@gjsify/fetch 0.16.9 → 0.18.0

package/lib/esm/index.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{Blob as e,File as t}from"./utils/blob-from.js";import{FetchError as n}from"./errors/fetch-error.js";import{isDomainOrSubdomain as r,isSameProtocol as i}from"./utils/is.js";import{clone as a}from"./body.js";import o from"./headers.js";import{parseDataUri as s}from"./utils/data-uri.js";import{isRedirect as c}from"./utils/is-redirect.js";import{Response as l}from"./response.js";import{parseReferrerPolicyFromHeader as u}from"./utils/referrer.js";import{Request as d,getSoupRequestOptions as f}from"./request.js";import{AbortError as p}from"./errors/abort-error.js";import{XMLHttpRequest as m,XMLHttpRequestUpload as h}from"./xhr.js";import{URL as g}from"@gjsify/url";import _ from"node:stream";import{FormData as v}from"@gjsify/formdata";import y from"@girs/glib-2.0";const b=new Set([`data:`,`http:`,`https:`,`file:`]);function rewriteRootRelativeUrl(e){if(typeof e!=`string`||!e.startsWith(`/`)||e.startsWith(`//`))return e;let t=globalThis,n=t.__GJSIFY_DEBUG_FETCH===!0;try{let r=t.imports?.system?.programPath??t.imports?.system?.programInvocationName??``;if(!r)return e;let i=`file://${y.path_get_dirname(r)}${e}`;return n&&console.log(`[fetch] rewrite ${e} → ${i}`),i}catch(t){return n&&console.warn(`[fetch] rewrite FAILED: ${t instanceof Error?t.message:String(t)}`),e}}async function fetch(t,m={}){t=rewriteRootRelativeUrl(t);let h=new d(t,m),{parsedURL:v,options:x}=f(h);if(!b.has(v.protocol))throw TypeError(`@gjsify/fetch cannot load ${t}. URL scheme "${v.protocol.replace(/:$/,``)}" is not supported.`);if(v.protocol===`data:`){let{buffer:e,typeFull:t}=s(h.url);return new l(Buffer.from(e),{headers:{"Content-Type":t}})}if(v.protocol===`file:`){let e=globalThis.__GJSIFY_DEBUG_FETCH===!0;e&&console.log(`[fetch] file:// ${h.url}`);try{let t=y.filename_from_uri(h.url)[0];e&&console.log(`[fetch] file:// path=${t}`);let[r,i]=y.file_get_contents(t);if(e&&console.log(`[fetch] file:// ok=${r} bytes=${i?.byteLength??`?`}`),!r)throw new n(`Failed to read file: ${t}`,`system`);let a=i,o=new Uint8Array(a.byteLength);o.set(a);let s=new l(o);return e&&console.log(`[fetch] file:// response created`),s}catch(t){let r=t instanceof Error?t:Error(String(t));throw e&&console.warn(`[fetch] file:// FAIL: ${r.message}`),new n(`request to ${h.url} failed, reason: ${r.message}`,`system`,r)}}let{signal:S}=h;if(S&&S.aborted)throw new p(`The operation was aborted.`);let C,w;try{let e=await h._send(x);C=e.readable,w=e.cancellable}catch(e){let t=e instanceof Error?e:Error(String(e));throw new n(`request to ${h.url} failed, reason: ${t.message}`,`system`,t)}let abortHandler=()=>{w.cancel()};S&&S.addEventListener(`abort`,abortHandler,{once:!0});let finalize=()=>{S&&S.removeEventListener(`abort`,abortHandler)};w.connect(()=>{C.destroy(new p(`The operation was aborted.`))}),C.on(`error`,e=>{finalize()});let T=h._message,E=o._newFromSoupMessage(T),D=T.status_code,O=T.get_reason_phrase();if(c(D)){let e=E.get(`Location`),t=null;try{t=e===null?null:new g(e,h.url)}catch{if(h.redirect!==`manual`)throw finalize(),new n(`uri requested responds with an invalid redirect URL: ${e}`,`invalid-redirect`)}switch(h.redirect){case`error`:throw finalize(),new n(`uri requested responds with a redirect, redirect mode is set to error: ${h.url}`,`no-redirect`);case`manual`:break;case`follow`:{if(t===null)break;if(h.counter>=h.follow)throw finalize(),new n(`maximum redirect reached at: ${h.url}`,`max-redirect`);let e={headers:new o(h.headers),follow:h.follow,counter:h.counter+1,agent:h.agent,compress:h.compress,method:h.method,body:a(h),signal:h.signal,size:h.size,referrer:h.referrer,referrerPolicy:h.referrerPolicy};if(!r(h.url,t)||!i(h.url,t))for(let t of[`authorization`,`www-authenticate`,`cookie`,`cookie2`])e.headers.delete(t);if(D!