sootsim 0.1.238 → 0.1.240

package/dist-lib/sdk.mjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.240 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 
 // cli/commands/inspect/core.ts
 function resolveMaxMsFlag(args, fallbackMs) {
@@ -250,6 +250,14 @@ function layoutGetNativeEval(opts = {}) {
         const abs = n.absolute || n.absolutePosition || { x: layout.x, y: layout.y }
         const text = typeof n.text === 'string' && n.text.trim() ? n.text.trim() : undefined
         const base = {
+          ...(typeof n.nodeId === 'number'
+            ? {
+                nodeId: n.nodeId,
+                ancestorIds: Array.isArray(n.ancestors)
+                  ? n.ancestors.map((ancestor) => ancestor && ancestor.nodeId).filter((id) => typeof id === 'number')
+                  : [],
+              }
+            : {}),
           testID: n.testID || n.testId || undefined,
           role: n.accessibilityRole || n.role || undefined,
           type: typeof n.type === 'string' ? n.type : 'node',
@@ -959,7 +967,13 @@ async function inspectScrollStateAt(bridge, x, y) {
     path: "__sootsimTest.getScrollStateAt",
     args: [x, y]
   });
-  return result && typeof result === "object" ? result : null;
+  if (!result || typeof result !== "object") return null;
+  const state = result;
+  return {
+    ...state,
+    scrollOffsetX: typeof state.scrollOffsetX === "number" ? state.scrollOffsetX : state.offsetX,
+    scrollOffsetY: typeof state.scrollOffsetY === "number" ? state.scrollOffsetY : state.offsetY
+  };
 }
 async function inspectLogs(bridge) {
   const res = await bridge.send({
@@ -1469,6 +1483,7 @@ function tapTiming(agent, opts = {}) {
 }
 function isTapSuccess(result) {
   if (!result || result.hit === false || result.ok === false) return false;
+  if (result.requestedTargetMatched === false) return false;
   if (result.pointerTapHandled === false && !result.keyboardOpened && !result.isTextInput) {
     return false;
   }
@@ -1476,6 +1491,7 @@ function isTapSuccess(result) {
 }
 function tapTargetFromPayload(payload, textFallback) {
   return {
+    nodeId: payload.target?.nodeId ?? payload.match?.nodeId ?? payload.node?.nodeId ?? null,
     id: payload.target?.id ?? payload.match?.id ?? payload.node?.id ?? null,
     testID: payload.target?.testID ?? payload.match?.testID ?? payload.node?.testID ?? null,
     text: payload.target?.text ?? payload.target?.accessibilityLabel ?? payload.match?.text ?? payload.match?.accessibilityLabel ?? payload.node?.text ?? textFallback ?? null,
@@ -1521,12 +1537,83 @@ async function tapResolvedTarget(bridge, args) {
         lastOffscreenAt = at;
       } else {
         lastOffscreenAt = null;
-        const result = await bridge.send({
+        const requestedTarget = tapTargetFromPayload(payload, args.textFallback);
+        const verification = await bridge.send({
+          type: "evaluate",
+          code: `(async () => {
+            const t = window.__sootsimTest
+            if (
+              !t ||
+              typeof t.inspectAt !== 'function' ||
+              typeof t.resolveTapTarget !== 'function'
+            ) {
+              return { error: 'tap-target-inspection-unavailable' }
+            }
+            const requestedTarget = ${JSON.stringify(requestedTarget)}
+            const inspected = await t.inspectAt(${payload.cx}, ${payload.cy})
+            const resolved =
+              inspected && typeof inspected.nodeId === 'number'
+                ? await t.resolveTapTarget(inspected.nodeId)
+                : null
+            const node = (resolved && resolved.target) || inspected
+            const coordinateTarget = node
+              ? {
+                  nodeId: node.nodeId ?? null,
+                  id: node.id ?? null,
+                  testID: node.testID ?? null,
+                  text: node.text ?? node.accessibilityLabel ?? null,
+                  type: node.type ?? null,
+                }
+              : null
+            const requestedTargetMatched =
+              coordinateTarget === null
+                ? false
+                : typeof requestedTarget.nodeId === 'number' &&
+                    typeof coordinateTarget.nodeId === 'number'
+                  ? requestedTarget.nodeId === coordinateTarget.nodeId
+                  : requestedTarget.testID && coordinateTarget.testID
+                    ? requestedTarget.testID === coordinateTarget.testID
+                    : requestedTarget.id && coordinateTarget.id
+                      ? requestedTarget.id === coordinateTarget.id
+                      : false
+            return {
+              requestedTargetMatched,
+              requestedTarget,
+              coordinateTarget,
+            }
+          })()`
+        });
+        if (verification?.error) {
+          return {
+            payload,
+            result: {
+              hit: false,
+              reason: verification.error,
+              requestedTarget
+            },
+            attempts,
+            failure: "special"
+          };
+        }
+        if (verification?.requestedTargetMatched === false) {
+          return {
+            payload,
+            result: {
+              hit: false,
+              reason: "target-covered",
+              ...verification
+            },
+            attempts,
+            failure: "missed"
+          };
+        }
+        const dispatched = await bridge.send({
           type: "tap",
           x: payload.cx,
           y: payload.cy,
-          target: tapTargetFromPayload(payload, args.textFallback)
+          target: requestedTarget
         });
+        const result = dispatched && typeof dispatched === "object" ? { ...dispatched, ...verification } : { hit: !!dispatched, ...verification };
         lastResult = result;
         if (isTapSuccess(result)) return { payload, result, attempts };
       }

