smart001 1.0.0

package/backend/node_modules/sql-escaper/lib/index.mjs

@@ -0,0 +1,305 @@
+import { Buffer } from "node:buffer";
+const regex = {
+  backtick: /`/g,
+  dot: /\./g,
+  timezone: /([+\-\s])(\d\d):?(\d\d)?/,
+  escapeChars: /[\0\b\t\n\r\x1a"'\\]/g
+};
+const CHARS_ESCAPE_MAP = {
+  "\0": "\\0",
+  "\b": "\\b",
+  "	": "\\t",
+  "\n": "\\n",
+  "\r": "\\r",
+  "": "\\Z",
+  '"': '\\"',
+  "'": "\\'",
+  "\\": "\\\\"
+};
+const charCode = {
+  singleQuote: 39,
+  backtick: 96,
+  backslash: 92,
+  dash: 45,
+  slash: 47,
+  asterisk: 42,
+  questionMark: 63,
+  newline: 10,
+  space: 32,
+  tab: 9,
+  carriageReturn: 13
+};
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isWordChar = (code) => code >= 65 && code <= 90 || code >= 97 && code <= 122 || code >= 48 && code <= 57 || code === 95;
+const isWhitespace = (code) => code === charCode.space || code === charCode.tab || code === charCode.newline || code === charCode.carriageReturn;
+const hasOnlyWhitespaceBetween = (sql, start, end) => {
+  if (start >= end) return true;
+  for (let i = start; i < end; i++) {
+    const code = sql.charCodeAt(i);
+    if (code !== charCode.space && code !== charCode.tab && code !== charCode.newline && code !== charCode.carriageReturn)
+      return false;
+  }
+  return true;
+};
+const toLower = (code) => code | 32;
+const matchesWord = (sql, position, word, length) => {
+  for (let offset = 0; offset < word.length; offset++)
+    if (toLower(sql.charCodeAt(position + offset)) !== word.charCodeAt(offset))
+      return false;
+  return (position === 0 || !isWordChar(sql.charCodeAt(position - 1))) && (position + word.length >= length || !isWordChar(sql.charCodeAt(position + word.length)));
+};
+const skipSqlContext = (sql, position) => {
+  const currentChar = sql.charCodeAt(position);
+  const nextChar = sql.charCodeAt(position + 1);
+  if (currentChar === charCode.singleQuote) {
+    for (let cursor = position + 1; cursor < sql.length; cursor++) {
+      if (sql.charCodeAt(cursor) === charCode.backslash) cursor++;
+      else if (sql.charCodeAt(cursor) === charCode.singleQuote)
+        return cursor + 1;
+    }
+    return sql.length;
+  }
+  if (currentChar === charCode.backtick) {
+    const length = sql.length;
+    for (let cursor = position + 1; cursor < length; cursor++) {
+      if (sql.charCodeAt(cursor) !== charCode.backtick) continue;
+      if (sql.charCodeAt(cursor + 1) === charCode.backtick) {
+        cursor++;
+        continue;
+      }
+      return cursor + 1;
+    }
+    return length;
+  }
+  if (currentChar === charCode.dash && nextChar === charCode.dash) {
+    const lineBreak = sql.indexOf("\n", position + 2);
+    return lineBreak === -1 ? sql.length : lineBreak + 1;
+  }
+  if (currentChar === charCode.slash && nextChar === charCode.asterisk) {
+    const commentEnd = sql.indexOf("*/", position + 2);
+    return commentEnd === -1 ? sql.length : commentEnd + 2;
+  }
+  return -1;
+};
+const findNextPlaceholder = (sql, start) => {
+  const sqlLength = sql.length;
+  for (let position = start; position < sqlLength; position++) {
+    const code = sql.charCodeAt(position);
+    if (code === charCode.questionMark) return position;
+    if (code === charCode.singleQuote || code === charCode.backtick || code === charCode.dash || code === charCode.slash) {
+      const contextEnd = skipSqlContext(sql, position);
+      if (contextEnd !== -1) position = contextEnd - 1;
