From 574a16d9fa6e71abdb2b6be2926aae687315aeeb Mon Sep 17 00:00:00 2001 From: Keysat Date: Fri, 8 May 2026 09:39:17 -0500 Subject: [PATCH] Save in-progress keysat integration and StartOS 0.4 work MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Snapshot of the working tree before cleanup. Captures: - Keysat licensing: server/license.js, /api/license/* endpoints in server/index.js, activation modal in public/index.html, embedded Ed25519 issuer key (assets/issuer.pub). - StartOS 0.4 expansion: setApiKey action, version files v0.1.1 through v0.1.15, file-models/config.json.ts, manifest updates. - Self-hosted registry server (startos-registry/). - Build/deploy scripts (bin/bump-version.sh, bin/deploy.sh, vendored yt-dlp binary), .gitignore, .deploy.env.example. - Recent design docs (KEYSAT_INTEGRATION.md, UPGRADE-DESIGN.md) — retained here so they remain recoverable when removed in the follow-up cleanup commit. --- .deploy.env.example | 25 + .gitignore | 7 + Dockerfile | 16 +- KEYSAT_INTEGRATION.md | 1378 +++ Makefile | 20 + UPGRADE-DESIGN.md | 467 + assets/issuer.pub | 3 + bin/bump-version.sh | 151 + bin/deploy.sh | 109 + bin/yt-dlp | Bin 0 -> 3204286 bytes public/index.html | 574 +- server/index.js | 381 +- server/license.js | 145 + server/package-lock.json | 672 +- server/package.json | 1 + start9/0.4/Dockerfile | 12 + startos-registry/README.md | 67 + startos-registry/nginx.conf | 54 + startos-registry/node_modules/.bin/mime | 1 + .../node_modules/.package-lock.json | 820 ++ .../node_modules/accepts/HISTORY.md | 243 + startos-registry/node_modules/accepts/LICENSE | 23 + .../node_modules/accepts/README.md | 140 + .../node_modules/accepts/index.js | 238 + .../node_modules/accepts/package.json | 47 + .../node_modules/array-flatten/LICENSE | 21 + .../node_modules/array-flatten/README.md | 43 + .../array-flatten/array-flatten.js | 64 + .../node_modules/array-flatten/package.json | 39 + .../node_modules/body-parser/HISTORY.md | 680 ++ .../node_modules/body-parser/LICENSE | 23 + .../node_modules/body-parser/README.md | 476 + .../node_modules/body-parser/index.js | 156 + .../node_modules/body-parser/lib/read.js | 205 + .../body-parser/lib/types/json.js | 247 + .../node_modules/body-parser/lib/types/raw.js | 101 + .../body-parser/lib/types/text.js | 121 + .../body-parser/lib/types/urlencoded.js | 300 + .../node_modules/body-parser/package.json | 55 + .../node_modules/bytes/History.md | 97 + startos-registry/node_modules/bytes/LICENSE | 23 + startos-registry/node_modules/bytes/Readme.md | 152 + startos-registry/node_modules/bytes/index.js | 170 + .../node_modules/bytes/package.json | 42 + .../call-bind-apply-helpers/.eslintrc | 17 + .../.github/FUNDING.yml | 12 + .../call-bind-apply-helpers/.nycrc | 9 + .../call-bind-apply-helpers/CHANGELOG.md | 30 + .../call-bind-apply-helpers/LICENSE | 21 + .../call-bind-apply-helpers/README.md | 62 + .../call-bind-apply-helpers/actualApply.d.ts | 1 + .../call-bind-apply-helpers/actualApply.js | 10 + .../call-bind-apply-helpers/applyBind.d.ts | 19 + .../call-bind-apply-helpers/applyBind.js | 10 + .../functionApply.d.ts | 1 + .../call-bind-apply-helpers/functionApply.js | 4 + .../call-bind-apply-helpers/functionCall.d.ts | 1 + .../call-bind-apply-helpers/functionCall.js | 4 + .../call-bind-apply-helpers/index.d.ts | 64 + .../call-bind-apply-helpers/index.js | 15 + .../call-bind-apply-helpers/package.json | 85 + .../call-bind-apply-helpers/reflectApply.d.ts | 3 + .../call-bind-apply-helpers/reflectApply.js | 4 + .../call-bind-apply-helpers/test/index.js | 63 + .../call-bind-apply-helpers/tsconfig.json | 9 + .../node_modules/call-bound/.eslintrc | 13 + .../call-bound/.github/FUNDING.yml | 12 + .../node_modules/call-bound/.nycrc | 9 + .../node_modules/call-bound/CHANGELOG.md | 42 + .../node_modules/call-bound/LICENSE | 21 + .../node_modules/call-bound/README.md | 53 + .../node_modules/call-bound/index.d.ts | 94 + .../node_modules/call-bound/index.js | 19 + .../node_modules/call-bound/package.json | 99 + .../node_modules/call-bound/test/index.js | 61 + .../node_modules/call-bound/tsconfig.json | 10 + .../content-disposition/HISTORY.md | 60 + .../node_modules/content-disposition/LICENSE | 22 + .../content-disposition/README.md | 142 + .../node_modules/content-disposition/index.js | 458 + .../content-disposition/package.json | 44 + .../node_modules/content-type/HISTORY.md | 29 + .../node_modules/content-type/LICENSE | 22 + .../node_modules/content-type/README.md | 94 + .../node_modules/content-type/index.js | 225 + .../node_modules/content-type/package.json | 42 + .../node_modules/cookie-signature/History.md | 42 + .../node_modules/cookie-signature/Readme.md | 42 + .../node_modules/cookie-signature/index.js | 51 + .../cookie-signature/package.json | 18 + startos-registry/node_modules/cookie/LICENSE | 24 + .../node_modules/cookie/README.md | 317 + .../node_modules/cookie/SECURITY.md | 25 + startos-registry/node_modules/cookie/index.js | 335 + .../node_modules/cookie/package.json | 44 + .../node_modules/debug/.coveralls.yml | 1 + startos-registry/node_modules/debug/.eslintrc | 11 + .../node_modules/debug/.npmignore | 9 + .../node_modules/debug/.travis.yml | 14 + .../node_modules/debug/CHANGELOG.md | 362 + startos-registry/node_modules/debug/LICENSE | 19 + startos-registry/node_modules/debug/Makefile | 50 + startos-registry/node_modules/debug/README.md | 312 + .../node_modules/debug/component.json | 19 + .../node_modules/debug/karma.conf.js | 70 + startos-registry/node_modules/debug/node.js | 1 + .../node_modules/debug/package.json | 49 + .../node_modules/debug/src/browser.js | 185 + .../node_modules/debug/src/debug.js | 202 + .../node_modules/debug/src/index.js | 10 + .../node_modules/debug/src/inspector-log.js | 15 + .../node_modules/debug/src/node.js | 248 + startos-registry/node_modules/depd/History.md | 103 + startos-registry/node_modules/depd/LICENSE | 22 + startos-registry/node_modules/depd/Readme.md | 280 + startos-registry/node_modules/depd/index.js | 538 ++ .../node_modules/depd/lib/browser/index.js | 77 + .../node_modules/depd/package.json | 45 + startos-registry/node_modules/destroy/LICENSE | 23 + .../node_modules/destroy/README.md | 63 + .../node_modules/destroy/index.js | 209 + .../node_modules/destroy/package.json | 48 + .../node_modules/dunder-proto/.eslintrc | 5 + .../dunder-proto/.github/FUNDING.yml | 12 + .../node_modules/dunder-proto/.nycrc | 13 + .../node_modules/dunder-proto/CHANGELOG.md | 24 + .../node_modules/dunder-proto/LICENSE | 21 + .../node_modules/dunder-proto/README.md | 54 + .../node_modules/dunder-proto/get.d.ts | 5 + .../node_modules/dunder-proto/get.js | 30 + .../node_modules/dunder-proto/package.json | 76 + .../node_modules/dunder-proto/set.d.ts | 5 + .../node_modules/dunder-proto/set.js | 35 + .../node_modules/dunder-proto/test/get.js | 34 + .../node_modules/dunder-proto/test/index.js | 4 + .../node_modules/dunder-proto/test/set.js | 50 + .../node_modules/dunder-proto/tsconfig.json | 9 + .../node_modules/ee-first/LICENSE | 22 + .../node_modules/ee-first/README.md | 80 + .../node_modules/ee-first/index.js | 95 + .../node_modules/ee-first/package.json | 29 + .../node_modules/encodeurl/LICENSE | 22 + .../node_modules/encodeurl/README.md | 109 + .../node_modules/encodeurl/index.js | 60 + .../node_modules/encodeurl/package.json | 40 + .../node_modules/es-define-property/.eslintrc | 13 + .../es-define-property/.github/FUNDING.yml | 12 + .../node_modules/es-define-property/.nycrc | 9 + .../es-define-property/CHANGELOG.md | 29 + .../node_modules/es-define-property/LICENSE | 21 + .../node_modules/es-define-property/README.md | 49 + .../es-define-property/index.d.ts | 3 + .../node_modules/es-define-property/index.js | 14 + .../es-define-property/package.json | 81 + .../es-define-property/test/index.js | 56 + .../es-define-property/tsconfig.json | 10 + .../node_modules/es-errors/.eslintrc | 5 + .../es-errors/.github/FUNDING.yml | 12 + .../node_modules/es-errors/CHANGELOG.md | 40 + .../node_modules/es-errors/LICENSE | 21 + .../node_modules/es-errors/README.md | 55 + .../node_modules/es-errors/eval.d.ts | 3 + .../node_modules/es-errors/eval.js | 4 + .../node_modules/es-errors/index.d.ts | 3 + .../node_modules/es-errors/index.js | 4 + .../node_modules/es-errors/package.json | 80 + .../node_modules/es-errors/range.d.ts | 3 + .../node_modules/es-errors/range.js | 4 + .../node_modules/es-errors/ref.d.ts | 3 + .../node_modules/es-errors/ref.js | 4 + .../node_modules/es-errors/syntax.d.ts | 3 + .../node_modules/es-errors/syntax.js | 4 + .../node_modules/es-errors/test/index.js | 19 + .../node_modules/es-errors/tsconfig.json | 49 + .../node_modules/es-errors/type.d.ts | 3 + .../node_modules/es-errors/type.js | 4 + .../node_modules/es-errors/uri.d.ts | 3 + .../node_modules/es-errors/uri.js | 4 + .../node_modules/es-object-atoms/.eslintrc | 16 + .../es-object-atoms/.github/FUNDING.yml | 12 + .../node_modules/es-object-atoms/CHANGELOG.md | 37 + .../node_modules/es-object-atoms/LICENSE | 21 + .../node_modules/es-object-atoms/README.md | 63 + .../RequireObjectCoercible.d.ts | 3 + .../es-object-atoms/RequireObjectCoercible.js | 11 + .../es-object-atoms/ToObject.d.ts | 7 + .../node_modules/es-object-atoms/ToObject.js | 10 + .../node_modules/es-object-atoms/index.d.ts | 3 + .../node_modules/es-object-atoms/index.js | 4 + .../es-object-atoms/isObject.d.ts | 3 + .../node_modules/es-object-atoms/isObject.js | 6 + .../node_modules/es-object-atoms/package.json | 80 + .../es-object-atoms/test/index.js | 38 + .../es-object-atoms/tsconfig.json | 6 + .../node_modules/escape-html/LICENSE | 24 + .../node_modules/escape-html/Readme.md | 43 + .../node_modules/escape-html/index.js | 78 + .../node_modules/escape-html/package.json | 24 + startos-registry/node_modules/etag/HISTORY.md | 83 + startos-registry/node_modules/etag/LICENSE | 22 + startos-registry/node_modules/etag/README.md | 159 + startos-registry/node_modules/etag/index.js | 131 + .../node_modules/etag/package.json | 47 + .../node_modules/express/History.md | 3667 +++++++ startos-registry/node_modules/express/LICENSE | 24 + .../node_modules/express/Readme.md | 260 + .../node_modules/express/index.js | 11 + .../node_modules/express/lib/application.js | 661 ++ .../node_modules/express/lib/express.js | 116 + .../express/lib/middleware/init.js | 43 + .../express/lib/middleware/query.js | 47 + .../node_modules/express/lib/request.js | 525 + .../node_modules/express/lib/response.js | 1179 +++ .../node_modules/express/lib/router/index.js | 673 ++ .../node_modules/express/lib/router/layer.js | 181 + .../node_modules/express/lib/router/route.js | 230 + .../node_modules/express/lib/utils.js | 303 + .../node_modules/express/lib/view.js | 182 + .../node_modules/express/package.json | 102 + .../node_modules/finalhandler/HISTORY.md | 216 + .../node_modules/finalhandler/LICENSE | 22 + .../node_modules/finalhandler/README.md | 147 + .../node_modules/finalhandler/SECURITY.md | 25 + .../node_modules/finalhandler/index.js | 341 + .../node_modules/finalhandler/package.json | 47 + .../node_modules/forwarded/HISTORY.md | 21 + .../node_modules/forwarded/LICENSE | 22 + .../node_modules/forwarded/README.md | 57 + .../node_modules/forwarded/index.js | 90 + .../node_modules/forwarded/package.json | 45 + .../node_modules/fresh/HISTORY.md | 70 + startos-registry/node_modules/fresh/LICENSE | 23 + startos-registry/node_modules/fresh/README.md | 119 + startos-registry/node_modules/fresh/index.js | 137 + .../node_modules/fresh/package.json | 46 + .../node_modules/function-bind/.eslintrc | 21 + .../function-bind/.github/FUNDING.yml | 12 + .../function-bind/.github/SECURITY.md | 3 + .../node_modules/function-bind/.nycrc | 13 + .../node_modules/function-bind/CHANGELOG.md | 136 + .../node_modules/function-bind/LICENSE | 20 + .../node_modules/function-bind/README.md | 46 + .../function-bind/implementation.js | 84 + .../node_modules/function-bind/index.js | 5 + .../node_modules/function-bind/package.json | 87 + .../node_modules/function-bind/test/.eslintrc | 9 + .../node_modules/function-bind/test/index.js | 252 + .../node_modules/get-intrinsic/.eslintrc | 42 + .../get-intrinsic/.github/FUNDING.yml | 12 + .../node_modules/get-intrinsic/.nycrc | 9 + .../node_modules/get-intrinsic/CHANGELOG.md | 186 + .../node_modules/get-intrinsic/LICENSE | 21 + .../node_modules/get-intrinsic/README.md | 71 + .../node_modules/get-intrinsic/index.js | 378 + .../node_modules/get-intrinsic/package.json | 97 + .../get-intrinsic/test/GetIntrinsic.js | 274 + .../node_modules/get-proto/.eslintrc | 10 + .../get-proto/.github/FUNDING.yml | 12 + .../node_modules/get-proto/.nycrc | 9 + .../node_modules/get-proto/CHANGELOG.md | 21 + .../node_modules/get-proto/LICENSE | 21 + .../get-proto/Object.getPrototypeOf.d.ts | 5 + .../get-proto/Object.getPrototypeOf.js | 6 + .../node_modules/get-proto/README.md | 50 + .../get-proto/Reflect.getPrototypeOf.d.ts | 3 + .../get-proto/Reflect.getPrototypeOf.js | 4 + .../node_modules/get-proto/index.d.ts | 5 + .../node_modules/get-proto/index.js | 27 + .../node_modules/get-proto/package.json | 81 + .../node_modules/get-proto/test/index.js | 68 + .../node_modules/get-proto/tsconfig.json | 9 + startos-registry/node_modules/gopd/.eslintrc | 16 + .../node_modules/gopd/.github/FUNDING.yml | 12 + .../node_modules/gopd/CHANGELOG.md | 45 + startos-registry/node_modules/gopd/LICENSE | 21 + startos-registry/node_modules/gopd/README.md | 40 + startos-registry/node_modules/gopd/gOPD.d.ts | 1 + startos-registry/node_modules/gopd/gOPD.js | 4 + startos-registry/node_modules/gopd/index.d.ts | 5 + startos-registry/node_modules/gopd/index.js | 15 + .../node_modules/gopd/package.json | 77 + .../node_modules/gopd/test/index.js | 36 + .../node_modules/gopd/tsconfig.json | 9 + .../node_modules/has-symbols/.eslintrc | 11 + .../has-symbols/.github/FUNDING.yml | 12 + .../node_modules/has-symbols/.nycrc | 9 + .../node_modules/has-symbols/CHANGELOG.md | 91 + .../node_modules/has-symbols/LICENSE | 21 + .../node_modules/has-symbols/README.md | 46 + .../node_modules/has-symbols/index.d.ts | 3 + .../node_modules/has-symbols/index.js | 14 + .../node_modules/has-symbols/package.json | 111 + .../node_modules/has-symbols/shams.d.ts | 3 + .../node_modules/has-symbols/shams.js | 45 + .../node_modules/has-symbols/test/index.js | 22 + .../has-symbols/test/shams/core-js.js | 29 + .../test/shams/get-own-property-symbols.js | 29 + .../node_modules/has-symbols/test/tests.js | 58 + .../node_modules/has-symbols/tsconfig.json | 10 + .../node_modules/hasown/.eslintrc | 5 + .../node_modules/hasown/.github/FUNDING.yml | 12 + startos-registry/node_modules/hasown/.nycrc | 13 + .../node_modules/hasown/CHANGELOG.md | 40 + startos-registry/node_modules/hasown/LICENSE | 21 + .../node_modules/hasown/README.md | 40 + .../node_modules/hasown/index.d.ts | 3 + startos-registry/node_modules/hasown/index.js | 8 + .../node_modules/hasown/package.json | 92 + .../node_modules/hasown/tsconfig.json | 6 + .../node_modules/http-errors/HISTORY.md | 186 + .../node_modules/http-errors/LICENSE | 23 + .../node_modules/http-errors/README.md | 169 + .../node_modules/http-errors/index.js | 290 + .../node_modules/http-errors/package.json | 54 + .../node_modules/iconv-lite/Changelog.md | 162 + .../node_modules/iconv-lite/LICENSE | 21 + .../node_modules/iconv-lite/README.md | 156 + .../iconv-lite/encodings/dbcs-codec.js | 555 ++ .../iconv-lite/encodings/dbcs-data.js | 176 + .../iconv-lite/encodings/index.js | 22 + .../iconv-lite/encodings/internal.js | 188 + .../iconv-lite/encodings/sbcs-codec.js | 72 + .../encodings/sbcs-data-generated.js | 451 + .../iconv-lite/encodings/sbcs-data.js | 174 + .../encodings/tables/big5-added.json | 122 + .../iconv-lite/encodings/tables/cp936.json | 264 + .../iconv-lite/encodings/tables/cp949.json | 273 + .../iconv-lite/encodings/tables/cp950.json | 177 + .../iconv-lite/encodings/tables/eucjp.json | 182 + .../encodings/tables/gb18030-ranges.json | 1 + .../encodings/tables/gbk-added.json | 55 + .../iconv-lite/encodings/tables/shiftjis.json | 125 + .../iconv-lite/encodings/utf16.js | 177 + .../node_modules/iconv-lite/encodings/utf7.js | 290 + .../iconv-lite/lib/bom-handling.js | 52 + .../iconv-lite/lib/extend-node.js | 217 + .../node_modules/iconv-lite/lib/index.d.ts | 24 + .../node_modules/iconv-lite/lib/index.js | 153 + .../node_modules/iconv-lite/lib/streams.js | 121 + .../node_modules/iconv-lite/package.json | 46 + .../node_modules/inherits/LICENSE | 16 + .../node_modules/inherits/README.md | 42 + .../node_modules/inherits/inherits.js | 9 + .../node_modules/inherits/inherits_browser.js | 27 + .../node_modules/inherits/package.json | 29 + .../node_modules/ipaddr.js/LICENSE | 19 + .../node_modules/ipaddr.js/README.md | 233 + .../node_modules/ipaddr.js/ipaddr.min.js | 1 + .../node_modules/ipaddr.js/lib/ipaddr.js | 673 ++ .../node_modules/ipaddr.js/lib/ipaddr.js.d.ts | 68 + .../node_modules/ipaddr.js/package.json | 35 + .../node_modules/math-intrinsics/.eslintrc | 16 + .../math-intrinsics/.github/FUNDING.yml | 12 + .../node_modules/math-intrinsics/CHANGELOG.md | 24 + .../node_modules/math-intrinsics/LICENSE | 21 + .../node_modules/math-intrinsics/README.md | 50 + .../node_modules/math-intrinsics/abs.d.ts | 1 + .../node_modules/math-intrinsics/abs.js | 4 + .../constants/maxArrayLength.d.ts | 3 + .../constants/maxArrayLength.js | 4 + .../constants/maxSafeInteger.d.ts | 3 + .../constants/maxSafeInteger.js | 5 + .../math-intrinsics/constants/maxValue.d.ts | 3 + .../math-intrinsics/constants/maxValue.js | 5 + .../node_modules/math-intrinsics/floor.d.ts | 1 + .../node_modules/math-intrinsics/floor.js | 4 + .../math-intrinsics/isFinite.d.ts | 3 + .../node_modules/math-intrinsics/isFinite.js | 12 + .../math-intrinsics/isInteger.d.ts | 3 + .../node_modules/math-intrinsics/isInteger.js | 16 + .../node_modules/math-intrinsics/isNaN.d.ts | 1 + .../node_modules/math-intrinsics/isNaN.js | 6 + .../math-intrinsics/isNegativeZero.d.ts | 3 + .../math-intrinsics/isNegativeZero.js | 6 + .../node_modules/math-intrinsics/max.d.ts | 1 + .../node_modules/math-intrinsics/max.js | 4 + .../node_modules/math-intrinsics/min.d.ts | 1 + .../node_modules/math-intrinsics/min.js | 4 + .../node_modules/math-intrinsics/mod.d.ts | 3 + .../node_modules/math-intrinsics/mod.js | 9 + .../node_modules/math-intrinsics/package.json | 86 + .../node_modules/math-intrinsics/pow.d.ts | 1 + .../node_modules/math-intrinsics/pow.js | 4 + .../node_modules/math-intrinsics/round.d.ts | 1 + .../node_modules/math-intrinsics/round.js | 4 + .../node_modules/math-intrinsics/sign.d.ts | 3 + .../node_modules/math-intrinsics/sign.js | 11 + .../math-intrinsics/test/index.js | 192 + .../math-intrinsics/tsconfig.json | 3 + .../node_modules/media-typer/HISTORY.md | 22 + .../node_modules/media-typer/LICENSE | 22 + .../node_modules/media-typer/README.md | 81 + .../node_modules/media-typer/index.js | 270 + .../node_modules/media-typer/package.json | 26 + .../node_modules/merge-descriptors/HISTORY.md | 21 + .../node_modules/merge-descriptors/LICENSE | 23 + .../node_modules/merge-descriptors/README.md | 49 + .../node_modules/merge-descriptors/index.js | 60 + .../merge-descriptors/package.json | 39 + .../node_modules/methods/HISTORY.md | 29 + startos-registry/node_modules/methods/LICENSE | 24 + .../node_modules/methods/README.md | 51 + .../node_modules/methods/index.js | 69 + .../node_modules/methods/package.json | 36 + .../node_modules/mime-db/HISTORY.md | 507 + startos-registry/node_modules/mime-db/LICENSE | 23 + .../node_modules/mime-db/README.md | 100 + startos-registry/node_modules/mime-db/db.json | 8519 +++++++++++++++++ .../node_modules/mime-db/index.js | 12 + .../node_modules/mime-db/package.json | 60 + .../node_modules/mime-types/HISTORY.md | 397 + .../node_modules/mime-types/LICENSE | 23 + .../node_modules/mime-types/README.md | 113 + .../node_modules/mime-types/index.js | 188 + .../node_modules/mime-types/package.json | 44 + startos-registry/node_modules/mime/.npmignore | 0 .../node_modules/mime/CHANGELOG.md | 164 + startos-registry/node_modules/mime/LICENSE | 21 + startos-registry/node_modules/mime/README.md | 90 + startos-registry/node_modules/mime/cli.js | 8 + startos-registry/node_modules/mime/mime.js | 108 + .../node_modules/mime/package.json | 44 + .../node_modules/mime/src/build.js | 53 + .../node_modules/mime/src/test.js | 60 + startos-registry/node_modules/mime/types.json | 1 + startos-registry/node_modules/ms/index.js | 152 + startos-registry/node_modules/ms/license.md | 21 + startos-registry/node_modules/ms/package.json | 37 + startos-registry/node_modules/ms/readme.md | 51 + .../node_modules/negotiator/HISTORY.md | 108 + .../node_modules/negotiator/LICENSE | 24 + .../node_modules/negotiator/README.md | 203 + .../node_modules/negotiator/index.js | 82 + .../node_modules/negotiator/lib/charset.js | 169 + .../node_modules/negotiator/lib/encoding.js | 184 + .../node_modules/negotiator/lib/language.js | 179 + .../node_modules/negotiator/lib/mediaType.js | 294 + .../node_modules/negotiator/package.json | 42 + .../node_modules/object-inspect/.eslintrc | 53 + .../object-inspect/.github/FUNDING.yml | 12 + .../node_modules/object-inspect/.nycrc | 13 + .../node_modules/object-inspect/CHANGELOG.md | 424 + .../node_modules/object-inspect/LICENSE | 21 + .../object-inspect/example/all.js | 23 + .../object-inspect/example/circular.js | 6 + .../node_modules/object-inspect/example/fn.js | 5 + .../object-inspect/example/inspect.js | 10 + .../node_modules/object-inspect/index.js | 544 ++ .../object-inspect/package-support.json | 20 + .../node_modules/object-inspect/package.json | 105 + .../object-inspect/readme.markdown | 84 + .../object-inspect/test-core-js.js | 26 + .../object-inspect/test/bigint.js | 58 + .../object-inspect/test/browser/dom.js | 15 + .../object-inspect/test/circular.js | 16 + .../node_modules/object-inspect/test/deep.js | 12 + .../object-inspect/test/element.js | 53 + .../node_modules/object-inspect/test/err.js | 48 + .../node_modules/object-inspect/test/fakes.js | 29 + .../node_modules/object-inspect/test/fn.js | 76 + .../object-inspect/test/global.js | 17 + .../node_modules/object-inspect/test/has.js | 15 + .../node_modules/object-inspect/test/holes.js | 15 + .../object-inspect/test/indent-option.js | 271 + .../object-inspect/test/inspect.js | 139 + .../object-inspect/test/lowbyte.js | 12 + .../object-inspect/test/number.js | 58 + .../object-inspect/test/quoteStyle.js | 26 + .../object-inspect/test/toStringTag.js | 40 + .../node_modules/object-inspect/test/undef.js | 12 + .../object-inspect/test/values.js | 261 + .../object-inspect/util.inspect.js | 1 + .../node_modules/on-finished/HISTORY.md | 98 + .../node_modules/on-finished/LICENSE | 23 + .../node_modules/on-finished/README.md | 162 + .../node_modules/on-finished/index.js | 234 + .../node_modules/on-finished/package.json | 39 + .../node_modules/parseurl/HISTORY.md | 58 + .../node_modules/parseurl/LICENSE | 24 + .../node_modules/parseurl/README.md | 133 + .../node_modules/parseurl/index.js | 158 + .../node_modules/parseurl/package.json | 40 + .../node_modules/path-to-regexp/LICENSE | 21 + .../node_modules/path-to-regexp/Readme.md | 35 + .../node_modules/path-to-regexp/index.js | 158 + .../node_modules/path-to-regexp/package.json | 30 + .../node_modules/proxy-addr/HISTORY.md | 161 + .../node_modules/proxy-addr/LICENSE | 22 + .../node_modules/proxy-addr/README.md | 139 + .../node_modules/proxy-addr/index.js | 327 + .../node_modules/proxy-addr/package.json | 47 + .../node_modules/qs/.editorconfig | 46 + .../node_modules/qs/.github/FUNDING.yml | 12 + .../node_modules/qs/.github/SECURITY.md | 11 + .../node_modules/qs/.github/THREAT_MODEL.md | 78 + startos-registry/node_modules/qs/.nycrc | 13 + startos-registry/node_modules/qs/CHANGELOG.md | 644 ++ startos-registry/node_modules/qs/LICENSE.md | 29 + startos-registry/node_modules/qs/README.md | 740 ++ startos-registry/node_modules/qs/dist/qs.js | 141 + .../node_modules/qs/eslint.config.mjs | 56 + .../node_modules/qs/lib/formats.js | 23 + startos-registry/node_modules/qs/lib/index.js | 11 + startos-registry/node_modules/qs/lib/parse.js | 371 + .../node_modules/qs/lib/stringify.js | 356 + startos-registry/node_modules/qs/lib/utils.js | 340 + startos-registry/node_modules/qs/package.json | 94 + .../node_modules/qs/test/empty-keys-cases.js | 267 + .../node_modules/qs/test/parse.js | 1512 +++ .../node_modules/qs/test/stringify.js | 1310 +++ .../node_modules/qs/test/utils.js | 397 + .../node_modules/range-parser/HISTORY.md | 56 + .../node_modules/range-parser/LICENSE | 23 + .../node_modules/range-parser/README.md | 84 + .../node_modules/range-parser/index.js | 162 + .../node_modules/range-parser/package.json | 44 + .../node_modules/raw-body/LICENSE | 22 + .../node_modules/raw-body/README.md | 223 + .../node_modules/raw-body/index.d.ts | 87 + .../node_modules/raw-body/index.js | 336 + .../node_modules/raw-body/package.json | 47 + .../node_modules/safe-buffer/LICENSE | 21 + .../node_modules/safe-buffer/README.md | 584 ++ .../node_modules/safe-buffer/index.d.ts | 187 + .../node_modules/safe-buffer/index.js | 65 + .../node_modules/safe-buffer/package.json | 51 + .../node_modules/safer-buffer/LICENSE | 21 + .../safer-buffer/Porting-Buffer.md | 268 + .../node_modules/safer-buffer/Readme.md | 156 + .../node_modules/safer-buffer/dangerous.js | 58 + .../node_modules/safer-buffer/package.json | 34 + .../node_modules/safer-buffer/safer.js | 77 + .../node_modules/safer-buffer/tests.js | 406 + startos-registry/node_modules/send/HISTORY.md | 538 ++ startos-registry/node_modules/send/LICENSE | 23 + startos-registry/node_modules/send/README.md | 327 + .../node_modules/send/SECURITY.md | 24 + startos-registry/node_modules/send/index.js | 1142 +++ .../send/node_modules/ms/index.js | 162 + .../send/node_modules/ms/license.md | 21 + .../send/node_modules/ms/package.json | 38 + .../send/node_modules/ms/readme.md | 59 + .../node_modules/send/package.json | 62 + .../node_modules/serve-static/HISTORY.md | 493 + .../node_modules/serve-static/LICENSE | 25 + .../node_modules/serve-static/README.md | 257 + .../node_modules/serve-static/index.js | 209 + .../node_modules/serve-static/package.json | 42 + .../node_modules/setprototypeof/LICENSE | 13 + .../node_modules/setprototypeof/README.md | 31 + .../node_modules/setprototypeof/index.d.ts | 2 + .../node_modules/setprototypeof/index.js | 17 + .../node_modules/setprototypeof/package.json | 38 + .../node_modules/setprototypeof/test/index.js | 24 + .../side-channel-list/.editorconfig | 9 + .../node_modules/side-channel-list/.eslintrc | 11 + .../side-channel-list/.github/FUNDING.yml | 12 + .../node_modules/side-channel-list/.nycrc | 13 + .../side-channel-list/CHANGELOG.md | 36 + .../node_modules/side-channel-list/LICENSE | 21 + .../node_modules/side-channel-list/README.md | 62 + .../node_modules/side-channel-list/index.d.ts | 13 + .../node_modules/side-channel-list/index.js | 111 + .../node_modules/side-channel-list/list.d.ts | 14 + .../side-channel-list/package.json | 77 + .../side-channel-list/test/index.js | 154 + .../side-channel-list/tsconfig.json | 9 + .../side-channel-map/.editorconfig | 9 + .../node_modules/side-channel-map/.eslintrc | 11 + .../side-channel-map/.github/FUNDING.yml | 12 + .../node_modules/side-channel-map/.nycrc | 13 + .../side-channel-map/CHANGELOG.md | 22 + .../node_modules/side-channel-map/LICENSE | 21 + .../node_modules/side-channel-map/README.md | 62 + .../node_modules/side-channel-map/index.d.ts | 15 + .../node_modules/side-channel-map/index.js | 68 + .../side-channel-map/package.json | 80 + .../side-channel-map/test/index.js | 114 + .../side-channel-map/tsconfig.json | 9 + .../side-channel-weakmap/.editorconfig | 9 + .../side-channel-weakmap/.eslintrc | 12 + .../side-channel-weakmap/.github/FUNDING.yml | 12 + .../node_modules/side-channel-weakmap/.nycrc | 13 + .../side-channel-weakmap/CHANGELOG.md | 28 + .../node_modules/side-channel-weakmap/LICENSE | 21 + .../side-channel-weakmap/README.md | 62 + .../side-channel-weakmap/index.d.ts | 15 + .../side-channel-weakmap/index.js | 84 + .../side-channel-weakmap/package.json | 87 + .../side-channel-weakmap/test/index.js | 114 + .../side-channel-weakmap/tsconfig.json | 9 + .../node_modules/side-channel/.editorconfig | 9 + .../node_modules/side-channel/.eslintrc | 12 + .../side-channel/.github/FUNDING.yml | 12 + .../node_modules/side-channel/.nycrc | 13 + .../node_modules/side-channel/CHANGELOG.md | 110 + .../node_modules/side-channel/LICENSE | 21 + .../node_modules/side-channel/README.md | 61 + .../node_modules/side-channel/index.d.ts | 14 + .../node_modules/side-channel/index.js | 43 + .../node_modules/side-channel/package.json | 85 + .../node_modules/side-channel/test/index.js | 104 + .../node_modules/side-channel/tsconfig.json | 9 + .../node_modules/statuses/HISTORY.md | 87 + .../node_modules/statuses/LICENSE | 23 + .../node_modules/statuses/README.md | 139 + .../node_modules/statuses/codes.json | 65 + .../node_modules/statuses/index.js | 146 + .../node_modules/statuses/package.json | 49 + .../node_modules/toidentifier/HISTORY.md | 9 + .../node_modules/toidentifier/LICENSE | 21 + .../node_modules/toidentifier/README.md | 61 + .../node_modules/toidentifier/index.js | 32 + .../node_modules/toidentifier/package.json | 38 + .../node_modules/type-is/HISTORY.md | 259 + startos-registry/node_modules/type-is/LICENSE | 23 + .../node_modules/type-is/README.md | 170 + .../node_modules/type-is/index.js | 266 + .../node_modules/type-is/package.json | 45 + .../node_modules/unpipe/HISTORY.md | 4 + startos-registry/node_modules/unpipe/LICENSE | 22 + .../node_modules/unpipe/README.md | 43 + startos-registry/node_modules/unpipe/index.js | 69 + .../node_modules/unpipe/package.json | 27 + .../node_modules/utils-merge/.npmignore | 9 + .../node_modules/utils-merge/LICENSE | 20 + .../node_modules/utils-merge/README.md | 34 + .../node_modules/utils-merge/index.js | 23 + .../node_modules/utils-merge/package.json | 40 + startos-registry/node_modules/vary/HISTORY.md | 39 + startos-registry/node_modules/vary/LICENSE | 22 + startos-registry/node_modules/vary/README.md | 101 + startos-registry/node_modules/vary/index.js | 149 + .../node_modules/vary/package.json | 43 + startos-registry/package-lock.json | 827 ++ startos-registry/package.json | 13 + .../youtube-summarizer/INSTRUCTIONS.md | 23 + .../packages/youtube-summarizer/LICENSE | 7 + .../packages/youtube-summarizer/icon.png | Bin 0 -> 11039 bytes .../packages/youtube-summarizer/package.json | 39 + startos-registry/registry.json | 10 + startos-registry/scripts/publish.sh | 67 + startos-registry/scripts/setup-vps.sh | 168 + startos-registry/server.js | 420 + startos-registry/startos-registry.service | 31 + startos/actions/index.ts | 4 +- startos/actions/setApiKey.ts | 43 + startos/file-models/config.json.ts | 15 + startos/manifest/i18n.ts | 7 +- startos/manifest/index.ts | 10 +- startos/versions/index.ts | 19 +- startos/versions/v0.1.1.ts | 15 + startos/versions/v0.1.10.ts | 12 + startos/versions/v0.1.11.ts | 12 + startos/versions/v0.1.12.ts | 12 + startos/versions/v0.1.13.ts | 12 + startos/versions/v0.1.14.ts | 12 + startos/versions/v0.1.15.ts | 12 + startos/versions/v0.1.2.ts | 15 + startos/versions/v0.1.3.ts | 16 + startos/versions/v0.1.4.ts | 16 + startos/versions/v0.1.5.ts | 16 + startos/versions/v0.1.6.ts | 15 + startos/versions/v0.1.7.ts | 14 + startos/versions/v0.1.8.ts | 19 + startos/versions/v0.1.9.ts | 17 + 666 files changed, 71889 insertions(+), 724 deletions(-) create mode 100644 .deploy.env.example create mode 100644 .gitignore create mode 100644 KEYSAT_INTEGRATION.md create mode 100644 UPGRADE-DESIGN.md create mode 100644 assets/issuer.pub create mode 100755 bin/bump-version.sh create mode 100755 bin/deploy.sh create mode 100755 bin/yt-dlp create mode 100644 server/license.js create mode 100644 startos-registry/README.md create mode 100644 startos-registry/nginx.conf create mode 120000 startos-registry/node_modules/.bin/mime create mode 100644 startos-registry/node_modules/.package-lock.json create mode 100644 startos-registry/node_modules/accepts/HISTORY.md create mode 100644 startos-registry/node_modules/accepts/LICENSE create mode 100644 startos-registry/node_modules/accepts/README.md create mode 100644 startos-registry/node_modules/accepts/index.js create mode 100644 startos-registry/node_modules/accepts/package.json create mode 100644 startos-registry/node_modules/array-flatten/LICENSE create mode 100644 startos-registry/node_modules/array-flatten/README.md create mode 100644 startos-registry/node_modules/array-flatten/array-flatten.js create mode 100644 startos-registry/node_modules/array-flatten/package.json create mode 100644 startos-registry/node_modules/body-parser/HISTORY.md create mode 100644 startos-registry/node_modules/body-parser/LICENSE create mode 100644 startos-registry/node_modules/body-parser/README.md create mode 100644 startos-registry/node_modules/body-parser/index.js create mode 100644 startos-registry/node_modules/body-parser/lib/read.js create mode 100644 startos-registry/node_modules/body-parser/lib/types/json.js create mode 100644 startos-registry/node_modules/body-parser/lib/types/raw.js create mode 100644 startos-registry/node_modules/body-parser/lib/types/text.js create mode 100644 startos-registry/node_modules/body-parser/lib/types/urlencoded.js create mode 100644 startos-registry/node_modules/body-parser/package.json create mode 100644 startos-registry/node_modules/bytes/History.md create mode 100644 startos-registry/node_modules/bytes/LICENSE create mode 100644 startos-registry/node_modules/bytes/Readme.md create mode 100644 startos-registry/node_modules/bytes/index.js create mode 100644 startos-registry/node_modules/bytes/package.json create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/.eslintrc create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/.nycrc create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/CHANGELOG.md create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/LICENSE create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/README.md create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/actualApply.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/actualApply.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/applyBind.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/applyBind.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/functionApply.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/functionApply.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/functionCall.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/functionCall.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/index.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/index.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/package.json create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/reflectApply.d.ts create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/reflectApply.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/test/index.js create mode 100644 startos-registry/node_modules/call-bind-apply-helpers/tsconfig.json create mode 100644 startos-registry/node_modules/call-bound/.eslintrc create mode 100644 startos-registry/node_modules/call-bound/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/call-bound/.nycrc create mode 100644 startos-registry/node_modules/call-bound/CHANGELOG.md create mode 100644 startos-registry/node_modules/call-bound/LICENSE create mode 100644 startos-registry/node_modules/call-bound/README.md create mode 100644 startos-registry/node_modules/call-bound/index.d.ts create mode 100644 startos-registry/node_modules/call-bound/index.js create mode 100644 startos-registry/node_modules/call-bound/package.json create mode 100644 startos-registry/node_modules/call-bound/test/index.js create mode 100644 startos-registry/node_modules/call-bound/tsconfig.json create mode 100644 startos-registry/node_modules/content-disposition/HISTORY.md create mode 100644 startos-registry/node_modules/content-disposition/LICENSE create mode 100644 startos-registry/node_modules/content-disposition/README.md create mode 100644 startos-registry/node_modules/content-disposition/index.js create mode 100644 startos-registry/node_modules/content-disposition/package.json create mode 100644 startos-registry/node_modules/content-type/HISTORY.md create mode 100644 startos-registry/node_modules/content-type/LICENSE create mode 100644 startos-registry/node_modules/content-type/README.md create mode 100644 startos-registry/node_modules/content-type/index.js create mode 100644 startos-registry/node_modules/content-type/package.json create mode 100644 startos-registry/node_modules/cookie-signature/History.md create mode 100644 startos-registry/node_modules/cookie-signature/Readme.md create mode 100644 startos-registry/node_modules/cookie-signature/index.js create mode 100644 startos-registry/node_modules/cookie-signature/package.json create mode 100644 startos-registry/node_modules/cookie/LICENSE create mode 100644 startos-registry/node_modules/cookie/README.md create mode 100644 startos-registry/node_modules/cookie/SECURITY.md create mode 100644 startos-registry/node_modules/cookie/index.js create mode 100644 startos-registry/node_modules/cookie/package.json create mode 100644 startos-registry/node_modules/debug/.coveralls.yml create mode 100644 startos-registry/node_modules/debug/.eslintrc create mode 100644 startos-registry/node_modules/debug/.npmignore create mode 100644 startos-registry/node_modules/debug/.travis.yml create mode 100644 startos-registry/node_modules/debug/CHANGELOG.md create mode 100644 startos-registry/node_modules/debug/LICENSE create mode 100644 startos-registry/node_modules/debug/Makefile create mode 100644 startos-registry/node_modules/debug/README.md create mode 100644 startos-registry/node_modules/debug/component.json create mode 100644 startos-registry/node_modules/debug/karma.conf.js create mode 100644 startos-registry/node_modules/debug/node.js create mode 100644 startos-registry/node_modules/debug/package.json create mode 100644 startos-registry/node_modules/debug/src/browser.js create mode 100644 startos-registry/node_modules/debug/src/debug.js create mode 100644 startos-registry/node_modules/debug/src/index.js create mode 100644 startos-registry/node_modules/debug/src/inspector-log.js create mode 100644 startos-registry/node_modules/debug/src/node.js create mode 100644 startos-registry/node_modules/depd/History.md create mode 100644 startos-registry/node_modules/depd/LICENSE create mode 100644 startos-registry/node_modules/depd/Readme.md create mode 100644 startos-registry/node_modules/depd/index.js create mode 100644 startos-registry/node_modules/depd/lib/browser/index.js create mode 100644 startos-registry/node_modules/depd/package.json create mode 100644 startos-registry/node_modules/destroy/LICENSE create mode 100644 startos-registry/node_modules/destroy/README.md create mode 100644 startos-registry/node_modules/destroy/index.js create mode 100644 startos-registry/node_modules/destroy/package.json create mode 100644 startos-registry/node_modules/dunder-proto/.eslintrc create mode 100644 startos-registry/node_modules/dunder-proto/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/dunder-proto/.nycrc create mode 100644 startos-registry/node_modules/dunder-proto/CHANGELOG.md create mode 100644 startos-registry/node_modules/dunder-proto/LICENSE create mode 100644 startos-registry/node_modules/dunder-proto/README.md create mode 100644 startos-registry/node_modules/dunder-proto/get.d.ts create mode 100644 startos-registry/node_modules/dunder-proto/get.js create mode 100644 startos-registry/node_modules/dunder-proto/package.json create mode 100644 startos-registry/node_modules/dunder-proto/set.d.ts create mode 100644 startos-registry/node_modules/dunder-proto/set.js create mode 100644 startos-registry/node_modules/dunder-proto/test/get.js create mode 100644 startos-registry/node_modules/dunder-proto/test/index.js create mode 100644 startos-registry/node_modules/dunder-proto/test/set.js create mode 100644 startos-registry/node_modules/dunder-proto/tsconfig.json create mode 100644 startos-registry/node_modules/ee-first/LICENSE create mode 100644 startos-registry/node_modules/ee-first/README.md create mode 100644 startos-registry/node_modules/ee-first/index.js create mode 100644 startos-registry/node_modules/ee-first/package.json create mode 100644 startos-registry/node_modules/encodeurl/LICENSE create mode 100644 startos-registry/node_modules/encodeurl/README.md create mode 100644 startos-registry/node_modules/encodeurl/index.js create mode 100644 startos-registry/node_modules/encodeurl/package.json create mode 100644 startos-registry/node_modules/es-define-property/.eslintrc create mode 100644 startos-registry/node_modules/es-define-property/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/es-define-property/.nycrc create mode 100644 startos-registry/node_modules/es-define-property/CHANGELOG.md create mode 100644 startos-registry/node_modules/es-define-property/LICENSE create mode 100644 startos-registry/node_modules/es-define-property/README.md create mode 100644 startos-registry/node_modules/es-define-property/index.d.ts create mode 100644 startos-registry/node_modules/es-define-property/index.js create mode 100644 startos-registry/node_modules/es-define-property/package.json create mode 100644 startos-registry/node_modules/es-define-property/test/index.js create mode 100644 startos-registry/node_modules/es-define-property/tsconfig.json create mode 100644 startos-registry/node_modules/es-errors/.eslintrc create mode 100644 startos-registry/node_modules/es-errors/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/es-errors/CHANGELOG.md create mode 100644 startos-registry/node_modules/es-errors/LICENSE create mode 100644 startos-registry/node_modules/es-errors/README.md create mode 100644 startos-registry/node_modules/es-errors/eval.d.ts create mode 100644 startos-registry/node_modules/es-errors/eval.js create mode 100644 startos-registry/node_modules/es-errors/index.d.ts create mode 100644 startos-registry/node_modules/es-errors/index.js create mode 100644 startos-registry/node_modules/es-errors/package.json create mode 100644 startos-registry/node_modules/es-errors/range.d.ts create mode 100644 startos-registry/node_modules/es-errors/range.js create mode 100644 startos-registry/node_modules/es-errors/ref.d.ts create mode 100644 startos-registry/node_modules/es-errors/ref.js create mode 100644 startos-registry/node_modules/es-errors/syntax.d.ts create mode 100644 startos-registry/node_modules/es-errors/syntax.js create mode 100644 startos-registry/node_modules/es-errors/test/index.js create mode 100644 startos-registry/node_modules/es-errors/tsconfig.json create mode 100644 startos-registry/node_modules/es-errors/type.d.ts create mode 100644 startos-registry/node_modules/es-errors/type.js create mode 100644 startos-registry/node_modules/es-errors/uri.d.ts create mode 100644 startos-registry/node_modules/es-errors/uri.js create mode 100644 startos-registry/node_modules/es-object-atoms/.eslintrc create mode 100644 startos-registry/node_modules/es-object-atoms/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/es-object-atoms/CHANGELOG.md create mode 100644 startos-registry/node_modules/es-object-atoms/LICENSE create mode 100644 startos-registry/node_modules/es-object-atoms/README.md create mode 100644 startos-registry/node_modules/es-object-atoms/RequireObjectCoercible.d.ts create mode 100644 startos-registry/node_modules/es-object-atoms/RequireObjectCoercible.js create mode 100644 startos-registry/node_modules/es-object-atoms/ToObject.d.ts create mode 100644 startos-registry/node_modules/es-object-atoms/ToObject.js create mode 100644 startos-registry/node_modules/es-object-atoms/index.d.ts create mode 100644 startos-registry/node_modules/es-object-atoms/index.js create mode 100644 startos-registry/node_modules/es-object-atoms/isObject.d.ts create mode 100644 startos-registry/node_modules/es-object-atoms/isObject.js create mode 100644 startos-registry/node_modules/es-object-atoms/package.json create mode 100644 startos-registry/node_modules/es-object-atoms/test/index.js create mode 100644 startos-registry/node_modules/es-object-atoms/tsconfig.json create mode 100644 startos-registry/node_modules/escape-html/LICENSE create mode 100644 startos-registry/node_modules/escape-html/Readme.md create mode 100644 startos-registry/node_modules/escape-html/index.js create mode 100644 startos-registry/node_modules/escape-html/package.json create mode 100644 startos-registry/node_modules/etag/HISTORY.md create mode 100644 startos-registry/node_modules/etag/LICENSE create mode 100644 startos-registry/node_modules/etag/README.md create mode 100644 startos-registry/node_modules/etag/index.js create mode 100644 startos-registry/node_modules/etag/package.json create mode 100644 startos-registry/node_modules/express/History.md create mode 100644 startos-registry/node_modules/express/LICENSE create mode 100644 startos-registry/node_modules/express/Readme.md create mode 100644 startos-registry/node_modules/express/index.js create mode 100644 startos-registry/node_modules/express/lib/application.js create mode 100644 startos-registry/node_modules/express/lib/express.js create mode 100644 startos-registry/node_modules/express/lib/middleware/init.js create mode 100644 startos-registry/node_modules/express/lib/middleware/query.js create mode 100644 startos-registry/node_modules/express/lib/request.js create mode 100644 startos-registry/node_modules/express/lib/response.js create mode 100644 startos-registry/node_modules/express/lib/router/index.js create mode 100644 startos-registry/node_modules/express/lib/router/layer.js create mode 100644 startos-registry/node_modules/express/lib/router/route.js create mode 100644 startos-registry/node_modules/express/lib/utils.js create mode 100644 startos-registry/node_modules/express/lib/view.js create mode 100644 startos-registry/node_modules/express/package.json create mode 100644 startos-registry/node_modules/finalhandler/HISTORY.md create mode 100644 startos-registry/node_modules/finalhandler/LICENSE create mode 100644 startos-registry/node_modules/finalhandler/README.md create mode 100644 startos-registry/node_modules/finalhandler/SECURITY.md create mode 100644 startos-registry/node_modules/finalhandler/index.js create mode 100644 startos-registry/node_modules/finalhandler/package.json create mode 100644 startos-registry/node_modules/forwarded/HISTORY.md create mode 100644 startos-registry/node_modules/forwarded/LICENSE create mode 100644 startos-registry/node_modules/forwarded/README.md create mode 100644 startos-registry/node_modules/forwarded/index.js create mode 100644 startos-registry/node_modules/forwarded/package.json create mode 100644 startos-registry/node_modules/fresh/HISTORY.md create mode 100644 startos-registry/node_modules/fresh/LICENSE create mode 100644 startos-registry/node_modules/fresh/README.md create mode 100644 startos-registry/node_modules/fresh/index.js create mode 100644 startos-registry/node_modules/fresh/package.json create mode 100644 startos-registry/node_modules/function-bind/.eslintrc create mode 100644 startos-registry/node_modules/function-bind/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/function-bind/.github/SECURITY.md create mode 100644 startos-registry/node_modules/function-bind/.nycrc create mode 100644 startos-registry/node_modules/function-bind/CHANGELOG.md create mode 100644 startos-registry/node_modules/function-bind/LICENSE create mode 100644 startos-registry/node_modules/function-bind/README.md create mode 100644 startos-registry/node_modules/function-bind/implementation.js create mode 100644 startos-registry/node_modules/function-bind/index.js create mode 100644 startos-registry/node_modules/function-bind/package.json create mode 100644 startos-registry/node_modules/function-bind/test/.eslintrc create mode 100644 startos-registry/node_modules/function-bind/test/index.js create mode 100644 startos-registry/node_modules/get-intrinsic/.eslintrc create mode 100644 startos-registry/node_modules/get-intrinsic/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/get-intrinsic/.nycrc create mode 100644 startos-registry/node_modules/get-intrinsic/CHANGELOG.md create mode 100644 startos-registry/node_modules/get-intrinsic/LICENSE create mode 100644 startos-registry/node_modules/get-intrinsic/README.md create mode 100644 startos-registry/node_modules/get-intrinsic/index.js create mode 100644 startos-registry/node_modules/get-intrinsic/package.json create mode 100644 startos-registry/node_modules/get-intrinsic/test/GetIntrinsic.js create mode 100644 startos-registry/node_modules/get-proto/.eslintrc create mode 100644 startos-registry/node_modules/get-proto/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/get-proto/.nycrc create mode 100644 startos-registry/node_modules/get-proto/CHANGELOG.md create mode 100644 startos-registry/node_modules/get-proto/LICENSE create mode 100644 startos-registry/node_modules/get-proto/Object.getPrototypeOf.d.ts create mode 100644 startos-registry/node_modules/get-proto/Object.getPrototypeOf.js create mode 100644 startos-registry/node_modules/get-proto/README.md create mode 100644 startos-registry/node_modules/get-proto/Reflect.getPrototypeOf.d.ts create mode 100644 startos-registry/node_modules/get-proto/Reflect.getPrototypeOf.js create mode 100644 startos-registry/node_modules/get-proto/index.d.ts create mode 100644 startos-registry/node_modules/get-proto/index.js create mode 100644 startos-registry/node_modules/get-proto/package.json create mode 100644 startos-registry/node_modules/get-proto/test/index.js create mode 100644 startos-registry/node_modules/get-proto/tsconfig.json create mode 100644 startos-registry/node_modules/gopd/.eslintrc create mode 100644 startos-registry/node_modules/gopd/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/gopd/CHANGELOG.md create mode 100644 startos-registry/node_modules/gopd/LICENSE create mode 100644 startos-registry/node_modules/gopd/README.md create mode 100644 startos-registry/node_modules/gopd/gOPD.d.ts create mode 100644 startos-registry/node_modules/gopd/gOPD.js create mode 100644 startos-registry/node_modules/gopd/index.d.ts create mode 100644 startos-registry/node_modules/gopd/index.js create mode 100644 startos-registry/node_modules/gopd/package.json create mode 100644 startos-registry/node_modules/gopd/test/index.js create mode 100644 startos-registry/node_modules/gopd/tsconfig.json create mode 100644 startos-registry/node_modules/has-symbols/.eslintrc create mode 100644 startos-registry/node_modules/has-symbols/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/has-symbols/.nycrc create mode 100644 startos-registry/node_modules/has-symbols/CHANGELOG.md create mode 100644 startos-registry/node_modules/has-symbols/LICENSE create mode 100644 startos-registry/node_modules/has-symbols/README.md create mode 100644 startos-registry/node_modules/has-symbols/index.d.ts create mode 100644 startos-registry/node_modules/has-symbols/index.js create mode 100644 startos-registry/node_modules/has-symbols/package.json create mode 100644 startos-registry/node_modules/has-symbols/shams.d.ts create mode 100644 startos-registry/node_modules/has-symbols/shams.js create mode 100644 startos-registry/node_modules/has-symbols/test/index.js create mode 100644 startos-registry/node_modules/has-symbols/test/shams/core-js.js create mode 100644 startos-registry/node_modules/has-symbols/test/shams/get-own-property-symbols.js create mode 100644 startos-registry/node_modules/has-symbols/test/tests.js create mode 100644 startos-registry/node_modules/has-symbols/tsconfig.json create mode 100644 startos-registry/node_modules/hasown/.eslintrc create mode 100644 startos-registry/node_modules/hasown/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/hasown/.nycrc create mode 100644 startos-registry/node_modules/hasown/CHANGELOG.md create mode 100644 startos-registry/node_modules/hasown/LICENSE create mode 100644 startos-registry/node_modules/hasown/README.md create mode 100644 startos-registry/node_modules/hasown/index.d.ts create mode 100644 startos-registry/node_modules/hasown/index.js create mode 100644 startos-registry/node_modules/hasown/package.json create mode 100644 startos-registry/node_modules/hasown/tsconfig.json create mode 100644 startos-registry/node_modules/http-errors/HISTORY.md create mode 100644 startos-registry/node_modules/http-errors/LICENSE create mode 100644 startos-registry/node_modules/http-errors/README.md create mode 100644 startos-registry/node_modules/http-errors/index.js create mode 100644 startos-registry/node_modules/http-errors/package.json create mode 100644 startos-registry/node_modules/iconv-lite/Changelog.md create mode 100644 startos-registry/node_modules/iconv-lite/LICENSE create mode 100644 startos-registry/node_modules/iconv-lite/README.md create mode 100644 startos-registry/node_modules/iconv-lite/encodings/dbcs-codec.