lunibee 0.3.0 → 0.3.1

package/dist/core/index.js

@@ -3016,7 +3016,7 @@ class ResourceManager extends Manager {
 // packages/rest/package.json
 var package_default = {
   name: "@lunibee/rest",
-  version: "0.3.0",
+  version: "0.3.1",
   type: "module",
   module: "./src/index.ts",
   types: "./src/index.ts",
@@ -3099,6 +3099,24 @@ function kindFromStatus(status) {
 function redactPath(path) {
   return path.replace(/^(\/webhooks\/[^/?]+\/)[^/?]+/i, "$1:token").replace(/^(\/interactions\/[^/?]+\/)[^/?]+/i, "$1:token");
 }
+var TOKEN_IN_TEXT = /(\/(?:webhooks|interactions)\/[^/\s?"'`]+\/)[^/\s?"'`]+/gi;
+function redactText(text) {
+  return text.replace(TOKEN_IN_TEXT, "$1:token");
+}
+function sanitizeCause(error) {
+  if (!(error instanceof Error))
+    return;
+  const copy = new Error(redactText(error.message));
+  copy.name = error.name;
+  if (error.stack)
+    copy.stack = redactText(error.stack);
+  for (const key of ["code", "errno", "syscall"]) {
+    const value = error[key];
+    if (typeof value === "string" || typeof value === "number")
+      copy[key] = value;
+  }
+  return copy;
+}
 var HINTS = {
   50001: "The bot cannot see this resource: check that it is in the guild and has View Channel there.",
   50013: "The bot lacks a permission for this action, or the target role or member is at or above the bot's highest role."
@@ -3134,14 +3152,19 @@ async function sleep(delay, signal, path) {
   if (delay <= 0)
     return;
   await new Promise((resolve, reject) => {
-    const timer = setTimeout(resolve, delay);
-    const abort = () => {
+    const finish = (error) => {
       clearTimeout(timer);
-      reject(abortError(path, signal?.reason));
+      signal?.removeEventListener("abort", onAbort);
+      if (error)
+        reject(error);
+      else
+        resolve();
     };
+    const onAbort = () => finish(abortError(path, signal?.reason));
+    const timer = setTimeout(finish, delay);
     if (signal?.aborted)
-      return abort();
-    signal?.addEventListener("abort", abort, { once: true });
+      return onAbort();
+    signal?.addEventListener("abort", onAbort, { once: true });
   });
 }
 async function abortable(promise, signal, path) {
@@ -3149,10 +3172,17 @@ async function abortable(promise, signal, path) {
     return promise;
   if (signal.aborted)
     throw abortError(path, signal.reason);
-  return Promise.race([
-    promise,
-    new Promise((_, reject) => signal.addEventListener("abort", () => reject(abortError(path, signal.reason)), { once: true }))
-  ]);
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(abortError(path, signal.reason));
+    signal.addEventListener("abort", onAbort, { once: true });
+    promise.then(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, (error) => {
+      signal.removeEventListener("abort", onAbort);
+      reject(error);
+    });
+  });
 }
 
 // packages/rest/src/route.ts
@@ -3326,6 +3356,25 @@ class RateLimiter {
 }
 
 // packages/rest/src/transport.ts
+var LOOPBACK = /^(?:localhost|127(?:\.\d{1,3}){3}|\[::1\])$/i;
+function parseBaseURL(raw, allowInsecure = false) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    throw new TypeError("baseURL must be an absolute http(s) URL.");
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:")
+    throw new TypeError("baseURL must use https.");
+  if (url.username || url.password)
+    throw new TypeError("baseURL must not contain credentials.");
+  if (url.search || url.hash)
+    throw new TypeError("baseURL must not contain a query or fragment.");
+  if (url.protocol === "http:" && !allowInsecure && !LOOPBACK.test(url.hostname))
+    throw new TypeError("baseURL must use https: the bot token would travel in cleartext (allowInsecureBaseURL: true overrides this for a trusted network).");
+  return raw.replace(/\/$/, "");
+}
+
 class TransportError extends Error {
   timedOut;
   constructor(message, timedOut, cause) {
@@ -3340,7 +3389,7 @@ class HttpTransport {
   #timeout;
   #fetch;
   constructor(options = {}) {
-    this.#baseURL = (options.baseURL ?? "https://discord.com/api/v10").replace(/\/$/, "");
+    this.#baseURL = parseBaseURL(options.baseURL ?? "https://discord.com/api/v10", options.allowInsecureBaseURL);
     this.#timeout = Math.max(1, options.timeout ?? 15000);
     this.#fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
   }
@@ -3362,13 +3411,14 @@ class HttpTransport {
         method: request.method,
         headers: request.headers,
         body: request.body,
-        signal: controller.signal
+        signal: controller.signal,
+        redirect: "error"
       });
     } catch (error) {
       if (error instanceof RESTError)
         throw error;
       const timedOut = error instanceof DOMException && (error.name === "TimeoutError" || error.name === "AbortError");
-      throw new TransportError(timedOut ? `Discord REST request timed out after ${this.#timeout}ms` : "Discord REST request failed", timedOut, error);
+      throw new TransportError(timedOut ? `Discord REST request timed out after ${this.#timeout}ms` : "Discord REST request failed", timedOut, sanitizeCause(error));
     } finally {
       clearTimeout(timer);
       request.signal?.removeEventListener("abort", onAbort);
@@ -3585,6 +3635,7 @@ class REST {
     this.#retryPolicy = options.retryPolicy ?? createRetryPolicy(options.retries ?? 2);
     this.#transport = options.transport ?? new HttpTransport({
       baseURL: options.baseURL,
+      allowInsecureBaseURL: options.allowInsecureBaseURL,
       timeout: options.timeout
     });
     const store = options.store ?? new MemoryRateLimitStore;
@@ -7446,7 +7497,7 @@ class Gateway {
   }
   connect(url = DEFAULT_GATEWAY_URL) {
     if (this.state === "CLOSED" /* Closed */)
-      throw new GatewayError("Gateway has been permanently closed.");
+      return Promise.reject(new GatewayError("Gateway has been permanently closed."));
     const inFlight = this.#reconnect.attemptPromise;
     if (inFlight)
       return inFlight;
@@ -8570,4 +8621,4 @@ export {
   resolveGatewayIntents
 };
 
-//# debugId=EEC9EA7D2E19B5EE64756E2164756E21
+//# debugId=3D7CC48CA04F88E364756E2164756E21