@cortexkit/aft-bridge 0.30.1 → 0.30.3

package/dist/resolver.js

@@ -1,42 +1,16 @@
-import { execSync, spawnSync } from "node:child_process";
+import { execSync } from "node:child_process";
 import { chmodSync, copyFileSync, existsSync, mkdirSync, renameSync } from "node:fs";
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { log, warn } from "./active-logger.js";
-import { ensureBinary, getCacheDir } from "./downloader.js";
+import { ensureBinary, getCacheDir, readBinaryVersion } from "./downloader.js";
 import { PLATFORM_ARCH_MAP } from "./platform.js";
 let ensureBinaryForResolver = ensureBinary;
 export function __setEnsureBinaryForTests(impl) {
     ensureBinaryForResolver = impl ?? ensureBinary;
 }
-/**
- * Read the version string from an `aft` binary by invoking it with
- * `--version`. Returns the bare version (e.g. `"0.22.1"`) without the
- * leading `v` or the `aft` prefix, or `null` if the invocation fails.
- *
- * Exported so tests and the resolver can use it for version-match checks
- * before deciding to return a candidate binary.
- */
-export function readBinaryVersion(binaryPath) {
-    try {
-        const result = spawnSync(binaryPath, ["--version"], {
-            encoding: "utf-8",
-            stdio: ["pipe", "pipe", "pipe"],
-            timeout: 5000,
-        });
-        const stdoutVersion = result.stdout?.trim();
-        const stderrVersion = result.stderr?.trim();
-        const rawVersion = stdoutVersion || stderrVersion;
-        if (!rawVersion)
-            return null;
-        // `aft --version` outputs "aft 0.9.0" — extract just the version number
-        return rawVersion.replace(/^aft\s+/, "");
-    }
-    catch {
-        return null;
-    }
-}
+export { readBinaryVersion };
 /**
  * Copy an npm platform binary to the versioned cache so we never run from
  * node_modules directly. This prevents corruption when npm updates the
@@ -106,6 +80,24 @@ function isExpectedCachedBinary(binaryPath, expectedVersion) {
     warn(`Cached binary at ${binaryPath} reports ${actual ?? "no version"}, expected ${expected}; skipping cache candidate`);
     return false;
 }
+function probeBinaryCandidate(binaryPath, source, expectedVersion) {
+    const actual = readBinaryVersion(binaryPath);
+    if (actual === null) {
+        warn(`${source} binary at ${binaryPath} did not report a version; skipping`);
+        return null;
+    }
+    if (expectedVersion && actual !== normalizeBareVersion(expectedVersion)) {
+        warn(`${source} binary at ${binaryPath} reports ${actual}, expected ${normalizeBareVersion(expectedVersion)}; skipping`);
+        return null;
+    }
+    return binaryPath;
+}
+function parsePathLookupOutput(output) {
+    return output
+        .split(/\r?\n/)
+        .map((candidate) => candidate.trim())
+        .filter(Boolean);
+}
 /**
  * Map the current `process.platform` and `process.arch` to the npm platform
  * package suffix (e.g. `"darwin-arm64"`, `"linux-x64"`).
@@ -203,18 +195,27 @@ export function findBinarySync(expectedVersion) {
             env,
             stdio: ["pipe", "pipe", "pipe"],
         }).trim();
-        if (result)
-            return result;
+        for (const candidate of parsePathLookupOutput(result)) {
+            const usable = probeBinaryCandidate(candidate, "PATH", expectedVersion);
+            if (usable)
+                return usable;
+        }
     }
     catch {
         // not in PATH
     }
     // 4. Check ~/.cargo/bin/aft
     const cargoPath = join(homeDirFromEnv(env), ".cargo", "bin", `aft${ext}`);
-    if (existsSync(cargoPath))
-        return cargoPath;
+    if (existsSync(cargoPath)) {
+        const usable = probeBinaryCandidate(cargoPath, "cargo", expectedVersion);
+        if (usable)
+            return usable;
+    }
     return null;
 }
+export const __test__ = {
+    parsePathLookupOutput,
+};
 /**
  * Locate the `aft` binary, with auto-download as a last resort.
  *

package/dist/resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIlD,IAAI,uBAAuB,GAAiB,YAAY,CAAC;AAEzD,MAAM,UAAU,yBAAyB,CAAC,IAAyB;IACjE,uBAAuB,GAAG,IAAI,IAAI,YAAY,CAAC;AACjD,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;YAClD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,IAAI,aAAa,CAAC;QAClD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,wEAAwE;QACxE,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,aAAqB,EAAE,YAAqB;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAEnD,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC;YACjD,IAAI,CACF,oBAAoB,UAAU,YAAY,aAAa,IAAI,YAAY,cAAc,OAAO,+BAA+B,CAC5H,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QACjE,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChC,GAAG,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,GAAgB;IACtC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CAAC,GAAgB;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe,EAAE,GAAgB,EAAE,GAAW;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,eAAuB;IACzE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CACF,oBAAoB,UAAU,YAAY,MAAM,IAAI,YAAY,cAAc,QAAQ,4BAA4B,CACnH,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,WAAW,IAAI,KAAK;YACnD,wBAAwB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,gBAAgB,QAAQ,IAAI;YAC3D,+BAA+B,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,eAAwB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE/B,4EAA4E;IAC5E,4EAA4E;IAC5E,cAAc;IACd,MAAM,aAAa,GACjB,eAAe;QACf,CAAC,GAAG,EAAE;YACJ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3C,OAAQ,GAAG,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;QAChF,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,aAAa,IAAI,sBAAsB,CAAC,aAAa,EAAE,aAAa,CAAC;YAAE,OAAO,aAAa,CAAC;IAClG,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,EAAE;IACF,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,IAAI,CACF,kCAAkC,QAAQ,iEAAiE,CAC5G,CAAC;YACJ,CAAC;iBAAM,IAAI,aAAa,IAAI,UAAU,KAAK,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/E,IAAI,CACF,gCAAgC,UAAU,2BAA2B,aAAa,wCAAwC,CAC3H,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC1D,OAAO,MAAM,IAAI,QAAQ,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,OAAO;YACjB,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,eAAwB;IACvD,+CAA+C;IAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,wCAAwC;IACxC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAClE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,wBAAwB;IACxB,MAAM,IAAI,KAAK,CACb;QACE,kCAAkC;QAClC,EAAE;QACF,oBAAoB;QACpB,yCAAyC;QACzC,sDAAsD;QACtD,6BAA6B;QAC7B,sBAAsB;QACtB,iDAAiD;QACjD,EAAE;QACF,wCAAwC;QACxC,0FAA0F;QAC1F,+DAA+D;QAC/D,8EAA8E;QAC9E,EAAE;QACF,wCAAwC;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIlD,IAAI,uBAAuB,GAAiB,YAAY,CAAC;AAEzD,MAAM,UAAU,yBAAyB,CAAC,IAAyB;IACjE,uBAAuB,GAAG,IAAI,IAAI,YAAY,CAAC;AACjD,CAAC;AAID,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,aAAqB,EAAE,YAAqB;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAEnD,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC;YACjD,IAAI,CACF,oBAAoB,UAAU,YAAY,aAAa,IAAI,YAAY,cAAc,OAAO,+BAA+B,CAC5H,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QACjE,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChC,GAAG,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,GAAgB;IACtC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CAAC,GAAgB;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe,EAAE,GAAgB,EAAE,GAAW;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,eAAuB;IACzE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CACF,oBAAoB,UAAU,YAAY,MAAM,IAAI,YAAY,cAAc,QAAQ,4BAA4B,CACnH,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAkB,EAClB,MAAc,EACd,eAAwB;IAExB,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,MAAM,cAAc,UAAU,qCAAqC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,eAAe,IAAI,MAAM,KAAK,oBAAoB,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,IAAI,CACF,GAAG,MAAM,cAAc,UAAU,YAAY,MAAM,cAAc,oBAAoB,CAAC,eAAe,CAAC,YAAY,CACnH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,MAAM;SACV,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACpC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,WAAW,IAAI,KAAK;YACnD,wBAAwB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,gBAAgB,QAAQ,IAAI;YAC3D,+BAA+B,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,eAAwB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE/B,4EAA4E;IAC5E,4EAA4E;IAC5E,cAAc;IACd,MAAM,aAAa,GACjB,eAAe;QACf,CAAC,GAAG,EAAE;YACJ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3C,OAAQ,GAAG,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;QAChF,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,aAAa,IAAI,sBAAsB,CAAC,aAAa,EAAE,aAAa,CAAC;YAAE,OAAO,aAAa,CAAC;IAClG,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,EAAE;IACF,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,IAAI,CACF,kCAAkC,QAAQ,iEAAiE,CAC5G,CAAC;YACJ,CAAC;iBAAM,IAAI,aAAa,IAAI,UAAU,KAAK,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/E,IAAI,CACF,gCAAgC,UAAU,2BAA2B,aAAa,wCAAwC,CAC3H,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC1D,OAAO,MAAM,IAAI,QAAQ,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,OAAO;YACjB,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,MAAM,SAAS,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;YACxE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,qBAAqB;CACtB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,eAAwB;IACvD,+CAA+C;IAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,wCAAwC;IACxC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAClE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,wBAAwB;IACxB,MAAM,IAAI,KAAK,CACb;QACE,kCAAkC;QAClC,EAAE;QACF,oBAAoB;QACpB,yCAAyC;QACzC,sDAAsD;QACtD,6BAA6B;QAC7B,sBAAsB;QACtB,iDAAiD;QACjD,EAAE;QACF,wCAAwC;QACxC,0FAA0F;QAC1F,+DAA+D;QAC/D,8EAA8E;QAC9E,EAAE;QACF,wCAAwC;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/aft-bridge",
-  "version": "0.30.1",
+  "version": "0.30.3",
   "type": "module",
   "description": "Shared NDJSON bridge transport, binary resolution, and ONNX runtime helpers for AFT agent-host plugins (OpenCode, Pi)",
   "license": "MIT",

package/dist/url-fetch.d.ts

@@ -1,33 +0,0 @@
-import { lookup } from "node:dns/promises";
-import { type Dispatcher } from "undici";
-interface FetchUrlOptions {
-    allowPrivate?: boolean;
-    /** Test-only injection point. Production fetches use undici with DNS pinning. */
-    fetchImpl?: FetchImpl;
-    /** Test-only injection point. Production DNS resolution uses node:dns/promises.lookup. */
-    lookup?: LookupFn;
-    /** Test-only injection point for observing the DNS-pinned dispatcher. */
-    dispatcherFactory?: (validatedIp: string) => Dispatcher;
-}
-type LookupFn = typeof lookup;
-interface FetchInit {
-    signal?: AbortSignal;
-    redirect?: "manual";
-    dispatcher?: Dispatcher;
-    headers?: Record<string, string>;
-}
-type FetchImpl = (input: string, init: FetchInit) => Promise<Response>;
-/** Exported for unit tests. */
-export declare function _isPrivateIpv4(address: string): boolean;
-/**
- * Fetch a URL to a cached temp file. Uses disk cache with 1-day TTL.
- * Returns the cached file path the Rust outline/zoom command can read.
- * Throws on errors (invalid URL, network failure, unsupported content type, oversized body).
- */
-export declare function fetchUrlToTempFile(url: string, storageDir: string, options?: FetchUrlOptions): Promise<string>;
-/**
- * Remove cache entries older than TTL. Called periodically at plugin startup.
- */
-export declare function cleanupUrlCache(storageDir: string): void;
-export {};
-//# sourceMappingURL=url-fetch.d.ts.map

package/dist/url-fetch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-fetch.d.ts","sourceRoot":"","sources":["../src/url-fetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAW3C,OAAO,EAAS,KAAK,UAAU,EAAwB,MAAM,QAAQ,CAAC;AAoBtE,UAAU,eAAe;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iFAAiF;IACjF,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,CAAC;CACzD;AAED,KAAK,QAAQ,GAAG,OAAO,MAAM,CAAC;AAC9B,UAAU,SAAS;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAyBvE,+BAA+B;AAC/B,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAavD;AAkTD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAsIjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkCxD"}

package/dist/url-fetch.js

@@ -1,491 +0,0 @@
-import { createHash } from "node:crypto";
-import { lookup } from "node:dns/promises";
-import { existsSync, mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
-import { isIP } from "node:net";
-import { join } from "node:path";
-import { Agent, fetch as undiciFetch } from "undici";
-import { log, warn } from "./active-logger.js";
-/** Max response body size (10 MB) */
-const MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
-/** Cache TTL: 1 day */
-const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
-/** Fetch timeout: 30 seconds — covers initial connect + headers */
-const FETCH_TIMEOUT_MS = 30_000;
-/**
- * Per-chunk body read timeout: 15 seconds. Resets after every successful
- * chunk so legitimate large/slow downloads still complete, but a stalled
- * mid-body stream (e.g. CDN edge drops the connection without closing the
- * socket cleanly) is aborted within this window. Without this guard the
- * body loop blocks indefinitely because Node's `AbortController` from
- * `fetch()` only covers the connect+headers phase, not body streaming.
- */
-const BODY_CHUNK_TIMEOUT_MS = 15_000;
-const MAX_REDIRECTS = 5;
-function cacheDir(storageDir) {
-    return join(storageDir, "url_cache");
-}
-function hashUrl(url) {
-    return createHash("sha256").update(url).digest("hex").slice(0, 16);
-}
-function metaPath(storageDir, hash) {
-    return join(cacheDir(storageDir), `${hash}.meta.json`);
-}
-function contentPath(storageDir, hash, extension) {
-    return join(cacheDir(storageDir), `${hash}${extension}`);
-}
-/** Exported for unit tests. */
-export function _isPrivateIpv4(address) {
-    const parts = address.split(".").map((part) => Number.parseInt(part, 10));
-    if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part)))
-        return true;
-    const [a, b] = parts;
-    return (a === 0 || // 0.0.0.0/8 — wildcard, blocked to prevent local-host bypass
-        a === 10 ||
-        a === 127 ||
-        (a === 172 && b >= 16 && b <= 31) ||
-        (a === 192 && b === 168) ||
-        (a === 169 && b === 254) ||
-        a >= 224 // multicast (224/4) and reserved (240/4)
-    );
-}
-/**
- * Expand a possibly-compressed IPv6 address to 8 hextets (numbers).
- * Returns null on parse failure.
- */
-function expandIpv6(addr) {
-    if (addr === "::")
-        return [0, 0, 0, 0, 0, 0, 0, 0];
-    // Reject more than one "::"
-    const dcMatches = addr.match(/::/g);
-    if (dcMatches && dcMatches.length > 1)
-        return null;
-    // Handle dotted-quad tail by converting to two hextets.
-    let normalized = addr;
-    const lastColon = normalized.lastIndexOf(":");
-    if (lastColon !== -1) {
-        const tail = normalized.slice(lastColon + 1);
-        if (tail.includes(".")) {
-            const octets = tail.split(".").map((p) => Number.parseInt(p, 10));
-            if (octets.length !== 4 || octets.some((o) => Number.isNaN(o) || o < 0 || o > 255)) {
-                return null;
-            }
-            const h1 = ((octets[0] << 8) | octets[1]).toString(16);
-            const h2 = ((octets[2] << 8) | octets[3]).toString(16);
-            normalized = `${normalized.slice(0, lastColon)}:${h1}:${h2}`;
-        }
-    }
-    let parts;
-    if (normalized.includes("::")) {
-        const [left, right] = normalized.split("::");
-        const leftParts = left ? left.split(":") : [];
-        const rightParts = right ? right.split(":") : [];
-        const fill = 8 - leftParts.length - rightParts.length;
-        if (fill < 0)
-            return null;
-        parts = [...leftParts, ...Array(fill).fill("0"), ...rightParts];
-    }
-    else {
-        parts = normalized.split(":");
-    }
-    if (parts.length !== 8)
-        return null;
-    const hextets = parts.map((p) => {
-        const n = Number.parseInt(p, 16);
-        return Number.isNaN(n) || n < 0 || n > 0xffff ? -1 : n;
-    });
-    if (hextets.some((h) => h === -1))
-        return null;
-    return hextets;
-}
-function isPrivateIp(address) {
-    if (!address.includes(":")) {
-        return _isPrivateIpv4(address);
-    }
-    const lower = address.toLowerCase();
-    // Strip optional zone identifier (fe80::1%eth0 → fe80::1).
-    const noZone = lower.split("%")[0];
-    // Expand to 8 hextets so we can reliably detect IPv4-mapped/compatible
-    // forms even after URL canonicalization (e.g. [::ffff:127.0.0.1] →
-    // [::ffff:7f00:1]).
-    const hextets = expandIpv6(noZone);
-    if (hextets) {
-        // IPv4-mapped (::ffff:X.X.X.X) and IPv4-compatible (::X.X.X.X) — extract
-        // the embedded IPv4 from the last two hextets and check against IPv4 ranges.
-        const top6Zero = hextets.slice(0, 6).every((h) => h === 0);
-        const isMapped = hextets[0] === 0 &&
-            hextets[1] === 0 &&
-            hextets[2] === 0 &&
-            hextets[3] === 0 &&
-            hextets[4] === 0 &&
-            hextets[5] === 0xffff;
-        if (isMapped || top6Zero) {
-            const a = (hextets[6] >> 8) & 0xff;
-            const b = hextets[6] & 0xff;
-            const c = (hextets[7] >> 8) & 0xff;
-            const d = hextets[7] & 0xff;
-            const ipv4 = `${a}.${b}.${c}.${d}`;
-            // ::1 (loopback) and :: (unspecified) both fall into top6Zero and last
-            // hextet 0 or 1 — _isPrivateIpv4 already blocks 0.0.0.0 and 127/8.
-            if (top6Zero && hextets[6] === 0 && hextets[7] <= 1) {
-                return true;
-            }
-            return _isPrivateIpv4(ipv4);
-        }
-        const firstHextet = hextets[0];
-        return (
-        // fe80::/10 link-local
-        (firstHextet >= 0xfe80 && firstHextet <= 0xfebf) ||
-            // fc00::/7 unique local
-            (firstHextet >= 0xfc00 && firstHextet <= 0xfdff) ||
-            // ff00::/8 multicast
-            firstHextet >= 0xff00);
-    }
-    // Could not expand — be conservative and block.
-    return true;
-}
-async function assertPublicUrl(url, allowPrivate, dnsLookup = lookup) {
-    if (url.protocol !== "http:" && url.protocol !== "https:") {
-        throw new Error(`Only http:// and https:// URLs are supported, got: ${url.protocol}`);
-    }
-    if (allowPrivate)
-        return undefined;
-    // URL.hostname returns IPv6 literals wrapped in brackets ("[::1]") per WHATWG.
-    // Strip them before checking the address.
-    const hostname = url.hostname.replace(/^\[|\]$/g, "");
-    // If the hostname is already a literal IP, check it directly — skip DNS so we
-    // also catch malformed IPv6 forms (::127.0.0.1, ::ffff:127.0.0.1) that some
-    // resolvers reject as "not found" instead of returning the embedded IPv4.
-    if (isIP(hostname) || hostname.includes(":")) {
-        if (isPrivateIp(hostname)) {
-            throw new Error(`Blocked private URL host ${url.hostname} (${hostname})`);
-        }
-        return hostname;
-    }
-    const addresses = await dnsLookup(hostname, { all: true, verbatim: true });
-    for (const { address } of addresses) {
-        if (isPrivateIp(address)) {
-            throw new Error(`Blocked private URL host ${url.hostname} (${address})`);
-        }
-    }
-    if (addresses.length === 0) {
-        throw new Error(`Failed to resolve URL host ${url.hostname}`);
-    }
-    // Prefer IPv4 when available. AAAA can come first on many resolvers, but
-    // many user networks (corporate, home, mobile) don't have IPv6 transit, so
-    // pinning to AAAA causes EHOSTUNREACH / connect timeouts that surface as a
-    // bare `fetch failed`. Falls back to whatever DNS gave us if no IPv4 record.
-    // `family` is documented as numeric (4/6) but be defensive — some runtimes
-    // have surfaced it as the string "IPv4"/"IPv6" historically.
-    const ipv4 = addresses.find((entry) => entry.family === 4 ||
-        entry.family === "IPv4" ||
-        (typeof entry.address === "string" && isIP(entry.address) === 4));
-    const chosen = ipv4 ?? addresses[0];
-    if (!chosen || typeof chosen.address !== "string" || chosen.address.length === 0) {
-        // Should be unreachable given the length>0 check above, but the bare
-        // `Invalid IP address: undefined` failure surfaced by undici when an
-        // empty/undefined IP slips into connect.lookup is opaque enough that
-        // we want a clear, structured failure instead.
-        throw new Error(`DNS lookup for ${url.hostname} returned no usable address (got: ${JSON.stringify(addresses)})`);
-    }
-    return chosen.address;
-}
-function createPinnedDispatcher(validatedIp) {
-    const family = validatedIp.includes(":") ? 6 : 4;
-    // Node 18+ calls the lookup with `opts.all: true` (especially via TLS /
-    // happy-eyeballs paths). When `all` is true the callback expects an *array*
-    // of `{address, family}` objects, not the legacy `(err, address, family)`
-    // 3-arg shape. Calling the legacy form there causes Node to surface
-    // `TypeError [ERR_INVALID_IP_ADDRESS]: Invalid IP address: undefined` from
-    // net:emitLookup, wrapped by undici as a bare `fetch failed`. Honor
-    // whichever shape `opts.all` requested.
-    // (Cast to `any` because undici's `LookupFunction` type only models the
-    // single-address callback overload, not the `all: true` variadic.)
-    // biome-ignore lint/suspicious/noExplicitAny: dual-overload lookup callback
-    const pinnedLookup = (_hostname, opts, 
-    // biome-ignore lint/suspicious/noExplicitAny: dual-overload lookup callback
-    callback) => {
-        if (opts?.all) {
-            callback(null, [{ address: validatedIp, family }]);
-        }
-        else {
-            callback(null, validatedIp, family);
-        }
-    };
-    return new Agent({
-        connect: { lookup: pinnedLookup },
-    });
-}
-function resolveRedirectUrl(currentUrl, location) {
-    if (!location) {
-        throw new Error(`Redirect from ${currentUrl.href} missing Location header`);
-    }
-    return new URL(location, currentUrl);
-}
-async function fetchWithRedirects(startUrl, allowPrivate, deps = {}) {
-    let currentUrl = startUrl;
-    const fetchImpl = deps.fetchImpl ?? undiciFetch;
-    const dnsLookup = deps.lookup ?? lookup;
-    for (let redirectCount = 0; redirectCount <= MAX_REDIRECTS; redirectCount++) {
-        const validatedIp = await assertPublicUrl(currentUrl, allowPrivate, dnsLookup);
-        const dispatcher = validatedIp
-            ? (deps.dispatcherFactory ?? createPinnedDispatcher)(validatedIp)
-            : undefined;
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-        let response;
-        try {
-            response = await fetchImpl(currentUrl.href, {
-                signal: controller.signal,
-                redirect: "manual",
-                dispatcher,
-                headers: {
-                    "user-agent": "aft-opencode-plugin",
-                    // Prioritize markdown for content-negotiating servers (GitHub API, many docs sites).
-                    // `application/vnd.github.raw` is GitHub's custom type — returns raw markdown from
-                    // repo file and readme endpoints. Falls back to HTML if markdown is not available.
-                    accept: "application/vnd.github.raw, text/markdown, text/x-markdown, text/html;q=0.9, text/plain;q=0.5",
-                },
-            });
-        }
-        catch (err) {
-            // undici wraps the underlying network error (ECONNREFUSED / ETIMEDOUT /
-            // EHOSTUNREACH / ENOTFOUND / cert errors) inside `.cause` and exposes a
-            // bare "fetch failed" on the outer Error. Surfacing the cause's `code`
-            // and message turns an unactionable failure into something the agent
-            // (and the user) can actually triage.
-            const error = err;
-            const cause = error.cause;
-            const causeCode = cause?.code ?? error.code;
-            const causeMsg = cause?.message ?? "";
-            const detail = causeCode
-                ? causeMsg
-                    ? `${causeCode}: ${causeMsg}`
-                    : causeCode
-                : (error.message ?? "unknown error");
-            // Log the full chain so triage doesn't depend on the agent surface
-            // forwarding the wrapped error message.
-            warn(`URL fetch failed: ${currentUrl.href} — ${detail}`, {
-                outerMessage: error.message,
-                causeName: cause?.name,
-                causeCode,
-                causeErrno: cause?.errno,
-                causeSyscall: cause?.syscall,
-            });
-            throw new Error(`Failed to fetch ${currentUrl.href}: ${detail}`);
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        if (response.status < 300 || response.status >= 400) {
-            return response;
-        }
-        if (redirectCount === MAX_REDIRECTS) {
-            throw new Error(`Too many redirects fetching ${startUrl.href}`);
-        }
-        currentUrl = resolveRedirectUrl(currentUrl, response.headers.get("location"));
-    }
-    throw new Error(`Too many redirects fetching ${startUrl.href}`);
-}
-/**
- * Map a Content-Type header to a file extension AFT can parse.
- * Returns null for unsupported types.
- */
-function resolveExtension(contentType) {
-    // Normalize: strip parameters (after `;`) AND pick the first value if the server
-    // echoed back a comma-separated list (GitHub API does this for /readme endpoints).
-    const lower = contentType.toLowerCase().split(";")[0].split(",")[0].trim();
-    if (lower === "text/html" ||
-        lower === "application/xhtml+xml" ||
-        lower === "application/vnd.github.html" ||
-        lower === "application/vnd.github+html") {
-        return ".html";
-    }
-    if (lower === "text/markdown" ||
-        lower === "text/x-markdown" ||
-        lower === "application/markdown" ||
-        // GitHub API raw content type — returns raw markdown for README endpoints
-        lower === "application/vnd.github.raw" ||
-        lower === "application/vnd.github+raw" ||
-        lower === "application/vnd.github.v3.raw") {
-        return ".md";
-    }
-    if (lower === "text/plain") {
-        // treat plain text as markdown so aft_outline can show headings if present
-        return ".md";
-    }
-    return null;
-}
-/**
- * Fetch a URL to a cached temp file. Uses disk cache with 1-day TTL.
- * Returns the cached file path the Rust outline/zoom command can read.
- * Throws on errors (invalid URL, network failure, unsupported content type, oversized body).
- */
-export async function fetchUrlToTempFile(url, storageDir, options = {}) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        throw new Error(`Invalid URL: ${url}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        throw new Error(`Only http:// and https:// URLs are supported, got: ${parsed.protocol}`);
-    }
-    const allowPrivate = options.allowPrivate === true;
-    // Enforce the caller's current SSRF policy before consulting the disk cache.
-    // Otherwise a URL previously cached with allowPrivate=true could be replayed
-    // by a later allowPrivate=false call without re-validating the host.
-    await assertPublicUrl(parsed, allowPrivate, options.lookup);
-    const dir = cacheDir(storageDir);
-    mkdirSync(dir, { recursive: true });
-    const hash = hashUrl(url);
-    const metaFile = metaPath(storageDir, hash);
-    // Check cache
-    if (existsSync(metaFile)) {
-        try {
-            const meta = JSON.parse(readFileSync(metaFile, "utf8"));
-            const age = Date.now() - meta.fetchedAt;
-            const cached = contentPath(storageDir, hash, meta.extension);
-            if (age < CACHE_TTL_MS && existsSync(cached)) {
-                log(`URL cache hit: ${url} (${Math.round(age / 1000)}s old)`);
-                return cached;
-            }
-        }
-        catch {
-            // corrupted meta, re-fetch
-        }
-    }
-    log(`Fetching URL: ${url}`);
-    const response = await fetchWithRedirects(parsed, allowPrivate, options);
-    if (!response.ok) {
-        throw new Error(`HTTP ${response.status} ${response.statusText} fetching ${url}`);
-    }
-    const contentType = response.headers.get("content-type") || "text/plain";
-    const extension = resolveExtension(contentType);
-    if (!extension) {
-        throw new Error(`Unsupported content type '${contentType}' for ${url}. Supported: text/html, text/markdown, text/plain`);
-    }
-    const lengthHeader = response.headers.get("content-length");
-    if (lengthHeader) {
-        const length = Number.parseInt(lengthHeader, 10);
-        if (Number.isFinite(length) && length > MAX_RESPONSE_BYTES) {
-            throw new Error(`Response too large: ${length} bytes (max ${MAX_RESPONSE_BYTES})`);
-        }
-    }
-    // Stream with size cap and per-chunk timeout. The AbortController used for
-    // the initial fetch() only covers connect + headers — once we hold a
-    // ReadableStream reader, `reader.read()` has no built-in timeout, so a
-    // server that sends headers and then stalls mid-body (CDN edge drops the
-    // socket, partial response, rate limit hold) blocks this loop forever.
-    // The per-chunk timer is reset after every successful read, so legitimate
-    // large/slow downloads still complete cleanly.
-    const reader = response.body?.getReader();
-    if (!reader) {
-        throw new Error(`Failed to read response body for ${url}`);
-    }
-    const chunks = [];
-    let total = 0;
-    try {
-        while (true) {
-            let chunkTimer;
-            const stallSymbol = Symbol("body-stall");
-            const stallPromise = new Promise((resolve) => {
-                chunkTimer = setTimeout(() => resolve(stallSymbol), BODY_CHUNK_TIMEOUT_MS);
-            });
-            let result;
-            try {
-                result = await Promise.race([reader.read(), stallPromise]);
-            }
-            finally {
-                if (chunkTimer)
-                    clearTimeout(chunkTimer);
-            }
-            if (result === stallSymbol) {
-                reader.cancel().catch(() => { });
-                throw new Error(`Body read stalled (no data for ${BODY_CHUNK_TIMEOUT_MS}ms) fetching ${url}`);
-            }
-            const { done, value } = result;
-            if (done)
-                break;
-            if (value) {
-                total += value.length;
-                if (total > MAX_RESPONSE_BYTES) {
-                    reader.cancel().catch(() => { });
-                    throw new Error(`Response exceeded ${MAX_RESPONSE_BYTES} bytes, aborted`);
-                }
-                chunks.push(value);
-            }
-        }
-    }
-    finally {
-        // Defensive: release any held lock so the underlying stream can be GCed
-        // even if a throw skipped the loop's normal exit. `releaseLock` is a no-op
-        // if the reader was already cancelled.
-        try {
-            reader.releaseLock();
-        }
-        catch { }
-    }
-    // Write content and meta atomically
-    const body = Buffer.concat(chunks);
-    const contentFile = contentPath(storageDir, hash, extension);
-    const tmpContent = `${contentFile}.tmp-${process.pid}`;
-    writeFileSync(tmpContent, body);
-    const { renameSync } = await import("node:fs");
-    renameSync(tmpContent, contentFile);
-    const meta = {
-        url,
-        contentType,
-        extension,
-        fetchedAt: Date.now(),
-    };
-    const tmpMeta = `${metaFile}.tmp-${process.pid}`;
-    writeFileSync(tmpMeta, JSON.stringify(meta));
-    renameSync(tmpMeta, metaFile);
-    log(`URL cached (${total} bytes): ${url}`);
-    return contentFile;
-}
-/**
- * Remove cache entries older than TTL. Called periodically at plugin startup.
- */
-export function cleanupUrlCache(storageDir) {
-    const dir = cacheDir(storageDir);
-    if (!existsSync(dir))
-        return;
-    let removed = 0;
-    try {
-        for (const entry of readdirSync(dir)) {
-            if (!entry.endsWith(".meta.json"))
-                continue;
-            const metaFile = join(dir, entry);
-            try {
-                const meta = JSON.parse(readFileSync(metaFile, "utf8"));
-                const age = Date.now() - meta.fetchedAt;
-                if (age > CACHE_TTL_MS) {
-                    const hash = entry.slice(0, -".meta.json".length);
-                    const content = contentPath(storageDir, hash, meta.extension);
-                    if (existsSync(content))
-                        unlinkSync(content);
-                    unlinkSync(metaFile);
-                    removed++;
-                }
-            }
-            catch {
-                // corrupted meta, remove it too
-                try {
-                    unlinkSync(metaFile);
-                    removed++;
-                }
-                catch { }
-            }
-        }
-    }
-    catch (err) {
-        warn(`URL cache cleanup failed: ${err.message}`);
-        return;
-    }
-    if (removed > 0) {
-        log(`URL cache cleanup: removed ${removed} stale entries`);
-    }
-}
-//# sourceMappingURL=url-fetch.js.map