      (parseYarnLock)
  *   4. **yarn format docs**: classic (v1):
- *      https://github.com/yarnpkg/yarn/blob/master/src/lockfile/parse.js berry
- *      (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
+ *      https://github.com/yarnpkg/yarn/blob/v1.22.22/src/lockfile/parse.js
+ *      berry (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
  *      protocols: https://yarnpkg.com/protocol/ Bug fixes implemented here (and
  *      in the native parser):
  *

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../../../../primordials/string.js');
 const require_primordials_math = require('../../../../primordials/math.js');
+const require_primordials_string = require('../../../../primordials/string.js');
 const require_primordials_array = require('../../../../primordials/array.js');
 const require_primordials_object = require('../../../../primordials/object.js');
 const require_smol_manifest = require('../../../../smol/manifest.js');
@@ -33,8 +33,8 @@ const require_eco_npm_yarnpkg_yarn_parse_yarn_descriptor = require('./parse-yarn
 *      https://github.com/CycloneDX/cdxgen/blob/v11.11.0/lib/parsers/js.js
 *      (parseYarnLock)
 *   4. **yarn format docs**: classic (v1):
-*      https://github.com/yarnpkg/yarn/blob/master/src/lockfile/parse.js berry
-*      (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
+*      https://github.com/yarnpkg/yarn/blob/v1.22.22/src/lockfile/parse.js
+*      berry (v2+): https://yarnpkg.com/configuration/yarnrc#lockfileVersion
 *      protocols: https://yarnpkg.com/protocol/ Bug fixes implemented here (and
 *      in the native parser):
 *
@@ -86,7 +86,7 @@ function consumeEntryProperties(content, startPos, entry) {
 		const eol = require_primordials_string.StringPrototypeIndexOf(content, "\n", pos);
 		const end = eol === -1 ? content.length : eol;
 		const line = require_primordials_string.StringPrototypeSlice(content, pos, end);
-		if (line.length === 0 || line[0] !== " " && line[0] !== "	") break;
+		if (line.length === 0 || line[0] !== "	" && line[0] !== " ") break;
 		const propLine = require_primordials_string.StringPrototypeTrim(line);
 		pos = end + 1;
 		if (require_primordials_string.StringPrototypeIndexOf(propLine, "version ") === 0 || require_primordials_string.StringPrototypeIndexOf(propLine, "version:") === 0) entry.version = stripQuotes(valueAfterKey(propLine, 8));
@@ -122,7 +122,7 @@ function jsParseYarnLock(content) {
 			pos = skipIndentedBlock(content, pos);
 			continue;
 		}
-		if (line[0] === " " || line[0] === "	") continue;
+		if (line[0] === "	" || line[0] === " ") continue;
 		const trimmed = require_primordials_string.StringPrototypeTrim(line);
 		if (!require_primordials_string.StringPrototypeEndsWith(trimmed, ":")) continue;
 		let header = stripQuotes(require_primordials_string.StringPrototypeTrim(require_primordials_string.StringPrototypeSlice(trimmed, 0, -1)));
@@ -182,7 +182,7 @@ function skipIndentedBlock(content, startPos) {
 		const eol = require_primordials_string.StringPrototypeIndexOf(content, "\n", pos);
 		const end = eol === -1 ? content.length : eol;
 		const line = require_primordials_string.StringPrototypeSlice(content, pos, end);
-		if (line.length === 0 || line[0] !== " " && line[0] !== "	") return pos;
+		if (line.length === 0 || line[0] !== "	" && line[0] !== " ") return pos;
 		pos = end + 1;
 	}
 	return pos;
@@ -197,8 +197,8 @@ function stripQuotes(s) {
 function valueAfterKey(line, keyLen) {
 	return require_primordials_string.StringPrototypeTrim(require_primordials_string.StringPrototypeSlice(line, keyLen));
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const parseYarnLock = _smol ? (content) => _smol.parseLockfile(content, "npm", "yarn") : jsParseYarnLock;
+const smol = require_smol_manifest.getSmolManifest();
+const parseYarnLock = smol ? (content) => smol.parseLockfile(content, "npm", "yarn") : jsParseYarnLock;
 
