@socketsecurity/lib 6.0.7 → 6.0.9

package/dist/external/pico-pack.js

@@ -79,6 +79,8 @@ const { NumberIsFinite: _p_NumberIsFinite, NumberIsInteger: _p_NumberIsInteger,
 
 const { ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectKeys: _p_ObjectKeys } = require('../primordials/object.js')
 
+const { processNextTick: _p_processNextTick } = require('../primordials/process.js')
+
 const { PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseRace: _p_PromiseRace, PromiseResolve: _p_PromiseResolve } = require('../primordials/promise.js')
 
 const { RegExpCtor: _p_RegExpCtor } = require('../primordials/regexp.js')
@@ -4090,7 +4092,7 @@ var require_merge2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			merging = true;
 			let streams = streamsQueue.shift();
 			if (!streams) {
-				process.nextTick(endStream);
+				_p_processNextTick(endStream);
 				return;
 			}
 			if (!_p_ArrayIsArray(streams)) streams = [streams];
@@ -5038,7 +5040,7 @@ var require_queue = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		function drained() {
 			return new _p_PromiseCtor(function(resolve) {
-				process.nextTick(function() {
+				_p_processNextTick(function() {
 					if (queue.idle()) resolve();
 					else {
 						var previousDrain = queue.drain;

package/dist/external/tar-fs.js

@@ -121,7 +121,7 @@ var require_fast_fifo = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/b4a@1.8.0/node_modules/b4a/index.js
+//#region node_modules/.pnpm/b4a@1.8.1/node_modules/b4a/index.js
 var require_b4a = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function isBuffer(value) {
 		return _p_BufferIsBuffer(value) || value instanceof Uint8Array;
@@ -499,13 +499,51 @@ var require_text_decoder = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/streamx@2.25.0/node_modules/streamx/index.js
+//#region node_modules/.pnpm/streamx@2.27.0/node_modules/streamx/lib/errors.js
+var require_errors = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = class StreamError extends Error {
+		constructor(msg, code, fn = StreamError) {
+			super(msg);
+			this.code = code;
+			if (Error.captureStackTrace) Error.captureStackTrace(this, fn);
+		}
+		static isStreamDestroyed(err) {
+			return err && err.code === "STREAM_DESTROYED";
+		}
+		static isPrematureClose(err) {
+			return err && err.code === "PREMATURE_CLOSE";
+		}
+		static isAborted(err) {
+			return err && err.code === "ABORTED";
+		}
+		static isBadArgument(err) {
+			return err && err.code === "BAD_ARGUMENT";
+		}
+		get name() {
+			return "StreamError";
+		}
+		static STREAM_DESTROYED() {
+			return new StreamError("Stream was destroyed", "STREAM_DESTROYED", StreamError.STREAM_DESTROYED);
+		}
+		static PREMATURE_CLOSE(msg = "Premature close") {
+			return new StreamError(msg, "PREMATURE_CLOSE", StreamError.PREMATURE_CLOSE);
+		}
+		static ABORTED() {
+			return new StreamError("Stream aborted", "ABORTED", StreamError.ABORTED);
+		}
+		static BAD_ARGUMENT(msg = "Bad argument") {
+			return new StreamError(msg, "BAD_ARGUMENT", StreamError.BAD_ARGUMENT);
+		}
+	};
+}));
+
+//#endregion
+//#region node_modules/.pnpm/streamx@2.27.0/node_modules/streamx/index.js
 var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { EventEmitter } = require_default();
-	const STREAM_DESTROYED = /* @__PURE__ */ new _p_ErrorCtor("Stream was destroyed");
-	const PREMATURE_CLOSE = /* @__PURE__ */ new _p_ErrorCtor("Premature close");
 	const FIFO = require_fast_fifo();
 	const TextDecoder = require_text_decoder();
+	const StreamError = require_errors();
 	const qmt = typeof queueMicrotask === "undefined" ? (fn) => global.process.nextTick(fn) : queueMicrotask;
 	const OPENING = 1;
 	const PREDESTROYING = 2;
@@ -709,7 +747,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			return (this.stream._duplexState & READ_DONE) !== 0;
 		}
 		pipe(pipeTo, cb) {
-			if (this.pipeTo !== null) throw new _p_ErrorCtor("Can only pipe to one destination");
+			if (this.pipeTo !== null) throw StreamError.BAD_ARGUMENT("Can only pipe to one destination");
 			if (typeof cb !== "function") cb = null;
 			this.stream._duplexState |= READ_PIPE_DRAINED;
 			this.pipeTo = pipeTo;
@@ -868,14 +906,14 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (stream === this.to) {
 				this.to = null;
 				if (this.from !== null) {
-					if ((this.from._duplexState & READ_DONE) === 0 || !this.pipeToFinished) this.from.destroy(this.error || /* @__PURE__ */ new _p_ErrorCtor("Writable stream closed prematurely"));
