@socketsecurity/lib 6.0.7 → 6.0.9

package/dist/eco/manifest/detect-format.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../../primordials/string.js');
 const require_primordials_object = require('../../primordials/object.js');
+const require_primordials_string = require('../../primordials/string.js');
 const require_smol_manifest = require('../../smol/manifest.js');
 const require_eco_cargo_lockfile_format = require('../cargo/lockfile-format.js');
 const require_eco_cargo_manifest_format = require('../cargo/manifest-format.js');

package/dist/eco/npm/npm/parse-lockfile.d.ts

@@ -41,7 +41,7 @@
  *     shipped fix has a matching fixture directory there.
  */
 import type { DepType, PackageRef, ParsedLockfile } from '../../manifest/types';
-interface RawPackage {
+export interface RawPackage {
     readonly name?: unknown | undefined;
     readonly version?: unknown | undefined;
     readonly resolved?: unknown | undefined;
@@ -54,12 +54,12 @@ interface RawPackage {
     readonly dependencies?: unknown | undefined;
     readonly requires?: unknown | undefined;
 }
-interface RawLockfile {
+export interface RawLockfile {
     readonly lockfileVersion?: unknown | undefined;
     readonly packages?: Record<string, RawPackage> | undefined;
     readonly dependencies?: Record<string, RawPackage> | undefined;
 }
-type PackageIndex = Record<string, number | number[]>;
+export type PackageIndex = Record<string, number | number[]>;
 export declare function addToIndex(packageIndex: PackageIndex, name: string, idx: number): void;
 export declare function buildPackageRef(name: string, pkg: RawPackage): PackageRef;
 export declare function jsParsePackageLock(content: string): ParsedLockfile;
@@ -67,4 +67,3 @@ export declare function parseV1(data: RawLockfile, rootDeps: Record<string, RawP
 export declare function parseV2V3(data: RawLockfile, rawPackages: Record<string, RawPackage>): ParsedLockfile;
 export declare function resolveDepType(pkg: RawPackage): DepType;
 export declare const parsePackageLock: (content: string) => ParsedLockfile;
-export {};

package/dist/eco/npm/npm/parse-lockfile.js

@@ -2,11 +2,11 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_primordials_error = require('../../../primordials/error.js');
+const require_primordials_object = require('../../../primordials/object.js');
 const require_primordials_string = require('../../../primordials/string.js');
-const require_primordials_array = require('../../../primordials/array.js');
 const require_primordials_map_set = require('../../../primordials/map-set.js');
+const require_primordials_array = require('../../../primordials/array.js');
 const require_primordials_json = require('../../../primordials/json.js');
-const require_primordials_object = require('../../../primordials/object.js');
 const require_errors_message = require('../../../errors/message.js');
 const require_smol_manifest = require('../../../smol/manifest.js');
 const require_eco_manifest_manifest_error = require('../../manifest/manifest-error.js');

package/dist/eco/npm/parse-package-json.d.ts

@@ -9,6 +9,17 @@
  *   and downstream consumers can re-validate if they care.
  */
 import type { DepType, ManifestDep, ParsedManifest } from '../manifest/types';
+export interface RawManifest {
+    readonly name?: unknown | undefined;
+    readonly version?: unknown | undefined;
+    readonly description?: unknown | undefined;
+    readonly license?: unknown | undefined;
+    readonly repository?: unknown | undefined;
+    readonly dependencies?: unknown | undefined;
+    readonly devDependencies?: unknown | undefined;
+    readonly peerDependencies?: unknown | undefined;
+    readonly optionalDependencies?: unknown | undefined;
+}
 export declare function addDeps(dependencies: ManifestDep[], obj: unknown, type: DepType): void;
 export declare function asOptionalString(value: unknown): string | undefined;
 export declare function jsParsePackageJson(content: string): ParsedManifest;

package/dist/eco/npm/parse-package-json.js

@@ -1,9 +1,9 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../primordials/object.js');
 const require_primordials_array = require('../../primordials/array.js');
 const require_primordials_json = require('../../primordials/json.js');
-const require_primordials_object = require('../../primordials/object.js');
 const require_errors_message = require('../../errors/message.js');
 const require_smol_manifest = require('../../smol/manifest.js');
 const require_eco_manifest_manifest_error = require('../manifest/manifest-error.js');

