@llmindset/hf-mcp 0.3.2 → 0.3.4

package/dist/network/safe-fetch.test.js

@@ -0,0 +1,136 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { createExternalHttpsPolicy, createHfDocsPolicy } from './url-policy.js';
+import { safeFetch } from './safe-fetch.js';
+describe('safeFetch', () => {
+    afterEach(() => {
+        vi.clearAllMocks();
+        vi.unstubAllGlobals();
+    });
+    it('follows redirects manually and validates each hop', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/next' } }))
+            .mockResolvedValueOnce(new Response('ok', { status: 200 }));
+        vi.stubGlobal('fetch', fetchMock);
+        const result = await safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            externalOnly: true,
+        });
+        expect(result.redirectsFollowed).toBe(1);
+        expect(result.finalUrl.toString()).toBe('https://huggingface.co/docs/next');
+        expect(fetchMock).toHaveBeenCalledTimes(2);
+        expect(fetchMock.mock.calls[0]?.[0]).toBe('https://huggingface.co/docs/start');
+        expect(fetchMock.mock.calls[1]?.[0]).toBe('https://huggingface.co/docs/next');
+    });
+    it('rejects redirect to disallowed host', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: 'https://example.com/path' } }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            externalOnly: true,
+        })).rejects.toThrow('URL hostname is not allowed');
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('enforces redirect limits', async () => {
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/a' } }))
+            .mockResolvedValueOnce(new Response('', { status: 302, headers: { location: '/docs/b' } }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://huggingface.co/docs/start', {
+            urlPolicy: createHfDocsPolicy(),
+            maxRedirects: 1,
+        })).rejects.toThrow('Redirect limit exceeded');
+    });
+    it('enforces timeout', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => new Promise((_, reject) => {
+            const signal = init?.signal;
+            signal?.addEventListener('abort', () => {
+                reject(new DOMException('aborted', 'AbortError'));
+            }, { once: true });
+        }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 5,
+        })).rejects.toThrow('Request timed out');
+    });
+    it('keeps caller abort signal active while streaming response body', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => {
+            const stream = new ReadableStream({
+                start(controller) {
+                    init?.signal?.addEventListener('abort', () => {
+                        controller.error(new DOMException('aborted', 'AbortError'));
+                    }, { once: true });
+                },
+                pull() {
+                    return new Promise(() => { });
+                },
+            });
+            return Promise.resolve(new Response(stream, { status: 200 }));
+        });
+        vi.stubGlobal('fetch', fetchMock);
+        const controller = new AbortController();
+        const { response } = await safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 500,
+            requestInit: { signal: controller.signal },
+        });
+        const reader = response.body?.getReader();
+        if (!reader) {
+            throw new Error('Expected response body to exist');
+        }
+        const readPromise = Promise.race([
+            reader.read(),
+            new Promise((_, reject) => {
+                setTimeout(() => {
+                    reject(new Error('stream read did not abort'));
+                }, 100);
+            }),
+        ]);
+        controller.abort();
+        await expect(readPromise).rejects.toMatchObject({ name: 'AbortError' });
+    });
+    it('enforces timeout while streaming response body', async () => {
+        const fetchMock = vi.fn().mockImplementation((_url, init) => {
+            const stream = new ReadableStream({
+                start(controller) {
+                    init?.signal?.addEventListener('abort', () => {
+                        controller.error(new DOMException('aborted', 'AbortError'));
+                    }, { once: true });
+                },
+                pull() {
+                    return new Promise(() => { });
+                },
+            });
+            return Promise.resolve(new Response(stream, { status: 200 }));
+        });
+        vi.stubGlobal('fetch', fetchMock);
+        const { response } = await safeFetch('https://example.com/file.wav', {
+            urlPolicy: createExternalHttpsPolicy(),
+            timeoutMs: 10,
+        });
+        const reader = response.body?.getReader();
+        if (!reader) {
+            throw new Error('Expected response body to exist');
+        }
+        const readPromise = Promise.race([
+            reader.read(),
+            new Promise((_, reject) => {
+                setTimeout(() => {
+                    reject(new Error('stream read did not timeout'));
+                }, 200);
+            }),
+        ]);
+        await expect(readPromise).rejects.toMatchObject({ name: 'AbortError' });
+    });
+    it('blocks internal destinations when externalOnly is enabled', async () => {
+        await expect(safeFetch('https://127.0.0.1/x', {
+            urlPolicy: createExternalHttpsPolicy(),
+            externalOnly: true,
+        })).rejects.toThrow('Blocked internal or reserved address');
+    });
+});
+//# sourceMappingURL=safe-fetch.test.js.map

