@socketsecurity/cli-with-sentry 1.0.20 → 1.0.22

package/external/@socketsecurity/registry/lib/constants/env.js

@@ -4,11 +4,18 @@ const { envAsBoolean, envAsString } = /*@__PURE__*/ require('../env')
 
 const { env } = process
 
+const DEBUG = envAsString(env.DEBUG)
+
 module.exports = Object.freeze({
   __proto__: null,
   // CI is always set to 'true' in a GitHub action.
   // https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables
   CI: envAsBoolean(env.CI),
+  // Flag set to enable debug logging.
+  DEBUG,
+  // Variable to set the debug log level
+  // (notice, error, warn, info, verbose, http, silly).
+  LOG_LEVEL: envAsString(env.LOG_LEVEL),
   // .github/workflows/provenance.yml defines this.
   // https://docs.github.com/en/actions/use-cases-and-examples/publishing-packages/publishing-nodejs-packages
   NODE_AUTH_TOKEN: envAsString(env.NODE_AUTH_TOKEN),
@@ -20,10 +27,8 @@ module.exports = Object.freeze({
   // PRE_COMMIT is set to '1' by our 'test-pre-commit' script run by the
   // .husky/pre-commit hook.
   PRE_COMMIT: envAsBoolean(env.PRE_COMMIT),
-  // Flag set to help debug Socket CLI.
-  // eslint-disable-next-line no-warning-comments
-  // TODO: Make the environment variable name configurable.
-  SOCKET_CLI_DEBUG: envAsBoolean(env.SOCKET_CLI_DEBUG),
+  // Flag set to enable debug logging in Socket CLI.
+  SOCKET_CLI_DEBUG: !!DEBUG || envAsBoolean(env.SOCKET_CLI_DEBUG),
   // TAP=1 is set by the tap-run test runner.
   // https://node-tap.org/environment/#environment-variables-used-by-tap
   TAP: envAsBoolean(env.TAP),

package/external/@socketsecurity/registry/lib/debug.js

@@ -1,55 +1,149 @@
 'use strict'
 
+const { apply: ReflectApply } = Reflect
+
+const { hasOwn } = /*@__PURE__*/ require('./objects')
 const { applyLinePrefix } = /*@__PURE__*/ require('./strings')
 
-const { apply: ReflectApply } = Reflect
+let _debugJs
+/*@__NO_SIDE_EFFECTS__*/
+function getDebugJs() {
+  if (_debugJs === undefined) {
+    // The 'debug' package is browser safe.
+    _debugJs = /*@__PURE__*/ require('../external/debug').default
+  }
+  return _debugJs
+}
+
+const debugByNamespace = new Map()
+/*@__NO_SIDE_EFFECTS__*/
+function getDebugJsInstance(namespace) {
+  let inst = debugByNamespace.get(namespace)
+  if (inst) {
+    return inst
+  }
+  const debugJs = getDebugJs()
+  const ENV = /*@__PURE__*/ require('./constants/env')
+  if (
+    !ENV.DEBUG &&
+    ENV.SOCKET_CLI_DEBUG &&
+    // Ignore 'inspect' namespace by default.
+    namespace !== 'inspect'
+  ) {
+    debugJs.enable(namespace)
+  }
+  inst = debugJs(namespace)
+  inst.log = customLog
+  debugByNamespace.set(namespace, inst)
+  return inst
+}
+
+let _util
+/*@__NO_SIDE_EFFECTS__*/
+function getUtil() {
+  if (_util === undefined) {
+    // Use non-'node:' prefixed require to avoid Webpack errors.
+    // eslint-disable-next-line n/prefer-node-protocol
+    _util = /*@__PURE__*/ require('util')
+  }
+  return _util
+}
 
