@airgap/coinlib-core 0.13.46 → 0.13.47

package/utils/remote-data/remoteDataRequest.js

@@ -0,0 +1,240 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.remoteDataGet = exports.isPublicHttpUrl = exports.REMOTE_DATA_MAX_REDIRECTS = exports.REMOTE_DATA_MAX_CONTENT_LENGTH = exports.REMOTE_DATA_TIMEOUT = void 0;
+var index_1 = __importDefault(require("../../dependencies/src/axios-0.33.0/index"));
+/**
+ * Remote data URIs can originate from untrusted, attacker-controlled sources, e.g. the `token_info`
+ * big map of an arbitrary Tezos FA2 contract. Fetching them unguarded turns the wallet into an SSRF
+ * proxy against whatever the host can reach (cloud metadata endpoints, a local node's RPC, ...).
+ *
+ * Every remote data fetch therefore goes through `remoteDataGet`, which rejects non-public targets
+ * and bounds the request.
+ *
+ * Known limitation: only *literal* addresses are checked, so a hostname that resolves to a private
+ * address (DNS rebinding) is not caught. Closing that requires a custom `lookup` passed down to
+ * `http.request`.
+ */
+var ALLOWED_PROTOCOLS = ['http:', 'https:'];
+exports.REMOTE_DATA_TIMEOUT = 30000;
+exports.REMOTE_DATA_MAX_CONTENT_LENGTH = 10 * 1024 * 1024;
+exports.REMOTE_DATA_MAX_REDIRECTS = 3;
+function parseUrl(uri) {
+    try {
+        return new URL(uri);
+    }
+    catch (error) {
+        return undefined;
+    }
+}
+function parseIPv4(hostname) {
+    var parts = hostname.split('.');
+    if (parts.length !== 4) {
+        return undefined;
+    }
+    var bytes = [];
+    for (var _i = 0, parts_1 = parts; _i < parts_1.length; _i++) {
+        var part = parts_1[_i];
+        if (!/^[0-9]{1,3}$/.test(part)) {
+            return undefined;
+        }
+        var byte = parseInt(part, 10);
+        if (byte > 255) {
+            return undefined;
+        }
+        bytes.push(byte);
+    }
+    return bytes;
+}
+function parseIPv6(hostname) {
+    var _a = hostname.split('::'), head = _a[0], tail = _a[1], rest = _a.slice(2);
+    if (rest.length > 0) {
+        return undefined;
+    }
+    var parseGroups = function (value) {
+        if (value === '') {
+            return [];
+        }
+        var groups = value.split(':');
+        var bytes = [];
+        for (var i = 0; i < groups.length; i++) {
+            // an IPv4 address may only appear as the very last piece, e.g. ::ffff:127.0.0.1
+            if (i === groups.length - 1 && groups[i].includes('.')) {
+                var ipv4 = parseIPv4(groups[i]);
+                if (ipv4 === undefined) {
+                    return undefined;
+                }
+                bytes.push.apply(bytes, ipv4);
+                continue;
+            }
+            if (!/^[0-9a-fA-F]{1,4}$/.test(groups[i])) {
+                return undefined;
+            }
+            var group = parseInt(groups[i], 16);
+            bytes.push(group >>> 8, group & 0xff);
+        }
+        return bytes;
+    };
+    var headBytes = parseGroups(head);
+    // `tail === undefined` means the address was not compressed and must be complete
+    var tailBytes = tail === undefined ? [] : parseGroups(tail);
+    if (headBytes === undefined || tailBytes === undefined) {
+        return undefined;
+    }
+    var missing = 16 - headBytes.length - tailBytes.length;
+    if (tail === undefined ? missing !== 0 : missing < 0) {
+        return undefined;
+    }
+    return __spreadArray(__spreadArray(__spreadArray([], headBytes, true), new Array(missing).fill(0), true), tailBytes, true);
+}
+function isBlockedIPv4(bytes) {
+    var a = bytes[0], b = bytes[1];
+    return (a === 0 || // 0.0.0.0/8, "this network"
+        a === 10 || // private
+        a === 127 || // loopback
+        (a === 100 && b >= 64 && b <= 127) || // 100.64.0.0/10, carrier-grade NAT
+        (a === 169 && b === 254) || // link-local, incl. cloud metadata endpoints
+        (a === 172 && b >= 16 && b <= 31) || // private
+        (a === 192 && b === 0) || // 192.0.0.0/24, IETF protocol assignments
+        (a === 192 && b === 168) || // private
+        (a === 198 && (b === 18 || b === 19)) || // 198.18.0.0/15, benchmarking
+        a >= 224 // multicast and reserved, incl. 255.255.255.255
+    );
+}
+function isBlockedIPv6(bytes) {
+    var isPrefix = function () {
+        var prefix = [];
+        for (var _i = 0; _i < arguments.length; _i++) {
+            prefix[_i] = arguments[_i];
+        }
+        return prefix.every(function (byte, index) { return bytes[index] === byte; });
+    };
+    // IPv4-mapped (::ffff:0:0/96) and IPv4-translated/NAT64 (64:ff9b::/96) addresses embed an IPv4
+    // address in the last four bytes and are routed as such, so they must be judged as IPv4.
