@socketsecurity/lib 6.0.6 → 6.0.7

package/dist/compression/brotli.d.ts

@@ -6,28 +6,18 @@
  *   compressBrotliFile('input.json', 'input.json.br')
  *   readable.pipe(createBrotliCompressor()).pipe(writable)
  */
-import { Buffer } from 'node:buffer';
-import { type BrotliOptions } from 'node:zlib';
+import type { Buffer } from 'node:buffer';
+import type { BrotliOptions } from 'node:zlib';
 import type { CompressFileOptions, CompressOptions } from './types';
+export declare const BROTLI_EXTS: ReadonlySet<string>;
 interface ResolvedBrotliOptions extends BrotliOptions {
     params: NonNullable<BrotliOptions['params']>;
 }
-/**
- * Translate `CompressOptions` into the `BrotliOptions` zlib expects. Defaults
- * `quality` to 11 (max) when not provided, and forwards a positive `size` hint.
- * Exposed for callers building their own zlib pipelines and for unit-test
- * coverage.
- */
-export declare function resolveBrotliOptions(options: CompressOptions | undefined): ResolvedBrotliOptions;
 /**
  * Compress a string or Buffer with brotli. Strings are encoded as UTF-8 before
  * compression — pass an explicit Buffer if you have non-UTF-8 input.
  */
 export declare function compressBrotli(input: string | Buffer, options?: CompressOptions | undefined): Promise<Buffer>;
-/**
- * Decompress a brotli-compressed Buffer.
- */
-export declare function decompressBrotli(input: Buffer): Promise<Buffer>;
 /**
  * Stream-compress a file with brotli. Two call shapes:
  *
@@ -42,6 +32,20 @@ export declare function decompressBrotli(input: Buffer): Promise<Buffer>;
  */
 export declare function compressBrotliFile(srcPath: string, destPath: string, options?: CompressOptions | undefined): Promise<string>;
 export declare function compressBrotliFile(srcPath: string, options: CompressFileOptions): Promise<string>;
+/**
+ * Create a brotli compress transform stream. Compose into your own pipeline.
+ * The `pipeline` from `node:stream/promises` is the safe way to wire it up — it
+ * handles error propagation across all stages.
+ */
+export declare function createBrotliCompressor(options?: CompressOptions | undefined): import("zlib").BrotliCompress;
+/**
+ * Create a brotli decompress transform stream.
+ */
+export declare function createBrotliDecompressor(): import("zlib").BrotliDecompress;
+/**
+ * Decompress a brotli-compressed Buffer.
+ */
+export declare function decompressBrotli(input: Buffer): Promise<Buffer>;
 /**
  * Stream-decompress a brotli file. Two call shapes:
  *
@@ -57,15 +61,10 @@ export declare function compressBrotliFile(srcPath: string, options: CompressFil
 export declare function decompressBrotliFile(srcPath: string, destPath: string): Promise<string>;
 export declare function decompressBrotliFile(srcPath: string, options: CompressFileOptions): Promise<string>;
 /**
- * Create a brotli compress transform stream. Compose into your own pipeline.
- * The `pipeline` from `node:stream/promises` is the safe way to wire it up — it
- * handles error propagation across all stages.
- */
-export declare function createBrotliCompressor(options?: CompressOptions | undefined): import("zlib").BrotliCompress;
-/**
- * Create a brotli decompress transform stream.
+ * Extension check for brotli paths — matches `.br` / `.brotli`
+ * (case-insensitive). Naming follows node:path's `extname`.
  */
-export declare function createBrotliDecompressor(): import("zlib").BrotliDecompress;
+export declare function hasBrotliExt(filePath: string): boolean;
 /**
  * Cheap pre-flight check: does the buffer look like it could be brotli? Returns
  * false for inputs too short to be valid. Brotli has no fixed magic bytes, so
@@ -73,10 +72,11 @@ export declare function createBrotliDecompressor(): import("zlib").BrotliDecompr
  * `decompressBrotli(buf)` succeeding. Use for UI hints, not correctness.
  */
 export declare function isBrotliCompressed(input: Buffer): boolean;
-export declare const BROTLI_EXTS: ReadonlySet<string>;
 /**
- * Extension check for brotli paths — matches `.br` / `.brotli`
- * (case-insensitive). Naming follows node:path's `extname`.
+ * Translate `CompressOptions` into the `BrotliOptions` zlib expects. Defaults
+ * `quality` to 11 (max) when not provided, and forwards a positive `size` hint.
+ * Exposed for callers building their own zlib pipelines and for unit-test
+ * coverage.
  */
-export declare function hasBrotliExt(filePath: string): boolean;
+export declare function resolveBrotliOptions(options: CompressOptions | undefined): ResolvedBrotliOptions;
 export {};

