github-router 0.3.126 → 0.3.129

package/dist/{peer-mcp-personas-Be4SAgm0.js → peer-mcp-personas-B1Oqydxt.js}

@@ -13,6 +13,7 @@ import process$1 from "node:process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
 import { chmodSync, closeSync, cpSync, existsSync, mkdirSync, openSync, promises, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 import { fileURLToPath } from "node:url";
+import { Agent } from "undici";
 import { performance } from "node:perf_hooks";
 import { createInterface } from "node:readline";
 import Parser from "web-tree-sitter";
@@ -1631,6 +1632,21 @@ function createTunnelTokenProvider(runner = realDevtunnelRunner()) {
 
 //#endregion
 //#region src/lib/fleet/client.ts
+const IS_BUN = typeof globalThis.Bun !== "undefined";
+let sharedInsecureDispatcher;
+function insecureDispatcher() {
+	return sharedInsecureDispatcher ??= new Agent({ connect: { rejectUnauthorized: false } });
+}
+/**
+* Attach the runtime-correct TLS-verification-off mechanism to a fetch init for a
+* single self-signed direct-HTTPS instance: Bun → `tls`, Node → an undici
+* `dispatcher`. Exported so BOTH runtime branches are unit-testable under one
+* interpreter (the untested Node branch is exactly what shipped broken).
+*/
+function applyInsecureTls(init, isBun = IS_BUN) {
+	if (isBun) init.tls = { rejectUnauthorized: false };
+	else init.dispatcher = insecureDispatcher();
+}
 var FleetError = class extends Error {
 	code;
 	retryable;
@@ -1667,6 +1683,7 @@ var FleetClient = class {
 	fetchFn;
 	getTunnelToken;
 	onTunnelAuthInvalidate;
+	insecureTLS;
 	constructor(options) {
 		this.baseUrl = options.url.replace(/\/+$/, "");
 		this.origin = new URL(this.baseUrl).origin;
@@ -1674,6 +1691,7 @@ var FleetClient = class {
 		this.fetchFn = options.fetchFn ?? globalThis.fetch.bind(globalThis);
 		this.getTunnelToken = options.getTunnelToken;
 		this.onTunnelAuthInvalidate = options.onTunnelAuthInvalidate;
+		this.insecureTLS = options.insecureTLS === true;
 	}
 	capabilities(signal) {
 		return this.request("GET", "/api/control/capabilities", void 0, void 0, signal);
@@ -1770,13 +1788,15 @@ var FleetClient = class {
 			};
 			let response;
 			try {
-				response = await this.fetchFn(url.toString(), {
+				const init = {
 					method,
 					headers,
 					body: body === void 0 ? void 0 : JSON.stringify(body),
 					redirect: "error",
 					signal
-				});
+				};
+				if (this.insecureTLS) applyInsecureTls(init);
+				response = await this.fetchFn(url.toString(), init);
 			} catch (err) {
 				if (canRetry && method === "GET") {
 					this.onTunnelAuthInvalidate();
@@ -2057,6 +2077,12 @@ function parseInstance(raw) {
 	if (typeof token !== "string" || token === "") throw new FleetRegistryError("INVALID_CONFIG", `fleet registry instance ${id} token must be a non-empty string`);
 	const tunnelId = parseTunnelId(id, instance.tunnelId);
 	const tunnelToken = parseTunnelToken(id, instance.tunnelToken);
+	const insecureTLS = parseInsecureTLS(id, instance.insecureTLS);
+	if (insecureTLS) {
+		if (parsedUrl.protocol !== "https:") throw new FleetRegistryError("INVALID_CONFIG", `fleet registry instance ${id} insecureTLS only applies to an https url (an http url has no TLS to relax)`);
+		if (tunnelId !== void 0 || tunnelToken !== void 0) throw new FleetRegistryError("INVALID_CONFIG", `fleet registry instance ${id} insecureTLS must not be combined with a Dev Tunnel (tunnelId/tunnelToken); the relay presents a valid public cert, so disabling verification only exposes the bearer/tunnel token to MITM`);
+		if (!isLocalNetworkHost(parsedUrl.hostname)) throw new FleetRegistryError("INVALID_CONFIG", DEVTUNNEL_HOST_RE.test(parsedUrl.hostname) ? `fleet registry instance ${id} insecureTLS must not be set on a Dev Tunnel host; *.devtunnels.ms presents a valid public cert` : `fleet registry instance ${id} insecureTLS is only allowed for a local-network host (loopback, a private/LAN IP, or a .local name); refusing to disable TLS verification for public host ${parsedUrl.hostname}`);
