@cosmocoder/mcp-web-docs 2.0.8 → 2.0.9

package/build/util/outbound-request.integration.test.js

@@ -0,0 +1,149 @@
+import { createServer } from 'node:http';
+import { createServer as createTcpServer } from 'node:net';
+import { chromium } from 'playwright';
+import { fetch as undiciFetch, ProxyAgent } from 'undici';
+import { getBrowserConfig } from '../crawler/browser-config.js';
+import { BlockedOutboundRequestError, classifyOutboundFailure, closeOutboundProxy, createOutboundProxy, getOutboundResponseError, } from './outbound-request.js';
+vi.unmock('node:dns/promises');
+vi.unmock('proxy-chain');
+vi.unmock('undici');
+async function listenOnLoopback(server, host = '127.0.0.1') {
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, host, resolve);
+    });
+    return server.address().port;
+}
+async function closeTcpServer(server) {
+    if (!server.listening) {
+        return;
+    }
+    await new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+}
+async function loadImage(page, url) {
+    return page.evaluate((source) => new Promise((resolve) => {
+        const timeout = setTimeout(() => resolve('timed out'), 5000);
+        const image = new Image();
+        image.onload = () => {
+            clearTimeout(timeout);
+            resolve('loaded');
+        };
+        image.onerror = () => {
+            clearTimeout(timeout);
+            resolve('blocked');
+        };
+        image.src = source;
+    }), url);
+}
+async function openWebSocket(page, url) {
+    return page.evaluate((source) => new Promise((resolve) => {
+        const socket = new WebSocket(source);
+        const timeout = setTimeout(() => {
+            socket.close();
+            resolve('timed out');
+        }, 5000);
+        socket.onopen = () => {
+            clearTimeout(timeout);
+            resolve('connected');
+        };
+        socket.onerror = () => {
+            clearTimeout(timeout);
+            resolve('blocked');
+        };
+    }), url);
+}
+async function closeServer(server) {
+    if (!server.listening) {
+        return;
+    }
+    server.closeAllConnections();
+    await new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+}
+describe('outbound request integration', () => {
+    let browser;
+    afterEach(async () => {
+        await browser?.close();
+        browser = undefined;
+        await closeOutboundProxy();
+    });
+    it('blocks a real proxied socket before connecting to its private DNS result', async () => {
+        let requests = 0;
+        const target = createServer((_request, response) => {
+            requests++;
+            response.end('private');
+        });
+        const resolver = vi.fn().mockResolvedValue([{ address: '127.0.0.1', family: 4 }]);
+        let proxy;
+        let dispatcher;
+        try {
+            const port = await listenOnLoopback(target);
+            proxy = await createOutboundProxy(resolver);
+            dispatcher = new ProxyAgent(proxy.url);
+            await expect(undiciFetch(`http://public.example:${port}`, { dispatcher, signal: AbortSignal.timeout(5000) })).rejects.toThrow();
+            expect(resolver).toHaveBeenCalledWith('public.example', { all: true, order: 'verbatim' });
+            expect(requests).toBe(0);
+        }
+        finally {
+            await dispatcher?.destroy();
+            await proxy?.close();
+            await closeServer(target);
+        }
+    }, 15_000);
+    it.each([
+        { host: '127.0.0.1', urlHost: '127.0.0.1' },
+        { host: '::1', urlHost: '[::1]' },
+    ])('keeps Chromium main-frame, subresource, and WebSocket traffic away from $host', async ({ host, urlHost }) => {
+        let requests = 0;
+        let upgrades = 0;
+        const target = createServer((_request, response) => {
+            requests++;
+            response.end('private');
+        });
+        target.on('upgrade', (_request, socket) => {
+            upgrades++;
+            socket.destroy();
+        });
+        let tlsConnections = 0;
+        const tlsTarget = createTcpServer((socket) => {
+            tlsConnections++;
+            socket.destroy();
+        });
+        try {
+            const port = await listenOnLoopback(target, host);
+            const tlsPort = await listenOnLoopback(tlsTarget, host);
+            const config = await getBrowserConfig(undefined);
+            const proxy = config.launchContext?.launchOptions?.proxy;
+            expect(proxy).toEqual(expect.objectContaining({ bypass: '<-loopback>' }));
+            browser = await chromium.launch({ headless: true, proxy });
+            const page = await browser.newPage();
+            const privateUrl = `http://${urlHost}:${port}`;
+            const navigationResponse = await page.goto(`${privateUrl}/main`, { waitUntil: 'commit', timeout: 5000 });
+            expect(navigationResponse?.status()).toBe(403);
+            await expect(getOutboundResponseError(navigationResponse)).resolves.toBeInstanceOf(BlockedOutboundRequestError);
+            await page.goto('about:blank');
+            await expect(loadImage(page, `${privateUrl}/image.png`)).resolves.toBe('blocked');
