Function createPinnedFetch

apps/sim/lib/core/security/input-validation.server.ts:434–448

(resolvedIP: string)

 * calls (e.g. a provider tool loop) reuse its keep-alive connections.
 */
export function createPinnedFetch(resolvedIP: string): typeof fetch {
  const dispatcher = new Agent({ connect: { lookup: createPinnedLookup(resolvedIP) } })

  const pinned = async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {
    // double-cast-allowed: DOM RequestInfo/URL and undici fetch input types differ but are structurally compatible at runtime (Node's global fetch IS undici)
    const undiciInput = input as unknown as Parameters<typeof undiciFetch>[0]
    // double-cast-allowed: DOM RequestInit and undici RequestInit are structurally compatible at runtime but the TS types differ
    const undiciInit: UndiciRequestInit = { ...(init as unknown as UndiciRequestInit), dispatcher }
    const response = await undiciFetch(undiciInput, undiciInit)
    // double-cast-allowed: undici Response and DOM Response are structurally compatible at runtime
    return response as unknown as Response
  }

  return pinned
}

/**
 * Performs a fetch with IP pinning to prevent DNS rebinding attacks.