@ardennguyen/zalo-agent-cli 1.0.7 → 2.0.0

package/node_modules/tldts-core/src/options.ts

@@ -0,0 +1,39 @@
+export interface IOptions {
+  allowIcannDomains: boolean;
+  allowPrivateDomains: boolean;
+  detectIp: boolean;
+  extractHostname: boolean;
+  mixedInputs: boolean;
+  validHosts: string[] | null;
+  validateHostname: boolean;
+}
+
+function setDefaultsImpl({
+  allowIcannDomains = true,
+  allowPrivateDomains = false,
+  detectIp = true,
+  extractHostname = true,
+  mixedInputs = true,
+  validHosts = null,
+  validateHostname = true,
+}: Partial<IOptions>): IOptions {
+  return {
+    allowIcannDomains,
+    allowPrivateDomains,
+    detectIp,
+    extractHostname,
+    mixedInputs,
+    validHosts,
+    validateHostname,
+  };
+}
+
+const DEFAULT_OPTIONS = /*@__INLINE__*/ setDefaultsImpl({});
+
+export function setDefaults(options?: Partial<IOptions>): IOptions {
+  if (options === undefined) {
+    return DEFAULT_OPTIONS;
+  }
+
+  return /*@__INLINE__*/ setDefaultsImpl(options);
+}

package/node_modules/tldts-core/src/subdomain.ts

@@ -0,0 +1,11 @@
+/**
+ * Returns the subdomain of a hostname string
+ */
+export default function getSubdomain(hostname: string, domain: string): string {
+  // If `hostname` and `domain` are the same, then there is no sub-domain
+  if (domain.length === hostname.length) {
+    return '';
+  }
+
+  return hostname.slice(0, -domain.length - 1);
+}

package/node_modules/tough-cookie/LICENSE

@@ -0,0 +1,12 @@
+Copyright (c) 2015, Salesforce.com, Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of Salesforce.com nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/node_modules/tough-cookie/README.md