package/dist/compression/brotli.js

@@ -18,18 +18,8 @@ let node_zlib = require("node:zlib");
 //#region src/compression/brotli.ts
 const brotliCompressAsync = (0, node_util.promisify)(node_zlib.brotliCompress);
 const brotliDecompressAsync = (0, node_util.promisify)(node_zlib.brotliDecompress);
-/**
-* Translate `CompressOptions` into the `BrotliOptions` zlib expects. Defaults
-* `quality` to 11 (max) when not provided, and forwards a positive `size` hint.
-* Exposed for callers building their own zlib pipelines and for unit-test
-* coverage.
-*/
-function resolveBrotliOptions(options) {
-	const level = options?.level ?? 11;
-	const params = { [node_zlib.constants.BROTLI_PARAM_QUALITY]: level };
-	if (options?.size !== void 0 && options.size > 0) params[node_zlib.constants.BROTLI_PARAM_SIZE_HINT] = options.size;
-	return { params };
-}
+const BROTLI_MIN_LEN = 4;
+const BROTLI_EXTS = new require_primordials_map_set.SetCtor([".br", ".brotli"]);
 /**
 * Compress a string or Buffer with brotli. Strings are encoded as UTF-8 before
 * compression — pass an explicit Buffer if you have non-UTF-8 input.
@@ -40,27 +30,12 @@ async function compressBrotli(input, options) {
 	if (opts.params[node_zlib.constants.BROTLI_PARAM_SIZE_HINT] === void 0) opts.params[node_zlib.constants.BROTLI_PARAM_SIZE_HINT] = buf.byteLength;
 	return await brotliCompressAsync(buf, opts);
 }
-/**
-* Decompress a brotli-compressed Buffer.
-*/
-async function decompressBrotli(input) {
-	return await brotliDecompressAsync(input);
-}
 async function compressBrotliFile(srcPath, destOrOptions, maybeOptions) {
 	const { destPath, options, inPlace } = require_compression__internal.resolveFileArgs("compressBrotliFile", srcPath, destOrOptions, maybeOptions, (p) => `${p}.br`);
 	await (0, node_stream_promises.pipeline)((0, node_fs.createReadStream)(srcPath), (0, node_zlib.createBrotliCompress)(resolveBrotliOptions(options)), (0, node_fs.createWriteStream)(destPath));
 	if (inPlace) await require_fs_safe.safeDelete(srcPath);
 	return destPath;
 }
-async function decompressBrotliFile(srcPath, destOrOptions) {
-	const { destPath, inPlace } = require_compression__internal.resolveFileArgs("decompressBrotliFile", srcPath, destOrOptions, void 0, (p) => {
-		if (!hasBrotliExt(p)) throw new require_primordials_error.ErrorCtor(`decompressBrotliFile: ${p} has no .br/.brotli extension; can't infer destination`);
-		return require_compression__internal.stripExt(p, BROTLI_EXTS);
-	});
-	await (0, node_stream_promises.pipeline)((0, node_fs.createReadStream)(srcPath), (0, node_zlib.createBrotliDecompress)(), (0, node_fs.createWriteStream)(destPath));
-	if (inPlace) await require_fs_safe.safeDelete(srcPath);
-	return destPath;
-}