package/dist-lib/skills.cjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.240 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -498,10 +498,10 @@ var init_registry = __esm({
           { range: ">=3.0.0 <4.0.0", coverage: 0.6, note: "basic screen container" },
           {
             range: ">=4.0.0",
-            coverage: 0.87,
+            coverage: 0.9,
             note: "screen container, stack, header config, search bar, navigation props",
-            working: "Screen, ScreenContainer, ScreenStack, enableFreeze/freezeEnabled with delayed React freeze, Android modal/pageSheet push fallback, Android statusBarHidden/statusBarStyle/navigationBarHidden traits, push/pop slide, zoom/fade/fade_from_bottom transitions, edge swipe-back, parallax behind-screen, large title collapse, header (back button, inline/large title, custom left/center/right/search bar subviews, crossfade), useHeaderHeight, useTransitionProgress, FullWindowOverlay, SearchBar, Tabs.Host/Screen, lifecycle callbacks (onAppear/onDisappear/onWillAppear/onWillDisappear), onDismissed",
-            missing: "statusBarColor/navigationBarColor/navigationBarTranslucent ignored, replaceAnimation differentiation, formSheet detent fidelity, integrated search bar placements"
+            working: "Screen, ScreenContainer, ScreenStack, enableFreeze/freezeEnabled with delayed React freeze, Android modal/pageSheet push fallback, Android statusBarHidden/statusBarStyle/navigationBarHidden traits, push/pop slide, zoom/fade/fade_from_bottom transitions, edge swipe-back, parallax behind-screen, large title collapse, header (back button, inline/large title, custom left/center/right/search bar subviews, native header bar buttons/menus/badges, crossfade), formSheet custom initial detents/corner radius/grabber/undimmed range and stacked sheets, useHeaderHeight, useTransitionProgress, FullWindowOverlay, SearchBar, Tabs.Host/Screen, lifecycle callbacks (onAppear/onDisappear/onWillAppear/onWillDisappear), onDismissed",
+            missing: "statusBarColor/navigationBarColor/navigationBarTranslucent ignored, replaceAnimation differentiation, interactive drag between formSheet detents, integrated search bar placements"
           }
         ]
       },
@@ -3844,6 +3844,19 @@ var init_registry = __esm({
         ]
       },
       // --- react-navigation: pure JS, runs as-is on top of stubbed screens/gesture-handler/safe-area ---
+      "@vxrn/native": {
+        category: "Navigation",
+        stubType: "native",
+        versions: [
+          {
+            range: ">=1.21.0",
+            coverage: 0.72,
+            note: "native-seam only for toolbar/menu host views. the real @vxrn/native StackToolbar and MenuAction React code runs from the bundle and converts its public composition API into native host props and native-stack header items.",
+            working: "StackToolbar header and bottom placements, Button, Label, Icon with SF Symbols/image sources, Badge, fixed/fluid Spacer, View children, nested Menu/MenuAction trees, disabled/selected/destructive actions, visible action callbacks, and native-stack header bar item integration",
+            missing: "Color and zoom-transition native hosts, SplitView gamma host, bottom SearchBarSlot integration with a configured native search controller, exact UIKit shared-background grouping"
+          }
+        ]
+      },
       "@react-navigation/native": {
         category: "Navigation",
         stubType: "works",
@@ -3862,10 +3875,10 @@ var init_registry = __esm({
         versions: [
           {
             range: ">=6.0.0",
-            coverage: 0.9,
+            coverage: 0.93,
             note: "pure JS wrapper around react-native-screens (stubbed); push/pop, header, modals, large titles all flow through screens stub",
-            working: "createNativeStackNavigator, Screen, Group, Navigator, header config (title, back button, large title, search bar, custom left/right), Android modal/pageSheet push fallback, modal/formSheet/pageSheet presentation, push/pop animations, gesture-driven back, freezeOnBlur via react-native-screens, useHeaderHeight",