==303&&h.body&&m.body instanceof _.Readable)throw finalize(),new n(`Cannot follow redirect with body being a readable stream`,`unsupported-redirect`);(D===303||(D===301||D===302)&&h.method===`POST`)&&(e.method=`GET`,e.body=void 0,e.headers.delete(`content-length`));let s=u(E);return s&&(e.referrerPolicy=s),finalize(),fetch(new d(t,e))}default:throw TypeError(`Redirect option '${h.redirect}' is not a valid value of RequestRedirect`)}}let k={url:h.url,status:D,statusText:O,headers:E,size:h.size,counter:h.counter,highWaterMark:h.highWaterMark},A=E.get(`Content-Encoding`);if(!h.compress||h.method===`HEAD`||A===null||D===204||D===304)return finalize(),new l(C,k);if(typeof DecompressionStream<`u`){let t=null;if(A===`gzip`||A===`x-gzip`?t=`gzip`:(A===`deflate`||A===`x-deflate`)&&(t=`deflate`),t){let n=new e([await new l(C,k).arrayBuffer()]).stream().pipeThrough(new DecompressionStream(t));return finalize(),new l(n,k)}}return finalize(),new l(C,k)}export{p as AbortError,e as Blob,n as FetchError,t as File,v as FormData,o as Headers,d as Request,l as Response,m as XMLHttpRequest,h as XMLHttpRequestUpload,fetch as default,c as isRedirect};
+import"./_virtual/_rolldown/runtime.js";import{Blob as e,File as t}from"./utils/blob-from.js";import{FetchError as n}from"./errors/fetch-error.js";import{isDomainOrSubdomain as r,isSameProtocol as i}from"./utils/is.js";import{clone as a}from"./body.js";import o from"./headers.js";import{parseDataUri as s}from"./utils/data-uri.js";import{isRedirect as c}from"./utils/is-redirect.js";import{Response as l}from"./response.js";import{parseReferrerPolicyFromHeader as u}from"./utils/referrer.js";import{Request as d,getSoupRequestOptions as f}from"./request.js";import{AbortError as p}from"./errors/abort-error.js";import{XMLHttpRequest as m,XMLHttpRequestUpload as h}from"./xhr.js";import{URL as g}from"@gjsify/url";import _ from"node:stream";import{FormData as v}from"@gjsify/formdata";import y from"@girs/glib-2.0";const b=new Set([`data:`,`http:`,`https:`,`file:`]);function rewriteRootRelativeUrl(e){if(typeof e!=`string`||!e.startsWith(`/`)||e.startsWith(`//`))return e;let t=globalThis,n=t.__GJSIFY_DEBUG_FETCH===!0;try{let r=t.imports?.system?.programPath??t.imports?.system?.programInvocationName??``;if(!r)return e;let i=`file://${y.path_get_dirname(r)}${e}`;return n&&console.log(`[fetch] rewrite ${e} → ${i}`),i}catch(t){return n&&console.warn(`[fetch] rewrite FAILED: ${t instanceof Error?t.message:String(t)}`),e}}async function fetch(t,m={}){t=rewriteRootRelativeUrl(t);let h=new d(t,m),{parsedURL:v,options:x}=f(h);if(!b.has(v.protocol))throw TypeError(`@gjsify/fetch cannot load ${t}. URL scheme "${v.protocol.replace(/:$/,``)}" is not supported.`);if(v.protocol===`data:`){let{buffer:e,typeFull:t}=s(h.url);return new l(Buffer.from(e),{headers:{"Content-Type":t}})}if(v.protocol===`file:`){let e=globalThis.__GJSIFY_DEBUG_FETCH===!0;e&&console.log(`[fetch] file:// ${h.url}`);try{let t=y.filename_from_uri(h.url)[0];e&&console.log(`[fetch] file:// path=${t}`);let[r,i]=y.file_get_contents(t);if(e&&console.log(`[fetch] file:// ok=${r} bytes=${i?.byteLength??`?`}`),!r)throw new n(`Failed to read file: ${t}`,`system`);let a=i,o=new Uint8Array(a.byteLength);o.set(a);let s=new l(o);return e&&console.log(`[fetch] file:// response created`),s}catch(t){let r=t instanceof Error?t:Error(String(t));throw e&&console.warn(`[fetch] file:// FAIL: ${r.message}`),new n(`request to ${h.url} failed, reason: ${r.message}`,`system`,r)}}let{signal:S}=h;if(S&&S.aborted)throw new p(`The operation was aborted.`);let C,w;try{let e=await h._send(x);C=e.readable,w=e.cancellable}catch(e){if(S&&S.aborted)throw new p(`The operation was aborted.`);let t=e instanceof Error?e:Error(String(e));throw new n(`request to ${h.url} failed, reason: ${t.message}`,`system`,t)}let abortHandler=()=>{w.cancel()};S&&S.addEventListener(`abort`,abortHandler,{once:!0});let finalize=()=>{S&&S.removeEventListener(`abort`,abortHandler)};w.connect(()=>{C.destroy(new p(`The operation was aborted.`))}),C.on(`error`,e=>{finalize()});let T=h._message,E=o._newFromSoupMessage(T),D=T.status_code,O=T.get_reason_phrase();if(c(D)){let e=E.get(`Location`),t=null;try{t=e===null?null:new g(e,h.url)}catch{if(h.redirect!