@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/events/exit/_internal.js

@@ -8,67 +8,63 @@ const originalProcessEmit = globalProcess?.emit;
 const platform = globalProcess?.platform ?? "";
 const originalProcessReallyExit = globalProcess?.reallyExit;
 const WIN32 = platform === "win32";
-let _events;
-let _emitter;
-let _loaded = false;
-let _signals;
+let events;
+let emitter;
+let loaded = false;
+let signals;
 /* c8 ignore start - Only called from signal-listener body and
 processEmit/processReallyExit interceptors, all of which are
 c8-ignored. Cannot be reached from the test runner. */
-/*@__NO_SIDE_EFFECTS__*/
 function emit(event, code, signal) {
-	const emitter = /* @__PURE__ */ getEmitter();
-	if (emitter.emitted?.[event]) return;
-	if (emitter.emitted) emitter.emitted[event] = true;
-	emitter.emit(event, code, signal);
+	const sigEmitter = getEmitter();
+	if (sigEmitter.emitted?.[event]) return;
+	if (sigEmitter.emitted) sigEmitter.emitted[event] = true;
+	sigEmitter.emit(event, code, signal);
 }
 /* c8 ignore stop */
-/*@__NO_SIDE_EFFECTS__*/
 function getEmitter() {
-	/* c8 ignore start */
-	if (_emitter === void 0) {
-		if (globalProcess?.__signal_exit_emitter__) _emitter = globalProcess.__signal_exit_emitter__;
+	/* c8 ignore start - cross-copy signal-exit init, unreachable from test runner */
+	if (emitter === void 0) {
+		if (globalProcess?.__signal_exit_emitter__) emitter = globalProcess.__signal_exit_emitter__;
 		else if (globalProcess) {
-			const EventEmitter = (/* @__PURE__ */ getEvents()).EventEmitter;
-			_emitter = globalProcess.__signal_exit_emitter__ = new EventEmitter();
-			_emitter.count = 0;
-			_emitter.emitted = { __proto__: null };
+			const EventEmitterClass = getEvents().EventEmitter;
+			emitter = globalProcess.__signal_exit_emitter__ = new EventEmitterClass();
+			emitter.count = 0;
+			emitter.emitted = { __proto__: null };
 		}
-		if (_emitter && !_emitter.infinite) {
-			_emitter.setMaxListeners(Number.POSITIVE_INFINITY);
-			_emitter.infinite = true;
+		if (emitter && !emitter.infinite) {
+			emitter.setMaxListeners(Number.POSITIVE_INFINITY);
+			emitter.infinite = true;
 		}
 	}
 	/* c8 ignore stop */
-	return _emitter;
+	return emitter;
 }
-/*@__NO_SIDE_EFFECTS__*/
 function getEvents() {
-	/* c8 ignore start */
-	if (_events === void 0) _events = /*@__PURE__*/ require("node:events");
+	/* c8 ignore start - lazy require, second-call branch unreachable from test runner */
+	if (events === void 0) events = /*@__PURE__*/ require("node:events");
 	/* c8 ignore stop */
-	return _events;
+	return events;
 }
 /**
 * Get the cached signal list. Triggers lazy init on first call; after `load()`
 * runs it returns the filtered subset of successfully registered signals
 * instead of the full default list.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getSignals() {
-	if (_signals === void 0) {
-		_signals = [
+	if (signals === void 0) {
+		signals = [
 			"SIGABRT",
 			"SIGALRM",
 			"SIGHUP",
 			"SIGINT",
 			"SIGTERM"
 		];
-		/* c8 ignore start */
-		if (!WIN32) _signals.push("SIGVTALRM", "SIGXCPU", "SIGXFSZ", "SIGUSR2", "SIGTRAP", "SIGSYS", "SIGQUIT", "SIGIOT");
-		if (platform === "linux") _signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT", "SIGUNUSED");
+		/* c8 ignore start - platform-specific signal lists run only on their target OS */
+		if (!WIN32) signals.push("SIGVTALRM", "SIGXCPU", "SIGXFSZ", "SIGUSR2", "SIGTRAP", "SIGSYS", "SIGQUIT", "SIGIOT");
+		if (platform === "linux") signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT", "SIGUNUSED");
 	}
-	return _signals;
+	return signals;
 }
 /**
 * Read the loaded flag from a sibling leaf (lifecycle / on-exit).
@@ -76,7 +72,7 @@ function getSignals() {
 * @private
 */
 function isLoaded() {
-	return _loaded;
+	return loaded;
 }
 /**
 * Set the `loaded` flag from a sibling leaf (load / unload).
@@ -84,7 +80,7 @@ function isLoaded() {
 * @private
 */
 function setLoaded(value) {
-	_loaded = value;
+	loaded = value;
 }
 /**
 * Replace the cached signal list (used by `load()`'s filter step).
@@ -92,7 +88,7 @@ function setLoaded(value) {
 * @private
 */
 function setSignals(value) {
-	_signals = value;
+	signals = value;
 }
 
