aimakeall-mcp 0.14.5 → 0.14.6

package/lib/config.mjs

@@ -2,7 +2,7 @@ import { homedir } from "node:os";
 import path from "node:path";
 
 // 프록시 버전 — 서버가 X-AImakeAll-MCP-Version 으로 하한을 강제(426)할 수 있다.
-export const MCP_PROXY_VERSION = "0.14.5";
+export const MCP_PROXY_VERSION = "0.14.6";
 
 export const DEFAULT_API_BASE = "https://aimakeall.com";
 export const DEFAULT_COMPANION_URL = "http://127.0.0.1:9876";

package/node_modules/fast-uri/index.js

@@ -526,13 +526,17 @@ function parseWithStatus (uri, opts) {
       malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP)
     }
 
-    if (!schemeHandler || (schemeHandler && !schemeHandler.skipNormalize)) {
-      if (uri.indexOf('%') !== -1) {
-        if (parsed.host !== undefined && !malformedIPLiteral) {
-          const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true)
-          parsed.host = reescapeHostDelimiters(host, isIP)
-        }
+    if (uri.indexOf('%') !== -1 && parsed.host !== undefined && !malformedIPLiteral) {
+      let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true)
+      if (!isIP) {
+        // Fold reg-name case after decoding unreserved octets. The second
+        // pass only restores uppercase hex in escapes that remain encoded.
+        host = normalizePercentEncoding(host.toLowerCase())
       }
+      parsed.host = reescapeHostDelimiters(host, isIP)
+    }
+
+    if (!schemeHandler || (schemeHandler && !schemeHandler.skipNormalize)) {
       if (parsed.path) {
         parsed.path = normalizePathEncoding(parsed.path)
       }

package/node_modules/fast-uri/package.json

@@ -1,7 +1,7 @@
 {
   "name": "fast-uri",
   "description": "Dependency-free RFC 3986 URI toolbox",
-  "version": "3.1.7",
+  "version": "3.1.8",
   "main": "index.js",
   "type": "commonjs",
   "types": "types/index.d.ts",

package/node_modules/fast-uri/test/security-normalization.test.js

@@ -126,6 +126,44 @@ test('hostname normalization decodes only current unreserved escapes', (t) => {
   t.end()
 })
 
+test('scheme-relative hostname normalization folds decoded ASCII case', (t) => {
+  const encodedHost = '//%41.com'
+  const normalizedHost = fastURI.normalize(encodedHost)
+  const encodedMetadata = '//%4Detadata.internal/private'
+  const literalMetadata = '//metadata.internal/private'
+
+  t.equal(fastURI.parse(encodedHost).host, 'a.com', 'parse folds an encoded uppercase host letter')
+  t.equal(normalizedHost, '//a.com', 'normalize emits a lowercase host')
+  t.equal(fastURI.normalize(normalizedHost), normalizedHost, 'host normalization is idempotent')
+  t.equal(fastURI.equal(encodedHost, '//a.com'), true, 'encoded and literal host spellings compare equal')
+  t.equal(fastURI.equal(encodedMetadata, literalMetadata), true, 'encoded metadata host compares equal')
+  t.equal(
+    fastURI.resolve('x://trusted.example/', encodedMetadata),
+    fastURI.resolve('x://trusted.example/', literalMetadata),
+    'encoded and literal metadata hosts resolve identically'
+  )
+  t.equal(
+    fastURI.normalize('//example.com%2fpath'),
+    '//example.com%2Fpath',
+    'reserved host escapes remain encoded with uppercase hex'
+  )
+  t.equal(fastURI.normalize('//%2541.com'), '//%2541.com', 'nested host escapes are not decoded twice')
+  t.equal(fastURI.equal('//User@%41.com/path', '//user@a.com/path'), false, 'userinfo remains case-sensitive')
+  t.equal(fastURI.equal('//%41.com/Path', '//a.com/path'), false, 'path remains case-sensitive')
+  t.equal(fastURI.equal('//%41.com/?Token=Value', '//a.com/?token=value'), false, 'query remains case-sensitive')
+  t.end()
+})
+
+test('host normalization applies to schemes that skip path normalization', (t) => {
+  const encodedHost = 'mailto://%41.com'
+  const literalHost = 'mailto://a.com'
+
+  t.equal(fastURI.parse(encodedHost).host, fastURI.parse(literalHost).host, 'parse results have consistent hosts')
+  t.equal(fastURI.normalize(encodedHost), fastURI.normalize(literalHost), 'normalize results are consistent')
+  t.equal(fastURI.equal(encodedHost, literalHost), true, 'encoded and literal hosts compare equal')
+  t.end()
+})
+
 test('host conversion failures are not treated as comparable URLs', (t) => {
   const malformedHost = 'http://trusted.test%2540evil.test/'
 

