@socketsecurity/lib 6.0.9 → 6.0.10

package/dist/bin/prim.cjs

@@ -8,7 +8,14 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -104,13 +111,13 @@ const walk = wasm.walk;
 *   dependency on the per-file walk state, so they live apart from the
 *   `auditDirectory` orchestrator in `audit.mts`.
 */
-const TS_EXTENSIONS$2 = new Set([
+const TS_EXTENSIONS$2 = /* @__PURE__ */ new Set([
 	".cts",
 	".mts",
 	".ts",
 	".tsx"
 ]);
-const JS_EXTENSIONS$1 = new Set([
+const JS_EXTENSIONS$1 = /* @__PURE__ */ new Set([
 	".cjs",
 	".js",
 	".jsx",
@@ -254,7 +261,7 @@ function lineColumnAt$1(lineStarts, offset) {
 *   analyzer encounters in the wild. Surfaced into the AI prompt so Claude
 *   knows what false-positives to guard against.
 */
-const AMBIGUOUS_PROTOTYPE_METHODS = new Map([
+const AMBIGUOUS_PROTOTYPE_METHODS = /* @__PURE__ */ new Map([
 	["exec", {
 		candidates: ["RegExp"],
 		hint: "Also: ChildProcess.prototype is `kill`/`disconnect`/etc., not `exec` — but custom CLI/test libraries occasionally name a method `.exec(...)`."
@@ -1232,7 +1239,7 @@ async function* ck($, Q) {
 	}
 }
 async function* pk($) {
-	let Q = new Uint8Array();
+	let Q = /* @__PURE__ */ new Uint8Array();
 	for await (let J of $) {
 		if (J == null) continue;
 		let Y = J instanceof ArrayBuffer ? new Uint8Array(J) : typeof J === "string" ? G8(J) : J, X = new Uint8Array(Q.length + Y.length);
@@ -8678,7 +8685,7 @@ function iz($, Q, J, Y) {
 		sandbox: H,
 		spawnClaudeCodeProcess: q.spawnClaudeCodeProcess,
 		deferSpawn: Y
-	}), AG = new c7(WN, Q, k, o0, w, YN, JN, {
+	}), p_ = {
 		systemPrompt: V,
 		appendSystemPrompt: B,
 		planModeInstructions: q.planModeInstructions,
@@ -8691,7 +8698,7 @@ function iz($, Q, J, Y) {
 		promptSuggestions: q.promptSuggestions,
 		agentProgressSummaries: q.agentProgressSummaries,
 		forwardSubagentText: VX
-	}, d$, sz);
+	}, AG = new c7(WN, Q, k, o0, w, YN, JN, p_, d$, sz);
 	if (e$) {
 		let _6 = () => (0, path.join)(Y4.CLAUDE_CONFIG_DIR ?? (0, path.join)((0, os.homedir)(), ".claude"), "projects"), m6 = S_ === "eager", s1 = new CU(async (t0, IG) => {
 			let f9 = Z_(t0, _6());
@@ -9281,7 +9288,7 @@ var init_sdk = __esmMin((() => {
 		I2.isCompatible = I2._makeCompatibilityCheck = void 0;
 		var _x = TU(), j2 = /^(\d+)\.(\d+)\.(\d+)(-(.+))?$/;
 		function A2($) {
-			let Q = new Set([$]), J = /* @__PURE__ */ new Set(), Y = $.match(j2);
+			let Q = /* @__PURE__ */ new Set([$]), J = /* @__PURE__ */ new Set(), Y = $.match(j2);
 			if (!Y) return () => !1;
 			let X = {
 				major: +Y[1],
@@ -11465,7 +11472,7 @@ var init_sdk = __esmMin((() => {
 	_B = I((tj) => {
 		Object.defineProperty(tj, "__esModule", { value: !0 });
 		tj.getRules = tj.isJSONType = void 0;
-		var hd = new Set([
+		var hd = /* @__PURE__ */ new Set([
 			"string",
 			"number",
 			"integer",
@@ -11572,7 +11579,7 @@ var init_sdk = __esmMin((() => {
 			return G;
 		}
 		WA.coerceAndCheckDataType = td;
-		var YA = new Set([
+		var YA = /* @__PURE__ */ new Set([
 			"string",
 			"number",
 			"integer",
@@ -12045,7 +12052,7 @@ var init_sdk = __esmMin((() => {
 	vJ = I((SA) => {
 		Object.defineProperty(SA, "__esModule", { value: !0 });
 		SA.getSchemaRefs = SA.resolveUrl = SA.normalizeId = SA._getFullPath = SA.getFullPath = SA.inlineRef = void 0;
-		var ti = q$(), ai = yB(), si = PA(), ei = new Set([
+		var ti = q$(), ai = yB(), si = PA(), ei = /* @__PURE__ */ new Set([
 			"type",
 			"format",
 			"pattern",
@@ -12070,7 +12077,7 @@ var init_sdk = __esmMin((() => {
 			return EA($) <= Q;
 		}
 		SA.inlineRef = $n;
-		var Qn = new Set([
+		var Qn = /* @__PURE__ */ new Set([
 			"$ref",
 			"$recursiveRef",
 			"$recursiveAnchor",
@@ -12645,7 +12652,7 @@ var init_sdk = __esmMin((() => {
 			return pB.call(this, J, G);
 		}
 		$I.resolveSchema = xW;
-		var pn = new Set([
+		var pn = /* @__PURE__ */ new Set([
 			"properties",
 			"patternProperties",
 			"enum",
@@ -13185,7 +13192,7 @@ var init_sdk = __esmMin((() => {
 			"removeAdditional",
 			"useDefaults",
 			"coerceTypes"
-		], Tr = new Set([
+		], Tr = /* @__PURE__ */ new Set([
 			"validate",
 			"serialize",
 			"parse",
@@ -15491,7 +15498,7 @@ var init_sdk = __esmMin((() => {
 	_G = function() {
 		let { crypto: $ } = globalThis;
 		if ($?.randomUUID) return _G = $.randomUUID.bind($), $.randomUUID();
-		let Q = new Uint8Array(1), J = $ ? () => $.getRandomValues(Q)[0] : () => Math.random() * 255 & 255;
+		let Q = /* @__PURE__ */ new Uint8Array(1), J = $ ? () => $.getRandomValues(Q)[0] : () => Math.random() * 255 & 255;
 		return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (Y) => (+Y ^ J() & 15 >> +Y / 4).toString(16));
 	};
 	u9 = ($) => {
@@ -15657,7 +15664,7 @@ var init_sdk = __esmMin((() => {
 		};
 	};
 	dN = "urn:ietf:params:oauth:grant-type:jwt-bearer", iN = "refresh_token", LX = "/v1/oauth/token", Q0 = "oauth-2025-04-20", nN = "oidc-federation-2026-04-01", rN = 120, W8 = 30, oN = 5, pN = 1048576;
-	TG = 2e3, Tk = new Set([
+	TG = 2e3, Tk = /* @__PURE__ */ new Set([
 		"error",
 		"error_description",
 		"error_uri"
@@ -15841,7 +15848,7 @@ var init_sdk = __esmMin((() => {
 	;
 	z1 = class {
 		constructor() {
-			k6.set(this, void 0), v6.set(this, void 0), f(this, k6, new Uint8Array(), "f"), f(this, v6, null, "f");
+			k6.set(this, void 0), v6.set(this, void 0), f(this, k6, /* @__PURE__ */ new Uint8Array(), "f"), f(this, v6, null, "f");
 		}
 		decode($) {
 			if ($ == null) return [];
@@ -15869,7 +15876,7 @@ var init_sdk = __esmMin((() => {
 		}
 	};
 	k6 = /* @__PURE__ */ new WeakMap(), v6 = /* @__PURE__ */ new WeakMap();
-	z1.NEWLINE_CHARS = new Set([`
+	z1.NEWLINE_CHARS = /* @__PURE__ */ new Set([`
 `, "\r"]);
 	z1.NEWLINE_REGEXP = /\r\n|[\n\r]/g;
 	;
@@ -20552,12 +20559,12 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 	Qg = 1048576, wZ = 5242880;
 	k5 = Buffer.from("{\"type\":\"attribution-snapshot\""), Yg = Buffer.from("{\"type\":\"system\""), a7 = 10, Wg = Buffer.from([a7]), Gg = 256;
 	Lg = 32;
-	Tg = new Set([
+	Tg = /* @__PURE__ */ new Set([
 		"EXDEV",
 		"EPERM",
 		"EEXIST",
 		"EBUSY"
-	]), xg = new Set([
