fix(test): update tests for read-only ENV properties from @socketsecurity/lib

After migrating to @socketsecurity/lib environment helpers, ENV properties
became read-only getters. Tests must now manipulate process.env directly
instead of trying to set ENV properties.

Changes:
- flags.test.mts: Use process.env.NODE_OPTIONS instead of ENV.NODE_OPTIONS
- shadow tests: Fix SOCKET_CLI_ACCEPT_RISKS filter expectations
  When acceptRisks=true, filter should be { actions: ['error'], blocked: true }
  not { actions: ['error', 'monitor', 'warn'] }

Author: jdalton

packages/cli/src/flags.test.mts

@@ -40,15 +40,15 @@ describe('flags', () => {
   beforeEach(() => {
     vi.clearAllMocks()
     resetFlagCache()
-    // Save original argv and reset ENV for clean state.
+    // Save original argv and reset NODE_OPTIONS for clean state.
     originalArgv = process.argv
-    ENV.NODE_OPTIONS = ''
+    process.env.NODE_OPTIONS = ''
   })
 
   afterEach(() => {
     // Restore original state.
     process.argv = originalArgv
-    ENV.NODE_OPTIONS = ''
+    delete process.env.NODE_OPTIONS
   })
 
   describe('getMaxOldSpaceSizeFlag', () => {
@@ -61,14 +61,14 @@ describe('flags', () => {
     })
 
     it('respects NODE_OPTIONS', () => {
-      ENV.NODE_OPTIONS = '--max-old-space-size=512'
+      process.env.NODE_OPTIONS = '--max-old-space-size=512'
       resetFlagCache()
 
       const result = getMaxOldSpaceSizeFlag()
       expect(result).toBe(512)
 
       // Cleanup.
-      ENV.NODE_OPTIONS = ''
+      delete process.env.NODE_OPTIONS
     })
 
     it('respects user-provided flag', () => {
@@ -106,14 +106,14 @@ describe('flags', () => {
     })
 
     it('respects NODE_OPTIONS', () => {
-      ENV.NODE_OPTIONS = '--max-semi-space-size=16'
+      process.env.NODE_OPTIONS = '--max-semi-space-size=16'
       resetFlagCache()
 
       const result = getMaxSemiSpaceSizeFlag()
       expect(result).toBe(16)
 
       // Cleanup.
-      ENV.NODE_OPTIONS = ''
+      delete process.env.NODE_OPTIONS
     })
 
     it('respects user-provided flag', () => {

packages/cli/src/shadow/pnpm/bin.test.mts

@@ -201,7 +201,7 @@ describe('shadowPnpm', () => {
     expect(mockGetAlertsMapFromPurls).toHaveBeenCalledWith(
       ['pkg:npm/lodash'],
       expect.objectContaining({
-        filter: { actions: ['error', 'monitor', 'warn'] },
+        filter: { actions: ['error'], blocked: true },
         nothrow: true,
       }),
     )

packages/cli/src/shadow/yarn/bin.test.mts

@@ -218,7 +218,7 @@ describe('shadowYarn', () => {
     expect(mockGetAlertsMapFromPurls).toHaveBeenCalledWith(
       ['pkg:npm/lodash'],
       expect.objectContaining({
-        filter: { actions: ['error', 'monitor', 'warn'] },
+        filter: { actions: ['error'], blocked: true },
         nothrow: true,
       }),
     )