@llmindset/hf-mcp 0.3.2 → 0.3.3

package/dist/network/fetch-profile.js

@@ -0,0 +1,80 @@
+import { safeFetch } from './safe-fetch.js';
+import { createExternalHttpsPolicy, createGradioMcpHostPolicy, createGradioSchemaHostPolicy, createHfDocsPolicy, createHttpOrHttpsPolicy, createHuggingFaceHubPolicy, createLocalhostHttpPolicy, isLocalhostHostname, } from './url-policy.js';
+const DEFAULT_TIMEOUT_MS = 12_500;
+const DEFAULT_MAX_REDIRECTS = 3;
+export async function fetchWithProfile(url, profile, options = {}) {
+    return safeFetch(url, {
+        urlPolicy: profile.urlPolicy,
+        timeoutMs: options.timeoutMs ?? profile.timeoutMs,
+        maxRedirects: profile.maxRedirects,
+        externalOnly: profile.externalOnly,
+        requestInit: options.requestInit,
+    });
+}
+export const NETWORK_FETCH_PROFILES = {
+    externalHttps() {
+        return {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: DEFAULT_TIMEOUT_MS,
+            maxRedirects: DEFAULT_MAX_REDIRECTS,
+            externalOnly: true,
+        };
+    },
+    httpOrHttpsPermissive() {
+        return {
+            urlPolicy: createHttpOrHttpsPolicy(),
+            timeoutMs: DEFAULT_TIMEOUT_MS,
+            maxRedirects: DEFAULT_MAX_REDIRECTS,
+            externalOnly: false,
+        };
+    },
+    streamableProxy() {
+        return {
+            urlPolicy: createHttpOrHttpsPolicy(),
+            timeoutMs: 0,
+            maxRedirects: DEFAULT_MAX_REDIRECTS,
+            externalOnly: false,
+        };
+    },
+    hfHub() {
+        return {
+            urlPolicy: createHuggingFaceHubPolicy(),
+            timeoutMs: DEFAULT_TIMEOUT_MS,
+            maxRedirects: DEFAULT_MAX_REDIRECTS,
+            externalOnly: true,
+        };
+    },
+    hfDocs() {
+        return {
+            urlPolicy: createHfDocsPolicy(),
+            timeoutMs: DEFAULT_TIMEOUT_MS,
+            maxRedirects: 5,
+            externalOnly: true,
+        };
+    },
+    localhostHttp() {
+        return {
+            urlPolicy: createLocalhostHttpPolicy(),
+            timeoutMs: DEFAULT_TIMEOUT_MS,
+            maxRedirects: 2,
+            externalOnly: false,
+        };
+    },
+    gradioSchemaHost(hostname) {
+        return {
+            urlPolicy: createGradioSchemaHostPolicy(hostname),
+            timeoutMs: 10_000,
+            maxRedirects: 2,
+            externalOnly: !isLocalhostHostname(hostname),
+        };
+    },
+    gradioMcpHost(hostname, allowedProtocol) {
+        return {
+            urlPolicy: createGradioMcpHostPolicy(hostname, allowedProtocol),
+            timeoutMs: 0,
+            maxRedirects: 0,
+            externalOnly: !isLocalhostHostname(hostname) && process.env.NODE_ENV !== 'test',
+        };
+    },
+};
+//# sourceMappingURL=fetch-profile.js.map

