@socketsecurity/lib 6.0.8 → 6.0.10

package/dist/external/shell-quote.d.ts

@@ -0,0 +1,51 @@
+/**
+ * An operator token emitted by `parse` (`&&`, `||`, `;`, `|`, `(`, `)`, `<`,
+ * `>`, etc.) or accepted by `quote`.
+ */
+export interface ShellOp {
+  op: string
+}
+
+/**
+ * A comment token (`# ...`) emitted by `parse` and accepted by `quote`.
+ */
+export interface ShellComment {
+  comment: string
+}
+
+/**
+ * A glob token (`*`, `?`, `[...]`) emitted by `parse` and accepted by `quote`.
+ */
+export interface ShellGlob {
+  op: 'glob'
+  pattern: string
+}
+
+/**
+ * One entry of a parsed command line: a bare string token, an operator, a
+ * comment, or a glob.
+ */
+export type ParseEntry = string | ShellOp | ShellComment | ShellGlob
+
+/**
+ * Escape an array of tokens into a single shell-safe command string (POSIX sh
+ * semantics). Bare strings are quoted as needed; `ShellOp` / `ShellComment` /
+ * `ShellGlob` objects are emitted as their operator / comment / pattern.
+ */
+export function quote(
+  args: ReadonlyArray<string | ShellOp | ShellComment | ShellGlob>,
+): string
+
+/**
+ * Tokenize a command line into `ParseEntry` items. `$VAR` references resolve
+ * against `env` (a record or a lookup function); unresolved references collapse
+ * to an empty string. Throws on unterminated quotes.
+ */
+export function parse(
+  cmd: string,
+  env?:
+    | Record<string, string>
+    | ((key: string) => string | undefined)
+    | undefined,
+  opts?: { escape?: string } | undefined,
+): ParseEntry[]

package/dist/external/shell-quote.js

@@ -24,8 +24,10 @@ var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).expor
 
 //#endregion
 
-//#region node_modules/.pnpm/shell-quote@1.8.4/node_modules/shell-quote/quote.js
+//#region node_modules/.pnpm/shell-quote@1.9.0/node_modules/shell-quote/quote.js
 var require_quote = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/** @import { ControlOperator } from './parse' */
+	/** @type {ControlOperator['op'][]} */
 	var OPS = [
 		"||",
 		"&&",
@@ -46,20 +48,21 @@ var require_quote = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	];
 	var LINE_TERMINATORS = /[\n\r\u2028\u2029]/;
 	var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|]/g;
+	/** @type {import('./quote')} */
 	module.exports = function quote(xs) {
 		return xs.map(function(s) {
 			if (s === "") return "''";
 			if (s && typeof s === "object") {
-				if (s.op === "glob") {
+				if ("op" in s && s.op === "glob") {
 					if (typeof s.pattern !== "string") throw new _p_TypeErrorCtor("glob token requires a string `pattern`");
 					if (LINE_TERMINATORS.test(s.pattern)) throw new _p_TypeErrorCtor("glob `pattern` must not contain line terminators");
 					return s.pattern.replace(GLOB_SHELL_SPECIAL, "\\$&");
 				}
-				if (typeof s.op === "string") {
+				if ("op" in s && typeof s.op === "string") {
 					if (OPS.indexOf(s.op) < 0) throw new _p_TypeErrorCtor("invalid `op` value: " + _p_JSONStringify(s.op));
 					return s.op.replace(/[\s\S]/g, "\\$&");
 				}
-				if (typeof s.comment === "string") {
+				if ("comment" in s && typeof s.comment === "string") {
 					if (LINE_TERMINATORS.test(s.comment)) throw new _p_TypeErrorCtor("`comment` must not contain line terminators");
 					return "#" + s.comment;
 				}
@@ -67,14 +70,21 @@ var require_quote = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			}
 			if (/["\s\\]/.test(s) && !/'/.test(s)) return "'" + s.replace(/(['])/g, "\\$1") + "'";
 			if (/["'\s]/.test(s)) return "\"" + s.replace(/(["\\$`!])/g, "\\$1") + "\"";
-			return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}])/g, "$1\\$2");
+			return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g, "$1\\$2");
 		}).join(" ");
 	};
 }));
 
