@gjsify/fetch 0.4.44 → 0.5.1

package/lib/esm/request.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e});try{g.remove_feature_by_type(f.ContentDecoder.$gtype)}catch{}}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.NONE)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.NONE)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let r=this._rawBodyBuffer;if(r!==null&&r.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(r))}let i=new m.Cancellable;return this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,i),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:i}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};
+import"./_virtual/_rolldown/runtime.js";import{isAbortSignal as e}from"./utils/is.js";import t,{clone as n,extractContentType as r,getTotalBytes as i}from"./body.js";import a from"./headers.js";import{inputStreamToReadable as o,soupSendAsync as s}from"./utils/soup-helpers.js";import{DEFAULT_REFERRER_POLICY as c,determineRequestsReferrer as l,validateReferrerPolicy as u}from"./utils/referrer.js";import{URL as d}from"@gjsify/url";import f from"@girs/soup-3.0";import p from"@girs/glib-2.0";import m from"@girs/gio-2.0";const h=Symbol(`Request internals`);let g=null;function envPositiveInt(e,t){let n=p.getenv(e);if(!n)return t;let r=Number.parseInt(n,10);return Number.isFinite(r)&&r>0?r:t}function getSharedSession(){if(g===null){let e=envPositiveInt(`GJSIFY_FETCH_MAX_CONNS_PER_HOST`,16),t=Math.max(envPositiveInt(`GJSIFY_FETCH_MAX_CONNS`,64),e);g=new f.Session({maxConns:t,maxConnsPerHost:e});try{g.remove_feature_by_type(f.ContentDecoder.$gtype)}catch{}}return g}const isRequest=e=>typeof e==`object`&&typeof e.url==`string`;var _=class Request extends t{cache;credentials;destination;get headers(){return this[h].headers}integrity;keepalive;get method(){return this[h].method}mode;get redirect(){return this[h].redirect}get referrer(){if(this[h].referrer===`no-referrer`)return``;if(this[h].referrer===`client`)return`about:client`;if(this[h].referrer)return this[h].referrer.toString()}get referrerPolicy(){return this[h].referrerPolicy}set referrerPolicy(e){this[h].referrerPolicy=u(e)}get signal(){return this[h].signal}get url(){return this[h].parsedURL.toString()}get _uri(){return p.Uri.parse(this.url,p.UriFlags.ENCODED)}get _session(){return this[h].session}get _message(){return this[h].message}get _inputStream(){return this[h].inputStream}get[Symbol.toStringTag](){return`Request`}[h];follow;compress=!1;counter=0;agent=``;highWaterMark=16384;insecureHTTPParser=!1;constructor(t,i){let o=t,s=i||{},c,l={};if(isRequest(t)?(c=new d(o.url),l=o):c=new d(t),c.username!==``||c.password!==``)throw TypeError(`${c} is an url with embedded credentials.`);let u=s.method||l.method||`GET`;if(/^(delete|get|head|options|post|put)$/i.test(u)&&(u=u.toUpperCase()),(i?.body!=null||isRequest(t)&&o.body!==null)&&(u===`GET`||u===`HEAD`))throw TypeError(`Request with GET/HEAD method cannot have body`);let m=i?.body?i.body:isRequest(t)&&o.body!==null?n(t):null;super(m,{size:s.size||0});let g=new a(i?.headers||o.headers||{});if(m!==null&&!g.has(`Content-Type`)){let e=r(m,this);e&&g.set(`Content-Type`,e)}let _=isRequest(t)?o.signal:null;if(i&&`signal`in i&&(_=i.signal),_!=null&&!e(_))throw TypeError(`Expected signal to be an instanceof AbortSignal or EventTarget`);let v=i?.referrer==null?o.referrer:i.referrer;if(v===``)v=`no-referrer`;else if(v){let e=new d(v);v=/^about:(\/\/)?client$/.test(e.toString())?`client`:e}else v=void 0;let y=c.protocol,b=null,x=null;(y===`http:`||y===`https:`)&&(b=getSharedSession(),x=new f.Message({method:u,uri:p.Uri.parse(c.toString(),p.UriFlags.ENCODED)})),this[h]={method:u,redirect:i?.redirect||o.redirect||`follow`,headers:g,parsedURL:c,signal:_,referrer:v,referrerPolicy:``,session:b,message:x},this.follow=s.follow===void 0?o.follow===void 0?20:o.follow:s.follow,this.compress=s.compress===void 0?o.compress===void 0?!0:o.compress:s.compress,this.counter=s.counter||o.counter||0,this.agent=s.agent||o.agent,this.highWaterMark=s.highWaterMark||o.highWaterMark||16384,this.insecureHTTPParser=s.insecureHTTPParser||o.insecureHTTPParser||!1,this.referrerPolicy=i?.referrerPolicy||o.referrerPolicy||``}async _send(e){let{session:t,message:n}=this[h];if(!t||!n)throw Error(`Cannot send request: no Soup session (non-HTTP URL?)`);e.headers._appendToSoupMessage(n);let r=this._rawBodyBuffer;if(r!==null&&r.byteLength>0){let t=e.headers.get(`content-type`)||null;n.set_request_body_from_bytes(t,new p.Bytes(r))}let i=new m.Cancellable;return this[h].inputStream=await s(t,n,p.PRIORITY_DEFAULT,i),this[h].readable=o(this[h].inputStream),{inputStream:this[h].inputStream,readable:this[h].readable,cancellable:i}}clone(){return new Request(this)}async arrayBuffer(){return super.arrayBuffer()}async blob(){return super.blob()}async formData(){return super.formData()}async json(){return super.json()}async text(){return super.text()}};Object.defineProperties(_.prototype,{method:{enumerable:!0},url:{enumerable:!0},headers:{enumerable:!0},redirect:{enumerable:!0},clone:{enumerable:!0},signal:{enumerable:!0},referrer:{enumerable:!0},referrerPolicy:{enumerable:!0}});const getSoupRequestOptions=e=>{let{parsedURL:t}=e[h],n=new a(e[h].headers);n.has(`Accept`)||n.set(`Accept`,`*/*`);let r=null;if(e.body===null&&/^(post|put)$/i.test(e.method)&&(r=`0`),e.body!==null){let t=i(e);typeof t==`number`&&!Number.isNaN(t)&&(r=String(t))}r&&n.set(`Content-Length`,r),e.referrerPolicy===``&&(e.referrerPolicy=c),e.referrer&&e.referrer!==`no-referrer`?e[h].referrer=l(e):e[h].referrer=`no-referrer`,e[h].referrer instanceof d&&n.set(`Referer`,e.referrer),n.has(`User-Agent`)||n.set(`User-Agent`,`gjsify-fetch`),e.compress&&!n.has(`Accept-Encoding`)&&n.set(`Accept-Encoding`,`gzip, deflate`);let{agent:o}=e;return typeof o==`function`&&(o=o(t)),!n.has(`Connection`)&&!o&&n.set(`Connection`,`close`),{parsedURL:t,options:{headers:n}}};export{_ as Request,_ as default,getSoupRequestOptions};

package/lib/esm/utils/multipart-parser.js

@@ -1,2 +1,2 @@
-import"../_virtual/_rolldown/runtime.js";import{File as e}from"./blob-from.js";import{FormData as t}from"@gjsify/formdata";let n=1;const r={PART_BOUNDARY:n,LAST_BOUNDARY:n*=2},lower=e=>e|32,noop=(...e)=>{};var MultipartParser=class{index=0;flags=0;boundary;lookbehind;state=0;onHeaderEnd=noop;onHeaderField=noop;onHeadersEnd=noop;onHeaderValue=noop;onPartBegin=noop;onPartData=noop;onPartEnd=noop;boundaryChars={};constructor(e){e=`\r