+            await expect(openWebSocket(page, `ws://${urlHost}:${port}/socket`)).resolves.toBe('blocked');
+            const secureUrl = `https://${urlHost}:${tlsPort}`;
+            const secureNavigation = await page
+                .goto(`${secureUrl}/main`, { waitUntil: 'commit', timeout: 5000 })
+                .then(async (response) => (await getOutboundResponseError(response)) instanceof BlockedOutboundRequestError ? 'blocked' : 'loaded')
+                .catch(() => 'blocked');
+            expect(secureNavigation).toBe('blocked');
+            await expect(classifyOutboundFailure(secureUrl)).resolves.toBeInstanceOf(BlockedOutboundRequestError);
+            const securePage = await browser.newPage();
+            await securePage.goto('about:blank');
+            await expect(loadImage(securePage, `${secureUrl}/image.png`)).resolves.toBe('blocked');
+            await expect(openWebSocket(securePage, `wss://${urlHost}:${tlsPort}/socket`)).resolves.toBe('blocked');
+            expect(requests).toBe(0);
+            expect(upgrades).toBe(0);
+            expect(tlsConnections).toBe(0);
+        }
+        finally {
+            await browser?.close();
+            browser = undefined;
+            await closeServer(target);
+            await closeTcpServer(tlsTarget);
+        }
+    }, 30_000);
+});
+//# sourceMappingURL=outbound-request.integration.test.js.map

package/build/util/outbound-request.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-request.integration.test.js","sourceRoot":"","sources":["../../src/util/outbound-request.integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,YAAY,IAAI,eAAe,EAA8C,MAAM,UAAU,CAAC;AACvG,OAAO,EAAE,QAAQ,EAA2B,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAE/B,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAC/B,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACzB,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAIpB,KAAK,UAAU,gBAAgB,CAAC,MAAiB,EAAE,IAAI,GAAG,WAAW;IACnE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAQ,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAiB;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAU,EAAE,GAAW;IAC9C,OAAO,IAAI,CAAC,QAAQ,CAClB,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC;IACrB,CAAC,CAAC,EACJ,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,GAAW;IAClD,OAAO,IAAI,CAAC,QAAQ,CAClB,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC;IACJ,CAAC,CAAC,EACJ,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,OAA4B,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC;QACvB,OAAO,GAAG,SAAS,CAAC;QACpB,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACjD,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAwB,CAAC;QACzG,IAAI,KAAgC,CAAC;QACrC,IAAI,UAAkC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC5C,UAAU,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,WAAW,CAAC,yBAAyB,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAChI,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;gBACO,CAAC;YACP,MAAM,UAAU,EAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC;YACrB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,IAAI,CAAC;QACN,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;QAC3C,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;KAClC,CAAC,CACA,+EAA+E,EAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACjD,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACxC,QAAQ,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3C,cAAc,EAAE,CAAC;YACjB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;YACzD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YAC1E,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,UAAU,OAAO,IAAI,IAAI,EAAE,CAAC;YAE/C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,MAAM,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;YAEhH,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/B,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,UAAU,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClF,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,OAAO,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7F,MAAM,SAAS,GAAG,WAAW,OAAO,IAAI,OAAO,EAAE,CAAC;YAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI;iBAChC,IAAI,CAAC,GAAG,SAAS,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;iBACjE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CACvB,CAAC,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC,YAAY,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CACzG;iBACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;YAEtG,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,SAAS,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvF,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,OAAO,IAAI,OAAO,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAEvG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;gBACO,CAAC;YACP,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC;YACvB,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,EACD,MAAM,CACP,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/build/util/outbound-request.js

@@ -0,0 +1,367 @@
+import { lookup } from 'node:dns/promises';