+    // Node normalizes ::ffff:127.0.0.1 to the hex form ::ffff:7f00:1, hence the check on bytes.
+    if (isPrefix(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xff, 0xff) || isPrefix(0, 0x64, 0xff, 0x9b, 0, 0, 0, 0, 0, 0, 0, 0)) {
+        return isBlockedIPv4(bytes.slice(12));
+    }
+    return (bytes.every(function (byte) { return byte === 0; }) || // :: unspecified
+        isPrefix(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1) || // ::1 loopback
+        (bytes[0] & 0xfe) === 0xfc || // fc00::/7 unique local
+        (bytes[0] === 0xfe && (bytes[1] & 0xc0) === 0x80) || // fe80::/10 link-local
+        bytes[0] === 0xff // ff00::/8 multicast
+    );
+}
+/**
+ * Whether `uri` is an `http(s)` URL that does not obviously point back at the host or its private
+ * network. Anything unparseable, non-`http(s)`, credential-bearing or address-literal-private is
+ * rejected.
+ */
+function isPublicHttpUrl(uri) {
+    var url = parseUrl(uri);
+    if (url === undefined) {
+        return false;
+    }
+    if (!ALLOWED_PROTOCOLS.includes(url.protocol)) {
+        return false;
+    }
+    // credentials in an untrusted URL are only ever a way to make us leak them
+    if (url.username !== '' || url.password !== '') {
+        return false;
+    }
+    // `new URL` keeps IPv6 hosts bracketed and may keep a fully qualified name's trailing dot
+    var hostname = url.hostname
+        .replace(/^\[|\]$/g, '')
+        .replace(/\.$/, '')
+        .toLowerCase();
+    if (hostname === '') {
+        return false;
+    }
+    if (hostname === 'localhost' || hostname.endsWith('.localhost')) {
+        return false;
+    }
+    // `new URL` already normalizes the integer, octal and hex spellings of an IPv4 host
+    var ipv4 = parseIPv4(hostname);
+    if (ipv4 !== undefined) {
+        return !isBlockedIPv4(ipv4);
+    }
+    var ipv6 = parseIPv6(hostname);
+    if (ipv6 !== undefined) {
+        return !isBlockedIPv6(ipv6);
+    }
+    return true;
+}
+exports.isPublicHttpUrl = isPublicHttpUrl;
+/**
+ * The single entry point through which remote data is fetched. Validates the target, bounds the
+ * request, and re-validates every redirect hop, since a one-off check on the initial URL is
+ * trivially defeated by a redirect.
