sliccy 6.211.0 → 6.212.0

package/dist/node-server/_shared/index.d.ts

@@ -21,6 +21,7 @@ export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './proxy-headers.js';
+export * from './raw-fetch-protocol.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -22,6 +22,7 @@ export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './proxy-headers.js';
+export * from './raw-fetch-protocol.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/raw-fetch-protocol.d.ts

@@ -0,0 +1,149 @@
+/**
+ * Raw-mode fetch-proxy contract (#3571). The default proxied fetch behaves like
+ * a browser (follows redirects, folds Set-Cookie into an out-of-band header,
+ * buffers bodies). Raw mode behaves like an HTTP client, so the wasm realm's
+ * HTTP proxy can hand each response to curl or git as the origin sent it:
+ *
+ *   - redirects are NOT followed; the 3xx, `Location` and `Set-Cookie` reach
+ *     the caller;
+ *   - headers travel as an ordered name/value list, so every `Set-Cookie`
+ *     stays a separate entry;
+ *   - the body is always delivered DECODED: `Content-Encoding` is removed
+ *     whenever a coding was undone, and `Content-Length` survives only when
+ *     it still counts the delivered bytes (see {@link rawResponseHeaders});
+ *   - the body streams, and nothing is read from the float's hop until the
+ *     caller asks. Chrome's own `fetch` still reads a response off the
+ *     network ahead of the reader (measured on Chrome 146: 400 MiB drained
+ *     while a page held one chunk), so the upstream itself is not throttled.
+ *
+ * Every float speaks this contract; each one frames it for its own hop. The
+ * CLI/cloud node-server route reads the request head from
+ * {@link RAW_FETCH_REQUEST_HEADER} and answers `200` with
+ * {@link RAW_FETCH_CONTENT_TYPE}, whose body is one response-head frame
+ * ({@link encodeRawResponseFrame}) followed by the upstream body bytes.
+ */
+/** Ordered header list. Names keep their case; repeats stay separate. */
+export type RawHeaderList = Array<[string, string]>;
+/** What the caller wants sent upstream. */
+export interface RawFetchRequestHead {
+    url: string;
+    method: string;
+    headers: RawHeaderList;
+}
+/** What the upstream answered, before the body. */
+export interface RawFetchResponseHead {
+    status: number;
+    statusText: string;
+    headers: RawHeaderList;
+    /** The URL that answered; with manual redirects always the request URL. */
+    url: string;
+}
+/**
+ * Request header carrying the JSON {@link RawFetchRequestHead} on the
+ * node-server hop. The hop itself is always `POST` so neither the method nor
+ * the caller's headers are subject to the browser's forbidden-name filter.
+ * Its presence (instead of `X-Target-URL`) is what selects raw mode, so a
+ * bridge that predates raw mode answers 400 rather than sending the request
+ * the default way.
+ */
+export declare const RAW_FETCH_REQUEST_HEADER = "X-Slicc-Raw-Request";
+/**
+ * Capability probe on the node-server hop: a `POST /api/fetch-proxy` carrying
+ * only this header (no `X-Target-URL`, no request head). A bridge with raw
+ * mode answers `200` JSON {@link RawFetchProbeReply}; one without it answers
+ * 400 (node-server before raw mode, swift-server) or 404 (no bridge at all),
+ * and nothing is fetched upstream either way.
+ */
+export declare const RAW_FETCH_PROBE_HEADER = "X-Slicc-Raw-Probe";
+/** Raw-mode protocol revision a bridge reports in its probe reply. */
+export declare const RAW_FETCH_PROTOCOL_VERSION = 1;
+/** What a raw-capable bridge reports about itself. */
+export interface RawFetchProbeReply {
+    rawFetch: number;
+    requestBodyStreaming: boolean;
+    maxRequestBodyBytes: number;
+}
+/** Validate a probe reply; `null` when it is not one. */
+export declare function parseRawFetchProbeReply(value: unknown): RawFetchProbeReply | null;
+/** Content type of a raw-mode answer on the node-server hop. */
+export declare const RAW_FETCH_CONTENT_TYPE = "application/vnd.slicc.raw-fetch";
+/**
+ * Request-body ceiling on the node-server hop (CLI and cloud). This hop
