@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/paths/socket.js

@@ -2,33 +2,34 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_node_os = require('../node/os.js');
+const require_env_home = require('../env/home.js');
 const require_paths_normalize = require('./normalize.js');
 const require_node_path = require('../node/path.js');
 const require_env_socket = require('../env/socket.js');
-const require_constants_github = require('../constants/github.js');
 const require_constants_socket = require('../constants/socket.js');
-const require_env_home = require('../env/home.js');
 const require_env_windows = require('../env/windows.js');
 const require_paths_dirnames = require('./dirnames.js');
 const require_paths_rewire = require('./rewire.js');
 
 //#region src/paths/socket.ts
 /**
-* @file Path utilities for Socket ecosystem directories. Provides
-*   platform-aware path resolution for Socket tools' shared directory
-*   structure. Directory Structure: ~/.socket/ ├── _cacache/ #
-*   Content-addressable cache for npm packages ├── _dlx/ # DLX installations
-*   (content-addressed by hash) │ ├── <hash>/ # npm package installs
-*   (dlx-package) │ └── <hash>/ # binary downloads (dlx-binary) ├── _socket/ #
-*   Socket CLI app directory ├── _registry/ # Socket Registry app directory └──
-*   _sfw/ # Socket Firewall app directory.
+* @file Path utilities for Socket ecosystem directories. Platform-aware
+*   resolution for the shared ~/.socket/ layout. The `_`-prefixed entries are
+*   Socket-managed DIRS (not apps): `_cacache` content-addressable cache;
+*   `_dlx/<hash>/` name+version binary store (node, jre, python, sfw, …);
+*   `_state/<app>/` version-LESS persistent app state (daemon socket + lock +
+*   OAuth refresh; mirrors pnpm `state-dir` / XDG_STATE_HOME), with
+*   `_state/<app>/run/` for a daemon's socket/lock/pid; `_wheelhouse`
+*   cross-fleet shared bin. Generic per-app dirs (`getSocketAppDir('<name>')`)
+*   nest under the same `_`-prefix.
 */
 /**
 * Get the OS home directory. Can be overridden in tests using
 * setPath('homedir', ...) from paths/rewire.
 */
 function getOsHomeDir() {
-	return require_paths_rewire.getPathValue("homedir", () => (/* @__PURE__ */ require_node_os.getNodeOs()).homedir());
+	const os = require_node_os.getNodeOs();
+	return require_paths_rewire.getPathValue("homedir", () => os.homedir());
 }
 /**
 * Get the OS temporary directory. Can be overridden in tests using
@@ -39,7 +40,8 @@ function getOsHomeDir() {
 * setPath('tmpdir', ...) from paths/rewire.
 */
 function getOsTmpDir() {
-	return require_paths_rewire.getPathValue("tmpdir", () => (/* @__PURE__ */ require_node_os.getNodeOs()).tmpdir());
+	const os = require_node_os.getNodeOs();
+	return require_paths_rewire.getPathValue("tmpdir", () => os.tmpdir());
 }
 /**
 * Get a Socket app cache directory (~/.socket/_<appName>/cache).
@@ -48,7 +50,7 @@ function getOsTmpDir() {
 * Get a Socket app cache directory (~/.socket/_<appName>/cache).
 */
 function getSocketAppCacheDir(appName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketAppDir(appName), require_paths_dirnames.CACHE_DIR));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketAppDir(appName), require_paths_dirnames.CACHE_DIR));
 }
 /**
 * Get a Socket app TTL cache directory (~/.socket/_<appName>/cache/ttl).
@@ -57,84 +59,75 @@ function getSocketAppCacheDir(appName) {
 * Get a Socket app TTL cache directory (~/.socket/_<appName>/cache/ttl).
 */
 function getSocketAppCacheTtlDir(appName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketAppCacheDir(appName), "ttl"));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketAppCacheDir(appName), "ttl"));
