chore: release 1.4.2

fix(cert_manager): indicate no email in certbot
fix(cert_manager): typo in valid_host
2026-06-03 00:13:05 +02:00 · 2026-06-03 00:12:03 +02:00 · 2026-06-03 00:00:48 +02:00 · 2026-06-02 23:54:51 +02:00 · 2026-06-02 23:51:37 +02:00 · 2026-06-02 23:41:12 +02:00
19 changed files with 488 additions and 241 deletions
@@ -1,10 +1,10 @@
 [project]
 name = "stapler"
-version = "1.2.3"
+version = "1.4.2"
 description = "Static pages as simple as a gzip file"
 requires-python = ">=3.14"
 dependencies = [
-    "requests>=2.33.1",
+    "requests>=2.34.2,<3.0.0",
 ]

 [project.scripts]
@@ -20,10 +20,11 @@ module-name = "stapler"

 [dependency-groups]
 dev = [
-    "coverage>=7.13.5",
-    "pytest>=9.0.3",
-    "ruff>=0.15.10",
-    "ty>=0.0.29",
+    "coverage>=7.14.0,<8.0.0",
+    "parameterized>=0.9.0,<0.10.0",
+    "pytest>=9.0.3,<10.0.0",
+    "ruff>=0.15.14,<0.16.0",
+    "ty>=0.0.39,<0.0.40",
 ]

 [tool.ruff.lint]
@@ -5,6 +5,8 @@ import ssl
 import subprocess
 import typing

+from stapler.strings import valid_host
+
 if typing.TYPE_CHECKING:
    from .params import Parameters

@@ -35,7 +37,7 @@ class CertManager:
        self.with_certbot: bool = params.with_certbot
        self.last_file_change: int | float = 0

-    def init(self, hosts: list[str]) -> None:
+    def init(self) -> None:
        self.logger.debug("Initializing...")
        if not self.certbot_www.exists():
            self.certbot_www.mkdir(parents=True)
@@ -43,8 +45,6 @@ class CertManager:
        if not self.self_signed_path.exists():
            self.self_signed_path.mkdir(parents=True)
            self.logger.debug("Created %s", self.self_signed_path)
-        for host in hosts:
-            self.init_cert(host)

    def exists(self, host: str) -> bool:
        return self.__exists_certbot(host) or self.__exists_self_signed(host)
@@ -57,7 +57,7 @@ class CertManager:

    def create_or_update(self, host: str) -> bool:
        created = self.init_cert(host)
-        if self.with_certbot and self.__create_certbot(host):
+        if self.with_certbot and valid_host(host) and self.__create_certbot(host):
            return True
        return created or self.__create_self_signed(host)

@@ -106,7 +106,7 @@ class CertManager:
                    "req",
                    "-new",
                    "-newkey",
-                    "rsa:4096",
+                    "rsa:2048",
                    "-days",
                    str(self.SELF_SIGNED_DAYS),
                    "-nodes",
@@ -161,6 +161,7 @@ class CertManager:
                    "certonly",
                    "--non-interactive",
                    "--agree-tos",
+                    "--register-unsafely-without-email",
                    "--webroot",
                    "--webroot-path",
                    self.certbot_www,
@@ -185,11 +186,16 @@ class CertManager:
            return False
        return self.__exists_certbot(host)

-    def sni_callback(
-        self, socket: ssl.SSLObject, host: str | None, _: ssl.SSLContext, /
+    def servername_callback(
+        self,
+        socket: ssl.SSLSocket | ssl.SSLObject,
+        host: str | None,
+        _: ssl.SSLSocket,
+        /,
    ) -> None | int:
-        if host is None:
+        if host is None or not valid_host(host):
            return None
+        self.logger.debug("servername callback: %s", host)
        if not self.exists(host) and not self.create_or_update(host):
            return None
        cert_file = self.get_cert(host)
@@ -200,6 +206,7 @@ class CertManager:
                cert_file,
                key_file,
            )
+            new_context.set_alpn_protocols(["http/1.1"])
            socket.context = new_context
        except Exception:
            self.logger.exception("Could not create HTTPS context for %s", host)
@@ -16,7 +16,7 @@ class DataDir:
    ]

    PATH_REGEX = re.compile(r"^[\w-]+$")
-    NEEDED_FILES: typing.ClassVar[list[str]] = ["favicon.ico"]
+    NEEDED_FILES: typing.ClassVar[list[str]] = ["favicon.ico", "robots.txt"]

    def __init__(self, root_path: str) -> None:
        self.logger: logging.Logger = logging.getLogger(self.__class__.__name__)
@@ -99,7 +99,8 @@ class DataDir:
            self.logger.debug("Deleted %s", target_path)

    def empty(self, path: str) -> None:
-        self.remove(path)
+        if self.exists(path):
+            self.remove(path)
        target_path = self.root_path / path
        target_path.mkdir()
        self.logger.debug("Created empty %s", target_path)
@@ -16,6 +16,7 @@ import requests

 from . import PKG_VERSION, STAPLER_ASCII, logs
 from .data_dir import DataDir
+from .strings import sanitize_string, valid_host

 if typing.TYPE_CHECKING:
    from .page import Page
@@ -25,6 +26,14 @@ if typing.TYPE_CHECKING:


 class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
+    timeout = 10
+    protocol_version = "HTTP/1.1"
+    REQUEST_COUNT = 0
+    RESPONSE_HEADERS: typing.ClassVar = {
+        "Connection": "close",
+        "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload",
+    }
+
    @typing.override
    def __init__(
        self,
@@ -38,7 +47,14 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
        self.__host: str | None = None
        self.__in_size: int | None = None
        self.https: bool = params.https
+        self.__class__.REQUEST_COUNT += 1
        super().__init__(*args, **kwargs)
+        with contextlib.suppress(Exception):
+            self.connection.close()
+
+    @typing.override
+    def version_string(self) -> str:
+        return self.server_version

    @typing.override
    def send_error(
@@ -75,7 +91,7 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):

    @typing.override
    def address_string(self) -> str:  # pragma: no cover
-        return re.sub(r"[^\x00-\x7F]+", "", super().address_string())
+        return sanitize_string(super().address_string())

    @typing.override
    def log_message(self, format: str, *args: typing.Any) -> None:  # pragma: no cover
@@ -87,9 +103,25 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
        fmt = "%s - " + format
        self.logger.error(fmt, self.address_string(), *args)

+    def _pre_log_request(self) -> None:  # pragma: no cover
+        args = (
+            "...",
+            self.address_string(),
+            self.host,
+            format(self.__class__.REQUEST_COUNT, "07_d"),
+            sanitize_string(self.requestline),
+        )
+        fmt = "← %s - %s - %s - %s - %s"
+        if self.in_size > 0:
+            args = (*args, self.in_size)
+            fmt += " - %s"
+        self.logger.debug(fmt, *args)
+
    @typing.override
    def log_request(self, code: str = "?", size: str = "-") -> None:  # ty:ignore[invalid-method-override] # pragma: no cover
        if isinstance(code, http.HTTPStatus):
+            code = code.value
+        if isinstance(code, int):
            color = logs.TermColor.RED
            if 100 <= code < 200:
                color = logs.TermColor.CYAN
@@ -99,11 +131,17 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
                color = logs.TermColor.BLUE
            elif 400 <= code < 500:
                color = logs.TermColor.YELLOW
-            code = color + str(code.value) + logs.TermColor.RESET
+            code = color + str(code) + logs.TermColor.RESET
        if size == "" and self.out_size > 0:
            size = str(self.out_size)
-        args = (code, self.address_string(), self.host, self.requestline)
-        fmt = "→ %s - %s - %s - %s"
+        args = (
+            code,
+            self.address_string(),
+            self.host,
+            format(self.__class__.REQUEST_COUNT, "07_d"),
+            sanitize_string(self.requestline),
+        )
+        fmt = "→ %s - %s - %s - %s - %s"
        if size != "":
            args = (*args, size)
            fmt += " - %s"
@@ -121,8 +159,10 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
        self.send_response(code, message)
        self.send_header("Content-Type", f"{content_type}; charset=UTF-8")
        self.send_header("Content-Length", str(len(encoded)))
+        self._send_basic_headers()
        self.end_headers()
-        self.wfile.write(encoded)
+        if self.command != http.HTTPMethod.HEAD:
+            self.wfile.write(encoded)
        self.close_connection = True

    def send_status_only(
@@ -135,6 +175,7 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
            headers = {}
        self.send_response(code, message)
        self.send_header("Content-Length", "0")
+        self._send_basic_headers()
        for header, value in headers.items():
            self.send_header(header, value)
        self.end_headers()
@@ -164,6 +205,7 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
                headers=headers,
                allow_redirects=False,
                timeout=480,
+                stream=False,
            )
        except Exception as e:
            self.send_error(
@@ -183,11 +225,13 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
                "transfer-encoding",
                "server",
                "date",
+                "connection",
            ]:
                self.send_header(header, value.replace(target_host, self.host))
        self.send_header("Content-Length", str(out_size := len(response.content)))
+        self._send_basic_headers()
        self.end_headers()
-        if out_size > 0:
+        if out_size > 0 and self.command != http.HTTPMethod.HEAD:
            self.wfile.write(response.content)
        self.close_connection = True

@@ -208,7 +252,10 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
        return self.__in_size

    def _get_length(self) -> int:
-        return int(self._get_header("Content-Length", "0"))
+        try:
+            return max(0, int(self._get_header("Content-Length", "0")))
+        except ValueError:
+            return 0

    def _get_header(self, key: str, default_value: str = "") -> str:
        if self._has_header(key):
@@ -222,14 +269,6 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
            and len(self.headers[key]) > 0
        )

-    def _pre_log_request(self) -> None:  # pragma: no cover
-        args = ("...", self.address_string(), self.host, self.requestline)
-        fmt = "← %s - %s - %s - %s"
-        if self.in_size > 0:
-            args = (*args, self.in_size)
-            fmt += " - %s"
-        self.logger.debug(fmt, *args)
-
    def server_signature(self) -> str:
        return self.server_version + "\n\n" + STAPLER_ASCII + "\n"

@@ -241,6 +280,10 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
            self.send_error(http.HTTPStatus.INTERNAL_SERVER_ERROR, str(e))
            self.logger.exception("Internal Server Error")

+    def _send_basic_headers(self) -> None:
+        for header, value in self.RESPONSE_HEADERS.items():
+            self.send_header(header, value)
+

 class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    protocol_version = "HTTP/1.1"
@@ -249,7 +292,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    UPDATE_PATH_REGEX = re.compile(r"^\/([\w-]+)\/?$")
    GET_PATH_REGEX = re.compile(r"^\/([\w-]+)($|\/)")
    HOST_PART_REGEX = re.compile(r"^([a-z0-9]|[a-z0-9][a-z0-9-]{,61}[a-z0-9])$")
-    AUTHORIZED_PATHS: typing.ClassVar[list[str]] = ["/favicon.ico"]
+    AUTHORIZED_PATHS: typing.ClassVar[list[str]] = ["/favicon.ico", "/robots.txt"]
    TOKEN_HEADER = "X-Token"  # noqa: S105
    HOST_HEADER = "X-Host"
    HOST_ONLY_HEADER = "X-Host-Only"
@@ -281,6 +324,8 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
        self.__target_spa: str | None = None
        try:
            super().__init__(*args, directory=params.data_dir, **kwargs, params=params)  # ty:ignore[unknown-argument]
+        except (BrokenPipeError, ConnectionResetError) as e:
+            self.logger.error("Connection lost: %s", str(e))  # noqa: TRY400
        except:
            self.logger.exception("Could not handle request")

@@ -327,7 +372,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    @property
    def target_redirect(self) -> str:
        if self.__target_redirect is None:
-            self.__target_redirect = self._get_header(self.REDIRECT_HEADER).lower()
+            self.__target_redirect = self._get_header(self.REDIRECT_HEADER)
        return self.__target_redirect

    @property
@@ -337,7 +382,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    @property
    def target_proxy(self) -> str:
        if self.__target_proxy is None:
-            self.__target_proxy = self._get_header(self.PROXY_HEADER).lower()
+            self.__target_proxy = self._get_header(self.PROXY_HEADER)
        return self.__target_proxy

    @property
@@ -347,7 +392,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    @property
    def target_spa(self) -> str:
        if self.__target_spa is None:
-            self.__target_spa = self._get_header(self.SPA_HEADER).lower()
+            self.__target_spa = self._get_header(self.SPA_HEADER)
        return self.__target_spa

    @property
@@ -358,8 +403,13 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
    def do_HEAD(self) -> None:
        with self.handle_errors():
            self._pre_log_request()
-            if not self._proxy_or_redirect():
-                super().do_HEAD()
+            if self._proxy_or_redirect():
+                return None
+            if self.path == "/" and self.host == self.default_host:
+                return self.send_basic_body(self.server_signature())
+            super().do_HEAD()
+            self.close_connection = True
+            return None

    @typing.override
    def do_GET(self) -> None:
@@ -369,7 +419,9 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
                return None
            if self.path == "/" and self.host == self.default_host:
                return self.send_basic_body(self.server_signature())
-            return super().do_GET()
+            super().do_GET()
+            self.close_connection = True
+            return None

    def do_PUT(self) -> None:
        with self.handle_errors():
@@ -444,16 +496,20 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
                "Archive too large",
            )
            return False
+        existing = self.registry.remove(path)
        try:
            file_bytes = io.BytesIO(self.rfile.read(self.in_size))
            self.data_dir.extract_tar_bytes(path, file_bytes)
        except tarfile.TarError:
            self.send_error(http.HTTPStatus.BAD_REQUEST, "Invalid tar archive")
+            if existing:
+                self.registry.add(path)  # restore path on error
            return False
        self.registry.add(path)
        self.token_manager.set_token(path, self.token)
        if self.has_target_spa:
            self.registry.set_spa(path, self.target_spa)
+        self.registry.mark_ready(path)
        return True

    def _update_redirect(self, path: str) -> bool:
@@ -465,6 +521,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
            return False
        self.registry.set_redirect(path, self.target_redirect)
        self.token_manager.set_token(path, self.token)
+        self.registry.mark_ready(path)
        return True

    def _update_proxy(self, path: str) -> bool:
@@ -476,6 +533,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
            return False
        self.registry.set_proxy(path, self.target_proxy)
        self.token_manager.set_token(path, self.token)
+        self.registry.mark_ready(path)
        return True

    def _update_remove(self, path: str) -> bool:
@@ -487,7 +545,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
        return True

    def _proxy_or_redirect(self) -> bool:
-        if self.has_token or self.path.startswith(self.CERTBOT_CHALLENGE_PATH):
+        if self.has_token or self._is_certbot_challenge(self.path):
            return False
        if (page := self.__get_page(self.path)) is None:
            return False
@@ -507,9 +565,14 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
        """Disable default directory listing."""
        self.send_error(http.HTTPStatus.NOT_FOUND, "File not found")

