@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/env/github-status.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file Probe githubstatus.com to detect platform degradation before making
+ *   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+ *   checks where a cryptic "operation was canceled" error would otherwise mask
+ *   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+ *   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+ *   most 8 seconds to startup (configurable timeout) and fails open on network
+ *   error so a down status page never blocks a healthy workflow.
+ */
+export type GitHubComponentStatus = 'degraded_performance' | 'major_outage' | 'operational' | 'partial_outage' | 'under_maintenance';
+export type GitHubStatusResult = {
+    /**
+     * Worst-case status across all monitored components.
+     */
+    status: GitHubComponentStatus | 'unknown';
+    /**
+     * Whether any monitored component is not fully operational.
+     */
+    degraded: boolean;
+    /**
+     * Human-readable summary, e.g. "Actions: degraded_performance".
+     */
+    summary: string;
+    /**
+     * Per-component breakdown for the monitored set.
+     */
+    components: Array<{
+        id: string;
+        name: string;
+        status: GitHubComponentStatus;
+    }>;
+};
+/**
+ * Probe githubstatus.com and return the health of GitHub Actions, Git
+ * Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+ * when the probe itself fails — so a down status page never blocks a healthy
+ * workflow.
+ *
+ * @example
+ *   ;```typescript
+ *   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+ *
+ *   const health = await probeGitHubStatus()
+ *   if (health.degraded) {
+ *   console.warn(`GitHub degraded: ${health.summary}`)
+ *   }
+ *   ```
+ *
+ * @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+ */
+export declare function probeGitHubStatus(timeoutMs?: number): Promise<GitHubStatusResult>;

package/dist/env/github-status.js

@@ -0,0 +1,90 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_http_request_node = require('../http-request/node.js');
+
+//#region src/env/github-status.ts
+/**
+* @file Probe githubstatus.com to detect platform degradation before making
+*   GitHub API calls. Useful in scripts, release tooling, and CI pre-flight
+*   checks where a cryptic "operation was canceled" error would otherwise mask
+*   an upstream GitHub outage. Component IDs are stable GitHub-assigned
+*   identifiers from githubstatus.com/api/v2/components.json. The probe adds at
+*   most 8 seconds to startup (configurable timeout) and fails open on network
+*   error so a down status page never blocks a healthy workflow.
+*/
+const MONITORED_COMPONENT_IDS = new Map([
+	["br0l2tvcx85d", "Actions"],
+	["8l4ygp009s5s", "Git Operations"],
+	["brv1bkgrwx7q", "API Requests"]
+]);
+const SEVERITY = new Map([
+	["major_outage", 4],
+	["partial_outage", 3],
+	["degraded_performance", 2],
+	["under_maintenance", 1],
+	["operational", 0]
+]);
+const STATUS_API_URL = "https://www.githubstatus.com/api/v2/components.json";
+/**
+* Probe githubstatus.com and return the health of GitHub Actions, Git
+* Operations, and API Requests. Fails open (returns `{ status: 'unknown' }`)
+* when the probe itself fails — so a down status page never blocks a healthy
+* workflow.
+*
+* @example
+*   ;```typescript
+*   import { probeGitHubStatus } from '@socketsecurity/lib/env/github-status'
+*
+*   const health = await probeGitHubStatus()
+*   if (health.degraded) {
+*   console.warn(`GitHub degraded: ${health.summary}`)
+*   }
+*   ```
+*
+* @param timeoutMs - Maximum milliseconds to wait for the probe. Default 8000.
+*/
+async function probeGitHubStatus(timeoutMs = 8e3) {
+	let body;
+	try {
+		body = await require_http_request_node.httpJson(STATUS_API_URL, { timeout: timeoutMs });
+	} catch {
+		return {
+			status: "unknown",
+			degraded: false,
+			summary: "githubstatus.com unreachable — cannot confirm GitHub health",
+			components: []
+		};
+	}
+	const allComponents = body.components ?? [];
+	const monitored = [];
+	let worstSeverity = 0;
+	let worstStatus = "operational";
+	for (const c of allComponents) {
+		const name = MONITORED_COMPONENT_IDS.get(c.id);
+		if (!name) continue;
+		const status = c.status;
+		const sev = SEVERITY.get(status) ?? 0;
+		if (sev > worstSeverity) {
+			worstSeverity = sev;
+			worstStatus = status;
+		}
+		monitored.push({
+			id: c.id,
+			name,
+			status
+		});
+	}
+	const degradedComponents = monitored.filter((c) => c.status !== "operational");
+	const degraded = degradedComponents.length > 0;
+	const summary = degraded ? degradedComponents.map((c) => `${c.name}: ${c.status}`).join(", ") : "All monitored GitHub components operational";
+	return {
+		status: worstStatus,
+		degraded,
+		summary,
+		components: monitored
+	};
+}
+
+//#endregion
+exports.probeGitHubStatus = probeGitHubStatus;

