@gjsify/fetch 0.25.1 → 0.26.1

package/lib/esm/index.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{Blob as e,File as t}from"./utils/blob-from.js";import{FetchError as n}from"./errors/fetch-error.js";import{isDomainOrSubdomain as r,isSameProtocol as i}from"./utils/is.js";import{clone as a}from"./body.js";import o from"./headers.js";import{parseDataUri as s}from"./utils/data-uri.js";import{isRedirect as c}from"./utils/is-redirect.js";import{Response as l}from"./response.js";import{parseReferrerPolicyFromHeader as u}from"./utils/referrer.js";import{Request as d,getSoupRequestOptions as f}from"./request.js";import{AbortError as p}from"./errors/abort-error.js";import{XMLHttpRequest as m,XMLHttpRequestUpload as h}from"./xhr.js";import{URL as g}from"@gjsify/url";import _ from"node:stream";import{FormData as v}from"@gjsify/formdata";import y from"@girs/glib-2.0";import b from"system";const x=new Set([`data:`,`http:`,`https:`,`file:`]);function rewriteRootRelativeUrl(e){if(typeof e!=`string`||!e.startsWith(`/`)||e.startsWith(`//`))return e;let t=globalThis.__GJSIFY_DEBUG_FETCH===!0;try{let n=b.programPath??b.programInvocationName??``;if(!n)return e;let r=`file://${y.path_get_dirname(n)}${e}`;return t&&console.log(`[fetch] rewrite ${e} → ${r}`),r}catch(n){return t&&console.warn(`[fetch] rewrite FAILED: ${n instanceof Error?n.message:String(n)}`),e}}async function fetch(t,m={}){t=rewriteRootRelativeUrl(t);let h=new d(t,m),{parsedURL:v,options:b}=f(h);if(!x.has(v.protocol))throw TypeError(`@gjsify/fetch cannot load ${t}. URL scheme "${v.protocol.replace(/:$/,``)}" is not supported.`);if(v.protocol===`data:`){let{buffer:e,typeFull:t}=s(h.url);return new l(Buffer.from(e),{headers:{"Content-Type":t}})}if(v.protocol===`file:`){let e=globalThis.__GJSIFY_DEBUG_FETCH===!0;e&&console.log(`[fetch] file:// ${h.url}`);try{let t=y.filename_from_uri(h.url)[0];e&&console.log(`[fetch] file:// path=${t}`);let[r,i]=y.file_get_contents(t);if(e&&console.log(`[fetch] file:// ok=${r} bytes=${i?.byteLength??`?`}`),!r)throw new n(`Failed to read file: ${t}`,`system`);let a=i,o=new Uint8Array(a.byteLength);o.set(a);let s=new l(o);return e&&console.log(`[fetch] file:// response created`),s}catch(t){let r=t instanceof Error?t:Error(String(t));throw e&&console.warn(`[fetch] file:// FAIL: ${r.message}`),new n(`request to ${h.url} failed, reason: ${r.message}`,`system`,r)}}let{signal:S}=h;if(S&&S.aborted)throw new p(`The operation was aborted.`);let C,w;try{let e=await h._send(b);C=e.readable,w=e.cancellable}catch(e){if(S&&S.aborted)throw new p(`The operation was aborted.`);let t=e instanceof Error?e:Error(String(e));throw new n(`request to ${h.url} failed, reason: ${t.message}`,`system`,t)}let abortHandler=()=>{w.cancel()};S&&S.addEventListener(`abort`,abortHandler,{once:!0});let finalize=()=>{S&&S.removeEventListener(`abort`,abortHandler)};w.connect(()=>{C.destroy(new p(`The operation was aborted.`))}),C.on(`error`,e=>{finalize()});let T=h._message,E=o._newFromSoupMessage(T),D=T.status_code,O=T.get_reason_phrase();if(c(D)){let e=E.get(`Location`),t=null;try{t=e===null?null:new g(e,h.url)}catch{if(h.redirect!