sliccy 6.211.0 → 6.213.0

package/dist/node-server/_shared/index.d.ts

@@ -21,6 +21,7 @@ export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './proxy-headers.js';
+export * from './raw-fetch-protocol.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -22,6 +22,7 @@ export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
 export * from './proxy-headers.js';
+export * from './raw-fetch-protocol.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/raw-fetch-protocol.d.ts

@@ -0,0 +1,241 @@
+/**
+ * Raw-mode fetch-proxy contract (#3571). The default proxied fetch behaves like
+ * a browser (follows redirects, folds Set-Cookie into an out-of-band header,
+ * buffers bodies). Raw mode behaves like an HTTP client, so the wasm realm's
+ * HTTP proxy can hand each response to curl or git as the origin sent it:
+ *
+ *   - redirects are NOT followed; the 3xx, `Location` and `Set-Cookie` reach
+ *     the caller;
+ *   - headers travel as an ordered name/value list, so every `Set-Cookie`
+ *     stays a separate entry;
+ *   - the body is always delivered DECODED: `Content-Encoding` is removed
+ *     whenever a coding was undone, and `Content-Length` survives only when
+ *     it still counts the delivered bytes (see {@link rawResponseHeaders});
+ *   - the body streams, and nothing is read from the float's hop until the
+ *     caller asks. Chrome's own `fetch` still reads a response off the
+ *     network ahead of the reader (measured on Chrome 146: 400 MiB drained
+ *     while a page held one chunk), so the upstream itself is not throttled.
+ *
+ * Every float speaks this contract; each one frames it for its own hop. The
+ * CLI/cloud node-server route reads the request head from
+ * {@link RAW_FETCH_REQUEST_HEADER} and answers `200` with
+ * {@link RAW_FETCH_CONTENT_TYPE}, whose body is one response-head frame
+ * ({@link encodeRawResponseFrame}) followed by the upstream body bytes.
+ */
+/** Ordered header list. Names keep their case; repeats stay separate. */
+export type RawHeaderList = Array<[string, string]>;
+/** What the caller wants sent upstream. */
+export interface RawFetchRequestHead {
+    url: string;
+    method: string;
+    headers: RawHeaderList;
+}
+/** What the upstream answered, before the body. */
+export interface RawFetchResponseHead {
+    status: number;
+    statusText: string;
+    headers: RawHeaderList;
+    /** The URL that answered; with manual redirects always the request URL. */
+    url: string;
+}
+/**
+ * Request header carrying the JSON {@link RawFetchRequestHead} on the
+ * node-server hop. The hop itself is always `POST` so neither the method nor
+ * the caller's headers are subject to the browser's forbidden-name filter.
+ * Its presence (instead of `X-Target-URL`) is what selects raw mode, so a
+ * bridge that predates raw mode answers 400 rather than sending the request
+ * the default way.
+ */
+export declare const RAW_FETCH_REQUEST_HEADER = "X-Slicc-Raw-Request";
+/**
+ * Capability probe on the node-server hop: a `POST /api/fetch-proxy` carrying
+ * only this header (no `X-Target-URL`, no request head). A bridge with raw
+ * mode answers `200` JSON {@link RawFetchProbeReply}; one without it answers
+ * 400 (node-server before raw mode, swift-server) or 404 (no bridge at all),
+ * and nothing is fetched upstream either way.
+ */
+export declare const RAW_FETCH_PROBE_HEADER = "X-Slicc-Raw-Probe";
+/** Raw-mode protocol revision a bridge reports in its probe reply. */
+export declare const RAW_FETCH_PROTOCOL_VERSION = 1;
+/** What a raw-capable bridge reports about itself. */
+export interface RawFetchProbeReply {
+    rawFetch: number;
+    requestBodyStreaming: boolean;
+    maxRequestBodyBytes: number;
+}
+/** Validate a probe reply; `null` when it is not one. */
+export declare function parseRawFetchProbeReply(value: unknown): RawFetchProbeReply | null;
+/** Content type of a raw-mode answer on the node-server hop. */
+export declare const RAW_FETCH_CONTENT_TYPE = "application/vnd.slicc.raw-fetch";
+/**
+ * Request-body ceiling on the node-server hop (CLI and cloud). This hop
+ * buffers the upload on both ends for now; past this size the bridge answers
+ * 413 and the webapp refuses before sending.