+ */
+function remoteDataGet(uri, responseType) {
+    if (responseType === void 0) { responseType = 'json'; }
+    return __awaiter(this, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            if (!isPublicHttpUrl(uri)) {
+                throw new Error("Refusing to fetch remote data from a non-public URL: ".concat(uri));
+            }
+            return [2 /*return*/, index_1.default.get(uri, {
+                    responseType: responseType,
+                    timeout: exports.REMOTE_DATA_TIMEOUT,
+                    maxContentLength: exports.REMOTE_DATA_MAX_CONTENT_LENGTH,
+                    maxRedirects: exports.REMOTE_DATA_MAX_REDIRECTS,
+                    beforeRedirect: function (options) {
+                        var href = options.href;
+                        if (typeof href !== 'string' || !isPublicHttpUrl(href)) {
+                            throw new Error("Refusing to follow a remote data redirect to a non-public URL: ".concat(String(href)));
+                        }
+                    }
+                })];
+        });
+    });
+}
+exports.remoteDataGet = remoteDataGet;
+//# sourceMappingURL=remoteDataRequest.js.map

package/utils/remote-data/remoteDataRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteDataRequest.js","sourceRoot":"","sources":["../../../src/utils/remote-data/remoteDataRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oFAA8F;AAE9F;;;;;;;;;;;GAWG;AAEH,IAAM,iBAAiB,GAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE1C,QAAA,mBAAmB,GAAG,KAAK,CAAA;AAC3B,QAAA,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACjD,QAAA,yBAAyB,GAAG,CAAC,CAAA;AAE1C,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI;QACF,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;KACpB;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,SAAS,CAAA;KACjB;AACH,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;QACtB,OAAO,SAAS,CAAA;KACjB;IAED,IAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAmB,UAAK,EAAL,eAAK,EAAL,mBAAK,EAAL,IAAK,EAAE;QAArB,IAAM,IAAI,cAAA;QACb,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9B,OAAO,SAAS,CAAA;SACjB;QACD,IAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/B,IAAI,IAAI,GAAG,GAAG,EAAE;YACd,OAAO,SAAS,CAAA;SACjB;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;KACjB;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IAC3B,IAAA,KAAwB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAA3C,IAAI,QAAA,EAAE,IAAI,QAAA,EAAK,IAAI,cAAwB,CAAA;IAClD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;QACnB,OAAO,SAAS,CAAA;KACjB;IAED,IAAM,WAAW,GAAG,UAAC,KAAa;QAChC,IAAI,KAAK,KAAK,EAAE,EAAE;YAChB,OAAO,EAAE,CAAA;SACV;QAED,IAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACtC,gFAAgF;YAChF,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBACtD,IAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACjC,IAAI,IAAI,KAAK,SAAS,EAAE;oBACtB,OAAO,SAAS,CAAA;iBACjB;gBACD,KAAK,CAAC,IAAI,OAAV,KAAK,EAAS,IAAI,EAAC;gBACnB,SAAQ;aACT;YAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBACzC,OAAO,SAAS,CAAA;aACjB;YACD,IAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAA;SACtC;QAED,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,IAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IACnC,iFAAiF;IACjF,IAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAC7D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE;QACtD,OAAO,SAAS,CAAA;KACjB;IAED,IAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;IACxD,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;QACpD,OAAO,SAAS,CAAA;KACjB;IAED,qDAAW,SAAS,SAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAK,SAAS,QAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IAC7B,IAAA,CAAC,GAAO,KAAK,GAAZ,EAAE,CAAC,GAAI,KAAK,GAAT,CAAS;IAEpB,OAAO,CACL,CAAC,KAAK,CAAC,IAAI,4BAA4B;QACvC,CAAC,KAAK,EAAE,IAAI,UAAU;QACtB,CAAC,KAAK,GAAG,IAAI,WAAW;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,mCAAmC;QACzE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,6CAA6C;QACzE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,UAAU;QAC/C,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,0CAA0C;QACpE