+	]), xg = /* @__PURE__ */ new Set([
 		"ENOSPC",
 		"EIO",
 		"EDQUOT",
@@ -20591,7 +20598,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 		}
 	};
 	mg = new async_hooks.AsyncLocalStorage();
-	cg = new Set([
+	cg = /* @__PURE__ */ new Set([
 		"user",
 		"assistant",
 		"attachment",
@@ -23907,11 +23914,11 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 				return "object";
 			default: throw Error(`Unknown data type: ${Q}`);
 		}
-	}, ZQ = new Set([
+	}, ZQ = /* @__PURE__ */ new Set([
 		"string",
 		"number",
 		"symbol"
-	]), QK = new Set([
+	]), QK = /* @__PURE__ */ new Set([
 		"string",
 		"number",
 		"bigint",
@@ -23953,7 +23960,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 		}, W);
 		if (G instanceof Promise) throw new o4();
 		if (G.issues.length) {
-			let U = new (X?.Err ?? $)(G.issues.map((H) => y6(H, W, c$())));
+			let U = new ((X?.Err) ?? $)(G.issues.map((H) => y6(H, W, c$())));
 			throw r5(U, X?.callee), U;
 		}
 		return G.value;
@@ -23964,7 +23971,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 		}, W);
 		if (G instanceof Promise) G = await G;
 		if (G.issues.length) {
-			let U = new (X?.Err ?? $)(G.issues.map((H) => y6(H, W, c$())));
+			let U = new ((X?.Err) ?? $)(G.issues.map((H) => y6(H, W, c$())));
 			throw r5(U, X?.callee), U;
 		}
 		return G.value;
@@ -24780,7 +24787,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 			}), J;
 		};
 	}), SY = F("$ZodUndefined", ($, Q) => {
-		o.init($, Q), $._zod.pattern = vK, $._zod.values = new Set([void 0]), $._zod.optin = "optional", $._zod.optout = "optional", $._zod.parse = (J, Y) => {
+		o.init($, Q), $._zod.pattern = vK, $._zod.values = /* @__PURE__ */ new Set([void 0]), $._zod.optin = "optional", $._zod.optout = "optional", $._zod.parse = (J, Y) => {
 			let X = J.value;
 			if (typeof X > "u") return J;
 			return J.issues.push({
@@ -24791,7 +24798,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 			}), J;
 		};
 	}), kY = F("$ZodNull", ($, Q) => {
-		o.init($, Q), $._zod.pattern = kK, $._zod.values = new Set([null]), $._zod.parse = (J, Y) => {
+		o.init($, Q), $._zod.pattern = kK, $._zod.values = /* @__PURE__ */ new Set([null]), $._zod.parse = (J, Y) => {
 			let X = J.value;
 			if (X === null) return J;
 			return J.issues.push({
@@ -25304,7 +25311,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 		};
 	}), pY = F("$ZodOptional", ($, Q) => {
 		o.init($, Q), $._zod.optin = "optional", $._zod.optout = "optional", N$($._zod, "values", () => {
-			return Q.innerType._zod.values ? new Set([...Q.innerType._zod.values, void 0]) : void 0;
+			return Q.innerType._zod.values ? /* @__PURE__ */ new Set([...Q.innerType._zod.values, void 0]) : void 0;
 		}), N$($._zod, "pattern", () => {
 			let J = Q.innerType._zod.pattern;
 			return J ? new RegExp(`^(${FQ(J.source)})?$`) : void 0;
@@ -25318,7 +25325,7 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 			let J = Q.innerType._zod.pattern;
 			return J ? new RegExp(`^(${FQ(J.source)}|null)$`) : void 0;
 		}), N$($._zod, "values", () => {
-			return Q.innerType._zod.values ? new Set([...Q.innerType._zod.values, null]) : void 0;
+			return Q.innerType._zod.values ? /* @__PURE__ */ new Set([...Q.innerType._zod.values, null]) : void 0;
 		}), $._zod.parse = (J, Y) => {
 			if (J.value === null) return J;
 			return Q.innerType._zod.run(J, Y);
@@ -33692,7 +33699,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		matcher: K.string().optional().describe("String pattern to match (e.g. tool names like \"Write\")"),
 		hooks: K.array(SE()).describe("List of hooks to execute when the matcher matches")
 	})), c0 = _(() => K.partialRecord(K.enum(s0), K.array(kE())));
-	fE = new Set([
+	fE = /* @__PURE__ */ new Set([
 		"claude-code-marketplace",
 		"claude-code-plugins",
 		"claude-plugins-official",
@@ -34064,12 +34071,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		"user",
 		"project",
 		"local"
-	], I6$ = new Set([
+	], I6$ = /* @__PURE__ */ new Set([
 		"bypassPermissions",
 		"auto",
 		"acceptEdits"
-	]), R6$ = new Set(["project"]);
-	u6$ = new Set([
+	]), R6$ = /* @__PURE__ */ new Set(["project"]);
+	u6$ = /* @__PURE__ */ new Set([
 		"EBUSY",
 		"EMFILE",
 		"ENFILE",
@@ -34429,7 +34436,7 @@ function saveCache(targetRoot, cache) {
 *   and stay as-is; use the `processEnv()` / `processArgv()` helpers by hand
 *   where tamper-safety on those is wanted.
 */
-const TRACKED_GLOBALS = new Set([
+const TRACKED_GLOBALS = /* @__PURE__ */ new Set([
 	"AggregateError",
 	"Array",
 	"ArrayBuffer",
@@ -34491,7 +34498,7 @@ const TRACKED_GLOBALS = new Set([
 * Array, Map, Set, NodeList, …) are intentionally excluded — they require type
 * info we don't have.
 */
-const UNAMBIGUOUS_PROTOTYPE_METHODS = new Map([
+const UNAMBIGUOUS_PROTOTYPE_METHODS = /* @__PURE__ */ new Map([
 	["charAt", "String"],
 	["charCodeAt", "String"],
 	["codePointAt", "String"],
@@ -34571,7 +34578,7 @@ const UNAMBIGUOUS_PROTOTYPE_METHODS = new Map([
 * "String.prototype.isAbsolute" because `path` matches the String hint regex.
 * Same for `path.join`, `path.dirname`, etc.
 */
-const NODE_MODULE_STATIC_METHODS = new Set([
+const NODE_MODULE_STATIC_METHODS = /* @__PURE__ */ new Set([
 	"access",
 	"appendFile",
 	"arch",
@@ -34642,7 +34649,7 @@ const NODE_MODULE_STATIC_METHODS = new Set([
 * returns the live value.
 * https://v8.dev/docs/stack-trace-api#stack-trace-collection-for-custom-exceptions.
 */
-const INTENTIONAL_NON_PRIMORDIAL_STATICS = new Set([
+const INTENTIONAL_NON_PRIMORDIAL_STATICS = /* @__PURE__ */ new Set([
 	"Error.captureStackTrace",
 	"Error.prepareStackTrace",
 	"Error.stackTraceLimit"
@@ -34658,7 +34665,7 @@ const INTENTIONAL_NON_PRIMORDIAL_STATICS = new Set([
 * sites entirely — both reading and writing them through a primordial would
 * change the static type.
 */
-const TYPE_NARROWING_STATIC_CALLS = new Set(["Symbol.for"]);
+const TYPE_NARROWING_STATIC_CALLS = /* @__PURE__ */ new Set(["Symbol.for"]);
 function ctorPrimordialName(global) {
 	return global + "Ctor";
 }
@@ -34689,13 +34696,13 @@ function getPrototypeMethods(globalName) {
 * dismiss them.
