sliccy 6.130.1 → 6.131.1

package/dist/node-server/_shared/link-header.js

@@ -0,0 +1,441 @@
+/**
+ * RFC 8288 Web Linking — `Link` header parser and builder.
+ *
+ * Pure module, no I/O. Used by:
+ *  - the CDP navigation watcher (CLI/Electron) to extract handoff/upskill links
+ *    from main-frame document responses
+ *  - the chrome.webRequest observer (extension) to do the same
+ *  - the playwright-cli / curl wrappers for generic discovery
+ *
+ * The parser handles:
+ *  - comma-separated link-values, with commas inside quoted-strings preserved
+ *  - multiple `Link:` header instances merged per RFC 7230
+ *  - `param=token`, `param="quoted"` (with backslash escapes), and
+ *    `param*=ext-value` forms (RFC 8187, UTF-8 charset only)
+ *  - the "rel" parameter as a space-separated list of relation types
+ *  - anchor and target URI resolution against an optional base URL
+ *
+ * The builder produces a single header value from a list of links and is the
+ * inverse of the parser for the subset of inputs SLICC produces (no exotic
+ * parameter names, RFC 8187 used only when a value contains non-ASCII).
+ */
+/* ───────────────────────────── parser ───────────────────────────── */
+function normalizeLinkHeaderInput(input) {
+    if (input == null)
+        return null;
+    // CDP joins multi-value headers with `\n`; treat it the same as separate
+    // header instances. Normalize for both shapes — array elements may also
+    // contain `\n`-joined values when callers preserve CDP's raw bag verbatim.
+    if (Array.isArray(input)) {
+        const headerString = input.join(', ').replace(/\n/g, ', ');
+        return headerString.length === 0 ? null : headerString;
+    }
+    if (typeof input === 'string') {
+        const headerString = input.replace(/\n/g, ', ');
+        return headerString.length === 0 ? null : headerString;
+    }
+    return null;
+}
+function readUnquotedParamValue(headerString, i) {
+    const len = headerString.length;
+    const start = i;
+    while (i < len &&
+        headerString[i] !== ';' &&
+        headerString[i] !== ',' &&
+        !isOWSChar(headerString[i]))
+        i++;
+    return { value: headerString.slice(start, i), end: i };
+}
+function readParamValue(headerString, i) {
+    const len = headerString.length;
+    i = skipOWS(headerString, i);
+    if (i >= len || headerString[i] !== '=')
+        return { value: '', end: i };
+    i++;
+    i = skipOWS(headerString, i);
+    if (i < len && headerString[i] === '"')
+        return readQuotedString(headerString, i);
+    return readUnquotedParamValue(headerString, i);
+}
+function readParamName(headerString, i) {
+    const len = headerString.length;
+    const nameStart = i;
+    while (i < len && isTokenChar(headerString.charCodeAt(i)))
+        i++;
+    /* c8 ignore next 2 -- unreachable: `*` (0x2a) is itself a tchar (see
+       isTokenChar's `case 0x2a`), so the while loop above already consumes a
+       trailing `*` before this check can run. */
+    if (i < len && headerString[i] === '*')
+        i++;
+    if (nameStart === i)
+        return null;
+    return { name: headerString.slice(nameStart, i).toLowerCase(), end: i };
+}
+function parseLinkParameters(headerString, startIndex) {
+    const rawParams = [];
+    const len = headerString.length;
+    let i = startIndex;
+    while (i < len) {
+        i = skipOWS(headerString, i);
+        if (i >= len)
+            break;
+        if (headerString[i] === ',')
+            return { params: rawParams, endIndex: i + 1 };
+        if (headerString[i] !== ';') {
+            return { params: rawParams, endIndex: skipToNextValue(headerString, i) };
+        }
+        i++;
+        i = skipOWS(headerString, i);
+        const parsedName = readParamName(headerString, i);
+        if (!parsedName) {
+            return { params: rawParams, endIndex: skipToNextValue(headerString, i) };
+        }
+        const { value, end } = readParamValue(headerString, parsedName.end);
+        rawParams.push([parsedName.name, value]);
+        i = end;
+    }
+    return { params: rawParams, endIndex: i };
+}
+export function parseLinkHeader(input, baseUrl) {
+    const headerString = normalizeLinkHeaderInput(input);
+    if (headerString == null)
+        return [];
+    const out = [];
