chore: update dependencies and build configuration

- Remove translations test file
- Update yarn command implementation
- Update utility functions
- Fix TypeScript configuration

Author: jdalton

package.json

@@ -250,5 +250,8 @@
     "ignore-type-assertion": true,
     "ignore-files": "test/*",
     "strict": true
+  },
+  "dependencies": {
+    "lodash": "^4.17.21"
   }
 }

pnpm-lock.yaml

@@ -1,5 +1,6 @@
 /** @fileoverview Scan list output formatter for Socket CLI. Displays paginated scan listings in JSON or table formats. Shows scan IDs, repositories, branches, default branches, commit information, and creation timestamps with pagination hints. */
 
+// @ts-ignore - Type definitions in src/types/chalk-table.d.ts
 import chalkTable from 'chalk-table'
 import colors from 'yoctocolors-cjs'
 

src/commands/scan/output-list-scans.mts

@@ -83,7 +83,7 @@ async function run(
   // Exception: Keep --dry-run to forward to yarn (yarn supports --dry-run natively)
   const argsToForward = filterFlags(argv, commonFlags, ['dry-run'])
 
-  // Forward arguments to sfw (Socket Firewall) via npx.
+  // Forward arguments to sfw (Socket Firewall) via our shadow runner.
   const result = await forwardToSfw('yarn', argsToForward)
 
   if (!result.ok) {

src/commands/yarn/cmd-yarn.mts

@@ -11,40 +11,37 @@ import constants from './constants.mts'
 // NODE_CHANNEL_FD is set when spawned with IPC (stdio includes 'ipc')
 // SOCKET_CLI_PRELOAD_PHASE is set by Socket CLI when spawning
 if (
-  !constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD ||
-  !constants.ENV.NODE_CHANNEL_FD ||
-  !constants.ENV.SOCKET_CLI_PRELOAD_PHASE
+  constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD &&
+  constants.ENV.NODE_CHANNEL_FD &&
+  constants.ENV.SOCKET_CLI_PRELOAD_PHASE
 ) {
-  // eslint-disable-next-line n/no-process-exit
-  process.exit(0)
+  const require = createRequire(import.meta.url)
+  const Sentry = /*@__PURE__*/ require('@sentry/node')
+  Sentry.init({
+    onFatalError(error: Error) {
+      // Defer module loads until after Sentry.init is called.
+      if (constants.ENV.SOCKET_CLI_DEBUG) {
+        logger.fail('[DEBUG] [Sentry onFatalError]:', error)
+      }
+    },
+    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',
+    enabled: true,
+    integrations: [],
+  })
+  Sentry.setTag(
+    'environment',
+    constants.ENV.INLINED_SOCKET_CLI_PUBLISHED_BUILD ? 'pub' : constants.ENV.NODE_ENV,
+  )
+  Sentry.setTag('version', constants.ENV.INLINED_SOCKET_CLI_VERSION_HASH)
+  if (constants.ENV.SOCKET_CLI_DEBUG) {
+    Sentry.setTag('debugging', true)
+    logger.info('[DEBUG] Set up Sentry.')
+  } else {
+    Sentry.setTag('debugging', false)
+  }
+  const {
+    kInternalsSymbol,
+    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry },
+  } = constants
+  setSentry(Sentry)
 }
-
-const require = createRequire(import.meta.url)
-const Sentry = /*@__PURE__*/ require('@sentry/node')
-Sentry.init({
-  onFatalError(error: Error) {
-    // Defer module loads until after Sentry.init is called.
-    if (constants.ENV.SOCKET_CLI_DEBUG) {
-      logger.fail('[DEBUG] [Sentry onFatalError]:', error)
-    }
-  },
-  dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',
-  enabled: true,
-  integrations: [],
-})
-Sentry.setTag(
-  'environment',
-  constants.ENV.INLINED_SOCKET_CLI_PUBLISHED_BUILD ? 'pub' : constants.ENV.NODE_ENV,
-)
-Sentry.setTag('version', constants.ENV.INLINED_SOCKET_CLI_VERSION_HASH)
-if (constants.ENV.SOCKET_CLI_DEBUG) {
-  Sentry.setTag('debugging', true)
-  logger.info('[DEBUG] Set up Sentry.')
-} else {
-  Sentry.setTag('debugging', false)
-}
-const {
-  kInternalsSymbol,
-  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry },
-} = constants
-setSentry(Sentry)