+					if ((this.from._duplexState & READ_DONE) === 0 || !this.pipeToFinished) this.from.destroy(this.error || StreamError.PREMATURE_CLOSE("Writable stream closed"));
 					return;
 				}
 			}
 			if (stream === this.from) {
 				this.from = null;
 				if (this.to !== null) {
-					if ((stream._duplexState & READ_DONE) === 0) this.to.destroy(this.error || /* @__PURE__ */ new _p_ErrorCtor("Readable stream closed before ending"));
+					if ((stream._duplexState & READ_DONE) === 0) this.to.destroy(this.error || StreamError.PREMATURE_CLOSE("Readable stream closed"));
 					return;
 				}
 			}
@@ -901,7 +939,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	function afterDestroy(err) {
 		const stream = this.stream;
-		if (!err && this.error !== STREAM_DESTROYED) err = this.error;
+		if (!err && !StreamError.isStreamDestroyed(this.error)) err = this.error;
 		if (err) stream.emit("error", err);
 		stream._duplexState |= DESTROYED;
 		stream.emit("close");
@@ -1017,7 +1055,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		destroy(err) {
 			if ((this._duplexState & DESTROY_STATUS) === 0) {
-				if (!err) err = STREAM_DESTROYED;
+				if (!err) err = StreamError.STREAM_DESTROYED();
 				this._duplexState = (this._duplexState | DESTROYING) & NON_PRIMARY;
 				if (this._readableState !== null) {
 					this._readableState.highWaterMark = 0;
@@ -1047,6 +1085,15 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				if (opts.encoding) this.setEncoding(opts.encoding);
 			}
 		}
+		static deferred(fn, opts) {
+			const out = new PassThrough(opts);
+			fn().then((src) => {
+				if (src === null) return out.end();
+				if (out.destroying) return;
+				pipeline(src, out, noop);
+			}).catch((err) => out.destroy(err));
+			return out;
+		}
 		setEncoding(encoding) {
 			const dec = new TextDecoder(encoding);
 			const map = this._readableState.map || echo;
@@ -1165,7 +1212,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			function ondata(data) {
 				if (promiseReject === null) return;
 				if (error) promiseReject(error);
-				else if (data === null && (stream._duplexState & READ_DONE) === 0) promiseReject(STREAM_DESTROYED);
+				else if (data === null && (stream._duplexState & READ_DONE) === 0) promiseReject(StreamError.STREAM_DESTROYED());
 				else promiseResolve({
 					value: data,
 					done: data === null
@@ -1339,7 +1386,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function pipeline(stream, ...streams) {
 		const all = _p_ArrayIsArray(stream) ? [...stream, ...streams] : [stream, ...streams];
 		const done = all.length && typeof all[all.length - 1] === "function" ? all.pop() : null;
-		if (all.length < 2) throw new _p_ErrorCtor("Pipeline requires at least 2 streams");
+		if (all.length < 2) throw StreamError.BAD_ARGUMENT("Pipeline requires at least 2 streams");
 		let src = all[0];
 		let dest = null;
 		let error = null;
@@ -1362,15 +1409,15 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				fin = true;
 				if (!autoDestroy) done(error);
 			});
-			if (autoDestroy) dest.on("close", () => done(error || (fin ? null : PREMATURE_CLOSE)));
+			if (autoDestroy) dest.on("close", () => done(error || (fin ? null : StreamError.PREMATURE_CLOSE())));
 		}
 		return dest;
 		function errorHandle(s, rd, wr, onerror) {
 			s.on("error", onerror);
 			s.on("close", onclose);
 			function onclose() {
-				if (rd && s._readableState && !s._readableState.ended) return onerror(PREMATURE_CLOSE);
-				if (wr && s._writableState && !s._writableState.ended) return onerror(PREMATURE_CLOSE);
+				if (rd && s._readableState && !s._readableState.ended) return onerror(StreamError.PREMATURE_CLOSE());
+				if (wr && s._writableState && !s._writableState.ended) return onerror(StreamError.PREMATURE_CLOSE());
 			}
 		}
 		function onerror(err) {
@@ -1402,7 +1449,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	function getStreamError(stream, opts = {}) {
 		const err = stream._readableState && stream._readableState.error || stream._writableState && stream._writableState.error;
-		return !opts.all && err === STREAM_DESTROYED ? null : err;
+		return !opts.all && StreamError.isStreamDestroyed(err) ? null : err;
 	}
 	function isReadStreamx(stream) {
 		return isStreamx(stream) && stream.readable;
@@ -1418,7 +1465,7 @@ var require_streamx = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	function noop() {}
 	function abort() {
-		this.destroy(/* @__PURE__ */ new _p_ErrorCtor("Stream aborted."));
+		this.destroy(StreamError.ABORTED());
 	}
 	function isWritev(s) {
 		return s._writev !== Writable.prototype._writev && s._writev !== Duplex.prototype._writev;

