@poe-platform/safe-bash 0.1.799 → 0.1.801

package/dist/safe-bash/commands/network/input.js

@@ -1,277 +1,2 @@
-import { byteLength, decodeBytes, encodeBytes } from "../../byte-encoding.js";
-import { collectNetworkBytes as collectBytes } from "./shared.js";
-import {} from "../../contracts/index.js";
-import { pathOf } from "../internal.js";
-import { flags, longValues, parseArguments, values } from "./args.js";
-import { CurlError } from "./types.js";
-import { withSignal } from "./shared.js";
-function whitespace(character) {
-    return " \t\r\n\v\f".includes(character);
-}
-/** curl config is a line-oriented option format, not shell source. */
-function configArguments(text) {
-    const args = [];
-    for (const line of text.split("\n")) {
-        let offset = 0;
-        while (offset < line.length && whitespace(line[offset]))
-            offset++;
-        if (offset === line.length || line[offset] === "#")
-            continue;
-        const start = offset;
-        const dashed = line[offset] === "-";
-        while (offset < line.length && !whitespace(line[offset]) && (dashed || !"=:".includes(line[offset])))
-            offset++;
-        const option = line.slice(start, offset);
-        args.push(dashed ? option : `--${option}`);
-        while (offset < line.length && whitespace(line[offset]))
-            offset++;
-        if (!dashed && "=:".includes(line[offset] ?? "\0"))
-            offset++;
-        while (offset < line.length && whitespace(line[offset]))
-            offset++;
-        if (offset === line.length)
-            continue;
-        let value = "";
-        if (line[offset] === '"') {
-            offset++;
-            let closed = false;
-            while (offset < line.length) {
-                let character = line[offset++];
-                if (character === '"') {
-                    closed = true;
-                    break;
-                }
-                if (character === "\\" && offset < line.length) {
-                    character = line[offset++];
-                    character = { n: "\n", r: "\r", t: "\t", v: "\v" }[character] ?? character;
-                }
-                value += character;
-            }
-            if (!closed)
-                throw new CurlError(2, "Unterminated config string");
-            if (line.slice(offset).trim())
-                throw new CurlError(2, "Unexpected config string suffix");
-        }
-        else
-            value = line.slice(offset).trimEnd();
-        args.push(value);
-    }
-    return args;
-}
-function variableName(name) {
-    return name.length > 0 && [...name].every(character => "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_".includes(character));
-}
-/** Resolve explicit config, variable and -H/--header @VFS-file or @- inputs in option order. */
-export async function parseCurlInput(context, limits) {
-    const variables = new Map();
-    const output = [];
-    let inputBytes = 0;
-    let outputBytes = 0;
-    let optionCount = 0;
-    const admit = (value) => {
-        inputBytes += byteLength(value);
-        if (inputBytes > limits.maxBufferBytes)
-            throw new CurlError(2, "Curl input exceeds host buffer limit");
-        return value;
-    };
-    const append = (value) => {
-        outputBytes += byteLength(value);
-        if (outputBytes > limits.maxBufferBytes)
-            throw new CurlError(2, "Expanded arguments exceed host buffer limit");
-        output.push(value);
-    };
-    const read = async (file) => {
-        try {
-            const maxBytes = limits.maxBufferBytes - inputBytes;
-            const bytes = file === "-" ? await collectBytes(context.stdin, { signal: context.signal, maxBytes })
-                : await withSignal(() => context.fs.readFile(pathOf(context, file), { signal: context.signal, ...(Number.isFinite(maxBytes) ? { maxBytes } : {}) }), context.signal);
-            context.signal.throwIfAborted();
-            inputBytes += bytes.length;
-            if (inputBytes > limits.maxBufferBytes)
-                throw new CurlError(2, "Curl input exceeds host buffer limit");
-            return encodeBytes(bytes);
-        }
-        catch (error) {
-            context.signal.throwIfAborted();
-            if (error instanceof CurlError)
-                throw error;
-            throw new CurlError(26, "Failed to read virtual curl input");
-        }
-    };
-    const expand = (value) => {
-        let result = "";
-        let size = 0;
-        let offset = 0;
-        const appendPiece = (piece) => {
-            size += byteLength(piece);
-            if (size > limits.maxBufferBytes)
-                throw new CurlError(2, "Variable expansion exceeds host buffer limit");
-            result += piece;
-        };
-        while (offset < value.length) {
-            const start = value.indexOf("{{", offset);
-            if (start < 0) {
-                appendPiece(value.slice(offset));
-                break;
-            }
-            appendPiece(value.slice(offset, start));
-            const end = value.indexOf("}}", start + 2);
-            if (end < 0) {
-                appendPiece(value.slice(start));
-                break;
-            }
-            const [name, ...functions] = value.slice(start + 2, end).split(":");
-            if (!variableName(name))
-                throw new CurlError(2, "Invalid expansion variable");
-            let bytes = variables.get(name) ?? new Uint8Array(0);
-            for (const functionName of functions) {
-                const requireSpace = (length) => {
-                    if (length > limits.maxBufferBytes)
-                        throw new CurlError(2, "Variable transformation exceeds host buffer limit");
-                };
-                switch (functionName) {
-                    case "trim": {
-                        let start = 0, end = bytes.length;
-                        while (start < end && whitespace(String.fromCharCode(bytes[start])))
-                            start++;
-                        while (end > start && whitespace(String.fromCharCode(bytes[end - 1])))
-                            end--;
-                        bytes = bytes.subarray(start, end);
-                        break;
-                    }
-                    case "json": {
-                        requireSpace(bytes.length * 6);
-                        bytes = encodeBytes(JSON.stringify(new TextDecoder("utf-8", { fatal: true }).decode(bytes)).slice(1, -1));
-                        break;
-                    }
-                    case "url": {
-                        requireSpace(bytes.length * 3);
-                        let encoded = "";
-                        for (const byte of bytes) {
-                            const character = String.fromCharCode(byte);
-                            encoded += "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~".includes(character)
-                                ? character : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
-                        }
-                        bytes = encodeBytes(encoded);
-                        break;
-                    }
-                    case "b64":
-                        requireSpace(Math.ceil(bytes.length / 3) * 4);
-                        bytes = encodeBytes(decodeBytes(bytes, "base64"));
-                        break;
-                    default: throw new CurlError(2, "Unsupported variable expansion function");
-                }
-            }
-            let replacement;
-            try {
-                replacement = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-            }
-            catch {
-                throw new CurlError(2, "Binary variable requires url or b64 expansion");
-            }
-            if (replacement.includes("\0"))
-                throw new CurlError(2, "Variable expansion contains NUL");
-            appendPiece(replacement);
-            offset = end + 2;
-        }
-        return result;
-    };
-    const define = async (value) => {
-        const fromEnv = value.startsWith("%");
-        const spec = fromEnv ? value.slice(1) : value;
-        let delimiter = spec.indexOf("=");
-        const at = spec.indexOf("@");
-        if (delimiter < 0 || at >= 0 && at < delimiter)
-            delimiter = at;
-        const name = delimiter < 0 ? spec : spec.slice(0, delimiter);
-        if (!variableName(name))
-            throw new CurlError(2, "Invalid variable name");
