@venizia/ignis-helpers 0.2.0-2 → 0.2.0-21

package/dist/cjs/modules/network/http-request/base-network-request.helper.js

@@ -4,8 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseNetworkRequest = void 0;
-const base_1 = require("../../../modules/base");
-const error_1 = require("../../../modules/error");
+const base_1 = require("../../base");
+const error_1 = require("../../error");
 const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
 class BaseNetworkRequest extends base_1.BaseHelper {
     constructor(opts) {

package/dist/cjs/modules/network/http-request/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/network/http-request/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/cjs/modules/network/http-request/common/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/network/http-request/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB"}

package/dist/cjs/modules/network/http-request/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/common/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,OAAO,CAAC"}

package/dist/cjs/modules/network/http-request/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/common/types.ts"],"names":[],"mappings":""}

package/dist/cjs/modules/network/http-request/fetcher/axios-fetcher.d.ts

@@ -1,7 +1,7 @@
 import { AnyObject, THttpMethod } from '../../../../common';
 import axios, { AxiosInstance, AxiosRequestConfig, AxiosResponse } from 'axios';
 import { BaseNetworkRequest } from '../base-network-request.helper';
-import type { ILogger } from '../../../../modules/logger/common/types';
+import type { ILogger } from '../../../logger/common/types';
 import { AbstractNetworkFetchableHelper, IRequestOptions } from './base-fetcher';
 export interface IAxiosRequestOptions extends AxiosRequestConfig, IRequestOptions {
     url: string;
@@ -35,7 +35,7 @@ export declare class AxiosFetcher extends AbstractNetworkFetchableHelper<'axios'
          */
         rejectUnauthorized?: boolean;
     });
-    send<T = any>(opts: IAxiosRequestOptions, logger?: ILogger): Promise<axios.AxiosResponse<T, any, {}>>;
+    send<T = any>(opts: IAxiosRequestOptions, logger?: ILogger): Promise<axios.AxiosResponse<T, any, {}, any>>;
 }
 export interface IAxiosNetworkRequestOptions {
     name: string;

package/dist/cjs/modules/network/http-request/fetcher/base-fetcher.d.ts

@@ -1,7 +1,7 @@
 import { THttpMethod } from '../../../../common/constants/http';
 import { AnyObject } from '../../../../common/types';
-import type { ILogger } from '../../../../modules/logger/common/types';
-import { TFetcherVariant } from '../types';
+import type { ILogger } from '../../../logger/common/types';
+import { TFetcherVariant } from '../common';
 export interface IRequestOptions {
     url: string;
     method?: THttpMethod;

package/dist/cjs/modules/network/http-request/fetcher/base-fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-fetcher.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/fetcher/base-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU,CACzB,CAAC,SAAS,eAAe,EACzB,EAAE,SAAS,eAAe,EAC1B,EAAE,EACF,CAAC,GAAG,OAAO;IAEX,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAE/C,UAAU,IAAI,CAAC,CAAC;IAChB,SAAS,IAAI,CAAC,CAAC;CAChB;AAED,yNAAyN;AACzN,8BAAsB,8BAA8B,CAClD,CAAC,SAAS,eAAe,EACzB,EAAE,SAAS,eAAe,EAC1B,EAAE,EACF,CAAC,GAAG,OAAO,CACX,YAAW,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBAER,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC,CAAA;KAAE;IAK9C,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;IAEtD,WAAW,CAAC,GAAG,EAAE,MAAM;IAIvB,UAAU;IAIV,SAAS,IAAI,CAAC;IAId,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK9B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK/B,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK9B,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAKhC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAKjC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;CAIjC"}
+{"version":3,"file":"base-fetcher.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/http-request/fetcher/base-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU,CACzB,CAAC,SAAS,eAAe,EACzB,EAAE,SAAS,eAAe,EAC1B,EAAE,EACF,CAAC,GAAG,OAAO;IAEX,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAE/C,UAAU,IAAI,CAAC,CAAC;IAChB,SAAS,IAAI,CAAC,CAAC;CAChB;AAED,yNAAyN;AACzN,8BAAsB,8BAA8B,CAClD,CAAC,SAAS,eAAe,EACzB,EAAE,SAAS,eAAe,EAC1B,EAAE,EACF,CAAC,GAAG,OAAO,CACX,YAAW,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBAER,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC,CAAA;KAAE;IAK9C,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;IAEtD,WAAW,CAAC,GAAG,EAAE,MAAM;IAIvB,UAAU;IAIV,SAAS,IAAI,CAAC;IAId,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK9B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK/B,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAK9B,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAKhC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;IAKjC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO;CAIjC"}

package/dist/cjs/modules/network/http-request/fetcher/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/network/http-request/fetcher/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/network/http-request/fetcher/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/cjs/modules/network/http-request/fetcher/common/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/network/http-request/fetcher/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/modules/network/http-request/fetcher/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB"}

package/dist/{esm/modules/network/http-request/fetcher → cjs/modules/network/http-request/fetcher/common}/types.d.ts

