@checkstack/common 0.6.1 → 0.6.3

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # @checkstack/common
 
+## 0.6.3
+
+### Patch Changes
+
+- 0ebbe56: Security Vulnerability Remediation completed:
+  - Refactored core authorization to Fail-Closed architecture with secure defaults.
+  - Implemented `assertTeamManagementAccess` to resolve BOLA in Teams Management.
+  - Protected internal S2S capabilities via explicit wildcard `serviceScope` definitions.
+  - Disarmed OS Command Injection in DiskCollector via strict regex validation and bash escaping.
+  - Re-architected inline script processing executing scripts in sandboxed Web Worker contexts.
+  - Isolated subprocess environment scopes in PingStrategy limiting variable leakage.
+  - Enforced strict token/API Key parsing with URLSearchParams checking.
+  - Explicitly fail-fast on missing DATABASE_URL configuration across independent backend clusters.
+  - Activated strict HTTP Security Headers (HSTS, CSP, X-Frame-Options) across the API automatically.
+
+## 0.6.2
+
+### Patch Changes
+
+- f676e11: Add script execution support and migrate CodeEditor to Monaco
+
+  **Integration providers** (`@checkstack/integration-script-backend`):
+
+  - **Script** - Execute TypeScript/JavaScript with context object
+  - **Bash** - Execute shell scripts with environment variables ($EVENT*ID, $PAYLOAD*\*)
+
+  **Health check collectors** (`@checkstack/healthcheck-script-backend`):
+
+  - **InlineScriptCollector** - Run TypeScript directly for health checks
+  - **ExecuteCollector** - Bash syntax highlighting for command field
+
+  **CodeEditor migration to Monaco** (`@checkstack/ui`):
+
+  - Replaced CodeMirror with Monaco Editor (VS Code's editor)
+  - Full TypeScript/JavaScript IntelliSense with custom type definitions
+  - Added `generateTypeDefinitions()` for JSON Schema → TypeScript conversion
+  - Removed all CodeMirror dependencies
+
+  **Type updates** (`@checkstack/common`):
+
+  - Added `javascript`, `typescript`, and `bash` to `EditorType` union
+
 ## 0.6.1
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkstack/common",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
@@ -18,8 +18,8 @@
   },
   "devDependencies": {
     "typescript": "^5.7.2",
-    "@checkstack/tsconfig": "0.0.2",
-    "@checkstack/scripts": "0.1.0"
+    "@checkstack/tsconfig": "0.0.3",
+    "@checkstack/scripts": "0.1.1"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",

package/src/types.ts

@@ -19,6 +19,9 @@ import type { AccessRule, InstanceAccessConfig } from "./access-utils";
  * - "xml": CodeEditor with XML syntax highlighting
  * - "markdown": CodeEditor with Markdown syntax highlighting
  * - "formdata": Key/value pair editor (URL-encoded)
+ * - "javascript": CodeEditor with JavaScript syntax highlighting and autocomplete
+ * - "typescript": CodeEditor with TypeScript syntax highlighting and autocomplete
+ * - "shell": CodeEditor with Shell syntax highlighting
  */
 export type EditorType =
   | "none"
@@ -27,7 +30,10 @@ export type EditorType =
   | "yaml"
   | "xml"
   | "markdown"
-  | "formdata";
+  | "formdata"
+  | "javascript"
+  | "typescript"
+  | "shell";
 
 /**
  * Qualifies a resource type with the plugin namespace.
@@ -120,4 +126,7 @@ export interface ProcedureMetadata {
    * ```
    */
   instanceAccess?: InstanceAccessConfig;
+
+  /** Restrict service-to-service calls to specific plugin IDs */
+  serviceScope?: string[];
 }