 //#endregion
 exports.addToYarnIndex = addToYarnIndex;

package/dist/effects/pulse-frames.d.ts

@@ -3,6 +3,8 @@
  *   animation frames using sparkles (✧ ✦) and lightning (⚡). Follows the
  *   cli-spinners format: https://github.com/sindresorhus/cli-spinners.
  */
+import type { ThemeName } from '../themes/themes';
+import type { Theme } from '../themes/types';
 export type SocketFramesOptions = {
     readonly baseColor?: readonly [number, number, number] | undefined;
     readonly interval?: number | undefined;
@@ -11,7 +13,7 @@ export type SocketFramesOptions = {
      * etc.) or a Theme object. Note: Currently frames only contain brightness
      * modifiers. Colors are applied by yocto-spinner based on spinner.color.
      */
-    readonly theme?: import('../themes/types').Theme | import('../themes/themes').ThemeName | undefined;
+    readonly theme?: Theme | ThemeName | undefined;
 };
 /**
  * Generate Socket pulse animation frames. Creates a pulsing throbber using

package/dist/effects/shimmer-keyframes.d.ts

@@ -20,7 +20,7 @@
  *   //            dur="3s" repeatCount="indefinite" />
  *   ```
  */
-import { type ShimmerSpec } from './shimmer';
+import type { ShimmerSpec } from './shimmer';
 /**
  * Keyframe track for a single character. `times[i]` is in [0, 1] and pairs with
  * `values[i]` (an `rgb(R,G,B)` string). Use directly as SMIL `<animate>`

package/dist/effects/shimmer-terminal.d.ts

@@ -23,7 +23,7 @@
  *   ```
  */
 import { ANSI_RESET } from '../ansi/constants';
-import { type RGB, type ShimmerSpec } from './shimmer';
+import type { RGB, ShimmerSpec } from './shimmer';
 /**
  * ANSI "reset all attributes" sequence. Re-exported from `../ansi` for
  * convenience so callers don't need a separate import for the canonical value.

package/dist/env/boolean.js

@@ -28,7 +28,6 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 * @returns `true` if value is '1', 'true', or 'yes' (case-insensitive), `false`
 *   otherwise.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function envAsBoolean(value, defaultValueOrOptions = false) {
 	const { defaultValue = false, trim = true } = typeof defaultValueOrOptions === "boolean" ? { defaultValue: defaultValueOrOptions } : defaultValueOrOptions ?? {};
 	if (typeof value === "string") {

package/dist/env/ci.js

@@ -23,7 +23,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns `true` if running in a CI environment, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getCI() {
 	return require_env_rewire.isInEnv("CI");
 }

package/dist/env/debug.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The debug filter string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getDebug() {
 	return require_env_rewire.getEnvValue("DEBUG");
 }

package/dist/env/github-status.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Probe githubstatus.com to detect platform degradation before making
+ *   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+ *   checks where a cryptic "operation was canceled" error would otherwise mask
+ *   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+ *   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+ *   most 8 seconds to startup (configurable timeout) and fails open on network
+ *   error so a down status page never blocks a healthy workflow.
+ */
+export type GitHubComponentStatus = 'degraded_performance' | 'major_outage' | 'operational' | 'partial_outage' | 'under_maintenance';
+export type GitHubStatusResult = {
+    /**
+     * Worst-case status across all monitored components.
+     */
+    status: GitHubComponentStatus | 'unknown';
+    /**
+     * Whether any monitored component is not fully operational.
+     */
+    degraded: boolean;
+    /**
+     * Human-readable summary, e.g. "Actions: degraded_performance".
+     */
+    summary: string;
+    /**
+     * Per-component breakdown for the monitored set.
+     */
+    components: Array<{
+        id: string;
+        name: string;
+        status: GitHubComponentStatus;
+    }>;
+};
+/**
+ * Probe githubstatus.com and return the health of GitHub Actions, Git
+ * Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+ * when the probe itself fails — so a down status page never blocks a healthy
+ * workflow.
+ *
+ * @example
+ *   ;```typescript
+ *   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+ *
+ *   const health = await probeGitHubStatus()
+ *   if (health.degraded) {
+ *   console.warn(`GitHub degraded: ${health.summary}`)
+ *   }
+ *   ```
+ *
+ * @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+ */
+export declare function probeGitHubStatus(timeoutMs?: number): Promise<GitHubStatusResult>;