@@ -0,0 +1,154 @@
+# Tough Cookie · [![RFC6265][rfc6265-badge]][rfc6265-tracker] [![RFC6265bis][rfc6265bis-badge]][rfc6265bis-tracker] [![npm version][npm-badge]][npm-repo] [![CI on Github Actions: salesforce/tough-cookie][ci-badge]][ci-url] ![PRs Welcome][prs-welcome-badge]
+
+A Node.js implementation of [RFC6265][rfc6265-tracker] for cookie parsing, storage, and retrieval.
+
+## Getting Started
+
+Install Tough Cookie using [`npm`][npm-repo]:
+
+```shell
+npm install tough-cookie
+```
+
+or [`yarn`][yarn-repo]:
+
+```shell
+yarn add tough-cookie
+```
+
+## Usage
+
+```typescript
+import { Cookie, CookieJar } from 'tough-cookie'
+
+// parse a `Cookie` request header
+const reqCookies = 'ID=298zf09hf012fh2; csrf=u32t4o3tb3gg43; _gat=1'
+  .split(';')
+  .map(Cookie.parse)
+// generate a `Cookie` request header
+const cookieHeader = reqCookies.map((cookie) => cookie.cookieString()).join(';')
+
+// parse a Set-Cookie response header
+const resCookie = Cookie.parse(
+  'foo=bar; Domain=example.com; Path=/; Expires=Tue, 21 Oct 2025 00:00:00 GMT',
+)
+// generate a Set-Cookie response header
+const setCookieHeader = cookie.toString()
+
+// store and retrieve cookies
+const cookieJar = new CookieJar() // uses the in-memory store by default
+await cookieJar.setCookie(resCookie, 'https://example.com/')
+const matchingCookies = await cookieJar.getCookies('https://example.com/')
+```
+
+> [!IMPORTANT]
+> For more detailed usage information, refer to the [API docs](./api/docs/tough-cookie.md).
+
+## RFC6265bis
+
+Support for [RFC6265bis][rfc6265bis-tracker] is being developed. As these revisions to [RFC6252][rfc6265-tracker] are
+still in `Active Internet-Draft` state, the areas of support that follow are subject to change.
+
+### SameSite Cookies
+
+This change makes it possible for servers, and supporting clients, to mitigate certain types of CSRF
+attacks by disallowing `SameSite` cookies from being sent cross-origin.
+
+#### Example
+
+```typescript
+import { CookieJar } from 'tough-cookie'
+
+const cookieJar = new CookieJar() // uses the in-memory store by default
+
+// storing cookies with various SameSite attributes
+await cookieJar.setCookie(
+  'strict=authorized; SameSite=strict',
+  'http://example.com/index.html',
+)
+await cookieJar.setCookie(
+  'lax=okay; SameSite=lax',
+  'http://example.com/index.html',
+)
+await cookieJar.setCookie('normal=whatever', 'http://example.com/index.html')
+
+// retrieving cookies using a SameSite context
+const laxCookies = await cookieJar.getCookies('http://example.com/index.html', {
+  // the first cookie (strict=authorized) will not be returned if the context is 'lax'
+  // but the other two cookies will be returned
+  sameSiteContext: 'lax',
+})
+```
+
+> [!NOTE]
+> It is highly recommended that you read [RFC6265bis - Section 8.8][samesite-implementation] for more details on SameSite cookies, security considerations, and defense in depth.
+
+### Cookie Prefixes
+
+Cookie prefixes are a way to indicate that a given cookie was set with a set of attributes simply by
+inspecting the first few characters of the cookie's name.
+
+Two prefixes are defined:
+
+- `"__Secure-"`
+
+  If a cookie's name begins with a case-sensitive match for the string `__Secure-`, then the cookie was set with a "Secure" attribute.
+
+- `"__Host-"`
+
+  If a cookie's name begins with a case-sensitive match for the string `__Host-`, then the cookie was set with a "Secure" attribute, a "Path" attribute with a value of "/", and no "Domain" attribute.
+
+If `prefixSecurity` is enabled for `CookieJar`, then cookies that match the prefixes defined above but do
+not obey the attribute restrictions are not added.
+
+You can define this functionality by passing in the `prefixSecurity` option to `CookieJar`. It can be one of 3 values:
+
+1. `silent`: (**default**) Enable cookie prefix checking but silently fail to add the cookie if conditions are not met.
+2. `strict`: Enable cookie prefix checking and error out if conditions are not met.
+3. `unsafe-disabled`: Disable cookie prefix checking.
+
+> If `ignoreError` is passed in as `true` when setting a cookie then the error is silent regardless of the `prefixSecurity` option (assuming it's enabled).
+
+#### Example
+
+```typescript
+import { CookieJar, MemoryCookieStore } from 'tough-cookie'
+
+const cookieJar = new CookieJar(new MemoryCookieStore(), {
+  prefixSecurity: 'silent',
+})
+
+// this cookie will be silently ignored since the url is insecure (http)
+await cookieJar.setCookie(
+  '__Secure-SID=12345; Domain=example.com; Secure;',
+  'http://example.com',
+)
+
+// this cookie will be stored since the url is secure (https)
+await cookieJar.setCookie(
+  '__Secure-SID=12345; Domain=example.com; Secure;',
+  'https://example.com',
+)
+```
+
+> [!NOTE]
+> It is highly recommended that you read [RFC6265bis - Section 4.1.3][cookie-prefixes-implementation] for more details on Cookie Prefixes.
+
+## Node.js Version Support
+
+We follow the [Node.js release schedule](https://github.com/nodejs/Release#release-schedule) and support
+all versions that are in Active LTS or Maintenance. We will always do a major release when dropping support
+for older versions of node, and we will do so in consultation with our community.
+
+[npm-badge]: https://img.shields.io/npm/v/tough-cookie.svg?style=flat
+[npm-repo]: https://www.npmjs.com/package/tough-cookie
+[ci-badge]: https://github.com/salesforce/tough-cookie/actions/workflows/ci.yaml/badge.svg
+[ci-url]: https://github.com/salesforce/tough-cookie/actions/workflows/ci.yaml
+[rfc6265-badge]: https://img.shields.io/badge/RFC-6265-flat?labelColor=000000&color=666666
+[rfc6265-tracker]: https://datatracker.ietf.org/doc/rfc6265/
+[rfc6265bis-badge]: https://img.shields.io/badge/RFC-6265bis-flat?labelColor=000000&color=666666
+[rfc6265bis-tracker]: https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/
+[samesite-implementation]: https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-02#section-8.8
+[cookie-prefixes-implementation]: https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-02#section-4.1.3
+[prs-welcome-badge]: https://img.shields.io/badge/PRs-welcome-brightgreen.svg
+[yarn-repo]: https://yarnpkg.com/package?name=tough-cookie

