jamdesk 1.1.7 → 1.1.8

package/vendored/schema/docs-schema.json

@@ -123,11 +123,11 @@
                       "simple",
                       "none"
                     ],
-                    "description": "Set the API playground display style. Options: `interactive` (full playground), `simple` (simplified view), or `none` (hidden). Defaults to `interactive`"
+                    "description": "Set the API playground display style. Options: `interactive` (full playground), `simple` (simplified view), or `none` (hidden). Defaults to `none`"
                   },
                   "proxy": {
                     "type": "boolean",
-                    "description": "Enable proxy server for API requests to handle CORS and authentication. Defaults to `true`"
+                    "description": "Enable proxy server for API requests to handle CORS and authentication. Defaults to `true` when display is `interactive`, `false` otherwise"
                   }
                 },
                 "additionalProperties": false,
@@ -147,9 +147,22 @@
                   "languages": {
                     "type": "array",
                     "items": {
-                      "type": "string"
+                      "type": "string",
+                      "enum": [
+                        "curl",
+                        "bash",
+                        "python",
+                        "javascript",
+                        "go",
+                        "ruby",
+                        "csharp",
+                        "java",
+                        "rust",
+                        "php"
+                      ]
                     },
-                    "description": "Programming languages to include in auto-generated API code examples"
+                    "uniqueItems": true,
+                    "description": "Programming languages to include in auto-generated API code examples. Order determines tab display order. Defaults to [\"curl\", \"python\", \"javascript\"]"
                   },
                   "prefill": {
                     "type": "boolean",

package/vendored/scripts/copy-files.cjs

@@ -49,10 +49,19 @@ function getContentImagesDir() {
   return path.join(__dirname, '../content/images');
 }
 
+function getContentVideosDir() {
+  if (projectName) {
+    return path.join(projectsDir, projectName, 'videos');
+  }
+  return path.join(__dirname, '../content/videos');
+}
+
 const projectDir = getProjectDir();
 const contentImagesDir = getContentImagesDir();
 const publicDir = path.join(__dirname, '../public');
 const publicImagesDir = path.join(publicDir, 'images');
+const contentVideosDir = getContentVideosDir();
+const publicVideosDir = path.join(publicDir, 'videos');
 
 // File type limits (in bytes)
 const MAX_IMAGE_SIZE = 20 * 1024 * 1024;  // 20MB
@@ -234,66 +243,63 @@ async function copyAssets() {
     // Copy logo folder and favicon
     await copyLogoAndFavicon();
 
-    if (!fs.existsSync(contentImagesDir)) {
-      console.log('  No images directory found, skipping images...');
-      return;
-    }
-
-    console.log('📁 Copying static assets to public directory...');
-    await fs.ensureDir(publicImagesDir);
-    
-    const files = await fs.readdir(contentImagesDir, { withFileTypes: true });
-    let copied = 0;
-    let skipped = 0;
-    let tooLarge = 0;
-    
-    for (const file of files) {
-      const sourcePath = path.join(contentImagesDir, file.name);
-      const destPath = path.join(publicImagesDir, file.name);
-      
-      if (file.isFile()) {
-        const fileInfo = getFileCategory(sourcePath);
-        
-        if (!fileInfo) {
-          console.log(`  ⏭️  Skipping unsupported file type: ${file.name}`);
-          skipped++;
-          continue;
-        }
-        
-        const stats = await fs.stat(sourcePath);
-        
-        if (stats.size > fileInfo.maxSize) {
-          const sizeMB = (stats.size / 1024 / 1024).toFixed(1);
-          const maxMB = (fileInfo.maxSize / 1024 / 1024).toFixed(0);
-          console.log(`  ⚠️  File too large (${sizeMB}MB > ${maxMB}MB): ${file.name}`);
-          tooLarge++;
-          continue;
-        }
-        
-        await fs.copy(sourcePath, destPath, { overwrite: true });
-        copied++;
-      } else if (file.isDirectory()) {
-        // Recursively copy subdirectories
-        const subFiles = await copySubDirectory(sourcePath, path.join(publicImagesDir, file.name));
-        copied += subFiles.copied;
-        skipped += subFiles.skipped;
-        tooLarge += subFiles.tooLarge;
-      }
-    }
-    
-    console.log(`✓ Copied ${copied} file(s)`);
-    if (skipped > 0) {
-      console.log(`  Skipped ${skipped} unsupported file(s)`);
-    }
-    if (tooLarge > 0) {
-      console.log(`  Skipped ${tooLarge} file(s) exceeding size limit`);
-    }
+    await copyAssetDirectory(contentImagesDir, publicImagesDir, '📁');
+    await copyAssetDirectory(contentVideosDir, publicVideosDir, '🎬');
   } catch (error) {
     console.error('❌ Failed to copy assets:', error.message);
     process.exit(1);
   }
 }
 
+async function copyAssetDirectory(srcDir, destDir, emoji) {
+  if (!fs.existsSync(srcDir)) return;
+
+  console.log(`${emoji} Copying assets to public directory...`);
+  await fs.ensureDir(destDir);
+
+  const files = await fs.readdir(srcDir, { withFileTypes: true });
+  let copied = 0;
+  let skipped = 0;
+  let tooLarge = 0;
+
+  for (const file of files) {
+    const sourcePath = path.join(srcDir, file.name);
+    const destPath = path.join(destDir, file.name);
+
+    if (file.isFile()) {
+      const fileInfo = getFileCategory(sourcePath);
+
+      if (!fileInfo) {
+        console.log(`  ⏭️  Skipping unsupported file type: ${file.name}`);
+        skipped++;
+        continue;
+      }
+
+      const stats = await fs.stat(sourcePath);
+
+      if (stats.size > fileInfo.maxSize) {
+        const sizeMB = (stats.size / 1024 / 1024).toFixed(1);
+        const maxMB = (fileInfo.maxSize / 1024 / 1024).toFixed(0);
+        console.log(`  ⚠️  File too large (${sizeMB}MB > ${maxMB}MB): ${file.name}`);
+        tooLarge++;
+        continue;
+      }
+
+      await fs.copy(sourcePath, destPath, { overwrite: true });
+      copied++;
+    } else if (file.isDirectory()) {
+      const subFiles = await copySubDirectory(sourcePath, path.join(destDir, file.name));
+      copied += subFiles.copied;
+      skipped += subFiles.skipped;
+      tooLarge += subFiles.tooLarge;
+    }
+  }
+
+  console.log(`✓ Copied ${copied} file(s)`);
+  if (skipped > 0) console.log(`  Skipped ${skipped} unsupported file(s)`);
+  if (tooLarge > 0) console.log(`  Skipped ${tooLarge} file(s) exceeding size limit`);
+}
+
 async function copySubDirectory(sourceDir, destDir) {
   await fs.ensureDir(destDir);
   

package/vendored/scripts/validate-links.cjs

@@ -89,7 +89,7 @@ function shouldSkipLink(href) {
   // Strips any trailing dimension suffix before checking extension
   // Formats: =WIDTHxHEIGHT, =WIDTHx, =xHEIGHT, =WIDTH
   const pathWithoutDimensions = href.replace(/\s*=(?:\d+x\d*|x\d+|\d+)$/i, '');
-  if (/\.(png|jpg|jpeg|gif|svg|webp|ico|pdf|zip)$/i.test(pathWithoutDimensions)) return true;
+  if (/\.(png|jpg|jpeg|gif|svg|webp|ico|pdf|zip|mp4|webm)$/i.test(pathWithoutDimensions)) return true;
 
   // Root paths like /introduction are valid doc links — don't skip them
 

package/vendored/shared/path-security.ts

@@ -12,9 +12,25 @@ import path from 'path';
 /**
  * Check if a path stays within the project directory.
  * Returns true if path is within project, false otherwise.
+ *
+ * Rejects null bytes, URL-encoded sequences, and normalizes
+ * backslashes to prevent traversal via encoding tricks.
  */
 export function isPathWithinProject(filePath: string, projectDir: string): boolean {
-  const absolutePath = path.resolve(projectDir, filePath);
+  // Reject null bytes (real or URL-encoded)
+  if (filePath.includes('\0') || filePath.includes('%00')) {
+    return false;
+  }
+
+  // Reject URL-encoded path separators and traversal sequences
+  if (/%2f/i.test(filePath) || /%5c/i.test(filePath)) {
+    return false;
+  }
+
+  // Normalize backslashes to forward slashes to prevent Windows-style traversal
+  const normalized = filePath.replace(/\\/g, '/');
+
+  const absolutePath = path.resolve(projectDir, normalized);
   const normalizedProject = path.resolve(projectDir);
 
   return absolutePath.startsWith(normalizedProject + path.sep) || absolutePath === normalizedProject;