@quantiya/codevibe-claude-plugin 1.0.36 → 1.0.38

package/node_modules/body-parser/index.js

@@ -7,26 +7,23 @@
 'use strict'
 
 /**
- * @typedef Parsers
- * @type {function}
- * @property {function} json
- * @property {function} raw
- * @property {function} text
- * @property {function} urlencoded
+ * @typedef {Object} Parsers
+ * @property {Function} json JSON parser
+ * @property {Function} raw Raw parser
+ * @property {Function} text Text parser
+ * @property {Function} urlencoded URL-encoded parser
  */
 
 /**
  * Module exports.
- * @type {Parsers}
+ * @type {Function & Parsers}
  */
-
 exports = module.exports = bodyParser
 
 /**
  * JSON parser.
  * @public
  */
-
 Object.defineProperty(exports, 'json', {
   configurable: true,
   enumerable: true,
@@ -37,7 +34,6 @@ Object.defineProperty(exports, 'json', {
  * Raw parser.
  * @public
  */
-
 Object.defineProperty(exports, 'raw', {
   configurable: true,
   enumerable: true,
@@ -48,7 +44,6 @@ Object.defineProperty(exports, 'raw', {
  * Text parser.
  * @public
  */
-
 Object.defineProperty(exports, 'text', {
   configurable: true,
   enumerable: true,
@@ -59,7 +54,6 @@ Object.defineProperty(exports, 'text', {
  * URL-encoded parser.
  * @public
  */
-
 Object.defineProperty(exports, 'urlencoded', {
   configurable: true,
   enumerable: true,
@@ -69,12 +63,9 @@ Object.defineProperty(exports, 'urlencoded', {
 /**
  * Create a middleware to parse json and urlencoded bodies.
  *
- * @param {object} [options]
- * @return {function}
  * @deprecated
  * @public
  */
-
 function bodyParser () {
   throw new Error('The bodyParser() generic has been split into individual middleware to use instead.')
 }

package/node_modules/body-parser/lib/read.js

@@ -28,15 +28,14 @@ module.exports = read
 /**
  * Read a request into a buffer and parse.
  *
- * @param {object} req
- * @param {object} res
- * @param {function} next
- * @param {function} parse
- * @param {function} debug
- * @param {object} options
+ * @param {Object} req
+ * @param {Object} res
+ * @param {Function} next
+ * @param {Function} parse
+ * @param {Function} debug
+ * @param {Object} options
  * @private
  */
-
 function read (req, res, next, parse, debug, options) {
   if (onFinished.isFinished(req)) {
     debug('body already parsed')
@@ -176,13 +175,12 @@ function read (req, res, next, parse, debug, options) {
 /**
  * Get the content stream of the request.
  *
- * @param {object} req
- * @param {function} debug
- * @param {boolean} [inflate=true]
- * @return {object}
- * @api private
+ * @param {Object} req
+ * @param {Function} debug
+ * @param {boolean} inflate
+ * @returns {Object}
+ * @private
  */
-
 function contentstream (req, debug, inflate) {
   var encoding = (req.headers['content-encoding'] || 'identity').toLowerCase()
   var length = req.headers['content-length']
@@ -209,9 +207,9 @@ function contentstream (req, debug, inflate) {
 /**
  * Create a decompression stream for the given encoding.
  * @param {string} encoding
- * @param {function} debug
- * @return {object}
- * @api private
+ * @param {Function} debug
+ * @returns {Object}
+ * @private
  */
 function createDecompressionStream (encoding, debug) {
   switch (encoding) {
@@ -235,11 +233,10 @@ function createDecompressionStream (encoding, debug) {
 /**
  * Dump the contents of a request.
  *
- * @param {object} req
- * @param {function} callback
- * @api private
+ * @param {Object} req
+ * @param {Function} callback
+ * @private
  */
-
 function dump (req, callback) {
   if (onFinished.isFinished(req)) {
     callback(null)

package/node_modules/body-parser/lib/types/json.js

@@ -33,7 +33,6 @@ module.exports = json
  *            %x0A /              ; Line feed or New line
  *            %x0D )              ; Carriage return
  */
-
 var FIRST_CHAR_REGEXP = /^[\x20\x09\x0a\x0d]*([^\x20\x09\x0a\x0d])/ // eslint-disable-line no-control-regex
 
