@gobing-ai/ts-runtime 0.2.8 → 0.3.0

package/dist/index.js

@@ -1,6 +1,7 @@
 export * from './config.js';
 export * from './context.js';
 export * from './fs.js';
+export * from './path.js';
 export * from './process-executor.js';
 export * from './schema-validation.js';
 export * from './types.js';

package/dist/path.d.ts

@@ -0,0 +1,7 @@
+export declare function normalizeSeparators(path: string): string;
+export declare function isAbsolutePath(path: string): boolean;
+export declare function dirnamePath(path: string): string;
+export declare function joinPath(...segments: string[]): string;
+export declare function resolvePath(...segments: string[]): string;
+export declare function getProcessCwd(): string;
+//# sourceMappingURL=path.d.ts.map

package/dist/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAIA,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAShD;AAED,wBAAgB,QAAQ,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAMtD;AAED,wBAAgB,WAAW,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAkBzD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/path.js

@@ -0,0 +1,55 @@
+// Runtime-portable path math. Deliberately avoids `node:path` so the same logic works on
+// `cloudflare-workers` (no `node:*`) as on node-bun (ADR-008). POSIX-style separators throughout;
+// Windows drive paths (`C:/...`) are normalized and treated as absolute.
+export function normalizeSeparators(path) {
+    return path.replaceAll('\\', '/');
+}
+export function isAbsolutePath(path) {
+    return path.startsWith('/') || /^[A-Za-z]:\//.test(normalizeSeparators(path));
+}
+export function dirnamePath(path) {
+    const input = normalizeSeparators(path);
+    if (/^\/+$/.test(input))
+        return '/';
+    const normalized = input.replace(/\/+$/, '');
+    if (normalized === '' || normalized === '/')
+        return normalized || '.';
+    const index = normalized.lastIndexOf('/');
+    if (index < 0)
+        return '.';
+    if (index === 0)
+        return '/';
+    return normalized.slice(0, index);
+}
+export function joinPath(...segments) {
+    const filtered = segments.filter((segment) => segment.length > 0).map(normalizeSeparators);
+    if (filtered.length === 0)
+        return '.';
+    const absolute = isAbsolutePath(filtered[0] ?? '');
+    const joined = filtered.join('/').replace(/\/+/g, '/');
+    return absolute ? joined : joined.replace(/^\//, '');
+}
+export function resolvePath(...segments) {
+    const candidates = segments.length === 0 ? [getProcessCwd()] : segments;
+    let resolved = '';
+    for (const segment of candidates.map(normalizeSeparators)) {
+        if (segment.length === 0)
+            continue;
+        resolved = isAbsolutePath(segment) ? segment : joinPath(resolved || getProcessCwd(), segment);
+    }
+    const parts = [];
+    const absolute = isAbsolutePath(resolved);
+    for (const part of resolved.split('/')) {
+        if (part === '' || part === '.')
+            continue;
+        if (part === '..') {
+            parts.pop();
+            continue;
+        }
+        parts.push(part);
+    }
+    return `${absolute ? '/' : ''}${parts.join('/')}` || (absolute ? '/' : '.');
+}
+export function getProcessCwd() {
+    return globalThis.process?.cwd?.() ?? '/';
+}