+    def _is_certbot_challenge(self, path: str) -> bool:
+        return path.startswith(self.CERTBOT_CHALLENGE_PATH) and pathlib.Path(
+            self.certbot_www + path
+        ).resolve().is_relative_to(self.certbot_www)
+
    @typing.override
    def translate_path(self, path: str) -> str:
-        if path.startswith(self.CERTBOT_CHALLENGE_PATH):
+        if self._is_certbot_challenge(path):
            return self.certbot_www + path
        page = self.__get_page(path)
        if page is None:
@@ -517,6 +580,11 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
                return super().translate_path(path)
            return ""
        if self.host != self.default_host:
+            if (
+                not (self.root_path / page.path / path).is_file()
+                and path in self.AUTHORIZED_PATHS
+            ):
+                return super().translate_path(path)
            path = f"/{page.path}" + path
        if pathlib.Path(path).name.startswith("."):  # hidden files
            return ""
@@ -554,7 +622,7 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
                f"Cannot use {self.HOST_ONLY_HEADER} with {self.HOST_HEADER}",
            )
            return None
-        if self.has_target_host and not self.__valid_host(self.target_host):
+        if self.has_target_host and not valid_host(self.target_host):
            self.send_error(http.HTTPStatus.BAD_REQUEST, "Invalid requested host")
            return None
        if self.has_target_proxy and self.has_target_redirect:
@@ -577,12 +645,6 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):
            return match.group(1)
        return None

-    def __valid_host(self, host: str) -> bool:
-        return (
-            all(self.HOST_PART_REGEX.fullmatch(part) for part in host.split("."))
-            and len(host) < 256
-        )
-
    def __get_page(self, src_path: str) -> Page | None:
        if self.host == self.default_host:
            if (
@@ -596,16 +658,19 @@ class RequestHandler(http.server.SimpleHTTPRequestHandler, BaseHandler):


 class UpgradeHandler(RequestHandler):
+    protocol_version = "HTTP/1.0"
    server_version = "StaplerUpgradeServer/" + PKG_VERSION

    def do_HEAD(self) -> None:
        with self.handle_errors():
            self._pre_log_request()
            self.send_redirect(f"https://{self.host}{self.path}")
+            self.close_connection = True

    def do_GET(self) -> None:
        with self.handle_errors():
-            if self.path.startswith(self.CERTBOT_CHALLENGE_PATH):
+            if self._is_certbot_challenge(self.path):
                super().do_GET()
+                self.close_connection = True
            else:
                self.do_HEAD()
@@ -11,6 +11,7 @@ class Page:
    redirect: str | None = None
    proxy: str | None = None
    spa: str | None = None
+    ready: bool = True

    def __repr__(self) -> str:
        out = f"/{self.path}/"
@@ -40,7 +40,7 @@ def __get_env_str(var: str, default: str) -> str:

 def __get_env_int(var: str, default: int) -> int:
    value = __get_env_str(var, str(default))
-    if value.isnumeric():
+    if value.isdecimal():
        return int(value)
    return default

@@ -10,6 +10,7 @@ if typing.TYPE_CHECKING:

 class Registry:
    __slots__ = [
+        "_host_pages",
        "data_dir",
        "logger",
        "pages",
@@ -26,14 +27,24 @@ class Registry:
        self.logger: logging.Logger = logging.getLogger(self.__class__.__name__)
        self.pages: dict[str, Page] = {}
        self.data_dir = DataDir(params.data_dir)
+        self._host_pages: dict[str, Page] | None = None
+
+    @property
+    def host_pages(self) -> dict[str, Page]:
+        if self._host_pages is None:
+            self._host_pages = {
+                p.host: p for p in self.pages.values() if p.host is not None
+            }
+        return self._host_pages

    def load_pages(self) -> None:
        self.pages = {}
        for path in self.data_dir.list_paths():
            self.add(path)
+            self.mark_ready(path)

    def get_hosts(self) -> list[str]:
-        return [p.host for p in self.pages.values() if p.host is not None]
+        return list(self.host_pages.keys())

    def add(self, path: str) -> None:
        host = self.data_dir.get_file(path, self.HOST_FILE)
@@ -47,7 +58,9 @@ class Registry:
            redirect=self.data_dir.get_file(path, self.REDIRECT_FILE),
            proxy=self.data_dir.get_file(path, self.PROXY_FILE),
            spa=self.data_dir.get_file(path, self.SPA_FILE),
+            ready=False,
        )
+        self._host_pages = None
        self.logger.info("Updated %s", self.pages[path])

    def set_host(self, path: str, host: str) -> None:
@@ -57,6 +70,7 @@ class Registry:
            self.data_dir.set_file(path, self.HOST_FILE, host)
            self.data_dir.remove_file(path, self.HOST_ONLY_FILE)
            self.pages[path].host = host
+            self._host_pages = None
            self.logger.debug("Updated %s", self.pages[path])

    def set_host_only(self, path: str, host: str) -> None:
@@ -67,6 +81,7 @@ class Registry:
            self.data_dir.remove_file(path, self.HOST_FILE)
            self.pages[path].host = host
            self.pages[path].host_only = True
+            self._host_pages = None
            self.logger.debug("Updated %s", self.pages[path])

    def set_token_hash(self, path: str, token_hash: str) -> None:
@@ -77,19 +92,23 @@ class Registry:

    def set_redirect(self, path: str, redirect: str) -> None:
        if path not in self.pages or self.pages[path].redirect != redirect:
+            if path in self.pages:
+                self.pages[path].ready = False
            self.data_dir.empty(path)
            self.data_dir.set_file(path, self.REDIRECT_FILE, redirect)
            if path not in self.pages:
-                self.pages[path] = Page(path)
+                self.pages[path] = Page(path, ready=False)
            self.pages[path].redirect = redirect
            self.logger.debug("Updated %s", self.pages[path])

    def set_proxy(self, path: str, proxy: str) -> None:
        if path not in self.pages or self.pages[path].proxy != proxy:
+            if path in self.pages:
+                self.pages[path].ready = False
            self.data_dir.empty(path)
            self.data_dir.set_file(path, self.PROXY_FILE, proxy)
            if path not in self.pages:
-                self.pages[path] = Page(path)
+                self.pages[path] = Page(path, ready=False)
            self.pages[path].proxy = proxy
            self.logger.debug("Updated %s", self.pages[path])

@@ -99,19 +118,25 @@ class Registry:
            self.pages[path].spa = spa
            self.logger.debug("Updated %s", self.pages[path])

-    def remove(self, path: str) -> None:
+    def mark_ready(self, path: str) -> None:
+        if path in self.pages:
+            self.pages[path].ready = True
+
+    def remove(self, path: str) -> bool:
        if path in self.pages:
            page = self.pages[path]
            del self.pages[path]
+            self._host_pages = None
            self.logger.info("Removed %s", page)
+            return True
+        return False

    def get_from_path(self, path: str) -> Page | None:
-        if path in self.pages:
+        if path in self.pages and self.pages[path].ready:
            return self.pages[path]
        return None

    def get_from_host(self, host: str) -> Page | None:
-        for p in self.pages.values():
-            if p.host == host:
-                return p
+        if host in self.host_pages and self.host_pages[host].ready:
+            return self.host_pages[host]
        return None
@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /
@@ -29,7 +29,6 @@ class StaplerServer:
        "logger",
        "params",
        "registry",
-        "server",
        "token_manager",
    ]

@@ -41,7 +40,6 @@ class StaplerServer:
        self.token_manager: TokenManager = TokenManager(params, self.registry)
        self.data_dir: DataDir = DataDir(params.data_dir)
        self.default_host: str = params.host.split(":", maxsplit=2)[0]
-        self.server: http.server.ThreadingHTTPServer | None = None

    def __get_all_hosts(self) -> list[str]:
        return [self.default_host, *self.registry.get_hosts()]
@@ -50,7 +48,7 @@ class StaplerServer:
        self.logger.info("Starting up...")
        self.registry.load_pages()
        if self.params.with_certificates:
-            self.cert_manager.init(self.__get_all_hosts())
+            self.cert_manager.init()
        self.data_dir.init()
        self.token_manager.init()

@@ -75,7 +73,7 @@ class StaplerServer:
            )
            context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
            server.socket = context.wrap_socket(server.socket, server_side=True)
-            context.sni_callback = self.cert_manager.sni_callback
+            context.set_servername_callback(self.cert_manager.servername_callback)
        else:
            server = http.server.ThreadingHTTPServer(
                (
@@ -131,7 +129,7 @@ class StaplerServer:
        for line in STAPLER_ASCII.split("\n"):
            self.logger.debug(line.ljust(36))
        self.__startup()
-        self.server = self.__create_base_server()
+        base_server = self.__create_base_server()
        upgrade_server = self.__start_upgrade_server() if self.params.https else None
        self.logger.info(
            "Server up and ready on %s://%s",
@@ -140,7 +138,7 @@ class StaplerServer:
        )
        self.__start_background_tasks()
        with contextlib.suppress(KeyboardInterrupt):
-            self.server.serve_forever()
+            base_server.serve_forever()
        self.logger.info("Shutting down...")
        if upgrade_server is not None:
            upgrade_server.shutdown()
@@ -152,7 +150,7 @@ class StaplerServer:
            self.logger.warning("Cannot renew without certificates")
            return 1
        self.registry.load_pages()
-        self.cert_manager.init(self.__get_all_hosts())
+        self.cert_manager.init()
        for host in self.__get_all_hosts():
            self.cert_manager.create_or_update(host)
        return 0
@@ -0,0 +1,19 @@
+import re
+
+__HOST_PART_REGEX = re.compile(r"^([a-z0-9]|[a-z0-9][a-z0-9-]{,61}[a-z0-9])$")
+__SANITIZE_REGEX = re.compile(r"[^\x20-\x7F]")
+
+
+def valid_host(host: str) -> bool:
+    parts = host.split(".")
+    return (
+        len(parts) > 1
+        and len(parts[-1]) > 1
+        and all(__HOST_PART_REGEX.fullmatch(part) for part in parts)
+        and not all(part.isnumeric() for part in parts)
+        and len(host) < 256
+    )
+
+
+def sanitize_string(raw: str) -> str:
+    return __SANITIZE_REGEX.sub("?", raw)
@@ -15,6 +15,7 @@ class TokenManager:
    __slots__ = [
        "last_file_change",
        "logger",
+        "pbkdf2_iterations",
        "registry",
        "token_hashes",
        "token_salt",
@@ -23,11 +24,14 @@ class TokenManager:

    FILE = ".tokens"

-    def __init__(self, params: Parameters, registry: Registry) -> None:
+    def __init__(
+        self, params: Parameters, registry: Registry, pbkdf2_iterations: int = 500_000
+    ) -> None:
        self.logger: logging.Logger = logging.getLogger(self.__class__.__name__)
-        self.token_salt: str = params.token_salt
+        self.token_salt: bytes = params.token_salt.encode()
        self.tokens_file: pathlib.Path = pathlib.Path(params.data_dir) / self.FILE
        self.registry: Registry = registry
+        self.pbkdf2_iterations: int = pbkdf2_iterations
        self.token_hashes: list[str] = []
        self.last_file_change: int | float = 0

@@ -63,17 +67,18 @@ class TokenManager:
    def detect_file_change(self) -> bool:
        if (
            self.tokens_file.exists()
-            and self.tokens_file.stat().st_mtime != self.last_file_change
+            and (file_change := self.tokens_file.stat().st_mtime)
+            != self.last_file_change
        ):
            self.logger.debug("Detected change: %s", self.tokens_file)
-            self.last_file_change = self.tokens_file.stat().st_mtime
+            self.last_file_change = file_change
            return True
        return False

    def __hash_token(self, token: str) -> str:
-        return hashlib.sha512(
-            (self.token_salt + token).encode(), usedforsecurity=True
-        ).hexdigest()
+        return hashlib.pbkdf2_hmac(
+            "sha256", token.encode(), self.token_salt, self.pbkdf2_iterations
+        ).hex()

    def __load_hashes(self) -> list[str]:
        if self.tokens_file.is_file():
@@ -35,41 +35,33 @@ class TestRegistry(BaseTestCase):
            self.patch("shutil.which", count=0),
            self.patch("subprocess.check_output", count=0),
        ):
-            self.cert_manager.init([])
+            self.cert_manager.init()
            assert self.self_signed_path.is_dir()
            assert self.certbot_www.is_dir()

-    def test_init_with_hosts(self) -> None:
-        with (
-            self.patch("shutil.which", count=0),
-            self.patch("subprocess.check_output", count=0),
-        ):
-            self._make_self_signed("localhost")
-            self.cert_manager.init(["localhost"])
-
    def test_exists_self_signed(self) -> None:
-        self._make_self_signed("localhost")
-        assert self.cert_manager.exists("localhost")
+        self._make_self_signed("example.com")
+        assert self.cert_manager.exists("example.com")

    def test_exists_certbot(self) -> None:
-        self._make_certbot("localhost")
-        assert self.cert_manager.exists("localhost")
+        self._make_certbot("example.com")
+        assert self.cert_manager.exists("example.com")

    def test_exists_fail(self) -> None:
-        assert not self.cert_manager.exists("localhost")
+        assert not self.cert_manager.exists("example.com")

    def test_exists_fail_without_certbot(self) -> None:
        self.cert_manager.with_certbot = False
-        self._make_certbot("localhost")
-        assert not self.cert_manager.exists("localhost")
+        self._make_certbot("example.com")
+        assert not self.cert_manager.exists("example.com")

    def test_init_cert_existing(self) -> None:
        with (
            self.patch("shutil.which", count=0),
            self.patch("subprocess.check_output", count=0),
        ):
-            self._make_self_signed("localhost")
-            assert not self.cert_manager.init_cert("localhost")
+            self._make_self_signed("example.com")
+            assert not self.cert_manager.init_cert("example.com")

    def test_init_cert_fail(self) -> None:
        with (
@@ -77,7 +69,7 @@ class TestRegistry(BaseTestCase):
            self.patch("subprocess.check_output") as process_mock,
        ):
            process_mock.side_effect = subprocess.CalledProcessError(1, "", output=b"")
-            assert not self.cert_manager.init_cert("localhost")
+            assert not self.cert_manager.init_cert("example.com")

    def test_init_cert_new(self) -> None:
        with (
@@ -85,135 +77,139 @@ class TestRegistry(BaseTestCase):
            self.patch("subprocess.check_output") as process_mock,
        ):
            process_mock.side_effect = lambda *_, **__: self._make_self_signed(
-                "localhost"
+                "example.com"
            )
-            assert self.cert_manager.init_cert("localhost")
+            assert self.cert_manager.init_cert("example.com")

    def test_create_or_update_existing_no_certbot(self) -> None:
-        self._make_self_signed("localhost")
+        self._make_self_signed("example.com")
        self.cert_manager.with_certbot = False
        with (
            self.patch("shutil.which", return_value=""),
            self.patch("subprocess.check_output") as process_mock,
        ):
            process_mock.side_effect = lambda *_, **__: self._make_self_signed(
-                "localhost"
+                "example.com"
            )
-            assert self.cert_manager.create_or_update("localhost")
+            assert self.cert_manager.create_or_update("example.com")

