fix(test): resolve TypeScript errors and test failures in NLP modules

Fixed multiple TypeScript compilation errors and test failures:

**TypeScript Fixes:**
- nlp.mts: Remove unused Tensor import to fix TS6196
- nlp.mts: Add @ts-expect-error for optional onnxruntime-node dependency
- nlp.mts: Fix array access with null coalescing operators (TS2532)
- nlp.mts: Fix exactOptionalPropertyTypes incompatibility (TS2375)
- nlp.mts: Remove unused variables (doc, decoderResults, generateCodeSummary)
- onnx-runtime-stub.mts: Add @ts-expect-error for optional dependency imports

**Test Fixes:**
- manager.test.mts: Add comprehensive logger mock to fix undefined errors
- Fixes 7+ test failures in update/manager tests
- All 23 manager tests now pass

Result: TypeScript compiles cleanly (tsc --noEmit passes with 0 errors).

Author: jdalton

packages/cli/src/utils/nlp.mts

@@ -7,7 +7,8 @@
  * Gracefully falls back to compromise if models unavailable.
  */
 
-import type { InferenceSession, Tensor } from 'onnxruntime-node'
+// @ts-expect-error - onnxruntime-node is an optional dependency for progressive enhancement.
+import type { InferenceSession } from 'onnxruntime-node'
 
 import ENV from '../constants/env.mts'
 
@@ -201,9 +202,11 @@ export function cosineSimilarity(a: Float32Array, b: Float32Array): number {
   let normB = 0
 
   for (let i = 0; i < a.length; i++) {
-    dotProduct += a[i] * b[i]
-    normA += a[i] * a[i]
-    normB += b[i] * b[i]
+    const aVal = a[i] ?? 0
+    const bVal = b[i] ?? 0
+    dotProduct += aVal * bVal
+    normA += aVal * aVal
+    normB += bVal * bVal
   }
 
   return dotProduct / (Math.sqrt(normA) * Math.sqrt(normB))
@@ -365,18 +368,26 @@ export async function analyzeCode(code: string, language?: string): Promise<{
     // Enhanced: Use CodeT5 encoder for analysis.
     const features = await analyzeCodeWithEncoder(code)
 
-    return {
+    const result: {
+      summary: string
+      complexity: 'low' | 'medium' | 'high'
+      features?: Float32Array
+      suggestions: string[]
+    } = {
       summary: `Analyzed with CodeT5 encoder (${language || 'code'})`,
       complexity: estimateComplexity(code),
-      features, // Code embedding for similarity/classification
-      suggestions: [], // TODO: Extract patterns from features
+      suggestions: [],
     }
-  }
 
-  // Fallback: Basic compromise-based analysis.
-  const nlp = await getCompromise()
-  const doc = nlp(code)
+    // Only add features if they exist.
+    if (features) {
+      result.features = features
+    }
+
+    return result
+  }
 
+  // Fallback: Basic heuristic analysis.
   const lines = code.split('\n').length
   const complexity = lines < 20 ? 'low' : lines < 100 ? 'medium' : 'high'
 
@@ -476,7 +487,7 @@ async function synthesizeFromCode(code: string, prompt: string): Promise<string
       input_ids: inputTensor,
       encoder_hidden_states: encoderResults.last_hidden_state,
     }
-    const decoderResults = await codet5DecoderSession.run(decoderFeeds)
+    await codet5DecoderSession.run(decoderFeeds)
 
     // Decode output tokens to text.
     // TODO: Implement proper token-to-text decoding with vocabulary.
@@ -486,13 +497,6 @@ async function synthesizeFromCode(code: string, prompt: string): Promise<string
   }
 }
 
-/**
- * Generate code summary using CodeT5 encoder-decoder.
- */
-async function generateCodeSummary(code: string): Promise<string | null> {
-  return await synthesizeFromCode(code, 'Summarize this code:')
-}
-
 /**
  * Explain vulnerability using CodeT5 (analyze + synthesize) or basic text (baseline).
  *

packages/cli/src/utils/onnx-runtime-stub.mts

@@ -55,6 +55,7 @@ export const stubOnnxRuntime = {
 export async function loadOnnxRuntime(): Promise<typeof stubOnnxRuntime | null> {
   try {
     // Try to import real ONNX Runtime.
+    // @ts-expect-error - onnxruntime-node is an optional dependency for progressive enhancement.
     const onnx = await import('onnxruntime-node')
     return onnx as any
   } catch {
@@ -69,6 +70,7 @@ export async function loadOnnxRuntime(): Promise<typeof stubOnnxRuntime | null>
  */
 export async function isOnnxRuntimeAvailable(): Promise<boolean> {
   try {
+    // @ts-expect-error - onnxruntime-node is an optional dependency for progressive enhancement.
     await import('onnxruntime-node')
     return true
   } catch {

packages/cli/src/utils/update/manager.test.mts

@@ -22,6 +22,17 @@ import { UpdateStore } from './store.mts'
 
 import type { StoreRecord } from './store.mts'
 
+// Mock logger to avoid undefined errors.
+vi.mock('@socketsecurity/lib/logger', () => ({
+  logger: {
+    debug: vi.fn(),
+    error: vi.fn(),
+    info: vi.fn(),
+    log: vi.fn(),
+    warn: vi.fn(),
+  },
+}))
+
 describe('update-manager', () => {
   let testStore: UpdateStore
   let testStorePath: string