@rexezuge/shared 0.0.0-stage → 1.0.1

package/dist/PasswordFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordFingerprint.js","sourceRoot":"","sources":["../src/PasswordFingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,OAAO,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/RemoteUrlPolicy.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Egress policy and SSRF host predicates for user-supplied URLs.
+ *
+ * ## Provenance
+ *
+ * Merged from Durable-DAV's `packages/shared/src/net/RemoteUrlPolicy.ts` and the
+ * `SsrfHosts.ts` of Durable-DAV-Router, Edge-Git and Edge-Sonic. The two were the
+ * same problem solved twice: Durable-DAV's `RemoteUrlPolicy` is the full
+ * validate-and-canonicalize policy (HTTPS-only, public-address-only, operator
+ * allow-list, redirect re-validation); the Router/Edge-Git/Edge-Sonic
+ * `SsrfHosts` are the lower-level "is this host private?" predicate the policy in
+ * each repo leaned on. Canonical name is **`RemoteUrlPolicy`** (Durable-DAV's);
+ * the host predicate it converges onto is exported as **`isPrivateOrInternalHost`**
+ * (the common `isSsrfBlockedHost`-style composite from SsrfHosts).
+ *
+ * Scheduled replication / webhook delivery / git import turns a caller into
+ * someone who can name a host this Worker connects to. Without a policy that is
+ * server-side request forgery against Cloudflare's own egress: the metadata
+ * service, the loopback interface, and anything reachable on a private network the
+ * Worker happens to share.
+ *
+ * ## Design decisions
+ *
+ * - **The octet-accurate IP checks win over SsrfHosts' naive string prefixes.**
+ *   SsrfHosts' `isBlockedIpv6Host` matched `startsWith('fc')`/`'fd')`, which also
+ *   matches a *hostname* like `fcb.example.com`; Durable-DAV's `isBlockedIpv6` /
+ *   `isBlockedIpv4` parse the address (and decode IPv4-mapped IPv6) instead. The
+ *   kit keeps the rigorous form for both the URL policy and the exported
+ *   predicate, so there is one correct answer rather than two that drift.
+ * - **`isPrivateOrInternalHost` is strictly safer than either source.** It folds
+ *   in SsrfHosts' raw-hostname handling (bare-integer/octal/hex/`0x`-dotted forms,
+ *   trailing-dot and bracket stripping, localhost names and `.local`/`.internal`/
+ *   `.home.arpa` suffixes) that Durable-DAV's URL-path checks could skip because
+ *   `new URL` had already canonicalized the host. A public IPv6 literal is allowed
+ *   exactly as `normalizeRemoteUrl` allows it; every private/loopback/unique-local/
+ *   link-local/zone/mapped form is refused.
+ *
+ * ## Known gap, stated rather than hidden
+ *
+ * DNS rebinding is not covered. A host that resolves to a public address at
+ * validation time and a private one when the connection is made defeats every
+ * check here. Closing it needs a resolution-aware fetch, which the platform does
+ * not expose to a Worker. The upheld rule for such a deployment is to pin an
+ * origin allow-list.
+ */
+declare const MAX_REMOTE_URL_LENGTH = 2048;
+declare const MAX_REDIRECTS = 3;
+/**
+ * Host suffixes that never name a real internet peer.
+ */
+declare const BLOCKED_HOST_SUFFIXES: readonly [".localhost", ".local", ".internal", ".home.arpa"];
+/**
+ * Hostnames that resolve inward by definition.
+ */
+declare const BLOCKED_HOSTNAMES: Set<string>;
+type UrlPolicyOptions = {
+    /**
+     * Hostnames (exact, or `.suffix` form) permitted regardless of the address
+     * rules. Only ever populated from operator configuration, never from the
+     * request body.
+     */
+    allowedHosts?: readonly string[];
+};
+declare class RemoteUrlRejectedError extends Error {
+    constructor(message: string);
+}
+/**
+ * Strip one enclosing `[`…`]` pair (an IPv6 literal's URL brackets).
+ */
+declare function stripBrackets(host: string): string;
+/**
+ * Strip a bracketed wrapper and every trailing root-label dot.
