@goodandready/dsh-key-rotation 0.8.74 → 0.8.75

package/lib/safe-fetch.js

@@ -2,7 +2,6 @@
 import net from 'node:net';
 import dns from 'node:dns/promises';
 import nodeDns from 'node:dns';
-import { Agent } from 'undici';
 
 export const MAX_IMPORT_BYTES = 1024 * 1024; // 1 MB limit
 export const MAX_REDIRECTS = 5;
@@ -105,33 +104,36 @@ export function isPrivateOrReservedIp(ip) {
  * @returns {Agent}
  */
 export function createSafeDispatcher({ lookupImpl = nodeDns.lookup } = {}) {
-  return new Agent({
-    connect: {
-      lookup: (hostname, options, callback) => {
-        const cb = typeof options === 'function' ? options : callback;
-        const opts = typeof options === 'function' ? {} : (typeof options === 'number' ? { family: options } : (options || {}));
-        lookupImpl(hostname, { ...opts, all: true }, (err, addresses) => {
-          if (err) return cb(err);
-          const list = Array.isArray(addresses) ? addresses : [addresses];
-          for (const item of list) {
-            const addr = typeof item === 'string' ? item : item.address;
-            if (isPrivateOrReservedIp(addr)) {
-              const ssrfErr = new Error(`dsh-key-rotation: connect blocked: host ${hostname} resolves to private or reserved IP ${addr}`);
-              ssrfErr.code = 'SSRF_BLOCKED';
-              return cb(ssrfErr);
-            }
-          }
-          if (!opts.all) {
-            const first = list[0];
-            const addr = typeof first === 'string' ? first : first?.address;
-            const fam = typeof first === 'object' && first?.family ? first.family : (net.isIP(addr) || 4);
-            return cb(null, addr, fam);
-          }
-          return cb(null, addresses);
-        });
-      },
+  const lookup = (hostname, options, callback) => {
+    const cb = typeof options === 'function' ? options : callback;
+    const opts = typeof options === 'function' ? {} : (typeof options === 'number' ? { family: options } : (options || {}));
+    lookupImpl(hostname, { ...opts, all: true }, (err, addresses) => {
+      if (err) return cb(err);
+      const list = Array.isArray(addresses) ? addresses : [addresses];
+      for (const item of list) {
+        const addr = typeof item === 'string' ? item : item.address;
+        if (isPrivateOrReservedIp(addr)) {
+          const ssrfErr = new Error(`dsh-key-rotation: connect blocked: host ${hostname} resolves to private or reserved IP ${addr}`);
+          ssrfErr.code = 'SSRF_BLOCKED';
+          return cb(ssrfErr);
+        }
+      }
+      if (!opts.all) {
+        const first = list[0];
+        const addr = typeof first === 'string' ? first : first?.address;
+        const fam = typeof first === 'object' && first?.family ? first.family : (net.isIP(addr) || 4);
+        return cb(null, addr, fam);
+      }
+      return cb(null, addresses);
+    });
+  };
+
+  return {
+    options: {
+      connect: { lookup },
     },
-  });
+    connect: { lookup },
+  };
 }
 
 /**
@@ -270,7 +272,7 @@ export async function safeFetchJson(url, {
   redirectsLeft = MAX_REDIRECTS,
   dispatcher,
 } = {}) {
-  const safeDispatcher = dispatcher ?? (fetchImpl === globalThis.fetch ? createSafeDispatcher() : undefined);
+  const safeDispatcher = dispatcher;
   let currentUrl = url;
   while (true) {
     await assertSafeUrl(currentUrl, { lookupImpl });

package/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@goodandready/dsh-key-rotation",
-  "version": "0.8.74",
-  "packageManager": "pnpm@10.33.2",
+  "version": "0.8.75",
   "description": "Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.",
   "keywords": [
     "deepseek-harness",
@@ -60,13 +59,6 @@
     "@deepseek-ai/dsh-llm": "^0.1.7-rc.2 || >=0.2.0-rc.1 <0.2.1-0 || >=0.2.1-alpha.1 <0.2.2-0",
     "@deepseek-ai/schemastery": "^3.18.4"
   },
-  "scripts": {
-    "test": "node tools/test.mjs",
-    "test:core": "node tools/test.mjs --core",
-    "check": "node tools/check.mjs",
-    "build:client": "node scripts/build-client.mjs",
-    "pretest": "node scripts/build-client.mjs"
-  },
   "devDependencies": {
     "react": "18.3.1",
     "react-test-renderer": "18.3.1",
@@ -75,7 +67,12 @@
     "@deepseek-ai/schemastery": "^3.18.4",
     "semver": "^7.6.3"
   },
-  "dependencies": {
-    "undici": "^6.29.0"
+  "dependencies": {},
+  "scripts": {
+    "test": "node tools/test.mjs",
+    "test:core": "node tools/test.mjs --core",
+    "check": "node tools/check.mjs",
+    "build:client": "node scripts/build-client.mjs",
+    "pretest": "node scripts/build-client.mjs"
   }
-}
+}