package/node_modules/tough-cookie/dist/cookie/canonicalDomain.d.ts

@@ -0,0 +1,33 @@
+import type { Nullable } from '../utils';
+/**
+ * Transforms a domain name into a canonical domain name. The canonical domain name is a domain name
+ * that has been trimmed, lowercased, stripped of leading dot, and optionally punycode-encoded
+ * ({@link https://www.rfc-editor.org/rfc/rfc6265.html#section-5.1.2 | Section 5.1.2 of RFC 6265}). For
+ * the most part, this function is idempotent (calling the function with the output from a previous call
+ * returns the same output).
+ *
+ * @remarks
+ * A canonicalized host name is the string generated by the following
+ * algorithm:
+ *
+ * 1.  Convert the host name to a sequence of individual domain name
+ *     labels.
+ *
+ * 2.  Convert each label that is not a Non-Reserved LDH (NR-LDH) label,
+ *     to an A-label (see Section 2.3.2.1 of [RFC5890] for the former
+ *     and latter), or to a "punycode label" (a label resulting from the
+ *     "ToASCII" conversion in Section 4 of [RFC3490]), as appropriate
+ *     (see Section 6.3 of this specification).
+ *
+ * 3.  Concatenate the resulting labels, separated by a %x2E (".")
+ *     character.
+ *
+ * @example
+ * ```
+ * canonicalDomain('.EXAMPLE.com') === 'example.com'
+ * ```
+ *
+ * @param domainName - the domain name to generate the canonical domain from
+ * @public
+ */
+export declare function canonicalDomain(domainName: Nullable<string>): string | undefined;

package/node_modules/tough-cookie/dist/cookie/canonicalDomain.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalDomain = canonicalDomain;
+const constants_1 = require("./constants");
+/**
+ * Normalizes a domain to lowercase and punycode-encoded.
+ * Runtime-agnostic equivalent to node's `domainToASCII`.
+ * @see https://nodejs.org/docs/latest-v22.x/api/url.html#urldomaintoasciidomain
+ */
+function domainToASCII(domain) {
+    return new URL(`http://${domain}`).hostname;
+}
+/**
+ * Transforms a domain name into a canonical domain name. The canonical domain name is a domain name
+ * that has been trimmed, lowercased, stripped of leading dot, and optionally punycode-encoded
+ * ({@link https://www.rfc-editor.org/rfc/rfc6265.html#section-5.1.2 | Section 5.1.2 of RFC 6265}). For
+ * the most part, this function is idempotent (calling the function with the output from a previous call
+ * returns the same output).
+ *
+ * @remarks
+ * A canonicalized host name is the string generated by the following
+ * algorithm:
+ *
+ * 1.  Convert the host name to a sequence of individual domain name
+ *     labels.
+ *
+ * 2.  Convert each label that is not a Non-Reserved LDH (NR-LDH) label,
+ *     to an A-label (see Section 2.3.2.1 of [RFC5890] for the former
+ *     and latter), or to a "punycode label" (a label resulting from the
+ *     "ToASCII" conversion in Section 4 of [RFC3490]), as appropriate
+ *     (see Section 6.3 of this specification).
+ *
+ * 3.  Concatenate the resulting labels, separated by a %x2E (".")
+ *     character.
+ *
+ * @example
+ * ```
+ * canonicalDomain('.EXAMPLE.com') === 'example.com'
+ * ```
+ *
+ * @param domainName - the domain name to generate the canonical domain from
+ * @public
+ */
+function canonicalDomain(domainName) {
+    if (domainName == null) {
+        return undefined;
+    }
+    let str = domainName.trim().replace(/^\./, ''); // S4.1.2.3 & S5.2.3: ignore leading .
+    if (constants_1.IP_V6_REGEX_OBJECT.test(str)) {
+        if (!str.startsWith('[')) {
+            str = '[' + str;
+        }
+        if (!str.endsWith(']')) {
+            str = str + ']';
+        }
+        return domainToASCII(str).slice(1, -1); // remove [ and ]
+    }
+    // convert to IDN if any non-ASCII characters
+    // eslint-disable-next-line no-control-regex
+    if (/[^\u0001-\u007f]/.test(str)) {
+        return domainToASCII(str);
+    }
+    // ASCII-only domain - not canonicalized with new URL() because it may be a malformed URL
+    return str.toLowerCase();
+}

