@socketsecurity/lib 6.0.8 → 6.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/dist/ai/route.d.mts +21 -8
  3. package/dist/ai/route.js +21 -6
  4. package/dist/ai/spawn.d.mts +32 -0
  5. package/dist/ai/spawn.js +91 -2
  6. package/dist/ai/types.d.mts +10 -0
  7. package/dist/bin/prim.cjs +18797 -13627
  8. package/dist/bin/resolve.js +1 -1
  9. package/dist/cache/ttl/store.js +1 -1
  10. package/dist/compression/brotli.js +1 -1
  11. package/dist/compression/gzip.js +1 -1
  12. package/dist/config/layers.d.ts +53 -0
  13. package/dist/config/layers.js +83 -0
  14. package/dist/constants/socket.js +1 -1
  15. package/dist/debug/caller-info.js +1 -1
  16. package/dist/dlx/binary-cache.js +1 -1
  17. package/dist/dlx/binary-resolution.js +1 -1
  18. package/dist/dlx/firewall.js +1 -1
  19. package/dist/dlx/lockfile.js +1 -1
  20. package/dist/eco/npm/npm/parse-lockfile.js +1 -1
  21. package/dist/eco/npm/yarnpkg/yarn/parse-lockfile.js +1 -1
  22. package/dist/env/rewire.d.ts +5 -3
  23. package/dist/env/rewire.js +6 -7
  24. package/dist/env/xdg.d.ts +17 -0
  25. package/dist/env/xdg.js +21 -1
  26. package/dist/errors/stack.js +1 -2
  27. package/dist/external/@npmcli/package-json.js +3455 -4881
  28. package/dist/external/@yarnpkg/extensions.js +1 -1
  29. package/dist/external/external-pack.js +1 -1
  30. package/dist/external/npm-pack.js +29164 -31799
  31. package/dist/external/tar-fs.js +63 -16
  32. package/dist/external-tools/jre/detect-platform-arch.js +1 -1
  33. package/dist/external-tools/manifest.js +1 -1
  34. package/dist/external-tools/python/asset-names.js +1 -1
  35. package/dist/external-tools/python/uv-install.d.ts +89 -0
  36. package/dist/external-tools/python/uv-install.js +165 -0
  37. package/dist/external-tools/skillspector/from-uv.d.ts +30 -0
  38. package/dist/external-tools/skillspector/from-uv.js +56 -0
  39. package/dist/external-tools/skillspector/resolve.d.ts +18 -3
  40. package/dist/external-tools/skillspector/resolve.js +21 -8
  41. package/dist/external-tools/skillspector/types.d.ts +3 -1
  42. package/dist/external-tools/uv/asset-names.d.ts +36 -0
  43. package/dist/external-tools/uv/asset-names.js +73 -0
  44. package/dist/external-tools/uv/from-download.d.ts +17 -0
  45. package/dist/external-tools/uv/from-download.js +50 -0
  46. package/dist/external-tools/uv/from-path.d.ts +5 -0
  47. package/dist/external-tools/uv/from-path.js +22 -0
  48. package/dist/external-tools/uv/from-vfs.d.ts +7 -0
  49. package/dist/external-tools/uv/from-vfs.js +26 -0
  50. package/dist/external-tools/uv/resolve.d.ts +25 -0
  51. package/dist/external-tools/uv/resolve.js +61 -0
  52. package/dist/external-tools/uv/types.d.ts +24 -0
  53. package/dist/external-tools/uv/types.js +2 -0
  54. package/dist/fleet/repo-config.d.ts +53 -0
  55. package/dist/fleet/repo-config.js +79 -0
  56. package/dist/fs/allowed-dirs-cache.js +3 -5
  57. package/dist/fs/copy.d.ts +88 -0
  58. package/dist/fs/copy.js +89 -0
  59. package/dist/fs/safe.js +1 -1
  60. package/dist/git/_internal.js +2 -2
  61. package/dist/github/refs.js +10 -15
  62. package/dist/globs/_internal.js +1 -1
  63. package/dist/http-request/browser.js +1 -1
  64. package/dist/http-request/checksum-file.js +1 -1
  65. package/dist/http-request/headers.js +1 -1
  66. package/dist/integrity.d.ts +125 -78
  67. package/dist/integrity.js +168 -84
  68. package/dist/logger/colors.d.ts +1 -2