@@ -1,5 +1,5 @@
 import type { AxiosInstance, AxiosResponse } from 'axios';
-import type { TFetcherVariant } from '../types.js';
+import type { TFetcherVariant } from '../../common';
 export type TFetcherResponse<T extends TFetcherVariant> = T extends 'node-fetch' ? Response : AxiosResponse;
 export type TFetcherWorker<T extends TFetcherVariant> = T extends 'axios' ? AxiosInstance : typeof fetch;
 //# sourceMappingURL=types.d.ts.map

package/dist/cjs/modules/network/http-request/fetcher/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/network/http-request/fetcher/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,SAAS,YAAY,GAC5E,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,SAAS,OAAO,GACrE,aAAa,GACb,OAAO,KAAK,CAAC"}

package/dist/cjs/modules/network/http-request/fetcher/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../src/modules/network/http-request/fetcher/common/types.ts"],"names":[],"mappings":""}

package/dist/cjs/modules/network/http-request/fetcher/node-fetcher.d.ts

@@ -1,7 +1,7 @@
 import { THttpMethod } from '../../../../common/constants/http';
 import { AnyObject } from '../../../../common/types';
 import { BaseNetworkRequest } from '../base-network-request.helper';
-import type { ILogger } from '../../../../modules/logger/common/types';
+import type { ILogger } from '../../../logger/common/types';
 import { AbstractNetworkFetchableHelper, IRequestOptions } from './base-fetcher';
 export interface INodeFetchRequestOptions extends RequestInit, IRequestOptions {
     url: string;

package/dist/cjs/modules/network/index.d.ts

@@ -1,4 +1,5 @@
 export * from './http-request';
 export * from './tcp-socket';
 export * from './udp-socket';
+export * from './url-safety';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/network/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/network/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/network/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/cjs/modules/network/index.js

@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./http-request"), exports);
 __exportStar(require("./tcp-socket"), exports);
 __exportStar(require("./udp-socket"), exports);
+__exportStar(require("./url-safety"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/network/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/network/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,+CAA6B;AAC7B,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/network/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,+CAA6B;AAC7B,+CAA6B;AAC7B,+CAA6B"}

package/dist/cjs/modules/network/tcp-socket/base-tcp-client.helper.d.ts

@@ -1,4 +1,4 @@
-import { BaseHelper } from '../../../modules/base';
+import { BaseHelper } from '../../base';
 import { ValueOrPromise } from '../../../common';
 import { TcpSocketConnectOpts as PlainConnectionOptions, Socket as PlainSocketClient } from 'node:net';
 import { ConnectionOptions as TlsConnectionOptions, TLSSocket as TlsSocketClient } from 'node:tls';

package/dist/cjs/modules/network/tcp-socket/base-tcp-client.helper.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseNetworkTcpClient = void 0;
 const redact_1 = require("../../../common/redact");
-const base_1 = require("../../../modules/base");
+const base_1 = require("../../base");
 const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
 const DEFAULT_MAX_RETRY = 5;
 class BaseNetworkTcpClient extends base_1.BaseHelper {

package/dist/cjs/modules/network/tcp-socket/base-tcp-server.helper.d.ts

@@ -1,5 +1,5 @@
 import { ValueOrPromise } from '../../../common/types';
-import { BaseHelper } from '../../../modules/base';
+import { BaseHelper } from '../../base';
 import { dayjs } from '../../../utilities/date.utility';
 import { ListenOptions, ServerOpts, Socket as SocketClient, Server as SocketServer } from 'node:net';
 export interface ITcpSocketClient<SocketClientType> {

package/dist/cjs/modules/network/tcp-socket/base-tcp-server.helper.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseNetworkTcpServer = void 0;
-const base_1 = require("../../../modules/base");
-const error_1 = require("../../../modules/error");
+const base_1 = require("../../base");
+const error_1 = require("../../error");
 const date_utility_1 = require("../../../utilities/date.utility");
 const parse_utility_1 = require("../../../utilities/parse.utility");
 const promise_utility_1 = require("../../../utilities/promise.utility");

