@socketsecurity/lib 6.0.7 → 6.0.8

package/dist/json/edit.js

@@ -33,21 +33,21 @@ let editableJsonClass;
 */
 function getEditableJsonClass() {
 	if (editableJsonClass === void 0) editableJsonClass = class EditableJson {
-		_canSave = true;
-		_content = {};
-		_path = void 0;
-		_readFileContent = "";
-		_readFileJson = void 0;
+		canSave = true;
+		contentData = {};
+		pathValue = void 0;
+		readFileContent = "";
+		readFileJson = void 0;
 		get content() {
-			return this._content;
+			return this.contentData;
 		}
 		get filename() {
-			const path = this._path;
+			const path = this.pathValue;
 			if (!path) return "";
 			return path;
 		}
 		get path() {
-			return this._path;
+			return this.pathValue;
 		}
 		static async create(path, opts = { __proto__: null }) {
 			const instance = new EditableJson();
@@ -66,14 +66,14 @@ function getEditableJsonClass() {
 			/* c8 ignore stop */
 		}
 		create(path) {
-			this._path = path;
-			this._content = {};
-			this._canSave = true;
+			this.pathValue = path;
+			this.contentData = {};
+			this.canSave = true;
 			return this;
 		}
 		fromContent(data) {
-			this._content = data;
-			this._canSave = false;
+			this.contentData = data;
+			this.canSave = false;
 			return this;
 		}
 		fromJSON(data) {
@@ -82,46 +82,54 @@ function getEditableJsonClass() {
 			const newline = require_json_format.detectNewline(data);
 			parsed[identSymbol] = indent;
 			parsed[newlineSymbol] = newline;
-			this._content = parsed;
+			this.contentData = parsed;
 			return this;
 		}
 		async load(path) {
-			this._path = path;
-			this._readFileContent = await readFile(this.filename);
-			this.fromJSON(this._readFileContent);
-			this._readFileJson = require_primordials_json.JSONParse(this._readFileContent);
+			this.pathValue = path;
+			this.readFileContent = await readFile(this.filename);
+			this.fromJSON(this.readFileContent);
+			this.readFileJson = require_primordials_json.JSONParse(this.readFileContent);
 			return this;
 		}
 		async save(options) {
-			if (!this._canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No file path to save to");
-			if (!require_json_format.shouldSave(this.content, this._readFileJson, this._readFileContent, options)) return false;
+			options = {
+				__proto__: null,
+				...options
+			};
+			if (!this.canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No file path to save to");
+			if (!require_json_format.shouldSave(this.content, this.readFileJson, this.readFileContent, options)) return false;
 			const content = require_json_format.stripFormattingSymbols(this.content);
 			const fileContent = require_json_format.stringifyWithFormatting(options?.sort ? require_json_format.sortKeys(content) : content, require_json_format.getFormattingFromContent(this.content));
 			await retryWrite(this.filename, fileContent);
-			this._readFileContent = fileContent;
-			this._readFileJson = require_primordials_json.JSONParse(fileContent);
+			this.readFileContent = fileContent;
+			this.readFileJson = require_primordials_json.JSONParse(fileContent);
 			return true;
 		}
 		saveSync(options) {
-			if (!this._canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No file path to save to");
-			if (!require_json_format.shouldSave(this.content, this._readFileJson, this._readFileContent, options)) return false;
+			options = {
+				__proto__: null,
+				...options
+			};
+			if (!this.canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No file path to save to");
+			if (!require_json_format.shouldSave(this.content, this.readFileJson, this.readFileContent, options)) return false;
 			const content = require_json_format.stripFormattingSymbols(this.content);
 			const fileContent = require_json_format.stringifyWithFormatting(options?.sort ? require_json_format.sortKeys(content) : content, require_json_format.getFormattingFromContent(this.content));
 			require_node_fs.getNodeFs().writeFileSync(this.filename, fileContent);
-			this._readFileContent = fileContent;
-			this._readFileJson = require_primordials_json.JSONParse(fileContent);
+			this.readFileContent = fileContent;
+			this.readFileJson = require_primordials_json.JSONParse(fileContent);
 			return true;
 		}
 		update(content) {
-			this._content = {
-				...this._content,
+			this.contentData = {
+				...this.contentData,
 				...content
 			};
 			return this;
 		}
 		willSave(options) {
-			if (!this._canSave || this.content === void 0) return false;
-			return require_json_format.shouldSave(this.content, this._readFileJson, this._readFileContent, options);
+			if (!this.canSave || this.content === void 0) return false;
+			return require_json_format.shouldSave(this.content, this.readFileJson, this.readFileContent, options);
 		}
 	};
 	return editableJsonClass;

package/dist/json/format.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_json = require('../primordials/json.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_json = require('../primordials/json.js');
 