src/preload-sentry.mts

@@ -10,9 +10,6 @@ import { installSafeArborist } from './arborist/index.mts'
 // Only run this preload script in an IPC subprocess spawned by Socket CLI
 // NODE_CHANNEL_FD is set when spawned with IPC (stdio includes 'ipc')
 // SOCKET_CLI_PRELOAD_PHASE is set by Socket CLI when spawning
-if (!constants.ENV.NODE_CHANNEL_FD || !constants.ENV.SOCKET_CLI_PRELOAD_PHASE) {
-  // eslint-disable-next-line n/no-process-exit
-  process.exit(0)
+if (constants.ENV.NODE_CHANNEL_FD && constants.ENV.SOCKET_CLI_PRELOAD_PHASE) {
+  installSafeArborist()
 }
-
-installSafeArborist()

src/shadow/npm/preload-arborist.mts

@@ -19,19 +19,16 @@
  * - stripHelpFlags: Remove help flags (-h, --help)
  *
  * External Tool Integration:
- * - forwardToSfw: Forward commands to Socket Firewall (sfw) via npx
+ * - forwardToSfw: Forward commands to Socket Firewall (sfw) via Socket's shadow runner
  */
 
-import { spawn } from '@socketsecurity/registry/lib/spawn'
-
-import constants, { FLAG_CONFIG, FLAG_HELP } from '../constants.mts'
+import { FLAG_CONFIG, FLAG_HELP } from '../constants.mts'
+import { runShadowCommand } from './shadow-runner.mts'
 import { camelToKebab } from './strings.mts'
 
 import type { MeowFlags } from '../flags.mts'
 import type { CResult } from '../types.mts'
 
-const { WIN32 } = constants
-
 const CONFIG_FLAG_LONG_NAME = FLAG_CONFIG
 const CONFIG_FLAG_ASSIGNMENT = `${CONFIG_FLAG_LONG_NAME}=`
 const CONFIG_FLAG_ASSIGNMENT_LENGTH = CONFIG_FLAG_ASSIGNMENT.length
@@ -232,7 +229,8 @@ export function isYarnLockfileScanCommand(command: string): boolean {
 }
 
 /**
- * Forward a command to Socket Firewall (sfw) via npx.
+ * Forward a command to Socket Firewall (sfw) via our shadow command runner.
+ * Uses Socket's internal dlx execution which handles caching and consistent behavior.
  *
  * @param tool - The tool name to forward to sfw (e.g., 'yarn', 'cargo', 'pip')
  * @param args - Arguments to forward to the tool
@@ -242,17 +240,19 @@ export async function forwardToSfw(
   tool: string,
   args: string[] | readonly string[],
 ): Promise<CResult<void>> {
-  const result = await spawn('npx', ['sfw', tool, ...args], {
-    shell: WIN32,
+  // Use runShadowCommand to execute sfw with the tool and arguments
+  // This uses Socket's internal package execution system which will
+  // download and cache sfw as needed
+  const result = await runShadowCommand('sfw', [tool, ...args], {
     stdio: 'inherit',
   })
 
-  if (result.code !== 0) {
+  if (!result.ok) {
     return {
       ok: false,
       code: result.code || 1,
       data: undefined,
-      message: `${tool} exited with code ${result.code}`,
+      message: result.message || `${tool} exited with code ${result.code}`,
     }
   }
 

src/utils/cmd.mts

@@ -1,5 +1,6 @@
 /** @fileoverview Simplified output formatter to DRY out repetitive output-*.mts files */
 
+// @ts-ignore - Type definitions in src/types/chalk-table.d.ts
 import chalkTable from 'chalk-table'
 import colors from 'yoctocolors-cjs'
 

src/utils/simple-output.mts

@@ -34,7 +34,7 @@ export async function createTempFixture(
   if (cleanupHook) {
     cleanupHook(async () => {
       try {
-        await deleteAsync(tempDir)
+        await deleteAsync(tempDir, { force: true })
       } catch {
         // Ignore cleanup errors in tests.
       }
@@ -70,7 +70,7 @@ export async function createTempFixtures(
     cleanupHook(async () => {
       await Promise.all(
         tempDirs.map(dir =>
-          deleteAsync(dir).catch(() => {
+          deleteAsync(dir, { force: true }).catch(() => {
             // Ignore cleanup errors.
           }),
         ),
@@ -96,7 +96,7 @@ export async function withTempFixture(fixturePath: string): Promise<{
 
   const cleanup = async () => {
     try {
-      await deleteAsync(tempDir)
+      await deleteAsync(tempDir, { force: true })
     } catch {
       // Ignore cleanup errors.
     }