 //#endregion
-//#region node_modules/.pnpm/shell-quote@1.8.4/node_modules/shell-quote/parse.js
+//#region node_modules/.pnpm/shell-quote@1.9.0/node_modules/shell-quote/parse.js
 var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* @import {
+	* 	ControlOperator,
+	* 	Env,
+	* 	GlobPattern,
+	* 	ParseEntry,
+	* } from './parse' */
 	var CONTROL = "(?:" + [
 		"\\|\\|",
 		"\\&\\&",
@@ -99,17 +109,26 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var mult = 4294967296;
 	for (var i = 0; i < 4; i++) TOKEN += (mult * _p_MathRandom()).toString(16);
 	var startsWithToken = new _p_RegExpCtor("^" + TOKEN);
+	/**
+	* @param {string} s
+	* @param {RegExp} r
+	*/
 	function matchAll(s, r) {
 		var origIndex = r.lastIndex;
 		var matches = [];
 		var matchObj;
 		while (matchObj = r.exec(s)) {
-			matches.push(matchObj);
+			matches[matches.length] = matchObj;
 			if (r.lastIndex === matchObj.index) r.lastIndex += 1;
 		}
 		r.lastIndex = origIndex;
 		return matches;
 	}
+	/**
+	* @param {Env} env
+	* @param {string} pre
+	* @param {string} key
+	*/
 	function getVar(env, pre, key) {
 		var r = typeof env === "function" ? env(key) : env[key];
 		if (typeof r === "undefined" && key != "") r = "";
@@ -117,6 +136,12 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (typeof r === "object") return pre + TOKEN + _p_JSONStringify(r) + TOKEN;
 		return pre + r;
 	}
+	/**
+	* @param {string} string
+	* @param {Env} [env]
+	* @param {{ escape?: string }} [opts]
+	* @returns {ParseEntry[]}
+	*/
 	function parseInternal(string, env, opts) {
 		if (!opts) opts = {};
 		var BS = opts.escape || "\\";
@@ -129,14 +154,18 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			var s = match[0];
 			if (!s || commented) return;
 			if (controlRE.test(s)) return { op: s };
+			/** @type {string | boolean} */
 			var quote = false;
 			var esc = false;
 			var out = "";
 			var isGlob = false;
+			/** @type {number} */
 			var i;
 			function parseEnvVar() {
 				i += 1;
+				/** @type {number | RegExpMatchArray | null} */
 				var varend;
+				/** @type {string} */
 				var varname;
 				var char = _p_StringPrototypeCharAt(s, i);
 				if (char === "{") {
@@ -194,26 +223,37 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			};
 			return out;
 		}).reduce(function(prev, arg) {
-			return typeof arg === "undefined" ? prev : prev.concat(arg);
+			if (typeof arg === "undefined") return prev;
+			/** @type {ParseEntry[]} */ [].concat(arg).forEach(function(entry) {
+				prev[prev.length] = entry;
+			});
+			return prev;
 		}, []);
 	}
+	/** @type {import('./parse')} */
 	module.exports = function parse(s, env, opts) {
 		var mapped = parseInternal(s, env, opts);
 		if (typeof env !== "function") return mapped;
 		return mapped.reduce(function(acc, s) {
-			if (typeof s === "object") return acc.concat(s);
+			if (typeof s === "object") {
+				acc[acc.length] = s;
+				return acc;
+			}
 			var xs = s.split(RegExp("(" + TOKEN + ".*?" + TOKEN + ")", "g"));
-			if (xs.length === 1) return acc.concat(xs[0]);
-			return acc.concat(xs.filter(Boolean).map(function(x) {
-				if (startsWithToken.test(x)) return _p_JSONParse(x.split(TOKEN)[1]);
-				return x;
-			}));
+			if (xs.length === 1) {
+				acc[acc.length] = xs[0];
+				return acc;
+			}
+			xs.filter(Boolean).forEach(function(x) {
+				acc[acc.length] = startsWithToken.test(x) ? _p_JSONParse(x.split(TOKEN)[1]) : x;
+			});
+			return acc;
 		}, []);
 	};
 }));
 