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/dbcs-data.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/index.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/internal.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/sbcs-codec.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/sbcs-data-generated.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/sbcs-data.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/big5-added.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/cp936.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/cp949.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/cp950.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/eucjp.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/gb18030-ranges.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/gbk-added.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/tables/shiftjis.json create mode 100644 startos-registry/node_modules/iconv-lite/encodings/utf16.js create mode 100644 startos-registry/node_modules/iconv-lite/encodings/utf7.js create mode 100644 startos-registry/node_modules/iconv-lite/lib/bom-handling.js create mode 100644 startos-registry/node_modules/iconv-lite/lib/extend-node.js create mode 100644 startos-registry/node_modules/iconv-lite/lib/index.d.ts create mode 100644 startos-registry/node_modules/iconv-lite/lib/index.js create mode 100644 startos-registry/node_modules/iconv-lite/lib/streams.js create mode 100644 startos-registry/node_modules/iconv-lite/package.json create mode 100644 startos-registry/node_modules/inherits/LICENSE create mode 100644 startos-registry/node_modules/inherits/README.md create mode 100644 startos-registry/node_modules/inherits/inherits.js create mode 100644 startos-registry/node_modules/inherits/inherits_browser.js create mode 100644 startos-registry/node_modules/inherits/package.json create mode 100644 startos-registry/node_modules/ipaddr.js/LICENSE create mode 100644 startos-registry/node_modules/ipaddr.js/README.md create mode 100644 startos-registry/node_modules/ipaddr.js/ipaddr.min.js create mode 100644 startos-registry/node_modules/ipaddr.js/lib/ipaddr.js create mode 100644 startos-registry/node_modules/ipaddr.js/lib/ipaddr.js.d.ts create mode 100644 startos-registry/node_modules/ipaddr.js/package.json create mode 100644 startos-registry/node_modules/math-intrinsics/.eslintrc create mode 100644 startos-registry/node_modules/math-intrinsics/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/math-intrinsics/CHANGELOG.md create mode 100644 startos-registry/node_modules/math-intrinsics/LICENSE create mode 100644 startos-registry/node_modules/math-intrinsics/README.md create mode 100644 startos-registry/node_modules/math-intrinsics/abs.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/abs.js create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxArrayLength.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxArrayLength.js create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxSafeInteger.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxSafeInteger.js create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxValue.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/constants/maxValue.js create mode 100644 startos-registry/node_modules/math-intrinsics/floor.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/floor.js create mode 100644 startos-registry/node_modules/math-intrinsics/isFinite.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/isFinite.js create mode 100644 startos-registry/node_modules/math-intrinsics/isInteger.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/isInteger.js create mode 100644 startos-registry/node_modules/math-intrinsics/isNaN.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/isNaN.js create mode 100644 startos-registry/node_modules/math-intrinsics/isNegativeZero.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/isNegativeZero.js create mode 100644 startos-registry/node_modules/math-intrinsics/max.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/max.js create mode 100644 startos-registry/node_modules/math-intrinsics/min.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/min.js create mode 100644 startos-registry/node_modules/math-intrinsics/mod.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/mod.js create mode 100644 startos-registry/node_modules/math-intrinsics/package.json create mode 100644 startos-registry/node_modules/math-intrinsics/pow.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/pow.js create mode 100644 startos-registry/node_modules/math-intrinsics/round.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/round.js create mode 100644 startos-registry/node_modules/math-intrinsics/sign.d.ts create mode 100644 startos-registry/node_modules/math-intrinsics/sign.js create mode 100644 startos-registry/node_modules/math-intrinsics/test/index.js create mode 100644 startos-registry/node_modules/math-intrinsics/tsconfig.json create mode 100644 startos-registry/node_modules/media-typer/HISTORY.md create mode 100644 startos-registry/node_modules/media-typer/LICENSE create mode 100644 startos-registry/node_modules/media-typer/README.md create mode 100644 startos-registry/node_modules/media-typer/index.js create mode 100644 startos-registry/node_modules/media-typer/package.json create mode 100644 startos-registry/node_modules/merge-descriptors/HISTORY.md create mode 100644 startos-registry/node_modules/merge-descriptors/LICENSE create mode 100644 startos-registry/node_modules/merge-descriptors/README.md create mode 100644 startos-registry/node_modules/merge-descriptors/index.js create mode 100644 startos-registry/node_modules/merge-descriptors/package.json create mode 100644 startos-registry/node_modules/methods/HISTORY.md create mode 100644 startos-registry/node_modules/methods/LICENSE create mode 100644 startos-registry/node_modules/methods/README.md create mode 100644 startos-registry/node_modules/methods/index.js create mode 100644 startos-registry/node_modules/methods/package.json create mode 100644 startos-registry/node_modules/mime-db/HISTORY.md create mode 100644 startos-registry/node_modules/mime-db/LICENSE create mode 100644 startos-registry/node_modules/mime-db/README.md create mode 100644 startos-registry/node_modules/mime-db/db.json create mode 100644 startos-registry/node_modules/mime-db/index.js create mode 100644 startos-registry/node_modules/mime-db/package.json create mode 100644 startos-registry/node_modules/mime-types/HISTORY.md create mode 100644 startos-registry/node_modules/mime-types/LICENSE create mode 100644 startos-registry/node_modules/mime-types/README.md create mode 100644 startos-registry/node_modules/mime-types/index.js create mode 100644 startos-registry/node_modules/mime-types/package.json create mode 100644 startos-registry/node_modules/mime/.npmignore create mode 100644 startos-registry/node_modules/mime/CHANGELOG.md create mode 100644 startos-registry/node_modules/mime/LICENSE create mode 100644 startos-registry/node_modules/mime/README.md create mode 100755 startos-registry/node_modules/mime/cli.js create mode 100644 startos-registry/node_modules/mime/mime.js create mode 100644 startos-registry/node_modules/mime/package.json create mode 100755 startos-registry/node_modules/mime/src/build.js create mode 100644 startos-registry/node_modules/mime/src/test.js create mode 100644 startos-registry/node_modules/mime/types.json create mode 100644 startos-registry/node_modules/ms/index.js create mode 100644 startos-registry/node_modules/ms/license.md create mode 100644 startos-registry/node_modules/ms/package.json create mode 100644 startos-registry/node_modules/ms/readme.md create mode 100644 startos-registry/node_modules/negotiator/HISTORY.md create mode 100644 startos-registry/node_modules/negotiator/LICENSE create mode 100644 startos-registry/node_modules/negotiator/README.md create mode 100644 startos-registry/node_modules/negotiator/index.js create mode 100644 startos-registry/node_modules/negotiator/lib/charset.js create mode 100644 startos-registry/node_modules/negotiator/lib/encoding.js create mode 100644 startos-registry/node_modules/negotiator/lib/language.js create mode 100644 startos-registry/node_modules/negotiator/lib/mediaType.js create mode 100644 startos-registry/node_modules/negotiator/package.json create mode 100644 startos-registry/node_modules/object-inspect/.eslintrc create mode 100644 startos-registry/node_modules/object-inspect/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/object-inspect/.nycrc create mode 100644 startos-registry/node_modules/object-inspect/CHANGELOG.md create mode 100644 startos-registry/node_modules/object-inspect/LICENSE create mode 100644 startos-registry/node_modules/object-inspect/example/all.js create mode 100644 startos-registry/node_modules/object-inspect/example/circular.js create mode 100644 startos-registry/node_modules/object-inspect/example/fn.js create mode 100644 startos-registry/node_modules/object-inspect/example/inspect.js create mode 100644 startos-registry/node_modules/object-inspect/index.js create mode 100644 startos-registry/node_modules/object-inspect/package-support.json create mode 100644 startos-registry/node_modules/object-inspect/package.json create mode 100644 startos-registry/node_modules/object-inspect/readme.markdown create mode 100644 startos-registry/node_modules/object-inspect/test-core-js.js create mode 100644 startos-registry/node_modules/object-inspect/test/bigint.js create mode 100644 startos-registry/node_modules/object-inspect/test/browser/dom.js create mode 100644 startos-registry/node_modules/object-inspect/test/circular.js create mode 100644 startos-registry/node_modules/object-inspect/test/deep.js create mode 100644 startos-registry/node_modules/object-inspect/test/element.js create mode 100644 startos-registry/node_modules/object-inspect/test/err.js create mode 100644 startos-registry/node_modules/object-inspect/test/fakes.js create mode 100644 startos-registry/node_modules/object-inspect/test/fn.js create mode 100644 startos-registry/node_modules/object-inspect/test/global.js create mode 100644 startos-registry/node_modules/object-inspect/test/has.js create mode 100644 startos-registry/node_modules/object-inspect/test/holes.js create mode 100644 startos-registry/node_modules/object-inspect/test/indent-option.js create mode 100644 startos-registry/node_modules/object-inspect/test/inspect.js create mode 100644 startos-registry/node_modules/object-inspect/test/lowbyte.js create mode 100644 startos-registry/node_modules/object-inspect/test/number.js create mode 100644 startos-registry/node_modules/object-inspect/test/quoteStyle.js create mode 100644 startos-registry/node_modules/object-inspect/test/toStringTag.js create mode 100644 startos-registry/node_modules/object-inspect/test/undef.js create mode 100644 startos-registry/node_modules/object-inspect/test/values.js create mode 100644 startos-registry/node_modules/object-inspect/util.inspect.js create mode 100644 startos-registry/node_modules/on-finished/HISTORY.md create mode 100644 startos-registry/node_modules/on-finished/LICENSE create mode 100644 startos-registry/node_modules/on-finished/README.md create mode 100644 startos-registry/node_modules/on-finished/index.js create mode 100644 startos-registry/node_modules/on-finished/package.json create mode 100644 startos-registry/node_modules/parseurl/HISTORY.md create mode 100644 startos-registry/node_modules/parseurl/LICENSE create mode 100644 startos-registry/node_modules/parseurl/README.md create mode 100644 startos-registry/node_modules/parseurl/index.js create mode 100644 startos-registry/node_modules/parseurl/package.json create mode 100644 startos-registry/node_modules/path-to-regexp/LICENSE create mode 100644 startos-registry/node_modules/path-to-regexp/Readme.md create mode 100644 startos-registry/node_modules/path-to-regexp/index.js create mode 100644 startos-registry/node_modules/path-to-regexp/package.json create mode 100644 startos-registry/node_modules/proxy-addr/HISTORY.md create mode 100644 startos-registry/node_modules/proxy-addr/LICENSE create mode 100644 startos-registry/node_modules/proxy-addr/README.md create mode 100644 startos-registry/node_modules/proxy-addr/index.js create mode 100644 startos-registry/node_modules/proxy-addr/package.json create mode 100644 startos-registry/node_modules/qs/.editorconfig create mode 100644 startos-registry/node_modules/qs/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/qs/.github/SECURITY.md create mode 100644 startos-registry/node_modules/qs/.github/THREAT_MODEL.md create mode 100644 startos-registry/node_modules/qs/.nycrc create mode 100644 startos-registry/node_modules/qs/CHANGELOG.md create mode 100644 startos-registry/node_modules/qs/LICENSE.md create mode 100644 startos-registry/node_modules/qs/README.md create mode 100644 startos-registry/node_modules/qs/dist/qs.js create mode 100644 startos-registry/node_modules/qs/eslint.config.mjs create mode 100644 startos-registry/node_modules/qs/lib/formats.js create mode 100644 startos-registry/node_modules/qs/lib/index.js create mode 100644 startos-registry/node_modules/qs/lib/parse.js create mode 100644 startos-registry/node_modules/qs/lib/stringify.js create mode 100644 startos-registry/node_modules/qs/lib/utils.js create mode 100644 startos-registry/node_modules/qs/package.json create mode 100644 startos-registry/node_modules/qs/test/empty-keys-cases.js create mode 100644 startos-registry/node_modules/qs/test/parse.js create mode 100644 startos-registry/node_modules/qs/test/stringify.js create mode 100644 startos-registry/node_modules/qs/test/utils.js create mode 100644 startos-registry/node_modules/range-parser/HISTORY.md create mode 100644 startos-registry/node_modules/range-parser/LICENSE create mode 100644 startos-registry/node_modules/range-parser/README.md create mode 100644 startos-registry/node_modules/range-parser/index.js create mode 100644 startos-registry/node_modules/range-parser/package.json create mode 100644 startos-registry/node_modules/raw-body/LICENSE create mode 100644 startos-registry/node_modules/raw-body/README.md create mode 100644 startos-registry/node_modules/raw-body/index.d.ts create mode 100644 startos-registry/node_modules/raw-body/index.js create mode 100644 startos-registry/node_modules/raw-body/package.json create mode 100644 startos-registry/node_modules/safe-buffer/LICENSE create mode 100644 startos-registry/node_modules/safe-buffer/README.md create mode 100644 startos-registry/node_modules/safe-buffer/index.d.ts create mode 100644 startos-registry/node_modules/safe-buffer/index.js create mode 100644 startos-registry/node_modules/safe-buffer/package.json create mode 100644 startos-registry/node_modules/safer-buffer/LICENSE create mode 100644 startos-registry/node_modules/safer-buffer/Porting-Buffer.md create mode 100644 startos-registry/node_modules/safer-buffer/Readme.md create mode 100644 startos-registry/node_modules/safer-buffer/dangerous.js create mode 100644 startos-registry/node_modules/safer-buffer/package.json create mode 100644 startos-registry/node_modules/safer-buffer/safer.js create mode 100644 startos-registry/node_modules/safer-buffer/tests.js create mode 100644 startos-registry/node_modules/send/HISTORY.md create mode 100644 startos-registry/node_modules/send/LICENSE create mode 100644 startos-registry/node_modules/send/README.md create mode 100644 startos-registry/node_modules/send/SECURITY.md create mode 100644 startos-registry/node_modules/send/index.js create mode 100644 startos-registry/node_modules/send/node_modules/ms/index.js create mode 100644 startos-registry/node_modules/send/node_modules/ms/license.md create mode 100644 startos-registry/node_modules/send/node_modules/ms/package.json create mode 100644 startos-registry/node_modules/send/node_modules/ms/readme.md create mode 100644 startos-registry/node_modules/send/package.json create mode 100644 startos-registry/node_modules/serve-static/HISTORY.md create mode 100644 startos-registry/node_modules/serve-static/LICENSE create mode 100644 startos-registry/node_modules/serve-static/README.md create mode 100644 startos-registry/node_modules/serve-static/index.js create mode 100644 startos-registry/node_modules/serve-static/package.json create mode 100644 startos-registry/node_modules/setprototypeof/LICENSE create mode 100644 startos-registry/node_modules/setprototypeof/README.md create mode 100644 startos-registry/node_modules/setprototypeof/index.d.ts create mode 100644 startos-registry/node_modules/setprototypeof/index.js create mode 100644 startos-registry/node_modules/setprototypeof/package.json create mode 100644 startos-registry/node_modules/setprototypeof/test/index.js create mode 100644 startos-registry/node_modules/side-channel-list/.editorconfig create mode 100644 startos-registry/node_modules/side-channel-list/.eslintrc create mode 100644 startos-registry/node_modules/side-channel-list/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/side-channel-list/.nycrc create mode 100644 startos-registry/node_modules/side-channel-list/CHANGELOG.md create mode 100644 startos-registry/node_modules/side-channel-list/LICENSE create mode 100644 startos-registry/node_modules/side-channel-list/README.md create mode 100644 startos-registry/node_modules/side-channel-list/index.d.ts create mode 100644 startos-registry/node_modules/side-channel-list/index.js create mode 100644 startos-registry/node_modules/side-channel-list/list.d.ts create mode 100644 startos-registry/node_modules/side-channel-list/package.json create mode 100644 startos-registry/node_modules/side-channel-list/test/index.js create mode 100644 startos-registry/node_modules/side-channel-list/tsconfig.json create mode 100644 startos-registry/node_modules/side-channel-map/.editorconfig create mode 100644 startos-registry/node_modules/side-channel-map/.eslintrc create mode 100644 startos-registry/node_modules/side-channel-map/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/side-channel-map/.nycrc create mode 100644 startos-registry/node_modules/side-channel-map/CHANGELOG.md create mode 100644 startos-registry/node_modules/side-channel-map/LICENSE create mode 100644 startos-registry/node_modules/side-channel-map/README.md create mode 100644 startos-registry/node_modules/side-channel-map/index.d.ts create mode 100644 startos-registry/node_modules/side-channel-map/index.js create mode 100644 startos-registry/node_modules/side-channel-map/package.json create mode 100644 startos-registry/node_modules/side-channel-map/test/index.js create mode 100644 startos-registry/node_modules/side-channel-map/tsconfig.json create mode 100644 startos-registry/node_modules/side-channel-weakmap/.editorconfig create mode 100644 startos-registry/node_modules/side-channel-weakmap/.eslintrc create mode 100644 startos-registry/node_modules/side-channel-weakmap/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/side-channel-weakmap/.nycrc create mode 100644 startos-registry/node_modules/side-channel-weakmap/CHANGELOG.md create mode 100644 startos-registry/node_modules/side-channel-weakmap/LICENSE create mode 100644 startos-registry/node_modules/side-channel-weakmap/README.md create mode 100644 startos-registry/node_modules/side-channel-weakmap/index.d.ts create mode 100644 startos-registry/node_modules/side-channel-weakmap/index.js create mode 100644 startos-registry/node_modules/side-channel-weakmap/package.json create mode 100644 startos-registry/node_modules/side-channel-weakmap/test/index.js create mode 100644 startos-registry/node_modules/side-channel-weakmap/tsconfig.json create mode 100644 startos-registry/node_modules/side-channel/.editorconfig create mode 100644 startos-registry/node_modules/side-channel/.eslintrc create mode 100644 startos-registry/node_modules/side-channel/.github/FUNDING.yml create mode 100644 startos-registry/node_modules/side-channel/.nycrc create mode 100644 startos-registry/node_modules/side-channel/CHANGELOG.md create mode 100644 startos-registry/node_modules/side-channel/LICENSE create mode 100644 startos-registry/node_modules/side-channel/README.md create mode 100644 startos-registry/node_modules/side-channel/index.d.ts create mode 100644 startos-registry/node_modules/side-channel/index.js create mode 100644 startos-registry/node_modules/side-channel/package.json create mode 100644 startos-registry/node_modules/side-channel/test/index.js create mode 100644 startos-registry/node_modules/side-channel/tsconfig.json create mode 100644 startos-registry/node_modules/statuses/HISTORY.md create mode 100644 startos-registry/node_modules/statuses/LICENSE create mode 100644 startos-registry/node_modules/statuses/README.md create mode 100644 startos-registry/node_modules/statuses/codes.json create mode 100644 startos-registry/node_modules/statuses/index.js create mode 100644 startos-registry/node_modules/statuses/package.json create mode 100644 startos-registry/node_modules/toidentifier/HISTORY.md create mode 100644 startos-registry/node_modules/toidentifier/LICENSE create mode 100644 startos-registry/node_modules/toidentifier/README.md create mode 100644 startos-registry/node_modules/toidentifier/index.js create mode 100644 startos-registry/node_modules/toidentifier/package.json create mode 100644 startos-registry/node_modules/type-is/HISTORY.md create mode 100644 startos-registry/node_modules/type-is/LICENSE create mode 100644 startos-registry/node_modules/type-is/README.md create mode 100644 startos-registry/node_modules/type-is/index.js create mode 100644 startos-registry/node_modules/type-is/package.json create mode 100644 startos-registry/node_modules/unpipe/HISTORY.md create mode 100644 startos-registry/node_modules/unpipe/LICENSE create mode 100644 startos-registry/node_modules/unpipe/README.md create mode 100644 startos-registry/node_modules/unpipe/index.js create mode 100644 startos-registry/node_modules/unpipe/package.json create mode 100644 startos-registry/node_modules/utils-merge/.npmignore create mode 100644 startos-registry/node_modules/utils-merge/LICENSE create mode 100644 startos-registry/node_modules/utils-merge/README.md create mode 100644 startos-registry/node_modules/utils-merge/index.js create mode 100644 startos-registry/node_modules/utils-merge/package.json create mode 100644 startos-registry/node_modules/vary/HISTORY.md create mode 100644 startos-registry/node_modules/vary/LICENSE create mode 100644 startos-registry/node_modules/vary/README.md create mode 100644 startos-registry/node_modules/vary/index.js create mode 100644 startos-registry/node_modules/vary/package.json create mode 100644 startos-registry/package-lock.json create mode 100644 startos-registry/package.json create mode 100644 startos-registry/packages/youtube-summarizer/INSTRUCTIONS.md create mode 100644 startos-registry/packages/youtube-summarizer/LICENSE create mode 100644 startos-registry/packages/youtube-summarizer/icon.png create mode 100644 startos-registry/packages/youtube-summarizer/package.json create mode 100644 startos-registry/registry.json create mode 100755 startos-registry/scripts/publish.sh create mode 100755 startos-registry/scripts/setup-vps.sh create mode 100644 startos-registry/server.js create mode 100644 startos-registry/startos-registry.service create mode 100644 startos/actions/setApiKey.ts create mode 100644 startos/file-models/config.json.ts create mode 100644 startos/versions/v0.1.1.ts create mode 100644 startos/versions/v0.1.10.ts create mode 100644 startos/versions/v0.1.11.ts create mode 100644 startos/versions/v0.1.12.ts create mode 100644 startos/versions/v0.1.13.ts create mode 100644 startos/versions/v0.1.14.ts create mode 100644 startos/versions/v0.1.15.ts create mode 100644 startos/versions/v0.1.2.ts create mode 100644 startos/versions/v0.1.3.ts create mode 100644 startos/versions/v0.1.4.ts create mode 100644 startos/versions/v0.1.5.ts create mode 100644 startos/versions/v0.1.6.ts create mode 100644 startos/versions/v0.1.7.ts create mode 100644 startos/versions/v0.1.8.ts create mode 100644 startos/versions/v0.1.9.ts diff --git a/.deploy.env.example b/.deploy.env.example new file mode 100644 index 0000000..ecf2097 --- /dev/null +++ b/.deploy.env.example @@ -0,0 +1,25 @@ +# Copy this file to `.deploy.env` and fill in your values. +# `.deploy.env` is gitignored — it holds secrets. +# +# Usage: make deploy (builds + uploads + registers + re-indexes) +# or bin/deploy.sh (just the deploy step; assumes .s9pk already built) + +# --- FileBrowser upload target --- +# Local URL to your FileBrowser (from the FileBrowser Dashboard → URL column). +FILEBROWSER_URL=https://immense-voyage.local:51165 +FILEBROWSER_USER=your-filebrowser-user +FILEBROWSER_PASS=your-filebrowser-pass + +# Path on FileBrowser to overwrite (leading slash, relative to FB root). +FILEBROWSER_PATH=/websites/packages/youtube-summarizer_x86_64.s9pk + +# --- Start9 server that hosts the registry --- +START9_SERVER=https://immense-voyage.local:62185 + +# --- Public registry --- +# REGISTRY_URL is the JSON-RPC endpoint of your public registry. +REGISTRY_URL=https://registry.satsflows.com +# REGISTRY_PUBLIC_URL is the publicly-reachable URL of the .s9pk file — this +# is the URL clients download from when they install the package. Your +# "Websites" service mirrors /websites/packages/ → files.satsflows.com/. +REGISTRY_PUBLIC_URL=https://files.satsflows.com/youtube-summarizer_x86_64.s9pk diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..f43ed83 --- /dev/null +++ b/.gitignore @@ -0,0 +1,7 @@ +# Deploy secrets — copy .deploy.env.example to .deploy.env and fill in values +.deploy.env + +# Scratch file used by bin/bump-version.sh to pre-fill the release-notes +# prompt. Written by Claude after code changes, consumed + deleted on the +# next `make deploy` / `make bump`. +.release-notes-pending.txt diff --git a/Dockerfile b/Dockerfile index dd3ba77..3b8da7a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,14 +4,23 @@ # Includes: Node.js 20, Python 3, yt-dlp, ffmpeg # # Uses Debian slim (not Alpine) because: -# - yt-dlp's --impersonate chrome requires curl_cffi (compiled C extension) -# - curl_cffi's prebuilt wheels target glibc, not musl # - Debian is more reliable for pip-installed packages with C deps # ───────────────────────────────────────────────────────── # ── Stage 1: Install Node.js dependencies ────────────────── FROM node:20-slim AS builder +# git is required by npm to clone the @keysat/licensing-client git+https +# dependency. Stripped from the final image (only used in this builder stage). +# The url.insteadOf rewrites force npm/git to use https for github.com even +# when npm's git resolver tries ssh first — there's no ssh client or key in +# this container. +RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates \ + && rm -rf /var/lib/apt/lists/* \ + && git config --global --add url."https://github.com/".insteadOf "ssh://git@github.com/" \ + && git config --global --add url."https://github.com/".insteadOf "git@github.com:" \ + && git config --global --add url."https://github.com/".insteadOf "git://github.com/" + WORKDIR /app/server COPY server/package.json server/package-lock.json* ./ RUN npm ci --production --ignore-scripts 2>/dev/null || npm install --production --ignore-scripts @@ -36,13 +45,14 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ ffmpeg \ ca-certificates \ && rm -rf /var/lib/apt/lists/* \ - && pip3 install --break-system-packages yt-dlp curl_cffi \ + && pip3 install --break-system-packages yt-dlp \ && yt-dlp --version # Copy Node.js app from builder COPY --from=builder /app/server/node_modules ./server/node_modules/ COPY server/package.json ./server/ COPY server/index.js ./server/ +COPY server/license.js ./server/ COPY public/ ./public/ COPY assets/ ./assets/ diff --git a/KEYSAT_INTEGRATION.md b/KEYSAT_INTEGRATION.md new file mode 100644 index 0000000..f56a4d8 --- /dev/null +++ b/KEYSAT_INTEGRATION.md @@ -0,0 +1,1378 @@ +# Integrating Keysat licensing into your software + +This document is the complete instruction set for adding Keysat-based +licensing to any application. It covers Node/TypeScript, Python, and Rust. +Hand it to an LLM (or a developer) along with your codebase and ask them +to wire it up — they should have everything they need. + +## How to use this document + +Drop `KEYSAT_INTEGRATION.md` into a fresh session against the target +codebase, then prompt: + +> Read this `KEYSAT_INTEGRATION.md`. Then add Keysat licensing to this +> codebase. Ask the software creator how they would like to license, +> monetize and/or gate their software, including how unlicensed software +> should operate. Use the creator's Keysat public key which can be found +> in the Keysat admin UI. After wiring, summarize what you changed. + +> **Reading this as an LLM?** Your job is to add license-key reading, +> signature verification, and entitlement-based feature gating to the +> target application. Before you write any code, ask the software creator +> the questions in section 0. Then read sections 1–6, then jump to the +> language section (7a/7b/7c) that matches your target codebase. The +> "Worked example" in section 14 is the canonical pattern to mimic. + +--- + +## 0. Questions to ask the software creator before writing code + +Don't write any code until you have answers. The whole licensing model +hangs on these: + +1. **What's the operator's Keysat instance URL?** + (e.g. `https://licensing.example.com`. Used for online validation + and the in-app purchase flow.) +2. **What's the operator's product slug?** + (Short string the operator chose when creating the product in their + Keysat admin. License keys are scoped to this slug.) +3. **What's the operator's signing public key?** + (PEM-formatted Ed25519 public key. Get it from the Keysat admin + Overview tab → "Embed your public key" → Copy. The operator pastes + it; you embed it.) +4. **How should unlicensed users experience the app?** Three legitimate + patterns; pick whichever fits the operator's business model. **None + is "wrong."** + - **Hard gate** — the app downloads freely from the Start9 registry, + but won't function without a paid license. The binary is essentially + a locked installer until the buyer activates. Common for closed-source + paid apps and for open-source apps that the operator chooses to + monetize through the registry distribution. See section 8 for the + two flavors of hard gating (refuse-to-start vs. activate-screen-only). + - **Soft gate** — the app runs and provides basic functionality + unlicensed; specific paid features return 402 with an "Upgrade to + unlock" message. Recommended for free → paid migrations and for + freemium products. + - **Nag mode** — no enforcement; just a "support development" banner + when unlicensed. Pure honor system. Useful when the app is + fundamentally free-to-use but the operator wants a tip-jar. + + Nudge the operator if their answer doesn't match their business + reality. Closed-source-paid + nag-mode is incoherent; freemium + + hard-gate alienates the existing user base. +5. **What are the entitlement strings, and what does each unlock?** + The operator decides; ask them. Common patterns: + - `["self_host"]` for a free tier — "you can run the app, no premium features" + - `["self_host", "export", "ai_features", "team_seats"]` for a paid tier + - `["patron"]` extra for a vanity supporter tier + Document the mapping (entitlement string → feature unlocked) in your + integration so the operator can ship the right policies. +6. **Where should the license key live on disk at runtime?** + Default: `/data/license.txt` for server / containerized apps, or + `~/.config//license.key` for desktop apps. Operator may + override. +7. **Which pricing tiers exist** and roughly what they cost? (Optional + for the integration itself, but useful for shaping the "Upgrade" + message that shows when an unlicensed user hits a paid feature.) + +If the creator doesn't know yet, propose sensible defaults from the +ranges above and confirm before coding. + +8. **Compile a config card before writing code.** After answering 1–7, + produce a short summary the operator can paste into the Keysat admin + without re-deriving anything. This is the single highest-leverage + step for avoiding "wait, what entitlements did we agree on?" churn + later. The card has three parts: + + - **Product**: the slug from question 2. + - **Policies**: each policy's name and the entitlement set it issues. + Treat this as the operator's pricing menu — one policy per tier. + - **Behavior matrix**: caller state → what happens. Lets the operator + sanity-check the gating model (question 4) against the policy set. + + Show the card to the operator, get explicit confirmation, *then* + write code. Example for a two-tier hard-gate-flavor-2 freemium app: + + ``` + Product slug: youtube-summarizer + + Policies to create in Keysat admin: + • Core → entitlements: ["core"] + • Pro → entitlements: ["core", "subscriptions", "history", "library"] + + Entitlement → unlocks: + core — past the activation screen; basic summarize + subscriptions — channel subscriptions, auto-queue + history — saved summary library + library — bulk import/export + + Behavior matrix: + no license → 402 license_required everywhere + Core license → summarize works; subs/history/library = 402 feature_not_in_tier + Pro license → all features available + ``` + + Without this card, mid-implementation drift is near-certain — the LLM + gates on `library_io`, the operator creates a policy with `library`, + and the buyer sees a "feature not in tier" error on a feature they + thought they paid for. + +--- + +## 1. What Keysat does, in one paragraph + +Keysat lets independent software creators sell their work on their own +terms. The operator (the creator) runs a Keysat instance — typically on +a Start9 box — and Keysat handles the buy page, the Bitcoin payment via +BTCPay, and issuing each buyer a signed license key in `LIC1-…-…` form. +**Your software's job** is to read that key from somewhere on disk +(a file, an env var, a config setting) and verify its signature against +the operator's public key. What happens after verification is up to the +creator: maybe the app refuses to function without a license (one-time +purchase model), maybe specific features unlock (free + paid tiers), +maybe nothing changes and the verified license is just used to show a +"thanks for supporting development" badge. You never talk to a Keysat +server at runtime unless you want to — verification is offline, fast +(~1ms), and doesn't depend on the network. + +--- + +## 2. The whole integration in 30 seconds + +``` +1. Install the Keysat SDK in your language. +2. Embed the operator's PUBLIC key into your app at build time. +3. On startup, read the license key from disk; verify it; populate an + `entitlements` set. +4. Throughout your code, gate paid features with `if entitlements.has("X")`. +5. (Optional) On a timer, also call /v1/validate to catch revocations. +``` + +Everything else is polish. + +--- + +## 3. Prerequisites — three things you need from the operator + +1. **A Keysat instance reachable on the public internet.** Typically + something like `https://licensing.example.com`. The operator already + has this; you don't need to install one. +2. **A product slug** the operator created in their Keysat. This is a + short string (`acme-paint-pro`, `myapp`, etc.). Licenses issued for + one slug won't validate against another — this is intentional and + stops a customer from buying a cheap product and using its key to + unlock an expensive one. +3. **The operator's signing public key in PEM form.** This is what you + embed in source. Get it from: + - The admin Overview tab → "Embed your public key" tip card → Copy + - Or `curl https://licensing.example.com/v1/issuer/public-key | jq -r .public_key_pem` + + The PEM is non-secret — **anyone with the public key can verify + licenses but not mint them.** It's safe to commit to source control + and ship in your binary. + +4. **The public buy URL for your product.** Each product on a Keysat + instance has a buyer-facing page at + `/buy/`. Use this for "Buy a key" / + "Upgrade to Pro" links in your app's activation screen, settings, and + per-feature upsell tiles. Compute it from the same constants you've + already embedded — don't hard-code a separate URL that can drift: + + ```ts + const buyUrl = `${KEYSAT_BASE_URL.replace(/\/$/, "")}/buy/${PRODUCT_SLUG}` + ``` + + The simpler "link to a buy page" path (this URL) is fine for most + apps. If you want a more integrated checkout, see section 11 for + `client.startPurchase()`. + +--- + +## 4. The wire format you'll be reading + +License keys look like: + +``` +LIC1-AIAMCWOS5JVHSQE2UMP6PNKXODHSIPHM5O3XQQ2J6CE4XV6WVNMA3BIAAAAA… +``` + +A `LIC1-` prefix, then two base32 segments separated by `-`. The first +segment is a binary payload; the second is an Ed25519 signature over +the payload. The SDK parses and verifies in one call. You should never +need to handle the encoding manually. + +The signed payload contains: +- `product_id` (UUID) — for matching against your product slug +- `license_id` (UUID) — useful for logging +- `issued_at` (Unix seconds) +- `expires_at` (Unix seconds; 0 means perpetual) +- `flags` (bitfield; `FLAG_TRIAL=1`) +- `entitlements: string[]` — **this is the array you gate features on** +- `fingerprint_hash` (32 bytes; for online machine-binding) + +Your software reads `entitlements` and decides what to unlock. + +--- + +## 5. Where to read the license from + +There's no one-size-fits-all answer; pick one based on how your users +interact with your app. **Recommended order**: + +1. **A file in the user's data directory.** On Linux this is typically + `~/.config//license.key`, or `/data/license.txt` for + server software running in a container. The file contains exactly + one line: the raw `LIC1-…` string. This is the most common pattern. + +2. **An environment variable** like `MYAPP_LICENSE_KEY`. Useful for + server-side software, CLIs, Docker Compose, and systemd. Easy to + set, but users forget they set it and lose track. + +3. **A "paste your license key" UI** in your app's settings, with the + value persisted to localStorage / OS keychain / your own config. + Most familiar to users coming from commercial software. + +4. **Multiple of the above.** A common pattern is: "env var first, + then file, then UI prompt." All three give you a license string + either way; the SDK doesn't care where it came from. + +For Start9 packages: there's a [activate-license-template](./activate-license-template/) +that wires this up for you using StartOS Actions and the package store. +Copy that template, replace the slug, and you've got Pattern 1 + a +StartOS Actions UI for buyers to paste keys into. + +--- + +## 6. The canonical integration pattern + +Every integration follows the same shape regardless of language and +regardless of which enforcement model from question 4 the operator picked. +The verify-once-at-startup primitive is the same; what you do with the +result is what changes. + +``` +on startup: + raw_key = read_license_string() # file, env, or UI value + license_state = {state: 'unlicensed', entitlements: []} + if raw_key is not None: + result = verify(raw_key, ISSUER_PEM) # SDK call + if result.is_valid: + license_state = { + state: 'licensed', + entitlements: result.entitlements, + license_id: result.license_id, + expires_at: result.expires_at, + } + else: + log("license rejected: " + result.reason) + + # Then — depending on the operator's chosen model: + # + # HARD GATE : if not licensed, exit (Flavor 1) or block all + # business endpoints (Flavor 2). See section 7d. + # + # SOFT GATE : run normally; specific feature handlers consult + # license_state.entitlements before unlocking. + # See section 7a/7b/7c. + # + # NAG MODE : run normally; show a "support development" banner + # in the UI when license_state.state != 'licensed'. +``` + +The verify-and-populate-state step is identical for all three models. +The doc is structured the same way: section 7 covers the verify +primitive in each language; section 7d covers the hard-gate enforcement +flavors; the worked examples in section 14 show soft-gate; the +patterns are mix-and-match. + +**One universal rule across all three models:** never hard-fail on +*network* errors during the optional online `validate()` call (section 9). +That's separate from refusing to start when no license is present — which +is fine for hard-gate Flavor 1. The thing to avoid is making your app's +uptime depend on the operator's licensing server being reachable. + +**Don't forget background workers.** HTTP middleware gates only catch +incoming requests. If you have in-process timers, schedulers, queue +consumers, or other background jobs that exercise gated features, add +an explicit early-return at the top of each one: + +```js +async function checkSubscriptionsBackground() { + if (!LIC.entitlements.has("subscriptions")) return // skip silently + // … existing work +} +``` + +Otherwise an unlicensed (or insufficient-tier) instance will keep doing +work the buyer didn't pay for — wasting bandwidth, API quota, and +server CPU, and producing stale state in the UI when entitlements are +later restored. This bites people because the server returns 402 to +direct callers but the timer keeps humming along. + +--- + +## 7. Language-specific implementations + +### 7a. TypeScript / Node + +**Install (preferred, once published):** + +```bash +npm install @keysat/licensing-client +``` + +**GitHub fallback** (if the npm package isn't published yet). Several +prerequisites must be met for this path to work end-to-end: + +1. The `keysat-xyz/keysat-client-ts` repo must be **public** on GitHub. + Private repos require credentials, which fails inside hermetic build + environments (Docker, CI, fresh dev machines without an SSH key). If + the repo flips public temporarily for one build, every future build + re-hits this wall — prefer publishing to npm if at all possible. +2. The repo must include a `prepare` script in `package.json` that + builds `dist/` on git-install. This is fixed as of this doc; if you + see `Cannot find module '...dist/index.cjs'` after install, the SDK + you're pulling pre-dates the fix and you need a newer commit. +3. **Use the explicit `git+https://` URL form**, not the `github:` + shorthand: + + ```jsonc + // package.json + "@keysat/licensing-client": "git+https://github.com/keysat-xyz/keysat-client-ts.git" + ``` + + The `github:user/repo` shorthand often resolves to `git+ssh://...