---`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length+8)}write(e){let t=0,n=e.length,i=this.index,{lookbehind:a,boundary:o,boundaryChars:s,index:c,state:l,flags:u}=this,d=this.boundary.length,f=d-1,p=e.length,m,h,mark=e=>{this[e+`Mark`]=t},clear=e=>{delete this[e+`Mark`]},callback=(e,t,n,r)=>{(t===void 0||t!==n)&&this[e](r&&r.subarray(t,n))},dataCallback=(n,r=!1)=>{let i=n+`Mark`;i in this&&(r?(callback(n,this[i],t,e),delete this[i]):(callback(n,this[i],e.length,e),this[i]=0))};for(t=0;t<n;t++)switch(m=e[t],l){case 0:if(c===o.length-2){if(m===45)u|=r.LAST_BOUNDARY;else if(m!==13)return;c++;break}else if(c-1==o.length-2){if(u&r.LAST_BOUNDARY&&m===45)l=9,u=0;else if(!(u&r.LAST_BOUNDARY)&&m===10)c=0,callback(`onPartBegin`),l=1;else return;break}m!==o[c+2]&&(c=-2),m===o[c+2]&&c++;break;case 1:l=2,mark(`onHeaderField`),c=0;case 2:if(m===13){clear(`onHeaderField`),l=6;break}if(c++,m===45)break;if(m===58){if(c===1)return;dataCallback(`onHeaderField`,!0),l=3;break}if(h=lower(m),h<97||h>122)return;break;case 3:if(m===32)break;mark(`onHeaderValue`),l=4;case 4:m===13&&(dataCallback(`onHeaderValue`,!0),callback(`onHeaderEnd`),l=5);break;case 5:if(m!==10)return;l=1;break;case 6:if(m!==10)return;callback(`onHeadersEnd`),l=7;break;case 7:l=8,mark(`onPartData`);case 8:if(i=c,c===0){for(t+=f;t<p&&!(e[t]in s);)t+=d;t-=f,m=e[t]}if(c<o.length)o[c]===m?(c===0&&dataCallback(`onPartData`,!0),c++):c=0;else if(c===o.length)c++,m===13?u|=r.PART_BOUNDARY:m===45?u|=r.LAST_BOUNDARY:c=0;else if(c-1===o.length)if(u&r.PART_BOUNDARY){if(c=0,m===10){u&=~r.PART_BOUNDARY,callback(`onPartEnd`),callback(`onPartBegin`),l=1;break}}else u&r.LAST_BOUNDARY&&m===45?(callback(`onPartEnd`),l=9,u=0):c=0;if(c>0)a[c-1]=m;else if(i>0){let e=new Uint8Array(a.buffer,a.byteOffset,a.byteLength);callback(`onPartData`,0,i,e),i=0,mark(`onPartData`),t--}break;case 9:break;default:throw Error(`Unexpected state entered: ${l}`)}dataCallback(`onHeaderField`),dataCallback(`onHeaderValue`),dataCallback(`onPartData`),this.index=c,this.state=l,this.flags=u}end(){if(this.state===1&&this.index===0||this.state===8&&this.index===this.boundary.length)this.onPartEnd();else if(this.state!==9)throw Error(`MultipartParser.end(): stream ended unexpectedly`)}};function _fileName(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\"/[\]?={}\s\t]+))($|;\s)/i);if(!t)return;let n=t[2]||t[3]||``,r=n.slice(n.lastIndexOf(`\\`)+1);return r=r.replace(/%22/g,`"`),r=r.replace(/&#(\d{4});/g,(e,t)=>String.fromCharCode(t)),r}async function toFormData(n,r){if(!/multipart/i.test(r))throw TypeError(`Failed to fetch`);let i=r.match(/boundary=(?:"([^"]+)"|([^;]+))/i);if(!i)throw TypeError(`no or bad content-type header, no multipart boundary`);let a=new MultipartParser(i[1]||i[2]),o,s,c,l,u,d,f=[],p=new t,onPartData=e=>{c+=m.decode(e,{stream:!0})},appendToFile=e=>{f.push(e)},appendFileToFormData=()=>{let t=new e(f,d,{type:u});p.append(l,t)},appendEntryToFormData=()=>{p.append(l,c)},m=new TextDecoder(`utf-8`);m.decode(),a.onPartBegin=function(){a.onPartData=onPartData,a.onPartEnd=appendEntryToFormData,o=``,s=``,c=``,l=``,u=``,d=null,f.length=0},a.onHeaderField=function(e){o+=m.decode(e,{stream:!0})},a.onHeaderValue=function(e){s+=m.decode(e,{stream:!0})},a.onHeaderEnd=function(){if(s+=m.decode(),o=o.toLowerCase(),o===`content-disposition`){let e=s.match(/\bname=("([^"]*)"|([^()<>@,;:\\"/[\]?={}\s\t]+))/i);e&&(l=e[2]||e[3]||``),d=_fileName(s),d&&(a.onPartData=appendToFile,a.onPartEnd=appendFileToFormData)}else o===`content-type`&&(u=s);s=``,o=``};for await(let e of n)a.write(e);return a.end(),p}export{toFormData};