 //#endregion

package/dist/events/exit/handler.js

@@ -24,25 +24,24 @@ const require_events_exit_lifecycle = require('./lifecycle.js');
 *   remove()
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function onExit(cb, options) {
 	/* c8 ignore start */
 	if (!require_events_exit__internal.globalProcess) return function remove() {};
 	/* c8 ignore stop */
 	if (typeof cb !== "function") throw new require_primordials_error.TypeErrorCtor("a callback must be provided for exit handler");
-	if (require_events_exit__internal.isLoaded() === false) /* @__PURE__ */ require_events_exit_lifecycle.load();
+	if (require_events_exit__internal.isLoaded() === false) require_events_exit_lifecycle.load();
 	const { alwaysLast } = {
 		__proto__: null,
 		...options
 	};
 	let eventName = "exit";
 	if (alwaysLast) eventName = "afterexit";
-	const emitter = /* @__PURE__ */ require_events_exit__internal.getEmitter();
+	const emitter = require_events_exit__internal.getEmitter();
 	emitter.on(eventName, cb);
 	return function remove() {
 		emitter.removeListener(eventName, cb);
 		/* c8 ignore start */
-		if (!emitter.listeners("exit").length && !emitter.listeners("afterexit").length) /* @__PURE__ */ require_events_exit_lifecycle.unload();
+		if (!emitter.listeners("exit").length && !emitter.listeners("afterexit").length) require_events_exit_lifecycle.unload();
 		/* c8 ignore stop */
 	};
 }

package/dist/events/exit/intercept.js

@@ -14,7 +14,6 @@ const require_events_exit__internal = require('./_internal.js');
 */
 /* c8 ignore start - processEmit + processReallyExit interceptors
 only fire on real process exit/emit; can't be triggered in-test. */
-/*@__NO_SIDE_EFFECTS__*/
 function processEmit(eventName, exitCode, ...args) {
 	if (eventName === "exit") {
 		let actualExitCode = exitCode;
@@ -28,8 +27,8 @@ function processEmit(eventName, exitCode, ...args) {
 			...args
 		]);
 		const numExitCode = typeof actualExitCode === "number" ? actualExitCode : void 0;
-		/* @__PURE__ */ require_events_exit__internal.emit("exit", numExitCode, void 0);
-		/* @__PURE__ */ require_events_exit__internal.emit("afterexit", numExitCode, void 0);
+		require_events_exit__internal.emit("exit", numExitCode, void 0);
+		require_events_exit__internal.emit("afterexit", numExitCode, void 0);
 		return result;
 	}
 	return require_primordials_reflect.ReflectApply(require_events_exit__internal.originalProcessEmit, this, [
@@ -38,12 +37,11 @@ function processEmit(eventName, exitCode, ...args) {
 		...args
 	]);
 }
-/*@__NO_SIDE_EFFECTS__*/
 function processReallyExit(code) {
 	const exitCode = code || 0;
 	if (require_events_exit__internal.globalProcess) require_events_exit__internal.globalProcess.exitCode = exitCode;
-	/* @__PURE__ */ require_events_exit__internal.emit("exit", exitCode, void 0);
-	/* @__PURE__ */ require_events_exit__internal.emit("afterexit", exitCode, void 0);
+	require_events_exit__internal.emit("exit", exitCode, void 0);
+	require_events_exit__internal.emit("afterexit", exitCode, void 0);
 	require_primordials_reflect.ReflectApply(require_events_exit__internal.originalProcessReallyExit, require_events_exit__internal.globalProcess, [exitCode]);
 	throw new require_primordials_error.ErrorCtor("processReallyExit should never return");
 }

