@prosopo/puzzle-assets 0.2.4 → 0.2.6

package/.turbo/turbo-build$colon$cjs.log

@@ -20,4 +20,4 @@ dist/cjs/notch.cjs                        4.46 kB │ gzip: 1.81 kB
 dist/cjs/decoys.cjs                       4.54 kB │ gzip: 1.94 kB
 dist/cjs/compose.cjs                     10.60 kB │ gzip: 4.03 kB
 
-✓ built in 46ms
+✓ built in 66ms

package/.turbo/turbo-build$colon$esm.log

@@ -21,4 +21,4 @@ dist/esm/notch.js                        4.41 kB │ gzip: 1.81 kB
 dist/esm/decoys.js                       4.50 kB │ gzip: 1.93 kB
 dist/esm/compose.js                     10.51 kB │ gzip: 4.01 kB
 
-✓ built in 30ms
+✓ built in 52ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,11 +1,11 @@
 $ tsc --build --verbose
-11:53:20 AM - Projects in this build: 
+10:54:47 AM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * tsconfig.json
 
-11:53:20 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/dist/tsc/tsconfig.tsbuildinfo'
+10:54:48 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/modifyExportsFiles.test.ts' is older than output '../../dev/config/dist/tsc/tsconfig.tsbuildinfo'
 
-11:53:20 AM - Project 'tsconfig.json' is out of date because output file 'dist/tsc/tsconfig.tsbuildinfo' does not exist
+10:54:48 AM - Project 'tsconfig.json' is out of date because output file 'dist/tsc/tsconfig.tsbuildinfo' does not exist
 
-11:53:20 AM - Building project '/home/runner/work/captcha/captcha/packages/puzzle-assets/tsconfig.json'...
+10:54:48 AM - Building project '/home/runner/work/captcha/captcha/packages/puzzle-assets/tsconfig.json'...
 

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @prosopo/puzzle-assets
 
+## 0.2.6
+### Patch Changes
+
+- cdea91f: Stop malformed input from turning into silent wrong values or unhandled throws. Numbers from env vars, headers, request fields and CLI flags are now parsed strictly: "12abc" is no longer read as 12, and an empty string is no longer read as 0. A bad request timestamp now gets a 400 response instead of a 500 or NaN. JSON reads name the file or source that was bad, and JSON writes no longer throw on bigints. Composite IP addresses and dates that cannot be read are now rejected instead of crashing or slipping through as an Invalid Date.
+
+## 0.2.5
+### Patch Changes
+
+- 1966fc1: Bump the npm-minor-and-patch group across 1 directory with 15 updates
+
 ## 0.2.4
 ### Patch Changes
 

package/dist/tsc/tests/previewArgs.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=previewArgs.unit.test.d.ts.map

package/dist/tsc/tests/previewArgs.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":""}

package/dist/tsc/tests/previewArgs.unit.test.js

@@ -0,0 +1,25 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { afterEach, describe, expect, it } from "vitest";
+const packageDir = fileURLToPath(new URL("../..", import.meta.url));
+const tsx = join(packageDir, "node_modules/.bin/tsx");
+describe("preview script --count", () => {
+    let dir;
+    afterEach(() => {
+        if (dir)
+            rmSync(dir, { recursive: true, force: true });
+        dir = undefined;
+    });
+    it.each(["abc", "12abc", "1.5", "0", "-3", ""])("rejects %j before writing anything", (count) => {
+        dir = mkdtempSync(join(tmpdir(), "preview-"));
+        const out = join(dir, "out");
+        const run = spawnSync(tsx, ["scripts/preview.ts", "--count", count, "--out", out], { cwd: packageDir, encoding: "utf8", timeout: 30_000 });
+        expect(run.status).not.toBe(0);
+        expect(run.stderr).toContain("--count must be a positive integer");
+        expect(existsSync(out)).toBe(false);
+    }, 30_000);
+});
+//# sourceMappingURL=previewArgs.unit.test.js.map

package/dist/tsc/tests/previewArgs.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.js","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;AAEtD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,IAAI,GAAuB,CAAC;IAC5B,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,GAAG,GAAG,SAAS,CAAC;IACjB,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAC9C,oCAAoC,EACpC,CAAC,KAAK,EAAE,EAAE;QACT,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,SAAS,CACpB,GAAG,EACH,CAAC,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EACtD,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACtD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,EACD,MAAM,CACN,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/types/tests/previewArgs.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=previewArgs.unit.test.d.ts.map

package/dist/types/tests/previewArgs.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewArgs.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/previewArgs.unit.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prosopo/puzzle-assets",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "Procedural imagery for the slider puzzle captcha",
   "main": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",
@@ -35,11 +35,11 @@
     "sharp": "0.35.5"
   },
   "devDependencies": {
-    "@prosopo/config": "3.5.1",
+    "@prosopo/config": "3.5.3",
     "@types/node": "22.10.2",
     "@vitest/coverage-v8": "5.0.4",
     "del-cli": "6.0.0",
-    "dotenv": "18.0.7",
+    "dotenv": "18.0.8",
     "tslib": "2.7.0",
     "tsx": "4.20.3",
     "typescript": "5.6.2",

package/scripts/preview.ts

@@ -40,13 +40,22 @@ interface Args {
 	out: string;
 }
 
+/** `--count` must be a whole number of at least 1; parseInt would read "12abc" as 12 and "abc" as NaN. */
+const parseCount = (value: string): number => {
+	const count = Number(value);
+	if (value.trim() === "" || !Number.isSafeInteger(count) || count < 1) {
+		throw new Error(`--count must be a positive integer, got "${value}"`);
+	}
+	return count;
+};
+
 const parseArgs = (argv: readonly string[]): Args => {
 	const args: Args = { count: 24, out: "./preview" };
 	for (let i = 0; i < argv.length; i++) {
 		const flag = argv[i];
 		const value = argv[i + 1];
-		if (flag === "--count" && value) {
-			args.count = Number.parseInt(value, 10);
+		if (flag === "--count" && value !== undefined) {
+			args.count = parseCount(value);
 			i++;
 		} else if (flag === "--out" && value) {
 			args.out = value;