==`manual`)throw finalize(),new n(`uri requested responds with an invalid redirect URL: ${e}`,`invalid-redirect`)}switch(h.redirect){case`error`:throw finalize(),new n(`uri requested responds with a redirect, redirect mode is set to error: ${h.url}`,`no-redirect`);case`manual`:break;case`follow`:{if(t===null)break;if(h.counter>=h.follow)throw finalize(),new n(`maximum redirect reached at: ${h.url}`,`max-redirect`);let e={headers:new o(h.headers),follow:h.follow,counter:h.counter+1,agent:h.agent,compress:h.compress,method:h.method,body:a(h),signal:h.signal,size:h.size,referrer:h.referrer,referrerPolicy:h.referrerPolicy};if(!r(h.url,t)||!i(h.url,t))for(let t of[`authorization`,`www-authenticate`,`cookie`,`cookie2`])e.headers.delete(t);if(D!==303&&h.body&&m.body instanceof _.Readable)throw finalize(),new n(`Cannot follow redirect with body being a readable stream`,`unsupported-redirect`);(D===303||(D===301||D===302)&&h.method===`POST`)&&(e.method=`GET`,e.body=void 0,e.headers.delete(`content-length`));let s=u(E);return s&&(e.referrerPolicy=s),finalize(),fetch(new d(t,e))}default:throw TypeError(`Redirect option '${h.redirect}' is not a valid value of RequestRedirect`)}}let k={url:h.url,status:D,statusText:O,headers:E,size:h.size,counter:h.counter,highWaterMark:h.highWaterMark},A=E.get(`Content-Encoding`);if(!h.compress||h.method===`HEAD`||A===null||D===204||D===304)return finalize(),new l(C,k);if(typeof DecompressionStream<`u`){let t=null;if(A===`gzip`||A===`x-gzip`?t=`gzip`:(A===`deflate`||A===`x-deflate`)&&(t=`deflate`),t){let n=new e([await new l(C,k).arrayBuffer()]).stream().pipeThrough(new DecompressionStream(t));return finalize(),new l(n,k)}}return finalize(),new l(C,k)}export{p as AbortError,e as Blob,n as FetchError,t as File,v as FormData,o as Headers,d as Request,l as Response,m as XMLHttpRequest,h as XMLHttpRequestUpload,fetch as default,c as isRedirect};
+import"./_virtual/_rolldown/runtime.js";import{Blob as e,File as t}from"./utils/blob-from.js";import{FetchError as n}from"./errors/fetch-error.js";import{isDomainOrSubdomain as r,isSameProtocol as i}from"./utils/is.js";import{clone as a}from"./body.js";import{AbortError as o}from"./errors/abort-error.js";import s from"./headers.js";import{parseDataUri as c}from"./utils/data-uri.js";import{resolveRootRelativeUrl as l}from"./utils/root-relative-system.js";import{isRedirect as u}from"./utils/is-redirect.js";import{Response as d}from"./response.js";import{parseReferrerPolicyFromHeader as f}from"./utils/referrer.js";import{Request as p,getSoupRequestOptions as m}from"./request.js";import{XMLHttpRequest as h,XMLHttpRequestUpload as g}from"./xhr.js";import{URL as _}from"@gjsify/url";import v from"node:stream";import{FormData as y}from"@gjsify/formdata";import b from"@girs/glib-2.0";const x=new Set([`data:`,`http:`,`https:`,`file:`]);function rewriteFetchInput(e){if(typeof e!=`string`)return e;let t=l(e);return t!==e&&globalThis.__GJSIFY_DEBUG_FETCH===!0&&console.log(`[fetch] rewrite ${e} → ${t}`),t}async function fetch(t,l={}){t=rewriteFetchInput(t);let h=new p(t,l),{parsedURL:g,options:y}=m(h);if(!x.has(g.protocol))throw TypeError(`@gjsify/fetch cannot load ${t}. URL scheme "${g.protocol.replace(/:$/,``)}" is not supported.`);if(g.protocol===`data:`){let{buffer:e,typeFull:t}=c(h.url);return new d(Buffer.from(e),{headers:{"Content-Type":t}})}if(g.protocol===`file:`){let e=globalThis.__GJSIFY_DEBUG_FETCH===!0;e&&console.log(`[fetch] file:// ${h.url}`);try{let t=b.filename_from_uri(h.url)[0];e&&console.log(`[fetch] file:// path=${t}`);let[r,i]=b.file_get_contents(t);if(e&&console.log(`[fetch] file:// ok=${r} bytes=${i?.byteLength??`?`}`),!r)throw new n(`Failed to read file: ${t}`,`system`);let a=i,o=new Uint8Array(a.byteLength);o.set(a);let s=new d(o);return e&&console.log(`[fetch] file:// response created`),s}catch(t){let r=t instanceof Error?t:Error(String(t));throw e&&console.warn(`[fetch] file:// FAIL: ${r.message}`),new n(`request to ${h.url} failed, reason: ${r.message}`,`system`,r)}}let{signal:S}=h;if(S&&S.aborted)throw new o(`The operation was aborted.`);let C,w;try{let e=await h._send(y);C=e.readable,w=e.cancellable}catch(e){if(S&&S.aborted)throw new o(`The operation was aborted.`);let t=e instanceof Error?e:Error(String(e));throw new n(`request to ${h.url} failed, reason: ${t.message}`,`system`,t)}let abortHandler=()=>{w.cancel()};S&&S.addEventListener(`abort`,abortHandler,{once:!0});let finalize=()=>{S&&S.removeEventListener(`abort`,abortHandler)};w.connect(()=>{C.destroy(new o(`The operation was aborted.`))}),C.on(`error`,e=>{finalize()});let T=h._message,E=s._newFromSoupMessage(T),D=T.status_code,O=T.get_reason_phrase();if(u(D)){let e=E.get(`Location`),t=null;try{t=e===null?null:new _(e,h.url)}catch{if(h.redirect!==`manual`)throw finalize(),new n(`uri requested responds with an invalid redirect URL: ${e}`,`invalid-redirect`)}switch(h.redirect){case`error`:throw finalize(),new n(`uri requested responds with a redirect, redirect mode is set to error: ${h.url}`,`no-redirect`);case`manual`:break;case`follow`:{if(t===null)break;if(h.counter>=h.follow)throw finalize(),new n(`maximum redirect reached at: ${h.url}`,`max-redirect`);let e={headers:new s(h.headers),follow:h.follow,counter:h.counter+1,agent:h.agent,compress:h.compress,method:h.method,body:a(h),signal:h.signal,size:h.size,referrer:h.referrer,referrerPolicy:h.referrerPolicy};if(!r(h.url,t)||!i(h.url,t))for(let t of[`authorization`,`www-authenticate`,`cookie`,`cookie2`])e.headers.delete(t);if(D!==303&&h.body&&l.body instanceof v.Readable)throw finalize(),new n(`Cannot follow redirect with body being a readable stream`,`unsupported-redirect`);(D===303||(D===301||D===302)&&h.method===`POST`)&&(e.method=`GET`,e.body=void 0,e.headers.delete(`content-length`));let o=f(E);return o&&(e.referrerPolicy=o),finalize(),fetch(new p(t,e))}default:throw TypeError(`Redirect option '${h.redirect}' is not a valid value of RequestRedirect`)}}let k={url:h.url,status:D,statusText:O,headers:E,size:h.size,counter:h.counter,highWaterMark:h.highWaterMark},A=E.get(`Content-Encoding`);if(!h.compress||h.method===`HEAD`||A===null||D===204||D===304)return finalize(),new d(C,k);if(typeof DecompressionStream<`u`){let t=null;if(A===`gzip`||A===`x-gzip`?t=`gzip`:(A===`deflate`||A===`x-deflate`)&&(t=`deflate`),t){let n=new e([await new d(C,k).arrayBuffer()]).stream().pipeThrough(new DecompressionStream(t));return finalize(),new d(n,k)}}return finalize(),new d(C,k)}export{o as AbortError,e as Blob,n as FetchError,t as File,y as FormData,s as Headers,p as Request,d as Response,h as XMLHttpRequest,g as XMLHttpRequestUpload,fetch as default,u as isRedirect,l as resolveRootRelativeUrl};