+ *
+ * A fully-qualified name ends in a root label (`example.com.`) and `new URL` keeps
+ * it; RFC 4918 §9.1.2 clients vary on sending it, so the canonical form is compared.
+ */
+declare function stripTrailingDot(host: string): string;
+/**
+ * True when a URL host resolves to this machine or a private network.
+ *
+ * Intended for user-supplied URLs that the server will subsequently fetch. Such a
+ * URL turns the process into a proxy into its own network: without this, a
+ * user-supplied `baseUrl` can point at cloud metadata, a database host, or a
+ * loopback admin port, and the response is readable by the caller.
+ *
+ * Encoded-numeric hosts are included because `http://2130706433/` and
+ * `http://0177.0.0.1/` are ordinary-looking strings that name `127.0.0.1` after
+ * parsing.
+ *
+ * A *strict, safer* predicate: an empty host, any private/loopback/link-local/
+ * unique-local/mapped form, any localhost/suffix name, any obfuscated numeric
+ * form, and any `:`-bearing host that is not a public IPv6 literal all return
+ * true. It is a *syntactic* check — a public hostname can still resolve to a
+ * private address (DNS rebinding) — so a hard-guarantee deployment additionally
+ * pins an allow-list (see the file header).
+ */
+declare function isPrivateOrInternalHost(hostname: string): boolean;
+/**
+ * Validate and canonicalise a remote URL.
+ *
+ * Throws `RemoteUrlRejectedError` with a message meant for the owner: every
+ * rejection here is a configuration mistake or an attack, and saying which one
+ * is what makes the difference between a fixable setup error and a support
+ * ticket. Query and fragment are dropped — a WebDAV base URL has no use for
+ * either, and keeping them would let `?a=b` smuggle a second meaning past the
+ * path checks the sync engine does.
+ */
+declare function normalizeRemoteUrl(raw: unknown, options?: UrlPolicyOptions): string;
+/**
+ * Re-validate the target of a redirect.
+ *
+ * Called for every hop rather than once at the start. Validating the configured
+ * URL and then following `Location` unchecked is a classic TOCTOU: the first
+ * hop is public, the second is `169.254.169.254`, and the policy has already
+ * returned by then.
+ */
+declare function resolveRedirectUrl(baseUrl: string, location: string, options?: UrlPolicyOptions): string;
+declare function parseAllowedHosts(raw: unknown): string[];
+export { normalizeRemoteUrl, resolveRedirectUrl, parseAllowedHosts, isPrivateOrInternalHost, stripBrackets, stripTrailingDot, RemoteUrlRejectedError, MAX_REMOTE_URL_LENGTH, MAX_REDIRECTS, BLOCKED_HOST_SUFFIXES, BLOCKED_HOSTNAMES, };
+export type { UrlPolicyOptions };
+//# sourceMappingURL=RemoteUrlPolicy.d.ts.map

package/dist/RemoteUrlPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoteUrlPolicy.d.ts","sourceRoot":"","sources":["../src/RemoteUrlPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,QAAA,MAAM,qBAAqB,OAAO,CAAC;AACnC,QAAA,MAAM,aAAa,IAAI,CAAC;AAExB;;GAEG;AACH,QAAA,MAAM,qBAAqB,8DAA+D,CAAC;AAE3F;;GAEG;AACH,QAAA,MAAM,iBAAiB,aAAmF,CAAC;AAE3G,KAAK,gBAAgB,GAAG;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,CAAC;AAEF,cAAM,sBAAuB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AA8GD;;GAEG;AACH,iBAAS,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG3C;AAED;;;;;GAKG;AACH,iBAAS,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9C;AASD;;;;;;;;;;;;;;;;;;GAkBG;AACH,iBAAS,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAa1D;AAED;;;;;;;;;GASG;AACH,iBAAS,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CA4ChF;AAED;;;;;;;GAOG;AACH,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAgBrG;AAED,iBAAS,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAKjD;AAED,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,GAClB,CAAC;AACF,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/RemoteUrlPolicy.js

@@ -0,0 +1,339 @@
+/**
+ * Egress policy and SSRF host predicates for user-supplied URLs.