    def test_create_or_update_existing_certbot(self) -> None:
-        self._make_certbot("localhost")
+        self._make_certbot("example.com")
        with (
            self.patch("shutil.which", return_value=""),
            self.patch("subprocess.check_output") as process_mock,
        ):
-            process_mock.side_effect = lambda *_, **__: self._make_certbot("localhost")
-            assert self.cert_manager.create_or_update("localhost")
+            process_mock.side_effect = lambda *_, **__: self._make_certbot(
+                "example.com"
+            )
+            assert self.cert_manager.create_or_update("example.com")

    def test_create_or_update_existing_fail_both(self) -> None:
-        self._make_certbot("localhost")
+        self._make_certbot("example.com")
        with (
            self.patch("shutil.which", return_value="", count=2),
            self.patch("subprocess.check_output", count=2) as process_mock,
        ):
            process_mock.side_effect = subprocess.CalledProcessError(1, "", output=b"")
-            assert not self.cert_manager.create_or_update("localhost")
+            assert not self.cert_manager.create_or_update("example.com")

    def test_create_or_update_existing_fail_both_binary(self) -> None:
-        self._make_certbot("localhost")
+        self._make_certbot("example.com")
        with (
            self.patch("shutil.which", count=2),
            self.patch("subprocess.check_output", count=0),
        ):
-            assert not self.cert_manager.create_or_update("localhost")
+            assert not self.cert_manager.create_or_update("example.com")

    def test_get_cert_certbot(self) -> None:
-        self._make_certbot("localhost")
+        self._make_certbot("example.com")
        self.assertEqual(
-            self.cert_manager.get_cert("localhost"),
-            self.certbot_conf / "live" / "localhost" / CertManager.CRT_FILE,
+            self.cert_manager.get_cert("example.com"),
+            self.certbot_conf / "live" / "example.com" / CertManager.CRT_FILE,
        )

    def test_get_cert_self_signed(self) -> None:
-        self._make_self_signed("localhost")
+        self._make_self_signed("example.com")
        self.assertEqual(
-            self.cert_manager.get_cert("localhost"),
-            self.self_signed_path / "localhost" / CertManager.CRT_FILE,
+            self.cert_manager.get_cert("example.com"),
+            self.self_signed_path / "example.com" / CertManager.CRT_FILE,
        )

    def test_get_cert_fail(self) -> None:
        self.assertRaises(
            CertManagerError,
-            lambda: self.cert_manager.get_cert("localhost"),
+            lambda: self.cert_manager.get_cert("example.com"),
        )

    def test_get_key_certbot(self) -> None:
-        self._make_certbot("localhost")
+        self._make_certbot("example.com")
        self.assertEqual(
-            self.cert_manager.get_key("localhost"),
-            self.certbot_conf / "live" / "localhost" / CertManager.KEY_FILE,
+            self.cert_manager.get_key("example.com"),
+            self.certbot_conf / "live" / "example.com" / CertManager.KEY_FILE,
        )

    def test_get_key_self_signed(self) -> None:
-        self._make_self_signed("localhost")
+        self._make_self_signed("example.com")
        self.assertEqual(
-            self.cert_manager.get_key("localhost"),
-            self.self_signed_path / "localhost" / CertManager.KEY_FILE,
+            self.cert_manager.get_key("example.com"),
+            self.self_signed_path / "example.com" / CertManager.KEY_FILE,
        )

    def test_get_key_fail(self) -> None:
        self.assertRaises(
            CertManagerError,
-            lambda: self.cert_manager.get_key("localhost"),
+            lambda: self.cert_manager.get_key("example.com"),
        )

-    def test_sni_callback_no_host(self) -> None:
-        self._make_self_signed("localhost")
+    def test_servername_callback_no_host(self) -> None:
+        self._make_self_signed("example.com")
        with (
            self.patch("ssl.create_default_context", count=0),
        ):
-            self.cert_manager.sni_callback(self.socket_mock, None, self.context_mock)
+            self.cert_manager.servername_callback(
+                self.socket_mock, None, self.context_mock
+            )

-    def test_sni_callback_fail(self) -> None:
-        self._make_self_signed("localhost")
+    def test_servername_callback_fail(self) -> None:
+        self._make_self_signed("example.com")
        with (
            self.patch("shutil.which", count=3),
            self.patch("ssl.create_default_context", count=0),
        ):
-            self.cert_manager.sni_callback(
-                self.socket_mock, "new_host", self.context_mock
+            self.cert_manager.servername_callback(
+                self.socket_mock, "example.fr", self.context_mock
            )

-    def test_sni_callback_create_context(self) -> None:
-        self._make_self_signed("localhost")
+    def test_servername_callback_create_context(self) -> None:
+        self._make_self_signed("example.com")
        with (
            self.patch("ssl.create_default_context", return_value=self.context_mock),
            self.mock_call(
                self.context_mock.load_cert_chain,
                [
-                    self.self_signed_path / "localhost" / CertManager.CRT_FILE,
-                    self.self_signed_path / "localhost" / CertManager.KEY_FILE,
+                    self.self_signed_path / "example.com" / CertManager.CRT_FILE,
+                    self.self_signed_path / "example.com" / CertManager.KEY_FILE,
                ],
            ),
            self.patch("shutil.which", count=0),
        ):
-            self.cert_manager.sni_callback(
-                self.socket_mock, "localhost", self.context_mock
+            self.cert_manager.servername_callback(
+                self.socket_mock, "example.com", self.context_mock
            )

-    def test_sni_callback_create_context_fail(self) -> None:
-        self._make_self_signed("localhost")
+    def test_servername_callback_create_context_fail(self) -> None:
+        self._make_self_signed("example.com")
        with (
            self.patch("ssl.create_default_context", return_value=self.context_mock),
            self.patch("shutil.which", count=0),
        ):
            self.context_mock.load_cert_chain.side_effect = Exception
-            self.cert_manager.sni_callback(
-                self.socket_mock, "localhost", self.context_mock
+            self.cert_manager.servername_callback(
+                self.socket_mock, "example.com", self.context_mock
            )
            self.context_mock.load_cert_chain.assert_called_once_with(
-                self.self_signed_path / "localhost" / CertManager.CRT_FILE,
-                self.self_signed_path / "localhost" / CertManager.KEY_FILE,
+                self.self_signed_path / "example.com" / CertManager.CRT_FILE,
+                self.self_signed_path / "example.com" / CertManager.KEY_FILE,
            )

    def _make_self_signed(self, host: str) -> None:
@@ -59,10 +59,6 @@ class TestDataDir(BaseTestCase):
        self.__create_path("test_1")
        self.assertIsNone(self.data_dir.get_file("test_1", ".value"))

-    def test_get_file_cannot_read(self) -> None:
-        self.__create_path("test_1", {".value/.value": "value"})
-        self.assertIsNone(self.data_dir.get_file("test_1", ".value"))
-
    def test_get_file_invalid_path(self) -> None:
        self.assertIsNone(self.data_dir.get_file("test_1", ".value"))

@@ -36,6 +36,7 @@ class BaseHandlerTestCase(BaseTestCase, abc.ABC):
        code: int,
        message: str | None = None,
        headers: dict[str, str] | None = None,
+        content_length: int = 0,
    ) -> typing.Iterator[None]:
        if headers is None:
            headers = {}
@@ -46,7 +47,7 @@ class BaseHandlerTestCase(BaseTestCase, abc.ABC):
        send_response_mock.assert_called_once_with(code, message)
        send_header_mock.assert_has_calls(
            [
-                unittest.mock.call("Content-Length", "0"),
+                unittest.mock.call("Content-Length", str(content_length)),
            ]
            + [unittest.mock.call(header, value) for header, value in headers.items()],
            any_order=True,
@@ -177,9 +178,36 @@ class TestRequestHandler(BaseHandlerTestCase):
                token_manager=self.token_manager,
            )

-    def test_do_head_forward(self) -> None:
+    def test_handle_disconnect_silently(self) -> None:
+        with self.patch("http.server.BaseHTTPRequestHandler.__init__") as mock:
+            mock.side_effect = BrokenPipeError
+            logging.basicConfig(level=logging.CRITICAL)
+            RequestHandler(
+                unittest.mock.MagicMock(),
+                "127.0.0.1",
+                unittest.mock.MagicMock(),
+                params=Parameters(
+                    data_dir=self.get_tmp_dir(), certbot_www=str(self.certbot_www)
+                ),
+                registry=self.registry,
+                token_manager=self.token_manager,
+            )
+
+    def test_do_head_index(self) -> None:
        handler = self._get_handler()
        with (
+            self.expects_status_only(
+                handler, 200, content_length=len(handler.server_signature())
+            ),
+            self.patch("http.server.SimpleHTTPRequestHandler.do_HEAD", count=0),
+            self.seal_mocks(),
+        ):
+            handler.do_HEAD()
+
+    def test_do_head_forward(self) -> None:
+        handler = self._get_handler("/file")
+        with (
+            self.mock_call(self.registry.get_from_path, ["file"], Page("file")),
            self.patch("http.server.SimpleHTTPRequestHandler.do_HEAD"),
            self.seal_mocks(),
        ):
@@ -408,6 +436,8 @@ class TestRequestHandler(BaseHandlerTestCase):
                ["secret", "path"],
                True,  # noqa: FBT003
            ),
+            self.mock_call(self.registry.remove, ["path"], True),  # noqa: FBT003
+            self.mock_call(self.registry.add, ["path"]),
            self.expects_error(
                handler, http.HTTPStatus.BAD_REQUEST, "Invalid tar archive"
            ),
@@ -429,6 +459,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                ["secret", "path"],
                True,  # noqa: FBT003
            ),
+            self.mock_call(self.registry.remove, ["path"], False),  # noqa: FBT003
            self.expects_error(handler, http.HTTPStatus.INTERNAL_SERVER_ERROR, ""),
            self.seal_mocks(),
        ):
@@ -448,8 +479,10 @@ class TestRequestHandler(BaseHandlerTestCase):
                True,  # noqa: FBT003
            ),
            self.mock_call_unchecked(self.data_dir.extract_tar_bytes),
+            self.mock_call(self.registry.remove, ["path"], False),  # noqa: FBT003
            self.mock_call(self.registry.add, ["path"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -473,9 +506,11 @@ class TestRequestHandler(BaseHandlerTestCase):
            ),
            self.mock_call(self.registry.get_from_host, ["example.com"], Page("path")),
            self.mock_call_unchecked(self.data_dir.extract_tar_bytes),
+            self.mock_call(self.registry.remove, ["path"], False),  # noqa: FBT003
            self.mock_call(self.registry.add, ["path"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
            self.mock_call(self.registry.set_host, ["path", "example.com"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -497,9 +532,11 @@ class TestRequestHandler(BaseHandlerTestCase):
                True,  # noqa: FBT003
            ),
            self.mock_call_unchecked(self.data_dir.extract_tar_bytes),
+            self.mock_call(self.registry.remove, ["path"], False),  # noqa: FBT003
            self.mock_call(self.registry.add, ["path"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
            self.mock_call(self.registry.set_spa, ["path", "index.html"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -550,6 +587,7 @@ class TestRequestHandler(BaseHandlerTestCase):
            ),
            self.mock_call(self.registry.set_redirect, ["path", "https://example.com"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -578,6 +616,7 @@ class TestRequestHandler(BaseHandlerTestCase):
            self.mock_call(self.registry.set_redirect, ["path", "https://example.com"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
            self.mock_call(self.registry.set_host, ["path", "example.com"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -606,6 +645,7 @@ class TestRequestHandler(BaseHandlerTestCase):
            self.mock_call(self.registry.set_redirect, ["path", "https://example.com"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
            self.mock_call(self.registry.set_host_only, ["path", "example.com"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -656,6 +696,7 @@ class TestRequestHandler(BaseHandlerTestCase):
            ),
            self.mock_call(self.registry.set_proxy, ["path", "https://example.com"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -684,6 +725,7 @@ class TestRequestHandler(BaseHandlerTestCase):
            self.mock_call(self.registry.set_proxy, ["path", "https://example.com"]),
            self.mock_call(self.token_manager.set_token, ["path", "secret"]),
            self.mock_call(self.registry.set_host, ["path", "example.com"]),
+            self.mock_call(self.registry.mark_ready, ["path"]),
            self.mock_call(self.registry.get_from_path, ["path"]),
            self.expects_status_only(
                handler, http.HTTPStatus.CREATED, "Resource updated"
@@ -844,6 +886,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ),
            self.expects_status_only(handler, 200, "OK"),
@@ -888,6 +931,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ),
            self.expects_status_only(handler, 200, "OK"),
@@ -930,6 +974,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ),
            self.expects_basic_body(handler, "hello", message="OK"),
@@ -964,6 +1009,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ) as request_mock,
            self.expects_status_only(
@@ -1007,6 +1053,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ),
            self.expects_status_only(handler, 200, "OK"),
@@ -1047,6 +1094,7 @@ class TestRequestHandler(BaseHandlerTestCase):
                    },
                    "allow_redirects": False,
                    "timeout": 480,
+                    "stream": False,
                },
            ),
            self.expects_status_only(handler, 200, "OK"),
@@ -1177,6 +1225,21 @@ class TestRequestHandler(BaseHandlerTestCase):
                None,
            )

+    def test_translate_path_with_host_favicon(self) -> None:
+        handler = self._get_handler(headers={"Host": "example.com"})
+        with (
+            self.mock_call(self.registry.get_from_host, ["example.com"], Page("path")),
+            self.patch_call(
+                "http.server.SimpleHTTPRequestHandler.translate_path",
+                ["/favicon.ico"],
+            ),
+            self.seal_mocks(),
+        ):
+            self.assertEqual(
+                handler.translate_path("/favicon.ico"),
+                None,
+            )
+
    def test_translate_path_default_host(self) -> None:
        handler = self._get_handler()
        with (
@@ -185,6 +185,7 @@ class TestRegistry(BaseTestCase):
        self.assertEqual(
            self.registry.pages["test_1"].redirect, "https://new-example.com"
        )
+        assert not self.registry.pages["test_1"].ready

    def test_set_redirect_no_change(self) -> None:
        self.registry.pages["test_1"] = Page(
@@ -214,6 +215,7 @@ class TestRegistry(BaseTestCase):
        self.assertEqual(
            self.registry.pages["test_1"].redirect, "https://new-example.com"
        )
+        assert not self.registry.pages["test_1"].ready

    def test_set_proxy(self) -> None:
        self.registry.pages["test_1"] = Page(
@@ -233,6 +235,7 @@ class TestRegistry(BaseTestCase):
        ):
            self.registry.set_proxy("test_1", "https://new-example.com")
        self.assertEqual(self.registry.pages["test_1"].proxy, "https://new-example.com")
+        assert not self.registry.pages["test_1"].ready

    def test_set_proxy_no_change(self) -> None:
        self.registry.pages["test_1"] = Page(
@@ -260,6 +263,7 @@ class TestRegistry(BaseTestCase):
            self.registry.set_proxy("test_1", "https://new-example.com")
        self.assertIn("test_1", self.registry.pages)
        self.assertEqual(self.registry.pages["test_1"].proxy, "https://new-example.com")
+        assert not self.registry.pages["test_1"].ready

    def test_set_spa(self) -> None:
        self.registry.pages["test_1"] = Page(
@@ -298,9 +302,27 @@ class TestRegistry(BaseTestCase):
            "test_1",
        )
        self.seal_mocks()
-        self.registry.remove("test_1")
+        assert self.registry.remove("test_1")
        self.assertNotIn("test_1", self.registry.pages)