 */
 function guessReceiverType(name) {
-	if (/^(ancestors|args|argv|arr|array|children|chunks|cols|deps|elements|entries|errors|events|files|items|jobs|keys|lines|list|matches|messages|nodes|parts|paths|records|requests|responses|results|rows|rows|siblings|specs|tags|tasks|tokens|values|warnings)$/.test(name) || /(Array|List|Tuple|Vec)$/.test(name)) return "Array";
-	if (/^(cmd|code|command|description|ext|filename|hash|header|input|key|label|line|message|msg|name|output|path|prefix|raw|s|sha|slug|source|sourceCode|spec|str|substring|suffix|tag|text|title|url|val|value|version|word)$/.test(name)) return "String";
-	if (/^(count|day|depth|height|hours|i|idx|index|j|k|len|length|millis|minutes|month|n|num|number|offset|percent|ratio|score|seconds|size|width|year)$/.test(name)) return "Number";
-	if (/^(created|d|date|deadline|end|expires|modified|now|start|timestamp|updated|when)$/.test(name) || /(At|Date|Time)$/.test(name)) return "Date";
-	if (/^(re|regex|regexp)$/.test(name) || /Re(gExp|gex)$/.test(name)) return "RegExp";
-	if (/^(p|pending|promise)$/.test(name) || name.endsWith("Promise")) return "Promise";
-	if (/^(buf|buffer|bytes)$/.test(name) || name.endsWith("Buffer")) return "Buffer";
+	if (/^(?:ancestors|args|argv|arr|array|children|chunks|cols|deps|elements|entries|errors|events|files|items|jobs|keys|lines|list|matches|messages|nodes|parts|paths|records|requests|responses|results|rows|rows|siblings|specs|tags|tasks|tokens|values|warnings)$/.test(name) || /(?:Array|List|Tuple|Vec)$/.test(name)) return "Array";
+	if (/^(?:cmd|code|command|description|ext|filename|hash|header|input|key|label|line|message|msg|name|output|path|prefix|raw|s|sha|slug|source|sourceCode|spec|str|substring|suffix|tag|text|title|url|val|value|version|word)$/.test(name)) return "String";
+	if (/^(?:count|day|depth|height|hours|i|idx|index|j|k|len|length|millis|minutes|month|n|num|number|offset|percent|ratio|score|seconds|size|width|year)$/.test(name)) return "Number";
+	if (/^(?:created|d|date|deadline|end|expires|modified|now|start|timestamp|updated|when)$/.test(name) || /(?:At|Date|Time)$/.test(name)) return "Date";
+	if (/^(?:re|regex|regexp)$/.test(name) || /Re(?:gExp|gex)$/.test(name)) return "RegExp";
+	if (/^(?:p|pending|promise)$/.test(name) || name.endsWith("Promise")) return "Promise";
+	if (/^(?:buf|buffer|bytes)$/.test(name) || name.endsWith("Buffer")) return "Buffer";
 }
 /**
 * Returns the primordial name for `<global>.prototype.<method>` if the method
@@ -35028,7 +35035,7 @@ async function auditDirectory({ aiDisambiguate = false, exported, scanDir, skipD
 }
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/constants/runtime.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/constants/runtime.js
 var require_runtime$5 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -35059,154 +35066,122 @@ var require_runtime$5 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/node/os.js
-var require_os = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const nodeOs = require_runtime$5().IS_NODE ? /*@__PURE__*/ require("os") : void 0;
-	function getNodeOs() {
-		return nodeOs;
-	}
-	const osArch = nodeOs?.arch;
-	const osHomedir = nodeOs?.homedir;
-	const osPlatform = nodeOs?.platform;
-	const osTmpdir = nodeOs?.tmpdir;
-	exports.getNodeOs = getNodeOs;
-	exports.osArch = osArch;
-	exports.osHomedir = osHomedir;
-	exports.osPlatform = osPlatform;
-	exports.osTmpdir = osTmpdir;
-}));
-
-//#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/constants/platform.js
-var require_platform = /* @__PURE__ */ __commonJSMin(((exports) => {
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/node/module.js
+var require_module = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_node_os = require_os();
-	let node_fs$1 = require("node:fs");
+	const require_constants_runtime = require_runtime$5();
+	let module$1$1 = require("module");
 	/**
-	* @file Platform detection and OS-specific constants.
+	* @file Accessors for `node:module` that work across runtimes. Ambient
+	*   `require` is bound in CommonJS but unbound in ESM and inside
+	*   ahead-of-time-compiled package modules (e.g. Perry), where reading it
+	*   throws. And Perry's `require('module')` value omits `isBuiltin`. So instead
+	*   of the ambient `require('module')` lazy-loader, `isBuiltin`/`createRequire`
+	*   are imported as named values from the bare `module` specifier — which
+	*   resolves on Node and Perry, and which browser bundlers can stub via
+	*   resolve.fallback (a `node:` prefix would throw UnhandledSchemeError
+	*   there).
+	*   `require` is DIRECTORY-SPECIFIC: `createRequire(base)` resolves relative
+	*   specifiers (`./x`, `../y`) from `base`'s directory. For builtins and bare
+	*   packages that's irrelevant (they resolve the same anywhere), so the cached
+	*   `getRequire` / `requireBuiltin` bind to THIS file. A RELATIVE specifier
+	*   must resolve from the CALLER's directory, so use `requireFrom` with the
+	*   caller's `import.meta.url` — binding such a load to this file would resolve
+	*   it against `src/node/` instead. Bundled, every module collapses to one base
+	*   and either works; unbundled (e.g. AOT-compiled from source), each module
+	*   sits at its own nested path and the base matters.
 	*/
-	let memoizedArch;
+	let cachedModule;
+	let cachedRequire;
 	/**
-	* Get the current CPU architecture (memoized), e.g. `x64`, `arm64`.
+	* Bind a working `require`. Ambient `require` exists in CommonJS; in ESM and
+	* ahead-of-time-compiled package modules it is unbound (reading it throws or
+	* yields undefined), so fall back to `createRequire`. Returns undefined off
+	* Node and in browsers, where neither is available.
+	*
+	* `fromUrl` sets the resolution base — pass a caller's `import.meta.url` to
+	* resolve that caller's RELATIVE specifiers. When omitted, the base is this
+	* file, which is correct only for builtins / bare packages (dir-independent).
+	* With `fromUrl` the ambient `require` is skipped: it is bound to THIS file, so
+	* it would resolve a relative specifier from the wrong directory.
 	*/
-	function getArch() {
-		if (memoizedArch === void 0) memoizedArch = require_node_os.getNodeOs().arch();
-		return memoizedArch;
+	function bindRequire(fromUrl) {
+		if (!require_constants_runtime.IS_NODE) return;
+		if (!fromUrl && typeof require === "function") return require;
+		if (typeof module$1$1.createRequire === "function") try {
+			return (0, module$1$1.createRequire)(fromUrl ?? require("url").pathToFileURL(__filename).href);
+		} catch {
+			return;
+		}
 	}
-	const MUSL_LINKERS = [
-		"/lib/ld-musl-x86_64.so.1",
-		"/lib/ld-musl-aarch64.so.1",
-		"/usr/lib/ld-musl-x86_64.so.1",
-		"/usr/lib/ld-musl-aarch64.so.1"
-	];
-	let memoizedLibc;
-	let memoizedLibcProbed = false;
 	/**
-	* Get the host libc variant (memoized): `'musl'` on Alpine-and-similar,
-	* `'glibc'` on other Linux, `undefined` off-Linux. Detected by probing for the
-	* musl dynamic linker. The single source of truth for libc detection —
-	* tool-specific resolvers (`getPythonArch`, `getJreArch`) call this rather than
-	* re-probing.
+	* Returns `node:module` (or undefined off Node), loaded through the bound
+	* `require`. Cached across calls.
 	*/
-	function getLibc() {
-		if (!memoizedLibcProbed) {
-			memoizedLibcProbed = true;
-			/* c8 ignore start - Linux-only filesystem probe. */
-			if (getOs() !== "linux") memoizedLibc = void 0;
-			else {
-				memoizedLibc = "glibc";
-				for (let i = 0, { length } = MUSL_LINKERS; i < length; i += 1) if ((0, node_fs$1.existsSync)(MUSL_LINKERS[i])) {
-					memoizedLibc = "musl";
-					break;
-				}
-			}
-		}
-		return memoizedLibc;
+	function getNodeModule() {
+		return cachedModule ??= requireBuiltin("module");
 	}
-	let memoizedOs;
 	/**
-	* Get the current OS (memoized), e.g. `darwin`, `linux`, `win32` — the raw
-	* `process.platform` value.
+	* Returns a working `require` bound to THIS file, binding one on first call
+	* (see bindRequire). Cached across calls; undefined off Node / in browsers.
+	*
+	* For builtins and bare packages only — the resolution base is this file, so a
+	* relative specifier would resolve from `src/node/`. Use `requireFrom` for
+	* relative loads.
 	*/
-	function getOs() {
-		if (memoizedOs === void 0) memoizedOs = require_node_os.getNodeOs().platform();
-		return memoizedOs;
+	function getRequire() {
+		if (cachedRequire === void 0) cachedRequire = bindRequire();
+		return cachedRequire;
 	}
-	let memoizedTarget;
 	/**
-	* Get the current host **target** in the pnpm `pack-app` vocabulary (memoized):
-	* `<os>-<arch>[-<libc>]`, e.g. `darwin-arm64`, `linux-x64`, `win32-x64`,
-	* `linux-x64-musl`. Raw Node `process.platform`/`process.arch` joined with `-`,
-	* plus a `-musl` suffix on Alpine. This is the fleet-general naming for
-	* non-python / non-JRE tools (matches pnpm's release assets,
-	* `pnpm-<os>-<arch>[-<libc>].{tar.gz,zip}`). Tool-specific resolvers that need
-	* a different vocabulary own their own helper — see `getPythonArch`
-	* (python-build- standalone) / `getJreArch` (Adoptium).
+	* Is `name` a Node built-in module? Resolved from the statically-imported
+	* `isBuiltin`, so it works on Node and on ahead-of-time-compiled binaries
+	* (Perry), where ambient `require('module')` would lack `isBuiltin`. Returns
+	* false in browsers, where the bare `module` import is stubbed away.
+	*
+	* Single source of truth for "is this a Node builtin?" probes across socket-lib
+	* (used by the smol-binding loaders to gate their `node:smol-*` loads).