-            missing: "fidelity bound by react-native-screens stub \u2014 formSheet detent fidelity, search bar placements"
+            working: "createNativeStackNavigator, Screen, Group, Navigator, header config (title, back button, large title, search bar, custom left/right, unstable native header button/menu items), Android modal/pageSheet push fallback, modal/formSheet/pageSheet presentation, formSheet initial custom detents/corner radius/grabber/undimmed range and stacked sheets, push/pop animations, gesture-driven back, freezeOnBlur via react-native-screens, useHeaderHeight",
+            missing: "fidelity bound by react-native-screens stub \u2014 interactive drag between formSheet detents and integrated search bar placements"
           }
         ]
       },
@@ -12881,12 +12894,6 @@ function formatFetchProxyError(targetUrl, err) {
   }
   return message;
 }
-function isTextProxyContentType(contentType) {
-  const value = Array.isArray(contentType) ? contentType[0] : contentType;
-  const normalized = value?.split(";", 1)[0]?.trim().toLowerCase();
-  if (!normalized) return false;
-  return normalized.startsWith("text/") || normalized === "application/json" || normalized.endsWith("+json") || normalized === "application/x-www-form-urlencoded" || normalized === "application/xml" || normalized.endsWith("+xml") || normalized === "application/javascript" || normalized === "application/graphql";
-}
 function buildFetchProxyHeaders(reqHeaders, targetUrl) {
   const headers = {};
   for (const [key, value] of Object.entries(reqHeaders)) {
@@ -12945,7 +12952,6 @@ async function handleFetchProxyRequest(req, res) {
     res.end("invalid url param");
     return;
   }
-  const headers = buildFetchProxyHeaders(req.headers, upstreamUrl);
   let body;
   if (req.method !== "GET" && req.method !== "HEAD") {
     const chunks = [];
@@ -12953,39 +12959,89 @@ async function handleFetchProxyRequest(req, res) {
       chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
     }
     if (chunks.length > 0) {
-      const bytes = Buffer.concat(chunks);
-      body = isTextProxyContentType(req.headers["content-type"]) ? bytes.toString("utf8") : bytes;
+      body = Buffer.concat(chunks);
     }
   }
-  let upstream;
-  try {
-    upstream = await fetch(upstreamUrl.href, {
-      method: req.method,
-      headers,
-      body,
-      redirect: "follow"
+  const originalMethod = req.method || "GET";
+  const proxy = async (targetUrl2, method, nextBody, redirects) => {
+    const transport = targetUrl2.protocol === "https:" ? import_https.default : import_http2.default;
+    const targetHeaders = buildFetchProxyHeaders(req.headers, targetUrl2);
+    if (targetUrl2.origin !== upstreamUrl.origin) {
+      delete targetHeaders.authorization;
+      delete targetHeaders["proxy-authorization"];
+    }
+    if (method === "GET" || method === "HEAD") {
+      delete targetHeaders["content-length"];
+      delete targetHeaders["content-type"];
+    } else if (nextBody) {
+      targetHeaders["content-length"] = String(nextBody.byteLength);
+    }
+    const proxyRes = await new Promise((resolve5, reject) => {
+      const proxyReq = transport.request(
+        {
+          hostname: targetUrl2.hostname,
+          port: targetUrl2.port || (targetUrl2.protocol === "https:" ? 443 : 80),
+          path: targetUrl2.pathname + targetUrl2.search,
+          method,
+          headers: targetHeaders
+        },
+        resolve5
+      );
+      const abort = () => proxyReq.destroy(new Error("fetch proxy client disconnected"));
+      req.once("aborted", abort);
+      proxyReq.once("close", () => req.off("aborted", abort));
+      proxyReq.once("error", reject);
+      if (nextBody === void 0) proxyReq.end();
+      else proxyReq.end(nextBody);
     });
+    const status = proxyRes.statusCode ?? 502;
+    const location = proxyRes.headers.location;
+    if (location && (status === 301 || status === 302 || status === 303 || status === 307 || status === 308)) {
+      if (redirects >= 10) {
+        proxyRes.destroy();
+        throw new Error("too many redirects");
+      }
+      const switchToGet = (status === 301 || status === 302) && method === "POST" || status === 303 && method !== "GET" && method !== "HEAD";
+      const redirectUrl = new URL(location, targetUrl2);
+      proxyRes.resume();
+      await (0, import_promises2.finished)(proxyRes);
+      await proxy(
+        redirectUrl,
+        switchToGet ? "GET" : method,
+        switchToGet ? void 0 : nextBody,
+        redirects + 1
+      );
+      return;
+    }
+    for (const [key, value] of Object.entries(proxyRes.headers)) {
+      const lowerKey = key.toLowerCase();
+      if (value === void 0 || lowerKey === "set-cookie" || lowerKey === "connection" || lowerKey === "keep-alive" || lowerKey === "proxy-authenticate" || lowerKey === "proxy-authorization" || lowerKey === "te" || lowerKey === "trailer" || lowerKey === "transfer-encoding" || lowerKey === "upgrade" || lowerKey.startsWith("access-control-")) {
+        continue;
+      }
+      res.setHeader(key, value);
+    }
+    applyFetchProxyCors(res);
+    const setCookie = proxyRes.headers["set-cookie"] ?? [];
+    if (setCookie.length > 0) {
+      res.setHeader(
+        "x-sootsim-set-cookie",
+        (Array.isArray(setCookie) ? setCookie : [setCookie]).join(", ")
+      );
+    }
+    res.statusCode = status;
+    await (0, import_promises2.pipeline)(proxyRes, res);
+  };
+  try {
+    await proxy(upstreamUrl, originalMethod, body, 0);
   } catch (err) {
+    if (res.headersSent) {
+      res.destroy(err instanceof Error ? err : new Error(String(err)));
+      return;
+    }
     applyFetchProxyCors(res);
     res.writeHead(502, { "Content-Type": "text/plain" });
     res.end(`fetch proxy error: ${formatFetchProxyError(upstreamUrl.href, err)}`);
-    return;
   }
-  upstream.headers.forEach((value, key) => {
-    const lowerKey = key.toLowerCase();
-    if (lowerKey === "content-encoding" || lowerKey === "transfer-encoding" || lowerKey === "content-length" || lowerKey === "set-cookie" || lowerKey.startsWith("access-control-")) {
-      return;
-    }
-    res.setHeader(key, value);
-  });
-  applyFetchProxyCors(res);
-  const setCookie = upstream.headers.getSetCookie?.() ?? [];
-  if (setCookie.length > 0) {
-    res.setHeader("x-sootsim-set-cookie", setCookie.join(", "));
-  }
-  res.statusCode = upstream.status;
-  const buf = Buffer.from(await upstream.arrayBuffer());
-  res.end(buf);
 }
 function handleAppApiRequest(req, res) {
   const reqUrl = req.url || "";
@@ -13055,12 +13111,13 @@ function handleAppApiRequest(req, res) {
   req.pipe(proxyReq);
   return true;
 }
-var import_http2, import_https, STRIP_FETCH_PROXY_HEADERS, FETCH_PROXY_CORS_HEADERS, APP_API_HEADER_REWRITES;
+var import_http2, import_https, import_promises2, STRIP_FETCH_PROXY_HEADERS, FETCH_PROXY_CORS_HEADERS, APP_API_HEADER_REWRITES;
 var init_fetch_proxy_handler = __esm({
   "src/host/fetch-proxy-handler.ts"() {
     "use strict";
     import_http2 = __toESM(require("http"), 1);
     import_https = __toESM(require("https"), 1);
+    import_promises2 = require("stream/promises");
     init_fetch_proxy_overrides();
     STRIP_FETCH_PROXY_HEADERS = /* @__PURE__ */ new Set([
       "host",
@@ -16476,6 +16533,14 @@ function layoutGetNativeEval(opts = {}) {
         const abs = n.absolute || n.absolutePosition || { x: layout.x, y: layout.y }
         const text = typeof n.text === 'string' && n.text.trim() ? n.text.trim() : undefined
         const base = {
+          ...(typeof n.nodeId === 'number'
+            ? {
+                nodeId: n.nodeId,
+                ancestorIds: Array.isArray(n.ancestors)
+                  ? n.ancestors.map((ancestor) => ancestor && ancestor.nodeId).filter((id) => typeof id === 'number')
+                  : [],
+              }
+            : {}),
           testID: n.testID || n.testId || undefined,
           role: n.accessibilityRole || n.role || undefined,
           type: typeof n.type === 'string' ? n.type : 'node',