  69. package/dist/logger/colors.js +2 -2
  70. package/dist/logger/symbols-builder.js +7 -8
  71. package/dist/logger/symbols.js +8 -8
  72. package/dist/node/module.d.ts +73 -2
  73. package/dist/node/module.js +97 -12
  74. package/dist/objects/predicates.js +1 -1
  75. package/dist/packages/exports.js +2 -2
  76. package/dist/packages/isolation.js +1 -1
  77. package/dist/packages/manifest.d.ts +29 -0
  78. package/dist/packages/manifest.js +38 -2
  79. package/dist/packages/normalize.js +1 -1
  80. package/dist/packages/provenance.js +2 -2
  81. package/dist/packages/specs.js +1 -1
  82. package/dist/paths/_internal.d.ts +1 -7
  83. package/dist/paths/_internal.js +9 -15
  84. package/dist/paths/conversion.js +1 -1
  85. package/dist/paths/normalize.js +1 -1
  86. package/dist/paths/predicates.js +2 -1
  87. package/dist/paths/socket.d.ts +74 -23
  88. package/dist/paths/socket.js +97 -23
  89. package/dist/perf/metrics.js +1 -1
  90. package/dist/perf/report.js +1 -1
  91. package/dist/regexps/spec.js +1 -1
  92. package/dist/schema/validate.js +1 -1
  93. package/dist/secrets/broker.d.ts +35 -0
  94. package/dist/secrets/broker.js +72 -0
  95. package/dist/secrets/find.d.ts +6 -4
  96. package/dist/secrets/find.js +15 -1
  97. package/dist/secrets/rc.js +1 -1
  98. package/dist/smol/detect.js +1 -1
  99. package/dist/smol/http.js +1 -1
  100. package/dist/smol/https.js +1 -1
  101. package/dist/smol/manifest.js +1 -1
  102. package/dist/smol/path.js +1 -1
  103. package/dist/smol/primordial.js +1 -1
  104. package/dist/smol/purl.js +1 -1
  105. package/dist/smol/versions.js +1 -1
  106. package/dist/smol/vfs.js +1 -1
  107. package/dist/sorts/_internal.d.ts +1 -2
  108. package/dist/sorts/_internal.js +2 -6
  109. package/dist/sorts/semver.js +2 -2
  110. package/dist/spinner/create-spinner-class.js +1 -1
  111. package/dist/stdio/progress.js +1 -1
  112. package/dist/stdio/prompts.d.ts +0 -8
  113. package/dist/stdio/prompts.js +10 -23
  114. package/dist/strings/format.js +1 -1
  115. package/dist/strings/search.js +1 -1
  116. package/dist/themes/context.d.ts +5 -3
  117. package/dist/themes/context.js +5 -6
  118. package/llms.txt +750 -0
  119. package/package.json +79 -13
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@socketsecurity/lib",
3
- "version": "6.0.8",
3
+ "version": "6.0.9",
4
4
  "description": "Core utilities and infrastructure for Socket.dev security tools",
5
5
  "keywords": [
6
6
  "Socket.dev",
@@ -26,7 +26,8 @@
26
26
  "files": [
27
27
  "dist",
28
28
  "data/extensions.json",
29
- "CHANGELOG.md"
29
+ "CHANGELOG.md",
30
+ "llms.txt"
30
31
  ],
31
32
  "sideEffects": false,
32
33
  "browser": {
@@ -454,6 +455,11 @@
454
455
  "types": "./dist/compression/types.d.ts",
455
456
  "default": "./dist/compression/types.js"
456
457
  },
458
+ "./config/layers": {
459
+ "source": "./src/config/layers.ts",
460
+ "types": "./dist/config/layers.d.ts",
461
+ "default": "./dist/config/layers.js"
462
+ },
457
463
  "./constants/agents": {
458
464
  "source": "./src/constants/agents.ts",
459
465
  "types": "./dist/constants/agents.d.ts",
@@ -1315,6 +1321,11 @@
1315
1321
  "types": "./dist/external-tools/python/types.d.ts",
1316
1322
  "default": "./dist/external-tools/python/types.js"
1317
1323
  },
1324
+ "./external-tools/python/uv-install": {
1325
+ "source": "./src/external-tools/python/uv-install.ts",
1326
+ "types": "./dist/external-tools/python/uv-install.d.ts",
