@socketsecurity/lib 6.0.7 → 6.0.9

package/dist/external-tools/synp/resolve.js

@@ -18,30 +18,38 @@ const require_external_tools_synp_from_vfs = require('./from-vfs.js');
 *      per option-shape.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { integrity, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { integrity, version } = options.downloadIfMissing;
 	return `dl:${version}:${integrity ?? ""}`;
 }
-async function doResolveSynp(opts) {
+async function doResolveSynp(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_synp_from_vfs.synpFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_synp_from_path.synpFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_synp_from_download.synpFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_synp_from_download.synpFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetSynpResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveSynp(opts) {
-	const key = cacheKey(opts);
+function resolveSynp(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveSynp(opts);
+		cached = doResolveSynp(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/trivy/asset-names.d.ts

@@ -31,4 +31,4 @@ export interface TrivyDownloadOptions {
  *
  * Reference: https://github.com/aquasecurity/trivy/releases.
  */
-export declare function getTrivyDownloadUrl(opts: TrivyDownloadOptions): string | undefined;
+export declare function getTrivyDownloadUrl(options: TrivyDownloadOptions): string | undefined;

package/dist/external-tools/trivy/asset-names.js

@@ -44,8 +44,11 @@ function getTrivyAssetEntry(platformArch) {
 *
 * Reference: https://github.com/aquasecurity/trivy/releases.
 */
-function getTrivyDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getTrivyDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = TRIVY_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/aquasecurity/trivy/releases/download/v${version}/trivy_${version}_${entry.suffix}`;

package/dist/external-tools/trivy/from-download.d.ts

@@ -14,4 +14,4 @@ export interface TrivyFromDownloadOptions {
     cacheDir?: string | undefined;
     downloader?: BinaryDownloader | undefined;
 }
-export declare function trivyFromDownload(opts: TrivyFromDownloadOptions): Promise<ResolvedTrivy | undefined>;
+export declare function trivyFromDownload(options: TrivyFromDownloadOptions): Promise<ResolvedTrivy | undefined>;

package/dist/external-tools/trivy/from-download.js

@@ -5,10 +5,10 @@ const require_runtime = require('../../_virtual/_rolldown/runtime.js');
 const require_paths_socket = require('../../paths/socket.js');
 const require_external_tools_from_download = require('../from-download.js');
 const require_external_tools_trivy_asset_names = require('./asset-names.js');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/trivy/from-download.ts
 /**
@@ -17,8 +17,11 @@ node_process = require_runtime.__toESM(node_process);
 *   Windows ships zip; `downloadAndExtractTool` auto-detects the format from
 *   the archive name.
 */
-async function trivyFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+async function trivyFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_trivy_asset_names.getTrivyDownloadUrl({
 		version,
 		platformArch

package/dist/external-tools/trivy/resolve.d.ts

@@ -20,7 +20,7 @@ export interface ResolveTrivyOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveTrivyOptions | undefined): string;
-export declare function doResolveTrivy(opts?: ResolveTrivyOptions | undefined): Promise<ResolvedTrivy | undefined>;
+export declare function cacheKey(options: ResolveTrivyOptions | undefined): string;
+export declare function doResolveTrivy(options?: ResolveTrivyOptions | undefined): Promise<ResolvedTrivy | undefined>;
 export declare function resetTrivyResolution(): void;
-export declare function resolveTrivy(opts?: ResolveTrivyOptions | undefined): Promise<ResolvedTrivy | undefined>;
+export declare function resolveTrivy(options?: ResolveTrivyOptions | undefined): Promise<ResolvedTrivy | undefined>;

package/dist/external-tools/trivy/resolve.js

@@ -18,30 +18,38 @@ const require_external_tools_trivy_from_vfs = require('./from-vfs.js');
 *      Memoized per option-shape.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
 }
-async function doResolveTrivy(opts) {
+async function doResolveTrivy(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_trivy_from_vfs.trivyFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_trivy_from_path.trivyFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_trivy_from_download.trivyFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_trivy_from_download.trivyFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetTrivyResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveTrivy(opts) {
-	const key = cacheKey(opts);
+function resolveTrivy(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveTrivy(opts);
+		cached = doResolveTrivy(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/trufflehog/asset-names.d.ts