 	*/
-	function getTarget() {
-		if (memoizedTarget === void 0) {
-			const libcSuffix = getLibc() === "musl" ? "-musl" : "";
-			memoizedTarget = `${getOs()}-${getArch()}${libcSuffix}`;
-		}
-		return memoizedTarget;
+	function isNodeBuiltin(name) {
+		if (!require_constants_runtime.IS_NODE || typeof module$1$1.isBuiltin !== "function") return false;
+		return (0, module$1$1.isBuiltin)(name);
 	}
-	const DARWIN = getOs() === "darwin";
-	const WIN32 = getOs() === "win32";
 	/**
-	* True when this process was launched as a Chrome (or Chromium) native
-	* messaging host. Chrome passes the extension origin URL
-	* (`chrome-extension://<id>/`) as `process.argv[2]`; no other invocation shape
-	* produces that prefix.
+	* Load a built-in module by *computed* specifier through the bound `require`
+	* (see getRequire). The specifier is a parameter — never a literal at the call
+	* site — so browser bundlers neither walk nor bundle it. Returns undefined
+	* where no `require` can be bound.
+	*
+	* Builtins / bare packages only (dir-independent); for a relative specifier use
+	* `requireFrom`. Used by `getNodeModule` for `node:module`, and by the
+	* smol-binding loaders for the optional `node:smol-*` native bindings (gated
+	* behind `isNodeBuiltin`, true only on socket-btm's smol Node binary).
 	*/
-	const NATIVE_MESSAGING_HOST = typeof process !== "undefined" && typeof process.argv[2] === "string" && process.argv[2].startsWith("chrome-extension://");
-	const S_IXUSR = 64;
-	const S_IXGRP = 8;
-	const S_IXOTH = 1;
-	exports.DARWIN = DARWIN;
-	exports.NATIVE_MESSAGING_HOST = NATIVE_MESSAGING_HOST;
-	exports.S_IXGRP = S_IXGRP;
-	exports.S_IXOTH = S_IXOTH;
-	exports.S_IXUSR = S_IXUSR;
-	exports.WIN32 = WIN32;
-	exports.getArch = getArch;
-	exports.getLibc = getLibc;
-	exports.getOs = getOs;
-	exports.getTarget = getTarget;
-}));
-
-//#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/node/module.js
-var require_module = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_constants_runtime = require_runtime$5();
-	let cachedModule;
-	function getNodeModule() {
-		if (!require_constants_runtime.IS_NODE) return;
-		return cachedModule ??= /*@__PURE__*/ require("module");
+	function requireBuiltin(specifier) {
+		const req = getRequire();
+		if (req) return req(specifier);
 	}
 	/**
-	* Lazy + cached reference to `node:module`'s `isBuiltin(name)`. First call
-	* resolves the binding; subsequent calls dispatch through the cached function
-	* reference. Safe to detach — `isBuiltin` is `this`-free.
-	*
-	* Returns `false` in browser / non-CJS environments where `require` is
-	* undefined — no `node:` modules are built-in there.
-	*
-	* Single source of truth for "is this a Node builtin?" probes across socket-lib
-	* (used by the smol-binding loaders to gate `require('node:smol-*')`).
+	* Load a module by specifier from a CALLER-supplied base (its
+	* `import.meta.url`). Use this for RELATIVE specifiers (`./x`, `../y`), whose
+	* resolution depends on the caller's directory — `requireBuiltin` binds to this
+	* file and would resolve them from `src/node/`. Not cached: the binding is
+	* per-caller. Returns undefined where no `require` can be bound.
 	*/
-	let cachedIsBuiltin;
-	function isNodeBuiltin(name) {
-		if (!require_constants_runtime.IS_NODE) return false;
-		return (cachedIsBuiltin ??= getNodeModule().isBuiltin)(name);
+	function requireFrom(fromUrl, specifier) {
+		const req = bindRequire(fromUrl);
+		if (req) return req(specifier);
 	}
+	exports.bindRequire = bindRequire;
 	exports.getNodeModule = getNodeModule;
+	exports.getRequire = getRequire;
 	exports.isNodeBuiltin = isNodeBuiltin;
+	exports.requireBuiltin = requireBuiltin;
+	exports.requireFrom = requireFrom;
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/smol/detect.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/smol/detect.js
 var require_detect = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_node_module = require_module();
@@ -35249,7 +35224,7 @@ var require_detect = /* @__PURE__ */ __commonJSMin(((exports) => {
 		if (!smolUtilProbed) {
 			smolUtilProbed = true;
 			/* c8 ignore start - smol Node binary only. */
-			if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require("node:smol-util");
+			if (require_node_module.isNodeBuiltin("node:smol-util")) smolUtilCache = require_node_module.requireBuiltin("node:smol-util");
 		}
 		return smolUtilCache;
 	}
@@ -35279,7 +35254,7 @@ var require_detect = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/uncurry.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/uncurry.js
 var require_uncurry = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -35325,7 +35300,7 @@ var require_uncurry = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/smol/primordial.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/smol/primordial.js
 var require_primordial = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_node_module = require_module();
@@ -35355,7 +35330,7 @@ var require_primordial = /* @__PURE__ */ __commonJSMin(((exports) => {
 		if (!smolPrimordialProbed) {
 			smolPrimordialProbed = true;
 			/* c8 ignore start - smol Node binary only. */
-			if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require("node:smol-primordial");
+			if (require_node_module.isNodeBuiltin("node:smol-primordial")) smolPrimordial = require_node_module.requireBuiltin("node:smol-primordial");
 		}
 		return smolPrimordial;
 	}
@@ -35363,7 +35338,7 @@ var require_primordial = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/string.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/string.js
 var require_string = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -35482,7 +35457,124 @@ var require_string = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/math.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/node/os.js
+var require_os = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+	const nodeOs = require_runtime$5().IS_NODE ? /*@__PURE__*/ require("os") : void 0;
+	function getNodeOs() {
+		return nodeOs;
+	}
+	const osArch = nodeOs?.arch;
+	const osHomedir = nodeOs?.homedir;
+	const osPlatform = nodeOs?.platform;
+	const osTmpdir = nodeOs?.tmpdir;
+	exports.getNodeOs = getNodeOs;
+	exports.osArch = osArch;
+	exports.osHomedir = osHomedir;
+	exports.osPlatform = osPlatform;
+	exports.osTmpdir = osTmpdir;
+}));
+
+//#endregion
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/constants/platform.js
+var require_platform = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+	const require_node_os = require_os();
+	let node_fs$1 = require("node:fs");
+	/**
+	* @file Platform detection and OS-specific constants.
+	*/
+	let memoizedArch;
+	/**
+	* Get the current CPU architecture (memoized), e.g. `x64`, `arm64`.
+	*/
+	function getArch() {
+		if (memoizedArch === void 0) memoizedArch = require_node_os.getNodeOs().arch();
+		return memoizedArch;
+	}
+	const MUSL_LINKERS = [
+		"/lib/ld-musl-x86_64.so.1",
+		"/lib/ld-musl-aarch64.so.1",
+		"/usr/lib/ld-musl-x86_64.so.1",
+		"/usr/lib/ld-musl-aarch64.so.1"
+	];
+	let memoizedLibc;
+	let memoizedLibcProbed = false;
+	/**
+	* Get the host libc variant (memoized): `'musl'` on Alpine-and-similar,
+	* `'glibc'` on other Linux, `undefined` off-Linux. Detected by probing for the
+	* musl dynamic linker. The single source of truth for libc detection —
+	* tool-specific resolvers (`getPythonArch`, `getJreArch`) call this rather than
+	* re-probing.
+	*/
+	function getLibc() {
+		if (!memoizedLibcProbed) {
+			memoizedLibcProbed = true;
+			/* c8 ignore start - Linux-only filesystem probe. */
+			if (getOs() !== "linux") memoizedLibc = void 0;
+			else {
+				memoizedLibc = "glibc";
+				for (let i = 0, { length } = MUSL_LINKERS; i < length; i += 1) if ((0, node_fs$1.existsSync)(MUSL_LINKERS[i])) {
+					memoizedLibc = "musl";
+					break;
+				}
+			}
+		}
+		return memoizedLibc;
+	}
+	let memoizedOs;
+	/**
+	* Get the current OS (memoized), e.g. `darwin`, `linux`, `win32` — the raw
+	* `process.platform` value.
+	*/
+	function getOs() {
+		if (memoizedOs === void 0) memoizedOs = require_node_os.getNodeOs().platform();
+		return memoizedOs;
+	}
+	let memoizedTarget;
+	/**
+	* Get the current host **target** in the pnpm `pack-app` vocabulary (memoized):
+	* `<os>-<arch>[-<libc>]`, e.g. `darwin-arm64`, `linux-x64`, `win32-x64`,
+	* `linux-x64-musl`. Raw Node `process.platform`/`process.arch` joined with `-`,
+	* plus a `-musl` suffix on Alpine. This is the fleet-general naming for
+	* non-python / non-JRE tools (matches pnpm's release assets,
+	* `pnpm-<os>-<arch>[-<libc>].{tar.gz,zip}`). Tool-specific resolvers that need
+	* a different vocabulary own their own helper — see `getPythonArch`
+	* (python-build- standalone) / `getJreArch` (Adoptium).