` + on machines with an existing GitHub SSH key, which then breaks for + any subsequent integrator without a key (CI, Docker, a fresh laptop). + +4. **If you switched from `github:` to `git+https://`, also delete the + stale lock-file entry.** `npm install` will keep the previous + `resolved: "git+ssh://..."` line in `package-lock.json` even after + you change the spec in `package.json`. The fastest fix is: + + ```bash + rm package-lock.json node_modules + npm cache clean --force + npm install + ``` + + Or hand-edit the `resolved:` field of the offending entry to swap + `git+ssh://` → `git+https://`, leaving the commit hash unchanged. + +When all four are satisfied: + +```bash +npm install github:keysat-xyz/keysat-client-ts +``` + +**Embed the public key.** The simplest way is to commit the PEM file +to your repo at `assets/issuer.pub` and import it as a raw string: + +```ts +// in your bundler config (Vite shown) +import issuerPem from './assets/issuer.pub?raw' +``` + +Or in plain Node: + +```ts +import { readFileSync } from 'node:fs' +import * as path from 'node:path' +const issuerPem = readFileSync(path.join(__dirname, 'assets/issuer.pub'), 'utf8') +``` + +**Verify on startup:** + +```ts +import { Verifier, PublicKey } from '@keysat/licensing-client' +import { readFileSync } from 'node:fs' + +const PRODUCT_SLUG = '' +const LICENSE_PATH = process.env.MYAPP_LICENSE_KEY_PATH || '/data/license.txt' + +function readLicenseKey(): string | null { + if (process.env.MYAPP_LICENSE_KEY) return process.env.MYAPP_LICENSE_KEY.trim() + try { return readFileSync(LICENSE_PATH, 'utf8').trim() } + catch { return null } +} + +const verifier = new Verifier(PublicKey.fromPem(issuerPem)) + +export interface LicenseState { + state: 'licensed' | 'unlicensed' | 'invalid' + reason?: string + licenseId?: string + entitlements: Set + expiresAt?: Date + isTrial?: boolean +} + +export function checkLicense(): LicenseState { + const raw = readLicenseKey() + if (!raw) return { state: 'unlicensed', entitlements: new Set() } + try { + const ok = verifier.verify(raw) + // (optional) reject keys for the wrong product slug + if (ok.payload.productSlug && ok.payload.productSlug !== PRODUCT_SLUG) { + return { state: 'invalid', reason: 'product_mismatch', entitlements: new Set() } + } + return { + state: 'licensed', + licenseId: ok.payload.licenseId, + entitlements: new Set(ok.payload.entitlements || []), + expiresAt: ok.payload.expiresAt + ? new Date(ok.payload.expiresAt * 1000) + : undefined, + isTrial: !!(ok.payload.flags & 1), + } + } catch (e: any) { + return { state: 'invalid', reason: e.message, entitlements: new Set() } + } +} +``` + +**Use the state object** wherever a feature is gated: + +```ts +const lic = checkLicense() +console.log(`[license] state=${lic.state} entitlements=[${[...lic.entitlements].join(',')}]`) + +// In an Express route: +app.post('/api/export', (req, res) => { + if (!lic.entitlements.has('export')) { + return res.status(402).json({ + error: 'feature_not_in_tier', + message: 'Export requires a paid license. See .', + }) + } + // ... existing export logic +}) +``` + +### 7b. Python + +**Install (preferred, once published):** + +```bash +pip install keysat-licensing-client +``` + +**GitHub fallback** (if the PyPI package isn't published yet). The +`keysat-xyz/keysat-client-python` repo must be **public** on GitHub +for this to work in clean environments: + +```bash +pip install git+https://github.com/keysat-xyz/keysat-client-python.git +``` + +(Python's pip-from-git path is simpler than npm's — no separate build +step is required since pure-Python packages are installable from source.) + +**Embed the public key** at a path your code can read: + +```python +# myapp/license.py +from pathlib import Path +ISSUER_PEM = (Path(__file__).parent / 'assets' / 'issuer.pub').read_text() +``` + +**Verify on startup:** + +```python +# myapp/license.py +import os +from dataclasses import dataclass, field +from datetime import datetime +from pathlib import Path +from typing import Optional + +from keysat_licensing_client import Verifier + +PRODUCT_SLUG = '' +LICENSE_PATH = os.environ.get('MYAPP_LICENSE_KEY_PATH', '/data/license.txt') + +ISSUER_PEM = (Path(__file__).parent / 'assets' / 'issuer.pub').read_text() +_verifier = Verifier.from_pem(ISSUER_PEM) + + +@dataclass +class LicenseState: + state: str # 'licensed' | 'unlicensed' | 'invalid' + reason: Optional[str] = None + license_id: Optional[str] = None + entitlements: set = field(default_factory=set) + expires_at: Optional[datetime] = None + is_trial: bool = False + + +def _read_license_key() -> Optional[str]: + if env := os.environ.get('MYAPP_LICENSE_KEY'): + return env.strip() + try: + return Path(LICENSE_PATH).read_text().strip() + except (FileNotFoundError, PermissionError): + return None + + +def check_license() -> LicenseState: + raw = _read_license_key() + if not raw: + return LicenseState(state='unlicensed') + try: + ok = _verifier.verify(raw) + return LicenseState( + state='licensed', + license_id=str(ok.payload.license_id), + entitlements=set(ok.payload.entitlements or []), + expires_at=datetime.fromtimestamp(ok.payload.expires_at) + if ok.payload.expires_at else None, + is_trial=bool(ok.payload.flags & 1), + ) + except Exception as e: + return LicenseState(state='invalid', reason=str(e)) +``` + +**Use it:** + +```python +# myapp/server.py +from .license import check_license + +LIC = check_license() +print(f'[license] state={LIC.state} entitlements={LIC.entitlements}') + +@app.post('/api/export') +def export_endpoint(): + if 'export' not in LIC.entitlements: + abort(402, description={ + 'error': 'feature_not_in_tier', + 'message': 'Export requires a paid license.', + }) + # ... do the thing +``` + +### 7c. Rust + +**Install (preferred, once published):** + +```toml +# Cargo.toml +[dependencies] +keysat-licensing-client = "0.1" +``` + +**Git fallback** (if not on crates.io yet). The +`keysat-xyz/keysat-client-rust` repo must be **public** on GitHub: + +```toml +keysat-licensing-client = { git = "https://github.com/keysat-xyz/keysat-client-rust.git" } +``` + +Cargo builds from source, so no separate build step is required. + +**Embed the public key:** + +```rust +const ISSUER_PEM: &str = include_str!("../assets/issuer.pub"); +``` + +**Verify on startup:** + +```rust +// src/license.rs +use keysat_licensing_client::{Verifier, PublicKeyPem}; +use std::collections::HashSet; +use std::path::PathBuf; + +pub const PRODUCT_SLUG: &str = ""; +pub const ISSUER_PEM: &str = include_str!("../assets/issuer.pub"); + +#[derive(Debug, Clone)] +pub struct LicenseState { + pub state: &'static str, // "licensed" | "unlicensed" | "invalid" + pub reason: Option, + pub license_id: Option, + pub entitlements: HashSet, + pub expires_at: Option>, + pub is_trial: bool, +} + +impl Default for LicenseState { + fn default() -> Self { + Self { + state: "unlicensed", + reason: None, + license_id: None, + entitlements: HashSet::new(), + expires_at: None, + is_trial: false, + } + } +} + +fn read_license_key() -> Option { + if let Ok(s) = std::env::var("MYAPP_LICENSE_KEY") { + let s = s.trim().to_string(); + if !s.is_empty() { return Some(s) } + } + let path = std::env::var("MYAPP_LICENSE_KEY_PATH") + .unwrap_or_else(|_| "/data/license.txt".to_string()); + std::fs::read_to_string(PathBuf::from(path)) + .ok() + .map(|s| s.trim().to_string()) + .filter(|s| !s.is_empty()) +} + +pub fn check_license() -> LicenseState { + let raw = match read_license_key() { + Some(s) => s, + None => return LicenseState::default(), + }; + let pubkey = match PublicKeyPem::from_str(ISSUER_PEM) { + Ok(k) => k, + Err(e) => return LicenseState { + state: "invalid", reason: Some(format!("bad pubkey embedded: {e}")), + ..Default::default() + }, + }; + let verifier = Verifier::new(pubkey); + match verifier.verify(&raw) { + Ok(ok) => LicenseState { + state: "licensed", + license_id: Some(ok.payload.license_id.to_string()), + entitlements: ok.payload.entitlements.into_iter().collect(), + expires_at: if ok.payload.expires_at == 0 { + None + } else { + chrono::DateTime::from_timestamp(ok.payload.expires_at, 0) + }, + is_trial: (ok.payload.flags & 1) != 0, + ..Default::default() + }, + Err(e) => LicenseState { + state: "invalid", reason: Some(e.to_string()), + ..Default::default() + }, + } +} +``` + +**Use it:** + +```rust +let lic = license::check_license(); +tracing::info!(state = lic.state, entitlements = ?lic.entitlements, "license loaded"); + +// At a feature gate: +if !lic.entitlements.contains("export") { + return Err(MyError::PaymentRequired( + "Export requires a paid license.".into() + )); +} +``` + +### 7d. Hard-gate patterns — "the app doesn't function without a license" + +If the operator chose **hard gate** in the section-0 questions (binary +freely downloadable, but locked until activated), use one of these two +flavors instead of the entitlements-as-feature-flags pattern above. The +verifier helpers from 7a / 7b / 7c are still the right primitive — the +difference is what you do with the result. + +**Flavor 1: Refuse to start.** The daemon exits at boot with a clear +log line if there's no valid license. StartOS will show the service as +crashing — the operator's README needs to tell buyers "install the +license first via Actions → Set license, then start the service." + +```ts +// TypeScript / Node +const lic = checkLicense() +if (lic.state !== 'licensed') { + console.error(`[license] not licensed (${lic.state}): ${lic.reason || ''}`) + console.error(`[license] paste a license key into ${LICENSE_PATH} via the StartOS "Set license" action, then restart.`) + process.exit(1) +} +``` + +```python +# Python +lic = check_license() +if lic.state != 'licensed': + log.error(f'[license] not licensed ({lic.state}): {lic.reason or ""}') + log.error(f'[license] paste a license key, then restart.') + raise SystemExit(1) +``` + +```rust +// Rust +let lic = license::check_license(); +if lic.state != "licensed" { + eprintln!("[license] not licensed ({}): {}", lic.state, lic.reason.unwrap_or_default()); + eprintln!("[license] paste a license key, then restart."); + std::process::exit(1); +} +``` + +This is the most aggressive option. Use when (a) the app is closed-source +and there's no "free version" of the binary anyone could compile, and +(b) the operator is OK with StartOS surfacing the service as +unhealthy until activated. + +**Flavor 2: Run, but block all real work behind an "Activate" screen.** +The daemon starts normally, but every business endpoint returns 402 +until a license is activated. Only the activation endpoint(s) and a +status endpoint are open. Buyers see a clean "paste your license to +get started" UI on first run; StartOS shows the service as healthy. +Generally a better buyer experience than Flavor 1. + +```ts +// TypeScript / Express — middleware that gates everything except +// the activation paths. +const ACTIVATION_PATHS = new Set([ + '/api/license-status', // for the frontend to render activation UI + '/api/activate', // accepts a pasted license key, writes to file, refreshes state + '/healthz', // for StartOS / orchestration +]) + +let LIC = checkLicense() // mutable; refresh after activation + +app.use((req, res, next) => { + if (ACTIVATION_PATHS.has(req.path)) return next() + if (LIC.state !== 'licensed') { + return res.status(402).json({ + error: 'license_required', + message: 'This service requires a Keysat license to function.', + activate_url: '/activate', // your frontend's activation page + state: LIC.state, + reason: LIC.reason, + }) + } + next() +}) + +// Activation endpoint — accepts a pasted key, writes it, re-checks. +app.post('/api/activate', express.json(), (req, res) => { + const key = (req.body.license_key || '').trim() + if (!key.startsWith('LIC1-')) { + return res.status(400).json({ error: 'bad_format', message: 'Expected a LIC1-… key.' }) + } + fs.writeFileSync(LICENSE_PATH, key + '\n') + LIC = checkLicense() + if (LIC.state === 'licensed') { + return res.json({ ok: true, state: 'licensed', entitlements: [...LIC.entitlements] }) + } + return res.status(400).json({ error: 'invalid', state: LIC.state, reason: LIC.reason }) +}) +``` + +```python +# Python / Flask — same idea +ACTIVATION_PATHS = {'/api/license-status', '/api/activate', '/healthz'} +LIC = check_license() # module-level; reload after activation + +@app.before_request +def license_gate(): + if request.path in ACTIVATION_PATHS: + return None + if LIC.state != 'licensed': + return jsonify({ + 'error': 'license_required', + 'message': 'This service requires a Keysat license to function.', + 'state': LIC.state, + 'reason': LIC.reason, + }), 402 + +@app.post('/api/activate') +def activate(): + global LIC + key = (request.json or {}).get('license_key', '').strip() + if not key.startswith('LIC1-'): + return {'error': 'bad_format'}, 400 + Path(LICENSE_PATH).write_text(key + '\n') + LIC = check_license() + if LIC.state == 'licensed': + return {'ok': True, 'entitlements': sorted(LIC.entitlements)} + return {'error': 'invalid', 'state': LIC.state, 'reason': LIC.reason}, 400 +``` + +```rust +// Rust / axum — same idea: a middleware layer that guards all admin +// routes, plus an /api/activate endpoint that accepts a key and updates +// the in-memory state. +// +// Sketch (full impl follows the existing axum middleware pattern): +// Router::new() +// .route("/api/license-status", get(license_status)) +// .route("/api/activate", post(activate)) +// .route("/healthz", get(healthz)) +// .nest("/api", api_routes()) +// .layer(axum::middleware::from_fn_with_state(state.clone(), license_gate)) +// +// Inside `license_gate`, return 402 unless the request path is in +// ACTIVATION_PATHS or `state.license.read().await.state == "licensed"`. +``` + +**How would Keysat itself do this?** Keysat already has the `Mode::Enforce` +build-time flag in [`license_self.rs`](./licensing-service-startos/licensing-service/src/license_self.rs): +when built with `KEYSAT_LICENSE_ENFORCE=1`, missing or invalid licenses +cause the daemon to refuse to start (Flavor 1). Default Permissive +builds run unlicensed at Creator-tier caps. To switch Keysat to Flavor 2 +("run but block until activated") would mean: keep the existing boot-time +license check non-fatal, expose `/admin/login`-style activation endpoints +under a hardcoded allowlist, and have an axum middleware return 402 on +every other admin/business endpoint until `state.self_tier` flips from +`Unlicensed` to `Licensed`. The pieces are all there — it's a few hundred +lines of axum middleware + an SPA "Activate" splash screen. + +### 7e. Packaging gotchas — Docker, s9pk, hermetic builds + +Most non-trivial integrations end up packaged in Docker (Start9 s9pk, +generic container deploys, CI-built images). The following gotchas +together account for ~80% of the "it works locally but the build +fails" failure mode: + +**1. Slim base images don't ship `git`, `ssh`, or `ca-certificates`.** +`node:20-slim`, `python:3.11-slim`, etc. are intentionally minimal. +If you have a git-URL dependency (e.g. the GitHub fallback above), +you'll need at least these in the *builder* stage: + +```dockerfile +RUN apt-get update && apt-get install -y --no-install-recommends \ + git ca-certificates \ + && rm -rf /var/lib/apt/lists/* +``` + +Without `git`: npm errors with `spawn git ENOENT` when resolving the +dependency. Without `ca-certificates`: HTTPS clones fail with +`SSL certificate problem: unable to get local issuer certificate`. + +**2. npm's git resolver tries `ssh://` for github.com URLs first.** +Even if your `package.json` spec and `package-lock.json` `resolved` +both say `git+https://`, npm internally tries SSH first when the host +is github.com. In a container with no SSH client or key, this fails. +Force git to silently rewrite SSH URLs to HTTPS: + +```dockerfile +RUN git config --global --add url."https://github.com/".insteadOf "ssh://git@github.com/" \ + && git config --global --add url."https://github.com/".insteadOf "git@github.com:" \ + && git config --global --add url."https://github.com/".insteadOf "git://github.com/" +``` + +The `--add` flag matters — without it, each subsequent invocation +overwrites the previous one (they share a key) and only the last +rewrite is active. + +**3. Don't forget to `COPY` your new license module.** If your +Dockerfile lists individual server files explicitly: + +```dockerfile +COPY server/package.json ./server/ +COPY server/index.js ./server/ +COPY public/ ./public/ +COPY assets/ ./assets/ +``` + +…the build will succeed, the image will start, and then crash at +runtime with `Cannot find module './license.js'`. Add a line for the +license module: + +```dockerfile +COPY server/license.js ./server/ # ← easy to miss +``` + +This is the single most common "package builds, container won't boot" +failure when retro-fitting licensing into an existing app. + +**4. Make's incremental rebuild can mask uncommitted changes.** s9pk +build chains often look like `make x86 → start-cli s9pk pack → docker +build`. Make may decide nothing's newer than the existing `.s9pk` +because its dependencies typically include `.git/index` (which only +updates on `git add`). Symptom: you change a source file, rebuild, +get an instant "✅ Build Complete!" with the same package as before. + +Either stage your changes (`git add -A`) so `.git/index` updates, or +delete the existing `.s9pk` to force a rebuild: + +```bash +rm myapp_x86_64.s9pk && make x86 +``` + +**5. The `--ignore-scripts` flag will skip the SDK's `prepare` build.** +If your Dockerfile uses `npm ci --ignore-scripts` (a common security +hardening), the SDK won't build its `dist/` and you'll hit the +"Cannot find module" runtime error from §7a. Either drop +`--ignore-scripts` for the builder stage, or pre-build the SDK +elsewhere and vendor `dist/` in. + +### 7f. Frontend integration for hard-gate Flavor 2 + +If you picked hard-gate Flavor 2 (server starts, business endpoints +return 402 until activated), **the frontend is half the work** — +otherwise unlicensed users see a sea of fetch errors instead of a +clean activation screen. The pattern below is framework-agnostic and +works in vanilla JS, React, Vue, etc. + +**Step 1: Fetch license-status before any other API call.** It's the +prerequisite for deciding what to render. + +```js +async function loadLicenseStatus() { + const r = await fetch("/api/license-status") + return r.json() // { state, entitlements, productSlug, keysatBaseUrl, … } +} +``` + +**Step 2: Render the activation screen as a top-level guard.** If +`state !== "licensed"` (or the `core` entitlement is missing), replace +the entire app body with the activation card. Don't render the normal +UI underneath — every API call would 402 anyway, producing visible +broken state. + +```jsx +if (lic.state !== "licensed" || !lic.entitlements.includes("core")) { + return activate(key)} /> +} +return +``` + +**Step 3: The activation card needs four things:** +- A ` + ${state.licenseActivationError ? `
${escHtml(state.licenseActivationError)}
` : ""} + ${reasonHint && !state.licenseActivationError ? `
${escHtml(reasonHint)}
` : ""} +
+ + Buy a key → +
+
+ Product: ${escHtml(lic.productSlug || "youtube-summarizer")} + ${lic.keysatBaseUrl ? ` · Issuer: ${escHtml(lic.keysatBaseUrl.replace(/^https?:\/\//, ""))}` : ""} +
+ `} + + + `; + } + function render() { + // Hard-gate the entire UI behind a valid license (matches the server's + // activation-screen flavor). Once licensed + has core, fall through to + // the normal app render below. + if (state.license.loaded && !isLicensed()) { + const app = document.getElementById("app"); + app.className = "container"; + app.innerHTML = renderActivationScreen(); + return; + } + // Initial paint while license-status is still in-flight: show the + // activation card in its loading skeleton state rather than a flash of + // the underlying app. + if (!state.license.loaded) { + const app = document.getElementById("app"); + app.className = "container"; + app.innerHTML = renderActivationScreen(); + return; + } savePlayerState(); const app = document.getElementById("app"); const hasResults = state.chunks.length > 0 && !state.loading; @@ -1470,6 +1636,9 @@ app.className = showSplit ? "container has-results" : "container"; // Toggle body class for sidebar layout shift document.body.classList.toggle("history-open", state.historyOpen); + // Preserve library sidebar scroll position across full re-renders + const __prevHistoryListEl = document.querySelector(".history-list"); + const __prevHistoryScroll = __prevHistoryListEl ? __prevHistoryListEl.scrollTop : 0; app.innerHTML = `
@@ -1494,7 +1663,7 @@
- ${state.clipCollection.length > 0 ? ` + ${state.clipCollection.length > 0 && hasEntitlement("clips") ? ` -
- ${state.clipCollection.length > 0 ? ` + ${state.clipCollection.length > 0 && hasEntitlement("clips") ? ` -
-
@@ -1601,6 +1756,12 @@ } // Restore lastSeekTarget so toggle-play still works after render lastSeekTarget = savedLastSeekTarget; + // Restore library sidebar scroll position so deleting/editing items + // doesn't bounce the user back to the top of the list + if (state.historyOpen && __prevHistoryScroll > 0) { + const newList = document.querySelector(".history-list"); + if (newList) newList.scrollTop = __prevHistoryScroll; + } } function renderServerStatus() { @@ -1621,6 +1782,49 @@ return `Connected${modeLabel}`; } + function renderLicenseBlock() { + const lic = state.license; + const tier = !isLicensed() + ? { label: "Unlicensed", className: "unlicensed" } + : isProTier() + ? { label: "Pro", className: "pro" } + : { label: "Core", className: "core" }; + const expiresLine = lic.expiresAt + ? `Expires ${new Date(lic.expiresAt).toLocaleDateString()}` + : (isLicensed() ? "Never expires" : ""); + return ` +
+
+ License + ${tier.label}${lic.isTrial ? " (trial)" : ""} +
+ ${isLicensed() ? ` +
+ ${lic.licenseId ? `
ID: ${escHtml(lic.licenseId.slice(0, 8))}…
` : ""} + ${expiresLine ? `
${expiresLine}
` : ""} +
Entitlements: ${(lic.entitlements || []).map(e => escHtml(e)).join(", ") || "none"}
+
+
+ ${!isProTier() ? `Upgrade to Pro` : ""} + +
+ ` : ` +
No active license. Activate one below to unlock the app.
+ `} +
+ `; + } + + function renderProUpsell(featureName, description) { + return ` +
+
${escHtml(featureName)} · Pro feature
+
${escHtml(description)}
+ Upgrade to Pro → +
+ `; + } + function renderSettingsModal() { return `
@@ -1630,6 +1834,7 @@
+ ${renderLicenseBlock()} ${state.hasServerKey ? `
@@ -1661,7 +1866,13 @@ ${renderCookieStatus()} - ${renderSubscriptions()} + ${hasEntitlement("subscriptions") + ? renderSubscriptions() + : `${renderProUpsell("Channel subscriptions", "Subscribe to YouTube channels and podcast feeds, then auto-process new uploads on a schedule. Available on the Pro tier.")}`} + + ${hasEntitlement("library") + ? renderLibraryTransfer() + : `${renderProUpsell("Library import/export", "Bulk-export your full library (summaries, folders, subscriptions) and re-import it on another instance. Available on the Pro tier.")}`}
@@ -1669,12 +1880,63 @@ `; } - async function shutdownServer() { - if (!confirm("Shut down the server? You'll need to relaunch the app to use it again.")) return; + // ── Library Transfer ────────────────────────────────────────────────── + + function renderLibraryTransfer() { + return '' + + '
' + + 'Export your full library (summaries, folders, subscriptions) to transfer between devices, or import a library from another instance.' + + '
' + + '' + + '' + + '
' + + '
' + + '
'; + } + + async function exportLibrary() { try { - await fetch(API_BASE + "/api/shutdown", { method: "POST" }); - document.getElementById("app").innerHTML = '

Server stopped

You can close this tab. Double-click the app icon to start again.

'; - } catch {} + const res = await fetch(`${API_BASE}/api/library/export`); + const blob = await res.blob(); + const url = URL.createObjectURL(blob); + const a = document.createElement("a"); + a.href = url; + a.download = "youtube-summarizer-library.json"; + a.click(); + URL.revokeObjectURL(url); + showToast("Library exported!", "✓"); + } catch (e) { + showToast("Export failed: " + e.message, "!"); + } + } + + async function importLibrary(file) { + if (!file) return; + const resultEl = document.getElementById("library-transfer-result"); + try { + if (resultEl) resultEl.innerHTML = 'Importing...'; + const text = await file.text(); + const data = JSON.parse(text); + const res = await fetch(`${API_BASE}/api/library/import`, { + method: "POST", + headers: { "Content-Type": "application/json" }, + body: JSON.stringify(data), + }); + const result = await res.json(); + if (result.error) throw new Error(result.error); + if (resultEl) resultEl.innerHTML = 'Imported ' + result.imported + ' sessions (' + result.skipped + ' already existed)'; + await loadHistory(); + render(); + showToast("Library imported: " + result.imported + " sessions added", "✓"); + } catch (e) { + if (resultEl) resultEl.innerHTML = 'Import failed: ' + escHtml(e.message) + ''; + showToast("Import failed: " + e.message, "!"); + } } // ── Subscriptions ────────────────────────────────────────────────────── @@ -1716,12 +1978,12 @@ function renderSubscribePrompt() { const todayStr = new Date().toISOString().slice(0, 10); return ` -
📡 - - Channel detected — subscribe to auto-process new videos + + Channel detected — subscribe to track new videos +
`; } @@ -1741,10 +2010,16 @@ state.addingSubLoading = true; render(); try { + const auto = !!state.addingSubAuto; const res = await fetch(`${API_BASE}/api/subscriptions`, { method: "POST", headers: { "Content-Type": "application/json" }, - body: JSON.stringify({ url, since: state.addingSubSince || undefined, type: podcast ? "podcast" : undefined }), + body: JSON.stringify({ + url, + since: state.addingSubSince || undefined, + type: podcast ? "podcast" : undefined, + autoDownload: auto, + }), }); if (!res.ok) { const err = await res.json(); @@ -1753,10 +2028,14 @@ const label = podcast ? url.split("/").pop() || "podcast" : (url.match(/@[\w-]+/)?.[0] || "channel"); state.url = ""; state.addingSubSince = ""; + state.addingSubAuto = false; state.addingSubLoading = false; await loadSubscriptions(); render(); - showToast(`Subscribed to ${label} — checking for ${podcast ? "episodes" : "videos"}...`, podcast ? "🎙" : "📡"); + showToast( + `Subscribed to ${label}${auto ? " (auto-process ON)" : ""} — checking for ${podcast ? "episodes" : "videos"}...`, + podcast ? "🎙" : (auto ? "⚡" : "📡") + ); } catch (e) { state.error = e.message; state.addingSubLoading = false; @@ -1951,6 +2230,29 @@ } catch {} } + async function toggleAutoDownload(id) { + const sub = state.subscriptions.find(s => s.id === id); + if (!sub) return; + const next = !sub.autoDownload; + // Optimistic update + sub.autoDownload = next; + render(); + try { + const res = await fetch(`${API_BASE}/api/subscriptions/${id}/auto-download`, { + method: "PUT", + headers: { "Content-Type": "application/json" }, + body: JSON.stringify({ enabled: next }), + }); + const data = await res.json(); + if (data && data.subscription) sub.autoDownload = !!data.subscription.autoDownload; + render(); + } catch { + // Roll back on failure + sub.autoDownload = !next; + render(); + } + } + function renderSubscriptions() { const todayStr = new Date().toISOString().slice(0, 10); return ` @@ -1988,9 +2290,17 @@ Since ${sinceDate} ${sub.lastChecked ? " · Checked " + timeAgo(sub.lastChecked) : ""} ${sub.paused ? " · Paused" : ""} + ${sub.autoDownload ? ' · \u26A1 Auto-process' : ""}
+

${escHtml(chunk.summary)}

- ${state.currentSessionId ? `📎` : ""} + ${state.currentSessionId && hasEntitlement("clips") ? `📎` : ""}
\u25BE
@@ -2263,7 +2573,7 @@ title="Play from ${formatTime(entry.offset)}"> \u25B6 ${formatTime(entry.offset)} ${escHtml(entry.text)} - ${state.currentSessionId ? `📎` : ""} + ${state.currentSessionId && hasEntitlement("clips") ? `📎` : ""} `).join("")}
@@ -2333,8 +2643,13 @@ cookieHtml = '
' + 'No YouTube cookies configured' + '' + - 'Cookies provide Premium ad-free audio and help with some restricted videos.
' + - 'Export cookies with "Get cookies.txt LOCALLY" extension in your browser.' + + 'Cookies authenticate your server with YouTube to avoid bot detection blocks and access restricted videos.

' + + 'To set up:
' + + '1. Install the "Get cookies.txt LOCALLY" browser extension on your laptop
' + + '2. Go to youtube.com and make sure you\'re signed in
' + + '3. Click the extension icon and export cookies for youtube.com
' + + '4. Upload the downloaded cookies.txt file here

' + + 'Note: Cookies expire after ~2 weeks. You\'ll need to re-upload periodically.' + '
' + uploadBtn + '
' + '
'; } else if (state.cookieMethod === "cookies.txt") { @@ -2585,6 +2900,12 @@ const data = await res.json(); state.historySessions = data.sessions || {}; state.historyMeta = data.meta || { folders: [], uncategorized: [] }; + // Hydrate collapsed-folder UI state from persisted server meta + state.collapsedFolders = new Set( + (state.historyMeta.folders || []) + .filter(f => f.collapsed) + .map(f => f.id) + ); state.historyLoaded = true; } catch { state.historySessions = {}; @@ -2660,12 +2981,18 @@ // Surgically update just the sidebar instead of full re-render const sidebar = document.querySelector(".history-sidebar"); if (sidebar && state.historyOpen) { + // Capture current scroll so the user stays where they were + const prevList = sidebar.querySelector(".history-list"); + const prevScroll = prevList ? prevList.scrollTop : 0; const sidebarHtml = renderHistorySidebar(); const temp = document.createElement("div"); temp.innerHTML = sidebarHtml; // Replace sidebar content (keep the element to avoid re-animation) const newSidebar = temp.querySelector(".history-sidebar"); if (newSidebar) sidebar.innerHTML = newSidebar.innerHTML; + // Restore scroll position on the freshly created list + const newList = sidebar.querySelector(".history-list"); + if (newList && prevScroll > 0) newList.scrollTop = prevScroll; } else { render(); } @@ -2714,9 +3041,19 @@ } function toggleFolder(id) { - if (state.collapsedFolders.has(id)) state.collapsedFolders.delete(id); - else state.collapsedFolders.add(id); + const nowCollapsed = !state.collapsedFolders.has(id); + if (nowCollapsed) state.collapsedFolders.add(id); + else state.collapsedFolders.delete(id); + // Mirror into local meta so re-renders stay consistent without a refetch + const folder = state.historyMeta.folders.find(f => f.id === id); + if (folder) folder.collapsed = nowCollapsed; render(); + // Persist to server (fire-and-forget; UI already updated optimistically) + fetch(`${API_BASE}/api/history/folders/${id}/collapsed`, { + method: "PUT", + headers: { "Content-Type": "application/json" }, + body: JSON.stringify({ collapsed: nowCollapsed }), + }).catch(() => {}); } // Drag & drop with insertion indicator @@ -2927,6 +3264,7 @@ function renderHistorySidebar() { const totalSessions = Object.keys(state.historySessions).length; const { folders, uncategorized } = state.historyMeta; + const historyEntitled = hasEntitlement("history"); return `
@@ -2934,15 +3272,22 @@

Library

- + ${historyEntitled ? ` + + ` : ""}
+ ${!historyEntitled ? ` +
+ ${renderProUpsell("Summary library", "Save, organize, and revisit every summary you generate. Folders, drag-and-drop, search. Available on the Pro tier.")} +
+ ` : `
@@ -2989,6 +3334,7 @@ ` }
+ `} `; } @@ -3023,6 +3369,9 @@ } } function toggleClipPanel() { + // Pro-tier feature: silently no-op if the license lacks the entitlement. + // Existing clipCollection in localStorage is preserved across upgrades. + if (!hasEntitlement("clips")) return; state.clipPanelOpen = !state.clipPanelOpen; render(); } @@ -3302,6 +3651,12 @@ // ── Clip Collection ─────────────────────────────────────────────────────── function addToClipCollection(sessionId, chunkIndex, entryIndex) { + // Pro-tier feature. Defense-in-depth: even if a Core user reaches this + // (e.g. via stale UI before re-render), refuse the add and prompt upgrade. + if (!hasEntitlement("clips")) { + showToast("Clips are a Pro feature. Upgrade to unlock.", "🔒", 3500); + return; + } // Check if already in collection const exists = state.clipCollection.find(c => c.sessionId === sessionId && c.chunkIndex === chunkIndex && @@ -3581,6 +3936,115 @@ return s.replace(/&/g,"&").replace(//g,">").replace(/"/g,"""); } + // ── Keysat license helpers ─────────────────────────────────────────────── + function hasEntitlement(name) { + return !!(state.license && state.license.entitlements && state.license.entitlements.includes(name)); + } + function isLicensed() { + return state.license && state.license.state === "licensed" && hasEntitlement("core"); + } + function isProTier() { + // Pro tier is defined by the entitlements that distinguish it from Core, + // i.e. subscriptions + clips. (history + library are now Core, so they + // don't separate the tiers anymore.) + return isLicensed() && hasEntitlement("subscriptions") && hasEntitlement("clips"); + } + async function loadLicenseStatus() { + try { + const res = await fetch(`${API_BASE}/api/license-status`); + const data = await res.json(); + state.license = { + loaded: true, + state: data.state || "unlicensed", + reason: data.reason || null, + licenseId: data.licenseId || null, + entitlements: data.entitlements || [], + expiresAt: data.expiresAt || null, + isTrial: !!data.isTrial, + productSlug: data.productSlug || "youtube-summarizer", + keysatBaseUrl: data.keysatBaseUrl || "", + }; + } catch { + state.license = { + ...state.license, + loaded: true, + state: "unlicensed", + reason: "license_status_unreachable", + }; + } + } + async function activateLicense() { + const key = (state.licenseActivationKey || "").trim(); + if (!key) { + state.licenseActivationError = "Paste a license key first."; + render(); + return; + } + state.licenseActivating = true; + state.licenseActivationError = null; + render(); + try { + const res = await fetch(`${API_BASE}/api/license/activate`, { + method: "POST", + headers: { "Content-Type": "application/json" }, + body: JSON.stringify({ license_key: key }), + }); + const data = await res.json(); + if (res.ok && data.ok) { + state.license = { + loaded: true, + state: data.state, + reason: data.reason, + licenseId: data.licenseId, + entitlements: data.entitlements || [], + expiresAt: data.expiresAt, + isTrial: !!data.isTrial, + productSlug: data.productSlug || "youtube-summarizer", + keysatBaseUrl: data.keysatBaseUrl || "", + }; + state.licenseActivationKey = ""; + state.licenseActivationError = null; + showToast("License activated.", "✓"); + // Now that we're licensed, kick off the loads we deferred at boot. + await loadAfterLicensed(); + } else { + state.licenseActivationError = data.message || data.reason || "Activation failed."; + } + } catch (e) { + state.licenseActivationError = "Could not reach the server."; + } finally { + state.licenseActivating = false; + render(); + } + } + async function deactivateLicense() { + if (!confirm("Remove the license from this server? You'll need to paste the key again to re-activate.")) return; + try { + await fetch(`${API_BASE}/api/license/deactivate`, { method: "POST" }); + } catch {} + await loadLicenseStatus(); + // Clear in-memory data that the deactivated user can no longer see. + state.subscriptions = []; + state.subsLoaded = false; + state.historySessions = {}; + state.historyMeta = { folders: [], uncategorized: [] }; + state.historyLoaded = false; + render(); + } + async function loadAfterLicensed() { + // Lightweight version of init's secondary loads. Only fetches what + // the current entitlements actually permit. + await loadHistory().catch(() => {}); + if (hasEntitlement("subscriptions")) { + await loadSubscriptions().catch(() => {}); + try { await pollAutoQueue(); } catch {} + } + } + function upgradeToProUrl() { + const base = state.license.keysatBaseUrl || "https://licensing.keysat.xyz"; + return `${base.replace(/\/$/, "")}/buy/${state.license.productSlug || "youtube-summarizer"}`; + } + function showToast(message, icon = "✓", duration = 4000) { const container = document.getElementById("toast-container"); if (!container) return; @@ -3599,12 +4063,15 @@ // Load persisted clip collection loadClipCollection(); - // Fetch health + network mode in parallel + // Fetch license-status + health + network mode in parallel. License is + // load-bearing: when unlicensed, the activation overlay replaces the app + // entirely and we skip the loads that would 402 anyway (history, + // subscriptions, auto-queue). Promise.all([ + loadLicenseStatus(), fetch(`${API_BASE}/api/health`).then(r => r.json()), fetch(`${API_BASE}/api/network-mode`).then(r => r.json()).catch(() => null), - loadHistory(), - ]).then(([health, net]) => { + ]).then(async ([_, health, net]) => { state.hasServerKey = !!health.hasServerKey; if (!health.installed) { state.ytdlpVersion = false; @@ -3622,13 +4089,20 @@ } if (net) state.lanMode = !!net.lan; state.serverStatus = "connected"; + + // Only load licensed-only data when the activation gate would let us. + if (isLicensed()) { + if (hasEntitlement("history")) await loadHistory().catch(() => {}); + if (hasEntitlement("subscriptions")) { + await loadSubscriptions().catch(() => {}); + try { + const added = await pollAutoQueue(); + if (added) render(); + } catch {} + startBgPoll(); + } + } render(); - // Load subscriptions, do initial auto-queue check, start background poll - loadSubscriptions().then(async () => { - const added = await pollAutoQueue(); - if (added) render(); - startBgPoll(); - }); }).catch(() => { state.serverStatus = "disconnected"; state.error = "Cannot connect to backend at localhost:3001.\nMake sure the server is running: cd server && npm install && npm start"; diff --git a/server/index.js b/server/index.js index ae76c4c..33c5918 100644 --- a/server/index.js +++ b/server/index.js @@ -9,6 +9,7 @@ import os from "os"; import https from "https"; import http from "http"; import { GoogleGenAI } from "@google/genai"; +import * as license from "./license.js"; const execFileAsync = promisify(execFile); const app = express(); @@ -73,11 +74,9 @@ function ytCookieArgs() { return []; } -// Extra yt-dlp args for robustness (browser impersonation, rate limiting) +// Extra yt-dlp args for robustness (rate limiting) function ytExtraArgs() { const args = []; - // Browser impersonation helps avoid TLS fingerprint detection on servers - args.push("--impersonate", "chrome"); // Sleep between requests to avoid rate limiting during batch operations args.push("--sleep-interval", "1", "--max-sleep-interval", "3"); return args; @@ -98,6 +97,125 @@ function resolveApiKey(clientKey) { app.use(cors()); app.use(express.json({ limit: "100mb" })); +// ── Keysat licensing (hard-gate / activate-screen flavor) ───────────────── +// All /api/* routes return 402 until a valid license is activated, except +// the allowlisted endpoints that exist precisely so the frontend can render +// an activation UI. See server/license.js for the verifier. +let LIC = license.checkLicense(); +console.log( + `[license] state=${LIC.state} entitlements=[${[...LIC.entitlements].join(",")}]` + + (LIC.reason ? ` reason=${LIC.reason}` : "") +); + +// Endpoints reachable without a license — kept intentionally minimal. +const LICENSE_OPEN_PATHS = new Set([ + "/api/health", + "/api/heartbeat", + "/api/status", + "/api/license-status", + "/api/license/activate", + "/api/license/deactivate", +]); + +// Activation-screen gate: any /api/* request without a valid license is +// rejected with 402, except the allowlist above. Non-/api requests +// (the static frontend, /assets, etc.) pass through so the UI can load. +app.use((req, res, next) => { + if (!req.path.startsWith("/api/")) return next(); + if (LICENSE_OPEN_PATHS.has(req.path)) return next(); + if (LIC.state === "licensed" && LIC.entitlements.has("core")) return next(); + return res.status(402).json({ + error: "license_required", + message: + LIC.state === "licensed" + ? "Your license is missing the 'core' entitlement. Contact the seller." + : "This service requires a Keysat license. Activate to continue.", + state: LIC.state, + reason: LIC.reason, + activate_url: "/#activate", + keysat_base_url: license.KEYSAT_BASE_URL, + product_slug: license.PRODUCT_SLUG, + }); +}); + +// Pro-tier feature gates. Each entry maps URL prefixes → required +// entitlement; first match wins. A licensed user without the right +// entitlement gets a clean 402 feature_not_in_tier (vs. the generic +// activation gate above). +const PRO_FEATURE_GATES = [ + { + prefixes: ["/api/subscriptions", "/api/auto-queue", "/api/sub-check-log"], + entitlement: "subscriptions", + feature: "subscriptions", + message: + "Channel subscriptions and auto-queue require a Pro license. Upgrade to unlock.", + }, + { + prefixes: ["/api/history"], + entitlement: "history", + feature: "history", + message: + "Summary history requires a Pro license. Upgrade to unlock.", + }, + { + prefixes: ["/api/library"], + entitlement: "library", + feature: "library", + message: + "Library import/export requires a Pro license. Upgrade to unlock.", + }, +]; +app.use((req, res, next) => { + for (const gate of PRO_FEATURE_GATES) { + if (gate.prefixes.some((p) => req.path.startsWith(p))) { + if (LIC.entitlements.has(gate.entitlement)) return next(); + return res.status(402).json({ + error: "feature_not_in_tier", + feature: gate.feature, + message: gate.message, + keysat_base_url: license.KEYSAT_BASE_URL, + product_slug: license.PRODUCT_SLUG, + }); + } + } + next(); +}); + +// License management endpoints — kept open by LICENSE_OPEN_PATHS above. +app.get("/api/license-status", (_req, res) => { + res.json(license.publicView(LIC)); +}); + +app.post("/api/license/activate", (req, res) => { + try { + LIC = license.activate(req.body && req.body.license_key); + } catch (e) { + if (e && e.code === "bad_format") { + return res.status(400).json({ + error: "bad_format", + message: "Expected a license key starting with 'LIC1-'.", + }); + } + return res.status(500).json({ error: "activation_failed", message: e?.message }); + } + if (LIC.state === "licensed") { + return res.json({ ok: true, ...license.publicView(LIC) }); + } + return res.status(400).json({ + ok: false, + error: "invalid", + ...license.publicView(LIC), + }); +}); + +app.post("/api/license/deactivate", async (_req, res) => { + try { + await fs.unlink(license.LICENSE_PATH).catch(() => {}); + } catch {} + LIC = license.checkLicense(); + res.json({ ok: true, ...license.publicView(LIC) }); +}); + // ── History storage ─────────────────────────────────────────────────────── async function saveToHistory(videoId, url, title, chunks, entries, logs, uploadDate, type) { @@ -401,95 +519,11 @@ app.get("/api/cookies/status", async (req, res) => { res.json(info); }); -// ── OAuth2 YouTube authentication (headless / StartOS) ──────────────────── -// Uses yt-dlp's built-in OAuth2 device flow: user enters a code on any browser, -// token is cached in yt-dlp's cache dir (persisted on /data volume). - -let oauthInProgress = false; -let oauthDeviceCode = null; -let oauthVerifyUrl = null; - -// Check if OAuth token already exists in yt-dlp cache -app.get("/api/auth/oauth/status", async (req, res) => { - // yt-dlp stores OAuth tokens in its cache dir - const cacheDir = process.env.XDG_CACHE_HOME || path.join(DATA_DIR, "ytdlp-cache"); - let hasToken = false; - try { - const files = await fs.readdir(path.join(cacheDir, "yt-dlp"), { recursive: true }).catch(() => []); - hasToken = files.some(f => f.includes("oauth") || f.includes("token")); - } catch {} - - res.json({ - hasToken, - hasCookies: ytCookiesFileExists, - cookieMethod: ytCookieMethod(), - inProgress: oauthInProgress, - deviceCode: oauthInProgress ? oauthDeviceCode : null, - verifyUrl: oauthInProgress ? oauthVerifyUrl : null, - }); -}); - -// Initiate OAuth2 device code flow -app.post("/api/auth/oauth/start", async (req, res) => { - if (oauthInProgress) { - return res.json({ ok: true, message: "OAuth flow already in progress", deviceCode: oauthDeviceCode, verifyUrl: oauthVerifyUrl }); - } - - oauthInProgress = true; - oauthDeviceCode = null; - oauthVerifyUrl = null; - - res.json({ ok: true, message: "OAuth flow started. Check /api/auth/oauth/status for the device code." }); - - // Run yt-dlp in background — it will output the device code to stderr - (async () => { - try { - const cacheDir = path.join(DATA_DIR, "ytdlp-cache"); - await fs.mkdir(cacheDir, { recursive: true }); - - const proc = execFile("yt-dlp", [ - "--username", "oauth", - "--password", "", - "--cache-dir", path.join(cacheDir, "yt-dlp"), - "--print", "%(title)s", - "--no-download", - "https://www.youtube.com/watch?v=dQw4w9WgXcQ", - ], { timeout: 300000, env: { ...process.env, XDG_CACHE_HOME: cacheDir } }); - - let stderrBuf = ""; - proc.stderr?.on("data", (chunk) => { - stderrBuf += chunk.toString(); - // Look for the device code pattern in yt-dlp output - const codeMatch = stderrBuf.match(/go to\s+(https?:\/\/\S+)\s+.*?enter.