package/dist/network/safe-fetch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-fetch.test.js","sourceRoot":"","sources":["../../src/network/safe-fetch.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IAC1B,SAAS,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,SAAS,GAAG,EAAE;aAClB,EAAE,EAAE;aACJ,qBAAqB,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;aAC7F,qBAAqB,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,mCAAmC,EAAE;YACnE,SAAS,EAAE,kBAAkB,EAAE;YAC/B,YAAY,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,SAAS,GAAG,EAAE;aAClB,EAAE,EAAE;aACJ,qBAAqB,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9G,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CACX,SAAS,CAAC,mCAAmC,EAAE;YAC9C,SAAS,EAAE,kBAAkB,EAAE;YAC/B,YAAY,EAAE,IAAI;SAClB,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,SAAS,GAAG,EAAE;aAClB,EAAE,EAAE;aACJ,qBAAqB,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;aAC1F,qBAAqB,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CACX,SAAS,CAAC,mCAAmC,EAAE;YAC9C,SAAS,EAAE,kBAAkB,EAAE;YAC/B,YAAY,EAAE,CAAC;SACf,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAC3C,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAE,CACpC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACzB,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;YAC5B,MAAM,EAAE,gBAAgB,CACvB,OAAO,EACP,GAAG,EAAE;gBACJ,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YACnD,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CACX,SAAS,CAAC,8BAA8B,EAAE;YACzC,SAAS,EAAE,yBAAyB,EAAE;YACtC,SAAS,EAAE,CAAC;SACZ,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAE;YACjF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;gBAC7C,KAAK,CAAC,UAAU;oBACf,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAC7B,OAAO,EACP,GAAG,EAAE;wBACJ,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;oBAC7D,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAC;gBACH,CAAC;gBACD,IAAI;oBACH,OAAO,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;aACD,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,8BAA8B,EAAE;YACpE,SAAS,EAAE,yBAAyB,EAAE;YACtC,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SAC1C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,UAAU,CAAC,GAAG,EAAE;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAChD,CAAC,EAAE,GAAG,CAAC,CAAC;YACT,CAAC,CAAC;SACF,CAAC,CAAC;QACH,UAAU,CAAC,KAAK,EAAE,CAAC;QAEnB,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAE;YACjF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;gBAC7C,KAAK,CAAC,UAAU;oBACf,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAC7B,OAAO,EACP,GAAG,EAAE;wBACJ,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;oBAC7D,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAC;gBACH,CAAC;gBACD,IAAI;oBACH,OAAO,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;aACD,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,8BAA8B,EAAE;YACpE,SAAS,EAAE,yBAAyB,EAAE;YACtC,SAAS,EAAE,EAAE;SACb,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,UAAU,CAAC,GAAG,EAAE;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBAClD,CAAC,EAAE,GAAG,CAAC,CAAC;YACT,CAAC,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,CACX,SAAS,CAAC,qBAAqB,EAAE;YAChC,SAAS,EAAE,yBAAyB,EAAE;YACtC,YAAY,EAAE,IAAI;SAClB,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/network/url-policy.d.ts

@@ -0,0 +1,32 @@
+export interface UrlPathRules {
+    requiredPrefix?: string;
+}
+export type UrlProtocol = 'https:' | 'http:';
+export interface UrlQueryRules {
+    allowAny?: boolean;
+    allowKeys?: ReadonlySet<string>;
+}
+export interface UrlPolicy {
+    allowedProtocols: ReadonlySet<UrlProtocol>;
+    allowedHosts?: ReadonlySet<string>;
+    allowSubdomainsOf?: readonly string[];
+    requireDefaultPort?: boolean;
+    pathRules?: UrlPathRules;
+    queryRules?: UrlQueryRules;
+    allowCredentials?: boolean;
+    customValidator?: (url: URL) => void;
+}
+export declare function validateUrlAgainstPolicy(url: URL, policy: UrlPolicy): void;
+export declare function parseAndValidateUrl(input: string | URL, policy: UrlPolicy): URL;
+export declare function createHfDocsPolicy(): UrlPolicy;
+export declare function createGradioMcpPolicy(): UrlPolicy;
+export declare function isLocalhostHostname(hostname: string): boolean;
+export declare function createExternalHttpsPolicy(): UrlPolicy;
+export declare function createHuggingFaceHubPolicy(): UrlPolicy;
+export declare function createLocalhostHttpPolicy(): UrlPolicy;
+export declare function createExactHostPolicy(hostname: string, allowedProtocol: UrlProtocol): UrlPolicy;
+export declare function createHostPrefixPolicy(hostname: string, requiredPrefix: string, allowedProtocol?: UrlProtocol): UrlPolicy;
+export declare function createGradioMcpHostPolicy(hostname: string, allowedProtocol: UrlProtocol): UrlPolicy;
+export declare function createGradioSchemaHostPolicy(hostname: string): UrlPolicy;
+export declare function createHttpOrHttpsPolicy(): UrlPolicy;
+//# sourceMappingURL=url-policy.d.ts.map

