nstarter-http-request 0.1.12 → 0.1.13

package/dist/types/client.d.ts

@@ -47,6 +47,13 @@ export declare class NsHttpClient implements IHttpClient {
      * @returns 响应结果
      */
     request<T = any>(options: HttpRequestOptions): Promise<HttpResponse<T>>;
+    /**
+     *
+     * @param options 请求选项
+     * @param remainedRedirects 剩余可重定向次数
+     * @returns 响应结果
+     */
+    private safeRequest;
     /**
      * 便捷方法：GET 请求
      */
@@ -71,6 +78,10 @@ export declare class NsHttpClient implements IHttpClient {
      * 记录响应日志
      */
     private logResponse;
+    /**
+     * 销毁不再交给调用方的响应流
+     */
+    private discardResponseStream;
     /**
      * 判断响应数据是否为流对象（Node.js Readable）
      */

package/dist/types/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAER,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EAEZ,WAAW,EAGX,aAAa,EAGhB,MAAM,SAAS,CAAC;AAcjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA2BzC;;GAEG;AACH,qBAAa,YAAa,YAAW,WAAW;IAC5C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAC,CAAoB;IACvC,OAAO,CAAC,YAAY,CAAC,CAAgB;gBAEzB,UAAU,GAAE,uBAA4B;IA2BpD;;;OAGG;WACW,oBAAoB,CAAC,MAAM,GAAE,uBAA4B,GAAG,YAAY;IAItF;;;OAGG;IACI,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAMjD;;;OAGG;IACI,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAWnD;;OAEG;IACH,OAAO,CAAC,UAAU;IAQlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAsBtB;;OAEG;IACH,OAAO,CAAC,WAAW;IAenB;;;;OAIG;IACU,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAoFpF;;OAEG;IACU,GAAG,CAAC,CAAC,GAAG,GAAG,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,GAC9D,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,IAAI,CAAC,CAAC,GAAG,GAAG,EACrB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,GAAG,CAAC,CAAC,GAAG,GAAG,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,MAAM,CAAC,CAAC,GAAG,GAAG,EACvB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,GAC9D,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,KAAK,CAAC,CAAC,GAAG,GAAG,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACH,OAAO,CAAC,WAAW;IA6BnB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;OAEG;IAGH,OAAO,CAAC,kBAAkB;IA+D1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA4B1B;;OAEG;IACH,OAAO,CAAC,QAAQ;IA4BhB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAqEnC;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;OAEG;IACI,aAAa,IAAI,IAAI;IAK5B;;;OAGG;IACI,eAAe,IAAI,MAAM;CAGnC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAER,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EAEZ,WAAW,EAGX,aAAa,EAGhB,MAAM,SAAS,CAAC;AAcjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA6BzC;;GAEG;AACH,qBAAa,YAAa,YAAW,WAAW;IAC5C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAC,CAAoB;IACvC,OAAO,CAAC,YAAY,CAAC,CAAgB;gBAEzB,UAAU,GAAE,uBAA4B;IA2BpD;;;OAGG;WACW,oBAAoB,CAAC,MAAM,GAAE,uBAA4B,GAAG,YAAY;IAItF;;;OAGG;IACI,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAMjD;;;OAGG;IACI,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAWnD;;OAEG;IACH,OAAO,CAAC,UAAU;IAQlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAsBtB;;OAEG;IACH,OAAO,CAAC,WAAW;IAenB;;;;OAIG;IACU,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAYpF;;;;;OAKG;YACW,WAAW;IAsGzB;;OAEG;IACU,GAAG,CAAC,CAAC,GAAG,GAAG,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,GAC9D,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,IAAI,CAAC,CAAC,GAAG,GAAG,EACrB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,GAAG,CAAC,CAAC,GAAG,GAAG,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,MAAM,CAAC,CAAC,GAAG,GAAG,EACvB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,GAC9D,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACU,KAAK,CAAC,CAAC,GAAG,GAAG,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,GACvE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAI3B;;OAEG;IACH,OAAO,CAAC,WAAW;IA6BnB;;OAEG;YACW,qBAAqB;IAUnC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;OAEG;IAGH,OAAO,CAAC,kBAAkB;IA+D1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA4B1B;;OAEG;IACH,OAAO,CAAC,QAAQ;IA4BhB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAqEnC;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;OAEG;IACI,aAAa,IAAI,IAAI;IAK5B;;;OAGG;IACI,eAAe,IAAI,MAAM;CAGnC"}