*?code[:\s]+([A-Z0-9-]+)/i); - if (codeMatch) { - oauthVerifyUrl = codeMatch[1]; - oauthDeviceCode = codeMatch[2]; - console.log(` 🔑 OAuth device code: ${oauthDeviceCode} — verify at ${oauthVerifyUrl}`); - } - }); - - await new Promise((resolve, reject) => { - proc.on("close", (code) => { - if (code === 0) resolve(); - else reject(new Error(`yt-dlp exited with code ${code}: ${stderrBuf.slice(-300)}`)); - }); - proc.on("error", reject); - }); - - console.log(" ✓ OAuth token cached successfully"); - } catch (err) { - console.error(" ⚠ OAuth flow failed:", err.message); - } finally { - oauthInProgress = false; - } - })(); -}); - // ── History endpoints ───────────────────────────────────────────────────── const metaPath = path.join(historyDir, "_meta.json"); -// meta.json structure: { folders: [ { id, name, order, items: [sessionId, ...] } ], uncategorized: [sessionId, ...] } +// meta.json structure: { folders: [ { id, name, order, collapsed, items: [sessionId, ...] } ], uncategorized: [sessionId, ...] } async function loadMeta() { try { return JSON.parse(await fs.readFile(metaPath, "utf-8")); @@ -615,7 +649,7 @@ app.put("/api/history/meta", async (req, res) => { app.post("/api/history/folders", async (req, res) => { try { const meta = await loadMeta(); - const folder = { id: `folder-${Date.now()}`, name: req.body.name || "New Folder", items: [] }; + const folder = { id: `folder-${Date.now()}`, name: req.body.name || "New Folder", collapsed: false, items: [] }; meta.folders.push(folder); await saveMeta(meta); res.json(folder); @@ -638,6 +672,20 @@ app.put("/api/history/folders/:id", async (req, res) => { } }); +// Update a folder's collapsed state +app.put("/api/history/folders/:id/collapsed", async (req, res) => { + try { + const meta = await loadMeta(); + const folder = meta.folders.find(f => f.id === req.params.id); + if (!folder) return res.status(404).json({ error: "Folder not found" }); + folder.collapsed = !!req.body.collapsed; + await saveMeta(meta); + res.json({ ok: true, collapsed: folder.collapsed }); + } catch (err) { + res.status(500).json({ error: err.message }); + } +}); + // Delete a folder (items move to uncategorized) app.delete("/api/history/folders/:id", async (req, res) => { try { @@ -684,6 +732,119 @@ app.put("/api/history/move", async (req, res) => { } }); +// ── Library export/import ──────────────────────────────────────────────── + +app.get("/api/library/export", async (req, res) => { + try { + const meta = await loadMeta(); + const files = await fs.readdir(historyDir); + const sessions = {}; + for (const file of files) { + if (!file.endsWith(".json") || file === "_meta.json" || file === "subscriptions.json" || file === "auto-queue.json") continue; + try { + const raw = await fs.readFile(path.join(historyDir, file), "utf-8"); + const id = file.replace(".json", ""); + sessions[id] = JSON.parse(raw); + } catch {} + } + // Load subscriptions + let subscriptions = []; + try { + subscriptions = JSON.parse(await fs.readFile(path.join(historyDir, "subscriptions.json"), "utf-8")).subscriptions || []; + } catch {} + + const exportData = { + version: 1, + exportedAt: new Date().toISOString(), + meta, + sessions, + subscriptions, + }; + res.setHeader("Content-Type", "application/json"); + res.setHeader("Content-Disposition", 'attachment; filename="youtube-summarizer-library.json"'); + res.json(exportData); + } catch (err) { + res.status(500).json({ error: err.message }); + } +}); + +app.post("/api/library/import", express.json({ limit: "200mb" }), async (req, res) => { + try { + const data = req.body; + if (!data || !data.sessions) { + return res.status(400).json({ error: "Invalid library file — missing sessions data" }); + } + + let imported = 0; + let skipped = 0; + + // Import sessions + for (const [id, session] of Object.entries(data.sessions)) { + const filePath = path.join(historyDir, `${id}.json`); + // Skip if session already exists (don't overwrite) + try { + await fs.access(filePath); + skipped++; + continue; + } catch {} + await fs.writeFile(filePath, JSON.stringify(session)); + imported++; + } + + // Merge meta (add imported sessions to uncategorized if not already placed) + if (data.meta) { + const existingMeta = await loadMeta(); + const allExistingIds = new Set([ + ...existingMeta.uncategorized, + ...existingMeta.folders.flatMap(f => f.items), + ]); + + // Import folders that don't exist + if (data.meta.folders) { + for (const folder of data.meta.folders) { + const existingFolder = existingMeta.folders.find(f => f.id === folder.id); + if (!existingFolder) { + existingMeta.folders.push(folder); + folder.items.forEach(id => allExistingIds.add(id)); + } + } + } + + // Add any uncategorized items that aren't already placed + if (data.meta.uncategorized) { + for (const id of data.meta.uncategorized) { + if (!allExistingIds.has(id)) { + existingMeta.uncategorized.unshift(id); + } + } + } + + await saveMeta(existingMeta); + } + + // Import subscriptions (merge, don't duplicate) + if (data.subscriptions && data.subscriptions.length > 0) { + let existingSubs = []; + try { + existingSubs = JSON.parse(await fs.readFile(path.join(historyDir, "subscriptions.json"), "utf-8")).subscriptions || []; + } catch {} + const existingUrls = new Set(existingSubs.map(s => s.url)); + let subsAdded = 0; + for (const sub of data.subscriptions) { + if (!existingUrls.has(sub.url)) { + existingSubs.push(sub); + subsAdded++; + } + } + await fs.writeFile(path.join(historyDir, "subscriptions.json"), JSON.stringify({ subscriptions: existingSubs })); + } + + res.json({ ok: true, imported, skipped, total: Object.keys(data.sessions).length }); + } catch (err) { + res.status(500).json({ error: err.message }); + } +}); + // ── Subscriptions ───────────────────────────────────────────────────────── const subsPath = path.join(historyDir, "subscriptions.json"); @@ -949,6 +1110,20 @@ async function fetchChannelName(url) { return "Unknown Channel"; } +// ── In-process write serialization ──────────────────────────────────────── +// Per-file promise chain to prevent lost-update races on read-modify-write +// state files (skip-list, seen-list). Without this, two concurrent DELETE +// handlers can each load the same snapshot, add their own id, and the +// second write overwrites the first — silently dropping entries. +const _fileLocks = new Map(); +function withFileLock(key, fn) { + const prev = _fileLocks.get(key) || Promise.resolve(); + const next = prev.then(fn, fn); // run fn whether prev resolved or rejected + // Keep the chain alive but don't leak errors to the next caller + _fileLocks.set(key, next.catch(() => {})); + return next; +} + // Skip list — videos deleted from history that subscriptions should not re-add const skipPath = path.join(historyDir, "skip-list.json"); @@ -961,9 +1136,11 @@ async function loadSkipList() { } async function addToSkipList(videoId) { - const skipIds = await loadSkipList(); - skipIds.add(videoId); - await fs.writeFile(skipPath, JSON.stringify({ videoIds: [...skipIds] })); + return withFileLock(skipPath, async () => { + const skipIds = await loadSkipList(); + skipIds.add(videoId); + await fs.writeFile(skipPath, JSON.stringify({ videoIds: [...skipIds] })); + }); } // Seen list — videos already offered for approval (persists across restarts) @@ -978,9 +1155,11 @@ async function loadSeenList() { } async function addToSeenList(videoIds) { - const seen = await loadSeenList(); - for (const id of videoIds) seen.add(id); - await fs.writeFile(seenPath, JSON.stringify({ videoIds: [...seen] })); + return withFileLock(seenPath, async () => { + const seen = await loadSeenList(); + for (const id of videoIds) seen.add(id); + await fs.writeFile(seenPath, JSON.stringify({ videoIds: [...seen] })); + }); } // Get all videoIds already processed in history @@ -1236,6 +1415,13 @@ async function checkSubscriptions() { } async function _checkSubscriptionsInner() { + // Pro-tier feature: skip silently when not entitled. The HTTP gate above + // returns 402 to callers; this guards the background timer + manual paths. + if (!LIC.entitlements.has("subscriptions")) { + subCheckLog = []; + subLog("Skipped: subscriptions require a Pro license."); + return; + } subCheckLog = []; // Clear logs for fresh check const subs = await loadSubscriptions(); if (subs.length === 0) { subLog("No subscriptions found"); return; } @@ -1503,7 +1689,7 @@ function channelKeyFromUrl(url) { } app.post("/api/subscriptions", async (req, res) => { - const { url, since, type } = req.body; + const { url, since, type, autoDownload } = req.body; if (!url) return res.status(400).json({ error: "Missing url" }); const isPodcast = type === "podcast" || isPodcastFeedUrl(url); @@ -1534,6 +1720,7 @@ app.post("/api/subscriptions", async (req, res) => { createdAt: cutoff, lastChecked: null, paused: false, + autoDownload: autoDownload === true, }; subs.push(sub); await saveSubscriptions(subs); @@ -1762,6 +1949,8 @@ app.get("/api/processing/log", (req, res) => { app.post("/api/process", async (req, res) => { const { url, apiKey: clientKey, model, type: itemType, title: itemTitle, uploadDate: itemUploadDate, episodeId } = req.body; + // BYO Gemini key is a Core-tier feature; the activation gate already + // ensures the caller is licensed, so no further check is needed here. const apiKey = resolveApiKey(clientKey); if (!url) { diff --git a/server/license.js b/server/license.js new file mode 100644 index 0000000..473449d --- /dev/null +++ b/server/license.js @@ -0,0 +1,145 @@ +// ── Keysat license verification ────────────────────────────────────────── +// +// Reads a LIC1-... key from disk (or env), verifies its Ed25519 signature +// against the operator's embedded public key, and exposes the resulting +// state + entitlement set to the rest of the server. +// +// Operator config — keep these three constants in sync with what's set in +// the Keysat admin UI: +// ISSUER_PEM → assets/issuer.pub (committed; non-secret) +// PRODUCT_SLUG → must match the product slug created in Keysat +// KEYSAT_BASE_URL → optional, only used by online validate() / purchase +// +// Tier model for this app (see KEYSAT_INTEGRATION.md §0): +// "core" — required for any business endpoint; unlocks +// summarization and BYO Gemini API key +// "history" — saved summary library: /api/history* +// "library" — bulk import/export: /api/library/* +// "subscriptions" — Pro: channel subs, auto-queue, sub-check log +// "clips" — Pro: paperclip / clip-collection panel +// +// Tier policies: +// Core → ["core", "history", "library"] +// Pro → ["core", "history", "library", "subscriptions", "clips"] + +import fs from "fs"; +import path from "path"; +import { Verifier, PublicKey } from "@keysat/licensing-client"; + +export const PRODUCT_SLUG = "youtube-summarizer"; +export const KEYSAT_BASE_URL = "https://licensing.keysat.xyz"; + +const __dirname = path.dirname(new URL(import.meta.url).pathname); +const PEM_PATH = path.join(__dirname, "..", "assets", "issuer.pub"); +const ISSUER_PEM = fs.readFileSync(PEM_PATH, "utf8"); + +// License file lives next to existing config/ and history/ in DATA_DIR. +// On StartOS that's /data; on local Mac dev it's the project root. +const DATA_DIR = process.env.DATA_DIR || path.join(__dirname, ".."); +export const LICENSE_PATH = + process.env.YT_SUMMARIZER_LICENSE_KEY_PATH || + path.join(DATA_DIR, "license.txt"); + +// ── Verifier instance (built once at module load) ───────────────────────── +let verifier = null; +let verifierError = null; +try { + verifier = new Verifier(PublicKey.fromPem(ISSUER_PEM)); +} catch (e) { + verifierError = e?.message || String(e); + console.error(`[license] failed to parse embedded public key: ${verifierError}`); +} + +// ── Helpers ─────────────────────────────────────────────────────────────── +function readLicenseString() { + const fromEnv = (process.env.YT_SUMMARIZER_LICENSE_KEY || "").trim(); + if (fromEnv) return fromEnv; + try { + const s = fs.readFileSync(LICENSE_PATH, "utf8").trim(); + return s || null; + } catch { + return null; + } +} + +function emptyState(extra = {}) { + return { + state: "unlicensed", + reason: null, + licenseId: null, + entitlements: new Set(), + expiresAt: null, + isTrial: false, + ...extra, + }; +} + +// ── Public API ──────────────────────────────────────────────────────────── +// +// checkLicense() — read + verify; returns a frozen-ish state object. +// Callers can re-invoke after activation to refresh. +export function checkLicense() { + if (verifierError) { + return emptyState({ state: "invalid", reason: `bad embedded key: ${verifierError}` }); + } + const raw = readLicenseString(); + if (!raw) return emptyState(); + + try { + const ok = verifier.verify(raw); + const payload = ok.payload || {}; + // Reject keys minted for a different product (same operator, different SKU). + if (payload.productSlug && payload.productSlug !== PRODUCT_SLUG) { + return emptyState({ state: "invalid", reason: "product_mismatch" }); + } + return { + state: "licensed", + reason: null, + licenseId: payload.licenseId || null, + entitlements: new Set(payload.entitlements || []), + expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000) : null, + isTrial: !!(payload.flags & 1), + }; + } catch (e) { + return emptyState({ state: "invalid", reason: e?.message || "verify_failed" }); + } +} + +// activate(rawKey) — write a pasted key to disk, then re-check. +// Returns the new license state. Throws on bad input format only; +// signature failures surface as state: 'invalid' with a reason. +export function activate(rawKey) { + const key = (rawKey || "").trim(); + if (!key.startsWith("LIC1-")) { + const err = new Error("bad_format"); + err.code = "bad_format"; + throw err; + } + // Write atomically-ish: write to temp file then rename. + const tmp = LICENSE_PATH + ".tmp"; + fs.mkdirSync(path.dirname(LICENSE_PATH), { recursive: true }); + fs.writeFileSync(tmp, key + "\n", { mode: 0o600 }); + fs.renameSync(tmp, LICENSE_PATH); + return checkLicense(); +} + +// publicView(state) — safe shape for /api/license-status responses. +// Never leaks the raw license key (it's a bearer credential). +export function publicView(state) { + return { + state: state.state, + reason: state.reason, + licenseId: state.licenseId, + entitlements: [...state.entitlements].sort(), + expiresAt: state.expiresAt ? state.expiresAt.toISOString() : null, + isTrial: !!state.isTrial, + productSlug: PRODUCT_SLUG, + keysatBaseUrl: KEYSAT_BASE_URL, + licensePath: LICENSE_PATH, + }; +} + +// has(state, entitlement) — convenience wrapper for feature gates. +export function has(state, entitlement) { + return state && state.entitlements && state.entitlements.has(entitlement); +} diff --git a/server/package-lock.json b/server/package-lock.json index e26c622..2be5409 100644 --- a/server/package-lock.json +++ b/server/package-lock.json @@ -9,18 +9,20 @@ "version": "1.0.0", "dependencies": { "@google/genai": "^1.41.0", + "@keysat/licensing-client": "git+https://github.com/keysat-xyz/keysat-client-ts.git", "cors": "^2.8.5", "express": "^4.21.0" } }, "node_modules/@google/genai": { - "version": "1.41.0", - "resolved": "https://registry.npmjs.org/@google/genai/-/genai-1.41.0.tgz", - "integrity": "sha512-S4WGil+PG0NBQRAx+0yrQuM/TWOLn2gGEy5wn4IsoOI6ouHad0P61p3OWdhJ3aqr9kfj8o904i/jevfaGoGuIQ==", + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/@google/genai/-/genai-1.52.0.tgz", + "integrity": "sha512-gwSvbpiN/17O9TbsqSsE/OzZcpv5Fo4RQjdngGgogtuB9RsyJ8ZHhX5KjHj1bp5N9snN2eK8LDGXSaWW2hof8Q==", + "hasInstallScript": true, "license": "Apache-2.0", "dependencies": { "google-auth-library": "^10.3.0", - "p-retry": "^7.1.1", + "p-retry": "^4.6.2", "protobufjs": "^7.5.4", "ws": "^8.18.0" }, @@ -36,31 +38,37 @@ } } }, - "node_modules/@isaacs/cliui": { - "version": "8.0.2", - "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", - "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", - "license": "ISC", + "node_modules/@keysat/licensing-client": { + "version": "0.1.0", + "resolved": "git+ssh://git@github.com/keysat-xyz/keysat-client-ts.git#61a6518ac80b08d672a53c5be3a31cf2064cd0ff", + "license": "MIT", "dependencies": { - "string-width": "^5.1.2", - "string-width-cjs": "npm:string-width@^4.2.0", - "strip-ansi": "^7.0.1", - "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", - "wrap-ansi": "^8.1.0", - "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + "@noble/ed25519": "^2.0.0", + "@noble/hashes": "^1.3.3" }, "engines": { - "node": ">=12" + "node": ">=18" } }, - "node_modules/@pkgjs/parseargs": { - "version": "0.11.0", - "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", - "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "node_modules/@noble/ed25519": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/@noble/ed25519/-/ed25519-2.3.0.tgz", + "integrity": "sha512-M7dvXL2B92/M7dw9+gzuydL8qn/jiqNHaoR3Q+cb1q1GHV7uwE17WCyFMG+Y+TZb5izcaXk5TdJRrDUxHXL78A==", + "license": "MIT", + "funding": { + "url": "https://paulmillr.com/funding/" + } + }, + "node_modules/@noble/hashes": { + "version": "1.8.0", + "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz", + "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==", "license": "MIT", - "optional": true, "engines": { - "node": ">=14" + "node": "^14.21.3 || >=16" + }, + "funding": { + "url": "https://paulmillr.com/funding/" } }, "node_modules/@protobufjs/aspromise": { @@ -76,9 +84,9 @@ "license": "BSD-3-Clause" }, "node_modules/@protobufjs/codegen": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz", - "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==", + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz", + "integrity": "sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==", "license": "BSD-3-Clause" }, "node_modules/@protobufjs/eventemitter": { @@ -104,9 +112,9 @@ "license": "BSD-3-Clause" }, "node_modules/@protobufjs/inquire": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz", - "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.1.tgz", + "integrity": "sha512-mnzgDV26ueAvk7rsbt9L7bE0SuAoqyuys/sMMrmVcN5x9VsxpcG3rqAUSgDyLp0UZlmNfIbQ4fHfCtreVBk8Ew==", "license": "BSD-3-Clause" }, "node_modules/@protobufjs/path": { @@ -122,20 +130,26 @@ "license": "BSD-3-Clause" }, "node_modules/@protobufjs/utf8": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz", - "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.1.tgz", + "integrity": "sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==", "license": "BSD-3-Clause" }, "node_modules/@types/node": { - "version": "25.2.3", - "resolved": "https://registry.npmjs.org/@types/node/-/node-25.2.3.tgz", - "integrity": "sha512-m0jEgYlYz+mDJZ2+F4v8D1AyQb+QzsNqRuI7xg1VQX/KlKS0qT9r1Mo16yo5F/MtifXFgaofIFsdFMox2SxIbQ==", + "version": "25.6.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-25.6.2.tgz", + "integrity": "sha512-sokuT28dxf9JT5Kady1fsXOvI4HVpjZa95NKT5y9PNTIrs2AsobR4GFAA90ZG8M+nxVRLysCXsVj6eGC7Vbrlw==", "license": "MIT", "dependencies": { - "undici-types": "~7.16.0" + "undici-types": "~7.19.0" } }, + "node_modules/@types/retry": { + "version": "0.12.0", + "resolved": "https://registry.npmjs.org/@types/retry/-/retry-0.12.0.tgz", + "integrity": "sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==", + "license": "MIT" + }, "node_modules/accepts": { "version": "1.3.8", "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", @@ -158,42 +172,12 @@ "node": ">= 14" } }, - "node_modules/ansi-regex": { - "version": "6.2.2", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz", - "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==", - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/chalk/ansi-regex?sponsor=1" - } - }, - "node_modules/ansi-styles": { - "version": "6.2.3", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", - "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" - } - }, "node_modules/array-flatten": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==", "license": "MIT" }, - "node_modules/balanced-match": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", - "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", - "license": "MIT" - }, "node_modules/base64-js": { "version": "1.5.1", "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", @@ -224,9 +208,9 @@ } }, "node_modules/body-parser": { - "version": "1.20.4", - "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz", - "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==", + "version": "1.20.5", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz", + "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==", "license": "MIT", "dependencies": { "bytes": "~3.1.2", @@ -237,7 +221,7 @@ "http-errors": "~2.0.1", "iconv-lite": "~0.4.24", "on-finished": "~2.4.1", - "qs": "~6.14.0", + "qs": "~6.15.1", "raw-body": "~2.5.3", "type-is": "~1.6.18", "unpipe": "~1.0.0" @@ -247,13 +231,19 @@ "npm": "1.2.8000 || >= 1.4.16" } }, - "node_modules/brace-expansion": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz", - "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==", - "license": "MIT", + "node_modules/body-parser/node_modules/qs": { + "version": "6.15.1", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz", + "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==", + "license": "BSD-3-Clause", "dependencies": { - "balanced-match": "^1.0.0" + "side-channel": "^1.1.0" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" } }, "node_modules/buffer-equal-constant-time": { @@ -300,24 +290,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/color-convert": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", - "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", - "license": "MIT", - "dependencies": { - "color-name": "~1.1.4" - }, - "engines": { - "node": ">=7.0.0" - } - }, - "node_modules/color-name": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", - "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", - "license": "MIT" - }, "node_modules/content-disposition": { "version": "0.5.4", "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", @@ -371,20 +343,6 @@ "url": "https://opencollective.com/express" } }, - "node_modules/cross-spawn": { - "version": "7.0.6", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", - "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", - "license": "MIT", - "dependencies": { - "path-key": "^3.1.0", - "shebang-command": "^2.0.0", - "which": "^2.0.1" - }, - "engines": { - "node": ">= 8" - } - }, "node_modules/data-uri-to-buffer": { "version": "4.0.1", "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz", @@ -436,12 +394,6 @@ "node": ">= 0.4" } }, - "node_modules/eastasianwidth": { - "version": "0.2.0", - "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", - "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", - "license": "MIT" - }, "node_modules/ecdsa-sig-formatter": { "version": "1.0.11", "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz", @@ -457,12 +409,6 @@ "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", "license": "MIT" }, - "node_modules/emoji-regex": { - "version": "9.2.2", - "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", - "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", - "license": "MIT" - }, "node_modules/encodeurl": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", @@ -610,22 +556,6 @@ "node": ">= 0.8" } }, - "node_modules/foreground-child": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz", - "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==", - "license": "ISC", - "dependencies": { - "cross-spawn": "^7.0.6", - "signal-exit": "^4.0.1" - }, - "engines": { - "node": ">=14" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, "node_modules/formdata-polyfill": { "version": "4.0.10", "resolved": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz", @@ -666,15 +596,14 @@ } }, "node_modules/gaxios": { - "version": "7.1.3", - "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.1.3.tgz", - "integrity": "sha512-YGGyuEdVIjqxkxVH1pUTMY/XtmmsApXrCVv5EU25iX6inEPbV+VakJfLealkBtJN69AQmh1eGOdCl9Sm1UP6XQ==", + "version": "7.1.4", + "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.1.4.tgz", + "integrity": "sha512-bTIgTsM2bWn3XklZISBTQX7ZSddGW+IO3bMdGaemHZ3tbqExMENHLx6kKZ/KlejgrMtj8q7wBItt51yegqalrA==", "license": "Apache-2.0", "dependencies": { "extend": "^3.0.2", "https-proxy-agent": "^7.0.1", - "node-fetch": "^3.3.2", - "rimraf": "^5.0.1" + "node-fetch": "^3.3.2" }, "engines": { "node": ">=18" @@ -731,39 +660,17 @@ "node": ">= 0.4" } }, - "node_modules/glob": { - "version": "10.5.0", - "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz", - "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==", - "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", - "license": "ISC", - "dependencies": { - "foreground-child": "^3.1.0", - "jackspeak": "^3.1.2", - "minimatch": "^9.0.4", - "minipass": "^7.1.2", - "package-json-from-dist": "^1.0.0", - "path-scurry": "^1.11.1" - }, - "bin": { - "glob": "dist/esm/bin.mjs" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, "node_modules/google-auth-library": { - "version": "10.5.0", - "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.5.0.tgz", - "integrity": "sha512-7ABviyMOlX5hIVD60YOfHw4/CxOfBhyduaYB+wbFWCWoni4N7SLcV46hrVRktuBbZjFC9ONyqamZITN7q3n32w==", + "version": "10.6.2", + "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.6.2.tgz", + "integrity": "sha512-e27Z6EThmVNNvtYASwQxose/G57rkRuaRbQyxM2bvYLLX/GqWZ5chWq2EBoUchJbCc57eC9ArzO5wMsEmWftCw==", "license": "Apache-2.0", "dependencies": { "base64-js": "^1.3.0", "ecdsa-sig-formatter": "^1.0.11", - "gaxios": "^7.0.0", - "gcp-metadata": "^8.0.0", - "google-logging-utils": "^1.0.0", - "gtoken": "^8.0.0", + "gaxios": "^7.1.4", + "gcp-metadata": "8.1.2", + "google-logging-utils": "1.1.3", "jws": "^4.0.0" }, "engines": { @@ -791,19 +698,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/gtoken": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/gtoken/-/gtoken-8.0.0.tgz", - "integrity": "sha512-+CqsMbHPiSTdtSO14O51eMNlrp9N79gmeqmXeouJOhfucAedHw9noVe/n5uJk3tbKE6a+6ZCQg3RPhVhHByAIw==", - "license": "MIT", - "dependencies": { - "gaxios": "^7.0.0", - "jws": "^4.0.0" - }, - "engines": { - "node": ">=18" - } - }, "node_modules/has-symbols": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", @@ -817,9 +711,9 @@ } }, "node_modules/hasown": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", - "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz", + "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==", "license": "MIT", "dependencies": { "function-bind": "^1.1.2" @@ -911,48 +805,6 @@ "node": ">= 0.10" } }, - "node_modules/is-fullwidth-code-point": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", - "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, - "node_modules/is-network-error": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/is-network-error/-/is-network-error-1.3.0.tgz", - "integrity": "sha512-6oIwpsgRfnDiyEDLMay/GqCl3HoAtH5+RUKW29gYkL0QA+ipzpDLA16yQs7/RHCSu+BwgbJaOUqa4A99qNVQVw==", - "license": "MIT", - "engines": { - "node": ">=16" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/isexe": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", - "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", - "license": "ISC" - }, - "node_modules/jackspeak": { - "version": "3.4.3", - "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz", - "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==", - "license": "BlueOak-1.0.0", - "dependencies": { - "@isaacs/cliui": "^8.0.2" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - }, - "optionalDependencies": { - "@pkgjs/parseargs": "^0.11.0" - } - }, "node_modules/json-bigint": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz", @@ -989,12 +841,6 @@ "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==", "license": "Apache-2.0" }, - "node_modules/lru-cache": { - "version": "10.4.3", - "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", - "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", - "license": "ISC" - }, "node_modules/math-intrinsics": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", @@ -1064,30 +910,6 @@ "node": ">= 0.6" } }, - "node_modules/minimatch": { - "version": "9.0.5", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz", - "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==", - "license": "ISC", - "dependencies": { - "brace-expansion": "^2.0.1" - }, - "engines": { - "node": ">=16 || 14 >=14.17" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, - "node_modules/minipass": { - "version": "7.1.2", - "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz", - "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==", - "license": "ISC", - "engines": { - "node": ">=16 || 14 >=14.17" - } - }, "node_modules/ms": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", @@ -1175,26 +997,18 @@ } }, "node_modules/p-retry": { - "version": "7.1.1", - "resolved": "https://registry.npmjs.org/p-retry/-/p-retry-7.1.1.tgz", - "integrity": "sha512-J5ApzjyRkkf601HpEeykoiCvzHQjWxPAHhyjFcEUP2SWq0+35NKh8TLhpLw+Dkq5TZBFvUM6UigdE9hIVYTl5w==", + "version": "4.6.2", + "resolved": "https://registry.npmjs.org/p-retry/-/p-retry-4.6.2.tgz", + "integrity": "sha512-312Id396EbJdvRONlngUx0NydfrIQ5lsYu0znKVUzVvArzEIt08V1qhtyESbGVd1FGX7UKtiFp5uwKZdM8wIuQ==", "license": "MIT", "dependencies": { - "is-network-error": "^1.1.0" + "@types/retry": "0.12.0", + "retry": "^0.13.1" }, "engines": { - "node": ">=20" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" + "node": ">=8" } }, - "node_modules/package-json-from-dist": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz", - "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==", - "license": "BlueOak-1.0.0" - }, "node_modules/parseurl": { "version": "1.3.3", "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", @@ -1204,54 +1018,29 @@ "node": ">= 0.8" } }, - "node_modules/path-key": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", - "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, - "node_modules/path-scurry": { - "version": "1.11.1", - "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", - "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", - "license": "BlueOak-1.0.0", - "dependencies": { - "lru-cache": "^10.2.0", - "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" - }, - "engines": { - "node": ">=16 || 14 >=14.18" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, "node_modules/path-to-regexp": { - "version": "0.1.12", - "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz", - "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==", + "version": "0.1.13", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz", + "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==", "license": "MIT" }, "node_modules/protobufjs": { - "version": "7.5.4", - "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.5.4.tgz", - "integrity": "sha512-CvexbZtbov6jW2eXAvLukXjXUW1TzFaivC46BpWc/3BpcCysb5Vffu+B3XHMm8lVEuy2Mm4XGex8hBSg1yapPg==", + "version": "7.5.6", + "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.5.6.tgz", + "integrity": "sha512-M71sTMB146U3u0di3yup8iM+zv8yPRNQVr1KK4tyBitl3qFvEGucq/rGDRShD2rsJhtN02RJaJ7j5X5hmy8SJg==", "hasInstallScript": true, "license": "BSD-3-Clause", "dependencies": { "@protobufjs/aspromise": "^1.1.2", "@protobufjs/base64": "^1.1.2", - "@protobufjs/codegen": "^2.0.4", + "@protobufjs/codegen": "^2.0.5", "@protobufjs/eventemitter": "^1.1.0", "@protobufjs/fetch": "^1.1.0", "@protobufjs/float": "^1.0.2", - "@protobufjs/inquire": "^1.1.0", + "@protobufjs/inquire": "^1.1.1", "@protobufjs/path": "^1.1.2", "@protobufjs/pool": "^1.1.0", - "@protobufjs/utf8": "^1.1.0", + "@protobufjs/utf8": "^1.1.1", "@types/node": ">=13.7.0", "long": "^5.0.0" }, @@ -1311,19 +1100,13 @@ "node": ">= 0.8" } }, - "node_modules/rimraf": { - "version": "5.0.10", - "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-5.0.10.tgz", - "integrity": "sha512-l0OE8wL34P4nJH/H2ffoaniAokM2qSmrtXHmlpvYr5AVVX8msAyW0l8NVJFDxlSK4u3Uh/f41cQheDVdnYijwQ==", - "license": "ISC", - "dependencies": { - "glob": "^10.3.7" - }, - "bin": { - "rimraf": "dist/esm/bin.mjs" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" + "node_modules/retry": { + "version": "0.13.1", + "resolved": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz", + "integrity": "sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==", + "license": "MIT", + "engines": { + "node": ">= 4" } }, "node_modules/safe-buffer": { @@ -1403,27 +1186,6 @@ "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", "license": "ISC" }, - "node_modules/shebang-command": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", - "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", - "license": "MIT", - "dependencies": { - "shebang-regex": "^3.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/shebang-regex": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", - "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, "node_modules/side-channel": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz", @@ -1444,13 +1206,13 @@ } }, "node_modules/side-channel-list": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz", - "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==", + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz", + "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==", "license": "MIT", "dependencies": { "es-errors": "^1.3.0", - "object-inspect": "^1.13.3" + "object-inspect": "^1.13.4" }, "engines": { "node": ">= 0.4" @@ -1496,18 +1258,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/signal-exit": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", - "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", - "license": "ISC", - "engines": { - "node": ">=14" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, "node_modules/statuses": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", @@ -1517,102 +1267,6 @@ "node": ">= 0.8" } }, - "node_modules/string-width": { - "version": "5.1.2", - "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", - "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", - "license": "MIT", - "dependencies": { - "eastasianwidth": "^0.2.0", - "emoji-regex": "^9.2.2", - "strip-ansi": "^7.0.1" - }, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/string-width-cjs": { - "name": "string-width", - "version": "4.2.3", - "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", - "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", - "license": "MIT", - "dependencies": { - "emoji-regex": "^8.0.0", - "is-fullwidth-code-point": "^3.0.0", - "strip-ansi": "^6.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/string-width-cjs/node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, - "node_modules/string-width-cjs/node_modules/emoji-regex": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", - "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", - "license": "MIT" - }, - "node_modules/string-width-cjs/node_modules/strip-ansi": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", - "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", - "license": "MIT", - "dependencies": { - "ansi-regex": "^5.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/strip-ansi": { - "version": "7.1.2", - "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz", - "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==", - "license": "MIT", - "dependencies": { - "ansi-regex": "^6.0.1" - }, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/chalk/strip-ansi?sponsor=1" - } - }, - "node_modules/strip-ansi-cjs": { - "name": "strip-ansi", - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", - "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", - "license": "MIT", - "dependencies": { - "ansi-regex": "^5.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/strip-ansi-cjs/node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, "node_modules/toidentifier": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", @@ -1636,9 +1290,9 @@ } }, "node_modules/undici-types": { - "version": "7.16.0", - "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz", - "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==", + "version": "7.19.2", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.19.2.tgz", + "integrity": "sha512-qYVnV5OEm2AW8cJMCpdV20CDyaN3g0AjDlOGf1OW4iaDEx8MwdtChUp4zu4H0VP3nDRF/8RKWH+IPp9uW0YGZg==", "license": "MIT" }, "node_modules/unpipe": { @@ -1677,116 +1331,10 @@ "node": ">= 8" } }, - "node_modules/which": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", - "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", - "license": "ISC", - "dependencies": { - "isexe": "^2.0.0" - }, - "bin": { - "node-which": "bin/node-which" - }, - "engines": { - "node": ">= 8" - } - }, - "node_modules/wrap-ansi": { - "version": "8.1.0", - "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", - "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", - "license": "MIT", - "dependencies": { - "ansi-styles": "^6.1.0", - "string-width": "^5.0.1", - "strip-ansi": "^7.0.1" - }, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/chalk/wrap-ansi?sponsor=1" - } - }, - "node_modules/wrap-ansi-cjs": { - "name": "wrap-ansi", - "version": "7.0.0", - "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", - "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", - "license": "MIT", - "dependencies": { - "ansi-styles": "^4.0.0", - "string-width": "^4.1.0", - "strip-ansi": "^6.0.0" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/chalk/wrap-ansi?sponsor=1" - } - }, - "node_modules/wrap-ansi-cjs/node_modules/ansi-regex": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", - "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", - "license": "MIT", - "engines": { - "node": ">=8" - } - }, - "node_modules/wrap-ansi-cjs/node_modules/ansi-styles": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", - "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", - "license": "MIT", - "dependencies": { - "color-convert": "^2.0.1" - }, - "engines": { - "node": ">=8" - }, - "funding": { - "url": "https://github.com/chalk/ansi-styles?sponsor=1" - } - }, - "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", - "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", - "license": "MIT" - }, - "node_modules/wrap-ansi-cjs/node_modules/string-width": { - "version": "4.2.3", - "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", - "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", - "license": "MIT", - "dependencies": { - "emoji-regex": "^8.0.0", - "is-fullwidth-code-point": "^3.0.0", - "strip-ansi": "^6.0.1" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/wrap-ansi-cjs/node_modules/strip-ansi": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", - "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", - "license": "MIT", - "dependencies": { - "ansi-regex": "^5.0.1" - }, - "engines": { - "node": ">=8" - } - }, "node_modules/ws": { - "version": "8.19.0", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.19.0.tgz", - "integrity": "sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==", + "version": "8.20.0", + "resolved": "https://registry.npmjs.org/ws/-/ws-8.20.0.tgz", + "integrity": "sha512-sAt8BhgNbzCtgGbt2OxmpuryO63ZoDk/sqaB/znQm94T4fCEsy/yV+7CdC1kJhOU9lboAEU7R3kquuycDoibVA==", "license": "MIT", "engines": { "node": ">=10.0.0" diff --git a/server/package.json b/server/package.json index 8b95a31..a25f1ec 100644 --- a/server/package.json +++ b/server/package.json @@ -8,6 +8,7 @@ }, "dependencies": { "@google/genai": "^1.41.0", + "@keysat/licensing-client": "git+https://github.com/keysat-xyz/keysat-client-ts.git", "cors": "^2.8.5", "express": "^4.21.0" } diff --git a/start9/0.4/Dockerfile b/start9/0.4/Dockerfile index e501dc3..11372e6 100644 --- a/start9/0.4/Dockerfile +++ b/start9/0.4/Dockerfile @@ -13,6 +13,17 @@ # ── Stage 1: Install Node.js dependencies ────────────────── FROM node:20-slim AS builder +# git is required by npm to clone the @keysat/licensing-client git+https +# dependency. Stripped from the final image (only used in this builder stage). +# The url.insteadOf rewrites force npm/git to use https for github.com even +# when npm's git resolver tries ssh first — there's no ssh client or key in +# this container. +RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates \ + && rm -rf /var/lib/apt/lists/* \ + && git config --global --add url."https://github.com/".insteadOf "ssh://git@github.com/" \ + && git config --global --add url."https://github.com/".insteadOf "git@github.com:" \ + && git config --global --add url."https://github.com/".insteadOf "git://github.com/" + WORKDIR /app/server COPY server/package.json server/package-lock.json* ./ RUN npm ci --production --ignore-scripts 2>/dev/null || npm install --production --ignore-scripts @@ -44,6 +55,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ COPY --from=builder /app/server/node_modules ./server/node_modules/ COPY server/package.json ./server/ COPY server/index.js ./server/ +COPY server/license.js ./server/ COPY public/ ./public/ COPY assets/ ./assets/ diff --git a/startos-registry/README.md b/startos-registry/README.md new file mode 100644 index 0000000..26d8c4c --- /dev/null +++ b/startos-registry/README.md @@ -0,0 +1,67 @@ +# StartOS Package Registry + +A minimal, self-hosted StartOS package registry implementing the [Start9 Marketplace Protocol](https://github.com/Start9Labs/registry/blob/master/marketplace_protocol.md). + +**Registry URL:** `https://registry.satsflows.com` + +## Directory Layout + +``` +startos-registry/ + server.js # The registry server (~250 lines of Node.js) + registry.json # Registry name and categories + package.json # Node.js dependencies + nginx.conf # nginx reverse proxy config + startos-registry.service # systemd unit file + packages/ + youtube-summarizer/ # One directory per package + package.json # Package metadata (version, description, etc.) + icon.png # Package icon (PNG) + LICENSE # License text + INSTRUCTIONS.md # User-facing instructions + *.s9pk # The actual package binary + another-package/ # Add more packages the same way + package.json + icon.png + ... + scripts/ + setup-vps.sh # One-time VPS setup (nginx, TLS, systemd) + publish.sh # Upload new versions from your dev machine +``` + +## Adding a New Package + +1. Create a directory under `packages/` with your package ID as the name +2. Create a `package.json` inside it (copy from an existing one as a template) +3. Add `icon.png`, `LICENSE`, and `INSTRUCTIONS.md` +4. Place the `.s9pk` file in the same directory +5. Reload: `systemctl reload startos-registry` + +## Updating a Package + +1. Build a new `.s9pk` with the updated version +2. Update `packages//package.json`: bump the `version` field and add release notes +3. Replace the `.s9pk` file +4. Reload: `systemctl reload startos-registry` + +Or use the publish script from your dev machine: +```bash +./scripts/publish.sh youtube-summarizer ./youtube-summarizer_x86_64.s9pk +``` + +## Version Format (Exver) + +StartOS 0.4.0 uses Extended Versioning: `:` + +- `0.1.0:0` = upstream v0.1.0, wrapper revision 0 +- `0.2.0:0` = new upstream version +- `0.2.0:1` = same upstream, updated wrapper/metadata + +## How Users Add Your Registry + +On their StartOS device: +1. Go to **Marketplace** +2. Tap **Change** (or the registry selector) +3. Tap **Add custom registry** +4. Enter: `https://registry.satsflows.com` +5. Your packages appear in their marketplace diff --git a/startos-registry/nginx.conf b/startos-registry/nginx.conf new file mode 100644 index 0000000..b8daf09 --- /dev/null +++ b/startos-registry/nginx.conf @@ -0,0 +1,54 @@ +# /etc/nginx/sites-available/registry.satsflows.com +# +# nginx reverse proxy for the StartOS registry server. +# Handles TLS termination via Let's Encrypt and proxies to Node.js on port 3030. + +server { + listen 80; + server_name registry.satsflows.com; + + # Let's Encrypt ACME challenge + location /.well-known/acme-challenge/ { + root /var/www/certbot; + } + + # Redirect everything else to HTTPS + location / { + return 301 https://$host$request_uri; + } +} + +server { + listen 443 ssl http2; + server_name registry.satsflows.com; + + # TLS certificates (managed by certbot) + ssl_certificate /etc/letsencrypt/live/registry.satsflows.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/registry.satsflows.com/privkey.pem; + + # Modern TLS settings + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; + ssl_prefer_server_ciphers off; + + # s9pk files can be large (hundreds of MB) + client_max_body_size 500M; + + # Longer timeouts for large file downloads + proxy_read_timeout 600s; + proxy_send_timeout 600s; + proxy_connect_timeout 30s; + + # Proxy to Node.js registry server + location / { + proxy_pass http://127.0.0.1:3030; + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + # Disable buffering for large file streaming + proxy_buffering off; + } +} diff --git a/startos-registry/node_modules/.bin/mime b/startos-registry/node_modules/.bin/mime new file mode 120000 index 0000000..fbb7ee0 --- /dev/null +++ b/startos-registry/node_modules/.bin/mime @@ -0,0 +1 @@ +../mime/cli.js \ No newline at end of file diff --git a/startos-registry/node_modules/.package-lock.json b/startos-registry/node_modules/.package-lock.json new file mode 100644 index 0000000..9200c2a --- /dev/null +++ b/startos-registry/node_modules/.package-lock.json @@ -0,0 +1,820 @@ +{ + "name": "startos-registry", + "version": "1.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "node_modules/accepts": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", + "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==", + "license": "MIT", + "dependencies": { + "mime-types": "~2.1.34", + "negotiator": "0.6.3" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/array-flatten": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", + "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==", + "license": "MIT" + }, + "node_modules/body-parser": { + "version": "1.20.4", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz", + "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==", + "license": "MIT", + "dependencies": { + "bytes": "~3.1.2", + "content-type": "~1.0.5", + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "~1.2.0", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "on-finished": "~2.4.1", + "qs": "~6.14.0", + "raw-body": "~2.5.3", + "type-is": "~1.6.18", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/call-bound": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", + "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/content-disposition": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", + "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==", + "license": "MIT", + "dependencies": { + "safe-buffer": "5.2.1" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/content-type": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", + "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", + "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie-signature": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz", + "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==", + "license": "MIT" + }, + "node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/depd": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", + "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/destroy": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", + "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==", + "license": "MIT", + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/ee-first": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", + "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", + "license": "MIT" + }, + "node_modules/encodeurl": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", + "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-object-atoms": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz", + "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/escape-html": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", + "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==", + "license": "MIT" + }, + "node_modules/etag": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", + "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/express": { + "version": "4.22.1", + "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz", + "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==", + "license": "MIT", + "dependencies": { + "accepts": "~1.3.8", + "array-flatten": "1.1.1", + "body-parser": "~1.20.3", + "content-disposition": "~0.5.4", + "content-type": "~1.0.4", + "cookie": "~0.7.1", + "cookie-signature": "~1.0.6", + "debug": "2.6.9", + "depd": "2.0.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "finalhandler": "~1.3.1", + "fresh": "~0.5.2", + "http-errors": "~2.0.0", + "merge-descriptors": "1.0.3", + "methods": "~1.1.2", + "on-finished": "~2.4.1", + "parseurl": "~1.3.3", + "path-to-regexp": "~0.1.12", + "proxy-addr": "~2.0.7", + "qs": "~6.14.0", + "range-parser": "~1.2.1", + "safe-buffer": "5.2.1", + "send": "~0.19.0", + "serve-static": "~1.16.2", + "setprototypeof": "1.2.0", + "statuses": "~2.0.1", + "type-is": "~1.6.18", + "utils-merge": "1.0.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.10.