@arkstack/common 0.18.8 → 0.18.9

package/dist/faker.js

@@ -1,4 +1,4 @@
-import { g as configLoader } from "./system-Die_Dv5y.js";
+import { g as configLoader } from "./system-BH1phDBR.js";
 import * as fakerLocales from "@faker-js/faker";
 import { Faker } from "@faker-js/faker";
 import { pictwoImage } from "@pictwo/faker";

package/dist/index.d.ts

@@ -407,10 +407,29 @@ declare class EnvLoader {
    * Read an environment variable, coercing booleans, numbers and `null`, and
    * falling back to `defaultValue` when it is unset.
    *
+   * A value is only read as a number when the number says exactly what was
+   * written. See {@link isExactNumber}.
+   *
    * @param name          The variable name.
    * @param defaultValue  Returned when the variable is unset.
    */
   get<X = never, D = undefined, K extends string = string>(name: K, defaultValue?: D): EnvReturn<X, K, D>;
+  /**
+   * Whether a number would say exactly what the variable says.
+   *
+   * `Number()` accepts far more than decimal digits: hexadecimal, binary and
+   * octal literals, exponents, surrounding whitespace, and integers wider
+   * than a double can hold. Coercing those loses information silently, and
+   * the values that look like numbers by accident tend to be the ones where
+   * that matters most - a 32-byte key beginning `0x` becomes a float that
+   * keeps roughly its first thirteen digits, and nothing downstream can tell
+   * that it happened.
+   *
+   * Converting back and comparing is the whole test: `'6379'` survives it,
+   * `'0x1f'`, `'007'`, `'1e5'` and `'12345678901234567890'` do not, and so
+   * they stay the strings they were written as.
+   */
+  private isExactNumber;
 }
 /**
  * Shared environment loader backing {@link env}.

package/dist/index.js

@@ -1,5 +1,5 @@
-import { _ as EnvLoader, a as env, c as nodeEnv, d as resolveRuntimeDir, f as resolveRuntimeModule, g as configLoader, h as ConfigLoader, i as discoverCommands, l as outputDir, m as CONFIG_KEY, n as appUrl, o as importFile, p as toOutputPath, r as config, s as interopDefault, t as appKey, u as rebuildOutput, v as envLoader } from "./system-Die_Dv5y.js";
-import { C as Encryption, D as NodeCipher, E as Keys, O as SealedBox, S as Codec, T as KeyPair, _ as RequestException, b as Hash, c as abortIf, d as getModelSync, f as initializeGlobalContext, g as resolvePagination, h as perPage, k as SecureChannel, l as assertFound, m as normalizePositiveInteger, p as isClass, s as abort, u as getModel, v as AppException, w as EncryptionKey, x as Cipher, y as Exception } from "./utils-gKiLoXG9.js";
+import { _ as EnvLoader, a as env, c as nodeEnv, d as resolveRuntimeDir, f as resolveRuntimeModule, g as configLoader, h as ConfigLoader, i as discoverCommands, l as outputDir, m as CONFIG_KEY, n as appUrl, o as importFile, p as toOutputPath, r as config, s as interopDefault, t as appKey, u as rebuildOutput, v as envLoader } from "./system-BH1phDBR.js";
+import { C as Encryption, D as NodeCipher, E as Keys, O as SealedBox, S as Codec, T as KeyPair, _ as RequestException, b as Hash, c as abortIf, d as getModelSync, f as initializeGlobalContext, g as resolvePagination, h as perPage, k as SecureChannel, l as assertFound, m as normalizePositiveInteger, p as isClass, s as abort, u as getModel, v as AppException, w as EncryptionKey, x as Cipher, y as Exception } from "./utils-4xEVrT0Z.js";
 import { Hook as Hook$1 } from "@arkstack/foundry";
 import { Arkstack } from "@arkstack/contract";
 import { str } from "@h3ravel/support";

