refactor(bootstrap): replace console logging with logger and use semver

Improvements to bootstrap package:

Logging changes:
- Replaced process.stderr.write() with logger.log() and logger.error()
- Consistent use of @socketsecurity/lib/logger throughout
- Better formatted error messages

Version detection:
- Replaced manual version parsing with semver.gte()
- Created .config/node-version.mjs with NODE_VERSION constants
- Added esbuild define to inject MIN_NODE_VERSION at build time
- hasModernNode() now uses semver for proper version comparison

Build configuration:
- Added semver to devDependencies (catalog:)
- Enhanced esbuild configs with version constant injection
- Tree shaking already enabled, working correctly

Benefits:
- More reliable version comparisons using semver library
- Centralized version configuration
- Better error output formatting
- Consistent logging patterns

Author: jdalton

packages/bootstrap/.config/esbuild.npm.config.mjs

@@ -7,6 +7,8 @@ import { build } from 'esbuild'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
+import { NODE_VERSION_SEMVER } from './node-version.mjs'
+
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const rootPath = path.resolve(__dirname, '..')
 
@@ -15,6 +17,9 @@ const config = {
     js: '#!/usr/bin/env node',
   },
   bundle: true,
+  define: {
+    __MIN_NODE_VERSION__: JSON.stringify(NODE_VERSION_SEMVER),
+  },
   entryPoints: [path.join(rootPath, 'src', 'bootstrap-npm.mts')],
   external: [],
   format: 'cjs',

packages/bootstrap/.config/esbuild.smol.config.mjs

@@ -7,6 +7,7 @@ import { build } from 'esbuild'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
+import { NODE_VERSION_SEMVER } from './node-version.mjs'
 import { smolTransformPlugin } from './esbuild-plugin-smol-transform.mjs'
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
@@ -17,6 +18,9 @@ const config = {
     js: '#!/usr/bin/env node',
   },
   bundle: true,
+  define: {
+    __MIN_NODE_VERSION__: JSON.stringify(NODE_VERSION_SEMVER),
+  },
   entryPoints: [path.join(rootPath, 'src', 'bootstrap-smol.mts')],
   external: [],
   format: 'cjs',

packages/bootstrap/.config/node-version.mjs

@@ -0,0 +1,15 @@
+/**
+ * Node.js version configuration for Socket CLI.
+ * This version is used by bootstrap, smol builder, and SEA builder.
+ */
+
+/**
+ * Target Node.js version (with 'v' prefix).
+ * Must have SEA (Single Executable Application) support.
+ */
+export const NODE_VERSION = 'v24.10.0'
+
+/**
+ * Semantic version (without 'v' prefix) for semver comparisons.
+ */
+export const NODE_VERSION_SEMVER = '24.10.0'

packages/bootstrap/dist/bootstrap-npm.js

@@ -5,6 +5,8 @@
  * It downloads @socketsecurity/cli from npm and executes it.
  */
 
+import { logger } from '@socketsecurity/lib/logger'
+
 import { findAndExecuteCli, getArgs } from './shared/bootstrap-shared.mjs'
 
 async function main() {
@@ -14,6 +16,6 @@ async function main() {
 
 // Run the bootstrap.
 main().catch((e) => {
-  process.stderr.write(`❌ Bootstrap error: ${e instanceof Error ? e.message : String(e)}\n`)
+  logger.error(`Bootstrap error: ${e instanceof Error ? e.message : String(e)}`)
   process.exit(1)
 })

packages/bootstrap/dist/bootstrap-smol.js

@@ -7,6 +7,8 @@
  * The smol binary loads this at startup via lib/internal/process/pre_execution.js.
  */
 
