@node9/proxy 1.58.0 → 1.58.1

package/dist/cli.js

@@ -53001,8 +53001,17 @@ function ghHeaders() {
   return h;
 }
 async function ghGet(url) {
-  const res = await (0, import_undici.request)(url, { headers: ghHeaders() });
-  const body = await res.body.text();
+  let res;
+  try {
+    res = await (0, import_undici.request)(url, {
+      headers: ghHeaders(),
+      headersTimeout: 1e4,
+      bodyTimeout: 1e4
+    });
+  } catch {
+    return { status: 0, json: null };
+  }
+  const body = await res.body.text().catch(() => "");
   let json = null;
   try {
     json = JSON.parse(body);
@@ -53011,6 +53020,7 @@ async function ghGet(url) {
   return { status: res.statusCode, json };
 }
 var RATE_LIMIT_NOTE = "GitHub rate limit hit \u2014 results may be INCOMPLETE (a missing file could be unread, not absent). Set GITHUB_TOKEN.";
+var NETWORK_NOTE = "A network error/timeout occurred \u2014 results may be INCOMPLETE (some files were not fetched).";
 async function fetchOne(owner, repo, filePath, notes) {
   const url = `https://api.github.com/repos/${owner}/${repo}/contents/${filePath}`;
   const { status, json } = await ghGet(url);
@@ -53018,6 +53028,10 @@ async function fetchOne(owner, repo, filePath, notes) {
     if (!notes.includes(RATE_LIMIT_NOTE)) notes.push(RATE_LIMIT_NOTE);
     return null;
   }
+  if (status === 0) {
+    if (!notes.includes(NETWORK_NOTE)) notes.push(NETWORK_NOTE);
+    return null;
+  }
   if (status !== 200 || !json || typeof json !== "object") return null;
   const f = json;
   if (f.type !== "file" || typeof f.content !== "string") return null;
@@ -53166,7 +53180,7 @@ function hasActorGate(wf, raw) {
 function permsElevated(wf) {
   const check = (p) => {
     const s = str(p);
-    return /contents:\s*write|id-token:\s*write|packages:\s*write/i.test(s);
+    return /["']?(contents|id-token|packages)["']?\s*:\s*["']?write/i.test(s);
   };
   return check(wf.permissions) || Object.values(wf.jobs ?? {}).some((j) => check(j.permissions));
 }

package/dist/cli.mjs

@@ -52994,8 +52994,17 @@ function ghHeaders() {
   return h;
 }
 async function ghGet(url) {
-  const res = await (0, import_undici.request)(url, { headers: ghHeaders() });
-  const body = await res.body.text();
+  let res;
+  try {
+    res = await (0, import_undici.request)(url, {
+      headers: ghHeaders(),
+      headersTimeout: 1e4,
+      bodyTimeout: 1e4
+    });
+  } catch {
+    return { status: 0, json: null };
+  }
+  const body = await res.body.text().catch(() => "");
   let json = null;
   try {
     json = JSON.parse(body);
@@ -53004,6 +53013,7 @@ async function ghGet(url) {
   return { status: res.statusCode, json };
 }
 var RATE_LIMIT_NOTE = "GitHub rate limit hit \u2014 results may be INCOMPLETE (a missing file could be unread, not absent). Set GITHUB_TOKEN.";
+var NETWORK_NOTE = "A network error/timeout occurred \u2014 results may be INCOMPLETE (some files were not fetched).";
 async function fetchOne(owner, repo, filePath, notes) {
   const url = `https://api.github.com/repos/${owner}/${repo}/contents/${filePath}`;
   const { status, json } = await ghGet(url);
@@ -53011,6 +53021,10 @@ async function fetchOne(owner, repo, filePath, notes) {
     if (!notes.includes(RATE_LIMIT_NOTE)) notes.push(RATE_LIMIT_NOTE);
     return null;
   }
+  if (status === 0) {
+    if (!notes.includes(NETWORK_NOTE)) notes.push(NETWORK_NOTE);
+    return null;
+  }
   if (status !== 200 || !json || typeof json !== "object") return null;
   const f = json;
   if (f.type !== "file" || typeof f.content !== "string") return null;
@@ -53159,7 +53173,7 @@ function hasActorGate(wf, raw) {
 function permsElevated(wf) {
   const check = (p) => {
     const s = str(p);
-    return /contents:\s*write|id-token:\s*write|packages:\s*write/i.test(s);
+    return /["']?(contents|id-token|packages)["']?\s*:\s*["']?write/i.test(s);
   };
   return check(wf.permissions) || Object.values(wf.jobs ?? {}).some((j) => check(j.permissions));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.58.0",
+  "version": "1.58.1",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",