@socketsecurity/cli-with-sentry 0.14.45 → 0.14.47

package/dist/module-sync/cli.js

@@ -26,11 +26,12 @@ var rest = _socketInterop(require('@octokit/rest'));
 var index = require('./index.js');
 var meow = _socketInterop(require('meow'));
 var objects = require('@socketsecurity/registry/lib/objects');
+var regexps = require('@socketsecurity/registry/lib/regexps');
+var constants = require('./constants.js');
 var fs$1 = require('node:fs/promises');
 var ScreenWidget = _socketInterop(require('blessed/lib/widgets/screen'));
 var contrib = _socketInterop(require('blessed-contrib'));
 var spinner = require('@socketsecurity/registry/lib/spinner');
-var constants = require('./constants2.js');
 var prompts = require('@socketsecurity/registry/lib/prompts');
 var yargsParse = _socketInterop(require('yargs-parser'));
 var words = require('@socketsecurity/registry/lib/words');
@@ -53,7 +54,6 @@ var index_cjs = require('@socketregistry/hyrious__bun.lockb/index.cjs');
 var sorts = require('@socketsecurity/registry/lib/sorts');
 var strings = require('@socketsecurity/registry/lib/strings');
 var yaml = _socketInterop(require('yaml'));
-var regexps = require('@socketsecurity/registry/lib/regexps');
 var npm$1 = require('./npm.js');
 var npmPaths = require('./npm-paths.js');
 var betterAjvErrors = _socketInterop(require('@apideck/better-ajv-errors'));
@@ -61,7 +61,6 @@ var config$A = require('@socketsecurity/config');
 var readline = require('node:readline/promises');
 var open = _socketInterop(require('open'));
 var TableWidget = _socketInterop(require('blessed-contrib/lib/widget/table'));
-var os = require('node:os');
 var readline$1 = require('node:readline');
 
 // https://github.com/SocketDev/socket-python-cli/blob/6d4fc56faee68d3a4764f1f80f84710635bdaf05/socketsecurity/core/classes.py
@@ -1321,6 +1320,11 @@ const commonFlags = {
     default: false,
     shortFlag: 'h',
     description: 'Print this help.'
+  },
+  dryRun: {
+    type: 'boolean',
+    default: false,
+    description: 'Do input validation for a command and exit 0 when input is ok'
   }
 };
 const outputFlags = {
@@ -1350,10 +1354,9 @@ const validationFlags = {
   }
 };
 
-// Property names are picked such that the name is at the top when the props
-// get ordered by alphabet while flags is near the bottom and the help text
-// at the bottom, because they tend ot occupy the most lines of code.
-
+const {
+  SOCKET_CLI_SHOW_BANNER
+} = constants;
 async function meowWithSubcommands(subcommands, options) {
   const {
     aliases = {},
@@ -1366,12 +1369,12 @@ async function meowWithSubcommands(subcommands, options) {
     ...options
   };
   const [commandOrAliasName, ...rawCommandArgv] = argv;
-  // If we got at least some args, then lets find out if we can find a command
+  // If we got at least some args, then lets find out if we can find a command.
   if (commandOrAliasName) {
     const alias = aliases[commandOrAliasName];
-    // First: Resolve argv data from alias if its an alias that's been given
+    // First: Resolve argv data from alias if its an alias that's been given.
     const [commandName, ...commandArgv] = alias ? [...alias.argv, ...rawCommandArgv] : [commandOrAliasName, ...rawCommandArgv];
-    // Second: Find a command definition using that data
+    // Second: Find a command definition using that data.
     const commandDefinition = commandName ? subcommands[commandName] : undefined;
     // Third: If a valid command has been found, then we run it...
     if (commandDefinition) {
@@ -1384,7 +1387,13 @@ async function meowWithSubcommands(subcommands, options) {
     ...commonFlags,
     ...additionalOptions.flags
   };
-  // ...else we provide basic instructions and help
+  // ...else we provide basic instructions and help.
+
+  // Temp disable until we clear the --json and --markdown usage
+  // Lazily access constants.ENV[SOCKET_CLI_SHOW_BANNER].
+  if (constants.ENV[SOCKET_CLI_SHOW_BANNER]) {
+    console.log(getAsciiHeader(name));
+  }
   const cli = meow(`
     Usage
       $ ${name} <command>
@@ -1415,9 +1424,15 @@ async function meowWithSubcommands(subcommands, options) {
     argv,
     importMeta,
     ...additionalOptions,
-    flags
+    flags,
+    autoHelp: false // otherwise we can't exit(0)
   });
-  cli.showHelp();
+  if (!cli.flags['help'] && cli.flags['dryRun']) {
+    console.log('[DryRun]: noop, call a sub-command; ok');
+    process.exitCode = 0;
+  } else {
+    cli.showHelp();
+  }
 }
 
 /**
@@ -1432,19 +1447,40 @@ function meowOrExit({
   parentName
 }) {
   const command = `${parentName} ${config.commandName}`;
-  const help = config.help(command, config);
-
+  // Temp disable until we clear the --json and --markdown usage.
+  // Lazily access constants.ENV[SOCKET_CLI_SHOW_BANNER].
+  if (constants.ENV[SOCKET_CLI_SHOW_BANNER]) {
+    console.log(getAsciiHeader(command));
+  }
   // This exits if .printHelp() is called either by meow itself or by us.
   const cli = meow({
     argv,
     description: config.description,
-    help,
+    help: config.help(command, config),
     importMeta,
     flags: config.flags,
-    allowUnknownFlags: Boolean(allowUnknownFlags)
+    allowUnknownFlags: Boolean(allowUnknownFlags),
+    autoHelp: false // otherwise we can't exit(0)
   });
+  if (cli.flags['help']) {
+    cli.showHelp();
+  }
   return cli;
 }
+function getAsciiHeader(command) {
+  const cliVersion = // The '@rollup/plugin-replace' will replace "process.env['SOCKET_CLI_VERSION_HASH']".
+  "0.14.47:e0c97e0:714b50c6:pub";
+  const nodeVersion = process.version;
+  // Get the last 5 characters of the API token before the trailing "_api".
+  const lastFiveCharsOfApiToken = index.getSetting('apiToken')?.slice(-9, -4) || 'no';
+  const relCwd = process.cwd().replace(new RegExp(`^${regexps.escapeRegExp(constants.homePath)}`, 'i'), '~/');
+  const body = `
+   _____         _       _        /---------------
+  |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver ${cliVersion}
+  |__   | . |  _| '_| -_|  _|     | Node: ${nodeVersion}, API token set: ${lastFiveCharsOfApiToken}
+  |_____|___|___|_,_|___|_|.dev   | Command: \`${command}\`, cwd: ${relCwd}`.trimStart();
+  return `   ${body}\n`;
+}
 