package/dist/external/which.js

@@ -5,6 +5,8 @@ const { SetCtor: _p_SetCtor } = require('../primordials/map-set.js')
 
 const { ObjectAssign: _p_ObjectAssign, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor } = require('../primordials/object.js')
 
+const { processCwd: _p_processCwd } = require('../primordials/process.js')
+
 const { RegExpCtor: _p_RegExpCtor } = require('../primordials/regexp.js')
 
 const { StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../primordials/string.js')
@@ -214,7 +216,7 @@ var require_lib = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const rRel = new _p_RegExpCtor(`^\\.${rSlash.source}`);
 	const getNotFoundError = (cmd) => _p_ObjectAssign(/* @__PURE__ */ new _p_ErrorCtor(`not found: ${cmd}`), { code: "ENOENT" });
 	const getPathInfo = (cmd, { path: optPath = process.env.PATH, pathExt: optPathExt = process.env.PATHEXT, delimiter: optDelimiter = delimiter }) => {
-		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [process.cwd()] : [], ...(optPath || "").split(optDelimiter)];
+		const pathEnv = cmd.match(rSlash) ? [""] : [...isWindows ? [_p_processCwd()] : [], ...(optPath || "").split(optDelimiter)];
 		if (isWindows) {
 			const pathExtExe = optPathExt || [
 				".EXE",

package/dist/external-tools/bazel/asset-names.d.ts

@@ -63,4 +63,4 @@ export interface BazelDownloadOptions {
  *   // → 'https://github.com/bazelbuild/bazel/releases/download/7.4.1/bazel-7.4.1-darwin-arm64'
  *   ```
  */
-export declare function getBazelDownloadUrl(opts: BazelDownloadOptions): string | undefined;
+export declare function getBazelDownloadUrl(options: BazelDownloadOptions): string | undefined;

package/dist/external-tools/bazel/asset-names.js

@@ -91,8 +91,11 @@ function getBazelAssetEntry(platformArch) {
 *   // → 'https://github.com/bazelbuild/bazel/releases/download/7.4.1/bazel-7.4.1-darwin-arm64'
 *   ```
 */
-function getBazelDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getBazelDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = BAZEL_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/bazelbuild/bazel/releases/download/${version}/bazel-${version}-${entry.suffix}`;

package/dist/external-tools/bazel/from-download.d.ts

@@ -46,4 +46,4 @@ export interface BazelFromDownloadOptions {
  *   // → { path: '/.../bazel-7.4.1-darwin-arm64', source: 'download' }
  *   ```
  */
-export declare function bazelFromDownload(opts: BazelFromDownloadOptions): Promise<ResolvedBazel | undefined>;
+export declare function bazelFromDownload(options: BazelFromDownloadOptions): Promise<ResolvedBazel | undefined>;

package/dist/external-tools/bazel/from-download.js

@@ -31,8 +31,11 @@ const require_external_tools_bazel_asset_names = require('./asset-names.js');
 *   // → { path: '/.../bazel-7.4.1-darwin-arm64', source: 'download' }
 *   ```
 */
-async function bazelFromDownload(opts) {
-	const { downloader, integrity, platformArch, version } = opts;
+async function bazelFromDownload(options) {
+	const { downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_bazel_asset_names.getBazelDownloadUrl({
 		version,
 		platformArch