 //#region src/json/format.ts
 /**

package/dist/native-messaging/install.d.ts

@@ -53,7 +53,7 @@ export interface InstallResult {
 export declare function assertNodeStripTypesSupported(): void;
 export declare function buildManifest(wrapperPath: string, allowedOrigins: string[]): object;
 export declare function chromeManifestDirs(): string[];
-export declare function installNativeHost(opts: InstallOptions): InstallResult;
+export declare function installNativeHost(options: InstallOptions): InstallResult;
 export declare function registerWindows(manifestPath: string): void;
 export declare function stripTypesFlag(): string;
 export declare function writeWrapperPosix(wrapperPath: string): void;

package/dist/native-messaging/install.js

@@ -9,11 +9,11 @@ const require_env_windows = require('../env/windows.js');
 const require_constants_node = require('../constants/node.js');
 const require_env_node_version_managers = require('../env/node-version-managers.js');
 let node_fs = require("node:fs");
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
 let node_path = require("node:path");
 node_path = require_runtime.__toESM(node_path);
 let node_url = require("node:url");
-let node_process = require("node:process");
-node_process = require_runtime.__toESM(node_process);
 let _socketsecurity_lib_stable_process_spawn_child = require("@socketsecurity/lib-stable/process/spawn/child");
 
 //#region src/native-messaging/install.ts
@@ -78,9 +78,12 @@ function chromeManifestDirs() {
 	const config = node_process.default.env["XDG_CONFIG_HOME"] ?? node_path.default.join(home, ".config");
 	return [node_path.default.join(config, "google-chrome", "NativeMessagingHosts"), node_path.default.join(config, "chromium", "NativeMessagingHosts")];
 }
-function installNativeHost(opts) {
+function installNativeHost(options) {
 	assertNodeStripTypesSupported();
-	const { allowedOrigins, production = false, wrapperDir = __dirname$1 } = opts;
+	const { allowedOrigins, production = false, wrapperDir = __dirname$1 } = {
+		__proto__: null,
+		...options
+	};
 	if (production && allowedOrigins.includes("*")) throw new require_primordials_error.ErrorCtor("production mode rejects allowedOrigins '*' — pin to specific chrome-extension://<id>/ origins");
 	if (allowedOrigins.length === 0) throw new require_primordials_error.ErrorCtor("allowedOrigins must contain at least one origin; pass ['*'] for development");
 	const wrapperName = require_constants_platform.WIN32 ? `${HOST_NAME}.cmd` : `${HOST_NAME}.sh`;

package/dist/native-messaging/rate-limit.d.ts

@@ -38,6 +38,13 @@ export interface TokenBucketOptions {
      */
     maxKeys: number;
 }
+export interface BucketEntry {
+    tokens: number;
+    lastRefillAt: number;
+    newer: BucketEntry | undefined;
+    older: BucketEntry | undefined;
+    key: string;
+}
 export declare class TokenBucketLimiter {
     #private;
     constructor(options: TokenBucketOptions);

package/dist/native-messaging/rate-limit.js

@@ -31,6 +31,10 @@ var TokenBucketLimiter = class {
 	#newest = void 0;
 	#oldest = void 0;
 	constructor(options) {
+		options = {
+			__proto__: null,
+			...options
+		};
 		if (options.capacity < 1) throw new require_primordials_error.ErrorCtor("capacity must be >= 1");
 		if (options.refillIntervalMs <= 0) throw new require_primordials_error.ErrorCtor("refillIntervalMs must be > 0");
 		if (options.maxKeys < 1) throw new require_primordials_error.ErrorCtor("maxKeys must be >= 1");

package/dist/node/async-hooks.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let asyncHooks;
 function getNodeAsyncHooks() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return asyncHooks ??= /*@__PURE__*/ require("node:async_hooks");
+	return asyncHooks ??= /*@__PURE__*/ require("async_hooks");
 }
 
