@uncefact/untp-utils 0.1.0 → 0.3.0

package/build/resolvers/resolve-document.js

@@ -0,0 +1,319 @@
+import { parseEntityTag, parseImfDate, parseMediaType, DEFAULT_USER_AGENT, USER_AGENT_ENV_VAR, } from '../http-headers/index.js';
+import { MultibaseDigest } from '../multibase-digest/index.js';
+import { validatePublicUrl } from '../node/index.js';
+import { ResolverHttpError, ResolverNetworkError, ResolverRedirectMissingLocationError, ResolverTimedOutError, ResolverTooLargeError, ResolverTooManyRedirectsError, } from './errors.js';
+/**
+ * Defaults applied by {@link resolveDocument} (and, via composition,
+ * by {@link import('./resolve-document-if-changed.js').resolveDocumentIfChanged})
+ * when the caller does not supply a value.
+ */
+export const RESOLVER_DEFAULTS = {
+    /** Body-size cap in bytes; exceeding throws {@link ResolverTooLargeError}. */
+    maxResponseBytes: 1_048_576,
+    /** Total wait for asynchronous DNS and fetch work in milliseconds. Synchronous work cannot be interrupted, and DNS itself is not cancelled. */
+    totalTimeoutMs: 10_000,
+    /** Maximum additional hops after the initial request; exceeding throws {@link ResolverTooManyRedirectsError}. */
+    maxRedirects: 3,
+    /** Multibase digest algorithm used to hash response bodies. */
+    digestAlgorithm: 'sha2-256',
+    /** Multibase encoding used for response body digests. */
+    digestEncoding: 'base58btc',
+};
+/**
+ * Merges the resolved `User-Agent` into the caller's headers. A caller-supplied
+ * `user-agent` (any casing) wins; otherwise the `RI_HTTP_USER_AGENT` env
+ * override (blank treated as unset), then the default. Both branches copy the
+ * caller's headers before request conversion, so a throwing getter remains a
+ * caller defect rather than becoming a transport failure. The override is not
+ * validated here: deployments validate it at boot via
+ * {@link isValidHttpUserAgent} (the RI does, in instrumentation.node.ts),
+ * and a value that slips through with control characters makes the fetch
+ * itself fail loudly rather than being silently replaced.
+ */
+function withUserAgent(headers) {
+    const hasExplicit = Object.keys(headers ?? {}).some((key) => key.toLowerCase() === 'user-agent');
+    if (hasExplicit)
+        return { ...(headers ?? {}) };
+    const fromEnv = process.env[USER_AGENT_ENV_VAR];
+    const userAgent = fromEnv !== undefined && fromEnv.trim() !== '' ? fromEnv : DEFAULT_USER_AGENT;
+    return { ...headers, 'User-Agent': userAgent };
+}
+/**
+ * Fetches `url` with the standard SSRF / size / timeout / redirect guards
+ * applied, returning the response body + metadata as a {@link LoadResult}.
+ *
+ * Each redirect hop is re-validated through
+ * {@link import('../node/index.js').validatePublicUrl}, and the connection to
+ * each hop is pinned to the set of addresses its validation resolved, so an
+ * upstream cannot rebind its hostname between check and connect. Node's
+ * address selection tries those addresses within the request budget, so a
+ * `localhost` that resolves to both `::1` and `127.0.0.1` reaches whichever
+ * listens. Private and reserved destinations remain rejected unless
+ * `allowPrivateAddresses` is exactly true.
+ *
+ * Only two awaits convert a foreign rejection into a resolver error: the undici
+ * fetch and the body read. Every other throw inside this function, whether a
+ * guard error or a defect in this module, propagates exactly as thrown. That
+ * is the contract #995 settled, and it is why `verify-did-web.ts:104` now
+ * surfaces a resolver defect to its caller instead of reporting it as a
+ * retryable network fault.
+ *
+ * @throws {UrlValidationError} for URL / scheme / hostname / DNS / private-address rejections from `validatePublicUrl`, propagated unwrapped.
+ * @throws {ResolverNetworkError} when the fetch rejects before producing a response, or when a mid-body read rejects, and the rejection was not classified as this request's timeout; a non-abort-shaped rejection arriving after the deadline is also reported here.
+ * @throws {ResolverHttpError} on a non-2xx response status (with `.status`).
+ * @throws {ResolverTooLargeError} when the body exceeds the size cap (with `.limit`).
+ * @throws {ResolverTooManyRedirectsError} when the redirect chain exceeds the hop cap (with `.limit`, and `.lastHopUrl` for the hop that answered the exhausting redirect).