package/dist/env/github-status.js

@@ -0,0 +1,90 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_http_request_node = require('../http-request/node.js');
+
+//#region src/env/github-status.ts
+/**
+* @file Probe githubstatus.com to detect platform degradation before making
+*   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+*   checks where a cryptic "operation was canceled" error would otherwise mask
+*   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+*   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+*   most 8 seconds to startup (configurable timeout) and fails open on network
+*   error so a down status page never blocks a healthy workflow.
+*/
+const MONITORED_COMPONENT_IDS = new Map([
+	["br0l2tvcx85d", "Actions"],
+	["8l4ygp009s5s", "Git Operations"],
+	["brv1bkgrwx7q", "API Requests"]
+]);
+const SEVERITY = new Map([
+	["major_outage", 4],
+	["partial_outage", 3],
+	["degraded_performance", 2],
+	["under_maintenance", 1],
+	["operational", 0]
+]);
+const STATUS_API_URL = "https://www.githubstatus.com/api/v2/components.json";
+/**
+* Probe githubstatus.com and return the health of GitHub Actions, Git
+* Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+* when the probe itself fails — so a down status page never blocks a healthy
+* workflow.
+*
+* @example
+*   ;```typescript
+*   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+*
+*   const health = await probeGitHubStatus()
+*   if (health.degraded) {
+*   console.warn(`GitHub degraded: ${health.summary}`)
+*   }
+*   ```
+*
+* @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+*/
+async function probeGitHubStatus(timeoutMs = 8e3) {
+	let body;
+	try {
+		body = await require_http_request_node.httpJson(STATUS_API_URL, { timeout: timeoutMs });
+	} catch {
+		return {
+			status: "unknown",
+			degraded: false,
+			summary: "githubstatus.com unreachable — cannot confirm GitHub health",
+			components: []
+		};
+	}
+	const allComponents = body.components ?? [];
+	const monitored = [];
+	let worstSeverity = 0;
+	let worstStatus = "operational";
+	for (const c of allComponents) {
+		const name = MONITORED_COMPONENT_IDS.get(c.id);
+		if (!name) continue;
+		const status = c.status;
+		const sev = SEVERITY.get(status) ?? 0;
+		if (sev > worstSeverity) {
+			worstSeverity = sev;
+			worstStatus = status;
+		}
+		monitored.push({
+			id: c.id,
+			name,
+			status
+		});
+	}
+	const degradedComponents = monitored.filter((c) => c.status !== "operational");
+	const degraded = degradedComponents.length > 0;
+	const summary = degraded ? degradedComponents.map((c) => `${c.name}: ${c.status}`).join(", ") : "All monitored GitHub components operational";
+	return {
+		status: worstStatus,
+		degraded,
+		summary,
+		components: monitored
+	};
+}
+
+//#endregion
+exports.probeGitHubStatus = probeGitHubStatus;

package/dist/env/github.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The GH CLI token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGhToken() {
 	return require_env_rewire.getEnvValue("GH_TOKEN");
 }
@@ -40,7 +39,6 @@ function getGhToken() {
 *
 * @returns The GitHub API URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubApiUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_API_URL");
 }
@@ -57,7 +55,6 @@ function getGithubApiUrl() {
 *
 * @returns The pull request base branch name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubBaseRef() {
 	return require_env_rewire.getEnvValue("GITHUB_BASE_REF");
 }
@@ -74,7 +71,6 @@ function getGithubBaseRef() {
 *
 * @returns The branch or tag name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRefName() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_NAME");
 }
@@ -91,7 +87,6 @@ function getGithubRefName() {
 *
 * @returns The ref type ('branch' or 'tag'), or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRefType() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_TYPE");
 }
@@ -109,7 +104,6 @@ function getGithubRefType() {
 *
 * @returns The repository name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRepository() {
 	return require_env_rewire.getEnvValue("GITHUB_REPOSITORY");
 }
@@ -127,7 +121,6 @@ function getGithubRepository() {
 *
 * @returns The GitHub server URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubServerUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_SERVER_URL");
 }
@@ -145,7 +138,6 @@ function getGithubServerUrl() {
 *
 * @returns The GitHub token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubToken() {
 	return require_env_rewire.getEnvValue("GITHUB_TOKEN");
 }