 /**
 * Create a brotli compress transform stream. Compose into your own pipeline.
 * The `pipeline` from `node:stream/promises` is the safe way to wire it up — it
@@ -75,7 +50,28 @@ function createBrotliCompressor(options) {
 function createBrotliDecompressor() {
 	return (0, node_zlib.createBrotliDecompress)();
 }
-const BROTLI_MIN_LEN = 4;
+/**
+* Decompress a brotli-compressed Buffer.
+*/
+async function decompressBrotli(input) {
+	return await brotliDecompressAsync(input);
+}
+async function decompressBrotliFile(srcPath, destOrOptions) {
+	const { destPath, inPlace } = require_compression__internal.resolveFileArgs("decompressBrotliFile", srcPath, destOrOptions, void 0, (p) => {
+		if (!hasBrotliExt(p)) throw new require_primordials_error.ErrorCtor(`decompressBrotliFile: ${p} has no .br/.brotli extension; can't infer destination`);
+		return require_compression__internal.stripExt(p, BROTLI_EXTS);
+	});
+	await (0, node_stream_promises.pipeline)((0, node_fs.createReadStream)(srcPath), (0, node_zlib.createBrotliDecompress)(), (0, node_fs.createWriteStream)(destPath));
+	if (inPlace) await require_fs_safe.safeDelete(srcPath);
+	return destPath;
+}
+/**
+* Extension check for brotli paths — matches `.br` / `.brotli`
+* (case-insensitive). Naming follows node:path's `extname`.
+*/
+function hasBrotliExt(filePath) {
+	return BROTLI_EXTS.has(require_primordials_string.StringPrototypeToLowerCase(node_path.default.extname(filePath)));
+}
 /**
 * Cheap pre-flight check: does the buffer look like it could be brotli? Returns
 * false for inputs too short to be valid. Brotli has no fixed magic bytes, so
@@ -85,13 +81,17 @@ const BROTLI_MIN_LEN = 4;
 function isBrotliCompressed(input) {
 	return require_primordials_buffer.BufferIsBuffer(input) && input.byteLength >= BROTLI_MIN_LEN;
 }
-const BROTLI_EXTS = new require_primordials_map_set.SetCtor([".br", ".brotli"]);
 /**
-* Extension check for brotli paths — matches `.br` / `.brotli`
-* (case-insensitive). Naming follows node:path's `extname`.
+* Translate `CompressOptions` into the `BrotliOptions` zlib expects. Defaults
+* `quality` to 11 (max) when not provided, and forwards a positive `size` hint.
+* Exposed for callers building their own zlib pipelines and for unit-test
+* coverage.
 */
-function hasBrotliExt(filePath) {
-	return BROTLI_EXTS.has(require_primordials_string.StringPrototypeToLowerCase(node_path.default.extname(filePath)));
+function resolveBrotliOptions(options) {
+	const level = options?.level ?? 11;
+	const params = { [node_zlib.constants.BROTLI_PARAM_QUALITY]: level };
+	if (options?.size !== void 0 && options.size > 0) params[node_zlib.constants.BROTLI_PARAM_SIZE_HINT] = options.size;
+	return { params };
 }
 