+ * @throws {ResolverTimedOutError} before a hop or while the guard was waiting on DNS, once the deadline has passed; in flight or mid-body, when this request's abort is what the failing call observed (with `.timeoutMs`).
+ * @throws {ResolverRedirectMissingLocationError} for a 3xx with no / unparseable Location header.
+ *
+ * @see https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
+ */
+export async function resolveDocument(url, options) {
+    // Dynamic import: undici's module initialisation needs web globals
+    // (TextDecoder) that jsdom test environments lack, so it loads at fetch
+    // time to keep this module, and the resolvers barrel, importable there.
+    // Same pattern as validate-jsonld.ts's lazy jsonld import.
+    const { Agent, fetch: undiciFetch } = await import('undici');
+    const maxBytes = options?.maxResponseBytes ?? RESOLVER_DEFAULTS.maxResponseBytes;
+    const totalTimeoutMs = options?.totalTimeoutMs ?? RESOLVER_DEFAULTS.totalTimeoutMs;
+    const maxRedirects = options?.maxRedirects ?? RESOLVER_DEFAULTS.maxRedirects;
+    // The deadline protocol. `currentUrl` is hoisted above the abort promise so
+    // the promise, created once per request rather than once per hop, rejects
+    // with whichever hop was in flight when the timer fired: a timeout during
+    // DNS then names the host it was waiting on. Racing the guard against that
+    // promise bounds the wait without cancelling the lookup, because
+    // `dns.lookup` takes no signal. The bare promises are raced so that a
+    // rejection from whichever settles first still reaches the caller; the two
+    // `void ... .catch(...)` side channels exist only to keep the loser's
+    // rejection from surfacing as an unhandled rejection, and must not be moved
+    // into the race, where they would resolve the race with `undefined` and
+    // swallow a DNS failure. `signal.aborted` is checked before the guard is
+    // invoked, so a hop whose predecessor's cleanup consumed the budget makes no
+    // further guard call, and again after the race, so nothing is dispatched
+    // once the budget is spent. No `await` may be inserted between that second
+    // check and `new Agent`: any suspension there reopens the window in which
+    // the timer fires and an Agent is still constructed. Tests enforce all of
+    // this (no second-hop guard call, no Agent, fetch never called), not types.
+    let currentUrl = url;
+    const controller = new AbortController();
+    let removeAbortListener = () => undefined;
+    const abortPromise = new Promise((_resolve, reject) => {
+        const onAbort = () => reject(new ResolverTimedOutError(currentUrl, totalTimeoutMs));
+        controller.signal.addEventListener('abort', onAbort, { once: true });
+        removeAbortListener = () => controller.signal.removeEventListener('abort', onAbort);
+    });
+    void abortPromise.catch(() => undefined);
+    const timeoutHandle = setTimeout(() => controller.abort(), totalTimeoutMs);
+    try {
+        for (let hop = 0; hop <= maxRedirects; hop += 1) {
+            if (controller.signal.aborted)
+                throw new ResolverTimedOutError(currentUrl, totalTimeoutMs);
+            const guard = validatePublicUrl(currentUrl, {
+                allowedSchemes: options?.allowedSchemes,
+                allowPrivateAddresses: options?.allowPrivateAddresses,
+                ...(options?.lookup ? { lookup: options.lookup } : {}),
+            });
+            void guard.catch(() => undefined);
+            const { addresses: pinnedAddresses } = await Promise.race([guard, abortPromise]);
+            if (controller.signal.aborted)
+                throw new ResolverTimedOutError(currentUrl, totalTimeoutMs);
+            const dispatcher = new Agent({
+                connect: {
+                    // undici spreads this `lookup` option into `net.connect` and
+                    // `tls.connect` and performs no lookup of its own. Under Node's
+                    // default family autoselection it calls the callback with
+                    // `all: true` and walks the returned list, so return every address
+                    // `validatePublicUrl` validated (`addresses` is already in resolver
+                    // order) and each address Node may try is one the SSRF check passed.
+                    // Handing it only the first would refuse a name whose other
+                    // addresses hold the listener: `localhost` resolves to both `::1`
+                    // and `127.0.0.1`, and the walk is what reaches the second when the
+                    // first is refused.
+                    lookup: (_hostname, _opts, cb) => cb(null, pinnedAddresses.map(({ address, family }) => ({ address, family }))),
+                },
+            });
+            // The entire request lifecycle (fetch + status-check + body read +
+            // digest) sits inside one try/finally with the dispatcher close:
+            // `undici.Agent.close()` waits for active requests to drain, and a
+            // request is "drained" only once its body has been consumed. Closing
+            // before `readWithLimit` deadlocks the close on the unconsumed body.