package/dist/env/github.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The GH CLI token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGhToken() {
 	return require_env_rewire.getEnvValue("GH_TOKEN");
 }
@@ -40,7 +39,6 @@ function getGhToken() {
 *
 * @returns The GitHub API URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubApiUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_API_URL");
 }
@@ -57,7 +55,6 @@ function getGithubApiUrl() {
 *
 * @returns The pull request base branch name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubBaseRef() {
 	return require_env_rewire.getEnvValue("GITHUB_BASE_REF");
 }
@@ -74,7 +71,6 @@ function getGithubBaseRef() {
 *
 * @returns The branch or tag name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRefName() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_NAME");
 }
@@ -91,7 +87,6 @@ function getGithubRefName() {
 *
 * @returns The ref type ('branch' or 'tag'), or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRefType() {
 	return require_env_rewire.getEnvValue("GITHUB_REF_TYPE");
 }
@@ -109,7 +104,6 @@ function getGithubRefType() {
 *
 * @returns The repository name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubRepository() {
 	return require_env_rewire.getEnvValue("GITHUB_REPOSITORY");
 }
@@ -127,7 +121,6 @@ function getGithubRepository() {
 *
 * @returns The GitHub server URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubServerUrl() {
 	return require_env_rewire.getEnvValue("GITHUB_SERVER_URL");
 }
@@ -145,7 +138,6 @@ function getGithubServerUrl() {
 *
 * @returns The GitHub token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getGithubToken() {
 	return require_env_rewire.getEnvValue("GITHUB_TOKEN");
 }

package/dist/env/home.js

@@ -32,7 +32,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The user's home directory path, or `undefined` if not resolvable
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getHome() {
 	return require_env_rewire.getEnvValue("HOME") ?? require_env_rewire.getEnvValue("USERPROFILE");
 }

package/dist/env/locale.js

@@ -21,7 +21,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The system locale string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLang() {
 	return require_env_rewire.getEnvValue("LANG");
 }
@@ -38,7 +37,6 @@ function getLang() {
 *
 * @returns The locale override string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLcAll() {
 	return require_env_rewire.getEnvValue("LC_ALL");
 }
@@ -55,7 +53,6 @@ function getLcAll() {
 *
 * @returns The messages locale string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getLcMessages() {
 	return require_env_rewire.getEnvValue("LC_MESSAGES");
 }

package/dist/env/node-auth-token.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js registry auth token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNodeAuthToken() {
 	return require_env_rewire.getEnvValue("NODE_AUTH_TOKEN");
 }

package/dist/env/node-env.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The Node.js environment mode, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNodeEnv() {
 	return require_env_rewire.getEnvValue("NODE_ENV");
 }