 //#endregion

package/dist/compression/gzip.d.ts

@@ -7,25 +7,15 @@
  *   await compressGzipFile('input.json', 'input.json.gz')
  *   readable.pipe(createGzipCompressor()).pipe(writable)
  */
-import { Buffer } from 'node:buffer';
-import { type ZlibOptions } from 'node:zlib';
+import type { Buffer } from 'node:buffer';
+import type { ZlibOptions } from 'node:zlib';
 import type { CompressFileOptions, CompressOptions } from './types';
-/**
- * Translate `CompressOptions` into the `ZlibOptions` zlib expects. Returns an
- * empty options object when no `level` is given (zlib uses its default, level
- * 6). Exposed for parity with `resolveBrotliOptions` and for unit-test
- * coverage.
- */
-export declare function resolveGzipOptions(options: CompressOptions | undefined): ZlibOptions;
+export declare const GZIP_EXTS: ReadonlySet<string>;
 /**
  * Compress a string or Buffer with gzip. Strings are encoded as UTF-8 before
  * compression. Default level is 6 (zlib default).
  */
 export declare function compressGzip(input: string | Buffer, options?: CompressOptions | undefined): Promise<Buffer>;
-/**
- * Decompress a gzip-compressed Buffer.
- */
-export declare function decompressGzip(input: Buffer): Promise<Buffer>;
 /**
  * Stream-compress a file with gzip. Two call shapes:
  *
@@ -37,6 +27,18 @@ export declare function decompressGzip(input: Buffer): Promise<Buffer>;
  */
 export declare function compressGzipFile(srcPath: string, destPath: string, options?: CompressOptions | undefined): Promise<string>;
 export declare function compressGzipFile(srcPath: string, options: CompressFileOptions): Promise<string>;
+/**
+ * Create a gzip compress transform stream.
+ */
+export declare function createGzipCompressor(options?: CompressOptions | undefined): import("zlib").Gzip;
+/**
+ * Create a gzip decompress transform stream.
+ */
+export declare function createGzipDecompressor(): import("zlib").Gunzip;
+/**
+ * Decompress a gzip-compressed Buffer.
+ */
+export declare function decompressGzip(input: Buffer): Promise<Buffer>;
 /**
  * Stream-decompress a gzip file. Two call shapes:
  *
@@ -50,21 +52,19 @@ export declare function compressGzipFile(srcPath: string, options: CompressFileO
 export declare function decompressGzipFile(srcPath: string, destPath: string): Promise<string>;
 export declare function decompressGzipFile(srcPath: string, options: CompressFileOptions): Promise<string>;
 /**
- * Create a gzip compress transform stream.
- */
-export declare function createGzipCompressor(options?: CompressOptions | undefined): import("zlib").Gzip;
-/**
- * Create a gzip decompress transform stream.
+ * Extension check for gzip paths — matches `.gz` / `.gzip` / `.tgz`
+ * (case-insensitive). Naming follows node:path's `extname`.
  */
-export declare function createGzipDecompressor(): import("zlib").Gunzip;
+export declare function hasGzipExt(filePath: string): boolean;
 /**
  * Magic-byte check for gzip. Reads the first two bytes and matches the gzip
  * spec's 0x1f 0x8b signature. Authoritative.
  */
 export declare function isGzipCompressed(input: Buffer): boolean;
-export declare const GZIP_EXTS: ReadonlySet<string>;
 /**
- * Extension check for gzip paths — matches `.gz` / `.gzip` / `.tgz`
- * (case-insensitive). Naming follows node:path's `extname`.
+ * Translate `CompressOptions` into the `ZlibOptions` zlib expects. Returns an
+ * empty options object when no `level` is given (zlib uses its default, level
+ * 6). Exposed for parity with `resolveBrotliOptions` and for unit-test
+ * coverage.
  */
-export declare function hasGzipExt(filePath: string): boolean;
+export declare function resolveGzipOptions(options: CompressOptions | undefined): ZlibOptions;