package/dist/process-executor.d.ts

@@ -13,6 +13,11 @@ export interface ProcessOptions {
     command: string;
     args?: string[];
     cwd?: string;
+    /**
+     * Environment forwarded verbatim to the child process. Caller-controlled — when launching an
+     * untrusted command, pass an explicit allowlist rather than the parent's full environment, so
+     * inherited secrets are not leaked into the subprocess.
+     */
     env?: Record<string, string>;
     timeout?: number;
     /** Maximum output buffer size in bytes (maps to execa `maxBuffer`). */
@@ -33,9 +38,40 @@ export interface ProcessResult {
 export interface ProcessExecutor {
     run(options: ProcessOptions): Promise<ProcessResult>;
 }
+export interface SyncProcessExecutor {
+    runSync(options: Omit<ProcessOptions, 'timeout'>): ProcessResult;
+}
+export interface PipeProcessOptions {
+    command: string;
+    args?: string[];
+    cwd?: string;
+    /** Forwarded verbatim to the child — pass an allowlist for untrusted commands (see {@link ProcessOptions.env}). */
+    env?: Record<string, string>;
+}
+export interface PipeProcess {
+    readonly pid: number | null;
+    readonly stdout: ReadableStream<Uint8Array> | null;
+    readonly stderr: ReadableStream<Uint8Array> | null;
+    readonly exited: Promise<number | null>;
+    writeStdin(input: string | Uint8Array): void;
+    endStdin(): void;
+    kill(signal?: ProcessSignal): void;
+}
+export interface PipeProcessSpawner {
+    spawn(options: PipeProcessOptions): PipeProcess;
+}
 export declare class NodeProcessExecutor implements ProcessExecutor {
     private readonly config;
     constructor(config?: ProcessExecutorConfig);
     run(options: ProcessOptions): Promise<ProcessResult>;
 }
+export declare class BunSyncProcessExecutor implements SyncProcessExecutor {
+    runSync(options: Omit<ProcessOptions, 'timeout'>): ProcessResult;
+}
+export declare class BunPipeProcessSpawner implements PipeProcessSpawner {
+    spawn(options: PipeProcessOptions): PipeProcess;
+}
+type BunSubprocess = ReturnType<typeof Bun.spawn>;
+type ProcessSignal = Parameters<BunSubprocess['kill']>[0];
+export {};
 //# sourceMappingURL=process-executor.d.ts.map

package/dist/process-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-executor.d.ts","sourceRoot":"","sources":["../src/process-executor.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtF,MAAM,WAAW,qBAAqB;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC5B,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACxD;AAED,qBAAa,mBAAoB,YAAW,eAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,GAAE,qBAA0B;IAEzD,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA2C7D"}
+{"version":3,"file":"process-executor.d.ts","sourceRoot":"","sources":["../src/process-executor.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtF,MAAM,WAAW,qBAAqB;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC5B,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAChC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC;CACpE;AAED,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mHAAmH;IACnH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAC7C,QAAQ,IAAI,IAAI,CAAC;IACjB,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAC/B,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAAC;CACnD;AAED,qBAAa,mBAAoB,YAAW,eAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,GAAE,qBAA0B;IAEzD,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA2C7D;AAED,qBAAa,sBAAuB,YAAW,mBAAmB;IAC9D,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,aAAa;CA2BnE;AAED,qBAAa,qBAAsB,YAAW,kBAAkB;IAC5D,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW;CAWlD;AAED,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,KAAK,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/process-executor.js

@@ -44,6 +44,74 @@ export class NodeProcessExecutor {
         }
     }
 }
+export class BunSyncProcessExecutor {
+    runSync(options) {
+        const args = options.args ?? [];
+        const startedAt = Date.now();
+        const result = Bun.spawnSync({
+            cmd: [options.command, ...args],
+            stdout: 'pipe',
+            stderr: 'pipe',
+            stdin: 'ignore',
+            ...(options.cwd !== undefined ? { cwd: options.cwd } : {}),
+            ...(options.env !== undefined ? { env: options.env } : {}),
+        });
+        if (options.rejectOnError === true && result.exitCode !== 0) {
+            throw new Error(`${options.command} ${args.join(' ')} failed with exit code ${result.exitCode}: ${stripFinalNewline(asString(result.stderr))}`);
+        }
+        return {
+            command: options.command,
+            args,
+            exitCode: result.exitCode,
+            stdout: stripFinalNewline(asString(result.stdout)),
+            stderr: stripFinalNewline(asString(result.stderr)),
+            durationMs: Date.now() - startedAt,
+        };
+    }
+}
+export class BunPipeProcessSpawner {
+    spawn(options) {
+        const subprocess = Bun.spawn({
+            cmd: [options.command, ...(options.args ?? [])],
+            stdin: 'pipe',
+            stdout: 'pipe',
+            stderr: 'pipe',
+            ...(options.cwd !== undefined ? { cwd: options.cwd } : {}),
+            ...(options.env !== undefined ? { env: options.env } : {}),
+        });
+        return new BunPipeProcess(subprocess);
+    }
+}
+class BunPipeProcess {
+    subprocess;
+    writer;
+    constructor(subprocess) {
+        this.subprocess = subprocess;
+        this.writer = subprocess.stdin;
+    }
+    get pid() {
+        return this.subprocess.pid ?? null;
+    }
+    get stdout() {
+        return isReadableStream(this.subprocess.stdout) ? this.subprocess.stdout : null;
+    }
+    get stderr() {
+        return isReadableStream(this.subprocess.stderr) ? this.subprocess.stderr : null;
+    }
+    get exited() {
+        return this.subprocess.exited;
+    }
+    writeStdin(input) {
+        this.writer.write(input);
+        this.writer.flush?.();
+    }
+    endStdin() {
+        this.writer.end?.();
+    }
+    kill(signal) {
+        this.subprocess.kill(signal);
+    }
+}
 function buildExecaOptions(opts) {
     const canStream = !opts.forceBuffered &&
         opts.outputPolicy?.mode === 'stream' &&
@@ -68,3 +136,9 @@ function asString(value) {
         return value.map(String).join('');
     return '';
 }
+function stripFinalNewline(value) {
+    return value.endsWith('\r\n') ? value.slice(0, -2) : value.endsWith('\n') ? value.slice(0, -1) : value;
+}
+function isReadableStream(value) {
+    return value instanceof ReadableStream;
+}