package/dist/network/url-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.d.ts","sourceRoot":"","sources":["../../src/network/url-policy.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACzB,gBAAgB,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;CACrC;AA0JD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAe1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,CAI/E;AAED,wBAAgB,kBAAkB,IAAI,SAAS,CAe9C;AAED,wBAAgB,qBAAqB,IAAI,SAAS,CAejD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,yBAAyB,IAAI,SAAS,CAMrD;AAED,wBAAgB,0BAA0B,IAAI,SAAS,CAOtD;AAED,wBAAgB,yBAAyB,IAAI,SAAS,CAOrD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,GAAG,SAAS,CAO/F;AAED,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,eAAe,GAAE,WAAsB,GACrC,SAAS,CAUX;AAED,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,WAAW,GAC1B,SAAS,CAEX;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAExE;AAED,wBAAgB,uBAAuB,IAAI,SAAS,CAMnD"}

package/dist/network/url-policy.js

@@ -0,0 +1,230 @@
+const LOCALHOST_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]', '::1']);
+const ENCODED_SEPARATOR_RE = /%(?:2f|5c)/i;
+const ENCODED_BYTE_RE = /%[0-9a-f]{2}/i;
+const INVALID_PERCENT_ENCODING_RE = /%(?![0-9a-f]{2})/i;
+function normalizeHostname(hostname) {
+    return hostname.toLowerCase().replace(/\.+$/, '');
+}
+function safeDecodeURIComponent(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        throw new Error('URL contains invalid percent-encoding');
+    }
+}
+function collectDecodedPathVariants(pathname) {
+    const variants = [pathname];
+    let current = pathname;
+    for (let i = 0; i < 2; i += 1) {
+        if (!current.includes('%')) {
+            break;
+        }
+        const decoded = safeDecodeURIComponent(current);
+        if (decoded === current) {
+            break;
+        }
+        variants.push(decoded);
+        current = decoded;
+    }
+    return variants;
+}
+function hasDotSegments(pathname) {
+    const normalized = pathname.replace(/\\/g, '/');
+    const segments = normalized.split('/');
+    return segments.some((segment) => segment === '.' || segment === '..');
+}
+function matchesRequiredPrefix(pathname, requiredPrefix) {
+    const normalizedPath = pathname.replace(/\\/g, '/');
+    const normalizedPrefix = requiredPrefix.replace(/\\/g, '/');
+    if (normalizedPath === normalizedPrefix) {
+        return true;
+    }
+    if (normalizedPrefix.endsWith('/') && normalizedPath === normalizedPrefix.slice(0, -1)) {
+        return true;
+    }
+    return normalizedPath.startsWith(normalizedPrefix);
+}
+function assertHostAllowed(hostname, policy) {
+    if (!policy.allowedHosts && (!policy.allowSubdomainsOf || policy.allowSubdomainsOf.length === 0)) {
+        return;
+    }
+    const normalized = normalizeHostname(hostname);
+    if (policy.allowedHosts) {
+        for (const host of policy.allowedHosts) {
+            if (normalizeHostname(host) === normalized) {
+                return;
+            }
+        }
+    }
+    if (policy.allowSubdomainsOf) {
+        for (const domain of policy.allowSubdomainsOf) {
+            const normalizedDomain = normalizeHostname(domain);
+            if (normalized === normalizedDomain || normalized.endsWith(`.${normalizedDomain}`)) {
+                return;
+            }
+        }
+    }
+    throw new Error(`URL hostname is not allowed: ${hostname}`);
+}
+function assertPathAllowed(url, pathRules) {
+    const pathname = url.pathname;
+    if (pathname.includes('%') && INVALID_PERCENT_ENCODING_RE.test(pathname)) {
+        throw new Error('URL path contains invalid percent-encoding');
+    }
+    const variants = collectDecodedPathVariants(pathname);
+    const hasEncodedSeparators = variants.some((variant) => ENCODED_SEPARATOR_RE.test(variant));
+    if (hasEncodedSeparators) {
+        throw new Error('URL path contains encoded separators');
+    }
+    const hasUnsafeDotSegments = variants.some((variant) => hasDotSegments(variant));
+    if (hasUnsafeDotSegments) {
+        throw new Error('URL path contains dot-segments');
+    }
+    if (variants.length > 1) {
+        const decodedOnce = variants[1] ?? '';
+        if (ENCODED_BYTE_RE.test(decodedOnce)) {
+            throw new Error('URL path appears to use double-encoding');
+        }
+    }
+    if (pathRules?.requiredPrefix) {
+        const hasPrefix = variants.some((variant) => matchesRequiredPrefix(variant, pathRules.requiredPrefix ?? ''));
+        if (!hasPrefix) {
+            throw new Error(`URL path must start with ${pathRules.requiredPrefix}`);
+        }
+    }
+}
+function assertQueryAllowed(url, policy) {
+    const rules = policy.queryRules;