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,UAAU;QACtC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,8BAA8B;QACvE,CAAC,IAAI,GAAG,CAAC,gDAAgD;KAC1D,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACpC,IAAM,QAAQ,GAAG;QAAC,gBAAmB;aAAnB,UAAmB,EAAnB,qBAAmB,EAAnB,IAAmB;YAAnB,2BAAmB;;QAAc,OAAA,MAAM,CAAC,KAAK,CAAC,UAAC,IAAI,EAAE,KAAK,IAAK,OAAA,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAArB,CAAqB,CAAC;IAApD,CAAoD,CAAA;IAEvG,+FAA+F;IAC/F,yFAAyF;IACzF,4FAA4F;IAC5F,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/G,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;KACtC;IAED,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,UAAC,IAAI,IAAK,OAAA,IAAI,KAAK,CAAC,EAAV,CAAU,CAAC,IAAI,iBAAiB;QACtD,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,eAAe;QAC3E,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,wBAAwB;QACtD,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,uBAAuB;QAC5E,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,qBAAqB;KACxC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAW;IACzC,IAAM,GAAG,GAAoB,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC1C,IAAI,GAAG,KAAK,SAAS,EAAE;QACrB,OAAO,KAAK,CAAA;KACb;IAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC7C,OAAO,KAAK,CAAA;KACb;IAED,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE;QAC9C,OAAO,KAAK,CAAA;KACb;IAED,0FAA0F;IAC1F,IAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ;SAC1B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,WAAW,EAAE,CAAA;IAChB,IAAI,QAAQ,KAAK,EAAE,EAAE;QACnB,OAAO,KAAK,CAAA;KACb;IAED,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAC/D,OAAO,KAAK,CAAA;KACb;IAED,oFAAoF;IACpF,IAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,SAAS,EAAE;QACtB,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;KAC5B;IAED,IAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,SAAS,EAAE;QACtB,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAxCD,0CAwCC;AAED;;;;GAIG;AACH,SAAsB,aAAa,CAAI,GAAW,EAAE,YAAmC;IAAnC,6BAAA,EAAA,qBAAmC;;;YACrF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;gBACzB,MAAM,IAAI,KAAK,CAAC,+DAAwD,GAAG,CAAE,CAAC,CAAA;aAC/E;YAED,sBAAO,eAAK,CAAC,GAAG,CAAsB,GAAG,EAAE;oBACzC,YAAY,cAAA;oBACZ,OAAO,EAAE,2BAAmB;oBAC5B,gBAAgB,EAAE,sCAA8B;oBAChD,YAAY,EAAE,iCAAyB;oBACvC,cAAc,EAAE,UAAC,OAA4B;wBAC3C,IAAM,IAAI,GAAY,OAAO,CAAC,IAAI,CAAA;wBAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;4BACtD,MAAM,IAAI,KAAK,CAAC,yEAAkE,MAAM,CAAC,IAAI,CAAC,CAAE,CAAC,CAAA;yBAClG;oBACH,CAAC;iBACF,CAAC,EAAA;;;CACH;AAjBD,sCAiBC"}

package/dependencies/src/axios-0.19.0/index.d.ts

@@ -1,152 +0,0 @@
-export interface AxiosTransformer {
-  (data: any, headers?: any): any;
-}
-
-export interface AxiosAdapter {
-  (config: AxiosRequestConfig): AxiosPromise<any>;
-}
-
-export interface AxiosBasicCredentials {
-  username: string;
-  password: string;
-}
-
-export interface AxiosProxyConfig {
-  host: string;
-  port: number;
-  auth?: {
-    username: string;
-    password:string;
-  };
-  protocol?: string;
-}
-
-export type Method =
-  | 'get' | 'GET'
-  | 'delete' | 'DELETE'
-  | 'head' | 'HEAD'
-  | 'options' | 'OPTIONS'
-  | 'post' | 'POST'
-  | 'put' | 'PUT'
-  | 'patch' | 'PATCH'
-
-export type ResponseType = 
-  | 'arraybuffer' 
-  | 'blob' 
-  | 'document' 
-  | 'json' 
-  | 'text' 
-  | 'stream'
-
-export interface AxiosRequestConfig {
-  url?: string;
-  method?: Method;
-  baseURL?: string;
-  transformRequest?: AxiosTransformer | AxiosTransformer[];
-  transformResponse?: AxiosTransformer | AxiosTransformer[];
-  headers?: any;
-  params?: any;
-  paramsSerializer?: (params: any) => string;
-  data?: any;
-  timeout?: number;
-  withCredentials?: boolean;
-  adapter?: AxiosAdapter;
-  auth?: AxiosBasicCredentials;
-  responseType?: ResponseType;
-  xsrfCookieName?: string;
-  xsrfHeaderName?: string;
-  onUploadProgress?: (progressEvent: any) => void;
-  onDownloadProgress?: (progressEvent: any) => void;
-  maxContentLength?: number;
-  validateStatus?: (status: number) => boolean;
-  maxRedirects?: number;
-  socketPath?: string | null;
-  httpAgent?: any;
-  httpsAgent?: any;
-  proxy?: AxiosProxyConfig | false;