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/finalhandler": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz", + "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "on-finished": "~2.4.1", + "parseurl": "~1.3.3", + "statuses": "~2.0.2", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/forwarded": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", + "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/fresh": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", + "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", + "license": "MIT", + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/hasown": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", + "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "license": "MIT", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/http-errors": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", + "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", + "license": "MIT", + "dependencies": { + "depd": "~2.0.0", + "inherits": "~2.0.4", + "setprototypeof": "~1.2.0", + "statuses": "~2.0.2", + "toidentifier": "~1.0.1" + }, + "engines": { + "node": ">= 0.8" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/iconv-lite": { + "version": "0.4.24", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", + "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", + "license": "MIT", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "license": "ISC" + }, + "node_modules/ipaddr.js": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", + "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", + "license": "MIT", + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/media-typer": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz", + "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/merge-descriptors": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz", + "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/methods": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz", + "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz", + "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==", + "license": "MIT", + "bin": { + "mime": "cli.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "license": "MIT", + "dependencies": { + "mime-db": "1.52.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, + "node_modules/negotiator": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz", + "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/object-inspect": { + "version": "1.13.4", + "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", + "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/on-finished": { + "version": "2.4.1", + "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", + "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", + "license": "MIT", + "dependencies": { + "ee-first": "1.1.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/parseurl": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", + "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/path-to-regexp": { + "version": "0.1.13", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz", + "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==", + "license": "MIT" + }, + "node_modules/proxy-addr": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", + "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", + "license": "MIT", + "dependencies": { + "forwarded": "0.2.0", + "ipaddr.js": "1.9.1" + }, + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/qs": { + "version": "6.14.2", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz", + "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==", + "license": "BSD-3-Clause", + "dependencies": { + "side-channel": "^1.1.0" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/range-parser": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz", + "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/raw-body": { + "version": "2.5.3", + "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz", + "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==", + "license": "MIT", + "dependencies": { + "bytes": "~3.1.2", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/safer-buffer": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", + "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", + "license": "MIT" + }, + "node_modules/send": { + "version": "0.19.2", + "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz", + "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "fresh": "~0.5.2", + "http-errors": "~2.0.1", + "mime": "1.6.0", + "ms": "2.1.3", + "on-finished": "~2.4.1", + "range-parser": "~1.2.1", + "statuses": "~2.0.2" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/send/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "license": "MIT" + }, + "node_modules/serve-static": { + "version": "1.16.3", + "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz", + "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==", + "license": "MIT", + "dependencies": { + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "parseurl": "~1.3.3", + "send": "~0.19.1" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/setprototypeof": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", + "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", + "license": "ISC" + }, + "node_modules/side-channel": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz", + "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.3", + "side-channel-list": "^1.0.0", + "side-channel-map": "^1.0.1", + "side-channel-weakmap": "^1.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-list": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz", + "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.4" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-map": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", + "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-weakmap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", + "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3", + "side-channel-map": "^1.0.1" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/statuses": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", + "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/toidentifier": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", + "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", + "license": "MIT", + "engines": { + "node": ">=0.6" + } + }, + "node_modules/type-is": { + "version": "1.6.18", + "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", + "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==", + "license": "MIT", + "dependencies": { + "media-typer": "0.3.0", + "mime-types": "~2.1.24" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/unpipe": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", + "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/utils-merge": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz", + "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==", + "license": "MIT", + "engines": { + "node": ">= 0.4.0" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + } + } +} diff --git a/startos-registry/node_modules/accepts/HISTORY.md b/startos-registry/node_modules/accepts/HISTORY.md new file mode 100644 index 0000000..cb5990c --- /dev/null +++ b/startos-registry/node_modules/accepts/HISTORY.md @@ -0,0 +1,243 @@ +1.3.8 / 2022-02-02 +================== + + * deps: mime-types@~2.1.34 + - deps: mime-db@~1.51.0 + * deps: negotiator@0.6.3 + +1.3.7 / 2019-04-29 +================== + + * deps: negotiator@0.6.2 + - Fix sorting charset, encoding, and language with extra parameters + +1.3.6 / 2019-04-28 +================== + + * deps: mime-types@~2.1.24 + - deps: mime-db@~1.40.0 + +1.3.5 / 2018-02-28 +================== + + * deps: mime-types@~2.1.18 + - deps: mime-db@~1.33.0 + +1.3.4 / 2017-08-22 +================== + + * deps: mime-types@~2.1.16 + - deps: mime-db@~1.29.0 + +1.3.3 / 2016-05-02 +================== + + * deps: mime-types@~2.1.11 + - deps: mime-db@~1.23.0 + * deps: negotiator@0.6.1 + - perf: improve `Accept` parsing speed + - perf: improve `Accept-Charset` parsing speed + - perf: improve `Accept-Encoding` parsing speed + - perf: improve `Accept-Language` parsing speed + +1.3.2 / 2016-03-08 +================== + + * deps: mime-types@~2.1.10 + - Fix extension of `application/dash+xml` + - Update primary extension for `audio/mp4` + - deps: mime-db@~1.22.0 + +1.3.1 / 2016-01-19 +================== + + * deps: mime-types@~2.1.9 + - deps: mime-db@~1.21.0 + +1.3.0 / 2015-09-29 +================== + + * deps: mime-types@~2.1.7 + - deps: mime-db@~1.19.0 + * deps: negotiator@0.6.0 + - Fix including type extensions in parameters in `Accept` parsing + - Fix parsing `Accept` parameters with quoted equals + - Fix parsing `Accept` parameters with quoted semicolons + - Lazy-load modules from main entry point + - perf: delay type concatenation until needed + - perf: enable strict mode + - perf: hoist regular expressions + - perf: remove closures getting spec properties + - perf: remove a closure from media type parsing + - perf: remove property delete from media type parsing + +1.2.13 / 2015-09-06 +=================== + + * deps: mime-types@~2.1.6 + - deps: mime-db@~1.18.0 + +1.2.12 / 2015-07-30 +=================== + + * deps: mime-types@~2.1.4 + - deps: mime-db@~1.16.0 + +1.2.11 / 2015-07-16 +=================== + + * deps: mime-types@~2.1.3 + - deps: mime-db@~1.15.0 + +1.2.10 / 2015-07-01 +=================== + + * deps: mime-types@~2.1.2 + - deps: mime-db@~1.14.0 + +1.2.9 / 2015-06-08 +================== + + * deps: mime-types@~2.1.1 + - perf: fix deopt during mapping + +1.2.8 / 2015-06-07 +================== + + * deps: mime-types@~2.1.0 + - deps: mime-db@~1.13.0 + * perf: avoid argument reassignment & argument slice + * perf: avoid negotiator recursive construction + * perf: enable strict mode + * perf: remove unnecessary bitwise operator + +1.2.7 / 2015-05-10 +================== + + * deps: negotiator@0.5.3 + - Fix media type parameter matching to be case-insensitive + +1.2.6 / 2015-05-07 +================== + + * deps: mime-types@~2.0.11 + - deps: mime-db@~1.9.1 + * deps: negotiator@0.5.2 + - Fix comparing media types with quoted values + - Fix splitting media types with quoted commas + +1.2.5 / 2015-03-13 +================== + + * deps: mime-types@~2.0.10 + - deps: mime-db@~1.8.0 + +1.2.4 / 2015-02-14 +================== + + * Support Node.js 0.6 + * deps: mime-types@~2.0.9 + - deps: mime-db@~1.7.0 + * deps: negotiator@0.5.1 + - Fix preference sorting to be stable for long acceptable lists + +1.2.3 / 2015-01-31 +================== + + * deps: mime-types@~2.0.8 + - deps: mime-db@~1.6.0 + +1.2.2 / 2014-12-30 +================== + + * deps: mime-types@~2.0.7 + - deps: mime-db@~1.5.0 + +1.2.1 / 2014-12-30 +================== + + * deps: mime-types@~2.0.5 + - deps: mime-db@~1.3.1 + +1.2.0 / 2014-12-19 +================== + + * deps: negotiator@0.5.0 + - Fix list return order when large accepted list + - Fix missing identity encoding when q=0 exists + - Remove dynamic building of Negotiator class + +1.1.4 / 2014-12-10 +================== + + * deps: mime-types@~2.0.4 + - deps: mime-db@~1.3.0 + +1.1.3 / 2014-11-09 +================== + + * deps: mime-types@~2.0.3 + - deps: mime-db@~1.2.0 + +1.1.2 / 2014-10-14 +================== + + * deps: negotiator@0.4.9 + - Fix error when media type has invalid parameter + +1.1.1 / 2014-09-28 +================== + + * deps: mime-types@~2.0.2 + - deps: mime-db@~1.1.0 + * deps: negotiator@0.4.8 + - Fix all negotiations to be case-insensitive + - Stable sort preferences of same quality according to client order + +1.1.0 / 2014-09-02 +================== + + * update `mime-types` + +1.0.7 / 2014-07-04 +================== + + * Fix wrong type returned from `type` when match after unknown extension + +1.0.6 / 2014-06-24 +================== + + * deps: negotiator@0.4.7 + +1.0.5 / 2014-06-20 +================== + + * fix crash when unknown extension given + +1.0.4 / 2014-06-19 +================== + + * use `mime-types` + +1.0.3 / 2014-06-11 +================== + + * deps: negotiator@0.4.6 + - Order by specificity when quality is the same + +1.0.2 / 2014-05-29 +================== + + * Fix interpretation when header not in request + * deps: pin negotiator@0.4.5 + +1.0.1 / 2014-01-18 +================== + + * Identity encoding isn't always acceptable + * deps: negotiator@~0.4.0 + +1.0.0 / 2013-12-27 +================== + + * Genesis diff --git a/startos-registry/node_modules/accepts/LICENSE b/startos-registry/node_modules/accepts/LICENSE new file mode 100644 index 0000000..0616607 --- /dev/null +++ b/startos-registry/node_modules/accepts/LICENSE @@ -0,0 +1,23 @@ +(The MIT License) + +Copyright (c) 2014 Jonathan Ong +Copyright (c) 2015 Douglas Christopher Wilson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/startos-registry/node_modules/accepts/README.md b/startos-registry/node_modules/accepts/README.md new file mode 100644 index 0000000..82680c5 --- /dev/null +++ b/startos-registry/node_modules/accepts/README.md @@ -0,0 +1,140 @@ +# accepts + +[![NPM Version][npm-version-image]][npm-url] +[![NPM Downloads][npm-downloads-image]][npm-url] +[![Node.js Version][node-version-image]][node-version-url] +[![Build Status][github-actions-ci-image]][github-actions-ci-url] +[![Test Coverage][coveralls-image]][coveralls-url] + +Higher level content negotiation based on [negotiator](https://www.npmjs.com/package/negotiator). +Extracted from [koa](https://www.npmjs.com/package/koa) for general use. + +In addition to negotiator, it allows: + +- Allows types as an array or arguments list, ie `(['text/html', 'application/json'])` + as well as `('text/html', 'application/json')`. +- Allows type shorthands such as `json`. +- Returns `false` when no types match +- Treats non-existent headers as `*` + +## Installation + +This is a [Node.js](https://nodejs.org/en/) module available through the +[npm registry](https://www.npmjs.com/). Installation is done using the +[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally): + +```sh +$ npm install accepts +``` + +## API + +```js +var accepts = require('accepts') +``` + +### accepts(req) + +Create a new `Accepts` object for the given `req`. + +#### .charset(charsets) + +Return the first accepted charset. If nothing in `charsets` is accepted, +then `false` is returned. + +#### .charsets() + +Return the charsets that the request accepts, in the order of the client's +preference (most preferred first). + +#### .encoding(encodings) + +Return the first accepted encoding. If nothing in `encodings` is accepted, +then `false` is returned. + +#### .encodings() + +Return the encodings that the request accepts, in the order of the client's +preference (most preferred first). + +#### .language(languages) + +Return the first accepted language. If nothing in `languages` is accepted, +then `false` is returned. + +#### .languages() + +Return the languages that the request accepts, in the order of the client's +preference (most preferred first). + +#### .type(types) + +Return the first accepted type (and it is returned as the same text as what +appears in the `types` array). If nothing in `types` is accepted, then `false` +is returned. + +The `types` array can contain full MIME types or file extensions. Any value +that is not a full MIME types is passed to `require('mime-types').lookup`. + +#### .types() + +Return the types that the request accepts, in the order of the client's +preference (most preferred first). + +## Examples + +### Simple type negotiation + +This simple example shows how to use `accepts` to return a different typed +respond body based on what the client wants to accept. The server lists it's +preferences in order and will get back the best match between the client and +server. + +```js +var accepts = require('accepts') +var http = require('http') + +function app (req, res) { + var accept = accepts(req) + + // the order of this list is significant; should be server preferred order + switch (accept.type(['json', 'html'])) { + case 'json': + res.setHeader('Content-Type', 'application/json') + res.write('{"hello":"world!"}') + break + case 'html': + res.setHeader('Content-Type', 'text/html') + res.write('hello, world!') + break + default: + // the fallback is text/plain, so no need to specify it above + res.setHeader('Content-Type', 'text/plain') + res.write('hello, world!') + break + } + + res.end() +} + +http.createServer(app).listen(3000) +``` + +You can test this out with the cURL program: +```sh +curl -I -H'Accept: text/html' http://localhost:3000/ +``` + +## License + +[MIT](LICENSE) + +[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/accepts/master +[coveralls-url]: https://coveralls.io/r/jshttp/accepts?branch=master +[github-actions-ci-image]: https://badgen.net/github/checks/jshttp/accepts/master?label=ci +[github-actions-ci-url]: https://github.com/jshttp/accepts/actions/workflows/ci.yml +[node-version-image]: https://badgen.net/npm/node/accepts +[node-version-url]: https://nodejs.org/en/download +[npm-downloads-image]: https://badgen.net/npm/dm/accepts +[npm-url]: https://npmjs.org/package/accepts +[npm-version-image]: https://badgen.net/npm/v/accepts diff --git a/startos-registry/node_modules/accepts/index.js b/startos-registry/node_modules/accepts/index.js new file mode 100644 index 0000000..e9b2f63 --- /dev/null +++ b/startos-registry/node_modules/accepts/index.js @@ -0,0 +1,238 @@ +/*! + * accepts + * Copyright(c) 2014 Jonathan Ong + * Copyright(c) 2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + * @private + */ + +var Negotiator = require('negotiator') +var mime = require('mime-types') + +/** + * Module exports. + * @public + */ + +module.exports = Accepts + +/** + * Create a new Accepts object for the given req. + * + * @param {object} req + * @public + */ + +function Accepts (req) { + if (!(this instanceof Accepts)) { + return new Accepts(req) + } + + this.headers = req.headers + this.negotiator = new Negotiator(req) +} + +/** + * Check if the given `type(s)` is acceptable, returning + * the best match when true, otherwise `undefined`, in which + * case you should respond with 406 "Not Acceptable". + * + * The `type` value may be a single mime type string + * such as "application/json", the extension name + * such as "json" or an array `["json", "html", "text/plain"]`. When a list + * or array is given the _best_ match, if any is returned. + * + * Examples: + * + * // Accept: text/html + * this.types('html'); + * // => "html" + * + * // Accept: text/*, application/json + * this.types('html'); + * // => "html" + * this.types('text/html'); + * // => "text/html" + * this.types('json', 'text'); + * // => "json" + * this.types('application/json'); + * // => "application/json" + * + * // Accept: text/*, application/json + * this.types('image/png'); + * this.types('png'); + * // => undefined + * + * // Accept: text/*;q=.5, application/json + * this.types(['html', 'json']); + * this.types('html', 'json'); + * // => "json" + * + * @param {String|Array} types... + * @return {String|Array|Boolean} + * @public + */ + +Accepts.prototype.type = +Accepts.prototype.types = function (types_) { + var types = types_ + + // support flattened arguments + if (types && !Array.isArray(types)) { + types = new Array(arguments.length) + for (var i = 0; i < types.length; i++) { + types[i] = arguments[i] + } + } + + // no types, return all requested types + if (!types || types.length === 0) { + return this.negotiator.mediaTypes() + } + + // no accept header, return first given type + if (!this.headers.accept) { + return types[0] + } + + var mimes = types.map(extToMime) + var accepts = this.negotiator.mediaTypes(mimes.filter(validMime)) + var first = accepts[0] + + return first + ? types[mimes.indexOf(first)] + : false +} + +/** + * Return accepted encodings or best fit based on `encodings`. + * + * Given `Accept-Encoding: gzip, deflate` + * an array sorted by quality is returned: + * + * ['gzip', 'deflate'] + * + * @param {String|Array} encodings... + * @return {String|Array} + * @public + */ + +Accepts.prototype.encoding = +Accepts.prototype.encodings = function (encodings_) { + var encodings = encodings_ + + // support flattened arguments + if (encodings && !Array.isArray(encodings)) { + encodings = new Array(arguments.length) + for (var i = 0; i < encodings.length; i++) { + encodings[i] = arguments[i] + } + } + + // no encodings, return all requested encodings + if (!encodings || encodings.length === 0) { + return this.negotiator.encodings() + } + + return this.negotiator.encodings(encodings)[0] || false +} + +/** + * Return accepted charsets or best fit based on `charsets`. + * + * Given `Accept-Charset: utf-8, iso-8859-1;q=0.2, utf-7;q=0.5` + * an array sorted by quality is returned: + * + * ['utf-8', 'utf-7', 'iso-8859-1'] + * + * @param {String|Array} charsets... + * @return {String|Array} + * @public + */ + +Accepts.prototype.charset = +Accepts.prototype.charsets = function (charsets_) { + var charsets = charsets_ + + // support flattened arguments + if (charsets && !Array.isArray(charsets)) { + charsets = new Array(arguments.length) + for (var i = 0; i < charsets.length; i++) { + charsets[i] = arguments[i] + } + } + + // no charsets, return all requested charsets + if (!charsets || charsets.length === 0) { + return this.negotiator.charsets() + } + + return this.negotiator.charsets(charsets)[0] || false +} + +/** + * Return accepted languages or best fit based on `langs`. + * + * Given `Accept-Language: en;q=0.8, es, pt` + * an array sorted by quality is returned: + * + * ['es', 'pt', 'en'] + * + * @param {String|Array} langs... + * @return {Array|String} + * @public + */ + +Accepts.prototype.lang = +Accepts.prototype.langs = +Accepts.prototype.language = +Accepts.prototype.languages = function (languages_) { + var languages = languages_ + + // support flattened arguments + if (languages && !Array.isArray(languages)) { + languages = new Array(arguments.length) + for (var i = 0; i < languages.length; i++) { + languages[i] = arguments[i] + } + } + + // no languages, return all requested languages + if (!languages || languages.length === 0) { + return this.negotiator.languages() + } + + return this.negotiator.languages(languages)[0] || false +} + +/** + * Convert extnames to mime. + * + * @param {String} type + * @return {String} + * @private + */ + +function extToMime (type) { + return type.indexOf('/') === -1 + ? mime.lookup(type) + : type +} + +/** + * Check if mime is valid. + * + * @param {String} type + * @return {String} + * @private + */ + +function validMime (type) { + return typeof type === 'string' +} diff --git a/startos-registry/node_modules/accepts/package.json b/startos-registry/node_modules/accepts/package.json new file mode 100644 index 0000000..0f2d15d --- /dev/null +++ b/startos-registry/node_modules/accepts/package.json @@ -0,0 +1,47 @@ +{ + "name": "accepts", + "description": "Higher-level content negotiation", + "version": "1.3.8", + "contributors": [ + "Douglas Christopher Wilson ", + "Jonathan Ong (http://jongleberry.com)" + ], + "license": "MIT", + "repository": "jshttp/accepts", + "dependencies": { + "mime-types": "~2.1.34", + "negotiator": "0.6.3" + }, + "devDependencies": { + "deep-equal": "1.0.1", + "eslint": "7.32.0", + "eslint-config-standard": "14.1.1", + "eslint-plugin-import": "2.25.4", + "eslint-plugin-markdown": "2.2.1", + "eslint-plugin-node": "11.1.0", + "eslint-plugin-promise": "4.3.1", + "eslint-plugin-standard": "4.1.0", + "mocha": "9.2.0", + "nyc": "15.1.0" + }, + "files": [ + "LICENSE", + "HISTORY.md", + "index.js" + ], + "engines": { + "node": ">= 0.6" + }, + "scripts": { + "lint": "eslint .", + "test": "mocha --reporter spec --check-leaks --bail test/", + "test-ci": "nyc --reporter=lcov --reporter=text npm test", + "test-cov": "nyc --reporter=html --reporter=text npm test" + }, + "keywords": [ + "content", + "negotiation", + "accept", + "accepts" + ] +} diff --git a/startos-registry/node_modules/array-flatten/LICENSE b/startos-registry/node_modules/array-flatten/LICENSE new file mode 100644 index 0000000..983fbe8 --- /dev/null +++ b/startos-registry/node_modules/array-flatten/LICENSE @@ -0,0 +1,21 @@ +The MIT License (MIT) + +Copyright (c) 2014 Blake Embrey (hello@blakeembrey.com) + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/startos-registry/node_modules/array-flatten/README.md b/startos-registry/node_modules/array-flatten/README.md new file mode 100644 index 0000000..91fa5b6 --- /dev/null +++ b/startos-registry/node_modules/array-flatten/README.md @@ -0,0 +1,43 @@ +# Array Flatten + +[![NPM version][npm-image]][npm-url] +[![NPM downloads][downloads-image]][downloads-url] +[![Build status][travis-image]][travis-url] +[![Test coverage][coveralls-image]][coveralls-url] + +> Flatten an array of nested arrays into a single flat array. Accepts an optional depth. + +## Installation + +``` +npm install array-flatten --save +``` + +## Usage + +```javascript +var flatten = require('array-flatten') + +flatten([1, [2, [3, [4, [5], 6], 7], 8], 9]) +//=> [1, 2, 3, 4, 5, 6, 7, 8, 9] + +flatten([1, [2, [3, [4, [5], 6], 7], 8], 9], 2) +//=> [1, 2, 3, [4, [5], 6], 7, 8, 9] + +(function () { + flatten(arguments) //=> [1, 2, 3] +})(1, [2, 3]) +``` + +## License + +MIT + +[npm-image]: https://img.shields.io/npm/v/array-flatten.svg?style=flat +[npm-url]: https://npmjs.org/package/array-flatten +[downloads-image]: https://img.shields.io/npm/dm/array-flatten.svg?style=flat +[downloads-url]: https://npmjs.org/package/array-flatten +[travis-image]: https://img.shields.io/travis/blakeembrey/array-flatten.svg?style=flat +[travis-url]: https://travis-ci.org/blakeembrey/array-flatten +[coveralls-image]: https://img.shields.io/coveralls/blakeembrey/array-flatten.svg?style=flat +[coveralls-url]: https://coveralls.io/r/blakeembrey/array-flatten?branch=master diff --git a/startos-registry/node_modules/array-flatten/array-flatten.js b/startos-registry/node_modules/array-flatten/array-flatten.js new file mode 100644 index 0000000..089117b --- /dev/null +++ b/startos-registry/node_modules/array-flatten/array-flatten.js @@ -0,0 +1,64 @@ +'use strict' + +/** + * Expose `arrayFlatten`. + */ +module.exports = arrayFlatten + +/** + * Recursive flatten function with depth. + * + * @param {Array} array + * @param {Array} result + * @param {Number} depth + * @return {Array} + */ +function flattenWithDepth (array, result, depth) { + for (var i = 0; i < array.length; i++) { + var value = array[i] + + if (depth > 0 && Array.isArray(value)) { + flattenWithDepth(value, result, depth - 1) + } else { + result.push(value) + } + } + + return result +} + +/** + * Recursive flatten function. Omitting depth is slightly faster. + * + * @param {Array} array + * @param {Array} result + * @return {Array} + */ +function flattenForever (array, result) { + for (var i = 0; i < array.length; i++) { + var value = array[i] + + if (Array.isArray(value)) { + flattenForever(value, result) + } else { + result.push(value) + } + } + + return result +} + +/** + * Flatten an array, with the ability to define a depth. + * + * @param {Array} array + * @param {Number} depth + * @return {Array} + */ +function arrayFlatten (array, depth) { + if (depth == null) { + return flattenForever(array, []) + } + + return flattenWithDepth(array, [], depth) +} diff --git a/startos-registry/node_modules/array-flatten/package.json b/startos-registry/node_modules/array-flatten/package.json new file mode 100644 index 0000000..1a24e2a --- /dev/null +++ b/startos-registry/node_modules/array-flatten/package.json @@ -0,0 +1,39 @@ +{ + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "main": "array-flatten.js", + "files": [ + "array-flatten.js", + "LICENSE" + ], + "scripts": { + "test": "istanbul cover _mocha -- -R spec" + }, + "repository": { + "type": "git", + "url": "git://github.com/blakeembrey/array-flatten.git" + }, + "keywords": [ + "array", + "flatten", + "arguments", + "depth" + ], + "author": { + "name": "Blake Embrey", + "email": "hello@blakeembrey.com", + "url": "http://blakeembrey.me" + }, + "license": "MIT", + "bugs": { + "url": "https://github.com/blakeembrey/array-flatten/issues" + }, + "homepage": "https://github.com/blakeembrey/array-flatten", + "devDependencies": { + "istanbul": "^0.3.13", + "mocha": "^2.2.4", + "pre-commit": "^1.0.7", + "standard": "^3.7.3" + } +} diff --git a/startos-registry/node_modules/body-parser/HISTORY.md b/startos-registry/node_modules/body-parser/HISTORY.md new file mode 100644 index 0000000..c9b0b5b --- /dev/null +++ b/startos-registry/node_modules/body-parser/HISTORY.md @@ -0,0 +1,680 @@ +1.20.4 / 2025-12-01 +=================== + + * deps: qs@~6.14.0 + * deps: use tilde notation for dependencies + * deps: http-errors@~2.0.1 + * deps: raw-body@~2.5.3 + +1.20.3 / 2024-09-10 +=================== + + * deps: qs@6.13.0 + * add `depth` option to customize the depth level in the parser + * IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`) + +1.20.2 / 2023-02-21 +=================== + + * Fix strict json error message on Node.js 19+ + * deps: content-type@~1.0.5 + - perf: skip value escaping when unnecessary + * deps: raw-body@2.5.2 + +1.20.1 / 2022-10-06 +=================== + + * deps: qs@6.11.0 + * perf: remove unnecessary object clone + +1.20.0 / 2022-04-02 +=================== + + * Fix error message for json parse whitespace in `strict` + * Fix internal error when inflated body exceeds limit + * Prevent loss of async hooks context + * Prevent hanging when request already read + * deps: depd@2.0.0 + - Replace internal `eval` usage with `Function` constructor + - Use instance methods on `process` to check for listeners + * deps: http-errors@2.0.0 + - deps: depd@2.0.0 + - deps: statuses@2.0.1 + * deps: on-finished@2.4.1 + * deps: qs@6.10.3 + * deps: raw-body@2.5.1 + - deps: http-errors@2.0.0 + +1.19.2 / 2022-02-15 +=================== + + * deps: bytes@3.1.2 + * deps: qs@6.9.7 + * Fix handling of `__proto__` keys + * deps: raw-body@2.4.3 + - deps: bytes@3.1.2 + +1.19.1 / 2021-12-10 +=================== + + * deps: bytes@3.1.1 + * deps: http-errors@1.8.1 + - deps: inherits@2.0.4 + - deps: toidentifier@1.0.1 + - deps: setprototypeof@1.2.0 + * deps: qs@6.9.6 + * deps: raw-body@2.4.2 + - deps: bytes@3.1.1 + - deps: http-errors@1.8.1 + * deps: safe-buffer@5.2.1 + * deps: type-is@~1.6.18 + +1.19.0 / 2019-04-25 +=================== + + * deps: bytes@3.1.0 + - Add petabyte (`pb`) support + * deps: http-errors@1.7.2 + - Set constructor name when possible + - deps: setprototypeof@1.1.1 + - deps: statuses@'>= 1.5.0 < 2' + * deps: iconv-lite@0.4.24 + - Added encoding MIK + * deps: qs@6.7.0 + - Fix parsing array brackets after index + * deps: raw-body@2.4.0 + - deps: bytes@3.1.0 + - deps: http-errors@1.7.2 + - deps: iconv-lite@0.4.24 + * deps: type-is@~1.6.17 + - deps: mime-types@~2.1.24 + - perf: prevent internal `throw` on invalid type + +1.18.3 / 2018-05-14 +=================== + + * Fix stack trace for strict json parse error + * deps: depd@~1.1.2 + - perf: remove argument reassignment + * deps: http-errors@~1.6.3 + - deps: depd@~1.1.2 + - deps: setprototypeof@1.1.0 + - deps: statuses@'>= 1.3.1 < 2' + * deps: iconv-lite@0.4.23 + - Fix loading encoding with year appended + - Fix deprecation warnings on Node.js 10+ + * deps: qs@6.5.2 + * deps: raw-body@2.3.3 + - deps: http-errors@1.6.3 + - deps: iconv-lite@0.4.23 + * deps: type-is@~1.6.16 + - deps: mime-types@~2.1.18 + +1.18.2 / 2017-09-22 +=================== + + * deps: debug@2.6.9 + * perf: remove argument reassignment + +1.18.1 / 2017-09-12 +=================== + + * deps: content-type@~1.0.4 + - perf: remove argument reassignment + - perf: skip parameter parsing when no parameters + * deps: iconv-lite@0.4.19 + - Fix ISO-8859-1 regression + - Update Windows-1255 + * deps: qs@6.5.1 + - Fix parsing & compacting very deep objects + * deps: raw-body@2.3.2 + - deps: iconv-lite@0.4.19 + +1.18.0 / 2017-09-08 +=================== + + * Fix JSON strict violation error to match native parse error + * Include the `body` property on verify errors + * Include the `type` property on all generated errors + * Use `http-errors` to set status code on errors + * deps: bytes@3.0.0 + * deps: debug@2.6.8 + * deps: depd@~1.1.1 + - Remove unnecessary `Buffer` loading + * deps: http-errors@~1.6.2 + - deps: depd@1.1.1 + * deps: iconv-lite@0.4.18 + - Add support for React Native + - Add a warning if not loaded as utf-8 + - Fix CESU-8 decoding in Node.js 8 + - Improve speed of ISO-8859-1 encoding + * deps: qs@6.5.0 + * deps: raw-body@2.3.1 + - Use `http-errors` for standard emitted errors + - deps: bytes@3.0.0 + - deps: iconv-lite@0.4.18 + - perf: skip buffer decoding on overage chunk + * perf: prevent internal `throw` when missing charset + +1.17.2 / 2017-05-17 +=================== + + * deps: debug@2.6.7 + - Fix `DEBUG_MAX_ARRAY_LENGTH` + - deps: ms@2.0.0 + * deps: type-is@~1.6.15 + - deps: mime-types@~2.1.15 + +1.17.1 / 2017-03-06 +=================== + + * deps: qs@6.4.0 + - Fix regression parsing keys starting with `[` + +1.17.0 / 2017-03-01 +=================== + + * deps: http-errors@~1.6.1 + - Make `message` property enumerable for `HttpError`s + - deps: setprototypeof@1.0.3 + * deps: qs@6.3.1 + - Fix compacting nested arrays + +1.16.1 / 2017-02-10 +=================== + + * deps: debug@2.6.1 + - Fix deprecation messages in WebStorm and other editors + - Undeprecate `DEBUG_FD` set to `1` or `2` + +1.16.0 / 2017-01-17 +=================== + + * deps: debug@2.6.0 + - Allow colors in workers + - Deprecated `DEBUG_FD` environment variable + - Fix error when running under React Native + - Use same color for same namespace + - deps: ms@0.7.2 + * deps: http-errors@~1.5.1 + - deps: inherits@2.0.3 + - deps: setprototypeof@1.0.2 + - deps: statuses@'>= 1.3.1 < 2' + * deps: iconv-lite@0.4.15 + - Added encoding MS-31J + - Added encoding MS-932 + - Added encoding MS-936 + - Added encoding MS-949 + - Added encoding MS-950 + - Fix GBK/GB18030 handling of Euro character + * deps: qs@6.2.1 + - Fix array parsing from skipping empty values + * deps: raw-body@~2.2.0 + - deps: iconv-lite@0.4.15 + * deps: type-is@~1.6.14 + - deps: mime-types@~2.1.13 + +1.15.2 / 2016-06-19 +=================== + + * deps: bytes@2.4.0 + * deps: content-type@~1.0.2 + - perf: enable strict mode + * deps: http-errors@~1.5.0 + - Use `setprototypeof` module to replace `__proto__` setting + - deps: statuses@'>= 1.3.0 < 2' + - perf: enable strict mode + * deps: qs@6.2.0 + * deps: raw-body@~2.1.7 + - deps: bytes@2.4.0 + - perf: remove double-cleanup on happy path + * deps: type-is@~1.6.13 + - deps: mime-types@~2.1.11 + +1.15.1 / 2016-05-05 +=================== + + * deps: bytes@2.3.0 + - Drop partial bytes on all parsed units + - Fix parsing byte string that looks like hex + * deps: raw-body@~2.1.6 + - deps: bytes@2.3.0 + * deps: type-is@~1.6.12 + - deps: mime-types@~2.1.10 + +1.15.0 / 2016-02-10 +=================== + + * deps: http-errors@~1.4.0 + - Add `HttpError` export, for `err instanceof createError.HttpError` + - deps: inherits@2.0.1 + - deps: statuses@'>= 1.2.1 < 2' + * deps: qs@6.1.0 + * deps: type-is@~1.6.11 + - deps: mime-types@~2.1.9 + +1.14.2 / 2015-12-16 +=================== + + * deps: bytes@2.2.0 + * deps: iconv-lite@0.4.13 + * deps: qs@5.2.0 + * deps: raw-body@~2.1.5 + - deps: bytes@2.2.0 + - deps: iconv-lite@0.4.13 + * deps: type-is@~1.6.10 + - deps: mime-types@~2.1.8 + +1.14.1 / 2015-09-27 +=================== + + * Fix issue where invalid charset results in 400 when `verify` used + * deps: iconv-lite@0.4.12 + - Fix CESU-8 decoding in Node.js 4.x + * deps: raw-body@~2.1.4 + - Fix masking critical errors from `iconv-lite` + - deps: iconv-lite@0.4.12 + * deps: type-is@~1.6.9 + - deps: mime-types@~2.1.7 + +1.14.0 / 2015-09-16 +=================== + + * Fix JSON strict parse error to match syntax errors + * Provide static `require` analysis in `urlencoded` parser + * deps: depd@~1.1.0 + - Support web browser loading + * deps: qs@5.1.0 + * deps: raw-body@~2.1.3 + - Fix sync callback when attaching data listener causes sync read + * deps: type-is@~1.6.8 + - Fix type error when given invalid type to match against + - deps: mime-types@~2.1.6 + +1.13.3 / 2015-07-31 +=================== + + * deps: type-is@~1.6.6 + - deps: mime-types@~2.1.4 + +1.13.2 / 2015-07-05 +=================== + + * deps: iconv-lite@0.4.11 + * deps: qs@4.0.0 + - Fix dropping parameters like `hasOwnProperty` + - Fix user-visible incompatibilities from 3.1.0 + - Fix various parsing edge cases + * deps: raw-body@~2.1.2 + - Fix error stack traces to skip `makeError` + - deps: iconv-lite@0.4.11 + * deps: type-is@~1.6.4 + - deps: mime-types@~2.1.2 + - perf: enable strict mode + - perf: remove argument reassignment + +1.13.1 / 2015-06-16 +=================== + + * deps: qs@2.4.2 + - Downgraded from 3.1.0 because of user-visible incompatibilities + +1.13.0 / 2015-06-14 +=================== + + * Add `statusCode` property on `Error`s, in addition to `status` + * Change `type` default to `application/json` for JSON parser + * Change `type` default to `application/x-www-form-urlencoded` for urlencoded parser + * Provide static `require` analysis + * Use the `http-errors` module to generate errors + * deps: bytes@2.1.0 + - Slight optimizations + * deps: iconv-lite@0.4.10 + - The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails + - Leading BOM is now removed when decoding + * deps: on-finished@~2.3.0 + - Add defined behavior for HTTP `CONNECT` requests + - Add defined behavior for HTTP `Upgrade` requests + - deps: ee-first@1.1.1 + * deps: qs@3.1.0 + - Fix dropping parameters like `hasOwnProperty` + - Fix various parsing edge cases + - Parsed object now has `null` prototype + * deps: raw-body@~2.1.1 + - Use `unpipe` module for unpiping requests + - deps: iconv-lite@0.4.10 + * deps: type-is@~1.6.3 + - deps: mime-types@~2.1.1 + - perf: reduce try block size + - perf: remove bitwise operations + * perf: enable strict mode + * perf: remove argument reassignment + * perf: remove delete call + +1.12.4 / 2015-05-10 +=================== + + * deps: debug@~2.2.0 + * deps: qs@2.4.2 + - Fix allowing parameters like `constructor` + * deps: on-finished@~2.2.1 + * deps: raw-body@~2.0.1 + - Fix a false-positive when unpiping in Node.js 0.8 + - deps: bytes@2.0.1 + * deps: type-is@~1.6.2 + - deps: mime-types@~2.0.11 + +1.12.3 / 2015-04-15 +=================== + + * Slight efficiency improvement when not debugging + * deps: depd@~1.0.1 + * deps: iconv-lite@0.4.8 + - Add encoding alias UNICODE-1-1-UTF-7 + * deps: raw-body@1.3.4 + - Fix hanging callback if request aborts during read + - deps: iconv-lite@0.4.8 + +1.12.2 / 2015-03-16 +=================== + + * deps: qs@2.4.1 + - Fix error when parameter `hasOwnProperty` is present + +1.12.1 / 2015-03-15 +=================== + + * deps: debug@~2.1.3 + - Fix high intensity foreground color for bold + - deps: ms@0.7.0 + * deps: type-is@~1.6.1 + - deps: mime-types@~2.0.10 + +1.12.0 / 2015-02-13 +=================== + + * add `debug` messages + * accept a function for the `type` option + * use `content-type` to parse `Content-Type` headers + * deps: iconv-lite@0.4.7 + - Gracefully support enumerables on `Object.prototype` + * deps: raw-body@1.3.3 + - deps: iconv-lite@0.4.7 + * deps: type-is@~1.6.0 + - fix argument reassignment + - fix false-positives in `hasBody` `Transfer-Encoding` check + - support wildcard for both type and subtype (`*/*`) + - deps: mime-types@~2.0.9 + +1.11.0 / 2015-01-30 +=================== + + * make internal `extended: true` depth limit infinity + * deps: type-is@~1.5.6 + - deps: mime-types@~2.0.8 + +1.10.2 / 2015-01-20 +=================== + + * deps: iconv-lite@0.4.6 + - Fix rare aliases of single-byte encodings + * deps: raw-body@1.3.2 + - deps: iconv-lite@0.4.6 + +1.10.1 / 2015-01-01 +=================== + + * deps: on-finished@~2.2.0 + * deps: type-is@~1.5.5 + - deps: mime-types@~2.0.7 + +1.10.0 / 2014-12-02 +=================== + + * make internal `extended: true` array limit dynamic + +1.9.3 / 2014-11-21 +================== + + * deps: iconv-lite@0.4.5 + - Fix Windows-31J and X-SJIS encoding support + * deps: qs@2.3.3 + - Fix `arrayLimit` behavior + * deps: raw-body@1.3.1 + - deps: iconv-lite@0.4.5 + * deps: type-is@~1.5.3 + - deps: mime-types@~2.0.3 + +1.9.2 / 2014-10-27 +================== + + * deps: qs@2.3.2 + - Fix parsing of mixed objects and values + +1.9.1 / 2014-10-22 +================== + + * deps: on-finished@~2.1.1 + - Fix handling of pipelined requests + * deps: qs@2.3.0 + - Fix parsing of mixed implicit and explicit arrays + * deps: type-is@~1.5.2 + - deps: mime-types@~2.0.2 + +1.9.0 / 2014-09-24 +================== + + * include the charset in "unsupported charset" error message + * include the encoding in "unsupported content encoding" error message + * deps: depd@~1.0.0 + +1.8.4 / 2014-09-23 +================== + + * fix content encoding to be case-insensitive + +1.8.3 / 2014-09-19 +================== + + * deps: qs@2.2.4 + - Fix issue with object keys starting with numbers truncated + +1.8.2 / 2014-09-15 +================== + + * deps: depd@0.4.5 + +1.8.1 / 2014-09-07 +================== + + * deps: media-typer@0.3.0 + * deps: type-is@~1.5.1 + +1.8.0 / 2014-09-05 +================== + + * make empty-body-handling consistent between chunked requests + - empty `json` produces `{}` + - empty `raw` produces `new Buffer(0)` + - empty `text` produces `''` + - empty `urlencoded` produces `{}` + * deps: qs@2.2.3 + - Fix issue where first empty value in array is discarded + * deps: type-is@~1.5.0 + - fix `hasbody` to be true for `content-length: 0` + +1.7.0 / 2014-09-01 +================== + + * add `parameterLimit` option to `urlencoded` parser + * change `urlencoded` extended array limit to 100 + * respond with 413 when over `parameterLimit` in `urlencoded` + +1.6.7 / 2014-08-29 +================== + + * deps: qs@2.2.2 + - Remove unnecessary cloning + +1.6.6 / 2014-08-27 +================== + + * deps: qs@2.2.0 + - Array parsing fix + - Performance improvements + +1.6.5 / 2014-08-16 +================== + + * deps: on-finished@2.1.0 + +1.6.4 / 2014-08-14 +================== + + * deps: qs@1.2.2 + +1.6.3 / 2014-08-10 +================== + + * deps: qs@1.2.1 + +1.6.2 / 2014-08-07 +================== + + * deps: qs@1.2.0 + - Fix parsing array of objects + +1.6.1 / 2014-08-06 +================== + + * deps: qs@1.1.0 + - Accept urlencoded square brackets + - Accept empty values in implicit array notation + +1.6.0 / 2014-08-05 +================== + + * deps: qs@1.0.2 + - Complete rewrite + - Limits array length to 20 + - Limits object depth to 5 + - Limits parameters to 1,000 + +1.5.2 / 2014-07-27 +================== + + * deps: depd@0.4.4 + - Work-around v8 generating empty stack traces + +1.5.1 / 2014-07-26 +================== + + * deps: depd@0.4.3 + - Fix exception when global `Error.stackTraceLimit` is too low + +1.5.0 / 2014-07-20 +================== + + * deps: depd@0.4.2 + - Add `TRACE_DEPRECATION` environment variable + - Remove non-standard grey color from color output + - Support `--no-deprecation` argument + - Support `--trace-deprecation` argument + * deps: iconv-lite@0.4.4 + - Added encoding UTF-7 + * deps: raw-body@1.3.0 + - deps: iconv-lite@0.4.4 + - Added encoding UTF-7 + - Fix `Cannot switch to old mode now` error on Node.js 0.10+ + * deps: type-is@~1.3.2 + +1.4.3 / 2014-06-19 +================== + + * deps: type-is@1.3.1 + - fix global variable leak + +1.4.2 / 2014-06-19 +================== + + * deps: type-is@1.3.0 + - improve type parsing + +1.4.1 / 2014-06-19 +================== + + * fix urlencoded extended deprecation message + +1.4.0 / 2014-06-19 +================== + + * add `text` parser + * add `raw` parser + * check accepted charset in content-type (accepts utf-8) + * check accepted encoding in content-encoding (accepts identity) + * deprecate `bodyParser()` middleware; use `.json()` and `.urlencoded()` as needed + * deprecate `urlencoded()` without provided `extended` option + * lazy-load urlencoded parsers + * parsers split into files for reduced mem usage + * support gzip and deflate bodies + - set `inflate: false` to turn off + * deps: raw-body@1.2.2 + - Support all encodings from `iconv-lite` + +1.3.1 / 2014-06-11 +================== + + * deps: type-is@1.2.1 + - Switch dependency from mime to mime-types@1.0.0 + +1.3.0 / 2014-05-31 +================== + + * add `extended` option to urlencoded parser + +1.2.2 / 2014-05-27 +================== + + * deps: raw-body@1.1.6 + - assert stream encoding on node.js 0.8 + - assert stream encoding on node.js < 0.10.6 + - deps: bytes@1 + +1.2.1 / 2014-05-26 +================== + + * invoke `next(err)` after request fully read + - prevents hung responses and socket hang ups + +1.2.0 / 2014-05-11 +================== + + * add `verify` option + * deps: type-is@1.2.0 + - support suffix matching + +1.1.2 / 2014-05-11 +================== + + * improve json parser speed + +1.1.1 / 2014-05-11 +================== + + * fix repeated limit parsing with every request + +1.1.0 / 2014-05-10 +================== + + * add `type` option + * deps: pin for safety and consistency + +1.0.2 / 2014-04-14 +================== + + * use `type-is` module + +1.0.1 / 2014-03-20 +================== + + * lower default limits to 100kb diff --git a/startos-registry/node_modules/body-parser/LICENSE b/startos-registry/node_modules/body-parser/LICENSE new file mode 100644 index 0000000..386b7b6 --- /dev/null +++ b/startos-registry/node_modules/body-parser/LICENSE @@ -0,0 +1,23 @@ +(The MIT License) + +Copyright (c) 2014 Jonathan Ong +Copyright (c) 2014-2015 Douglas Christopher Wilson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/startos-registry/node_modules/body-parser/README.md b/startos-registry/node_modules/body-parser/README.md new file mode 100644 index 0000000..f6661b7 --- /dev/null +++ b/startos-registry/node_modules/body-parser/README.md @@ -0,0 +1,476 @@ +# body-parser + +[![NPM Version][npm-version-image]][npm-url] +[![NPM Downloads][npm-downloads-image]][npm-url] +[![Build Status][ci-image]][ci-url] +[![Test Coverage][coveralls-image]][coveralls-url] +[![OpenSSF Scorecard Badge][ossf-scorecard-badge]][ossf-scorecard-visualizer] + +Node.js body parsing middleware. + +Parse incoming request bodies in a middleware before your handlers, available +under the `req.body` property. + +**Note** As `req.body`'s shape is based on user-controlled input, all +properties and values in this object are untrusted and should be validated +before trusting. For example, `req.body.foo.toString()` may fail in multiple +ways, for example the `foo` property may not be there or may not be a string, +and `toString` may not be a function and instead a string or other user input. + +[Learn about the anatomy of an HTTP transaction in Node.js](https://nodejs.org/en/docs/guides/anatomy-of-an-http-transaction/). + +_This does not handle multipart bodies_, due to their complex and typically +large nature. For multipart bodies, you may be interested in the following +modules: + + * [busboy](https://www.npmjs.org/package/busboy#readme) and + [connect-busboy](https://www.npmjs.org/package/connect-busboy#readme) + * [multiparty](https://www.npmjs.org/package/multiparty#readme) and + [connect-multiparty](https://www.npmjs.org/package/connect-multiparty#readme) + * [formidable](https://www.npmjs.org/package/formidable#readme) + * [multer](https://www.npmjs.org/package/multer#readme) + +This module provides the following parsers: + + * [JSON body parser](#bodyparserjsonoptions) + * [Raw body parser](#bodyparserrawoptions) + * [Text