1327
+ "default": "./dist/external-tools/python/uv-install.js"
1328
+ },
1318
1329
  "./external-tools/sbt/asset-names": {
1319
1330
  "source": "./src/external-tools/sbt/asset-names.ts",
1320
1331
  "types": "./dist/external-tools/sbt/asset-names.d.ts",
@@ -1355,6 +1366,11 @@
1355
1366
  "types": "./dist/external-tools/skillspector/from-path.d.ts",
1356
1367
  "default": "./dist/external-tools/skillspector/from-path.js"
1357
1368
  },
1369
+ "./external-tools/skillspector/from-uv": {
1370
+ "source": "./src/external-tools/skillspector/from-uv.ts",
1371
+ "types": "./dist/external-tools/skillspector/from-uv.d.ts",
1372
+ "default": "./dist/external-tools/skillspector/from-uv.js"
1373
+ },
1358
1374
  "./external-tools/skillspector/from-vfs": {
1359
1375
  "source": "./src/external-tools/skillspector/from-vfs.ts",
1360
1376
  "types": "./dist/external-tools/skillspector/from-vfs.d.ts",
@@ -1460,6 +1476,41 @@
1460
1476
  "types": "./dist/external-tools/trufflehog/types.d.ts",
1461
1477
  "default": "./dist/external-tools/trufflehog/types.js"
1462
1478
  },
1479
+ "./external-tools/uv/asset-names": {
1480
+ "source": "./src/external-tools/uv/asset-names.ts",
1481
+ "types": "./dist/external-tools/uv/asset-names.d.ts",
1482
+ "default": "./dist/external-tools/uv/asset-names.js"
1483
+ },
1484
+ "./external-tools/uv/from-download": {
1485
+ "source": "./src/external-tools/uv/from-download.ts",
1486
+ "types": "./dist/external-tools/uv/from-download.d.ts",
1487
+ "default": "./dist/external-tools/uv/from-download.js"
1488
+ },
1489
+ "./external-tools/uv/from-path": {
1490
+ "source": "./src/external-tools/uv/from-path.ts",
1491
+ "types": "./dist/external-tools/uv/from-path.d.ts",
1492
+ "default": "./dist/external-tools/uv/from-path.js"
1493
+ },
1494
+ "./external-tools/uv/from-vfs": {
1495
+ "source": "./src/external-tools/uv/from-vfs.ts",
1496
+ "types": "./dist/external-tools/uv/from-vfs.d.ts",
1497
+ "default": "./dist/external-tools/uv/from-vfs.js"
1498
+ },
1499
+ "./external-tools/uv/resolve": {
1500
+ "source": "./src/external-tools/uv/resolve.ts",
1501
+ "types": "./dist/external-tools/uv/resolve.d.ts",
1502
+ "default": "./dist/external-tools/uv/resolve.js"
1503
+ },
1504
+ "./external-tools/uv/types": {
1505
+ "source": "./src/external-tools/uv/types.ts",
1506
+ "types": "./dist/external-tools/uv/types.d.ts",
1507
+ "default": "./dist/external-tools/uv/types.js"
1508
+ },
1509
+ "./fleet/repo-config": {
1510
+ "source": "./src/fleet/repo-config.ts",
1511
+ "types": "./dist/fleet/repo-config.d.ts",
1512
+ "default": "./dist/fleet/repo-config.js"
1513
+ },
1463
1514
  "./fs/access": {
1464
1515
  "source": "./src/fs/access.ts",
1465
1516
  "types": "./dist/fs/access.d.ts",
@@ -1470,6 +1521,11 @@
1470
1521
  "types": "./dist/fs/allowed-dirs-cache.d.ts",
1471
1522
  "default": "./dist/fs/allowed-dirs-cache.js"
1472
1523
  },
1524
+ "./fs/copy": {
1525
+ "source": "./src/fs/copy.ts",
1526
+ "types": "./dist/fs/copy.d.ts",
1527
+ "default": "./dist/fs/copy.js"
1528
+ },
1473
1529
  "./fs/encoding": {
1474
1530
  "source": "./src/fs/encoding.ts",
1475
1531
  "types": "./dist/fs/encoding.d.ts",
@@ -2539,6 +2595,11 @@
2539
2595
  "types": "./dist/sea/detect.d.ts",
2540
2596
  "default": "./dist/sea/detect.js"
2541
2597
  },
2598
+ "./secrets/broker": {
2599
+ "source": "./src/secrets/broker.ts",
2600
+ "types": "./dist/secrets/broker.d.ts",
2601
+ "default": "./dist/secrets/broker.js"