package/dist/network/fetch-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-profile.js","sourceRoot":"","sources":["../../src/network/fetch-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,GAGnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAchC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAiB,EACjB,OAAyB,EACzB,UAAmC,EAAE;IAErC,OAAO,SAAS,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;QACjD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;KAChC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,aAAa;QACZ,OAAO;YACN,SAAS,EAAE,yBAAyB,EAAE;YACtC,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,qBAAqB;YACnC,YAAY,EAAE,IAAI;SAClB,CAAC;IACH,CAAC;IACD,qBAAqB;QACpB,OAAO;YACN,SAAS,EAAE,uBAAuB,EAAE;YACpC,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,qBAAqB;YACnC,YAAY,EAAE,KAAK;SACnB,CAAC;IACH,CAAC;IACD,eAAe;QACd,OAAO;YACN,SAAS,EAAE,uBAAuB,EAAE;YACpC,SAAS,EAAE,CAAC;YACZ,YAAY,EAAE,qBAAqB;YACnC,YAAY,EAAE,KAAK;SACnB,CAAC;IACH,CAAC;IACD,KAAK;QACJ,OAAO;YACN,SAAS,EAAE,0BAA0B,EAAE;YACvC,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,qBAAqB;YACnC,YAAY,EAAE,IAAI;SAClB,CAAC;IACH,CAAC;IACD,MAAM;QACL,OAAO;YACN,SAAS,EAAE,kBAAkB,EAAE;YAC/B,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,IAAI;SAClB,CAAC;IACH,CAAC;IACD,aAAa;QACZ,OAAO;YACN,SAAS,EAAE,yBAAyB,EAAE;YACtC,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,KAAK;SACnB,CAAC;IACH,CAAC;IACD,gBAAgB,CAAC,QAAgB;QAChC,OAAO;YACN,SAAS,EAAE,4BAA4B,CAAC,QAAQ,CAAC;YACjD,SAAS,EAAE,MAAM;YACjB,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC;SAC5C,CAAC;IACH,CAAC;IACD,aAAa,CACZ,QAAgB,EAChB,eAA4B;QAE5B,OAAO;YACN,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE,eAAe,CAAC;YAC/D,SAAS,EAAE,CAAC;YACZ,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;SAC/E,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/network/index.d.ts

@@ -0,0 +1,5 @@
+export * from './url-policy.js';
+export * from './ip-policy.js';
+export * from './safe-fetch.js';
+export * from './fetch-profile.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/network/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/network/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC"}

package/dist/network/index.js

@@ -0,0 +1,5 @@
+export * from './url-policy.js';
+export * from './ip-policy.js';
+export * from './safe-fetch.js';
+export * from './fetch-profile.js';
+//# sourceMappingURL=index.js.map

package/dist/network/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/network/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC"}

package/dist/network/ip-policy.d.ts

@@ -0,0 +1,6 @@
+export interface ExternalAddressOptions {
+    allowDnsRebindMitigation?: boolean;
+}
+export declare function isIpInternalOrReserved(ip: string): boolean;
+export declare function assertExternalAddress(hostname: string, options?: ExternalAddressOptions): Promise<void>;
+//# sourceMappingURL=ip-policy.d.ts.map

package/dist/network/ip-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-policy.d.ts","sourceRoot":"","sources":["../../src/network/ip-policy.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACtC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACnC;AAmID,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAY1D;AAwBD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCjH"}