==`manual`)throw finalize(),new n(`uri requested responds with an invalid redirect URL: ${e}`,`invalid-redirect`)}switch(h.redirect){case`error`:throw finalize(),new n(`uri requested responds with a redirect, redirect mode is set to error: ${h.url}`,`no-redirect`);case`manual`:break;case`follow`:{if(t===null)break;if(h.counter>=h.follow)throw finalize(),new n(`maximum redirect reached at: ${h.url}`,`max-redirect`);let e={headers:new o(h.headers),follow:h.follow,counter:h.counter+1,agent:h.agent,compress:h.compress,method:h.method,body:a(h),signal:h.signal,size:h.size,referrer:h.referrer,referrerPolicy:h.referrerPolicy};if(!r(h.url,t)||!i(h.url,t))for(let t of[`authorization`,`www-authenticate`,`cookie`,`cookie2`])e.headers.delete(t);if(D!==303&&h.body&&m.body instanceof _.Readable)throw finalize(),new n(`Cannot follow redirect with body being a readable stream`,`unsupported-redirect`);(D===303||(D===301||D===302)&&h.method===`POST`)&&(e.method=`GET`,e.body=void 0,e.headers.delete(`content-length`));let s=u(E);return s&&(e.referrerPolicy=s),finalize(),fetch(new d(t,e))}default:throw TypeError(`Redirect option '${h.redirect}' is not a valid value of RequestRedirect`)}}let k={url:h.url,status:D,statusText:O,headers:E,size:h.size,counter:h.counter,highWaterMark:h.highWaterMark},A=E.get(`Content-Encoding`);if(!h.compress||h.method===`HEAD`||A===null||D===204||D===304)return finalize(),new l(C,k);if(typeof DecompressionStream<`u`){let t=null;if(A===`gzip`||A===`x-gzip`?t=`gzip`:(A===`deflate`||A===`x-deflate`)&&(t=`deflate`),t){let n=new e([await new l(C,k).arrayBuffer()]).stream().pipeThrough(new DecompressionStream(t));return finalize(),new l(n,k)}}return finalize(),new l(C,k)}export{p as AbortError,e as Blob,n as FetchError,t as File,v as FormData,o as Headers,d as Request,l as Response,m as XMLHttpRequest,h as XMLHttpRequestUpload,fetch as default,c as isRedirect};

package/lib/esm/request.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e});try{g.remove_feature_by_type(f.ContentDecoder.$gtype)}catch{}}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.ENCODED)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.ENCODED)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let r=this._rawBodyBuffer;if(r!==null&&r.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(r))}let i=new m.Cancellable;return this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,i),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:i}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};
+import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function shouldAcceptAnyCert(e){return e===!1?!0:e===!0?!1:p.getenv(`NODE_TLS_REJECT_UNAUTHORIZED`)===`0`}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e});try{g.remove_feature_by_type(f.ContentDecoder.$gtype)}catch{}}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.ENCODED)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;rejectUnauthorized;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.ENCODED)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.rejectUnauthorized=s.rejectUnauthorized??o.rejectUnauthorized,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n,signal:r,parsedURL:i}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let a=this._rawBodyBuffer;if(a!==null&&a.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(a))}i.protocol===`https:`&&shouldAcceptAnyCert(this.rejectUnauthorized)&&n.connect(`accept-certificate`,(e,t,n)=>!0);let c=new m.Cancellable;return r&&(r.aborted?c.cancel():r.addEventListener(`abort`,()=>c.cancel(),{once:!0})),this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,c),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:c}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};

package/lib/index.js

@@ -112,6 +112,11 @@ export default async function fetch(url, init = {}) {
         cancellable = sendRes.cancellable;
     }
     catch (error) {
+        // A send aborted during connect/handshake/TTFB surfaces as a cancelled send_async — report it
+        // as an AbortError (Node parity), not a generic system FetchError.
