@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/paths/normalize.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
 const require_constants_platform = require('../constants/platform.js');
+const require_primordials_string = require('../primordials/string.js');
 const require_strings_search = require('../strings/search.js');
 const require_paths__internal = require('./_internal.js');
 const require_paths_conversion = require('./conversion.js');
@@ -59,9 +59,8 @@ function msysDriveToNative(normalized) {
 * (HTTP requests, file uploads, URL parameters), you MUST validate for path traversal
 * attacks BEFORE calling this function.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function normalizePath(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	const { length } = filepath;
 	if (length === 0) return ".";
 	if (length < 2) return length === 1 && require_primordials_string.StringPrototypeCharCodeAt(filepath, 0) === 92 ? "/" : filepath;
@@ -115,7 +114,7 @@ function normalizePath(pathLike) {
 		}
 		if (start) prefix = "/";
 	}
-	let nextIndex = /* @__PURE__ */ require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
+	let nextIndex = require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
 	/* c8 ignore start */
 	if (nextIndex === -1) {
 		const segment = filepath.slice(start);
@@ -164,7 +163,7 @@ function normalizePath(pathLike) {
 			start += 1;
 			code = require_primordials_string.StringPrototypeCharCodeAt(filepath, start);
 		}
-		nextIndex = /* @__PURE__ */ require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
+		nextIndex = require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
 	}
 	const lastSegment = filepath.slice(start);
 	if (lastSegment.length > 0 && lastSegment !== ".") if (lastSegment === "..") {

package/dist/paths/packages.js

@@ -14,25 +14,22 @@ const require_node_path = require('../node/path.js');
 * POSIX and Windows-style separators so paths captured on either platform
 * classify the same regardless of the host we're running on.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isPackageJsonFile(filepath) {
 	return filepath === "package.json" || require_primordials_string.StringPrototypeEndsWith(filepath, "/package.json") || require_primordials_string.StringPrototypeEndsWith(filepath, "\\package.json");
 }
 /**
 * Resolve directory path from a package.json file path.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolvePackageJsonDirname(filepath) {
-	if (/* @__PURE__ */ isPackageJsonFile(filepath)) return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).dirname(filepath));
-	return /* @__PURE__ */ require_paths_normalize.normalizePath(filepath);
+	if (isPackageJsonFile(filepath)) return require_paths_normalize.normalizePath(require_node_path.getNodePath().dirname(filepath));
+	return require_paths_normalize.normalizePath(filepath);
 }
 /**
 * Resolve full path to package.json from a directory or file path.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolvePackageJsonPath(filepath) {
-	if (/* @__PURE__ */ isPackageJsonFile(filepath)) return /* @__PURE__ */ require_paths_normalize.normalizePath(filepath);
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(filepath, "package.json"));
+	if (isPackageJsonFile(filepath)) return require_paths_normalize.normalizePath(filepath);
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(filepath, "package.json"));
 }
 
 //#endregion

package/dist/paths/predicates.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
 const require_constants_platform = require('../constants/platform.js');
+const require_primordials_string = require('../primordials/string.js');
 const require_paths__internal = require('./_internal.js');
 const require_primordials_regexp = require('../primordials/regexp.js');
 