+    const len = headerString.length;
+    let i = 0;
+    while (i < len) {
+        i = skipOWS(headerString, i);
+        if (i >= len)
+            break;
+        if (headerString[i] !== '<') {
+            i = skipToNextValue(headerString, i);
+            continue;
+        }
+        const uriEnd = headerString.indexOf('>', i + 1);
+        if (uriEnd === -1)
+            break;
+        const rawUri = headerString.slice(i + 1, uriEnd);
+        const { params: rawParams, endIndex } = parseLinkParameters(headerString, uriEnd + 1);
+        i = endIndex;
+        const link = buildLink(rawUri, rawParams, baseUrl);
+        if (link)
+            out.push(link);
+    }
+    return out;
+}
+function skipOWS(s, i) {
+    while (i < s.length && (s[i] === ' ' || s[i] === '\t'))
+        i++;
+    return i;
+}
+function isOWSChar(c) {
+    return c === ' ' || c === '\t';
+}
+function skipToNextValue(s, i) {
+    let inQuote = false;
+    while (i < s.length) {
+        const c = s[i];
+        if (inQuote) {
+            if (c === '\\' && i + 1 < s.length) {
+                i += 2;
+                continue;
+            }
+            if (c === '"')
+                inQuote = false;
+        }
+        else {
+            if (c === '"')
+                inQuote = true;
+            else if (c === ',')
+                return i + 1;
+        }
+        i++;
+    }
+    return i;
+}
+function readQuotedString(s, i) {
+    // s[i] === '"'
+    i++;
+    let result = '';
+    while (i < s.length) {
+        const c = s[i];
+        if (c === '\\') {
+            i++;
+            if (i < s.length) {
+                result += s[i];
+                i++;
+            }
+        }
+        else if (c === '"') {
+            return { value: result, end: i + 1 };
+        }
+        else {
+            result += c;
+            i++;
+        }
+    }
+    return { value: result, end: i };
+}
+function isTokenChar(code) {
+    // RFC 7230 tchar
+    if (code >= 0x30 && code <= 0x39)
+        return true; // 0-9
+    if (code >= 0x41 && code <= 0x5a)
+        return true; // A-Z
+    if (code >= 0x61 && code <= 0x7a)
+        return true; // a-z
+    switch (code) {
+        case 0x21: // !
+        case 0x23: // #
+        case 0x24: // $
+        case 0x25: // %
+        case 0x26: // &
+        case 0x27: // '
+        case 0x2a: // *
+        case 0x2b: // +
+        case 0x2d: // -
+        case 0x2e: // .
+        case 0x5e: // ^
+        case 0x5f: // _
+        case 0x60: // `
+        case 0x7c: // |
+        case 0x7e: // ~
+            return true;
+    }
+    return false;
+}
+function buildLink(rawUri, rawParams, baseUrl) {
+    const params = {};
+    const extOverrides = {};
+    for (const [name, value] of rawParams) {
+        if (name.endsWith('*')) {
+            const decoded = decodeExtValue(value);
+            if (decoded != null)
+                extOverrides[name.slice(0, -1)] = decoded;
+            continue;
+        }
+        // RFC 8288: rel MUST NOT appear more than once; ignore later occurrences.
+        if (name === 'rel' && 'rel' in params)
+            continue;
+        params[name] = value;
+    }
+    // RFC 8187 §4.3: ext value takes precedence over the regular value.
+    for (const [name, value] of Object.entries(extOverrides)) {
+        params[name] = value;
+    }
+    const href = resolveURI(rawUri, baseUrl);
+    const anchor = params.anchor != null ? resolveURI(params.anchor, baseUrl) : undefined;
+    const relRaw = params.rel ?? '';
+    const rel = relRaw.split(/[ \t]+/).filter((s) => s.length > 0);
+    const link = { href, rel, params };
+    if (anchor != null)
+        link.anchor = anchor;
+    if (params.type != null)
+        link.type = params.type;
+    if (params.title != null)
+        link.title = params.title;
+    if (params.hreflang != null)
+        link.hreflang = params.hreflang;
+    return link;
+}
+function resolveURI(ref, baseUrl) {
+    if (!baseUrl)
+        return ref;
+    try {
+        return new URL(ref, baseUrl).toString();
+    }
+    catch {
+        return ref;
+    }
+}
+/**
+ * Decode an RFC 8187 ext-value: `charset "'" [language] "'" value-chars`.
+ * Only UTF-8 is required by the RFC; other charsets return null (caller
+ * keeps the regular parameter, if any).