package/dist/network/ip-policy.js

@@ -0,0 +1,166 @@
+function normalizeIpLiteral(host) {
+    if (host.startsWith('[') && host.endsWith(']')) {
+        return host.slice(1, -1);
+    }
+    return host;
+}
+function parseIpv4ToInt(ip) {
+    const parts = ip.split('.').map((part) => Number.parseInt(part, 10));
+    if (parts.length !== 4 || parts.some((part) => Number.isNaN(part) || part < 0 || part > 255)) {
+        throw new Error(`Invalid IPv4 address: ${ip}`);
+    }
+    return parts.reduce((acc, part) => acc * 256 + part, 0);
+}
+function ipv4InRange(ipValue, start, end) {
+    const startValue = parseIpv4ToInt(start);
+    const endValue = parseIpv4ToInt(end);
+    return ipValue >= startValue && ipValue <= endValue;
+}
+function isIpv4InternalOrReserved(ip) {
+    const value = parseIpv4ToInt(ip);
+    return (ipv4InRange(value, '0.0.0.0', '0.255.255.255') ||
+        ipv4InRange(value, '10.0.0.0', '10.255.255.255') ||
+        ipv4InRange(value, '100.64.0.0', '100.127.255.255') ||
+        ipv4InRange(value, '127.0.0.0', '127.255.255.255') ||
+        ipv4InRange(value, '169.254.0.0', '169.254.255.255') ||
+        ipv4InRange(value, '172.16.0.0', '172.31.255.255') ||
+        ipv4InRange(value, '192.0.0.0', '192.0.0.255') ||
+        ipv4InRange(value, '192.0.2.0', '192.0.2.255') ||
+        ipv4InRange(value, '192.88.99.0', '192.88.99.255') ||
+        ipv4InRange(value, '192.168.0.0', '192.168.255.255') ||
+        ipv4InRange(value, '198.18.0.0', '198.19.255.255') ||
+        ipv4InRange(value, '198.51.100.0', '198.51.100.255') ||
+        ipv4InRange(value, '203.0.113.0', '203.0.113.255') ||
+        ipv4InRange(value, '224.0.0.0', '239.255.255.255') ||
+        ipv4InRange(value, '240.0.0.0', '255.255.255.255'));
+}
+function parseIpv6ToBigInt(ip) {
+    const zoneIndex = ip.indexOf('%');
+    const zoneStripped = zoneIndex >= 0 ? ip.slice(0, zoneIndex) : ip;
+    let working = zoneStripped;
+    if (working.includes('.')) {
+        const lastColon = working.lastIndexOf(':');
+        if (lastColon < 0) {
+            throw new Error(`Invalid IPv6 address: ${ip}`);
+        }
+        const ipv4Part = working.slice(lastColon + 1);
+        const ipv4Value = parseIpv4ToInt(ipv4Part);
+        const high = ((ipv4Value >>> 16) & 0xffff).toString(16);
+        const low = (ipv4Value & 0xffff).toString(16);
+        working = `${working.slice(0, lastColon)}:${high}:${low}`;
+    }
+    const split = working.split('::');
+    if (split.length > 2) {
+        throw new Error(`Invalid IPv6 address: ${ip}`);
+    }
+    const left = split[0] ? split[0].split(':').filter(Boolean) : [];
+    const right = split[1] ? split[1].split(':').filter(Boolean) : [];
+    const missingCount = 8 - (left.length + right.length);
+    if (split.length === 1 && missingCount !== 0) {
+        throw new Error(`Invalid IPv6 address: ${ip}`);
+    }
+    if (missingCount < 0) {
+        throw new Error(`Invalid IPv6 address: ${ip}`);
+    }
+    const full = [...left, ...Array.from({ length: missingCount }, () => '0'), ...right];
+    if (full.length !== 8) {
+        throw new Error(`Invalid IPv6 address: ${ip}`);
+    }
+    let value = 0n;
+    for (const part of full) {
+        const segment = Number.parseInt(part, 16);
+        if (Number.isNaN(segment) || segment < 0 || segment > 0xffff) {
+            throw new Error(`Invalid IPv6 address: ${ip}`);
+        }
+        value = (value << 16n) + BigInt(segment);
+    }
+    return value;
+}
+function isIpv6InCidr(ipValue, prefixValue, prefixLength) {
+    const hostBits = 128n - BigInt(prefixLength);
+    const mask = ((1n << BigInt(prefixLength)) - 1n) << hostBits;
+    return (ipValue & mask) === (prefixValue & mask);
+}
+function isIpv6InternalOrReserved(ip) {
+    const value = parseIpv6ToBigInt(ip);
+    if (value === 0n || value === 1n) {
+        return true;
+    }
+    if (value >> 32n === 0xffffn) {
+        const ipv4Value = Number(value & 0xffffffffn);
+        const octet1 = (ipv4Value >>> 24) & 0xff;
+        const octet2 = (ipv4Value >>> 16) & 0xff;
+        const octet3 = (ipv4Value >>> 8) & 0xff;
+        const octet4 = ipv4Value & 0xff;
+        return isIpv4InternalOrReserved(`${octet1.toString()}.${octet2.toString()}.${octet3.toString()}.${octet4.toString()}`);
+    }
+    return (isIpv6InCidr(value, 0xfc00n << 112n, 7) ||
+        isIpv6InCidr(value, 0xfe80n << 112n, 10) ||
+        isIpv6InCidr(value, 0xff00n << 112n, 8) ||
+        isIpv6InCidr(value, 0x20010db8n << 96n, 32) ||
+        isIpv6InCidr(value, 0x20010010n << 96n, 28));
+}
+export function isIpInternalOrReserved(ip) {
+    const normalizedIp = normalizeIpLiteral(ip);
+    const ipVersion = detectIpVersion(normalizedIp);
+    if (ipVersion === 0) {
+        throw new Error(`Invalid IP address: ${ip}`);
+    }
+    if (ipVersion === 4) {
+        return isIpv4InternalOrReserved(normalizedIp);
+    }
+    return isIpv6InternalOrReserved(normalizedIp);
+}
+async function lookupAll(hostname) {
+    const { lookup } = await import('node:dns/promises');
+    const results = await lookup(hostname, { all: true, verbatim: true });
+    return results.map((entry) => entry.address);
+}
+function detectIpVersion(candidate) {
+    try {
+        parseIpv4ToInt(candidate);
+        return 4;
+    }
+    catch {
+    }
+    try {
+        parseIpv6ToBigInt(candidate);
+        return 6;
+    }
+    catch {
+        return 0;
+    }
+}
+export async function assertExternalAddress(hostname, options = {}) {
+    const { allowDnsRebindMitigation = true } = options;
+    const normalized = hostname.trim().replace(/\.+$/, '');
+    if (!normalized) {
+        throw new Error('Hostname is required for external address check');
+    }
+    const ipLiteral = normalizeIpLiteral(normalized);
+    const ipVersion = detectIpVersion(ipLiteral);
+    if (ipVersion !== 0) {
+        if (isIpInternalOrReserved(ipLiteral)) {
+            throw new Error(`Blocked internal or reserved address: ${ipLiteral}`);
+        }
+        return;
+    }
+    const firstLookup = await lookupAll(normalized);
+    if (firstLookup.length === 0) {
+        throw new Error(`No DNS records found for hostname: ${normalized}`);
+    }
+    for (const address of firstLookup) {
+        if (isIpInternalOrReserved(address)) {
+            throw new Error(`Blocked internal or reserved address for hostname ${normalized}: ${address}`);
+        }
+    }
+    if (allowDnsRebindMitigation) {
+        const secondLookup = await lookupAll(normalized);
+        for (const address of secondLookup) {
+            if (isIpInternalOrReserved(address)) {
+                throw new Error(`Blocked internal or reserved address for hostname ${normalized}: ${address}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=ip-policy.js.map