+        if (signal && signal.aborted) {
+            throw new AbortError('The operation was aborted.');
+        }
         const err = error instanceof Error ? error : new Error(String(error));
         throw new FetchError(`request to ${request.url} failed, reason: ${err.message}`, 'system', err);
     }

package/lib/request.d.ts

@@ -68,6 +68,8 @@ export declare class Request extends Body {
     agent: string | ((url: URL) => string);
     highWaterMark: number;
     insecureHTTPParser: boolean;
+    /** Per-request TLS opt-out (undefined ⇒ verify, honoring NODE_TLS_REJECT_UNAUTHORIZED). */
+    rejectUnauthorized?: boolean;
     constructor(input: RequestInfo | URL | Request, init?: RequestInit);
     /**
      * Send the request using Soup.

package/lib/request.js

@@ -73,6 +73,18 @@ function envPositiveInt(name, fallback) {
     const n = Number.parseInt(raw, 10);
     return Number.isFinite(n) && n > 0 ? n : fallback;
 }
+/**
+ * Whether to accept ANY peer certificate for a request. Node parity: an explicit
+ * `rejectUnauthorized` wins (true keeps verification even under the env override); otherwise the
+ * process-global `NODE_TLS_REJECT_UNAUTHORIZED=0` disables verification (as Node's fetch does).
+ */
+function shouldAcceptAnyCert(rejectUnauthorized) {
+    if (rejectUnauthorized === false)
+        return true;
+    if (rejectUnauthorized === true)
+        return false;
+    return GLib.getenv('NODE_TLS_REJECT_UNAUTHORIZED') === '0';
+}
 function getSharedSession() {
     if (sharedSession === null) {
         const maxPerHost = envPositiveInt('GJSIFY_FETCH_MAX_CONNS_PER_HOST', DEFAULT_MAX_CONNS_PER_HOST);
@@ -193,6 +205,8 @@ export class Request extends Body {
     agent = '';
     highWaterMark = 16384;
     insecureHTTPParser = false;
+    /** Per-request TLS opt-out (undefined ⇒ verify, honoring NODE_TLS_REJECT_UNAUTHORIZED). */
+    rejectUnauthorized;
     constructor(input, init) {
         const inputRL = input;
         const initRL = (init || {});
@@ -303,6 +317,7 @@ export class Request extends Body {
         this.agent = initRL.agent || inputRL.agent;
         this.highWaterMark = initRL.highWaterMark || inputRL.highWaterMark || 16384;
         this.insecureHTTPParser = initRL.insecureHTTPParser || inputRL.insecureHTTPParser || false;
+        this.rejectUnauthorized = initRL.rejectUnauthorized ?? inputRL.rejectUnauthorized;
         // §5.4, Request constructor steps, step 16.
         // Default is empty string per https://fetch.spec.whatwg.org/#concept-request-referrer-policy
         this.referrerPolicy = init?.referrerPolicy || inputRL.referrerPolicy || '';
@@ -311,7 +326,7 @@ export class Request extends Body {
      * Send the request using Soup.
      */
     async _send(options) {
-        const { session, message } = this[INTERNALS];
+        const { session, message, signal, parsedURL } = this[INTERNALS];
         if (!session || !message) {
             throw new Error('Cannot send request: no Soup session (non-HTTP URL?)');
         }
@@ -328,7 +343,29 @@ export class Request extends Body {
             const contentType = options.headers.get('content-type') || null;
             message.set_request_body_from_bytes(contentType, new GLib.Bytes(rawBuf));
         }
+        // Per-connection TLS policy: when this request opts out of verification
+        // (`rejectUnauthorized: false`, or the Node-global NODE_TLS_REJECT_UNAUTHORIZED=0), accept the
+        // peer cert for THIS message only — never the shared session, which would silently disable
+        // verification for every other fetch. Mirrors the `accept-certificate` idiom in
+        // @gjsify/{tls,http2}. `accept-certificate` lives on Soup.Message (not the session) in
+        // libsoup 3 and isn't in the typed SignalSignatures map, so widen to the string overload.