+ *
+ * ## Provenance
+ *
+ * Merged from Durable-DAV's `packages/shared/src/net/RemoteUrlPolicy.ts` and the
+ * `SsrfHosts.ts` of Durable-DAV-Router, Edge-Git and Edge-Sonic. The two were the
+ * same problem solved twice: Durable-DAV's `RemoteUrlPolicy` is the full
+ * validate-and-canonicalize policy (HTTPS-only, public-address-only, operator
+ * allow-list, redirect re-validation); the Router/Edge-Git/Edge-Sonic
+ * `SsrfHosts` are the lower-level "is this host private?" predicate the policy in
+ * each repo leaned on. Canonical name is **`RemoteUrlPolicy`** (Durable-DAV's);
+ * the host predicate it converges onto is exported as **`isPrivateOrInternalHost`**
+ * (the common `isSsrfBlockedHost`-style composite from SsrfHosts).
+ *
+ * Scheduled replication / webhook delivery / git import turns a caller into
+ * someone who can name a host this Worker connects to. Without a policy that is
+ * server-side request forgery against Cloudflare's own egress: the metadata
+ * service, the loopback interface, and anything reachable on a private network the
+ * Worker happens to share.
+ *
+ * ## Design decisions
+ *
+ * - **The octet-accurate IP checks win over SsrfHosts' naive string prefixes.**
+ *   SsrfHosts' `isBlockedIpv6Host` matched `startsWith('fc')`/`'fd')`, which also
+ *   matches a *hostname* like `fcb.example.com`; Durable-DAV's `isBlockedIpv6` /
+ *   `isBlockedIpv4` parse the address (and decode IPv4-mapped IPv6) instead. The
+ *   kit keeps the rigorous form for both the URL policy and the exported
+ *   predicate, so there is one correct answer rather than two that drift.
+ * - **`isPrivateOrInternalHost` is strictly safer than either source.** It folds
+ *   in SsrfHosts' raw-hostname handling (bare-integer/octal/hex/`0x`-dotted forms,
+ *   trailing-dot and bracket stripping, localhost names and `.local`/`.internal`/
+ *   `.home.arpa` suffixes) that Durable-DAV's URL-path checks could skip because
+ *   `new URL` had already canonicalized the host. A public IPv6 literal is allowed
+ *   exactly as `normalizeRemoteUrl` allows it; every private/loopback/unique-local/
+ *   link-local/zone/mapped form is refused.
+ *
+ * ## Known gap, stated rather than hidden
+ *
+ * DNS rebinding is not covered. A host that resolves to a public address at
+ * validation time and a private one when the connection is made defeats every
+ * check here. Closing it needs a resolution-aware fetch, which the platform does
+ * not expose to a Worker. The upheld rule for such a deployment is to pin an
+ * origin allow-list.
+ */
+const MAX_REMOTE_URL_LENGTH = 2048;
+const MAX_REDIRECTS = 3;
+/**
+ * Host suffixes that never name a real internet peer.
+ */
+const BLOCKED_HOST_SUFFIXES = ['.localhost', '.local', '.internal', '.home.arpa'];
+/**
+ * Hostnames that resolve inward by definition.
+ */
+const BLOCKED_HOSTNAMES = new Set(['localhost', 'localhost.localdomain', 'ip6-localhost', 'ip6-loopback']);
+class RemoteUrlRejectedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RemoteUrlRejectedError';
+    }
+}
+function isIpv4Literal(host) {
+    return /^\d{1,3}(?:\.\d{1,3}){3}$/.test(host);
+}
+function ipv4Octets(host) {
+    const parts = host.split('.');
+    if (parts.length !== 4)
+        return null;
+    const octets = [];
+    for (const part of parts) {
+        if (!/^\d{1,3}$/.test(part))
+            return null;
+        const value = Number(part);
+        if (value > 255)
+            return null;
+        octets.push(value);
+    }
+    return octets;
+}
+/**
+ * Is this IPv4 literal in a range a Worker must never reach?
+ *
+ * `0.0.0.0/8` and `169.254.0.0/16` matter as much as RFC 1918: the first is
+ * "this host" on Linux, the second is the cloud metadata endpoint.