+	*/
+	function getTarget() {
+		if (memoizedTarget === void 0) {
+			const libcSuffix = getLibc() === "musl" ? "-musl" : "";
+			memoizedTarget = `${getOs()}-${getArch()}${libcSuffix}`;
+		}
+		return memoizedTarget;
+	}
+	const DARWIN = getOs() === "darwin";
+	const WIN32 = getOs() === "win32";
+	/**
+	* True when this process was launched as a Chrome (or Chromium) native
+	* messaging host. Chrome passes the extension origin URL
+	* (`chrome-extension://<id>/`) as `process.argv[2]`; no other invocation shape
+	* produces that prefix.
+	*/
+	const NATIVE_MESSAGING_HOST = typeof process !== "undefined" && typeof process.argv[2] === "string" && process.argv[2].startsWith("chrome-extension://");
+	const S_IXUSR = 64;
+	const S_IXGRP = 8;
+	const S_IXOTH = 1;
+	exports.DARWIN = DARWIN;
+	exports.NATIVE_MESSAGING_HOST = NATIVE_MESSAGING_HOST;
+	exports.S_IXGRP = S_IXGRP;
+	exports.S_IXOTH = S_IXOTH;
+	exports.S_IXUSR = S_IXUSR;
+	exports.WIN32 = WIN32;
+	exports.getArch = getArch;
+	exports.getLibc = getLibc;
+	exports.getOs = getOs;
+	exports.getTarget = getTarget;
+}));
+
+//#endregion
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/math.js
 var require_math = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -35584,11 +35676,11 @@ var require_math = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/strings/search.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/strings/search.js
 var require_search = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_primordials_math = require_math();
 	const require_primordials_string = require_string();
+	const require_primordials_math = require_math();
 	/**
 	* @file `search` — like `String.prototype.search` but with a configurable
 	*   starting index. The native `RegExp.exec` + `lastIndex` dance handles this,
@@ -35637,7 +35729,7 @@ var require_search = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/buffer.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/buffer.js
 var require_buffer = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -35674,12 +35766,15 @@ var require_buffer = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/paths/_internal.js
-var require__internal$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/constants/encoding.js
+var require_encoding = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_primordials_buffer = require_buffer();
-	const require_constants_platform = require_platform();
-	const require_primordials_string = require_string();
+	/**
+	* @file Character encoding and character code constants. Exports the default
+	*   UTF-8 encoding name and numeric char codes for common ASCII characters used
+	*   by path and parsing utilities.
+	*/
+	const UTF8 = "utf8";
 	const CHAR_BACKWARD_SLASH = 92;
 	const CHAR_COLON = 58;
 	const CHAR_FORWARD_SLASH = 47;
@@ -35687,6 +35782,24 @@ var require__internal$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const CHAR_LOWERCASE_Z = 122;
 	const CHAR_UPPERCASE_A = 65;
 	const CHAR_UPPERCASE_Z = 90;
+	exports.CHAR_BACKWARD_SLASH = CHAR_BACKWARD_SLASH;
+	exports.CHAR_COLON = CHAR_COLON;
+	exports.CHAR_FORWARD_SLASH = CHAR_FORWARD_SLASH;
+	exports.CHAR_LOWERCASE_A = CHAR_LOWERCASE_A;
+	exports.CHAR_LOWERCASE_Z = CHAR_LOWERCASE_Z;
+	exports.CHAR_UPPERCASE_A = CHAR_UPPERCASE_A;
+	exports.CHAR_UPPERCASE_Z = CHAR_UPPERCASE_Z;
+	exports.UTF8 = UTF8;
+}));
+
+//#endregion
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/paths/_internal.js
+var require__internal$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+	const require_primordials_buffer = require_buffer();
+	const require_primordials_string = require_string();
+	const require_constants_platform = require_platform();
+	const require_constants_encoding = require_encoding();
 	const msysDriveRegExp = /^\/([a-zA-Z])($|\/)/;
 	const nodeModulesPathRegExp = /(?:[/\\]|^)node_modules(?:$|[/\\])/;
 	const slashRegExp = /[/\\]/;
@@ -35744,13 +35857,13 @@ var require__internal$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 		}
 		return String(pathLike);
 	}
-	exports.CHAR_BACKWARD_SLASH = CHAR_BACKWARD_SLASH;
-	exports.CHAR_COLON = CHAR_COLON;
-	exports.CHAR_FORWARD_SLASH = CHAR_FORWARD_SLASH;
-	exports.CHAR_LOWERCASE_A = CHAR_LOWERCASE_A;
-	exports.CHAR_LOWERCASE_Z = CHAR_LOWERCASE_Z;
-	exports.CHAR_UPPERCASE_A = CHAR_UPPERCASE_A;
-	exports.CHAR_UPPERCASE_Z = CHAR_UPPERCASE_Z;
+	exports.CHAR_BACKWARD_SLASH = require_constants_encoding.CHAR_BACKWARD_SLASH;
+	exports.CHAR_COLON = require_constants_encoding.CHAR_COLON;
+	exports.CHAR_FORWARD_SLASH = require_constants_encoding.CHAR_FORWARD_SLASH;
+	exports.CHAR_LOWERCASE_A = require_constants_encoding.CHAR_LOWERCASE_A;
+	exports.CHAR_LOWERCASE_Z = require_constants_encoding.CHAR_LOWERCASE_Z;
+	exports.CHAR_UPPERCASE_A = require_constants_encoding.CHAR_UPPERCASE_A;
+	exports.CHAR_UPPERCASE_Z = require_constants_encoding.CHAR_UPPERCASE_Z;
 	exports.getUrl = getUrl;
 	exports.msysDriveRegExp = msysDriveRegExp;
 	exports.nodeModulesPathRegExp = nodeModulesPathRegExp;
@@ -35759,11 +35872,11 @@ var require__internal$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/paths/conversion.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/paths/conversion.js
 var require_conversion = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_constants_platform = require_platform();
 	const require_primordials_string = require_string();
+	const require_constants_platform = require_platform();
 	const require_paths__internal = require__internal$1();
 	const require_paths_normalize = require_normalize();
 	/**
@@ -35875,7 +35988,7 @@ var require_conversion = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/regexp.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/regexp.js
 var require_regexp = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -35902,11 +36015,12 @@ var require_regexp = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/paths/predicates.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/paths/predicates.js
 var require_predicates$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_constants_platform = require_platform();
 	const require_primordials_string = require_string();
+	const require_constants_platform = require_platform();
+	require_encoding();
 	const require_paths__internal = require__internal$1();
 	const require_primordials_regexp = require_regexp();
 	/**
@@ -36093,7 +36207,7 @@ var require_predicates$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/paths/resolve.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/paths/resolve.js
 var require_resolve = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -36237,11 +36351,11 @@ var require_resolve = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/paths/normalize.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/paths/normalize.js
 var require_normalize = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_constants_platform = require_platform();
 	const require_primordials_string = require_string();
+	const require_constants_platform = require_platform();
 	const require_strings_search = require_search();
 	const require_paths__internal = require__internal$1();
 	const require_paths_conversion = require_conversion();
@@ -36914,7 +37028,9 @@ function repairEndPositions(node) {
 	}
 	if (typeof node.type !== "string") {
 		let m = 0;
-		for (const key of Object.keys(node)) {
+		const objectKeys = Object.keys(node);
+		for (let i = 0, { length } = objectKeys; i < length; i += 1) {
+			const key = objectKeys[i];
 			if (key === "loc" || key === "range" || key.startsWith("_")) continue;
 			const e = repairEndPositions(node[key]);
 			if (e > m) m = e;
@@ -36922,7 +37038,9 @@ function repairEndPositions(node) {
 		return m;
 	}
 	let maxChildEnd = 0;
-	for (const key of Object.keys(node)) {
+	const nodeKeys = Object.keys(node);
+	for (let i = 0, { length } = nodeKeys; i < length; i += 1) {
+		const key = nodeKeys[i];
 		if (key === "loc" || key === "range" || key === "start" || key === "end" || key.startsWith("_")) continue;
 		const e = repairEndPositions(node[key]);
 		if (e > maxChildEnd) maxChildEnd = e;
@@ -36948,7 +37066,9 @@ function walkAst(node, visit) {
 		return;
 	}
 	if (typeof node.type === "string") visit(node);
-	for (const key of Object.keys(node)) {
+	const keys = Object.keys(node);
+	for (let i = 0, { length } = keys; i < length; i += 1) {
+		const key = keys[i];
 		if (key === "loc" || key === "range" || key.startsWith("_")) continue;
 		walkAst(node[key], visit);
 	}
@@ -37125,7 +37245,8 @@ function collectRewrites(options) {
 		const objSrc = src.slice(toChar(object.start), toChar(object.end));
 		const argsSrc = node.arguments.length > 0 ? src.slice(toChar(node.arguments[0].start), toChar(node.arguments.at(-1).end)) : "";
 		const callStart = toChar(node.callee.start);
-		const callEnd = findClosingParen(src, node.arguments.length > 0 ? toChar(node.arguments.at(-1).end) : toChar(node.callee.end));
+		const lastArgEnd = node.arguments.length > 0 ? toChar(node.arguments.at(-1).end) : toChar(node.callee.end);
+		const callEnd = findClosingParen(src, lastArgEnd);
 		if (callEnd < 0) return;
 		const needsBang = isTsFile && nullable && nullable.has(expected);
 		const fnName = localName(expected) + (needsBang ? "!" : "");
@@ -37152,7 +37273,7 @@ function collectRewrites(options) {
 *   stay in separate domains.