 // https://github.com/SocketDev/socket-python-cli/blob/6d4fc56faee68d3a4764f1f80f84710635bdaf05/socketsecurity/socketcli.py
 
@@ -1471,12 +1507,11 @@ const config$z = {
       description: 'After marker'
     }
   },
-  help: (parentName, {
-    commandName,
+  help: (command, {
     flags
   }) => `
     Usage
-      $ ${parentName} ${commandName} [options]
+      $ ${command} [options]
 
     Options
       ${getFlagListOutput(flags, 6)}
@@ -1498,12 +1533,13 @@ async function run$z(argv, importMeta, {
   });
   const githubEventBefore = String(cli.flags['githubEventBefore'] || '');
   const githubEventAfter = String(cli.flags['githubEventAfter'] || '');
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await runAction(githubEventBefore, githubEventAfter);
 }
 
 const {
   API_V0_URL
-} = constants.constants;
+} = constants;
 function handleUnsuccessfulApiResponse(_name, result, spinner) {
   // SocketSdkErrorType['error'] is not typed.
   const resultErrorMessage = result.error?.message;
@@ -1763,12 +1799,11 @@ const config$y = {
       description: 'Path to a local file to save the output'
     }
   },
-  help: (parentName, {
-    commandName,
+  help: (command, {
     flags
   }) => `
     Usage
-      $ ${parentName} ${commandName} --scope=<scope> --time=<time filter>
+      $ ${command} --scope=<scope> --time=<time filter>
 
     Default parameters are set to show the organization-level analytics over the
     last 7 days.
@@ -1777,9 +1812,9 @@ const config$y = {
       ${getFlagListOutput(flags, 6)}
 
     Examples
-      $ ${parentName} ${commandName} --scope=org --time=7
-      $ ${parentName} ${commandName} --scope=org --time=30
-      $ ${parentName} ${commandName} --scope=repo --repo=test-repo --time=30
+      $ ${command} --scope=org --time=7
+      $ ${command} --scope=org --time=30
+      $ ${command} --scope=repo --repo=test-repo --time=30
   `
 };
 const cmdAnalytics = {
@@ -1805,14 +1840,17 @@ async function run$y(argv, importMeta, {
   const badTime = time !== 7 && time !== 30 && time !== 90;
   const badRepo = scope === 'repo' && !repo;
   if (badScope || badTime || badRepo) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Scope must be "repo" or "org" ${badScope ? colors.red('(bad!)') : colors.green('(ok)')}\n
       - The time filter must either be 7, 30 or 90 ${badTime ? colors.red('(bad!)') : colors.green('(ok)')}\n
-      - Repository name using --repo when scope is "repo" ${badRepo ? colors.red('(bad!)') : colors.green('(ok)')}\n
-    `);
-    cli.showHelp();
+      - Repository name using --repo when scope is "repo" ${badRepo ? colors.red('(bad!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API token.');
@@ -1932,12 +1970,15 @@ async function run$x(argv, importMeta, {
   const type = String(cli.flags['type'] || '');
   const [orgSlug = ''] = cli.input;
   if (!orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
-    - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-    `);
-    config$x.help(parentName, config$x);
+    - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -1965,7 +2006,7 @@ const {
   PNPM: PNPM$8,
   cdxgenBinPath,
   synpBinPath
-} = constants.constants;
+} = constants;
 const nodejsPlatformTypes = new Set(['javascript', 'js', 'nodejs', NPM$e, PNPM$8, 'ts', 'tsx', 'typescript']);
 async function runCycloneDX(yargv) {
   let cleanupPackageLock = false;
@@ -2028,7 +2069,6 @@ function argvToArray(argv) {
 }
 
 // import { meowOrExit } from '../../utils/meow-with-subcommands'
-
 // TODO: convert yargs to meow. Or convert all the other things to yargs.
 const toLower = arg => arg.toLowerCase();
 const arrayToLower = arg => arg.map(toLower);
@@ -2100,23 +2140,36 @@ const yargsConfig = {
   string: ['api-key', 'lifecycle', 'output', 'parent-project-id', 'profile', 'project-group', 'project-name', 'project-version', 'project-id', 'server-host', 'server-port', 'server-url', 'spec-version']
 };
 const config$w = {
+  commandName: 'cdxgen',
   description: 'Create an SBOM with CycloneDX generator (cdxgen)',
-  hidden: false};
+  hidden: false,
+  flags: {
+    // TODO: convert from yargsConfig
+  },
+  help: (command, config) => `
+    Usage
+      $ ${command} [options]
+
+    Options
+      ${getFlagListOutput(config.flags, 6)}
+  `
+};
 const cmdCdxgen = {
   description: config$w.description,
   hidden: config$w.hidden,
   run: run$w
 };
-async function run$w(argv, _importMeta, {
-  parentName: _parentName
+async function run$w(argv, importMeta, {
+  parentName
 }) {
-  // const cli = meowOrExit({
-  //   allowUnknownFlags: true,
-  //   argv,
-  //   config,
-  //   importMeta,
-  //   parentName,
-  // })
+  const cli = meowOrExit({
+    allowUnknownFlags: true,
+    argv: argv.filter(s => s !== '--help' && s !== '-h'),
+    // Don't let meow take over --help
+    config: config$w,
+    importMeta,
+    parentName
+  });
   //
   //
   // if (cli.input.length)
@@ -2137,13 +2190,17 @@ async function run$w(argv, _importMeta, {
     length: unknownLength
   } = unknown;
   if (unknownLength) {
-    process$1.exitCode = 1;
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process$1.exitCode = 2;
     console.error(`Unknown ${words.pluralize('argument', unknownLength)}: ${yargv._.join(', ')}`);
     return;
   }
   if (yargv.output === undefined) {
     yargv.output = 'socket-cdx.json';
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await runCycloneDX(yargv);
 }
 
@@ -2246,6 +2303,7 @@ async function run$v(argv, importMeta, {
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
 
