From 323d55a8265255f64c39b8107f1a264f9c52c08b Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Mon, 26 Oct 2026 12:49:22 +0000 Subject: [PATCH] chore(deps): upgrade all dependencies - @simplewebauthn/server 13 -> 14 (AuthenticatorTransportFuture removed; transports are string[]) - undici 7 -> 8 (clears high GHSA-xjj6-f33q-929c) - @modelcontextprotocol/sdk 1.32.2 (clears high body-parser via express) - @profullstack/x402-gateway 0.13.1, profile 0.1.6, footer 0.2.6; hono, vitest - minimumReleaseAgeExclude: '@profullstack/*' so house packages land same day - version 0.3.2 Co-Authored-By: Claude Opus 5.5 --- package.json | 18 +-- pnpm-lock.yaml | 378 +++++++++++++++++++++++--------------------- pnpm-workspace.yaml | 3 +- src/auth.ts | 3 +- src/mcp.ts | 2 +- 5 files changed, 214 insertions(+), 190 deletions(-) diff --git a/package.json b/package.json index def2f13..1280a0b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@profullstack/submitfleet", - "version": "0.3.1", + "version": "0.3.2", "description": "SubmitFleet: launch your product on 339 launch sites and directories from one profile. Prepared submissions, accounts with passkeys, a tracked launch queue, CLI, MCP server and API.", "type": "module", "license": "MIT", @@ -50,19 +50,19 @@ "dependencies": { "@hono/node-server": "2.1.5", "@libsql/client": "0.18.0", - "@modelcontextprotocol/sdk": "1.32.1", - "@profullstack/footer": "^0.2.4", - "@profullstack/profile": "0.1.3", - "@profullstack/x402-gateway": "^0.11.0", - "@simplewebauthn/server": "^13.3.3", - "hono": "4.13.13", - "undici": "^7.30.0", + "@modelcontextprotocol/sdk": "1.32.2", + "@profullstack/footer": "^0.2.6", + "@profullstack/profile": "0.1.6", + "@profullstack/x402-gateway": "^0.13.1", + "@simplewebauthn/server": "^14.0.3", + "hono": "4.13.14", + "undici": "^8.12.3", "zod": "4.6.7" }, "devDependencies": { "@types/node": "^26.6.5", "tsx": "^4.23.15", "typescript": "^7.0.2", - "vitest": "5.0.4" + "vitest": "5.0.5" } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d39e8f3..3cb5917 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,31 +10,31 @@ importers: dependencies: '@hono/node-server': specifier: 2.1.5 - version: 2.1.5(hono@4.13.13) + version: 2.1.5(hono@4.13.14) '@libsql/client': specifier: 0.18.0 version: 0.18.0 '@modelcontextprotocol/sdk': - specifier: 1.32.1 - version: 1.32.1(zod@4.6.7) + specifier: 1.32.2 + version: 1.32.2(zod@4.6.7) '@profullstack/footer': - specifier: ^0.2.4 - version: 0.2.4 + specifier: ^0.2.6 + version: 0.2.6 '@profullstack/profile': - specifier: 0.1.3 - version: 0.1.3(@libsql/client@0.18.0) + specifier: 0.1.6 + version: 0.1.6(@libsql/client@0.18.0) '@profullstack/x402-gateway': - specifier: ^0.11.0 - version: 0.11.0 + specifier: ^0.13.1 + version: 0.13.1 '@simplewebauthn/server': - specifier: ^13.3.3 - version: 13.3.3 + specifier: ^14.0.3 + version: 14.0.3 hono: - specifier: 4.13.13 - version: 4.13.13 + specifier: 4.13.14 + version: 4.13.14 undici: - specifier: ^7.30.0 - version: 7.30.0 + specifier: ^8.12.3 + version: 8.12.3 zod: specifier: 4.6.7 version: 4.6.7 @@ -49,8 +49,8 @@ importers: specifier: ^7.0.2 version: 7.0.2 vitest: - specifier: 5.0.4 - version: 