body parser](#bodyparsertextoptions) + * [URL-encoded form body parser](#bodyparserurlencodedoptions) + +Other body parsers you might be interested in: + +- [body](https://www.npmjs.org/package/body#readme) +- [co-body](https://www.npmjs.org/package/co-body#readme) + +## Installation + +```sh +$ npm install body-parser +``` + +## API + +```js +var bodyParser = require('body-parser') +``` + +The `bodyParser` object exposes various factories to create middlewares. All +middlewares will populate the `req.body` property with the parsed body when +the `Content-Type` request header matches the `type` option, or an empty +object (`{}`) if there was no body to parse, the `Content-Type` was not matched, +or an error occurred. + +The various errors returned by this module are described in the +[errors section](#errors). + +### bodyParser.json([options]) + +Returns middleware that only parses `json` and only looks at requests where +the `Content-Type` header matches the `type` option. This parser accepts any +Unicode encoding of the body and supports automatic inflation of `gzip` and +`deflate` encodings. + +A new `body` object containing the parsed data is populated on the `request` +object after the middleware (i.e. `req.body`). + +#### Options + +The `json` function takes an optional `options` object that may contain any of +the following keys: + +##### inflate + +When set to `true`, then deflated (compressed) bodies will be inflated; when +`false`, deflated bodies are rejected. Defaults to `true`. + +##### limit + +Controls the maximum request body size. If this is a number, then the value +specifies the number of bytes; if it is a string, the value is passed to the +[bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults +to `'100kb'`. + +##### reviver + +The `reviver` option is passed directly to `JSON.parse` as the second +argument. You can find more information on this argument +[in the MDN documentation about JSON.parse](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/parse#Example.3A_Using_the_reviver_parameter). + +##### strict + +When set to `true`, will only accept arrays and objects; when `false` will +accept anything `JSON.parse` accepts. Defaults to `true`. + +##### type + +The `type` option is used to determine what media type the middleware will +parse. This option can be a string, array of strings, or a function. If not a +function, `type` option is passed directly to the +[type-is](https://www.npmjs.org/package/type-is#readme) library and this can +be an extension name (like `json`), a mime type (like `application/json`), or +a mime type with a wildcard (like `*/*` or `*/json`). If a function, the `type` +option is called as `fn(req)` and the request is parsed if it returns a truthy +value. Defaults to `application/json`. + +##### verify + +The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`, +where `buf` is a `Buffer` of the raw request body and `encoding` is the +encoding of the request. The parsing can be aborted by throwing an error. + +### bodyParser.raw([options]) + +Returns middleware that parses all bodies as a `Buffer` and only looks at +requests where the `Content-Type` header matches the `type` option. This +parser supports automatic inflation of `gzip` and `deflate` encodings. + +A new `body` object containing the parsed data is populated on the `request` +object after the middleware (i.e. `req.body`). This will be a `Buffer` object +of the body. + +#### Options + +The `raw` function takes an optional `options` object that may contain any of +the following keys: + +##### inflate + +When set to `true`, then deflated (compressed) bodies will be inflated; when +`false`, deflated bodies are rejected. Defaults to `true`. + +##### limit + +Controls the maximum request body size. If this is a number, then the value +specifies the number of bytes; if it is a string, the value is passed to the +[bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults +to `'100kb'`. + +##### type + +The `type` option is used to determine what media type the middleware will +parse. This option can be a string, array of strings, or a function. +If not a function, `type` option is passed directly to the +[type-is](https://www.npmjs.org/package/type-is#readme) library and this +can be an extension name (like `bin`), a mime type (like +`application/octet-stream`), or a mime type with a wildcard (like `*/*` or +`application/*`). If a function, the `type` option is called as `fn(req)` +and the request is parsed if it returns a truthy value. Defaults to +`application/octet-stream`. + +##### verify + +The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`, +where `buf` is a `Buffer` of the raw request body and `encoding` is the +encoding of the request. The parsing can be aborted by throwing an error. + +### bodyParser.text([options]) + +Returns middleware that parses all bodies as a string and only looks at +requests where the `Content-Type` header matches the `type` option. This +parser supports automatic inflation of `gzip` and `deflate` encodings. + +A new `body` string containing the parsed data is populated on the `request` +object after the middleware (i.e. `req.body`). This will be a string of the +body. + +#### Options + +The `text` function takes an optional `options` object that may contain any of +the following keys: + +##### defaultCharset + +Specify the default character set for the text content if the charset is not +specified in the `Content-Type` header of the request. Defaults to `utf-8`. + +##### inflate + +When set to `true`, then deflated (compressed) bodies will be inflated; when +`false`, deflated bodies are rejected. Defaults to `true`. + +##### limit + +Controls the maximum request body size. If this is a number, then the value +specifies the number of bytes; if it is a string, the value is passed to the +[bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults +to `'100kb'`. + +##### type + +The `type` option is used to determine what media type the middleware will +parse. This option can be a string, array of strings, or a function. If not +a function, `type` option is passed directly to the +[type-is](https://www.npmjs.org/package/type-is#readme) library and this can +be an extension name (like `txt`), a mime type (like `text/plain`), or a mime +type with a wildcard (like `*/*` or `text/*`). If a function, the `type` +option is called as `fn(req)` and the request is parsed if it returns a +truthy value. Defaults to `text/plain`. + +##### verify + +The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`, +where `buf` is a `Buffer` of the raw request body and `encoding` is the +encoding of the request. The parsing can be aborted by throwing an error. + +### bodyParser.urlencoded([options]) + +Returns middleware that only parses `urlencoded` bodies and only looks at +requests where the `Content-Type` header matches the `type` option. This +parser accepts only UTF-8 encoding of the body and supports automatic +inflation of `gzip` and `deflate` encodings. + +A new `body` object containing the parsed data is populated on the `request` +object after the middleware (i.e. `req.body`). This object will contain +key-value pairs, where the value can be a string or array (when `extended` is +`false`), or any type (when `extended` is `true`). + +#### Options + +The `urlencoded` function takes an optional `options` object that may contain +any of the following keys: + +##### extended + +The `extended` option allows to choose between parsing the URL-encoded data +with the `querystring` library (when `false`) or the `qs` library (when +`true`). The "extended" syntax allows for rich objects and arrays to be +encoded into the URL-encoded format, allowing for a JSON-like experience +with URL-encoded. For more information, please +[see the qs library](https://www.npmjs.org/package/qs#readme). + +Defaults to `true`, but using the default has been deprecated. Please +research into the difference between `qs` and `querystring` and choose the +appropriate setting. + +##### inflate + +When set to `true`, then deflated (compressed) bodies will be inflated; when +`false`, deflated bodies are rejected. Defaults to `true`. + +##### limit + +Controls the maximum request body size. If this is a number, then the value +specifies the number of bytes; if it is a string, the value is passed to the +[bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults +to `'100kb'`. + +##### parameterLimit + +The `parameterLimit` option controls the maximum number of parameters that +are allowed in the URL-encoded data. If a request contains more parameters +than this value, a 413 will be returned to the client. Defaults to `1000`. + +##### type + +The `type` option is used to determine what media type the middleware will +parse. This option can be a string, array of strings, or a function. If not +a function, `type` option is passed directly to the +[type-is](https://www.npmjs.org/package/type-is#readme) library and this can +be an extension name (like `urlencoded`), a mime type (like +`application/x-www-form-urlencoded`), or a mime type with a wildcard (like +`*/x-www-form-urlencoded`). If a function, the `type` option is called as +`fn(req)` and the request is parsed if it returns a truthy value. Defaults +to `application/x-www-form-urlencoded`. + +##### verify + +The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`, +where `buf` is a `Buffer` of the raw request body and `encoding` is the +encoding of the request. The parsing can be aborted by throwing an error. + +#### depth + +The `depth` option is used to configure the maximum depth of the `qs` library when `extended` is `true`. This allows you to limit the amount of keys that are parsed and can be useful to prevent certain types of abuse. Defaults to `32`. It is recommended to keep this value as low as possible. + +## Errors + +The middlewares provided by this module create errors using the +[`http-errors` module](https://www.npmjs.com/package/http-errors). The errors +will typically have a `status`/`statusCode` property that contains the suggested +HTTP response code, an `expose` property to determine if the `message` property +should be displayed to the client, a `type` property to determine the type of +error without matching against the `message`, and a `body` property containing +the read body, if available. + +The following are the common errors created, though any error can come through +for various reasons. + +### content encoding unsupported + +This error will occur when the request had a `Content-Encoding` header that +contained an encoding but the "inflation" option was set to `false`. The +`status` property is set to `415`, the `type` property is set to +`'encoding.unsupported'`, and the `charset` property will be set to the +encoding that is unsupported. + +### entity parse failed + +This error will occur when the request contained an entity that could not be +parsed by the middleware. The `status` property is set to `400`, the `type` +property is set to `'entity.parse.failed'`, and the `body` property is set to +the entity value that failed parsing. + +### entity verify failed + +This error will occur when the request contained an entity that could not be +failed verification by the defined `verify` option. The `status` property is +set to `403`, the `type` property is set to `'entity.verify.failed'`, and the +`body` property is set to the entity value that failed verification. + +### request aborted + +This error will occur when the request is aborted by the client before reading +the body has finished. The `received` property will be set to the number of +bytes received before the request was aborted and the `expected` property is +set to the number of expected bytes. The `status` property is set to `400` +and `type` property is set to `'request.aborted'`. + +### request entity too large + +This error will occur when the request body's size is larger than the "limit" +option. The `limit` property will be set to the byte limit and the `length` +property will be set to the request body's length. The `status` property is +set to `413` and the `type` property is set to `'entity.too.large'`. + +### request size did not match content length + +This error will occur when the request's length did not match the length from +the `Content-Length` header. This typically occurs when the request is malformed, +typically when the `Content-Length` header was calculated based on characters +instead of bytes. The `status` property is set to `400` and the `type` property +is set to `'request.size.invalid'`. + +### stream encoding should not be set + +This error will occur when something called the `req.setEncoding` method prior +to this middleware. This module operates directly on bytes only and you cannot +call `req.setEncoding` when using this module. The `status` property is set to +`500` and the `type` property is set to `'stream.encoding.set'`. + +### stream is not readable + +This error will occur when the request is no longer readable when this middleware +attempts to read it. This typically means something other than a middleware from +this module read the request body already and the middleware was also configured to +read the same request. The `status` property is set to `500` and the `type` +property is set to `'stream.not.readable'`. + +### too many parameters + +This error will occur when the content of the request exceeds the configured +`parameterLimit` for the `urlencoded` parser. The `status` property is set to +`413` and the `type` property is set to `'parameters.too.many'`. + +### unsupported charset "BOGUS" + +This error will occur when the request had a charset parameter in the +`Content-Type` header, but the `iconv-lite` module does not support it OR the +parser does not support it. The charset is contained in the message as well +as in the `charset` property. The `status` property is set to `415`, the +`type` property is set to `'charset.unsupported'`, and the `charset` property +is set to the charset that is unsupported. + +### unsupported content encoding "bogus" + +This error will occur when the request had a `Content-Encoding` header that +contained an unsupported encoding. The encoding is contained in the message +as well as in the `encoding` property. The `status` property is set to `415`, +the `type` property is set to `'encoding.unsupported'`, and the `encoding` +property is set to the encoding that is unsupported. + +### The input exceeded the depth + +This error occurs when using `bodyParser.urlencoded` with the `extended` property set to `true` and the input exceeds the configured `depth` option. The `status` property is set to `400`. It is recommended to review the `depth` option and evaluate if it requires a higher value. When the `depth` option is set to `32` (default value), the error will not be thrown. + +## Examples + +### Express/Connect top-level generic + +This example demonstrates adding a generic JSON and URL-encoded parser as a +top-level middleware, which will parse the bodies of all incoming requests. +This is the simplest setup. + +```js +var express = require('express') +var bodyParser = require('body-parser') + +var app = express() + +// parse application/x-www-form-urlencoded +app.use(bodyParser.urlencoded({ extended: false })) + +// parse application/json +app.use(bodyParser.json()) + +app.use(function (req, res) { + res.setHeader('Content-Type', 'text/plain') + res.write('you posted:\n') + res.end(JSON.stringify(req.body, null, 2)) +}) +``` + +### Express route-specific + +This example demonstrates adding body parsers specifically to the routes that +need them. In general, this is the most recommended way to use body-parser with +Express. + +```js +var express = require('express') +var bodyParser = require('body-parser') + +var app = express() + +// create application/json parser +var jsonParser = bodyParser.json() + +// create application/x-www-form-urlencoded parser +var urlencodedParser = bodyParser.urlencoded({ extended: false }) + +// POST /login gets urlencoded bodies +app.post('/login', urlencodedParser, function (req, res) { + res.send('welcome, ' + req.body.username) +}) + +// POST /api/users gets JSON bodies +app.post('/api/users', jsonParser, function (req, res) { + // create user in req.body +}) +``` + +### Change accepted type for parsers + +All the parsers accept a `type` option which allows you to change the +`Content-Type` that the middleware will parse. + +```js +var express = require('express') +var bodyParser = require('body-parser') + +var app = express() + +// parse various different custom JSON types as JSON +app.use(bodyParser.json({ type: 'application/*+json' })) + +// parse some custom thing into a Buffer +app.use(bodyParser.raw({ type: 'application/vnd.custom-type' })) + +// parse an HTML body into a string +app.use(bodyParser.text({ type: 'text/html' })) +``` + +## License + +[MIT](LICENSE) + +[ci-image]: https://badgen.net/github/checks/expressjs/body-parser/master?label=ci +[ci-url]: https://github.com/expressjs/body-parser/actions/workflows/ci.yml +[coveralls-image]: https://badgen.net/coveralls/c/github/expressjs/body-parser/master +[coveralls-url]: https://coveralls.io/r/expressjs/body-parser?branch=master +[node-version-image]: https://badgen.net/npm/node/body-parser +[node-version-url]: https://nodejs.org/en/download +[npm-downloads-image]: https://badgen.net/npm/dm/body-parser +[npm-url]: https://npmjs.org/package/body-parser +[npm-version-image]: https://badgen.net/npm/v/body-parser +[ossf-scorecard-badge]: https://api.scorecard.dev/projects/github.com/expressjs/body-parser/badge +[ossf-scorecard-visualizer]: https://ossf.github.io/scorecard-visualizer/#/projects/github.com/expressjs/body-parser \ No newline at end of file diff --git a/startos-registry/node_modules/body-parser/index.js b/startos-registry/node_modules/body-parser/index.js new file mode 100644 index 0000000..bb24d73 --- /dev/null +++ b/startos-registry/node_modules/body-parser/index.js @@ -0,0 +1,156 @@ +/*! + * body-parser + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + * @private + */ + +var deprecate = require('depd')('body-parser') + +/** + * Cache of loaded parsers. + * @private + */ + +var parsers = Object.create(null) + +/** + * @typedef Parsers + * @type {function} + * @property {function} json + * @property {function} raw + * @property {function} text + * @property {function} urlencoded + */ + +/** + * Module exports. + * @type {Parsers} + */ + +exports = module.exports = deprecate.function(bodyParser, + 'bodyParser: use individual json/urlencoded middlewares') + +/** + * JSON parser. + * @public + */ + +Object.defineProperty(exports, 'json', { + configurable: true, + enumerable: true, + get: createParserGetter('json') +}) + +/** + * Raw parser. + * @public + */ + +Object.defineProperty(exports, 'raw', { + configurable: true, + enumerable: true, + get: createParserGetter('raw') +}) + +/** + * Text parser. + * @public + */ + +Object.defineProperty(exports, 'text', { + configurable: true, + enumerable: true, + get: createParserGetter('text') +}) + +/** + * URL-encoded parser. + * @public + */ + +Object.defineProperty(exports, 'urlencoded', { + configurable: true, + enumerable: true, + get: createParserGetter('urlencoded') +}) + +/** + * Create a middleware to parse json and urlencoded bodies. + * + * @param {object} [options] + * @return {function} + * @deprecated + * @public + */ + +function bodyParser (options) { + // use default type for parsers + var opts = Object.create(options || null, { + type: { + configurable: true, + enumerable: true, + value: undefined, + writable: true + } + }) + + var _urlencoded = exports.urlencoded(opts) + var _json = exports.json(opts) + + return function bodyParser (req, res, next) { + _json(req, res, function (err) { + if (err) return next(err) + _urlencoded(req, res, next) + }) + } +} + +/** + * Create a getter for loading a parser. + * @private + */ + +function createParserGetter (name) { + return function get () { + return loadParser(name) + } +} + +/** + * Load a parser module. + * @private + */ + +function loadParser (parserName) { + var parser = parsers[parserName] + + if (parser !== undefined) { + return parser + } + + // this uses a switch for static require analysis + switch (parserName) { + case 'json': + parser = require('./lib/types/json') + break + case 'raw': + parser = require('./lib/types/raw') + break + case 'text': + parser = require('./lib/types/text') + break + case 'urlencoded': + parser = require('./lib/types/urlencoded') + break + } + + // store to prevent invoking require() + return (parsers[parserName] = parser) +} diff --git a/startos-registry/node_modules/body-parser/lib/read.js b/startos-registry/node_modules/body-parser/lib/read.js new file mode 100644 index 0000000..fce6283 --- /dev/null +++ b/startos-registry/node_modules/body-parser/lib/read.js @@ -0,0 +1,205 @@ +/*! + * body-parser + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + * @private + */ + +var createError = require('http-errors') +var destroy = require('destroy') +var getBody = require('raw-body') +var iconv = require('iconv-lite') +var onFinished = require('on-finished') +var unpipe = require('unpipe') +var zlib = require('zlib') + +/** + * Module exports. + */ + +module.exports = read + +/** + * Read a request into a buffer and parse. + * + * @param {object} req + * @param {object} res + * @param {function} next + * @param {function} parse + * @param {function} debug + * @param {object} options + * @private + */ + +function read (req, res, next, parse, debug, options) { + var length + var opts = options + var stream + + // flag as parsed + req._body = true + + // read options + var encoding = opts.encoding !== null + ? opts.encoding + : null + var verify = opts.verify + + try { + // get the content stream + stream = contentstream(req, debug, opts.inflate) + length = stream.length + stream.length = undefined + } catch (err) { + return next(err) + } + + // set raw-body options + opts.length = length + opts.encoding = verify + ? null + : encoding + + // assert charset is supported + if (opts.encoding === null && encoding !== null && !iconv.encodingExists(encoding)) { + return next(createError(415, 'unsupported charset "' + encoding.toUpperCase() + '"', { + charset: encoding.toLowerCase(), + type: 'charset.unsupported' + })) + } + + // read body + debug('read body') + getBody(stream, opts, function (error, body) { + if (error) { + var _error + + if (error.type === 'encoding.unsupported') { + // echo back charset + _error = createError(415, 'unsupported charset "' + encoding.toUpperCase() + '"', { + charset: encoding.toLowerCase(), + type: 'charset.unsupported' + }) + } else { + // set status code on error + _error = createError(400, error) + } + + // unpipe from stream and destroy + if (stream !== req) { + unpipe(req) + destroy(stream, true) + } + + // read off entire request + dump(req, function onfinished () { + next(createError(400, _error)) + }) + return + } + + // verify + if (verify) { + try { + debug('verify body') + verify(req, res, body, encoding) + } catch (err) { + next(createError(403, err, { + body: body, + type: err.type || 'entity.verify.failed' + })) + return + } + } + + // parse + var str = body + try { + debug('parse body') + str = typeof body !== 'string' && encoding !== null + ? iconv.decode(body, encoding) + : body + req.body = parse(str) + } catch (err) { + next(createError(400, err, { + body: str, + type: err.type || 'entity.parse.failed' + })) + return + } + + next() + }) +} + +/** + * Get the content stream of the request. + * + * @param {object} req + * @param {function} debug + * @param {boolean} [inflate=true] + * @return {object} + * @api private + */ + +function contentstream (req, debug, inflate) { + var encoding = (req.headers['content-encoding'] || 'identity').toLowerCase() + var length = req.headers['content-length'] + var stream + + debug('content-encoding "%s"', encoding) + + if (inflate === false && encoding !== 'identity') { + throw createError(415, 'content encoding unsupported', { + encoding: encoding, + type: 'encoding.unsupported' + }) + } + + switch (encoding) { + case 'deflate': + stream = zlib.createInflate() + debug('inflate body') + req.pipe(stream) + break + case 'gzip': + stream = zlib.createGunzip() + debug('gunzip body') + req.pipe(stream) + break + case 'identity': + stream = req + stream.length = length + break + default: + throw createError(415, 'unsupported content encoding "' + encoding + '"', { + encoding: encoding, + type: 'encoding.unsupported' + }) + } + + return stream +} + +/** + * Dump the contents of a request. + * + * @param {object} req + * @param {function} callback + * @api private + */ + +function dump (req, callback) { + if (onFinished.isFinished(req)) { + callback(null) + } else { + onFinished(req, callback) + req.resume() + } +} diff --git a/startos-registry/node_modules/body-parser/lib/types/json.js b/startos-registry/node_modules/body-parser/lib/types/json.js new file mode 100644 index 0000000..59f3f7e --- /dev/null +++ b/startos-registry/node_modules/body-parser/lib/types/json.js @@ -0,0 +1,247 @@ +/*! + * body-parser + * Copyright(c) 2014 Jonathan Ong + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + * @private + */ + +var bytes = require('bytes') +var contentType = require('content-type') +var createError = require('http-errors') +var debug = require('debug')('body-parser:json') +var read = require('../read') +var typeis = require('type-is') + +/** + * Module exports. + */ + +module.exports = json + +/** + * RegExp to match the first non-space in a string. + * + * Allowed whitespace is defined in RFC 7159: + * + * ws = *( + * %x20 / ; Space + * %x09 / ; Horizontal tab + * %x0A / ; Line feed or New line + * %x0D ) ; Carriage return + */ + +var FIRST_CHAR_REGEXP = /^[\x20\x09\x0a\x0d]*([^\x20\x09\x0a\x0d])/ // eslint-disable-line no-control-regex + +var JSON_SYNTAX_CHAR = '#' +var JSON_SYNTAX_REGEXP = /#+/g + +/** + * Create a middleware to parse JSON bodies. + * + * @param {object} [options] + * @return {function} + * @public + */ + +function json (options) { + var opts = options || {} + + var limit = typeof opts.limit !== 'number' + ? bytes.parse(opts.limit || '100kb') + : opts.limit + var inflate = opts.inflate !== false + var reviver = opts.reviver + var strict = opts.strict !== false + var type = opts.type || 'application/json' + var verify = opts.verify || false + + if (verify !== false && typeof verify !== 'function') { + throw new TypeError('option verify must be function') + } + + // create the appropriate type checking function + var shouldParse = typeof type !== 'function' + ? typeChecker(type) + : type + + function parse (body) { + if (body.length === 0) { + // special-case empty json body, as it's a common client-side mistake + // TODO: maybe make this configurable or part of "strict" option + return {} + } + + if (strict) { + var first = firstchar(body) + + if (first !== '{' && first !== '[') { + debug('strict violation') + throw createStrictSyntaxError(body, first) + } + } + + try { + debug('parse json') + return JSON.parse(body, reviver) + } catch (e) { + throw normalizeJsonSyntaxError(e, { + message: e.message, + stack: e.stack + }) + } + } + + return function jsonParser (req, res, next) { + if (req._body) { + debug('body already parsed') + next() + return + } + + req.body = req.body || {} + + // skip requests without bodies + if (!typeis.hasBody(req)) { + debug('skip empty body') + next() + return + } + + debug('content-type %j', req.headers['content-type']) + + // determine if request should be parsed + if (!shouldParse(req)) { + debug('skip parsing') + next() + return + } + + // assert charset per RFC 7159 sec 8.1 + var charset = getCharset(req) || 'utf-8' + if (charset.slice(0, 4) !== 'utf-') { + debug('invalid charset') + next(createError(415, 'unsupported charset "' + charset.toUpperCase() + '"', { + charset: charset, + type: 'charset.unsupported' + })) + return + } + + // read + read(req, res, next, parse, debug, { + encoding: charset, + inflate: inflate, + limit: limit, + verify: verify + }) + } +} + +/** + * Create strict violation syntax error matching native error. + * + * @param {string} str + * @param {string} char + * @return {Error} + * @private + */ + +function createStrictSyntaxError (str, char) { + var index = str.indexOf(char) + var partial = '' + + if (index !== -1) { + partial = str.substring(0, index) + JSON_SYNTAX_CHAR + + for (var i = index + 1; i < str.length; i++) { + partial += JSON_SYNTAX_CHAR + } + } + + try { + JSON.parse(partial); /* istanbul ignore next */ throw new SyntaxError('strict violation') + } catch (e) { + return normalizeJsonSyntaxError(e, { + message: e.message.replace(JSON_SYNTAX_REGEXP, function (placeholder) { + return str.substring(index, index + placeholder.length) + }), + stack: e.stack + }) + } +} + +/** + * Get the first non-whitespace character in a string. + * + * @param {string} str + * @return {function} + * @private + */ + +function firstchar (str) { + var match = FIRST_CHAR_REGEXP.exec(str) + + return match + ? match[1] + : undefined +} + +/** + * Get the charset of a request. + * + * @param {object} req + * @api private + */ + +function getCharset (req) { + try { + return (contentType.parse(req).parameters.charset || '').toLowerCase() + } catch (e) { + return undefined + } +} + +/** + * Normalize a SyntaxError for JSON.parse. + * + * @param {SyntaxError} error + * @param {object} obj + * @return {SyntaxError} + */ + +function normalizeJsonSyntaxError (error, obj) { + var keys = Object.getOwnPropertyNames(error) + + for (var i = 0; i < keys.length; i++) { + var key = keys[i] + if (key !== 'stack' && key !== 'message') { + delete error[key] + } + } + + // replace stack before message for Node.js 0.10 and below + error.stack = obj.stack.replace(error.message, obj.message) + error.message = obj.message + + return error +} + +/** + * Get the simple type checker. + * + * @param {string} type + * @return {function} + */ + +function typeChecker (type) { + return function checkType (req) { + return Boolean(typeis(req, type)) + } +} diff --git a/startos-registry/node_modules/body-parser/lib/types/raw.js b/startos-registry/node_modules/body-parser/lib/types/raw.js new file mode 100644 index 0000000..f5d1b67 --- /dev/null +++ b/startos-registry/node_modules/body-parser/lib/types/raw.js @@ -0,0 +1,101 @@ +/*! + * body-parser + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + */ + +var bytes = require('bytes') +var debug = require('debug')('body-parser:raw') +var read = require('../read') +var typeis = require('type-is') + +/** + * Module exports. + */ + +module.exports = raw + +/** + * Create a middleware to parse raw bodies. + * + * @param {object} [options] + * @return {function} + * @api public + */ + +function raw (options) { + var opts = options || {} + + var inflate = opts.inflate !== false + var limit = typeof opts.limit !== 'number' + ? bytes.parse(opts.limit || '100kb') + : opts.limit + var type = opts.type || 'application/octet-stream' + var verify = opts.verify || false + + if (verify !== false && typeof verify !== 'function') { + throw new TypeError('option verify must be function') + } + + // create the appropriate type checking function + var shouldParse = typeof type !== 'function' + ? typeChecker(type) + : type + + function parse (buf) { + return buf + } + + return function rawParser (req, res, next) { + if (req._body) { + debug('body already parsed') + next() + return + } + + req.body = req.body || {} + + // skip requests without bodies + if (!typeis.hasBody(req)) { + debug('skip empty body') + next() + return + } + + debug('content-type %j', req.headers['content-type']) + + // determine if request should be parsed + if (!shouldParse(req)) { + debug('skip parsing') + next() + return + } + + // read + read(req, res, next, parse, debug, { + encoding: null, + inflate: inflate, + limit: limit, + verify: verify + }) + } +} + +/** + * Get the simple type checker. + * + * @param {string} type + * @return {function} + */ + +function typeChecker (type) { + return function checkType (req) { + return Boolean(typeis(req, type)) + } +} diff --git a/startos-registry/node_modules/body-parser/lib/types/text.js b/startos-registry/node_modules/body-parser/lib/types/text.js new file mode 100644 index 0000000..083a009 --- /dev/null +++ b/startos-registry/node_modules/body-parser/lib/types/text.js @@ -0,0 +1,121 @@ +/*! + * body-parser + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + */ + +var bytes = require('bytes') +var contentType = require('content-type') +var debug = require('debug')('body-parser:text') +var read = require('../read') +var typeis = require('type-is') + +/** + * Module exports. + */ + +module.exports = text + +/** + * Create a middleware to parse text bodies. + * + * @param {object} [options] + * @return {function} + * @api public + */ + +function text (options) { + var opts = options || {} + + var defaultCharset = opts.defaultCharset || 'utf-8' + var inflate = opts.inflate !== false + var limit = typeof opts.limit !== 'number' + ? bytes.parse(opts.limit || '100kb') + : opts.limit + var type = opts.type || 'text/plain' + var verify = opts.verify || false + + if (verify !== false && typeof verify !== 'function') { + throw new TypeError('option verify must be function') + } + + // create the appropriate type checking function + var shouldParse = typeof type !== 'function' + ? typeChecker(type) + : type + + function parse (buf) { + return buf + } + + return function textParser (req, res, next) { + if (req._body) { + debug('body already parsed') + next() + return + } + + req.body = req.body || {} + + // skip requests without bodies + if (!typeis.hasBody(req)) { + debug('skip empty body') + next() + return + } + + debug('content-type %j', req.headers['content-type']) + + // determine if request should be parsed + if (!shouldParse(req)) { + debug('skip parsing') + next() + return + } + + // get charset + var charset = getCharset(req) || defaultCharset + + // read + read(req, res, next, parse, debug, { + encoding: charset, + inflate: inflate, + limit: limit, + verify: verify + }) + } +} + +/** + * Get the charset of a request. + * + * @param {object} req + * @api private + */ + +function getCharset (req) { + try { + return (contentType.parse(req).parameters.charset || '').toLowerCase() + } catch (e) { + return undefined + } +} + +/** + * Get the simple type checker. + * + * @param {string} type + * @return {function} + */ + +function typeChecker (type) { + return function checkType (req) { + return Boolean(typeis(req, type)) + } +} diff --git a/startos-registry/node_modules/body-parser/lib/types/urlencoded.js b/startos-registry/node_modules/body-parser/lib/types/urlencoded.js new file mode 100644 index 0000000..832992c --- /dev/null +++ b/startos-registry/node_modules/body-parser/lib/types/urlencoded.js @@ -0,0 +1,300 @@ +/*! + * body-parser + * Copyright(c) 2014 Jonathan Ong + * Copyright(c) 2014-2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module dependencies. + * @private + */ + +var bytes = require('bytes') +var contentType = require('content-type') +var createError = require('http-errors') +var debug = require('debug')('body-parser:urlencoded') +var deprecate = require('depd')('body-parser') +var read = require('../read') +var typeis = require('type-is') + +/** + * Module exports. + */ + +module.exports = urlencoded + +/** + * Cache of parser modules. + */ + +var parsers = Object.create(null) + +/** + * Create a middleware to parse urlencoded bodies. + * + * @param {object} [options] + * @return {function} + * @public + */ + +function urlencoded (options) { + var opts = options || {} + + // notice because option default will flip in next major + if (opts.extended === undefined) { + deprecate('undefined extended: provide extended option') + } + + var extended = opts.extended !== false + var inflate = opts.inflate !== false + var limit = typeof opts.limit !== 'number' + ? bytes.parse(opts.limit || '100kb') + : opts.limit + var type = opts.type || 'application/x-www-form-urlencoded' + var verify = opts.verify || false + + if (verify !== false && typeof verify !== 'function') { + throw new TypeError('option verify must be function') + } + + // create the appropriate query parser + var queryparse = extended + ? extendedparser(opts) + : simpleparser(opts) + + // create the appropriate type checking function + var shouldParse = typeof type !== 'function' + ? typeChecker(type) + : type + + function parse (body) { + return body.length + ? queryparse(body) + : {} + } + + return function urlencodedParser (req, res, next) { + if (req._body) { + debug('body already parsed') + next() + return + } + + req.body = req.body || {} + + // skip requests without bodies + if (!typeis.hasBody(req)) { + debug('skip empty body') + next() + return + } + + debug('content-type %j', req.headers['content-type']) + + // determine if request should be parsed + if (!shouldParse(req)) { + debug('skip parsing') + next() + return + } + + // assert charset + var charset = getCharset(req) || 'utf-8' + if (charset !== 'utf-8') { + debug('invalid charset') + next(createError(415, 'unsupported charset "' + charset.toUpperCase() + '"', { + charset: charset, + type: 'charset.unsupported' + })) + return + } + + // read + read(req, res, next, parse, debug, { + debug: debug, + encoding: charset, + inflate: inflate, + limit: limit, + verify: verify + }) + } +} + +/** + * Get the extended query parser. + * + * @param {object} options + */ + +function extendedparser (options) { + var parameterLimit = options.parameterLimit !== undefined + ? options.parameterLimit + : 1000 + var depth = options.depth !== undefined ? options.depth : 32 + var parse = parser('qs') + + if (isNaN(parameterLimit) || parameterLimit < 1) { + throw new TypeError('option parameterLimit must be a positive number') + } + + if (isNaN(depth) || depth < 0) { + throw new TypeError('option depth must be a zero or a positive number') + } + + if (isFinite(parameterLimit)) { + parameterLimit = parameterLimit | 0 + } + + return function queryparse (body) { + var paramCount = parameterCount(body, parameterLimit) + + if (paramCount === undefined) { + debug('too many parameters') + throw createError(413, 'too many parameters', { + type: 'parameters.too.many' + }) + } + + var arrayLimit = Math.max(100, paramCount) + + debug('parse extended urlencoding') + try { + return parse(body, { + allowPrototypes: true, + arrayLimit: arrayLimit, + depth: depth, + strictDepth: true, + parameterLimit: parameterLimit + }) + } catch (err) { + if (err instanceof RangeError) { + throw createError(400, 'The input exceeded the depth', { + type: 'querystring.parse.rangeError' + }) + } else { + throw err + } + } + } +} + +/** + * Get the charset of a request. + * + * @param {object} req + * @api private + */ + +function getCharset (req) { + try { + return (contentType.parse(req).parameters.charset || '').toLowerCase() + } catch (e) { + return undefined + } +} + +/** + * Count the number of parameters, stopping once limit reached + * + * @param {string} body + * @param {number} limit + * @api private + */ + +function parameterCount (body, limit) { + var count = 0 + var index = 0 + + while ((index = body.indexOf('&', index)) !== -1) { + count++ + index++ + + if (count === limit) { + return undefined + } + } + + return count +} + +/** + * Get parser for module name dynamically. + * + * @param {string} name + * @return {function} + * @api private + */ + +function parser (name) { + var mod = parsers[name] + + if (mod !== undefined) { + return mod.parse + } + + // this uses a switch for static require analysis + switch (name) { + case 'qs': + mod = require('qs') + break + case 'querystring': + mod = require('querystring') + break + } + + // store to prevent invoking require() + parsers[name] = mod + + return mod.parse +} + +/** + * Get the simple query parser. + * + * @param {object} options + */ + +function simpleparser (options) { + var parameterLimit = options.parameterLimit !== undefined + ? options.parameterLimit + : 1000 + var parse = parser('querystring') + + if (isNaN(parameterLimit) || parameterLimit < 1) { + throw new TypeError('option parameterLimit must be a positive number') + } + + if (isFinite(parameterLimit)) { + parameterLimit = parameterLimit | 0 + } + + return function queryparse (body) { + var paramCount = parameterCount(body, parameterLimit) + + if (paramCount === undefined) { + debug('too many parameters') + throw createError(413, 'too many parameters', { + type: 'parameters.too.many' + }) + } + + debug('parse urlencoding') + return parse(body, undefined, undefined, { maxKeys: parameterLimit }) + } +} + +/** + * Get the simple type checker. + * + * @param {string} type + * @return {function} + */ + +function typeChecker (type) { + return function checkType (req) { + return Boolean(typeis(req, type)) + } +} diff --git a/startos-registry/node_modules/body-parser/package.json b/startos-registry/node_modules/body-parser/package.json new file mode 100644 index 0000000..c8e61c1 --- /dev/null +++ b/startos-registry/node_modules/body-parser/package.json @@ -0,0 +1,55 @@ +{ + "name": "body-parser", + "description": "Node.js body parsing middleware", + "version": "1.20.4", + "contributors": [ + "Douglas Christopher Wilson ", + "Jonathan Ong (http://jongleberry.com)" + ], + "license": "MIT", + "repository": "expressjs/body-parser", + "dependencies": { + "bytes": "~3.1.2", + "content-type": "~1.0.5", + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "~1.2.0", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "on-finished": "~2.4.1", + "qs": "~6.14.0", + "raw-body": "~2.5.3", + "type-is": "~1.6.18", + "unpipe": "~1.0.0" + }, + "devDependencies": { + "eslint": "8.34.0", + "eslint-config-standard": "14.1.1", + "eslint-plugin-import": "2.27.5", + "eslint-plugin-markdown": "3.0.0", + "eslint-plugin-node": "11.1.0", + "eslint-plugin-promise": "6.1.1", + "eslint-plugin-standard": "4.1.0", + "methods": "1.1.2", + "mocha": "10.2.0", + "nyc": "15.1.0", + "safe-buffer": "5.2.1", + "supertest": "6.3.3" + }, + "files": [ + "lib/", + "LICENSE", + "HISTORY.md", + "index.js" + ], + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + }, + "scripts": { + "lint": "eslint .", + "test": "mocha --require test/support/env --reporter spec --check-leaks --bail test/", + "test-ci": "nyc --reporter=lcov --reporter=text npm test", + "test-cov": "nyc --reporter=html --reporter=text npm test" + } +} diff --git a/startos-registry/node_modules/bytes/History.md b/startos-registry/node_modules/bytes/History.md new file mode 100644 index 0000000..d60ce0e --- /dev/null +++ b/startos-registry/node_modules/bytes/History.md @@ -0,0 +1,97 @@ +3.1.2 / 2022-01-27 +================== + + * Fix return value for un-parsable strings + +3.1.1 / 2021-11-15 +================== + + * Fix "thousandsSeparator" incorrecting formatting fractional part + +3.1.0 / 2019-01-22 +================== + + * Add petabyte (`pb`) support + +3.0.0 / 2017-08-31 +================== + + * Change "kB" to "KB" in format output + * Remove support for Node.js 0.6 + * Remove support for ComponentJS + +2.5.0 / 2017-03-24 +================== + + * Add option "unit" + +2.4.0 / 2016-06-01 +================== + + * Add option "unitSeparator" + +2.3.0 / 2016-02-15 +================== + + * Drop partial bytes on all parsed units + * Fix non-finite numbers to `.format` to return `null` + * Fix parsing byte string that looks like hex + * perf: hoist regular expressions + +2.2.0 / 2015-11-13 +================== + + * add option "decimalPlaces" + * add option "fixedDecimals" + +2.1.0 / 2015-05-21 +================== + + * add `.format` export + * add `.parse` export + +2.0.2 / 2015-05-20 +================== + + * remove map recreation + * remove unnecessary object construction + +2.0.1 / 2015-05-07 +================== + + * fix browserify require + * remove node.extend dependency + +2.0.0 / 2015-04-12 +================== + + * add option "case" + * add option "thousandsSeparator" + * return "null" on invalid parse input + * support proper round-trip: bytes(bytes(num)) === num + * units no longer case sensitive when parsing + +1.0.0 / 2014-05-05 +================== + + * add negative support. fixes #6 + +0.3.0 / 2014-03-19 +================== + + * added terabyte support + +0.2.1 / 2013-04-01 +================== + + * add .component + +0.2.0 / 2012-10-28 +================== + + * bytes(200).should.eql('200b') + +0.1.0 / 2012-07-04 +================== + + * add bytes to string conversion [yields] diff --git a/startos-registry/node_modules/bytes/LICENSE b/startos-registry/node_modules/bytes/LICENSE new file mode 100644 index 0000000..63e95a9 --- /dev/null +++ b/startos-registry/node_modules/bytes/LICENSE @@ -0,0 +1,23 @@ +(The MIT License) + +Copyright (c) 2012-2014 TJ Holowaychuk +Copyright (c) 2015 Jed Watson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/startos-registry/node_modules/bytes/Readme.md b/startos-registry/node_modules/bytes/Readme.md new file mode 100644 index 0000000..5790e23 --- /dev/null +++ b/startos-registry/node_modules/bytes/Readme.md @@ -0,0 +1,152 @@ +# Bytes utility + +[![NPM Version][npm-image]][npm-url] +[![NPM Downloads][downloads-image]][downloads-url] +[![Build Status][ci-image]][ci-url] +[![Test Coverage][coveralls-image]][coveralls-url] + +Utility to parse a string bytes (ex: `1TB`) to bytes (`1099511627776`) and vice-versa. + +## Installation + +This is a [Node.js](https://nodejs.org/en/) module available through the +[npm registry](https://www.npmjs.com/). Installation is done using the +[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally): + +```bash +$ npm install bytes +``` + +## Usage + +```js +var bytes = require('bytes'); +``` + +#### bytes(number｜string value, [options]): number｜string｜null + +Default export function. Delegates to either `bytes.format` or `bytes.parse` based on the type of `value`. + +**Arguments** + +| Name | Type | Description | +|---------|----------|--------------------| +| value | `number`｜`string` | Number value to format or string value to parse | +| options | `Object` | Conversion options for `format` | + +**Returns** + +| Name | Type | Description | +|---------|------------------|-------------------------------------------------| +| results | `string`｜`number`｜`null` | Return null upon error. Numeric value in bytes, or string value otherwise. | + +**Example** + +```js +bytes(1024); +// output: '1KB' + +bytes('1KB'); +// output: 1024 +``` + +#### bytes.format(number value, [options]): string｜null + +Format the given value in bytes into a string. If the value is negative, it is kept as such. If it is a float, it is + rounded. + +**Arguments** + +| Name | Type | Description | +|---------|----------|--------------------| +| value | `number` | Value in bytes | +| options | `Object` | Conversion options | + +**Options** + +| Property | Type | Description | +|-------------------|--------|-----------------------------------------------------------------------------------------| +| decimalPlaces | `number`｜`null` | Maximum number of decimal places to include in output. Default value to `2`. | +| fixedDecimals | `boolean`｜`null` | Whether to always display the maximum number of decimal places. Default value to `false` | +| thousandsSeparator | `string`｜`null` | Example of values: `' '`, `','` and `'.'