package/dist/schema-validation.d.ts

@@ -38,5 +38,5 @@ export declare class StructuredConfigSchemaError extends Error {
 export declare function loadStructuredConfig(path: string, options?: StructuredConfigLoadOptions): Promise<unknown>;
 export declare function parseStructuredConfig(content: string, source: string, options?: StructuredConfigLoadOptions): Promise<unknown>;
 export declare function validateDeclaredJsonSchema(value: unknown, source: string, options?: StructuredConfigLoadOptions): Promise<void>;
-export declare function validateJsonSchema(value: unknown, schema: JsonSchema, path?: string, defs?: Record<string, JsonSchema>): JsonSchemaViolation[];
+export declare function validateJsonSchema(value: unknown, schema: JsonSchema, path?: string, defs?: Record<string, JsonSchema>, seenRefs?: ReadonlySet<string>): JsonSchemaViolation[];
 //# sourceMappingURL=schema-validation.d.ts.map

package/dist/schema-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-validation.d.ts","sourceRoot":"","sources":["../src/schema-validation.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACzD;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IAG9C,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE;gBADnD,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,SAAS,mBAAmB,EAAO;CAK/D;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAGpH;AAED,wBAAsB,qBAAqB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,2BAAgC,GAC1C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAsB,0BAA0B,CAC5C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,2BAAgC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,IAAI,SAAK,EACT,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAM,GACtC,mBAAmB,EAAE,CAgDvB"}
+{"version":3,"file":"schema-validation.d.ts","sourceRoot":"","sources":["../src/schema-validation.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACzD;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IAG9C,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE;gBADnD,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,SAAS,mBAAmB,EAAO;CAK/D;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAGpH;AAED,wBAAsB,qBAAqB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,2BAAgC,GAC1C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAsB,0BAA0B,CAC5C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,2BAAgC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,IAAI,SAAK,EACT,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAM,EACrC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,GAC1C,mBAAmB,EAAE,CAwDvB"}

