poe-code 3.0.306 → 3.0.308

package/dist/index.js

@@ -74873,10 +74873,19 @@ var init_path_safety3 = __esm({
 // packages/process-launcher/src/process-id.ts
 import path104 from "node:path";
 function assertValidManagedProcessId(id) {
-  if (id.length === 0 || id === "." || id === ".." || path104.basename(id) !== id) {
+  if (id.length === 0 || id !== id.trim() || id === "." || id === ".." || path104.basename(id) !== id || hasControlCharacter(id)) {
     throw new Error(`Invalid managed process id: ${id}`);
   }
 }
+function hasControlCharacter(value) {
+  for (const char of value) {
+    const code = char.charCodeAt(0);
+    if (code <= 31 || code === 127) {
+      return true;
+    }
+  }
+  return false;
+}
 var init_process_id = __esm({
   "packages/process-launcher/src/process-id.ts"() {
     "use strict";
@@ -74958,10 +74967,7 @@ function createStateStore(stateDir, fs28 = nodeFs7) {
       await assertPathHasNoSymbolicLinks3(fs28, statePath);
       const content = await fs28.readFile(statePath, "utf8");
       const parsed = JSON.parse(content);
-      if (!isProcessState(parsed, id)) {
-        throw new Error(`Invalid process state document: ${id}`);
-      }
-      return parsed;
+      return assertValidProcessStateDocument(parsed, id);
     } catch (error3) {
       if (isNotFoundError7(error3)) {
         return null;
@@ -75045,12 +75051,24 @@ function createStateStore(stateDir, fs28 = nodeFs7) {
   }
   return { read, write: write2, list, remove: remove2 };
 }
+function assertValidProcessStateDocument(value, id) {
+  if (!isProcessState(value, id)) {
+    throw new Error(`Invalid process state document: ${id}`);
+  }
+  return value;
+}
 function isProcessState(value, id) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return false;
   }
   const state = value;
-  return state.id === id && (state.pid === null || typeof state.pid === "number") && (state.status === "running" || state.status === "stopped" || state.status === "crashed" || state.status === "restarting") && (state.runtime === "host" || state.runtime === "docker") && typeof state.restartCount === "number" && (state.lastExitCode === null || typeof state.lastExitCode === "number") && (state.lastStartedAt === null || typeof state.lastStartedAt === "string") && (state.lastStoppedAt === null || typeof state.lastStoppedAt === "string") && typeof state.command === "string" && Array.isArray(state.args) && state.args.every((argument) => typeof argument === "string");
+  return state.id === id && (state.pid === null || typeof state.pid === "number") && (state.status === "running" || state.status === "stopped" || state.status === "crashed" || state.status === "restarting") && (state.runtime === "host" || state.runtime === "docker") && isPositiveSafeIntegerOrNull(state.pid) && isNonNegativeSafeInteger(state.restartCount) && (state.lastExitCode === null || isNonNegativeSafeInteger(state.lastExitCode)) && (state.lastStartedAt === null || typeof state.lastStartedAt === "string") && (state.lastStoppedAt === null || typeof state.lastStoppedAt === "string") && typeof state.command === "string" && Array.isArray(state.args) && state.args.every((argument) => typeof argument === "string");
+}
+function isPositiveSafeIntegerOrNull(value) {
+  return value === null || typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+function isNonNegativeSafeInteger(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
 var init_state_store = __esm({
   "packages/process-launcher/src/state/state-store.ts"() {
@@ -75277,8 +75295,10 @@ import net from "node:net";
 async function waitForReady(check, options) {
   assertValidTimeout(options.timeoutMs, "readiness timeout");
   if (check.kind === "log-pattern") {
+    assertValidLogPattern(check.pattern);
     return waitForLogPattern(check.pattern, options);
   }
+  assertValidTcpPort(check.port);
   return waitForTcp(check, options);
 }
 function waitForLogPattern(pattern, options) {
@@ -75399,6 +75419,16 @@ function assertValidTimeout(value, description) {
     throw new Error(`Invalid ${description}: ${value}`);
   }
 }
+function assertValidLogPattern(value) {
+  if (value.trim().length === 0) {
+    throw new Error("Invalid log pattern readiness check: pattern must not be blank.");
+  }
+}
+function assertValidTcpPort(value) {
+  if (!Number.isSafeInteger(value) || value <= 0 || value > 65535) {
+    throw new Error(`Invalid TCP readiness port: ${value}`);
+  }
+}
 var init_health_check = __esm({
   "packages/process-launcher/src/health/health-check.ts"() {
     "use strict";
@@ -76019,6 +76049,7 @@ import path108 from "node:path";
 import { TextDecoder as TextDecoder2 } from "node:util";
 async function startManagedProcess(options) {
   assertOptionalFiniteDuration(options.startupTimeoutMs, "startup timeout");
+  assertOptionalFiniteDuration(options.pollIntervalMs, "poll interval");
   const fs28 = options.fs ?? defaultFs3();
   const spec10 = normalizeSpec(options.spec);
   const existing = await readManagedProcess({
@@ -76060,6 +76091,8 @@ async function startManagedProcess(options) {
   }
 }
 async function stopManagedProcess(options) {
+  assertOptionalFiniteDuration(options.stopTimeoutMs, "stop timeout");
+  assertOptionalFiniteDuration(options.pollIntervalMs, "poll interval");
   const fs28 = options.fs ?? defaultFs3();
   const record = await readManagedProcess({
     baseDir: options.baseDir,
@@ -76320,6 +76353,7 @@ async function runManagedProcess(options) {
   if (options.signal?.aborted) {
     return;
   }
+  assertOptionalFiniteDuration(options.pollIntervalMs, "poll interval");
   const fs28 = options.fs ?? defaultFs3();
   await assertProcessDirectorySafe(fs28, options.baseDir, options.id);
   await assertPathNotSymbolicLink(fs28, resolveLogDir2(options.baseDir, options.id));
@@ -76527,13 +76561,71 @@ async function readSpec(fs28, baseDir, id) {
   if (!isRecord31(spec10) || typeof spec10.id !== "string" || spec10.id !== id) {
     throw new Error(`Invalid managed process specification for "${id}".`);
   }
-  return spec10;
+  return assertValidProcessSpec(spec10, id);
+}
+function assertValidProcessSpec(value, id) {
+  if (value.id !== id || !isNonEmptyString4(value.command) || !isOptionalStringArray(value.args) || !isOptionalString(value.cwd) || !isOptionalStringRecord(value.env) || !isRestartPolicy(value.restart) || !isOptionalNonNegativeSafeInteger(value.maxRestarts) || !isOptionalFiniteDurationValue(value.backoffMs) || !isOptionalFiniteDurationValue(value.maxBackoffMs) || !isOptionalPositiveSafeInteger(value.logRetainCount) || !isOptionalReadyCheck(value.readyCheck) || !isOptionalRecord(value.docker)) {
+    throw new Error(`Invalid managed process specification for "${id}".`);
+  }
+  return value;
+}
+function isNonEmptyString4(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function isOptionalString(value) {
+  return value === void 0 || typeof value === "string";
+}
+function isOptionalStringArray(value) {
+  return value === void 0 || Array.isArray(value) && value.every((entry) => typeof entry === "string");
+}
+function isOptionalStringRecord(value) {
+  if (value === void 0) {
+    return true;
+  }
+  if (!isPlainRecord4(value)) {
+    return false;
+  }
+  return Object.values(value).every((entry) => typeof entry === "string");
+}
+function isRestartPolicy(value) {
+  return value === "never" || value === "on-failure" || value === "always";
+}
+function isOptionalNonNegativeSafeInteger(value) {
+  return value === void 0 || typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+function isOptionalPositiveSafeInteger(value) {
+  return value === void 0 || typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+function isOptionalFiniteDurationValue(value) {
+  return value === void 0 || typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+function isOptionalReadyCheck(value) {
+  if (value === void 0) {
+    return true;
+  }
+  if (!isPlainRecord4(value)) {
+    return false;
+  }
+  if (value.kind === "log-pattern") {
+    return isNonEmptyString4(value.pattern);
+  }
+  if (value.kind === "tcp") {
+    return typeof value.port === "number" && Number.isSafeInteger(value.port) && value.port > 0 && value.port <= 65535 && isOptionalString(value.host) && isOptionalFiniteDurationValue(value.timeoutMs);
+  }
+  return false;
+}
+function isOptionalRecord(value) {
+  return value === void 0 || isPlainRecord4(value);
+}
+function isPlainRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function writeSpec(fs28, baseDir, spec10) {
   await writeJsonFile(fs28, resolveSpecPath(baseDir, spec10.id), spec10);
 }
 async function readState(fs28, baseDir, id) {
-  return await readJsonFile(fs28, resolveStatePath(baseDir, id));
+  const state = await readJsonFile(fs28, resolveStatePath(baseDir, id));
+  return state === null ? null : assertValidProcessStateDocument(state, id);
 }
 async function writeState(fs28, baseDir, state) {
   await writeJsonFile(fs28, resolveStatePath(baseDir, state.id), state);
@@ -90312,7 +90404,7 @@ function isHttpErrorLike(error3) {
 function hasTypedOptionalField(value, field, type) {
   return !hasOwnProperty11(value, field) || typeof value[field] === type;
 }
-function isNonEmptyString4(value) {
+function isNonEmptyString5(value) {
   return typeof value === "string" && value.trim().length > 0;
 }
 function isProblemDetailsLike(body) {
@@ -90365,7 +90457,7 @@ function hasOwnProperty11(value, name) {
   return Object.prototype.hasOwnProperty.call(value, name);
 }
 function hasOwnNonEmptyString(value, name) {
-  return hasOwnProperty11(value, name) && isNonEmptyString4(value[name]);
+  return hasOwnProperty11(value, name) && isNonEmptyString5(value[name]);
 }
 function styleHttpErrorLine(value, style) {
   return process.stdout.isTTY !== true ? value : style(value);
@@ -136215,7 +136307,7 @@ function resolveStringValues2(value) {
       resolved[key2] = entry.map(
         (item) => typeof item === "string" ? resolveStringValue2(item) : item
       );
-    } else if (isPlainRecord4(entry)) {
+    } else if (isPlainRecord5(entry)) {
       resolved[key2] = resolveStringValues2(entry);
     } else {
       resolved[key2] = entry;
@@ -136234,7 +136326,7 @@ function resolveWorkflowRelativePath(value, workflowPath) {
   return path173.isAbsolute(value) ? value : path173.resolve(path173.dirname(workflowPath), value);
 }
 function asRecord6(value) {
-  return isPlainRecord4(value) ? value : void 0;
+  return isPlainRecord5(value) ? value : void 0;
 }
 function hasOwnEntry4(record, key2) {
   return Object.prototype.hasOwnProperty.call(record, key2);
@@ -136242,7 +136334,7 @@ function hasOwnEntry4(record, key2) {
 function getOwnEntry37(record, key2) {
   return hasOwnEntry4(record, key2) ? record[key2] : void 0;
 }
-function isPlainRecord4(value) {
+function isPlainRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isFileNotFoundError2(error3) {
@@ -137096,7 +137188,7 @@ var init_package2 = __esm({
   "package.json"() {
     package_default2 = {
       name: "poe-code",
-      version: "3.0.306",
+      version: "3.0.308",
       description: "CLI tool to configure Poe API for developer workflows.",
       type: "module",
       main: "./dist/index.js",