package/dist/events/exit/lifecycle.js

@@ -11,26 +11,26 @@ const require_events_exit_intercept = require('./intercept.js');
 *   calls `unload()`; keeping them in the same leaf avoids an inter-leaf import
 *   cycle.
 */
-let _sigListeners;
-/*@__NO_SIDE_EFFECTS__*/
+let signalListenerMap;
 function getSignalListeners() {
-	if (_sigListeners === void 0) {
-		_sigListeners = { __proto__: null };
-		const emitter = /* @__PURE__ */ require_events_exit__internal.getEmitter();
-		const sigs = /* @__PURE__ */ require_events_exit__internal.getSignals();
+	if (signalListenerMap === void 0) {
+		signalListenerMap = { __proto__: null };
+		const emitter = require_events_exit__internal.getEmitter();
+		const sigs = require_events_exit__internal.getSignals();
 		/* c8 ignore start - Signal-listener body fires only on real
 		process signals; can't be triggered in-test without subprocess
 		infrastructure. */
-		for (const sig of sigs) _sigListeners[sig] = function listener() {
+		for (const sig of sigs) signalListenerMap[sig] = function listener() {
 			if ((require_events_exit__internal.globalProcess?.listeners(sig) || []).length === emitter.count) {
-				/* @__PURE__ */ require_events_exit__internal.emit("exit", void 0, sig);
-				/* @__PURE__ */ require_events_exit__internal.emit("afterexit", void 0, sig);
+				unload();
+				require_events_exit__internal.emit("exit", void 0, sig);
+				require_events_exit__internal.emit("afterexit", void 0, sig);
 				const killSig = require_events_exit__internal.WIN32 && sig === "SIGHUP" ? "SIGINT" : sig;
 				require_events_exit__internal.globalProcess?.kill(require_events_exit__internal.globalProcess?.pid, killSig);
 			}
 		};
 	}
-	return _sigListeners;
+	return signalListenerMap;
 }
 /**
 * Load signal handlers and hook into process exit events.
@@ -41,18 +41,17 @@ function getSignalListeners() {
 *   // Signal handlers are now active
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function load() {
 	/* c8 ignore next - !globalProcess never fires in Node tests. */
 	if (require_events_exit__internal.isLoaded() || !require_events_exit__internal.globalProcess) return;
 	require_events_exit__internal.setLoaded(true);
 	const proc = require_events_exit__internal.globalProcess;
-	const emitter = /* @__PURE__ */ require_events_exit__internal.getEmitter();
+	const emitter = require_events_exit__internal.getEmitter();
 	/* c8 ignore start */
 	if (emitter.count !== void 0) emitter.count += 1;
 	/* c8 ignore stop */
-	const sigs = /* @__PURE__ */ require_events_exit__internal.getSignals();
-	const sigListeners = /* @__PURE__ */ getSignalListeners();
+	const sigs = require_events_exit__internal.getSignals();
+	const sigListeners = getSignalListeners();
 	require_events_exit__internal.setSignals(sigs.filter((sig) => {
 		try {
 			proc.on(sig, sigListeners[sig]);
@@ -73,14 +72,13 @@ function load() {
 *   // Signal handlers are now removed
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function unload() {
 	/* c8 ignore start */
 	if (!require_events_exit__internal.isLoaded() || !require_events_exit__internal.globalProcess) return;
 	/* c8 ignore stop */
 	require_events_exit__internal.setLoaded(false);
-	const sigs = /* @__PURE__ */ require_events_exit__internal.getSignals();
-	const sigListeners = /* @__PURE__ */ getSignalListeners();
+	const sigs = require_events_exit__internal.getSignals();
+	const sigListeners = getSignalListeners();
 	for (const sig of sigs) try {
 		require_events_exit__internal.globalProcess.removeListener(sig, sigListeners[sig]);
 	} catch {}
@@ -88,7 +86,7 @@ function unload() {
 	/* c8 ignore start */
 	if (require_events_exit__internal.originalProcessReallyExit !== void 0) require_events_exit__internal.globalProcess.reallyExit = require_events_exit__internal.originalProcessReallyExit;
 	/* c8 ignore stop */
-	const emitter = /* @__PURE__ */ require_events_exit__internal.getEmitter();
+	const emitter = require_events_exit__internal.getEmitter();
 	/* c8 ignore start */
 	if (emitter.count !== void 0) emitter.count -= 1;
 	/* c8 ignore stop */