package/dist/env/node-version-managers.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file Detect which Node version manager is active on this machine and emit a
+ *   targeted upgrade hint. Used when a tool needs Node ≥ X and wants to tell
+ *   the user the exact command to run instead of a generic "install newer Node"
+ *   line. Detection is best-effort:
+ *
+ *   1. **process.execPath** — the running Node binary's path is the most reliable
+ *      signal. `~/.nvm/versions/node/...`, `~/.volta/tools/...`, `~/.fnm/...`,
+ *      `~/.asdf/installs/nodejs/...`, `~/n/...` each have well-known directory
+ *      shapes.
+ *   2. **Environment variables** — `NVM_DIR`, `FNM_DIR`, `FNM_MULTISHELL_PATH`,
+ *      `VOLTA_HOME`, `ASDF_DIR`, `N_PREFIX`. These are set by the shell
+ *      integration each manager ships.
+ *   3. **Corepack** — Node's bundled package-manager shim. Detected via
+ *      `COREPACK_*` env vars or by the Node binary being under
+ *      `corepack/shims/`. If none match, the manager is reported as `'system'`
+ *      (Homebrew, apt, the .pkg installer, etc.) — for those, the upgrade hint
+ *      is generic. This module does NOT shell out — every probe is in-process
+ *      (env reads + path string inspection). That keeps it cheap to call and
+ *      safe for the native-messaging host context, where stdout is reserved for
+ *      the Chrome protocol.
+ */
+export type NodeVersionManager = 'asdf' | 'corepack' | 'fnm' | 'n' | 'nvm' | 'system' | 'volta';
+/**
+ * Detect the Node version manager currently providing `process.execPath`.
+ * Returns `'system'` when no manager is detected — the user is running a Node
+ * installed by the OS package manager, the official .pkg/.msi installer, or a
+ * manually placed binary.
+ *
+ * @example
+ *   ;```typescript
+ *   detectActiveNodeManager() // 'nvm' | 'fnm' | 'volta' | 'asdf' | 'n' | 'corepack' | 'system'
+ *   ```
+ */
+export declare function detectActiveNodeManager(): NodeVersionManager;
+/**
+ * Produce the exact shell command a user should run to install + activate
+ * `targetVersion` under the named manager. The command is single-line and
+ * intended to be embedded in an error message verbatim.
+ *
+ * @example
+ *   ;```typescript
+ *   nodeManagerUpgradeHint('nvm', '22.6.0')
+ *   // 'nvm install 22.6.0 && nvm use 22.6.0'
+ *
+ *   nodeManagerUpgradeHint('system', '22.6.0')
+ *   // 'Install Node 22.6.0+ from https://nodejs.org/'
+ *   ```
+ *
+ * @param manager - The detected Node version manager.
+ * @param targetVersion - Semver-shaped version, e.g. `'22.6.0'` or `'22'`.
+ */
+export declare function nodeManagerUpgradeHint(manager: NodeVersionManager, targetVersion: string): string;