@@ -34,9 +34,8 @@ const require_primordials_regexp = require('../primordials/regexp.js');
 *
 * @returns {boolean} `true` if absolute, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isAbsolute(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	const { length } = filepath;
 	if (length === 0) return false;
 	const code = require_primordials_string.StringPrototypeCharCodeAt(filepath, 0);
@@ -44,7 +43,7 @@ function isAbsolute(pathLike) {
 	if (code === 92) return true;
 	/* c8 ignore start - Windows drive-letter detection. */
 	if (require_constants_platform.WIN32 && length > 2) {
-		if (/* @__PURE__ */ isWindowsDeviceRoot(code) && require_primordials_string.StringPrototypeCharCodeAt(filepath, 1) === 58 && /* @__PURE__ */ isPathSeparator(require_primordials_string.StringPrototypeCharCodeAt(filepath, 2))) return true;
+		if (isWindowsDeviceRoot(code) && require_primordials_string.StringPrototypeCharCodeAt(filepath, 1) === 58 && isPathSeparator(require_primordials_string.StringPrototypeCharCodeAt(filepath, 2))) return true;
 	}
 	/* c8 ignore stop */
 	return false;
@@ -64,9 +63,8 @@ function isAbsolute(pathLike) {
 *
 * @returns {boolean} `true` if the path contains `node_modules`
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isNodeModules(pathLike) {
-	return require_primordials_regexp.RegExpPrototypeTest(require_paths__internal.nodeModulesPathRegExp, /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike));
+	return require_primordials_regexp.RegExpPrototypeTest(require_paths__internal.nodeModulesPathRegExp, require_paths__internal.pathLikeToString(pathLike));
 }
 /**
 * Check if a value is a valid file path (absolute or relative).
@@ -87,13 +85,12 @@ function isNodeModules(pathLike) {
 *
 * @returns {boolean} `true` if the value is a valid file path
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isPath(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	if (typeof filepath !== "string" || filepath.length === 0) return false;
 	if (/^[a-z][a-z0-9+.-]+:/i.test(filepath)) return false;
 	if (filepath === "." || filepath === "..") return true;
-	if (/* @__PURE__ */ isAbsolute(filepath)) return true;
+	if (isAbsolute(filepath)) return true;
 	if (filepath.includes("/") || filepath.includes("\\")) {
 		if (require_primordials_string.StringPrototypeStartsWith(filepath, "@") && !require_primordials_string.StringPrototypeStartsWith(filepath, "@/")) {
 			const parts = filepath.split("/");
@@ -117,7 +114,6 @@ function isPath(pathLike) {
 *
 * @returns {boolean} `true` if separator
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isPathSeparator(code) {
 	return code === 47 || code === 92;
 }
@@ -137,14 +133,13 @@ function isPathSeparator(code) {
 *
 * @returns {boolean} `true` if the path is relative
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isRelative(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	/* c8 ignore start */
 	if (typeof filepath !== "string") return false;
 	/* c8 ignore stop */
 	if (filepath.length === 0) return true;
-	return !/* @__PURE__ */ isAbsolute(filepath);
+	return !isAbsolute(filepath);
 }
 /**
 * Check if a path uses MSYS/Git Bash Unix-style drive letter notation.
@@ -163,9 +158,8 @@ function isRelative(pathLike) {
 *
 * @returns {boolean} `true` if the path uses MSYS drive letter notation
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isUnixPath(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	return typeof filepath === "string" && require_primordials_regexp.RegExpPrototypeTest(require_paths__internal.msysDriveRegExp, filepath);
 }
 /**
@@ -183,7 +177,6 @@ function isUnixPath(pathLike) {
 * @returns {boolean} `true` if valid drive-letter code
 */
 /* c8 ignore start - Only called from Windows-only branches. */
-/*@__NO_SIDE_EFFECTS__*/
 function isWindowsDeviceRoot(code) {
 	return code >= 65 && code <= 90 || code >= 97 && code <= 122;
 }

package/dist/paths/resolve.js

@@ -1,11 +1,6 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
-const require_constants_platform = require('../constants/platform.js');
-const require_paths__internal = require('./_internal.js');
-const require_paths_predicates = require('./predicates.js');
-const require_paths_normalize = require('./normalize.js');
 
