@uncefact/untp-utils 0.2.0 → 0.4.0

package/build/resolvers/resolve-document.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-document.js","sourceRoot":"","sources":["../../src/resolvers/resolve-document.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAA8C,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,8EAA8E;IAC9E,gBAAgB,EAAE,SAAS;IAC3B,uFAAuF;IACvF,cAAc,EAAE,MAAM;IACtB,iHAAiH;IACjH,YAAY,EAAE,CAAC;IACf,+DAA+D;IAC/D,eAAe,EAAE,UAAU;IAC3B,yDAAyD;IACzD,cAAc,EAAE,WAAW;CAO5B,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,OAA2C;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC;IACjG,IAAI,WAAW;QAAE,OAAO,OAAiC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAChG,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAmDD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAgC;IACjF,mEAAmE;IACnE,wEAAwE;IACxE,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,EAAE,gBAAgB,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;IACjF,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,iBAAiB,CAAC,cAAc,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,iBAAiB,CAAC,YAAY,CAAC;IAE7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE;gBAC3F,cAAc,EAAE,OAAO,EAAE,cAAc;aACxC,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;gBAC3B,OAAO,EAAE;oBACP,iEAAiE;oBACjE,6DAA6D;oBAC7D,8DAA8D;oBAC9D,+DAA+D;oBAC/D,yCAAyC;oBACzC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;iBAC/F;aACF,CAAC,CAAC;YAEH,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE;oBAC7C,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;oBACxC,UAAU;iBACX,CAAC,CAAC;gBAEH,oEAAoE;gBACpE,gDAAgD;gBAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;oBAC9C,OAAO;wBACL,QAAQ,EAAE,UAAU;wBACpB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,KAAK;wBACX,UAAU;wBACV,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;qBACpC,CAAC;gBACJ,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC9E,CAAC;oBACD,IAAI,OAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACrD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,CAAC;oBACD,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,UAAU,GAAG,OAAO,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;gBACjF,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpD,OAAO;oBACL,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI;oBACJ,UAAU;oBACV,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6BAA6B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAK,KAAmC,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,qEAAqE;QACrE,IACE,KAAK,YAAY,KAAK;YACtB,OAAQ,KAAoC,CAAC,IAAI,KAAK,QAAQ;YAC9D,CAAE,KAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACzD,KAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AAClG,CAAC;AAQD,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAgB;IAC3C,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpC,SAAS,EAAE,iBAAiB,CAAC,eAAe;QAC5C,IAAI,EAAE,iBAAiB,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAqD,EACrD,KAAa,EACb,GAAW,EACX,cAAsB;IAEtB,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6DAA6D;QAC7D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"resolve-document.js","sourceRoot":"","sources":["../../src/resolvers/resolve-document.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAA8C,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAwB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,8EAA8E;IAC9E,gBAAgB,EAAE,SAAS;IAC3B,+IAA+I;IAC/I,cAAc,EAAE,MAAM;IACtB,iHAAiH;IACjH,YAAY,EAAE,CAAC;IACf,+DAA+D;IAC/D,eAAe,EAAE,UAAU;IAC3B,yDAAyD;IACzD,cAAc,EAAE,WAAW;CAO5B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,OAA2C;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC;IACjG,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAChG,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AA4DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAgC;IACjF,mEAAmE;IACnE,wEAAwE;IACxE,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,EAAE,gBAAgB,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;IACjF,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,iBAAiB,CAAC,cAAc,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,iBAAiB,CAAC,YAAY,CAAC;IAE7E,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,iEAAiE;IACjE,sEAAsE;IACtE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,mBAAmB,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,mBAAmB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE3F,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,EAAE;gBAC1C,cAAc,EAAE,OAAO,EAAE,cAAc;gBACvC,qBAAqB,EAAE,OAAO,EAAE,qBAAqB;gBACrD