5.0.4(@types/node@26.6.5)(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)) + specifier: 5.0.5 + version: 5.0.5(@types/node@26.6.5)(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)) packages: @@ -289,8 +289,8 @@ packages: cpu: [x64] os: [win32] - '@modelcontextprotocol/sdk@1.32.1': - resolution: {integrity: sha512-2DdE+SJDtzLEEWzY1ZjY7Q+VcPhcV1KisD3zI4u0XZyktsjHum1mwbMI+JaulUBi2OZk+KJAi2uPXzxichPkdw==} + '@modelcontextprotocol/sdk@1.32.2': + resolution: {integrity: sha512-SWsVtH/0vULSQStoZ6xxH2K09Li8fXYTMC64ZeogCdpZ3XSi1eCPOByV1OpuJxuI3OcmHhosDWYyii07tpPsLw==} engines: {node: '>=18'} peerDependencies: '@cfworker/json-schema': ^4.1.1 @@ -305,59 +305,67 @@ packages: '@oxc-project/types@0.153.0': resolution: {integrity: sha512-jSNrRIyvPVLL5E1z/tS5zLAprosGz/FuI1PWwEOz59j3E4TTTzSpqKb/RDGqJhhW0QHYISGXxq582wGx6T11Tw==} - '@peculiar/asn1-android@2.11.0': - resolution: {integrity: sha512-llW/qjavL+tOxt5i9whUv4wsbsLpUwI6k/DrvKsdA/H7A/TB/6CosMFgvei28fcJ8ncD0c5lig1oBBlo4KGMCw==} + '@peculiar/asn1-android@2.11.1': + resolution: {integrity: sha512-AuUBRDNdWrgtnuJGXARa0Xdtq6OAD8GqezDQz6Qka7kyynMo9fzkcrtpBEHuX984uEB570BrhMZfJfkUDfpQfw==} engines: {node: '>=14'} - '@peculiar/asn1-cms@2.11.0': - resolution: {integrity: sha512-SlAiDoT/Cd8qaNmbTt78gqyaEvu2fQd6ML6KWJkdjXGrgDKnHHrusVkfQUelkfinL2p665IIADb0JBixtT8W1g==} + '@peculiar/asn1-asym-key@2.11.1': + resolution: {integrity: sha512-YtXR0FbDtjHuNGvWXD4HFE7th5xYwG67O+ApDH/FZsjj5MOrWHzDvqwZ1vm6uFUJtMAkUDcF6VMPGOJ5gnLyUA==} engines: {node: '>=14'} - '@peculiar/asn1-csr@2.11.0': - resolution: {integrity: sha512-M/ED0yJ05qMK+UADPKnIa8vhAeewOJALSxTAZB7RQ/batRHhIJZkwznCcWAbFO5saHJ1yEQ+m4lncEcG9RnQSg==} + '@peculiar/asn1-cms@2.11.1': + resolution: {integrity: sha512-Bk+oatE62dW0Tzzpfk6vdQxfGGEfvuGdWgmijnKjcv7HqZCJISs85z4zw2uDArrk+R1Oel1wts/BBl7HHrtAcA==} engines: {node: '>=14'} - '@peculiar/asn1-ecc@2.11.0': - resolution: {integrity: sha512-jj1alGEKev7/un+cI+exyVK9m31lmP7cCBMCZuCb0wkFQH2zmKmJzNiG4wqXFNzlcP8timHLnzf3lV3OxBpb/Q==} + '@peculiar/asn1-csr@2.11.1': + resolution: {integrity: sha512-KVfbXaKng8886/tOPG55t5K1XkTkGbR4amjIJzytXWobFU5nZgw/sKnSpa1hxP17nUSsrOF/7Mt9WUYeyLsi6Q==} engines: {node: '>=14'} - '@peculiar/asn1-pfx@2.11.0': - resolution: {integrity: sha512-ykSAWRu8KkmzU8LRpk9ZQC3zuLmBEtoSMjIv9XHVamD5W7amqreV5wttKqnvtjWOzzSJQxA/HVT8/tHwpEEGSQ==} + '@peculiar/asn1-ecc@2.11.1': + resolution: {integrity: sha512-7MSNji77fQa/oN3WAfwagMy8EoJFg50sW4hZ1dtr0zU1BSugit0I2DGpIdPhvkNplopQhz5bogxpn1077eaamA==} engines: {node: '>=14'} - '@peculiar/asn1-pkcs8@2.11.0': - resolution: {integrity: sha512-lragjkjQGnQ5luxC+sxoAfAO/jBiQ7hOEGlDKJUk7MC5zY3AzjB2DU0GyPUH1Sswdv10t7DurY0zylOYMLb88w==} + '@peculiar/asn1-pfx@2.11.1': + resolution: {integrity: sha512-2SN2z8qkc2hk/GgTYA8RN54wtsCDZShg9gI2Mq1vLhdj1adcv5fhTbiEmExZUaAMqlizxiEpULQDfHM5iYtn1g==} engines: {node: '>=14'} - '@peculiar/asn1-pkcs9@2.11.0': - resolution: {integrity: sha512-gDdFjpqV0weJjgNUvueUVf4D8uVbpq+VbG0TsxLAY2QGljAkJyL9qwQ7avol9j0jaYSJ7Ey7v7RZp0M3GTcQSA==} + '@peculiar/asn1-pkcs8@2.11.1': + resolution: {integrity: sha512-HqsSrnpQghRp9SM9QSmR6fa4z/BNktnKq7928+oq4qF0VAnuHZ4cyePKvcxh9fP4taBCP/WHNItlVNsYaQm2qw==} engines: {node: '>=14'} - '@peculiar/asn1-rsa@2.11.0': - resolution: {integrity: sha512-S2sBJmbfI09Kzdt9cEhE6pDNjHpVTkURs+811+PxS8AvsTLxC4woMNRhxHYaIbClkkNfAVt0tZxJdINVfUmzuA==} + '@peculiar/asn1-pkcs9@2.11.1': + resolution: {integrity: sha512-OHFkTg8D2zYafILqFE4KPbqX8srpvd3diGDc2h2cduumawc765mOHGcuFMGvLWlL2bbCMWMmMSCtlXptsOuiPA==} engines: {node: '>=14'} - '@peculiar/asn1-schema@2.11.0': - resolution: {integrity: sha512-8xh4avo53/vXO6UEv9yaoJ83hY581geaLTygf61NPIXP5AeIZCPjJhpTaYU23IZkG+NpLN/C9FYzWp7hphIT9A==} + '@peculiar/asn1-rsa@2.11.1': + resolution: {integrity: sha512-6KwKGjulF489CpidZqkogNgLj6oGzgC4BL2FClM8PuJQ4t5NqT4q4a6A4vrSxBIBhMnL8hGYkLOpbVw0Vq38Tw==} engines: {node: '>=14'} - '@peculiar/asn1-x509-attr@2.11.0': - resolution: {integrity: sha512-Fgvnd9REmLxEj/4cbDP54dNUNUXkzUksXLqEHqs1mHBuSRjSTCUSPM/WQIZYSvrdG7ND9CX1AQtPoIBekhgQSA==} + '@peculiar/asn1-schema@2.11.1': + resolution: {integrity: sha512-jaU9OaCcbZUdyXx9hMETZB9xoNmxTGjOGFqd3cOwKFkpKnyKd9WxF3uqj4PvX4cyOMP9bSdHg5YyML2qtx/d/g==} engines: {node: '>=14'} - '@peculiar/asn1-x509@2.11.0': - resolution: {integrity: sha512-J1sHAwGNlk+8J+FeR1eLVc6Gq0T9f9ITc3HWyPYgJraoW6U8AJuQiWVJ3SCEpltfTdpOY7fHdHT5oKAsbK/jww==} + '@peculiar/asn1-x509-attr@2.11.1': + resolution: {integrity: sha512-n7RKFrbTzt8pGBlZ90kmKEn1qsLTTyw7lrvHMK0xsA42kQugPk/GXYpNbEcl7DkkdVsU/one5UX7KQPfxLj8vQ==} + engines: {node: '>=14'} + + '@peculiar/asn1-x509-post-quantum@2.11.1': + resolution: {integrity: sha512-yD/pxCQ97nzwF7MGAW4kRd1WVLiMPhD39HxOnAr38DfGFwbpVhPnMbq+r6WX0XUrxn4w8ulsTdUafwVl46igLA==} + engines: {node: '>=14'} + + '@peculiar/asn1-x509@2.11.1': + resolution: {integrity: sha512-SXU4/X6B3FquqQAN6ARI0bFDUV7+L1WlvPEPMKzEMkstd2D7UyM0r93fv241+OjdhqAKYGx5MvV3gzZMAp0APA==} engines: {node: '>=14'} '@peculiar/utils@2.0.3': resolution: {integrity: sha512-+oL3HPFRIZ1St2K50lWCXiioIgSoxzz7R1J3uF6neO2yl1sgmpgY6XXJH4BdpoDkMWznQTeYF6oWNDZLCdQ4eQ==} - '@peculiar/x509@1.14.3': - resolution: {integrity: sha512-C2Xj8FZ0uHWeCXXqX5B4/gVFQmtSkiuOolzAgutjTfseNOHT3pUjljDZsTSxXFGgio54bCzVFqmEOUrIVk8RDA==} + '@peculiar/x509@2.2.0': + resolution: {integrity: sha512-adpW58ySPQMOUPv8pTKT3RIyCFqfUFt8X05ukPdtkQToXDVr8dMtxuenik1yx8tNFTbpApWsM/Hi5SzlIx48+Q==} engines: {node: '>=20.0.0'} - '@profullstack/footer@0.2.4': - resolution: {integrity: sha512-2ErIzHJCDA2baP8aK6f7rCHohW4EX+wnp7D1mrVMQTUxRcyZwKzmho96hhEFJndXRBGgxT3H/78BHOeBfLxTzg==} + '@profullstack/footer@0.2.6': + resolution: {integrity: sha512-BKwbDszAc7e0mYIBiPjgr/5WS8WyDt8IW718s/zW/8pCWOIB1BGwSNs6fmImRSo5kqIjQKUVbXp22jZQ5GEipA==} engines: {node: '>=18'} hasBin: true peerDependencies: @@ -370,8 +378,8 @@ packages: resolution: {integrity: sha512-Vys47LvS5ivhdZu4SYOxh9Le3DEmWhjP0+CtrU45RhXAbY0ZFG/2Dk9V1bIIUGDp8UWMJqctvUD21JrNjfh04w==} engines: {node: '>=20.11'} - '@profullstack/profile@0.1.3': - resolution: {integrity: sha512-P+VdOqCnNGWa5W8EGLU/ls3hwovRcY8bOBOhWZp3h23sW2LDMFyeWF/pUfO+iiYH3E2Tie2/9xyUnpO4ctwSHw==} + '@profullstack/profile@0.1.6': + resolution: {integrity: sha512-xkn0P3ANz151QJdlBwcBXkHk813qW9qAmuTZKcuvpEZYkyHDC9J9KfvpVSRepfjECzz4ONGHWO5Zwc4BHpfK8g==} engines: {node: '>=20'} hasBin: true peerDependencies: @@ -386,8 +394,8 @@ packages: react: optional: true - '@profullstack/x402-gateway@0.11.0': - resolution: {integrity: sha512-Lfrz+SRTwQZfcoCaVtaaMNPJx74Lp/5oyS7vJJAEuJmH1TjBzhE7dWquISkj1p42oc+VW5I9xH9p7YhEKqmr4Q==} + '@profullstack/x402-gateway@0.13.1': + resolution: {integrity: sha512-V7liSO0tShZRlp8dancuDuUSF/rqrr5YF3bzLoZy9wn6ixf1RIRPYTepe72s36JOdSVzi3wfuhaZFm9y0RpV4w==} engines: {node: '>=20.11'} '@rolldown/binding-android-arm-eabi@1.2.13': @@ -489,8 +497,8 @@ packages: '@rolldown/pluginutils@1.0.1': resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==} - '@simplewebauthn/server@13.3.3': - resolution: {integrity: sha512-LelX/lcy5cjc15A86i/aNxHhB5eU7dd20QsbP0VLAf9e38+SLlsnqCCyecx3xqfGofhmX05h1J9fKRYWxw+luA==} + '@simplewebauthn/server@14.0.3': + resolution: {integrity: sha512-D39/0fiDiYmGV+nraY9s63D1Ho2AX/waMLy22/9gUadTUuvbAnstfb4bpbHYbwZuV5ZLDYN1SmzDKuiHzKAA4Q==} engines: {node: '>=20.0.0'} '@types/chai@5.2.3': @@ -628,8 +636,8 @@ packages: cpu: [x64] os: [win32] - '@vitest/mocker@5.0.4': - resolution: {integrity: sha512-tqAlrYWce4iUxhr3ncNohejtCTOcHeE8XWrSNZY3OhPoDn01yeGv+gnaBy64ATp7o6pb03eIbBAjzmibpc9vIQ==} + '@vitest/mocker@5.0.5': + resolution: {integrity: sha512-xLL3lkDegJZw+MGoGaCCsFayDZthGgpAtr3Vziyfc4p7xH89K7KRPcRBBh/kEYm0Aqkt5DtTmkYpBtRV/FrHZg==} peerDependencies: msw: ^2.4.9 || ^3.0.0 vite: ^6.0.0 || ^7.0.0 || ^8.0.0 @@ -639,8 +647,8 @@ packages: vite: optional: true - '@vitest/spy@5.0.4': - resolution: {integrity: sha512-MZKk/gSkm2q+ICobMxCpH1mA+cCAWm8WV7UhxlqGjq/sJ3AGc1BqFOs5CRVXxH78wQtme9q/NAAgBquj4AcyMw==} + '@vitest/spy@5.0.5': + resolution: {integrity: sha512-lwJRExuH417257Q5wv9QYugN9IMJkoxcrKrYxGPQkBzl7wlNpTUxD/5yNX4ESKVUIShKPgkGchYPFMWOOk0wzw==} accepts@2.0.0: resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==} @@ -657,16 +665,16 @@ packages: ajv@8.20.0: resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==} - asn1js@3.0.10: - resolution: {integrity: sha512-S2s3aOytiKdFRdulw2qPE51MzjzVOisppcVv7jVFR+Kw0kxwvFrDcYA0h7Ndqbmj0HkMIXYWaoj7fli8kgx1eg==} + asn1js@3.1.0: + resolution: {integrity: sha512-HWYi1THkOqguCiO+vwj09ZkQFD2kKEsejYHAYCtX0D80WVdoDnvRc9IukXX/jeb0T9NRWJnRtqwdbHltnFjwXA==} engines: {node: '>=12.0.0'} assertion-error@2.0.1: resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==} engines: {node: '>=12'} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} bytes@3.1.2: @@ -800,8 +808,8 @@ packages: fast-deep-equal@3.1.3: resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fdir@6.5.0: resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==} @@ -852,8 +860,8 @@ packages: resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==} engines: {node: '>= 0.4'} - hono@4.13.13: - resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==} + hono@4.13.14: + resolution: {integrity: sha512-yhRLQ21U6qa9Hsu2N7Qcbh8tE+WKEcoErjIo56LeSGiGXGp9sA7UpE86Ui9uexb61KakiGwuHMn2QdV7w6i6kQ==} engines: {node: '>=16.9.0'} http-errors@2.0.1: @@ -867,8 +875,8 @@ packages: inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} - ip-address@10.7.4: - resolution: {integrity: sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==} + ip-address@10.7.5: + resolution: {integrity: sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==} engines: {node: '>= 12'} ipaddr.js@1.9.1: @@ -881,8 +889,8 @@ packages: isexe@2.0.0: resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==} - jose@6.2.12: - resolution: {integrity: sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw==} + jose@6.2.13: + resolution: {integrity: sha512-7TIg10ZE1x82YediN+lcrPNvGMKge9yFHQD+Qho/b8y2adfugU3AsvvHfxV0fzyFllT6l9xCjf4RWY9g/Z9PJQ==} js-base64@3.9.4: resolution: {integrity: sha512-PtOMXpEGuP0RRiRXsjzHzl44dMHxSu2CPvAhinupR1tBa88me+1DPqsobl7eupn5UukjLkln1ZnAOAOXOrYG0Q==} @@ -1019,8 +1027,8 @@ packages: resolution: {integrity: sha512-5vvB5+W7ePv+p3uqxi+RcW1XAzLW0/hxt3/4X4Lc4qHudzOhmBiBwOY6DRob4WnanAEGvNcLjF+KNOufrUoEQw==} engines: {node: '>=12.20.0'} - on-finished@2.4.1: - resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==} + on-finished@2.4.2: + resolution: {integrity: sha512-ATWUv387i+nLD49EiDoOft5scf32Vsdz3ktrQJG9bi7jRFmaXTssvyvj1EmeKVVgvesbqUtvQQvaS2TpTukAZQ==} engines: {node: '>= 0.8'} once@1.4.0: @@ -1066,8 +1074,8 @@ packages: resolution: {integrity: sha512-BbubeCEyTuQjVMakvJQ/Sxbc93F2pwmbsxONT/ZRrwU7Ua38d8unYTwXpTVLAKJ4BDuH9IGztCjQcd/N/39Dvg==} engines: {node: '>=16.0.0'} - qs@6.16.0: - resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==} + qs@6.16.1: + resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==} engines: {node: '>=0.6'} range-parser@1.3.0: @@ -1186,9 +1194,9 @@ packages: undici-types@8.9.0: resolution: {integrity: sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==} - undici@7.30.0: - resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} - engines: {node: '>=20.18.1'} + undici@8.12.3: + resolution: {integrity: sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw==} + engines: {node: '>=22.19.0'} unpipe@1.0.0: resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==} @@ -1241,20 +1249,20 @@ packages: yaml: optional: true - vitest@5.0.4: - resolution: {integrity: sha512-z0WxZRV2Sg48wF0FSgMq3TFG8JS38/Qr96vZVZdX6+Em9raQTvnXQvdTFJe2m3rfyJnEHeHQ/snceIdi8D1pVg==} + vitest@5.0.5: + resolution: {integrity: sha512-cPODOMF8YnkiiYtDdHo6n4wWmBrOBBbOIYH2d33M4l3CdNn72h+qMmO6uXffUN6A5AZFXNND/d+krS9mgkXRfg==} engines: {node: ^22.12.0 || ^24.0.0 || >=26.0.0} hasBin: true peerDependencies: '@edge-runtime/vm': '*' '@opentelemetry/api': ^1.9.0 '@types/node': ^22.0.0 || >=24.0.0 - '@vitest/browser-playwright': 5.0.4 - '@vitest/browser-preview': 5.0.4 + '@vitest/browser-playwright': 5.0.5 + '@vitest/browser-preview': 5.0.5 '@vitest/browser-webdriverio': ^5.0.0-beta.5 || >=5.0.0 - '@vitest/coverage-istanbul': 5.0.4 - '@vitest/coverage-v8': 5.0.4 - '@vitest/ui': 5.0.4 + '@vitest/coverage-istanbul': 5.0.5 + '@vitest/coverage-v8': 5.0.5 + '@vitest/ui': 5.0.5 happy-dom: '*' jsdom: '*' vite: ^6.4.0 || ^7.0.0 || ^8.0.0 @@ -1397,9 +1405,9 @@ snapshots: '@hexagon/base64@1.1.28': {} - '@hono/node-server@2.1.5(hono@4.13.13)': + '@hono/node-server@2.1.5(hono@4.13.14)': dependencies: - hono: 4.13.13 + hono: 4.13.14 '@jridgewell/resolve-uri@3.1.2': {} @@ -1470,9 +1478,9 @@ snapshots: '@libsql/win32-x64-msvc@0.5.29': optional: true - '@modelcontextprotocol/sdk@1.32.1(zod@4.6.7)': + '@modelcontextprotocol/sdk@1.32.2(zod@4.6.7)': dependencies: - '@hono/node-server': 2.1.5(hono@4.13.13) + '@hono/node-server': 2.1.5(hono@4.13.14) ajv: 8.20.0 