 //#region src/paths/resolve.ts
 /**
@@ -38,14 +33,13 @@ const require_paths_normalize = require('./normalize.js');
 *
 * @returns {string} Relative path from `from` to `to`, or empty string if equal
 */
-/*@__NO_SIDE_EFFECTS__*/
 function relative(from, to) {
 	if (from === to) return "";
-	const actualFrom = /* @__PURE__ */ resolve(from);
-	const actualTo = /* @__PURE__ */ resolve(to);
+	const actualFrom = resolve(from);
+	const actualTo = resolve(to);
 	if (actualFrom === actualTo) return "";
 	/* c8 ignore start - Windows-only case-insensitive comparison. */
-	if (require_constants_platform.WIN32) {
+	if (WIN32) {
 		if (actualFrom.toLowerCase() === actualTo.toLowerCase()) return "";
 	}
 	/* c8 ignore stop */
@@ -58,32 +52,32 @@ function relative(from, to) {
 	let lastCommonSep = -1;
 	let i = 0;
 	for (; i < length; i += 1) {
-		let fromCode = require_primordials_string.StringPrototypeCharCodeAt(actualFrom, fromStart + i);
-		let toCode = require_primordials_string.StringPrototypeCharCodeAt(actualTo, toStart + i);
+		let fromCode = StringPrototypeCharCodeAt(actualFrom, fromStart + i);
+		let toCode = StringPrototypeCharCodeAt(actualTo, toStart + i);
 		/* c8 ignore start - Windows-only case folding. */
-		if (require_constants_platform.WIN32) {
-			if (fromCode >= 65 && fromCode <= 90) fromCode += 32;
-			if (toCode >= 65 && toCode <= 90) toCode += 32;
+		if (WIN32) {
+			if (fromCode >= CHAR_UPPERCASE_A && fromCode <= CHAR_UPPERCASE_Z) fromCode += 32;
+			if (toCode >= CHAR_UPPERCASE_A && toCode <= CHAR_UPPERCASE_Z) toCode += 32;
 		}
 		/* c8 ignore stop */
 		if (fromCode !== toCode) break;
-		if (/* @__PURE__ */ require_paths_predicates.isPathSeparator(require_primordials_string.StringPrototypeCharCodeAt(actualFrom, fromStart + i))) lastCommonSep = i;
+		if (isPathSeparator(StringPrototypeCharCodeAt(actualFrom, fromStart + i))) lastCommonSep = i;
 	}
 	/* c8 ignore start */
 	if (i === length) {
 		if (toLen > length) {
-			if (/* @__PURE__ */ require_paths_predicates.isPathSeparator(require_primordials_string.StringPrototypeCharCodeAt(actualTo, toStart + i))) return actualTo.slice(toStart + i + 1);
+			if (isPathSeparator(StringPrototypeCharCodeAt(actualTo, toStart + i))) return actualTo.slice(toStart + i + 1);
 			if (i === 0) return actualTo.slice(toStart + i);
 		} else if (fromLen > length) {
-			if (/* @__PURE__ */ require_paths_predicates.isPathSeparator(require_primordials_string.StringPrototypeCharCodeAt(actualFrom, fromStart + i))) lastCommonSep = i;
+			if (isPathSeparator(StringPrototypeCharCodeAt(actualFrom, fromStart + i))) lastCommonSep = i;
 			else if (i === 0) lastCommonSep = 0;
 		}
 	}
 	/* c8 ignore stop */
 	let out = "";
 	for (i = fromStart + lastCommonSep + 1; i <= fromEnd; i += 1) {
-		const code = require_primordials_string.StringPrototypeCharCodeAt(actualFrom, i);
-		if (i === fromEnd || /* @__PURE__ */ require_paths_predicates.isPathSeparator(code)) out += out.length === 0 ? ".." : "/..";
+		const code = StringPrototypeCharCodeAt(actualFrom, i);
+		if (i === fromEnd || isPathSeparator(code)) out += out.length === 0 ? ".." : "/..";
 	}
 	return out + actualTo.slice(toStart + lastCommonSep);
 }
@@ -106,11 +100,10 @@ function relative(from, to) {
 *
 * @returns {string} Normalized relative path, or empty string if equal
 */
-/*@__NO_SIDE_EFFECTS__*/
 function relativeResolve(from, to) {
-	const rel = /* @__PURE__ */ relative(from, to);
+	const rel = relative(from, to);
 	if (rel === "") return "";
-	return /* @__PURE__ */ require_paths_normalize.normalizePath(rel);
+	return normalizePath(rel);
 }
 /**
 * Resolve an absolute path from path segments.
@@ -131,7 +124,6 @@ function relativeResolve(from, to) {
 *
 * @returns {string} The resolved absolute path
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolve(...segments) {
 	let resolvedPath = "";
 	let resolvedAbsolute = false;
@@ -140,11 +132,11 @@ function resolve(...segments) {
 		/* c8 ignore start */
 		if (typeof segment !== "string" || segment.length === 0) continue;
 		resolvedPath = segment + (resolvedPath.length === 0 ? "" : `/${resolvedPath}`);
-		resolvedAbsolute = /* @__PURE__ */ require_paths_predicates.isAbsolute(segment);
+		resolvedAbsolute = isAbsolute(segment);
 	}
 	if (!resolvedAbsolute) resolvedPath = /* @__PURE__ */ require("node:process").cwd() + (resolvedPath.length === 0 ? "" : `/${resolvedPath}`);
 	/* c8 ignore stop */
-	return /* @__PURE__ */ require_paths_normalize.normalizePath(resolvedPath);
+	return normalizePath(resolvedPath);
 }
 