 //#endregion
-//#region node_modules/.pnpm/shell-quote@1.8.4/node_modules/shell-quote/index.js
+//#region node_modules/.pnpm/shell-quote@1.9.0/node_modules/shell-quote/index.js
 var require_shell_quote = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.quote = require_quote();
 	exports.parse = require_parse();

package/dist/external/signal-exit.d.ts

@@ -0,0 +1 @@
+export { signalExit as default } from './external-pack'

package/dist/external/spdx-correct.d.ts

@@ -0,0 +1,4 @@
+import type { SpdxPack } from './spdx-pack'
+
+declare const spdxCorrect: SpdxPack['spdxCorrect']
+export default spdxCorrect

package/dist/external/spdx-expression-parse.d.ts

@@ -0,0 +1,4 @@
+import type { SpdxPack } from './spdx-pack'
+
+declare const spdxExpressionParse: SpdxPack['spdxExpressionParse']
+export default spdxExpressionParse

package/dist/external/spdx-pack.d.ts

@@ -0,0 +1,10 @@
+import type spdxCorrect from 'spdx-correct'
+import type spdxExpressionParse from 'spdx-expression-parse'
+
+export interface SpdxPack {
+  spdxCorrect: typeof spdxCorrect
+  spdxExpressionParse: typeof spdxExpressionParse
+}
+
+declare const spdxPack: SpdxPack
+export default spdxPack