-  cancelToken?: CancelToken;
-}
-
-export interface AxiosResponse<T = any>  {
-  data: T;
-  status: number;
-  statusText: string;
-  headers: any;
-  config: AxiosRequestConfig;
-  request?: any;
-}
-
-export interface AxiosError<T = any> extends Error {
-  config: AxiosRequestConfig;
-  code?: string;
-  request?: any;
-  response?: AxiosResponse<T>;
-  isAxiosError: boolean;
-}
-
-export interface AxiosPromise<T = any> extends Promise<AxiosResponse<T>> {
-}
-
-export interface CancelStatic {
-  new (message?: string): Cancel;
-}
-
-export interface Cancel {
-  message: string;
-}
-
-export interface Canceler {
-  (message?: string): void;
-}
-
-export interface CancelTokenStatic {
-  new (executor: (cancel: Canceler) => void): CancelToken;
-  source(): CancelTokenSource;
-}
-
-export interface CancelToken {
-  promise: Promise<Cancel>;
-  reason?: Cancel;
-  throwIfRequested(): void;
-}
-
-export interface CancelTokenSource {
-  token: CancelToken;
-  cancel: Canceler;
-}
-
-export interface AxiosInterceptorManager<V> {
-  use(onFulfilled?: (value: V) => V | Promise<V>, onRejected?: (error: any) => any): number;
-  eject(id: number): void;
-}
-
-export interface AxiosInstance {
-  (config: AxiosRequestConfig): AxiosPromise;
-  (url: string, config?: AxiosRequestConfig): AxiosPromise;
-  defaults: AxiosRequestConfig;
-  interceptors: {
-    request: AxiosInterceptorManager<AxiosRequestConfig>;
-    response: AxiosInterceptorManager<AxiosResponse>;
-  };
-  getUri(config?: AxiosRequestConfig): string;
-  request<T = any, R = AxiosResponse<T>> (config: AxiosRequestConfig): Promise<R>;
-  get<T = any, R = AxiosResponse<T>>(url: string, config?: AxiosRequestConfig): Promise<R>;
-  delete<T = any, R = AxiosResponse<T>>(url: string, config?: AxiosRequestConfig): Promise<R>;
-  head<T = any, R = AxiosResponse<T>>(url: string, config?: AxiosRequestConfig): Promise<R>;
-  post<T = any, R = AxiosResponse<T>>(url: string, data?: any, config?: AxiosRequestConfig): Promise<R>;
-  put<T = any, R = AxiosResponse<T>>(url: string, data?: any, config?: AxiosRequestConfig): Promise<R>;
-  patch<T = any, R = AxiosResponse<T>>(url: string, data?: any, config?: AxiosRequestConfig): Promise<R>;
-}
-
-export interface AxiosStatic extends AxiosInstance {
-  create(config?: AxiosRequestConfig): AxiosInstance;
-  Cancel: CancelStatic;
-  CancelToken: CancelTokenStatic;
-  isCancel(value: any): boolean;
-  all<T>(values: (T | Promise<T>)[]): Promise<T[]>;
-  spread<T, R>(callback: (...args: T[]) => R): (array: T[]) => R;
-}
-
-declare const Axios: AxiosStatic;
-
-export default Axios;

package/dependencies/src/axios-0.19.0/lib/adapters/http.js

@@ -1,275 +0,0 @@
-'use strict';
-
-var utils = require('./../utils');
-var settle = require('./../core/settle');
-var buildURL = require('./../helpers/buildURL');
-var http = require('http');
-var https = require('https');
-var httpFollow = require('../../../follow-redirects-1.5.10/index').http;
-var httpsFollow = require('../../../follow-redirects-1.5.10/index').https;
-var url = require('url');
-var zlib = require('zlib');
-var pkg = require('./../../package.json');
-var createError = require('../core/createError');
-var enhanceError = require('../core/enhanceError');
-
-var isHttps = /https:?/;
-
-/*eslint consistent-return:0*/
-module.exports = function httpAdapter(config) {
-  return new Promise(function dispatchHttpRequest(resolvePromise, rejectPromise) {
-    var timer;
-    var resolve = function resolve(value) {
-      clearTimeout(timer);
-      resolvePromise(value);
-    };
-    var reject = function reject(value) {
-      clearTimeout(timer);
-      rejectPromise(value);
-    };
-    var data = config.data;
-    var headers = config.headers;
-
-    // Set User-Agent (required by some servers)
-    // Only set header if it hasn't been set in config
-    // See https://github.com/axios/axios/issues/69
-    if (!headers['User-Agent'] && !headers['user-agent']) {
-      headers['User-Agent'] = 'axios/' + pkg.version;
-    }
-
-    if (data && !utils.isStream(data)) {
-      if (Buffer.isBuffer(data)) {
-        // Nothing to do...
