hyperframes 0.8.163 → 0.8.164

package/dist/{capture-JFFYE7XM.js → capture-PR52XOEQ.js}

@@ -116,7 +116,7 @@ var capture_default = defineCommand({
   // fallow-ignore-next-line complexity
   async run({ args }) {
     if (args.video) {
-      const { runVideoMode } = await import("./video-62JJK3XL.js");
+      const { runVideoMode } = await import("./video-LNLD2PKZ.js");
       await runVideoMode({
         project: args.video,
         index: args.index ?? null,
@@ -173,7 +173,7 @@ var capture_default = defineCommand({
       }
       console.log();
     }
-    const { captureWebsite } = await import("./capture-TKWJBFGC.js");
+    const { captureWebsite } = await import("./capture-KSXWVLT7.js");
     let captureFailed = false;
     try {
       const result = await captureWebsite(

package/dist/{catalog-LK5MNUQY.js → catalog-W3AG6ISP.js}

@@ -6,8 +6,8 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   runAdd
-} from "./chunk-WMXOKTGO.js";
-import "./chunk-M4237QMQ.js";
+} from "./chunk-UH4IL4K4.js";
+import "./chunk-HYRDV7AL.js";
 import {
   DEFAULT_PROJECT_CONFIG,
   loadProjectConfig
@@ -25,8 +25,8 @@ import {
 import "./chunk-AWDFDFI3.js";
 import "./chunk-P6LJ4Y32.js";
 import "./chunk-GMECXFAN.js";
-import "./chunk-HQMWZNO2.js";
-import "./chunk-2XIPB4MP.js";
+import "./chunk-36CWAWB7.js";
+import "./chunk-VEAKQW4X.js";
 import "./chunk-VWG7OQKU.js";
 import "./chunk-QWQ6GQTI.js";
 import {
@@ -54,7 +54,7 @@ import {
   isAttendedTerminal
 } from "./chunk-WERLJGIC.js";
 import "./chunk-ISN5GRYI.js";
-import "./chunk-VG3ZMY2H.js";
+import "./chunk-G3QMPIFG.js";
 import {
   installedOptionalPackageVersion,
   loadInstalledOptionalPackage,

package/dist/{catch-up-ISTWIF6K.js → catch-up-JLZUALKW.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   resolveProject
-} from "./chunk-NU4PDQ6G.js";
+} from "./chunk-PRZDWAH3.js";
 import "./chunk-K2FLNJVB.js";
 import {
   filesChangedSince,
@@ -14,8 +14,8 @@ import {
   readSeen,
   unseenTurns
 } from "./chunk-DCAI5DBR.js";
-import "./chunk-HQMWZNO2.js";
-import "./chunk-2XIPB4MP.js";
+import "./chunk-36CWAWB7.js";
+import "./chunk-VEAKQW4X.js";
 import "./chunk-VWG7OQKU.js";
 import "./chunk-QWQ6GQTI.js";
 import {
@@ -30,7 +30,7 @@ import "./chunk-K4WIOZFP.js";
 import "./chunk-XUXGIA7H.js";
 import "./chunk-WERLJGIC.js";
 import "./chunk-ISN5GRYI.js";
-import "./chunk-VG3ZMY2H.js";
+import "./chunk-G3QMPIFG.js";
 import "./chunk-EOVYQ3IG.js";
 import "./chunk-XT6MXC7A.js";
 import "./chunk-JYVGYKXG.js";

