@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/external-tools/cdxgen/resolve.js

@@ -22,31 +22,39 @@ const require_external_tools_cdxgen_from_vfs = require('./from-vfs.js');
 *      option-shape.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, variant, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, variant, version } = options.downloadIfMissing;
 	const integrityKey = typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : "";
 	return `dl:${version}:${platformArch}:${variant ?? "slim"}:${integrityKey}:${cacheDir ?? ""}`;
 }
-async function doResolveCdxgen(opts) {
+async function doResolveCdxgen(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_cdxgen_from_vfs.cdxgenFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_cdxgen_from_path.cdxgenFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetCdxgenResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveCdxgen(opts) {
-	const key = cacheKey(opts);
+function resolveCdxgen(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveCdxgen(opts);
+		cached = doResolveCdxgen(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/cdxgen/types.d.ts

@@ -29,5 +29,5 @@ export interface ResolvedCdxgen {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }

package/dist/external-tools/from-download.d.ts

@@ -68,13 +68,13 @@ export interface DownloadAndExtractOptions extends DownloadOptions {
  *   const { extractedDir, integrity } = await downloadAndExtractTool({
  *     url: 'https://example.com/jre-21-darwin-arm64.tar.gz',
  *     name: 'jre-21-darwin-arm64',
- *     extractedDir: '/Users/me/.cache/socket/jre/21/darwin-arm64',
+ *     extractedDir: '/Users/<user>/.cache/socket/jre/21/darwin-arm64',
  *     extractOptions: { strip: 1 },
  *   })
  *   // Caller constructs ResolvedJre from extractedDir.
  *   ```
  */
-export declare function downloadAndExtractTool(opts: DownloadAndExtractOptions): Promise<ExtractedTool>;
+export declare function downloadAndExtractTool(options: DownloadAndExtractOptions): Promise<ExtractedTool>;
 /**
  * SRI integrity (`sha512-<base64>`) of a downloaded archive, surfaced on the
  * per-tool `Resolved*` shapes. Set ONLY when `source === 'download'`; the
@@ -159,4 +159,4 @@ export interface DownloadOptions {
  *   })
  *   ```
  */
-export declare function downloadToolArchive(opts: DownloadOptions): Promise<DownloadedArchive>;
+export declare function downloadToolArchive(options: DownloadOptions): Promise<DownloadedArchive>;

package/dist/external-tools/from-download.js

@@ -44,15 +44,18 @@ let node_fs = require("node:fs");
 *   const { extractedDir, integrity } = await downloadAndExtractTool({
 *     url: 'https://example.com/jre-21-darwin-arm64.tar.gz',
 *     name: 'jre-21-darwin-arm64',
-*     extractedDir: '/Users/me/.cache/socket/jre/21/darwin-arm64',
+*     extractedDir: '/Users/<user>/.cache/socket/jre/21/darwin-arm64',
 *     extractOptions: { strip: 1 },
 *   })
 *   // Caller constructs ResolvedJre from extractedDir.
 *   ```
 */
-async function downloadAndExtractTool(opts) {
-	const archive = await downloadToolArchive(opts);
-	const { extractOptions, extractedDir } = opts;
+async function downloadAndExtractTool(options) {
+	const archive = await downloadToolArchive(options);
+	const { extractOptions, extractedDir } = {
+		__proto__: null,
+		...options
+	};
 	let extracted = false;
 	if ((0, node_fs.existsSync)(extractedDir)) {
 		if ((await node_fs.promises.readdir(extractedDir)).length === 0) {
@@ -92,8 +95,11 @@ async function downloadAndExtractTool(opts) {
 *   })
 *   ```
 */
-async function downloadToolArchive(opts) {
-	const { downloader, integrity, name, url } = opts;
+async function downloadToolArchive(options) {
+	const { downloader, integrity, name, url } = {
+		__proto__: null,
+		...options
+	};
 	const result = await (downloader ?? require_dlx_binary_download.downloadBinary)({
 		url,
 		name,

package/dist/external-tools/from-pip-venv.d.ts

@@ -63,7 +63,7 @@ export interface CreatePipVenvResult {
  * - The install succeeded but the entry-point was not created (caller passed a
  *   wrong `entryPoint` name, or the package has no console script).
  */
-export declare function createPipVenv(opts: CreatePipVenvOptions): Promise<CreatePipVenvResult>;
+export declare function createPipVenv(options: CreatePipVenvOptions): Promise<CreatePipVenvResult>;
 /**
  * Locate a Python interpreter. Prefer `python3` on macOS/Linux, fall back to
  * `python` (the Windows convention). Returns `undefined` when neither is on