+    }
+  }
+  return -1;
+};
+const findSetKeyword = (sql, startFrom = 0) => {
+  const length = sql.length;
+  for (let position = startFrom; position < length; position++) {
+    const code = sql.charCodeAt(position);
+    const lower = code | 32;
+    if (code === charCode.singleQuote || code === charCode.backtick || code === charCode.dash || code === charCode.slash) {
+      const contextEnd = skipSqlContext(sql, position);
+      if (contextEnd !== -1) {
+        position = contextEnd - 1;
+        continue;
+      }
+    }
+    if (lower === 115 && matchesWord(sql, position, "set", length))
+      return position + 3;
+    if (lower === 107 && matchesWord(sql, position, "key", length)) {
+      let cursor = position + 3;
+      while (cursor < length && isWhitespace(sql.charCodeAt(cursor))) cursor++;
+      if (matchesWord(sql, cursor, "update", length)) return cursor + 6;
+    }
+  }
+  return -1;
+};
+const isDate = (value) => Object.prototype.toString.call(value) === "[object Date]";
+const hasSqlString = (value) => typeof value === "object" && value !== null && "toSqlString" in value && typeof value.toSqlString === "function";
+const escapeString = (value) => {
+  regex.escapeChars.lastIndex = 0;
+  let chunkIndex = 0;
+  let escapedValue = "";
+  let match;
+  for (match = regex.escapeChars.exec(value); match !== null; match = regex.escapeChars.exec(value)) {
+    escapedValue += value.slice(chunkIndex, match.index);
+    escapedValue += CHARS_ESCAPE_MAP[match[0]];
+    chunkIndex = regex.escapeChars.lastIndex;
+  }
+  if (chunkIndex === 0) return `'${value}'`;
+  if (chunkIndex < value.length)
+    return `'${escapedValue}${value.slice(chunkIndex)}'`;
+  return `'${escapedValue}'`;
+};
+const pad2 = (value) => value < 10 ? "0" + value : "" + value;
+const pad3 = (value) => value < 10 ? "00" + value : value < 100 ? "0" + value : "" + value;
+const pad4 = (value) => value < 10 ? "000" + value : value < 100 ? "00" + value : value < 1e3 ? "0" + value : "" + value;
+const convertTimezone = (tz) => {
+  if (tz === "Z") return 0;
+  const timezoneMatch = tz.match(regex.timezone);
+  if (timezoneMatch)
+    return (timezoneMatch[1] === "-" ? -1 : 1) * (Number.parseInt(timezoneMatch[2], 10) + (timezoneMatch[3] ? Number.parseInt(timezoneMatch[3], 10) : 0) / 60) * 60;
+  return false;
+};
+const dateToString = (date, timezone) => {
+  if (Number.isNaN(date.getTime())) return "NULL";
+  let year;
+  let month;
+  let day;
+  let hour;
+  let minute;
+  let second;
+  let millisecond;
+  if (timezone === "local") {
+    year = date.getFullYear();
+    month = date.getMonth() + 1;
+    day = date.getDate();
+    hour = date.getHours();
+    minute = date.getMinutes();
+    second = date.getSeconds();
+    millisecond = date.getMilliseconds();
+  } else {
+    const timezoneOffsetMinutes = convertTimezone(timezone);
+    let time = date.getTime();
+    if (timezoneOffsetMinutes !== false && timezoneOffsetMinutes !== 0)
+      time += timezoneOffsetMinutes * 6e4;
+    const adjustedDate = new Date(time);
+    year = adjustedDate.getUTCFullYear();
+    month = adjustedDate.getUTCMonth() + 1;
+    day = adjustedDate.getUTCDate();
+    hour = adjustedDate.getUTCHours();
+    minute = adjustedDate.getUTCMinutes();
+    second = adjustedDate.getUTCSeconds();
+    millisecond = adjustedDate.getUTCMilliseconds();
+  }
+  return escapeString(
+    pad4(year) + "-" + pad2(month) + "-" + pad2(day) + " " + pad2(hour) + ":" + pad2(minute) + ":" + pad2(second) + "." + pad3(millisecond)
+  );
+};
+const escapeId = (value, forbidQualified) => {
+  if (Array.isArray(value)) {
+    const length = value.length;
+    const parts = new Array(length);
+    for (let i = 0; i < length; i++)
+      parts[i] = escapeId(value[i], forbidQualified);
+    return parts.join(", ");
+  }
+  const identifier = String(value);
+  const hasJsonOperator = identifier.indexOf("->") !== -1;
+  if (forbidQualified || hasJsonOperator) {
+    if (identifier.indexOf("`") === -1) return `\`${identifier}\``;
+    return `\`${identifier.replace(regex.backtick, "``")}\``;
+  }
+  if (identifier.indexOf("`") === -1 && identifier.indexOf(".") === -1)
+    return `\`${identifier}\``;
+  return `\`${identifier.replace(regex.backtick, "``").replace(regex.dot, "`.`")}\``;
+};
+const objectToValues = (object, timezone) => {
+  const keys = Object.keys(object);
+  const keysLength = keys.length;
+  if (keysLength === 0) return "";
+  let sql = "";
+  for (let i = 0; i < keysLength; i++) {
+    const key = keys[i];
+    const value = object[key];
+    if (typeof value === "function") continue;
+    if (sql.length > 0) sql += ", ";
+    sql += escapeId(key);
+    sql += " = ";
+    sql += escape(value, true, timezone);
+  }
+  return sql;
+};
+const bufferToString = (buffer) => `X${escapeString(buffer.toString("hex"))}`;
+const arrayToList = (array, timezone) => {
+  const length = array.length;
+  const parts = new Array(length);
+  for (let i = 0; i < length; i++) {
+    const value = array[i];
+    if (Array.isArray(value)) parts[i] = `(${arrayToList(value, timezone)})`;
+    else parts[i] = escape(value, true, timezone);
+  }
+  return parts.join(", ");
+};
+const escape = (value, stringifyObjects, timezone) => {
+  if (value === void 0 || value === null) return "NULL";
+  switch (typeof value) {
+    case "boolean":
+      return value ? "true" : "false";
+    case "number":
+    case "bigint":
+      return value + "";
+    case "object": {
+      if (isDate(value)) return dateToString(value, timezone || "local");
+      if (Array.isArray(value)) return arrayToList(value, timezone);
+      if (Buffer.isBuffer(value)) return bufferToString(value);
+      if (value instanceof Uint8Array)
+        return bufferToString(Buffer.from(value));
+      if (hasSqlString(value)) return String(value.toSqlString());
+      if (!(stringifyObjects === void 0 || stringifyObjects === null))
+        return escapeString(String(value));
+      if (isRecord(value)) return objectToValues(value, timezone);
+      return escapeString(String(value));
+    }
+    case "string":
+      return escapeString(value);
+    default:
+      return escapeString(String(value));
+  }
+};
+const format = (sql, values, stringifyObjects, timezone) => {
+  if (values === void 0 || values === null) return sql;
+  const valuesArray = Array.isArray(values) ? values : [values];
+  const length = valuesArray.length;
+  let setIndex = -2;
+  let result = "";
+  let chunkIndex = 0;
+  let valuesIndex = 0;
+  let placeholderPosition = findNextPlaceholder(sql, 0);
+  while (valuesIndex < length && placeholderPosition !== -1) {
+    let placeholderEnd = placeholderPosition + 1;
+    let escapedValue;
+    while (sql.charCodeAt(placeholderEnd) === 63) placeholderEnd++;
