refactor: delete TUI code (mask, prompts, progress, clear, inquirer vendoring)

The TUI surface — interactive keyboard handling (mask), inquirer-based
prompts (prompts), progress bars (progress), and cursor control (clear) —
is being replaced by a dedicated TUI package. Removing here per the
'FORBIDDEN to maintain backward compatibility — actively remove' rule.

Removed:
- src/stdio/mask.ts + tests (ctrl+o toggle runner, uses setRawMode/keypress)
- src/stdio/prompts.ts + tests (inquirer wrappers)
- src/stdio/clear.ts + tests (cursor/line clear, only mask consumed it)
- src/stdio/progress.ts (progress bar, zero callers)
- src/external/@inquirer/{checkbox,confirm,input,password,search,select}.js
  (vendored inquirer — only stdio/prompts used them)
- scripts/utils/interactive-runner.mts (consumed mask from lib-stable)
- package.json ./stdio/{clear,mask,progress,prompts} exports
- package.json @inquirer/* devDeps (6 packages)
- pnpm-workspace.yaml @inquirer/* overrides (3 entries)
- build/validator refs to @inquirer/* and external-pack rewrote to drop them
- scripts/test/main.mts: removed TTY branch that used interactive-runner

Public API surface drops from 144 exports to 140. Build passes, all 6207
tests pass.

Author: jdalton

docs/api-index.md

@@ -192,17 +192,13 @@ Each entry links to the source module and shows the first sentence of its `@file
 
 ## stdio/
 
-| Subpath                                                          | Description                                         |
-| ---------------------------------------------------------------- | --------------------------------------------------- |
-| [`@socketsecurity/lib/stdio/clear`](../src/stdio/clear.ts)       | Terminal clearing and cursor utilities.             |
-| [`@socketsecurity/lib/stdio/divider`](../src/stdio/divider.ts)   | Console divider and separator utilities.            |
-| [`@socketsecurity/lib/stdio/footer`](../src/stdio/footer.ts)     | Console footer/summary formatting utilities.        |
-| [`@socketsecurity/lib/stdio/header`](../src/stdio/header.ts)     | Console header/banner formatting utilities.         |
-| [`@socketsecurity/lib/stdio/mask`](../src/stdio/mask.ts)         | Interactive output masking utilities for CLI tools. |
-| [`@socketsecurity/lib/stdio/progress`](../src/stdio/progress.ts) | Progress bar utilities for CLI applications.        |
-| [`@socketsecurity/lib/stdio/prompts`](../src/stdio/prompts.ts)   | User prompt utilities for interactive scripts.      |
-| [`@socketsecurity/lib/stdio/stderr`](../src/stdio/stderr.ts)     | Standard error stream utilities.                    |
-| [`@socketsecurity/lib/stdio/stdout`](../src/stdio/stdout.ts)     | Standard output stream utilities.                   |
+| Subpath                                                        | Description                                  |
+| -------------------------------------------------------------- | -------------------------------------------- |
+| [`@socketsecurity/lib/stdio/divider`](../src/stdio/divider.ts) | Console divider and separator utilities.     |
+| [`@socketsecurity/lib/stdio/footer`](../src/stdio/footer.ts)   | Console footer/summary formatting utilities. |
+| [`@socketsecurity/lib/stdio/header`](../src/stdio/header.ts)   | Console header/banner formatting utilities.  |
+| [`@socketsecurity/lib/stdio/stderr`](../src/stdio/stderr.ts)   | Standard error stream utilities.             |
+| [`@socketsecurity/lib/stdio/stdout`](../src/stdio/stdout.ts)   | Standard output stream utilities.            |
 
