@lowdefy/plugin-aws 0.0.0-experimental-20261007090522 → 0.0.0-experimental-20261007124348

package/dist/connections/AwsS3Bucket/AwsS3PutObject/copyFromUrl.js

@@ -15,8 +15,8 @@
 */ import { Readable } from 'node:stream';
 import { PutObjectCommand } from '@aws-sdk/client-s3';
 import { type } from '@lowdefy/helpers';
+import createConnectPublic from '@lowdefy/node-utils/createConnectPublic.js';
 import { Agent, fetch } from 'undici';
-import connectPublic from './connectPublic.js';
 import createCopyError from './createCopyError.js';
 import limitBody from './limitBody.js';
 import matchesContentType from './matchesContentType.js';
@@ -36,7 +36,12 @@ const REDIRECT_STATUSES = new Set([
 ]);
 const MAX_REDIRECTS = 20;
 const dispatcher = new Agent({
-    connect: connectPublic
+    connect: createConnectPublic({
+        createNotPublicError: ()=>createCopyError({
+                code: 'url_not_public',
+                message: 'AwsS3PutObject "url" leads to an address that is not public.'
+            })
+    })
 });
 function isHttps(link) {
     return URL.parse(link)?.protocol === 'https:';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/plugin-aws",
-  "version": "0.0.0-experimental-20261007090522",
+  "version": "0.0.0-experimental-20261007124348",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -50,11 +50,12 @@
     "dist/*"
   ],
   "dependencies": {
-    "@lowdefy/block-utils": "0.0.0-experimental-20261007090522",
-    "@lowdefy/blocks-antd": "0.0.0-experimental-20261007090522",
-    "@lowdefy/blocks-files": "0.0.0-experimental-20261007090522",
-    "@lowdefy/errors": "0.0.0-experimental-20261007090522",
-    "@lowdefy/helpers": "0.0.0-experimental-20261007090522",
+    "@lowdefy/block-utils": "0.0.0-experimental-20261007124348",
+    "@lowdefy/blocks-antd": "0.0.0-experimental-20261007124348",
+    "@lowdefy/blocks-files": "0.0.0-experimental-20261007124348",
+    "@lowdefy/errors": "0.0.0-experimental-20261007124348",
+    "@lowdefy/helpers": "0.0.0-experimental-20261007124348",
+    "@lowdefy/node-utils": "0.0.0-experimental-20261007124348",
     "@aws-sdk/client-s3": "3.1141.0",
     "@aws-sdk/s3-presigned-post": "3.1141.0",
     "@aws-sdk/s3-request-presigner": "3.1141.0",
@@ -67,9 +68,9 @@
   },
   "devDependencies": {
     "@jest/globals": "28.1.3",
-    "@lowdefy/ajv": "0.0.0-experimental-20261007090522",
-    "@lowdefy/block-dev": "0.0.0-experimental-20261007090522",
-    "@lowdefy/jest-yaml-transform": "0.0.0-experimental-20261007090522",
+    "@lowdefy/ajv": "0.0.0-experimental-20261007124348",
+    "@lowdefy/block-dev": "0.0.0-experimental-20261007124348",
+    "@lowdefy/jest-yaml-transform": "0.0.0-experimental-20261007124348",
     "@swc/cli": "0.8.1",
     "@swc/core": "1.15.32",
     "@swc/jest": "0.2.39",

package/dist/connections/AwsS3Bucket/AwsS3PutObject/connectPublic.js

@@ -1,39 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/ import { isIP } from 'node:net';
-import { buildConnector } from 'undici';
-import lookupPublicAddress from './lookupPublicAddress.js';
-const connect = buildConnector({
-    lookup: lookupPublicAddress
-});
-// The undici connector for a url copy: it opens a socket only to a public address, for the first
-// link and every redirect alike. A socket to an IP literal skips the lookup, so a literal is
-// checked here before connecting.
-function connectPublic(options, callback) {
-    if (isIP(options.hostname) === 0) {
-        connect(options, callback);
-        return;
-    }
-    lookupPublicAddress(options.hostname, {
-        all: true
-    }, (error)=>{
-        if (error) {
-            callback(error, null);
-            return;
-        }
-        connect(options, callback);
-    });
-}
-export default connectPublic;

package/dist/connections/AwsS3Bucket/AwsS3PutObject/isPublicAddress.js

@@ -1,106 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/ import { BlockList, isIPv6 } from 'node:net';
-// Ranges a url copy may not reach: anything that is not a public unicast address. BlockList also
-// matches an IPv4-mapped IPv6 address (::ffff:127.0.0.1) against the IPv4 ranges.
-const notPublicIPv4 = [
-    [
-        '0.0.0.0',
-        8
-    ],
-    [
-        '10.0.0.0',
-        8
-    ],
-    [
-        '100.64.0.0',
-        10
-    ],
-    [
-        '127.0.0.0',
-        8
-    ],
-    [
-        '169.254.0.0',
-        16
-    ],
-    [
-        '172.16.0.0',
-        12
-    ],
-    [
-        '192.0.0.0',
-        24
-    ],
-    [
-        '192.168.0.0',
-        16
-    ],
-    [
-        '198.18.0.0',
-        15
-    ],
-    [
-        '224.0.0.0',
-        4
-    ],
-    [
-        '240.0.0.0',
-        4
-    ]
-];
-// The 6to4 address (2002::/16) that carries an IPv4 network in its next 32 bits.
-function sixToFourNetwork(network) {
-    const [a, b, c, d] = network.split('.').map(Number);
-    return `2002:${(a << 8 | b).toString(16)}:${(c << 8 | d).toString(16)}::`;
-}
-const notPublic = new BlockList();
-notPublicIPv4.forEach(([network, prefix])=>{
-    notPublic.addSubnet(network, prefix, 'ipv4');
-    // An IPv6 address that embeds one of these IPv4 addresses: a NAT64 gateway (64:ff9b::/96)
-    // or a 6to4 relay forwards it to that IPv4 address.
-    notPublic.addSubnet(`64:ff9b::${network}`, 96 + prefix, 'ipv6');
-    notPublic.addSubnet(sixToFourNetwork(network), 16 + prefix, 'ipv6');
-});
-[
-    [
-        '::',
-        96
-    ],
-    [
-        '64:ff9b:1::',
-        48
-    ],
-    [
-        'fc00::',
-        7
-    ],
-    [
-        'fe80::',
-        10
-    ],
-    [
-        'fec0::',
-        10
-    ],
-    [
-        'ff00::',
-        8
-    ]
-].forEach(([network, prefix])=>notPublic.addSubnet(network, prefix, 'ipv6'));
-function isPublicAddress(address) {
-    return !notPublic.check(address, isIPv6(address) ? 'ipv6' : 'ipv4');
-}
-export default isPublicAddress;

package/dist/connections/AwsS3Bucket/AwsS3PutObject/lookupPublicAddress.js

@@ -1,40 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/ import { lookup } from 'node:dns';
-import createCopyError from './createCopyError.js';
-import isPublicAddress from './isPublicAddress.js';
-// A dns.lookup for the socket to use: the socket connects to the addresses this answers, so the
-// address checked is the address connected to, and a name that resolves differently on a second
-// lookup cannot get past the check. Refuses a name when any of its addresses is not public.
-function lookupPublicAddress(hostname, options, callback) {
-    lookup(hostname, options, (error, address, family)=>{
-        if (error) {
-            callback(error);
-            return;
-        }
-        const addresses = Array.isArray(address) ? address.map((entry)=>entry.address) : [
-            address
-        ];
-        if (!addresses.every(isPublicAddress)) {
-            callback(createCopyError({
-                code: 'url_not_public',
-                message: 'AwsS3PutObject "url" leads to an address that is not public.'
-            }));
-            return;
-        }
-        callback(null, address, family);
-    });
-}
-export default lookupPublicAddress;