+import"../_virtual/_rolldown/runtime.js";import{File as e}from"./blob-from.js";import{FormData as t}from"@gjsify/formdata";var n=function(e){return e[e.START_BOUNDARY=0]=`START_BOUNDARY`,e[e.HEADER_FIELD_START=1]=`HEADER_FIELD_START`,e[e.HEADER_FIELD=2]=`HEADER_FIELD`,e[e.HEADER_VALUE_START=3]=`HEADER_VALUE_START`,e[e.HEADER_VALUE=4]=`HEADER_VALUE`,e[e.HEADER_VALUE_ALMOST_DONE=5]=`HEADER_VALUE_ALMOST_DONE`,e[e.HEADERS_ALMOST_DONE=6]=`HEADERS_ALMOST_DONE`,e[e.PART_DATA_START=7]=`PART_DATA_START`,e[e.PART_DATA=8]=`PART_DATA`,e[e.END=9]=`END`,e}(n||{});let r=1;const i={PART_BOUNDARY:r,LAST_BOUNDARY:r*=2},lower=e=>e|32,noop=(...e)=>{};var MultipartParser=class{index=0;flags=0;boundary;lookbehind;state=0;onHeaderEnd=noop;onHeaderField=noop;onHeadersEnd=noop;onHeaderValue=noop;onPartBegin=noop;onPartData=noop;onPartEnd=noop;boundaryChars={};constructor(e){e=`\r
+--`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length+8)}write(e){let t=0,n=e.length,r=this.index,{lookbehind:a,boundary:o,boundaryChars:s,index:c,state:l,flags:u}=this,d=this.boundary.length,f=d-1,p=e.length,m,h,mark=e=>{this[e+`Mark`]=t},clear=e=>{delete this[e+`Mark`]},callback=(e,t,n,r)=>{(t===void 0||t!==n)&&this[e](r&&r.subarray(t,n))},dataCallback=(n,r=!1)=>{let i=n+`Mark`;i in this&&(r?(callback(n,this[i],t,e),delete this[i]):(callback(n,this[i],e.length,e),this[i]=0))};for(t=0;t<n;t++)switch(m=e[t],l){case 0:if(c===o.length-2){if(m===45)u|=i.LAST_BOUNDARY;else if(m!==13)return;c++;break}else if(c-1==o.length-2){if(u&i.LAST_BOUNDARY&&m===45)l=9,u=0;else if(!(u&i.LAST_BOUNDARY)&&m===10)c=0,callback(`onPartBegin`),l=1;else return;break}m!==o[c+2]&&(c=-2),m===o[c+2]&&c++;break;case 1:l=2,mark(`onHeaderField`),c=0;case 2:if(m===13){clear(`onHeaderField`),l=6;break}if(c++,m===45)break;if(m===58){if(c===1)return;dataCallback(`onHeaderField`,!0),l=3;break}if(h=lower(m),h<97||h>122)return;break;case 3:if(m===32)break;mark(`onHeaderValue`),l=4;case 4:m===13&&(dataCallback(`onHeaderValue`,!0),callback(`onHeaderEnd`),l=5);break;case 5:if(m!==10)return;l=1;break;case 6:if(m!==10)return;callback(`onHeadersEnd`),l=7;break;case 7:l=8,mark(`onPartData`);case 8:if(r=c,c===0){for(t+=f;t<p&&!(e[t]in s);)t+=d;t-=f,m=e[t]}if(c<o.length)o[c]===m?(c===0&&dataCallback(`onPartData`,!0),c++):c=0;else if(c===o.length)c++,m===13?u|=i.PART_BOUNDARY:m===45?u|=i.LAST_BOUNDARY:c=0;else if(c-1===o.length)if(u&i.PART_BOUNDARY){if(c=0,m===10){u&=~i.PART_BOUNDARY,callback(`onPartEnd`),callback(`onPartBegin`),l=1;break}}else u&i.LAST_BOUNDARY&&m===45?(callback(`onPartEnd`),l=9,u=0):c=0;if(c>0)a[c-1]=m;else if(r>0){let e=new Uint8Array(a.buffer,a.byteOffset,a.byteLength);callback(`onPartData`,0,r,e),r=0,mark(`onPartData`),t--}break;case 9:break;default:throw Error(`Unexpected state entered: ${l}`)}dataCallback(`onHeaderField`),dataCallback(`onHeaderValue`),dataCallback(`onPartData`),this.index=c,this.state=l,this.flags=u}end(){if(this.state===1&&this.index===0||this.state===8&&this.index===this.boundary.length)this.onPartEnd();else if(this.state!==9)throw Error(`MultipartParser.end(): stream ended unexpectedly`)}};function _fileName(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\"/[\]?