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC;YACH,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAEjF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE3F,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;gBAC3B,OAAO,EAAE;oBACP,6DAA6D;oBAC7D,gEAAgE;oBAChE,0DAA0D;oBAC1D,mEAAmE;oBACnE,oEAAoE;oBACpE,qEAAqE;oBACrE,4DAA4D;oBAC5D,kEAAkE;oBAClE,oEAAoE;oBACpE,oBAAoB;oBACpB,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAC/B,EAAE,CACA,IAAI,EACJ,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CACpE;iBACJ;aACF,CAAC,CAAC;YAEH,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,cAAc,GAAG;oBACrB,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO;oBACP,UAAU;iBACF,CAAC;gBAEX,IAAI,QAAiD,CAAC;gBACtD,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,sEAAsE;oBACtE,gEAAgE;oBAChE,kEAAkE;oBAClE,oDAAoD;oBACpD,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;oBACrE,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACpD,CAAC;gBAED,oEAAoE;gBACpE,gDAAgD;gBAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;oBAC9C,OAAO;wBACL,QAAQ,EAAE,UAAU;wBACpB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,KAAK;wBACX,UAAU;wBACV,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;qBACpC,CAAC;gBACJ,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC9E,CAAC;oBACD,IAAI,OAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACrD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,IAAI,oCAAoC,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,CAAC;oBACD,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;wBACzB,MAAM,IAAI,6BAA6B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;oBACzE,CAAC;oBACD,UAAU,GAAG,OAAO,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,IAAI;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBACpG,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpD,OAAO;oBACL,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI;oBACJ,UAAU;oBACV,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6BAA6B,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,mBAAmB,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,KAAc,EAAE,MAAmB;IACvD,OAAO,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,CAAC;AAC1D,CAAC;AAQD,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAgB;IAC3C,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpC,SAAS,EAAE,iBAAiB,CAAC,eAAe;QAC5C,IAAI,EAAE,iBAAiB,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAqD,EACrD,KAAa,EACb,GAAW,EACX,cAAsB,EACtB,MAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,UAAmD,CAAC;YACxD,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;gBAC7F,MAAM,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;YACnC,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/resolvers/resolve-document.test.js

@@ -1,13 +1,27 @@
 import { jest } from '@jest/globals';
 import { ReadableStream } from 'node:stream/web';
-import { PrivateAddressError } from '../node/index.js';
+import { MultibaseDigest } from '../multibase-digest/index.js';
+import { PrivateAddressError, ResolutionFailedError } from '../node/index.js';
 import { ResolverHttpError, ResolverNetworkError, ResolverRedirectMissingLocationError, ResolverTimedOutError, ResolverTooLargeError, ResolverTooManyRedirectsError, } from './errors.js';
 const undiciFetch = jest.fn();
+const NativeDOMException = globalThis.DOMException;
 let lastAgentClose = jest.fn(() => Promise.resolve());
+let agentConstructionError;
+let agentCloseImplementation = () => Promise.resolve();
+// Constructor options of every Agent created during a test, in creation
+// order. The `connect.lookup` inside is the IP pin under test.
+let agentOptions = [];
+// The FakeAgent instances themselves, so tests can assert the dispatcher
+// passed to fetch IS the pinned agent, not merely that a pinned agent exists.
+let agentInstances = [];
 class FakeAgent {
     close;
-    constructor() {
-        this.close = jest.fn(() => Promise.resolve());
+    constructor(options) {
+        if (agentConstructionError !== undefined)
+            throw agentConstructionError;
+        agentOptions.push(options);
+        agentInstances.push(this);
+        this.close = jest.fn(() => agentCloseImplementation());
         lastAgentClose = this.close;
     }
 }
@@ -45,11 +59,20 @@ function makeResponse(opts) {
         body: bodyStream,
     };
 }
+/**
+ * The shape `validatePublicUrl` returns for a single validated address:
+ * `address` / `family` repeat the first entry of `addresses`, and the
+ * resolver hands the whole of `addresses` to the connector.