package/dist/types/const/config.const.d.ts

@@ -16,6 +16,12 @@ export declare const DEFAULT_LOGGING_CONFIG: LoggingConfig;
  * 默认请求配置
  */
 export declare const DEFAULT_REQUEST_CONFIG: RequestConfig;
+/**
+ * 响应体大小预检的线上长度容差比例。
+ * axios 的 onDownloadProgress.total 是压缩后的 Content-Length，而 maxContentLength 按解压后计数；
+ * 不可压缩数据经 gzip 等压缩后可能略大于解压大小，预检仅在超过上限该比例时提前中止。
+ */
+export declare const MAX_RESPONSE_SIZE_TOLERANCE_RATIO = 0.01;
 /**
  * 默认 HTTP 客户端配置
  */

package/dist/types/const/config.const.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.const.d.ts","sourceRoot":"","sources":["../../../src/const/config.const.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACjB,MAAM,UAAU,CAAC;AAIlB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAgB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cASrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAMpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B,EAAE,gBAKxC,CAAC"}
+{"version":3,"file":"config.const.d.ts","sourceRoot":"","sources":["../../../src/const/config.const.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACjB,MAAM,UAAU,CAAC;AAIlB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAgB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cASrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAMpC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,0BAA0B,EAAE,gBAKxC,CAAC"}

package/dist/types/types/errors.d.ts

@@ -10,7 +10,32 @@ export declare class HttpError extends Error {
     readonly status?: number | undefined;
     readonly response?: HttpResponse | undefined;
     readonly request?: HttpRequestOptions | undefined;
-    constructor(message: string, code: string, status?: number | undefined, response?: HttpResponse | undefined, request?: HttpRequestOptions | undefined);
+    readonly retriable: boolean;
+    /**
+     * @param message 错误信息
+     * @param code 错误码
+     * @param status HTTP 状态码
+     * @param response 响应（不应携带不再需要的大体积响应体）
+     * @param request 请求选项
+     * @param retriable 是否允许重试，默认 true；重试无法改变结果的确定性失败应传 false
+     */
+    constructor(message: string, code: string, status?: number | undefined, response?: HttpResponse | undefined, request?: HttpRequestOptions | undefined, retriable?: boolean);
+}
+/**
+ * 响应体超过 maxResponseBodySize 限制的错误。
+ *
+ * - 错误码与文案对齐 axios 的 maxContentLength（ERR_BAD_RESPONSE）。
+ * - 重试不会改变响应体大小，因此标记为不可重试，避免每次重试都重复下载。
+ * - 不携带 response：仅保留状态码，防止超限数据随错误对象存活（与 axios 抛出该错误时一致）。
+ */
+export declare class ResponseTooLargeError extends HttpError {
+    readonly maxResponseBodySize: number;
+    /**
+     * @param maxResponseBodySize 响应体大小上限
+     * @param request 请求选项
+     * @param status 响应状态码（未知时不传）
+     */
+    constructor(maxResponseBodySize: number, request: HttpRequestOptions, status?: number);
 }
 /**
  * 安全验证错误

package/dist/types/types/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3E;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;aAGZ,IAAI,EAAE,MAAM;aACZ,MAAM,CAAC,EAAE,MAAM;aACf,QAAQ,CAAC,EAAE,YAAY;aACvB,OAAO,CAAC,EAAE,kBAAkB;gBAJ5C,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,QAAQ,CAAC,EAAE,YAAY,YAAA,EACvB,OAAO,CAAC,EAAE,kBAAkB,YAAA;CAMnD;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAGhB,IAAI,EAAE,MAAM;aACZ,GAAG,CAAC,EAAE,MAAM;gBAF5B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,YAAA;CAMnC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3E;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;aAWZ,IAAI,EAAE,MAAM;aACZ,MAAM,CAAC,EAAE,MAAM;aACf,QAAQ,CAAC,EAAE,YAAY;aACvB,OAAO,CAAC,EAAE,kBAAkB;aAC5B,SAAS;IAd7B;;;;;;;OAOG;gBAEC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,QAAQ,CAAC,EAAE,YAAY,YAAA,EACvB,OAAO,CAAC,EAAE,kBAAkB,YAAA,EAC5B,SAAS,UAAO;CAMvC;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,SAAS;aAO5B,mBAAmB,EAAE,MAAM;IAN/C;;;;OAIG;gBAEiB,mBAAmB,EAAE,MAAM,EAC3C,OAAO,EAAE,kBAAkB,EAC3B,MAAM,CAAC,EAAE,MAAM;CAWtB;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAGhB,IAAI,EAAE,MAAM;aACZ,GAAG,CAAC,EAAE,MAAM;gBAF5B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,YAAA;CAMnC"}

package/dist/types/utils/index.d.ts

@@ -1,6 +1,7 @@
 export * as IpRangeUtils from './ip.range';
 export * as CommonUtils from './common';
 export * as DomainUtils from './domain';
+export * as RedirectUtils from './redirect';
 export * as TraceContextUtils from './trace.context';
 export { TraceContext } from './trace.context';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,iBAAiB,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,UAAU,CAAC;AACxC,OAAO,KAAK,aAAa,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,iBAAiB,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/types/utils/redirect.d.ts

@@ -0,0 +1,26 @@
+import type { HttpRequestOptions, HttpResponse } from '../types';
+import { EClientAdapter } from '../const';
+/**
+ * 判断状态码是否需要跟跳。
+ * @param status HTTP 状态码
+ */
+export declare function isRedirectStatus(status: number): boolean;
+/**
+ * 根据响应里的 Location 构造下一跳请求。
+ * 没有 Location 时返回 undefined，调用方把当前 3xx 原样返回。
+ * axios：POST 的 301/302，以及非 GET/HEAD 的 303，改成 GET 并去掉 body 和 content-*。
+ * undici：只有非 HEAD 的 303 改成 GET 并去掉 body；303 仍去掉 content-*。
+ * 两边都去掉 host；跨域去掉 authorization、cookie、proxy-authorization。
+ * @param options 当前这一跳的请求
+ * @param response 当前这一跳的响应
+ * @param adapter 当前适配器
+ * @param configuredTimeout 客户端配置中的超时。请求未单独设置时使用。
+ */
+export declare function buildRedirectOptions(options: HttpRequestOptions, response: HttpResponse, adapter: EClientAdapter, configuredTimeout?: number): HttpRequestOptions | undefined;
+/**
+ * 跟跳共用同一次超时。把本跳已经花掉的时间从 redirectOptions.timeout 扣掉。
+ * @param redirectOptions 下一跳请求
+ * @param startTime 本跳开始时间
+ */
+export declare function consumeRedirectTimeout(redirectOptions: HttpRequestOptions, startTime: number): void;
+//# sourceMappingURL=redirect.d.ts.map

package/dist/types/utils/redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../../../src/utils/redirect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,kBAAkB,EAClB,YAAY,EACf,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAe1C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,cAAc,EACvB,iBAAiB,CAAC,EAAE,MAAM,GAC3B,kBAAkB,GAAG,SAAS,CA6ChC;AAgDD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAClC,eAAe,EAAE,kBAAkB,EACnC,SAAS,EAAE,MAAM,GAClB,IAAI,CAgBN"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nstarter-http-request",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "nstarter HTTP 请求客户端插件",
   "license": "MIT",
   "repository": {

