@socketsecurity/lib 5.12.0 → 5.13.0

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.13.0](https://github.com/SocketDev/socket-lib/releases/tag/v5.13.0) - 2026-04-05
+
+### Added — http-request
+
+- `readIncomingResponse()` — reads and buffers a Node.js `IncomingResponse` into an `HttpResponse` (#143)
+  - Useful for converting raw responses from code that bypasses `httpRequest()` (e.g. multipart form-data uploads) into the standard `HttpResponse` interface
+- `IncomingResponse` type alias — disambiguates `IncomingMessage` as a client-side response
+- `IncomingRequest` type alias — disambiguates `IncomingMessage` as a server-side request
+
+### Changed — http-request
+
+- Internal `httpRequestAttempt` callbacks now use `IncomingResponse` type
+- `HttpResponse.rawResponse` type narrowed from `IncomingMessage` to `IncomingResponse`
+
 ## [5.12.0](https://github.com/SocketDev/socket-lib/releases/tag/v5.12.0) - 2026-04-04
 
 ### Added — http-request

package/dist/http-request.d.ts

@@ -1,4 +1,8 @@
 import type { IncomingHttpHeaders, IncomingMessage } from 'http';
+/** IncomingMessage received as a response to a client request (http.request callback). */
+export type IncomingResponse = IncomingMessage;
+/** IncomingMessage received as a request in a server handler (http.createServer callback). */
+export type IncomingRequest = IncomingMessage;
 import type { Logger } from './logger.js';
 /**
  * Information passed to the onRequest hook before each request attempt.
@@ -314,12 +318,21 @@ export interface HttpResponse {
      */
     text(): string;
     /**
-     * The underlying Node.js IncomingMessage for advanced use cases
+     * The underlying Node.js IncomingResponse for advanced use cases
      * (e.g., streaming, custom header inspection). Only available when
      * the response was not consumed by the convenience methods.
      */
-    rawResponse?: IncomingMessage | undefined;
+    rawResponse?: IncomingResponse | undefined;
 }
+/**
+ * Read and buffer a client-side IncomingResponse into an HttpResponse.
+ *
+ * Useful when you have a raw response from code that bypasses
+ * `httpRequest()` (e.g., multipart form-data uploads via `http.request()`,
+ * or responses from third-party HTTP libraries) and need to convert it
+ * into the standard HttpResponse interface.
+ */
+export declare function readIncomingResponse(msg: IncomingResponse): Promise<HttpResponse>;
 /**
  * Configuration options for file downloads.
  */

package/dist/http-request.js

@@ -25,7 +25,8 @@ __export(http_request_exports, {
   httpJson: () => httpJson,
   httpRequest: () => httpRequest,
   httpText: () => httpText,
-  parseChecksums: () => parseChecksums
+  parseChecksums: () => parseChecksums,
+  readIncomingResponse: () => readIncomingResponse
 });
 module.exports = __toCommonJS(http_request_exports);
 var import_fs = require("./fs.js");
@@ -61,6 +62,29 @@ function getHttps() {
   }
   return _https;
 }
+async function readIncomingResponse(msg) {
+  const chunks = [];
+  for await (const chunk of msg) {
+    chunks.push(chunk);
+  }
+  const body = Buffer.concat(chunks);
+  const status = msg.statusCode ?? 0;
+  const statusText = msg.statusMessage ?? "";
+  return {
+    arrayBuffer: () => body.buffer.slice(
+      body.byteOffset,
+      body.byteOffset + body.byteLength
+    ),
+    body,
+    headers: msg.headers,
+    json: () => JSON.parse(body.toString("utf8")),
+    ok: status >= 200 && status < 300,
+    rawResponse: msg,
+    status,
+    statusText,
+    text: () => body.toString("utf8")
+  };
+}
 function parseChecksums(text) {
   const checksums = { __proto__: null };
   for (const line of text.split("\n")) {
@@ -613,5 +637,6 @@ async function httpText(url, options) {
   httpJson,
   httpRequest,
   httpText,
-  parseChecksums
+  parseChecksums,
+  readIncomingResponse
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "5.12.0",
+  "version": "5.13.0",
   "packageManager": "pnpm@10.33.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
@@ -735,7 +735,7 @@
     "@socketregistry/is-unicode-supported": "1.0.5",
     "@socketregistry/packageurl-js": "1.4.1",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.11.4",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.12.0",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250920.1",
     "@vitest/coverage-v8": "4.0.3",