-      } else if (utils.isArrayBuffer(data)) {
-        data = Buffer.from(new Uint8Array(data));
-      } else if (utils.isString(data)) {
-        data = Buffer.from(data, 'utf-8');
-      } else {
-        return reject(createError(
-          'Data after transformation must be a string, an ArrayBuffer, a Buffer, or a Stream',
-          config
-        ));
-      }
-
-      // Add Content-Length header if data exists
-      headers['Content-Length'] = data.length;
-    }
-
-    // HTTP basic authentication
-    var auth = undefined;
-    if (config.auth) {
-      var username = config.auth.username || '';
-      var password = config.auth.password || '';
-      auth = username + ':' + password;
-    }
-
-    // Parse url
-    var parsed = url.parse(config.url);
-    var protocol = parsed.protocol || 'http:';
-
-    if (!auth && parsed.auth) {
-      var urlAuth = parsed.auth.split(':');
-      var urlUsername = urlAuth[0] || '';
-      var urlPassword = urlAuth[1] || '';
-      auth = urlUsername + ':' + urlPassword;
-    }
-
-    if (auth) {
-      delete headers.Authorization;
-    }
-
-    var isHttpsRequest = isHttps.test(protocol);
-    var agent = isHttpsRequest ? config.httpsAgent : config.httpAgent;
-
-    var options = {
-      path: buildURL(parsed.path, config.params, config.paramsSerializer).replace(/^\?/, ''),
-      method: config.method.toUpperCase(),
-      headers: headers,
-      agent: agent,
-      auth: auth
-    };
-
-    if (config.socketPath) {
-      options.socketPath = config.socketPath;
-    } else {
-      options.hostname = parsed.hostname;
-      options.port = parsed.port;
-    }
-
-    var proxy = config.proxy;
-    if (!proxy && proxy !== false) {
-      var proxyEnv = protocol.slice(0, -1) + '_proxy';
-      var proxyUrl = process.env[proxyEnv] || process.env[proxyEnv.toUpperCase()];
-      if (proxyUrl) {
-        var parsedProxyUrl = url.parse(proxyUrl);
-        var noProxyEnv = process.env.no_proxy || process.env.NO_PROXY;
-        var shouldProxy = true;
-
-        if (noProxyEnv) {
-          var noProxy = noProxyEnv.split(',').map(function trim(s) {
-            return s.trim();
-          });
-
-          shouldProxy = !noProxy.some(function proxyMatch(proxyElement) {
-            if (!proxyElement) {
-              return false;
-            }
-            if (proxyElement === '*') {
-              return true;
-            }
-            if (proxyElement[0] === '.' &&
-                parsed.hostname.substr(parsed.hostname.length - proxyElement.length) === proxyElement &&
-                proxyElement.match(/\./g).length === parsed.hostname.match(/\./g).length) {
-              return true;
-            }
-
-            return parsed.hostname === proxyElement;
-          });
-        }
-
-
-        if (shouldProxy) {
-          proxy = {
-            host: parsedProxyUrl.hostname,
-            port: parsedProxyUrl.port
-          };
-
-          if (parsedProxyUrl.auth) {
-            var proxyUrlAuth = parsedProxyUrl.auth.split(':');
-            proxy.auth = {
-              username: proxyUrlAuth[0],
-              password: proxyUrlAuth[1]
-            };
-          }
-        }
-      }
-    }
-
-    if (proxy) {
-      options.hostname = proxy.host;
-      options.host = proxy.host;
-      options.headers.host = parsed.hostname + (parsed.port ? ':' + parsed.port : '');
-      options.port = proxy.port;
-      options.path = protocol + '//' + parsed.hostname + (parsed.port ? ':' + parsed.port : '') + options.path;
-
-      // Basic proxy authorization
-      if (proxy.auth) {
-        var base64 = Buffer.from(proxy.auth.username + ':' + proxy.auth.password, 'utf8').toString('base64');
-        options.headers['Proxy-Authorization'] = 'Basic ' + base64;
