refactor: colocate 10 type-only exports across 5 command modules

handle-ask.mts: HandleAskOptions, ParsedIntent
fetch-audit-log.mts: FetchAuditLogsConfig, FetchAuditLogOptions
fix/git.mts: SocketFixBranchParser, SocketFixBranchParseResult
run-cdxgen.mts: ArgvObject, NodejsCdxgenSources
depscore.mts: DepscoreToolResult, DepscoreOptions

Author: jdalton

packages/cli/src/commands/ask/handle-ask.mts

@@ -30,13 +30,13 @@ const logger = getDefaultLogger()
 // semantic-match fallback (currently a no-op; see onnx-match.mts).
 const PATTERN_MATCH_THRESHOLD = 0.6
 
-export interface HandleAskOptions {
+interface HandleAskOptions {
   query: string
   execute: boolean
   explain: boolean
 }
 
-export interface ParsedIntent {
+interface ParsedIntent {
   action: string
   command: string[]
   confidence: number

packages/cli/src/commands/audit-log/fetch-audit-log.mts

@@ -5,15 +5,15 @@ import type { CResult, OutputKind } from '../../types.mts'
 import type { SetupSdkOptions } from '../../util/socket/sdk.mjs'
 import type { SocketSdkSuccessResult } from '@socketsecurity/sdk-stable'
 
-export type FetchAuditLogsConfig = {
+type FetchAuditLogsConfig = {
   logType: string
   orgSlug: string
   outputKind: OutputKind
   page: number
   perPage: number
 }
 
-export type FetchAuditLogOptions = {
+type FetchAuditLogOptions = {
   commandPath?: string | undefined
   sdkOpts?: SetupSdkOptions | undefined
 }

packages/cli/src/commands/fix/git.mts

@@ -11,11 +11,11 @@ export const genericSocketFixBranchParser = createSocketFixBranchParser()
 // GHSA ID pattern: GHSA-xxxx-xxxx-xxxx (4 alphanumeric segments).
 const GHSA_ID_PATTERN = /^GHSA-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}$/i
 
-export type SocketFixBranchParser = (
+type SocketFixBranchParser = (
   branch: string,
 ) => SocketFixBranchParseResult | undefined
 
-export type SocketFixBranchParseResult = {
+type SocketFixBranchParseResult = {
   ghsaId: string
 }
 

packages/cli/src/commands/manifest/run-cdxgen.mts

@@ -36,7 +36,7 @@ const nodejsPlatformTypes = new Set([
   'typescript',
 ])
 
-export type ArgvObject = {
+type ArgvObject = {
   [key: string]: boolean | null | number | string | Array<string | number>
 }
 
@@ -77,7 +77,7 @@ export function argvObjectToArray(argvObj: ArgvObject): string[] {
  * Result of probing a cwd for Node.js SBOM inputs that cdxgen needs in the
  * default `pre-build` + `install-deps: false` mode.
  */
-export type NodejsCdxgenSources = {
+type NodejsCdxgenSources = {
   hasLockfile: boolean
   hasNodeModules: boolean
 }

packages/cli/src/commands/mcp/depscore.mts

@@ -55,12 +55,12 @@ export const DEPSCORE_TOOL_NAME = 'depscore'
 export const DEPSCORE_TOOL_DESCRIPTION =
   "Get the dependency score of packages with the `depscore` tool from Socket. Use 'unknown' for version if not known. Use this tool to scan dependencies for their quality and security on existing code or when code is generated. Stop generating code and ask the user how to proceed when any of the scores are low. When checking dependencies, make sure to also check the imports in the code, not just the manifest files (pyproject.toml, package.json, etc)."
 
-export interface DepscoreToolResult {
+interface DepscoreToolResult {
   content: Array<{ text: string; type: 'text' }>
   isError?: boolean | undefined
 }
 
-export interface DepscoreOptions {
+interface DepscoreOptions {
   apiToken: string
 }