@adcp/sdk 5.23.0

package/dist/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":";AAAA,qCAAqC;AACrC,sEAAsE;;;;;;;;;;;;;;;;;;;;;;;;;AAopCtE,4CAEC;AAMD,0DAEC;AA5pCD,iCAAiC;AACjC,uCAAkH;AAAzG,0GAAA,cAAc,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAAE,+GAAA,mBAAmB,OAAA;AAAE,2GAAA,eAAe,OAAA;AAqD7F,iDAAiD;AACjD,6DAMoC;AALlC,+GAAA,aAAa,OAAA;AACb,kHAAA,gBAAgB,OAAA;AAChB,oHAAA,kBAAkB,OAAA;AAIpB,iEAKsC;AAJpC,mHAAA,eAAe,OAAA;AAKjB,uFAaiD;AAZ/C,wIAAA,yBAAyB,OAAA;AAqB3B,gDAAgD;AAChD,4DAA4D;AAC5D,8DAA+G;AAAtG,sHAAA,iBAAiB,OAAA;AAAE,4HAAA,uBAAuB,OAAA;AAAE,4HAAA,uBAAuB,OAAA;AAE5E,kDAK4B;AAJ1B,0GAAA,WAAW,OAAA;AAKb,oEAA+F;AAAtF,4HAAA,oBAAoB,OAAA;AAAE,kIAAA,0BAA0B,OAAA;AACzD,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAC7B,kEAMoC;AALlC,0HAAA,mBAAmB,OAAA;AACnB,gIAAA,yBAAyB,OAAA;AACzB,+HAAA,wBAAwB,OAAA;AAI1B,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,sCAAkD;AAAzC,8FAAA,KAAK,OAAA;AAAE,oGAAA,WAAW,OAAA;AAE3B,wEAAqH;AAA5G,gIAAA,sBAAsB,OAAA;AAAE,wHAAA,cAAc,OAAA;AAAE,qHAAA,WAAW,OAAA;AAC5D,8DAKkC;AAJhC,sHAAA,iBAAiB,OAAA;AACjB,sHAAA,iBAAiB,OAAA;AAsCnB,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAG7B,wCAAwC;AACxC,yEAAyE;AACzE,sEAAsE;AACtE,wDAAwD;AACxD,2CAMsB;AALpB,kHAAA,oBAAoB,OAAA;AACpB,gHAAA,kBAAkB,OAAA;AAClB,oHAAA,sBAAsB,OAAA;AACtB,+HAAA,iCAAiC,OAAA;AACjC,kHAAA,oBAAoB,OAAA;AAuBtB,wDAA0D;AAAjD,mHAAA,iBAAiB,OAAA;AAc1B,oDAAuE;AAA9D,4GAAA,YAAY,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAEzC,+BAA+B;AAC/B,mDAAiC;AAcjC,yDAAwG;AAA/F,8GAAA,aAAa,OAAA;AAAE,oHAAA,mBAAmB,OAAA;AAAE,0HAAA,yBAAyB,OAAA;AAEtE,8BAA8B;AAC9B,mCAuBkB;AAtBhB,mGAAA,SAAS,OAAA;AACT,0GAAA,gBAAgB,OAAA;AAChB,+GAAA,qBAAqB,OAAA;AACrB,2GAAA,iBAAiB,OAAA;AACjB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,8GAAA,oBAAoB,OAAA;AACpB,uGAAA,aAAa,OAAA;AACb,6GAAA,eAAe,OAAuB;AACtC,kHAAA,wBAAwB,OAAA;AACxB,6GAAA,mBAAmB,OAAA;AACnB,4GAAA,kBAAkB,OAAA;AAClB,qHAAA,2BAA2B,OAAA;AAC3B,iHAAA,uBAAuB,OAAA;AACvB,iHAAA,uBAAuB,OAAA;AACvB,kHAAA,wBAAwB,OAAA;AACxB,iHAAA,uBAAuB,OAAA;AACvB,+GAAA,qBAAqB,OAAA;AACrB,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,0GAAA,gBAAgB,OAAA;AAChB,oGAAA,UAAU,OAAA;AAGZ,oDAAyD;AAAhD,kHAAA,kBAAkB,OAAA;AAE3B,4BAA4B;AAC5B,mDAQ6B;AAP3B,qHAAA,sBAAsB,OAAA;AACtB,6GAAA,cAAc,OAAA;AACd,oHAAA,qBAAqB,OAAA;AACrB,gHAAA,iBAAiB,OAAA;AACjB,mHAAA,oBAAoB,OAAA;AACpB,sHAAA,uBAAuB,OAAA;AACvB,6GAAA,cAAc,OAAA;AAIhB,mCAAgE;AAAvD,mGAAA,YAAY,OAAA;AAAE,0GAAA,mBAAmB,OAAA;AAE1C,2BAA2B;AAC3B,0CAAwB;AAkQxB,mDAAkG;AAAzF,mHAAA,oBAAoB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAGpE,oCAAoC;AACpC,kDAAkD;AAClD,mCAsFkB;AArFhB,mGAAA,SAAS,OAAA;AACT,8GAAA,oBAAoB,OAAA;AACpB,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,8GAAA,oBAAoB,OAAA;AACpB,qHAAA,2BAA2B,OAAA;AAC3B,gHAAA,sBAAsB,OAAA;AACtB,8GAAA,oBAAoB,OAAA;AACpB,qHAAA,2BAA2B,OAAA;AAC3B,+GAAA,qBAAqB,OAAA;AACrB,oHAAA,0BAA0B,OAAA;AAC1B,iHAAA,uBAAuB,OAAA;AACvB,kHAAA,wBAAwB,OAAA;AACxB,+GAAA,qBAAqB,OAAA;AACrB,mHAAA,yBAAyB,OAAA;AACzB,qHAAA,2BAA2B,OAAA;AAC3B,sHAAA,4BAA4B,OAAA;AAC5B,kHAAA,wBAAwB,OAAA;AACxB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,gHAAA,sBAAsB,OAAA;AACtB,gHAAA,sBAAsB,OAAA;AACtB,+GAAA,qBAAqB,OAAA;AACrB,+GAAA,qBAAqB,OAAA;AACrB,sHAAA,4BAA4B,OAAA;AAC5B,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,gHAAA,sBAAsB,OAAA;AACtB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,0GAAA,gBAAgB,OAAA;AAChB,8GAAA,oBAAoB,OAAA;AACpB,iHAAA,uBAAuB,OAAA;AACvB,2GAAA,iBAAiB,OAAA;AACjB,oGAAA,UAAU,OAAA;AACV,+FAAA,KAAK,OAAA;AACL,0GAAA,gBAAgB,OAAA;AAChB,kGAAA,QAAQ,OAAA;AACR,qGAAA,WAAW,OAAA;AACX,6GAAA,mBAAmB,OAAA;AACnB,gHAAA,sBAAsB,OAAA;AACtB,qHAAA,2BAA2B,OAAA;AAC3B,6GAAA,mBAAmB,OAAA;AACnB,uGAAA,aAAa,OAAA;AACb,0GAAA,gBAAgB,OAAA;AAChB,8GAAA,oBAAoB,OAAA;AACpB,wGAAA,cAAc,OAAA;AACd,2GAAA,iBAAiB,OAAA;AACjB,uGAAA,aAAa,OAAA;AACb,gHAAA,sBAAsB,OAAA;AACtB,2GAAA,iBAAiB,OAAA;AACjB,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,6GAAA,mBAAmB,OAAA;AACnB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,+GAAA,qBAAqB,OAAA;AACrB,wHAAA,8BAA8B,OAAA;AAC9B,4GAAA,kBAAkB,OAAA;AAClB,4GAAA,kBAAkB,OAAA;AAClB,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,oGAAA,UAAU,OAAA;AACV,4GAAA,kBAAkB,OAAA;AAClB,2GAAA,iBAAiB,OAAA;AACjB,8GAAA,oBAAoB,OAAA;AACpB,qGAAA,WAAW,OAAA;AACX,wGAAA,cAAc,OAAA;AACd,8GAAA,oBAAoB,OAAA;AACpB,2GAAA,iBAAiB,OAAA;AACjB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,gHAAA,sBAAsB,OAAA;AACtB,uGAAA,aAAa,OAAA;AACb,mGAAA,SAAS,OAAA;AACT,iHAAA,uBAAuB,OAAA;AACvB,+GAAA,qBAAqB,OAAA;AACrB,mHAAA,yBAAyB,OAAA;AACzB,qGAAA,WAAW,OAAA;AACX,gHAAA,sBAAsB,OAAA;AACtB,oHAAA,0BAA0B,OAAA;AAC1B,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AA8EpB,uCAAuC;AACvC,uCAA2D;AAAlD,oGAAA,WAAW,OAAA;AAAE,sGAAA,aAAa,OAAA;AAEnC,wDAAwD;AACxD,6DAKkC;AAJhC,wHAAA,oBAAoB,OAAA;AACpB,wHAAA,oBAAoB,OAAA;AACpB,mHAAA,eAAe,OAAA;AACf,qHAAA,iBAAiB,OAAA;AAGnB,gGAAgG;AAChG,6DAAkG;AAAzF,2HAAA,uBAAuB,OAAA;AAAE,iIAAA,6BAA6B,OAAA;AAa/D,yCAAsH;AAA7G,uHAAA,6BAA6B,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,oHAAA,0BAA0B,OAAA;AAE7F,qEAAqE;AACrE,iEAA4F;AAAnF,4HAAA,sBAAsB,OAAA;AAAE,4HAAA,sBAAsB,OAAA;AAEvD,qDAAqD;AACrD,sDAAsD;AACtD,4DAA0C;AAE1C,kCAAkC;AAClC,2EAA2E;AAC3E,sEAAsE;AACtE,iDAAiD;AACjD,0DAAwC;AAExC,kEAAkE;AAClE,+CAA+C;AAC/C,0CAA0C;AAC1C,2EAA2E;AAC3E,yEAAyE;AACzE,iEAA+C;AAE/C,wFAAwF;AACxF,4FAA4F;AAC5F,8EAA8E;AAE9E,+BAA+B;AAC/B,yCAAyC;AACzC,+BAAyG;AAAhG,oGAAA,YAAY,OAAA;AAAE,yGAAA,iBAAiB,OAAA;AAAE,4GAAA,oBAAoB,OAAA;AAAE,gHAAA,wBAAwB,OAAA;AAExF,sEAAsE;AACtE,sCAWsB;AAVpB,6GAAA,oBAAoB,OAAA;AACpB,gHAAA,uBAAuB,OAAA;AACvB,8GAAA,qBAAqB,OAAA;AAMrB,0GAAA,iBAAiB,OAAA;AACjB,+GAAA,sBAAsB,OAAA;AAGxB,qEAAqE;AACrE,sCASsB;AARpB,yGAAA,gBAAgB,OAAA;AAChB,sHAAA,6BAA6B,OAAA;AAS/B,qFAAqF;AACrF,sCAUsB;AATpB,gHAAA,uBAAuB,OAAA;AACvB,0HAAA,iCAAiC,OAAA;AACjC,+GAAA,sBAAsB,OAAA;AACtB,yGAAA,gBAAgB,OAAA;AAChB,wGAAA,eAAe,OAAA;AACf,2GAAA,kBAAkB,OAAA;AAMpB,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,kEAAkE;AAClE,oDAAoD;AACpD,sCAYsB;AAXpB,kHAAA,yBAAyB,OAAA;AACzB,sHAAA,6BAA6B,OAAA;AAC7B,uHAAA,8BAA8B,OAAA;AAC9B,8GAAA,qBAAqB,OAAA;AACrB,sGAAA,aAAa,OAAA;AACb,6GAAA,oBAAoB,OAAA;AACpB,6GAAA,oBAAoB,OAAA;AACpB,6GAAA,oBAAoB,OAAA;AAMtB,iCAAiC;AACjC,8GAA8G;AAC9G,qEAAoE;AAA3D,4HAAA,oBAAoB,OAAA;AAC7B,6DAAiE;AAAxD,yHAAA,qBAAqB,OAAA;AAE9B,2BAA2B;AAC3B,2CAA2C;AAC3C,2CAA6G;AAApG,8GAAA,gBAAgB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,+GAAA,iBAAiB,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AACtF,8DAKqC;AAJnC,yHAAA,uBAAuB,OAAA;AACvB,kIAAA,gCAAgC,OAAA;AAChC,mIAAA,iCAAiC,OAAA;AACjC,2HAAA,yBAAyB,OAAA;AAI3B,iCAAiC;AACjC,qEAAqE;AACrE,yCAOqB;AANnB,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,wGAAA,WAAW,OAAA;AACX,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,gHAAA,mBAAmB,OAAA;AAGrB,mCAAmC;AACnC,mDAAmD;AACnD,iCAAiG;AAAxF,2GAAA,kBAAkB,OAAA;AAAE,+GAAA,sBAAsB,OAAA;AAAE,oGAAA,WAAW,OAAA;AAAE,sGAAA,aAAa,OAAA;AAC/E,iCAAiE;AAAxD,sGAAA,aAAa,OAAA;AACtB,iCAA4E;AAAnE,wGAAA,eAAe,OAAA;AAAE,uGAAA,cAAc,OAAA;AAAE,yGAAA,gBAAgB,OAAA;AAC1D,iCAAoE;AAA3D,uGAAA,cAAc,OAAA;AAAE,kHAAA,yBAAyB,OAAA;AAClD,iCAAsH;AAA7G,uGAAA,cAAc,OAAA;AAAE,wGAAA,eAAe,OAAA;AAAE,gHAAA,uBAAuB,OAAA;AAAE,sGAAA,aAAa,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAEpG,kCAAkC;AAClC,4DAA4D;AAC5D,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AAErB,qCAAqC;AACrC,0DAA0D;AAC1D,iCAAwE;AAA/D,iGAAA,QAAQ,OAAA;AAAE,sGAAA,aAAa,OAAA;AAEhC,uCAAuC;AACvC,8CAA8C;AAC9C,uDAS+B;AAR7B,gHAAA,eAAe,OAAA;AACf,kHAAA,iBAAiB,OAAA;AACjB,kHAAA,iBAAiB,OAAA;AACjB,oHAAA,mBAAmB,OAAA;AACnB,oHAAA,mBAAmB,OAAA;AACnB,0HAAA,yBAAyB,OAAA;AACzB,8GAAA,aAAa,OAAA;AACb,0GAAA,SAAS,OAAA;AAGX,wCAAwC;AACxC,8DAA8D;AAC9D,oEAAoE;AACpE,8DAA8D;AAC9D,uEAAuE;AACvE,2DAA2D;AAC3D,yDAYgC;AAX9B,uGAAA,KAAK,OAAA;AACL,4GAAA,UAAU,OAAA;AACV,4GAAA,UAAU,OAAA;AACV,4GAAA,UAAU,OAAA;AACV,2GAAA,SAAS,OAAA;AACT,0GAAA,QAAQ,OAAA;AACR,2GAAA,SAAS,OAAA;AACT,iHAAA,eAAe,OAAA;AACf,0GAAA,QAAQ,OAAA;AACR,+GAAA,aAAa,OAAA;AACb,8GAAA,YAAY,OAAA;AAGd,2CAA2C;AAC3C,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,uEAAuE;AACvE,4EAA4E;AAC5E,uEAAuE;AACvE,iFA+B4C;AA9B1C,yHAAA,WAAW,OAAA;AACX,4HAAA,cAAc,OAAA;AACd,4HAAA,cAAc,OAAA;AACd,4HAAA,cAAc,OAAA;AACd,2HAAA,aAAa,OAAA;AACb,+HAAA,iBAAiB,OAAA;AACjB,2HAAA,aAAa,OAAA;AACb,0HAAA,YAAY,OAAA;AACZ,iIAAA,mBAAmB,OAAA;AACnB,2HAAA,aAAa,OAAA;AACb,4HAAA,cAAc,OAAA;AACd,0HAAA,YAAY,OAAA;AACZ,8HAAA,gBAAgB,OAAA;AAChB,4HAAA,cAAc,OAAA;AACd,8HAAA,gBAAgB,OAAA;AAChB,6HAAA,eAAe,OAAA;AACf,6HAAA,eAAe,OAAA;AACf,6HAAA,eAAe,OAAA;AACf,6HAAA,eAAe,OAAA;AACf,4HAAA,cAAc,OAAA;AACd,gIAAA,kBAAkB,OAAA;AAClB,4HAAA,cAAc,OAAA;AACd,2HAAA,aAAa,OAAA;AACb,kIAAA,oBAAoB,OAAA;AACpB,4HAAA,cAAc,OAAA;AACd,6HAAA,eAAe,OAAA;AACf,2HAAA,aAAa,OAAA;AACb,+HAAA,iBAAiB,OAAA;AACjB,6HAAA,eAAe,OAAA;AACf,+HAAA,iBAAiB,OAAA;AAGnB,wCAAwC;AACxC,mEAAmE;AACnE,yEAAyE;AACzE,uDAAuD;AACvD,sEAAsE;AACtE,wEAAwE;AACxE,iCAAiC;AACjC,2DAAoF;AAA3E,yGAAA,MAAM,OAAA;AAAE,4GAAA,SAAS,OAAA;AAAE,6GAAA,UAAU,OAAA;AAAE,6GAAA,UAAU,OAAA;AAElD,uCAAuC;AACvC,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,uCAAuC;AACvC,EAAE;AACF,uEAAuE;AACvE,4DAA4D;AAC5D,wEAAwE;AACxE,sEAAsE;AACtE,yEAQwC;AAPtC,sHAAA,YAAY,OAAA;AACZ,uHAAA,aAAa,OAAA;AACb,6HAAA,mBAAmB,OAAA;AACnB,wHAAA,cAAc,OAAA;AAMhB,