={}\s\t]+))($|;\s)/i);if(!t)return;let n=t[2]||t[3]||``,r=n.slice(n.lastIndexOf(`\\`)+1);return r=r.replace(/%22/g,`"`),r=r.replace(/&#(\d{4});/g,(e,t)=>String.fromCharCode(t)),r}async function toFormData(n,r){if(!/multipart/i.test(r))throw TypeError(`Failed to fetch`);let i=r.match(/boundary=(?:"([^"]+)"|([^;]+))/i);if(!i)throw TypeError(`no or bad content-type header, no multipart boundary`);let a=new MultipartParser(i[1]||i[2]),o,s,c,l,u,d,f=[],p=new t,onPartData=e=>{c+=m.decode(e,{stream:!0})},appendToFile=e=>{f.push(e)},appendFileToFormData=()=>{let t=new e(f,d,{type:u});p.append(l,t)},appendEntryToFormData=()=>{p.append(l,c)},m=new TextDecoder(`utf-8`);m.decode(),a.onPartBegin=function(){a.onPartData=onPartData,a.onPartEnd=appendEntryToFormData,o=``,s=``,c=``,l=``,u=``,d=null,f.length=0},a.onHeaderField=function(e){o+=m.decode(e,{stream:!0})},a.onHeaderValue=function(e){s+=m.decode(e,{stream:!0})},a.onHeaderEnd=function(){if(s+=m.decode(),o=o.toLowerCase(),o===`content-disposition`){let e=s.match(/\bname=("([^"]*)"|([^()<>@,;:\\"/[\]?={}\s\t]+))/i);e&&(l=e[2]||e[3]||``),d=_fileName(s),d&&(a.onPartData=appendToFile,a.onPartEnd=appendFileToFormData)}else o===`content-type`&&(u=s);s=``,o=``};for await(let e of n)a.write(e);return a.end(),p}export{toFormData};

package/lib/partial-input.gjs.spec.d.ts

@@ -0,0 +1,2 @@
+declare const _default: () => Promise<void>;
+export default _default;

package/lib/partial-input.gjs.spec.js

@@ -0,0 +1,287 @@
+// Response-body PARTIAL_INPUT regression for @gjsify/fetch — GJS-only.
+//
+// Bug: fetch() failed to read SOME response bodies with
+//   Gio.IOErrorEnum: Weitere Eingaben erforderlich   (G_IO_ERROR_PARTIAL_INPUT)
+// Norman's accounting API responses tripped it while Qonto/Paperless were fine,
+// and the exact same code path worked on Node. The trigger is a *response shape*
+// the libsoup/zlib body reader mishandles at the tail — not the endpoint.
+//
+// Two independent places raise G_IO_ERROR_PARTIAL_INPUT (code 34) at end-of-body
+// even though the full payload has already been produced:
+//
+//   1. Soup's chunked/length body input stream, when the server closes the
+//      socket without the terminating `0\r\n\r\n` chunk (or sends fewer bytes
+//      than a declared Content-Length). Surfaces as
+//      "Die Verbindung wurde unerwartet beendet" but matches PARTIAL_INPUT.
+//
+//   2. Gio.ZlibDecompressor (the GConverter backing node:zlib's gunzip/inflate,
+//      reached via fetch's DecompressionStream branch for gzip/deflate
+//      Content-Encoding) when the compressed stream's trailer (gzip CRC32+ISIZE
+//      / zlib adler tail) is missing — it has already emitted 100% of the
+//      decompressed bytes. THIS is the literal "Weitere Eingaben erforderlich".
+//
+// A real server that closes the keep-alive connection a touch early (or omits
+// the chunk terminator under load) hits both. The body reader must treat a
+// tail-only PARTIAL_INPUT as a clean EOF and return the bytes already delivered,
+// exactly as Node's lenient stream/zlib paths do.
+//
+// This suite drives the REAL fetch() against a raw Gio.SocketService server so
+// every byte on the wire is controlled. No external host is contacted.
+//
+// GJS-only (`.gjs.spec.ts`): the body runs under on('Gjs', …) and reads all GJS
+// runtime objects from globalThis.imports so the Node bundle (same test.mts
+// aggregator) never resolves gi://*.