+import { logger } from '@socketsecurity/lib/logger'
+
 import { findAndExecuteCli, getArgs } from './shared/bootstrap-shared.mjs'
 
 async function main() {
@@ -16,6 +18,6 @@ async function main() {
 
 // Run the bootstrap.
 main().catch((e) => {
-  process.stderr.write(`❌ Bootstrap error: ${e instanceof Error ? e.message : String(e)}\n`)
+  logger.error(`Bootstrap error: ${e instanceof Error ? e.message : String(e)}`)
   process.exit(1)
 })

packages/bootstrap/src/bootstrap-npm.mts

@@ -10,9 +10,19 @@ import path from 'node:path'
 import { brotliDecompressSync } from 'node:zlib'
 
 import { dlxPackage } from '@socketsecurity/lib/dlx-package'
+import { logger } from '@socketsecurity/lib/logger'
+import { gte } from 'semver'
 
 export const SOCKET_DLX_DIR = path.join(homedir(), '.socket', '_dlx')
 
+/**
+ * Minimum Node.js version with SEA support.
+ * This constant is injected at build time by esbuild from .config/node-version.mjs.
+ * @type {string}
+ */
+// @ts-expect-error - Injected by esbuild define.
+const MIN_NODE_VERSION = __MIN_NODE_VERSION__
+
 /**
  * Get CLI package paths.
  */
@@ -34,17 +44,14 @@ export function getArgs() {
 }
 
 /**
- * Check if system has modern Node.js (>=24.10.0).
+ * Check if system has modern Node.js (>=24.10.0) with SEA support.
  */
 export function hasModernNode() {
-  const version = process.version // e.g., 'v24.10.0'.
-  const match = version.match(/^v(\d+)\.(\d+)\.(\d+)/)
-  if (!match) {
+  try {
+    return gte(process.version, MIN_NODE_VERSION)
+  } catch {
     return false
   }
-
-  const [, major, minor] = match.map(Number)
-  return major > 24 || (major === 24 && minor >= 10)
 }
 
 /**
@@ -92,8 +99,8 @@ export function executeCompressedCli(bzPath, args) {
  * Download and install CLI using dlxPackage.
  */
 export async function downloadCli() {
-  process.stderr.write('📦 Socket CLI not found, downloading...\n')
-  process.stderr.write('\n')
+  logger.log('📦 Socket CLI not found, downloading...')
+  logger.log('')
 
   // Create directories.
   mkdirSync(SOCKET_DLX_DIR, { recursive: true })
@@ -111,7 +118,7 @@ export async function downloadCli() {
       },
     )
 
-    process.stderr.write(`   Installed to: ${result.packageDir}\n`)
+    logger.log(`   Installed to: ${result.packageDir}`)
 
     // Wait for installation to complete (but the spawn will fail since we don't have a command).
     // That's okay - we just need the package installed.
@@ -121,13 +128,13 @@ export async function downloadCli() {
       // Ignore execution errors - we only care that the package was installed.
     }
 
-    process.stderr.write('✅ Socket CLI installed successfully\n')
-    process.stderr.write('\n')
+    logger.log('✅ Socket CLI installed successfully')
+    logger.log('')
 
     return result
   } catch (e) {
-    process.stderr.write('❌ Failed to download Socket CLI\n')
-    process.stderr.write(`   Error: ${e instanceof Error ? e.message : String(e)}\n`)
+    logger.error('Failed to download Socket CLI')
+    logger.error(`   Error: ${e instanceof Error ? e.message : String(e)}`)
     process.exit(1)
   }
 }
@@ -154,8 +161,8 @@ export async function findAndExecuteCli(args) {
   }
 
   // If we still can't find the CLI, exit with error.
-  process.stderr.write('❌ Socket CLI installation failed\n')
-  process.stderr.write('   CLI entry point not found after installation\n')
-  process.stderr.write(`   Looked in: ${cliEntry}\n`)
+  logger.error('Socket CLI installation failed')
+  logger.error('   CLI entry point not found after installation')
+  logger.error(`   Looked in: ${cliEntry}`)
   process.exit(1)
 }