@pikku/mongodb 0.12.2 → 0.12.3

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @pikku/mongodb
 
+## 0.12.3
+
+### Patch Changes
+
+- a2ee6d0: Replace process.exit(1) with thrown error on MongoDB connection failure to allow graceful error handling.
+- 87433f0: Validate state key names in updateRunState to prevent MongoDB operator injection.
+- Updated dependencies [e412b4d]
+- Updated dependencies [53dc8c8]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [0a1cc51]
+- Updated dependencies [8b9b2e9]
+- Updated dependencies [8b9b2e9]
+- Updated dependencies [b973d44]
+- Updated dependencies [8b9b2e9]
+- Updated dependencies [8b9b2e9]
+  - @pikku/core@0.12.9
+
 ## 0.12.2
 
 ### Patch Changes

package/dist/src/mongodb-secret-service.js

@@ -50,7 +50,7 @@ export class MongoDBSecretService {
     async getSecret(key) {
         const row = await this.secrets.findOne({ _id: key });
         if (!row)
-            throw new Error(`Secret not found: ${key}`);
+            throw new Error('Requested secret not found');
         const kek = this.getKEK(row.keyVersion);
         const result = await envelopeDecrypt(kek, row.ciphertext, row.wrappedDek);
         await this.logAudit(key, 'read');

package/dist/src/mongodb-workflow-service.js

@@ -311,6 +311,9 @@ export class MongoDBWorkflowService extends PikkuWorkflowService {
         await this.steps.updateOne({ _id: stepId }, { $set: { branchTaken: branchKey, updatedAt: new Date() } });
     }
     async updateRunState(runId, name, value) {
+        if (!/^[a-zA-Z0-9_]+$/.test(name)) {
+            throw new Error('Invalid state key name');
+        }
         await this.runs.updateOne({ _id: runId }, {
             $set: {
                 [`state.${name}`]: value,

package/dist/src/pikku-mongodb.js

@@ -26,7 +26,7 @@ export class PikkuMongoDB {
         }
         catch (error) {
             this.logger.error('Error connecting to MongoDB', error);
-            process.exit(1);
+            throw error;
         }
     }
     async close() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/mongodb",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",
   "module": "dist/src/index.js",
@@ -17,7 +17,7 @@
     "prepublishOnly": "yarn build"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.6"
+    "@pikku/core": "^0.12.9"
   },
   "dependencies": {
     "mongodb": "^6.12.0"

package/src/mongodb-secret-service.ts

@@ -89,7 +89,7 @@ export class MongoDBSecretService implements SecretService {
 
   async getSecret(key: string): Promise<string> {
     const row = await this.secrets.findOne({ _id: key })
-    if (!row) throw new Error(`Secret not found: ${key}`)
+    if (!row) throw new Error('Requested secret not found')
 
     const kek = this.getKEK(row.keyVersion)
     const result = await envelopeDecrypt<string>(

package/src/mongodb-workflow-service.ts

@@ -515,6 +515,9 @@ export class MongoDBWorkflowService extends PikkuWorkflowService {
     name: string,
     value: unknown
   ): Promise<void> {
+    if (!/^[a-zA-Z0-9_]+$/.test(name)) {
+      throw new Error('Invalid state key name')
+    }
     await this.runs.updateOne(
       { _id: runId },
       {

package/src/pikku-mongodb.ts

@@ -29,7 +29,7 @@ export class PikkuMongoDB {
       this.logger.info('MongoDB connection successful')
     } catch (error) {
       this.logger.error('Error connecting to MongoDB', error)
-      process.exit(1)
+      throw error
     }
   }