 }
 /**
-* Get a Socket app directory (~/.socket/_<appName>).
+* Get a Socket app directory (~/.socket/_<appName>). The `_` prefix is applied
+* here; pass the bare app name (e.g. 'socket', 'registry').
 */
 /**
-* Get a Socket app directory (~/.socket/_<appName>).
+* Get a Socket app directory (~/.socket/_<appName>). The `_` prefix is applied
+* here; pass the bare app name (e.g. 'socket', 'registry').
 */
 function getSocketAppDir(appName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketUserDir(), `${"_"}${appName}`));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketUserDir(), `${"_"}${appName}`));
 }
 /**
-* Get the Socket cacache directory (~/.socket/_cacache). Can be overridden with
-* SOCKET_CACACHE_DIR environment variable or via setPath() for testing. Result
-* is cached via getPathValue for performance.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-cacache-dir', ...)
-* 2. SOCKET_CACACHE_DIR - Full override of cacache directory
-* 3. Default: $SOCKET_HOME/_cacache or $HOME/.socket/_cacache
+* Get the Socket cacache directory (~/.socket/_cacache). Override precedence:
+* setPath('socket-cacache-dir', …) → SOCKET_CACACHE_DIR env →
+* $SOCKET_HOME/_cacache → $HOME/.socket/_cacache.
 */
 /**
-* Get the Socket cacache directory (~/.socket/_cacache). Can be overridden with
-* SOCKET_CACACHE_DIR environment variable or via setPath() for testing. Result
-* is cached via getPathValue for performance.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-cacache-dir', ...)
-* 2. SOCKET_CACACHE_DIR - Full override of cacache directory
-* 3. Default: $SOCKET_HOME/_cacache or $HOME/.socket/_cacache
+* Get an app's runtime directory (~/.socket/_state/<app>/run/) — the home for a
+* daemon's Unix socket + `concurrency.lock` + `<socket>.pid`. Version-less so
+* the socket path is stable across binary upgrades.
 */
-function getSocketCacacheDir() {
-	return require_paths_rewire.getPathValue("socket-cacache-dir", () => {
-		if (/* @__PURE__ */ require_env_socket.getSocketCacacheDirEnv()) return /* @__PURE__ */ require_paths_normalize.normalizePath(/* @__PURE__ */ require_env_socket.getSocketCacacheDirEnv());
-		return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketUserDir(), `${"_"}cacache`));
-	});
+function getSocketAppRuntimeDir(appName) {
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketAppStateDir(appName), "run"));
 }
 /**
-* Get the Socket CLI directory (~/.socket/_socket).
+* Get the Socket user directory (~/.socket). Override precedence:
+* setPath('socket-user-dir', …) → SOCKET_HOME env → $HOME/.socket →
+* /tmp/.socket (Unix) or %TEMP%.socket (Windows).
 */
 /**
-* Get the Socket CLI directory (~/.socket/_socket).
+* Get an app's persistent state directory (~/.socket/_state/<app>/). The
+* `<app>` is a real app (proteus, acorn) nesting its version-less state inside
+* the `_state` infra dir.
 */
-function getSocketCliDir() {
-	return getSocketAppDir(require_constants_socket.SOCKET_CLI_APP_NAME);
+function getSocketAppStateDir(appName) {
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketStateDir(), appName));
 }
 /**
-* Get the Socket DLX directory (~/.socket/_dlx). Can be overridden with
-* SOCKET_DLX_DIR environment variable or via setPath() for testing. Result is
-* cached via getPathValue for performance.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-dlx-dir', ...)
-* 2. SOCKET_DLX_DIR - Full override of DLX cache directory
-* 3. SOCKET_HOME/_dlx - Base directory override (inherits from getSocketUserDir)