+    def test_remove_not_found(self) -> None:
+        self.seal_mocks()
+        assert not self.registry.remove("test_1")
+
+    def test_mark_ready(self) -> None:
+        self.registry.pages["test_1"] = Page("test_1", ready=False)
+        with (
+            self.seal_mocks(),
+        ):
+            self.registry.mark_ready("test_1")
+            assert self.registry.pages["test_1"].ready
+
+    def test_mark_ready_not_found(self) -> None:
+        with (
+            self.seal_mocks(),
+        ):
+            self.registry.mark_ready("test_1")
+
    def test_get_from_path(self) -> None:
        self.registry.pages["test_1"] = (
            target := Page(
@@ -313,6 +335,14 @@ class TestRegistry(BaseTestCase):
        self.seal_mocks()
        self.assertEqual(self.registry.get_from_path("test_1"), target)

+    def test_get_from_path_not_ready(self) -> None:
+        self.registry.pages["test_1"] = Page(
+            "test_1",
+            ready=False,
+        )
+        self.seal_mocks()
+        self.assertIsNone(self.registry.get_from_path("test_1"))
+
    def test_get_from_path_not_found(self) -> None:
        self.registry.pages["test_1"] = Page(
            "test_1",
@@ -329,6 +359,11 @@ class TestRegistry(BaseTestCase):
        self.seal_mocks()
        self.assertEqual(self.registry.get_from_host("host_1"), target)

+    def test_get_from_host_not_ready(self) -> None:
+        self.registry.pages["test_1"] = Page("test_1", host="host_1", ready=False)
+        self.seal_mocks()
+        self.assertIsNone(self.registry.get_from_host("host_1"))
+
    def test_get_from_host_not_found(self) -> None:
        self.registry.pages["test_1"] = Page("test_1", host="host_1")
        self.registry.pages["test_2"] = Page("test_2", host="host_2")
@@ -26,10 +26,8 @@ class TestStaplerServer(BaseTestCase):
    def test_renew(self) -> None:
        with (
            self.mock_call(self.registry.load_pages),
-            self.mock_calls(
-                self.registry.get_hosts, [[], []], [["host_1"], ["host_1"]]
-            ),
-            self.mock_call(self.cert_manager.init, [["localhost", "host_1"]]),
+            self.mock_calls(self.registry.get_hosts, [[]], [["host_1"]]),
+            self.mock_call(self.cert_manager.init),
            self.mock_calls(
                self.cert_manager.create_or_update, [["localhost"], ["host_1"]]
            ),
@@ -67,16 +65,16 @@ class TestStaplerServer(BaseTestCase):

    def test_run_https(self) -> None:
        self.token_manager.detect_file_change.side_effect = KeyboardInterrupt
-        self.cert_manager.sni_callback = unittest.mock.Mock()
+        self.cert_manager.servername_callback = unittest.mock.Mock()
        with (
            self.mock_call(self.registry.load_pages),
-            self.mock_call(self.registry.get_hosts, [], []),
-            self.mock_call(self.cert_manager.init, [["localhost"]]),
+            self.mock_call(self.cert_manager.init),
            self.mock_call(self.data_dir.init),
            self.mock_call(self.token_manager.init),
            self.patch("ssl.create_default_context", return_value=self.context_mock),
            self.patch("http.server.ThreadingHTTPServer", self.server_mock, 2),
            self.mock_call_unchecked(self.context_mock.wrap_socket),
+            self.mock_call_unchecked(self.context_mock.set_servername_callback),
            self.mock_calls_unchecked(self.server_mock.serve_forever, 2),
            self.mock_call(self.server_mock.shutdown),
            self.seal_mocks(),
@@ -0,0 +1,22 @@
+import parameterized
+
+from stapler.strings import sanitize_string, valid_host
+
+from . import BaseTestCase
+
+
+class TestStrings(BaseTestCase):
+    def test_sanitize(self) -> None:
+        self.assertEqual("??A??", sanitize_string("\n\tA\x00\x99"))
+
+    @parameterized.parameterized.expand(
+        [("example.com"), ("test-test.com"), ("subdomain.example.com")]
+    )
+    def test_valid_host(self, host: str) -> None:
+        self.assertTrue(valid_host(host), host)
+
+    @parameterized.parameterized.expand(
+        [("example.c"), ("localhost"), ("127.0.0.1"), ("test..com"), ("www-.test.com")]
+    )
+    def test_invalid_host(self, host: str) -> None:
+        self.assertFalse(valid_host(host), host)
@@ -11,9 +11,9 @@ from . import BaseTestCase


 class TestTokenManager(BaseTestCase):
-    EMPTY_SALT_HASH = "a04ca803c9fd73c21b721ece14b8b30cd3d9ca1bff752904a46982b881e152d0cdaa463a32e6bce71408de611953bc304ca8000d40d4b06b3f2a70769f69fecc"
-    SALT_HASH = "a5f2d8785eb4f064eae60f94e6025f93be32c2c93d2bbd73a982ee5c7ebcc484536487a4f60cfdfcb9ba72da7cebe0ce11afa91f191272e51d8c14be6874824b"
-    SECRET_HASH = "9901847ff8c76bd5fb473b7bd2e4f4ddd110332a52a888fd69deb276613885ddf382e5cf1210ed0decdb8010ae3994331a9e0639c3ca7e9e8b110dd50978ce76"  # noqa: S105
+    EMPTY_SALT_HASH = "5f88941ac5e26c430d97411ac1103af7a35c753f14aec088fbf34801c099135a"
+    SALT_HASH = "d71b1f52657c77d00b2a8c59b8d12d13c1c1bb2bcfbb85d2a9b804c36ad57a70"
+    SECRET_HASH = "38df428b309308e48c3687e7f90bda0e9cf253568c21ec754a0e076ab4ab6423"  # noqa: S105

    @typing.override
    def setUp(self) -> None:
@@ -21,6 +21,7 @@ class TestTokenManager(BaseTestCase):
        self.token_manager = TokenManager(
            Parameters(data_dir=self.get_tmp_dir(), token_salt="salt"),  # noqa: S106
            self.registry,
+            pbkdf2_iterations=1,
        )
        self.token_manager.logger = unittest.mock.Mock(logging.Logger)
        self.tmp_tokens_file = self.tmp_path / TokenManager.FILE
@@ -34,7 +35,7 @@ class TestTokenManager(BaseTestCase):
        self.assertListEqual(self.token_manager.token_hashes, [])

    def test_init_weak_salt(self) -> None:
-        self.token_manager.token_salt = ""
+        self.token_manager.token_salt = b""
        self.seal_mocks()
        self.token_manager.init()
        self.assert_file_content(
@@ -4,11 +4,11 @@ requires-python = ">=3.14"

 [[package]]
 name = "certifi"
-version = "2026.4.22"
+version = "2026.5.20"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/25/ee/6caf7a40c36a1220410afe15a1cc64993a1f864871f698c0f93acb72842a/certifi-2026.4.22.tar.gz", hash = "sha256:8d455352a37b71bf76a79caa83a3d6c25afee4a385d632127b6afb3963f1c580", size = 137077, upload-time = "2026-04-22T11:26:11.191Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f3/ce/ee2ecad540810a79593028e88299baeae54d346cc7a0d94b6199988b89b1/certifi-2026.5.20.tar.gz", hash = "sha256:69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d", size = 135422, upload-time = "2026-05-20T11:46:50.073Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/22/30/7cd8fdcdfbc5b869528b079bfb76dcdf6056b1a2097a662e5e8c04f42965/certifi-2026.4.22-py3-none-any.whl", hash = "sha256:3cb2210c8f88ba2318d29b0388d1023c8492ff72ecdde4ebdaddbb13a31b1c4a", size = 135707, upload-time = "2026-04-22T11:26:09.372Z" },
+    { url = "https://files.pythonhosted.org/packages/59/8c/57e832b7af6d7c5abe66eb3fbe3a3a32f4d11ea23a1aa7131371035be991/certifi-2026.5.20-py3-none-any.whl", hash = "sha256:3c52e209ba0a4ad7aebe60436a4ab349c39e1e602e8c134221e546902ad25897", size = 134134, upload-time = "2026-05-20T11:46:48.578Z" },
 ]