 //#endregion

package/dist/node/child-process.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let childProcess;
 function getNodeChildProcess() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return childProcess ??= /*@__PURE__*/ require("node:child_process");
+	return childProcess ??= /*@__PURE__*/ require("child_process");
 }
 
 //#endregion

package/dist/node/crypto.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let crypto;
 function getNodeCrypto() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return crypto ??= /*@__PURE__*/ require("node:crypto");
+	return crypto ??= /*@__PURE__*/ require("crypto");
 }
 
 //#endregion

package/dist/node/events.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let events;
 function getNodeEvents() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return events ??= /*@__PURE__*/ require("node:events");
+	return events ??= /*@__PURE__*/ require("events");
 }
 
 //#endregion

package/dist/node/fs-promises.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let fsPromises;
 function getNodeFsPromises() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return fsPromises ??= /*@__PURE__*/ require("node:fs/promises");
+	return fsPromises ??= /*@__PURE__*/ require("fs/promises");
 }
 
 //#endregion

package/dist/node/fs.d.ts

@@ -1,10 +1,26 @@
 /**
- * @file Lazy-loader for `node:fs`. Bundlers (Webpack/Rollup/esbuild) targeting
- *   browsers can't statically resolve `require('node:fs')` — but they CAN drop
- *   the call entirely if it's wrapped in a `/*@__NO_SIDE_EFFECTS__*\/`-marked
- *   function and never called. So we always go through `getFs()` instead of
- *   importing top-level. Cache slot is module-local: first call resolves the
- *   require, every subsequent call returns the cached reference.
+ * @file Early-snapshot accessor for `node:fs`. The `require('fs')` runs at
+ *   module load, but ONLY inside the `IS_NODE` runtime guard — in a browser
+ *   `IS_NODE` is `false`, so the require branch never executes (bundlers mark
+ *   `node:` builtins external, so the call survives in the output but is
+ *   unreachable at runtime). In Node the module is captured at load: a
+ *   primordial-style snapshot, so a later tamper of the `node:fs` cache entry
+ *   can't redirect what we already hold. `getNodeFs()` returns the captured
+ *   reference; the `/*@__PURE__*\/` lets a Node-targeted minifier strip the
+ *   capture when `getNodeFs` is unused. Was a lazy first-call loader; the
+ *   eager-but-guarded form keeps the browser-safe behavior while gaining the
+ *   load-time snapshot. Two surfaces: `getNodeFs()` returns the module object
+ *   with LATE method lookup (spy-able — the test seam); the `fs<Method>` consts
+ *   (`fsExistsSync`, `fsReadFileSync`, …) are method references FROZEN at load
+ *   (tamper-proof against a method swap, not spy-able), for the fleet's hot fs
+ *   calls. Both stay browser-safe behind IS_NODE + `/*@__PURE__*\/`.
  */
 import type * as NodeFs from 'node:fs';
 export declare function getNodeFs(): typeof NodeFs;
+export declare const fsAccessSync: any;
+export declare const fsExistsSync: any;
+export declare const fsMkdirSync: any;
+export declare const fsReadFileSync: any;
+export declare const fsRealpathSync: any;
+export declare const fsStatSync: any;
+export declare const fsWriteFileSync: any;

package/dist/node/fs.js

@@ -4,11 +4,24 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_constants_runtime = require('../constants/runtime.js');
 
 //#region src/node/fs.ts
-let cachedFs;
+const nodeFs = require_constants_runtime.IS_NODE ? /*@__PURE__*/ require("fs") : void 0;
 function getNodeFs() {
-	if (!require_constants_runtime.IS_NODE) return;
-	return cachedFs ??= /*@__PURE__*/ require("node:fs");
+	return nodeFs;
 }
+const fsAccessSync = nodeFs?.accessSync;
+const fsExistsSync = nodeFs?.existsSync;
+const fsMkdirSync = nodeFs?.mkdirSync;
+const fsReadFileSync = nodeFs?.readFileSync;
+const fsRealpathSync = nodeFs?.realpathSync;
+const fsStatSync = nodeFs?.statSync;
+const fsWriteFileSync = nodeFs?.writeFileSync;
 