+ */
+export function decodeExtValue(value) {
+    const firstQuote = value.indexOf("'");
+    if (firstQuote === -1)
+        return null;
+    const secondQuote = value.indexOf("'", firstQuote + 1);
+    if (secondQuote === -1)
+        return null;
+    const charset = value.slice(0, firstQuote).toLowerCase();
+    if (charset !== 'utf-8')
+        return null;
+    try {
+        return decodeURIComponent(value.slice(secondQuote + 1));
+    }
+    catch {
+        return null;
+    }
+}
+/* ───────────────────────────── builder ───────────────────────────── */
+/**
+ * Format a single link as one RFC 8288 link-value. Caller joins multiple
+ * link-values with ", " (ASCII comma + SP) to form a complete header.
+ *
+ * Parameter values containing non-token characters are quoted. For
+ * non-Latin1 values (or values listed in `extEncode`), an RFC 8187
+ * `param*=UTF-8''…` form is emitted instead. CR/LF in parameter values
+ * is always percent-encoded so a malicious instruction can never break
+ * out of the header.
+ */
+export function formatLink(link) {
+    const rels = Array.isArray(link.rel) ? link.rel : [link.rel];
+    const relValue = rels.join(' ');
+    const ext = new Set(link.extEncode ?? []);
+    const parts = [`<${link.href}>`];
+    // rel goes first by convention (improves human readability).
+    parts.push(`rel=${formatParamValue(relValue)}`);
+    appendParam(parts, 'type', link.type, ext.has('type'));
+    appendParam(parts, 'title', link.title, ext.has('title'));
+    appendParam(parts, 'hreflang', link.hreflang, ext.has('hreflang'));
+    appendParam(parts, 'anchor', link.anchor, ext.has('anchor'));
+    if (link.params) {
+        for (const [name, value] of Object.entries(link.params)) {
+            if (name === 'rel' ||
+                name === 'type' ||
+                name === 'title' ||
+                name === 'hreflang' ||
+                name === 'anchor')
+                continue;
+            appendParam(parts, name, value, ext.has(name));
+        }
+    }
+    return parts.join('; ');
+}
+export function formatLinkHeader(links) {
+    return links.map(formatLink).join(', ');
+}
+function appendParam(parts, name, value, forceExt) {
+    if (value == null)
+        return;
+    const useExt = forceExt || needsExtEncoding(value);
+    if (useExt) {
+        // RFC 8187: percent-encode non-attr-chars; UTF-8 charset only.
+        parts.push(`${name}*=UTF-8''${encodeRFC8187(value)}`);
+    }
+    else {
+        parts.push(`${name}=${formatParamValue(value)}`);
+    }
+}
+function needsExtEncoding(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        // Non-Latin1, control chars, or CR/LF — must use RFC 8187.
+        if (code > 0xff || code < 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+function formatParamValue(value) {
+    // Token (no quoting) if every char is a tchar, else quoted-string.
+    let needsQuote = value.length === 0;
+    if (!needsQuote) {
+        for (let i = 0; i < value.length; i++) {
+            if (!isTokenChar(value.charCodeAt(i))) {
+                needsQuote = true;
+                break;
+            }
+        }
+    }
+    if (!needsQuote)
+        return value;
+    // Escape backslash, double-quote; encode CR/LF defensively even though
+    // they are technically allowed inside quoted-string when surrounded by
+    // OWS — many HTTP intermediaries reject them.
+    let out = '"';
+    for (let i = 0; i < value.length; i++) {
+        const c = value[i];
+        const code = value.charCodeAt(i);
+        if (c === '\\' || c === '"') {
+            out += '\\' + c;
+        }
+        else if (code === 0x0d) {
+            out += '%0D';
+        }
+        else if (code === 0x0a) {
+            out += '%0A';
+        }
+        else {
+            out += c;
+        }
+    }
+    out += '"';
+    return out;
+}
+function encodeRFC8187(value) {
+    // attr-char per RFC 8187: ALPHA / DIGIT / "!" "#" "$" "&" "+" "-" "." "^" "_" "`" "|" "~"
+    const bytes = new TextEncoder().encode(value);
+    let out = '';
+    for (const byte of bytes) {
+        if ((byte >= 0x30 && byte <= 0x39) || // 0-9
+            (byte >= 0x41 && byte <= 0x5a) || // A-Z
+            (byte >= 0x61 && byte <= 0x7a) || // a-z
+            byte === 0x21 || // !
+            byte === 0x23 || // #
+            byte === 0x24 || // $
+            byte === 0x26 || // &
+            byte === 0x2b || // +
+            byte === 0x2d || // -
+            byte === 0x2e || // .
+            byte === 0x5e || // ^
+            byte === 0x5f || // _
+            byte === 0x60 || // `
+            byte === 0x7c || // |
+            byte === 0x7e // ~
+        ) {
+            out += String.fromCharCode(byte);
+        }
+        else {
+            out += '%' + byte.toString(16).toUpperCase().padStart(2, '0');
+        }
+    }
+    return out;
+}
+/**
+ * Pull every `Link` header value out of a CDP `Network.Response.headers` bag.
+ * CDP joins same-name headers with `\n`; we preserve that for the parser to
+ * split.
+ */
+export function getLinkHeaderValuesFromCdp(headers) {
+    if (!headers)
+        return [];
+    const out = [];
+    for (const [name, value] of Object.entries(headers)) {
+        if (name.toLowerCase() !== 'link')
+            continue;
+        if (typeof value === 'string' && value.length > 0)
+            out.push(value);
+    }
+    return out;
+}
+/**
+ * Pull every `Link` header value out of a chrome.webRequest responseHeaders
+ * array.
+ */
+export function getLinkHeaderValuesFromWebRequest(headers) {
+    if (!headers)
+        return [];
+    const out = [];
+    for (const h of headers) {
+        if (h.name.toLowerCase() !== 'link')
+            continue;
+        if (typeof h.value === 'string' && h.value.length > 0)
+            out.push(h.value);
+    }
+    return out;
+}
+/**
+ * Pull every `Link` header value out of a Fetch API `Headers` object. Headers
+ * collapses same-name values to a comma-joined string per the spec; the
+ * parser handles that natively.
+ */
+export function getLinkHeaderValuesFromHeaders(headers) {
+    if (!headers)
+        return [];
+    const v = headers.get('link');
+    return v ? [v] : [];
+}
+//# sourceMappingURL=link-header.js.map

package/dist/node-server/_shared/link-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-header.js","sourceRoot":"","sources":["../src/link-header.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAkCH,wEAAwE;AAExE,SAAS,wBAAwB,CAAC,KAA2C;IAC3E,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB,EAAE,CAAS;IAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC;IAChB,OACE,CAAC,GAAG,GAAG;QACP,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;QACvB,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;QACvB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE3B,CAAC,EAAE,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,CAAS;IACrD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAChC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC,EAAE,CAAC;IACJ,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,sBAAsB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB,EAAE,CAAS;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IAC/D;;iDAE6C;IAC7C,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,EAAE,CAAC;IAC5C,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAAoB,EACpB,UAAkB;IAElB,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,GAAG,UAAU,CAAC;IAEnB,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QACf,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG;YAAE,MAAM;QACpB,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,CAAC,EAAE,CAAC;QACJ,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAE7B,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QACpE,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,GAAG,GAAG,CAAC;IACV,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAA2C,EAC3C,OAAgB;IAEhB,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,YAAY,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QACf,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG;YAAE,MAAM;QAEpB,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,CAAC,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,MAAM;QACzB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC,GAAG,QAAQ,CAAC;QAEb,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,CAAC,EAAE,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;AACjC,CAAC;AACD,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACnC,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,IAAI,CAAC;iBACzB,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,eAAe;IACf,CAAC,EAAE,CAAC;IACJ,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;YACZ,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AACnC,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAC/B,iBAAiB;IACjB,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM;IACrD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM;IACrD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM;IACrD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,CAAC,CAAC,IAAI;QACf,KAAK,IAAI,EAAE,IAAI;YACb,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAAc,EACd,SAAkC,EAClC,OAAgB;IAEhB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,YAAY,GAA2B,EAAE,CAAC;IAEhD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,OAAO,IAAI,IAAI;gBAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,0EAA0E;QAC1E,IAAI,IAAI,KAAK,KAAK,IAAI,KAAK,IAAI,MAAM;YAAE,SAAS;QAChD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,oEAAoE;IACpE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAe,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,IAAI,MAAM,IAAI,IAAI;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;QAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACpD,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;QAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,OAAgB;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,IAAe;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAa,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAE3C,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEhD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE7D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,IACE,IAAI,KAAK,KAAK;gBACd,IAAI,KAAK,MAAM;gBACf,IAAI,KAAK,OAAO;gBAChB,IAAI,KAAK,UAAU;gBACnB,IAAI,KAAK,QAAQ;gBAEjB,SAAS;YACX,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAClB,KAAe,EACf,IAAY,EACZ,KAAyB,EACzB,QAAiB;IAEjB,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO;IAC1B,MAAM,MAAM,GAAG,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,+DAA+D;QAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,2DAA2D;QAC3D,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,mEAAmE;IACnE,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,uEAAuE;IACvE,uEAAuE;IACvE,8CAA8C;IAC9C,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,0FAA0F;IAC1F,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;YACxC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;YACxC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;YACxC,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,IAAI,IAAI;YACrB,IAAI,KAAK,IAAI,CAAC,IAAI;UAClB,CAAC;YACD,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA8C;IAE9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,SAAS;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA4D;IAE5D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,SAAS;QAC9C,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAA4B;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtB,CAAC"}

package/dist/node-server/_shared/proxy-headers.d.ts

@@ -0,0 +1,46 @@
+/**
+ * proxy-headers — pure helpers for the `/api/fetch-proxy` forbidden-header
+ * transport.