 */
 /**
-* Apply collected rewrites to `src`, then emit the primordials import block.
+* Apply collected rewrites to `source`, then emit the primordials import block.
 *
 * Dedupes rewrite spans by `[start, end]` (acorn-wasm's compact_serialize can
 * surface the same node multiple times in the JSON tree), sorts them
@@ -37166,7 +37287,7 @@ function collectRewrites(options) {
 *
 * Returns the rewritten source plus whether an import was added.
 */
-function applyPrimordialsImports(src, rewrites, usedPrimordials, importStyle, absPath) {
+function applyPrimordialsImports(source, rewrites, usedPrimordials, importStyle, absPath) {
 	const aliasPrefix = importStyle?.aliasPrefix ?? "";
 	const seen = /* @__PURE__ */ new Set();
 	const deduped = [];
@@ -37178,7 +37299,7 @@ function applyPrimordialsImports(src, rewrites, usedPrimordials, importStyle, ab
 		deduped.push(r);
 	}
 	deduped.sort((a, b) => b.start - a.start);
-	let out = src;
+	let out = source;
 	for (let i = 0, { length } = deduped; i < length; i += 1) {
 		const r = deduped[i];
 		out = out.slice(0, r.start) + r.replacement + out.slice(r.end);
@@ -37189,7 +37310,8 @@ function applyPrimordialsImports(src, rewrites, usedPrimordials, importStyle, ab
 		const { exportToLeaf, leafSpecifier } = importStyle.splitByLeaf;
 		const byLeaf = /* @__PURE__ */ new Map();
 		const idents = [...usedPrimordials].toSorted();
-		for (const id of idents) {
+		for (let i = 0, { length } = idents; i < length; i += 1) {
+			const id = idents[i];
 			const leaf = exportToLeaf.get(id);
 			if (!leaf) continue;
 			let arr = byLeaf.get(leaf);
@@ -37199,7 +37321,9 @@ function applyPrimordialsImports(src, rewrites, usedPrimordials, importStyle, ab
 			}
 			arr.push(id);
 		}
-		for (const leaf of [...byLeaf.keys()].toSorted()) {
+		const leaves = [...byLeaf.keys()].toSorted();
+		for (let i = 0, { length } = leaves; i < length; i += 1) {
+			const leaf = leaves[i];
 			const leafIdents = byLeaf.get(leaf).toSorted();
 			const leafSpec = leafSpecifier(absPath, leaf);
 			const out2 = ensureImports(newSource, leafIdents, {
@@ -37230,15 +37354,15 @@ function applyPrimordialsImports(src, rewrites, usedPrimordials, importStyle, ab
 *
 * In ESM mode emits `import { X, Y } from '<specifier>'`. In CJS mode emits
 * `const { X, Y } = require('<specifier>')`. If a matching import (same shape,
-* same specifier) already exists in `src`, the new identifiers are merged into
-* its destructure list and we re-sort the keys; otherwise the new statement is
-* inserted after the last existing import/require, or prepended if neither
-* exists.
+* same specifier) already exists in `source`, the new identifiers are merged
+* into its destructure list and we re-sort the keys; otherwise the new
+* statement is inserted after the last existing import/require, or prepended if
+* neither exists.
 *
 * Returns the rewritten source and a boolean indicating whether anything was
 * added/changed (vs already-present-and-complete).
 */
-function ensureImports(src, identifiers, importStyle) {
+function ensureImports(source, identifiers, importStyle) {
 	const { kind, specifier } = importStyle;
 	const aliasPrefix = importStyle.aliasPrefix ?? "";
 	const renderEntry = (name) => aliasPrefix ? `${name}: ${aliasPrefix}${name}` : name;
@@ -37249,7 +37373,7 @@ function ensureImports(src, identifiers, importStyle) {
 	};
 	const escSpec = escapeRegex(specifier);
 	const existingRe = kind === "esm" ? new RegExp(`import\\s*\\{([^}]*)\\}\\s*from\\s*['"]${escSpec}['"];?`) : new RegExp(`(?:const|let|var)\\s*\\{([^}]*)\\}\\s*=\\s*require\\(\\s*['"]${escSpec}['"]\\s*\\);?`);
-	const existing = src.match(existingRe);
+	const existing = source.match(existingRe);
 	if (existing) {
 		const have = new Set(existing[1].split(",").map(parseEntry).filter(Boolean));
 		let addedAny = false;
@@ -37258,25 +37382,25 @@ function ensureImports(src, identifiers, importStyle) {
 			addedAny = true;
 		}
 		if (!addedAny) return {
-			newSource: src,
+			newSource: source,
 			importAdded: false
 		};
 		const merged = [...have].toSorted().map(renderEntry).join(", ");
 		const replacement = kind === "esm" ? `import { ${merged} } from '${specifier}'` : `const { ${merged} } = require('${specifier}')`;
 		return {
-			newSource: src.replace(existingRe, replacement),
+			newSource: source.replace(existingRe, replacement),
 			importAdded: true
 		};
 	}
-	const lastEnd = findInsertionPoint(src);
+	const lastEnd = findInsertionPoint(source);
 	const list = identifiers.map(renderEntry).join(", ");
 	const newStmt = kind === "esm" ? `import { ${list} } from '${specifier}'\n` : `const { ${list} } = require('${specifier}')\n`;
 	if (lastEnd === 0) return {
-		newSource: newStmt + src,
+		newSource: newStmt + source,
 		importAdded: true
 	};
 	return {
-		newSource: src.slice(0, lastEnd) + "\n" + newStmt + src.slice(lastEnd),
+		newSource: source.slice(0, lastEnd) + "\n" + newStmt + source.slice(lastEnd),
 		importAdded: true
 	};
 }
@@ -37292,34 +37416,34 @@ function escapeRegex(s) {
 * JSDoc / shebang block when no import/require is found, so callers prepend
 * BELOW the `@fileoverview` block instead of clobbering it.
 */
-function findInsertionPoint(src) {
+function findInsertionPoint(source) {
 	const importRe = /^import\s.+?from\s+['"][^'"]+['"]\s*;?\s*$/gm;
 	const requireRe = /^(?:const|let|var)\s+[^=]+?=\s*require\(\s*['"][^'"]+['"]\s*\)\s*;?\s*$/gm;
 	let lastEnd = 0;
-	for (const m of src.matchAll(importRe)) {
+	for (const m of source.matchAll(importRe)) {
 		const end = m.index + m[0].length;
 		if (end > lastEnd) lastEnd = end;
 	}
-	for (const m of src.matchAll(requireRe)) {
+	for (const m of source.matchAll(requireRe)) {
 		const end = m.index + m[0].length;
 		if (end > lastEnd) lastEnd = end;
 	}
 	if (lastEnd > 0) return lastEnd;
 	let pos = 0;
-	if (src.startsWith("#!")) {
-		const nl = src.indexOf("\n", pos);
-		pos = nl === -1 ? src.length : nl + 1;
+	if (source.startsWith("#!")) {
+		const nl = source.indexOf("\n", pos);
+		pos = nl === -1 ? source.length : nl + 1;
 	}
-	while (pos < src.length && /\s/.test(src[pos])) pos++;
-	if (src.startsWith("/*", pos)) {
-		const close = src.indexOf("*/", pos);
+	while (pos < source.length && /\s/.test(source[pos])) pos++;
+	if (source.startsWith("/*", pos)) {
+		const close = source.indexOf("*/", pos);
 		if (close !== -1) {
 			pos = close + 2;
-			if (src[pos] === "\n") pos++;
+			if (source[pos] === "\n") pos++;
 		} else pos = 0;
-	} else if (src.startsWith("//", pos)) while (src.startsWith("//", pos)) {
-		const nl = src.indexOf("\n", pos);
-		pos = nl === -1 ? src.length : nl + 1;
+	} else if (source.startsWith("//", pos)) while (source.startsWith("//", pos)) {
+		const nl = source.indexOf("\n", pos);
+		pos = nl === -1 ? source.length : nl + 1;
 	}
 	else pos = 0;
 	return pos;
@@ -37347,7 +37471,7 @@ function findInsertionPoint(src) {
 *     the files.