+import { describe, it, expect, on } from '@gjsify/unit';
+const enc = (s) => new TextEncoder().encode(s);
+function concatBytes(...arrs) {
+    const total = arrs.reduce((n, a) => n + a.length, 0);
+    const out = new Uint8Array(total);
+    let off = 0;
+    for (const a of arrs) {
+        out.set(a, off);
+        off += a.length;
+    }
+    return out;
+}
+export default async () => {
+    await on('Gjs', async () => {
+        const gjs = globalThis.imports;
+        const GLib = gjs.gi.GLib;
+        const Gio = gjs.gi.Gio;
+        const fetchFn = globalThis.fetch;
+        /** gzip `bytes` via Gio so the test does not depend on the polyfill it tests. */
+        const gzip = (bytes) => {
+            const comp = Gio.ZlibCompressor.new(Gio.ZlibCompressorFormat.GZIP, -1);
+            const mem = Gio.MemoryOutputStream.new_resizable();
+            const cs = Gio.ConverterOutputStream.new(mem, comp);
+            cs.write_all(bytes, null);
+            cs.flush(null);
+            cs.close(null);
+            return mem.steal_as_bytes().toArray().slice();
+        };
+        const deflate = (bytes) => {
+            const comp = Gio.ZlibCompressor.new(Gio.ZlibCompressorFormat.ZLIB, -1);
+            const mem = Gio.MemoryOutputStream.new_resizable();
+            const cs = Gio.ConverterOutputStream.new(mem, comp);
+            cs.write_all(bytes, null);
+            cs.flush(null);
+            cs.close(null);
+            return mem.steal_as_bytes().toArray().slice();
+        };
+        /**
+         * Start a raw TCP server that answers the first (and only) request on each
+         * connection with exactly `responseBytes`, then closes the socket. Returns
+         * the bound origin and a stop() fn. The framing is entirely up to the
+         * caller — that is the whole point.
+         */
+        const startRawServer = (responseBytes) => {
+            const service = new Gio.SocketService();
+            const port = service.add_any_inet_port(null);
+            service.connect('incoming', (_svc, conn) => {
+                const input = conn.get_input_stream();
+                const output = conn.get_output_stream();
+                // Drain the request headers, then write the canned bytes and close.
+                input.read_bytes_async(65536, GLib.PRIORITY_DEFAULT, null, (s, r) => {
+                    try {
+                        s.read_bytes_finish(r);
+                    }
+                    catch {
+                        /* ignore request-read errors */
+                    }
+                    output.write_bytes_async(new GLib.Bytes(responseBytes), GLib.PRIORITY_DEFAULT, null, (os, or) => {
+                        try {
+                            os.write_bytes_finish(or);
+                        }
+                        catch {
+                            /* ignore */
+                        }
+                        // Close WITHOUT any graceful HTTP framing beyond what the
+                        // caller put in responseBytes.
+                        try {
+                            conn.close(null);
+                        }
+                        catch {
+                            /* ignore */
+                        }
+                    });
+                });
+                return false;
+            });
+            service.start();
+            const base = `http://127.0.0.1:${port}/`;
+            return {
+                base,
+                stop: () => {
+                    try {
+                        service.stop();
+                        service.close();
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                },
+            };
+        };
+        const PAYLOAD = JSON.stringify({
+            hello: 'world',
+            items: [1, 2, 3, 4, 5],
+            // Long enough that gzip actually produces a multi-byte deflate block.
+            note: 'gjsify-fetch-partial-input-'.repeat(40),
+        });
+        // A payload whose GZIPPED form exceeds the body reader's 4096-byte read
+        // size, so the compressed stream is delivered to DecompressionStream in
+        // SEVERAL chunks. This is the primary Norman trigger: stateless per-chunk
+        // decompression breaks here (the first chunk alone is not a complete gzip
+        // stream) while native Node keeps inflate state across chunks. The body
+        // mixes structure + varied text so gzip can't collapse it below 4 KB.
