glimmervoid 0.30.0 → 0.31.0

package/dist/chunks/{loopback-post-C7C22eYi.js → loopback-post-DepQfdcM.js}

@@ -1,14 +1,34 @@
-import "./hook-relay-core-BHfYFnYV.js";
+import { a as isLoopbackHostname } from "./hook-relay-core-DA_bz2KA.js";
+import { n as decideSandboxProxy } from "./sandbox-proxy-core-hnQgKR0T.js";
 import http from "node:http";
 //#region session/loopback-post.ts
 var POST_TIMEOUT_MS = 1500;
-var LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
-	"127.0.0.1",
-	"::1",
-	"[::1]",
-	"localhost"
-]);
-function postToLoopback(url, body) {
+function refusal(reason) {
+	return {
+		reason,
+		responseBody: null
+	};
+}
+function directRoute(target) {
+	return {
+		hostname: target.hostname,
+		port: target.port,
+		path: `${target.pathname}${target.search}`
+	};
+}
+function sandboxProxyRoute(sandboxProxy, target) {
+	const proxyHeaders = sandboxProxy.authorization ? { "proxy-authorization": sandboxProxy.authorization } : {};
+	return {
+		hostname: sandboxProxy.hostname,
+		port: sandboxProxy.port,
+		path: target.href,
+		headers: {
+			...proxyHeaders,
+			host: target.host
+		}
+	};
+}
+function sendPost(route, body) {
 	return new Promise((resolve) => {
 		let settled = false;
 		const done = (reason, responseBody = null) => {
@@ -19,28 +39,12 @@ function postToLoopback(url, body) {
 				responseBody
 			});
 		};
-		let target;
-		try {
-			target = new URL(url);
-		} catch {
-			done("bad-url");
-			return;
-		}
-		if (target.protocol !== "http:") {
-			done("not-http");
-			return;
-		}
-		if (!LOOPBACK_HOSTS.has(target.hostname)) {
-			done("not-loopback");
-			return;
-		}
 		try {
 			const request = http.request({
-				hostname: target.hostname,
-				port: target.port,
-				path: `${target.pathname}${target.search}`,
+				...route,
 				method: "POST",
 				headers: {
+					...route.headers,
 					"content-type": "application/json",
 					"content-length": Buffer.byteLength(body)
 				}
@@ -72,6 +76,16 @@ function postToLoopback(url, body) {
 		}
 	});
 }
+async function postToLoopback(url, body, env = process.env) {
+	if (!URL.canParse(url)) return refusal("bad-url");
+	const target = new URL(url);
+	if (target.protocol !== "http:") return refusal("not-http");
+	if (!isLoopbackHostname(target.hostname)) return refusal("not-loopback");
+	if (env["GLIMMERVOID_HOOK_VIA_SANDBOX_PROXY"] !== "1") return sendPost(directRoute(target), body);
+	const sandboxProxy = decideSandboxProxy(env);
+	if (!sandboxProxy) return refusal("sandbox-proxy-missing");
+	return sendPost(sandboxProxyRoute(sandboxProxy, target), body);
+}
 async function postPayload(url, body) {
 	return (await postToLoopback(url, body)).responseBody;
 }