chore(wheelhouse): cascade template@8a15af1b

Auto-applied by socket-wheelhouse sync-scaffolding into cascade-socket-cli-9299.
11 file(s) touched:
  - .claude/hooks/fleet/prefer-async-spawn-guard/index.mts
  - .claude/hooks/fleet/prefer-async-spawn-guard/test/index.test.mts
  - .github/workflows/ci.yml
  - scripts/fleet/setup/external-tools.json
  - scripts/fleet/setup/index.mts
  - scripts/fleet/setup/lib/check-firewall.mjs
  - scripts/fleet/setup/lib/install-tool.mjs
  - scripts/fleet/setup/lib/jq.mjs
  - scripts/fleet/setup/lib/platform.mjs
  - scripts/fleet/setup/lib/read-pinned-version.mjs
  - scripts/fleet/setup/setup-tools.mjs

Author: jdalton

.claude/hooks/fleet/prefer-async-spawn-guard/index.mts

@@ -52,9 +52,14 @@ const CHILD_PROCESS_REQUIRE_RE =
 
 /**
  * Files where importing `node:child_process` is legitimate: this hook's own
- * files, the oxlint rules that match the banned shapes, and the markdownlint
+ * files, the oxlint rules that match the banned shapes, the markdownlint
  * self-skip shim (a `.mjs` rule loaded by markdownlint-cli2, which can't await
- * the async lib wrapper, so its documented fallback is the sync builtin).
+ * the async lib wrapper, so its documented fallback is the sync builtin), and
+ * the pre-pnpm bootstrap `.mjs` provisioners under `scripts/fleet/setup/`.
+ * Those install pnpm itself on a bare machine BEFORE node_modules exists, so
+ * `@socketsecurity/lib`'s async `spawn` wrapper isn't on disk to import — the
+ * sync builtin is the only option (same constraint as the markdownlint shim);
+ * each carries an `oxlint-disable socket/prefer-async-spawn` documenting it.
  */
 export function isExemptPath(filePath: string): boolean {
   return (
@@ -72,7 +77,11 @@ export function isExemptPath(filePath: string): boolean {
     ) ||
     filePath.includes(
       '/.config/fleet/markdownlint-rules/_shared/wheelhouse-self-skip.',
-    )
+    ) ||
+    // Pre-pnpm bootstrap .mjs provisioners (scripts/fleet/setup/{lib/,*}.mjs):
+    // run before node_modules exists, so the lib spawn wrapper isn't importable
+    // yet. Scoped to `.mjs` so the dir's `.mts` steps stay guarded.
+    (filePath.includes('/scripts/fleet/setup/') && filePath.endsWith('.mjs'))
   )
 }
 

.claude/hooks/fleet/prefer-async-spawn-guard/test/index.test.mts

@@ -74,6 +74,10 @@ describe('prefer-async-spawn-guard / isExemptPath', () => {
       '/repo/.config/fleet/markdownlint-rules/_shared/wheelhouse-self-skip.mjs',
       '/repo/dist/foo.js',
       '/repo/node_modules/x/y.js',
+      // Pre-pnpm bootstrap .mjs provisioners (install pnpm before node_modules
+      // exists, so the lib spawn wrapper isn't importable yet).
+      '/repo/scripts/fleet/setup/lib/install-tool.mjs',
+      '/repo/scripts/fleet/setup/setup-tools.mjs',
     ]) {
       assert.equal(isExemptPath(p), true, p)
     }
@@ -82,5 +86,9 @@ describe('prefer-async-spawn-guard / isExemptPath', () => {
   test('does not exempt ordinary source', () => {
     assert.equal(isExemptPath('/repo/scripts/foo.mts'), false)
     assert.equal(isExemptPath('/repo/src/bar.ts'), false)
+    // The setup dir's `.mts` steps run AFTER setup, so they stay guarded —
+    // only the pre-node `.mjs` bootstrap files are exempt.
+    assert.equal(isExemptPath('/repo/scripts/fleet/setup/index.mts'), false)
+    assert.equal(isExemptPath('/repo/scripts/fleet/setup/token.mts'), false)
   })
 })

