@socketsecurity/lib 6.0.3 → 6.0.4

package/dist/http-request/request.js

@@ -1,111 +1,109 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var request_exports = {};
-__export(request_exports, {
-  httpRequest: () => httpRequest,
-  httpRequestAttempt: () => import_request_attempt2.httpRequestAttempt,
-  readIncomingResponse: () => import_response_reader.readIncomingResponse
-});
-module.exports = __toCommonJS(request_exports);
-var import_promises = require("node:timers/promises");
-var import_error = require("../primordials/error");
-var import_math = require("../primordials/math");
-var import_number = require("../primordials/number");
-var import_request_attempt = require("./request-attempt");
-var import_response_types = require("./response-types");
-var import_request_attempt2 = require("./request-attempt");
-var import_response_reader = require("./response-reader");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_error = require('../primordials/error.js');
+const require_primordials_math = require('../primordials/math.js');
+const require_primordials_number = require('../primordials/number.js');
+const require_http_request_request_attempt = require('./request-attempt.js');
+const require_http_request_response_types = require('./response-types.js');
+const require_http_request_response_reader = require('./response-reader.js');
+let node_timers_promises = require("node:timers/promises");
+
+//#region src/http-request/request.ts
+/**
+* @file Core HTTP/HTTPS request loop — the retry orchestrator. `httpRequest` is
+*   the main entry point: it wraps `httpRequestAttempt` with retry /
+*   exponential-backoff logic and an optional `onRetry` callback. Heavy lifting
+*   lives in sibling leaves and is re-exported here so existing
+*   `http-request/request` importers keep working unchanged:
+*
+*   - `httpRequestAttempt` — single attempt + redirect chasing —
+*     `./request-attempt`
+*   - `readIncomingResponse` — IncomingMessage → HttpResponse —
+*     `./response-reader`
+*/
+/**
+* Make an HTTP/HTTPS request with retry logic and redirect support. Provides a
+* fetch-like API using Node.js native http/https modules.
+*
+* This is the main entry point for making HTTP requests. It handles retries,
+* redirects, timeouts, and provides a fetch-compatible response interface.
+*
+* @example
+*   ;```ts
+*   // Simple GET request
+*   const response = await httpRequest('https://api.example.com/data')
+*   const data = response.json()
+*
+*   // POST with JSON body
+*   const response = await httpRequest('https://api.example.com/users', {
+*     method: 'POST',
+*     headers: { 'Content-Type': 'application/json' },
+*     body: JSON.stringify({ name: 'Alice', email: 'alice@example.com' }),
+*   })
+*
+*   // With retries and timeout
+*   const response = await httpRequest('https://api.example.com/data', {
+*     retries: 3,
+*     retryDelay: 1000,
+*     timeout: 60000,
+*   })
+*
+*   // Don't follow redirects
+*   const response = await httpRequest('https://example.com/redirect', {
+*     followRedirects: false,
+*   })
+*   console.log(response.status) // 301, 302, etc.
+*   ```
+*
+* @param url - The URL to request (must start with http:// or https://)
+* @param options - Request configuration options.
+*
+* @returns Promise resolving to response object with `.json()`, `.text()`, etc.
+*
+* @throws {Error} When all retries are exhausted, timeout occurs, or
+*   non-retryable error happens.
+*/
 async function httpRequest(url, options) {
-  const {
-    body,
-    ca,
-    followRedirects = true,
-    headers = {},
-    hooks,
-    maxRedirects = 5,
-    maxResponseSize,
-    method = "GET",
-    onRetry,
-    retries = 0,
-    retryDelay = 1e3,
-    signal,
-    stream = false,
-    throwOnError = false,
-    timeout = 3e4
-  } = { __proto__: null, ...options };
-  const isStreamBody = body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