+import { BlockList, isIP } from 'node:net';
+import { setTimeout as delay } from 'node:timers/promises';
+import { RequestError, Server as ProxyServer } from 'proxy-chain';
+import { fetch as undiciFetch, ProxyAgent } from 'undici';
+import { validatePublicUrl } from './security.js';
+const MAX_REDIRECTS = 5;
+const BLOCKED_HEADER = 'x-mcp-web-docs-blocked';
+const FAILED_HEADER = 'x-mcp-web-docs-failed';
+const PROXY_SHUTDOWN_TIMEOUT_MS = 1000;
+const FAILURE_CLASSIFICATION_TIMEOUT_MS = 1000;
+const MAX_PROXY_CONNECTIONS = 64;
+const publicAddresses = new BlockList();
+const blockedAddresses = new BlockList();
+publicAddresses.addSubnet('0.0.0.0', 0, 'ipv4');
+publicAddresses.addSubnet('2000::', 3, 'ipv6');
+for (const [network, prefix] of [
+    ['0.0.0.0', 8],
+    ['10.0.0.0', 8],
+    ['100.64.0.0', 10],
+    ['127.0.0.0', 8],
+    ['169.254.0.0', 16],
+    ['172.16.0.0', 12],
+    ['192.0.0.0', 24],
+    ['192.0.2.0', 24],
+    ['192.88.99.0', 24],
+    ['192.168.0.0', 16],
+    ['198.18.0.0', 15],
+    ['198.51.100.0', 24],
+    ['203.0.113.0', 24],
+    ['224.0.0.0', 4],
+    ['240.0.0.0', 4],
+]) {
+    blockedAddresses.addSubnet(network, prefix, 'ipv4');
+}
+for (const [network, prefix] of [
+    ['2001::', 32],
+    ['2001:2::', 48],
+    ['2001:10::', 28],
+    ['2001:20::', 28],
+    ['2001:db8::', 32],
+    ['2002::', 16],
+    ['3fff::', 20],
+]) {
+    blockedAddresses.addSubnet(network, prefix, 'ipv6');
+}
+async function raceWithAbort(promise, signal) {
+    if (!signal) {
+        return promise;
+    }
+    signal.throwIfAborted();
+    let onAbort;
+    const aborted = new Promise((_resolve, reject) => {
+        onAbort = () => reject(signal.reason);
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+    try {
+        return await Promise.race([promise, aborted]);
+    }
+    finally {
+        signal.removeEventListener('abort', onAbort);
+    }
+}
+function createLimitedResolver(resolver) {
+    let active = 0;
+    const queue = [];
+    const drain = () => {
+        while (active < MAX_PROXY_CONNECTIONS && queue.length > 0) {
+            const lookupRequest = queue.shift();
+            lookupRequest.signal?.removeEventListener('abort', lookupRequest.onAbort);
+            if (lookupRequest.signal?.aborted) {
+                lookupRequest.reject(lookupRequest.signal.reason);
+                continue;
+            }
+            active++;
+            Promise.resolve()
+                .then(() => resolver(lookupRequest.hostname, lookupRequest.options))
+                .then(lookupRequest.resolve, lookupRequest.reject)
+                .finally(() => {
+                active--;
+                drain();
+            });
+        }
+    };
+    return (hostname, options, signal) => {
+        signal?.throwIfAborted();
+        return new Promise((resolve, reject) => {
+            const lookupRequest = { hostname, options, signal, resolve, reject };
+            lookupRequest.onAbort = () => {
+                const index = queue.indexOf(lookupRequest);
+                if (index >= 0) {
+                    queue.splice(index, 1);
+                    reject(signal.reason);
+                }
+            };
+            queue.push(lookupRequest);
+            signal?.addEventListener('abort', lookupRequest.onAbort, { once: true });
+            drain();
+        });
+    };
+}
+function isPublicAddress(address) {
+    const family = isIP(address);
+    const addressFamily = family === 4 ? 'ipv4' : 'ipv6';
+    return family !== 0 && publicAddresses.check(address, addressFamily) && !blockedAddresses.check(address, addressFamily);
+}
+export class BlockedOutboundRequestError extends Error {
+    constructor(message = 'Blocked outbound destination') {
+        super(message);
+        this.name = 'BlockedOutboundRequestError';
+    }
+}
+export class OutboundRequestFailedError extends Error {
+    constructor(message = 'Outbound request failed') {
+        super(message);
+        this.name = 'OutboundRequestFailedError';
+    }
+}
+export async function getOutboundResponseError(response) {
+    if (!response || (response.status() !== 403 && response.status() !== 502)) {
+        return undefined;
+    }
+    try {
+        const [blocked, failed] = await Promise.all([response.headerValue(BLOCKED_HEADER), response.headerValue(FAILED_HEADER)]);
+        if (response.status() === 403 && blocked === '1') {
+            return new BlockedOutboundRequestError();
+        }
+        if (response.status() === 502 && failed === '1') {
+            return new OutboundRequestFailedError('Outbound destination unavailable');
+        }
+        return undefined;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new OutboundRequestFailedError(`Failed to inspect outbound response: ${message}`);
+    }
+}
+export function isNavigationCancellationError(errorText) {
+    return /ERR_ABORTED|NS_BINDING_ABORTED|cancel(?:l)?ed.*load|load.*cancel(?:l)?ed/i.test(errorText);
+}
+function validateHostname(hostname) {
+    const normalized = hostname.replace(/^\[|\]$/g, '');
