@socketsecurity/cli-with-sentry 1.0.85 → 1.0.86

package/dist/utils.js

@@ -815,6 +815,9 @@ function getOutputKind(json, markdown) {
   return 'text';
 }
 
+function camelToKebab(string) {
+  return string.replace(/([a-z])([A-Z])/g, '$1-$2').toLowerCase();
+}
 function getFlagListOutput(list, options) {
   const {
     keyPrefix = '--'
@@ -833,7 +836,7 @@ function getHelpListOutput(list, options) {
   const {
     indent = 6,
     keyPrefix = '',
-    padName = 18
+    padName = 20
   } = {
     __proto__: null,
     ...options
@@ -846,7 +849,8 @@ function getHelpListOutput(list, options) {
       continue;
     }
     const description = (require$$7.isObject(entry) ? entry.description : entry) || '';
-    result += ''.padEnd(indent) + (keyPrefix + name).padEnd(padName) + description + '\n';
+    const printedName = keyPrefix + camelToKebab(name);
+    result += ''.padEnd(indent) + printedName.padEnd(Math.max(printedName.length + 2, padName)) + description + '\n';
   }
   return result.trim() || '(none)';
 }
@@ -890,16 +894,16 @@ async function meowWithSubcommands(subcommands, options) {
   // Try to support `socket <purl>` as a shorthand for `socket package score <purl>`
   if (!isRootCommand) {
     if (commandOrAliasName?.startsWith('pkg:')) {
-      logger.logger.info('Note: Invoking `socket package score` now...');
+      logger.logger.info('Invoking `socket package score`.');
       return await meowWithSubcommands(subcommands, {
         ...options,
         argv: ['package', 'deep', ...argv]
       });
     }
-    // Support `socket npm/babel` or whatever as a shorthand, too.
+    // Support `socket npm/lodash` or whatever as a shorthand, too.
     // Accept any ecosystem and let the remote sort it out.
     if (/^[a-z]+\//.test(commandOrAliasName || '')) {
-      logger.logger.info('Note: Invoking `socket package score` now...');
+      logger.logger.info('Invoking `socket package score`.');
       return await meowWithSubcommands(subcommands, {
         ...options,
         argv: ['package', 'deep', `pkg:${commandOrAliasName}`, ...rawCommandArgv]
@@ -908,28 +912,28 @@ async function meowWithSubcommands(subcommands, options) {
   }
   if (isRootCommand) {
     flags$1['help'] = {
-      type: 'boolean',
-      hidden: false,
-      // Only show on root
-      description: 'Give you detailed help information about any sub-command'
+      ...flags$1['help'],
+      hidden: false
     };
     flags$1['config'] = {
-      type: 'string',
-      hidden: false,
-      // Only show on root
-      description: 'Allows you to temp overrides the internal CLI config'
+      ...flags$1['config'],
+      hidden: false
     };
     flags$1['dryRun'] = {
-      type: 'boolean',
-      hidden: false,
-      // Only show on root
-      description: 'Do input validation for a sub-command and then exit'
+      ...flags$1['dryRun'],
+      hidden: false
+    };
+    flags$1['maxOldSpaceSize'] = {
+      ...flags$1['maxOldSpaceSize'],
+      hidden: false
+    };
+    flags$1['maxSemiSpaceSize'] = {
+      ...flags$1['maxSemiSpaceSize'],
+      hidden: false
     };
     flags$1['version'] = {
-      type: 'boolean',
-      hidden: false,
-      // Only show on root
-      description: 'Show version of CLI'
+      ...flags$1['version'],
+      hidden: false
     };
     delete flags$1['json'];
     delete flags$1['markdown'];
@@ -939,20 +943,19 @@ async function meowWithSubcommands(subcommands, options) {
   }
 
   // This is basically a dry-run parse of cli args and flags. We use this to
-  // determine config overrides and expected output mode.
-  const cli1 = vendor.meow(`(this should never be printed)`, {
+  // determine config overrides and expected o mode.
+  const cli1 = vendor.meow({
     argv,
     importMeta,
     ...additionalOptions,
     flags: flags$1,
-    // Do not strictly check for flags here.
+    // Ensure we don't check unknown flags.
     allowUnknownFlags: true,
-    booleanDefault: undefined,
-    // We want to detect whether a bool flag is given at all.
-    // We will emit help when we're ready
-    // Plus, if we allow this then meow() can just exit here.
+    // Prevent meow from potentially exiting early.
     autoHelp: false,
-    autoVersion: false
+    autoVersion: false,
+    // We want to detect whether a bool flag is given at all.
+    booleanDefault: undefined
   });
   const orgFlag = String(cli1.flags['org'] || '') || undefined;
 
