@qwen-code/qwen-code 0.23.5-preview.0 → 0.24.0-nightly.20260916.b8def02aad

package/chunks/chunk-JYGESWZM.js

@@ -0,0 +1,149 @@
+// Force strict mode and setup for ESM
+"use strict";
+import {
+  OmniJsonCacheFile
+} from "./chunk-TFDCK56Y.js";
+import {
+  createDebugLogger
+} from "./chunk-ZYDMQCQP.js";
+import {
+  init_esbuild_shims
+} from "./chunk-5O2XNYP6.js";
+import {
+  __name
+} from "./chunk-J2S4EL5Y.js";
+
+// packages/core/src/omni/upload-cache.ts
+init_esbuild_shims();
+import path from "node:path";
+var debugLogger = createDebugLogger("omni:upload-cache");
+var DEFAULT_UPLOAD_CACHE_TTL_HOURS = 47;
+var MAX_UPLOAD_CACHE_TTL_HOURS = 48;
+var OmniUploadCache = class {
+  static {
+    __name(this, "OmniUploadCache");
+  }
+  file;
+  ttlMs;
+  scope;
+  constructor(omniRootDir, ttlHours = DEFAULT_UPLOAD_CACHE_TTL_HOURS, scope = "") {
+    this.file = new OmniJsonCacheFile(
+      path.join(omniRootDir, "upload-cache.json"),
+      "omni:upload-cache"
+    );
+    this.ttlMs = Math.min(ttlHours, MAX_UPLOAD_CACHE_TTL_HOURS) * 36e5;
+    this.scope = scope;
+  }
+  /** TTL of 0 (or negative) disables the cache entirely. */
+  get enabled() {
+    return this.ttlMs > 0;
+  }
+  key(sha256, model) {
+    return `${sha256}|${model}|${this.scope}`;
+  }
+  /** Valid cached URL or null. Expired entries are pruned on read. */
+  async get(sha256, model) {
+    if (!this.enabled) return null;
+    return this.file.access(null, (entries) => {
+      const k = this.key(sha256, model);
+      const entry = entries[k];
+      if (!entry) return { result: null };
+      const expiresAtMs = Date.parse(entry.expiresAt);
+      if (!Number.isFinite(expiresAtMs) || expiresAtMs <= Date.now()) {
+        delete entries[k];
+        return { result: null, changed: true };
+      }
+      return { result: entry.ossUrl };
+    });
+  }
+  async put(sha256, model, ossUrl) {
+    if (!this.enabled) return;
+    return this.file.access(void 0, (entries) => {
+      const now = Date.now();
+      entries[this.key(sha256, model)] = {
+        ossUrl,
+        uploadedAt: new Date(now).toISOString(),
+        expiresAt: new Date(now + this.ttlMs).toISOString()
+      };
+      for (const [k, v] of Object.entries(entries)) {
+        const t = Date.parse(v.expiresAt);
+        if (!Number.isFinite(t) || t <= now) delete entries[k];
+      }
+      return { result: void 0, changed: true };
+    });
+  }
+  /**
+   * Reverse lookup: the object hash behind a delivered oss:// URL.
+   *
+   * Serves the reactive server-limit fallback, which only knows the URL
+   * embedded in the rejected request and must find the local object to
+   * degrade. Scope-agnostic like {@link invalidateByUrl} (the caller
+   * knows the URL, not the endpoint scope that minted it); expired
+   * entries still resolve — the URL was just sent, so the object mapping
+   * is trustworthy even if the cached URL is past its validity horizon.
+   */
+  async findSha256ByUrl(ossUrl) {
+    return this.file.access(null, (entries) => {
+      for (const [k, v] of Object.entries(entries)) {
+        if (v.ossUrl === ossUrl) {
+          const sha256 = k.split("|", 1)[0];
+          if (sha256) return { result: sha256 };
+        }
+      }
+      return { result: null };
+    });
+  }
+  /**
+   * Drop every entry pointing at a server-side-invalidated URL.
+   *
+   * Deliberately ignores the `enabled` flag: even for ttlHours-0 users
+   * this must clear stale entries persisted before the cache was
+   * disabled, and it serves the recovery cascade. The URL scan is
+   * scope-agnostic on purpose — the caller only knows the rejected URL,
+   * not which endpoint scope minted it.
