@dalmia/calibrate-mcp 0.0.66 → 0.0.68

package/bin/mcp-server.js

@@ -364,6 +364,18 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a;
   for (let i = start;i < issues.length; i++) {
@@ -1431,7 +1443,7 @@ var init_versions = __esm(() => {
   version2 = {
     major: 4,
     minor: 6,
-    patch: 5
+    patch: 6
   };
 });
 
@@ -1557,6 +1569,28 @@ function isValidJWT(token, algorithm = null) {
     return false;
   }
 }
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c) => c[0]));
+  const parse = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse(payload, ctx);
+  };
+}
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -1862,7 +1896,7 @@ function handleRefineResult(result, payload, input, inst) {
     payload.issues.push(issue(_iss));
   }
 }
-var $ZodType, toStandardResult = (r, ctx) => r.issues.length ? { issues: r.issues.map((iss) => finalizeIssue(iss, ctx, config())) } : { value: r.value }, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT = 1, URL_UNPARSEABLE = 2, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom;
+var $ZodType, toStandardResult = (r, ctx) => r.issues.length ? { issues: r.issues.map((iss) => finalizeIssue(iss, ctx, config())) } : { value: r.value }, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT = 1, URL_UNPARSEABLE = 2, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, arraySize = (input) => Array.isArray(input) ? input.length : -1, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom;
 var init_schemas = __esm(() => {
   init_checks();
   init_core();
@@ -2352,6 +2386,7 @@ var init_schemas = __esm(() => {
       }
       return payload;
     };
+    capSize(inst, arraySize);
   });
   NO_SYMBOL_KEYS = [];
   $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
@@ -27191,109 +27226,144 @@ var require_view = __commonJS(function(exports, module) {
   }
 });
 
-// node_modules/content-type/index.js
-var require_content_type = __commonJS(function(exports) {
+// node_modules/express/node_modules/content-type/dist/index.js
+var require_dist3 = __commonJS(function(exports) {
   /*!
    * content-type
    * Copyright(c) 2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var PARAM_REGEXP = /; *([!#$%&'*+.^_`|~0-9A-Za-z-]+) *= *("(?:[\u000b\u0020\u0021\u0023-\u005b\u005d-\u007e\u0080-\u00ff]|\\[\u000b\u0020-\u00ff])*"|[!#$%&'*+.^_`|~0-9A-Za-z-]+) */g;
-  var TEXT_REGEXP = /^[\u000b\u0020-\u007e\u0080-\u00ff]+$/;
-  var TOKEN_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
-  var QESC_REGEXP = /\\([\u000b\u0020-\u00ff])/g;
-  var QUOTE_REGEXP = /([\\"])/g;
-  var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+  Object.defineProperty(exports, "__esModule", { value: true });
   exports.format = format;
   exports.parse = parse;
+  var TEXT_REGEXP = /^[\u0009\u0020-\u007e\u0080-\u00ff]*$/;
+  var TOKEN_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+  var QUOTE_REGEXP = /[\\"]/g;
+  var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+  var NullObject = /* @__PURE__ */ (() => {
+    const C = function() {};
+    C.prototype = Object.create(null);
+    return C;
+  })();
   function format(obj) {
-    if (!obj || typeof obj !== "object") {
-      throw new TypeError("argument obj is required");
-    }
-    var parameters = obj.parameters;
-    var type = obj.type;
+    const { type, parameters } = obj;
     if (!type || !TYPE_REGEXP.test(type)) {
-      throw new TypeError("invalid type");
+      throw new TypeError(`Invalid type: ${type}`);
     }
-    var string = type;
-    if (parameters && typeof parameters === "object") {
-      var param;
-      var params = Object.keys(parameters).sort();
-      for (var i = 0;i < params.length; i++) {
-        param = params[i];
+    let result = type;
+    if (parameters) {
+      for (const param of Object.keys(parameters)) {
         if (!TOKEN_REGEXP.test(param)) {
-          throw new TypeError("invalid parameter name");
+          throw new TypeError(`Invalid parameter name: ${param}`);
         }
-        string += "; " + param + "=" + qstring(parameters[param]);
+        result += `; ${param}=${qstring(parameters[param])}`;
       }
     }
-    return string;
+    return result;
   }
-  function parse(string) {
-    if (!string) {
-      throw new TypeError("argument string is required");
-    }
-    var header = typeof string === "object" ? getcontenttype(string) : string;
-    if (typeof header !== "string") {
-      throw new TypeError("argument string is required to be a string");
-    }
-    var index = header.indexOf(";");
-    var type = index !== -1 ? header.slice(0, index).trim() : header.trim();
-    if (!TYPE_REGEXP.test(type)) {
-      throw new TypeError("invalid media type");
+  function parse(header, options) {
+    const stopChar = options?.comma === true ? COMMA : 65536;
+    const len = header.length;
+    let index = skipOWS(header, options?.start ?? 0, len);
+    const valueStart = index;
+    index = skipValue(header, index, len, stopChar);
+    const valueEnd = trailingOWS(header, valueStart, index);
+    const type = header.slice(valueStart, valueEnd).toLowerCase();
+    if (options?.parameters === false) {
+      return { type, index, parameters: new NullObject };
     }
-    var obj = new ContentType(type.toLowerCase());
-    if (index !== -1) {
-      var key;
-      var match;
-      var value;
-      PARAM_REGEXP.lastIndex = index;
-      while (match = PARAM_REGEXP.exec(header)) {
-        if (match.index !== index) {
-          throw new TypeError("invalid parameter format");
-        }
-        index += match[0].length;
-        key = match[1].toLowerCase();
-        value = match[2];
-        if (value.charCodeAt(0) === 34) {
-          value = value.slice(1, -1);
-          if (value.indexOf("\\") !== -1) {
-            value = value.replace(QESC_REGEXP, "$1");
+    return parseParameters(header, type, index, len, stopChar);
+  }
+  var SP = 32;
+  var HTAB = 9;
+  var SEMI = 59;
+  var EQ = 61;
+  var DQUOTE = 34;
+  var BSLASH = 92;
+  var COMMA = 44;
+  function parseParameters(header, type, index, len, stopChar) {
+    const parameters = new NullObject;
+    parameter:
+      while (index < len) {
+        if (header.charCodeAt(index) === stopChar)
+          break;
+        index = skipOWS(header, index + 1, len);
+        const keyStart = index;
+        while (index < len) {
+          const code = header.charCodeAt(index);
+          if (code === stopChar)
+            break parameter;
+          if (code === SEMI)
+            continue parameter;
+          if (code === EQ) {
+            const keyEnd = trailingOWS(header, keyStart, index);
+            const key = header.slice(keyStart, keyEnd).toLowerCase();
+            index = skipOWS(header, index + 1, len);
+            if (index < len && header.charCodeAt(index) === DQUOTE) {
+              index++;
+              let value = "";
+              while (index < len) {
+                const code = header.charCodeAt(index++);
+                if (code === DQUOTE) {
+                  index = skipValue(header, index, len, stopChar);
+                  if (parameters[key] === undefined)
+                    parameters[key] = value;
+                  break;
+                }
+                if (code === BSLASH && index < len) {
+                  value += header[index++];
+                  continue;
+                }
+                value += String.fromCharCode(code);
+              }
+              continue parameter;
+            }
+            const valueStart = index;
+            index = skipValue(header, index, len, stopChar);
+            if (parameters[key] === undefined) {
+              const valueEnd = trailingOWS(header, valueStart, index);
+              parameters[key] = header.slice(valueStart, valueEnd);
+            }
+            continue parameter;
           }
+          index++;
         }
-        obj.parameters[key] = value;
-      }
-      if (index !== header.length) {
-        throw new TypeError("invalid parameter format");
       }
-    }
-    return obj;
+    return { type, index, parameters };
   }
-  function getcontenttype(obj) {
-    var header;
-    if (typeof obj.getHeader === "function") {
-      header = obj.getHeader("content-type");
-    } else if (typeof obj.headers === "object") {
-      header = obj.headers && obj.headers["content-type"];
-    }
-    if (typeof header !== "string") {
-      throw new TypeError("content-type header is missing from object");
+  function skipValue(str, index, len, stopChar) {
+    while (index < len) {
+      const code = str.charCodeAt(index);
+      if (code === SEMI || code === stopChar)
+        break;
+      index++;
     }
-    return header;
+    return index;
   }
-  function qstring(val) {
-    var str = String(val);
-    if (TOKEN_REGEXP.test(str)) {
-      return str;
+  function skipOWS(header, index, len) {
+    while (index < len) {
+      const char = header.charCodeAt(index);
+      if (char !== SP && char !== HTAB)
+        break;
+      index++;
     }
-    if (str.length > 0 && !TEXT_REGEXP.test(str)) {
-      throw new TypeError("invalid parameter value");
+    return index;
+  }
+  function trailingOWS(header, start, end) {
+    while (end > start) {
+      const char = header.charCodeAt(end - 1);
+      if (char !== SP && char !== HTAB)
+        break;
+      end--;
     }
-    return '"' + str.replace(QUOTE_REGEXP, "\\$1") + '"';
+    return end;
   }
-  function ContentType(type) {
-    this.parameters = Object.create(null);
-    this.type = type;
+  function qstring(str) {
+    if (TOKEN_REGEXP.test(str))
+      return str;
+    if (TEXT_REGEXP.test(str))
+      return `"${str.replace(QUOTE_REGEXP, "\\$&")}"`;
+    throw new TypeError(`Invalid parameter value: ${str}`);
   }
 });
 