package/dist/schema-validation.js

@@ -1,8 +1,10 @@
-import { dirname, isAbsolute, join } from 'node:path';
 import { parse as parseYaml } from 'yaml';
 import { getFs } from './fs.js';
+import { dirnamePath, isAbsolutePath, joinPath } from './path.js';
 /** Default time budget for a single remote schema fetch. */
 const REMOTE_SCHEMA_FETCH_TIMEOUT_MS = 5_000;
+/** Upper bound on a remote schema body. A timeout alone lets a slow multi-GB drip exhaust memory. */
+const REMOTE_SCHEMA_MAX_BYTES = 5 * 1024 * 1024;
 export class StructuredConfigSchemaError extends Error {
     violations;
     constructor(message, violations = []) {
@@ -47,20 +49,27 @@ export async function validateDeclaredJsonSchema(value, source, options = {}) {
             .join('; ')}`, violations);
     }
 }
-export function validateJsonSchema(value, schema, path = '', defs = {}) {
+export function validateJsonSchema(value, schema, path = '', defs = {}, seenRefs = new Set()) {
     const violations = [];
     // Applicator keywords compose with their siblings (logical AND), per JSON Schema 2020-12 —
     // a node may carry `$ref`/`oneOf`/`anyOf` *and* `type`/`properties`/... and all apply.
     if (schema.$ref !== undefined) {
-        const resolved = resolveRef(schema.$ref, defs, schema.$defs);
-        if (resolved !== undefined)
-            violations.push(...validateJsonSchema(value, resolved, path, defs));
+        // Cyclic `$ref` (A→B→A) would recurse until stack overflow — a DoS surface for untrusted
+        // schemas. Following a ref already on the current path is a no-op: that branch is being
+        // validated higher up the stack, so re-entering adds nothing but unbounded depth.
+        if (!seenRefs.has(schema.$ref)) {
+            const resolved = resolveRef(schema.$ref, defs, schema.$defs);
+            if (resolved !== undefined) {
+                const nextSeen = new Set(seenRefs).add(schema.$ref);
+                violations.push(...validateJsonSchema(value, resolved, path, defs, nextSeen));
+            }
+        }
     }
     if (schema.oneOf !== undefined) {
-        violations.push(...validateCombinator(value, schema.oneOf, path, defs, 'oneOf'));
+        violations.push(...validateCombinator(value, schema.oneOf, path, defs, 'oneOf', seenRefs));
     }
     if (schema.anyOf !== undefined) {
-        violations.push(...validateCombinator(value, schema.anyOf, path, defs, 'anyOf'));
+        violations.push(...validateCombinator(value, schema.anyOf, path, defs, 'anyOf', seenRefs));
     }
     if (schema.const !== undefined && !jsonEqual(value, schema.const)) {
         violations.push({ path: path || '(root)', message: `expected constant ${JSON.stringify(schema.const)}` });
@@ -80,14 +89,14 @@ export function validateJsonSchema(value, schema, path = '', defs = {}) {
     }
     const hasObjectKeywords = schema.properties !== undefined || schema.required !== undefined || schema.additionalProperties !== undefined;
     if (schema.type === 'object' || (hasObjectKeywords && isObject(value))) {
-        violations.push(...validateObject(value, schema, path, defs));
+        violations.push(...validateObject(value, schema, path, defs, seenRefs));
     }
     if (schema.type === 'array' || (schema.items !== undefined && Array.isArray(value))) {
-        violations.push(...validateArray(value, schema, path, defs));
+        violations.push(...validateArray(value, schema, path, defs, seenRefs));
     }
     return violations;
 }
-function validateObject(value, schema, path, defs) {
+function validateObject(value, schema, path, defs, seenRefs) {
     if (!isObject(value))
         return [{ path: path || '(root)', message: `expected object, got ${typeName(value)}` }];
     const violations = [];
@@ -99,7 +108,7 @@ function validateObject(value, schema, path, defs) {
     const properties = schema.properties ?? {};
     for (const [key, childSchema] of Object.entries(properties)) {
         if (key in value) {
-            violations.push(...validateJsonSchema(value[key], childSchema, path ? `${path}.${key}` : key, defs));
+            violations.push(...validateJsonSchema(value[key], childSchema, path ? `${path}.${key}` : key, defs, seenRefs));
         }
     }
     if (schema.additionalProperties === false) {
@@ -113,21 +122,21 @@ function validateObject(value, schema, path, defs) {
     else if (isObject(schema.additionalProperties)) {
         for (const [key, child] of Object.entries(value)) {
             if (!(key in properties)) {
-                violations.push(...validateJsonSchema(child, schema.additionalProperties, path ? `${path}.${key}` : key, defs));
+                violations.push(...validateJsonSchema(child, schema.additionalProperties, path ? `${path}.${key}` : key, defs, seenRefs));