+    const host = isIP(normalized) === 6 ? `[${normalized}]` : normalized;
+    try {
+        validatePublicUrl(`http://${host}`);
+    }
+    catch {
+        throw new BlockedOutboundRequestError('Access to non-public addresses is not allowed');
+    }
+    return normalized;
+}
+function validateOutboundUrl(urlString) {
+    try {
+        return validatePublicUrl(urlString);
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('Access to')) {
+            throw new BlockedOutboundRequestError(error.message);
+        }
+        throw error;
+    }
+}
+function createPinnedLookup(hostname, addresses) {
+    return (requestedHostname, options, callback) => {
+        if (requestedHostname.toLowerCase() !== hostname.toLowerCase()) {
+            callback(Object.assign(new Error('Unexpected hostname during pinned lookup'), { code: 'EACCES' }), '');
+            return;
+        }
+        if (options.all) {
+            callback(null, addresses);
+        }
+        else {
+            const requestedFamily = typeof options.family === 'string' ? Number(options.family.slice(-1)) : options.family;
+            const selected = addresses.find(({ family }) => !requestedFamily || family === requestedFamily);
+            if (!selected) {
+                callback(Object.assign(new Error('No approved address for requested family'), { code: 'ENOTFOUND' }), '');
+                return;
+            }
+            callback(null, selected.address, selected.family);
+        }
+    };
+}
+/** Resolve all addresses once and return a lookup callback pinned to an approved address. */
+export async function resolvePublicTarget(hostname, resolver = lookup, signal) {
+    const normalizedHostname = validateHostname(hostname);
+    const family = isIP(normalizedHostname);
+    const addresses = family
+        ? [{ address: normalizedHostname, family }]
+        : await raceWithAbort(resolver(normalizedHostname, { all: true, order: 'verbatim' }), signal);
+    if (addresses.length === 0 || addresses.some(({ address }) => !isPublicAddress(address))) {
+        throw new BlockedOutboundRequestError('Access to non-public addresses is not allowed');
+    }
+    return createPinnedLookup(normalizedHostname, addresses);
+}
+const limitedClassificationResolver = createLimitedResolver(lookup);
+/** Re-resolve the exact URL whose connection failed to distinguish policy blocks from ordinary network failures. */
+export async function classifyOutboundFailure(input, resolver = lookup) {
+    let url;
+    try {
+        url = validateOutboundUrl(input.toString());
+    }
+    catch (error) {
+        if (error instanceof BlockedOutboundRequestError) {
+            return new BlockedOutboundRequestError();
+        }
+        return new OutboundRequestFailedError('Outbound destination unavailable');
+    }
+    const signal = AbortSignal.timeout(FAILURE_CLASSIFICATION_TIMEOUT_MS);
+    try {
+        const classificationResolver = resolver === lookup ? (hostname, options) => limitedClassificationResolver(hostname, options, signal) : resolver;
+        await resolvePublicTarget(url.hostname, classificationResolver, signal);
+    }
+    catch (error) {
+        if (error instanceof BlockedOutboundRequestError) {
+            return new BlockedOutboundRequestError();
+        }
+    }
+    return new OutboundRequestFailedError('Outbound destination unavailable');
+}
+function requestAbortSignal(request) {
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    request.once('aborted', abort);
+    request.socket.once('close', abort);
+    return {
+        signal: controller.signal,
+        cleanup: () => {
+            request.removeListener('aborted', abort);
+            request.socket.removeListener('close', abort);
+        },
+    };
+}
+/** Start a loopback-only proxy that pins every target connection to its validated DNS result. */
+export async function createOutboundProxy(resolver = lookup) {
+    const limitedResolver = createLimitedResolver(resolver);
+    const server = new ProxyServer({
+        host: '127.0.0.1',
+        port: 0,
+        prepareRequestFunction: async ({ hostname, request }) => {
+            const { signal, cleanup } = requestAbortSignal(request);
+            try {
+                const dnsLookup = await resolvePublicTarget(hostname, (target, options) => limitedResolver(target, options, signal), signal);
+                return {
+                    dnsLookup: dnsLookup,
+                };
+            }
+            catch (error) {
+                if (error instanceof DOMException && error.name === 'AbortError') {
+                    throw error;
+                }
+                if (error instanceof BlockedOutboundRequestError) {
+                    throw new RequestError('Blocked outbound destination', 403, { [BLOCKED_HEADER]: '1' });
+                }
+                throw new RequestError('Outbound destination unavailable', 502, { [FAILED_HEADER]: '1' });
+            }
+            finally {
+                cleanup();
+            }
+        },
+    });
+    // Bound concurrent proxy sockets so hostile pages cannot fan out unbounded resolver work.
+    server.server.maxConnections = MAX_PROXY_CONNECTIONS;
+    try {
+        await server.listen();
+    }
+    catch (error) {
+        await runBoundedCleanup(() => server.close(true));
+        throw error;
+    }
+    server.server.unref();
+    return {
+        url: `http://127.0.0.1:${server.port}`,
+        close: () => server.close(true),
+    };
+}
+let proxyState;
+async function runBoundedCleanup(action) {
+    const cleanup = Promise.resolve()
+        .then(action)
+        .catch(() => undefined);
+    await Promise.race([cleanup, delay(PROXY_SHUTDOWN_TIMEOUT_MS, undefined, { ref: false })]);
+}
+function startProxyState() {
+    const pending = createOutboundProxy().then(async (proxy) => {
+        try {
+            return { proxy, dispatcher: new ProxyAgent(proxy.url) };
+        }
+        catch (error) {
+            await runBoundedCleanup(proxy.close);
+            throw error;
+        }
+    });
+    proxyState = pending;
+    void pending.catch(() => {
+        if (proxyState === pending) {
+            proxyState = undefined;
+        }
+    });
+    return pending;
+}
+async function getProxyState(signal) {
+    signal?.throwIfAborted();
+    return raceWithAbort(proxyState ?? startProxyState(), signal);
+}
+export async function getOutboundProxyUrl(signal) {
+    return (await getProxyState(signal)).proxy.url;
+}
+export async function closeOutboundProxy() {
+    const statePromise = proxyState;
+    if (!statePromise) {
+        return;
+    }
+    proxyState = undefined;
+    await runBoundedCleanup(async () => {
+        const state = await statePromise;
+        await Promise.allSettled([Promise.resolve().then(() => state.dispatcher.destroy()), Promise.resolve().then(state.proxy.close)]);
+    });
+}
+/** Fetch a public URL while validating every redirect through the pinned egress proxy. */
+export async function fetchPublicUrl(urlString, init = {}) {
+    let url = validateOutboundUrl(urlString);
+    let headers = init.headers;
+    const dispatcher = await getProxyState(init.signal).then((state) => state.dispatcher);
+    for (let redirects = 0;; redirects++) {
+        const requestInit = { ...init, headers, redirect: 'manual', dispatcher };
+        let response;
+        try {
+            response = await undiciFetch(url.toString(), requestInit);
+        }
+        catch (error) {
+            if (init.signal?.aborted) {
+                throw error;
+            }
+            throw await classifyOutboundFailure(url);
+        }
+        if (response.headers.get(BLOCKED_HEADER) === '1') {
+            await response.body?.cancel();
+            throw new BlockedOutboundRequestError();
+        }
+        if (response.headers.get(FAILED_HEADER) === '1') {
+            await response.body?.cancel();
+            throw new OutboundRequestFailedError('Outbound destination unavailable');
+        }
+        const location = response.headers.get('location');
+        if (![301, 302, 303, 307, 308].includes(response.status) || !location) {
+            return response;
+        }
+        if (redirects >= MAX_REDIRECTS) {
+            await response.body?.cancel();
+            throw new Error(`Too many redirects (maximum ${MAX_REDIRECTS})`);
+        }
+        await response.body?.cancel();
+        if (init.body != null) {
+            throw new Error('Cannot redirect a request with a body');
+        }
+        const nextUrl = validateOutboundUrl(new URL(location, url).toString());
+        if (nextUrl.origin !== url.origin) {
+            const safeHeaders = new Headers(headers);
+            safeHeaders.delete('authorization');
+            safeHeaders.delete('cookie');
+            safeHeaders.delete('proxy-authorization');
+            headers = safeHeaders;
+        }
+        url = nextUrl;
+    }
+}
+//# sourceMappingURL=outbound-request.js.map

package/build/util/outbound-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-request.js","sourceRoot":"","sources":["../../src/util/outbound-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAE3C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,UAAU,EAAmB,MAAM,QAAQ,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAChD,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,iCAAiC,GAAG,IAAI,CAAC;AAC/C,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,eAAe,GAAG,IAAI,SAAS,EAAE,CAAC;AACxC,MAAM,gBAAgB,GAAG,IAAI,SAAS,EAAE,CAAC;AAEzC,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAE/C,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,WAAW,EAAE,CAAC,CAAC;CACR,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,UAAU,EAAE,EAAE,CAAC;IAChB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,QAAQ,EAAE,EAAE,CAAC;CACN,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,aAAa,CAAI,OAAmB,EAAE,MAA2B;IAC9E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IAExB,IAAI,OAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YACO,CAAC;QACP,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAQ,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAkB;IAWlB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,OAAO,MAAM,GAAG,qBAAqB