 var JSON_SYNTAX_CHAR = '#'
@@ -42,11 +41,10 @@ var JSON_SYNTAX_REGEXP = /#+/g
 /**
  * Create a middleware to parse JSON bodies.
  *
- * @param {object} [options]
- * @return {function}
+ * @param {Object} [options]
+ * @returns {Function}
  * @public
  */
-
 function json (options) {
   const normalizedOptions = normalizeOptions(options, 'application/json')
 
@@ -96,20 +94,15 @@ function json (options) {
  *
  * @param {string} str
  * @param {string} char
- * @return {Error}
+ * @returns {Error}
  * @private
  */
-
 function createStrictSyntaxError (str, char) {
   var index = str.indexOf(char)
   var partial = ''
 
   if (index !== -1) {
-    partial = str.substring(0, index) + JSON_SYNTAX_CHAR
-
-    for (var i = index + 1; i < str.length; i++) {
-      partial += JSON_SYNTAX_CHAR
-    }
+    partial = str.substring(0, index) + JSON_SYNTAX_CHAR.repeat(str.length - index)
   }
 
   try {
@@ -128,10 +121,9 @@ function createStrictSyntaxError (str, char) {
  * Get the first non-whitespace character in a string.
  *
  * @param {string} str
- * @return {function}
+ * @returns {string|undefined}
  * @private
  */
-
 function firstchar (str) {
   var match = FIRST_CHAR_REGEXP.exec(str)
 
@@ -144,10 +136,10 @@ function firstchar (str) {
  * Normalize a SyntaxError for JSON.parse.
  *
  * @param {SyntaxError} error
- * @param {object} obj
- * @return {SyntaxError}
+ * @param {Object} obj
+ * @returns {SyntaxError}
+ * @private
  */
-
 function normalizeJsonSyntaxError (error, obj) {
   var keys = Object.getOwnPropertyNames(error)
 

package/node_modules/body-parser/lib/types/raw.js

@@ -23,11 +23,10 @@ module.exports = raw
 /**
  * Create a middleware to parse raw bodies.
  *
- * @param {object} [options]
- * @return {function}
- * @api public
+ * @param {Object} [options]
+ * @returns {Function}
+ * @public
  */
-
 function raw (options) {
   const normalizedOptions = normalizeOptions(options, 'application/octet-stream')
 

package/node_modules/body-parser/lib/types/text.js

@@ -23,11 +23,10 @@ module.exports = text
 /**
  * Create a middleware to parse text bodies.
  *
- * @param {object} [options]
- * @return {function}
- * @api public
+ * @param {Object} [options]
+ * @returns {Function}
+ * @public
  */
-
 function text (options) {
   const normalizedOptions = normalizeOptions(options, 'text/plain')
 

package/node_modules/body-parser/lib/types/urlencoded.js

@@ -27,11 +27,10 @@ module.exports = urlencoded
 /**
  * Create a middleware to parse urlencoded bodies.
  *
- * @param {object} [options]
- * @return {function}
+ * @param {Object} [options]
+ * @returns {Function}
  * @public
  */
-
 function urlencoded (options) {
   const normalizedOptions = normalizeOptions(options, 'application/x-www-form-urlencoded')
 
@@ -62,9 +61,10 @@ function urlencoded (options) {
 /**
  * Get the extended query parser.
  *
- * @param {object} options
+ * @param {Object} options
+ * @returns {Function}
+ * @private
  */
-
 function createQueryParser (options) {
   var extended = Boolean(options?.extended)
   var parameterLimit = options?.parameterLimit !== undefined
@@ -96,7 +96,7 @@ function createQueryParser (options) {
       })
     }
 