+        if (parsedURL.protocol === 'https:' && shouldAcceptAnyCert(this.rejectUnauthorized)) {
+            const signalName = 'accept-certificate';
+            message.connect(signalName, (_msg, _cert, _errors) => true);
+        }
         const cancellable = new Gio.Cancellable();
+        // Close the connect/TTFB abort gap: wire abort → cancel BEFORE send_async. index.ts only wires
+        // it AFTER _send resolves (i.e. after response headers arrive), so an abort fired during
+        // connect + request-send + time-to-first-byte was previously dropped — the hung-server timeout
+        // case. A cancelled send_async rejects; index.ts maps that to an AbortError when signal.aborted.
+        if (signal) {
+            if (signal.aborted) {
+                cancellable.cancel();
+            }
+            else {
+                signal.addEventListener('abort', () => cancellable.cancel(), { once: true });
+            }
+        }
         this[INTERNALS].inputStream = await soupSendAsync(session, message, GLib.PRIORITY_DEFAULT, cancellable);
         this[INTERNALS].readable = inputStreamToReadable(this[INTERNALS].inputStream);
         return {

package/lib/tls-abort.gjs.spec.d.ts

@@ -0,0 +1,2 @@
+declare const _default: () => Promise<void>;
+export default _default;

package/lib/tls-abort.gjs.spec.js

@@ -0,0 +1,263 @@
+// TLS opt-out + abort behavior for @gjsify/fetch on GJS — original regression tests.
+//
+// Covers two Node-parity gaps closed in request.ts / index.ts:
+//   1. Per-connection TLS: a request may opt out of certificate verification with
+//      `rejectUnauthorized: false` (mirroring undici's `connect.rejectUnauthorized`) — applied to
+//      THAT Soup.Message only via its `accept-certificate` signal, never the shared session. The
+//      process-global `NODE_TLS_REJECT_UNAUTHORIZED=0` is also honored (as Node's fetch does).
+//   2. Abort: an aborted signal rejects the fetch with an AbortError (name === 'AbortError'), and
+//      the abort→cancel wiring is attached BEFORE send_async so an abort during connect/TTFB is not
+//      lost (see request.ts `_send`).
+//
+// GJS-only (`.gjs.spec.ts`): the body runs under `on('Gjs', …)`, a no-op on Node. Soup/GLib/Gio are
+// read from the GJS bootstrap `imports` (same idiom as soup-session.gjs.spec.ts) so the Node bundle
+// never resolves `gi://*`. Request/fetch are read from `globalThis` (installed by
+// `@gjsify/fetch/register`, pulled in by test.mts). `@gjsify/abort-controller` is pure-TS
+// cross-runtime, so its static import is safe on both legs.
+import { describe, it, expect, on } from '@gjsify/unit';
+import { AbortController, AbortSignal } from '@gjsify/abort-controller';