+ */
+function isBlockedIpv4(octets) {
+    const [a = 0, b = 0] = octets;
+    if ([0, 10, 127].includes(a))
+        return true;
+    if (a === 169 && b === 254)
+        return true;
+    if (a === 172 && b >= 16 && b <= 31)
+        return true;
+    if (a === 192 && b === 168)
+        return true;
+    if (a === 100 && b >= 64 && b <= 127)
+        return true;
+    return false;
+}
+/**
+ * Decode an IPv4-mapped IPv6 address back into its four octets, or null.
+ *
+ * Both spellings have to be handled. `new URL` canonicalizes
+ * `https://[::ffff:10.0.0.1]/` to the hex form `[::ffff:a00:1]`, so a check
+ * written only against the dotted text never fires — and that address connects to
+ * a private network.
+ */
+function mappedIpv4Octets(literal) {
+    const dotted = /^::ffff:\d{1,3}(?:\.\d{1,3}){3}$/.exec(literal);
+    const dottedText = literal.slice('::ffff:'.length);
+    if (dotted !== null)
+        return ipv4Octets(dottedText);
+    const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(literal);
+    if (!hex?.[1] || !hex[2])
+        return null;
+    const high = Number.parseInt(hex[1], 16);
+    const low = Number.parseInt(hex[2], 16);
+    return !Number.isFinite(high) || !Number.isFinite(low) ? null : [(high >> 8) & 0xff, high & 0xff, (low >> 8) & 0xff, low & 0xff];
+}
+/**
+ * Is this IPv6 literal private, loopback, or an IPv4 address in disguise? `literal`
+ * is the **unbracketed** inner form (e.g. `::1`, `fe80::1`).
+ *
+ * The last case is the one that matters: `::ffff:127.0.0.1` is a perfectly valid
+ * URL and connects to loopback, so the embedded IPv4 must be re-checked rather
+ * than the literal waved through because it "is" IPv6.
+ */
+function isBlockedIpv6(literal) {
+    const lower = literal.toLowerCase();
+    if (lower === '::' || lower === '::1')
+        return true;
+    // Zone ids (`fe80::1%eth0`) name a local interface directly.
+    if (lower.includes('%'))
+        return true;
+    const mapped = mappedIpv4Octets(lower);
+    if (mapped !== null)
+        return isBlockedIpv4(mapped);
+    const head = lower.split(':', 1)[0] ?? '';
+    if (head === '')
+        return false;
+    const group = Number.parseInt(head.padStart(4, '0').slice(0, 4), 16);
+    if (!Number.isFinite(group))
+        return false;
+    // fc00::/7 unique-local, fe80::/10 link-local.
+    return (group & 0xfe_00) === 0xfc_00 || (group & 0xff_c0) === 0xfe_80;
+}
+/**
+ * Does this host name a numeric address in a non-canonical spelling? The strict
+ * superset of Durable-DAV's `looksLikeObfuscatedNumericHost` and SsrfHosts'
+ * `isEncodedNumericHost`, for the raw-hostname predicate.
+ *
+ * `2130706433`, `0177.0.0.1`, `0x7f000001` and `0x7f.1` all name `127.0.0.1`.
+ * Through `new URL` these arrive already canonicalized (so `isBlockedIpv4` catches
+ * them); a hostname handed to `isPrivateOrInternalHost` need not have gone through
+ * `URL`, so a bare integer/octal/hex form is caught here directly. A legitimate
+ * internet hostname is never all-digits, so over-blocking is not a risk.
+ */
+function looksLikeObfuscatedNumericHost(host) {
+    if (isIpv4Literal(host) || host.startsWith('[') || !/^[0-9a-fx.]+$/i.test(host))
+        return false;
+    return (/^0x[0-9a-f]+$/i.test(host) ||
+        /^\d+$/.test(host) ||
+        /^0[0-7]+(?:\.0[0-7]+)*$/.test(host) ||
+        // An all-digits-and-dots host that is not a canonical dotted-quad — e.g.
+        // `0177.0.0.1` or `0200.0250.0001.0001` — is an obfuscated numeric address.