-* 4. Default: $HOME/.socket/_dlx
-* 5. Fallback: /tmp/.socket/_dlx (Unix) or %TEMP%.socket_dlx (Windows)
+* Get an app's runtime directory (~/.socket/_state/<app>/run/) — the home for a
+* daemon's Unix socket + `concurrency.lock` + `<socket>.pid`. Version-less so
+* the socket path is stable across binary upgrades.
 */
 /**
-* Get the Socket DLX directory (~/.socket/_dlx). Can be overridden with
-* SOCKET_DLX_DIR environment variable or via setPath() for testing. Result is
-* cached via getPathValue for performance.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-dlx-dir', ...)
-* 2. SOCKET_DLX_DIR - Full override of DLX cache directory
-* 3. SOCKET_HOME/_dlx - Base directory override (inherits from getSocketUserDir)
-* 4. Default: $HOME/.socket/_dlx
-* 5. Fallback: /tmp/.socket/_dlx (Unix) or %TEMP%.socket_dlx (Windows)
+* Get the Socket cacache directory (~/.socket/_cacache). Override precedence:
+* setPath('socket-cacache-dir', …) → SOCKET_CACACHE_DIR env →
+* $SOCKET_HOME/_cacache → $HOME/.socket/_cacache.
+*/
+function getSocketCacacheDir() {
+	return require_paths_rewire.getPathValue("socket-cacache-dir", () => {
+		if (require_env_socket.getSocketCacacheDirEnv()) return require_paths_normalize.normalizePath(require_env_socket.getSocketCacacheDirEnv());
+		return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketUserDir(), require_constants_socket.SOCKET_DIR.cacache));
+	});
+}
+/**
+* Get the Socket DLX directory (~/.socket/_dlx) — the name+version binary store
+* (node, jre, python, sfw, …). Override precedence: setPath('socket-dlx-dir',
+* …) → SOCKET_DLX_DIR env → $SOCKET_HOME/_dlx → $HOME/.socket/_dlx.
+*/
+/**
+* Get the Socket DLX directory (~/.socket/_dlx) — the name+version binary store
+* (node, jre, python, sfw, …). Override precedence: setPath('socket-dlx-dir',
+* …) → SOCKET_DLX_DIR env → $SOCKET_HOME/_dlx → $HOME/.socket/_dlx.
 */
 function getSocketDlxDir() {
 	return require_paths_rewire.getPathValue("socket-dlx-dir", () => {
-		if (/* @__PURE__ */ require_env_socket.getSocketDlxDirEnv()) return /* @__PURE__ */ require_paths_normalize.normalizePath(/* @__PURE__ */ require_env_socket.getSocketDlxDirEnv());
-		return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketUserDir(), `${"_"}${"dlx"}`));
+		if (require_env_socket.getSocketDlxDirEnv()) return require_paths_normalize.normalizePath(require_env_socket.getSocketDlxDirEnv());
+		return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketUserDir(), require_constants_socket.SOCKET_DIR.dlx));
 	});
 }
 /**
@@ -149,24 +142,41 @@ function getSocketHomePath() {
 	return getSocketUserDir();
 }
 /**
-* Get the Socket Registry directory (~/.socket/_registry).
+* Get the Socket state directory (~/.socket/_state) — version-LESS persistent
+* app state (the home for daemon sockets, locks, OAuth refresh, durable caches
+* that survive version bumps; mirrors pnpm `state-dir` / XDG_STATE_HOME).
+* Override precedence: setPath('socket-state-dir', …) → SOCKET_STATE_DIR env →
+* $SOCKET_HOME/_state → $HOME/.socket/_state.
 */
 /**
-* Get the Socket Registry directory (~/.socket/_registry).
+* Get the Socket state directory (~/.socket/_state) — version-LESS persistent
+* app state (the home for daemon sockets, locks, OAuth refresh, durable caches
+* that survive version bumps; mirrors pnpm `state-dir` / XDG_STATE_HOME).
+* Override precedence: setPath('socket-state-dir', …) → SOCKET_STATE_DIR env →
+* $SOCKET_HOME/_state → $HOME/.socket/_state.
 */
-function getSocketRegistryDir() {
-	return getSocketAppDir(require_constants_socket.SOCKET_REGISTRY_APP_NAME);
