@socketsecurity/lib 6.0.7 → 6.0.9

package/dist/secrets/rc.js

@@ -2,17 +2,17 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_primordials_string = require('../primordials/string.js');
-const require_primordials_regexp = require('../primordials/regexp.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_string = require('../primordials/string.js');
 const require_env_home = require('../env/home.js');
+const require_primordials_regexp = require('../primordials/regexp.js');
 let node_fs = require("node:fs");
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
 let node_path = require("node:path");
 node_path = require_runtime.__toESM(node_path);
 let node_os = require("node:os");
 node_os = require_runtime.__toESM(node_os);
-let node_process = require("node:process");
-node_process = require_runtime.__toESM(node_process);
 
 //#region src/secrets/rc.ts
 /**
@@ -54,11 +54,15 @@ node_process = require_runtime.__toESM(node_process);
 *   non-interactive shells (Claude Code, IDE plugins, CI runners) skip .zshrc
 *   and would miss the export.
 */
-function buildBlock(opts) {
-	const begin = `# BEGIN ${opts.service} env (managed)`;
-	const end = `# END ${opts.service} env (managed)`;
-	const noteLines = (opts.notes ?? []).map((line) => `# ${line}`);
-	const exportLines = require_primordials_object.ObjectEntries(opts.exports).map(([name, value]) => `export ${name}=${shellSingleQuote(value)}`);
+function buildBlock(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
+	const begin = `# BEGIN ${options.service} env (managed)`;
+	const end = `# END ${options.service} env (managed)`;
+	const noteLines = (options.notes ?? []).map((line) => `# ${line}`);
+	const exportLines = require_primordials_object.ObjectEntries(options.exports).map(([name, value]) => `export ${name}=${shellSingleQuote(value)}`);
 	const body = [...noteLines, ...exportLines].join("\n");
 	return {
 		begin,
@@ -134,23 +138,27 @@ function shellSingleQuote(value) {
 * `shell` and `rcPath` override the auto-detected target — useful for chezmoi /
 * dotfile-manager users or installers running under a non-default shell.
 */
-function write(opts) {
+function write(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	if (node_os.default.platform() !== "darwin") return {
 		rcPath: void 0,
 		outcome: "skipped",
 		reason: "unsupported-platform"
 	};
-	const rcPath = opts.rcPath ?? pickRcFile(opts.shell);
+	const rcPath = options.rcPath ?? pickRcFile(options.shell);
 	if (!rcPath) return {
 		rcPath: void 0,
 		outcome: "skipped",
 		reason: "unknown-shell"
 	};
-	const { begin, end, full: desiredBlock } = buildBlock(opts);
+	const { begin, end, full: desiredBlock } = buildBlock(options);
 	let onDisk = "";
 	if ((0, node_fs.existsSync)(rcPath)) onDisk = (0, node_fs.readFileSync)(rcPath, "utf8");
 	let working = onDisk;
-	for (const legacyBegin of opts.legacySentinels ?? []) {
+	for (const legacyBegin of options.legacySentinels ?? []) {
 		const legacyEnd = legacyBegin.replace(/\bBEGIN\b/, "END");
 		const legacyEndStripped = legacyEnd.replace(/\s*\(managed\)\s*$/, "");
 		const endAlt = legacyEnd === legacyEndStripped ? escapeRegExp(legacyEnd) : `(?:${escapeRegExp(legacyEnd)}|${escapeRegExp(legacyEndStripped)})`;

package/dist/secrets/socket-api-token.js

@@ -17,6 +17,10 @@ const SOCKET_SERVICE = "socketsecurity";
 const SOCKET_SERVICE_LEGACY = "socket-cli";
 const TOKEN_ACCOUNTS = ["SOCKET_API_TOKEN", "SOCKET_API_KEY"];
 async function readSocketApiToken(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	return (await require_secrets_find.resolve({
 		service: SOCKET_SERVICE,
 		accounts: TOKEN_ACCOUNTS,
@@ -28,6 +32,10 @@ async function readSocketApiToken(options) {
 	}))?.value;
 }
 function readSocketApiTokenSync(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	return (require_secrets_find.resolveSync({
 		service: SOCKET_SERVICE,
 		accounts: TOKEN_ACCOUNTS,