+    const placeholderLength = placeholderEnd - placeholderPosition;
+    const currentValue = valuesArray[valuesIndex];
+    if (placeholderLength > 2) {
+      placeholderPosition = findNextPlaceholder(sql, placeholderEnd);
+      continue;
+    }
+    if (placeholderLength === 2) escapedValue = escapeId(currentValue);
+    else if (typeof currentValue === "number") escapedValue = `${currentValue}`;
+    else if (typeof currentValue === "object" && currentValue !== null && !stringifyObjects) {
+      if (setIndex === -2) setIndex = findSetKeyword(sql);
+      if (setIndex !== -1 && setIndex <= placeholderPosition && hasOnlyWhitespaceBetween(sql, setIndex, placeholderPosition) && !hasSqlString(currentValue) && !Array.isArray(currentValue) && !Buffer.isBuffer(currentValue) && !(currentValue instanceof Uint8Array) && !isDate(currentValue) && isRecord(currentValue)) {
+        escapedValue = objectToValues(currentValue, timezone);
+        setIndex = findSetKeyword(sql, placeholderEnd);
+      } else escapedValue = escape(currentValue, true, timezone);
+    } else escapedValue = escape(currentValue, stringifyObjects, timezone);
+    result += sql.slice(chunkIndex, placeholderPosition);
+    result += escapedValue;
+    chunkIndex = placeholderEnd;
+    valuesIndex++;
+    placeholderPosition = findNextPlaceholder(sql, placeholderEnd);
+  }
+  if (chunkIndex === 0) return sql;
+  if (chunkIndex < sql.length) return result + sql.slice(chunkIndex);
+  return result;
+};
+const raw = (sql) => {
+  if (typeof sql !== "string")
+    throw new TypeError("argument sql must be a string");
+  return {
+    toSqlString: () => sql
+  };
+};
+export {
+  arrayToList,
+  bufferToString,
+  dateToString,
+  escape,
+  escapeId,
+  format,
+  objectToValues,
+  raw
+};

package/backend/node_modules/sql-escaper/lib/types.d.ts

@@ -0,0 +1,5 @@
+export type Raw = {
+    toSqlString(): string;
+};
+export type SqlValue = string | number | bigint | boolean | Date | Buffer | Uint8Array | Raw | Record<string, unknown> | SqlValue[] | null | undefined;
+export type Timezone = 'local' | 'Z' | (string & NonNullable<unknown>);

package/backend/node_modules/sql-escaper/lib/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/backend/node_modules/sql-escaper/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "sql-escaper",
+  "version": "1.3.3",
+  "description": "🛡️ Faster SQL escape and format for JavaScript (Node.js, Bun, and Deno).",
+  "main": "./lib/index.js",
+  "module": "./lib/index.mjs",
+  "types": "./lib/index.d.ts",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mysqljs/sql-escaper.git"
+  },
+  "bugs": {
+    "url": "https://github.com/mysqljs/sql-escaper/issues"
+  },
+  "author": "https://github.com/mysqljs",
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/mysqljs/sql-escaper?sponsor=1"
+  },
+  "files": [
+    "lib"
+  ],
+  "engines": {
+    "node": ">=12.0.0",
+    "bun": ">=1.0.0",
+    "deno": ">=2.0.0"
+  },
+  "scripts": {
+    "benchmark": "cd benchmark && npm ci && bash index.sh",
+    "build:esm": "esbuild src/index.ts --outfile=lib/index.mjs --platform=node --target=node12 --format=esm",
+    "build": "rm -rf ./lib && tsc && npm run build:esm",
+    "test:node": "poku",
+    "test:bun": "bun poku",
+    "test:deno": "deno run -A npm:poku",
+    "test:coverage": "mcr --import tsx --config mcr.config.ts npm run test:node",
+    "lint": "biome lint && prettier --check .",
