refactor(cli): remove unnecessary lazy loading

Replace dynamic imports with normal top-level imports across the codebase since everything is bundled into build/cli.js. Lazy loading adds complexity without providing benefits in a bundled environment.

Changes:
- provider-factory.mts: Change createPrProvider to synchronous with top-level imports (fixes Node 20 syntax errors)
- analytics-app-cli.mts: Import React/Ink at top level instead of dynamic imports
- audit-log-app-cli.mts: Import React/Ink at top level instead of dynamic imports
- threat-feed-app-cli.mts: Import React/Ink at top level instead of dynamic imports
- with-subcommands.mts: Import interactive help at top level instead of dynamic imports
- downloads.mts: Import fs.promises at top level instead of dynamic import

This fixes Node 20 test failures in providers.test.mts where require() with destructuring caused syntax errors.

Author: jdalton

packages/cli/src/commands/analytics/analytics-app-cli.mts

@@ -3,6 +3,9 @@
 
 import { pathToFileURL } from 'node:url'
 
+import { render } from 'ink'
+import React from 'react'
+
 /**
  * Run the Ink AnalyticsApp with data from stdin.
  */
@@ -15,9 +18,7 @@ async function main() {
   const input = Buffer.concat(chunks).toString('utf8')
   const data = JSON.parse(input)
 
-  // Dynamically import ESM modules.
-  const React = await import('react')
-  const { render } = await import('ink')
+  // Dynamic import is needed here because AnalyticsApp.tsx gets compiled to .js at build time.
   const { AnalyticsApp } = await import(
     pathToFileURL(new URL('./AnalyticsApp.js', import.meta.url).pathname).href
   )

packages/cli/src/commands/audit-log/audit-log-app-cli.mts

@@ -3,6 +3,9 @@
 
 import { pathToFileURL } from 'node:url'
 
+import { render } from 'ink'
+import React from 'react'
+
 /**
  * Run the Ink AuditLogApp with data from stdin.
  */
@@ -15,9 +18,7 @@ async function main() {
   const input = Buffer.concat(chunks).toString('utf8')
   const data = JSON.parse(input)
 
-  // Dynamically import ESM modules.
-  const React = await import('react')
-  const { render } = await import('ink')
+  // Dynamic import is needed here because AuditLogApp.tsx gets compiled to .js at build time.
   const { AuditLogApp } = await import(
     pathToFileURL(new URL('./AuditLogApp.js', import.meta.url).pathname).href
   )

packages/cli/src/commands/threat-feed/threat-feed-app-cli.mts

@@ -3,6 +3,9 @@
 
 import { pathToFileURL } from 'node:url'
 
+import { render } from 'ink'
+import React from 'react'
+
 /**
  * Run the Ink ThreatFeedApp with data from stdin.
  */
@@ -15,9 +18,7 @@ async function main() {
   const input = Buffer.concat(chunks).toString('utf8')
   const data = JSON.parse(input)
 
-  // Dynamically import ESM modules.
-  const React = await import('react')
-  const { render } = await import('ink')
+  // Dynamic import is needed here because ThreatFeedApp.tsx gets compiled to .js at build time.
   const { ThreatFeedApp } = await import(
     pathToFileURL(new URL('./ThreatFeedApp.js', import.meta.url).pathname).href
   )

packages/cli/src/utils/cli/with-subcommands.mts

@@ -34,6 +34,7 @@ import {
 } from '../config.mts'
 import { isDebug } from '../debug.mts'
 import { tildify } from '../fs/home-path.mts'
+import { showCategoryHelp, showInteractiveHelp } from './interactive-help.mts'
 import { getFlagListOutput, getHelpListOutput } from '../output/formatting.mts'
 import { spawnSocketPython } from '../python/standalone.mts'
 import { getVisibleTokenPrefix } from '../socket/sdk.mjs'
@@ -881,14 +882,12 @@ export async function meowWithSubcommands(
       process.env['CI'] !== 'true'
 
     if (shouldShowInteractive) {
-      // Show interactive help for root --help command
-      const { showInteractiveHelp } = await import('./interactive-help.mts')
+      // Show interactive help for root --help command.
       await showInteractiveHelp()
       // eslint-disable-next-line n/no-process-exit
       process.exit(0)
     } else if (helpCategory) {
-      // Show specific category help
-      const { showCategoryHelp } = await import('./interactive-help.mts')
+      // Show specific category help.
       const found = showCategoryHelp(helpCategory)
       if (!found) {
         logger.error(`Unknown help category: ${helpCategory}`)

packages/cli/src/utils/git/provider-factory.mts

@@ -1,5 +1,7 @@
 import { spawnSync } from '@socketsecurity/lib/spawn'
 
+import { GitHubProvider } from './github-provider.mts'
+import { GitLabProvider } from './gitlab-provider.mts'
 import type { PrProvider } from './provider.mts'
 
 /**
@@ -17,15 +19,10 @@ export function createPrProvider(): PrProvider {
     process.env['GITLAB_HOST'] ||
     remoteUrl.includes('gitlab')
   ) {
-    // Lazy load to avoid importing GitLab dependency if not needed.
-
-    const { GitLabProvider } = require('./gitlab-provider.mts')
     return new GitLabProvider()
   }
 
   // Default to GitHub (backward compatibility).
-
-  const { GitHubProvider } = require('./github-provider.mts')
   return new GitHubProvider()
 }
 

packages/cli/src/utils/preflight/downloads.mts

@@ -7,7 +7,7 @@
  * This runs asynchronously and never blocks the main CLI execution.
  */
 
-import { existsSync } from 'node:fs'
+import { existsSync, promises as fs } from 'node:fs'
 import path from 'node:path'
 
 import { spawn } from '@socketsecurity/lib/spawn'
@@ -41,7 +41,6 @@ async function markPackageCached(packageName: string): Promise<void> {
   const cacheMarker = path.join(cacheDir, packageName.replace(/[/@]/g, '-'))
 
   try {
-    const { promises: fs } = await import('node:fs')
     await fs.mkdir(cacheDir, { recursive: true })
     await fs.writeFile(cacheMarker, new Date().toISOString())
   } catch {