package/dist/secrets/windows.js

@@ -4,14 +4,13 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_error = require('../primordials/error.js');
 const require_primordials_json = require('../primordials/json.js');
-const require_primordials_promise = require('../primordials/promise.js');
 let node_fs = require("node:fs");
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
 let node_path = require("node:path");
 node_path = require_runtime.__toESM(node_path);
 let node_os = require("node:os");
 node_os = require_runtime.__toESM(node_os);
-let node_process = require("node:process");
-node_process = require_runtime.__toESM(node_process);
 let _socketsecurity_lib_stable_process_spawn_child = require("@socketsecurity/lib-stable/process/spawn/child");
 
 //#region src/secrets/windows.ts
@@ -128,40 +127,35 @@ function readWindowsSync(service, account) {
 	}
 	return readDpapiSync(getDpapiFilePath(service, account));
 }
-function runPsAsync(script, input) {
-	return new require_primordials_promise.PromiseCtor((resolve) => {
-		const { process: cp } = (0, _socketsecurity_lib_stable_process_spawn_child.spawn)(POWERSHELL_BIN, [
-			"-NoProfile",
-			"-Command",
-			script
-		], { stdio: [
+async function runPsAsync(script, input) {
+	const child = (0, _socketsecurity_lib_stable_process_spawn_child.spawn)(POWERSHELL_BIN, [
+		"-NoProfile",
+		"-Command",
+		script
+	], {
+		stdio: [
 			"pipe",
 			"pipe",
 			"pipe"
-		] });
-		let stdout = "";
-		let stderr = "";
-		cp.stdout.setEncoding("utf8");
-		cp.stdout.on("data", (chunk) => {
-			stdout += chunk;
-		});
-		cp.stderr.setEncoding("utf8");
-		cp.stderr.on("data", (chunk) => {
-			stderr += chunk;
-		});
-		cp.on("error", () => resolve({
-			status: -1,
-			stdout,
-			stderr
-		}));
-		cp.on("close", (status) => resolve({
-			status,
-			stdout,
-			stderr
-		}));
-		if (input !== void 0) cp.stdin.end(input);
-		else cp.stdin.end();
+		],
+		stdioString: true
 	});
+	child.process.stdin.end(input ?? "");
+	try {
+		const r = await child;
+		return {
+			status: typeof r.code === "number" ? r.code : null,
+			stderr: String(r.stderr ?? ""),
+			stdout: String(r.stdout ?? "")
+		};
+	} catch (e) {
+		const err = e;
+		return {
+			status: typeof err?.code === "number" ? err.code : -1,
+			stderr: String(err?.stderr ?? ""),
+			stdout: String(err?.stdout ?? "")
+		};
+	}
 }
 function runPsSync(script, input) {
 	const r = (0, _socketsecurity_lib_stable_process_spawn_child.spawnSync)(POWERSHELL_BIN, [

