@socketsecurity/lib 6.0.8 → 6.0.10

package/dist/env/runtimes.js

@@ -0,0 +1,53 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+let src_external_std_env = require("../external/std-env");
+
+Object.defineProperty(exports, 'isBun', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isBun;
+  }
+});
+Object.defineProperty(exports, 'isDeno', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isDeno;
+  }
+});
+Object.defineProperty(exports, 'isEdgeLight', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isEdgeLight;
+  }
+});
+Object.defineProperty(exports, 'isFastly', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isFastly;
+  }
+});
+Object.defineProperty(exports, 'isNetlify', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isNetlify;
+  }
+});
+Object.defineProperty(exports, 'isWorkerd', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.isWorkerd;
+  }
+});
+Object.defineProperty(exports, 'runtime', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.runtime;
+  }
+});
+Object.defineProperty(exports, 'runtimeInfo', {
+  enumerable: true,
+  get: function () {
+    return src_external_std_env.runtimeInfo;
+  }
+});

package/dist/env/socket-cli.d.ts

@@ -122,8 +122,11 @@ export declare function getSocketCliConfig(): string | undefined;
  */
 export declare function getSocketCliFix(): string | undefined;
 /**
- * Socket CLI GitHub authentication token. Checks SOCKET_CLI_GITHUB_TOKEN,
- * SOCKET_SECURITY_GITHUB_PAT, then falls back to GITHUB_TOKEN.
+ * Socket CLI GitHub authentication token. Checks SOCKET_CLI_GITHUB_TOKEN, then
+ * SOCKET_SECURITY_GITHUB_PAT. It does NOT fall back to the generic GITHUB_TOKEN
+ * — callers wanting the standard token compose `getGitHubToken()` on top (as
+ * the CLI's own token wrapper does), keeping the CLI-specific and generic token
+ * concerns separate.
  *
  * @example
  *   ;```typescript

package/dist/env/socket-cli.js

@@ -146,8 +146,11 @@ function getSocketCliFix() {
 	return require_env_rewire.getEnvValue("SOCKET_CLI_FIX");
 }
 /**
-* Socket CLI GitHub authentication token. Checks SOCKET_CLI_GITHUB_TOKEN,
-* SOCKET_SECURITY_GITHUB_PAT, then falls back to GITHUB_TOKEN.
+* Socket CLI GitHub authentication token. Checks SOCKET_CLI_GITHUB_TOKEN, then
+* SOCKET_SECURITY_GITHUB_PAT. It does NOT fall back to the generic GITHUB_TOKEN
+* — callers wanting the standard token compose `getGitHubToken()` on top (as
+* the CLI's own token wrapper does), keeping the CLI-specific and generic token
+* concerns separate.
 *
 * @example
 *   ;```typescript
@@ -160,7 +163,7 @@ function getSocketCliFix() {
 * @returns GitHub token or undefined
 */
 function getSocketCliGithubToken() {
-	return require_env_rewire.getEnvValue("SOCKET_CLI_GITHUB_TOKEN") || require_env_rewire.getEnvValue("SOCKET_SECURITY_GITHUB_PAT") || require_env_rewire.getEnvValue("GITHUB_TOKEN");
+	return require_env_rewire.getEnvValue("SOCKET_CLI_GITHUB_TOKEN") || require_env_rewire.getEnvValue("SOCKET_SECURITY_GITHUB_PAT") || void 0;
 }
 /**
 * Whether to skip Socket CLI API token requirement (alternative name).

package/dist/env/xdg.d.ts

@@ -47,3 +47,20 @@ export declare function getXdgConfigHome(): string | undefined;
  * @returns The XDG data directory path, or `undefined` if not set
  */
 export declare function getXdgDataHome(): string | undefined;
+/**
+ * XDG_RUNTIME_DIR environment variable. XDG Base Directory specification
+ * runtime directory — the home for ephemeral, owner-only runtime objects
+ * (daemon sockets, locks). Set by systemd to `/run/user/<uid>`; absent on
+ * macOS and many non-systemd setups, so callers must provide a fallback.
+ *
+ * @example
+ *   ;```typescript
+ *   import { getXdgRuntimeDir } from '@socketsecurity/lib/env/xdg'
+ *
+ *   const runtimeDir = getXdgRuntimeDir()
+ *   // e.g. '/run/user/1000' or undefined
+ *   ```
+ *
+ * @returns The XDG runtime directory path, or `undefined` if not set
+ */
+export declare function getXdgRuntimeDir(): string | undefined;