@@ -31,4 +31,4 @@ export interface TrufflehogDownloadOptions {
  *
  * Reference: https://github.com/trufflesecurity/trufflehog/releases.
  */
-export declare function getTrufflehogDownloadUrl(opts: TrufflehogDownloadOptions): string | undefined;
+export declare function getTrufflehogDownloadUrl(options: TrufflehogDownloadOptions): string | undefined;

package/dist/external-tools/trufflehog/asset-names.js

@@ -47,8 +47,11 @@ function getTrufflehogAssetEntry(platformArch) {
 *
 * Reference: https://github.com/trufflesecurity/trufflehog/releases.
 */
-function getTrufflehogDownloadUrl(opts) {
-	const { platformArch, version } = opts;
+function getTrufflehogDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const entry = TRUFFLEHOG_ASSET_MAP[platformArch];
 	if (!entry) return;
 	return `https://github.com/trufflesecurity/trufflehog/releases/download/v${version}/trufflehog_${version}_${entry.suffix}`;

package/dist/external-tools/trufflehog/from-download.d.ts

@@ -34,4 +34,4 @@ export interface TrufflehogFromDownloadOptions {
      */
     downloader?: BinaryDownloader | undefined;
 }
-export declare function trufflehogFromDownload(opts: TrufflehogFromDownloadOptions): Promise<ResolvedTrufflehog | undefined>;
+export declare function trufflehogFromDownload(options: TrufflehogFromDownloadOptions): Promise<ResolvedTrufflehog | undefined>;

package/dist/external-tools/trufflehog/from-download.js

@@ -5,10 +5,10 @@ const require_runtime = require('../../_virtual/_rolldown/runtime.js');
 const require_paths_socket = require('../../paths/socket.js');
 const require_external_tools_from_download = require('../from-download.js');
 const require_external_tools_trufflehog_asset_names = require('./asset-names.js');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
 
 //#region src/external-tools/trufflehog/from-download.ts
 /**
@@ -20,8 +20,11 @@ node_process = require_runtime.__toESM(node_process);
 *   check, no network. Trust-on-first-use: pass `integrity` from
 *   `external-tools.json` when available.
 */
-async function trufflehogFromDownload(opts) {
-	const { cacheDir, downloader, integrity, platformArch, version } = opts;
+async function trufflehogFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
 	const url = require_external_tools_trufflehog_asset_names.getTrufflehogDownloadUrl({
 		version,
 		platformArch

package/dist/external-tools/trufflehog/resolve.d.ts

@@ -24,7 +24,7 @@ export interface ResolveTrufflehogOptions {
         downloader?: BinaryDownloader | undefined;
     } | undefined;
 }
-export declare function cacheKey(opts: ResolveTrufflehogOptions | undefined): string;
-export declare function doResolveTrufflehog(opts?: ResolveTrufflehogOptions | undefined): Promise<ResolvedTrufflehog | undefined>;
+export declare function cacheKey(options: ResolveTrufflehogOptions | undefined): string;
+export declare function doResolveTrufflehog(options?: ResolveTrufflehogOptions | undefined): Promise<ResolvedTrufflehog | undefined>;
 export declare function resetTrufflehogResolution(): void;
-export declare function resolveTrufflehog(opts?: ResolveTrufflehogOptions | undefined): Promise<ResolvedTrufflehog | undefined>;
+export declare function resolveTrufflehog(options?: ResolveTrufflehogOptions | undefined): Promise<ResolvedTrufflehog | undefined>;

package/dist/external-tools/trufflehog/resolve.js

@@ -18,30 +18,38 @@ const require_external_tools_trufflehog_from_vfs = require('./from-vfs.js');
 *      per option-shape; same caching semantics as `resolveJre()`.
 */
 const resolutionCache = new require_primordials_map_set.MapCtor();
-function cacheKey(opts) {
-	if (!opts?.downloadIfMissing) return "local-only";
-	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+function cacheKey(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	if (!options?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = options.downloadIfMissing;
 	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
 }
-async function doResolveTrufflehog(opts) {
+async function doResolveTrufflehog(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	const fromVfs = await require_external_tools_trufflehog_from_vfs.trufflehogFromVfs();
 	/* c8 ignore start - smol Node binary only. */
 	if (fromVfs) return fromVfs;
 	/* c8 ignore stop */
 	const fromPath = await require_external_tools_trufflehog_from_path.trufflehogFromPath();
 	if (fromPath) return fromPath;
-	if (opts?.downloadIfMissing) return require_external_tools_trufflehog_from_download.trufflehogFromDownload(opts.downloadIfMissing);
+	if (options?.downloadIfMissing) return require_external_tools_trufflehog_from_download.trufflehogFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
 function resetTrufflehogResolution() {
 	resolutionCache.clear();
 }
 /* c8 ignore stop */
-function resolveTrufflehog(opts) {
-	const key = cacheKey(opts);
+function resolveTrufflehog(options) {
+	const key = cacheKey(options);
 	let cached = resolutionCache.get(key);
 	if (!cached) {
-		cached = doResolveTrufflehog(opts);
+		cached = doResolveTrufflehog(options);
 		resolutionCache.set(key, cached);
 	}
 	return cached;