+ */
+export declare const RAW_FETCH_BRIDGE_REQUEST_BODY_CAP: number;
+/** Upper bound on one encoded response-head frame. */
+export declare const RAW_FETCH_MAX_HEAD_BYTES: number;
+/** Content codings Node's fetch (undici) decodes on its own: the bridge floats. */
+export declare const NODE_DECODED_CODINGS: ReadonlySet<string>;
+/**
+ * Content codings Chrome's fetch decodes on its own: the extension float.
+ * Chrome advertises `zstd` itself and cannot be told otherwise.
+ */
+export declare const BROWSER_DECODED_CODINGS: ReadonlySet<string>;
+/** `Accept-Encoding` a float sends upstream: exactly the codings it decodes. */
+export declare const RAW_FETCH_ACCEPT_ENCODING = "gzip, deflate, br";
+/**
+ * The `Accept-Encoding` a float sets for a request with these (folded,
+ * lowercase) headers, or `undefined` to set none. A ranged request (`Range`,
+ * `If-Range`) must not offer a compressed coding: a 206 over a compressed
+ * representation carries `Content-Range` offsets into the compressed bytes,
+ * which no longer describe the body once the float decodes it, so a resumed
+ * or ranged download would assemble corrupt data. With no `Accept-Encoding`
+ * set, `fetch` itself sends `identity` for a request carrying `Range` (Fetch
+ * standard, HTTP-network-or-cache fetch), in Node and in Chrome alike.
+ */
+export declare function rawAcceptEncoding(headers: Record<string, string>): string | undefined;
+/**
+ * Whether a partial response came back with a coding the float undid
+ * (an origin that ignored `Accept-Encoding: identity`). Its `Content-Range`
+ * counts encoded bytes the caller never sees, so the float must refuse it
+ * rather than deliver it.
+ */
+export declare function isDecodedPartialResponse(input: {
+    status: number;
+    headers: RawHeaderList;
+    /** Codings the float's fetch undid; defaults to {@link NODE_DECODED_CODINGS}. */
+    decodedCodings?: ReadonlySet<string>;
+}): boolean;
+/** Drop hop-by-hop and float-owned request headers, keeping order. */
+export declare function stripRawRequestHeaders(headers: RawHeaderList): RawHeaderList;
+/**
+ * Fold a raw list into the name → value record `fetch` sends. Repeats join
+ * with `, ` (RFC 9110 §5.3), except `Cookie`, which joins with `; `. No float
+ * can put two lines with one name on the wire: `fetch` folds them the same way.
+ */
+export declare function foldRawRequestHeaders(headers: RawHeaderList): Record<string, string>;
+export interface RawResponseHeaderInput {
+    method: string;
+    status: number;
+    headers: RawHeaderList;
+    /**
+     * The float may rewrite the body (secret scrub, gunzip sniff), so the
+     * upstream `Content-Length` would no longer count the delivered bytes.
+     */
+    bodyRewritten: boolean;
+    /** Codings the float's fetch undid; defaults to {@link NODE_DECODED_CODINGS}. */
+    decodedCodings?: ReadonlySet<string>;
+}
+/** Whether a response to `method` with `status` carries a body at all. */
+export declare function rawResponseHasBody(method: string, status: number): boolean;
+/**
+ * The head a raw caller sees. Hop-by-hop headers go, and so do the fields
+ * the response's `Connection` header names (RFC 9110 §7.6.1). A bodiless response
+ * (HEAD, 1xx/204/205/304) keeps `Content-Encoding` and `Content-Length` as
+ * sent, since they describe the representation, not bytes on this hop.