2602
+ },
2542
2603
  "./secrets/compare": {
2543
2604
  "source": "./src/secrets/compare.ts",
2544
2605
  "types": "./dist/secrets/compare.d.ts",
@@ -3017,11 +3078,11 @@
3017
3078
  "provenance": true
3018
3079
  },
3019
3080
  "devDependencies": {
3020
- "@anthropic-ai/claude-code": "2.1.92",
3021
- "@babel/core": "7.28.4",
3022
- "@babel/parser": "7.28.4",
3023
- "@babel/traverse": "7.28.4",
3024
- "@babel/types": "7.28.4",
3081
+ "@anthropic-ai/claude-code": "2.1.163",
3082
+ "@babel/core": "7.29.7",
3083
+ "@babel/parser": "7.29.7",
3084
+ "@babel/traverse": "7.29.7",
3085
+ "@babel/types": "7.29.7",
3025
3086
  "@inquirer/checkbox": "5.1.3",
3026
3087
  "@inquirer/confirm": "6.0.11",
3027
3088
  "@inquirer/input": "5.0.11",
@@ -3031,6 +3092,7 @@
3031
3092
  "@npmcli/arborist": "9.1.4",
3032
3093
  "@npmcli/package-json": "7.0.0",
3033
3094
  "@npmcli/promise-spawn": "8.0.3",
3095
+ "@perryts/perry": "0.5.1129",
3034
3096
  "@redwoodjs/agent-ci": "0.16.2",
3035
3097
  "@sinclair/typebox": "0.34.49",
3036
3098
  "@socketregistry/is-unicode-supported": "1.0.5",
@@ -3038,19 +3100,20 @@
3038
3100
  "@socketregistry/packageurl-js-stable": "npm:@socketregistry/packageurl-js@1.4.2",
3039
3101
  "@socketregistry/yocto-spinner": "1.0.25",
3040
3102
  "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.7",
3041
- "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.7",
3103
+ "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.8",
3042
3104
  "@socketsecurity/sdk": "npm:@socketsecurity/sdk@4.0.1",
3043
3105
  "@socketsecurity/sdk-stable": "npm:@socketsecurity/sdk@4.0.1",
3044
3106
  "@types/node": "24.9.2",
3045
3107
  "@typescript/native-preview": "7.0.0-dev.20260511.1",
3046
- "@vitest/coverage-v8": "4.1.6",
3047
- "@vitest/ui": "4.1.6",
3108
+ "@vitest/coverage-v8": "4.1.8",
3109
+ "@vitest/ui": "4.1.8",
3048
3110
  "@yarnpkg/extensions": "2.0.6",
3049
3111
  "adm-zip": "0.5.16",
3050
3112
  "cacache": "20.0.1",
3051
3113
  "debug": "4.4.3",
3052
3114
  "del": "8.0.1",
3053
3115
  "ecc-agentshield": "1.4.0",
3116
+ "esbuild": "0.28.1",
3054
3117
  "fast-glob": "3.3.3",
3055
3118
  "fast-sort": "3.4.1",
3056
3119
  "get-east-asian-width": "1.3.0",
@@ -3085,7 +3148,8 @@
3085
3148
  "type-coverage": "2.29.7",
3086
3149
  "typescript": "5.9.2",
3087
3150
  "validate-npm-package-name": "6.0.2",
3088
- "vitest": "4.1.6",
3151
+ "vitest": "4.1.8",
3152
+ "webpack": "5.107.2",
3089
3153
  "which": "5.0.0",
3090
3154
  "yargs-parser": "22.0.0",
3091
3155
  "yoctocolors-cjs": "2.1.3",
@@ -3103,7 +3167,7 @@
3103
3167
  "engines": {
3104
3168
  "node": ">=22",
3105
3169
  "npm": ">=11.16.0",
3106
- "pnpm": ">=11.5.1"
3170
+ "pnpm": ">=11.8.0"
3107
3171
  },
3108
3172
  "allowScripts": {
3109
3173
  "cpu-features": false,
@@ -3131,6 +3195,8 @@
3131
3195
  "lockstep": "node scripts/fleet/lockstep.mts",
3132
3196
  "lockstep:emit-schema": "node scripts/fleet/lockstep-emit-schema.mts",
3133
3197
  "setup-security-tools": "node .claude/hooks/fleet/setup-security-tools/install.mts",
3134
- "ci:local": "node scripts/fleet/agent-ci-skip-locks.mts run --all --quiet --pause-on-failure --github-token"
3198
+ "ci:local": "node scripts/fleet/agent-ci-skip-locks.mts run --all --quiet --pause-on-failure --github-token",
3199
+ "weekly-update": "node scripts/fleet/weekly-update.mts",
3200
+ "weekly-update:ci": "node scripts/fleet/weekly-update-workflow.mts run"
3135
3201
  }
3136
3202
  }