sootsim 0.1.36 → 0.1.37

package/dist-lib/host/fetch-proxy-handler.cjs

@@ -0,0 +1,248 @@
+/*! sootsim v0.1.37 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/host/fetch-proxy-handler.ts
+var fetch_proxy_handler_exports = {};
+__export(fetch_proxy_handler_exports, {
+  buildFetchProxyHeaders: () => buildFetchProxyHeaders,
+  handleAppApiRequest: () => handleAppApiRequest,
+  handleFetchProxyRequest: () => handleFetchProxyRequest,
+  isAppApiRequestUrl: () => isAppApiRequestUrl,
+  isFetchProxyRequestUrl: () => isFetchProxyRequestUrl
+});
+module.exports = __toCommonJS(fetch_proxy_handler_exports);
+var import_http = __toESM(require("http"), 1);
+var import_https = __toESM(require("https"), 1);
+var FETCH_PROXY_USER_AGENT = "sootsim";
+var STRIP_FETCH_PROXY_HEADERS = /* @__PURE__ */ new Set([
+  "host",
+  "origin",
+  "referer",
+  "user-agent",
+  "cookie",
+  "connection",
+  "keep-alive",
+  "transfer-encoding",
+  "upgrade",
+  "content-length",
+  "sec-fetch-site",
+  "sec-fetch-mode",
+  "sec-fetch-dest",
+  "sec-ch-ua",
+  "sec-ch-ua-mobile",
+  "sec-ch-ua-platform"
+]);
+var FETCH_PROXY_CORS_HEADERS = {
+  "access-control-allow-origin": "*",
+  "access-control-allow-methods": "GET,POST,PUT,DELETE,PATCH,OPTIONS",
+  "access-control-allow-headers": "*",
+  "access-control-expose-headers": "*",
+  "access-control-max-age": "3600"
+};
+function applyFetchProxyCors(res) {
+  for (const [key, value] of Object.entries(FETCH_PROXY_CORS_HEADERS)) {
+    res.setHeader(key, value);
+  }
+}
+function formatFetchProxyError(targetUrl, err) {
+  const details = [];
+  const error = err;
+  if (error?.code) details.push(error.code);
+  if (error?.message) details.push(error.message);
+  if (error?.cause?.code) details.push(error.cause.code);
+  if (error?.cause?.message) details.push(error.cause.message);
+  const uniqueDetails = [...new Set(details.filter(Boolean))];
+  const message = uniqueDetails.join(" | ") || String(err);
+  if (targetUrl.includes("stored-in-.env.local")) {
+    return `${message} | upstream url still contains placeholder env values`;
+  }
+  return message;
+}
+function buildFetchProxyHeaders(reqHeaders) {
+  const headers = {};
+  for (const [key, value] of Object.entries(reqHeaders)) {
+    if (!value) continue;
+    if (STRIP_FETCH_PROXY_HEADERS.has(key.toLowerCase())) continue;
+    headers[key] = Array.isArray(value) ? value.join(", ") : value;
+  }
+  headers["user-agent"] = FETCH_PROXY_USER_AGENT;
+  return headers;
+}
+function isFetchProxyRequestUrl(rawUrl) {
+  return rawUrl?.startsWith("/__fetch-proxy?") || rawUrl?.startsWith("/__proxy?") || false;
+}
+function isAppApiRequestUrl(rawUrl) {
+  if (!rawUrl) return false;
+  if (rawUrl.startsWith("/__app-api?")) return true;
+  if (rawUrl.startsWith("/__app-api/")) return true;
+  return false;
+}
+async function handleFetchProxyRequest(req, res) {
+  if (req.method === "OPTIONS") {
+    applyFetchProxyCors(res);
+    res.writeHead(204);
+    res.end();
+    return;
+  }
+  const params = new URLSearchParams((req.url || "").split("?")[1] || "");
+  const targetUrl = params.get("url");
+  if (!targetUrl) {
+    applyFetchProxyCors(res);
+    res.writeHead(400, { "Content-Type": "text/plain" });
+    res.end("missing url param");
+    return;
+  }
+  let upstreamUrl;
+  try {
+    upstreamUrl = new URL(targetUrl);
+  } catch {
+    applyFetchProxyCors(res);
+    res.writeHead(400, { "Content-Type": "text/plain" });
+    res.end("invalid url param");