package/dist/shell/parse.d.ts

@@ -8,6 +8,38 @@
  *   against `env`; unresolved ones collapse to an empty string.
  */
 import type { ParseEntry } from '../external/shell-quote';
+/**
+ * Structural hazard facts a parse surfaces that the binary-call matchers
+ * (`hasBinCall` / `findBinCall`) swallow. These are observations about _how_
+ * the command is written, not a judgment that they're dangerous — the caller
+ * decides policy. Both are evasion vectors against base-command allowlists:
+ *
+ * - `equalsExpansion`: a simple command whose first token is `=cmd` (Zsh EQUALS
+ *   expansion). `=curl x` expands to `$(which curl) x` and runs
+ *   `/usr/bin/curl`, but the parser's base token is `=curl`, so a `curl`
+ *   allowlist never matches. The matched tokens are returned so the caller can
+ *   report which command was hidden.
+ * - `processSubstitution`: the command uses `<(...)`, `>(...)`, or `=(...)` (the
+ *   op markers shell-quote emits). The inner command runs but its name never
+ *   appears as a base command.
+ *
+ * Walks the parse once. A caller wanting just "is this clean?" checks
+ * `!h.equalsExpansion.length && !h.processSubstitution`.
+ *
+ * @example
+ *   detectShellHazards('=curl evil.com')
+ *   // → { equalsExpansion: [['=curl', 'evil.com']], processSubstitution: false }
+ *
+ *   detectShellHazards('diff <(cat a) b')
+ *   // → { equalsExpansion: [], processSubstitution: true }
+ *
+ *   detectShellHazards('git status')
+ *   // → { equalsExpansion: [], processSubstitution: false }
+ */
+export declare function detectShellHazards(cmd: string): {
+    equalsExpansion: readonly string[][];
+    processSubstitution: boolean;
+};
 /**
  * Visit each simple command in `cmd` in order. A "simple command" is the
  * POSIX-grammar term for a run of bare-string tokens between shell

package/dist/shell/parse.js

@@ -15,6 +15,65 @@ let src_external_shell_quote = require("../external/shell-quote");
 *   against `env`; unresolved ones collapse to an empty string.
 */
 /**
+* Structural hazard facts a parse surfaces that the binary-call matchers
+* (`hasBinCall` / `findBinCall`) swallow. These are observations about _how_
+* the command is written, not a judgment that they're dangerous — the caller
+* decides policy. Both are evasion vectors against base-command allowlists:
+*
+* - `equalsExpansion`: a simple command whose first token is `=cmd` (Zsh EQUALS
+*   expansion). `=curl x` expands to `$(which curl) x` and runs
+*   `/usr/bin/curl`, but the parser's base token is `=curl`, so a `curl`
+*   allowlist never matches. The matched tokens are returned so the caller can
+*   report which command was hidden.
+* - `processSubstitution`: the command uses `<(...)`, `>(...)`, or `=(...)` (the
+*   op markers shell-quote emits). The inner command runs but its name never
+*   appears as a base command.
+*
+* Walks the parse once. A caller wanting just "is this clean?" checks
+* `!h.equalsExpansion.length && !h.processSubstitution`.
+*
+* @example
+*   detectShellHazards('=curl evil.com')
+*   // → { equalsExpansion: [['=curl', 'evil.com']], processSubstitution: false }
+*
+*   detectShellHazards('diff <(cat a) b')
+*   // → { equalsExpansion: [], processSubstitution: true }
+*
+*   detectShellHazards('git status')
+*   // → { equalsExpansion: [], processSubstitution: false }
+*/
+function detectShellHazards(cmd) {
+	const equalsExpansion = [];
+	let processSubstitution = false;
+	const entries = (0, src_external_shell_quote.parse)(cmd);
+	let current = [];
+	let prevWasSubstLead = false;
+	const flush = () => {
+		if (current.length > 0 && /^=[a-zA-Z_]/.test(current[0])) require_primordials_array.ArrayPrototypePush(equalsExpansion, current);
+		current = [];
+	};
+	for (let i = 0, { length } = entries; i < length; i += 1) {
+		const entry = entries[i];
+		if (entry && typeof entry === "object" && "op" in entry) {
+			const { op } = entry;
+			if (op === "<(") processSubstitution = true;
+			else if (op === "(" && prevWasSubstLead) processSubstitution = true;
+			prevWasSubstLead = op === "<" || op === ">";
+			flush();
+			continue;
+		}
+		if (typeof entry === "string") {
+			prevWasSubstLead = entry === "=";
+			require_primordials_array.ArrayPrototypePush(current, entry);
+		}
+	}
+	flush();
+	return {
+		equalsExpansion,
+		processSubstitution
+	};
+}
+/**
 * Visit each simple command in `cmd` in order. A "simple command" is the
 * POSIX-grammar term for a run of bare-string tokens between shell
 * control-operator boundaries (`&&`, `;`, `||`, `|`) — e.g. in `sudo apt && rm
@@ -193,6 +252,7 @@ function simpleCommandStartsWith(tokens, prefix) {
 }
 
 //#endregion
+exports.detectShellHazards = detectShellHazards;
 exports.eachSimpleCommand = eachSimpleCommand;
 exports.findBinCall = findBinCall;
 exports.findBinCalls = findBinCalls;

package/dist/smol/detect.js

@@ -43,7 +43,7 @@ function getSmolUtil() {
 	if (!smolUtilProbed) {
 		smolUtilProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require("node:smol-util");
+		if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require_node_module.requireBuiltin("node:smol-util");
 	}
 	return smolUtilCache;
 }

package/dist/smol/http.js

@@ -28,7 +28,7 @@ function getSmolHttp() {
 	if (!smolHttpProbed) {
 		smolHttpProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-http")) smolHttpBinding = require("node:smol-http");
+		if (require_node_module.isNodeBuiltin("node:smol-http")) smolHttpBinding = require_node_module.requireBuiltin("node:smol-http");
 	}
 	return smolHttpBinding;
 }

package/dist/smol/https.js

@@ -26,7 +26,7 @@ function getSmolHttps() {
 	if (!smolHttpsProbed) {
 		smolHttpsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-https")) smolHttps = require("node:smol-https");
+		if (require_node_module.isNodeBuiltin("node:smol-https")) smolHttps = require_node_module.requireBuiltin("node:smol-https");
 	}
 	return smolHttps;
 }

package/dist/smol/manifest.js

@@ -28,7 +28,7 @@ function getSmolManifest() {
 	if (!smolManifestProbed) {
 		smolManifestProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-manifest")) cachedSmolManifest = require("node:smol-manifest");
+		if (require_node_module.isNodeBuiltin("node:smol-manifest")) cachedSmolManifest = require_node_module.requireBuiltin("node:smol-manifest");
 	}
 	return cachedSmolManifest;
 }

package/dist/smol/path.js

@@ -28,7 +28,7 @@ function getSmolPath() {
 	if (!smolPathProbed) {
 		smolPathProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-path")) smolPathCache = require("node:smol-path");
+		if (require_node_module.isNodeBuiltin("node:smol-path")) smolPathCache = require_node_module.requireBuiltin("node:smol-path");
 	}
 	return smolPathCache;
 }

package/dist/smol/primordial.js

@@ -30,7 +30,7 @@ function getSmolPrimordial() {
 	if (!smolPrimordialProbed) {
 		smolPrimordialProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require("node:smol-primordial");
+		if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require_node_module.requireBuiltin("node:smol-primordial");
 	}
 	return smolPrimordial;
 }

package/dist/smol/purl.js

@@ -29,7 +29,7 @@ function getSmolPurl() {
 	if (!smolPurlProbed) {
 		smolPurlProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-purl")) smolPurl = require("node:smol-purl");
+		if (require_node_module.isNodeBuiltin("node:smol-purl")) smolPurl = require_node_module.requireBuiltin("node:smol-purl");
 	}
 	return smolPurl;
 }

package/dist/smol/versions.js

@@ -26,7 +26,7 @@ function getSmolVersions() {
 	if (!smolVersionsProbed) {
 		smolVersionsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-versions")) smolVersions = require("node:smol-versions");
+		if (require_node_module.isNodeBuiltin("node:smol-versions")) smolVersions = require_node_module.requireBuiltin("node:smol-versions");
 	}
 	return smolVersions;
 }

package/dist/smol/vfs.js

@@ -41,7 +41,7 @@ function getSmolVfs() {
 	if (!smolVfsProbed) {
 		smolVfsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-vfs")) cachedSmolVfs = require("node:smol-vfs").getSmolVfs();
+		if (require_node_module.isNodeBuiltin("node:smol-vfs")) cachedSmolVfs = require_node_module.requireBuiltin("node:smol-vfs").getSmolVfs();
 	}
 	return cachedSmolVfs;
 }