package/dist/external-tools/uv/asset-names.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @file Upstream uv release asset-name mapping per `platform-arch`. uv
+ *   publishes per-platform archives under
+ *   https://github.com/astral-sh/uv/releases/download/<X.Y.Z>/. The release tag
+ *   is the bare semver (no `v` prefix), unlike most upstream projects. Each
+ *   archive wraps the binary one directory deep (`uv-<triple>/uv[.exe]`), so
+ *   callers should pass `strip: 1` to the extractor — or, equivalently, look up
+ *   the binary inside the archive's stem directory.
+ */
+export interface UvAssetEntry {
+    /**
+     * Full asset filename (no version interpolation — uv asset names are
+     * version-free).
+     */
+    readonly asset: string;
+}
+export declare const UV_ASSET_MAP: Readonly<Record<string, UvAssetEntry>>;
+export declare function getUvAssetEntry(platformArch: string): UvAssetEntry | undefined;
+export interface UvDownloadOptions {
+    /**
+     * Uv release version, e.g. `'0.10.11'` (no `v` prefix — astral-sh/uv tags
+     * releases as bare semver).
+     */
+    version: string;
+    /**
+     * Fleet platform-arch token — looked up in `UV_ASSET_MAP`.
+     */
+    platformArch: string;
+}
+/**
+ * Build the GitHub release-asset download URL for an upstream uv binary.
+ * Returns `undefined` when no entry exists for the requested platform-arch.
+ *
+ * Reference: https://github.com/astral-sh/uv/releases.
+ */
+export declare function getUvDownloadUrl(options: UvDownloadOptions): string | undefined;

package/dist/external-tools/uv/asset-names.js

@@ -0,0 +1,73 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../primordials/object.js');
+
+//#region src/external-tools/uv/asset-names.ts
+/**
+* @file Upstream uv release asset-name mapping per `platform-arch`. uv
+*   publishes per-platform archives under
+*   https://github.com/astral-sh/uv/releases/download/<X.Y.Z>/. The release tag
+*   is the bare semver (no `v` prefix), unlike most upstream projects. Each
+*   archive wraps the binary one directory deep (`uv-<triple>/uv[.exe]`), so
+*   callers should pass `strip: 1` to the extractor — or, equivalently, look up
+*   the binary inside the archive's stem directory.
+*/
+const UV_ASSET_MAP = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	"darwin-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-aarch64-apple-darwin.tar.gz"
+	}),
+	"darwin-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-x86_64-apple-darwin.tar.gz"
+	}),
+	"linux-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-aarch64-unknown-linux-gnu.tar.gz"
+	}),
+	"linux-arm64-musl": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-aarch64-unknown-linux-musl.tar.gz"
+	}),
+	"linux-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-x86_64-unknown-linux-gnu.tar.gz"
+	}),
+	"linux-x64-musl": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-x86_64-unknown-linux-musl.tar.gz"
+	}),
+	"win-arm64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-aarch64-pc-windows-msvc.zip"
+	}),
+	"win-x64": require_primordials_object.ObjectFreeze({
+		__proto__: null,
+		asset: "uv-x86_64-pc-windows-msvc.zip"
+	})
+});
+function getUvAssetEntry(platformArch) {
+	return UV_ASSET_MAP[platformArch];
+}
+/**
+* Build the GitHub release-asset download URL for an upstream uv binary.
+* Returns `undefined` when no entry exists for the requested platform-arch.
+*
+* Reference: https://github.com/astral-sh/uv/releases.
+*/
+function getUvDownloadUrl(options) {
+	const { platformArch, version } = {
+		__proto__: null,
+		...options
+	};
+	const entry = UV_ASSET_MAP[platformArch];
+	if (!entry) return;
+	return `https://github.com/astral-sh/uv/releases/download/${version}/` + entry.asset;
+}
+
+//#endregion
+exports.UV_ASSET_MAP = UV_ASSET_MAP;
+exports.getUvAssetEntry = getUvAssetEntry;
+exports.getUvDownloadUrl = getUvDownloadUrl;