6CAA6C;AAC7C,mEAAmE;AACnE,YAAY;AACZ,wFAAwF;AACxF,kFAAkF;AAClF,+EAA+E;AAC/E,iFAAiF;AACjF,qDAsB8B;AArB5B,0HAAA,0BAA0B,OAAA;AAC1B,yHAAA,yBAAyB,OAAA;AACzB,0GAAA,UAAU,OAAA;AACV,gHAAA,gBAAgB,OAAA;AAChB,6HAAA,6BAA6B,OAAA;AAC7B,wHAAA,wBAAwB,OAAA;AACxB,oHAAA,oBAAoB,OAAA;AACpB,0HAAA,0BAA0B,OAAA;AAC1B,+GAAA,eAAe,OAAA;AACf,2HAAA,2BAA2B,OAAA;AAC3B,8GAAA,cAAc,OAAA;AACd,oHAAA,oBAAoB,OAAA;AACpB,+GAAA,eAAe,OAAA;AACf,6GAAA,aAAa,OAAA;AACb,gHAAA,gBAAgB,OAAA;AAChB,8GAAA,cAAc,OAAA;AACd,oHAAA,oBAAoB,OAAA;AACpB,6GAAA,aAAa,OAAA;AACb,8GAAA,cAAc,OAAA;AACd,kHAAA,kBAAkB,OAAA;AAClB,gHAAA,gBAAgB,OAAA;AAYlB,0EAA0E;AAC1E,6DAUkC;AAThC,4HAAA,wBAAwB,OAAA;AACxB,mIAAA,+BAA+B,OAAA;AAC/B,mIAAA,+BAA+B,OAAA;AAC/B,4HAAA,wBAAwB,OAAA;AACxB,6HAAA,yBAAyB,OAAA;AACzB,qHAAA,iBAAiB,OAAA;AACjB,6HAAA,yBAAyB,OAAA;AACzB,kHAAA,cAAc,OAAA;AACd,0HAAA,sBAAsB,OAAA;AAIxB,yDAAyD;AACzD,yDAUgC;AAT9B,wHAAA,sBAAsB,OAAA;AACtB,0HAAA,wBAAwB,OAAA;AACxB,kHAAA,gBAAgB,OAAA;AAChB,kHAAA,gBAAgB,OAAA;AAChB,qHAAA,mBAAmB,OAAA;AACnB,qHAAA,mBAAmB,OAAA;AACnB,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AASrB,4DAA4D;AAC5D,iEAWoC;AAVlC,4HAAA,sBAAsB,OAAA;AACtB,sHAAA,gBAAgB,OAAA;AAChB,sIAAA,gCAAgC,OAAA;AAChC,wHAAA,kBAAkB,OAAA;AAClB,wHAAA,kBAAkB,OAAA;AAClB,iHAAA,WAAW,OAAA;AACX,mHAAA,aAAa,OAAA;AACb,6HAAA,uBAAuB,OAAA;AACvB,mHAAA,aAAa,OAAA;AACb,oHAAA,cAAc,OAAA;AAIhB,qCAAqC;AACrC,0EAA0E;AAC1E,iDAgC4B;AA/B1B,wBAAwB;AACxB,+GAAA,iBAAiB,OAAA;AACjB,6GAAA,eAAe,OAAA;AACf,mHAAA,qBAAqB,OAAA;AACrB,+GAAA,iBAAiB,OAAA;AACjB,4GAAA,cAAc,OAAA;AACd,8GAAA,gBAAgB,OAAA;AAChB,0BAA0B;AAC1B,oHAAA,sBAAsB,OAAA;AACtB,kHAAA,oBAAoB,OAAA;AACpB,wHAAA,0BAA0B,OAAA;AAC1B,oHAAA,sBAAsB,OAAA;AACtB,iHAAA,mBAAmB,OAAA;AACnB,6BAA6B;AAC7B,uHAAA,yBAAyB,OAAA;AACzB,qHAAA,uBAAuB,OAAA;AACvB,2HAAA,6BAA6B,OAAA;AAC7B,uHAAA,yBAAyB,OAAA;AACzB,oHAAA,sBAAsB,OAAA;AACtB,6BAA6B;AAC7B,uHAAA,yBAAyB,OAAA;AACzB,qHAAA,uBAAuB,OAAA;AACvB,2HAAA,6BAA6B,OAAA;AAC7B,uHAAA,yBAAyB,OAAA;AACzB,oHAAA,sBAAsB,OAAA;AACtB,4BAA4B;AAC5B,sHAAA,wBAAwB,OAAA;AACxB,oHAAA,sBAAsB,OAAA;AACtB,0HAAA,4BAA4B,OAAA;AAC5B,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AAGvB,oCAAoC;AACpC,qCAWmB;AAVjB,yGAAA,cAAc,OAAA;AACd,4GAAA,iBAAiB,OAAA;AACjB,2GAAA,gBAAgB,OAAA;AAChB,gHAAA,qBAAqB,OAAA;AACrB,gHAAA,qBAAqB,OAAA;AACrB,uGAAA,YAAY,OAAA;AACZ,6GAAA,kBAAkB,OAAA;AAClB,0GAAA,eAAe,OAAA;AACf,mHAAA,wBAAwB,OAAA;AACxB,uGAAA,YAAY,OAAA;AAGd,mEAAiE;AAAxD,yHAAA,kBAAkB,OAAA;AAE3B,8BAA8B;AAC9B,8EAA8E;AAC9E,iDAOyB;AANvB,0GAAA,SAAS,OAAA;AACT,iHAAA,gBAAgB,OAAA;AAChB,mHAAA,kBAAkB,OAAA;AAClB,yGAAA,QAAQ,OAAA;AACR,kHAAA,iBAAiB,OAAA;AACjB,oHAAA,mBAAmB,OAAA;AAGrB,8BAA8B;AAC9B,uDAAuD;AACvD,4DAAkE;AAAzD,wGAAA,KAAK,OAAA;AAAE,kHAAA,eAAe,OAAA;AAE/B,qCAAqC;AACrC,sEAAsE;AACtE,uCAsCoB;AArClB,oBAAoB;AACpB,mHAAA,uBAAuB,OAAA;AAGvB,sHAAA,0BAA0B,OAAA;AAC1B,mHAAA,uBAAuB,OAAA;AACvB,0HAAA,8BAA8B,OAAA;AAC9B,iBAAiB;AACjB,+GAAA,mBAAmB,OAAA;AAGnB,kHAAA,sBAAsB,OAAA;AACtB,+GAAA,mBAAmB,OAAA;AACnB,sHAAA,0BAA0B,OAAA;AAC1B,sBAAsB;AACtB,2GAAA,eAAe,OAAA;AACf,6GAAA,iBAAiB,OAAA;AAGjB,8GAAA,kBAAkB,OAAA;AAClB,kHAAA,sBAAsB,OAAA;AACtB,kCAAkC;AAClC,4GAAA,gBAAgB,OAAA;AAChB,8GAAA,kBAAkB,OAAA;AAGlB,wGAAA,YAAY,OAAA;AACZ,mHAAA,uBAAuB,OAAA;AACvB,4CAA4C;AAC5C,6GAAA,iBAAiB,OAAA;AACjB,oHAAA,wBAAwB,OAAA;AAKxB,uHAAA,2BAA2B,OAAA;AAC3B,oHAAA,wBAAwB,OAAA;AAM1B,sEAAmE;AAEnE;;;GAGG;AACU,QAAA,UAAU,GAAG,2CAAoB,CAAC;AAE/C,qEAAqE;AACrE,sDAAsD;AAEtD;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,MAAsB;IACrD,OAAO,IAAI,kBAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB;IACrC,OAAO,2CAAoB,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,gDAAgD;AAChD,2EAA2E;AAC3E,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,mEAAmE;AACnE,+CAqBwB;AApBtB,oHAAA,oBAAoB,OAAA;AACpB,mHAAA,mBAAmB,OAAA;AACnB,iHAAA,iBAAiB,OAAA;AACjB,oHAAA,oBAAoB,OAAA;AACpB,qHAAA,qBAAqB,OAAA;AACrB,qHAAA,qBAAqB,OAAA;AACrB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AACb,iHAAA,iBAAiB,OAAA;AACjB,oHAAA,oBAAoB,OAAA;AACpB,uHAAA,uBAAuB,OAAA;AACvB,qHAAA,qBAAqB,OAAA;AACrB,gIAAA,gCAAgC,OAAA;AAChC,iHAAA,iBAAiB,OAAA;AACjB,yHAAA,yBAAyB,OAAA;AACzB,mHAAA,mBAAmB,OAAA;AACnB,gHAAA,gBAAgB,OAAA;AAChB,uHAAA,uBAAuB,OAAA;AACvB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAgBlB,6BAA6B;AAC7B,gFAAgF;AAChF,yCAiByB;AAhBvB,kGAAA,SAAS,OAAA;AACT,qGAAA,YAAY,OAAA;AACZ,wGAAA,eAAe,OAAA;AACf,wGAAA,eAAe,OAAA;AACf,yGAAA,gBAAgB,OAAA;AAChB,8GAAA,qBAAqB,OAAA;AACrB,8GAAA,qBAAqB,OAAA;AACrB,wGAAA,eAAe,OAAA;AACf,2GAAA,kBAAkB,OAAA;AAClB,sHAAA,6BAA6B,OAAA;AAC7B,sHAAA,6BAA6B,OAAA;AAC7B,sGAAA,aAAa,OAAA;AACb,4GAAA,mBAAmB,OAAA;AACnB,4GAAA,mBAAmB,OAAA;AACnB,8GAAA,qBAAqB,OAAA;AACrB,gHAAA,uBAAuB,OAAA"}

package/dist/lib/net/address-guards.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Addresses blocked even when `allowPrivateIp` is on. Cloud metadata services
+ * (AWS/GCP/Azure IMDS) live at 169.254.169.254 and would exfiltrate
+ * credentials if a CI runner or long-lived server followed an attacker URL to
+ * them. IPv6 link-local (`fe80::/10`) is the v6 equivalent reach into the
+ * host's local segment.
+ *
+ * Returns `false` for non-IP inputs (hostnames).
+ */
+export declare function isAlwaysBlocked(address: string): boolean;
+/**
+ * Reject loopback, link-local, RFC 1918 private ranges, CGNAT (RFC 6598),
+ * broadcast, multicast, the unspecified address, NAT64/6to4 wrapper prefixes,
+ * and IPv6 equivalents. BlockList handles IPv4-mapped IPv6 canonicalization
+ * natively so `::ffff:10.0.0.1` is matched against the v4 rule set.
+ *
+ * Returns `false` for non-IP inputs (hostnames).
+ */
+export declare function isPrivateIp(address: string): boolean;
+/**
+ * Best-effort check that a URL targets a development/private host, without
+ * doing a DNS lookup. Matches loopback hostnames (`localhost`) and any IP
+ * literal that {@link isPrivateIp} would reject. Public domain names always
+ * return `false`.
+ *
+ * Used by higher layers that need to inherit the operator's "private is OK"
+ * trust from a primary probe and propagate it to same-origin chain hops —
+ * callers that pass this flag into `ssrfSafeFetch` should do so only when
+ * they've already decided the target origin is trusted.
+ *
+ * Returns `false` on unparseable inputs.
+ */
+export declare function isLikelyPrivateUrl(url: string): boolean;
+//# sourceMappingURL=address-guards.d.ts.map

package/dist/lib/net/address-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-guards.d.ts","sourceRoot":"","sources":["../../../src/lib/net/address-guards.ts"],"names":[],"mappings":"AAwEA;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIxD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIpD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASvD"}

package/dist/lib/net/address-guards.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAlwaysBlocked = isAlwaysBlocked;
+exports.isPrivateIp = isPrivateIp;
+exports.isLikelyPrivateUrl = isLikelyPrivateUrl;
+/**
+ * IP address classification for SSRF defense.
+ *
+ * Two tiers of blocking:
+ *   - {@link isAlwaysBlocked}: link-local + cloud metadata endpoints (IMDS).
+ *     Refused even when the caller opts into private networks (dev loops).
+ *   - {@link isPrivateIp}: RFC 1918, loopback, CGNAT, IPv6 ULA/link-local,
+ *     multicast, broadcast, unspecified, plus defense-in-depth on IPv6
+ *     wrappers (NAT64 well-known prefix, 6to4) so a v4-in-v6 address can't
+ *     sneak a private target past the classifier. Refused by default; allowed
+ *     when the caller passes `allowPrivateIp: true` (storyboard runner's
+ *     `--allow-http`).
+ *
+ * Classifiers normalize before matching:
+ *   - Zone IDs (`%eth0`) are stripped — they're a host-local concept, not part
+ *     of the address, and Node's IP parsers don't accept them.
+ *   - Surrounding URL brackets (`[::1]`) are stripped — `URL.hostname` returns
+ *     bracketed form for IPv6 literals; classifiers need bare input.
+ *   - IPv4-mapped IPv6 is resolved natively by `BlockList` — `::ffff:10.0.0.1`
+ *     matches the `10.0.0.0/8` subnet regardless of textual form
+ *     (`0:0:0:0:0:ffff:a.b.c.d` works too).
+ */
+const net_1 = require("net");
+function normalize(address) {
+    // Strip surrounding brackets (URL-hostname form) and zone ID.
+    let bare = address;
+    if (bare.startsWith('[') && bare.endsWith(']'))
+        bare = bare.slice(1, -1);
+    const pctIdx = bare.indexOf('%');
+    if (pctIdx >= 0)
+        bare = bare.slice(0, pctIdx);
+    const family = (0, net_1.isIP)(bare);
+    if (family === 4)
+        return { addr: bare, family: 'ipv4' };
+    if (family === 6)
+        return { addr: bare, family: 'ipv6' };
+    return null;
+}
+// Addresses blocked even when the dev opt-in `allowPrivateIp` is set. Cloud
+// metadata services live at 169.254.169.254 and leak credentials if reached;
+// IPv6 link-local (`fe80::/10`) is the v6 equivalent reach into the host's
+// local segment.
+const alwaysBlocked = new net_1.BlockList();
+alwaysBlocked.addSubnet('169.254.0.0', 16, 'ipv4');
+alwaysBlocked.addSubnet('fe80::', 10, 'ipv6');
+// Private, loopback, multicast, and reserved ranges. Defense-in-depth adds the
+// NAT64 well-known prefix (`64:ff9b::/96`) and 6to4 (`2002::/16`) so a
+// wrapped-v4 address can't bypass the classifier by choosing a representation
+// BlockList doesn't natively canonicalize.
+const privateIp = new net_1.BlockList();
+// v4 — BlockList handles IPv4-mapped IPv6 (`::ffff:a.b.c.d`) against these
+// subnets automatically per Node's check semantics.
+privateIp.addSubnet('0.0.0.0', 8, 'ipv4');
+privateIp.addSubnet('10.0.0.0', 8, 'ipv4');
+privateIp.addSubnet('127.0.0.0', 8, 'ipv4');
+privateIp.addSubnet('100.64.0.0', 10, 'ipv4'); // RFC 6598 CGNAT
+privateIp.addSubnet('169.254.0.0', 16, 'ipv4');
+privateIp.addSubnet('172.16.0.0', 12, 'ipv4');
+privateIp.addSubnet('192.168.0.0', 16, 'ipv4');
+privateIp.addSubnet('224.0.0.0', 4, 'ipv4'); // multicast
+privateIp.addAddress('255.255.255.255', 'ipv4'); // limited broadcast
+// v6
+privateIp.addAddress('::', 'ipv6'); // unspecified
+privateIp.addAddress('::1', 'ipv6'); // loopback
+privateIp.addSubnet('fe80::', 10, 'ipv6'); // link-local
+privateIp.addSubnet('fc00::', 7, 'ipv6'); // ULA
+privateIp.addSubnet('ff00::', 8, 'ipv6'); // multicast
+// Wrapper prefixes — refuse unconditionally. Tunnels at the caller's edge can
+// translate these into private targets we can't see; safer to refuse than to
+// hope the gateway is configured the way we expect.
+privateIp.addSubnet('64:ff9b::', 96, 'ipv6'); // NAT64 well-known
+privateIp.addSubnet('2002::', 16, 'ipv6'); // 6to4
+/**
+ * Addresses blocked even when `allowPrivateIp` is on. Cloud metadata services
+ * (AWS/GCP/Azure IMDS) live at 169.254.169.254 and would exfiltrate
+ * credentials if a CI runner or long-lived server followed an attacker URL to
+ * them. IPv6 link-local (`fe80::/10`) is the v6 equivalent reach into the
+ * host's local segment.
+ *
+ * Returns `false` for non-IP inputs (hostnames).
+ */
+function isAlwaysBlocked(address) {
+    const n = normalize(address);
+    if (!n)
+        return false;
+    return alwaysBlocked.check(n.addr, n.family);
+}
+/**
+ * Reject loopback, link-local, RFC 1918 private ranges, CGNAT (RFC 6598),
+ * broadcast, multicast, the unspecified address, NAT64/6to4 wrapper prefixes,
+ * and IPv6 equivalents. BlockList handles IPv4-mapped IPv6 canonicalization
+ * natively so `::ffff:10.0.0.1` is matched against the v4 rule set.
+ *
+ * Returns `false` for non-IP inputs (hostnames).
+ */
+function isPrivateIp(address) {
+    const n = normalize(address);
+    if (!n)
+        return false;
+    return privateIp.check(n.addr, n.family);
+}
+/**
+ * Best-effort check that a URL targets a development/private host, without
+ * doing a DNS lookup. Matches loopback hostnames (`localhost`) and any IP
+ * literal that {@link isPrivateIp} would reject. Public domain names always
+ * return `false`.
+ *
+ * Used by higher layers that need to inherit the operator's "private is OK"
+ * trust from a primary probe and propagate it to same-origin chain hops —
+ * callers that pass this flag into `ssrfSafeFetch` should do so only when
+ * they've already decided the target origin is trusted.
+ *
+ * Returns `false` on unparseable inputs.
+ */
+function isLikelyPrivateUrl(url) {
+    try {
+        const u = new URL(url);
+        const host = u.hostname.replace(/^\[|\]$/g, '').toLowerCase();
+        if (host === 'localhost')
+            return true;
+        return isPrivateIp(host);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=address-guards.js.map

package/dist/lib/net/address-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-guards.js","sourceRoot":"","sources":["../../../src/lib/net/address-guards.ts"],"names":[],"mappings":";;AAiFA,0CAIC;AAUD,kCAIC;AAeD,gDASC;AA3HD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,6BAAsC;AAEtC,SAAS,SAAS,CAAC,OAAe;IAChC,8DAA8D;IAC9D,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,UAAI,EAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,iBAAiB;AACjB,MAAM,aAAa,GAAG,IAAI,eAAS,EAAE,CAAC;AACtC,aAAa,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAE9C,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,2CAA2C;AAC3C,MAAM,SAAS,GAAG,IAAI,eAAS,EAAE,CAAC;AAClC,2EAA2E;AAC3E,oDAAoD;AACpD,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1C,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3C,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5C,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB;AAChE,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9C,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;AACzD,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB;AACrE,KAAK;AACL,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc;AAClD,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW;AAChD,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa;AACxD,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM;AAChD,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;AACtD,8EAA8E;AAC9E,6EAA6E;AAC7E,oDAAoD;AACpD,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB;AACjE,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO;AAElD;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,WAAW,CAAC,OAAe;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/net/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Shared networking primitives for the client library. Home of the SSRF-safe
+ * fetch used by compliance probes, the storyboard runner, and counterparty
+ * metadata resolvers (JWKS, revocation lists).
+ */
+export { ssrfSafeFetch, decodeBodyAsJsonOrText, SsrfRefusedError, type SsrfRefusedCode, type SsrfFetchOptions, type SsrfFetchResult, } from './ssrf-fetch';
+export { isPrivateIp, isAlwaysBlocked, isLikelyPrivateUrl } from './address-guards';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/net/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/net/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/lib/net/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLikelyPrivateUrl = exports.isAlwaysBlocked = exports.isPrivateIp = exports.SsrfRefusedError = exports.decodeBodyAsJsonOrText = exports.ssrfSafeFetch = void 0;
+/**
+ * Shared networking primitives for the client library. Home of the SSRF-safe
+ * fetch used by compliance probes, the storyboard runner, and counterparty
+ * metadata resolvers (JWKS, revocation lists).
+ */
+var ssrf_fetch_1 = require("./ssrf-fetch");
+Object.defineProperty(exports, "ssrfSafeFetch", { enumerable: true, get: function () { return ssrf_fetch_1.ssrfSafeFetch; } });
+Object.defineProperty(exports, "decodeBodyAsJsonOrText", { enumerable: true, get: function () { return ssrf_fetch_1.decodeBodyAsJsonOrText; } });
+Object.defineProperty(exports, "SsrfRefusedError", { enumerable: true, get: function () { return ssrf_fetch_1.SsrfRefusedError; } });
+var address_guards_1 = require("./address-guards");
+Object.defineProperty(exports, "isPrivateIp", { enumerable: true, get: function () { return address_guards_1.isPrivateIp; } });
+Object.defineProperty(exports, "isAlwaysBlocked", { enumerable: true, get: function () { return address_guards_1.isAlwaysBlocked; } });
+Object.defineProperty(exports, "isLikelyPrivateUrl", { enumerable: true, get: function () { return address_guards_1.isLikelyPrivateUrl; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/net/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/net/index.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,2CAOsB;AANpB,2GAAA,aAAa,OAAA;AACb,oHAAA,sBAAsB,OAAA;AACtB,8GAAA,gBAAgB,OAAA;AAKlB,mDAAoF;AAA3E,6GAAA,WAAW,OAAA;AAAE,iHAAA,eAAe,OAAA;AAAE,oHAAA,kBAAkB,OAAA"}

package/dist/lib/net/ssrf-fetch.d.ts

@@ -0,0 +1,56 @@
+export type SsrfRefusedCode = 'invalid_url' | 'scheme_not_allowed' | 'non_https_without_opt_in' | 'dns_lookup_failed' | 'dns_empty' | 'always_blocked_address' | 'private_address' | 'body_exceeds_limit';
+/**
+ * Thrown when the SSRF guard refuses a request before (or during) the fetch.
+ * Network failures after the guard passes are not wrapped in this type —
+ * callers that want to distinguish "we refused this" from "the remote broke"
+ * can `instanceof SsrfRefusedError` the catch.
+ */
+export declare class SsrfRefusedError extends Error {
+    readonly code: SsrfRefusedCode;
+    readonly url: string;
+    readonly hostname?: string;
+    readonly address?: string;
+    constructor(code: SsrfRefusedCode, message: string, meta: {
+        url: string;
+        hostname?: string;
+        address?: string;
+    });
+}
+export interface SsrfFetchOptions {
+    method?: string;
+    /** Lowercased keys preferred; values preserved verbatim. */
+    headers?: Record<string, string>;
+    body?: string | Uint8Array;
+    /** Allow `http://` and private/loopback targets. Default false. */
+    allowPrivateIp?: boolean;
+    /** Overall timeout including DNS + connect + body read. Default 10_000 ms. */
+    timeoutMs?: number;
+    /** Hard cap on response body bytes. Default 64 KiB. */
+    maxBodyBytes?: number;
+    /** Caller-provided abort signal, composed with the internal timeout. */
+    signal?: AbortSignal;
+}
+export interface SsrfFetchResult {
+    url: string;
+    status: number;
+    /** Response headers, lowercased. */
+    headers: Record<string, string>;
+    /** Raw response body bytes (empty Uint8Array if no body). */
+    body: Uint8Array;
+    /** The IP address we pinned the outbound connection to. */
+    pinnedAddress: string;
+    pinnedFamily: 4 | 6;
+}
+/**
+ * GET/POST/etc. a URL with SSRF guarding + DNS pinning. Throws
+ * {@link SsrfRefusedError} when the guard refuses; other errors (network
+ * timeouts, remote resets) propagate as the native fetch error.
+ */
+export declare function ssrfSafeFetch(url: string, options?: SsrfFetchOptions): Promise<SsrfFetchResult>;
+/**
+ * Decode a UTF-8 byte buffer as JSON when the content-type declares JSON, or
+ * fall back to a UTF-8 string. Handy shared helper for probe-style call sites
+ * that don't care about binary bodies.
+ */
+export declare function decodeBodyAsJsonOrText(body: Uint8Array, contentType: string | undefined): unknown;
+//# sourceMappingURL=ssrf-fetch.d.ts.map

package/dist/lib/net/ssrf-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-fetch.d.ts","sourceRoot":"","sources":["../../../src/lib/net/ssrf-fetch.ts"],"names":[],"mappings":"AAyCA,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,oBAAoB,GACpB,0BAA0B,GAC1B,mBAAmB,GACnB,WAAW,GACX,wBAAwB,GACxB,iBAAiB,GACjB,oBAAoB,CAAC;AAEzB;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;CAQ/G;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC3B,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6DAA6D;IAC7D,IAAI,EAAE,UAAU,CAAC;IACjB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwKzG;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAWjG"}

package/dist/lib/net/ssrf-fetch.js

@@ -0,0 +1,199 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SsrfRefusedError = void 0;
+exports.ssrfSafeFetch = ssrfSafeFetch;
+exports.decodeBodyAsJsonOrText = decodeBodyAsJsonOrText;
+const promises_1 = require("dns/promises");
+const undici_1 = require("undici");
+const address_guards_1 = require("./address-guards");
+const DEFAULT_TIMEOUT_MS = 10_000;
+const DEFAULT_MAX_BODY_BYTES = 64 * 1024;
+const ALLOWED_SCHEMES = new Set(['https:', 'http:']);
+/**
+ * Thrown when the SSRF guard refuses a request before (or during) the fetch.
+ * Network failures after the guard passes are not wrapped in this type —
+ * callers that want to distinguish "we refused this" from "the remote broke"
+ * can `instanceof SsrfRefusedError` the catch.
+ */
+class SsrfRefusedError extends Error {
+    code;
+    url;
+    hostname;
+    address;
+    constructor(code, message, meta) {
+        super(message);
+        this.name = 'SsrfRefusedError';
+        this.code = code;
+        this.url = meta.url;
+        this.hostname = meta.hostname;
+        this.address = meta.address;
+    }
+}
+exports.SsrfRefusedError = SsrfRefusedError;
+/**
+ * GET/POST/etc. a URL with SSRF guarding + DNS pinning. Throws
+ * {@link SsrfRefusedError} when the guard refuses; other errors (network
+ * timeouts, remote resets) propagate as the native fetch error.
+ */
+async function ssrfSafeFetch(url, options = {}) {
+    const allowPrivateIp = options.allowPrivateIp === true;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new SsrfRefusedError('invalid_url', `Invalid URL: ${url}`, { url });
+    }
+    // `URL.hostname` wraps IPv6 literals in brackets (`https://[::1]/` →
+    // `[::1]`). `dns.lookup` and the address classifier both want the bare
+    // form; strip brackets here so IPv6 localhost URLs work under
+    // `allowPrivateIp` and so bracketed literals can't slip past classification
+    // on a future Node release that tolerates them.
+    const hostname = parsed.hostname.replace(/^\[|\]$/g, '');
+    if (!ALLOWED_SCHEMES.has(parsed.protocol)) {
+        throw new SsrfRefusedError('scheme_not_allowed', `Refusing to fetch URL with unsupported scheme: ${parsed.protocol}`, { url, hostname });
+    }
+    if (parsed.protocol !== 'https:' && !allowPrivateIp) {
+        throw new SsrfRefusedError('non_https_without_opt_in', `Refusing to fetch non-HTTPS URL: ${url}`, {
+            url,
+            hostname,
+        });
+    }
+    let addresses;
+    try {
+        addresses = await (0, promises_1.lookup)(hostname, { all: true });
+    }
+    catch (err) {
+        throw new SsrfRefusedError('dns_lookup_failed', `DNS lookup failed for ${hostname}: ${err instanceof Error ? err.message : String(err)}`, { url, hostname });
+    }
+    if (addresses.length === 0) {
+        throw new SsrfRefusedError('dns_empty', `DNS returned no addresses for ${hostname}`, {
+            url,
+            hostname,
+        });
+    }
+    // Error messages intentionally do NOT include the resolved IP — a
+    // counterparty-supplied hostname that resolves into the caller's internal
+    // address space would otherwise leak network topology into compliance
+    // reports and log aggregators. The address is still available on the
+    // thrown error's `.address` field for programmatic debugging.
+    for (const a of addresses) {
+        if ((0, address_guards_1.isAlwaysBlocked)(a.address)) {
+            throw new SsrfRefusedError('always_blocked_address', `Refusing to fetch: ${hostname} resolves to an always-blocked address (link-local or cloud metadata)`, { url, hostname, address: a.address });
+        }
+    }
+    if (!allowPrivateIp) {
+        for (const a of addresses) {
+            if ((0, address_guards_1.isPrivateIp)(a.address)) {
+                throw new SsrfRefusedError('private_address', `Refusing to fetch: ${hostname} resolves to a private/loopback address`, { url, hostname, address: a.address });
+            }
+        }
+    }
+    const pinned = addresses[0];
+    const pinnedFamily = pinned.family === 6 ? 6 : 4;
+    const dispatcher = new undici_1.Agent({
+        connect: {
+            // All addresses were validated above; pin the connect to the first. The
+            // custom lookup also means undici won't re-resolve and pick up a rebind.
+            // undici's Agent may call lookup with `{ all: true }` (it does for HTTPS
+            // targets under Node 22+), which expects the array form of the callback.
+            lookup: (_h, opts, cb) => {
+                if (opts?.all) {
+                    cb(null, [{ address: pinned.address, family: pinnedFamily }]);
+                }
+                else {
+                    cb(null, pinned.address, pinnedFamily);
+                }
+            },
+        },
+    });
+    const ac = new AbortController();
+    const onExternalAbort = () => ac.abort(options.signal?.reason);
+    options.signal?.addEventListener('abort', onExternalAbort, { once: true });
+    const timer = setTimeout(() => ac.abort(new Error('ssrf-fetch: timeout')), timeoutMs);
+    try {
+        const init = {
+            method: options.method ?? 'GET',
+            redirect: 'manual',
+            signal: ac.signal,
+            headers: options.headers,
+            dispatcher,
+        };
+        if (options.body !== undefined)
+            init.body = options.body;
+        const res = await (0, undici_1.fetch)(url, init);
+        const headers = {};
+        res.headers.forEach((v, k) => {
+            headers[k.toLowerCase()] = v;
+        });
+        const reader = res.body?.getReader();
+        if (!reader) {
+            return {
+                url,
+                status: res.status,
+                headers,
+                body: new Uint8Array(),
+                pinnedAddress: pinned.address,
+                pinnedFamily,
+            };
+        }
+        const chunks = [];
+        let bytes = 0;
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            bytes += value.byteLength;
+            if (bytes > maxBodyBytes) {
+                await reader.cancel();
+                throw new SsrfRefusedError('body_exceeds_limit', `Response body exceeded ${maxBodyBytes} bytes`, {
+                    url,
+                    hostname: parsed.hostname,
+                    address: pinned.address,
+                });
+            }
+            chunks.push(value);
+        }
+        const buf = new Uint8Array(bytes);
+        let offset = 0;
+        for (const c of chunks) {
+            buf.set(c, offset);
+            offset += c.byteLength;
+        }
+        return {
+            url,
+            status: res.status,
+            headers,
+            body: buf,
+            pinnedAddress: pinned.address,
+            pinnedFamily,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener('abort', onExternalAbort);
+        await dispatcher.close().catch(() => { });
+    }
+}
+/**
+ * Decode a UTF-8 byte buffer as JSON when the content-type declares JSON, or
+ * fall back to a UTF-8 string. Handy shared helper for probe-style call sites
+ * that don't care about binary bodies.
+ */
+function decodeBodyAsJsonOrText(body, contentType) {
+    if (body.byteLength === 0)
+        return null;
+    const text = Buffer.from(body.buffer, body.byteOffset, body.byteLength).toString('utf8');
+    if (contentType?.toLowerCase().includes('application/json')) {
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    return text;
+}
+//# sourceMappingURL=ssrf-fetch.js.map

package/dist/lib/net/ssrf-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-fetch.js","sourceRoot":"","sources":["../../../src/lib/net/ssrf-fetch.ts"],"names":[],"mappings":";;;AAyGA,sCAwKC;AAOD,wDAWC;AAlQD,2CAAwD;AACxD,mCAAqD;AACrD,qDAAgE;AAEhE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAYrD;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAkB;IACtB,GAAG,CAAS;IACZ,QAAQ,CAAU;IAClB,OAAO,CAAU;IAE1B,YAAY,IAAqB,EAAE,OAAe,EAAE,IAA0D;QAC5G,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;CACF;AAdD,4CAcC;AA6BD;;;;GAIG;AACI,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,UAA4B,EAAE;IAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAEpE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,8DAA8D;IAC9D,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEzD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,kDAAkD,MAAM,CAAC,QAAQ,EAAE,EACnE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,EAAE,oCAAoC,GAAG,EAAE,EAAE;YAChG,GAAG;YACH,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAgD,CAAC;IACrD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAA,iBAAc,EAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,yBAAyB,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACxF,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,iCAAiC,QAAQ,EAAE,EAAE;YACnF,GAAG;YACH,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IACD,kEAAkE;IAClE,0EAA0E;IAC1E,sEAAsE;IACtE,qEAAqE;IACrE,8DAA8D;IAC9D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,IAAA,gCAAe,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,EACxB,sBAAsB,QAAQ,uEAAuE,EACrG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,IAAA,4BAAW,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,EACjB,sBAAsB,QAAQ,yCAAyC,EACvE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CACtC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,cAAK,CAAC;QAC3B,OAAO,EAAE;YACP,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,EAAE,CACN,EAAU,EACV,IAA+B,EAC/B,EAAmG,EACnG,EAAE;gBACF,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;oBACd,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;SACF;KACF,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAsC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;SACX,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,IAAA,cAAW,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3B,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,GAAG;gBACH,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;gBACP,IAAI,EAAE,IAAI,UAAU,EAAE;gBACtB,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,YAAY;aACb,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,0BAA0B,YAAY,QAAQ,EAAE;oBAC/F,GAAG;oBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;QACzB,CAAC;QAED,OAAO;YACL,GAAG;YACH,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;YACP,IAAI,EAAE,GAAG;YACT,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,YAAY;SACb,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,IAAgB,EAAE,WAA+B;IACtF,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzF,IAAI,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/observability/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Observability utilities for @adcp/sdk
+ *
+ * Provides OpenTelemetry tracing integration. All functions gracefully
+ * handle the case where @opentelemetry/api is not installed.
+ */
+export { getTracer, isTracingEnabled, injectTraceHeaders, withSpan, addSpanAttributes, recordSpanException, } from './tracing';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/observability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,QAAQ,EACR,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,WAAW,CAAC"}

package/dist/lib/observability/index.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Observability utilities for @adcp/sdk
+ *
+ * Provides OpenTelemetry tracing integration. All functions gracefully
+ * handle the case where @opentelemetry/api is not installed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordSpanException = exports.addSpanAttributes = exports.withSpan = exports.injectTraceHeaders = exports.isTracingEnabled = exports.getTracer = void 0;
+var tracing_1 = require("./tracing");
+Object.defineProperty(exports, "getTracer", { enumerable: true, get: function () { return tracing_1.getTracer; } });
+Object.defineProperty(exports, "isTracingEnabled", { enumerable: true, get: function () { return tracing_1.isTracingEnabled; } });
+Object.defineProperty(exports, "injectTraceHeaders", { enumerable: true, get: function () { return tracing_1.injectTraceHeaders; } });
+Object.defineProperty(exports, "withSpan", { enumerable: true, get: function () { return tracing_1.withSpan; } });
+Object.defineProperty(exports, "addSpanAttributes", { enumerable: true, get: function () { return tracing_1.addSpanAttributes; } });
+Object.defineProperty(exports, "recordSpanException", { enumerable: true, get: function () { return tracing_1.recordSpanException; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/observability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/observability/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAOmB;AANjB,oGAAA,SAAS,OAAA;AACT,2GAAA,gBAAgB,OAAA;AAChB,6GAAA,kBAAkB,OAAA;AAClB,mGAAA,QAAQ,OAAA;AACR,4GAAA,iBAAiB,OAAA;AACjB,8GAAA,mBAAmB,OAAA"}

package/dist/lib/observability/tracing.d.ts

@@ -0,0 +1,42 @@
+/**
+ * OpenTelemetry tracing utilities for @adcp/sdk
+ *
+ * Uses dynamic require to gracefully handle missing @opentelemetry/api.
+ * When the package is not installed, all tracing becomes a no-op.
+ */
+import type { Tracer } from '@opentelemetry/api';
+/**
+ * Get the OpenTelemetry tracer for @adcp/sdk.
+ * Returns null if @opentelemetry/api is not installed.
+ */
+export declare function getTracer(): Tracer | null;
+/**
+ * Check if OpenTelemetry is available.
+ */
+export declare function isTracingEnabled(): boolean;
+/**
+ * Inject trace context headers into an outgoing request.
+ * Returns empty object if OTel is not available.
+ */
+export declare function injectTraceHeaders(): Record<string, string>;
+/**
+ * Execute a function within an OpenTelemetry span.
+ * If @opentelemetry/api is not installed, executes the function directly (no-op).
+ *
+ * @param name - Span name (e.g., 'adcp.mcp.call_tool')
+ * @param attributes - Span attributes
+ * @param fn - Async function to execute within the span
+ * @returns The result of fn()
+ */
+export declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean | undefined>, fn: () => Promise<T>): Promise<T>;
+/**
+ * Add attributes to the current active span.
+ * No-op if OTel is not available or no active span exists.
+ */
+export declare function addSpanAttributes(attributes: Record<string, string | number | boolean | undefined>): void;
+/**
+ * Record an exception on the current active span.
+ * No-op if OTel is not available or no active span exists.
+ */
+export declare function recordSpanException(error: Error): void;
+//# sourceMappingURL=tracing.d.ts.map

package/dist/lib/observability/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../../src/lib/observability/tracing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAkB,MAAM,oBAAoB,CAAC;AAmBjE;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAGzC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO3D;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,EACjE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CA4BZ;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,IAAI,CAYzG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAQtD"}