package/lib/esm/register/xhr.js

@@ -1 +1 @@
-import{XMLHttpRequest as e,XMLHttpRequestUpload as t}from"../xhr.js";import n from"gi://GLib?version=2.0";globalThis.XMLHttpRequest===void 0&&(globalThis.XMLHttpRequest=e),globalThis.XMLHttpRequestUpload===void 0&&(globalThis.XMLHttpRequestUpload=t);const r=globalThis.URL;if(r&&r.__gjsify_objecturl!==!0){let e=new Map,t=r.createObjectURL?.bind(r),i=r.revokeObjectURL?.bind(r);r.createObjectURL=n=>{let r=n?._tmpPath;if(typeof r==`string`&&r.length>0){let t=`file://${r}`;return e.set(t,r),t}return t?t(n):`file:///dev/null`},r.revokeObjectURL=t=>{let r=e.get(t);if(r){try{n.unlink(r)}catch{}e.delete(t)}else i&&i(t)},r.__gjsify_objecturl=!0}
+import{XMLHttpRequest as e,XMLHttpRequestUpload as t}from"../xhr.js";import n from"gi://GLib?version=2.0";globalThis.XMLHttpRequest===void 0&&(globalThis.XMLHttpRequest=e),globalThis.XMLHttpRequestUpload===void 0&&(globalThis.XMLHttpRequestUpload=t);const r=globalThis.URL;if(r&&r.__gjsify_objecturl!==!0){let e=new Map,t=r.createObjectURL?.bind(r),i=r.revokeObjectURL?.bind(r);r.createObjectURL=n=>{let r=n?._tmpPath;if(typeof r==`string`&&r.length>0){let t=`file://${r}`;return e.set(t,r),t}return t?t(n):`file:///dev/null`},r.revokeObjectURL=t=>{let r=e.get(t);r?(n.unlink(r),e.delete(t)):i&&i(t)},r.__gjsify_objecturl=!0}

package/lib/esm/request.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function shouldAcceptAnyCert(e){return e===!1?!0:e===!0?!1:p.getenv(`NODE_TLS_REJECT_UNAUTHORIZED`)===`0`}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e});try{g.remove_feature_by_type(f.ContentDecoder.$gtype)}catch{}}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.ENCODED)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;rejectUnauthorized;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.ENCODED)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.rejectUnauthorized=s.rejectUnauthorized??o.rejectUnauthorized,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n,signal:r,parsedURL:i}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let a=this._rawBodyBuffer;if(a!==null&&a.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(a))}i.protocol===`https:`&&shouldAcceptAnyCert(this.rejectUnauthorized)&&n.connect(`accept-certificate`,(e,t,n)=>!0);let c=new m.Cancellable;return r&&(r.aborted?c.cancel():r.addEventListener(`abort`,()=>c.cancel(),{once:!0})),this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,c),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:c}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};
+import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function shouldAcceptAnyCert(e){return e===!1?!0:e===!0?!1:p.getenv(`NODE_TLS_REJECT_UNAUTHORIZED`)===`0`}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e}),g.remove_feature_by_type(f.ContentDecoder.$gtype)}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.ENCODED)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;rejectUnauthorized;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.ENCODED)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.rejectUnauthorized=s.rejectUnauthorized??o.rejectUnauthorized,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n,signal:r,parsedURL:i}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let a=this._rawBodyBuffer;if(a!==null&&a.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(a))}i.protocol===`https:`&&shouldAcceptAnyCert(this.rejectUnauthorized)&&n.connect(`accept-certificate`,(e,t,n)=>!0);let c=new m.Cancellable;return r&&(r.aborted?c.cancel():r.addEventListener(`abort`,()=>c.cancel(),{once:!0})),this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,c),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:c}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};

package/lib/esm/utils/root-relative-system.js

@@ -0,0 +1 @@
+import"../_virtual/_rolldown/runtime.js";import{rewriteRootRelativeUrl as e}from"./root-relative.js";import t from"system";function resolveRootRelativeUrl(n){return e(n,t.programPath??t.programInvocationName??``)}export{resolveRootRelativeUrl};

package/lib/esm/utils/root-relative.js

@@ -0,0 +1 @@
+import"../_virtual/_rolldown/runtime.js";function rewriteRootRelativeUrl(e,t){if(!e.startsWith(`/`)||e.startsWith(`//`))return e;let n=t.lastIndexOf(`/`);return n<=0?e:`file://${t.slice(0,n)}${e}`}export{rewriteRootRelativeUrl};

package/lib/index.d.ts

@@ -10,6 +10,7 @@ import { URL } from '@gjsify/url';
 export { FormData, Headers, Request, Response, FetchError, AbortError, isRedirect };
 export { Blob, File };
 export { XMLHttpRequest, XMLHttpRequestUpload } from './xhr.js';
+export { resolveRootRelativeUrl } from './utils/root-relative-system.js';
 /**
  * Fetch function
  *

