@wrongstack/tools 0.298.3 → 0.300.0

package/dist/install.js

@@ -673,7 +673,7 @@ var ProcessRegistryImpl = class {
     const p = this.processes.get(pid);
     if (!p) return false;
     if (p.killed) return true;
-    if (p.protected) return false;
+    if (p.protected && opts.includeProtected !== true) return false;
     if (opts.preserveBackground && p.background) return false;
     const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
     const isWin2 = os.platform() === "win32";
@@ -724,9 +724,13 @@ var ProcessRegistryImpl = class {
   killAll(opts = {}) {
     const pids = Array.from(this.processes.keys());
     const killed = [];
+    const includeProtected = opts.includeProtected === true;
     for (const pid of pids) {
       const p = this.processes.get(pid);
-      if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);
+      if (!p) continue;
+      if (p.protected && !includeProtected) continue;
+      if (opts.preserveBackground && p.background) continue;
+      if (this.kill(pid, opts)) killed.push(pid);
     }
     return killed;
   }

package/dist/json.js

@@ -2,6 +2,51 @@
 import * as fs from "node:fs/promises";
 import { deepMerge as deepMergeCore } from "@wrongstack/core/utils";
 
+// src/_regex.ts
+var MAX_PATTERN_LEN = 256;
+var DANGEROUS_PATTERNS = [
+  // (a+)+, (.*)+, etc — nested quantifier on a group with internal quantifier
+  /(\([^)]*[+*][^)]*\))[+*]/,
+  /(\(\?:[^)]*[+*][^)]*\))[+*]/,
+  // Adjacent quantifiers: a++ a*+
+  /[+*]{2,}/,
+  // Quantifier on alternation with length 2+
+  /\([^|)]+\|[^)]+\)[+*][+*]/,
+  // Greedy quantifier inside lookahead/lookbehind — (?!.*a+)
+  /[([][^)\]]*[+*][^)\]]*[)\]][^)]*\?\??/
+];
+function compileUserRegex(pattern, flags) {
+  if (typeof pattern !== "string") {
+    return { ok: false, reason: "pattern must be a string" };
+  }
+  if (pattern.length === 0) {
+    return { ok: false, reason: "pattern is empty" };
+  }
+  if (pattern.length > MAX_PATTERN_LEN) {
+    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };
+  }
+  for (const rx of DANGEROUS_PATTERNS) {
+    if (rx.test(pattern)) {
+      return {
+        ok: false,
+        reason: "pattern looks vulnerable to catastrophic backtracking \u2014 rewrite without nested quantifiers"
+      };
+    }
+  }
+  try {
+    return { ok: true, regex: new RegExp(pattern, flags) };
+  } catch (err) {
+    return {
+      ok: false,
+      reason: err instanceof Error ? err.message : "invalid regex"
+    };
+  }
+}
+var MAX_SUBJECT_LEN = 64 * 1024;
+function capSubject(line) {
+  return line.length > MAX_SUBJECT_LEN ? line.slice(0, MAX_SUBJECT_LEN) : line;
+}
+
 // src/_util.ts
 import * as fsp from "node:fs/promises";
 import * as path from "node:path";
@@ -500,8 +545,12 @@ function validateJsonSchema(data, schema) {
       }
     }
     if (typeof value === "string" && s["pattern"]) {
-      const re = new RegExp(s["pattern"]);
-      if (!re.test(value)) errors.push(`${path2}: does not match pattern ${s["pattern"]}`);
+      const compiled = compileUserRegex(s["pattern"], "");
+      if (!compiled.ok) {
+        errors.push(`${path2}: invalid schema pattern \u2014 ${compiled.reason}`);
+      } else if (!compiled.regex.test(capSubject(value))) {
+        errors.push(`${path2}: does not match pattern ${s["pattern"]}`);
+      }
     }
     if (typeof value === "string" && s["minLength"] !== void 0 && value.length < s["minLength"]) {
       errors.push(`${path2}: string too short (min ${s["minLength"]})`);

package/dist/languages/index.js

@@ -2794,7 +2794,7 @@ var ProcessRegistryImpl = class {
     const p = this.processes.get(pid);
     if (!p) return false;
     if (p.killed) return true;
-    if (p.protected) return false;
+    if (p.protected && opts.includeProtected !== true) return false;
     if (opts.preserveBackground && p.background) return false;
     const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
     const isWin2 = os.platform() === "win32";
@@ -2845,9 +2845,13 @@ var ProcessRegistryImpl = class {
   killAll(opts = {}) {
     const pids = Array.from(this.processes.keys());
     const killed = [];
+    const includeProtected = opts.includeProtected === true;
     for (const pid of pids) {
       const p = this.processes.get(pid);
-      if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);
+      if (!p) continue;
+      if (p.protected && !includeProtected) continue;
+      if (opts.preserveBackground && p.background) continue;
+      if (this.kill(pid, opts)) killed.push(pid);
     }
     return killed;
   }

package/dist/lint.js

@@ -666,7 +666,7 @@ var ProcessRegistryImpl = class {
     const p = this.processes.get(pid);
     if (!p) return false;
     if (p.killed) return true;
-    if (p.protected) return false;
+    if (p.protected && opts.includeProtected !== true) return false;
     if (opts.preserveBackground && p.background) return false;
     const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
     const isWin2 = os.platform() === "win32";
@@ -717,9 +717,13 @@ var ProcessRegistryImpl = class {
   killAll(opts = {}) {
     const pids = Array.from(this.processes.keys());
     const killed = [];
+    const includeProtected = opts.includeProtected === true;
     for (const pid of pids) {
       const p = this.processes.get(pid);
-      if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);
+      if (!p) continue;
+      if (p.protected && !includeProtected) continue;
+      if (opts.preserveBackground && p.background) continue;
+      if (this.kill(pid, opts)) killed.push(pid);
     }
     return killed;
   }

package/dist/outdated.js

@@ -3018,7 +3018,7 @@ var init_process_registry = __esm({
         const p = this.processes.get(pid);
         if (!p) return false;
         if (p.killed) return true;
-        if (p.protected) return false;
+        if (p.protected && opts.includeProtected !== true) return false;
         if (opts.preserveBackground && p.background) return false;
         const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
         const isWin2 = os.platform() === "win32";
@@ -3069,9 +3069,13 @@ var init_process_registry = __esm({
       killAll(opts = {}) {
         const pids = Array.from(this.processes.keys());
         const killed = [];
+        const includeProtected = opts.includeProtected === true;
         for (const pid of pids) {
           const p = this.processes.get(pid);
-          if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);
+          if (!p) continue;
+          if (p.protected && !includeProtected) continue;
+          if (opts.preserveBackground && p.background) continue;
+          if (this.kill(pid, opts)) killed.push(pid);
         }
         return killed;
       }