package/src/adapter/axios.adapter.ts

@@ -7,16 +7,24 @@ import type {
     HttpResponse,
     ProxyConfig
 } from '../types';
-import { HttpError } from '../types';
+import {
+    HttpError,
+    ResponseTooLargeError
+} from '../types';
 import { BaseHttpAdapter } from './base';
 import type {
+    AxiosProgressEvent,
     AxiosProxyConfig,
     AxiosRequestConfig
 } from 'axios';
 import axios from 'axios';
 import { HttpsProxyAgent } from 'https-proxy-agent';
 import * as https from 'https';
-import { EClientAdapter } from '../const';
+import {
+    MAX_RESPONSE_SIZE_TOLERANCE_RATIO,
+    EClientAdapter
+} from '../const';
+import { RedirectUtils } from '../utils';
 
 
 /**
@@ -42,7 +50,9 @@ export class AxiosAdapter extends BaseHttpAdapter {
         }
 
         const url = this.buildUrl(options.url, options.params);
+        const timeout = options.timeout ?? this.requestConfig.timeout;
         const axiosConfig = this.buildAxiosConfig(options, url);
+        const signalState = this.buildAxiosSignals(axiosConfig, options, timeout);
 
         try {
             const startTime = Date.now();
@@ -67,8 +77,80 @@ export class AxiosAdapter extends BaseHttpAdapter {
 
             return response;
         } catch (error: any) {
-            throw this.handleAxiosError(error, options);
+            throw signalState.abortError() ?? this.handleAxiosError(error, options);
+        } finally {
+            signalState.cleanup();
+        }
+    }
+
+    /**
+     * 创建整次请求超时与响应体超限两个中止信号，合并后写入 axiosConfig（原地修改）。
+     * 返回 catch 中还原中止原因的 abortError（非本方法中止时返回 undefined），以及 finally 中清理定时器的 cleanup。
+     */
+    private buildAxiosSignals(axiosConfig: AxiosRequestConfig, options: HttpRequestOptions, timeout?: number): {
+        abortError: () => HttpError | undefined,
+        cleanup: () => void
+    } {
+        // maxRedirects 为 0 时 axios 使用原生 http 而不是 follow-redirects。
+        // 原生 timeout 是套接字空闲超时，在比如持续上传的场景下会被不断重置，需要使用中止信号来结束请求。
+        const deadline = this.createDeadline(timeout);
+        const bodySizeGuard = this.createBodySizeGuard(options);
+        const signals = [deadline.signal, bodySizeGuard.signal].filter((item): item is AbortSignal => !!item);
+        axiosConfig.signal = signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+        axiosConfig.onDownloadProgress = bodySizeGuard.onDownloadProgress;
+
+        return {
+            abortError: () => {
+                if (deadline.timedOut()) {
+                    return new HttpError(
+                        `timeout of ${ timeout }ms exceeded`,
+                        'ECONNABORTED',
+                        undefined,
+                        undefined,
+                        options
+                    );
+                }
+                if (bodySizeGuard.exceeded()) {
+                    return new ResponseTooLargeError(this.requestConfig.maxResponseBodySize, options);
+                }
+                return undefined;
+            },
+            cleanup: deadline.cleanup
+        };
+    }
+
+    /**
+     * 创建 Content-Length 预检。
+     *
+     * axios 的 Node http 适配器只按已收到的分块累计 maxContentLength，响应头已声明超限时仍会下载到上限才中断。
+     * 这里借助 onDownloadProgress 的 total（响应头 Content-Length），在首个分块到达时就中止请求。
+     * - 无 Content-Length（chunked）时不触发，由 axios 的分块累计兜底；
+     * - stream 响应不启用，避免额外插入转换流；
+     * - total 是线上字节，对几乎不可压缩的 gzip 响应可能略大于解压后的大小，
+     *   因此比较时保留 MAX_RESPONSE_SIZE_TOLERANCE_RATIO 的容差。
+     */
+    private createBodySizeGuard(options: HttpRequestOptions): {
+        signal?: AbortSignal,
+        onDownloadProgress?: (event: AxiosProgressEvent) => void,
+        exceeded: () => boolean
+    } {
+        const maxRespBodySize = this.resolveMaxResponseBodySize();
+        if (options.responseType === 'stream' || maxRespBodySize === undefined) {
+            return { exceeded: () => false };
         }
+
+        const controller = new AbortController();
+        let exceeded = false;
+        return {
+            signal: controller.signal,
+            onDownloadProgress: (event) => {
+                if (typeof event.total === 'number' && event.total > maxRespBodySize + Math.ceil(maxRespBodySize * MAX_RESPONSE_SIZE_TOLERANCE_RATIO)) {
+                    exceeded = true;
+                    controller.abort();
+                }
+            },
+            exceeded: () => exceeded
+        };
     }
 