.github/workflows/ci.yml

@@ -29,4 +29,4 @@ concurrency:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@4069dfc8c54c0b6ffa43924857e6b89296370efe # main (2026-06-09)
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@1c633fb12cf27b12f06f9d685e89d34e302822c3 # main (2026-06-13)

scripts/fleet/setup/external-tools.json

@@ -0,0 +1,130 @@
+{
+  "pnpm": {
+    "notes": [
+      "pnpm publishes 7 platform-native binaries: linux-{x64,arm64}{,-musl}, darwin-arm64, win-{x64,arm64}. Verified against v11.6.0 (2026-06-13).",
+      "linux-*-musl tarballs are first-class assets with distinct integrity from the glibc tarballs — the binaries are linked against different libcs and only the matching one runs on its target. Don't 'simplify' by pointing musl keys at the glibc asset.",
+      "darwin-x64 is the odd one out: upstream dropped the SEA binary in 11.0.5 because of nodejs/node#62893 (upstream LIEF/Mach-O bug that the Node team has declined to fix). Intel Mac instead installs the npm-registry JS tarball (`pnpm-<version>.tgz`) + runs it through system Node. update-external-tools.mts recognizes the `<pkg>-<version>.tgz` asset shape and fetches its integrity from the npm registry rather than the GitHub release.",
+      "v11.6.0 was bumped via update-external-tools.mts (all 8 platforms re-hashed: GitHub assets + darwin-x64 from the npm registry). It published 2026-06-11, inside the 7-day minimumReleaseAge soak, so the bump rode a dated `soakBypass` entry (auto-disarms at `removable`) — pnpm releases are GitHub-asset distributions from a known publisher; the soak targets npm typosquats / malicious freshpubs. Drop the cleared soakBypass on the next routine bump."
+    ],
+    "description": "Fast, disk space efficient package manager",
+    "repository": "github:pnpm/pnpm",
+    "version": "11.6.0",
+    "soakBypass": {
+      "version": "11.6.0",
+      "published": "2026-06-11",
+      "removable": "2026-06-18"
+    },
+    "release": "asset",
+    "platforms": {
+      "darwin-arm64": {
+        "asset": "pnpm-darwin-arm64.tar.gz",
+        "integrity": "sha512-DHKwseQ/HKcfXLOrzwLGFAd4SWOyo3jW+PileiHwQaI8/ZDpg0IR1vVz0SzBWWv7O7HinYUjbm1elENkR8EG9w=="
+      },
+      "darwin-x64": {
+        "asset": "pnpm-11.6.0.tgz",
+        "integrity": "sha512-mjZRgiQIDG/lFlr9z+eb+hGMKb5wPz9GKx4y7+HpjkfodQsUjggoYlCq1BE8x5k8pBPE4s1Ed1JwjC7ldRvJXw=="
+      },
+      "linux-arm64": {
+        "asset": "pnpm-linux-arm64.tar.gz",
+        "integrity": "sha512-x1bEpvzYu6CLlxc78cfNl4pDTa2sITFCaictgW/TK+QFL1uD1IJe9ssV3tAfclD+RhsIaSrxanPajHzJjGyrlg=="