+// A REAL self-signed cert+key (RSA-2048, CN=localhost, SAN DNS:localhost + IP:127.0.0.1, 100y) so a
+// live TLS handshake against the local Soup.Server actually completes. Embedded inline to stay
+// hermetic (no fixtures) — same approach as packages/node/tls TEST_CERT_AND_KEY. Regenerate with:
+//   openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 36500 \
+//     -subj /CN=localhost -addext "subjectAltName = DNS:localhost,IP:127.0.0.1"
+const SELF_SIGNED_CERT_AND_KEY = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC9S/lXTWdjIpw7
+dI2v2095KssX99/Kh6xznHZ9Ed3DgGGivMXSkPJfFeEj/LecSTJn0YVxGtu/tdon
+3Gnswk3JfFBuzm0MG5ks4puRkKsuJV8+TtpcsBHVglTVnTqiw44yfk+VZdLomZHd
+cd61sTG7r97+TtVHbjZqQ0rKjhwBfv3TysLrvE07rrB1UbagISroYg+G5EysQH0Y
+u9JbRsvefOKaK9vwq/jbrdSWFrezR6xePGZsInr38Zt57O32ok0HMsT+DOeB+2GE
+0xd4+gEgr3XXHSP2PrWOtDtq74d025H9kFpp7C4kypY/lt6/i6D7CKu685zK68EK
+yb3EvyubAgMBAAECggEABQaKqFFuUYIiKaUafByGSqXIlLmVsdwSMQfqlFX9l7uj
+m/Hhs68YGSG9x0lPOcgBd+aMcMZtcfwUL1u7P9ZF0Fm8d2YLSaDqTB28njywrzZU
+nI2LFGJ2v6/QQvFWo8yXAVulLTAuLy2R+bey0hodSt55l0/wL3FS4pGgubjyTgr+
+ZY4DWjxwdPqZSC29nBN6HtOU0LMt+0UZS4QoSkb4LP/OSG7ZfZk2ssuVJioZnNwS
+Gh6XB7YjzDkMcYtZ9Os8rvFdeECqM53N3DT8RHImbQZpkamodhJR5/Y7MNFAfg0l
+yISz8u47iS2ZJV/3ePbxOotRtAPLbyErfo1PVkOsgQKBgQDz53RUbKTvEzXTVcTW
+MhDc4pNtT7FWNmAhYCaVboJk6jisWOagzUHSZyJd+KFOPCwW0TZAd3DXbAjBCVg7
+/Yuxu0K3tvYsDRAyaKrDrF4I03aS3d7GlbaNBxNmWZXwd6UloLmXQvmWooX7FlfM
+WXV2BgfEc/RaQV4e+CcZgd96GwKBgQDGrz0HsgaiqBknWtDjVJEEnU3DMEEWPF6u
+NQ+YZ3gOJE7yIIs/aJXK1TJE+i+CMI9y+O50eyHIqE6xbF/aM0gTgAzzWPVwan4z
+P+8MZcHrRrLUWCi/hULQXjzKAh33zUc8+npEewIIaIe2SQp/j4NTYKjYqXS6Vkvh
+cR6oQNIsgQKBgQCExsJ4VzCuiZmqs61VIao2ZQ322wRiN3W7lZlLjf5kK3GwuTDL
+5xFnFggKehht+6nQvhG3pI4EZ+aYF5s2BT/wAE5ArtRyhKYFmx8jKImEaoHJUAk/
+uC7JtUllVW2fm7KGumluI+K1k0I2vyIKt8SO/Jdr5efm3mD7oQHADAh5cwKBgHUq
+slrvaWpSp0LGE5l8LWkDOvB4bGmogE1LjT7bBbmRP90ZxARIsM1EnLiAsbOc33t1
+wWl/k5S5bG7E8mHDDCYzxW9cbqE0q+edNGOjPpB4yMzgkGchNx2Z9U9LoFCaBgC3
+1ZK8154NxrqAqGhBQbjRr8DVbbjVWzo/c0zVrRwBAoGBAJ8USM/06E60u0Tq8zU9
+q1z0p3hu++Gude5e9IHp3tnS2/MLIbJDyfvkVkx5gLJXKYdEykP10CLOqu8DC1c5
+9FvsYKlRm0GzDlTtX12jXGWHaQXy9Di69Sd3J6StLf04IEl3W4e9KTg7zDA9cg94
+StMiAiohwWMqIzCc88GovQMF
+-----END PRIVATE KEY-----
+`;
+export default async () => {
+    await on('Gjs', async () => {
+        // Read GJS runtime objects lazily (no static gi:// import → Node bundle stays clean).
+        const gjs = globalThis.imports;
+        const Soup = gjs.gi.Soup;
+        const GLib = gjs.gi.GLib;
+        const Gio = gjs.gi.Gio;
+        // Request + fetch are installed as globals by `@gjsify/fetch/register` (via test.mts). Type
+        // them with FetchInit so the GJS-only options type-check under the fetch package's DOM lib.