package/dist/env/node-version-managers.js

@@ -0,0 +1,90 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_env_rewire = require('./rewire.js');
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/env/node-version-managers.ts
+/**
+* @file Detect which Node version manager is active on this machine and emit a
+*   targeted upgrade hint. Used when a tool needs Node ≥ X and wants to tell
+*   the user the exact command to run instead of a generic "install newer Node"
+*   line. Detection is best-effort:
+*
+*   1. **process.execPath** — the running Node binary's path is the most reliable
+*      signal. `~/.nvm/versions/node/...`, `~/.volta/tools/...`, `~/.fnm/...`,
+*      `~/.asdf/installs/nodejs/...`, `~/n/...` each have well-known directory
+*      shapes.
+*   2. **Environment variables** — `NVM_DIR`, `FNM_DIR`, `FNM_MULTISHELL_PATH`,
+*      `VOLTA_HOME`, `ASDF_DIR`, `N_PREFIX`. These are set by the shell
+*      integration each manager ships.
+*   3. **Corepack** — Node's bundled package-manager shim. Detected via
+*      `COREPACK_*` env vars or by the Node binary being under
+*      `corepack/shims/`. If none match, the manager is reported as `'system'`
+*      (Homebrew, apt, the .pkg installer, etc.) — for those, the upgrade hint
+*      is generic. This module does NOT shell out — every probe is in-process
+*      (env reads + path string inspection). That keeps it cheap to call and
+*      safe for the native-messaging host context, where stdout is reserved for
+*      the Chrome protocol.
+*/
+/**
+* Detect the Node version manager currently providing `process.execPath`.
+* Returns `'system'` when no manager is detected — the user is running a Node
+* installed by the OS package manager, the official .pkg/.msi installer, or a
+* manually placed binary.
+*
+* @example
+*   ;```typescript
+*   detectActiveNodeManager() // 'nvm' | 'fnm' | 'volta' | 'asdf' | 'n' | 'corepack' | 'system'
+*   ```
+*/
+function detectActiveNodeManager() {
+	const exec = node_process.default.execPath;
+	if (/[/\\]\.nvm[/\\]versions[/\\]node[/\\]/.test(exec)) return "nvm";
+	if (/[/\\]\.fnm[/\\]/.test(exec) || /[/\\]fnm_multishells[/\\]/.test(exec)) return "fnm";
+	if (/[/\\]\.volta[/\\]tools[/\\]/.test(exec)) return "volta";
+	if (/[/\\]\.asdf[/\\]installs[/\\]nodejs[/\\]/.test(exec)) return "asdf";
+	if (/[/\\]n[/\\]versions[/\\]node[/\\]/.test(exec)) return "n";
+	if (/[/\\]corepack[/\\]shims[/\\]/.test(exec)) return "corepack";
+	if (require_env_rewire.getEnvValue("NVM_DIR")) return "nvm";
+	if (require_env_rewire.getEnvValue("FNM_DIR") || require_env_rewire.getEnvValue("FNM_MULTISHELL_PATH")) return "fnm";
+	if (require_env_rewire.getEnvValue("VOLTA_HOME")) return "volta";
+	if (require_env_rewire.getEnvValue("ASDF_DIR")) return "asdf";
+	if (require_env_rewire.getEnvValue("N_PREFIX")) return "n";
+	if (require_env_rewire.getEnvValue("COREPACK_HOME")) return "corepack";
+	return "system";
+}
+/**
+* Produce the exact shell command a user should run to install + activate
+* `targetVersion` under the named manager. The command is single-line and
+* intended to be embedded in an error message verbatim.
+*
+* @example
+*   ;```typescript
+*   nodeManagerUpgradeHint('nvm', '22.6.0')
+*   // 'nvm install 22.6.0 && nvm use 22.6.0'
+*
+*   nodeManagerUpgradeHint('system', '22.6.0')
+*   // 'Install Node 22.6.0+ from https://nodejs.org/'
+*   ```
+*
+* @param manager - The detected Node version manager.
+* @param targetVersion - Semver-shaped version, e.g. `'22.6.0'` or `'22'`.
+*/
+function nodeManagerUpgradeHint(manager, targetVersion) {
+	switch (manager) {
+		case "asdf": return `asdf install nodejs ${targetVersion} && asdf global nodejs ${targetVersion}`;
+		case "corepack": return `Corepack manages package managers, not Node. Install Node ${targetVersion}+ via nvm/fnm/volta or from https://nodejs.org/`;
+		case "fnm": return `fnm install ${targetVersion} && fnm use ${targetVersion}`;
+		case "n": return `n ${targetVersion}`;
+		case "nvm": return `nvm install ${targetVersion} && nvm use ${targetVersion}`;
+		case "volta": return `volta install node@${targetVersion}`;
+		default: return `Install Node ${targetVersion}+ from https://nodejs.org/`;
+	}
+}
+
+//#endregion
+exports.detectActiveNodeManager = detectActiveNodeManager;
+exports.nodeManagerUpgradeHint = nodeManagerUpgradeHint;