     /**
@@ -82,6 +164,9 @@ export class AxiosAdapter extends BaseHttpAdapter {
             url,
             headers: options.headers || {},
             maxRedirects: this.requestConfig.maxRedirects,
+            validateStatus: (status: number) => {
+                return (status >= 200 && status < 300) || status === 304 || RedirectUtils.isRedirectStatus(status);
+            },
             maxContentLength: this.requestConfig.maxResponseBodySize,
             maxBodyLength: this.requestConfig.maxRequestBodySize,
             httpsAgent: new https.Agent({
@@ -181,6 +266,12 @@ export class AxiosAdapter extends BaseHttpAdapter {
      * @param options 请求选项
      */
     private handleAxiosError(error: any, options: HttpRequestOptions): HttpError {
+        // axios 没有为 maxContentLength 超限提供专用错误码（与 5xx 共用 ERR_BAD_RESPONSE），
+        // 只能靠固定的消息前缀识别，识别后转成不可重试的 ResponseTooLargeError。
+        if (error.isAxiosError && error.code === 'ERR_BAD_RESPONSE' && error.message.startsWith('maxContentLength size of')) {
+            return new ResponseTooLargeError(this.requestConfig.maxResponseBodySize, options);
+        }
+
         if (error.isAxiosError) {
             return new HttpError(
                 error.message,
@@ -226,4 +317,34 @@ export class AxiosAdapter extends BaseHttpAdapter {
 
         return config;
     }
+
+    /**
+     * 按墙钟时间中止请求，到点后 timedOut 为 true
+     * @param timeout 超时时间，单位毫秒
+     * @returns 中止信号、是否超时、清理函数
+     */
+    private createDeadline(timeout?: number): {
+        signal?: AbortSignal,
+        timedOut: () => boolean,
+        cleanup: () => void
+    } {
+        if (typeof timeout !== 'number' || !Number.isFinite(timeout) || timeout <= 0) {
+            return {
+                timedOut: () => false,
+                cleanup: () => undefined
+            };
+        }
+        const controller = new AbortController();
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            controller.abort();
+        }, timeout);
+        timer.unref?.();
+        return {
+            signal: controller.signal,
+            timedOut: () => timedOut,
+            cleanup: () => clearTimeout(timer)
+        };
+    }
 }

package/src/adapter/base.ts

@@ -10,11 +10,14 @@ import type {
     SecurityConfig,
     ILogger
 } from '../types';
+import { HttpError } from '../types';
 import { CommonUtils } from '../utils';
 import type { EClientAdapter } from '../const';
 
 /**
  * HTTP 适配器抽象基类
+ * 
+ * g-7114106599：不允许直接跟跳3XX，防止SSRF。调用方需要自行处理 3XX 响应。
  */
 export abstract class BaseHttpAdapter implements IHttpAdapter {
     protected requestConfig: RequestConfig;
@@ -22,7 +25,7 @@ export abstract class BaseHttpAdapter implements IHttpAdapter {
     protected logger?: ILogger;
 
     constructor(requestConfig: RequestConfig, securityConfig: SecurityConfig, logger?: ILogger) {
-        this.requestConfig = requestConfig;
+        this.requestConfig = { ...requestConfig, maxRedirects: 0 };
         this.securityConfig = securityConfig;
         this.logger = logger;
     }
@@ -85,6 +88,16 @@ export abstract class BaseHttpAdapter implements IHttpAdapter {
                     error: error instanceof Error ? error.message : String(error)
                 });
 
+                // 默认所有错误均可重试；仅在 HttpError 的 retriable 为 false 时终止重试
+                if (error instanceof HttpError && !error.retriable) {
+                    this.logger?.debug('HTTP request error is not retriable, skip remaining retries', {
+                        method: options.method,
+                        url: options.url,
+                        attempt: attempt + 1
+                    });
+                    break;
+                }
+
                 // 最后一次尝试，不再重试
                 if (attempt === retries) {
                     break;
@@ -106,6 +119,14 @@ export abstract class BaseHttpAdapter implements IHttpAdapter {
         throw lastError;
     }
 
+    /**
+     * @returns 有效的响应体大小上限；不限制时返回 undefined
+     */
+    protected resolveMaxResponseBodySize(): number | undefined {
+        const max = this.requestConfig.maxResponseBodySize;
+        return typeof max === 'number' && max > 0 ? max : undefined;
+    }
+
     /**
      * 更新请求配置
      * @param config 新的请求配置

package/src/adapter/undici.adapter.ts

@@ -4,10 +4,12 @@
 
 import type {
     HttpRequestOptions,
-    HttpResponse,
-    ResponseType,
+    HttpResponse
+} from '../types';
+import {
+    HttpError,
+    ResponseTooLargeError
 } from '../types';
-import { HttpError } from '../types';
 import { BaseHttpAdapter } from './base';
 import undici, {
     Agent,
@@ -16,6 +18,7 @@ import undici, {
 } from 'undici';
 import { STATUS_CODES } from 'http';
 import { EClientAdapter } from '../const';
+import { RedirectUtils } from '../utils';
 
 interface RequestTimeoutState {
     signal?: AbortSignal;
@@ -69,7 +72,8 @@ export class UndiciAdapter extends BaseHttpAdapter {
                 timeoutState.cleanup();
             }
 
-            const data = await this.readResponseBody<T>(response, options.responseType);
+            // 读取过程中会按 maxResponseBodySize 提前拒绝/中断，超限时不会把完整响应体读入内存
+            const data = await this.readResponseBody<T>(response, options);
 
             const httpResponse: HttpResponse<T> = {
                 status: response.statusCode,
@@ -79,7 +83,6 @@ export class UndiciAdapter extends BaseHttpAdapter {
                 config: options
             };
 
-            this.ensureResponseBodySize(httpResponse, options.responseType);
             this.ensureSuccessStatus(httpResponse);
 
             return httpResponse;
@@ -96,6 +99,8 @@ export class UndiciAdapter extends BaseHttpAdapter {
             throw this.handleUndiciError(error, options);
         } finally {
             timeoutState.cleanup();
+            // buildDispatcher 为每个请求单独创建 Agent/ProxyAgent，用完需要关闭，否则连接池与 keep-alive 连接会一直保留。
+            dispatcher?.close().catch(() => undefined);
         }
     }
 
@@ -338,10 +343,14 @@ export class UndiciAdapter extends BaseHttpAdapter {
     }
 
     /**
-     * 按 axios 默认行为处理非 2xx 状态码。
+     * 2xx 和 304 作为成功结果返回。undici 未跟跳的 3xx 交回调用方。
      */
     private ensureSuccessStatus(response: HttpResponse): void {
-        if (response.status >= 200 && response.status < 300) {
+        if (
+            (response.status >= 200 && response.status < 300)
+            || response.status === 304
+            || RedirectUtils.isRedirectStatus(response.status)
+        ) {
             return;
         }
 
