@foss.global/codefeed 5.5.0 → 5.6.0

package/ts/forgeinventory.transport.ts

@@ -72,14 +72,32 @@ export interface INodeResponse extends IForgeTransportResponse {
   sent: Promise<void>;
 }
 
+/**
+ * A lookup that answers every name with `addressArg`, an IP address, in the
+ * form the caller asks for (one address, or a list with `all`).
+ */
+const fixedLookup = (addressArg: string): plugins.net.LookupFunction => {
+  const family = plugins.net.isIP(addressArg);
+  return (_hostnameArg, optionsArg, callbackArg) => {
+    if (optionsArg.all) callbackArg(null, [{ address: addressArg, family }]);
+    else callbackArg(null, addressArg, family);
+  };
+};
+
 /**
  * Idle keep-alive agents that unreference their pooled sockets, so pooled
- * connections never keep the process alive.
+ * connections never keep the process alive. With `connectAddressArg`, an IP
+ * address, every connection goes to that address on the URL's port instead
+ * of the one DNS gives for the URL's host; the Host header, the TLS server
+ * name and the certificate check stay the URL's host.
  */
-export const createNodeAgents = (caCertificatesArg?: string[], allowHttpArg = false): INodeRequestAgents => ({
-  https: new plugins.https.Agent({ ...(caCertificatesArg ? { ca: caCertificatesArg } : {}), keepAlive: true, timeout: idleSocketTimeoutMs }),
-  ...(allowHttpArg ? { http: new plugins.http.Agent({ keepAlive: true, timeout: idleSocketTimeoutMs }) } : {}),
-});
+export const createNodeAgents = (caCertificatesArg?: string[], allowHttpArg = false, connectAddressArg?: string): INodeRequestAgents => {
+  const lookup = connectAddressArg === undefined ? {} : { lookup: fixedLookup(connectAddressArg) };
+  return {
+    https: new plugins.https.Agent({ ...(caCertificatesArg ? { ca: caCertificatesArg } : {}), ...lookup, keepAlive: true, timeout: idleSocketTimeoutMs }),
+    ...(allowHttpArg ? { http: new plugins.http.Agent({ ...lookup, keepAlive: true, timeout: idleSocketTimeoutMs }) } : {}),
+  };
+};
 
 /** Waits until the request can take more body bytes; rejects once it has closed. */
 const drained = (requestArg: InstanceType<typeof plugins.http.ClientRequest>): Promise<void> => new Promise((resolve, reject) => {
@@ -160,17 +178,17 @@ export const sendNodeRequest = (url: URL, requestArg: INodeRequest): Promise<INo
   });
 });
 
+/** `sendNodeRequest` through `agentsArg` as a transport: a GET, or a POST of the body. */
+export const createAgentTransport = (agentsArg: INodeRequestAgents): TForgeTransport => async (url, headers, signal, body, options) => {
+  const { sent: _sent, ...response } = await sendNodeRequest(url, {
+    method: body ? 'POST' : 'GET', headers, body, signal, agents: agentsArg, redirect: options?.redirect,
+  });
+  return response;
+};
+
 /**
  * `node:https` with an owned keep-alive agent whose `ca` list replaces the
  * default trust store for these connections only. The agent unreferences idle
  * sockets, so pooled connections never keep the process alive.
  */
-export const createHttpsTransport = (caCertificates: string[]): TForgeTransport => {
-  const agents = createNodeAgents(caCertificates);
-  return async (url, headers, signal, body, options) => {
-    const { sent: _sent, ...response } = await sendNodeRequest(url, {
-      method: body ? 'POST' : 'GET', headers, body, signal, agents, redirect: options?.redirect,
-    });
-    return response;
-  };
-};
+export const createHttpsTransport = (caCertificates: string[]): TForgeTransport => createAgentTransport(createNodeAgents(caCertificates));

package/ts/index.ts

@@ -487,6 +487,7 @@ export class CodeFeed {
 }
 export * from './classes.forgeinventory.js';
 export * from './classes.forgeinventoryscanner.js';
+export * from './classes.giteasourcefreeze.js';
 export * from './classes.giteasourceinventory.js';
 export * from './classes.giteasourcetransfer.js';
 export * from './classes.lfsbatchclient.js';