Harden event catalog ingestion

[TianqiZhang]

Summary

Extracts a focused subset of runtime and agent-safety hardening inspired by #32:

• add safe catalog fetch with timeout, response-size cap, JSON content-type validation, and non-2xx body avoidance
• write cache sessions and metadata atomically to avoid partial/corrupt writes
• validate --limit as a full positive integer and clamp large values
• document untrusted catalog guidance in the skill and bump related package/plugin versions

Intentionally left out broader or higher-maintenance changes from #32, including redirect allow-listing, cache schema coercion, output sanitization, debug logging, release workflow changes, Dependabot, Actions SHA pinning, CI pin gates, and large security review/fix-plan docs.

Thanks to @joslat for the original security review and implementation proposal in #32. Key implementation pieces are co-authored with him in the commit trailer.

Validation

• npm run build
• npm test
• npm run smoke:fixture
• live temp-cache query: node .\\dist\\index.js sessions --query AI --event build-2026 --limit 1 --json

[Copilot]

Pull request overview

This PR hardens Microsoft event catalog ingestion in @microsoft/events-cli and updates the associated skill/plugin metadata to reduce security and runtime risk from untrusted remote/catalog inputs and local cache tampering.

Changes:

• Added a “safe fetch” wrapper with timeout, response-size limiting, JSON Content-Type validation, and host allow-listing; added additional cache shape validation and debug diagnostics.
• Sanitized untrusted catalog fields during normalization and output formatting to mitigate terminal escape/control-sequence injection, and tightened session normalization rules.
• Hardened cache I/O with atomic writes and nextCheckAt capping; validated --limit as a strict positive integer with clamping and messaging; updated skill guidance and bumped versions.

Reviewed changes

Copilot reviewed 21 out of 22 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
skills/microsoft-build/SKILL.md	Bumps skill version and documents “catalog as untrusted data” guidance for agents.
cli/test/validate.test.ts	Adds tests for cache/session shape validators.
cli/test/sanitize.test.ts	Adds tests for control-sequence stripping behavior.
cli/test/normalize.test.ts	Adds tests for sanitization, field caps, session-code validation, and prototype safety during normalization.
cli/test/limit.test.ts	Adds tests for strict --limit validation and clamping behavior.
cli/test/http.test.ts	Adds tests for safe fetch behaviors (host allow-list, timeouts, byte caps, content-type checks, etc.).
cli/test/format.test.ts	Adds tests ensuring output formatting strips control sequences and avoids “Invalid Date” output.
cli/test/cache.test.ts	Extends cache tests for malformed cache handling, atomic write behavior, nextCheckAt capping, and stale-cache fallback scenarios.
cli/src/output/format.ts	Sanitizes session fields at formatting time for both human and JSON output; improves date rendering for malformed timestamps.
cli/src/log.ts	Introduces a debug logging helper gated by MSEVENTS_DEBUG.
cli/src/index.ts	Switches sessions command to strict --limit validation instead of parseInt.
cli/src/data/validate.ts	Adds runtime validators for raw sessions, cache meta, and cached session arrays.
cli/src/data/sanitize.ts	Adds control-sequence stripping utility used across normalization/formatting.
cli/src/data/normalize.ts	Sanitizes/limits untrusted text, validates session codes, ignores prototype-chain displayValue, and skips non-object catalog entries.
cli/src/data/http.ts	Adds safeFetchJson with timeout/size/content-type checks and host allow-listing.
cli/src/data/cache.ts	Uses safe fetch, validates cache shapes on read, adds atomic writes, adds debug diagnostics, and caps far-future nextCheckAt.
cli/src/commands/common.ts	Implements strict --limit validation with clamping and stderr messaging.
cli/README.md	Documents new environment variables for fetch/caching/debugging hardening.
cli/package.json	Bumps CLI package version to 0.3.0.
cli/package-lock.json	Updates lockfile package version metadata.
.github/plugin/plugin.json	Bumps plugin manifest version.
.claude-plugin/plugin.json	Bumps plugin manifest version (kept in sync with GitHub Copilot manifest).

Files not reviewed (1)

• cli/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• cli/package-lock.json: Language not supported

[pdebruin]

Clean cherry-pick of the high-value hardening from #32. Safe fetch, atomic writes, limit validation, and prompt injection guardrails all look good. Tests are thorough.

[joslat]

Thanks for the quote - and impressed on the fast progress of this!! - super happy to have done a tiny contribution to the BUILD-cli, @TianqiZhang