+        const bigItems = [];
+        for (let i = 0; i < 500; i++) {
+            bigItems.push({
+                id: i,
+                name: `transaction ${i}`,
+                amount: (i * 3.14159).toFixed(2),
+                memo: `Rechnung Nr ${i} für Leistung im Monat ${(i % 12) + 1}`,
+            });
+        }
+        const BIG_PAYLOAD = JSON.stringify({ ok: true, items: bigItems });
+        await describe('@gjsify/fetch — response body PARTIAL_INPUT at EOF (Norman regression)', async () => {
+            await it('reads a chunked body terminated cleanly (baseline)', async () => {
+                const body = enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Transfer-Encoding: chunked\r\n' +
+                    '\r\n' +
+                    PAYLOAD.length.toString(16) +
+                    '\r\n' +
+                    PAYLOAD +
+                    '\r\n0\r\n\r\n');
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text).toBe(PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('reads a chunked body whose terminating 0-chunk never arrives', async () => {
+                // Server streamed the whole payload then dropped the connection
+                // without `0\r\n\r\n`. Soup raises PARTIAL_INPUT on the final read;
+                // all bytes were already delivered, so .text() must still be whole.
+                const body = enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Transfer-Encoding: chunked\r\n' +
+                    '\r\n' +
+                    PAYLOAD.length.toString(16) +
+                    '\r\n' +
+                    PAYLOAD);
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const json = (await res.json());
+                    expect(json.hello).toBe('world');
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('reads a Content-Length body that closes one frame early', async () => {
+                const body = enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Content-Length: ' +
+                    (PAYLOAD.length + 16) + // server lies: promises more than it sends
+                    '\r\n\r\n' +
+                    PAYLOAD);
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text).toBe(PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('reads a read-to-close body (no length, Connection: close)', async () => {
+                const body = enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Connection: close\r\n' +
+                    '\r\n' +
+                    PAYLOAD);
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text).toBe(PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('decodes a clean gzip body (Content-Encoding: gzip, chunked)', async () => {
+                const gz = gzip(enc(PAYLOAD));
+                const body = concatBytes(enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Content-Encoding: gzip\r\n' +
+                    'Transfer-Encoding: chunked\r\n' +
+                    '\r\n' +
+                    gz.length.toString(16) +
+                    '\r\n'), gz, enc('\r\n0\r\n\r\n'));
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text).toBe(PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('decodes a gzip body that spans multiple read chunks', async () => {
+                // The primary Norman shape: a complete, well-framed gzip response
+                // whose compressed size (> 4 KB) forces the body reader to deliver
+                // it in several chunks. Per-chunk decompression throws
+                // "Ungültige komprimierte Daten" / "Weitere Eingaben erforderlich"
+                // here; the streaming decode must reassemble the full payload.
+                const gz = gzip(enc(BIG_PAYLOAD));
+                expect(gz.length > 4096).toBe(true); // guard: actually multi-chunk
+                const body = concatBytes(enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Content-Encoding: gzip\r\n' +
+                    'Content-Length: ' +
+                    gz.length +
+                    '\r\n\r\n'), gz);
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text.length).toBe(BIG_PAYLOAD.length);
+                    expect(text).toBe(BIG_PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+            await it('decodes a deflate body that spans multiple read chunks', async () => {
+                // Same multi-chunk reassembly for Content-Encoding: deflate.
+                const df = deflate(enc(BIG_PAYLOAD));
+                expect(df.length > 4096).toBe(true);
+                const body = concatBytes(enc('HTTP/1.1 200 OK\r\n' +
+                    'Content-Type: application/json\r\n' +
+                    'Content-Encoding: deflate\r\n' +
+                    'Content-Length: ' +
+                    df.length +
+                    '\r\n\r\n'), df);
+                const srv = startRawServer(body);
+                try {
+                    const res = await fetchFn(srv.base);
+                    const text = await res.text();
+                    expect(text).toBe(BIG_PAYLOAD);
+                }
+                finally {
+                    srv.stop();
+                }
+            });
+        });
+    });
+};

package/lib/request.js

@@ -164,7 +164,14 @@ export class Request extends Body {
         return this[INTERNALS].parsedURL.toString();
     }
     get _uri() {
-        return GLib.Uri.parse(this.url, GLib.UriFlags.NONE);
+        // ENCODED, not NONE: `this.url` (a WHATWG-serialized URL) is already
+        // percent-encoded, so re-parsing with NONE would DECODE it a second
+        // time — turning an intentionally-escaped `%2F` in a path segment back
+        // into a literal `/`. That breaks scoped-package registry routes like
+        // `PUT /@scope%2Fname` (npm's package-create + OIDC token-exchange
+        // endpoints 404 on the decoded `/@scope/name` form). ENCODED preserves
+        // the existing escaping on round-trip. See request.ts uri construction.