package/dist/events/exit/signals.js

@@ -19,9 +19,8 @@ const require_events_exit__internal = require('./_internal.js');
 *   console.log(sigs) // ['SIGABRT', 'SIGALRM', 'SIGHUP', ...]
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function signals() {
-	return /* @__PURE__ */ require_events_exit__internal.getSignals();
+	return require_events_exit__internal.getSignals();
 }
 
 //#endregion

package/dist/events/exit/types.d.ts

@@ -4,18 +4,19 @@
  *   emitter, emitted-signal map, and listener map. Pure types, no runtime side
  *   effects.
  */
+import type { EventEmitter } from 'node:events';
 export type EmittedSignals = {
     [signal: string]: boolean;
 };
-export type SignalExitEmitter = import('node:events').EventEmitter & {
-    count?: number;
-    emitted?: EmittedSignals;
-    infinite?: boolean;
+export type SignalExitEmitter = EventEmitter & {
+    count?: number | undefined;
+    emitted?: EmittedSignals | undefined;
+    infinite?: boolean | undefined;
 };
 export type SignalListener = () => void;
 export type SignalListenerMap = {
     [signal: string]: SignalListener;
 };
 export interface OnExitOptions {
-    alwaysLast?: boolean;
+    alwaysLast?: boolean | undefined;
 }

package/dist/external/@npmcli/package-json.js

@@ -2388,7 +2388,7 @@ var require_commonjs$5 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/brace-expansion@5.0.5/node_modules/brace-expansion/dist/commonjs/index.js
+//#region node_modules/.pnpm/brace-expansion@5.0.6/node_modules/brace-expansion/dist/commonjs/index.js
 var require_commonjs$4 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.EXPANSION_MAX = void 0;
@@ -2504,7 +2504,7 @@ var require_commonjs$4 = /* @__PURE__ */ __commonJSMin(((exports) => {
 				}
 				const pad = n.some(isPadded);
 				N = [];
-				for (let i = x; test(i, y); i += incr) {
+				for (let i = x; test(i, y) && N.length < max; i += incr) {
 					let c;
 					if (isAlphaSequence) {
 						c = String.fromCharCode(i);

package/dist/external/@npmcli/promise-spawn.js

@@ -7,6 +7,8 @@ const { SetCtor: _p_SetCtor } = require('../../primordials/map-set.js')
 
 const { ObjectAssign: _p_ObjectAssign, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectKeys: _p_ObjectKeys } = require('../../primordials/object.js')
 