package/dist/eco/npm/pnpm/parse-lockfile.d.ts

@@ -42,8 +42,8 @@
  *     fixture directory there.
  */
 import type { DepType, PackageRef, ParsedLockfile } from '../../manifest/types';
-type PackageIndex = Record<string, number | number[]>;
-interface PnpmEntry {
+export type PackageIndex = Record<string, number | number[]>;
+export interface PnpmEntry {
     name: string;
     version: string;
     resolved: string | undefined;
@@ -59,6 +59,9 @@ interface PnpmEntry {
     dependencies: string[];
     _inDeps: boolean;
 }
+export interface ImporterState {
+    section: 'prod' | 'dev' | 'optional' | undefined;
+}
 export declare function addToPnpmIndex(packageIndex: PackageIndex, name: string, idx: number): void;
 export declare function freezeEntry(entry: PnpmEntry): PackageRef;
 export declare function indentOf(line: string): number;
@@ -66,4 +69,3 @@ export declare function jsParsePnpmLock(content: string): ParsedLockfile;
 export declare function newPnpmEntry(name: string, version: string): PnpmEntry;
 export declare function stripPeerSuffix(version: string): string;
 export declare const parsePnpmLock: (content: string) => ParsedLockfile;
-export {};

package/dist/eco/npm/pnpm/parse-lockfile.js

@@ -1,10 +1,10 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../../primordials/object.js');
 const require_primordials_string = require('../../../primordials/string.js');
 const require_primordials_regexp = require('../../../primordials/regexp.js');
 const require_primordials_array = require('../../../primordials/array.js');
-const require_primordials_object = require('../../../primordials/object.js');
 const require_smol_manifest = require('../../../smol/manifest.js');
 const require_eco_npm_pnpm_detect_pnpm_version = require('./detect-pnpm-version.js');
 const require_eco_npm_pnpm_parse_pnpm_package_id_v5 = require('./parse-pnpm-package-id-v5.js');
@@ -163,7 +163,7 @@ function jsParsePnpmLock(content) {
 		if (!inPackages && !inSnapshots) continue;
 		const indent = indentOf(line);
 		if (indent >= 2 && indent <= 4 && require_primordials_string.StringPrototypeEndsWith(trimmed, ":") && trimmed.length > 1 && (currentPkg === void 0 || indent <= currentIndent)) {
-			if (currentPkg && currentPkg.name) {
+			if (currentPkg?.name) {
 				require_primordials_array.ArrayPrototypePush(packages, freezeEntry(currentPkg));
 				addToPnpmIndex(packageIndex, currentPkg.name, packages.length - 1);
 			}
@@ -200,7 +200,7 @@ function jsParsePnpmLock(content) {
 			}
 		}
 	}
-	if (currentPkg && currentPkg.name) {
+	if (currentPkg?.name) {
 		require_primordials_array.ArrayPrototypePush(packages, freezeEntry(currentPkg));
 		addToPnpmIndex(packageIndex, currentPkg.name, packages.length - 1);
 	}

package/dist/eco/npm/yarnpkg/yarn/exec.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_array = require('../../../../primordials/array.js');
 const require_primordials_map_set = require('../../../../primordials/map-set.js');
+const require_primordials_array = require('../../../../primordials/array.js');
 const require_debug_namespace = require('../../../../debug/namespace.js');
 const require_bin_exec = require('../../../../bin/exec.js');
 const require_eco_npm_npm_flags = require('../../npm/flags.js');

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.d.ts

@@ -47,7 +47,7 @@ export interface YarnEntryState {
     isOptional: boolean;
     linkType: string | undefined;
 }
-type PackageIndex = Record<string, number | number[]>;
+export type PackageIndex = Record<string, number | number[]>;
 export declare function addToYarnIndex(packageIndex: PackageIndex, name: string, idx: number): void;
 export declare function consumeDependenciesMeta(content: string, startPos: number, _entry: YarnEntryState): number;
 export declare function consumeDependencyList(content: string, startPos: number, deps: string[]): number;
@@ -58,4 +58,3 @@ export declare function skipIndentedBlock(content: string, startPos: number): nu
 export declare function stripQuotes(s: string): string;
 export declare function valueAfterKey(line: string, keyLen: number): string;
 export declare const parseYarnLock: (content: string) => ParsedLockfile;
-export {};