   // TODO: markdown flag is ignored
   await findDependencies({
@@ -2357,14 +2415,17 @@ async function run$u(argv, importMeta, {
   const after = String(cli.flags['after'] || '');
   const [orgSlug = ''] = cli.input;
   if (!before || !after || cli.input.length < 1) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Specify a before and after full scan ID ${!before && !after ? colors.red('(missing before and after!)') : !before ? colors.red('(missing before!)') : !after ? colors.red('(missing after!)') : colors.green('(ok)')}\n
           - To get full scans IDs, you can run the command "socket scan list <your org slug>".
-      - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n}
-    `);
-    config$u.help(parentName, config$u);
+      - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -2401,7 +2462,7 @@ const cmdDiffScan = {
 
 const {
   NPM: NPM$d
-} = constants.constants;
+} = constants;
 function isTopLevel(tree, node) {
   return tree.children.get(node.name) === node;
 }
@@ -2507,7 +2568,9 @@ const config$t = {
   commandName: 'fix',
   description: 'Fix "fixable" Socket alerts',
   hidden: true,
-  flags: {},
+  flags: {
+    ...commonFlags
+  },
   help: (command, config) => `
     Usage
       $ ${command}
@@ -2524,12 +2587,13 @@ const cmdFix = {
 async function run$t(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     argv,
     config: config$t,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await runFix();
 }
 
@@ -2778,23 +2842,21 @@ async function run$s(argv, importMeta, {
     importMeta,
     parentName
   });
-  if (cli.input.length > 1) {
-    throw new index.InputError('Only one package lookup supported at once');
-  }
-  const {
-    0: rawPkgName = ''
-  } = cli.input;
-  let showHelp = cli.flags['help'];
-  if (!rawPkgName) {
-    showHelp = true;
-  }
-  if (showHelp) {
-    cli.showHelp();
+  const [rawPkgName = ''] = cli.input;
+  if (!rawPkgName || cli.input.length > 1) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
+    console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
+      - Expecting a package name ${!rawPkgName ? colors.red('(missing!)') : colors.green('(ok)')}\n
+      - Can only accept one package at a time ${cli.input.length > 1 ? colors.red('(got ' + cli.input.length + '!)') : colors.green('(ok)')}\n`);
     return;
   }
   const versionSeparator = rawPkgName.lastIndexOf('@');
   const pkgName = versionSeparator < 1 ? rawPkgName : rawPkgName.slice(0, versionSeparator);
   const pkgVersion = versionSeparator < 1 ? 'latest' : rawPkgName.slice(versionSeparator + 1);
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await getPackageInfo({
     commandName: `${parentName} ${config$s.commandName}`,
     includeAllIssues: Boolean(cli.flags['all']),
@@ -2817,7 +2879,7 @@ function applyLogin(apiToken, enforcedOrgs, apiBaseUrl, apiProxy) {
 
 const {
   SOCKET_PUBLIC_API_TOKEN
-} = constants.constants;
+} = constants;
 async function attemptLogin(apiBaseUrl, apiProxy) {
   const apiToken = (await prompts.password({
     message: `Enter your ${terminalLink('Socket.dev API key', 'https://docs.socket.dev/docs/api-keys')} (leave blank for a public key)`
@@ -2883,6 +2945,7 @@ const config$r = {
   description: 'Socket API login',
   hidden: false,
   flags: {
+    ...commonFlags,
     apiBaseUrl: {
       type: 'string',
       description: 'API server to connect to for login'
@@ -2920,11 +2983,12 @@ async function run$r(argv, importMeta, {
     importMeta,
     parentName
   });
+  let apiBaseUrl = cli.flags['apiBaseUrl'];
+  let apiProxy = cli.flags['apiProxy'];
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   if (!isInteractive()) {
     throw new index.InputError('Cannot prompt for credentials in a non-interactive shell');
   }
-  let apiBaseUrl = cli.flags['apiBaseUrl'];
-  let apiProxy = cli.flags['apiProxy'];
   await attemptLogin(apiBaseUrl, apiProxy);
 }
 
@@ -2948,7 +3012,9 @@ const config$q = {
   commandName: 'logout',
   description: 'Socket API logout',
   hidden: false,
-  flags: {},
+  flags: {
+    ...commonFlags
+  },
   help: (command, _config) => `
     Usage
       $ ${command}
@@ -2964,12 +3030,13 @@ const cmdLogout = {
 async function run$q(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     argv,
     config: config$q,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   attemptLogout();
 }
 
@@ -2999,7 +3066,7 @@ async function convertGradleToMaven(target, bin, _out, verbose, gradleOpts) {
     // We could do a .socket folder. We could do a socket.pom.gz with all the poms, although I'd prefer something plain-text if it is to be committed.
 
     // Note: init.gradle will be exported by .config/rollup.dist.config.mjs
-    const initLocation = path.join(constants.constants.rootDistPath, 'init.gradle');
+    const initLocation = path.join(constants.rootDistPath, 'init.gradle');
     const commandArgs = ['--init-script', initLocation, ...gradleOpts, 'pom'];
     if (verbose) {
       console.log('\n[VERBOSE] Executing:', bin, commandArgs);
@@ -3146,13 +3213,11 @@ const cmdManifestGradle = {
 async function run$p(argv, importMeta, {
   parentName
 }) {
-  // note: meow will exit if it prints the --help screen
-  const cli = meow(config$p.help(parentName, config$p), {
-    flags: config$p.flags,
-    argv: argv.length === 0 ? ['--help'] : argv,
-    description: config$p.description,
-    allowUnknownFlags: false,
-    importMeta
+  const cli = meowOrExit({
+    argv,
+    config: config$p,
+    importMeta,
+    parentName
   });
   const verbose = Boolean(cli.flags['verbose']);
   if (verbose) {
@@ -3163,15 +3228,18 @@ async function run$p(argv, importMeta, {
     console.groupEnd();
   }
   const target = cli.input[0];
-  if (!target) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Missing DIR argument. See \`${parentName} ${config$p.commandName} --help\` for details.`);
-    process.exit(1);
-  }
-  if (cli.input.length > 1) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Can only accept one FILE or DIR, received ${cli.input.length} (make sure to escape spaces!). See \`${parentName} ${config$p.commandName} --help\` for details.`);
-    process.exit(1);
+
+  // TODO: I'm not sure it's feasible to parse source file from stdin. We could try, store contents in a file in some folder, target that folder... what would the file name be?
+
+  if (!target || target === '-' || cli.input.length > 1) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
+    console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
+      - The DIR arg is required ${!target ? colors.red('(missing!)') : target === '-' ? colors.red('(stdin is not supported)') : colors.green('(ok)')}\n
+      - Can only accept one DIR (make sure to escape spaces!) ${cli.input.length > 1 ? colors.red(`(received ${cli.input.length}!)`) : colors.green('(ok)')}\n`);
+    return;
   }
   let bin;
   if (cli.flags['bin']) {
@@ -3186,12 +3254,6 @@ async function run$p(argv, importMeta, {
   if (cli.flags['stdout']) {
     out = '-';
   }
-
-  // TODO: I'm not sure it's feasible to parse source file from stdin. We could try, store contents in a file in some folder, target that folder... what would the file name be?
-  if (target === '-') {
-    new spinner.Spinner().start('Parsing...').error(`Failure: Currently source code from stdin is not supported. See \`${parentName} ${config$p.commandName} --help\` for details.`);
-    process.exit(1);
-  }
   if (verbose) {
     console.group();
     console.log('- target:', target);
@@ -3203,6 +3265,7 @@ async function run$p(argv, importMeta, {
   if (cli.flags['gradleOpts']) {
     gradleOpts = cli.flags['gradleOpts'].split(' ').map(s => s.trim()).filter(Boolean);
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await convertGradleToMaven(target, bin, out, verbose, gradleOpts);
 }
 