@@ -991,7 +994,7 @@ async function meowWithSubcommands(subcommands, options) {
     return;
   }
 
-  // If we got at least some args, then lets find out if we can find a command.
+  // If we got at least some args, then lets find o if we can find a command.
   if (commandOrAliasName) {
     const alias = aliases[commandOrAliasName];
     // First: Resolve argv data from alias if its an alias that's been given.
@@ -1005,7 +1008,7 @@ async function meowWithSubcommands(subcommands, options) {
       });
     }
   }
-  function formatCommandsForHelp(isRootCommand) {
+  const formatCommandsForHelp = isRootCommand => {
     if (!isRootCommand) {
       return getHelpListOutput({
         ...require$$7.toSortedObject(Object.fromEntries(Object.entries(subcommands).filter(({
@@ -1025,7 +1028,11 @@ async function meowWithSubcommands(subcommands, options) {
     }
 
     // "Bucket" some commands for easier usage.
-    const commands = new Set(['analytics', 'audit-log', 'config', 'fix', 'install', 'login', 'logout', 'manifest', 'npm', 'npx', 'optimize', 'organization', 'package', 'raw-npm', 'raw-npx', 'repos', 'scan', 'threat-feed', 'uninstall', 'wrapper']);
+    const commands = new Set(['analytics', 'audit-log', 'ci', 'cdxgen', 'config', 'deps', 'fix', 'install',
+    //'json',
+    'license', 'login', 'logout', 'manifest', 'npm', 'npx', 'optimize', 'organization', 'package', 'raw-npm', 'raw-npx', 'repository', 'scan',
+    //'security',
+    'threat-feed', 'uninstall', 'wrapper']);
     Object.entries(subcommands).filter(([_name, subcommand]) => !subcommand.hidden).map(([name]) => name).forEach(name => {
       if (commands.has(name)) {
         commands.delete(name);
@@ -1039,64 +1046,33 @@ async function meowWithSubcommands(subcommands, options) {
       // test snapshots we use joinAnd.
       arrays.joinAnd(Array.from(commands).sort(sorts.naturalCompare).map(c => `'${c}'`)));
     }
-    const out = [];
-    out.push('All commands have their own --help page');
-    out.push('');
-    out.push('    Main commands');
-    out.push('');
-    out.push('      socket login              Setup the Socket CLI with an API token and defaults');
-    out.push('      socket scan create        Create a new Scan and report');
-    out.push('      socket npm/eslint@1.0.0   Request the security score of a particular package');
-    out.push('      socket ci                 Shorthand for CI; socket scan create --report --no-interactive');
-    out.push('');
-    out.push('    Socket API');
-    out.push('');
-    out.push('      analytics                 Look up analytics data');
-    out.push('      audit-log                 Look up the audit log for an organization');
-    out.push('      organization              Manage organization account details');
-    out.push('      package                   Look up published package details');
-    out.push('      repository                Manage registered repositories');
-    out.push('      scan                      Manage Socket scans');
-    out.push('      threat-feed               [beta] View the threat feed');
-    out.push('');
-    out.push('    Local tools');
-    out.push('');
-    out.push('      fix                       Update dependencies with "fixable" Socket alerts');
-    out.push('      manifest                  Generate a dependency manifest for certain languages');
-    out.push('      npm                       npm wrapper functionality');
-    out.push('      npx                       npx wrapper functionality');
-    out.push('      optimize                  Optimize dependencies with @socketregistry overrides');
-    out.push('      raw-npm                   Temporarily disable the Socket npm wrapper');
-    out.push('      raw-npx                   Temporarily disable the Socket npx wrapper');
-    out.push('');
-    out.push('    CLI configuration');
-    out.push('');
-    out.push('      config                    Manage the CLI configuration directly');
-    out.push('      install                   Manually install CLI tab completion on your system');
-    out.push('      login                     Socket API login and CLI setup');
-    out.push('      logout                    Socket API logout');
-    out.push('      uninstall                 Remove the CLI tab completion from your system');
-    out.push('      wrapper                   Enable or disable the Socket npm/npx wrapper');
-    return out.join('\n');
