@gajae-code/utils 0.5.0 → 0.5.2

package/dist/types/env.d.ts

@@ -1,20 +1,10 @@
+export { filterProcessEnv, isSafeEnvName, isSafeEnvValue } from "./spawn-env";
 /**
  * Strict shell-identifier shape. Used for dotenv keys we accept into
  * `Bun.env` — those should be referenceable as `$NAME` from POSIX shells,
  * so we reject anything outside `[A-Za-z_][A-Za-z0-9_]*`.
  */
 export declare function isValidEnvName(name: string): boolean;
-/**
- * The only names that are genuinely unsafe to forward to a native `execve`
- * spawn: empty, containing `=` (would corrupt the `KEY=VALUE` framing) or
- * NUL (terminates the C string mid-entry). Windows ships standard variables
- * whose names contain parentheses (e.g. `ProgramFiles(x86)`, `CommonProgramFiles(x86)`)
- * — those MUST survive the scrub so downstream resolvers (Git Bash discovery
- * in `procmgr.ts`, etc.) can still read them.
- */
-export declare function isSafeEnvName(name: string): boolean;
-export declare function isSafeEnvValue(value: string): boolean;
-export declare function filterProcessEnv(env: Record<string, string | undefined>): Record<string, string>;
 /**
  * Parses simple POSIX shell environment assignments from files such as
  * ~/.zshrc without executing user shell code. Supports `export KEY=value` and

package/dist/types/index.d.ts

@@ -19,6 +19,7 @@ export * as procmgr from "./procmgr";
 export * as prompt from "./prompt";
 export * as ptree from "./ptree";
 export { AbortError, ChildProcess, Exception, NonZeroExitError } from "./ptree";
+export * from "./safe-stderr";
 export * from "./sanitize-text";
 export * from "./snowflake";
 export * from "./stream";

package/dist/types/safe-stderr.d.ts

@@ -0,0 +1 @@
+export declare function safeStderrWrite(message: string): void;

package/dist/types/spawn-env.d.ts

@@ -0,0 +1,4 @@
+export declare function isSafeEnvName(name: string): boolean;
+export declare function isSafeEnvValue(value: string): boolean;
+export declare function shouldForwardSpawnEnvName(name: string): boolean;
+export declare function filterProcessEnv(env: Record<string, string | undefined>): Record<string, string>;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/utils",
-	"version": "0.5.0",
+	"version": "0.5.2",
 	"description": "Shared utilities for pi packages",
 	"homepage": "https://gaebal-gajae.dev",
 	"author": "Yeachan-Heo",
@@ -31,7 +31,7 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@gajae-code/natives": "0.5.0",
+		"@gajae-code/natives": "0.5.2",
 		"beautiful-mermaid": "^1.1.3",
 		"handlebars": "^4.7.9",
 		"winston": "^3.19.0",

package/src/env.ts

@@ -2,6 +2,9 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import { getAgentDir, getConfigRootDir } from "./dirs";
+import { isSafeEnvName, isSafeEnvValue } from "./spawn-env";
+
+export { filterProcessEnv, isSafeEnvName, isSafeEnvValue } from "./spawn-env";
 
 const ENV_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 
@@ -14,32 +17,6 @@ export function isValidEnvName(name: string): boolean {
 	return ENV_NAME_RE.test(name);
 }
 
-/**
- * The only names that are genuinely unsafe to forward to a native `execve`
- * spawn: empty, containing `=` (would corrupt the `KEY=VALUE` framing) or
- * NUL (terminates the C string mid-entry). Windows ships standard variables
- * whose names contain parentheses (e.g. `ProgramFiles(x86)`, `CommonProgramFiles(x86)`)
- * — those MUST survive the scrub so downstream resolvers (Git Bash discovery
- * in `procmgr.ts`, etc.) can still read them.
- */
-export function isSafeEnvName(name: string): boolean {
-	return name.length > 0 && !name.includes("=") && !name.includes("\0");
-}
-
-export function isSafeEnvValue(value: string): boolean {
-	return !value.includes("\0");
-}
-
-export function filterProcessEnv(env: Record<string, string | undefined>): Record<string, string> {
-	const result: Record<string, string> = {};
-	for (const key in env) {
-		const value = env[key];
-		if (!isSafeEnvName(key) || value === undefined || !isSafeEnvValue(value)) continue;
-		result[key] = value;
-	}
-	return result;
-}
-
 function stripInlineShellComment(value: string): string {
 	let quote: '"' | "'" | undefined;
 	for (let i = 0; i < value.length; i++) {

package/src/frontmatter.ts

@@ -6,6 +6,32 @@ function stripHtmlComments(content: string): string {
 	return content.replace(/<!--[\s\S]*?-->/g, "");
 }
 
