Function guardFetch

packages/core/sdk/src/hosted-http-client.ts:209–247

(
  underlying: typeof globalThis.fetch,
  options: HostedHttpClientOptions,
)

};

const guardFetch = (
  underlying: typeof globalThis.fetch,
  options: HostedHttpClientOptions,
): typeof globalThis.fetch =>
  (async (input, init) => {
    const guardOptions = {
      ...options,
      resolveHostname: options.resolveHostname ?? resolveHostnameWithNodeDns,
    };
    const maxRedirects = options.maxRedirects ?? 10;
    let current: Parameters<typeof globalThis.fetch>[0] | URL = input;
    let currentInit = init;
    for (let redirects = 0; redirects <= maxRedirects; redirects++) {
      const url = current instanceof Request ? current.url : String(current);
      await Effect.runPromise(validateHostedOutboundUrl(url, guardOptions));
      const response = await underlying(current, {
        ...currentInit,
        redirect: "manual",
      });
      if (
        response.status >= 300 &&
        response.status < 400 &&
        response.headers.has("location") &&
        redirects < maxRedirects
      ) {
        const next = new URL(response.headers.get("location")!, url);
        // Cross-origin redirects are followed (the loop re-validates every
        // hop), but credentials minted for the original origin must not leak
        // to the redirect target — same as fetch/curl behavior.
        if (next.origin !== new URL(url).origin) {
          currentInit = stripCredentialHeaders(currentInit);
        }
        current = next.toString();
        continue;
      }
      return response;
    }
    return await underlying(current, { ...currentInit, redirect: "manual" });
  }) as typeof globalThis.fetch;

export const makeHostedFetch = (options: HostedHttpClientOptions = {}): typeof globalThis.fetch =>
  // oxlint-disable-next-line executor/no-raw-fetch -- boundary: exposes a guarded Fetch API adapter for libraries that require fetch