+function getSocketStateDir() {
+	return require_paths_rewire.getPathValue("socket-state-dir", () => {
+		if (require_env_socket.getSocketStateDirEnv()) return require_paths_normalize.normalizePath(require_env_socket.getSocketStateDirEnv());
+		return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketUserDir(), require_constants_socket.SOCKET_DIR.state));
+	});
 }
 /**
-* Get the Socket Registry GitHub cache directory
-* (~/.socket/_registry/cache/ttl/github).
+* Get an app's persistent state directory (~/.socket/_state/<app>/). The
+* `<app>` is a real app (proteus, acorn) nesting its version-less state inside
+* the `_state` infra dir.
 */
 /**
-* Get the Socket Registry GitHub cache directory
-* (~/.socket/_registry/cache/ttl/github).
+* Get the Socket user directory (~/.socket). Override precedence:
+* setPath('socket-user-dir', …) → SOCKET_HOME env → $HOME/.socket →
+* /tmp/.socket (Unix) or %TEMP%.socket (Windows).
 */
-function getSocketRegistryGithubCacheDir() {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketAppCacheTtlDir(require_constants_socket.SOCKET_REGISTRY_APP_NAME), require_constants_github.CACHE_GITHUB_DIR));
+function getSocketUserDir() {
+	return require_paths_rewire.getPathValue("socket-user-dir", () => {
+		const socketHome = require_env_socket.getSocketHome();
+		if (socketHome) return require_paths_normalize.normalizePath(socketHome);
+		return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getUserHomeDir(), require_paths_dirnames.DOT_SOCKET_DIR));
+	});
 }
 /**
 * Get the Socket Wheelhouse directory (~/.socket/_wheelhouse). Shared
@@ -174,41 +184,9 @@ function getSocketRegistryGithubCacheDir() {
 * each one re-downloading and re-extracting per-repo. Tool installers (janus,
 * sfw, etc.) drop their resolved executables under
 * `<wheelhouse>/<tool>/<version>/<platform-arch>/`; consumers add the
-* appropriate `bin/` to PATH or invoke the binary by absolute path.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-wheelhouse-dir', ...)
-* 2. SOCKET_HOME/_wheelhouse - Base directory override (inherits from
-*    getSocketUserDir)
-* 3. Default: $HOME/.socket/_wheelhouse
-*/
-/**
-* Get the Socket user directory (~/.socket). Can be overridden with SOCKET_HOME
-* environment variable or via setPath() for testing. Result is cached via
-* getPathValue for performance.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-user-dir', ...)
-* 2. SOCKET_HOME - Base directory override
-* 3. Default: $HOME/.socket
-* 4. Fallback: /tmp/.socket (Unix) or %TEMP%.socket (Windows)
-*/
-function getSocketUserDir() {
-	return require_paths_rewire.getPathValue("socket-user-dir", () => {
-		const socketHome = /* @__PURE__ */ require_env_socket.getSocketHome();
-		if (socketHome) return /* @__PURE__ */ require_paths_normalize.normalizePath(socketHome);
-		return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getUserHomeDir(), require_paths_dirnames.DOT_SOCKET_DIR));
-	});
-}
-/**
-* Get the user's home directory. Uses environment variables directly to support
-* test mocking. Falls back to temporary directory if home is not available.
-*
-* Priority order: 1. HOME environment variable (Unix) 2. USERPROFILE
-* environment variable (Windows) 3. getNodeOs().homedir() 4. Fallback:
-* getNodeOs().tmpdir() (rarely used, for restricted environments)
+* appropriate `bin/` to PATH or invoke the binary by absolute path. Override
+* precedence: setPath('socket-wheelhouse-dir', …) → $SOCKET_HOME/_wheelhouse →
+* $HOME/.socket/_wheelhouse.
 */
 /**
 * Get the Socket Wheelhouse directory (~/.socket/_wheelhouse). Shared
