refactor(config): implement optional external alias detection for TypeScript

The repository is now self-contained by default, with external repo aliases
only used when detected. This matches the pattern already used by esbuild
via get-local-package-aliases.mjs.

Changes:
- Created .config/tsconfig.check.json (self-contained, no external paths)
- Created .config/tsconfig.external-aliases.json (extends check config with external paths)
- Updated packages/cli/.config/tsconfig.check.json to remove external paths
- Modified scripts/test.mjs to detect external repos and conditionally use external-aliases config

The build automatically detects if ../socket-lib or ../socket-registry exist and uses
the appropriate TypeScript configuration. This allows the repo to work standalone
while supporting local cross-repo development when external repos are present.

Author: jdalton

.config/tsconfig.check.json

@@ -0,0 +1,22 @@
+{
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "typeRoots": ["../node_modules/@types"]
+  },
+  "include": [
+    "../packages/cli/src/**/*.mts",
+    "../packages/cli/*.config.mts",
+    "../packages/cli/.config/*.mts"
+  ],
+  "exclude": [
+    "../packages/cli/**/*.tsx",
+    "../packages/cli/**/*.d.mts",
+    "../packages/cli/src/commands/analytics/output-analytics.mts",
+    "../packages/cli/src/commands/audit-log/output-audit-log.mts",
+    "../packages/cli/src/commands/threat-feed/output-threat-feed.mts",
+    "../packages/cli/**/*.test.mts",
+    "../packages/cli/src/test/**/*.mts",
+    "../packages/cli/src/utils/test-mocks.mts",
+    "../packages/cli/test/**/*.mts"
+  ]
+}

.config/tsconfig.external-aliases.json

@@ -0,0 +1,13 @@
+{
+  "extends": "./tsconfig.check.json",
+  "compilerOptions": {
+    "paths": {
+      "@socketsecurity/lib": ["../socket-lib/dist/index.d.ts"],
+      "@socketsecurity/lib/*": ["../socket-lib/dist/*"],
+      "@socketsecurity/registry": [
+        "../socket-registry/registry/dist/index.d.ts"
+      ],
+      "@socketsecurity/registry/*": ["../socket-registry/registry/dist/*"]
+    }
+  }
+}

packages/cli/.config/tsconfig.check.json

@@ -1,14 +1,6 @@
 {
   "extends": "./tsconfig.base.json",
   "compilerOptions": {
-    "paths": {
-      "@socketsecurity/lib": ["../../socket-lib/dist/index.d.ts"],
-      "@socketsecurity/lib/*": ["../../socket-lib/dist/*"],
-      "@socketsecurity/registry": [
-        "../../socket-registry/registry/dist/index.d.ts"
-      ],
-      "@socketsecurity/registry/*": ["../../socket-registry/registry/dist/*"]
-    },
     "typeRoots": ["../node_modules/@types"]
   },
   "include": ["../src/**/*.mts", "../*.config.mts", "./*.mts"],

scripts/test.mjs

@@ -37,6 +37,27 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const rootPath = path.resolve(__dirname, '..')
 const nodeModulesBinPath = path.join(rootPath, 'node_modules', '.bin')
 
+/**
+ * Detect if external repos exist for local development.
+ * Matches the pattern used in get-local-package-aliases.mjs.
+ */
+function hasExternalRepos() {
+  const libPath = path.join(rootPath, '..', 'socket-lib', 'package.json')
+  const registryPath = path.join(rootPath, '..', 'socket-registry', 'registry', 'package.json')
+  return existsSync(libPath) || existsSync(registryPath)
+}
+
+/**
+ * Get the appropriate TypeScript config based on external repo availability.
+ * Uses external-aliases config when external repos are detected for development.
+ */
+function getTsConfigPath() {
+  if (hasExternalRepos()) {
+    return '.config/tsconfig.external-aliases.json'
+  }
+  return '.config/tsconfig.check.json'
+}
+
 // Track running processes for cleanup
 const runningProcesses = new Set()
 
@@ -167,10 +188,11 @@ async function runCheck() {
   logger.success('ESLint passed')
 
   // Run TypeScript check
+  const tsConfigPath = getTsConfigPath()
   spinner.start('Checking TypeScript...')
   exitCode = await runCommand(
     'tsgo',
-    ['--noEmit', '-p', '.config/tsconfig.check.json'],
+    ['--noEmit', '-p', tsConfigPath],
     {
       stdio: 'pipe',
     },
@@ -179,7 +201,7 @@ async function runCheck() {
     spinner.stop()
     logger.error('TypeScript check failed')
     // Re-run with output to show errors
-    await runCommand('tsgo', ['--noEmit', '-p', '.config/tsconfig.check.json'])
+    await runCommand('tsgo', ['--noEmit', '-p', tsConfigPath])
     return exitCode
   }
   spinner.stop()