-        let content = fromEnv && context.env[name] !== undefined ? encodeBytes(admit(context.env[name])) : undefined;
-        if (content === undefined) {
-            if (delimiter < 0) {
-                if (fromEnv)
-                    throw new CurlError(2, "Required environment variable is unset");
-                content = new Uint8Array(0);
-            }
-            else
-                content = spec[delimiter] === "@" ? await read(spec.slice(delimiter + 1)) : encodeBytes(admit(spec.slice(delimiter + 1)));
-        }
-        variables.set(name, content);
-    };
-    let ended = false;
-    const visit = async (args, depth) => {
-        if (depth > 16)
-            throw new CurlError(2, "Config nesting exceeds host limit");
-        for (let index = 0; index < args.length; index++) {
-            context.signal.throwIfAborted();
-            if (++optionCount > limits.maxBufferBytes)
-                throw new CurlError(2, "Curl option count exceeds host limit");
-            const argument = args[index];
-            if (ended || argument === "-" || !argument.startsWith("-")) {
-                append(argument);
-                continue;
-            }
-            if (argument === "--") {
-                ended = true;
-                append(argument);
-                continue;
-            }
-            const apply = async (name, attached) => {
-                const expanded = name.startsWith("expand-");
-                const base = expanded ? name.slice(7) : name;
-                const takesValue = longValues.has(base) || base === "config" || base === "variable";
-                if (expanded && (!longValues.has(base)))
-                    throw new CurlError(2, "Unsupported expand option");
-                if (!takesValue) {
-                    if (attached !== undefined)
-                        throw new CurlError(2, "Unexpected option argument");
-                    append(`--${name}`);
-                    return;
-                }
-                const value = attached ?? args[++index];
-                if (value === undefined)
-                    throw new CurlError(2, "Option requires an argument");
-                const resolved = expanded ? expand(value) : value;
-                if (base === "config")
-                    await visit(configArguments(decodeBytes((await read(resolved)), "utf8")), depth + 1);
-                else if (base === "variable")
-                    await define(resolved);
-                else if (base === "header" && resolved.startsWith("@")) {
-                    const text = decodeBytes((await read(resolved.slice(1))), "utf8");
-                    for (const raw of text.split("\n")) {
-                        context.signal.throwIfAborted();
-                        const line = raw.endsWith("\r") ? raw.slice(0, -1) : raw;
-                        if (!line || line.startsWith("#"))
-                            continue;
-                        append("--header");
-                        append(line);
-                    }
-                }
-                else {
-                    append(`--${base}`);
-                    append(resolved);
-                }
-            };
-            if (argument.startsWith("--")) {
-                const equals = argument.indexOf("=");
-                await apply(argument.slice(2, equals < 0 ? undefined : equals), equals < 0 ? undefined : argument.slice(equals + 1));
-            }
-            else {
-                for (let offset = 1; offset < argument.length; offset++) {
-                    const short = argument[offset];
-                    const name = short === "K" ? "config" : values[short];
-                    if (name) {
-                        await apply(name, argument.slice(offset + 1) || undefined);
-                        break;
-                    }
-                    if (!flags[short])
-                        throw new CurlError(2, "Unsupported curl option");
-                    await apply(flags[short]);
-                }
-            }
-        }
-    };
-    await visit(context.args, 0);
-    return parseArguments(output, limits);
-}
+export * from "../../../safe-bash-network-engine/input.js";
 //# sourceMappingURL=input.js.map

package/dist/safe-bash/commands/network/output.d.ts

@@ -1,7 +1,2 @@
-import { type ByteSource, type CommandContext } from "../../contracts/index.js";
-import { type HttpResponse } from "./types.js";
-export declare function responseHeaders(response: HttpResponse, maxBytes: number): Uint8Array;
-export declare function writeOutput(context: CommandContext, path: string | undefined, source: ByteSource, signal: AbortSignal, append?: boolean, preserveEmpty?: boolean): Promise<void>;
-export declare function dumpHeaders(context: CommandContext, path: string, bytes: Uint8Array, append: boolean, signal: AbortSignal): Promise<void>;
-export declare function writeOutFormat(format: string, values: Readonly<Record<string, string>>, maxBytes: number): Uint8Array;
+export * from "../../../safe-bash-network-engine/output.js";
 //# sourceMappingURL=output.d.ts.map

package/dist/safe-bash/commands/network/output.js

@@ -1,132 +1,2 @@
-import { byteLength, encodeBytes } from "../../byte-encoding.js";
-import { FsError, readBytes, writeBytes } from "../../contracts/index.js";
-import { openFileOutput } from "../../contracts/filesystem-output.js";
-import { outputFailure } from "../../contracts/io.js";
-import { pathOf } from "../internal.js";
-import { encode } from "./shared.js";
-import { CurlError } from "./types.js";
-export function responseHeaders(response, maxBytes) {
-    if (!Number.isInteger(response.status) || response.status < 100 || response.status > 599 || /[\r\n]/.test(response.statusText)) {
-        throw new CurlError(56, "Invalid HTTP response status");
-    }
-    const version = response.httpVersion ?? "1.1";
-    if (!/^\d(?:\.\d)?$/.test(version))
-        throw new CurlError(56, "Invalid HTTP response version");
-    let text = `HTTP/${version} ${response.status} ${response.statusText}\r\n`;
-    for (const [name, value] of response.headers) {
-        if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name) || /[\r\n\0]/.test(value))
-            throw new CurlError(56, "Invalid HTTP response header");
-        text += `${name}: ${value}\r\n`;
-        if (byteLength(text, "latin1") > maxBytes)
-            throw new CurlError(63, "Response headers exceed host byte limit");
-    }
-    return new Uint8Array(encodeBytes(`${text}\r\n`, "latin1"));
-}
-export async function writeOutput(context, path, source, signal, append = false, preserveEmpty = false) {
-    if (path === undefined || path === "-") {
-        try {
-            for await (const chunk of readBytes(source, signal)) {
-                try {
-                    await writeBytes(context.stdout, chunk, signal);
-                }
-                catch {
-                    signal.throwIfAborted();
-                    throw new CurlError(23, "Failed writing output");
-                }
-            }
-        }
-        catch (error) {
-            await context.stdout[outputFailure]?.(error);
-            throw error;
-        }
-        return;
-    }
-    try {
-        let target = preserveEmpty ? undefined : await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-        try {
-            for await (const chunk of readBytes(source, target?.signal ?? signal)) {
-                if (preserveEmpty && chunk.length === 0)
-                    continue;
-                target ??= await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-                await target.sink.write(chunk);
-            }
-            await target?.finish();
-        }
-        catch (error) {
-            await target?.abort(error);
-            throw error;
-        }
-    }
-    catch (error) {
-        signal.throwIfAborted();
-        if (error instanceof CurlError)
-            throw error;
-        throw new CurlError(23, error instanceof FsError ? `Failed writing virtual output file: ${error.message}` : "Failed writing virtual output file");
-    }
-}
-export async function dumpHeaders(context, path, bytes, append, signal) {
-    try {
-        if (path === "-")
-            await writeBytes(context.stdout, bytes, signal);
-        else {
-            const target = await openFileOutput({ ...context, signal, outputBudget: "independent" }, pathOf(context, path), append ? "a" : "w");
-            try {
-                await target.sink.write(bytes);
-                await target.finish();
-            }
-            catch (error) {
-                await target.abort(error);
-                throw error;
-            }
-        }
-    }
-    catch {
-        signal.throwIfAborted();
-        throw new CurlError(23, "Failed writing response headers");
-    }
-}
-export function writeOutFormat(format, values, maxBytes) {
-    let result = "";
-    let bytes = 0;
-    const sizes = new Map();
-    const append = (text) => {
-        let size = sizes.get(text);
-        if (size === undefined) {
-            size = byteLength(text);
-            sizes.set(text, size);
-        }
-        if (size > maxBytes - bytes)
-            throw new CurlError(63, "Write-out exceeds host buffer limit");
-        bytes += size;
-        result += text;
-    };
-    for (let index = 0; index < format.length; index++) {
-        const character = format[index];
-        if (character === "\\") {
-            const next = format[++index];
-            append(next === "n" ? "\n" : next === "r" ? "\r" : next === "t" ? "\t" : next === undefined ? "\\" : `\\${next}`);
-        }
-        else if (character === "%" && format[index + 1] === "%") {
-            append("%");
-            index++;
-        }
-        else if (character === "%" && format[index + 1] === "{") {
-            const end = format.indexOf("}", index + 2);
-            if (end < 0)
-                throw new CurlError(2, "Invalid write-out format");
-            const name = format.slice(index + 2, end);
-            if (!Object.hasOwn(values, name))
-                throw new CurlError(2, "Unsupported write-out variable");
-            append(values[name]);
-            index = end;
-        }
-        else {
-            const start = index;
-            while (index + 1 < format.length && format[index + 1] !== "%" && format[index + 1] !== "\\")
-                index++;
-            append(format.slice(start, index + 1));
-        }
-    }
-    return encode(result);
-}
+export * from "../../../safe-bash-network-engine/output.js";
 //# sourceMappingURL=output.js.map

package/dist/safe-bash/commands/network/platform-portable.d.ts

@@ -1,6 +1,2 @@
-export declare const requiresFiniteUrlLimits = true;
-export declare function createDefaultHttpTransport(): never;
-export declare function randomBytes(length: number): Uint8Array;
-export declare function validateHeaderName(name: string): void;
-export declare function validateHeaderValue(_name: string, value: string): void;
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.d.ts.map

package/dist/safe-bash/commands/network/platform-portable.js

@@ -1,27 +1,2 @@
-export const requiresFiniteUrlLimits = true;
-export function createDefaultHttpTransport() {
-    throw new TypeError("Portable network commands require an explicit HTTP transport; inject createFetchTransport() or a host transport");
-}
-export function randomBytes(length) {
-    const bytes = new Uint8Array(length);
-    globalThis.crypto.getRandomValues(bytes);
-    return bytes;
-}
-export function validateHeaderName(name) {
-    if (!name.length)
-        throw new TypeError("Invalid HTTP header name");
-    for (const character of name) {
-        const code = character.charCodeAt(0);
-        if (!(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || "!#$%&'*+-.^_`|~".includes(character))) {
-            throw new TypeError("Invalid HTTP header name");
-        }
-    }
-}
-export function validateHeaderValue(_name, value) {
-    for (const character of value) {
-        const code = character.charCodeAt(0);
-        if (code !== 9 && (code < 32 || code === 127 || code > 255))
-            throw new TypeError("Invalid HTTP header value");
-    }
-}
+export * from "../../../safe-bash-network-engine/platform-portable.js";
 //# sourceMappingURL=platform-portable.js.map

package/dist/safe-bash/commands/network/private-address.d.ts

@@ -1,2 +1,2 @@
-export declare function privateHostname(input: string): boolean;
+export * from "../../../safe-bash-network-engine/private-address.js";
 //# sourceMappingURL=private-address.d.ts.map

package/dist/safe-bash/commands/network/private-address.js

@@ -1,45 +1,2 @@
-function privateIPv4(first, second) {
-    return first === 10 || first === 127 || first === 0 ||
-        first === 169 && second === 254 || first === 192 && second === 168 ||
-        first === 172 && second >= 16 && second <= 31 ||
-        first === 100 && second >= 64 && second <= 127 ||
-        first === 198 && second >= 18 && second <= 19 || first >= 224;
-}
-export function privateHostname(input) {
-    const hostname = input.toLowerCase().replace(/\.$/u, "").replace(/^\[|\]$/gu, "");
-    if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "::1")
-        return true;
-    if (hostname.includes(":")) {
-        const [prefix, suffix] = hostname.split("::");
-        const leading = prefix ? prefix.split(":") : [];
-        const trailing = suffix ? suffix.split(":") : [];
-        const hextets = new Array(8).fill(0);
-        for (let index = 0; index < leading.length; index++)
-            hextets[index] = Number.parseInt(leading[index], 16);
-        for (let index = 0; index < trailing.length; index++)
-            hextets[8 - trailing.length + index] = Number.parseInt(trailing[index], 16);
-        if (hextets.every(value => value === 0))
-            return true;
-        const mappedIPv4 = hextets.slice(0, 5).every(value => value === 0) && hextets[5] === 0xffff;
-        const translatedIPv4 = hextets.slice(0, 4).every(value => value === 0) && hextets[4] === 0xffff && hextets[5] === 0;
-        const nat64IPv4 = hextets[0] === 0x64 && hextets[1] === 0xff9b && hextets.slice(2, 6).every(value => value === 0);
-        const compatibleIPv4 = hextets.slice(0, 6).every(value => value === 0);
-        if (mappedIPv4 || translatedIPv4 || nat64IPv4 || compatibleIPv4) {
-            return privateIPv4(hextets[6] >>> 8, hextets[6] & 255);
-        }
-        if (hextets[0] === 0x2002)
-            return privateIPv4(hextets[1] >>> 8, hextets[1] & 255);
-        return (hextets[0] & 0xfe00) === 0xfc00 || (hextets[0] & 0xffc0) === 0xfe80 ||
-            (hextets[0] & 0xffc0) === 0xfec0 || (hextets[0] & 0xff00) === 0xff00 ||
-            hextets[0] === 0x64 && hextets[1] === 0xff9b && hextets[2] === 1;
-    }
-    const parts = hostname.split(".");
-    if (parts.length !== 4 || parts.some(part => !part || Array.from(part).some(character => character < "0" || character > "9")))
-        return false;
-    const octets = parts.map(Number);
-    if (octets.some(value => value < 0 || value > 255))
-        return false;
-    const [first, second] = octets;
-    return privateIPv4(first, second);
-}
+export * from "../../../safe-bash-network-engine/private-address.js";
 //# sourceMappingURL=private-address.js.map