 */
 const DEFAULT_PRIMORDIALS_IMPORT_SPECIFIER = "@socketsecurity/lib/primordials";
-const REWRITABLE_EXTENSIONS = new Set([
+const REWRITABLE_EXTENSIONS = /* @__PURE__ */ new Set([
 	".cjs",
 	".cts",
 	".js",
@@ -37357,7 +37481,7 @@ const REWRITABLE_EXTENSIONS = new Set([
 	".ts",
 	".tsx"
 ]);
-const TS_EXTENSIONS$1 = new Set([
+const TS_EXTENSIONS$1 = /* @__PURE__ */ new Set([
 	".cts",
 	".mts",
 	".ts",
@@ -37618,7 +37742,7 @@ function* walkDir(dir, skipDirs = [
 *     violations with file:line:column locations. Future lint rules slot into
 *     the same visitor.
 */
-const CTOR_NAMES = new Set([
+const CTOR_NAMES = /* @__PURE__ */ new Set([
 	"AggregateError",
 	"Array",
 	"ArrayBuffer",
@@ -37659,13 +37783,13 @@ const CTOR_NAMES = new Set([
 	"WeakRef",
 	"WeakSet"
 ]);
-const TS_EXTENSIONS = new Set([
+const TS_EXTENSIONS = /* @__PURE__ */ new Set([
 	".cts",
 	".mts",
 	".ts",
 	".tsx"
 ]);
-const JS_EXTENSIONS = new Set([
+const JS_EXTENSIONS = /* @__PURE__ */ new Set([
 	".cjs",
 	".js",
 	".jsx",
@@ -37843,7 +37967,7 @@ function lintSource({ targetRoot, scanDir, skipDirs, skipFiles, primordialSource
 }
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/reflect.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/reflect.js
 var require_reflect = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -37880,7 +38004,20 @@ var require_reflect = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/map-set.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/node/async-hooks.js
+var require_async_hooks = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+	const require_constants_runtime = require_runtime$5();
+	let asyncHooks;
+	function getNodeAsyncHooks() {
+		if (!require_constants_runtime.IS_NODE) return;
+		return asyncHooks ??= /*@__PURE__*/ require("async_hooks");
+	}
+	exports.getNodeAsyncHooks = getNodeAsyncHooks;
+}));
+
+//#endregion
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/map-set.js
 var require_map_set = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -37973,7 +38110,7 @@ var require_map_set = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/themes/themes.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/themes/themes.js
 var require_themes = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -38210,12 +38347,12 @@ var require_themes = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/themes/context.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/themes/context.js
 var require_context = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+	const require_node_async_hooks = require_async_hooks();
 	const require_primordials_map_set = require_map_set();
 	const require_themes_themes = require_themes();
-	let asyncHooks;
 	/**
 	* Emit theme change event to listeners.
 	*
@@ -38225,14 +38362,13 @@ var require_context = /* @__PURE__ */ __commonJSMin(((exports) => {
 		for (const listener of listeners) listener(theme);
 	}
 	/**
-	* Lazily load the async_hooks module to avoid Webpack errors.
+	* Lazily load the async_hooks module. Aliases the canonical `node/async-hooks`
+	* accessor (single owner of the bundler-safe require); kept as an export so
+	* this module's surface is unchanged.
 	*
 	* @private
 	*/
-	function getAsyncHooks() {
-		if (asyncHooks === void 0) asyncHooks = /*@__PURE__*/ require("node:async_hooks");
-		return asyncHooks;
-	}
+	const getAsyncHooks = require_node_async_hooks.getNodeAsyncHooks;
 	/**
 	* AsyncLocalStorage for theme context isolation.
 	*/
@@ -38357,7 +38493,7 @@ var require_context = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/_internal.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/_internal.js
 var require__internal = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_map_set = require_map_set();
@@ -38472,7 +38608,7 @@ var require__internal = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/_virtual/_rolldown/runtime.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/_virtual/_rolldown/runtime.js
 var require_runtime$4 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var __create = Object.create;
 	var __defProp = Object.defineProperty;
@@ -38508,7 +38644,7 @@ var require_runtime$4 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/array.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/array.js
 var require_array = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -38648,7 +38784,7 @@ var require_array = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/error.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/error.js
 var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -38696,7 +38832,7 @@ var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/number.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/number.js
 var require_number = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -38751,7 +38887,7 @@ var require_number = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/object.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/object.js
 var require_object = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -38832,7 +38968,7 @@ var require_object = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/promise.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/promise.js
 var require_promise = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_uncurry = require_uncurry();
@@ -38868,7 +39004,7 @@ var require_promise = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/external/external-pack.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/external/external-pack.js
 /**
 * Bundled from external-pack
 * This is a zero-dependency bundle created by rolldown.
@@ -40155,7 +40291,8 @@ var require_external_pack = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				}
 				const wordLength = fastStringWidth(word);
 				if (options.hard && wordLength > columns) {
-					const breaksStartingThisLine = 1 + _p_MathFloor((wordLength - (columns - rowLength) - 1) / columns);
+					const remainingColumns = columns - rowLength;
+					const breaksStartingThisLine = 1 + _p_MathFloor((wordLength - remainingColumns - 1) / columns);
 					if (_p_MathFloor((wordLength - 1) / columns) < breaksStartingThisLine) rows.push("");
 					wrapWord(rows, word, columns);
 					rowLength = fastStringWidth(rows.at(-1) ?? "");
@@ -41531,7 +41668,7 @@ var require_external_pack = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/external/yoctocolors-cjs.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/external/yoctocolors-cjs.js
 var require_yoctocolors_cjs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { yoctocolorsCjs } = require_external_pack();
 	module.exports = yoctocolorsCjs;
@@ -41539,7 +41676,7 @@ var require_yoctocolors_cjs = /* @__PURE__ */ __commonJSMin(((exports, module) =
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/colors.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/colors.js
 var require_colors = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_runtime$3 = require_runtime$4();
@@ -41556,9 +41693,9 @@ var require_colors = /* @__PURE__ */ __commonJSMin(((exports) => {
 	* Apply a color to text using yoctocolors. Handles both named colors and RGB
 	* tuples.
 	*/
-	function applyColor(text, color, colors) {
+	function applyColor(text, color) {
 		if (typeof color === "string") {
-			const formatter = colors[color];
+			const formatter = src_external_yoctocolors_cjs.default[color];
 			return formatter ? formatter(text) : text;
 		}
 		const { 0: r, 1: g, 2: b } = color;
@@ -41575,7 +41712,7 @@ var require_colors = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/external/@socketregistry/is-unicode-supported.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/external/@socketregistry/is-unicode-supported.js
 /**
 * Bundled from @socketregistry/is-unicode-supported
 * This is a zero-dependency bundle created by rolldown.