-    var arrayLimit = extended ? Math.max(100, paramCount) : 0
+    var arrayLimit = extended ? Math.max(100, paramCount) : paramCount
 
     debug('parse ' + (extended ? 'extended ' : '') + 'urlencoding')
     try {
@@ -127,8 +127,8 @@ function createQueryParser (options) {
  *
  * @param {string} body
  * @param {number} limit
- * @return {number|undefined} Returns undefined if limit exceeded
- * @api private
+ * @returns {number|undefined} Returns undefined if limit exceeded
+ * @private
  */
 function parameterCount (body, limit) {
   let count = 0

package/node_modules/body-parser/lib/utils.js

@@ -20,10 +20,10 @@ module.exports = {
 /**
  * Get the charset of a request.
  *
- * @param {object} req
- * @api private
+ * @param {Object} req
+ * @returns {string | undefined}
+ * @private
  */
-
 function getCharset (req) {
   try {
     return (contentType.parse(req).parameters.charset || '').toLowerCase()
@@ -36,9 +36,9 @@ function getCharset (req) {
  * Get the simple type checker.
  *
  * @param {string | string[]} type
- * @return {function}
+ * @returns {Function}
+ * @private
  */
-
 function typeChecker (type) {
   return function checkType (req) {
     return Boolean(typeis(req, type))
@@ -48,9 +48,10 @@ function typeChecker (type) {
 /**
  * Normalizes the common options for all parsers.
  *
- * @param {object} options options to normalize
- * @param {string | string[] | function} defaultType default content type(s) or a function to determine it
- * @returns {object}
+ * @param {Object} options options to normalize
+ * @param {string | string[] | Function} defaultType default content type(s) or a function to determine it
+ * @returns {Object}
+ * @private
  */
 function normalizeOptions (options, defaultType) {
   if (!defaultType) {
@@ -89,7 +90,8 @@ function normalizeOptions (options, defaultType) {
  * Used by parsers that don't need to transform the data.
  *
  * @param {*} value
- * @return {*}
+ * @returns {*}
+ * @private
  */
 function passthrough (value) {
   return value

package/node_modules/body-parser/package.json

@@ -1,7 +1,7 @@
 {
   "name": "body-parser",
   "description": "Node.js body parsing middleware",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "contributors": [
     "Douglas Christopher Wilson <doug@somethingdoug.com>",
     "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
@@ -19,7 +19,7 @@
     "http-errors": "^2.0.0",
     "iconv-lite": "^0.7.0",
     "on-finished": "^2.4.1",
-    "qs": "^6.14.0",
+    "qs": "^6.14.1",
     "raw-body": "^3.0.1",
     "type-is": "^2.0.1"
   },

package/node_modules/content-disposition/README.md

@@ -87,7 +87,6 @@ are shown for the string `'attachment; filename="EURO rates.txt"; filename*=UTF-
 
 ```js
 const contentDisposition = require('content-disposition')
-const destroy = require('destroy')
 const fs = require('fs')
 const http = require('http')
 const onFinished = require('on-finished')
@@ -103,7 +102,7 @@ http.createServer(function onRequest (req, res) {
   const stream = fs.createReadStream(filePath)
   stream.pipe(res)
   onFinished(res, function () {
-    destroy(stream)
+    stream.destroy()
   })
 })
 ```
@@ -121,9 +120,9 @@ $ npm test
 - [RFC 6266: Use of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP)][rfc-6266]
 - [Test Cases for HTTP Content-Disposition header field (RFC 6266) and the Encodings defined in RFCs 2047, 2231 and 5987][tc-2231]
 
-[rfc-2616]: https://tools.ietf.org/html/rfc2616
-[rfc-5987]: https://tools.ietf.org/html/rfc5987
-[rfc-6266]: https://tools.ietf.org/html/rfc6266
+[rfc-2616]: https://datatracker.ietf.org/doc/html/rfc2616
+[rfc-5987]: https://datatracker.ietf.org/doc/html/rfc5987
+[rfc-6266]: https://datatracker.ietf.org/doc/html/rfc6266
 [tc-2231]: http://greenbytes.de/tech/tc2231/
 
