@socketsecurity/lib 6.0.8 → 6.0.10

package/dist/secrets/broker.js

@@ -0,0 +1,72 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_paths_socket = require('../paths/socket.js');
+let node_fs = require("node:fs");
+let node_net = require("node:net");
+node_net = require_runtime.__toESM(node_net);
+
+//#region src/secrets/broker.ts
+/**
+* @file Proteus broker client. Asks the running proteus credential daemon for a
+*   secret over its local Unix socket (Windows named pipe later), so a
+*   biometric-gated read happens inside the daemon and the value is vended to
+*   this process in memory rather than sitting in an env var. This is the layer
+*   `ai/credentials.mts` documents as slotting between the env check and the
+*   keychain read in `secrets/find.ts` `resolve()`.
+*   The broker is OPTIONAL and self-gating: when the daemon isn't running (no
+*   socket file), `requestFromBroker` returns `undefined` immediately and the
+*   caller falls through to the keychain. It never throws — a broker miss is a
+*   fall-through, not an error. The daemon binary itself is built by socket-btm
+*   (`packages/proteus-builder`); download-and-start is a later layer, so today
+*   this only talks to an already-running daemon.
+*/
+const PROTEUS_SOCKET_NAME = "proteus";
+const BROKER_TIMEOUT_MS = 1e3;
+/**
+* Ask the proteus daemon for a credential. Returns the value on success, or
+* `undefined` when the daemon isn't running, doesn't hold it, or the biometric
+* prompt was declined. Never throws: a miss falls through to the next resolver
+* layer (the keychain).
+*/
+async function requestFromBroker({ account, service }) {
+	const socketPath = require_paths_socket.getRuntimeSocketPath(PROTEUS_SOCKET_NAME);
+	if (!(0, node_fs.existsSync)(socketPath)) return;
+	return await new Promise((resolvePromise) => {
+		const conn = node_net.default.connect(socketPath);
+		let buffer = "";
+		let settled = false;
+		function settle(value) {
+			if (settled) return;
+			settled = true;
+			conn.destroy();
+			resolvePromise(value);
+		}
+		conn.setTimeout(BROKER_TIMEOUT_MS);
+		conn.on("timeout", () => settle(void 0));
+		conn.on("error", () => settle(void 0));
+		conn.on("connect", () => {
+			const payload = JSON.stringify({
+				account,
+				op: "get",
+				service
+			});
+			conn.write(`${payload}\n`);
+		});
+		conn.on("data", (chunk) => {
+			buffer += String(chunk);
+			const newlineAt = buffer.indexOf("\n");
+			if (newlineAt === -1) return;
+			try {
+				const parsed = JSON.parse(buffer.slice(0, newlineAt));
+				settle(parsed.ok && typeof parsed.value === "string" ? parsed.value : void 0);
+			} catch {
+				settle(void 0);
+			}
+		});
+	});
+}
+
+//#endregion
+exports.requestFromBroker = requestFromBroker;

package/dist/secrets/find.d.ts

@@ -1,8 +1,8 @@
 /**
- * @file Resolve a secret from the canonical fleet precedence order: process env
+ * @file Resolve a secret from the canonical Socket precedence order: process env
  *   → OS keychain. Returns the value + the source it came from so the caller
  *   can log which slot won. Why a helper instead of inlining: every consumer of
- *   the fleet's Socket API token does the same dance — check
+ *   the Socket API token does the same dance — check
  *   `process.env.SOCKET_API_TOKEN`, fall back to a legacy env-var alias, fall
  *   back to `readSecret({...})` from the keychain. Tools drift on the exact
  *   order and on which aliases they consider. This helper centralizes the
@@ -51,10 +51,11 @@ export interface ResolveResult {
     value: string;
     /**
      * Where the value came from: 'env' — `process.env[<account>]` had a non-empty
-     * value. 'keychain' — env-var was empty/missing; the value was read from the
-     * OS credential store under the matching account.
+     * value. 'broker' — the proteus daemon vended it after a biometric unlock.
+     * 'keychain' — env-var was empty and no broker was running; the value was
+     * read from the OS credential store under the matching account.
      */
-    source: 'env' | 'keychain';
+    source: 'broker' | 'env' | 'keychain';
     /**
      * Which account in `accounts` was the actual hit.
      */
@@ -74,6 +75,7 @@ export declare function readEnv(name: string): string | undefined;
 export declare function resolve(options: ResolveOptions): Promise<ResolveResult | undefined>;
 /**
  * Sync variant for non-async callers (hook initializers, schema validators that
- * run before any `await` machinery exists).
+ * run before any `await` machinery exists). Has no proteus broker tier — the
+ * broker socket round-trip is async — so this path is env → keychain only.
  */
 export declare function resolveSync(options: ResolveOptions): ResolveResult | undefined;

package/dist/secrets/find.js

@@ -1,14 +1,15 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_secrets_broker = require('./broker.js');
 const require_secrets_keychain = require('./keychain.js');
 