@@ -3299,7 +3362,7 @@ async function convertSbtToMaven(target, bin, out, verbose, sbtOpts) {
 }
 
 const config$o = {
-  commandName: 'kotlin',
+  commandName: 'scala',
   description: "[beta] Generate a manifest file (`pom.xml`) from Scala's `build.sbt` file",
   hidden: false,
   flags: {
@@ -3376,13 +3439,11 @@ async function run$o(argv, importMeta, {
   parentName
 }) {
   // console.log('scala', argv, parentName)
-  // note: meow will exit if it prints the --help screen
-  const cli = meow(config$o.help(parentName, config$o), {
-    flags: config$o.flags,
-    argv: argv.length === 0 ? ['--help'] : argv,
-    description: config$o.description,
-    allowUnknownFlags: false,
-    importMeta
+  const cli = meowOrExit({
+    argv,
+    config: config$o,
+    importMeta,
+    parentName
   });
   const verbose = Boolean(cli.flags['verbose']);
   if (verbose) {
@@ -3393,15 +3454,18 @@ async function run$o(argv, importMeta, {
     console.groupEnd();
   }
   const target = cli.input[0];
-  if (!target) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Missing FILE|DIR argument. See \`${parentName} ${config$o.commandName} --help\` for details.`);
-    process.exit(1);
-  }
-  if (cli.input.length > 1) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Can only accept one FILE or DIR, received ${cli.input.length} (make sure to escape spaces!). See \`${parentName} ${config$o.commandName} --help\` for details.`);
-    process.exit(1);
+
+  // TODO: I'm not sure it's feasible to parse source file from stdin. We could try, store contents in a file in some folder, target that folder... what would the file name be?
+
+  if (!target || target === '-' || cli.input.length > 1) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
+    console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
+      - The DIR or FILE arg is required ${!target ? colors.red('(missing!)') : target === '-' ? colors.red('(stdin is not supported)') : colors.green('(ok)')}\n
+      - Can only accept one DIR or FILE (make sure to escape spaces!) ${cli.input.length > 1 ? colors.red(`(received ${cli.input.length}!)`) : colors.green('(ok)')}\n`);
+    return;
   }
   let bin = 'sbt';
   if (cli.flags['bin']) {
@@ -3421,16 +3485,11 @@ async function run$o(argv, importMeta, {
     console.log('- out:', out);
     console.groupEnd();
   }
-
-  // TODO: we can make `-` (accept from stdin) work by storing it into /tmp
-  if (target === '-') {
-    new spinner.Spinner().start('Parsing...').error(`Failure: Currently source code from stdin is not supported. See \`${parentName} ${config$o.commandName} --help\` for details.`);
-    process.exit(1);
-  }
   let sbtOpts = [];
   if (cli.flags['sbtOpts']) {
     sbtOpts = cli.flags['sbtOpts'].split(' ').map(s => s.trim()).filter(Boolean);
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await convertSbtToMaven(target, bin, out, verbose, sbtOpts);
 }
 
@@ -3471,12 +3530,11 @@ const cmdManifestAuto = {
 async function run$n(argv, importMeta, {
   parentName
 }) {
-  const cli = meow(config$n.help(parentName, config$n), {
+  const cli = meowOrExit({
     argv,
-    description: config$n.description,
+    config: config$n,
     importMeta,
-    flags: config$n.flags,
-    allowUnknownFlags: false
+    parentName
   });
   const verbose = !!cli.flags['verbose'];
   const cwd = cli.flags['cwd'] ?? process.cwd();
@@ -3499,6 +3557,7 @@ async function run$n(argv, importMeta, {
       subArgs.push('--cwd', cwd);
     }
     subArgs.push(dir);
+    if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
     await cmdManifestScala.run(subArgs, importMeta, {
       parentName
     });
@@ -3510,11 +3569,13 @@ async function run$n(argv, importMeta, {
       // This command takes the cwd as first arg.
       subArgs.push(cwd);
     }
+    if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
     await cmdManifestGradle.run(subArgs, importMeta, {
       parentName
     });
     return;
   }
+
   // Show new help screen and exit.
   meow(`
     $ ${parentName} ${config$n.commandName}
@@ -3619,13 +3680,11 @@ const cmdManifestKotlin = {
 async function run$m(argv, importMeta, {
   parentName
 }) {
-  // note: meow will exit if it prints the --help screen
-  const cli = meow(config$m.help(parentName, config$m), {
-    flags: config$m.flags,
-    argv: argv.length === 0 ? ['--help'] : argv,
-    description: config$m.description,
-    allowUnknownFlags: false,
-    importMeta
+  const cli = meowOrExit({
+    argv,
+    config: config$m,
+    importMeta,
+    parentName
   });
   const verbose = Boolean(cli.flags['verbose']);
   if (verbose) {
@@ -3636,15 +3695,18 @@ async function run$m(argv, importMeta, {
     console.groupEnd();
   }
   const target = cli.input[0];
-  if (!target) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Missing DIR argument. See \`${parentName} ${config$m.commandName} --help\` for details.`);
-    process.exit(1);
-  }
-  if (cli.input.length > 1) {
-    // will exit.
-    new spinner.Spinner().start('Parsing...').error(`Failure: Can only accept one FILE or DIR, received ${cli.input.length} (make sure to escape spaces!). See \`${parentName} ${config$m.commandName} --help\` for details.`);
-    process.exit(1);
+
+  // TODO: I'm not sure it's feasible to parse source file from stdin. We could try, store contents in a file in some folder, target that folder... what would the file name be?
+
+  if (!target || target === '-' || cli.input.length > 1) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
+    console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
+      - The DIR arg is required ${!target ? colors.red('(missing!)') : target === '-' ? colors.red('(stdin is not supported)') : colors.green('(ok)')}\n
+      - Can only accept one DIR (make sure to escape spaces!) ${cli.input.length > 1 ? colors.red(`(received ${cli.input.length}!)`) : colors.green('(ok)')}\n`);
+    return;
   }
   let bin;
   if (cli.flags['bin']) {
@@ -3659,12 +3721,6 @@ async function run$m(argv, importMeta, {
   if (cli.flags['stdout']) {
     out = '-';
   }
-
-  // TODO: I'm not sure it's feasible to parse source file from stdin. We could try, store contents in a file in some folder, target that folder... what would the file name be?
-  if (target === '-') {
-    new spinner.Spinner().start('Parsing...').error(`Failure: Currently source code from stdin is not supported. See \`${parentName} ${config$m.commandName} --help\` for details.`);
-    process.exit(1);
-  }
   if (verbose) {
     console.group();
     console.log('- target:', target);
@@ -3676,6 +3732,7 @@ async function run$m(argv, importMeta, {
   if (cli.flags['gradleOpts']) {
     gradleOpts = cli.flags['gradleOpts'].split(' ').map(s => s.trim()).filter(Boolean);
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await convertGradleToMaven(target, bin, out, verbose, gradleOpts);
 }
 