package/dist/{check-YVEBXKNY.js → check-PGH3VCIR.js}

@@ -20,15 +20,15 @@ import {
 } from "./chunk-QABAVWEX.js";
 import {
   captureArtifactRevision
-} from "./chunk-JYR3YAAK.js";
-import "./chunk-LHETZ63N.js";
+} from "./chunk-KR3M4GKH.js";
+import "./chunk-WZSWLCEH.js";
 import "./chunk-X7MTZ4T2.js";
 import {
   loadProducer
 } from "./chunk-ULAB77ZO.js";
 import {
   trackLintRun
-} from "./chunk-WJVDUUH2.js";
+} from "./chunk-GJOW6ZFW.js";
 import {
   assertionTargets,
   buildLayoutSampleTimes,
@@ -47,18 +47,18 @@ import {
   mergeSampleTimes,
   parseAt,
   readMotionSpec
-} from "./chunk-54E2ELUA.js";
-import "./chunk-QXAXCRK5.js";
+} from "./chunk-XYDPJ3CQ.js";
+import "./chunk-UF45OJ3N.js";
 import {
   BrowserCleanupError,
   closeManagedBrowser
-} from "./chunk-2ALJMIFW.js";
+} from "./chunk-57SASPYR.js";
 import "./chunk-FH7WODJH.js";
 import "./chunk-H3JGPRWA.js";
 import "./chunk-WPNE5NEP.js";
 import {
   resolveProject
-} from "./chunk-NU4PDQ6G.js";
+} from "./chunk-PRZDWAH3.js";
 import "./chunk-K2FLNJVB.js";
 import "./chunk-AXATVUCD.js";
 import "./chunk-X7MTZ4T2.js";
@@ -92,8 +92,8 @@ import "./chunk-5CS4T6C6.js";
 import {
   trackCheckReport,
   trackCommandFailure
-} from "./chunk-HQMWZNO2.js";
-import "./chunk-2XIPB4MP.js";
+} from "./chunk-36CWAWB7.js";
+import "./chunk-VEAKQW4X.js";
 import "./chunk-VWG7OQKU.js";
 import "./chunk-QWQ6GQTI.js";
 import {
@@ -118,12 +118,12 @@ import "./chunk-TJSTGSAW.js";
 import "./chunk-Q5X2B5WT.js";
 import {
   withMeta
-} from "./chunk-Z6P5OVCF.js";
+} from "./chunk-56RENSU4.js";
 import "./chunk-K4WIOZFP.js";
 import "./chunk-XUXGIA7H.js";
 import "./chunk-WERLJGIC.js";
 import "./chunk-ISN5GRYI.js";
-import "./chunk-VG3ZMY2H.js";
+import "./chunk-G3QMPIFG.js";
 import "./chunk-EOVYQ3IG.js";
 import "./chunk-XT6MXC7A.js";
 import {
@@ -1555,7 +1555,7 @@ function resolveMotionSpec(projectDir) {
   };
 }
 async function runBrowserCheck(project, options, motion, deadline) {
-  const module = await import("./checkBrowser-OJAXYTRD.js");
+  const module = await import("./checkBrowser-MNJBUCZD.js");
   return module.runBrowserCheck(project, options, motion, runAuditGrid, deadline);
 }
 async function writeSnapshot(projectDir, index, time, pngBase64) {
@@ -1567,7 +1567,7 @@ async function writeSnapshot(projectDir, index, time, pngBase64) {
   return relative(projectDir, path);
 }
 async function captureFindingCrops(project, options, requests, deadline) {
-  const module = await import("./checkBrowser-OJAXYTRD.js");
+  const module = await import("./checkBrowser-MNJBUCZD.js");
   return module.captureFindingCrops(project, options, requests, deadline);
 }
 var DEFAULT_DEPENDENCIES2 = {