+ * Otherwise a decoded coding drops both headers, and `Content-Length` also
+ * goes when the float rewrote the body. An unknown coding stays with its
+ * encoded bytes.
+ */
+export declare function rawResponseHeaders(input: RawResponseHeaderInput): RawHeaderList;
+/**
+ * JSON for {@link RAW_FETCH_REQUEST_HEADER}. Non-ASCII is `\u`-escaped so the
+ * value is a valid header ByteString whatever the caller's headers hold.
+ */
+export declare function encodeRawRequestHead(head: RawFetchRequestHead): string;
+/** Parse a {@link RAW_FETCH_REQUEST_HEADER} value; `null` when malformed. */
+export declare function decodeRawRequestHead(value: string): RawFetchRequestHead | null;
+/** One response-head frame: a big-endian u32 length, then UTF-8 JSON. */
+export declare function encodeRawResponseFrame(head: RawFetchResponseHead): Uint8Array;
+/**
+ * Split a response-head frame off the front of `buffer`. Returns `null` while
+ * the frame is still incomplete, and throws when it is malformed or larger
+ * than {@link RAW_FETCH_MAX_HEAD_BYTES}.
+ */
+export declare function decodeRawResponseFrame(buffer: Uint8Array): {
+    head: RawFetchResponseHead;
+    rest: Uint8Array;
+} | null;
+/**
+ * Why a raw fetch failed without an upstream HTTP response. The accompanying
+ * status is the one a proxy should answer its own client with.
+ */
+export type RawFetchErrorCode = 
+/** The float has no raw mode (a bridge that predates it, or swift-server). */
+'unsupported'
+/** The request body is past the float's ceiling. */
+ | 'request-body-too-large'
+/** A masked secret was used against a domain it is not scoped to. */
+ | 'forbidden-secret'
+/** The upstream could not be reached, or the stream broke. */
+ | 'upstream'
+/** The float's own transport answered with something raw mode cannot read. */
+ | 'bridge';
+/** URL-fragment prefix that tags one raw request for `webRequest` correlation. */
+export declare const RAW_FETCH_TAG_PREFIX = "slicc-raw-";
+/** Largest body chunk one Port message carries. */
+export declare const RAW_FETCH_PORT_CHUNK_BYTES: number;
+/** Chunks a receiver grants up front, in each direction. */
+export declare const RAW_FETCH_PORT_WINDOW = 4;
+/**
+ * Uploads a float buffers before sending. Past it the answer is 413. The
+ * extension streams large non-text bodies instead (see
+ * `RAW_FETCH_STREAM_THRESHOLD_BYTES`), so there the ceiling bounds only the
+ * bodies it must hold whole: text bodies (secret unmask) and HMAC-signed ones.
+ */
+export declare const RAW_FETCH_BUFFERED_REQUEST_BODY_CAP: number;
+/** Non-text uploads at least this large (or of unknown length) are streamed. */
+export declare const RAW_FETCH_STREAM_THRESHOLD_BYTES: number;
+/** Page → service worker. */
+export type RawPortRequestMsg = 
+/**
+ * Capability probe, answered with `raw-probe-reply`. A service worker
+ * that predates raw mode ignores it, so the page treats silence as
+ * unsupported rather than sending a `raw-request` nobody will answer.