+      },
+      "linux-arm64-musl": {
+        "asset": "pnpm-linux-arm64-musl.tar.gz",
+        "integrity": "sha512-gpdSD/YT0eAm3jmS6dWdWwzDuW0gaRuWVQ4qjsWBDX9/KcYCWW1PLZ3JLZ6tiXkkT2a1GSKQUaHuKul57wbqlQ=="
+      },
+      "linux-x64": {
+        "asset": "pnpm-linux-x64.tar.gz",
+        "integrity": "sha512-uj1Zz76+lcHATLkCrM/JUIIUaIYgXEEXOXNvSO+g3cYd5RXpS6MacuII9TRBAknr2n5XTIi/bAbOLfxF3hk4nw=="
+      },
+      "linux-x64-musl": {
+        "asset": "pnpm-linux-x64-musl.tar.gz",
+        "integrity": "sha512-4IC9DBZbiJVXz2/VtrZFtXc+OVXUIOhGv6WfN/p27k/rFJOj/57iNNC+MzZDRzlCZsZIAb3WAJUe2B4AAPLsnQ=="
+      },
+      "win-arm64": {
+        "asset": "pnpm-win32-arm64.zip",
+        "integrity": "sha512-VITunLEwYnoEeVF/UP5QD1qOCDhDy+C+BVhBKq5IT4UTiP3X2wanWCtL1nk5OTHg+oPB7NHaWah0SkLqtMcqTA=="
+      },
+      "win-x64": {
+        "asset": "pnpm-win32-x64.zip",
+        "integrity": "sha512-oX2y8mihTVM6QEDA8MdXyBGOQ8xxGjqhX1I9+jLfrFY5vCrwpkArhu8bTMq//vMPaS2Rl/nQ7cSgOySnhsvFog=="
+      }
+    }
+  },
+  "sfw": {
+    "notes": [
+      "SFW (Socket Firewall) is published in two flavors: free (public, SocketDev/sfw-free) and enterprise (private, SocketDev/firewall-release). Both ship the same 7-platform set: linux-{x64,arm64}{,-musl}, darwin-{x64,arm64}, win-x64. win-arm64 is intentionally absent — upstream does not yet build it. Unlike zizmor (a security audit), SFW is a required dependency of the install flow, so consumers on win-arm64 must skip SFW-dependent steps until upstream support lands.",
+      "Setup action picks the enterprise flavor when SOCKET_API_KEY is in env, otherwise the free flavor. Enterprise downloads require GITHUB_TOKEN auth (private repo); install-tool.mjs forwards GITHUB_TOKEN automatically when set."
+    ],
+    "description": "Socket Firewall — package manager command wrapper",
+    "version": "1.12.0",
+    "release": "asset",
+    "free": {
+      "repository": "github:SocketDev/sfw-free",
+      "binaryName": "sfw",
+      "platforms": {
+        "darwin-arm64": {
+          "asset": "sfw-free-macos-arm64",
+          "integrity": "sha512-lwh/AIf7HXVIrE28LDfvtJqnaGb7azC+Up8Hi/c9hIfn9wMRt55misCKx9b6CjYi+d3bHladYNYPlqVtlqNpcQ=="
+        },
+        "darwin-x64": {
+          "asset": "sfw-free-macos-x86_64",
+          "integrity": "sha512-iBLJ7bzrnnUPmUbN8FFzmXNYowWnahOD4DWzKYbneeCsvFa1xlHT4LaLWTysatd5npJIO7QOiRow6yw/tgjCWw=="
+        },
+        "linux-arm64": {
+          "asset": "sfw-free-linux-arm64",
