cascade-ai 0.12.17 → 0.12.19

package/dist/cli.cjs

@@ -4,6 +4,10 @@ var Anthropic = require('@anthropic-ai/sdk');
 var OpenAI = require('openai');
 var genai = require('@google/genai');
 var dns = require('dns');
+var http = require('http');
+var https = require('https');
+var zlib = require('zlib');
+var stream = require('stream');
 var ink = require('ink');
 var commander = require('commander');
 var React2 = require('react');
@@ -33,7 +37,6 @@ var worker_threads = require('worker_threads');
 var Spinner = require('ink-spinner');
 var ora = require('ora');
 var SelectInput = require('ink-select-input');
-var http = require('http');
 var express = require('express');
 var rateLimit = require('express-rate-limit');
 var bcrypt = require('bcryptjs');
@@ -65,6 +68,9 @@ function _interopNamespace(e) {
 var Anthropic__default = /*#__PURE__*/_interopDefault(Anthropic);
 var OpenAI__default = /*#__PURE__*/_interopDefault(OpenAI);
 var dns__default = /*#__PURE__*/_interopDefault(dns);
+var http__default = /*#__PURE__*/_interopDefault(http);
+var https__default = /*#__PURE__*/_interopDefault(https);
+var zlib__default = /*#__PURE__*/_interopDefault(zlib);
 var React2__default = /*#__PURE__*/_interopDefault(React2);
 var chalk9__default = /*#__PURE__*/_interopDefault(chalk9);
 var dotenv__default = /*#__PURE__*/_interopDefault(dotenv);
@@ -103,7 +109,7 @@ var __export = (target, all) => {
 var CASCADE_VERSION, CASCADE_CONFIG_FILE, CASCADE_DB_FILE, CASCADE_DASHBOARD_SECRET_FILE, GLOBAL_CONFIG_DIR, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, DEFAULT_DASHBOARD_PORT, DEFAULT_CONTEXT_LIMIT, DEFAULT_AUTO_SUMMARIZE_AT, MODELS, T1_MODEL_PRIORITY, T2_MODEL_PRIORITY, T3_MODEL_PRIORITY, VISION_MODEL_PRIORITY, COMPLEXITY_T2_COUNT, THEME_NAMES, DEFAULT_THEME, OLLAMA_BASE_URL, LM_STUDIO_BASE_URL, AZURE_BASE_URL_TEMPLATE, TOOL_NAMES, DEFAULT_APPROVAL_REQUIRED;
 var init_constants = __esm({
   "src/constants.ts"() {
-    CASCADE_VERSION = "0.12.17";
+    CASCADE_VERSION = "0.12.19";
     CASCADE_CONFIG_FILE = ".cascade/config.json";
     CASCADE_DB_FILE = ".cascade/memory.db";
     CASCADE_DASHBOARD_SECRET_FILE = ".cascade/dashboard-secret";
@@ -1213,12 +1219,75 @@ function preferIpv4Host(url) {
   if (!url) return url;
   return url.replace(/^(https?:\/\/)localhost(?=[:/]|$)/i, "$1127.0.0.1");
 }
+async function nodeHttpFetch(input, init = {}, redirectCount = 0) {
+  const urlStr = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+  const u = new URL(preferIpv4Host(urlStr) ?? urlStr);
+  const lib = u.protocol === "https:" ? https__default.default : http__default.default;
+  const method = (init.method ?? "GET").toUpperCase();
+  const headers = {};
+  const h = init.headers;
+  if (h instanceof Headers) h.forEach((v, k) => {
+    headers[k] = v;
+  });
+  else if (Array.isArray(h)) for (const [k, v] of h) headers[k] = v;
+  else if (h) Object.assign(headers, h);
+  if (!Object.keys(headers).some((k) => k.toLowerCase() === "accept-encoding")) {
+    headers["accept-encoding"] = "gzip, deflate, br";
+  }
+  const body = init.body == null ? void 0 : typeof init.body === "string" ? init.body : Buffer.from(init.body);
+  return new Promise((resolve, reject) => {
+    const req = lib.request(
+      {
+        hostname: u.hostname,
+        port: u.port || (u.protocol === "https:" ? 443 : 80),
+        path: u.pathname + u.search,
+        method,
+        headers
+      },
+      (res) => {
+        const status = res.statusCode ?? 200;
+        const location = res.headers.location;
+        if (status >= 300 && status < 400 && location && redirectCount < MAX_REDIRECTS) {
+          res.resume();
+          const nextUrl = new URL(location, u).href;
+          const downgrade = status === 303 || (status === 301 || status === 302) && method !== "GET" && method !== "HEAD";
+          const nextInit = downgrade ? { ...init, method: "GET", body: void 0 } : init;
+          resolve(nodeHttpFetch(nextUrl, nextInit, redirectCount + 1));
+          return;
+        }
+        const encoding = (res.headers["content-encoding"] ?? "").toLowerCase();
+        let bodyStream = res;
+        if (encoding === "gzip" || encoding === "x-gzip") bodyStream = res.pipe(zlib__default.default.createGunzip());
+        else if (encoding === "deflate") bodyStream = res.pipe(zlib__default.default.createInflate());
+        else if (encoding === "br") bodyStream = res.pipe(zlib__default.default.createBrotliDecompress());
+        const stream$1 = stream.Readable.toWeb(bodyStream);
+        const respHeaders = new Headers();
+        for (const [k, v] of Object.entries(res.headers)) {
+          if (k === "content-encoding" || k === "content-length") continue;
+          if (Array.isArray(v)) respHeaders.set(k, v.join(", "));
+          else if (typeof v === "string") respHeaders.set(k, v);
+        }
+        resolve(new Response(stream$1, {
+          status,
+          statusText: res.statusMessage ?? "",
+          headers: respHeaders
+        }));
+      }
+    );
+    req.on("error", reject);
+    req.setTimeout(15e3, () => req.destroy(new Error("request timed out")));
+    if (body !== void 0) req.write(body);
+    req.end();
+  });
+}
+var MAX_REDIRECTS;
 var init_net = __esm({
   "src/utils/net.ts"() {
     try {
       dns__default.default.setDefaultResultOrder("ipv4first");
     } catch {
     }
+    MAX_REDIRECTS = 5;
   }
 });
 