 //#region src/secrets/find.ts
 /**
-* @file Resolve a secret from the canonical fleet precedence order: process env
+* @file Resolve a secret from the canonical Socket precedence order: process env
 *   → OS keychain. Returns the value + the source it came from so the caller
 *   can log which slot won. Why a helper instead of inlining: every consumer of
-*   the fleet's Socket API token does the same dance — check
+*   the Socket API token does the same dance — check
 *   `process.env.SOCKET_API_TOKEN`, fall back to a legacy env-var alias, fall
 *   back to `readSecret({...})` from the keychain. Tools drift on the exact
 *   order and on which aliases they consider. This helper centralizes the
@@ -57,6 +58,18 @@ async function resolve(options) {
 		};
 	}
 	if (allowEnvOnly) return;
+	for (let i = 0, { length } = accounts; i < length; i += 1) {
+		const account = accounts[i];
+		const fromBroker = await require_secrets_broker.requestFromBroker({
+			account,
+			service
+		});
+		if (fromBroker) return {
+			value: fromBroker,
+			source: "broker",
+			account
+		};
+	}
 	for (let i = 0, { length } = accounts; i < length; i += 1) {
 		const account = accounts[i];
 		const fromKeychain = await require_secrets_keychain.readSecret({
@@ -72,7 +85,8 @@ async function resolve(options) {
 }
 /**
 * Sync variant for non-async callers (hook initializers, schema validators that
-* run before any `await` machinery exists).
+* run before any `await` machinery exists). Has no proteus broker tier — the
+* broker socket round-trip is async — so this path is env → keychain only.
 */
 function resolveSync(options) {
 	const { accounts, allowEnvOnly, service } = {

package/dist/secrets/keychain.d.ts

@@ -42,6 +42,9 @@ export interface DeleteFromSlotsOptions {
     accounts: readonly string[];
 }
 export declare function deleteSecretFromSlots({ service, accounts, }: DeleteFromSlotsOptions): Promise<SecretDeleteResult[]>;
+/**
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
+ */
 export declare function deleteSecretFromSlotsSync({ service, accounts, }: DeleteFromSlotsOptions): SecretDeleteResult[];
 export declare function deleteSecretSync({ service, account, }: DeleteOptions): 'removed' | 'absent';
 export type { BackendAvailability, SecretDeleteResult, SecretWriteResult, } from './types';
@@ -50,7 +53,7 @@ export type Platform = 'darwin' | 'linux' | 'win32' | 'other';
 /**
  * Resolve the current OS to one of our four backend categories.
  *
- * Exported only because the fleet's `export-top-level-functions` lint rule
+ * Exported only because Socket's `export-top-level-functions` lint rule
  * requires top-level functions to be exported for testability. Not part of the
  * public `secrets/keychain` API surface — consumers should call `readSecret` /
  * `writeSecret` / `getBackendAvailability` instead, which handle the dispatch
@@ -90,6 +93,9 @@ export declare function readSecretFromSlots({ service, accounts, }: ReadFromSlot
     value: string;
     account: string;
 } | undefined>;
+/**
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
+ */
 export declare function readSecretFromSlotsSync({ service, accounts, }: ReadFromSlotsOptions): {
     value: string;
     account: string;
@@ -135,4 +141,7 @@ export interface WriteToSlotsOptions {
  * the next successful write cleans up).
  */
 export declare function writeSecretToSlots({ service, accounts, value, label, }: WriteToSlotsOptions): Promise<SecretWriteResult[]>;
+/**
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
+ */
 export declare function writeSecretToSlotsSync({ service, accounts, value, label, }: WriteToSlotsOptions): SecretWriteResult[];