package/dist/sorts/_internal.d.ts

@@ -4,6 +4,5 @@
  *   locale / natural / semver comparison entrypoints.
  */
 import type * as fastSortType from '../external/fast-sort';
-import type * as semverType from '../external/semver';
+export { getSemver } from '../versions/_internal';
 export declare function getFastSort(): typeof fastSortType;
-export declare function getSemver(): typeof semverType;

package/dist/sorts/_internal.js

@@ -1,19 +1,15 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_versions__internal = require('../versions/_internal.js');
 
 //#region src/sorts/_internal.ts
 let fastSort;
-let semver;
 function getFastSort() {
 	if (fastSort === void 0) fastSort = /*@__PURE__*/ require("../external/fast-sort.js");
 	return fastSort;
 }
-function getSemver() {
-	if (semver === void 0) semver = /*@__PURE__*/ require("../external/semver.js");
-	return semver;
-}
 
 //#endregion
 exports.getFastSort = getFastSort;
-exports.getSemver = getSemver;
+exports.getSemver = require_versions__internal.getSemver;

package/dist/sorts/semver.js

@@ -1,7 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_sorts__internal = require('./_internal.js');
+const require_versions__internal = require('../versions/_internal.js');
 
 //#region src/sorts/semver.ts
 /**
@@ -20,7 +20,7 @@ const require_sorts__internal = require('./_internal.js');
 */
 function compareSemver(a, b) {
 	/* c8 ignore start */
-	const semver = require_sorts__internal.getSemver();
+	const semver = require_versions__internal.getSemver();
 	const validA = semver.valid(a);
 	/* c8 ignore stop */
 	const validB = semver.valid(b);

package/dist/spinner/create-spinner-class.js

@@ -1,12 +1,12 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../primordials/object.js');
 const require_primordials_math = require('../primordials/math.js');
 const require_primordials_array = require('../primordials/array.js');
-const require_primordials_object = require('../primordials/object.js');
+const require_process_abort = require('../process/abort.js');
 const require_logger_symbols = require('../logger/symbols.js');
 const require_strings_predicates = require('../strings/predicates.js');
-const require_process_abort = require('../process/abort.js');
 const require_colors_convert = require('../colors/convert.js');
 const require_strings_width = require('../strings/width.js');
 const require_spinner_format = require('./format.js');

package/dist/spinner/spinner-internals.d.ts

@@ -33,4 +33,4 @@ export declare function parseShimmerOption(shimmer: SpinnerOptions['shimmer']):
  *
  * @returns Resolved RGB color tuple.
  */
-export declare function resolveSpinnerColorRgb(opts: SpinnerOptions): ColorRgb;
+export declare function resolveSpinnerColorRgb(options: SpinnerOptions): ColorRgb;