+    return;
+  }
+  const headers = buildFetchProxyHeaders(req.headers);
+  let body;
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    const chunks = [];
+    for await (const chunk of req) {
+      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    if (chunks.length > 0) body = Buffer.concat(chunks);
+  }
+  let upstream;
+  try {
+    upstream = await fetch(upstreamUrl.href, {
+      method: req.method,
+      headers,
+      body,
+      redirect: "follow"
+    });
+  } catch (err) {
+    applyFetchProxyCors(res);
+    res.writeHead(502, { "Content-Type": "text/plain" });
+    res.end(`fetch proxy error: ${formatFetchProxyError(upstreamUrl.href, err)}`);
+    return;
+  }
+  upstream.headers.forEach((value, key) => {
+    const lowerKey = key.toLowerCase();
+    if (lowerKey === "content-encoding" || lowerKey === "transfer-encoding" || lowerKey === "content-length" || lowerKey === "set-cookie" || lowerKey.startsWith("access-control-")) {
+      return;
+    }
+    res.setHeader(key, value);
+  });
+  applyFetchProxyCors(res);
+  const setCookie = upstream.headers.getSetCookie?.() ?? [];
+  if (setCookie.length > 0) {
+    res.setHeader("x-sootsim-set-cookie", setCookie.join(", "));
+  }
+  res.statusCode = upstream.status;
+  const buf = Buffer.from(await upstream.arrayBuffer());
+  res.end(buf);
+}
+function handleAppApiRequest(req, res) {
+  const reqUrl = req.url || "";
+  let targetPath = "";
+  let targetOrigin = "";
+  if (reqUrl.startsWith("/__app-api?")) {
+    const parsed = new URL(reqUrl, "http://sootsim.local");
+    targetPath = parsed.searchParams.get("path") || "";
+    targetOrigin = parsed.searchParams.get("origin")?.trim() || "";
+  } else if (reqUrl.startsWith("/__app-api/")) {
+    targetPath = reqUrl.slice("/__app-api".length);
+  } else {
+    return false;
+  }
+  if (!targetOrigin) {
+    res.writeHead(400, { "Content-Type": "text/plain" });
+    res.end("app-api: missing origin query param");
+    return true;
+  }
+  if (req.method === "OPTIONS") {
+    res.writeHead(204, {
+      "Access-Control-Allow-Origin": req.headers.origin || "*",
+      "Access-Control-Allow-Methods": "GET,POST,PUT,PATCH,DELETE,OPTIONS",
+      "Access-Control-Allow-Headers": req.headers["access-control-request-headers"] || "*",
+      "Access-Control-Allow-Credentials": "true",
+      "Access-Control-Max-Age": "86400"
+    });
+    res.end();
+    return true;
+  }
+  let targetUrl;
+  try {
+    targetUrl = new URL(targetPath, targetOrigin);
+  } catch {
+    res.writeHead(400, { "Content-Type": "text/plain" });
+    res.end("app-api: invalid origin or path");
+    return true;
+  }
+  const transport = targetUrl.protocol === "https:" ? import_https.default : import_http.default;
+  const fwdHeaders = { ...req.headers };
+  delete fwdHeaders.host;
+  fwdHeaders.host = targetUrl.host;
+  const proxyReq = transport.request(
+    {
+      hostname: targetUrl.hostname,
+      port: targetUrl.port || (targetUrl.protocol === "https:" ? 443 : 80),
+      path: targetUrl.pathname + targetUrl.search,
+      method: req.method,
+      headers: fwdHeaders
+    },
+    (proxyRes) => {
+      const exposedHeaders = Object.keys(proxyRes.headers).filter((name) => {
+        const lower = name.toLowerCase();
+        return !lower.startsWith("access-control-") && lower !== "set-cookie";
+      }).join(", ");
+      res.writeHead(proxyRes.statusCode ?? 502, {
+        ...proxyRes.headers,