 //#endregion

package/dist/paths/rewire.d.ts

@@ -7,6 +7,11 @@
  *   - Automatic cache invalidation for path-dependent modules
  *   - Thread-safe for concurrent test execution
  */
+export interface PathRewireState {
+    testOverrides: Map<string, string | undefined>;
+    valueCache: Map<string, string>;
+    cacheInvalidationCallbacks: Array<() => void>;
+}
 /**
  * Clear a specific path override.
  */

package/dist/paths/rewire.js

@@ -14,13 +14,13 @@ const require_primordials_map_set = require('../primordials/map-set.js');
 *   - Thread-safe for concurrent test execution
 */
 const stateSymbol = Symbol.for("@socketsecurity/lib/paths/rewire/state");
-const _globalThis = globalThis;
-if (!_globalThis[stateSymbol]) _globalThis[stateSymbol] = {
+const globalState = globalThis;
+if (!globalState[stateSymbol]) globalState[stateSymbol] = {
 	testOverrides: new require_primordials_map_set.MapCtor(),
 	valueCache: new require_primordials_map_set.MapCtor(),
 	cacheInvalidationCallbacks: []
 };
-const sharedState = _globalThis[stateSymbol];
+const sharedState = globalState[stateSymbol];
 const testOverrides = sharedState.testOverrides;
 const valueCache = sharedState.valueCache;
 const cacheInvalidationCallbacks = sharedState.cacheInvalidationCallbacks;