+	}
 	return {
 		id: id.trim(),
 		label: label.trim(),
@@ -2065,7 +2091,8 @@ function parseInstance(raw) {
 		default: instance.default === true ? true : void 0,
 		allowExec: instance.allowExec === true ? true : void 0,
 		tunnelId,
-		tunnelToken
+		tunnelToken,
+		insecureTLS
 	};
 }
 const TUNNEL_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
@@ -2083,6 +2110,11 @@ function parseTunnelToken(id, raw) {
 	if (t === "" || /\s/.test(t)) throw new FleetRegistryError("INVALID_CONFIG", `fleet registry instance ${id} tunnelToken must be a non-empty single-line token`);
 	return t;
 }
+function parseInsecureTLS(id, raw) {
+	if (raw === void 0) return void 0;
+	if (typeof raw !== "boolean") throw new FleetRegistryError("INVALID_CONFIG", `fleet registry instance ${id} insecureTLS must be a boolean`);
+	return raw === true ? true : void 0;
+}
 function invalidInstanceUrlError(id) {
 	return new FleetRegistryError("INVALID_CONFIG", `${id.trim()} url must be https (or http://localhost for local testing)`);
 }
@@ -2091,6 +2123,36 @@ function isAllowedInstanceUrl(url) {
 	if (url.protocol !== "http:") return false;
 	return url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
 }
+function isLocalNetworkHost(hostnameRaw) {
+	const host = hostnameRaw.replace(/^\[/, "").replace(/\]$/, "").toLowerCase();
+	if (host === "localhost") return true;
+	if (host.endsWith(".local")) return true;
+	const v4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+	if (v4) {
+		const octets = [
+			Number(v4[1]),
+			Number(v4[2]),
+			Number(v4[3]),
+			Number(v4[4])
+		];
+		if (octets.some((o) => o > 255)) return false;
+		const a = octets[0];
+		const b = octets[1];
+		if (a === 127) return true;
+		if (a === 10) return true;
+		if (a === 172 && b >= 16 && b <= 31) return true;
+		if (a === 192 && b === 168) return true;
+		if (a === 169 && b === 254) return true;
+		return false;
+	}
+	if (host.includes(":")) {
+		if (host === "::1") return true;
+		if (/^fe[89ab]/.test(host)) return true;
+		if (/^f[cd]/.test(host)) return true;
+		return false;
+	}
+	return false;
+}
 const DEVTUNNEL_HOST_RE = /(?:^|\.)devtunnels\.ms$|(?:^|\.)tunnels\.api\.visualstudio\.com$/i;
 function assertDevTunnelUrlShape(id, url) {
 	if (!DEVTUNNEL_HOST_RE.test(url.hostname)) return;
@@ -2109,7 +2171,8 @@ function resolvedInstance(instance) {
 		token: instance.token,
 		allowExec: instance.allowExec,
 		tunnelId: instance.tunnelId,
-		tunnelToken: instance.tunnelToken
+		tunnelToken: instance.tunnelToken,
+		insecureTLS: instance.insecureTLS
 	};
 }
 function isObject(value) {
@@ -2158,13 +2221,14 @@ function createFleetTools(options = {}) {
 		return defaultRegistry;
 	}
 	function clientFor(instance) {
-		const key = `${instance.id}\0${instance.url}\0${instance.token}\0${instance.tunnelId ?? ""}\0${instance.tunnelToken ?? ""}`;
+		const key = `${instance.id}\0${instance.url}\0${instance.token}\0${instance.tunnelId ?? ""}\0${instance.tunnelToken ?? ""}\0${instance.insecureTLS === true ? "1" : "0"}`;
 		const existing = clients.get(key);
 		if (existing) return existing;
 		const created = options.createClient ? options.createClient(instance) : new FleetClient({
 			url: instance.url,
 			token: instance.token,
 			fetchFn: options.fetchFn,
+			insecureTLS: instance.insecureTLS,
 			...tunnelClientOptions(instance, tunnelProvider)
 		});
 		clients.set(key, created);
@@ -11975,7 +12039,7 @@ var PendingMessageQueue = class {
 * `Agent` owns the current transcript, emits lifecycle events, executes tools,
 * and exposes queueing APIs for steering and follow-up messages.