+        /^[\d.]+$/.test(host) ||
+        host.split('.').some((group) => /^0x[0-9a-f]+$/i.test(group)));
+}
+function hostIsAllowed(host, allowedHosts) {
+    const lower = host.toLowerCase();
+    return allowedHosts.some((entry) => {
+        const candidate = entry.trim().toLowerCase();
+        if (candidate === '')
+            return false;
+        return candidate.startsWith('.') ? lower.endsWith(candidate) : lower === candidate;
+    });
+}
+/**
+ * Strip one enclosing `[`…`]` pair (an IPv6 literal's URL brackets).
+ */
+function stripBrackets(host) {
+    const h = host.trim();
+    return h.startsWith('[') && h.endsWith(']') ? h.slice(1, -1) : h;
+}
+/**
+ * Strip a bracketed wrapper and every trailing root-label dot.
+ *
+ * A fully-qualified name ends in a root label (`example.com.`) and `new URL` keeps
+ * it; RFC 4918 §9.1.2 clients vary on sending it, so the canonical form is compared.
+ */
+function stripTrailingDot(host) {
+    const unbracketed = stripBrackets(host);
+    let end = unbracketed.length;
+    while (end > 0 && unbracketed.charAt(end - 1) === '.')
+        end -= 1;
+    return unbracketed.slice(0, end);
+}
+/**
+ * Host names that mean "this machine or a local suffix", not an internet peer.
+ */
+function isLocalhostName(host) {
+    return BLOCKED_HOSTNAMES.has(host) || host.endsWith('.localhost');
+}
+/**
+ * True when a URL host resolves to this machine or a private network.
+ *
+ * Intended for user-supplied URLs that the server will subsequently fetch. Such a
+ * URL turns the process into a proxy into its own network: without this, a
+ * user-supplied `baseUrl` can point at cloud metadata, a database host, or a
+ * loopback admin port, and the response is readable by the caller.
+ *
+ * Encoded-numeric hosts are included because `http://2130706433/` and
+ * `http://0177.0.0.1/` are ordinary-looking strings that name `127.0.0.1` after
+ * parsing.
+ *
+ * A *strict, safer* predicate: an empty host, any private/loopback/link-local/
+ * unique-local/mapped form, any localhost/suffix name, any obfuscated numeric
+ * form, and any `:`-bearing host that is not a public IPv6 literal all return
+ * true. It is a *syntactic* check — a public hostname can still resolve to a
+ * private address (DNS rebinding) — so a hard-guarantee deployment additionally
+ * pins an allow-list (see the file header).
+ */
+function isPrivateOrInternalHost(hostname) {
+    const host = stripTrailingDot(hostname).toLowerCase();
+    if (host.length === 0)
+        return true;
+    if (isLocalhostName(host))
+        return true;
+    if (BLOCKED_HOST_SUFFIXES.some((suffix) => host.endsWith(suffix)))
+        return true;
+    if (isIpv4Literal(host)) {
+        const octets = ipv4Octets(host);
+        return octets === null || isBlockedIpv4(octets);
+    }
+    if (host.includes(':'))
+        return isBlockedIpv6(host);
+    if (looksLikeObfuscatedNumericHost(host))
+        return true;
+    return false;
+}
+/**
+ * Validate and canonicalise a remote URL.
+ *
+ * Throws `RemoteUrlRejectedError` with a message meant for the owner: every
+ * rejection here is a configuration mistake or an attack, and saying which one
+ * is what makes the difference between a fixable setup error and a support
+ * ticket. Query and fragment are dropped — a WebDAV base URL has no use for
+ * either, and keeping them would let `?a=b` smuggle a second meaning past the
+ * path checks the sync engine does.
