gabriel / muse public
fix BREAKING task/curl-worker-pack #1 / 1
gabriel · 64 days ago · Apr 12, 2026 · Diff

fix: curl fallback for pack uploads to .workers.dev on macOS

Cloudflare Bot Fight Mode blocks Python urllib on .workers.dev due to TLS fingerprint (JA3) detection. System curl uses Apple SecureTransport and passes through.

- build_msign_header() extracted to module level in transport.py so callers outside HttpTransport can sign requests (HttpTransport._build_msign_header now delegates to it — no behaviour change on the happy path) - _send_pack in _push_objects_as_packs detects Darwin + .workers.dev pack_url and routes through curl: serialises pack as msgpack, computes MSign header, writes body to tempfile, calls system curl, parses msgpack/JSON response - Normal path (Linux, local://, non-Worker HTTPS) is unchanged

sha256:6911adac584afd20bb2c3208ddef5a8af01b347ba8f1ffebe95dbc62643a61a1 sha
sha256:180c096c45a9ceb08642e6fc320202298ad34517404240e24178589e84b3b2d3 snapshot
← Older Oldest on task/curl-worker-pack
All commits
Newer → Latest on task/curl-worker-pack

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:6911adac584afd20bb2c3208ddef5a8af01b347ba8f1ffebe95dbc62643a61a1 --body "your comment"