@specship/specship-win32-arm64 0.13.0 → 0.13.1

package/lib/dist/server/cli.js

@@ -50,7 +50,7 @@ function parseArgs() {
             console.log(`Usage: specship-desktop [options]
 
 Options:
-  --project-root, -p <path>   Project root (default: $SPECSHIP_PROJECT_ROOT, $SPECSHIP_PROJECT_ROOT, or cwd)
+  --project-root, -p <path>   Project root (default: $SPECSHIP_PROJECT_ROOT or cwd)
   --port <n>                  HTTP port (default: 4242)
   --host <h>                  Bind host (default: 127.0.0.1)
   --no-ingest                 Skip the in-process Claude JSONL transcript watcher

package/lib/dist/server/routes/sse.js

@@ -7,7 +7,7 @@
  * `origin: true`) never gets to add the CORS header. Without this, a
  * cross-origin `EventSource` is blocked: e.g. the dashboard opened at
  * `127.0.0.1:<port>` calling the API host `localhost` (different origins to the
- * browser), or the Angular dev server on `:4200`. Echoing the request origin
+ * browser), or the Vite dev server on `:5173`. Echoing the request origin
  * mirrors what `origin: true` does for the non-raw routes.
  */
 export function writeSseHead(req, reply) {

package/lib/dist/server/server.js

@@ -292,7 +292,7 @@ export async function createServer(options) {
             //   1. Try the requested URL as a real file under webDir → serve it
             //      with the right content-type. Covers the SPA's chunk-*.js,
             //      styles.css, favicons, fonts, etc.
-            //   2. Fall through to index.html for any other GET so Angular's
+            //   2. Fall through to index.html for any other GET so the SPA's
             //      client-side router can take over (`/memory`, `/graph`, …).
             // Non-GET methods and `/api/*` paths still 404 cleanly so the UI
             // can surface them. A MISSING asset path (e.g. a stale build's old

package/lib/node_modules/.package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@specship/specship",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
@@ -123,9 +123,9 @@
       }
     },
     "node_modules/ajv/node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.3.tgz",
+      "integrity": "sha512-i70LwGWUduXqzicKXWshooq+sWL1K3WUU5rKZNG/0i3a1OSoX3HqhH5WbWwTmqWfor4urUakGPiRQcleRZTwOg==",
       "funding": [
         {
           "type": "github",
@@ -594,12 +594,6 @@
       "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
       "license": "MIT"
     },
-    "node_modules/jsonc-parser": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz",
-      "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==",
-      "license": "MIT"
-    },
     "node_modules/light-my-request": {
       "version": "5.14.0",
       "resolved": "https://registry.npmjs.org/light-my-request/-/light-my-request-5.14.0.tgz",
@@ -1122,9 +1116,9 @@
       }
     },
     "node_modules/toad-cache": {
-      "version": "3.7.1",
-      "resolved": "https://registry.npmjs.org/toad-cache/-/toad-cache-3.7.1.tgz",
-      "integrity": "sha512-5DXWzE4Vz7xNHsv+xQ+MGfJYyC78Aok3tEr0MNwHoRf7vZnga1mQXZ4/Nsodld4VR6Wd+VhfmqnNrsRJyYPfrQ==",
+      "version": "3.7.4",
+      "resolved": "https://registry.npmjs.org/toad-cache/-/toad-cache-3.7.4.tgz",
+      "integrity": "sha512-m1TdR/rvT7kgGJZhspNtXdsdYk0fddFpJJFlG5s+UkPFo6lkLoZ3YLOaovPYjq1R75NP5JfeTlSHaOsE09peCg==",
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -1196,18 +1190,15 @@
       "optional": true
     },
     "node_modules/yaml": {
-      "version": "2.9.0",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
-      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.5.0.tgz",
+      "integrity": "sha512-2wWLbGbYDiSqqIKoPjar3MPgB94ErzCtrNE1FdqGuaO0pi2JGjmE8aW8TDZwzU7vuxcGRdL/4gPQwQ7hD5AMSw==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
       },
       "engines": {
-        "node": ">= 14.6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/eemeli"
+        "node": ">= 14"
       }
     }
   }

