refactor(preflight): remove unused cli-ai from preflight downloads

cli-ai is not currently used, so remove it from background preflight
downloads. Final download order: coana → cdxgen → Python → socketsecurity.

Author: jdalton

.gitignore

@@ -59,3 +59,15 @@ packages/*/.yoga-tests
 packages/*/.onnx-source
 packages/*/.minilm-source
 **/html
+
+# Workspace ignores
+packages/cli/CHANGELOG.md
+packages/cli/LICENSE
+packages/cli/*.png
+packages/cli-with-sentry/data/
+packages/cli-with-sentry/CHANGELOG.md
+packages/cli-with-sentry/LICENSE
+packages/cli-with-sentry/*.png
+packages/socket/CHANGELOG.md
+packages/socket/LICENSE
+packages/socket/*.png

CHANGELOG.md

@@ -14,6 +14,33 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Bootstrap process no longer shows spurious "command failed" error on successful CLI execution
 - Windows CI test failures in path resolution tests - now platform-aware and handle Unix path expectations correctly
 
+## [2.0.11](https://github.com/SocketDev/socket-cli/releases/tag/v2.0.11) - 2025-11-01
+
+### Added
+- Progressive enhancement with ONNX Runtime stub for optional NLP features
+- SHA-256 checksum verification for Python build standalone downloads
+- Optional external alias detection for TypeScript configurations
+- Comprehensive documentation for NLP progressive enhancement
+- Package badges to README files
+
+### Changed
+- Standardized environment variable naming with SOCKET_CLI_ prefix
+
+### Fixed
+- Bootstrap stream/promises module path corrected for smol builds
+- Bootstrap error handling improved for clearer failure messages
+- Windows path handling now correctly processes UNC paths
+- Windows validation added for Unix-style paths in npm directory resolution
+
+## [2.0.10](https://github.com/SocketDev/socket-cli/releases/tag/v2.0.10) - 2025-10-31
+
+### Fixed
+- Tab completion script now resolves CLI package root correctly
+- SDK scan options flattened and repo parameter made conditional
+- Output handling now safely checks for null before calling toString()
+- Environment variable fallbacks from v1.x restored for backward compatibility
+- Directory creation EEXIST errors now handled gracefully
+
 ## [2.0.9](https://github.com/SocketDev/socket-cli/releases/tag/v2.0.9) - 2025-10-31
 
 ### Fixed

packages/cli-with-sentry/.gitignore

@@ -1,6 +1,2 @@
 /coverage
-/data
 **/dist
-CHANGELOG.md
-LICENSE
-*.png

packages/cli/.gitignore

@@ -1,5 +1,2 @@
 /coverage
 **/dist
-CHANGELOG.md
-LICENSE
-*.png

packages/cli/src/utils/preflight/downloads.mts

@@ -4,8 +4,7 @@
  * Silently downloads dependencies in the background on first CLI run:
  * 1. @coana-tech/cli
  * 2. @cyclonedx/cdxgen
- * 3. @socketbin/cli-ai
- * 4. Python + socketsecurity (socket-python-cli)
+ * 3. Python + socketsecurity (socket-python-cli)
  *
  * Downloads are staggered sequentially to avoid resource contention.
  * This runs asynchronously and never blocks the main CLI execution.
@@ -50,7 +49,7 @@ export function runPreflightDownloads(): void {
   void (async () => {
     try {
       // Stagger downloads sequentially to avoid resource contention.
-      // Order: coana → cdxgen → cli-ai → Python → socketsecurity.
+      // Order: coana → cdxgen → Python → socketsecurity.
 
       // 1. @coana-tech/cli preflight.
       const coanaVersion = ENV.INLINED_SOCKET_CLI_COANA_VERSION
@@ -74,18 +73,7 @@ export function runPreflightDownloads(): void {
         })
       }
 
-      // 3. @socketbin/cli-ai preflight.
-      const cliAiVersion = ENV.INLINED_SOCKET_CLI_AI_VERSION
-      const cliAiSpec = `@socketbin/cli-ai@^${cliAiVersion}`
-      if (!isPackageCached(cliAiSpec)) {
-        await downloadPackage({
-          package: cliAiSpec,
-          binaryName: 'cli-ai',
-          force: false,
-        })
-      }
-
-      // 4. Python + socketsecurity (socket-python-cli) preflight.
+      // 3. Python + socketsecurity (socket-python-cli) preflight.
       const pythonBin = await ensurePython()
       await ensureSocketCli(pythonBin)
     } catch {}

packages/socket/.gitignore

@@ -1,5 +1,2 @@
 /coverage
 **/dist
-CHANGELOG.md
-LICENSE
-*.png