bmalph 1.0.0 → 2.2.1

package/dist/utils/validate.js

@@ -1,9 +1,46 @@
+import { MAX_PROJECT_NAME_LENGTH } from "./constants.js";
 const VALID_STATUSES = ["planning", "implementing", "completed"];
+// Invalid filesystem characters (Windows + POSIX)
+const INVALID_FS_CHARS = /[<>:"/\\|?*]/;
+// Windows reserved names (case-insensitive, exact match only)
+const WINDOWS_RESERVED_NAMES = new Set([
+    "con",
+    "prn",
+    "aux",
+    "nul",
+    "com1",
+    "com2",
+    "com3",
+    "com4",
+    "com5",
+    "com6",
+    "com7",
+    "com8",
+    "com9",
+    "lpt1",
+    "lpt2",
+    "lpt3",
+    "lpt4",
+    "lpt5",
+    "lpt6",
+    "lpt7",
+    "lpt8",
+    "lpt9",
+]);
 function assertObject(data, label) {
     if (data === null || data === undefined || typeof data !== "object" || Array.isArray(data)) {
         throw new Error(`${label}: expected an object`);
     }
 }
+function validateUpstreamVersions(data) {
+    assertObject(data, "upstreamVersions");
+    if (typeof data.bmadCommit !== "string") {
+        throw new Error("upstreamVersions.bmadCommit must be a string");
+    }
+    return {
+        bmadCommit: data.bmadCommit,
+    };
+}
 export function validateConfig(data) {
     assertObject(data, "config");
     if (typeof data.name !== "string") {
@@ -13,10 +50,14 @@ export function validateConfig(data) {
         throw new Error("config.createdAt must be a string");
     }
     const description = typeof data.description === "string" ? data.description : "";
+    const upstreamVersions = data.upstreamVersions !== undefined
+        ? validateUpstreamVersions(data.upstreamVersions)
+        : undefined;
     return {
         name: data.name,
         description,
         createdAt: data.createdAt,
+        upstreamVersions,
     };
 }
 export function validateState(data) {
@@ -24,7 +65,8 @@ export function validateState(data) {
     if (typeof data.currentPhase !== "number") {
         throw new Error("state.currentPhase must be a number");
     }
-    if (typeof data.status !== "string" || !VALID_STATUSES.includes(data.status)) {
+    if (typeof data.status !== "string" ||
+        !VALID_STATUSES.includes(data.status)) {
         throw new Error(`state.status must be one of: ${VALID_STATUSES.join(", ")}`);
     }
     if (typeof data.startedAt !== "string") {
@@ -40,3 +82,135 @@ export function validateState(data) {
         lastUpdated: data.lastUpdated,
     };
 }
+// Circuit breaker state (from .ralph/.circuit_breaker_state)
+const CIRCUIT_BREAKER_STATES = ["CLOSED", "HALF_OPEN", "OPEN"];
+export function validateCircuitBreakerState(data) {
+    assertObject(data, "circuitBreakerState");
+    if (typeof data.state !== "string" ||
+        !CIRCUIT_BREAKER_STATES.includes(data.state)) {
+        throw new Error(`circuitBreakerState.state must be one of: ${CIRCUIT_BREAKER_STATES.join(", ")}`);
+    }
+    if (typeof data.consecutive_no_progress !== "number") {
+        throw new Error("circuitBreakerState.consecutive_no_progress must be a number");
+    }
+    const reason = typeof data.reason === "string" ? data.reason : undefined;
+    return {
+        state: data.state,
+        consecutive_no_progress: data.consecutive_no_progress,
+        reason,
+    };
+}
+export function validateRalphSession(data) {
+    assertObject(data, "ralphSession");
+    if (typeof data.session_id !== "string") {
+        throw new Error("ralphSession.session_id must be a string");
+    }
+    if (typeof data.created_at !== "string") {
+        throw new Error("ralphSession.created_at must be a string");
+    }
+    const last_used = typeof data.last_used === "string" ? data.last_used : undefined;