package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.js

@@ -1,10 +1,10 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_math = require('../../../../primordials/math.js');
+const require_primordials_object = require('../../../../primordials/object.js');
 const require_primordials_string = require('../../../../primordials/string.js');
+const require_primordials_math = require('../../../../primordials/math.js');
 const require_primordials_array = require('../../../../primordials/array.js');
-const require_primordials_object = require('../../../../primordials/object.js');
 const require_smol_manifest = require('../../../../smol/manifest.js');
 const require_eco_npm_yarnpkg_yarn_parse_yarn_descriptor = require('./parse-yarn-descriptor.js');
 

package/dist/env/proxy.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_globals = require('../primordials/globals.js');
 const require_env_case_insensitive = require('./case-insensitive.js');
 

package/dist/env/rewire.d.ts

@@ -8,7 +8,8 @@
  *   - Compatible with vi.stubEnv() - reads from process.env as final fallback
  *   - Thread-safe for concurrent test execution
  */
-import type * as asyncHooksModule from 'node:async_hooks';
+import { getNodeAsyncHooks } from '../node/async-hooks';
+export type EnvOverrides = Map<string, string | undefined>;
 /**
  * Clear a specific environment variable override.
  *
@@ -24,11 +25,13 @@ import type * as asyncHooksModule from 'node:async_hooks';
  */
 export declare function clearEnv(key: string): void;
 /**
- * Lazily load the async_hooks module to avoid Webpack errors.
+ * Lazily load the async_hooks module. Aliases the canonical `node/async-hooks`
+ * accessor (single owner of the bundler-safe require); kept as an export so
+ * this module's surface is unchanged.
  *
  * @private
  */
-export declare function getAsyncHooks(): typeof asyncHooksModule;
+export declare const getAsyncHooks: typeof getNodeAsyncHooks;
 /**
  * Get an environment variable value, checking overrides first.
  *

package/dist/env/rewire.js

@@ -2,10 +2,11 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_object = require('../primordials/object.js');
 const require_objects_predicates = require('../objects/predicates.js');
 const require_env_boolean = require('./boolean.js');
+const require_node_async_hooks = require('../node/async-hooks.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 let node_process = require("node:process");
 node_process = require_runtime.__toESM(node_process);
 
@@ -20,8 +21,7 @@ node_process = require_runtime.__toESM(node_process);
 *   - Compatible with vi.stubEnv() - reads from process.env as final fallback
 *   - Thread-safe for concurrent test execution
 */
-let asyncHooks;
-const { AsyncLocalStorage } = getAsyncHooks();
+const { AsyncLocalStorage } = require_node_async_hooks.getNodeAsyncHooks();
 const isolatedOverridesStorage = new AsyncLocalStorage();
 const sharedOverridesSymbol = Symbol.for("@socketsecurity/lib/env/rewire/test-overrides");
 const globalThisRef = globalThis;
@@ -44,14 +44,13 @@ function clearEnv(key) {
 	sharedOverrides?.delete(key);
 }
 /**
-* Lazily load the async_hooks module to avoid Webpack errors.
+* Lazily load the async_hooks module. Aliases the canonical `node/async-hooks`
+* accessor (single owner of the bundler-safe require); kept as an export so
+* this module's surface is unchanged.
 *
 * @private
 */
-function getAsyncHooks() {
-	if (asyncHooks === void 0) asyncHooks = /*@__PURE__*/ require("node:async_hooks");
-	return asyncHooks;
-}
+const getAsyncHooks = require_node_async_hooks.getNodeAsyncHooks;
 /**
 * Get an environment variable value, checking overrides first.
 *

package/dist/env/socket.d.ts

@@ -321,6 +321,13 @@ export declare function getSocketRegistryUrl(): string | undefined;
  * @returns The repository name, or `undefined` if neither is set
  */
 export declare function getSocketRepositoryName(): string | undefined;
+/**
+ * SOCKET_STATE_DIR environment variable getter. Overrides the default Socket
+ * state directory (~/.socket/_state) location.
+ *
+ * @returns The state directory path, or `undefined` if not set
+ */
+export declare function getSocketStateDirEnv(): string | undefined;
 /**
  * SOCKET_VIEW_ALL_RISKS environment variable getter. Whether to view all Socket
  * Security risks.