package/dist-lib/vite.cjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.240 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sootsim",
-  "version": "0.1.238",
+  "version": "0.1.240",
   "description": "sootsim CLI + vite/metro plugins + skills registry. bridge client for driving the proprietary sootsim-engine over WebSocket.",
   "author": "Tamagui LLC",
   "license": "MIT",

package/src/host/fetch-proxy-handler.ts

@@ -25,6 +25,7 @@
 
 import http, { type IncomingMessage, type ServerResponse } from 'http'
 import https from 'https'
+import { finished, pipeline } from 'stream/promises'
 import {
   FETCH_PROXY_BROWSER_USER_AGENT,
   getFetchProxyTargetHeaders,
@@ -98,22 +99,6 @@ function formatFetchProxyError(targetUrl: string, err: unknown): string {
   return message
 }
 
-function isTextProxyContentType(contentType: string | string[] | undefined): boolean {
-  const value = Array.isArray(contentType) ? contentType[0] : contentType
-  const normalized = value?.split(';', 1)[0]?.trim().toLowerCase()
-  if (!normalized) return false
-  return (
-    normalized.startsWith('text/') ||
-    normalized === 'application/json' ||
-    normalized.endsWith('+json') ||
-    normalized === 'application/x-www-form-urlencoded' ||
-    normalized === 'application/xml' ||
-    normalized.endsWith('+xml') ||
-    normalized === 'application/javascript' ||
-    normalized === 'application/graphql'
-  )
-}
-
 export function buildFetchProxyHeaders(
   reqHeaders: Record<string, string | string[] | undefined>,
   targetUrl?: URL,
@@ -190,60 +175,127 @@ export async function handleFetchProxyRequest(
     return
   }
 
-  const headers = buildFetchProxyHeaders(req.headers, upstreamUrl)
-
-  let body: BodyInit | undefined
+  let body: Buffer | undefined
   if (req.method !== 'GET' && req.method !== 'HEAD') {
     const chunks: Buffer[] = []
     for await (const chunk of req) {
       chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))
     }
     if (chunks.length > 0) {
-      const bytes = Buffer.concat(chunks)
-      body = isTextProxyContentType(req.headers['content-type'])
-        ? bytes.toString('utf8')
-        : bytes
+      body = Buffer.concat(chunks)
     }
   }
 