package/dist/network/ip-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-policy.js","sourceRoot":"","sources":["../../src/network/ip-policy.ts"],"names":[],"mappings":"AAIA,SAAS,kBAAkB,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,GAAW;IAC/D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,IAAI,UAAU,IAAI,OAAO,IAAI,QAAQ,CAAC;AACrD,CAAC;AAED,SAAS,wBAAwB,CAAC,EAAU;IAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAEjC,OAAO,CACN,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC;QAC9C,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,gBAAgB,CAAC;QAChD,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,iBAAiB,CAAC;QACnD,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,iBAAiB,CAAC;QACpD,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,gBAAgB,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC;QAC9C,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC;QAC9C,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,eAAe,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,iBAAiB,CAAC;QACpD,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,gBAAgB,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,gBAAgB,CAAC;QACpD,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,eAAe,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAClD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAU;IACpC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,WAAmB,EAAE,YAAoB;IAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC;IAC7D,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,wBAAwB,CAAC,EAAU;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IAGD,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;QAChC,OAAO,wBAAwB,CAC9B,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CACrF,CAAC;IACH,CAAC;IAED,OAAO,CACN,YAAY,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,YAAY,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,EAAE,CAAC;QACxC,YAAY,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,YAAY,CAAC,KAAK,EAAE,WAAW,IAAI,GAAG,EAAE,EAAE,CAAC;QAC3C,YAAY,CAAC,KAAK,EAAE,WAAW,IAAI,GAAG,EAAE,EAAE,CAAC,CAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAChD,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,wBAAwB,CAAC,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACzC,IAAI,CAAC;QACJ,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IAED,IAAI,CAAC;QACJ,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,CAAC;IACV,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,UAAkC,EAAE;IACjG,MAAM,EAAE,wBAAwB,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;IACR,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QACnC,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,qDAAqD,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;IAED,IAAI,wBAAwB,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QACjD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACpC,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,qDAAqD,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;YAChG,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/network/ip-policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ip-policy.test.d.ts.map