-      }
-    }
-
-    var transport;
-    var isHttpsProxy = isHttpsRequest && (proxy ? isHttps.test(proxy.protocol) : true);
-    if (config.transport) {
-      transport = config.transport;
-    } else if (config.maxRedirects === 0) {
-      transport = isHttpsProxy ? https : http;
-    } else {
-      if (config.maxRedirects) {
-        options.maxRedirects = config.maxRedirects;
-      }
-      transport = isHttpsProxy ? httpsFollow : httpFollow;
-    }
-
-    if (config.maxContentLength && config.maxContentLength > -1) {
-      options.maxBodyLength = config.maxContentLength;
-    }
-
-    // Create the request
-    var req = transport.request(options, function handleResponse(res) {
-      if (req.aborted) return;
-
-      // uncompress the response body transparently if required
-      var stream = res;
-      switch (res.headers['content-encoding']) {
-      /*eslint default-case:0*/
-      case 'gzip':
-      case 'compress':
-      case 'deflate':
-        // add the unzipper to the body stream processing pipeline
-        stream = (res.statusCode === 204) ? stream : stream.pipe(zlib.createUnzip());
-
-        // remove the content-encoding in order to not confuse downstream operations
-        delete res.headers['content-encoding'];
-        break;
-      }
-
-      // return the last request in case of redirects
-      var lastRequest = res.req || req;
-
-      var response = {
-        status: res.statusCode,
-        statusText: res.statusMessage,
-        headers: res.headers,
-        config: config,
-        request: lastRequest
-      };
-
-      if (config.responseType === 'stream') {
-        response.data = stream;
-        settle(resolve, reject, response);
-      } else {
-        var responseBuffer = [];
-        stream.on('data', function handleStreamData(chunk) {
-          responseBuffer.push(chunk);
-
-          // make sure the content length is not over the maxContentLength if specified
-          if (config.maxContentLength > -1 && Buffer.concat(responseBuffer).length > config.maxContentLength) {
-            stream.destroy();
-            reject(createError('maxContentLength size of ' + config.maxContentLength + ' exceeded',
-              config, null, lastRequest));
-          }
-        });
-
-        stream.on('error', function handleStreamError(err) {
-          if (req.aborted) return;
-          reject(enhanceError(err, config, null, lastRequest));
-        });
-
-        stream.on('end', function handleStreamEnd() {
-          var responseData = Buffer.concat(responseBuffer);
-          if (config.responseType !== 'arraybuffer') {
-            responseData = responseData.toString(config.responseEncoding);
-          }
-
-          response.data = responseData;
-          settle(resolve, reject, response);
-        });
-      }
-    });
-
-    // Handle errors
-    req.on('error', function handleRequestError(err) {
-      if (req.aborted) return;
-      reject(enhanceError(err, config, null, req));
-    });
-
-    // Handle request timeout
-    if (config.timeout) {
-      timer = setTimeout(function handleRequestTimeout() {
-        req.abort();
-        reject(createError('timeout of ' + config.timeout + 'ms exceeded', config, 'ECONNABORTED', req));
-      }, config.timeout);
-    }
-
-    if (config.cancelToken) {
-      // Handle cancellation
-      config.cancelToken.promise.then(function onCanceled(cancel) {
-        if (req.aborted) return;
-
-        req.abort();
-        reject(cancel);
-      });
-    }
-
-    // Send the request
-    if (utils.isStream(data)) {
-      data.on('error', function handleStreamError(err) {
-        reject(enhanceError(err, config, null, req));
-      }).pipe(req);
-    } else {
-      req.end(data);
-    }
-  });
-};