package/dist/{system-Die_Dv5y.js → system-BH1phDBR.js}

@@ -42,6 +42,9 @@ var EnvLoader = class {
 	* Read an environment variable, coercing booleans, numbers and `null`, and
 	* falling back to `defaultValue` when it is unset.
 	*
+	* A value is only read as a number when the number says exactly what was
+	* written. See {@link isExactNumber}.
+	*
 	* @param name          The variable name.
 	* @param defaultValue  Returned when the variable is unset.
 	*/
@@ -60,12 +63,31 @@ var EnvLoader = class {
 			"true",
 			"on"
 		].includes(val);
-		if (!isNaN(Number(val)) && typeof val !== "boolean" && typeof val !== "undefined" && val !== "") val = Number(val);
+		if (typeof val === "string" && this.isExactNumber(val)) val = Number(val);
 		if (val === "") val = void 0;
 		if (val === "null") val = null;
 		val ??= defaultValue;
 		return val;
 	}
+	/**
+	* Whether a number would say exactly what the variable says.
+	*
+	* `Number()` accepts far more than decimal digits: hexadecimal, binary and
+	* octal literals, exponents, surrounding whitespace, and integers wider
+	* than a double can hold. Coercing those loses information silently, and
+	* the values that look like numbers by accident tend to be the ones where
+	* that matters most - a 32-byte key beginning `0x` becomes a float that
+	* keeps roughly its first thirteen digits, and nothing downstream can tell
+	* that it happened.
+	*
+	* Converting back and comparing is the whole test: `'6379'` survives it,
+	* `'0x1f'`, `'007'`, `'1e5'` and `'12345678901234567890'` do not, and so
+	* they stay the strings they were written as.
+	*/
+	isExactNumber(value) {
+		const parsed = Number(value);
+		return Number.isFinite(parsed) && String(parsed) === value;
+	}
 };
 /** 
 * Shared environment loader backing {@link env}.

package/dist/utils/index.js

@@ -1,2 +1,2 @@
-import { C as Encryption, D as NodeCipher, E as Keys, O as SealedBox, S as Codec, T as KeyPair, a as use, b as Hash, c as abortIf, d as getModelSync, f as initializeGlobalContext, g as resolvePagination, h as perPage, i as trait, k as SecureChannel, l as assertFound, m as normalizePositiveInteger, n as crc32, o as uses, p as isClass, r as getTraitMethods, s as abort, t as callTraitMethods, u as getModel, w as EncryptionKey, x as Cipher } from "../utils-gKiLoXG9.js";
+import { C as Encryption, D as NodeCipher, E as Keys, O as SealedBox, S as Codec, T as KeyPair, a as use, b as Hash, c as abortIf, d as getModelSync, f as initializeGlobalContext, g as resolvePagination, h as perPage, i as trait, k as SecureChannel, l as assertFound, m as normalizePositiveInteger, n as crc32, o as uses, p as isClass, r as getTraitMethods, s as abort, t as callTraitMethods, u as getModel, w as EncryptionKey, x as Cipher } from "../utils-4xEVrT0Z.js";
 export { Cipher, Codec, Encryption, EncryptionKey, Hash, KeyPair, Keys, NodeCipher, SealedBox, SecureChannel, abort, abortIf, assertFound, callTraitMethods, crc32, getModel, getModelSync, getTraitMethods, initializeGlobalContext, isClass, normalizePositiveInteger, perPage, resolvePagination, trait, use, uses };

package/dist/{utils-gKiLoXG9.js → utils-4xEVrT0Z.js}

@@ -1,4 +1,4 @@
-import { a as env, t as appKey } from "./system-Die_Dv5y.js";
+import { a as env, t as appKey } from "./system-BH1phDBR.js";
 import { Cipher, Codec, EncryptionKey, KeyPair, Keys, SealedBox, SecureChannel } from "@arkstack/encryption";
 import { NodeCipher } from "@arkstack/encryption/node";
 import { Secret, TOTP } from "otpauth";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkstack/common",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "type": "module",
   "description": "Core utilities, primitives, and shared infrastructure for the Arkstack ecosystem.",
   "homepage": "https://arkstack.toneflix.net",
@@ -43,13 +43,13 @@
     "otpauth": "^9.5.1",
     "pino": "^10.3.1",
     "selfsigned": "^2.4.1",
-    "@arkstack/encryption": "^0.18.8"
+    "@arkstack/encryption": "^0.18.9"
   },
   "peerDependencies": {
     "@h3ravel/support": "^2.2.7",
     "arkormx": "^2.12.8",
-    "@arkstack/contract": "^0.18.8",
-    "@arkstack/foundry": "^0.18.8"
+    "@arkstack/contract": "^0.18.9",
+    "@arkstack/foundry": "^0.18.9"
   },
   "optionalDependencies": {
     "@faker-js/faker": "^10.4.0"