package/dist/network/ip-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-policy.test.d.ts","sourceRoot":"","sources":["../../src/network/ip-policy.test.ts"],"names":[],"mappings":""}

package/dist/network/ip-policy.test.js

@@ -0,0 +1,26 @@
+import { describe, expect, it } from 'vitest';
+import { assertExternalAddress, isIpInternalOrReserved } from './ip-policy.js';
+describe('ip-policy', () => {
+    it('classifies internal/reserved IPv4 ranges', () => {
+        expect(isIpInternalOrReserved('127.0.0.1')).toBe(true);
+        expect(isIpInternalOrReserved('10.1.2.3')).toBe(true);
+        expect(isIpInternalOrReserved('172.20.10.2')).toBe(true);
+        expect(isIpInternalOrReserved('192.168.1.1')).toBe(true);
+        expect(isIpInternalOrReserved('8.8.8.8')).toBe(false);
+    });
+    it('classifies internal/reserved IPv6 ranges', () => {
+        expect(isIpInternalOrReserved('::1')).toBe(true);
+        expect(isIpInternalOrReserved('fc00::1')).toBe(true);
+        expect(isIpInternalOrReserved('fe80::1')).toBe(true);
+        expect(isIpInternalOrReserved('2001:db8::1')).toBe(true);
+        expect(isIpInternalOrReserved('2607:f8b0:4005:80a::200e')).toBe(false);
+    });
+    it('blocks internal literal addresses in assertExternalAddress', async () => {
+        await expect(assertExternalAddress('127.0.0.1')).rejects.toThrow('Blocked internal or reserved address');
+        await expect(assertExternalAddress('::1')).rejects.toThrow('Blocked internal or reserved address');
+    });
+    it('allows external literal addresses in assertExternalAddress', async () => {
+        await expect(assertExternalAddress('8.8.8.8')).resolves.toBeUndefined();
+    });
+});
+//# sourceMappingURL=ip-policy.test.js.map

package/dist/network/ip-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-policy.test.js","sourceRoot":"","sources":["../../src/network/ip-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACzG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/network/safe-fetch.d.ts

@@ -0,0 +1,16 @@
+import { type UrlPolicy } from './url-policy.js';
+export interface SafeFetchOptions {
+    urlPolicy: UrlPolicy;
+    timeoutMs?: number;
+    maxRedirects?: number;
+    externalOnly?: boolean;
+    requestInit?: RequestInit;
+    stripSensitiveHeadersOnCrossHostRedirect?: boolean;
+}
+export interface SafeFetchResult {
+    response: Response;
+    finalUrl: URL;
+    redirectsFollowed: number;
+}
+export declare function safeFetch(url: string | URL, options: SafeFetchOptions): Promise<SafeFetchResult>;
+//# sourceMappingURL=safe-fetch.d.ts.map

package/dist/network/safe-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-fetch.d.ts","sourceRoot":"","sources":["../../src/network/safe-fetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wCAAwC,CAAC,EAAE,OAAO,CAAC;CACnD;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,GAAG,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AA4ED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiFtG"}

