Add @socketsecurity/lib support to build tooling

Add support for resolving @socketsecurity/lib package from local
socket-lib repository during development:

- Update alias-loader to check lib/ subdirectory for module resolution
- Add @socketsecurity/lib to package alias mappings
- Configure ESLint to ignore @socketsecurity/lib imports
- Add TypeScript path mappings for @socketsecurity/lib types

This enables using local socket-lib package during development while
falling back to published version in CI/production.

Author: jdalton

.config/eslint.config.mjs

@@ -113,8 +113,8 @@ export default [
         'error',
         {
           commonjs: true,
-          // Ignore @socketsecurity/registry subpaths - resolved by runtime loader
-          ignore: ['^@socketsecurity/registry/'],
+          // Ignore @socketsecurity/registry and @socketsecurity/lib subpaths - resolved by runtime loader
+          ignore: ['^@socketsecurity/registry/', '^@socketsecurity/lib/'],
         },
       ],
       'import-x/order': [
@@ -141,11 +141,11 @@ export default [
         },
       ],
       'n/exports-style': ['error', 'module.exports'],
-      // Ignore @socketsecurity/registry subpaths - resolved by runtime loader
+      // Ignore @socketsecurity/registry and @socketsecurity/lib subpaths - resolved by runtime loader
       'n/no-missing-import': [
         'error',
         {
-          allowModules: ['@socketsecurity/registry'],
+          allowModules: ['@socketsecurity/registry', '@socketsecurity/lib'],
         },
       ],
       // The n/no-unpublished-bin rule does does not support non-trivial glob

.config/tsconfig.check.json

@@ -6,6 +6,10 @@
     "noEmit": true,
     "noPropertyAccessFromIndexSignature": false,
     "noUncheckedIndexedAccess": false,
+    "paths": {
+      "@socketsecurity/lib": ["../../socket-lib/dist/index.d.ts"],
+      "@socketsecurity/lib/*": ["../../socket-lib/dist/*"]
+    },
     "skipLibCheck": true,
     "types": ["vitest/globals", "node"],
     "verbatimModuleSyntax": false

scripts/utils/alias-loader.mjs

@@ -33,6 +33,9 @@ export function resolve(specifier, context, nextResolve) {
         path.join(localPath, subpath),
         path.join(localPath, `${subpath}.mjs`),
         path.join(localPath, `${subpath}.js`),
+        path.join(localPath, 'lib', subpath),
+        path.join(localPath, 'lib', `${subpath}.mjs`),
+        path.join(localPath, 'lib', `${subpath}.js`),
         path.join(localPath, 'dist', subpath),
         path.join(localPath, 'dist', `${subpath}.mjs`),
         path.join(localPath, 'dist', `${subpath}.js`),

scripts/utils/get-local-package-aliases.mjs

@@ -21,7 +21,13 @@ export function getLocalPackageAliases(rootDir) {
   // If no rootDir provided, try to infer from stack trace or use process.cwd().
   const baseDir = rootDir || process.cwd()
 
-  // Check for ../socket-registry/registry/dist.
+  // Check for ../socket-lib/dist for @socketsecurity/lib.
+  const libPath = path.join(baseDir, '..', 'socket-lib', 'dist')
+  if (existsSync(path.join(libPath, '../package.json'))) {
+    aliases['@socketsecurity/lib'] = libPath
+  }
+
+  // Check for ../socket-registry/registry/dist for @socketsecurity/registry.
   const registryPath = path.join(baseDir, '..', 'socket-registry', 'registry', 'dist')
   if (existsSync(path.join(registryPath, '../package.json'))) {
     aliases['@socketsecurity/registry'] = registryPath