@socketsecurity/sdk 2.0.1 → 2.0.3

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [2.0.3](https://github.com/SocketDev/socket-sdk-js/releases/tag/v2.0.3) - 2025-10-22
+
+### Fixed
+- Improved TypeScript module resolution with explicit type exports instead of wildcard re-exports
+
+## [2.0.2](https://github.com/SocketDev/socket-sdk-js/releases/tag/v2.0.2) - 2025-10-22
+
+### Fixed
+- Ensured expected dist/ files are produced and refined package.json exports
+
 ## [2.0.1](https://github.com/SocketDev/socket-sdk-js/releases/tag/v2.0.1) - 2025-10-21
 
 ### Changed

package/data/api-method-quota-and-permissions.json

@@ -0,0 +1,232 @@
+{
+  "api": {
+    "batchPackageFetch": {
+      "quota": 100,
+      "permissions": ["packages:list"]
+    },
+    "batchPackageStream": {
+      "quota": 100,
+      "permissions": ["packages:list"]
+    },
+    "createDependenciesSnapshot": {
+      "quota": 100,
+      "permissions": ["report:write"]
+    },
+    "createOrgFullScan": {
+      "quota": 0,
+      "permissions": ["full-scans:create"]
+    },
+    "createOrgRepo": {
+      "quota": 0,
+      "permissions": ["repo:create"]
+    },
+    "createScanFromFilepaths": {
+      "quota": 100,
+      "permissions": ["report:write"]
+    },
+    "deleteOrgFullScan": {
+      "quota": 0,
+      "permissions": ["full-scans:delete"]
+    },
+    "deleteOrgRepo": {
+      "quota": 0,
+      "permissions": ["repo:delete"]
+    },
+    "getAuditLogEvents": {
+      "quota": 10,
+      "permissions": ["audit-log:list"]
+    },
+    "getEnabledEntitlements": {
+      "quota": 0,
+      "permissions": []
+    },
+    "getEntitlements": {
+      "quota": 0,
+      "permissions": []
+    },
+    "getIssuesByNpmPackage": {
+      "quota": 10,
+      "permissions": []
+    },
+    "getOrgAnalytics": {
+      "quota": 10,
+      "permissions": ["report:write"]
+    },
+    "getOrganizations": {
+      "quota": 0,
+      "permissions": []
+    },
+    "streamOrgFullScan": {
+      "quota": 0,
+      "permissions": ["full-scans:list"]
+    },
+    "streamPatchesFromScan": {
+      "quota": 0,
+      "permissions": ["patches:list"]
+    },
+    "getOrgFullScanBuffered": {
+      "quota": 0,
+      "permissions": ["full-scans:list"]
+    },
+    "getOrgFullScanList": {
+      "quota": 0,
+      "permissions": ["full-scans:list"]
+    },
+    "getOrgFullScanMetadata": {
+      "quota": 0,
+      "permissions": ["full-scans:list"]
+    },
+    "getOrgLicensePolicy": {
+      "quota": 0,
+      "permissions": ["settings:read"]
+    },
+    "getOrgRepo": {
+      "quota": 0,
+      "permissions": ["repo:list"]
+    },
+    "getOrgRepoList": {
+      "quota": 0,
+      "permissions": ["repo:list"]
+    },
+    "getOrgSecurityPolicy": {
+      "quota": 0,
+      "permissions": ["settings:read"]
+    },
+    "getQuota": {
+      "quota": 0,
+      "permissions": []
+    },
+    "getRepoAnalytics": {
+      "quota": 10,
+      "permissions": ["report:write"]