ajv-formats: 3.0.1(ajv@8.20.0) content-type: 1.0.5 @@ -1482,8 +1490,8 @@ snapshots: eventsource-parser: 3.1.1 express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) - hono: 4.13.13 - jose: 6.2.12 + hono: 4.13.14 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -1496,115 +1504,131 @@ snapshots: '@oxc-project/types@0.153.0': {} - '@peculiar/asn1-android@2.11.0': + '@peculiar/asn1-android@2.11.1': + dependencies: + '@peculiar/asn1-schema': 2.11.1 + asn1js: 3.1.0 + tslib: 2.8.1 + + '@peculiar/asn1-asym-key@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-pkcs8': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-cms@2.11.0': + '@peculiar/asn1-cms@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - '@peculiar/asn1-x509-attr': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + '@peculiar/asn1-x509-attr': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-csr@2.11.0': + '@peculiar/asn1-csr@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-ecc@2.11.0': + '@peculiar/asn1-ecc@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-pfx@2.11.0': + '@peculiar/asn1-pfx@2.11.1': dependencies: - '@peculiar/asn1-cms': 2.11.0 - '@peculiar/asn1-pkcs8': 2.11.0 - '@peculiar/asn1-rsa': 2.11.0 - '@peculiar/asn1-schema': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-cms': 2.11.1 + '@peculiar/asn1-pkcs8': 2.11.1 + '@peculiar/asn1-rsa': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-pkcs8@2.11.0': + '@peculiar/asn1-pkcs8@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-pkcs9@2.11.0': + '@peculiar/asn1-pkcs9@2.11.1': dependencies: - '@peculiar/asn1-cms': 2.11.0 - '@peculiar/asn1-pfx': 2.11.0 - '@peculiar/asn1-pkcs8': 2.11.0 - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - '@peculiar/asn1-x509-attr': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-cms': 2.11.1 + '@peculiar/asn1-pfx': 2.11.1 + '@peculiar/asn1-pkcs8': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + '@peculiar/asn1-x509-attr': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-rsa@2.11.0': + '@peculiar/asn1-rsa@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-schema@2.11.0': + '@peculiar/asn1-schema@2.11.1': dependencies: '@peculiar/utils': 2.0.3 - asn1js: 3.0.10 + asn1js: 3.1.0 + tslib: 2.8.1 + + '@peculiar/asn1-x509-attr@2.11.1': + dependencies: + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-x509-attr@2.11.0': + '@peculiar/asn1-x509-post-quantum@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - asn1js: 3.0.10 + '@peculiar/asn1-asym-key': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + asn1js: 3.1.0 tslib: 2.8.1 - '@peculiar/asn1-x509@2.11.0': + '@peculiar/asn1-x509@2.11.1': dependencies: - '@peculiar/asn1-schema': 2.11.0 + '@peculiar/asn1-schema': 2.11.1 '@peculiar/utils': 2.0.3 - asn1js: 3.0.10 + asn1js: 3.1.0 tslib: 2.8.1 '@peculiar/utils@2.0.3': dependencies: tslib: 2.8.1 - '@peculiar/x509@1.14.3': + '@peculiar/x509@2.2.0': dependencies: - '@peculiar/asn1-cms': 2.11.0 - '@peculiar/asn1-csr': 2.11.0 - '@peculiar/asn1-ecc': 2.11.0 - '@peculiar/asn1-pkcs9': 2.11.0 - '@peculiar/asn1-rsa': 2.11.0 - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 + '@peculiar/asn1-cms': 2.11.1 + '@peculiar/asn1-csr': 