-  let upstream: Response
-  try {
-    upstream = await fetch(upstreamUrl.href, {
-      method: req.method,
-      headers,
-      body: body as BodyInit | undefined,
-      redirect: 'follow',
+  const originalMethod = req.method || 'GET'
+  const proxy = async (
+    targetUrl: URL,
+    method: string,
+    nextBody: Buffer | undefined,
+    redirects: number,
+  ): Promise<void> => {
+    const transport = targetUrl.protocol === 'https:' ? https : http
+    const targetHeaders = buildFetchProxyHeaders(req.headers, targetUrl)
+    if (targetUrl.origin !== upstreamUrl.origin) {
+      delete targetHeaders.authorization
+      delete targetHeaders['proxy-authorization']
+    }
+    if (method === 'GET' || method === 'HEAD') {
+      delete targetHeaders['content-length']
+      delete targetHeaders['content-type']
+    } else if (nextBody) {
+      targetHeaders['content-length'] = String(nextBody.byteLength)
+    }
+
+    const proxyRes = await new Promise<IncomingMessage>((resolve, reject) => {
+      const proxyReq = transport.request(
+        {
+          hostname: targetUrl.hostname,
+          port: targetUrl.port || (targetUrl.protocol === 'https:' ? 443 : 80),
+          path: targetUrl.pathname + targetUrl.search,
+          method,
+          headers: targetHeaders,
+        },
+        resolve,
+      )
+      const abort = () => proxyReq.destroy(new Error('fetch proxy client disconnected'))
+      req.once('aborted', abort)
+      proxyReq.once('close', () => req.off('aborted', abort))
+      proxyReq.once('error', reject)
+      if (nextBody === undefined) proxyReq.end()
+      else proxyReq.end(nextBody)
     })
-  } catch (err) {
-    applyFetchProxyCors(res)
-    res.writeHead(502, { 'Content-Type': 'text/plain' })
-    res.end(`fetch proxy error: ${formatFetchProxyError(upstreamUrl.href, err)}`)
-    return
-  }
 
-  upstream.headers.forEach((value, key) => {
-    const lowerKey = key.toLowerCase()
+    const status = proxyRes.statusCode ?? 502
+    const location = proxyRes.headers.location
     if (
-      lowerKey === 'content-encoding' ||
-      lowerKey === 'transfer-encoding' ||
-      lowerKey === 'content-length' ||
-      lowerKey === 'set-cookie' ||
-      lowerKey.startsWith('access-control-')
+      location &&
+      (status === 301 ||
+        status === 302 ||
+        status === 303 ||
+        status === 307 ||
+        status === 308)
     ) {
+      if (redirects >= 10) {
+        proxyRes.destroy()
+        throw new Error('too many redirects')
+      }
+      const switchToGet =
+        ((status === 301 || status === 302) && method === 'POST') ||
+        (status === 303 && method !== 'GET' && method !== 'HEAD')
+      const redirectUrl = new URL(location, targetUrl)
+      proxyRes.resume()
+      await finished(proxyRes)
+      await proxy(
+        redirectUrl,
+        switchToGet ? 'GET' : method,
+        switchToGet ? undefined : nextBody,
+        redirects + 1,
+      )
       return
     }
-    res.setHeader(key, value)
-  })
-  applyFetchProxyCors(res)
 
-  const setCookie = upstream.headers.getSetCookie?.() ?? []
-  if (setCookie.length > 0) {
-    res.setHeader('x-sootsim-set-cookie', setCookie.join(', '))
+    for (const [key, value] of Object.entries(proxyRes.headers)) {
+      const lowerKey = key.toLowerCase()
+      if (
+        value === undefined ||
+        lowerKey === 'set-cookie' ||
+        lowerKey === 'connection' ||
+        lowerKey === 'keep-alive' ||
+        lowerKey === 'proxy-authenticate' ||
+        lowerKey === 'proxy-authorization' ||
+        lowerKey === 'te' ||
+        lowerKey === 'trailer' ||
+        lowerKey === 'transfer-encoding' ||
+        lowerKey === 'upgrade' ||
+        lowerKey.startsWith('access-control-')
+      ) {
+        continue
+      }
+      res.setHeader(key, value)
+    }
+    applyFetchProxyCors(res)
+    const setCookie = proxyRes.headers['set-cookie'] ?? []
+    if (setCookie.length > 0) {
+      res.setHeader(
+        'x-sootsim-set-cookie',
+        (Array.isArray(setCookie) ? setCookie : [setCookie]).join(', '),
+      )
+    }
+    res.statusCode = status
+    await pipeline(proxyRes, res)
   }
 