+ */
+function normalizeRemoteUrl(raw, options = {}) {
+    if (typeof raw !== 'string')
+        throw new RemoteUrlRejectedError('remoteUrl must be a string');
+    const trimmed = raw.trim();
+    if (trimmed === '')
+        throw new RemoteUrlRejectedError('remoteUrl is required');
+    if (trimmed.length > MAX_REMOTE_URL_LENGTH)
+        throw new RemoteUrlRejectedError(`remoteUrl must be at most ${MAX_REMOTE_URL_LENGTH} characters`);
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        throw new RemoteUrlRejectedError('remoteUrl is not a valid absolute URL');
+    }
+    if (url.protocol !== 'https:')
+        throw new RemoteUrlRejectedError('remoteUrl must use https');
+    if (url.username !== '' || url.password !== '')
+        throw new RemoteUrlRejectedError('remoteUrl must not embed credentials; use the auth fields instead');
+    if (url.port !== '' && url.port !== '443')
+        throw new RemoteUrlRejectedError('remoteUrl must use the default https port');
+    const host = url.hostname.toLowerCase();
+    if (host === '')
+        throw new RemoteUrlRejectedError('remoteUrl must include a host');
+    if (hostIsAllowed(host, options.allowedHosts ?? [])) {
+        url.search = '';
+        url.hash = '';
+        return url.href;
+    }
+    if (BLOCKED_HOSTNAMES.has(host))
+        throw new RemoteUrlRejectedError(`remoteUrl host ${host} is not routable`);
+    for (const suffix of BLOCKED_HOST_SUFFIXES) {
+        if (host.endsWith(suffix))
+            throw new RemoteUrlRejectedError(`remoteUrl host ${host} is not a public hostname`);
+    }
+    if (looksLikeObfuscatedNumericHost(host))
+        throw new RemoteUrlRejectedError(`remoteUrl host ${host} is a numeric address in a non-canonical form`);
+    if (isIpv4Literal(host)) {
+        const octets = ipv4Octets(host);
+        if (octets === null || isBlockedIpv4(octets))
+            throw new RemoteUrlRejectedError(`remoteUrl host ${host} is not a public address`);
+    }
+    else if (host.startsWith('[')) {
+        if (isBlockedIpv6(host.slice(1, -1)))
+            throw new RemoteUrlRejectedError(`remoteUrl host ${host} is not a public address`);
+    }
+    else if (!host.includes('.')) {
+        // A single-label name can only be resolved through a local search domain.
+        throw new RemoteUrlRejectedError(`remoteUrl host ${host} is not a fully qualified hostname`);
+    }
+    url.search = '';
+    url.hash = '';
+    return url.href;
+}
+/**
+ * Re-validate the target of a redirect.
+ *
+ * Called for every hop rather than once at the start. Validating the configured
+ * URL and then following `Location` unchecked is a classic TOCTOU: the first
+ * hop is public, the second is `169.254.169.254`, and the policy has already
+ * returned by then.
+ */
+function resolveRedirectUrl(baseUrl, location, options = {}) {
+    let next;
+    try {
+        next = new URL(location, baseUrl);
+    }
+    catch {
+        throw new RemoteUrlRejectedError('redirect target is not a valid URL');
+    }
+    if (next.protocol !== 'https:')
+        throw new RemoteUrlRejectedError('redirect target must use https');
+    // Same host: no need to re-run the whole policy, and a redirect back to the
+    // origin's own host is the overwhelmingly common case.
+    if (next.host.toLowerCase() === new URL(baseUrl).host.toLowerCase()) {
+        next.search = '';
+        next.hash = '';
+        return next.href;
+    }
+    return normalizeRemoteUrl(next.href, options);
+}
+function parseAllowedHosts(raw) {
+    return typeof raw !== 'string' || raw.trim() === '' ? [] : raw
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry !== '');
+}
+export { normalizeRemoteUrl, resolveRedirectUrl, parseAllowedHosts, isPrivateOrInternalHost, stripBrackets, stripTrailingDot, RemoteUrlRejectedError, MAX_REMOTE_URL_LENGTH, MAX_REDIRECTS, BLOCKED_HOST_SUFFIXES, BLOCKED_HOSTNAMES, };
+//# sourceMappingURL=RemoteUrlPolicy.js.map

package/dist/RemoteUrlPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoteUrlPolicy.js","sourceRoot":"","sources":["../src/RemoteUrlPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAE3F;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,uBAAuB,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;AAW3G,MAAM,sBAAuB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,MAAgB;IACrC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;AACnI,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACnD,6DAA6D;IAC7D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,+CAA+C;IAC/C,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,OAAO,CAAC;AACxE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,8BAA8B,CAAC,IAAY;IAClD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,OAAO,CACL,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,yEAAyE;QACzE,4EAA4E;QAC5E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,YAA+B;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,SAAS,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC;IAC7B,OAAO,GAAG,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/E,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,8BAA8B,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAY,EAAE,UAA4B,EAAE;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,4BAA4B,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,sBAAsB,CAAC,6BAA6B,qBAAqB,aAAa,CAAC,CAAC;IAE9I,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,uCAAuC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,mEAAmE,CAAC,CAAC;IACtJ,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,IAAI,sBAAsB,CAAC,2CAA2C,CAAC,CAAC;IAEzH,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC;IACnF,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,CAAC;IAC5G,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,2BAA2B,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,8BAA8B,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,+CAA+C,CAAC,CAAC;IAElJ,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,0BAA0B,CAAC,CAAC;IACnI,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,0BAA0B,CAAC,CAAC;IAC3H,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,IAAI,oCAAoC,CAAC,CAAC;IAC/F,CAAC;IAED,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,QAAgB,EAAE,UAA4B,EAAE;IAC3F,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;IACnG,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG;SAC3D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,GAClB,CAAC"}

package/dist/Result.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Minimal `Result` type for explicit error handling without exceptions.
