feat(exports): expose llms.txt through the exports map

Takes the generator rule from socket-wheelhouse (byte-identical fleet mirror)
and regenerates: 616 entries, the new one being "./llms.txt": "./llms.txt".
The file was already published in files[] but unreachable through exports —
require.resolve('@socketsecurity/lib/llms.txt') now resolves, which is the
point of shipping an llms.txt at all. public-files-are-exported passes.

Author: jdalton

package.json

@@ -3515,7 +3515,8 @@
       "default": "./dist/words/types.js"
     },
     "./data/extensions.json": "./data/extensions.json",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./llms.txt": "./llms.txt"
   },
   "publishConfig": {
     "access": "public",

scripts/fleet/gen/package-exports.mts

@@ -16,7 +16,7 @@
  *   `scripts/fleet/check/public-files-are-exported.mts`.
  */
 
-import { promises as fs, readFileSync } from 'node:fs'
+import { existsSync, promises as fs, readFileSync } from 'node:fs'
 import { builtinModules } from 'node:module'
 import path from 'node:path'
 import process from 'node:process'
@@ -211,6 +211,7 @@ export function buildExportsMap(
   const { outDir } = config
   const map: Record<string, ExportConditions | string> = {}
 
+
   for (let i = 0, { length } = publicFiles; i < length; i += 1) {
     const rel = normalizePath(publicFiles[i]!)
     if (isPrivatePath(rel, config.privateSegments)) {
@@ -596,6 +597,14 @@ export async function runGenerator(): Promise<void> {
   )
 
   const exports = buildExportsMap(config, publicFiles, srcFiles, declFiles)
+  // llms.txt at the package root auto-exports as `./llms.txt`, the same
+  // treatment `./package.json` gets: a plain-text asset agents resolve through
+  // the exports map. The generator owns the entry so a repo cannot ship the
+  // file in `files[]` while leaving it unreachable via `exports` — the exact
+  // drift socket-lib had (published but unexported).
+  if (existsSync(path.join(packageDir, 'llms.txt'))) {
+    exports['./llms.txt'] = './llms.txt'
+  }
   pkgJson['exports'] = exports
   // A declared browser-safe surface implies the package targets the browser, so
   // a downstream browser bundle will traverse its `node:*` imports — stub every