+ */
 function resolvedAddress(address = '1.1.1.1', family = 4) {
-    return { address, family };
+    return { address, family, addresses: [{ address, family }] };
 }
 describe('resolveDocument', () => {
     beforeEach(() => {
+        agentOptions = [];
+        agentInstances = [];
+        agentConstructionError = undefined;
+        agentCloseImplementation = () => Promise.resolve();
         undiciFetch.mockReset();
         validatePublicUrl.mockReset();
     });
@@ -61,6 +84,35 @@ describe('resolveDocument', () => {
         });
     });
     describe('happy path', () => {
+        it('keeps the default DNS lookup path unchanged when no lookup is supplied', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            undiciFetch.mockResolvedValue(makeResponse({ body: 'ok' }));
+            await resolveDocument('https://example.com/doc');
+            expect(validatePublicUrl).toHaveBeenCalledWith('https://example.com/doc', {
+                allowedSchemes: undefined,
+                allowPrivateAddresses: undefined,
+            });
+        });
+        it('forwards a supplied lookup to validation and pins its result into the connector', async () => {
+            const lookup = jest
+                .fn()
+                .mockResolvedValueOnce([{ address: '203.0.113.10', family: 4 }])
+                .mockResolvedValueOnce([{ address: '203.0.113.20', family: 4 }]);
+            validatePublicUrl.mockImplementation(async (_url, options) => {
+                const records = await options.lookup('example.com', { family: 0, all: true });
+                const [first] = records;
+                return { address: first.address, family: first.family, addresses: records };
+            });
+            undiciFetch.mockResolvedValue(makeResponse({ body: 'ok' }));
+            await resolveDocument('https://example.com/doc', { lookup });
+            expect(validatePublicUrl).toHaveBeenCalledWith('https://example.com/doc', expect.objectContaining({ lookup }));
+            const connectorLookup = agentOptions[0].connect.lookup;
+            const pinned = await new Promise((resolve, reject) => {
+                connectorLookup('example.com', {}, (error, addresses) => (error ? reject(error) : resolve(addresses)));
+            });
+            expect(pinned).toEqual([{ address: '203.0.113.10', family: 4 }]);
+            expect(lookup).toHaveBeenCalledTimes(1);
+        });
         it('returns a LoadResult with body, digest, and the allowlisted headers', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());
             undiciFetch.mockResolvedValue(makeResponse({
@@ -87,6 +139,17 @@ describe('resolveDocument', () => {
             expect(valueAsRecord['x-internal-trace']).toBeUndefined();
         });
     });
+    describe('outbound headers', () => {
+        it('sends only Accept-free defaults with a User-Agent and no correlation header', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            undiciFetch.mockResolvedValue(makeResponse({ body: 'ok' }));
+            await resolveDocument('https://example.com/doc');
+            const headers = undiciFetch.mock.calls[0][1].headers;
+            const names = Object.keys(headers).map((name) => name.toLowerCase());
+            expect(names).toContain('user-agent');
+            expect(names).not.toContain('x-correlation-id');
+        });
+    });
     describe('HTTP errors', () => {
         it('throws ResolverHttpError for a 4xx response with status attached', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());
@@ -94,6 +157,16 @@ describe('resolveDocument', () => {
             const error = (await resolveDocument('https://example.com/missing').catch((e) => e));
             expect(error).toBeInstanceOf(ResolverHttpError);
             expect(error.status).toBe(404);
+            expect(error.url).toBe('https://example.com/missing');
+        });
+        it('carries the failing hop URL, not the original, when a redirect ends in an HTTP error', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            undiciFetch
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'https://example.com/moved' }, body: null }))
+                .mockResolvedValueOnce(makeResponse({ status: 404, ok: false, body: 'gone' }));
+            const error = (await resolveDocument('https://example.com/start').catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverHttpError);
+            expect(error.url).toBe('https://example.com/moved');
         });
         it('throws ResolverHttpError for a 5xx response', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());
@@ -111,13 +184,6 @@ describe('resolveDocument', () => {
             expect(error).toBeInstanceOf(ResolverNetworkError);
             expect(error.cause).toBeInstanceOf(Error);
         });
-        it('throws ResolverTimedOutError when the fetch is aborted', async () => {
-            validatePublicUrl.mockResolvedValue(resolvedAddress());
-            const abort = new Error('aborted');
-            abort.name = 'AbortError';
-            undiciFetch.mockRejectedValue(abort);
-            await expect(resolveDocument('https://example.com/')).rejects.toBeInstanceOf(ResolverTimedOutError);
-        });
         it('throws ResolverNetworkError when the response body stream rejects mid-read', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());
             const erroringStream = new ReadableStream({
@@ -133,6 +199,224 @@ describe('resolveDocument', () => {
             });
             await expect(resolveDocument('https://example.com/')).rejects.toBeInstanceOf(ResolverNetworkError);
         });
+        // A foreign abort-shaped rejection, synthesised here rather than observed
+        // from undici: any abort that is not ours can arrive while our budget is
+        // still running. Classifying on the name alone would report it as "timed
+        // out after 10000ms" when our signal never fired. Fails if the deadline
+        // check is dropped.
