refactor: upgrade @socketsecurity/lib to v3.0.3 and migrate logger/spinner API

Upgrade @socketsecurity/lib from v2.10.4 to v3.0.3, adopting the new factory-based API for logger and spinner instances. This migration addresses breaking changes in v3.x where named exports were replaced with factory functions.

Key changes:
- Replace `import { logger }` with `import { getDefaultLogger }` across 223+ files
- Replace `import { spinner }` with `import { getDefaultSpinner }` across codebase
- Hoist logger/spinner instances to highest relevant scope for efficiency
- Update ESLint config to relax n/no-extraneous-import rule for config/script files
- Update pnpm-lock.yaml to reflect v3.0.3 dependency resolution

Author: jdalton

packages/bootstrap/src/bootstrap-npm.mts

@@ -8,7 +8,7 @@
 // Load Intl polyfill FIRST for ICU-disabled builds.
 import '@socketsecurity/cli/src/polyfills/intl-stub/index.mts'
 
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
 import { findAndExecuteCli, getArgs } from './shared/bootstrap-shared.mjs'
 
@@ -24,6 +24,6 @@ main()
     process.exit(exitCode)
   })
   .catch((e) => {
-    logger.error(`Bootstrap error: ${e instanceof Error ? e.message : String(e)}`)
+    getDefaultLogger().error(`Bootstrap error: ${e instanceof Error ? e.message : String(e)}`)
     process.exit(1)
   })

packages/bootstrap/src/shared/bootstrap-shared.mjs

@@ -11,7 +11,7 @@ import { which } from '@socketsecurity/lib/bin'
 import { SOCKET_IPC_HANDSHAKE } from '@socketsecurity/lib/constants/socket'
 import { downloadPackage } from '@socketsecurity/lib/dlx-package'
 import { envAsBoolean } from '@socketsecurity/lib/env'
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { Spinner, withSpinner } from '@socketsecurity/lib/spinner'
 import { spawn } from '@socketsecurity/lib/spawn'
 import { gte } from 'semver'
@@ -161,9 +161,9 @@ export async function downloadCli() {
   try {
     mkdirSync(SOCKET_DLX_DIR, { recursive: true })
   } catch (e) {
-    logger.error('Failed to create Socket directory')
-    logger.error(`   Error: ${e instanceof Error ? e.message : String(e)}`)
-    logger.error(`   Path: ${SOCKET_DLX_DIR}`)
+    getDefaultLogger().error('Failed to create Socket directory')
+    getDefaultLogger().error(`   Error: ${e instanceof Error ? e.message : String(e)}`)
+    getDefaultLogger().error(`   Path: ${SOCKET_DLX_DIR}`)
     process.exit(1)
   }
 
@@ -181,18 +181,18 @@ export async function downloadCli() {
         }),
     })
 
-    logger.log('')
+    getDefaultLogger().log('')
 
     return result
   } catch (e) {
-    logger.error('Failed to download Socket CLI')
-    logger.error(`   Error: ${e instanceof Error ? e.message : String(e)}`)
-    logger.error('')
-    logger.error('This may be a temporary issue. Please try:')
-    logger.error('  1. Check your internet connection')
-    logger.error('  2. Try running the command again')
-    logger.error(`  3. Manually create directory: mkdir -p "${SOCKET_DLX_DIR}"`)
-    logger.error(`  4. Report issue at: ${SOCKET_CLI_ISSUES_URL}`)
+    getDefaultLogger().error('Failed to download Socket CLI')
+    getDefaultLogger().error(`   Error: ${e instanceof Error ? e.message : String(e)}`)
+    getDefaultLogger().error('')
+    getDefaultLogger().error('This may be a temporary issue. Please try:')
+    getDefaultLogger().error('  1. Check your internet connection')
+    getDefaultLogger().error('  2. Try running the command again')
+    getDefaultLogger().error(`  3. Manually create directory: mkdir -p "${SOCKET_DLX_DIR}"`)
+    getDefaultLogger().error(`  4. Report issue at: ${SOCKET_CLI_ISSUES_URL}`)
     process.exit(1)
   }
 }
@@ -215,8 +215,8 @@ export async function findAndExecuteCli(args) {
   }
 
   // If we can't find the CLI, exit with error.
-  logger.error('Socket CLI installation failed')
-  logger.error('   CLI entry point not found after installation')
-  logger.error(`   Looked in: ${cliEntry}`)
+  getDefaultLogger().error('Socket CLI installation failed')
+  getDefaultLogger().error('   CLI entry point not found after installation')
+  getDefaultLogger().error(`   Looked in: ${cliEntry}`)
   return 1
 }

packages/build-infra/lib/build-output.mjs

@@ -4,45 +4,45 @@
  * Provides consistent, pretty logging for build processes.
  */
 
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
 /**
  * Print header.
  */
 export function printHeader(message) {
-  logger.step(message)
+  getDefaultLogger().step(message)
 }
 
 /**
  * Print step.
  */
 export function printStep(message) {
-  logger.substep(message)
+  getDefaultLogger().substep(message)
 }
 