package/dist/external-tools/from-pip-venv.js

@@ -6,10 +6,10 @@ const require_bin_which = require('../bin/which.js');
 const require_process_spawn_child = require('../process/spawn/child.js');
 const require_fs_safe = require('../fs/safe.js');
 let node_fs = require("node:fs");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/from-pip-venv.ts
 /**
@@ -43,14 +43,21 @@ node_process = require_runtime.__toESM(node_process);
 * - The install succeeded but the entry-point was not created (caller passed a
 *   wrong `entryPoint` name, or the package has no console script).
 */
-async function createPipVenv(opts) {
-	const { cacheDir, entryPoint, installSpec } = opts;
+async function createPipVenv(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	const { cacheDir, entryPoint, installSpec } = {
+		__proto__: null,
+		...options
+	};
 	const entryBin = pipVenvEntryPointPath(cacheDir, entryPoint);
 	if ((0, node_fs.existsSync)(entryBin)) return {
 		entryPointPath: entryBin,
 		created: false
 	};
-	const python = opts.python ?? await findPython();
+	const python = options.python ?? await findPython();
 	if (!python) throw new Error("createPipVenv: no Python interpreter on PATH (looked for python3, python)");
 	await require_fs_safe.safeMkdir(node_path.default.dirname(cacheDir), { recursive: true });
 	await require_process_spawn_child.spawn(python, [

package/dist/external-tools/janus/asset-names.d.ts

@@ -40,4 +40,4 @@ export interface JanusDownloadOptions {
  *
  * Reference: https://github.com/divmain/janus/releases.
  */
-export declare function getJanusDownloadUrl(opts: JanusDownloadOptions): string | undefined;
+export declare function getJanusDownloadUrl(options: JanusDownloadOptions): string | undefined;

package/dist/external-tools/janus/asset-names.js

@@ -36,8 +36,11 @@ function getJanusAssetEntry(platformArch) {
 *
 * Reference: https://github.com/divmain/janus/releases.
 */
-function getJanusDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getJanusDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = JANUS_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/divmain/janus/releases/download/v${version}/` + entry.asset;

package/dist/external-tools/janus/from-download.d.ts

@@ -23,4 +23,4 @@ export interface JanusFromDownloadOptions {
     cacheDir?: string | undefined;
     downloader?: BinaryDownloader | undefined;
 }
-export declare function janusFromDownload(opts: JanusFromDownloadOptions): Promise<ResolvedJanus>;
+export declare function janusFromDownload(options: JanusFromDownloadOptions): Promise<ResolvedJanus>;

package/dist/external-tools/janus/from-download.js

@@ -19,8 +19,11 @@ node_path = require_runtime.__toESM(node_path);
 *   per-process dlx cache, so multiple fleet consumers reuse the same extracted
 *   binary.
 */
-async function janusFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+async function janusFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	if (!require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.includes(platformArch)) throw new require_primordials_error.ErrorCtor(`janusFromDownload: platformArch must be one of [${require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.map((p) => `\`${p}\``).join(", ")}], got \`${platformArch}\`. Upstream janus only publishes the macOS arm64 build (see https://github.com/divmain/janus/releases); request \`darwin-arm64\` or use a different tool for other platforms.`);
 	const url = require_external_tools_janus_asset_names.getJanusDownloadUrl({
 		version,

package/dist/external-tools/janus/from-vfs.js

@@ -10,7 +10,7 @@ const require_smol_vfs = require('../../smol/vfs.js');
 */
 const JANUS_VFS_KEY = "janus";
 async function janusFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("janus")) return;

package/dist/external-tools/janus/resolve.d.ts

@@ -22,7 +22,7 @@ export interface ResolveJanusOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveJanusOptions | undefined): string;
-export declare function doResolveJanus(opts?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
+export declare function cacheKey(options: ResolveJanusOptions | undefined): string;
+export declare function doResolveJanus(options?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
 export declare function resetJanusResolution(): void;
-export declare function resolveJanus(opts?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
+export declare function resolveJanus(options?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;

package/dist/external-tools/janus/resolve.js

@@ -20,30 +20,38 @@ const require_external_tools_janus_from_vfs = require('./from-vfs.js');
 *      only). Memoized per option-shape.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
 }
-async function doResolveJanus(opts) {
+async function doResolveJanus(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_janus_from_vfs.janusFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_janus_from_path.janusFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_janus_from_download.janusFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_janus_from_download.janusFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetJanusResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveJanus(opts) {
-	const key = cacheKey(opts);
+function resolveJanus(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveJanus(opts);
+		cached = doResolveJanus(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/janus/types.d.ts