package/dist/env/home.js

@@ -32,7 +32,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The user's home directory path, or `undefined` if not resolvable
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getHome() {
 	return require_env_rewire.getEnvValue("HOME") ?? require_env_rewire.getEnvValue("USERPROFILE");
 }

package/dist/env/locale.js

@@ -21,7 +21,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The system locale string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLang() {
 	return require_env_rewire.getEnvValue("LANG");
 }
@@ -38,7 +37,6 @@ function getLang() {
 *
 * @returns The locale override string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLcAll() {
 	return require_env_rewire.getEnvValue("LC_ALL");
 }
@@ -55,7 +53,6 @@ function getLcAll() {
 *
 * @returns The messages locale string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLcMessages() {
 	return require_env_rewire.getEnvValue("LC_MESSAGES");
 }

package/dist/env/node-auth-token.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js registry auth token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNodeAuthToken() {
 	return require_env_rewire.getEnvValue("NODE_AUTH_TOKEN");
 }

package/dist/env/node-env.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js environment mode, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNodeEnv() {
 	return require_env_rewire.getEnvValue("NODE_ENV");
 }

package/dist/env/node-version-managers.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file Detect which Node version manager is active on this machine and emit a
+ *   targeted upgrade hint. Used when a tool needs Node ≥ X and wants to tell
+ *   the user the exact command to run instead of a generic "install newer Node"
+ *   line. Detection is best-effort:
+ *
+ *   1. **process.execPath** — the running Node binary's path is the most reliable
+ *      signal. `~/.nvm/versions/node/...`, `~/.volta/tools/...`, `~/.fnm/...`,
+ *      `~/.asdf/installs/nodejs/...`, `~/n/...` each have well-known directory
+ *      shapes.
+ *   2. **Environment variables** — `NVM_DIR`, `FNM_DIR`, `FNM_MULTISHELL_PATH`,
+ *      `VOLTA_HOME`, `ASDF_DIR`, `N_PREFIX`. These are set by the shell
+ *      integration each manager ships.
+ *   3. **Corepack** — Node's bundled package-manager shim. Detected via
+ *      `COREPACK_*` env vars or by the Node binary being under
+ *      `corepack/shims/`. If none match, the manager is reported as `'system'`
+ *      (Homebrew, apt, the .pkg installer, etc.) — for those, the upgrade hint
+ *      is generic. This module does NOT shell out — every probe is in-process
+ *      (env reads + path string inspection). That keeps it cheap to call and
+ *      safe for the native-messaging host context, where stdout is reserved for
+ *      the Chrome protocol.
+ */
+export type NodeVersionManager = 'asdf' | 'corepack' | 'fnm' | 'n' | 'nvm' | 'system' | 'volta';
+/**
+ * Detect the Node version manager currently providing `process.execPath`.
+ * Returns `'system'` when no manager is detected — the user is running a Node
+ * installed by the OS package manager, the official .pkg/.msi installer, or a
+ * manually placed binary.
+ *
+ * @example
+ *   ;```typescript
+ *   detectActiveNodeManager() // 'nvm' | 'fnm' | 'volta' | 'asdf' | 'n' | 'corepack' | 'system'
+ *   ```
+ */
+export declare function detectActiveNodeManager(): NodeVersionManager;
+/**
+ * Produce the exact shell command a user should run to install + activate
+ * `targetVersion` under the named manager. The command is single-line and
+ * intended to be embedded in an error message verbatim.
+ *
+ * @example
+ *   ;```typescript
+ *   nodeManagerUpgradeHint('nvm', '22.6.0')
+ *   // 'nvm install 22.6.0 && nvm use 22.6.0'
+ *
+ *   nodeManagerUpgradeHint('system', '22.6.0')
+ *   // 'Install Node 22.6.0+ from https://nodejs.org/'
+ *   ```
+ *
+ * @param manager - The detected Node version manager.
+ * @param targetVersion - Semver-shaped version, e.g. `'22.6.0'` or `'22'`.
+ */
+export declare function nodeManagerUpgradeHint(manager: NodeVersionManager, targetVersion: string): string;