@@ -28199,7 +28269,7 @@ var require_utils3 = __commonJS(function(exports) {
    * MIT Licensed
    */
   var { METHODS } = __require("node:http");
-  var contentType = require_content_type();
+  var contentType = require_dist3();
   var etag = require_etag();
   var mime = require_mime_types();
   var proxyaddr = require_proxy_addr();
@@ -28404,7 +28474,7 @@ var require_is_promise = __commonJS(function(exports, module) {
 });
 
 // node_modules/path-to-regexp/dist/index.js
-var require_dist3 = __commonJS(function(exports) {
+var require_dist4 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.PathError = exports.TokenData = undefined;
   exports.parse = parse;
@@ -28780,7 +28850,7 @@ var require_layer = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var isPromise = require_is_promise();
-  var pathRegexp = require_dist3();
+  var pathRegexp = require_dist4();
   var debug = require_src()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
@@ -29660,7 +29730,7 @@ var require_application = __commonJS(function(exports, module) {
     var cache = this.cache;
     var done = callback;
     var engines = this.engines;
-    var opts = options;
+    var opts = options || {};
     var view;
     if (typeof options === "function") {
       done = options;
@@ -29703,7 +29773,7 @@ var require_application = __commonJS(function(exports, module) {
   };
   function logerror(err) {
     if (this.get("env") !== "test")
-      console.error(err.stack || err.toString());
+      console.error(err);
   }
   function tryRender(view, options, callback) {
     try {
@@ -29715,7 +29785,7 @@ var require_application = __commonJS(function(exports, module) {
 });
 
 // node_modules/negotiator/node_modules/content-type/dist/index.js
-var require_dist4 = __commonJS(function(exports) {
+var require_dist5 = __commonJS(function(exports) {
   /*!
    * content-type
    * Copyright(c) 2015 Douglas Christopher Wilson
@@ -29862,7 +29932,7 @@ var require_accept = __commonJS(function(exports, module) {
    * Copyright(c) 2026 Blake Embrey
    * MIT Licensed
    */
-  var contentType = require_dist4();
+  var contentType = require_dist5();
   module.exports = parseAccept;
   function parseAccept(header) {
     var values = [];
@@ -30056,7 +30126,7 @@ var require_encoding = __commonJS(function(exports, module) {
 
 // node_modules/negotiator/lib/language.js
 var require_language = __commonJS(function(exports, module) {
-  var contentType = require_dist4();
+  var contentType = require_dist5();
   var parseAccept = require_accept();
   module.exports = preferredLanguages;
   module.exports.preferredLanguages = preferredLanguages;
@@ -30140,7 +30210,7 @@ var require_language = __commonJS(function(exports, module) {
 