package/dist/spinner/spinner-internals.js

@@ -3,9 +3,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_primordials_error = require('../primordials/error.js');
 const require_primordials_array = require('../primordials/array.js');
+const require_env_ci = require('../env/ci.js');
 const require_themes_themes = require('../themes/themes.js');
 const require_themes_context = require('../themes/context.js');
-const require_env_ci = require('../env/ci.js');
 const require_colors_convert = require('../colors/convert.js');
 const require_spinner_format = require('./format.js');
 const require_effects_shimmer = require('../effects/shimmer.js');
@@ -80,17 +80,21 @@ function parseShimmerOption(shimmer) {
 *
 * @returns Resolved RGB color tuple.
 */
-function resolveSpinnerColorRgb(opts) {
+function resolveSpinnerColorRgb(options) {
+	options = {
+		__proto__: null,
+		...options
+	};
 	let theme = require_themes_context.getTheme();
-	if (opts.theme) if (typeof opts.theme === "string") theme = require_themes_themes.THEMES[opts.theme] ?? theme;
-	else theme = opts.theme;
+	if (options.theme) if (typeof options.theme === "string") theme = require_themes_themes.THEMES[options.theme] ?? theme;
+	else theme = options.theme;
 	let defaultColor = theme.colors.primary;
 	if (theme.effects?.spinner?.color) {
 		const resolved = require_themes_resolve.resolveColor(theme.effects.spinner.color, theme.colors);
 		if (resolved === "inherit" || require_primordials_array.ArrayIsArray(resolved[0])) defaultColor = theme.colors.primary;
 		else defaultColor = resolved;
 	}
-	const spinnerColor = opts.color ?? defaultColor;
+	const spinnerColor = options.color ?? defaultColor;
 	if (require_colors_convert.isRgbTuple(spinnerColor) && (spinnerColor.length !== 3 || !spinnerColor.every((n) => typeof n === "number" && n >= 0 && n <= 255))) throw new require_primordials_error.TypeErrorCtor("RGB color must be an array of 3 numbers between 0 and 255");
 	return require_colors_convert.toRgb(spinnerColor);
 }

package/dist/spinner/spinner.d.ts

@@ -7,7 +7,11 @@
  *   the live `YoctoSpinner` constructor resolved here; building it lazily keeps
  *   the module free of side effects at import time.
  */
+import type { YoctoSpinnerConstructor } from './create-spinner-class';
 import type { SpinnerInstance, SpinnerOptions } from './types';
+export type YoctoSpinnerFactory = (options: Record<string, unknown>) => {
+    constructor: YoctoSpinnerConstructor;
+};
 /**
  * Create a spinner instance for displaying loading indicators. Provides an
  * animated CLI spinner with status messages, progress tracking, and shimmer

package/dist/spinner/spinner.js

@@ -2,8 +2,8 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_logger_default = require('../logger/default.js');
 const require_env_ci = require('../env/ci.js');
+const require_logger_default = require('../logger/default.js');
 const require_spinner_format = require('./format.js');
 const require_spinner_create_spinner_class = require('./create-spinner-class.js');
 const require_spinner_default = require('./default.js');

package/dist/stdio/progress.js

@@ -2,10 +2,10 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_primordials_math = require('../primordials/math.js');
+const require_primordials_object = require('../primordials/object.js');
 const require_primordials_string = require('../primordials/string.js');
+const require_primordials_math = require('../primordials/math.js');
 const require_primordials_date = require('../primordials/date.js');
-const require_primordials_object = require('../primordials/object.js');
 const require_ansi_strip = require('../ansi/strip.js');
 const require_strings_format = require('../strings/format.js');
 let node_process = require("node:process");
@@ -43,6 +43,10 @@ var ProgressBar = class {
 	* @param options - Configuration options for the progress bar.
 	*/
 	constructor(total, options) {
+		options = {
+			__proto__: null,
+			...options
+		};
 		this.total = total;
 		this.startTime = require_primordials_date.DateNow();
 		this.stream = options?.stream || node_process.default.stderr;

package/dist/stdio/prompts.d.ts

@@ -6,7 +6,6 @@ import checkboxRaw from '../external/@inquirer/checkbox';
 import confirmRaw from '../external/@inquirer/confirm';
 import inputRaw from '../external/@inquirer/input';
 import passwordRaw from '../external/@inquirer/password';
-import type { ColorValue } from '../colors/types';
 import type { Remap } from '../objects/types';
 import type { SpinnerInstance } from '../spinner/types';
 import type { ThemeName } from '../themes/themes';
@@ -45,7 +44,7 @@ export interface Choice<Value = unknown> {
  * Context for inquirer prompts. Minimal context interface used by Inquirer
  * prompts. Duplicated from `@inquirer/type` - InquirerContext.
  */
-interface InquirerContext {
+export interface InquirerContext {
     /**
      * Abort signal for cancelling the prompt.
      */
@@ -88,19 +87,12 @@ export type Context = Remap<InquirerContext & {
  *     { name: 'Option 2', value: 2 },
  *   ]
  */
-declare class SeparatorType {
+export declare class SeparatorType {
     readonly separator: string;
     readonly type: 'separator';
     constructor(separator?: string);
 }
 export type Separator = SeparatorType;
-/**
- * Apply a color to text using yoctocolors. Handles both named colors and RGB
- * tuples.
- *
- * @private
- */
-export declare function applyColor(text: string, color: ColorValue): string;
 /**
  * Convert Socket theme to @inquirer theme format. Maps our theme colors to
  * inquirer's style functions. Handles theme names, Theme objects, and passes