package/dist/external-tools/uv/from-download.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @file `uvFromDownload()` — fetches upstream uv and returns a `ResolvedUv`
+ *   pointing at the extracted binary. uv tarballs wrap the binary in a
+ *   `<asset-stem>/` directory; the extractor strips that level so the binary
+ *   sits at the cache-dir root.
+ */
+import type { BinaryDownloader } from '../from-download';
+import type { HashSpec } from '../../integrity';
+import type { ResolvedUv } from './types';
+export interface UvFromDownloadOptions {
+    version: string;
+    platformArch: string;
+    integrity?: HashSpec | undefined;
+    cacheDir?: string | undefined;
+    downloader?: BinaryDownloader | undefined;
+}
+export declare function uvFromDownload(options: UvFromDownloadOptions): Promise<ResolvedUv | undefined>;

package/dist/external-tools/uv/from-download.js

@@ -0,0 +1,50 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../../_virtual/_rolldown/runtime.js');
+const require_paths_socket = require('../../paths/socket.js');
+const require_external_tools_from_download = require('../from-download.js');
+const require_external_tools_uv_asset_names = require('./asset-names.js');
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+
+//#region src/external-tools/uv/from-download.ts
+/**
+* @file `uvFromDownload()` — fetches upstream uv and returns a `ResolvedUv`
+*   pointing at the extracted binary. uv tarballs wrap the binary in a
+*   `<asset-stem>/` directory; the extractor strips that level so the binary
+*   sits at the cache-dir root.
+*/
+async function uvFromDownload(options) {
+	const { cacheDir, downloader, integrity, platformArch, version } = {
+		__proto__: null,
+		...options
+	};
+	const url = require_external_tools_uv_asset_names.getUvDownloadUrl({
+		version,
+		platformArch
+	});
+	const entry = require_external_tools_uv_asset_names.getUvAssetEntry(platformArch);
+	if (!url || !entry) return;
+	const archiveExt = entry.asset.endsWith(".zip") ? ".zip" : ".tar.gz";
+	const extractedDir = cacheDir ?? node_path.default.join(require_paths_socket.getSocketDlxDir(), "uv", version, platformArch);
+	const archive = await require_external_tools_from_download.downloadAndExtractTool({
+		url,
+		name: `uv-${version}-${platformArch}${archiveExt}`,
+		integrity,
+		extractedDir,
+		extractOptions: { strip: 1 },
+		downloader
+	});
+	const binary = node_process.default.platform === "win32" ? "uv.exe" : "uv";
+	return {
+		path: node_path.default.join(extractedDir, binary),
+		source: "download",
+		integrity: archive.integrity
+	};
+}
+
+//#endregion
+exports.uvFromDownload = uvFromDownload;

package/dist/external-tools/uv/from-path.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @file `uvFromPath()` — looks for `uv` on the system PATH.
+ */
+import type { ResolvedUv } from './types';
+export declare function uvFromPath(): Promise<ResolvedUv | undefined>;

package/dist/external-tools/uv/from-path.js

@@ -0,0 +1,22 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_bin_which = require('../../bin/which.js');
+
+//#region src/external-tools/uv/from-path.ts
+/**
+* @file `uvFromPath()` — looks for `uv` on the system PATH.
+*/
+async function uvFromPath() {
+	const onPath = await require_bin_which.which("uv", { nothrow: true });
+	/* c8 ignore start - reached only when uv is NOT on PATH. */
+	if (typeof onPath !== "string") return;
+	/* c8 ignore stop */
+	return {
+		path: onPath,
+		source: "path"
+	};
+}
+
+//#endregion
+exports.uvFromPath = uvFromPath;

package/dist/external-tools/uv/from-vfs.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @file `uvFromVfs()` — extracts the uv binary from the smol binary's VFS.
+ *   Returns `undefined` when the binary doesn't have uv bundled.
+ */
+import type { ResolvedUv } from './types';
+export declare const UV_VFS_KEY = "uv";
+export declare function uvFromVfs(): Promise<ResolvedUv | undefined>;

package/dist/external-tools/uv/from-vfs.js

@@ -0,0 +1,26 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_smol_vfs = require('../../smol/vfs.js');
+
+//#region src/external-tools/uv/from-vfs.ts
+/**
+* @file `uvFromVfs()` — extracts the uv binary from the smol binary's VFS.
+*   Returns `undefined` when the binary doesn't have uv bundled.
+*/
+const UV_VFS_KEY = "uv";
+async function uvFromVfs() {
+	const vfs = require_smol_vfs.getSmolVfs();
+	if (!vfs) return;
+	/* c8 ignore start - smol Node binary only. */
+	if (!vfs.has("uv")) return;
+	return {
+		path: await vfs.extract("uv"),
+		source: "vfs"
+	};
+	/* c8 ignore stop */
+}
+
+//#endregion
+exports.UV_VFS_KEY = UV_VFS_KEY;
+exports.uvFromVfs = uvFromVfs;