+    if (!rules || rules.allowAny === true) {
+        return;
+    }
+    if (!rules.allowKeys) {
+        if (url.search.length > 0) {
+            throw new Error('URL query string is not allowed');
+        }
+        return;
+    }
+    for (const key of url.searchParams.keys()) {
+        if (!rules.allowKeys.has(key)) {
+            throw new Error(`URL query parameter is not allowed: ${key}`);
+        }
+    }
+}
+function assertPortAllowed(url, policy) {
+    if (!policy.requireDefaultPort || url.port.length === 0) {
+        return;
+    }
+    const defaultPort = url.protocol === 'https:' ? '443' : url.protocol === 'http:' ? '80' : '';
+    if (!defaultPort || url.port !== defaultPort) {
+        throw new Error(`URL port is not allowed for protocol ${url.protocol}`);
+    }
+}
+export function validateUrlAgainstPolicy(url, policy) {
+    if (!policy.allowedProtocols.has(url.protocol)) {
+        throw new Error(`URL protocol is not allowed: ${url.protocol}`);
+    }
+    if (!policy.allowCredentials && (url.username.length > 0 || url.password.length > 0)) {
+        throw new Error('URL credentials are not allowed');
+    }
+    assertHostAllowed(url.hostname, policy);
+    assertPortAllowed(url, policy);
+    assertPathAllowed(url, policy.pathRules);
+    assertQueryAllowed(url, policy);
+    policy.customValidator?.(url);
+}
+export function parseAndValidateUrl(input, policy) {
+    const parsed = input instanceof URL ? new URL(input.toString()) : new URL(input.trim());
+    validateUrlAgainstPolicy(parsed, policy);
+    return parsed;
+}
+export function createHfDocsPolicy() {
+    const hfHosts = new Set(['huggingface.co', 'www.huggingface.co']);
+    return {
+        allowedProtocols: new Set(['https:']),
+        allowedHosts: new Set(['huggingface.co', 'www.huggingface.co', 'gradio.app', 'www.gradio.app']),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+        customValidator: (url) => {
+            const host = normalizeHostname(url.hostname);
+            if (hfHosts.has(host) && !matchesRequiredPrefix(url.pathname, '/docs/')) {
+                throw new Error('Hugging Face docs URLs must remain under /docs/');
+            }
+        },
+    };
+}
+export function createGradioMcpPolicy() {
+    return {
+        allowedProtocols: new Set(['https:', 'http:']),
+        pathRules: {
+            requiredPrefix: '/gradio_api/mcp',
+        },
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+        customValidator: (url) => {
+            const enforceLocalHttpOnly = process.env.NODE_ENV === 'production';
+            if (enforceLocalHttpOnly && url.protocol === 'http:' && !isLocalhostHostname(url.hostname)) {
+                throw new Error('HTTP is only allowed for localhost Gradio MCP endpoints');
+            }
+        },
+    };
+}
+export function isLocalhostHostname(hostname) {
+    return LOCALHOST_HOSTS.has(normalizeHostname(hostname));
+}
+export function createExternalHttpsPolicy() {
+    return {
+        allowedProtocols: new Set(['https:']),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+export function createHuggingFaceHubPolicy() {
+    return {
+        allowedProtocols: new Set(['https:']),
+        allowedHosts: new Set(['huggingface.co', 'www.huggingface.co', 'hf.co']),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+export function createLocalhostHttpPolicy() {
+    return {
+        allowedProtocols: new Set(['https:', 'http:']),
+        allowedHosts: new Set(['localhost', '127.0.0.1', '[::1]']),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+export function createExactHostPolicy(hostname, allowedProtocol) {
+    return {
+        allowedProtocols: new Set([allowedProtocol]),
+        allowedHosts: new Set([hostname.toLowerCase()]),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+export function createHostPrefixPolicy(hostname, requiredPrefix, allowedProtocol = 'https:') {
+    return {
+        allowedProtocols: new Set([allowedProtocol]),
+        allowedHosts: new Set([hostname.toLowerCase()]),
+        pathRules: {
+            requiredPrefix,
+        },
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+export function createGradioMcpHostPolicy(hostname, allowedProtocol) {
+    return createHostPrefixPolicy(hostname, '/gradio_api/mcp', allowedProtocol);
+}
+export function createGradioSchemaHostPolicy(hostname) {
+    return createHostPrefixPolicy(hostname, '/gradio_api/mcp/schema');
+}
+export function createHttpOrHttpsPolicy() {
+    return {
+        allowedProtocols: new Set(['https:', 'http:']),
+        allowCredentials: false,
+        queryRules: { allowAny: true },
+    };
+}
+//# sourceMappingURL=url-policy.js.map

