@tibame201020/queqiao-http 0.1.1 → 0.1.3

package/README.md

@@ -1,48 +1,156 @@
-# Queqiao HTTP
+# @tibame201020/queqiao-http
 
-Bounded outbound HTTP extension for [Queqiao](https://github.com/tibame201020/Queqiao).
+[English](https://github.com/tibame201020/queqiao-http/blob/main/README.md) | [繁體中文](https://github.com/tibame201020/queqiao-http/blob/main/README.zh-TW.md)
 
-It exposes one Worker-hosted capability, `http_request`, through Queqiao's stable `extension` proxy. It uses `context.runtime.http.request()`; it does not invoke `curl`, a shell, `child_process`, or unrestricted global `fetch`.
+Official curl-like HTTP extension for [Queqiao](https://github.com/tibame201020/Queqiao).
 
-## MVP scope
+`@tibame201020/queqiao-http` gives an attached Queqiao Worker a convenient `http_request` capability for direct HTTP/HTTPS requests. The trust decision is the extension install/attach itself: the extension does **not** maintain an origin allowlist.
 
-Allowed origins are intentionally fixed in the extension manifest:
+The implementation uses the Worker's native `fetch` directly. It does not invoke `curl`, a shell, or `child_process`.
 
-- `http://127.0.0.1:9889`
-- `http://localhost:9889`
+## Status
 
-Requests to other origins are rejected by Queqiao's Worker runtime with `extension_network_denied`. Redirects, request/response bounds, cancellation, and timeout behavior remain owned by Queqiao.
+v0.1.3 targets Queqiao 0.9.7. The canonical npm package is `@tibame201020/queqiao-http`.
 
-## Install locally
+Starting with v0.1.1, npm publication is handled by the repository's GitHub Release workflow using npm Trusted Publishing with provenance.
 
-```powershell
-npm install
-npm run check
-queqiao extension install . --worker <worker-name>
+Current request path:
+
+```text
+MCP client / LLM
+→ Queqiao Gateway
+→ Queqiao Worker
+→ stable extension proxy
+→ queqiao-http
+→ direct HTTP/HTTPS request
+→ target service
+```
+
+Verified behavior includes:
+
+- JSON GET/POST requests;
+- automatic JSON request serialization and response parsing;
+- backend HTTP 4xx responses preserved as normal HTTP responses;
+- arbitrary HTTP/HTTPS origins, including localhost, WSL/private-network addresses, and internet origins;
+- no public Queqiao connector manifest expansion when the extension is installed or updated.
+
+## Install
+
+```bash
+queqiao extension install npm:@tibame201020/queqiao-http --attach-all
+```
+
+Or install into the Extension Hub first and attach a selected Worker later:
+
+```bash
+queqiao extension install npm:@tibame201020/queqiao-http
+queqiao extension attach dev.queqiao.http --worker windows
 ```
 
+`attach` is activation.
+
+## Network authority
+
+There is no per-origin grant list in `queqiao-http`.
+
+Installing and attaching this extension is the explicit authorization for it to issue HTTP/HTTPS requests from the Worker. This is intentional: the extension is meant to be a convenient curl-like network capability, not a service-specific adapter.
+
+The package manifest therefore declares no managed-runtime HTTP origins:
+
+```json
+{
+  "runtime": {
+    "processes": { "allow": [] },
+    "outboundHttp": { "allowOrigins": [] }
+  }
+}
+```
+
+The empty `allowOrigins` list is intentional because v0.1.3 no longer routes requests through `context.runtime.http.request()`.
+
 ## Capability
 
-`http_request` accepts:
+`queqiao-http` registers one capability: `http_request`.
+
+Input fields:
+
+- `workspaceId` — selected Queqiao Workspace;
+- `url` — full HTTP or HTTPS URL;
+- `method` — `GET | POST | PUT | PATCH | DELETE | HEAD`, default `GET`;
+- `headers` — optional string header map;
+- `body` — optional raw string body;
+- `json` — optional JSON value, mutually exclusive with `body`;
+- `timeoutMs` — `100` to `120000`, default `30000`.
+
+When `json` is supplied, the extension serializes it and adds `content-type: application/json` unless the caller already supplied a Content-Type header.
+
+### Example
+
+```json
+{
+  "workspaceId": "codes",
+  "operation": "call",
+  "extensionId": "dev.queqiao.http",
+  "capability": "http_request",
+  "arguments": {
+    "url": "http://172.31.39.34:9889/api/meal/types",
+    "method": "GET"
+  }
+}
+```
+
+## Response contract
+
+Non-2xx status codes remain ordinary downstream HTTP responses:
+
+```json
+{
+  "status": 200,
+  "headers": { "content-type": "application/json" },
+  "body": "{\"ok\":true}",
+  "json": { "ok": true }
+}
+```
+
+`json` is included only when the response body is JSON. `body` preserves the response text.
 
-- `workspaceId`
-- `url`
-- `method`: `GET | POST | PUT | PATCH | DELETE | HEAD` (default `GET`)
-- `headers` (optional)
-- `body` or `json` (mutually exclusive)
-- `timeoutMs` (100-120000, default 30000)
+## Trust boundary
 
-When `json` is supplied, it is serialized and `content-type: application/json` is added unless already present. JSON responses are returned with both the raw `body` and a parsed `json` field when parsing succeeds. Non-2xx HTTP responses are returned as responses rather than converted into transport errors.
+Queqiao extensions are trusted plugin code. Installing and attaching `queqiao-http` grants this extension open-world HTTP/HTTPS network authority from that Worker.
+
+Queqiao remains authoritative for package installation/attachment, Extension contract validation, Gateway → Worker routing, and ExtensionHost lifecycle. The extension validates request shape, restricts the URL scheme to HTTP/HTTPS, applies the caller timeout, performs direct `fetch`, and normalizes the response.
+
+```text
+process allowlist: empty
+shell access: none
+curl execution: none
+child_process: none
+origin allowlist: none
+direct global fetch: yes
+risk: execute
+openWorldHint: true
+```
 
 ## Development
 
-```powershell
-npm test
-npm run typecheck
-npm run build
+```bash
+npm ci
 npm run check
+npm pack --ignore-scripts --dry-run
 ```
 