package/dist/secrets/keychain.js

@@ -77,6 +77,9 @@ async function deleteSecretFromSlots({ service, accounts }) {
 	}
 	return results;
 }
+/**
+* @unused No internal or Socket consumers (exercised only by its unit tests).
+*/
 function deleteSecretFromSlotsSync({ service, accounts }) {
 	const results = [];
 	for (const account of accounts) {
@@ -111,7 +114,7 @@ function deleteSecretSync({ service, account }) {
 /**
 * Resolve the current OS to one of our four backend categories.
 *
-* Exported only because the fleet's `export-top-level-functions` lint rule
+* Exported only because Socket's `export-top-level-functions` lint rule
 * requires top-level functions to be exported for testability. Not part of the
 * public `secrets/keychain` API surface — consumers should call `readSecret` /
 * `writeSecret` / `getBackendAvailability` instead, which handle the dispatch
@@ -190,6 +193,9 @@ async function readSecretFromSlots({ service, accounts }) {
 		};
 	}
 }
+/**
+* @unused No internal or Socket consumers (exercised only by its unit tests).
+*/
 function readSecretFromSlotsSync({ service, accounts }) {
 	for (const account of accounts) {
 		const value = readSecretSync({
@@ -302,6 +308,9 @@ async function writeSecretToSlots({ service, accounts, value, label }) {
 	}
 	return results;
 }
+/**
+* @unused No internal or Socket consumers (exercised only by its unit tests).
+*/
 function writeSecretToSlotsSync({ service, accounts, value, label }) {
 	const results = [];
 	for (const account of accounts) {

package/dist/secrets/rc.js

@@ -3,8 +3,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_object = require('../primordials/object.js');
-const require_env_home = require('../env/home.js');
 const require_primordials_string = require('../primordials/string.js');
+const require_env_home = require('../env/home.js');
 const require_primordials_regexp = require('../primordials/regexp.js');
 let node_fs = require("node:fs");
 let node_process = require("node:process");

package/dist/secrets/socket-api-token.d.ts

@@ -1,6 +1,6 @@
 /**
  * @file Convenience helper for reading the Socket API token from the canonical
- *   env → keychain precedence order. Centralizes two constants every fleet
+ *   env → keychain precedence order. Centralizes two constants every Socket
  *   consumer would otherwise hard-code: the keychain service name
  *   (`socketsecurity`) and the env-var + account fallback list
  *   (`SOCKET_API_TOKEN` canonical, `SOCKET_API_KEY` legacy alias). Consumers

package/dist/secrets/socket-api-token.js

@@ -6,7 +6,7 @@ const require_secrets_find = require('./find.js');
 //#region src/secrets/socket-api-token.ts
 /**
 * @file Convenience helper for reading the Socket API token from the canonical
-*   env → keychain precedence order. Centralizes two constants every fleet
+*   env → keychain precedence order. Centralizes two constants every Socket
 *   consumer would otherwise hard-code: the keychain service name
 *   (`socketsecurity`) and the env-var + account fallback list
 *   (`SOCKET_API_TOKEN` canonical, `SOCKET_API_KEY` legacy alias). Consumers

package/dist/secrets/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * @file Public type surface for `secrets/*`. Secrets in the fleet are stored
+ * @file Public type surface for `secrets/*`. Secrets in Socket tools are stored
  *   under the OS's native credential store keyed by `{ service, account }`:
  *
  *   - macOS: Keychain generic-password items (service = `-s`, account = `-a`

package/dist/smol/detect.js

@@ -43,7 +43,7 @@ function getSmolUtil() {
 	if (!smolUtilProbed) {
 		smolUtilProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require("node:smol-util");
+		if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require_node_module.requireBuiltin("node:smol-util");
 	}
 	return smolUtilCache;
 }

package/dist/smol/http.d.ts

@@ -56,5 +56,7 @@ export interface SmolHttpBinding {
 /**
  * Returns `node:smol-http` when running on the smol Node binary, otherwise
  * `undefined`. Result is cached across calls.
+ *
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
  */
 export declare function getSmolHttp(): SmolHttpBinding | undefined;

package/dist/smol/http.js

@@ -23,12 +23,14 @@ let smolHttpProbed = false;
 /**
 * Returns `node:smol-http` when running on the smol Node binary, otherwise
 * `undefined`. Result is cached across calls.
+*
+* @unused No internal or Socket consumers (exercised only by its unit tests).
 */
 function getSmolHttp() {
 	if (!smolHttpProbed) {
 		smolHttpProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-http")) smolHttpBinding = require("node:smol-http");
+		if (require_node_module.isNodeBuiltin("node:smol-http")) smolHttpBinding = require_node_module.requireBuiltin("node:smol-http");
 	}
 	return smolHttpBinding;
 }