2.11.1 + '@peculiar/asn1-ecc': 2.11.1 + '@peculiar/asn1-pkcs9': 2.11.1 + '@peculiar/asn1-rsa': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + '@peculiar/asn1-x509-post-quantum': 2.11.1 pvtsutils: 1.3.6 - reflect-metadata: 0.2.2 tslib: 2.8.1 tsyringe: 4.10.0 - '@profullstack/footer@0.2.4': {} + '@profullstack/footer@0.2.6': {} '@profullstack/keys@0.1.0': {} - '@profullstack/profile@0.1.3(@libsql/client@0.18.0)': + '@profullstack/profile@0.1.6(@libsql/client@0.18.0)': optionalDependencies: '@libsql/client': 0.18.0 - '@profullstack/x402-gateway@0.11.0': + '@profullstack/x402-gateway@0.13.1': dependencies: '@profullstack/keys': 0.1.0 @@ -1655,16 +1679,18 @@ snapshots: '@rolldown/pluginutils@1.0.1': {} - '@simplewebauthn/server@13.3.3': + '@simplewebauthn/server@14.0.3': dependencies: '@hexagon/base64': 1.1.28 '@levischuck/tiny-cbor': 0.2.11 - '@peculiar/asn1-android': 2.11.0 - '@peculiar/asn1-ecc': 2.11.0 - '@peculiar/asn1-rsa': 2.11.0 - '@peculiar/asn1-schema': 2.11.0 - '@peculiar/asn1-x509': 2.11.0 - '@peculiar/x509': 1.14.3 + '@peculiar/asn1-android': 2.11.1 + '@peculiar/asn1-ecc': 2.11.1 + '@peculiar/asn1-rsa': 2.11.1 + '@peculiar/asn1-schema': 2.11.1 + '@peculiar/asn1-x509': 2.11.1 + '@peculiar/asn1-x509-post-quantum': 2.11.1 + '@peculiar/x509': 2.2.0 + reflect-metadata: 0.2.2 '@types/chai@5.2.3': dependencies: @@ -1743,16 +1769,16 @@ snapshots: '@typescript/typescript-win32-x64@7.0.2': optional: true - '@vitest/mocker@5.0.4(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15))': + '@vitest/mocker@5.0.5(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15))': dependencies: '@jridgewell/trace-mapping': 0.3.31 - '@vitest/spy': 5.0.4 + '@vitest/spy': 5.0.5 estree-walker: 3.0.3 magic-string: 1.4.3 optionalDependencies: vite: 8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15) - '@vitest/spy@5.0.4': {} + '@vitest/spy@5.0.5': {} accepts@2.0.0: dependencies: @@ -1766,11 +1792,11 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 - asn1js@3.0.10: + asn1js@3.1.0: dependencies: pvtsutils: 1.3.6 pvutils: 1.2.0 @@ -1778,15 +1804,15 @@ snapshots: assertion-error@2.0.1: {} - body-parser@2.3.0: + body-parser@2.4.0: dependencies: bytes: 3.1.2 content-type: 2.1.0 debug: 4.4.3 http-errors: 2.0.1 iconv-lite: 0.7.3 - on-finished: 2.4.1 - qs: 6.16.0 + on-finished: 2.4.2 + qs: 6.16.1 raw-body: 3.0.2 type-is: 2.1.0 transitivePeerDependencies: @@ -1906,14 +1932,14 @@ snapshots: dependencies: debug: 4.4.3 express: 5.3.0 - ip-address: 10.7.4 + ip-address: 10.7.5 transitivePeerDependencies: - supports-color express@5.3.0: dependencies: accepts: 2.0.0 - body-parser: 2.3.0 + body-parser: 2.4.0 content-disposition: 2.0.1 content-type: 2.1.0 cookie: 0.7.2 @@ -1928,11 +1954,11 @@ snapshots: http-errors: 2.0.1 merge-descriptors: 2.0.0 mime-types: 3.0.2 - on-finished: 2.4.1 + on-finished: 2.4.2 once: 1.4.0 parseurl: 1.3.3 proxy-addr: 2.0.8 - qs: 6.16.0 + qs: 6.16.1 range-parser: 1.3.0 router: 2.2.0 send: 1.2.1 @@ -1945,7 +1971,7 @@ snapshots: fast-deep-equal@3.1.3: {} - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} fdir@6.5.0(picomatch@4.0.7): optionalDependencies: @@ -1956,7 +1982,7 @@ snapshots: debug: 4.4.3 encodeurl: 2.0.0 