 ## License
@@ -131,12 +130,12 @@ $ npm test
 [MIT](LICENSE)
 
 [npm-image]: https://img.shields.io/npm/v/content-disposition
-[npm-url]: https://npmjs.org/package/content-disposition
+[npm-url]: https://www.npmjs.com/package/content-disposition
 [node-version-image]: https://img.shields.io/node/v/content-disposition
 [node-version-url]: https://nodejs.org/en/download
 [coveralls-image]: https://img.shields.io/coverallsCoverage/github/jshttp/content-disposition
-[coveralls-url]: https://coveralls.io/r/jshttp/content-disposition?branch=master
+[coveralls-url]: https://coveralls.io/github/jshttp/content-disposition?branch=master
 [downloads-image]: https://img.shields.io/npm/dm/content-disposition
-[downloads-url]: https://npmjs.org/package/content-disposition
+[downloads-url]: https://www.npmjs.com/package/content-disposition
 [github-actions-ci-image]: https://img.shields.io/github/actions/workflow/status/jshttp/content-disposition/ci.yml
 [github-actions-ci-url]: https://github.com/jshttp/content-disposition/actions/workflows/ci.yml

package/node_modules/content-disposition/index.js

@@ -15,11 +15,11 @@ module.exports = contentDisposition
 module.exports.parse = parse
 
 /**
- * Module dependencies.
+ * TextDecoder instance for UTF-8 decoding when decodeURIComponent fails due to invalid byte sequences.
+ * @type {TextDecoder}
  * @private
  */
-
-var basename = require('path').basename
+const utf8Decoder = new TextDecoder('utf-8')
 
 /**
  * RegExp to match non attr-char, *after* encodeURIComponent (i.e. not including "%")
@@ -28,14 +28,6 @@ var basename = require('path').basename
 
 var ENCODE_URL_ATTR_CHAR_REGEXP = /[\x00-\x20"'()*,/:;<=>?@[\\\]{}\x7f]/g // eslint-disable-line no-control-regex
 
-/**
- * RegExp to match percent encoding escape.
- * @private
- */
-
-var HEX_ESCAPE_REGEXP = /%[0-9A-Fa-f]{2}/
-var HEX_ESCAPE_REPLACE_REGEXP = /%([0-9A-Fa-f]{2})/g
-
 /**
  * RegExp to match non-latin1 characters.
  * @private
@@ -199,7 +191,7 @@ function createparams (filename, fallback) {
   var hasFallback = typeof fallbackName === 'string' && fallbackName !== name
 
   // set extended filename parameter
-  if (hasFallback || !isQuotedString || HEX_ESCAPE_REGEXP.test(name)) {
+  if (hasFallback || !isQuotedString || hasHexEscape(name)) {
     params['filename*'] = name
   }
 
@@ -262,32 +254,41 @@ function format (obj) {
  */
 
 function decodefield (str) {
-  var match = EXT_VALUE_REGEXP.exec(str)
+  const match = EXT_VALUE_REGEXP.exec(str)
 
   if (!match) {
     throw new TypeError('invalid extended field value')
   }
 
-  var charset = match[1].toLowerCase()
-  var encoded = match[2]
-  var value
-
-  // to binary string
-  var binary = encoded.replace(HEX_ESCAPE_REPLACE_REGEXP, pdecode)
+  const charset = match[1].toLowerCase()
+  const encoded = match[2]
 
   switch (charset) {
     case 'iso-8859-1':
-      value = getlatin1(binary)
-      break
+    {
+      const binary = decodeHexEscapes(encoded)
+      return getlatin1(binary)
+    }
     case 'utf-8':
     case 'utf8':
-      value = Buffer.from(binary, 'binary').toString('utf8')
-      break
-    default:
-      throw new TypeError('unsupported charset in extended field')
+    {
+      try {
+        return decodeURIComponent(encoded)
+      } catch {
+        // Failed to decode with decodeURIComponent, fallback to lenient decoding which replaces invalid UTF-8 byte sequences with the Unicode replacement character
+        // TODO: Consider removing in the next major version to be more strict about invalid percent-encodings
+        const binary = decodeHexEscapes(encoded)
+
+        const bytes = new Uint8Array(binary.length)
+        for (let idx = 0; idx < binary.length; idx++) {
+          bytes[idx] = binary.charCodeAt(idx)
+        }
+
+        return utf8Decoder.decode(bytes)
+      }
+    }
   }
-
-  return value
+  throw new TypeError('unsupported charset in extended field')
 }
 
