@socketsecurity/lib 6.0.8 → 6.0.10

package/dist/versions/compare.js

@@ -20,7 +20,11 @@ const require_versions__internal = require('./_internal.js');
 *     "invalid version" throw into `undefined` for the caller's convenience;
 *     all other ops surface whatever the underlying impl returns. The vendored
 *     `semver` export has no `neq` helper, so when we fall back to it we route
-*     `neq` through `!eq` to match smol's semantics.
+*     `neq` through `!eq` to match smol's semantics. Snapshot safety: each
+*     export is a thin forwarding function that resolves `getImpl()` at FIRST
+*     CALL, not at module-eval. Binding the impl methods at module load
+*     (`impl.eq.bind(impl)`) pinned the native-handle-bearing semver/npm-pack
+*     bundle into the heap and aborted `node --build-snapshot`.
 */
 /**
 * Compare two semantic version strings.
@@ -29,7 +33,7 @@ const require_versions__internal = require('./_internal.js');
 */
 function compare(a, b) {
 	try {
-		return require_versions__internal.impl.compare(a, b);
+		return require_versions__internal.getImpl().compare(a, b);
 	} catch {
 		return;
 	}
@@ -37,42 +41,58 @@ function compare(a, b) {
 /**
 * Check if a equals b.
 */
-const eq = require_versions__internal.impl.eq.bind(require_versions__internal.impl);
-/**
-* Check if a does not equal b.
-*/
-/* c8 ignore start - smol-versions exposes .neq, so the bind arm is taken;
-the polyfill fallback fires only on a hypothetical impl that lacks .neq. */
-const neq = typeof require_versions__internal.impl.neq === "function" ? require_versions__internal.impl.neq.bind(require_versions__internal.impl) : (a, b) => !require_versions__internal.impl.eq(a, b);
-/* c8 ignore stop */
+function eq(a, b) {
+	return require_versions__internal.getImpl().eq(a, b);
+}
 /**
 * Check if a is greater than b.
 */
-const gt = require_versions__internal.impl.gt.bind(require_versions__internal.impl);
+function gt(a, b) {
+	return require_versions__internal.getImpl().gt(a, b);
+}
 /**
 * Check if a is greater than or equal to b.
 */
-const gte = require_versions__internal.impl.gte.bind(require_versions__internal.impl);
+function gte(a, b) {
+	return require_versions__internal.getImpl().gte(a, b);
+}
 /**
 * Check if a is less than b.
 */
-const lt = require_versions__internal.impl.lt.bind(require_versions__internal.impl);
+function lt(a, b) {
+	return require_versions__internal.getImpl().lt(a, b);
+}
 /**
 * Check if a is less than or equal to b.
 */
-const lte = require_versions__internal.impl.lte.bind(require_versions__internal.impl);
+function lte(a, b) {
+	return require_versions__internal.getImpl().lte(a, b);
+}
+/**
+* Check if a does not equal b. The vendored `semver` export exposes no `neq`
+* helper, so on the fallback path we route through `!eq` to match smol's
+* semantics; smol-versions has a native `.neq` and uses it directly.
+*/
+function neq(a, b) {
+	const impl = require_versions__internal.getImpl();
+	/* c8 ignore start - smol-versions exposes .neq, so the native arm is taken;
+	the polyfill fallback fires only on a hypothetical impl that lacks .neq. */
+	if (typeof impl.neq === "function") return impl.neq(a, b);
+	return !impl.eq(a, b);
+	/* c8 ignore stop */
+}
 /**
 * Sort versions in descending order.
 */
 function rsort(versions) {
-	return require_versions__internal.impl.rsort([...versions]);
+	return require_versions__internal.getImpl().rsort([...versions]);
 }
 /**
 * Sort versions in ascending order. The input is spread so callers can pass a
 * `readonly string[]` even when the impl mutates internally.
 */
 function sort(versions) {
-	return require_versions__internal.impl.sort([...versions]);
+	return require_versions__internal.getImpl().sort([...versions]);
 }
 
 //#endregion

package/dist/versions/parse.js

@@ -69,7 +69,7 @@ function getPatchVersion(version) {
 */
 function isValidVersion(version) {
 	/* c8 ignore next - External semver call */
-	return require_versions__internal.impl.valid(version) != null;
+	return require_versions__internal.getImpl().valid(version) != null;
 }
 /**
 * Parse a version string and return major, minor, patch components.