@@ -355,119 +364,122 @@ export class UndiciAdapter extends BaseHttpAdapter {
     }
 
     /**
-     * 按 axios maxContentLength 行为限制非流式响应体大小。
+     * 解析 Content-Length 响应头。仅接受合法的非负整数，重复头/非法值视为未知。
      */
-    private ensureResponseBodySize(response: HttpResponse, responseType?: ResponseType): void {
-        if (responseType === 'stream') {
-            return;
-        }
-        const maxResponseBodySize = this.requestConfig.maxResponseBodySize;
-        if (
-            typeof maxResponseBodySize !== 'number' ||
-            !Number.isFinite(maxResponseBodySize) ||
-            maxResponseBodySize <= 0
-        ) {
-            // NsHttpClient 会先做配置合并和校验；这里防御直接实例化 Adapter 的异常配置。
-            return;
-        }
-        const bodySize = this.getBodySize(response.data);
-        if (bodySize <= maxResponseBodySize) {
-            return;
+    private parseContentLength(value: string | string[] | undefined): number | undefined {
+        if (typeof value !== 'string' || !/^\d+$/.test(value.trim())) {
+            return undefined;
         }
-        throw new HttpError(
-            `maxContentLength size of ${ maxResponseBodySize } exceeded`,
-            'ERR_BAD_RESPONSE',
-            response.status,
-            response,
-            response.config
-        );
+        const length = Number(value.trim());
+        return Number.isSafeInteger(length) ? length : undefined;
     }
 
     /**
-     * 计算已读取响应体的字节大小。
+     * 丢弃未读完的响应体并终止下载。
+     * undici 的 BodyReadable.destroy() 不带错误时会以 RequestAbortedError 触发 error 事件，
+     * 没有监听器会变成未捕获异常，因此先挂空监听器。
      */
-    private getBodySize(body: any): number {
-        if (body === undefined || body === null) {
-            return 0;
-        }
-        if (Buffer.isBuffer(body)) {
-            return body.byteLength;
-        }
-        if (body instanceof ArrayBuffer) {
-            return body.byteLength;
-        }
-        if (ArrayBuffer.isView(body)) {
-            return body.byteLength;
+    private discardBody(response: Dispatcher.ResponseData): void {
+        response.body.on('error', () => undefined);
+        response.body.destroy();
+    }
+
+    /**
+     * 带大小上限地读取非流式响应体。
+     *
+     * 1. Content-Length 预检：响应头已声明超限时，不读取响应体，直接销毁并拒绝。
+     * 2. 逐分块累计字节数，累计值超过上限（等于上限放行）立即销毁响应流并拒绝，后续数据不再下载；
+     *    该行为对齐 axios（Node http 适配器）的 maxContentLength。
+     */
+    private async readBodyWithLimit(response: Dispatcher.ResponseData, options: HttpRequestOptions): Promise<Buffer> {
+        const maxRespBodySize = this.resolveMaxResponseBodySize();
+
+        // HEAD / 204 / 304 没有响应体，其 Content-Length 描述的是对应实体而不是本次响应体：
+        // 不能用于预检；服务端携带时 undici 还会一直等待并不存在的响应体，因此不进入读取，直接丢弃。
+        if (options.method === 'HEAD' || response.statusCode === 204 || response.statusCode === 304) {
+            this.discardBody(response);
+            return Buffer.alloc(0);
         }
-        if (typeof Blob !== 'undefined' && body instanceof Blob) {
-            return body.size;
+
+        if (maxRespBodySize !== undefined) {
+            const contentLength = this.parseContentLength(response.headers['content-length']);
+            if (contentLength !== undefined && contentLength > maxRespBodySize) {
+                this.discardBody(response);
+                throw new ResponseTooLargeError(maxRespBodySize, options, response.statusCode);
+            }
         }
-        if (typeof body === 'string') {
-            return Buffer.byteLength(body);
+
+        const chunks: Buffer[] = [];
+        let total = 0;
+        for await (const chunk of response.body) {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            total += buffer.byteLength;
+            if (maxRespBodySize !== undefined && total > maxRespBodySize) {
+                this.discardBody(response);
+                throw new ResponseTooLargeError(maxRespBodySize, options, response.statusCode);
+            }
+            chunks.push(buffer);
         }
-        return Buffer.byteLength(JSON.stringify(body));
+        return Buffer.concat(chunks, total);
+    }
+
+    /**
+     * 基于已读取（已受大小限制）的字节构造 Response，复用运行时的 blob/formData 解析逻辑。
+     */
+    private toFetchResponse(buffer: Buffer, response: Dispatcher.ResponseData): Response {
+        const contentType = response.headers['content-type'];
+        return new Response(buffer, {
+            headers: typeof contentType === 'string' ? { 'content-type': contentType } : undefined
+        });
     }
 