 [[package]]
@@ -63,50 +63,50 @@ wheels = [

 [[package]]
 name = "coverage"
-version = "7.13.5"
+version = "7.14.1"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/9d/e0/70553e3000e345daff267cec284ce4cbf3fc141b6da229ac52775b5428f1/coverage-7.13.5.tar.gz", hash = "sha256:c81f6515c4c40141f83f502b07bbfa5c240ba25bbe73da7b33f1e5b6120ff179", size = 915967, upload-time = "2026-03-17T10:33:18.341Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/54/fd/0ab2772530e946e1be1abd0bc09e647ec9b02e88f0867857601fefca8953/coverage-7.14.1.tar.gz", hash = "sha256:30c08f7d90415aa98b3c990385dea2939b0da55f38515e5b369b83655f8523be", size = 920132, upload-time = "2026-05-26T20:41:36.783Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/8e/77/39703f0d1d4b478bfd30191d3c14f53caf596fac00efb3f8f6ee23646439/coverage-7.13.5-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:fbabfaceaeb587e16f7008f7795cd80d20ec548dc7f94fbb0d4ec2e038ce563f", size = 219621, upload-time = "2026-03-17T10:32:08.589Z" },
-    { url = "https://files.pythonhosted.org/packages/e2/3e/51dff36d99ae14639a133d9b164d63e628532e2974d8b1edb99dd1ebc733/coverage-7.13.5-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:9bb2a28101a443669a423b665939381084412b81c3f8c0fcfbac57f4e30b5b8e", size = 219953, upload-time = "2026-03-17T10:32:10.507Z" },
-    { url = "https://files.pythonhosted.org/packages/6a/6c/1f1917b01eb647c2f2adc9962bd66c79eb978951cab61bdc1acab3290c07/coverage-7.13.5-cp314-cp314-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:bd3a2fbc1c6cccb3c5106140d87cc6a8715110373ef42b63cf5aea29df8c217a", size = 250992, upload-time = "2026-03-17T10:32:12.41Z" },
-    { url = "https://files.pythonhosted.org/packages/22/e5/06b1f88f42a5a99df42ce61208bdec3bddb3d261412874280a19796fc09c/coverage-7.13.5-cp314-cp314-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:6c36ddb64ed9d7e496028d1d00dfec3e428e0aabf4006583bb1839958d280510", size = 253503, upload-time = "2026-03-17T10:32:14.449Z" },
-    { url = "https://files.pythonhosted.org/packages/80/28/2a148a51e5907e504fa7b85490277734e6771d8844ebcc48764a15e28155/coverage-7.13.5-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:380e8e9084d8eb38db3a9176a1a4f3c0082c3806fa0dc882d1d87abc3c789247", size = 254852, upload-time = "2026-03-17T10:32:16.56Z" },
-    { url = "https://files.pythonhosted.org/packages/61/77/50e8d3d85cc0b7ebe09f30f151d670e302c7ff4a1bf6243f71dd8b0981fa/coverage-7.13.5-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:e808af52a0513762df4d945ea164a24b37f2f518cbe97e03deaa0ee66139b4d6", size = 257161, upload-time = "2026-03-17T10:32:19.004Z" },
-    { url = "https://files.pythonhosted.org/packages/3b/c4/b5fd1d4b7bf8d0e75d997afd3925c59ba629fc8616f1b3aae7605132e256/coverage-7.13.5-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:e301d30dd7e95ae068671d746ba8c34e945a82682e62918e41b2679acd2051a0", size = 251021, upload-time = "2026-03-17T10:32:21.344Z" },
-    { url = "https://files.pythonhosted.org/packages/f8/66/6ea21f910e92d69ef0b1c3346ea5922a51bad4446c9126db2ae96ee24c4c/coverage-7.13.5-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:800bc829053c80d240a687ceeb927a94fd108bbdc68dfbe505d0d75ab578a882", size = 252858, upload-time = "2026-03-17T10:32:23.506Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/ea/879c83cb5d61aa2a35fb80e72715e92672daef8191b84911a643f533840c/coverage-7.13.5-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:0b67af5492adb31940ee418a5a655c28e48165da5afab8c7fa6fd72a142f8740", size = 250823, upload-time = "2026-03-17T10:32:25.516Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/fb/616d95d3adb88b9803b275580bdeee8bd1b69a886d057652521f83d7322f/coverage-7.13.5-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:c9136ff29c3a91e25b1d1552b5308e53a1e0653a23e53b6366d7c2dcbbaf8a16", size = 255099, upload-time = "2026-03-17T10:32:27.944Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/93/25e6917c90ec1c9a56b0b26f6cad6408e5f13bb6b35d484a0d75c9cf000d/coverage-7.13.5-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:cff784eef7f0b8f6cb28804fbddcfa99f89efe4cc35fb5627e3ac58f91ed3ac0", size = 250638, upload-time = "2026-03-17T10:32:29.914Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/7b/dc1776b0464145a929deed214aef9fb1493f159b59ff3c7eeeedf91eddd0/coverage-7.13.5-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:68a4953be99b17ac3c23b6efbc8a38330d99680c9458927491d18700ef23ded0", size = 252295, upload-time = "2026-03-17T10:32:31.981Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/fb/99cbbc56a26e07762a2740713f3c8f9f3f3106e3a3dd8cc4474954bccd34/coverage-7.13.5-cp314-cp314-win32.whl", hash = "sha256:35a31f2b1578185fbe6aa2e74cea1b1d0bbf4c552774247d9160d29b80ed56cc", size = 222360, upload-time = "2026-03-17T10:32:34.233Z" },
-    { url = "https://files.pythonhosted.org/packages/8d/b7/4758d4f73fb536347cc5e4ad63662f9d60ba9118cb6785e9616b2ce5d7fa/coverage-7.13.5-cp314-cp314-win_amd64.whl", hash = "sha256:2aa055ae1857258f9e0045be26a6d62bdb47a72448b62d7b55f4820f361a2633", size = 223174, upload-time = "2026-03-17T10:32:36.369Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/f2/24d84e1dfe70f8ac9fdf30d338239860d0d1d5da0bda528959d0ebc9da28/coverage-7.13.5-cp314-cp314-win_arm64.whl", hash = "sha256:1b11eef33edeae9d142f9b4358edb76273b3bfd30bc3df9a4f95d0e49caf94e8", size = 221739, upload-time = "2026-03-17T10:32:38.736Z" },
-    { url = "https://files.pythonhosted.org/packages/60/5b/4a168591057b3668c2428bff25dd3ebc21b629d666d90bcdfa0217940e84/coverage-7.13.5-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:10a0c37f0b646eaff7cce1874c31d1f1ccb297688d4c747291f4f4c70741cc8b", size = 220351, upload-time = "2026-03-17T10:32:41.196Z" },
-    { url = "https://files.pythonhosted.org/packages/f5/21/1fd5c4dbfe4a58b6b99649125635df46decdfd4a784c3cd6d410d303e370/coverage-7.13.5-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:b5db73ba3c41c7008037fa731ad5459fc3944cb7452fc0aa9f822ad3533c583c", size = 220612, upload-time = "2026-03-17T10:32:43.204Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/fe/2a924b3055a5e7e4512655a9d4609781b0d62334fa0140c3e742926834e2/coverage-7.13.5-cp314-cp314t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:750db93a81e3e5a9831b534be7b1229df848b2e125a604fe6651e48aa070e5f9", size = 261985, upload-time = "2026-03-17T10:32:45.514Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/0d/c8928f2bd518c45990fe1a2ab8db42e914ef9b726c975facc4282578c3eb/coverage-7.13.5-cp314-cp314t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:9ddb4f4a5479f2539644be484da179b653273bca1a323947d48ab107b3ed1f29", size = 264107, upload-time = "2026-03-17T10:32:47.971Z" },
-    { url = "https://files.pythonhosted.org/packages/ef/ae/4ae35bbd9a0af9d820362751f0766582833c211224b38665c0f8de3d487f/coverage-7.13.5-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d8a7a2049c14f413163e2bdabd37e41179b1d1ccb10ffc6ccc4b7a718429c607", size = 266513, upload-time = "2026-03-17T10:32:50.1Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/20/d326174c55af36f74eac6ae781612d9492f060ce8244b570bb9d50d9d609/coverage-7.13.5-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:e1c85e0b6c05c592ea6d8768a66a254bfb3874b53774b12d4c89c481eb78cb90", size = 267650, upload-time = "2026-03-17T10:32:52.391Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/5e/31484d62cbd0eabd3412e30d74386ece4a0837d4f6c3040a653878bfc019/coverage-7.13.5-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:777c4d1eff1b67876139d24288aaf1817f6c03d6bae9c5cc8d27b83bcfe38fe3", size = 261089, upload-time = "2026-03-17T10:32:54.544Z" },
-    { url = "https://files.pythonhosted.org/packages/e9/d8/49a72d6de146eebb0b7e48cc0f4bc2c0dd858e3d4790ab2b39a2872b62bd/coverage-7.13.5-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:6697e29b93707167687543480a40f0db8f356e86d9f67ddf2e37e2dfd91a9dab", size = 263982, upload-time = "2026-03-17T10:32:56.803Z" },
-    { url = "https://files.pythonhosted.org/packages/06/3b/0351f1bd566e6e4dd39e978efe7958bde1d32f879e85589de147654f57bb/coverage-7.13.5-cp314-cp314t-musllinux_1_2_i686.whl", hash = "sha256:8fdf453a942c3e4d99bd80088141c4c6960bb232c409d9c3558e2dbaa3998562", size = 261579, upload-time = "2026-03-17T10:32:59.466Z" },
-    { url = "https://files.pythonhosted.org/packages/5d/ce/796a2a2f4017f554d7810f5c573449b35b1e46788424a548d4d19201b222/coverage-7.13.5-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:32ca0c0114c9834a43f045a87dcebd69d108d8ffb666957ea65aa132f50332e2", size = 265316, upload-time = "2026-03-17T10:33:01.847Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/16/d5ae91455541d1a78bc90abf495be600588aff8f6db5c8b0dae739fa39c9/coverage-7.13.5-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:8769751c10f339021e2638cd354e13adeac54004d1941119b2c96fe5276d45ea", size = 260427, upload-time = "2026-03-17T10:33:03.945Z" },
-    { url = "https://files.pythonhosted.org/packages/48/11/07f413dba62db21fb3fad5d0de013a50e073cc4e2dc4306e770360f6dfc8/coverage-7.13.5-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:cec2d83125531bd153175354055cdb7a09987af08a9430bd173c937c6d0fba2a", size = 262745, upload-time = "2026-03-17T10:33:06.285Z" },
-    { url = "https://files.pythonhosted.org/packages/91/15/d792371332eb4663115becf4bad47e047d16234b1aff687b1b18c58d60ae/coverage-7.13.5-cp314-cp314t-win32.whl", hash = "sha256:0cd9ed7a8b181775459296e402ca4fb27db1279740a24e93b3b41942ebe4b215", size = 223146, upload-time = "2026-03-17T10:33:08.756Z" },
-    { url = "https://files.pythonhosted.org/packages/db/51/37221f59a111dca5e85be7dbf09696323b5b9f13ff65e0641d535ed06ea8/coverage-7.13.5-cp314-cp314t-win_amd64.whl", hash = "sha256:301e3b7dfefecaca37c9f1aa6f0049b7d4ab8dd933742b607765d757aca77d43", size = 224254, upload-time = "2026-03-17T10:33:11.174Z" },
-    { url = "https://files.pythonhosted.org/packages/54/83/6acacc889de8987441aa7d5adfbdbf33d288dad28704a67e574f1df9bcbb/coverage-7.13.5-cp314-cp314t-win_arm64.whl", hash = "sha256:9dacc2ad679b292709e0f5fc1ac74a6d4d5562e424058962c7bb0c658ad25e45", size = 222276, upload-time = "2026-03-17T10:33:13.466Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/ee/a4cf96b8ce1e566ed238f0659ac2d3f007ed1d14b181bcb684e19561a69a/coverage-7.13.5-py3-none-any.whl", hash = "sha256:34b02417cf070e173989b3db962f7ed56d2f644307b2cf9d5a0f258e13084a61", size = 211346, upload-time = "2026-03-17T10:33:15.691Z" },
+    { url = "https://files.pythonhosted.org/packages/d6/34/fc2f101b151af3799a101f0550b0454aa008afdc0add677394ec4aa8ea10/coverage-7.14.1-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:d5ed429d0b8edaac649e889b4ffcedb6c80b06629a3f93050e3dddfb99235bee", size = 220091, upload-time = "2026-05-26T20:40:27.249Z" },
+    { url = "https://files.pythonhosted.org/packages/3d/a7/1ebae2ab5b961b5c79bb09fe7b3ac99edb190d8be4a8c510b2cf66f46468/coverage-7.14.1-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:8011224a62280e50dab346960c03cf47aca1a1e09e608c0fb33fd6e0cc8e9500", size = 220421, upload-time = "2026-05-26T20:40:30.084Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/90/92aca9cf0acc95123c96cd1eb1f08917897a7f5dee01e15738922971ec31/coverage-7.14.1-cp314-cp314-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:12c42ec1e14f553c4f817e989365982e646e27211f10a0f717855b94a79c8906", size = 251466, upload-time = "2026-05-26T20:40:32.542Z" },
+    { url = "https://files.pythonhosted.org/packages/26/2b/78048cbe3b999f6cbf9cc0d90abba6a88a3e0863a8c1c6cbc762f3f8802f/coverage-7.14.1-cp314-cp314-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:06144cd511cf2624873a035c5069cf297144f6e77a73ee3d7a55b605ec5efb42", size = 253973, upload-time = "2026-05-26T20:40:34.473Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/21/c2e33b29d1cfde484a19d437afc343c6cd30b08d78cbbf9f5aff14e57b2b/coverage-7.14.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a311d8e1da24be5c1ccf85cbfb06315dbaa1703d5a1eab3f6432c72b837917c8", size = 255318, upload-time = "2026-05-26T20:40:38.154Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/ee/aad2f108d63b769121005302f16bf66db8625c88ceaba466942e09a2607e/coverage-7.14.1-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:c79cead5b5bc584d9c71451cb984d0e3a84e0c0937379c8efcbf27c8d661b851", size = 257633, upload-time = "2026-05-26T20:40:40.164Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/f8/11a2c29b4fd76d9849f81d0bb812ec0017a9396df3217214e38934a8c837/coverage-7.14.1-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:dcbf65f1f66a26cdd88c35cf68fb4729c5d1cd2e88added72420541dfb212034", size = 251488, upload-time = "2026-05-26T20:40:42.631Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/b8/9a5820de4b8ac2b71d85e3b5fb49108d7469c665f0e2ad0dd7569023e305/coverage-7.14.1-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:fd86572566fb40189a8260446158235159bc7a82dfbc87a3b39cf4fb57fcec1c", size = 253329, upload-time = "2026-05-26T20:40:45.208Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/ff/f33e4823667e27548e8fd8df44217515303f9808d0ff29817db56f87d990/coverage-7.14.1-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:7771b601718fdde84832c3a434ca9bbf4ae9adbc49d84198b4110700c3c77c36", size = 251291, upload-time = "2026-05-26T20:40:47.502Z" },
+    { url = "https://files.pythonhosted.org/packages/68/9b/489db0ebb209054766b90a9014a45f6d26eb724c02ec21311c3733b5a644/coverage-7.14.1-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:39b21e212c55af06fa375e3dbf90a8a8e38792f3a910c580066d23563830ddd5", size = 255564, upload-time = "2026-05-26T20:40:49.372Z" },
+    { url = "https://files.pythonhosted.org/packages/27/b5/16bc2d4c2409b23c7737edb68c83bc89e345f378050549fe1d75ac7d34d5/coverage-7.14.1-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:f2302660e32562a532b442480121aef8aa61a5bdb20b30bf0adab29f10a5a4b4", size = 251107, upload-time = "2026-05-26T20:40:51.677Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/0c/2629997469a00cd069d588a41c9dc887610f2775ae89d250c4791e65272a/coverage-7.14.1-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:03a6f93c1ec3b7f2e77b5dbcc5573a2c21f12529a5c6bbe0f16f72303cc2fa4d", size = 252764, upload-time = "2026-05-26T20:40:54.267Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/ee/f78d63c8f079e0d7211c7e2401fa17e311514534ba61bae03e4b287ce4ab/coverage-7.14.1-cp314-cp314-win32.whl", hash = "sha256:8a3ce026d73290f42f08dafecbd82c193a74df280461fbf97300fec51fd133ee", size = 222837, upload-time = "2026-05-26T20:40:56.496Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/b9/be539854f93a70dfbeec69117f33ec70dc42ff0b65b5b07ab8d40d04228e/coverage-7.14.1-cp314-cp314-win_amd64.whl", hash = "sha256:114c95ef29302423b87d159075805f4ab973254a2638a5d7d046c94887cc87d7", size = 223650, upload-time = "2026-05-26T20:40:58.351Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/9e/24e2842fef40f35ac82ba3a7719c8023d011bf3bf652d0675316a9d088a1/coverage-7.14.1-cp314-cp314-win_arm64.whl", hash = "sha256:a07891c3f4805442b31b71e84ba3cf29ed1aa9a428284e06deeb4b23e5b46343", size = 222218, upload-time = "2026-05-26T20:41:00.321Z" },
+    { url = "https://files.pythonhosted.org/packages/0a/1d/ac0a9df5fe31c1e8bdd658074905fc12844a05c1a7e3fdb8417e97c31e23/coverage-7.14.1-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:1101a5ebb083aecb625ebb6209d4105b58f647b093cb2dc8122d7b33f743cfe1", size = 220822, upload-time = "2026-05-26T20:41:02.281Z" },
+    { url = "https://files.pythonhosted.org/packages/32/cf/f964fd9aff20323f9f1a726c97135f8a76bcd87b92dad141a456a43f3c64/coverage-7.14.1-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:851b9e1e4e8a4608e77c79714b2e77c0970d2ed7202a05e92ae407817481887b", size = 221084, upload-time = "2026-05-26T20:41:04.593Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/5e/7e5ef2aba844de2b80d678619fcf0841b42e3f37f16411226f3fe4c1016f/coverage-7.14.1-cp314-cp314t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:d5b89cdfb2ee051b71e8c3c70bd81a9eff81100f736a269136fe1a68efe00474", size = 262454, upload-time = "2026-05-26T20:41:06.641Z" },
+    { url = "https://files.pythonhosted.org/packages/64/62/75809bded87015cc4935524218a2a8ed8dd1a8498bfed30a2f4f7a4b4d34/coverage-7.14.1-cp314-cp314t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:0177614a0370f227888b4e436a7c55686d6a9f90eb1ade2b624ba685a1686e86", size = 264578, upload-time = "2026-05-26T20:41:08.556Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/42/d33392dc14633525012d2d504fa1a33b05538bf535f5c1d64675e5754b78/coverage-7.14.1-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:2d69af5dea2de76fc485a83032a630523f985198b7e25be901ec60181587b01e", size = 266981, upload-time = "2026-05-26T20:41:10.824Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/49/0157c4428c2aca7f1e09d5565930586fd5ae36f1655f08b0daa7cf1fcae1/coverage-7.14.1-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:35ab22d91de736e8966b980dc355cbcdd2c6dbbcfe275f9a2991bc8a91b3df65", size = 268112, upload-time = "2026-05-26T20:41:12.966Z" },
+    { url = "https://files.pythonhosted.org/packages/96/26/86b9ce71f4092b1ed325ce1421698081df1286b833400b6836912834d6e0/coverage-7.14.1-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:357d4e32935c36588aaba057d734fa32428c360c9fc2e4442afbf1b646beee6e", size = 261558, upload-time = "2026-05-26T20:41:15Z" },
+    { url = "https://files.pythonhosted.org/packages/20/4c/c311210c5472cf5401d8422b0d7812cdd520f24417673afabda6c323faca/coverage-7.14.1-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:51bd64741cc6fa065abd300ede1afe5a5291ece9c31da8b24884deda48bcc3f8", size = 264447, upload-time = "2026-05-26T20:41:17.369Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/71/59513f8710ed3e6b0ac0a050a5b7e977bb9c9e880354863b5d00d8809256/coverage-7.14.1-cp314-cp314t-musllinux_1_2_i686.whl", hash = "sha256:9132cd363a68a4c3daa7c8704a654b1e39d3360f6f5b8ddd470608a945236c07", size = 262048, upload-time = "2026-05-26T20:41:19.309Z" },
+    { url = "https://files.pythonhosted.org/packages/84/8d/bceed32dc494f5bbf50f775cd2e78ca814953942b5ea28d3c1c3ac316f14/coverage-7.14.1-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:07c6290b1697b862c0478eab545eec949a0d0e4d6d03497f446d706da3b4f2de", size = 265781, upload-time = "2026-05-26T20:41:21.559Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/c5/9348fe40dbfd4991aaf78df2c6c3098bfb2cc834d1fd362a64b4efef855a/coverage-7.14.1-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:5ea0c297e27133853b4d8a3eb799bff5a2dbd9f2f41537a240d337ac9b4df890", size = 260896, upload-time = "2026-05-26T20:41:23.428Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/92/1ea0f03929da7cf87206b1fa24f4c8e9c158be0455481af29ec0a1f3503f/coverage-7.14.1-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:01b7733daad0237daa01ef80fe2dfceffc911e6a17fa7b55d14aa8214eaaaecd", size = 263214, upload-time = "2026-05-26T20:41:25.419Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/a9/b2493c054c0e01a643266742ab45e15744e60743f9260cd930c7142b1124/coverage-7.14.1-cp314-cp314t-win32.whl", hash = "sha256:6adc5a36984624a70bf11d7184e20fa0a49aa7c47ffab43804106a1a695ea22e", size = 223624, upload-time = "2026-05-26T20:41:27.795Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/bd/3e1e6a57fccd2d7c83fcdf338e93ba98eb85c6e877dd34731ac585375490/coverage-7.14.1-cp314-cp314t-win_amd64.whl", hash = "sha256:ddf799247318f34dbcd2efa8c95a8d0642674e926bb1774cf9b63dfd2a389d1c", size = 224728, upload-time = "2026-05-26T20:41:30.098Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/d7/31066cf1d2f0c6c797fce911bcfa01dd35642dc6da992a950256097c5860/coverage-7.14.1-cp314-cp314t-win_arm64.whl", hash = "sha256:145986fe66647eb489f18d9a997567a3fd358584c4b5a808769113abc07466af", size = 222752, upload-time = "2026-05-26T20:41:32.123Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/3c/1a983b9a745d7f83d53f057bcc5bf79ba6a2bbc08266b3f0c7d6fe630c9b/coverage-7.14.1-py3-none-any.whl", hash = "sha256:a252f21c27e38347e60111a3266b03827422a7d5525951aceee313aa68bab1d2", size = 211815, upload-time = "2026-05-26T20:41:34.078Z" },
 ]