@@ -20,5 +20,5 @@ export interface ResolvedJanus {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }

package/dist/external-tools/jre/asset-names.d.ts

@@ -83,7 +83,7 @@ export interface AdoptiumDownloadOptions {
  *   })
  *   ```
  */
-export declare function getAdoptiumDownloadUrl(opts: AdoptiumDownloadOptions): string | undefined;
+export declare function getAdoptiumDownloadUrl(options: AdoptiumDownloadOptions): string | undefined;
 /**
  * Returns the Adoptium query parameters for a given platform-arch, or
  * `undefined` if no Adoptium build exists for that target.

package/dist/external-tools/jre/asset-names.js

@@ -95,8 +95,11 @@ const ADOPTIUM_QUERY_MAP = require_primordials_object.ObjectFreeze({
 *   })
 *   ```
 */
-function getAdoptiumDownloadUrl(opts) {
-	const { platformArch, releaseType = "ga", type = "jre", version } = opts;
+function getAdoptiumDownloadUrl(options) {
+	const { platformArch, releaseType = "ga", type = "jre", version } = {
+		__proto__: null,
+		...options
+	};
 	const query = ADOPTIUM_QUERY_MAP[platformArch];
 	if (!query) return;
 	return `https://api.adoptium.net/v3/binary/latest/${version}/${releaseType}/${query.os}/${query.architecture}/${type}/hotspot/normal/eclipse`;

package/dist/external-tools/jre/detect-platform-arch.d.ts

@@ -1,8 +1,12 @@
 /**
- * @file `getCurrentPlatformArch()` — resolves the current machine to a
- *   `platform-arch` string suitable for the Adoptium asset-name map. Wraps
- *   `getPlatformArch` from `src/releases/socket-btm` so external-tools modules
- *   don't need to know about releases' platform/arch typing. Returns
- *   `undefined` on unsupported platform/arch combos.
+ * @file `getJreArch()` — resolves the current machine to a `platform-arch`
+ *   string suitable for the Adoptium `ADOPTIUM_QUERY_MAP` keys (e.g.
+ *   `darwin-arm64`, `linux-x64-musl`, `win-x64`). Self-contained: owns the
+ *   Adoptium vocabulary end to end (Node's `win32` → `win`, an Alpine `-musl`
+ *   suffix on Linux) rather than reusing the shared `getPlatformArch` /
+ *   `detectLibc` — Adoptium ships a distinct `alpine-linux` channel, so the JRE
+ *   key set differs from both the release-binary naming and
+ *   python-build-standalone (see `getPythonArch`). Returns `undefined` on an
+ *   unsupported platform/arch.
  */
-export declare function getCurrentPlatformArch(): string | undefined;
+export declare function getJreArch(): string | undefined;

package/dist/external-tools/jre/detect-platform-arch.js

@@ -2,27 +2,42 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../../_virtual/_rolldown/runtime.js');
-const require_releases_socket_btm = require('../../releases/socket-btm.js');
+const require_constants_platform = require('../../constants/platform.js');
+const require_primordials_object = require('../../primordials/object.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
 
