@typed-assistant/builder 0.0.90 → 0.0.91

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @typed-assistant/builder
 
+## 0.0.91
+
+### Patch Changes
+
+- Fix security, reliability, and performance issues
+
+  - Fix XSS: pass `escapeXML: true` to ansi-to-html `Convert` constructor
+  - Fix regex injection: escape `entryFile` metacharacters before `RegExp`
+  - Fix crash: wrap `.gitignore` read in try/catch with fallback warning
+  - Fix error handling: normalize caught values to `Error` in `withErrorHandling` and `generateTypes`
+  - Fix preinstall: wrap in async IIFE so `Promise.all` is properly awaited
+  - Fix performance: replace listeners array with `Set` in `entityStore`
+  - Fix WebSocket: add exponential backoff (1s→30s cap) on reconnect
+  - Fix TS: import `JSX` type from react in `AppSection`
+
 ## 0.0.90
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@typed-assistant/builder",
-  "version": "0.0.90",
+  "version": "0.0.91",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/TypedAssistant/TypedAssistant.git",
@@ -38,9 +38,9 @@
     "ts-toolbelt": "^9.6.0",
     "typescript": "^5.4.0",
     "@typed-assistant/eslint-config": "0.0.11",
-    "@typed-assistant/logger": "0.0.23",
+    "@typed-assistant/utils": "0.0.21",
     "@typed-assistant/typescript-config": "0.0.12",
-    "@typed-assistant/utils": "0.0.20"
+    "@typed-assistant/logger": "0.0.23"
   },
   "scripts": {
     "lint": "tsc --noEmit && eslint ."

package/src/appProcess.tsx

@@ -151,7 +151,8 @@ const checkProcesses = (
   const interval = setInterval(async () => {
     const ps = await $`ps -f`.text()
     logger.debug({ emoji: "🔍" }, `Checking processes...\n${ps}`)
-    const matches = ps.match(new RegExp(`bun .+${entryFile}`, "gmi")) ?? []
+    const escapedEntryFile = entryFile.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+    const matches = ps.match(new RegExp(`bun .+${escapedEntryFile}`, "gmi")) ?? []
 
     if (matches.length > 1) {
       multipleProcessesErrorCount++
@@ -208,9 +209,13 @@ const setupGitSync = async ({
   return setupGitPoller({ onChangesPulled })
 }
 
-const ig = ignore().add(
-  `${readFileSync(join(process.cwd(), ".gitignore")).toString()}\n.git`,
-)
+let gitignoreContent = ".git"
+try {
+  gitignoreContent = `${readFileSync(join(process.cwd(), ".gitignore")).toString()}\n.git`
+} catch {
+  logger.warn({ emoji: "⚠️" }, "No .gitignore found, watching all files")
+}
+const ig = ignore().add(gitignoreContent)
 const shouldIgnoreFileOrFolder = (filename: string) =>
   ig.ignores(relative(process.cwd(), filename))
 

package/src/setupWebserver.tsx

@@ -25,7 +25,7 @@ const cssOutputFile = join(
   `./build/output.css`,
 ) as `${string}/output.css`
 
-const convert = new Convert()
+const convert = new Convert({ escapeXML: true })
 const decoder = new TextDecoder()
 
 const readers = {

package/src/webserver/AppSection.tsx

@@ -1,4 +1,4 @@
-import type { ReactNode } from "react"
+import type { ReactNode, JSX } from "react"
 import { twMerge } from "tailwind-merge"
 
 export const AppSection = ({

package/src/webserver/useWS.tsx

@@ -12,12 +12,19 @@ export function useWS({
 
   useEffect(() => {
     let timeout: ReturnType<typeof setTimeout>
+    let retryCount = 0
+
+    ws.ws.onopen = function () {
+      retryCount = 0
+    }
 
     ws.ws.onclose = function () {
+      const delay = Math.min(1000 * 2 ** retryCount, 30000)
+      retryCount++
       timeout = setTimeout(() => {
         if (ws.ws.readyState === WebSocket.OPEN) return
         setWS(subscribe)
-      }, 1000)
+      }, delay)
     }
 
     ws.ws.onmessage = function (event) {