 [[package]]
 name = "idna"
-version = "3.13"
+version = "3.18"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ce/cc/762dfb036166873f0059f3b7de4565e1b5bc3d6f28a414c13da27e442f99/idna-3.13.tar.gz", hash = "sha256:585ea8fe5d69b9181ec1afba340451fba6ba764af97026f92a91d4eef164a242", size = 194210, upload-time = "2026-04-22T16:42:42.314Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/cd/63/9496c57188a2ee585e0f1db071d75089a11e98aa86eb99d9d7618fc1edce/idna-3.18.tar.gz", hash = "sha256:ffb385a7e039654cef1ab9ef32c6fafe283c0c0467bba1d9029738ce4a14a848", size = 196711, upload-time = "2026-06-02T14:34:07.794Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/13/ad7d7ca3808a898b4612b6fe93cde56b53f3034dcde235acb1f0e1df24c6/idna-3.13-py3-none-any.whl", hash = "sha256:892ea0cde124a99ce773decba204c5552b69c3c67ffd5f232eb7696135bc8bb3", size = 68629, upload-time = "2026-04-22T16:42:40.909Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/5e/d4e9f1a599fb8e573b7b87160658329fbf28d19eac2718f51fc3def3aa5a/idna-3.18-py3-none-any.whl", hash = "sha256:7f952cbe720b688055e3f87de14f5c3e5fdaa8bc3928985c4077ca689de849a2", size = 65455, upload-time = "2026-06-02T14:34:06.319Z" },
 ]

 [[package]]
@@ -127,6 +127,15 @@ wheels = [
    { url = "https://files.pythonhosted.org/packages/df/b2/87e62e8c3e2f4b32e5fe99e0b86d576da1312593b39f47d8ceef365e95ed/packaging-26.2-py3-none-any.whl", hash = "sha256:5fc45236b9446107ff2415ce77c807cee2862cb6fac22b8a73826d0693b0980e", size = 100195, upload-time = "2026-04-24T20:15:22.081Z" },
 ]

+[[package]]
+name = "parameterized"
+version = "0.9.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/ea/49/00c0c0cc24ff4266025a53e41336b79adaa5a4ebfad214f433d623f9865e/parameterized-0.9.0.tar.gz", hash = "sha256:7fc905272cefa4f364c1a3429cbbe9c0f98b793988efb5bf90aac80f08db09b1", size = 24351, upload-time = "2023-03-27T02:01:11.592Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/00/2f/804f58f0b856ab3bf21617cccf5b39206e6c4c94c2cd227bde125ea6105f/parameterized-0.9.0-py2.py3-none-any.whl", hash = "sha256:4e0758e3d41bea3bbd05ec14fc2c24736723f243b28d702081aef438c9372b1b", size = 20475, upload-time = "2023-03-27T02:01:09.31Z" },
+]
+
 [[package]]
 name = "pluggy"
 version = "1.6.0"
@@ -163,7 +172,7 @@ wheels = [

 [[package]]
 name = "requests"
-version = "2.33.1"
+version = "2.34.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "certifi" },
@@ -171,39 +180,39 @@ dependencies = [
    { name = "idna" },
    { name = "urllib3" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/5f/a4/98b9c7c6428a668bf7e42ebb7c79d576a1c3c1e3ae2d47e674b468388871/requests-2.33.1.tar.gz", hash = "sha256:18817f8c57c6263968bc123d237e3b8b08ac046f5456bd1e307ee8f4250d3517", size = 134120, upload-time = "2026-03-30T16:09:15.531Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ac/c3/e2a2b89f2d3e2179abd6d00ebd70bff6273f37fb3e0cc209f48b39d00cbf/requests-2.34.2.tar.gz", hash = "sha256:f288924cae4e29463698d6d60bc6a4da69c89185ad1e0bcc4104f584e960b9ed", size = 142856, upload-time = "2026-05-14T19:25:27.735Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d7/8e/7540e8a2036f79a125c1d2ebadf69ed7901608859186c856fa0388ef4197/requests-2.33.1-py3-none-any.whl", hash = "sha256:4e6d1ef462f3626a1f0a0a9c42dd93c63bad33f9f1c1937509b8c5c8718ab56a", size = 64947, upload-time = "2026-03-30T16:09:13.83Z" },
+    { url = "https://files.pythonhosted.org/packages/a0/f4/c67b0b3f1b9245e8d266f0f112c500d50e5b4e83cb6f3b71b6528104182a/requests-2.34.2-py3-none-any.whl", hash = "sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0", size = 73075, upload-time = "2026-05-14T19:25:26.443Z" },
 ]

 [[package]]
 name = "ruff"
-version = "0.15.12"
+version = "0.15.15"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/99/43/3291f1cc9106f4c63bdce7a8d0df5047fe8422a75b091c16b5e9355e0b11/ruff-0.15.12.tar.gz", hash = "sha256:ecea26adb26b4232c0c2ca19ccbc0083a68344180bba2a600605538ce51a40a6", size = 4643852, upload-time = "2026-04-24T18:17:14.305Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/84/6f/a76f7d96e5c962f5b69cee865e49c15c1116897c01990faa8a57edb62e7f/ruff-0.15.15.tar.gz", hash = "sha256:b8dff018130b46d8e5bf0f926ef6b60cf871d6d5ae45fc9334e09632daa741d6", size = 4706985, upload-time = "2026-05-28T14:16:57.784Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c3/6e/e78ffb61d4686f3d96ba3df2c801161843746dcbcbb17a1e927d4829312b/ruff-0.15.12-py3-none-linux_armv6l.whl", hash = "sha256:f86f176e188e94d6bdbc09f09bfd9dc729059ad93d0e7390b5a73efe19f8861c", size = 10640713, upload-time = "2026-04-24T18:17:22.841Z" },
-    { url = "https://files.pythonhosted.org/packages/ae/08/a317bc231fb9e7b93e4ef3089501e51922ff88d6936ce5cf870c4fe55419/ruff-0.15.12-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:e3bcd123364c3770b8e1b7baaf343cc99a35f197c5c6e8af79015c666c423a6c", size = 11069267, upload-time = "2026-04-24T18:17:30.105Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/a4/f828e9718d3dce1f5f11c39c4f65afd32783c8b2aebb2e3d259e492c47bd/ruff-0.15.12-py3-none-macosx_11_0_arm64.whl", hash = "sha256:fe87510d000220aa1ed530d4448a7c696a0cae1213e5ec30e5874287b66557b5", size = 10397182, upload-time = "2026-04-24T18:17:07.177Z" },
-    { url = "https://files.pythonhosted.org/packages/71/e0/3310fc6d1b5e1fdea22bf3b1b807c7e187b581021b0d7d4514cccdb5fb71/ruff-0.15.12-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:84a1630093121375a3e2a95b4a6dc7b59e2b4ee76216e32d81aae550a832d002", size = 10758012, upload-time = "2026-04-24T18:16:55.759Z" },
-    { url = "https://files.pythonhosted.org/packages/11/c1/a606911aee04c324ddaa883ae418f3569792fd3c4a10c50e0dd0a2311e1e/ruff-0.15.12-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:fb129f40f114f089ebe0ca56c0d251cf2061b17651d464bb6478dc01e69f11f5", size = 10447479, upload-time = "2026-04-24T18:16:51.677Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/68/4201e8444f0894f21ab4aeeaee68aa4f10b51613514a20d80bd628d57e88/ruff-0.15.12-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:b0c862b172d695db7598426b8af465e7e9ac00a3ea2a3630ee67eb82e366aaa6", size = 11234040, upload-time = "2026-04-24T18:17:16.529Z" },
-    { url = "https://files.pythonhosted.org/packages/34/ff/8a6d6cf4ccc23fd67060874e832c18919d1557a0611ebef03fdb01fff11e/ruff-0.15.12-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:2849ea9f3484c3aca43a82f484210370319e7170df4dfe4843395ddf6c57bc33", size = 12087377, upload-time = "2026-04-24T18:17:04.944Z" },
-    { url = "https://files.pythonhosted.org/packages/85/f6/c669cf73f5152f623d34e69866a46d5e6185816b19fcd5b6dd8a2d299922/ruff-0.15.12-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:9e77c7e51c07fe396826d5969a5b846d9cd4c402535835fb6e21ce8b28fef847", size = 11367784, upload-time = "2026-04-24T18:17:25.409Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/39/c61d193b8a1daaa8977f7dea9e8d8ba866e02ea7b65d32f6861693aa4c12/ruff-0.15.12-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:83b2f4f2f3b1026b5fb449b467d9264bf22067b600f7b6f41fc5958909f449d0", size = 11344088, upload-time = "2026-04-24T18:17:12.258Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/8d/49afab3645e31e12c590acb6d3b5b69d7aab5b81926dbaf7461f9441f37a/ruff-0.15.12-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:9ba3b8f1afd7e2e43d8943e55f249e13f9682fde09711644a6e7290eb4f3e339", size = 11271770, upload-time = "2026-04-24T18:17:02.457Z" },
-    { url = "https://files.pythonhosted.org/packages/46/06/33f41fe94403e2b755481cdfb9b7ef3e4e0ed031c4581124658d935d52b4/ruff-0.15.12-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:e852ba9fdc890655e1d78f2df1499efbe0e54126bd405362154a75e2bde159c5", size = 10719355, upload-time = "2026-04-24T18:17:27.648Z" },
-    { url = "https://files.pythonhosted.org/packages/0d/59/18aa4e014debbf559670e4048e39260a85c7fcee84acfd761ac01e7b8d35/ruff-0.15.12-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:dd8aed930da53780d22fc70bdf84452c843cf64f8cb4eb38984319c24c5cd5fd", size = 10462758, upload-time = "2026-04-24T18:17:32.347Z" },
-    { url = "https://files.pythonhosted.org/packages/25/e7/cc9f16fd0f3b5fddcbd7ec3d6ae30c8f3fde1047f32a4093a98d633c6570/ruff-0.15.12-py3-none-musllinux_1_2_i686.whl", hash = "sha256:01da3988d225628b709493d7dc67c3b9b12c0210016b08690ef9bd27970b262b", size = 10953498, upload-time = "2026-04-24T18:17:20.674Z" },
-    { url = "https://files.pythonhosted.org/packages/72/7a/a9ba7f98c7a575978698f4230c5e8cc54bbc761af34f560818f933dafa0c/ruff-0.15.12-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:9cae0f92bd5700d1213188b31cd3bdd2b315361296d10b96b8e2337d3d11f53e", size = 11447765, upload-time = "2026-04-24T18:17:09.755Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/f9/0ae446942c846b8266059ad8a30702a35afae55f5cdc54c5adf8d7afdc27/ruff-0.15.12-py3-none-win32.whl", hash = "sha256:d0185894e038d7043ba8fd6aee7499ece6462dc0ea9f1e260c7451807c714c20", size = 10657277, upload-time = "2026-04-24T18:17:18.591Z" },
-    { url = "https://files.pythonhosted.org/packages/33/f1/9614e03e1cdcbf9437570b5400ced8a720b5db22b28d8e0f1bda429f660d/ruff-0.15.12-py3-none-win_amd64.whl", hash = "sha256:c87a162d61ab3adca47c03f7f717c68672edec7d1b5499e652331780fe74950d", size = 11837758, upload-time = "2026-04-24T18:17:00.113Z" },
-    { url = "https://files.pythonhosted.org/packages/c0/98/6beb4b351e472e5f4c4613f7c35a5290b8be2497e183825310c4c3a3984b/ruff-0.15.12-py3-none-win_arm64.whl", hash = "sha256:a538f7a82d061cee7be55542aca1d86d1393d55d81d4fcc314370f4340930d4f", size = 11120821, upload-time = "2026-04-24T18:16:57.979Z" },
+    { url = "https://files.pythonhosted.org/packages/fa/9d/3a45c05b8ab04b4705989de70a79008e27c8003296a0feaee9edc18dd7e9/ruff-0.15.15-py3-none-linux_armv6l.whl", hash = "sha256:cf93e5388f412e1b108b1f8b34a6e036b70fe8aff89393befad96fe48670311b", size = 10710652, upload-time = "2026-05-28T14:16:06.701Z" },
+    { url = "https://files.pythonhosted.org/packages/05/66/da974431624bf3b49f6ee1f9543c02d929ff1cba78b0d5a79c38cf21f744/ruff-0.15.15-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:ac5a646d1f6a7dadd5d50842dae2c1f9862ac887ef5d1b1375e02def791fde6e", size = 11096615, upload-time = "2026-05-28T14:16:23.313Z" },
+    { url = "https://files.pythonhosted.org/packages/8c/09/7443452e5d290230a712103f2fdceeef7184f3ec99a2bd01c8be78aaceb5/ruff-0.15.15-py3-none-macosx_11_0_arm64.whl", hash = "sha256:77d955a431430c66f72dd94e379ad38a16daea3d25094872ac4edf9e797be530", size = 10436683, upload-time = "2026-05-28T14:16:40.974Z" },
+    { url = "https://files.pythonhosted.org/packages/53/01/d330c26a57fa4f3943a14424904027428315b700fe4d14a84bb123a649e5/ruff-0.15.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7614ee79c69788cf6cedd568069ade9cecc22a1ad20494efe8d0c9ebb4b622d4", size = 10769064, upload-time = "2026-05-28T14:16:28.905Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/85/cc8770f8bdff541b1da8392d1634141fe4a0e3f4ee596605959b7906c27f/ruff-0.15.15-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:3cdb1679e06a1f6b47bc384714ae96f6e2fb65ca441eb78c43d2ca554176ce1f", size = 10511987, upload-time = "2026-05-28T14:16:43.732Z" },
+    { url = "https://files.pythonhosted.org/packages/7c/29/8c190c1472b63013583ba391f3342036e02010544c1270455ed8e519bdf3/ruff-0.15.15-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:2728b93d7b23a603ea2c0ac6eb73d760bd38ec9de35f35fb41e18f7a3fee7622", size = 11275100, upload-time = "2026-05-28T14:16:55.244Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/6b/7e145ce2cc8e63d6834eca03d83a0e18d121def5c69f91b4cf4011ed4879/ruff-0.15.15-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:be582fcc0db438902c7792b08d6ddf6c9b9e21addaa10092c2c741cfb09e5a45", size = 12176903, upload-time = "2026-05-28T14:16:14.368Z" },
+    { url = "https://files.pythonhosted.org/packages/80/a3/d5974637f68e451f7fadf015cf3101d1cd7d8ba5027cffe0b9e3826ebe6b/ruff-0.15.15-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:7aa77465b8ecaf1a27bea098d696f7fed5e1eccbd10b321b682d6de586ae5627", size = 11404550, upload-time = "2026-05-28T14:16:20.138Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/1c/e6e5e568f22be4fb05d6244234aba384c06b451252453b821e1a529263cf/ruff-0.15.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:48decfa11d740de4889de623be1463308346312f2409a56e24aa280c86162dc4", size = 11382027, upload-time = "2026-05-28T14:16:46.615Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/01/170921b49fcd2e8858825593f91cf7146c3e40a5c3e6df763e4bb0484dde/ruff-0.15.15-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:a5015088452ca0081387063649ec67f06d3d1d6b8b936a1f836b5e9657ecd48c", size = 11366041, upload-time = "2026-05-28T14:16:26.247Z" },
+    { url = "https://files.pythonhosted.org/packages/87/54/a7bad711d7de93254e15e06a4c375b89a03d18de45d3e5dcc86a4472fb1a/ruff-0.15.15-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:f5294aab6356c81600fcdea3a62bb1b924dfd5e91767c12318d3f68f86af57cd", size = 10741795, upload-time = "2026-05-28T14:16:17.11Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/31/38c075963668f8b41c6914ee0f6f318727fbe30ab9145cb29e6df464c5fa/ruff-0.15.15-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:db5bd4d802415cca656dc1616070b725952d6ae95eb5d4831e49fbd94a38f75f", size = 10511117, upload-time = "2026-05-28T14:16:31.767Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/96/6ff689e1f7e375d1d97075eca022f74c2bab59554a432fe4d2e6f091986a/ruff-0.15.15-py3-none-musllinux_1_2_i686.whl", hash = "sha256:587a6278ed42059191c1a466e490bd7930fb50bd2e255398bc29616c895a61cb", size = 10994867, upload-time = "2026-05-28T14:16:35.149Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/c2/5dce0ab9f92a8d534fa62b9bf9caca3eddb8c1a81b616f5e195ada4f0d6e/ruff-0.15.15-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:df0c1c084f5f4be9812f61518a45c440d3c30d69ce4bf6c5270e66d38338f02a", size = 11482101, upload-time = "2026-05-28T14:16:49.598Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/c0/1003b60edd697c649faf61f1a34094b1abb38fb3d1181e3f895781250a08/ruff-0.15.15-py3-none-win32.whl", hash = "sha256:29428ea79694afbe756d45fd59b36f22b6b020dc0443cf7de0173046236964b9", size = 10716774, upload-time = "2026-05-28T14:16:52.337Z" },
+    { url = "https://files.pythonhosted.org/packages/02/a8/1269eddd6945a06c23f055ef7848886e37cf9d6a8bebb386a3115f01470c/ruff-0.15.15-py3-none-win_amd64.whl", hash = "sha256:8df0323902e15e24bc4bf246da830573d3cf3352bd0b9a164eab335d111ff4a4", size = 11868463, upload-time = "2026-05-28T14:16:11.333Z" },
+    { url = "https://files.pythonhosted.org/packages/4e/b2/920464c907b191e37469d477a1aa8bc048b8f36c4c1610dfa4ab87b39e18/ruff-0.15.15-py3-none-win_arm64.whl", hash = "sha256:3c8ceca6792f38196b8f589bc92eccd03eef286602da92e5dc05cc42ef6441b7", size = 11138498, upload-time = "2026-05-28T14:16:38.425Z" },
 ]