+          "integrity": "sha512-TZ0hzAzPyNfi1PgqU5+TzkrlBcWXZlXaSHkx1/wzIck4vlZXFQI8i7CCvWYihrJQ3zgEwVI30MmrqsJ9W7xWQw=="
+        },
+        "linux-arm64-musl": {
+          "asset": "sfw-free-musl-linux-arm64",
+          "integrity": "sha512-O+X0JxQJJn2YpAJFP38ZuG156pewgk+HJBVUTJZM8AMZSbERLy6LLDD2S8uwPXpMXDD9uRy8/h7EpRcu1OQLcw=="
+        },
+        "linux-x64": {
+          "asset": "sfw-free-linux-x86_64",
+          "integrity": "sha512-Yuu+qoqxa0n7WIS9NMI3uuitUMoELbbUqJm3W6L2AsMJNZpVekXKmrZIhEjxWjJqvKt3mErKxK+izdP3/F+64Q=="
+        },
+        "linux-x64-musl": {
+          "asset": "sfw-free-musl-linux-x86_64",
+          "integrity": "sha512-U4WJeq+/Z634uFvW0+Hvmb/BUutMeiZQ1dwP40/wKMiCDwKGPr+Unl4KqwaG3qaLjkTRJ938sUWQy+/gFeEmDg=="
+        },
+        "win-x64": {
+          "asset": "sfw-free-windows-x86_64.exe",
+          "integrity": "sha512-tkZHeaxydBStW6SsCi5S2jLMtdj2UQ/PdZb/ch8W532UjFdZUJD0oygW/YWliK0HQkcyw5GQm2d1iZU0P/yElg=="
+        }
+      }
+    },
+    "enterprise": {
+      "repository": "github:SocketDev/firewall-release",
+      "binaryName": "sfw",
+      "platforms": {
+        "darwin-arm64": {
+          "asset": "sfw-macos-arm64",
+          "integrity": "sha512-G7te2xB1Q+K/k/2Wijbn96eJZUZoNFlDNKURydLBLB69Jkuc1M1lNFbqxiyP8tfOlMIBKWxRwfZyeX9ipPy4Ew=="
+        },
+        "darwin-x64": {
+          "asset": "sfw-macos-x86_64",
+          "integrity": "sha512-/ogpJY01pDTEcvDPq09FNxGP5eXu4d+ab2RxT1r4he0ptfCOGOO3rQXfxTFqrOmS+OSz5RZe+4qPupM4nGriMQ=="
+        },
+        "linux-arm64": {
+          "asset": "sfw-linux-arm64",
+          "integrity": "sha512-oXhTWx/I/1yZRn0ik3DL5y2/4RZqv/msJpTi6m190jBGg/x7bgqJO4uCOUJe1+iudK3bNGsYB8zs6vIJTLwA7g=="
+        },
+        "linux-arm64-musl": {
+          "asset": "sfw-musl-linux-arm64",
+          "integrity": "sha512-VtvO4OkLNO7XW1YwY73WoIZeRp7sMg+LbdeL2CVy5bgysTnuBxKrkkJvW41BsuScVdf7nt/bh5V8ZBAMN993rg=="
+        },
+        "linux-x64": {
+          "asset": "sfw-linux-x86_64",
+          "integrity": "sha512-91W90AOLI0RBN6lsPor2wf7wUvV3hzebXf0SM7SEzVPGM76Yjwj2D5E/jtJ8LjNNE7afggUDEtgMvFSTmgnZDg=="
+        },
+        "linux-x64-musl": {
+          "asset": "sfw-musl-linux-x86_64",
+          "integrity": "sha512-5CUE3LnXKzRqoT7SmT/yDBtyVyiUqwKtgS11j7qEhb2KJI3kztBuUQwBoOKPxxwpS0X7R/DuANvax7pQ76f4xw=="
+        },
+        "win-x64": {
+          "asset": "sfw-windows-x86_64.exe",
+          "integrity": "sha512-GXKV67rN0XTP+2v9VTfzz84N09x9UkEItj2wmcA7pmy5YoLPF/+Z/XkVGoUHzVSTTeivbYicRLAxl8BNkoUZ6w=="
+        }
+      }
+    }
+  }
+}