     /**
      * 读取响应体
      * @param response Undici 响应对象
-     * @param responseType 响应类型
+     * @param options 请求选项
      */
-    private async readResponseBody<T>(response: Dispatcher.ResponseData, responseType?: ResponseType): Promise<T> {
+    private async readResponseBody<T>(response: Dispatcher.ResponseData, options: HttpRequestOptions): Promise<T> {
+        if (options.responseType === 'stream') {
+            // undici 返回 BodyReadable (继承自 Node.js Readable)，流式响应由调用方自行消费，不受 maxResponseBodySize 限制
+            return response.body as T;
+        }
+
         try {
-            switch (responseType) {
+            const buffer = await this.readBodyWithLimit(response, options);
+            const decoder = new TextDecoder();
+            switch (options.responseType) {
                 case 'text': {
-                    return (await response.body.text()) as T;
+                    return decoder.decode(buffer) as T;
                 }
                 case 'arraybuffer': {
-                    return Buffer.from(await response.body.arrayBuffer()) as T;
-                }
-                case 'stream': {
-                    // undici 返回 BodyReadable (继承自 Node.js Readable)
-                    return response.body as T;
+                    return buffer as T;
                 }
                 case 'blob': {
-                    return (await response.body.blob()) as T;
+                    return (await this.toFetchResponse(buffer, response).blob()) as T;
                 }
                 case 'formdata': {
-                    return (await response.body.formData()) as T;
-                }
-                case 'json': {
-                    return await this.readJsonResponseBody<T>(response);
+                    return (await this.toFetchResponse(buffer, response).formData()) as T;
                 }
+                case 'json':
                 default: {
-                    const text = await response.body.text();
+                    // 按 axios 的默认兼容行为：空响应体或非 JSON 文本不应让成功状态码请求因为解析失败变成异常
+                    const text = decoder.decode(buffer);
                     try {
                         return JSON.parse(text) as T;
                     } catch {
-                        // 如果不是有效的 JSON，返回原文本
                         return text as T;
                     }
                 }
-
             }
         } catch (error) {
+            // 响应体超限错误需要原样抛出，保留错误码、文案与不可重试标记
+            if (error instanceof ResponseTooLargeError) {
+                throw error;
+            }
             throw new Error(`Failed to read response body: ${ error instanceof Error ? error.message : String(error) }`);
         }
     }
 
-    /**
-     * 按 axios 的默认兼容行为读取 JSON 响应。
-     * 空响应体或非 JSON 文本不应让成功状态码请求因为解析失败变成异常。
-     */
-    private async readJsonResponseBody<T>(response: Dispatcher.ResponseData): Promise<T> {
-        const text = await response.body.text();
-        if (!text) {
-            return text as T;
-        }
-
-        try {
-            return JSON.parse(text) as T;
-        } catch {
-            return text as T;
-        }
-    }
-
     /**
      * 获取状态文本
      * @param statusCode 状态码