+        it('reports an abort-named fetch rejection as a network error while our deadline has not passed', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const abort = new NativeDOMException('The operation was aborted.', 'AbortError');
+            undiciFetch.mockRejectedValue(abort);
+            const error = (await resolveDocument('https://example.com/').catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverNetworkError);
+            expect(error.cause).toBe(abort);
+        });
+        // Same rule at the body-read await: an upstream body timeout is not our
+        // budget expiring. Fails if `readWithLimit` classifies on the name alone.
+        it('reports an abort-named body-read rejection as a network error while our deadline has not passed', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const abort = new NativeDOMException('The operation was aborted.', 'AbortError');
+            const erroringStream = new ReadableStream({
+                pull(controller) {
+                    controller.error(abort);
+                },
+            });
+            undiciFetch.mockResolvedValue({
+                status: 200,
+                ok: true,
+                headers: new Headers(),
+                body: erroringStream,
+            });
+            const error = (await resolveDocument('https://example.com/').catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverNetworkError);
+            expect(error.cause).toBe(abort);
+        });
+        it('reports an abort-named body-read rejection as a timeout once our deadline has passed', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const abort = new NativeDOMException('The operation was aborted.', 'AbortError');
+            const reader = {
+                read: jest.fn(() => new Promise((_resolve, reject) => setTimeout(() => reject(abort), 40))),
+                cancel: jest.fn(() => Promise.resolve()),
+            };
+            undiciFetch.mockResolvedValue({
+                status: 200,
+                ok: true,
+                headers: new Headers(),
+                body: { getReader: () => reader },
+            });
+            const error = (await resolveDocument('https://example.com/', { totalTimeoutMs: 10 }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTimedOutError);
+            expect(error.cause).toBe(abort);
+        });
+        it('times out while the first-hop guard is unresolved without creating an Agent or fetching', async () => {
+            let releaseGuard;
+            const guard = new Promise((resolve) => {
+                releaseGuard = resolve;
+            });
+            validatePublicUrl.mockReturnValue(guard);
+            const resolution = resolveDocument('https://slow-dns.example/', { totalTimeoutMs: 20 });
+            await expect(resolution).rejects.toBeInstanceOf(ResolverTimedOutError);
+            expect(agentInstances).toHaveLength(0);
+            expect(undiciFetch).not.toHaveBeenCalled();
+            releaseGuard(resolvedAddress());
+            await Promise.resolve();
+        });
+        it('does not report a late guard rejection as unhandled after timeout', async () => {
+            let rejectGuard;
+            const guard = new Promise((_resolve, reject) => {
+                rejectGuard = reject;
+            });
+            validatePublicUrl.mockReturnValue(guard);
+            await expect(resolveDocument('https://slow-dns.example/', { totalTimeoutMs: 20 })).rejects.toBeInstanceOf(ResolverTimedOutError);
+            const unhandledRejection = jest.fn();
+            process.on('unhandledRejection', unhandledRejection);
+            try {
+                rejectGuard(new Error('late DNS failure'));
+                await new Promise((resolve) => setImmediate(resolve));
+            }
+            finally {
+                process.off('unhandledRejection', unhandledRejection);
+            }
+            expect(unhandledRejection).not.toHaveBeenCalled();
+        });
+        it('keeps the on-time DNS rejection unchanged', async () => {
+            const dnsError = new ResolutionFailedError('example.com', new Error('ENOTFOUND'));
+            validatePublicUrl.mockRejectedValue(dnsError);
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(dnsError);
+            expect(undiciFetch).not.toHaveBeenCalled();
+        });
+        // The paired case for the fetch await: the same abort-shaped rejection is
+        // our timeout once the signal has fired.