+    },
+    "getScan": {
+      "quota": 0,
+      "permissions": ["report:read"]
+    },
+    "getScanList": {
+      "quota": 0,
+      "permissions": ["report:read"]
+    },
+    "getSupportedScanFiles": {
+      "quota": 0,
+      "permissions": ["report:read"]
+    },
+    "getScoreByNpmPackage": {
+      "quota": 10,
+      "permissions": []
+    },
+    "postSettings": {
+      "quota": 0,
+      "permissions": []
+    },
+    "searchDependencies": {
+      "quota": 100,
+      "permissions": []
+    },
+    "updateOrgRepo": {
+      "quota": 0,
+      "permissions": ["repo:update"]
+    },
+    "uploadManifestFiles": {
+      "quota": 100,
+      "permissions": ["packages:upload"]
+    },
+    "viewPatch": {
+      "quota": 0,
+      "permissions": ["patches:view"]
+    },
+    "deleteReport": {
+      "quota": 0,
+      "permissions": ["report:delete"]
+    },
+    "exportCDX": {
+      "quota": 0,
+      "permissions": ["report:read"]
+    },
+    "exportSPDX": {
+      "quota": 0,
+      "permissions": ["report:read"]
+    },
+    "getAPITokens": {
+      "quota": 10,
+      "permissions": ["api-token:list"]
+    },
+    "postAPIToken": {
+      "quota": 10,
+      "permissions": ["api-token:create"]
+    },
+    "postAPITokenUpdate": {
+      "quota": 10,
+      "permissions": ["api-token:update"]
+    },
+    "postAPITokensRotate": {
+      "quota": 10,
+      "permissions": ["api-token:rotate"]
+    },
+    "postAPITokensRevoke": {
+      "quota": 10,
+      "permissions": ["api-token:revoke"]
+    },
+    "updateOrgSecurityPolicy": {
+      "quota": 0,
+      "permissions": ["settings:write"]
+    },
+    "updateOrgLicensePolicy": {
+      "quota": 0,
+      "permissions": ["settings:write"]
+    },
+    "getOrgTriage": {
+      "quota": 0,
+      "permissions": ["triage:alerts-list"]
+    },
+    "updateOrgAlertTriage": {
+      "quota": 0,
+      "permissions": ["triage:alerts-update"]
+    },
+    "getOrgRepoLabelList": {
+      "quota": 0,
+      "permissions": ["repo-label:list"]
+    },
+    "createOrgRepoLabel": {
+      "quota": 0,
+      "permissions": ["repo-label:create"]
+    },
+    "getOrgRepoLabel": {
+      "quota": 0,
+      "permissions": ["repo-label:list"]
+    },
+    "updateOrgRepoLabel": {
+      "quota": 0,
+      "permissions": ["repo-label:update"]
+    },
+    "deleteOrgRepoLabel": {
+      "quota": 0,
+      "permissions": ["repo-label:delete"]
+    },
+    "getDiffScanById": {
+      "quota": 0,
+      "permissions": ["diff-scans:list"]
+    },
+    "createOrgDiffScanFromIds": {
+      "quota": 0,
+      "permissions": ["diff-scans:create"]
+    },
+    "listOrgDiffScans": {
+      "quota": 0,
+      "permissions": ["diff-scans:list"]
+    },
+    "deleteOrgDiffScan": {
+      "quota": 0,
+      "permissions": ["diff-scans:delete"]
+    },
+    "getApi": {
+      "quota": 0,
+      "permissions": []
+    },
+    "sendApi": {
+      "quota": 0,
+      "permissions": []
+    }
+  }
+}

