refactor: rename scripts/*.mjs to *.mts for native TypeScript (#1204)

* refactor: rename scripts/*.mjs to *.mts with full TypeScript types

* fix: correct .mjs/.mts file extension mismatches after script rename

- scripts/check.mts: update 4 validate-* spawn paths from .mjs to .mts
- scripts/validate-no-cdn-refs.mts: fix self-skip check extension
- scripts/lib/build-exec.mts: fix dynamic import of build-helpers
- .github/workflows/provenance.yml: update 11 root script references
- packages/cli/package.json: revert local script refs back to .mjs
  (only root scripts/ were renamed, not packages/cli/scripts/)

* fix: revert cross-package imports to .mjs (files not renamed)

Root scripts/ were renamed to .mts but files in packages/build-infra/
and packages/cli/scripts/ were not. Fix 7 cross-package imports that
incorrectly referenced .mts extensions, and revert package-builder
package.json script entries to .mjs.

* Revert "fix: revert cross-package imports to .mjs (files not renamed)"

This reverts commit 9f5a661.

* refactor: rename sub-package scripts to .mts for native TypeScript

Rename all .mjs scripts in packages/build-infra/lib/,
packages/cli/scripts/, packages/cli/.config/,
packages/package-builder/scripts/, and template files to .mts
to match the root scripts/ rename from commit 049107c.

- 73 files renamed via git mv (.mjs -> .mts)
- Updated all internal imports within renamed files
- Updated package.json script commands in cli, build-infra,
  package-builder, and template packages
- Updated cross-package imports in root scripts/
- Preserved socketaddon-main/index.mjs (published npm entry point)
- Preserved .mjs extension checks in bundle validation scripts

* fix(build-infra): use const for non-reassigned destructured binding

* refactor: add TypeScript types to sub-package scripts

Author: jdalton

.config/tsconfig.check.json

@@ -5,6 +5,7 @@
   },
   "include": [
     "../packages/cli/src/**/*.mts",
+    "../packages/cli/src/**/*.d.ts",
     "../packages/cli/*.config.mts",
     "../packages/cli/.config/*.mts"
   ],

.github/workflows/provenance.yml

@@ -63,7 +63,7 @@ jobs:
       - name: Generate platform matrix
         id: matrix
         run: |
-          MATRIX=$(node scripts/get-platform-matrix.mjs)
+          MATRIX=$(node scripts/get-platform-matrix.mts)
           echo "matrix=$MATRIX" >> $GITHUB_OUTPUT
 
       - name: Upload CLI bundle
@@ -195,7 +195,7 @@ jobs:
           set -euo pipefail
 
           # Get platform targets from single source of truth.
-          PLATFORMS_STR=$(node scripts/get-platform-targets.mjs)
+          PLATFORMS_STR=$(node scripts/get-platform-targets.mts)
           read -ra PLATFORMS <<< "$PLATFORMS_STR"
 
           for target in "${PLATFORMS[@]}"; do
@@ -227,7 +227,7 @@ jobs:
             if [ -n "$LIBC" ]; then
               LIBC_FLAG="--libc=$LIBC"
             fi
-            node scripts/prepublish-socketbin.mjs \
+            node scripts/prepublish-socketbin.mts \
               --platform="$PLATFORM" --arch="$ARCH" $LIBC_FLAG --prod \
               --version="$VERSION" --method=sea
 
@@ -253,7 +253,7 @@ jobs:
           TAG: ${{ steps.version.outputs.cli_tag }}
         run: |
           PKG_DIR="packages/package-builder/build/prod/out/cli"
-          node scripts/prepare-package-for-publish.mjs "$PKG_DIR" "$VERSION"
+          node scripts/prepare-package-for-publish.mts "$PKG_DIR" "$VERSION"
           cd "$PKG_DIR"
           npm publish --provenance --access public --no-git-checks --tag "$TAG"
 
@@ -264,7 +264,7 @@ jobs:
           TAG: ${{ steps.version.outputs.cli_tag }}
         run: |
           PKG_DIR="packages/package-builder/build/prod/out/cli-with-sentry"
-          node scripts/prepare-package-for-publish.mjs "$PKG_DIR" "$VERSION"
+          node scripts/prepare-package-for-publish.mts "$PKG_DIR" "$VERSION"
           cd "$PKG_DIR"
           npm publish --provenance --access public --no-git-checks --tag "$TAG"
 