+   */
+  async invalidateByUrl(ossUrl) {
+    return this.file.access(void 0, (entries) => {
+      let changed = false;
+      for (const [k, v] of Object.entries(entries)) {
+        if (v.ossUrl === ossUrl) {
+          delete entries[k];
+          changed = true;
+        }
+      }
+      if (changed) {
+        debugLogger.debug(`invalidated upload cache entries for ${ossUrl}`);
+      }
+      return { result: void 0, changed };
+    });
+  }
+  /**
+   * Drop all entries for an object (GC/corruption cascade). Ignores the
+   * `enabled` flag for the same reason as {@link invalidateByUrl}. The
+   * prefix match spans models AND scopes — intended: a corrupt object is
+   * corrupt for every endpoint.
+   */
+  async removeBySha256(sha256) {
+    return this.file.access(void 0, (entries) => {
+      const prefix = `${sha256}|`;
+      let changed = false;
+      for (const k of Object.keys(entries)) {
+        if (k.startsWith(prefix)) {
+          delete entries[k];
+          changed = true;
+        }
+      }
+      return { result: void 0, changed };
+    });
+  }
+};
+
+export {
+  DEFAULT_UPLOAD_CACHE_TTL_HOURS,
+  OmniUploadCache
+};
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/chunks/{chunk-KVC7HZWK.js → chunk-JYTJ5FCM.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   t
-} from "./chunk-GSAOVDTH.js";
+} from "./chunk-POMFSBEC.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-OALXNGUA.js → chunk-K4HB6ZZX.js}

@@ -1,17 +1,17 @@
 // Force strict mode and setup for ESM
 "use strict";
+import {
+  ICON
+} from "./chunk-TQOUJQC5.js";
 import {
   disableMouseEvents,
   enableMouseEvents,
   useKeypress,
   useKeypressContext
-} from "./chunk-M22WLKLI.js";
-import {
-  ICON
-} from "./chunk-36NRLIR6.js";
+} from "./chunk-HEXMFP3X.js";
 import {
   theme
-} from "./chunk-4LIPOIXS.js";
+} from "./chunk-3NHJLWOD.js";
 import {
   require_jsx_runtime
 } from "./chunk-SV5PQVQE.js";
@@ -20,25 +20,25 @@ import {
   Text,
   use_stdin_default,
   use_stdout_default
-} from "./chunk-NCPFOLM2.js";
+} from "./chunk-ZTBP4SFC.js";
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
 import {
   sanitizeForOsc,
   wrapForMultiplexer
-} from "./chunk-DC4ZNGH4.js";
+} from "./chunk-6DB6UHY3.js";
 import {
   MAIN_SOURCE,
   uiTelemetryService
-} from "./chunk-CDDP4ONL.js";
+} from "./chunk-2RI3OGVU.js";
 import {
   ToolDisplayNames,
   ToolNames
-} from "./chunk-RSWBT7AZ.js";
+} from "./chunk-ERIBG3BX.js";
 import {
   createDebugLogger
-} from "./chunk-ZAFYHRVY.js";
+} from "./chunk-ZYDMQCQP.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-HX4WXX3H.js → chunk-K5K4JKKP.js}

@@ -9,13 +9,7 @@ import {
   staleArgsWarning,
   validateAuthMethod,
   writeSkillArgs
-} from "./chunk-CXY6BICQ.js";
-import {
-  isKittyProtocolEnabled
-} from "./chunk-NYX53SV4.js";
-import {
-  contextCommand
-} from "./chunk-TPY6HW55.js";
+} from "./chunk-6COTLZAO.js";
 import {
   calculateCost,
   commandRestrictionNames,
@@ -28,25 +22,31 @@ import {
   getCompressionFailureStatusText,
   getSystemInfoFields,
   skillOriginLabel
-} from "./chunk-Y2KJC55Y.js";
+} from "./chunk-YGYIGZQC.js";
+import {
+  formatDuration,
+  formatTokenCount
+} from "./chunk-WEUQIY3Q.js";
+import {
+  isKittyProtocolEnabled
+} from "./chunk-NYX53SV4.js";
 import {
   VSCODE_SHIFT_ENTER_SEQUENCE,
   isWaylandSession,
   writeOsc52
-} from "./chunk-OSG23MR3.js";
+} from "./chunk-X3T5IOX6.js";
 import {
-  formatDuration,
-  formatTokenCount
-} from "./chunk-AZCTY64Z.js";
+  contextCommand
+} from "./chunk-WVA7RUOL.js";
+import {
+  rollbackStandaloneUpdate
+} from "./chunk-XWYDOF7F.js";
 import {
   themeManager
-} from "./chunk-2XRE4KE4.js";
+} from "./chunk-S7BE3FMA.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-B6RMK4ED.js";
-import {
-  rollbackStandaloneUpdate
-} from "./chunk-UQGRJTDK.js";
+} from "./chunk-OT52F4LB.js";
 import {
   GITHUB_WORKFLOW_PATHS,
   INSIGHT_CSS,
@@ -59,7 +59,7 @@ import {
   toJson,
   toJsonl,
   toMarkdown
-} from "./chunk-HNFKYKHH.js";
+} from "./chunk-43FJYK5F.js";
 import {
   stripUnsafeCharacters,
   toCodePoints,
@@ -75,19 +75,22 @@ import {
   isVoiceEnabled,
   readVoiceMode,
   readVoiceModel
-} from "./chunk-KVC7HZWK.js";
+} from "./chunk-JYTJ5FCM.js";
 import {
   getExtendedSystemInfo,
   getGitVersion,
   getNpmVersion
-} from "./chunk-FX6PZBOV.js";
+} from "./chunk-IISIZ3XH.js";
 import {
   getReasoningEffortsForConfig
-} from "./chunk-4QPVZA5J.js";
+} from "./chunk-THTU6UKH.js";
 import {
   isInlineModelOverrideAllowed,
   parseAcpModelOption
-} from "./chunk-4FLUQWJ4.js";
+} from "./chunk-Y3Q5OK4D.js";
+import {
+  getInstallationInfo
+} from "./chunk-4JFRCIMW.js";
 import {
   OUTPUT_LANGUAGE_AUTO,
   getAllSettingKeys,
@@ -101,24 +104,21 @@ import {
   resolveOutputLanguageOrPreserveAuto,
   validateSettingValue,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-RRI764F7.js";
+} from "./chunk-ZA5CZSKV.js";
 import {
   getCurrentLanguage,
   setLanguageAsync,
   t
-} from "./chunk-GSAOVDTH.js";
+} from "./chunk-POMFSBEC.js";
 import {
   SUPPORTED_LANGUAGES,
   getSupportedLanguageIds,
   resolveSupportedLanguage
 } from "./chunk-5EJZE3FP.js";
-import {
-  getInstallationInfo
-} from "./chunk-SFL6U7U7.js";
 import {
   isFolderTrustEnabled,
   loadTrustedFolders
-} from "./chunk-NQ272MQG.js";
+} from "./chunk-EHCS4AXA.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -147,17 +147,17 @@ import {
   parseLearnVideoInput,
   readPathFromWorkspace,
   removePeerController
-} from "./chunk-347O2YZJ.js";
+} from "./chunk-ILJQYK6B.js";
 import {
   canonicalizeMsgId,
   describeHoldCause
-} from "./chunk-YM6KUQ2S.js";
+} from "./chunk-O4A2B6V2.js";
 import {
   listWorkflowSnapshots
-} from "./chunk-SFHX5G2S.js";
+} from "./chunk-Y5KOKTSF.js";
 import {
   resolveOpenAILogDir
-} from "./chunk-LO2UWNO5.js";
+} from "./chunk-4JOPMBTY.js";
 import {
   ArenaManager,
   ConditionalRulesRegistry,
@@ -195,22 +195,16 @@ import {
   require_toml,
   runForkedAgent,
   tryGenerateSessionTitle