 /**
@@ -383,19 +384,6 @@ function parse (string) {
   return new ContentDisposition(type, params)
 }
 
-/**
- * Percent decode a single character.
- *
- * @param {string} str
- * @param {string} hex
- * @return {string}
- * @private
- */
-
-function pdecode (str, hex) {
-  return String.fromCharCode(parseInt(hex, 16))
-}
-
 /**
  * Percent encode a single character.
  *
@@ -456,3 +444,93 @@ function ContentDisposition (type, parameters) {
   this.type = type
   this.parameters = parameters
 }
+
+/**
+ * Return the last portion of a path
+ *
+ * @param {string} path
+ * @returns {string}
+ */
+function basename (path) {
+  const normalized = path.replaceAll('\\', '/')
+
+  let end = normalized.length
+  while (end > 0 && normalized[end - 1] === '/') {
+    end--
+  }
+
+  if (end === 0) {
+    return ''
+  }
+
+  let start = end - 1
+  while (start >= 0 && normalized[start] !== '/') {
+    start--
+  }
+
+  return normalized.slice(start + 1, end)
+}
+
+/**
+ * Check if a character is a hex digit [0-9A-Fa-f]
+ *
+ * @param {string} char
+ * @return {boolean}
+ * @private
+ */
+function isHexDigit (char) {
+  const code = char.charCodeAt(0)
+  return (
+    (code >= 48 && code <= 57) || // 0-9
+    (code >= 65 && code <= 70) || // A-F
+    (code >= 97 && code <= 102) // a-f
+  )
+}
+
+/**
+ * Check if a string contains percent encoding escapes.
+ *
+ * @param {string} str
+ * @return {boolean}
+ * @private
+ */
+function hasHexEscape (str) {
+  const maxIndex = str.length - 3
+  let lastIndex = -1
+
+  while ((lastIndex = str.indexOf('%', lastIndex + 1)) !== -1 && lastIndex <= maxIndex) {
+    if (isHexDigit(str[lastIndex + 1]) && isHexDigit(str[lastIndex + 2])) {
+      return true
+    }
+  }
+
+  return false
+}
+
+/**
+ * Decode hex escapes in a string (e.g., %20 -> space)
+ *
+ * @param {string} str
+ * @return {string}
+ * @private
+ */
+function decodeHexEscapes (str) {
+  const firstEscape = str.indexOf('%')
+  if (firstEscape === -1) return str
+
+  let result = str.slice(0, firstEscape)
+  for (let idx = firstEscape; idx < str.length; idx++) {
+    if (
+      str[idx] === '%' &&
+      idx + 2 < str.length &&
+      isHexDigit(str[idx + 1]) &&
+      isHexDigit(str[idx + 2])
+    ) {
+      result += String.fromCharCode(Number.parseInt(str[idx + 1] + str[idx + 2], 16))
+      idx += 2
+    } else {
+      result += str[idx]
+    }
+  }
+  return result
+}

package/node_modules/content-disposition/package.json

@@ -1,7 +1,7 @@
 {
   "name": "content-disposition",
   "description": "Create and parse Content-Disposition header",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
   "license": "MIT",
   "keywords": [
@@ -17,18 +17,15 @@
   },
   "devDependencies": {
     "c8": "^10.1.2",
-    "eslint": "7.32.0",
-    "eslint-config-standard": "13.0.1",
-    "eslint-plugin-import": "2.25.3",
-    "eslint-plugin-markdown": "2.2.1",
-    "eslint-plugin-node": "11.1.0",
-    "eslint-plugin-promise": "5.2.0",
-    "eslint-plugin-standard": "4.1.0"
+    "eslint": "^8.57.1",
+    "eslint-config-standard": "^14.1.1",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-markdown": "^3.0.1",
+    "eslint-plugin-node": "^11.1.0",
+    "eslint-plugin-promise": "^6.6.0",
+    "eslint-plugin-standard": "^4.1.0"
   },
   "files": [
-    "LICENSE",
-    "HISTORY.md",
-    "README.md",
     "index.js"
   ],
   "engines": {