package/dist/env/socket.js

@@ -377,6 +377,15 @@ function getSocketRepositoryName() {
 	return require_env_rewire.getEnvValue("SOCKET_REPOSITORY_NAME") || require_env_rewire.getEnvValue("SOCKET_REPO_NAME");
 }
 /**
+* SOCKET_STATE_DIR environment variable getter. Overrides the default Socket
+* state directory (~/.socket/_state) location.
+*
+* @returns The state directory path, or `undefined` if not set
+*/
+function getSocketStateDirEnv() {
+	return require_env_rewire.getEnvValue("SOCKET_STATE_DIR");
+}
+/**
 * SOCKET_VIEW_ALL_RISKS environment variable getter. Whether to view all Socket
 * Security risks.
 *
@@ -425,5 +434,6 @@ exports.getSocketOauthRequiredScopes = require_env_socket_mcp.getSocketOauthRequ
 exports.getSocketOrgSlug = getSocketOrgSlug;
 exports.getSocketRegistryUrl = getSocketRegistryUrl;
 exports.getSocketRepositoryName = getSocketRepositoryName;
+exports.getSocketStateDirEnv = getSocketStateDirEnv;
 exports.getSocketViewAllRisks = getSocketViewAllRisks;
 exports.getTrustProxy = require_env_socket_mcp.getTrustProxy;

package/dist/env/xdg.d.ts

@@ -47,3 +47,20 @@ export declare function getXdgConfigHome(): string | undefined;
  * @returns The XDG data directory path, or `undefined` if not set
  */
 export declare function getXdgDataHome(): string | undefined;
+/**
+ * XDG_RUNTIME_DIR environment variable. XDG Base Directory specification
+ * runtime directory — the home for ephemeral, owner-only runtime objects
+ * (daemon sockets, locks). Set by systemd to `/run/user/<uid>`; absent on
+ * macOS and many non-systemd setups, so callers must provide a fallback.
+ *
+ * @example
+ *   ;```typescript
+ *   import { getXdgRuntimeDir } from '@socketsecurity/lib/env/xdg'
+ *
+ *   const runtimeDir = getXdgRuntimeDir()
+ *   // e.g. '/run/user/1000' or undefined
+ *   ```
+ *
+ * @returns The XDG runtime directory path, or `undefined` if not set
+ */
+export declare function getXdgRuntimeDir(): string | undefined;

package/dist/env/xdg.js

@@ -59,8 +59,28 @@ function getXdgConfigHome() {
 function getXdgDataHome() {
 	return require_env_rewire.getEnvValue("XDG_DATA_HOME");
 }
+/**
+* XDG_RUNTIME_DIR environment variable. XDG Base Directory specification
+* runtime directory — the home for ephemeral, owner-only runtime objects
+* (daemon sockets, locks). Set by systemd to `/run/user/<uid>`; absent on
+* macOS and many non-systemd setups, so callers must provide a fallback.
+*
+* @example
+*   ;```typescript
+*   import { getXdgRuntimeDir } from '@socketsecurity/lib/env/xdg'
+*
+*   const runtimeDir = getXdgRuntimeDir()
+*   // e.g. '/run/user/1000' or undefined
+*   ```
+*
+* @returns The XDG runtime directory path, or `undefined` if not set
+*/
+function getXdgRuntimeDir() {
+	return require_env_rewire.getEnvValue("XDG_RUNTIME_DIR");
+}
 
 //#endregion
 exports.getXdgCacheHome = getXdgCacheHome;
 exports.getXdgConfigHome = getXdgConfigHome;
-exports.getXdgDataHome = getXdgDataHome;
+exports.getXdgDataHome = getXdgDataHome;
+exports.getXdgRuntimeDir = getXdgRuntimeDir;

package/dist/errors/predicates.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_string = require('../primordials/string.js');
 
 //#region src/errors/predicates.ts
 /**

package/dist/errors/stack.js

@@ -1,7 +1,6 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_errors_predicates = require('./predicates.js');
 let src_external_pony_cause = require("../external/pony-cause");
 
 //#region src/errors/stack.ts
@@ -19,7 +18,7 @@ let src_external_pony_cause = require("../external/pony-cause");
 * errorStack(e) })` safely.
 */
 function errorStack(value) {
-	if (require_errors_predicates.isError(value)) return (0, src_external_pony_cause.stackWithCauses)(value);
+	if (isError(value)) return (0, src_external_pony_cause.stackWithCauses)(value);
 }
 
 //#endregion