+        const RequestCtor = globalThis
+            .Request;
+        const fetchFn = globalThis
+            .fetch;
+        /** Start a fresh self-signed HTTPS Soup.Server on loopback; returns it plus its base URL. */
+        const startHttpsServer = () => {
+            const cert = Gio.TlsCertificate.new_from_pem(SELF_SIGNED_CERT_AND_KEY, -1);
+            const server = new Soup.Server({});
+            server.set_tls_certificate(cert);
+            server.add_handler(null, (_s, msg) => {
+                msg.set_status(200, null);
+                msg.set_response('text/plain', Soup.MemoryUse.COPY, new TextEncoder().encode('ok'));
+            });
+            server.listen_local(0, (Soup.ServerListenOptions.HTTPS | Soup.ServerListenOptions.IPV4_ONLY));
+            return { server, base: server.get_uris()[0].to_string() };
+        };
+        await describe('@gjsify/fetch — per-connection TLS opt-out plumbing', async () => {
+            await it('carries rejectUnauthorized:false from init onto the request', () => {
+                const req = new RequestCtor('https://example.com/', { rejectUnauthorized: false });
+                expect(req.rejectUnauthorized).toBe(false);
+            });
+            await it('defaults rejectUnauthorized to undefined (verification stays on)', () => {
+                const req = new RequestCtor('https://example.com/');
+                expect(req.rejectUnauthorized).toBe(undefined);
+            });
+        });
+        await describe('@gjsify/fetch — abort surfaces as AbortError', async () => {
+            await it('rejects with an AbortError when the signal is already aborted', async () => {
+                const ctrl = new AbortController();
+                ctrl.abort();
+                let name = '';
+                try {
+                    // Already-aborted → rejects before any socket work, so no server is needed.
+                    await fetchFn('http://127.0.0.1:1/', { signal: ctrl.signal });
+                }
+                catch (e) {
+                    name = e.name;
+                }
+                expect(name).toBe('AbortError');
+            });
+        });
+        await describe('@gjsify/fetch — self-signed TLS (per-connection opt-out, no shared-session leak)', async () => {
+            await it('rejects a self-signed host by default (verification on)', async () => {
+                const { server, base } = startHttpsServer();
+                let rejected = false;
+                try {
+                    await fetchFn(base);
+                }
+                catch {
+                    rejected = true;
+                }
+                finally {
+                    server.disconnect();
+                }
+                expect(rejected).toBe(true);
+            });
+            await it('resolves when the request opts out with rejectUnauthorized:false', async () => {
+                const { server, base } = startHttpsServer();
+                let status = 0;
+                let body = '';
+                try {
+                    const res = await fetchFn(base, { rejectUnauthorized: false });
+                    status = res.status;
+                    body = await res.text();
+                }
+                finally {
+                    server.disconnect();
+                }
+                expect(status).toBe(200);
+                expect(body).toBe('ok');
+            });
+            await it('honors NODE_TLS_REJECT_UNAUTHORIZED=0 for the default call', async () => {
+                const { server, base } = startHttpsServer();
+                const prev = GLib.getenv('NODE_TLS_REJECT_UNAUTHORIZED');
+                GLib.setenv('NODE_TLS_REJECT_UNAUTHORIZED', '0', true);
+                let status = 0;
+                try {
+                    const res = await fetchFn(base); // no per-request opt-out → env is what opens it
+                    status = res.status;
+                    await res.text();
+                }
+                finally {
+                    if (prev === null)
+                        GLib.unsetenv('NODE_TLS_REJECT_UNAUTHORIZED');
+                    else
+                        GLib.setenv('NODE_TLS_REJECT_UNAUTHORIZED', prev, true);
+                    server.disconnect();
+                }
+                expect(status).toBe(200);
+            });
+            await it('lets an explicit rejectUnauthorized:true win over NODE_TLS_REJECT_UNAUTHORIZED=0', async () => {
+                const { server, base } = startHttpsServer();
+                const prev = GLib.getenv('NODE_TLS_REJECT_UNAUTHORIZED');
+                GLib.setenv('NODE_TLS_REJECT_UNAUTHORIZED', '0', true);
+                let rejected = false;
+                try {
+                    await fetchFn(base, { rejectUnauthorized: true });
+                }
+                catch {
+                    rejected = true;
+                }
+                finally {
+                    if (prev === null)
+                        GLib.unsetenv('NODE_TLS_REJECT_UNAUTHORIZED');
+                    else
+                        GLib.setenv('NODE_TLS_REJECT_UNAUTHORIZED', prev, true);
+                    server.disconnect();
+                }
+                expect(rejected).toBe(true);
+            });
+            await it('scopes the accepted cert to the message: a normal fetch elsewhere still verifies', async () => {
+                // Two independent self-signed servers. Accepting server A's cert (per-message) must NOT
+                // teach the shared Soup.Session to trust server B — B is a fresh host:port with no
+                // pooled connection, so it must handshake + verify from scratch and reject.