package/lib/index.js

@@ -3,9 +3,9 @@
 // Copyright (c) node-fetch contributors. MIT license.
 // Modifications: Rewritten for GJS using libsoup 3.0 (Soup.Session)
 import GLib from '@girs/glib-2.0';
-import System from 'system';
 import Stream from 'node:stream';
 import { parseDataUri } from './utils/data-uri.js';
+import { resolveRootRelativeUrl } from './utils/root-relative-system.js';
 import { clone } from './body.js';
 import Response from './response.js';
 import Headers from './headers.js';
@@ -21,39 +21,31 @@ import { URL } from '@gjsify/url';
 export { FormData, Headers, Request, Response, FetchError, AbortError, isRedirect };
 export { Blob, File };
 export { XMLHttpRequest, XMLHttpRequestUpload } from './xhr.js';
+// The shared program-dir rewrite — consumed by @gjsify/xmlhttprequest so fetch
+// and XHR cannot drift apart again (see utils/root-relative.ts for the pure
+// logic + utils/root-relative-system.ts for the `system`-reading wrapper).
+export { resolveRootRelativeUrl } from './utils/root-relative-system.js';
 const supportedSchemas = new Set(['data:', 'http:', 'https:', 'file:']);
-function rewriteRootRelativeUrl(input) {
+/**
+ * String inputs go through the shared root-relative rewrite
+ * (`utils/root-relative.ts` — one copy for fetch AND XHR; two drifting copies
+ * are what #869 was). Non-string inputs pass through untouched.
+ */
+function rewriteFetchInput(input) {
     if (typeof input !== 'string')
         return input;
-    if (!input.startsWith('/') || input.startsWith('//'))
-        return input;
-    const _g = globalThis;
-    const DEBUG = _g.__GJSIFY_DEBUG_FETCH === true;
-    try {
-        // Program dir from the `system` built-in — the SAME source
-        // `@gjsify/xmlhttprequest` and `@gjsify/dom-elements` use for this
-        // identical rewrite. It used to read `globalThis.imports.system`, which
-        // exists only on GJS: on the node-gi reverse bridge the probe was
-        // `undefined`, the path was handed to the runtime's native `URL`
-        // unchanged, and every root-relative `fetch()` died with
-        // `ERR_INVALID_URL` — while XHR-loaded assets in the same app resolved
-        // fine, because those two siblings import the module. That asymmetry is
-        // what made the excalibur-jelly-jumper showcase render an empty level on
-        // node/bun/deno: its Tiled map is the one asset fetched rather than XHR'd.
-        const programPath = System.programPath ?? System.programInvocationName ?? '';
-        if (!programPath)
-            return input;
-        const dir = GLib.path_get_dirname(programPath);
-        const rewritten = `file://${dir}${input}`;
-        if (DEBUG)
-            console.log(`[fetch] rewrite ${input} → ${rewritten}`);
-        return rewritten;
-    }
-    catch (err) {
-        if (DEBUG)
-            console.warn(`[fetch] rewrite FAILED: ${err instanceof Error ? err.message : String(err)}`);
-        return input;
+    // No try/catch: `resolveRootRelativeUrl` reads two properties off the
+    // `system` built-in and calls a pure function — there is no throw path, so
+    // a catch here could only ever SWALLOW a bug. That is precisely how #869
+    // hid: the previous spelling reached `globalThis.imports.system`, which is
+    // `undefined` off gjs, and the catch turned the resulting TypeError into a
+    // silently unrewritten URL. If this ever does throw, the caller should see
+    // it.
+    const rewritten = resolveRootRelativeUrl(input);
+    if (rewritten !== input && globalThis.__GJSIFY_DEBUG_FETCH === true) {
+        console.log(`[fetch] rewrite ${input} → ${rewritten}`);
     }
+    return rewritten;
 }
 /**
  * Fetch function
@@ -63,7 +55,7 @@ function rewriteRootRelativeUrl(input) {
  */
 export default async function fetch(url, init = {}) {
     // Rewrite root-relative URLs before Request constructor parses them
-    url = rewriteRootRelativeUrl(url);
+    url = rewriteFetchInput(url);
     // Build request object
     const request = new Request(url, init);
     const { parsedURL, options } = getSoupRequestOptions(request);
@@ -271,7 +263,9 @@ export default async function fetch(url, init = {}) {
             // the streaming decode is fragile. Buffer first, then decompress the
             // complete in-memory blob — the same pattern @gjsify/tar uses for .tgz.
             const rawBuffer = await new Response(readable, responseOptions).arrayBuffer();
-            const decompressed = new Blob([rawBuffer]).stream().pipeThrough(new DecompressionStream(format));
+            const decompressed = new Blob([rawBuffer])
+                .stream()
+                .pipeThrough(new DecompressionStream(format));
             finalize();
             return new Response(decompressed, responseOptions);
         }

