@contentstack/cli-utilities 1.18.0-beta.0 → 1.19.0-beta.0

package/lib/contentstack-management-sdk.js

@@ -15,8 +15,14 @@ class ManagementSDKInitiator {
         this.analyticsInfo = context === null || context === void 0 ? void 0 : context.analyticsInfo;
     }
     async createAPIClient(config) {
-        // Get proxy configuration with priority: Environment variables > Global config
-        const proxyConfig = (0, proxy_helper_1.getProxyConfig)();
+        // Resolve host so NO_PROXY applies even when config.host is omitted (e.g. from region.cma)
+        const host = (0, proxy_helper_1.resolveRequestHost)(config);
+        // NO_PROXY has priority over HTTP_PROXY/HTTPS_PROXY and config-set proxy
+        const proxyConfig = (0, proxy_helper_1.getProxyConfigForHost)(host);
+        // When bypassing, clear proxy env immediately so SDK never see it (they may read at init or first request).
+        if (!proxyConfig) {
+            (0, proxy_helper_1.clearProxyEnv)();
+        }
         const option = {
             host: config.host,
             maxContentLength: config.maxContentLength || 100000000,

package/lib/http-client/client.js

@@ -7,6 +7,22 @@ const http_response_1 = require("./http-response");
 const config_handler_1 = tslib_1.__importDefault(require("../config-handler"));
 const auth_handler_1 = tslib_1.__importDefault(require("../auth-handler"));
 const proxy_helper_1 = require("../proxy-helper");
+/**
+ * Derive request host from baseURL or url for NO_PROXY checks.
+ */
+function getRequestHost(baseURL, url) {
+    const toTry = [baseURL, url].filter(Boolean);
+    for (const candidateUrl of toTry) {
+        try {
+            const parsed = new URL(candidateUrl.startsWith('http') ? candidateUrl : `https://${candidateUrl}`);
+            return parsed.hostname || undefined;
+        }
+        catch (_a) {
+            // Invalid URL; try next candidate (baseURL or url)
+        }
+    }
+    return undefined;
+}
 class HttpClient {
     /**
      * Createa new pending HTTP request instance.
@@ -340,9 +356,10 @@ class HttpClient {
                 this.headers({ 'x-header-ea': Object.values(earlyAccessHeaders).join(',') });
             }
         }
-        // Configure proxy if available (priority: request.proxy > getProxyConfig())
+        // Configure proxy if available. NO_PROXY has priority: hosts in NO_PROXY never use proxy.
         if (!this.request.proxy) {
-            const proxyConfig = (0, proxy_helper_1.getProxyConfig)();
+            const host = getRequestHost(this.request.baseURL, url);
+            const proxyConfig = host ? (0, proxy_helper_1.getProxyConfigForHost)(host) : (0, proxy_helper_1.getProxyConfig)();
             if (proxyConfig) {
                 this.request.proxy = proxyConfig;
             }

package/lib/proxy-helper.d.ts

@@ -8,10 +8,51 @@ export interface ProxyConfig {
     };
 }
 /**
- * Get proxy configuration with priority: Environment variables > Global config
+ * Parse NO_PROXY / no_proxy env (both uppercase and lowercase).
+ * NO_PROXY has priority over HTTP_PROXY/HTTPS_PROXY: hosts in this list never use the proxy.
+ * Values are hostnames only, comma-separated; leading dot matches subdomains (e.g. .contentstack.io).
+ * The bypass list is fully dynamic: only env values are used (no hardcoded default).
+ * @returns List of trimmed entries, or empty array when NO_PROXY/no_proxy is unset
+ */
+export declare function getNoProxyList(): string[];
+/**
+ * Check if the given host should bypass the proxy based on NO_PROXY / no_proxy.
+ * Supports: exact host, leading-dot subdomain match (e.g. .contentstack.io), and wildcard *.
+ * @param host - Request hostname (with or without port; will be normalized)
+ * @returns true if proxy should not be used for this host
+ */
+export declare function shouldBypassProxy(host: string): boolean;
+/**
+ * Get proxy configuration. Sources (in order): env (HTTP_PROXY/HTTPS_PROXY), then global config
+ * from `csdx config:set:proxy --host <host> --port <port> --protocol <protocol>`.
+ * For per-request use, prefer getProxyConfigForHost(host) so NO_PROXY overrides both sources.
  * @returns ProxyConfig object or undefined if no proxy is configured
  */
 export declare function getProxyConfig(): ProxyConfig | undefined;
+/**
+ * Get proxy config only when the request host is not in NO_PROXY.
+ * NO_PROXY has priority over both HTTP_PROXY/HTTPS_PROXY and over proxy set via
+ * `csdx config:set:proxy` — if the host matches NO_PROXY, no proxy is used.
+ * Use this for all outbound requests so Contentstack and localhost bypass the proxy when set.
+ * @param host - Request hostname (e.g. api.contentstack.io or full URL like https://api.contentstack.io)
+ * @returns ProxyConfig or undefined if proxy is disabled or host should bypass (NO_PROXY)
+ */
+export declare function getProxyConfigForHost(host: string): ProxyConfig | undefined;
+/**
+ * Resolve request host for proxy/NO_PROXY checks: config.host or default CMA from region.
+ * Use when the caller may omit host so NO_PROXY still applies (e.g. from region.cma).
+ * @param config - Object with optional host (e.g. API client config)
+ * @returns Host string (hostname or empty)
+ */
+export declare function resolveRequestHost(config: {
+    host?: string;
+}): string;
+/**
+ * Temporarily clear proxy-related env vars so SDK/axios cannot use them.
+ * Call the returned function to restore. Use when creating a client for a host in NO_PROXY.
+ * @returns Restore function (call to put env back)
+ */
+export declare function clearProxyEnv(): () => void;
 /**
  * Check if proxy is configured (from any source)
  * @returns true if proxy is configured, false otherwise

package/lib/proxy-helper.js

@@ -1,14 +1,94 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getProxyUrl = exports.hasProxy = exports.getProxyConfig = void 0;
+exports.getProxyUrl = exports.hasProxy = exports.clearProxyEnv = exports.resolveRequestHost = exports.getProxyConfigForHost = exports.getProxyConfig = exports.shouldBypassProxy = exports.getNoProxyList = void 0;
 const tslib_1 = require("tslib");
 const config_handler_1 = tslib_1.__importDefault(require("./config-handler"));
 /**
- * Get proxy configuration with priority: Environment variables > Global config
+ * Parse NO_PROXY / no_proxy env (both uppercase and lowercase).
+ * NO_PROXY has priority over HTTP_PROXY/HTTPS_PROXY: hosts in this list never use the proxy.
+ * Values are hostnames only, comma-separated; leading dot matches subdomains (e.g. .contentstack.io).
+ * The bypass list is fully dynamic: only env values are used (no hardcoded default).
+ * @returns List of trimmed entries, or empty array when NO_PROXY/no_proxy is unset
+ */
+function getNoProxyList() {
+    const raw = process.env.NO_PROXY || process.env.no_proxy || '';
+    return raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+exports.getNoProxyList = getNoProxyList;
+/**
+ * Normalize host for NO_PROXY matching: strip protocol/URL, port, lowercase, handle IPv6 brackets.
+ * Accepts hostname, host:port, or full URL (e.g. https://api.contentstack.io).
+ */
+function normalizeHost(host) {
+    if (!host || typeof host !== 'string')
+        return '';
+    let h = host.trim().toLowerCase();
+    // If it looks like a URL, extract hostname so NO_PROXY matching works (e.g. region.cma is full URL)
+    if (h.includes('://')) {
+        try {
+            const u = new URL(h);
+            h = u.hostname;
+        }
+        catch (_a) {
+            // fall through to port stripping below
+        }
+    }
+    const portIdx = h.lastIndexOf(':');
+    if (h.startsWith('[')) {
+        const close = h.indexOf(']');
+        if (close !== -1 && h.length > close + 1 && h[close + 1] === ':') {
+            h = h.slice(1, close);
+        }
+    }
+    else if (portIdx !== -1) {
+        const after = h.slice(portIdx + 1);
+        if (/^\d+$/.test(after)) {
+            h = h.slice(0, portIdx);
+        }
+    }
+    return h;
+}
+/**
+ * Check if the given host should bypass the proxy based on NO_PROXY / no_proxy.
+ * Supports: exact host, leading-dot subdomain match (e.g. .contentstack.io), and wildcard *.
+ * @param host - Request hostname (with or without port; will be normalized)
+ * @returns true if proxy should not be used for this host
+ */
+function shouldBypassProxy(host) {
+    const normalized = normalizeHost(host);
+    if (!normalized)
+        return false;
+    const list = getNoProxyList();
+    for (const entry of list) {
+        const e = entry.trim().toLowerCase();
+        if (!e)
+            continue;
+        if (e === '*')
+            return true;
+        if (e.startsWith('.')) {
+            const domain = e.slice(1);
+            if (normalized === domain || normalized.endsWith(e))
+                return true;
+        }
+        else {
+            if (normalized === e)
+                return true;
+        }
+    }
+    return false;
+}
+exports.shouldBypassProxy = shouldBypassProxy;
+/**
+ * Get proxy configuration. Sources (in order): env (HTTP_PROXY/HTTPS_PROXY), then global config
+ * from `csdx config:set:proxy --host <host> --port <port> --protocol <protocol>`.
+ * For per-request use, prefer getProxyConfigForHost(host) so NO_PROXY overrides both sources.
  * @returns ProxyConfig object or undefined if no proxy is configured
  */
 function getProxyConfig() {
-    // Priority 1: Check environment variables (HTTPS_PROXY or HTTP_PROXY)
+    // Priority 1: Environment variables (HTTPS_PROXY or HTTP_PROXY)
     const proxyUrl = process.env.HTTPS_PROXY || process.env.HTTP_PROXY;
     if (proxyUrl) {
         try {
@@ -35,7 +115,7 @@ function getProxyConfig() {
             // Invalid URL, continue to check global config
         }
     }
-    // Priority 2: Check global config store
+    // Priority 2: Global config (csdx config:set:proxy)
     const globalProxyConfig = config_handler_1.default.get('proxy');
     if (globalProxyConfig) {
         if (typeof globalProxyConfig === 'object') {
@@ -73,6 +153,68 @@ function getProxyConfig() {
     return undefined;
 }
 exports.getProxyConfig = getProxyConfig;
+/**
+ * Get proxy config only when the request host is not in NO_PROXY.
+ * NO_PROXY has priority over both HTTP_PROXY/HTTPS_PROXY and over proxy set via
+ * `csdx config:set:proxy` — if the host matches NO_PROXY, no proxy is used.
+ * Use this for all outbound requests so Contentstack and localhost bypass the proxy when set.
+ * @param host - Request hostname (e.g. api.contentstack.io or full URL like https://api.contentstack.io)
+ * @returns ProxyConfig or undefined if proxy is disabled or host should bypass (NO_PROXY)
+ */
+function getProxyConfigForHost(host) {
+    if (shouldBypassProxy(host))
+        return undefined;
+    return getProxyConfig();
+}
+exports.getProxyConfigForHost = getProxyConfigForHost;
+/**
+ * Resolve request host for proxy/NO_PROXY checks: config.host or default CMA from region.
+ * Use when the caller may omit host so NO_PROXY still applies (e.g. from region.cma).
+ * @param config - Object with optional host (e.g. API client config)
+ * @returns Host string (hostname or empty)
+ */
+function resolveRequestHost(config) {
+    var _a;
+    if (config.host)
+        return config.host;
+    const cma = (_a = config_handler_1.default.get('region')) === null || _a === void 0 ? void 0 : _a.cma;
+    if (cma && typeof cma === 'string') {
+        if (cma.startsWith('http')) {
+            try {
+                const u = new URL(cma);
+                return u.hostname || cma;
+            }
+            catch (_b) {
+                return cma;
+            }
+        }
+        return cma;
+    }
+    return '';
+}
+exports.resolveRequestHost = resolveRequestHost;
+/**
+ * Temporarily clear proxy-related env vars so SDK/axios cannot use them.
+ * Call the returned function to restore. Use when creating a client for a host in NO_PROXY.
+ * @returns Restore function (call to put env back)
+ */
+function clearProxyEnv() {
+    const saved = {};
+    const keys = ['HTTP_PROXY', 'HTTPS_PROXY', 'http_proxy', 'https_proxy', 'ALL_PROXY', 'all_proxy'];
+    for (const k of keys) {
+        if (k in process.env) {
+            saved[k] = process.env[k];
+            delete process.env[k];
+        }
+    }
+    return () => {
+        for (const k of keys) {
+            if (saved[k] !== undefined)
+                process.env[k] = saved[k];
+        }
+    };
+}
+exports.clearProxyEnv = clearProxyEnv;
 /**
  * Check if proxy is configured (from any source)
  * @returns true if proxy is configured, false otherwise

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-utilities",
-  "version": "1.18.0-beta.0",
+  "version": "1.19.0-beta.0",
   "description": "Utilities for contentstack projects",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -82,4 +82,4 @@
     "ts-node": "^10.9.2",
     "typescript": "^4.9.5"
   }
-}
+}