+function stripLooseScalarTrailingCommas(metadata: string): string {
+	return metadata
+		.split("\n")
+		.map(line => {
+			const match = line.match(/^(\s*[\w-]+\s*:\s+)(.+),(\s*)$/);
+			if (!match || /^[[{|>]/.test(match[2].trimStart())) return line;
+			return `${match[1]}${match[2]}${match[3]}`;
+		})
+		.join("\n");
+}
+
+function parseYamlMetadata(metadata: string): Record<string, unknown> | null {
+	const normalized = metadata.replaceAll("\t", "  ");
+	try {
+		return YAML.parse(normalized) as Record<string, unknown> | null;
+	} catch (strictError) {
+		const loose = stripLooseScalarTrailingCommas(normalized);
+		if (loose === normalized) throw strictError;
+		try {
+			return YAML.parse(loose) as Record<string, unknown> | null;
+		} catch {
+			throw strictError;
+		}
+	}
+}
+
 /** Convert kebab-case to camelCase (e.g. "thinking-level" -> "thinkingLevel") */
 function kebabToCamel(key: string): string {
 	if (!key.includes("-")) return key;
@@ -101,7 +127,7 @@ export function parseFrontmatter(
 
 	try {
 		// Replace tabs with spaces for YAML compatibility, use failsafe mode for robustness
-		const loaded = YAML.parse(metadata.replaceAll("\t", "  ")) as Record<string, unknown> | null;
+		const loaded = parseYamlMetadata(metadata);
 		return { frontmatter: normalizeKeys({ ...frontmatter, ...loaded }), body };
 	} catch (error) {
 		const err = new FrontmatterError(

package/src/index.ts

@@ -19,6 +19,7 @@ export * as procmgr from "./procmgr";
 export * as prompt from "./prompt";
 export * as ptree from "./ptree";
 export { AbortError, ChildProcess, Exception, NonZeroExitError } from "./ptree";
+export * from "./safe-stderr";
 export * from "./sanitize-text";
 export * from "./snowflake";
 export * from "./stream";

package/src/postmortem.ts

@@ -8,6 +8,7 @@
 import inspector from "node:inspector";
 import { isMainThread } from "node:worker_threads";
 import { logger } from ".";
+import { safeStderrWrite } from "./safe-stderr";
 
 // Cleanup reasons, in order of priority/meaning.
 export enum Reason {
@@ -86,17 +87,17 @@ if (isMainThread) {
 			inspectorOpened = true;
 			inspector.open(undefined, undefined, false);
 			const url = inspector.url();
-			process.stderr.write(`Inspector opened: ${url}\n`);
+			safeStderrWrite(`Inspector opened: ${url}\n`);
 		})
 		.on("uncaughtException", async err => {
-			process.stderr.write(formatFatalError("Uncaught Exception", err));
+			safeStderrWrite(formatFatalError("Uncaught Exception", err));
 			logger.error("Uncaught exception", { err, stack: err.stack });
 			await runCleanup(Reason.UNCAUGHT_EXCEPTION);
 			process.exit(1);
 		})
 		.on("unhandledRejection", async reason => {
 			const err = reason instanceof Error ? reason : new Error(String(reason));
-			process.stderr.write(formatFatalError("Unhandled Rejection", err));
+			safeStderrWrite(formatFatalError("Unhandled Rejection", err));
 			logger.error("Unhandled rejection", { err, stack: err.stack });
 			await runCleanup(Reason.UNHANDLED_REJECTION);
 			process.exit(1);

package/src/safe-stderr.ts

@@ -0,0 +1,15 @@
+const CLOSED_STDERR_ERROR_CODES = new Set(["EIO", "EPIPE", "EBADF"]);
+
+function isClosedStderrWriteError(error: unknown): boolean {
+	if (!(error instanceof Error) || !("code" in error) || typeof error.code !== "string") return false;
+	return CLOSED_STDERR_ERROR_CODES.has(error.code);
+}
+
+export function safeStderrWrite(message: string): void {
+	try {
+		process.stderr.write(message);
+	} catch (error) {
+		if (isClosedStderrWriteError(error)) return;
+		throw error;
+	}
+}

package/src/spawn-env.ts

@@ -0,0 +1,23 @@
+const MACOS_MALLOC_STACK_LOGGING_ENV = new Set(["MallocStackLogging", "MallocStackLoggingNoCompact"]);
+
+export function isSafeEnvName(name: string): boolean {
+	return name.length > 0 && !name.includes("=") && !name.includes("\0");
+}
+
+export function isSafeEnvValue(value: string): boolean {
+	return !value.includes("\0");
+}
+
+export function shouldForwardSpawnEnvName(name: string): boolean {
+	return isSafeEnvName(name) && !MACOS_MALLOC_STACK_LOGGING_ENV.has(name);
+}
+
+export function filterProcessEnv(env: Record<string, string | undefined>): Record<string, string> {
+	const result: Record<string, string> = {};
+	for (const key in env) {
+		const value = env[key];
+		if (!shouldForwardSpawnEnvName(key) || value === undefined || !isSafeEnvValue(value)) continue;
+		result[key] = value;
+	}
+	return result;
+}