@@ -216,44 +194,33 @@ function getSocketUserDir() {
 * each one re-downloading and re-extracting per-repo. Tool installers (janus,
 * sfw, etc.) drop their resolved executables under
 * `<wheelhouse>/<tool>/<version>/<platform-arch>/`; consumers add the
-* appropriate `bin/` to PATH or invoke the binary by absolute path.
-*
-* Priority order:
-*
-* 1. Test override via setPath('socket-wheelhouse-dir', ...)
-* 2. SOCKET_HOME/_wheelhouse - Base directory override (inherits from
-*    getSocketUserDir)
-* 3. Default: $HOME/.socket/_wheelhouse
+* appropriate `bin/` to PATH or invoke the binary by absolute path. Override
+* precedence: setPath('socket-wheelhouse-dir', …) → $SOCKET_HOME/_wheelhouse →
+* $HOME/.socket/_wheelhouse.
 */
 function getSocketWheelhouseDir() {
 	return require_paths_rewire.getPathValue("socket-wheelhouse-dir", () => {
-		return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getSocketUserDir(), `${"_"}${require_constants_socket.SOCKET_WHEELHOUSE_APP_NAME}`));
+		return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getSocketUserDir(), require_constants_socket.SOCKET_DIR.wheelhouse));
 	});
 }
 /**
-* Get the Socket user directory (~/.socket). Can be overridden with SOCKET_HOME
-* environment variable or via setPath() for testing. Result is cached via
-* getPathValue for performance.
-*
-* Priority order:
+* Get the user's home directory. Uses environment variables directly to support
+* test mocking. Falls back to temporary directory if home is not available.
 *
-* 1. Test override via setPath('socket-user-dir', ...)
-* 2. SOCKET_HOME - Base directory override
-* 3. Default: $HOME/.socket
-* 4. Fallback: /tmp/.socket (Unix) or %TEMP%.socket (Windows)
+* Priority order: 1. HOME (Unix) 2. USERPROFILE (Windows) 3.
+* getNodeOs().homedir() 4. Fallback: getNodeOs().tmpdir() (restricted envs).
 */
 /**
 * Get the user's home directory. Uses environment variables directly to support
 * test mocking. Falls back to temporary directory if home is not available.
 *
-* Priority order: 1. HOME environment variable (Unix) 2. USERPROFILE
-* environment variable (Windows) 3. getNodeOs().homedir() 4. Fallback:
-* getNodeOs().tmpdir() (rarely used, for restricted environments)
+* Priority order: 1. HOME (Unix) 2. USERPROFILE (Windows) 3.
+* getNodeOs().homedir() 4. Fallback: getNodeOs().tmpdir() (restricted envs).
 */
 function getUserHomeDir() {
-	const home = /* @__PURE__ */ require_env_home.getHome();
+	const home = require_env_home.getHome();
 	if (home) return home;
-	const userProfile = /* @__PURE__ */ require_env_windows.getUserprofile();
+	const userProfile = require_env_windows.getUserprofile();
 	if (userProfile) return userProfile;
 	try {
 		const osHome = getOsHomeDir();
@@ -270,12 +237,12 @@ exports.getOsTmpDir = getOsTmpDir;
 exports.getSocketAppCacheDir = getSocketAppCacheDir;
 exports.getSocketAppCacheTtlDir = getSocketAppCacheTtlDir;
 exports.getSocketAppDir = getSocketAppDir;
+exports.getSocketAppRuntimeDir = getSocketAppRuntimeDir;
+exports.getSocketAppStateDir = getSocketAppStateDir;
 exports.getSocketCacacheDir = getSocketCacacheDir;
-exports.getSocketCliDir = getSocketCliDir;
 exports.getSocketDlxDir = getSocketDlxDir;
 exports.getSocketHomePath = getSocketHomePath;
-exports.getSocketRegistryDir = getSocketRegistryDir;
-exports.getSocketRegistryGithubCacheDir = getSocketRegistryGithubCacheDir;
+exports.getSocketStateDir = getSocketStateDir;
 exports.getSocketUserDir = getSocketUserDir;
 exports.getSocketWheelhouseDir = getSocketWheelhouseDir;
 exports.getUserHomeDir = getUserHomeDir;