+    "lint:fix": "biome lint --write && prettier --write .github/workflows/*.yml .",
+    "update": "pu minor && npm i && (npm audit fix || true) && npm run lint:fix"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^1.9.4",
+    "@ianvs/prettier-plugin-sort-imports": "^4.7.0",
+    "@types/node": "^25.2.0",
+    "esbuild": "^0.27.2",
+    "monocart-coverage-reports": "^2.12.9",
+    "packages-update": "^2.0.0",
+    "poku": "^3.0.3-canary.13a996a9",
+    "prettier": "^3.8.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  },
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./lib/index.d.ts",
+        "default": "./lib/index.mjs"
+      },
+      "require": {
+        "types": "./lib/index.d.ts",
+        "default": "./lib/index.js"
+      }
+    }
+  },
+  "keywords": [
+    "sql",
+    "escape",
+    "format",
+    "sqlstring",
+    "sql-injection",
+    "sanitize",
+    "query",
+    "mysql",
+    "node",
+    "nodejs",
+    "bun",
+    "deno",
+    "typescript",
+    "fast"
+  ]
+}

package/backend/node_modules/statuses/HISTORY.md

@@ -0,0 +1,87 @@
+2.0.2 / 2025-06-06
+==================
+
+  * Migrate to `String.prototype.slice()`
+
+2.0.1 / 2021-01-03
+==================
+
+  * Fix returning values from `Object.prototype`
+
+2.0.0 / 2020-04-19
+==================
+
+  * Drop support for Node.js 0.6
+  * Fix messaging casing of `418 I'm a Teapot`
+  * Remove code 306
+  * Remove `status[code]` exports; use `status.message[code]`
+  * Remove `status[msg]` exports; use `status.code[msg]`
+  * Rename `425 Unordered Collection` to standard `425 Too Early`
+  * Rename `STATUS_CODES` export to `message`
+  * Return status message for `statuses(code)` when given code
+
+1.5.0 / 2018-03-27
+==================
+
+  * Add `103 Early Hints`
+
+1.4.0 / 2017-10-20
+==================
+
+  * Add `STATUS_CODES` export
+
+1.3.1 / 2016-11-11
+==================
+
+  * Fix return type in JSDoc
+
+1.3.0 / 2016-05-17
+==================
+
+  * Add `421 Misdirected Request`
+  * perf: enable strict mode
+
+1.2.1 / 2015-02-01
+==================
+
+  * Fix message for status 451
+    - `451 Unavailable For Legal Reasons`
+
+1.2.0 / 2014-09-28
+==================
+
+  * Add `208 Already Repored`
+  * Add `226 IM Used`
+  * Add `306 (Unused)`
+  * Add `415 Unable For Legal Reasons`
+  * Add `508 Loop Detected`
+
+1.1.1 / 2014-09-24
+==================
+
+  * Add missing 308 to `codes.json`
+
+1.1.0 / 2014-09-21
+==================
+
+  * Add `codes.json` for universal support
+
+1.0.4 / 2014-08-20
+==================
+
+  * Package cleanup
+
+1.0.3 / 2014-06-08
+==================
+
+  * Add 308 to `.redirect` category
+
+1.0.2 / 2014-03-13
+==================
+
+  * Add `.retry` category
+
+1.0.1 / 2014-03-12
+==================
+
+  * Initial release

package/backend/node_modules/statuses/LICENSE

@@ -0,0 +1,23 @@
+
+The MIT License (MIT)
+
+Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
+Copyright (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/backend/node_modules/statuses/README.md

@@ -0,0 +1,139 @@
+# statuses
+
+[![NPM Version][npm-version-image]][npm-url]
+[![NPM Downloads][npm-downloads-image]][npm-url]
+[![Node.js Version][node-version-image]][node-version-url]
+[![Build Status][ci-image]][ci-url]
+[![Test Coverage][coveralls-image]][coveralls-url]
+[![OpenSSF Scorecard Badge][ossf-scorecard-badge]][ossf-scorecard-visualizer]
+
+HTTP status utility for node.
