build: add optional external aliases config for TypeScript

Create separate tsconfig for external Socket package aliases that is only
used when external packages are detected at build time.

Detection logic:
- scripts/test.mjs checks for external packages using getLocalPackageAliases()
- Uses .config/tsconfig.external-aliases.json if found
- Falls back to .config/tsconfig.check.json (default) if not found

External aliases (when available):
- @socketsecurity/lib → ../../socket-lib/dist
- @socketsecurity/registry → ../../socket-registry/registry/dist
- @socketregistry/packageurl-js → ../../socket-packageurl-js/dist
- @socketsecurity/sdk → ../../socket-sdk-js/dist

This keeps the repo self-contained by default while supporting local
development workflows with sibling Socket repositories.

Author: jdalton

.config/tsconfig.external-aliases.json

@@ -0,0 +1,25 @@
+{
+  "extends": "./tsconfig.check.json",
+  "compilerOptions": {
+    "paths": {
+      "#constants/*": ["../src/constants/*"],
+      "#env/*": ["../src/env/*"],
+      "#lib/*": ["../src/*"],
+      "#packages/*": ["../src/packages/*"],
+      "#types": ["../src/types"],
+      "#utils/*": ["../src/utils/*"],
+      "cacache": ["../src/external/cacache"],
+      "make-fetch-happen": ["../src/external/make-fetch-happen"],
+      "fast-sort": ["../src/external/fast-sort"],
+      "pacote": ["../src/external/pacote"],
+      "@socketsecurity/lib": ["../../socket-lib/dist/index.d.ts"],
+      "@socketsecurity/lib/*": ["../../socket-lib/dist/*"],
+      "@socketsecurity/registry": ["../../socket-registry/registry/dist/index.d.ts"],
+      "@socketsecurity/registry/*": ["../../socket-registry/registry/dist/*"],
+      "@socketregistry/packageurl-js": ["../../socket-packageurl-js/dist/index.d.ts"],
+      "@socketregistry/packageurl-js/*": ["../../socket-packageurl-js/dist/*"],
+      "@socketsecurity/sdk": ["../../socket-sdk-js/dist/index.d.ts"],
+      "@socketsecurity/sdk/*": ["../../socket-sdk-js/dist/*"]
+    }
+  }
+}

scripts/test.mjs

@@ -7,6 +7,7 @@ import { spawn } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
+import { getLocalPackageAliases } from './utils/get-local-package-aliases.mjs'
 import { getTestsToRun } from './utils/changed-test-mapper.mjs'
 import { printHeader } from './utils/helpers.mjs'
 import { logger } from './utils/logger.mjs'
@@ -35,6 +36,13 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const rootPath = path.resolve(__dirname, '..')
 const nodeModulesBinPath = path.join(rootPath, 'node_modules', '.bin')
 
+// Detect if external Socket packages are available for type checking
+const localAliases = getLocalPackageAliases(rootPath)
+const hasExternalPackages = Object.keys(localAliases).length > 0
+const tsconfigPath = hasExternalPackages
+  ? '.config/tsconfig.external-aliases.json'
+  : '.config/tsconfig.check.json'
+
 // Track running processes for cleanup
 const runningProcesses = new Set()
 
@@ -166,18 +174,14 @@ async function runCheck() {
 
   // Run TypeScript check
   spinner.start('Checking TypeScript...')
-  exitCode = await runCommand(
-    'tsgo',
-    ['--noEmit', '-p', '.config/tsconfig.check.json'],
-    {
-      stdio: 'pipe',
-    },
-  )
+  exitCode = await runCommand('tsgo', ['--noEmit', '-p', tsconfigPath], {
+    stdio: 'pipe',
+  })
   if (exitCode !== 0) {
     spinner.stop()
     logger.error('TypeScript check failed')
     // Re-run with output to show errors
-    await runCommand('tsgo', ['--noEmit', '-p', '.config/tsconfig.check.json'])
+    await runCommand('tsgo', ['--noEmit', '-p', tsconfigPath])
     return exitCode
   }
   spinner.stop()