package/dist/env/node-version-managers.js

@@ -0,0 +1,90 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_env_rewire = require('./rewire.js');
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/env/node-version-managers.ts
+/**
+* @file Detect which Node version manager is active on this machine and emit a
+*   targeted upgrade hint. Used when a tool needs Node ≥ X and wants to tell
+*   the user the exact command to run instead of a generic "install newer Node"
+*   line. Detection is best-effort:
+*
+*   1. **process.execPath** — the running Node binary's path is the most reliable
+*      signal. `~/.nvm/versions/node/...`, `~/.volta/tools/...`, `~/.fnm/...`,
+*      `~/.asdf/installs/nodejs/...`, `~/n/...` each have well-known directory
+*      shapes.
+*   2. **Environment variables** — `NVM_DIR`, `FNM_DIR`, `FNM_MULTISHELL_PATH`,
+*      `VOLTA_HOME`, `ASDF_DIR`, `N_PREFIX`. These are set by the shell
+*      integration each manager ships.
+*   3. **Corepack** — Node's bundled package-manager shim. Detected via
+*      `COREPACK_*` env vars or by the Node binary being under
+*      `corepack/shims/`. If none match, the manager is reported as `'system'`
+*      (Homebrew, apt, the .pkg installer, etc.) — for those, the upgrade hint
+*      is generic. This module does NOT shell out — every probe is in-process
+*      (env reads + path string inspection). That keeps it cheap to call and
+*      safe for the native-messaging host context, where stdout is reserved for
+*      the Chrome protocol.
+*/
+/**
+* Detect the Node version manager currently providing `process.execPath`.
+* Returns `'system'` when no manager is detected — the user is running a Node
+* installed by the OS package manager, the official .pkg/.msi installer, or a
+* manually placed binary.
+*
+* @example
+*   ;```typescript
+*   detectActiveNodeManager() // 'nvm' | 'fnm' | 'volta' | 'asdf' | 'n' | 'corepack' | 'system'
+*   ```
+*/
+function detectActiveNodeManager() {
+	const exec = node_process.default.execPath;
+	if (/[/\\]\.nvm[/\\]versions[/\\]node[/\\]/.test(exec)) return "nvm";
+	if (/[/\\]\.fnm[/\\]/.test(exec) || /[/\\]fnm_multishells[/\\]/.test(exec)) return "fnm";
+	if (/[/\\]\.volta[/\\]tools[/\\]/.test(exec)) return "volta";
+	if (/[/\\]\.asdf[/\\]installs[/\\]nodejs[/\\]/.test(exec)) return "asdf";
+	if (/[/\\]n[/\\]versions[/\\]node[/\\]/.test(exec)) return "n";
+	if (/[/\\]corepack[/\\]shims[/\\]/.test(exec)) return "corepack";
+	if (require_env_rewire.getEnvValue("NVM_DIR")) return "nvm";
+	if (require_env_rewire.getEnvValue("FNM_DIR") || require_env_rewire.getEnvValue("FNM_MULTISHELL_PATH")) return "fnm";
+	if (require_env_rewire.getEnvValue("VOLTA_HOME")) return "volta";
+	if (require_env_rewire.getEnvValue("ASDF_DIR")) return "asdf";
+	if (require_env_rewire.getEnvValue("N_PREFIX")) return "n";
+	if (require_env_rewire.getEnvValue("COREPACK_HOME")) return "corepack";
+	return "system";
+}
+/**
+* Produce the exact shell command a user should run to install + activate
+* `targetVersion` under the named manager. The command is single-line and
+* intended to be embedded in an error message verbatim.
+*
+* @example
+*   ;```typescript
+*   nodeManagerUpgradeHint('nvm', '22.6.0')
+*   // 'nvm install 22.6.0 && nvm use 22.6.0'
+*
+*   nodeManagerUpgradeHint('system', '22.6.0')
+*   // 'Install Node 22.6.0+ from https://nodejs.org/'
+*   ```
+*
+* @param manager - The detected Node version manager.
+* @param targetVersion - Semver-shaped version, e.g. `'22.6.0'` or `'22'`.
+*/
+function nodeManagerUpgradeHint(manager, targetVersion) {
+	switch (manager) {
+		case "asdf": return `asdf install nodejs ${targetVersion} && asdf global nodejs ${targetVersion}`;
+		case "corepack": return `Corepack manages package managers, not Node. Install Node ${targetVersion}+ via nvm/fnm/volta or from https://nodejs.org/`;
+		case "fnm": return `fnm install ${targetVersion} && fnm use ${targetVersion}`;
+		case "n": return `n ${targetVersion}`;
+		case "nvm": return `nvm install ${targetVersion} && nvm use ${targetVersion}`;
+		case "volta": return `volta install node@${targetVersion}`;
+		default: return `Install Node ${targetVersion}+ from https://nodejs.org/`;
+	}
+}
+
+//#endregion
+exports.detectActiveNodeManager = detectActiveNodeManager;
+exports.nodeManagerUpgradeHint = nodeManagerUpgradeHint;