+ */
+{
+    type: 'raw-probe';
+} | {
+    type: 'raw-request';
+    head: RawFetchRequestHead;
+    /** Whether `raw-body-chunk`s follow, ended by `raw-body-end`. */
+    hasBody: boolean;
+    /** Upload size when the caller knows it. */
+    bodyLength?: number;
+    /** Response chunks the page grants up front. */
+    credits: number;
+} | {
+    type: 'raw-body-chunk';
+    dataBase64: string;
+} | {
+    type: 'raw-body-end';
+} | {
+    type: 'raw-credit';
+    chunks: number;
+};
+/** Service worker → page. */
+export type RawPortResponseMsg = {
+    type: 'raw-probe-reply';
+    reply: RawFetchProbeReply;
+} | {
+    type: 'raw-body-credit';
+    chunks: number;
+} | {
+    type: 'raw-response-head';
+    head: RawFetchResponseHead;
+    hasBody: boolean;
+} | {
+    type: 'raw-response-chunk';
+    dataBase64: string;
+} | {
+    type: 'raw-response-end';
+} | {
+    type: 'raw-response-error';
+    code: RawFetchErrorCode;
+    status: number;
+    error: string;
+};
+/** `HTTP/1.1 302 Found` → `Found`; HTTP/2 status lines carry no reason. */
+export declare function reasonFromStatusLine(statusLine: string | undefined): string;
+//# sourceMappingURL=raw-fetch-protocol.d.ts.map

package/dist/node-server/_shared/raw-fetch-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-fetch-protocol.d.ts","sourceRoot":"","sources":["../src/raw-fetch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpD,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAWjF;AAED,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAAoB,CAAC;AAEnE,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAiCpD,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAKnD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAGtD,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAIrF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;IACvB,iFAAiF;IACjF,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACtC,GAAG,OAAO,CAOV;AA2BD,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAM5E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASpF;AAWD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;IACvB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,iFAAiF;IACjF,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,GAAG,aAAa,CAoB/E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAKtE;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAkB9E;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,UAAU,CAM7E;AAcD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,GACjB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG,IAAI,CAezD;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB;AAC3B,8EAA8E;AAC5E,aAAa;AACf,oDAAoD;GAClD,wBAAwB;AAC1B,qEAAqE;GACnE,kBAAkB;AACpB,8DAA8D;GAC5D,UAAU;AACZ,8EAA8E;GAC5E,QAAQ,CAAC;AAUb,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,mDAAmD;AACnD,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AAErE,gFAAgF;AAChF,eAAO,MAAM,gCAAgC,QAAkB,CAAC;AAEhE,6BAA6B;AAC7B,MAAM,MAAM,iBAAiB;AAC3B;;;;GAIG;AACD;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,6BAA6B;AAC7B,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG3E"}

package/dist/node-server/_shared/raw-fetch-protocol.js

@@ -0,0 +1,336 @@
+/**
+ * Raw-mode fetch-proxy contract (#3571). The default proxied fetch behaves like
+ * a browser (follows redirects, folds Set-Cookie into an out-of-band header,
+ * buffers bodies). Raw mode behaves like an HTTP client, so the wasm realm's
+ * HTTP proxy can hand each response to curl or git as the origin sent it:
+ *
+ *   - redirects are NOT followed; the 3xx, `Location` and `Set-Cookie` reach
+ *     the caller;
+ *   - headers travel as an ordered name/value list, so every `Set-Cookie`
+ *     stays a separate entry;
+ *   - the body is always delivered DECODED: `Content-Encoding` is removed
+ *     whenever a coding was undone, and `Content-Length` survives only when
+ *     it still counts the delivered bytes (see {@link rawResponseHeaders});
+ *   - the body streams, and nothing is read from the float's hop until the
+ *     caller asks. Chrome's own `fetch` still reads a response off the
+ *     network ahead of the reader (measured on Chrome 146: 400 MiB drained
+ *     while a page held one chunk), so the upstream itself is not throttled.
+ *
+ * Every float speaks this contract; each one frames it for its own hop. The
+ * CLI/cloud node-server route reads the request head from
+ * {@link RAW_FETCH_REQUEST_HEADER} and answers `200` with
+ * {@link RAW_FETCH_CONTENT_TYPE}, whose body is one response-head frame
+ * ({@link encodeRawResponseFrame}) followed by the upstream body bytes.
+ */
+/**
+ * Request header carrying the JSON {@link RawFetchRequestHead} on the
+ * node-server hop. The hop itself is always `POST` so neither the method nor
+ * the caller's headers are subject to the browser's forbidden-name filter.
