Add comprehensive UX tests and fix test infrastructure

Added unit tests for UX components:
- ASCII header and shimmer effects (40+ tests)
- Progress indicators and spinners (50+ tests)
- Messaging system (80+ tests)
- Whoami command (8 tests)

Fixed test infrastructure:
- Re-enabled test suite in vitest.config.mts
- Corrected import paths in test/utils.mts
- Fixed esbuild config to execute build when run directly
- Fixed local socket package paths in esbuild config (3 levels up)
- Removed unused --src-only flag from package.json
- Added yoga-sync.mjs to external/ for build dependency

Tests validate animations are disabled in CI/VITEST modes and ensure
no regression in CLI UX components.

Author: jdalton

packages/cli/.config/esbuild.cli.build.mjs

@@ -4,6 +4,7 @@
  * esbuild is much faster than Rollup and doesn't have template literal corruption issues.
  */
 
+import { build } from 'esbuild'
 import { execSync } from 'node:child_process'
 import { randomUUID } from 'node:crypto'
 import { existsSync, readFileSync } from 'node:fs'
@@ -46,17 +47,21 @@ const versionHash = `${packageJson.version}:${gitHash}:${randUuidSegment}${
 
 // Get local Socket package paths.
 const socketPackages = {
-  '@socketsecurity/lib': path.join(rootPath, '..', 'socket-lib'),
+  '@socketsecurity/lib': path.join(rootPath, '..', '..', '..', 'socket-lib'),
   '@socketsecurity/registry': path.join(
     rootPath,
     '..',
+    '..',
+    '..',
     'socket-registry',
     'registry',
   ),
-  '@socketsecurity/sdk': path.join(rootPath, '..', 'socket-sdk-js'),
+  '@socketsecurity/sdk': path.join(rootPath, '..', '..', '..', 'socket-sdk-js'),
   '@socketregistry/packageurl-js': path.join(
     rootPath,
     '..',
+    '..',
+    '..',
     'socket-packageurl-js',
   ),
 }
@@ -101,7 +106,7 @@ function resolvePackageSubpath(packagePath, subpath) {
   return null
 }
 
-export default {
+const config = {
   entryPoints: [path.join(rootPath, 'src/cli-dispatch.mts')],
   bundle: true,
   outfile: path.join(rootPath, 'dist/cli.js'),
@@ -208,7 +213,7 @@ export default {
       name: 'resolve-socket-lib-internals',
       setup(build) {
         // Resolve relative imports from socket-lib dist files.
-        const socketLibPath = path.join(rootPath, '..', 'socket-lib')
+        const socketLibPath = path.join(rootPath, '..', '..', '..', 'socket-lib')
         if (existsSync(socketLibPath)) {
           build.onResolve({ filter: /^\.\.\/constants\// }, args => {
             // Only handle imports from socket-lib's dist directory.
@@ -293,3 +298,13 @@ export default {
     },
   ],
 }
+
+// Run build if invoked directly.
+if (import.meta.url === `file://${process.argv[1]}`) {
+  build(config).catch(error => {
+    console.error('Build failed:', error)
+    process.exitCode = 1
+  })
+}
+
+export default config

packages/cli/external/yoga-sync.mjs

@@ -31,7 +31,7 @@
     "./data/command-api-requirements.json": "./data/command-api-requirements.json"
   },
   "scripts": {
-    "build": "node --import=./scripts/load.mjs scripts/build.mjs --src-only",
+    "build": "node --import=./scripts/load.mjs scripts/build.mjs",
     "build:sea:internal:bootstrap": "rollup -c .config/rollup.cli-sea.config.mjs",
     "build:js": "node scripts/extract-yoga-wasm.mjs && node .config/esbuild.cli.build.mjs",
     "build:watch": "node scripts/extract-yoga-wasm.mjs && node .config/esbuild.cli.build.mjs --watch",
@@ -53,7 +53,7 @@
     "lint-staged": "dotenvx -q run -f .env.local -- lint-staged",
     "precommit": "dotenvx -q run -f .env.local -- lint-staged",
     "prepare": "dotenvx -q run -f .env.local -- husky",
-    "bs": "dotenvx -q run -f .env.local -- pnpm run build --src-only; pnpm exec socket --",
+    "bs": "dotenvx -q run -f .env.local -- pnpm run build; pnpm exec socket --",
     "s": "dotenvx -q run -f .env.local -- pnpm exec socket --",
     "e2e-tests": "dotenvx -q run -f .env.test -- vitest run --config vitest.e2e.config.mts",
     "test": "run-s check test:*",