package/dist/network/safe-fetch.js

@@ -0,0 +1,124 @@
+import { assertExternalAddress } from './ip-policy.js';
+import { parseAndValidateUrl } from './url-policy.js';
+const DEFAULT_TIMEOUT_MS = 12500;
+const DEFAULT_MAX_REDIRECTS = 5;
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const SENSITIVE_HEADERS = new Set(['authorization', 'proxy-authorization', 'cookie', 'x-hf-authorization']);
+function isRedirectStatus(status) {
+    return REDIRECT_STATUSES.has(status);
+}
+function dropSensitiveHeaders(headersInit) {
+    const headers = new Headers(headersInit);
+    for (const key of SENSITIVE_HEADERS) {
+        headers.delete(key);
+    }
+    return headers;
+}
+function withMethodAndBody(requestInit, method, body) {
+    const nextInit = {
+        ...requestInit,
+        method,
+        redirect: 'manual',
+    };
+    if (body !== undefined && body !== null && method !== 'GET' && method !== 'HEAD') {
+        nextInit.body = body;
+    }
+    else {
+        delete nextInit.body;
+    }
+    return nextInit;
+}
+async function fetchWithTimeout(url, requestInit, timeoutMs) {
+    if (timeoutMs <= 0) {
+        return fetch(url.toString(), {
+            ...requestInit,
+            redirect: 'manual',
+        });
+    }
+    const outerSignal = requestInit.signal;
+    if (outerSignal) {
+        if (outerSignal.aborted) {
+            throw new Error('Request was aborted');
+        }
+    }
+    const timeoutSignal = AbortSignal.timeout(timeoutMs);
+    const signal = outerSignal ? AbortSignal.any([outerSignal, timeoutSignal]) : timeoutSignal;
+    try {
+        return await fetch(url.toString(), {
+            ...requestInit,
+            signal,
+            redirect: 'manual',
+        });
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === 'AbortError') {
+            if (outerSignal?.aborted) {
+                throw new Error('Request was aborted');
+            }
+            if (timeoutSignal.aborted) {
+                throw new Error(`Request timed out after ${timeoutMs.toString()}ms`);
+            }
+            throw new Error(`Request timed out after ${timeoutMs.toString()}ms`);
+        }
+        throw error;
+    }
+}
+export async function safeFetch(url, options) {
+    const { urlPolicy, timeoutMs = DEFAULT_TIMEOUT_MS, maxRedirects = DEFAULT_MAX_REDIRECTS, externalOnly = false, requestInit = {}, stripSensitiveHeadersOnCrossHostRedirect = true, } = options;
+    if (maxRedirects < 0) {
+        throw new Error('maxRedirects must be >= 0');
+    }
+    let currentUrl = parseAndValidateUrl(url, urlPolicy);
+    if (externalOnly) {
+        await assertExternalAddress(currentUrl.hostname);
+    }
+    const baseHeaders = new Headers(requestInit.headers);
+    let currentMethod = (requestInit.method || 'GET').toUpperCase();
+    let currentBody = requestInit.body;
+    let redirectsFollowed = 0;
+    while (true) {
+        const currentInit = withMethodAndBody({
+            ...requestInit,
+            headers: baseHeaders,
+        }, currentMethod, currentBody);
+        const response = await fetchWithTimeout(currentUrl, currentInit, timeoutMs);
+        if (!isRedirectStatus(response.status)) {
+            return {
+                response,
+                finalUrl: currentUrl,
+                redirectsFollowed,
+            };
+        }
+        if (redirectsFollowed >= maxRedirects) {
+            throw new Error(`Redirect limit exceeded (${maxRedirects.toString()})`);
+        }
+        const location = response.headers.get('location');
+        if (!location) {
+            throw new Error(`Redirect response missing Location header (status ${response.status.toString()})`);
+        }
+        const nextCandidate = new URL(location, currentUrl);
+        const nextUrl = parseAndValidateUrl(nextCandidate, urlPolicy);
+        if (externalOnly) {
+            await assertExternalAddress(nextUrl.hostname);
+        }
+        if (stripSensitiveHeadersOnCrossHostRedirect && currentUrl.origin !== nextUrl.origin) {
+            const filtered = dropSensitiveHeaders(baseHeaders);
+            baseHeaders.forEach((_, key) => {
+                baseHeaders.delete(key);
+            });
+            filtered.forEach((value, key) => {
+                baseHeaders.set(key, value);
+            });
+        }
+        if (response.status === 303 || ((response.status === 301 || response.status === 302) && currentMethod === 'POST')) {
+            currentMethod = 'GET';
+            currentBody = undefined;
+            baseHeaders.delete('content-length');
+            baseHeaders.delete('content-type');
+        }
+        redirectsFollowed += 1;
+        currentUrl = nextUrl;
+        await response.body?.cancel();
+    }
+}
+//# sourceMappingURL=safe-fetch.js.map