`... Default value to `''`. | +| unit | `string`｜`null` | The unit in which the result will be returned (B/KB/MB/GB/TB). Default value to `''` (which means auto detect). | +| unitSeparator | `string`｜`null` | Separator to use between number and unit. Default value to `''`. | + +**Returns** + +| Name | Type | Description | +|---------|------------------|-------------------------------------------------| +| results | `string`｜`null` | Return null upon error. String value otherwise. | + +**Example** + +```js +bytes.format(1024); +// output: '1KB' + +bytes.format(1000); +// output: '1000B' + +bytes.format(1000, {thousandsSeparator: ' '}); +// output: '1 000B' + +bytes.format(1024 * 1.7, {decimalPlaces: 0}); +// output: '2KB' + +bytes.format(1024, {unitSeparator: ' '}); +// output: '1 KB' +``` + +#### bytes.parse(string｜number value): number｜null + +Parse the string value into an integer in bytes. If no unit is given, or `value` +is a number, it is assumed the value is in bytes. + +Supported units and abbreviations are as follows and are case-insensitive: + + * `b` for bytes + * `kb` for kilobytes + * `mb` for megabytes + * `gb` for gigabytes + * `tb` for terabytes + * `pb` for petabytes + +The units are in powers of two, not ten. This means 1kb = 1024b according to this parser. + +**Arguments** + +| Name | Type | Description | +|---------------|--------|--------------------| +| value | `string`｜`number` | String to parse, or number in bytes. | + +**Returns** + +| Name | Type | Description | +|---------|-------------|-------------------------| +| results | `number`｜`null` | Return null upon error. Value in bytes otherwise. | + +**Example** + +```js +bytes.parse('1KB'); +// output: 1024 + +bytes.parse('1024'); +// output: 1024 + +bytes.parse(1024); +// output: 1024 +``` + +## License + +[MIT](LICENSE) + +[ci-image]: https://badgen.net/github/checks/visionmedia/bytes.js/master?label=ci +[ci-url]: https://github.com/visionmedia/bytes.js/actions?query=workflow%3Aci +[coveralls-image]: https://badgen.net/coveralls/c/github/visionmedia/bytes.js/master +[coveralls-url]: https://coveralls.io/r/visionmedia/bytes.js?branch=master +[downloads-image]: https://badgen.net/npm/dm/bytes +[downloads-url]: https://npmjs.org/package/bytes +[npm-image]: https://badgen.net/npm/v/bytes +[npm-url]: https://npmjs.org/package/bytes diff --git a/startos-registry/node_modules/bytes/index.js b/startos-registry/node_modules/bytes/index.js new file mode 100644 index 0000000..6f2d0f8 --- /dev/null +++ b/startos-registry/node_modules/bytes/index.js @@ -0,0 +1,170 @@ +/*! + * bytes + * Copyright(c) 2012-2014 TJ Holowaychuk + * Copyright(c) 2015 Jed Watson + * MIT Licensed + */ + +'use strict'; + +/** + * Module exports. + * @public + */ + +module.exports = bytes; +module.exports.format = format; +module.exports.parse = parse; + +/** + * Module variables. + * @private + */ + +var formatThousandsRegExp = /\B(?=(\d{3})+(?!\d))/g; + +var formatDecimalsRegExp = /(?:\.0*|(\.[^0]+)0+)$/; + +var map = { + b: 1, + kb: 1 << 10, + mb: 1 << 20, + gb: 1 << 30, + tb: Math.pow(1024, 4), + pb: Math.pow(1024, 5), +}; + +var parseRegExp = /^((-|\+)?(\d+(?:\.\d+)?)) *(kb|mb|gb|tb|pb)$/i; + +/** + * Convert the given value in bytes into a string or parse to string to an integer in bytes. + * + * @param {string|number} value + * @param {{ + * case: [string], + * decimalPlaces: [number] + * fixedDecimals: [boolean] + * thousandsSeparator: [string] + * unitSeparator: [string] + * }} [options] bytes options. + * + * @returns {string|number|null} + */ + +function bytes(value, options) { + if (typeof value === 'string') { + return parse(value); + } + + if (typeof value === 'number') { + return format(value, options); + } + + return null; +} + +/** + * Format the given value in bytes into a string. + * + * If the value is negative, it is kept as such. If it is a float, + * it is rounded. + * + * @param {number} value + * @param {object} [options] + * @param {number} [options.decimalPlaces=2] + * @param {number} [options.fixedDecimals=false] + * @param {string} [options.thousandsSeparator=] + * @param {string} [options.unit=] + * @param {string} [options.unitSeparator=] + * + * @returns {string|null} + * @public + */ + +function format(value, options) { + if (!Number.isFinite(value)) { + return null; + } + + var mag = Math.abs(value); + var thousandsSeparator = (options && options.thousandsSeparator) || ''; + var unitSeparator = (options && options.unitSeparator) || ''; + var decimalPlaces = (options && options.decimalPlaces !== undefined) ? options.decimalPlaces : 2; + var fixedDecimals = Boolean(options && options.fixedDecimals); + var unit = (options && options.unit) || ''; + + if (!unit || !map[unit.toLowerCase()]) { + if (mag >= map.pb) { + unit = 'PB'; + } else if (mag >= map.tb) { + unit = 'TB'; + } else if (mag >= map.gb) { + unit = 'GB'; + } else if (mag >= map.mb) { + unit = 'MB'; + } else if (mag >= map.kb) { + unit = 'KB'; + } else { + unit = 'B'; + } + } + + var val = value / map[unit.toLowerCase()]; + var str = val.toFixed(decimalPlaces); + + if (!fixedDecimals) { + str = str.replace(formatDecimalsRegExp, '$1'); + } + + if (thousandsSeparator) { + str = str.split('.').map(function (s, i) { + return i === 0 + ? s.replace(formatThousandsRegExp, thousandsSeparator) + : s + }).join('.'); + } + + return str + unitSeparator + unit; +} + +/** + * Parse the string value into an integer in bytes. + * + * If no unit is given, it is assumed the value is in bytes. + * + * @param {number|string} val + * + * @returns {number|null} + * @public + */ + +function parse(val) { + if (typeof val === 'number' && !isNaN(val)) { + return val; + } + + if (typeof val !== 'string') { + return null; + } + + // Test if the string passed is valid + var results = parseRegExp.exec(val); + var floatValue; + var unit = 'b'; + + if (!results) { + // Nothing could be extracted from the given string + floatValue = parseInt(val, 10); + unit = 'b' + } else { + // Retrieve the value and the unit + floatValue = parseFloat(results[1]); + unit = results[4].toLowerCase(); + } + + if (isNaN(floatValue)) { + return null; + } + + return Math.floor(map[unit] * floatValue); +} diff --git a/startos-registry/node_modules/bytes/package.json b/startos-registry/node_modules/bytes/package.json new file mode 100644 index 0000000..f2b6a8b --- /dev/null +++ b/startos-registry/node_modules/bytes/package.json @@ -0,0 +1,42 @@ +{ + "name": "bytes", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "version": "3.1.2", + "author": "TJ Holowaychuk (http://tjholowaychuk.com)", + "contributors": [ + "Jed Watson ", + "Théo FIDRY " + ], + "license": "MIT", + "keywords": [ + "byte", + "bytes", + "utility", + "parse", + "parser", + "convert", + "converter" + ], + "repository": "visionmedia/bytes.js", + "devDependencies": { + "eslint": "7.32.0", + "eslint-plugin-markdown": "2.2.1", + "mocha": "9.2.0", + "nyc": "15.1.0" + }, + "files": [ + "History.md", + "LICENSE", + "Readme.md", + "index.js" + ], + "engines": { + "node": ">= 0.8" + }, + "scripts": { + "lint": "eslint .", + "test": "mocha --check-leaks --reporter spec", + "test-ci": "nyc --reporter=lcov --reporter=text npm test", + "test-cov": "nyc --reporter=html --reporter=text npm test" + } +} diff --git a/startos-registry/node_modules/call-bind-apply-helpers/.eslintrc b/startos-registry/node_modules/call-bind-apply-helpers/.eslintrc new file mode 100644 index 0000000..201e859 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/.eslintrc @@ -0,0 +1,17 @@ +{ + "root": true, + + "extends": "@ljharb", + + "rules": { + "func-name-matching": 0, + "id-length": 0, + "new-cap": [2, { + "capIsNewExceptions": [ + "GetIntrinsic", + ], + }], + "no-extra-parens": 0, + "no-magic-numbers": 0, + }, +} diff --git a/startos-registry/node_modules/call-bind-apply-helpers/.github/FUNDING.yml b/startos-registry/node_modules/call-bind-apply-helpers/.github/FUNDING.yml new file mode 100644 index 0000000..0011e9d --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/.github/FUNDING.yml @@ -0,0 +1,12 @@ +# These are supported funding model platforms + +github: [ljharb] +patreon: # Replace with a single Patreon username +open_collective: # Replace with a single Open Collective username +ko_fi: # Replace with a single Ko-fi username +tidelift: npm/call-bind-apply-helpers +community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry +liberapay: # Replace with a single Liberapay username +issuehunt: # Replace with a single IssueHunt username +otechie: # Replace with a single Otechie username +custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] diff --git a/startos-registry/node_modules/call-bind-apply-helpers/.nycrc b/startos-registry/node_modules/call-bind-apply-helpers/.nycrc new file mode 100644 index 0000000..bdd626c --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/.nycrc @@ -0,0 +1,9 @@ +{ + "all": true, + "check-coverage": false, + "reporter": ["text-summary", "text", "html", "json"], + "exclude": [ + "coverage", + "test" + ] +} diff --git a/startos-registry/node_modules/call-bind-apply-helpers/CHANGELOG.md b/startos-registry/node_modules/call-bind-apply-helpers/CHANGELOG.md new file mode 100644 index 0000000..2484942 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/CHANGELOG.md @@ -0,0 +1,30 @@ +# Changelog + +All notable changes to this project will be documented in this file. + +The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) +and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). + +## [v1.0.2](https://github.com/ljharb/call-bind-apply-helpers/compare/v1.0.1...v1.0.2) - 2025-02-12 + +### Commits + +- [types] improve inferred types [`e6f9586`](https://github.com/ljharb/call-bind-apply-helpers/commit/e6f95860a3c72879cb861a858cdfb8138fbedec1) +- [Dev Deps] update `@arethetypeswrong/cli`, `@ljharb/tsconfig`, `@types/tape`, `es-value-fixtures`, `for-each`, `has-strict-mode`, `object-inspect` [`e43d540`](https://github.com/ljharb/call-bind-apply-helpers/commit/e43d5409f97543bfbb11f345d47d8ce4e066d8c1) + +## [v1.0.1](https://github.com/ljharb/call-bind-apply-helpers/compare/v1.0.0...v1.0.1) - 2024-12-08 + +### Commits + +- [types] `reflectApply`: fix types [`4efc396`](https://github.com/ljharb/call-bind-apply-helpers/commit/4efc3965351a4f02cc55e836fa391d3d11ef2ef8) +- [Fix] `reflectApply`: oops, Reflect is not a function [`83cc739`](https://github.com/ljharb/call-bind-apply-helpers/commit/83cc7395de6b79b7730bdf092f1436f0b1263c75) +- [Dev Deps] update `@arethetypeswrong/cli` [`80bd5d3`](https://github.com/ljharb/call-bind-apply-helpers/commit/80bd5d3ae58b4f6b6995ce439dd5a1bcb178a940) + +## v1.0.0 - 2024-12-05 + +### Commits + +- Initial implementation, tests, readme [`7879629`](https://github.com/ljharb/call-bind-apply-helpers/commit/78796290f9b7430c9934d6f33d94ae9bc89fce04) +- Initial commit [`3f1dc16`](https://github.com/ljharb/call-bind-apply-helpers/commit/3f1dc164afc43285631b114a5f9dd9137b2b952f) +- npm init [`081df04`](https://github.com/ljharb/call-bind-apply-helpers/commit/081df048c312fcee400922026f6e97281200a603) +- Only apps should have lockfiles [`5b9ca0f`](https://github.com/ljharb/call-bind-apply-helpers/commit/5b9ca0fe8101ebfaf309c549caac4e0a017ed930) diff --git a/startos-registry/node_modules/call-bind-apply-helpers/LICENSE b/startos-registry/node_modules/call-bind-apply-helpers/LICENSE new file mode 100644 index 0000000..f82f389 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2024 Jordan Harband + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/startos-registry/node_modules/call-bind-apply-helpers/README.md b/startos-registry/node_modules/call-bind-apply-helpers/README.md new file mode 100644 index 0000000..8fc0dae --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/README.md @@ -0,0 +1,62 @@ +# call-bind-apply-helpers [![Version Badge][npm-version-svg]][package-url] + +[![github actions][actions-image]][actions-url] +[![coverage][codecov-image]][codecov-url] +[![dependency status][deps-svg]][deps-url] +[![dev dependency status][dev-deps-svg]][dev-deps-url] +[![License][license-image]][license-url] +[![Downloads][downloads-image]][downloads-url] + +[![npm badge][npm-badge-png]][package-url] + +Helper functions around Function call/apply/bind, for use in `call-bind`. + +The only packages that should likely ever use this package directly are `call-bind` and `get-intrinsic`. +Please use `call-bind` unless you have a very good reason not to. + +## Getting started + +```sh +npm install --save call-bind-apply-helpers +``` + +## Usage/Examples + +```js +const assert = require('assert'); +const callBindBasic = require('call-bind-apply-helpers'); + +function f(a, b) { + assert.equal(this, 1); + assert.equal(a, 2); + assert.equal(b, 3); + assert.equal(arguments.length, 2); +} + +const fBound = callBindBasic([f, 1]); + +delete Function.prototype.call; +delete Function.prototype.bind; + +fBound(2, 3); +``` + +## Tests + +Clone the repo, `npm install`, and run `npm test` + +[package-url]: https://npmjs.org/package/call-bind-apply-helpers +[npm-version-svg]: https://versionbadg.es/ljharb/call-bind-apply-helpers.svg +[deps-svg]: https://david-dm.org/ljharb/call-bind-apply-helpers.svg +[deps-url]: https://david-dm.org/ljharb/call-bind-apply-helpers +[dev-deps-svg]: https://david-dm.org/ljharb/call-bind-apply-helpers/dev-status.svg +[dev-deps-url]: https://david-dm.org/ljharb/call-bind-apply-helpers#info=devDependencies +[npm-badge-png]: https://nodei.co/npm/call-bind-apply-helpers.png?downloads=true&stars=true +[license-image]: https://img.shields.io/npm/l/call-bind-apply-helpers.svg +[license-url]: LICENSE +[downloads-image]: https://img.shields.io/npm/dm/call-bind-apply-helpers.svg +[downloads-url]: https://npm-stat.com/charts.html?package=call-bind-apply-helpers +[codecov-image]: https://codecov.io/gh/ljharb/call-bind-apply-helpers/branch/main/graphs/badge.svg +[codecov-url]: https://app.codecov.io/gh/ljharb/call-bind-apply-helpers/ +[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/call-bind-apply-helpers +[actions-url]: https://github.com/ljharb/call-bind-apply-helpers/actions diff --git a/startos-registry/node_modules/call-bind-apply-helpers/actualApply.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/actualApply.d.ts new file mode 100644 index 0000000..b87286a --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/actualApply.d.ts @@ -0,0 +1 @@ +export = Reflect.apply; \ No newline at end of file diff --git a/startos-registry/node_modules/call-bind-apply-helpers/actualApply.js b/startos-registry/node_modules/call-bind-apply-helpers/actualApply.js new file mode 100644 index 0000000..ffa5135 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/actualApply.js @@ -0,0 +1,10 @@ +'use strict'; + +var bind = require('function-bind'); + +var $apply = require('./functionApply'); +var $call = require('./functionCall'); +var $reflectApply = require('./reflectApply'); + +/** @type {import('./actualApply')} */ +module.exports = $reflectApply || bind.call($call, $apply); diff --git a/startos-registry/node_modules/call-bind-apply-helpers/applyBind.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/applyBind.d.ts new file mode 100644 index 0000000..d176c1a --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/applyBind.d.ts @@ -0,0 +1,19 @@ +import actualApply from './actualApply'; + +type TupleSplitHead = T['length'] extends N + ? T + : T extends [...infer R, any] + ? TupleSplitHead + : never + +type TupleSplitTail = O['length'] extends N + ? T + : T extends [infer F, ...infer R] + ? TupleSplitTail<[...R], N, [...O, F]> + : never + +type TupleSplit = [TupleSplitHead, TupleSplitTail] + +declare function applyBind(...args: TupleSplit, 2>[1]): ReturnType; + +export = applyBind; \ No newline at end of file diff --git a/startos-registry/node_modules/call-bind-apply-helpers/applyBind.js b/startos-registry/node_modules/call-bind-apply-helpers/applyBind.js new file mode 100644 index 0000000..d2b7723 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/applyBind.js @@ -0,0 +1,10 @@ +'use strict'; + +var bind = require('function-bind'); +var $apply = require('./functionApply'); +var actualApply = require('./actualApply'); + +/** @type {import('./applyBind')} */ +module.exports = function applyBind() { + return actualApply(bind, $apply, arguments); +}; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/functionApply.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/functionApply.d.ts new file mode 100644 index 0000000..1f6e11b --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/functionApply.d.ts @@ -0,0 +1 @@ +export = Function.prototype.apply; \ No newline at end of file diff --git a/startos-registry/node_modules/call-bind-apply-helpers/functionApply.js b/startos-registry/node_modules/call-bind-apply-helpers/functionApply.js new file mode 100644 index 0000000..c71df9c --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/functionApply.js @@ -0,0 +1,4 @@ +'use strict'; + +/** @type {import('./functionApply')} */ +module.exports = Function.prototype.apply; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/functionCall.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/functionCall.d.ts new file mode 100644 index 0000000..15e93df --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/functionCall.d.ts @@ -0,0 +1 @@ +export = Function.prototype.call; \ No newline at end of file diff --git a/startos-registry/node_modules/call-bind-apply-helpers/functionCall.js b/startos-registry/node_modules/call-bind-apply-helpers/functionCall.js new file mode 100644 index 0000000..7a8d873 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/functionCall.js @@ -0,0 +1,4 @@ +'use strict'; + +/** @type {import('./functionCall')} */ +module.exports = Function.prototype.call; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/index.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/index.d.ts new file mode 100644 index 0000000..541516b --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/index.d.ts @@ -0,0 +1,64 @@ +type RemoveFromTuple< + Tuple extends readonly unknown[], + RemoveCount extends number, + Index extends 1[] = [] +> = Index["length"] extends RemoveCount + ? Tuple + : Tuple extends [infer First, ...infer Rest] + ? RemoveFromTuple + : Tuple; + +type ConcatTuples< + Prefix extends readonly unknown[], + Suffix extends readonly unknown[] +> = [...Prefix, ...Suffix]; + +type ExtractFunctionParams = T extends (this: infer TThis, ...args: infer P extends readonly unknown[]) => infer R + ? { thisArg: TThis; params: P; returnType: R } + : never; + +type BindFunction< + T extends (this: any, ...args: any[]) => any, + TThis, + TBoundArgs extends readonly unknown[], + ReceiverBound extends boolean +> = ExtractFunctionParams extends { + thisArg: infer OrigThis; + params: infer P extends readonly unknown[]; + returnType: infer R; +} + ? ReceiverBound extends true + ? (...args: RemoveFromTuple>) => R extends [OrigThis, ...infer Rest] + ? [TThis, ...Rest] // Replace `this` with `thisArg` + : R + : >>( + thisArg: U, + ...args: RemainingArgs + ) => R extends [OrigThis, ...infer Rest] + ? [U, ...ConcatTuples] // Preserve bound args in return type + : R + : never; + +declare function callBind< + const T extends (this: any, ...args: any[]) => any, + Extracted extends ExtractFunctionParams, + const TBoundArgs extends Partial & readonly unknown[], + const TThis extends Extracted["thisArg"] +>( + args: [fn: T, thisArg: TThis, ...boundArgs: TBoundArgs] +): BindFunction; + +declare function callBind< + const T extends (this: any, ...args: any[]) => any, + Extracted extends ExtractFunctionParams, + const TBoundArgs extends Partial & readonly unknown[] +>( + args: [fn: T, ...boundArgs: TBoundArgs] +): BindFunction; + +declare function callBind( + args: [fn: Exclude, ...rest: TArgs] +): never; + +// export as namespace callBind; +export = callBind; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/index.js b/startos-registry/node_modules/call-bind-apply-helpers/index.js new file mode 100644 index 0000000..2f6dab4 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/index.js @@ -0,0 +1,15 @@ +'use strict'; + +var bind = require('function-bind'); +var $TypeError = require('es-errors/type'); + +var $call = require('./functionCall'); +var $actualApply = require('./actualApply'); + +/** @type {(args: [Function, thisArg?: unknown, ...args: unknown[]]) => Function} TODO FIXME, find a way to use import('.') */ +module.exports = function callBindBasic(args) { + if (args.length < 1 || typeof args[0] !== 'function') { + throw new $TypeError('a function is required'); + } + return $actualApply(bind, $call, args); +}; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/package.json b/startos-registry/node_modules/call-bind-apply-helpers/package.json new file mode 100644 index 0000000..923b8be --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/package.json @@ -0,0 +1,85 @@ +{ + "name": "call-bind-apply-helpers", + "version": "1.0.2", + "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", + "main": "index.js", + "exports": { + ".": "./index.js", + "./actualApply": "./actualApply.js", + "./applyBind": "./applyBind.js", + "./functionApply": "./functionApply.js", + "./functionCall": "./functionCall.js", + "./reflectApply": "./reflectApply.js", + "./package.json": "./package.json" + }, + "scripts": { + "prepack": "npmignore --auto --commentLines=auto", + "prepublish": "not-in-publish || npm run prepublishOnly", + "prepublishOnly": "safe-publish-latest", + "prelint": "evalmd README.md", + "lint": "eslint --ext=.js,.mjs .", + "postlint": "tsc -p . && attw -P", + "pretest": "npm run lint", + "tests-only": "nyc tape 'test/**/*.js'", + "test": "npm run tests-only", + "posttest": "npx npm@'>=10.2' audit --production", + "version": "auto-changelog && git add CHANGELOG.md", + "postversion": "auto-changelog && git add CHANGELOG.md && git commit --no-edit --amend && git tag -f \"v$(node -e \"console.log(require('./package.json').version)\")\"" + }, + "repository": { + "type": "git", + "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git" + }, + "author": "Jordan Harband ", + "license": "MIT", + "bugs": { + "url": "https://github.com/ljharb/call-bind-apply-helpers/issues" + }, + "homepage": "https://github.com/ljharb/call-bind-apply-helpers#readme", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "devDependencies": { + "@arethetypeswrong/cli": "^0.17.3", + "@ljharb/eslint-config": "^21.1.1", + "@ljharb/tsconfig": "^0.2.3", + "@types/for-each": "^0.3.3", + "@types/function-bind": "^1.1.10", + "@types/object-inspect": "^1.13.0", + "@types/tape": "^5.8.1", + "auto-changelog": "^2.5.0", + "encoding": "^0.1.13", + "es-value-fixtures": "^1.7.1", + "eslint": "=8.8.0", + "evalmd": "^0.0.19", + "for-each": "^0.3.5", + "has-strict-mode": "^1.1.0", + "in-publish": "^2.0.1", + "npmignore": "^0.3.1", + "nyc": "^10.3.2", + "object-inspect": "^1.13.4", + "safe-publish-latest": "^2.0.0", + "tape": "^5.9.0", + "typescript": "next" + }, + "testling": { + "files": "test/index.js" + }, + "auto-changelog": { + "output": "CHANGELOG.md", + "template": "keepachangelog", + "unreleased": false, + "commitLimit": false, + "backfillLimit": false, + "hideCredit": true + }, + "publishConfig": { + "ignore": [ + ".github/workflows" + ] + }, + "engines": { + "node": ">= 0.4" + } +} diff --git a/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.d.ts b/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.d.ts new file mode 100644 index 0000000..6b2ae76 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.d.ts @@ -0,0 +1,3 @@ +declare const reflectApply: false | typeof Reflect.apply; + +export = reflectApply; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.js b/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.js new file mode 100644 index 0000000..3d03caa --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/reflectApply.js @@ -0,0 +1,4 @@ +'use strict'; + +/** @type {import('./reflectApply')} */ +module.exports = typeof Reflect !== 'undefined' && Reflect && Reflect.apply; diff --git a/startos-registry/node_modules/call-bind-apply-helpers/test/index.js b/startos-registry/node_modules/call-bind-apply-helpers/test/index.js new file mode 100644 index 0000000..1cdc89e --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/test/index.js @@ -0,0 +1,63 @@ +'use strict'; + +var callBind = require('../'); +var hasStrictMode = require('has-strict-mode')(); +var forEach = require('for-each'); +var inspect = require('object-inspect'); +var v = require('es-value-fixtures'); + +var test = require('tape'); + +test('callBindBasic', function (t) { + forEach(v.nonFunctions, function (nonFunction) { + t['throws']( + // @ts-expect-error + function () { callBind([nonFunction]); }, + TypeError, + inspect(nonFunction) + ' is not a function' + ); + }); + + var sentinel = { sentinel: true }; + /** @type {(this: T, a: A, b: B) => [T | undefined, A, B]} */ + var func = function (a, b) { + // eslint-disable-next-line no-invalid-this + return [!hasStrictMode && this === global ? undefined : this, a, b]; + }; + t.equal(func.length, 2, 'original function length is 2'); + + /** type {(thisArg: unknown, a: number, b: number) => [unknown, number, number]} */ + var bound = callBind([func]); + /** type {((a: number, b: number) => [typeof sentinel, typeof a, typeof b])} */ + var boundR = callBind([func, sentinel]); + /** type {((b: number) => [typeof sentinel, number, typeof b])} */ + var boundArg = callBind([func, sentinel, /** @type {const} */ (1)]); + + // @ts-expect-error + t.deepEqual(bound(), [undefined, undefined, undefined], 'bound func with no args'); + + // @ts-expect-error + t.deepEqual(func(), [undefined, undefined, undefined], 'unbound func with too few args'); + // @ts-expect-error + t.deepEqual(bound(1, 2), [hasStrictMode ? 1 : Object(1), 2, undefined], 'bound func too few args'); + // @ts-expect-error + t.deepEqual(boundR(), [sentinel, undefined, undefined], 'bound func with receiver, with too few args'); + // @ts-expect-error + t.deepEqual(boundArg(), [sentinel, 1, undefined], 'bound func with receiver and arg, with too few args'); + + t.deepEqual(func(1, 2), [undefined, 1, 2], 'unbound func with right args'); + t.deepEqual(bound(1, 2, 3), [hasStrictMode ? 1 : Object(1), 2, 3], 'bound func with right args'); + t.deepEqual(boundR(1, 2), [sentinel, 1, 2], 'bound func with receiver, with right args'); + t.deepEqual(boundArg(2), [sentinel, 1, 2], 'bound func with receiver and arg, with right arg'); + + // @ts-expect-error + t.deepEqual(func(1, 2, 3), [undefined, 1, 2], 'unbound func with too many args'); + // @ts-expect-error + t.deepEqual(bound(1, 2, 3, 4), [hasStrictMode ? 1 : Object(1), 2, 3], 'bound func with too many args'); + // @ts-expect-error + t.deepEqual(boundR(1, 2, 3), [sentinel, 1, 2], 'bound func with receiver, with too many args'); + // @ts-expect-error + t.deepEqual(boundArg(2, 3), [sentinel, 1, 2], 'bound func with receiver and arg, with too many args'); + + t.end(); +}); diff --git a/startos-registry/node_modules/call-bind-apply-helpers/tsconfig.json b/startos-registry/node_modules/call-bind-apply-helpers/tsconfig.json new file mode 100644 index 0000000..aef9993 --- /dev/null +++ b/startos-registry/node_modules/call-bind-apply-helpers/tsconfig.json @@ -0,0 +1,9 @@ +{ + "extends": "@ljharb/tsconfig", + "compilerOptions": { + "target": "es2021", + }, + "exclude": [ + "coverage", + ], +} \ No newline at end of file diff --git a/startos-registry/node_modules/call-bound/.eslintrc b/startos-registry/node_modules/call-bound/.eslintrc new file mode 100644 index 0000000..2612ed8 --- /dev/null +++ b/startos-registry/node_modules/call-bound/.eslintrc @@ -0,0 +1,13 @@ +{ + "root": true, + + "extends": "@ljharb", + + "rules": { + "new-cap": [2, { + "capIsNewExceptions": [ + "GetIntrinsic", + ], + }], + }, +} diff --git a/startos-registry/node_modules/call-bound/.github/FUNDING.yml b/startos-registry/node_modules/call-bound/.github/FUNDING.yml new file mode 100644 index 0000000..2a2a135 --- /dev/null +++ b/startos-registry/node_modules/call-bound/.github/FUNDING.yml @@ -0,0 +1,12 @@ +# These are supported funding model platforms + +github: [ljharb] +patreon: # Replace with a single Patreon username +open_collective: # Replace with a single Open Collective username +ko_fi: # Replace with a single Ko-fi username +tidelift: npm/call-bound +community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry +liberapay: # Replace with a single Liberapay username +issuehunt: # Replace with a single IssueHunt username +otechie: # Replace with a single Otechie username +custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] diff --git a/startos-registry/node_modules/call-bound/.nycrc b/startos-registry/node_modules/call-bound/.nycrc new file mode 100644 index 0000000..bdd626c --- /dev/null +++ b/startos-registry/node_modules/call-bound/.nycrc @@ -0,0 +1,9 @@ +{ + "all": true, + "check-coverage": false, + "reporter": ["text-summary", "text", "html", "json"], + "exclude": [ + "coverage", + "test" + ] +} diff --git a/startos-registry/node_modules/call-bound/CHANGELOG.md b/startos-registry/node_modules/call-bound/CHANGELOG.md new file mode 100644 index 0000000..8bde4e9 --- /dev/null +++ b/startos-registry/node_modules/call-bound/CHANGELOG.md @@ -0,0 +1,42 @@ +# Changelog + +All notable changes to this project will be documented in this file. + +The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) +and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). + +## [v1.0.4](https://github.com/ljharb/call-bound/compare/v1.0.3...v1.0.4) - 2025-03-03 + +### Commits + +- [types] improve types [`e648922`](https://github.com/ljharb/call-bound/commit/e6489222a9e54f350fbf952ceabe51fd8b6027ff) +- [Dev Deps] update `@arethetypeswrong/cli`, `@ljharb/tsconfig`, `@types/tape`, `es-value-fixtures`, `for-each`, `has-strict-mode`, `object-inspect` [`a42a5eb`](https://github.com/ljharb/call-bound/commit/a42a5ebe6c1b54fcdc7997c7dc64fdca9e936719) +- [Deps] update `call-bind-apply-helpers`, `get-intrinsic` [`f529eac`](https://github.com/ljharb/call-bound/commit/f529eac132404c17156bbc23ab2297a25d0f20b8) + +## [v1.0.3](https://github.com/ljharb/call-bound/compare/v1.0.2...v1.0.3) - 2024-12-15 + +### Commits + +- [Refactor] use `call-bind-apply-helpers` instead of `call-bind` [`5e0b134`](https://github.com/ljharb/call-bound/commit/5e0b13496df14fb7d05dae9412f088da8d3f75be) +- [Deps] update `get-intrinsic` [`41fc967`](https://github.com/ljharb/call-bound/commit/41fc96732a22c7b7e8f381f93ccc54bb6293be2e) +- [readme] fix example [`79a0137`](https://github.com/ljharb/call-bound/commit/79a0137723f7c6d09c9c05452bbf8d5efb5d6e49) +- [meta] add `sideEffects` flag [`08b07be`](https://github.com/ljharb/call-bound/commit/08b07be7f1c03f67dc6f3cdaf0906259771859f7) + +## [v1.0.2](https://github.com/ljharb/call-bound/compare/v1.0.1...v1.0.2) - 2024-12-10 + +### Commits + +- [Dev Deps] update `@arethetypeswrong/cli`, `@ljharb/tsconfig`, `gopd` [`e6a5ffe`](https://github.com/ljharb/call-bound/commit/e6a5ffe849368fe4f74dfd6cdeca1b9baa39e8d5) +- [Deps] update `call-bind`, `get-intrinsic` [`2aeb5b5`](https://github.com/ljharb/call-bound/commit/2aeb5b521dc2b2683d1345c753ea1161de2d1c14) +- [types] improve return type [`1a0c9fe`](https://github.com/ljharb/call-bound/commit/1a0c9fe3114471e7ca1f57d104e2efe713bb4871) + +## v1.0.1 - 2024-12-05 + +### Commits + +- Initial implementation, tests, readme, types [`6d94121`](https://github.com/ljharb/call-bound/commit/6d94121a9243602e506334069f7a03189fe3363d) +- Initial commit [`0eae867`](https://github.com/ljharb/call-bound/commit/0eae867334ea025c33e6e91cdecfc9df96680cf9) +- npm init [`71b2479`](https://github.com/ljharb/call-bound/commit/71b2479c6723e0b7d91a6b663613067e98b7b275) +- Only apps should have lockfiles [`c3754a9`](https://github.com/ljharb/call-bound/commit/c3754a949b7f9132b47e2d18c1729889736741eb) +- [actions] skip `npm ls` in node < 10 [`74275a5`](https://github.com/ljharb/call-bound/commit/74275a5186b8caf6309b6b97472bdcb0df4683a8) +- [Dev Deps] add missing peer dep [`1354de8`](https://github.com/ljharb/call-bound/commit/1354de8679413e4ae9c523d85f76fa7a5e032d97) diff --git a/startos-registry/node_modules/call-bound/LICENSE b/startos-registry/node_modules/call-bound/LICENSE new file mode 100644 index 0000000..f82f389 --- /dev/null +++ b/startos-registry/node_modules/call-bound/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2024 Jordan Harband + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/startos-registry/node_modules/call-bound/README.md b/startos-registry/node_modules/call-bound/README.md new file mode 100644 index 0000000..a44e43e --- /dev/null +++ b/startos-registry/node_modules/call-bound/README.md @@ -0,0 +1,53 @@ +# call-bound [![Version Badge][npm-version-svg]][package-url] + +[![github actions][actions-image]][actions-url] +[![coverage][codecov-image]][codecov-url] +[![dependency status][deps-svg]][deps-url] +[![dev dependency status][dev-deps-svg]][dev-deps-url] +[![License][license-image]][license-url] +[![Downloads][downloads-image]][downloads-url] + +[![npm badge][npm-badge-png]][package-url] + +Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`. + +## Getting started + +```sh +npm install --save call-bound +``` + +## Usage/Examples + +```js +const assert = require('assert'); +const callBound = require('call-bound'); + +const slice = callBound('Array.prototype.slice'); + +delete Function.prototype.call; +delete Function.prototype.bind; +delete Array.prototype.slice; + +assert.deepEqual(slice([1, 2, 3, 4], 1, -1), [2, 3]); +``` + +## Tests + +Clone the repo, `npm install`, and run `npm test` + +[package-url]: https://npmjs.org/package/call-bound +[npm-version-svg]: https://versionbadg.es/ljharb/call-bound.svg +[deps-svg]: https://david-dm.org/ljharb/call-bound.svg +[deps-url]: https://david-dm.org/ljharb/call-bound +[dev-deps-svg]: https://david-dm.org/ljharb/call-bound/dev-status.svg +[dev-deps-url]: https://david-dm.org/ljharb/call-bound#info=devDependencies +[npm-badge-png]: https://nodei.co/npm/call-bound.png?downloads=true&stars=true +[license-image]: https://img.shields.io/npm/l/call-bound.svg +[license-url]: LICENSE +[downloads-image]: https://img.shields.io/npm/dm/call-bound.svg +[downloads-url]: https://npm-stat.com/charts.html?package=call-bound +[codecov-image]: https://codecov.io/gh/ljharb/call-bound/branch/main/graphs/badge.svg +[codecov-url]: https://app.codecov.io/gh/ljharb/call-bound/ +[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/call-bound +[actions-url]: https://github.com/ljharb/call-bound/actions diff --git a/startos-registry/node_modules/call-bound/index.d.ts b/startos-registry/node_modules/call-bound/index.d.ts new file mode 100644 index 0000000..5562f00 --- /dev/null +++ b/startos-registry/node_modules/call-bound/index.d.ts @@ -0,0 +1,94 @@ +type Intrinsic = typeof globalThis; + +type IntrinsicName = keyof Intrinsic | `%${keyof Intrinsic}%`; + +type IntrinsicPath = IntrinsicName | `${StripPercents}.${string}` | `%${StripPercents}.${string}%`; + +type AllowMissing = boolean; + +type StripPercents = T extends `%${infer U}%` ? U : T; + +type BindMethodPrecise = + F extends (this: infer This, ...args: infer Args) => infer R + ? (obj: This, ...args: Args) => R + : F extends { + (this: infer This1, ...args: infer Args1): infer R1; + (this: infer This2, ...args: infer Args2): infer R2 + } + ? { + (obj: This1, ...args: Args1): R1; + (obj: This2, ...args: Args2): R2 + } + : never + +// Extract method type from a prototype +type GetPrototypeMethod = + (typeof globalThis)[T] extends { prototype: any } + ? M extends keyof (typeof globalThis)[T]['prototype'] + ? (typeof globalThis)[T]['prototype'][M] + : never + : never + +// Get static property/method +type GetStaticMember = + P extends keyof (typeof globalThis)[T] ? (typeof globalThis)[T][P] : never + +// Type that maps string path to actual bound function or value with better precision +type BoundIntrinsic = + S extends `${infer Obj}.prototype.${infer Method}` + ? Obj extends keyof typeof globalThis + ? BindMethodPrecise> + : unknown + : S extends `${infer Obj}.${infer Prop}` + ? Obj extends keyof typeof globalThis + ? GetStaticMember + : unknown + : unknown + +declare function arraySlice(array: readonly T[], start?: number, end?: number): T[]; +declare function arraySlice(array: ArrayLike, start?: number, end?: number): T[]; +declare function arraySlice(array: IArguments, start?: number, end?: number): T[]; + +// Special cases for methods that need explicit typing +interface SpecialCases { + '%Object.prototype.isPrototypeOf%': (thisArg: {}, obj: unknown) => boolean; + '%String.prototype.replace%': { + (str: string, searchValue: string | RegExp, replaceValue: string): string; + (str: string, searchValue: string | RegExp, replacer: (substring: string, ...args: any[]) => string): string + }; + '%Object.prototype.toString%': (obj: {}) => string; + '%Object.prototype.hasOwnProperty%': (obj: {}, v: PropertyKey) => boolean; + '%Array.prototype.slice%': typeof arraySlice; + '%Array.prototype.map%': (array: readonly T[], callbackfn: (value: T, index: number, array: readonly T[]) => U, thisArg?: any) => U[]; + '%Array.prototype.filter%': (array: readonly T[], predicate: (value: T, index: number, array: readonly T[]) => unknown, thisArg?: any) => T[]; + '%Array.prototype.indexOf%': (array: readonly T[], searchElement: T, fromIndex?: number) => number; + '%Function.prototype.apply%': (fn: (...args: A) => R, thisArg: any, args: A) => R; + '%Function.prototype.call%': (fn: (...args: A) => R, thisArg: any, ...args: A) => R; + '%Function.prototype.bind%': (fn: (...args: A) => R, thisArg: any, ...args: A) => (...remainingArgs: A) => R; + '%Promise.prototype.then%': { + (promise: Promise, onfulfilled: (value: T) => R | PromiseLike): Promise; + (promise: Promise, onfulfilled: ((value: T) => R | PromiseLike) | undefined | null, onrejected: (reason: any) => R | PromiseLike): Promise; + }; + '%RegExp.prototype.test%': (regexp: RegExp, str: string) => boolean; + '%RegExp.prototype.exec%': (regexp: RegExp, str: string) => RegExpExecArray | null; + '%Error.prototype.toString%': (error: Error) => string; + '%TypeError.prototype.toString%': (error: TypeError) => string; + '%String.prototype.split%': ( + obj: unknown, + splitter: string | RegExp | { + [Symbol.split](string: string, limit?: number): string[]; + }, + limit?: number | undefined + ) => string[]; +} + +/** + * Returns a bound function for a prototype method, or a value for a static property. + * + * @param name - The name of the intrinsic (e.g. 'Array.prototype.slice') + * @param {AllowMissing} [allowMissing] - Whether to allow missing intrinsics (default: false) + */ +declare function callBound, S extends IntrinsicPath>(name: K, allowMissing?: AllowMissing): SpecialCases[`%${StripPercents}%`]; +declare function callBound, S extends IntrinsicPath>(name: S, allowMissing?: AllowMissing): BoundIntrinsic; + +export = callBound; diff --git a/startos-registry/node_modules/call-bound/index.js b/startos-registry/node_modules/call-bound/index.js new file mode 100644 index 0000000..e9ade74 --- /dev/null +++ b/startos-registry/node_modules/call-bound/index.js @@ -0,0 +1,19 @@ +'use strict'; + +var GetIntrinsic = require('get-intrinsic'); + +var callBindBasic = require('call-bind-apply-helpers'); + +/** @type {(thisArg: string, searchString: string, position?: number) => number} */ +var $indexOf = callBindBasic([GetIntrinsic('%String.prototype.indexOf%')]); + +/** @type {import('.')} */ +module.exports = function callBoundIntrinsic(name, allowMissing) { + /* eslint no-extra-parens: 0 */ + + var intrinsic = /** @type {(this: unknown, ...args: unknown[]) => unknown} */ (GetIntrinsic(name, !!allowMissing)); + if (typeof intrinsic === 'function' && $indexOf(name, '.prototype.') > -1) { + return callBindBasic(/** @type {const} */ ([intrinsic])); + } + return intrinsic; +}; diff --git a/startos-registry/node_modules/call-bound/package.json b/startos-registry/node_modules/call-bound/package.json new file mode 100644 index 0000000..d542db4 --- /dev/null +++ b/startos-registry/node_modules/call-bound/package.json @@ -0,0 +1,99 @@ +{ + "name": "call-bound", + "version": "1.0.4", + "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.", + "main": "index.js", + "exports": { + ".": "./index.js", + "./package.json": "./package.json" + }, + "sideEffects": false, + "scripts": { + "prepack": "npmignore --auto --commentLines=auto", + "prepublish": "not-in-publish || npm run prepublishOnly", + "prepublishOnly": "safe-publish-latest", + "prelint": "evalmd README.md", + "lint": "eslint --ext=.js,.mjs .", + "postlint": "tsc -p . && attw -P", + "pretest": "npm run lint", + "tests-only": "nyc tape 'test/**/*.js'", + "test": "npm run tests-only", + "posttest": "npx npm@'>=10.2' audit --production", + "version": "auto-changelog && git add CHANGELOG.md", + "postversion": "auto-changelog && git add CHANGELOG.md && git commit --no-edit --amend && git tag -f \"v$(node -e \"console.log(require('./package.json').version)\")\"" + }, + "repository": { + "type": "git", + "url": "git+https://github.com/ljharb/call-bound.git" + }, + "keywords": [ + "javascript", + "ecmascript", + "es", + "js", + "callbind", + "callbound", + "call", + "bind", + "bound", + "call-bind", + "call-bound", + "function", + "es-abstract" + ], + "author": "Jordan Harband ", + "funding": { + "url": "https://github.com/sponsors/ljharb" + }, + "license": "MIT", + "bugs": { + "url": "https://github.com/ljharb/call-bound/issues" + }, + "homepage": "https://github.com/ljharb/call-bound#readme", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "devDependencies": { + "@arethetypeswrong/cli": "^0.17.4", + "@ljharb/eslint-config": "^21.1.1", + "@ljharb/tsconfig": "^0.3.0", + "@types/call-bind": "^1.0.5", + "@types/get-intrinsic": "^1.2.3", + "@types/tape": "^5.8.1", + "auto-changelog": "^2.5.0", + "encoding": "^0.1.13", + "es-value-fixtures": "^1.7.1", + "eslint": "=8.8.0", + "evalmd": "^0.0.19", + "for-each": "^0.3.5", + "gopd": "^1.2.0", + "has-strict-mode": "^1.1.0", + "in-publish": "^2.0.1", + "npmignore": "^0.3.1", + "nyc": "^10.3.2", + "object-inspect": "^1.13.4", + "safe-publish-latest": "^2.0.0", + "tape": "^5.9.0", + "typescript": "next" + }, + "testling": { + "files": "test/index.js" + }, + "auto-changelog": { + "output": "CHANGELOG.md", + "template": "keepachangelog", + "unreleased": false, + "commitLimit": false, + "backfillLimit": false, + "hideCredit": true + }, + "publishConfig": { + "ignore": [ + ".github/workflows" + ] + }, + "engines": { + "node": ">= 0.4" + } +} diff --git a/startos-registry/node_modules/call-bound/test/index.js b/startos-registry/node_modules/call-bound/test/index.js new file mode 100644 index 0000000..a2fc9f0 --- /dev/null +++ b/startos-registry/node_modules/call-bound/test/index.js @@ -0,0 +1,61 @@ +'use strict'; + +var test = require('tape'); + +var callBound = require('../'); + +/** @template {true} T @template U @typedef {T extends U ? T : never} AssertType */ + +test('callBound', function (t) { + // static primitive + t.equal(callBound('Array.length'), Array.length, 'Array.length yields itself'); + t.equal(callBound('%Array.length%'), Array.length, '%Array.length% yields itself'); + + // static non-function object + t.equal(callBound('Array.prototype'), Array.prototype, 'Array.prototype yields itself'); + t.equal(callBound('%Array.prototype%'), Array.prototype, '%Array.prototype% yields itself'); + t.equal(callBound('Array.constructor'), Array.constructor, 'Array.constructor yields itself'); + t.equal(callBound('%Array.constructor%'), Array.constructor, '%Array.constructor% yields itself'); + + // static function + t.equal(callBound('Date.parse'), Date.parse, 'Date.parse yields itself'); + t.equal(callBound('%Date.parse%'), Date.parse, '%Date.parse% yields itself'); + + // prototype primitive + t.equal(callBound('Error.prototype.message'), Error.prototype.message, 'Error.prototype.message yields itself'); + t.equal(callBound('%Error.prototype.message%'), Error.prototype.message, '%Error.prototype.message% yields itself'); + + var x = callBound('Object.prototype.toString'); + var y = callBound('%Object.prototype.toString%'); + + // prototype function + t.notEqual(x, Object.prototype.toString, 'Object.prototype.toString does not yield itself'); + t.notEqual(y, Object.prototype.toString, '%Object.prototype.toString% does not yield itself'); + t.equal(x(true), Object.prototype.toString.call(true), 'call-bound Object.prototype.toString calls into the original'); + t.equal(y(true), Object.prototype.toString.call(true), 'call-bound %Object.prototype.toString% calls into the original'); + + t['throws']( + // @ts-expect-error + function () { callBound('does not exist'); }, + SyntaxError, + 'nonexistent intrinsic throws' + ); + t['throws']( + // @ts-expect-error + function () { callBound('does not exist', true); }, + SyntaxError, + 'allowMissing arg still throws for unknown intrinsic' + ); + + t.test('real but absent intrinsic', { skip: typeof WeakRef !