 ## themes/
 

package.json

@@ -559,10 +559,6 @@
       "types": "./dist/ssri.d.ts",
       "default": "./dist/ssri.js"
     },
-    "./stdio/clear": {
-      "types": "./dist/stdio/clear.d.ts",
-      "default": "./dist/stdio/clear.js"
-    },
     "./stdio/divider": {
       "types": "./dist/stdio/divider.d.ts",
       "default": "./dist/stdio/divider.js"
@@ -575,18 +571,6 @@
       "types": "./dist/stdio/header.d.ts",
       "default": "./dist/stdio/header.js"
     },
-    "./stdio/mask": {
-      "types": "./dist/stdio/mask.d.ts",
-      "default": "./dist/stdio/mask.js"
-    },
-    "./stdio/progress": {
-      "types": "./dist/stdio/progress.d.ts",
-      "default": "./dist/stdio/progress.js"
-    },
-    "./stdio/prompts": {
-      "types": "./dist/stdio/prompts.d.ts",
-      "default": "./dist/stdio/prompts.js"
-    },
     "./stdio/stderr": {
       "types": "./dist/stdio/stderr.d.ts",
       "default": "./dist/stdio/stderr.js"
@@ -707,12 +691,6 @@
     "@babel/parser": "7.28.4",
     "@babel/traverse": "7.28.4",
     "@babel/types": "7.28.4",
-    "@inquirer/checkbox": "4.3.1",
-    "@inquirer/confirm": "5.1.16",
-    "@inquirer/input": "4.2.2",
-    "@inquirer/password": "4.0.18",
-    "@inquirer/search": "3.1.1",
-    "@inquirer/select": "4.3.2",
     "@npmcli/arborist": "9.1.4",
     "@npmcli/package-json": "7.0.0",
     "@npmcli/promise-spawn": "8.0.3",

pnpm-lock.yaml

@@ -8,9 +8,6 @@ allowBuilds:
   esbuild: true
 
 overrides:
-  '@inquirer/ansi': 1.0.2
-  '@inquirer/core': 10.3.1
-  '@inquirer/figures': 1.0.15
   '@npmcli/arborist': 9.1.6
   '@npmcli/git': 6.0.3
   '@npmcli/installed-package-contents': 4.0.0

pnpm-workspace.yaml

@@ -5,9 +5,9 @@
 
 // Define which packages need bundling (ones that are actual npm packages).
 export const externalPackages = [
-  // external-pack: Shared dependencies and @inquirer packages bundled together.
+  // external-pack: Shared dependencies bundled together.
   // Bundled first so npm-pack can mark shared deps as external.
-  // Contains: has-flag, signal-exit, supports-color, yoctocolors-cjs, @inquirer/*.
+  // Contains: has-flag, signal-exit, supports-color, yoctocolors-cjs.
   { name: 'external-pack', bundle: true },
   // NPM bundles - grouped for better deduplication.
   // npm-pack: arborist, cacache, libnpmpack, make-fetch-happen, npm-package-arg,
@@ -67,20 +67,6 @@ export const scopedPackages = [
     bundle: true,
     subpaths: ['package-json/lib/read-package.js', 'package-json/lib/sort.js'],
   },
-  {
-    scope: '@inquirer',
-    packages: [
-      // Only bundle packages that are in devDependencies
-      'checkbox',
-      'confirm',
-      'input',
-      'password',
-      'search',
-      'select',
-    ],
-    bundle: false,
-    optional: true,
-  },
   {
     scope: '@socketregistry',
     packages: ['packageurl-js', 'is-unicode-supported', 'yocto-spinner'],

scripts/build-externals/config.mts

@@ -194,14 +194,6 @@ export function getPackageSpecificOptions(packageName) {
   } else if (packageName === 'zod') {
     // Zod has localization files we don't need.
     opts.external = [...(opts.external || []), './locales/*']
-  } else if (packageName === 'external-pack') {
-    // Inquirer packages have heavy dependencies we can exclude.
-    opts.external = [...(opts.external || []), 'rxjs/operators']
-  } else if (packageName.startsWith('@inquirer/')) {
-    // @inquirer packages export default only - unwrap for CJS compatibility.
-    opts.footer = {
-      js: 'if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }',
-    }
   } else if (packageName === '@socketregistry/packageurl-js') {
     // packageurl-js imports from socket-lib, creating a circular dependency.
     // Mark socket-lib imports as external to avoid bundling issues.