 /*@__NO_SIDE_EFFECTS__*/
-function debugDir() {
-  if (isDebug()) {
-    const { logger } = /*@__PURE__*/ require('./logger')
-    ReflectApply(logger.dir, logger, arguments)
+function customLog() {
+  const { logger } = /*@__PURE__*/ require('./logger')
+  const debugJs = getDebugJs()
+  const util = getUtil()
+  ReflectApply(logger.info, logger, [
+    util.formatWithOptions(debugJs.inspectOpts, ...arguments)
+  ])
+}
+
+/*@__NO_SIDE_EFFECTS__*/
+function isEnabled(namespaces) {
+  if (typeof namespaces !== 'string' || !namespaces || namespaces === '*') {
+    return true
+  }
+  const split = namespaces
+    .trim()
+    .replace(/\s+/g, ',')
+    .split(',')
+    .filter(Boolean)
+  const names = []
+  const skips = []
+  for (const ns of split) {
+    if (ns.startsWith('-')) {
+      skips.push(ns.slice(1))
+    } else {
+      names.push(ns)
+    }
+  }
+  if (names.length && !names.some(ns => !!getDebugJsInstance(ns).enabled)) {
+    return false
+  }
+  return skips.every(ns => !getDebugJsInstance(ns).enabled)
+}
+
+/*@__NO_SIDE_EFFECTS__*/
+function debugDir(namespaces, obj, options) {
+  if (!isEnabled(namespaces)) {
+    return
   }
+  if (options === undefined) {
+    const debugJs = getDebugJs()
+    options = debugJs.inspectOpts
+  }
+  const { logger } = /*@__PURE__*/ require('./logger')
+  logger.dir(obj, options)
 }
 
 let pointingTriangle
 /*@__NO_SIDE_EFFECTS__*/
-function debugFn(...args) {
-  if (isDebug()) {
-    const { logger } = /*@__PURE__*/ require('./logger')
-    const { stack } = new Error()
-    let lineCount = 0
-    let lineStart = 0
-    let name = 'anonymous'
-    // Scan the stack trace character-by-character to find the 4th line
-    // (index 3), which is typically the caller of debugFn.
-    for (let i = 0, { length } = stack; i < length; i += 1) {
-      if (stack.charCodeAt(i) === 10 /*'\n'*/) {
-        lineCount += 1
-        if (lineCount < 4) {
-          // Store the start index of the next line.
-          lineStart = i + 1
-        } else {
-          // Extract the full line and trim it.
-          const line = stack.slice(lineStart, i).trimStart()
-          // Match the function name portion (e.g., "async runFix").
-          const match = /(?<=^at\s+).*?(?=\s+\(|$)/.exec(line)?.[0]
-          if (match) {
-            // Strip known V8 invocation prefixes to get the clean name.
-            name = match.replace(/^(?:async|bound|get|new|set)\s+/, '')
+function debugFn(namespaces, ...args) {
+  if (!isEnabled(namespaces)) {
+    return
+  }
+  const { stack } = new Error()
+  let lineCount = 0
+  let lineStart = 0
+  let name = 'anonymous'
+  // Scan the stack trace character-by-character to find the 4th line
+  // (index 3), which is typically the caller of debugFn.
+  for (let i = 0, { length } = stack; i < length; i += 1) {
+    if (stack.charCodeAt(i) === 10 /*'\n'*/) {
+      lineCount += 1
+      if (lineCount < 4) {
+        // Store the start index of the next line.
+        lineStart = i + 1
+      } else {
+        // Extract the full line and trim it.
+        const line = stack.slice(lineStart, i).trimStart()
+        // Match the function name portion (e.g., "async runFix").
+        const match = /(?<=^at\s+).*?(?=\s+\(|$)/.exec(line)?.[0]
+        if (match) {
+          name = match
+            // Strip known V8 invocation prefixes to get the name.
+            .replace(/^(?:async|bound|get|new|set)\s+/, '')
+          if (name.startsWith('Object.')) {
+            // Strip leading 'Object.' if not an own property of Object.
+            const afterDot = name.slice(7 /*'Object.'.length*/)
+            if (!hasOwn(Object, afterDot)) {
+              name = afterDot
+            }
           }
-          break
         }
+        break
       }
     }
-    if (pointingTriangle === undefined) {
-      const supported =
-        /*@__PURE__*/ require('../external/@socketregistry/is-unicode-supported')()
-      pointingTriangle = supported ? '▸' : '>'
-    }
-    const text = args.at(0)
-    const hasText = typeof text === 'string'
-    const logArgs = hasText
+  }
+  if (pointingTriangle === undefined) {
+    const supported =
+      /*@__PURE__*/ require('../external/@socketregistry/is-unicode-supported')()
+    pointingTriangle = supported ? '▸' : '>'
+  }
+  const text = args.at(0)
+  const logArgs =
+    typeof text === 'string'
       ? [
           applyLinePrefix(
             `${name ? `${name} ${pointingTriangle} ` : ''}${text}`,
@@ -58,24 +152,22 @@ function debugFn(...args) {
           ...args.slice(1)
         ]
       : args
-    ReflectApply(logger.info, logger, logArgs)
-  }
+  const { logger } = /*@__PURE__*/ require('./logger')
+  ReflectApply(logger.info, logger, logArgs)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function debugLog() {
-  if (isDebug()) {
-    const { logger } = /*@__PURE__*/ require('./logger')
-    ReflectApply(logger.info, logger, arguments)
+function debugLog(namespaces, ...args) {
+  if (!isEnabled(namespaces)) {
+    return
   }
+  ReflectApply(customLog, undefined, args)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isDebug() {
+function isDebug(namespaces) {
   const ENV = /*@__PURE__*/ require('./constants/env')
-  // eslint-disable-next-line no-warning-comments
-  // TODO: Make the environment variable name configurable.
-  return ENV.SOCKET_CLI_DEBUG
+  return ENV.SOCKET_CLI_DEBUG && isEnabled(namespaces)
 }
 
