arcane-os 0.5.17 → 0.5.18

package/src/packager/core.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import {
     copyFile,
     lstat,
@@ -14,6 +15,8 @@ import {pathToFileURL} from 'node:url';
 import {withWorkspaceOperationLock} from '../workspace-operation-lock.mjs';
 import {inspectImportMapHtml,readWorkspaceAssetVersion,rewriteAssetReferences} from '../import-map.mjs';
 
+const is = new Is(false);
+
 export const ROOT_CONFIG_NAME='arcane-packager.json';
 export const APP_CONFIG_NAME='arcane-package.json';
 export const RELEASE_MANIFEST_NAME='ARCANE_APP_RELEASE.json';
@@ -42,7 +45,7 @@ function throwIfAborted(signal){
 }
 
 async function emit(onEvent,event){
-    if(typeof onEvent==='function')await onEvent(event);
+    if(is.function(onEvent))await onEvent(event);
 }
 
 function compareText(left,right){
@@ -52,7 +55,7 @@ function compareText(left,right){
 }
 
 function isPlainObject(value){
-    return value!==null&&typeof value==='object'&&!Array.isArray(value);
+    return value!==null&&is.object(value)&&!is.array(value);
 }
 
 function copyJson(value){
@@ -67,14 +70,14 @@ function assertOnlyKeys(value,allowed,label){
 }
 
 function normalizeWorkspaceRoot(workspaceRoot){
-    if(typeof workspaceRoot!=='string'||!workspaceRoot.trim()){
+    if(!is.string(workspaceRoot)||!workspaceRoot.trim()){
         fail('workspaceRoot must be a directory path.');
     }
     return path.resolve(workspaceRoot);
 }
 
 export function normalizeRelativePath(value,label='path'){
-    if(typeof value!=='string'||!value||value.includes('\\')||TEXT_CONTROL_PATTERN.test(value)){
+    if(!is.string(value)||!value||value.includes('\\')||TEXT_CONTROL_PATTERN.test(value)){
         fail(`Unsafe ${label}: ${String(value)}`);
     }
     if(path.posix.isAbsolute(value)||/^[a-z]:/iu.test(value))fail(`Unsafe ${label}: ${value}`);
@@ -119,7 +122,7 @@ function isGlobLike(value){
 }
 
 function validatePathList(value,label,{required=false}={}){
-    if(!Array.isArray(value)||(required&&value.length===0)){
+    if(!is.array(value)||(required&&value.length===0)){
         fail(`${label} must be ${required?'a non-empty':'an'} array of literal relative paths.`);
     }
     const normalized=value.map((entry,index)=>{
@@ -160,14 +163,14 @@ function isExcluded(relative,excludes){
 }
 
 function assertPresentationText(value,label){
-    if(typeof value!=='string'||!value.trim()){
+    if(!is.string(value)||!value.trim()){
         fail(`${label} must be nonempty text.`);
     }
     return value;
 }
 
 export function parseSemver(value){
-    if(typeof value!=='string')fail(`Invalid semantic version: ${String(value)}`);
+    if(!is.string(value))fail(`Invalid semantic version: ${String(value)}`);
     const match=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/u.exec(value);
     if(!match)fail(`Invalid semantic version: ${value}`);
     const prerelease=match[4]?match[4].split('.'):[];
@@ -177,7 +180,7 @@ export function parseSemver(value){
         }
     }
     const numbers=match.slice(1,4).map(Number);
-    if(numbers.some(number=>!Number.isSafeInteger(number))){
+    if(numbers.some(number=>!is.safeInteger(number))){
         fail(`Semantic version component exceeds JavaScript's safe integer range: ${value}`);
     }
     return {
@@ -204,7 +207,7 @@ export function incrementSemver(value,bump,preid='rc'){
     if(bump==='major')return formatSemver({major:current.major+1,minor:0,patch:0});
     if(bump==='minor')return formatSemver({major:current.major,minor:current.minor+1,patch:0});
     if(bump==='patch')return formatSemver({major:current.major,minor:current.minor,patch:current.patch+1});
-    if(typeof preid!=='string'||!/^[0-9A-Za-z-]+$/u.test(preid)){
+    if(!is.string(preid)||!/^[0-9A-Za-z-]+$/u.test(preid)){
         fail(`Invalid prerelease identifier: ${String(preid)}`);
     }
     const next={major:current.major,minor:current.minor,patch:current.patch,prerelease:[]};
@@ -264,7 +267,7 @@ export function validateRootConfig(value,configPath=ROOT_CONFIG_NAME){
     const sharedPayloads={};
     for(const [id,routes] of Object.entries(value.sharedPayloads).sort(([left],[right])=>compareText(left,right))){
         if(!SAFE_SHARED_ID_PATTERN.test(id))fail(`Unsafe shared payload id: ${id}`);
-        if(!Array.isArray(routes)||routes.length===0){
+        if(!is.array(routes)||routes.length===0){
             fail(`sharedPayloads.${id} must be a non-empty array.`);
         }
         sharedPayloads[id]=routes.map((route,index)=>
@@ -304,11 +307,11 @@ export function validateAppConfig(value,appId,rootConfig,configPath=`apps/${appI
     if(!['static','adapter'].includes(value.strategy)){
         fail(`${appId}/${APP_CONFIG_NAME}.strategy must be "static" or "adapter".`);
     }
-    if(!Array.isArray(value.shared)||new Set(value.shared).size!==value.shared.length){
+    if(!is.array(value.shared)||new Set(value.shared).size!==value.shared.length){
         fail(`${appId}/${APP_CONFIG_NAME}.shared must be an array of unique shared payload ids.`);
     }
     for(const [index,id] of value.shared.entries()){
-        if(typeof id!=='string'||!Object.hasOwn(rootConfig.sharedPayloads,id)){
+        if(!is.string(id)||!Object.hasOwn(rootConfig.sharedPayloads,id)){
             fail(`${appId}/${APP_CONFIG_NAME}.shared[${index}] references an unknown shared payload.`);
         }
     }
@@ -383,7 +386,7 @@ async function loadContext(requestedWorkspaceRoot,appId){
     const workspaceRoot=await realDirectory(normalizeWorkspaceRoot(requestedWorkspaceRoot),'Workspace root');
     const rootConfigPath=path.join(workspaceRoot,ROOT_CONFIG_NAME);
     const rootConfig=validateRootConfig(await readJson(rootConfigPath,ROOT_CONFIG_NAME),rootConfigPath);
-    if(typeof appId!=='string'||!APP_ID_PATTERN.test(appId))fail(`Unsafe app id: ${String(appId)}`);
+    if(!is.string(appId)||!APP_ID_PATTERN.test(appId))fail(`Unsafe app id: ${String(appId)}`);
     const appsRoot=await realDirectory(path.join(workspaceRoot,rootConfig.appsRoot),'Apps root');
     const appRoot=resolveInside(appsRoot,appId,'app id');
     await assertContainedRealPath(appsRoot,appRoot,`apps/${appId}`);
@@ -616,7 +619,7 @@ async function loadAdapter(context){
     const adapterPath=resolveInside(context.appRoot,context.config.adapter,`${context.appId} adapter`);
     await assertContainedRealPath(context.appRoot,adapterPath,`${context.appId} adapter`);
     const module=await import(`${pathToFileURL(adapterPath).href}?source=${Date.now()}`);
-    if(typeof module.buildArcanePackage!=='function'){
+    if(!is.function(module.buildArcanePackage)){
         fail(`${context.appId} adapter must export buildArcanePackage.`);
     }
     return module;
@@ -816,7 +819,7 @@ export async function verifyApp({workspaceRoot,appId,signal,onEvent}={}){
     const manifest=await readJson(path.join(outputRoot,RELEASE_MANIFEST_NAME),RELEASE_MANIFEST_NAME);
     if(!isPlainObject(manifest)||manifest.schemaVersion!==1||manifest.kind!=='arcane-app-release'
         ||manifest.packagerVersion!==PACKAGER_VERSION||manifest.app?.id!==appId
-        ||manifest.app?.version!==context.config.version||!Array.isArray(manifest.files)){
+        ||manifest.app?.version!==context.config.version||!is.array(manifest.files)){
         fail(`${RELEASE_MANIFEST_NAME} is malformed.`);
     }
     const expected=manifest.files.map((file,index)=>normalizeRelativePath(

package/src/process.mjs

@@ -1,8 +1,11 @@
+import Is from 'strong-type';
 import {spawn} from 'node:child_process';
 import path from 'node:path';
 import {ArcaneError,ERROR_CODES,throwIfAborted} from './errors.mjs';
 import {createEventQueue} from './event-queue.mjs';
 
+const is = new Is(false);
+
 const DEFAULT_TERMINATION_GRACE_MS=1500;
 
 export function platformCommand(command,platform=process.platform){
@@ -58,7 +61,7 @@ function childIsRunning(child){
 }
 
 function childHasPid(child){
-    return Number.isInteger(child?.pid)&&child.pid>0;
+    return is.integer(child?.pid)&&child.pid>0;
 }
 
 function terminateWindowsTree(child,{force=false}={}){
@@ -124,10 +127,10 @@ export async function runProcess(command,args=[],{
     input
 }={}){
     throwIfAborted(signal);
-    if(!Array.isArray(args)||args.some(argument=>typeof argument!=='string')){
+    if(!is.array(args)||args.some(argument=>!is.string(argument))){
         throw new ArcaneError(ERROR_CODES.usage,'Process arguments must be a fixed array of strings.');
     }
-    if(!Number.isInteger(terminationGraceMs)||terminationGraceMs<100||terminationGraceMs>30_000){
+    if(!is.integer(terminationGraceMs)||terminationGraceMs<100||terminationGraceMs>30_000){
         throw new ArcaneError(
             ERROR_CODES.usage,
             'terminationGraceMs must be an integer from 100 through 30000.'

package/src/release-bundle.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import {
     lstat,
     mkdir,
@@ -15,6 +16,8 @@ import {SDK_NAME,SDK_VERSION} from './constants.mjs';
 import {ArcaneError,ERROR_CODES,throwIfAborted} from './errors.mjs';
 import {RELEASE_MANIFEST_NAME,PACKAGER_VERSION,parseSemver} from './packager/core.mjs';
 
+const is = new Is(false);
+
 export const APP_BUNDLE_MANIFEST_NAME='ARCANE_APP_BUNDLE.json';
 export const APP_BUNDLE_DESCRIPTOR_NAME='arcane-app.json';
 export const APP_BUNDLE_RELEASE_PATH=`payload/${RELEASE_MANIFEST_NAME}`;
@@ -41,7 +44,7 @@ function fail(message,code='ARCANE_BUNDLE_INVALID',details){
 }
 
 async function emit(onEvent,event){
-    if(typeof onEvent==='function')await onEvent(event);
+    if(is.function(onEvent))await onEvent(event);
 }
 
 function compareText(left,right){
@@ -51,7 +54,7 @@ function compareText(left,right){
 }
 
 function isPlainObject(value){
-    return value!==null&&typeof value==='object'&&!Array.isArray(value);
+    return value!==null&&is.object(value)&&!is.array(value);
 }
 
 function copyJson(value){
@@ -63,7 +66,7 @@ function pathKey(value){
 }
 
 export function validateAppBundlePath(value,label='bundle path'){
-    if(typeof value!=='string'||!value||value!==value.normalize('NFC')
+    if(!is.string(value)||!value||value!==value.normalize('NFC')
         ||value.includes('\\')||value.startsWith('/')||/^[a-z]:/iu.test(value)
         ||/[\u0000-\u001f\u007f]/u.test(value)){
         fail(`Unsafe ${label}: ${String(value)}.`);
@@ -100,7 +103,7 @@ function writeTextField(header,offset,length,value,label){
 }
 
 function writeOctalField(header,offset,length,value,label,{trailingSpace=false}={}){
-    if(!Number.isSafeInteger(value)||value<0)fail(`${label} must be a nonnegative integer.`);
+    if(!is.safeInteger(value)||value<0)fail(`${label} must be a nonnegative integer.`);
     const terminal=trailingSpace?'\0 ':'\0';
     const digits=value.toString(8);
     const available=length-terminal.length;
@@ -184,8 +187,8 @@ function readJsonContent(content,label){
 function validateReleaseManifest(value){
     if(!isPlainObject(value)||value.schemaVersion!==1||value.kind!=='arcane-app-release'
         ||value.packagerVersion!==PACKAGER_VERSION||!isPlainObject(value.app)
-        ||typeof value.app.id!=='string'||typeof value.app.version!=='string'
-        ||!Array.isArray(value.files)){
+        ||!is.string(value.app.id)||!is.string(value.app.version)
+        ||!is.array(value.files)){
         fail(`${RELEASE_MANIFEST_NAME} is malformed.`);
     }
     parseSemver(value.app.version);
@@ -213,8 +216,8 @@ function bundleManifest(descriptor,release,files){
 }
 
 async function outputBoundary(outputPath,overwrite){
-    if(typeof outputPath!=='string'||!outputPath.trim())fail('outputPath is required.');
-    if(typeof overwrite!=='boolean')fail('overwrite must be a boolean.',ERROR_CODES.usage);
+    if(!is.string(outputPath)||!outputPath.trim())fail('outputPath is required.');
+    if(!is.boolean(overwrite))fail('overwrite must be a boolean.',ERROR_CODES.usage);
     const resolved=path.resolve(outputPath);
     await mkdir(path.dirname(resolved),{recursive:true});
     const parent=await realDirectory(path.dirname(resolved),'Bundle output directory');
@@ -301,7 +304,7 @@ function readOctalField(header,offset,length,label){
     const text=header.subarray(offset,offset+length).toString('ascii').replace(/[\0 ]+$/u,'');
     if(!/^[0-7]+$/u.test(text))fail(`${label} is not a valid ustar octal field.`);
     const value=Number.parseInt(text,8);
-    if(!Number.isSafeInteger(value))fail(`${label} exceeds the supported integer range.`);
+    if(!is.safeInteger(value))fail(`${label} exceeds the supported integer range.`);
     return value;
 }
 
@@ -344,7 +347,7 @@ function requiredEntry(entries,entryPath){
 
 export async function verifyAppReleaseBundle({bundlePath,signal,onEvent}={}){
     throwIfAborted(signal);
-    if(typeof bundlePath!=='string'||!bundlePath.trim())fail('bundlePath is required.');
+    if(!is.string(bundlePath)||!bundlePath.trim())fail('bundlePath is required.');
     const selected=path.resolve(bundlePath);
     const info=await lstat(selected);
     if(info.isSymbolicLink()||!info.isFile())fail('Bundle path must be a real file.');
@@ -360,7 +363,7 @@ export async function verifyAppReleaseBundle({bundlePath,signal,onEvent}={}){
         ||manifest.kind!==APP_BUNDLE_KIND||manifest.format!==APP_BUNDLE_FORMAT
         ||manifest.sdk?.name!==SDK_NAME||manifest.sdk?.version!==SDK_VERSION
         ||manifest.descriptor!==APP_BUNDLE_DESCRIPTOR_NAME
-        ||manifest.release!==APP_BUNDLE_RELEASE_PATH||!Array.isArray(manifest.files)){
+        ||manifest.release!==APP_BUNDLE_RELEASE_PATH||!is.array(manifest.files)){
         fail(`${APP_BUNDLE_MANIFEST_NAME} is malformed.`);
     }
     const descriptor=copyJson(validateAppDescriptor(readJsonContent(

package/src/runtime.mjs

@@ -1,8 +1,11 @@
+import Is from 'strong-type';
 import {lstat,readFile,readdir,realpath} from 'node:fs/promises';
 import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 import {SDK_VERSION} from './constants.mjs';
 
+const is = new Is(false);
+
 const sdkRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 
 function fail(message,code='ARCANE_RUNTIME_INVALID'){
@@ -25,7 +28,7 @@ function compareText(left,right){
 }
 
 function safeRelativePath(value){
-    if(typeof value!=='string'||!value||value.includes('\\')||value.includes('\0')
+    if(!is.string(value)||!value||value.includes('\\')||value.includes('\0')
         ||path.posix.isAbsolute(value)||path.posix.normalize(value)!==value
         ||value==='.'||value.startsWith('../')||value.includes('/../')){
         fail(`SDK runtime contains an unsafe relative path: ${String(value)}.`);

package/src/scaffold.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import {lstat,mkdir,readFile,readdir,writeFile} from 'node:fs/promises';
 import path from 'node:path';
 import {spawn} from 'node:child_process';
@@ -8,6 +9,8 @@ import {SDK_NAME,SDK_VERSION,workspaceTemplate} from './templates/workspace-temp
 import {inspectWorkspaceProfile,resolveSdkPackageDeclaration} from './workspace.mjs';
 import {parseSemver} from './packager/core.mjs';
 
+const is = new Is(false);
+
 const APP_ID_PATTERN=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
 const DISPLAY_CONTROL_PATTERN=/[\x00-\x1f\x7f]/;
 
@@ -25,14 +28,14 @@ function throwIfAborted(signal){
 }
 
 async function emit(onEvent,event){
-    if(typeof onEvent==='function')await onEvent(event);
+    if(is.function(onEvent))await onEvent(event);
 }
 
 function validateInputs(appId,displayName){
-    if(typeof appId!=='string'||!APP_ID_PATTERN.test(appId)){
+    if(!is.string(appId)||!APP_ID_PATTERN.test(appId)){
         fail(`Invalid app id: ${String(appId)}. Use lowercase words separated by hyphens.`,'ARCANE_USAGE');
     }
-    if(displayName!==undefined&&(typeof displayName!=='string'||displayName!==displayName.trim()
+    if(displayName!==undefined&&(!is.string(displayName)||displayName!==displayName.trim()
         ||!displayName||displayName.length>160||DISPLAY_CONTROL_PATTERN.test(displayName)
         ||/[<>]/.test(displayName))){
         fail('displayName must be plain trimmed text no longer than 160 characters.','ARCANE_USAGE');
@@ -162,7 +165,7 @@ async function readExistingPackage(workspaceRoot){
     let existing;
     try{existing=JSON.parse(source);}
     catch(error){fail(`Existing package.json is not valid JSON: ${error.message}.`);}
-    if(!existing||typeof existing!=='object'||Array.isArray(existing))fail('Existing package.json must be a JSON object.');
+    if(!existing||!is.object(existing)||is.array(existing))fail('Existing package.json must be a JSON object.');
     return {exists:true,packagePath,source,document:existing};
 }
 
@@ -315,8 +318,8 @@ export async function createWorkspace({
 }){
     validateInputs(appId,displayName);
     validateScaffoldTarget(target);
-    if(typeof targetPath!=='string'||!targetPath.trim())fail('targetPath is required.','ARCANE_USAGE');
-    if(typeof initializeGit!=='boolean')fail('initializeGit must be a boolean.','ARCANE_USAGE');
+    if(!is.string(targetPath)||!targetPath.trim())fail('targetPath is required.','ARCANE_USAGE');
+    if(!is.boolean(initializeGit))fail('initializeGit must be a boolean.','ARCANE_USAGE');
     throwIfAborted(signal);
     const workspaceRoot=path.resolve(targetPath);
     await emit(onEvent,{type:'scaffold.started',mode:'create',workspaceRoot,appId,target});

package/src/sdk-browser-runtime.mjs

@@ -1,8 +1,11 @@
+import Is from 'strong-type';
 import {lstat,readFile,readdir,realpath} from 'node:fs/promises';
 import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 import {SDK_VERSION} from './constants.mjs';
 
+const is = new Is(false);
+
 const packageRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const defaultRoot=path.join(packageRoot,'browser-runtime');
 
@@ -26,7 +29,7 @@ function compareText(left,right){
 }
 
 function safeRelativePath(value){
-    if(typeof value!=='string'||!value||value.includes('\\')||value.includes('\0')
+    if(!is.string(value)||!value||value.includes('\\')||value.includes('\0')
         ||path.posix.isAbsolute(value)||path.posix.normalize(value)!==value
         ||value==='.'||value.startsWith('../')||value.includes('/../')){
         fail(`SDK browser runtime contains an unsafe relative path: ${String(value)}.`);

package/src/source-server.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import {createReadStream} from 'node:fs';
 import {stat} from 'node:fs/promises';
 import http from 'node:http';
@@ -6,6 +7,8 @@ import path from 'node:path';
 import {pipeline} from 'node:stream/promises';
 import {fileURLToPath} from 'node:url';
 
+const is = new Is(false);
+
 const MIME_TYPES = new Map([
     ['.css', 'text/css; charset=utf-8'],
     ['.gif', 'image/gif'],
@@ -61,7 +64,7 @@ function normalizeHost(value) {
 
 function normalizePort(value) {
     const port = Number(value ?? 0);
-    if (!Number.isInteger(port) || port < 0 || port > 65535) {
+    if (!is.integer(port) || port < 0 || port > 65535) {
         fail('Source server port must be an integer from 0 through 65535.');
     }
     return port;
@@ -113,7 +116,7 @@ function normalizeRoot(value, fieldName) {
         }
         return path.resolve(fileURLToPath(value));
     }
-    if (typeof value !== 'string' || !value.trim()) {
+    if (!is.string(value) || !value.trim()) {
         fail(`${fieldName} must be a filesystem path or file URL.`);
     }
     return path.resolve(value);
@@ -123,7 +126,7 @@ function normalizeInclude(value, fieldName) {
     if (value === undefined) {
         return null;
     }
-    if (!Array.isArray(value)) {
+    if (!is.array(value)) {
         fail(`${fieldName} must be an array when supplied.`);
     }
     return value.map(function normalizeEntry(entry, index) {
@@ -132,7 +135,7 @@ function normalizeInclude(value, fieldName) {
 }
 
 function normalizeMount(value, index) {
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    if (!value || !is.object(value) || is.array(value)) {
         fail(`mounts[${index}] must be an object.`);
     }
     if (value.urlPath === undefined) {
@@ -149,7 +152,7 @@ function normalizeMount(value, index) {
 }
 
 function normalizeMounts(value) {
-    if (!Array.isArray(value) || value.length === 0) {
+    if (!is.array(value) || value.length === 0) {
         fail('Source server mounts must be a nonempty array.');
     }
     const mounts = value.map(normalizeMount);
@@ -280,7 +283,7 @@ function parseRange(value, size) {
     if (value === undefined) {
         return null;
     }
-    if (typeof value !== 'string' || size === 0) {
+    if (!is.string(value) || size === 0) {
         return false;
     }
     const match = /^bytes=(\d*)-(\d*)$/u.exec(value.trim());
@@ -291,7 +294,7 @@ function parseRange(value, size) {
     let end;
     if (!match[1]) {
         const suffixLength = Number(match[2]);
-        if (!Number.isSafeInteger(suffixLength) || suffixLength <= 0) {
+        if (!is.safeInteger(suffixLength) || suffixLength <= 0) {
             return false;
         }
         start = Math.max(0, size - suffixLength);
@@ -300,7 +303,7 @@ function parseRange(value, size) {
     else {
         start = Number(match[1]);
         end = match[2] ? Number(match[2]) : size - 1;
-        if (!Number.isSafeInteger(start) || !Number.isSafeInteger(end)
+        if (!is.safeInteger(start) || !is.safeInteger(end)
             || start < 0 || end < start || start >= size) {
             return false;
         }
@@ -344,7 +347,7 @@ async function streamFile(request, response, filePath, information, settings) {
 }
 
 async function publishEvent(onEvent, type, detail) {
-    if (typeof onEvent !== 'function') {
+    if (!is.function(onEvent)) {
         return;
     }
     try {
@@ -419,7 +422,7 @@ function createServer(settings) {
     if (settings.tls === undefined || settings.tls === null || settings.tls === false) {
         return http.createServer(listener);
     }
-    if (typeof settings.tls !== 'object' || Array.isArray(settings.tls)) {
+    if (!is.object(settings.tls) || is.array(settings.tls)) {
         fail('Source server tls must be a Node HTTPS options object when supplied.');
     }
     return https.createServer(settings.tls, listener);
@@ -480,11 +483,11 @@ function closeFunction(server) {
 }
 
 export async function startSourceExampleServer(options = {}) {
-    if (!options || typeof options !== 'object' || Array.isArray(options)) {
+    if (!options || !is.object(options) || is.array(options)) {
         fail('Source server options must be an object.');
     }
-    if (options.signal && (typeof options.signal.addEventListener !== 'function'
-        || typeof options.signal.removeEventListener !== 'function')) {
+    if (options.signal && (!is.function(options.signal.addEventListener)
+        || !is.function(options.signal.removeEventListener))) {
         fail('Source server signal must be an AbortSignal when supplied.');
     }
     throwIfAborted(options.signal);
@@ -544,7 +547,7 @@ export async function startSourceExampleServer(options = {}) {
     serverErrorListener = await listen(server, settings.host, settings.port,
         reportOperationalError);
     const address = server.address();
-    if (!address || typeof address === 'string') {
+    if (!address || is.string(address)) {
         await new Promise(function closeUnknownAddress(resolve) {
             server.close(resolve);
         });

package/src/targets/index.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import path from 'node:path';
 import {packageApp,verifyApp} from '../packager/core.mjs';
 import {startDevServer} from '../dev-server.mjs';
@@ -9,6 +10,8 @@ import {
     validateNativeBuilder
 } from '../native-plan.mjs';
 
+const is = new Is(false);
+
 const DEFINITIONS=[
     {
         id:'browser',displayName:'Browser/static',status:'available',
@@ -188,7 +191,7 @@ function selectedNativeRequest(targetId,targetRequest){
 }
 
 function selectedArtifact(artifact){
-    if(!artifact||typeof artifact!=='object'||Array.isArray(artifact)){
+    if(!artifact||!is.object(artifact)||is.array(artifact)){
         throw new ArcaneError(ERROR_CODES.usage,'A native artifact is required.');
     }
     return artifact;
@@ -202,7 +205,7 @@ export function createNativeTargetAdapter({targetId,nativeBuilder}={}){
     async function requireProviderTarget(){
         providerDescriptionPromise??=Promise.resolve(provider.describe()).then(description=>{
             if(!description||description.protocol!=='arcane-native-builder/1'
-                ||!Array.isArray(description.targets)||!description.targets.includes(targetId)){
+                ||!is.array(description.targets)||!description.targets.includes(targetId)){
                 throw new ArcaneError(
                     ERROR_CODES.targetUnavailable,
                     `The selected native provider does not support target ${targetId}.`

package/src/templates/workspace-template.mjs

@@ -1,3 +1,4 @@
+import Is from 'strong-type';
 import {
     ARCANE_PROTOCOL,
     CLI_EVENT_PROTOCOL,
@@ -6,6 +7,8 @@ import {
     TARGET_ADAPTER_PROTOCOL
 } from '../constants.mjs';
 
+const is = new Is(false);
+
 const NPM_PACKAGE_NAME_PATTERN=/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/u;
 const LOCAL_TARBALL_PATTERN=/^file:.+\.tgz$/iu;
 
@@ -34,9 +37,9 @@ export function createWorkspaceLockDocument({
     packageVersion=SDK_VERSION,
     packageSource=`node_modules/${dependencyName}`
 }={}){
-    if(packageName!==SDK_NAME||typeof packageVersion!=='string'
+    if(packageName!==SDK_NAME||!is.string(packageVersion)
         ||!/^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?$/u.test(packageVersion)
-        ||typeof dependencyName!=='string'||dependencyName.length>214
+        ||!is.string(dependencyName)||dependencyName.length>214
         ||!NPM_PACKAGE_NAME_PATTERN.test(dependencyName)
         ||packageSource!==`node_modules/${dependencyName}`){
         throw new Error('Invalid workspace SDK lock authority.');
@@ -68,12 +71,12 @@ export function workspaceTemplate({
 }){
     const canonicalSpecifier=sdkDependencyName===SDK_NAME
         &&(sdkDependencySpecifier===SDK_VERSION
-            ||(typeof sdkDependencySpecifier==='string'
+            ||(is.string(sdkDependencySpecifier)
                 &&LOCAL_TARBALL_PATTERN.test(sdkDependencySpecifier)
                 &&!/[\x00-\x1f\x7f]/.test(sdkDependencySpecifier)));
     const aliasSpecifier=sdkDependencyName!==SDK_NAME
         &&sdkDependencySpecifier===`npm:${SDK_NAME}@${SDK_VERSION}`;
-    if(typeof sdkDependencyName!=='string'||sdkDependencyName.length>214
+    if(!is.string(sdkDependencyName)||sdkDependencyName.length>214
         ||!NPM_PACKAGE_NAME_PATTERN.test(sdkDependencyName)
         ||sdkPackageSource!==`node_modules/${sdkDependencyName}`
         ||(!canonicalSpecifier&&!aliasSpecifier)){
@@ -359,12 +362,16 @@ ${bootstrapMarkup}</head>
         ?'arcane/ThemeBootstrap':'../../../arcane/modules/ThemeBootstrap.js';
     const appDataSpecifier=namedImports
         ?'arcane/AppDataScope':'../../../arcane/modules/AppDataScope.js';
-    files.set(`apps/${appId}/modules/App.js`,`import arcaneThemeReady from '${themeSpecifier}';
+    const strongTypeSpecifier=namedImports
+        ?'strong-type':'../../../arcane/dependencies/strong-type/index.js';
+    files.set(`apps/${appId}/modules/App.js`,`import Is from '${strongTypeSpecifier}';
+import arcaneThemeReady from '${themeSpecifier}';
 import {
     resolveApplicationId,
     resolveApplicationLocalStorageKey
 } from '${appDataSpecifier}';
 
+const is = new Is(false);
 const appName=${JSON.stringify(name)};
 const action=document.querySelector('#app-action');
 const status=document.querySelector('#app-status');
@@ -377,7 +384,7 @@ const countKey=resolveApplicationLocalStorageKey('hello-count',{applicationId:ap
 function loadHelloCount(){
     try{
         const value=Number(globalThis.localStorage?.getItem(countKey)??0);
-        return Number.isSafeInteger(value)&&value>=0?value:0;
+        return is.safeInteger(value)&&value>=0?value:0;
     }catch{
         return 0;
     }

package/src/testing-loader.mjs

@@ -1,7 +1,10 @@
+import Is from 'strong-type';
 import {lstatSync,realpathSync} from 'node:fs';
 import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 
+const is = new Is(false);
+
 const TESTING_SPECIFIER='arcane-os/testing';
 const TESTING_URL=new URL('./testing.mjs',import.meta.url).href;
 const RUNTIME_STRONG_TYPE_SPECIFIER='../../node_modules/strong-type/index.js';
@@ -25,7 +28,7 @@ function urlLikeSpecifier(specifier){
 }
 
 function safeManagedTarget(target){
-    return typeof target==='string'
+    return is.string(target)
         &&target.startsWith('./')
         &&target.length>2
         &&!/[\\%?#\u0000-\u001f\u007f]/u.test(target)
@@ -115,14 +118,14 @@ export function initialize({managedImportMap}={}){
     const imports=managedImportMap.imports;
     if(managedImportMap.protocol!==MANAGED_IMPORT_MAP_PROTOCOL
         ||!MANAGED_IMPORT_MAP_BOUNDARIES.has(managedImportMap.boundary)
-        ||imports===null||typeof imports!=='object'||Array.isArray(imports)){
+        ||imports===null||!is.object(imports)||is.array(imports)){
         loaderFailure('Managed test import-map loader data is malformed.');
     }
     const boundary=physicalDirectory(managedImportMap.baseURL);
     const exact=new Map();
     const urls=new Map();
     for(const [specifier,target] of Object.entries(imports)){
-        if(typeof specifier!=='string'||specifier===''||!safeManagedTarget(target)){
+        if(!is.string(specifier)||specifier===''||!safeManagedTarget(target)){
             loaderFailure(`Managed test import-map entry is invalid: ${String(specifier)}.`);
         }
         const targetURL=physicalManagedTarget(
@@ -149,7 +152,7 @@ export function initialize({managedImportMap}={}){
 function managedResolution(specifier,context){
     if(managedImports===null)return null;
     if(managedImports.has(specifier))return managedImports.get(specifier);
-    if(urlLikeSpecifier(specifier)&&typeof context.parentURL==='string'){
+    if(urlLikeSpecifier(specifier)&&is.string(context.parentURL)){
         let requested;
         try{requested=new URL(specifier,context.parentURL).href;}
         catch{requested=null;}