@ai-ecoverse/slicc-kernel 1.178.0 → 1.178.1

package/dist/node.js

@@ -3709,7 +3709,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.178.0" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.178.1" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -18407,6 +18407,9 @@ function enableNetwork(net, options) {
   return () => proxy;
 }
 
+// src/kernel/net/transport.ts
+var FORBIDDEN_HEADER = "forbidden-header";
+
 // src/kernel/net/ws-syscalls.ts
 var WS_OPS = [
   "net-ws-open",
@@ -18706,6 +18709,9 @@ var HttpHandles = class {
     if (e instanceof PlaceholderRefused) {
       return { ok: false, errno: e.code, message: text, detail: "placeholder" };
     }
+    if (e.detail === FORBIDDEN_HEADER) {
+      return { ok: false, errno: "ENOTSUP", message: text, detail: FORBIDDEN_HEADER };
+    }
     const status = e.status;
     if (text === NO_TRANSPORT || typeof status !== "number" || status === 502) {
       const code = codeOf2(e);
@@ -27179,7 +27185,7 @@ var TransportError = class extends Error {
     super(message3);
     this.status = status;
     this.code = code;
-    this.detail = detail === "transport" ? detail : void 0;
+    this.detail = detail === "transport" || detail === FORBIDDEN_HEADER ? detail : void 0;
   }
 };
 function unfollowed2(redirect) {
@@ -35600,6 +35606,44 @@ function sentHeaders(headers, inPage) {
   if (inPage) out.delete("user-agent");
   return out;
 }
+var TRANSPORT_OWN = /* @__PURE__ */ new Set([
+  "accept-encoding",
+  "connection",
+  "content-length",
+  "expect",
+  "host",
+  "keep-alive",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+var PROBE = "http://forbidden-headers.invalid/";
+var filters;
+function platformFilters() {
+  filters ??= !new Request(PROBE, { headers: [["cookie", "probe=1"]] }).headers.has("cookie");
+  return filters;
+}
+function unsendableHeaders(url, names2, hint) {
+  const which = names2.length > 1 ? "headers" : "header";
+  return Object.assign(
+    new Error(
+      `fetch ${url} refused: the page's fetch can't send the request ${which} ${names2.join(", ")}, so it was not sent${hint ? `: ${hint}` : ""}`
+    ),
+    { status: 502, code: "ENOTSUP", detail: FORBIDDEN_HEADER, headers: [...names2] }
+  );
+}
+function refuseUnsendable(url, out, hint) {
+  if (!platformFilters()) return;
+  const kept = new Request(PROBE, { headers: out }).headers;
+  const refused4 = [];
+  for (const name2 of new Set(out.keys())) {
+    if (kept.has(name2)) continue;
+    if (TRANSPORT_OWN.has(name2)) out.delete(name2);
+    else refused4.push(name2);
+  }
+  if (refused4.length > 0) throw unsendableHeaders(url, refused4, hint);
+}
 function streamOf(body) {
   const it = body[Symbol.asyncIterator]();
   return new ReadableStream(
@@ -35628,6 +35672,7 @@ function fetchTransport(options = {}) {
   const headers = options.webSocketHeaders === true;
   const instance = options.redirect ?? "follow";
   const inPage = !options.fetch && "location" in globalThis;
+  const refuse2 = (options.forbiddenHeaders ?? (options.fetch ? "send" : "refuse")) === "refuse";
   return {
     traits: {
       manualRedirects: instance === "manual",
@@ -35640,11 +35685,13 @@ function fetchTransport(options = {}) {
     },
     ...Socket ? { websocket: (request) => openWebSocket(Socket, request, headers) } : {},
     async fetch(request) {
+      const sent = sentHeaders(request.headers, inPage);
+      if (refuse2) refuseUnsendable(request.url, sent, options.hint);
       let response;
       try {
         response = await send2(request.url, {
           method: request.method,
-          headers: sentHeaders(request.headers, inPage),
+          headers: sent,
           ...requestBody(request),
           signal: request.signal,
           redirect: request.redirect ?? instance,
@@ -35745,7 +35792,7 @@ function serveTransport(peer, transport, {
       message: e instanceof Error ? e.message : String(e),
       ...typeof status === "number" ? { status } : {},
       ...typeof code === "string" ? { code } : {},
-      ...detail === "transport" ? { detail } : {}
+      ...detail === "transport" || detail === FORBIDDEN_HEADER ? { detail } : {}
     });
   };
   const uploads = uploadsFor(peer);