+            try {
+                const headers = withUserAgent(options?.headers);
+                const requestOptions = {
+                    method: 'GET',
+                    redirect: 'manual',
+                    signal: controller.signal,
+                    headers,
+                    dispatcher,
+                };
+                let response;
+                try {
+                    response = await undiciFetch(currentUrl, requestOptions);
+                }
+                catch (cause) {
+                    // This catch also sees undici's Request-construction rejections, so a
+                    // redirect hop carrying userinfo or a malformed header value is
+                    // wrapped as a network error rather than propagating as a defect.
+                    // That is the recorded exception to #995's wording.
+                    if (isOurTimeout(cause, controller.signal)) {
+                        throw new ResolverTimedOutError(currentUrl, totalTimeoutMs, cause);
+                    }
+                    throw new ResolverNetworkError(currentUrl, cause);
+                }
+                // 304 Not Modified: body is intentionally empty; the caller maps it
+                // to `unchanged` in `resolveDocumentIfChanged`.
+                if (response.status === 304) {
+                    const headerView = extractHeaders(response.headers);
+                    const empty = new Uint8Array(0);
+                    const bodyDigest = await computeDigest(empty);
+                    return {
+                        finalUrl: currentUrl,
+                        status: 304,
+                        body: empty,
+                        bodyDigest,
+                        etag: headerView.etag,
+                        lastModified: headerView.lastModified,
+                        contentType: headerView.contentType,
+                    };
+                }
+                if (response.status >= 300 && response.status < 400) {
+                    const location = response.headers.get('location');
+                    if (!location) {
+                        throw new ResolverRedirectMissingLocationError(currentUrl, response.status);
+                    }
+                    let nextUrl;
+                    try {
+                        nextUrl = new URL(location, currentUrl).toString();
+                    }
+                    catch (cause) {
+                        throw new ResolverRedirectMissingLocationError(currentUrl, location, cause);
+                    }
+                    // Cancel the 3xx body so `dispatcher.close()` in `finally` can
+                    // proceed without waiting for body drain.
+                    if (response.body)
+                        await response.body.cancel().catch(() => undefined);
+                    if (hop === maxRedirects) {
+                        throw new ResolverTooManyRedirectsError(url, maxRedirects, currentUrl);
+                    }
+                    currentUrl = nextUrl;
+                    continue;
+                }
+                if (!response.ok) {
+                    if (response.body)
+                        await response.body.cancel().catch(() => undefined);
+                    throw new ResolverHttpError(currentUrl, response.status);
+                }
+                const body = await readWithLimit(response, maxBytes, currentUrl, totalTimeoutMs, controller.signal);
+                const bodyDigest = await computeDigest(body);
+                const headerView = extractHeaders(response.headers);
+                return {
+                    finalUrl: currentUrl,
+                    status: response.status,
+                    body,
+                    bodyDigest,
+                    etag: headerView.etag,
+                    lastModified: headerView.lastModified,
+                    contentType: headerView.contentType,
+                };
+            }
+            finally {
+                await dispatcher.close().catch(() => undefined);
+            }
+        }
+        throw new ResolverTooManyRedirectsError(url, maxRedirects);
+    }
+    finally {
+        clearTimeout(timeoutHandle);
+        removeAbortListener();
+    }
+}
+/**
+ * The classification policy at the two transport catches: a rejection counts as
+ * this request's timeout only when this request's signal has fired and the
+ * error is named `AbortError` or `TimeoutError`. Everything else caught there
+ * becomes a {@link ResolverNetworkError}.
+ *
+ * The signal gate stops an abort-shaped rejection counting as this request's
+ * timeout while its signal is quiet, which would tell the operator "timed out
+ * after 10000ms" when 300 ms elapsed. The name gate keeps a non-abort-shaped
+ * rejection arriving after the deadline classified as a network fault. Neither
+ * gate proves the rejection was caused by this signal; this is the chosen
+ * policy, not a proof of cause.
+ */
+function isOurTimeout(error, signal) {
+    return signal.aborted && isAbortLikeError(error);
+}
+function isAbortLikeError(error) {
+    if (typeof error !== 'object' || error === null)
+        return false;
+    const name = error.name;
+    return name === 'AbortError' || name === 'TimeoutError';
+}
+function extractHeaders(headers) {
+    const view = {};
+    const etag = parseEntityTag(headers.get('etag') ?? '');
+    if (etag !== undefined)
+        view.etag = etag;
+    const lastModified = parseImfDate(headers.get('last-modified') ?? '');
+    if (lastModified !== undefined)
+        view.lastModified = lastModified;
+    const contentType = parseMediaType(headers.get('content-type') ?? '');
+    if (contentType !== undefined)
+        view.contentType = contentType;
+    return view;
+}
+async function computeDigest(body) {
+    return MultibaseDigest.fromData(body, {
+        algorithm: RESOLVER_DEFAULTS.digestAlgorithm,
+        base: RESOLVER_DEFAULTS.digestEncoding,
+    });
+}
+async function readWithLimit(response, limit, url, totalTimeoutMs, signal) {
+    if (!response.body)
+        return new Uint8Array(0);
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            let readResult;
+            try {
+                readResult = await reader.read();
+            }
+            catch (error) {
+                if (isOurTimeout(error, signal))
+                    throw new ResolverTimedOutError(url, totalTimeoutMs, error);
+                throw new ResolverNetworkError(url, error);
+            }
+            const { value, done } = readResult;
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > limit) {
+                throw new ResolverTooLargeError(url, limit);
+            }
+            chunks.push(value);
+        }
+    }
+    catch (error) {
+        // Cleanup only: release the reader so the upstream socket can be
+        // recycled, then rethrow the original value unchanged. Classification
+        // happens at the read await above, and the over-cap error is raised
+        // without cancelling inline precisely so cancellation stays here. A
+        // future edit that classified or replaced the error here would relabel
+        // both a defect and an already-classified resolver error.
+        await reader.cancel().catch(() => undefined);
+        throw error;
+    }
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        merged.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return merged;
+}
+//# sourceMappingURL=resolve-document.js.map

package/build/resolvers/resolve-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-document.js","sourceRoot":"","sources":["../../src/resolvers/resolve-document.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAA8C,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAwB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,8EAA8E;IAC9E,gBAAgB,EAAE,SAAS;IAC3B,+IAA+I;IAC/I,cAAc,EAAE,MAAM;IACtB,iHAAiH;IACjH,YAAY,EAAE,CAAC;IACf,+DAA+D;IAC/D,eAAe,EAAE,UAAU;IAC3B,yDAAyD;IACzD,cAAc,EAAE,WAAW;CAO5B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,OAA2C;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC;IACjG,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAChG,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AA4DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAgC;IACjF,mEAAmE;IACnE,wEAAwE;IACxE,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,EAAE,gBAAgB,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;IACjF,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,iBAAiB,CAAC,cAAc,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,iBAAiB,CAAC,YAAY,CAAC;IAE7E,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,iEAAiE;IACjE,sEAAsE;IACtE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,mBAAmB,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,mBAAmB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE3F,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,EAAE;gBAC1C,cAAc,EAAE,OAAO,EAAE,cAAc;gBACvC,qBAAqB,EAAE,OAAO,EAAE,qBAAqB;gBACrD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC;YACH,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAEjF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE3F,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;gBAC3B,OAAO,EAAE;oBACP,6DAA6D;oBAC7D,gEAAgE;oBAChE,0DAA0D;oBAC1D,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,4DAA4D;oBAC5D,kEAAkE;oBAClE,oEAAoE;oBACpE,oBAAoB;oBACpB,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAC/B,EAAE,CACA,IAAI,EACJ,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CACpE;iBACJ;aACF,CAAC,CAAC;YAEH,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,cAAc,GAAG;oBACrB,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO;oBACP,UAAU;iBACF,CAAC;gBAEX,IAAI,QAAiD,CAAC;gBACtD,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,sEAAsE;oBACtE,gEAAgE;oBAChE,kEAAkE;oBAClE,oDAAoD;oBACpD,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;oBACrE,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACpD,CAAC;gBAED,oEAAoE;gBACpE,gDAAgD;gBAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;oBAC9C,OAAO;wBACL,QAAQ,EAAE,UAAU;wBACpB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,KAAK;wBACX,UAAU;wBACV,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;qBACpC,CAAC;gBACJ,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC9E,CAAC;oBACD,IAAI,OAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACrD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,CAAC;oBACD,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;wBACzB,MAAM,IAAI,6BAA6B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;oBACzE,CAAC;oBACD,UAAU,GAAG,OAAO,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBACpG,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpD,OAAO;oBACL,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI;oBACJ,UAAU;oBACV,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6BAA6B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,mBAAmB,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,KAAc,EAAE,MAAmB;IACvD,OAAO,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,CAAC;AAC1D,CAAC;AAQD,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAgB;IAC3C,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpC,SAAS,EAAE,iBAAiB,CAAC,eAAe;QAC5C,IAAI,EAAE,iBAAiB,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAqD,EACrD,KAAa,EACb,GAAW,EACX,cAAsB,EACtB,MAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,UAAmD,CAAC;YACxD,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;gBAC7F,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;YACnC,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/resolvers/resolve-document.test.d.ts

@@ -0,0 +1 @@
+export {};