+ *
+ * ## Provenance
+ *
+ * Converged from Edge-Git's `Result.ts` and ChordDHT-Tracker's `Result.ts`. The
+ * two are byte-identical apart from a doc comment (Edge-Git added the header);
+ * ChordDHT is the origin, Edge-Git the copy. Mail-Otter and the DAV repos are
+ * the kind of repo this was ported *to*, so Edge-Git's documented form is kept
+ * verbatim.
+ *
+ * When two variants are identical there is nothing stricter to choose; the
+ * supported shape is `{ ok: true, value }` / `{ ok: false, error }` frozen at the
+ * type level rather than thrown.
+ */
+type Ok<T> = {
+    readonly ok: true;
+    readonly value: T;
+};
+type Err<E> = {
+    readonly ok: false;
+    readonly error: E;
+};
+type Result<T, E = Error> = Ok<T> | Err<E>;
+declare function ok<T>(value: T): Result<T, never>;
+declare function err<E>(error: E): Result<never, E>;
+declare function isOk<T, E>(result: Result<T, E>): result is Ok<T>;
+declare function mapResult<T, U, E>(result: Result<T, E>, fn: (value: T) => U): Result<U, E>;
+declare function getOrThrow<T, E = Error>(result: Result<T, E>): T;
+export { err, getOrThrow, isOk, mapResult, ok };
+export type { Err, Ok, Result };
+//# sourceMappingURL=Result.d.ts.map

package/dist/Result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Result.d.ts","sourceRoot":"","sources":["../src/Result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,KAAK,EAAE,CAAC,CAAC,IAAI;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AACtD,KAAK,GAAG,CAAC,CAAC,IAAI;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AACxD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AAE3C,iBAAS,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAEzC;AAED,iBAAS,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAE1C;AAED,iBAAS,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAEzD;AAED,iBAAS,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAEnF;AAED,iBAAS,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAGzD;AAED,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAChD,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC"}

package/dist/Result.js

@@ -0,0 +1,19 @@
+function ok(value) {
+    return { ok: true, value };
+}
+function err(error) {
+    return { ok: false, error };
+}
+function isOk(result) {
+    return result.ok;
+}
+function mapResult(result, fn) {
+    return result.ok ? ok(fn(result.value)) : result;
+}
+function getOrThrow(result) {
+    if (!result.ok)
+        throw result.error;
+    return result.value;
+}
+export { err, getOrThrow, isOk, mapResult, ok };
+//# sourceMappingURL=Result.js.map

package/dist/Result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Result.js","sourceRoot":"","sources":["../src/Result.ts"],"names":[],"mappings":"AAmBA,SAAS,EAAE,CAAI,KAAQ;IACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,GAAG,CAAI,KAAQ;IACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,IAAI,CAAO,MAAoB;IACtC,OAAO,MAAM,CAAC,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAU,MAAoB,EAAE,EAAmB;IACnE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAe,MAAoB;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC"}