chore: release v3.0.2

Author: jdalton

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.2](https://github.com/SocketDev/socket-lib/releases/tag/v3.0.2) - 2025-11-01
+
+### Fixed
+
+- **Critical: Node.js ESM named imports from CommonJS**: Fixed build output to ensure Node.js ESM can properly detect named exports from CommonJS modules
+  - Previously, esbuild's minified export pattern placed `module.exports` before variable definitions, causing "Cannot access before initialization" errors
+  - Build script now uses `@babel/parser` + `magic-string` for safe AST parsing and transformation
+  - Exports are now correctly placed at end of files after all variable definitions
+  - Enables proper ESM named imports: `import { getDefaultLogger, Logger } from '@socketsecurity/lib/logger'`
+  - Fixes socket-cli issue where named imports were failing with obscure initialization errors
+
 ## [3.0.1](https://github.com/SocketDev/socket-lib/releases/tag/v3.0.1) - 2025-11-01
 
 ### Added

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [

src/dlx.ts

@@ -178,10 +178,11 @@ export function isInSocketDlx(filePath: string): boolean {
 
   const path = getPath()
   const dlxDir = getSocketDlxDir()
-  const absolutePath = path.resolve(filePath)
+  const absolutePath = normalizePath(path.resolve(filePath))
 
   // Check if the absolute path starts with the DLX directory.
-  return absolutePath.startsWith(dlxDir + path.sep)
+  // Both paths are normalized to use forward slashes for consistent comparison.
+  return absolutePath.startsWith(dlxDir + '/')
 }
 
 /**

test/dlx.test.ts

@@ -28,7 +28,7 @@ import {
 } from '@socketsecurity/lib/dlx'
 import { getSocketDlxDir } from '@socketsecurity/lib/paths'
 
-describe('dlx', () => {
+describe.sequential('dlx', () => {
   const testPackageName = 'test-package'
   const dlxDir = getSocketDlxDir()
 
@@ -83,9 +83,11 @@ describe('dlx', () => {
     })
 
     it('async version should return false when directory does not exist', async () => {
-      // Ensure it doesn't exist
-      if (fs.existsSync(dlxDir)) {
-        fs.rmSync(dlxDir, { recursive: true, force: true })
+      // Ensure it doesn't exist (use async version for consistency)
+      try {
+        await fs.promises.rm(dlxDir, { recursive: true, force: true })
+      } catch {
+        // Directory might not exist, which is fine
       }
       expect(await dlxDirExistsAsync()).toBe(false)
     })

test/effects/ultra.test.ts

@@ -153,7 +153,9 @@ describe('effects/ultra', () => {
       expect(gradient).toHaveLength(1000)
       // Spot check some positions
       expect(gradient[0]).toEqual(RAINBOW_GRADIENT[0])
-      expect(gradient[999]).toEqual(RAINBOW_GRADIENT[999 % RAINBOW_GRADIENT.length])
+      expect(gradient[999]).toEqual(
+        RAINBOW_GRADIENT[999 % RAINBOW_GRADIENT.length],
+      )
     })
 
     it('should generate consistent results for same input', () => {