+ * buffers the upload on both ends for now; past this size the bridge answers
+ * 413 and the webapp refuses before sending.
+ */
+export declare const RAW_FETCH_BRIDGE_REQUEST_BODY_CAP: number;
+/** Upper bound on one encoded response-head frame. */
+export declare const RAW_FETCH_MAX_HEAD_BYTES: number;
+/** `Accept-Encoding` a float sends upstream: exactly the codings it decodes. */
+export declare const RAW_FETCH_ACCEPT_ENCODING = "gzip, deflate, br";
+/**
+ * The `Accept-Encoding` a float sets for a request with these (folded,
+ * lowercase) headers, or `undefined` to set none. A ranged request (`Range`,
+ * `If-Range`) must not offer a compressed coding: a 206 over a compressed
+ * representation carries `Content-Range` offsets into the compressed bytes,
+ * which no longer describe the body once the float decodes it, so a resumed
+ * or ranged download would assemble corrupt data. With no `Accept-Encoding`
+ * set, `fetch` itself sends `identity` for a request carrying `Range` (Fetch
+ * standard, HTTP-network-or-cache fetch), in Node and in Chrome alike.
+ */
+export declare function rawAcceptEncoding(headers: Record<string, string>): string | undefined;
+/**
+ * Whether a partial response came back with a coding the float undid
+ * (an origin that ignored `Accept-Encoding: identity`). Its `Content-Range`
+ * counts encoded bytes the caller never sees, so the float must refuse it
+ * rather than deliver it.
+ */
+export declare function isDecodedPartialResponse(input: {
+    status: number;
+    headers: RawHeaderList;
+}): boolean;
+/** Drop hop-by-hop and float-owned request headers, keeping order. */
+export declare function stripRawRequestHeaders(headers: RawHeaderList): RawHeaderList;
+/**
+ * Fold a raw list into the name → value record `fetch` sends. Repeats join
+ * with `, ` (RFC 9110 §5.3), except `Cookie`, which joins with `; `. No float
+ * can put two lines with one name on the wire: `fetch` folds them the same way.
+ */
+export declare function foldRawRequestHeaders(headers: RawHeaderList): Record<string, string>;
+export interface RawResponseHeaderInput {
+    method: string;
+    status: number;
+    headers: RawHeaderList;
+    /**
+     * The float may rewrite the body (secret scrub, gunzip sniff), so the
+     * upstream `Content-Length` would no longer count the delivered bytes.
+     */
+    bodyRewritten: boolean;
+}
+/** Whether a response to `method` with `status` carries a body at all. */
+export declare function rawResponseHasBody(method: string, status: number): boolean;
+/**
+ * The head a raw caller sees. Hop-by-hop headers go, and so do the fields
+ * the response's `Connection` header names (RFC 9110 §7.6.1). A bodiless response
+ * (HEAD, 1xx/204/205/304) keeps `Content-Encoding` and `Content-Length` as
+ * sent, since they describe the representation, not bytes on this hop.
+ * Otherwise a decoded coding drops both headers, and `Content-Length` also
+ * goes when the float rewrote the body. An unknown coding stays with its
+ * encoded bytes.
+ */
+export declare function rawResponseHeaders(input: RawResponseHeaderInput): RawHeaderList;
+/**
+ * JSON for {@link RAW_FETCH_REQUEST_HEADER}. Non-ASCII is `\u`-escaped so the
+ * value is a valid header ByteString whatever the caller's headers hold.
+ */
+export declare function encodeRawRequestHead(head: RawFetchRequestHead): string;
+/** Parse a {@link RAW_FETCH_REQUEST_HEADER} value; `null` when malformed. */
+export declare function decodeRawRequestHead(value: string): RawFetchRequestHead | null;
+/** One response-head frame: a big-endian u32 length, then UTF-8 JSON. */
+export declare function encodeRawResponseFrame(head: RawFetchResponseHead): Uint8Array;
+/**
+ * Split a response-head frame off the front of `buffer`. Returns `null` while
+ * the frame is still incomplete, and throws when it is malformed or larger
+ * than {@link RAW_FETCH_MAX_HEAD_BYTES}.
+ */
+export declare function decodeRawResponseFrame(buffer: Uint8Array): {
+    head: RawFetchResponseHead;
+    rest: Uint8Array;
+} | null;
+//# sourceMappingURL=raw-fetch-protocol.d.ts.map