             }
         }
     }
     return violations;
 }
-function validateArray(value, schema, path, defs) {
+function validateArray(value, schema, path, defs, seenRefs) {
     if (!Array.isArray(value))
         return [{ path: path || '(root)', message: `expected array, got ${typeName(value)}` }];
     if (schema.items === undefined)
         return [];
-    return value.flatMap((entry, index) => validateJsonSchema(entry, schema.items, `${path}[${index}]`, defs));
+    return value.flatMap((entry, index) => validateJsonSchema(entry, schema.items, `${path}[${index}]`, defs, seenRefs));
 }
-function validateCombinator(value, schemas, path, defs, mode) {
-    const branchViolations = schemas.map((schema) => validateJsonSchema(value, schema, path, defs));
+function validateCombinator(value, schemas, path, defs, mode, seenRefs) {
+    const branchViolations = schemas.map((schema) => validateJsonSchema(value, schema, path, defs, seenRefs));
     const passing = branchViolations.filter((violations) => violations.length === 0).length;
     if (mode === 'anyOf' && passing >= 1)
         return [];
@@ -156,11 +165,11 @@ function resolveRef(ref, defs, localDefs) {
     return defs[name] ?? localDefs?.[name];
 }
 function resolveSchemaRef(schemaRef, source, resolve) {
-    if (isRemoteRef(schemaRef) || isAbsolute(schemaRef))
+    if (isRemoteRef(schemaRef) || isAbsolutePath(schemaRef))
         return schemaRef;
     // Relative ref — resolve against the config file's directory.
     if (schemaRef.startsWith('./') || schemaRef.startsWith('../')) {
-        return join(isRemoteRef(source) ? '.' : dirname(source), schemaRef);
+        return joinPath(isRemoteRef(source) ? '.' : dirnamePath(source), schemaRef);
     }
     // Bare package specifier (e.g. "@scope/pkg/schemas/x.json") — resolve through node_modules.
     return resolvePackageSchema(schemaRef, source, resolve);
@@ -174,12 +183,12 @@ function resolvePackageSchema(specifier, source, resolve) {
     if (subpath.length === 0) {
         throw new StructuredConfigSchemaError(`Package schema ref "${specifier}" referenced by "${source}" must include a path within the package`);
     }
-    const from = isRemoteRef(source) ? process.cwd() : dirname(source);
+    const from = isRemoteRef(source) ? process.cwd() : dirnamePath(source);
     try {
         // Resolve the package root via its always-present package.json, then join the subpath.
         // This sidesteps `exports` gating on arbitrary JSON subpaths.
         const manifest = resolveFn(`${pkg}/package.json`, from);
-        return join(dirname(manifest), subpath);
+        return joinPath(dirnamePath(manifest), subpath);
     }
     catch (error) {
         throw new StructuredConfigSchemaError(`Cannot resolve package schema "${specifier}" referenced by "${source}": ${errorMessage(error)}`);
@@ -200,10 +209,50 @@ async function readSchema(schemaLocation, options) {
         if (!response.ok) {
             throw new StructuredConfigSchemaError(`Failed to fetch JSON schema "${schemaLocation}": HTTP ${response.status}`);
         }
-        return await response.text();
+        return await readBoundedBody(response, schemaLocation);
     }
     return await getFs().readFile(schemaLocation);
 }
+/**
+ * Read a response body under a hard byte cap. `Content-Length` is a fast-path reject, but servers
+ * lie or omit it, so the stream is also tallied chunk-by-chunk — a multi-GB drip is aborted before
+ * it can exhaust memory. Falls back to `.text()` only when the body is not a readable stream.
+ */
+async function readBoundedBody(response, schemaLocation) {
+    const declared = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > REMOTE_SCHEMA_MAX_BYTES) {
+        throw new StructuredConfigSchemaError(`Remote JSON schema "${schemaLocation}" exceeds the ${REMOTE_SCHEMA_MAX_BYTES}-byte limit (Content-Length ${declared})`);
+    }
+    const body = response.body;
+    if (body === null)
+        return await response.text();
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > REMOTE_SCHEMA_MAX_BYTES) {
+                await reader.cancel();
+                throw new StructuredConfigSchemaError(`Remote JSON schema "${schemaLocation}" exceeds the ${REMOTE_SCHEMA_MAX_BYTES}-byte limit`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        merged.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(merged);
+}
 const defaultResolve = typeof Bun !== 'undefined' ? (specifier, from) => Bun.resolveSync(specifier, from) : undefined;
 /** Default remote fetch, time-bounded so a slow/hung schema host cannot stall config loading. */
 function boundedFetch(input) {

