@jeffusion/bungee 6.0.4 → 6.1.0

package/dist/index.js

@@ -3502,7 +3502,7 @@ import { createInterface } from "node:readline";
 // package.json
 var package_default = {
   name: "@jeffusion/bungee",
-  version: "6.0.4",
+  version: "6.1.0",
   description: "High-performance reverse proxy server CLI",
   type: "module",
   bin: {
@@ -5909,7 +5909,7 @@ async function openRecoveryInputFile(path, options = {}) {
 // src/commands/recover.ts
 async function recoverCommand(options = {}) {
   const interactive = options.plugin !== undefined || options.action !== undefined;
-  if (interactive && (options.file !== undefined || !options.plugin || !/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(options.plugin) || !["issue-setup-code", "reset", "release-auth"].includes(options.action ?? "")))
+  if (interactive && (options.file !== undefined || !options.plugin || !/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(options.plugin) || !options.action || !/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(options.action) || ["__proto__", "constructor", "prototype"].includes(options.action)))
     throw new Error("invalid_recovery_arguments");
   if (interactive && (!process.stdin.isTTY || !process.stdout.isTTY))
     throw new Error("recovery_requires_terminal");
@@ -6278,12 +6278,11 @@ function createProgram() {
     }
   });
   program.command("init").description("Initialize the Bungee SQLite data directory and persistent plugin secrets key").option("--plugin-secrets-key <base64>", "Initialize with a canonical Base64 key for 32 bytes (otherwise use BUNGEE_PLUGIN_SECRETS_KEY or generate one)").action(initCommand);
-  program.command("recover").description("Recover a stopped instance using plugin terminal actions or bounded JSON").option("--file <path>", "Owner-only 0600 recovery JSON input file").option("--plugin <name>", "Management plugin for an interactive offline action").option("--action <action>", "Terminal action: issue-setup-code, reset, or release-auth").addHelpText("after", `
+  program.command("recover").description("Recover a stopped instance using plugin terminal actions or bounded JSON").option("--file <path>", "Owner-only 0600 recovery JSON input file").option("--plugin <name>", "Management plugin for an interactive offline action").option("--action <action>", "Plugin-declared terminal action, or release-auth").addHelpText("after", `
 Stop the instance first. Supply one JSON object via stdin or bungee recover --file recovery.json (chmod 600).
-Initialize management access: bungee recover --plugin user-auth --action issue-setup-code
 Reset identity: bungee recover --plugin user-auth --action reset
 Release required authentication locally: bungee recover --plugin user-auth --action release-auth
-These actions require a terminal. Reset asks for the plugin's fields and recovery reason; secret fields are hidden.
+These actions require a terminal. Plugins declare the questions for each action; secret fields are hidden.
 Unresolved usage: {"kind":"plugin-state","plugin":"token-budget","payload":{"keyId":"KEY_ID","requestId":"REQUEST_ID","attemptId":"ATTEMPT_ID","inputTokens":100,"outputTokens":200,"reason":"Verified usage evidence"}}
 Usage counts are replacement totals for the specified attempt, applied to its original period.
 `).action(async (options) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeffusion/bungee",
-  "version": "6.0.4",
+  "version": "6.1.0",
   "description": "High-performance reverse proxy server CLI",
   "type": "module",
   "bin": {
@@ -13,8 +13,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@jeffusion/bungee-core": "^6.0.4",
-    "@jeffusion/bungee-types": "^6.0.4",
+    "@jeffusion/bungee-core": "^6.1.0",
+    "@jeffusion/bungee-types": "^6.1.0",
     "cli-progress": "^3.12.0",
     "commander": "^14.0.1"
   },