@saptools/cf-inspector 0.9.0 → 0.9.3

package/dist/cli.js

@@ -1298,6 +1298,20 @@ function registerSelfUpdateCommand(program, options) {
   });
 }
 
+// ../core/src/cloud-logging/instance-discovery.ts
+var INSTANCE_LISTING_FIELDS = `&${encodeURIComponent("fields[service_plan]")}=guid,name,relationships.service_offering&${encodeURIComponent("fields[service_plan.service_offering]")}=guid,name`;
+
+// ../core/src/cloud-logging/credential-cache.ts
+import { readdir, rm } from "fs/promises";
+import { dirname as dirname5, join as join7 } from "path";
+
+// ../core/src/cloud-logging/result-store.ts
+import { randomBytes } from "crypto";
+import { mkdir, readdir as readdir2, readFile, rename, rm as rm2, stat, unlink, writeFile } from "fs/promises";
+import { join as join8 } from "path";
+var DEFAULT_MAX_BYTES = 256 * 1024 * 1024;
+var STRANDED_AGE_MS = 24 * 60 * 60 * 1e3;
+
 // src/cli/program.ts
 import { Command } from "commander";
 
@@ -2931,9 +2945,9 @@ init_types();
 import { execFileSync } from "child_process";
 import { createHash, randomUUID } from "crypto";
 import { constants as constants3 } from "fs";
-import { mkdir, open, readFile, readdir, stat, unlink, writeFile } from "fs/promises";
+import { mkdir as mkdir2, open, readFile as readFile2, readdir as readdir3, stat as stat2, unlink as unlink2, writeFile as writeFile2 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { join as join7 } from "path";
+import { join as join9 } from "path";
 var ELECTION_WINDOW_MS = 25;
 var LOCK_FILE_SUFFIX = ".lock";
 async function acquireDebugSessionLock(target, options = {}) {
@@ -2945,8 +2959,8 @@ async function acquireDebugSessionLock(target, options = {}) {
   const targetIdentity = debugTargetIdentity(target);
   const key = createHash("sha256").update(targetIdentity).digest("hex");
   const lockRoot = options.stateRoot ?? defaultStateRoot();
-  const lockDirectory = join7(lockRoot, "cf-inspector", "locks");
-  const ownPath = join7(lockDirectory, `${key}.${pid.toString()}.${token}${LOCK_FILE_SUFFIX}`);
+  const lockDirectory = join9(lockRoot, "cf-inspector", "locks");
+  const ownPath = join9(lockDirectory, `${key}.${pid.toString()}.${token}${LOCK_FILE_SUFFIX}`);
   const metadata = {
     pid,
     ...ownerProcessStart === void 0 ? {} : { processStart: ownerProcessStart },
@@ -2955,7 +2969,7 @@ async function acquireDebugSessionLock(target, options = {}) {
     token,
     target: targetIdentity
   };
-  await mkdir(lockDirectory, { recursive: true, mode: 448 });
+  await mkdir2(lockDirectory, { recursive: true, mode: 448 });
   const handle = await open(ownPath, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
   try {
     await handle.writeFile(`${JSON.stringify(metadata)}
@@ -2980,7 +2994,7 @@ async function acquireDebugSessionLock(target, options = {}) {
     }
     await writeLockMetadata(ownPath, { ...metadata, state: "owned" });
   } catch (error) {
-    await unlink(ownPath).catch(() => {
+    await unlink2(ownPath).catch(() => {
     });
     throw error;
   }
@@ -2996,7 +3010,7 @@ async function acquireDebugSessionLock(target, options = {}) {
       if (current?.token !== token || current.pid !== pid) {
         return;
       }
-      await unlink(ownPath).catch((error) => {
+      await unlink2(ownPath).catch((error) => {
         if (!isNodeError(error, "ENOENT")) {
           throw error;
         }
@@ -3025,28 +3039,28 @@ function debugTargetIdentity(target) {
 }
 function defaultStateRoot() {
   const configured = process.env["CF_INSPECTOR_STATE_DIR"]?.trim();
-  return configured === void 0 || configured.length === 0 ? join7(homedir3(), ".saptools") : configured;
+  return configured === void 0 || configured.length === 0 ? join9(homedir3(), ".saptools") : configured;
 }
 async function findLiveContenders(lockDirectory, key, ownPath, isProcessAlive, getProcessStart) {
   const prefix = `${key}.`;
-  const names = await readdir(lockDirectory);
+  const names = await readdir3(lockDirectory);
   const contenders = [];
   for (const name of names) {
     if (!name.startsWith(prefix) || !name.endsWith(LOCK_FILE_SUFFIX)) {