+        it('classifies an in-flight fetch abort as a timeout', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const abort = new NativeDOMException('The operation was aborted.', 'AbortError');
+            undiciFetch.mockImplementation((_url, rawInit) => {
+                const init = rawInit;
+                return new Promise((_resolve, reject) => {
+                    init.signal.addEventListener('abort', () => reject(abort), { once: true });
+                });
+            });
+            const error = (await resolveDocument('https://example.com/', { totalTimeoutMs: 20 }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTimedOutError);
+            expect(error.cause).toBe(abort);
+        });
+    });
+    describe('defect propagation', () => {
+        it('propagates a header-processing defect after a successful fetch unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('header parser defect');
+            const headers = {
+                get: jest.fn(() => {
+                    throw sentinel;
+                }),
+            };
+            undiciFetch.mockResolvedValue({ status: 200, ok: true, headers, body: null });
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+            expect(lastAgentClose).toHaveBeenCalled();
+        });
+        it('propagates an Agent construction defect unchanged', async () => {
+            const sentinel = new TypeError('agent construction defect');
+            agentConstructionError = sentinel;
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+            expect(undiciFetch).not.toHaveBeenCalled();
+        });
+        it('propagates a digest defect unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            undiciFetch.mockResolvedValue(makeResponse({ body: 'ok' }));
+            const sentinel = new Error('digest defect');
+            const digestSpy = jest.spyOn(MultibaseDigest, 'fromData').mockRejectedValue(sentinel);
+            try {
+                await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+            }
+            finally {
+                digestSpy.mockRestore();
+            }
+            expect(lastAgentClose).toHaveBeenCalled();
+        });
+        it('propagates a request-header construction defect before dispatch unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('request header defect');
+            const headers = Object.defineProperty({}, 'User-Agent', {
+                enumerable: true,
+                get: () => {
+                    throw sentinel;
+                },
+            });
+            await expect(resolveDocument('https://example.com/', { headers })).rejects.toBe(sentinel);
+            expect(undiciFetch).not.toHaveBeenCalled();
+            // The Agent is constructed before the headers are materialised, so the
+            // defect must still leave through the dispatcher's finally. Fails if the
+            // header work moves outside that try and leaks the Agent.
+            expect(lastAgentClose).toHaveBeenCalled();
+        });
+        // The sibling case above supplies an explicit `User-Agent`, which takes the
+        // early-return branch of withUserAgent. This one has no caller
+        // `User-Agent`, so the implicit branch spreads the caller's object to add
+        // the generated header, and must read the throwing `Accept` getter there.
+        // Fails if that branch stops materialising the caller's headers, which
+        // would defer the defect into the transport instead of raising it here.