package/dist/constants.d.ts

@@ -9,4 +9,4 @@ export declare const MAX_RESPONSE_SIZE: number;
 export declare const MAX_STREAM_SIZE: number;
 export declare const SOCKET_PUBLIC_BLOB_STORE_URL = "https://socketusercontent.com";
 export declare const httpAgentNames: Set<string>;
-export declare const publicPolicy: Map<"ambiguousClassifier" | "badEncoding" | "badSemver" | "badSemverDependency" | "bidi" | "binScriptConfusion" | "chromeContentScript" | "chromeHostPermission" | "chromePermission" | "chromeWildcardHostPermission" | "chronoAnomaly" | "compromisedSSHKey" | "copyleftLicense" | "criticalCVE" | "cve" | "debugAccess" | "deprecated" | "deprecatedException" | "deprecatedLicense" | "didYouMean" | "dynamicRequire" | "emptyPackage" | "envVars" | "explicitlyUnlicensedItem" | "extraneousDependency" | "fileDependency" | "filesystemAccess" | "floatingDependency" | "generic" | "gitDependency" | "gitHubDependency" | "gptAnomaly" | "gptDidYouMean" | "gptMalware" | "gptSecurity" | "hasNativeCode" | "highEntropyStrings" | "homoglyphs" | "httpDependency" | "installScripts" | "invalidPackageJSON" | "invisibleChars" | "licenseChange" | "licenseException" | "licenseSpdxDisj" | "longStrings" | "majorRefactor" | "malware" | "manifestConfusion" | "mediumCVE" | "mildCVE" | "minifiedFile" | "miscLicenseIssues" | "missingAuthor" | "missingDependency" | "missingLicense" | "missingTarball" | "mixedLicense" | "modifiedException" | "modifiedLicense" | "networkAccess" | "newAuthor" | "noAuthorData" | "noBugTracker" | "noLicenseFound" | "noREADME" | "noRepository" | "noTests" | "noV1" | "noWebsite" | "nonOSILicense" | "nonSPDXLicense" | "nonpermissiveLicense" | "notice" | "obfuscatedFile" | "obfuscatedRequire" | "peerDependency" | "potentialVulnerability" | "semverAnomaly" | "shellAccess" | "shellScriptOverride" | "shrinkwrap" | "socketUpgradeAvailable" | "suspiciousStarActivity" | "suspiciousString" | "telemetry" | "trivialPackage" | "troll" | "typeModuleCompatibility" | "uncaughtOptionalDependency" | "unclearLicense" | "unidentifiedLicense" | "unmaintained" | "unpopularPackage" | "unpublished" | "unresolvedRequire" | "unsafeCopyright" | "unstableOwnership" | "unusedDependency" | "urlStrings" | "usesEval" | "vsxActivationWildcard" | "vsxDebuggerContribution" | "vsxExtensionDependency" | "vsxExtensionPack" | "vsxProposedApiUsage" | "vsxUntrustedWorkspaceSupported" | "vsxVirtualWorkspaceSupported" | "vsxWebviewContribution" | "vsxWorkspaceContainsActivation" | "zeroWidth", ALERT_ACTION>;
+export declare const publicPolicy: Map<"ambiguousClassifier" | "badEncoding" | "badSemver" | "badSemverDependency" | "bidi" | "binScriptConfusion" | "chromeContentScript" | "chromeHostPermission" | "chromePermission" | "chromeWildcardHostPermission" | "chronoAnomaly" | "compromisedSSHKey" | "copyleftLicense" | "criticalCVE" | "cve" | "debugAccess" | "deprecated" | "deprecatedException" | "deprecatedLicense" | "didYouMean" | "dynamicRequire" | "emptyPackage" | "envVars" | "explicitlyUnlicensedItem" | "extraneousDependency" | "fileDependency" | "filesystemAccess" | "floatingDependency" | "generic" | "ghaArgToEnv" | "ghaArgToOutput" | "ghaArgToSink" | "ghaContextToEnv" | "ghaContextToOutput" | "ghaContextToSink" | "ghaEnvToSink" | "gitDependency" | "gitHubDependency" | "gptAnomaly" | "gptDidYouMean" | "gptMalware" | "gptSecurity" | "hasNativeCode" | "highEntropyStrings" | "homoglyphs" | "httpDependency" | "installScripts" | "invalidPackageJSON" | "invisibleChars" | "licenseChange" | "licenseException" | "licenseSpdxDisj" | "longStrings" | "majorRefactor" | "malware" | "manifestConfusion" | "mediumCVE" | "mildCVE" | "minifiedFile" | "miscLicenseIssues" | "missingAuthor" | "missingDependency" | "missingLicense" | "missingTarball" | "mixedLicense" | "modifiedException" | "modifiedLicense" | "networkAccess" | "newAuthor" | "noAuthorData" | "noBugTracker" | "noLicenseFound" | "noREADME" | "noRepository" | "noTests" | "noV1" | "noWebsite" | "nonOSILicense" | "nonSPDXLicense" | "nonpermissiveLicense" | "notice" | "obfuscatedFile" | "obfuscatedRequire" | "peerDependency" | "potentialVulnerability" | "semverAnomaly" | "shellAccess" | "shellScriptOverride" | "shrinkwrap" | "socketUpgradeAvailable" | "suspiciousStarActivity" | "suspiciousString" | "telemetry" | "trivialPackage" | "troll" | "typeModuleCompatibility" | "uncaughtOptionalDependency" | "unclearLicense" | "unidentifiedLicense" | "unmaintained" | "unpopularPackage" | "unpublished" | "unresolvedRequire" | "unsafeCopyright" | "unstableOwnership" | "unusedDependency" | "urlStrings" | "usesEval" | "vsxActivationWildcard" | "vsxDebuggerContribution" | "vsxExtensionDependency" | "vsxExtensionPack" | "vsxProposedApiUsage" | "vsxUntrustedWorkspaceSupported" | "vsxVirtualWorkspaceSupported" | "vsxWebviewContribution" | "vsxWorkspaceContainsActivation" | "zeroWidth", ALERT_ACTION>;