package/node_modules/hono/README.md

@@ -64,7 +64,7 @@ Contributions Welcome! You can contribute in the following ways.
 
 - Create an Issue - Propose a new feature. Report a bug.
 - Pull Request - Fix a bug or typo. Refactor the code.
-- Create third-party middleware - See instructions below.
+- Create third-party middleware - See [Third-party middleware](docs/CONTRIBUTING.md#third-party-middleware).
 - Share - Share your thoughts on the Blog, X, and others.
 - Make your application - Please try to use Hono.
 

package/node_modules/hono/dist/_virtual/_rolldown/runtime.js

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll };

package/node_modules/hono/dist/adapter/aws-lambda/conninfo.js

@@ -1,24 +1,43 @@
-// src/adapter/aws-lambda/conninfo.ts
-var getConnInfo = (c) => {
-  const requestContext = c.env.requestContext;
-  let address;
-  if ("identity" in requestContext && requestContext.identity?.sourceIp) {
-    address = requestContext.identity.sourceIp;
-  } else if ("http" in requestContext && requestContext.http?.sourceIp) {
-    address = requestContext.http.sourceIp;
-  } else {
-    const xff = c.req.header("x-forwarded-for");
-    if (xff) {
-      const ips = xff.split(",");
-      address = ips[ips.length - 1].trim();
-    }
-  }
-  return {
-    remote: {
-      address
-    }
-  };
-};
-export {
-  getConnInfo
+//#region src/adapter/aws-lambda/conninfo.ts
+/**
+* Get connection information from AWS Lambda
+*
+* Extracts client IP from various Lambda event sources:
+* - API Gateway v1 (REST API): requestContext.identity.sourceIp
+* - API Gateway v2 (HTTP API/Function URLs): requestContext.http.sourceIp
+* - ALB: Falls back to x-forwarded-for header
+*
+* @param c - Context
+* @returns Connection information including remote address
+* @example
+* ```ts
+* import { Hono } from 'hono'
+* import { handle, getConnInfo } from 'hono/aws-lambda'
+*
+* const app = new Hono()
+*
+* app.get('/', (c) => {
+*   const info = getConnInfo(c)
+*   return c.text(`Your IP: ${info.remote.address}`)
+* })
+*
+* export const handler = handle(app)
+* ```
+* @deprecated `hono/aws-lambda` will be removed in v5. Install `@hono/aws-lambda` and import from there instead.
+*/
+const getConnInfo = (c) => {
+	const requestContext = c.env.requestContext;
+	let address;
+	if ("identity" in requestContext && requestContext.identity?.sourceIp) address = requestContext.identity.sourceIp;
+	else if ("http" in requestContext && requestContext.http?.sourceIp) address = requestContext.http.sourceIp;
+	else {
+		const xff = c.req.header("x-forwarded-for");
+		if (xff) {
+			const ips = xff.split(",");
+			address = ips[ips.length - 1].trim();
+		}
+	}
+	return { remote: { address } };
 };
+//#endregion
+export { getConnInfo };