Skip to content

v0.1.2: SSRF fix, dark-item error, exact-timestamp 404 contract

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 07 Jun 06:33
· 14 commits to main since this release
v0.1.2
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
d813c4e
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

SSRF fix, dark-item error, exact-timestamp 404 contract

Four bug fixes to the Wayback Machine and IA Metadata service.

Fixed:

  • ia_find_snapshots closest mode: SSRF guard now accepts http://web.archive.org/ (Availability API returns http:, not https:); also unblocks ia_get_snapshot on imprecise-timestamp responses (#1)
  • ia_get_item: dark/restricted items (is_dark: true) now raise item_not_found instead of returning empty metadata; covers ia_get_item, ia_get_text, and ia://item/{identifier} (#2)
  • ia_get_snapshot: exact-timestamp 404 from fetchContent() remapped to no_snapshot_available contract so reason and recovery hint surface correctly (#5)
  • ia_get_snapshot resolved_status description clarified: returned by Availability API for imprecise timestamps; assumed 200 for exact 14-digit timestamps (direct path skips Availability API) (#3)

Dependency bumps:

  • @types/node ^25.9.1 → ^25.9.2

49 tests pass; bun run devcheck clean.

Assets 3
Loading