+        return GLib.Uri.parse(this.url, GLib.UriFlags.ENCODED);
     }
     get _session() {
         return this[INTERNALS].session;
@@ -258,7 +265,18 @@ export class Request extends Body {
             session = getSharedSession();
             message = new Soup.Message({
                 method,
-                uri: GLib.Uri.parse(parsedURL.toString(), GLib.UriFlags.NONE),
+                // ENCODED, not NONE: `parsedURL.toString()` is already a
+                // percent-encoded WHATWG URL. Parsing with NONE decodes it a
+                // second time, collapsing an escaped `%2F` in a path segment to
+                // a literal `/` — which sends `PUT /@scope/name` instead of the
+                // required `PUT /@scope%2Fname`. npm's registry tolerates the
+                // literal slash when UPDATING an existing package but 404s on
+                // the package-CREATE route and the OIDC token-exchange endpoint
+                // (`/-/npm/v1/oidc/token/exchange/package/@scope%2Fname`), which
+                // broke first-publish of new scoped packages + Trusted-Publisher
+                // OIDC auth once the CLI began running under GJS. ENCODED keeps
+                // the escaping intact on the wire.
+                uri: GLib.Uri.parse(parsedURL.toString(), GLib.UriFlags.ENCODED),
             });
         }
         this[INTERNALS] = {

package/lib/soup-session.gjs.spec.js

@@ -114,5 +114,23 @@ export default async () => {
                 expect(stderr.includes('libsoup-CRITICAL')).toBe(false);
             });
         });
+        // Regression: @gjsify/fetch re-parsed the already-encoded request URL
+        // with `GLib.UriFlags.NONE`, which DECODES a second time — collapsing an
+        // escaped `%2F` inside a path segment back to a literal `/`. That sent
+        // `PUT /@scope/name` instead of the required `PUT /@scope%2Fname`, so
+        // npm's package-CREATE route and the OIDC token-exchange endpoint
+        // (`/-/npm/v1/oidc/token/exchange/package/@scope%2Fname`) 404'd — only
+        // visible once the CLI began running under GJS (the Node path preserved
+        // it). Fix: parse with `GLib.UriFlags.ENCODED`. See request.ts `_uri` +
+        // Soup.Message construction.
+        await describe('@gjsify/fetch — percent-encoded path segments (scoped-registry %2F)', async () => {
+            await it('preserves %2F in the request URI instead of decoding it to a literal /', () => {
+                const req = new RequestCtor('https://registry.npmjs.org/@gjsify%2Ffetch');
+                const uriStr = req._uri.to_string();
+                // %2F (any hex case) must survive; the decoded literal-slash form must NOT appear.
+                expect(/@gjsify%2[Ff]fetch/.test(uriStr)).toBe(true);
+                expect(/@gjsify\/fetch/.test(uriStr)).toBe(false);
+            });
+        });
     });
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/fetch",
-    "version": "0.4.44",
+    "version": "0.5.1",
     "description": "Web and Node.js fetch module for Gjs",
     "module": "lib/esm/index.js",
     "types": "lib/index.d.ts",
@@ -51,9 +51,9 @@
         "fetch"
     ],
     "devDependencies": {
-        "@gjsify/cli": "^0.4.44",
-        "@gjsify/unit": "^0.4.44",
-        "@types/node": "^25.9.1",
+        "@gjsify/cli": "^0.5.1",
+        "@gjsify/unit": "^0.5.1",
+        "@types/node": "^25.9.2",
         "typescript": "^6.0.3"
     },
     "dependencies": {
@@ -61,10 +61,10 @@
         "@girs/gjs": "4.0.4",
         "@girs/glib-2.0": "2.88.0-4.0.4",
         "@girs/soup-3.0": "3.6.6-4.0.4",
-        "@gjsify/formdata": "^0.4.44",
-        "@gjsify/http": "^0.4.44",
-        "@gjsify/url": "^0.4.44",
-        "@gjsify/utils": "^0.4.44"
+        "@gjsify/formdata": "^0.5.1",
+        "@gjsify/http": "^0.5.1",
+        "@gjsify/url": "^0.5.1",
+        "@gjsify/utils": "^0.5.1"
     },
     "gjsify": {
         "runtimes": {