package/dist/{checkBrowser-OJAXYTRD.js → checkBrowser-MNJBUCZD.js}

@@ -8,7 +8,7 @@ import {
   auditClipDurations,
   shouldIgnoreHttpError,
   shouldIgnoreRequestFailure
-} from "./chunk-ZVOCFUPA.js";
+} from "./chunk-WE5X5AKF.js";
 import {
   checkSnapshotDirectory,
   rectToBbox
@@ -17,7 +17,7 @@ import "./chunk-X7MTZ4T2.js";
 import {
   ambiguousIssue,
   loadBrowserScript
-} from "./chunk-54E2ELUA.js";
+} from "./chunk-XYDPJ3CQ.js";
 import {
   AUDIT_SEEK_OPTIONS,
   DEFAULT_ZOOM_PADDING_PX,
@@ -29,15 +29,15 @@ import {
   resolveCliChromeGpuMode,
   seekCompositionTimeline,
   waitForPreferredSeekTarget
-} from "./chunk-QXAXCRK5.js";
+} from "./chunk-UF45OJ3N.js";
 import {
   BrowserCleanupError,
   closeManagedBrowser
-} from "./chunk-2ALJMIFW.js";
+} from "./chunk-57SASPYR.js";
 import "./chunk-FH7WODJH.js";
 import "./chunk-H3JGPRWA.js";
 import "./chunk-WPNE5NEP.js";
-import "./chunk-NU4PDQ6G.js";
+import "./chunk-PRZDWAH3.js";
 import "./chunk-K2FLNJVB.js";
 import {
   serveStaticProjectHtml
@@ -73,8 +73,8 @@ import "./chunk-AWDFDFI3.js";
 import "./chunk-P6LJ4Y32.js";
 import "./chunk-GMECXFAN.js";
 import "./chunk-5CS4T6C6.js";
-import "./chunk-HQMWZNO2.js";
-import "./chunk-2XIPB4MP.js";
+import "./chunk-36CWAWB7.js";
+import "./chunk-VEAKQW4X.js";
 import "./chunk-VWG7OQKU.js";
 import "./chunk-QWQ6GQTI.js";
 import "./chunk-S3S4TGEH.js";
@@ -84,12 +84,12 @@ import "./chunk-ZTZA4UWZ.js";
 import "./chunk-KLIKCX6Q.js";
 import "./chunk-EOOEC32M.js";
 import "./chunk-TJSTGSAW.js";
-import "./chunk-Z6P5OVCF.js";
+import "./chunk-56RENSU4.js";
 import "./chunk-K4WIOZFP.js";
 import "./chunk-XUXGIA7H.js";
 import "./chunk-WERLJGIC.js";
 import "./chunk-ISN5GRYI.js";
-import "./chunk-VG3ZMY2H.js";
+import "./chunk-G3QMPIFG.js";
 import "./chunk-EOVYQ3IG.js";
 import "./chunk-XT6MXC7A.js";
 import "./chunk-A356JY2J.js";

package/dist/{chunk-HQMWZNO2.js → chunk-36CWAWB7.js}

@@ -8,7 +8,7 @@ import {
   flush,
   shouldTrack,
   trackEvent
-} from "./chunk-2XIPB4MP.js";
+} from "./chunk-VEAKQW4X.js";
 import {
   getPowerState
 } from "./chunk-QWQ6GQTI.js";

package/dist/{chunk-OGGPNDGO.js → chunk-3XJVN7MR.js}

@@ -20,7 +20,7 @@ import {
   typeDirPath,
   updateRecord,
   withFigmaErrors
-} from "./chunk-OZUYK6IS.js";
+} from "./chunk-FTFWZHTZ.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";
@@ -229,7 +229,7 @@ var asset_default = defineCommand({
           rendered > 0 ? `(${results.length} nodes, ${rendered} rendered in 1 figma request)` : `(${results.length} nodes, all reused from cache \u2014 no figma request)`
         );
       }
-      const { trackFigmaImport } = await import("./telemetry-4G6CD3X7.js");
+      const { trackFigmaImport } = await import("./telemetry-ASFTF5YV.js");
       trackFigmaImport({
         phase: "asset",
         reused: results.every((r) => r.reused),

package/dist/{chunk-Z6P5OVCF.js → chunk-56RENSU4.js}

@@ -17,7 +17,7 @@ import {
 } from "./chunk-ISN5GRYI.js";
 import {
   VERSION
-} from "./chunk-VG3ZMY2H.js";
+} from "./chunk-G3QMPIFG.js";
 
 // src/utils/updateCheck.ts
 import { existsSync, readFileSync } from "fs";

package/dist/{chunk-2ALJMIFW.js → chunk-57SASPYR.js}

@@ -23,6 +23,7 @@ var BrowserCleanupError = class extends AggregateError {
 var browsers = /* @__PURE__ */ new Set();
 var closing = /* @__PURE__ */ new WeakMap();
 var pending = /* @__PURE__ */ new Map();
+var sessionCleanups = /* @__PURE__ */ new Set();
 var CLOSE_GRACE_MS = 1e3;
 var EXIT_POLL_MS = 50;
 var listening = false;
@@ -90,7 +91,16 @@ async function launchManagedBrowser(puppeteer, options) {
 async function closeManagedBrowsers() {
   for (const abort of pending.values()) abort.abort();
   await Promise.allSettled(pending.keys());
-  await Promise.all([...browsers].map(closeManagedBrowser));
+  const results = await Promise.allSettled([...browsers].map(closeManagedBrowser));
+  results.push(...await Promise.allSettled([...sessionCleanups].map((cleanup) => cleanup())));
+  const errors = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+  if (errors.length) throw new AggregateError(errors, "Browser session shutdown failed.");
+}
+function registerBrowserSessionCleanup(cleanup) {
+  if (shutdown) throw new Error("The CLI is stopping; no browser session can start.");
+  ownSignals();
+  sessionCleanups.add(cleanup);
+  return () => sessionCleanups.delete(cleanup);
 }
 function closeManagedBrowser(browser) {
   const existing = closing.get(browser);
@@ -151,6 +161,7 @@ export {
   BrowserCleanupError,
   resolveManagedGpuMode,
   launchManagedBrowser,
+  registerBrowserSessionCleanup,
   closeManagedBrowser,
   rethrowAfterBrowserCleanup
 };

package/dist/{chunk-NGKM64BP.js → chunk-5CTORVUM.js}

@@ -9,6 +9,18 @@ import {
 } from "./chunk-IGLEPPTN.js";
 
 // src/utils/dotEnv.ts
+var CAPTURE_ENV_KEYS = [
+  "OPENROUTER_API_KEY",
+  "GEMINI_API_KEY",
+  "GOOGLE_API_KEY",
+  "HYPERFRAMES_VERTEX_PROJECT_ID",
+  "HYPERFRAMES_VERTEX_SERVICE_ACCOUNT",
+  "HYPERFRAMES_VERTEX_LOCATION",
+  "HYPERFRAMES_VERTEX_MODEL",
+  "HYPERFRAMES_OPENROUTER_MODEL",
+  "HYPERFRAMES_GEMINI_MODEL",
+  "HYPERFRAMES_VISION_TIMEOUT_MS"
+];
 function valueOf(raw) {
   const quote = raw.charAt(0);
   if (quote === '"' || quote === "'") {
@@ -26,14 +38,17 @@ function entryOf(rawLine) {
   if (eq < 1) return null;
   return [line.slice(0, eq).trim(), valueOf(line.slice(eq + 1).trim())];
 }
-function applyDotEnv(content, env) {
+function applyDotEnv(content, env, allowedKeys) {
+  const allowed = allowedKeys === void 0 ? void 0 : new Set(allowedKeys);
   for (const entry of content.split("\n").map(entryOf)) {
     if (!entry) continue;
     const [key, value] = entry;
-    if (key && key.toUpperCase() !== FEEDBACK_EMAIL_ENV && !(key in env)) env[key] = value;
+    if (key && key.toUpperCase() !== FEEDBACK_EMAIL_ENV && (allowed === void 0 || allowed.has(key)) && !(key in env))
+      env[key] = value;
   }
 }
 
 export {
+  CAPTURE_ENV_KEYS,
   applyDotEnv
 };