@@ -1456,7 +1525,8 @@ var init_openai_compatible = __esm({
         super(config, model);
         this.client = new OpenAI__default.default({
           apiKey: config.apiKey ?? "not-required",
-          baseURL: preferIpv4Host(config.baseUrl)
+          baseURL: preferIpv4Host(config.baseUrl),
+          fetch: nodeHttpFetch
         });
       }
       modelsUrl() {
@@ -1468,14 +1538,8 @@ var init_openai_compatible = __esm({
         if (this.config.apiKey) h["Authorization"] = `Bearer ${this.config.apiKey}`;
         return h;
       }
-      // Discover models with a tolerant direct GET instead of the OpenAI SDK's typed
-      // `models.list()`. Local servers (llama.cpp / LM Studio / vLLM) return
-      // non-standard `/v1/models` payloads — an extra `models` array, filesystem
-      // path ids (`C:\…\model.gguf`) — that can make the SDK's typed pagination
-      // throw, which previously surfaced as a misleading "endpoint unreachable".
-      // A plain fetch + lenient parse is robust and reports the real HTTP error.
       async listModels() {
-        const res = await fetch(this.modelsUrl(), { headers: this.authHeaders() });
+        const res = await nodeHttpFetch(this.modelsUrl(), { headers: this.authHeaders() });
         if (!res.ok) throw new Error(`models endpoint ${this.modelsUrl()} returned HTTP ${res.status}`);
         const body = await res.json();
         const raw = Array.isArray(body?.data) ? body.data : Array.isArray(body?.models) ? body.models : [];
@@ -1503,7 +1567,7 @@ var init_openai_compatible = __esm({
       }
       async isAvailable() {
         try {
-          const res = await fetch(this.modelsUrl(), { headers: this.authHeaders() });
+          const res = await nodeHttpFetch(this.modelsUrl(), { headers: this.authHeaders() });
           return res.ok;
         } catch {
           return false;
@@ -8927,7 +8991,7 @@ var SsrfBlockedError = class extends Error {
   }
 };
 var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-var MAX_REDIRECTS = 5;
+var MAX_REDIRECTS2 = 5;
 function allowLocal() {
   return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
 }
@@ -8995,7 +9059,7 @@ async function assertPublicUrl(rawUrl) {
 }
 async function safeFetch(rawUrl, init = {}) {
   let currentUrl = (await assertPublicUrl(rawUrl)).toString();
-  for (let i = 0; i <= MAX_REDIRECTS; i++) {
+  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
     const resp = await fetch(currentUrl, { ...init, redirect: "manual" });
     if (resp.status < 300 || resp.status >= 400) return resp;
     const location = resp.headers.get("location");
@@ -9004,7 +9068,7 @@ async function safeFetch(rawUrl, init = {}) {
     await assertPublicUrl(next.toString());
     currentUrl = next.toString();
   }
-  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS}).`);
+  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
 }
 
 // src/tools/web-fetch.ts