package/dist/external-tools/bazel/resolve-bazel-version.js

@@ -21,6 +21,10 @@ node_process = require_runtime.__toESM(node_process);
 *      surfaces an actionable error.
 */
 async function resolveBazelVersion(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const cwd = options?.cwd ?? node_process.default.cwd();
 	const envOverride = node_process.default.env["USE_BAZEL_VERSION"];
 	if (envOverride && envOverride.length > 0) return envOverride;

package/dist/external-tools/bazel/resolve.d.ts

@@ -29,7 +29,7 @@ export interface ResolveBazelOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveBazelOptions | undefined): string;
-export declare function doResolveBazel(opts?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
+export declare function cacheKey(options: ResolveBazelOptions | undefined): string;
+export declare function doResolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
 export declare function resetBazelResolution(): void;
-export declare function resolveBazel(opts?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
+export declare function resolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;

package/dist/external-tools/bazel/resolve.js

@@ -23,26 +23,34 @@ const require_external_tools_bazel_from_path = require('./from-path.js');
 *      call can fall through to the download tier.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}`;
 }
-async function doResolveBazel(opts) {
+async function doResolveBazel(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromPath = await require_external_tools_bazel_from_path.bazelFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_bazel_from_download.bazelFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_bazel_from_download.bazelFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetBazelResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveBazel(opts) {
-	const key = cacheKey(opts);
+function resolveBazel(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveBazel(opts);
+		cached = doResolveBazel(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/cdxgen/asset-names.d.ts

@@ -51,7 +51,7 @@ export declare function getCdxgenAssetEntry(platformArch: string, variant?: Cdxg
  * Build the GitHub release-asset download URL for an upstream cdxgen binary.
  * Returns `undefined` when no entry exists for the requested platform-arch.
  */
-export declare function getCdxgenDownloadUrl(opts: CdxgenDownloadOptions): string | undefined;
+export declare function getCdxgenDownloadUrl(options: CdxgenDownloadOptions): string | undefined;
 export declare function makeCdxgenEntry(baseTriple: string, variant: CdxgenVariant, ext?: '' | '.exe'): CdxgenAssetEntry;
 export declare function makeCdxgenPlatformMap(variant: CdxgenVariant): Readonly<Record<string, CdxgenAssetEntry>>;
 export declare const CDXGEN_SLIM_ASSET_MAP: Readonly<Record<string, CdxgenAssetEntry>>;

package/dist/external-tools/cdxgen/asset-names.js

@@ -34,8 +34,11 @@ function getCdxgenAssetEntry(platformArch, variant = "slim") {
 * Build the GitHub release-asset download URL for an upstream cdxgen binary.
 * Returns `undefined` when no entry exists for the requested platform-arch.
 */
-function getCdxgenDownloadUrl(opts) {
-	const { platformArch, variant = "slim", version } = opts;
+function getCdxgenDownloadUrl(options) {
+	const { platformArch, variant = "slim", version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = getCdxgenAssetEntry(platformArch, variant);
 	if (!entry) return;
 	return `https://github.com/CycloneDX/cdxgen/releases/download/v${version}/` + entry.asset;

package/dist/external-tools/cdxgen/from-download.d.ts

@@ -40,4 +40,4 @@ export interface CdxgenFromDownloadOptions {
      */
     downloader?: BinaryDownloader | undefined;
 }
-export declare function cdxgenFromDownload(opts: CdxgenFromDownloadOptions): Promise<ResolvedCdxgen | undefined>;
+export declare function cdxgenFromDownload(options: CdxgenFromDownloadOptions): Promise<ResolvedCdxgen | undefined>;