+    return ['(Note: All commands have their own --help)', '', '    Main commands', ``, `      socket login                ${subcommands['login']?.description}`, `      socket scan create          Create a new Socket scan and report`, `      socket npm/lodash@4.17.21   Request the Socket score of a package`, `      socket ci                   ${subcommands['ci']?.description}`, ``, '    Socket API', '', `      analytics                   ${subcommands['analytics']?.description}`, `      audit-log                   ${subcommands['audit-log']?.description}`, `      organization                ${subcommands['organization']?.description}`, `      package                     ${subcommands['package']?.description}`, `      repository                  ${subcommands['repository']?.description}`, `      scan                        ${subcommands['scan']?.description}`, `      threat-feed                 ${subcommands['threat-feed']?.description}`, ``, '    Local tools', '', `      fix                         ${subcommands['fix']?.description}`, `      manifest                    ${subcommands['manifest']?.description}`, `      npm                         ${subcommands['npm']?.description}`, `      npx                         ${subcommands['npx']?.description}`, `      optimize                    ${subcommands['optimize']?.description}`, `      raw-npm                     ${subcommands['raw-npm']?.description}`, `      raw-npx                     ${subcommands['raw-npx']?.description}`, '', '    CLI configuration', '', `      config                      ${subcommands['config']?.description}`, `      install                     ${subcommands['install']?.description}`, `      login                       Socket API login and CLI setup`, `      logout                      ${subcommands['logout']?.description}`, `      uninstall                   ${subcommands['uninstall']?.description}`, `      wrapper                     ${subcommands['wrapper']?.description}`].join('\n');
+  };
+  const lines = ['', '    Usage', '', `      $ ${name} <command>`];
+  if (isRootCommand) {
+    lines.push(`      $ ${name} scan create --json`, `      $ ${name} package score npm lodash --markdown`);
+  }
+  lines.push('');
+  if (!isRootCommand) {
+    lines.push('    Commands', '');
+  }
+  lines.push(`      ${formatCommandsForHelp(isRootCommand)}`, '', '    Options');
+  if (isRootCommand) {
+    lines.push('       (Note: All commands have these flags even when not displayed in their help)', '');
+  } else {
+    lines.push('');
+  }
+  lines.push(`      ${getFlagListOutput(flags$1, {
+    padName: 28
+  })}`);
+  if (isRootCommand) {
+    lines.push('', '    Environment variables', '', '      SOCKET_CLI_ACCEPT_RISKS     Accept risks of a safe-npm or safe-npx run', '      SOCKET_CLI_API_TOKEN        Set the Socket API token', '      SOCKET_CLI_CONFIG           A JSON stringified Socket configuration object', '      SOCKET_CLI_GIT_USER_EMAIL   The git config `user.email` used by Socket CLI', `                                  ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]@users.noreply.github.com`, '      SOCKET_CLI_GIT_USER_NAME    The git config `user.name` used by Socket CLI', `                                  ${vendor.yoctocolorsCjsExports.italic('Defaults:')} github-actions[bot]`, `      SOCKET_CLI_GITHUB_TOKEN     A classic or fine-grained ${vendor.terminalLinkExports('GitHub personal access token', 'https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens')}`, `                                  ${vendor.yoctocolorsCjsExports.italic('Aliases:')} GITHUB_TOKEN`, '      SOCKET_CLI_NO_API_TOKEN     Make the default API token `undefined`', '      SOCKET_CLI_NPM_PATH         The absolute location of the npm directory', '      SOCKET_CLI_ORG_SLUG         Specify the Socket organization slug', '      SOCKET_CLI_VIEW_ALL_RISKS   View all risks of a safe-npm or safe-npx run', '', '    Environment variables for development', '', '      SOCKET_CLI_API_BASE_URL     Change the base URL for all API-calls', `                                  ${vendor.yoctocolorsCjsExports.italic('Defaults:')} The "apiBaseUrl" value of socket/settings local app data`, '                                  if present, else https://api.socket.dev/v0/', '      SOCKET_CLI_API_PROXY        Set the proxy all requests are routed through, e.g. if set to', `                                  ${vendor.terminalLinkExports('http://127.0.0.1:9090', 'https://docs.proxyman.io/troubleshooting/couldnt-see-any-requests-from-3rd-party-network-libraries')} then all request are passed through that proxy`, `                                  ${vendor.yoctocolorsCjsExports.italic('Aliases:')} HTTPS_PROXY, https_proxy, HTTP_PROXY, and http_proxy`, '      SOCKET_CLI_DEBUG            Enable debug logging in Socket CLI', `      DEBUG                       Enable debug logging based on the ${vendor.terminalLinkExports('debug', 'https://socket.dev/npm/package/debug')} package`);
   }
 
