feat(env): read SOCKET_API_TOKEN as canonical api-token name

Adds SOCKET_API_TOKEN to the head of getSocketCliApiToken()'s fallback
chain. Legacy names (SOCKET_CLI_API_TOKEN, SOCKET_CLI_API_KEY,
SOCKET_SECURITY_API_TOKEN, SOCKET_SECURITY_API_KEY) remain supported.

Matches the fleet-wide rename of the GitHub repo secret to
SOCKET_API_TOKEN, and gives a single canonical env name Socket tools
can standardize on going forward.

Author: jdalton

src/env/socket-cli.ts

@@ -93,9 +93,10 @@ export function getSocketCliApiTimeout(): number {
 }
 
 /**
- * Socket CLI API authentication token (alternative name).
- * Checks SOCKET_CLI_API_TOKEN, SOCKET_CLI_API_KEY, SOCKET_SECURITY_API_TOKEN, SOCKET_SECURITY_API_KEY.
- * Maintains full v1.x backward compatibility.
+ * Socket CLI API authentication token.
+ * Checks SOCKET_API_TOKEN (canonical), then the legacy names
+ * SOCKET_CLI_API_TOKEN, SOCKET_CLI_API_KEY, SOCKET_SECURITY_API_TOKEN,
+ * SOCKET_SECURITY_API_KEY. Maintains full v1.x backward compatibility.
  *
  * @returns API token or undefined
  *
@@ -110,6 +111,7 @@ export function getSocketCliApiTimeout(): number {
 /*@__NO_SIDE_EFFECTS__*/
 export function getSocketCliApiToken(): string | undefined {
   return (
+    getEnvValue('SOCKET_API_TOKEN') ||
     getEnvValue('SOCKET_CLI_API_TOKEN') ||
     getEnvValue('SOCKET_CLI_API_KEY') ||
     getEnvValue('SOCKET_SECURITY_API_TOKEN') ||

test/unit/env/socket-cli.test.mts

@@ -95,11 +95,22 @@ describe('socket-cli env', () => {
   })
 
   describe('getSocketCliApiToken', () => {
-    it('should return token when set', () => {
+    it('should return token when SOCKET_CLI_API_TOKEN is set', () => {
       setEnv('SOCKET_CLI_API_TOKEN', 'test-token-123')
       expect(getSocketCliApiToken()).toBe('test-token-123')
     })
 
+    it('should return token when SOCKET_API_TOKEN is set', () => {
+      setEnv('SOCKET_API_TOKEN', 'canonical-token')
+      expect(getSocketCliApiToken()).toBe('canonical-token')
+    })
+
+    it('should prefer SOCKET_API_TOKEN over legacy names', () => {
+      setEnv('SOCKET_API_TOKEN', 'canonical-token')
+      setEnv('SOCKET_CLI_API_TOKEN', 'legacy-token')
+      expect(getSocketCliApiToken()).toBe('canonical-token')
+    })
+
     it('should return undefined when not set', () => {
       setEnv('SOCKET_CLI_API_TOKEN', undefined)
       expect(getSocketCliApiToken()).toBeUndefined()