package/dist/cjs/modules/network/udp-socket/network-udp-client.helper.d.ts

@@ -1,5 +1,5 @@
 import { ValueOrPromise } from '../../../common';
-import { BaseHelper } from '../../../modules/base';
+import { BaseHelper } from '../../base';
 import dgram from 'node:dgram';
 interface INetworkUdpClientProps {
     identifier: string;

package/dist/cjs/modules/network/udp-socket/network-udp-client.helper.js

@@ -4,7 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NetworkUdpClient = void 0;
-const base_1 = require("../../../modules/base");
+const base_1 = require("../../base");
 const promise_utility_1 = require("../../../utilities/promise.utility");
 const node_dgram_1 = __importDefault(require("node:dgram"));
 class NetworkUdpClient extends base_1.BaseHelper {

package/dist/cjs/modules/network/url-safety/common/constants.d.ts

@@ -0,0 +1,18 @@
+import { TConstValue } from '../../../../common/types';
+/** The only schemes a guarded fetch will speak. `file:` and `gopher:` are the classic SSRF pivots. */
+export declare class UrlSchemes {
+    static readonly HTTP = "http:";
+    static readonly HTTPS = "https:";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(value: string): boolean;
+}
+export type TUrlScheme = TConstValue<typeof UrlSchemes>;
+/** Safe by default: https only, no private address, three hops, ten seconds. */
+export declare class UrlSafetyDefaults {
+    static readonly ALLOWED_SCHEMES: string[];
+    static readonly ALLOW_PRIVATE_ADDRESS = false;
+    static readonly MAX_REDIRECTS = 3;
+    static readonly TIMEOUT_MILLISECONDS = 10000;
+    static readonly MAX_BYTES: number;
+}
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/modules/network/url-safety/common/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,sGAAsG;AACtG,qBAAa,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,WAAW;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,YAAY;IAEjC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA4C;IAEtE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,UAAU,CAAC,CAAC;AAExD,gFAAgF;AAChF,qBAAa,iBAAiB;IAC5B,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAsB;IAC/D,MAAM,CAAC,QAAQ,CAAC,qBAAqB,SAAS;IAC9C,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK;IAClC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,SAAU;IAC9C,MAAM,CAAC,QAAQ,CAAC,SAAS,SAAoB;CAC9C"}

package/dist/cjs/modules/network/url-safety/common/constants.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UrlSafetyDefaults = exports.UrlSchemes = void 0;
+/** The only schemes a guarded fetch will speak. `file:` and `gopher:` are the classic SSRF pivots. */
+class UrlSchemes {
+    static { this.HTTP = 'http:'; }
+    static { this.HTTPS = 'https:'; }
+    static { this.SCHEME_SET = new Set([this.HTTP, this.HTTPS]); }
+    static isValid(value) {
+        return this.SCHEME_SET.has(value);
+    }
+}
+exports.UrlSchemes = UrlSchemes;
+/** Safe by default: https only, no private address, three hops, ten seconds. */
+class UrlSafetyDefaults {
+    static { this.ALLOWED_SCHEMES = [UrlSchemes.HTTPS]; }
+    static { this.ALLOW_PRIVATE_ADDRESS = false; }
+    static { this.MAX_REDIRECTS = 3; }
+    static { this.TIMEOUT_MILLISECONDS = 10_000; }
+    static { this.MAX_BYTES = 10 * 1024 * 1024; }
+}
+exports.UrlSafetyDefaults = UrlSafetyDefaults;
+//# sourceMappingURL=constants.js.map

package/dist/cjs/modules/network/url-safety/common/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/constants.ts"],"names":[],"mappings":";;;AAEA,sGAAsG;AACtG,MAAa,UAAU;aACL,SAAI,GAAG,OAAO,CAAC;aACf,UAAK,GAAG,QAAQ,CAAC;aAEjB,eAAU,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gCASC;AAGD,gFAAgF;AAChF,MAAa,iBAAiB;aACZ,oBAAe,GAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;aAC/C,0BAAqB,GAAG,KAAK,CAAC;aAC9B,kBAAa,GAAG,CAAC,CAAC;aAClB,yBAAoB,GAAG,MAAM,CAAC;aAC9B,cAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;;AAL/C,8CAMC"}

package/dist/cjs/modules/network/url-safety/common/errors.d.ts

@@ -0,0 +1,31 @@
+import type { TRegisterErrors } from '@venizia/ignis-inversion';
+/**
+ * A url the policy refuses is refused forever - the same url will never be allowed. A caller that
+ * retries on failure has to tell that apart from a host that timed out, or it retries a rejection
+ * and turns the guard into a repeat scanner.
+ */
+export declare const UrlSafetyErrors: {
+    readonly URL_REFUSED: {
+        readonly message: {
+            readonly text: "Url refused by the safety policy";
+            readonly code: "core.url_safety.url_refused";
+        };
+        readonly statusCode: 400;
+        readonly category: "business";
+    };
+};
+declare module '@venizia/ignis-inversion' {
+    interface IErrorKeyRegistry extends TRegisterErrors<typeof UrlSafetyErrors> {
+    }
+}
+/**
+ * True when the url will never be allowed, whatever happens next: a bad scheme, a non-public
+ * address, a host outside the allow-list, a malformed url, or too many hops. Retrying any of those
+ * repeats the same rejection - drop the work instead.
+ *
+ * A timeout, a DNS failure or a 5xx answers `false`: those are worth another attempt.
+ */
+export declare const isUrlRefusedError: (opts: {
+    error: unknown;
+}) => boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/cjs/modules/network/url-safety/common/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/errors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGlF;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;CAMyB,CAAC;AAEtD,OAAO,QAAQ,0BAA0B,CAAC;IACxC,UAAU,iBAAkB,SAAQ,eAAe,CAAC,OAAO,eAAe,CAAC;KAAG;CAC/E;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,KAAG,OAG5D,CAAC"}

package/dist/cjs/modules/network/url-safety/common/errors.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUrlRefusedError = exports.UrlSafetyErrors = void 0;
+const constants_1 = require("../../../../common/constants");
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
+/**
+ * A url the policy refuses is refused forever - the same url will never be allowed. A caller that
+ * retries on failure has to tell that apart from a host that timed out, or it retries a rejection
+ * and turns the guard into a repeat scanner.
+ */
+exports.UrlSafetyErrors = {
+    URL_REFUSED: {
+        message: { text: 'Url refused by the safety policy', code: 'core.url_safety.url_refused' },
+        statusCode: constants_1.HTTP.ResultCodes.RS_4.BadRequest,
+        category: ignis_inversion_1.ErrorScopes.BUSINESS,
+    },
+};
+/**
+ * True when the url will never be allowed, whatever happens next: a bad scheme, a non-public
+ * address, a host outside the allow-list, a malformed url, or too many hops. Retrying any of those
+ * repeats the same rejection - drop the work instead.
+ *
+ * A timeout, a DNS failure or a 5xx answers `false`: those are worth another attempt.
+ */
+const isUrlRefusedError = (opts) => {
+    const source = opts.error;
+    return source?.normalized?.code === exports.UrlSafetyErrors.URL_REFUSED.message.code;
+};
+exports.isUrlRefusedError = isUrlRefusedError;
+//# sourceMappingURL=errors.js.map

package/dist/cjs/modules/network/url-safety/common/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/errors.ts"],"names":[],"mappings":";;;AAAA,kDAA0C;AAE1C,8DAAuD;AAEvD;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B,WAAW,EAAE;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,6BAA6B,EAAE;QAC1F,UAAU,EAAE,gBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU;QAC5C,QAAQ,EAAE,6BAAW,CAAC,QAAQ;KAC/B;CACkD,CAAC;AAMtD;;;;;;GAMG;AACI,MAAM,iBAAiB,GAAG,CAAC,IAAwB,EAAW,EAAE;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAA2C,CAAC;IAChE,OAAO,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,uBAAe,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/E,CAAC,CAAC;AAHW,QAAA,iBAAiB,qBAG5B"}

package/dist/cjs/modules/network/url-safety/common/index.d.ts

@@ -0,0 +1,4 @@
+export * from './constants';
+export * from './errors';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/network/url-safety/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/cjs/modules/network/url-safety/common/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./constants"), exports);
+__exportStar(require("./errors"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/network/url-safety/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,2CAAyB;AACzB,0CAAwB"}