package/dist/node-server/_shared/raw-fetch-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-fetch-protocol.d.ts","sourceRoot":"","sources":["../src/raw-fetch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpD,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAWjF;AAED,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAAoB,CAAC;AAEnE,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAoCpD,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAIrF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;CACxB,GAAG,OAAO,CAOV;AA2BD,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAM5E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASpF;AAWD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;IACvB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,GAAG,aAAa,CAoB/E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAKtE;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAkB9E;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,UAAU,CAM7E;AAcD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,GACjB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG,IAAI,CAezD"}

package/dist/node-server/_shared/raw-fetch-protocol.js

@@ -0,0 +1,296 @@
+/**
+ * Raw-mode fetch-proxy contract (#3571). The default proxied fetch behaves like
+ * a browser (follows redirects, folds Set-Cookie into an out-of-band header,
+ * buffers bodies). Raw mode behaves like an HTTP client, so the wasm realm's
+ * HTTP proxy can hand each response to curl or git as the origin sent it:
+ *
+ *   - redirects are NOT followed; the 3xx, `Location` and `Set-Cookie` reach
+ *     the caller;
+ *   - headers travel as an ordered name/value list, so every `Set-Cookie`
+ *     stays a separate entry;
+ *   - the body is always delivered DECODED: `Content-Encoding` is removed
+ *     whenever a coding was undone, and `Content-Length` survives only when
+ *     it still counts the delivered bytes (see {@link rawResponseHeaders});
+ *   - the body streams, and nothing is read from the float's hop until the
+ *     caller asks. Chrome's own `fetch` still reads a response off the
+ *     network ahead of the reader (measured on Chrome 146: 400 MiB drained
+ *     while a page held one chunk), so the upstream itself is not throttled.
+ *
+ * Every float speaks this contract; each one frames it for its own hop. The
+ * CLI/cloud node-server route reads the request head from
+ * {@link RAW_FETCH_REQUEST_HEADER} and answers `200` with
+ * {@link RAW_FETCH_CONTENT_TYPE}, whose body is one response-head frame
+ * ({@link encodeRawResponseFrame}) followed by the upstream body bytes.
+ */
+/**
+ * Request header carrying the JSON {@link RawFetchRequestHead} on the
+ * node-server hop. The hop itself is always `POST` so neither the method nor
+ * the caller's headers are subject to the browser's forbidden-name filter.
+ * Its presence (instead of `X-Target-URL`) is what selects raw mode, so a
+ * bridge that predates raw mode answers 400 rather than sending the request
+ * the default way.
+ */
+export const RAW_FETCH_REQUEST_HEADER = 'X-Slicc-Raw-Request';
+/**
+ * Capability probe on the node-server hop: a `POST /api/fetch-proxy` carrying
+ * only this header (no `X-Target-URL`, no request head). A bridge with raw
+ * mode answers `200` JSON {@link RawFetchProbeReply}; one without it answers
+ * 400 (node-server before raw mode, swift-server) or 404 (no bridge at all),
+ * and nothing is fetched upstream either way.
+ */
+export const RAW_FETCH_PROBE_HEADER = 'X-Slicc-Raw-Probe';
+/** Raw-mode protocol revision a bridge reports in its probe reply. */
+export const RAW_FETCH_PROTOCOL_VERSION = 1;
+/** Validate a probe reply; `null` when it is not one. */
+export function parseRawFetchProbeReply(value) {
+    if (!value || typeof value !== 'object')
+        return null;
+    const reply = value;
+    if (typeof reply.rawFetch !== 'number' || reply.rawFetch < 1)
+        return null;
+    if (typeof reply.requestBodyStreaming !== 'boolean')
+        return null;
+    if (typeof reply.maxRequestBodyBytes !== 'number')
+        return null;
+    return {
+        rawFetch: reply.rawFetch,
+        requestBodyStreaming: reply.requestBodyStreaming,
+        maxRequestBodyBytes: reply.maxRequestBodyBytes,
+    };
+}
+/** Content type of a raw-mode answer on the node-server hop. */
+export const RAW_FETCH_CONTENT_TYPE = 'application/vnd.slicc.raw-fetch';
+/**
+ * Request-body ceiling on the node-server hop (CLI and cloud). This hop