package/dist/env/npm.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The configured NPM registry URL, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmConfigRegistry() {
 	return require_env_rewire.getEnvValue("npm_config_registry");
 }
@@ -40,7 +39,6 @@ function getNpmConfigRegistry() {
 *
 * @returns The package manager user agent string, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmConfigUserAgent() {
 	return require_env_rewire.getEnvValue("npm_config_user_agent");
 }
@@ -58,7 +56,6 @@ function getNpmConfigUserAgent() {
 *
 * @returns The current lifecycle event name, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmLifecycleEvent() {
 	return require_env_rewire.getEnvValue("npm_lifecycle_event");
 }
@@ -75,7 +72,6 @@ function getNpmLifecycleEvent() {
 *
 * @returns The NPM registry URL override, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmRegistry() {
 	return require_env_rewire.getEnvValue("NPM_REGISTRY");
 }
@@ -92,7 +88,6 @@ function getNpmRegistry() {
 *
 * @returns The NPM auth token, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getNpmToken() {
 	return require_env_rewire.getEnvValue("NPM_TOKEN");
 }

package/dist/env/number.js

@@ -31,7 +31,6 @@ const require_primordials_number = require('../primordials/number.js');
 *
 * @returns The parsed number, or the default value if parsing fails
 */
-/*@__NO_SIDE_EFFECTS__*/
 function envAsNumber(value, defaultValueOrOptions = 0) {
 	const { allowInfinity = false, defaultValue = 0, mode = "int" } = typeof defaultValueOrOptions === "number" ? { defaultValue: defaultValueOrOptions } : defaultValueOrOptions ?? {};
 	if (value === void 0 || value === null) return defaultValue;

package/dist/env/package-manager.js

@@ -37,11 +37,10 @@ node_process = require_runtime.__toESM(node_process);
 *
 * @returns The detected package manager or null if unable to determine
 */
-/*@__NO_SIDE_EFFECTS__*/
 function detectPackageManager() {
-	const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
+	const userAgent = getPackageManagerUserAgent();
 	if (userAgent) {
-		const match = userAgent.match(/^(npm|pnpm|yarn|bun)\//);
+		const match = userAgent.match(/^(bun|npm|pnpm|yarn)\//);
 		if (match) return match[1];
 	}
 	/* c8 ignore start - argv0-based PM fallback only fires when
@@ -67,9 +66,8 @@ function detectPackageManager() {
 *
 * @returns Object with name and version, or null if not available
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPackageManagerInfo() {
-	const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
+	const userAgent = getPackageManagerUserAgent();
 	if (!userAgent) return;
 	const match = userAgent.match(/^([^/]+)\/([^\s]+)/);
 	if (match?.[1] && match[2]) return {
@@ -91,7 +89,6 @@ function getPackageManagerInfo() {
 *
 * @returns The user agent string or undefined
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPackageManagerUserAgent() {
 	return require_env_rewire.getEnvValue("npm_config_user_agent");
 }

package/dist/env/path.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The system executable search paths, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPath() {
 	return require_env_rewire.getEnvValue("PATH");
 }

package/dist/env/pre-commit.js

@@ -24,9 +24,8 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns `true` if running in a pre-commit hook, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getPreCommit() {
-	return /* @__PURE__ */ require_env_boolean.envAsBoolean(require_env_rewire.getEnvValue("PRE_COMMIT"));
+	return require_env_boolean.envAsBoolean(require_env_rewire.getEnvValue("PRE_COMMIT"));
 }
 
