Defer IPC access

Author: jdalton

package-lock.json

@@ -68,7 +68,7 @@
     "@socketregistry/is-interactive": "^1.0.1",
     "@socketregistry/is-unicode-supported": "^1.0.0",
     "@socketsecurity/config": "^2.1.3",
-    "@socketsecurity/registry": "^1.0.79",
+    "@socketsecurity/registry": "^1.0.81",
     "@socketsecurity/sdk": "^1.4.5",
     "blessed": "^0.1.81",
     "blessed-contrib": "^4.11.0",

package.json

@@ -5,24 +5,50 @@ import process from 'node:process'
 import registryConstants from '@socketsecurity/registry/lib/constants'
 import { envAsBoolean } from '@socketsecurity/registry/lib/env'
 
+const {
+  PACKAGE_JSON,
+  kInternalsSymbol,
+  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: {
+    createConstantsObject
+  }
+} = registryConstants
+
 type RegistryEnv = typeof registryConstants.ENV
 
-type IPCObject = {
+type RegistryInternals = (typeof registryConstants)['Symbol(kInternalsSymbol)']
+
+type Internals = Omit<RegistryInternals, 'getIPC'> &
+  Readonly<{
+    getIPC: {
+      (): Promise<IPC>
+      <K extends keyof IPC | undefined>(
+        key?: K
+      ): Promise<K extends keyof IPC ? IPC[K] : IPC>
+    }
+  }>
+
+type ENV = RegistryEnv &
+  Readonly<{
+    SOCKET_CLI_DEBUG: boolean
+  }>
+
+type IPC = Readonly<{
   SOCKET_CLI_FIX_PACKAGE_LOCK_FILE: boolean
   SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE: boolean
-  [key: string]: any
-}
+}>
 
-type Constants = {
+type Constants = Omit<
+  typeof registryConstants,
+  'Symbol(kInternalsSymbol)' | 'ENV' | 'IPC'
+> & {
+  readonly 'Symbol(kInternalsSymbol)': Internals
   readonly API_V0_URL: 'https://api.socket.dev/v0'
   readonly BABEL_RUNTIME: '@babel/runtime'
   readonly BINARY_LOCK_EXT: '.lockb'
   readonly BUN: 'bun'
-  readonly ENV: RegistryEnv & {
-    SOCKET_CLI_DEBUG: boolean
-  }
+  readonly ENV: ENV
   readonly DIST_TYPE: 'module-sync' | 'require'
-  readonly IPC: IPCObject
+  readonly IPC: IPC
   readonly LOCK_EXT: '.lock'
   readonly MODULE_SYNC: 'module-sync'
   readonly NPM_REGISTRY_URL: 'https://registry.npmjs.org'
@@ -46,15 +72,7 @@ type Constants = {
   readonly rootPkgJsonPath: string
   readonly shadowBinPath: string
   readonly synpBinPath: string
-} & typeof registryConstants
-
-const {
-  PACKAGE_JSON,
-  kInternalsSymbol,
-  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: {
-    createConstantsObject
-  }
-} = registryConstants
+}
 
 const API_V0_URL = 'https://api.socket.dev/v0'
 const BABEL_RUNTIME = '@babel/runtime'

src/constants.ts

@@ -48,7 +48,9 @@ const {
   NPM_REGISTRY_URL,
   SOCKET_CLI_FIX_PACKAGE_LOCK_FILE,
   SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE,
-  abortSignal
+  abortSignal,
+  kInternalsSymbol,
+  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { getIPC }
 } = constants
 
 const formatter = new ColorOrMarkdown(false)
@@ -369,11 +371,10 @@ export async function reify(
     // Nothing to check, hmmm already installed or all private?
     return await this[kRiskyReify](...args)
   }
-  // Lazily access constants.IPC.
   const {
     [SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]: bypassConfirms,
     [SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE]: bypassAlerts
-  } = constants.IPC
+  } = await getIPC()
   const { stderr: output, stdin: input } = process
   let alerts: SocketPackageAlert[] = bypassAlerts
     ? []