@@ -3718,16 +3775,16 @@ async function run$l(argv, importMeta, {
 const {
   NPM: NPM$b,
   SHADOW_BIN: SHADOW_BIN$1
-} = constants.constants;
+} = constants;
 async function wrapNpm(argv) {
   // Lazily access constants.distPath.
-  const shadowBin = require(`${constants.constants.distPath}/${SHADOW_BIN$1}.js`);
+  const shadowBin = require(`${constants.distPath}/${SHADOW_BIN$1}.js`);
   await shadowBin(NPM$b, argv);
 }
 
 const {
   NPM: NPM$a
-} = constants.constants;
+} = constants;
 const config$k = {
   commandName: 'npm',
   description: `${NPM$a} wrapper functionality`,
@@ -3746,29 +3803,30 @@ const cmdNpm = {
 async function run$k(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     allowUnknownFlags: true,
     argv,
     config: config$k,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await wrapNpm(argv);
 }
 
 const {
   NPX: NPX$2,
   SHADOW_BIN
-} = constants.constants;
+} = constants;
 async function wrapNpx(argv) {
   // Lazily access constants.distPath.
-  const shadowBin = require(`${constants.constants.distPath}/${SHADOW_BIN}.js`);
+  const shadowBin = require(`${constants.distPath}/${SHADOW_BIN}.js`);
   await shadowBin(NPX$2, argv);
 }
 
 const {
   NPX: NPX$1
-} = constants.constants;
+} = constants;
 const config$j = {
   commandName: 'npx',
   description: `${NPX$1} wrapper functionality`,
@@ -3787,13 +3845,14 @@ const cmdNpx = {
 async function run$j(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     allowUnknownFlags: true,
     argv,
     config: config$j,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await wrapNpx(argv);
 }
 
@@ -3801,7 +3860,9 @@ const config$i = {
   commandName: 'oops',
   description: 'Trigger an intentional error (for development)',
   hidden: true,
-  flags: {},
+  flags: {
+    ...commonFlags
+  },
   help: (parentName, config) => `
     Usage
       $ ${parentName} ${config.commandName}
@@ -3817,12 +3878,13 @@ const cmdOops = {
 async function run$i(argv, importMeta, {
   parentName
 }) {
-  meow(config$i.help(parentName, config$i), {
+  const cli = meowOrExit({
     argv,
-    description: config$i.description,
+    config: config$i,
     importMeta,
-    flags: config$i.flags
+    parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   throw new Error('This error was intentionally left blank');
 }
 
@@ -3833,7 +3895,7 @@ const {
   VLT: VLT$6,
   YARN_BERRY: YARN_BERRY$6,
   YARN_CLASSIC: YARN_CLASSIC$6
-} = constants.constants;
+} = constants;
 function matchHumanStdout(stdout, name) {
   return stdout.includes(` ${name}@`);
 }
@@ -3861,7 +3923,7 @@ const {
   YARN,
   YARN_BERRY: YARN_BERRY$5,
   YARN_CLASSIC: YARN_CLASSIC$5
-} = constants.constants;
+} = constants;
 const AGENTS = [BUN$5, NPM$8, PNPM$6, YARN_BERRY$5, YARN_CLASSIC$5, VLT$5];
 const binByAgent = {
   __proto__: null,
@@ -4003,7 +4065,7 @@ async function detect({
   };
   let lockSrc;
   // Lazily access constants.maintainedNodeVersions.
-  let minimumNodeVersion = constants.constants.maintainedNodeVersions.previous;
+  let minimumNodeVersion = constants.maintainedNodeVersions.previous;
   if (pkgJson) {
     const browserField = pkgJson.browser;
     if (strings.isNonEmptyString(browserField) || objects.isObjectObject(browserField)) {
@@ -4031,7 +4093,7 @@ async function detect({
       }
     }
     // Lazily access constants.maintainedNodeVersions.
-    targets.node = constants.constants.maintainedNodeVersions.some(v => semver.satisfies(v, `>=${minimumNodeVersion}`));
+    targets.node = constants.maintainedNodeVersions.some(v => semver.satisfies(v, `>=${minimumNodeVersion}`));
     lockSrc = typeof lockPath === 'string' ? await readLockFileByAgent[agent](lockPath, agentExecPath) : undefined;
   } else {
     lockBasename = undefined;
@@ -4058,7 +4120,7 @@ const {
   NPM: NPM$7,
   VLT: VLT$4,
   YARN_BERRY: YARN_BERRY$4
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE$2 = 'Socket Optimize';
 const manifestNpmOverrides = registry.getManifestData(NPM$7);
 async function detectAndValidatePackageManager(cwd, prod) {
@@ -4158,7 +4220,7 @@ const {
   VLT: VLT$3,
   YARN_BERRY: YARN_BERRY$3,
   YARN_CLASSIC: YARN_CLASSIC$4
-} = constants.constants;
+} = constants;
 function getOverridesDataBun(pkgJson) {
   const overrides = pkgJson?.[RESOLUTIONS$1] ?? {};
   return {
@@ -4226,7 +4288,7 @@ const getOverridesDataByAgent = {
 