package/dist/compression/gzip.js

@@ -18,20 +18,13 @@ let node_zlib = require("node:zlib");
 //#region src/compression/gzip.ts
 const gzipAsync = (0, node_util.promisify)(node_zlib.gzip);
 const gunzipAsync = (0, node_util.promisify)(node_zlib.gunzip);
-/**
-* Translate `CompressOptions` into the `ZlibOptions` zlib expects. Returns an
-* empty options object when no `level` is given (zlib uses its default, level
-* 6). Exposed for parity with `resolveBrotliOptions` and for unit-test
-* coverage.
-*/
-function resolveGzipOptions(options) {
-	const level = options?.level;
-	if (level === void 0) return { __proto__: null };
-	return {
-		__proto__: null,
-		level
-	};
-}
+const GZIP_MAGIC_0 = 31;
+const GZIP_MAGIC_1 = 139;
+const GZIP_EXTS = new require_primordials_map_set.SetCtor([
+	".gz",
+	".gzip",
+	".tgz"
+]);
 /**
 * Compress a string or Buffer with gzip. Strings are encoded as UTF-8 before
 * compression. Default level is 6 (zlib default).
@@ -39,18 +32,30 @@ function resolveGzipOptions(options) {
 async function compressGzip(input, options) {
 	return await gzipAsync(typeof input === "string" ? require_primordials_buffer.BufferFrom(input, "utf8") : input, resolveGzipOptions(options));
 }
-/**
-* Decompress a gzip-compressed Buffer.
-*/
-async function decompressGzip(input) {
-	return await gunzipAsync(input);
-}
 async function compressGzipFile(srcPath, destOrOptions, maybeOptions) {
 	const { destPath, options, inPlace } = require_compression__internal.resolveFileArgs("compressGzipFile", srcPath, destOrOptions, maybeOptions, (p) => `${p}.gz`);
 	await (0, node_stream_promises.pipeline)((0, node_fs.createReadStream)(srcPath), (0, node_zlib.createGzip)(resolveGzipOptions(options)), (0, node_fs.createWriteStream)(destPath));
 	if (inPlace) await require_fs_safe.safeDelete(srcPath);
 	return destPath;
 }
+/**
+* Create a gzip compress transform stream.
+*/
+function createGzipCompressor(options) {
+	return (0, node_zlib.createGzip)(resolveGzipOptions(options));
+}
+/**
+* Create a gzip decompress transform stream.
+*/
+function createGzipDecompressor() {
+	return (0, node_zlib.createGunzip)();
+}
+/**
+* Decompress a gzip-compressed Buffer.
+*/
+async function decompressGzip(input) {
+	return await gunzipAsync(input);
+}
 async function decompressGzipFile(srcPath, destOrOptions) {
 	const { destPath, inPlace } = require_compression__internal.resolveFileArgs("decompressGzipFile", srcPath, destOrOptions, void 0, (p) => {
 		if (!hasGzipExt(p)) throw new require_primordials_error.ErrorCtor(`decompressGzipFile: ${p} has no .gz/.gzip/.tgz extension; can't infer destination`);
@@ -62,19 +67,12 @@ async function decompressGzipFile(srcPath, destOrOptions) {
 	return destPath;
 }
 /**
-* Create a gzip compress transform stream.
-*/
-function createGzipCompressor(options) {
-	return (0, node_zlib.createGzip)(resolveGzipOptions(options));
-}
-/**
-* Create a gzip decompress transform stream.
+* Extension check for gzip paths — matches `.gz` / `.gzip` / `.tgz`
+* (case-insensitive). Naming follows node:path's `extname`.
 */
-function createGzipDecompressor() {
-	return (0, node_zlib.createGunzip)();
+function hasGzipExt(filePath) {
+	return GZIP_EXTS.has(require_primordials_string.StringPrototypeToLowerCase(node_path.default.extname(filePath)));
 }
-const GZIP_MAGIC_0 = 31;
-const GZIP_MAGIC_1 = 139;
 /**
 * Magic-byte check for gzip. Reads the first two bytes and matches the gzip
 * spec's 0x1f 0x8b signature. Authoritative.
@@ -82,17 +80,19 @@ const GZIP_MAGIC_1 = 139;
 function isGzipCompressed(input) {
 	return require_primordials_buffer.BufferIsBuffer(input) && input.byteLength >= 2 && input[0] === GZIP_MAGIC_0 && input[1] === GZIP_MAGIC_1;
 }
-const GZIP_EXTS = new require_primordials_map_set.SetCtor([
-	".gz",
-	".gzip",
-	".tgz"
-]);
 /**
-* Extension check for gzip paths — matches `.gz` / `.gzip` / `.tgz`
-* (case-insensitive). Naming follows node:path's `extname`.
+* Translate `CompressOptions` into the `ZlibOptions` zlib expects. Returns an
+* empty options object when no `level` is given (zlib uses its default, level
+* 6). Exposed for parity with `resolveBrotliOptions` and for unit-test
+* coverage.
 */
-function hasGzipExt(filePath) {
-	return GZIP_EXTS.has(require_primordials_string.StringPrototypeToLowerCase(node_path.default.extname(filePath)));
+function resolveGzipOptions(options) {
+	const level = options?.level;
+	if (level === void 0) return { __proto__: null };
+	return {
+		__proto__: null,
+		level
+	};
 }
 