 // node_modules/negotiator/lib/mediaType.js
 var require_mediaType = __commonJS(function(exports, module) {
-  var contentType = require_dist4();
+  var contentType = require_dist5();
   var parseAcceptHeader = require_accept();
   module.exports = preferredMediaTypes;
   module.exports.preferredMediaTypes = preferredMediaTypes;
@@ -30593,9 +30663,9 @@ var require_request = __commonJS(function(exports, module) {
     var accept = accepts(this);
     return accept.encodings.apply(accept, arguments);
   };
-  req.acceptsCharsets = function() {
-    var accept = accepts(this);
-    return accept.charsets.apply(accept, arguments);
+  req.acceptsCharsets = function(...charsets) {
+    const accept = accepts(this);
+    return accept.charsets(...charsets);
   };
   req.acceptsLanguages = function(...languages) {
     return accepts(this).languages(...languages);
@@ -30664,7 +30734,7 @@ var require_request = __commonJS(function(exports, module) {
     if (!val || !trust(this.socket.remoteAddress, 0)) {
       val = this.get("Host");
     } else if (val.indexOf(",") !== -1) {
-      val = val.substring(0, val.indexOf(",")).trimRight();
+      val = val.substring(0, val.indexOf(",")).trimEnd();
     }
     return val || undefined;
   });
@@ -30680,7 +30750,7 @@ var require_request = __commonJS(function(exports, module) {
     var method = this.method;
     var res = this.res;
     var status = res.statusCode;
-    if (method !== "GET" && method !== "HEAD")
+    if (method !== "GET" && method !== "HEAD" && method !== "QUERY")
       return false;
     if (status >= 200 && status < 300 || status === 304) {
       return fresh(this.headers, {
@@ -30706,199 +30776,279 @@ var require_request = __commonJS(function(exports, module) {
   }
 });
 