package/dist/network/url-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.js","sourceRoot":"","sources":["../../src/network/url-policy.ts"],"names":[],"mappings":"AAsBA,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAExD,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC5C,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB;IACnD,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,QAAQ,CAAC;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM;QACP,CAAC;QAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM;QACP,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,GAAG,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,cAAsB;IACtE,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE5D,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,MAAiB;IAC7D,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO;IACR,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC5C,OAAO;YACR,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,UAAU,KAAK,gBAAgB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC,EAAE,CAAC;gBACpF,OAAO;YACR,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ,EAAE,SAAwB;IAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAE9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAEtD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,IAAI,oBAAoB,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,IAAI,oBAAoB,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;IACF,CAAC;IAED,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7G,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ,EAAE,MAAiB;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;IACR,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ,EAAE,MAAiB;IACrD,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;IACR,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAQ,EAAE,MAAiB;IACnE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAuB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IAED,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,MAAiB;IACzE,MAAM,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxF,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAElE,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC/F,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9B,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACpE,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,SAAS,EAAE;YACV,cAAc,EAAE,iBAAiB;SACjC;QACD,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9B,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;YACnE,IAAI,oBAAoB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC5E,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IACnD,OAAO,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,yBAAyB;IACxC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrC,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B;IACzC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACxE,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB;IACxC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1D,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,eAA4B;IACnF,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5C,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/C,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,QAAgB,EAChB,cAAsB,EACtB,kBAA+B,QAAQ;IAEvC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5C,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/C,SAAS,EAAE;YACV,cAAc;SACd;QACD,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,QAAgB,EAChB,eAA4B;IAE5B,OAAO,sBAAsB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC5D,OAAO,sBAAsB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO;QACN,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC"}

package/dist/network/url-policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=url-policy.test.d.ts.map

package/dist/network/url-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.test.d.ts","sourceRoot":"","sources":["../../src/network/url-policy.test.ts"],"names":[],"mappings":""}