+        "access-control-allow-origin": req.headers.origin || "*",
+        "access-control-allow-credentials": "true",
+        "access-control-expose-headers": exposedHeaders
+      });
+      proxyRes.pipe(res);
+    }
+  );
+  proxyReq.on("error", (err) => {
+    res.statusCode = 502;
+    res.end(`app proxy error: ${err.message}`);
+  });
+  req.pipe(proxyReq);
+  return true;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildFetchProxyHeaders,
+  handleAppApiRequest,
+  handleFetchProxyRequest,
+  isAppApiRequestUrl,
+  isFetchProxyRequestUrl
+});

package/dist-lib/index.cjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.36 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.37 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -177,32 +177,32 @@ async function openElectronApp(sootsimUrl) {
 }
 
 // src/metro-plugin.ts
-var import_fs3 = __toESM(require("fs"), 1);
-var import_path3 = __toESM(require("path"), 1);
-
-// src/home-paths.ts
 var import_fs2 = __toESM(require("fs"), 1);
-var import_os = require("os");
 var import_path2 = __toESM(require("path"), 1);
+
+// src/home-paths.ts
+var import_node_fs = __toESM(require("node:fs"), 1);
+var import_node_os = require("node:os");
+var import_node_path = __toESM(require("node:path"), 1);
 var SOOTSIM_HOME_ENV = "SOOTSIM_HOME";
 var ACTIVE_RUNTIME_FILE = "active";
 function sootsimHomeDir() {
   const override = process.env[SOOTSIM_HOME_ENV];
-  if (override && override.length > 0) return import_path2.default.resolve(override);
-  return import_path2.default.join((0, import_os.homedir)(), ".sootsim");
+  if (override && override.length > 0) return import_node_path.default.resolve(override);
+  return import_node_path.default.join((0, import_node_os.homedir)(), ".sootsim");
 }
 function runtimesDir() {
-  return import_path2.default.join(sootsimHomeDir(), "runtimes");
+  return import_node_path.default.join(sootsimHomeDir(), "runtimes");
 }
 function runtimeDir(version) {
-  return import_path2.default.join(runtimesDir(), version);
+  return import_node_path.default.join(runtimesDir(), version);
 }
 function activeRuntimeFile() {
-  return import_path2.default.join(runtimesDir(), ACTIVE_RUNTIME_FILE);
+  return import_node_path.default.join(runtimesDir(), ACTIVE_RUNTIME_FILE);
 }
 function readActiveRuntime() {
   try {
-    const value = import_fs2.default.readFileSync(activeRuntimeFile(), "utf8").trim();
+    const value = import_node_fs.default.readFileSync(activeRuntimeFile(), "utf8").trim();
     return value.length > 0 ? value : null;
   } catch {
     return null;
@@ -216,7 +216,7 @@ function resolveRuntimeRoot() {
   const active = readActiveRuntime();
   if (!active) return null;
   const dir = runtimeDir(active);
-  if (!import_fs3.default.existsSync(import_path3.default.join(dir, "index.html"))) return null;
+  if (!import_fs2.default.existsSync(import_path2.default.join(dir, "index.html"))) return null;
   return dir;
 }
 var RUNTIME_MISSING_MESSAGE = "[sootsim] no engine runtime installed \u2014 run `sootsim setup-repo` in your project, or `sootsim runtime install`";
@@ -260,10 +260,10 @@ function resolveRuntimeFilePath(runtimeRoot, pathname) {
   for (const segment of pathname.split("/")) {
     if (segment === "..") return null;
   }
-  const fullPath = import_path3.default.resolve(runtimeRoot, pathname.replace(/^\/+/, ""));
-  const rootWithSep = runtimeRoot.endsWith(import_path3.default.sep) ? runtimeRoot : runtimeRoot + import_path3.default.sep;