package/dist/safe-bash/commands/network/public.d.ts

@@ -6,8 +6,8 @@ export { createFetchTransport, type FetchTransportOptions } from "./fetch-transp
 export { createOriginAuthorizer, type OriginAllowlist, type OriginAuthorizerOptions } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export declare function createNetworkCommands(options: NetworkCommandsOptions): readonly CommandDefinition[];
-export declare function networkCommands(options: NetworkCommandsOptions): VirtualShellPlugin;
+export declare function createNetworkCommands(options?: NetworkCommandsOptions): readonly CommandDefinition[];
+export declare function networkCommands(options?: NetworkCommandsOptions): VirtualShellPlugin;
 export declare const createCurlCommands: typeof createNetworkCommands;
 export declare const curlCommands: typeof networkCommands;
 export declare function evalSyncCurl(opArgs: readonly string[]): string | undefined;

package/dist/safe-bash/commands/network/public.js

@@ -7,10 +7,10 @@ export { createFetchTransport } from "./fetch-transport.js";
 export { createOriginAuthorizer } from "./authorizer.js";
 export { createCurlCommand } from "./curl.js";
 export { createWgetCommand } from "./wget.js";
-export function createNetworkCommands(options) {
+export function createNetworkCommands(options = {}) {
     return [createCurlCommand(options), createWgetCommand(options)];
 }
-export function networkCommands(options) {
+export function networkCommands(options = {}) {
     const definitions = createNetworkCommands(options);
     return {
         name: "network-commands",

package/dist/safe-bash/commands/network/shared.d.ts

@@ -1,15 +1,2 @@
-import { type ByteSource, type CommandContext } from "../../contracts/index.js";
-import { CurlError, type HttpHeaders, type NetworkLimits } from "./types.js";
-export declare const encode: (text: string) => Uint8Array;
-export declare function limitsFor(overrides?: Partial<NetworkLimits>): NetworkLimits;
-export declare function withSignal<Value>(operation: () => PromiseLike<Value> | Value, signal: AbortSignal): Promise<Value>;
-export declare function delay(milliseconds: number, signal: AbortSignal): Promise<void>;
-export declare function header(headers: HttpHeaders, name: string): string | undefined;
-export declare function networkError(error: unknown): CurlError;
-export declare function diagnostic(context: CommandContext, error: CurlError): Promise<void>;
-/** Buffered operands use a quota only when the host supplies one. */
-export declare function collectNetworkBytes(source: ByteSource, options: {
-    signal: AbortSignal;
-    maxBytes: number;
-}): Promise<Uint8Array>;
+export * from "../../../safe-bash-network-engine/shared.js";
 //# sourceMappingURL=shared.d.ts.map