package/lib/node_modules/ajv/node_modules/fast-uri/index.js

@@ -305,7 +305,7 @@ function parseWithStatus (uri, opts) {
       if (parsed.host && (options.domainHost || (schemeHandler && schemeHandler.domainHost)) && isIP === false && nonSimpleDomain(parsed.host)) {
         // convert Unicode IDN -> ASCII IDN
         try {
-          parsed.host = URL.domainToASCII(parsed.host.toLowerCase())
+          parsed.host = new URL('http://' + parsed.host).hostname
         } catch (e) {
           parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e
         }

package/lib/node_modules/ajv/node_modules/fast-uri/package.json

@@ -1,7 +1,7 @@
 {
   "name": "fast-uri",
   "description": "Dependency-free RFC 3986 URI toolbox",
-  "version": "3.1.2",
+  "version": "3.1.3",
   "main": "index.js",
   "type": "commonjs",
   "types": "types/index.d.ts",

package/lib/node_modules/ajv/node_modules/fast-uri/test/security.test.js

@@ -131,3 +131,31 @@ test('normalize does not double-decode %2540 into a live @', (t) => {
   t.plan(1)
   t.notEqual(parsed.host, 'trusted.com@evil.com', 'http://trusted.com%2540evil.com/')
 })
+
+test('parse canonicalises IDN / Unicode hosts to their ASCII form', (t) => {
+  const cases = [
+    {
+      input: 'http://127。0。0。1/',
+      expectedHost: '127.0.0.1',
+      description: 'full-width ideographic stops as octet separators'
+    },
+    {
+      input: 'http://ｅxample.com/',
+      expectedHost: 'example.com',
+      description: 'fullwidth e as first letter'
+    },
+    {
+      input: 'http://納豆.example.org/',
+      expectedHost: 'xn--99zt52a.example.org',
+      description: 'CJK label requiring punycode'
+    }
+  ]
+
+  t.plan(cases.length * 2)
+
+  cases.forEach(({ input, expectedHost, description }) => {
+    const parsed = fastURI.parse(input)
+    t.notOk(parsed.error, `parse should not set error: ${description}`)
+    t.equal(parsed.host, expectedHost, `host canonicalised to ASCII: ${description}`)
+  })
+})

package/lib/node_modules/toad-cache/README.md

@@ -144,7 +144,7 @@ console.log(cache.keys())
 
 ### Property
 
-Max items to hold in cache (1000)
+Max items to hold in cache (1000). Must be a non-negative integer; `0` means no size limit.
 
 **Example**
 
@@ -201,7 +201,7 @@ cache.size // 0 - it's a new cache!
 
 ### Property
 
-Milliseconds an item will remain in cache; lazy expiration upon next `get()` of an item
+Milliseconds an item will remain in cache; lazy expiration upon next `get()` of an item. Must be a non-negative integer; `0` disables expiration.
 
 **Example**
 
@@ -211,6 +211,8 @@ const cache = new Lru()
 cache.ttl = 3e4
 ```
 
+Note: entries stored while `ttl` was `0` have no expiry timestamp, so enabling a TTL at runtime immediately expires them on their next `get()`. Prefer setting the TTL via the constructor.
+
 ## Hit/miss/expiration tracking
 
 In case you want to gather information on cache hit/miss/expiration ratio, as well as cache size and eviction statistics, you can use LruHitStatistics class:
@@ -218,13 +220,12 @@ In case you want to gather information on cache hit/miss/expiration ratio, as we
 ```js
 const sharedRecord = new HitStatisticsRecord() // if you want to use single record object for all of caches, create it manually and pass to each cache
 
-const cache = new LruHitStatistics({
-  cacheId: 'some-cache-id',
-  globalStatisticsRecord: sharedRecord,
-  statisticTtlInHours: 24, // how often to reset statistics. On every rotation previously accumulated data is removed
-  max: 1000,
-  ttlInMsecs: 0,
-})
+const max = 1000
+const ttlInMsecs = 0
+const cacheId = 'some-cache-id'
+const statisticTtlInHours = 24 // how often to reset statistics. On every rotation previously accumulated data is removed
+
+const cache = new LruHitStatistics(max, ttlInMsecs, cacheId, sharedRecord, statisticTtlInHours)
 ```
 
 You can retrieve accumulated statistics from the cache, or from the record directly: