@dnsid-ai/transport 0.27.0 → 0.29.0

package/dist/index.cjs

@@ -217,8 +217,31 @@ function createSsrfSafeFetch(config = {}, options = {}) {
         for (const item of Array.isArray(value) ? value : value === void 0 ? [] : [value]) headers.append(name, item);
       }
       const noBody = request.method === "HEAD" || [204, 205, 304].includes(response.statusCode);
+      let body = null;
       if (noBody) await response.body.dump();
-      return new Response(noBody ? null : import_node_stream.Readable.toWeb(response.body), { status: response.statusCode, statusText: response.statusText, headers });
+      else {
+        const iterator = response.body[Symbol.asyncIterator]();
+        let canceled = false;
+        response.body.on("error", () => {
+        });
+        body = new ReadableStream({
+          async pull(controller) {
+            try {
+              const { value, done } = await iterator.next();
+              if (canceled) return;
+              if (done) controller.close();
+              else controller.enqueue(new Uint8Array(value));
+            } catch (error) {
+              if (!canceled) controller.error(error);
+            }
+          },
+          cancel() {
+            canceled = true;
+            response.body.destroy();
+          }
+        });
+      }
+      return new Response(body, { status: response.statusCode, statusText: response.statusText, headers });
     }
     return fetchWithSafeLookup(input, { ...init, redirect: "manual" });
   };
@@ -259,7 +282,9 @@ function createDnsResolverFromServer(server) {
   let hostPromise;
   return {
     async fetchTXT(name, options) {
-      hostPromise ??= net2.isIP(parsed.host) ? Promise.resolve(parsed.host) : dnsPromises.lookup(parsed.host).then(({ address }) => address);
+      hostPromise ??= net2.isIP(parsed.host) ? Promise.resolve(parsed.host) : dnsPromises.lookup(parsed.host).then(({ address }) => address).catch((cause) => {
+        throw new import_protocol2.VerificationError("DNS server hostname lookup failed", { code: import_protocol2.VerificationCode.DNSResolution, transient: true, cause });
+      });
       return resolveTxtWithTtl(name, await hostPromise, port, options?.signal);
     }
   };
@@ -523,7 +548,8 @@ function fetchWithRedirects(url, opts, depth) {
       signal: opts.signal,
       rejectUnauthorized: true,
       headers: {
-        "User-Agent": DNSID_USER_AGENT
+        "User-Agent": DNSID_USER_AGENT,
+        ...opts.revalidate ? { "Cache-Control": "no-cache" } : {}
       },
       lookup: createSsrfSafeLookup(opts.dnsServer, (opts.privateAddressHosts ?? []).map(import_protocol2.normalizePrivateAddressHost))
     };

package/dist/index.d.cts

@@ -13,6 +13,8 @@ interface FetchResult {
 }
 /** Options controlling {@link fetchJson}. */
 interface HTTPSFetchOptions {
+    /** Bypass local caches and revalidate upstream evidence. */
+    revalidate?: boolean;
     /** Shared verification deadline/cancellation, including redirects. */
     signal?: AbortSignal;
     /** If set, the URL host (and every redirect host) must match this host exactly. */

package/dist/index.d.ts

@@ -13,6 +13,8 @@ interface FetchResult {
 }
 /** Options controlling {@link fetchJson}. */
 interface HTTPSFetchOptions {
+    /** Bypass local caches and revalidate upstream evidence. */
+    revalidate?: boolean;
     /** Shared verification deadline/cancellation, including redirects. */
     signal?: AbortSignal;
     /** If set, the URL host (and every redirect host) must match this host exactly. */

package/dist/index.js

@@ -175,8 +175,31 @@ function createSsrfSafeFetch(config = {}, options = {}) {
         for (const item of Array.isArray(value) ? value : value === void 0 ? [] : [value]) headers.append(name, item);
       }
       const noBody = request.method === "HEAD" || [204, 205, 304].includes(response.statusCode);
+      let body = null;
       if (noBody) await response.body.dump();
-      return new Response(noBody ? null : Readable.toWeb(response.body), { status: response.statusCode, statusText: response.statusText, headers });
+      else {
+        const iterator = response.body[Symbol.asyncIterator]();
+        let canceled = false;
+        response.body.on("error", () => {
+        });
+        body = new ReadableStream({
+          async pull(controller) {
+            try {
+              const { value, done } = await iterator.next();
+              if (canceled) return;
+              if (done) controller.close();
+              else controller.enqueue(new Uint8Array(value));
+            } catch (error) {
+              if (!canceled) controller.error(error);
+            }
+          },
+          cancel() {
+            canceled = true;
+            response.body.destroy();
+          }
+        });
+      }
+      return new Response(body, { status: response.statusCode, statusText: response.statusText, headers });
     }
     return fetchWithSafeLookup(input, { ...init, redirect: "manual" });
   };
@@ -217,7 +240,9 @@ function createDnsResolverFromServer(server) {
   let hostPromise;
   return {
     async fetchTXT(name, options) {
-      hostPromise ??= net2.isIP(parsed.host) ? Promise.resolve(parsed.host) : dnsPromises.lookup(parsed.host).then(({ address }) => address);
+      hostPromise ??= net2.isIP(parsed.host) ? Promise.resolve(parsed.host) : dnsPromises.lookup(parsed.host).then(({ address }) => address).catch((cause) => {
+        throw new VerificationError("DNS server hostname lookup failed", { code: VerificationCode.DNSResolution, transient: true, cause });
+      });
       return resolveTxtWithTtl(name, await hostPromise, port, options?.signal);
     }
   };
@@ -481,7 +506,8 @@ function fetchWithRedirects(url, opts, depth) {
       signal: opts.signal,
       rejectUnauthorized: true,
       headers: {
-        "User-Agent": DNSID_USER_AGENT
+        "User-Agent": DNSID_USER_AGENT,
+        ...opts.revalidate ? { "Cache-Control": "no-cache" } : {}
       },
       lookup: createSsrfSafeLookup(opts.dnsServer, (opts.privateAddressHosts ?? []).map(normalizePrivateAddressHost))
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dnsid-ai/transport",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "Node.js DNS and HTTPS transport implementations for DNSid.",
   "type": "module",
   "types": "./dist/index.d.ts",
@@ -38,7 +38,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@dnsid-ai/protocol": "^0.27.0",
+    "@dnsid-ai/protocol": "^0.29.0",
     "dns-packet": "5.6.1",
     "undici": "^8.11.0"
   },