package/dist/{chunk-SQN7N27A.js → chunk-6DJLEE74.js}

@@ -32,14 +32,14 @@ import {
 import {
   getUpdateMeta,
   withMeta
-} from "./chunk-Z6P5OVCF.js";
+} from "./chunk-56RENSU4.js";
 import {
   CONFIG_PATH,
   withFileLock
 } from "./chunk-XUXGIA7H.js";
 import {
   VERSION
-} from "./chunk-VG3ZMY2H.js";
+} from "./chunk-G3QMPIFG.js";
 import {
   OPTIONAL_PACKAGES,
   installedOptionalPackageVersion

package/dist/{chunk-OZUYK6IS.js → chunk-FTFWZHTZ.js}

@@ -1278,7 +1278,7 @@ async function withFigmaErrors(command, fn) {
   } catch (err) {
     if (err instanceof Error) {
       try {
-        const { trackCommandFailure } = await import("./events-ZQFIOH5Z.js");
+        const { trackCommandFailure } = await import("./events-FDHKA6NV.js");
         trackCommandFailure(
           command,
           err,

package/dist/{chunk-VG3ZMY2H.js → chunk-G3QMPIFG.js}

@@ -6,8 +6,8 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 
 // src/version.ts
-var VERSION = true ? "0.8.163" : "0.0.0-dev";
-var PRODUCER_VERSION = true ? "0.8.163" : "0.0.0-dev";
+var VERSION = true ? "0.8.164" : "0.0.0-dev";
+var PRODUCER_VERSION = true ? "0.8.164" : "0.0.0-dev";
 
 export {
   VERSION,

package/dist/{chunk-WJVDUUH2.js → chunk-GJOW6ZFW.js}

@@ -7,10 +7,10 @@ var __dirname = __hf_dirname(__filename);
 import {
   trackLintReport,
   trackLintRuleStreak
-} from "./chunk-HQMWZNO2.js";
+} from "./chunk-36CWAWB7.js";
 import {
   shouldTrack
-} from "./chunk-2XIPB4MP.js";
+} from "./chunk-VEAKQW4X.js";
 import {
   LINT_RULE_COUNT,
   LINT_RULE_GROUP_COUNTS

package/dist/{chunk-M4237QMQ.js → chunk-HYRDV7AL.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   VERSION
-} from "./chunk-VG3ZMY2H.js";
+} from "./chunk-G3QMPIFG.js";
 
 // src/registry/compatibility.ts
 import { compareVersions } from "compare-versions";

package/dist/{chunk-JYR3YAAK.js → chunk-KR3M4GKH.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   withOwner
-} from "./chunk-LHETZ63N.js";
+} from "./chunk-WZSWLCEH.js";
 import {
   beginArtifactCapture
 } from "./chunk-JGYHWVXQ.js";

package/dist/{chunk-23IS5QVP.js → chunk-NOVAH7N4.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   shouldTrack
-} from "./chunk-2XIPB4MP.js";
+} from "./chunk-VEAKQW4X.js";
 
 // src/telemetry/renderObservability.ts
 function renderObservabilityTelemetryPayload(observability) {

package/dist/{chunk-NU4PDQ6G.js → chunk-PRZDWAH3.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-K2FLNJVB.js";
 import {
   trackCommandFailure
-} from "./chunk-HQMWZNO2.js";
+} from "./chunk-36CWAWB7.js";
 import {
   failCommand
 } from "./chunk-PBN6GBJE.js";

package/dist/{chunk-TQMJKZS5.js → chunk-Q4XFXAQ3.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   updateNoticesSuppressed
-} from "./chunk-Z6P5OVCF.js";
+} from "./chunk-56RENSU4.js";
 import {
   hostAnswers
 } from "./chunk-K4WIOZFP.js";

package/dist/{chunk-OFD2XWIQ.js → chunk-SYOB5Y35.js}

@@ -23,6 +23,180 @@ import {
 // src/capture/userAgent.ts
 var CAPTURE_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36";
 