+        it('propagates a request-header defect from the implicit User-Agent branch unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('request header defect');
+            const headers = Object.defineProperty({}, 'Accept', {
+                enumerable: true,
+                get: () => {
+                    throw sentinel;
+                },
+            });
+            await expect(resolveDocument('https://example.com/', { headers })).rejects.toBe(sentinel);
+            expect(undiciFetch).not.toHaveBeenCalled();
+            expect(lastAgentClose).toHaveBeenCalled();
+        });
+        it('does not classify an abort-named processing defect as a timeout', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('processing defect');
+            sentinel.name = 'AbortError';
+            const headers = {
+                get: jest.fn(() => {
+                    throw sentinel;
+                }),
+            };
+            undiciFetch.mockResolvedValue({ status: 200, ok: true, headers, body: null });
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+        });
+        it('propagates a reader acquisition defect unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('reader acquisition defect');
+            undiciFetch.mockResolvedValue({
+                status: 200,
+                ok: true,
+                headers: new Headers(),
+                body: {
+                    getReader: () => {
+                        throw sentinel;
+                    },
+                },
+            });
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+        });
+        it('propagates a chunk-processing defect unchanged', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const sentinel = new TypeError('chunk processing defect');
+            const value = Object.defineProperty({}, 'byteLength', {
+                get: () => {
+                    throw sentinel;
+                },
+            });
+            const reader = { read: jest.fn(), cancel: jest.fn() };
+            reader.read.mockResolvedValue({ value, done: false });
+            reader.cancel.mockResolvedValue(undefined);
+            undiciFetch.mockResolvedValue({
+                status: 200,
+                ok: true,
+                headers: new Headers(),
+                body: { getReader: () => reader },
+            });
+            await expect(resolveDocument('https://example.com/')).rejects.toBe(sentinel);
+            expect(reader.cancel).toHaveBeenCalledTimes(1);
+        });
     });
     describe('size limit', () => {
         it('throws ResolverTooLargeError with limit attached when the body exceeds maxResponseBytes', async () => {
@@ -143,6 +427,19 @@ describe('resolveDocument', () => {
             expect(error).toBeInstanceOf(ResolverTooLargeError);
             expect(error.limit).toBe(1024);
         });
+        // The relaxed setting permits private destinations and nothing else. Fails
+        // if the size cap is bypassed or widened when allowPrivateAddresses is on.
+        it('applies the same size cap with allowPrivateAddresses on', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress('10.0.0.1'));
+            const big = new Uint8Array(2048);
+            undiciFetch.mockResolvedValue(makeResponse({ body: big }));
+            const error = (await resolveDocument('http://db.internal/big', {
+                maxResponseBytes: 1024,
+                allowPrivateAddresses: true,
+            }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTooLargeError);
+            expect(error.limit).toBe(1024);
+        });
     });
     describe('redirects', () => {
         it('follows a redirect chain within the cap', async () => {
@@ -155,6 +452,75 @@ describe('resolveDocument', () => {
             expect(new TextDecoder().decode(result.body)).toBe('final');
             expect(undiciFetch).toHaveBeenCalledTimes(2);
         });
+        it('pins each hop connection to the addresses validatePublicUrl resolved', async () => {
+            validatePublicUrl
+                .mockResolvedValueOnce(resolvedAddress('203.0.113.10', 4))
+                .mockResolvedValueOnce(resolvedAddress('2606:4700:4700::1111', 6));
+            undiciFetch
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'https://example.com/next' }, body: null }))
+                .mockResolvedValueOnce(makeResponse({ body: 'final' }));
+            await resolveDocument('https://example.com/start');
+            expect(agentOptions).toHaveLength(2);
+            // Each hop's request must be dispatched through the agent that holds
+            // that hop's pin; constructing a pinned agent and fetching without it
+            // would satisfy the lookup assertions alone.
+            expect(undiciFetch.mock.calls[0][1]).toMatchObject({ dispatcher: agentInstances[0] });
+            expect(undiciFetch.mock.calls[1][1]).toMatchObject({ dispatcher: agentInstances[1] });
+            const pins = await Promise.all(agentOptions.map((options) => new Promise((resolve, reject) => {
+                const lookup = options.connect.lookup;
+                lookup('example.com', {}, (err, addresses) => (err ? reject(err) : resolve(addresses)));
+            })));
+            // Each hop's lookup must return exactly the addresses its own
+            // validatePublicUrl call resolved, never a fresh DNS answer.
+            expect(pins[0]).toEqual([{ address: '203.0.113.10', family: 4 }]);
+            expect(pins[1]).toEqual([{ address: '2606:4700:4700::1111', family: 6 }]);
+        });
+        // The dual-stack `localhost` case: the guard validated both addresses, so
+        // both must reach the connector, which is what lets Node's default
+        // autoSelectFamily try the second when the first refuses the connection.
