just-bash 2.12.6 → 2.12.7

package/dist/network/allow-list/shared.d.ts

@@ -39,6 +39,10 @@ export type AdapterFactory = (options: BashOptions) => EnvAdapter | Promise<EnvA
  * Utility for testing that a URL is blocked
  */
 export declare function expectBlocked(env: EnvAdapter, url: string, expectedUrl?: string): Promise<void>;
+/**
+ * Utility for testing that a URL is blocked due to private IP
+ */
+export declare function expectBlockedPrivate(env: EnvAdapter, url: string, expectedUrl?: string): Promise<void>;
 /**
  * Utility for testing that a URL succeeds with expected mock response
  */

package/dist/network/types.d.ts

@@ -57,6 +57,10 @@ export interface NetworkConfig {
      * Reject URLs with private/loopback IP addresses as hostnames.
      * This is a URL/hostname-level check only (no DNS resolution).
      * Useful for mitigating SSRF attacks. Default: false (opt-in).
+     *
+     * When enabled, the private IP check is enforced even when
+     * `dangerouslyAllowFullInternetAccess` is true, ensuring that
+     * internal/loopback addresses are never reachable.
      */
     denyPrivateRanges?: boolean;
 }
@@ -74,7 +78,7 @@ export interface FetchResult {
  * Error thrown when a URL is not allowed
  */
 export declare class NetworkAccessDeniedError extends Error {
-    constructor(url: string);
+    constructor(url: string, reason?: string);
 }
 /**
  * Error thrown when too many redirects occur

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "just-bash",
-  "version": "2.12.6",
+  "version": "2.12.7",
   "description": "A simulated bash environment with virtual filesystem",
   "repository": {
     "type": "git",