 //#endregion

package/dist/constants/agents.d.ts

@@ -9,8 +9,10 @@ export declare const YARN = "yarn";
 export declare const BUN = "bun";
 export declare const VLT = "vlt";
 export declare const NPX = "npx";
+export declare function resolveNpmBinPath(): string | undefined;
 export declare const NPM_BIN_PATH: string;
-export declare const NPM_REAL_EXEC_PATH: any;
+export declare function resolveNpmRealExecPath(): string | undefined;
+export declare const NPM_REAL_EXEC_PATH: string | undefined;
 export declare const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 export declare const YARN_BERRY = "yarn/berry";
 export declare const YARN_CLASSIC = "yarn/classic";

package/dist/constants/agents.js

@@ -17,24 +17,25 @@ const YARN = "yarn";
 const BUN = "bun";
 const VLT = "vlt";
 const NPX = "npx";
-const _npmBinPath = /*@__PURE__*/ (() => {
+function resolveNpmBinPath() {
 	try {
 		return src_external_which.default.sync("npm", { nothrow: true }) || void 0;
 	} catch {
 		return;
 	}
 	/* c8 ignore stop */
-})();
-const NPM_BIN_PATH = _npmBinPath || "npm";
-const NPM_REAL_EXEC_PATH = /*@__PURE__*/ (() => {
+}
+const npmBinPath = /*@__PURE__*/ resolveNpmBinPath();
+const NPM_BIN_PATH = npmBinPath || "npm";
+function resolveNpmRealExecPath() {
 	try {
-		/* c8 ignore start - Module-init IIFE; only reachable when
+		/* c8 ignore start - Module-init helper; only reachable when
 		which.sync returns null at module load. */
-		if (!_npmBinPath) return;
+		if (!npmBinPath) return;
 		/* c8 ignore stop */
-		const { existsSync } = /*@__PURE__*/ require("node:fs");
-		const path = /*@__PURE__*/ require("node:path");
-		const npmDir = path.dirname(_npmBinPath);
+		const { existsSync } = require("node:fs");
+		const path = require("node:path");
+		const npmDir = path.dirname(npmBinPath);
 		const nodeModulesPath = path.join(npmDir, "..", "lib", "node_modules", "npm", "lib", "cli.js");
 		if (existsSync(nodeModulesPath)) return nodeModulesPath;
 		/* c8 ignore start - Module-init fallthroughs; reached only when cli.js
@@ -44,7 +45,8 @@ const NPM_REAL_EXEC_PATH = /*@__PURE__*/ (() => {
 		return;
 	}
 	/* c8 ignore stop */
-})();
+}
+const NPM_REAL_EXEC_PATH = /*@__PURE__*/ resolveNpmRealExecPath();
 const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 const YARN_BERRY = "yarn/berry";
 const YARN_CLASSIC = "yarn/classic";
@@ -86,4 +88,6 @@ exports.YARN = YARN;
 exports.YARN_BERRY = YARN_BERRY;
 exports.YARN_CLASSIC = YARN_CLASSIC;
 exports.YARN_LOCK = YARN_LOCK;
-exports.ZPM = ZPM;
+exports.ZPM = ZPM;
+exports.resolveNpmBinPath = resolveNpmBinPath;
+exports.resolveNpmRealExecPath = resolveNpmRealExecPath;

package/dist/constants/licenses.js

@@ -12,7 +12,7 @@ const require_primordials_map_set = require('../primordials/map-set.js');
 const MIT = "MIT";
 const UNLICENCED = "UNLICENCED";
 const UNLICENSED = "UNLICENSED";
-let _copyLeftLicenses;
+let copyLeftLicenses;
 /**
 * Get the set of SPDX identifiers considered copy-left (AGPL, GPL, EPL, EUPL,
 * CC-BY-SA variants). The set is lazily built and cached on first call.
@@ -20,7 +20,7 @@ let _copyLeftLicenses;
 * @returns A `Set` of SPDX license identifier strings.
 */
 function getCopyLeftLicenses() {
-	if (_copyLeftLicenses === void 0) _copyLeftLicenses = new require_primordials_map_set.SetCtor([
+	if (copyLeftLicenses === void 0) copyLeftLicenses = new require_primordials_map_set.SetCtor([
 		"AGPL-1.0",
 		"AGPL-1.0-only",
 		"AGPL-1.0-or-later",
@@ -45,7 +45,7 @@ function getCopyLeftLicenses() {
 		"GPL-3.0-only",
 		"GPL-3.0-or-later"
 	]);
-	return _copyLeftLicenses;
+	return copyLeftLicenses;
 }
 
 //#endregion

package/dist/constants/node.d.ts

@@ -129,6 +129,29 @@ export declare function supportsNodeRequireModule(): boolean;
  *   `--run`.
  */
 export declare function supportsNodeRun(): boolean;
+/**
+ * Check whether the current runtime can execute TypeScript source directly
+ * (`.ts` files via `node foo.ts`), with or without a flag. Type-stripping went
+ * stable in Node.js 22.6 (under `--strip-types`, also accepted as the
+ * deprecated alias `--experimental-strip-types`) and default-on in Node 24.
+ *
+ * Pair with {@link supportsNodeStripTypesDefault} to decide whether a flag needs
+ * to be passed.
+ *
+ * @returns `true` when the runtime can run TypeScript (Node 22.6+).
+ */
+export declare function supportsNodeStripTypes(): boolean;
+/**
+ * Check whether the current runtime strips TypeScript types **by default** (no
+ * flag needed). Became default-on in Node.js 24.
+ *
+ * Use case: deciding whether a wrapper script needs to pass `--strip-types`
+ * when invoking `node foo.ts`. On Node 24+ the flag is redundant; on 22.6 –
+ * 23.x it's required.
+ *
+ * @returns `true` when no `--strip-types` flag is needed (Node 24+).
+ */
+export declare function supportsNodeStripTypesDefault(): boolean;
 /**
  * Check whether this process was spawned with an IPC channel. When `true`,
  * `process.send()` is callable to message the parent process.