+                const a = startHttpsServer();
+                const b = startHttpsServer();
+                let insecureStatus = 0;
+                let secureRejected = false;
+                try {
+                    const res = await fetchFn(a.base, { rejectUnauthorized: false });
+                    insecureStatus = res.status;
+                    await res.text();
+                    try {
+                        await fetchFn(b.base); // default on the SAME shared session must still verify
+                    }
+                    catch {
+                        secureRejected = true;
+                    }
+                }
+                finally {
+                    a.server.disconnect();
+                    b.server.disconnect();
+                }
+                expect(insecureStatus).toBe(200);
+                expect(secureRejected).toBe(true);
+            });
+        });
+        await describe('@gjsify/fetch — AbortSignal.timeout against a hung server rejects promptly', async () => {
+            await it('rejects with AbortError while waiting for response headers (connect-phase fix)', async () => {
+                const server = new Soup.Server({});
+                server.add_handler(null, (_s, msg) => {
+                    // Never respond: pause the message so the client blocks on time-to-first-byte. On
+                    // `main` the abort wired only AFTER _send resolves is dropped here and the fetch
+                    // hangs; the fix wires it before send_async, so AbortSignal.timeout cancels the
+                    // in-flight send and index.ts maps the cancellation to an AbortError.
+                    server.pause_message(msg);
+                });
+                server.listen_local(0, Soup.ServerListenOptions.IPV4_ONLY);
+                const base = server.get_uris()[0].to_string();
+                // Bounded so a regression fails the test instead of hanging CI: if the fetch has not
+                // settled within 3s the watchdog rejects and the AbortError assertion below fails.
+                let watchdogId = 0;
+                const watchdog = new Promise((_resolve, reject) => {
+                    watchdogId = GLib.timeout_add(GLib.PRIORITY_DEFAULT, 3000, () => {
+                        watchdogId = 0;
+                        reject(new Error('fetch did not settle within 3s — connect-phase abort regressed'));
+                        return GLib.SOURCE_REMOVE;
+                    });
+                });
+                const startedUs = GLib.get_monotonic_time();
+                let name = '';
+                let elapsedMs = 0;
+                try {
+                    await Promise.race([fetchFn(base, { signal: AbortSignal.timeout(50) }), watchdog]);
+                }
+                catch (e) {
+                    name = e.name;
+                    elapsedMs = (GLib.get_monotonic_time() - startedUs) / 1000;
+                }
+                finally {
+                    if (watchdogId) {
+                        GLib.source_remove(watchdogId);
+                        watchdogId = 0;
+                    }
+                    server.disconnect();
+                }
+                expect(name).toBe('AbortError');
+                // The 50ms timeout must fire during connect/TTFB — well under the 3s watchdog.
+                expect(elapsedMs < 2000).toBe(true);
+            });
+        });
+    });
+};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/fetch",
-    "version": "0.16.9",
+    "version": "0.18.0",
     "description": "Web and Node.js fetch module for Gjs",
     "module": "lib/esm/index.js",
     "types": "lib/index.d.ts",
@@ -41,7 +41,7 @@
         "build:test:gjs": "gjsify build src/test.mts --app gjs --outfile test.gjs.mjs",
         "build:test:browser": "gjsify build src/test.browser.mts --app browser --outfile dist/test.browser.mjs",
         "build:test:node": "gjsify build src/test.mts --app node --outfile test.node.mjs",
-        "test": "gjsify run build:gjsify && gjsify run build:test:node && gjsify run test:node",
+        "test": "gjsify run build:gjsify && gjsify run build:test && gjsify run test:node && gjsify run test:gjs",
         "test:gjs": "gjsify run test.gjs.mjs",
         "test:node": "node test.node.mjs"
     },
@@ -51,8 +51,8 @@
         "fetch"
     ],
     "devDependencies": {
-        "@gjsify/cli": "^0.16.9",
-        "@gjsify/unit": "^0.16.9",
+        "@gjsify/cli": "^0.18.0",
+        "@gjsify/unit": "^0.18.0",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"
     },
@@ -61,10 +61,10 @@
         "@girs/gjs": "^4.1.0",
         "@girs/glib-2.0": "^4.1.0",
         "@girs/soup-3.0": "^4.1.0",
-        "@gjsify/formdata": "^0.16.9",
-        "@gjsify/http": "^0.16.9",
-        "@gjsify/url": "^0.16.9",
-        "@gjsify/utils": "^0.16.9"
+        "@gjsify/formdata": "^0.18.0",
+        "@gjsify/http": "^0.18.0",
+        "@gjsify/url": "^0.18.0",
+        "@gjsify/utils": "^0.18.0"
     },
     "gjsify": {
         "runtimes": {