package/dist/network/url-policy.test.js

@@ -0,0 +1,57 @@
+import { describe, expect, it } from 'vitest';
+import { createExactHostPolicy, createExternalHttpsPolicy, createGradioMcpHostPolicy, createGradioSchemaHostPolicy, createHuggingFaceHubPolicy, createLocalhostHttpPolicy, createGradioMcpPolicy, createHfDocsPolicy, isLocalhostHostname, parseAndValidateUrl, } from './url-policy.js';
+describe('url-policy', () => {
+    describe('HF docs policy', () => {
+        it('accepts valid Hugging Face docs and Gradio docs URLs', () => {
+            expect(() => parseAndValidateUrl('https://huggingface.co/docs/transformers', createHfDocsPolicy())).not.toThrow();
+            expect(() => parseAndValidateUrl('https://www.huggingface.co/docs/datasets', createHfDocsPolicy())).not.toThrow();
+            expect(() => parseAndValidateUrl('https://www.gradio.app/guides', createHfDocsPolicy())).not.toThrow();
+        });
+        it('rejects non-https or non-allowlisted hosts', () => {
+            expect(() => parseAndValidateUrl('http://huggingface.co/docs/transformers', createHfDocsPolicy())).toThrow('URL protocol is not allowed');
+            expect(() => parseAndValidateUrl('https://example.com/docs/transformers', createHfDocsPolicy())).toThrow('URL hostname is not allowed');
+        });
+        it('rejects traversal and encoded traversal variants', () => {
+            const variants = [
+                'https://huggingface.co/docs/../x',
+                'https://huggingface.co/docs/%2e%2e/x',
+                'https://huggingface.co/docs/%2e%2e%2fx',
+                'https://huggingface.co/docs/..%2fx',
+                'https://huggingface.co/docs/%2e%2e%5cx',
+                'https://huggingface.co/docs/%252e%252e%252fx',
+            ];
+            for (const candidate of variants) {
+                expect(() => parseAndValidateUrl(candidate, createHfDocsPolicy())).toThrow();
+            }
+        });
+        it('enforces /docs/ prefix on HF hosts', () => {
+            expect(() => parseAndValidateUrl('https://huggingface.co/models/some-model', createHfDocsPolicy())).toThrow('Hugging Face docs URLs must remain under /docs/');
+        });
+    });
+    describe('Gradio MCP policy', () => {
+        it('accepts mcp endpoint URLs over https', () => {
+            expect(() => parseAndValidateUrl('https://demo-space.hf.space/gradio_api/mcp/', createGradioMcpPolicy())).not.toThrow();
+            expect(() => parseAndValidateUrl('https://fake-mcp.local/gradio_api/mcp/', createGradioMcpPolicy())).not.toThrow();
+        });
+        it('rejects invalid paths', () => {
+            expect(() => parseAndValidateUrl('https://demo-space.hf.space/not-mcp', createGradioMcpPolicy())).toThrow('URL path must start with /gradio_api/mcp');
+        });
+    });
+    describe('external https policy', () => {
+        it('rejects credentials in URL', () => {
+            expect(() => parseAndValidateUrl('https://user:pass@example.com/file.wav', createExternalHttpsPolicy())).toThrow('URL credentials are not allowed');
+        });
+    });
+    it('supports huggingface hub and localhost policy helpers', () => {
+        expect(() => parseAndValidateUrl('https://huggingface.co/api/models', createHuggingFaceHubPolicy())).not.toThrow();
+        expect(() => parseAndValidateUrl('http://localhost:7860/health', createLocalhostHttpPolicy())).not.toThrow();
+        expect(() => parseAndValidateUrl('https://example.com/x', createExactHostPolicy('example.com', 'https:'))).not.toThrow();
+        expect(() => parseAndValidateUrl('https://demo-space.hf.space/gradio_api/mcp/schema', createGradioSchemaHostPolicy('demo-space.hf.space'))).not.toThrow();
+        expect(() => parseAndValidateUrl('https://demo-space.hf.space/gradio_api/mcp/', createGradioMcpHostPolicy('demo-space.hf.space', 'https:'))).not.toThrow();
+        expect(isLocalhostHostname('localhost')).toBe(true);
+        expect(isLocalhostHostname('127.0.0.1')).toBe(true);
+        expect(isLocalhostHostname('[::1]')).toBe(true);
+        expect(isLocalhostHostname('example.com')).toBe(false);
+    });
+});
+//# sourceMappingURL=url-policy.test.js.map

package/dist/network/url-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.test.js","sourceRoot":"","sources":["../../src/network/url-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACN,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,0CAA0C,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAClH,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,0CAA0C,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAClH,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,+BAA+B,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACxG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACrD,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,yCAAyC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CACzG,6BAA6B,CAC7B,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,uCAAuC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CACvG,6BAA6B,CAC7B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC3D,MAAM,QAAQ,GAAG;gBAChB,kCAAkC;gBAClC,sCAAsC;gBACtC,wCAAwC;gBACxC,oCAAoC;gBACpC,wCAAwC;gBACxC,8CAA8C;aAC9C,CAAC;YAEF,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9E,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,0CAA0C,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAC1G,iDAAiD,CACjD,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,EAAE,CACX,mBAAmB,CAAC,6CAA6C,EAAE,qBAAqB,EAAE,CAAC,CAC3F,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,EAAE,CACX,mBAAmB,CAAC,wCAAwC,EAAE,qBAAqB,EAAE,CAAC,CACtF,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;YAChC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,qCAAqC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,OAAO,CACxG,0CAA0C,CAC1C,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACrC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,wCAAwC,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,OAAO,CAC/G,iCAAiC,CACjC,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,mCAAmC,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnH,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,8BAA8B,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACzH,MAAM,CAAC,GAAG,EAAE,CACX,mBAAmB,CAClB,mDAAmD,EACnD,4BAA4B,CAAC,qBAAqB,CAAC,CACnD,CACD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,EAAE,CACX,mBAAmB,CAClB,6CAA6C,EAC7C,yBAAyB,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAC1D,CACD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/readme-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readme-utils.d.ts","sourceRoot":"","sources":["../src/readme-utils.ts"],"names":[],"mappings":"AAeA,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,GAAG,UAAU,EAC3B,WAAW,GAAE,OAAe,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2CxB"}
+{"version":3,"file":"readme-utils.d.ts","sourceRoot":"","sources":["../src/readme-utils.ts"],"names":[],"mappings":"AAiBA,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,GAAG,UAAU,EAC3B,WAAW,GAAE,OAAe,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA0CxB"}

package/dist/readme-utils.js

@@ -1,11 +1,10 @@
+import { fetchWithProfile, NETWORK_FETCH_PROFILES } from './network/fetch-profile.js';
 const DEFAULT_MAX_README_CHARS = 10_000;
 export async function fetchReadmeContent(repoName, type, includeYaml = false) {
     try {
-        const baseUrl = type === 'datasets'
-            ? `https://huggingface.co/datasets/${repoName}`
-            : `https://huggingface.co/${repoName}`;
+        const baseUrl = type === 'datasets' ? `https://huggingface.co/datasets/${repoName}` : `https://huggingface.co/${repoName}`;
         const url = `${baseUrl}/resolve/main/README.md`;
-        const response = await fetch(url);
+        const { response } = await fetchWithProfile(url, NETWORK_FETCH_PROFILES.hfHub());
         if (!response.ok) {
             if (response.status === 404) {
                 return null;

package/dist/readme-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"readme-utils.js","sourceRoot":"","sources":["../src/readme-utils.ts"],"names":[],"mappings":"AAKA,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAUxC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAAgB,EAChB,IAA2B,EAC3B,cAAuB,KAAK;IAE5B,IAAI,CAAC;QAEJ,MAAM,OAAO,GAAG,IAAI,KAAK,UAAU;YAClC,CAAC,CAAC,mCAAmC,QAAQ,EAAE;YAC/C,CAAC,CAAC,0BAA0B,QAAQ,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,GAAG,OAAO,yBAAyB,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAE7B,OAAO,IAAI,CAAC;YACb,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAGpC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAGD,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC7D,OAAO,GAAG,GAAG,SAAS,0BAA0B,wBAAwB,CAAC,QAAQ,EAAE,8BAA8B,OAAO,GAAG,CAAC;QAC7H,CAAC;QAGD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEhB,OAAO,CAAC,KAAK,CAAC,8BAA8B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAQD,SAAS,oBAAoB,CAAC,OAAe;IAE5C,MAAM,WAAW,GAAG,mDAAmD,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEzC,IAAI,KAAK,EAAE,CAAC;QAEX,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAGD,OAAO,OAAO,CAAC;AAChB,CAAC"}
+{"version":3,"file":"readme-utils.js","sourceRoot":"","sources":["../src/readme-utils.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAGtF,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAUxC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAAgB,EAChB,IAA2B,EAC3B,cAAuB,KAAK;IAE5B,IAAI,CAAC;QAEJ,MAAM,OAAO,GACZ,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC,CAAC,0BAA0B,QAAQ,EAAE,CAAC;QAE5G,MAAM,GAAG,GAAG,GAAG,OAAO,yBAAyB,CAAC;QAEhD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAE7B,OAAO,IAAI,CAAC;YACb,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAGpC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAGD,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC7D,OAAO,GAAG,GAAG,SAAS,0BAA0B,wBAAwB,CAAC,QAAQ,EAAE,8BAA8B,OAAO,GAAG,CAAC;QAC7H,CAAC;QAGD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEhB,OAAO,CAAC,KAAK,CAAC,8BAA8B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAQD,SAAS,oBAAoB,CAAC,OAAe;IAE5C,MAAM,WAAW,GAAG,mDAAmD,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEzC,IAAI,KAAK,EAAE,CAAC;QAEX,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAGD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/space/commands/discover.d.ts