package/dist/external-tools/cdxgen/from-download.js

@@ -7,10 +7,10 @@ const require_fs_safe = require('../../fs/safe.js');
 const require_external_tools_from_download = require('../from-download.js');
 const require_external_tools_cdxgen_asset_names = require('./asset-names.js');
 let node_fs = require("node:fs");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/cdxgen/from-download.ts
 /**
@@ -23,8 +23,11 @@ node_process = require_runtime.__toESM(node_process);
 *   for (none today; the asset map covers all 8 fleet targets) return
 *   `undefined` — callers should fall back to `cdxgenFromNpm()` for those.
 */
-async function cdxgenFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, variant = "slim", version } = opts;
+async function cdxgenFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, variant = "slim", version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_cdxgen_asset_names.getCdxgenDownloadUrl({
 		platformArch,
 		variant,

package/dist/external-tools/cdxgen/resolve.d.ts

@@ -26,7 +26,7 @@ export interface ResolveCdxgenOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveCdxgenOptions | undefined): string;
-export declare function doResolveCdxgen(opts?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
+export declare function cacheKey(options: ResolveCdxgenOptions | undefined): string;
+export declare function doResolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
 export declare function resetCdxgenResolution(): void;
-export declare function resolveCdxgen(opts?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
+export declare function resolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;

package/dist/external-tools/cdxgen/resolve.js

@@ -22,31 +22,39 @@ const require_external_tools_cdxgen_from_vfs = require('./from-vfs.js');
 *      option-shape.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, variant, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, variant, version } = options.downloadIfMissing;
 	const integrityKey = typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : "";
 	return `dl:${version}:${platformArch}:${variant ?? "slim"}:${integrityKey}:${cacheDir ?? ""}`;
 }
-async function doResolveCdxgen(opts) {
+async function doResolveCdxgen(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_cdxgen_from_vfs.cdxgenFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_cdxgen_from_path.cdxgenFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetCdxgenResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveCdxgen(opts) {
-	const key = cacheKey(opts);
+function resolveCdxgen(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveCdxgen(opts);
+		cached = doResolveCdxgen(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/from-download.d.ts

@@ -74,7 +74,7 @@ export interface DownloadAndExtractOptions extends DownloadOptions {
  *   // Caller constructs ResolvedJre from extractedDir.
  *   ```
  */
-export declare function downloadAndExtractTool(opts: DownloadAndExtractOptions): Promise<ExtractedTool>;
+export declare function downloadAndExtractTool(options: DownloadAndExtractOptions): Promise<ExtractedTool>;
 /**
  * SRI integrity (`sha512-<base64>`) of a downloaded archive, surfaced on the
  * per-tool `Resolved*` shapes. Set ONLY when `source === 'download'`; the
@@ -159,4 +159,4 @@ export interface DownloadOptions {
  *   })
  *   ```
  */
-export declare function downloadToolArchive(opts: DownloadOptions): Promise<DownloadedArchive>;
+export declare function downloadToolArchive(options: DownloadOptions): Promise<DownloadedArchive>;

package/dist/external-tools/from-download.js

@@ -50,9 +50,12 @@ let node_fs = require("node:fs");
 *   // Caller constructs ResolvedJre from extractedDir.
 *   ```
 */
-async function downloadAndExtractTool(opts) {
-	const archive = await downloadToolArchive(opts);
-	const { extractOptions, extractedDir } = opts;
+async function downloadAndExtractTool(options) {
+	const archive = await downloadToolArchive(options);
+	const { extractOptions, extractedDir } = {
+		__proto__: null,
+		...options
+	};
 	let extracted = false;
 	if ((0, node_fs.existsSync)(extractedDir)) {
 		if ((await node_fs.promises.readdir(extractedDir)).length === 0) {
@@ -92,8 +95,11 @@ async function downloadAndExtractTool(opts) {
 *   })
 *   ```
 */
-async function downloadToolArchive(opts) {
-	const { downloader, integrity, name, url } = opts;
+async function downloadToolArchive(options) {
+	const { downloader, integrity, name, url } = {
+		__proto__: null,
+		...options
+	};
 	const result = await (downloader ?? require_dlx_binary_download.downloadBinary)({
 		url,
 		name,

package/dist/external-tools/from-pip-venv.d.ts

@@ -63,7 +63,7 @@ export interface CreatePipVenvResult {
  * - The install succeeded but the entry-point was not created (caller passed a
  *   wrong `entryPoint` name, or the package has no console script).
  */
-export declare function createPipVenv(opts: CreatePipVenvOptions): Promise<CreatePipVenvResult>;
+export declare function createPipVenv(options: CreatePipVenvOptions): Promise<CreatePipVenvResult>;
 /**
  * Locate a Python interpreter. Prefer `python3` on macOS/Linux, fall back to
  * `python` (the Windows convention). Returns `undefined` when neither is on