-} from "./chunk-KAYC5FBN.js";
+} from "./chunk-B32X6MSB.js";
 import {
   external_exports
 } from "./chunk-CQ35AJ4Z.js";
-import {
-  resolveModelId
-} from "./chunk-DX6JTDMR.js";
 import {
   projectUserTranscriptForDisplay
-} from "./chunk-VQDWCQOE.js";
+} from "./chunk-ANKISCKU.js";
 import {
-  glob
-} from "./chunk-QJNDUTOL.js";
-import {
-  flattenPeerLabel
-} from "./chunk-OWUAZXXN.js";
+  resolveModelId
+} from "./chunk-OB57Y2WH.js";
 import {
   GOAL_PAUSE_REASON_COMMAND,
   emptyGoalSnapshot,
@@ -220,23 +214,32 @@ import {
   restoreArchivedAutoSkill,
   runAutoSkillCurator,
   setAutoSkillPinned
-} from "./chunk-P42KMMU6.js";
+} from "./chunk-XYJNMSMV.js";
 import {
   canUseRipgrep
-} from "./chunk-BTICBRPL.js";
+} from "./chunk-IWMYX5LB.js";
+import {
+  glob
+} from "./chunk-QJNDUTOL.js";
 import {
   checkArgumentSafety,
   checkCommandPermissions,
   escapeShellArg,
   getShellConfiguration
-} from "./chunk-V545KI73.js";
+} from "./chunk-QPTE6BKL.js";
 import {
   escapeJsonTagCharacters,
   formatMemoryUsage
 } from "./chunk-CHEIIBT3.js";
+import {
+  flattenPeerLabel
+} from "./chunk-GHG4PQY2.js";
 import {
   APPROVAL_MODES
 } from "./chunk-JX6XHPTX.js";
+import {
+  isMediaPolicyToolHiddenFromModel
+} from "./chunk-MNU36NGH.js";
 import {
   BUILT_IN_OUTPUT_STYLES,
   getArenaSystemReminder,
@@ -245,31 +248,31 @@ import {
   getProjectSummaryPrompt,
   isSystemMdActive,
   resolveMainSessionOutputStyle
-} from "./chunk-36SDZ2Q4.js";
+} from "./chunk-B3HGO6BB.js";
 import {
   FORK_SUBAGENT_TYPE,
   stripStartupContext
-} from "./chunk-VVI7MK3V.js";
+} from "./chunk-CTGMXP4A.js";
 import {
   applySkillSideEffects,
   buildSkillLlmContent
-} from "./chunk-WBSJ6VPZ.js";
+} from "./chunk-2GNZTJRK.js";
 import {
   HookEventName,
   sanitizeUserPromptExpansionAdditionalContext
-} from "./chunk-G6UUOCUT.js";
+} from "./chunk-RMI3DKMV.js";
 import {
   resolveSlimmingConfig
 } from "./chunk-NUQ4GK5I.js";
-import {
-  openBrowserSecurely
-} from "./chunk-NAVJD2PQ.js";
 import {
   buildRuntimeSnapshotId,
   findProviderByCredentials,
   isImageGenerationCapable,
   stripRuntimeSnapshotPrefix
-} from "./chunk-KEM7MWS7.js";
+} from "./chunk-VZQDBPCD.js";
+import {
+  openBrowserSecurely
+} from "./chunk-NAVJD2PQ.js";
 import {
   COMBINED_PASS_TOLERANCE_FACTOR,
   IdeConnectionEvent,
@@ -281,47 +284,53 @@ import {
   queryTokenUsage,
   read,
   recordSkillInvocation,
-  runSideQuery,
   uiTelemetryService
-} from "./chunk-CDDP4ONL.js";
+} from "./chunk-2RI3OGVU.js";
+import {
+  getAutoMemoryRoot
+} from "./chunk-RVT5L74D.js";
 import {
   getCurrentMemoryFilename
-} from "./chunk-5NUKK2DT.js";
+} from "./chunk-25FMWESU.js";
 import {
-  getAutoMemoryRoot
-} from "./chunk-EDIDYZBT.js";
+  runSideQuery
+} from "./chunk-43QUA4MC.js";
 import {
   REASONING_EFFORT_TIERS,
   applyReasoningEffort,
   normalizeReasoningEffort
-} from "./chunk-GJKP6XOB.js";
+} from "./chunk-4EFJT6Q2.js";
 import {
   AuthType
-} from "./chunk-7O5PYQ3M.js";