+  const fullPath = import_path2.default.resolve(runtimeRoot, pathname.replace(/^\/+/, ""));
+  const rootWithSep = runtimeRoot.endsWith(import_path2.default.sep) ? runtimeRoot : runtimeRoot + import_path2.default.sep;
   if (!fullPath.startsWith(rootWithSep) && fullPath !== runtimeRoot) return null;
-  if (!import_fs3.default.existsSync(fullPath) || !import_fs3.default.statSync(fullPath).isFile()) return null;
+  if (!import_fs2.default.existsSync(fullPath) || !import_fs2.default.statSync(fullPath).isFile()) return null;
   return fullPath;
 }
 function withSootsim(config, options = {}) {
@@ -317,10 +317,10 @@ function withSootsim(config, options = {}) {
           }
         }
         if (pathname === prefix || pathname === prefix + "/" || pathname.startsWith(prefix + "/")) {
-          const ext = import_path3.default.extname(pathname);
+          const ext = import_path2.default.extname(pathname);
           if (!ext) {
-            const htmlPath = import_path3.default.join(runtimeRoot, "index.html");
-            let html = import_fs3.default.readFileSync(htmlPath, "utf8");
+            const htmlPath = import_path2.default.join(runtimeRoot, "index.html");
+            let html = import_fs2.default.readFileSync(htmlPath, "utf8");
             html = html.replace(
               "</head>",
               `<script>history.replaceState(null,'','${prefix}/?bundle=${encodeURIComponent(bundleUrl)}')</script></head>`
@@ -341,10 +341,10 @@ function withSootsim(config, options = {}) {
 }
 var metro_plugin_default = withSootsim;
 function serveRuntimeFile(res, fullPath) {
-  const ext = import_path3.default.extname(fullPath);
+  const ext = import_path2.default.extname(fullPath);
   res.setHeader("content-type", MIME_TYPES2[ext] || "application/octet-stream");
   res.setHeader("cache-control", "max-age=31536000,immutable");
-  import_fs3.default.createReadStream(fullPath).pipe(res);
+  import_fs2.default.createReadStream(fullPath).pipe(res);
 }
 
 // src/bridge-constants.ts

package/dist-lib/metro.cjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.36 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.37 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -38,32 +38,32 @@ __export(metro_plugin_exports, {
   withSootsim: () => withSootsim
 });
 module.exports = __toCommonJS(metro_plugin_exports);
-var import_fs2 = __toESM(require("fs"), 1);
-var import_path2 = __toESM(require("path"), 1);
-
-// src/home-paths.ts
 var import_fs = __toESM(require("fs"), 1);
-var import_os = require("os");
 var import_path = __toESM(require("path"), 1);
+
+// src/home-paths.ts
+var import_node_fs = __toESM(require("node:fs"), 1);
+var import_node_os = require("node:os");
+var import_node_path = __toESM(require("node:path"), 1);
 var SOOTSIM_HOME_ENV = "SOOTSIM_HOME";
 var ACTIVE_RUNTIME_FILE = "active";
 function sootsimHomeDir() {
   const override = process.env[SOOTSIM_HOME_ENV];
-  if (override && override.length > 0) return import_path.default.resolve(override);
-  return import_path.default.join((0, import_os.homedir)(), ".sootsim");
+  if (override && override.length > 0) return import_node_path.default.resolve(override);
+  return import_node_path.default.join((0, import_node_os.homedir)(), ".sootsim");
 }
 function runtimesDir() {
-  return import_path.default.join(sootsimHomeDir(), "runtimes");
+  return import_node_path.default.join(sootsimHomeDir(), "runtimes");
 }
 function runtimeDir(version) {
-  return import_path.default.join(runtimesDir(), version);
