refactor(scripts): use @socketsecurity/lib/spawn for child processes

Update all scripts to use spawn from @socketsecurity/lib instead of
node:child_process for consistent cross-platform behavior.

Author: jdalton

scripts/bump.mjs

@@ -4,7 +4,7 @@
  * Includes interactive mode for reviewing and refining AI-generated changelogs.
  */
 
-import { spawn } from 'node:child_process'
+import { spawn } from '@socketsecurity/lib/spawn'
 import { existsSync, promises as fs } from 'node:fs'
 import path from 'node:path'
 import readline from 'node:readline'

scripts/claude.mjs

@@ -4,7 +4,7 @@
  * Requires Claude Code (claude) CLI to be installed.
  */
 
-import { spawn } from 'node:child_process'
+import { spawn } from '@socketsecurity/lib/spawn'
 import crypto from 'node:crypto'
 import {
   existsSync,

scripts/fix.mjs

@@ -2,7 +2,7 @@
  * @fileoverview Fix script that runs lint with auto-fix enabled.
  */
 
-import { spawn } from 'node:child_process'
+import { spawn } from '@socketsecurity/lib/spawn'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 

scripts/publish.mjs

@@ -3,13 +3,13 @@
  * Supports both simple single-package and complex multi-package publishing.
  */
 
-import { spawn } from 'node:child_process'
 import { existsSync, promises as fs } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 import { parseArgs } from '@socketsecurity/lib/argv/parse'
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
+import { spawn } from '@socketsecurity/lib/spawn'
 import { printFooter, printHeader } from '@socketsecurity/lib/stdio/header'
 
 const logger = getDefaultLogger()
@@ -22,55 +22,54 @@ const WIN32 = process.platform === 'win32'
 const CI = !!process.env.CI
 
 async function runCommand(command, args = [], options = {}) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
+  try {
+    const result = await spawn(command, args, {
       stdio: 'inherit',
       cwd: rootPath,
       ...(WIN32 && { shell: true }),
       ...options,
     })
-
-    child.on('exit', code => {
-      resolve(code || 0)
-    })
-
-    child.on('error', error => {
-      reject(error)
-    })
-  })
+    return result.code
+  } catch (error) {
+    // spawn() throws on non-zero exit
+    if (error && typeof error === 'object' && 'code' in error) {
+      return error.code
+    }
+    throw error
+  }
 }
 
 async function runCommandWithOutput(command, args = [], options = {}) {
-  return new Promise((resolve, reject) => {
-    let stdout = ''
-    let stderr = ''
-
-    const child = spawn(command, args, {
+  try {
+    const result = await spawn(command, args, {
       cwd: rootPath,
+      stdio: 'pipe',
+      stdioString: true,
       ...(WIN32 && { shell: true }),
       ...options,
     })
-
-    if (child.stdout) {
-      child.stdout.on('data', data => {
-        stdout += data
-      })
+    return {
+      exitCode: result.code,
+      stderr: result.stderr,
+      stdout: result.stdout,
     }
-
-    if (child.stderr) {
-      child.stderr.on('data', data => {
-        stderr += data
-      })
+  } catch (error) {
+    // spawn() throws on non-zero exit
+    if (
+      error &&
+      typeof error === 'object' &&
+      'code' in error &&
+      'stdout' in error &&
+      'stderr' in error
+    ) {
+      return {
+        exitCode: error.code,
+        stderr: error.stderr,
+        stdout: error.stdout,
+      }
     }
-
-    child.on('exit', code => {
-      resolve({ exitCode: code || 0, stdout, stderr })
-    })
-
-    child.on('error', error => {
-      reject(error)
-    })
-  })
+    throw error
+  }
 }
 
 /**

scripts/test.mjs

@@ -3,7 +3,7 @@
  * Combines check, build, and test steps with clean, consistent output.
  */
 
-import { spawn } from 'node:child_process'
+import { spawn } from '@socketsecurity/lib/spawn'
 import { existsSync } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'

scripts/update.mjs

@@ -3,7 +3,7 @@
  * Handles taze updates, Socket package updates, and project-specific tasks.
  */
 
-import { spawn } from 'node:child_process'
+import { spawn } from '@socketsecurity/lib/spawn'
 import { existsSync } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'

scripts/utils/run-command.mjs

@@ -1,6 +1,6 @@
 /** @fileoverview Utility for running shell commands with proper error handling. */
 
-import { spawn, spawnSync } from 'node:child_process'
+import { spawn, spawnSync } from '@socketsecurity/lib/spawn'
 
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
@@ -13,22 +13,22 @@ const logger = getDefaultLogger()
  * @param {object} options - Spawn options
  * @returns {Promise<number>} Exit code
  */
-export function runCommand(command, args = [], options = {}) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
+export async function runCommand(command, args = [], options = {}) {
+  try {
+    const result = await spawn(command, args, {
       stdio: 'inherit',
       ...(process.platform === 'win32' && { shell: true }),
       ...options,
     })
-
-    child.on('exit', code => {
-      resolve(code || 0)
-    })
-
-    child.on('error', error => {
-      reject(error)
-    })
-  })
+    return result.code
+  } catch (error) {
+    // spawn() from @socketsecurity/lib throws on non-zero exit
+    // Return the exit code from the error
+    if (error && typeof error === 'object' && 'code' in error) {
+      return error.code
+    }
+    throw error
+  }
 }
 
 /**
@@ -93,37 +93,38 @@ export async function runParallel(commands) {
  * @param {object} options - Spawn options
  * @returns {Promise<{exitCode: number, stdout: string, stderr: string}>}
  */
-export function runCommandQuiet(command, args = [], options = {}) {
-  return new Promise((resolve, reject) => {
-    let stdout = ''
-    let stderr = ''
-
-    const child = spawn(command, args, {
+export async function runCommandQuiet(command, args = [], options = {}) {
+  try {
+    const result = await spawn(command, args, {
       ...options,
       ...(process.platform === 'win32' && { shell: true }),
-      stdio: ['inherit', 'pipe', 'pipe'],
-    })
-
-    child.stdout?.on('data', data => {
-      stdout += data.toString()
+      stdio: 'pipe',
+      stdioString: true,
     })
 
-    child.stderr?.on('data', data => {
-      stderr += data.toString()
-    })
-
-    child.on('exit', code => {
-      resolve({
-        exitCode: code || 0,
-        stderr,
-        stdout,
-      })
-    })
-
-    child.on('error', error => {
-      reject(error)
-    })
-  })
+    return {
+      exitCode: result.code,
+      stderr: result.stderr,
+      stdout: result.stdout,
+    }
+  } catch (error) {
+    // spawn() from @socketsecurity/lib throws on non-zero exit
+    // Return the exit code and output from the error
+    if (
+      error &&
+      typeof error === 'object' &&
+      'code' in error &&
+      'stdout' in error &&
+      'stderr' in error
+    ) {
+      return {
+        exitCode: error.code,
+        stderr: error.stderr,
+        stdout: error.stdout,
+      }
+    }
+    throw error
+  }
 }
 
 /**