+ *
+ * The browser silently strips a small set of "forbidden" request headers
+ * (Cookie, Origin, Referer, Proxy-*) when calling `fetch()` from page code.
+ * The proxy server restores them by reading `X-Proxy-*` headers we send in
+ * their place. Likewise, `Set-Cookie` is stripped from response headers,
+ * so the proxy bundles all `Set-Cookie` values into a JSON-encoded
+ * `X-Proxy-Set-Cookie` header that the browser can read.
+ *
+ * Extracted from `proxied-fetch.ts` so the LLM-proxy service worker can
+ * reuse them — the SW build is a standalone IIFE bundle and can't import
+ * the shell-side `proxied-fetch` module which pulls in a much larger graph.
+ */
+/**
+ * Encode request headers that browsers silently strip (forbidden headers).
+ * Cookie → X-Proxy-Cookie, Origin → X-Proxy-Origin, Referer → X-Proxy-Referer, Proxy-* → X-Proxy-Proxy-*
+ */
+export declare function encodeForbiddenRequestHeaders(headers: Record<string, string> | undefined): Record<string, string>;
+/**
+ * Decode request headers from the X-Proxy-* transport back to their real names.
+ * X-Proxy-Cookie → cookie, X-Proxy-Origin → origin, X-Proxy-Referer → referer,
+ * X-Proxy-Proxy-* → proxy-*. Inverse of `encodeForbiddenRequestHeaders` —
+ * used by the proxy server side (CLI Express handler, extension SW) before
+ * calling upstream `fetch()`. Match is case-insensitive on the `X-Proxy-`
+ * prefix; the decoded key is always lowercase.
+ */
+export declare function decodeForbiddenRequestHeaders(headers: Record<string, string>): Record<string, string>;
+/**
+ * Decode response headers that the proxy transported under non-forbidden names.
+ * X-Proxy-Set-Cookie (JSON array) → set-cookie (JSON array string)
+ */
+export declare function decodeForbiddenResponseHeaders(headers: Record<string, string>): Record<string, string>;
+/** Convert Headers or Record<string, string> to a plain Record<string, string>. */
+export declare function headersToRecord(headers: Record<string, string> | Headers | undefined): Record<string, string> | undefined;
+/**
+ * Coerce any `HeadersInit` shape (Headers / record / [k,v][] array) to a
+ * plain record so it can ride on `SecureFetchOptions.headers`. Returns
+ * `undefined` when no headers are present (or the result would be empty)
+ * so callers can omit the field entirely — preserving the "no empty
+ * object leak" contract verified by the `asWebFetch` Origin-propagation
+ * tests.
+ */
+export declare function normalizeHeadersInit(headers: Headers | Record<string, string> | Array<[string, string]> | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=proxy-headers.d.ts.map

package/dist/node-server/_shared/proxy-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-headers.d.ts","sourceRoot":"","sources":["../src/proxy-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBxB;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBxB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,GAAG,SAAS,GACpD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,GAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAgBpC"}

package/dist/node-server/_shared/proxy-headers.js

@@ -0,0 +1,133 @@
+/**
+ * proxy-headers — pure helpers for the `/api/fetch-proxy` forbidden-header
+ * transport.
+ *
+ * The browser silently strips a small set of "forbidden" request headers
+ * (Cookie, Origin, Referer, Proxy-*) when calling `fetch()` from page code.
+ * The proxy server restores them by reading `X-Proxy-*` headers we send in
+ * their place. Likewise, `Set-Cookie` is stripped from response headers,
+ * so the proxy bundles all `Set-Cookie` values into a JSON-encoded
+ * `X-Proxy-Set-Cookie` header that the browser can read.