-## Publishing
+## Releasing
+
+```text
+main CI passes
+→ tag v<package-version>
+→ publish matching GitHub Release
+→ Publish npm workflow
+→ npm Trusted Publishing + provenance
+```
+
+See [`docs/releasing.md`](docs/releasing.md).
+
+## License
 
-GitHub Releases publish matching `v<version>` tags to npm through OIDC trusted publishing. See [`docs/releasing.md`](docs/releasing.md) for the one-time bootstrap and trusted-publisher setup.
+MIT

package/README.zh-TW.md

@@ -0,0 +1,156 @@
+# @tibame201020/queqiao-http
+
+[English](https://github.com/tibame201020/queqiao-http/blob/main/README.md) | [繁體中文](https://github.com/tibame201020/queqiao-http/blob/main/README.zh-TW.md)
+
+[Queqiao](https://github.com/tibame201020/Queqiao) 的官方 curl-like HTTP extension。
+
+`@tibame201020/queqiao-http` 讓已 attach 的 Queqiao Worker 取得方便的 `http_request` 能力，可直接發送 HTTP/HTTPS request。**安裝／attach extension 本身就是信任決策**；extension 不再維護 origin allowlist。
+
+底層直接使用 Worker 執行環境的 native `fetch`，不執行 `curl`、shell 或 `child_process`。
+
+## 狀態
+
+v0.1.3 對應 Queqiao 0.9.7。Canonical npm package 為 `@tibame201020/queqiao-http`。
+
+自 v0.1.1 起，npm 發布由 GitHub Release workflow 透過 npm Trusted Publishing + provenance 自動處理。
+
+目前 request path：
+
+```text
+MCP client / LLM
+→ Queqiao Gateway
+→ Queqiao Worker
+→ stable extension proxy
+→ queqiao-http
+→ direct HTTP/HTTPS request
+→ target service
+```
+
+已驗證行為包括：
+
+- JSON GET/POST request；
+- JSON request 自動 serialize、JSON response 自動 parse；
+- backend HTTP 4xx 保留為正常 HTTP response；
+- 可呼叫任意 HTTP/HTTPS origin，包括 localhost、WSL/private-network IP 與網際網路 origin；
+- 安裝或更新 extension 不會擴張 Queqiao 公開 connector manifest。
+
+## 安裝
+
+```bash
+queqiao extension install npm:@tibame201020/queqiao-http --attach-all
+```
+
+或先安裝到 Extension Hub，再 attach 到指定 Worker：
+
+```bash
+queqiao extension install npm:@tibame201020/queqiao-http
+queqiao extension attach dev.queqiao.http --worker windows
+```
+
+`attach` 即 activation。
+
+## Network authority
+
+`queqiao-http` 不再有 per-origin grant list。
+
+安裝並 attach 此 extension，即明確授權它從 Worker 發送 HTTP/HTTPS request。這是刻意設計：此 extension 的定位是方便的 curl-like network capability，而不是綁定某個服務的 adapter。
+
+Package manifest 因此不宣告 managed-runtime HTTP origin：
+
+```json
+{
+  "runtime": {
+    "processes": { "allow": [] },
+    "outboundHttp": { "allowOrigins": [] }
+  }
+}
+```
+
+`allowOrigins` 為空是刻意的，因為 v0.1.3 已不再透過 `context.runtime.http.request()` 發送 request。
+
+## Capability
+