package/dist/paths/walk.d.ts

@@ -1,6 +1,6 @@
 /**
  * @file Walk parent directories. `walkUp` is the lazy ancestor generator that
- *   `fs/find-up` and package-root lookups build on: given a starting path it
+ *   `fs/find` and package-root lookups build on: given a starting path it
  *   yields that path, then each parent, up to and INCLUDING the filesystem root
  *   (or a caller-supplied `stopAt` boundary). Lazy so a caller can stop early
  *   without computing the whole chain.

package/dist/paths/walk.js

@@ -11,7 +11,7 @@ node_process = require_runtime.__toESM(node_process);
 //#region src/paths/walk.ts
 /**
 * @file Walk parent directories. `walkUp` is the lazy ancestor generator that
-*   `fs/find-up` and package-root lookups build on: given a starting path it
+*   `fs/find` and package-root lookups build on: given a starting path it
 *   yields that path, then each parent, up to and INCLUDING the filesystem root
 *   (or a caller-supplied `stopAt` boundary). Lazy so a caller can stop early
 *   without computing the whole chain.
@@ -41,13 +41,13 @@ function* walkUp(from, options) {
 		__proto__: null,
 		...options
 	};
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
-	const dirname = (/* @__PURE__ */ require_smol_path.getSmolPath())?.dirname ?? path.dirname;
+	const path = require_node_path.getNodePath();
+	const dirname = require_smol_path.getSmolPath()?.dirname ?? path.dirname;
 	let dir = path.resolve(cwd, from);
 	const stopDir = stopAt ? path.resolve(cwd, stopAt) : void 0;
 	let prev;
 	while (dir !== prev) {
-		yield /* @__PURE__ */ require_paths_normalize.normalizePath(dir);
+		yield require_paths_normalize.normalizePath(dir);
 		if (stopDir !== void 0 && dir === stopDir) return;
 		prev = dir;
 		dir = dirname(dir);

package/dist/perf/report.js

@@ -39,7 +39,7 @@ const require_perf_metrics = require('./metrics.js');
 function generatePerformanceReport() {
 	if (!require_perf_enabled.isPerfEnabled() || require_perf__internal.performanceMetrics.length === 0) return "(no performance data collected - enable with DEBUG=perf)";
 	const summary = require_perf_metrics.getPerformanceSummary();
-	const operations = require_primordials_object.ObjectKeys(summary).sort();
+	const operations = require_primordials_object.ObjectKeys(summary).toSorted();
 	let report = "\n╔═══════════════════════════════════════════════╗\n";
 	report += "║         Performance Report                    ║\n";
 	report += "╚═══════════════════════════════════════════════╝\n\n";
@@ -70,7 +70,7 @@ function generatePerformanceReport() {
 function printPerformanceSummary() {
 	if (!require_perf_enabled.isPerfEnabled() || require_perf__internal.performanceMetrics.length === 0) return;
 	const summary = require_perf_metrics.getPerformanceSummary();
-	const operations = require_primordials_object.ObjectKeys(summary).sort();
+	const operations = require_primordials_object.ObjectKeys(summary).toSorted();
 	require_debug_output.debugLog("[perf]\n=== Performance Summary ===");
 	for (const operation of operations) {
 		const stats = summary[operation];

package/dist/perf/types.d.ts

@@ -11,5 +11,5 @@ export type PerformanceMetrics = {
     operation: string;
     duration: number;
     timestamp: number;
-    metadata?: Record<string, unknown>;
+    metadata?: Record<string, unknown> | undefined;
 };

package/dist/pkg-ext/data.js

@@ -17,7 +17,7 @@ const packageExtensions = ObjectFreeze([
 	["@yarnpkg/extensions@>=1.1.0", { peerDependencies: void 0 }],
 	["abab@>=2.0.0", { devDependencies: { webpack: "^3.12.0" } }],
 	["is-generator-function@>=1.0.7", { scripts: { "test:uglified": "" } }]
-].sort((a_, b_) => {
+].toSorted((a_, b_) => {
 	const aIndex = a_[0].lastIndexOf("@");
 	const bIndex = b_[0].lastIndexOf("@");
 	const a = aIndex === -1 ? a_[0] : a_[0].slice(0, aIndex);