 const {
   PNPM: PNPM$4
-} = constants.constants;
+} = constants;
 const PNPM_WORKSPACE = `${PNPM$4}-workspace`;
 async function getWorkspaceGlobs(agent, pkgPath, pkgJson) {
   let workspacePatterns;
@@ -4275,7 +4337,7 @@ const {
   VLT: VLT$2,
   YARN_BERRY: YARN_BERRY$2,
   YARN_CLASSIC: YARN_CLASSIC$3
-} = constants.constants;
+} = constants;
 function lockIncludesNpm(lockSrc, name) {
   // Detects the package name in the following cases:
   //   "name":
@@ -4332,7 +4394,7 @@ const {
   VLT: VLT$1,
   YARN_BERRY: YARN_BERRY$1,
   YARN_CLASSIC: YARN_CLASSIC$2
-} = constants.constants;
+} = constants;
 function cleanupQueryStdout(stdout) {
   if (stdout === '') {
     return '';
@@ -4464,7 +4526,7 @@ const {
   VLT,
   YARN_BERRY,
   YARN_CLASSIC: YARN_CLASSIC$1
-} = constants.constants;
+} = constants;
 const PNPM_FIELD_NAME = PNPM$1;
 const depFields = ['dependencies', 'devDependencies', 'peerDependencies', 'peerDependenciesMeta', 'optionalDependencies', 'bundleDependencies'];
 function getEntryIndexes(entries, keys) {
@@ -4576,7 +4638,7 @@ const {
   NPM: NPM$2,
   SOCKET_CLI_SAFE_WRAPPER,
   abortSignal: abortSignal$2
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE$1 = 'Socket Optimize';
 const NPM_OVERRIDE_PR_URL = 'https://github.com/npm/cli/pull/7025';
 async function updatePackageLockJson(lockName, agentExecPath, agent, spinner) {
@@ -4617,7 +4679,7 @@ const {
   NPM: NPM$1,
   PNPM,
   YARN_CLASSIC
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE = 'Socket Optimize';
 async function applyOptimization(cwd, pin, prod) {
   const pkgMgrData = await detectAndValidatePackageManager(cwd, prod);
@@ -4855,7 +4917,7 @@ async function addOverrides({
 }
 
 const config$h = {
-  commandName: 'create',
+  commandName: 'optimize',
   description: 'Optimize dependencies with @socketregistry overrides',
   hidden: false,
   flags: {
@@ -4898,6 +4960,7 @@ async function run$h(argv, importMeta, {
     parentName
   });
   const cwd = process$1.cwd();
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await applyOptimization(cwd, Boolean(cli.flags['pin']), Boolean(cli.flags['prod']));
 }
 
@@ -4944,18 +5007,19 @@ const cmdOrganizations = {
 async function run$g(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     argv,
     config: config$g,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await getOrganizations();
 }
 
 const {
   abortSignal: abortSignal$1
-} = constants.constants;
+} = constants;
 async function runRawNpm(argv) {
   const spawnPromise = spawn(npmPaths.getNpmBinPath(), argv.slice(0), {
     signal: abortSignal$1,
@@ -4977,7 +5041,7 @@ async function runRawNpm(argv) {
 
 const {
   NPM
-} = constants.constants;
+} = constants;
 const config$f = {
   commandName: 'raw-npm',
   description: `Temporarily disable the Socket ${NPM} wrapper`,
@@ -5002,19 +5066,20 @@ const cmdRawNpm = {
 async function run$f(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     allowUnknownFlags: true,
     argv,
     config: config$f,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await runRawNpm(argv);
 }
 
 const {
   abortSignal
-} = constants.constants;
+} = constants;
 async function runRawNpx(argv) {
   const spawnPromise = spawn(npmPaths.getNpxBinPath(), argv, {
     signal: abortSignal,
@@ -5036,7 +5101,7 @@ async function runRawNpx(argv) {
 
 const {
   NPX
-} = constants.constants;
+} = constants;
 const config$e = {
   commandName: 'raw-npx',
   description: `Temporarily disable the Socket ${NPX} wrapper`,
@@ -5061,13 +5126,14 @@ const cmdRawNpx = {
 async function run$e(argv, importMeta, {
   parentName
 }) {
-  meowOrExit({
+  const cli = meowOrExit({
     allowUnknownFlags: true,
     argv,
     config: config$e,
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await runRawNpx(argv);
 }
 
@@ -5263,15 +5329,15 @@ async function run$d(argv, importMeta, {
   const strict = Boolean(cli.flags['strict']);
   const includeAllIssues = Boolean(cli.flags['all']);
   const view = Boolean(cli.flags['view']);
+
+  // Note exiting earlier to skirt a hidden auth requirement
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const socketConfig = await getSocketConfig(absoluteConfigPath);
   const result = await createReport(socketConfig, cli.input, {
     cwd,
     dryRun
   });
   const commandName = `${parentName} ${config$d.commandName}`;
-  if (dryRun && view) {
-    console.log('[dryrun] Ignoring view flag since no report was actually generated');
-  }
   if (result?.success) {
     if (view) {
       const reportId = result.data.id;
@@ -5332,13 +5398,16 @@ async function run$c(argv, importMeta, {
 
   // Validate the input.
   if (extraInput.length || !reportId) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Need at least one report ID ${!reportId ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Can only handle a single report ID ${extraInput.length < 2 ? colors.red(`(received ${extraInput.length}!)`) : colors.green('(ok)')}\n
-    `);
-    cli.showHelp();
+      - Can only handle a single report ID ${extraInput.length < 2 ? colors.red(`(received ${extraInput.length}!)`) : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   await viewReport(reportId, {
     all: Boolean(cli.flags['all']),
     commandName: `${parentName} ${config$c.commandName}`,
@@ -5465,13 +5534,16 @@ async function run$b(argv, importMeta, {
   const repoName = cli.flags['repoName'];
   const [orgSlug = ''] = cli.input;
   if (!repoName || typeof repoName !== 'string' || !orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Repository name using --repoName ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n
-    `);
-    cli.showHelp();
+      - Repository name using --repoName ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -5504,19 +5576,24 @@ async function deleteRepo(orgSlug, repoName, apiToken) {
 }
 
 const config$a = {
-  commandName: 'delete',
+  commandName: 'del',
   description: 'Delete a repository in an organization',
   hidden: false,
-  flags: {},
-  help: (command, _config) => `
+  flags: {
+    ...commonFlags
+  },
+  help: (command, config) => `
     Usage
       $ ${command} <org slug> <repo slug>
 