package/dist/network/safe-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-fetch.js","sourceRoot":"","sources":["../../src/network/safe-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAkB,MAAM,iBAAiB,CAAC;AAiBtE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE5G,SAAS,gBAAgB,CAAC,MAAc;IACvC,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAoC;IACjE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAwB,EAAE,MAAc,EAAE,IAAiC;IACrG,MAAM,QAAQ,GAAgB;QAC7B,GAAG,WAAW;QACd,MAAM;QACN,QAAQ,EAAE,QAAQ;KAClB,CAAC;IAEF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAClF,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IACtB,CAAC;SAAM,CAAC;QACP,OAAO,QAAQ,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAQ,EAAE,WAAwB,EAAE,SAAiB;IACpF,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC5B,GAAG,WAAW;YACd,QAAQ,EAAE,QAAQ;SAClB,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC;IAEvC,IAAI,WAAW,EAAE,CAAC;QACjB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAE3F,IAAI,CAAC;QACJ,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAClC,GAAG,WAAW;YACd,MAAM;YACN,QAAQ,EAAE,QAAQ;SAClB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3D,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAiB,EAAE,OAAyB;IAC3E,MAAM,EACL,SAAS,EACT,SAAS,GAAG,kBAAkB,EAC9B,YAAY,GAAG,qBAAqB,EACpC,YAAY,GAAG,KAAK,EACpB,WAAW,GAAG,EAAE,EAChB,wCAAwC,GAAG,IAAI,GAC/C,GAAG,OAAO,CAAC;IAEZ,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QAClB,MAAM,qBAAqB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,aAAa,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,IAAI,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC;IACnC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,iBAAiB,CACpC;YACC,GAAG,WAAW;YACd,OAAO,EAAE,WAAW;SACpB,EACD,aAAa,EACb,WAAW,CACX,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAE5E,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO;gBACN,QAAQ;gBACR,QAAQ,EAAE,UAAU;gBACpB,iBAAiB;aACjB,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,wCAAwC,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACnD,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;gBAC9B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC/B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,aAAa,KAAK,MAAM,CAAC,EAAE,CAAC;YACnH,aAAa,GAAG,KAAK,CAAC;YACtB,WAAW,GAAG,SAAS,CAAC;YACxB,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACrC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;QAED,iBAAiB,IAAI,CAAC,CAAC;QACvB,UAAU,GAAG,OAAO,CAAC;QAErB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;AACF,CAAC"}

package/dist/network/safe-fetch.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=safe-fetch.test.d.ts.map

package/dist/network/safe-fetch.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-fetch.test.d.ts","sourceRoot":"","sources":["../../src/network/safe-fetch.test.ts"],"names":[],"mappings":""}