 module.exports = {

package/external/@socketsecurity/registry/lib/logger.js

@@ -1,10 +1,10 @@
 'use strict'
 
-const { applyLinePrefix, isBlankString } = /*@__PURE__*/ require('./strings')
-
 const globalConsole = console
 const { apply: ReflectApply, construct: ReflectConstruct } = Reflect
 
+const { applyLinePrefix, isBlankString } = /*@__PURE__*/ require('./strings')
+
 let _Console
 /*@__NO_SIDE_EFFECTS__*/
 function constructConsole(...args) {

package/external/@socketsecurity/registry/lib/packages.js

@@ -1,7 +1,5 @@
 'use strict'
 
-const semver = /*@__PURE__*/ require('../external/semver')
-
 const abortSignal = /*@__PURE__*/ require('./constants/abort-signal')
 const copyLeftLicenses = /*@__PURE__*/ require('./constants/copy-left-licenses')
 const LOOP_SENTINEL = /*@__PURE__*/ require('./constants/loop-sentinel')
@@ -706,6 +704,7 @@ function findTypesForSubpath(entryExports, subpath) {
 
 /*@__NO_SIDE_EFFECTS__*/
 function getReleaseTag(version) {
+  const semver = getSemver()
   return semver.prerelease(version)?.join('.') ?? 'latest'
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli-with-sentry",
-  "version": "1.0.20",
+  "version": "1.0.22",
   "description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -78,18 +78,18 @@
     "update:deps": "npx --yes npm-check-updates"
   },
   "devDependencies": {
-    "@babel/core": "7.27.7",
+    "@babel/core": "7.28.0",
     "@babel/plugin-proposal-export-default-from": "7.27.1",
     "@babel/plugin-transform-export-namespace-from": "7.27.1",
-    "@babel/plugin-transform-runtime": "7.27.4",
+    "@babel/plugin-transform-runtime": "7.28.0",
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.27.6",
-    "@biomejs/biome": "2.0.6",
-    "@coana-tech/cli": "14.9.34",
-    "@cyclonedx/cdxgen": "11.4.1",
-    "@dotenvx/dotenvx": "1.45.1",
+    "@biomejs/biome": "2.1.1",
+    "@coana-tech/cli": "14.10.1",
+    "@cyclonedx/cdxgen": "11.4.3",
+    "@dotenvx/dotenvx": "1.46.0",
     "@eslint/compat": "1.3.1",
-    "@eslint/js": "9.30.0",
+    "@eslint/js": "9.30.1",
     "@npmcli/arborist": "9.1.2",
     "@npmcli/config": "10.3.0",
     "@octokit/graphql": "9.0.1",
@@ -112,22 +112,22 @@
     "@socketregistry/is-interactive": "1.0.6",
     "@socketregistry/packageurl-js": "1.0.8",
     "@socketsecurity/config": "3.0.1",
-    "@socketsecurity/registry": "1.0.220",
+    "@socketsecurity/registry": "1.0.225",
     "@socketsecurity/sdk": "1.4.52",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",
     "@types/js-yaml": "4.0.9",
     "@types/micromatch": "4.0.9",
     "@types/mock-fs": "4.13.4",
-    "@types/node": "24.0.8",
+    "@types/node": "24.0.11",
     "@types/npmcli__arborist": "6.3.1",
     "@types/npmcli__config": "6.0.3",
     "@types/proc-log": "3.0.4",
     "@types/semver": "7.7.0",
     "@types/which": "3.0.4",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/parser": "8.35.1",
-    "@typescript/native-preview": "7.0.0-dev.20250701.1",
+    "@typescript-eslint/parser": "8.36.0",
+    "@typescript/native-preview": "7.0.0-dev.20250708.1",
     "@vitest/coverage-v8": "3.2.4",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