+} from "./chunk-SBP43AO6.js";
 import {
   normalizeContent,
   redactUrlCredentials
-} from "./chunk-6USYH3EU.js";
+} from "./chunk-B3XJFEEH.js";
+import {
+  isShellProgressData
+} from "./chunk-VPGRGNNH.js";
 import {
   ToolDisplayNamesMigration,
   ToolNames,
-  canonicalToolName,
-  isShellProgressData
-} from "./chunk-RSWBT7AZ.js";
+  canonicalToolName
+} from "./chunk-ERIBG3BX.js";
 import {
   Storage,
   createDebugLogger,
   expandHomeDir,
-  getErrorMessage,
   isSubpath,
   resolvePath,
   updateSymlink
-} from "./chunk-ZAFYHRVY.js";
+} from "./chunk-ZYDMQCQP.js";
+import {
+  getErrorMessage
+} from "./chunk-S34QJ6IR.js";
 import {
   isCpuProfileRecording,
   startCpuProfile,
   stopCpuProfile
-} from "./chunk-QIPLWW6Q.js";
+} from "./chunk-E5D56G3Q.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -2521,7 +2530,7 @@ var approvalModeCommand = {
         };
       }
     }
-    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-I32UEQPI.js") : void 0;
+    const autoModeNotices = mode === "auto" /* AUTO */ && priorMode !== "auto" /* AUTO */ && config ? await import("./useAutoAcceptIndicator-E4FH67W5.js") : void 0;
     if (config) {
       try {
         config.setApprovalMode(mode);
@@ -7653,7 +7662,7 @@ var expandNowCommand = {
         content: t("History is already expanded in this session.")
       };
     }
-    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-YPJU4XFE.js");
+    const { expandCollapsedHistory } = await import("./resumeHistoryUtils-RSBLRG55.js");
     const updated = expandCollapsedHistory(history);
     loadHistory(updated);
     refreshStatic();
@@ -9157,7 +9166,7 @@ var initCommand = {
         if (existing && existing.trim().length > 0) {
           if (!context.overwriteConfirmed) {
             const [{ Text }, { default: React }] = await Promise.all([
-              import("./build-5KWQBWEQ.js"),
+              import("./build-5OQN7CDU.js"),
               import("./react-SG7JAQSZ.js")
             ]);
             return {
@@ -13149,6 +13158,7 @@ var toolsCommand = {
       );
       return;
     }
+    const config = context.services.config;
     const tools = toolRegistry.getAllTools();
     const llmTools = tools.filter((tool) => !("serverName" in tool));
     const toolsListItem = {
@@ -13157,6 +13167,11 @@ var toolsCommand = {
         name: tool.name,
         displayName: tool.displayName,
         description: tool.description,
+        // Omni media-policy tools without modelAccess.enabled are stripped
+        // from the model's declarations but stay listed here for the human;
+        // the flag renders a "fixed-only" marker so the discrepancy between
+        // /tools and what the model can call is visible, not confusing.
+        ...isMediaPolicyToolHiddenFromModel(config, tool) ? { fixedOnly: true } : {},
         // Surface the deferred/eager split so a `tools.eager` allowlist is
         // visible rather than silently reshaping the model's toolset — the
         // user-facing half of #10075.