package/dist/file-upload.d.ts

@@ -1,7 +1,7 @@
-import type { ReadStream } from 'node:fs';
-import type { IncomingMessage } from 'node:http';
 import { Readable } from 'node:stream';
 import type { RequestOptions } from './types';
+import type { ReadStream } from 'node:fs';
+import type { IncomingMessage } from 'node:http';
 /**
  * Create multipart form-data body parts for file uploads.
  * Converts file paths to readable streams with proper multipart headers.

package/dist/http-client.d.ts

@@ -2,10 +2,10 @@
  * @fileoverview HTTP client utilities for Socket API communication.
  * Provides low-level HTTP request handling with proper error management and response parsing.
  */
-import type { ClientRequest, IncomingMessage } from 'node:http';
 import http from 'node:http';
 import https from 'node:https';
 import type { RequestOptions, SendMethod } from './types';
+import type { ClientRequest, IncomingMessage } from 'node:http';
 /**
  * HTTP response error for Socket API requests.
  * Extends Error with response details for debugging failed API calls.

package/dist/index.d.ts

@@ -8,7 +8,7 @@ export { createRequestBodyForFilepaths, createRequestBodyForJson, createUploadRe
 export { createDeleteRequest, createGetRequest, createRequestWithJson, getErrorResponseBody, getHttpModule, getResponse, getResponseJson, isResponseOk, ResponseError, reshapeArtifactForPublicPolicy, } from './http-client';
 export { calculateTotalQuotaCost, getAllMethodRequirements, getMethodRequirements, getMethodsByPermissions, getMethodsByQuotaCost, getQuotaCost, getQuotaUsageSummary, getRequiredPermissions, hasQuotaForMethods, } from './quota-utils';
 export { SocketSdk } from './socket-sdk-class';
-export type * from './types';
+export type { ALERT_ACTION, ALERT_TYPE, Agent, ArtifactPatches, BatchPackageFetchResultType, BatchPackageStreamOptions, CompactSocketArtifact, CompactSocketArtifactAlert, CreateDependenciesSnapshotOptions, CreateOrgFullScanOptions, CreateScanFromFilepathsOptions, CustomResponseType, Entitlement, EntitlementsResponse, GetOptions, GotOptions, HeadersRecord, PatchFile, PatchRecord, PatchViewResponse, QueryParams, RequestOptions, SecurityAlert, SendMethod, SendOptions, SocketArtifact, SocketArtifactAlert, SocketArtifactWithExtras, SocketId, SocketMetricSchema, SocketSdkErrorResult, SocketSdkGenericResult, SocketSdkOperations, SocketSdkOptions, SocketSdkResult, SocketSdkSuccessResult, StreamOrgFullScanOptions, UploadManifestFilesError, UploadManifestFilesOptions, UploadManifestFilesResponse, UploadManifestFilesReturnType, Vulnerability, } from './types';
 export { createUserAgentFromPkgJson } from './user-agent';
 export { normalizeBaseUrl, promiseWithResolvers, queryToSearchParams, resolveAbsPaths, resolveBasePath, };
 export { DEFAULT_USER_AGENT, httpAgentNames, publicPolicy };