+ * Its presence (instead of `X-Target-URL`) is what selects raw mode, so a
+ * bridge that predates raw mode answers 400 rather than sending the request
+ * the default way.
+ */
+export const RAW_FETCH_REQUEST_HEADER = 'X-Slicc-Raw-Request';
+/**
+ * Capability probe on the node-server hop: a `POST /api/fetch-proxy` carrying
+ * only this header (no `X-Target-URL`, no request head). A bridge with raw
+ * mode answers `200` JSON {@link RawFetchProbeReply}; one without it answers
+ * 400 (node-server before raw mode, swift-server) or 404 (no bridge at all),
+ * and nothing is fetched upstream either way.
+ */
+export const RAW_FETCH_PROBE_HEADER = 'X-Slicc-Raw-Probe';
+/** Raw-mode protocol revision a bridge reports in its probe reply. */
+export const RAW_FETCH_PROTOCOL_VERSION = 1;
+/** Validate a probe reply; `null` when it is not one. */
+export function parseRawFetchProbeReply(value) {
+    if (!value || typeof value !== 'object')
+        return null;
+    const reply = value;
+    if (typeof reply.rawFetch !== 'number' || reply.rawFetch < 1)
+        return null;
+    if (typeof reply.requestBodyStreaming !== 'boolean')
+        return null;
+    if (typeof reply.maxRequestBodyBytes !== 'number')
+        return null;
+    return {
+        rawFetch: reply.rawFetch,
+        requestBodyStreaming: reply.requestBodyStreaming,
+        maxRequestBodyBytes: reply.maxRequestBodyBytes,
+    };
+}
+/** Content type of a raw-mode answer on the node-server hop. */
+export const RAW_FETCH_CONTENT_TYPE = 'application/vnd.slicc.raw-fetch';
+/**
+ * Request-body ceiling on the node-server hop (CLI and cloud). This hop
+ * buffers the upload on both ends for now; past this size the bridge answers
+ * 413 and the webapp refuses before sending.
+ */
+export const RAW_FETCH_BRIDGE_REQUEST_BODY_CAP = 256 * 1024 * 1024;
+/** Upper bound on one encoded response-head frame. */
+export const RAW_FETCH_MAX_HEAD_BYTES = 1024 * 1024;
+/**
+ * Hop-by-hop request headers (RFC 9110 §7.6.1) plus the ones the forwarding
+ * fetch owns: `host` and `content-length` are derived from the URL and body,
+ * `accept-encoding` is chosen by the float so it can decode what it asked for,
+ * and `expect` is answered by the realm proxy, not the origin.
+ */
+const RAW_REQUEST_SKIP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-connection',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+    'host',
+    'content-length',
+    'accept-encoding',
+    'expect',
+]);
+/** Hop-by-hop response headers; never part of the delivered head. */
+const RAW_RESPONSE_SKIP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-connection',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/** Content codings Node's fetch (undici) decodes on its own: the bridge floats. */
+export const NODE_DECODED_CODINGS = new Set([
+    'gzip',
+    'x-gzip',
+    'deflate',
+    'br',
+]);
+/**
+ * Content codings Chrome's fetch decodes on its own: the extension float.
+ * Chrome advertises `zstd` itself and cannot be told otherwise.
+ */
+export const BROWSER_DECODED_CODINGS = new Set([
+    ...NODE_DECODED_CODINGS,
+    'zstd',
+]);
+/** `Accept-Encoding` a float sends upstream: exactly the codings it decodes. */
+export const RAW_FETCH_ACCEPT_ENCODING = 'gzip, deflate, br';
+/**
+ * The `Accept-Encoding` a float sets for a request with these (folded,
+ * lowercase) headers, or `undefined` to set none. A ranged request (`Range`,
+ * `If-Range`) must not offer a compressed coding: a 206 over a compressed
+ * representation carries `Content-Range` offsets into the compressed bytes,
+ * which no longer describe the body once the float decodes it, so a resumed
+ * or ranged download would assemble corrupt data. With no `Accept-Encoding`
+ * set, `fetch` itself sends `identity` for a request carrying `Range` (Fetch
+ * standard, HTTP-network-or-cache fetch), in Node and in Chrome alike.
