Update changelog, bump version: 3.10.0

Author: burner1024

binary/CHANGELOG.md

@@ -2,17 +2,23 @@
 
 Notable changes to `@bgforge/binary` (the library and the `fgbin` CLI). Binary-editor UI changes ship in the extension changelog, not here.
 
-## Unreleased
+## 0.3.0
 
 ### Changed
 
 - Oversized JSON snapshots (crafted to inflate array lengths) are now rejected before allocation.
 - Registering two parsers or format adapters under the same id now throws instead of silently overwriting.
+- Proto-dir `.pro` reads (MAP subtype resolution) are now capped at the PRO size budget.
+
+### Removed
+
+- `findEditableField` is no longer exported; there is no replacement.
 
 ### Fixed
 
 - Trailing-NUL trimming no longer leaves a literal NUL byte at the end of a trimmed value.
 - CRE: an empty section whose offset a shrinking edit pushed past end-of-file is now recomputed correctly on save.
+- The CLI's JSON-snapshot input-size cap can no longer be raced past by swapping the file mid-read.
 
 ## 0.2.0
 

binary/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bgforge/binary",
-    "version": "0.2.0",
+    "version": "0.3.0",
     "description": "Library and CLI for parsing and serialising Fallout PRO and MAP binary files (round-trip to canonical JSON snapshots).",
     "keywords": [
         "binary",

binary/src/pro-resolver-loader.ts

@@ -86,14 +86,23 @@ export function loadProDirResolver(protoBaseDir: string): ProResolverResult {
             try {
                 // Same stat-before-allocate budget the CLI parse path applies (max-file-sizes.ts):
                 // the parser's own 1 KB limit rejects oversized DATA, but only after the whole file
-                // has already been read into memory - cap the read itself.
+                // has already been read into memory - cap the read itself. fstat and read go through
+                // ONE descriptor so the size check and the read see the same inode; a statSync ->
+                // readFileSync pair on the path leaves a TOCTOU window (CodeQL js/file-system-race)
+                // where a file swapped after the check could bypass the cap.
                 const proCap = MAX_FILE_SIZES.pro;
-                const size = fs.statSync(filePath).size;
-                if (proCap !== undefined && size > proCap) {
-                    errors.push(`Skipped ${filePath}: ${size} bytes exceeds the ${proCap}-byte PRO cap`);
-                    continue;
+                let data: Buffer;
+                const fd = fs.openSync(filePath, "r");
+                try {
+                    const size = fs.fstatSync(fd).size;
+                    if (proCap !== undefined && size > proCap) {
+                        errors.push(`Skipped ${filePath}: ${size} bytes exceeds the ${proCap}-byte PRO cap`);
+                        continue;
+                    }
+                    data = fs.readFileSync(fd);
+                } finally {
+                    fs.closeSync(fd);
                 }
-                const data = fs.readFileSync(filePath);
                 const parsed = proParser.parse(new Uint8Array(data));
                 if (!parsed.document) {
                     errors.push(`Failed to parse ${filePath}: no canonical document`);

docs/changelog.md

@@ -1,33 +1,41 @@
 # Changelog
 
-## Unreleased
+## 3.10.0
 
 ### Dialog editor
 
 - New interactive Dialog Editor for D, TD, SSL, TSSL dialogue.
-- The Dialog Editor now follows the active VS Code color theme, including light themes.
+
+### Diagnostics
+
+- New `bgforge.diagnostics` setting (on by default): instant syntax-error reporting for all parsed languages (Fallout SSL and MSG, WeiDU BAF, D, TP2, TRA), alongside compiler diagnostics.
+
+### Binary editor
+
+- Read-only fields are now enforced on save, not only disabled in the interface, and show a tooltip explaining why.
+- Fixed: a size-shrinking CRE edit could corrupt an empty section's offset, producing a file that failed to reopen.
 
 ### Translations
 
 - `.tra`/`.msg` files are now read as UTF-8 first, falling back to windows-1252 for older files that predate UTF-8 - accented and other special characters in `@N` text now display correctly instead of being mangled.
-- Saving `@N` edits now preserves a file's original encoding: a windows-1252 file round-trips its untouched text byte-for-byte instead of being silently rewritten as UTF-8. An edit that adds a character the file's encoding can't represent is refused with an error instead of corrupting the file.
-- Saving `@N` edits is now crash-safe: the file is written to a temporary file and swapped in, so an interruption mid-save can no longer leave a `.tra`/`.msg` truncated.
 - Editing an open `.tra`/`.msg` file now refreshes the `@N` inlay hint previews in other open files immediately, instead of waiting for their own next edit.
+- `.msg` comments must now be marked (`#`, `//`, or `/* */`); unmarked trailing text is a syntax error.
 