package/dist/env/npm.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The configured NPM registry URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmConfigRegistry() {
 	return require_env_rewire.getEnvValue("npm_config_registry");
 }
@@ -40,7 +39,6 @@ function getNpmConfigRegistry() {
 *
 * @returns The package manager user agent string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmConfigUserAgent() {
 	return require_env_rewire.getEnvValue("npm_config_user_agent");
 }
@@ -58,7 +56,6 @@ function getNpmConfigUserAgent() {
 *
 * @returns The current lifecycle event name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmLifecycleEvent() {
 	return require_env_rewire.getEnvValue("npm_lifecycle_event");
 }
@@ -75,7 +72,6 @@ function getNpmLifecycleEvent() {
 *
 * @returns The NPM registry URL override, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmRegistry() {
 	return require_env_rewire.getEnvValue("NPM_REGISTRY");
 }
@@ -92,7 +88,6 @@ function getNpmRegistry() {
 *
 * @returns The NPM auth token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmToken() {
 	return require_env_rewire.getEnvValue("NPM_TOKEN");
 }

package/dist/env/number.js

@@ -31,7 +31,6 @@ const require_primordials_number = require('../primordials/number.js');
 *
 * @returns The parsed number, or the default value if parsing fails
 */
-/*@__NO_SIDE_EFFECTS__*/
 function envAsNumber(value, defaultValueOrOptions = 0) {
 	const { allowInfinity = false, defaultValue = 0, mode = "int" } = typeof defaultValueOrOptions === "number" ? { defaultValue: defaultValueOrOptions } : defaultValueOrOptions ?? {};
 	if (value === void 0 || value === null) return defaultValue;

package/dist/env/package-manager.js

@@ -37,11 +37,10 @@ node_process = require_runtime.__toESM(node_process);
 *
 * @returns The detected package manager or null if unable to determine
 */
-/*@__NO_SIDE_EFFECTS__*/
 function detectPackageManager() {
-	const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
+	const userAgent = getPackageManagerUserAgent();
 	if (userAgent) {
-		const match = userAgent.match(/^(npm|pnpm|yarn|bun)\//);
+		const match = userAgent.match(/^(bun|npm|pnpm|yarn)\//);
 		if (match) return match[1];
 	}
 	/* c8 ignore start - argv0-based PM fallback only fires when
@@ -67,9 +66,8 @@ function detectPackageManager() {
 *
 * @returns Object with name and version, or null if not available
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPackageManagerInfo() {
-	const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
+	const userAgent = getPackageManagerUserAgent();
 	if (!userAgent) return;
 	const match = userAgent.match(/^([^/]+)\/([^\s]+)/);
 	if (match?.[1] && match[2]) return {
@@ -91,7 +89,6 @@ function getPackageManagerInfo() {
 *
 * @returns The user agent string or undefined
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPackageManagerUserAgent() {
 	return require_env_rewire.getEnvValue("npm_config_user_agent");
 }

package/dist/env/path.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The system executable search paths, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPath() {
 	return require_env_rewire.getEnvValue("PATH");
 }

package/dist/env/pre-commit.js

@@ -24,9 +24,8 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns `true` if running in a pre-commit hook, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPreCommit() {
-	return /* @__PURE__ */ require_env_boolean.envAsBoolean(require_env_rewire.getEnvValue("PRE_COMMIT"));
+	return require_env_boolean.envAsBoolean(require_env_rewire.getEnvValue("PRE_COMMIT"));
 }
 
 //#endregion