+ */
+export function rawAcceptEncoding(headers) {
+    return headers.range !== undefined || headers['if-range'] !== undefined
+        ? undefined
+        : RAW_FETCH_ACCEPT_ENCODING;
+}
+/**
+ * Whether a partial response came back with a coding the float undid
+ * (an origin that ignored `Accept-Encoding: identity`). Its `Content-Range`
+ * counts encoded bytes the caller never sees, so the float must refuse it
+ * rather than deliver it.
+ */
+export function isDecodedPartialResponse(input) {
+    if (input.status !== 206)
+        return false;
+    const encoding = input.headers
+        .filter(([name]) => name.toLowerCase() === 'content-encoding')
+        .map(([, value]) => value)
+        .join(',');
+    return codingsWereDecoded(encoding, input.decodedCodings ?? NODE_DECODED_CODINGS);
+}
+/** Statuses whose responses never carry a body. */
+const NULL_BODY_STATUSES = new Set([101, 103, 204, 205, 304]);
+function isHeaderPair(value) {
+    return (Array.isArray(value) &&
+        value.length === 2 &&
+        typeof value[0] === 'string' &&
+        typeof value[1] === 'string');
+}
+/** Tokens a `Connection` header names, lowercased. */
+function connectionTokens(headers) {
+    const tokens = new Set();
+    for (const [name, value] of headers) {
+        if (name.toLowerCase() !== 'connection')
+            continue;
+        for (const token of value.split(',')) {
+            const trimmed = token.trim().toLowerCase();
+            if (trimmed)
+                tokens.add(trimmed);
+        }
+    }
+    return tokens;
+}
+/** Drop hop-by-hop and float-owned request headers, keeping order. */
+export function stripRawRequestHeaders(headers) {
+    const named = connectionTokens(headers);
+    return headers.filter(([name]) => {
+        const lower = name.toLowerCase();
+        return !RAW_REQUEST_SKIP_HEADERS.has(lower) && !named.has(lower);
+    });
+}
+/**
+ * Fold a raw list into the name → value record `fetch` sends. Repeats join
+ * with `, ` (RFC 9110 §5.3), except `Cookie`, which joins with `; `. No float
+ * can put two lines with one name on the wire: `fetch` folds them the same way.
+ */
+export function foldRawRequestHeaders(headers) {
+    const out = {};
+    for (const [name, value] of headers) {
+        const lower = name.toLowerCase();
+        const prior = out[lower];
+        if (prior === undefined)
+            out[lower] = value;
+        else
+            out[lower] = `${prior}${lower === 'cookie' ? '; ' : ', '}${value}`;
+    }
+    return out;
+}
+/** True when every listed coding is one the float's fetch undid. */
+function codingsWereDecoded(contentEncoding, decodedCodings) {
+    const codings = contentEncoding
+        .split(',')
+        .map((c) => c.trim().toLowerCase())
+        .filter((c) => c !== '' && c !== 'identity');
+    return codings.length > 0 && codings.every((c) => decodedCodings.has(c));
+}
+/** Whether a response to `method` with `status` carries a body at all. */
+export function rawResponseHasBody(method, status) {
+    return method.toUpperCase() !== 'HEAD' && !NULL_BODY_STATUSES.has(status);
+}
+/**
+ * The head a raw caller sees. Hop-by-hop headers go, and so do the fields
+ * the response's `Connection` header names (RFC 9110 §7.6.1). A bodiless response
+ * (HEAD, 1xx/204/205/304) keeps `Content-Encoding` and `Content-Length` as
+ * sent, since they describe the representation, not bytes on this hop.
+ * Otherwise a decoded coding drops both headers, and `Content-Length` also
+ * goes when the float rewrote the body. An unknown coding stays with its
+ * encoded bytes.