package/dist/external-tools/from-pip-venv.js

@@ -6,10 +6,10 @@ const require_bin_which = require('../bin/which.js');
 const require_process_spawn_child = require('../process/spawn/child.js');
 const require_fs_safe = require('../fs/safe.js');
 let node_fs = require("node:fs");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/from-pip-venv.ts
 /**
@@ -43,14 +43,21 @@ node_process = require_runtime.__toESM(node_process);
 * - The install succeeded but the entry-point was not created (caller passed a
 *   wrong `entryPoint` name, or the package has no console script).
 */
-async function createPipVenv(opts) {
-	const { cacheDir, entryPoint, installSpec } = opts;
+async function createPipVenv(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	const { cacheDir, entryPoint, installSpec } = {
+		__proto__: null,
+		...options
+	};
 	const entryBin = pipVenvEntryPointPath(cacheDir, entryPoint);
 	if ((0, node_fs.existsSync)(entryBin)) return {
 		entryPointPath: entryBin,
 		created: false
 	};
-	const python = opts.python ?? await findPython();
+	const python = options.python ?? await findPython();
 	if (!python) throw new Error("createPipVenv: no Python interpreter on PATH (looked for python3, python)");
 	await require_fs_safe.safeMkdir(node_path.default.dirname(cacheDir), { recursive: true });
 	await require_process_spawn_child.spawn(python, [

package/dist/external-tools/janus/asset-names.d.ts

@@ -40,4 +40,4 @@ export interface JanusDownloadOptions {
  *
  * Reference: https://github.com/divmain/janus/releases.
  */
-export declare function getJanusDownloadUrl(opts: JanusDownloadOptions): string | undefined;
+export declare function getJanusDownloadUrl(options: JanusDownloadOptions): string | undefined;

package/dist/external-tools/janus/asset-names.js

@@ -36,8 +36,11 @@ function getJanusAssetEntry(platformArch) {
 *
 * Reference: https://github.com/divmain/janus/releases.
 */
-function getJanusDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getJanusDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = JANUS_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/divmain/janus/releases/download/v${version}/` + entry.asset;

package/dist/external-tools/janus/from-download.d.ts

@@ -23,4 +23,4 @@ export interface JanusFromDownloadOptions {
     cacheDir?: string | undefined;
     downloader?: BinaryDownloader | undefined;
 }
-export declare function janusFromDownload(opts: JanusFromDownloadOptions): Promise<ResolvedJanus>;
+export declare function janusFromDownload(options: JanusFromDownloadOptions): Promise<ResolvedJanus>;

package/dist/external-tools/janus/from-download.js

@@ -19,8 +19,11 @@ node_path = require_runtime.__toESM(node_path);
 *   per-process dlx cache, so multiple fleet consumers reuse the same extracted
 *   binary.
 */
-async function janusFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+async function janusFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	if (!require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.includes(platformArch)) throw new require_primordials_error.ErrorCtor(`janusFromDownload: platformArch must be one of [${require_external_tools_janus_asset_names.JANUS_SUPPORTED_PLATFORM_ARCHES.map((p) => `\`${p}\``).join(", ")}], got \`${platformArch}\`. Upstream janus only publishes the macOS arm64 build (see https://github.com/divmain/janus/releases); request \`darwin-arm64\` or use a different tool for other platforms.`);
 	const url = require_external_tools_janus_asset_names.getJanusDownloadUrl({
 		version,

package/dist/external-tools/janus/resolve.d.ts

@@ -22,7 +22,7 @@ export interface ResolveJanusOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveJanusOptions | undefined): string;
-export declare function doResolveJanus(opts?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
+export declare function cacheKey(options: ResolveJanusOptions | undefined): string;
+export declare function doResolveJanus(options?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
 export declare function resetJanusResolution(): void;
-export declare function resolveJanus(opts?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;
+export declare function resolveJanus(options?: ResolveJanusOptions | undefined): Promise<ResolvedJanus | undefined>;