+const { processCwd: _p_processCwd } = require('../../primordials/process.js')
+
 const { PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject } = require('../../primordials/promise.js')
 
 const { RegExpCtor: _p_RegExpCtor } = require('../../primordials/regexp.js')
@@ -218,7 +220,7 @@ var require_lib$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const rRel = new _p_RegExpCtor(`^\\.${rSlash.source}`);
 	const getNotFoundError = (cmd) => _p_ObjectAssign(/* @__PURE__ */ new _p_ErrorCtor(`not found: ${cmd}`), { code: "ENOENT" });
 	const getPathInfo = (cmd, { path: optPath = process.env.PATH, pathExt: optPathExt = process.env.PATHEXT, delimiter: optDelimiter = delimiter }) => {
-		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [process.cwd()] : [], ...(optPath || "").split(optDelimiter)];
+		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [_p_processCwd()] : [], ...(optPath || "").split(optDelimiter)];
 		if (isWindows) {
 			const pathExtExe = optPathExt || [
 				".EXE",

package/dist/external/npm-pack.js

@@ -2432,7 +2432,7 @@ var require_commonjs$8 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/brace-expansion@5.0.5/node_modules/brace-expansion/dist/commonjs/index.js
+//#region node_modules/.pnpm/brace-expansion@5.0.6/node_modules/brace-expansion/dist/commonjs/index.js
 var require_commonjs$7 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.EXPANSION_MAX = void 0;
@@ -2548,7 +2548,7 @@ var require_commonjs$7 = /* @__PURE__ */ __commonJSMin(((exports) => {
 				}
 				const pad = n.some(isPadded);
 				N = [];
-				for (let i = x; test(i, y); i += incr) {
+				for (let i = x; test(i, y) && N.length < max; i += incr) {
 					let c;
 					if (isAlphaSequence) {
 						c = String.fromCharCode(i);

package/dist/external/pico-pack.js

@@ -79,6 +79,8 @@ const { NumberIsFinite: _p_NumberIsFinite, NumberIsInteger: _p_NumberIsInteger,
 
 const { ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectKeys: _p_ObjectKeys } = require('../primordials/object.js')
 
+const { processNextTick: _p_processNextTick } = require('../primordials/process.js')
+
 const { PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseRace: _p_PromiseRace, PromiseResolve: _p_PromiseResolve } = require('../primordials/promise.js')
 
 const { RegExpCtor: _p_RegExpCtor } = require('../primordials/regexp.js')
@@ -4090,7 +4092,7 @@ var require_merge2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			merging = true;
 			let streams = streamsQueue.shift();
 			if (!streams) {
-				process.nextTick(endStream);
+				_p_processNextTick(endStream);
 				return;
 			}
 			if (!_p_ArrayIsArray(streams)) streams = [streams];
@@ -5038,7 +5040,7 @@ var require_queue = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		function drained() {
 			return new _p_PromiseCtor(function(resolve) {
-				process.nextTick(function() {
+				_p_processNextTick(function() {
 					if (queue.idle()) resolve();
 					else {
 						var previousDrain = queue.drain;

package/dist/external/which.js

@@ -5,6 +5,8 @@ const { SetCtor: _p_SetCtor } = require('../primordials/map-set.js')
 
 const { ObjectAssign: _p_ObjectAssign, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor } = require('../primordials/object.js')
 
+const { processCwd: _p_processCwd } = require('../primordials/process.js')
+
 const { RegExpCtor: _p_RegExpCtor } = require('../primordials/regexp.js')
 
 const { StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../primordials/string.js')
@@ -214,7 +216,7 @@ var require_lib = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const rRel = new _p_RegExpCtor(`^\\.${rSlash.source}`);
 	const getNotFoundError = (cmd) => _p_ObjectAssign(/* @__PURE__ */ new _p_ErrorCtor(`not found: ${cmd}`), { code: "ENOENT" });
 	const getPathInfo = (cmd, { path: optPath = process.env.PATH, pathExt: optPathExt = process.env.PATHEXT, delimiter: optDelimiter = delimiter }) => {
-		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [process.cwd()] : [], ...(optPath || "").split(optDelimiter)];
+		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [_p_processCwd()] : [], ...(optPath || "").split(optDelimiter)];
 		if (isWindows) {
 			const pathExtExe = optPathExt || [
 				".EXE",