package/dist/versions/range.js

@@ -22,7 +22,8 @@ const require_versions__internal = require('./_internal.js');
 */
 function filterVersions(versions, range) {
 	/* c8 ignore next - External semver call */
-	return versions.filter((v) => require_versions__internal.impl.satisfies(v, range));
+	const impl = require_versions__internal.getImpl();
+	return versions.filter((v) => impl.satisfies(v, range));
 }
 /**
 * Get the highest version from an array of versions.
@@ -57,7 +58,7 @@ function minVersion(versions) {
 */
 function satisfiesVersion(version, range) {
 	/* c8 ignore next - External semver call */
-	return require_versions__internal.impl.satisfies(version, range);
+	return require_versions__internal.getImpl().satisfies(version, range);
 }
 
 //#endregion

package/dist/words/pluralize.js

@@ -62,7 +62,10 @@ function pluralize(word, options) {
 		__proto__: null,
 		...options
 	};
-	if (forms) return forms[CLDR_TO_FIELD[getRules(locale, type).select(count)]] ?? forms.plural;
+	if (forms) {
+		const category = getRules(locale, type).select(count);
+		return forms[CLDR_TO_FIELD[category]] ?? forms.plural;
+	}
 	return count === 1 ? word : `${word}s`;
 }
 

package/llms.txt

@@ -0,0 +1,63 @@
+# socket-lib
+
+> <a href="https://socket.dev/npm/package/@socketsecurity/lib"><img src="https://socket.dev/api/badge/npm/package/@socketsecurity/lib" alt="Socket Badge" height="20"></a> ![Coverage](assets/repo/coverage.svg)
+
+| key | value |
+| --- | --- |
+| version | 6.0.10-prerelease |
+| node | >=22 |
+| layout | monorepo |
+| license | MIT |
+| package manager | pnpm (from repo root) |
+
+## Docs
+
+- [README](README.md): <a href="https://socket.dev/npm/package/@socketsecurity/lib"><img src="https://socket.dev/api/badge/npm/package/@socketsecurity/lib" alt="Socket Badge" height="20"></a> ![Coverage](assets/repo/coverage.svg)
+- [adversarial-self-review](docs/agents.md/fleet/adversarial-self-review.md): A clean automated review is one reviewer shape finding nothing. On a
+- [agent-delegation](docs/agents.md/fleet/agent-delegation.md): When a task fits one of the patterns below, hand it off instead of doing it in the current session. The point is to get a _different model's_ take, or to keep heavy work out of the main context. Don't…
+- [agents-and-skills](docs/agents.md/fleet/agents-and-skills.md): The CLAUDE.md `### Agents & skills` section names the entry-point skills. This file is the full taxonomy and the cross-fleet runner. Before authoring a new skill, read…
+- [binary-vs-napi-naming](docs/agents.md/fleet/binary-vs-napi-naming.md): Per-platform artifacts split into two naming domains **by design** (ratified
+- [bypass-phrases](docs/agents.md/fleet/bypass-phrases.md): Reverting tracked changes or bypassing the fleet's hook chain requires the user to type the canonical phrase verbatim in a recent user turn. Inferring intent from "go ahead", "skip the hook", "fix…
+- [c8-ignore-directives](docs/agents.md/fleet/c8-ignore-directives.md): `c8 ignore next N` does not work the way the name implies for multi-line code. Use `c8 ignore start` / `c8 ignore stop` brackets for any body that spans more than one line. Enforced at edit time by…
+- [cascade-file-classification](docs/agents.md/fleet/cascade-file-classification.md): Every fleet repo's files fall into exactly one of three cascade classes. Knowing
+- [cascade-is-a-unit](docs/agents.md/fleet/cascade-is-a-unit.md): A fleet cascade propagates ONE logical change across every member. The N
+- [cascaded-hook-catalog](docs/agents.md/fleet/cascaded-hook-catalog.md): Reference catalog for the fleet hooks, `_shared` helpers, oxlint rules, and
+- [CHANGELOG](CHANGELOG.md)
+- [code-is-law](docs/agents.md/fleet/code-is-law.md): The CLAUDE.md `### Code is law` section is the headline: docs alone don't enforce. A discipline the repo depends on holds only when an executable enforcer makes the wrong move fail (or at least nag)…
+- [code-style](docs/agents.md/fleet/code-style.md): The CLAUDE.md `### Code style` section is the short list of heaviest invariants. This file is the full set of subrules and their rationale. When a rule has a sister skill or hook, the SKILL.md / hook…