scripts/fleet/setup/index.mts

@@ -38,6 +38,12 @@ function main(): void {
   logger.log('=== Socket Repo Setup ===')
   logger.log('')
 
+  if (!skipTools) {
+    logger.log('── Tools (pnpm + sfw + bootstrap) ─────────')
+    results.push(['Tools', run(path.join(__dirname, 'setup-tools.mjs'))])
+    logger.log('')
+  }
+
   logger.log('── Token ──────────────────────────────────')
   results.push([
     'Token',
@@ -46,7 +52,10 @@ function main(): void {
   logger.log('')
 
   logger.log('── Claude config ──────────────────────────')
-  results.push(['Claude config', run(path.join(__dirname, 'claude-config.mts'))])
+  results.push([
+    'Claude config',
+    run(path.join(__dirname, 'claude-config.mts')),
+  ])
   logger.log('')
 
   if (!skipNativeHost) {

scripts/fleet/setup/lib/check-firewall.mjs

@@ -0,0 +1,89 @@
+/**
+ * @file Check a Socket package against the firewall API before downloading its
+ *   tarball directly from the npm registry. Endpoint: GET
+ *   https://firewall-api.socket.dev/purl/<encoded-purl> Response: { alerts?: [{
+ *   severity?, type?, key? }, ...] } Socket Firewall is a malware detector. The
+ *   API returns alerts only when a package is flagged as malicious — there's no
+ *   "minor severity informational alert" tier. ANY alert in the response means
+ *   malware, regardless of severity / type / key fields. Block unconditionally.
+ *   Exits 0 if the firewall returned no alerts, OR if the firewall is
+ *   unreachable / non-2xx (non-fatal so a network blip doesn't break a fresh
+ *   clone). Exits 1 if the firewall returned any alert at all. Usage: node
+ *   check-firewall.mjs <package-name> <version>
+ */
+
+import { argv, exit, stderr, stdout } from 'node:process'
+
+const pkgName = argv[2]
+const version = argv[3]
+if (!pkgName || !version) {
+  stderr.write('Usage: node check-firewall.mjs <package-name> <version>\n')
+  exit(2)
+}
+
+const FIREWALL_API_URL = 'https://firewall-api.socket.dev/purl'
+const FIREWALL_TIMEOUT_MS = 10_000
+
+const purl = `pkg:npm/${pkgName}@${version}`
+const url = `${FIREWALL_API_URL}/${encodeURIComponent(purl)}`
+
+async function main() {
+  const controller = new AbortController()
+  // unref so the timer doesn't keep the event loop alive past
+  // main() resolution.
+  const timer = setTimeout(() => controller.abort(), FIREWALL_TIMEOUT_MS)
+  timer.unref?.()
+  try {
+    // oxlint-disable-next-line socket/no-fetch-prefer-http-request -- composite-action helper runs on the raw runner before setup-node; @socketsecurity/lib-stable not installed yet.
+    const res = await fetch(url, {
+      headers: {
+        'User-Agent': 'socket-registry-setup-action/1.0',
+        Accept: 'application/json',
+      },
+      signal: controller.signal,
+    })
+    clearTimeout(timer)
+    if (!res.ok) {
+      stderr.write(
+        `firewall-api: HTTP ${res.status} for ${purl} — proceeding anyway (non-fatal)\n`,
+      )
+      return 0
+    }
+    const data = await res.json()
+    const alerts = data.alerts ?? []
+    if (alerts.length > 0) {
+      // Any alert from the firewall means malware. Block unconditionally;
+      // do not branch on severity / type / key.
+      stderr.write(
+        `\n✗ Socket Firewall flagged ${pkgName}@${version} as malware (${alerts.length} alert(s)):\n`,
+      )
+      for (const a of alerts.slice(0, 10)) {
+        stderr.write(
+          `    ${a.type ?? a.key ?? 'malware'}${a.severity ? ` (${a.severity})` : ''}\n`,
+        )
+      }
+      stderr.write(
+        '\nFix: bump the pinned version in pnpm-workspace.yaml or package.json to a known-good release.\n',
+      )
+      return 1
+    }
+    stdout.write(`✓ ${pkgName}@${version} cleared by Socket Firewall\n`)
+    return 0
+  } catch (e) {
+    clearTimeout(timer)
+    // Firewall errors are non-fatal — allow bootstrap to proceed.
+    // Network blips or registry-down shouldn't break a fresh clone.
+    // oxlint-disable-next-line socket/prefer-error-message -- composite-action helper runs on the raw runner before setup-node; @socketsecurity/lib-stable/errors is not installed yet.
+    const message = e instanceof Error ? e.message : String(e)
+    stderr.write(`firewall-api: ${message} — proceeding anyway (non-fatal)\n`)
+    return 0
+  }
+}
+
+// Use exitCode + natural drain instead of process.exit() so libuv
+// can finish closing the fetch handles cleanly. process.exit() while
+// async handles are mid-shutdown trips an `Assertion failed:
+// !(handle->flags & UV_HANDLE_CLOSING)` abort on Node 24 + Windows.
+main().then(code => {
+  process.exitCode = code
+})