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YACrC,aAAa,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,OAAQ,CAAC,CAAC;YAC3E,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAClC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClD,SAAS;YACX,CAAC;YAED,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;iBACnE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;iBACjD,OAAO,CAAC,GAAG,EAAE;gBACZ,MAAM,EAAE,CAAC;gBACT,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,CAAC;QACP,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,aAAa,GAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACnF,aAAa,CAAC,OAAO,GAAG,GAAG,EAAE;gBAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC3C,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACvB,MAAM,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAO,GAAG,8BAA8B;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAO,GAAG,yBAAyB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAID,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAA4C;IACzF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACjD,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAChD,OAAO,IAAI,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,OAAO,2EAA2E,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;IACrE,IAAI,CAAC;QACH,iBAAiB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,CAAC;QACL,MAAM,IAAI,2BAA2B,CAAC,+CAA+C,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,SAA0B;IACtE,OAAO,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC9C,IAAI,iBAAiB,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;aACI,CAAC;YACJ,MAAM,eAAe,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/G,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,eAAe,IAAI,MAAM,KAAK,eAAe,CAAC,CAAC;YAChG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1G,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,WAAqB,MAAM,EAAE,MAAoB;IAC3G,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM;QACtB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAEhG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,2BAA2B,CAAC,+CAA+C,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,kBAAkB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,6BAA6B,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAEpE,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmB,EACnB,WAAqB,MAAM;IAE3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;YACjD,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,sBAAsB,GAC1B,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,6BAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnH,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;YACjD,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAwB;IAClD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEpC,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,GAAG,EAAE;YACZ,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAqB,MAAM;IACnE,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;QAC7B,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,CAAC;QACP,sBAAsB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC7H,OAAO;oBACL,SAAS,EAAE,SAA6C;iBACzD,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACjE,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;oBACjD,MAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzF,CAAC;gBACD,MAAM,IAAI,YAAY,CAAC,kCAAkC,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5F,CAAC;oBACO,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,0FAA0F;IAC1F,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,qBAAqB,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAEtB,OAAO;QACL,GAAG,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAOD,IAAI,UAA2C,CAAC;AAEhD,KAAK,UAAU,iBAAiB,CAAC,MAA8B;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;SAC9B,IAAI,CAAC,MAAM,CAAC;SACZ,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IACH,UAAU,GAAG,OAAO,CAAC;IACrB,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QACtB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,aAAa,CAAC,UAAU,IAAI,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAA2B;IACnE,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC;IAChC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,UAAU,GAAG,SAAS,CAAC;IAEvB,MAAM,iBAAiB,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;QACjC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAoB,EAAE;IAC5E,IAAI,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEtF,KAAK,IAAI,SAAS,GAAG,CAAC,GAAI,SAAS,EAAE,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAiB,CAAC;QACxF,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAgD,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;YAChD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAElD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtE,OAAO,QAA+B,CAAC;QACzC,CAAC;QACD,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,+BAA+B,aAAa,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACpC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC1C,OAAO,GAAG,WAAW,CAAC;QACxB,CAAC;QACD,GAAG,GAAG,OAAO,CAAC;IAChB,CAAC;AACH,CAAC"}

package/build/util/outbound-request.test.d.ts

@@ -0,0 +1 @@
+export {};