@@ -1,8 +1,3 @@
 import type { ToolResult } from '../../types/tool-result.js';
-export declare const DISCOVER_PROMPTS: {
-    RESULTS_HEADER: string;
-    NO_RESULTS: string;
-    FETCH_ERROR: (url: string, error: string) => string;
-};
 export declare function discoverSpaces(): Promise<ToolResult>;
 //# sourceMappingURL=discover.d.ts.map

package/dist/space/commands/discover.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/space/commands/discover.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAQ7D,eAAO,MAAM,gBAAgB;;;uBAaT,MAAM,SAAS,MAAM,KAAG,MAAM;CACjD,CAAC;AAyDF,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAyC1D"}
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/space/commands/discover.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAgF7D,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAgD1D"}

package/dist/space/commands/discover.js

@@ -1,6 +1,7 @@
 import { escapeMarkdown } from '../../utilities.js';
 import { VIEW_PARAMETERS } from '../types.js';
-export const DISCOVER_PROMPTS = {
+import { fetchWithProfile, NETWORK_FETCH_PROFILES } from '../../network/fetch-profile.js';
+const DISCOVER_PROMPTS = {
     RESULTS_HEADER: `**Available Spaces:**
 
 These spaces can be invoked using the \`dynamic_space\` tool.
@@ -53,7 +54,13 @@ export async function discoverSpaces() {
         };
     }
     try {
-        const response = await fetch(url);
+        const allowPermissiveUrls = process.env.ALLOW_PERMISSIVE_URLS === 'true';
+        const profile = allowPermissiveUrls
+            ? NETWORK_FETCH_PROFILES.httpOrHttpsPermissive()
+            : NETWORK_FETCH_PROFILES.externalHttps();
+        const { response } = await fetchWithProfile(url, profile, {
+            timeoutMs: 10000,
+        });
         if (!response.ok) {
             return {
                 formatted: DISCOVER_PROMPTS.FETCH_ERROR(url, `HTTP ${response.status}`),

package/dist/space/commands/discover.js.map

@@ -1 +1 @@
-{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/space/commands/discover.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM9C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAE/B,cAAc,EAAE;;;sBAGK,eAAe;;CAEpC;IAGA,UAAU,EAAE,6CAA6C;IAGzD,WAAW,EAAE,CAAC,GAAW,EAAE,KAAa,EAAU,EAAE,CAAC,kCAAkC,GAAG,KAAK,KAAK,EAAE;CACtG,CAAC;AAMF,SAAS,eAAe,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAiE,EAAE,CAAC;IAEjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAG3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAEhG,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACnB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACzB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAKD,SAAS,qBAAqB,CAAC,OAAqE;IACnG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,gBAAgB,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC;IAG/C,QAAQ,IAAI,yCAAyC,CAAC;IACtD,QAAQ,IAAI,yCAAyC,CAAC;IAGtD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,QAAQ;YACP,OAAO,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK;gBACrC,KAAK,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACvC,KAAK,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAE3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;YACN,SAAS,EAAE,4DAA4D;YACvE,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,SAAS,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvE,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,IAAI;aACb,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAEzC,OAAO;YACN,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,aAAa,EAAE,OAAO,CAAC,MAAM;SAC7B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO;YACN,SAAS,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC;YAC1D,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;AACF,CAAC"}
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/space/commands/discover.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAM1F,MAAM,gBAAgB,GAAG;IAExB,cAAc,EAAE;;;sBAGK,eAAe;;CAEpC;IAGA,UAAU,EAAE,6CAA6C;IAGzD,WAAW,EAAE,CAAC,GAAW,EAAE,KAAa,EAAU,EAAE,CAAC,kCAAkC,GAAG,KAAK,KAAK,EAAE;CACtG,CAAC;AAMF,SAAS,eAAe,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAiE,EAAE,CAAC;IAEjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAG3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAEhG,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACnB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACzB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAKD,SAAS,qBAAqB,CAAC,OAAqE;IACnG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,gBAAgB,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC;IAG/C,QAAQ,IAAI,yCAAyC,CAAC;IACtD,QAAQ,IAAI,yCAAyC,CAAC;IAGtD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,QAAQ;YACP,OAAO,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK;gBACrC,KAAK,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACvC,KAAK,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAE3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;YACN,SAAS,EAAE,4DAA4D;YACvE,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,CAAC;QACzE,MAAM,OAAO,GAAG,mBAAmB;YAClC,CAAC,CAAC,sBAAsB,CAAC,qBAAqB,EAAE;YAChD,CAAC,CAAC,sBAAsB,CAAC,aAAa,EAAE,CAAC;QAE1C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE;YACzD,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,SAAS,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvE,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,IAAI;aACb,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAEzC,OAAO;YACN,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,aAAa,EAAE,OAAO,CAAC,MAAM;SAC7B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO;YACN,SAAS,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC;YAC1D,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;AACF,CAAC"}