@prosopo/audio-assets 0.2.4 → 0.2.5

package/.turbo/turbo-build$colon$cjs.log

@@ -20,4 +20,4 @@ dist/cjs/phonemes.cjs  3.52 kB │ gzip: 1.12 kB
 dist/cjs/index.cjs     4.67 kB │ gzip: 1.70 kB
 dist/cjs/synth.cjs     7.70 kB │ gzip: 2.73 kB
 
-✓ built in 35ms
+✓ built in 51ms

package/.turbo/turbo-build$colon$esm.log

@@ -21,4 +21,4 @@ dist/esm/phonemes.js                    3.49 kB │ gzip: 1.11 kB
 dist/esm/index.js                       3.81 kB │ gzip: 1.54 kB
 dist/esm/synth.js                       7.61 kB │ gzip: 2.72 kB
 
-✓ built in 59ms
+✓ built in 69ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,14 +1,14 @@
 $ tsc --build --verbose
-12:56:11 PM - Projects in this build: 
+10:55:01 AM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../puzzle-assets/tsconfig.json
     * tsconfig.json
 
-12:56:11 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/vite.esm.config.ts' is older than output '../../dev/config/dist/tsc/tsconfig.tsbuildinfo'
+10:55:01 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/modifyExportsFiles.test.ts' is older than output '../../dev/config/dist/tsc/tsconfig.tsbuildinfo'
 
-12:56:11 PM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/dist/tsc/tsconfig.tsbuildinfo'
+10:55:01 AM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/types.ts' is older than output '../puzzle-assets/dist/tsc/tsconfig.tsbuildinfo'
 
-12:56:11 PM - Project 'tsconfig.json' is out of date because output file 'dist/tsc/tsconfig.tsbuildinfo' does not exist
+10:55:01 AM - Project 'tsconfig.json' is out of date because output file 'dist/tsc/tsconfig.tsbuildinfo' does not exist
 
-12:56:11 PM - Building project '/home/runner/work/captcha/captcha/packages/audio-assets/tsconfig.json'...
+10:55:01 AM - Building project '/home/runner/work/captcha/captcha/packages/audio-assets/tsconfig.json'...
 

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @prosopo/audio-assets
 
+## 0.2.5
+### Patch Changes
+
+- cdea91f: Stop malformed input from turning into silent wrong values or unhandled throws. Numbers from env vars, headers, request fields and CLI flags are now parsed strictly: "12abc" is no longer read as 12, and an empty string is no longer read as 0. A bad request timestamp now gets a 400 response instead of a 500 or NaN. JSON reads name the file or source that was bad, and JSON writes no longer throw on bigints. Composite IP addresses and dates that cannot be read are now rejected instead of crashing or slipping through as an Invalid Date.
+- Updated dependencies [cdea91f]
+  - @prosopo/puzzle-assets@0.2.6
+
 ## 0.2.4
 ### Patch Changes
 

package/dist/tsc/tests/previewArgs.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=previewArgs.unit.test.d.ts.map

package/dist/tsc/tests/previewArgs.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":""}

package/dist/tsc/tests/previewArgs.unit.test.js

@@ -0,0 +1,25 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { afterEach, describe, expect, it } from "vitest";
+const packageDir = fileURLToPath(new URL("../..", import.meta.url));
+const tsx = join(packageDir, "node_modules/.bin/tsx");
+describe("preview script --count", () => {
+    let dir;
+    afterEach(() => {
+        if (dir)
+            rmSync(dir, { recursive: true, force: true });
+        dir = undefined;
+    });
+    it.each(["abc", "12abc", "1.5", "0", "-3", ""])("rejects %j before writing anything", (count) => {
+        dir = mkdtempSync(join(tmpdir(), "preview-"));
+        const out = join(dir, "out");
+        const run = spawnSync(tsx, ["scripts/preview.ts", "--count", count, "--out", out], { cwd: packageDir, encoding: "utf8", timeout: 30_000 });
+        expect(run.status).not.toBe(0);
+        expect(run.stderr).toContain("--count must be a positive integer");
+        expect(existsSync(out)).toBe(false);
+    }, 30_000);
+});
+//# sourceMappingURL=previewArgs.unit.test.js.map

package/dist/tsc/tests/previewArgs.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.js","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;AAEtD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,IAAI,GAAuB,CAAC;IAC5B,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,GAAG,GAAG,SAAS,CAAC;IACjB,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAC9C,oCAAoC,EACpC,CAAC,KAAK,EAAE,EAAE;QACT,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,SAAS,CACpB,GAAG,EACH,CAAC,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EACtD,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACtD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,EACD,MAAM,CACN,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/types/tests/previewArgs.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=previewArgs.unit.test.d.ts.map

package/dist/types/tests/previewArgs.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prosopo/audio-assets",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Procedural speech synthesis for the audio captcha",
   "main": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",
@@ -27,10 +27,10 @@
   },
   "homepage": "https://github.com/prosopo/captcha#readme",
   "dependencies": {
-    "@prosopo/puzzle-assets": "0.2.5"
+    "@prosopo/puzzle-assets": "0.2.6"
   },
   "devDependencies": {
-    "@prosopo/config": "3.5.2",
+    "@prosopo/config": "3.5.3",
     "@types/node": "22.10.2",
     "@vitest/coverage-v8": "5.0.4",
     "del-cli": "6.0.0",

package/scripts/preview.ts

@@ -41,13 +41,22 @@ interface Args {
 	clean: boolean;
 }
 
+/** `--count` must be a whole number of at least 1; parseInt would read "12abc" as 12 and "abc" as NaN. */
+const parseCount = (value: string): number => {
+	const count = Number(value);
+	if (value.trim() === "" || !Number.isSafeInteger(count) || count < 1) {
+		throw new Error(`--count must be a positive integer, got "${value}"`);
+	}
+	return count;
+};
+
 const parseArgs = (argv: readonly string[]): Args => {
 	const args: Args = { count: 12, out: "./preview", clean: false };
 	for (let i = 0; i < argv.length; i++) {
 		const flag = argv[i];
 		if (flag === "--count") {
 			const value = argv[++i];
-			if (value) args.count = Number.parseInt(value, 10);
+			if (value !== undefined) args.count = parseCount(value);
 		} else if (flag === "--out") {
 			const value = argv[++i];
 			if (value) args.out = value;