escape-html: 1.0.3 - on-finished: 2.4.1 + on-finished: 2.4.2 parseurl: 1.3.3 statuses: 2.0.2 transitivePeerDependencies: @@ -1997,7 +2023,7 @@ snapshots: dependencies: function-bind: 1.1.2 - hono@4.13.13: {} + hono@4.13.14: {} http-errors@2.0.1: dependencies: @@ -2013,7 +2039,7 @@ snapshots: inherits@2.0.4: {} - ip-address@10.7.4: {} + ip-address@10.7.5: {} ipaddr.js@1.9.1: {} @@ -2021,7 +2047,7 @@ snapshots: isexe@2.0.0: {} - jose@6.2.12: {} + jose@6.2.13: {} js-base64@3.9.4: {} @@ -2123,7 +2149,7 @@ snapshots: obug@3.0.0: {} - on-finished@2.4.1: + on-finished@2.4.2: dependencies: ee-first: 1.1.1 @@ -2162,7 +2188,7 @@ snapshots: pvutils@1.2.0: {} - qs@6.16.0: + qs@6.16.1: dependencies: es-define-property: 1.0.1 side-channel: 1.1.1 @@ -2223,7 +2249,7 @@ snapshots: http-errors: 2.0.1 mime-types: 3.0.2 ms: 2.1.3 - on-finished: 2.4.1 + on-finished: 2.4.2 range-parser: 1.3.0 statuses: 2.0.2 transitivePeerDependencies: @@ -2336,7 +2362,7 @@ snapshots: undici-types@8.9.0: {} - undici@7.30.0: {} + undici@8.12.3: {} unpipe@1.0.0: {} @@ -2355,10 +2381,10 @@ snapshots: fsevents: 2.3.3 tsx: 4.23.15 - vitest@5.0.4(@types/node@26.6.5)(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)): + vitest@5.0.5(@types/node@26.6.5)(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)): dependencies: '@types/chai': 5.2.3 - '@vitest/mocker': 5.0.4(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)) + '@vitest/mocker': 5.0.5(vite@8.3.4(@types/node@26.6.5)(esbuild@0.28.2)(tsx@4.23.15)) chai: 6.3.0 es-module-lexer: 2.3.2 expect-type: 1.4.0 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 8cc3ebb..42d0b53 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,5 +1,4 @@ allowBuilds: esbuild: true minimumReleaseAgeExclude: - - '@profullstack/x402-gateway@0.11.0' - - '@profullstack/profile@0.1.3' + - '@profullstack/*' diff --git a/src/auth.ts b/src/auth.ts index ffaf6ad..54594c4 100644 --- a/src/auth.ts +++ b/src/auth.ts @@ -4,7 +4,6 @@ import { verifyAuthenticationResponse, verifyRegistrationResponse, type AuthenticationResponseJSON, - type AuthenticatorTransportFuture, type RegistrationResponseJSON, } from '@simplewebauthn/server'; import { createProfileStore, saveSignupProfile } from '@profullstack/profile'; @@ -212,7 +211,7 @@ export async function passkeyRegistrationOptions(db: Db, rp: RelyingParty, user: userDisplayName: user.name ?? user.email, userID: new TextEncoder().encode(user.id), attestationType: 'none', - excludeCredentials: existing.map((p) => ({ id: p.id, transports: parseJson(p.transports_json, []) })), + excludeCredentials: existing.map((p) => ({ id: p.id, transports: parseJson(p.transports_json, []) })), authenticatorSelection: { residentKey: 'required', userVerification: 'preferred' }, }); const challengeId = await saveChallenge(db, options.challenge, user.id, 'register'); diff --git a/src/mcp.ts b/src/mcp.ts index 4cde7aa..a81fdc8 100644 --- a/src/mcp.ts +++ b/src/mcp.ts @@ -4,7 +4,7 @@ import type { SubmitFleet } from './service.js'; import { SubmitFleetError } from './util.js'; import type { Actor } from './workspaces.js'; -export const MCP_SERVER_VERSION = '0.3.1'; +export const MCP_SERVER_VERSION = '0.3.2'; type Json = unknown;