refactor(publish): simplify package structure and validation

- Remove bin/ directory wrappers, point directly to dist/ files
- Remove exports field (unnecessary for single-file bundles)
- Remove shadow-bin from files array
- Create package-specific verify-package.mjs scripts
- Delete monolithic pre-publish-validate.mjs
- Update provenance workflow to use pnpm --filter run verify
- Add verify script to all 3 packages (socket, cli, cli-with-sentry)

This simplifies the publish structure by removing unnecessary indirection
layers and makes validation package-specific instead of trying to handle
all packages in one script.

Author: jdalton

.github/workflows/provenance.yml

@@ -61,7 +61,7 @@ jobs:
       - name: Build socket package
         run: INLINED_SOCKET_CLI_PUBLISHED_BUILD=1 pnpm run build
       - name: Validate socket package
-        run: node scripts/pre-publish-validate.mjs packages/socket
+        run: pnpm --filter socket run verify
       - name: Publish socket package
         working-directory: packages/socket
         run: npm publish --provenance --access public --no-git-checks
@@ -77,7 +77,7 @@ jobs:
         env:
           SOCKET_CLI_DEBUG: ${{ inputs.debug }}
       - name: Validate @socketsecurity/cli package
-        run: node scripts/pre-publish-validate.mjs packages/cli
+        run: pnpm --filter @socketsecurity/cli run verify
       - name: Publish @socketsecurity/cli package
         working-directory: packages/cli
         run: npm publish --provenance --access public --no-git-checks
@@ -93,7 +93,7 @@ jobs:
         env:
           SOCKET_CLI_DEBUG: ${{ inputs.debug }}
       - name: Validate @socketsecurity/cli-with-sentry package
-        run: node scripts/pre-publish-validate.mjs packages/cli-with-sentry
+        run: pnpm --filter @socketsecurity/cli-with-sentry run verify
       - name: Publish @socketsecurity/cli-with-sentry package
         working-directory: packages/cli-with-sentry
         run: npm publish --provenance --access public --no-git-checks

packages/cli-with-sentry/bin/cli.js

@@ -16,25 +16,21 @@
     "url": "https://socket.dev"
   },
   "bin": {
-    "socket": "bin/cli.js",
-    "socket-npm": "bin/npm-cli.js",
-    "socket-npx": "bin/npx-cli.js",
-    "socket-pnpm": "bin/pnpm-cli.js",
-    "socket-yarn": "bin/yarn-cli.js"
-  },
-  "exports": {
-    "./bin/cli.js": "./dist/cli.js",
-    "./bin/npm-cli.js": "./dist/npm-cli.js",
-    "./bin/npx-cli.js": "./dist/npx-cli.js",
-    "./bin/pnpm-cli.js": "./dist/pnpm-cli.js",
-    "./bin/yarn-cli.js": "./dist/yarn-cli.js",
-    "./package.json": "./package.json"
-  },
+    "socket": "dist/cli.js"
+  },
+  "files": [
+    "data/**",
+    "dist/**",
+    "CHANGELOG.md",
+    "logo-dark.png",
+    "logo-light.png"
+  ],
   "scripts": {
     "build": "node scripts/build.mjs",
     "clean:dist": "del-cli 'dist'",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "verify": "node scripts/verify-package.mjs"
   },
   "keywords": [
     "socket",

packages/cli-with-sentry/bin/npm-cli.js

@@ -0,0 +1,129 @@
+import { promises as fs } from 'node:fs'
+import path from 'node:path'
+import process from 'node:process'
+import { fileURLToPath } from 'node:url'
+
+import { logger } from '@socketsecurity/lib/logger'
+import colors from 'yoctocolors-cjs'
+
+const __filename = fileURLToPath(import.meta.url)
+const __dirname = path.dirname(__filename)
+const packageRoot = path.resolve(__dirname, '..')
+
+/**
+ * Format a success message.
+ */
+function success(msg) {
+  return `${colors.green('✓')} ${msg}`
+}
+
+/**
+ * Format an error message.
+ */
+function error(msg) {
+  return `${colors.red('✗')} ${msg}`
+}
+
+/**
+ * Format an info message.
+ */
+function info(msg) {
+  return `${colors.blue('ℹ')} ${msg}`
+}
+
+/**
+ * Check if a file exists and is readable.
+ */
+async function fileExists(filePath) {
+  try {
+    await fs.access(filePath)
+    return true
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Main validation function.
+ */
+async function validate() {
+  logger.log('')
+  logger.log('='.repeat(60))
+  logger.log(`${colors.blue('CLI with Sentry Package Validation')}`)
+  logger.log('='.repeat(60))
+  logger.log('')
+
+  const errors = []
+
+  // Check package.json exists.
+  logger.log(info('Checking package.json...'))
+  const pkgPath = path.join(packageRoot, 'package.json')
+  if (!(await fileExists(pkgPath))) {
+    errors.push('package.json does not exist')
+  } else {
+    logger.log(success('package.json exists'))
+  }
+
+  // Check dist/cli.js exists.
+  logger.log(info('Checking dist/cli.js...'))
+  const cliPath = path.join(packageRoot, 'dist', 'cli.js')
+  if (!(await fileExists(cliPath))) {
+    errors.push('dist/cli.js does not exist')
+  } else {
+    logger.log(success('dist/cli.js exists'))
+  }
+
+  // Check data directory exists.
+  logger.log(info('Checking data directory...'))
+  const dataPath = path.join(packageRoot, 'data')
+  if (!(await fileExists(dataPath))) {
+    errors.push('data directory does not exist')
+  } else {
+    logger.log(success('data directory exists'))
+
+    // Check data files.
+    const dataFiles = [
+      'alert-translations.json',
+      'command-api-requirements.json',
+    ]
+    for (const file of dataFiles) {
+      logger.log(info(`Checking data/${file}...`))
+      const filePath = path.join(dataPath, file)
+      if (!(await fileExists(filePath))) {
+        errors.push(`data/${file} does not exist`)
+      } else {
+        logger.log(success(`data/${file} exists`))
+      }
+    }
+  }
+
+  // Print summary.
+  logger.log('')
+  logger.log('='.repeat(60))
+  logger.log(`${colors.blue('Validation Summary')}`)
+  logger.log('='.repeat(60))
+  logger.log('')
+
+  if (errors.length > 0) {
+    logger.log(`${colors.red('Errors:')}`)
+    for (const err of errors) {
+      logger.log(`  ${error(err)}`)
+    }
+    logger.log('')
+    logger.log(error('Package validation FAILED'))
+    logger.log('')
+    process.exit(1)
+  }
+
+  logger.log(success('Package validation PASSED'))
+  logger.log('')
+  process.exit(0)
+}
+
+// Run validation.
+validate().catch(e => {
+  logger.error('')
+  logger.error(error(`Unexpected error: ${e.message}`))
+  logger.error('')
+  process.exit(1)
+})