package/dist/smol/https.d.ts

@@ -55,5 +55,7 @@ export interface SmolHttpsBinding {
 /**
  * Returns `node:smol-https` when running on the smol Node binary, otherwise
  * `undefined`. Result is cached across calls.
+ *
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
  */
 export declare function getSmolHttps(): SmolHttpsBinding | undefined;

package/dist/smol/https.js

@@ -21,12 +21,14 @@ let smolHttpsProbed = false;
 /**
 * Returns `node:smol-https` when running on the smol Node binary, otherwise
 * `undefined`. Result is cached across calls.
+*
+* @unused No internal or Socket consumers (exercised only by its unit tests).
 */
 function getSmolHttps() {
 	if (!smolHttpsProbed) {
 		smolHttpsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-https")) smolHttps = require("node:smol-https");
+		if (require_node_module.isNodeBuiltin("node:smol-https")) smolHttps = require_node_module.requireBuiltin("node:smol-https");
 	}
 	return smolHttps;
 }

package/dist/smol/manifest.js

@@ -28,7 +28,7 @@ function getSmolManifest() {
 	if (!smolManifestProbed) {
 		smolManifestProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-manifest")) cachedSmolManifest = require("node:smol-manifest");
+		if (require_node_module.isNodeBuiltin("node:smol-manifest")) cachedSmolManifest = require_node_module.requireBuiltin("node:smol-manifest");
 	}
 	return cachedSmolManifest;
 }

package/dist/smol/path.js

@@ -28,7 +28,7 @@ function getSmolPath() {
 	if (!smolPathProbed) {
 		smolPathProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-path")) smolPathCache = require("node:smol-path");
+		if (require_node_module.isNodeBuiltin("node:smol-path")) smolPathCache = require_node_module.requireBuiltin("node:smol-path");
 	}
 	return smolPathCache;
 }

package/dist/smol/primordial.js

@@ -30,7 +30,7 @@ function getSmolPrimordial() {
 	if (!smolPrimordialProbed) {
 		smolPrimordialProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require("node:smol-primordial");
+		if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require_node_module.requireBuiltin("node:smol-primordial");
 	}
 	return smolPrimordial;
 }

package/dist/smol/purl.js

@@ -29,7 +29,7 @@ function getSmolPurl() {
 	if (!smolPurlProbed) {
 		smolPurlProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-purl")) smolPurl = require("node:smol-purl");
+		if (require_node_module.isNodeBuiltin("node:smol-purl")) smolPurl = require_node_module.requireBuiltin("node:smol-purl");
 	}
 	return smolPurl;
 }

package/dist/smol/versions.js

@@ -26,7 +26,7 @@ function getSmolVersions() {
 	if (!smolVersionsProbed) {
 		smolVersionsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-versions")) smolVersions = require("node:smol-versions");
+		if (require_node_module.isNodeBuiltin("node:smol-versions")) smolVersions = require_node_module.requireBuiltin("node:smol-versions");
 	}
 	return smolVersions;
 }

package/dist/smol/vfs.js

@@ -41,7 +41,7 @@ function getSmolVfs() {
 	if (!smolVfsProbed) {
 		smolVfsProbed = true;
 		/* c8 ignore start - smol Node binary only. */
-		if (require_node_module.isNodeBuiltin("node:smol-vfs")) cachedSmolVfs = require("node:smol-vfs").getSmolVfs();
+		if (require_node_module.isNodeBuiltin("node:smol-vfs")) cachedSmolVfs = require_node_module.requireBuiltin("node:smol-vfs").getSmolVfs();
 	}
 	return cachedSmolVfs;
 }

package/dist/sorts/_internal.d.ts

@@ -3,7 +3,5 @@
  *   fast-sort + semver, and the cached Intl.Collator instances. Used by the
  *   locale / natural / semver comparison entrypoints.
  */
-import type * as fastSortType from '../external/fast-sort';
-import type * as semverType from '../external/semver';
-export declare function getFastSort(): typeof fastSortType;
-export declare function getSemver(): typeof semverType;
+import type { default as FastSort } from '../external/fast-sort';
+export declare function getFastSort(): typeof FastSort;

package/dist/sorts/_internal.js

@@ -4,16 +4,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 //#region src/sorts/_internal.ts
 let fastSort;
-let semver;
 function getFastSort() {
 	if (fastSort === void 0) fastSort = /*@__PURE__*/ require("../external/fast-sort.js");
 	return fastSort;
 }
-function getSemver() {
-	if (semver === void 0) semver = /*@__PURE__*/ require("../external/semver.js");
-	return semver;
-}
 