@@ -15192,10 +15207,10 @@ var updateCommand = {
       { performStandaloneUpdate },
       installationInfo
     ] = await Promise.all([
-      import("./updateCheck-PKSSORPO.js"),
-      import("./processUtils-O4II3RYH.js"),
-      import("./standalone-update-H5OJ7MM7.js"),
-      import("./installationInfo-2IJV5QKC.js")
+      import("./updateCheck-4EONU2IK.js"),
+      import("./processUtils-X7C3BNWU.js"),
+      import("./standalone-update-NBXU45YC.js"),
+      import("./installationInfo-H67OERL5.js")
     ]);
     const { formatUpdateInstructions, getInstallationInfo: getInstallationInfo2 } = installationInfo;
     const settings = context.services.settings;

package/chunks/{chunk-QGEISOJ2.js → chunk-KBLR3NWJ.js}

@@ -2,7 +2,7 @@
 "use strict";
 import {
   SCHEDULED_TASK_RUN_SOURCE_ID_PREFIX
-} from "./chunk-L2A5VBDL.js";
+} from "./chunk-TND5YXCH.js";
 import {
   ChannelDeliveryError,
   MAX_CHANNEL_DELIVERY_TEXT_LENGTH
@@ -10,10 +10,10 @@ import {
 import {
   MAX_CHANNEL_DELIVERY_NAME_LENGTH,
   MAX_CHANNEL_DELIVERY_TARGET_ID_LENGTH
-} from "./chunk-3LMDSCLU.js";
+} from "./chunk-C4FISGDN.js";
 import {
   stripTerminalControlSequences
-} from "./chunk-P42KMMU6.js";
+} from "./chunk-XYJNMSMV.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";

package/chunks/{chunk-FCPJXKDG.js → chunk-KHO4FMV7.js}

@@ -1,30 +1,30 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  formatHostForAuthority,
-  isLoopbackBind
-} from "./chunk-DMEUXLSS.js";
 import {
   CLIENT_ID_RE,
   MAX_CLIENT_ID_LENGTH
 } from "./chunk-LAUEEBDL.js";
+import {
+  formatHostForAuthority,
+  isLoopbackBind
+} from "./chunk-DMEUXLSS.js";
 import {
   isPreAuthWebShellRequest
-} from "./chunk-WVURIAEE.js";
+} from "./chunk-SVWWF5TZ.js";
 import {
   isInternalWorkspaceRuntime
 } from "./chunk-NYWWQ437.js";
-import {
-  conversationRuntimeUnavailableError
-} from "./chunk-Y5TM7SBV.js";
 import {
   MAX_CHILD_HEAP_MB,
   MIN_CHILD_HEAP_MB,
   recommendedChildShareMb
 } from "./chunk-LYD3T3H7.js";
+import {
+  conversationRuntimeUnavailableError
+} from "./chunk-Y5TM7SBV.js";
 import {
   MAX_REGISTERED_WORKSPACES
-} from "./chunk-INN5ORKX.js";
+} from "./chunk-FXR3PTGC.js";
 import {
   CLIENT_MCP_OVER_WS_CONFIG_FLAG
 } from "./chunk-RN6A53UJ.js";

package/chunks/{chunk-3WILPKTJ.js → chunk-KKPIFWTZ.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   delay
-} from "./chunk-DRAX5YAI.js";
+} from "./chunk-NFC4WTY2.js";
 import {
   isTlsVerificationDisabled
-} from "./chunk-7O5PYQ3M.js";
+} from "./chunk-SBP43AO6.js";
 import {
   getErrorMessage
-} from "./chunk-ZAFYHRVY.js";
+} from "./chunk-S34QJ6IR.js";
 import {
   init_esbuild_shims
 } from "./chunk-5O2XNYP6.js";
@@ -96,11 +96,15 @@ function mappedIpv4(hostname) {
   return `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
 }
 __name(mappedIpv4, "mappedIpv4");
+function isPrivateAddress(address) {
+  const bare = address.replace(/^\[|\]$/g, "");
+  const target = mappedIpv4(bare) ?? bare;
+  return PRIVATE_IP_RANGES.some((range) => range.test(target));
+}
+__name(isPrivateAddress, "isPrivateAddress");
 function isPrivateIp(url) {
   try {
-    const hostname = new URL(url).hostname.replace(/^\[|\]$/g, "");
-    const target = mappedIpv4(hostname) ?? hostname;
-    return PRIVATE_IP_RANGES.some((range) => range.test(target));
+    return isPrivateAddress(new URL(url).hostname);
   } catch (_e) {
     return false;
   }
@@ -381,6 +385,7 @@ __name(formatFetchErrorForUser, "formatFetchErrorForUser");
 export {
   isConnectionLevelError,
   isPrivateHost,
+  isPermittedRedirect,
   fetchWithPolicy,
   formatFetchErrorForUser
 };