 //#region src/external-tools/jre/detect-platform-arch.ts
 /**
-* @file `getCurrentPlatformArch()` — resolves the current machine to a
-*   `platform-arch` string suitable for the Adoptium asset-name map. Wraps
-*   `getPlatformArch` from `src/releases/socket-btm` so external-tools modules
-*   don't need to know about releases' platform/arch typing. Returns
-*   `undefined` on unsupported platform/arch combos.
+* @file `getJreArch()` — resolves the current machine to a `platform-arch`
+*   string suitable for the Adoptium `ADOPTIUM_QUERY_MAP` keys (e.g.
+*   `darwin-arm64`, `linux-x64-musl`, `win-x64`). Self-contained: owns the
+*   Adoptium vocabulary end to end (Node's `win32` → `win`, an Alpine `-musl`
+*   suffix on Linux) rather than reusing the shared `getPlatformArch` /
+*   `detectLibc` — Adoptium ships a distinct `alpine-linux` channel, so the JRE
+*   key set differs from both the release-binary naming and
+*   python-build-standalone (see `getPythonArch`). Returns `undefined` on an
+*   unsupported platform/arch.
 */
-function getCurrentPlatformArch() {
-	/* c8 ignore start - depends on process.platform/arch. */
-	try {
-		return require_releases_socket_btm.getPlatformArch(node_process.default.platform, node_process.default.arch, require_releases_socket_btm.detectLibc());
-	} catch {
-		return;
-	}
+const NODE_PLATFORM_TO_JRE = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	darwin: "darwin",
+	linux: "linux",
+	win32: "win"
+});
+const NODE_ARCH_TO_JRE = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	arm64: "arm64",
+	x64: "x64"
+});
+function getJreArch() {
+	/* c8 ignore start - depends on process.platform/arch + libc probe. */
+	const platform = NODE_PLATFORM_TO_JRE[node_process.default.platform];
+	const arch = NODE_ARCH_TO_JRE[node_process.default.arch];
+	if (!platform || !arch) return;
+	return `${platform}-${arch}${platform === "linux" && require_constants_platform.getLibc() === "musl" ? "-musl" : ""}`;
 	/* c8 ignore stop */
 }
 
 //#endregion
-exports.getCurrentPlatformArch = getCurrentPlatformArch;
+exports.getJreArch = getJreArch;

package/dist/external-tools/jre/from-download.d.ts

@@ -59,4 +59,4 @@ export interface JreFromDownloadOptions {
  *   // → { javaPath: '/.../bin/java', javaHome: '/...', source: 'download' }
  *   ```
  */
-export declare function jreFromDownload(opts: JreFromDownloadOptions): Promise<ResolvedJre | undefined>;
+export declare function jreFromDownload(options: JreFromDownloadOptions): Promise<ResolvedJre | undefined>;

package/dist/external-tools/jre/from-download.js

@@ -6,10 +6,10 @@ const require_primordials_string = require('../../primordials/string.js');
 const require_paths_socket = require('../../paths/socket.js');
 const require_external_tools_from_download = require('../from-download.js');
 const require_external_tools_jre_asset_names = require('./asset-names.js');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/jre/from-download.ts
 /**
@@ -44,8 +44,11 @@ node_process = require_runtime.__toESM(node_process);
 *   // → { javaPath: '/.../bin/java', javaHome: '/...', source: 'download' }
 *   ```
 */
-async function jreFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+async function jreFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_jre_asset_names.getAdoptiumDownloadUrl({
 		version,
 		platformArch

package/dist/external-tools/jre/from-java-home.js

@@ -2,10 +2,10 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../../_virtual/_rolldown/runtime.js');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/jre/from-java-home.ts
 /**

package/dist/external-tools/jre/from-vfs.js

@@ -3,10 +3,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../../_virtual/_rolldown/runtime.js');
 const require_smol_vfs = require('../../smol/vfs.js');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/jre/from-vfs.ts
 /**
@@ -25,7 +25,7 @@ node_process = require_runtime.__toESM(node_process);
 */
 const JRE_VFS_KEY = "jre";
 async function jreFromVfs() {
-	const vfs = /* @__PURE__ */ require_smol_vfs.getSmolVfs();
+	const vfs = require_smol_vfs.getSmolVfs();
 	if (!vfs) return;
 	/* c8 ignore start - smol Node binary only. */
 	if (!vfs.has("jre")) return;

package/dist/external-tools/jre/resolve.d.ts

@@ -34,7 +34,7 @@ export interface ResolveJreOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveJreOptions | undefined): string;
-export declare function doResolveJre(opts?: ResolveJreOptions | undefined): Promise<ResolvedJre | undefined>;
+export declare function cacheKey(options: ResolveJreOptions | undefined): string;
+export declare function doResolveJre(options?: ResolveJreOptions | undefined): Promise<ResolvedJre | undefined>;
 export declare function resetJreResolution(): void;
-export declare function resolveJre(opts?: ResolveJreOptions | undefined): Promise<ResolvedJre | undefined>;
+export declare function resolveJre(options?: ResolveJreOptions | undefined): Promise<ResolvedJre | undefined>;

package/dist/external-tools/jre/resolve.js

@@ -28,12 +28,20 @@ const require_external_tools_jre_from_vfs = require('./from-vfs.js');
 *      resolver fresh.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
 }
-async function doResolveJre(opts) {
+async function doResolveJre(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_jre_from_vfs.jreFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
@@ -42,18 +50,18 @@ async function doResolveJre(opts) {
 	if (fromJavaHome) return fromJavaHome;
 	const fromPath = await require_external_tools_jre_from_path.jreFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_jre_from_download.jreFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_jre_from_download.jreFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetJreResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveJre(opts) {
-	const key = cacheKey(opts);
+function resolveJre(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveJre(opts);
+		cached = doResolveJre(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/jre/types.d.ts