package/dist/stdio/prompts.js

@@ -2,13 +2,12 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_process_abort = require('../process/abort.js');
 const require_themes_themes = require('../themes/themes.js');
 const require_themes_context = require('../themes/context.js');
-const require_process_abort = require('../process/abort.js');
+const require_logger_colors = require('../logger/colors.js');
 const require_themes_resolve = require('../themes/resolve.js');
 const require_spinner_default = require('../spinner/default.js');
-let src_external_yoctocolors_cjs = require("../external/yoctocolors-cjs");
-src_external_yoctocolors_cjs = require_runtime.__toESM(src_external_yoctocolors_cjs);
 let src_external__inquirer_checkbox = require("../external/@inquirer/checkbox");
 src_external__inquirer_checkbox = require_runtime.__toESM(src_external__inquirer_checkbox);
 let src_external__inquirer_confirm = require("../external/@inquirer/confirm");
@@ -34,17 +33,6 @@ const selectModule = src_external__inquirer_select;
 const selectRaw = selectModule.default;
 const ActualSeparator = selectModule.Separator;
 /**
-* Apply a color to text using yoctocolors. Handles both named colors and RGB
-* tuples.
-*
-* @private
-*/
-function applyColor(text, color) {
-	if (typeof color === "string") return src_external_yoctocolors_cjs.default[color](text);
-	const { 0: r, 1: g, 2: b } = color;
-	return `\u001B[38;2;${r};${g};${b}m${text}\u001B[39m`;
-}
-/**
 * Convert Socket theme to @inquirer theme format. Maps our theme colors to
 * inquirer's style functions. Handles theme names, Theme objects, and passes
 * through @inquirer themes.
@@ -75,18 +63,18 @@ function createInquirerTheme(theme) {
 		const primaryColor = socketTheme.colors.primary;
 		return {
 			style: {
-				message: (text) => applyColor(text, promptColor),
-				answer: (text) => applyColor(text, primaryColor),
-				help: (text) => applyColor(text, textDimColor),
-				description: (text) => applyColor(text, textDimColor),
-				disabled: (text) => applyColor(text, textDimColor),
-				error: (text) => applyColor(text, errorColor),
-				highlight: (text) => applyColor(text, primaryColor)
+				message: (text) => require_logger_colors.applyColor(text, promptColor),
+				answer: (text) => require_logger_colors.applyColor(text, primaryColor),
+				help: (text) => require_logger_colors.applyColor(text, textDimColor),
+				description: (text) => require_logger_colors.applyColor(text, textDimColor),
+				disabled: (text) => require_logger_colors.applyColor(text, textDimColor),
+				error: (text) => require_logger_colors.applyColor(text, errorColor),
+				highlight: (text) => require_logger_colors.applyColor(text, primaryColor)
 			},
 			icon: {
-				checked: applyColor("✓", successColor),
+				checked: require_logger_colors.applyColor("✓", successColor),
 				unchecked: " ",
-				cursor: applyColor("❯", primaryColor)
+				cursor: require_logger_colors.applyColor("❯", primaryColor)
 			}
 		};
 	}
@@ -246,7 +234,6 @@ const select = wrapPrompt(selectRaw);
 
 //#endregion
 exports.Separator = ActualSeparator;
-exports.applyColor = applyColor;
 exports.checkbox = checkbox;
 exports.confirm = confirm;
 exports.createInquirerTheme = createInquirerTheme;