+ */
+export function rawResponseHeaders(input) {
+    const named = connectionTokens(input.headers);
+    const withoutHop = input.headers.filter(([name]) => {
+        const lower = name.toLowerCase();
+        return !RAW_RESPONSE_SKIP_HEADERS.has(lower) && !named.has(lower);
+    });
+    if (!rawResponseHasBody(input.method, input.status))
+        return withoutHop;
+    const encoding = withoutHop
+        .filter(([name]) => name.toLowerCase() === 'content-encoding')
+        .map(([, value]) => value)
+        .join(',');
+    const decoded = codingsWereDecoded(encoding, input.decodedCodings ?? NODE_DECODED_CODINGS);
+    const dropLength = decoded || input.bodyRewritten;
+    return withoutHop.filter(([name]) => {
+        const lower = name.toLowerCase();
+        if (lower === 'content-length')
+            return !dropLength;
+        if (lower === 'content-encoding')
+            return !decoded && encoding.trim().toLowerCase() !== 'identity';
+        return true;
+    });
+}
+/**
+ * JSON for {@link RAW_FETCH_REQUEST_HEADER}. Non-ASCII is `\u`-escaped so the
+ * value is a valid header ByteString whatever the caller's headers hold.
+ */
+export function encodeRawRequestHead(head) {
+    return JSON.stringify(head).replace(/[\u007f-￿]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+}
+/** Parse a {@link RAW_FETCH_REQUEST_HEADER} value; `null` when malformed. */
+export function decodeRawRequestHead(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return null;
+    const { url, method, headers } = parsed;
+    if (typeof url !== 'string' ||
+        typeof method !== 'string' ||
+        !/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(method)) {
+        return null;
+    }
+    if (!Array.isArray(headers) || !headers.every(isHeaderPair))
+        return null;
+    return { url, method, headers };
+}
+/** One response-head frame: a big-endian u32 length, then UTF-8 JSON. */
+export function encodeRawResponseFrame(head) {
+    const json = new TextEncoder().encode(JSON.stringify(head));
+    const frame = new Uint8Array(4 + json.byteLength);
+    new DataView(frame.buffer).setUint32(0, json.byteLength);
+    frame.set(json, 4);
+    return frame;
+}
+function isRawResponseHead(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const head = value;
+    return (typeof head.status === 'number' &&
+        typeof head.statusText === 'string' &&
+        typeof head.url === 'string' &&
+        Array.isArray(head.headers) &&
+        head.headers.every(isHeaderPair));
+}
+/**
+ * Split a response-head frame off the front of `buffer`. Returns `null` while
+ * the frame is still incomplete, and throws when it is malformed or larger
+ * than {@link RAW_FETCH_MAX_HEAD_BYTES}.
+ */
+export function decodeRawResponseFrame(buffer) {
+    if (buffer.byteLength < 4)
+        return null;
+    const length = new DataView(buffer.buffer, buffer.byteOffset, 4).getUint32(0);
+    if (length > RAW_FETCH_MAX_HEAD_BYTES) {
+        throw new Error(`raw fetch: response head of ${length} bytes exceeds the limit`);
+    }
+    if (buffer.byteLength < 4 + length)
+        return null;
+    let head;
+    try {
+        head = JSON.parse(new TextDecoder().decode(buffer.subarray(4, 4 + length)));
+    }
+    catch {
+        throw new Error('raw fetch: malformed response head');
+    }
+    if (!isRawResponseHead(head))
+        throw new Error('raw fetch: malformed response head');
+    return { head, rest: buffer.subarray(4 + length) };
+}
+// ── Extension Port leg ─────────────────────────────────────────────────
+//
+// On the extension float the page talks to the service worker over the
+// pinned `fetch-proxy.fetch` Port; raw mode rides it with the messages
+// below. Port messages are JSON, so bytes travel as base64, and the Port
+// has no backpressure of its own, so each direction is credit-based: a
+// sender may have at most as many chunks outstanding as the receiver granted.
