@sdods/core 0.16.0 → 0.18.0

package/dist/config/resolve.js

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { basename, join, resolve as resolvePath } from 'node:path';
 import { parse as parseYaml } from 'yaml';
 import { ZodError } from 'zod';
-import { EnvConfigSchema, ProjectConfigSchema, newRunId, } from '@sdods/contracts';
+import { EnvConfigSchema, ProjectConfigSchema, isRunId, newRunId, } from '@sdods/contracts';
 import { SdodsConfigError } from '../errors.js';
 import { DEFAULT_ARTIFACTS_DIR, ENV_TO_CONFIG_PATH, FRAMEWORK_DEFAULTS, PROJECT_FILE, } from './defaults.js';
 import { loadDotEnvLayer } from './env-files.js';
@@ -146,6 +146,11 @@ export function resolveConfig(opts) {
     // runtime finalisation
     const rt = interpolated.runtime;
     rt.runId = rt.runId || newRunId();
+    // runDir is `<artifactsDir>/<runId>`; a `..` id would point it (and its cleanup) elsewhere.
+    if (!isRunId(rt.runId))
+        throw new SdodsConfigError(`Invalid run id "${rt.runId}".`, {
+            hint: 'Use letters, digits, ".", "_" or "-", not starting with ".".',
+        });
     rt.retries = rt.retries ?? (rt.ci ? projectMerged.retries.ci : projectMerged.retries.local);
     rt.harMode = rt.harMode ?? 'off';
     rt.artifactsDir = resolvePath(opts.rootDir, rt.artifactsDir || DEFAULT_ARTIFACTS_DIR);

package/dist/config/workspace.js

@@ -1,4 +1,5 @@
-import { relative, resolve as resolvePath } from 'node:path';
+import { resolve as resolvePath } from 'node:path';
+import { isWithin } from '@sdods/contracts/paths';
 import { SdodsError } from '../errors.js';
 /** Directory (absolute) of a module's features. */
 export function moduleDir(projectRoot, mod) {
@@ -10,8 +11,7 @@ export function moduleForFeature(project, featureFile) {
     let best;
     for (const mod of project.modules) {
         const dir = moduleDir(project.root, mod);
-        const rel = relative(dir, abs);
-        if (rel === '' || rel.startsWith('..'))
+        if (!isWithin(dir, abs))
             continue;
         const depth = dir.split(/[\\/]/).length;
         if (!best || depth > best.depth)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdods/core",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "SDODS runtime: configuration, project registry, fixtures, step libraries, data providers, screenshot narratives and self-healing locators.",
   "license": "Apache-2.0",
   "funding": "https://sdods.com/sponsor/",
@@ -46,25 +46,25 @@
     "playwright-bdd": ">=9"
   },
   "dependencies": {
-    "@sdods/contracts": "0.16.0",
-    "@cucumber/cucumber-expressions": "19.0.0",
+    "@sdods/contracts": "0.18.0",
+    "@cucumber/cucumber-expressions": "19.0.1",
     "@cucumber/gherkin": "^42.0.1",
     "@cucumber/messages": "^34.2.1",
     "@faker-js/faker": "^10.6.0",
-    "@scalar/openapi-parser": "^0.29.12",
+    "@scalar/openapi-parser": "^0.29.16",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "csv-parse": "^7.0.3",
     "@cucumber/tag-expressions": "^11.0.1",
-    "dotenv": "^18.0.7",
-    "execa": "^10.1.0",
-    "jsonpath-plus": "^11.2.0",
+    "dotenv": "^18.0.9",
+    "execa": "^10.2.1",
+    "jsonpath-plus": "^11.2.1",
     "picocolors": "^1.1.1",
     "ts-morph": "^28.0.0",
     "tsx": "^4.23.15",
     "yaml": "^2.9.1",
-    "zod": "^4.6.5",
-    "@sdods/db": "0.16.0"
+    "zod": "^4.6.7",
+    "@sdods/db": "0.18.0"
   },
   "homepage": "https://sdods.com",
   "bugs": {