package/dist/types.d.ts

@@ -1,6 +1,4 @@
 import type { Config } from './config';
-import type { RuntimeContext } from './context';
-import type { FileSystem } from './fs';
 export type RuntimeName = 'node-bun' | 'cloudflare-workers' | 'test';
 export interface RuntimeCapabilities {
     readonly hasFilesystem: boolean;
@@ -11,15 +9,6 @@ export interface LoadConfigOptions {
     overrides?: Partial<Config>;
     envBindings?: Record<string, unknown>;
 }
-export interface RuntimeFactory {
-    readonly runtimeName: RuntimeName;
-    readonly capabilities: RuntimeCapabilities;
-    createFileSystem(): FileSystem;
-    loadConfig(options?: LoadConfigOptions): Promise<Config>;
-    createContext?(options?: {
-        scope?: string;
-    }): RuntimeContext;
-}
 export interface SpanContext {
     traceId: string;
     spanId: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAEvC,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,oBAAoB,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,gBAAgB,IAAI,UAAU,CAAC;IAC/B,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,CAAC;CAChE;AAED,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC1D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,oBAAoB,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC1D"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/ts-runtime",
-    "version": "0.2.8",
+    "version": "0.3.0",
     "description": "@gobing-ai/ts-runtime — Runtime abstractions for Bun, Node, and Cloudflare Workers.",
     "keywords": [
         "typescript",
@@ -54,7 +54,7 @@
         "release": "echo 'Manual publish is disabled. Releases go through GitHub Actions via Trusted Publishing — push a tag: git tag @gobing-ai/ts-runtime-v<version> && git push --tags' && exit 1"
     },
     "dependencies": {
-        "@gobing-ai/ts-utils": "^0.2.8",
+        "@gobing-ai/ts-utils": "^0.3.0",
         "execa": "^9.5.0",
         "yaml": "^2.7.0",
         "zod": "^4.1.0"

package/src/config.ts

@@ -1,4 +1,5 @@
-import { parse as parseYaml } from 'yaml';
+import { deepMerge } from '@gobing-ai/ts-utils';
+import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
 import { type ZodIssue, z } from 'zod';
 
 export const configSchema = z.object({
@@ -29,6 +30,40 @@ export type Config = z.output<typeof configSchema>;
 
 const ENV_INTERPOLATION_RE = /\$\{([A-Z_][A-Z0-9_]*)\}/g;
 
+/** Raised when a YAML text cannot be parsed as a plain object. */
+export class YamlParseError extends Error {
+    constructor(
+        message: string,
+        readonly innerError?: unknown,
+    ) {
+        super(message);
+        this.name = 'YamlParseError';
+    }
+}
+
+/** Parse YAML text into a plain object. Returns `{}` for null/undefined/empty input. */
+export function parseYamlObject(text: string): Record<string, unknown> {
+    let parsed: unknown;
+    try {
+        parsed = parseYaml(text);
+    } catch (error) {
+        throw new YamlParseError(
+            `YAML parsing failed: ${(error as Error).message}`,
+            error instanceof Error ? error : undefined,
+        );
+    }
+    if (parsed === null || parsed === undefined) return {};
+    if (typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new YamlParseError('YAML must parse to an object');
+    }
+    return parsed as Record<string, unknown>;
+}
+
+/** Serialize a plain object to a YAML string. */
+export function stringifyYamlObject(value: Record<string, unknown>): string {
+    return stringifyYaml(value);
+}
+
 export class ConfigLoadError extends Error {
     readonly issues: ZodIssue[];
 
@@ -39,6 +74,9 @@ export class ConfigLoadError extends Error {
     }
 }
 
+// These accessors read `process.env` directly and are node-bun only (ADR-008). On
+// `cloudflare-workers` there is no `process`; inject config explicitly rather than calling these.
+
 export function getNodeEnv(): string {
     return process.env.NODE_ENV ?? 'development';
 }
@@ -55,6 +93,7 @@ export function getDatabaseUrl(): string | undefined {
     return process.env.DATABASE_URL;
 }
 
+/** Node-bun only: interpolates `${VAR}` from `process.env` (see note above). */
 export function interpolateEnv(value: string): string {
     return value.replace(ENV_INTERPOLATION_RE, (_match, name: string) => process.env[name] ?? `\${${name}}`);
 }
@@ -68,48 +107,6 @@ export function interpolateTree(value: unknown): unknown {
     return value;
 }
 