package/dist/paths/socket.d.ts

@@ -1,12 +1,13 @@
 /**
- * @file Path utilities for Socket ecosystem directories. Provides
- *   platform-aware path resolution for Socket tools' shared directory
- *   structure. Directory Structure: ~/.socket/ ├── _cacache/ #
- *   Content-addressable cache for npm packages ├── _dlx/ # DLX installations
- *   (content-addressed by hash) │ ├── <hash>/ # npm package installs
- *   (dlx-package) │ └── <hash>/ # binary downloads (dlx-binary) ├── _socket/ #
- *   Socket CLI app directory ├── _registry/ # Socket Registry app directory └──
- *   _sfw/ # Socket Firewall app directory.
+ * @file Path utilities for Socket ecosystem directories. Platform-aware
+ *   resolution for the shared ~/.socket/ layout. The `_`-prefixed entries are
+ *   Socket-managed DIRS (not apps): `_cacache` content-addressable cache;
+ *   `_dlx/<hash>/` name+version binary store (node, jre, python, sfw, …);
+ *   `_state/<app>/` version-LESS persistent app state (daemon socket + lock +
+ *   OAuth refresh; mirrors pnpm `state-dir` / XDG_STATE_HOME), with
+ *   `_state/<app>/run/` for a daemon's socket/lock/pid; `_wheelhouse`
+ *   cross-fleet shared bin. Generic per-app dirs (`getSocketAppDir('<name>')`)
+ *   nest under the same `_`-prefix.
  */
 /**
  * Get the OS home directory. Can be overridden in tests using
@@ -37,67 +38,56 @@ export declare function getSocketAppCacheDir(appName: string): string;
  */
 export declare function getSocketAppCacheTtlDir(appName: string): string;
 /**
- * Get a Socket app directory (~/.socket/_<appName>).
+ * Get a Socket app directory (~/.socket/_<appName>). The `_` prefix is applied
+ * here; pass the bare app name (e.g. 'socket', 'registry').
  */
 /**
- * Get a Socket app directory (~/.socket/_<appName>).
+ * Get a Socket app directory (~/.socket/_<appName>). The `_` prefix is applied
+ * here; pass the bare app name (e.g. 'socket', 'registry').
  */
 export declare function getSocketAppDir(appName: string): string;
 /**
- * Get the Socket cacache directory (~/.socket/_cacache). Can be overridden with
- * SOCKET_CACACHE_DIR environment variable or via setPath() for testing. Result
- * is cached via getPathValue for performance.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-cacache-dir', ...)
- * 2. SOCKET_CACACHE_DIR - Full override of cacache directory
- * 3. Default: $SOCKET_HOME/_cacache or $HOME/.socket/_cacache
+ * Get the Socket cacache directory (~/.socket/_cacache). Override precedence:
+ * setPath('socket-cacache-dir', …) → SOCKET_CACACHE_DIR env →
+ * $SOCKET_HOME/_cacache → $HOME/.socket/_cacache.
  */
 /**
- * Get the Socket cacache directory (~/.socket/_cacache). Can be overridden with
- * SOCKET_CACACHE_DIR environment variable or via setPath() for testing. Result
- * is cached via getPathValue for performance.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-cacache-dir', ...)
- * 2. SOCKET_CACACHE_DIR - Full override of cacache directory
- * 3. Default: $SOCKET_HOME/_cacache or $HOME/.socket/_cacache
+ * Get an app's runtime directory (~/.socket/_state/<app>/run/) — the home for a
+ * daemon's Unix socket + `concurrency.lock` + `<socket>.pid`. Version-less so
+ * the socket path is stable across binary upgrades.
  */
-export declare function getSocketCacacheDir(): string;
+export declare function getSocketAppRuntimeDir(appName: string): string;
 /**
- * Get the Socket CLI directory (~/.socket/_socket).
+ * Get the Socket user directory (~/.socket). Override precedence:
+ * setPath('socket-user-dir', …) → SOCKET_HOME env → $HOME/.socket →
+ * /tmp/.socket (Unix) or %TEMP%.socket (Windows).
  */
 /**
- * Get the Socket CLI directory (~/.socket/_socket).
+ * Get an app's persistent state directory (~/.socket/_state/<app>/). The
+ * `<app>` is a real app (proteus, acorn) nesting its version-less state inside
+ * the `_state` infra dir.
  */
-export declare function getSocketCliDir(): string;