+// src/capture/publicNetwork.ts
+import { lookup } from "dns/promises";
+import { isIP } from "net";
+import { request as httpRequest } from "http";
+import { request as httpsRequest } from "https";
+function ipv4Number(address) {
+  return address.split(".").reduce((value, octet) => value * 256 + Number(octet), 0);
+}
+var NON_PUBLIC_IPV4 = [
+  ["0.0.0.0", 8],
+  ["10.0.0.0", 8],
+  ["100.64.0.0", 10],
+  ["127.0.0.0", 8],
+  ["169.254.0.0", 16],
+  ["172.16.0.0", 12],
+  ["192.0.0.0", 16],
+  ["192.88.99.0", 24],
+  ["192.168.0.0", 16],
+  ["198.18.0.0", 15],
+  ["198.51.100.0", 24],
+  ["203.0.113.0", 24],
+  ["224.0.0.0", 3]
+];
+var NON_PUBLIC_RANGES = NON_PUBLIC_IPV4.map(([network, prefix]) => ({
+  start: ipv4Number(network),
+  end: ipv4Number(network) + 2 ** (32 - prefix)
+}));
+function isPublicIPv4(address) {
+  if (isIP(address) !== 4) return false;
+  const value = ipv4Number(address);
+  return !NON_PUBLIC_RANGES.some(({ start, end }) => value >= start && value < end);
+}
+async function resolvePublicAddress(hostname) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  if (isIP(host) === 4) {
+    if (!isPublicIPv4(host)) throw new Error("Capture requires a public IPv4 address");
+    return host;
+  }
+  if (!host.includes(".") || !/^[a-z0-9.-]+$/.test(host) || /(?:^|\.)(?:localhost|local|internal|home|lan|test|invalid|example)$/.test(host) || host.split(".").some((label) => !label || label.startsWith("-") || label.endsWith("-"))) {
+    throw new Error("Capture requires a public hostname");
+  }
+  let timer;
+  try {
+    const answers = await Promise.race([
+      lookup(host, { all: true, family: 4, verbatim: true }),
+      new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(new Error("Capture DNS timed out")), 1e4);
+        timer.unref();
+      })
+    ]);
+    if (!answers[0] || answers.some((answer) => answer.family !== 4 || !isPublicIPv4(answer.address))) {
+      throw new Error("Capture DNS returned a non-public address");
+    }
+    const first = answers[0];
+    if (!first) throw new Error("Capture DNS returned no address");
+    return first.address;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function publicRequest(url, init = {}) {
+  const target = new URL(url);
+  if (!["http:", "https:"].includes(target.protocol) || target.username || target.password) {
+    throw new Error("Capture requires an HTTP(S) URL without credentials");
+  }
+  const method = (init.method ?? "GET").toUpperCase();
+  if (!["GET", "HEAD"].includes(method) || init.body != null) {
+    throw new Error("Capture asset requests support only GET and HEAD without a body");
+  }
+  const signal = init.signal ?? AbortSignal.timeout(3e4);
+  signal.throwIfAborted();
+  const address = await new Promise((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    resolvePublicAddress(target.hostname).then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+  signal.throwIfAborted();
+  const headers = new Headers(init.headers);
+  for (const name of [
+    "connection",
+    "proxy-authorization",
+    "proxy-connection",
+    "transfer-encoding",
+    "upgrade",
+    "content-length"
+  ])
+    headers.delete(name);
+  headers.set("host", target.host);
+  headers.set("accept-encoding", "identity");
+  return new Promise((resolve, reject) => {
+    const request = target.protocol === "https:" ? httpsRequest : httpRequest;
+    const req = request(
+      {
+        protocol: target.protocol,
+        hostname: address,
+        port: target.port || void 0,
+        path: `${target.pathname}${target.search}`,
+        method,
+        headers: Object.fromEntries(headers),
+        agent: false,
+        servername: target.hostname,
+        rejectUnauthorized: true,