package/dist/primordials/array.js

@@ -11,7 +11,7 @@ const require_smol_primordial = require('../smol/primordial.js');
 *   `Array.prototype.with` are ES2024 / ES2023; the primordial captures the
 *   live reference at module load so consumers never see a tampered global.
 */
-const _smolPrimordial = /* @__PURE__ */ require_smol_primordial.getSmolPrimordial();
+const smolPrimordial = require_smol_primordial.getSmolPrimordial();
 const ArrayCtor = Array;
 const ArrayBufferCtor = ArrayBuffer;
 const DataViewCtor = DataView;
@@ -26,7 +26,7 @@ const Uint16ArrayCtor = Uint16Array;
 const Uint32ArrayCtor = Uint32Array;
 const ArrayFrom = Array.from;
 const ArrayFromAsync = Array.fromAsync;
-const ArrayIsArray = _smolPrimordial?.arrayIsArray ?? Array.isArray;
+const ArrayIsArray = smolPrimordial?.arrayIsArray ?? Array.isArray;
 const ArrayOf = Array.of;
 const ArrayBufferIsView = ArrayBuffer.isView;
 const AtomicsWait = Atomics.wait;
@@ -68,17 +68,17 @@ const ArrayPrototypeToString = require_primordials_uncurry.uncurryThis(Array.pro
 const ArrayPrototypeUnshift = require_primordials_uncurry.uncurryThis(Array.prototype.unshift);
 const ArrayPrototypeValues = require_primordials_uncurry.uncurryThis(Array.prototype.values);
 const ArrayPrototypeWith = require_primordials_uncurry.uncurryThis(Array.prototype.with);
-const _anyIterator = (/* @__PURE__ */ new Map()).keys();
-let _iteratorLookup = Object.getPrototypeOf(_anyIterator);
-while (_iteratorLookup && typeof _iteratorLookup.next !== "function")
+const anyIterator = (/* @__PURE__ */ new Map()).keys();
+let iteratorLookup = Object.getPrototypeOf(anyIterator);
+while (iteratorLookup && typeof iteratorLookup.next !== "function")
  /* c8 ignore next - Modern V8 puts Iterator.prototype one hop up the chain
 so the first check already finds .next; the walk-further branch fires
 only on hypothetical engines where the prototype layout differs. */
-_iteratorLookup = Object.getPrototypeOf(_iteratorLookup);
-const _iteratorProto = _iteratorLookup;
-const IteratorPrototypeNext = require_primordials_uncurry.uncurryThis(_iteratorProto.next);
+iteratorLookup = Object.getPrototypeOf(iteratorLookup);
+const iteratorProto = iteratorLookup;
+const IteratorPrototypeNext = require_primordials_uncurry.uncurryThis(iteratorProto.next);
 /* c8 ignore start */
-const IteratorPrototypeReturn = typeof _iteratorProto.return === "function" ? require_primordials_uncurry.uncurryThis(_iteratorProto.return) : void 0;
+const IteratorPrototypeReturn = typeof iteratorProto.return === "function" ? require_primordials_uncurry.uncurryThis(iteratorProto.return) : void 0;
 /* c8 ignore stop */
 
 //#endregion

package/dist/primordials/date.js

@@ -10,9 +10,9 @@ const require_smol_primordial = require('../smol/primordial.js');
 *   (single-byte wallclock read inlined into JIT'd callers) when available;
 *   stock Node falls back to `Date.now`.
 */
-const _smolPrimordial = /* @__PURE__ */ require_smol_primordial.getSmolPrimordial();
+const smolPrimordial = require_smol_primordial.getSmolPrimordial();
 const DateCtor = Date;
-const DateNow = _smolPrimordial?.dateNow ?? Date.now;
+const DateNow = smolPrimordial?.dateNow ?? Date.now;
 const DateParse = Date.parse;
 const DateUTC = Date.UTC;
 const DatePrototypeGetTime = require_primordials_uncurry.uncurryThis(Date.prototype.getTime);

package/dist/primordials/error.js

@@ -21,15 +21,15 @@ const URIErrorCtor = URIError;
 const ErrorIsError = Error.isError;
 const ErrorCaptureStackTrace = Error.captureStackTrace;
 const ErrorPrepareStackTrace = Error.prepareStackTrace;
-const _stackTraceLimitGetter = (() => {
+const stackTraceLimitGetter = (() => {
 	const getter = Error.__lookupGetter__?.("stackTraceLimit");
 	/* c8 ignore start */
 	if (typeof getter === "function") return () => getter.call(Error);
 	/* c8 ignore stop */
 })();
 function ErrorStackTraceLimit() {
-	/* c8 ignore start */
-	if (_stackTraceLimitGetter) return _stackTraceLimitGetter();
+	/* c8 ignore start - non-V8 fallback path unreachable under test */
+	if (stackTraceLimitGetter) return stackTraceLimitGetter();
 	return Error.stackTraceLimit;
 	/* c8 ignore stop */
 }

