cascade-ai 0.12.18 → 0.12.19

package/dist/cli.js

@@ -4,6 +4,7 @@ import { GoogleGenAI, HarmBlockThreshold, HarmCategory } from '@google/genai';
 import dns from 'dns';
 import http, { createServer } from 'http';
 import https from 'https';
+import zlib from 'zlib';
 import { Readable } from 'stream';
 import { render, Box, Text, useStdout, useApp, useInput, Static } from 'ink';
 import { Command } from 'commander';
@@ -57,7 +58,7 @@ var __export = (target, all) => {
 var CASCADE_VERSION, CASCADE_CONFIG_FILE, CASCADE_DB_FILE, CASCADE_DASHBOARD_SECRET_FILE, GLOBAL_CONFIG_DIR, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, DEFAULT_DASHBOARD_PORT, DEFAULT_CONTEXT_LIMIT, DEFAULT_AUTO_SUMMARIZE_AT, MODELS, T1_MODEL_PRIORITY, T2_MODEL_PRIORITY, T3_MODEL_PRIORITY, VISION_MODEL_PRIORITY, COMPLEXITY_T2_COUNT, THEME_NAMES, DEFAULT_THEME, OLLAMA_BASE_URL, LM_STUDIO_BASE_URL, AZURE_BASE_URL_TEMPLATE, TOOL_NAMES, DEFAULT_APPROVAL_REQUIRED;
 var init_constants = __esm({
   "src/constants.ts"() {
-    CASCADE_VERSION = "0.12.18";
+    CASCADE_VERSION = "0.12.19";
     CASCADE_CONFIG_FILE = ".cascade/config.json";
     CASCADE_DB_FILE = ".cascade/memory.db";
     CASCADE_DASHBOARD_SECRET_FILE = ".cascade/dashboard-secret";
@@ -1167,9 +1168,9 @@ function preferIpv4Host(url) {
   if (!url) return url;
   return url.replace(/^(https?:\/\/)localhost(?=[:/]|$)/i, "$1127.0.0.1");
 }
-async function nodeHttpFetch(input, init = {}) {
+async function nodeHttpFetch(input, init = {}, redirectCount = 0) {
   const urlStr = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
-  const u = new URL(urlStr);
+  const u = new URL(preferIpv4Host(urlStr) ?? urlStr);
   const lib = u.protocol === "https:" ? https : http;
   const method = (init.method ?? "GET").toUpperCase();
   const headers = {};
@@ -1179,6 +1180,9 @@ async function nodeHttpFetch(input, init = {}) {
   });
   else if (Array.isArray(h)) for (const [k, v] of h) headers[k] = v;
   else if (h) Object.assign(headers, h);
+  if (!Object.keys(headers).some((k) => k.toLowerCase() === "accept-encoding")) {
+    headers["accept-encoding"] = "gzip, deflate, br";
+  }
   const body = init.body == null ? void 0 : typeof init.body === "string" ? init.body : Buffer.from(init.body);
   return new Promise((resolve, reject) => {
     const req = lib.request(
@@ -1190,14 +1194,30 @@ async function nodeHttpFetch(input, init = {}) {
         headers
       },
       (res) => {
-        const stream = Readable.toWeb(res);
+        const status = res.statusCode ?? 200;
+        const location = res.headers.location;
+        if (status >= 300 && status < 400 && location && redirectCount < MAX_REDIRECTS) {
+          res.resume();
+          const nextUrl = new URL(location, u).href;
+          const downgrade = status === 303 || (status === 301 || status === 302) && method !== "GET" && method !== "HEAD";
+          const nextInit = downgrade ? { ...init, method: "GET", body: void 0 } : init;
+          resolve(nodeHttpFetch(nextUrl, nextInit, redirectCount + 1));
+          return;
+        }
+        const encoding = (res.headers["content-encoding"] ?? "").toLowerCase();
+        let bodyStream = res;
+        if (encoding === "gzip" || encoding === "x-gzip") bodyStream = res.pipe(zlib.createGunzip());
+        else if (encoding === "deflate") bodyStream = res.pipe(zlib.createInflate());
+        else if (encoding === "br") bodyStream = res.pipe(zlib.createBrotliDecompress());
+        const stream = Readable.toWeb(bodyStream);
         const respHeaders = new Headers();
         for (const [k, v] of Object.entries(res.headers)) {
+          if (k === "content-encoding" || k === "content-length") continue;
           if (Array.isArray(v)) respHeaders.set(k, v.join(", "));
           else if (typeof v === "string") respHeaders.set(k, v);
         }
         resolve(new Response(stream, {
-          status: res.statusCode ?? 200,
+          status,
           statusText: res.statusMessage ?? "",
           headers: respHeaders
         }));
@@ -1209,12 +1229,14 @@ async function nodeHttpFetch(input, init = {}) {
     req.end();
   });
 }
+var MAX_REDIRECTS;
 var init_net = __esm({
   "src/utils/net.ts"() {
     try {
       dns.setDefaultResultOrder("ipv4first");
     } catch {
     }
+    MAX_REDIRECTS = 5;
   }
 });
 
@@ -8918,7 +8940,7 @@ var SsrfBlockedError = class extends Error {
   }
 };
 var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-var MAX_REDIRECTS = 5;
+var MAX_REDIRECTS2 = 5;
 function allowLocal() {
   return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
 }
@@ -8986,7 +9008,7 @@ async function assertPublicUrl(rawUrl) {
 }
 async function safeFetch(rawUrl, init = {}) {
   let currentUrl = (await assertPublicUrl(rawUrl)).toString();
-  for (let i = 0; i <= MAX_REDIRECTS; i++) {
+  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
     const resp = await fetch(currentUrl, { ...init, redirect: "manual" });
     if (resp.status < 300 || resp.status >= 400) return resp;
     const location = resp.headers.get("location");
@@ -8995,7 +9017,7 @@ async function safeFetch(rawUrl, init = {}) {
     await assertPublicUrl(next.toString());
     currentUrl = next.toString();
   }
-  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS}).`);
+  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
 }
 
 // src/tools/web-fetch.ts