+  return import_node_path.default.join(runtimesDir(), version);
 }
 function activeRuntimeFile() {
-  return import_path.default.join(runtimesDir(), ACTIVE_RUNTIME_FILE);
+  return import_node_path.default.join(runtimesDir(), ACTIVE_RUNTIME_FILE);
 }
 function readActiveRuntime() {
   try {
-    const value = import_fs.default.readFileSync(activeRuntimeFile(), "utf8").trim();
+    const value = import_node_fs.default.readFileSync(activeRuntimeFile(), "utf8").trim();
     return value.length > 0 ? value : null;
   } catch {
     return null;
@@ -77,7 +77,7 @@ function resolveRuntimeRoot() {
   const active = readActiveRuntime();
   if (!active) return null;
   const dir = runtimeDir(active);
-  if (!import_fs2.default.existsSync(import_path2.default.join(dir, "index.html"))) return null;
+  if (!import_fs.default.existsSync(import_path.default.join(dir, "index.html"))) return null;
   return dir;
 }
 var RUNTIME_MISSING_MESSAGE = "[sootsim] no engine runtime installed \u2014 run `sootsim setup-repo` in your project, or `sootsim runtime install`";
@@ -121,10 +121,10 @@ function resolveRuntimeFilePath(runtimeRoot, pathname) {
   for (const segment of pathname.split("/")) {
     if (segment === "..") return null;
   }
-  const fullPath = import_path2.default.resolve(runtimeRoot, pathname.replace(/^\/+/, ""));
-  const rootWithSep = runtimeRoot.endsWith(import_path2.default.sep) ? runtimeRoot : runtimeRoot + import_path2.default.sep;
+  const fullPath = import_path.default.resolve(runtimeRoot, pathname.replace(/^\/+/, ""));
+  const rootWithSep = runtimeRoot.endsWith(import_path.default.sep) ? runtimeRoot : runtimeRoot + import_path.default.sep;
   if (!fullPath.startsWith(rootWithSep) && fullPath !== runtimeRoot) return null;
-  if (!import_fs2.default.existsSync(fullPath) || !import_fs2.default.statSync(fullPath).isFile()) return null;
+  if (!import_fs.default.existsSync(fullPath) || !import_fs.default.statSync(fullPath).isFile()) return null;
   return fullPath;
 }
 function withSootsim(config, options = {}) {
@@ -178,10 +178,10 @@ function withSootsim(config, options = {}) {
           }
         }
         if (pathname === prefix || pathname === prefix + "/" || pathname.startsWith(prefix + "/")) {
-          const ext = import_path2.default.extname(pathname);
+          const ext = import_path.default.extname(pathname);
           if (!ext) {
-            const htmlPath = import_path2.default.join(runtimeRoot, "index.html");
-            let html = import_fs2.default.readFileSync(htmlPath, "utf8");
+            const htmlPath = import_path.default.join(runtimeRoot, "index.html");
+            let html = import_fs.default.readFileSync(htmlPath, "utf8");
             html = html.replace(
               "</head>",
               `<script>history.replaceState(null,'','${prefix}/?bundle=${encodeURIComponent(bundleUrl)}')</script></head>`
@@ -202,10 +202,10 @@ function withSootsim(config, options = {}) {
 }
 var metro_plugin_default = withSootsim;
 function serveRuntimeFile(res, fullPath) {
-  const ext = import_path2.default.extname(fullPath);
+  const ext = import_path.default.extname(fullPath);
   res.setHeader("content-type", MIME_TYPES[ext] || "application/octet-stream");
   res.setHeader("cache-control", "max-age=31536000,immutable");
-  import_fs2.default.createReadStream(fullPath).pipe(res);
+  import_fs.default.createReadStream(fullPath).pipe(res);
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {