poe-code 3.0.285 → 3.0.286

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poe-code",
-  "version": "3.0.285",
+  "version": "3.0.286",
   "description": "CLI tool to configure Poe API for developer workflows.",
   "type": "module",
   "main": "./dist/index.js",

package/packages/toolcraft-openapi/dist/http.js

@@ -317,8 +317,57 @@ function decodeBase64Body(body) {
     if (typeof body !== "string") {
         throw new UserError("Base64 request bodies must be strings.");
     }
+    if (!isValidBase64(body)) {
+        throw new UserError("Base64 request bodies must contain valid base64 text.");
+    }
     return Uint8Array.from(Buffer.from(body, "base64")).buffer;
 }
+function isValidBase64(value) {
+    const paddingLength = getBase64PaddingLength(value);
+    if (paddingLength === null) {
+        return false;
+    }
+    const unpaddedLength = value.length - paddingLength;
+    if (unpaddedLength % 4 === 1) {
+        return false;
+    }
+    if (paddingLength > 0 && value.length % 4 !== 0) {
+        return false;
+    }
+    for (let index = 0; index < unpaddedLength; index += 1) {
+        if (!isBase64Character(value[index] ?? "")) {
+            return false;
+        }
+    }
+    const normalized = value.padEnd(value.length + ((4 - (value.length % 4)) % 4), "=");
+    return Buffer.from(value, "base64").toString("base64") === normalized;
+}
+function getBase64PaddingLength(value) {
+    let paddingLength = 0;
+    for (let index = value.length - 1; index >= 0 && value[index] === "="; index -= 1) {
+        paddingLength += 1;
+    }
+    if (paddingLength > 2) {
+        return null;
+    }
+    for (let index = 0; index < value.length - paddingLength; index += 1) {
+        if (value[index] === "=") {
+            return null;
+        }
+    }
+    return paddingLength;
+}
+function isBase64Character(value) {
+    if (value.length !== 1) {
+        return false;
+    }
+    const codePoint = value.charCodeAt(0);
+    return ((codePoint >= 0x41 && codePoint <= 0x5a) ||
+        (codePoint >= 0x61 && codePoint <= 0x7a) ||
+        (codePoint >= 0x30 && codePoint <= 0x39) ||
+        value === "+" ||
+        value === "/");
+}
 function decodeMultipartBinaryValue(value, fallbackFilename) {
     if (typeof value === "string") {
         return {
@@ -483,7 +532,12 @@ function parseResponseBody(text, contentType) {
     if (!isJsonContentType(contentType)) {
         return text;
     }
-    return JSON.parse(text);
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
 }
 function extractErrorCode(body) {
     if (body === null || typeof body !== "object" || Array.isArray(body)) {