@@ -276,7 +276,7 @@ jobs:
           TAG: ${{ steps.version.outputs.cli_tag }}
         run: |
           PKG_DIR="packages/package-builder/build/prod/out/socket"
-          node scripts/prepare-package-for-publish.mjs "$PKG_DIR" "$VERSION"
+          node scripts/prepare-package-for-publish.mts "$PKG_DIR" "$VERSION"
           cd "$PKG_DIR"
           npm publish --provenance --access public --no-git-checks --tag "$TAG"
 
@@ -285,7 +285,7 @@ jobs:
         if: ${{ inputs.iocraft }}
         run: |
           echo "Downloading iocraft .node binaries for all platforms..."
-          node scripts/download-iocraft-binaries.mjs
+          node scripts/download-iocraft-binaries.mts
 
       # Copy iocraft binaries to package directories.
       - name: Copy iocraft binaries to packages
@@ -295,7 +295,7 @@ jobs:
           set -euo pipefail
 
           # Get platform targets from single source of truth.
-          PLATFORMS_STR=$(node scripts/get-platform-targets.mjs)
+          PLATFORMS_STR=$(node scripts/get-platform-targets.mts)
           read -ra PLATFORMS <<< "$PLATFORMS_STR"
 
           for target in "${PLATFORMS[@]}"; do
@@ -320,7 +320,7 @@ jobs:
           TAG: ${{ steps.version.outputs.iocraft_tag }}
         run: |
           PKG_DIR="packages/package-builder/build/prod/out/socketaddon-iocraft"
-          node scripts/prepare-package-for-publish.mjs "$PKG_DIR" "$VERSION"
+          node scripts/prepare-package-for-publish.mts "$PKG_DIR" "$VERSION"
           cd "$PKG_DIR"
           npm publish --provenance --access public --no-git-checks --tag "$TAG"
 
@@ -334,7 +334,7 @@ jobs:
           set -euo pipefail
 
           # Get platform targets from single source of truth.
-          PLATFORMS_STR=$(node scripts/get-platform-targets.mjs)
+          PLATFORMS_STR=$(node scripts/get-platform-targets.mts)
           read -ra PLATFORMS <<< "$PLATFORMS_STR"
 
           for target in "${PLATFORMS[@]}"; do
@@ -343,7 +343,7 @@ jobs:
             PKG_DIR="packages/package-builder/build/prod/out/socketaddon-iocraft-${target}"
 
             # Prepare package.
-            node scripts/prepare-package-for-publish.mjs "$PKG_DIR" "$VERSION"
+            node scripts/prepare-package-for-publish.mts "$PKG_DIR" "$VERSION"
 
             # Publish.
             cd "$PKG_DIR"

.gitignore

@@ -136,3 +136,4 @@ packages/socket/*.png
 !docs/build/
 !packages/package-builder/templates/**/*.d.ts
 !src/types/**/*.d.ts
+!packages/*/src/types/**/*.d.ts