package/dist/env/xdg.js

@@ -59,8 +59,28 @@ function getXdgConfigHome() {
 function getXdgDataHome() {
 	return require_env_rewire.getEnvValue("XDG_DATA_HOME");
 }
+/**
+* XDG_RUNTIME_DIR environment variable. XDG Base Directory specification
+* runtime directory — the home for ephemeral, owner-only runtime objects
+* (daemon sockets, locks). Set by systemd to `/run/user/<uid>`; absent on
+* macOS and many non-systemd setups, so callers must provide a fallback.
+*
+* @example
+*   ;```typescript
+*   import { getXdgRuntimeDir } from '@socketsecurity/lib/env/xdg'
+*
+*   const runtimeDir = getXdgRuntimeDir()
+*   // e.g. '/run/user/1000' or undefined
+*   ```
+*
+* @returns The XDG runtime directory path, or `undefined` if not set
+*/
+function getXdgRuntimeDir() {
+	return require_env_rewire.getEnvValue("XDG_RUNTIME_DIR");
+}
 
 //#endregion
 exports.getXdgCacheHome = getXdgCacheHome;
 exports.getXdgConfigHome = getXdgConfigHome;
-exports.getXdgDataHome = getXdgDataHome;
+exports.getXdgDataHome = getXdgDataHome;
+exports.getXdgRuntimeDir = getXdgRuntimeDir;

package/dist/errors/predicates.d.ts

@@ -6,8 +6,9 @@
  */
 /**
  * Reference to the native ES2025 `Error.isError` when the running engine ships
- * it, otherwise `undefined`. Exposed separately so tests and callers can detect
- * the fast-path without re-probing.
+ * it, otherwise `undefined`. Consumes the single primordial snapshot
+ * ({@link ErrorIsError}) rather than re-probing the global — one capture point.
+ * Exposed separately so tests and callers can detect the fast-path.
  */
 export declare const isErrorBuiltin: ((value: unknown) => value is Error) | undefined;
 /**

package/dist/errors/predicates.js

@@ -1,6 +1,7 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_error = require('../primordials/error.js');
 const require_primordials_object = require('../primordials/object.js');
 const require_primordials_string = require('../primordials/string.js');
 
@@ -13,10 +14,11 @@ const require_primordials_string = require('../primordials/string.js');
 */
 /**
 * Reference to the native ES2025 `Error.isError` when the running engine ships
-* it, otherwise `undefined`. Exposed separately so tests and callers can detect
-* the fast-path without re-probing.
+* it, otherwise `undefined`. Consumes the single primordial snapshot
+* ({@link ErrorIsError}) rather than re-probing the global — one capture point.
+* Exposed separately so tests and callers can detect the fast-path.
 */
-const isErrorBuiltin = Error.isError;
+const isErrorBuiltin = require_primordials_error.ErrorIsError;
 /**
 * Narrow a caught value to a Node.js `ErrnoException` — an Error with a `.code`
 * string set by libuv/syscall failures (e.g. `'ENOENT'`, `'EACCES'`, `'EBUSY'`,

package/dist/events/exit/_internal.d.ts

@@ -15,29 +15,7 @@ export declare const globalProcess: (NodeJS.Process & {
     __signal_exit_emitter__?: EventEmitter | undefined;
     reallyExit?: ((code?: number | undefined) => never) | undefined;
 }) | undefined;
-export declare const originalProcessEmit: {
-    (event: "beforeExit", code: number): boolean;
-    (event: "disconnect"): boolean;
-    (event: "exit", code: number): boolean;
-    (event: "rejectionHandled", promise: Promise<unknown>): boolean;
-    (event: "uncaughtException", error: Error): boolean;
-    (event: "uncaughtExceptionMonitor", error: Error): boolean;
-    (event: "unhandledRejection", reason: unknown, promise: Promise<unknown>): boolean;
-    (event: "warning", warning: Error): boolean;
-    (event: "message", message: unknown, sendHandle: import("child_process").SendHandle): NodeJS.Process & {
-        __signal_exit_emitter__?: EventEmitter | undefined;
-        reallyExit?: ((code?: number | undefined) => never) | undefined;
-    };
-    (event: NodeJS.Signals, signal?: NodeJS.Signals): boolean;
-    (event: "multipleResolves", type: NodeJS.MultipleResolveType, promise: Promise<unknown>, value: unknown): NodeJS.Process & {
-        __signal_exit_emitter__?: EventEmitter | undefined;
-        reallyExit?: ((code?: number | undefined) => never) | undefined;
-    };
-    (event: "worker", listener: NodeJS.WorkerListener): NodeJS.Process & {
-        __signal_exit_emitter__?: EventEmitter | undefined;
-        reallyExit?: ((code?: number | undefined) => never) | undefined;
-    };
-} | undefined;
+export declare const originalProcessEmit: NodeJS.Process['emit'] | undefined;
 export declare const platform: string;
 export declare const originalProcessReallyExit: ((code?: number | undefined) => never) | undefined;
 export declare const WIN32: boolean;