@@ -23,6 +23,6 @@ export interface ResolvedJre {
     /**
      * See {@link ResolvedToolIntegrity}.
      */
-    readonly integrity?: ResolvedToolIntegrity;
+    readonly integrity?: ResolvedToolIntegrity | undefined;
 }
 export type { AdoptiumAssetQuery };

package/dist/external-tools/manifest.d.ts

@@ -9,10 +9,10 @@
  *   integrity-string validation. Shape: { "<tool-name>": { "description":
  *   "human-readable summary", "version": "1.7.2", "release": "asset" |
  *   "tarball" | ..., "repository": "github:owner/repo", "notes": [...],
- *   "checksums": { "<platform-arch>": { "asset": "<asset-filename>",
+ *   "platforms": { "<platform-arch>": { "asset": "<asset-filename>",
  *   "integrity": "sha256-base64=" } } } } Some tools have flavor variants (e.g.
  *   sfw's `free` / `enterprise`) that wrap the `{repository, binaryName,
- *   checksums}` triple under a flavor key. Use `getToolFlavor` for those. Some
+ *   platforms}` triple under a flavor key. Use `getToolFlavor` for those. Some
  *   entries (e.g. `rust`) describe a system tool with a different shape —
  *   they're skipped by `getTool` and fully readable only via the raw
  *   `readManifest` returning unknown.
@@ -42,7 +42,7 @@ export interface ToolChecksum {
     integrity: string;
 }
 /**
- * A downloadable-binary tool entry. `checksums` is keyed by the fleet's
+ * A downloadable-binary tool entry. `platforms` is keyed by the fleet's
  * platform-arch token (`darwin-arm64`, `linux-x64-musl`, `win-x64`, etc. — same
  * vocabulary as `getPlatformArch`).
  */
@@ -53,12 +53,12 @@ export interface ToolEntry {
     repository: string;
     binaryName?: string | undefined;
     notes?: readonly string[] | undefined;
-    checksums: Readonly<Record<string, ToolChecksum>>;
+    platforms: Readonly<Record<string, ToolChecksum>>;
 }
 /**
  * A flavored tool entry — sfw is the canonical example, with `free` and
  * `enterprise` variants sharing the same outer `description` / `version` /
- * `release` but each carrying its own `{repository, binaryName, checksums}`.
+ * `release` but each carrying its own `{repository, binaryName, platforms}`.
  */
 export interface FlavoredToolEntry {
     description: string;
@@ -70,7 +70,7 @@ export interface FlavoredToolEntry {
 export interface ToolFlavor {
     repository: string;
     binaryName?: string | undefined;
-    checksums: Readonly<Record<string, ToolChecksum>>;
+    platforms: Readonly<Record<string, ToolChecksum>>;
 }
 /**
  * Parsed manifest. `tools` is a flat map; the values are unions because some
@@ -91,9 +91,27 @@ export type ManifestEntry = {
     kind: 'other';
     raw: unknown;
 };
+export interface RawChecksum {
+    asset?: unknown | undefined;
+    integrity?: unknown | undefined;
+}
+export interface RawFlavor {
+    repository?: unknown | undefined;
+    binaryName?: unknown | undefined;
+    platforms?: unknown | undefined;
+}
+export interface RawToolEntry {
+    description?: unknown | undefined;
+    version?: unknown | undefined;
+    release?: unknown | undefined;
+    repository?: unknown | undefined;
+    binaryName?: unknown | undefined;
+    notes?: unknown | undefined;
+    platforms?: unknown | undefined;
+}
 export declare function isObject(value: unknown): value is Record<string, unknown>;
 export declare function parseChecksum(raw: unknown, toolName: string, platformKey: string): ToolChecksum;
-export declare function parseChecksums(raw: unknown, toolName: string): Record<string, ToolChecksum>;
+export declare function parsePlatforms(raw: unknown, toolName: string): Record<string, ToolChecksum>;
 export declare function parseToolEntry(raw: unknown, toolName: string): ManifestEntry;
 /**
  * Read an `external-tools.json` file from disk and return the parsed manifest.