specguard 0.1.2 → 0.1.3

package/dist/utils/cmd_parser.js

@@ -44,11 +44,13 @@ export function parseCommand(command) {
     if (current.length > 0) {
         args.push(current);
     }
-    if (args.length === 0) {
-        return { cmd: '', args: [] };
+    // Requirement: Ensure no empty string arguments
+    const filteredArgs = args.filter(arg => arg.length > 0);
+    if (filteredArgs.length === 0) {
+        throw new Error(`Invalid tool command: "${command}"`);
     }
     return {
-        cmd: args[0],
-        args: args.slice(1)
+        cmd: filteredArgs[0],
+        args: filteredArgs.slice(1)
     };
 }

package/dist/validators/tools.js

@@ -132,6 +132,15 @@ export async function runToolChecks(spec, repoRoot) {
                     }
                 }
             }
+            // B) Tool runner safety
+            // 4) Assertions and filtering
+            if (!finalCmd) {
+                throw new Error('Command cannot be empty');
+            }
+            if (!Array.isArray(finalArgs)) {
+                throw new Error('Arguments must be an array');
+            }
+            finalArgs = finalArgs.filter(Boolean);
             const res = await runSpawn(finalCmd, finalArgs, cwd, env, tool.timeout_seconds, shell);
             const duration = Date.now() - startTime;
             // Redact output

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "specguard",
-    "version": "0.1.2",
+    "version": "0.1.3",
     "description": "Production-grade SpecGuard validator",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
@@ -34,4 +34,4 @@
         "@types/node": "^20.11.0",
         "vitest": "^4.0.18"
     }
-}
+}