fix: improve --dry-run validation and add Node.js error filtering

- Skip API token validation in --dry-run mode for proper input checking
- Add error filtering to remove Node.js stack traces in production
- Make the CLI feel more professional, less like a Node.js app
- Use console.log for critical JSON error output to bypass logger silencing
- Stack traces only shown in DEBUG/development mode

Author: jdalton

src/cli.mts

@@ -38,6 +38,7 @@ import {
   formatErrorForTerminal,
 } from './utils/error-display.mts'
 import { captureException } from './utils/errors.mts'
+import { installErrorFiltering } from './utils/error-filter.mts'
 import { meowWithSubcommands } from './utils/meow-with-subcommands.mts'
 import { isSeaBinary } from './utils/sea.mts'
 import { serializeResultJson } from './utils/serialize-result-json.mts'
@@ -46,6 +47,9 @@ import { scheduleUpdateCheck } from './utils/update-manager.mts'
 
 const __filename = fileURLToPath(import.meta.url)
 
+// Install error filtering to clean up Node.js stack traces
+installErrorFiltering()
+
 // Check for --no-log or --json flag early and silence logger if present
 // When --json is set, we want clean JSON output without any logger noise
 const noLog =

src/commands/audit-log/cmd-audit-log.mts

@@ -181,7 +181,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/organization/cmd-organization-dependencies.mts

@@ -104,7 +104,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/organization/cmd-organization-list.mts

@@ -93,7 +93,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/organization/cmd-organization-policy-license.mts

@@ -109,7 +109,7 @@ async function run(
     },
     {
       nook: true,
-      test: hasApiToken,
+      test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
       message: 'This command requires a Socket API token for access',
       fail: 'try `socket login`',
     },

src/commands/organization/cmd-organization-policy-security.mts

@@ -125,7 +125,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/organization/cmd-organization-quota.mts

@@ -83,7 +83,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/package/cmd-package-score.mts

@@ -133,7 +133,7 @@ async function run(
   const hasApiToken = hasDefaultApiToken()
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })

src/commands/repository/cmd-repository-update.mts

@@ -145,7 +145,7 @@ async function run(
     },
     {
       nook: true,
-      test: hasApiToken,
+      test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
       message: 'This command requires a Socket API token for access',
       fail: 'try `socket login`',
     },

src/commands/scan/cmd-scan-create.mts

@@ -495,7 +495,7 @@ async function run(
   // Auth check (only in non-dry-run mode)
   const wasValidAuth = checkCommandInput(outputKind, {
     nook: true,
-    test: hasApiToken,
+    test: dryRun || hasApiToken,  // Skip API token check in dry-run mode
     message: 'This command requires a Socket API token for access',
     fail: 'try `socket login`',
   })