package.json

@@ -9,31 +9,31 @@
   },
   "scripts": {
     "// Build": "",
-    "build": "node scripts/build.mjs",
-    "build:force": "node scripts/build.mjs --force",
+    "build": "node scripts/build.mts",
+    "build:force": "node scripts/build.mts --force",
     "build:cli": "pnpm --filter @socketsecurity/cli run build",
     "build:watch": "pnpm --filter @socketsecurity/cli run build:watch",
     "build:sea": "pnpm --filter @socketsecurity/cli run build:sea",
     "build:js": "pnpm --filter @socketsecurity/cli run build:js",
     "dev": "pnpm run build:watch",
-    "prebuild": "node scripts/setup.mjs --restore-cache --quiet",
+    "prebuild": "node scripts/setup.mts --restore-cache --quiet",
     "// Quality Checks": "",
-    "check": "node scripts/check.mjs",
-    "check:all": "node scripts/check.mjs --all",
-    "fix": "node scripts/fix.mjs",
-    "fix:all": "node scripts/fix.mjs --all",
-    "lint": "node scripts/lint.mjs",
-    "lint:all": "node scripts/lint.mjs --all",
+    "check": "node scripts/check.mts",
+    "check:all": "node scripts/check.mts --all",
+    "fix": "node scripts/fix.mts",
+    "fix:all": "node scripts/fix.mts --all",
+    "lint": "node scripts/lint.mts",
+    "lint:all": "node scripts/lint.mts --all",
     "format": "oxfmt --write .",
     "format:check": "oxfmt --check .",
     "// Claude": "",
     "claude": "pnpm --filter @socketsecurity/cli run claude --",
     "// Type Checking": "",
-    "type": "node scripts/type.mjs",
-    "type:all": "node scripts/type.mjs",
+    "type": "node scripts/type.mts",
+    "type:all": "node scripts/type.mts",
     "// Testing": "",
-    "test": "node scripts/test-monorepo.mjs",
-    "test:all": "node scripts/test-monorepo.mjs --all",
+    "test": "node scripts/test-monorepo.mts",
+    "test:all": "node scripts/test-monorepo.mts --all",
     "test:unit": "pnpm --filter @socketsecurity/cli run test:unit",
     "pretest:all": "pnpm run build",
     "testu": "pnpm --filter @socketsecurity/cli run test:unit:update",
@@ -42,12 +42,12 @@
     "security": "agentshield scan && { command -v zizmor >/dev/null && zizmor .github/ || echo 'zizmor not installed — run pnpm run setup to install'; }",
     "// Maintenance": "",
     "clean": "pnpm --filter \"./packages/**\" run clean",
-    "clean:cache": "node scripts/clean-cache.mjs",
-    "clean:cache:all": "node scripts/clean-cache.mjs --all",
-    "update": "node scripts/update.mjs",
+    "clean:cache": "node scripts/clean-cache.mts",
+    "clean:cache:all": "node scripts/clean-cache.mts --all",
+    "update": "node scripts/update.mts",
     "// Setup": "",
-    "setup": "node scripts/setup.mjs",
-    "postinstall": "node scripts/setup.mjs --install --quiet",
+    "setup": "node scripts/setup.mts",
+    "postinstall": "node scripts/setup.mts --install --quiet",
     "prepare": "husky",
     "pretest": "pnpm run build:cli"
   },

…ages/build-infra/lib/esbuild-helpers.mjs …ages/build-infra/lib/esbuild-helpers.mtspackages/build-infra/lib/esbuild-helpers.mjs renamed to packages/build-infra/lib/esbuild-helpers.mts packages/build-infra/lib/esbuild-helpers.mjs renamed to packages/build-infra/lib/esbuild-helpers.mts

@@ -12,7 +12,9 @@
  * }
  */
 
-import { transformUnicodePropertyEscapes } from './unicode-property-escape-transform.mjs'
+import type { PluginBuild, BuildResult } from 'esbuild'
+
+import { transformUnicodePropertyEscapes } from './unicode-property-escape-transform.mts'
 
 /**
  * Create esbuild plugin for Unicode property escape transformations.
@@ -22,8 +24,8 @@ import { transformUnicodePropertyEscapes } from './unicode-property-escape-trans
 export function unicodeTransformPlugin() {
   return {
     name: 'unicode-transform',
-    setup(build) {
-      build.onEnd(result => {
+    setup(build: PluginBuild) {
+      build.onEnd((result: BuildResult) => {
         const outputs = result.outputFiles
         if (!outputs || !outputs.length) {
           return

…lib/esbuild-plugin-unicode-transform.mjs …lib/esbuild-plugin-unicode-transform.mtspackages/build-infra/lib/esbuild-plugin-unicode-transform.mjs renamed to packages/build-infra/lib/esbuild-plugin-unicode-transform.mts packages/build-infra/lib/esbuild-plugin-unicode-transform.mjs renamed to packages/build-infra/lib/esbuild-plugin-unicode-transform.mts

@@ -193,11 +193,9 @@ export function parsePlatformTarget(target) {
   // Handle standard platform-arch.
   const parts = target.split('-')
   if (parts.length === 2) {
-    let [platform, arch] = parts
+    const [rawPlatform, arch] = parts
     // Normalize 'win' to 'win32' for internal use.
-    if (platform === 'win') {
-      platform = 'win32'
-    }
+    const platform = rawPlatform === 'win' ? 'win32' : rawPlatform
     if (VALID_PLATFORMS.includes(platform) && VALID_ARCHS.includes(arch)) {
       return { arch, platform }
     }