socket-cli.ts

/**
 * @fileoverview Socket CLI environment variables.
 * Provides typed getters for SOCKET_CLI_* environment variables (excluding shadow).
 */

import { envAsBoolean, envAsNumber } from './helpers'
import { getEnvValue } from './rewire'

/**
 * Whether to accept all Socket CLI risks (alternative name).
 *
 * @returns Whether to accept all risks
 *
 * @example
 * ```typescript
 * import { getSocketCliAcceptRisks } from '@socketsecurity/lib/env/socket-cli'
 *
 * if (getSocketCliAcceptRisks()) {
 *   console.log('All risks accepted')
 * }
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliAcceptRisks(): boolean {
  return envAsBoolean(getEnvValue('SOCKET_CLI_ACCEPT_RISKS'))
}

/**
 * Socket CLI API base URL (alternative name).
 * Checks SOCKET_CLI_API_BASE_URL first, then falls back to legacy SOCKET_SECURITY_API_BASE_URL.
 *
 * @returns API base URL or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliApiBaseUrl } from '@socketsecurity/lib/env/socket-cli'
 *
 * const baseUrl = getSocketCliApiBaseUrl()
 * // e.g. 'https://api.socket.dev' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliApiBaseUrl(): string | undefined {
  return (
    getEnvValue('SOCKET_CLI_API_BASE_URL') ||
    getEnvValue('SOCKET_SECURITY_API_BASE_URL')
  )
}

/**
 * Proxy URL for Socket CLI API requests (alternative name).
 * Checks SOCKET_CLI_API_PROXY, SOCKET_SECURITY_API_PROXY, then standard proxy env vars.
 * Follows the same precedence as v1.x: HTTPS_PROXY → https_proxy → HTTP_PROXY → http_proxy.
 *
 * @returns API proxy URL or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliApiProxy } from '@socketsecurity/lib/env/socket-cli'
 *
 * const proxy = getSocketCliApiProxy()
 * // e.g. 'http://proxy.example.com:8080' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliApiProxy(): string | undefined {
  return (
    getEnvValue('SOCKET_CLI_API_PROXY') ||
    getEnvValue('SOCKET_SECURITY_API_PROXY') ||
    getEnvValue('HTTPS_PROXY') ||
    getEnvValue('https_proxy') ||
    getEnvValue('HTTP_PROXY') ||
    getEnvValue('http_proxy')
  )
}

/**
 * Timeout in milliseconds for Socket CLI API requests (alternative name).
 *
 * @returns API timeout in milliseconds
 *
 * @example
 * ```typescript
 * import { getSocketCliApiTimeout } from '@socketsecurity/lib/env/socket-cli'
 *
 * const timeout = getSocketCliApiTimeout()
 * // e.g. 30000 or 0 if not set
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliApiTimeout(): number {
  return envAsNumber(getEnvValue('SOCKET_CLI_API_TIMEOUT'))
}

/**
 * Socket CLI API authentication token (alternative name).
 * Checks SOCKET_CLI_API_TOKEN, SOCKET_CLI_API_KEY, SOCKET_SECURITY_API_TOKEN, SOCKET_SECURITY_API_KEY.
 * Maintains full v1.x backward compatibility.
 *
 * @returns API token or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliApiToken } from '@socketsecurity/lib/env/socket-cli'
 *
 * const token = getSocketCliApiToken()
 * // e.g. a Socket API token string or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliApiToken(): string | undefined {
  return (
    getEnvValue('SOCKET_CLI_API_TOKEN') ||
    getEnvValue('SOCKET_CLI_API_KEY') ||
    getEnvValue('SOCKET_SECURITY_API_TOKEN') ||
    getEnvValue('SOCKET_SECURITY_API_KEY')
  )
}

/**
 * Bootstrap cache directory path.
 * Set by bootstrap wrappers to pass dlx cache location to CLI.
 *
 * @returns Bootstrap cache directory or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliBootstrapCacheDir } from '@socketsecurity/lib/env/socket-cli'
 *
 * const cacheDir = getSocketCliBootstrapCacheDir()
 * // e.g. '/tmp/.socket-cli-cache' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliBootstrapCacheDir(): string | undefined {
  return getEnvValue('SOCKET_CLI_BOOTSTRAP_CACHE_DIR')
}