+ * buffers the upload on both ends for now; past this size the bridge answers
+ * 413 and the webapp refuses before sending.
+ */
+export const RAW_FETCH_BRIDGE_REQUEST_BODY_CAP = 256 * 1024 * 1024;
+/** Upper bound on one encoded response-head frame. */
+export const RAW_FETCH_MAX_HEAD_BYTES = 1024 * 1024;
+/**
+ * Hop-by-hop request headers (RFC 9110 §7.6.1) plus the ones the forwarding
+ * fetch owns: `host` and `content-length` are derived from the URL and body,
+ * `accept-encoding` is chosen by the float so it can decode what it asked for,
+ * and `expect` is answered by the realm proxy, not the origin.
+ */
+const RAW_REQUEST_SKIP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-connection',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+    'host',
+    'content-length',
+    'accept-encoding',
+    'expect',
+]);
+/** Hop-by-hop response headers; never part of the delivered head. */
+const RAW_RESPONSE_SKIP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-connection',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/** Content codings every float's fetch decodes on its own. */
+const DECODED_CODINGS = new Set(['gzip', 'x-gzip', 'deflate', 'br']);
+/** `Accept-Encoding` a float sends upstream: exactly the codings it decodes. */
+export const RAW_FETCH_ACCEPT_ENCODING = 'gzip, deflate, br';
+/**
+ * The `Accept-Encoding` a float sets for a request with these (folded,
+ * lowercase) headers, or `undefined` to set none. A ranged request (`Range`,
+ * `If-Range`) must not offer a compressed coding: a 206 over a compressed
+ * representation carries `Content-Range` offsets into the compressed bytes,
+ * which no longer describe the body once the float decodes it, so a resumed
+ * or ranged download would assemble corrupt data. With no `Accept-Encoding`
+ * set, `fetch` itself sends `identity` for a request carrying `Range` (Fetch
+ * standard, HTTP-network-or-cache fetch), in Node and in Chrome alike.
+ */
+export function rawAcceptEncoding(headers) {
+    return headers.range !== undefined || headers['if-range'] !== undefined
+        ? undefined
+        : RAW_FETCH_ACCEPT_ENCODING;
+}
+/**
+ * Whether a partial response came back with a coding the float undid
+ * (an origin that ignored `Accept-Encoding: identity`). Its `Content-Range`
+ * counts encoded bytes the caller never sees, so the float must refuse it
+ * rather than deliver it.
+ */
+export function isDecodedPartialResponse(input) {
+    if (input.status !== 206)
+        return false;
+    const encoding = input.headers
+        .filter(([name]) => name.toLowerCase() === 'content-encoding')
+        .map(([, value]) => value)
+        .join(',');
+    return codingsWereDecoded(encoding);
+}
+/** Statuses whose responses never carry a body. */
+const NULL_BODY_STATUSES = new Set([101, 103, 204, 205, 304]);
+function isHeaderPair(value) {
+    return (Array.isArray(value) &&
+        value.length === 2 &&
+        typeof value[0] === 'string' &&
+        typeof value[1] === 'string');
+}
+/** Tokens a `Connection` header names, lowercased. */
+function connectionTokens(headers) {
+    const tokens = new Set();
+    for (const [name, value] of headers) {
+        if (name.toLowerCase() !== 'connection')
+            continue;
+        for (const token of value.split(',')) {
+            const trimmed = token.trim().toLowerCase();
+            if (trimmed)
+                tokens.add(trimmed);
+        }
+    }
+    return tokens;
+}
+/** Drop hop-by-hop and float-owned request headers, keeping order. */
+export function stripRawRequestHeaders(headers) {
+    const named = connectionTokens(headers);
+    return headers.filter(([name]) => {
+        const lower = name.toLowerCase();
+        return !RAW_REQUEST_SKIP_HEADERS.has(lower) && !named.has(lower);
+    });
+}
+/**
+ * Fold a raw list into the name → value record `fetch` sends. Repeats join
+ * with `, ` (RFC 9110 §5.3), except `Cookie`, which joins with `; `. No float
+ * can put two lines with one name on the wire: `fetch` folds them the same way.
+ */
+export function foldRawRequestHeaders(headers) {
+    const out = {};
+    for (const [name, value] of headers) {
+        const lower = name.toLowerCase();
+        const prior = out[lower];
+        if (prior === undefined)
+            out[lower] = value;
+        else
+            out[lower] = `${prior}${lower === 'cookie' ? '; ' : ', '}${value}`;
+    }
+    return out;
+}
+/** True when every listed coding is one the float's fetch undid. */
