@atomic-chat/core 0.5.1

package/dist/downloads/protocol.js

@@ -0,0 +1,153 @@
+/**
+ * HTTP-level rules of the resumable downloader: sidecar names, retry policy, status classification,
+ * `Content-Range` validation and proxy rules. Port of the pure parts of
+ * `src-tauri/src/core/downloads/helpers.rs`.
+ */
+export const MAX_STREAM_RETRIES = 5;
+export const RETRY_BASE_DELAY_MS = 1_000;
+/** Fresh progress that resets the retry counter — the limit is per stall, not per file. */
+export const RETRY_RESET_PROGRESS_BYTES = 1024 * 1024;
+/** Combined progress is reported every 10 MiB per file. */
+export const PROGRESS_EMIT_INTERVAL_BYTES = 10 * 1024 * 1024;
+export const HEAD_TIMEOUT_MS = 30_000;
+export const CONNECT_TIMEOUT_MS = 30_000;
+/** `model.gguf` → `model.gguf.tmp`: the extension is appended, so `a.bin` and `a.gguf` differ. */
+export function sidecarPath(savePath, ext) {
+    return `${savePath}.${ext}`;
+}
+/** Exponential backoff, capped at 2^6 × base. */
+export function retryDelayMs(retryCount, baseMs = RETRY_BASE_DELAY_MS) {
+    return baseMs * 2 ** Math.min(retryCount, 6);
+}
+/**
+ * The stage a retry ladder reports. `attempt` counts requests already made — 0 for the first,
+ * then 1…`MAX_STREAM_RETRIES` before each backoff wait — as the app's `StageReporter` does.
+ */
+export function downloadStage(kind, attempt) {
+    return { kind, attempt, maxAttempts: MAX_STREAM_RETRIES };
+}
+export class DownloadRequestError extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+        this.name = 'DownloadRequestError';
+    }
+}
+/** 408, 429 and 5xx are worth retrying; everything else that is not success is fatal. */
+export function isRetryableStatus(status) {
+    return status === 408 || status === 429 || (status >= 500 && status <= 599);
+}
+/**
+ * Validate the `Content-Range` of a 206 resume response against the offset we asked for and the
+ * size we expect. Any mismatch means "restart from byte 0", never a silent append.
+ */
+export function validateContentRange(header, requestedStart, expectedSize) {
+    const restart = (msg) => new DownloadRequestError('restart', msg);
+    if (header === null || header === undefined)
+        throw restart('Resume response is missing the Content-Range header');
+    const value = header;
+    if (!value.startsWith('bytes '))
+        throw restart(`Resume response has an unsupported Content-Range value: ${value}`);
+    const range = value.slice('bytes '.length);
+    const slash = range.indexOf('/');
+    if (slash < 0)
+        throw restart(`Resume response has an invalid Content-Range value: ${value}`);
+    const bounds = range.slice(0, slash);
+    const total = range.slice(slash + 1);
+    const dash = bounds.indexOf('-');
+    if (dash < 0)
+        throw restart(`Resume response has an invalid Content-Range value: ${value}`);
+    const startStr = bounds.slice(0, dash);
+    const endStr = bounds.slice(dash + 1);
+    if (!/^\d+$/.test(startStr))
+        throw restart('Resume response has an invalid Content-Range start: invalid digit found in string');
+    if (!/^\d+$/.test(endStr))
+        throw restart('Resume response has an invalid Content-Range end: invalid digit found in string');
+    const start = Number(startStr);
+    const end = Number(endStr);
+    if (start !== requestedStart || end < start) {
+        throw restart(`Resume response range does not match the requested offset: requested ${requestedStart}, got ${value}`);
+    }
+    if (total !== '*') {
+        if (!/^\d+$/.test(total))
+            throw restart('Resume response has an invalid Content-Range total: invalid digit found in string');
+        const totalNum = Number(total);
+        if (end >= totalNum)
+            throw restart(`Resume response range exceeds its declared total: ${value}`);
+        if (expectedSize > 0 && totalNum !== expectedSize) {
+            throw restart(`Remote file size changed while resuming: expected ${expectedSize} bytes, server reports ${totalNum} bytes`);
+        }
+    }
+}
+/** Classify a non-206 answer to a ranged request. */
+export function classifyResumeStatus(status, body) {
+    if (status === 200 || status === 416) {
+        return new DownloadRequestError('restart', `Server did not accept resume offset: HTTP status ${status}`);
+    }
+    if (isRetryableStatus(status)) {
+        return new DownloadRequestError('retryable', `Resume request failed with HTTP status ${status}`);
+    }
+    return new DownloadRequestError('fatal', `Failed to resume download: HTTP status ${status}, ${body}`);
+}
+/** Classify a non-2xx answer to a plain request. */
+export function classifyDownloadStatus(status, body) {
+    const message = `Failed to download: HTTP status ${status}, ${body}`;
+    return new DownloadRequestError(isRetryableStatus(status) ? 'retryable' : 'fatal', message);
+}
+/** Same rules as `validate_proxy_config`; returns the error text or `undefined`. */
+export function validateProxyConfig(config) {
+    let url;
+    try {
+        url = new URL(config.url);
+    }
+    catch (e) {
+        return `Invalid proxy URL '${config.url}': ${e.message}`;
+    }
+    const scheme = url.protocol.replace(/:$/, '');
+    if (!['http', 'https', 'socks4', 'socks5'].includes(scheme))
+        return `Unsupported proxy scheme: ${scheme}`;
+    const hasUser = config.username !== undefined && config.username !== null;
+    const hasPass = config.password !== undefined && config.password !== null;
+    if (hasUser && !hasPass)
+        return 'Username provided without password';
+    if (hasPass && !hasUser)
+        return 'Password provided without username';
+    for (const entry of config.no_proxy ?? []) {
+        if (entry === '')
+            return 'Empty no_proxy entry';
+        if (entry.startsWith('*.') && entry.length < 3)
+            return `Invalid wildcard pattern: ${entry}`;
+    }
+    return undefined;
+}
+/** `*` matches everything, `*.domain` matches by suffix, otherwise exact host match. */
+export function shouldBypassProxy(url, noProxy) {
+    if (noProxy.length === 0)
+        return false;
+    let host;
+    try {
+        host = new URL(url).hostname;
+    }
+    catch {
+        return false;
+    }
+    if (host === '')
+        return false;
+    for (const entry of noProxy) {
+        if (entry === '*')
+            return true;
+        if (entry.startsWith('*.')) {
+            if (host.endsWith(entry.slice(2)))
+                return true;
+        }
+        else if (host === entry)
+            return true;
+    }
+    return false;
+}
+/** Size to expect: the catalog size when known, else what the HEAD reported (0 = unknown). */
+export function expectedDownloadSize(catalogSize, responseSize) {
+    return catalogSize !== undefined && catalogSize !== null && catalogSize > 0 ? catalogSize : responseSize;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/downloads/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/downloads/protocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAA;AACnC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAA;AACxC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAAA;AACrD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAW;IACvD,OAAO,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,MAAM,GAAG,mBAAmB;IAC3E,OAAO,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAA2B,EAAE,OAAe;IACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAA;AAC3D,CAAC;AAID,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IADX,YACW,IAA8B,EACvC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,SAAI,GAAJ,IAAI,CAA0B;QAIvC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAA;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAiC,EACjC,cAAsB,EACtB,YAAoB;IAEpB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACzE,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QACzC,MAAM,OAAO,CAAC,qDAAqD,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,MAAM,CAAA;IACpB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7B,MAAM,OAAO,CAAC,2DAA2D,KAAK,EAAE,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,uDAAuD,KAAK,EAAE,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,uDAAuD,KAAK,EAAE,CAAC,CAAA;IAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,OAAO,CAAC,mFAAmF,CAAC,CAAA;IACpG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QACvB,MAAM,OAAO,CAAC,iFAAiF,CAAC,CAAA;IAClG,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1B,IAAI,KAAK,KAAK,cAAc,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC5C,MAAM,OAAO,CACX,wEAAwE,cAAc,SAAS,KAAK,EAAE,CACvG,CAAA;IACH,CAAC;IACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,MAAM,OAAO,CAAC,mFAAmF,CAAC,CAAA;QACpG,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,GAAG,IAAI,QAAQ;YAAE,MAAM,OAAO,CAAC,qDAAqD,KAAK,EAAE,CAAC,CAAA;QAChG,IAAI,YAAY,GAAG,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAClD,MAAM,OAAO,CACX,qDAAqD,YAAY,0BAA0B,QAAQ,QAAQ,CAC5G,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IAC/D,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,IAAI,oBAAoB,CAAC,SAAS,EAAE,oDAAoD,MAAM,EAAE,CAAC,CAAA;IAC1G,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,oBAAoB,CAAC,WAAW,EAAE,0CAA0C,MAAM,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,0CAA0C,MAAM,KAAK,IAAI,EAAE,CAAC,CAAA;AACvG,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,IAAY;IACjE,MAAM,OAAO,GAAG,mCAAmC,MAAM,KAAK,IAAI,EAAE,CAAA;IACpE,OAAO,IAAI,oBAAoB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AAC7F,CAAC;AAUD,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,sBAAsB,MAAM,CAAC,GAAG,MAAO,CAAW,CAAC,OAAO,EAAE,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,6BAA6B,MAAM,EAAE,CAAA;IACzG,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAA;IACzE,IAAI,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,oCAAoC,CAAA;IACpE,IAAI,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,oCAAoC,CAAA;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,sBAAsB,CAAA;QAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,6BAA6B,KAAK,EAAE,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAiB;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC9B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;QAChD,CAAC;aAAM,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,oBAAoB,CAAC,WAAsC,EAAE,YAAoB;IAC/F,OAAO,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAA;AAC1G,CAAC"}

package/dist/downloads/proxy-fetch.d.ts

@@ -0,0 +1,45 @@
+/**
+ * `fetch` for downloads that carry a proxy policy. A dependency-free HTTP/1.1 client over
+ * `node:net`/`node:tls` that establishes the tunnel itself (HTTP forward, CONNECT, SOCKS5 with
+ * RFC 1929 auth) and applies the TLS policy via `tls.connect`. Chosen over `undici`/agent overrides
+ * because it behaves identically on Node, Bun and the compiled binary — see
+ * docs/decisions/2026-09-15-proxied-downloads-use-a-raw-socket-client.md.
+ *
+ * Scope: what the downloader needs. GET/HEAD, status + headers, `Content-Length`/chunked/
+ * close-delimited bodies as a `ReadableStream` with backpressure, `AbortSignal`, fetch-shaped
+ * redirects (each hop re-evaluates `no_proxy` and opens a fresh tunnel). One connection per request,
+ * no content encoding. Downloads without a proxy never come here; the remote-access probe does, for
+ * `connectTo` and because it must behave the same under Node, Bun and the compiled binary.
+ */
+import type { Socket } from 'node:net';
+import type { ProxyConfig } from './protocol.js';
+export interface ProxyPolicy {
+    proxy?: ProxyConfig | null;
+    /** Accept any server certificate (the app's `ignore_ssl`); falls back to `proxy.ignore_ssl`. */
+    ignore_ssl?: boolean | null | undefined;
+    /** Extra trusted CA certificates, PEM. Not exposed by the app today; kept for tests and future policy. */
+    ca?: string | Buffer | Array<string | Buffer> | undefined;
+    /**
+     * Dial this address instead of resolving the URL's host, while the TLS server name, certificate
+     * verification and `Host` stay the URL's — reqwest's `resolve`. It is how the remote-access probe
+     * reaches a new tunnel through Cloudflare's edge before its name resolves anywhere. Ignored when a
+     * proxy carries the request: the proxy does the dialling then.
+     */
+    connectTo?: {
+        host: string;
+        port?: number | undefined;
+    } | undefined;
+}
+export declare const MAX_REDIRECTS = 10;
+export declare const PROXY_CONNECT_TIMEOUT_MS = 30000;
+export declare class ProxyTunnelError extends Error {
+    constructor(message: string);
+}
+/** Default `fetchFor` of the downloader: items with a proxy get the policy fetch, others the base. */
+export declare function policyFetchFor(item: {
+    proxy?: ProxyConfig | null;
+}, base: typeof fetch): typeof fetch;
+export declare function createPolicyFetch(policy: ProxyPolicy): typeof fetch;
+export declare function proxyAuthorization(proxy: ProxyConfig): string | undefined;
+/** A raw socket connected to `host:port` through the proxy, ready for the request (or a TLS upgrade). */
+export declare function tunnel(proxy: ProxyConfig, host: string, port: number, policy: ProxyPolicy, signal?: AbortSignal | null): Promise<Socket>;