+export declare function getSocketAppStateDir(appName: string): string;
 /**
- * Get the Socket DLX directory (~/.socket/_dlx). Can be overridden with
- * SOCKET_DLX_DIR environment variable or via setPath() for testing. Result is
- * cached via getPathValue for performance.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-dlx-dir', ...)
- * 2. SOCKET_DLX_DIR - Full override of DLX cache directory
- * 3. SOCKET_HOME/_dlx - Base directory override (inherits from getSocketUserDir)
- * 4. Default: $HOME/.socket/_dlx
- * 5. Fallback: /tmp/.socket/_dlx (Unix) or %TEMP%.socket_dlx (Windows)
+ * Get an app's runtime directory (~/.socket/_state/<app>/run/) — the home for a
+ * daemon's Unix socket + `concurrency.lock` + `<socket>.pid`. Version-less so
+ * the socket path is stable across binary upgrades.
  */
 /**
- * Get the Socket DLX directory (~/.socket/_dlx). Can be overridden with
- * SOCKET_DLX_DIR environment variable or via setPath() for testing. Result is
- * cached via getPathValue for performance.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-dlx-dir', ...)
- * 2. SOCKET_DLX_DIR - Full override of DLX cache directory
- * 3. SOCKET_HOME/_dlx - Base directory override (inherits from getSocketUserDir)
- * 4. Default: $HOME/.socket/_dlx
- * 5. Fallback: /tmp/.socket/_dlx (Unix) or %TEMP%.socket_dlx (Windows)
+ * Get the Socket cacache directory (~/.socket/_cacache). Override precedence:
+ * setPath('socket-cacache-dir', …) → SOCKET_CACACHE_DIR env →
+ * $SOCKET_HOME/_cacache → $HOME/.socket/_cacache.
+ */
+export declare function getSocketCacacheDir(): string;
+/**
+ * Get the Socket DLX directory (~/.socket/_dlx) — the name+version binary store
+ * (node, jre, python, sfw, …). Override precedence: setPath('socket-dlx-dir',
+ * …) → SOCKET_DLX_DIR env → $SOCKET_HOME/_dlx → $HOME/.socket/_dlx.
+ */
+/**
+ * Get the Socket DLX directory (~/.socket/_dlx) — the name+version binary store
+ * (node, jre, python, sfw, …). Override precedence: setPath('socket-dlx-dir',
+ * …) → SOCKET_DLX_DIR env → $SOCKET_HOME/_dlx → $HOME/.socket/_dlx.
  */
 export declare function getSocketDlxDir(): string;
 /**
@@ -110,56 +100,40 @@ export declare function getSocketDlxDir(): string;
  */
 export declare function getSocketHomePath(): string;
 /**
- * Get the Socket Registry directory (~/.socket/_registry).
+ * Get the Socket state directory (~/.socket/_state) — version-LESS persistent
+ * app state (the home for daemon sockets, locks, OAuth refresh, durable caches
+ * that survive version bumps; mirrors pnpm `state-dir` / XDG_STATE_HOME).
+ * Override precedence: setPath('socket-state-dir', …) → SOCKET_STATE_DIR env →
+ * $SOCKET_HOME/_state → $HOME/.socket/_state.
  */
 /**
- * Get the Socket Registry directory (~/.socket/_registry).
+ * Get the Socket state directory (~/.socket/_state) — version-LESS persistent
+ * app state (the home for daemon sockets, locks, OAuth refresh, durable caches
+ * that survive version bumps; mirrors pnpm `state-dir` / XDG_STATE_HOME).
+ * Override precedence: setPath('socket-state-dir', …) → SOCKET_STATE_DIR env →
+ * $SOCKET_HOME/_state → $HOME/.socket/_state.
  */
-export declare function getSocketRegistryDir(): string;
+export declare function getSocketStateDir(): string;
 /**
- * Get the Socket Registry GitHub cache directory
- * (~/.socket/_registry/cache/ttl/github).
+ * Get an app's persistent state directory (~/.socket/_state/<app>/). The
+ * `<app>` is a real app (proteus, acorn) nesting its version-less state inside
+ * the `_state` infra dir.
  */
 /**
- * Get the Socket Registry GitHub cache directory
- * (~/.socket/_registry/cache/ttl/github).
+ * Get the Socket user directory (~/.socket). Override precedence:
+ * setPath('socket-user-dir', …) → SOCKET_HOME env → $HOME/.socket →
+ * /tmp/.socket (Unix) or %TEMP%.socket (Windows).
  */
-export declare function getSocketRegistryGithubCacheDir(): string;
+export declare function getSocketUserDir(): string;