-// node_modules/content-disposition/index.js
-var require_content_disposition = __commonJS(function(exports, module) {
+// node_modules/content-disposition/dist/index.js
+var require_dist6 = __commonJS(function(exports) {
   /*!
    * content-disposition
    * Copyright(c) 2014-2017 Douglas Christopher Wilson
    * MIT Licensed
    */
-  module.exports = contentDisposition;
-  module.exports.parse = parse;
-  var utf8Decoder = new TextDecoder("utf-8");
+  Object.defineProperty(exports, "__esModule", { value: true });
+  exports.create = create;
+  exports.parse = parse;
+  exports.decodeExtended = decodeExtended;
+  exports.format = format;
+  exports.encodeExtended = encodeExtended;
+  var NullObject = /* @__PURE__ */ (() => {
+    const C = function() {};
+    C.prototype = Object.create(null);
+    return C;
+  })();
+  function create(filename, options) {
+    const type = options?.type || "attachment";
+    const parameters = createParameters(filename, options?.fallback);
+    return format({ type, parameters }, { extended: false });
+  }
+  var SP = 32;
+  var HTAB = 9;
+  var SEMI = 59;
+  var EQ = 61;
+  var DQUOTE = 34;
+  var BSLASH = 92;
+  var ASTERISK = 42;
+  function parse(header, options) {
+    const len = header.length;
+    const multipart = options?.multipart === true;
+    const extended = options?.extended !== false;
+    let index = skipOWS(header, 0, header.length);
+    const typeStart = index;
+    index = parseToken(header, index, len);
+    const typeEnd = trailingOWS(header, typeStart, index);
+    const type = header.slice(typeStart, typeEnd).toLowerCase();
+    const parameters = new NullObject;
+    parameter:
+      while (index < len) {
+        index = skipOWS(header, index + 1, len);
+        const keyStart = index;
+        while (index < len) {
+          const char = header.charCodeAt(index);
+          if (char === SEMI)
+            continue parameter;
+          if (char === EQ) {
+            const keyEnd = trailingOWS(header, keyStart, index);
+            const key = header.slice(keyStart, keyEnd).toLowerCase();
+            index = skipOWS(header, index + 1, len);
+            if (index < len && header.charCodeAt(index) === DQUOTE) {
+              index++;
+              let value = "";
+              if (multipart) {
+                while (index < len) {
+                  const code = header.charCodeAt(index++);
+                  if (code === DQUOTE) {
+                    index = parseToken(header, index, len);
+                    if (parameters[key] === undefined)
+                      parameters[key] = value;
+                    break;
+                  }
+                  if (code === 37 && index + 1 < len) {
+                    const code2 = header.charCodeAt(index);
+                    const code3 = header.charCodeAt(index + 1);
+                    if (code2 === 50 && code3 === 50) {
+                      value += '"';
+                      index += 2;
+                      continue;
+                    }
+                    if (code2 === 48) {
+                      if (code3 === 100 || code3 === 68) {
+                        value += "\r";
+                        index += 2;
+                        continue;
+                      }
+                      if (code3 === 97 || code3 === 65) {
+                        value += `
+`;
+                        index += 2;
+                        continue;
+                      }
+                    }
+                  }
+                  value += String.fromCharCode(code);
+                }
+              } else {
+                while (index < len) {
+                  const code = header.charCodeAt(index++);
+                  if (code === DQUOTE) {
+                    index = parseToken(header, index, len);
+                    if (parameters[key] === undefined)
+                      parameters[key] = value;
+                    break;
+                  }
+                  if (code === BSLASH && index < len) {
+                    value += header[index++];
+                    continue;
+                  }
+                  value += String.fromCharCode(code);
+                }
+              }
+              continue parameter;
+            }
+            const valueStart = index;
+            index = parseToken(header, index, len);
+            const valueEnd = trailingOWS(header, valueStart, index);
+            const value = header.slice(valueStart, valueEnd);
+            if (parameters[key] === undefined) {
+              parameters[key] = value;
+              if (extended && key.charCodeAt(key.length - 1) === ASTERISK) {
+                const normalizedKey = key.slice(0, -1);
+                const decoded = decodeExtended(value);
+                if (decoded !== undefined)
+                  parameters[normalizedKey] = decoded;
+              }
+            }
+            continue parameter;
+          }
+          index++;
+        }
+      }
+    return { type, parameters };
+  }
   var ENCODE_URL_ATTR_CHAR_REGEXP = /[\x00-\x20"'()*,/:;<=>?@[\\\]{}\x7f]/g;
-  var NON_LATIN1_REGEXP = /[^\x20-\x7e\xa0-\xff]/g;
-  var QESC_REGEXP = /\\([\u0000-\u007f])/g;
-  var QUOTE_REGEXP = /([\\"])/g;
-  var PARAM_REGEXP = /;[\x09\x20]*([!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*=[\x09\x20]*("(?:[\x20!\x23-\x5b\x5d-\x7e\x80-\xff]|\\[\x20-\x7e])*"|[!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*/g;
-  var TEXT_REGEXP = /^[\x20-\x7e\x80-\xff]+$/;
+  var NON_ASCII_REGEXP = /[^\x20-\x7e]/g;
+  var QUOTE_REGEXP = /[\\"]/g;
+  var INVALID_FILENAME_REGEXP = /%[0-9A-Fa-f]{2}/;
+  var TEXT_REGEXP = /^[\x20-\x7e\x80-\xff]*$/;
+  var ASCII_TEXT_REGEXP = /^[\x20-\x7e]*$/;
   var TOKEN_REGEXP = /^[!#$%&'*+.0-9A-Z^_`a-z|~-]+$/;
-  var EXT_VALUE_REGEXP = /^([A-Za-z0-9!#$%&+\-^_`{}~]+)'(?:[A-Za-z]{2,3}(?:-[A-Za-z]{3}){0,3}|[A-Za-z]{4,8}|)'((?:%[0-9A-Fa-f]{2}|[A-Za-z0-9!#$&+.^_`|~-])+)$/;
-  var DISPOSITION_TYPE_REGEXP = /^([!#$%&'*+.0-9A-Z^_`a-z|~-]+)[\x09\x20]*(?:$|;)/;
-  function contentDisposition(filename, options) {
-    var opts = options || {};
-    var type = opts.type || "attachment";
-    var params = createparams(filename, opts.fallback);
-    return format(new ContentDisposition(type, params));
-  }
-  function createparams(filename, fallback) {
-    if (filename === undefined) {
+  function createParameters(filename, fallback = true) {
+    if (filename === undefined)
       return;
+    if (typeof fallback === "string") {
+      if (!ASCII_TEXT_REGEXP.test(fallback)) {
+        throw new TypeError("Fallback must be valid US-ASCII: " + fallback);
+      }
+      if (fallback === filename)
+        return { filename };
+      return { filename: fallback, "filename*": encodeExtended(filename) };
     }
-    var params = {};
-    if (typeof filename !== "string") {
-      throw new TypeError("filename must be a string");
-    }
-    if (fallback === undefined) {
-      fallback = true;
-    }
-    if (typeof fallback !== "string" && typeof fallback !== "boolean") {
-      throw new TypeError("fallback must be a string or boolean");
-    }
-    if (typeof fallback === "string" && NON_LATIN1_REGEXP.test(fallback)) {
-      throw new TypeError("fallback must be ISO-8859-1 string");
-    }
-    var name = basename(filename);
-    var isQuotedString = TEXT_REGEXP.test(name);
-    var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name) : basename(fallback);
-    var hasFallback = typeof fallbackName === "string" && fallbackName !== name;
-    if (hasFallback || !isQuotedString || hasHexEscape(name)) {
-      params["filename*"] = name;
+    if (ASCII_TEXT_REGEXP.test(filename) && !INVALID_FILENAME_REGEXP.test(filename)) {
+      return { filename };
     }
-    if (isQuotedString || hasFallback) {
-      params.filename = hasFallback ? fallbackName : name;
+    if (fallback === false) {
+      return { "filename*": encodeExtended(filename) };
     }
-    return params;
+    return {
+      filename: getAscii(filename),
+      "filename*": encodeExtended(filename)
+    };
   }
-  function format(obj) {
-    var parameters = obj.parameters;
-    var type = obj.type;
-    if (!type || typeof type !== "string" || !TOKEN_REGEXP.test(type)) {
-      throw new TypeError("invalid type");
-    }
-    var string = String(type).toLowerCase();
-    if (parameters && typeof parameters === "object") {
-      var param;
-      var params = Object.keys(parameters).sort();
-      for (var i = 0;i < params.length; i++) {
-        param = params[i];
-        var val = param.slice(-1) === "*" ? ustring(parameters[param]) : qstring(parameters[param]);
-        string += "; " + param + "=" + val;
-      }
+  function decodeExtended(str) {
+    const charsetEnd = str.indexOf("'");
+    if (charsetEnd <= 0) {
+      return;
     }
-    return string;
-  }
-  function decodefield(str) {
-    const match = EXT_VALUE_REGEXP.exec(str);
-    if (!match) {
-      throw new TypeError("invalid extended field value");
+    const languageEnd = str.indexOf("'", charsetEnd + 1);
+    if (languageEnd === -1) {
+      return;
     }
-    const charset = match[1].toLowerCase();
-    const encoded = match[2];
+    const charset = str.slice(0, charsetEnd).toLowerCase();
+    const encoded = str.slice(languageEnd + 1);
     switch (charset) {
       case "iso-8859-1": {
-        const binary = decodeHexEscapes(encoded);
-        return getlatin1(binary);
+        return decodeHexEscapes(encoded);
       }
       case "utf-8":
       case "utf8": {
-        try {
-          return decodeURIComponent(encoded);
-        } catch {
-          const binary = decodeHexEscapes(encoded);
-          const bytes = new Uint8Array(binary.length);
-          for (let idx = 0;idx < binary.length; idx++) {
-            bytes[idx] = binary.charCodeAt(idx);
-          }
-          return utf8Decoder.decode(bytes);
-        }
+        return tryDecodeURIComponent(encoded);
       }
     }
-    throw new TypeError("unsupported charset in extended field");
+    return;
   }
-  function getlatin1(val) {
-    return String(val).replace(NON_LATIN1_REGEXP, "?");
+  function tryDecodeURIComponent(str) {
+    try {
+      return decodeURIComponent(str);
+    } catch {
+      return;
+    }
   }
-  function parse(string) {
-    if (!string || typeof string !== "string") {
-      throw new TypeError("argument string is required");
+  function parseToken(str, index, len) {
+    while (index < len) {
+      const char = str.charCodeAt(index);
+      if (char === SEMI)
+        break;
+      index++;
     }
-    var match = DISPOSITION_TYPE_REGEXP.exec(string);
-    if (!match) {
-      throw new TypeError("invalid type format");
+    return index;
+  }
+  function skipOWS(str, index, len) {
+    while (index < len) {
+      const char = str.charCodeAt(index);
+      if (char !== SP && char !== HTAB)
+        break;
+      index++;
     }
-    var index = match[0].length;
-    var type = match[1].toLowerCase();
-    var key;
-    var names = [];
-    var params = {};
-    var value;
-    index = PARAM_REGEXP.lastIndex = match[0].slice(-1) === ";" ? index - 1 : index;
-    while (match = PARAM_REGEXP.exec(string)) {
-      if (match.index !== index) {
-        throw new TypeError("invalid parameter format");
-      }
-      index += match[0].length;
-      key = match[1].toLowerCase();
-      value = match[2];
-      if (names.indexOf(key) !== -1) {
-        throw new TypeError("invalid duplicate parameter");
-      }
-      names.push(key);
-      if (key.indexOf("*") + 1 === key.length) {
-        key = key.slice(0, -1);
-        value = decodefield(value);
-        params[key] = value;
-        continue;
-      }
-      if (typeof params[key] === "string") {
-        continue;
-      }
-      if (value[0] === '"') {
-        value = value.slice(1, -1).replace(QESC_REGEXP, "$1");
-      }
-      params[key] = value;
+    return index;
+  }
+  function trailingOWS(str, start, end) {
+    while (end > start) {
+      const char = str.charCodeAt(end - 1);
+      if (char !== SP && char !== HTAB)
+        break;
+      end--;
     }
-    if (index !== -1 && index !== string.length) {
-      throw new TypeError("invalid parameter format");
+    return end;
+  }
+  function format(obj, options) {
+    const { type, parameters } = obj;
+    const multipart = options?.multipart === true;
+    const extended = options?.extended !== false;
+    if (!type || !TOKEN_REGEXP.test(type)) {
+      throw new TypeError("Invalid type: " + type);
+    }
+    let result = type;
+    if (parameters) {
+      for (const param of Object.keys(parameters)) {
+        const value = parameters[param];
+        if (!TOKEN_REGEXP.test(param)) {
+          throw new TypeError("Invalid parameter name: " + param);
+        }
+        if (multipart) {
+          result += "; " + param + "=" + qmultipart(value);
+          continue;
+        }
+        if (TOKEN_REGEXP.test(value)) {
+          result += "; " + param + "=" + value;
+          continue;
+        }
+        if (TEXT_REGEXP.test(value)) {
+          result += "; " + param + "=" + qstring(value);
+          continue;
+        }
+        if (!extended) {
+          throw new TypeError("Invalid parameter value: " + value);
+        }
+        result += "; " + param + "*=" + encodeExtended(value);
+      }
     }
-    return new ContentDisposition(type, params);
+    return result;
+  }
+  function getAscii(val) {
+    return val.replace(NON_ASCII_REGEXP, "?");
   }
   function pencode(char) {
-    return "%" + String(char).charCodeAt(0).toString(16).toUpperCase();
+    return "%" + char.charCodeAt(0).toString(16).toUpperCase();
   }
-  function qstring(val) {
-    var str = String(val);
-    return '"' + str.replace(QUOTE_REGEXP, "\\$1") + '"';
+  function qstring(str) {
+    return '"' + str.replace(QUOTE_REGEXP, "\\$&") + '"';
   }
-  function ustring(val) {
-    var str = String(val);
-    var encoded = encodeURIComponent(str).replace(ENCODE_URL_ATTR_CHAR_REGEXP, pencode);
-    return "UTF-8''" + encoded;
+  function qmultipart(str) {
+    return '"' + str.replace(/[\n\r"]/g, multipartEscape) + '"';
   }
-  function ContentDisposition(type, parameters) {
-    this.type = type;
-    this.parameters = parameters;
+  function multipartEscape(char) {
+    if (char === `
+`)
+      return "%0A";
+    if (char === "\r")
+      return "%0D";
+    return "%22";
   }
-  function basename(path) {
-    const normalized = path.replaceAll("\\", "/");
-    let end = normalized.length;
-    while (end > 0 && normalized[end - 1] === "/") {
-      end--;
-    }
-    if (end === 0) {
-      return "";
-    }
-    let start = end - 1;
-    while (start >= 0 && normalized[start] !== "/") {
-      start--;
-    }
-    return normalized.slice(start + 1, end);
+  function encodeExtended(str) {
+    const encoded = encodeURIComponent(str).replace(ENCODE_URL_ATTR_CHAR_REGEXP, pencode);
+    return "UTF-8''" + encoded;
   }
   function isHexDigit(char) {
     const code = char.charCodeAt(0);
     return code >= 48 && code <= 57 || code >= 65 && code <= 70 || code >= 97 && code <= 102;
   }
-  function hasHexEscape(str) {
-    const maxIndex = str.length - 3;
-    let lastIndex = -1;
-    while ((lastIndex = str.indexOf("%", lastIndex + 1)) !== -1 && lastIndex <= maxIndex) {
-      if (isHexDigit(str[lastIndex + 1]) && isHexDigit(str[lastIndex + 2])) {
-        return true;
-      }
-    }
-    return false;
-  }
   function decodeHexEscapes(str) {
     const firstEscape = str.indexOf("%");
     if (firstEscape === -1)
@@ -31699,7 +31849,7 @@ var require_response = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var contentDisposition = require_content_disposition();
+  var contentDisposition = require_dist6();
   var createError = require_http_errors();
   var deprecate = require_depd()("express");
   var encodeUrl = require_encodeurl();
@@ -31718,6 +31868,7 @@ var require_response = __commonJS(function(exports, module) {
   var send = require_send();
   var extname = path.extname;
   var resolve = path.resolve;
+  var basename = path.basename;
   var vary = require_vary();
   var { Buffer: Buffer2 } = __require("node:buffer");
   var res = Object.create(http.ServerResponse.prototype);
@@ -31750,11 +31901,14 @@ var require_response = __commonJS(function(exports, module) {
     var chunk = body;
     var encoding;
     var req = this.req;
-    var type;
     var app = this.app;
     switch (typeof chunk) {
       case "string":
-        if (!this.get("Content-Type")) {
+        encoding = "utf8";
+        const type = this.get("Content-Type");
+        if (typeof type === "string") {
+          this.set("Content-Type", setCharset(type, "utf-8"));
+        } else {
           this.type("html");
         }
         break;
@@ -31772,13 +31926,6 @@ var require_response = __commonJS(function(exports, module) {
         }
         break;
     }
-    if (typeof chunk === "string") {
-      encoding = "utf8";
-      type = this.get("Content-Type");
-      if (typeof type === "string") {
-        this.set("Content-Type", setCharset(type, "utf-8"));
-      }
-    }
     var etagFn = app.get("etag fn");
     var generateETag = !this.get("ETag") && typeof etagFn === "function";
     var len;
@@ -31792,7 +31939,9 @@ var require_response = __commonJS(function(exports, module) {
         encoding = undefined;
         len = chunk.length;
       }
-      this.set("Content-Length", len);
+      if (!this.get("Transfer-Encoding")) {
+        this.set("Content-Length", len);
+      }
     }
     var etag;
     if (generateETag && len !== undefined) {
@@ -31913,7 +32062,7 @@ var require_response = __commonJS(function(exports, module) {
       opts = filename;
     }
     var headers = {
-      "Content-Disposition": contentDisposition(name || path)
+      "Content-Disposition": contentDisposition.create(basename(name || path))
     };
     if (opts && opts.headers) {
       var keys = Object.keys(opts.headers);
@@ -31956,10 +32105,11 @@ var require_response = __commonJS(function(exports, module) {
     return this;
   };
   res.attachment = function attachment(filename) {
-    if (filename) {
-      this.type(extname(filename));
+    const name = filename !== undefined ? basename(filename) : undefined;
+    if (name) {
+      this.type(extname(name));
     }
-    this.set("Content-Disposition", contentDisposition(filename));
+    this.set("Content-Disposition", contentDisposition.create(name));
     return this;
   };
   res.append = function append(field, val) {
@@ -32046,7 +32196,7 @@ var require_response = __commonJS(function(exports, module) {
       },
       html: function() {
         var u = escapeHtml(address);
-        body = "<p>" + statuses.message[status] + ". Redirecting to " + u + "</p>";
+        body = "<!DOCTYPE html><head><title>" + statuses.message[status] + "</title></head>" + "<body><p>" + statuses.message[status] + ". Redirecting to " + u + "</p></body>";
       },
       default: function() {
         body = "";
@@ -41715,6 +41865,8 @@ var require_utils4 = __commonJS(function(exports, module) {
   var isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
   var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/?]$/u);
   var isUserinfoCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:]$/u);
+  var isRegNameCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=]$/u);
+  var isLiteralRegName = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=]*$/u);
   function stringArrayToHexStripped(input) {
     let acc = "";
     let code = 0;
@@ -41944,13 +42096,16 @@ var require_utils4 = __commonJS(function(exports, module) {
     }
     return output.join("");
   }
-  var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
-  var HOST_DELIM_RE = /[@/?#:]/g;
-  var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-  function reescapeHostDelimiters(host, isIP) {
-    const re = isIP ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
-    re.lastIndex = 0;
-    return host.replace(re, (ch) => HOST_DELIMS[ch]);
+  var IP_HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23" };
+  var IP_HOST_DELIM_RE = /[@/?#]/g;
+  function encodeHost(host, isIP, allowNonAscii = false) {
+    if (!isIP) {
+      if (isLiteralRegName(host))
+        return host;
+      return encodeComponent(host, isRegNameCharacter, allowNonAscii);
+    }
+    IP_HOST_DELIM_RE.lastIndex = 0;
+    return host.replace(IP_HOST_DELIM_RE, (ch) => IP_HOST_DELIMS[ch]);
   }
   function normalizePercentEncoding(input, decodeUnreserved = false) {
     if (input.indexOf("%") === -1) {
@@ -42116,7 +42271,7 @@ var require_utils4 = __commonJS(function(exports, module) {
     }
     return output;
   }
-  function encodeComponent(input, isAllowed) {
+  function encodeComponent(input, isAllowed, allowNonAscii = false) {
     let output = "";
     for (let i = 0;i < input.length; i++) {
       const ch = input[i];
@@ -42135,17 +42290,17 @@ var require_utils4 = __commonJS(function(exports, module) {
         if (code < 128) {
           output += BYTE_HEX[code];
         } else if (code < 55296 || code > 57343) {
-          output += percentEncodeNonAscii(code);
+          output += allowNonAscii ? ch : percentEncodeNonAscii(code);
         } else if (code <= 56319 && i + 1 < input.length) {
           const low = input.charCodeAt(i + 1);
           if (low >= 56320 && low <= 57343) {
-            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+            output += allowNonAscii ? ch + input[i + 1] : percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
             i++;
           } else {
-            output += percentEncodeNonAscii(65533);
+            output += allowNonAscii ? "�" : percentEncodeNonAscii(65533);
           }
         } else {
-          output += percentEncodeNonAscii(65533);
+          output += allowNonAscii ? "�" : percentEncodeNonAscii(65533);
         }
       }
     }
@@ -42207,7 +42362,7 @@ var require_utils4 = __commonJS(function(exports, module) {
     }
     return;
   }
-  function recomposeAuthority(component) {
+  function recomposeAuthority(component, allowNonAscii = false) {
     const uriTokens = [];
     if (component.userinfo !== undefined) {
       uriTokens.push(encodeUserinfo(component.userinfo));
@@ -42228,7 +42383,7 @@ var require_utils4 = __commonJS(function(exports, module) {
           if (ipV6res.isIPV6 === true || ipV6res.isIPVFuture === true) {
             host = `[${ipV6res.escapedHost}]`;
           } else {
-            host = reescapeHostDelimiters(host, false);
+            host = encodeHost(host, false, allowNonAscii);
           }
         }
       }
@@ -42250,7 +42405,7 @@ var require_utils4 = __commonJS(function(exports, module) {
     nonSimpleDomain,
     nonSimpleMailtoDomain,
     recomposeAuthority,
-    reescapeHostDelimiters,
+    encodeHost,
     normalizePercentEncoding,
     normalizePathEncoding,
     serializePathEncoding,
@@ -42415,7 +42570,8 @@ var require_schemes = __commonJS(function(exports, module) {
     scheme: "urn",
     parse: urnParse,
     serialize: urnSerialize,
-    skipNormalize: true
+    skipNormalize: true,
+    absolutePath: true
   };
   var urnuuid = {
     scheme: "urn:uuid",
@@ -42694,7 +42850,7 @@ var require_schemes = __commonJS(function(exports, module) {
 
