lurqrun 0.1.6 → 0.1.8

package/dist/chunk-3D2MPGOQ.js

@@ -0,0 +1,181 @@
+import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-I3M2KJXB.js";
+
+// src/notify/safeHttp.ts
+init_esm_shims();
+import { lookup as dnsLookup } from "dns";
+import https from "https";
+import { isIP } from "net";
+var MAX_URL = 2e3;
+var TIMEOUT_MS = 1e4;
+var MAX_RESPONSE = 4e3;
+function v4Private(ip) {
+  const [a = 0, b = 0] = ip.split(".").map(Number);
+  return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || // carrier-grade NAT
+  a === 169 && b === 254 || // link-local, cloud metadata
+  a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 192 && b === 0 || a === 198 && (b === 18 || b === 19) || // benchmarking
+  a >= 224;
+}
+function isPrivateAddress(ip) {
+  const kind = isIP(ip);
+  if (kind === 4) return v4Private(ip);
+  if (kind !== 6) return true;
+  const v = ip.toLowerCase();
+  if (v === "::" || v === "::1") return true;
+  const mapped = /^::ffff:(.+)$/.exec(v);
+  if (mapped) {
+    const rest = mapped[1];
+    if (isIP(rest) === 4) return v4Private(rest);
+    const [hi = "0", lo = "0"] = rest.split(":");
+    const n = parseInt(hi, 16) << 16 | parseInt(lo, 16);
+    return v4Private([n >>> 24 & 255, n >>> 16 & 255, n >>> 8 & 255, n & 255].join("."));
+  }
+  return /^f[cd]/.test(v) || /^fe[89ab]/.test(v) || v.startsWith("ff");
+}
+var SLACK_HOSTS = /* @__PURE__ */ new Set(["hooks.slack.com"]);
+var DISCORD_HOSTS = /* @__PURE__ */ new Set([
+  "discord.com",
+  "discordapp.com",
+  "ptb.discord.com",
+  "canary.discord.com"
+]);
+var TEAMS_SUFFIXES = [".logic.azure.com", ".powerplatform.com", ".powerautomate.com"];
+function validateChannelUrl(kind, raw) {
+  if (typeof raw !== "string" || !raw.trim() || raw.length > MAX_URL)
+    return { ok: false, error: "Paste the full webhook URL." };
+  let url;
+  try {
+    url = new URL(raw.trim());
+  } catch {
+    return { ok: false, error: "That is not a valid URL." };
+  }
+  if (url.protocol !== "https:") return { ok: false, error: "The URL must start with https://." };
+  if (url.username || url.password)
+    return { ok: false, error: "The URL must not contain a username or password." };
+  const host = url.hostname.toLowerCase();
+  if (kind === "slack") {
+    if (!SLACK_HOSTS.has(host) || !/^\/(services|triggers)\//.test(url.pathname)) {
+      return {
+        ok: false,
+        error: "A Slack incoming webhook URL starts with https://hooks.slack.com/services/."
+      };
+    }
+  } else if (kind === "discord") {
+    if (!DISCORD_HOSTS.has(host) || !url.pathname.startsWith("/api/webhooks/")) {
+      return {
+        ok: false,
+        error: "A Discord webhook URL starts with https://discord.com/api/webhooks/."
+      };
+    }
+  } else if (kind === "teams") {
+    if (host.endsWith(".webhook.office.com") || host === "outlook.office.com") {
+      return {
+        ok: false,
+        error: "Teams retired Office 365 connector webhooks in May 2026. Create one with the Workflows app instead."
+      };
+    }
+    if (!TEAMS_SUFFIXES.some((s) => host.endsWith(s))) {
+      return {
+        ok: false,
+        error: "Use the webhook URL a Teams Workflows flow gives you (a logic.azure.com or powerplatform.com address)."
+      };
+    }
+  } else {
+    if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) {
+      return { ok: false, error: "The URL must be reachable on the public internet." };
+    }
+    if (isIP(host.replace(/^\[|\]$/g, "")) && isPrivateAddress(host.replace(/^\[|\]$/g, ""))) {
+      return { ok: false, error: "The URL must be reachable on the public internet." };
+    }
+  }
+  return { ok: true, url };
+}
+function safeLookup(resolve = dnsLookup) {
+  return (hostname, options, callback) => {
+    resolve(hostname, { all: true }, (err, addresses) => {
+      if (err) return callback(err, []);
+      const list = addresses;
+      if (!list.length || list.some((a) => isPrivateAddress(a.address))) {
+        const e = Object.assign(new Error(`${hostname} resolves to a private network address`), {
+          code: "EPRIVATE"
+        });
+        return callback(e, []);
+      }
+      if (options?.all) return callback(null, list);
+      callback(null, list[0].address, list[0].family);
+    });
+  };
+}
+function postJson(url, payload, headers, opts = {}) {
+  return new Promise((resolvePost) => {
+    let settled = false;
+    const done = (o) => {
+      if (!settled) {
+        settled = true;
+        resolvePost(o);
+      }
+    };
+    let req;
+    try {
+      req = https.request(
+        url,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "User-Agent": "lurq-alerts",
+            "Content-Length": Buffer.byteLength(payload),
+            ...headers
+          },
+          lookup: opts.lookup ?? safeLookup(),
+          timeout: opts.timeoutMs ?? TIMEOUT_MS
+        },
+        (res) => {
+          let body = "";
+          res.setEncoding("utf8");
+          res.on("data", (chunk) => {
+            if (body.length < MAX_RESPONSE) body += chunk;
+          });
+          res.on("end", () => {
+            const status = res.statusCode ?? 0;
+            done({
+              status,
+              error: status >= 200 && status < 300 ? null : `HTTP ${status}${body ? `: ${body.slice(0, 120).replace(/\s+/g, " ")}` : ""}`
+            });
+          });
+          res.on(
+            "error",
+            () => done({ status: res.statusCode ?? 0, error: "response interrupted" })
+          );
+        }
+      );
+    } catch (err) {
+      done({
+        status: 0,
+        error: err instanceof Error ? err.message : "request failed",
+        code: "EINVAL"
+      });
+      return;
+    }
+    req.on("timeout", () => {
+      req.destroy(Object.assign(new Error("timed out"), { code: "ETIMEDOUT" }));
+    });
+    req.on("error", (err) => {
+      done({
+        status: 0,
+        error: err.code === "EPRIVATE" ? err.message : `could not connect (${err.code ?? err.message})`,
+        code: err.code ?? "ECONNECT"
+      });
+    });
+    req.end(payload);
+  });
+}
+
+export {
+  isPrivateAddress,
+  validateChannelUrl,
+  safeLookup,
+  postJson
+};