+function codingsWereDecoded(contentEncoding) {
+    const codings = contentEncoding
+        .split(',')
+        .map((c) => c.trim().toLowerCase())
+        .filter((c) => c !== '' && c !== 'identity');
+    return codings.length > 0 && codings.every((c) => DECODED_CODINGS.has(c));
+}
+/** Whether a response to `method` with `status` carries a body at all. */
+export function rawResponseHasBody(method, status) {
+    return method.toUpperCase() !== 'HEAD' && !NULL_BODY_STATUSES.has(status);
+}
+/**
+ * The head a raw caller sees. Hop-by-hop headers go, and so do the fields
+ * the response's `Connection` header names (RFC 9110 §7.6.1). A bodiless response
+ * (HEAD, 1xx/204/205/304) keeps `Content-Encoding` and `Content-Length` as
+ * sent, since they describe the representation, not bytes on this hop.
+ * Otherwise a decoded coding drops both headers, and `Content-Length` also
+ * goes when the float rewrote the body. An unknown coding stays with its
+ * encoded bytes.
+ */
+export function rawResponseHeaders(input) {
+    const named = connectionTokens(input.headers);
+    const withoutHop = input.headers.filter(([name]) => {
+        const lower = name.toLowerCase();
+        return !RAW_RESPONSE_SKIP_HEADERS.has(lower) && !named.has(lower);
+    });
+    if (!rawResponseHasBody(input.method, input.status))
+        return withoutHop;
+    const encoding = withoutHop
+        .filter(([name]) => name.toLowerCase() === 'content-encoding')
+        .map(([, value]) => value)
+        .join(',');
+    const decoded = codingsWereDecoded(encoding);
+    const dropLength = decoded || input.bodyRewritten;
+    return withoutHop.filter(([name]) => {
+        const lower = name.toLowerCase();
+        if (lower === 'content-length')
+            return !dropLength;
+        if (lower === 'content-encoding')
+            return !decoded && encoding.trim().toLowerCase() !== 'identity';
+        return true;
+    });
+}
+/**
+ * JSON for {@link RAW_FETCH_REQUEST_HEADER}. Non-ASCII is `\u`-escaped so the
+ * value is a valid header ByteString whatever the caller's headers hold.
+ */
+export function encodeRawRequestHead(head) {
+    return JSON.stringify(head).replace(/[\u007f-￿]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+}
+/** Parse a {@link RAW_FETCH_REQUEST_HEADER} value; `null` when malformed. */
+export function decodeRawRequestHead(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return null;
+    const { url, method, headers } = parsed;
+    if (typeof url !== 'string' ||
+        typeof method !== 'string' ||
+        !/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(method)) {
+        return null;
+    }
+    if (!Array.isArray(headers) || !headers.every(isHeaderPair))
+        return null;
+    return { url, method, headers };
+}
+/** One response-head frame: a big-endian u32 length, then UTF-8 JSON. */
+export function encodeRawResponseFrame(head) {
+    const json = new TextEncoder().encode(JSON.stringify(head));
+    const frame = new Uint8Array(4 + json.byteLength);
+    new DataView(frame.buffer).setUint32(0, json.byteLength);
+    frame.set(json, 4);
+    return frame;
+}
+function isRawResponseHead(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const head = value;
+    return (typeof head.status === 'number' &&
+        typeof head.statusText === 'string' &&
+        typeof head.url === 'string' &&
+        Array.isArray(head.headers) &&
+        head.headers.every(isHeaderPair));
+}
+/**
+ * Split a response-head frame off the front of `buffer`. Returns `null` while
+ * the frame is still incomplete, and throws when it is malformed or larger
+ * than {@link RAW_FETCH_MAX_HEAD_BYTES}.
+ */
+export function decodeRawResponseFrame(buffer) {
+    if (buffer.byteLength < 4)
+        return null;
+    const length = new DataView(buffer.buffer, buffer.byteOffset, 4).getUint32(0);
+    if (length > RAW_FETCH_MAX_HEAD_BYTES) {
+        throw new Error(`raw fetch: response head of ${length} bytes exceeds the limit`);
+    }
+    if (buffer.byteLength < 4 + length)
+        return null;
+    let head;
+    try {
+        head = JSON.parse(new TextDecoder().decode(buffer.subarray(4, 4 + length)));
+    }
+    catch {
+        throw new Error('raw fetch: malformed response head');
+    }
+    if (!isRawResponseHead(head))
+        throw new Error('raw fetch: malformed response head');
+    return { head, rest: buffer.subarray(4 + length) };
+}
+//# sourceMappingURL=raw-fetch-protocol.js.map