 //#endregion
+exports.fsAccessSync = fsAccessSync;
+exports.fsExistsSync = fsExistsSync;
+exports.fsMkdirSync = fsMkdirSync;
+exports.fsReadFileSync = fsReadFileSync;
+exports.fsRealpathSync = fsRealpathSync;
+exports.fsStatSync = fsStatSync;
+exports.fsWriteFileSync = fsWriteFileSync;
 exports.getNodeFs = getNodeFs;

package/dist/node/http.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let cachedHttp;
 function getNodeHttp() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return cachedHttp ??= /*@__PURE__*/ require("node:http");
+	return cachedHttp ??= /*@__PURE__*/ require("http");
 }
 
 //#endregion

package/dist/node/https.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let cachedHttps;
 function getNodeHttps() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return cachedHttps ??= /*@__PURE__*/ require("node:https");
+	return cachedHttps ??= /*@__PURE__*/ require("https");
 }
 
 //#endregion

package/dist/node/module.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let cachedModule;
 function getNodeModule() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return cachedModule ??= /*@__PURE__*/ require("node:module");
+	return cachedModule ??= /*@__PURE__*/ require("module");
 }
 /**
 * Lazy + cached reference to `node:module`'s `isBuiltin(name)`. First call

package/dist/node/os.d.ts

@@ -1,6 +1,14 @@
 /**
- * @file Lazy-loader for `node:os`. See `node/fs.ts` for the design rationale
- *   shared across all `node/*.ts` lazy-loaders.
+ * @file Early-snapshot accessor for `node:os`. See `node/fs.ts` for the shared
+ *   rationale: the `require` runs at module load behind the runtime `IS_NODE`
+ *   guard (false in browsers → never executes there), giving a load-time
+ *   snapshot in Node while staying browser-safe. `getNodeOs()` returns the
+ *   module object (late method lookup, spy-able); the frozen `os<Method>`
+ *   snapshots below are the tamper-proof hot-path twin.
  */
 import type * as NodeOs from 'node:os';
 export declare function getNodeOs(): typeof NodeOs;
+export declare const osArch: any;
+export declare const osHomedir: any;
+export declare const osPlatform: any;
+export declare const osTmpdir: any;

package/dist/node/os.js

@@ -4,11 +4,18 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_constants_runtime = require('../constants/runtime.js');
 
 //#region src/node/os.ts
-let cachedOs;
+const nodeOs = require_constants_runtime.IS_NODE ? /*@__PURE__*/ require("os") : void 0;
 function getNodeOs() {
-	if (!require_constants_runtime.IS_NODE) return;
-	return cachedOs ??= /*@__PURE__*/ require("node:os");
+	return nodeOs;
 }
+const osArch = nodeOs?.arch;
+const osHomedir = nodeOs?.homedir;
+const osPlatform = nodeOs?.platform;
+const osTmpdir = nodeOs?.tmpdir;
 
 //#endregion
-exports.getNodeOs = getNodeOs;
+exports.getNodeOs = getNodeOs;
+exports.osArch = osArch;
+exports.osHomedir = osHomedir;
+exports.osPlatform = osPlatform;
+exports.osTmpdir = osTmpdir;

package/dist/node/path.d.ts

@@ -1,6 +1,15 @@
 /**
- * @file Lazy-loader for `node:path`. See `node/fs.ts` for the design rationale
- *   shared across all `node/*.ts` lazy-loaders.
+ * @file Early-snapshot accessor for `node:path`. See `node/fs.ts` for the
+ *   shared rationale: the `require` runs at module load behind the runtime
+ *   `IS_NODE` guard (false in browsers → never executes there), giving a
+ *   load-time snapshot in Node while staying browser-safe.
  */
 import type * as NodePath from 'node:path';
 export declare function getNodePath(): typeof NodePath;
+export declare const pathBasename: any;
+export declare const pathDirname: any;
+export declare const pathExtname: any;
+export declare const pathIsAbsolute: any;
+export declare const pathJoin: any;
+export declare const pathRelative: any;
+export declare const pathResolve: any;

package/dist/node/path.js

@@ -4,11 +4,24 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_constants_runtime = require('../constants/runtime.js');
 