package/dist/external/std-env.d.ts

@@ -0,0 +1,284 @@
+/**
+ * Hand-authored type surface for the bundled `std-env` external. std-env is a
+ * devDependency inlined into `dist/external/std-env.js` at build time; these
+ * declarations ship in its place so the public `env/*` re-exports resolve
+ * without consumers installing std-env. Mirrors std-env's own `index.d.mts`.
+ */
+
+/**
+ * Represents the name of an AI coding agent.
+ */
+export type AgentName =
+  | (string & {})
+  | 'cursor'
+  | 'claude'
+  | 'devin'
+  | 'replit'
+  | 'gemini'
+  | 'codex'
+  | 'auggie'
+  | 'opencode'
+  | 'kiro'
+  | 'goose'
+  | 'pi'
+
+/**
+ * Provides information about an AI coding agent.
+ */
+export type AgentInfo = {
+  /**
+   * The name of the AI coding agent. See {@link AgentName} for possible values.
+   */
+  name?: AgentName
+}
+
+/**
+ * Detects the current AI coding agent from environment variables.
+ */
+export declare function detectAgent(): AgentInfo
+
+/**
+ * The detected agent information, evaluated once at module initialisation.
+ */
+export declare const agentInfo: AgentInfo
+
+/**
+ * Name of the detected agent.
+ */
+export declare const agent: AgentName | undefined
+
+/**
+ * Whether the current environment is running inside an AI coding agent.
+ */
+export declare const isAgent: boolean
+
+/**
+ * Value of process.platform.
+ */
+export declare const platform: string
+
+/**
+ * Detect if `CI` environment variable is set or a provider CI detected.
+ */
+export declare const isCI: boolean
+
+/**
+ * Detect if stdout.TTY is available.
+ */
+export declare const hasTTY: boolean
+
+/**
+ * Detect if global `window` object is available.
+ */
+export declare const hasWindow: boolean
+
+/**
+ * Detect if `DEBUG` environment variable is set.
+ */
+export declare const isDebug: boolean
+
+/**
+ * Detect if `NODE_ENV` environment variable is `test` or `TEST` is set.
+ */
+export declare const isTest: boolean
+
+/**
+ * Detect if `NODE_ENV` or `MODE` environment variable is `production`.
+ */
+export declare const isProduction: boolean
+
+/**
+ * Detect if `NODE_ENV`/`MODE` environment variable is `dev`/`development`.
+ */
+export declare const isDevelopment: boolean
+
+/**
+ * Detect if MINIMAL is set, running in CI or test, or TTY is unavailable.
+ */
+export declare const isMinimal: boolean
+
+/**
+ * Detect if process.platform is Windows.
+ */
+export declare const isWindows: boolean
+
+/**
+ * Detect if process.platform is Linux.
+ */
+export declare const isLinux: boolean
+
+/**
+ * Detect if process.platform is macOS (darwin kernel).
+ */
+export declare const isMacOS: boolean
+
+/**
+ * Detect if terminal color output is supported (NO_COLOR/FORCE_COLOR/TTY/CI).
+ */
+export declare const isColorSupported: boolean
+
+/**
+ * Node.js version string (e.g. `"20.11.0"`), or `null` outside Node.js.
+ */
+export declare const nodeVersion: string | null
+
+/**
+ * Node.js major version number (e.g. `20`), or `null` outside Node.js.
+ */
+export declare const nodeMajorVersion: number | null
+
+/**
+ * Represents the name of a CI/CD or Deployment provider.
+ */
+export type ProviderName =
+  | (string & {})
+  | 'appveyor'
+  | 'aws_amplify'
+  | 'azure_pipelines'
+  | 'azure_static'
+  | 'appcircle'
+  | 'bamboo'
+  | 'bitbucket'
+  | 'bitrise'
+  | 'buddy'
+  | 'buildkite'
+  | 'circle'
+  | 'cirrus'
+  | 'cloudflare_pages'
+  | 'cloudflare_workers'
+  | 'google_cloudrun'
+  | 'google_cloudrun_job'
+  | 'codebuild'
+  | 'codefresh'
+  | 'drone'
+  | 'dsari'
+  | 'github_actions'
+  | 'gitlab'
+  | 'gocd'
+  | 'layerci'
+  | 'hudson'
+  | 'jenkins'
+  | 'magnum'
+  | 'netlify'
+  | 'nevercode'
+  | 'render'
+  | 'sail'
+  | 'semaphore'
+  | 'screwdriver'
+  | 'shippable'
+  | 'solano'
+  | 'strider'
+  | 'teamcity'
+  | 'travis'
+  | 'vercel'
+  | 'appcenter'
+  | 'codesandbox'
+  | 'stackblitz'
+  | 'stormkit'
+  | 'cleavr'
+  | 'zeabur'
+  | 'codesphere'
+  | 'railway'
+  | 'deno-deploy'
+  | 'firebase_app_hosting'
+  | 'edgeone_pages'
+
+/**
+ * Information about a CI/CD or Deployment provider.
+ */
+export type ProviderInfo = {
+  /**
+   * The name of the provider. See {@link ProviderName} for possible values.
+   */
+  name: ProviderName
+  /**
+   * When `true`, the environment is recognised as a CI/CD provider.
+   */
+  ci?: boolean
+  /**
+   * Arbitrary metadata associated with the provider.
+   */
+  [meta: string]: any
+}
+
+/**
+ * Detects the current CI/CD or Deployment provider from environment variables.
+ */
+export declare function detectProvider(): ProviderInfo
+
+/**
+ * The detected provider information, evaluated once at module initialisation.
+ */
+export declare const providerInfo: ProviderInfo
+
+/**
+ * Name of the detected provider, empty string if none detected.
+ */
+export declare const provider: ProviderName
+
+/**
+ * Represents the name of a JavaScript runtime.
+ *
+ * @see https://runtime-keys.proposal.wintercg.org/
+ */
+export type RuntimeName =
+  | (string & {})
+  | 'workerd'
+  | 'deno'
+  | 'netlify'
+  | 'node'
+  | 'bun'
+  | 'edge-light'
+  | 'fastly'
+
+export type RuntimeInfo = {
+  /**
+   * The name of the detected runtime.
+   */
+  name: RuntimeName
+}
+
+/**
+ * Indicates if running in Node.js or a Node.js compatible runtime.
+ */
+export declare const isNode: boolean
+
+/**
+ * Indicates if running in Bun runtime.
+ */
+export declare const isBun: boolean
+
+/**
+ * Indicates if running in Deno runtime.
+ */
+export declare const isDeno: boolean
+
+/**
+ * Indicates if running in Fastly runtime.
+ */
+export declare const isFastly: boolean
+
+/**
+ * Indicates if running in Netlify runtime.
+ */
+export declare const isNetlify: boolean
+
+/**
+ * Indicates if running in EdgeLight (Vercel Edge) runtime.
+ */
+export declare const isEdgeLight: boolean
+
+/**
+ * Indicates if running in Cloudflare Workers runtime.
+ */
+export declare const isWorkerd: boolean
+
+/**
+ * Information about the detected runtime, if any.
+ */
+export declare const runtimeInfo: RuntimeInfo | undefined
+
+/**
+ * Name of the detected runtime, empty string if none detected.
+ */
+export declare const runtime: RuntimeName