+        it('hands the connector every address the guard validated for a hop', async () => {
+            validatePublicUrl.mockResolvedValueOnce({
+                address: '::1',
+                family: 6,
+                addresses: [
+                    { address: '::1', family: 6 },
+                    { address: '127.0.0.1', family: 4 },
+                ],
+            });
+            undiciFetch.mockResolvedValueOnce(makeResponse({ body: 'final' }));
+            await resolveDocument('http://localhost/doc', { allowPrivateAddresses: true });
+            expect(agentOptions).toHaveLength(1);
+            expect(undiciFetch.mock.calls[0][1]).toMatchObject({ dispatcher: agentInstances[0] });
+            const pin = await new Promise((resolve, reject) => {
+                const lookup = agentOptions[0].connect.lookup;
+                lookup('localhost', {}, (err, addresses) => (err ? reject(err) : resolve(addresses)));
+            });
+            expect(pin).toEqual([
+                { address: '::1', family: 6 },
+                { address: '127.0.0.1', family: 4 },
+            ]);
+        });
+        it('forwards private permission and pins each redirect hop through the guard', async () => {
+            validatePublicUrl
+                .mockResolvedValueOnce(resolvedAddress('10.0.0.1', 4))
+                .mockResolvedValueOnce(resolvedAddress('10.0.0.2', 4));
+            undiciFetch
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'http://db.internal/next' }, body: null }))
+                .mockResolvedValueOnce(makeResponse({ body: 'final' }));
+            await resolveDocument('http://localhost/start', { allowPrivateAddresses: true });
+            expect(validatePublicUrl).toHaveBeenNthCalledWith(1, 'http://localhost/start', expect.objectContaining({ allowPrivateAddresses: true }));
+            expect(validatePublicUrl).toHaveBeenNthCalledWith(2, 'http://db.internal/next', expect.objectContaining({ allowPrivateAddresses: true }));
+            // Relaxed mode must dispatch through the pinned Agents too, exactly as
+            // the strict sibling above asserts. Constructing a pinned Agent and then
+            // fetching without it would satisfy the pin assertions below alone.
+            expect(undiciFetch.mock.calls[0][1]).toMatchObject({ dispatcher: agentInstances[0] });
+            expect(undiciFetch.mock.calls[1][1]).toMatchObject({ dispatcher: agentInstances[1] });
+            const pins = await Promise.all(agentOptions.map((options) => new Promise((resolve, reject) => {
+                const lookup = options.connect.lookup;
+                lookup('ignored.example', {}, (err, addresses) => err ? reject(err) : resolve(addresses));
+            })));
+            expect(pins).toEqual([[{ address: '10.0.0.1', family: 4 }], [{ address: '10.0.0.2', family: 4 }]]);
+        });
         it('re-validates each redirect target through validatePublicUrl', async () => {
             validatePublicUrl
                 .mockResolvedValueOnce(resolvedAddress('1.1.1.1'))
@@ -176,10 +542,94 @@ describe('resolveDocument', () => {
         });
         it('throws ResolverTooManyRedirectsError with limit attached when the chain exceeds the cap', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());
-            undiciFetch.mockResolvedValue(makeResponse({ status: 301, headers: { location: 'https://example.com/loop' }, body: null }));
+            undiciFetch
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'https://example.com/loop' }, body: null }))
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'https://example.com/final' }, body: null }));
             const error = (await resolveDocument('https://example.com/start', { maxRedirects: 1 }).catch((e) => e));
             expect(error).toBeInstanceOf(ResolverTooManyRedirectsError);
             expect(error.limit).toBe(1);
+            expect(error.lastHopUrl).toBe('https://example.com/loop');
+            // The message names where the chain began and `.lastHopUrl` names who
+            // answered last. Fails if the two are transposed, which would report the hop that
+            // redirected as the start of the chain.
+            expect(error.message).toContain('starting from https://example.com/start');
+            expect(error.message).not.toContain('https://example.com/loop');
+        });
+        // Same cap, same responder, with the relaxed setting on. Fails if the hop
+        // cap is bypassed or overridden when allowPrivateAddresses is on.