 //#region src/node/path.ts
-let cachedPath;
+const nodePath = require_constants_runtime.IS_NODE ? /*@__PURE__*/ require("path") : void 0;
 function getNodePath() {
-	if (!require_constants_runtime.IS_NODE) return;
-	return cachedPath ??= /*@__PURE__*/ require("node:path");
+	return nodePath;
 }
+const pathBasename = nodePath?.basename;
+const pathDirname = nodePath?.dirname;
+const pathExtname = nodePath?.extname;
+const pathIsAbsolute = nodePath?.isAbsolute;
+const pathJoin = nodePath?.join;
+const pathRelative = nodePath?.relative;
+const pathResolve = nodePath?.resolve;
 
 //#endregion
-exports.getNodePath = getNodePath;
+exports.getNodePath = getNodePath;
+exports.pathBasename = pathBasename;
+exports.pathDirname = pathDirname;
+exports.pathExtname = pathExtname;
+exports.pathIsAbsolute = pathIsAbsolute;
+exports.pathJoin = pathJoin;
+exports.pathRelative = pathRelative;
+exports.pathResolve = pathResolve;

package/dist/node/timers-promises.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let timersPromises;
 function getNodeTimersPromises() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return timersPromises ??= /*@__PURE__*/ require("node:timers/promises");
+	return timersPromises ??= /*@__PURE__*/ require("timers/promises");
 }
 
 //#endregion

package/dist/node/url.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let cachedUrl;
 function getNodeUrl() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return cachedUrl ??= /*@__PURE__*/ require("node:url");
+	return cachedUrl ??= /*@__PURE__*/ require("url");
 }
 
 //#endregion

package/dist/node/util.js

@@ -7,7 +7,7 @@ const require_constants_runtime = require('../constants/runtime.js');
 let cachedUtil;
 function getNodeUtil() {
 	if (!require_constants_runtime.IS_NODE) return;
-	return cachedUtil ??= /*@__PURE__*/ require("node:util");
+	return cachedUtil ??= /*@__PURE__*/ require("util");
 }
 
 //#endregion

package/dist/objects/getters.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 const require_constants_sentinels = require('../constants/sentinels.js');
 const require_primordials_reflect = require('../primordials/reflect.js');
 const require_objects_sort = require('./sort.js');

package/dist/objects/mutate.js

@@ -2,10 +2,10 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_primordials_error = require('../primordials/error.js');
-const require_constants_sentinels = require('../constants/sentinels.js');
-const require_primordials_reflect = require('../primordials/reflect.js');
 const require_arrays_predicates = require('../arrays/predicates.js');
 const require_objects_predicates = require('./predicates.js');
+const require_constants_sentinels = require('../constants/sentinels.js');
+const require_primordials_reflect = require('../primordials/reflect.js');
 
 //#region src/objects/mutate.ts
 /**

package/dist/objects/predicates.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_object = require('../primordials/object.js');
 const require_arrays_predicates = require('../arrays/predicates.js');
+const require_primordials_object = require('../primordials/object.js');
 
 //#region src/objects/predicates.ts
 /**

package/dist/packages/edit-class.d.ts

@@ -1,7 +1,7 @@
 /**
  * @file The `EditablePackageJson` class factory. Split out of
  *   `packages/edit.ts` for size hygiene. Wraps `@npmcli/package-json` with
- *   Socket-specific knobs: path tracking, a `_canSave` guard for content-only
+ *   Socket-specific knobs: path tracking, a `canSave` guard for content-only
  *   instances, async + sync save paths that honor `EditablePackageJsonOptions`
  *   formatting.
  *
@@ -14,7 +14,7 @@ import type { EditablePackageJsonInstance } from './edit';
  * class. Not exported because consumers go through
  * `getEditablePackageJsonClass()`.
  */
-interface EditablePackageJsonConstructor {
+export interface EditablePackageJsonConstructor {
     new (): EditablePackageJsonInstance;
     fixSteps: unknown[];
     normalizeSteps: unknown[];
@@ -36,4 +36,3 @@ interface EditablePackageJsonConstructor {
  *   ```
  */
 export declare function getEditablePackageJsonClass(): EditablePackageJsonConstructor;
-export {};