test(repo): adapt DNS-guidance and sendApi tests to the fail-closed nock setup

Author: jdalton

test/repo/unit/socket-sdk-api-methods.coverage.test.mts

@@ -1181,8 +1181,12 @@ describe('SocketSdk - API Methods Coverage', () => {
     })
 
     it('covers sendApi method', async () => {
-      // Test the generic sendApi method with POST
-      const result = await client.sendApi('/scan', {
+      // Test the generic sendApi method with POST. The urlPath follows the
+      // documented form without a leading slash — the SDK appends it to the
+      // trailing-slash baseUrl, and a leading slash would produce a
+      // double-slash URL that nock's fail-closed net-connect guard misparses
+      // as protocol-relative and refuses.
+      const result = await client.sendApi('scan', {
         body: { repo: 'test' },
         method: 'POST',
       })

test/repo/unit/socket-sdk-fail-paths.test.mts

@@ -12,6 +12,7 @@
 import os from 'node:os'
 import path from 'node:path'
 
+import nock from 'nock'
 import { describe, expect, it } from 'vitest'
 
 import { SocketSdk } from '../../../src/index.mts'
@@ -150,6 +151,21 @@ describe('SocketSdk - downloadPatch error codes', () => {
 
   it('should include ENOTFOUND guidance for unresolvable hostname', async () => {
     const client = new SocketSdk('test-token')
+    // The fleet vitest setup fails network CLOSED (nock.disableNetConnect),
+    // which refuses non-loopback requests BEFORE DNS resolution runs — the
+    // refusal surfaces as ENETUNREACH, never ENOTFOUND. Mock the DNS failure
+    // instead so the test still exercises the SDK's ENOTFOUND guidance
+    // mapping deterministically.
+    nock('http://this-host-does-not-exist-xyzzy.invalid')
+      .get('/blob/sha256-test')
+      .replyWithError(
+        Object.assign(
+          new Error(
+            'getaddrinfo ENOTFOUND this-host-does-not-exist-xyzzy.invalid',
+          ),
+          { code: 'ENOTFOUND' },
+        ),
+      )
     await expect(
       client.downloadPatch('sha256-test', {
         baseUrl: 'http://this-host-does-not-exist-xyzzy.invalid',