package/dist/constants/node.js

@@ -14,10 +14,10 @@ node_process = require_runtime.__toESM(node_process);
 *   and feature-detection flags for APIs that vary across Node releases.
 */
 const NODE_VERSION = node_process.default.version;
-let _nodeDisableSigusr1Flags;
-let _nodeHardenFlags;
-let _nodeNoWarningsFlags;
-let _nodePermissionFlags;
+let nodeDisableSigusr1Flags;
+let nodeHardenFlags;
+let nodeNoWarningsFlags;
+let nodePermissionFlags;
 /**
 * Get the absolute path to the currently running Node.js binary.
 *
@@ -42,11 +42,11 @@ function getMaintainedNodeVersions() {
 * @returns A non-empty array of CLI flags suitable for passing to `node`.
 */
 function getNodeDisableSigusr1Flags() {
-	if (_nodeDisableSigusr1Flags === void 0)
+	if (nodeDisableSigusr1Flags === void 0)
  /* c8 ignore start - --no-inspect fallback fires only on Node
 	runtimes pre-v22.14 / v23.7 / v24.8; tests run on Node 24+. */
-	_nodeDisableSigusr1Flags = supportsNodeDisableSigusr1Flag() ? ["--disable-sigusr1"] : ["--no-inspect"];
-	return _nodeDisableSigusr1Flags;
+	nodeDisableSigusr1Flags = supportsNodeDisableSigusr1Flag() ? ["--disable-sigusr1"] : ["--no-inspect"];
+	return nodeDisableSigusr1Flags;
 }
 /**
 * Get the hardening flags Socket applies when spawning Node.js subprocesses.
@@ -58,7 +58,7 @@ function getNodeDisableSigusr1Flags() {
 * @returns A non-empty array of CLI flags suitable for passing to `node`.
 */
 function getNodeHardenFlags() {
-	if (_nodeHardenFlags === void 0) {
+	if (nodeHardenFlags === void 0) {
 		const major = getNodeMajorVersion();
 		const flags = ["--disable-proto=delete"];
 		if (major >= 24) {
@@ -69,9 +69,9 @@ function getNodeHardenFlags() {
 		/* c8 ignore start */
 		if (major >= 22) flags.push("--force-node-api-uncaught-exceptions-policy");
 		/* c8 ignore stop */
-		_nodeHardenFlags = flags;
+		nodeHardenFlags = flags;
 	}
-	return _nodeHardenFlags;
+	return nodeHardenFlags;
 }
 /**
 * Get the major component of the current Node.js version.
@@ -99,8 +99,8 @@ function getNodeMinorVersion() {
 * @returns A non-empty array of CLI flags suitable for passing to `node`.
 */
 function getNodeNoWarningsFlags() {
-	if (_nodeNoWarningsFlags === void 0) _nodeNoWarningsFlags = ["--no-warnings", "--no-deprecation"];
-	return _nodeNoWarningsFlags;
+	if (nodeNoWarningsFlags === void 0) nodeNoWarningsFlags = ["--no-warnings", "--no-deprecation"];
+	return nodeNoWarningsFlags;
 }
 /**
 * Get the patch component of the current Node.js version.
@@ -121,13 +121,13 @@ function getNodePatchVersion() {
 * @returns The permission flag list (possibly empty) for the current runtime.
 */
 function getNodePermissionFlags() {
-	if (_nodePermissionFlags === void 0) if (getNodeMajorVersion() >= 24) _nodePermissionFlags = [
+	if (nodePermissionFlags === void 0) if (getNodeMajorVersion() >= 24) nodePermissionFlags = [
 		"--allow-fs-read=*",
 		"--allow-fs-write=*",
 		"--allow-child-process"
 	];
-	else _nodePermissionFlags = [];
-	return _nodePermissionFlags;
+	else nodePermissionFlags = [];
+	return nodePermissionFlags;
 }
 /**
 * Get the full Node.js version string from `process.version`.
@@ -219,6 +219,36 @@ function supportsNodeRun() {
 	/* c8 ignore stop */
 }
 /**
+* Check whether the current runtime can execute TypeScript source directly
+* (`.ts` files via `node foo.ts`), with or without a flag. Type-stripping went
+* stable in Node.js 22.6 (under `--strip-types`, also accepted as the
+* deprecated alias `--experimental-strip-types`) and default-on in Node 24.
+*
+* Pair with {@link supportsNodeStripTypesDefault} to decide whether a flag needs
+* to be passed.
+*
+* @returns `true` when the runtime can run TypeScript (Node 22.6+).
+*/
+function supportsNodeStripTypes() {
+	const major = getNodeMajorVersion();
+	/* c8 ignore start - 22-specific arm; tests run on a single Node major. */
+	return major >= 23 || major === 22 && getNodeMinorVersion() >= 6;
+	/* c8 ignore stop */
+}
+/**
+* Check whether the current runtime strips TypeScript types **by default** (no
+* flag needed). Became default-on in Node.js 24.
+*
+* Use case: deciding whether a wrapper script needs to pass `--strip-types`
+* when invoking `node foo.ts`. On Node 24+ the flag is redundant; on 22.6 –
+* 23.x it's required.
+*
+* @returns `true` when no `--strip-types` flag is needed (Node 24+).
+*/
+function supportsNodeStripTypesDefault() {
+	return getNodeMajorVersion() >= 24;
+}
+/**
 * Check whether this process was spawned with an IPC channel. When `true`,
 * `process.send()` is callable to message the parent process.
 *
@@ -250,4 +280,6 @@ exports.supportsNodeDisableWarningFlag = supportsNodeDisableWarningFlag;
 exports.supportsNodePermissionFlag = supportsNodePermissionFlag;
 exports.supportsNodeRequireModule = supportsNodeRequireModule;
 exports.supportsNodeRun = supportsNodeRun;
+exports.supportsNodeStripTypes = supportsNodeStripTypes;
+exports.supportsNodeStripTypesDefault = supportsNodeStripTypesDefault;
 exports.supportsProcessSend = supportsProcessSend;