arcane-os 0.3.3 → 0.3.5

package/src/mail.mjs

@@ -40,13 +40,16 @@ function dependency(options,name,fallback){
 }
 
 function recipientList(value,label){
+    if(value===undefined||value===null||value===''||(Array.isArray(value)&&value.length===0)){
+        return [];
+    }
     const entries=Array.isArray(value)
         ? value
         : typeof value==='string'
             ? value.split(',')
             : null;
-    if(!entries||entries.length===0||entries.length>50){
-        usage(`${label} must contain one to 50 comma-separated email addresses.`);
+    if(!entries||entries.length===0){
+        usage(`${label} must contain at least one email address when supplied.`);
     }
     const result=entries.map(function normalizeMailRecipient(entry){
         if(typeof entry!=='string'||!entry.trim()){
@@ -111,21 +114,24 @@ async function deleteCredential(options){
     return remove(credentialOptions(options));
 }
 
-function safeSendFailure(result){
-    return {
-        provider:'resend',
-        status:result.status,
-        classification:result.classification,
-        requestId:result.requestId,
-        providerStatus:result.providerStatus,
-        recipientCount:result.recipientCount,
-        retryable:result.retryable===true,
-        uncertain:result.uncertain===true,
-        ...(typeof result.code==='string'?{code:result.code}:{}),
-        ...(Number.isSafeInteger(result.retryAfterMs)&&result.retryAfterMs>0
-            ?{retryAfterMs:result.retryAfterMs}
-            :{})
-    };
+function withoutMailCredentials(value,seen=new WeakMap()){
+    if(!value||typeof value!=='object')return value;
+    if(seen.has(value))return seen.get(value);
+    const copy=Array.isArray(value)?[]:{};
+    seen.set(value,copy);
+    for(const [key,entry] of Object.entries(value)){
+        if(key==='apiKey'||key==='appKey')continue;
+        copy[key]=withoutMailCredentials(entry,seen);
+    }
+    return copy;
+}
+
+function completeSendFailure(result){
+    if(!result||typeof result!=='object'||Array.isArray(result)){
+        return {provider:'resend',result:withoutMailCredentials(result)};
+    }
+    // Complete provider detail remains visible; only credential fields are omitted.
+    return withoutMailCredentials(result);
 }
 
 async function sendMail(options){
@@ -164,9 +170,9 @@ async function sendMail(options){
             signal:options.signal
         });
         if(result?.classification==='accepted'&&result.status==='accepted'){
-            return result;
+            return withoutMailCredentials(result);
         }
-        const details=safeSendFailure(result||{});
+        const details=completeSendFailure(result);
         throw new ArcaneError(
             ERROR_CODES.operationFailed,
             `Resend did not authoritatively accept the mail request (${details.classification||'unknown'}).`,

package/src/workspace.mjs

@@ -94,6 +94,18 @@ function dependencyNameForSdkPackageSource(source){
     }
 }
 
+function routeIncludeMatches(actual,wanted,optionalSecurity){
+    if(!Array.isArray(actual)||!Array.isArray(wanted))return false;
+    if(actual.length===wanted.length
+        &&actual.every(function sameIncludedPath(value,index){return value===wanted[index];})){
+        return true;
+    }
+    return optionalSecurity
+        &&wanted.at(-1)==='security'
+        &&actual.length===wanted.length-1
+        &&actual.every(function sameFunctionalPath(value,index){return value===wanted[index];});
+}
+
 export function resolveSdkPackageDeclaration(rootPackage,{
     allowMissing=false,
     packageSource
@@ -179,19 +191,30 @@ function classifyRootConfig(config){
             include:['index.js','licence','package.json']
         }
     ];
-    const matches=expected=>routes.length===expected.length&&routes.every((route,index)=>{
-        const wanted=expected[index];
-        return isObject(route)&&Object.keys(route).every(key=>['source','destination','include','exclude'].includes(key))
-            &&route.source===wanted.source&&route.destination===wanted.destination
-            &&JSON.stringify(route.include)===JSON.stringify(wanted.include)
-            &&Array.isArray(route.exclude)&&route.exclude.length===0;
-    });
+    const matches=(expected,{optionalArcaneSecurity=false}={})=>{
+        if(routes.length!==expected.length)return false;
+        return routes.every(function routeMatches(route,index){
+            const wanted=expected[index];
+            return isObject(route)
+                &&Object.keys(route).every(function knownRouteKey(key){
+                    return ['source','destination','include','exclude'].includes(key);
+                })
+                &&route.source===wanted.source&&route.destination===wanted.destination
+                &&routeIncludeMatches(
+                    route.include,
+                    wanted.include,
+                    optionalArcaneSecurity&&index===0
+                        &&wanted.source==='arcane'&&wanted.destination==='arcane'
+                )
+                &&Array.isArray(route.exclude)&&route.exclude.length===0;
+        });
+    };
     let workspaceMode;
     let browserRuntimeLayout;
-    if(matches(external)){
+    if(matches(external,{optionalArcaneSecurity:true})){
         workspaceMode='external';
         browserRuntimeLayout='physical-v1';
-    }else if(matches(integrated)){
+    }else if(matches(integrated,{optionalArcaneSecurity:true})){
         workspaceMode='integrated';
         browserRuntimeLayout='physical-v1';
     }else if(matches(integratedLegacy)){