fix(lint): migrate socket-hook markers to socket-lint prefix

The pre-commit/pre-push gates honor only the `socket-lint:` marker prefix; `socket-hook:` markers were silently non-functional, leaving the guarded lines unprotected. Swaps the prefix and corrects rule names to the recognized set.

Author: jdalton

packages/cli/src/cli-entry.mts

@@ -219,7 +219,7 @@ void (async () => {
   } catch {
     // Last-ditch fallback when logger itself throws — the catch
     // ensures we still report the original error before exit.
-    logger.fail('Fatal error:', err) // # socket-hook: allow logger
+    logger.fail('Fatal error:', err) // # socket-lint: allow logger
   }
 
   // Track CLI error for fatal exceptions.
@@ -238,7 +238,7 @@ process.on('uncaughtException', async err => {
       logger.error('Uncaught exception:', err)
     } catch {
       // Last-ditch fallback when logger itself throws.
-      logger.fail('Uncaught exception:', err) // # socket-hook: allow logger
+      logger.fail('Uncaught exception:', err) // # socket-lint: allow logger
     }
 
     // Track CLI error for uncaught exception.
@@ -252,7 +252,7 @@ process.on('uncaughtException', async err => {
       logger.error('Error in uncaughtException handler:', e)
     } catch {
       // Last-ditch fallback when logger itself throws.
-      logger.fail('Error in uncaughtException handler:', e) // # socket-hook: allow logger
+      logger.fail('Error in uncaughtException handler:', e) // # socket-lint: allow logger
     }
   } finally {
     process.exit(1)
@@ -266,7 +266,7 @@ process.on('unhandledRejection', async (reason, promise) => {
       logger.error('Unhandled rejection at:', promise, 'reason:', reason)
     } catch {
       // Last-ditch fallback when logger itself throws.
-      logger.fail('Unhandled rejection at:', promise, 'reason:', reason) // # socket-hook: allow logger
+      logger.fail('Unhandled rejection at:', promise, 'reason:', reason) // # socket-lint: allow logger
     }
 
     // Track CLI error for unhandled rejection.
@@ -281,7 +281,7 @@ process.on('unhandledRejection', async (reason, promise) => {
       logger.error('Error in unhandledRejection handler:', e)
     } catch {
       // Last-ditch fallback when logger itself throws.
-      logger.fail('Error in unhandledRejection handler:', e) // # socket-hook: allow logger
+      logger.fail('Error in unhandledRejection handler:', e) // # socket-lint: allow logger
     }
   } finally {
     process.exit(1)

packages/cli/src/commands/npx/cmd-npx.mts

@@ -10,7 +10,7 @@ import { defineHandoffCommand } from '../../util/cli/define-handoff.mts'
 
 export const cmdNpx = defineHandoffCommand({
   name: NPX,
-  description: 'Run pnpm exec with Socket Firewall security', // socket-hook: allow npx
+  description: 'Run pnpm exec with Socket Firewall security', // socket-lint: allow npx
   spawnMode: 'auto',
   examples: ['cowsay', 'cowsay@1.6.0 hello'],
   showApiRequirements: true,

packages/cli/src/util/fs/glob.mts

@@ -274,7 +274,7 @@ export function ignorePatternToMinimatch(pattern: string): string {
   // Minimatch pattern `src/\{a,b}.js` is equivalent to gitignore pattern `src/{a,b}.js`.
   const escapedPatternWithoutLeadingSlash =
     patternWithoutLeadingSlash.replaceAll(
-      /(?=((?:\\.|[^{(])*))\1([{(])/guy, // socket-hook: allow regex-alternation-order -- `\\.` must come first so escape pairs are consumed atomically.
+      /(?=((?:\\.|[^{(])*))\1([{(])/guy, // socket-lint: allow regex-alternation-order -- `\\.` must come first so escape pairs are consumed atomically.
       '$1\\$2',
     )
   const matchInsideSuffix = patternToTest.endsWith('/**') ? '/*' : ''

packages/cli/test/unit/util/cli/with-subcommands.test.mts

@@ -831,7 +831,7 @@ describe('meow-with-subcommands', () => {
         logout: stub('logout'),
         manifest: stub('manifest'),
         npm: stub('npm'),
-        npx: stub('npx'), // socket-hook: allow npx
+        npx: stub('npx'), // socket-lint: allow npx
         nuget: stub('nuget'),
         optimize: stub('optimize'),
         organization: stub('organization'),