+    Options
+      ${getFlagListOutput(config.flags, 6)}
+
     Examples
       $ ${command} FakeOrg test-repo
   `
 };
-const cmdReposDelete = {
+const cmdReposDel = {
   description: config$a.description,
   hidden: config$a.hidden,
   run: run$a
@@ -5532,14 +5609,17 @@ async function run$a(argv, importMeta, {
   });
   const [orgSlug = '', repoName = ''] = cli.input;
   if (!orgSlug || !repoName) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
       - Repository name as the second argument ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`
-    `);
-    cli.showHelp();
+      - At least one TARGET (e.g. \`.\` or \`./package.json\`\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -5655,13 +5735,16 @@ async function run$9(argv, importMeta, {
   });
   const [orgSlug = ''] = cli.input;
   if (!orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`
-    `);
-    cli.showHelp();
+      - At least one TARGET (e.g. \`.\` or \`./package.json\`\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -5712,7 +5795,7 @@ async function updateRepo({
 }
 
 const config$8 = {
-  commandName: 'create',
+  commandName: 'update',
   description: 'Update a repository in an organization',
   hidden: false,
   flags: {
@@ -5777,14 +5860,17 @@ async function run$8(argv, importMeta, {
   const repoName = cli.flags['repoName'];
   const [orgSlug = ''] = cli.input;
   if (!repoName || typeof repoName !== 'string' || !orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
       - Repository name using --repoName ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`
-    `);
-    cli.showHelp();
+      - At least one TARGET (e.g. \`.\` or \`./package.json\`\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -5877,13 +5963,16 @@ async function run$7(argv, importMeta, {
   const repoName = cli.flags['repoName'];
   const [orgSlug = ''] = cli.input;
   if (!repoName || typeof repoName !== 'string' || !orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Repository name using --repoName ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n
-    `);
-    cli.showHelp();
+      - Repository name using --repoName ${!repoName ? colors.red('(missing!)') : typeof repoName !== 'string' ? colors.red('(invalid!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -5898,16 +5987,16 @@ const cmdRepos = {
     parentName
   }) {
     await meowWithSubcommands({
-      cmdReposCreate,
-      cmdReposView,
-      cmdReposList,
-      cmdReposDelete,
-      cmdReposUpdate
+      create: cmdReposCreate,
+      view: cmdReposView,
+      list: cmdReposList,
+      del: cmdReposDel,
+      update: cmdReposUpdate
     }, {
       argv,
       description: description$1,
       importMeta,
-      name: `${parentName} repo`
+      name: `${parentName} repos`
     });
   }
 };
@@ -5991,6 +6080,10 @@ const config$6 = {
       type: 'string',
       description: 'working directory, defaults to process.cwd()'
     },
+    dryRun: {
+      type: 'boolean',
+      description: 'run input validation part of command without any concrete side effects'
+    },
     pullRequest: {
       type: 'number',
       shortFlag: 'pr',
@@ -6053,6 +6146,9 @@ async function run$6(argv, importMeta, {
   });
   const [orgSlug = '', ...targets] = cli.input;
   const cwd = cli.flags['cwd'] && cli.flags['cwd'] !== 'process.cwd()' ? String(cli.flags['cwd']) : process$1.cwd();
+
+  // Note exiting earlier to skirt a hidden auth requirement
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const socketSdk = await index.setupSdk();
   const supportedFiles = await socketSdk.getReportSupportedFiles().then(res => {
     if (!res.success) handleUnsuccessfulApiResponse('getReportSupportedFiles', res, new spinner.Spinner());
@@ -6069,12 +6165,15 @@ async function run$6(argv, importMeta, {
     repo: repoName
   } = cli.flags;
   if (!orgSlug || !repoName || !branchName || !packagePaths.length) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process$1.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
     - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
     - Repository name using --repo ${!repoName ? colors.red('(missing!)') : colors.green('(ok)')}\n
     - Branch name using --branch ${!branchName ? colors.red('(missing!)') : colors.green('(ok)')}\n
-    - At least one TARGET (e.g. \`.\` or \`./package.json\`) ${!packagePaths.length ? colors.red(targets.length > 0 ? '(TARGET' + (targets.length ? 's' : '') + ' contained no matching/supported files!)' : '(missing)') : colors.green('(ok)')}`);
-    config$6.help(parentName, config$6);
+    - At least one TARGET (e.g. \`.\` or \`./package.json\`) ${!packagePaths.length ? colors.red(targets.length > 0 ? '(TARGET' + (targets.length ? 's' : '') + ' contained no matching/supported files!)' : '(missing)') : colors.green('(ok)')}\n`);
     return;
   }
   const apiToken = index.getDefaultToken();
@@ -6131,7 +6230,7 @@ const config$5 = {
       $ ${command} FakeOrg 000aaaa1-0000-0a0a-00a0-00a0000000a0
   `
 };
-const cmdScanDelete = {
+const cmdScanDel = {
   description: config$5.description,
   hidden: config$5.hidden,
   run: run$5
@@ -6139,21 +6238,24 @@ const cmdScanDelete = {
 async function run$5(argv, importMeta, {
   parentName
 }) {
-  const cli = meow(config$5.help(parentName, config$5), {
+  const cli = meowOrExit({
     argv,
-    description: config$5.description,
+    config: config$5,
     importMeta,
-    flags: config$5.flags
+    parentName
   });
   const [orgSlug = '', fullScanId = ''] = cli.input;
   if (!orgSlug || !fullScanId) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Full Scan ID to delete as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}
-    `);
-    config$5.help(parentName, config$5);
+      - Full Scan ID to delete as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -6267,19 +6369,23 @@ const cmdScanList = {
 async function run$4(argv, importMeta, {
   parentName
 }) {
-  const cli = meow(config$4.help(parentName, config$4), {
+  const cli = meowOrExit({
     argv,
-    description: config$4.description,
+    config: config$4,
     importMeta,
-    flags: config$4.flags
+    parentName
   });
   const orgSlug = cli.input[0];
   if (!orgSlug) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
-    - Org name as the argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}`);
-    config$4.help(parentName, config$4);
+    - Org name as the argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -6341,21 +6447,24 @@ const cmdScanMetadata = {
 async function run$3(argv, importMeta, {
   parentName
 }) {
-  const cli = meow(config$3.help(parentName, config$3), {
+  const cli = meowOrExit({
     argv,
-    description: config$3.description,
+    config: config$3,
     importMeta,
-    flags: config$3.flags
+    parentName
   });
   const [orgSlug = '', fullScanId = ''] = cli.input;
   if (!orgSlug || !fullScanId) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Full Scan ID to inspect as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}
-    `);
-    config$3.help(parentName, config$3);
+      - Full Scan ID to inspect as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -6406,21 +6515,24 @@ const cmdScanStream = {
 async function run$2(argv, importMeta, {
   parentName
 }) {
-  const cli = meow(config$2.help(parentName, config$2), {
+  const cli = meowOrExit({
     argv,
-    description: config$2.description,
+    config: config$2,
     importMeta,
-    flags: config$2.flags
+    parentName
   });
   const [orgSlug = '', fullScanId = '', file = '-'] = cli.input;
   if (!orgSlug || !fullScanId) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
     console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required fields:\n
       - Org name as the first argument ${!orgSlug ? colors.red('(missing!)') : colors.green('(ok)')}\n
-      - Full Scan ID to fetch as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}
-    `);
-    config$2.help(parentName, config$2);
+      - Full Scan ID to fetch as second argument ${!fullScanId ? colors.red('(missing!)') : colors.green('(ok)')}\n`);
     return;
   }
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -6438,7 +6550,7 @@ const cmdScan = {
       create: cmdScanCreate,
       stream: cmdScanStream,
       list: cmdScanList,
-      del: cmdScanDelete,
+      del: cmdScanDel,
       metadata: cmdScanMetadata
     }, {
       argv,
@@ -6583,6 +6695,7 @@ async function run$1(argv, importMeta, {
     importMeta,
     parentName
   });
+  if (cli.flags['dryRun']) return console.log('[DryRun] Bailing now');
   const apiToken = index.getDefaultToken();
   if (!apiToken) {
     throw new index.AuthError('User must be authenticated to run this command. To log in, run the command `socket login` and enter your API key.');
@@ -6621,11 +6734,13 @@ function checkSocketWrapperSetup(file) {
   return false;
 }
 