 // node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS(function(exports, module) {
-  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils4();
+  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, encodeHost, isIPv4, nonSimpleDomain } = require_utils4();
   var { SCHEMES, getSchemeHandler } = require_schemes();
   var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
   var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
@@ -42718,6 +42874,7 @@ var require_fast_uri = __commonJS(function(exports, module) {
     const {
       parsed: baseParsed,
       malformedAuthorityOrPort: baseMalformed,
+      malformedReferenceEdge: baseMalformedReferenceEdge,
       malformedPercentEncoding: baseMalformedPercentEncoding,
       malformedSchemeSpecific: baseMalformedSchemeSpecific,
       malformedHost: baseMalformedHost,
@@ -42726,17 +42883,21 @@ var require_fast_uri = __commonJS(function(exports, module) {
     const {
       parsed: relativeParsed,
       malformedAuthorityOrPort: relativeMalformed,
+      malformedReferenceEdge: relativeMalformedReferenceEdge,
       malformedPercentEncoding: relativeMalformedPercentEncoding,
       malformedSchemeSpecific: relativeMalformedSchemeSpecific,
       malformedHost: relativeMalformedHost,
       malformedScheme: relativeMalformedScheme
     } = parseWithStatus(relativeURI, schemelessOptions);
-    if (baseMalformed || relativeMalformed || baseMalformedPercentEncoding || relativeMalformedPercentEncoding || baseMalformedSchemeSpecific || relativeMalformedSchemeSpecific || baseMalformedHost || relativeMalformedHost || baseMalformedScheme || relativeMalformedScheme) {
+    if (baseMalformed || relativeMalformed || baseMalformedReferenceEdge || relativeMalformedReferenceEdge || baseMalformedPercentEncoding || relativeMalformedPercentEncoding || baseMalformedSchemeSpecific || relativeMalformedSchemeSpecific || baseMalformedHost || relativeMalformedHost || baseMalformedScheme || relativeMalformedScheme) {
       throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
     }
     const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
     const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
     const resolvedHost = resolved.host;
+    if ((resolved.scheme === "http" || resolved.scheme === "https") && !resolvedHost) {
+      throw new Error("HTTP URIs must have a host.");
+    }
     const resolvedHostIsIP = resolvedHost !== undefined && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
     canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
     const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !/\P{ASCII}/u.test(resolvedHost);
@@ -42744,6 +42905,9 @@ var require_fast_uri = __commonJS(function(exports, module) {
       throw new Error(resolved.error);
     }
     schemelessOptions.skipEscape = true;
+    if (resolvedSchemeHandler && resolvedSchemeHandler.absolutePath) {
+      schemelessOptions.absolutePath = true;
+    }
     return serialize(resolved, schemelessOptions);
   }
   function copyHost(target, source) {
@@ -42764,7 +42928,8 @@ var require_fast_uri = __commonJS(function(exports, module) {
       target.userinfo = relative.userinfo;
       copyHost(target, relative);
       target.port = relative.port;
-      target.path = removeDotSegments(relative.path || "");
+      const relativeSchemeHandler = getSchemeHandler(relative.scheme);
+      target.path = relativeSchemeHandler && relativeSchemeHandler.absolutePath ? relative.path || "" : removeDotSegments(relative.path || "");
       target.query = relative.query;
     } else {
       if (relative.userinfo !== undefined || relative.host !== undefined || relative.port !== undefined) {
@@ -42853,7 +43018,8 @@ var require_fast_uri = __commonJS(function(exports, module) {
       component.scheme = decodeValidScheme(component.scheme);
       uriTokens.push(component.scheme, ":");
     }
-    const authority = recomposeAuthority(component);
+    const allowNonAsciiHost = options.unicodeSupport === true || Boolean(schemeHandler && schemeHandler.unicodeSupport);
+    const authority = recomposeAuthority(component, allowNonAsciiHost);
     if (authority !== undefined) {
       if (options.reference !== "suffix") {
         uriTokens.push("//");
@@ -42939,6 +43105,7 @@ var require_fast_uri = __commonJS(function(exports, module) {
       fragment: undefined
     };
     let malformedAuthorityOrPort = false;
+    const malformedReferenceEdge = uri.length !== 0 && (uri.charCodeAt(0) <= 32 || uri.charCodeAt(uri.length - 1) <= 32);
     let malformedPercentEncoding = false;
     let malformedSchemeSpecific = false;
     let malformedHost = false;
@@ -42971,6 +43138,9 @@ var require_fast_uri = __commonJS(function(exports, module) {
         }
       }
     }
+    if (malformedReferenceEdge) {
+      parsed.error = parsed.error || "URI must not contain leading or trailing C0 controls or spaces.";
+    }
     const matches = uri.match(URI_PARSE);
     if (matches) {
       parsed.scheme = matches[1];
@@ -43037,12 +43207,18 @@ var require_fast_uri = __commonJS(function(exports, module) {
       if (!malformedIPLiteral) {
         malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
       }
-      if (uri.indexOf("%") !== -1 && parsed.host !== undefined && !malformedIPLiteral) {
-        let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-        if (!isIP) {
+      if (parsed.host !== undefined && !malformedIPLiteral) {
+        let host = parsed.host;
+        if (uri.indexOf("%") !== -1 && !isIP) {
+          host = normalizePercentEncoding(host, true);
           host = normalizePercentEncoding(host.toLowerCase());
         }
-        parsed.host = reescapeHostDelimiters(host, isIP);
+        if (options.scheme !== "null") {
+          const allowNonAsciiHost = options.unicodeSupport === true || Boolean(schemeHandler && schemeHandler.unicodeSupport);
+          parsed.host = encodeHost(host, isIP, allowNonAsciiHost);
+        } else {
+          parsed.host = host;
+        }
       }
       if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
         if (parsed.path) {
@@ -43064,7 +43240,7 @@ var require_fast_uri = __commonJS(function(exports, module) {
     } else {
       parsed.error = parsed.error || "URI can not be parsed.";
     }
-    return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
+    return { parsed, malformedAuthorityOrPort, malformedReferenceEdge, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
   }
   function parse(uri, opts) {
     return parseWithStatus(uri, opts).parsed;
@@ -43073,10 +43249,11 @@ var require_fast_uri = __commonJS(function(exports, module) {
     return normalizeStringWithStatus(uri, opts).normalized;
   }
   function normalizeStringWithStatus(uri, opts) {
-    const { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = parseWithStatus(uri, opts);
+    const { parsed, malformedAuthorityOrPort, malformedReferenceEdge, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = parseWithStatus(uri, opts);
     return {
-      normalized: malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? uri : serialize(parsed, opts),
+      normalized: malformedAuthorityOrPort || malformedReferenceEdge || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? uri : serialize(parsed, opts),
       malformedAuthorityOrPort,
+      malformedReferenceEdge,
       malformedPercentEncoding,
       malformedSchemeSpecific,
       malformedHost,
@@ -43093,8 +43270,8 @@ var require_fast_uri = __commonJS(function(exports, module) {
     } catch {
       return;
     }
-    const { normalized, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = normalizeStringWithStatus(value, opts);
-    return malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? undefined : normalized;
+    const { normalized, malformedAuthorityOrPort, malformedReferenceEdge, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = normalizeStringWithStatus(value, opts);
+    return malformedAuthorityOrPort || malformedReferenceEdge || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? undefined : normalized;
   }
   var fastUri = {
     SCHEMES,
@@ -51327,7 +51504,7 @@ var require_limit = __commonJS(function(exports) {
 });
 