/**
 * Bootstrap package spec (e.g., @socketsecurity/cli@^2.0.11).
 * Set by bootstrap wrappers (SEA/smol/npm) to pass package spec to CLI.
 *
 * @returns Bootstrap package spec or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliBootstrapSpec } from '@socketsecurity/lib/env/socket-cli'
 *
 * const spec = getSocketCliBootstrapSpec()
 * // e.g. '@socketsecurity/cli@^2.0.11' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliBootstrapSpec(): string | undefined {
  return getEnvValue('SOCKET_CLI_BOOTSTRAP_SPEC')
}

/**
 * Socket CLI configuration file path (alternative name).
 *
 * @returns Config file path or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliConfig } from '@socketsecurity/lib/env/socket-cli'
 *
 * const config = getSocketCliConfig()
 * // e.g. '/tmp/project/socket.yml' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliConfig(): string | undefined {
  return getEnvValue('SOCKET_CLI_CONFIG')
}

/**
 * Controls Socket CLI fix mode.
 *
 * @returns Fix mode value or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliFix } from '@socketsecurity/lib/env/socket-cli'
 *
 * const fix = getSocketCliFix()
 * // e.g. 'true' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliFix(): string | undefined {
  return getEnvValue('SOCKET_CLI_FIX')
}

/**
 * Socket CLI GitHub authentication token.
 * Checks SOCKET_CLI_GITHUB_TOKEN, SOCKET_SECURITY_GITHUB_PAT, then falls back to GITHUB_TOKEN.
 *
 * @returns GitHub token or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliGithubToken } from '@socketsecurity/lib/env/socket-cli'
 *
 * const token = getSocketCliGithubToken()
 * // e.g. 'ghp_abc123...' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliGithubToken(): string | undefined {
  return (
    getEnvValue('SOCKET_CLI_GITHUB_TOKEN') ||
    getEnvValue('SOCKET_SECURITY_GITHUB_PAT') ||
    getEnvValue('GITHUB_TOKEN')
  )
}

/**
 * Whether to skip Socket CLI API token requirement (alternative name).
 *
 * @returns Whether to skip API token requirement
 *
 * @example
 * ```typescript
 * import { getSocketCliNoApiToken } from '@socketsecurity/lib/env/socket-cli'
 *
 * if (getSocketCliNoApiToken()) {
 *   console.log('API token requirement skipped')
 * }
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliNoApiToken(): boolean {
  return envAsBoolean(getEnvValue('SOCKET_CLI_NO_API_TOKEN'))
}

/**
 * Controls Socket CLI optimization mode.
 *
 * @returns Whether optimization mode is enabled
 *
 * @example
 * ```typescript
 * import { getSocketCliOptimize } from '@socketsecurity/lib/env/socket-cli'
 *
 * if (getSocketCliOptimize()) {
 *   console.log('Optimization mode enabled')
 * }
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliOptimize(): boolean {
  return envAsBoolean(getEnvValue('SOCKET_CLI_OPTIMIZE'))
}

/**
 * Socket CLI organization slug identifier (alternative name).
 * Checks SOCKET_CLI_ORG_SLUG first, then falls back to SOCKET_ORG_SLUG.
 *
 * @returns Organization slug or undefined
 *
 * @example
 * ```typescript
 * import { getSocketCliOrgSlug } from '@socketsecurity/lib/env/socket-cli'
 *
 * const slug = getSocketCliOrgSlug()
 * // e.g. 'my-org' or undefined
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliOrgSlug(): string | undefined {
  return getEnvValue('SOCKET_CLI_ORG_SLUG') || getEnvValue('SOCKET_ORG_SLUG')
}

/**
 * Whether to view all Socket CLI risks (alternative name).
 *
 * @returns Whether to view all risks
 *
 * @example
 * ```typescript
 * import { getSocketCliViewAllRisks } from '@socketsecurity/lib/env/socket-cli'
 *
 * if (getSocketCliViewAllRisks()) {
 *   console.log('Viewing all risks')
 * }
 * ```
 */
/*@__NO_SIDE_EFFECTS__*/
export function getSocketCliViewAllRisks(): boolean {
  return envAsBoolean(getEnvValue('SOCKET_CLI_VIEW_ALL_RISKS'))
}