package/dist/cjs/modules/network/url-safety/common/types.d.ts

@@ -0,0 +1,24 @@
+import type { IDuration } from '../../../../common/constants/duration';
+/**
+ * What a caller will accept from an untrusted url. Every field is per call: an app that must reach
+ * plain `http` says so at the call site rather than weakening a build-time constant for everyone.
+ */
+export interface IUrlSafetyPolicy {
+    /** Defaults to `['https:']`. */
+    allowedSchemes?: string[];
+    /**
+     * Defaults to `false`. Turning it on in a path that takes urls from user input re-opens the
+     * server-side request forgery this guard exists to close - a request can then be steered at
+     * `169.254.169.254` and the cloud credentials behind it.
+     */
+    allowPrivateAddress?: boolean;
+    /** When set, nothing outside the list passes, whatever it resolves to. */
+    allowedHosts?: string[];
+    /** Defaults to 3. Each hop is re-checked, so a public host cannot bounce into a private one. */
+    maxRedirects?: number;
+    /** Defaults to 10 seconds. A slow host holds a worker slot for exactly this long. */
+    timeout?: IDuration;
+    /** Defaults to 10 MB. The read stops and cancels the moment the body crosses it. */
+    maxBytes?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/modules/network/url-safety/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qFAAqF;IACrF,OAAO,CAAC,EAAE,SAAS,CAAC;IAEpB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/cjs/modules/network/url-safety/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/modules/network/url-safety/common/types.ts"],"names":[],"mappings":""}

package/dist/cjs/modules/network/url-safety/index.d.ts

@@ -0,0 +1,4 @@
+export * from './common';
+export * from './policy';
+export * from './ingest';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/network/url-safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/network/url-safety/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/cjs/modules/network/url-safety/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./common"), exports);
+__exportStar(require("./policy"), exports);
+__exportStar(require("./ingest"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/network/url-safety/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/network/url-safety/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB"}

package/dist/cjs/modules/network/url-safety/ingest.d.ts

@@ -0,0 +1,52 @@
+import type { IUrlSafetyPolicy } from './common/types';
+/** Fetching an untrusted url without letting it reach inside the network. */
+export declare class UrlIngest {
+    /**
+     * Rejects when ANY resolved address is non-public. Checking only the first walks straight into a
+     * host that publishes one public A record beside an internal one.
+     *
+     * A rebinding window remains: the address can change between this check and the connect. Closing
+     * it means connecting to the resolved address and setting `Host` by hand, which no fetch API
+     * exposes.
+     */
+    static assertPublicHost(opts: {
+        hostname: string;
+        policy?: IUrlSafetyPolicy;
+    }): Promise<void>;
+    /** Both halves, in the order they must run: shape first, then the network. */
+    static assertReachableUrl(opts: {
+        url: string;
+        policy?: IUrlSafetyPolicy;
+    }): Promise<URL>;
+    private static readTimeoutMilliseconds;
+    /**
+     * A GET that an untrusted url cannot steer inside the network. Redirects are followed by hand so
+     * every hop is re-checked - `redirect: 'follow'` would land on an internal host with no second
+     * look.
+     *
+     * The body is returned unread: the caller decides whether to stream it onward or cap it with
+     * {@link UrlIngest.readCappedBody}. Nothing is buffered here.
+     */
+    static fetchGuarded(opts: {
+        url: string;
+        policy?: IUrlSafetyPolicy;
+        headers?: Record<string, string>;
+    }): Promise<Response>;
+    /**
+     * Enforces `maxBytes` on a stream nothing reads into this process - the shape a caller wants when
+     * the body is piped onward rather than held. Without it a `maxBytes` policy is inert on that path.
+     */
+    static capStream(opts: {
+        source: ReadableStream<Uint8Array>;
+        policy?: IUrlSafetyPolicy;
+    }): ReadableStream<Uint8Array>;
+    /**
+     * Reads a body that must not exceed `maxBytes`, cancelling the moment it does. `content-length` is
+     * checked first because it is free, and counted anyway because it may be absent or lie.
+     */
+    static readCappedBody(opts: {
+        response: Response;
+        policy?: IUrlSafetyPolicy;
+    }): Promise<Buffer>;
+}
+//# sourceMappingURL=ingest.d.ts.map

package/dist/cjs/modules/network/url-safety/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../../../../src/modules/network/url-safety/ingest.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,6EAA6E;AAC7E,qBAAa,SAAS;IACpB;;;;;;;OAOG;WACU,gBAAgB,CAAC,IAAI,EAAE;QAClC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,gBAAgB,CAAC;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjB,8EAA8E;WACjE,kBAAkB,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAM/F,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAMtC;;;;;;;OAOG;WACU,YAAY,CAAC,IAAI,EAAE;QAC9B,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAgDrB;;;OAGG;IACH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,gBAAgB,CAAC;KAC3B,GAAG,cAAc,CAAC,UAAU,CAAC;IA0B9B;;;OAGG;WACU,cAAc,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,CAAC,EAAE,gBAAgB,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC;CA2CpB"}