-  res.statusCode = upstream.status
-  const buf = Buffer.from(await upstream.arrayBuffer())
-  res.end(buf)
+  try {
+    await proxy(upstreamUrl, originalMethod, body, 0)
+  } catch (err) {
+    if (res.headersSent) {
+      res.destroy(err instanceof Error ? err : new Error(String(err)))
+      return
+    }
+    applyFetchProxyCors(res)
+    res.writeHead(502, { 'Content-Type': 'text/plain' })
+    res.end(`fetch proxy error: ${formatFetchProxyError(upstreamUrl.href, err)}`)
+  }
 }
 
 export function handleAppApiRequest(req: IncomingMessage, res: ServerResponse): boolean {

package/dist-cli/chunks/beta-TN34R6YC.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a,b,c,d}from"./chunk-SCLKEUCN.js";import"./chunk-YK4NG4BL.js";export{d as BETA_ASK_HEADLINE,b as BETA_LABEL,c as BETA_TAGLINE,a as IS_BETA};

package/dist-cli/chunks/chunk-QAKSIRZO.js

@@ -1 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */

package/dist-cli/chunks/chunk-UV4NF53M.js

@@ -1 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */

package/dist-cli/chunks/cli-version-JMIF5EGD.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a}from"./chunk-OHLPCYOM.js";import"./chunk-YK4NG4BL.js";export{a as getCliVersion};

package/dist-cli/chunks/daemon-IREYS2N7.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a,b,c,d,e}from"./chunk-5MQZW32V.js";import"./chunk-6UMCNLKY.js";import"./chunk-HC6JXVIP.js";import"./chunk-KGAN3JXK.js";import"./chunk-4DPHH2DS.js";import"./chunk-RTMLR7KA.js";import"./chunk-YNSDDYLM.js";import"./chunk-6PYVHZVH.js";import"./chunk-NCJGR7VZ.js";import"./chunk-XUOCSWW4.js";import"./chunk-DMSG7ESJ.js";import"./chunk-OHLPCYOM.js";import"./chunk-SCLKEUCN.js";import"./chunk-2FFZXFDY.js";import"./chunk-YK4NG4BL.js";export{c as daemonInstall,b as getDaemonServiceStatus,a as runDaemon,d as teardownDaemonService,e as teardownSootsimHome};

package/dist-cli/chunks/drivers-IHDBZZUB.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import"./chunk-UV4NF53M.js";import{f as a,g as b,h as c,i as d,j as e,k as f,l as g,m as h,n as i}from"./chunk-7OQU5M3J.js";import"./chunk-3KVQ35TN.js";import"./chunk-IHEPAACR.js";import"./chunk-NCJGR7VZ.js";import"./chunk-DMSG7ESJ.js";import"./chunk-YK4NG4BL.js";export{e as ALL_DRIVERS,i as buildDriverListRows,a as chromiumDriver,b as electronDriver,f as getAllDrivers,g as getDriver,c as playwrightDriver,h as resolveDriver,d as systemDriver};