+    return {
+        session_id: data.session_id,
+        created_at: data.created_at,
+        last_used,
+    };
+}
+export function validateRalphApiStatus(data) {
+    assertObject(data, "ralphApiStatus");
+    if (typeof data.calls_made_this_hour !== "number") {
+        throw new Error("ralphApiStatus.calls_made_this_hour must be a number");
+    }
+    if (typeof data.max_calls_per_hour !== "number") {
+        throw new Error("ralphApiStatus.max_calls_per_hour must be a number");
+    }
+    const status = typeof data.status === "string" ? data.status : undefined;
+    return {
+        calls_made_this_hour: data.calls_made_this_hour,
+        max_calls_per_hour: data.max_calls_per_hour,
+        status,
+    };
+}
+// Ralph loop status (from state.ts - loop progress tracking)
+const RALPH_LOOP_STATUSES = ["running", "blocked", "completed", "not_started"];
+export function validateRalphLoopStatus(data) {
+    assertObject(data, "ralphLoopStatus");
+    if (typeof data.loopCount !== "number") {
+        throw new Error("ralphLoopStatus.loopCount must be a number");
+    }
+    if (typeof data.status !== "string" ||
+        !RALPH_LOOP_STATUSES.includes(data.status)) {
+        throw new Error(`ralphLoopStatus.status must be one of: ${RALPH_LOOP_STATUSES.join(", ")}`);
+    }
+    if (typeof data.tasksCompleted !== "number") {
+        throw new Error("ralphLoopStatus.tasksCompleted must be a number");
+    }
+    if (typeof data.tasksTotal !== "number") {
+        throw new Error("ralphLoopStatus.tasksTotal must be a number");
+    }
+    return {
+        loopCount: data.loopCount,
+        status: data.status,
+        tasksCompleted: data.tasksCompleted,
+        tasksTotal: data.tasksTotal,
+    };
+}
+const BASH_STATUS_MAP = {
+    running: "running",
+    halted: "blocked",
+    stopped: "blocked",
+    completed: "completed",
+    success: "completed",
+};
+export function normalizeRalphStatus(data) {
+    assertObject(data, "normalizeRalphStatus");
+    const loopCount = typeof data.loop_count === "number" ? data.loop_count : 0;
+    const rawStatus = typeof data.status === "string" ? data.status : undefined;
+    const status = (rawStatus !== undefined ? BASH_STATUS_MAP[rawStatus] : undefined) ?? "running";
+    return {
+        loopCount,
+        status,
+        tasksCompleted: 0,
+        tasksTotal: 0,
+    };
+}
+/**
+ * Validates a project name for filesystem safety.
+ * Checks for:
+ * - Empty names
+ * - Max length (100 characters)
+ * - Invalid filesystem characters (< > : " / \ | ? *)
+ * - Windows reserved names (CON, PRN, AUX, NUL, COM1-9, LPT1-9)
+ * - Leading/trailing whitespace or dots
+ *
+ * @param name - The project name to validate
+ * @returns The validated name (unchanged if valid)
+ * @throws Error if the name is invalid
+ */
+export function validateProjectName(name) {
+    const trimmed = name.trim();
+    // Check for empty name
+    if (trimmed.length === 0) {
+        throw new Error("Project name cannot be empty");
+    }
+    // Check for leading/trailing whitespace (original had whitespace that was trimmed)
+    if (name !== trimmed) {
+        throw new Error("Project name cannot start or end with whitespace");
+    }
+    // Check max length
+    if (name.length > MAX_PROJECT_NAME_LENGTH) {
+        throw new Error(`Project name cannot exceed ${MAX_PROJECT_NAME_LENGTH} characters`);
+    }
+    // Check for invalid filesystem characters
+    if (INVALID_FS_CHARS.test(name)) {
+        throw new Error('Project name contains invalid character (< > : " / \\ | ? * are not allowed)');
+    }
+    // Check for Windows reserved names (case-insensitive, exact match)
+    if (WINDOWS_RESERVED_NAMES.has(name.toLowerCase())) {
+        throw new Error(`Project name "${name}" is a reserved Windows filename`);
+    }
+    // Check for leading/trailing dots
+    if (name.startsWith(".") || name.endsWith(".")) {
+        throw new Error("Project name cannot start or end with a dot");
+    }
+    return name;
+}

package/package.json

@@ -1,59 +1,75 @@
-{
-  "name": "bmalph",
-  "version": "1.0.0",
-  "description": "Unified AI Development Framework - BMAD phases with Ralph execution loop for Claude Code",
-  "type": "module",
-  "bin": {
-    "bmalph": "./bin/bmalph.js"
-  },
-  "scripts": {
-    "prepare": "tsc",
-    "build": "tsc",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "lint": "eslint src tests",
-    "format": "prettier --write .",
-    "prepublishOnly": "npm run lint && npm run build && npm test"
-  },
-  "keywords": [
-    "claude",
-    "ai",
-    "development",
-    "framework",
-    "agents"
-  ],
-  "author": "Lars Cowe",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/LarsCowe/bmalph.git"
-  },
-  "homepage": "https://github.com/LarsCowe/bmalph#readme",
-  "bugs": {
-    "url": "https://github.com/LarsCowe/bmalph/issues"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "files": [
-    "bin/",
-    "dist/",
-    "bmad/",
-    "ralph/",
-    "slash-commands/"
-  ],
-  "dependencies": {
-    "chalk": "^5.6.2",
-    "commander": "^14.0.2",
-    "inquirer": "^13.2.1"
-  },
-  "devDependencies": {
-    "@eslint/js": "^9.39.2",
-    "@types/node": "^25.0.10",
-    "eslint": "^9.39.2",
-    "prettier": "^3.8.1",
-    "typescript": "^5.9.3",
-    "typescript-eslint": "^8.53.1",
-    "vitest": "^4.0.18"
-  }
-}
+{
+  "name": "bmalph",
+  "version": "2.2.1",
+  "description": "Unified AI Development Framework - BMAD phases with Ralph execution loop for Claude Code",
+  "type": "module",
+  "bin": {
+    "bmalph": "./bin/bmalph.js"
+  },
+  "scripts": {
+    "prepare": "tsc",
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:e2e": "vitest run --config vitest.config.e2e.ts",
+    "test:coverage": "vitest run --coverage",
+    "test:all": "npm run test && npm run test:e2e",
+    "check": "npm run lint && npm run build && npm test",
+    "dev": "tsc --watch",
+    "lint": "eslint src tests",
+    "lint:fix": "eslint src tests --fix",
+    "format": "prettier --write .",
+    "fmt:check": "prettier --check .",
+    "fmt:fix": "prettier --write .",
+    "type-check": "tsc --noEmit",
+    "ci": "npm run type-check && npm run lint && npm run fmt:check && npm run build && npm run test:all",
+    "prepublishOnly": "npm run lint && npm run build && npm test",
+    "update-bundled": "bash scripts/update-bundled.sh"
+  },
+  "keywords": [
+    "claude",
+    "ai",
+    "development",
+    "framework",
+    "agents"
+  ],
+  "author": "Lars Cowe",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/LarsCowe/bmalph.git"
+  },
+  "homepage": "https://github.com/LarsCowe/bmalph#readme",
+  "bugs": {
+    "url": "https://github.com/LarsCowe/bmalph/issues"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "exports": {
+    ".": "./dist/cli.js"
+  },
+  "files": [
+    "bin/",
+    "dist/",
+    "bmad/",
+    "ralph/",
+    "slash-commands/",
+    "bundled-versions.json"
+  ],
+  "dependencies": {
+    "chalk": "^5.6.2",
+    "commander": "^14.0.2",
+    "inquirer": "^13.2.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^20.0.0",
+    "@vitest/coverage-v8": "^4.0.18",
+    "eslint": "^10.0.1",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.56.0",
+    "vitest": "^4.0.18"
+  }
+}