 // node_modules/ajv-formats/dist/index.js
-var require_dist5 = __commonJS(function(exports, module) {
+var require_dist7 = __commonJS(function(exports, module) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var formats_1 = require_formats2();
   var limit_1 = require_limit();
@@ -51405,7 +51582,7 @@ class AjvJsonSchemaValidator {
 var import_ajv, import_ajv_formats;
 var init_ajv_provider = __esm(() => {
   import_ajv = __toESM(require_ajv(), 1);
-  import_ajv_formats = __toESM(require_dist5(), 1);
+  import_ajv_formats = __toESM(require_dist7(), 1);
 });
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
@@ -52802,9 +52979,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "0.1.0",
-    sdkVersion: "0.0.66",
+    sdkVersion: "0.0.68",
     genVersion: "2.915.1",
-    userAgent: "speakeasy-sdk/mcp-typescript 0.0.66 2.915.1 0.1.0 @dalmia/calibrate-mcp"
+    userAgent: "speakeasy-sdk/mcp-typescript 0.0.68 2.915.1 0.1.0 @dalmia/calibrate-mcp"
   };
 });
 
@@ -61606,7 +61783,7 @@ hits its trace limit.
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "CalibrateMcp",
-    version: "0.0.66"
+    version: "0.0.68"
   });
   const getClient = deps.getSDK || (() => new CalibrateMcpCore({
     security: deps.security,
@@ -62895,7 +63072,7 @@ http_headers = { "api-key-auth" = "YOUR_API_KEY_AUTH" }`;
         <h1>Instructions</h1>
         <p>One-click installation for Claude Desktop users</p>
         <div class="instruction-item">
-          <a href="https://github.com/dalmia/calibrate-mcp/releases/download/v0.0.66/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
+          <a href="https://github.com/dalmia/calibrate-mcp/releases/download/v0.0.68/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
             \uD83D\uDCE5 Download MCP Bundle
           </a>
         </div>
@@ -63123,6 +63300,76 @@ var init_impl = __esm(() => {
   import_express = __toESM(require_express(), 1);
 });
 