 //#endregion

package/dist/env/proxy.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_globals = require('../primordials/globals.js');
 const require_env_case_insensitive = require('./case-insensitive.js');
 

package/dist/env/rewire.d.ts

@@ -8,12 +8,8 @@
  *   - Compatible with vi.stubEnv() - reads from process.env as final fallback
  *   - Thread-safe for concurrent test execution
  */
-/**
- * Lazily load the async_hooks module to avoid Webpack errors.
- *
- * @private
- */
-export declare function getAsyncHooks(): typeof import('node:async_hooks');
+import type * as asyncHooksModule from 'node:async_hooks';
+export type EnvOverrides = Map<string, string | undefined>;
 /**
  * Clear a specific environment variable override.
  *
@@ -28,6 +24,12 @@ export declare function getAsyncHooks(): typeof import('node:async_hooks');
  * @param key - The environment variable name to clear.
  */
 export declare function clearEnv(key: string): void;
+/**
+ * Lazily load the async_hooks module to avoid Webpack errors.
+ *
+ * @private
+ */
+export declare function getAsyncHooks(): typeof asyncHooksModule;
 /**
  * Get an environment variable value, checking overrides first.
  *

package/dist/env/rewire.js

@@ -2,10 +2,10 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_object = require('../primordials/object.js');
 const require_objects_predicates = require('../objects/predicates.js');
 const require_env_boolean = require('./boolean.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
 
@@ -20,23 +20,13 @@ node_process = require_runtime.__toESM(node_process);
 *   - Compatible with vi.stubEnv() - reads from process.env as final fallback
 *   - Thread-safe for concurrent test execution
 */
-let _async_hooks;
-/**
-* Lazily load the async_hooks module to avoid Webpack errors.
-*
-* @private
-*/
-/*@__NO_SIDE_EFFECTS__*/
-function getAsyncHooks() {
-	if (_async_hooks === void 0) _async_hooks = /*@__PURE__*/ require("node:async_hooks");
-	return _async_hooks;
-}
-const { AsyncLocalStorage } = /* @__PURE__ */ getAsyncHooks();
+let asyncHooks;
+const { AsyncLocalStorage } = getAsyncHooks();
 const isolatedOverridesStorage = new AsyncLocalStorage();
 const sharedOverridesSymbol = Symbol.for("@socketsecurity/lib/env/rewire/test-overrides");
-const _globalThis = globalThis;
-if (/* @__PURE__ */ require_env_boolean.envAsBoolean(node_process.default.env["VITEST"]) && !_globalThis[sharedOverridesSymbol]) _globalThis[sharedOverridesSymbol] = new require_primordials_map_set.MapCtor();
-const sharedOverrides = _globalThis[sharedOverridesSymbol];
+const globalThisRef = globalThis;
+if (require_env_boolean.envAsBoolean(node_process.default.env["VITEST"]) && !globalThisRef[sharedOverridesSymbol]) globalThisRef[sharedOverridesSymbol] = new require_primordials_map_set.MapCtor();
+const sharedOverrides = globalThisRef[sharedOverridesSymbol];
 /**
 * Clear a specific environment variable override.
 *
@@ -54,6 +44,15 @@ function clearEnv(key) {
 	sharedOverrides?.delete(key);
 }
 /**
+* Lazily load the async_hooks module to avoid Webpack errors.
+*
+* @private
+*/
+function getAsyncHooks() {
+	if (asyncHooks === void 0) asyncHooks = /*@__PURE__*/ require("node:async_hooks");
+	return asyncHooks;
+}
+/**
 * Get an environment variable value, checking overrides first.
 *
 * Resolution order: 1. Isolated overrides (temporary - set via
@@ -116,7 +115,7 @@ function hasOverride(key) {
 function isInEnv(key) {
 	if (isolatedOverridesStorage.getStore()?.has(key)) return true;
 	if (sharedOverrides?.has(key)) return true;
-	return /* @__PURE__ */ require_objects_predicates.hasOwn(node_process.default.env, key);
+	return require_objects_predicates.hasOwn(node_process.default.env, key);
 }
 /**
 * Clear all environment variable overrides. Useful in afterEach hooks to ensure

package/dist/env/shell.js

@@ -22,7 +22,6 @@ const require_env_rewire = require('./rewire.js');
 *
 * @returns The user's default shell path, or `undefined` if not set
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getShell() {
 	return require_env_rewire.getEnvValue("SHELL");
 }