+        signal
+      },
+      (incoming) => {
+        try {
+          resolve(assetResponse(incoming, req, method));
+        } catch (error) {
+          incoming.destroy();
+          reject(error);
+        }
+      }
+    );
+    req.once("error", reject);
+    req.end();
+  });
+}
+function responseHeaders(incoming) {
+  const headers = new Headers();
+  for (const [name, value] of Object.entries(incoming.headers)) {
+    if (value === void 0) continue;
+    for (const item of Array.isArray(value) ? value : [value]) headers.append(name, item);
+  }
+  return headers;
+}
+function assetResponse(incoming, req, method) {
+  incoming.on("error", () => {
+  });
+  const headers = responseHeaders(incoming);
+  const encoding = headers.get("content-encoding")?.toLowerCase();
+  if (encoding && encoding !== "identity") {
+    throw new Error("Capture server ignored identity content encoding");
+  }
+  const status = incoming.statusCode ?? 502;
+  if (method === "HEAD" || [204, 205, 304].includes(status)) {
+    incoming.resume();
+    return new Response(null, { status, headers });
+  }
+  return new Response(responseBody(incoming, req), { status, headers });
+}
+function responseBody(incoming, req) {
+  let finished = false;
+  return new ReadableStream({
+    start(controller) {
+      incoming.on("data", (chunk) => {
+        if (finished) return;
+        controller.enqueue(chunk);
+        incoming.pause();
+      });
+      incoming.once("end", () => {
+        if (finished) return;
+        finished = true;
+        controller.close();
+      });
+      const fail = (error) => {
+        if (finished) return;
+        finished = true;
+        controller.error(error);
+      };
+      incoming.once("error", fail);
+      incoming.once("aborted", () => fail(new Error("Capture response aborted")));
+      incoming.pause();
+    },
+    pull() {
+      incoming.resume();
+    },
+    cancel() {
+      finished = true;
+      incoming.destroy();
+      req.destroy();
+    }
+  });
+}
+
 // src/capture/assetDownloader.ts
 import { join, extname } from "path";
 import { createHash as createHash2 } from "crypto";
@@ -781,10 +955,12 @@ async function safeFetch(url, init) {
   let current = url;
   for (let hop = 0; hop <= MAX_FETCH_REDIRECTS; hop++) {
     if (isPrivateUrl(current)) return null;
-    const res = await fetch(current, { ...init, redirect: "manual" });
+    const res = await publicRequest(current, { ...init, redirect: "manual" });
     if (res.status >= 300 && res.status < 400) {
       const loc = res.headers.get("location");
       if (!loc) return res;
+      await res.body?.cancel().catch(() => {
+      });
       try {
         current = new URL(loc, current).toString();
       } catch {
@@ -852,6 +1028,7 @@ function deriveAssetName(parsedUrl, catalog, isPoster, idx, usedNames) {
 }
 
 export {
+  resolvePublicAddress,
   CAPTURE_USER_AGENT,
   noDrops,
   mergeDrops,

package/dist/{chunk-QXAXCRK5.js → chunk-UF45OJ3N.js}

@@ -8,7 +8,7 @@ import {
   launchManagedBrowser,
   resolveManagedGpuMode,
   rethrowAfterBrowserCleanup
-} from "./chunk-2ALJMIFW.js";
+} from "./chunk-57SASPYR.js";
 import {
   resolveCompositionViewportFromHtml
 } from "./chunk-FH7WODJH.js";

package/dist/{chunk-WMXOKTGO.js → chunk-UH4IL4K4.js}

@@ -7,7 +7,7 @@ var __dirname = __hf_dirname(__filename);
 import {
   RegistryCompatibilityError,
   gateRegistryItemsCompatibility
-} from "./chunk-M4237QMQ.js";
+} from "./chunk-HYRDV7AL.js";
 import {
   DEFAULT_PROJECT_CONFIG,
   createProjectConfig,
@@ -29,7 +29,7 @@ import {
 } from "./chunk-H45RC6HN.js";
 import {
   trackRegistryItemAdded
-} from "./chunk-HQMWZNO2.js";
+} from "./chunk-36CWAWB7.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";