@@ -41601,7 +41738,7 @@ var require_is_unicode_supported$1 = /* @__PURE__ */ __commonJSMin(((exports, mo
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/symbols-builder.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/symbols-builder.js
 var require_symbols_builder = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_runtime$2 = require_runtime$4();
@@ -41627,18 +41764,17 @@ var require_symbols_builder = /* @__PURE__ */ __commonJSMin(((exports) => {
 	*/
 	function buildLoggerSymbols(theme) {
 		const supported = (0, src_external__socketregistry_is_unicode_supported.default)();
-		const colors = require_logger_colors.getYoctocolors();
 		/* c8 ignore start - ASCII-fallback symbol arms only fire on
 		terminals without unicode support; tests run on unicode TTYs. */
 		return {
 			__proto__: null,
-			fail: require_logger_colors.applyColor(supported ? "✖" : "×", theme.colors.error, colors),
-			info: require_logger_colors.applyColor(supported ? "ℹ" : "i", theme.colors.info, colors),
-			progress: require_logger_colors.applyColor(supported ? "∴" : ":.", theme.colors.step, colors),
-			skip: require_logger_colors.applyColor(supported ? "↻" : "@", theme.colors.step, colors),
-			step: require_logger_colors.applyColor(supported ? "→" : ">", theme.colors.step, colors),
-			success: require_logger_colors.applyColor(supported ? "✔" : "√", theme.colors.success, colors),
-			warn: require_logger_colors.applyColor(supported ? "⚠" : "‼", theme.colors.warning, colors)
+			fail: require_logger_colors.applyColor(supported ? "✖" : "×", theme.colors.error),
+			info: require_logger_colors.applyColor(supported ? "ℹ" : "i", theme.colors.info),
+			progress: require_logger_colors.applyColor(supported ? "∴" : ":.", theme.colors.step),
+			skip: require_logger_colors.applyColor(supported ? "↻" : "@", theme.colors.step),
+			step: require_logger_colors.applyColor(supported ? "→" : ">", theme.colors.step),
+			success: require_logger_colors.applyColor(supported ? "✔" : "√", theme.colors.success),
+			warn: require_logger_colors.applyColor(supported ? "⚠" : "‼", theme.colors.warning)
 		};
 		/* c8 ignore stop */
 	}
@@ -41659,7 +41795,7 @@ var require_symbols_builder = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/primordials/globals.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/primordials/globals.js
 var require_globals = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -41695,7 +41831,7 @@ var require_globals = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/symbols.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/symbols.js
 var require_symbols = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_runtime$1 = require_runtime$4();
@@ -41734,14 +41870,14 @@ var require_symbols = /* @__PURE__ */ __commonJSMin(((exports) => {
 			const stepColor = theme.colors.step;
 			/* c8 ignore start - ASCII-fallback symbol arms only fire on
 			terminals without unicode support; tests run on unicode TTYs. */
-			target["fail"] = require_logger_colors.applyColor(supported ? "✖" : "×", errorColor, colors);
-			target["info"] = require_logger_colors.applyColor(supported ? "ℹ" : "i", infoColor, colors);
-			target["progress"] = require_logger_colors.applyColor(supported ? "∴" : ":.", stepColor, colors);
-			target["reason"] = colors.dim(require_logger_colors.applyColor(supported ? "∴" : ":.", warningColor, colors));
-			target["skip"] = require_logger_colors.applyColor(supported ? "↻" : "@", stepColor, colors);
-			target["step"] = require_logger_colors.applyColor(supported ? "→" : ">", stepColor, colors);
-			target["success"] = require_logger_colors.applyColor(supported ? "✔" : "√", successColor, colors);
-			target["warn"] = require_logger_colors.applyColor(supported ? "⚠" : "‼", warningColor, colors);
+			target["fail"] = require_logger_colors.applyColor(supported ? "✖" : "×", errorColor);
+			target["info"] = require_logger_colors.applyColor(supported ? "ℹ" : "i", infoColor);
+			target["progress"] = require_logger_colors.applyColor(supported ? "∴" : ":.", stepColor);
+			target["reason"] = colors.dim(require_logger_colors.applyColor(supported ? "∴" : ":.", warningColor));
+			target["skip"] = require_logger_colors.applyColor(supported ? "↻" : "@", stepColor);
+			target["step"] = require_logger_colors.applyColor(supported ? "→" : ">", stepColor);
+			target["success"] = require_logger_colors.applyColor(supported ? "✔" : "√", successColor);
+			target["warn"] = require_logger_colors.applyColor(supported ? "⚠" : "‼", warningColor);
 			/* c8 ignore stop */
 		};
 		const init = () => {
@@ -41819,7 +41955,7 @@ var require_symbols = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/console.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/console.js
 var require_console = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_runtime = require_runtime$4();
@@ -41945,7 +42081,7 @@ var require_console = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/console-methods.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/console-methods.js
 var require_console_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_logger_symbols = require_symbols();
@@ -42113,7 +42249,7 @@ var require_console_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/indentation-methods.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/indentation-methods.js
 var require_indentation_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_math = require_math();
@@ -42233,7 +42369,7 @@ var require_indentation_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/options.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/options.js
 var require_options = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_themes_themes = require_themes();
@@ -42279,7 +42415,7 @@ var require_options = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/ansi/strip.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/ansi/strip.js
 var require_strip = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_string = require_string();
@@ -42326,11 +42462,11 @@ var require_strip = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/strings/format.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/strings/format.js
 var require_format = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-	const require_primordials_math = require_math();
 	const require_primordials_string = require_string();
+	const require_primordials_math = require_math();
 	const require_ansi_strip = require_strip();
 	/**
 	* @file Line formatting helpers: `applyLinePrefix`, `centerText`,
@@ -42476,7 +42612,7 @@ var require_format = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/strings/predicates.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/strings/predicates.js
 var require_predicates = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -42534,7 +42670,7 @@ var require_predicates = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/semantic-methods.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/semantic-methods.js
 var require_semantic_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_array = require_array();
@@ -42641,7 +42777,7 @@ var require_semantic_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/stream.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/stream.js
 var require_stream = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	/**
@@ -42682,7 +42818,7 @@ var require_stream = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/stream-methods.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/stream-methods.js
 var require_stream_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_error = require_error();
@@ -42782,7 +42918,7 @@ var require_stream_methods = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/node.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/node.js
 var require_node = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_primordials_reflect = require_reflect();
@@ -43043,7 +43179,7 @@ var require_node = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/@socketsecurity+lib@6.0.8_typescript@5.9.2/node_modules/@socketsecurity/lib/dist/logger/default.js
+//#region node_modules/.pnpm/@socketsecurity+lib@6.0.9_typescript@7.0.2/node_modules/@socketsecurity/lib/dist/logger/default.js
 var require_default = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 	const require_logger_node = require_node();
@@ -43651,7 +43787,8 @@ function structuredPatch(oldFileName, newFileName, oldStr, newStr, oldHeader, ne
 	else {
 		const { callback } = optionsObj;
 		diffLines(oldStr, newStr, Object.assign(Object.assign({}, optionsObj), { callback: (diff) => {
-			callback(diffLinesResultToPatch(diff));
+			const patch = diffLinesResultToPatch(diff);
+			callback(patch);
 		} }));
 	}
 	function diffLinesResultToPatch(diff) {
@@ -43849,7 +43986,11 @@ function formatHuman(findings, ctx) {
 		else if (sample.kind === "covered") verb = `replace ${items.length}× with \`${primordial}\``;
 		else verb = `add \`${primordial}\` to socket-lib/src/primordials.ts (${items.length} call site${items.length === 1 ? "" : "s"})`;
 		lines.push(verb);
-		for (const item of items.slice(0, 3)) lines.push(`    ${item.file}:${item.line}  ${item.pattern}`);
+		const topItems = items.slice(0, 3);
+		for (let i = 0, { length } = topItems; i < length; i += 1) {
+			const item = topItems[i];
+			lines.push(`    ${item.file}:${item.line}  ${item.pattern}`);
+		}
 		if (items.length > 3) lines.push(`    … and ${items.length - 3} more`);
 		lines.push("");
 	}
@@ -43975,9 +44116,9 @@ function reportMod(result, json, applied, showDiff = false) {
 *   1. Explicit `--surface <path>` flag — overrides everything else. Use this to
 *      point at Node.js's `lib/internal/per_context/primordials.js`, a vendored
 *      copy, or any other primordials file.
-*   2. From a sibling socket-lib checkout (`../socket-lib/src/primordials/` after
-*      the split, with a `../socket-lib/src/primordials.ts` legacy fallback).
-*      Used during fleet development — picks up unreleased exports.
+*   2. From a sibling socket-lib checkout (its `src/primordials/` directory after
+*      the split, with a `src/primordials.ts` legacy fallback). Used during
+*      fleet development — picks up unreleased exports.
 *   3. From the installed `@socketsecurity/lib/dist/primordials/` (or legacy
 *      `dist/primordials.js`). Used when running the audit on a target that has
 *      lib as a dep. Either way, we parse out the `export const Foo` symbol
@@ -44161,7 +44302,9 @@ function parseExports(sourcePath) {
 	const exportToLeaf = /* @__PURE__ */ new Map();
 	if (stat.isDirectory()) {
 		const parts = [];
-		for (const name of (0, node_fs.readdirSync)(sourcePath).toSorted()) {
+		const names = (0, node_fs.readdirSync)(sourcePath).toSorted();
+		for (let i = 0, { length } = names; i < length; i += 1) {
+			const name = names[i];
 			if (!(name.endsWith(".ts") || name.endsWith(".mts") || name.endsWith(".cts") || name.endsWith(".js") || name.endsWith(".d.ts"))) continue;
 			const full = node_path.default.join(sourcePath, name);
 			if (!(0, node_fs.statSync)(full).isFile()) continue;
@@ -44179,9 +44322,12 @@ function parseExports(sourcePath) {
 	const nullable = /* @__PURE__ */ new Set();
 	for (const m of src.matchAll(/^export const ([A-Z][a-zA-Z0-9]+)/gm)) exports.add(m[1]);
 	for (const m of src.matchAll(/^export function ([a-z][a-zA-Z0-9]+)/gm)) exports.add(m[1]);
-	for (const m of src.matchAll(/^export\s*\{\s*([\s\S]+?)\s*\}/gm)) for (const ident of m[1].split(",")) {
-		const cleaned = ident.trim().replace(/^([A-Z][a-zA-Z0-9]+).*$/, "$1");
-		if (/^[A-Z][a-zA-Z0-9]+$/.test(cleaned)) exports.add(cleaned);
+	for (const m of src.matchAll(/^export\s*\{\s*([\s\S]+?)\s*\}/gm)) {
+		const idents = m[1].split(",");
+		for (let i = 0, { length } = idents; i < length; i += 1) {
+			const cleaned = idents[i].trim().replace(/^([A-Z][a-zA-Z0-9]+).*$/, "$1");
+			if (/^[A-Z][a-zA-Z0-9]+$/.test(cleaned)) exports.add(cleaned);
+		}
 	}
 	for (const m of src.matchAll(/\bprimordials\.([A-Z][a-zA-Z0-9]+)\s*=/g)) exports.add(m[1]);
 	for (const m of src.matchAll(/^export const ([A-Z][a-zA-Z0-9]+)\s*:\s*([\s\S]+?)\s*=\s/gm)) if (/\|\s*undefined\b/.test(m[2])) nullable.add(m[1]);