package/dist/external-tools/bazel/asset-names.d.ts

@@ -63,4 +63,4 @@ export interface BazelDownloadOptions {
  *   // → 'https://github.com/bazelbuild/bazel/releases/download/7.4.1/bazel-7.4.1-darwin-arm64'
  *   ```
  */
-export declare function getBazelDownloadUrl(opts: BazelDownloadOptions): string | undefined;
+export declare function getBazelDownloadUrl(options: BazelDownloadOptions): string | undefined;

package/dist/external-tools/bazel/asset-names.js

@@ -91,8 +91,11 @@ function getBazelAssetEntry(platformArch) {
 *   // → 'https://github.com/bazelbuild/bazel/releases/download/7.4.1/bazel-7.4.1-darwin-arm64'
 *   ```
 */
-function getBazelDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getBazelDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = BAZEL_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/bazelbuild/bazel/releases/download/${version}/bazel-${version}-${entry.suffix}`;

package/dist/external-tools/bazel/from-download.d.ts

@@ -46,4 +46,4 @@ export interface BazelFromDownloadOptions {
  *   // → { path: '/.../bazel-7.4.1-darwin-arm64', source: 'download' }
  *   ```
  */
-export declare function bazelFromDownload(opts: BazelFromDownloadOptions): Promise<ResolvedBazel | undefined>;
+export declare function bazelFromDownload(options: BazelFromDownloadOptions): Promise<ResolvedBazel | undefined>;

package/dist/external-tools/bazel/from-download.js

@@ -31,8 +31,11 @@ const require_external_tools_bazel_asset_names = require('./asset-names.js');
 *   // → { path: '/.../bazel-7.4.1-darwin-arm64', source: 'download' }
 *   ```
 */
-async function bazelFromDownload(opts) {
-	const { downloader, integrity, platformArch, version } = opts;
+async function bazelFromDownload(options) {
+	const { downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_bazel_asset_names.getBazelDownloadUrl({
 		version,
 		platformArch

package/dist/external-tools/bazel/read-bazel-version-file.js

@@ -23,7 +23,7 @@ const BAZEL_VERSION_FILE = ".bazelversion";
 async function readBazelVersionFile(startDir) {
 	let current = node_path.default.resolve(startDir);
 	while (true) {
-		const content = await /* @__PURE__ */ require_fs_read_file.safeReadFile(node_path.default.join(current, BAZEL_VERSION_FILE), { encoding: "utf8" });
+		const content = await require_fs_read_file.safeReadFile(node_path.default.join(current, BAZEL_VERSION_FILE), { encoding: "utf8" });
 		if (content !== void 0) {
 			const hashIdx = require_primordials_string.StringPrototypeIndexOf(content, "#");
 			const version = require_primordials_string.StringPrototypeTrim(hashIdx === -1 ? content : require_primordials_string.StringPrototypeSlice(content, 0, hashIdx));

package/dist/external-tools/bazel/resolve-bazel-version.js

@@ -21,6 +21,10 @@ node_process = require_runtime.__toESM(node_process);
 *      surfaces an actionable error.
 */
 async function resolveBazelVersion(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const cwd = options?.cwd ?? node_process.default.cwd();
 	const envOverride = node_process.default.env["USE_BAZEL_VERSION"];
 	if (envOverride && envOverride.length > 0) return envOverride;

package/dist/external-tools/bazel/resolve.d.ts

@@ -29,7 +29,7 @@ export interface ResolveBazelOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveBazelOptions | undefined): string;
-export declare function doResolveBazel(opts?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
+export declare function cacheKey(options: ResolveBazelOptions | undefined): string;
+export declare function doResolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
 export declare function resetBazelResolution(): void;
-export declare function resolveBazel(opts?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
+export declare function resolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;

package/dist/external-tools/bazel/resolve.js

@@ -23,26 +23,34 @@ const require_external_tools_bazel_from_path = require('./from-path.js');
 *      call can fall through to the download tier.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}`;
 }
-async function doResolveBazel(opts) {
+async function doResolveBazel(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromPath = await require_external_tools_bazel_from_path.bazelFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_bazel_from_download.bazelFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_bazel_from_download.bazelFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetBazelResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveBazel(opts) {
-	const key = cacheKey(opts);
+function resolveBazel(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveBazel(opts);
+		cached = doResolveBazel(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/bazel/types.d.ts