+/** URL-fragment prefix that tags one raw request for `webRequest` correlation. */
+export const RAW_FETCH_TAG_PREFIX = 'slicc-raw-';
+/** Largest body chunk one Port message carries. */
+export const RAW_FETCH_PORT_CHUNK_BYTES = 256 * 1024;
+/** Chunks a receiver grants up front, in each direction. */
+export const RAW_FETCH_PORT_WINDOW = 4;
+/**
+ * Uploads a float buffers before sending. Past it the answer is 413. The
+ * extension streams large non-text bodies instead (see
+ * `RAW_FETCH_STREAM_THRESHOLD_BYTES`), so there the ceiling bounds only the
+ * bodies it must hold whole: text bodies (secret unmask) and HMAC-signed ones.
+ */
+export const RAW_FETCH_BUFFERED_REQUEST_BODY_CAP = 256 * 1024 * 1024;
+/** Non-text uploads at least this large (or of unknown length) are streamed. */
+export const RAW_FETCH_STREAM_THRESHOLD_BYTES = 8 * 1024 * 1024;
+/** `HTTP/1.1 302 Found` → `Found`; HTTP/2 status lines carry no reason. */
+export function reasonFromStatusLine(statusLine) {
+    const match = /^HTTP\/\S+\s+\d{3}\s*(.*)$/.exec(statusLine ?? '');
+    return match?.[1]?.trim() ?? '';
+}
+//# sourceMappingURL=raw-fetch-protocol.js.map

package/dist/node-server/_shared/raw-fetch-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-fetch-protocol.js","sourceRoot":"","sources":["../src/raw-fetch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAqBH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAS5C,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,KAAoC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;IACT,MAAM;IACN,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;CACT,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,IAAI;CACL,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAClE,GAAG,oBAAoB;IACvB,MAAM;CACP,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA+B;IAC/D,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS;QACrE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yBAAyB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAKxC;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;SAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,oBAAoB,CAAC,CAAC;AACpF,CAAC;AAED,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAC7B,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY;YAAE,SAAS;QAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;;YACvC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,kBAAkB,CAAC,eAAuB,EAAE,cAAmC;IACtF,MAAM,OAAO,GAAG,eAAe;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAeD,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAc;IAC/D,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA6B;IAC9D,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,MAAM,QAAQ,GAAG,UAAU;SACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,oBAAoB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC;IAClD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,gBAAgB;YAAE,OAAO,CAAC,UAAU,CAAC;QACnD,IAAI,KAAK,KAAK,kBAAkB;YAC9B,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAyB;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CACjC,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAsC,CAAC;IACxE,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAC9C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,KAAsC,CAAC;IACpD,OAAO,CACL,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAC5B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAkB;IAElB,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAG,wBAAwB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,0BAA0B,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAkBD,0EAA0E;AAC1E,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,mDAAmD;AACnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,CAAC;AAErD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAErE,gFAAgF;AAChF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAiChE,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,UAA8B;IACjE,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/node-server/fetch-proxy-headers.d.ts

@@ -68,11 +68,13 @@ export declare const FETCH_PROXY_BASE_EXPOSE_HEADERS: readonly string[];
  */
 export declare function buildFetchProxyExposeHeaders(forwardedHeaderNames: Iterable<string>): string;
 /**
- * Which requests the global `express.json()` consumes. Two exclusions:
+ * Which requests the global `express.json()` consumes. Three exclusions:
  *
  *   - `X-Slicc-Raw-Body: 1` — SigV4-signed bodies must reach the
  *     /api/fetch-proxy handler byte-for-byte (the parser would re-serialize
  *     them via JSON.stringify and break the signature);
+ *   - `X-Slicc-Raw-Request` — raw-mode fetch-proxy uploads, read as a
+ *     bounded byte stream by `routes/fetch-proxy-raw.ts`;
  *   - the stable hostfs dispatcher — it owns a bounded 1 MiB parser and an
  *     errno error adapter, and this parser is mounted ahead of
  *     `registerHostFsRoutes`, so without the exclusion it would consume the