package/lib/register/xhr.js

@@ -36,12 +36,9 @@ if (urlCtor && urlCtor.__gjsify_objecturl !== true) {
     urlCtor.revokeObjectURL = (url) => {
         const path = objectUrlPaths.get(url);
         if (path) {
-            try {
-                GLib.unlink(path);
-            }
-            catch {
-                // best-effort temp-file cleanup
-            }
+            // Best-effort temp-file cleanup — GLib.unlink reports failure via
+            // its return value (-1); it has no throw path (no `throws` in GIR).
+            GLib.unlink(path);
             objectUrlPaths.delete(url);
         }
         else if (nativeRevoke) {

package/lib/request.js

@@ -101,12 +101,8 @@ function getSharedSession() {
         // body without removing the Content-Encoding header, causing
         // double-decompression when index.ts also runs DecompressionStream.
         // Remove it once here so our JS-level decompression handles everything.
-        try {
-            sharedSession.remove_feature_by_type(Soup.ContentDecoder.$gtype);
-        }
-        catch {
-            /* not present */
-        }
+        // (No throw path: an absent feature is a documented silent no-op.)
+        sharedSession.remove_feature_by_type(Soup.ContentDecoder.$gtype);
     }
     return sharedSession;
 }

package/lib/root-relative.spec.d.ts

@@ -0,0 +1,2 @@
+declare const _default: () => Promise<void>;
+export default _default;

package/lib/root-relative.spec.js

@@ -0,0 +1,56 @@
+// Coverage for the SHARED root-relative rewrite (utils/root-relative.ts).
+//
+// The regression it pins: fetch and XHR used to carry two hand-written copies
+// of this rewrite, and the fetch copy drifted (reading the GJS-only
+// `globalThis.imports.system`) — every root-relative `fetch()` then died with
+// `ERR_INVALID_URL` on the node-gi reverse bridge while XHR kept working
+// (#869). One function, consumed by both, tested here on gjs AND node.
+//
+// The PURE half (`rewriteRootRelativeUrl(url, programPath)`) is imported
+// statically and covered on BOTH runtimes. The `system`-reading wrapper
+// (`utils/root-relative-system.ts`) is deliberately NOT imported statically:
+// on `--app node` the bare `system` built-in is aliased to
+// `@gjsify/node-gi/system` and kept external, so a static import here would
+// make the node test bundle hard-require the node-gi bridge — the exact
+// cross-platform loadability this split exists to protect. The wrapper is
+// instead exercised on gjs via the aliased package root (`import('fetch')`),
+// which on node resolves to the harmless native-globals re-export.
+import { describe, expect, it, on } from '@gjsify/unit';
+import { rewriteRootRelativeUrl } from './utils/root-relative.js';
+export default async () => {
+    await describe('fetch.rewriteRootRelativeUrl (pure)', async () => {
+        await it('maps a root-relative URL to file:// under the program dir', async () => {
+            expect(rewriteRootRelativeUrl('/res/tilemaps/level1.tmx', '/opt/app/dist/main.js')).toBe('file:///opt/app/dist/res/tilemaps/level1.tmx');
+        });
+        await it('leaves a protocol-relative URL (//host/...) untouched', async () => {
+            expect(rewriteRootRelativeUrl('//cdn.example.com/x.png', '/opt/app/dist/main.js')).toBe('//cdn.example.com/x.png');
+        });
+        await it('leaves absolute and relative URLs untouched', async () => {
+            expect(rewriteRootRelativeUrl('https://example.com/a', '/opt/app/dist/main.js')).toBe('https://example.com/a');
+            expect(rewriteRootRelativeUrl('res/local.png', '/opt/app/dist/main.js')).toBe('res/local.png');
+        });
+        await it('returns the input when no usable program dir exists', async () => {
+            // '' (no program path at all) and a bare name (no directory part).
+            expect(rewriteRootRelativeUrl('/res/x.png', '')).toBe('/res/x.png');
+            expect(rewriteRootRelativeUrl('/res/x.png', 'main.js')).toBe('/res/x.png');
+        });
+    });
+    // The `system`-reading wrapper, end to end on gjs — the runtime where the
+    // program path is real. Reached through the aliased package root so the
+    // node test bundle never links the `system` external (see file header).
+    await on('Gjs', async () => {
+        await describe('fetch.resolveRootRelativeUrl (system wrapper)', async () => {
+            await it('maps a root-relative URL to file:// under the real program dir', async () => {
+                // Namespace access (not a destructured binding): on the node
+                // build this module is the globals re-export without the
+                // wrapper, and only the gjs path ever reaches this line.
+                const fetchModule = await import('fetch');
+                const rewritten = fetchModule.resolveRootRelativeUrl('/res/tilemaps/level1.tmx');
+                // The program path is the test bundle's own path — assert the
+                // CONTRACT, not the host.
+                expect(rewritten.startsWith('file:///')).toBe(true);
+                expect(rewritten.endsWith('/res/tilemaps/level1.tmx')).toBe(true);
+            });
+        });
+    });
+};