== 'undefined' }, function (st) { + st['throws']( + function () { callBound('WeakRef'); }, + TypeError, + 'real but absent intrinsic throws' + ); + st.equal(callBound('WeakRef', true), undefined, 'allowMissing arg avoids exception'); + st.end(); + }); + + t.end(); +}); diff --git a/startos-registry/node_modules/call-bound/tsconfig.json b/startos-registry/node_modules/call-bound/tsconfig.json new file mode 100644 index 0000000..8976d98 --- /dev/null +++ b/startos-registry/node_modules/call-bound/tsconfig.json @@ -0,0 +1,10 @@ +{ + "extends": "@ljharb/tsconfig", + "compilerOptions": { + "target": "ESNext", + "lib": ["es2024"], + }, + "exclude": [ + "coverage", + ], +} diff --git a/startos-registry/node_modules/content-disposition/HISTORY.md b/startos-registry/node_modules/content-disposition/HISTORY.md new file mode 100644 index 0000000..488effa --- /dev/null +++ b/startos-registry/node_modules/content-disposition/HISTORY.md @@ -0,0 +1,60 @@ +0.5.4 / 2021-12-10 +================== + + * deps: safe-buffer@5.2.1 + +0.5.3 / 2018-12-17 +================== + + * Use `safe-buffer` for improved Buffer API + +0.5.2 / 2016-12-08 +================== + + * Fix `parse` to accept any linear whitespace character + +0.5.1 / 2016-01-17 +================== + + * perf: enable strict mode + +0.5.0 / 2014-10-11 +================== + + * Add `parse` function + +0.4.0 / 2014-09-21 +================== + + * Expand non-Unicode `filename` to the full ISO-8859-1 charset + +0.3.0 / 2014-09-20 +================== + + * Add `fallback` option + * Add `type` option + +0.2.0 / 2014-09-19 +================== + + * Reduce ambiguity of file names with hex escape in buggy browsers + +0.1.2 / 2014-09-19 +================== + + * Fix periodic invalid Unicode filename header + +0.1.1 / 2014-09-19 +================== + + * Fix invalid characters appearing in `filename*` parameter + +0.1.0 / 2014-09-18 +================== + + * Make the `filename` argument optional + +0.0.0 / 2014-09-18 +================== + + * Initial release diff --git a/startos-registry/node_modules/content-disposition/LICENSE b/startos-registry/node_modules/content-disposition/LICENSE new file mode 100644 index 0000000..84441fb --- /dev/null +++ b/startos-registry/node_modules/content-disposition/LICENSE @@ -0,0 +1,22 @@ +(The MIT License) + +Copyright (c) 2014-2017 Douglas Christopher Wilson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/startos-registry/node_modules/content-disposition/README.md b/startos-registry/node_modules/content-disposition/README.md new file mode 100644 index 0000000..3a0bb05 --- /dev/null +++ b/startos-registry/node_modules/content-disposition/README.md @@ -0,0 +1,142 @@ +# content-disposition + +[![NPM Version][npm-image]][npm-url] +[![NPM Downloads][downloads-image]][downloads-url] +[![Node.js Version][node-version-image]][node-version-url] +[![Build Status][github-actions-ci-image]][github-actions-ci-url] +[![Test Coverage][coveralls-image]][coveralls-url] + +Create and parse HTTP `Content-Disposition` header + +## Installation + +```sh +$ npm install content-disposition +``` + +## API + +```js +var contentDisposition = require('content-disposition') +``` + +### contentDisposition(filename, options) + +Create an attachment `Content-Disposition` header value using the given file name, +if supplied. The `filename` is optional and if no file name is desired, but you +want to specify `options`, set `filename` to `undefined`. + +```js +res.setHeader('Content-Disposition', contentDisposition('∫ maths.pdf')) +``` + +**note** HTTP headers are of the ISO-8859-1 character set. If you are writing this +header through a means different from `setHeader` in Node.js, you'll want to specify +the `'binary'` encoding in Node.js. + +#### Options + +`contentDisposition` accepts these properties in the options object. + +##### fallback + +If the `filename` option is outside ISO-8859-1, then the file name is actually +stored in a supplemental field for clients that support Unicode file names and +a ISO-8859-1 version of the file name is automatically generated. + +This specifies the ISO-8859-1 file name to override the automatic generation or +disables the generation all together, defaults to `true`. + + - A string will specify the ISO-8859-1 file name to use in place of automatic + generation. + - `false` will disable including a ISO-8859-1 file name and only include the + Unicode version (unless the file name is already ISO-8859-1). + - `true` will enable automatic generation if the file name is outside ISO-8859-1. + +If the `filename` option is ISO-8859-1 and this option is specified and has a +different value, then the `filename` option is encoded in the extended field +and this set as the fallback field, even though they are both ISO-8859-1. + +##### type + +Specifies the disposition type, defaults to `"attachment"`. This can also be +`"inline"`, or any other value (all values except inline are treated like +`attachment`, but can convey additional information if both parties agree to +it). The type is normalized to lower-case. + +### contentDisposition.parse(string) + +```js +var disposition = contentDisposition.parse('attachment; filename="EURO rates.txt"; filename*=UTF-8\'\'%e2%82%ac%20rates.txt') +``` + +Parse a `Content-Disposition` header string. This automatically handles extended +("Unicode") parameters by decoding them and providing them under the standard +parameter name. This will return an object with the following properties (examples +are shown for the string `'attachment; filename="EURO rates.txt"; filename*=UTF-8\'\'%e2%82%ac%20rates.txt'`): + + - `type`: The disposition type (always lower case). Example: `'attachment'` + + - `parameters`: An object of the parameters in the disposition (name of parameter + always lower case and extended versions replace non-extended versions). Example: + `{filename: "€ rates.txt"}` + +## Examples + +### Send a file for download + +```js +var contentDisposition = require('content-disposition') +var destroy = require('destroy') +var fs = require('fs') +var http = require('http') +var onFinished = require('on-finished') + +var filePath = '/path/to/public/plans.pdf' + +http.createServer(function onRequest (req, res) { + // set headers + res.setHeader('Content-Type', 'application/pdf') + res.setHeader('Content-Disposition', contentDisposition(filePath)) + + // send file + var stream = fs.createReadStream(filePath) + stream.pipe(res) + onFinished(res, function () { + destroy(stream) + }) +}) +``` + +## Testing + +```sh +$ npm test +``` + +## References + +- [RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1][rfc-2616] +- [RFC 5987: Character Set and Language Encoding for Hypertext Transfer Protocol (HTTP) Header Field Parameters][rfc-5987] +- [RFC 6266: Use of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP)][rfc-6266] +- [Test Cases for HTTP Content-Disposition header field (RFC 6266) and the Encodings defined in RFCs 2047, 2231 and 5987][tc-2231] + +[rfc-2616]: https://tools.ietf.org/html/rfc2616 +[rfc-5987]: https://tools.ietf.org/html/rfc5987 +[rfc-6266]: https://tools.ietf.org/html/rfc6266 +[tc-2231]: http://greenbytes.de/tech/tc2231/ + +## License + +[MIT](LICENSE) + +[npm-image]: https://img.shields.io/npm/v/content-disposition.svg +[npm-url]: https://npmjs.org/package/content-disposition +[node-version-image]: https://img.shields.io/node/v/content-disposition.svg +[node-version-url]: https://nodejs.org/en/download +[coveralls-image]: https://img.shields.io/coveralls/jshttp/content-disposition.svg +[coveralls-url]: https://coveralls.io/r/jshttp/content-disposition?branch=master +[downloads-image]: https://img.shields.io/npm/dm/content-disposition.svg +[downloads-url]: https://npmjs.org/package/content-disposition +[github-actions-ci-image]: https://img.shields.io/github/workflow/status/jshttp/content-disposition/ci/master?label=ci +[github-actions-ci-url]: https://github.com/jshttp/content-disposition?query=workflow%3Aci diff --git a/startos-registry/node_modules/content-disposition/index.js b/startos-registry/node_modules/content-disposition/index.js new file mode 100644 index 0000000..ecec899 --- /dev/null +++ b/startos-registry/node_modules/content-disposition/index.js @@ -0,0 +1,458 @@ +/*! + * content-disposition + * Copyright(c) 2014-2017 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * Module exports. + * @public + */ + +module.exports = contentDisposition +module.exports.parse = parse + +/** + * Module dependencies. + * @private + */ + +var basename = require('path').basename +var Buffer = require('safe-buffer').Buffer + +/** + * RegExp to match non attr-char, *after* encodeURIComponent (i.e. not including "%") + * @private + */ + +var ENCODE_URL_ATTR_CHAR_REGEXP = /[\x00-\x20"'()*,/:;<=>?@[\\\]{}\x7f]/g // eslint-disable-line no-control-regex + +/** + * RegExp to match percent encoding escape. + * @private + */ + +var HEX_ESCAPE_REGEXP = /%[0-9A-Fa-f]{2}/ +var HEX_ESCAPE_REPLACE_REGEXP = /%([0-9A-Fa-f]{2})/g + +/** + * RegExp to match non-latin1 characters. + * @private + */ + +var NON_LATIN1_REGEXP = /[^\x20-\x7e\xa0-\xff]/g + +/** + * RegExp to match quoted-pair in RFC 2616 + * + * quoted-pair = "\" CHAR + * CHAR = + * @private + */ + +var QESC_REGEXP = /\\([\u0000-\u007f])/g // eslint-disable-line no-control-regex + +/** + * RegExp to match chars that must be quoted-pair in RFC 2616 + * @private + */ + +var QUOTE_REGEXP = /([\\"])/g + +/** + * RegExp for various RFC 2616 grammar + * + * parameter = token "=" ( token | quoted-string ) + * token = 1* + * separators = "(" | ")" | "<" | ">" | "@" + * | "," | ";" | ":" | "\" | <"> + * | "/" | "[" | "]" | "?" | "=" + * | "{" | "}" | SP | HT + * quoted-string = ( <"> *(qdtext | quoted-pair ) <"> ) + * qdtext = > + * quoted-pair = "\" CHAR + * CHAR = + * TEXT = + * LWS = [CRLF] 1*( SP | HT ) + * CRLF = CR LF + * CR = + * LF = + * SP = + * HT = + * CTL = + * OCTET = + * @private + */ + +var PARAM_REGEXP = /;[\x09\x20]*([!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*=[\x09\x20]*("(?:[\x20!\x23-\x5b\x5d-\x7e\x80-\xff]|\\[\x20-\x7e])*"|[!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*/g // eslint-disable-line no-control-regex +var TEXT_REGEXP = /^[\x20-\x7e\x80-\xff]+$/ +var TOKEN_REGEXP = /^[!#$%&'*+.0-9A-Z^_`a-z|~-]+$/ + +/** + * RegExp for various RFC 5987 grammar + * + * ext-value = charset "'" [ language ] "'" value-chars + * charset = "UTF-8" / "ISO-8859-1" / mime-charset + * mime-charset = 1*mime-charsetc + * mime-charsetc = ALPHA / DIGIT + * / "!" / "#" / "$" / "%" / "&" + * / "+" / "-" / "^" / "_" / "`" + * / "{" / "}" / "~" + * language = ( 2*3ALPHA [ extlang ] ) + * / 4ALPHA + * / 5*8ALPHA + * extlang = *3( "-" 3ALPHA ) + * value-chars = *( pct-encoded / attr-char ) + * pct-encoded = "%" HEXDIG HEXDIG + * attr-char = ALPHA / DIGIT + * / "!" / "#" / "$" / "&" / "+" / "-" / "." + * / "^" / "_" / "`" / "|" / "~" + * @private + */ + +var EXT_VALUE_REGEXP = /^([A-Za-z0-9!#$%&+\-^_`{}~]+)'(?:[A-Za-z]{2,3}(?:-[A-Za-z]{3}){0,3}|[A-Za-z]{4,8}|)'((?:%[0-9A-Fa-f]{2}|[A-Za-z0-9!#$&+.^_`|~-])+)$/ + +/** + * RegExp for various RFC 6266 grammar + * + * disposition-type = "inline" | "attachment" | disp-ext-type + * disp-ext-type = token + * disposition-parm = filename-parm | disp-ext-parm + * filename-parm = "filename" "=" value + * | "filename*" "=" ext-value + * disp-ext-parm = token "=" value + * | ext-token "=" ext-value + * ext-token = + * @private + */ + +var DISPOSITION_TYPE_REGEXP = /^([!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*(?:$|;)/ // eslint-disable-line no-control-regex + +/** + * Create an attachment Content-Disposition header. + * + * @param {string} [filename] + * @param {object} [options] + * @param {string} [options.type=attachment] + * @param {string|boolean} [options.fallback=true] + * @return {string} + * @public + */ + +function contentDisposition (filename, options) { + var opts = options || {} + + // get type + var type = opts.type || 'attachment' + + // get parameters + var params = createparams(filename, opts.fallback) + + // format into string + return format(new ContentDisposition(type, params)) +} + +/** + * Create parameters object from filename and fallback. + * + * @param {string} [filename] + * @param {string|boolean} [fallback=true] + * @return {object} + * @private + */ + +function createparams (filename, fallback) { + if (filename === undefined) { + return + } + + var params = {} + + if (typeof filename !== 'string') { + throw new TypeError('filename must be a string') + } + + // fallback defaults to true + if (fallback === undefined) { + fallback = true + } + + if (typeof fallback !== 'string' && typeof fallback !== 'boolean') { + throw new TypeError('fallback must be a string or boolean') + } + + if (typeof fallback === 'string' && NON_LATIN1_REGEXP.test(fallback)) { + throw new TypeError('fallback must be ISO-8859-1 string') + } + + // restrict to file base name + var name = basename(filename) + + // determine if name is suitable for quoted string + var isQuotedString = TEXT_REGEXP.test(name) + + // generate fallback name + var fallbackName = typeof fallback !== 'string' + ? fallback && getlatin1(name) + : basename(fallback) + var hasFallback = typeof fallbackName === 'string' && fallbackName !== name + + // set extended filename parameter + if (hasFallback || !isQuotedString || HEX_ESCAPE_REGEXP.test(name)) { + params['filename*'] = name + } + + // set filename parameter + if (isQuotedString || hasFallback) { + params.filename = hasFallback + ? fallbackName + : name + } + + return params +} + +/** + * Format object to Content-Disposition header. + * + * @param {object} obj + * @param {string} obj.type + * @param {object} [obj.parameters] + * @return {string} + * @private + */ + +function format (obj) { + var parameters = obj.parameters + var type = obj.type + + if (!type || typeof type !== 'string' || !TOKEN_REGEXP.test(type)) { + throw new TypeError('invalid type') + } + + // start with normalized type + var string = String(type).toLowerCase() + + // append parameters + if (parameters && typeof parameters === 'object') { + var param + var params = Object.keys(parameters).sort() + + for (var i = 0; i < params.length; i++) { + param = params[i] + + var val = param.substr(-1) === '*' + ? ustring(parameters[param]) + : qstring(parameters[param]) + + string += '; ' + param + '=' + val + } + } + + return string +} + +/** + * Decode a RFC 5987 field value (gracefully). + * + * @param {string} str + * @return {string} + * @private + */ + +function decodefield (str) { + var match = EXT_VALUE_REGEXP.exec(str) + + if (!match) { + throw new TypeError('invalid extended field value') + } + + var charset = match[1].toLowerCase() + var encoded = match[2] + var value + + // to binary string + var binary = encoded.replace(HEX_ESCAPE_REPLACE_REGEXP, pdecode) + + switch (charset) { + case 'iso-8859-1': + value = getlatin1(binary) + break + case 'utf-8': + value = Buffer.from(binary, 'binary').toString('utf8') + break + default: + throw new TypeError('unsupported charset in extended field') + } + + return value +} + +/** + * Get ISO-8859-1 version of string. + * + * @param {string} val + * @return {string} + * @private + */ + +function getlatin1 (val) { + // simple Unicode -> ISO-8859-1 transformation + return String(val).replace(NON_LATIN1_REGEXP, '?') +} + +/** + * Parse Content-Disposition header string. + * + * @param {string} string + * @return {object} + * @public + */ + +function parse (string) { + if (!string || typeof string !== 'string') { + throw new TypeError('argument string is required') + } + + var match = DISPOSITION_TYPE_REGEXP.exec(string) + + if (!match) { + throw new TypeError('invalid type format') + } + + // normalize type + var index = match[0].length + var type = match[1].toLowerCase() + + var key + var names = [] + var params = {} + var value + + // calculate index to start at + index = PARAM_REGEXP.lastIndex = match[0].substr(-1) === ';' + ? index - 1 + : index + + // match parameters + while ((match = PARAM_REGEXP.exec(string))) { + if (match.index !== index) { + throw new TypeError('invalid parameter format') + } + + index += match[0].length + key = match[1].toLowerCase() + value = match[2] + + if (names.indexOf(key) !== -1) { + throw new TypeError('invalid duplicate parameter') + } + + names.push(key) + + if (key.indexOf('*') + 1 === key.length) { + // decode extended value + key = key.slice(0, -1) + value = decodefield(value) + + // overwrite existing value + params[key] = value + continue + } + + if (typeof params[key] === 'string') { + continue + } + + if (value[0] === '"') { + // remove quotes and escapes + value = value + .substr(1, value.length - 2) + .replace(QESC_REGEXP, '$1') + } + + params[key] = value + } + + if (index !== -1 && index !== string.length) { + throw new TypeError('invalid parameter format') + } + + return new ContentDisposition(type, params) +} + +/** + * Percent decode a single character. + * + * @param {string} str + * @param {string} hex + * @return {string} + * @private + */ + +function pdecode (str, hex) { + return String.fromCharCode(parseInt(hex, 16)) +} + +/** + * Percent encode a single character. + * + * @param {string} char + * @return {string} + * @private + */ + +function pencode (char) { + return '%' + String(char) + .charCodeAt(0) + .toString(16) + .toUpperCase() +} + +/** + * Quote a string for HTTP. + * + * @param {string} val + * @return {string} + * @private + */ + +function qstring (val) { + var str = String(val) + + return '"' + str.replace(QUOTE_REGEXP, '\\$1') + '"' +} + +/** + * Encode a Unicode string for HTTP (RFC 5987). + * + * @param {string} val + * @return {string} + * @private + */ + +function ustring (val) { + var str = String(val) + + // percent encode as UTF-8 + var encoded = encodeURIComponent(str) + .replace(ENCODE_URL_ATTR_CHAR_REGEXP, pencode) + + return 'UTF-8\'\'' + encoded +} + +/** + * Class for parsed Content-Disposition header for v8 optimization + * + * @public + * @param {string} type + * @param {object} parameters + * @constructor + */ + +function ContentDisposition (type, parameters) { + this.type = type + this.parameters = parameters +} diff --git a/startos-registry/node_modules/content-disposition/package.json b/startos-registry/node_modules/content-disposition/package.json new file mode 100644 index 0000000..43c70ce --- /dev/null +++ b/startos-registry/node_modules/content-disposition/package.json @@ -0,0 +1,44 @@ +{ + "name": "content-disposition", + "description": "Create and parse Content-Disposition header", + "version": "0.5.4", + "author": "Douglas Christopher Wilson ", + "license": "MIT", + "keywords": [ + "content-disposition", + "http", + "rfc6266", + "res" + ], + "repository": "jshttp/content-disposition", + "dependencies": { + "safe-buffer": "5.2.1" + }, + "devDependencies": { + "deep-equal": "1.0.1", + "eslint": "7.32.0", + "eslint-config-standard": "13.0.1", + "eslint-plugin-import": "2.25.3", + "eslint-plugin-markdown": "2.2.1", + "eslint-plugin-node": "11.1.0", + "eslint-plugin-promise": "5.2.0", + "eslint-plugin-standard": "4.1.0", + "istanbul": "0.4.5", + "mocha": "9.1.3" + }, + "files": [ + "LICENSE", + "HISTORY.md", + "README.md", + "index.js" + ], + "engines": { + "node": ">= 0.6" + }, + "scripts": { + "lint": "eslint .", + "test": "mocha --reporter spec --bail --check-leaks test/", + "test-ci": "istanbul cover node_modules/mocha/bin/_mocha --report lcovonly -- --reporter spec --check-leaks test/", + "test-cov": "istanbul cover node_modules/mocha/bin/_mocha -- --reporter dot --check-leaks test/" + } +} diff --git a/startos-registry/node_modules/content-type/HISTORY.md b/startos-registry/node_modules/content-type/HISTORY.md new file mode 100644 index 0000000..4583671 --- /dev/null +++ b/startos-registry/node_modules/content-type/HISTORY.md @@ -0,0 +1,29 @@ +1.0.5 / 2023-01-29 +================== + + * perf: skip value escaping when unnecessary + +1.0.4 / 2017-09-11 +================== + + * perf: skip parameter parsing when no parameters + +1.0.3 / 2017-09-10 +================== + + * perf: remove argument reassignment + +1.0.2 / 2016-05-09 +================== + + * perf: enable strict mode + +1.0.1 / 2015-02-13 +================== + + * Improve missing `Content-Type` header error message + +1.0.0 / 2015-02-01 +================== + + * Initial implementation, derived from `media-typer@0.3.0` diff --git a/startos-registry/node_modules/content-type/LICENSE b/startos-registry/node_modules/content-type/LICENSE new file mode 100644 index 0000000..34b1a2d --- /dev/null +++ b/startos-registry/node_modules/content-type/LICENSE @@ -0,0 +1,22 @@ +(The MIT License) + +Copyright (c) 2015 Douglas Christopher Wilson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/startos-registry/node_modules/content-type/README.md b/startos-registry/node_modules/content-type/README.md new file mode 100644 index 0000000..c1a922a --- /dev/null +++ b/startos-registry/node_modules/content-type/README.md @@ -0,0 +1,94 @@ +# content-type + +[![NPM Version][npm-version-image]][npm-url] +[![NPM Downloads][npm-downloads-image]][npm-url] +[![Node.js Version][node-image]][node-url] +[![Build Status][ci-image]][ci-url] +[![Coverage Status][coveralls-image]][coveralls-url] + +Create and parse HTTP Content-Type header according to RFC 7231 + +## Installation + +```sh +$ npm install content-type +``` + +## API + +```js +var contentType = require('content-type') +``` + +### contentType.parse(string) + +```js +var obj = contentType.parse('image/svg+xml; charset=utf-8') +``` + +Parse a `Content-Type` header. This will return an object with the following +properties (examples are shown for the string `'image/svg+xml; charset=utf-8'`): + + - `type`: The media type (the type and subtype, always lower case). + Example: `'image/svg+xml'` + + - `parameters`: An object of the parameters in the media type (name of parameter + always lower case). Example: `{charset: 'utf-8'}` + +Throws a `TypeError` if the string is missing or invalid. + +### contentType.parse(req) + +```js +var obj = contentType.parse(req) +``` + +Parse the `Content-Type` header from the given `req`. Short-cut for +`contentType.parse(req.headers['content-type'])`. + +Throws a `TypeError` if the `Content-Type` header is missing or invalid. + +### contentType.parse(res) + +```js +var obj = contentType.parse(res) +``` + +Parse the `Content-Type` header set on the given `res`. Short-cut for +`contentType.parse(res.getHeader('content-type'))`. + +Throws a `TypeError` if the `Content-Type` header is missing or invalid. + +### contentType.format(obj) + +```js +var str = contentType.format({ + type: 'image/svg+xml', + parameters: { charset: 'utf-8' } +}) +``` + +Format an object into a `Content-Type` header. This will return a string of the +content type for the given object with the following properties (examples are +shown that produce the string `'image/svg+xml; charset=utf-8'`): + + - `type`: The media type (will be lower-cased). Example: `'image/svg+xml'` + + - `parameters`: An object of the parameters in the media type (name of the + parameter will be lower-cased). Example: `{charset: 'utf-8'}` + +Throws a `TypeError` if the object contains an invalid type or parameter names. + +## License + +[MIT](LICENSE) + +[ci-image]: https://badgen.net/github/checks/jshttp/content-type/master?label=ci +[ci-url]: https://github.com/jshttp/content-type/actions/workflows/ci.yml +[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/content-type/master +[coveralls-url]: https://coveralls.io/r/jshttp/content-type?branch=master +[node-image]: https://badgen.net/npm/node/content-type +[node-url]: https://nodejs.org/en/download +[npm-downloads-image]: https://badgen.net/npm/dm/content-type +[npm-url]: https://npmjs.org/package/content-type +[npm-version-image]: https://badgen.net/npm/v/content-type diff --git a/startos-registry/node_modules/content-type/index.js b/startos-registry/node_modules/content-type/index.js new file mode 100644 index 0000000..41840e7 --- /dev/null +++ b/startos-registry/node_modules/content-type/index.js @@ -0,0 +1,225 @@ +/*! + * content-type + * Copyright(c) 2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict' + +/** + * RegExp to match *( ";" parameter ) in RFC 7231 sec 3.1.1.1 + * + * parameter = token "=" ( token / quoted-string ) + * token = 1*tchar + * tchar = "!" / "#" / "$" / "%" / "&" / "'" / "*" + * / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~" + * / DIGIT / ALPHA + * ; any VCHAR, except delimiters + * quoted-string = DQUOTE *( qdtext / quoted-pair ) DQUOTE + * qdtext = HTAB / SP / %x21 / %x23-5B / %x5D-7E / obs-text + * obs-text = %x80-FF + * quoted-pair = "\" ( HTAB / SP / VCHAR / obs-text ) + */ +var PARAM_REGEXP = /; *([!#$%&'*+.^_`|~0-9A-Za-z-]+) *= *("(?:[\u000b\u0020\u0021\u0023-\u005b\u005d-\u007e\u0080-\u00ff]|\\[\u000b\u0020-\u00ff])*"|[!#$%&'*+.^_`|~0-9A-Za-z-]+) */g // eslint-disable-line no-control-regex +var TEXT_REGEXP = /^[\u000b\u0020-\u007e\u0080-\u00ff]+$/ // eslint-disable-line no-control-regex +var TOKEN_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/ + +/** + * RegExp to match quoted-pair in RFC 7230 sec 3.2.6 + * + * quoted-pair = "\" ( HTAB / SP / VCHAR / obs-text ) + * obs-text = %x80-FF + */ +var QESC_REGEXP = /\\([\u000b\u0020-\u00ff])/g // eslint-disable-line no-control-regex + +/** + * RegExp to match chars that must be quoted-pair in RFC 7230 sec 3.2.6 + */ +var QUOTE_REGEXP = /([\\"])/g + +/** + * RegExp to match type in RFC 7231 sec 3.1.1.1 + * + * media-type = type "/" subtype + * type = token + * subtype = token + */ +var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/ + +/** + * Module exports. + * @public + */ + +exports.format = format +exports.parse = parse + +/** + * Format object to media type. + * + * @param {object} obj + * @return {string} + * @public + */ + +function format (obj) { + if (!obj || typeof obj !== 'object') { + throw new TypeError('argument obj is required') + } + + var parameters = obj.parameters + var type = obj.type + + if (!type || !TYPE_REGEXP.test(type)) { + throw new TypeError('invalid type') + } + + var string = type + + // append parameters + if (parameters && typeof parameters === 'object') { + var param + var params = Object.keys(parameters).sort() + + for (var i = 0; i < params.length; i++) { + param = params[i] + + if (!TOKEN_REGEXP.test(param)) { + throw new TypeError('invalid parameter name') + } + + string += '; ' + param + '=' + qstring(parameters[param]) + } + } + + return string +} + +/** + * Parse media type to object. + * + * @param {string|object} string + * @return {Object} + * @public + */ + +function parse (string) { + if (!string) { + throw new TypeError('argument string is required') + } + + // support req/res-like objects as argument + var header = typeof string === 'object' + ? getcontenttype(string) + : string + + if (typeof header !== 'string') { + throw new TypeError('argument string is required to be a string') + } + + var index = header.indexOf(';') + var type = index !== -1 + ? header.slice(0, index).trim() + : header.trim() + + if (!TYPE_REGEXP.test(type)) { + throw new TypeError('invalid media type') + } + + var obj = new ContentType(type.toLowerCase()) + + // parse parameters + if (index !== -1) { + var key + var match + var value + + PARAM_REGEXP.lastIndex = index + + while ((match = PARAM_REGEXP.exec(header))) { + if (match.index !== index) { + throw new TypeError('invalid parameter format') + } + + index += match[0].length + key = match[1].toLowerCase() + value = match[2] + + if (value.charCodeAt(0) === 0x22 /* " */) { + // remove quotes + value = value.slice(1, -1) + + // remove escapes + if (value.indexOf('\\') !== -1) { + value = value.replace(QESC_REGEXP, '$1') + } + } + + obj.parameters[key] = value + } + + if (index !== header.length) { + throw new TypeError('invalid parameter format') + } + } + + return obj +} + +/** + * Get content-type from req/res objects. + * + * @param {object} + * @return {Object} + * @private + */ + +function getcontenttype (obj) { + var header + + if (typeof obj.getHeader === 'function') { + // res-like + header = obj.getHeader('content-type') + } else if (typeof obj.headers === 'object') { + // req-like + header = obj.headers && obj.headers['content-type'] + } + + if (typeof header !== 'string') { + throw new TypeError('content-type header is missing from object') + } + + return header +} + +/** + * Quote a string if necessary. + * + * @param {string} val + * @return {string} + * @private + */ + +function qstring (val) { + var str = String(val) + + // no need to quote tokens + if (TOKEN_REGEXP.test(str)) { + return str + } + + if (str.length > 0 && !TEXT_REGEXP.test(str)) { + throw new TypeError('invalid parameter value') + } + + return '"' + str.replace(QUOTE_REGEXP, '\\$1') + '"' +} + +/** + * Class to represent a content type. + * @private + */ +function ContentType (type) { + this.parameters = Object.create(null) + this.type = type +} diff --git a/startos-registry/node_modules/content-type/package.json b/startos-registry/node_modules/content-type/package.json new file mode 100644 index 0000000..9db19f6 --- /dev/null +++ b/startos-registry/node_modules/content-type/package.json @@ -0,0 +1,42 @@ +{ + "name": "content-type", + "description": "Create and parse HTTP Content-Type header", + "version": "1.0.5", + "author": "Douglas Christopher Wilson ", + "license": "MIT", + "keywords": [ + "content-type", + "http", + "req", + "res", + "rfc7231" + ], + "repository": "jshttp/content-type", + "devDependencies": { + "deep-equal": "1.0.1", + "eslint": "8.32.0", + "eslint-config-standard": "15.0.1", + "eslint-plugin-import": "2.27.5", + "eslint-plugin-node": "11.1.0", + "eslint-plugin-promise": "6.1.1", + "eslint-plugin-standard": "4.1.0", + "mocha": "10.2.0", + "nyc": "15.1.0" + }, + "files": [ + "LICENSE", + "HISTORY.md", + "README.md", + "index.js" + ], + "engines": { + "node": ">= 0.6" + }, + "scripts": { + "lint": "eslint .", + "test": "mocha --reporter spec --check-leaks --bail test/", + "test-ci": "nyc --reporter=lcovonly --reporter=text npm test", + "test-cov": "nyc --reporter=html --reporter=text npm test", + "version": "node scripts/version-history.js && git add HISTORY.md" + } +} diff --git a/startos-registry/node_modules/cookie-signature/History.md b/startos-registry/node_modules/cookie-signature/History.md new file mode 100644 index 0000000..bcf8cc9 --- /dev/null +++ b/startos-registry/node_modules/cookie-signature/History.md @@ -0,0 +1,42 @@ +1.0.7 / 2023-04-12 +================== + +* backport the buffer support from the 1.2.x release branch (thanks @FadhiliNjagi!) + +1.0.6 / 2015-02-03 +================== + +* use `npm test` instead of `make test` to run tests +* clearer assertion messages when checking input + +1.0.5 / 2014-09-05 +================== + +* add license to package.json + +1.0.4 / 2014-06-25 +================== + + * corrected avoidance of timing attacks (thanks @tenbits!) + +1.0.3 / 2014-01-28 +================== + + * [incorrect] fix for timing attacks + +1.0.2 / 2014-01-28 +================== + + * fix missing repository warning + * fix typo in test + +1.0.1 / 2013-04-15 +================== + + * Revert "Changed underlying HMAC algo. to sha512." + * Revert "Fix for timing attacks on MAC verification." + +0.0.1 / 2010-01-03 +================== + + * Initial release diff --git a/startos-registry/node_modules/cookie-signature/Readme.md b/startos-registry/node_modules/cookie-signature/Readme.md new file mode 100644 index 0000000..2559e84 --- /dev/null +++ b/startos-registry/node_modules/cookie-signature/Readme.md @@ -0,0 +1,42 @@ + +# cookie-signature + + Sign and unsign cookies. + +## Example + +```js +var cookie = require('cookie-signature'); + +var val = cookie.sign('hello', 'tobiiscool'); +val.should.equal('hello.DGDUkGlIkCzPz+C0B064FNgHdEjox7ch8tOBGslZ5QI'); + +var val = cookie.sign('hello', 'tobiiscool'); +cookie.unsign(val, 'tobiiscool').should.equal('hello'); +cookie.unsign(val, 'luna').should.be.false; +``` + +## License + +(The MIT License) + +Copyright (c) 2012 LearnBoost <tj@learnboost.com> + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. \ No newline at end of file diff --git a/startos-registry/node_modules/cookie-signature/index.js b/startos-registry/node_modules/cookie-signature/index.js new file mode 100644 index 0000000..336d487 --- /dev/null +++ b/startos-registry/node_modules/cookie-signature/index.js @@ -0,0 +1,51 @@ +/** + * Module dependencies. + */ + +var crypto = require('crypto'); + +/** + * Sign the given `val` with `secret`. + * + * @param {String} val + * @param {String|NodeJS.ArrayBufferView|crypto.KeyObject} secret + * @return {String} + * @api private + */ + +exports.sign = function(val, secret){ + if ('string' !== typeof val) throw new TypeError("Cookie value must be provided as a string."); + if (null == secret) throw new TypeError("Secret key must be provided."); + return val + '.' + crypto + .createHmac('sha256', secret) + .update(val) + .digest('base64') + .replace(/\=+$/, ''); +}; + +/** + * Unsign and decode the given `val` with `secret`, + * returning `false` if the signature is invalid. + * + * @param {String} val + * @param {String|NodeJS.ArrayBufferView|crypto.KeyObject} secret + * @return {String|Boolean} + * @api private + */ + +exports.unsign = function(val, secret){ + if ('string' !== typeof val) throw new TypeError("Signed cookie string must be provided."); + if (null == secret) throw new TypeError("Secret key must be provided."); + var str = val.slice(0, val.lastIndexOf('.')) + , mac = exports.sign(str, secret); + + return sha1(mac) == sha1(val) ? str : false; +}; + +/** + * Private + */ + +function sha1(str){ + return crypto.createHash('sha1').update(str).digest('hex'); +} diff --git a/startos-registry/node_modules/cookie-signature/package.json b/startos-registry/node_modules/cookie-signature/package.json new file mode 100644 index 0000000..738487b --- /dev/null +++ b/startos-registry/node_modules/cookie-signature/package.json @@ -0,0 +1,18 @@ +{ + "name": "cookie-signature", + "version": "1.0.7", + "description": "Sign and unsign cookies", + "keywords": ["cookie", "sign", "unsign"], + "author": "TJ Holowaychuk ", + "license": "MIT", + "repository": { "type": "git", "url": "https://github.com/visionmedia/node-cookie-signature.git"}, + "dependencies": {}, + "devDependencies": { + "mocha": "*", + "should": "*" + }, + "scripts": { + "test": "mocha --require should --reporter spec" + }, + "main": "index" +} \ No newline at end of file diff --git a/startos-registry/node_modules/cookie/LICENSE b/startos-registry/node_modules/cookie/LICENSE new file mode 100644 index 0000000..058b6b4 --- /dev/null +++ b/startos-registry/node_modules/cookie/LICENSE @@ -0,0 +1,24 @@ +(The MIT License) + +Copyright (c) 2012-2014 Roman Shtylman +Copyright (c) 2015 Douglas Christopher Wilson + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +'Software'), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + diff --git a/startos-registry/node_modules/cookie/README.md b/startos-registry/node_modules/cookie/README.md new file mode 100644 index 0000000..71fdac1 --- /dev/null +++ b/startos-registry/node_modules/cookie/README.md @@ -0,0 +1,317 @@ +# cookie + +[![NPM Version][npm-version-image]][npm-url] +[![NPM Downloads][npm-downloads-image]][npm-url] +[![Node.js Version][node-image]][node-url] +[![Build Status][ci-image]][ci-url] +[![Coverage Status][coveralls-image]][coveralls-url] + +Basic HTTP cookie parser and serializer for HTTP servers. + +## Installation + +This is a [Node.js](https://nodejs.org/en/) module available through the +[npm registry](https://www.npmjs.com/). Installation is done using the +[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally): + +```sh +$ npm install cookie +``` + +## API + +```js +var cookie = require('cookie'); +``` + +### cookie.parse(str, options) + +Parse an HTTP `Cookie` header string and returning an object of all cookie name-value pairs. +The `str` argument is the string representing a `Cookie` header value and `options` is an +optional object containing additional parsing options. + +```js +var cookies = cookie.parse('foo=bar; equation=E%3Dmc%5E2'); +// { foo: 'bar', equation: 'E=mc^2' } +``` + +#### Options + +`cookie.parse` accepts these properties in the options object. + +##### decode + +Specifies a function that will be used to decode a cookie's value. Since the value of a cookie +has a limited character set (and must be a simple string), this function can be used to decode +a previously-encoded cookie value into a JavaScript string or other object. + +The default function is the global `decodeURIComponent`, which will decode any URL-encoded +sequences into their byte representations. + +**note** if an error is thrown from this function, the original, non-decoded cookie value will +be returned as the cookie's value. + +### cookie.serialize(name, value, options) + +Serialize a cookie name-value pair into a `Set-Cookie` header string. The `name` argument is the +name for the cookie, the `value` argument is the value to set the cookie to, and the `options` +argument is an optional object containing additional serialization options. + +```js +var setCookie = cookie.serialize('foo', 'bar'); +// foo=bar +``` + +#### Options + +`cookie.serialize` accepts these properties in the options object. + +##### domain + +Specifies the value for the [`Domain` `Set-Cookie` attribute][rfc-6265-5.2.3]. By default, no +domain is set, and most clients will consider the cookie to apply to only the current domain. + +##### encode + +Specifies a function that will be used to encode a cookie's value. Since value of a cookie +has a limited character set (and must be a simple string), this function can be used to encode +a value into a string suited for a cookie's value. + +The default function is the global `encodeURIComponent`, which will encode a JavaScript string +into UTF-8 byte sequences and then URL-encode any that fall outside of the cookie range. + +##### expires + +Specifies the `Date` object to be the value for the [`Expires` `Set-Cookie` attribute][rfc-6265-5.2.1]. +By default, no expiration is set, and most clients will consider this a "non-persistent cookie" and +will delete it on a condition like exiting a web browser application. + +**note** the [cookie storage model specification][rfc-6265-5.3] states that if both `expires` and +`maxAge` are set, then `maxAge` takes precedence, but it is possible not all clients by obey this, +so if both are set, they should point to the same date and time. + +##### httpOnly + +Specifies the `boolean` value for the [`HttpOnly` `Set-Cookie` attribute][rfc-6265-5.2.6]. When truthy, +the `HttpOnly` attribute is set, otherwise it is not. By default, the `HttpOnly` attribute is not set. + +**note** be careful when setting this to `true`, as compliant clients will not allow client-side +JavaScript to see the cookie in `document.cookie`. + +##### maxAge + +Specifies the `number` (in seconds) to be the value for the [`Max-Age` `Set-Cookie` attribute][rfc-6265-5.2.2]. +The given number will be converted to an integer by rounding down. By default, no maximum age is set. + +**note** the [cookie storage model specification][rfc-6265-5.3] states that if both `expires` and +`maxAge` are set, then `maxAge` takes precedence, but it is possible not all clients by obey this, +so if both are set, they should point to the same date and time. + +##### partitioned + +Specifies the `boolean` value for the [`Partitioned` `Set-Cookie`](rfc-cutler-httpbis-partitioned-cookies) +attribute. When truthy, the `Partitioned` attribute is set, otherwise it is not. By default, the +`Partitioned` attribute is not set. + +**note** This is an attribute that has not yet been fully standardized, and may change in the future. +This also means many clients may ignore this attribute until they understand it. + +More information about can be found in [the proposal](https://github.com/privacycg/CHIPS). + +##### path + +Specifies the value for the [`Path` `Set-Cookie` attribute][rfc-6265-5.2.4]. By default, the path +is considered the ["default path"][rfc-6265-5.1.4]. + +##### priority + +Specifies the `string` to be the value for the [`Priority` `Set-Cookie` attribute][rfc-west-cookie-priority-00-4.1]. + + - `'low'` will set the `Priority` attribute to `Low`. + - `'medium'` will set the `Priority` attribute to `Medium`, the default priority when not set. + - `'high'` will set the `Priority` attribute to `High`. + +More information about the different priority levels can be found in +[the specification][rfc-west-cookie-priority-00-4.1]. + +**note** This is an attribute that has not yet been fully standardized, and may change in the future. +This also means many clients may ignore this attribute until they understand it. + +##### sameSite + +Specifies the `boolean` or `string` to be the value for the [`SameSite` `Set-Cookie` attribute][rfc-6265bis-09-5.4.7]. + + - `true` will set the `SameSite` attribute to `Strict` for strict same site enforcement. + - `false` will not set the `SameSite` attribute. + - `'lax'` will set the `SameSite` attribute to `Lax` for lax same site enforcement. + - `'none'` will set the `SameSite` attribute to `None` for an explicit cross-site cookie. + - `'strict'` will set the `SameSite` attribute to `Strict` for strict same site enforcement. + +More information about the different enforcement levels can be found in +[the specification][rfc-6265bis-09-5.4.7]. + +**note** This is an attribute that has not yet been fully standardized, and may change in the future. +This also means many clients may ignore this attribute until they understand it. + +##### secure + +Specifies the `boolean` value for the [`Secure` `Set-Cookie` attribute][rfc-6265-5.2.5]. When truthy, +the `Secure` attribute is set, otherwise it is not. By default, the `Secure` attribute is not set. + +**note** be careful when setting this to `true`, as compliant clients will not send the cookie back to +the server in the future if the browser does not have an HTTPS connection. + +## Example + +The following example uses this module in conjunction with the Node.js core HTTP server +to prompt a user for their name and display it back on future visits. + +```js +var cookie = require('cookie'); +var escapeHtml = require('escape-html'); +var http = require('http'); +var url = require('url'); + +function onRequest(req, res) { + // Parse the query string + var query = url.parse(req.url, true, true).query; + + if (query && query.name) { + // Set a new cookie with the name + res.setHeader('Set-Cookie', cookie.serialize('name', String(query.name), { + httpOnly: true, + maxAge: 60 * 60 * 24 * 7 // 1 week + })); + + // Redirect back after setting cookie + res.statusCode = 302; + res.setHeader('Location', req.headers.referer || '/'); + res.end(); + return; + } + + // Parse the cookies on the request + var cookies = cookie.parse(req.headers.cookie || ''); + + // Get the visitor name set in the cookie + var name = cookies.name; + + res.setHeader('Content-Type', 'text/html; charset=UTF-8'); + + if (name) { + res.write('

Welcome back, ' + escapeHtml(name) + '!

'); + } else { + res.write('

Hello, new visitor!

'); + } + + res.write('
'); + res.write(' '); + res.end('
'); +} + +http.createServer(onRequest).listen(3000); +``` + +## Testing + +```sh +$ npm test +``` + +## Benchmark + +``` +$ npm run bench + +> cookie@0.5.0 bench +> node benchmark/index.js + + node@18.18.2 + acorn@8.10.0 + ada@2.6.0 + ares@1.19.1 + brotli@1.0.9 + cldr@43.1 + icu@73.2 + llhttp@6.0.11 + modules@108 + napi@9 + nghttp2@1.57.0 + nghttp3@0.7.0 + ngtcp2@0.8.1 + openssl@3.0.10+quic + simdutf@3.2.14 + tz@2023c + undici@5.26.3 + unicode@15.0 + uv@1.44.2 + uvwasi@0.0.18 + v8@10.2.154.26-node.26 + zlib@1.2.13.1-motley + +> node benchmark/parse-top.js + + cookie.parse - top sites + + 14 tests completed. + + parse accounts.google.com x 2,588,913 ops/sec ±0.74% (186 runs sampled) + parse apple.com x 2,370,002 ops/sec ±0.69% (186 runs sampled) + parse cloudflare.com x 2,213,102 ops/sec ±0.88% (188 runs sampled) + parse docs.google.com x 2,194,157 ops/sec ±1.03% (184 runs sampled) + parse drive.google.com x 2,265,084 ops/sec ±0.79% (187 runs sampled) + parse en.wikipedia.org x 457,099 ops/sec ±0.81% (186 runs sampled) + parse linkedin.com x 504,407 ops/sec ±0.89% (186 runs sampled) + parse maps.google.com x 1,230,959 ops/sec ±0.98% (186 runs sampled) + parse microsoft.com x 926,294 ops/sec ±0.88% (184 runs sampled) + parse play.google.com x 2,311,338 ops/sec ±0.83% (185 runs sampled) + parse support.google.com x 1,508,850 ops/sec ±0.86% (186 runs sampled) + parse www.google.com x 1,022,582 ops/sec ±1.32% (182 runs sampled) + parse youtu.be x 332,136 ops/sec ±1.02% (185 runs sampled) + parse youtube.com x 323,833 ops/sec ±0.77% (183 runs sampled) + +> node benchmark/parse.js + + cookie.parse - generic + + 6 tests completed. + + simple x 3,214,032 ops/sec ±1.61% (183 runs sampled) + decode x 587,237 ops/sec ±1.16% (187 runs sampled) + unquote x 2,954,618 ops/sec ±1.35% (183 runs sampled) + duplicates x 857,008 ops/sec ±0.89% (187 runs sampled) + 10 cookies x 292,133 ops/sec ±0.89% (187 runs sampled) + 100 cookies x 22,610 ops/sec ±0.68% (187 runs sampled) +``` + +## References + +- [RFC 6265: HTTP State Management Mechanism][rfc-6265] +- [Same-site Cookies][rfc-6265bis-09-5.4.7] + +[rfc-cutler-httpbis-partitioned-cookies]: https://tools.ietf.org/html/draft-cutler-httpbis-partitioned-cookies/ +[rfc-west-cookie-priority-00-4.1]: https://tools.ietf.org/html/draft-west-cookie-priority-00#section-4.1 +[rfc-6265bis-09-5.4.7]: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-09#section-5.4.7 +[rfc-6265]: https://tools.ietf.org/html/rfc6265 +[rfc-6265-5.1.4]: https://tools.ietf.org/html/rfc6265#section-5.1.4 +[rfc-6265-5.2.1]: https://tools.ietf.org/html/rfc6265#section-5.2.1 +[rfc-6265-5.2.2]: https://tools.ietf.org/html/rfc6265#section-5.2.2 +[rfc-6265-5.2.3]: https://tools.ietf.org/html/rfc6265#section-5.2.3 +[rfc-6265-5.2.4]: https://tools.ietf.org/html/rfc6265#section-5.2.4 +[rfc-6265-5.2.5]: https://tools.ietf.org/html/rfc6265#section-5.2.5 +[rfc-6265-5.2.6]: https://tools.ietf.org/html/rfc6265#section-5.2.6 +[rfc-6265-5.3]: https://tools.ietf.org/html/rfc6265#section-5.3 + +## License + +[MIT](LICENSE) + +[ci-image]: https://badgen.net/github/checks/jshttp/cookie/master?label=ci +[ci-url]: https://github.com/jshttp/cookie/actions/workflows/ci.yml +[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/cookie/master +[coveralls-url]: https://coveralls.io/r/jshttp/cookie?branch=master +[node-image]: https://badgen.net/npm/node/cookie +[node-url]: https://nodejs.org/en/download +[npm-downloads-image]: https://badgen.net/npm/dm/cookie +[npm-url]: https://npmjs.org/package/cookie +[npm-version-image]: https://badgen.net/npm/v/cookie diff --git a/startos-registry/node_modules/cookie/SECURITY.md b/startos-registry/node_modules/cookie/SECURITY.md new file mode 100644 index 0000000..fd4a6c5 --- /dev/null +++ b/startos-registry/node_modules/cookie/SECURITY.md @@ -0,0 +1,25 @@ +# Security Policies and Procedures + +## Reporting a Bug + +The `cookie` team and community take all security bugs seriously. Thank +you for improving the security of the project. We appreciate your efforts and +responsible disclosure and will make every effort to acknowledge your +contributions. + +Report security bugs by emailing the current owner(s) of `cookie`. This +information can be found in the npm registry using the command +`npm owner ls cookie`. +If unsure or unable to get the information from the above, open an issue +in the [project issue tracker](https://github.com/jshttp/cookie/issues) +asking for the current contact information. + +To ensure the timely response to your report, please ensure that the entirety +of the report is contained within the email body and not solely behind a web +link or an attachment. + +At least one owner will acknowledge your email within 48 hours, and will send a +more detailed response within 48 hours indicating the next steps in handling +your report. After the initial reply to your report, the owners will +endeavor to keep you informed of the progress towards a fix and full +announcement, and may ask for additional information or guidance. diff --git a/startos-registry/node_modules/cookie/index.js b/startos-registry/node_modules/cookie/index.js new file mode 100644 index 0000000..acd5acd --- /dev/null +++ b/startos-registry/node_modules/cookie/index.js @@ -0,0 +1,335 @@ +/*! + * cookie + * Copyright(c) 2012-2014 Roman Shtylman + * Copyright(c) 2015 Douglas Christopher Wilson + * MIT Licensed + */ + +'use strict'; + +/** + * Module exports. + * @public + */ + +exports.parse = parse; +exports.serialize = serialize; + +/** + * Module variables. + * @private + */ + +var __toString = Object.prototype.toString +var __hasOwnProperty = Object.prototype.hasOwnProperty + +/** + * RegExp to match cookie-name in RFC 6265 sec 4.1.1 + * This refers out to the obsoleted definition of token in RFC 2616 sec 2.2 + * which has been replaced by the token definition in RFC 7230 appendix B. + * + * cookie-name = token + * token = 1*tchar + * tchar = "!" / "#" / "$" / "%" / "&" / "'" / + * "*" / "+" / "-" / "." / "^" / "_" / + * "`" / "|" / "~" / DIGIT / ALPHA + */ + +var cookieNameRegExp = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/; + +/** + * RegExp to match cookie-value in RFC 6265 sec 4.1.1 + * + * cookie-value = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE ) + * cookie-octet = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E + * ; US-ASCII characters excluding CTLs, + * ; whitespace DQUOTE, comma, semicolon, + * ; and backslash + */ + +var cookieValueRegExp = /^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/; + +/** + * RegExp to match domain-value in RFC 6265 sec 4.1.1 + * + * domain-value = + * ; defined in [RFC1034], Section 3.5, as + * ; enhanced by [RFC1123], Section 2.1 + * =