 ### Requirements
 
 - Minimum supported VS Code is now 1.91 (was 1.73).
 
 ### WeiDU
 
-- Added parsing and highlighting for more WeiDU constructs: TP2 `REQUIRE_FILE` / `FORBID_FILE` / `FORBID_PREDICATE` component flags, `EXTEND_TOP` / `EXTEND_BOTTOM ... USING`, and `REMOVE_CRE_ITEMS`; D `CHAIN3` and `%var%`-interpolated names.
+- Added parsing and highlighting for more WeiDU constructs: TP2 `REQUIRE_FILE` / `FORBID_FILE` / `FORBID_PREDICATE` component flags, `EXTEND_TOP` / `EXTEND_BOTTOM ... USING`, and `REMOVE_CRE_ITEMS`; D `CHAIN3`, `%var%`-interpolated names, hyphenated state labels, `ALTER_TRANS` bareword `ACTION`, and trailing `IF`/`UNLESS` after `ADD_TRANS_ACTION`.
 - Fixed: in TP2 hover tooltips, `buffString` and `ascString` parameter names were not highlighted because of an unreachable pattern branch.
 - Fixed: dropped several phantom TP2 keywords the grammar never matched, and corrected highlighting of the real ones.
 - Fixed: the WeiDU D formatter was not idempotent when a `~string~` immediately followed a keyword.
 
 ### Transpilers
 
-- Fixed: transpiling a multi-file TSSL/TBAF/TD source (one that uses `import`) relied on the system `PATH` `node`, so it broke on editors that ship their own runtime instead of a `node` binary AND in environments with a broken `node` shim (stale nvm/mise/asdf). The bundler now always uses the editor's own runtime, the same way the built-in SSL compiler does, so a missing or broken `PATH` `node` no longer affects it.
+- Built-in transpiler no longer relies on system Node.
+- Fixed: the TD loop unroller silently dropped all but the first variable of a multi-variable `for` initializer; it now reports an error.
 
 ### Performance
 

format/CHANGELOG.md

@@ -2,7 +2,7 @@
 
 Notable changes to `@bgforge/format` (the library and the `fgfmt` CLI).
 
-## Unreleased
+## 0.2.0
 
 ### Added
 

format/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bgforge/format",
-    "version": "0.1.1",
+    "version": "0.2.0",
     "description": "Library for formatting Fallout SSL, WeiDU BAF/D/TP2/TRA, Fallout MSG, Infinity Engine 2DA, and Fallout scripts.lst files",
     "keywords": [
         "fallout",

package.json

@@ -1,7 +1,7 @@
 {
     "name": "bgforge-mls",
     "displayName": "BGforge MLS",
-    "version": "3.9.1",
+    "version": "3.10.0",
     "description": "BGforge multilanguage server",
     "categories": [
         "Programming Languages"

server/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bgforge/mls-server",
-    "version": "3.9.1",
+    "version": "3.10.0",
     "description": "LSP server for Fallout SSL, WeiDU (BAF/D/TP2), and related modding languages",
     "keywords": [
         "fallout",

transpilers/CHANGELOG.md

@@ -2,11 +2,13 @@
 
 Notable changes to `@bgforge/transpile` (the library and the `fgtp` CLI).
 
-## Unreleased
+## 0.1.2
 
 ### Fixed
 
 - The TD transpiler now reports an error on a multi-variable `for` initializer during loop unrolling instead of silently keeping only the first variable.
+- Multi-file transpiles no longer rely on a `node` binary on `PATH`; the bundler's child always runs on the current runtime.
+- `quick-lru` is now a declared dependency, fixing standalone installs.
 
 ## 0.1.1
 

transpilers/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bgforge/transpile",
-    "version": "0.1.1",
+    "version": "0.1.2",
     "description": "Library for transpiling TSSL, TBAF, and TD source files to Fallout SSL, WeiDU BAF, and WeiDU D",
     "keywords": [
         "fallout",