package/lib/utils/root-relative-system.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Rewrite a root-relative URL to `file://` under the running program's
+ * directory (see `rewriteRootRelativeUrl` for the contract). Reads the program
+ * path from the `system` built-in — `programPath` on gjs, with
+ * `programInvocationName` as the fallback (on the node bridge that is
+ * `process.argv[1]`, the bundle itself — the right base).
+ */
+export declare function resolveRootRelativeUrl(url: string): string;

package/lib/utils/root-relative-system.js

@@ -0,0 +1,25 @@
+// The GJS-host binding of the shared root-relative rewrite: reads the running
+// program's path from the `system` built-in and delegates to the PURE
+// `rewriteRootRelativeUrl` (utils/root-relative.ts — the #869 single copy).
+//
+// This wrapper is a SEPARATE module on purpose. The bare `system` built-in is
+// external on the gjs target and aliased to `@gjsify/node-gi/system` (kept
+// external) on `--app node`, so whichever module imports it drags a hard
+// node-gi requirement into the emitted bundle. Keeping the import here confines
+// that to the GJS-reachable path (fetch's own Soup-backed impl + XHR), while
+// the pure half stays testable — and loadable — on plain Node.
+// The bare `system` built-in — NOT `globalThis.imports.system`: the probe shape
+// is `undefined` on the node-gi reverse bridge unless the globals shim happens
+// to be injected, which is exactly how #869's silent `ERR_INVALID_URL` hid.
+import System from 'system';
+import { rewriteRootRelativeUrl } from './root-relative.js';
+/**
+ * Rewrite a root-relative URL to `file://` under the running program's
+ * directory (see `rewriteRootRelativeUrl` for the contract). Reads the program
+ * path from the `system` built-in — `programPath` on gjs, with
+ * `programInvocationName` as the fallback (on the node bridge that is
+ * `process.argv[1]`, the bundle itself — the right base).
+ */
+export function resolveRootRelativeUrl(url) {
+    return rewriteRootRelativeUrl(url, System.programPath ?? System.programInvocationName ?? '');
+}

package/lib/utils/root-relative.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Rewrite a root-relative URL (starts with `/` but not `//`, e.g.
+ * `/res/images/foo.png`) to a `file://` URL under the given program path's
+ * directory, so a GJS/GTK app loads bundled assets with the same paths a
+ * browser would resolve against its origin.
+ *
+ * Returns the input unchanged when it is not root-relative or when no usable
+ * program path is given. The security implications (arbitrary file reads) are
+ * acceptable for the current use cases — revisit if these packages ever handle
+ * untrusted input.
+ *
+ * Deliberately no `GLib.path_get_dirname`: `@girs/glib-2.0` is emptied to `{}`
+ * in a plain-Node bundle (only the gjs target and the reverse bridge resolve
+ * it), so a GLib call here only ever "worked" behind a swallowing catch. The
+ * program path is `/`-separated on every runtime this rewrite serves, making
+ * dirname a string slice.
+ *
+ * @param url The URL to rewrite.
+ * @param programPath The running program's path (`System.programPath ??
+ *   System.programInvocationName` on gjs; `process.argv[1]` — the bundle
+ *   itself — on the node-gi reverse bridge).
+ */
+export declare function rewriteRootRelativeUrl(url: string, programPath: string): string;