 [[package]]
 name = "stapler"
-version = "1.2.3"
+version = "1.4.2"
 source = { editable = "." }
 dependencies = [
    { name = "requests" },
@@ -212,51 +221,54 @@ dependencies = [
 [package.dev-dependencies]
 dev = [
    { name = "coverage" },
+    { name = "parameterized" },
    { name = "pytest" },
    { name = "ruff" },
    { name = "ty" },
 ]

 [package.metadata]
-requires-dist = [{ name = "requests", specifier = ">=2.33.1" }]
+requires-dist = [{ name = "requests", specifier = ">=2.34.2,<3.0.0" }]

 [package.metadata.requires-dev]
 dev = [
-    { name = "coverage", specifier = ">=7.13.5" },
-    { name = "pytest", specifier = ">=9.0.3" },
-    { name = "ruff", specifier = ">=0.15.10" },
-    { name = "ty", specifier = ">=0.0.29" },
+    { name = "coverage", specifier = ">=7.14.0,<8.0.0" },
+    { name = "parameterized", specifier = ">=0.9.0,<0.10.0" },
+    { name = "pytest", specifier = ">=9.0.3,<10.0.0" },
+    { name = "ruff", specifier = ">=0.15.14,<0.16.0" },
+    { name = "ty", specifier = ">=0.0.39,<0.0.40" },
 ]

 [[package]]
 name = "ty"
-version = "0.0.34"
+version = "0.0.39"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c4/69/e24eefe2c35c0fdbdec9b60e162727af669bb76d64d993d982eb67b24c38/ty-0.0.34.tar.gz", hash = "sha256:a6efe66b0f13c03a65e6c72ec9abfe2792e2fd063c74fa67e2c4930e29d661be", size = 5585933, upload-time = "2026-05-01T23:06:46.388Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d0/8d/7b5c74dc287fbcb37bae9853cec13bf44717c1735298500e4aeba31579a9/ty-0.0.39.tar.gz", hash = "sha256:f750277e76a01ecd86185960eca73823c26a53c51103568d56d4d904575159fd", size = 5702365, upload-time = "2026-05-22T21:09:56.403Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/83/7b/8b85003d6639ef17a97dcbb31f4511cfe78f1c81a964470db100c8c883e7/ty-0.0.34-py3-none-linux_armv6l.whl", hash = "sha256:9ecc3d14f07a95a6ceb88e07f8e62358dbd37325d3d5bd56da7217ff1fef7fb8", size = 11067094, upload-time = "2026-05-01T23:06:21.133Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/25/b0098f65b020b015c40567c763fc66fffbec88b2ba6f584bca1e92f05ebb/ty-0.0.34-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:0dccffd8a9d02321cd2dee3249df205e26d62694e741f4eeca36b157fd8b419f", size = 10840909, upload-time = "2026-05-01T23:06:18.409Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/55/5e4adcf7d2a1006b844903b27cb81244a9b748d850433a46a6c21776c401/ty-0.0.34-py3-none-macosx_11_0_arm64.whl", hash = "sha256:b0ea47a2998e167ab3b21d2f4b5309a9cf33c297809f6d7e3e753252223174d0", size = 10279378, upload-time = "2026-05-01T23:06:37.962Z" },
-    { url = "https://files.pythonhosted.org/packages/4d/91/f537dca0db8fe2558e8ab04d8941d687b384fcc1df5eb9023b2db75ac26c/ty-0.0.34-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:8b37da00b41a118a459ae56d8947e70651073fb33ebfbceb820e4a10b22d5023", size = 10817423, upload-time = "2026-05-01T23:06:26.247Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/c4/55a3ad1da2815af1009bdc1b8c90dc11a364cd314e4b48c5128ba9d38859/ty-0.0.34-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:81cbbb93c2342fe3de43e625d3a9eb149633e9f485e816ebf6395d08685355d8", size = 10851826, upload-time = "2026-05-01T23:06:24.198Z" },
-    { url = "https://files.pythonhosted.org/packages/ce/8c/9c7606af22d73fb43ea4369472d9c66ece11231be73b0efe8e3c61655559/ty-0.0.34-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:4c5b4dea1594a021289e172582df9cde7089dce14b276fc650e7b212b1772e12", size = 11356318, upload-time = "2026-05-01T23:06:51.139Z" },
-    { url = "https://files.pythonhosted.org/packages/20/54/bb423f663721ab4138b216425c6b55eaefd3a068243b24d6d8fe988f4e13/ty-0.0.34-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:030fb00aa2d2a5b5ae9d9183d574e0c82dae80566700a7490c43669d8ece40cd", size = 11902968, upload-time = "2026-05-01T23:06:35.82Z" },
-    { url = "https://files.pythonhosted.org/packages/b6/22/01122b21ab6b534a2f618c6bbe5f1f7f49fd56f4b2ec8887cd6d40d08fb3/ty-0.0.34-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5ae9555e24e36c63a8218e037a5a63f15579eb6aa94f41017e57cd41d335cfb5", size = 11548860, upload-time = "2026-05-01T23:06:42.155Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/50/86008b1392ec64bed1957bbcc7aaa43b466b50dfc91bb131841c21d7c5c3/ty-0.0.34-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:99eb23df9ed129fc26d1ab00d6f0b8dfe5253b09c2ac6abdb11523fa70d67f10", size = 11457097, upload-time = "2026-05-01T23:06:53.477Z" },
-    { url = "https://files.pythonhosted.org/packages/92/3e/4558b2296963ba99c58d8409c57d7db4f3061b656c3613cb21c02c1ef4c2/ty-0.0.34-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:85de45382016eceae69e104815eb2cfa200787df104002e262a86cbd43ed2c02", size = 10798192, upload-time = "2026-05-01T23:06:40.004Z" },
-    { url = "https://files.pythonhosted.org/packages/76/bf/650d24402be2ef678528d60caac1d9477a40fc37e3792ecef07834fd7a4a/ty-0.0.34-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:14cb575fb8fa5131f5129d100cfe23c1575d23faf5dfc5158432749a3e38c9b5", size = 10890390, upload-time = "2026-05-01T23:06:33.076Z" },
-    { url = "https://files.pythonhosted.org/packages/5c/ef/ccd2ca13906079f7935fd7e067661b24233017f57d987d51d6a121d85bb5/ty-0.0.34-py3-none-musllinux_1_2_i686.whl", hash = "sha256:c6fc0b69d8450e6910ba9db34572b959b81329a97ae273c391f70e9fb6c1aade", size = 11031564, upload-time = "2026-05-01T23:06:55.812Z" },
-    { url = "https://files.pythonhosted.org/packages/ba/2d/d27b72005b6f43599e3bcabab0d7135ac0c230b7a307bb99f9eea02c1cda/ty-0.0.34-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:30dfcec2f0fde3993f4f912ed0e057dcbebc8615299f610a4c2ddb7b5a3e1e06", size = 11553430, upload-time = "2026-05-01T23:06:31.096Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/12/20812e1ad930b8d4af70eebf19ad23cff6e31efcfa613ef884531fcdbaa1/ty-0.0.34-py3-none-win32.whl", hash = "sha256:97b77ddf007271b812a313a8f0a14929bc5590958433e1fb83ef585676f53342", size = 10436048, upload-time = "2026-05-01T23:06:49.108Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/6a/afa095c5987868fbda27c0f731146ac8e3d07b357adfa83daccaee5b1a16/ty-0.0.34-py3-none-win_amd64.whl", hash = "sha256:1f543968accb952705134028d1fda8656882787dbbc667ad4d6c3ba23791d604", size = 11462526, upload-time = "2026-05-01T23:06:28.514Z" },
-    { url = "https://files.pythonhosted.org/packages/63/8f/bf041a06260d77662c0605e56dacfe90b786bf824cbe1aed238d15fe5e84/ty-0.0.34-py3-none-win_arm64.whl", hash = "sha256:ea09108cbcb16b6b06d7596312b433bf49681e78d30e4dc7fb3c1b248a95e09a", size = 10846945, upload-time = "2026-05-01T23:06:44.428Z" },
+    { url = "https://files.pythonhosted.org/packages/08/17/9b89802c26d12d0f7a27bc25d4066d941d42891e8898f9f26499f0067e32/ty-0.0.39-py3-none-linux_armv6l.whl", hash = "sha256:c1bb7ac70f1f7d70cc6655fd96558039e4562b10f489fa49c7ebfd5fcee73ad1", size = 11360431, upload-time = "2026-05-22T21:09:18.689Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/c6/663ded50e823dbf9fb9d002eca46b7cb1fb2c72b744b84f22ce732a0ee0b/ty-0.0.39-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:3435b64c1e59c14c9aa39c20cc018823937cd38d55db853e74d95b8f420569b0", size = 11096281, upload-time = "2026-05-22T21:09:15.383Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/ae/5d38ba9a6456ff4c78d212cf464fd8b9a25d8118465197b0b2dc891c0b19/ty-0.0.39-py3-none-macosx_11_0_arm64.whl", hash = "sha256:5f136377ce46c73677701a9e1ad730bf72f699bcec046e422eb79d0886cac3ab", size = 10529674, upload-time = "2026-05-22T21:09:46.471Z" },
+    { url = "https://files.pythonhosted.org/packages/be/6f/43638cb8106445d3c8817256a0731cde9dd7b6a53ae2e881294bc1930ca3/ty-0.0.39-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:36b65fb0cc17f03e851d40e210d420be94ab8bc52d041328ad1e45f616036a61", size = 11055561, upload-time = "2026-05-22T21:09:36.981Z" },
+    { url = "https://files.pythonhosted.org/packages/91/17/95e62cf4458527ce78dc386eba18f8b10c3fb64cd8c9e7e59b262ff6029d/ty-0.0.39-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:4967967bfadf3860ff84c3fccdbaec8edf8aa20d0d727521084733d853de6657", size = 11127185, upload-time = "2026-05-22T21:09:31.395Z" },
+    { url = "https://files.pythonhosted.org/packages/4e/c0/93666c213db5c71ab1b1f1a0db5f66bf8c7c0e0b0bf59859f5da8f0b3c36/ty-0.0.39-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:9e10ecb1297099ddf9a1f054f8bd921d1863ce85fb819a3c96ed27865a1ba6ed", size = 11608459, upload-time = "2026-05-22T21:09:12.862Z" },
+    { url = "https://files.pythonhosted.org/packages/79/85/3b26585afc8b50230d6464bb0642feef4fab3f847e38b1f0ffa971a81446/ty-0.0.39-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:9b19cca70e465d71b0510656343883d62372bbe74b7845cae7c0e701d6d5264b", size = 12177101, upload-time = "2026-05-22T21:09:40.519Z" },
+    { url = "https://files.pythonhosted.org/packages/49/4a/1039e4f6afc576dc1c3a4d22a6478904a1ad3766597cd0b93c077ab9dfce/ty-0.0.39-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:56c6704b01b9b3d80ff26b2918423b742516d1e469bef830e9254dcedc9185bf", size = 11827815, upload-time = "2026-05-22T21:09:49.89Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/c5/4688652870e350a76a8157f7ffb59ad54f37d5d10725aa7076f66ac94ec8/ty-0.0.39-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:40b7840ff46764b6a6757f4ade1cd0530fc3e8a0b435ca93e7602360e4cb90b6", size = 11694429, upload-time = "2026-05-22T21:09:21.568Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/72/8a1c4e823bb5bdc935a1c8140e100304e36a68a4139592f170aa9736fdb7/ty-0.0.39-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:1c62a3a87ce26b50819f0dbf03bd95f23f19eeb87bbc7aa732ec64277c77f1aa", size = 11869846, upload-time = "2026-05-22T21:09:28.053Z" },
+    { url = "https://files.pythonhosted.org/packages/17/9f/cf982457b861ae22d657c5dcdbc631199f7f90264279db1d17230dfbc3ff/ty-0.0.39-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:f8c34bc81a9c3516e49904e9d8330aac385377cca98390193ea02b903a40fcf0", size = 11029763, upload-time = "2026-05-22T21:09:06.791Z" },
+    { url = "https://files.pythonhosted.org/packages/46/c9/95b64f6d43ae6e8f0b7e13dacf9c196d35819af22b1924171fba31383156/ty-0.0.39-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:66f5ab11586a64e79cb692ad685ee5469325c31b5f30bd3554f52f36dbe28cc4", size = 11146761, upload-time = "2026-05-22T21:09:10.178Z" },
+    { url = "https://files.pythonhosted.org/packages/52/69/0a89cfb06f7632a05bf56c78e0affb4a40f81759e275376cea75c9c5abe9/ty-0.0.39-py3-none-musllinux_1_2_i686.whl", hash = "sha256:e8d89732bcbbcb091f439e556dfc4932f198b118b47d5b85212c60662099670e", size = 11281843, upload-time = "2026-05-22T21:09:34.234Z" },
+    { url = "https://files.pythonhosted.org/packages/0e/53/64c4a27067a46643fea2b3fcf21a8a2f838d91a65ffdd14f2e82945b9538/ty-0.0.39-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:eceb6c91dcd05a231119f82abdd9aa337513de23ca6ac990bc44f88791dc1799", size = 11792477, upload-time = "2026-05-22T21:09:24.923Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/e8/02f4dd4a12bcdbda0006f9c7ff3b99a4be06bd0d257d3bd4a5b66de074e6/ty-0.0.39-py3-none-win32.whl", hash = "sha256:891c3262314dbc80bf3e872634d23dd216306945daa9a9fcc206ce5ed21ac4c9", size = 10615377, upload-time = "2026-05-22T21:09:43.167Z" },
+    { url = "https://files.pythonhosted.org/packages/b5/5a/aaeb22faa8d4dae90a287d4c3636c671edcff3b99be5f4fc8b79ad71eef6/ty-0.0.39-py3-none-win_amd64.whl", hash = "sha256:ba7f2d54452535419e90f6f03ff39282999e87b43c21c00559f6d7ad711a36d5", size = 11710711, upload-time = "2026-05-22T21:09:53.179Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/17/ae7339651bfcaa5f54698c8c70eaf5031baa400ecb67baec31d03a56cbd4/ty-0.0.39-py3-none-win_arm64.whl", hash = "sha256:eb4cf0fefbbfedf9a352597bb2431ebdcb7eb3a595c0f825f228e897a0ec285d", size = 11081409, upload-time = "2026-05-22T21:09:03.741Z" },
 ]

