feat: add @socketsecurity/lib and @socketsecurity/sdk as workspace packages (#881)

* feat: add @socketsecurity/lib and @socketsecurity/sdk workspace packages

Add @socketsecurity/lib v3.2.8 and @socketsecurity/sdk v3.1.3 as internal
workspace packages. This establishes the foundation for local development
and testing of core infrastructure libraries within the monorepo.

- Add packages/lib/ with core utilities and infrastructure for Socket.dev
  security tools
- Add packages/sdk/ providing SDK for Socket API client
- Both packages include comprehensive test suites, build scripts, and
  documentation

* chore: add lib and sdk packages to workspace configuration

Update pnpm-workspace.yaml to include the new lib and sdk workspace
packages for local development and dependency resolution.

* refactor: migrate to workspace dependencies for lib and sdk

Update all package dependencies to reference @socketsecurity/lib and
@socketsecurity/sdk as workspace packages instead of catalog versions.
This enables local development and testing of core libraries within
the monorepo.

Changed packages:
- bootstrap
- build-infra
- cli (adds sdk workspace dependency)
- codet5-models-builder
- minilm-builder
- models
- node-smol-builder
- onnxruntime
- sbom-generator
- socket
- yoga-layout

* chore: remove lib and sdk from root dependencies

Remove @socketsecurity/lib and @socketsecurity/sdk from root package
dependencies and overrides since they are now managed as workspace
packages. Individual packages will reference them via workspace protocol.

* chore: update lockfile for workspace package changes

Update pnpm-lock.yaml to reflect workspace package structure with lib
and sdk as internal workspace dependencies. This lockfile update ensures
dependency resolution aligns with the new workspace configuration.

* chore: remove duplicate CLAUDE.md files from workspace packages

Remove CLAUDE.md files from lib and sdk packages as they duplicate
the main CLI CLAUDE.md. Package-specific guidance is already covered
in the root CLAUDE.md file.

Author: jdalton

package.json

@@ -35,9 +35,7 @@
     "@socketregistry/packageurl-js": "catalog:",
     "@socketregistry/yocto-spinner": "catalog:",
     "@socketsecurity/config": "catalog:",
-    "@socketsecurity/lib": "catalog:",
     "@socketsecurity/registry": "catalog:",
-    "@socketsecurity/sdk": "catalog:",
     "@types/cmd-shim": "catalog:",
     "@types/ink": "catalog:",
     "@types/js-yaml": "catalog:",
@@ -110,7 +108,6 @@
     "overrides": {
       "@octokit/graphql": "catalog:",
       "@octokit/request-error": "catalog:",
-      "@socketsecurity/lib": "catalog:",
       "aggregate-error": "catalog:",
       "ansi-regex": "catalog:",
       "brace-expansion": "catalog:",

packages/bootstrap/package.json

@@ -22,7 +22,7 @@
     "@babel/types": "catalog:",
     "@socketsecurity/build-infra": "workspace:*",
     "@socketsecurity/cli": "workspace:*",
-    "@socketsecurity/lib": "catalog:",
+    "@socketsecurity/lib": "workspace:*",
     "del-cli": "catalog:",
     "esbuild": "catalog:",
     "magic-string": "catalog:",

packages/build-infra/package.json

@@ -25,7 +25,7 @@
   "dependencies": {
     "@babel/parser": "catalog:",
     "@babel/traverse": "catalog:",
-    "@socketsecurity/lib": "catalog:",
+    "@socketsecurity/lib": "workspace:*",
     "magic-string": "catalog:"
   }
 }

packages/cli/package.json

@@ -75,7 +75,8 @@
     "@coana-tech/cli": "catalog:",
     "@gitbeaker/rest": "catalog:",
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "catalog:",
+    "@socketsecurity/lib": "workspace:*",
+    "@socketsecurity/sdk": "workspace:*",
     "ajv-dist": "catalog:",
     "compromise": "catalog:",
     "del-cli": "catalog:",

packages/codet5-models-builder/package.json

@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "catalog:"
+    "@socketsecurity/lib": "workspace:*"
   }
 }