-  if (isStreamBody && retries > 0) {
-    throw new import_error.ErrorCtor(
-      "Streaming body (Readable/FormData) cannot be used with retries. Streams are consumed on first attempt and cannot be replayed. Set retries: 0 or buffer the body as a string/Buffer."
-    );
-  }
-  const attemptOpts = {
-    body,
-    ca,
-    // Disable redirect following for stream bodies — the stream is consumed
-    // on the first request and cannot be re-piped to the redirect target.
-    followRedirects: isStreamBody ? false : followRedirects,
-    headers,
-    hooks,
-    maxRedirects,
-    maxResponseSize,
-    method,
-    signal,
-    stream,
-    timeout
-  };
-  let lastError;
-  for (let attempt = 0; attempt <= retries; attempt++) {
-    try {
-      const response = await (0, import_request_attempt.httpRequestAttempt)(url, attemptOpts);
-      if (throwOnError && !response.ok) {
-        throw new import_response_types.HttpResponseError(response);
-      }
-      return response;
-    } catch (e) {
-      lastError = e;
-      if (attempt === retries) {
-        break;
-      }
-      if (signal?.aborted) {
-        break;
-      }
-      const delayMs = retryDelay * 2 ** attempt;
-      if (onRetry) {
-        const retryResult = onRetry(attempt + 1, e, delayMs);
-        if (retryResult === false) {
-          break;
-        }
-        const actualDelay = typeof retryResult === "number" && !(0, import_number.NumberIsNaN)(retryResult) ? (0, import_math.MathMax)(0, retryResult) : delayMs;
-        await (0, import_promises.setTimeout)(actualDelay);
-      } else {
-        await (0, import_promises.setTimeout)(delayMs);
-      }
-    }
-  }
-  throw lastError || new import_error.ErrorCtor("Request failed after retries");
+	const { body, ca, followRedirects = true, headers = {}, hooks, maxRedirects = 5, maxResponseSize, method = "GET", onRetry, retries = 0, retryDelay = 1e3, signal, stream = false, throwOnError = false, timeout = 3e4 } = {
+		__proto__: null,
+		...options
+	};
+	const isStreamBody = body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
+	if (isStreamBody && retries > 0) throw new require_primordials_error.ErrorCtor("Streaming body (Readable/FormData) cannot be used with retries. Streams are consumed on first attempt and cannot be replayed. Set retries: 0 or buffer the body as a string/Buffer.");
+	const attemptOpts = {
+		body,
+		ca,
+		followRedirects: isStreamBody ? false : followRedirects,
+		headers,
+		hooks,
+		maxRedirects,
+		maxResponseSize,
+		method,
+		signal,
+		stream,
+		timeout
+	};
+	let lastError;
+	for (let attempt = 0; attempt <= retries; attempt++) try {
+		const response = await require_http_request_request_attempt.httpRequestAttempt(url, attemptOpts);
+		if (throwOnError && !response.ok) throw new require_http_request_response_types.HttpResponseError(response);
+		return response;
+	} catch (e) {
+		lastError = e;
+		if (attempt === retries) break;
+		if (signal?.aborted) break;
+		const delayMs = retryDelay * 2 ** attempt;
+		if (onRetry) {
+			const retryResult = onRetry(attempt + 1, e, delayMs);
+			if (retryResult === false) break;
+			await (0, node_timers_promises.setTimeout)(typeof retryResult === "number" && !require_primordials_number.NumberIsNaN(retryResult) ? require_primordials_math.MathMax(0, retryResult) : delayMs);
+		} else await (0, node_timers_promises.setTimeout)(delayMs);
+	}
+	throw lastError || new require_primordials_error.ErrorCtor("Request failed after retries");
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  httpRequest,
-  httpRequestAttempt,
-  readIncomingResponse
-});
+
+//#endregion
+exports.httpRequest = httpRequest;
+exports.httpRequestAttempt = require_http_request_request_attempt.httpRequestAttempt;
+exports.readIncomingResponse = require_http_request_response_reader.readIncomingResponse;