@@ -137,10 +137,10 @@
     "custompatch": "1.1.7",
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
-    "eslint": "9.30.0",
+    "eslint": "9.30.1",
     "eslint-import-resolver-typescript": "4.4.4",
     "eslint-plugin-import-x": "4.16.1",
-    "eslint-plugin-n": "17.20.0",
+    "eslint-plugin-n": "17.21.0",
     "eslint-plugin-sort-destructure-keys": "2.0.0",
     "eslint-plugin-unicorn": "56.0.1",
     "globals": "16.3.0",
@@ -158,11 +158,11 @@
     "npm-package-arg": "12.0.2",
     "npm-run-all2": "8.0.4",
     "open": "10.1.2",
-    "oxlint": "1.4.0",
+    "oxlint": "1.6.0",
     "pony-cause": "2.1.11",
     "registry-auth-token": "5.1.0",
     "registry-url": "7.2.0",
-    "rollup": "4.44.1",
+    "rollup": "4.44.2",
     "semver": "7.7.2",
     "synp": "1.9.14",
     "terminal-link": "2.1.1",
@@ -170,7 +170,7 @@
     "tinyglobby": "0.2.14",
     "trash": "9.0.0",
     "type-coverage": "2.29.7",
-    "typescript-eslint": "8.35.1",
+    "typescript-eslint": "8.36.0",
     "unplugin-purge-polyfills": "0.1.0",
     "vitest": "3.2.4",
     "which": "5.0.0",
@@ -239,6 +239,6 @@
     "strict": true
   },
   "dependencies": {
-    "@sentry/node": "9.34.0"
+    "@sentry/node": "9.36.0"
   }
 }

package/dist/types/commands/fix/open-pr.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"open-pr.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/open-pr.mts"],"names":[],"mappings":"AAGA,OAAO,EAEL,OAAO,IAAI,cAAc,EAC1B,MAAM,kBAAkB,CAAA;AAKzB,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAgB1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAoBrD,wBAAgB,iBAAiB,IAAI,OAAO,cAAc,CAczD;AAED,wBAAsB,UAAU,CAAC,CAAC,EAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,CAAC,CAAC,CAYZ;AA6BD,MAAM,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAA;AAEtD,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,SAAS,GACT,OAAO,GACP,OAAO,GACP,OAAO,GACP,WAAW,GACX,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,kBAAkB,CAAA;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,OAAO,EAAE,CAAC,CAsFpB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB,CAAA;AAED,wBAAsB,iBAAiB,CAAC,EACtC,OAAO,EAAE,IAAI,EACd,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmChC;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,uBAAuB,GAAG,SAAS,GAC5C,OAAO,CAAC,OAAO,EAAE,CAAC,CAIpB;AAmJD,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,MAAM,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,cAAc,EAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAkCrC;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,SAAgB,GAClB,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/types/shadow/npm/proc-log/index.d.mts

@@ -1,3 +0,0 @@
-export type Logger = typeof import('npmlog') | typeof import('proc-log') | undefined;
-export declare function getLogger(): Logger;
-//# sourceMappingURL=index.d.mts.map

package/dist/types/shadow/npm/proc-log/index.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../../src/shadow/npm/proc-log/index.mts"],"names":[],"mappings":"AA0CA,MAAM,MAAM,MAAM,GACd,cAAc,QAAQ,CAAC,GACvB,cAAc,UAAU,CAAC,GACzB,SAAS,CAAA;AAGb,wBAAgB,SAAS,IAAI,MAAM,CAclC"}