package/dist/primordials/headers.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @file Safe references to the Fetch `Headers` constructor and its
+ *   `Headers.prototype` methods. `Headers` is a global on Node 22+ (the fleet
+ *   floor), captured unguarded like `URL` / `URLSearchParams`.
+ */
+export declare const HeadersCtor: typeof Headers;
+export declare const HeadersPrototypeForEach: (self: unknown, callbackfn: (value: string, key: string, parent: Headers) => void, thisArg?: any) => void;
+export declare const HeadersPrototypeGet: (self: unknown, name: string) => string | null;
+export declare const HeadersPrototypeHas: (self: unknown, name: string) => boolean;
+export declare const HeadersPrototypeSet: (self: unknown, name: string, value: string) => void;

package/dist/primordials/headers.js

@@ -0,0 +1,23 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_uncurry = require('./uncurry.js');
+
+//#region src/primordials/headers.ts
+/**
+* @file Safe references to the Fetch `Headers` constructor and its
+*   `Headers.prototype` methods. `Headers` is a global on Node 22+ (the fleet
+*   floor), captured unguarded like `URL` / `URLSearchParams`.
+*/
+const HeadersCtor = Headers;
+const HeadersPrototypeForEach = require_primordials_uncurry.uncurryThis(Headers.prototype.forEach);
+const HeadersPrototypeGet = require_primordials_uncurry.uncurryThis(Headers.prototype.get);
+const HeadersPrototypeHas = require_primordials_uncurry.uncurryThis(Headers.prototype.has);
+const HeadersPrototypeSet = require_primordials_uncurry.uncurryThis(Headers.prototype.set);
+
+//#endregion
+exports.HeadersCtor = HeadersCtor;
+exports.HeadersPrototypeForEach = HeadersPrototypeForEach;
+exports.HeadersPrototypeGet = HeadersPrototypeGet;
+exports.HeadersPrototypeHas = HeadersPrototypeHas;
+exports.HeadersPrototypeSet = HeadersPrototypeSet;

package/dist/primordials/intl.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @file Safe references to `Intl` constructors. Captured once at module load so
+ *   consumers reading adversarial input never see a tampered global. `new
+ *   Intl.X(...)` is expensive (10-14ms for Collator in Node); callers are
+ *   responsible for caching instances — these exports are the constructors
+ *   only. On the smol Node binary the captures come from `node:smol-primordial`
+ *   (which hoists them from within the sealed module context); on stock Node
+ *   they fall back to the global `Intl` object.
+ */
+export declare const IntlCollator: typeof Intl.Collator;
+export declare const IntlListFormat: typeof Intl.ListFormat;
+export declare const IntlPluralRules: typeof Intl.PluralRules;
+export declare const IntlSegmenter: typeof Intl.Segmenter;

package/dist/primordials/intl.js

@@ -0,0 +1,26 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_smol_primordial = require('../smol/primordial.js');
+
+//#region src/primordials/intl.ts
+/**
+* @file Safe references to `Intl` constructors. Captured once at module load so
+*   consumers reading adversarial input never see a tampered global. `new
+*   Intl.X(...)` is expensive (10-14ms for Collator in Node); callers are
+*   responsible for caching instances — these exports are the constructors
+*   only. On the smol Node binary the captures come from `node:smol-primordial`
+*   (which hoists them from within the sealed module context); on stock Node
+*   they fall back to the global `Intl` object.
+*/
+const smolPrimordial = require_smol_primordial.getSmolPrimordial();
+const IntlCollator = smolPrimordial?.IntlCollator ?? Intl.Collator;
+const IntlListFormat = smolPrimordial?.IntlListFormat ?? Intl.ListFormat;
+const IntlPluralRules = smolPrimordial?.IntlPluralRules ?? Intl.PluralRules;
+const IntlSegmenter = smolPrimordial?.IntlSegmenter ?? Intl.Segmenter;
+
+//#endregion
+exports.IntlCollator = IntlCollator;
+exports.IntlListFormat = IntlListFormat;
+exports.IntlPluralRules = IntlPluralRules;
+exports.IntlSegmenter = IntlSegmenter;