package/dist/node-server/_shared/raw-fetch-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-fetch-protocol.js","sourceRoot":"","sources":["../src/raw-fetch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAqBH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAS5C,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,KAAoC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;CACT,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AAErE,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA+B;IAC/D,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS;QACrE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yBAAyB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;SAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAC7B,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY;YAAE,SAAS;QAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;;YACvC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,kBAAkB,CAAC,eAAuB;IACjD,MAAM,OAAO,GAAG,eAAe;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAaD,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAc;IAC/D,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA6B;IAC9D,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,MAAM,QAAQ,GAAG,UAAU;SACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC;IAClD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,gBAAgB;YAAE,OAAO,CAAC,UAAU,CAAC;QACnD,IAAI,KAAK,KAAK,kBAAkB;YAC9B,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAyB;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CACjC,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAsC,CAAC;IACxE,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,KAAsC,CAAC;IACpD,OAAO,CACL,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAC5B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAkB;IAElB,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAG,wBAAwB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,0BAA0B,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC"}

package/dist/node-server/fetch-proxy-headers.d.ts

@@ -68,11 +68,13 @@ export declare const FETCH_PROXY_BASE_EXPOSE_HEADERS: readonly string[];
  */
 export declare function buildFetchProxyExposeHeaders(forwardedHeaderNames: Iterable<string>): string;
 /**
- * Which requests the global `express.json()` consumes. Two exclusions:
+ * Which requests the global `express.json()` consumes. Three exclusions:
  *
  *   - `X-Slicc-Raw-Body: 1` — SigV4-signed bodies must reach the
  *     /api/fetch-proxy handler byte-for-byte (the parser would re-serialize
  *     them via JSON.stringify and break the signature);
+ *   - `X-Slicc-Raw-Request` — raw-mode fetch-proxy uploads, read as a
+ *     bounded byte stream by `routes/fetch-proxy-raw.ts`;
  *   - the stable hostfs dispatcher — it owns a bounded 1 MiB parser and an
  *     errno error adapter, and this parser is mounted ahead of
  *     `registerHostFsRoutes`, so without the exclusion it would consume the

package/dist/node-server/fetch-proxy-headers.js

@@ -121,11 +121,13 @@ export function buildFetchProxyExposeHeaders(forwardedHeaderNames) {
     return out.join(', ');
 }
 /**
- * Which requests the global `express.json()` consumes. Two exclusions:
+ * Which requests the global `express.json()` consumes. Three exclusions:
  *
  *   - `X-Slicc-Raw-Body: 1` — SigV4-signed bodies must reach the
  *     /api/fetch-proxy handler byte-for-byte (the parser would re-serialize
  *     them via JSON.stringify and break the signature);
+ *   - `X-Slicc-Raw-Request` — raw-mode fetch-proxy uploads, read as a
+ *     bounded byte stream by `routes/fetch-proxy-raw.ts`;
  *   - the stable hostfs dispatcher — it owns a bounded 1 MiB parser and an
  *     errno error adapter, and this parser is mounted ahead of
  *     `registerHostFsRoutes`, so without the exclusion it would consume the
@@ -134,6 +136,8 @@ export function buildFetchProxyExposeHeaders(forwardedHeaderNames) {
 export function shouldParseGlobalJson(req) {
     if (req.headers['x-slicc-raw-body'] === '1')
         return false;
+    if (req.headers['x-slicc-raw-request'] !== undefined)
+        return false;
     if (isHostFsStableBodyRequest(req))
         return false;
     return (req.headers['content-type'] ?? '').includes('application/json');