package/dist/http-request/response-reader.js

@@ -1,54 +1,50 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var response_reader_exports = {};
-__export(response_reader_exports, {
-  readIncomingResponse: () => readIncomingResponse
-});
-module.exports = __toCommonJS(response_reader_exports);
-var import_buffer = require("../primordials/buffer");
-var import_json = require("../primordials/json");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_buffer = require('../primordials/buffer.js');
+const require_primordials_json = require('../primordials/json.js');
+
+//#region src/http-request/response-reader.ts
+/**
+* @file Read a raw Node `IncomingMessage` into our `HttpResponse` shape. Split
+*   out of `http-request/request.ts` for size hygiene. Useful when a caller
+*   already has an `IncomingMessage` from code that bypasses `httpRequest()`
+*   (e.g., multipart uploads via `http.request()` directly, or third-party HTTP
+*   libraries) and wants the same fetch-like body accessors.
+*/
+/**
+* Read and buffer a client-side IncomingResponse into an HttpResponse.
+*
+* Useful when you have a raw response from code that bypasses `httpRequest()`
+* (e.g., multipart form-data uploads via `http.request()`, or responses from
+* third-party HTTP libraries) and need to convert it into the standard
+* HttpResponse interface.
+*
+* @example
+*   ;```typescript
+*   const raw = await makeRawRequest('https://example.com/api')
+*   const response = await readIncomingResponse(raw)
+*   console.log(response.status, response.body.toString('utf8'))
+*   ```
+*/
 async function readIncomingResponse(msg) {
-  const chunks = [];
-  for await (const chunk of msg) {
-    chunks.push(chunk);
-  }
-  const body = (0, import_buffer.BufferConcat)(chunks);
-  const status = msg.statusCode ?? 0;
-  const statusText = msg.statusMessage ?? "";
-  return {
-    arrayBuffer: () => body.buffer.slice(
-      body.byteOffset,
-      body.byteOffset + body.byteLength
-    ),
-    body,
-    headers: msg.headers,
-    json: () => (0, import_json.JSONParse)(body.toString("utf8")),
-    ok: status >= 200 && status < 300,
-    rawResponse: msg,
-    status,
-    statusText,
-    text: () => body.toString("utf8")
-  };
+	const chunks = [];
+	for await (const chunk of msg) chunks.push(chunk);
+	const body = require_primordials_buffer.BufferConcat(chunks);
+	const status = msg.statusCode ?? 0;
+	const statusText = msg.statusMessage ?? "";
+	return {
+		arrayBuffer: () => body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength),
+		body,
+		headers: msg.headers,
+		json: () => require_primordials_json.JSONParse(body.toString("utf8")),
+		ok: status >= 200 && status < 300,
+		rawResponse: msg,
+		status,
+		statusText,
+		text: () => body.toString("utf8")
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  readIncomingResponse
-});
+
+//#endregion
+exports.readIncomingResponse = readIncomingResponse;

package/dist/http-request/response-types.js

@@ -1,40 +1,24 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/http-request/response-types.ts
+/**
+* Error thrown when an HTTP response has a non-2xx status code and
+* `throwOnError` is enabled. Carries the full `HttpResponse` so callers can
+* inspect status, headers, and body.
+*/
+var HttpResponseError = class HttpResponseError extends Error {
+	response;
+	constructor(response, message) {
+		const statusCode = response.status ?? "unknown";
+		const statusMessage = response.statusText || "No status message";
+		super(message ?? `HTTP ${statusCode}: ${statusMessage}`);
+		this.name = "HttpResponseError";
+		this.response = response;
+		Error.captureStackTrace(this, HttpResponseError);
+	}
 };
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var response_types_exports = {};
-__export(response_types_exports, {
-  HttpResponseError: () => HttpResponseError
-});
-module.exports = __toCommonJS(response_types_exports);
-class HttpResponseError extends Error {
-  response;
-  constructor(response, message) {
-    const statusCode = response.status ?? "unknown";
-    const statusMessage = response.statusText || "No status message";
-    super(message ?? `HTTP ${statusCode}: ${statusMessage}`);
-    this.name = "HttpResponseError";
-    this.response = response;
-    Error.captureStackTrace(this, HttpResponseError);
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  HttpResponseError
-});
+
+//#endregion
+exports.HttpResponseError = HttpResponseError;