 //#endregion
-exports.getFastSort = getFastSort;
-exports.getSemver = getSemver;
+exports.getFastSort = getFastSort;

package/dist/sorts/semver.js

@@ -1,7 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_sorts__internal = require('./_internal.js');
+const require_versions__internal = require('../versions/_internal.js');
 
 //#region src/sorts/semver.ts
 /**
@@ -20,7 +20,7 @@ const require_sorts__internal = require('./_internal.js');
 */
 function compareSemver(a, b) {
 	/* c8 ignore start */
-	const semver = require_sorts__internal.getSemver();
+	const semver = require_versions__internal.getSemver();
 	const validA = semver.valid(a);
 	/* c8 ignore stop */
 	const validB = semver.valid(b);

package/dist/spinner/create-spinner-class.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_math = require('../primordials/math.js');
 const require_primordials_object = require('../primordials/object.js');
+const require_primordials_math = require('../primordials/math.js');
 const require_primordials_array = require('../primordials/array.js');
 const require_process_abort = require('../process/abort.js');
 const require_logger_symbols = require('../logger/symbols.js');

package/dist/spinner/format.js

@@ -1,10 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_math = require('../primordials/math.js');
-let src_external_yoctocolors_cjs = require("../external/yoctocolors-cjs");
-src_external_yoctocolors_cjs = require_runtime.__toESM(src_external_yoctocolors_cjs);
+const require_logger_colors = require('../logger/colors.js');
 
 //#region src/spinner/format.ts
 /**
@@ -86,7 +84,7 @@ function renderProgressBar(percentage, width = 20) {
 	const filled = require_primordials_math.MathMax(0, Math.min(width, Math.round(percentage / 100 * width)));
 	const empty = require_primordials_math.MathMax(0, width - filled);
 	const bar = "█".repeat(filled) + "░".repeat(empty);
-	return src_external_yoctocolors_cjs.default.cyan(bar);
+	return require_logger_colors.getYoctocolors().cyan(bar);
 }
 
 //#endregion

package/dist/stdio/footer.js

@@ -1,14 +1,11 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_array = require('../primordials/array.js');
 const require_primordials_date = require('../primordials/date.js');
 const require_logger_symbols = require('../logger/symbols.js');
 const require_strings_format = require('../strings/format.js');
 const require_logger_default = require('../logger/default.js');
-let src_external_yoctocolors_cjs = require("../external/yoctocolors-cjs");
-src_external_yoctocolors_cjs = require_runtime.__toESM(src_external_yoctocolors_cjs);
 
 //#region src/stdio/footer.ts
 /**
@@ -44,16 +41,17 @@ function createFooter(message, options) {
 		__proto__: null,
 		...options
 	};
+	const colors = require("../external/yoctocolors-cjs");
 	const border = require_strings_format.repeatString(borderChar, width);
 	const lines = [];
-	if (message) require_primordials_array.ArrayPrototypePush(lines, (color && src_external_yoctocolors_cjs.default[color] ? src_external_yoctocolors_cjs.default[color] : (s) => s)(message));
+	if (message) require_primordials_array.ArrayPrototypePush(lines, (color && colors[color] ? colors[color] : (s) => s)(message));
 	if (showTimestamp) {
 		const timestamp = new require_primordials_date.DateCtor().toISOString();
-		require_primordials_array.ArrayPrototypePush(lines, src_external_yoctocolors_cjs.default.gray(`Completed at: ${timestamp}`));
+		require_primordials_array.ArrayPrototypePush(lines, colors.gray(`Completed at: ${timestamp}`));
 	}
 	if (showDuration && startTime) {
 		const seconds = ((require_primordials_date.DateNow() - startTime) / 1e3).toFixed(2);
-		require_primordials_array.ArrayPrototypePush(lines, src_external_yoctocolors_cjs.default.gray(`Duration: ${seconds}s`));
+		require_primordials_array.ArrayPrototypePush(lines, colors.gray(`Duration: ${seconds}s`));
 	}
 	require_primordials_array.ArrayPrototypePush(lines, border);
 	return lines.join("\n");
@@ -114,7 +112,10 @@ function createSummaryFooter(stats, options) {
 function printFooter(message) {
 	const border = require_strings_format.repeatString("─", 55);
 	logger.log(border);
-	if (message) logger.log(src_external_yoctocolors_cjs.default.green(message));
+	if (message) {
+		const colors = require("../external/yoctocolors-cjs");
+		logger.log(colors.green(message));
+	}
 }
 