package/dist/safe-bash/commands/network/shared.js

@@ -1,72 +1,2 @@
-import { scheduleNetworkDeadline } from "./deadline.js";
-import { collectBytes, readBytes } from "../../contracts/index.js";
-import { writeDiagnostic } from "../../escaping.js";
-import { CurlError, defaultNetworkLimits } from "./types.js";
-export const encode = (text) => new TextEncoder().encode(text);
-export function limitsFor(overrides = {}) {
-    const result = { ...defaultNetworkLimits, ...overrides };
-    for (const [name, value] of Object.entries(overrides)) {
-        const minimum = name === "maxRedirects" || name === "maxRetries" ? 0 : 1;
-        if (value !== Infinity && (!Number.isSafeInteger(value) || value < minimum)) {
-            throw new RangeError(`Invalid network limit: ${name}`);
-        }
-    }
-    return Object.freeze(result);
-}
-export async function withSignal(operation, signal) {
-    signal.throwIfAborted();
-    return new Promise((resolve, reject) => {
-        const onAbort = () => { cleanup(); reject(signal.reason); };
-        const cleanup = () => signal.removeEventListener("abort", onAbort);
-        signal.addEventListener("abort", onAbort, { once: true });
-        Promise.resolve().then(operation).then(value => { cleanup(); resolve(value); }, error => { cleanup(); reject(error); });
-    });
-}
-export async function delay(milliseconds, signal) {
-    let cancel;
-    try {
-        await withSignal(() => new Promise(resolve => { cancel = scheduleNetworkDeadline(milliseconds, resolve); }), signal);
-    }
-    finally {
-        cancel?.();
-    }
-}
-export function header(headers, name) {
-    return headers.find(([key]) => key.toLowerCase() === name.toLowerCase())?.[1];
-}
-export function networkError(error) {
-    if (error instanceof CurlError)
-        return error;
-    const code = error && typeof error === "object" && "code" in error ? String(error.code) : "";
-    if (["ENOTFOUND", "EAI_AGAIN"].includes(code))
-        return new CurlError(6, "Could not resolve host");
-    if (["ECONNREFUSED", "ENETUNREACH", "EHOSTUNREACH"].includes(code))
-        return new CurlError(7, "Failed to connect");
-    if (/CERT|SELF_SIGNED|UNABLE_TO_VERIFY/.test(code))
-        return new CurlError(60, "TLS certificate verification failed");
-    if (/TLS|SSL/.test(code))
-        return new CurlError(35, "TLS handshake failed");
-    return new CurlError(56, "Network transfer failed");
-}
-export async function diagnostic(context, error) {
-    await writeDiagnostic(context.stderr, `${context.command}: (${error.exitCode}) ${error.message}\n`, context.signal);
-}
-/** Buffered operands use a quota only when the host supplies one. */
-export async function collectNetworkBytes(source, options) {
-    if (Number.isFinite(options.maxBytes))
-        return collectBytes(source, options);
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of readBytes(source, options.signal)) {
-        chunks.push(new Uint8Array(chunk));
-        size += chunk.length;
-    }
-    const bytes = new Uint8Array(size);
-    let offset = 0;
-    for (const chunk of chunks) {
-        bytes.set(chunk, offset);
-        offset += chunk.length;
-    }
-    return bytes;
-}
+export * from "../../../safe-bash-network-engine/shared.js";
 //# sourceMappingURL=shared.js.map

package/dist/safe-bash/commands/network/transport.js

@@ -102,12 +102,12 @@ export function createNodeHttpTransport(options = {}) {
                 request = (url.protocol === "https:" ? httpsRequest : httpRequest)(url, {
                     method: input.method,
                     path: curlRequestTarget(input.url),
-                    headers: pinned && headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
+                    headers: headers.host?.length === 1 ? { ...headers, host: headers.host[0] } : headers,
                     signal, maxHeaderSize: Number.isFinite(maxHeaderSize) ? maxHeaderSize : Number.MAX_SAFE_INTEGER, agent: false,
                     ...(requestCa === undefined ? {} : { ca: requestCa }),
                     ...(input.ca === undefined ? {} : { rejectUnauthorized: true }),
                     ...pinned,
-                    ...(pinned && url.protocol === "https:" ? {
+                    ...(url.protocol === "https:" ? {
                         servername: isIP(hostname) ? "" : hostname,
                         rejectUnauthorized: true,
                         checkServerIdentity: (_servername, certificate) => checkServerIdentity(hostname, certificate),