+
+This module provides a list of status codes and messages sourced from
+a few different projects:
+
+  * The [IANA Status Code Registry](https://www.iana.org/assignments/http-status-codes/http-status-codes.xhtml)
+  * The [Node.js project](https://nodejs.org/)
+  * The [NGINX project](https://www.nginx.com/)
+  * The [Apache HTTP Server project](https://httpd.apache.org/)
+
+## Installation
+
+This is a [Node.js](https://nodejs.org/en/) module available through the
+[npm registry](https://www.npmjs.com/). Installation is done using the
+[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally):
+
+```sh
+$ npm install statuses
+```
+
+## API
+
+<!-- eslint-disable no-unused-vars -->
+
+```js
+var status = require('statuses')
+```
+
+### status(code)
+
+Returns the status message string for a known HTTP status code. The code
+may be a number or a string. An error is thrown for an unknown status code.
+
+<!-- eslint-disable no-undef -->
+
+```js
+status(403) // => 'Forbidden'
+status('403') // => 'Forbidden'
+status(306) // throws
+```
+
+### status(msg)
+
+Returns the numeric status code for a known HTTP status message. The message
+is case-insensitive. An error is thrown for an unknown status message.
+
+<!-- eslint-disable no-undef -->
+
+```js
+status('forbidden') // => 403
+status('Forbidden') // => 403
+status('foo') // throws
+```
+
+### status.codes
+
+Returns an array of all the status codes as `Integer`s.
+
+### status.code[msg]
+
+Returns the numeric status code for a known status message (in lower-case),
+otherwise `undefined`.
+
+<!-- eslint-disable no-undef, no-unused-expressions -->
+
+```js
+status['not found'] // => 404
+```
+
+### status.empty[code]
+
+Returns `true` if a status code expects an empty body.
+
+<!-- eslint-disable no-undef, no-unused-expressions -->
+
+```js
+status.empty[200] // => undefined
+status.empty[204] // => true
+status.empty[304] // => true
+```
+
+### status.message[code]
+
+Returns the string message for a known numeric status code, otherwise
+`undefined`. This object is the same format as the
+[Node.js http module `http.STATUS_CODES`](https://nodejs.org/dist/latest/docs/api/http.html#http_http_status_codes).
+
+<!-- eslint-disable no-undef, no-unused-expressions -->
+
+```js
+status.message[404] // => 'Not Found'
+```
+
+### status.redirect[code]
+
+Returns `true` if a status code is a valid redirect status.
+
+<!-- eslint-disable no-undef, no-unused-expressions -->
+
+```js
+status.redirect[200] // => undefined
+status.redirect[301] // => true
+```
+
+### status.retry[code]
+
+Returns `true` if you should retry the rest.
+
+<!-- eslint-disable no-undef, no-unused-expressions -->
+
+```js
+status.retry[501] // => undefined
+status.retry[503] // => true
+```
+
+## License
+
+[MIT](LICENSE)
+
+[ci-image]: https://badgen.net/github/checks/jshttp/statuses/master?label=ci
+[ci-url]: https://github.com/jshttp/statuses/actions?query=workflow%3Aci
+[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/statuses/master
+[coveralls-url]: https://coveralls.io/r/jshttp/statuses?branch=master
+[node-version-image]: https://badgen.net/npm/node/statuses
+[node-version-url]: https://nodejs.org/en/download
+[npm-downloads-image]: https://badgen.net/npm/dm/statuses
+[npm-url]: https://npmjs.org/package/statuses
+[npm-version-image]: https://badgen.net/npm/v/statuses
+[ossf-scorecard-badge]: https://api.securityscorecards.dev/projects/github.com/jshttp/statuses/badge
+[ossf-scorecard-visualizer]: https://kooltheba.github.io/openssf-scorecard-api-visualizer/#/projects/github.com/jshttp/statuses