+`queqiao-http` 只註冊一個 capability：`http_request`。
+
+輸入欄位：
+
+- `workspaceId` — 選定的 Queqiao Workspace；
+- `url` — 完整 HTTP 或 HTTPS URL；
+- `method` — `GET | POST | PUT | PATCH | DELETE | HEAD`，預設 `GET`；
+- `headers` — optional string header map；
+- `body` — optional raw string body；
+- `json` — optional JSON value，與 `body` 互斥；
+- `timeoutMs` — `100` 到 `120000`，預設 `30000`。
+
+提供 `json` 時，extension 會自動 serialize，且 caller 未提供 Content-Type 時會補上 `content-type: application/json`。
+
+### 範例
+
+```json
+{
+  "workspaceId": "codes",
+  "operation": "call",
+  "extensionId": "dev.queqiao.http",
+  "capability": "http_request",
+  "arguments": {
+    "url": "http://172.31.39.34:9889/api/meal/types",
+    "method": "GET"
+  }
+}
+```
+
+## Response contract
+
+非 2xx status 會保留為普通 downstream HTTP response：
+
+```json
+{
+  "status": 200,
+  "headers": { "content-type": "application/json" },
+  "body": "{\"ok\":true}",
+  "json": { "ok": true }
+}
+```
+
+只有 response body 能成功 parse 為 JSON 時才提供 `json`；`body` 保留文字 response。
+
+## 信任邊界
+
+Queqiao extension 屬於 trusted plugin code。安裝並 attach `queqiao-http`，代表授權此 extension 從該 Worker 對外發送 open-world HTTP/HTTPS request。
+
+Queqiao 仍負責 package install/attach、Extension contract validation、Gateway → Worker routing 與 ExtensionHost lifecycle。Extension 本身負責 request schema、限制 URL scheme 為 HTTP/HTTPS、timeout、直接 `fetch` 與 response normalize。
+
+```text
+process allowlist: empty
+shell access: none
+curl execution: none
+child_process: none
+origin allowlist: none
+direct global fetch: yes
+risk: execute
+openWorldHint: true
+```
+
+## 開發
+
+```bash
+npm ci
+npm run check
+npm pack --ignore-scripts --dry-run
+```
+
+## 發布
+
+```text
+main CI passes
+→ tag v<package-version>
+→ publish matching GitHub Release
+→ Publish npm workflow
+→ npm Trusted Publishing + provenance
+```
+
+另見 [`docs/releasing.md`](docs/releasing.md)。
+
+## 授權
+
+MIT

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAEV,cAAc,EACd,sBAAsB,EACvB,MAAM,iCAAiC,CAAC;AAQzC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAYpC,CAAC;AA0BH,eAAO,MAAM,uBAAuB,EAAE,cAAc,CAAC,sBAAsB,CA0C1E,CAAC;AAEF,QAAA,MAAM,SAAS;;;;;;;;CAUqC,CAAC;eAEtC,SAAS"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAEV,cAAc,EACd,sBAAsB,EACvB,MAAM,iCAAiC,CAAC;AAQzC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAYpC,CAAC;AAkCH,eAAO,MAAM,uBAAuB,EAAE,cAAc,CAAC,sBAAsB,CAmD1E,CAAC;AAEF,QAAA,MAAM,SAAS;;;;;;;;CAUqC,CAAC;eAEtC,SAAS"}