 [[package]]
 name = "urllib3"
-version = "2.6.3"
+version = "2.7.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c7/24/5f1b3bdffd70275f6661c76461e25f024d5a38a46f04aaca912426a2b1d3/urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed", size = 435556, upload-time = "2026-01-07T16:24:43.925Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/39/08/aaaad47bc4e9dc8c725e68f9d04865dbcb2052843ff09c97b08904852d84/urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4", size = 131584, upload-time = "2026-01-07T16:24:42.685Z" },
+    { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
 ]
Author	SHA1	Message	Date
klemek	24b29f5716	chore: release 1.4.2 Python Lint CI / ruff (push) Successful in 2m37s Details Python Lint CI / ruff-format-check (push) Successful in 2m23s Details Docker CI / docker-build (push) Successful in 3m40s Details Python Lint CI / ty (push) Successful in 3m19s Details Python Test CI / coverage (push) Successful in 2m20s Details	2026-06-03 00:13:05 +02:00
klemek	fa0fab0f15	fix(cert_manager): indicate no email in certbot	2026-06-03 00:12:03 +02:00
klemek	cc3bd48ddf	fix(cert_manager): typo in valid_host	2026-06-03 00:00:48 +02:00
klemek	48b52f9fea	perf(cert_manager): slightly faster self signed generation Python Lint CI / ruff-format-check (push) Successful in 1m10s Details Python Lint CI / ruff (push) Failing after 1m11s Details Docker CI / docker-build (push) Successful in 2m17s Details Python Lint CI / ty (push) Failing after 1m56s Details Python Test CI / coverage (push) Failing after 4m38s Details	2026-06-02 23:54:51 +02:00
klemek	2040b709d3	perf(registry): compute host-based dict Python Lint CI / ruff-format-check (push) Successful in 1m11s Details Python Lint CI / ruff (push) Successful in 1m11s Details Python Lint CI / ty (push) Successful in 1m30s Details Docker CI / docker-build (push) Successful in 2m31s Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 23:51:37 +02:00
klemek	e0c8eb1724	fix(params): isdecimal instead of isnumeric Python Lint CI / ruff (push) Successful in 3m42s Details Python Lint CI / ruff-format-check (push) Successful in 3m51s Details Python Lint CI / ty (push) Successful in 1m13s Details Docker CI / docker-build (push) Successful in 5m28s Details Python Test CI / coverage (push) Successful in 3m31s Details	2026-06-02 23:41:12 +02:00
klemek	d84c5911b0	fix(handlers): handle non integer content-length Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 23:40:12 +02:00
klemek	2bc2593bc9	fix(registry): race condition handled with page 'ready' Python Lint CI / ruff (push) Successful in 1m0s Details Python Lint CI / ty (push) Successful in 1m0s Details Python Lint CI / ruff-format-check (push) Successful in 1m0s Details Docker CI / docker-build (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 23:36:35 +02:00
klemek	81b3007efd	fix(token_manager): race condition for file stat Python Lint CI / ruff-format-check (push) Successful in 9m32s Details Python Lint CI / ruff (push) Successful in 9m33s Details Python Lint CI / ty (push) Successful in 9m18s Details Docker CI / docker-build (push) Successful in 10m35s Details Python Test CI / coverage (push) Successful in 2m20s Details	2026-06-02 23:08:29 +02:00
klemek	c3131acc88	refactor(token_manager): use pbkdf2 hmac Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 23:07:30 +02:00
klemek	60b6b0e592	fix(data_dir): empty dir check if path exists before remove Python Lint CI / ty (push) Successful in 2m7s Details Docker CI / docker-build (push) Successful in 2m59s Details Python Lint CI / ruff-format-check (push) Successful in 2m10s Details Python Lint CI / ruff (push) Successful in 2m10s Details Python Test CI / coverage (push) Successful in 6m32s Details	2026-06-02 22:41:31 +02:00
klemek	247dd7dda3	fix(handlers): keep proxy and redirect case Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 22:37:23 +02:00
klemek	d2a656a839	fix(handlers): positive content-length check Python Lint CI / ruff (push) Successful in 1m8s Details Python Lint CI / ty (push) Successful in 1m8s Details Python Lint CI / ruff-format-check (push) Successful in 1m8s Details Docker CI / docker-build (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-06-02 22:35:03 +02:00
klemek	b234504b49	fix(handlers): check certbot challenge	2026-06-02 22:35:03 +02:00
klemek	66f7879c0f	fix(cert_manager): check host on SNI callback Python Lint CI / ruff (push) Successful in 1m22s Details Python Lint CI / ruff-format-check (push) Successful in 1m23s Details Python Lint CI / ty (push) Successful in 1m23s Details Docker CI / docker-build (push) Successful in 2m27s Details Python Test CI / coverage (push) Successful in 3m4s Details	2026-06-02 22:05:16 +02:00
klemek	ea63c4eeb9	chore: release 1.4.1 Python Lint CI / ruff (push) Successful in 3m45s Details Docker CI / docker-build (push) Successful in 4m46s Details Python Lint CI / ruff-format-check (push) Successful in 1m58s Details Python Lint CI / ty (push) Successful in 4m34s Details Python Test CI / coverage (push) Successful in 4m1s Details	2026-05-26 11:06:52 +02:00
klemek	8b9ee57260	build(uv): lock bounds Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-05-26 11:06:35 +02:00
klemek	60e70ea0c0	fix: hide python version Python Lint CI / ruff (push) Successful in 58s Details Python Lint CI / ruff-format-check (push) Successful in 1m0s Details Python Lint CI / ty (push) Successful in 1m0s Details Docker CI / docker-build (push) Successful in 2m52s Details Python Test CI / coverage (push) Successful in 2m30s Details	2026-05-26 10:58:16 +02:00
klemek	9cefd6657a	feat: send HSTS header	2026-05-26 10:58:05 +02:00
klemek	1e5f3ba986	chore: release 1.4.0 Python Lint CI / ruff (push) Successful in 2m16s Details Docker CI / docker-build (push) Successful in 3m8s Details Python Lint CI / ruff-format-check (push) Successful in 2m33s Details Python Lint CI / ty (push) Successful in 5m13s Details Python Test CI / coverage (push) Successful in 5m6s Details	2026-05-11 17:26:42 +02:00
klemek	d3d98bd9b2	feat: handle HEAD requests	2026-05-11 17:26:21 +02:00
klemek	b6d751a97a	chore: version 1.3.2 Docker CI / docker-build (push) Successful in 3m4s Details Python Lint CI / ruff (push) Successful in 2m0s Details Python Lint CI / ruff-format-check (push) Successful in 2m0s Details Python Lint CI / ty (push) Successful in 3m24s Details Python Test CI / coverage (push) Successful in 2m41s Details	2026-05-09 12:27:36 +02:00
klemek	3f0490ebc9	fix: use servername callback instead of sni callback Python Lint CI / ruff (push) Successful in 1m4s Details Python Lint CI / ruff-format-check (push) Successful in 1m4s Details Python Lint CI / ty (push) Successful in 1m5s Details Docker CI / docker-build (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-05-09 12:25:36 +02:00
klemek	04360b42d8	chore: release 1.3.1 Python Lint CI / ruff (push) Successful in 2m18s Details Docker CI / docker-build (push) Successful in 3m2s Details Python Lint CI / ruff-format-check (push) Successful in 1m31s Details Python Lint CI / ty (push) Successful in 2m17s Details Python Test CI / coverage (push) Successful in 2m5s Details	2026-05-06 16:01:26 +02:00
klemek	4edcc6acc7	fix: http/1.1 and force close connection	2026-05-06 16:01:15 +02:00
klemek	d9b559d13d	chore: release 1.3.0 Python Lint CI / ruff (push) Successful in 2m51s Details Docker CI / docker-build (push) Successful in 3m23s Details Python Lint CI / ruff-format-check (push) Successful in 1m50s Details Python Lint CI / ty (push) Successful in 3m33s Details Python Test CI / coverage (push) Successful in 3m4s Details	2026-05-06 14:32:00 +02:00
klemek	b0d98dd48b	feat: add robots.txt and favicon by default	2026-05-06 14:31:33 +02:00
klemek	64f45e9779	fix: dont init certificates with self-signed by default	2026-05-06 14:17:34 +02:00
klemek	2dd48042e7	chore: release 1.2.8 Python Lint CI / ruff (push) Successful in 1m57s Details Python Lint CI / ruff-format-check (push) Successful in 1m52s Details Docker CI / docker-build (push) Successful in 3m1s Details Python Lint CI / ty (push) Successful in 2m47s Details Python Test CI / coverage (push) Successful in 1m49s Details	2026-05-06 14:00:40 +02:00
klemek	74ceb0f677	fix: better host detection and cerbot only on valid hosts	2026-05-06 14:00:34 +02:00
klemek	e7abe7924f	chore: release 1.2.7 Python Lint CI / ruff (push) Successful in 1m27s Details Python Lint CI / ruff-format-check (push) Successful in 1m19s Details Docker CI / docker-build (push) Successful in 1m43s Details Python Lint CI / ty (push) Successful in 4m22s Details Python Test CI / coverage (push) Successful in 4m1s Details	2026-05-06 10:50:01 +02:00
klemek	8f7e4c8a91	fix: add debug request count Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-05-06 10:49:42 +02:00
klemek	ab6879d54f	chore: release 1.2.6 Python Lint CI / ruff (push) Successful in 3m52s Details Python Lint CI / ruff-format-check (push) Successful in 1m41s Details Docker CI / docker-build (push) Successful in 4m7s Details Python Lint CI / ty (push) Successful in 2m11s Details Python Test CI / coverage (push) Successful in 2m13s Details	2026-05-06 09:36:47 +02:00
klemek	8c93b9a015	fix: dont log BrokenPipeError and ConnectionResetError	2026-05-06 09:36:31 +02:00
klemek	f77e826490	chore: release 1.2.5 Python Lint CI / ruff (push) Successful in 2m59s Details Python Lint CI / ruff-format-check (push) Successful in 1m27s Details Docker CI / docker-build (push) Successful in 3m44s Details Python Lint CI / ty (push) Successful in 1m21s Details Python Test CI / coverage (push) Successful in 1m34s Details	2026-05-05 15:31:13 +02:00
klemek	fec5857995	tests: more coverage Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Lint CI / ty (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details	2026-05-05 15:30:51 +02:00
klemek	b1ef00b437	fix: add request timeout	2026-05-05 15:09:54 +02:00
klemek	09ea29d6af	fix: better string sanitizing	2026-05-05 15:09:39 +02:00
klemek	8855fd0b01	fix: force connection close	2026-05-05 15:09:20 +02:00
klemek	8854cb393c	fix: send connection: close each request	2026-05-05 15:09:08 +02:00
klemek	5e5147251f	chore: release 1.2.4 Python Lint CI / ruff (push) Successful in 1m8s Details Docker CI / docker-build (push) Successful in 2m2s Details Python Lint CI / ruff-format-check (push) Successful in 1m40s Details Python Lint CI / ty (push) Successful in 1m44s Details Python Test CI / coverage (push) Successful in 2m2s Details	2026-05-04 23:02:32 +02:00
klemek	3fe33cb348	fix: sanitize requestline Docker CI / docker-build (push) Has been cancelled Details Python Lint CI / ruff (push) Has been cancelled Details Python Lint CI / ruff-format-check (push) Has been cancelled Details Python Test CI / coverage (push) Has been cancelled Details Python Lint CI / ty (push) Successful in 55s Details	2026-05-04 23:02:15 +02:00