package/dist/network/safe-fetch.test.js

@@ -0,0 +1,136 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { createExternalHttpsPolicy, createHfDocsPolicy } from './url-policy.js';
+import { safeFetch } from './safe-fetch.js';
+describe('safeFetch', () => {
+    afterEach(() => {
+        vi.clearAllMocks();
+        vi.unstubAllGlobals();
+    });
+    it('follows redirects manually and validates each hop', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/next' } }))
+            .mockResolvedValueOnce(new Response('ok', { status: 200 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const result = await safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            externalOnly: true,
+        });
+        expect(result.redirectsFollowed).toBe(1);
+        expect(result.finalUrl.toString()).toBe('https://huggingface.co/docs/next');
+        expect(fetchMock).toHaveBeenCalledTimes(2);
+        expect(fetchMock.mock.calls[0]?.[0]).toBe('https://huggingface.co/docs/start');
+        expect(fetchMock.mock.calls[1]?.[0]).toBe('https://huggingface.co/docs/next');
+    });
+    it('rejects redirect to disallowed host', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: 'https://example.com/path' } }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            externalOnly: true,
+        })).rejects.toThrow('URL hostname is not allowed');
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('enforces redirect limits', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/a' } }))
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/b' } }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            maxRedirects: 1,
+        })).rejects.toThrow('Redirect limit exceeded');
+    });
+    it('enforces timeout', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => new Promise((_, reject) => {
+            const signal = init?.signal;
+            signal?.addEventListener('abort', () => {
+                reject(new DOMException('aborted', 'AbortError'));
+            }, { once: true });
+        }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 5,
+        })).rejects.toThrow('Request timed out');
+    });
+    it('keeps caller abort signal active while streaming response body', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => {
+            const stream = new ReadableStream({
+                start(controller) {
+                    init?.signal?.addEventListener('abort', () => {
+                        controller.error(new DOMException('aborted', 'AbortError'));
+                    }, { once: true });
+                },
+                pull() {
+                    return new Promise(() => { });
+                },
+            });
+            return Promise.resolve(new Response(stream, { status: 200 }));
+        });
+        vi.stubGlobal('fetch', fetchMock);
+        const controller = new AbortController();
+        const { response } = await safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 500,
+            requestInit: { signal: controller.signal },
+        });
+        const reader = response.body?.getReader();
+        if (!reader) {
+            throw new Error('Expected response body to exist');
+        }
+        const readPromise = Promise.race([
+            reader.read(),
+            new Promise((_, reject) => {
+                setTimeout(() => {
+                    reject(new Error('stream read did not abort'));
+                }, 100);
+            }),
+        ]);
+        controller.abort();
+        await expect(readPromise).rejects.toMatchObject({ name: 'AbortError' });
+    });
+    it('enforces timeout while streaming response body', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => {
+            const stream = new ReadableStream({
+                start(controller) {
+                    init?.signal?.addEventListener('abort', () => {
+                        controller.error(new DOMException('aborted', 'AbortError'));
+                    }, { once: true });
+                },
+                pull() {
+                    return new Promise(() => { });
+                },
+            });
+            return Promise.resolve(new Response(stream, { status: 200 }));
+        });
+        vi.stubGlobal('fetch', fetchMock);
+        const { response } = await safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 10,
+        });
+        const reader = response.body?.getReader();
+        if (!reader) {
+            throw new Error('Expected response body to exist');
+        }
+        const readPromise = Promise.race([
+            reader.read(),
+            new Promise((_, reject) => {
+                setTimeout(() => {
+                    reject(new Error('stream read did not timeout'));
+                }, 200);
+            }),
+        ]);
+        await expect(readPromise).rejects.toMatchObject({ name: 'AbortError' });
+    });
+    it('blocks internal destinations when externalOnly is enabled', async () => {
+        await expect(safeFetch('https://127.0.0.1/x', {
+            urlPolicy: createExternalHttpsPolicy(),
+            externalOnly: true,
+        })).rejects.toThrow('Blocked internal or reserved address');
+    });
+});
+//# sourceMappingURL=safe-fetch.test.js.map