socket 1.1.120 → 1.1.121

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.1.121](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.121) - 2026-06-17
+
+### Fixed
+- `socket config set` now persists correctly when a Socket API token is supplied via an environment variable. Previously, setting `SOCKET_CLI_API_TOKEN` / `SOCKET_SECURITY_API_TOKEN` put the entire config into read-only mode, so `socket config set <key> <value>` silently failed to save (and a later `socket config get` showed nothing) while still printing `OK`. A token from the environment now overrides authentication only: unrelated keys such as `defaultOrg` are written to disk as expected, and the env-supplied token itself is still never persisted.
+- `socket config set` no longer reports a misleading `OK` when the value genuinely cannot be saved. When the config is fully overridden (and therefore ephemeral) via `--config`, `SOCKET_CLI_CONFIG`, or `SOCKET_CLI_NO_API_TOKEN`, the command now fails with a clear error explaining that the value was not saved, instead of pretending it succeeded.
+
 ## [1.1.120](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.120) - 2026-06-12
 
 ### Changed

package/dist/cli.js

@@ -5667,7 +5667,19 @@ async function handleConfigGet({
   key,
   outputKind
 }) {
-  const result = utils.getConfigValue(key);
+  // A Socket API token supplied via the environment (SOCKET_CLI_API_TOKEN /
+  // SOCKET_SECURITY_API_TOKEN and legacy aliases, all aggregated into
+  // constants.ENV.SOCKET_CLI_API_TOKEN) takes precedence over any persisted or
+  // --config value. The env token is no longer mirrored into the in-memory
+  // config (so unrelated keys stay persistable via `config set`), so surface it
+  // explicitly here to preserve "env token wins" for `config get apiToken`.
+  const {
+    ENV
+  } = constants.default;
+  const result = key === constants.CONFIG_KEY_API_TOKEN && !ENV.SOCKET_CLI_NO_API_TOKEN && ENV.SOCKET_CLI_API_TOKEN ? {
+    ok: true,
+    data: ENV.SOCKET_CLI_API_TOKEN
+  } : utils.getConfigValue(key);
   await outputConfigGet(key, result, outputKind);
 }
 
@@ -5892,18 +5904,10 @@ async function outputConfigSet(result, outputKind) {
     logger.logger.log(`# Update config`);
     logger.logger.log('');
     logger.logger.log(result.message);
-    if (result.data) {
-      logger.logger.log('');
-      logger.logger.log(result.data);
-    }
-  } else {
-    logger.logger.log(`OK`);
-    logger.logger.log(result.message);
-    if (result.data) {
-      logger.logger.log('');
-      logger.logger.log(result.data);
-    }
+    return;
   }
+  logger.logger.log(`OK`);
+  logger.logger.log(result.message);
 }
 
 async function handleConfigSet({
@@ -5918,11 +5922,24 @@ async function handleConfigSet({
     outputKind
   });
   const result = utils.updateConfigValue(key, value);
-  require$$9.debugFn('notice', `Config update ${result.ok ? 'succeeded' : 'failed'}`);
+
+  // `config set` is a one-shot command: an in-memory-only change is a no-op
+  // because the process exits before anything reads it. updateConfigValue only
+  // populates `data` when the config is read-only (a full --config /
+  // SOCKET_CLI_CONFIG / SOCKET_CLI_NO_API_TOKEN override), so in that case
+  // report a failure instead of a misleading success.
+  const outcome = result.ok && result.data ? {
+    ok: false,
+    code: 1,
+    message: `Config key '${key}' was not saved`,
+    cause: result.data
+  } : result;
+  require$$9.debugFn('notice', `Config update ${outcome.ok ? 'succeeded' : 'failed'}`);
   require$$9.debugDir('inspect', {
+    outcome,
     result
   });
-  await outputConfigSet(result, outputKind);
+  await outputConfigSet(outcome, outputKind);
 }
 
 const CMD_NAME$u = 'set';
@@ -20249,5 +20266,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=c95bf38d-6368-425f-b593-0afd21e07f62
+//# debugId=85257911-3f47-4452-8e33-51ee5c9c6b59
 //# sourceMappingURL=cli.js.map