packages/cli/package.json

@@ -0,0 +1,161 @@
+/**
+ * @fileoverview Tests for whoami command.
+ * Validates authentication status display with various token sources.
+ */
+
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+
+import { cmdit, spawnSocketCli } from '../../../test/utils.mts'
+import { FLAG_CONFIG, FLAG_HELP, FLAG_JSON } from '../../constants/cli.mts'
+import { getBinCliPath } from '../../constants/paths.mts'
+
+const binCliPath = getBinCliPath()
+
+describe('socket whoami', () => {
+  let originalEnv: NodeJS.ProcessEnv
+
+  beforeEach(() => {
+    // Save original environment.
+    originalEnv = { ...process.env }
+  })
+
+  afterEach(() => {
+    // Restore original environment.
+    process.env = originalEnv
+  })
+
+  describe('help output', () => {
+    cmdit(['whoami', FLAG_HELP], 'should show help', async cmd => {
+      const { code, stderr, stdout } = await spawnSocketCli(binCliPath, cmd)
+
+      expect(code).toBe(0)
+      expect(stderr).toContain('whoami')
+      expect(stderr).toContain('Check if you are authenticated')
+      expect(stderr).toContain('Examples')
+      expect(stdout).toBe('')
+    })
+  })
+
+  describe('authenticated with API token', () => {
+    // Test token - not a real API key.
+    const testToken = 'sktsec_test123456789'
+
+    cmdit(
+      ['whoami', FLAG_CONFIG, `{"apiToken":"${testToken}"}`],
+      'should show authenticated status',
+      async cmd => {
+        const { code, stderr, stdout } = await spawnSocketCli(binCliPath, cmd)
+
+        expect(code).toBe(0)
+        expect(stderr).toContain('Authenticated with Socket')
+        expect(stderr).toContain('Token: sktsec_')
+        expect(stderr).toContain('Source:')
+        expect(stdout).toBe('')
+      },
+    )
+
+    cmdit(
+      ['whoami', FLAG_JSON, FLAG_CONFIG, `{"apiToken":"${testToken}"}`],
+      'should output JSON format',
+      async cmd => {
+        const { code, stderr, stdout } = await spawnSocketCli(binCliPath, cmd)
+
+        expect(code).toBe(0)
+        expect(stdout).toContain('"authenticated":true')
+        expect(stdout).toContain('"token":"sktsec_')
+        expect(stdout).toContain('"location":')
+        expect(stderr).toBe('')
+      },
+    )
+  })
+
+  describe('not authenticated', () => {
+    cmdit(
+      ['whoami', FLAG_CONFIG, '{}'],
+      'should show not authenticated',
+      async cmd => {
+        const { code, stderr, stdout } = await spawnSocketCli(binCliPath, cmd, {
+          env: {
+            ...process.env,
+            // Explicitly unset any API token environment variables.
+            SOCKET_SECURITY_API_KEY: '',
+            SOCKET_CLI_API_TOKEN: '',
+          },
+        })
+
+        expect(code).toBe(0)
+        expect(stderr).toContain('Not authenticated with Socket')
+        expect(stderr).toContain('To authenticate')
+        expect(stderr).toContain('socket login')
+        expect(stdout).toBe('')
+      },
+    )
+
+    cmdit(
+      ['whoami', FLAG_JSON, FLAG_CONFIG, '{}'],
+      'should output JSON format when not authenticated',
+      async cmd => {
+        const { code, stderr, stdout } = await spawnSocketCli(binCliPath, cmd, {
+          env: {
+            ...process.env,
+            SOCKET_SECURITY_API_KEY: '',
+            SOCKET_CLI_API_TOKEN: '',
+          },
+        })
+
+        expect(code).toBe(0)
+        expect(stdout).toContain('"authenticated":false')
+        expect(stdout).toContain('"token":null')
+        expect(stdout).toContain('"location":null')
+        expect(stderr).toBe('')
+      },
+    )
+  })
+
+  describe('token display', () => {
+    cmdit(
+      [
+        'whoami',
+        FLAG_CONFIG,
+        '{"apiToken":"sktsec_abcdefghijklmnopqrstuvwxyz"}',
+      ],
+      'should mask token after prefix',
+      async cmd => {
+        const { code, stderr } = await spawnSocketCli(binCliPath, cmd)
+
+        expect(code).toBe(0)
+        expect(stderr).toContain('Token: sktsec_')
+        expect(stderr).toContain('...')
+        // Should not contain full token.
+        expect(stderr).not.toContain('abcdefghijklmnopqrstuvwxyz')
+      },
+    )
+  })
+
+  describe('token source detection', () => {
+    cmdit(
+      ['whoami', FLAG_CONFIG, '{"apiToken":"sktsec_from_config"}'],
+      'should detect config file source',
+      async cmd => {
+        const { code, stderr } = await spawnSocketCli(binCliPath, cmd)
+
+        expect(code).toBe(0)
+        expect(stderr).toContain('Source:')
+        expect(stderr).toContain('Config file')
+      },
+    )
+  })
+
+  describe('error handling', () => {
+    cmdit(
+      ['whoami', '--invalid-flag'],
+      'should handle invalid flags',
+      async cmd => {
+        const { code, stderr } = await spawnSocketCli(binCliPath, cmd)
+
+        expect(code).not.toBe(0)
+        expect(stderr).toContain('Unknown option')
+      },
+    )
+  })
+})