package/dist/external-tools/uv/resolve.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @file `resolveUv()` — uv resolution entry point. Tries each source in order:
+ *
+ *   1. VFS — smol binary's embedded uv (if packed)
+ *   2. PATH — `uv` on the system PATH
+ *   3. download — upstream GitHub release archive (only when `downloadIfMissing`
+ *      is passed) Returns `undefined` if all of the enabled sources miss.
+ *      Memoized per option-shape.
+ */
+import type { BinaryDownloader } from '../from-download';
+import type { HashSpec } from '../../integrity';
+import type { ResolvedUv } from './types';
+export interface ResolveUvOptions {
+    downloadIfMissing?: {
+        version: string;
+        platformArch: string;
+        integrity?: HashSpec | undefined;
+        cacheDir?: string | undefined;
+        downloader?: BinaryDownloader | undefined;
+    } | undefined;
+}
+export declare function cacheKey(options: ResolveUvOptions | undefined): string;
+export declare function doResolveUv(options?: ResolveUvOptions | undefined): Promise<ResolvedUv | undefined>;
+export declare function resetUvResolution(): void;
+export declare function resolveUv(options?: ResolveUvOptions | undefined): Promise<ResolvedUv | undefined>;

package/dist/external-tools/uv/resolve.js

@@ -0,0 +1,61 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../primordials/map-set.js');
+const require_external_tools_uv_from_download = require('./from-download.js');
+const require_external_tools_uv_from_path = require('./from-path.js');
+const require_external_tools_uv_from_vfs = require('./from-vfs.js');
+
+//#region src/external-tools/uv/resolve.ts
+/**
+* @file `resolveUv()` — uv resolution entry point. Tries each source in order:
+*
+*   1. VFS — smol binary's embedded uv (if packed)
+*   2. PATH — `uv` on the system PATH
+*   3. download — upstream GitHub release archive (only when `downloadIfMissing`
+*      is passed) Returns `undefined` if all of the enabled sources miss.
+*      Memoized per option-shape.
+*/
+const resolutionCache = new require_primordials_map_set.MapCtor();
+function cacheKey(options) {
+	const opts = {
+		__proto__: null,
+		...options
+	};
+	if (!opts?.downloadIfMissing) return "local-only";
+	const { cacheDir, integrity, platformArch, version } = opts.downloadIfMissing;
+	return `dl:${version}:${platformArch}:${typeof integrity === "string" ? integrity : integrity ? `${integrity.type}:${integrity.value}` : ""}:${cacheDir ?? ""}`;
+}
+async function doResolveUv(options) {
+	const opts = {
+		__proto__: null,
+		...options
+	};
+	const fromVfs = await require_external_tools_uv_from_vfs.uvFromVfs();
+	/* c8 ignore start - smol Node binary only. */
+	if (fromVfs) return fromVfs;
+	/* c8 ignore stop */
+	const fromPath = await require_external_tools_uv_from_path.uvFromPath();
+	if (fromPath) return fromPath;
+	if (opts?.downloadIfMissing) return require_external_tools_uv_from_download.uvFromDownload(opts.downloadIfMissing);
+}
+/* c8 ignore start - test-only escape hatch. */
+function resetUvResolution() {
+	resolutionCache.clear();
+}
+/* c8 ignore stop */
+function resolveUv(options) {
+	const key = cacheKey(options);
+	let cached = resolutionCache.get(key);
+	if (!cached) {
+		cached = doResolveUv(options);
+		resolutionCache.set(key, cached);
+	}
+	return cached;
+}
+
+//#endregion
+exports.cacheKey = cacheKey;
+exports.doResolveUv = doResolveUv;
+exports.resetUvResolution = resetUvResolution;
+exports.resolveUv = resolveUv;

package/dist/external-tools/uv/types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file Shared types for uv resolution. uv is Astral's Python package manager
+ *   used by socket-basics for Python project bootstrap. Ships per-platform
+ *   archives that wrap the `uv` binary one level deep.
+ */
+import type { ResolvedToolIntegrity } from '../from-download';
+export type UvSource = 'download' | 'path' | 'vfs';
+/**
+ * A resolved uv installation.
+ */
+export interface ResolvedUv {
+    /**
+     * Absolute path to the `uv` executable.
+     */
+    readonly path: string;
+    /**
+     * Which resolver tier found this.
+     */
+    readonly source: UvSource;
+    /**
+     * See {@link ResolvedToolIntegrity}.
+     */
+    readonly integrity?: ResolvedToolIntegrity | undefined;
+}

package/dist/external-tools/uv/types.js

@@ -0,0 +1,2 @@
+"use strict";
+/* Socket Lib - Built with rolldown */