 */
-var Agent = class {
+var Agent$1 = class {
 	_state;
 	listeners = /* @__PURE__ */ new Set();
 	steeringQueue;
@@ -18938,7 +19002,7 @@ async function runWorkerAgentOnce(opts) {
 			getMessages,
 			planState
 		});
-		const agent = new Agent({
+		const agent = new Agent$1({
 			initialState: {
 				systemPrompt: systemPromptFor(opts.mode),
 				model: makeModelShim(resolved.modelId),
@@ -22620,4 +22684,4 @@ async function runStandInToolCall(args, signal) {
 
 //#endregion
 export { handleMcpDelete as $, IMPLEMENT_DEFAULT_MODEL as A, setupCopilotToken as At, TOOLBELT_TOOLS$1 as B, sleep as Bt, stopGateEnabledForRepo as C, DEFAULT_PORT as Ct, liveExec as D, pickClaudeDefault as Dt, resolveSealedGate as E, generateRandomPort as Et, availableToolCommands as F, cacheVSCodeVersion as Ft, buildAdvisorStream as G, GITHUB_API_BASE_URL as Gt, searchWeb as H, fetchWithTransientRetry as Ht, buildToolbeltAwareness as I, filterBetaHeader as It, buildOpenAIErrorEvent as J, githubHeaders as Jt, injectAdvisorTool as K, copilotBaseUrl as Kt, toolbeltEnabled as L, isNullish as Lt, appendPlanReminder as M, tryRefreshAndRetry as Mt, runWorkerAgent as N, cacheCopilotVersion as Nt, BROWSE_DEFAULT_MODEL as O, getPackageVersion as Ot, withNoOutputRetry as P, cacheModels as Pt, relayAnthropicStream as Q, toolbeltSkipSet as R, resolveCodexModel as Rt, repoRoot as S, DEFAULT_CODEX_MODEL_FALLBACKS as St, trustRepo as T, UPSTREAM_INACTIVITY_TIMEOUT_MS as Tt, ADVISOR_INTERNAL_TOOL_NAME as U, HTTPError as Ut, assetFor as V, getModels as Vt, ADVISOR_TOOL_INSTRUCTIONS as W, forwardError as Wt, logStreamError as X, isControllerClosedError as Y, state as Yt, readIteratorWithTimeout as Z, fileFindingsStore as _, extractZipMember as _t, buildPeerAwarenessSnippet as a, countTokens as at, isSubagentContext as b, DEFAULT_CLAUDE_MODEL_FALLBACKS as bt, buildStopHookCommand as c, createResponses as ct, fileBlockBudget as d, readResponseBodyCapped as dt, handleMcpPost as et, injectStopHookIntoSettingsFile as f, parseJsonOrDiagnose as ft, fileBaselineStore as g, extractTarGzMember as gt, stopReviewEnabled as h, provisionAndIndexColbert as ht, buildAgentPrompt as i, workerToolsEnabled as it, PLAN_DEFAULT_MODEL as j, setupGitHubToken as jt, DEFAULT_MODEL as k, withInstallLock as kt, captureLaunchBaseline as l, createChatCompletions as lt, stopGateId as m, hasSupportedBrowserInstalled as mt, MCP_GROUPS as n, fleetToolsEnabled as nt, personasFor as o, createMessages as ot, launchBaselineKey as p, provisionBrowserAssets as pt, isAdvisorRequested as q, copilotHeaders as qt, assertMcpToolSurfaceConsistent as r, standInToolEnabled as rt, buildSessionBindHookCommand as s, getTokenCount as st, GROUP_META as t, browserToolsEnabled as tt, decideStopHook as u, MAX_RESPONSE_BODY_BYTES as ut, fileLastPromptStore as v, collapsePathKeys as vt, stopReviewStateDir as w, UPSTREAM_FETCH_TIMEOUT_MS as wt, repoFingerprint as x, DEFAULT_CODEX_MODEL as xt, fileReviewDebounce as y, toolbeltPathOverride as yt, vscodeRipgrepPath as z, resolveModel as zt };
-//# sourceMappingURL=peer-mcp-personas-Be4SAgm0.js.map
+//# sourceMappingURL=peer-mcp-personas-B1Oqydxt.js.map