package/lib/utils/root-relative.js

@@ -0,0 +1,49 @@
+// Root-relative URL → `file://` under the program directory.
+//
+// THE one copy of this rewrite. `@gjsify/fetch` and `@gjsify/xmlhttprequest`
+// used to carry two hand-written spellings of it, and the copies drifting is
+// exactly what broke: the fetch copy read `globalThis.imports.system` (GJS-only)
+// while the XHR copy imported the `system` built-in, so on the node-gi reverse
+// bridge every XHR-loaded asset resolved and every root-relative `fetch()` died
+// with `ERR_INVALID_URL` (#869 — the excalibur-jelly-jumper showcase rendered an
+// empty level because its Tiled map is the one asset fetched rather than XHR'd).
+//
+// This module is deliberately PURE — the program path is a PARAMETER, and the
+// `system` built-in is read one module over (`root-relative-system.ts`). The
+// split is load-bearing for cross-platform loadability: on `--app node` the
+// bare `system` specifier is aliased to `@gjsify/node-gi/system` and kept
+// EXTERNAL, so any module that imports it makes the emitted bundle hard-require
+// the node-gi bridge at load. `@gjsify/fetch` is a cross-platform package whose
+// node test bundle must load on plain Node — its spec therefore covers THIS
+// pure function on gjs AND node, while the `system` read stays confined to the
+// GJS-reachable wrapper.
+/**
+ * Rewrite a root-relative URL (starts with `/` but not `//`, e.g.
+ * `/res/images/foo.png`) to a `file://` URL under the given program path's
+ * directory, so a GJS/GTK app loads bundled assets with the same paths a
+ * browser would resolve against its origin.
+ *
+ * Returns the input unchanged when it is not root-relative or when no usable
+ * program path is given. The security implications (arbitrary file reads) are
+ * acceptable for the current use cases — revisit if these packages ever handle
+ * untrusted input.
+ *
+ * Deliberately no `GLib.path_get_dirname`: `@girs/glib-2.0` is emptied to `{}`
+ * in a plain-Node bundle (only the gjs target and the reverse bridge resolve
+ * it), so a GLib call here only ever "worked" behind a swallowing catch. The
+ * program path is `/`-separated on every runtime this rewrite serves, making
+ * dirname a string slice.
+ *
+ * @param url The URL to rewrite.
+ * @param programPath The running program's path (`System.programPath ??
+ *   System.programInvocationName` on gjs; `process.argv[1]` — the bundle
+ *   itself — on the node-gi reverse bridge).
+ */
+export function rewriteRootRelativeUrl(url, programPath) {
+    if (!url.startsWith('/') || url.startsWith('//'))
+        return url;
+    const slash = programPath.lastIndexOf('/');
+    if (slash <= 0)
+        return url; // no usable program dir ('' or a bare name)
+    return `file://${programPath.slice(0, slash)}${url}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/fetch",
-    "version": "0.25.1",
+    "version": "0.26.1",
     "description": "Web and Node.js fetch module for Gjs",
     "module": "lib/esm/index.js",
     "types": "lib/index.d.ts",
@@ -51,8 +51,8 @@
         "fetch"
     ],
     "devDependencies": {
-        "@gjsify/cli": "^0.25.1",
-        "@gjsify/unit": "^0.25.1",
+        "@gjsify/cli": "^0.26.1",
+        "@gjsify/unit": "^0.26.1",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"
     },
@@ -61,11 +61,11 @@
         "@girs/gjs": "^4.1.0",
         "@girs/glib-2.0": "^4.1.0",
         "@girs/soup-3.0": "^4.1.0",
-        "@gjsify/dom-events": "^0.25.1",
-        "@gjsify/formdata": "^0.25.1",
-        "@gjsify/http": "^0.25.1",
-        "@gjsify/url": "^0.25.1",
-        "@gjsify/utils": "^0.25.1"
+        "@gjsify/dom-events": "^0.26.1",
+        "@gjsify/formdata": "^0.26.1",
+        "@gjsify/http": "^0.26.1",
+        "@gjsify/url": "^0.26.1",
+        "@gjsify/utils": "^0.26.1"
     },
     "gjsify": {
         "runtimes": {