+        it('applies the same redirect cap with allowPrivateAddresses on', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress('10.0.0.1'));
+            undiciFetch
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'http://db.internal/loop' }, body: null }))
+                .mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'http://db.internal/final' }, body: null }));
+            const error = (await resolveDocument('http://db.internal/start', {
+                maxRedirects: 1,
+                allowPrivateAddresses: true,
+            }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTooManyRedirectsError);
+            expect(error.limit).toBe(1);
+            expect(error.lastHopUrl).toBe('http://db.internal/loop');
+            expect(undiciFetch).toHaveBeenCalledTimes(2);
+        });
+        // R6: the disclosed default of three additional hops, exercised rather
+        // than restated as a constant. Four consecutive redirects must exhaust it,
+        // and the error must name the hop that answered the fourth request. Fails
+        // if the default changes or the responder is transposed.
+        it('exhausts the default redirect cap of three additional hops', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            for (const location of [
+                'https://example.com/r1',
+                'https://example.com/r2',
+                'https://example.com/r3',
+                'https://example.com/r4',
+            ]) {
+                undiciFetch.mockResolvedValueOnce(makeResponse({ status: 301, headers: { location }, body: null }));
+            }
+            const error = (await resolveDocument('https://example.com/start').catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTooManyRedirectsError);
+            expect(error.limit).toBe(3);
+            expect(undiciFetch).toHaveBeenCalledTimes(4);
+            expect(undiciFetch.mock.calls[3][0]).toBe('https://example.com/r3');
+            expect(error.lastHopUrl).toBe('https://example.com/r3');
+        });
+        // The post-loop throw is reachable only when the caller supplies a
+        // negative limit, so no hop was ever validated and there is no responder
+        // to name. Fails if that path is given a default `lastHopUrl`, which would
+        // claim a response that never happened, or if the loop runs at all.
+        it('throws ResolverTooManyRedirectsError with no lastHopUrl when the caller supplies a negative limit', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            const error = (await resolveDocument('https://example.com/start', { maxRedirects: -1 }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTooManyRedirectsError);
+            expect(error.lastHopUrl).toBeUndefined();
+            expect(error.limit).toBe(-1);
+            expect(error.message).toContain('https://example.com/start');
+            expect(validatePublicUrl).not.toHaveBeenCalled();
+            expect(undiciFetch).not.toHaveBeenCalled();
+        });
+        it('does not call the second-hop guard after redirect cleanup consumes the timeout budget', async () => {
+            validatePublicUrl.mockResolvedValue(resolvedAddress());
+            undiciFetch.mockResolvedValue(makeResponse({ status: 301, headers: { location: 'https://example.com/next' }, body: null }));
+            agentCloseImplementation = () => new Promise((resolve) => setTimeout(resolve, 30));
+            await expect(resolveDocument('https://example.com/start', { totalTimeoutMs: 5 })).rejects.toBeInstanceOf(ResolverTimedOutError);
+            expect(validatePublicUrl).toHaveBeenCalledTimes(1);
+            expect(agentInstances).toHaveLength(1);
+            expect(undiciFetch).toHaveBeenCalledTimes(1);
+        });
+        it('uses the live redirect hop when a second-hop guard remains unresolved at timeout', async () => {
+            let releaseGuard;
+            const guard = new Promise((resolve) => {
+                releaseGuard = resolve;
+            });
+            validatePublicUrl.mockResolvedValueOnce(resolvedAddress()).mockReturnValueOnce(guard);
+            undiciFetch.mockResolvedValueOnce(makeResponse({ status: 301, headers: { location: 'https://example.com/next' }, body: null }));
+            const error = (await resolveDocument('https://example.com/start', { totalTimeoutMs: 20 }).catch((e) => e));
+            expect(error).toBeInstanceOf(ResolverTimedOutError);
+            expect(error.message).toContain('https://example.com/next');
+            expect(validatePublicUrl).toHaveBeenCalledTimes(2);
+            expect(agentInstances).toHaveLength(1);
+            expect(undiciFetch).toHaveBeenCalledTimes(1);
+            releaseGuard(resolvedAddress());
+            await Promise.resolve();
         });
         it('throws ResolverRedirectMissingLocationError when a 3xx has no Location', async () => {
             validatePublicUrl.mockResolvedValue(resolvedAddress());