revert(cli): use direct env reads for HOME in 5 commands

The HOME import was a load-time snapshot that broke 9 unit tests mutating process state at runtime. Revert to inline reads with a comment explaining the constraint.

Author: jdalton

packages/cli/src/commands/config/cmd-config-auto.mts

@@ -1,6 +1,5 @@
 import { handleConfigAuto } from './handle-config-auto.mts'
 import { FLAG_JSON, FLAG_MARKDOWN } from '../../constants/cli.mts'
-import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags, outputFlags } from '../../flags.mts'
@@ -102,7 +101,8 @@ ${getSupportedConfigEntries()
   }
 
   if (dryRun) {
-    const configPath = `${HOME}/.config/socket/config.json`
+    // Runtime read so tests that mutate process.env['HOME'] pick up changes.
+    const configPath = `${process.env['HOME']}/.config/socket/config.json`
     outputDryRunWrite(
       configPath,
       `auto-discover and set config value for "${key}"`,

packages/cli/src/commands/config/config-command-factory.mts

@@ -1,5 +1,4 @@
 import { FLAG_JSON, FLAG_MARKDOWN } from '../../constants/cli.mjs'
-import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { commonFlags, outputFlags } from '../../flags.mts'
 import { meowOrExit } from '../../utils/cli/with-subcommands.mjs'
@@ -131,7 +130,8 @@ ${spec.helpExamples.map(ex => `      $ ${command} ${ex}`).join('\n')}
       }
 
       if (dryRun) {
-        const configPath = `${HOME}/.config/socket/config.json`
+        // Runtime read so tests that mutate process.env['HOME'] pick up changes.
+        const configPath = `${process.env['HOME']}/.config/socket/config.json`
         const changes = spec.needsValue
           ? [`Set "${key}" to: ${value}`]
           : [`Remove "${key}" from config`]

packages/cli/src/commands/install/cmd-install-completion.mts

@@ -1,5 +1,4 @@
 import { handleInstallCompletion } from './handle-install-completion.mts'
-import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags } from '../../flags.mts'
@@ -68,7 +67,8 @@ async function run(
   const targetName = cli.input[0] || 'socket'
 
   if (dryRun) {
-    const bashRcPath = `${HOME}/.bashrc`
+    // Runtime read so tests that mutate process.env['HOME'] pick up changes.
+    const bashRcPath = `${process.env['HOME']}/.bashrc`
     outputDryRunWrite(
       bashRcPath,
       `install bash completion for "${targetName}"`,

packages/cli/src/commands/login/cmd-login.mts

@@ -1,7 +1,6 @@
 import isInteractive from '@socketregistry/is-interactive/index.cjs'
 
 import { attemptLogin } from './attempt-login.mts'
-import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags } from '../../flags.mts'
@@ -83,7 +82,8 @@ async function run(
   const dryRun = !!cli.flags['dryRun']
 
   if (dryRun) {
-    const configPath = `${HOME}/.config/socket/config.json`
+    // Runtime read so tests that mutate process.env['HOME'] pick up changes.
+    const configPath = `${process.env['HOME']}/.config/socket/config.json`
     const changes = [
       'Prompt for Socket API token',
       'Verify token with Socket API',

packages/cli/src/commands/logout/cmd-logout.mts

@@ -1,6 +1,5 @@
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
-import { HOME } from '../../env/home.mts'
 import { outputDryRunDelete } from '../../utils/dry-run/output.mts'
 import {
   CONFIG_KEY_API_BASE_URL,
@@ -85,7 +84,8 @@ export async function run(
   const dryRun = !!cli.flags['dryRun']
 
   if (dryRun) {
-    const configPath = `${HOME}/.config/socket/config.json`
+    // Runtime read so tests that mutate process.env['HOME'] pick up changes.
+    const configPath = `${process.env['HOME']}/.config/socket/config.json`
     outputDryRunDelete('Socket API credentials', configPath)
     return
   }