 //#endregion

package/dist/stdio/progress.js

@@ -2,9 +2,9 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.js');
-const require_primordials_math = require('../primordials/math.js');
 const require_primordials_object = require('../primordials/object.js');
 const require_primordials_string = require('../primordials/string.js');
+const require_primordials_math = require('../primordials/math.js');
 const require_primordials_date = require('../primordials/date.js');
 const require_ansi_strip = require('../ansi/strip.js');
 const require_strings_format = require('../strings/format.js');

package/dist/stdio/prompts.d.ts

@@ -2,18 +2,10 @@
  * @file User prompt utilities for interactive scripts. Provides inquirer.js
  *   integration with spinner support, context handling, and theming.
  */
-import checkboxRaw from '../external/@inquirer/checkbox';
-import confirmRaw from '../external/@inquirer/confirm';
-import inputRaw from '../external/@inquirer/input';
-import passwordRaw from '../external/@inquirer/password';
-import type { ColorValue } from '../colors/types';
 import type { Remap } from '../objects/types';
 import type { SpinnerInstance } from '../spinner/types';
 import type { ThemeName } from '../themes/themes';
 import type { Theme } from '../themes/types';
-declare const searchRaw: any;
-declare const selectRaw: any;
-declare const ActualSeparator: any;
 /**
  * Choice option for select and search prompts.
  *
@@ -94,13 +86,6 @@ export declare class SeparatorType {
     constructor(separator?: string);
 }
 export type Separator = SeparatorType;
-/**
- * Apply a color to text using yoctocolors. Handles both named colors and RGB
- * tuples.
- *
- * @private
- */
-export declare function applyColor(text: string, color: ColorValue): string;
 /**
  * Convert Socket theme to @inquirer theme format. Maps our theme colors to
  * inquirer's style functions. Handles theme names, Theme objects, and passes
@@ -143,7 +128,7 @@ export declare function createInquirerTheme(theme: Theme | ThemeName | unknown):
  *
  * @returns Separator instance
  */
-export declare function createSeparator(text?: string): InstanceType<typeof ActualSeparator>;
+export declare function createSeparator(text?: string): Separator;
 /**
  * Check if value is a Socket Theme object.
  *
@@ -191,7 +176,7 @@ export declare function wrapPrompt<T = unknown>(inquirerPrompt: (...args: unknow
  *     ],
  *   })
  */
-export declare const checkbox: typeof checkboxRaw;
+export declare const checkbox: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for a yes/no confirmation. Wrapped with spinner handling and abort
  * signal support.
@@ -200,7 +185,7 @@ export declare const checkbox: typeof checkboxRaw;
  *   const answer = await confirm({ message: 'Continue?' })
  *   if (answer) { // user confirmed }
  */
-export declare const confirm: typeof confirmRaw;
+export declare const confirm: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for text input. Wrapped with spinner handling and abort signal
  * support. Result is automatically trimmed.
@@ -208,7 +193,7 @@ export declare const confirm: typeof confirmRaw;
  * @example
  *   const name = await input({ message: 'Enter your name:' })
  */
-export declare const input: typeof inputRaw;
+export declare const input: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for password input (hidden characters). Wrapped with spinner handling
  * and abort signal support.
@@ -216,7 +201,7 @@ export declare const input: typeof inputRaw;
  * @example
  *   const token = await password({ message: 'Enter API token:' })
  */
-export declare const password: typeof passwordRaw;
+export declare const password: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt with searchable/filterable choices. Wrapped with spinner handling and
  * abort signal support.
@@ -227,7 +212,7 @@ export declare const password: typeof passwordRaw;
  *     source: async input => fetchPackages(input),
  *   })
  */
-export declare const search: typeof searchRaw;
+export declare const search: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt to select from a list of choices. Wrapped with spinner handling and
  * abort signal support.
@@ -241,5 +226,5 @@ export declare const search: typeof searchRaw;
  *     ],
  *   })
  */
-export declare const select: typeof selectRaw;
-export { ActualSeparator as Separator };
+export declare const select: (...args: unknown[]) => Promise<unknown>;
+export declare const Separator: typeof SeparatorType;