+ *
+ * Extracted from `proxied-fetch.ts` so the LLM-proxy service worker can
+ * reuse them — the SW build is a standalone IIFE bundle and can't import
+ * the shell-side `proxied-fetch` module which pulls in a much larger graph.
+ */
+/**
+ * Encode request headers that browsers silently strip (forbidden headers).
+ * Cookie → X-Proxy-Cookie, Origin → X-Proxy-Origin, Referer → X-Proxy-Referer, Proxy-* → X-Proxy-Proxy-*
+ */
+export function encodeForbiddenRequestHeaders(headers) {
+    if (!headers)
+        return {};
+    const result = {};
+    for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === 'cookie') {
+            result['X-Proxy-Cookie'] = value;
+        }
+        else if (lower === 'origin') {
+            result['X-Proxy-Origin'] = value;
+        }
+        else if (lower === 'referer') {
+            result['X-Proxy-Referer'] = value;
+        }
+        else if (lower.startsWith('proxy-')) {
+            result[`X-Proxy-${key}`] = value;
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Decode request headers from the X-Proxy-* transport back to their real names.
+ * X-Proxy-Cookie → cookie, X-Proxy-Origin → origin, X-Proxy-Referer → referer,
+ * X-Proxy-Proxy-* → proxy-*. Inverse of `encodeForbiddenRequestHeaders` —
+ * used by the proxy server side (CLI Express handler, extension SW) before
+ * calling upstream `fetch()`. Match is case-insensitive on the `X-Proxy-`
+ * prefix; the decoded key is always lowercase.
+ */
+export function decodeForbiddenRequestHeaders(headers) {
+    const result = {};
+    for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === 'x-proxy-cookie') {
+            result['cookie'] = value;
+        }
+        else if (lower === 'x-proxy-origin') {
+            result['origin'] = value;
+        }
+        else if (lower === 'x-proxy-referer') {
+            result['referer'] = value;
+        }
+        else if (lower.startsWith('x-proxy-proxy-')) {
+            result[lower.replace(/^x-proxy-/, '')] = value;
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Decode response headers that the proxy transported under non-forbidden names.
+ * X-Proxy-Set-Cookie (JSON array) → set-cookie (JSON array string)
+ */
+export function decodeForbiddenResponseHeaders(headers) {
+    const result = {};
+    for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === 'x-proxy-set-cookie') {
+            // Value is a JSON array of Set-Cookie strings from the proxy.
+            // Keep as JSON array string since Record<string,string> can only hold one value.
+            result['set-cookie'] = value;
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/** Convert Headers or Record<string, string> to a plain Record<string, string>. */
+export function headersToRecord(headers) {
+    if (!headers)
+        return undefined;
+    if (headers instanceof Headers) {
+        const rec = {};
+        headers.forEach((v, k) => {
+            rec[k] = v;
+        });
+        return rec;
+    }
+    return headers;
+}
+/**
+ * Coerce any `HeadersInit` shape (Headers / record / [k,v][] array) to a
+ * plain record so it can ride on `SecureFetchOptions.headers`. Returns
+ * `undefined` when no headers are present (or the result would be empty)
+ * so callers can omit the field entirely — preserving the "no empty
+ * object leak" contract verified by the `asWebFetch` Origin-propagation
+ * tests.
+ */
+export function normalizeHeadersInit(headers) {
+    if (!headers)
+        return undefined;
+    if (headers instanceof Headers) {
+        const rec = {};
+        headers.forEach((v, k) => {
+            rec[k] = v;
+        });
+        return Object.keys(rec).length === 0 ? undefined : rec;
+    }
+    if (Array.isArray(headers)) {
+        const rec = {};
+        for (const [k, v] of headers)
+            rec[k] = v;
+        return Object.keys(rec).length === 0 ? undefined : rec;
+    }
+    const rec = { ...headers };
+    return Object.keys(rec).length === 0 ? undefined : rec;
+}
+//# sourceMappingURL=proxy-headers.js.map

package/dist/node-server/_shared/proxy-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-headers.js","sourceRoot":"","sources":["../src/proxy-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAA2C;IAE3C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAA+B;IAE/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA+B;IAE/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACnC,8DAA8D;YAC9D,iFAAiF;YACjF,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAC7B,OAAqD;IAErD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA+E;IAE/E,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAI,OAAkC,EAAE,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC"}