 /**
  * Print substep.
  */
 export function printSubstep(message) {
-  logger.info(`  ${message}`)
+  getDefaultLogger().info(`  ${message}`)
 }
 
 /**
  * Print success message.
  */
 export function printSuccess(message) {
-  logger.success(message)
+  getDefaultLogger().success(message)
 }
 
 /**
  * Print error message.
  */
 export function printError(message, error = null) {
-  logger.error(message)
+  getDefaultLogger().error(message)
   if (error) {
-    logger.error(error.message)
+    getDefaultLogger().error(error.message)
     if (error.stack) {
-      logger.error(error.stack)
+      getDefaultLogger().error(error.stack)
     }
   }
 }
@@ -51,5 +51,5 @@ export function printError(message, error = null) {
  * Print warning message.
  */
 export function printWarning(message) {
-  logger.warn(message)
+  getDefaultLogger().warn(message)
 }

packages/build-infra/lib/extraction-cache.mjs

@@ -11,7 +11,7 @@ import { createHash } from 'node:crypto'
 import { existsSync, mkdirSync, readFileSync } from 'node:fs'
 import path from 'node:path'
 
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
 /**
  * Check if extraction is needed based on source content hash.
@@ -72,7 +72,7 @@ export async function shouldExtract({
     }
 
     // Cache hit!
-    logger.log(`✓ Using cached ${outputPath}`)
+    getDefaultLogger().log(`✓ Using cached ${outputPath}`)
     return false
   } catch {
     // Any error, regenerate.

packages/build-infra/lib/fetch-with-retry.mjs

@@ -3,7 +3,7 @@
  * Automatically retries on network errors and 5xx server errors.
  */
 
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
 /**
  * Fetch with automatic retry on transient failures.
@@ -35,7 +35,7 @@ export async function fetchWithRetry(url, options = {}, retryOptions = {}) {
       // Success!
       if (response.ok) {
         if (attempt > 1 && !silent) {
-          logger.log(`✓ Request succeeded on attempt ${attempt}`)
+          getDefaultLogger().log(`✓ Request succeeded on attempt ${attempt}`)
         }
         return response
       }
@@ -62,10 +62,10 @@ export async function fetchWithRetry(url, options = {}, retryOptions = {}) {
       if (attempt < retries) {
         const delay = Math.min(initialDelay * 2 ** (attempt - 1), maxDelay)
         if (!silent) {
-          logger.warn(
+          getDefaultLogger().warn(
             `✗ Attempt ${attempt}/${retries} failed: ${response.status} ${response.statusText}`,
           )
-          logger.log(`  Retrying in ${delay}ms...`)
+          getDefaultLogger().log(`  Retrying in ${delay}ms...`)
         }
         await sleep(delay)
       }
@@ -78,8 +78,8 @@ export async function fetchWithRetry(url, options = {}, retryOptions = {}) {
         if (attempt < retries) {
           const delay = Math.min(initialDelay * 2 ** (attempt - 1), maxDelay)
           if (!silent) {
-            logger.warn(`✗ Attempt ${attempt}/${retries} failed: ${error.message}`)
-            logger.log(`  Retrying in ${delay}ms...`)
+            getDefaultLogger().warn(`✗ Attempt ${attempt}/${retries} failed: ${error.message}`)
+            getDefaultLogger().log(`  Retrying in ${delay}ms...`)
           }
           await sleep(delay)
           continue

packages/build-infra/lib/preflight-checks.mjs

@@ -3,7 +3,7 @@
  * Provides a DRY way to run common pre-build validation checks.
  */
 
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
 import { printError, printSuccess } from './build-output.mjs'
 import {
@@ -41,8 +41,8 @@ export async function runPreflightChecks(options = {}) {
   const failures = []
 
   if (!quiet) {
-    logger.step('Running preflight checks')
-    logger.log('')
+    getDefaultLogger().step('Running preflight checks')
+    getDefaultLogger().log('')
   }
 
   // Check disk space.
@@ -95,10 +95,10 @@ export async function runPreflightChecks(options = {}) {
   if (!quiet) {
     if (!failures.length) {
       printSuccess('All preflight checks passed')
-      logger.log('')
+      getDefaultLogger().log('')
     } else {
       printError(`${failures.length} preflight check(s) failed`)
-      logger.log('')
+      getDefaultLogger().log('')
     }
   }
 
@@ -119,9 +119,9 @@ export async function runPreflightChecksOrExit(options = {}) {
 
   if (!result.passed) {
     if (!options.quiet) {
-      logger.error('Preflight checks failed')
+      getDefaultLogger().error('Preflight checks failed')
       for (const failure of result.failures) {
-        logger.error(`  - ${failure}`)
+        getDefaultLogger().error(`  - ${failure}`)
       }
     }
     process.exit(1)

packages/build-infra/lib/script-runner.mjs

@@ -4,7 +4,7 @@
  */
 
 import { WIN32 } from '@socketsecurity/lib/constants/platform'
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { spawn } from '@socketsecurity/lib/spawn'
 
