feat(cli): add --no-log flag and keep stdout clean under --json

[John-David Dalton (jdalton)]

The ask

ASK-115: `socket fix --json | jq` (and any automation combining `--json` with `--dry-run`) was getting non-JSON text on stdout because the dry-run preview routed through `logger.log` (stdout). Human-readable output leaking into a machine-readable stream broke scripts.

Changes

New flag

`--no-log` (boolean, on `commonFlags`) — suppresses non-essential informational output so stdout is clean for automation. Errors still print to stderr. Visible in `--help`.

New module

`utils/output/no-log.mts` — tiny module exposing `setNoLogMode`, `isNoLogMode`, and `shouldQuietStdout(flags)`.

Wiring

`meowOrExit` now:

1. Resets no-log mode at the start of every invocation so state doesn't leak across unit tests that run multiple commands in sequence.
2. Engages no-log mode when any of `--no-log`, `--json`, or `--markdown` is parsed. The last two imply clean stdout because the primary payload belongs on stdout alone.

Dry-run routing

`utils/dry-run/output.mts` now routes through a private `out()` helper that uses `logger.error` (stderr) when no-log mode is engaged, otherwise `logger.log` (stdout). Every `outputDryRun*` formatter flows through this single helper, so all six dry-run shapes (preview, fetch, execute, upload, delete, write) inherit the fix.

Before / after

```sh

Before

$ socket fix --json --dry-run | jq .

→ [DryRun]: Analyze... (human text in stdout breaks the jq pipe)

After

$ socket fix --json --dry-run 2>/tmp/err 1>/tmp/out

stdout: 0 bytes (pipe-safe)

stderr: 658 bytes (preview visible to humans)

Human default unchanged

$ socket fix --dry-run

still prints to stdout

```

Tests

• New `utils/output/no-log.test.mts` — 7 tests covering toggle, `shouldQuietStdout` under each flag, and unrelated-flag isolation.
• New `stream routing` describe block in `utils/dry-run/output.test.mts` — asserts stdout routing by default and stderr routing when no-log mode is engaged.
• Updated two command tests that combine `--json` with dry-run to assert `mockLogger.error` instead of `mockLogger.log`: `cmd-scan-view` `--json --stream` and `cmd-organization-quota` `--dry-run --json`.

All 340 test files / 5113 tests green.

Test plan

• `pnpm run type` clean
• `pnpm --filter @socketsecurity/cli run test:unit` — 340 files / 5113 tests
• `pnpm run build:cli` succeeds
• Manual end-to-end: verified `--json` stdout is empty, `--dry-run` alone still prints to stdout
• CI green

---

Note

Medium Risk
Changes CLI output stream behavior by introducing a module-level no-log toggle and implicitly enabling it for --json/--markdown, which could affect scripts/tests that assumed dry-run text on stdout. Scope is limited to logging/routing and is covered by updated and new unit tests.

Overview
Adds a new --no-log common flag and a shared utils/output/no-log.mts toggle to support automation-friendly runs where stdout must remain payload-only.

Wires the toggle into CLI argument parsing (meowWithSubcommands/meowOrExit), resetting state per invocation to avoid test leakage and enabling no-log mode for --no-log and implicitly for --json/--markdown.

Updates dry-run output helpers to route through stderr when no-log mode is active (leaving default interactive output on stdout), and adjusts/adds unit tests to assert the new stdout/stderr behavior.

^{Reviewed by Cursor Bugbot for commit ed83f91. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit e04fa30. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ed83f91. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ed83f91. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ed83f91. Configure here.}