+// node_modules/content-type/index.js
+function parse6(string) {
+  if (!string) {
+    throw new TypeError("argument string is required");
+  }
+  var header = typeof string === "object" ? getcontenttype(string) : string;
+  if (typeof header !== "string") {
+    throw new TypeError("argument string is required to be a string");
+  }
+  var index = header.indexOf(";");
+  var type = index !== -1 ? header.slice(0, index).trim() : header.trim();
+  if (!TYPE_REGEXP.test(type)) {
+    throw new TypeError("invalid media type");
+  }
+  var obj = new ContentType(type.toLowerCase());
+  if (index !== -1) {
+    var key;
+    var match;
+    var value;
+    PARAM_REGEXP.lastIndex = index;
+    while (match = PARAM_REGEXP.exec(header)) {
+      if (match.index !== index) {
+        throw new TypeError("invalid parameter format");
+      }
+      index += match[0].length;
+      key = match[1].toLowerCase();
+      value = match[2];
+      if (value.charCodeAt(0) === 34) {
+        value = value.slice(1, -1);
+        if (value.indexOf("\\") !== -1) {
+          value = value.replace(QESC_REGEXP, "$1");
+        }
+      }
+      obj.parameters[key] = value;
+    }
+    if (index !== header.length) {
+      throw new TypeError("invalid parameter format");
+    }
+  }
+  return obj;
+}
+function getcontenttype(obj) {
+  var header;
+  if (typeof obj.getHeader === "function") {
+    header = obj.getHeader("content-type");
+  } else if (typeof obj.headers === "object") {
+    header = obj.headers && obj.headers["content-type"];
+  }
+  if (typeof header !== "string") {
+    throw new TypeError("content-type header is missing from object");
+  }
+  return header;
+}
+function ContentType(type) {
+  this.parameters = Object.create(null);
+  this.type = type;
+}
+var PARAM_REGEXP, QESC_REGEXP, TYPE_REGEXP, $parse;
+var init_content_type = __esm(() => {
+  /*!
+   * content-type
+   * Copyright(c) 2015 Douglas Christopher Wilson
+   * MIT Licensed
+   */
+  PARAM_REGEXP = /; *([!#$%&'*+.^_`|~0-9A-Za-z-]+) *= *("(?:[\u000b\u0020\u0021\u0023-\u005b\u005d-\u007e\u0080-\u00ff]|\\[\u000b\u0020-\u00ff])*"|[!#$%&'*+.^_`|~0-9A-Za-z-]+) */g;
+  QESC_REGEXP = /\\([\u000b\u0020-\u00ff])/g;
+  TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+  $parse = parse6;
+});
+
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/sse.js
 import { randomUUID } from "node:crypto";
 import { URL as URL2 } from "node:url";
@@ -63191,7 +63438,7 @@ data: ${relativeUrlWithSession}
     const requestInfo = { headers: req.headers };
     let body;
     try {
-      const ct = import_content_type.default.parse(req.headers["content-type"] ?? "");
+      const ct = $parse(req.headers["content-type"] ?? "");
       if (ct.type !== "application/json") {
         throw new Error(`Unsupported content-type: ${ct.type}`);
       }
@@ -63240,11 +63487,11 @@ data: ${JSON.stringify(message)}
     return this._sessionId;
   }
 }
-var import_raw_body, import_content_type, MAXIMUM_MESSAGE_SIZE = "4mb";
+var import_raw_body, MAXIMUM_MESSAGE_SIZE = "4mb";
 var init_sse = __esm(() => {
   init_types();
+  init_content_type();
   import_raw_body = __toESM(require_raw_body(), 1);
-  import_content_type = __toESM(require_content_type(), 1);
 });
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
@@ -65779,7 +66026,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.0.66"
+    currentVersion: "0.0.68"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -65787,5 +66034,5 @@ export {
   app
 };
 
-//# debugId=06973EA2094C0A0264756E2164756E21
+//# debugId=EE93391F8D4C1CAE64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map