package/dist/socket-sdk-class.d.ts

@@ -1,5 +1,5 @@
-import type { IncomingMessage } from 'node:http';
 import type { ArtifactPatches, BatchPackageFetchResultType, BatchPackageStreamOptions, CreateDependenciesSnapshotOptions, CreateOrgFullScanOptions, CreateScanFromFilepathsOptions, Entitlement, GetOptions, PatchViewResponse, QueryParams, SendOptions, SocketSdkGenericResult, SocketSdkOptions, SocketSdkResult, StreamOrgFullScanOptions, UploadManifestFilesError, UploadManifestFilesOptions, UploadManifestFilesReturnType } from './types';
+import type { IncomingMessage } from 'node:http';
 /**
  * Socket SDK for programmatic access to Socket.dev security analysis APIs.
  * Provides methods for package scanning, organization management, and security analysis.

package/dist/types.d.ts

@@ -2,13 +2,13 @@
  * @fileoverview Type definitions and interfaces for Socket SDK.
  * Provides TypeScript types for API requests, responses, and internal SDK functionality.
  */
+import type { components, operations } from '../types/api';
+import type { OpReturnType } from '../types/api-helpers';
+import type { Remap } from '@socketsecurity/lib/objects';
+import type { ClientHttp2Session } from 'http2-wrapper';
 import type { Agent as HttpAgent, RequestOptions as HttpRequestOptions } from 'node:http';
 import type { ClientSessionRequestOptions } from 'node:http2';
 import type { Agent as HttpsAgent, RequestOptions as HttpsRequestOptions } from 'node:https';
-import type { Remap } from '@socketsecurity/lib/objects';
-import type { ClientHttp2Session } from 'http2-wrapper';
-import type { components, operations } from '../types/api';
-import type { OpReturnType } from '../types/api-helpers';
 export type ALERT_ACTION = 'error' | 'monitor' | 'warn' | 'ignore';
 export type ALERT_TYPE = keyof NonNullable<operations['getOrgSecurityPolicy']['responses']['200']['content']['application/json']['securityPolicyRules']>;
 export type Entitlement = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/sdk",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "license": "MIT",
   "description": "SDK for the Socket API client",
   "author": {
@@ -15,21 +15,25 @@
   },
   "type": "module",
   "main": "./dist/index.mjs",
-  "types": "./dist/index.d.mts",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.mts",
+      "types": "./dist/index.d.ts",
       "default": "./dist/index.mjs"
     },
+    "./package.json": "./package.json",
     "./testing": {
-      "types": "./dist/testing.d.mts",
+      "types": "./dist/testing.d.ts",
       "default": "./dist/testing.mjs"
     },
-    "./types/api-helpers": "./types/api-helpers.d.ts",
-    "./types/api-helpers.d.ts": "./types/api-helpers.d.ts",
-    "./types/api": "./types/api.d.ts",
-    "./types/api.d.ts": "./types/api.d.ts",
-    "./package.json": "./package.json"
+    "./types/api": {
+      "types": "./types/api.d.ts",
+      "default": "./types/api.d.ts"
+    },
+    "./types/api-helpers": {
+      "types": "./types/api-helpers.d.ts",
+      "default": "./types/api-helpers.d.ts"
+    }
   },
   "scripts": {
     "build": "node scripts/build.mjs",
@@ -105,8 +109,9 @@
     "pnpm": ">=10.16.0"
   },
   "files": [
-    "dist/**",
-    "types/**",
+    "data/*.json",
+    "dist/*{.js,.d.ts}",
+    "types/*.d.ts",
     "CHANGELOG.md"
   ],
   "typeCoverage": {