package/node_modules/tough-cookie/dist/cookie/constants.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Cookie prefixes are a way to indicate that a given cookie was set with a set of attributes simply by inspecting the
+ * first few characters of the cookie's name. These are defined in {@link https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-13#section-4.1.3 | RFC6265bis - Section 4.1.3}.
+ *
+ * The following values can be used to configure how a {@link CookieJar} enforces attribute restrictions for Cookie prefixes:
+ *
+ * - `silent` - Enable cookie prefix checking but silently ignores the cookie if conditions are not met. This is the default configuration for a {@link CookieJar}.
+ *
+ * - `strict` - Enables cookie prefix checking and will raise an error if conditions are not met.
+ *
+ * - `unsafe-disabled` - Disables cookie prefix checking.
+ * @public
+ */
+export declare const PrefixSecurityEnum: {
+    readonly SILENT: "silent";
+    readonly STRICT: "strict";
+    readonly DISABLED: "unsafe-disabled";
+};
+export declare const IP_V6_REGEX_OBJECT: RegExp;
+/**
+ * A JSON representation of a {@link CookieJar}.
+ * @public
+ */
+export interface SerializedCookieJar {
+    /**
+     * The version of `tough-cookie` used during serialization.
+     */
+    version: string;
+    /**
+     * The name of the store used during serialization.
+     */
+    storeType: string | null;
+    /**
+     * The value of {@link CreateCookieJarOptions.rejectPublicSuffixes} configured on the {@link CookieJar}.
+     */
+    rejectPublicSuffixes: boolean;
+    /**
+     * Other configuration settings on the {@link CookieJar}.
+     */
+    [key: string]: unknown;
+    /**
+     * The list of {@link Cookie} values serialized as JSON objects.
+     */
+    cookies: SerializedCookie[];
+}
+/**
+ * A JSON object that is created when {@link Cookie.toJSON} is called. This object will contain the properties defined in {@link Cookie.serializableProperties}.
+ * @public
+ */
+export type SerializedCookie = {
+    key?: string;
+    value?: string;
+    [key: string]: unknown;
+};

package/node_modules/tough-cookie/dist/cookie/constants.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IP_V6_REGEX_OBJECT = exports.PrefixSecurityEnum = void 0;
+/**
+ * Cookie prefixes are a way to indicate that a given cookie was set with a set of attributes simply by inspecting the
+ * first few characters of the cookie's name. These are defined in {@link https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-13#section-4.1.3 | RFC6265bis - Section 4.1.3}.
+ *
+ * The following values can be used to configure how a {@link CookieJar} enforces attribute restrictions for Cookie prefixes:
+ *
+ * - `silent` - Enable cookie prefix checking but silently ignores the cookie if conditions are not met. This is the default configuration for a {@link CookieJar}.
+ *
+ * - `strict` - Enables cookie prefix checking and will raise an error if conditions are not met.
+ *
+ * - `unsafe-disabled` - Disables cookie prefix checking.
+ * @public
+ */
+exports.PrefixSecurityEnum = {
+    SILENT: 'silent',
+    STRICT: 'strict',
+    DISABLED: 'unsafe-disabled',
+};
+Object.freeze(exports.PrefixSecurityEnum);
+const IP_V6_REGEX = `
+\\[?(?:
+(?:[a-fA-F\\d]{1,4}:){7}(?:[a-fA-F\\d]{1,4}|:)|
+(?:[a-fA-F\\d]{1,4}:){6}(?:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|:[a-fA-F\\d]{1,4}|:)|
+(?:[a-fA-F\\d]{1,4}:){5}(?::(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,2}|:)|
+(?:[a-fA-F\\d]{1,4}:){4}(?:(?::[a-fA-F\\d]{1,4}){0,1}:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,3}|:)|
+(?:[a-fA-F\\d]{1,4}:){3}(?:(?::[a-fA-F\\d]{1,4}){0,2}:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,4}|:)|
+(?:[a-fA-F\\d]{1,4}:){2}(?:(?::[a-fA-F\\d]{1,4}){0,3}:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,5}|:)|
+(?:[a-fA-F\\d]{1,4}:){1}(?:(?::[a-fA-F\\d]{1,4}){0,4}:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,6}|:)|
+(?::(?:(?::[a-fA-F\\d]{1,4}){0,5}:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}|(?::[a-fA-F\\d]{1,4}){1,7}|:))
+)(?:%[0-9a-zA-Z]{1,})?\\]?
+`
+    .replace(/\s*\/\/.*$/gm, '')
+    .replace(/\n/g, '')
+    .trim();
+exports.IP_V6_REGEX_OBJECT = new RegExp(`^${IP_V6_REGEX}$`);