+- [commit-cadence-format](docs/agents.md/fleet/commit-cadence-format.md): Companion to the `### Commit cadence & message format` rule in `template/CLAUDE.md`. The inline section gives the headline. This file holds the spec, the cadence rationale, and the bypass surface.
+- [commit-signing](docs/agents.md/fleet/commit-signing.md): Every commit landing on a default branch (`main` / `master`) in the fleet must carry a verified signature. Three independent layers enforce this; bypassing any one of them is treated as exceptional…
+- [conformance-runners](docs/agents.md/fleet/conformance-runners.md): How to author, organize, and maintain runners that exercise a built
+- [cross-tool-agents](docs/agents.md/fleet/cross-tool-agents.md): The fleet's automation is authored for **Claude Code**, but Codex and OpenCode
+- [database](docs/agents.md/fleet/database.md): When a fleet repo needs a database, the stack is fixed: **PostgreSQL** as the engine, **Drizzle ORM** as the query/schema layer, and **`node:smol-sql`** as the driver on the node-smol runtime. This is…
+- [delegating-execution](docs/agents.md/fleet/delegating-execution.md): For non-trivial work, planning and review are big-brain jobs; execution and follow-up are floor jobs bounded by the written plan. The four-phase cycle:
+- [diagnosing-bugs](docs/agents.md/fleet/diagnosing-bugs.md): The discipline for hard bugs and performance regressions. The one rule that
+- [disabled-seam-pattern](docs/agents.md/fleet/disabled-seam-pattern.md): Keep the **wire-in point** (the seam where a future capability slots in) present in the code, but gate the **behavior** behind a flag defaulted off. Never delete the seam; never hard-wire the behavior…
+- [drift-watch](docs/agents.md/fleet/drift-watch.md): Companion to the `### Drift watch` rule in `template/CLAUDE.md`. The inline section gives the headline. This file enumerates where drift hides, how to check, and the cascade-PR convention.
+- [error-messages](docs/agents.md/fleet/error-messages.md): Companion to the `## Error Messages` section of `CLAUDE.md`. That section holds the rules. This file holds longer examples and anti-patterns that would bloat CLAUDE.md inlined.
+- [export-and-no-any](docs/agents.md/fleet/export-and-no-any.md): Two paired fleet rules captured under one doc because they're symbiotic — exporting types is what makes "no `any`" practical, and "no `any`" is what makes the export discipline pay back.
+- [fable-fallback](docs/agents.md/fleet/fable-fallback.md): `claude-fable-5` (and the `claude-mythos-5` alias) is an adaptive-only model
+- [file-size](docs/agents.md/fleet/file-size.md): The CLAUDE.md `### File size` section is the cap. This file is the splitting playbook and the explicit exception list.
+- [fleet-doctor](docs/agents.md/fleet/fleet-doctor.md): `scripts/fleet/doctor.mts` — a cascade-resident health check that diagnoses and
+- [gh-token-hygiene](docs/agents.md/fleet/gh-token-hygiene.md): GitHub CLI auth tokens are the highest-blast-radius credential most developers carry. The Nx Console supply-chain compromise (May 2026) exfiltrated `~/.config/gh/hosts.yml` and used the token against…
+- [git-config-write-guard](docs/agents.md/fleet/git-config-write-guard.md): A fleet repo's local `.git/config` carries **per-clone** state. Identity, signing keys, and core invariants like `core.bare` live in the **global** git config (and in `~/.gitconfig`); the local config…
+- [github-token-limitations](docs/agents.md/fleet/github-token-limitations.md): GitHub Actions suppresses every event created with the default `GITHUB_TOKEN` — pushes, `pull_request` open/close/reopen, issue events, tag creation. The only events that still fire are…
+
+## API
+
+- [integrity](src/integrity.ts)
+
+## Commands
+
+- [pnpm run build](package.json): node scripts/repo/bundle.mts
+- [pnpm run check](package.json): node scripts/fleet/check.mts
+- [pnpm run cover](package.json): node scripts/fleet/cover.mts
+- [pnpm run fix](package.json): node scripts/fleet/fix.mts
+- [pnpm run format](package.json): node scripts/fleet/format.mts
+- [pnpm run lint](package.json): node scripts/fleet/lint.mts
+- [pnpm run test](package.json): node scripts/fleet/test.mts
+- [pnpm run update](package.json): node scripts/fleet/update.mts
+
+## Conventions
+
+- [CLAUDE.md](CLAUDE.md): Engineering rules and fleet conventions for Claude Code.