 /**
@@ -54,7 +54,7 @@ export async function runPnpmScriptAll(scriptName, args = [], options = {}) {
 export async function runSequence(commands, globalOptions = {}) {
   for (const { args = [], command, description, options = {} } of commands) {
     if (description) {
-      logger.step(description)
+      getDefaultLogger().step(description)
     }
 
     const result = await spawn(command, args, {
@@ -117,7 +117,7 @@ export const pnpm = {
    * Run pnpm install with frozen lockfile.
    */
   install: async (options = {}) => {
-    logger.step('Installing dependencies')
+    getDefaultLogger().step('Installing dependencies')
     return spawn('pnpm', ['install', '--frozen-lockfile'], {
       shell: WIN32,
       stdio: 'inherit',
@@ -129,7 +129,7 @@ export const pnpm = {
    * Build all packages or specific package.
    */
   build: async (packageName = null, options = {}) => {
-    logger.step(packageName ? `Building ${packageName}` : 'Building packages')
+    getDefaultLogger().step(packageName ? `Building ${packageName}` : 'Building packages')
     const args = packageName
       ? ['--filter', packageName, 'run', 'build']
       : ['run', '-r', 'build']
@@ -145,7 +145,7 @@ export const pnpm = {
    * Run tests in specific package or all packages.
    */
   test: async (packageName = null, options = {}) => {
-    logger.step(packageName ? `Testing ${packageName}` : 'Running tests')
+    getDefaultLogger().step(packageName ? `Testing ${packageName}` : 'Running tests')
     const args = packageName
       ? ['--filter', packageName, 'run', 'test']
       : ['run', '-r', 'test']

packages/cli-with-sentry/scripts/build.mjs

@@ -9,7 +9,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 import { WIN32 } from '@socketsecurity/lib/constants/platform'
-import { logger } from '@socketsecurity/lib/logger'
+import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { spawn } from '@socketsecurity/lib/spawn'
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
@@ -21,7 +21,7 @@ async function main() {
     const cliPath = path.join(rootPath, '..', 'cli')
 
     // Build CLI bundle.
-    logger.info('Building CLI bundle...')
+    getDefaultLogger().info('Building CLI bundle...')
     let result = await spawn('node', ['.config/esbuild.config.mjs'], {
       shell: WIN32,
       stdio: 'inherit',
@@ -34,10 +34,10 @@ async function main() {
     if (result.code !== 0) {
       throw new Error(`CLI bundle build failed with exit code ${result.code}`)
     }
-    logger.success('Built CLI bundle')
+    getDefaultLogger().success('Built CLI bundle')
 
     // Build index loader.
-    logger.info('Building index loader...')
+    getDefaultLogger().info('Building index loader...')
     result = await spawn('node', ['.config/esbuild.index.config.mjs'], {
       shell: WIN32,
       stdio: 'inherit',
@@ -46,10 +46,10 @@ async function main() {
     if (result.code !== 0) {
       throw new Error(`Index loader build failed with exit code ${result.code}`)
     }
-    logger.success('Built index loader')
+    getDefaultLogger().success('Built index loader')
 
     // Build shadow npm inject.
-    logger.info('Building shadow npm inject...')
+    getDefaultLogger().info('Building shadow npm inject...')
     result = await spawn('node', ['.config/esbuild.inject.config.mjs'], {
       shell: WIN32,
       stdio: 'inherit',
@@ -58,10 +58,10 @@ async function main() {
     if (result.code !== 0) {
       throw new Error(`Shadow npm inject build failed with exit code ${result.code}`)
     }
-    logger.success('Built shadow npm inject')
+    getDefaultLogger().success('Built shadow npm inject')
 
     // Compress CLI.
-    logger.info('Compressing CLI...')
+    getDefaultLogger().info('Compressing CLI...')
     result = await spawn('node', ['scripts/compress-cli.mjs'], {
       shell: WIN32,
       stdio: 'inherit',
@@ -70,17 +70,17 @@ async function main() {
     if (result.code !== 0) {
       throw new Error(`CLI compression failed with exit code ${result.code}`)
     }
-    logger.success('Compressed CLI')
+    getDefaultLogger().success('Compressed CLI')
 
     // Copy data directory from packages/cli.
-    logger.info('Copying data/ from packages/cli...')
+    getDefaultLogger().info('Copying data/ from packages/cli...')
     await fs.cp(path.join(cliPath, 'data'), path.join(rootPath, 'data'), {
       recursive: true,
     })
-    logger.success('Copied data/')
+    getDefaultLogger().success('Copied data/')
 
     // Copy files from repo root.
-    logger.info('Copying files from repo root...')
+    getDefaultLogger().info('Copying files from repo root...')
     const filesToCopy = [
       'CHANGELOG.md',
       'LICENSE',
@@ -90,9 +90,9 @@ async function main() {
     for (const file of filesToCopy) {
       await fs.cp(path.join(repoRoot, file), path.join(rootPath, file))
     }
-    logger.success('Copied files from repo root')
+    getDefaultLogger().success('Copied files from repo root')
   } catch (error) {
-    logger.error(`Build failed: ${error.message}`)
+    getDefaultLogger().error(`Build failed: ${error.message}`)
     process.exitCode = 1
   }
 }