 /**
  * Get the Socket Wheelhouse directory (~/.socket/_wheelhouse). Shared
  * cross-fleet location for binaries that every fleet member can reach without
  * each one re-downloading and re-extracting per-repo. Tool installers (janus,
  * sfw, etc.) drop their resolved executables under
  * `<wheelhouse>/<tool>/<version>/<platform-arch>/`; consumers add the
- * appropriate `bin/` to PATH or invoke the binary by absolute path.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-wheelhouse-dir', ...)
- * 2. SOCKET_HOME/_wheelhouse - Base directory override (inherits from
- *    getSocketUserDir)
- * 3. Default: $HOME/.socket/_wheelhouse
- */
-/**
- * Get the Socket user directory (~/.socket). Can be overridden with SOCKET_HOME
- * environment variable or via setPath() for testing. Result is cached via
- * getPathValue for performance.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-user-dir', ...)
- * 2. SOCKET_HOME - Base directory override
- * 3. Default: $HOME/.socket
- * 4. Fallback: /tmp/.socket (Unix) or %TEMP%.socket (Windows)
- */
-export declare function getSocketUserDir(): string;
-/**
- * Get the user's home directory. Uses environment variables directly to support
- * test mocking. Falls back to temporary directory if home is not available.
- *
- * Priority order: 1. HOME environment variable (Unix) 2. USERPROFILE
- * environment variable (Windows) 3. getNodeOs().homedir() 4. Fallback:
- * getNodeOs().tmpdir() (rarely used, for restricted environments)
+ * appropriate `bin/` to PATH or invoke the binary by absolute path. Override
+ * precedence: setPath('socket-wheelhouse-dir', …) → $SOCKET_HOME/_wheelhouse →
+ * $HOME/.socket/_wheelhouse.
  */
 /**
  * Get the Socket Wheelhouse directory (~/.socket/_wheelhouse). Shared
@@ -167,34 +141,23 @@ export declare function getSocketUserDir(): string;
  * each one re-downloading and re-extracting per-repo. Tool installers (janus,
  * sfw, etc.) drop their resolved executables under
  * `<wheelhouse>/<tool>/<version>/<platform-arch>/`; consumers add the
- * appropriate `bin/` to PATH or invoke the binary by absolute path.
- *
- * Priority order:
- *
- * 1. Test override via setPath('socket-wheelhouse-dir', ...)
- * 2. SOCKET_HOME/_wheelhouse - Base directory override (inherits from
- *    getSocketUserDir)
- * 3. Default: $HOME/.socket/_wheelhouse
+ * appropriate `bin/` to PATH or invoke the binary by absolute path. Override
+ * precedence: setPath('socket-wheelhouse-dir', …) → $SOCKET_HOME/_wheelhouse →
+ * $HOME/.socket/_wheelhouse.
  */
 export declare function getSocketWheelhouseDir(): string;
 /**
- * Get the Socket user directory (~/.socket). Can be overridden with SOCKET_HOME
- * environment variable or via setPath() for testing. Result is cached via
- * getPathValue for performance.
- *
- * Priority order:
+ * Get the user's home directory. Uses environment variables directly to support
+ * test mocking. Falls back to temporary directory if home is not available.
  *
- * 1. Test override via setPath('socket-user-dir', ...)
- * 2. SOCKET_HOME - Base directory override
- * 3. Default: $HOME/.socket
- * 4. Fallback: /tmp/.socket (Unix) or %TEMP%.socket (Windows)
+ * Priority order: 1. HOME (Unix) 2. USERPROFILE (Windows) 3.
+ * getNodeOs().homedir() 4. Fallback: getNodeOs().tmpdir() (restricted envs).
  */
 /**
  * Get the user's home directory. Uses environment variables directly to support
  * test mocking. Falls back to temporary directory if home is not available.
  *
- * Priority order: 1. HOME environment variable (Unix) 2. USERPROFILE
- * environment variable (Windows) 3. getNodeOs().homedir() 4. Fallback:
- * getNodeOs().tmpdir() (rarely used, for restricted environments)
+ * Priority order: 1. HOME (Unix) 2. USERPROFILE (Windows) 3.
+ * getNodeOs().homedir() 4. Fallback: getNodeOs().tmpdir() (restricted envs).
  */
 export declare function getUserHomeDir(): string;