-const HOME_DIR$1 = os.homedir();
-const BASH_FILE$1 = `${HOME_DIR$1}/.bashrc`;
-const ZSH_BASH_FILE$1 = `${HOME_DIR$1}/.zshrc`;
 function postinstallWrapper() {
-  const socketWrapperEnabled = fs.existsSync(BASH_FILE$1) && checkSocketWrapperSetup(BASH_FILE$1) || fs.existsSync(ZSH_BASH_FILE$1) && checkSocketWrapperSetup(ZSH_BASH_FILE$1);
+  // Lazily access constants.bashRcPath and constants.zshRcPath.
+  const {
+    bashRcPath,
+    zshRcPath
+  } = constants;
+  const socketWrapperEnabled = fs.existsSync(bashRcPath) && checkSocketWrapperSetup(bashRcPath) || fs.existsSync(zshRcPath) && checkSocketWrapperSetup(zshRcPath);
   if (!socketWrapperEnabled) {
     installSafeNpm(`The Socket CLI is now successfully installed! 🎉
 
@@ -6651,12 +6766,17 @@ function installSafeNpm(query) {
 function askQuestion(rl, query) {
   rl.question(query, ans => {
     if (ans.toLowerCase() === 'y') {
+      // Lazily access constants.bashRcPath and constants.zshRcPath.
+      const {
+        bashRcPath,
+        zshRcPath
+      } = constants;
       try {
-        if (fs.existsSync(BASH_FILE$1)) {
-          addSocketWrapper(BASH_FILE$1);
+        if (fs.existsSync(bashRcPath)) {
+          addSocketWrapper(bashRcPath);
         }
-        if (fs.existsSync(ZSH_BASH_FILE$1)) {
-          addSocketWrapper(ZSH_BASH_FILE$1);
+        if (fs.existsSync(zshRcPath)) {
+          addSocketWrapper(zshRcPath);
         }
       } catch (e) {
         throw new Error(`There was an issue setting up the alias: ${e}`);
@@ -6691,14 +6811,12 @@ function removeSocketWrapper(file) {
   });
 }
 
-const HOME_DIR = os.homedir();
-const BASH_FILE = `${HOME_DIR}/.bashrc`;
-const ZSH_BASH_FILE = `${HOME_DIR}/.zshrc`;
 const config = {
   commandName: 'wrapper',
   description: 'Enable or disable the Socket npm/npx wrapper',
   hidden: false,
   flags: {
+    ...commonFlags,
     enable: {
       type: 'boolean',
       default: false,
@@ -6742,31 +6860,42 @@ async function run(argv, importMeta, {
     parentName
   });
   const {
-    disable,
     enable
   } = cli.flags;
-  if (!enable && !disable) {
-    cli.showHelp();
+  if (!enable && !cli.flags['disable']) {
+    // Use exit status of 2 to indicate incorrect usage, generally invalid
+    // options or missing arguments.
+    // https://www.gnu.org/software/bash/manual/html_node/Exit-Status.html
+    process.exitCode = 2;
+    console.error(`${colors.bgRed(colors.white('Input error'))}: Please provide the required flags:\n
+      - Must use --enabled or --disabled\n`);
     return;
   }
+  if (cli.flags['dryRun']) {
+    return console.log('[DryRun] Bailing now');
+  }
+
+  // Lazily access constants.bashRcPath and constants.zshRcPath.
+  const {
+    bashRcPath,
+    zshRcPath
+  } = constants;
   if (enable) {
-    if (fs.existsSync(BASH_FILE)) {
-      const socketWrapperEnabled = checkSocketWrapperSetup(BASH_FILE);
-      !socketWrapperEnabled && addSocketWrapper(BASH_FILE);
+    if (fs.existsSync(bashRcPath) && !checkSocketWrapperSetup(bashRcPath)) {
+      addSocketWrapper(bashRcPath);
     }
-    if (fs.existsSync(ZSH_BASH_FILE)) {
-      const socketWrapperEnabled = checkSocketWrapperSetup(ZSH_BASH_FILE);
-      !socketWrapperEnabled && addSocketWrapper(ZSH_BASH_FILE);
+    if (fs.existsSync(zshRcPath) && !checkSocketWrapperSetup(zshRcPath)) {
+      addSocketWrapper(zshRcPath);
     }
   } else {
-    if (fs.existsSync(BASH_FILE)) {
-      removeSocketWrapper(BASH_FILE);
+    if (fs.existsSync(bashRcPath)) {
+      removeSocketWrapper(bashRcPath);
     }
-    if (fs.existsSync(ZSH_BASH_FILE)) {
-      removeSocketWrapper(ZSH_BASH_FILE);
+    if (fs.existsSync(zshRcPath)) {
+      removeSocketWrapper(zshRcPath);
     }
   }
-  if (!fs.existsSync(BASH_FILE) && !fs.existsSync(ZSH_BASH_FILE)) {
+  if (!fs.existsSync(bashRcPath) && !fs.existsSync(zshRcPath)) {
     console.error('There was an issue setting up the alias in your bash profile');
   }
 }
@@ -6774,7 +6903,7 @@ async function run(argv, importMeta, {
 const {
   SOCKET,
   rootPkgJsonPath
-} = constants.constants;
+} = constants;
 
 // TODO: Add autocompletion using https://socket.dev/npm/package/omelette
 void (async () => {
@@ -6847,5 +6976,5 @@ void (async () => {
     await index.captureException(e);
   }
 })();
-//# debugId=76e0c507-52ca-4166-8d91-8d85877f5cf0
+//# debugId=8d83e3d2-7856-4690-abbd-43eee8e6533b
 //# sourceMappingURL=cli.js.map