   // Parse it again. Config overrides should now be applied (may affect help).
   // Note: this is displayed as help screen if the command does not override it
   //       (which is the case for most sub-commands with sub-commands)
-  const cli2 = vendor.meow(`
-    Usage
-      $ ${name} <command>
-${isRootCommand ? '' : '\n    Commands'}
-      ${formatCommandsForHelp(isRootCommand)}
-
-${isRootCommand ? '    Options' : '    Options'}${isRootCommand ? '       (Note: all CLI commands have these flags even when not displayed in their help)\n' : ''}
-      ${getFlagListOutput(flags$1, {
-    padName: 25
-  })}
-
-    Examples
-      $ ${name} --help
-${isRootCommand ? `      $ ${name} scan create --json` : ''}${isRootCommand ? `\n      $ ${name} package score npm left-pad --markdown` : ''}`, {
+  const cli2 = vendor.meow({
     argv,
     importMeta,
     ...additionalOptions,
@@ -1104,11 +1080,12 @@ ${isRootCommand ? `      $ ${name} scan create --json` : ''}${isRootCommand ? `\
     // Do not strictly check for flags here.
     allowUnknownFlags: true,
     // We will emit help when we're ready.
-    // Plus, if we allow this then meow() can just exit here.
+    // Plus, if we allow this then meow may exit here.
     autoHelp: false,
     autoVersion: false,
     // We want to detect whether a bool flag is given at all.
-    booleanDefault: undefined
+    booleanDefault: undefined,
+    help: lines.join('\n')
   });
 
   // ...else we provide basic instructions and help.
@@ -1142,11 +1119,11 @@ function meowOrExit({
   // This exits if .printHelp() is called either by meow itself or by us.
   const cli = vendor.meow({
     argv,
+    // Prevent meow from potentially exiting early.
     autoHelp: false,
-    // meow will exit(0) before printing the banner.
     autoVersion: false,
-    booleanDefault: undefined,
     // We want to detect whether a bool flag is given at all.
+    booleanDefault: undefined,
     collectUnknownFlags: true,
     description: config.description,
     flags: config.flags,
@@ -1167,6 +1144,7 @@ function meowOrExit({
   //   meow({
   //     argv,
   //     allowUnknownFlags: false,
+  //     // Prevent meow from potentially exiting early.
   //     autoHelp: false,
   //     autoVersion: false,
   //     description: config.description,
@@ -1198,6 +1176,7 @@ function meowOrExit({
     // As per https://github.com/sindresorhus/meow/issues/178
     // Setting `allowUnknownFlags: false` makes it reject camel cased flags.
     allowUnknownFlags: Boolean(allowUnknownFlags),
+    // Prevent meow from potentially exiting early.
     autoHelp: false,
     autoVersion: false,
     description: config.description,
@@ -1246,7 +1225,8 @@ function getAsciiHeader(command, orgFlag) {
   |__   | ${readOnlyConfig} |  _| '_| -_|  _|     | Node: ${nodeVersion}, API token: ${shownToken}, ${orgPart}
   |_____|___|___|_,_|___|_|.dev   | Command: \`${command}\`, cwd: ${relCwd}
   `.trim();
-  return `   ${body}`; // Note: logger will auto-append a newline
+  // Note: logger will auto-append a newline.
+  return `   ${body}`;
 }
 
 function msAtHome(isoTimeStamp) {
@@ -1400,7 +1380,7 @@ async function determineOrgSlug(orgFlag, interactive, dryRun) {
 async function getDefaultOrgSlug() {
   const defaultOrgResult = getConfigValueOrUndef('defaultOrg');
   if (defaultOrgResult) {
-    require$$6.debugFn('notice', 'use: org from defaultOrg value of socket/settings local app data', defaultOrgResult);
+    require$$6.debugFn('notice', 'use: org from "defaultOrg" value of socket/settings local app data', defaultOrgResult);
     return {
       ok: true,
       data: defaultOrgResult
@@ -1439,7 +1419,7 @@ async function getDefaultOrgSlug() {
       data: `Cannot determine the default organization for the API token. Unable to continue.`
     };
   }
-  require$$6.debugFn('notice', 'resolve: org from API', slug);
+  require$$6.debugFn('notice', 'resolve: org from Socket API', slug);
   return {
     ok: true,
     message: 'Retrieved default org from server',
@@ -3876,5 +3856,5 @@ exports.tildify = tildify;
 exports.updateConfigValue = updateConfigValue;
 exports.walkNestedMap = walkNestedMap;
 exports.writeSocketJson = writeSocketJson;
-//# debugId=dfdc9cb2-5681-41ae-9239-11bdfca96583
+//# debugId=ec2e8ef0-0177-431b-8e50-81dd3b03fdee
 //# sourceMappingURL=utils.js.map