@@ -18,5 +18,5 @@ export interface ResolvedBazel {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }

package/dist/external-tools/cdxgen/asset-names.d.ts

@@ -51,7 +51,7 @@ export declare function getCdxgenAssetEntry(platformArch: string, variant?: Cdxg
  * Build the GitHub release-asset download URL for an upstream cdxgen binary.
  * Returns `undefined` when no entry exists for the requested platform-arch.
  */
-export declare function getCdxgenDownloadUrl(opts: CdxgenDownloadOptions): string | undefined;
+export declare function getCdxgenDownloadUrl(options: CdxgenDownloadOptions): string | undefined;
 export declare function makeCdxgenEntry(baseTriple: string, variant: CdxgenVariant, ext?: '' | '.exe'): CdxgenAssetEntry;
 export declare function makeCdxgenPlatformMap(variant: CdxgenVariant): Readonly<Record<string, CdxgenAssetEntry>>;
 export declare const CDXGEN_SLIM_ASSET_MAP: Readonly<Record<string, CdxgenAssetEntry>>;

package/dist/external-tools/cdxgen/asset-names.js

@@ -34,8 +34,11 @@ function getCdxgenAssetEntry(platformArch, variant = "slim") {
 * Build the GitHub release-asset download URL for an upstream cdxgen binary.
 * Returns `undefined` when no entry exists for the requested platform-arch.
 */
-function getCdxgenDownloadUrl(opts) {
-	const { platformArch, variant = "slim", version } = opts;
+function getCdxgenDownloadUrl(options) {
+	const { platformArch, variant = "slim", version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = getCdxgenAssetEntry(platformArch, variant);
 	if (!entry) return;
 	return `https://github.com/CycloneDX/cdxgen/releases/download/v${version}/` + entry.asset;

package/dist/external-tools/cdxgen/from-download.d.ts

@@ -40,4 +40,4 @@ export interface CdxgenFromDownloadOptions {
      */
     downloader?: BinaryDownloader | undefined;
 }
-export declare function cdxgenFromDownload(opts: CdxgenFromDownloadOptions): Promise<ResolvedCdxgen | undefined>;
+export declare function cdxgenFromDownload(options: CdxgenFromDownloadOptions): Promise<ResolvedCdxgen | undefined>;

package/dist/external-tools/cdxgen/from-download.js

@@ -7,10 +7,10 @@ const require_fs_safe = require('../../fs/safe.js');
 const require_external_tools_from_download = require('../from-download.js');
 const require_external_tools_cdxgen_asset_names = require('./asset-names.js');
 let node_fs = require("node:fs");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/cdxgen/from-download.ts
 /**
@@ -23,8 +23,11 @@ node_process = require_runtime.__toESM(node_process);
 *   for (none today; the asset map covers all 8 fleet targets) return
 *   `undefined` — callers should fall back to `cdxgenFromNpm()` for those.
 */
-async function cdxgenFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, variant = "slim", version } = opts;
+async function cdxgenFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, variant = "slim", version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_cdxgen_asset_names.getCdxgenDownloadUrl({
 		platformArch,
 		variant,

package/dist/external-tools/cdxgen/from-vfs.js

@@ -10,7 +10,7 @@ const require_smol_vfs = require('../../smol/vfs.js');
 */
 const CDXGEN_VFS_KEY = "cdxgen";
 async function cdxgenFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("cdxgen")) return;

package/dist/external-tools/cdxgen/resolve.d.ts

@@ -26,7 +26,7 @@ export interface ResolveCdxgenOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveCdxgenOptions | undefined): string;
-export declare function doResolveCdxgen(opts?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
+export declare function cacheKey(options: ResolveCdxgenOptions | undefined): string;
+export declare function doResolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
 export declare function resetCdxgenResolution(): void;
-export declare function resolveCdxgen(opts?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
+export declare function resolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;