-export function deepMerge(target: Record<string, unknown>, source: Record<string, unknown>): Record<string, unknown> {
-    const result = { ...target };
-    for (const [key, value] of Object.entries(source)) {
-        if (isPlainObject(value) && isPlainObject(result[key])) {
-            result[key] = deepMerge(result[key] as Record<string, unknown>, value);
-        } else {
-            result[key] = value;
-        }
-    }
-    return result;
-}
-
-export function flattenKeys(obj: Record<string, unknown>, prefix = ''): Record<string, string> {
-    const result: Record<string, string> = {};
-    for (const [key, value] of Object.entries(obj)) {
-        const fullKey = prefix ? `${prefix}.${key}` : key;
-        if (isPlainObject(value)) {
-            Object.assign(result, flattenKeys(value, fullKey));
-        } else {
-            result[fullKey] = JSON.stringify(value);
-        }
-    }
-    return result;
-}
-
-export function deFlattenKeys(entries: Record<string, string>): Record<string, unknown> {
-    const result: Record<string, unknown> = {};
-    for (const [key, rawValue] of Object.entries(entries)) {
-        const parts = key.split('.');
-        let current = result;
-        for (const part of parts.slice(0, -1)) {
-            if (!isPlainObject(current[part])) current[part] = {};
-            current = current[part] as Record<string, unknown>;
-        }
-
-        const last = parts.at(-1);
-        if (last === undefined) continue;
-        current[last] = parseConfigValue(rawValue);
-    }
-    return result;
-}
-
 export function buildConfigFromObject(
     raw: Record<string, unknown>,
     options: { overrides?: Partial<Config> } = {},
@@ -127,12 +124,7 @@ export function buildConfigFromObject(
 
 export function parseConfigYaml(yamlText: string): Record<string, unknown> {
     try {
-        const parsed = parseYaml(yamlText);
-        if (parsed === null || parsed === undefined) return {};
-        if (!isPlainObject(parsed)) {
-            throw new ConfigLoadError('Config YAML must parse to an object');
-        }
-        return parsed;
+        return parseYamlObject(yamlText);
     } catch (error) {
         if (error instanceof ConfigLoadError) throw error;
         throw new ConfigLoadError(`Config YAML parsing failed: ${(error as Error).message}`);
@@ -143,14 +135,6 @@ export function buildConfigFromYaml(yamlText: string, options: { overrides?: Par
     return buildConfigFromObject(parseConfigYaml(yamlText), options);
 }
 
-function parseConfigValue(value: string): unknown {
-    try {
-        return JSON.parse(value);
-    } catch {
-        return value;
-    }
-}
-
 function isPlainObject(value: unknown): value is Record<string, unknown> {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }

package/src/context.ts

@@ -2,7 +2,7 @@ import type { Config } from './config';
 import { buildConfigFromObject } from './config';
 import type { FileSystem } from './fs';
 import { getFs } from './fs';
-import type { RuntimeCapabilities, RuntimeFactory, RuntimeName } from './types';
+import type { RuntimeCapabilities, RuntimeName } from './types';
 
 export type RuntimeScope = 'process' | 'server-request' | 'scheduled-event' | 'test';
 
@@ -17,7 +17,6 @@ export interface RuntimeContextOptions<TServices extends RuntimeServiceMap = Run
     runtimeName?: RuntimeName;
     capabilities?: RuntimeCapabilities;
     services?: Partial<TServices>;
-    factory?: RuntimeFactory;
 }
 
 export class RuntimeContext<TServices extends RuntimeServiceMap = RuntimeServiceMap> {
@@ -28,10 +27,9 @@ export class RuntimeContext<TServices extends RuntimeServiceMap = RuntimeService
 
     constructor(options: RuntimeContextOptions<TServices> = {}) {
         this.scope = options.scope ?? 'process';
-        this.runtimeName = options.runtimeName ?? options.factory?.runtimeName ?? 'node-bun';
+        this.runtimeName = options.runtimeName ?? 'node-bun';
         this.capabilities =
             options.capabilities ??
-            options.factory?.capabilities ??
             ({
                 hasFilesystem: true,
                 hasProcessExecution: true,