package/dist/index.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 const EXTENSION_ID = "dev.queqiao.http";
-const EXTENSION_VERSION = "0.1.0";
+const EXTENSION_VERSION = "0.1.3";
 const DEFAULT_TIMEOUT_MS = 30_000;
 const headersSchema = z.record(z.string().min(1).max(256), z.string().max(8192));
 export const HTTP_REQUEST_INPUT_SCHEMA = z.object({
@@ -38,10 +38,17 @@ function maybeParseJson(body, headers) {
         return undefined;
     }
 }
+function validateHttpUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error("url must use http or https");
+    }
+    return url;
+}
 export const HTTP_REQUEST_DEFINITION = {
     name: "http_request",
     title: "HTTP request",
-    description: "Send one bounded HTTP request to an origin explicitly granted by this extension manifest.",
+    description: "Send one direct HTTP/HTTPS request from the trusted Worker extension without an origin allowlist.",
     inputSchema: HTTP_REQUEST_INPUT_SCHEMA,
     requiredCapabilities: [],
     risk: "execute",
@@ -51,8 +58,9 @@ export const HTTP_REQUEST_DEFINITION = {
         openWorldHint: true,
         idempotentHint: false,
     },
-    async execute(input, context) {
+    async execute(input) {
         const parsed = HTTP_REQUEST_INPUT_SCHEMA.parse(input);
+        validateHttpUrl(parsed.url);
         const headers = parsed.headers ? { ...parsed.headers } : undefined;
         let body = parsed.body;
         if (parsed.json !== undefined) {
@@ -66,17 +74,24 @@ export const HTTP_REQUEST_DEFINITION = {
             ? { "content-type": "application/json" }
             : headers;
         const request = {
-            url: parsed.url,
             method: parsed.method,
-            timeoutMs: parsed.timeoutMs,
+            signal: AbortSignal.timeout(parsed.timeoutMs),
+            redirect: "follow",
         };
         if (requestHeaders !== undefined)
             request.headers = requestHeaders;
         if (body !== undefined)
             request.body = body;
-        const response = await context.runtime.http.request(request);
-        const json = maybeParseJson(response.body, response.headers);
-        return json === undefined ? response : { ...response, json };
+        const response = await fetch(parsed.url, request);
+        const responseHeaders = Object.fromEntries(response.headers.entries());
+        const responseBody = parsed.method === "HEAD" ? "" : await response.text();
+        const json = maybeParseJson(responseBody, responseHeaders);
+        const normalized = {
+            status: response.status,
+            headers: responseHeaders,
+            body: responseBody,
+        };
+        return json === undefined ? normalized : { ...normalized, json };
     },
 };
 const extension = {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;CAC9E,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,SAAS,SAAS,CAAC,OAAyC,EAAE,IAAY;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAyC;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc;YAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAyC;IAC7E,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,2FAA2F;IACxG,WAAW,EAAE,yBAAyB;IACtC,oBAAoB,EAAE,EAAE;IACxB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;KACtB;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;QAC1B,MAAM,MAAM,GAAqB,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;oBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACxF,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO;YAC1D,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACxC,CAAC,CAAC,OAAO,CAAC;QAEZ,MAAM,OAAO,GAAwE;YACnF,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QACF,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,QAAQ,EAAE;QACR,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,cAAc;QAC3B,qBAAqB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;KACtD;IACD,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC;CACiD,CAAC;AAErD,eAAe,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;CAC9E,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,SAAS,SAAS,CAAC,OAAyC,EAAE,IAAY;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAyC;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc;YAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAyC;IAC7E,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,mGAAmG;IAChH,WAAW,EAAE,yBAAyB;IACtC,oBAAoB,EAAE,EAAE;IACxB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;KACtB;IACD,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,MAAM,MAAM,GAAqB,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;oBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACxF,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO;YAC1D,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACxC,CAAC,CAAC,OAAO,CAAC;QAEZ,MAAM,OAAO,GAAgB;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAC7C,QAAQ,EAAE,QAAQ;SACnB,CAAC;QACF,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAElD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,YAAY;SACnB,CAAC;QACF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,QAAQ,EAAE;QACR,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,cAAc;QAC3B,qBAAqB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;KACtD;IACD,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC;CACiD,CAAC;AAErD,eAAe,SAAS,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tibame201020/queqiao-http",
-  "version": "0.1.1",
-  "description": "Bounded outbound HTTP extension for Queqiao",
+  "version": "0.1.3",
+  "description": "Trusted curl-like HTTP extension for Queqiao",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -15,6 +15,7 @@
   "files": [
     "dist/",
     "README.md",
+    "README.zh-TW.md",
     "LICENSE"
   ],
   "scripts": {
@@ -42,7 +43,7 @@
     "module": "./dist/index.js",
     "manifest": {
       "id": "dev.queqiao.http",
-      "version": "0.1.1",
+      "version": "0.1.3",
       "displayName": "Queqiao HTTP",
       "host": {
         "kind": "worker"
@@ -57,10 +58,7 @@
           "allow": []
         },
         "outboundHttp": {
-          "allowOrigins": [
-            "http://127.0.0.1:9889",
-            "http://localhost:9889"
-          ]
+          "allowOrigins": []
         }
       },
       "contributions": [
@@ -69,7 +67,7 @@
           "tool": "http_request",
           "visibility": "public",
           "title": "HTTP request",
-          "description": "Send one bounded HTTP request to an origin explicitly granted by this extension manifest.",
+          "description": "Send one direct HTTP/HTTPS request from the trusted Worker extension without an origin allowlist.",
           "inputSchema": {
             "$schema": "https://json-schema.org/draft/2020-12/schema",
             "type": "object",