package/dist/http-request/user-agent.js

@@ -1,61 +1,79 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var user_agent_exports = {};
-__export(user_agent_exports, {
-  buildUserAgent: () => buildUserAgent,
-  getSocketCallerUserAgent: () => getSocketCallerUserAgent
-});
-module.exports = __toCommonJS(user_agent_exports);
-var import_node_process = __toESM(require("node:process"));
-var import_socket = require("../constants/socket");
-var import_rewire = require("../env/rewire");
-var import_operations = require("../packages/operations");
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_env_rewire = require('../env/rewire.js');
+const require_constants_socket = require('../constants/socket.js');
+const require_packages_operations = require('../packages/operations.js');
+let node_process = require("node:process");
+node_process = require_runtime.__toESM(node_process);
+
+//#region src/http-request/user-agent.ts
+/**
+* @file User-Agent header generation for socket-lib's outbound HTTP requests.
+*   Three-token format aligned with socket-cli's `getCliUserAgent` and
+*   coana-tech-cli's `configureAxiosUserAgent`: `<slug>/<version>
+*   node/<node-version> <platform>/<arch>` e.g. `socketsecurity-lib/6.0.0
+*   node/v22.10.0 darwin/arm64` Downstream callers (sdxgen SEA binary, fleet
+*   CLIs, etc.) can identify themselves via the `SOCKET_CALLER_USER_AGENT` env
+*   var, which is appended to the lib's own UA so the server still sees the lib
+*   identifier. @example import { getSocketCallerUserAgent } from
+*   '@socketsecurity/lib/http-request/user-agent'
+*   request.setHeader('User-Agent', getSocketCallerUserAgent())
+*/
+/**
+* Compose a three-token User-Agent string from a `{ name, version }` pair,
+* optionally appending a caller-supplied identifier.
+*
+* Used directly by socket-lib's own outbound requests (via
+* `getSocketCallerUserAgent`) and exported for sibling packages (socket-cli,
+* socket-sdk-js) so the fleet emits one canonical UA shape.
+*
+* @example
+*   ;```typescript
+*   buildUserAgent({ name: '@socketsecurity/lib', version: '6.0.0' })
+*   // 'socketsecurity-lib/6.0.0 node/v22.10.0 darwin/arm64'
+*
+*   buildUserAgent({ name: 'sdxgen', version: '0.5.0' }, 'embedded-by-foo/1')
+*   // 'sdxgen/0.5.0 node/v22.10.0 darwin/arm64 embedded-by-foo/1'
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function buildUserAgent(pkg, caller) {
-  const base = `${(0, import_operations.pkgNameToSlug)(pkg.name)}/${pkg.version} node/${import_node_process.default.version} ${import_node_process.default.platform}/${import_node_process.default.arch}`;
-  return caller ? `${base} ${caller}` : base;
+	const base = `${/* @__PURE__ */ require_packages_operations.pkgNameToSlug(pkg.name)}/${pkg.version} node/${node_process.default.version} ${node_process.default.platform}/${node_process.default.arch}`;
+	return caller ? `${base} ${caller}` : base;
 }
 let cachedBaseUserAgent;
+/**
+* User-Agent header for socket-lib's own outbound HTTP requests.
+*
+* Composes the lib's base UA (lazily cached — name, lib version, node version,
+* platform, and arch are stable for the process lifetime) with the
+* caller-supplied identifier from `SOCKET_CALLER_USER_AGENT` (re-read every
+* call so child-process / test-stub changes propagate).
+*
+* Empty or whitespace-only env values are treated as unset.
+*
+* @example
+*   ;```typescript
+*   // No env override:
+*   getSocketCallerUserAgent()
+*   // 'socketsecurity-lib/6.0.0 node/v22.10.0 darwin/arm64'
+*
+*   // With SOCKET_CALLER_USER_AGENT='sdxgen/0.5.0':
+*   getSocketCallerUserAgent()
+*   // 'socketsecurity-lib/6.0.0 node/v22.10.0 darwin/arm64 sdxgen/0.5.0'
+*   ```
+*/
 function getSocketCallerUserAgent() {
-  if (cachedBaseUserAgent === void 0) {
-    cachedBaseUserAgent = /* @__PURE__ */ buildUserAgent({
-      name: import_socket.SOCKET_LIB_NAME,
-      version: import_socket.SOCKET_LIB_VERSION
-    });
-  }
-  const caller = (0, import_rewire.getEnvValue)("SOCKET_CALLER_USER_AGENT");
-  return caller && caller.trim() ? `${cachedBaseUserAgent} ${caller}` : cachedBaseUserAgent;
+	if (cachedBaseUserAgent === void 0) cachedBaseUserAgent = /* @__PURE__ */ buildUserAgent({
+		name: require_constants_socket.SOCKET_LIB_NAME,
+		version: require_constants_socket.SOCKET_LIB_VERSION
+	});
+	const caller = require_env_rewire.getEnvValue("SOCKET_CALLER_USER_AGENT");
+	return caller && caller.trim() ? `${cachedBaseUserAgent} ${caller}` : cachedBaseUserAgent;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  buildUserAgent,
-  getSocketCallerUserAgent
-});
+
+//#endregion
+exports.buildUserAgent = buildUserAgent;
+exports.getSocketCallerUserAgent = getSocketCallerUserAgent;