       continue;
     }
-    const path = join7(lockDirectory, name);
+    const path = join9(lockDirectory, name);
     if (path === ownPath) {
       continue;
     }
-    const info = await stat(path).catch(() => {
+    const info = await stat2(path).catch(() => {
     });
     const metadata = await readLockMetadata(path) ?? (info === void 0 ? void 0 : metadataFromFilename(name, key, info.mtimeMs));
     if (metadata !== void 0) {
       if (ownerIsAlive(metadata, isProcessAlive, getProcessStart)) {
         contenders.push(metadata);
       } else {
-        await unlink(path).catch(() => {
+        await unlink2(path).catch(() => {
         });
       }
       continue;
@@ -3065,7 +3079,7 @@ async function findLiveContenders(lockDirectory, key, ownPath, isProcessAlive, g
 }
 async function readLockMetadata(path) {
   try {
-    const parsed = JSON.parse(await readFile(path, "utf8"));
+    const parsed = JSON.parse(await readFile2(path, "utf8"));
     if (!isRecord3(parsed)) {
       return void 0;
     }
@@ -3091,7 +3105,7 @@ async function readLockMetadata(path) {
   }
 }
 async function writeLockMetadata(path, metadata) {
-  await writeFile(path, `${JSON.stringify(metadata)}
+  await writeFile2(path, `${JSON.stringify(metadata)}
 `, { encoding: "utf8", mode: 384 });
 }
 function metadataFromFilename(name, key, mtimeMs) {
@@ -3408,7 +3422,7 @@ function parsePositiveInt(raw, label) {
   }
   return value;
 }
-function resolveTarget(opts, options = {}) {
+function resolveTarget2(opts, options = {}) {
   const port = parsePositiveInt(opts.port, "--port");
   const targetIndex = parseTargetIndex(opts.target);
   const workerIndex = parseSelectionIndex(opts.worker, "--worker");
@@ -3453,7 +3467,7 @@ function resolveTarget(opts, options = {}) {
   );
 }
 async function resolveTargetWithCurrentCfTarget(opts, options = {}) {
-  return await Promise.resolve(resolveTarget(opts, options));
+  return await Promise.resolve(resolveTarget2(opts, options));
 }
 function parseTunnelTimeout(opts, options) {
   if (options.useTimeoutForTunnel === false) {
@@ -3679,6 +3693,22 @@ init_types();
 var REGEX_PREFIX = "regex:";
 var REGEX_FLAGS_PATTERN = /^[dgimsuvy]*$/;
 var TS_JS_EXT_PATTERN = /\.(?:ts|js|mts|mjs|cts|cjs)$/i;
+var MAX_REMOTE_ROOT_PATTERN_LENGTH = 200;
+var NESTED_QUANTIFIER_PATTERN = /\([^()]*[+*][^()]*\)[+*]/;
+function assertSafeRemoteRootPattern(pattern) {
+  if (pattern.length > MAX_REMOTE_ROOT_PATTERN_LENGTH) {
+    throw new CfInspectorError(
+      "INVALID_REMOTE_ROOT",
+      `--remote-root regex pattern is too long (${pattern.length.toString()} chars, max ${MAX_REMOTE_ROOT_PATTERN_LENGTH.toString()}) \u2014 this bounds worst-case backtracking cost`
+    );
+  }
+  if (NESTED_QUANTIFIER_PATTERN.test(pattern)) {
+    throw new CfInspectorError(
+      "INVALID_REMOTE_ROOT",
+      `--remote-root regex pattern "${pattern}" contains a nested quantifier (e.g. "(x+)+"), which can cause catastrophic backtracking \u2014 simplify the pattern`
+    );
+  }
+}
 function parseBreakpointSpec(input) {
   const idx = input.lastIndexOf(":");
   if (idx <= 0 || idx === input.length - 1) {
@@ -3719,6 +3749,7 @@ function parseRemoteRoot(value) {
   return { kind: "literal", value: stripTrailingSlash(trimmed) };
 }
 function toRegex(pattern, flags) {
+  assertSafeRemoteRootPattern(pattern);
   return { kind: "regex", pattern, flags };
 }
 function parseSlashDelimited(value) {
@@ -5595,7 +5626,7 @@ import process10 from "process";
 init_types();
 
 // src/logpoint/condition.ts
-import { randomBytes } from "crypto";
+import { randomBytes as randomBytes2 } from "crypto";
 var SENTINEL_PREFIX = "__CFI_LOG_";
 var SENTINEL_SUFFIX = "__";
 var HITS_GLOBAL2 = "globalThis.__CFI_LOG_HITS";
@@ -5653,7 +5684,7 @@ function buildLogpointCondition(sentinel, expression, options = {}) {
   return `(${guard})?${iife}:false`;
 }
 function generateSentinel() {
-  return `${SENTINEL_PREFIX}${randomBytes(8).toString("hex")}${SENTINEL_SUFFIX}`;
+  return `${SENTINEL_PREFIX}${randomBytes2(8).toString("hex")}${SENTINEL_SUFFIX}`;
 }
 
 // src/logpoint/events.ts