package/dist-cli/chunks/flow-TXWXTHAY.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{c,d,e,f,g,h}from"./chunk-CDAMSEOW.js";import"./chunk-XOKMWX3P.js";import"./chunk-MD5GBDM4.js";import{c as a,d as b}from"./chunk-CGQTOBHQ.js";import"./chunk-UYFE2VRP.js";import"./chunk-MT2HMCDI.js";import"./chunk-LYSW5PTM.js";import"./chunk-A46S76WN.js";import"./chunk-ECCUSCHO.js";import"./chunk-QAKSIRZO.js";import"./chunk-7OQU5M3J.js";import"./chunk-3KVQ35TN.js";import"./chunk-CU7M5IBW.js";import"./chunk-5MFTB3S4.js";import"./chunk-IHEPAACR.js";import"./chunk-EGRRMDLA.js";import"./chunk-54XALXOI.js";import"./chunk-XWGGIFDB.js";import"./chunk-CXV3CSSF.js";import"./chunk-QGFPGXNJ.js";import"./chunk-6UMCNLKY.js";import"./chunk-HC6JXVIP.js";import"./chunk-RTMLR7KA.js";import"./chunk-YNSDDYLM.js";import"./chunk-6PYVHZVH.js";import"./chunk-NCJGR7VZ.js";import"./chunk-XUOCSWW4.js";import"./chunk-DMSG7ESJ.js";import"./chunk-QGCNRLCM.js";import"./chunk-2FFZXFDY.js";import"./chunk-YK4NG4BL.js";export{e as discoverSootsimUrl,c as getLastFlowPreviewUploadResult,d as getLastFlowTraceSteps,g as hoistLeadingSimFlag,a as parseFlowFile,f as runFlowPlayback,h as runMaestroAuthoring,b as validateFlowFile};

package/dist-cli/chunks/help-TAORLP73.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a,b,c}from"./chunk-KGAN3JXK.js";import"./chunk-4DPHH2DS.js";import"./chunk-RTMLR7KA.js";import"./chunk-YNSDDYLM.js";import"./chunk-6PYVHZVH.js";import"./chunk-NCJGR7VZ.js";import"./chunk-XUOCSWW4.js";import"./chunk-DMSG7ESJ.js";import"./chunk-OHLPCYOM.js";import"./chunk-SCLKEUCN.js";import"./chunk-2FFZXFDY.js";import"./chunk-YK4NG4BL.js";export{c as printCommandHelp,b as printGroupHelp,a as printHelp};

package/dist-cli/chunks/inspect-ALJUDST3.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{j as a,k as b}from"./chunk-CGQTOBHQ.js";import"./chunk-UYFE2VRP.js";import"./chunk-A46S76WN.js";import"./chunk-ECCUSCHO.js";import"./chunk-QAKSIRZO.js";import"./chunk-7OQU5M3J.js";import"./chunk-3KVQ35TN.js";import"./chunk-CU7M5IBW.js";import"./chunk-5MFTB3S4.js";import"./chunk-IHEPAACR.js";import"./chunk-EGRRMDLA.js";import"./chunk-54XALXOI.js";import"./chunk-XWGGIFDB.js";import"./chunk-CXV3CSSF.js";import"./chunk-QGFPGXNJ.js";import"./chunk-RTMLR7KA.js";import"./chunk-YNSDDYLM.js";import"./chunk-6PYVHZVH.js";import"./chunk-NCJGR7VZ.js";import"./chunk-XUOCSWW4.js";import"./chunk-DMSG7ESJ.js";import"./chunk-QGCNRLCM.js";import"./chunk-2FFZXFDY.js";import"./chunk-YK4NG4BL.js";export{a as printShellPerfReport,b as runInspect};

package/dist-cli/chunks/install-desktop-W5JGGPCV.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a}from"./chunk-HTTHCQQS.js";import"./chunk-3KVQ35TN.js";import"./chunk-4DN5YMPS.js";import"./chunk-YK4NG4BL.js";export{a as runInstallDesktop};

package/dist-cli/chunks/optional-demo-registry-Y5KQWQ6V.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a,b}from"./chunk-EGRRMDLA.js";import"./chunk-YK4NG4BL.js";export{a as loadOptionalDemoApps,b as optionalDemoAppsSync};

package/dist-cli/chunks/runtime-VCWHZCYU.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.238 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a}from"./chunk-D5LYVGSE.js";import"./chunk-GI4YPHU6.js";import"./chunk-CXV3CSSF.js";import"./chunk-6PYVHZVH.js";import"./chunk-NCJGR7VZ.js";import"./chunk-DMSG7ESJ.js";import"./chunk-YK4NG4BL.js";export{a as runRuntime};