package/dist/node-server/index.js

@@ -42,7 +42,9 @@ import { runInstallCli } from './install-cli.js';
 import { resolveCliBrowserLaunchUrl } from './launch-url.js';
 import { createHttpCdp, registerLeaderRestartEndpoint } from './leader-restart.js';
 import { buildLocalApiDescriptor, sliccLinksMiddleware } from './links-middleware.js';
+import { AgentActivityTracker } from './routes/agent-activity.js';
 import { registerFetchProxyRoute } from './routes/fetch-proxy.js';
+import { registerRawFetchProxyRoute } from './routes/fetch-proxy-raw.js';
 import { registerHandoffRoute } from './routes/handoff.js';
 import { registerLickApiRoutes } from './routes/lick-api.js';
 import { createLickBridge } from './routes/lick-bridge.js';
@@ -1194,6 +1196,17 @@ function createCdpWebSocketServer(bridgeToken) {
         },
     });
 }
+/**
+ * Fetch proxy — forwards cross-origin requests from the browser to bypass CORS,
+ * injecting/unmasking secrets and streaming the response with a UTF-8-safe
+ * scrub. Raw mode (#3571) is mounted first and falls through for default
+ * requests; both share one agent-activity window.
+ */
+function mountFetchProxy(app, secretProxy) {
+    const activityTracker = new AgentActivityTracker();
+    registerRawFetchProxyRoute(app, { secretProxy, activityTracker });
+    registerFetchProxyRoute(app, { secretProxy, activityTracker });
+}
 async function main() {
     // Resolve ports first; `launchBrowser` is deferred until AFTER
     // `server.listen()` so the /cdp bridge is accepting connections before
@@ -1297,9 +1310,7 @@ async function main() {
     const computerDemo = RUNTIME_FLAGS.computerDemo ? new ComputerDemoState() : null;
     if (computerDemo)
         registerComputerDemoRoutes(app, computerDemo);
-    // Fetch proxy — forwards cross-origin requests from the browser to bypass CORS,
-    // injecting/unmasking secrets and streaming the response with a UTF-8-safe scrub.
-    registerFetchProxyRoute(app, { secretProxy });
+    mountFetchProxy(app, secretProxy);
     // node-server serves no UI in any mode: it is a pure /cdp bridge + /api
     // surface. Chrome opens the sliccy.ai-hosted leader which talks to /cdp +
     // /api cross-origin. Create the HTTP server so we can attach the /cdp WS

package/dist/node-server/routes/fetch-proxy-raw.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Raw mode of `/api/fetch-proxy` (#3571): the HTTP-client flavor the wasm
+ * realm's proxy forwards curl and git through. The wire contract lives in
+ * `@slicc/shared-ts` `raw-fetch-protocol.ts`; this module is the CLI/cloud
+ * float's side of it. Differences from the default route:
+ *
+ *   - the request head (URL, method, ordered headers) arrives as JSON in
+ *     `X-Slicc-Raw-Request`, so the browser's forbidden-header filter and the
+ *     page's own headers (User-Agent, Sec-Fetch-*) never reach upstream;
+ *   - redirects are manual: the 3xx, `Location` and every `Set-Cookie` go
+ *     back to the caller in an ordered header list;
+ *   - the answer is always `200` + `application/vnd.slicc.raw-fetch`: one
+ *     response-head frame, then the body streamed through (Node `pipe`
+ *     pauses upstream whenever the browser stops reading, though Chrome's
+ *     `fetch` reads ahead of its JS reader, so in practice it rarely does).
+ *
+ * Secret handling is the default route's: masked values in headers, URL
+ * credentials and text bodies are unmasked for allowed domains only (403
+ * otherwise), `x-slicc-hmac-sign` is honored, and response header values and
+ * text bodies are scrubbed, including `Location`.
+ */
+import type { Express, Request, Response } from 'express';
+import type { SecretProxyManager } from '../secrets/proxy-manager.js';
+import type { AgentActivityTracker } from './agent-activity.js';
+export interface RawFetchProxyDeps {
+    secretProxy: SecretProxyManager;
+    activityTracker: AgentActivityTracker;
+    logger?: Pick<Console, 'log' | 'warn' | 'error'>;
+    /** Request-body ceiling; tests shrink it. */
+    maxRequestBodyBytes?: number;
+}
+/** Whether this `/api/fetch-proxy` request selected raw mode. */
+export declare function isRawFetchProxyRequest(req: Request): boolean;
+/** Whether this `/api/fetch-proxy` request asks what raw mode can do. */
+export declare function isRawFetchProbe(req: Request): boolean;
+/** Answer the capability probe; nothing is fetched upstream. */
+export declare function answerRawFetchProbe(res: Response, maxRequestBodyBytes: number): void;
+export declare function handleRawFetchProxy(req: Request, res: Response, deps: RawFetchProxyDeps): Promise<void>;
+/**
+ * Mount raw mode ahead of the default `/api/fetch-proxy` handler; requests
+ * without `X-Slicc-Raw-Request` fall through to it untouched.
+ */
+export declare function registerRawFetchProxyRoute(app: Express, deps: RawFetchProxyDeps): void;